@mmmbuto/gemini-cli-termux 0.30.3-termux → 0.30.5-termux

package/packages/core/dist/src/safety/conseca/policy-generator.js

@@ -1,144 +0,0 @@
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */
-import { getResponseText } from '../../utils/partUtils.js';
-import { safeTemplateReplace } from '../../utils/textUtils.js';
-import { DEFAULT_GEMINI_FLASH_MODEL } from '../../config/models.js';
-import { debugLogger } from '../../utils/debugLogger.js';
-import { SafetyCheckDecision } from '../protocol.js';
-import { LlmRole } from '../../telemetry/index.js';
-const CONSECA_POLICY_GENERATION_PROMPT = `
-You are a security expert responsible for generating fine-grained security policies for a large language model integrated into a command-line tool. Your role is to act as a "policy generator" that creates temporary, context-specific rules based on a user's prompt and the tools available to the main LLM.
-
-Your primary goal is to enforce the principle of least privilege. The policies you create should be as restrictive as possible while still allowing the main LLM to complete the user's requested task.
-
-For each tool that is relevant to the user's prompt, you must generate a policy object.
-
-### Output Format
-You must return a JSON object with a "policies" key, which is an array of objects. Each object must have:
-- "tool_name": The name of the tool.
-- "policy": An object with:
-  - "permissions": "allow" | "deny" | "ask_user"
-  - "constraints": A detailed description of conditions (e.g. allowed files, arguments).
-  - "rationale": Explanation for the policy.
-
-Example JSON:
-\`\`\`json
-{
-  "policies": [
-    {
-      "tool_name": "read_file",
-      "policy": {
-        "permissions": "allow",
-        "constraints": "Only allow reading 'main.py'.",
-        "rationale": "User asked to read main.py"
-      }
-    },
-    {
-      "tool_name": "run_shell_command",
-      "policy": {
-        "permissions": "deny",
-        "constraints": "None",
-        "rationale": "Shell commands are not needed for this task"
-      }
-    }
-  ]
-}
-\`\`\`
-
-### Guiding Principles:
-1.  **Permissions:**
-    *   **allow:** Required tools for the task.
-    *   **deny:** Tools clearly outside the scope.
-    *   **ask_user:** Destructive actions or ambiguity.
-
-2.  **Constraints:**
-    *   Be specific! Restrict file paths, command arguments, etc.
-
-3.  **Rationale:**
-    *   Reference the user's prompt.
-
-User Prompt: "{{user_prompt}}"
-
-Trusted Tools (Context):
-{{trusted_content}}
-`;
-import { z } from 'zod';
-import { zodToJsonSchema } from 'zod-to-json-schema';
-const ToolPolicySchema = z.object({
-    permissions: z.nativeEnum(SafetyCheckDecision),
-    constraints: z.string(),
-    rationale: z.string(),
-});
-const SecurityPolicyResponseSchema = z.object({
-    policies: z.array(z.object({
-        tool_name: z.string(),
-        policy: ToolPolicySchema,
-    })),
-});
-/**
- * Generates a security policy for the given user prompt and trusted content.
- */
-export async function generatePolicy(userPrompt, trustedContent, config) {
-    const model = DEFAULT_GEMINI_FLASH_MODEL;
-    const contentGenerator = config.getContentGenerator();
-    if (!contentGenerator) {
-        return { policy: {}, error: 'Content generator not initialized' };
-    }
-    try {
-        const result = await contentGenerator.generateContent({
-            model,
-            config: {
-                responseMimeType: 'application/json',
-                responseSchema: zodToJsonSchema(SecurityPolicyResponseSchema, {
-                    target: 'openApi3',
-                }),
-            },
-            contents: [
-                {
-                    role: 'user',
-                    parts: [
-                        {
-                            text: safeTemplateReplace(CONSECA_POLICY_GENERATION_PROMPT, {
-                                user_prompt: userPrompt,
-                                trusted_content: trustedContent,
-                            }),
-                        },
-                    ],
-                },
-            ],
-        }, 'conseca-policy-generation', LlmRole.SUBAGENT);
-        const responseText = getResponseText(result);
-        debugLogger.debug(`[Conseca] Policy Generation Raw Response: ${responseText}`);
-        if (!responseText) {
-            return { policy: {}, error: 'Empty response from policy generator' };
-        }
-        try {
-            const parsed = SecurityPolicyResponseSchema.parse(JSON.parse(responseText));
-            const policiesList = parsed.policies;
-            const policy = {};
-            for (const item of policiesList) {
-                policy[item.tool_name] = item.policy;
-            }
-            debugLogger.debug(`[Conseca] Policy Generation Parsed:`, policy);
-            return { policy };
-        }
-        catch (parseError) {
-            debugLogger.debug(`[Conseca] Policy Generation JSON Parse Error:`, parseError);
-            return {
-                policy: {},
-                error: `JSON Parse Error: ${parseError instanceof Error ? parseError.message : String(parseError)}. Raw: ${responseText}`,
-            };
-        }
-    }
-    catch (error) {
-        debugLogger.error('Policy generation failed:', error);
-        return {
-            policy: {},
-            error: `Policy generation failed: ${error instanceof Error ? error.message : String(error)}`,
-        };
-    }
-}
-//# sourceMappingURL=policy-generator.js.map

