@google/gemini-cli-a2a-server 0.27.0-preview.3 → 0.28.0-nightly.20260130.d43d772e6

package/dist/a2a-server.mjs

@@ -325925,14 +325925,16 @@ var ExtensionsSettingSchema = external_exports.object({
 });
 var CliFeatureSettingSchema = external_exports.object({
   extensionsSetting: ExtensionsSettingSchema.optional(),
-  advancedFeaturesEnabled: external_exports.boolean().optional()
+  unmanagedCapabilitiesEnabled: external_exports.boolean().optional()
 });
 var McpSettingSchema = external_exports.object({
   mcpEnabled: external_exports.boolean().optional(),
   overrideMcpConfigJson: external_exports.string().optional()
 });
 var FetchAdminControlsResponseSchema = external_exports.object({
+  // TODO: deprecate once backend stops sending this field
   secureModeEnabled: external_exports.boolean().optional(),
+  strictModeDisabled: external_exports.boolean().optional(),
   mcpSetting: McpSettingSchema.optional(),
   cliFeatureSetting: CliFeatureSettingSchema.optional()
 });
@@ -326597,7 +326599,7 @@ var __filename = fileURLToPath5(import.meta.url);
 var __dirname3 = path20.dirname(__filename);
 async function getVersion() {
   const pkgJson = await getPackageJson(__dirname3);
-  return "0.27.0-preview.3";
+  return "0.28.0-nightly.20260130.d43d772e6";
 }
 
 // packages/core/dist/src/code_assist/experiments/client_metadata.js
@@ -330003,8 +330005,8 @@ var Float64Vector = import_vector.default.Float64Vector;
 var PointerVector = import_vector.default.PointerVector;
 
 // packages/core/dist/src/generated/git-commit.js
-var GIT_COMMIT_INFO = "09800ea74";
-var CLI_VERSION = "0.27.0-preview.3";
+var GIT_COMMIT_INFO = "d43d772e6";
+var CLI_VERSION = "0.28.0-nightly.20260130.d43d772e6";
 
 // packages/core/dist/src/ide/detect-ide.js
 var IDE_DEFINITIONS = {
@@ -330017,6 +330019,7 @@ var IDE_DEFINITIONS = {
   trae: { name: "trae", displayName: "Trae" },
   vscode: { name: "vscode", displayName: "VS Code" },
   vscodefork: { name: "vscodefork", displayName: "IDE" },
+  positron: { name: "positron", displayName: "Positron" },
   antigravity: { name: "antigravity", displayName: "Antigravity" },
   sublimetext: { name: "sublimetext", displayName: "Sublime Text" },
   jetbrains: { name: "jetbrains", displayName: "JetBrains IDE" },
@@ -330061,6 +330064,9 @@ function detectIdeFromEnv() {
   if (process.env["MONOSPACE_ENV"]) {
     return IDE_DEFINITIONS.firebasestudio;
   }
+  if (process.env["POSITRON"] === "1") {
+    return IDE_DEFINITIONS.positron;
+  }
   if (process.env["TERM_PROGRAM"] === "sublime") {
     return IDE_DEFINITIONS.sublimetext;
   }
@@ -333386,6 +333392,7 @@ async function createContentGenerator(config3, gcConfig, sessionId2) {
     const userAgent = `GeminiCLI/${version4}/${model} (${process.platform}; ${process.arch})`;
     const customHeadersMap = parseCustomHeaders(customHeadersEnv);
     const apiKeyAuthMechanism = process.env["GEMINI_API_KEY_AUTH_MECHANISM"] || "x-goog-api-key";
+    const apiVersionEnv = process.env["GOOGLE_GENAI_API_VERSION"];
     const baseHeaders = {
       ...customHeadersMap,
       "User-Agent": userAgent
@@ -333411,7 +333418,8 @@ async function createContentGenerator(config3, gcConfig, sessionId2) {
       const googleGenAI = new GoogleGenAI({
         apiKey: config3.apiKey === "" ? void 0 : config3.apiKey,
         vertexai: config3.vertexai,
-        httpOptions
+        httpOptions,
+        ...apiVersionEnv && { apiVersion: apiVersionEnv }
       });
       return new LoggingContentGenerator(googleGenAI.models, gcConfig);
     }
@@ -334923,11 +334931,11 @@ async function detectFileType(filePath) {
