@google/gemini-cli-core 0.16.0-nightly.20251112.c961f274 → 0.16.0-preview.0

package/dist/src/hooks/hookAggregator.test.js

@@ -0,0 +1,387 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, beforeEach } from 'vitest';
+import { HookAggregator } from './hookAggregator.js';
+import { HookType, HookEventName } from './types.js';
+// Helper function to create proper HookExecutionResult objects
+function createHookExecutionResult(output, success = true, duration = 100, error) {
+    return {
+        success,
+        output,
+        duration,
+        error,
+        hookConfig: {
+            type: HookType.Command,
+            command: 'test-command',
+            timeout: 30000,
+        },
+        eventName: HookEventName.BeforeTool,
+    };
+}
+describe('HookAggregator', () => {
+    let aggregator;
+    beforeEach(() => {
+        aggregator = new HookAggregator();
+    });
+    describe('aggregateResults', () => {
+        it('should handle empty results', () => {
+            const results = [];
+            const aggregated = aggregator.aggregateResults(results, HookEventName.BeforeTool);
+            expect(aggregated.success).toBe(true);
+            expect(aggregated.allOutputs).toHaveLength(0);
+            expect(aggregated.errors).toHaveLength(0);
+            expect(aggregated.totalDuration).toBe(0);
+            expect(aggregated.finalOutput).toBeUndefined();
+        });
+        it('should aggregate successful results', () => {
+            const results = [
+                createHookExecutionResult({ decision: 'allow', reason: 'Hook 1 approved' }, true, 100),
+                createHookExecutionResult({ decision: 'allow', reason: 'Hook 2 approved' }, true, 150),
+            ];
+            const aggregated = aggregator.aggregateResults(results, HookEventName.BeforeTool);
+            expect(aggregated.success).toBe(true);
+            expect(aggregated.allOutputs).toHaveLength(2);
+            expect(aggregated.errors).toHaveLength(0);
+            expect(aggregated.totalDuration).toBe(250);
+            expect(aggregated.finalOutput?.decision).toBe('allow');
+            expect(aggregated.finalOutput?.reason).toBe('Hook 1 approved\nHook 2 approved');
+        });
+        it('should handle errors in results', () => {
+            const results = [
+                {
+                    hookConfig: {
+                        type: HookType.Command,
+                        command: 'test-command',
+                        timeout: 30000,
+                    },
+                    eventName: HookEventName.BeforeTool,
+                    success: false,
+                    error: new Error('Hook failed'),
+                    duration: 50,
+                },
+                {
+                    hookConfig: {
+                        type: HookType.Command,
+                        command: 'test-command',
+                        timeout: 30000,
+                    },
+                    eventName: HookEventName.BeforeTool,
+                    success: true,
+                    output: { decision: 'allow' },
+                    duration: 100,
+                },
+            ];
+            const aggregated = aggregator.aggregateResults(results, HookEventName.BeforeTool);
+            expect(aggregated.success).toBe(false);
+            expect(aggregated.allOutputs).toHaveLength(1);
+            expect(aggregated.errors).toHaveLength(1);
+            expect(aggregated.errors[0].message).toBe('Hook failed');
+            expect(aggregated.totalDuration).toBe(150);
+        });
+        it('should handle blocking decisions with OR logic', () => {
+            const results = [
+                {
+                    hookConfig: {
+                        type: HookType.Command,
+                        command: 'test-command',
+                        timeout: 30000,
+                    },
+                    eventName: HookEventName.BeforeTool,
+                    success: true,
+                    output: { decision: 'allow', reason: 'Hook 1 allowed' },
+                    duration: 100,
+                },
+                {
+                    hookConfig: {
+                        type: HookType.Command,
+                        command: 'test-command',
+                        timeout: 30000,
+                    },
+                    eventName: HookEventName.BeforeTool,
+                    success: true,
+                    output: { decision: 'block', reason: 'Hook 2 blocked' },
+                    duration: 150,
+                },
+            ];
+            const aggregated = aggregator.aggregateResults(results, HookEventName.BeforeTool);
+            expect(aggregated.success).toBe(true);
+            expect(aggregated.finalOutput?.decision).toBe('block');
+            expect(aggregated.finalOutput?.reason).toBe('Hook 1 allowed\nHook 2 blocked');
+        });
+        it('should handle continue=false with precedence', () => {
+            const results = [
+                {
+                    hookConfig: {
+                        type: HookType.Command,
+                        command: 'test-command',
+                        timeout: 30000,
+                    },
+                    eventName: HookEventName.BeforeTool,
+                    success: true,
+                    output: { decision: 'allow', continue: true },
+                    duration: 100,
+                },
+                {
+                    hookConfig: {
+                        type: HookType.Command,
+                        command: 'test-command',
+                        timeout: 30000,
+                    },
+                    eventName: HookEventName.BeforeTool,
+                    success: true,
+                    output: {
+                        decision: 'allow',
+                        continue: false,
+                        stopReason: 'Stop requested',
+                    },
+                    duration: 150,
+                },
+            ];
+            const aggregated = aggregator.aggregateResults(results, HookEventName.BeforeTool);
+            expect(aggregated.success).toBe(true);
+            expect(aggregated.finalOutput?.continue).toBe(false);
+            expect(aggregated.finalOutput?.stopReason).toBe('Stop requested');
+        });
+    });
+    describe('BeforeToolSelection merge strategy', () => {
+        it('should merge tool configurations with NONE mode precedence', () => {
+            const results = [
+                {
+                    hookConfig: {
+                        type: HookType.Command,
+                        command: 'test-command',
+                        timeout: 30000,
+                    },
+                    eventName: HookEventName.BeforeToolSelection,
+                    success: true,
+                    output: {
+                        hookSpecificOutput: {
+                            hookEventName: 'BeforeToolSelection',
+                            toolConfig: {
+                                mode: 'ANY',
+                                allowedFunctionNames: ['tool1', 'tool2'],
+                            },
+                        },
+                    },
+                    duration: 100,
+                },
+                {
+                    hookConfig: {
+                        type: HookType.Command,
+                        command: 'test-command',
+                        timeout: 30000,
+                    },
+                    eventName: HookEventName.BeforeToolSelection,
+                    success: true,
+                    output: {
+                        hookSpecificOutput: {
+                            hookEventName: 'BeforeToolSelection',
+                            toolConfig: {
+                                mode: 'NONE',
+                                allowedFunctionNames: [],
+                            },
+                        },
+                    },
+                    duration: 150,
+                },
+            ];
+            const aggregated = aggregator.aggregateResults(results, HookEventName.BeforeToolSelection);
+            expect(aggregated.success).toBe(true);
+            const output = aggregated.finalOutput;
+            const toolConfig = output.hookSpecificOutput?.toolConfig;
+            expect(toolConfig?.mode).toBe('NONE');
+            expect(toolConfig?.allowedFunctionNames).toEqual([]);
+        });
+        it('should merge tool configurations with ANY mode', () => {
+            const results = [
+                {
+                    hookConfig: {
+                        type: HookType.Command,
+                        command: 'test-command',
+                        timeout: 30000,
+                    },
+                    eventName: HookEventName.BeforeToolSelection,
+                    success: true,
+                    output: {
+                        hookSpecificOutput: {
+                            hookEventName: 'BeforeToolSelection',
+                            toolConfig: {
+                                mode: 'AUTO',
+                                allowedFunctionNames: ['tool1'],
+                            },
+                        },
+                    },
+                    duration: 100,
+                },
+                {
+                    hookConfig: {
+                        type: HookType.Command,
+                        command: 'test-command',
+                        timeout: 30000,
+                    },
+                    eventName: HookEventName.BeforeToolSelection,
+                    success: true,
+                    output: {
+                        hookSpecificOutput: {
+                            hookEventName: 'BeforeToolSelection',
+                            toolConfig: {
+                                mode: 'ANY',
+                                allowedFunctionNames: ['tool2', 'tool3'],
+                            },
+                        },
+                    },
+                    duration: 150,
+                },
+            ];
+            const aggregated = aggregator.aggregateResults(results, HookEventName.BeforeToolSelection);
