@google/gemini-cli 0.0.88 → 0.0.89

package/dist/src/config/extensions/update.test.js

@@ -0,0 +1,292 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { vi } from 'vitest';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { EXTENSIONS_CONFIG_FILENAME, INSTALL_METADATA_FILENAME, annotateActiveExtensions, loadExtension, } from '../extension.js';
+import { checkForAllExtensionUpdates, updateExtension } from './update.js';
+import { GEMINI_DIR } from '@google/gemini-cli-core';
+import { isWorkspaceTrusted } from '../trustedFolders.js';
+import { ExtensionUpdateState } from '../../ui/state/extensions.js';
+import { createExtension } from '../../test-utils/createExtension.js';
+const mockGit = {
+    clone: vi.fn(),
+    getRemotes: vi.fn(),
+    fetch: vi.fn(),
+    checkout: vi.fn(),
+    listRemote: vi.fn(),
+    revparse: vi.fn(),
+    // Not a part of the actual API, but we need to use this to do the correct
+    // file system interactions.
+    path: vi.fn(),
+};
+vi.mock('simple-git', () => ({
+    simpleGit: vi.fn((path) => {
+        mockGit.path.mockReturnValue(path);
+        return mockGit;
+    }),
+}));
+vi.mock('os', async (importOriginal) => {
+    const mockedOs = await importOriginal();
+    return {
+        ...mockedOs,
+        homedir: vi.fn(),
+    };
+});
+vi.mock('../trustedFolders.js', async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        isWorkspaceTrusted: vi.fn(),
+    };
+});
+vi.mock('@google/gemini-cli-core', async (importOriginal) => {
+    const actual = await importOriginal();
+    const mockLogExtensionInstallEvent = vi.fn();
+    const mockLogExtensionUninstallEvent = vi.fn();
+    return {
+        ...actual,
+        ClearcutLogger: {
+            getInstance: vi.fn(() => ({
+                logExtensionInstallEvent: mockLogExtensionInstallEvent,
+                logExtensionUninstallEvent: mockLogExtensionUninstallEvent,
+            })),
+        },
+        Config: vi.fn(),
+        ExtensionInstallEvent: vi.fn(),
+        ExtensionUninstallEvent: vi.fn(),
+    };
+});
+describe('update tests', () => {
+    let tempHomeDir;
+    let tempWorkspaceDir;
+    let userExtensionsDir;
+    beforeEach(() => {
+        tempHomeDir = fs.mkdtempSync(path.join(os.tmpdir(), 'gemini-cli-test-home-'));
+        tempWorkspaceDir = fs.mkdtempSync(path.join(tempHomeDir, 'gemini-cli-test-workspace-'));
+        vi.mocked(os.homedir).mockReturnValue(tempHomeDir);
+        userExtensionsDir = path.join(tempHomeDir, GEMINI_DIR, 'extensions');
+        // Clean up before each test
+        fs.rmSync(userExtensionsDir, { recursive: true, force: true });
+        fs.mkdirSync(userExtensionsDir, { recursive: true });
+        vi.mocked(isWorkspaceTrusted).mockReturnValue(true);
+        vi.spyOn(process, 'cwd').mockReturnValue(tempWorkspaceDir);
+        Object.values(mockGit).forEach((fn) => fn.mockReset());
+    });
+    afterEach(() => {
+        fs.rmSync(tempHomeDir, { recursive: true, force: true });
+        fs.rmSync(tempWorkspaceDir, { recursive: true, force: true });
+    });
+    describe('updateExtension', () => {
+        it('should update a git-installed extension', async () => {
+            const gitUrl = 'https://github.com/google/gemini-extensions.git';
+            const extensionName = 'gemini-extensions';
+            const targetExtDir = path.join(userExtensionsDir, extensionName);
+            const metadataPath = path.join(targetExtDir, INSTALL_METADATA_FILENAME);
+            fs.mkdirSync(targetExtDir, { recursive: true });
+            fs.writeFileSync(path.join(targetExtDir, EXTENSIONS_CONFIG_FILENAME), JSON.stringify({ name: extensionName, version: '1.0.0' }));
+            fs.writeFileSync(metadataPath, JSON.stringify({ source: gitUrl, type: 'git' }));
+            mockGit.clone.mockImplementation(async (_, destination) => {
+                fs.mkdirSync(path.join(mockGit.path(), destination), {
+                    recursive: true,
+                });
+                fs.writeFileSync(path.join(mockGit.path(), destination, EXTENSIONS_CONFIG_FILENAME), JSON.stringify({ name: extensionName, version: '1.1.0' }));
+            });
+            mockGit.getRemotes.mockResolvedValue([{ name: 'origin' }]);
+            const extension = annotateActiveExtensions([
+                loadExtension({
+                    extensionDir: targetExtDir,
+                    workspaceDir: tempWorkspaceDir,
+                }),
+            ], [], process.cwd())[0];
+            const updateInfo = await updateExtension(extension, tempHomeDir, ExtensionUpdateState.UPDATE_AVAILABLE, () => { });
+            expect(updateInfo).toEqual({
+                name: 'gemini-extensions',
+                originalVersion: '1.0.0',
+                updatedVersion: '1.1.0',
+            });
+            const updatedConfig = JSON.parse(fs.readFileSync(path.join(targetExtDir, EXTENSIONS_CONFIG_FILENAME), 'utf-8'));
+            expect(updatedConfig.version).toBe('1.1.0');
+        });
+        it('should call setExtensionUpdateState with UPDATING and then UPDATED_NEEDS_RESTART on success', async () => {
+            const extensionName = 'test-extension';
+            const extensionDir = createExtension({
+                extensionsDir: userExtensionsDir,
+                name: extensionName,
+                version: '1.0.0',
+                installMetadata: {
+                    source: 'https://some.git/repo',
+                    type: 'git',
+                },
+            });
+            mockGit.clone.mockImplementation(async (_, destination) => {
+                fs.mkdirSync(path.join(mockGit.path(), destination), {
+                    recursive: true,
+                });
+                fs.writeFileSync(path.join(mockGit.path(), destination, EXTENSIONS_CONFIG_FILENAME), JSON.stringify({ name: extensionName, version: '1.1.0' }));
+            });
+            mockGit.getRemotes.mockResolvedValue([{ name: 'origin' }]);
+            const setExtensionUpdateState = vi.fn();