package/packages/core/dist/src/safety/conseca/policy-generator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"policy-generator.js","sourceRoot":"","sources":["../../../../src/safety/conseca/policy-generator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAEnD,MAAM,gCAAgC,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuDxC,CAAC;AAEF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAEH,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,KAAK,CACf,CAAC,CAAC,MAAM,CAAC;QACP,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;QACrB,MAAM,EAAE,gBAAgB;KACzB,CAAC,CACH;CACF,CAAC,CAAC;AAOH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAkB,EAClB,cAAsB,EACtB,MAAc;IAEd,MAAM,KAAK,GAAG,0BAA0B,CAAC;IACzC,MAAM,gBAAgB,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;IAEtD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;IACpE,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,eAAe,CACnD;YACE,KAAK;YACL,MAAM,EAAE;gBACN,gBAAgB,EAAE,kBAAkB;gBACpC,cAAc,EAAE,eAAe,CAAC,4BAA4B,EAAE;oBAC5D,MAAM,EAAE,UAAU;iBACnB,CAAC;aACH;YACD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE;wBACL;4BACE,IAAI,EAAE,mBAAmB,CAAC,gCAAgC,EAAE;gCAC1D,WAAW,EAAE,UAAU;gCACvB,eAAe,EAAE,cAAc;6BAChC,CAAC;yBACH;qBACF;iBACF;aACF;SACF,EACD,2BAA2B,EAC3B,OAAO,CAAC,QAAQ,CACjB,CAAC;QAEF,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC7C,WAAW,CAAC,KAAK,CACf,6CAA6C,YAAY,EAAE,CAC5D,CAAC;QAEF,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC;QACvE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAC/C,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CACzB,CAAC;YACF,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC;YACrC,MAAM,MAAM,GAAmB,EAAE,CAAC;YAClC,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;YACvC,CAAC;YAED,WAAW,CAAC,KAAK,CAAC,qCAAqC,EAAE,MAAM,CAAC,CAAC;YACjE,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,WAAW,CAAC,KAAK,CACf,+CAA+C,EAC/C,UAAU,CACX,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,qBAAqB,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,YAAY,EAAE;aAC1H,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QACtD,OAAO;YACL,MAAM,EAAE,EAAE;YACV,KAAK,EAAE,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAC7F,CAAC;IACJ,CAAC;AACH,CAAC"}

package/packages/core/dist/src/safety/conseca/policy-generator.test.d.ts

@@ -1,6 +0,0 @@
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */
-export {};