+            expect(aggregated.success).toBe(true);
+            const output = aggregated.finalOutput;
+            const toolConfig = output.hookSpecificOutput?.toolConfig;
+            expect(toolConfig?.mode).toBe('ANY');
+            expect(toolConfig?.allowedFunctionNames).toEqual([
+                'tool1',
+                'tool2',
+                'tool3',
+            ]);
+        });
+        it('should merge tool configurations with AUTO mode when all are AUTO', () => {
+            const results = [
+                {
+                    hookConfig: {
+                        type: HookType.Command,
+                        command: 'test-command',
+                        timeout: 30000,
+                    },
+                    eventName: HookEventName.BeforeToolSelection,
+                    success: true,
+                    output: {
+                        hookSpecificOutput: {
+                            hookEventName: 'BeforeToolSelection',
+                            toolConfig: {
+                                mode: 'AUTO',
+                                allowedFunctionNames: ['tool1'],
+                            },
+                        },
+                    },
+                    duration: 100,
+                },
+                {
+                    hookConfig: {
+                        type: HookType.Command,
+                        command: 'test-command',
+                        timeout: 30000,
+                    },
+                    eventName: HookEventName.BeforeToolSelection,
+                    success: true,
+                    output: {
+                        hookSpecificOutput: {
+                            hookEventName: 'BeforeToolSelection',
+                            toolConfig: {
+                                mode: 'AUTO',
+                                allowedFunctionNames: ['tool2'],
+                            },
+                        },
+                    },
+                    duration: 150,
+                },
+            ];
+            const aggregated = aggregator.aggregateResults(results, HookEventName.BeforeToolSelection);
+            expect(aggregated.success).toBe(true);
+            const output = aggregated.finalOutput;
+            const toolConfig = output.hookSpecificOutput?.toolConfig;
+            expect(toolConfig?.mode).toBe('AUTO');
+            expect(toolConfig?.allowedFunctionNames).toEqual(['tool1', 'tool2']);
+        });
+    });
+    describe('BeforeModel/AfterModel merge strategy', () => {
+        it('should use field replacement strategy', () => {
+            const results = [
+                {
+                    hookConfig: {
+                        type: HookType.Command,
+                        command: 'test-command',
+                        timeout: 30000,
+                    },
+                    eventName: HookEventName.BeforeModel,
+                    success: true,
+                    output: {
+                        decision: 'allow',
+                        hookSpecificOutput: {
+                            hookEventName: 'BeforeModel',
+                            llm_request: { model: 'model1', config: {}, contents: [] },
+                        },
+                    },
+                    duration: 100,
+                },
+                {
+                    hookConfig: {
+                        type: HookType.Command,
+                        command: 'test-command',
+                        timeout: 30000,
+                    },
+                    eventName: HookEventName.BeforeModel,
+                    success: true,
+                    output: {
+                        decision: 'block',
+                        hookSpecificOutput: {
+                            hookEventName: 'BeforeModel',
+                            llm_request: { model: 'model2', config: {}, contents: [] },
+                        },
+                    },
+                    duration: 150,
+                },
+            ];
+            const aggregated = aggregator.aggregateResults(results, HookEventName.BeforeModel);
+            expect(aggregated.success).toBe(true);
+            expect(aggregated.finalOutput?.decision).toBe('block'); // Later value wins
+            const output = aggregated.finalOutput;
+            const llmRequest = output.hookSpecificOutput?.llm_request;
+            expect(llmRequest?.['model']).toBe('model2'); // Later value wins
+        });
+    });
+    describe('extractAdditionalContext', () => {
+        it('should extract additional context from hook outputs', () => {
+            const results = [
+                {
+                    hookConfig: {
+                        type: HookType.Command,
+                        command: 'test-command',
+                        timeout: 30000,
+                    },
+                    eventName: HookEventName.AfterTool,
+                    success: true,
+                    output: {
+                        hookSpecificOutput: {
+                            hookEventName: 'AfterTool',