+            const extension = annotateActiveExtensions([
+                loadExtension({
+                    extensionDir,
+                    workspaceDir: tempWorkspaceDir,
+                }),
+            ], [], process.cwd())[0];
+            await updateExtension(extension, tempHomeDir, ExtensionUpdateState.UPDATE_AVAILABLE, setExtensionUpdateState);
+            expect(setExtensionUpdateState).toHaveBeenCalledWith(ExtensionUpdateState.UPDATING);
+            expect(setExtensionUpdateState).toHaveBeenCalledWith(ExtensionUpdateState.UPDATED_NEEDS_RESTART);
+        });
+        it('should call setExtensionUpdateState with ERROR on failure', async () => {
+            const extensionName = 'test-extension';
+            const extensionDir = createExtension({
+                extensionsDir: userExtensionsDir,
+                name: extensionName,
+                version: '1.0.0',
+                installMetadata: {
+                    source: 'https://some.git/repo',
+                    type: 'git',
+                },
+            });
+            mockGit.clone.mockRejectedValue(new Error('Git clone failed'));
+            mockGit.getRemotes.mockResolvedValue([{ name: 'origin' }]);
+            const setExtensionUpdateState = vi.fn();
+            const extension = annotateActiveExtensions([
+                loadExtension({
+                    extensionDir,
+                    workspaceDir: tempWorkspaceDir,
+                }),
+            ], [], process.cwd())[0];
+            await expect(updateExtension(extension, tempHomeDir, ExtensionUpdateState.UPDATE_AVAILABLE, setExtensionUpdateState)).rejects.toThrow();
+            expect(setExtensionUpdateState).toHaveBeenCalledWith(ExtensionUpdateState.UPDATING);
+            expect(setExtensionUpdateState).toHaveBeenCalledWith(ExtensionUpdateState.ERROR);
+        });
+    });
+    describe('checkForAllExtensionUpdates', () => {
+        it('should return UpdateAvailable for a git extension with updates', async () => {
+            const extensionDir = createExtension({
+                extensionsDir: userExtensionsDir,
+                name: 'test-extension',
+                version: '1.0.0',
+                installMetadata: {
+                    source: 'https://some.git/repo',
+                    type: 'git',
+                },
+            });
+            const extension = annotateActiveExtensions([
+                loadExtension({
+                    extensionDir,
+                    workspaceDir: tempWorkspaceDir,
+                }),
+            ], [], process.cwd())[0];
+            mockGit.getRemotes.mockResolvedValue([
+                { name: 'origin', refs: { fetch: 'https://some.git/repo' } },
+            ]);
+            mockGit.listRemote.mockResolvedValue('remoteHash	HEAD');
+            mockGit.revparse.mockResolvedValue('localHash');
+            let extensionState = new Map();
+            const results = await checkForAllExtensionUpdates([extension], extensionState, (newState) => {
+                if (typeof newState === 'function') {
+                    newState(extensionState);
+                }
+                else {
+                    extensionState = newState;
+                }
+            });
+            const result = results.get('test-extension');
+            expect(result).toBe(ExtensionUpdateState.UPDATE_AVAILABLE);
+        });
+        it('should return UpToDate for a git extension with no updates', async () => {
+            const extensionDir = createExtension({
+                extensionsDir: userExtensionsDir,
+                name: 'test-extension',
+                version: '1.0.0',
+                installMetadata: {
+                    source: 'https://some.git/repo',
+                    type: 'git',
+                },
+            });
+            const extension = annotateActiveExtensions([
+                loadExtension({
+                    extensionDir,
+                    workspaceDir: tempWorkspaceDir,
+                }),
+            ], [], process.cwd())[0];
+            mockGit.getRemotes.mockResolvedValue([
+                { name: 'origin', refs: { fetch: 'https://some.git/repo' } },
+            ]);
+            mockGit.listRemote.mockResolvedValue('sameHash	HEAD');
+            mockGit.revparse.mockResolvedValue('sameHash');
+            let extensionState = new Map();
+            const results = await checkForAllExtensionUpdates([extension], extensionState, (newState) => {
+                if (typeof newState === 'function') {
+                    newState(extensionState);
+                }
+                else {
+                    extensionState = newState;
+                }
+            });
+            const result = results.get('test-extension');
+            expect(result).toBe(ExtensionUpdateState.UP_TO_DATE);
+        });
+        it('should return NotUpdatable for a non-git extension', async () => {
+            const extensionDir = createExtension({
+                extensionsDir: userExtensionsDir,
+                name: 'local-extension',
+                version: '1.0.0',
+                installMetadata: { source: '/local/path', type: 'local' },
+            });
+            const extension = annotateActiveExtensions([
+                loadExtension({
+                    extensionDir,
+                    workspaceDir: tempWorkspaceDir,
+                }),
+            ], [], process.cwd())[0];
+            let extensionState = new Map();
+            const results = await checkForAllExtensionUpdates([extension], extensionState, (newState) => {
+                if (typeof newState === 'function') {
+                    newState(extensionState);
+                }
+                else {
+                    extensionState = newState;
+                }
+            });
+            const result = results.get('local-extension');
+            expect(result).toBe(ExtensionUpdateState.NOT_UPDATABLE);
+        });
