@codingame/monaco-vscode-api 33.0.9 → 34.0.0

package/vscode/src/vs/workbench/contrib/terminalContrib/chatAgentTools/common/terminalChatAgentToolsConfiguration.js

@@ -16,6 +16,7 @@ var TerminalChatAgentToolsSettingId;
     TerminalChatAgentToolsSettingId["OutputLocation"] = "chat.tools.terminal.outputLocation";
     TerminalChatAgentToolsSettingId["AgentSandboxLinuxFileSystem"] = "chat.agent.sandbox.fileSystem.linux";
     TerminalChatAgentToolsSettingId["AgentSandboxMacFileSystem"] = "chat.agent.sandbox.fileSystem.mac";
+    TerminalChatAgentToolsSettingId["AgentSandboxWindowsFileSystem"] = "chat.agent.sandbox.fileSystem.windows";
     TerminalChatAgentToolsSettingId["AgentSandboxAdvancedRuntime"] = "chat.agent.sandbox.advanced.runtime";
     TerminalChatAgentToolsSettingId["PreventShellHistory"] = "chat.tools.terminal.preventShellHistory";
     TerminalChatAgentToolsSettingId["EnforceTimeoutFromModel"] = "chat.tools.terminal.enforceTimeoutFromModel";
@@ -38,9 +39,9 @@ var TerminalChatAgentToolsSettingId;
 const autoApproveBoolean = {
     type: "boolean",
     enum: [true, false],
-    enumDescriptions: [( localize(14578, "Automatically approve the pattern.")), ( localize(14579, "Require explicit approval for the pattern."))],
+    enumDescriptions: [( localize(14777, "Automatically approve the pattern.")), ( localize(14778, "Require explicit approval for the pattern."))],
     description: ( localize(
-        14580,
+        14779,
         "The start of a command to match against. A regular expression can be provided by wrapping the string in `/` characters."
     ))
 };
@@ -49,7 +50,7 @@ const terminalChatAgentProfileSchema = {
     required: ["path"],
     properties: {
         path: {
-            description: ( localize(14581, "A path to a shell executable.")),
+            description: ( localize(14780, "A path to a shell executable.")),
             type: "string"
         },
         ...terminalProfileBaseProperties
@@ -58,7 +59,7 @@ const terminalChatAgentProfileSchema = {
 const terminalChatAgentToolsConfiguration = {
     [TerminalChatAgentToolsSettingId.EnableAutoApprove]: {
         description: ( localize(
-            14582,
+            14781,
             "Controls whether to allow auto approval in the run in terminal tool."
         )),
         type: "boolean",
@@ -71,7 +72,7 @@ const terminalChatAgentToolsConfiguration = {
                 description: {
                     key: "autoApproveMode.description",
                     value: ( localize(
-                        14582,
+                        14781,
                         "Controls whether to allow auto approval in the run in terminal tool."
                     ))
                 }
@@ -83,18 +84,18 @@ const terminalChatAgentToolsConfiguration = {
     },
     [TerminalChatAgentToolsSettingId.AutoApprove]: {
         markdownDescription: [( localize(
-            14583,
+            14782,
             "A list of commands or regular expressions that control whether the run in terminal tool commands require explicit approval. These will be matched against the start of a command. A regular expression can be provided by wrapping the string in {0} characters followed by optional flags such as {1} for case-insensitivity.",
             "`/`",
             "`i`"
         )), ( localize(
-            14584,
+            14783,
             "Set to {0} to automatically approve commands, {1} to always require explicit approval or {2} to unset the value.",
             "`true`",
             "`false`",
             "`null`"
         )), ( localize(
-            14585,
+            14784,
             "Note that these commands and regular expressions are evaluated for every _sub-command_ within the full _command line_, so {0} for example will need both {1} and {2} to match a {3} entry and must not match a {4} entry in order to auto approve. Inline commands such as {5} (process substitution) should also be detected.",
             "`foo && bar`",
             "`foo`",
@@ -103,34 +104,34 @@ const terminalChatAgentToolsConfiguration = {
             "`false`",
             "`<(foo)`"
         )), ( localize(
