Gemini CLI 0.37.0

What's Changed

• feat(evals): centralize test agents into test-utils for reuse
• revert: chore(config): disable agents by default
• fix(plan): update telemetry attribute keys and add timestamp
• fix(core): prevent premature MCP discovery completion
• feat(browser): add maxActionsPerTask for browser agent setting
• fix(core): improve agent loader error formatting for empty paths
• fix(cli): only show updating spinner when auto-update is in progress
• Refine onboarding metrics to log the duration explicitly and use the tier name.
• chore(tools): add toJSON to tools and invocations to reduce logging verbosity
• fix(cli): stabilize copy mode to prevent flickering and cursor resets
• fix(test): move flaky ctrl-c-exit test to non-blocking suite
• feat(skills): add ci skill for automated failure replication
• feat(sandbox): implement forbiddenPaths for OS-specific sandbox managers
• fix(core): conditionally expose additional_permissions in shell tool
• refactor(core): standardize OS-specific sandbox tests and extract linux helper methods
• format recently added script
• fix(ui): prevent over-eager slash subcommand completion
• Fix dynamic model routing for gemini 3.1 pro to customtools model
• feat(core): support inline agentCardJson for remote agents
• fix(cli): skip console log/info in headless mode
• test(core): install bubblewrap on Linux CI for sandbox integration tests
• docs(reference): split tools table into category sections
• fix(browser): detect embedded URLs in query params to prevent allowedDomains bypass
• fix(browser): add proxy bypass constraint to domain restriction system prompt
• fix(policy): relax write_file argsPattern in plan mode to allow paths without session ID
• docs: fix grammar in CONTRIBUTING and numbering in sandbox docs
• fix(acp): allow attachments by adding a permission prompt
• fix(core): thread AbortSignal to chat compression requests (#20405)
• feat(core): implement Windows sandbox dynamic expansion Phase 1 and 2.1
• Add note about root privileges in sandbox docs
• docs(core): document agent_card_json string literal options for remote agents
• fix(cli): resolve TTY hang on headless environments by unconditionally resuming process.stdin before React Ink launch
• fix(ui): cleanup estimated string length hacks in composer
• feat(browser): dynamically discover read-only tools
• docs: clarify policy requirement for general.plan.directory in settings schema
• Revert "perf(cli): optimize --version startup time (#23671)"
• don't silence errors from wombat
• fix(ui): prevent escape key from cancelling requests in shell mode
• Changelog for v0.36.0-preview.0
• feat(core,ui): Add experiment-gated support for gemini flash 3.1 lite
• Changelog for v0.36.0-preview.3
• new linting check: github-actions-pinning
• fix(cli): show helpful guidance when no skills are available
• fix: Chat logs and errors handle tail tool calls correctly
• Don't try removing a tag from a non-existent release.
• fix(cli): allow ask question dialog to take full window height
• fix(core): strip leading underscores from error types in telemetry
• Changelog for v0.35.0
• feat(evals): add reliability harvester and 500/503 retry support
• feat(sandbox): dynamic Linux sandbox expansion and worktree support
• Merge examples of use into quickstart documentation
• fix(cli): prioritize primary name matches in slash command search
• Changelog for v0.35.1
• fix(browser): keep input blocker active across navigations
• feat(core): new skill to look for duplicated code while reviewing PRs
• fix(core): replace hardcoded non-interactive ASK_USER denial with explicit policy rules
• fix(plan): after exiting plan mode switches model to a flash model
• feat(gcp): add development worker infrastructure
• fix(a2a-server): A2A server should execute ask policies in interactive mode
• feat(core): define TrajectoryProvider interface
• Docs: Update quotas and pricing
• fix(core): allow disabling environment variable redaction
• feat(cli): enable notifications cross-platform via terminal bell fallback
• feat(sandbox): implement secret visibility lockdown for env files
• fix(core): remove shell outputChunks buffer caching to prevent memory bloat and sanitize prompt input
• feat(core): implement persistent browser session management
• refactor(core): delegate sandbox denial parsing to SandboxManager
• dep(update) Update Ink version to 6.5.0
• Docs: Update 'docs-writer' skill for relative links
• Changelog for v0.36.0-preview.4
• fix(acp): Update allow approval policy flow for ACP clients to fix config persistence and compatible with TUI
• Changelog for v0.35.2
• ACP integration documents
• fix(core): explicitly set error names to avoid bundling renaming issues
• feat(core): subagent isolation and cleanup hardening
• disable extension-reload test
• feat(core): add forbiddenPaths to GlobalSandboxOptions and refactor createSandboxManager
• refactor(core): improve ignore resolution and fix directory-matching bug
• revert(core): support custom base URL via env vars
• Increase memory limited for eslint.
• fix(acp): prevent crash on empty response in ACP mode
• feat(core): Land AgentHistoryProvider.
• fix(core): switch to subshells for shell tool wrapping to fix heredocs and edge cases
• Debug command.
