galz10 459db523e2 fix(core): secure shell execution with AST validation ...

Replaces simplistic prefix-matching for shell command policies with robust Abstract Syntax Tree (AST) parsing using `bash-parser`.

Previously, policies for shell tools only checked if the command string started with an allowed prefix (e.g., `echo`), allowing trivial bypasses via shell operators like `&&` or `;` (e.g., `echo "ok" && rm -rf /`).

This update secures the execution pipeline by parsing the shell string and validating *every* extracted sub-command against the allowed policies.

Key changes:
- Integrated `bash-parser` to synchronously extract executable commands from pipelines, lists, and subshells.
- Updated `doesToolInvocationMatch` to enforce policy on all extracted sub-commands instead of just the string prefix.
- Enforced `coreTools` validation at execution time within `ShellTool` to prevent bypasses when tools are configured via `settings.json`.
- Updated the CLI `useShellCommandProcessor` to run human-input commands through the AST `PolicyEngine` check before spawning the process.
- Fixed asynchronous test flakiness in the CLI package caused by the new policy enforcement.

2026-03-16 15:07:51 -07:00

..

examples

…

src

fix(core): secure shell execution with AST validation

2026-03-16 15:07:51 -07:00

GEMINI.md

Fix bottom border rendering for search and add a regression test. (#20517)

2026-02-27 04:55:21 +00:00

index.ts

fix punycode2 (#20154)

2026-02-24 09:43:22 +00:00

package.json

chore/release: bump version to 0.35.0-nightly.20260313.bb060d7a9 (#22251)

2026-03-13 20:33:16 +00:00

test-setup.ts

feat(ui): dynamically generate all keybinding hints (#21346)

2026-03-06 18:34:26 +00:00

tsconfig.json

…

vitest.config.ts

…