-            14586,
+            14785,
             "An object can be used to match against the full command line instead of matching sub-commands and inline commands, for example {0}. In order to be auto approved _both_ the sub-command and command line must not be explicitly denied, then _either_ all sub-commands or command line needs to be approved.",
             "`{ approve: false, matchCommandLine: true }`"
         )), ( localize(
-            14587,
+            14786,
             "Note that there's a default set of rules to allow and also deny commands. Consider setting {0} to {1} to ignore all default rules to ensure there are no conflicts with your own rules. Do this at your own risk, the default denial rules are designed to protect you against running dangerous commands.",
             `\`#${TerminalChatAgentToolsSettingId.IgnoreDefaultAutoApproveRules}#\``,
             "`true`"
-        )), [( localize(14588, "Examples:")), `|${( localize(14589, "Value"))}|${( localize(14590, "Description"))}|`, "|---|---|", "| `\"mkdir\": true` | " + ( localize(14591, "Allow all commands starting with {0}", "`mkdir`")), "| `\"npm run build\": true` | " + ( localize(14592, "Allow all commands starting with {0}", "`npm run build`")), "| `\"bin/test.sh\": true` | " + ( localize(
-            14593,
+        )), [( localize(14787, "Examples:")), `|${( localize(14788, "Value"))}|${( localize(14789, "Description"))}|`, "|---|---|", "| `\"mkdir\": true` | " + ( localize(14790, "Allow all commands starting with {0}", "`mkdir`")), "| `\"npm run build\": true` | " + ( localize(14791, "Allow all commands starting with {0}", "`npm run build`")), "| `\"bin/test.sh\": true` | " + ( localize(
+            14792,
             "Allow all commands that match the path {0} ({1}, {2}, etc.)",
             "`bin/test.sh`",
             "`bin\\test.sh`",
             "`./bin/test.sh`"
         )), "| `\"/^git (status\\|show\\\\b.*)$/\": true` | " + ( localize(
-            14594,
+            14793,
             "Allow {0} and all commands starting with {1}",
             "`git status`",
             "`git show`"
-        )), "| `\"/^Get-ChildItem\\\\b/i\": true` | " + ( localize(14595, "will allow {0} commands regardless of casing", "`Get-ChildItem`")), "| `\"/.*/\": true` | " + ( localize(14596, "Allow all commands (denied commands still require approval)")), "| `\"rm\": false` | " + ( localize(
-            14597,
+        )), "| `\"/^Get-ChildItem\\\\b/i\": true` | " + ( localize(14794, "will allow {0} commands regardless of casing", "`Get-ChildItem`")), "| `\"/.*/\": true` | " + ( localize(14795, "Allow all commands (denied commands still require approval)")), "| `\"rm\": false` | " + ( localize(
+            14796,
             "Require explicit approval for all commands starting with {0}",
             "`rm`"
         )), "| `\"/\\\\.ps1/i\": { approve: false, matchCommandLine: true }` | " + ( localize(
-            14598,
+            14797,
             "Require explicit approval for any _command line_ that contains {0} regardless of casing",
             "`\".ps1\"`"
-        )), "| `\"rm\": null` | " + ( localize(14599, "Unset the default {0} value for {1}", "`false`", "`rm`"))].join("\n")].join("\n\n"),
+        )), "| `\"rm\": null` | " + ( localize(14798, "Unset the default {0} value for {1}", "`false`", "`rm`"))].join("\n")].join("\n\n"),
         type: "object",
         additionalProperties: {
             anyOf: [autoApproveBoolean, {
@@ -140,12 +141,12 @@ const terminalChatAgentToolsConfiguration = {
                     matchCommandLine: {
                         type: "boolean",
                         enum: [true, false],
-                        enumDescriptions: [( localize(14600, "Match against the full command line, eg. `foo && bar`.")), ( localize(
-                            14601,
+                        enumDescriptions: [( localize(14799, "Match against the full command line, eg. `foo && bar`.")), ( localize(
+                            14800,
                             "Match against sub-commands and inline commands, eg. `foo && bar` will need both `foo` and `bar` to match."