+                            additionalContext: 'Context from hook 1',
+                        },
+                    },
+                    duration: 100,
+                },
+                {
+                    hookConfig: {
+                        type: HookType.Command,
+                        command: 'test-command',
+                        timeout: 30000,
+                    },
+                    eventName: HookEventName.AfterTool,
+                    success: true,
+                    output: {
+                        hookSpecificOutput: {
+                            hookEventName: 'AfterTool',
+                            additionalContext: 'Context from hook 2',
+                        },
+                    },
+                    duration: 150,
+                },
+            ];
+            const aggregated = aggregator.aggregateResults(results, HookEventName.AfterTool);
+            expect(aggregated.success).toBe(true);
+            expect(aggregated.finalOutput?.hookSpecificOutput?.['additionalContext']).toBe('Context from hook 1\nContext from hook 2');
+        });
+    });
+});
+//# sourceMappingURL=hookAggregator.test.js.map

package/dist/src/hooks/hookAggregator.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hookAggregator.test.js","sourceRoot":"","sources":["../../../src/hooks/hookAggregator.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAOrD,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAErD,+DAA+D;AAC/D,SAAS,yBAAyB,CAChC,MAAmB,EACnB,OAAO,GAAG,IAAI,EACd,QAAQ,GAAG,GAAG,EACd,KAAa;IAEb,OAAO;QACL,OAAO;QACP,MAAM;QACN,QAAQ;QACR,KAAK;QACL,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ,CAAC,OAAO;YACtB,OAAO,EAAE,cAAc;YACvB,OAAO,EAAE,KAAK;SACf;QACD,SAAS,EAAE,aAAa,CAAC,UAAU;KACpC,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,UAA0B,CAAC;IAE/B,UAAU,CAAC,GAAG,EAAE;QACd,UAAU,GAAG,IAAI,cAAc,EAAE,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;YACrC,MAAM,OAAO,GAA0B,EAAE,CAAC;YAE1C,MAAM,UAAU,GAAG,UAAU,CAAC,gBAAgB,CAC5C,OAAO,EACP,aAAa,CAAC,UAAU,CACzB,CAAC;YAEF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC9C,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,OAAO,GAA0B;gBACrC,yBAAyB,CACvB,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAChD,IAAI,EACJ,GAAG,CACJ;gBACD,yBAAyB,CACvB,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,EAChD,IAAI,EACJ,GAAG,CACJ;aACF,CAAC;YAEF,MAAM,UAAU,GAAG,UAAU,CAAC,gBAAgB,CAC5C,OAAO,EACP,aAAa,CAAC,UAAU,CACzB,CAAC;YAEF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC9C,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3C,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvD,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,CACzC,kCAAkC,CACnC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;YACzC,MAAM,OAAO,GAA0B;gBACrC;oBACE,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ,CAAC,OAAO;wBACtB,OAAO,EAAE,cAAc;wBACvB,OAAO,EAAE,KAAK;qBACf;oBACD,SAAS,EAAE,aAAa,CAAC,UAAU;oBACnC,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,IAAI,KAAK,CAAC,aAAa,CAAC;oBAC/B,QAAQ,EAAE,EAAE;iBACb;gBACD;oBACE,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ,CAAC,OAAO;wBACtB,OAAO,EAAE,cAAc;wBACvB,OAAO,EAAE,KAAK;qBACf;oBACD,SAAS,EAAE,aAAa,CAAC,UAAU;oBACnC,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE;oBAC7B,QAAQ,EAAE,GAAG;iBACd;aACF,CAAC;YAEF,MAAM,UAAU,GAAG,UAAU,CAAC,gBAAgB,CAC5C,OAAO,EACP,aAAa,CAAC,UAAU,CACzB,CAAC;YAEF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC9C,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACzD,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,OAAO,GAA0B;gBACrC;oBACE,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ,CAAC,OAAO;wBACtB,OAAO,EAAE,cAAc;wBACvB,OAAO,EAAE,KAAK;qBACf;oBACD,SAAS,EAAE,aAAa,CAAC,UAAU;oBACnC,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE;oBACvD,QAAQ,EAAE,GAAG;iBACd;gBACD;oBACE,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ,CAAC,OAAO;wBACtB,OAAO,EAAE,cAAc;wBACvB,OAAO,EAAE,KAAK;qBACf;oBACD,SAAS,EAAE,aAAa,CAAC,UAAU;oBACnC,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE;oBACvD,QAAQ,EAAE,GAAG;iBACd;aACF,CAAC;YAEF,MAAM,UAAU,GAAG,UAAU,CAAC,gBAAgB,CAC5C,OAAO,EACP,aAAa,CAAC,UAAU,CACzB,CAAC;YAEF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvD,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,CACzC,gCAAgC,CACjC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,OAAO,GAA0B;gBACrC;oBACE,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ,CAAC,OAAO;wBACtB,OAAO,EAAE,cAAc;wBACvB,OAAO,EAAE,KAAK;qBACf;oBACD,SAAS,EAAE,aAAa,CAAC,UAAU;oBACnC,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC7C,QAAQ,EAAE,GAAG;iBACd;gBACD;oBACE,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ,CAAC,OAAO;wBACtB,OAAO,EAAE,cAAc;wBACvB,OAAO,EAAE,KAAK;qBACf;oBACD,SAAS,EAAE,aAAa,CAAC,UAAU;oBACnC,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE;wBACN,QAAQ,EAAE,OAAO;wBACjB,QAAQ,EAAE,KAAK;wBACf,UAAU,EAAE,gBAAgB;qBAC7B;oBACD,QAAQ,EAAE,GAAG;iBACd;aACF,CAAC;YAEF,MAAM,UAAU,GAAG,UAAU,CAAC,gBAAgB,CAC5C,OAAO,EACP,aAAa,CAAC,UAAU,CACzB,CAAC;YAEF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrD,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAClD,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;YACpE,MAAM,OAAO,GAA0B;gBACrC;oBACE,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ,CAAC,OAAO;wBACtB,OAAO,EAAE,cAAc;wBACvB,OAAO,EAAE,KAAK;qBACf;oBACD,SAAS,EAAE,aAAa,CAAC,mBAAmB;oBAC5C,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE;wBACN,kBAAkB,EAAE;4BAClB,aAAa,EAAE,qBAAqB;4BACpC,UAAU,EAAE;gCACV,IAAI,EAAE,KAAK;gCACX,oBAAoB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;6BACzC;yBACF;qBAC2B;oBAC9B,QAAQ,EAAE,GAAG;iBACd;gBACD;oBACE,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ,CAAC,OAAO;wBACtB,OAAO,EAAE,cAAc;wBACvB,OAAO,EAAE,KAAK;qBACf;oBACD,SAAS,EAAE,aAAa,CAAC,mBAAmB;oBAC5C,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE;wBACN,kBAAkB,EAAE;4BAClB,aAAa,EAAE,qBAAqB;4BACpC,UAAU,EAAE;gCACV,IAAI,EAAE,MAAM;gCACZ,oBAAoB,EAAE,EAAE;6BACzB;yBACF;qBAC2B;oBAC9B,QAAQ,EAAE,GAAG;iBACd;aACF,CAAC;YAEF,MAAM,UAAU,GAAG,UAAU,CAAC,gBAAgB,CAC5C,OAAO,EACP,aAAa,CAAC,mBAAmB,CAClC,CAAC;YAEF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,UAAU,CAAC,WAAwC,CAAC;YACnE,MAAM,UAAU,GAAG,MAAM,CAAC,kBAAkB,EAAE,UAAU,CAAC;YACzD,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,OAAO,GAA0B;gBACrC;oBACE,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ,CAAC,OAAO;wBACtB,OAAO,EAAE,cAAc;wBACvB,OAAO,EAAE,KAAK;qBACf;oBACD,SAAS,EAAE,aAAa,CAAC,mBAAmB;oBAC5C,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE;wBACN,kBAAkB,EAAE;4BAClB,aAAa,EAAE,qBAAqB;4BACpC,UAAU,EAAE;gCACV,IAAI,EAAE,MAAM;gCACZ,oBAAoB,EAAE,CAAC,OAAO,CAAC;6BAChC;yBACF;qBAC2B;oBAC9B,QAAQ,EAAE,GAAG;iBACd;gBACD;oBACE,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ,CAAC,OAAO;wBACtB,OAAO,EAAE,cAAc;wBACvB,OAAO,EAAE,KAAK;qBACf;oBACD,SAAS,EAAE,aAAa,CAAC,mBAAmB;oBAC5C,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE;wBACN,kBAAkB,EAAE;4BAClB,aAAa,EAAE,qBAAqB;4BACpC,UAAU,EAAE;gCACV,IAAI,EAAE,KAAK;gCACX,oBAAoB,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;6BACzC;yBACF;qBAC2B;oBAC9B,QAAQ,EAAE,GAAG;iBACd;aACF,CAAC;YAEF,MAAM,UAAU,GAAG,UAAU,CAAC,gBAAgB,CAC5C,OAAO,EACP,aAAa,CAAC,mBAAmB,CAClC,CAAC;YAEF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,UAAU,CAAC,WAAwC,CAAC;YACnE,MAAM,UAAU,GAAG,MAAM,CAAC,kBAAkB,EAAE,UAAU,CAAC;YACzD,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,MAAM,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC,OAAO,CAAC;gBAC/C,OAAO;gBACP,OAAO;gBACP,OAAO;aACR,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;YAC3E,MAAM,OAAO,GAA0B;gBACrC;oBACE,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ,CAAC,OAAO;wBACtB,OAAO,EAAE,cAAc;wBACvB,OAAO,EAAE,KAAK;qBACf;oBACD,SAAS,EAAE,aAAa,CAAC,mBAAmB;oBAC5C,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE;wBACN,kBAAkB,EAAE;4BAClB,aAAa,EAAE,qBAAqB;4BACpC,UAAU,EAAE;gCACV,IAAI,EAAE,MAAM;gCACZ,oBAAoB,EAAE,CAAC,OAAO,CAAC;6BAChC;yBACF;qBAC2B;oBAC9B,QAAQ,EAAE,GAAG;iBACd;gBACD;oBACE,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ,CAAC,OAAO;wBACtB,OAAO,EAAE,cAAc;wBACvB,OAAO,EAAE,KAAK;qBACf;oBACD,SAAS,EAAE,aAAa,CAAC,mBAAmB;oBAC5C,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE;wBACN,kBAAkB,EAAE;4BAClB,aAAa,EAAE,qBAAqB;4BACpC,UAAU,EAAE;gCACV,IAAI,EAAE,MAAM;gCACZ,oBAAoB,EAAE,CAAC,OAAO,CAAC;6BAChC;yBACF;qBAC2B;oBAC9B,QAAQ,EAAE,GAAG;iBACd;aACF,CAAC;YAEF,MAAM,UAAU,GAAG,UAAU,CAAC,gBAAgB,CAC5C,OAAO,EACP,aAAa,CAAC,mBAAmB,CAClC,CAAC;YAEF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,UAAU,CAAC,WAAwC,CAAC;YACnE,MAAM,UAAU,GAAG,MAAM,CAAC,kBAAkB,EAAE,UAAU,CAAC;YACzD,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACvE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uCAAuC,EAAE,GAAG,EAAE;QACrD,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;YAC/C,MAAM,OAAO,GAA0B;gBACrC;oBACE,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ,CAAC,OAAO;wBACtB,OAAO,EAAE,cAAc;wBACvB,OAAO,EAAE,KAAK;qBACf;oBACD,SAAS,EAAE,aAAa,CAAC,WAAW;oBACpC,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE;wBACN,QAAQ,EAAE,OAAO;wBACjB,kBAAkB,EAAE;4BAClB,aAAa,EAAE,aAAa;4BAC5B,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;yBAC3D;qBACF;oBACD,QAAQ,EAAE,GAAG;iBACd;gBACD;oBACE,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ,CAAC,OAAO;wBACtB,OAAO,EAAE,cAAc;wBACvB,OAAO,EAAE,KAAK;qBACf;oBACD,SAAS,EAAE,aAAa,CAAC,WAAW;oBACpC,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE;wBACN,QAAQ,EAAE,OAAO;wBACjB,kBAAkB,EAAE;4BAClB,aAAa,EAAE,aAAa;4BAC5B,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;yBAC3D;qBACF;oBACD,QAAQ,EAAE,GAAG;iBACd;aACF,CAAC;YAEF,MAAM,UAAU,GAAG,UAAU,CAAC,gBAAgB,CAC5C,OAAO,EACP,aAAa,CAAC,WAAW,CAC1B,CAAC;YAEF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,CAAC,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB;YAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,WAAgC,CAAC;YAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,kBAAkB,EAAE,WAAW,CAAC;YAC1D,MAAM,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;QACxC,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,OAAO,GAA0B;gBACrC;oBACE,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ,CAAC,OAAO;wBACtB,OAAO,EAAE,cAAc;wBACvB,OAAO,EAAE,KAAK;qBACf;oBACD,SAAS,EAAE,aAAa,CAAC,SAAS;oBAClC,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE;wBACN,kBAAkB,EAAE;4BAClB,aAAa,EAAE,WAAW;4BAC1B,iBAAiB,EAAE,qBAAqB;yBACzC;qBACF;oBACD,QAAQ,EAAE,GAAG;iBACd;gBACD;oBACE,UAAU,EAAE;wBACV,IAAI,EAAE,QAAQ,CAAC,OAAO;wBACtB,OAAO,EAAE,cAAc;wBACvB,OAAO,EAAE,KAAK;qBACf;oBACD,SAAS,EAAE,aAAa,CAAC,SAAS;oBAClC,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE;wBACN,kBAAkB,EAAE;4BAClB,aAAa,EAAE,WAAW;4BAC1B,iBAAiB,EAAE,qBAAqB;yBACzC;qBACF;oBACD,QAAQ,EAAE,GAAG;iBACd;aACF,CAAC;YAEF,MAAM,UAAU,GAAG,UAAU,CAAC,gBAAgB,CAC5C,OAAO,EACP,aAAa,CAAC,SAAS,CACxB,CAAC;YAEF,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,MAAM,CACJ,UAAU,CAAC,WAAW,EAAE,kBAAkB,EAAE,CAAC,mBAAmB,CAAC,CAClE,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/policy/config.js

