mcp
Find a file
Dorien Koelemeijer 6a27b69756
Some checks are pending
Unused Dependencies / machete (push) Waiting to run
fix(security): cap chunked scan work and tighten chunker tests
Address review feedback:

- Cap chunked classification at MAX_WINDOWS (12) windows. A very long command
  no longer waits on unbounded windows; the remainder is counted as unscanned
  so the existing incomplete->pattern-fallback policy applies (no clean pass for
  input we could not fully vet). Emits an oversized-command metric.
- Name the concurrency constant (COMMAND_SCAN_CONCURRENCY) instead of a bare 3.
- Document the load-bearing bytes-as-token-proxy assumption on MAX_WINDOW_CHARS.
- Replace the misleading progress guard with a correct stride>0 debug_assert
  plus an explicit per-iteration advance assertion.
- Rewrite full_text_is_covered to check coverage of the real chunk output
  (unique-token input) instead of reimplementing the stride loop.
- Rename window_never_exceeds_token_budget -> _char_budget and assert on bytes,
  which is what it actually checks.

Note: the 0.0-overlap debug_assert flagged in review does not fire; (0.0..1.0)
includes 0.0, and the zero-overlap test passes in debug builds.

49 security tests pass; clippy --all-targets -D warnings clean.
2026-07-09 11:32:15 +10:00
.cargo build: raise default stack reserve to 8 MB (#8234) 2026-04-02 13:54:52 +00:00
.claude/skills move agent skills to repo root for tool discoverability (#8535) 2026-04-14 23:03:56 +00:00
.codex/skills move agent skills to repo root for tool discoverability (#8535) 2026-04-14 23:03:56 +00:00
.cursor/skills move agent skills to repo root for tool discoverability (#8535) 2026-04-14 23:03:56 +00:00
.devcontainer fix(devcontainer): install protoc to fix build (#3267) 2025-07-08 05:02:03 +08:00
.github chore(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (#10232) 2026-07-06 02:58:38 +00:00
.intersect [FEAT] Introduce PR level security scans (#968) 2025-01-31 17:08:12 +11:00
bin use pnpm for Desktop Electron App (#7679) 2026-03-11 12:46:05 +00:00
crates fix(security): cap chunked scan work and tighten chunker tests 2026-07-09 11:32:15 +10:00
documentation docs(cli): clarify session --edit context retention (#10257) 2026-07-05 13:43:55 +00:00
evals/harbor Remove open-model-gym eval suite (#10174) 2026-07-02 00:31:15 +00:00
examples feat: Hooks (#9093) 2026-05-11 16:02:44 +00:00
oidc-proxy fix(oidc-proxy): enforce exp independently of MAX_TOKEN_AGE_SECONDS (#8832) (#8839) 2026-05-12 23:41:10 +00:00
recipe-scanner chore(aaif): rename a bunch of repository references (#8152) 2026-04-07 15:34:48 +10:00
scripts acp migration (ui) : ui connect to acp directly instead of goosed (#10081) 2026-07-02 00:29:29 +00:00
services/ask-ai-bot feat: askai bot hints for followups (#10291) 2026-07-07 03:27:44 +00:00
ui Switch the local inference provider MLX backend to use the safemlx crate (#10304) 2026-07-07 21:01:15 +00:00
vendor/v8 Fix Windows MSVC linking issues (#7511) 2026-02-25 22:59:32 +00:00
workflow_recipes/release_risk_check chore(aaif): rename a bunch of repository references (#8152) 2026-04-07 15:34:48 +10:00
.dockerignore Add Docker support for Goose in CI/CD pipelines (#4434) 2025-09-03 10:14:41 -04:00
.gitattributes Some system prompt tidying (#5313) 2025-10-24 20:22:27 -04:00
.gitignore chore: ignore Zed settings (#10043) 2026-06-26 14:44:26 +00:00
.goosehints fix: outdated clippy command in goosehints (#7590) 2026-02-28 12:47:39 +00:00
AGENTS.md Remove open-model-gym eval suite (#10174) 2026-07-02 00:31:15 +00:00
BUILDING_DOCKER.md chore(aaif): rename a bunch of repository references (#8152) 2026-04-07 15:34:48 +10:00
BUILDING_LINUX.md Add Linux Vulkan support for local inference (#9038) 2026-05-07 07:12:18 +00:00
Cargo.lock Update Rust toolchain and raise recursion limit (#10303) 2026-07-07 22:41:04 +00:00
Cargo.toml Update Rust toolchain and raise recursion limit (#10303) 2026-07-07 22:41:04 +00:00
CLAUDE.md agents: add CLAUDE.mds to mirror AGENTS.mds (#9029) 2026-05-05 18:53:52 +00:00
clippy.toml Remove clippy too_many_lines lint and decompose long functions (#7064) 2026-02-07 04:10:24 +00:00
CONTRIBUTING.md acp migration (ui) : ui connect to acp directly instead of goosed (#10081) 2026-07-02 00:29:29 +00:00
CONTRIBUTING_RECIPES.md chore(aaif): rename a bunch of repository references (#8152) 2026-04-07 15:34:48 +10:00
CUSTOM_DISTROS.md refactor: switch to official new rust-sdk for ACP (#9062) 2026-05-06 19:48:52 +00:00
deny.toml Fix canonical model output paths (#10196) 2026-07-02 11:05:16 +00:00
Dockerfile chore(aaif): rename a bunch of repository references (#8152) 2026-04-07 15:34:48 +10:00
download_cli.ps1 Add Windows CUDA release artifacts (#8750) 2026-04-27 19:51:11 +00:00
download_cli.sh Add Linux musl CLI builds (#9240) 2026-05-19 07:28:20 +00:00
flake.lock Set up direnv and update flake inputs (#6526) 2026-02-17 15:26:04 +00:00
flake.nix fix: flake.nix (#7224) 2026-03-07 17:16:19 +00:00
goose-self-test.yaml Update release testing instructions (#10122) 2026-07-01 14:18:06 +00:00
GOVERNANCE.md chore(aaif): rename a bunch of repository references (#8152) 2026-04-07 15:34:48 +10:00
I18N.md feat(i18n): language selection feature (#9405) 2026-06-17 00:40:38 +00:00
Justfile Fix canonical model output paths (#10196) 2026-07-02 11:05:16 +00:00
LICENSE chore: Update LICENSE (#53) 2024-09-09 14:56:30 -04:00
MAINTAINERS.md bring MAINTAINERS.md up to date (#9053) 2026-05-06 14:56:44 +00:00
README.md Add Repology badge to README (#9245) 2026-05-22 16:24:47 +00:00
RELEASE.md chore(aaif): rename a bunch of repository references (#8152) 2026-04-07 15:34:48 +10:00
RELEASE_CHECKLIST.md Update release testing instructions (#10122) 2026-07-01 14:18:06 +00:00
rust-toolchain.toml Update Rust toolchain and raise recursion limit (#10303) 2026-07-07 22:41:04 +00:00
SECURITY.md chore(aaif): rename a bunch of repository references (#8152) 2026-04-07 15:34:48 +10:00
test_acp_client.py feat(acp): support loading sessions in acp (#5942) 2025-12-02 05:20:21 -06:00

