@google/gemini-cli-core 0.22.0 → 0.22.1

package/dist/src/policy/shell-safety.test.js

@@ -1,74 +0,0 @@
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */
-import { describe, it, expect, beforeEach } from 'vitest';
-import { PolicyEngine } from './policy-engine.js';
-import { PolicyDecision } from './types.js';
-describe('Shell Safety Policy', () => {
-    let policyEngine;
-    beforeEach(() => {
-        policyEngine = new PolicyEngine({
-            rules: [
-                {
-                    toolName: 'run_shell_command',
-                    // Mimic the regex generated by toml-loader for commandPrefix = ["git log"]
-                    // Regex: "command":"git log(?:[\s"]|$)
-                    argsPattern: /"command":"git log(?:[\s"]|$)/,
-                    decision: PolicyDecision.ALLOW,
-                    priority: 1.01, // Higher priority than default
-                },
-            ],
-            defaultDecision: PolicyDecision.ASK_USER,
-        });
-    });
-    it('SHOULD match "git log" exactly', async () => {
-        const toolCall = {
-            name: 'run_shell_command',
-            args: { command: 'git log' },
-        };
-        const result = await policyEngine.check(toolCall, undefined);
-        expect(result.decision).toBe(PolicyDecision.ALLOW);
-    });
-    it('SHOULD match "git log" with arguments', async () => {
-        const toolCall = {
-            name: 'run_shell_command',
-            args: { command: 'git log --oneline' },
-        };
-        const result = await policyEngine.check(toolCall, undefined);
-        expect(result.decision).toBe(PolicyDecision.ALLOW);
-    });
-    it('SHOULD NOT match "git logout" when prefix is "git log" (strict word boundary)', async () => {
-        const toolCall = {
-            name: 'run_shell_command',
-            args: { command: 'git logout' },
-        };
-        // Desired behavior: Should NOT match "git log" prefix.
-        // If it doesn't match, it should fall back to default decision (ASK_USER).
-        const result = await policyEngine.check(toolCall, undefined);
-        expect(result.decision).toBe(PolicyDecision.ASK_USER);
-    });
-    it('SHOULD NOT allow "git log && rm -rf /" completely when prefix is "git log" (compound command safety)', async () => {
-        const toolCall = {
-            name: 'run_shell_command',
-            args: { command: 'git log && rm -rf /' },
-        };
-        // Desired behavior: Should inspect all parts. "rm -rf /" is not allowed.
-        // The "git log" part is ALLOW, but "rm -rf /" is ASK_USER (default).
-        // Aggregate should be ASK_USER.
-        const result = await policyEngine.check(toolCall, undefined);
-        expect(result.decision).toBe(PolicyDecision.ASK_USER);
-    });
-    it('SHOULD NOT allow "git log &&& rm -rf /" when prefix is "git log" (parse failure)', async () => {
-        const toolCall = {
-            name: 'run_shell_command',
-            args: { command: 'git log &&& rm -rf /' },
-        };
-        // Desired behavior: Should fail safe (ASK_USER or DENY) because parsing failed.
-        // If we let it pass as "single command" that matches prefix, it's dangerous.
