@codingame/monaco-vscode-api 25.1.1 → 26.0.0

package/vscode/src/vs/workbench/contrib/terminalContrib/chatAgentTools/common/terminalChatAgentToolsConfiguration.js

@@ -1,12 +1,11 @@
 
 import { localize } from '../../../../../nls.js';
 import { TerminalSettingId } from '../../../../../platform/terminal/common/terminal.js';
-import product from '../../../../../platform/product/common/product.js';
 import { terminalProfileBaseProperties } from '../../../../../platform/terminal/common/terminalPlatformConfiguration.js';
 import { PolicyCategory } from '../../../../../base/common/policy.js';
 
 var TerminalChatAgentToolsSettingId;
-(function (TerminalChatAgentToolsSettingId) {
+(function(TerminalChatAgentToolsSettingId) {
     TerminalChatAgentToolsSettingId["EnableAutoApprove"] = "chat.tools.terminal.enableAutoApprove";
     TerminalChatAgentToolsSettingId["AutoApprove"] = "chat.tools.terminal.autoApprove";
     TerminalChatAgentToolsSettingId["AutoApproveWorkspaceNpmScripts"] = "chat.tools.terminal.autoApproveWorkspaceNpmScripts";
@@ -15,7 +14,12 @@ var TerminalChatAgentToolsSettingId;
     TerminalChatAgentToolsSettingId["ShellIntegrationTimeout"] = "chat.tools.terminal.shellIntegrationTimeout";
     TerminalChatAgentToolsSettingId["AutoReplyToPrompts"] = "chat.tools.terminal.autoReplyToPrompts";
     TerminalChatAgentToolsSettingId["OutputLocation"] = "chat.tools.terminal.outputLocation";
+    TerminalChatAgentToolsSettingId["TerminalSandboxEnabled"] = "chat.tools.terminal.sandbox.enabled";
+    TerminalChatAgentToolsSettingId["TerminalSandboxNetwork"] = "chat.tools.terminal.sandbox.network";
+    TerminalChatAgentToolsSettingId["TerminalSandboxLinuxFileSystem"] = "chat.tools.terminal.sandbox.linuxFileSystem";
+    TerminalChatAgentToolsSettingId["TerminalSandboxMacFileSystem"] = "chat.tools.terminal.sandbox.macFileSystem";
     TerminalChatAgentToolsSettingId["PreventShellHistory"] = "chat.tools.terminal.preventShellHistory";
+    TerminalChatAgentToolsSettingId["EnforceTimeoutFromModel"] = "chat.tools.terminal.enforceTimeoutFromModel";
     TerminalChatAgentToolsSettingId["TerminalProfileLinux"] = "chat.tools.terminal.terminalProfile.linux";
     TerminalChatAgentToolsSettingId["TerminalProfileMacOs"] = "chat.tools.terminal.terminalProfile.osx";
     TerminalChatAgentToolsSettingId["TerminalProfileWindows"] = "chat.tools.terminal.terminalProfile.windows";
@@ -26,166 +30,131 @@ var TerminalChatAgentToolsSettingId;
     TerminalChatAgentToolsSettingId["DeprecatedAutoApprove4"] = "github.copilot.chat.agent.terminal.denyList";
 })(TerminalChatAgentToolsSettingId || (TerminalChatAgentToolsSettingId = {}));
 const autoApproveBoolean = {
-    type: 'boolean',
-    enum: [
-        true,
-        false,
-    ],
-    enumDescriptions: [
-        ( localize(12096, "Automatically approve the pattern.")),
-        ( localize(12097, "Require explicit approval for the pattern.")),
-    ],
+    type: "boolean",
+    enum: [true, false],
+    enumDescriptions: [( localize(12437, "Automatically approve the pattern.")), ( localize(12438, "Require explicit approval for the pattern."))],
     description: ( localize(
-        12098,
+        12439,
         "The start of a command to match against. A regular expression can be provided by wrapping the string in `/` characters."
-    )),
+    ))
 };
 const terminalChatAgentProfileSchema = {
-    type: 'object',
-    required: ['path'],
+    type: "object",
+    required: ["path"],
     properties: {
         path: {
-            description: ( localize(12099, "A path to a shell executable.")),
-            type: 'string',
+            description: ( localize(12440, "A path to a shell executable.")),
+            type: "string"
         },
-        ...terminalProfileBaseProperties,
+        ...terminalProfileBaseProperties
     }
 };
 const terminalChatAgentToolsConfiguration = {
     [TerminalChatAgentToolsSettingId.EnableAutoApprove]: {
         description: ( localize(
-            12100,
+            12441,
             "Controls whether to allow auto approval in the run in terminal tool."
