@google/gemini-cli-core 0.36.0-preview.7 → 0.37.0-preview.0

package/dist/src/config/config.js

@@ -26,6 +26,8 @@ import { WebFetchTool } from '../tools/web-fetch.js';
 import { MemoryTool, setGeminiMdFilename } from '../tools/memoryTool.js';
 import { WebSearchTool } from '../tools/web-search.js';
 import { AskUserTool } from '../tools/ask-user.js';
+import { UpdateTopicTool } from '../tools/topicTool.js';
+import { TopicState } from './topicState.js';
 import { ExitPlanModeTool } from '../tools/exit-plan-mode.js';
 import { EnterPlanModeTool } from '../tools/enter-plan-mode.js';
 import { GeminiClient } from '../core/client.js';
@@ -52,7 +54,7 @@ import { ModelRouterService } from '../routing/modelRouterService.js';
 import { OutputFormat } from '../output/types.js';
 import { ModelConfigService, } from '../services/modelConfigService.js';
 import { DEFAULT_MODEL_CONFIGS } from './defaultModelConfigs.js';
-import { ContextManager } from '../services/contextManager.js';
+import { ContextManager } from '../context/contextManager.js';
 import { TrackerService } from '../services/trackerService.js';
 import { WorkspaceContext } from '../utils/workspaceContext.js';
 import { Storage } from './storage.js';
@@ -83,7 +85,7 @@ import { CheckerRegistry } from '../safety/registry.js';
 import { ConsecaSafetyChecker } from '../safety/conseca/conseca.js';
 import { DEFAULT_MAX_ATTEMPTS } from '../utils/retry.js';
 import { DEFAULT_FILE_FILTERING_OPTIONS, DEFAULT_MEMORY_FILE_FILTERING_OPTIONS, } from './constants.js';
-import { DEFAULT_TOOL_PROTECTION_THRESHOLD, DEFAULT_MIN_PRUNABLE_TOKENS_THRESHOLD, DEFAULT_PROTECT_LATEST_TURN, } from '../services/toolOutputMaskingService.js';
+import { DEFAULT_TOOL_PROTECTION_THRESHOLD, DEFAULT_MIN_PRUNABLE_TOKENS_THRESHOLD, DEFAULT_PROTECT_LATEST_TURN, } from '../context/toolOutputMaskingService.js';
 import { SimpleExtensionLoader, } from '../utils/extensionLoader.js';
 import { McpClientManager } from '../tools/mcp-client-manager.js';
 import { A2AClientManager } from '../agents/a2a-client-manager.js';
@@ -212,11 +214,13 @@ export class Config {
     clientVersion;
     fileSystemService;
     trackerService;
+    topicState = new TopicState();
     contentGeneratorConfig;
     contentGenerator;
     modelConfigService;
     embeddingModel;
     sandbox;
+    _sandboxForbiddenPaths;
     targetDir;
     workspaceContext;
     debugMode;
@@ -304,6 +308,7 @@ export class Config {
     directWebFetch;
     useRipgrep;
     enableInteractiveShell;
+    shellBackgroundCompletionBehavior;
     skipNextSpeakerCheck;
     useBackgroundColor;
     useAlternateBuffer;
@@ -340,7 +345,6 @@ export class Config {
     pendingIncludeDirectories;
     enableHooks;
     enableHooksUI;
-    toolOutputMasking;
     hooks;
     projectHooks;
     disabledHooks;
@@ -358,6 +362,7 @@ export class Config {
     adminSkillsEnabled;
     experimentalJitContext;
     experimentalMemoryManager;
+    memoryBoundaryMarkers;
     topicUpdateNarration;
     disableLLMCorrection;
     planEnabled;
@@ -365,6 +370,7 @@ export class Config {
     planModeRoutingEnabled;
     modelSteering;
     contextManager;
+    contextManagement;
     terminalBackground = undefined;
     remoteAdminSettings;
     latestApiRequest;
@@ -391,30 +397,30 @@ export class Config {
                 allowedPaths: [],
                 networkAccess: false,
             };
-        this._sandboxManager = createSandboxManager(this.sandbox, params.targetDir);
-        if (!(this._sandboxManager instanceof NoopSandboxManager) &&
-            this.sandbox.enabled) {
-            this.fileSystemService = new SandboxedFileSystemService(this._sandboxManager, params.targetDir);
-        }
-        else {
-            this.fileSystemService = new StandardFileSystemService();
-        }
+        this.targetDir = path.resolve(params.targetDir);
+        this.folderTrust = params.folderTrust ?? false;
+        this.workspaceContext = new WorkspaceContext(this.targetDir, []);
+        this.pendingIncludeDirectories = params.includeDirectories ?? [];
+        this.debugMode = params.debugMode;
+        this.question = params.question;
+        this.worktreeSettings = params.worktreeSettings;
         this._sandboxPolicyManager = new SandboxPolicyManager();
         const initialApprovalMode = params.approvalMode ??
             params.policyEngineConfig?.approvalMode ??