@@ -82,7 +82,7 @@ export function formatPolicyError(error) {
 export async function createPolicyEngineConfig(settings, approvalMode, defaultPoliciesDir) {
     const policyDirs = getPolicyDirectories(defaultPoliciesDir);
     // Load policies from TOML files
-    const { rules: tomlRules, errors } = await loadPoliciesFromToml(approvalMode, policyDirs, (dir) => getPolicyTier(dir, defaultPoliciesDir));
+    const { rules: tomlRules, checkers: tomlCheckers, errors, } = await loadPoliciesFromToml(approvalMode, policyDirs, (dir) => getPolicyTier(dir, defaultPoliciesDir));
     // Emit any errors encountered during TOML loading to the UI
     // coreEvents has a buffer that will display these once the UI is ready
     if (errors.length > 0) {
@@ -91,6 +91,7 @@ export async function createPolicyEngineConfig(settings, approvalMode, defaultPo
         }
     }
     const rules = [...tomlRules];
+    const checkers = [...tomlCheckers];
     // Priority system for policy rules:
     // - Higher priority numbers win over lower priority numbers
     // - When multiple rules match, the highest priority rule is applied
@@ -178,6 +179,7 @@ export async function createPolicyEngineConfig(settings, approvalMode, defaultPo
     }
     return {
         rules,
+        checkers,
         defaultDecision: PolicyDecision.ASK_USER,
     };
 }

package/dist/src/policy/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/policy/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAEL,cAAc,GAIf,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,oBAAoB,EAAwB,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EACL,cAAc,GAEf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAE1E,iDAAiD;AACjD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,kBAA2B;IAC9D,MAAM,IAAI,GAAG,EAAE,CAAC;IAEhB,IAAI,kBAAkB,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAE1C,4EAA4E;IAC5E,mEAAmE;IACnE,+FAA+F;IAC/F,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,kBAA2B;IAE3B,MAAM,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IACvD,MAAM,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAE1D,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAEzD,IACE,kBAAkB;QAClB,aAAa,KAAK,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAClD,CAAC;QACD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,aAAa,KAAK,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC9D,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,aAAa,KAAK,cAAc,EAAE,CAAC;QACrC,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IAAI,aAAa,KAAK,eAAe,EAAE,CAAC;QACtC,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAsB;IACtD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,OAAO,GAAG,IAAI,SAAS,0BAA0B,KAAK,CAAC,QAAQ,KAAK,CAAC;IACzE,OAAO,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,OAAO,IAAI,mBAAmB,KAAK,CAAC,UAAU,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAwB,EACxB,YAA0B,EAC1B,kBAA2B;IAE3B,MAAM,UAAU,GAAG,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IAE5D,gCAAgC;IAChC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,oBAAoB,CAC7D,YAAY,EACZ,UAAU,EACV,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAChD,CAAC;IAEF,4DAA4D;IAC5D,uEAAuE;IACvE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,UAAU,CAAC,YAAY,CAAC,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAiB,CAAC,GAAG,SAAS,CAAC,CAAC;IAE3C,oCAAoC;IACpC,4DAA4D;IAC5D,oEAAoE;IACpE,6DAA6D;IAC7D,EAAE;IACF,0BAA0B;IAC1B,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,EAAE;IACF,qEAAqE;IACrE,qEAAqE;IACrE,EAAE;IACF,2DAA2D;IAC3D,mFAAmF;IACnF,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,mEAAmE;IACnE,sEAAsE;IACtE,EAAE;IACF,kDAAkD;IAClD,wEAAwE;IACxE,gEAAgE;IAChE,wDAAwD;IACxD,6DAA6D;IAE7D,oEAAoE;IACpE,+EAA+E;IAC/E,IAAI,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,GAAG,UAAU,KAAK;gBAC5B,QAAQ,EAAE,cAAc,CAAC,IAAI;gBAC7B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,wDAAwD;IACxD,IAAI,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,cAAc,CAAC,IAAI;gBAC7B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,wDAAwD;IACxD,IAAI,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,cAAc,CAAC,KAAK;gBAC9B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,yDAAyD;IACzD,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CACrD,QAAQ,CAAC,UAAU,CACpB,EAAE,CAAC;YACF,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;gBACvB,uCAAuC;gBACvC,0FAA0F;gBAC1F,KAAK,CAAC,IAAI,CAAC;oBACT