+        it('should return Error when git check fails', async () => {
+            const extensionDir = createExtension({
+                extensionsDir: userExtensionsDir,
+                name: 'error-extension',
+                version: '1.0.0',
+                installMetadata: {
+                    source: 'https://some.git/repo',
+                    type: 'git',
+                },
+            });
+            const extension = annotateActiveExtensions([
+                loadExtension({
+                    extensionDir,
+                    workspaceDir: tempWorkspaceDir,
+                }),
+            ], [], process.cwd())[0];
+            mockGit.getRemotes.mockRejectedValue(new Error('Git error'));
+            let extensionState = new Map();
+            const results = await checkForAllExtensionUpdates([extension], extensionState, (newState) => {
+                if (typeof newState === 'function') {
+                    newState(extensionState);
+                }
+                else {
+                    extensionState = newState;
+                }
+            });
+            const result = results.get('error-extension');
+            expect(result).toBe(ExtensionUpdateState.ERROR);
+        });
+    });
+});
+//# sourceMappingURL=update.test.js.map

package/dist/src/config/extensions/update.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.test.js","sourceRoot":"","sources":["../../../../src/config/extensions/update.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC5B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,wBAAwB,EACxB,aAAa,GACd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,2BAA2B,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAEtE,MAAM,OAAO,GAAG;IACd,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;IACd,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;IACnB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE;IACd,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;IACjB,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE;IACnB,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;IACjB,0EAA0E;IAC1E,4BAA4B;IAC5B,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;CACd,CAAC;AAEF,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3B,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,IAAY,EAAE,EAAE;QAChC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACnC,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;CACH,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrC,MAAM,QAAQ,GAAG,MAAM,cAAc,EAAa,CAAC;IACnD,OAAO;QACL,GAAG,QAAQ;QACX,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE;KACjB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACvD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAyC,CAAC;IAC7E,OAAO;QACL,GAAG,MAAM;QACT,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE;KAC5B,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IAC1D,MAAM,MAAM,GACV,MAAM,cAAc,EAA4C,CAAC;IACnE,MAAM,4BAA4B,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAC7C,MAAM,8BAA8B,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IAC/C,OAAO;QACL,GAAG,MAAM;QACT,cAAc,EAAE;YACd,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;gBACxB,wBAAwB,EAAE,4BAA4B;gBACtD,0BAA0B,EAAE,8BAA8B;aAC3D,CAAC,CAAC;SACJ;QACD,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;QACf,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC9B,uBAAuB,EAAE,EAAE,CAAC,EAAE,EAAE;KACjC,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,IAAI,WAAmB,CAAC;IACxB,IAAI,gBAAwB,CAAC;IAC7B,IAAI,iBAAyB,CAAC;IAE9B,UAAU,CAAC,GAAG,EAAE;QACd,WAAW,GAAG,EAAE,CAAC,WAAW,CAC1B,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC,CAChD,CAAC;QACF,gBAAgB,GAAG,EAAE,CAAC,WAAW,CAC/B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,4BAA4B,CAAC,CACrD,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACnD,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QACrE,4BAA4B;QAC5B,EAAE,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,EAAE,CAAC,SAAS,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACpD,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,EAAE,CAAC,MAAM,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,MAAM,GAAG,iDAAiD,CAAC;YACjE,MAAM,aAAa,GAAG,mBAAmB,CAAC;YAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;YACjE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,yBAAyB,CAAC,CAAC;YAExE,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,0BAA0B,CAAC,EACnD,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAC1D,CAAC;YACF,EAAE,CAAC,aAAa,CACd,YAAY,EACZ,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAChD,CAAC;YAEF,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE;gBACxD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,EAAE;oBACnD,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;gBACH,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,0BAA0B,CAAC,EAClE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAC1D,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC3D,MAAM,SAAS,GAAG,wBAAwB,CACxC;gBACE,aAAa,CAAC;oBACZ,YAAY,EAAE,YAAY;oBAC1B,YAAY,EAAE,gBAAgB;iBAC/B,CAAE;aACJ,EACD,EAAE,EACF,OAAO,CAAC,GAAG,EAAE,CACd,CAAC,CAAC,CAAC,CAAC;YACL,MAAM,UAAU,GAAG,MAAM,eAAe,CACtC,SAAS,EACT,WAAW,EACX,oBAAoB,CAAC,gBAAgB,EACrC,GAAG,EAAE,GAAE,CAAC,CACT,CAAC;YAEF,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC;gBACzB,IAAI,EAAE,mBAAmB;gBACzB,eAAe,EAAE,OAAO;gBACxB,cAAc,EAAE,OAAO;aACxB,CAAC,CAAC;YAEH,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAC9B,EAAE,CAAC,YAAY,CACb,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,0BAA0B,CAAC,EACnD,OAAO,CACR,CACF,CAAC;YACF,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6FAA6F,EAAE,KAAK,IAAI,EAAE;YAC3G,MAAM,aAAa,GAAG,gBAAgB,CAAC;YACvC,MAAM,YAAY,GAAG,eAAe,CAAC;gBACnC,aAAa,EAAE,iBAAiB;gBAChC,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,OAAO;gBAChB,eAAe,EAAE;oBACf,MAAM,EAAE,uBAAuB;oBAC/B,IAAI,EAAE,KAAK;iBACZ;aACF,CAAC,CAAC;YAEH,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE;gBACxD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,EAAE;oBACnD,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