Commit Graph

58 Commits

Author SHA1 Message Date
Abhijit Balaji
f338ffd3ec feat(cli): deprecate --allowed-tools and excludeTools in favor of policy engine (#18508) 2026-02-12 00:49:48 +00:00
Adib234
92ab4f47d2 feat(plan): allow skills to be enabled in plan mode (#18817)
Co-authored-by: Jerop Kipruto <jerop@google.com>
2026-02-11 17:59:03 +00:00
Jerop Kipruto
f794fddd59 feat(plan): document and validate Plan Mode policy overrides (#18825) 2026-02-11 17:32:02 +00:00
Brad Dux
61a7943528 fix(core): prevent race condition in policy persistence (#18506)
Co-authored-by: Allen Hutchison <adh@google.com>
2026-02-10 23:35:09 +00:00
Jack Wotherspoon
58681f370b fix: allow ask_user tool in yolo mode (#18541) 2026-02-10 18:56:51 +00:00
Christian Gunderman
c369147b32 Disallow unsafe type assertions (#18688) 2026-02-10 00:10:15 +00:00
Jerop Kipruto
559f916b5a fix(core): prevent subagent bypass in plan mode (#18484) 2026-02-06 22:55:00 +00:00
joshualitt
c533a01098 bug(core): Fix bug when saving plans. (#18465) 2026-02-06 20:45:37 +00:00
joshualitt
00a09c9e6d Shorten temp directory (#17901) 2026-02-06 16:10:17 +00:00
Jerop Kipruto
4ccf1b3c65 feat(plan): support replace tool in plan mode to edit plans (#18379) 2026-02-05 17:51:35 +00:00
Adib234
9d5c0a4791 feat(plan): use custom deny messages in plan mode policies (#18195) 2026-02-03 19:23:22 +00:00
Sandy Tao
186e3d79b8 feat(core): rename search_file_content tool to grep_search and add legacy alias (#18003) 2026-02-03 04:18:24 +00:00
Jerop Kipruto
ce4dfa5964 feat(plan): add core logic and exit_plan_mode tool definition (#18110) 2026-02-03 03:30:03 +00:00
Sandy Tao
d7e15f8187 feat(core): implement tool name aliasing for backward compatibility (#17974) 2026-02-03 00:34:14 +00:00
Abhi
52e62091a6 fix(core): ensure YOLO mode auto-approves complex shell commands when parsing fails (#17920) 2026-01-30 20:44:17 +00:00
Jerop Kipruto
19284636e7 feat(plan): reuse standard tool confirmation for AskUser tool (#17864)
Co-authored-by: jacob314 <jacob314@gmail.com>
2026-01-30 18:32:21 +00:00
Abhi
fc90f581b2 feat(core): implement dynamic policy registration for subagents (#17838) 2026-01-30 16:57:54 +00:00
Christian Gunderman
4d72449dfa Cleanup post delegate_to_agent removal (#17875) 2026-01-29 18:24:35 +00:00
Allen Hutchison
dfff959bbe feat(core): add support for custom deny messages in policy rules (#17427) 2026-01-28 18:52:48 +00:00
Jerop Kipruto
17630f7806 feat(plan): enable AskUser tool in Plan mode for clarifying questions (#17694) 2026-01-27 20:23:49 +00:00
Yuna Seol
ccea11951d fix(security): enforce strict policy directory permissions (#17353)
Co-authored-by: Yuna Seol <yunaseol@google.com>
2026-01-27 00:27:49 +00:00
Jerop Kipruto
a18ab2ff43 fix(plan): remove subagent invocation from plan mode (#17593) 2026-01-26 22:44:39 +00:00
Jerop Kipruto
222e85cc77 feat(plan): add persistent plan file storage (#17563) 2026-01-26 21:57:27 +00:00
Tommaso Sciortino
9024b57253 Clean up dead code (#17443) 2026-01-24 15:42:18 +00:00
N. Taylor Mullen
049e3ef1dc feat(core): improve shell redirection transparency and security (#16486) 2026-01-20 04:07:28 +00:00
Jerop Kipruto
427bef1394 feat(plan): remove read_many_files from approval mode policies (#16876) 2026-01-16 20:09:36 +00:00
