883f265234
feat(core): restrict auto-approve checkbox to safe commands
...
Hide the "Allow for all future sessions" checkbox during exec tool
confirmation unless every command in the input passes a strict allowlist.
- Introduce safeCommandAllowlist for read-only utilities (ls, cat, grep, etc.)
- Introduce editCommandAllowlist for file-mutating commands, gated behind
ApprovalMode.AUTO_EDIT
- Use getCommandRoots (Wasm parser) to extract all base executables from
piped, chained, and wrapped commands
- Fail closed: hide checkbox if parser fails or any command root is unknown
- Exclude find/awk/sed from safe list (can execute arbitrary commands)
Ref: google-gemini/maintainers-gemini-cli#1578
2026-03-19 06:06:12 +00:00
b6d5374fb7
Feat/browser privacy consent ( #21119 )
2026-03-18 19:33:24 +00:00
5fb0d1f01d
fix(core): add actionable warnings for terminal fallbacks ( #14426 ) ( #22211 )
2026-03-17 21:57:37 +00:00
82d8680dcc
refactor(core): align JIT memory placement with tiered context model ( #22766 )
2026-03-17 20:20:32 +00:00
fc51e50bc6
fix(core): handle surrogate pairs in truncateString ( #22754 )
2026-03-17 05:41:19 +00:00
990d010ecf
feat(core): implement Stage 2 security and consistency improvements for web_fetch ( #22217 )
2026-03-16 21:38:53 +00:00
44ce90d76c
refactor(core): introduce InjectionService with source-aware injection and backend-native background completions ( #22544 )
2026-03-16 21:06:29 +00:00
b91f75cd6d
fix(core): fix three JIT context bugs in read_file, read_many_files, and memoryDiscovery ( #22679 )
2026-03-16 20:10:50 +00:00
ef5627eece
Disallow Object.create() and reflect. ( #22408 )
2026-03-16 16:24:27 +00:00
0bf7ea60c5
Add ModelDefinitions to ModelConfigService ( #22302 )
2026-03-14 21:45:21 +00:00
3682842a5d
fix(core): deduplicate project memory when JIT context is enabled ( #22234 )
2026-03-14 04:34:53 +00:00
fa024133e6
feat(core): integrate SandboxManager to sandbox all process-spawning tools ( #22231 )
2026-03-13 21:11:51 +00:00
aa000d7d30
fix(core): show descriptive error messages when saving settings fails ( #18095 )
...
Co-authored-by: Dev Randalpura <devrandalpura@google.com >
2026-03-13 16:19:56 +00:00
de656f01d7
feat(core): Fully migrate packages/core to AgentLoopContext. ( #22115 )
2026-03-13 01:56:31 +00:00
4d393f9dca
feat(a2a): enable native gRPC support and protocol routing ( #21403 )
...
Co-authored-by: Adam Weidman <adamfweidman@google.com >
2026-03-12 21:36:50 +00:00
949e85ca55
feat(core): differentiate User-Agent for a2a-server and ACP clients ( #22059 )
2026-03-12 02:31:59 +00:00
067e09a40b
feat(telemetry): implement retry attempt telemetry for network related retries ( #22027 )
...
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-03-11 18:55:48 +00:00
41f1ea4672
fix(core): handle EISDIR in robustRealpath on Windows ( #21984 )
2026-03-11 18:22:10 +00:00
50384ab3c9
fix(core): update language detection to use LSP 3.18 identifiers ( #21931 )
2026-03-11 16:05:52 +00:00
eaf6e8bbb1
fix(core)#20941: reap orphaned descendant processes on PTY abort ( #21124 )
...
Co-authored-by: Spencer <spencertang@google.com >
2026-03-11 15:36:25 +00:00
f8ad3a200a
Feat/retry fetch notifications ( #21813 )
2026-03-11 03:33:50 +00:00
20a226a5ab
feat(core): Thread AgentLoopContext through core. ( #21944 )
2026-03-11 01:12:59 +00:00
94ab449e65
fix(core): treat retryable errors with >5 min delay as terminal quota errors ( #21881 )
2026-03-10 14:53:51 +00:00
1e1e7e349d
fix(core): handle GUI editor non-zero exit codes gracefully ( #20376 )
...
