@codingame/monaco-vscode-api 29.1.1 → 30.0.0

package/vscode/src/vs/workbench/contrib/terminalContrib/chatAgentTools/common/terminalChatAgentToolsConfiguration.js

@@ -14,19 +14,23 @@ var TerminalChatAgentToolsSettingId;
     TerminalChatAgentToolsSettingId["ShellIntegrationTimeout"] = "chat.tools.terminal.shellIntegrationTimeout";
     TerminalChatAgentToolsSettingId["AutoReplyToPrompts"] = "chat.tools.terminal.autoReplyToPrompts";
     TerminalChatAgentToolsSettingId["OutputLocation"] = "chat.tools.terminal.outputLocation";
-    TerminalChatAgentToolsSettingId["TerminalSandboxEnabled"] = "chat.tools.terminal.sandbox.enabled";
-    TerminalChatAgentToolsSettingId["TerminalSandboxNetworkAllowedDomains"] = "chat.tools.terminal.sandbox.network.allowedDomains";
-    TerminalChatAgentToolsSettingId["TerminalSandboxNetworkDeniedDomains"] = "chat.tools.terminal.sandbox.network.deniedDomains";
-    TerminalChatAgentToolsSettingId["TerminalSandboxNetworkAllowTrustedDomains"] = "chat.tools.terminal.sandbox.network.allowTrustedDomains";
-    TerminalChatAgentToolsSettingId["TerminalSandboxLinuxFileSystem"] = "chat.tools.terminal.sandbox.linuxFileSystem";
-    TerminalChatAgentToolsSettingId["TerminalSandboxMacFileSystem"] = "chat.tools.terminal.sandbox.macFileSystem";
+    TerminalChatAgentToolsSettingId["AgentSandboxEnabled"] = "chat.agent.sandbox";
+    TerminalChatAgentToolsSettingId["AgentSandboxNetworkAllowedDomains"] = "chat.agent.sandboxNetwork.allowedDomains";
+    TerminalChatAgentToolsSettingId["AgentSandboxNetworkDeniedDomains"] = "chat.agent.sandboxNetwork.deniedDomains";
+    TerminalChatAgentToolsSettingId["AgentSandboxLinuxFileSystem"] = "chat.agent.sandboxFileSystem.linux";
+    TerminalChatAgentToolsSettingId["AgentSandboxMacFileSystem"] = "chat.agent.sandboxFileSystem.mac";
     TerminalChatAgentToolsSettingId["PreventShellHistory"] = "chat.tools.terminal.preventShellHistory";
     TerminalChatAgentToolsSettingId["EnforceTimeoutFromModel"] = "chat.tools.terminal.enforceTimeoutFromModel";
     TerminalChatAgentToolsSettingId["IdlePollInterval"] = "chat.tools.terminal.idlePollInterval";
     TerminalChatAgentToolsSettingId["TerminalProfileLinux"] = "chat.tools.terminal.terminalProfile.linux";
     TerminalChatAgentToolsSettingId["TerminalProfileMacOs"] = "chat.tools.terminal.terminalProfile.osx";
     TerminalChatAgentToolsSettingId["TerminalProfileWindows"] = "chat.tools.terminal.terminalProfile.windows";
+    TerminalChatAgentToolsSettingId["DeprecatedTerminalSandboxEnabled"] = "chat.tools.terminal.sandbox.enabled";
     TerminalChatAgentToolsSettingId["DeprecatedTerminalSandboxNetwork"] = "chat.tools.terminal.sandbox.network";
+    TerminalChatAgentToolsSettingId["DeprecatedTerminalSandboxNetworkAllowedDomains"] = "chat.tools.terminal.sandbox.network.allowedDomains";
+    TerminalChatAgentToolsSettingId["DeprecatedTerminalSandboxNetworkDeniedDomains"] = "chat.tools.terminal.sandbox.network.deniedDomains";
+    TerminalChatAgentToolsSettingId["DeprecatedTerminalSandboxLinuxFileSystem"] = "chat.tools.terminal.sandbox.linuxFileSystem";
+    TerminalChatAgentToolsSettingId["DeprecatedTerminalSandboxMacFileSystem"] = "chat.tools.terminal.sandbox.macFileSystem";
     TerminalChatAgentToolsSettingId["DeprecatedAutoApproveCompatible"] = "chat.agent.terminal.autoApprove";
     TerminalChatAgentToolsSettingId["DeprecatedAutoApprove1"] = "chat.agent.terminal.allowList";
     TerminalChatAgentToolsSettingId["DeprecatedAutoApprove2"] = "chat.agent.terminal.denyList";
@@ -36,9 +40,9 @@ var TerminalChatAgentToolsSettingId;
 const autoApproveBoolean = {
     type: "boolean",
     enum: [true, false],
-    enumDescriptions: [( localize(13899, "Automatically approve the pattern.")), ( localize(13900, "Require explicit approval for the pattern."))],
+    enumDescriptions: [( localize(13974, "Automatically approve the pattern.")), ( localize(13975, "Require explicit approval for the pattern."))],
     description: ( localize(
-        13901,
+        13976,
         "The start of a command to match against. A regular expression can be provided by wrapping the string in `/` characters."
