@codingame/monaco-vscode-chat-service-override 34.1.3 → 35.0.1

package/vscode/src/vs/platform/agentHost/common/state/sessionActions.d.ts

@@ -1,5 +1,5 @@
-export { ActionType, type ActionEnvelope, type ActionOrigin, type RootAgentsChangedAction, type RootActiveSessionsChangedAction, type SessionCreationFailedAction, type SessionDeltaAction, type SessionErrorAction, type SessionModelChangedAction, type SessionReadyAction, type SessionReasoningAction, type SessionResponsePartAction, type SessionToolCallCompleteAction, type SessionToolCallConfirmedAction, type SessionToolCallApprovedAction, type SessionToolCallDeniedAction, type SessionToolCallDeltaAction, type SessionToolCallReadyAction, type SessionToolCallResultConfirmedAction, type SessionToolCallStartAction, type SessionTitleChangedAction, type SessionTurnCancelledAction, type SessionTurnCompleteAction, type SessionTurnStartedAction, type SessionUsageAction, type SessionAgentChangedAction, type SessionServerToolsChangedAction, type SessionActiveClientChangedAction, type SessionActiveClientToolsChangedAction, type SessionCustomizationsChangedAction, type SessionCustomizationToggledAction, type SessionPendingMessageSetAction, type SessionPendingMessageRemovedAction, type SessionQueuedMessagesReorderedAction, type SessionInputRequestedAction, type SessionInputCompletedAction, type SessionIsReadChangedAction, type SessionIsArchivedChangedAction, type SessionToolCallContentChangedAction, type ChangesetStatusChangedAction, type ChangesetFileSetAction, type ChangesetFileRemovedAction, type ChangesetOperationsChangedAction, type ChangesetClearedAction, type ResourceWatchChangedAction, type StateAction, } from "@codingame/monaco-vscode-api/vscode/vs/platform/agentHost/common/state/protocol/actions";
-export { AuthRequiredReason, type SessionAddedParams, type SessionRemovedParams, type SessionSummaryChangedParams, type AuthRequiredParams, } from "@codingame/monaco-vscode-api/vscode/vs/platform/agentHost/common/state/protocol/notifications";
+export { ActionType, type ActionEnvelope, type ActionOrigin, type RootAgentsChangedAction, type RootActiveSessionsChangedAction, type SessionCreationFailedAction, type SessionChatAddedAction, type SessionChatRemovedAction, type SessionChatUpdatedAction, type SessionDefaultChatChangedAction, type ChatDeltaAction, type ChatErrorAction, type SessionReadyAction, type ChatReasoningAction, type ChatResponsePartAction, type ChatToolCallCompleteAction, type ChatToolCallConfirmedAction, type ChatToolCallApprovedAction, type ChatToolCallDeniedAction, type ChatToolCallDeltaAction, type ChatToolCallReadyAction, type ChatToolCallResultConfirmedAction, type ChatToolCallStartAction, type SessionTitleChangedAction, type ChatTurnCancelledAction, type ChatTurnCompleteAction, type ChatTurnStartedAction, type ChatUsageAction, type SessionServerToolsChangedAction, type SessionActiveClientSetAction, type SessionActiveClientRemovedAction, type SessionCustomizationsChangedAction, type SessionCustomizationToggledAction, type ChatPendingMessageSetAction, type ChatPendingMessageRemovedAction, type ChatQueuedMessagesReorderedAction, type ChatInputRequestedAction, type ChatInputCompletedAction, type ChatInputAnswerChangedAction, type SessionIsReadChangedAction, type SessionIsArchivedChangedAction, type ChatToolCallContentChangedAction, type ChatTruncatedAction, type ChangesetStatusChangedAction, type ChangesetFileSetAction, type ChangesetFileRemovedAction, type ChangesetContentChangedAction, type ChangesetOperationsChangedAction, type ChangesetClearedAction, type AnnotationsSetAction, type AnnotationsUpdatedAction, type AnnotationsRemovedAction, type AnnotationsEntrySetAction, type AnnotationsEntryRemovedAction, type ResourceWatchChangedAction, type StateAction, } from "@codingame/monaco-vscode-api/vscode/vs/platform/agentHost/common/state/protocol/actions";
+export { AuthRequiredReason, type SessionAddedParams, type SessionRemovedParams, type SessionSummaryChangedParams, type ProgressParams, type AuthRequiredParams, } from "@codingame/monaco-vscode-api/vscode/vs/platform/agentHost/common/state/protocol/notifications";
 /**
  * String discriminants for the protocol notification methods that previously
  * lived inside a `notification` wrapper. These values are the JSON-RPC method