Co-authored-by: Jacob Richman <jacob314@gmail.com >
2026-03-09 23:51:10 +00:00
f88488d1f9
fix(core): resolve Windows line ending and path separation bugs across CLI ( #21068 )
2026-03-09 22:40:22 +00:00
4f4431e4e1
fix(core): prevent infinite recursion in symlink resolution ( #21750 )
2026-03-09 19:38:45 +00:00
a17691f0fc
feat(core): improve subagent result display ( #20378 )
2026-03-09 19:20:15 +00:00
e92ccec6c8
feat(security): implement robust IP validation and safeFetch foundation ( #21401 )
2026-03-09 19:02:07 +00:00
4c9f9bb3e2
robustness(core): static checks to validate history is immutable ( #21228 )
2026-03-09 18:26:03 +00:00
7837194ab5
fix(core): resolve symlinks for non-existent paths during validation ( #21487 )
2026-03-09 16:02:13 +00:00
936f6240dd
fix(core): sanitize SSE-corrupted JSON and domain strings in error classification ( #21702 )
2026-03-09 14:08:33 +00:00
dac3735626
Disallow underspecified types ( #21485 )
2026-03-07 21:05:38 +00:00
e5d58c2b5a
feat(cli): overhaul thinking UI ( #18725 )
2026-03-07 04:20:27 +00:00
7989c28d2e
feat(cli): implement dot-prefixing for slash command conflicts ( #20979 )
2026-03-06 20:43:20 +00:00
7dce23e5d9
feat(core): implement generic CacheService and optimize setupUser ( #21374 )
2026-03-06 19:39:50 +00:00
82316ef6e4
fix(core): deduplicate GEMINI.md files by device/inode on case-insensitive filesystems ( #19904 ) ( #19915 )
2026-03-06 17:52:08 +00:00
0452f787b2
fix(partUtils): display media type and size for inline data parts ( #21358 )
2026-03-06 15:45:43 +00:00
0228c2b9f0
refactor(core): extract shared OAuth flow primitives from MCPOAuthProvider ( #20895 )
2026-03-05 17:01:37 +00:00
3d4956aa57
perf(core): fix OOM crash in long-running sessions ( #19608 )
...
Co-authored-by: Jacob Richman <jacob314@gmail.com >
2026-03-05 04:23:07 +00:00
bc89b05f01
feat(core): improve @file autocomplete to prioritize filenames ( #21064 )
2026-03-04 17:24:34 +00:00
28af4e127f
fix: merge duplicate imports in packages/core (3/4) ( #20928 )
2026-03-04 00:12:59 +00:00
f3bbe6e77a
fix(core): send shell output to model on cancel ( #20501 )
2026-03-03 22:10:16 +00:00
69e15a50d1
fix(core): skip telemetry logging for AbortError exceptions ( #19477 )
...
Co-authored-by: Yuna Seol <yunaseol@google.com >
2026-03-02 23:14:31 +00:00
3f7ef816f1
fix(core): increase default headers timeout to 5 minutes ( #20890 )
2026-03-02 22:36:58 +00:00
7ca3a33f8b
Subagent activity UX. ( #17570 )
2026-03-02 21:04:31 +00:00
659301ff83
feat(core): centralize read_file limits and update gemini-3 description ( #20619 )
2026-03-02 20:11:58 +00:00
ba149afa0b
fix: merge duplicate imports in a2a-server package (2/4) ( #19781 )
2026-02-27 21:13:30 +00:00
ea48bd9414
feat: better error messages ( #20577 )
...
Co-authored-by: Gal Zahavi <38544478+galz10@users.noreply.github.com >
2026-02-27 18:18:16 +00:00
b2d6844f9b
feat(billing): implement G1 AI credits overage flow with billing telemetry ( #18590 )
2026-02-27 18:15:06 +00:00
e17f927a69
Add support for policy engine in extensions ( #20049 )
...
Co-authored-by: Jerop Kipruto <jerop@google.com >
2026-02-27 03:29:33 +00:00
Spencer