-        const result = await policyEngine.check(toolCall, undefined);
-        expect(result.decision).toBe(PolicyDecision.ASK_USER);
-    });
-});
-//# sourceMappingURL=shell-safety.test.js.map

package/dist/src/policy/shell-safety.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shell-safety.test.js","sourceRoot":"","sources":["../../../src/policy/shell-safety.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG5C,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAI,YAA0B,CAAC;IAE/B,UAAU,CAAC,GAAG,EAAE;QACd,YAAY,GAAG,IAAI,YAAY,CAAC;YAC9B,KAAK,EAAE;gBACL;oBACE,QAAQ,EAAE,mBAAmB;oBAC7B,2EAA2E;oBAC3E,uCAAuC;oBACvC,WAAW,EAAE,+BAA+B;oBAC5C,QAAQ,EAAE,cAAc,CAAC,KAAK;oBAC9B,QAAQ,EAAE,IAAI,EAAE,+BAA+B;iBAChD;aACF;YACD,eAAe,EAAE,cAAc,CAAC,QAAQ;SACzC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,QAAQ,GAAiB;YAC7B,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE;SAC7B,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,QAAQ,GAAiB;YAC7B,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE;SACvC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,QAAQ,GAAiB;YAC7B,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE;SAChC,CAAC;QAEF,uDAAuD;QACvD,2EAA2E;QAC3E,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sGAAsG,EAAE,KAAK,IAAI,EAAE;QACpH,MAAM,QAAQ,GAAiB;YAC7B,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAE;SACzC,CAAC;QAEF,yEAAyE;QACzE,qEAAqE;QACrE,gCAAgC;QAChC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,QAAQ,GAAiB;YAC7B,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;SAC1C,CAAC;QAEF,gFAAgF;QAChF,6EAA6E;QAC7E,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/services/test-data/resolved-aliases-retry.golden.json

@@ -1,238 +0,0 @@
-{
-  "base": {
-    "generateContentConfig": {
-      "temperature": 0,
-      "topP": 1
-    }
-  },
-  "chat-base": {
-    "generateContentConfig": {
-      "temperature": 1,
-      "topP": 0.95,
-      "thinkingConfig": {
-        "includeThoughts": true
-      },
-      "topK": 64
-    }
-  },
-  "chat-base-2.5": {
-    "generateContentConfig": {
-      "temperature": 1,
-      "topP": 0.95,
-      "thinkingConfig": {
-        "includeThoughts": true,
-        "thinkingBudget": 8192
-      },
-      "topK": 64
-    }
-  },
-  "chat-base-3": {
-    "generateContentConfig": {
-      "temperature": 1,
-      "topP": 0.95,
-      "thinkingConfig": {
-        "includeThoughts": true,
-        "thinkingLevel": "HIGH"
-      },
-      "topK": 64
-    }
-  },
-  "gemini-3-pro-preview": {
-    "model": "gemini-3-pro-preview",
-    "generateContentConfig": {
-      "temperature": 1,
-      "topP": 0.95,
-      "thinkingConfig": {
-        "includeThoughts": true,
-        "thinkingLevel": "HIGH"
-      },
-      "topK": 64
-    }
-  },
-  "gemini-3-flash-preview": {
-    "model": "gemini-3-flash-preview",
-    "generateContentConfig": {
-      "temperature": 1,
-      "topP": 0.95,
-      "thinkingConfig": {
-        "includeThoughts": true,
-        "thinkingLevel": "HIGH"
-      },
-      "topK": 64
-    }
-  },
-  "gemini-2.5-pro": {
-    "model": "gemini-2.5-pro",
-    "generateContentConfig": {
-      "temperature": 1,
-      "topP": 0.95,
-      "thinkingConfig": {
-        "includeThoughts": true,
-        "thinkingBudget": 8192
-      },
-      "topK": 64
-    }
-  },
-  "gemini-2.5-flash": {
-    "model": "gemini-2.5-flash",
-    "generateContentConfig": {
-      "temperature": 1,
-      "topP": 0.95,
-      "thinkingConfig": {
-        "includeThoughts": true,
-        "thinkingBudget": 8192
-      },
-      "topK": 64
-    }
-  },
-  "gemini-2.5-flash-lite": {
