 Gal Zahavi
|
13ccc16457
|
fix(core): enhance sandbox usability and fix build error (#24460)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
|
2026-04-01 23:51:06 +00:00 |
|
|
ruomeng
|
c888da5f73
|
fix(core): replace hardcoded non-interactive ASK_USER denial with explicit policy rules (#23668)
|
2026-03-26 18:35:12 +00:00 |
|
|
Tommaso Sciortino
|
1b052df52f
|
feat(core): implement Windows sandbox dynamic expansion Phase 1 and 2.1 (#23691)
|
2026-03-25 17:54:45 +00:00 |
|
|
Gal Zahavi
|
a6c7affedb
|
fix(core): conditionally expose additional_permissions in shell tool (#23729)
Co-authored-by: Sandy Tao <sandytao520@icloud.com>
|
2026-03-25 01:46:15 +00:00 |
|
|
Gal Zahavi
|
36e6445dba
|
feat(sandbox): dynamic macOS sandbox expansion and worktree support (#23301)
|
2026-03-24 04:48:13 +00:00 |
|
|
Keith Schaab
|
b35c12d8d0
|
fix(core)!: Force policy config to specify toolName (#23330)
|
2026-03-23 22:35:08 +00:00 |
|
|
cynthialong0-0
|
e8fe43bd69
|
feat(browser): add sensitive action controls and read-only noise reduction (#22867)
|
2026-03-20 22:34:04 +00:00 |
|
|
ruomeng
|
1725ec346b
|
feat(plan): support plan mode in non-interactive mode (#22670)
|
2026-03-18 20:00:26 +00:00 |
|
|
Gal Zahavi
|
b49fc8122d
|
feat(security): add disableAlwaysAllow setting to disable auto-approvals (#21941)
|
2026-03-13 23:02:09 +00:00 |
|
|
Coco Sheng
|
1b69637032
|
feat(a2a): switch from callback-based to event-driven tool scheduler (#21467)
Co-authored-by: Abhi <abhipatel@google.com>
Co-authored-by: Adam Weidman <adamfweidman@google.com>
|
2026-03-10 19:36:17 +00:00 |
|
|
AK
|
527074b50a
|
feat(policy): support subagent-specific policies in TOML (#21431)
|
2026-03-09 19:22:46 +00:00 |
|
|
Abhi
|
931e668b47
|
refactor(core): standardize MCP tool naming to mcp_ FQN format (#21425)
|
2026-03-06 22:17:28 +00:00 |
|
|
christine betts
|
e17f927a69
|
Add support for policy engine in extensions (#20049)
Co-authored-by: Jerop Kipruto <jerop@google.com>
|
2026-02-27 03:29:33 +00:00 |
|
|
Jerop Kipruto
|
182c858e67
|
feat(policy): centralize plan mode tool visibility in policy engine (#20178)
Co-authored-by: Mahima Shanware <mshanware@google.com>
|
2026-02-24 17:17:43 +00:00 |
|
|
Jerop Kipruto
|
15f6c8b8da
|
feat(policy): Propagate Tool Annotations for MCP Servers (#20083)
|
2026-02-24 14:20:11 +00:00 |
|
|
Rishabh Khandelwal
|
dde844dbe1
|
feat(security): Introduce Conseca framework (#13193)
|
2026-02-24 02:44:28 +00:00 |
|
|
Jerop Kipruto
|
3e5e608a22
|
feat(policy): Implement Tool Annotation Matching in Policy Engine (#20029)
|
2026-02-23 21:39:40 +00:00 |
|
|
Jerop Kipruto
|
347f3fe7e4
|
feat(policy): Support MCP Server Wildcards in Policy Engine (#20024)
|
2026-02-23 19:07:06 +00:00 |
|
|
Abhijit Balaji
|
d8b24e6983
|
feat(policy): implement project-level policy support (#18682)
|
2026-02-20 00:16:03 +00:00 |
|
|
Abhijit Balaji
|
ddcfe5b1f2
|
fix(core): prioritize conditional policy rules and harden Plan Mode (#18882)
|
2026-02-12 17:04:39 +00:00 |
|
|
Abhijit Balaji
|
0e85e021dc
|
feat(cli): deprecate --allowed-tools and excludeTools in favor of policy engine (#18508)
|
2026-02-12 00:49:48 +00:00 |
|
|
Christian Gunderman
|
fd65416a2f
|
Disallow unsafe type assertions (#18688)
|
2026-02-10 00:10:15 +00:00 |
|
|
Sandy Tao
|
5e96373e6b
|
feat(core): implement tool name aliasing for backward compatibility (#17974)
|
2026-02-03 00:34:14 +00:00 |
|
|
Abhi
|
76387d22ae
|
fix(core): ensure YOLO mode auto-approves complex shell commands when parsing fails (#17920)
|
2026-01-30 20:44:17 +00:00 |
|
|
Abhi
|
d3bca5d97a
|
feat(core): implement dynamic policy registration for subagents (#17838)
|
2026-01-30 16:57:54 +00:00 |
|
|
Tommaso Sciortino
|
80e1fa198f
|
Clean up dead code (#17443)
|
2026-01-24 15:42:18 +00:00 |
|
|
N. Taylor Mullen
|
ec7413456e
|
feat(core): improve shell redirection transparency and security (#16486)
|
2026-01-20 04:07:28 +00:00 |
|
|
N. Taylor Mullen
|
7bbfaabffa
|
fix(policy): ensure MCP policies match unqualified names in non-interactive mode (#16490)
|
2026-01-13 07:25:11 +00:00 |
|
|
Allen Hutchison
|
64cde8d439
|
fix(policy): enhance shell command safety and parsing (#15034)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Abhi <43648792+abhipatel12@users.noreply.github.com>
|
2026-01-12 19:23:32 +00:00 |
|
|
Abhi
|
d3c206c677
|
Unify shell security policy and remove legacy logic (#15770)
|
2026-01-04 05:19:00 +00:00 |
|
|
Gal Zahavi
|
18fef0db31
|
fix(core): improve shell command with redirection detection (#15683)
|
2026-01-02 19:36:59 +00:00 |
|
|
Abhi
|
b0d5c4c058
|
feat(policy): implement dynamic mode-aware policy evaluation (#15307)
|
2025-12-22 20:25:07 +00:00 |
|
|
Allen Hutchison
|
a47af8e261
|
fix(core): commandPrefix word boundary and compound command safety (#15006)
|
2025-12-12 23:02:19 +00:00 |
|
|
Edilmo Palencia
|
2034098780
|
feat(hooks): Hook Event Handling (#9097)
|
2025-11-24 21:51:39 +00:00 |
|
|
Allen Hutchison
|
1ed163a666
|
feat(safety): Introduce safety checker framework (#12504)
|
2025-11-12 21:18:34 +00:00 |
|
|
Allen Hutchison
|
f5bd474e51
|
fix(core): prevent server name spoofing in policy engine (#12511)
|
2025-11-05 18:10:23 +00:00 |
|
|
Allen Hutchison
|
064edc52f5
|
feat(policy): Introduce config-based policy engine with TOML configuration (#11992)
|
2025-10-28 16:20:57 +00:00 |
|
|
Allen Hutchison
|
afba59a953
|
feat(cli): configure policy engine from existing settings (#8348)
|
2025-09-18 20:44:23 +00:00 |
|
|
Allen Hutchison
|
ba85aa49c7
|
feat(core): Tool Confirmation Message Bus foundation (PR 1 of 3) (#7835)
|
2025-09-11 16:39:17 +00:00 |
|