@google/gemini-cli-a2a-server 0.16.0-nightly.20251112.c961f274 → 0.16.0-nightly.20251113.ad1f0d99

package/dist/a2a-server.mjs

@@ -295938,8 +295938,8 @@ var Float64Vector = import_vector.default.Float64Vector;
 var PointerVector = import_vector.default.PointerVector;
 
 // packages/core/dist/src/generated/git-commit.js
-var GIT_COMMIT_INFO = "c961f274";
-var CLI_VERSION = "0.16.0-nightly.20251112.c961f274";
+var GIT_COMMIT_INFO = "ad1f0d99";
+var CLI_VERSION = "0.16.0-nightly.20251113.ad1f0d99";
 
 // packages/core/dist/src/ide/detect-ide.js
 var IDE_DEFINITIONS = {
@@ -298784,7 +298784,7 @@ async function createContentGenerator(config2, gcConfig, sessionId2) {
     if (gcConfig.fakeResponses) {
       return FakeContentGenerator.fromFile(gcConfig.fakeResponses);
     }
-    const version3 = "0.16.0-nightly.20251112.c961f274";
+    const version3 = "0.16.0-nightly.20251113.ad1f0d99";
     const userAgent = `GeminiCLI/${version3} (${process.platform}; ${process.arch})`;
     const baseHeaders = {
       "User-Agent": userAgent
@@ -321227,6 +321227,10 @@ var ApprovalMode;
   ApprovalMode2["AUTO_EDIT"] = "autoEdit";
   ApprovalMode2["YOLO"] = "yolo";
 })(ApprovalMode || (ApprovalMode = {}));
+var InProcessCheckerType;
+(function(InProcessCheckerType2) {
+  InProcessCheckerType2["ALLOWED_PATH"] = "allowed-path";
+})(InProcessCheckerType || (InProcessCheckerType = {}));
 
 // packages/core/dist/src/utils/LruCache.js
 var LruCache = class {
@@ -345393,13 +345397,46 @@ var WriteTodosTool = class _WriteTodosTool extends BaseDeclarativeTool {
                 enum: TODO_STATUSES
               }
             },
-            required: ["description", "status"]
+            required: ["description", "status"],
+            additionalProperties: false
           }
         }
       },
-      required: ["todos"]
+      required: ["todos"],
+      additionalProperties: false
     });
   }
+  get schema() {
+    return {
+      name: this.name,
+      description: this.description,
+      parametersJsonSchema: this.parameterSchema,
+      responseJsonSchema: {
+        type: "object",
+        properties: {
+          todos: {
+            type: "array",
+            items: {
+              type: "object",
+              properties: {
+                description: {
+                  type: "string"
+                },
+                status: {
+                  type: "string",
+                  enum: TODO_STATUSES
+                }
+              },
+              required: ["description", "status"],
+              additionalProperties: false
+            }
+          }
+        },
+        required: ["todos"],
+        additionalProperties: false
+      }
+    };
+  }
   validateToolParamValues(params) {
     const todos = params?.todos;
     if (!params || !Array.isArray(todos)) {
@@ -352405,7 +352442,7 @@ var MessageBus = class extends EventEmitter10 {
   emitMessage(message) {
     this.emit(message.type, message);
   }
-  publish(message) {
+  async publish(message) {
     if (this.debug) {
       console.debug(`[MESSAGE_BUS] publish: ${safeJsonStringify(message)}`);
     }
@@ -352414,7 +352451,7 @@ var MessageBus = class extends EventEmitter10 {
         throw new Error(`Invalid message structure: ${safeJsonStringify(message)}`);
       }
       if (message.type === MessageBusType.TOOL_CONFIRMATION_REQUEST) {
-        const decision = this.policyEngine.check(message.toolCall, message.serverName);
+        const { decision } = await this.policyEngine.check(message.toolCall, message.serverName);
         switch (decision) {
           case PolicyDecision.ALLOW:
             this.emitMessage({
@@ -352511,6 +352548,14 @@ function stableStringify(obj) {
   return stringify5(obj, /* @__PURE__ */ new Set());
 }
 