     if (lookedUpMimeType.startsWith("image/")) {
       return "image";
     }
-    if (lookedUpMimeType.startsWith("audio/")) {
-      return "audio";
-    }
-    if (lookedUpMimeType.startsWith("video/")) {
-      return "video";
+    if (lookedUpMimeType.startsWith("audio/") || lookedUpMimeType.startsWith("video/")) {
+      if (!await isBinaryFile(filePath)) {
+        return "text";
+      }
+      return lookedUpMimeType.startsWith("audio/") ? "audio" : "video";
     }
     if (lookedUpMimeType === "application/pdf") {
       return "pdf";
@@ -335098,11 +335106,14 @@ ${processedLines.join("\n")}`;
 ...${snippet2}`;
   }
 }
+var TOOL_OUTPUT_DIR = "tool_output";
 async function saveTruncatedToolOutput(content, toolName, id, projectTempDir) {
   const safeToolName = toolName.replace(/[^a-z0-9]/gi, "_").toLowerCase();
   const safeId = id.toString().replace(/[^a-z0-9]/gi, "_").toLowerCase();
   const fileName = `${safeToolName}_${safeId}.txt`;
-  const outputFile = path26.join(projectTempDir, fileName);
+  const toolOutputDir = path26.join(projectTempDir, TOOL_OUTPUT_DIR);
+  const outputFile = path26.join(toolOutputDir, fileName);
+  await fsPromises3.mkdir(toolOutputDir, { recursive: true });
   await fsPromises3.writeFile(outputFile, content);
   const lines = content.split("\n");
   return {
@@ -373791,7 +373802,10 @@ var NEVER_ALLOWED_ENVIRONMENT_VARIABLES = /* @__PURE__ */ new Set([
   "DATABASE_URL",
   "GOOGLE_CLOUD_PROJECT",
   "GOOGLE_CLOUD_ACCOUNT",
-  "FIREBASE_PROJECT_ID"
+  "FIREBASE_PROJECT_ID",
+  "GEMINI_API_KEY",
+  "GOOGLE_API_KEY",
+  "GOOGLE_APPLICATION_CREDENTIALS"
 ]);
 var NEVER_ALLOWED_NAME_PATTERNS = [
   /TOKEN/i,
@@ -381859,7 +381873,8 @@ var ToolExecutor = class {
         } else if (toolResult.error === void 0) {
           return await this.createSuccessResult(call, toolResult);
         } else {
-          return this.createErrorResult(call, new Error(toolResult.error.message), toolResult.error.type);
+          const displayText = typeof toolResult.returnDisplay === "string" ? toolResult.returnDisplay : void 0;
+          return this.createErrorResult(call, new Error(toolResult.error.message), toolResult.error.type, displayText);
         }
       } catch (executionError) {
         spanMetadata.error = executionError;
@@ -381948,8 +381963,8 @@ var ToolExecutor = class {
       outcome: call.outcome
     };
   }
-  createErrorResult(call, error2, errorType) {
-    const response = this.createErrorResponse(call.request, error2, errorType);
+  createErrorResult(call, error2, errorType, returnDisplay) {
+    const response = this.createErrorResponse(call.request, error2, errorType, returnDisplay);
     const startTime = "startTime" in call ? call.startTime : void 0;
     return {
       status: "error",
@@ -381960,7 +381975,8 @@ var ToolExecutor = class {
       outcome: call.outcome
     };
   }
-  createErrorResponse(request3, error2, errorType) {
+  createErrorResponse(request3, error2, errorType, returnDisplay) {
+    const displayText = returnDisplay ?? error2.message;
     return {
       callId: request3.callId,
       error: error2,
@@ -381973,9 +381989,9 @@ var ToolExecutor = class {
           }
         }
       ],
-      resultDisplay: error2.message,
+      resultDisplay: displayText,
       errorType,
-      contentLength: error2.message.length
+      contentLength: displayText.length
     };
   }
 };
@@ -382852,6 +382868,21 @@ var ChatRecordingService = class {
       debugLogger.error("Error saving summary to chat history.", error2);
     }
   }
+  /**
+   * Records workspace directories to the session file.