,QAAQ,EAAE,GAAG,UAAU,KAAK;oBAC5B,QAAQ,EAAE,cAAc,CAAC,KAAK;oBAC9B,QAAQ,EAAE,GAAG;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,+DAA+D;IAC/D,IAAI,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC;QAC1B,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,GAAG,UAAU,KAAK;gBAC5B,QAAQ,EAAE,cAAc,CAAC,KAAK;gBAC9B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;QACL,eAAe,EAAE,cAAc,CAAC,QAAQ;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,YAA0B,EAC1B,UAAsB;IAEtB,UAAU,CAAC,SAAS,CAClB,cAAc,CAAC,aAAa,EAC5B,CAAC,OAAqB,EAAE,EAAE;QACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAElC,YAAY,CAAC,OAAO,CAAC;YACnB,QAAQ;YACR,QAAQ,EAAE,cAAc,CAAC,KAAK;YAC9B,kDAAkD;YAClD,gEAAgE;YAChE,uEAAuE;YACvE,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/policy/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAEL,cAAc,GAIf,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,oBAAoB,EAAwB,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EACL,cAAc,GAEf,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAmB,MAAM,oCAAoC,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;AAE1E,iDAAiD;AACjD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AACrC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,kBAA2B;IAC9D,MAAM,IAAI,GAAG,EAAE,CAAC;IAEhB,IAAI,kBAAkB,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAE1C,4EAA4E;IAC5E,mEAAmE;IACnE,+FAA+F;IAC/F,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,kBAA2B;IAE3B,MAAM,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;IACvD,MAAM,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAE1D,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAEzD,IACE,kBAAkB;QAClB,aAAa,KAAK,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAClD,CAAC;QACD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,aAAa,KAAK,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC9D,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,aAAa,KAAK,cAAc,EAAE,CAAC;QACrC,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IAAI,aAAa,KAAK,eAAe,EAAE,CAAC;QACtC,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAsB;IACtD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,OAAO,GAAG,IAAI,SAAS,0BAA0B,KAAK,CAAC,QAAQ,KAAK,CAAC;IACzE,OAAO,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,OAAO,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACrB,OAAO,IAAI,mBAAmB,KAAK,CAAC,UAAU,EAAE,CAAC;IACnD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAwB,EACxB,YAA0B,EAC1B,kBAA2B;IAE3B,MAAM,UAAU,GAAG,oBAAoB,CAAC,kBAAkB,CAAC,CAAC;IAE5D,gCAAgC;IAChC,MAAM,EACJ,KAAK,EAAE,SAAS,EAChB,QAAQ,EAAE,YAAY,EACtB,MAAM,GACP,GAAG,MAAM,oBAAoB,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAC/D,aAAa,CAAC,GAAG,EAAE,kBAAkB,CAAC,CACvC,CAAC;IAEF,4DAA4D;IAC5D,uEAAuE;IACvE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,UAAU,CAAC,YAAY,CAAC,OAAO,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAiB,CAAC,GAAG,SAAS,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC;IAEnC,oCAAoC;IACpC,4DAA4D;IAC5D,oEAAoE;IACpE,6DAA6D;IAC7D,EAAE;IACF,0BAA0B;IAC1B,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,EAAE;IACF,qEAAqE;IACrE,qEAAqE;IACrE,EAAE;IACF,2DAA2D;IAC3D,mFAAmF;IACnF,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,mEAAmE;IACnE,sEAAsE;IACtE,EAAE;IACF,kDAAkD;IAClD,wEAAwE;IACxE,gEAAgE;IAChE,wDAAwD;IACxD,6DAA6D;IAE7D,oEAAoE;IACpE,+EAA+E;IAC/E,IAAI,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC;QAC3B,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,GAAG,UAAU,KAAK;gBAC5B,QAAQ,EAAE,cAAc,CAAC,IAAI;gBAC7B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,wDAAwD;IACxD,IAAI,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,cAAc,CAAC,IAAI;gBAC7B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,wDAAwD;IACxD,IAAI,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAC5B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,cAAc,CAAC,KAAK;gBAC9B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,yDAAyD;IACzD,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CACrD,QAAQ,CAAC,UAAU,CACpB,EAAE,CAAC;YACF,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;gBACvB,uCAAuC;gBACvC,0FAA0F;gBAC1F,KAAK,CAAC,IAAI,CAAC;oBACT,QAAQ,EAAE,GAAG,UAAU,KAAK;oBAC5B,QAAQ,EAAE,cAAc,CAAC,KAAK;oBAC9B,QAAQ,EAAE,GAAG;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,kEAAkE;IAClE,+DAA+D;IAC/D,IAAI,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC;QAC1B,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,GAAG,UAAU,KAAK;gBAC5B,QAAQ,EAAE,cAAc,CAAC,KAAK;gBAC9B,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;QACL,QAAQ;QACR,eAAe,EAAE,cAAc,CAAC,QAAQ;KACzC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,YAA0B,EAC1B,UAAsB;IAEtB,UAAU,CAAC,SAAS,CAClB,cAAc,CAAC,aAAa,EAC5B,CAAC,OAAqB,EAAE,EAAE;QACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAElC,YAAY,CAAC,OAAO,CAAC;YACnB,QAAQ;YACR,QAAQ,EAAE,cAAc,CAAC,KAAK;YAC9B,kDAAkD;YAClD,gEAAgE;YAChE,uEAAuE;YACvE,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;IACL,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/src/policy/config.test.js

@@ -5,7 +5,7 @@
  */
 import { describe, it, expect, vi, afterEach, beforeEach } from 'vitest';