;gBACH,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,0BAA0B,CAAC,EAClE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAC1D,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YAE3D,MAAM,uBAAuB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAExC,MAAM,SAAS,GAAG,wBAAwB,CACxC;gBACE,aAAa,CAAC;oBACZ,YAAY;oBACZ,YAAY,EAAE,gBAAgB;iBAC/B,CAAE;aACJ,EACD,EAAE,EACF,OAAO,CAAC,GAAG,EAAE,CACd,CAAC,CAAC,CAAC,CAAC;YACL,MAAM,eAAe,CACnB,SAAS,EACT,WAAW,EACX,oBAAoB,CAAC,gBAAgB,EACrC,uBAAuB,CACxB,CAAC;YAEF,MAAM,CAAC,uBAAuB,CAAC,CAAC,oBAAoB,CAClD,oBAAoB,CAAC,QAAQ,CAC9B,CAAC;YACF,MAAM,CAAC,uBAAuB,CAAC,CAAC,oBAAoB,CAClD,oBAAoB,CAAC,qBAAqB,CAC3C,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,aAAa,GAAG,gBAAgB,CAAC;YACvC,MAAM,YAAY,GAAG,eAAe,CAAC;gBACnC,aAAa,EAAE,iBAAiB;gBAChC,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,OAAO;gBAChB,eAAe,EAAE;oBACf,MAAM,EAAE,uBAAuB;oBAC/B,IAAI,EAAE,KAAK;iBACZ;aACF,CAAC,CAAC;YAEH,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;YAC/D,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YAE3D,MAAM,uBAAuB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,wBAAwB,CACxC;gBACE,aAAa,CAAC;oBACZ,YAAY;oBACZ,YAAY,EAAE,gBAAgB;iBAC/B,CAAE;aACJ,EACD,EAAE,EACF,OAAO,CAAC,GAAG,EAAE,CACd,CAAC,CAAC,CAAC,CAAC;YACL,MAAM,MAAM,CACV,eAAe,CACb,SAAS,EACT,WAAW,EACX,oBAAoB,CAAC,gBAAgB,EACrC,uBAAuB,CACxB,CACF,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAEpB,MAAM,CAAC,uBAAuB,CAAC,CAAC,oBAAoB,CAClD,oBAAoB,CAAC,QAAQ,CAC9B,CAAC;YACF,MAAM,CAAC,uBAAuB,CAAC,CAAC,oBAAoB,CAClD,oBAAoB,CAAC,KAAK,CAC3B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,MAAM,YAAY,GAAG,eAAe,CAAC;gBACnC,aAAa,EAAE,iBAAiB;gBAChC,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,OAAO;gBAChB,eAAe,EAAE;oBACf,MAAM,EAAE,uBAAuB;oBAC/B,IAAI,EAAE,KAAK;iBACZ;aACF,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,wBAAwB,CACxC;gBACE,aAAa,CAAC;oBACZ,YAAY;oBACZ,YAAY,EAAE,gBAAgB;iBAC/B,CAAE;aACJ,EACD,EAAE,EACF,OAAO,CAAC,GAAG,EAAE,CACd,CAAC,CAAC,CAAC,CAAC;YAEL,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC;gBACnC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE;aAC7D,CAAC,CAAC;YACH,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,CAAC;YACxD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAEhD,IAAI,cAAc,GAAG,IAAI,GAAG,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAC/C,CAAC,SAAS,CAAC,EACX,cAAc,EACd,CAAC,QAAQ,EAAE,EAAE;gBACX,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;oBACnC,QAAQ,CAAC,cAAc,CAAC,CAAC;gBAC3B,CAAC;qBAAM,CAAC;oBACN,cAAc,GAAG,QAAQ,CAAC;gBAC5B,CAAC;YACH,CAAC,CACF,CAAC;YACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;YAC1E,MAAM,YAAY,GAAG,eAAe,CAAC;gBACnC,aAAa,EAAE,iBAAiB;gBAChC,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,OAAO;gBAChB,eAAe,EAAE;oBACf,MAAM,EAAE,uBAAuB;oBAC/B,IAAI,EAAE,KAAK;iBACZ;aACF,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,wBAAwB,CACxC;gBACE,aAAa,CAAC;oBACZ,YAAY;oBACZ,YAAY,EAAE,gBAAgB;iBAC/B,CAAE;aACJ,EACD,EAAE,EACF,OAAO,CAAC,GAAG,EAAE,CACd,CAAC,CAAC,CAAC,CAAC;YAEL,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC;gBACnC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE;aAC7D,CAAC,CAAC;YACH,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;YACtD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;YAE/C,IAAI,cAAc,GAAG,IAAI,GAAG,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAC/C,CAAC,SAAS,CAAC,EACX,cAAc,EACd,CAAC,QAAQ,EAAE,EAAE;gBACX,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;oBACnC,QAAQ,CAAC,cAAc,CAAC,CAAC;gBAC3B,CAAC;qBAAM,CAAC;oBACN,cAAc,GAAG,QAAQ,CAAC;gBAC5B,CAAC;YACH,CAAC,CACF,CAAC;YACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,YAAY,GAAG,eAAe,CAAC;gBACnC,aAAa,EAAE,iBAAiB;gBAChC,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,OAAO;gBAChB,eAAe,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE;aAC1D,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,wBAAwB,CACxC;gBACE,aAAa,CAAC;oBACZ,YAAY;oBACZ,YAAY,EAAE,gBAAgB;iBAC/B,CAAE;aACJ,EACD,EAAE,EACF,OAAO,CAAC,GAAG,EAAE,CACd,CAAC,CAAC,CAAC,CAAC;YACL,IAAI,cAAc,GAAG,IAAI,GAAG,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAC/C,CAAC,SAAS,CAAC,EACX,cAAc,EACd,CAAC,QAAQ,EAAE,EAAE;gBACX,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;oBACnC,QAAQ,CAAC,cAAc,CAAC,CAAC;gBAC3B,CAAC;qBAAM,CAAC;oBACN,cAAc,GAAG,QAAQ,CAAC;gBAC5B,CAAC;YACH,CAAC,CACF,CAAC;YACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,YAAY,GAAG,eAAe,CAAC;gBACnC,aAAa,EAAE,iBAAiB;gBAChC,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,OAAO;gBAChB,eAAe,EAAE;oBACf,MAAM,EAAE,uBAAuB;oBAC/B,IAAI,EAAE,KAAK;iBACZ;aACF,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,wBAAwB,CACxC;gBACE,aAAa,CAAC;oBACZ,YAAY;oBACZ,YAAY,EAAE,gBAAgB;iBAC/B,CAAE;aACJ,EACD,EAAE,EACF,OAAO,CAAC,GAAG,EAAE,CACd,CAAC,CAAC,CAAC,CAAC;YAEL,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YAE7D,IAAI,cAAc,GAAG,IAAI,GAAG,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAC/C,CAAC,SAAS,CAAC,EACX,cAAc,EACd,CAAC,QAAQ,EAAE,EAAE;gBACX,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;oBACnC,QAAQ,CAAC,cAAc,CAAC,CAAC;gBAC3B,CAAC;qBAAM,CAAC;oBACN,cAAc,GAAG,QAAQ,CAAC;gBAC5B,CAAC;YACH,CAAC,CACF,CAAC;YACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAC9C,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/config/policy-engine.integration.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/config/policy-engine.integration.test.js

@@ -0,0 +1,270 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect } from 'vitest';
+import { ApprovalMode, PolicyDecision, PolicyEngine, } from '@google/gemini-cli-core';
+import { createPolicyEngineConfig } from './policy.js';
+describe('Policy Engine Integration Tests', () => {
+    describe('Policy configuration produces valid PolicyEngine config', () => {
+        it('should create a working PolicyEngine from basic settings', () => {
+            const settings = {
+                tools: {
+                    allowed: ['run_shell_command'],
+                    exclude: ['write_file'],
+                },