+   * Called when directories are added via /dir add.
+   */
+  recordDirectories(directories) {
+    if (!this.conversationFile)
+      return;
+    try {
+      this.updateConversation((conversation) => {
+        conversation.directories = [...directories];
+      });
+    } catch (error2) {
+      debugLogger.error("Error saving directories to chat history.", error2);
+    }
+  }
   /**
    * Gets the current conversation data (for summary generation).
    */
@@ -390352,6 +390383,15 @@ var GitService = class _GitService {
       return false;
     }
   }
+  getShadowRepoEnv(repoDir) {
+    const gitConfigPath = path59.join(repoDir, ".gitconfig");
+    const systemConfigPath = path59.join(repoDir, ".gitconfig_system_empty");
+    return {
+      // Prevent git from using the user's global git config.
+      GIT_CONFIG_GLOBAL: gitConfigPath,
+      GIT_CONFIG_SYSTEM: systemConfigPath
+    };
+  }
   /**
    * Creates a hidden git repository in the project root.
    * The Git repository is used to support checkpointing.
@@ -390362,7 +390402,9 @@ var GitService = class _GitService {
     await fs51.mkdir(repoDir, { recursive: true });
     const gitConfigContent = "[user]\n  name = Gemini CLI\n  email = gemini-cli@google.com\n[commit]\n  gpgsign = false\n";
     await fs51.writeFile(gitConfigPath, gitConfigContent);
-    const repo = simpleGit(repoDir);
+    const shadowRepoEnv = this.getShadowRepoEnv(repoDir);
+    await fs51.writeFile(shadowRepoEnv.GIT_CONFIG_SYSTEM, "");
+    const repo = simpleGit(repoDir).env(shadowRepoEnv);
     let isRepoDefined = false;
     try {
       isRepoDefined = await repo.checkIsRepo(CheckRepoActions.IS_REPO_ROOT);
@@ -390392,9 +390434,7 @@ var GitService = class _GitService {
     return simpleGit(this.projectRoot).env({
       GIT_DIR: path59.join(repoDir, ".git"),
       GIT_WORK_TREE: this.projectRoot,
-      // Prevent git from using the user's global git config.
-      HOME: repoDir,
-      XDG_CONFIG_HOME: repoDir
+      ...this.getShadowRepoEnv(repoDir)
     });
   }
   async getCurrentCommitHash() {
@@ -393200,6 +393240,12 @@ var HookEventHandler = class {
   hookPlanner;
   hookRunner;
   hookAggregator;
+  /**
+   * Track reported failures to suppress duplicate warnings during streaming.
+   * Uses a WeakMap with the original request object as a key to ensure
+   * failures are only reported once per logical model interaction.
