Josh Soref
dc2ac144b7
Various spelling improvements ( #3497 )
...
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
Co-authored-by: Sandy Tao <sandytao520@icloud.com>
2025-07-21 21:54:44 +00:00
Brandon Keiji
f6c36f75e3
fix: prepublish changes to package names ( #1420 )
2025-06-25 12:41:11 +00:00
Jacob Richman
75ed7aaa06
Jacob314/max old space ( #1314 )
2025-06-24 14:18:55 -07:00
Eddie Santos
c1486c47ee
fix: auto-update sandbox regression ( #1221 )
2025-06-19 21:40:10 +00:00
Allen Hutchison
fbc79c34c9
Fix noise in headless mode on STDOUT ( #1184 )
2025-06-18 11:40:15 -07:00
Brandon Keiji
332512853e
feat: consolidate sandbox configurations into a single object ( #1154 )
2025-06-18 17:01:00 +00:00
Eddie Santos
c3971754bf
Auto-update notifications ( #1110 )
2025-06-17 15:24:07 +00:00
matt korwel
df938d6ee8
Preflight and integration npx ( #1096 )
2025-06-16 15:27:29 +00:00
Mark McDonald
ffc48b16d4
Add Vertex env vars to sandbox ( #1005 )
...
Co-authored-by: Scott Densmore <scottdensmore@github.com>
2025-06-16 02:55:13 +00:00
Brandon Keiji
209381f06f
fix: add micromatch to package deps ( #1020 )
2025-06-13 22:18:05 +00:00
Mark McDonald
ff478781ad
Support GOOGLE_API_KEY hoisting in sandbox too ( #998 )
2025-06-13 08:32:15 +00:00
Jordan Demeulenaere
e1d8a356b0
Fix build_sandbox command ( #974 )
2025-06-12 17:38:10 +00:00
Olcan
f75c48323c
fixes to proxy on macos: prevent curl from hanging during wait-for-proxy by adding ipv6 support and timeout ( #947 )
2025-06-11 11:31:38 -07:00
Olcan
9237e95f11
fix proxy on cloudtops/linux and for older versions of docker, more robust start/stop and error reporting ( #945 )
2025-06-11 10:50:31 -07:00
Olcan
e2d689ff2f
do not auto-enable container sandboxing (fixing recently introduced bug) ( #939 )
2025-06-11 08:25:33 -07:00
Tolik Malibroda
e73d4752df
fix: Change sandbox network check command for docker ( #907 )
2025-06-11 00:13:36 +02:00
Olcan
e38d2078cc
restricted networking for all sandboxing methods, new seatbelt profiles, updated docs, fixes to sandbox build, debugging through sandbox ( #891 )
2025-06-10 08:58:37 -07:00
Tommaso Sciortino
895c1f132f
GEMINI_SANDBOX=false should disable seatbelt ( #888 )
2025-06-10 06:22:02 -07:00
Olcan
c7e82965b1
fix user settings in sandbox broken in recent change ( #885 )
2025-06-10 00:27:40 -07:00
matt korwel
3b943c1582
Windows: Refactor Shell Scripts to Node.js for Cross-Platform Compatibility ( #784 )
2025-06-09 12:19:42 -07:00
Olcan
8f993a6200
drop redundant -s flag for custom sandbox build ( #859 )
2025-06-08 16:43:04 -07:00
Abhi
6e4b84a60d
Fix Build Failure - Build fails in sandbox due to missing build toolchain ( #831 )
2025-06-08 01:04:20 -04:00
Olcan
d3a1026ae3
skip npm build for custom sandbox ( #779 )
2025-06-05 14:15:43 -07:00
Olcan
d3e43437a0
use execSync (vs spawnSync) so launch fails if build_sandbox fails; tweaks in build_sandbox to fix some shellcheck warnings, and to simplify the logic slightly ( #767 )
2025-06-05 13:02:56 -07:00
Tolik Malibroda
1d20cedf03
fix: Disable automatic image building if BUILD_SANDBOX is not provided ( #764 )
2025-06-05 18:47:39 +02:00
Tolik Malibroda
4d4cf0f2f9
feat: Add multi-stage docker build support for custom sandbox.Dockerfile ( #746 )
2025-06-05 17:46:54 +02:00
Jacob Richman
aa386d135b
Jacob314/memory fixes ( #754 )
...
Address multiple possible memory leaks found bystatic analysis of the codebase. The primary source of the leaks was event listeners on child processes and global objects that were not being properly removed, potentially causing their closures to be retained in memory indefinitely particularly for processes that did not exit.
There are two commits. A larger one made by gemini CLI and a smaller one by me to make sure we always disconnect child processes as part of the cleanup methods. These changes may not actually fix any leaks but do look like reasonable defensive coding to avoid leaking event listeners or child processes.