         )),
-        type: 'boolean',
+        type: "boolean",
         default: true,
         policy: {
-            name: 'ChatToolsTerminalEnableAutoApprove',
+            name: "ChatToolsTerminalEnableAutoApprove",
             category: PolicyCategory.IntegratedTerminal,
-            minimumVersion: '1.104',
+            minimumVersion: "1.104",
             localization: {
                 description: {
-                    key: 'autoApproveMode.description',
+                    key: "autoApproveMode.description",
                     value: ( localize(
-                        12100,
+                        12441,
                         "Controls whether to allow auto approval in the run in terminal tool."
-                    )),
+                    ))
                 }
             }
         }
     },
     [TerminalChatAgentToolsSettingId.AutoApprove]: {
-        markdownDescription: [
-            ( localize(
-            12101,
+        markdownDescription: [( localize(
+            12442,
             "A list of commands or regular expressions that control whether the run in terminal tool commands require explicit approval. These will be matched against the start of a command. A regular expression can be provided by wrapping the string in {0} characters followed by optional flags such as {1} for case-insensitivity.",
-            '`/`',
-            '`i`'
-        )),
-            ( localize(
-            12102,
+            "`/`",
+            "`i`"
+        )), ( localize(
+            12443,
             "Set to {0} to automatically approve commands, {1} to always require explicit approval or {2} to unset the value.",
-            '`true`',
-            '`false`',
-            '`null`'
-        )),
-            ( localize(
-            12103,
+            "`true`",
+            "`false`",
+            "`null`"
+        )), ( localize(
+            12444,
             "Note that these commands and regular expressions are evaluated for every _sub-command_ within the full _command line_, so {0} for example will need both {1} and {2} to match a {3} entry and must not match a {4} entry in order to auto approve. Inline commands such as {5} (process substitution) should also be detected.",
-            '`foo && bar`',
-            '`foo`',
-            '`bar`',
-            '`true`',
-            '`false`',
-            '`<(foo)`'
-        )),
-            ( localize(
-            12104,
+            "`foo && bar`",
+            "`foo`",
+            "`bar`",
+            "`true`",
+            "`false`",
+            "`<(foo)`"
+        )), ( localize(
+            12445,
             "An object can be used to match against the full command line instead of matching sub-commands and inline commands, for example {0}. In order to be auto approved _both_ the sub-command and command line must not be explicitly denied, then _either_ all sub-commands or command line needs to be approved.",
-            '`{ approve: false, matchCommandLine: true }`'
-        )),
-            ( localize(
-            12105,
+            "`{ approve: false, matchCommandLine: true }`"
+        )), ( localize(
+            12446,
             "Note that there's a default set of rules to allow and also deny commands. Consider setting {0} to {1} to ignore all default rules to ensure there are no conflicts with your own rules. Do this at your own risk, the default denial rules are designed to protect you against running dangerous commands.",
             `\`#${TerminalChatAgentToolsSettingId.IgnoreDefaultAutoApproveRules}#\``,
-            '`true`'
-        )),
-            [
-                ( localize(12106, 'Examples:')),
-                `|${( localize(12107, "Value"))}|${( localize(12108, "Description"))}|`,
-                '|---|---|',
-                '| `\"mkdir\": true` | ' + ( localize(12109, "Allow all commands starting with {0}", '`mkdir`')),
-                '| `\"npm run build\": true` | ' + ( localize(12110, "Allow all commands starting with {0}", '`npm run build`')),
-                '| `\"bin/test.sh\": true` | ' + ( localize(
-                    12111,
-                    "Allow all commands that match the path {0} ({1}, {2}, etc.)",
-                    '`bin/test.sh`',
-                    '`bin\\test.sh`',
-                    '`./bin/test.sh`'
-                )),
-                '| `\"/^git (status\\|show\\\\b.*)$/\": true` | ' + ( localize(
-                    12112,
-                    "Allow {0} and all commands starting with {1}",
-                    '`git status`',
-                    '`git show`'
-                )),
-                '| `\"/^Get-ChildItem\\\\b/i\": true` | ' + ( localize(12113, "will allow {0} commands regardless of casing", '`Get-ChildItem`')),
-                '| `\"/.*/\": true` | ' + ( localize(12114, "Allow all commands (denied commands still require approval)")),
-                '| `\"rm\": false` | ' + ( localize(
-                    12115,
