Jeffrey Ying
|
94c2ecef9c
|
fix(core): allow /memory add to work in plan mode (#20353)
|
2026-02-26 13:59:44 +00:00 |
|
Jerop Kipruto
|
715f28cc30
|
feat(policy): centralize plan mode tool visibility in policy engine (#20178)
Co-authored-by: Mahima Shanware <mshanware@google.com>
|
2026-02-24 17:17:43 +00:00 |
|
Jerop Kipruto
|
06161f5a97
|
feat(policy): Propagate Tool Annotations for MCP Servers (#20083)
|
2026-02-24 14:20:11 +00:00 |
|
Rishabh Khandelwal
|
40e82b8b54
|
feat(security): Introduce Conseca framework (#13193)
|
2026-02-24 02:44:28 +00:00 |
|
Jerop Kipruto
|
28a8db0459
|
feat(policy): Implement Tool Annotation Matching in Policy Engine (#20029)
|
2026-02-23 21:39:40 +00:00 |
|
Jerop Kipruto
|
d90dfbda9e
|
feat(policy): Support MCP Server Wildcards in Policy Engine (#20024)
|
2026-02-23 19:07:06 +00:00 |
|
Adib234
|
aa38282e7c
|
fix(plan): allow plan mode writes on Windows and fix prompt paths (#19658)
|
2026-02-23 17:48:50 +00:00 |
|
Abhijit Balaji
|
36e8d192cc
|
feat(policy): repurpose "Always Allow" persistence to workspace level (#19707)
|
2026-02-20 22:07:20 +00:00 |
|
matt korwel
|
d9d2b1d51e
|
feat(plan): enforce read-only constraints in Plan Mode (#19433)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Jerop Kipruto <jerop@google.com>
|
2026-02-20 19:33:04 +00:00 |
|
Abhijit Balaji
|
5793acd758
|
feat(policy): implement project-level policy support (#18682)
|
2026-02-20 00:16:03 +00:00 |
|
N. Taylor Mullen
|
bf0a2826f1
|
docs: fix inconsistent commandRegex example in policy engine (#19027)
|
2026-02-13 20:02:07 +00:00 |
|
Allen Hutchison
|
cdfbb18c32
|
feat(policy): add --policy flag for user defined policies (#18500)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
|
2026-02-13 00:25:23 +00:00 |
|
Adib234
|
1b11518fed
|
fix(plan): isolate plan files per session (#18757)
|
2026-02-12 19:02:59 +00:00 |
|
Abhijit Balaji
|
4d67519d5c
|
fix(core): prioritize conditional policy rules and harden Plan Mode (#18882)
|
2026-02-12 17:04:39 +00:00 |
|
Abhijit Balaji
|
f338ffd3ec
|
feat(cli): deprecate --allowed-tools and excludeTools in favor of policy engine (#18508)
|
2026-02-12 00:49:48 +00:00 |
|
Adib234
|
92ab4f47d2
|
feat(plan): allow skills to be enabled in plan mode (#18817)
Co-authored-by: Jerop Kipruto <jerop@google.com>
|
2026-02-11 17:59:03 +00:00 |
|
Jerop Kipruto
|
f794fddd59
|
feat(plan): document and validate Plan Mode policy overrides (#18825)
|
2026-02-11 17:32:02 +00:00 |
|
Brad Dux
|
61a7943528
|
fix(core): prevent race condition in policy persistence (#18506)
Co-authored-by: Allen Hutchison <adh@google.com>
|
2026-02-10 23:35:09 +00:00 |
|
Jack Wotherspoon
|
58681f370b
|
fix: allow ask_user tool in yolo mode (#18541)
|
2026-02-10 18:56:51 +00:00 |
|
Christian Gunderman
|
c369147b32
|
Disallow unsafe type assertions (#18688)
|
2026-02-10 00:10:15 +00:00 |
|
Jerop Kipruto
|
559f916b5a
|
fix(core): prevent subagent bypass in plan mode (#18484)
|
2026-02-06 22:55:00 +00:00 |
|
joshualitt
|
c533a01098
|
bug(core): Fix bug when saving plans. (#18465)
|
2026-02-06 20:45:37 +00:00 |
|
joshualitt
|
00a09c9e6d
|
Shorten temp directory (#17901)
|
2026-02-06 16:10:17 +00:00 |
|
Jerop Kipruto
|
4ccf1b3c65
|
feat(plan): support replace tool in plan mode to edit plans (#18379)
|
2026-02-05 17:51:35 +00:00 |
|
Adib234
|
9d5c0a4791
|
feat(plan): use custom deny messages in plan mode policies (#18195)
|
2026-02-03 19:23:22 +00:00 |
|
Sandy Tao
|
186e3d79b8
|
