459db523e2
fix(core): secure shell execution with AST validation
...
Replaces simplistic prefix-matching for shell command policies with robust Abstract Syntax Tree (AST) parsing using `bash-parser`.
Previously, policies for shell tools only checked if the command string started with an allowed prefix (e.g., `echo`), allowing trivial bypasses via shell operators like `&&` or `;` (e.g., `echo "ok" && rm -rf /`).
This update secures the execution pipeline by parsing the shell string and validating *every* extracted sub-command against the allowed policies.
Key changes:
- Integrated `bash-parser` to synchronously extract executable commands from pipelines, lists, and subshells.
- Updated `doesToolInvocationMatch` to enforce policy on all extracted sub-commands instead of just the string prefix.
- Enforced `coreTools` validation at execution time within `ShellTool` to prevent bypasses when tools are configured via `settings.json`.
- Updated the CLI `useShellCommandProcessor` to run human-input commands through the AST `PolicyEngine` check before spawning the process.
- Fixed asynchronous test flakiness in the CLI package caused by the new policy enforcement.
2026-03-16 15:07:51 -07:00
dfe22aae21
Changelog for v0.34.0-preview.2 ( #22220 )
...
Co-authored-by: gemini-cli-robot <224641728+gemini-cli-robot@users.noreply.github.com >
2026-03-16 19:22:01 +00:00
bba9c07541
feat(tracker): polish UI sorting and formatting ( #22437 )
2026-03-16 19:18:01 +00:00
05fda0cf01
feat(extensions): implement cryptographic integrity verification for extension updates ( #21772 )
2026-03-16 19:01:52 +00:00
d43ec6c8f3
feat: enable subagents ( #22386 )
2026-03-16 18:40:12 +00:00
56e0865a7b
docs(changelog): remove internal commands from release notes ( #22529 )
2026-03-16 18:39:00 +00:00
cd2096ca80
refactor(core): Creates AgentSession abstraction for consolidated agent interface. ( #22270 )
2026-03-16 17:59:02 +00:00
48130ebd25
Guard pro model usage ( #22665 )
2026-03-16 17:44:25 +00:00
ef5627eece
Disallow Object.create() and reflect. ( #22408 )
2026-03-16 16:24:27 +00:00
e3df87cf1a
fix: Adjust ToolGroupMessage filtering to hide Confirming and show Canceled tool calls. ( #22230 )
2026-03-16 15:50:11 +00:00
8bad5823a9
fix(a2a-server): resolve unsafe assignment lint errors ( #22661 )
2026-03-16 15:28:35 +00:00
fd62938945
docs(policy): remove trailing space from commandPrefix examples ( #22264 )
...
Co-authored-by: Jack Wotherspoon <jackwoth@google.com >
2026-03-16 14:45:30 +00:00
fad032d466
perf: optimize TrackerService dependency checks ( #22384 )
2026-03-16 13:40:58 +00:00
366aa84395
feat(agent): replace the runtime npx for browser agent chrome devtool mcp with pre-built bundle ( #22213 )
...