-                    "Require explicit approval for all commands starting with {0}",
-                    '`rm`'
-                )),
-                '| `\"/\\\\.ps1/i\": { approve: false, matchCommandLine: true }` | ' + ( localize(
-                    12116,
-                    "Require explicit approval for any _command line_ that contains {0} regardless of casing",
-                    '`".ps1"`'
-                )),
-                '| `\"rm\": null` | ' + ( localize(12117, "Unset the default {0} value for {1}", '`false`', '`rm`')),
-            ].join('\n'),
-        ].join('\n\n'),
-        type: 'object',
+            "`true`"
+        )), [( localize(12447, "Examples:")), `|${( localize(12448, "Value"))}|${( localize(12449, "Description"))}|`, "|---|---|", "| `\"mkdir\": true` | " + ( localize(12450, "Allow all commands starting with {0}", "`mkdir`")), "| `\"npm run build\": true` | " + ( localize(12451, "Allow all commands starting with {0}", "`npm run build`")), "| `\"bin/test.sh\": true` | " + ( localize(
+            12452,
+            "Allow all commands that match the path {0} ({1}, {2}, etc.)",
+            "`bin/test.sh`",
+            "`bin\\test.sh`",
+            "`./bin/test.sh`"
+        )), "| `\"/^git (status\\|show\\\\b.*)$/\": true` | " + ( localize(
+            12453,
+            "Allow {0} and all commands starting with {1}",
+            "`git status`",
+            "`git show`"
+        )), "| `\"/^Get-ChildItem\\\\b/i\": true` | " + ( localize(12454, "will allow {0} commands regardless of casing", "`Get-ChildItem`")), "| `\"/.*/\": true` | " + ( localize(12455, "Allow all commands (denied commands still require approval)")), "| `\"rm\": false` | " + ( localize(
+            12456,
+            "Require explicit approval for all commands starting with {0}",
+            "`rm`"
+        )), "| `\"/\\\\.ps1/i\": { approve: false, matchCommandLine: true }` | " + ( localize(
+            12457,
+            "Require explicit approval for any _command line_ that contains {0} regardless of casing",
+            "`\".ps1\"`"
+        )), "| `\"rm\": null` | " + ( localize(12458, "Unset the default {0} value for {1}", "`false`", "`rm`"))].join("\n")].join("\n\n"),
+        type: "object",
         additionalProperties: {
-            anyOf: [
-                autoApproveBoolean,
-                {
-                    type: 'object',
-                    properties: {
-                        approve: autoApproveBoolean,
-                        matchCommandLine: {
-                            type: 'boolean',
-                            enum: [
-                                true,
-                                false,
-                            ],
-                            enumDescriptions: [
-                                ( localize(12118, "Match against the full command line, eg. `foo && bar`.")),
-                                ( localize(
-                                12119,
-                                "Match against sub-commands and inline commands, eg. `foo && bar` will need both `foo` and `bar` to match."
-                            )),
-                            ],
-                            description: ( localize(
-                                12120,
-                                "Whether to match against the full command line, as opposed to splitting by sub-commands and inline commands."
-                            )),
-                        }
-                    },
-                    required: ['approve']
-                },
-                {
-                    type: 'null',
-                    description: ( localize(
-                        12121,
-                        "Ignore the pattern, this is useful for unsetting the same pattern set at a higher scope."
-                    )),
+            anyOf: [autoApproveBoolean, {
+                type: "object",
+                properties: {
+                    approve: autoApproveBoolean,
+                    matchCommandLine: {
+                        type: "boolean",
+                        enum: [true, false],
+                        enumDescriptions: [( localize(12459, "Match against the full command line, eg. `foo && bar`.")), ( localize(
+                            12460,
+                            "Match against sub-commands and inline commands, eg. `foo && bar` will need both `foo` and `bar` to match."
+                        ))],
+                        description: ( localize(
+                            12461,
+                            "Whether to match against the full command line, as opposed to splitting by sub-commands and inline commands."
+                        ))
+                    }
                 },
-            ]
+                required: ["approve"]
+            }, {
+                type: "null",
+                description: ( localize(
+                    12462,
+                    "Ignore the pattern, this is useful for unsetting the same pattern set at a higher scope."
