Gemini CLI PR fixes YOLO-mode flaw that escalated ASK_USER rules to ALLOW

adityajai119 · ghdev · 2026-11-14

PR #30295 in gemini-cli fixes a policy bypass in PolicyEngine.checkShellCommand() under ApprovalMode.YOLO.

The bug: when parseCommandDetails() returned empty details or hasError: true, the code unconditionally returned PolicyDecision.ALLOW, escalating explicit ASKUSER rules to ALLOW, bypassing the non-interactive ASKUSER→DENY conversion, and re-upgrading rules already downgraded to ASKUSER by applyShellHeuristics() (e.g. git commands in untrusted workspaces).
The fix: return ruleDecision instead (clearing rule when the decision came from a heuristic downgrade), keeping unrestricted ALLOW rules fast while preserving ASKUSER decisions.
The PR includes validation steps: policy test suite, build, typecheck, lint, and bundle smoke checks.

More from coding & agent