v0.55.1
Gemini CLISummary
This release introduces significant new capabilities in the caretaker system, including webhook ingestion, egress services, and advanced triage features with LLM orchestration. Several bug fixes enhance security and stability, such as mitigating ReAct loops, enforcing workspace trust, and improving path resolution. Additionally, new features like tool registry discovery and an eval coverage report command are now available.
New Features
- Introduced tool registry discovery capabilities.
- Implemented Cloud Run webhook ingestion service for the caretaker.
- Added egress cloud run service skeleton for the caretaker.
- Implemented foundational modules for the caretaker triage worker.
- Implemented Octokit GitHub action handler for the caretaker egress service.
- Implemented the main worker execution loop and egress action publisher for caretaker triage.
- Implemented LLM triage orchestrator and container build for caretaker triage.
- Added an eval coverage report command.
- Implemented Firestore concurrency dual-locking and test ingestion utilities for the PR generator database.
- Implemented Antigravity agent runner and prompt templates for the PR generator agent.
- Added functionality to post a comment before auto-closing issues in the caretaker triage system.
Bug Fixes
- Fixed an issue where npm ci ignore scripts were not being correctly handled during release verification.
- Prevented workspace binary shadowing in release verification.
- Prevented bad NPM releases and promoted job crashes in CI.
- Fixed a test case related to the no_proxy setting.
- Enforced case-insensitive blocking of sensitive paths and VS Code hitl to improve security.
- Resolved defensive path resolution for at-reference files and fixed macOS tests.
- Resolved symbolic link directory escape issues in the memory import processor.
- Made ~/.gitconfig read-only in the macOS sandbox to enhance security.
- Preserved escape sequences in string literals for modern models.
- Stripped thoughts from scrubbed history turns and resolved thought leakage.
- Bypassed LLM correction for JSON and IPYNB files in write_file and replace operations.
- Used an unambiguous previous intent label in fallback summaries.
- Ensured task cancellation aborts the execution loop in the a2a server.
- Simplified the plan mode write policy to support relative paths.
- Grouped cancelled tool responses and coalesced consecutive roles to prevent 400 Bad Request errors.
- Aligned macOS permissive Seatbelt profiles with the deny-default model.
- Mitigated infinite ReAct loops and prompt injection loops.
- Enforced workspace trust and task isolation in the a2a server to prevent RCE.
- Sequentially verified cached credentials and restored GOOGLE_APPLICATION_CREDENTIALS fallback.
- Sanitized and wrapped issue titles in untrusted_context for the caretaker.
- Rotated session ID on model fallback to prevent stateful API errors.
- Enforced HTTPS for GoogleCredentialsAuthProvider to prevent cleartext leakage.
- Filtered out thought parts from getHistoryTurns when context management is disabled.
- Normalized CRLF line endings to LF in getProposedContent.
- Enforced explicit tag length and validation in the file keychain.
- Skipped merged function-response turns when finding the active loop.
Improvements
- Updated Vertex base URL.
- Bumped node google-auth-library version to 10.9.0.
- Excluded transient CI configuration files from workspace context.
- Updated vitest to v3.2.4 and added package-lock.json files.
- Enriched shared project quota limit errors with setup hints.