+                ))
+            }]
         },
         default: {
             cd: true,
             echo: true,
             ls: true,
+            dir: true,
             pwd: true,
             cat: true,
             head: true,
@@ -202,55 +171,80 @@ const terminalChatAgentToolsConfiguration = {
             readlink: true,
             stat: true,
             file: true,
+            od: true,
             du: true,
             df: true,
             sleep: true,
             nl: true,
             grep: true,
-            '/^git(\\s+(-C\\s+\\S+|--no-pager))*\\s+status\\b/': true,
-            '/^git(\\s+(-C\\s+\\S+|--no-pager))*\\s+log\\b/': true,
-            '/^git(\\s+(-C\\s+\\S+|--no-pager))*\\s+show\\b/': true,
-            '/^git(\\s+(-C\\s+\\S+|--no-pager))*\\s+diff\\b/': true,
-            '/^git(\\s+(-C\\s+\\S+|--no-pager))*\\s+ls-files\\b/': true,
-            '/^git(\\s+(-C\\s+\\S+|--no-pager))*\\s+grep\\b/': true,
-            '/^git(\\s+(-C\\s+\\S+|--no-pager))*\\s+branch\\b/': true,
-            '/^git(\\s+(-C\\s+\\S+|--no-pager))*\\s+branch\\b.*-(d|D|m|M|-delete|-force)\\b/': false,
-            'Get-ChildItem': true,
-            'Get-Content': true,
-            'Get-Date': true,
-            'Get-Random': true,
-            'Get-Location': true,
-            'Write-Host': true,
-            'Write-Output': true,
-            'Out-String': true,
-            'Split-Path': true,
-            'Join-Path': true,
-            'Start-Sleep': true,
-            'Where-Object': true,
-            '/^Select-[a-z0-9]/i': true,
-            '/^Measure-[a-z0-9]/i': true,
-            '/^Compare-[a-z0-9]/i': true,
-            '/^Format-[a-z0-9]/i': true,
-            '/^Sort-[a-z0-9]/i': true,
+            "/^git(\\s+(-C\\s+\\S+|--no-pager))*\\s+status\\b/": true,
+            "/^git(\\s+(-C\\s+\\S+|--no-pager))*\\s+log\\b/": true,
+            "/^git(\\s+(-C\\s+\\S+|--no-pager))*\\s+show\\b/": true,
+            "/^git(\\s+(-C\\s+\\S+|--no-pager))*\\s+diff\\b/": true,
+            "/^git(\\s+(-C\\s+\\S+|--no-pager))*\\s+ls-files\\b/": true,
+            "/^git(\\s+(-C\\s+\\S+|--no-pager))*\\s+grep\\b/": true,
+            "/^git(\\s+(-C\\s+\\S+|--no-pager))*\\s+branch\\b/": true,
+            "/^git(\\s+(-C\\s+\\S+|--no-pager))*\\s+branch\\b.*\\s-(d|D|m|M|-delete|-force)\\b/": false,
+            "/^docker\\s+(ps|images|info|version|inspect|logs|top|stats|port|diff|search|events)\\b/": true,
+            "/^docker\\s+(container|image|network|volume|context|system)\\s+(ls|ps|inspect|history|show|df|info)\\b/": true,
+            "/^docker\\s+compose\\s+(ps|ls|top|logs|images|config|version|port|events)\\b/": true,
+            "Get-ChildItem": true,
+            "Get-Content": true,
+            "Get-Date": true,
+            "Get-Random": true,
+            "Get-Location": true,
+            "Set-Location": true,
+            "Write-Host": true,
+            "Write-Output": true,
+            "Out-String": true,
+            "Split-Path": true,
+            "Join-Path": true,
+            "Start-Sleep": true,
+            "Where-Object": true,
+            "/^Select-[a-z0-9]/i": true,
+            "/^Measure-[a-z0-9]/i": true,
+            "/^Compare-[a-z0-9]/i": true,
+            "/^Format-[a-z0-9]/i": true,
+            "/^Sort-[a-z0-9]/i": true,
+            "/^npm\\s+(ls|list|outdated|view|info|show|explain|why|root|prefix|bin|search|doctor|fund|repo|bugs|docs|home|help(-search)?)\\b/": true,
+            "/^npm\\s+config\\s+(list|get)\\b/": true,
+            "/^npm\\s+pkg\\s+get\\b/": true,
+            "/^npm\\s+audit$/": true,
+            "/^npm\\s+cache\\s+verify\\b/": true,
+            "/^yarn\\s+(list|outdated|info|why|bin|help|versions)\\b/": true,
+            "/^yarn\\s+licenses\\b/": true,
+            "/^yarn\\s+audit\\b(?!.*\\bfix\\b)/": true,
+            "/^yarn\\s+config\\s+(list|get)\\b/": true,
+            "/^yarn\\s+cache\\s+dir\\b/": true,
+            "/^pnpm\\s+(ls|list|outdated|why|root|bin|doctor)\\b/": true,
+            "/^pnpm\\s+licenses\\b/": true,
+            "/^pnpm\\s+audit\\b(?!.*\\bfix\\b)/": true,
+            "/^pnpm\\s+config\\s+(list|get)\\b/": true,
+            "npm ci": true,