+            };
+            const config = createPolicyEngineConfig(settings, ApprovalMode.DEFAULT);
+            const engine = new PolicyEngine(config);
+            // Allowed tool should be allowed
+            expect(engine.check({ name: 'run_shell_command' })).toBe(PolicyDecision.ALLOW);
+            // Excluded tool should be denied
+            expect(engine.check({ name: 'write_file' })).toBe(PolicyDecision.DENY);
+            // Other write tools should ask user
+            expect(engine.check({ name: 'replace' })).toBe(PolicyDecision.ASK_USER);
+            // Unknown tools should use default
+            expect(engine.check({ name: 'unknown_tool' })).toBe(PolicyDecision.ASK_USER);
+        });
+        it('should handle MCP server wildcard patterns correctly', () => {
+            const settings = {
+                mcp: {
+                    allowed: ['allowed-server'],
+                    excluded: ['blocked-server'],
+                },
+                mcpServers: {
+                    'trusted-server': {
+                        command: 'node',
+                        args: ['server.js'],
+                        trust: true,
+                    },
+                },
+            };
+            const config = createPolicyEngineConfig(settings, ApprovalMode.DEFAULT);
+            const engine = new PolicyEngine(config);
+            // Tools from allowed server should be allowed
+            expect(engine.check({ name: 'allowed-server__tool1' })).toBe(PolicyDecision.ALLOW);
+            expect(engine.check({ name: 'allowed-server__another_tool' })).toBe(PolicyDecision.ALLOW);
+            // Tools from trusted server should be allowed
+            expect(engine.check({ name: 'trusted-server__tool1' })).toBe(PolicyDecision.ALLOW);
+            expect(engine.check({ name: 'trusted-server__special_tool' })).toBe(PolicyDecision.ALLOW);
+            // Tools from blocked server should be denied
+            expect(engine.check({ name: 'blocked-server__tool1' })).toBe(PolicyDecision.DENY);
+            expect(engine.check({ name: 'blocked-server__any_tool' })).toBe(PolicyDecision.DENY);
+            // Tools from unknown servers should use default
+            expect(engine.check({ name: 'unknown-server__tool' })).toBe(PolicyDecision.ASK_USER);
+        });
+        it('should correctly prioritize specific tool rules over MCP server wildcards', () => {
+            const settings = {
+                mcp: {
+                    allowed: ['my-server'],
+                },
+                tools: {
+                    exclude: ['my-server__dangerous-tool'],
+                },
+            };
+            const config = createPolicyEngineConfig(settings, ApprovalMode.DEFAULT);
+            const engine = new PolicyEngine(config);
+            // Server is allowed, but specific tool is excluded
+            expect(engine.check({ name: 'my-server__safe-tool' })).toBe(PolicyDecision.ALLOW);
+            expect(engine.check({ name: 'my-server__dangerous-tool' })).toBe(PolicyDecision.DENY);
+        });
+        it('should handle complex mixed configurations', () => {
+            const settings = {
+                tools: {
+                    autoAccept: true, // Allows read-only tools
+                    allowed: ['custom-tool', 'my-server__special-tool'],
+                    exclude: ['glob', 'dangerous-tool'],
+                },
+                mcp: {
+                    allowed: ['allowed-server'],
+                    excluded: ['blocked-server'],
+                },
+                mcpServers: {
+                    'trusted-server': {
+                        command: 'node',
+                        args: ['server.js'],
+                        trust: true,
+                    },
+                },
+            };
+            const config = createPolicyEngineConfig(settings, ApprovalMode.DEFAULT);
+            const engine = new PolicyEngine(config);
+            // Read-only tools should be allowed (autoAccept)
+            expect(engine.check({ name: 'read_file' })).toBe(PolicyDecision.ALLOW);
+            expect(engine.check({ name: 'list_directory' })).toBe(PolicyDecision.ALLOW);
+            // But glob is explicitly excluded, so it should be denied
+            expect(engine.check({ name: 'glob' })).toBe(PolicyDecision.DENY);
+            // Replace should ask user (normal write tool behavior)
+            expect(engine.check({ name: 'replace' })).toBe(PolicyDecision.ASK_USER);
+            // Explicitly allowed tools
+            expect(engine.check({ name: 'custom-tool' })).toBe(PolicyDecision.ALLOW);
+            expect(engine.check({ name: 'my-server__special-tool' })).toBe(PolicyDecision.ALLOW);
+            // MCP server tools
+            expect(engine.check({ name: 'allowed-server__tool' })).toBe(PolicyDecision.ALLOW);
+            expect(engine.check({ name: 'trusted-server__tool' })).toBe(PolicyDecision.ALLOW);
+            expect(engine.check({ name: 'blocked-server__tool' })).toBe(PolicyDecision.DENY);
+            // Write tools should ask by default
+            expect(engine.check({ name: 'write_file' })).toBe(PolicyDecision.ASK_USER);
+        });
+        it('should handle YOLO mode correctly', () => {
+            const settings = {
+                tools: {
+                    exclude: ['dangerous-tool'], // Even in YOLO, excludes should be respected
+                },
+            };
+            const config = createPolicyEngineConfig(settings, ApprovalMode.YOLO);
+            const engine = new PolicyEngine(config);
+            // Most tools should be allowed in YOLO mode
+            expect(engine.check({ name: 'run_shell_command' })).toBe(PolicyDecision.ALLOW);
+            expect(engine.check({ name: 'write_file' })).toBe(PolicyDecision.ALLOW);
+            expect(engine.check({ name: 'unknown_tool' })).toBe(PolicyDecision.ALLOW);
+            // But explicitly excluded tools should still be denied
