@office-ai/aioncli-core 0.2.3 → 0.18.4

package/dist/src/routing/strategies/defaultStrategy.js

@@ -0,0 +1,20 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { DEFAULT_GEMINI_MODEL } from '../../config/models.js';
+export class DefaultStrategy {
+    name = 'default';
+    async route(_context, _config, _baseLlmClient) {
+        return {
+            model: DEFAULT_GEMINI_MODEL,
+            metadata: {
+                source: this.name,
+                latencyMs: 0,
+                reasoning: `Routing to default model: ${DEFAULT_GEMINI_MODEL}`,
+            },
+        };
+    }
+}
+//# sourceMappingURL=defaultStrategy.js.map

package/dist/src/routing/strategies/defaultStrategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaultStrategy.js","sourceRoot":"","sources":["../../../../src/routing/strategies/defaultStrategy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,OAAO,eAAe;IACjB,IAAI,GAAG,SAAS,CAAC;IAE1B,KAAK,CAAC,KAAK,CACT,QAAwB,EACxB,OAAe,EACf,cAA6B;QAE7B,OAAO;YACL,KAAK,EAAE,oBAAoB;YAC3B,QAAQ,EAAE;gBACR,MAAM,EAAE,IAAI,CAAC,IAAI;gBACjB,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,6BAA6B,oBAAoB,EAAE;aAC/D;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/src/routing/strategies/defaultStrategy.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/routing/strategies/defaultStrategy.test.js

@@ -0,0 +1,26 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect } from 'vitest';
+import { DefaultStrategy } from './defaultStrategy.js';
+import { DEFAULT_GEMINI_MODEL } from '../../config/models.js';
+describe('DefaultStrategy', () => {
+    it('should always route to the default Gemini model', async () => {
+        const strategy = new DefaultStrategy();
+        const mockContext = {};
+        const mockConfig = {};
+        const mockClient = {};
+        const decision = await strategy.route(mockContext, mockConfig, mockClient);
+        expect(decision).toEqual({
+            model: DEFAULT_GEMINI_MODEL,
+            metadata: {
+                source: 'default',
+                latencyMs: 0,
+                reasoning: `Routing to default model: ${DEFAULT_GEMINI_MODEL}`,
+            },
+        });
+    });
+});
+//# sourceMappingURL=defaultStrategy.test.js.map

package/dist/src/routing/strategies/defaultStrategy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaultStrategy.test.js","sourceRoot":"","sources":["../../../../src/routing/strategies/defaultStrategy.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAG9D,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,EAAoB,CAAC;QACzC,MAAM,UAAU,GAAG,EAAY,CAAC;QAChC,MAAM,UAAU,GAAG,EAAmB,CAAC;QAEvC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAE3E,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YACvB,KAAK,EAAE,oBAAoB;YAC3B,QAAQ,EAAE;gBACR,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,6BAA6B,oBAAoB,EAAE;aAC/D;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/routing/strategies/fallbackStrategy.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { Config } from '../../config/config.js';
+import type { BaseLlmClient } from '../../core/baseLlmClient.js';
+import type { RoutingContext, RoutingDecision, RoutingStrategy } from '../routingStrategy.js';
+export declare class FallbackStrategy implements RoutingStrategy {
+    readonly name = "fallback";
+    route(_context: RoutingContext, config: Config, _baseLlmClient: BaseLlmClient): Promise<RoutingDecision | null>;
+}

package/dist/src/routing/strategies/fallbackStrategy.js

@@ -0,0 +1,25 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { getEffectiveModel } from '../../config/models.js';
+export class FallbackStrategy {
+    name = 'fallback';
+    async route(_context, config, _baseLlmClient) {
+        const isInFallbackMode = config.isInFallbackMode();
+        if (!isInFallbackMode) {
+            return null;
+        }
+        const effectiveModel = getEffectiveModel(isInFallbackMode, config.getModel(), config.getPreviewFeatures());
+        return {
+            model: effectiveModel,
+            metadata: {
+                source: this.name,
+                latencyMs: 0,
+                reasoning: `In fallback mode. Using: ${effectiveModel}`,
+            },
+        };
+    }
+}
+//# sourceMappingURL=fallbackStrategy.js.map

