Gemini CLI PR rewrites PowerShell substitution scanner to fix v0.63 false-block regressions
duvanka-prasad · ghdev · 2026-11-04
A community PR (#30110) against google-gemini/gemini-cli fixes severe Windows PowerShell regressions introduced in v0.63.0, where routine commands with parentheses, method calls, or -NonInteractive wrappers were falsely blocked as command substitutions, and even user-confirmed (--yolo) substitutions were unconditionally blocked.
- Replaces detectPowerShellSubstitution with a linear-time O(N) stateful scanner that models PowerShell quoting, here-strings, comments, and ${...} variables, distinguishing safe parentheses from real substitutions like $(...) and scriptblock .Invoke().
- Blocks bypass vectors such as comment-spoofed closing parens (echo ($a <) #> ; whoami)), with monotonic lookahead watermarks guaranteeing O(N) runtime without ReDoS risk.
- Rewrites stripShellWrapper to unwrap powershell.exe / pwsh.exe / cmd.exe / POSIX shells at the token level.
More from coding & agent
- Claude Code sessions can talk to each other across projects to coordinate edits — felpix_ · 2026-11-04
- Microsoft details building Copilot Cowork: 9 engineers, 1,211 PRs in a day — luisdans · 2026-11-04
- Native image reading beats OCR for deep research agents, cutting tool calls — RulinShao · 2026-11-04
- Open Terminal Agent TMax v1.1 Ships With Up to 6-Point Gain on TB2, Fully Open-Sourced — RulinShao · 2026-11-04
- Prized adds GPU rentals to dev boxes; agent rents a GPU overnight — thisguyknowsai · 2026-11-04
- Tuned Harness Beats Newest Model: 9-Month-Old Model Wins by ~10 Points — VictorSanh · 2026-11-04