                         ))],
                         description: ( localize(
-                            14602,
+                            14801,
                             "Whether to match against the full command line, as opposed to splitting by sub-commands and inline commands."
                         ))
                     }
@@ -154,7 +155,7 @@ const terminalChatAgentToolsConfiguration = {
             }, {
                 type: "null",
                 description: ( localize(
-                    14603,
+                    14802,
                     "Ignore the pattern, this is useful for unsetting the same pattern set at a higher scope."
                 ))
             }]
@@ -289,7 +290,7 @@ const terminalChatAgentToolsConfiguration = {
         default: false,
         tags: ["experimental"],
         markdownDescription: ( localize(
-            14604,
+            14803,
             "Whether to ignore the built-in default auto-approve rules used by the run in terminal tool as defined in {0}. When this setting is enabled, the run in terminal tool will ignore any rule that comes from the default set but still follow rules defined in the user, remote and workspace settings. Use this setting at your own risk; the default auto-approve rules are designed to protect you against running dangerous commands.",
             `\`#${TerminalChatAgentToolsSettingId.AutoApprove}#\``
         ))
@@ -300,27 +301,27 @@ const terminalChatAgentToolsConfiguration = {
         default: true,
         tags: ["experimental"],
         markdownDescription: ( localize(
-            14605,
+            14804,
             "Whether to automatically approve npm, yarn, and pnpm run commands when the script is defined in a workspace package.json file. Since the workspace is trusted, scripts defined in package.json are considered safe to run without explicit approval."
         ))
     },
     [TerminalChatAgentToolsSettingId.BlockDetectedFileWrites]: {
         type: "string",
         enum: ["never", "outsideWorkspace", "all"],
-        enumDescriptions: [( localize(14606, "Allow all detected file writes.")), ( localize(
-            14607,
+        enumDescriptions: [( localize(14805, "Allow all detected file writes.")), ( localize(
+            14806,
             "Block file writes detected outside the workspace. This depends on the shell integration feature working correctly to determine the current working directory of the terminal."
-        )), ( localize(14608, "Block all detected file writes."))],
+        )), ( localize(14807, "Block all detected file writes."))],
         default: "outsideWorkspace",
         tags: ["experimental"],
         markdownDescription: ( localize(
-            14609,
+            14808,
             "Controls whether detected file write operations are blocked in the run in terminal tool. When detected, this will require explicit approval regardless of whether the command would normally be auto approved. Note that this cannot detect all possible methods of writing files, this is what is currently detected:\n\n- File redirection (detected via the bash or PowerShell tree sitter grammar)\n- `sed` in-place editing (`-i`, `-I`, `--in-place`)"
         ))
     },
     [TerminalChatAgentToolsSettingId.ShellIntegrationTimeout]: {
         markdownDescription: ( localize(
-            14610,
+            14809,
             "Configures the duration in milliseconds to wait for shell integration to be detected when the run in terminal tool launches a new terminal. Set to `0` to skip the wait entirely, the default value `-1` uses a variable wait time based on the value of {0} and whether it's a remote window. A large value can be useful if your shell starts very slowly.",
             `\`#${TerminalSettingId.ShellIntegrationEnabled}#\``
         )),
@@ -329,14 +330,14 @@ const terminalChatAgentToolsConfiguration = {
         maximum: 60000,
         default: -1,
         markdownDeprecationMessage: ( localize(
-            14611,
+            14810,
             "Use {0} instead",
             `\`#${TerminalSettingId.ShellIntegrationTimeout}#\``
         ))
     },
     [TerminalChatAgentToolsSettingId.IdlePollInterval]: {
         markdownDescription: ( localize(
-            14612,
+            14811,
             "Configures the idle poll interval in milliseconds used by the run in terminal tool to detect when commands have finished executing. Lower values make command detection faster but may cause false positives on slow systems. This primarily affects terminals without shell integration where idle detection is used instead of shell integration events."
         )),
         type: "integer",
@@ -347,7 +348,7 @@ const terminalChatAgentToolsConfiguration = {
     [TerminalChatAgentToolsSettingId.TerminalProfileLinux]: {
         restricted: true,
         markdownDescription: ( localize(
-            14613,
+            14812,
             "The terminal profile to use on Linux for chat agent's run in terminal tool."
