19430fdeca
Line counting.
2026-04-13 20:52:04 -07:00
e2b69dc267
PR cleanup.
2026-04-13 20:41:55 -07:00
6621bd88c8
Format.
2026-04-13 19:44:05 -07:00
44d8db20c8
feat(core): use shell for file operations under sandboxing
...
When `security.toolSandboxing` is enabled, the CLI now excludes the lower-fidelity
tools (`grep_search`, `replace`, `write_file`, `read_file`) from the main agent.
Instead, it relies on `run_shell_command` (e.g. `sed`, `grep`, `cat`, `echo >`)
to perform these actions.
To maintain UX and telemetry parity, `run_shell_command` now infers common file
operations. When detected:
- The UI title is updated to a high-fidelity display (e.g. "Shell (Read File)",
"Shell (Replace)").
- File editing/writing commands (like `sed -i` or `echo >`) generate a predicted
diff view for the user during confirmation.
- The execution emits the standard `FileOperationEvent` telemetry using the
canonical tool names, ensuring metrics consistency.
2026-04-13 19:23:50 -07:00
b7c86b5497
UX for topic narration tool ( #24079 )
2026-03-28 21:33:38 +00:00
3eebb75b7a
feat(core): agnostic background task UI with CompletionBehavior ( #22740 )
...
Co-authored-by: mkorwel <matt.korwel@gmail.com >
2026-03-28 21:27:51 +00:00
afc1d50c20
feat(core): implement tool-based topic grouping (Chapters) ( #23150 )
...
Co-authored-by: Christian Gunderman <gundermanc@google.com >
2026-03-28 01:28:25 +00:00
b5529c2475
fix(core): resolve ACP Operation Aborted Errors in grep_search ( #23821 )
...
Co-authored-by: Sri Pasumarthi <sripas@google.com >
2026-03-27 23:12:34 +00:00
ba71ffa736
fix(core): switch to subshells for shell tool wrapping to fix heredocs and edge cases ( #24024 )
2026-03-27 20:34:39 +00:00
8868b34c75
refactor(core): delegate sandbox denial parsing to SandboxManager ( #23928 )
2026-03-26 22:10:15 +00:00
a6c7affedb
fix(core): conditionally expose additional_permissions in shell tool ( #23729 )
...
Co-authored-by: Sandy Tao <sandytao520@icloud.com >
2026-03-25 01:46:15 +00:00
71a9131709
chore(tools): add toJSON to tools and invocations to reduce logging verbosity ( #22899 )
2026-03-24 23:08:29 +00:00
11dc33eab7
fix(core): prevent premature MCP discovery completion ( #23637 )
2026-03-24 20:53:21 +00:00
dcedc42979
fix(plan): sandbox path resolution in Plan Mode to prevent hallucinations ( #22737 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-03-24 13:19:29 +00:00
36e6445dba
feat(sandbox): dynamic macOS sandbox expansion and worktree support ( #23301 )
2026-03-24 04:48:13 +00:00
a1f9af3fa7
fix(core): accurately reflect subagent tool failure in UI ( #23187 )
2026-03-24 01:56:00 +00:00
89ca78837e
refactor(cli,core): foundational layout, identity management, and type safety ( #23286 )
2026-03-24 01:49:51 +00:00
84caf00cd4
fix: ACP: separate conversational text from execute tool command title ( #23179 )
2026-03-24 00:39:15 +00:00
b35c12d8d0
fix(core)!: Force policy config to specify toolName ( #23330 )
2026-03-23 22:35:08 +00:00
37857ab956
fix(core): properly support allowRedirect in policy engine ( #23579 )
2026-03-23 20:32:50 +00:00
4a3d9414ef
fix(core): enable global session and persistent approval for web_fetch ( #23295 )
...