@@ -10,12 +10,13 @@ export declare const NotificationType: {
     readonly SessionAdded: "root/sessionAdded";
     readonly SessionRemoved: "root/sessionRemoved";
     readonly SessionSummaryChanged: "root/sessionSummaryChanged";
+    readonly Progress: "root/progress";
     readonly AuthRequired: "auth/required";
 };
 export type NotificationType = typeof NotificationType[keyof typeof NotificationType];
-import type { RootAgentsChangedAction, RootActiveSessionsChangedAction, SessionDeltaAction, SessionModelChangedAction, SessionAgentChangedAction, SessionReasoningAction, SessionResponsePartAction, SessionToolCallApprovedAction, SessionToolCallCompleteAction, SessionToolCallConfirmedAction, SessionToolCallDeniedAction, SessionToolCallDeltaAction, SessionToolCallReadyAction, SessionToolCallResultConfirmedAction, SessionToolCallStartAction, SessionTitleChangedAction, SessionTurnCancelledAction, SessionTurnCompleteAction, SessionTurnStartedAction, SessionUsageAction, StateAction, SessionPendingMessageSetAction, SessionPendingMessageRemovedAction, SessionQueuedMessagesReorderedAction, SessionIsReadChangedAction, SessionIsArchivedChangedAction, RootConfigChangedAction } from "@codingame/monaco-vscode-api/vscode/vs/platform/agentHost/common/state/protocol/actions";
-import type { SessionAddedParams, SessionRemovedParams, SessionSummaryChangedParams, AuthRequiredParams } from "@codingame/monaco-vscode-api/vscode/vs/platform/agentHost/common/state/protocol/notifications";
-import type { RootAction as IRootAction_, SessionAction as ISessionAction_, ClientSessionAction as IClientSessionAction_, ServerSessionAction as IServerSessionAction_, TerminalAction as ITerminalAction_, ClientTerminalAction as IClientTerminalAction_, ChangesetAction as IChangesetAction_ } from "@codingame/monaco-vscode-api/vscode/vs/platform/agentHost/common/state/protocol/action-origin.generated";
+import type { RootAgentsChangedAction, RootActiveSessionsChangedAction, ChatDeltaAction, ChatReasoningAction, ChatResponsePartAction, ChatToolCallApprovedAction, ChatToolCallCompleteAction, ChatToolCallConfirmedAction, ChatToolCallDeniedAction, ChatToolCallDeltaAction, ChatToolCallReadyAction, ChatToolCallResultConfirmedAction, ChatToolCallStartAction, SessionTitleChangedAction, ChatTurnCancelledAction, ChatTurnCompleteAction, ChatTurnStartedAction, ChatErrorAction, ChatUsageAction, ChatToolCallContentChangedAction, StateAction, ChatPendingMessageSetAction, ChatPendingMessageRemovedAction, ChatQueuedMessagesReorderedAction, SessionIsReadChangedAction, SessionIsArchivedChangedAction, RootConfigChangedAction } from "@codingame/monaco-vscode-api/vscode/vs/platform/agentHost/common/state/protocol/actions";
+import type { SessionAddedParams, SessionRemovedParams, SessionSummaryChangedParams, ProgressParams, AuthRequiredParams } from "@codingame/monaco-vscode-api/vscode/vs/platform/agentHost/common/state/protocol/notifications";
+import type { RootAction as IRootAction_, SessionAction as ISessionAction_, ChatAction as IChatAction_, ClientSessionAction as IClientSessionAction_, ServerSessionAction as IServerSessionAction_, ClientChatAction as IClientChatAction_, ServerChatAction as IServerChatAction_, TerminalAction as ITerminalAction_, ClientTerminalAction as IClientTerminalAction_, ChangesetAction as IChangesetAction_, AnnotationsAction as IAnnotationsAction_, ClientAnnotationsAction as IClientAnnotationsAction_ } from "@codingame/monaco-vscode-api/vscode/vs/platform/agentHost/common/state/protocol/action-origin.generated";
 /**
  * Discriminated union of all server→client protocol notifications other than
  * the action envelope. Each variant carries its protocol `method` so callers
@@ -29,45 +30,54 @@ export type ProtocolNotification = ({
 } & SessionRemovedParams) | ({
     type: "root/sessionSummaryChanged";
 } & SessionSummaryChangedParams) | ({
+    type: "root/progress";
+} & ProgressParams) | ({
     type: "auth/required";
 } & AuthRequiredParams);
 export type RootAction = IRootAction_;
 export type SessionAction = ISessionAction_;
+export type ChatAction = IChatAction_;
 export type ClientSessionAction = IClientSessionAction_;
 export type ServerSessionAction = IServerSessionAction_;