         )),
         type: ["object", "null"],
@@ -364,7 +365,7 @@ const terminalChatAgentToolsConfiguration = {
     [TerminalChatAgentToolsSettingId.TerminalProfileMacOs]: {
         restricted: true,
         markdownDescription: ( localize(
-            14614,
+            14813,
             "The terminal profile to use on macOS for chat agent's run in terminal tool."
         )),
         type: ["object", "null"],
@@ -381,7 +382,7 @@ const terminalChatAgentToolsConfiguration = {
     [TerminalChatAgentToolsSettingId.TerminalProfileWindows]: {
         restricted: true,
         markdownDescription: ( localize(
-            14615,
+            14814,
             "The terminal profile to use on Windows for chat agent's run in terminal tool."
         )),
         type: ["object", "null"],
@@ -396,10 +397,10 @@ const terminalChatAgentToolsConfiguration = {
         }]
     },
     [TerminalChatAgentToolsSettingId.OutputLocation]: {
-        markdownDescription: ( localize(14616, "Where to show the output from the run in terminal tool.")),
+        markdownDescription: ( localize(14815, "Where to show the output from the run in terminal tool.")),
         type: "string",
         enum: ["terminal", "chat"],
-        enumDescriptions: [( localize(14617, "Reveal the terminal in the panel or editor in addition to chat.")), ( localize(14618, "Reveal the terminal output within chat only."))],
+        enumDescriptions: [( localize(14816, "Reveal the terminal in the panel or editor in addition to chat.")), ( localize(14817, "Reveal the terminal output within chat only."))],
         default: "chat",
         tags: ["experimental"],
         experiment: {
@@ -408,7 +409,7 @@ const terminalChatAgentToolsConfiguration = {
     },
     [AgentSandboxSettingId.AgentSandboxEnabled]: {
         markdownDescription: ( localize(
-            14619,
+            14818,
             "Controls whether agent mode uses sandboxing to restrict what tools can do. When enabled, tools like the terminal are run in a sandboxed environment to limit access to the system."
         )),
         type: "string",
@@ -417,8 +418,8 @@ const terminalChatAgentToolsConfiguration = {
             AgentSandboxEnabledValue.On,
             AgentSandboxEnabledValue.AllowNetwork
         ],
-        enumDescriptions: [( localize(14620, "Disable sandboxing for agent mode tools.")), ( localize(14621, "Enable sandboxing for agent mode tools.")), ( localize(
-            14622,
+        enumDescriptions: [( localize(14819, "Disable sandboxing for agent mode tools.")), ( localize(14820, "Enable sandboxing for agent mode tools.")), ( localize(
+            14821,
             "Enable sandboxing for agent mode tools and allow all network domains."
         ))],
         default: AgentSandboxEnabledValue.Off,
@@ -435,29 +436,44 @@ const terminalChatAgentToolsConfiguration = {
                 description: {
                     key: "agentSandbox.enabledSetting",
                     value: ( localize(
-                        14619,
+                        14818,
                         "Controls whether agent mode uses sandboxing to restrict what tools can do. When enabled, tools like the terminal are run in a sandboxed environment to limit access to the system."
                     ))
                 },
                 enumDescriptions: [{
                     key: "agentSandbox.enabledSetting.offDescription",
-                    value: ( localize(14620, "Disable sandboxing for agent mode tools."))
+                    value: ( localize(14819, "Disable sandboxing for agent mode tools."))
                 }, {
                     key: "agentSandbox.enabledSetting.onDescription",
-                    value: ( localize(14621, "Enable sandboxing for agent mode tools."))
+                    value: ( localize(14820, "Enable sandboxing for agent mode tools."))
                 }, {
                     key: "agentSandbox.enabledSetting.allowNetworkDescription",
                     value: ( localize(
-                        14622,
+                        14821,
                         "Enable sandboxing for agent mode tools and allow all network domains."
