Commit Graph

48 Commits

Author SHA1 Message Date
Adib234 9d5c0a4791 feat(plan): use custom deny messages in plan mode policies (#18195) 2026-02-03 19:23:22 +00:00
Sandy Tao 186e3d79b8 feat(core): rename search_file_content tool to grep_search and add legacy alias (#18003) 2026-02-03 04:18:24 +00:00
Jerop Kipruto ce4dfa5964 feat(plan): add core logic and exit_plan_mode tool definition (#18110) 2026-02-03 03:30:03 +00:00
Sandy Tao d7e15f8187 feat(core): implement tool name aliasing for backward compatibility (#17974) 2026-02-03 00:34:14 +00:00
Abhi 52e62091a6 fix(core): ensure YOLO mode auto-approves complex shell commands when parsing fails (#17920) 2026-01-30 20:44:17 +00:00
Jerop Kipruto 19284636e7 feat(plan): reuse standard tool confirmation for AskUser tool (#17864)
Co-authored-by: jacob314 <jacob314@gmail.com>
2026-01-30 18:32:21 +00:00
Abhi fc90f581b2 feat(core): implement dynamic policy registration for subagents (#17838) 2026-01-30 16:57:54 +00:00
Christian Gunderman 4d72449dfa Cleanup post delegate_to_agent removal (#17875) 2026-01-29 18:24:35 +00:00
Allen Hutchison dfff959bbe feat(core): add support for custom deny messages in policy rules (#17427) 2026-01-28 18:52:48 +00:00
Jerop Kipruto 17630f7806 feat(plan): enable AskUser tool in Plan mode for clarifying questions (#17694) 2026-01-27 20:23:49 +00:00
Yuna Seol ccea11951d fix(security): enforce strict policy directory permissions (#17353)
Co-authored-by: Yuna Seol <yunaseol@google.com>
2026-01-27 00:27:49 +00:00
Jerop Kipruto a18ab2ff43 fix(plan): remove subagent invocation from plan mode (#17593) 2026-01-26 22:44:39 +00:00
Jerop Kipruto 222e85cc77 feat(plan): add persistent plan file storage (#17563) 2026-01-26 21:57:27 +00:00
Tommaso Sciortino 9024b57253 Clean up dead code (#17443) 2026-01-24 15:42:18 +00:00
N. Taylor Mullen 049e3ef1dc feat(core): improve shell redirection transparency and security (#16486) 2026-01-20 04:07:28 +00:00
Jerop Kipruto 427bef1394 feat(plan): remove read_many_files from approval mode policies (#16876) 2026-01-16 20:09:36 +00:00
Jerop Kipruto 89207ed81f feat(plan): enforce strict read-only policy and halt execution on violation (#16849) 2026-01-16 17:56:48 +00:00
Jerop Kipruto cb4728a360 feat(plan): add experimental 'plan' approval mode (#16753) 2026-01-15 22:00:19 +00:00
Allen Hutchison a0ee0e4d87 feat(policy): add source tracking to policy rules (#16670) 2026-01-15 16:06:07 +00:00
N. Taylor Mullen 1c2df2c1bb feat(admin): support admin-enforced settings for Agent Skills (#16406) 2026-01-14 07:40:23 +00:00
N. Taylor Mullen 444069682b fix(policy): ensure MCP policies match unqualified names in non-interactive mode (#16490) 2026-01-13 07:25:11 +00:00
Allen Hutchison a99f8ee7de fix(policy): enhance shell command safety and parsing (#15034)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Abhi <43648792+abhipatel12@users.noreply.github.com>
2026-01-12 19:23:32 +00:00
Adam Weidman b35bf217eb fix(core): ensure silent local subagent delegation while allowing remote confirmation (#16395)
Co-authored-by: N. Taylor Mullen <ntaylormullen@google.com>
2026-01-12 08:55:16 +00:00
Abhi d0279bfa70 fix: yolo should auto allow redirection (#16183) 2026-01-08 19:24:51 +00:00
Abhi ef4329a708 policy: extract legacy policy from core tool scheduler to policy engine (#15902) 2026-01-07 04:28:06 +00:00
N. Taylor Mullen 4bd1521831 feat(policy): allow 'modes' in user and admin policies (#15977) 2026-01-06 17:56:50 +00:00
Abhi 0b8481ddd0 Unify shell security policy and remove legacy logic (#15770) 2026-01-04 05:19:00 +00:00
Gal Zahavi a1110a985a fix(core): improve shell command with redirection detection (#15683) 2026-01-02 19:36:59 +00:00
N. Taylor Mullen 0549108e32 Agent Skills: Implement Autonomous Activation Tool & Context Injection (#15725) 2026-01-02 19:15:06 +00:00
Adib234 97bc542183 Migrate console to coreEvents.emitFeedback or debugLogger (#15219) 2025-12-29 20:46:10 +00:00
Abhi cf836b3e6c fix(core): enable granular shell command allowlisting in policy engine (#15601) 2025-12-26 23:48:44 +00:00
Abhi 3654245291 feat(policy): implement dynamic mode-aware policy evaluation (#15307) 2025-12-22 20:25:07 +00:00
Allen Hutchison 9f34004573 fix(core): commandPrefix word boundary and compound command safety (#15006) 2025-12-12 23:02:19 +00:00
Allen Hutchison ed35f316e9 feat: Persistent "Always Allow" policies with granular shell & MCP support (#14737)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-12-12 21:45:39 +00:00
Abhi 153e840bca fix: temp fix for subagent invocation until subagent delegation is merged to stable (#15007) 2025-12-12 19:43:46 +00:00
Abhi cc9113d4e1 fix(policy): allow codebase_investigator by default in read-only policy (#15000) 2025-12-12 17:22:27 +00:00
Abhi 2d35017edc refactor: implement DelegateToAgentTool with discriminated union (#14769) 2025-12-10 21:14:13 +00:00
Edilmo Palencia 6ae33cb892 feat(hooks): Hook Event Handling (#9097) 2025-11-24 21:51:39 +00:00
Allen Hutchison 04375751b6 refactor: move toml-loader.test.ts to use real filesystem (#12969) 2025-11-12 23:17:38 +00:00
Allen Hutchison 08ef63bac8 feat(safety): Introduce safety checker framework (#12504) 2025-11-12 21:18:34 +00:00
Allen Hutchison b0576d088f test(policy): add extreme priority value tests (follow-up to #12617) (#12679) 2025-11-07 17:28:05 +00:00
Allen Hutchison 3ef50aed3a fix: integrate DiscoveredTool with Policy Engine (#12646) 2025-11-06 23:51:16 +00:00
Allen Hutchison d8427a86c4 feat(policy): Add comprehensive priority range validation tests (#12617) 2025-11-06 07:19:05 +00:00
Allen Hutchison d512816223 fix(core): prevent server name spoofing in policy engine (#12511) 2025-11-05 18:10:23 +00:00
Allen Hutchison ed3f64199d Refactor PolicyEngine to Core Package (#12325)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-11-03 23:41:00 +00:00
Allen Hutchison 2a17b03d46 feat(policy): Introduce config-based policy engine with TOML configuration (#11992) 2025-10-28 16:20:57 +00:00
Allen Hutchison bbf06219a7 feat(cli): configure policy engine from existing settings (#8348) 2025-09-18 20:44:23 +00:00
Allen Hutchison 2403d7b528 feat(core): Tool Confirmation Message Bus foundation (PR 1 of 3) (#7835) 2025-09-11 16:39:17 +00:00