+export type ClientChatAction = IClientChatAction_;
+export type ServerChatAction = IServerChatAction_;
 export type TerminalAction = ITerminalAction_;
 export type ClientTerminalAction = IClientTerminalAction_;
 export type ChangesetAction = IChangesetAction_;
+export type AnnotationsAction = IAnnotationsAction_;
+export type ClientAnnotationsAction = IClientAnnotationsAction_;
 export type IAgentsChangedAction = RootAgentsChangedAction;
 export type IActiveSessionsChangedAction = RootActiveSessionsChangedAction;
 export type IRootConfigChangedAction = RootConfigChangedAction;
-export type ITurnStartedAction = SessionTurnStartedAction;
-export type IDeltaAction = SessionDeltaAction;
-export type IResponsePartAction = SessionResponsePartAction;
-export type IToolCallStartAction = SessionToolCallStartAction;
-export type IToolCallDeltaAction = SessionToolCallDeltaAction;
-export type IToolCallReadyAction = SessionToolCallReadyAction;
-export type IToolCallApprovedAction = SessionToolCallApprovedAction;
-export type IToolCallDeniedAction = SessionToolCallDeniedAction;
-export type IToolCallConfirmedAction = SessionToolCallConfirmedAction;
-export type IToolCallCompleteAction = SessionToolCallCompleteAction;
-export type IToolCallResultConfirmedAction = SessionToolCallResultConfirmedAction;
-export type ITurnCompleteAction = SessionTurnCompleteAction;
-export type ITurnCancelledAction = SessionTurnCancelledAction;
+export type ITurnStartedAction = ChatTurnStartedAction;
+export type IDeltaAction = ChatDeltaAction;
+export type IResponsePartAction = ChatResponsePartAction;
+export type IToolCallStartAction = ChatToolCallStartAction;
+export type IToolCallDeltaAction = ChatToolCallDeltaAction;
+export type IToolCallReadyAction = ChatToolCallReadyAction;
+export type IToolCallApprovedAction = ChatToolCallApprovedAction;
+export type IToolCallDeniedAction = ChatToolCallDeniedAction;
+export type IToolCallConfirmedAction = ChatToolCallConfirmedAction;
+export type IToolCallCompleteAction = ChatToolCallCompleteAction;
+export type IToolCallResultConfirmedAction = ChatToolCallResultConfirmedAction;
+export type ITurnCompleteAction = ChatTurnCompleteAction;
+export type ITurnCancelledAction = ChatTurnCancelledAction;
 export type ITitleChangedAction = SessionTitleChangedAction;
-export type IUsageAction = SessionUsageAction;
-export type IReasoningAction = SessionReasoningAction;
-export type IModelChangedAction = SessionModelChangedAction;
-export type IAgentChangedAction = SessionAgentChangedAction;
+export type IUsageAction = ChatUsageAction;
+export type IReasoningAction = ChatReasoningAction;
+export type IErrorAction = ChatErrorAction;
+export type IToolCallContentChangedAction = ChatToolCallContentChangedAction;
 export type ICustomizationsChangedAction = import("@codingame/monaco-vscode-api/vscode/vs/platform/agentHost/common/state/protocol/actions").SessionCustomizationsChangedAction;
 export type ICustomizationToggledAction = import("@codingame/monaco-vscode-api/vscode/vs/platform/agentHost/common/state/protocol/actions").SessionCustomizationToggledAction;
-export type IPendingMessageSetAction = SessionPendingMessageSetAction;
-export type IPendingMessageRemovedAction = SessionPendingMessageRemovedAction;
-export type IQueuedMessagesReorderedAction = SessionQueuedMessagesReorderedAction;
+export type IPendingMessageSetAction = ChatPendingMessageSetAction;
+export type IPendingMessageRemovedAction = ChatPendingMessageRemovedAction;
+export type IQueuedMessagesReorderedAction = ChatQueuedMessagesReorderedAction;
 export type IIsReadChangedAction = SessionIsReadChangedAction;
 export type IIsArchivedChangedAction = SessionIsArchivedChangedAction;
 export type INotification = ProtocolNotification;
 export declare function isRootAction(action: StateAction): action is RootAction;
 export declare function isSessionAction(action: StateAction): action is SessionAction;
+export declare function isChatAction(action: StateAction): action is ChatAction;
 export declare function isTerminalAction(action: StateAction): action is TerminalAction;
 export declare function isChangesetAction(action: StateAction): action is ChangesetAction;
+export declare function isAnnotationsAction(action: StateAction): action is AnnotationsAction;