                     ))
                 }]
             }
         }
     },
+    [AgentSandboxSettingId.AgentSandboxWindowsEnabled]: {
+        markdownDescription: ( localize(14822, "Controls whether agent mode uses sandboxing on Windows.")),
+        type: "string",
+        enum: [AgentSandboxEnabledValue.Off, AgentSandboxEnabledValue.AllowNetwork],
+        enumDescriptions: [( localize(14823, "Disable sandboxing for agent mode tools on Windows.")), ( localize(
+            14824,
+            "Enable sandboxing for agent mode tools on Windows and allow all network domains."
+        ))],
+        default: AgentSandboxEnabledValue.Off,
+        tags: ["experimental"],
+        restricted: true,
+        experiment: {
+            mode: "auto"
+        }
+    },
     [AgentSandboxSettingId.AgentSandboxAllowUnsandboxedCommands]: {
         markdownDescription: ( localize(
-            14623,
+            14825,
             "Controls whether agent mode terminal commands can run outside the sandbox after user confirmation when a sandboxed command fails or when sandbox restrictions would block the command. This applies only when {0} is enabled.",
             `\`#${AgentSandboxSettingId.AgentSandboxEnabled}#\``
         )),
@@ -473,7 +489,7 @@ const terminalChatAgentToolsConfiguration = {
                 description: {
                     key: "agentSandbox.allowUnsandboxedCommands",
                     value: ( localize(
-                        14623,
+                        14825,
                         "Controls whether agent mode terminal commands can run outside the sandbox after user confirmation when a sandboxed command fails or when sandbox restrictions would block the command. This applies only when {0} is enabled.",
                         `\`#${AgentSandboxSettingId.AgentSandboxEnabled}#\``
                     ))
@@ -481,9 +497,20 @@ const terminalChatAgentToolsConfiguration = {
             }
         }
     },
+    [AgentSandboxSettingId.AgentSandboxRetryWithAllowNetworkRequests]: {
+        markdownDescription: ( localize(
+            14826,
+            "Controls whether agent mode terminal commands can retry in the sandbox with unrestricted network access after user confirmation. This applies only when {0} is set to `on` and preserves file system sandboxing while relaxing network restrictions for an approved command.",
+            `\`#${AgentSandboxSettingId.AgentSandboxEnabled}#\``
+        )),
+        type: "boolean",
+        default: true,
+        tags: ["preview"],
+        restricted: true
+    },
     [AgentSandboxSettingId.AgentSandboxAutoApproveUnsandboxedCommands]: {
         markdownDescription: ( localize(
-            14624,
+            14827,
             "Controls whether agent mode terminal commands that run outside the sandbox are auto-approved. This applies only when both {0} and {1} are enabled.",
             `\`#${AgentSandboxSettingId.AgentSandboxEnabled}#\``,
             `\`#${AgentSandboxSettingId.AgentSandboxAllowUnsandboxedCommands}#\``
@@ -500,7 +527,7 @@ const terminalChatAgentToolsConfiguration = {
                 description: {
                     key: "agentSandbox.autoApproveUnsandboxedCommands",
                     value: ( localize(
-                        14624,
+                        14827,
                         "Controls whether agent mode terminal commands that run outside the sandbox are auto-approved. This applies only when both {0} and {1} are enabled.",
                         `\`#${AgentSandboxSettingId.AgentSandboxEnabled}#\``,
                         `\`#${AgentSandboxSettingId.AgentSandboxAllowUnsandboxedCommands}#\``
@@ -511,7 +538,7 @@ const terminalChatAgentToolsConfiguration = {
     },
     [AgentSandboxSettingId.AgentSandboxAllowAutoApprove]: {
         markdownDescription: ( localize(
-            14625,
+            14828,
             "Controls whether agent mode terminal commands that run inside the sandbox are auto-approved. When disabled, the run in terminal tool uses the existing approval flow. This applies only when {0} is enabled.",
             `\`#${AgentSandboxSettingId.AgentSandboxEnabled}#\``
         )),
@@ -527,7 +554,7 @@ const terminalChatAgentToolsConfiguration = {
                 description: {
                     key: "agentSandbox.allowAutoApprove",
                     value: ( localize(
-                        14625,
+                        14828,
                         "Controls whether agent mode terminal commands that run inside the sandbox are auto-approved. When disabled, the run in terminal tool uses the existing approval flow. This applies only when {0} is enabled.",
                         `\`#${AgentSandboxSettingId.AgentSandboxEnabled}#\``
                     ))
@@ -537,7 +564,7 @@ const terminalChatAgentToolsConfiguration = {
     },
     [TerminalChatAgentToolsSettingId.AgentSandboxLinuxFileSystem]: {
         markdownDescription: ( localize(
-            14626,
+            14829,
             "Note: this setting is applicable only when {0} is enabled. Controls file system access in sandbox on Linux. Paths do not support glob patterns, only literal paths (ex: ./src/, ~/.ssh, .env). **bubblewrap** and **socat** should be installed for this setting to work.",
             `\`#${AgentSandboxSettingId.AgentSandboxEnabled}#\``
         )),
@@ -546,7 +573,7 @@ const terminalChatAgentToolsConfiguration = {
             denyRead: {
                 type: "array",
                 description: ( localize(
-                    14627,
+                    14830,
                     "Array of paths to deny read access. Leave empty to allow reading all paths."