-    "model": "gemini-2.5-flash-lite",
-    "generateContentConfig": {
-      "temperature": 1,
-      "topP": 0.95,
-      "thinkingConfig": {
-        "includeThoughts": true,
-        "thinkingBudget": 8192
-      },
-      "topK": 64
-    }
-  },
-  "gemini-2.5-flash-base": {
-    "model": "gemini-2.5-flash",
-    "generateContentConfig": {
-      "temperature": 0,
-      "topP": 1
-    }
-  },
-  "classifier": {
-    "model": "gemini-2.5-flash-lite",
-    "generateContentConfig": {
-      "temperature": 0,
-      "topP": 1,
-      "maxOutputTokens": 1024,
-      "thinkingConfig": {
-        "thinkingBudget": 512
-      }
-    }
-  },
-  "prompt-completion": {
-    "model": "gemini-2.5-flash-lite",
-    "generateContentConfig": {
-      "temperature": 0.3,
-      "topP": 1,
-      "maxOutputTokens": 16000,
-      "thinkingConfig": {
-        "thinkingBudget": 0
-      }
-    }
-  },
-  "edit-corrector": {
-    "model": "gemini-2.5-flash-lite",
-    "generateContentConfig": {
-      "temperature": 0,
-      "topP": 1,
-      "thinkingConfig": {
-        "thinkingBudget": 0
-      }
-    }
-  },
-  "summarizer-default": {
-    "model": "gemini-2.5-flash-lite",
-    "generateContentConfig": {
-      "temperature": 0,
-      "topP": 1,
-      "maxOutputTokens": 2000
-    }
-  },
-  "summarizer-shell": {
-    "model": "gemini-2.5-flash-lite",
-    "generateContentConfig": {
-      "temperature": 0,
-      "topP": 1,
-      "maxOutputTokens": 2000
-    }
-  },
-  "web-search": {
-    "model": "gemini-2.5-flash",
-    "generateContentConfig": {
-      "temperature": 0,
-      "topP": 1,
-      "tools": [
-        {
-          "googleSearch": {}
-        }
-      ]
-    }
-  },
-  "web-fetch": {
-    "model": "gemini-2.5-flash",
-    "generateContentConfig": {
-      "temperature": 0,
-      "topP": 1,
-      "tools": [
-        {
-          "urlContext": {}
-        }
-      ]
-    }
-  },
-  "web-fetch-fallback": {
-    "model": "gemini-2.5-flash",
-    "generateContentConfig": {
-      "temperature": 0,
-      "topP": 1
-    }
-  },
-  "loop-detection": {
-    "model": "gemini-2.5-flash",
-    "generateContentConfig": {
-      "temperature": 0,
-      "topP": 1
-    }
-  },
-  "loop-detection-double-check": {
-    "model": "gemini-2.5-pro",
-    "generateContentConfig": {
-      "temperature": 0,
-      "topP": 1
-    }
-  },
-  "llm-edit-fixer": {
-    "model": "gemini-2.5-flash",
-    "generateContentConfig": {
-      "temperature": 0,
-      "topP": 1
-    }
-  },
-  "next-speaker-checker": {
-    "model": "gemini-2.5-flash",
-    "generateContentConfig": {
-      "temperature": 0,
-      "topP": 1
-    }
-  },
-  "chat-compression-3-pro": {
-    "model": "gemini-3-pro-preview",
-    "generateContentConfig": {}
-  },
-  "chat-compression-3-flash": {
-    "model": "gemini-3-flash-preview",
-    "generateContentConfig": {}
-  },
-  "chat-compression-2.5-pro": {
-    "model": "gemini-2.5-pro",
-    "generateContentConfig": {}
-  },
-  "chat-compression-2.5-flash": {
-    "model": "gemini-2.5-flash",
-    "generateContentConfig": {}
-  },
-  "chat-compression-2.5-flash-lite": {
-    "model": "gemini-2.5-flash-lite",
-    "generateContentConfig": {}
-  },
-  "chat-compression-default": {
-    "model": "gemini-2.5-pro",
-    "generateContentConfig": {}
-  }
-}

package/dist/src/utils/shell-permissions.d.ts

@@ -1,52 +0,0 @@
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */
-import type { AnyToolInvocation } from '../index.js';
-import type { Config } from '../config/config.js';
-/**
- * Checks a shell command against security policies and allowlists.