+// packages/core/dist/src/safety/protocol.js
+var SafetyCheckDecision;
+(function(SafetyCheckDecision2) {
+  SafetyCheckDecision2["ALLOW"] = "allow";
+  SafetyCheckDecision2["DENY"] = "deny";
+  SafetyCheckDecision2["ASK_USER"] = "ask_user";
+})(SafetyCheckDecision || (SafetyCheckDecision = {}));
+
 // packages/core/dist/src/policy/policy-engine.js
 function ruleMatches(rule, toolCall, stringifiedArgs, serverName) {
   if (rule.toolName) {
@@ -352540,30 +352585,71 @@ function ruleMatches(rule, toolCall, stringifiedArgs, serverName) {
 }
 var PolicyEngine = class {
   rules;
+  checkers;
   defaultDecision;
   nonInteractive;
-  constructor(config2 = {}) {
+  checkerRunner;
+  constructor(config2 = {}, checkerRunner) {
     this.rules = (config2.rules ?? []).sort((a2, b) => (b.priority ?? 0) - (a2.priority ?? 0));
+    this.checkers = (config2.checkers ?? []).sort((a2, b) => (b.priority ?? 0) - (a2.priority ?? 0));
     this.defaultDecision = config2.defaultDecision ?? PolicyDecision.ASK_USER;
     this.nonInteractive = config2.nonInteractive ?? false;
+    this.checkerRunner = checkerRunner;
   }
   /**
    * Check if a tool call is allowed based on the configured policies.
+   * Returns the decision and the matching rule (if any).
    */
-  check(toolCall, serverName) {
+  async check(toolCall, serverName) {
     let stringifiedArgs;
-    if (toolCall.args && this.rules.some((rule) => rule.argsPattern)) {
+    if (toolCall.args && (this.rules.some((rule) => rule.argsPattern) || this.checkers.some((checker) => checker.argsPattern))) {
       stringifiedArgs = stableStringify(toolCall.args);
     }
     debugLogger.debug(`[PolicyEngine.check] toolCall.name: ${toolCall.name}, stringifiedArgs: ${stringifiedArgs}`);
+    let matchedRule;
+    let decision;
     for (const rule of this.rules) {
       if (ruleMatches(rule, toolCall, stringifiedArgs, serverName)) {
         debugLogger.debug(`[PolicyEngine.check] MATCHED rule: toolName=${rule.toolName}, decision=${rule.decision}, priority=${rule.priority}, argsPattern=${rule.argsPattern?.source || "none"}`);
-        return this.applyNonInteractiveMode(rule.decision);
+        matchedRule = rule;
+        decision = this.applyNonInteractiveMode(rule.decision);
+        break;
+      }
+    }
+    if (!decision) {
+      debugLogger.debug(`[PolicyEngine.check] NO MATCH - using default decision: ${this.defaultDecision}`);
+      decision = this.applyNonInteractiveMode(this.defaultDecision);
+    }
+    if (decision !== PolicyDecision.DENY && this.checkerRunner) {
+      for (const checkerRule of this.checkers) {
+        if (ruleMatches(checkerRule, toolCall, stringifiedArgs, serverName)) {
+          debugLogger.debug(`[PolicyEngine.check] Running safety checker: ${checkerRule.checker.name}`);
+          try {
+            const result = await this.checkerRunner.runChecker(toolCall, checkerRule.checker);
+            if (result.decision === SafetyCheckDecision.DENY) {
+              debugLogger.debug(`[PolicyEngine.check] Safety checker denied: ${result.reason}`);
+              return {
+                decision: PolicyDecision.DENY,
+                rule: matchedRule
+              };
+            } else if (result.decision === SafetyCheckDecision.ASK_USER) {
+              debugLogger.debug(`[PolicyEngine.check] Safety checker requested ASK_USER: ${result.reason}`);
+              decision = PolicyDecision.ASK_USER;
+            }
+          } catch (error) {
+            debugLogger.debug(`[PolicyEngine.check] Safety checker failed: ${error}`);
+            return {
+              decision: PolicyDecision.DENY,
+              rule: matchedRule
+            };
+          }
+        }
       }
     }
-    debugLogger.debug(`[PolicyEngine.check] NO MATCH - using default decision: ${this.defaultDecision}`);
-    return this.applyNonInteractiveMode(this.defaultDecision);
+    return {
+      decision: this.applyNonInteractiveMode(decision),
+      rule: matchedRule
+    };
   }
   /**
    * Add a new rule to the policy engine.