     ))
 };
@@ -47,7 +51,7 @@ const terminalChatAgentProfileSchema = {
     required: ["path"],
     properties: {
         path: {
-            description: ( localize(13902, "A path to a shell executable.")),
+            description: ( localize(13977, "A path to a shell executable.")),
             type: "string"
         },
         ...terminalProfileBaseProperties
@@ -56,7 +60,7 @@ const terminalChatAgentProfileSchema = {
 const terminalChatAgentToolsConfiguration = {
     [TerminalChatAgentToolsSettingId.EnableAutoApprove]: {
         description: ( localize(
-            13903,
+            13978,
             "Controls whether to allow auto approval in the run in terminal tool."
         )),
         type: "boolean",
@@ -69,7 +73,7 @@ const terminalChatAgentToolsConfiguration = {
                 description: {
                     key: "autoApproveMode.description",
                     value: ( localize(
-                        13903,
+                        13978,
                         "Controls whether to allow auto approval in the run in terminal tool."
                     ))
                 }
@@ -78,18 +82,18 @@ const terminalChatAgentToolsConfiguration = {
     },
     [TerminalChatAgentToolsSettingId.AutoApprove]: {
         markdownDescription: [( localize(
-            13904,
+            13979,
             "A list of commands or regular expressions that control whether the run in terminal tool commands require explicit approval. These will be matched against the start of a command. A regular expression can be provided by wrapping the string in {0} characters followed by optional flags such as {1} for case-insensitivity.",
             "`/`",
             "`i`"
         )), ( localize(
-            13905,
+            13980,
             "Set to {0} to automatically approve commands, {1} to always require explicit approval or {2} to unset the value.",
             "`true`",
             "`false`",
             "`null`"
         )), ( localize(
-            13906,
+            13981,
             "Note that these commands and regular expressions are evaluated for every _sub-command_ within the full _command line_, so {0} for example will need both {1} and {2} to match a {3} entry and must not match a {4} entry in order to auto approve. Inline commands such as {5} (process substitution) should also be detected.",
             "`foo && bar`",
             "`foo`",
@@ -98,34 +102,34 @@ const terminalChatAgentToolsConfiguration = {
             "`false`",
             "`<(foo)`"
         )), ( localize(
-            13907,
+            13982,
             "An object can be used to match against the full command line instead of matching sub-commands and inline commands, for example {0}. In order to be auto approved _both_ the sub-command and command line must not be explicitly denied, then _either_ all sub-commands or command line needs to be approved.",
             "`{ approve: false, matchCommandLine: true }`"
         )), ( localize(
-            13908,
+            13983,
             "Note that there's a default set of rules to allow and also deny commands. Consider setting {0} to {1} to ignore all default rules to ensure there are no conflicts with your own rules. Do this at your own risk, the default denial rules are designed to protect you against running dangerous commands.",
             `\`#${TerminalChatAgentToolsSettingId.IgnoreDefaultAutoApproveRules}#\``,
             "`true`"
-        )), [( localize(13909, "Examples:")), `|${( localize(13910, "Value"))}|${( localize(13911, "Description"))}|`, "|---|---|", "| `\"mkdir\": true` | " + ( localize(13912, "Allow all commands starting with {0}", "`mkdir`")), "| `\"npm run build\": true` | " + ( localize(13913, "Allow all commands starting with {0}", "`npm run build`")), "| `\"bin/test.sh\": true` | " + ( localize(
-            13914,
+        )), [( localize(13984, "Examples:")), `|${( localize(13985, "Value"))}|${( localize(13986, "Description"))}|`, "|---|---|", "| `\"mkdir\": true` | " + ( localize(13987, "Allow all commands starting with {0}", "`mkdir`")), "| `\"npm run build\": true` | " + ( localize(13988, "Allow all commands starting with {0}", "`npm run build`")), "| `\"bin/test.sh\": true` | " + ( localize(
+            13989,
             "Allow all commands that match the path {0} ({1}, {2}, etc.)",
             "`bin/test.sh`",
             "`bin\\test.sh`",
             "`./bin/test.sh`"
         )), "| `\"/^git (status\\|show\\\\b.*)$/\": true` | " + ( localize(
-            13915,
+            13990,