package/vscode/src/vs/platform/agentHost/common/state/sessionActions.js

@@ -5,8 +5,14 @@ export { AuthRequiredReason } from '@codingame/monaco-vscode-xterm-common/vscode
 function isSessionAction(action) {
     return action.type.startsWith('session/');
 }
+function isChatAction(action) {
+    return action.type.startsWith('chat/');
+}
 function isChangesetAction(action) {
     return action.type.startsWith('changeset/');
 }
+function isAnnotationsAction(action) {
+    return action.type.startsWith('annotations/');
+}
 
-export { isChangesetAction, isSessionAction };
+export { isAnnotationsAction, isChangesetAction, isChatAction, isSessionAction };

package/vscode/src/vs/{workbench/contrib → platform}/browserView/common/browserChatToolReferenceNames.d.ts

@@ -1,5 +1,9 @@
 /**
  * Tool reference names for the integrated browser tools.
+ *
+ * Lives in `platform` (rather than next to the `workbench/contrib/browserView`
+ * tools that produce them) so the Copilot agent host — which cannot import from
+ * `workbench` — can gate its browser tool instructions on the same names.
  */
 export declare const BrowserChatToolReferenceName: {
     readonly OpenBrowserPage: "openBrowserPage";

package/vscode/src/vs/platform/networkFilter/common/networkFilterService.js

@@ -57,7 +57,7 @@ let AgentNetworkFilterService = class AgentNetworkFilterService extends Disposab
     formatError(uri) {
         const domain = extractDomainFromUri(uri);
         return localize(
-            2115,
+            2189,
             "Access to {0} is blocked by network domain policy (see `{1}` and `{2}` settings).",
             domain ?? uri.authority,
             AgentNetworkDomainSettingId.AllowedNetworkDomains,

package/vscode/src/vs/platform/sandbox/browser/sandboxHelperService.js

@@ -6,6 +6,7 @@ class NullSandboxHelperService {
     async checkSandboxDependencies() {
         return {
             bubblewrapInstalled: true,
+            bubblewrapUsable: true,
             socatInstalled: true
         };
     }

package/vscode/src/vs/platform/sandbox/common/terminalSandboxCommandRules.d.ts

@@ -13,12 +13,6 @@ export interface ITerminalSandboxCommandRule<T> {
     /** Command-specific guard for argument-sensitive rules. */
     readonly when?: (command: ITerminalSandboxCommand) => boolean;
 }
-/**
- * Git global options that consume the following argument. These need to be
- * skipped when finding the subcommand so `git -C repo commit` matches `commit`
- * instead of treating `repo` as the subcommand.
- */
-export declare const gitGlobalOptionsWithValue: Set<string>;
 export declare function matchesTerminalSandboxCommandRule<T>(command: ITerminalSandboxCommand, rule: ITerminalSandboxCommandRule<T>, context?: ITerminalSandboxCommandRuleContext): boolean;
 /**
  * Returns the first non-option argument, treating it as the command's subcommand.

package/vscode/src/vs/platform/sandbox/common/terminalSandboxCommandRules.js

@@ -1,18 +1,5 @@
 
 
-const gitGlobalOptionsWithValue = ( new Set([
-    "-C",
-    "-c",
-    "--config-env",
-    "--exec-path",
-    "--git-dir",
-    "--html-path",
-    "--info-path",
-    "--man-path",
-    "--namespace",
-    "--super-prefix",
-    "--work-tree"
-]));
 function matchesTerminalSandboxCommandRule(command, rule, context) {
     if (!rule.keywords.includes(command.keyword.toLowerCase())) {
         return false;
@@ -31,12 +18,12 @@ function matchesTerminalSandboxCommandRule(command, rule, context) {
 function getCommandSubcommand(args, optionsWithValue) {
     for (let i = 0; i < args.length; i++) {
         const arg = args[i];
-        if (arg === "--") {
+        if (arg === '--') {
             return undefined;
         }
-        if (arg.startsWith("-")) {
-            const option = arg.includes("=") ? arg.substring(0, arg.indexOf("=")) : arg;
-            if (!arg.includes("=") && optionsWithValue?.has(option)) {
+        if (arg.startsWith('-')) {
+            const option = arg.includes('=') ? arg.substring(0, arg.indexOf('=')) : arg;
+            if (!arg.includes('=') && optionsWithValue?.has(option)) {
                 i++;
             }
             continue;
@@ -46,4 +33,4 @@ function getCommandSubcommand(args, optionsWithValue) {
     return undefined;
 }
 
