Skip to content

Add support for /extensions config command#17895

Merged
chrstnb merged 6 commits intomainfrom
cb/configcommand
Feb 5, 2026
Merged

Add support for /extensions config command#17895
chrstnb merged 6 commits intomainfrom
cb/configcommand

Conversation

@chrstnb
Copy link
Collaborator

@chrstnb chrstnb commented Jan 29, 2026

Summary

Adding the same behavior we have for noninteractive mode to the interactive CLI

Details

 > /extensions config                                                                                                                          
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄

ℹ Configuring settings for "bigquery-data-analytics"...

ℹ Note: Setting "Project" is already configured in the workspace scope.
╭─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╮
│ Configure Project                                                                                                                           │
│ The Google Cloud project ID                                                                                                                 │
│                                                                                                                                             │
│ > 1234                                                                                                                                      │
│                                                                                                                                             │
│ Enter to submit · Esc to cancel                                                                                                             │
╰─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯

Related Issues

Fixes https://github.com/google-gemini/maintainers-gemini-cli/issues/1289

How to Validate

Run the CLI with the following:

  "experimental": {
    "extensionReloading": true,
    "extensionConfig": true,
  }

Then, open the CLI and invoke /extensions config with an extension with config set.

Pre-Merge Checklist

  • Updated relevant documentation and README (if needed)
  • Added/updated tests (if needed)
  • Noted breaking changes (if any)
  • Validated on required platforms/methods:
    • MacOS
      • npm run
      • npx
      • Docker
      • Podman
      • Seatbelt
    • Windows
      • npm run
      • npx
      • Docker
    • Linux
      • npm run
      • npx
      • Docker

@chrstnb chrstnb requested a review from a team as a code owner January 29, 2026 20:34
@gemini-cli
Copy link
Contributor

gemini-cli bot commented Jan 29, 2026

Hi @chrstnb, thank you so much for your contribution to Gemini CLI! We really appreciate the time and effort you've put into this.

We're making some updates to our contribution process to improve how we track and review changes. Please take a moment to review our recent discussion post: Improving Our Contribution Process & Introducing New Guidelines.

Key Update: Starting January 26, 2026, the Gemini CLI project will require all pull requests to be associated with an existing issue. Any pull requests not linked to an issue by that date will be automatically closed.

Thank you for your understanding and for being a part of our community!

@gemini-code-assist
Copy link
Contributor

Summary of Changes

Hello @chrstnb, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request introduces an interactive config subcommand under the /extensions command, allowing users to manage and modify extension settings directly within the CLI. This new functionality mirrors the existing non-interactive configuration capabilities, providing a guided and interactive experience for setting up extensions and their specific parameters, with support for both user and workspace-level scopes.

Highlights

  • New Command: /extensions config: A new subcommand, /extensions config, has been added to the interactive CLI, enabling users to manage extension settings directly.
  • Flexible Configuration Options: Users can now configure individual settings for a specific extension, all settings for a particular extension, or all installed extensions at once.
  • Scoped Settings Support: The new configuration command supports both user-scoped and workspace-scoped settings, providing flexibility in how extension configurations are applied.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

@github-actions
Copy link

github-actions bot commented Jan 29, 2026

Size Change: +12.3 kB (+0.05%)

Total Size: 23.7 MB

Filename Size Change
./bundle/gemini.js 23.7 MB +12.3 kB (+0.05%)
ℹ️ View Unchanged
Filename Size
./bundle/sandbox-macos-permissive-closed.sb 1.03 kB
./bundle/sandbox-macos-permissive-open.sb 890 B
./bundle/sandbox-macos-permissive-proxied.sb 1.31 kB
./bundle/sandbox-macos-restrictive-closed.sb 3.29 kB
./bundle/sandbox-macos-restrictive-open.sb 3.36 kB
./bundle/sandbox-macos-restrictive-proxied.sb 3.56 kB

compressed-size-action

Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces a new /extensions config command, enabling users to configure extension settings directly from the interactive CLI. However, the implementation has a critical security vulnerability: it relies on underlying functions susceptible to environment variable injection. Malicious extension configurations could inject arbitrary variables into the user's .env file, potentially leading to Remote Code Execution (RCE). It is recommended to add validation for setting names and environment variable names, and to properly escape values when writing to .env files. Additionally, the argument parsing for the --scope flag is incomplete and could lead to incorrect behavior, requiring a more robust and consistent approach.

@gemini-cli gemini-cli bot added the status/need-issue Pull requests that need to have an associated issue. label Jan 29, 2026
@gemini-cli
Copy link
Contributor

gemini-cli bot commented Jan 30, 2026

Hi there! Thank you for your contribution to Gemini CLI. We really appreciate the time and effort you've put into this pull request.

To keep our backlog manageable and ensure we're focusing on current priorities, we are closing pull requests that haven't seen maintainer activity for 30 days. Currently, the team is prioritizing work associated with 🔒 maintainer only or help wanted issues.

If you believe this change is still critical, please feel free to comment with updated details. Otherwise, we encourage contributors to focus on open issues labeled as help wanted. Thank you for your understanding!

@gemini-cli gemini-cli bot closed this Jan 30, 2026
@chrstnb chrstnb reopened this Feb 2, 2026
- Fix environment variable injection vulnerability in extensionSettings.ts by validating keys and rejecting values with newlines.
- Improve quoting logic for environment variable values.
- Fix argument parsing for --scope flag in extensionsCommand.ts to handle both equals and space separators.
- Add tests for security fixes in extensionSettings.test.ts.
@chrstnb chrstnb enabled auto-merge February 5, 2026 15:54
@chrstnb chrstnb added this pull request to the merge queue Feb 5, 2026
Merged via the queue into main with commit ee58e1e Feb 5, 2026
25 of 26 checks passed
@chrstnb chrstnb deleted the cb/configcommand branch February 5, 2026 16:14
sidwan02 pushed a commit to sidwan02/gemini-cli-gemma that referenced this pull request Feb 6, 2026
aswinashok44 pushed a commit to aswinashok44/gemini-cli that referenced this pull request Feb 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

build-succeeded status/need-issue Pull requests that need to have an associated issue.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants