galz10 296be23bd6 fix(sandbox): enforce read-only PLAN mode in tool sandboxing ...

- Refactor SandboxedFileSystemService to use granular read/write permissions.
- Implement updateSandboxManager to propagate mode transitions to the file system service.
- Update platform sandbox managers (macOS, Linux, Windows) to treat allowedPaths and includeDirectories as read-only when workspaceWrite is false.
- Improve path validation in SandboxedFileSystemService using WorkspaceContext to correctly handle ~/.gemini/tmp.

2026-04-03 12:25:46 -07:00

..

a2a-server

feat(core): Land ContextCompressionService (#24483)

2026-04-02 16:22:04 +00:00

cli

feat(cli): enable compact tool output by default (#24509) (#24510)

2026-04-03 17:59:12 +00:00

core

fix(sandbox): enforce read-only PLAN mode in tool sandboxing

2026-04-03 12:25:46 -07:00

devtools

Add instructions for how to start react in prod and force react to prod mode (#24590)

2026-04-03 04:42:32 +00:00

sdk

…

test-utils

chore(test-utils): switch integration tests to use PREVIEW_GEMINI_MODEL (#24276)

2026-03-31 00:31:04 +00:00

vscode-ide-companion

Add instructions for how to start react in prod and force react to prod mode (#24590)

2026-04-03 04:42:32 +00:00