+            "/^yarn\\s+install\\s+--frozen-lockfile\\b/": true,
+            "/^pnpm\\s+install\\s+--frozen-lockfile\\b/": true,
             column: true,
-            '/^column\\b.*-c\\s+[0-9]{4,}/': false,
+            "/^column\\b.*\\s-c\\s+[0-9]{4,}/": false,
             date: true,
-            '/^date\\b.*(-s|--set)\\b/': false,
+            "/^date\\b.*\\s(-s|--set)\\b/": false,
             find: true,
-            '/^find\\b.*-(delete|exec|execdir|fprint|fprintf|fls|ok|okdir)\\b/': false,
+            "/^find\\b.*\\s-(delete|exec|execdir|fprint|fprintf|fls|ok|okdir)\\b/": false,
             rg: true,
-            '/^rg\\b.*(--pre|--hostname-bin)\\b/': false,
+            "/^rg\\b.*\\s(--pre|--hostname-bin)\\b/": false,
             sed: true,
-            '/^sed\\b.*(-[a-zA-Z]*(e|i|I|f)[a-zA-Z]*|--expression|--file|--in-place)\\b/': false,
-            '/^sed\\b.*(\/e|\/w|;W)/': false,
+            "/^sed\\b.*\\s(-[a-zA-Z]*(e|f)[a-zA-Z]*|--expression|--file)\\b/": false,
+            "/^sed\\b.*s\\/.*\\/.*\\/[ew]/": false,
+            "/^sed\\b.*;W/": false,
             sort: true,
-            '/^sort\\b.*-(o|S)\\b/': false,
+            "/^sort\\b.*\\s-(o|S)\\b/": false,
             tree: true,
-            '/^tree\\b.*-o\\b/': false,
+            "/^tree\\b.*\\s-o\\b/": false,
+            "/^xxd$/": true,
+            "/^xxd\\b(\\s+-\\S+)*\\s+[^-\\s]\\S*$/": true,
             rm: false,
             rmdir: false,
             del: false,
-            'Remove-Item': false,
+            "Remove-Item": false,
             ri: false,
             rd: false,
             erase: false,
@@ -258,190 +252,330 @@ const terminalChatAgentToolsConfiguration = {
             kill: false,
             ps: false,
             top: false,
-            'Stop-Process': false,
+            "Stop-Process": false,
             spps: false,
             taskkill: false,
-            'taskkill.exe': false,
+            "taskkill.exe": false,
             curl: false,
             wget: false,
-            'Invoke-RestMethod': false,
-            'Invoke-WebRequest': false,
-            'irm': false,
-            'iwr': false,
+            "Invoke-RestMethod": false,
+            "Invoke-WebRequest": false,
+            "irm": false,
+            "iwr": false,
             chmod: false,
             chown: false,
-            'Set-ItemProperty': false,
-            'sp': false,
-            'Set-Acl': false,
+            "Set-ItemProperty": false,
+            "sp": false,
+            "Set-Acl": false,
             jq: false,
             xargs: false,
             eval: false,
-            'Invoke-Expression': false,
-            iex: false,
-        },
+            "Invoke-Expression": false,
+            iex: false
+        }
     },
     [TerminalChatAgentToolsSettingId.IgnoreDefaultAutoApproveRules]: {
-        type: 'boolean',
+        type: "boolean",
         default: false,
-        tags: ['experimental'],
+        tags: ["experimental"],
         markdownDescription: ( localize(
-            12122,
+            12463,
             "Whether to ignore the built-in default auto-approve rules used by the run in terminal tool as defined in {0}. When this setting is enabled, the run in terminal tool will ignore any rule that comes from the default set but still follow rules defined in the user, remote and workspace settings. Use this setting at your own risk; the default auto-approve rules are designed to protect you against running dangerous commands.",
             `\`#${TerminalChatAgentToolsSettingId.AutoApprove}#\``
-        )),
+        ))
     },
     [TerminalChatAgentToolsSettingId.AutoApproveWorkspaceNpmScripts]: {
         restricted: true,
-        type: 'boolean',
+        type: "boolean",
         default: true,
-        tags: ['experimental'],
+        tags: ["experimental"],
         markdownDescription: ( localize(
-            12123,
+            12464,
             "Whether to automatically approve npm, yarn, and pnpm run commands when the script is defined in a workspace package.json file. Since the workspace is trusted, scripts defined in package.json are considered safe to run without explicit approval."