                 )),
                 items: {
@@ -557,7 +584,7 @@ const terminalChatAgentToolsConfiguration = {
             allowRead: {
                 type: "array",
                 description: ( localize(
-                    14628,
+                    14831,
                     "Array of paths to re-allow read access within denied regions. Takes precedence over denyRead."
                 )),
                 items: {
@@ -568,8 +595,8 @@ const terminalChatAgentToolsConfiguration = {
             allowWrite: {
                 type: "array",
                 description: ( localize(
-                    14629,
-                    "Array of additional paths to allow write access. Leave empty to disallow writes outside the workspace folders, workspace storage folder, and sandbox temp directory."
+                    14832,
+                    "Array of additional paths to allow write access. Leave empty to disallow writes outside the workspace folders and sandbox temp directory."
                 )),
                 items: {
                     type: "string"
@@ -579,7 +606,7 @@ const terminalChatAgentToolsConfiguration = {
             denyWrite: {
                 type: "array",
                 description: ( localize(
-                    14630,
+                    14833,
                     "Array of paths to deny write access within allowed paths (takes precedence over allowWrite)."
                 )),
                 items: {
@@ -599,7 +626,7 @@ const terminalChatAgentToolsConfiguration = {
     },
     [TerminalChatAgentToolsSettingId.AgentSandboxMacFileSystem]: {
         markdownDescription: ( localize(
-            14631,
+            14834,
             "Note: this setting is applicable only when {0} is enabled. Controls file system access in sandbox on macOS. Paths also support git-style glob patterns(ex: *.ts, ./src, ./src/**/*.ts, file?.txt).",
             `\`#${AgentSandboxSettingId.AgentSandboxEnabled}#\``
         )),
@@ -608,7 +635,7 @@ const terminalChatAgentToolsConfiguration = {
             denyRead: {
                 type: "array",
                 description: ( localize(
-                    14632,
+                    14835,
                     "Array of paths to deny read access. Leave empty to allow reading all paths."
                 )),
                 items: {
@@ -619,7 +646,7 @@ const terminalChatAgentToolsConfiguration = {
             allowRead: {
                 type: "array",
                 description: ( localize(
-                    14633,
+                    14836,
                     "Array of paths to re-allow read access within denied regions. Takes precedence over denyRead."
                 )),
                 items: {
@@ -630,8 +657,8 @@ const terminalChatAgentToolsConfiguration = {
             allowWrite: {
                 type: "array",
                 description: ( localize(
-                    14634,
-                    "Array of additional paths to allow write access. Leave empty to disallow writes outside the workspace folders, workspace storage folder, and sandbox temp directory."
+                    14837,
+                    "Array of additional paths to allow write access. Leave empty to disallow writes outside the workspace folders and sandbox temp directory."
                 )),
                 items: {
                     type: "string"
@@ -641,7 +668,7 @@ const terminalChatAgentToolsConfiguration = {
             denyWrite: {
                 type: "array",
                 description: ( localize(
-                    14635,
+                    14838,
                     "Array of paths to deny write access within allowed paths (takes precedence over allowWrite)."