+            expect(engine.check({ name: 'dangerous-tool' })).toBe(PolicyDecision.DENY);
+        });
+        it('should handle AUTO_EDIT mode correctly', () => {
+            const settings = {};
+            const config = createPolicyEngineConfig(settings, ApprovalMode.AUTO_EDIT);
+            const engine = new PolicyEngine(config);
+            // Edit tool should be allowed (EditTool.Name = 'replace')
+            expect(engine.check({ name: 'replace' })).toBe(PolicyDecision.ALLOW);
+            // Other tools should follow normal rules
+            expect(engine.check({ name: 'run_shell_command' })).toBe(PolicyDecision.ASK_USER);
+            expect(engine.check({ name: 'write_file' })).toBe(PolicyDecision.ASK_USER);
+        });
+        it('should verify priority ordering works correctly in practice', () => {
+            const settings = {
+                tools: {
+                    autoAccept: true, // Priority 50
+                    allowed: ['specific-tool'], // Priority 100
+                    exclude: ['blocked-tool'], // Priority 200
+                },
+                mcp: {
+                    allowed: ['mcp-server'], // Priority 85
+                    excluded: ['blocked-server'], // Priority 195
+                },
+                mcpServers: {
+                    'trusted-server': {
+                        command: 'node',
+                        args: ['server.js'],
+                        trust: true, // Priority 90
+                    },
+                },
+            };
+            const config = createPolicyEngineConfig(settings, ApprovalMode.DEFAULT);
+            const engine = new PolicyEngine(config);
+            // Test that priorities are applied correctly
+            const rules = config.rules || [];
+            // Find rules and verify their priorities
+            const blockedToolRule = rules.find((r) => r.toolName === 'blocked-tool');
+            expect(blockedToolRule?.priority).toBe(200);
+            const blockedServerRule = rules.find((r) => r.toolName === 'blocked-server__*');
+            expect(blockedServerRule?.priority).toBe(195);
+            const specificToolRule = rules.find((r) => r.toolName === 'specific-tool');
+            expect(specificToolRule?.priority).toBe(100);
+            const trustedServerRule = rules.find((r) => r.toolName === 'trusted-server__*');
+            expect(trustedServerRule?.priority).toBe(90);
+            const mcpServerRule = rules.find((r) => r.toolName === 'mcp-server__*');
+            expect(mcpServerRule?.priority).toBe(85);
+            const readOnlyToolRule = rules.find((r) => r.toolName === 'glob');
+            expect(readOnlyToolRule?.priority).toBe(50);
+            // Verify the engine applies these priorities correctly
+            expect(engine.check({ name: 'blocked-tool' })).toBe(PolicyDecision.DENY);
+            expect(engine.check({ name: 'blocked-server__any' })).toBe(PolicyDecision.DENY);
+            expect(engine.check({ name: 'specific-tool' })).toBe(PolicyDecision.ALLOW);
+            expect(engine.check({ name: 'trusted-server__any' })).toBe(PolicyDecision.ALLOW);
+            expect(engine.check({ name: 'mcp-server__any' })).toBe(PolicyDecision.ALLOW);
+            expect(engine.check({ name: 'glob' })).toBe(PolicyDecision.ALLOW);
+        });
+        it('should handle edge case: MCP server with both trust and exclusion', () => {
+            const settings = {
+                mcpServers: {
+                    'conflicted-server': {
+                        command: 'node',
+                        args: ['server.js'],
+                        trust: true, // Priority 90 - ALLOW
+                    },
+                },
+                mcp: {
+                    excluded: ['conflicted-server'], // Priority 195 - DENY
+                },
+            };
+            const config = createPolicyEngineConfig(settings, ApprovalMode.DEFAULT);
+            const engine = new PolicyEngine(config);
+            // Exclusion (195) should win over trust (90)
+            expect(engine.check({ name: 'conflicted-server__tool' })).toBe(PolicyDecision.DENY);
+        });
+        it('should handle edge case: specific tool allowed but server excluded', () => {
+            const settings = {
+                mcp: {
+                    excluded: ['my-server'], // Priority 195 - DENY
+                },
+                tools: {
+                    allowed: ['my-server__special-tool'], // Priority 100 - ALLOW
+                },
+            };
+            const config = createPolicyEngineConfig(settings, ApprovalMode.DEFAULT);
+            const engine = new PolicyEngine(config);
+            // Server exclusion (195) wins over specific tool allow (100)
+            // This might be counterintuitive but follows the priority system
+            expect(engine.check({ name: 'my-server__special-tool' })).toBe(PolicyDecision.DENY);
+            expect(engine.check({ name: 'my-server__other-tool' })).toBe(PolicyDecision.DENY);
+        });
+        it('should verify non-interactive mode transformation', () => {
+            const settings = {};
+            const config = createPolicyEngineConfig(settings, ApprovalMode.DEFAULT);
+            // Enable non-interactive mode
+            const engineConfig = { ...config, nonInteractive: true };
+            const engine = new PolicyEngine(engineConfig);
+            // ASK_USER should become DENY in non-interactive mode
+            expect(engine.check({ name: 'unknown_tool' })).toBe(PolicyDecision.DENY);
+            expect(engine.check({ name: 'run_shell_command' })).toBe(PolicyDecision.DENY);
+        });
+        it('should handle empty settings gracefully', () => {
+            const settings = {};
+            const config = createPolicyEngineConfig(settings, ApprovalMode.DEFAULT);
+            const engine = new PolicyEngine(config);
+            // Should have default rules for write tools
+            expect(engine.check({ name: 'write_file' })).toBe(PolicyDecision.ASK_USER);
