 Gal Zahavi
|
c48c419f3b
|
feat(core): enhance shell command validation and add core tools allowlist (#25720)
Co-authored-by: David Pierce <davidapierce@google.com>
Co-authored-by: Keith Schaab <keithsc@google.com>
Co-authored-by: Keith Schaab <keith.schaab@gmail.com>
Co-authored-by: Emily Hedlund <ehedlund@google.com>
|
2026-04-23 16:57:52 -07:00 |
|
|
ruomeng
|
34b4f1c6e4
|
refactor(plan): simplify policy priorities and consolidate read-only rules (#24849)
|
2026-04-08 15:58:29 +00:00 |
|
|
Jerop Kipruto
|
64c928fce7
|
feat(core): implement context-aware persistent policy approvals (#23257)
|
2026-04-02 20:01:33 +00:00 |
|
|
ruomeng
|
c888da5f73
|
fix(core): replace hardcoded non-interactive ASK_USER denial with explicit policy rules (#23668)
|
2026-03-26 18:35:12 +00:00 |
|
|
Tommaso Sciortino
|
37857ab956
|
fix(core): properly support allowRedirect in policy engine (#23579)
|
2026-03-23 20:32:50 +00:00 |
|
|
N. Taylor Mullen
|
4a3d9414ef
|
fix(core): enable global session and persistent approval for web_fetch (#23295)
Co-authored-by: Spencer <spencertang@google.com>
|
2026-03-21 10:32:07 -07:00 |
|
|
cynthialong0-0
|
7de0616229
|
fix(browser-agent): enable "Allow all server tools" session policy (#22343)
|
2026-03-19 16:32:35 +00:00 |
|
|
Gal Zahavi
|
b49fc8122d
|
feat(security): add disableAlwaysAllow setting to disable auto-approvals (#21941)
|
2026-03-13 23:02:09 +00:00 |
|
|
Abhi
|
1d2585dba6
|
fix(core): explicitly pass messageBus to policy engine for MCP tool saves (#22255)
|
2026-03-13 01:31:13 +00:00 |
|
|
N. Taylor Mullen
|
7380424782
|
fix(policy): ensure user policies are loaded when policyPaths is empty (#22090)
|
2026-03-11 23:58:58 +00:00 |
|
|
Gal Zahavi
|
6900fe5527
|
feat(policy): add --admin-policy flag for supplemental admin policies (#20360)
|
2026-03-11 17:35:45 +00:00 |
|
|
Spencer
|
a220874281
|
feat(policy): support auto-add to policy by default and scoped persistence (#20361)
|
2026-03-10 17:01:41 +00:00 |
|
|
Abhi
|
931e668b47
|
refactor(core): standardize MCP tool naming to mcp_ FQN format (#21425)
|
2026-03-06 22:17:28 +00:00 |
|
|
Allen Hutchison
|
bb6d1a2775
|
feat(core): add tool name validation in TOML policy files (#19281)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
|
2026-03-02 21:47:21 +00:00 |
|
|
Adib234
|
2e1efaebe4
|
fix(plan): deflake plan mode integration tests (#20477)
|
2026-03-02 19:51:44 +00:00 |
|
|
Abhijit Balaji
|
32e777f838
|
fix(core): revert auto-save of policies to user space (#20531)
|
2026-02-27 16:03:36 +00:00 |
|
|
christine betts
|
e17f927a69
|
Add support for policy engine in extensions (#20049)
Co-authored-by: Jerop Kipruto <jerop@google.com>
|
2026-02-27 03:29:33 +00:00 |
|
|
Abhijit Balaji
|
c5baf39dbd
|
feat(policy): repurpose "Always Allow" persistence to workspace level (#19707)
|
2026-02-20 22:07:20 +00:00 |
|
|
Abhijit Balaji
|
d8b24e6983
|
feat(policy): implement project-level policy support (#18682)
|
2026-02-20 00:16:03 +00:00 |
|
|
Allen Hutchison
|
696198be87
|
feat(policy): add --policy flag for user defined policies (#18500)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
|
2026-02-13 00:25:23 +00:00 |
|
|
Brad Dux
|
6d3fff2ea4
|
fix(core): prevent race condition in policy persistence (#18506)
Co-authored-by: Allen Hutchison <adh@google.com>
|
2026-02-10 23:35:09 +00:00 |
|
|
Christian Gunderman
|
fd65416a2f
|
Disallow unsafe type assertions (#18688)
|
2026-02-10 00:10:15 +00:00 |
|
|
Jerop Kipruto
|
e3796d137a
|
fix(core): prevent subagent bypass in plan mode (#18484)
|
2026-02-06 22:55:00 +00:00 |
|
|
Yuna Seol
|
7708009103
|
fix(security): enforce strict policy directory permissions (#17353)
Co-authored-by: Yuna Seol <yunaseol@google.com>
|
2026-01-27 00:27:49 +00:00 |
|
|
Allen Hutchison
|
f909c9ef90
|
feat(policy): add source tracking to policy rules (#16670)
|
2026-01-15 16:06:07 +00:00 |
|
|
Abhi
|
d3c206c677
|
Unify shell security policy and remove legacy logic (#15770)
|
2026-01-04 05:19:00 +00:00 |
|
|
Adib234
|
10ae84869a
|
Migrate console to coreEvents.emitFeedback or debugLogger (#15219)
|
2025-12-29 20:46:10 +00:00 |
|
|
Abhi
|
37be162435
|
fix(core): enable granular shell command allowlisting in policy engine (#15601)
|
2025-12-26 23:48:44 +00:00 |
|
|
Abhi
|
b0d5c4c058
|
feat(policy): implement dynamic mode-aware policy evaluation (#15307)
|
2025-12-22 20:25:07 +00:00 |
|
|
Allen Hutchison
|
5f298c17d7
|
feat: Persistent "Always Allow" policies with granular shell & MCP support (#14737)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
|
2025-12-12 21:45:39 +00:00 |
|
|
Allen Hutchison
|
1ed163a666
|
feat(safety): Introduce safety checker framework (#12504)
|
2025-11-12 21:18:34 +00:00 |
|
|
Allen Hutchison
|
ffc5e4d048
|
Refactor PolicyEngine to Core Package (#12325)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
|
2025-11-03 23:41:00 +00:00 |
|