package/packages/core/dist/src/safety/conseca/policy-generator.test.js

@@ -1,84 +0,0 @@
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */
-import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { generatePolicy } from './policy-generator.js';
-import { SafetyCheckDecision } from '../protocol.js';
-import { LlmRole } from '../../telemetry/index.js';
-describe('policy_generator', () => {
-    let mockConfig;
-    let mockContentGenerator;
-    beforeEach(() => {
-        mockContentGenerator = {
-            generateContent: vi.fn(),
-        };
-        mockConfig = {
-            getContentGenerator: vi.fn().mockReturnValue(mockContentGenerator),
-        };
-    });
-    it('should return a policy object when content generator is available', async () => {
-        const mockPolicy = {
-            read_file: {
-                permissions: SafetyCheckDecision.ALLOW,
-                constraints: 'None',
-                rationale: 'Test',
-            },
-        };
-        mockContentGenerator.generateContent = vi.fn().mockResolvedValue({
-            candidates: [
-                {
-                    content: {
-                        parts: [
-                            {
-                                text: JSON.stringify({
-                                    policies: [
-                                        {
-                                            tool_name: 'read_file',
-                                            policy: mockPolicy.read_file,
-                                        },
-                                    ],
-                                }),
-                            },
-                        ],
-                    },
-                },
-            ],
-        });
-        const result = await generatePolicy('test prompt', 'trusted content', mockConfig);
-        expect(mockConfig.getContentGenerator).toHaveBeenCalled();
-        expect(mockContentGenerator.generateContent).toHaveBeenCalledWith(expect.objectContaining({
-            model: expect.any(String),
-            config: expect.objectContaining({
-                responseMimeType: 'application/json',
-                responseSchema: expect.any(Object),
-            }),
-            contents: expect.any(Array),
-        }), 'conseca-policy-generation', LlmRole.SUBAGENT);
-        expect(result.policy).toEqual(mockPolicy);
-        expect(result.error).toBeUndefined();
-    });
-    it('should handle missing content generator gracefully', async () => {
-        vi.mocked(mockConfig.getContentGenerator).mockReturnValue(undefined);
-        const result = await generatePolicy('test prompt', 'trusted content', mockConfig);
-        expect(result.policy).toEqual({});
-        expect(result.error).toBe('Content generator not initialized');
-    });
-    it('should prevent template injection (double interpolation)', async () => {
-        mockContentGenerator.generateContent = vi.fn().mockResolvedValue({});
-        const userPrompt = '{{trusted_content}}';
-        const trustedContent = 'SECRET_DATA';
-        await generatePolicy(userPrompt, trustedContent, mockConfig);
-        const generateContentCall = vi.mocked(mockContentGenerator.generateContent)
-            .mock.calls[0];
-        const request = generateContentCall[0];
-        const promptText = request.contents[0].parts[0].text;
-        // The user prompt should contain the literal placeholder, NOT the secret data
-        expect(promptText).toContain('User Prompt: "{{trusted_content}}"');
-        expect(promptText).not.toContain('User Prompt: "SECRET_DATA"');
-        // The trusted tools section SHOULD contain the secret data
-        expect(promptText).toContain('Trusted Tools (Context):\nSECRET_DATA');
-    });
-});
-//# sourceMappingURL=policy-generator.test.js.map

package/packages/core/dist/src/safety/conseca/policy-generator.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"policy-generator.test.js","sourceRoot":"","sources":["../../../../src/safety/conseca/policy-generator.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAGrD,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAEnD,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,IAAI,UAAkB,CAAC;IACvB,IAAI,oBAAsC,CAAC;IAE3C,UAAU,CAAC,GAAG,EAAE;QACd,oBAAoB,GAAG;YACrB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;SACM,CAAC;QAEjC,UAAU,GAAG;YACX,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,oBAAoB,CAAC;SAC9C,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,UAAU,GAAG;YACjB,SAAS,EAAE;gBACT,WAAW,EAAE,mBAAmB,CAAC,KAAK;gBACtC,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,MAAM;aAClB;SACF,CAAC;QACF,oBAAoB,CAAC,eAAe,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;YAC/D,UAAU,EAAE;gBACV;oBACE,OAAO,EAAE;wBACP,KAAK,EAAE;4BACL;gCACE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oCACnB,QAAQ,EAAE;wCACR;4CACE,SAAS,EAAE,WAAW;4CACtB,MAAM,EAAE,UAAU,CAAC,SAAS;yCAC7B;qCACF;iCACF,CAAC;6BACH;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,aAAa,EACb,iBAAiB,EACjB,UAAU,CACX,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC1D,MAAM,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC,oBAAoB,CAC/D,MAAM,CAAC,gBAAgB,CAAC;YACtB,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC;gBAC9B,gBAAgB,EAAE,kBAAkB;gBACpC,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;aACnC,CAAC;YACF,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;SAC5B,CAAC,EACF,2BAA2B,EAC3B,OAAO,CAAC,QAAQ,CACjB,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,eAAe,CACvD,SAAwC,CACzC,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,cAAc,CACjC,aAAa,EACb,iBAAiB,EACjB,UAAU,CACX,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,oBAAoB,CAAC,eAAe,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;QAErE,MAAM,UAAU,GAAG,qBAAqB,CAAC;QACzC,MAAM,cAAc,GAAG,aAAa,CAAC;QAErC,MAAM,cAAc,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC;QAE7D,MAAM,mBAAmB,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,eAAe,CAAC;aACxE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjB,MAAM,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAEpC,CAAC;QACF,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAErD,8EAA8E;QAC9E,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,oCAAoC,CAAC,CAAC;QACnE,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAE/D,2DAA2D;QAC3D,MAAM,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/packages/core/dist/src/safety/conseca/types.d.ts