-export { getCommandSubcommand, gitGlobalOptionsWithValue, matchesTerminalSandboxCommandRule };
+export { getCommandSubcommand, matchesTerminalSandboxCommandRule };

package/vscode/src/vs/platform/sandbox/common/terminalSandboxEngine.d.ts

@@ -6,7 +6,7 @@ import { IFileService } from "@codingame/monaco-vscode-api/vscode/vs/platform/fi
 import { ILogService } from "@codingame/monaco-vscode-api/vscode/vs/platform/log/common/log.service";
 import { ISandboxDependencyStatus, type IWindowsMxcConfig, IWindowsMxcFilesystemPolicy, type IWindowsMxcPolicyContainment, type IWindowsMxcSandboxPolicy } from "@codingame/monaco-vscode-api/vscode/vs/platform/sandbox/common/sandboxHelperService";
 import { IWindowsMxcTerminalSandboxRuntime } from "@codingame/monaco-vscode-api/vscode/vs/platform/sandbox/common/terminalSandboxMxcRuntime.service";
-import { ITerminalSandboxCommand, ITerminalSandboxPrecheckInputs, ITerminalSandboxPrerequisiteCheckResult, ITerminalSandboxResolvedNetworkDomains, ITerminalSandboxWrapResult } from "./terminalSandboxService.js";
+import { ITerminalSandboxCommand, ITerminalSandboxFileAccessCheckResult, ITerminalSandboxPrecheckInputs, ITerminalSandboxPrerequisiteCheckResult, ITerminalSandboxResolvedNetworkDomains, ITerminalSandboxWrapResult, TerminalSandboxFileAccessPermission } from "./terminalSandboxService.js";
 /** Runtime information needed to launch the sandbox-runtime CLI. */
 export interface ITerminalSandboxRuntimeInfo {
     /** Directory that contains `node_modules/@vscode/sandbox-runtime` and `node_modules/@vscode/ripgrep`. */
@@ -112,18 +112,19 @@ export declare class TerminalSandboxEngine extends Disposable {
     private _commandAllowNetwork;
     private _os;
     private readonly _defaultWritePaths;
+    private readonly _fileSystemPathExtUri;
     constructor(_host: ITerminalSandboxEngineHost, _fileService: IFileService, _logService: ILogService, _windowsMxcRuntime: IWindowsMxcTerminalSandboxRuntime);
     isEnabled(precheckInputs?: ITerminalSandboxPrecheckInputs): Promise<boolean>;
     isSandboxAllowNetworkEnabled(precheckInputs?: ITerminalSandboxPrecheckInputs): Promise<boolean>;
     areUnsandboxedCommandsAllowed(): boolean;
     areRetryWithAllowNetworkRequestsAllowed(): boolean;
-    isAutoApproveUnsandboxedCommands(): boolean;
     getOS(): Promise<OperatingSystem>;
     getTempDir(): URI | undefined;
     setNeedsForceUpdateConfigFile(): void;
     getResolvedNetworkDomains(): ITerminalSandboxResolvedNetworkDomains;
     wrapCommand(command: string, requestUnsandboxedExecution?: boolean, shell?: string, cwd?: URI, commandDetails?: readonly ITerminalSandboxCommand[], requestAllowNetwork?: boolean): Promise<ITerminalSandboxWrapResult>;
     checkForSandboxingPrereqs(forceRefresh?: boolean, precheckInputs?: ITerminalSandboxPrecheckInputs): Promise<ITerminalSandboxPrerequisiteCheckResult>;
+    checkFileAccess(permission: TerminalSandboxFileAccessPermission, paths: readonly string[], precheckInputs?: ITerminalSandboxPrecheckInputs): Promise<ITerminalSandboxFileAccessCheckResult>;
     getSandboxConfigPath(forceRefresh?: boolean, precheckInputs?: ITerminalSandboxPrecheckInputs): Promise<string | undefined>;
     getMissingSandboxDependencies(): Promise<string[]>;
     /**
@@ -134,6 +135,7 @@ export declare class TerminalSandboxEngine extends Disposable {
      */
     cleanupTempDir(): Promise<void>;
     private _checkSandboxDependencies;
+    private _getBubblewrapRemediations;
     private _quoteShellArgument;
     private _getSandboxCommandWithPreservedCwd;
     private _wrapSandboxRuntimeCommandForLaunch;
@@ -149,9 +151,54 @@ export declare class TerminalSandboxEngine extends Disposable {