-        )),
+        ))
     },
     [TerminalChatAgentToolsSettingId.BlockDetectedFileWrites]: {
-        type: 'string',
-        enum: ['never', 'outsideWorkspace', 'all'],
-        enumDescriptions: [
-            ( localize(12124, "Allow all detected file writes.")),
-            ( localize(
-            12125,
+        type: "string",
+        enum: ["never", "outsideWorkspace", "all"],
+        enumDescriptions: [( localize(12465, "Allow all detected file writes.")), ( localize(
+            12466,
             "Block file writes detected outside the workspace. This depends on the shell integration feature working correctly to determine the current working directory of the terminal."
-        )),
-            ( localize(12126, "Block all detected file writes.")),
-        ],
-        default: 'outsideWorkspace',
-        tags: ['experimental'],
+        )), ( localize(12467, "Block all detected file writes."))],
+        default: "outsideWorkspace",
+        tags: ["experimental"],
         markdownDescription: ( localize(
-            12127,
-            "Controls whether detected file write operations are blocked in the run in terminal tool. When detected, this will require explicit approval regardless of whether the command would normally be auto approved. Note that this cannot detect all possible methods of writing files, this is what is currently detected:\n\n- File redirection (detected via the bash or PowerShell tree sitter grammar)"
-        )),
+            12468,
+            "Controls whether detected file write operations are blocked in the run in terminal tool. When detected, this will require explicit approval regardless of whether the command would normally be auto approved. Note that this cannot detect all possible methods of writing files, this is what is currently detected:\n\n- File redirection (detected via the bash or PowerShell tree sitter grammar)\n- `sed` in-place editing (`-i`, `-I`, `--in-place`)"
+        ))
     },
     [TerminalChatAgentToolsSettingId.ShellIntegrationTimeout]: {
         markdownDescription: ( localize(
-            12128,
+            12469,
             "Configures the duration in milliseconds to wait for shell integration to be detected when the run in terminal tool launches a new terminal. Set to `0` to wait the minimum time, the default value `-1` means the wait time is variable based on the value of {0} and whether it's a remote window. A large value can be useful if your shell starts very slowly and a low value if you're intentionally not using shell integration.",
             `\`#${TerminalSettingId.ShellIntegrationEnabled}#\``
         )),
-        type: 'integer',
+        type: "integer",
         minimum: -1,
         maximum: 60000,
         default: -1,
         markdownDeprecationMessage: ( localize(
-            12129,
-            'Use {0} instead',
+            12470,
+            "Use {0} instead",
             `\`#${TerminalSettingId.ShellIntegrationTimeout}#\``
         ))
     },
     [TerminalChatAgentToolsSettingId.TerminalProfileLinux]: {
         restricted: true,
         markdownDescription: ( localize(
-            12130,
+            12471,
             "The terminal profile to use on Linux for chat agent's run in terminal tool."
         )),
-        type: ['object', 'null'],
+        type: ["object", "null"],
         default: null,
-        'anyOf': [
-            { type: 'null' },
-            terminalChatAgentProfileSchema
-        ],
-        defaultSnippets: [
-            {
-                body: {
-                    path: '${1}'
-                }
+        "anyOf": [{
+            type: "null"
+        }, terminalChatAgentProfileSchema],
+        defaultSnippets: [{
+            body: {
+                path: "${1}"
             }
-        ]
+        }]
     },
     [TerminalChatAgentToolsSettingId.TerminalProfileMacOs]: {
         restricted: true,
         markdownDescription: ( localize(
-            12131,
+            12472,
             "The terminal profile to use on macOS for chat agent's run in terminal tool."
         )),
-        type: ['object', 'null'],
+        type: ["object", "null"],
         default: null,
-        'anyOf': [
-            { type: 'null' },
-            terminalChatAgentProfileSchema
-        ],
-        defaultSnippets: [
-            {
-                body: {
-                    path: '${1}'
-                }
+        "anyOf": [{
+            type: "null"
+        }, terminalChatAgentProfileSchema],
+        defaultSnippets: [{
+            body: {
+                path: "${1}"
             }
-        ]
+        }]
     },
     [TerminalChatAgentToolsSettingId.TerminalProfileWindows]: {
         restricted: true,
         markdownDescription: ( localize(
-            12132,
+            12473,
             "The terminal profile to use on Windows for chat agent's run in terminal tool."
         )),
-        type: ['object', 'null'],
+        type: ["object", "null"],
         default: null,
-        'anyOf': [
-            { type: 'null' },
-            terminalChatAgentProfileSchema
-        ],
-        defaultSnippets: [
-            {
-                body: {
-                    path: '${1}'
-                }
+        "anyOf": [{
+            type: "null"
+        }, terminalChatAgentProfileSchema],
+        defaultSnippets: [{
+            body: {
+                path: "${1}"
             }
-        ]
+        }]
     },
     [TerminalChatAgentToolsSettingId.AutoReplyToPrompts]: {
-        type: 'boolean',
+        type: "boolean",
         default: false,
-        tags: ['experimental'],
+        tags: ["experimental"],
         markdownDescription: ( localize(
-            12133,
-            "Whether to automatically respond to prompts in the terminal such as `Confirm? y/n`. This is an experimental feature and may not work in all scenarios."
