Merge branch 'main' of https://github.com/continuedev/continue into dallin/fix-yolo-mode-apply

Author: RomneyDa

.github/workflows/cli-pr-checks.yml

@@ -25,6 +25,14 @@ jobs:
           cache: "npm"
           cache-dependency-path: extensions/cli/package-lock.json
 
+      - name: Setup packages
+        uses: ./.github/actions/setup-packages
+      - name: Setup core component
+        uses: ./.github/actions/setup-component
+        with:
+          component: core
+          include-root: true
+
       - name: Install dependencies
         run: |
           cd extensions/cli
@@ -53,6 +61,14 @@ jobs:
           cache: "npm"
           cache-dependency-path: extensions/cli/package-lock.json
 
+      - name: Setup packages
+        uses: ./.github/actions/setup-packages
+      - name: Setup core component
+        uses: ./.github/actions/setup-component
+        with:
+          component: core
+          include-root: true
+
       - name: Install dependencies
         run: |
           cd extensions/cli

.github/workflows/jetbrains-release.yaml

@@ -120,7 +120,7 @@ jobs:
 
       # # Set up Java environment for the next steps
       - name: Setup Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: zulu
           java-version: 17
@@ -433,7 +433,7 @@ jobs:
 
       # Set up Java environment for the next steps
       - name: Setup Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: zulu
           java-version: 17
@@ -486,7 +486,7 @@ jobs:
 
       # Set up Java environment for the next steps
       - name: Setup Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: zulu
           java-version: 17
@@ -517,7 +517,7 @@ jobs:
 
       # Set up Java environment for the next steps
       - name: Setup Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: zulu
           java-version: 17

.github/workflows/stable-release.yml

@@ -67,6 +67,7 @@ jobs:
       - name: Find beta version to promote
         if: ${{ (inputs.release_type || 'promote-beta') == 'promote-beta' }}
         id: find_beta
+        working-directory: extensions/cli
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
@@ -116,6 +117,7 @@ jobs:
 
       - name: Download and verify beta package
         if: ${{ (inputs.release_type || 'promote-beta') == 'promote-beta' }}
+        working-directory: extensions/cli
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
@@ -131,6 +133,7 @@ jobs:
 
       - name: Prepare package for beta promotion
         if: ${{ (inputs.release_type || 'promote-beta') == 'promote-beta' }}
+        working-directory: extensions/cli
         run: |
           # Copy the beta package contents
           cp -r package/* .
@@ -140,6 +143,7 @@ jobs:
 
       - name: Prepare package for direct stable release
         if: ${{ inputs.release_type == 'direct-stable' }}
+        working-directory: extensions/cli
         run: |
           # Install dependencies for direct build
           npm ci
@@ -148,9 +152,11 @@ jobs:
           npm version ${{ inputs.stable_version }} --no-git-tag-version
 
       - name: Build (verification step)
+        working-directory: extensions/cli
         run: npm run build
 
       - name: Run tests (verification step)
+        working-directory: extensions/cli
         run: npm test
 
       - name: Set final version
@@ -167,6 +173,7 @@ jobs:
           echo "release_notes=$RELEASE_NOTES" >> $GITHUB_OUTPUT
 
       - name: Publish stable to npm
+        working-directory: extensions/cli
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: |
@@ -196,4 +203,4 @@ jobs:
         run: |
           # Mark the original beta release as superseded
           gh release edit "v${{ steps.find_beta.outputs.beta_version }}" \
-            --notes "This beta version has been promoted to stable as v${{ steps.final_version.outputs.stable_version }}."
+            --notes "This beta version has been promoted to stable as v${{ steps.final_version.outputs.stable_version }}."

.github/workflows/submit-github-dependency-graph.yml

@@ -14,7 +14,7 @@ jobs:
       - name: Checkout sources
         uses: actions/checkout@v5
       - name: Setup Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: "temurin"
           java-version: 17

.vscode/settings.json

@@ -42,7 +42,8 @@
     "extensions/vscode/e2e/_output": true,
     "extensions/vscode/e2e/storage": true,
     "extensions/vscode/e2e/vsix": true,
-    "extensions/.continue-debug": true
+    "extensions/.continue-debug": true,
+    "extensions/cli/dist/**": true
     // "sync/**": true
   },
   "editor.formatOnSave": true,

binary/package-lock.json

@@ -6,12 +6,13 @@ import { DEFAULT_AUTOCOMPLETE_OPTS } from "../util/parameters.js";
 import { shouldCompleteMultiline } from "./classification/shouldCompleteMultiline.js";
 import { ContextRetrievalService } from "./context/ContextRetrievalService.js";
 
+import { isSecurityConcern } from "../indexing/ignore.js";
 import { BracketMatchingService } from "./filtering/BracketMatchingService.js";
 import { CompletionStreamer } from "./generation/CompletionStreamer.js";
 import { postprocessCompletion } from "./postprocessing/index.js";
 import { shouldPrefilter } from "./prefiltering/index.js";
-import { renderPromptWithTokenLimit } from "./templating/index.js";
 import { getAllSnippetsWithoutRace } from "./snippets/index.js";
+import { renderPromptWithTokenLimit } from "./templating/index.js";
 import { GetLspDefinitionsFunction } from "./types.js";
 import { AutocompleteDebouncer } from "./util/AutocompleteDebouncer.js";
 import { AutocompleteLoggingService } from "./util/AutocompleteLoggingService.js";
@@ -150,6 +151,10 @@ export class CompletionProvider {
         return undefined;
       }
 
+      if (isSecurityConcern(input.filepath)) {
+        return undefined;
+      }
+
       const options = await this._getAutocompleteOptions(llm);
 
       // Debounce

core/autocomplete/CompletionProvider.ts

@@ -4,7 +4,7 @@ import { IDE } from "../..";
 import {
   getGlobalContinueIgArray,
   getWorkspaceContinueIgArray,
-} from "../../indexing/ignore";
+} from "../../indexing/continueignore";
 import { getConfigJsonPath } from "../../util/paths";
 import { findUriInDirs } from "../../util/uri";
 import { HelperVars } from "../util/HelperVars";

core/autocomplete/prefiltering/index.ts

@@ -1,11 +1,8 @@
 import ignore from "ignore";
 
 import type { FileType, IDE, SlashCommand } from "../../..";
-import {
-  DEFAULT_IGNORE,
-  getGlobalContinueIgArray,
-  gitIgArrayFromFile,
-} from "../../../indexing/ignore";
+import { getGlobalContinueIgArray } from "../../../indexing/continueignore";
+import { DEFAULT_IGNORE, gitIgArrayFromFile } from "../../../indexing/ignore";
 import { renderChatMessage } from "../../../util/messageContent";
 import {
   findUriInDirs,

core/commands/slash/built-in-legacy/onboard.ts

@@ -6,6 +6,7 @@ import {
   ContextSubmenuItem,
   LoadSubmenuItemsArgs,
 } from "../../";
+import { isSecurityConcern } from "../../indexing/ignore";
 import { walkDirs } from "../../indexing/walkDir";
 import {
   getShortestUniqueRelativeUriPaths,
@@ -36,6 +37,21 @@ class FileContextProvider extends BaseContextProvider {
       await extras.ide.getWorkspaceDirs(),
     );
 
+    if (isSecurityConcern(relativePathOrBasename)) {
+      return [
+        {
+          description: last2Parts,
+          content:
+            "Content redacted, this file cannot be viewed for security reasons",
+          name: baseName,
+          uri: {
+            type: "file",
+            value: fileUri,
+          },
+        },
+      ];
+    }
+
     return [
       {
         name: baseName,