             "Allow {0} and all commands starting with {1}",
             "`git status`",
             "`git show`"
-        )), "| `\"/^Get-ChildItem\\\\b/i\": true` | " + ( localize(13916, "will allow {0} commands regardless of casing", "`Get-ChildItem`")), "| `\"/.*/\": true` | " + ( localize(13917, "Allow all commands (denied commands still require approval)")), "| `\"rm\": false` | " + ( localize(
-            13918,
+        )), "| `\"/^Get-ChildItem\\\\b/i\": true` | " + ( localize(13991, "will allow {0} commands regardless of casing", "`Get-ChildItem`")), "| `\"/.*/\": true` | " + ( localize(13992, "Allow all commands (denied commands still require approval)")), "| `\"rm\": false` | " + ( localize(
+            13993,
             "Require explicit approval for all commands starting with {0}",
             "`rm`"
         )), "| `\"/\\\\.ps1/i\": { approve: false, matchCommandLine: true }` | " + ( localize(
-            13919,
+            13994,
             "Require explicit approval for any _command line_ that contains {0} regardless of casing",
             "`\".ps1\"`"
-        )), "| `\"rm\": null` | " + ( localize(13920, "Unset the default {0} value for {1}", "`false`", "`rm`"))].join("\n")].join("\n\n"),
+        )), "| `\"rm\": null` | " + ( localize(13995, "Unset the default {0} value for {1}", "`false`", "`rm`"))].join("\n")].join("\n\n"),
         type: "object",
         additionalProperties: {
             anyOf: [autoApproveBoolean, {
@@ -135,12 +139,12 @@ const terminalChatAgentToolsConfiguration = {
                     matchCommandLine: {
                         type: "boolean",
                         enum: [true, false],
-                        enumDescriptions: [( localize(13921, "Match against the full command line, eg. `foo && bar`.")), ( localize(
-                            13922,
+                        enumDescriptions: [( localize(13996, "Match against the full command line, eg. `foo && bar`.")), ( localize(
+                            13997,
                             "Match against sub-commands and inline commands, eg. `foo && bar` will need both `foo` and `bar` to match."
                         ))],
                         description: ( localize(
-                            13923,
+                            13998,
                             "Whether to match against the full command line, as opposed to splitting by sub-commands and inline commands."
                         ))
                     }
@@ -149,7 +153,7 @@ const terminalChatAgentToolsConfiguration = {
             }, {
                 type: "null",
                 description: ( localize(
-                    13924,
+                    13999,
                     "Ignore the pattern, this is useful for unsetting the same pattern set at a higher scope."
                 ))
             }]
@@ -284,7 +288,7 @@ const terminalChatAgentToolsConfiguration = {
         default: false,
         tags: ["experimental"],
         markdownDescription: ( localize(
-            13925,
+            14000,
             "Whether to ignore the built-in default auto-approve rules used by the run in terminal tool as defined in {0}. When this setting is enabled, the run in terminal tool will ignore any rule that comes from the default set but still follow rules defined in the user, remote and workspace settings. Use this setting at your own risk; the default auto-approve rules are designed to protect you against running dangerous commands.",
             `\`#${TerminalChatAgentToolsSettingId.AutoApprove}#\``
         ))
@@ -295,27 +299,27 @@ const terminalChatAgentToolsConfiguration = {
         default: true,
         tags: ["experimental"],
         markdownDescription: ( localize(
-            13926,
+            14001,
             "Whether to automatically approve npm, yarn, and pnpm run commands when the script is defined in a workspace package.json file. Since the workspace is trusted, scripts defined in package.json are considered safe to run without explicit approval."
         ))
     },
     [TerminalChatAgentToolsSettingId.BlockDetectedFileWrites]: {
         type: "string",
         enum: ["never", "outsideWorkspace", "all"],
-        enumDescriptions: [( localize(13927, "Allow all detected file writes.")), ( localize(
-            13928,
+        enumDescriptions: [( localize(14002, "Allow all detected file writes.")), ( localize(
+            14003,
             "Block file writes detected outside the workspace. This depends on the shell integration feature working correctly to determine the current working directory of the terminal."