+            expect(engine.check({ name: 'replace' })).toBe(PolicyDecision.ASK_USER);
+            // Unknown tools should use default
+            expect(engine.check({ name: 'unknown' })).toBe(PolicyDecision.ASK_USER);
+        });
+        it('should verify rules are created with correct priorities', () => {
+            const settings = {
+                tools: {
+                    autoAccept: true,
+                    allowed: ['tool1', 'tool2'],
+                    exclude: ['tool3'],
+                },
+                mcp: {
+                    allowed: ['server1'],
+                    excluded: ['server2'],
+                },
+            };
+            const config = createPolicyEngineConfig(settings, ApprovalMode.DEFAULT);
+            const rules = config.rules || [];
+            // Verify each rule has the expected priority
+            const tool3Rule = rules.find((r) => r.toolName === 'tool3');
+            expect(tool3Rule?.priority).toBe(200); // Excluded tools
+            const server2Rule = rules.find((r) => r.toolName === 'server2__*');
+            expect(server2Rule?.priority).toBe(195); // Excluded servers
+            const tool1Rule = rules.find((r) => r.toolName === 'tool1');
+            expect(tool1Rule?.priority).toBe(100); // Allowed tools
+            const server1Rule = rules.find((r) => r.toolName === 'server1__*');
+            expect(server1Rule?.priority).toBe(85); // Allowed servers
+            const globRule = rules.find((r) => r.toolName === 'glob');
+            expect(globRule?.priority).toBe(50); // Auto-accept read-only
+            // The PolicyEngine will sort these by priority when it's created
+            const engine = new PolicyEngine(config);
+            const sortedRules = engine.getRules();
+            // Verify the engine sorted them correctly
+            for (let i = 1; i < sortedRules.length; i++) {
+                const prevPriority = sortedRules[i - 1].priority ?? 0;
+                const currPriority = sortedRules[i].priority ?? 0;
+                expect(prevPriority).toBeGreaterThanOrEqual(currPriority);
+            }
+        });
+    });
+});
+//# sourceMappingURL=policy-engine.integration.test.js.map

package/dist/src/config/policy-engine.integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.integration.test.js","sourceRoot":"","sources":["../../../src/config/policy-engine.integration.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,YAAY,EACZ,cAAc,EACd,YAAY,GACb,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAGvD,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,QAAQ,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACvE,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;YAClE,MAAM,QAAQ,GAAa;gBACzB,KAAK,EAAE;oBACL,OAAO,EAAE,CAAC,mBAAmB,CAAC;oBAC9B,OAAO,EAAE,CAAC,YAAY,CAAC;iBACxB;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAExC,iCAAiC;YACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,IAAI,CACtD,cAAc,CAAC,KAAK,CACrB,CAAC;YAEF,iCAAiC;YACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAEvE,oCAAoC;YACpC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAExE,mCAAmC;YACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,CACjD,cAAc,CAAC,QAAQ,CACxB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;YAC9D,MAAM,QAAQ,GAAa;gBACzB,GAAG,EAAE;oBACH,OAAO,EAAE,CAAC,gBAAgB,CAAC;oBAC3B,QAAQ,EAAE,CAAC,gBAAgB,CAAC;iBAC7B;gBACD,UAAU,EAAE;oBACV,gBAAgB,EAAE;wBAChB,OAAO,EAAE,MAAM;wBACf,IAAI,EAAE,CAAC,WAAW,CAAC;wBACnB,KAAK,EAAE,IAAI;qBACZ;iBACF;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAExC,8CAA8C;YAC9C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,IAAI,CAC1D,cAAc,CAAC,KAAK,CACrB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC,CAAC,CAAC,IAAI,CACjE,cAAc,CAAC,KAAK,CACrB,CAAC;YAEF,8CAA8C;YAC9C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,IAAI,CAC1D,cAAc,CAAC,KAAK,CACrB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC,CAAC,CAAC,IAAI,CACjE,cAAc,CAAC,KAAK,CACrB,CAAC;YAEF,6CAA6C;YAC7C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,IAAI,CAC1D,cAAc,CAAC,IAAI,CACpB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC,CAAC,CAAC,IAAI,CAC7D,cAAc,CAAC,IAAI,CACpB,CAAC;YAEF,gDAAgD;YAChD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,IAAI,CACzD,cAAc,CAAC,QAAQ,CACxB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;YACnF,MAAM,QAAQ,GAAa;gBACzB,GAAG,EAAE;oBACH,OAAO,EAAE,CAAC,WAAW,CAAC;iBACvB;gBACD,KAAK,EAAE;oBACL,OAAO,EAAE,CAAC,2BAA2B,CAAC;iBACvC;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAExC,mDAAmD;YACnD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,IAAI,CACzD,cAAc,CAAC,KAAK,CACrB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,IAAI,CAC9D,cAAc,CAAC,IAAI,CACpB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,QAAQ,GAAa;gBACzB,KAAK,EAAE;oBACL,UAAU,EAAE,IAAI,EAAE,yBAAyB;oBAC3C,OAAO,EAAE,CAAC,aAAa,EAAE,yBAAyB,CAAC;oBACnD,OAAO,EAAE,CAAC,MAAM,EAAE,gBAAgB,CAAC;iBACpC;gBACD,GAAG,EAAE;oBACH,OAAO,EAAE,CAAC,gBAAgB,CAAC;oBAC3B,QAAQ,EAAE,CAAC,gBAAgB,CAAC;iBAC7B;gBACD,UAAU,EAAE;oBACV,gBAAgB,EAAE;wBAChB,OAAO,EAAE,MAAM;wBACf,IAAI,EAAE,CAAC,WAAW,CAAC;wBACnB,KAAK,EAAE,IAAI;qBACZ;iBACF;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAExC,iDAAiD;YACjD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CACnD,cAAc,CAAC,KAAK,CACrB,CAAC;YAEF,0DAA0D;YAC1D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAEjE,uDAAuD;YACvD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAExE,2BAA2B;YAC3B,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACzE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,IAAI,CAC5D,cAAc,CAAC,KAAK,CACrB,CAAC;YAEF,mBAAmB;YACnB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,IAAI,CACzD,cAAc,CAAC,KAAK,CACrB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,IAAI,CACzD,cAAc,CAAC,KAAK,CACrB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,IAAI,CACzD,cAAc,CAAC,IAAI,CACpB,CAAC;YAEF,oCAAoC;YACpC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAC/C,cAAc,CAAC,QAAQ,CACxB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