                 )),
                 items: {
@@ -659,15 +686,71 @@ const terminalChatAgentToolsConfiguration = {
         tags: ["preview"],
         restricted: true
     },
-    [TerminalChatAgentToolsSettingId.AgentSandboxAdvancedRuntime]: {
+    [TerminalChatAgentToolsSettingId.AgentSandboxWindowsFileSystem]: {
+        markdownDescription: ( localize(
+            14839,
+            "Note: this setting is applicable only when {0} is enabled. Controls file system access in sandbox on Windows. Paths do not support glob patterns, only literal paths (ex: C:\\src, C:\\Users\\me\\.ssh, .env).",
+            `\`#${AgentSandboxSettingId.AgentSandboxEnabled}#\``
+        )),
+        type: "object",
+        properties: {
+            denyRead: {
+                type: "array",
+                description: ( localize(
+                    14840,
+                    "Array of paths to deny access. Leave empty to allow reading all paths."
+                )),
+                items: {
+                    type: "string"
+                },
+                default: []
+            },
+            allowRead: {
+                type: "array",
+                description: ( localize(
+                    14841,
+                    "Array of additional paths to allow read-only access. Takes precedence over denyRead."
+                )),
+                items: {
+                    type: "string"
+                },
+                default: []
+            },
+            allowWrite: {
+                type: "array",
+                description: ( localize(
+                    14842,
+                    "Array of additional paths to allow read/write access. Leave empty to disallow writes outside the workspace folders, workspace storage folder, and sandbox temp directory."
+                )),
+                items: {
+                    type: "string"
+                },
+                default: []
+            }
+        },
+        default: {
+            denyRead: [],
+            allowRead: [],
+            allowWrite: []
+        },
+        tags: ["preview"],
+        restricted: true
+    },
+    [AgentSandboxSettingId.AgentSandboxWindowsSchemaVersion]: {
         included: false,
+        restricted: true,
+        type: "string"
+    },
+    [TerminalChatAgentToolsSettingId.AgentSandboxAdvancedRuntime]: {
         markdownDescription: ( localize(
-            14636,
+            14843,
             "Note: this setting is applicable only when {0} is enabled. Key/value pairs are passed through to the root of the sandbox runtime configuration.",
             `\`#${AgentSandboxSettingId.AgentSandboxEnabled}#\``
         )),
         type: "object",
-        default: {},
+        default: {
+            enableWeakerNestedSandbox: false
+        },
         additionalProperties: true,
         tags: ["preview"],
         restricted: true
@@ -676,19 +759,19 @@ const terminalChatAgentToolsConfiguration = {
         type: "boolean",
         default: true,
         markdownDescription: [( localize(
-            14637,
+            14844,
             "Whether to exclude commands run by the terminal tool from the shell history. See below for the supported shells and the method used for each:"
         )), `- \`bash\`: ${( localize(
-            14638,
+            14845,
             "Sets `HISTCONTROL=ignorespace` and prepends the command with space"
         ))}`, `- \`zsh\`: ${( localize(
-            14639,
+            14846,
             "Sets `HIST_IGNORE_SPACE` option and prepends the command with space"
         ))}`, `- \`fish\`: ${( localize(
-            14640,
+            14847,
             "Sets `fish_private_mode` to prevent any command from entering history"
         ))}`, `- \`pwsh\`: ${( localize(
-            14641,
+            14848,
             "Sets a custom history handler via PSReadLine's `AddToHistoryHandler` to prevent any command from entering history"
         ))}`].join("\n")
     },
@@ -701,7 +784,7 @@ const terminalChatAgentToolsConfiguration = {
             mode: "auto"
         },
         markdownDescription: ( localize(
-            14642,
+            14849,
             "Whether to enforce the timeout value provided by the model in the run in terminal tool. When enabled, if the model provides a timeout parameter, the tool will stop tracking the command after that duration and return the output collected so far."