🦆 goose has moved! This project has moved from block/goose to the Agentic AI Foundation (AAIF) at the Linux Foundation. Some links and references are still being updated — please bear with us during the transition.

goose

your native open source AI agent — desktop app, CLI, and API — for code, workflows, and everything in between

Discord CI Packaging status

goose is a general-purpose AI agent that runs on your machine. Not just for code — use it for research, writing, automation, data analysis, or anything you need to get done.

A native desktop app for macOS, Linux, and Windows. A full CLI for terminal workflows. An API to embed it anywhere. Built in Rust for performance and portability.

goose works with 15+ providers — Anthropic, OpenAI, Google, Ollama, OpenRouter, Azure, Bedrock, and more. Use API keys or your existing Claude, ChatGPT, or Gemini subscriptions via ACP. Connect to 70+ extensions via the Model Context Protocol open standard.

goose is part of the Agentic AI Foundation (AAIF) at the Linux Foundation.

Get started

Download the desktop app for macOS, Linux, and Windows.

Or install the CLI:

curl -fsSL https://github.com/aaif-goose/goose/releases/download/stable/download_cli.sh | bash

Quick links

Need help?

a little goose humor 🪿

Why did the developer choose goose as their AI agent?

Because it always helps them "migrate" their code to production! 🚀

goose around with us