             'default';
-        this._sandboxManager = createSandboxManager(this.sandbox, params.targetDir, this._sandboxPolicyManager, initialApprovalMode);
+        this._sandboxManager = createSandboxManager(this.sandbox, {
+            workspace: this.targetDir,
+            forbiddenPaths: this.getSandboxForbiddenPaths.bind(this),
+            includeDirectories: this.pendingIncludeDirectories,
+            policyManager: this._sandboxPolicyManager,
+        }, initialApprovalMode);
         if (!(this._sandboxManager instanceof NoopSandboxManager) &&
-            this.sandbox?.enabled) {
+            this.sandbox.enabled) {
             this.fileSystemService = new SandboxedFileSystemService(this._sandboxManager, params.targetDir);
         }
         else {
             this.fileSystemService = new StandardFileSystemService();
         }
-        this.targetDir = path.resolve(params.targetDir);
-        this.folderTrust = params.folderTrust ?? false;
-        this.workspaceContext = new WorkspaceContext(this.targetDir, []);
-        this.pendingIncludeDirectories = params.includeDirectories ?? [];
         this.debugMode = params.debugMode;
         this.question = params.question;
         this.worktreeSettings = params.worktreeSettings;
@@ -526,21 +532,43 @@ export class Config {
             };
         }
         this.modelConfigService = new ModelConfigService(modelConfigServiceConfig ?? DEFAULT_MODEL_CONFIGS);
-        this.experimentalJitContext = params.experimentalJitContext ?? true;
+        this.experimentalJitContext = params.experimentalJitContext ?? false;
         this.experimentalMemoryManager = params.experimentalMemoryManager ?? false;
+        this.memoryBoundaryMarkers = params.memoryBoundaryMarkers ?? ['.git'];
+        this.contextManagement = {
+            enabled: params.contextManagement?.enabled ?? false,
+            historyWindow: {
+                maxTokens: params.contextManagement?.historyWindow?.maxTokens ?? 150000,
+                retainedTokens: params.contextManagement?.historyWindow?.retainedTokens ?? 40000,
+            },
+            messageLimits: {
+                normalMaxTokens: params.contextManagement?.messageLimits?.normalMaxTokens ?? 2500,
+                retainedMaxTokens: params.contextManagement?.messageLimits?.retainedMaxTokens ?? 12000,
+                normalizationHeadRatio: params.contextManagement?.messageLimits?.normalizationHeadRatio ??
+                    0.25,
+            },
+            tools: {
+                distillation: {
+                    maxOutputTokens: params.contextManagement?.tools?.distillation?.maxOutputTokens ??
+                        10000,
+                    summarizationThresholdTokens: params.contextManagement?.tools?.distillation
+                        ?.summarizationThresholdTokens ?? 20000,
+                },
+                outputMasking: {
+                    protectionThresholdTokens: params.contextManagement?.tools?.outputMasking
+                        ?.protectionThresholdTokens ?? DEFAULT_TOOL_PROTECTION_THRESHOLD,
+                    minPrunableThresholdTokens: params.contextManagement?.tools?.outputMasking
+                        ?.minPrunableThresholdTokens ??
+                        DEFAULT_MIN_PRUNABLE_TOKENS_THRESHOLD,
+                    protectLatestTurn: params.contextManagement?.tools?.outputMasking?.protectLatestTurn ??
+                        DEFAULT_PROTECT_LATEST_TURN,
+                },
+            },
+        };
         this.topicUpdateNarration = params.topicUpdateNarration ?? false;
         this.modelSteering = params.modelSteering ?? false;
         this.injectionService = new InjectionService(() => this.isModelSteeringEnabled());
         ExecutionLifecycleService.setInjectionService(this.injectionService);
-        this.toolOutputMasking = {
-            enabled: params.toolOutputMasking?.enabled ?? true,
-            toolProtectionThreshold: params.toolOutputMasking?.toolProtectionThreshold ??
-                DEFAULT_TOOL_PROTECTION_THRESHOLD,
-            minPrunableTokensThreshold: params.toolOutputMasking?.minPrunableTokensThreshold ??