The following files were fixed:
This is Gemini's somewhat overconfident description of what it did.
packages/core/src/tools/shell.ts: Fixed a leak where an abortSignal listener was not being reliably removed.
packages/cli/src/utils/readStdin.ts: Fixed a significant leak where listeners on process.stdin were never removed.
packages/cli/src/utils/sandbox.ts: Fixed leaks in the imageExists and pullImage helper functions where listeners on spawned child processes were not being removed.
packages/core/src/tools/grep.ts: Fixed three separate leaks in the isCommandAvailable check and the git grep and system grep strategies due to un-removed listeners on child processes.
packages/core/src/tools/tool-registry.ts: Corrected a leak in the execute method of the DiscoveredTool class where listeners on the spawned tool process were not being removed.
2025-06-05 06:40:33 -07:00
Tolik Malibroda
4b2af10b04
fix: Fix piped input mode in sandbox ( #739 )
2025-06-04 08:24:33 +02:00
Olcan
12059eb4ca
fix BUILD_SANDBOX env var for updating sandbox while running linked binary ( #729 )
2025-06-03 14:02:00 -07:00
Brandon Keiji
e96fd677ee
fix: do not try to pull development sandbox image from the internet ( #725 )
2025-06-03 19:32:17 +00:00
Brandon Keiji
0869fd168f
fix(sandbox): pull sandbox image if it doesnt exist locally ( #628 )
2025-05-30 20:49:47 +00:00
Brandon Keiji
31a7affb74
feat(sandbox): use package config to dictate sandbox image name ( #624 )
2025-05-30 19:28:46 +00:00
Olcan
4b7248fc46
allow writing to user cache directory on macos (fixes use of lyria mcp server [to generate songs] under seatbelt) ( #600 )
2025-05-29 15:06:09 -07:00
Olcan
70277591c4
update email to gemini-cli-dev ( #510 )
2025-05-23 08:35:16 -07:00
Olcan
17e28036fa
fix HOME in sandbox on cloudtops (linux) ( #454 )
2025-05-20 15:30:49 -07:00
Olcan
76cf5e9fc1
rename env vars GEMINI_CODE_{MODEL,SANDBOX,SANDBOX_IMAGE} ( #411 )
2025-05-17 17:28:44 -07:00
Olcan
f3d9a499dd
move sandbox-related messages to stderr ( #363 )
2025-05-15 10:54:30 -07:00
Brandon Keiji
3be8b6dc34
fix(sandbox): default to current user profile for debian/ubuntu env ( #337 )
2025-05-13 21:13:54 +00:00
Brandon Keiji
8da7a71d9a
refactor: shorten 'gemini' binary name ( #329 )
2025-05-13 10:49:45 -07:00
Taylor Mullen
cf91f72c5c
Remove terminal tool and dependencies.
...
- We now solely use the shell tool. This deletes all content around the legacy terminal tool so we can focus on improving the new Shell tool.
- Remove instances from sandboxing, tests, utilities etc.
2025-05-11 12:35:55 -07:00
Olcan
92c1279de6
sandbox/seatbelt-aware system prompt, support for custom seatbelt profiles under project settings ( #304 )
2025-05-09 11:33:05 -07:00
Olcan
b35a3856a2
fix debugging with seatbelt, including in strict profile ( #300 )
2025-05-09 08:44:40 -07:00
Brandon Keiji
4741c9a6eb
fix(sandbox): set --inspect-brk in production sandbox when env DEBUG is truthy ( #295 )
2025-05-08 21:12:19 -07:00
Olcan
6b0ac084b8
allow SEATBELT_PROFILE=none to disable seatbelt on macos ( #296 )
2025-05-08 15:52:04 -07:00
Olcan
b1c449d11c
refined sandbox/seatbelt log message, pass NODE_OPTIONS along to sandboxed node ( #292 )
2025-05-08 14:50:35 -07:00
Olcan
b59a940057
adjust seatbelt to allow write into specific dirs under user home ( #289 )
2025-05-08 11:28:45 -07:00
Olcan
327bd5f836
rename SANDBOX_EXEC_PROFILE as SEATBELT_PROFILE, and fix another accidental rephrasing ( #285 )
2025-05-07 21:31:30 -07:00
Olcan
d524309e3c
use seatbelt on macos, with two profiles: minimal (default) which only restricts writes, and strict, which is deny-by-default and only allows specific operations ( #283 )
2025-05-07 20:03:29 -07:00
Brandon Keiji
739654bb25
fix(sandbox): consolidate dev and prod sandbox ( #273 )
2025-05-07 07:23:13 -07:00
Olcan
cfdbea4dc2
make sandbox venv support more robust, allowing arbitrary venv path, and ignoring venv outside workdir (instead of erroring out) ( #254 )
2025-05-03 09:12:44 -07:00