From 90e2e761f22a6d735e5707fb7804e978a8f4ab7f Mon Sep 17 00:00:00 2001 From: googleworkspace-bot Date: Wed, 4 Mar 2026 01:36:59 +0000 Subject: [PATCH] chore: release versions --- .changeset/consumer-recipes.md | 11 ------- .changeset/encode-path-params.md | 5 --- .changeset/gemini-extension-update.md | 5 --- .changeset/harden-input-validation.md | 12 ------- .changeset/harden-security-validation.md | 5 --- .changeset/remove-manual-urlencoded.md | 5 --- .../test-encrypted-token-storage-new.md | 5 --- .changeset/testing-improvement.md | 5 --- .changeset/url-safety-helpers.md | 5 --- .changeset/warn-api-failures.md | 5 --- CHANGELOG.md | 32 +++++++++++++++++++ Cargo.lock | 6 ++-- Cargo.toml | 2 +- package.json | 2 +- 14 files changed, 37 insertions(+), 68 deletions(-) delete mode 100644 .changeset/consumer-recipes.md delete mode 100644 .changeset/encode-path-params.md delete mode 100644 .changeset/gemini-extension-update.md delete mode 100644 .changeset/harden-input-validation.md delete mode 100644 .changeset/harden-security-validation.md delete mode 100644 .changeset/remove-manual-urlencoded.md delete mode 100644 .changeset/test-encrypted-token-storage-new.md delete mode 100644 .changeset/testing-improvement.md delete mode 100644 .changeset/url-safety-helpers.md delete mode 100644 .changeset/warn-api-failures.md diff --git a/.changeset/consumer-recipes.md b/.changeset/consumer-recipes.md deleted file mode 100644 index 587dbbc05..000000000 --- a/.changeset/consumer-recipes.md +++ /dev/null @@ -1,11 +0,0 @@ ---- -"@googleworkspace/cli": minor ---- - -Add workflow helpers, personas, and 50 consumer-focused recipes - -- Add `gws workflow` subcommand with 5 built-in helpers: `+standup-report`, `+meeting-prep`, `+email-to-task`, `+weekly-digest`, `+file-announce` -- Add 10 agent personas (exec-assistant, project-manager, sales-ops, etc.) with curated skill sets -- Add `docs/skills.md` skills index and `registry/recipes.yaml` with 50 multi-step recipes for Gmail, Drive, Docs, Calendar, and Sheets -- Update README with skills index link and accurate skill count -- Fix lefthook pre-commit to run fmt and clippy sequentially diff --git a/.changeset/encode-path-params.md b/.changeset/encode-path-params.md deleted file mode 100644 index 73aafb20d..000000000 --- a/.changeset/encode-path-params.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@googleworkspace/cli": patch ---- - -fix: percent-encode path parameters to prevent path traversal diff --git a/.changeset/gemini-extension-update.md b/.changeset/gemini-extension-update.md deleted file mode 100644 index 70c14852a..000000000 --- a/.changeset/gemini-extension-update.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@googleworkspace/cli": patch ---- - -Fix Gemini extension installation issue by removing redundant authentication settings and update the documentation. diff --git a/.changeset/harden-input-validation.md b/.changeset/harden-input-validation.md deleted file mode 100644 index 8277c861d..000000000 --- a/.changeset/harden-input-validation.md +++ /dev/null @@ -1,12 +0,0 @@ ---- -"@googleworkspace/cli": patch ---- - -fix: harden input validation for AI/LLM callers - -- Add `src/validate.rs` with `validate_safe_output_dir`, `validate_msg_format`, and `validate_safe_dir_path` helpers -- Validate `--output-dir` against path traversal in `gmail +watch` and `events +subscribe` -- Validate `--msg-format` against allowlist (full, metadata, minimal, raw) in `gmail +watch` -- Validate `--dir` against path traversal in `script +push` -- Add clap `value_parser` constraint for `--msg-format` -- Document input validation patterns in `AGENTS.md` diff --git a/.changeset/harden-security-validation.md b/.changeset/harden-security-validation.md deleted file mode 100644 index 4f27176ee..000000000 --- a/.changeset/harden-security-validation.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@googleworkspace/cli": patch ---- - -Security: Harden validate_resource_name and fix Gmail watch path traversal diff --git a/.changeset/remove-manual-urlencoded.md b/.changeset/remove-manual-urlencoded.md deleted file mode 100644 index f2e6d0292..000000000 --- a/.changeset/remove-manual-urlencoded.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@googleworkspace/cli": patch ---- - -Replace manual `urlencoded()` with reqwest `.query()` builder for safer URL encoding diff --git a/.changeset/test-encrypted-token-storage-new.md b/.changeset/test-encrypted-token-storage-new.md deleted file mode 100644 index e192254e2..000000000 --- a/.changeset/test-encrypted-token-storage-new.