-                DEFAULT_MIN_PRUNABLE_TOKENS_THRESHOLD,
-            protectLatestTurn: params.toolOutputMasking?.protectLatestTurn ??
-                DEFAULT_PROTECT_LATEST_TURN,
-        };
         this.maxSessionTurns = params.maxSessionTurns ?? -1;
         this.acpMode = params.acpMode ?? false;
         this.listSessions = params.listSessions ?? false;
@@ -567,6 +595,13 @@ export class Config {
         this.useBackgroundColor = params.useBackgroundColor ?? true;
         this.useAlternateBuffer = params.useAlternateBuffer ?? false;
         this.enableInteractiveShell = params.enableInteractiveShell ?? false;
+        const requestedBehavior = params.shellBackgroundCompletionBehavior;
+        if (requestedBehavior === 'inject' || requestedBehavior === 'notify') {
+            this.shellBackgroundCompletionBehavior = requestedBehavior;
+        }
+        else {
+            this.shellBackgroundCompletionBehavior = 'silent';
+        }
         this.skipNextSpeakerCheck = params.skipNextSpeakerCheck ?? true;
         this.shellExecutionConfig = {
             terminalWidth: params.shellExecutionConfig?.terminalWidth ?? 80,
@@ -576,6 +611,7 @@ export class Config {
             sanitizationConfig: this.sanitizationConfig,
             sandboxManager: this._sandboxManager,
             sandboxConfig: this.sandbox,
+            backgroundCompletionBehavior: this.shellBackgroundCompletionBehavior,
         };
         this.truncateToolOutputThreshold =
             params.truncateToolOutputThreshold ??
@@ -623,9 +659,7 @@ export class Config {
             ...params.policyEngineConfig,
             approvalMode: engineApprovalMode,
             disableAlwaysAllow: this.disableAlwaysAllow,
-            toolSandboxEnabled: this.getSandboxEnabled(),
-            sandboxApprovedTools: this.sandboxPolicyManager?.getModeConfig(engineApprovalMode)
-                ?.approvedTools ?? [],
+            sandboxManager: this._sandboxManager,
         }, checkerRunner);
         // Register Conseca if enabled
         if (this.enableConseca) {
@@ -916,8 +950,22 @@ export class Config {
     get geminiClient() {
         return this._geminiClient;
     }
+    async getSandboxForbiddenPaths() {
+        if (this._sandboxForbiddenPaths) {
+            return this._sandboxForbiddenPaths;
+        }
+        this._sandboxForbiddenPaths = await this.getFileService().getIgnoredPaths({
+            respectGitIgnore: false,
+            respectGeminiIgnore: true,
+        });
+        return this._sandboxForbiddenPaths;
+    }
     refreshSandboxManager() {
-        this._sandboxManager = createSandboxManager(this.sandbox, this.targetDir, this._sandboxPolicyManager, this.getApprovalMode());
+        this._sandboxManager = createSandboxManager(this.sandbox, {
+            workspace: this.targetDir,
+            forbiddenPaths: this.getSandboxForbiddenPaths.bind(this),
+            policyManager: this._sandboxPolicyManager,
+        }, this.getApprovalMode());
         this.shellExecutionConfig.sandboxManager = this._sandboxManager;
     }
     get sandboxPolicyManager() {
@@ -1345,6 +1393,7 @@ export class Config {
                 global: this.contextManager.getGlobalMemory(),
                 extension: this.contextManager.getExtensionMemory(),
                 project: this.contextManager.getEnvironmentMemory(),
+                userProjectMemory: this.contextManager.getUserProjectMemory(),
             };
         }
         return this.userMemory;
@@ -1370,13 +1419,20 @@ export class Config {
     }
     /**
      * Returns memory for the system instruction.
-     * When JIT is enabled, only global memory (Tier 1) goes in the system
-     * instruction. Extension and project memory (Tier 2) are placed in the
-     * first user message instead, per the tiered context model.
+     * When JIT is enabled, global memory and user project memory (Tier 1) go
+     * in the system instruction. Extension and project memory (Tier 2) are
+     * placed in the first user message instead, per the tiered context model.
+     * User project memory is in Tier 1 so mid-session saves are reflected
+     * via system instruction updates.