@@ -1,15 +0,0 @@
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */
-import type { SafetyCheckDecision } from '../protocol.js';
-export interface ToolPolicy {
-    permissions: SafetyCheckDecision;
-    constraints: string;
-    rationale: string;
-}
-/**
- * A map of tool names to their specific security policies.
- */
-export type SecurityPolicy = Record<string, ToolPolicy>;

package/packages/core/dist/src/safety/conseca/types.js

@@ -1,7 +0,0 @@
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */
-export {};
-//# sourceMappingURL=types.js.map

package/packages/core/dist/src/safety/conseca/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/safety/conseca/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/packages/core/dist/src/telemetry/conseca-logger.d.ts

@@ -1,9 +0,0 @@
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */
-import type { Config } from '../config/config.js';
-import type { ConsecaPolicyGenerationEvent, ConsecaVerdictEvent } from './types.js';
-export declare function logConsecaPolicyGeneration(config: Config, event: ConsecaPolicyGenerationEvent): void;
-export declare function logConsecaVerdict(config: Config, event: ConsecaVerdictEvent): void;

package/packages/core/dist/src/telemetry/conseca-logger.js

@@ -1,91 +0,0 @@
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */
-import { logs } from '@opentelemetry/api-logs';
-import { SERVICE_NAME } from './constants.js';
-import { isTelemetrySdkInitialized } from './sdk.js';
-import { ClearcutLogger, EventNames, } from './clearcut-logger/clearcut-logger.js';
-import { EventMetadataKey } from './clearcut-logger/event-metadata-key.js';
-import { safeJsonStringify } from '../utils/safeJsonStringify.js';
-import { debugLogger } from '../utils/debugLogger.js';
-export function logConsecaPolicyGeneration(config, event) {
-    debugLogger.debug('Conseca Policy Generation Event:', event);
-    const clearcutLogger = ClearcutLogger.getInstance(config);
-    if (clearcutLogger) {
-        const data = [
-            {
-                gemini_cli_key: EventMetadataKey.CONSECA_USER_PROMPT,
-                value: safeJsonStringify(event.user_prompt),
-            },
-            {
-                gemini_cli_key: EventMetadataKey.CONSECA_TRUSTED_CONTENT,
-                value: safeJsonStringify(event.trusted_content),
-            },
-            {
-                gemini_cli_key: EventMetadataKey.CONSECA_GENERATED_POLICY,
-                value: safeJsonStringify(event.policy),
-            },
-        ];
-        if (event.error) {
-            data.push({
-                gemini_cli_key: EventMetadataKey.CONSECA_ERROR,
-                value: event.error,
-            });
-        }
-        clearcutLogger.enqueueLogEvent(clearcutLogger.createLogEvent(EventNames.CONSECA_POLICY_GENERATION, data));
-    }
-    if (!isTelemetrySdkInitialized())
-        return;
-    const logger = logs.getLogger(SERVICE_NAME);
-    const logRecord = {
-        body: event.toLogBody(),
-        attributes: event.toOpenTelemetryAttributes(config),
-    };
-    logger.emit(logRecord);
-}
-export function logConsecaVerdict(config, event) {
-    debugLogger.debug('Conseca Verdict Event:', event);
-    const clearcutLogger = ClearcutLogger.getInstance(config);
-    if (clearcutLogger) {
-        const data = [
-            {
-                gemini_cli_key: EventMetadataKey.CONSECA_USER_PROMPT,
-                value: safeJsonStringify(event.user_prompt),
-            },
-            {
-                gemini_cli_key: EventMetadataKey.CONSECA_GENERATED_POLICY,
-                value: safeJsonStringify(event.policy),
-            },
-            {
-                gemini_cli_key: EventMetadataKey.GEMINI_CLI_TOOL_CALL_NAME,
-                value: safeJsonStringify(event.tool_call),
-            },
-            {
-                gemini_cli_key: EventMetadataKey.CONSECA_VERDICT_RESULT,
-                value: safeJsonStringify(event.verdict),
-            },
-            {
-                gemini_cli_key: EventMetadataKey.CONSECA_VERDICT_RATIONALE,
-                value: event.verdict_rationale,
-            },
-        ];
-        if (event.error) {
-            data.push({
-                gemini_cli_key: EventMetadataKey.CONSECA_ERROR,
-                value: event.error,
-            });
-        }
-        clearcutLogger.enqueueLogEvent(clearcutLogger.createLogEvent(EventNames.CONSECA_VERDICT, data));
-    }
-    if (!isTelemetrySdkInitialized())
-        return;
-    const logger = logs.getLogger(SERVICE_NAME);
-    const logRecord = {
-        body: event.toLogBody(),
-        attributes: event.toOpenTelemetryAttributes(config),
-    };
-    logger.emit(logRecord);
-}
-//# sourceMappingURL=conseca-logger.js.map

