459db523e2
fix(core): secure shell execution with AST validation
...
Replaces simplistic prefix-matching for shell command policies with robust Abstract Syntax Tree (AST) parsing using `bash-parser`.
Previously, policies for shell tools only checked if the command string started with an allowed prefix (e.g., `echo`), allowing trivial bypasses via shell operators like `&&` or `;` (e.g., `echo "ok" && rm -rf /`).
This update secures the execution pipeline by parsing the shell string and validating *every* extracted sub-command against the allowed policies.
Key changes:
- Integrated `bash-parser` to synchronously extract executable commands from pipelines, lists, and subshells.
- Updated `doesToolInvocationMatch` to enforce policy on all extracted sub-commands instead of just the string prefix.
- Enforced `coreTools` validation at execution time within `ShellTool` to prevent bypasses when tools are configured via `settings.json`.
- Updated the CLI `useShellCommandProcessor` to run human-input commands through the AST `PolicyEngine` check before spawning the process.
- Fixed asynchronous test flakiness in the CLI package caused by the new policy enforcement.
2026-03-16 15:07:51 -07:00
bba9c07541
feat(tracker): polish UI sorting and formatting ( #22437 )
2026-03-16 19:18:01 +00:00
05fda0cf01
feat(extensions): implement cryptographic integrity verification for extension updates ( #21772 )
2026-03-16 19:01:52 +00:00
d43ec6c8f3
feat: enable subagents ( #22386 )
2026-03-16 18:40:12 +00:00
cd2096ca80
refactor(core): Creates AgentSession abstraction for consolidated agent interface. ( #22270 )
2026-03-16 17:59:02 +00:00
48130ebd25
Guard pro model usage ( #22665 )
2026-03-16 17:44:25 +00:00
ef5627eece
Disallow Object.create() and reflect. ( #22408 )
2026-03-16 16:24:27 +00:00
fad032d466
perf: optimize TrackerService dependency checks ( #22384 )
2026-03-16 13:40:58 +00:00
366aa84395
feat(agent): replace the runtime npx for browser agent chrome devtool mcp with pre-built bundle ( #22213 )
...
Co-authored-by: Gaurav Ghosh <gaghosh@google.com >
Co-authored-by: Gaurav <39389231+gsquared94@users.noreply.github.com >
2026-03-16 08:05:38 +00:00
abd9e23337
fix(core): skip discovery for incomplete MCP configs and resolve merge race condition ( #22494 )
2026-03-15 18:28:26 +00:00
6061d8cac7
fix(core): merge user settings with extension-provided MCP servers ( #22484 )
2026-03-15 02:46:06 +00:00
bd590bbde6
fix(cli): improve command conflict handling for skills ( #21942 )
2026-03-14 23:33:14 +00:00
0bf7ea60c5
Add ModelDefinitions to ModelConfigService ( #22302 )
2026-03-14 21:45:21 +00:00
c5502b2dc5
fix(core): fix manual deletion of subagent histories ( #22407 )
2026-03-14 20:09:43 +00:00
9f7691fd88
feat(prompts): implement Topic-Action-Summary model for verbosity reduction ( #21503 )
2026-03-14 05:10:30 +00:00
3682842a5d
fix(core): deduplicate project memory when JIT context is enabled ( #22234 )
2026-03-14 04:34:53 +00:00
64c50d32ac
Fix issue where config was undefined. ( #22397 )
2026-03-14 01:36:25 +00:00
604d4ded8d
fix(core): use session-specific temp directory for task tracker ( #22382 )
2026-03-13 23:35:26 +00:00
f75bdba568
fix(mcp): handle equivalent root resource URLs in OAuth validation ( #20231 )
2026-03-13 23:32:40 +00:00
8d68ece8d6
Revert "fix(cli): validate --model argument at startup" ( #22378 )
2026-03-13 23:17:29 +00:00
b49fc8122d
feat(security): add disableAlwaysAllow setting to disable auto-approvals ( #21941 )
2026-03-13 23:02:09 +00:00
b0d151bd65
feat(tracker): add tracker policy ( #22379 )
2026-03-13 22:19:04 +00:00
fa024133e6
feat(core): integrate SandboxManager to sandbox all process-spawning tools ( #22231 )
2026-03-13 21:11:51 +00:00
24adacdbc2
Move keychain fallback to keychain service ( #22332 )
2026-03-13 20:57:08 +00:00
bfbd3c40a7
feat(agent): add allowed domain restrictions for browser agent ( #21775 )
2026-03-13 19:41:40 +00:00
dd8d4c98b3
feat(tracker): return TodoList display for tracker tools ( #22060 )
2026-03-13 18:18:33 +00:00
d368997ca3
test: add Object.create context regression test and tool confirmation integration test ( #22356 )
2026-03-13 17:49:33 +00:00
aa000d7d30
fix(core): show descriptive error messages when saving settings fails ( #18095 )
...