,QAAQ,GAAa;gBACzB,KAAK,EAAE;oBACL,OAAO,EAAE,CAAC,gBAAgB,CAAC,EAAE,6CAA6C;iBAC3E;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAExC,4CAA4C;YAC5C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,IAAI,CACtD,cAAc,CAAC,KAAK,CACrB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAE1E,uDAAuD;YACvD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,IAAI,CACnD,cAAc,CAAC,IAAI,CACpB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;YAChD,MAAM,QAAQ,GAAa,EAAE,CAAC;YAE9B,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAExC,0DAA0D;YAC1D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAErE,yCAAyC;YACzC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,IAAI,CACtD,cAAc,CAAC,QAAQ,CACxB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAC/C,cAAc,CAAC,QAAQ,CACxB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;YACrE,MAAM,QAAQ,GAAa;gBACzB,KAAK,EAAE;oBACL,UAAU,EAAE,IAAI,EAAE,cAAc;oBAChC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,eAAe;oBAC3C,OAAO,EAAE,CAAC,cAAc,CAAC,EAAE,eAAe;iBAC3C;gBACD,GAAG,EAAE;oBACH,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,cAAc;oBACvC,QAAQ,EAAE,CAAC,gBAAgB,CAAC,EAAE,eAAe;iBAC9C;gBACD,UAAU,EAAE;oBACV,gBAAgB,EAAE;wBAChB,OAAO,EAAE,MAAM;wBACf,IAAI,EAAE,CAAC,WAAW,CAAC;wBACnB,KAAK,EAAE,IAAI,EAAE,cAAc;qBAC5B;iBACF;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAExC,6CAA6C;YAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;YAEjC,yCAAyC;YACzC,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,cAAc,CAAC,CAAC;YACzE,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAE5C,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,mBAAmB,CAC1C,CAAC;YACF,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAE9C,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,eAAe,CACtC,CAAC;YACF,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAE7C,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,CAClC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,mBAAmB,CAC1C,CAAC;YACF,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE7C,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,eAAe,CAAC,CAAC;YACxE,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEzC,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;YAClE,MAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE5C,uDAAuD;YACvD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACzE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,IAAI,CACxD,cAAc,CAAC,IAAI,CACpB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,IAAI,CAClD,cAAc,CAAC,KAAK,CACrB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC,CAAC,IAAI,CACxD,cAAc,CAAC,KAAK,CACrB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,IAAI,CACpD,cAAc,CAAC,KAAK,CACrB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;YAC3E,MAAM,QAAQ,GAAa;gBACzB,UAAU,EAAE;oBACV,mBAAmB,EAAE;wBACnB,OAAO,EAAE,MAAM;wBACf,IAAI,EAAE,CAAC,WAAW,CAAC;wBACnB,KAAK,EAAE,IAAI,EAAE,sBAAsB;qBACpC;iBACF;gBACD,GAAG,EAAE;oBACH,QAAQ,EAAE,CAAC,mBAAmB,CAAC,EAAE,sBAAsB;iBACxD;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAExC,6CAA6C;YAC7C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,IAAI,CAC5D,cAAc,CAAC,IAAI,CACpB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;YAC5E,MAAM,QAAQ,GAAa;gBACzB,GAAG,EAAE;oBACH,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,sBAAsB;iBAChD;gBACD,KAAK,EAAE;oBACL,OAAO,EAAE,CAAC,yBAAyB,CAAC,EAAE,uBAAuB;iBAC9D;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAExC,6DAA6D;YAC7D,iEAAiE;YACjE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,IAAI,CAC5D,cAAc,CAAC,IAAI,CACpB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC,IAAI,CAC1D,cAAc,CAAC,IAAI,CACpB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,QAAQ,GAAa,EAAE,CAAC;YAE9B,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACxE,8BAA8B;YAC9B,MAAM,YAAY,GAAG,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;YACzD,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,YAAY,CAAC,CAAC;YAE9C,sDAAsD;YACtD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACzE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,IAAI,CACtD,cAAc,CAAC,IAAI,CACpB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,QAAQ,GAAa,EAAE,CAAC;YAE9B,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YAExC,4CAA4C;YAC5C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,CAC/C,cAAc,CAAC,QAAQ,CACxB,CAAC;YACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAExE,mCAAmC;YACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YACjE,MAAM,QAAQ,GAAa;gBACzB,KAAK,EAAE;oBACL,UAAU,EAAE,IAAI;oBAChB,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;oBAC3B,OAAO,EAAE,CAAC,OAAO,CAAC;iBACnB;gBACD,GAAG,EAAE;oBACH,OAAO,EAAE,CAAC,SAAS,CAAC;oBACpB,QAAQ,EAAE,CAAC,SAAS,CAAC;iBACtB;aACF,CAAC;YAEF,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;YAEjC,6CAA6C;YAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;YAC5D,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB;YAExD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC;YACnE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB;YAE5D,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;YAC5D,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB;YAEvD,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC;YACnE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,kBAAkB;YAE1D,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;YAC1D,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB;YAE7D,iEAAiE;YACjE,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;YAEtC,0CAA0C;YAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5C,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACtD,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAClD,MAAM,CAAC,YAAY,CAAC,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/config/policy.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type PolicyEngineConfig, ApprovalMode } from '@google/gemini-cli-core';
+import type { Settings } from './settings.js';
+export declare function createPolicyEngineConfig(settings: Settings, approvalMode: ApprovalMode): PolicyEngineConfig;