- *
- * This function operates in one of two modes depending on the presence of
- * the `sessionAllowlist` parameter:
- *
- * 1.  **"Default Deny" Mode (sessionAllowlist is provided):** This is the
- *     strictest mode, used for user-defined scripts like custom commands.
- *     A command is only permitted if it is found on the global `coreTools`
- *     allowlist OR the provided `sessionAllowlist`. It must not be on the
- *     global `excludeTools` blocklist.
- *
- * 2.  **"Default Allow" Mode (sessionAllowlist is NOT provided):** This mode
- *     is used for direct tool invocations (e.g., by the model). If a strict
- *     global `coreTools` allowlist exists, commands must be on it. Otherwise,
- *     any command is permitted as long as it is not on the `excludeTools`
- *     blocklist.
- *
- * @param command The shell command string to validate.
- * @param config The application configuration.
- * @param sessionAllowlist A session-level list of approved commands. Its
- *   presence activates "Default Deny" mode.
- * @returns An object detailing which commands are not allowed.
- */
-export declare function checkCommandPermissions(command: string, config: Config, sessionAllowlist?: Set<string>): {
-    allAllowed: boolean;
-    disallowedCommands: string[];
-    blockReason?: string;
-    isHardDenial?: boolean;
-};
-export declare function isCommandAllowed(command: string, config: Config): {
-    allowed: boolean;
-    reason?: string;
-};
-/**
- * Determines whether a shell invocation should be auto-approved based on an allowlist.
- *
- * This reuses the same parsing logic as command-permission enforcement so that
- * chained commands must be individually covered by the allowlist.
- *
- * @param invocation The shell tool invocation being evaluated.
- * @param allowedPatterns The configured allowlist patterns (e.g. `run_shell_command(git)`).
- * @returns True if every parsed command segment is allowed by the patterns; false otherwise.
- */
-export declare function isShellInvocationAllowlisted(invocation: AnyToolInvocation, allowedPatterns: string[]): boolean;

package/dist/src/utils/shell-permissions.js

@@ -1,188 +0,0 @@
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */
-import { doesToolInvocationMatch } from './tool-utils.js';
-import { parseCommandDetails, SHELL_TOOL_NAMES, } from './shell-utils.js';
-/**
- * Checks a shell command against security policies and allowlists.
- *
- * This function operates in one of two modes depending on the presence of
- * the `sessionAllowlist` parameter:
- *
- * 1.  **"Default Deny" Mode (sessionAllowlist is provided):** This is the
- *     strictest mode, used for user-defined scripts like custom commands.
- *     A command is only permitted if it is found on the global `coreTools`
- *     allowlist OR the provided `sessionAllowlist`. It must not be on the
- *     global `excludeTools` blocklist.
- *
- * 2.  **"Default Allow" Mode (sessionAllowlist is NOT provided):** This mode
- *     is used for direct tool invocations (e.g., by the model). If a strict
- *     global `coreTools` allowlist exists, commands must be on it. Otherwise,
- *     any command is permitted as long as it is not on the `excludeTools`
- *     blocklist.
- *
- * @param command The shell command string to validate.
- * @param config The application configuration.
- * @param sessionAllowlist A session-level list of approved commands. Its
- *   presence activates "Default Deny" mode.
- * @returns An object detailing which commands are not allowed.