Jerop Kipruto
89207ed81f feat(plan): enforce strict read-only policy and halt execution on violation (#16849) 2026-01-16 17:56:48 +00:00
Jerop Kipruto
cb4728a360 feat(plan): add experimental 'plan' approval mode (#16753) 2026-01-15 22:00:19 +00:00
Allen Hutchison
a0ee0e4d87 feat(policy): add source tracking to policy rules (#16670) 2026-01-15 16:06:07 +00:00
N. Taylor Mullen
1c2df2c1bb feat(admin): support admin-enforced settings for Agent Skills (#16406) 2026-01-14 07:40:23 +00:00
N. Taylor Mullen
444069682b fix(policy): ensure MCP policies match unqualified names in non-interactive mode (#16490) 2026-01-13 07:25:11 +00:00
Allen Hutchison
a99f8ee7de fix(policy): enhance shell command safety and parsing (#15034)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
Co-authored-by: Abhi <43648792+abhipatel12@users.noreply.github.com>
2026-01-12 19:23:32 +00:00
Adam Weidman
b35bf217eb fix(core): ensure silent local subagent delegation while allowing remote confirmation (#16395)
Co-authored-by: N. Taylor Mullen <ntaylormullen@google.com>
2026-01-12 08:55:16 +00:00
Abhi
d0279bfa70 fix: yolo should auto allow redirection (#16183) 2026-01-08 19:24:51 +00:00
Abhi
ef4329a708 policy: extract legacy policy from core tool scheduler to policy engine (#15902) 2026-01-07 04:28:06 +00:00
N. Taylor Mullen
4bd1521831 feat(policy): allow 'modes' in user and admin policies (#15977) 2026-01-06 17:56:50 +00:00
Abhi
0b8481ddd0 Unify shell security policy and remove legacy logic (#15770) 2026-01-04 05:19:00 +00:00
Gal Zahavi
a1110a985a fix(core): improve shell command with redirection detection (#15683) 2026-01-02 19:36:59 +00:00
N. Taylor Mullen
0549108e32 Agent Skills: Implement Autonomous Activation Tool & Context Injection (#15725) 2026-01-02 19:15:06 +00:00
Adib234
97bc542183 Migrate console to coreEvents.emitFeedback or debugLogger (#15219) 2025-12-29 20:46:10 +00:00
Abhi
cf836b3e6c fix(core): enable granular shell command allowlisting in policy engine (#15601) 2025-12-26 23:48:44 +00:00
Abhi
3654245291 feat(policy): implement dynamic mode-aware policy evaluation (#15307) 2025-12-22 20:25:07 +00:00
Allen Hutchison
9f34004573 fix(core): commandPrefix word boundary and compound command safety (#15006) 2025-12-12 23:02:19 +00:00
Allen Hutchison
ed35f316e9 feat: Persistent "Always Allow" policies with granular shell & MCP support (#14737)
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
2025-12-12 21:45:39 +00:00
Abhi
153e840bca fix: temp fix for subagent invocation until subagent delegation is merged to stable (#15007) 2025-12-12 19:43:46 +00:00
Abhi
cc9113d4e1 fix(policy): allow codebase_investigator by default in read-only policy (#15000) 2025-12-12 17:22:27 +00:00
Abhi
2d35017edc refactor: implement DelegateToAgentTool with discriminated union (#14769) 2025-12-10 21:14:13 +00:00
Edilmo Palencia
6ae33cb892 feat(hooks): Hook Event Handling (#9097) 2025-11-24 21:51:39 +00:00
Allen Hutchison
04375751b6 refactor: move toml-loader.test.ts to use real filesystem (#12969) 2025-11-12 23:17:38 +00:00
Allen Hutchison
08ef63bac8 feat(safety): Introduce safety checker framework (#12504) 2025-11-12 21:18:34 +00:00