feat(core): rename search_file_content tool to grep_search and add legacy alias (#18003)
|
2026-02-03 04:18:24 +00:00 |
|
Jerop Kipruto
|
ce4dfa5964
|
feat(plan): add core logic and exit_plan_mode tool definition (#18110)
|
2026-02-03 03:30:03 +00:00 |
|
Sandy Tao
|
d7e15f8187
|
feat(core): implement tool name aliasing for backward compatibility (#17974)
|
2026-02-03 00:34:14 +00:00 |
|
Abhi
|
52e62091a6
|
fix(core): ensure YOLO mode auto-approves complex shell commands when parsing fails (#17920)
|
2026-01-30 20:44:17 +00:00 |
|
Jerop Kipruto
|
19284636e7
|
feat(plan): reuse standard tool confirmation for AskUser tool (#17864)
Co-authored-by: jacob314 <jacob314@gmail.com>
|
2026-01-30 18:32:21 +00:00 |
|
Abhi
|
fc90f581b2
|
feat(core): implement dynamic policy registration for subagents (#17838)
|
2026-01-30 16:57:54 +00:00 |
|
Christian Gunderman
|
4d72449dfa
|
Cleanup post delegate_to_agent removal (#17875)
|
2026-01-29 18:24:35 +00:00 |
|
Allen Hutchison
|
dfff959bbe
|
feat(core): add support for custom deny messages in policy rules (#17427)
|
2026-01-28 18:52:48 +00:00 |
|
Jerop Kipruto
|
17630f7806
|
feat(plan): enable AskUser tool in Plan mode for clarifying questions (#17694)
|
2026-01-27 20:23:49 +00:00 |
|
Yuna Seol
|
ccea11951d
|
fix(security): enforce strict policy directory permissions (#17353)
Co-authored-by: Yuna Seol <yunaseol@google.com>
|
2026-01-27 00:27:49 +00:00 |
|
Jerop Kipruto
|
a18ab2ff43
|
fix(plan): remove subagent invocation from plan mode (#17593)
|
2026-01-26 22:44:39 +00:00 |
|
Jerop Kipruto
|
222e85cc77
|
feat(plan): add persistent plan file storage (#17563)
|
2026-01-26 21:57:27 +00:00 |
|
Tommaso Sciortino
|
9024b57253
|
Clean up dead code (#17443)
|
2026-01-24 15:42:18 +00:00 |
|
N. Taylor Mullen
|
049e3ef1dc
|
feat(core): improve shell redirection transparency and security (#16486)
|
2026-01-20 04:07:28 +00:00 |
|
Jerop Kipruto
|
427bef1394
|
feat(plan): remove read_many_files from approval mode policies (#16876)
|
2026-01-16 20:09:36 +00:00 |
|
Jerop Kipruto
|
89207ed81f
|
feat(plan): enforce strict read-only policy and halt execution on violation (#16849)
|
2026-01-16 17:56:48 +00:00 |
|
Jerop Kipruto
|
cb4728a360
|
feat(plan): add experimental 'plan' approval mode (#16753)
|
2026-01-15 22:00:19 +00:00 |
|
Allen Hutchison
|
a0ee0e4d87
|
feat(policy): add source tracking to policy rules (#16670)
|
2026-01-15 16:06:07 +00:00 |
|
N. Taylor Mullen
|
1c2df2c1bb
|
feat(admin): support admin-enforced settings for Agent Skills (#16406)
|
2026-01-14 07:40:23 +00:00 |
|
N. Taylor Mullen
|
444069682b
|
fix(policy): ensure MCP policies match unqualified names in non-interactive mode (#16490)
|
2026-01-13 07:25:11 +00:00 |
|
Allen Hutchison
|
a99f8ee7de
|
fix(policy): enhance shell command safety and parsing (#15034)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Abhi <43648792+abhipatel12@users.noreply.github.com>
|
2026-01-12 19:23:32 +00:00 |
|
Adam Weidman
|
b35bf217eb
|
fix(core): ensure silent local subagent delegation while allowing remote confirmation (#16395)
Co-authored-by: N. Taylor Mullen <ntaylormullen@google.com>
|
2026-01-12 08:55:16 +00:00 |
|
Abhi
|
d0279bfa70
|
fix: yolo should auto allow redirection (#16183)
|
2026-01-08 19:24:51 +00:00 |
|
Abhi
|
ef4329a708
|
policy: extract legacy policy from core tool scheduler to policy engine (#15902)
|
2026-01-07 04:28:06 +00:00 |
|
N. Taylor Mullen
|
4bd1521831
|
feat(policy): allow 'modes' in user and admin policies (#15977)
|
2026-01-06 17:56:50 +00:00 |
|