package/dist/src/routing/strategies/fallbackStrategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fallbackStrategy.js","sourceRoot":"","sources":["../../../../src/routing/strategies/fallbackStrategy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAQ3D,MAAM,OAAO,gBAAgB;IAClB,IAAI,GAAG,UAAU,CAAC;IAE3B,KAAK,CAAC,KAAK,CACT,QAAwB,EACxB,MAAc,EACd,cAA6B;QAE7B,MAAM,gBAAgB,GAAY,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAE5D,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,cAAc,GAAG,iBAAiB,CACtC,gBAAgB,EAChB,MAAM,CAAC,QAAQ,EAAE,EACjB,MAAM,CAAC,kBAAkB,EAAE,CAC5B,CAAC;QACF,OAAO;YACL,KAAK,EAAE,cAAc;YACrB,QAAQ,EAAE;gBACR,MAAM,EAAE,IAAI,CAAC,IAAI;gBACjB,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,4BAA4B,cAAc,EAAE;aACxD;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/src/routing/strategies/fallbackStrategy.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/routing/strategies/fallbackStrategy.test.js

@@ -0,0 +1,59 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect } from 'vitest';
+import { FallbackStrategy } from './fallbackStrategy.js';
+import { DEFAULT_GEMINI_MODEL, DEFAULT_GEMINI_FLASH_MODEL, DEFAULT_GEMINI_FLASH_LITE_MODEL, } from '../../config/models.js';
+describe('FallbackStrategy', () => {
+    const strategy = new FallbackStrategy();
+    const mockContext = {};
+    const mockClient = {};
+    it('should return null when not in fallback mode', async () => {
+        const mockConfig = {
+            isInFallbackMode: () => false,
+            getModel: () => DEFAULT_GEMINI_MODEL,
+            getPreviewFeatures: () => false,
+        };
+        const decision = await strategy.route(mockContext, mockConfig, mockClient);
+        expect(decision).toBeNull();
+    });
+    describe('when in fallback mode', () => {
+        it('should downgrade a pro model to the flash model', async () => {
+            const mockConfig = {
+                isInFallbackMode: () => true,
+                getModel: () => DEFAULT_GEMINI_MODEL,
+                getPreviewFeatures: () => false,
+            };
+            const decision = await strategy.route(mockContext, mockConfig, mockClient);
+            expect(decision).not.toBeNull();
+            expect(decision?.model).toBe(DEFAULT_GEMINI_FLASH_MODEL);
+            expect(decision?.metadata.source).toBe('fallback');
+            expect(decision?.metadata.reasoning).toContain('In fallback mode');
+        });
+        it('should honor a lite model request', async () => {
+            const mockConfig = {
+                isInFallbackMode: () => true,
+                getModel: () => DEFAULT_GEMINI_FLASH_LITE_MODEL,
+                getPreviewFeatures: () => false,
+            };
+            const decision = await strategy.route(mockContext, mockConfig, mockClient);
+            expect(decision).not.toBeNull();
+            expect(decision?.model).toBe(DEFAULT_GEMINI_FLASH_LITE_MODEL);
+            expect(decision?.metadata.source).toBe('fallback');
+        });
+        it('should use the flash model if flash is requested', async () => {
+            const mockConfig = {
+                isInFallbackMode: () => true,
+                getModel: () => DEFAULT_GEMINI_FLASH_MODEL,
+                getPreviewFeatures: () => false,
+            };
+            const decision = await strategy.route(mockContext, mockConfig, mockClient);
+            expect(decision).not.toBeNull();
+            expect(decision?.model).toBe(DEFAULT_GEMINI_FLASH_MODEL);
+            expect(decision?.metadata.source).toBe('fallback');
+        });
+    });
+});
+//# sourceMappingURL=fallbackStrategy.test.js.map