package/packages/core/dist/src/telemetry/conseca-logger.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"conseca-logger.js","sourceRoot":"","sources":["../../../src/telemetry/conseca-logger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,yBAAyB,CAAC;AAE/C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EACL,cAAc,EACd,UAAU,GACX,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAKlE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEtD,MAAM,UAAU,0BAA0B,CACxC,MAAc,EACd,KAAmC;IAEnC,WAAW,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG;YACX;gBACE,cAAc,EAAE,gBAAgB,CAAC,mBAAmB;gBACpD,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC;aAC5C;YACD;gBACE,cAAc,EAAE,gBAAgB,CAAC,uBAAuB;gBACxD,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,eAAe,CAAC;aAChD;YACD;gBACE,cAAc,EAAE,gBAAgB,CAAC,wBAAwB;gBACzD,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC;aACvC;SACF,CAAC;QAEF,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC;gBACR,cAAc,EAAE,gBAAgB,CAAC,aAAa;gBAC9C,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,cAAc,CAAC,eAAe,CAC5B,cAAc,CAAC,cAAc,CAAC,UAAU,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAC1E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,yBAAyB,EAAE;QAAE,OAAO;IAEzC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAc;QAC3B,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE;QACvB,UAAU,EAAE,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC;KACpD,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,KAA0B;IAE1B,WAAW,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG;YACX;gBACE,cAAc,EAAE,gBAAgB,CAAC,mBAAmB;gBACpD,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,WAAW,CAAC;aAC5C;YACD;gBACE,cAAc,EAAE,gBAAgB,CAAC,wBAAwB;gBACzD,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC;aACvC;YACD;gBACE,cAAc,EAAE,gBAAgB,CAAC,yBAAyB;gBAC1D,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC;aAC1C;YACD;gBACE,cAAc,EAAE,gBAAgB,CAAC,sBAAsB;gBACvD,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC;aACxC;YACD;gBACE,cAAc,EAAE,gBAAgB,CAAC,yBAAyB;gBAC1D,KAAK,EAAE,KAAK,CAAC,iBAAiB;aAC/B;SACF,CAAC;QAEF,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC;gBACR,cAAc,EAAE,gBAAgB,CAAC,aAAa;gBAC9C,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC,CAAC;QACL,CAAC;QAED,cAAc,CAAC,eAAe,CAC5B,cAAc,CAAC,cAAc,CAAC,UAAU,CAAC,eAAe,EAAE,IAAI,CAAC,CAChE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,yBAAyB,EAAE;QAAE,OAAO;IAEzC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAc;QAC3B,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE;QACvB,UAAU,EAAE,KAAK,CAAC,yBAAyB,CAAC,MAAM,CAAC;KACpD,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACzB,CAAC"}

package/packages/core/dist/src/telemetry/conseca-logger.test.d.ts

@@ -1,6 +0,0 @@
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */
-export {};