      */
     getSystemInstructionMemory() {
         if (this.experimentalJitContext && this.contextManager) {
-            return this.contextManager.getGlobalMemory();
+            const global = this.contextManager.getGlobalMemory();
+            const userProjectMemory = this.contextManager.getUserProjectMemory();
+            if (userProjectMemory?.trim()) {
+                return { global, userProjectMemory };
+            }
+            return global;
         }
         return this.userMemory;
     }
@@ -1414,18 +1470,35 @@ export class Config {
     isJitContextEnabled() {
         return this.experimentalJitContext;
     }
+    isAutoDistillationEnabled() {
+        return this.contextManagement.enabled;
+    }
+    getMemoryBoundaryMarkers() {
+        return this.memoryBoundaryMarkers;
+    }
     isMemoryManagerEnabled() {
         return this.experimentalMemoryManager;
     }
+    getContextManagementConfig() {
+        return this.contextManagement;
+    }
+    get agentHistoryProviderConfig() {
+        return {
+            isTruncationEnabled: this.contextManagement.enabled,
+            isSummarizationEnabled: this.contextManagement.enabled,
+            maxTokens: this.contextManagement.historyWindow.maxTokens,
+            retainedTokens: this.contextManagement.historyWindow.retainedTokens,
+            normalMessageTokens: this.contextManagement.messageLimits.normalMaxTokens,
+            maximumMessageTokens: this.contextManagement.messageLimits.retainedMaxTokens,
+            normalizationHeadRatio: this.contextManagement.messageLimits.normalizationHeadRatio,
+        };
+    }
     isTopicUpdateNarrationEnabled() {
         return this.topicUpdateNarration;
     }
     isModelSteeringEnabled() {
         return this.modelSteering;
     }
-    getToolOutputMaskingEnabled() {
-        return this.toolOutputMasking.enabled;
-    }
     async getToolOutputMaskingConfig() {
         await this.ensureExperimentsLoaded();
         const remoteProtection = this.experiments?.flags[ExperimentFlags.MASKING_PROTECTION_THRESHOLD]
@@ -1441,14 +1514,16 @@ export class Config {
             ? parseInt(remotePrunable, 10)
             : undefined;
         return {
-            enabled: this.toolOutputMasking.enabled,
-            toolProtectionThreshold: parsedProtection !== undefined && !isNaN(parsedProtection)
+            protectionThresholdTokens: parsedProtection !== undefined && !isNaN(parsedProtection)
                 ? parsedProtection
-                : this.toolOutputMasking.toolProtectionThreshold,
-            minPrunableTokensThreshold: parsedPrunable !== undefined && !isNaN(parsedPrunable)
+                : this.contextManagement.tools.outputMasking
+                    .protectionThresholdTokens,
+            minPrunableThresholdTokens: parsedPrunable !== undefined && !isNaN(parsedPrunable)
                 ? parsedPrunable
-                : this.toolOutputMasking.minPrunableTokensThreshold,
-            protectLatestTurn: remoteProtectLatest ?? this.toolOutputMasking.protectLatestTurn,
+                : this.contextManagement.tools.outputMasking
+                    .minPrunableThresholdTokens,
+            protectLatestTurn: remoteProtectLatest ??
+                this.contextManagement.tools.outputMasking.protectLatestTurn,
         };
     }
     getGeminiMdFileCount() {
@@ -1502,7 +1577,9 @@ export class Config {
         debugLogger.debug(`Workspace policies loaded from: ${policyDir}`);
     }
     setApprovalMode(mode) {
-        if (!this.isTrustedFolder() && mode !== ApprovalMode.DEFAULT) {
+        if (!this.isTrustedFolder() &&
+            mode !== ApprovalMode.DEFAULT &&
+            mode !== ApprovalMode.PLAN) {
             throw new Error('Cannot enable privileged approval modes in an untrusted folder.');
         }
         const currentMode = this.getApprovalMode();
@@ -1510,7 +1587,7 @@ export class Config {
             this.logCurrentModeDuration(currentMode);
             logApprovalModeSwitch(this, new ApprovalModeSwitchEvent(currentMode, mode));
         }
-        this.policyEngine.setApprovalMode(mode, this.sandboxPolicyManager?.getModeConfig(mode)?.approvedTools ?? []);
+        this.policyEngine.setApprovalMode(mode);
         this.refreshSandboxManager();
         const isPlanModeTransition = currentMode !== mode &&
             (currentMode === ApprovalMode.PLAN || mode === ApprovalMode.PLAN);
@@ -1518,6 +1595,7 @@ export class Config {
             (currentMode === ApprovalMode.YOLO || mode === ApprovalMode.YOLO);
         if (isPlanModeTransition || isYoloModeTransition) {
             if (this._geminiClient?.isInitialized()) {
+                this._geminiClient.clearCurrentSequenceModel();
                 this._geminiClient.setTools().catch((err) => {
                     debugLogger.error('Failed to update tools', err);
                 });
@@ -1615,6 +1693,9 @@ export class Config {
     getModelRouterService() {
         return this.modelRouterService;
     }
+    getModelConfigService() {
+        return this.modelConfigService;
+    }
     getModelAvailabilityService() {
         return this.modelAvailabilityService;
     }
@@ -1945,6 +2026,11 @@ export class Config {
         const authType = this.contentGeneratorConfig?.authType;
         return useGemini3_1 && authType === AuthType.USE_GEMINI;
     }
+    isGemini31LaunchedForAuthType(authType) {
+        return (authType === AuthType.USE_GEMINI ||
+            authType === AuthType.USE_VERTEX_AI ||
+            authType === AuthType.GATEWAY);
+    }
     /**
      * Returns whether Gemini 3.1 has been launched.