+   */
+  reportedFailures = /* @__PURE__ */ new WeakMap();
   constructor(config3, hookPlanner, hookRunner, hookAggregator) {
     this.config = config3;
     this.hookPlanner = hookPlanner;
@@ -393313,7 +393359,7 @@ var HookEventHandler = class {
       ...this.createBaseInput(HookEventName.BeforeModel),
       llm_request: defaultHookTranslator.toHookLLMRequest(llmRequest)
     };
-    return this.executeHooks(HookEventName.BeforeModel, input);
+    return this.executeHooks(HookEventName.BeforeModel, input, void 0, llmRequest);
   }
   /**
    * Fire an AfterModel event
@@ -393325,7 +393371,7 @@ var HookEventHandler = class {
       llm_request: defaultHookTranslator.toHookLLMRequest(llmRequest),
       llm_response: defaultHookTranslator.toHookLLMResponse(llmResponse)
     };
-    return this.executeHooks(HookEventName.AfterModel, input);
+    return this.executeHooks(HookEventName.AfterModel, input, void 0, llmRequest);
   }
   /**
    * Fire a BeforeToolSelection event
@@ -393336,13 +393382,13 @@ var HookEventHandler = class {
       ...this.createBaseInput(HookEventName.BeforeToolSelection),
       llm_request: defaultHookTranslator.toHookLLMRequest(llmRequest)
     };
-    return this.executeHooks(HookEventName.BeforeToolSelection, input);
+    return this.executeHooks(HookEventName.BeforeToolSelection, input, void 0, llmRequest);
   }
   /**
    * Execute hooks for a specific event (direct execution without MessageBus)
    * Used as fallback when MessageBus is not available
    */
-  async executeHooks(eventName, input, context2) {
+  async executeHooks(eventName, input, context2, requestContext) {
     try {
       const plan = this.hookPlanner.createExecutionPlan(eventName, context2);
       if (!plan || plan.hookConfigs.length === 0) {
@@ -393371,7 +393417,7 @@ var HookEventHandler = class {
       const results = plan.sequential ? await this.hookRunner.executeHooksSequential(plan.hookConfigs, eventName, input, onHookStart, onHookEnd) : await this.hookRunner.executeHooksParallel(plan.hookConfigs, eventName, input, onHookStart, onHookEnd);
       const aggregated = this.hookAggregator.aggregateResults(results, eventName);
       this.processCommonHookOutputFields(aggregated);
-      this.logHookExecution(eventName, input, results, aggregated);
+      this.logHookExecution(eventName, input, results, aggregated, requestContext);
       return aggregated;
     } catch (error2) {
       debugLogger.error(`Hook event bus error for ${eventName}: ${error2}`);
@@ -393399,15 +393445,31 @@ var HookEventHandler = class {
   /**
    * Log hook execution for observability
    */
-  logHookExecution(eventName, input, results, aggregated) {
+  logHookExecution(eventName, input, results, aggregated, requestContext) {
     const failedHooks = results.filter((r3) => !r3.success);
     const successCount = results.length - failedHooks.length;
     const errorCount = failedHooks.length;
     if (errorCount > 0) {
       const failedNames = failedHooks.map((r3) => this.getHookNameFromResult(r3)).join(", ");
+      let shouldEmit = true;
+      if (requestContext) {
+        let reportedSet = this.reportedFailures.get(requestContext);
+        if (!reportedSet) {
+          reportedSet = /* @__PURE__ */ new Set();
+          this.reportedFailures.set(requestContext, reportedSet);
+        }
+        const failureKey = `${eventName}:${failedNames}`;
+        if (reportedSet.has(failureKey)) {
+          shouldEmit = false;
+        } else {
+          reportedSet.add(failureKey);
+        }
+      }
       debugLogger.warn(`Hook execution for ${eventName}: ${successCount} succeeded, ${errorCount} failed (${failedNames}), total duration: ${aggregated.totalDuration}ms`);
-      coreEvents.emitFeedback("warning", `Hook(s) [${failedNames}] failed for event ${eventName}. Press F12 to see the debug drawer for more details.
+      if (shouldEmit) {
+        coreEvents.emitFeedback("warning", `Hook(s) [${failedNames}] failed for event ${eventName}. Press F12 to see the debug drawer for more details.