Co-authored-by: Gaurav Ghosh <gaghosh@google.com >
Co-authored-by: Gaurav <39389231+gsquared94@users.noreply.github.com >
2026-03-16 08:05:38 +00:00
17b37144a9
fix(automation): evaluate staleness before checking protected labels ( #22561 )
2026-03-15 15:50:19 -04:00
5ddb517593
fix(automation): harden stale PR closer permissions and maintainer detection ( #22558 )
2026-03-15 14:58:56 -04:00
abd9e23337
fix(core): skip discovery for incomplete MCP configs and resolve merge race condition ( #22494 )
2026-03-15 18:28:26 +00:00
6061d8cac7
fix(core): merge user settings with extension-provided MCP servers ( #22484 )
2026-03-15 02:46:06 +00:00
bd590bbde6
fix(cli): improve command conflict handling for skills ( #21942 )
2026-03-14 23:33:14 +00:00
0bf7ea60c5
Add ModelDefinitions to ModelConfigService ( #22302 )
2026-03-14 21:45:21 +00:00
8f2697c2e5
Add registry var ( #22224 )
2026-03-14 20:14:51 +00:00
c5502b2dc5
fix(core): fix manual deletion of subagent histories ( #22407 )
2026-03-14 20:09:43 +00:00
9f7691fd88
feat(prompts): implement Topic-Action-Summary model for verbosity reduction ( #21503 )
2026-03-14 05:10:30 +00:00
3682842a5d
fix(core): deduplicate project memory when JIT context is enabled ( #22234 )
2026-03-14 04:34:53 +00:00
64c50d32ac
Fix issue where config was undefined. ( #22397 )
2026-03-14 01:36:25 +00:00
604d4ded8d
fix(core): use session-specific temp directory for task tracker ( #22382 )
2026-03-13 23:35:26 +00:00
f75bdba568
fix(mcp): handle equivalent root resource URLs in OAuth validation ( #20231 )
2026-03-13 23:32:40 +00:00
8d68ece8d6
Revert "fix(cli): validate --model argument at startup" ( #22378 )
2026-03-13 23:17:29 +00:00
b49fc8122d
feat(security): add disableAlwaysAllow setting to disable auto-approvals ( #21941 )
2026-03-13 23:02:09 +00:00
b0d151bd65
feat(tracker): add tracker policy ( #22379 )
2026-03-13 22:19:04 +00:00
fe8d93c75a
Promote stable tests. ( #22253 )
2026-03-13 21:32:00 +00:00
24933a90d0
fix(cli): support CJK input and full Unicode scalar values in terminal protocols ( #22353 )
2026-03-13 21:24:26 +00:00
fa024133e6
feat(core): integrate SandboxManager to sandbox all process-spawning tools ( #22231 )
2026-03-13 21:11:51 +00:00
24adacdbc2
Move keychain fallback to keychain service ( #22332 )
2026-03-13 20:57:08 +00:00
aa23da67af
chore/release: bump version to 0.35.0-nightly.20260313.bb060d7a9 ( #22251 )
2026-03-13 20:33:16 +00:00
bfbd3c40a7
feat(agent): add allowed domain restrictions for browser agent ( #21775 )
2026-03-13 19:41:40 +00:00
dd8d4c98b3
feat(tracker): return TodoList display for tracker tools ( #22060 )
2026-03-13 18:18:33 +00:00
d368997ca3
test: add Object.create context regression test and tool confirmation integration test ( #22356 )
2026-03-13 17:49:33 +00:00
bbd80c9393
docs: overhaul subagents documentation and add /agents command ( #22345 )
2026-03-13 17:26:13 +00:00
3b601b3d90
refactor(ui): extract SessionBrowser static ui components ( #22348 )
2026-03-13 17:25:13 +00:00
b4bcd1a015
docs(core): add authentication guide for remote subagents ( #22178 )
2026-03-13 16:48:21 +00:00
aa000d7d30
fix(core): show descriptive error messages when saving settings fails ( #18095 )
...
Co-authored-by: Dev Randalpura <devrandalpura@google.com >
2026-03-13 16:19:56 +00:00
2a7e602356
refactor(cli): consolidate getErrorMessage utility to core ( #22190 )
2026-03-13 15:40:29 +00:00
8d0b2d7f1b
feat(skills): improve async-pr-review workflow and logging ( #21790 )
2026-03-13 15:18:07 +00:00
c156bac5f7
fix(settings): prevent j/k navigation keys from intercepting edit buffer input ( #21865 )
2026-03-13 14:55:36 +00:00
263b8cd3b3
fix(plan): Fix AskUser evals ( #22074 )
2026-03-13 13:30:19 +00:00
2d05396dd2
refactor(ui): extract pure session browser utilities ( #22256 )
2026-03-13 06:22:52 +00:00
7b4a822b0e
feat(core): instrument file system tools for JIT context discovery ( #22082 )
2026-03-13 03:44:42 +00:00
d44615ac2f
feat(core): increase sub-agent turn and time limits ( #22196 )
2026-03-13 02:39:49 +00:00
de656f01d7
feat(core): Fully migrate packages/core to AgentLoopContext. ( #22115 )
2026-03-13 01:56:31 +00:00
galz10