package/packages/core/dist/src/telemetry/conseca-logger.test.js

@@ -1,89 +0,0 @@
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */
-import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
-import { logs } from '@opentelemetry/api-logs';
-import { logConsecaPolicyGeneration, logConsecaVerdict, } from './conseca-logger.js';
-import { ConsecaPolicyGenerationEvent, ConsecaVerdictEvent, EVENT_CONSECA_POLICY_GENERATION, EVENT_CONSECA_VERDICT, } from './types.js';
-import * as sdk from './sdk.js';
-import { ClearcutLogger } from './clearcut-logger/clearcut-logger.js';
-vi.mock('@opentelemetry/api-logs');
-vi.mock('./sdk.js');
-vi.mock('./clearcut-logger/clearcut-logger.js');
-describe('conseca-logger', () => {
-    let mockConfig;
-    let mockLogger;
-    let mockClearcutLogger;
-    beforeEach(() => {
-        mockConfig = {
-            getTelemetryEnabled: vi.fn().mockReturnValue(true),
-            getSessionId: vi.fn().mockReturnValue('test-session-id'),
-            getTelemetryLogPromptsEnabled: vi.fn().mockReturnValue(true),
-            isInteractive: vi.fn().mockReturnValue(true),
-            getExperiments: vi.fn().mockReturnValue({ experimentIds: [] }),
-        };
-        mockLogger = {
-            emit: vi.fn(),
-        };
-        vi.mocked(logs.getLogger).mockReturnValue(mockLogger);
-        vi.mocked(sdk.isTelemetrySdkInitialized).mockReturnValue(true);
-        mockClearcutLogger = {
-            enqueueLogEvent: vi.fn(),
-            createLogEvent: vi.fn().mockReturnValue({ event_name: 'test' }),
-        };
-        vi.mocked(ClearcutLogger.getInstance).mockReturnValue(mockClearcutLogger);
-    });
-    afterEach(() => {
-        vi.clearAllMocks();
-    });
-    it('should log policy generation event to OTEL and Clearcut', () => {
-        const event = new ConsecaPolicyGenerationEvent('user prompt', 'trusted content', 'generated policy');
-        logConsecaPolicyGeneration(mockConfig, event);
-        // Verify OTEL
-        expect(logs.getLogger).toHaveBeenCalled();
-        expect(mockLogger.emit).toHaveBeenCalledWith(expect.objectContaining({
-            body: 'Conseca Policy Generation.',
-            attributes: expect.objectContaining({
-                'event.name': EVENT_CONSECA_POLICY_GENERATION,
-            }),
-        }));
-        // Verify Clearcut
-        expect(ClearcutLogger.getInstance).toHaveBeenCalledWith(mockConfig);
-        expect(mockClearcutLogger.createLogEvent).toHaveBeenCalled();
-        expect(mockClearcutLogger.enqueueLogEvent).toHaveBeenCalled();
-    });
-    it('should log policy generation error to Clearcut', () => {
-        const event = new ConsecaPolicyGenerationEvent('user prompt', 'trusted content', '{}', 'some error');
-        logConsecaPolicyGeneration(mockConfig, event);
-        expect(mockClearcutLogger.createLogEvent).toHaveBeenCalledWith(expect.anything(), expect.arrayContaining([
-            expect.objectContaining({
-                value: 'some error',
-            }),
-        ]));
-    });
-    it('should log verdict event to OTEL and Clearcut', () => {
-        const event = new ConsecaVerdictEvent('user prompt', 'policy', 'tool call', 'ALLOW', 'rationale');
-        logConsecaVerdict(mockConfig, event);
-        // Verify OTEL
-        expect(logs.getLogger).toHaveBeenCalled();
-        expect(mockLogger.emit).toHaveBeenCalledWith(expect.objectContaining({
-            body: 'Conseca Verdict: ALLOW.',
-            attributes: expect.objectContaining({
-                'event.name': EVENT_CONSECA_VERDICT,
-            }),
-        }));
-        // Verify Clearcut
-        expect(ClearcutLogger.getInstance).toHaveBeenCalledWith(mockConfig);
-        expect(mockClearcutLogger.createLogEvent).toHaveBeenCalled();
-        expect(mockClearcutLogger.enqueueLogEvent).toHaveBeenCalled();
-    });
-    it('should not log if SDK is not initialized', () => {
-        vi.mocked(sdk.isTelemetrySdkInitialized).mockReturnValue(false);
-        const event = new ConsecaPolicyGenerationEvent('a', 'b', 'c');
-        logConsecaPolicyGeneration(mockConfig, event);
-        expect(mockLogger.emit).not.toHaveBeenCalled();
-    });
-});
-//# sourceMappingURL=conseca-logger.test.js.map