• Changelog for v0.36.0-preview.5
• Fix test flakes by globally mocking ink-spinner
• Enable network access in sandbox configuration
• feat(context): add configurable memoryBoundaryMarkers setting
• feat(core): implement windows sandbox expansion and denial detection
• fix(core): resolve ACP Operation Aborted Errors in grep_search
• fix(hooks): prevent SessionEnd from firing twice in non-interactive mode
• Re-word intro to Gemini 3 page.
• fix(cli): resolve layout contention and flashing loop in StatusRow
• fix(sandbox): implement Windows Mandatory Integrity Control for GeminiSandbox
• feat(core): implement tool-based topic grouping (Chapters)
• feat(cli): support 'tab to queue' for messages while generating
• feat(core): agnostic background task UI with CompletionBehavior
• UX for topic narration tool
• fix: shellcheck warnings in scripts
• test(evals): add comprehensive subagent delegation evaluations
• fix(a2a-server): prioritize ADC before evaluating headless constraints for auth initialization
• Text can be added after /plan command
• fix(cli): resolve missing F12 logs via global console store
• fix broken tests
• fix(evals): add update_topic behavioral eval
• feat(core): Unified Context Management and Tool Distillation.
• Default enable narration for the team.
• fix(core): ensure default agents provide tools and use model-specific schemas
• feat(cli): show Flash Lite Preview model regardless of user tier
• feat(cli): implement compact tool output
• Add security settings for tool sandboxing
• chore(test-utils): switch integration tests to use PREVIEW_GEMINI_MODEL
• feat(core): enable topic update narration for legacy models
• feat(core): add project-level memory scope to save_memory tool
• test(integration): fix plan mode write denial test false positive
• feat(plan): support Plan mode in untrusted folders
• fix(core): enable mid-stream retries for all models and re-enable compression test
• Changelog for v0.36.0-preview.6
• Changelog for v0.35.3
• feat(cli): add auth info to footer
• fix(browser): reset action counter for each agent session and let it ignore internal actions
• feat(plan): promote planning feature to stable
• fix(browser): terminate subagent immediately on domain restriction violations
• feat(cli): add UI to update extensions
• Fix(browser): terminate immediately for "browser is already running" error
• docs: Add 'plan' option to approval mode in CLI reference
• fix(core): batch macOS seatbelt rules into a profile file to prevent ARG_MAX errors
• fix(core): fix race condition between browser agent and main closing process
• perf(build): optimize build scripts for parallel execution and remove redundant checks
• ci: install bubblewrap on Linux for release workflows
• chore(release): allow bundling for all builds, including stable
• Revert "Add security settings for tool sandboxing"
• docs: update subagents docs to not be experimental
• fix(core): implement read and write commands in sandbox managers
• don't try to remove tags in dry run
• fix(config): disable JIT context loading by default
• test(sandbox): add integration test for dynamic permission expansion
• docs(policy): remove unsupported mcpName wildcard edge case
• docs: fix broken GEMINI.md link in CONTRIBUTING.md
• feat(core): infrastructure for event-driven subagent history
• fix(core): resolve Plan Mode deadlock during plan file creation due to sandbox restrictions
• fix(core): fix browser agent UX issues and improve E2E test reliability
• fix(ui): wrap topic and intent fields in TopicMessage
• refactor(core): Centralize context management logic into src/context
• fix(core): pin AuthType.GATEWAY to use Gemini 3.1 Pro/Flash Lite by default
• feat(ui): add Tokyo Night theme
• fix(cli): refactor test config loading and mock debugLogger in test-setup
• Set memoryManager to false in settings.json
• ink 6.6.3
• fix(core): resolve subagent chat recording gaps and directory inheritance
• fix(cli): cap shell output at 10 MB to prevent RangeError crash
• feat(plan): conditionally add enter/exit plan mode tools based on current mode
• feat(core): prioritize discussion before formal plan approval
• fix(ui): add accelerated scrolling on alternate buffer mode
• feat(core): populate sandbox forbidden paths with project ignore file contents
• fix(core): ensure blue border overlay and input blocker to act correctly depending on browser agent activities
• fix(ui): removed additional vertical padding for tables
• fix(build): upload full bundle directory archive to GitHub releases
• fix(build): wire bundle:browser-mcp into bundle pipeline
• feat(browser): add sandbox-aware browser agent initialization
• feat(core): enhance tracker task schemas for detailed titles and descriptions
• refactor(core): Unified context management settings schema
• feat(core): update browser agent prompt to check open pages first when bringing up
• fix(acp) refactor(core,cli): centralize model discovery logic in ModelConfigService
• Changelog for v0.36.0-preview.7
• fix: update task tracker storage location in system prompt
• feat(browser): supersede stale snapshots to reclaim context-window tokens
• docs(core): add subagent tool isolation draft doc
• fix(patch): cherry-pick 64c928f to release/v0.37.0-preview.0-pr-23257 to patch version v0.37.0-preview.0 and create version 0.37.0-preview.1
• fix(patch): cherry-pick cb7f7d6 to release/v0.37.0-preview.1-pr-24342 to patch version v0.37.0-preview.1 and create version 0.37.0-preview.2