 import nodePath from 'node:path';
-import { ApprovalMode, PolicyDecision } from './types.js';
+import { ApprovalMode, PolicyDecision, InProcessCheckerType } from './types.js';
 import { Storage } from '../config/storage.js';
 afterEach(() => {
     vi.clearAllMocks();
@@ -400,6 +400,123 @@ priority = 150
         expect(rule?.argsPattern?.test('{"command":"git push"}')).toBe(false);
         vi.doUnmock('node:fs/promises');
     });
+    it('should load safety_checker configuration from TOML', async () => {
+        const actualFs = await vi.importActual('node:fs/promises');
+        const mockReaddir = vi.fn(async (path, options) => {
+            if (typeof path === 'string' &&
+                nodePath
+                    .normalize(path)
+                    .includes(nodePath.normalize('.gemini/policies'))) {
+                return [
+                    {
+                        name: 'safety.toml',
+                        isFile: () => true,
+                        isDirectory: () => false,
+                    },
+                ];
+            }
+            return actualFs.readdir(path, options);
+        });
+        const mockReadFile = vi.fn(async (path, options) => {
+            if (typeof path === 'string' &&
+                nodePath
+                    .normalize(path)
+                    .includes(nodePath.normalize('.gemini/policies/safety.toml'))) {
+                return `
+[[rule]]
+toolName = "write_file"
+decision = "allow"
+priority = 10
+
+[[rule]]
+toolName = "write_file"
+decision = "allow"
+priority = 10
+
+[[safety_checker]]
+toolName = "write_file"
+priority = 10
+[safety_checker.checker]
+type = "in-process"
+name = "allowed-path"
+required_context = ["environment"]
+[safety_checker.checker.config]
+`;
+            }
+            return actualFs.readFile(path, options);
+        });
+        vi.doMock('node:fs/promises', () => ({
+            ...actualFs,
+            default: { ...actualFs, readFile: mockReadFile, readdir: mockReaddir },
+            readFile: mockReadFile,
+            readdir: mockReaddir,
+        }));
+        vi.resetModules();
+        const { createPolicyEngineConfig } = await import('./config.js');
+        const settings = {};
+        const config = await createPolicyEngineConfig(settings, ApprovalMode.DEFAULT, '/tmp/mock/default/policies');
+        const rule = config.rules?.find((r) => r.toolName === 'write_file' && r.decision === PolicyDecision.ALLOW);
+        expect(rule).toBeDefined();
+        const checker = config.checkers?.find((c) => c.toolName === 'write_file' && c.checker.type === 'in-process');
+        expect(checker).toBeDefined();
+        expect(checker?.checker.type).toBe('in-process');
+        expect(checker?.checker.name).toBe(InProcessCheckerType.ALLOWED_PATH);
+        expect(checker?.checker.required_context).toEqual(['environment']);
+        vi.doUnmock('node:fs/promises');
+    });
+    it('should reject invalid in-process checker names', async () => {
+        const actualFs = await vi.importActual('node:fs/promises');
+        const mockReaddir = vi.fn(async (path, options) => {
+            if (typeof path === 'string' &&
+                nodePath
+                    .normalize(path)
+                    .includes(nodePath.normalize('.gemini/policies'))) {
+                return [
+                    {
+                        name: 'invalid_safety.toml',
+                        isFile: () => true,
+                        isDirectory: () => false,
+                    },
+                ];
+            }
+            return actualFs.readdir(path, options);
+        });
+        const mockReadFile = vi.fn(async (path, options) => {
+            if (typeof path === 'string' &&
+                nodePath
+                    .normalize(path)
+                    .includes(nodePath.normalize('.gemini/policies/invalid_safety.toml'))) {
+                return `
+[[rule]]
+toolName = "write_file"
+decision = "allow"
+priority = 10
+
+[[safety_checker]]
+toolName = "write_file"
+priority = 10
+[safety_checker.checker]
+type = "in-process"
+name = "invalid-name"
+`;
+            }
+            return actualFs.readFile(path, options);
+        });
+        vi.doMock('node:fs/promises', () => ({
+            ...actualFs,
+            default: { ...actualFs, readFile: mockReadFile, readdir: mockReaddir },
+            readFile: mockReadFile,
+            readdir: mockReaddir,
+        }));
+        vi.resetModules();
+        const { createPolicyEngineConfig } = await import('./config.js');
+        const settings = {};
+        const config = await createPolicyEngineConfig(settings, ApprovalMode.DEFAULT, '/tmp/mock/default/policies');
+        // The rule should be rejected because 'invalid-name' is not in the enum
+        const rule = config.rules?.find((r) => r.toolName === 'write_file');
+        expect(rule).toBeUndefined();
+        vi.doUnmock('node:fs/promises');
+    });
     it('should have default ASK_USER rule for discovered tools', async () => {
         vi.resetModules();
         vi.doUnmock('node:fs/promises');