822e098d32
feat(policy): map --yolo to allowedTools wildcard policy
...
This PR maps the `--yolo` flag natively into a wildcard policy array
(`allowedTools: ["*"]`) and removes the concept of `ApprovalMode.YOLO` as a
distinct state in the application, fulfilling issue #11303 .
This removes the hardcoded `ApprovalMode.YOLO` state and its associated
UI/bypasses. The `PolicyEngine` now evaluates YOLO purely via data-driven rules.
- Removes `ApprovalMode.YOLO`
- Removes UI toggle (`Ctrl+Y`) and indicators for YOLO
- Removes `yolo.toml`
- Updates A2A server and CLI config logic to translate YOLO into a wildcard tool
- Rewrites policy engine tests to evaluate the wildcard
- Enforces enterprise `disableYoloMode` and `secureModeEnabled` controls
by actively preventing manual `--allowed-tools=*` bypasses.
Fixes #11303
2026-04-02 18:04:20 +00:00
fc03891a11
fix(extensions): revert broken extension removal behavior ( #23317 )
2026-03-20 23:36:52 +00:00
05fda0cf01
feat(extensions): implement cryptographic integrity verification for extension updates ( #21772 )
2026-03-16 19:01:52 +00:00
1fd42802be
perf(cli): cache loadSettings to reduce redundant disk I/O at startup ( #21521 )
2026-03-09 21:33:16 +00:00
e17f927a69
Add support for policy engine in extensions ( #20049 )
...
Co-authored-by: Jerop Kipruto <jerop@google.com >
2026-02-27 03:29:33 +00:00
6510347d5b
feat(extensions): enforce folder trust for local extension install ( #19703 )
2026-02-24 19:58:44 +00:00
6396ab1ccb
Add allowedExtensions setting ( #17695 )
2026-01-30 19:43:51 +00:00
61040d0eb8
feat(hooks): enable hooks system by default ( #17247 )
2026-01-21 22:40:31 +00:00
211d2c5fdd
feat(core): Ensure all properties in hooks object are event names. ( #16870 )
2026-01-20 22:47:31 +00:00
f7f38e2b9e
Make merged settings non-nullable and fix all lints related to that. ( #16647 )
2026-01-15 17:26:10 +00:00
a81500a929
feat(cli): add security consent prompts for skill installation ( #16549 )
2026-01-15 01:47:02 +00:00
3b55581aaf
Add an experimental setting for extension config ( #16506 )
2026-01-14 15:16:42 +00:00
bb6c574144
feat(admin): support admin-enforced settings for Agent Skills ( #16406 )
2026-01-14 07:40:23 +00:00
97ad3d97cb
Reapply "feat(admin): implement extensions disabled" ( #16082 ) ( #16109 )
2026-01-08 17:59:30 +00:00
19bdd95eab
Revert "feat(admin): implement extensions disabled" ( #16082 )
2026-01-07 19:35:56 +00:00
db99beda36
feat(admin): implement extensions disabled ( #16024 )
2026-01-07 16:31:17 +00:00
7956eb239e
Introduce GEMINI_CLI_HOME for strict test isolation ( #15907 )
2026-01-07 04:09:39 +00:00
56092bd782
feat(hooks): Add a hooks.enabled setting. ( #15933 )
2026-01-06 21:33:37 +00:00
4c67eef0f2
Inform user of missing settings on extensions update ( #15944 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-01-06 17:26:01 +00:00
7f2d33458a
Disallow unnecessary awaits. ( #15172 )
2025-12-17 05:28:18 +00:00
d030a1f62f
update(telemetry): add hashed_extension_name to field to extension events ( #15025 )
...
Co-authored-by: Shnatu <snatu@google.com >
2025-12-15 17:40:54 +00:00
d35a1fdec7
fix: handle missing local extension config and skip hooks when disabled ( #14744 )
2025-12-09 01:51:42 +00:00
eb3312e7ba
feat: Support Extension Hooks with Security Warning ( #14460 )
2025-12-03 20:07:37 +00:00
f4babf172b
fix(async): prevent missed async errors from bypassing catch handlers ( #13714 )
...