-        )), ( localize(13929, "Block all detected file writes."))],
+        )), ( localize(14004, "Block all detected file writes."))],
         default: "outsideWorkspace",
         tags: ["experimental"],
         markdownDescription: ( localize(
-            13930,
+            14005,
             "Controls whether detected file write operations are blocked in the run in terminal tool. When detected, this will require explicit approval regardless of whether the command would normally be auto approved. Note that this cannot detect all possible methods of writing files, this is what is currently detected:\n\n- File redirection (detected via the bash or PowerShell tree sitter grammar)\n- `sed` in-place editing (`-i`, `-I`, `--in-place`)"
         ))
     },
     [TerminalChatAgentToolsSettingId.ShellIntegrationTimeout]: {
         markdownDescription: ( localize(
-            13931,
+            14006,
             "Configures the duration in milliseconds to wait for shell integration to be detected when the run in terminal tool launches a new terminal. Set to `0` to skip the wait entirely, the default value `-1` uses a variable wait time based on the value of {0} and whether it's a remote window. A large value can be useful if your shell starts very slowly.",
             `\`#${TerminalSettingId.ShellIntegrationEnabled}#\``
         )),
@@ -324,14 +328,14 @@ const terminalChatAgentToolsConfiguration = {
         maximum: 60000,
         default: -1,
         markdownDeprecationMessage: ( localize(
-            13932,
+            14007,
             "Use {0} instead",
             `\`#${TerminalSettingId.ShellIntegrationTimeout}#\``
         ))
     },
     [TerminalChatAgentToolsSettingId.IdlePollInterval]: {
         markdownDescription: ( localize(
-            13933,
+            14008,
             "Configures the idle poll interval in milliseconds used by the run in terminal tool to detect when commands have finished executing. Lower values make command detection faster but may cause false positives on slow systems. This primarily affects terminals without shell integration where idle detection is used instead of shell integration events."
         )),
         type: "integer",
@@ -342,7 +346,7 @@ const terminalChatAgentToolsConfiguration = {
     [TerminalChatAgentToolsSettingId.TerminalProfileLinux]: {
         restricted: true,
         markdownDescription: ( localize(
-            13934,
+            14009,
             "The terminal profile to use on Linux for chat agent's run in terminal tool."
         )),
         type: ["object", "null"],
@@ -359,7 +363,7 @@ const terminalChatAgentToolsConfiguration = {
     [TerminalChatAgentToolsSettingId.TerminalProfileMacOs]: {
         restricted: true,
         markdownDescription: ( localize(
-            13935,
+            14010,
             "The terminal profile to use on macOS for chat agent's run in terminal tool."
         )),
         type: ["object", "null"],
@@ -376,7 +380,7 @@ const terminalChatAgentToolsConfiguration = {
     [TerminalChatAgentToolsSettingId.TerminalProfileWindows]: {
         restricted: true,
         markdownDescription: ( localize(
-            13936,
+            14011,
             "The terminal profile to use on Windows for chat agent's run in terminal tool."
         )),
         type: ["object", "null"],
@@ -395,25 +399,25 @@ const terminalChatAgentToolsConfiguration = {
         default: false,
         tags: ["experimental"],
         markdownDescription: ( localize(
-            13937,
+            14012,
             "Whether to automatically respond to prompts in the terminal such as `Confirm? y/n`. This is an experimental feature and may not work in all scenarios.\n\n**This feature is inherently risky to use as you're deferring potentially sensitive decisions to an LLM. Use at your own risk.**"
         ))
     },
     [TerminalChatAgentToolsSettingId.OutputLocation]: {
-        markdownDescription: ( localize(13938, "Where to show the output from the run in terminal tool.")),
+        markdownDescription: ( localize(14013, "Where to show the output from the run in terminal tool.")),
         type: "string",
         enum: ["terminal", "chat"],
-        enumDescriptions: [( localize(13939, "Reveal the terminal in the panel or editor in addition to chat.")), ( localize(13940, "Reveal the terminal output within chat only."))],
+        enumDescriptions: [( localize(14014, "Reveal the terminal in the panel or editor in addition to chat.")), ( localize(14015, "Reveal the terminal output within chat only."))],
         default: "chat",
         tags: ["experimental"],
         experiment: {
             mode: "auto"
         }
     },
-    [TerminalChatAgentToolsSettingId.TerminalSandboxEnabled]: {
+    [TerminalChatAgentToolsSettingId.AgentSandboxEnabled]: {
         markdownDescription: ( localize(
-            13941,
-            "Controls whether to run commands in a sandboxed terminal for the run in terminal tool."