package/dist/src/routing/strategies/fallbackStrategy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fallbackStrategy.test.js","sourceRoot":"","sources":["../../../../src/routing/strategies/fallbackStrategy.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAIzD,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,+BAA+B,GAChC,MAAM,wBAAwB,CAAC;AAEhC,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,MAAM,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACxC,MAAM,WAAW,GAAG,EAAoB,CAAC;IACzC,MAAM,UAAU,GAAG,EAAmB,CAAC;IAEvC,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,UAAU,GAAG;YACjB,gBAAgB,EAAE,GAAG,EAAE,CAAC,KAAK;YAC7B,QAAQ,EAAE,GAAG,EAAE,CAAC,oBAAoB;YACpC,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAK;SACtB,CAAC;QAEZ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAC3E,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,UAAU,GAAG;gBACjB,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI;gBAC5B,QAAQ,EAAE,GAAG,EAAE,CAAC,oBAAoB;gBACpC,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAK;aACtB,CAAC;YAEZ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CACnC,WAAW,EACX,UAAU,EACV,UAAU,CACX,CAAC;YAEF,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACzD,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACnD,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,UAAU,GAAG;gBACjB,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI;gBAC5B,QAAQ,EAAE,GAAG,EAAE,CAAC,+BAA+B;gBAC/C,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAK;aACtB,CAAC;YAEZ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CACnC,WAAW,EACX,UAAU,EACV,UAAU,CACX,CAAC;YAEF,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC9D,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,UAAU,GAAG;gBACjB,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI;gBAC5B,QAAQ,EAAE,GAAG,EAAE,CAAC,0BAA0B;gBAC1C,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAK;aACtB,CAAC;YAEZ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CACnC,WAAW,EACX,UAAU,EACV,UAAU,CACX,CAAC;YAEF,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAChC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;YACzD,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/routing/strategies/overrideStrategy.d.ts

@@ -0,0 +1,15 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { Config } from '../../config/config.js';
+import type { BaseLlmClient } from '../../core/baseLlmClient.js';
+import type { RoutingContext, RoutingDecision, RoutingStrategy } from '../routingStrategy.js';
+/**
+ * Handles cases where the user explicitly specifies a model (override).
+ */
+export declare class OverrideStrategy implements RoutingStrategy {
+    readonly name = "override";
+    route(_context: RoutingContext, config: Config, _baseLlmClient: BaseLlmClient): Promise<RoutingDecision | null>;
+}

package/dist/src/routing/strategies/overrideStrategy.js

@@ -0,0 +1,28 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { DEFAULT_GEMINI_MODEL_AUTO, resolveModel, } from '../../config/models.js';
+/**
+ * Handles cases where the user explicitly specifies a model (override).
+ */
+export class OverrideStrategy {
+    name = 'override';
+    async route(_context, config, _baseLlmClient) {
+        const overrideModel = config.getModel();
+        // If the model is 'auto' we should pass to the next strategy.
+        if (overrideModel === DEFAULT_GEMINI_MODEL_AUTO)
+            return null;
+        // Return the overridden model name.
+        return {
+            model: resolveModel(overrideModel, config.getPreviewFeatures()),
+            metadata: {
+                source: this.name,
+                latencyMs: 0,
+                reasoning: `Routing bypassed by forced model directive. Using: ${overrideModel}`,
+            },
+        };
+    }
+}
+//# sourceMappingURL=overrideStrategy.js.map

package/dist/src/routing/strategies/overrideStrategy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"overrideStrategy.js","sourceRoot":"","sources":["../../../../src/routing/strategies/overrideStrategy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,yBAAyB,EACzB,YAAY,GACb,MAAM,wBAAwB,CAAC;AAQhC;;GAEG;AACH,MAAM,OAAO,gBAAgB;IAClB,IAAI,GAAG,UAAU,CAAC;IAE3B,KAAK,CAAC,KAAK,CACT,QAAwB,EACxB,MAAc,EACd,cAA6B;QAE7B,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QAExC,8DAA8D;QAC9D,IAAI,aAAa,KAAK,yBAAyB;YAAE,OAAO,IAAI,CAAC;QAE7D,oCAAoC;QACpC,OAAO;YACL,KAAK,EAAE,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC/D,QAAQ,EAAE;gBACR,MAAM,EAAE,IAAI,CAAC,IAAI;gBACjB,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,sDAAsD,aAAa,EAAE;aACjF;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/src/routing/strategies/overrideStrategy.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/routing/strategies/overrideStrategy.test.js