         ))
     },
@@ -715,7 +798,7 @@ const terminalChatAgentToolsConfiguration = {
             mode: "auto"
         },
         markdownDescription: ( localize(
-            14643,
+            14850,
             "Number of milliseconds the run in terminal tool will wait for new output from a synchronous command before moving it to a background terminal and returning what was collected so far. The process is not killed — the tool returns the terminal ID so the model can poll, send input, or kill it. Set to {0} to disable.",
             "`0`"
         ))
@@ -727,7 +810,7 @@ const terminalChatAgentToolsConfiguration = {
         default: false,
         tags: ["experimental"],
         markdownDescription: ( localize(
-            14644,
+            14851,
             "Whether to detach persistent terminal processes so they survive when VS Code exits. When enabled, commands started with `mode: \"async\"` (legacy: `isBackground: true`) are wrapped with `nohup` (POSIX) or `Start-Process` (Windows) so the process continues running after the terminal is disposed."
         ))
     },
@@ -738,11 +821,11 @@ const terminalChatAgentToolsConfiguration = {
         tags: ["experimental"],
         deprecated: true,
         markdownDeprecationMessage: ( localize(
-            14645,
+            14852,
             "This setting is deprecated. Terminal completion and input-needed notifications are now always enabled."
         )),
         markdownDescription: ( localize(
-            14646,
+            14853,
             "This setting is deprecated and no longer has any effect. Terminal completion and input-needed notifications are now always enabled for any command that continues running after the tool returns."
         ))
     },
@@ -755,7 +838,7 @@ const terminalChatAgentToolsConfiguration = {
             mode: "auto"
         },
         markdownDescription: ( localize(
-            14647,
+            14854,
             "When enabled, repeated get terminal output tool calls return only output added since the previous poll for the same terminal execution, or a short unchanged-output message when there is no new output."
         ))
     }
@@ -770,7 +853,7 @@ for (const id of [
     terminalChatAgentToolsConfiguration[id] = {
         deprecated: true,
         markdownDeprecationMessage: ( localize(
-            14648,
+            14855,
             "Use {0} instead",
             `\`#${TerminalChatAgentToolsSettingId.AutoApprove}#\``
         ))
@@ -780,7 +863,7 @@ terminalChatAgentToolsConfiguration[TerminalChatAgentToolsSettingId.DeprecatedAg
     type: "object",
     deprecated: true,
     markdownDeprecationMessage: ( localize(
-        14649,
+        14856,
         "Use {0} instead",
         `\`#${TerminalChatAgentToolsSettingId.AgentSandboxLinuxFileSystem}#\``
     ))
@@ -789,7 +872,7 @@ terminalChatAgentToolsConfiguration[TerminalChatAgentToolsSettingId.DeprecatedAg
     type: "object",
     deprecated: true,
     markdownDeprecationMessage: ( localize(
-        14650,
+        14857,
         "Use {0} instead",
         `\`#${TerminalChatAgentToolsSettingId.AgentSandboxMacFileSystem}#\``
     ))
@@ -799,7 +882,7 @@ terminalChatAgentToolsConfiguration[AgentSandboxSettingId.DeprecatedAgentSandbox
     deprecated: true,
     included: false,
     markdownDeprecationMessage: ( localize(
-        14651,
+        14858,
         "Use {0} instead",
         `\`#${AgentSandboxSettingId.AgentSandboxEnabled}#\``
     ))

package/vscode/src/vs/workbench/contrib/terminalContrib/commandGuide/common/terminalCommandGuideConfiguration.js

@@ -10,7 +10,7 @@ const terminalCommandGuideConfiguration = {
     [TerminalCommandGuideSettingId.ShowCommandGuide]: {
         restricted: true,
         markdownDescription: ( localize(
-            14670,
+            14877,
             "Whether to show the command guide when hovering over a command in the terminal."
         )),
         type: "boolean",

package/vscode/src/vs/workbench/contrib/terminalContrib/history/common/terminal.history.js

@@ -19,7 +19,7 @@ const terminalHistoryConfiguration = {
     [TerminalHistorySettingId.ShellIntegrationCommandHistory]: {
         restricted: true,
         markdownDescription: ( localize(
-            14731,
+            14938,
             "Controls the number of recently used commands to keep in the terminal command history. Set to 0 to disable terminal command history."
         )),
         type: "number",