+            14016,
+            "Controls whether agent mode uses sandboxing to restrict what tools can do. When enabled, tools like the terminal are run in a sandboxed environment to limit access to the system."
         )),
         type: "boolean",
         default: false,
@@ -423,11 +427,11 @@ const terminalChatAgentToolsConfiguration = {
             mode: "auto"
         }
     },
-    [TerminalChatAgentToolsSettingId.TerminalSandboxNetworkAllowedDomains]: {
+    [TerminalChatAgentToolsSettingId.AgentSandboxNetworkAllowedDomains]: {
         markdownDescription: ( localize(
-            13942,
-            "Note: this setting is applicable only when {0} is enabled. Allowed domains for network access in the terminal sandbox. Supports wildcards like {1} and an empty list means no network access.",
-            `\`#${TerminalChatAgentToolsSettingId.TerminalSandboxEnabled}#\``,
+            14017,
+            "Note: this setting is applicable only when {0} is enabled. Allowed domains for network access in sandbox. Supports wildcards like {1} and an empty list means no network access.",
+            `\`#${TerminalChatAgentToolsSettingId.AgentSandboxEnabled}#\``,
             "`*.example.com`"
         )),
         type: "array",
@@ -438,12 +442,12 @@ const terminalChatAgentToolsConfiguration = {
         tags: ["preview"],
         restricted: true
     },
-    [TerminalChatAgentToolsSettingId.TerminalSandboxNetworkDeniedDomains]: {
+    [TerminalChatAgentToolsSettingId.AgentSandboxNetworkDeniedDomains]: {
         markdownDescription: ( localize(
-            13943,
-            "Note: this setting is applicable only when {0} is enabled. Array of denied domains for network access in the terminal sandbox (checked first, takes precedence over {1}).",
-            `\`#${TerminalChatAgentToolsSettingId.TerminalSandboxEnabled}#\``,
-            `\`#${TerminalChatAgentToolsSettingId.TerminalSandboxNetworkAllowedDomains}#\``
+            14018,
+            "Note: this setting is applicable only when {0} is enabled. Array of denied domains for network access in sandbox (checked first, takes precedence over {1}).",
+            `\`#${TerminalChatAgentToolsSettingId.AgentSandboxEnabled}#\``,
+            `\`#${TerminalChatAgentToolsSettingId.AgentSandboxNetworkAllowedDomains}#\``
         )),
         type: "array",
         items: {
@@ -453,29 +457,18 @@ const terminalChatAgentToolsConfiguration = {
         tags: ["preview"],
         restricted: true
     },
-    [TerminalChatAgentToolsSettingId.TerminalSandboxNetworkAllowTrustedDomains]: {
+    [TerminalChatAgentToolsSettingId.AgentSandboxLinuxFileSystem]: {
         markdownDescription: ( localize(
-            13944,
-            "Note: this setting is applicable only when {0} is enabled. When enabled, the Trusted Domains list is included in the allowed domains for network access in the terminal sandbox.",
-            `\`#${TerminalChatAgentToolsSettingId.TerminalSandboxEnabled}#\``
-        )),
-        type: "boolean",
-        default: false,
-        tags: ["preview"],
-        restricted: true
-    },
-    [TerminalChatAgentToolsSettingId.TerminalSandboxLinuxFileSystem]: {
-        markdownDescription: ( localize(
-            13945,
-            "Note: this setting is applicable only when {0} is enabled. Controls file system access in the terminal sandbox on Linux. Paths do not support glob patterns, only literal paths (ex: ./src/, ~/.ssh, .env). **bubblewrap** and **socat** should be installed for this setting to work.",
-            `\`#${TerminalChatAgentToolsSettingId.TerminalSandboxEnabled}#\``
+            14019,
+            "Note: this setting is applicable only when {0} is enabled. Controls file system access in sandbox on Linux. Paths do not support glob patterns, only literal paths (ex: ./src/, ~/.ssh, .env). **bubblewrap** and **socat** should be installed for this setting to work.",
+            `\`#${TerminalChatAgentToolsSettingId.AgentSandboxEnabled}#\``
         )),
         type: "object",
         properties: {
             denyRead: {
                 type: "array",
                 description: ( localize(
-                    13946,
+                    14020,
                     "Array of paths to deny read access. Leave empty to allow reading all paths."