 `);
+      }
     } else {
       debugLogger.debug(`Hook execution for ${eventName}: ${successCount} hooks executed successfully, total duration: ${aggregated.totalDuration}ms`);
     }
@@ -399142,13 +399204,14 @@ init_tools();
 init_tool_names();
 async function checkPolicy(toolCall, config3) {
   const serverName = toolCall.tool instanceof DiscoveredMCPTool ? toolCall.tool.serverName : void 0;
-  const { decision } = await config3.getPolicyEngine().check({ name: toolCall.request.name, args: toolCall.request.args }, serverName);
+  const result2 = await config3.getPolicyEngine().check({ name: toolCall.request.name, args: toolCall.request.args }, serverName);
+  const { decision } = result2;
   if (decision === PolicyDecision.ASK_USER) {
     if (!config3.isInteractive()) {
       throw new Error(`Tool execution for "${toolCall.tool.displayName || toolCall.tool.name}" requires user confirmation, which is not supported in non-interactive mode.`);
     }
   }
-  return decision;
+  return { decision, rule: result2.rule };
 }
 async function updatePolicy(tool, outcome, confirmationDetails, deps) {
   if (isAutoEditTransition(tool, outcome)) {
@@ -399434,9 +399497,10 @@ var Scheduler2 = class _Scheduler {
   // --- Phase 3: Single Call Orchestration ---
   async _processToolCall(toolCall, signal) {
     const callId = toolCall.request.callId;
-    const decision = await checkPolicy(toolCall, this.config);
+    const { decision, rule } = await checkPolicy(toolCall, this.config);
     if (decision === PolicyDecision.DENY) {
-      this.state.updateStatus(callId, "error", createErrorResponse2(toolCall.request, new Error("Tool execution denied by policy."), ToolErrorType.POLICY_VIOLATION));
+      const denyMessage = rule?.denyMessage ? ` ${rule.denyMessage}` : "";
+      this.state.updateStatus(callId, "error", createErrorResponse2(toolCall.request, new Error(`Tool execution denied by policy.${denyMessage}`), ToolErrorType.POLICY_VIOLATION));
       this.state.finalizeCall(callId);
       return;
     }
@@ -403540,10 +403604,18 @@ async function createTransport(mcpServerName, mcpServerConfig, debugMode, saniti
     const transport = new StdioClientTransport({
       command: mcpServerConfig.command,
       args: mcpServerConfig.args || [],
-      env: {
-        ...sanitizeEnvironment(process.env, sanitizationConfig),
+      env: sanitizeEnvironment({
+        ...process.env,
+        ...getExtensionEnvironment(mcpServerConfig.extension),
         ...mcpServerConfig.env || {}
-      },
+      }, {
+        ...sanitizationConfig,
+        allowedEnvironmentVariables: [
+          ...sanitizationConfig.allowedEnvironmentVariables ?? [],
+          ...mcpServerConfig.extension?.resolvedSettings?.map((s3) => s3.envVar) ?? []
+        ],
+        enableEnvironmentVariableRedaction: true
+      }),
       cwd: mcpServerConfig.cwd,
       stderr: "pipe"
     });
@@ -403568,6 +403640,15 @@ function isEnabled(funcDecl, mcpServerName, mcpServerConfig) {
   }
   return !includeTools || includeTools.some((tool) => tool === funcDecl.name || tool.startsWith(`${funcDecl.name}(`));
 }
+function getExtensionEnvironment(extension) {
+  const env2 = {};
+  if (extension?.resolvedSettings) {
+    for (const setting of extension.resolvedSettings) {
+      env2[setting.envVar] = setting.value;
+    }
+  }
+  return env2;
+}
 
 // packages/core/dist/src/tools/mcp-client-manager.js
 init_events();
@@ -405271,7 +405352,8 @@ var PolicyRuleSchema = external_exports.object({
     message: "priority must be <= 999 to prevent tier overflow. Priorities >= 1000 would jump to the next tier."
   }),
   modes: external_exports.array(external_exports.nativeEnum(ApprovalMode)).optional(),
-  allow_redirection: external_exports.boolean().optional()
+  allow_redirection: external_exports.boolean().optional(),
+  deny_message: external_exports.string().optional()
 });
 var SafetyCheckerRuleSchema = external_exports.object({
   toolName: external_exports.union([external_exports.string(), external_exports.array(external_exports.string())]).optional(),