DYN-9151: Show trust warning popup before Open/Insert command execution

[Copilot]

Opening a .dyn from an untrusted location showed the trust popup only after synchronous graph load completed, which made the warning appear delayed on large graphs. This change moves popup activation ahead of heavy open/insert work and reconciles state after load.

• Behavioral fix: pre-load popup activation in DynamoViewModel.Open and Insert

  • Computes displayTrustWarning as before (including .dyf exclusion).
  • Sets FileTrustViewModel popup state before executing OpenFileCommand / InsertFileCommand.
  • Preserves run blocking via RunSettings.ForceBlockRun.

• Post-load reconciliation

  • Calls ShowHideFileTrustWarningIfCurrentWorkspaceTrusted() after command execution (only when warning was pre-shown) to resolve cases where trust state changed during load (e.g., location became trusted or warnings disabled).

• Failure-path cleanup

  • Adds ResetTrustWarningStateIfNeeded(...) to clear popup/block-run state if open/insert throws after pre-showing the warning.

• Regression coverage

  • Adds command-order tests in DynamoViewTests:
    • WhenOpeningWorkspaceThenTrustWarningIsShownBeforeCommand
    • WhenInsertingWorkspaceThenTrustWarningIsShownBeforeCommand
  • Both assert popup state is already true at command start (Model.CommandStarting) for the corresponding command type.

if (displayTrustWarning)
{
    FileTrustViewModel.AllowOneTimeTrust = false;
    FileTrustViewModel.DynFileDirectoryName = directoryName;
    FileTrustViewModel.ShowWarningPopup = true;
    (HomeSpaceViewModel as HomeWorkspaceViewModel)?.UpdateRunStatusMsgBasedOnStates();
    trustWarningWasShown = true;
}

ExecuteCommand(new DynamoModel.OpenFileCommand(filePath, forceManualMode, isTemplate));

if (trustWarningWasShown)
{
    ShowHideFileTrustWarningIfCurrentWorkspaceTrusted();
}

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• npm.autodesk.com
  • Triggering command: /usr/bin/pwsh pwsh -ExecutionPolicy Bypass -File /home/REDACTED/work/Dynamo/Dynamo/src/setnpmreg.ps1 (dns block)
  • Triggering command: /usr/bin/pwsh pwsh -ExecutionPolicy ByPass -Command & '/home/REDACTED/work/Dynamo/Dynamo/src/setnpmreg.ps1' (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

[sonarqubecloud]

Quality Gate failed

Failed conditions
3.8% Duplication on New Code (required ≤ 3%)

See analysis details on SonarQube Cloud