- */
-export function checkCommandPermissions(command, config, sessionAllowlist) {
-    const parseResult = parseCommandDetails(command);
-    if (!parseResult || parseResult.hasError) {
-        return {
-            allAllowed: false,
-            disallowedCommands: [command],
-            blockReason: 'Command rejected because it could not be parsed safely',
-            isHardDenial: true,
-        };
-    }
-    const normalize = (cmd) => cmd.trim().replace(/\s+/g, ' ');
-    const commandsToValidate = parseResult.details
-        .map((detail) => normalize(detail.text))
-        .filter(Boolean);
-    const invocation = {
-        params: { command: '' },
-    };
-    // 1. Blocklist Check (Highest Priority)
-    const excludeTools = config.getExcludeTools() || new Set([]);
-    const isWildcardBlocked = SHELL_TOOL_NAMES.some((name) => excludeTools.has(name));
-    if (isWildcardBlocked) {
-        return {
-            allAllowed: false,
-            disallowedCommands: commandsToValidate,
-            blockReason: 'Shell tool is globally disabled in configuration',
-            isHardDenial: true,
-        };
-    }
-    for (const cmd of commandsToValidate) {
-        invocation.params['command'] = cmd;
-        if (doesToolInvocationMatch('run_shell_command', invocation, [
-            ...excludeTools,
-        ])) {
-            return {
-                allAllowed: false,
-                disallowedCommands: [cmd],
-                blockReason: `Command '${cmd}' is blocked by configuration`,
-                isHardDenial: true,
-            };
-        }
-    }
-    const coreTools = config.getCoreTools() || [];
-    const isWildcardAllowed = SHELL_TOOL_NAMES.some((name) => coreTools.includes(name));
-    // If there's a global wildcard, all commands are allowed at this point
-    // because they have already passed the blocklist check.
-    if (isWildcardAllowed) {
-        return { allAllowed: true, disallowedCommands: [] };
-    }
-    const disallowedCommands = [];
-    if (sessionAllowlist) {
-        // "DEFAULT DENY" MODE: A session allowlist is provided.
-        // All commands must be in either the session or global allowlist.
-        const normalizedSessionAllowlist = new Set([...sessionAllowlist].flatMap((cmd) => SHELL_TOOL_NAMES.map((name) => `${name}(${cmd})`)));
-        for (const cmd of commandsToValidate) {
-            invocation.params['command'] = cmd;
-            const isSessionAllowed = doesToolInvocationMatch('run_shell_command', invocation, [...normalizedSessionAllowlist]);
-            if (isSessionAllowed)
-                continue;
-            const isGloballyAllowed = doesToolInvocationMatch('run_shell_command', invocation, coreTools);
-            if (isGloballyAllowed)
-                continue;
-            disallowedCommands.push(cmd);
-        }
-        if (disallowedCommands.length > 0) {
-            return {
-                allAllowed: false,
-                disallowedCommands,
-                blockReason: `Command(s) not on the global or session allowlist. Disallowed commands: ${disallowedCommands
-                    .map((c) => JSON.stringify(c))
-                    .join(', ')}`,
-                isHardDenial: false, // This is a soft denial; confirmation is possible.
-            };
-        }
-    }
-    else {
-        // "DEFAULT ALLOW" MODE: No session allowlist.
-        const hasSpecificAllowedCommands = coreTools.filter((tool) => SHELL_TOOL_NAMES.some((name) => tool.startsWith(`${name}(`))).length > 0;
-        if (hasSpecificAllowedCommands) {
-            for (const cmd of commandsToValidate) {
-                invocation.params['command'] = cmd;
-                const isGloballyAllowed = doesToolInvocationMatch('run_shell_command', invocation, coreTools);
-                if (!isGloballyAllowed) {
-                    disallowedCommands.push(cmd);
-                }
-            }
-            if (disallowedCommands.length > 0) {
-                return {
-                    allAllowed: false,
-                    disallowedCommands,
-                    blockReason: `Command(s) not in the allowed commands list. Disallowed commands: ${disallowedCommands
-                        .map((c) => JSON.stringify(c))
-                        .join(', ')}`,
-                    isHardDenial: false,
-                };
-            }
-        }
-        // If no specific global allowlist exists, and it passed the blocklist,
-        // the command is allowed by default.
-    }
-    // If all checks for the current mode pass, the command is allowed.