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@googleworkspace/cli": patch ---- - -Added test coverage for `EncryptedTokenStorage::new` initialization. \ No newline at end of file diff --git a/.changeset/testing-improvement.md b/.changeset/testing-improvement.md deleted file mode 100644 index a76bae75c..000000000 --- a/.changeset/testing-improvement.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@googleworkspace/cli": patch ---- - -Add test for missing error path in load_client_config diff --git a/.changeset/url-safety-helpers.md b/.changeset/url-safety-helpers.md deleted file mode 100644 index e021f8e3d..000000000 --- a/.changeset/url-safety-helpers.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@googleworkspace/cli": patch ---- - -fix: add shared URL safety helpers for path params (`encode_path_segment`, `validate_resource_name`) diff --git a/.changeset/warn-api-failures.md b/.changeset/warn-api-failures.md deleted file mode 100644 index 449cdb3fd..000000000 --- a/.changeset/warn-api-failures.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@googleworkspace/cli": patch ---- - -fix: warn on stderr when API calls fail silently diff --git a/CHANGELOG.md b/CHANGELOG.md index 76e7270d8..dc40f6f5e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,37 @@ # @googleworkspace/cli +## 0.2.0 + +### Minor Changes + +- b0d0b95: Add workflow helpers, personas, and 50 consumer-focused recipes + + - Add `gws workflow` subcommand with 5 built-in helpers: `+standup-report`, `+meeting-prep`, `+email-to-task`, `+weekly-digest`, `+file-announce` + - Add 10 agent personas (exec-assistant, project-manager, sales-ops, etc.) with curated skill sets + - Add `docs/skills.md` skills index and `registry/recipes.yaml` with 50 multi-step recipes for Gmail, Drive, Docs, Calendar, and Sheets + - Update README with skills index link and accurate skill count + - Fix lefthook pre-commit to run fmt and clippy sequentially + +### Patch Changes + +- 90adcb4: fix: percent-encode path parameters to prevent path traversal +- e71ce29: Fix Gemini extension installation issue by removing redundant authentication settings and update the documentation. +- 90adcb4: fix: harden input validation for AI/LLM callers + + - Add `src/validate.rs` with `validate_safe_output_dir`, `validate_msg_format`, and `validate_safe_dir_path` helpers + - Validate `--output-dir` against path traversal in `gmail +watch` and `events +subscribe` + - Validate `--msg-format` against allowlist (full, metadata, minimal, raw) in `gmail +watch` + - Validate `--dir` against path traversal in `script +push` + - Add clap `value_parser` constraint for `--msg-format` + - Document input validation patterns in `AGENTS.md` + +- 90adcb4: Security: Harden validate_resource_name and fix Gmail watch path traversal +- 90adcb4: Replace manual `urlencoded()` with reqwest `.query()` builder for safer URL encoding +- c11d3c4: Added test coverage for `EncryptedTokenStorage::new` initialization. +- 7664357: Add test for missing error path in load_client_config +- 90adcb4: fix: add shared URL safety helpers for path params (`encode_path_segment`, `validate_resource_name`) +- 90adcb4: fix: warn on stderr when API calls fail silently + ## 0.1.5 ### Patch Changes diff --git a/Cargo.lock b/Cargo.lock index 37b17cb09..fcb3f5d32 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -845,7 +845,7 @@ dependencies = [ [[package]] name = "gws" -version = "0.1.5" +version = "0.2.0" dependencies = [ "aes-gcm", "anyhow", @@ -1785,9 +1785,9 @@ dependencies = [ [[package]] name = "quote" -version = "1.0.44" +version = "1.0.45" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "21b2ebcf727b7760c461f091f9f0f539b77b8e87f2fd88131e7f1b433b3cece4" +checksum = "41f2619966050689382d2b44f664f4bc593e129785a36d6ee376ddf37259b924" dependencies = [ "proc-macro2", ] diff --git a/Cargo.toml b/Cargo.toml index 5ff0acba0..459bd8b7c 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -14,7 +14,7 @@ [package] name = "gws" -version = "0.1.5" +version = "0.2.0" edition = "2021" description = "Google Workspace CLI — dynamic command surface from Discovery Service" license = "Apache-2.0" diff --git a/package.json b/package.json index 55ae26cea..31a950f55 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@googleworkspace/cli", - "version": "0.1.5", + "version": "0.2.0", "private": true, "description": "Google Workspace CLI — dynamic command surface from Discovery Service", "license": "Apache-2.0",