                 )),
                 items: {
@@ -486,7 +479,7 @@ const terminalChatAgentToolsConfiguration = {
             allowWrite: {
                 type: "array",
                 description: ( localize(
-                    13947,
+                    14021,
                     "Array of paths to allow write access. Leave empty to disallow all writes."
                 )),
                 items: {
@@ -497,7 +490,7 @@ const terminalChatAgentToolsConfiguration = {
             denyWrite: {
                 type: "array",
                 description: ( localize(
-                    13948,
+                    14022,
                     "Array of paths to deny write access within allowed paths (takes precedence over allowWrite)."
                 )),
                 items: {
@@ -514,18 +507,18 @@ const terminalChatAgentToolsConfiguration = {
         tags: ["preview"],
         restricted: true
     },
-    [TerminalChatAgentToolsSettingId.TerminalSandboxMacFileSystem]: {
+    [TerminalChatAgentToolsSettingId.AgentSandboxMacFileSystem]: {
         markdownDescription: ( localize(
-            13949,
-            "Note: this setting is applicable only when {0} is enabled. Controls file system access in the terminal sandbox on macOS. Paths also support git-style glob patterns(ex: *.ts, ./src, ./src/**/*.ts, file?.txt).",
-            `\`#${TerminalChatAgentToolsSettingId.TerminalSandboxEnabled}#\``
+            14023,
+            "Note: this setting is applicable only when {0} is enabled. Controls file system access in sandbox on macOS. Paths also support git-style glob patterns(ex: *.ts, ./src, ./src/**/*.ts, file?.txt).",
+            `\`#${TerminalChatAgentToolsSettingId.AgentSandboxEnabled}#\``
         )),
         type: "object",
         properties: {
             denyRead: {
                 type: "array",
                 description: ( localize(
-                    13950,
+                    14024,
                     "Array of paths to deny read access. Leave empty to allow reading all paths."
                 )),
                 items: {
@@ -536,7 +529,7 @@ const terminalChatAgentToolsConfiguration = {
             allowWrite: {
                 type: "array",
                 description: ( localize(
-                    13951,
+                    14025,
                     "Array of paths to allow write access. Leave empty to disallow all writes."
                 )),
                 items: {
@@ -547,7 +540,7 @@ const terminalChatAgentToolsConfiguration = {
             denyWrite: {
                 type: "array",
                 description: ( localize(
-                    13952,
+                    14026,
                     "Array of paths to deny write access within allowed paths (takes precedence over allowWrite)."
                 )),
                 items: {
@@ -568,19 +561,19 @@ const terminalChatAgentToolsConfiguration = {
         type: "boolean",
         default: true,
         markdownDescription: [( localize(
-            13953,
+            14027,
             "Whether to exclude commands run by the terminal tool from the shell history. See below for the supported shells and the method used for each:"
         )), `- \`bash\`: ${( localize(
-            13954,
+            14028,
             "Sets `HISTCONTROL=ignorespace` and prepends the command with space"
         ))}`, `- \`zsh\`: ${( localize(
-            13955,
+            14029,
             "Sets `HIST_IGNORE_SPACE` option and prepends the command with space"
         ))}`, `- \`fish\`: ${( localize(
-            13956,
+            14030,
             "Sets `fish_private_mode` to prevent any command from entering history"
         ))}`, `- \`pwsh\`: ${( localize(
-            13957,
+            14031,
             "Sets a custom history handler via PSReadLine's `AddToHistoryHandler` to prevent any command from entering history"
         ))}`].join("\n")
     },
@@ -593,7 +586,7 @@ const terminalChatAgentToolsConfiguration = {
             mode: "auto"
         },
         markdownDescription: ( localize(
-            13958,
+            14032,
             "Whether to enforce the timeout value provided by the model in the run in terminal tool. When enabled, if the model provides a timeout parameter, the tool will stop tracking the command after that duration and return the output collected so far."
