19430fdeca
Line counting.
2026-04-13 20:52:04 -07:00
e2b69dc267
PR cleanup.
2026-04-13 20:41:55 -07:00
6621bd88c8
Format.
2026-04-13 19:44:05 -07:00
44d8db20c8
feat(core): use shell for file operations under sandboxing
...
When `security.toolSandboxing` is enabled, the CLI now excludes the lower-fidelity
tools (`grep_search`, `replace`, `write_file`, `read_file`) from the main agent.
Instead, it relies on `run_shell_command` (e.g. `sed`, `grep`, `cat`, `echo >`)
to perform these actions.
To maintain UX and telemetry parity, `run_shell_command` now infers common file
operations. When detected:
- The UI title is updated to a high-fidelity display (e.g. "Shell (Read File)",
"Shell (Replace)").
- File editing/writing commands (like `sed -i` or `echo >`) generate a predicted
diff view for the user during confirmation.
- The execution emits the standard `FileOperationEvent` telemetry using the
canonical tool names, ensuring metrics consistency.
2026-04-13 19:23:50 -07:00
a255529c6b
fix(a2a-server): prioritize ADC before evaluating headless constraints for auth initialization ( #23614 )
2026-03-30 12:26:15 +00:00
b7c86b5497
UX for topic narration tool ( #24079 )
2026-03-28 21:33:38 +00:00
3eebb75b7a
feat(core): agnostic background task UI with CompletionBehavior ( #22740 )
...
Co-authored-by: mkorwel <matt.korwel@gmail.com >
2026-03-28 21:27:51 +00:00
afc1d50c20
feat(core): implement tool-based topic grouping (Chapters) ( #23150 )
...
Co-authored-by: Christian Gunderman <gundermanc@google.com >
2026-03-28 01:28:25 +00:00
ae123c547c
fix(sandbox): implement Windows Mandatory Integrity Control for GeminiSandbox ( #24057 )
2026-03-28 00:14:35 +00:00
b5529c2475
fix(core): resolve ACP Operation Aborted Errors in grep_search ( #23821 )
...
Co-authored-by: Sri Pasumarthi <sripas@google.com >
2026-03-27 23:12:34 +00:00
9e74a7ec18
feat(core): implement windows sandbox expansion and denial detection ( #24027 )
2026-03-27 22:35:01 +00:00
4034c030e7
feat(context): add configurable memoryBoundaryMarkers setting ( #24020 )
2026-03-27 21:51:32 +00:00
ba71ffa736
fix(core): switch to subshells for shell tool wrapping to fix heredocs and edge cases ( #24024 )
2026-03-27 20:34:39 +00:00
320c8aba4c
feat(core): Land AgentHistoryProvider. ( #23978 )
2026-03-27 19:22:35 +00:00
29031ea7cf
refactor(core): improve ignore resolution and fix directory-matching bug ( #23816 )
2026-03-27 17:12:26 +00:00
f3977392e6
revert(core): support custom base URL via env vars ( #23976 )
2026-03-27 17:10:14 +00:00
535667baf6
feat(core): add forbiddenPaths to GlobalSandboxOptions and refactor createSandboxManager ( #23936 )
2026-03-27 16:57:26 +00:00
104587bae8
feat(core): subagent isolation and cleanup hardening ( #23903 )
2026-03-27 03:43:39 +00:00
aca8e1af05
fix(core): explicitly set error names to avoid bundling renaming issues ( #23913 )
2026-03-27 03:40:49 +00:00
750dec5d8d
fix(acp): Update allow approval policy flow for ACP clients to fix config persistence and compatible with TUI ( #23818 )
2026-03-27 01:42:17 +00:00
8868b34c75
refactor(core): delegate sandbox denial parsing to SandboxManager ( #23928 )
2026-03-26 22:10:15 +00:00
73dd7328df
feat(core): implement persistent browser session management ( #21306 )
...
Co-authored-by: Gaurav <39389231+gsquared94@users.noreply.github.com >
Co-authored-by: cynthialong0-0 <82900738+cynthialong0-0@users.noreply.github.com >
2026-03-26 21:33:37 +00:00
d25ce0e143
fix(core): remove shell outputChunks buffer caching to prevent memory bloat and sanitize prompt input ( #23751 )
2026-03-26 21:16:07 +00:00
30397816da
feat(sandbox): implement secret visibility lockdown for env files ( #23712 )
...