@@ -0,0 +1,45 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect } from 'vitest';
+import { OverrideStrategy } from './overrideStrategy.js';
+import { DEFAULT_GEMINI_MODEL_AUTO } from '../../config/models.js';
+describe('OverrideStrategy', () => {
+    const strategy = new OverrideStrategy();
+    const mockContext = {};
+    const mockClient = {};
+    it('should return null when the override model is auto', async () => {
+        const mockConfig = {
+            getModel: () => DEFAULT_GEMINI_MODEL_AUTO,
+            getPreviewFeatures: () => false,
+        };
+        const decision = await strategy.route(mockContext, mockConfig, mockClient);
+        expect(decision).toBeNull();
+    });
+    it('should return a decision with the override model when one is specified', async () => {
+        const overrideModel = 'gemini-2.5-pro-custom';
+        const mockConfig = {
+            getModel: () => overrideModel,
+            getPreviewFeatures: () => false,
+        };
+        const decision = await strategy.route(mockContext, mockConfig, mockClient);
+        expect(decision).not.toBeNull();
+        expect(decision?.model).toBe(overrideModel);
+        expect(decision?.metadata.source).toBe('override');
+        expect(decision?.metadata.reasoning).toContain('Routing bypassed by forced model directive');
+        expect(decision?.metadata.reasoning).toContain(overrideModel);
+    });
+    it('should handle different override model names', async () => {
+        const overrideModel = 'gemini-2.5-flash-experimental';
+        const mockConfig = {
+            getModel: () => overrideModel,
+            getPreviewFeatures: () => false,
+        };
+        const decision = await strategy.route(mockContext, mockConfig, mockClient);
+        expect(decision).not.toBeNull();
+        expect(decision?.model).toBe(overrideModel);
+    });
+});
+//# sourceMappingURL=overrideStrategy.test.js.map

package/dist/src/routing/strategies/overrideStrategy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"overrideStrategy.test.js","sourceRoot":"","sources":["../../../../src/routing/strategies/overrideStrategy.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAIzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAEnE,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,MAAM,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACxC,MAAM,WAAW,GAAG,EAAoB,CAAC;IACzC,MAAM,UAAU,GAAG,EAAmB,CAAC;IAEvC,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,UAAU,GAAG;YACjB,QAAQ,EAAE,GAAG,EAAE,CAAC,yBAAyB;YACzC,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAK;SACtB,CAAC;QAEZ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAC3E,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,aAAa,GAAG,uBAAuB,CAAC;QAC9C,MAAM,UAAU,GAAG;YACjB,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa;YAC7B,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAK;SACtB,CAAC;QAEZ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAE3E,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,SAAS,CAC5C,4CAA4C,CAC7C,CAAC;QACF,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,aAAa,GAAG,+BAA+B,CAAC;QACtD,MAAM,UAAU,GAAG;YACjB,QAAQ,EAAE,GAAG,EAAE,CAAC,aAAa;YAC7B,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAK;SACtB,CAAC;QAEZ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAE3E,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/safety/built-in.d.ts

@@ -0,0 +1,21 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { SafetyCheckInput, SafetyCheckResult } from './protocol.js';
+/**
+ * Interface for all in-process safety checkers.
+ */
+export interface InProcessChecker {
+    check(input: SafetyCheckInput): Promise<SafetyCheckResult>;
+}
+/**
+ * An in-process checker to validate file paths.
+ */
+export declare class AllowedPathChecker implements InProcessChecker {
+    check(input: SafetyCheckInput): Promise<SafetyCheckResult>;
+    private safelyResolvePath;
+    private isPathAllowed;
+    private collectPathsToCheck;
+}