         ))
     }
@@ -608,7 +601,7 @@ for (const id of [
     terminalChatAgentToolsConfiguration[id] = {
         deprecated: true,
         markdownDeprecationMessage: ( localize(
-            13959,
+            14033,
             "Use {0} instead",
             `\`#${TerminalChatAgentToolsSettingId.AutoApprove}#\``
         ))
@@ -618,11 +611,61 @@ terminalChatAgentToolsConfiguration[TerminalChatAgentToolsSettingId.DeprecatedTe
     type: "object",
     deprecated: true,
     markdownDeprecationMessage: ( localize(
-        13960,
-        "This setting has been split into {0}, {1}, and {2}.",
-        `\`#${TerminalChatAgentToolsSettingId.TerminalSandboxNetworkAllowedDomains}#\``,
-        `\`#${TerminalChatAgentToolsSettingId.TerminalSandboxNetworkDeniedDomains}#\``,
-        `\`#${TerminalChatAgentToolsSettingId.TerminalSandboxNetworkAllowTrustedDomains}#\``
+        14034,
+        "This setting has been split into {0} and {1}.",
+        `\`#${TerminalChatAgentToolsSettingId.AgentSandboxNetworkAllowedDomains}#\``,
+        `\`#${TerminalChatAgentToolsSettingId.AgentSandboxNetworkDeniedDomains}#\``
+    ))
+};
+terminalChatAgentToolsConfiguration[TerminalChatAgentToolsSettingId.DeprecatedTerminalSandboxEnabled] = {
+    type: "boolean",
+    deprecated: true,
+    markdownDeprecationMessage: ( localize(
+        14035,
+        "Use {0} instead",
+        `\`#${TerminalChatAgentToolsSettingId.AgentSandboxEnabled}#\``
+    ))
+};
+terminalChatAgentToolsConfiguration[TerminalChatAgentToolsSettingId.DeprecatedTerminalSandboxNetworkAllowedDomains] = {
+    type: "array",
+    items: {
+        type: "string"
+    },
+    deprecated: true,
+    markdownDeprecationMessage: ( localize(
+        14036,
+        "Use {0} instead",
+        `\`#${TerminalChatAgentToolsSettingId.AgentSandboxNetworkAllowedDomains}#\``
+    ))
+};
+terminalChatAgentToolsConfiguration[TerminalChatAgentToolsSettingId.DeprecatedTerminalSandboxNetworkDeniedDomains] = {
+    type: "array",
+    items: {
+        type: "string"
+    },
+    deprecated: true,
+    markdownDeprecationMessage: ( localize(
+        14037,
+        "Use {0} instead",
+        `\`#${TerminalChatAgentToolsSettingId.AgentSandboxNetworkDeniedDomains}#\``
+    ))
+};
+terminalChatAgentToolsConfiguration[TerminalChatAgentToolsSettingId.DeprecatedTerminalSandboxLinuxFileSystem] = {
+    type: "object",
+    deprecated: true,
+    markdownDeprecationMessage: ( localize(
+        14038,
+        "Use {0} instead",
+        `\`#${TerminalChatAgentToolsSettingId.AgentSandboxLinuxFileSystem}#\``
+    ))
+};
+terminalChatAgentToolsConfiguration[TerminalChatAgentToolsSettingId.DeprecatedTerminalSandboxMacFileSystem] = {
+    type: "object",
+    deprecated: true,
+    markdownDeprecationMessage: ( localize(
+        14039,
+        "Use {0} instead",
+        `\`#${TerminalChatAgentToolsSettingId.AgentSandboxMacFileSystem}#\``
     ))
 };
 

package/vscode/src/vs/workbench/contrib/terminalContrib/chatAgentTools/common/terminalSandboxService.service.d.ts

@@ -1,14 +1,18 @@
+import { CancellationToken } from "../../../../../base/common/cancellation.js";
 import { OperatingSystem } from "../../../../../base/common/platform.js";
 import { URI } from "../../../../../base/common/uri.js";
-import { ITerminalSandboxResolvedNetworkDomains } from "@codingame/monaco-vscode-chat-service-override/vscode/vs/workbench/contrib/terminalContrib/chatAgentTools/common/terminalSandboxService";
+import { ITerminalSandboxPrerequisiteCheckResult, ITerminalSandboxResolvedNetworkDomains, ISandboxDependencyInstallOptions, ISandboxDependencyInstallResult } from "@codingame/monaco-vscode-chat-service-override/vscode/vs/workbench/contrib/terminalContrib/chatAgentTools/common/terminalSandboxService";
 export declare const ITerminalSandboxService: import("../../../../../platform/instantiation/common/instantiation.js").ServiceIdentifier<ITerminalSandboxService>;
 export interface ITerminalSandboxService {
     readonly _serviceBrand: undefined;
     isEnabled(): Promise<boolean>;
     getOS(): Promise<OperatingSystem>;
-    wrapCommand(command: string): string;
+    checkForSandboxingPrereqs(forceRefresh?: boolean): Promise<ITerminalSandboxPrerequisiteCheckResult>;
