Python: Shell tool with support for local and Docker#5664

Merged

chetantoshniwal merged 16 commits into

microsoft:mainfrom

alliscode:feat/shell-docker-executor

May 22, 2026

Commits on May 5, 2026

feat(tools): add cross-OS LocalShellTool in new agent-framework-tools package

alliscode
and
Copilot
committed
feat(tools): security hardening for LocalShellTool

alliscode
and
Copilot
committed
feat(tools): add DockerShellTool sandboxed shell tier

alliscode
and
Copilot
committed
fix(tools): backport shell-tool fixes from .NET parity review

alliscode
and
Copilot
committed
docs(tools): tone down narrative and overconfident comments in shell tool

alliscode
and
Copilot
committed
feat(tools): add ShellEnvironmentProvider for the Python shell tool

alliscode
and
Copilot
committed
docs(tools): document ShellEnvironmentProvider and finish comment cleanup

alliscode
and
Copilot
committed
refactor(tools): move shell samples to python/samples/02-agents/tools

alliscode
and
Copilot
committed
test(tools): cover confine_workdir default and ShellResult.format_for_model

alliscode
and
Copilot
committed

Commits on May 6, 2026

fix(tools): address PR #5664 review feedback

alliscode
and
Copilot
committed

Commits on May 7, 2026

fix(tools): satisfy CI quality gates

alliscode
and
Copilot
committed

Commits on May 11, 2026

Remove DEFAULT_DENYLIST; document single-session ownership; fix bandit findings

alliscode
and
Copilot
committed
Address PR #5664 round-2 review feedback

alliscode
and
Copilot
committed

Commits on May 13, 2026

Commits on May 14, 2026

Address review feedback: docker isolation + lifecycle robustness

alliscode
and
Copilot
committed