95d687a7dd
fix(policy): secure and robust regex matching for commandRegex
...
- Implemented targeted argument matching by adding 'argName' to PolicyRule.
- Updated PolicyEngine to match against a specific argument (e.g., 'command')
when argName is specified, preventing nested property injection bypasses.
- Simplified anchor handling by matching against raw argument values instead
of JSON strings, enabling standard ^ and $ behavior.
- Added a security regression test to verify bypasses are blocked.
- Resolved type errors in config.ts and various test files.
- Cleaned up TDD-related notes and updated unit tests.
2026-02-20 15:59:16 -08:00
af5b523a62
feat(core): migrate read_file to 1-based start_line/end_line parameters ( #19526 )
2026-02-20 15:58:53 -08:00
b7b6773f9a
docs: remove TDD notes and irrelevant comments from policy tests
2026-02-20 15:47:21 -08:00
7ff6d563f1
fix(policy): support regex anchors in commandRegex
...
Modified buildArgsPatterns to correctly transform ^ and $ anchors
into JSON-aware patterns, allowing precise matching of command values.
Closes #19688
2026-02-20 15:13:01 -08:00
58d637f919
Disallow and suppress unsafe assignment ( #19736 )
2026-02-20 22:28:55 +00:00
c5baf39dbd
feat(policy): repurpose "Always Allow" persistence to workspace level ( #19707 )
2026-02-20 22:07:20 +00:00
089aec8b8d
feat(cli): make JetBrains warning more specific ( #19687 )
2026-02-20 21:06:35 +00:00
b7555ab1e1
Fix unsafe assertions in code_assist folder. ( #19706 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-02-20 20:44:23 +00:00
c04602f209
fix(core): restore auth consent in headless mode and add unit tests ( #19689 )
2026-02-20 20:31:43 +00:00
7cf4c05c66
Fixes 'input.on' is not a function error in Gemini CLI ( #19691 )
2026-02-20 20:03:57 +00:00
723f269df6
fix(core): treat 503 Service Unavailable as retryable quota error ( #19642 )
2026-02-20 19:51:53 +00:00
6cfd29ef9b
feat(plan): enforce read-only constraints in Plan Mode ( #19433 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Jerop Kipruto <jerop@google.com >
2026-02-20 19:33:04 +00:00
f97b04cc9a
feat(models): support Gemini 3.1 Pro Preview and fixes ( #19676 )
2026-02-20 19:19:21 +00:00
788a40c445
Send accepted/removed lines with ACCEPT_FILE telemetry. ( #19670 )
2026-02-20 19:07:43 +00:00
ce03156c9f
feat(a2a): Add API key authentication provider ( #19548 )
2026-02-20 18:55:36 +00:00
fe428936d5
feat(ui): improve startup warnings UX with dismissal and show-count limits ( #19584 )
2026-02-20 18:22:45 +00:00
d24f10b087
feat(cli): enhance folder trust with configuration discovery and security warnings ( #19492 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-02-20 18:21:03 +00:00
27b7fc04de
Search updates ( #19482 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-02-20 17:54:28 +00:00
be03e0619f
fix: use discoverOAuthFromWWWAuthenticate for reactive OAuth flow ( #18760 ) ( #19038 )
2026-02-20 17:48:42 +00:00
0f855fc0c4
fix(security): rate limit web_fetch tool to mitigate DDoS via prompt injection ( #19567 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-02-20 17:18:07 +00:00
c3b52b8206
chore: resolve build warnings and update dependencies ( #18880 )
2026-02-20 03:25:56 +00:00
5fd557347e
fix(plan): exclude EnterPlanMode tool from YOLO mode ( #19570 )
2026-02-20 01:53:12 +00:00
fb1b1b451d
feat(core): refine Edit and WriteFile tool schemas for Gemini 3 ( #19476 )
2026-02-20 01:03:10 +00:00
f1c0a695f8
refactor(sdk): introduce session-based architecture ( #19180 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-02-20 00:47:35 +00:00
6351352e54
feat(core): Implement parallel FC for read only tools. ( #18791 )
2026-02-20 00:38:22 +00:00
d8b24e6983
feat(policy): implement project-level policy support ( #18682 )
2026-02-20 00:16:03 +00:00
537e56ffae
feat(plan): support configuring custom plans storage directory ( #19577 )
2026-02-19 22:47:08 +00:00
8064973899
fix(core): improve error type extraction for telemetry ( #19565 )
...
