95d687a7dd
fix(policy): secure and robust regex matching for commandRegex
...
- Implemented targeted argument matching by adding 'argName' to PolicyRule.
- Updated PolicyEngine to match against a specific argument (e.g., 'command')
when argName is specified, preventing nested property injection bypasses.
- Simplified anchor handling by matching against raw argument values instead
of JSON strings, enabling standard ^ and $ behavior.
- Added a security regression test to verify bypasses are blocked.
- Resolved type errors in config.ts and various test files.
- Cleaned up TDD-related notes and updated unit tests.
2026-02-20 15:59:16 -08:00
7ff6d563f1
fix(policy): support regex anchors in commandRegex
...
Modified buildArgsPatterns to correctly transform ^ and $ anchors
into JSON-aware patterns, allowing precise matching of command values.
Closes #19688
2026-02-20 15:13:01 -08:00
d8b24e6983
feat(policy): implement project-level policy support ( #18682 )
2026-02-20 00:16:03 +00:00
ddcfe5b1f2
fix(core): prioritize conditional policy rules and harden Plan Mode ( #18882 )
2026-02-12 17:04:39 +00:00
0e85e021dc
feat(cli): deprecate --allowed-tools and excludeTools in favor of policy engine ( #18508 )
2026-02-12 00:49:48 +00:00
84ce53aafa
feat(plan): allow skills to be enabled in plan mode ( #18817 )
...
Co-authored-by: Jerop Kipruto <jerop@google.com >
2026-02-11 17:59:03 +00:00
740f0e4c3d
fix: allow ask_user tool in yolo mode ( #18541 )
2026-02-10 18:56:51 +00:00
e3796d137a
fix(core): prevent subagent bypass in plan mode ( #18484 )
2026-02-06 22:55:00 +00:00
5e96373e6b
feat(core): implement tool name aliasing for backward compatibility ( #17974 )
2026-02-03 00:34:14 +00:00
76387d22ae
fix(core): ensure YOLO mode auto-approves complex shell commands when parsing fails ( #17920 )
2026-01-30 20:44:17 +00:00
80e1fa198f
Clean up dead code ( #17443 )
2026-01-24 15:42:18 +00:00
ec7413456e
feat(core): improve shell redirection transparency and security ( #16486 )
2026-01-20 04:07:28 +00:00
7bbfaabffa
fix(policy): ensure MCP policies match unqualified names in non-interactive mode ( #16490 )
2026-01-13 07:25:11 +00:00
d3c206c677
Unify shell security policy and remove legacy logic ( #15770 )
2026-01-04 05:19:00 +00:00
18fef0db31
fix(core): improve shell command with redirection detection ( #15683 )
2026-01-02 19:36:59 +00:00
b0d5c4c058
feat(policy): implement dynamic mode-aware policy evaluation ( #15307 )
2025-12-22 20:25:07 +00:00
2034098780
feat(hooks): Hook Event Handling ( #9097 )
2025-11-24 21:51:39 +00:00
1ed163a666
feat(safety): Introduce safety checker framework ( #12504 )
2025-11-12 21:18:34 +00:00
f5bd474e51
fix(core): prevent server name spoofing in policy engine ( #12511 )
2025-11-05 18:10:23 +00:00
afba59a953
feat(cli): configure policy engine from existing settings ( #8348 )
2025-09-18 20:44:23 +00:00
ba85aa49c7
feat(core): Tool Confirmation Message Bus foundation (PR 1 of 3) ( #7835 )
2025-09-11 16:39:17 +00:00
Abhijit Balaji