Commit Graph

6188 Commits

Author SHA1 Message Date
Coco Sheng
9b67b18431 refactor: improve trailing punctuation stripping in path extraction 2026-05-19 14:14:15 -04:00
Coco Sheng
fc1aeff4ea security: rely on central validation for extracted paths instead of naive stripping 2026-05-19 14:03:25 -04:00
Coco Sheng
cf331bdcf7 security: harden best-effort path extraction against traversal and null bytes 2026-05-19 13:55:09 -04:00
Coco Sheng
6a85c9b339 test: verify Best-Effort Path Extractor in handleAtCommand and fix multi-workspace mocks 2026-05-19 13:45:44 -04:00
Coco Sheng
5467769e6c feat: implement best-effort path extraction from log fragments 2026-05-19 13:25:22 -04:00
Coco Sheng
460ccd394e fix: include absolutePath in glob search resolution 2026-05-19 12:57:59 -04:00
Coco Sheng
dda7e297f4 test: add comprehensive unit tests for atCommandProcessor and support multiple workspace folders 2026-05-19 12:46:10 -04:00
Coco Sheng
4c8d5b84c2 test: expand unit test coverage for path validation and nested workspace resolution 2026-05-19 11:10:03 -04:00
Coco Sheng
3667c6f030 test: fix Windows path separator failure in atCommandUtils.test.ts 2026-05-19 11:06:53 -04:00
Coco Sheng
81f63c7779 refactor: fix path validation integration test by supporting log markers at component starts 2026-05-19 10:52:07 -04:00
Coco Sheng
4097ccc6bf refactor: refine path validation heuristics to reduce false positives 2026-05-19 10:12:44 -04:00
Coco Sheng
ad3a82ac08 refactor: eliminate redundant path operations in acpSession 2026-05-18 16:34:15 -04:00
Coco Sheng
27d298488a refactor: structured result for resolveAtCommandPath and simplify calling sites 2026-05-18 14:12:32 -04:00
Coco Sheng
e5a05c02ee test: add missing getDirectories mocks to ACP test files 2026-05-18 13:36:58 -04:00
Coco Sheng
ad93fa381f test: fix TypeScript errors in atCommandUtils.test.ts 2026-05-18 12:59:15 -04:00
Coco Sheng
ba5abc7488 test: add unit tests for resolveAtCommandPath and path validator edge cases 2026-05-18 12:49:39 -04:00
Coco Sheng
5f37142016 fix(core): centralize path validation to prevent crashes from malformed prompts
This change consolidates path validation into the central Config.validatePathAccess method. It introduces a PathValidator utility that performs pre-flight checks for length, invalid characters, and log markers. This automatically protects all tools using workspace boundary checks. Additionally, CLI-level at-command resolution is consolidated into a shared utility.