-        )),
+            12474,
+            "Whether to automatically respond to prompts in the terminal such as `Confirm? y/n`. This is an experimental feature and may not work in all scenarios.\n\n**This feature is inherently risky to use as you're deferring potentially sensitive decisions to an LLM. Use at your own risk.**"
+        ))
     },
     [TerminalChatAgentToolsSettingId.OutputLocation]: {
-        markdownDescription: ( localize(12134, "Where to show the output from the run in terminal tool session.")),
-        type: 'string',
-        enum: ['terminal', 'none'],
-        enumDescriptions: [
-            ( localize(12135, "Reveal the terminal when running the command.")),
-            ( localize(12136, "Do not reveal the terminal automatically.")),
-        ],
-        default: product.quality !== 'stable' ? 'none' : 'terminal',
-        tags: ['experimental'],
+        markdownDescription: ( localize(12475, "Where to show the output from the run in terminal tool.")),
+        type: "string",
+        enum: ["terminal", "chat"],
+        enumDescriptions: [( localize(12476, "Reveal the terminal in the panel or editor in addition to chat.")), ( localize(12477, "Reveal the terminal output within chat only."))],
+        default: "chat",
+        tags: ["experimental"],
         experiment: {
-            mode: 'auto'
+            mode: "auto"
         }
     },
+    [TerminalChatAgentToolsSettingId.TerminalSandboxEnabled]: {
+        markdownDescription: ( localize(
+            12478,
+            "Controls whether to run commands in a sandboxed terminal for the run in terminal tool."
+        )),
+        type: "boolean",
+        default: false,
+        tags: ["experimental"],
+        restricted: true
+    },
+    [TerminalChatAgentToolsSettingId.TerminalSandboxNetwork]: {
+        markdownDescription: ( localize(
+            12479,
+            "Note: this setting is applicable only when {0} is enabled. Controls network access in the terminal sandbox.",
+            `\`#${TerminalChatAgentToolsSettingId.TerminalSandboxEnabled}#\``
+        )),
+        type: "object",
+        properties: {
+            allowedDomains: {
+                type: "array",
+                description: ( localize(
+                    12480,
+                    " Supports wildcards like {0} and an empty list means no network access.",
+                    "`*.example.com`"
+                )),
+                items: {
+                    type: "string"
+                },
+                default: []
+            },
+            deniedDomains: {
+                type: "array",
+                description: ( localize(
+                    12481,
+                    "Array of denied domains (checked first, takes precedence over allowedDomains)."
+                )),
+                items: {
+                    type: "string"
+                },
+                default: []
+            }
+        },
+        default: {
+            allowedDomains: [],
+            deniedDomains: []
+        },
+        tags: ["experimental"],
+        restricted: true
+    },
+    [TerminalChatAgentToolsSettingId.TerminalSandboxLinuxFileSystem]: {
+        markdownDescription: ( localize(
+            12482,
+            "Note: this setting is applicable only when {0} is enabled. Controls file system access in the terminal sandbox on Linux. Paths do not support glob patterns, only literal paths (ex: ./src/, ~/.ssh, .env). **bubblewrap**, **socat** and **ripgrep** should be installed for this setting to work.",
+            `\`#${TerminalChatAgentToolsSettingId.TerminalSandboxEnabled}#\``
+        )),
+        type: "object",
+        properties: {
+            denyRead: {
+                type: "array",
+                description: ( localize(
+                    12483,
+                    "Array of paths to deny read access. Leave empty to allow reading all paths."
+                )),
+                items: {
+                    type: "string"
+                },
+                default: []
+            },
+            allowWrite: {
+                type: "array",
+                description: ( localize(
+                    12484,
+                    "Array of paths to allow write access. Leave empty to disallow all writes."
+                )),
+                items: {
+                    type: "string"
+                },
+                default: ["."]
+            },
+            denyWrite: {
+                type: "array",
+                description: ( localize(
+                    12485,
+                    "Array of paths to deny write access within allowed paths (takes precedence over allowWrite)."
