Add workspace trust checks to agentic search and CLI invocation

- Update `agentic-search.ts` and `invoke-agentic-cli.ts` to enforce VS Code Workspace Trust by checking `vscode.workspace.isTrusted`, preventing execution vulnerabilities that trigger when using the 'Search' feature in a malicious repository.
- translate newly introduced warning strings [Changes]

└── apps
    └── editor
        └── src
            ├── commands
            │   └── agentic-search-command
            │       └── agentic-search-command.ts
            ├── features
            │   └── agentic-search
            │       ├── agentic-search.ts
            │       └── index.ts
            ├── i18n
            │   ├── index.ts
            │   └── translations
            │       ├── features
            │       │   ├── agentic-search.ts
            │       │   └── index.ts
            │       ├── utils
            │       │   ├── agentic-cli-invocation.ts
            │       │   └── index.ts
            │       └── views
            │           └── prompt
            │               └── handlers
            │                   ├── handle-agentic-search.ts
            │                   └── handle-invoke-agentic-cli.ts
            ├── utils
            │   └── agentic-cli-invocation
            │       ├── index.ts
            │       └── invoke-agentic-cli.ts
            └── views
                └── prompt
                    └── backend
                        └── message-handlers
                            ├── handle-agentic-search.ts
                            └── handle-invoke-agentic-cli.ts

Author: robertpiosik

apps/editor/src/features/agentic-search/agentic-search.ts

@@ -29,6 +29,13 @@ export const agentic_search = async (params: {
   | undefined
   | 'back'
 > => {
+  if (!vscode.workspace.isTrusted) {
+    vscode.window.showWarningMessage(
+      t('features.agentic-search.error.workspace-not-trusted')
+    )
+    return undefined
+  }
+
   const roots = params.workspace_provider.get_workspace_roots()
 
   if (roots.length == 0) {

apps/editor/src/i18n/translations/features/agentic-search.ts

@@ -0,0 +1,21 @@
+export const translations = {
+  'features.agentic-search.error.workspace-not-trusted': {
+    en: 'Workspace is not trusted. Agentic search is disabled.',
+    pl: 'Obszar roboczy nie jest zaufany. Wyszukiwanie agentowe jest wyłączone.',
+    'zh-cn': '工作区不受信任。智能体搜索已被禁用。',
+    ja: 'ワークスペースは信頼されていません。エージェント検索は無効になっています。',
+    'zh-tw': '工作區不受信任。智能體搜尋已被停用。',
+    de: 'Der Arbeitsbereich ist nicht vertrauenswürdig. Die agentische Suche ist deaktiviert.',
+    es: 'El espacio de trabajo no es de confianza. La búsqueda de agentes está deshabilitada.',
+    fr: "L'espace de travail n'est pas approuvé. La recherche d'agents est désactivée.",
+    'pt-br':
+      'O espaço de trabalho não é confiável. A pesquisa de agentes está desativada.',
+    ru: 'Рабочая область не является доверенной. Агентный поиск отключен.',
+    ko: '작업 공간을 신뢰할 수 없습니다. 에이전트 검색이 비활성화되었습니다.',
+    it: "L'area di lavoro non è attendibile. La ricerca agenti è disabilitata.",
+    tr: 'Çalışma alanı güvenilir değil. Aracı araması devre dışı bırakıldı.',
+    cs: 'Pracovní prostor není důvěryhodný. Agentní vyhledávání je zakázáno.',
+    hu: 'A munkaterület nem megbízható. Az ügynökkeresés le van tiltva.',
+    bg: 'Работното пространство не е надеждно. Агентното търсене е деактивирано.'
+  }
+} as const

apps/editor/src/i18n/translations/features/index.ts

@@ -1,9 +1,11 @@
 import { translations as search_files } from './search-files'
 import { translations as checkpoints } from './checkpoints'
 import { translations as context_restoration } from './context-restoration'
+import { translations as agentic_search } from './agentic-search'
 
 export const translations = {
   ...search_files,
   ...checkpoints,
-  ...context_restoration
+  ...context_restoration,
+  ...agentic_search
 }

apps/editor/src/i18n/translations/utils/agentic-cli-invocation.ts

@@ -215,6 +215,25 @@ export const translations = {
     hu: 'A {agent} CLI nincs telepítve ezen a számítógépen.',
     bg: 'CLI {agent} не е инсталиран на този компютър.'
   },
+  'utils.agentic-cli-invocation.error.workspace-not-trusted': {
+    en: 'Workspace is not trusted. Agentic CLI invocation is disabled.',
+    pl: 'Obszar roboczy nie jest zaufany. Wywoływanie agenta z CLI jest wyłączone.',
+    'zh-cn': '工作区不受信任。智能体 CLI 调用已被禁用。',
+    ja: 'ワークスペースは信頼されていません。エージェント CLI の呼び出しは無効になっています。',
+    'zh-tw': '工作區不受信任。智能體 CLI 呼叫已被停用。',
+    de: 'Der Arbeitsbereich ist nicht vertrauenswürdig. Der Aufruf der Agenten-CLI ist deaktiviert.',
+    es: 'El espacio de trabajo no es de confianza. La invocación del CLI del agente está deshabilitada.',
+    fr: "L'espace de travail n'est pas approuvé. L'invocation du CLI de l'agent est désactivée.",
+    'pt-br':
+      'O espaço de trabalho não é confiável. A invocação do CLI do agente está desativada.',
+    ru: 'Рабочая область не является доверенной. Вызов агентного CLI отключен.',
+    ko: '작업 공간을 신뢰할 수 없습니다. 에이전트 CLI 호출이 비활성화되었습니다.',
+    it: "L'area di lavoro non è attendibile. L'invocazione della CLI dell'agente è disabilitata.",
+    tr: 'Çalışma alanı güvenilir değil. Aracı CLI çağrısı devre dışı bırakıldı.',
+    cs: 'Pracovní prostor není důvěryhodný. Vyvolání agentního CLI je zakázáno.',
+    hu: 'A munkaterület nem megbízható. Az ügynök CLI hívása le van tiltva.',
+    bg: 'Работното пространство не е надеждно. Извикването на агентния CLI е деактивирано.'
+  },
   'utils.agentic-cli-invocation.error.failed': {
     en: 'Agent execution failed: {error}',
     pl: 'Wykonywanie agenta nie powiodło się: {error}',

apps/editor/src/utils/agentic-cli-invocation/invoke-agentic-cli.ts

@@ -45,6 +45,13 @@ export const invoke_agentic_cli = async (params: {
 }): Promise<
   { agent_output: string; selected_root: string } | undefined | 'back'
 > => {
+  if (!vscode.workspace.isTrusted) {
+    vscode.window.showWarningMessage(
+      t('utils.agentic-cli-invocation.error.workspace-not-trusted')
+    )
+    return undefined
+  }
+
   const roots = params.workspace_provider.get_workspace_roots()
 
   if (roots.length == 0) {