package/packages/core/dist/src/telemetry/conseca-logger.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"conseca-logger.test.js","sourceRoot":"","sources":["../../../src/telemetry/conseca-logger.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,IAAI,EAAe,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,4BAA4B,EAC5B,mBAAmB,EACnB,+BAA+B,EAC/B,qBAAqB,GACtB,MAAM,YAAY,CAAC;AAEpB,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AAEtE,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;AACnC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AACpB,EAAE,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;AAEhD,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,UAAkB,CAAC;IACvB,IAAI,UAA8C,CAAC;IACnD,IAAI,kBAGH,CAAC;IAEF,UAAU,CAAC,GAAG,EAAE;QACd,UAAU,GAAG;YACX,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;YAClD,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,iBAAiB,CAAC;YACxD,6BAA6B,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;YAC5D,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC;YAC5C,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;SAC1C,CAAC;QAEvB,UAAU,GAAG;YACX,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;SACd,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,UAA+B,CAAC,CAAC;QAC3E,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE/D,kBAAkB,GAAG;YACnB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;YACxB,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;SAChE,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,eAAe,CACnD,kBAA+C,CAChD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,KAAK,GAAG,IAAI,4BAA4B,CAC5C,aAAa,EACb,iBAAiB,EACjB,kBAAkB,CACnB,CAAC;QAEF,0BAA0B,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAE9C,cAAc;QACd,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC1C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAC1C,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,4BAA4B;YAClC,UAAU,EAAE,MAAM,CAAC,gBAAgB,CAAC;gBAClC,YAAY,EAAE,+BAA+B;aAC9C,CAAC;SACH,CAAC,CACH,CAAC;QAEF,kBAAkB;QAClB,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;QACpE,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC7D,MAAM,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,KAAK,GAAG,IAAI,4BAA4B,CAC5C,aAAa,EACb,iBAAiB,EACjB,IAAI,EACJ,YAAY,CACb,CAAC;QAEF,0BAA0B,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAE9C,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAC5D,MAAM,CAAC,QAAQ,EAAE,EACjB,MAAM,CAAC,eAAe,CAAC;YACrB,MAAM,CAAC,gBAAgB,CAAC;gBACtB,KAAK,EAAE,YAAY;aACpB,CAAC;SACH,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,KAAK,GAAG,IAAI,mBAAmB,CACnC,aAAa,EACb,QAAQ,EACR,WAAW,EACX,OAAO,EACP,WAAW,CACZ,CAAC;QAEF,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAErC,cAAc;QACd,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC1C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAC1C,MAAM,CAAC,gBAAgB,CAAC;YACtB,IAAI,EAAE,yBAAyB;YAC/B,UAAU,EAAE,MAAM,CAAC,gBAAgB,CAAC;gBAClC,YAAY,EAAE,qBAAqB;aACpC,CAAC;SACH,CAAC,CACH,CAAC;QAEF,kBAAkB;QAClB,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;QACpE,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC7D,MAAM,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,4BAA4B,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAE9D,0BAA0B,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAE9C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/packages/core/dist/src/tools/mcpImportTool.d.ts

@@ -1,31 +0,0 @@
-/**
- * @license
- * Copyright 2025 Google LLC
- * SPDX-License-Identifier: Apache-2.0
- */
-import { BaseDeclarativeTool, type ToolInvocation, type ToolResult } from './tools.js';
-import type { Config } from '../config/config.js';
-import type { MessageBus } from '../confirmation-bus/message-bus.js';
-interface McpImportParams {
-    categories?: string[];
-    scope?: string;
-    target?: 'base' | 'user';
-    entries?: Array<{
-        key?: string;
-        text?: string;
-        scope?: string;
-        tags?: string[];
-        expiresAt?: string;
-        sensitivity?: 'low' | 'medium' | 'high';
-        source?: string;
-        confidence?: number;
-    }>;
-    payload?: Record<string, unknown>;
-}
-export declare class McpImportTool extends BaseDeclarativeTool<McpImportParams, ToolResult> {
-    private readonly config;
-    static readonly Name = "mcp_import_memory";
-    constructor(config: Config, messageBus: MessageBus);
-    protected createInvocation(params: McpImportParams, messageBus: MessageBus, toolName?: string, displayName?: string): ToolInvocation<McpImportParams, ToolResult>;
-}
-export {};