      *
@@ -1954,8 +2040,7 @@ export class Config {
      */
     getGemini31LaunchedSync() {
         const authType = this.contentGeneratorConfig?.authType;
-        if (authType === AuthType.USE_GEMINI ||
-            authType === AuthType.USE_VERTEX_AI) {
+        if (this.isGemini31LaunchedForAuthType(authType)) {
             return true;
         }
         return (this.experiments?.flags[ExperimentFlags.GEMINI_3_1_PRO_LAUNCHED]
@@ -1970,8 +2055,7 @@ export class Config {
      */
     getGemini31FlashLiteLaunchedSync() {
         const authType = this.contentGeneratorConfig?.authType;
-        if (authType === AuthType.USE_GEMINI ||
-            authType === AuthType.USE_VERTEX_AI) {
+        if (this.isGemini31LaunchedForAuthType(authType)) {
             return true;
         }
         return (this.experiments?.flags[ExperimentFlags.GEMINI_3_1_FLASH_LITE_LAUNCHED]
@@ -2053,6 +2137,9 @@ export class Config {
     getEnableInteractiveShell() {
         return this.enableInteractiveShell;
     }
+    getShellBackgroundCompletionBehavior() {
+        return this.shellBackgroundCompletionBehavior;
+    }
     getSkipNextSpeakerCheck() {
         return this.skipNextSpeakerCheck;
     }
@@ -2094,6 +2181,13 @@ export class Config {
         4 *
             (tokenLimit(this.model) - uiTelemetryService.getLastPromptTokenCount()), this.truncateToolOutputThreshold);
     }
+    getToolMaxOutputTokens() {
+        return this.contextManagement.tools.distillation.maxOutputTokens;
+    }
+    getToolSummarizationThresholdTokens() {
+        return this.contextManagement.tools.distillation
+            .summarizationThresholdTokens;
+    }
     getNextCompressionTruncationId() {
         return ++this.compressionTruncationCounter;
     }
@@ -2159,6 +2253,7 @@ export class Config {
                 visualModel: customConfig.visualModel,
                 allowedDomains: customConfig.allowedDomains,
                 disableUserInput: customConfig.disableUserInput,
+                maxActionsPerTask: customConfig.maxActionsPerTask ?? 100,
                 confirmSensitiveActions: customConfig.confirmSensitiveActions,
                 blockFileUploads: customConfig.blockFileUploads,
             },
@@ -2194,6 +2289,7 @@ export class Config {
                 registerFn();
             }
         };
+        maybeRegister(UpdateTopicTool, () => registry.registerTool(new UpdateTopicTool(this, this.messageBus)));
         maybeRegister(LSTool, () => registry.registerTool(new LSTool(this, this.messageBus)));
         maybeRegister(ReadFileTool, () => registry.registerTool(new ReadFileTool(this, this.messageBus)));
         if (this.getUseRipgrep()) {
@@ -2223,7 +2319,7 @@ export class Config {
         maybeRegister(WebFetchTool, () => registry.registerTool(new WebFetchTool(this, this.messageBus)));
         maybeRegister(ShellTool, () => registry.registerTool(new ShellTool(this, this.messageBus)));
         if (!this.isMemoryManagerEnabled()) {
-            maybeRegister(MemoryTool, () => registry.registerTool(new MemoryTool(this.messageBus)));
+            maybeRegister(MemoryTool, () => registry.registerTool(new MemoryTool(this.messageBus, this.storage)));
         }
         maybeRegister(WebSearchTool, () => registry.registerTool(new WebSearchTool(this, this.messageBus)));
         maybeRegister(AskUserTool, () => registry.registerTool(new AskUserTool(this.messageBus)));