Co-authored-by: Tommaso Sciortino <sciortino@gmail.com >
2026-03-26 20:35:21 +00:00
d33170931c
fix(core): allow disabling environment variable redaction ( #23927 )
2026-03-26 20:04:44 +00:00
c92ae8a359
feat(core): define TrajectoryProvider interface ( #23050 )
2026-03-26 19:24:06 +00:00
9762bf2965
fix(plan): after exiting plan mode switches model to a flash model ( #23885 )
2026-03-26 18:45:03 +00:00
c888da5f73
fix(core): replace hardcoded non-interactive ASK_USER denial with explicit policy rules ( #23668 )
2026-03-26 18:35:12 +00:00
5755ec2dcf
fix(browser): keep input blocker active across navigations ( #22562 )
...
Co-authored-by: cynthialong0-0 <82900738+cynthialong0-0@users.noreply.github.com >
2026-03-26 16:54:49 +00:00
30e0ab102a
feat(sandbox): dynamic Linux sandbox expansion and worktree support ( #23692 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-03-26 01:58:45 +00:00
ae3dbab38a
fix(core): strip leading underscores from error types in telemetry ( #23824 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-03-25 23:34:18 +00:00
20fd405f9c
fix: Chat logs and errors handle tail tool calls correctly ( #22460 )
...
Co-authored-by: Abhi <43648792+abhipatel12@users.noreply.github.com >
2026-03-25 22:17:30 +00:00
3ada29fb51
feat(core,ui): Add experiment-gated support for gemini flash 3.1 lite ( #23794 )
2026-03-25 20:28:49 +00:00
86111c4d54
feat(browser): dynamically discover read-only tools ( #23805 )
2026-03-25 19:16:48 +00:00
830f7dec61
fix(cli): resolve TTY hang on headless environments by unconditionally resuming process.stdin before React Ink launch ( #23673 )
2026-03-25 18:18:43 +00:00
1b052df52f
feat(core): implement Windows sandbox dynamic expansion Phase 1 and 2.1 ( #23691 )
2026-03-25 17:54:45 +00:00
f11bd3d079
fix(core): thread AbortSignal to chat compression requests ( #20405 ) ( #20778 )
...
Co-authored-by: Tommaso Sciortino <sciortino@gmail.com >
2026-03-25 16:57:59 +00:00
028d0368d5
fix(policy): relax write_file argsPattern in plan mode to allow paths without session ID ( #23695 )
2026-03-25 16:06:45 +00:00
6deee11449
fix(browser): add proxy bypass constraint to domain restriction system prompt ( #23229 )
...
Co-authored-by: cynthialong0-0 <82900738+cynthialong0-0@users.noreply.github.com >
2026-03-25 15:59:21 +00:00
bbf5c2fe95
fix(browser): detect embedded URLs in query params to prevent allowedDomains bypass ( #23225 )
...
Co-authored-by: cynthialong0-0 <82900738+cynthialong0-0@users.noreply.github.com >
2026-03-25 15:26:00 +00:00
109a7dc531
test(core): install bubblewrap on Linux CI for sandbox integration tests ( #23583 )
2026-03-25 14:29:46 +00:00
0c919857fa
feat(core): support inline agentCardJson for remote agents ( #23743 )
2026-03-25 04:03:51 +00:00
d78f54a08a
Fix dynamic model routing for gemini 3.1 pro to customtools model ( #23641 )
...
Co-authored-by: Sehoon Shon <sshon@google.com >
2026-03-25 03:16:44 +00:00
5b7f7b30a7
refactor(core): standardize OS-specific sandbox tests and extract linux helper methods ( #23715 )
2026-03-25 02:37:32 +00:00
a6c7affedb
fix(core): conditionally expose additional_permissions in shell tool ( #23729 )
...
Co-authored-by: Sandy Tao <sandytao520@icloud.com >
2026-03-25 01:46:15 +00:00
578d656de9
feat(sandbox): implement forbiddenPaths for OS-specific sandbox managers ( #23282 )
...
Co-authored-by: Gal Zahavi <38544478+galz10@users.noreply.github.com >
2026-03-25 01:23:51 +00:00
71a9131709
chore(tools): add toJSON to tools and invocations to reduce logging verbosity ( #22899 )
2026-03-24 23:08:29 +00:00
397ff84b0e
Refine onboarding metrics to log the duration explicitly and use the tier name. ( #23678 )
2026-03-24 22:19:36 +00:00
ee425aefa6
fix(core): improve agent loader error formatting for empty paths ( #23690 )
2026-03-24 22:04:28 +00:00
466671eed4
feat(browser): add maxActionsPerTask for browser agent setting ( #23216 )
2026-03-24 21:40:48 +00:00
Christian Gunderman