jh-block
717e4d2ee3
Replace resolve_path with validate_and_resolve_path that rejects absolute paths, symlink escapes, and .. traversal when working_dir is set. Applies to read/write/edit tools in edit.rs, ACP fs.rs, and analyze/mod.rs. Confinement is off by default and enabled with GOOSE_CONFINEMENT in config. Fixes #7587
goose
a local, extensible, open source AI agent that automates engineering tasks
goose is your on-machine AI agent, capable of automating complex development tasks from start to finish. More than just code suggestions, goose can build entire projects from scratch, write and execute code, debug failures, orchestrate workflows, and interact with external APIs - autonomously.
Whether you're prototyping an idea, refining existing code, or managing intricate engineering pipelines, goose adapts to your workflow and executes tasks with precision.
Designed for maximum flexibility, goose works with any LLM and supports multi-model configuration to optimize performance and cost, seamlessly integrates with MCP servers, and is available as both a desktop app as well as CLI - making it the ultimate AI assistant for developers who want to move faster and focus on innovation.
Quick Links
- Quickstart
- Installation
- Tutorials
- Documentation
- Governance
- Custom Distributions - build your own goose distro with preconfigured providers, extensions, and branding
Need Help?
a little goose humor 🪿
Why did the developer choose goose as their AI agent?
Because it always helps them "migrate" their code to production! 🚀