+    wrapCommand(command: string, requestUnsandboxedExecution?: boolean): string;
     getSandboxConfigPath(forceRefresh?: boolean): Promise<string | undefined>;
     getTempDir(): URI | undefined;
     setNeedsForceUpdateConfigFile(): void;
     getResolvedNetworkDomains(): ITerminalSandboxResolvedNetworkDomains;
+    getMissingSandboxDependencies(): Promise<string[]>;
+    installMissingSandboxDependencies(missingDependencies: string[], sessionResource: URI | undefined, token: CancellationToken, options: ISandboxDependencyInstallOptions): Promise<ISandboxDependencyInstallResult>;
 }

package/vscode/src/vs/workbench/contrib/terminalContrib/commandGuide/common/terminalCommandGuideConfiguration.js

@@ -10,7 +10,7 @@ const terminalCommandGuideConfiguration = {
     [TerminalCommandGuideSettingId.ShowCommandGuide]: {
         restricted: true,
         markdownDescription: ( localize(
-            13976,
+            14058,
             "Whether to show the command guide when hovering over a command in the terminal."
         )),
         type: "boolean",

package/vscode/src/vs/workbench/contrib/terminalContrib/history/common/terminal.history.js

@@ -19,7 +19,7 @@ const terminalHistoryConfiguration = {
     [TerminalHistorySettingId.ShellIntegrationCommandHistory]: {
         restricted: true,
         markdownDescription: ( localize(
-            14037,
+            14119,
             "Controls the number of recently used commands to keep in the terminal command history. Set to 0 to disable terminal command history."
         )),
         type: "number",

package/vscode/src/vs/workbench/contrib/terminalContrib/inlineHint/common/terminalInitialHintConfiguration.js

@@ -10,7 +10,7 @@ const terminalInitialHintConfiguration = {
     [TerminalInitialHintSettingId.Enabled]: {
         restricted: true,
         markdownDescription: ( localize(
-            14048,
+            14130,
             "Controls if the first terminal without input will show a hint about available actions when it is focused. This will only show when {0} is disabled.",
             `\`#${TerminalSettingId.SendKeybindingsToShell}#\``
         )),

package/vscode/src/vs/workbench/contrib/terminalContrib/notification/common/terminalNotificationConfiguration.js

@@ -10,7 +10,7 @@ var TerminalOscNotificationsSettingId;
 const terminalOscNotificationsConfiguration = {
     [TerminalOscNotificationsSettingId.EnableNotifications]: {
         description: ( localize(
-            14075,
+            14157,
             "Controls whether notifications sent from the terminal via OSC 99 are shown. This uses notifications inside the product instead of desktop notifications. Sounds, icons and filtering are not supported."
         )),
         type: "boolean",

package/vscode/src/vs/workbench/contrib/terminalContrib/stickyScroll/common/terminalStickyScrollConfiguration.js

@@ -11,7 +11,7 @@ var TerminalStickyScrollSettingId;
 const terminalStickyScrollConfiguration = {
     [TerminalStickyScrollSettingId.Enabled]: {
         markdownDescription: ( localize(
-            14119,
+            14201,
             "Shows the current command at the top of the terminal. This feature requires [shell integration]({0}) to be activated. See {1}.",
             "https://code.visualstudio.com/docs/terminal/shell-integration",
             `\`#${TerminalSettingId.ShellIntegrationEnabled}#\``
@@ -21,7 +21,7 @@ const terminalStickyScrollConfiguration = {
     },
     [TerminalStickyScrollSettingId.MaxLineCount]: {
         markdownDescription: ( localize(
-            14120,
+            14202,
             "Defines the maximum number of sticky lines to show. Sticky scroll lines will never exceed 40% of the viewport regardless of this setting."
         )),
         type: "number",
@@ -31,7 +31,7 @@ const terminalStickyScrollConfiguration = {
     },
     [TerminalStickyScrollSettingId.IgnoredCommands]: {
         markdownDescription: ( localize(
-            14121,
+            14203,
             "A list of commands that should not trigger sticky scroll. When a command from this list is detected, the sticky scroll overlay will be hidden."
         )),
         type: "array",