Co-authored-by: Yuna Seol <yunaseol@google.com >
2026-02-19 21:19:19 +00:00
a468407098
chore(core): improve encapsulation and remove unused exports ( #19556 )
2026-02-19 20:19:32 +00:00
264c7aceaa
fix(core): resolve crash in ClearcutLogger when os.cpus() is empty ( #19555 )
2026-02-19 20:13:28 +00:00
3408542a66
fix(core): prevent duplicate tool approval entries in auto-saved.toml ( #19487 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-02-19 20:03:52 +00:00
c276d0c7b6
Fix message too large issue. ( #19499 )
2026-02-19 19:06:36 +00:00
372f41eab8
feat(cli): replace loading phrases boolean with enum setting ( #19347 )
2026-02-19 18:43:12 +00:00
5d235952ba
Fix: Avoid tool confirmation timeout when no UI listeners are present ( #17955 )
2026-02-19 17:28:06 +00:00
880af43b02
fix(core): robust workspace-based IDE connection discovery ( #18443 )
2026-02-19 15:59:33 +00:00
b79e5ce56d
fix(core): add error logging for IDE fetch failures ( #17981 )
2026-02-19 15:54:49 +00:00
ad9c49a604
fix(core): ensure user rejections update tool outcome for telemetry ( #18982 )
2026-02-19 13:14:02 +00:00
c62340675a
feat(core): centralize compatibility checks and add TrueColor detection ( #19478 )
2026-02-19 00:01:23 +00:00
261788cf91
feat(admin): Admin settings should only apply if adminControlsApplicable = true and fetch errors should be fatal ( #19453 )
2026-02-18 22:54:07 +00:00
037061e2e0
use issuer instead of authorization_endpoint for oauth discovery ( #17332 )
...
Co-authored-by: Tommaso Sciortino <sciortino@gmail.com >
2026-02-18 22:38:04 +00:00
221ea360b9
fix(core): ripgrep fails when pattern looks like ripgrep flag ( #18858 )
...
Co-authored-by: Tommaso Sciortino <sciortino@gmail.com >
2026-02-18 22:11:24 +00:00
87f5dd15d6
feat(core): experimental in-progress steering hints (2 of 2) ( #19307 )
2026-02-18 22:05:50 +00:00
f961e0d6b1
fix(core): ensure directory exists before writing conversation file ( #18429 )
...
Co-authored-by: godwiniheuwa <godwiniheuwa@users.noreply.github.com >
Co-authored-by: ruintheextinct <deepkarma001@gmail.com >
2026-02-18 21:13:54 +00:00
14415316c0
feat(core): add support for MCP progress updates ( #19046 )
2026-02-18 20:46:12 +00:00
8f6a711a3a
fix(core): clarify plan mode constraints and exit mechanism ( #19438 )
2026-02-18 20:09:59 +00:00
ce84b3cb5f
Use ranged reads and limited searches and fuzzy editing improvements ( #19240 )
2026-02-17 23:54:08 +00:00
55c628e967
feat(core): experimental in-progress steering hints (1 of 3) ( #19008 )
2026-02-17 22:59:33 +00:00
5e2f5df62c
fix(paths): Add cross-platform path normalization ( #18939 )
2026-02-17 22:52:55 +00:00
4fe86dbd4f
refactor(core): modularize tool definitions by model family ( #19269 )
2026-02-17 22:26:38 +00:00
f1aa1683dd
fix(acp): Wait for mcp initialization in acp ( #18893 ) ( #18894 )
...
Co-authored-by: Mervap <megavaprold@gmail.com >
Co-authored-by: Shreya Keshive <shreyakeshive@google.com >
2026-02-17 19:39:14 +00:00
Abhijit Balaji