+                )),
+                items: {
+                    type: "string"
+                },
+                default: []
+            }
+        },
+        default: {
+            denyRead: [],
+            allowWrite: ["."],
+            denyWrite: []
+        },
+        tags: ["experimental"],
+        restricted: true
+    },
+    [TerminalChatAgentToolsSettingId.TerminalSandboxMacFileSystem]: {
+        markdownDescription: ( localize(
+            12486,
+            "Note: this setting is applicable only when {0} is enabled. Controls file system access in the terminal sandbox on macOS.Paths also support git-style glob patterns(ex: *.ts, ./src, ./src/**/*.ts, file?.txt). **ripgrep** should be installed for this setting to work.",
+            `\`#${TerminalChatAgentToolsSettingId.TerminalSandboxEnabled}#\``
+        )),
+        type: "object",
+        properties: {
+            denyRead: {
+                type: "array",
+                description: ( localize(
+                    12487,
+                    "Array of paths to deny read access. Leave empty to allow reading all paths."
+                )),
+                items: {
+                    type: "string"
+                },
+                default: []
+            },
+            allowWrite: {
+                type: "array",
+                description: ( localize(
+                    12488,
+                    "Array of paths to allow write access. Leave empty to disallow all writes."
+                )),
+                items: {
+                    type: "string"
+                },
+                default: ["."]
+            },
+            denyWrite: {
+                type: "array",
+                description: ( localize(
+                    12489,
+                    "Array of paths to deny write access within allowed paths (takes precedence over allowWrite)."
+                )),
+                items: {
+                    type: "string"
+                },
+                default: []
+            }
+        },
+        default: {
+            denyRead: [],
+            allowWrite: ["."],
+            denyWrite: []
+        },
+        tags: ["experimental"],
+        restricted: true
+    },
     [TerminalChatAgentToolsSettingId.PreventShellHistory]: {
-        type: 'boolean',
+        type: "boolean",
         default: true,
-        markdownDescription: [
-            ( localize(
-            12137,
+        markdownDescription: [( localize(
+            12490,
             "Whether to exclude commands run by the terminal tool from the shell history. See below for the supported shells and the method used for each:"
-        )),
-            `- \`bash\`: ${( localize(
-                12138,
-                "Sets `HISTCONTROL=ignorespace` and prepends the command with space"
-            ))}`,
-            `- \`zsh\`: ${( localize(
-                12139,
-                "Sets `HIST_IGNORE_SPACE` option and prepends the command with space"
-            ))}`,
-            `- \`fish\`: ${( localize(
-                12140,
-                "Sets `fish_private_mode` to prevent any command from entering history"
-            ))}`,
-            `- \`pwsh\`: ${( localize(
-                12141,
-                "Sets a custom history handler via PSReadLine's `AddToHistoryHandler` to prevent any command from entering history"
-            ))}`,
-        ].join('\n'),
+        )), `- \`bash\`: ${( localize(
+            12491,
+            "Sets `HISTCONTROL=ignorespace` and prepends the command with space"
+        ))}`, `- \`zsh\`: ${( localize(
+            12492,
+            "Sets `HIST_IGNORE_SPACE` option and prepends the command with space"
+        ))}`, `- \`fish\`: ${( localize(
+            12493,
+            "Sets `fish_private_mode` to prevent any command from entering history"
+        ))}`, `- \`pwsh\`: ${( localize(
+            12494,
+            "Sets a custom history handler via PSReadLine's `AddToHistoryHandler` to prevent any command from entering history"
+        ))}`].join("\n")
+    },
+    [TerminalChatAgentToolsSettingId.EnforceTimeoutFromModel]: {
+        restricted: true,
+        type: "boolean",
+        default: true,
+        tags: ["experimental"],
+        experiment: {
+            mode: "auto"
+        },
+        markdownDescription: ( localize(
+            12495,
+            "Whether to enforce the timeout value provided by the model in the run in terminal tool. When enabled, if the model provides a timeout parameter, the tool will stop tracking the command after that duration and return the output collected so far."
+        ))
     }
 };
 for (const id of [
@@ -449,13 +583,13 @@ for (const id of [
     TerminalChatAgentToolsSettingId.DeprecatedAutoApprove2,
     TerminalChatAgentToolsSettingId.DeprecatedAutoApprove3,
     TerminalChatAgentToolsSettingId.DeprecatedAutoApprove4,
-    TerminalChatAgentToolsSettingId.DeprecatedAutoApproveCompatible,
+    TerminalChatAgentToolsSettingId.DeprecatedAutoApproveCompatible
 ]) {
     terminalChatAgentToolsConfiguration[id] = {
         deprecated: true,
         markdownDeprecationMessage: ( localize(
-            12142,
-            'Use {0} instead',
+            12496,
+            "Use {0} instead",
             `\`#${TerminalChatAgentToolsSettingId.AutoApprove}#\``
         ))
     };