     private _isSandboxConfiguredEnabled;
     private _resolveRuntimeInfo;
     private _createSandboxConfig;
+    private _getFileSystemAccessPaths;
+    private _hasFileSystemAccess;
+    private _matchesAnyFileSystemPath;
+    /**
+     * Returns whether a candidate filesystem path is covered by a sandbox allow/deny
+     * matcher. Both values are normalized with the target sandbox OS semantics before
+     * comparison. Non-glob matchers are treated as exact-or-parent matches; glob
+     * matchers are evaluated with VS Code's glob matcher.
+     *
+     * Examples:
+     * - Linux/macOS: `/workspace/project/src/file.ts` matches `/workspace/project`.
+     * - Linux/macOS: `/workspace/project2/file.ts` does not match `/workspace/project`.
+     * - Windows: `C:\Repo\src\file.ts` matches `c:/repo` because matching is
+     *   case-insensitive and backslashes are normalized to `/`.
+     * - Glob: `/workspace/project/package.json` matches `/workspace/project/*.json`.
+     */
+    private _matchesFileSystemPath;
+    /**
+     * Converts a normalized sandbox filesystem path into a pseudo URI so the common
+     * `ExtUri.isEqualOrParent` comparer can be used instead of deprecated string
+     * path helpers. A non-`file` scheme is intentional: it keeps comparison on the
+     * URI path component and avoids converting through the host OS' native `fsPath`
+     * rules, which may differ from the sandbox target OS.
+     *
+     * Examples:
+     * - `/workspace/project` becomes `terminal-sandbox-path:/workspace/project`.
+     * - `C:/Repo` becomes `terminal-sandbox-path:/C:/Repo` so Windows drive paths
+     *   are still valid URI paths for comparison.
+     */
+    private _toFileSystemAccessUri;
+    /**
+     * Normalizes a path or matcher into the form used for sandbox access checks.
+     * On Windows, backslashes are converted to `/` and URI-shaped drive paths like
+     * `/C:/Users/me` are converted to `C:/Users/me`. Unless `preserveGlob` is true
+     * for a glob matcher, the path is POSIX-normalized to remove redundant `.`/`..`
+     * segments. Trailing slashes are removed except for filesystem roots.
+     *
+     * Examples:
+     * - Linux/macOS: `/workspace/../workspace/app/` becomes `/workspace/app`.
+     * - Windows: `C:\Users\me\project\` becomes `C:/Users/me/project`.
+     * - Windows: `/C:/Users/me/project` becomes `C:/Users/me/project`.
+     * - Glob with `preserveGlob=true`: `/workspace/project/*.json` keeps the glob
+     *   pattern intact for `globMatch`.
+     */
+    private _normalizeFileSystemAccessPath;
+    private _containsGlobPattern;
     private readonly _buildSandboxPayload;
     private _getCommandRuntimeFileSystemPaths;
-    private _withoutNetworkRuntimeSetting;
     private _mergeAdditionalSandboxConfigProperties;
     private _isObjectForSandboxConfigMerge;
     private _getWindowsMxcFilesystemPolicy;
@@ -164,6 +211,7 @@ export declare class TerminalSandboxEngine extends Disposable {
     private _updateDenyReadPathsWithHome;
     private _updateAllowReadPathsWithAllowWrite;
     private _resolveFileSystemPaths;
+    private _getFileSystemPathComparisonKey;
     private _resolveFileSystemPath;
     private _isAbsoluteFileSystemPath;
     private _toFileSystemResource;
@@ -175,6 +223,7 @@ export declare class TerminalSandboxEngine extends Disposable {
     private _getDefaultWindowsMxcCwd;
     private _getSandboxConfiguredEnabledValue;
     private _getSandboxConfiguredWindowsEnabledValue;
+    private _normalizeSandboxEnabledValue;
     private _isSandboxAllowNetworkConfigured;
     private _areUnsandboxedCommandsAllowed;
     private _areRetryWithAllowNetworkRequestsAllowed;