Fixes #25972
2026-05-18 12:16:31 -04:00
Tommaso Sciortino
b213fd68ec security: update dependencies to fix critical and high vulnerabilities (#27077) 2026-05-15 02:01:38 +00:00
sotokisehiro
928a311fb0 fix(core): externalize https-proxy-agent to fix proxy support (#26361) 2026-05-14 22:34:36 +00:00
7. Sun
f6494f3862 docs: update sandbox image command (#26774) 2026-05-14 22:08:15 +00:00
Coco Sheng
b7f2067dd7 fix(cli): explicitly clear entrypoint when spawning sandbox container (#27059) 2026-05-14 21:50:29 +00:00
Dev Randalpura
7a5a8183bf fix(ui): add ENAMETOOLONG and ENOTDIR to exceptions for file parsing errors (#27069) 2026-05-14 21:23:42 +00:00
Gal Zahavi
0c0d88d90b docs(extensions): clarify env var sanitization policy for MCP and ext… (#22854)
Co-authored-by: Jack Wotherspoon <jackwoth@google.com>
Co-authored-by: Jenna Inouye <jinouye@google.com>
2026-05-14 21:23:38 +00:00
PROTHAM
2151653133 fix(core): resolve EISDIR errors during file processing (#21527) (#27041) 2026-05-14 21:21:57 +00:00
Tommaso Sciortino
a6ed2cc5e3 fix(deps): update vulnerable dependencies (#27062) 2026-05-14 21:19:27 +00:00
David Pierce
5159b081bd fix(core): ensure stable admin settings comparison across IPC to prevent restart loop (#27066) 2026-05-14 19:44:03 +00:00
Gal Zahavi
918d6b6085 fix(core): ensure Vertex AI sets hasAccessToPreviewModels and remove aggressive 404 fallback revocation (#27067) 2026-05-14 19:42:09 +00:00
Dev Randalpura
6fee663ddc fix(ui): preserve new line at the end of edit window (#27057) 2026-05-14 18:33:41 +00:00
Coco Sheng
456d1aec74 fix(cli): resolve permission denied in sandbox on NixOS and other distros (#27004) 2026-05-14 17:15:12 +00:00
Coco Sheng
e3f2d3e1ef fix(core): respect NO_PROXY for network-based MCP servers (#27012) 2026-05-14 17:11:17 +00:00
Sri Pasumarthi
b705505dae fix(acp/auth): prevent conflicting credentials on enterprise gateways and support optional API keys natively (#27021) 2026-05-14 15:38:01 +00:00
Spencer
488d71b8c9 feat(core): expose RAG snippets to local log file for debugging (#27016) 2026-05-14 02:34:12 +00:00
Gal Zahavi
77078b3e8a fix(core): ensure stable fallback for restricted preview models (#26999) 2026-05-13 21:46:41 +00:00
ifitisit
1814c7f358 fix(cli): don't crash when an @-mention captures a non-path blob (#25980) 2026-05-13 21:43:08 +00:00
EMERSON BUSSON
724981baf8 fix(core): throttle shell text output and bound live UI buffer (#26955) 2026-05-13 21:34:32 +00:00
Sandy Tao
7504259d72 chore: clean up launched memory features (#26941)
Co-authored-by: Jenna Inouye <jinouye@google.com>
2026-05-13 21:22:56 +00:00
Coco Sheng
0750b01fe4 fix: add system PATH fallback for ripgrep resolution (#26777) (#26868) 2026-05-13 21:05:37 +00:00
Dev Randalpura
41599ce29f fix(core): made context files append instead of replace (#26950)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-05-13 19:45:30 +00:00
Tommaso Sciortino
74e9079e5b chore: add execution permission to scripts/review.sh (#27009) 2026-05-13 12:22:00 -07:00
AK
9da30b8831 fix(core): isolate subagent thread context (#26449) 2026-05-13 18:55:17 +00:00
Dev Randalpura
71a2c0264e fix(ui): clamped table column widths (#26991)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2026-05-13 18:43:49 +00:00
Sahil Kirad
fd01cc03bf fix(core): refresh MCP OAuth token usage after re-auth (#26312)
Co-authored-by: Tommaso Sciortino <sciortino@gmail.com>
2026-05-13 12:01:27 -07:00
Coco Sheng
fc4054446f ci: suppress bot comments during standard triage maintenance (#27006) 2026-05-13 18:43:07 +00:00
Coco Sheng
08abe4542d fix(cli): auto-approve shell redirections in AUTO_EDIT mode (#27003) 2026-05-13 18:28:30 +00:00
Coco Sheng
63b4bbfb5d fix(core): handle EISDIR on virtual drives in memory discovery (#26985) 2026-05-13 17:41:49 +00:00
Coco Sheng
1e7063bb0b fix(cli): allow keychain auth for --list-sessions and non-interactive mode (#26921) 2026-05-13 17:35:21 +00:00
Coco Sheng
297d3a3067 fix(core): preserve OAuth refresh tokens during rotation and retrieval (#26924) 2026-05-13 17:19:05 +00:00
David Pierce
749657cbf9 feat(cli): merge Auto modes into a single Auto mode (#26714) 2026-05-13 16:55:43 +00:00
Adam Weidman
8cda688fe2 feat(core): change agent registration to first-wins and prioritize project (#26953) 2026-05-13 01:33:12 +00:00
gemini-cli-robot
5ee05c775e Changelog for v0.43.0-preview.0 (#26959)
Co-authored-by: gemini-cli-robot <224641728+gemini-cli-robot@users.noreply.github.com>
2026-05-13 00:01:24 +00:00