Co-authored-by: Spencer <spencertang@google.com >
2026-03-21 10:32:07 -07:00
8f391585ab
Disallow and suppress misused spread operator. ( #23294 )
2026-03-21 05:21:53 +00:00
1a70fdd364
chore(lint): enforce zero warnings and cleanup syntax restrictions ( #22902 )
2026-03-21 04:01:48 +00:00
d1dc4902fd
fix(hooks): support 'ask' decision for BeforeTool hooks ( #21146 )
2026-03-21 03:52:39 +00:00
1725ec346b
feat(plan): support plan mode in non-interactive mode ( #22670 )
2026-03-18 20:00:26 +00:00
b8719bcd47
feat: add 'blocked' status to tasks and todos ( #22735 )
2026-03-17 23:24:26 +00:00
2504105a1c
feat(core): multi-registry architecture and tool filtering for subagents ( #22712 )
2026-03-17 20:54:07 +00:00
695bcaea0d
feat(core): add foundation for subagent tool isolation ( #22708 )
2026-03-17 03:54:33 +00:00
61fd71dc29
fix(plan): allowlist get_internal_docs in Plan Mode ( #22668 )
2026-03-17 00:34:30 +00:00
605432ea70
refactor(core): replace positional execute params with ExecuteOptions bag ( #22674 )
2026-03-16 21:50:24 +00:00
990d010ecf
feat(core): implement Stage 2 security and consistency improvements for web_fetch ( #22217 )
2026-03-16 21:38:53 +00:00
b91f75cd6d
fix(core): fix three JIT context bugs in read_file, read_many_files, and memoryDiscovery ( #22679 )
2026-03-16 20:10:50 +00:00
bba9c07541
feat(tracker): polish UI sorting and formatting ( #22437 )
2026-03-16 19:18:01 +00:00
ef5627eece
Disallow Object.create() and reflect. ( #22408 )
2026-03-16 16:24:27 +00:00
abd9e23337
fix(core): skip discovery for incomplete MCP configs and resolve merge race condition ( #22494 )
2026-03-15 18:28:26 +00:00
6061d8cac7
fix(core): merge user settings with extension-provided MCP servers ( #22484 )
2026-03-15 02:46:06 +00:00
fa024133e6
feat(core): integrate SandboxManager to sandbox all process-spawning tools ( #22231 )
2026-03-13 21:11:51 +00:00
dd8d4c98b3
feat(tracker): return TodoList display for tracker tools ( #22060 )
2026-03-13 18:18:33 +00:00
7b4a822b0e
feat(core): instrument file system tools for JIT context discovery ( #22082 )
2026-03-13 03:44:42 +00:00
de656f01d7
feat(core): Fully migrate packages/core to AgentLoopContext. ( #22115 )
2026-03-13 01:56:31 +00:00
1d2585dba6
fix(core): explicitly pass messageBus to policy engine for MCP tool saves ( #22255 )
2026-03-13 01:31:13 +00:00
4d393f9dca
feat(a2a): enable native gRPC support and protocol routing ( #21403 )
...
Co-authored-by: Adam Weidman <adamfweidman@google.com >
2026-03-12 21:36:50 +00:00
663d9c0537
feat(core): implement Stage 1 improvements for webfetch tool ( #21313 )
2026-03-12 20:13:00 +00:00
cd7dced951
feat(core): implement model-driven parallel tool scheduler ( #21933 )
2026-03-12 17:03:44 +00:00
7506b00488
fix(core): handle policy ALLOW for exit_plan_mode ( #21802 )
2026-03-12 14:43:40 +00:00
8432bcee75
fix(core): resolve MCP tool FQN validation, schema export, and wildcards in subagents ( #22069 )
2026-03-12 14:17:36 +00:00
10ab958378
refactor(core): extract ExecutionLifecycleService for tool backgrounding ( #21717 )
2026-03-12 04:03:54 +00:00
f090736ebc
fix(core): secure argsPattern and revert WEB_FETCH_TOOL_NAME escalation ( #22104 )
...
Co-authored-by: Taylor Mullen <ntaylormullen@google.com >
2026-03-12 02:26:21 +00:00
067e09a40b
feat(telemetry): implement retry attempt telemetry for network related retries ( #22027 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-03-11 18:55:48 +00:00
f8ad3a200a
Feat/retry fetch notifications ( #21813 )
2026-03-11 03:33:50 +00:00
Christian Gunderman