Aishanee Shah
35ea04258b
refactor(core): harden webfetch security and error handling
...
- Implemented strict host blocking for localhost/127.0.0.1 in all paths.
- Applied consistent URL normalization and deduplication.
- Standardized error extraction using getErrorMessage.
- Updated warning strings for better transparency on skipped URLs.
2026-03-10 00:24:34 +00:00
Aishanee Shah
f5d1de1986
fix(core): revert addition of private_ip_skipped telemetry reason
2026-03-09 20:18:04 +00:00
Aishanee Shah
d783ccc43b
refactor(core): simplify webfetch logic for easier review
...
- Streamlined execute loop with integrated rate limiting and SSRF checks.
- Simplified fallback to all-or-nothing mode.
- inlined grounding and source list formatting for cleaner diff.
- Resolved ESLint unsafe type assertion issues using runtime type guards.
2026-03-09 20:06:12 +00:00
Aishanee Shah
0e850622a8
Merge branch 'main' into webfetch-stage-1
2026-03-09 14:52:16 -04:00
Aishanee Shah
fd79080efa
fix(core): revert increased fetch timeout and content length limits
2026-03-09 18:50:41 +00:00
Jacob Richman
4c9f9bb3e2
robustness(core): static checks to validate history is immutable ( #21228 )
2026-03-09 18:26:03 +00:00
Aishanee Shah
e0005b7dca
fix(core): revert retryFetchErrors default to false
...
This change reverts the default value of retryFetchErrors to false.
It will be handled separately in a future update.
2026-03-09 18:18:01 +00:00
David Pierce
e7b20c49ac
Update mcp's list function to check for disablement. ( #21148 )
2026-03-09 18:10:00 +00:00
Aishanee Shah
34e57da627
fix(core): resolve telemetry type error and complete execute() refactor
2026-03-09 18:08:39 +00:00
Aishanee Shah
9b8478c4db
refactor(core): simplify execute() method and extract grounding helpers
2026-03-09 18:08:39 +00:00
Aishanee Shah
b1fef3b5ec
fix(core): enhance webfetch security and reliability based on PR feedback
2026-03-09 18:08:38 +00:00
Aishanee Shah
5e6b26429c
fix(core): remove private IP rescue to address SSRF vulnerability and fix formatting
2026-03-09 18:08:38 +00:00
Aishanee Shah
3bfd87530c
feat(core): implement Stage 1 improvements for webfetch tool
2026-03-09 18:08:38 +00:00
Aditya Bijalwan
759575faa8
Feat/browser agent progress emission ( #21218 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-03-09 17:26:00 +00:00
Sehoon Shon
d485e08606
feat(cli): implement /upgrade command ( #21511 )
2026-03-09 17:17:30 +00:00
Sehoon Shon
0f1258305a
perf(core): cache loadApiKey to reduce redundant keychain access ( #21520 )
2026-03-09 16:53:24 +00:00
joshualitt
96b939f63a
feat(core): Introduce AgentLoopContext. ( #21198 )
2026-03-09 16:02:20 +00:00
Adib234
7837194ab5
fix(core): resolve symlinks for non-existent paths during validation ( #21487 )
2026-03-09 16:02:13 +00:00
Jerop Kipruto
35ee2a841a
feat(plan): enable Plan Mode by default ( #21713 )
2026-03-09 15:58:46 +00:00
Gaurav
936f6240dd
fix(core): sanitize SSE-corrupted JSON and domain strings in error classification ( #21702 )
2026-03-09 14:08:33 +00:00
anj-s
f8dd6f4f4c
fix(core): display actual graph output in tracker_visualize tool ( #21455 )
2026-03-09 13:36:16 +00:00
Keith Guerin
237864eb63
feat(cli): Invert quota language to 'percent used' ( #20100 )
...
Co-authored-by: jacob314 <jacob314@gmail.com >
2026-03-07 23:17:10 +00:00
Keith Guerin
dc6741097c
refactor(cli): standardize on 'reload' verb for all components ( #20654 )
...
Co-authored-by: Krishna Korade <MushuEE@users.noreply.github.com >
Co-authored-by: Jacob Richman <jacob314@gmail.com >
2026-03-07 22:56:11 +00:00
Christian Gunderman
dac3735626
Disallow underspecified types ( #21485 )
2026-03-07 21:05:38 +00:00
Jacob Richman
245b68e9f1
Make test suite pass when the GEMINI_SYSTEM_MD env variable or GEMINI_WRITE_SYSTEM_MD variable happens to be set locally/ ( #21480 )
2026-03-07 20:04:17 +00:00
Keith Guerin
e5d58c2b5a
feat(cli): overhaul thinking UI ( #18725 )
2026-03-07 04:20:27 +00:00
Sandy Tao
9455ecd78c
fix(core): add in-memory cache to ChatRecordingService to prevent OOM ( #21502 )
2026-03-07 03:45:36 +00:00
Gaurav
9a7427197b
fix(billing): fix overage strategy lifecycle and settings integration ( #21236 )
2026-03-07 03:14:44 +00:00
Arnav Raj
33be30ab04
fix(core): whitelist TERM and COLORTERM in environment sanitization ( #20514 )
...