-    return { allAllowed: true, disallowedCommands: [] };
-}
-export function isCommandAllowed(command, config) {
-    // By not providing a sessionAllowlist, we invoke "default allow" behavior.
-    const { allAllowed, blockReason } = checkCommandPermissions(command, config);
-    if (allAllowed) {
-        return { allowed: true };
-    }
-    return { allowed: false, reason: blockReason };
-}
-/**
- * Determines whether a shell invocation should be auto-approved based on an allowlist.
- *
- * This reuses the same parsing logic as command-permission enforcement so that
- * chained commands must be individually covered by the allowlist.
- *
- * @param invocation The shell tool invocation being evaluated.
- * @param allowedPatterns The configured allowlist patterns (e.g. `run_shell_command(git)`).
- * @returns True if every parsed command segment is allowed by the patterns; false otherwise.
- */
-export function isShellInvocationAllowlisted(invocation, allowedPatterns) {
-    if (!allowedPatterns.length) {
-        return false;
-    }
-    const hasShellWildcard = allowedPatterns.some((pattern) => SHELL_TOOL_NAMES.includes(pattern));
-    const hasShellSpecificPattern = allowedPatterns.some((pattern) => SHELL_TOOL_NAMES.some((name) => pattern.startsWith(`${name}(`)));
-    if (!hasShellWildcard && !hasShellSpecificPattern) {
-        return false;
-    }
-    if (hasShellWildcard) {
-        return true;
-    }
-    if (!('params' in invocation) ||
-        typeof invocation.params !== 'object' ||
-        invocation.params === null ||
-        !('command' in invocation.params)) {
-        return false;
-    }
-    const commandValue = invocation.params.command;
-    if (typeof commandValue !== 'string' || !commandValue.trim()) {
-        return false;
-    }
-    const command = commandValue.trim();
-    const parseResult = parseCommandDetails(command);
-    if (!parseResult || parseResult.hasError) {
-        return false;
-    }
-    const normalize = (cmd) => cmd.trim().replace(/\s+/g, ' ');
-    const commandsToValidate = parseResult.details
-        .map((detail) => normalize(detail.text))
-        .filter(Boolean);
-    if (commandsToValidate.length === 0) {
-        return false;
-    }
-    return commandsToValidate.every((commandSegment) => doesToolInvocationMatch(SHELL_TOOL_NAMES[0], { params: { command: commandSegment } }, allowedPatterns));
-}
-//# sourceMappingURL=shell-permissions.js.map

package/dist/src/utils/shell-permissions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shell-permissions.js","sourceRoot":"","sources":["../../../src/utils/shell-permissions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EACL,mBAAmB,EACnB,gBAAgB,GAEjB,MAAM,kBAAkB,CAAC;AAE1B;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,uBAAuB,CACrC,OAAe,EACf,MAAc,EACd,gBAA8B;IAO9B,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,kBAAkB,EAAE,CAAC,OAAO,CAAC;YAC7B,WAAW,EAAE,wDAAwD;YACrE,YAAY,EAAE,IAAI;SACnB,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3E,MAAM,kBAAkB,GAAG,WAAW,CAAC,OAAO;SAC3C,GAAG,CAAC,CAAC,MAA2B,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;SAC5D,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,UAAU,GAAwD;QACtE,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;KAC+B,CAAC;IAEzD,wCAAwC;IACxC,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,EAAE,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7D,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACvD,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CACvB,CAAC;IAEF,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO;YACL,UAAU,EAAE,KAAK;YACjB,kBAAkB,EAAE,kBAAkB;YACtC,WAAW,EAAE,kDAAkD;YAC/D,YAAY,EAAE,IAAI;SACnB,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACrC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;QACnC,IACE,uBAAuB,CAAC,mBAAmB,EAAE,UAAU,EAAE;YACvD,GAAG,YAAY;SAChB,CAAC,EACF,CAAC;YACD,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,kBAAkB,EAAE,CAAC,GAAG,CAAC;gBACzB,WAAW,EAAE,YAAY,GAAG,+BAA+B;gBAC3D,YAAY,EAAE,IAAI;aACnB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;IAC9C,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACvD,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CACzB,CAAC;IAEF,uEAAuE;IACvE,wDAAwD;IACxD,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,kBAAkB,GAAa,EAAE,CAAC;IAExC,IAAI,gBAAgB,EAAE,CAAC;QACrB,wDAAwD;QACxD,kEAAkE;QAClE,MAAM,0BAA0B,GAAG,IAAI,GAAG,CACxC,CAAC,GAAG,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACpC,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,GAAG,GAAG,CAAC,CAClD,CACF,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACrC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;YACnC,MAAM,gBAAgB,GAAG,uBAAuB,CAC9C,mBAAmB,EACnB,UAAU,EACV,CAAC,GAAG,0BAA0B,CAAC,CAChC,CAAC;YACF,IAAI,gBAAgB;gBAAE,SAAS;YAE/B,MAAM,iBAAiB,GAAG,uBAAuB,CAC/C,mBAAmB,EACnB,UAAU,EACV,SAAS,CACV,CAAC;YACF,IAAI,iBAAiB;gBAAE,SAAS;YAEhC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QAED,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,kBAAkB;gBAClB,WAAW,EAAE,2EAA2E,kBAAkB;qBACvG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;qBAC7B,IAAI,CAAC,IAAI,CAAC,EAAE;gBACf,YAAY,EAAE,KAAK,EAAE,mDAAmD;aACzE,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,8CAA8C;QAC9C,MAAM,0BAA0B,GAC9B,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACxB,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAC7D,CAAC,MAAM,GAAG,CAAC,CAAC;QAEf,IAAI,0BAA0B,EAAE,CAAC;YAC/B,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;gBACrC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC;gBACnC,MAAM,iBAAiB,GAAG,uBAAuB,CAC/C,mBAAmB,EACnB,UAAU,EACV,SAAS,CACV,CAAC;gBACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACvB,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YACD,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAClC,OAAO;oBACL,UAAU,EAAE,KAAK;oBACjB,kBAAkB;oBAClB,WAAW,EAAE,qEAAqE,kBAAkB;yBACjG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;yBAC7B,IAAI,CAAC,IAAI,CAAC,EAAE;oBACf,YAAY,EAAE,KAAK;iBACpB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,uEAAuE;QACvE,qCAAqC;IACvC,CAAC;IAED,mEAAmE;IACnE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,MAAc;IAEd,2EAA2E;IAC3E,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7E,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACjD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,4BAA4B,CAC1C,UAA6B,EAC7B,eAAyB;IAEzB,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,gBAAgB,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CACxD,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,CACnC,CAAC;IACF,MAAM,uBAAuB,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAC/D,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAChE,CAAC;IAEF,IAAI,CAAC,gBAAgB,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,CAAC,CAAC,QAAQ,IAAI,UAAU,CAAC;QACzB,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ;QACrC,UAAU,CAAC,MAAM,KAAK,IAAI;QAC1B,CAAC,CAAC,SAAS,IAAI,UAAU,CAAC,MAAM,CAAC,EACjC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,YAAY,GAAI,UAAU,CAAC,MAAgC,CAAC,OAAO,CAAC;IAC1E,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IAEpC,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3E,MAAM,kBAAkB,GAAG,WAAW,CAAC,OAAO;SAC3C,GAAG,CAAC,CAAC,MAA2B,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;SAC5D,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnB,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,cAAsB,EAAE,EAAE,CACzD,uBAAuB,CACrB,gBAAgB,CAAC,CAAC,CAAC,EACnB,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,EAAuB,EAC5D,eAAe,CAChB,CACF,CAAC;AACJ,CAAC"}

package/dist/src/utils/shell-permissions.test.d.ts

@@ -1,6 +0,0 @@
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */
-export {};