Co-authored-by: Dev Randalpura <devrandalpura@google.com >
2026-03-13 16:19:56 +00:00
7b4a822b0e
feat(core): instrument file system tools for JIT context discovery ( #22082 )
2026-03-13 03:44:42 +00:00
d44615ac2f
feat(core): increase sub-agent turn and time limits ( #22196 )
2026-03-13 02:39:49 +00:00
de656f01d7
feat(core): Fully migrate packages/core to AgentLoopContext. ( #22115 )
2026-03-13 01:56:31 +00:00
1d2585dba6
fix(core): explicitly pass messageBus to policy engine for MCP tool saves ( #22255 )
2026-03-13 01:31:13 +00:00
d7d53981f3
feat(core): add trajectoryId to ConversationOffered telemetry ( #22214 )
...
Co-authored-by: Yuna Seol <yunaseol@google.com >
2026-03-12 22:12:08 +00:00
4d393f9dca
feat(a2a): enable native gRPC support and protocol routing ( #21403 )
...
Co-authored-by: Adam Weidman <adamfweidman@google.com >
2026-03-12 21:36:50 +00:00
663d9c0537
feat(core): implement Stage 1 improvements for webfetch tool ( #21313 )
2026-03-12 20:13:00 +00:00
4863816b81
fix(browser): fix duplicate function declaration error in browser agent ( #22207 )
2026-03-12 19:58:09 +00:00
829c532703
fix(core/ide): add Antigravity CLI fallbacks ( #22030 )
2026-03-12 19:28:36 +00:00
c68303c553
fix(core): add proxy routing support for remote A2A subagents ( #22199 )
2026-03-12 19:25:51 +00:00
7242d71c01
fix(core): prevent duplicate tool schemas for instantiated tools ( #22204 )
2026-03-12 19:09:23 +00:00
391715c33c
fix(core): fix startup stats to use int values for timestamps and durations ( #22201 )
...
Co-authored-by: Yuna Seol <yunaseol@google.com >
2026-03-12 19:06:12 +00:00
cd7dced951
feat(core): implement model-driven parallel tool scheduler ( #21933 )
2026-03-12 17:03:44 +00:00
4b76fe0061
feat(core): add google credentials provider for remote agents ( #21024 )
2026-03-12 15:39:59 +00:00
867dc0fdda
feat(telemetry): add Clearcut instrumentation for AI credits billing events ( #22153 )
2026-03-12 15:16:27 +00:00
7506b00488
fix(core): handle policy ALLOW for exit_plan_mode ( #21802 )
2026-03-12 14:43:40 +00:00
34709dc62d
fix(cli): validate --model argument at startup ( #21393 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-03-12 14:38:54 +00:00
8432bcee75
fix(core): resolve MCP tool FQN validation, schema export, and wildcards in subagents ( #22069 )
2026-03-12 14:17:36 +00:00
333475c41f
feat(browser): implement input blocker overlay during automation ( #21132 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Gaurav <39389231+gsquared94@users.noreply.github.com >
Co-authored-by: Gaurav Ghosh <gaghosh@google.com >
2026-03-12 11:29:57 +00:00
10ab958378
refactor(core): extract ExecutionLifecycleService for tool backgrounding ( #21717 )
2026-03-12 04:03:54 +00:00
949e85ca55
feat(core): differentiate User-Agent for a2a-server and ACP clients ( #22059 )
2026-03-12 02:31:59 +00:00
f090736ebc
fix(core): secure argsPattern and revert WEB_FETCH_TOOL_NAME escalation ( #22104 )
...
Co-authored-by: Taylor Mullen <ntaylormullen@google.com >
2026-03-12 02:26:21 +00:00
galz10