@@ -352572,6 +352658,10 @@ var PolicyEngine = class {
     this.rules.push(rule);
     this.rules.sort((a2, b) => (b.priority ?? 0) - (a2.priority ?? 0));
   }
+  addChecker(checker) {
+    this.checkers.push(checker);
+    this.checkers.sort((a2, b) => (b.priority ?? 0) - (a2.priority ?? 0));
+  }
   /**
    * Remove rules for a specific tool.
    */
@@ -352584,6 +352674,9 @@ var PolicyEngine = class {
   getRules() {
     return this.rules;
   }
+  getCheckers() {
+    return this.checkers;
+  }
   applyNonInteractiveMode(decision) {
     if (this.nonInteractive && decision === PolicyDecision.ASK_USER) {
       return PolicyDecision.DENY;
@@ -355076,8 +355169,9 @@ function getPlatform() {
 async function getClientMetadata() {
   if (!clientMetadataPromise) {
     clientMetadataPromise = (async () => ({
-      ideName: "GEMINI_CLI",
-      ideVersion: "0.16.0-nightly.20251112.c961f274",
+      ideName: "IDE_UNSPECIFIED",
+      pluginType: "GEMINI",
+      ideVersion: "0.16.0-nightly.20251113.ad1f0d99",
       platform: getPlatform(),
       updateChannel: await getReleaseChannel(__dirname5)
     }))();
@@ -360686,7 +360780,7 @@ var Config = class {
     this.truncateToolOutputLines = params.truncateToolOutputLines ?? DEFAULT_TRUNCATE_TOOL_OUTPUT_LINES;
     this.enableToolOutputTruncation = params.enableToolOutputTruncation ?? true;
     this.useSmartEdit = params.useSmartEdit ?? true;
-    this.useWriteTodos = params.useWriteTodos ?? false;
+    this.useWriteTodos = params.useWriteTodos ?? true;
     this.initialUseModelRouter = params.useModelRouter ?? false;
     this.useModelRouter = this.initialUseModelRouter;
     this.disableModelRouterForAuth = params.disableModelRouterForAuth ?? [];
@@ -360781,7 +360875,7 @@ var Config = class {
         return;
       for (const tool of deprecatedTools) {
         if (list3.includes(tool.name) || list3.includes(tool.alternateName)) {
-          coreEvents.emitFeedback("warning", `The tool '${tool.name}' (or '${tool.alternateName}') specified in '${listName}' is deprecated and will be removed in v0.14.0.`);
+          coreEvents.emitFeedback("warning", `The tool '${tool.name}' (or '${tool.alternateName}') specified in '${listName}' is deprecated and will be removed in v0.16.0.`);
         }
       }
     };
@@ -361416,8 +361510,32 @@ var PolicyRuleSchema = external_exports.object({
   }),
   modes: external_exports.array(external_exports.string()).optional()
 });
+var SafetyCheckerRuleSchema = external_exports.object({
+  toolName: external_exports.union([external_exports.string(), external_exports.array(external_exports.string())]).optional(),
+  mcpName: external_exports.string().optional(),
+  argsPattern: external_exports.string().optional(),
+  commandPrefix: external_exports.union([external_exports.string(), external_exports.array(external_exports.string())]).optional(),
+  commandRegex: external_exports.string().optional(),
+  priority: external_exports.number().int().default(0),
+  modes: external_exports.array(external_exports.string()).optional(),
+  checker: external_exports.discriminatedUnion("type", [
+    external_exports.object({
+      type: external_exports.literal("in-process"),
+      name: external_exports.nativeEnum(InProcessCheckerType),
+      required_context: external_exports.array(external_exports.string()).optional(),
+      config: external_exports.record(external_exports.unknown()).optional()
+    }),
+    external_exports.object({
+      type: external_exports.literal("external"),
+      name: external_exports.string(),
+      required_context: external_exports.array(external_exports.string()).optional(),
+      config: external_exports.record(external_exports.unknown()).optional()
+    })
+  ])
+});
 var PolicyFileSchema = external_exports.object({
-  rule: external_exports.array(PolicyRuleSchema)
+  rule: external_exports.array(PolicyRuleSchema).optional(),
+  safety_checker: external_exports.array(SafetyCheckerRuleSchema).optional()
 });
 
 // packages/core/dist/src/policy/config.js