Co-authored-by: Sri Pasumarthi <sripas@google.com >
Co-authored-by: Sri Pasumarthi <111310667+sripasg@users.noreply.github.com >
2026-03-07 02:51:08 +00:00
Abhi
931e668b47
refactor(core): standardize MCP tool naming to mcp_ FQN format ( #21425 )
2026-03-06 22:17:28 +00:00
Emily Hedlund
7989c28d2e
feat(cli): implement dot-prefixing for slash command conflicts ( #20979 )
2026-03-06 20:43:20 +00:00
Sébastien Prud'homme
7d31d5f4ec
fix(core): append correct OTLP paths for HTTP exporters ( #16836 )
2026-03-06 19:58:00 +00:00
Sehoon Shon
7dce23e5d9
feat(core): implement generic CacheService and optimize setupUser ( #21374 )
2026-03-06 19:39:50 +00:00
ruomeng
06a176e33e
fix(plan): keep approved plan during chat compression ( #21284 )
2026-03-06 19:36:05 +00:00
Emily Hedlund
6f579934db
feat(core): implement unified KeychainService and migrate token storage ( #21344 )
2026-03-06 18:56:08 +00:00
Abhi
4669148a4c
feat(core): add concurrency safety guidance for subagent delegation ( #17753 ) ( #21278 )
2026-03-06 18:09:45 +00:00
nityam
82316ef6e4
fix(core): deduplicate GEMINI.md files by device/inode on case-insensitive filesystems ( #19904 ) ( #19915 )
2026-03-06 17:52:08 +00:00
Aarchi Kumari
337e4bc8c6
fix(hooks): propagate stopHookActive in AfterAgent retry path ( #20426 ) ( #20439 )
2026-03-06 17:06:23 +00:00
Adam Boudj
0452f787b2
fix(partUtils): display media type and size for inline data parts ( #21358 )
2026-03-06 15:45:43 +00:00
anj-s
c1317aafb3
fix: logic for task tracker strategy and remove tracker tools ( #21355 )
2026-03-06 15:17:49 +00:00
MumuTW
6691fac50e
fix(core): handle AbortError thrown during processTurn ( #21296 )
...
Co-authored-by: Gaurav <39389231+gsquared94@users.noreply.github.com >
2026-03-06 06:29:56 +00:00
JATIN
35c1999341
documentiong ensures ripgrep ( #21298 )
...
Co-authored-by: Gaurav <39389231+gsquared94@users.noreply.github.com >
2026-03-06 06:10:12 +00:00
anj-s
a8f507352b
feat (core): Implement tracker related SI changes ( #19964 )
2026-03-06 00:18:05 +00:00
Shreya Keshive
7ec477d40d
feat(acp): Add support for AI Gateway auth ( #21305 )
2026-03-05 22:15:23 +00:00
Sehoon Shon
1aa4a32066
test(core): improve testing for API request/response parsing ( #21227 )
2026-03-05 21:00:01 +00:00
Sehoon Shon
22d962e761
feat(core): fallback to 2.5 models with no access for toolcalls ( #21283 )
2026-03-05 20:37:15 +00:00
Shreya Keshive
0135b03c8a
fix(acp): rename --experimental-acp to --acp & remove Zed-specific refrences ( #21171 )
2026-03-05 19:57:28 +00:00
kartik
9773a084c9
fix:reorder env var redaction checks to scan values first ( #21059 )
...
Signed-off-by: Kartik Angiras <angiraskartik@gmail.com >
2026-03-05 19:22:45 +00:00
Juhyuk
a830858f91
fix(core): prevent unhandled AbortError crash during stream loop detection ( #21123 )
...
Co-authored-by: Gaurav <39389231+gsquared94@users.noreply.github.com >
Co-authored-by: ruomeng <ruomeng@google.com >
2026-03-05 19:12:09 +00:00
Zheyuan Lin
291639633f
feat(cli): add native gVisor (runsc) sandboxing support ( #21062 )
...
Co-authored-by: Zheyuan <zlin252@emory.edu >
Co-authored-by: Kartik Angiras <angiraskartik@gmail.com >
2026-03-05 18:39:57 +00:00