Co-authored-by: Tommaso Sciortino <sciortino@gmail.com >
2025-12-01 22:11:40 +00:00
61582678bf
Optimize and improve test coverage for cli/src/config ( #13485 )
2025-11-21 04:57:59 +00:00
d1e35f8660
Protect stdout and stderr so JavaScript code can't accidentally write to stdout corrupting ink rendering ( #13247 )
...
Bypassing rules as link checker failure is spurious.
2025-11-20 10:44:02 -08:00
b248ec6dfb
Add implementation for setting to disable Github extensions ( #12838 )
2025-11-11 18:37:01 +00:00
cc2c48d59e
fix(extension-uninstallation): Fix uninstalling extensions named differently than their directory name ( #12852 )
...
Co-authored-by: Shnatu <snatu@google.com >
2025-11-11 18:19:06 +00:00
da4fa5ad75
Extensions MCP refactor ( #12413 )
2025-11-04 15:51:18 +00:00
adddafe6d0
Handle untrusted folders on extension install and link ( #12322 )
...
Co-authored-by: Jacob MacDonald <jakemac@google.com >
2025-10-31 19:17:01 +00:00
7e987113a2
Add support for sensitive keychain-stored per-extension settings ( #11953 )
2025-10-28 18:48:50 +00:00
13aa0148e7
Migrate tests to use avoid jsdom ( #12118 )
2025-10-28 17:32:15 +00:00
1b302deeff
Add ExtensionLoader interface, use that on Config object ( #12116 )
2025-10-28 16:04:30 +00:00
ee66732ad2
First batch of fixing tests to use best practices. ( #11964 )
2025-10-25 21:41:53 +00:00
63a90836fe
fix linked extension test on windows ( #11973 )
2025-10-24 18:55:31 +00:00
ca94dabd4f
Fix(cli): Use cross-platform path separators in extension tests ( #11970 )
2025-10-24 18:42:49 +00:00
a123a813b2
Fix(cli): Use the correct extensionPath ( #11896 )
2025-10-24 17:45:58 +00:00
c4c0c0d182
Create ExtensionManager class which manages all high level extension tasks ( #11667 )
2025-10-23 18:39:36 +00:00
750c0e366f
Add extension settings to be requested on install ( #9802 )
2025-10-23 15:47:08 +00:00
c6a59896f3
Add extensions logging ( #11261 )
2025-10-21 20:55:16 +00:00
cc7e1472f9
Pass whole extensions rather than just context files ( #10910 )
...
Co-authored-by: Jake Macdonald <jakemac@google.com >
2025-10-20 23:15:23 +00:00
f4330c9f5e
remove support for workspace extensions and migrations ( #11324 )
2025-10-17 23:08:57 +00:00
d3bdbc6978
add extension IDs ( #11377 )
2025-10-17 20:29:07 +00:00
b734723d95
Update extensions install warning ( #11149 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-10-16 15:01:17 +00:00
8c1656bf56
Don't always fall back on a git clone when installing extensions ( #11229 )
2025-10-15 21:29:16 +00:00
a6e00d9183
Fix rough edges around extension updates ( #10926 )
2025-10-10 21:28:13 +00:00
bf0f61e656
Show final install path in extension consent dialog and fix isWorkspaceTrusted check ( #10830 )
2025-10-10 20:40:13 +00:00
21062dd30e
clean up extension tests ( #10857 )
2025-10-09 22:06:06 +00:00
f2852056a1
feat: prevent ansi codes in extension MCP Servers ( #10748 )
2025-10-08 20:41:22 +00:00
b0b1be0c2a
chore(int): skip flaky tests ( #10736 )
2025-10-08 20:05:11 +00:00
Spencer