package/dist/src/safety/built-in.js

@@ -0,0 +1,106 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as path from 'node:path';
+import * as fs from 'node:fs';
+import { SafetyCheckDecision } from './protocol.js';
+/**
+ * An in-process checker to validate file paths.
+ */
+export class AllowedPathChecker {
+    async check(input) {
+        const { toolCall, context } = input;
+        const config = input.config;
+        // Build list of allowed directories
+        const allowedDirs = [
+            context.environment.cwd,
+            ...context.environment.workspaces,
+        ];
+        // Find all arguments that look like paths
+        const includedArgs = config?.included_args ?? [];
+        const excludedArgs = config?.excluded_args ?? [];
+        const pathsToCheck = this.collectPathsToCheck(toolCall.args, includedArgs, excludedArgs);
+        // Check each path
+        for (const { path: p, argName } of pathsToCheck) {
+            const resolvedPath = this.safelyResolvePath(p, context.environment.cwd);
+            if (!resolvedPath) {
+                // If path cannot be resolved, deny it
+                return {
+                    decision: SafetyCheckDecision.DENY,
+                    reason: `Cannot resolve path "${p}" in argument "${argName}"`,
+                };
+            }
+            const isAllowed = allowedDirs.some((dir) => {
+                // Also resolve allowed directories to handle symlinks
+                const resolvedDir = this.safelyResolvePath(dir, context.environment.cwd);
+                if (!resolvedDir)
+                    return false;
+                return this.isPathAllowed(resolvedPath, resolvedDir);
+            });
+            if (!isAllowed) {
+                return {
+                    decision: SafetyCheckDecision.DENY,
+                    reason: `Path "${p}" in argument "${argName}" is outside of the allowed workspace directories.`,
+                };
+            }
+        }
+        return { decision: SafetyCheckDecision.ALLOW };
+    }
+    safelyResolvePath(inputPath, cwd) {
+        try {
+            const resolved = path.resolve(cwd, inputPath);
+            // Walk up the directory tree until we find a path that exists
+            let current = resolved;
+            // Stop at root (dirname(root) === root on many systems, or it becomes empty/'.' depending on implementation)
+            while (current && current !== path.dirname(current)) {
+                if (fs.existsSync(current)) {
+                    const canonical = fs.realpathSync(current);
+                    // Re-construct the full path from this canonical base
+                    const relative = path.relative(current, resolved);
+                    // path.join handles empty relative paths correctly (returns canonical)
+                    return path.join(canonical, relative);
+                }
+                current = path.dirname(current);
+            }
+            // Fallback if nothing exists (unlikely if root exists)
+            return resolved;
+        }
+        catch (_error) {
+            return null;
+        }
+    }
+    isPathAllowed(targetPath, allowedDir) {
+        const relative = path.relative(allowedDir, targetPath);
+        return (relative === '' ||
+            (!relative.startsWith('..') && !path.isAbsolute(relative)));
+    }
+    collectPathsToCheck(args, includedArgs, excludedArgs, prefix = '') {
+        const paths = [];
+        if (typeof args !== 'object' || args === null) {
+            return paths;
+        }
+        for (const [key, value] of Object.entries(args)) {
+            const fullKey = prefix ? `${prefix}.${key}` : key;
+            if (excludedArgs.includes(fullKey)) {
+                continue;
+            }
+            if (typeof value === 'string') {
+                if (includedArgs.includes(fullKey) ||
+                    key.includes('path') ||
+                    key.includes('directory') ||
+                    key.includes('file') ||
+                    key === 'source' ||
+                    key === 'destination') {
+                    paths.push({ path: value, argName: fullKey });
+                }
+            }
+            else if (typeof value === 'object') {
+                paths.push(...this.collectPathsToCheck(value, includedArgs, excludedArgs, fullKey));
+            }
+        }
+        return paths;
+    }
+}
+//# sourceMappingURL=built-in.js.map

package/dist/src/safety/built-in.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"built-in.js","sourceRoot":"","sources":["../../../src/safety/built-in.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAUpD;;GAEG;AACH,MAAM,OAAO,kBAAkB;IAC7B,KAAK,CAAC,KAAK,CAAC,KAAuB;QACjC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QACpC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAuC,CAAC;QAE7D,oCAAoC;QACpC,MAAM,WAAW,GAAG;YAClB,OAAO,CAAC,WAAW,CAAC,GAAG;YACvB,GAAG,OAAO,CAAC,WAAW,CAAC,UAAU;SAClC,CAAC;QAEF,0CAA0C;QAC1C,MAAM,YAAY,GAAG,MAAM,EAAE,aAAa,IAAI,EAAE,CAAC;QACjD,MAAM,YAAY,GAAG,MAAM,EAAE,aAAa,IAAI,EAAE,CAAC;QAEjD,MAAM,YAAY,GAAG,IAAI,CAAC,mBAAmB,CAC3C,QAAQ,CAAC,IAAI,EACb,YAAY,EACZ,YAAY,CACb,CAAC;QAEF,kBAAkB;QAClB,KAAK,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,YAAY,EAAE,CAAC;YAChD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAExE,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,sCAAsC;gBACtC,OAAO;oBACL,QAAQ,EAAE,mBAAmB,CAAC,IAAI;oBAClC,MAAM,EAAE,wBAAwB,CAAC,kBAAkB,OAAO,GAAG;iBAC9D,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBACzC,sDAAsD;gBACtD,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CACxC,GAAG,EACH,OAAO,CAAC,WAAW,CAAC,GAAG,CACxB,CAAC;gBACF,IAAI,CAAC,WAAW;oBAAE,OAAO,KAAK,CAAC;gBAC/B,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YACvD,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO;oBACL,QAAQ,EAAE,mBAAmB,CAAC,IAAI;oBAClC,MAAM,EAAE,SAAS,CAAC,kBAAkB,OAAO,oDAAoD;iBAChG,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,mBAAmB,CAAC,KAAK,EAAE,CAAC;IACjD,CAAC;IAEO,iBAAiB,CAAC,SAAiB,EAAE,GAAW;QACtD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAE9C,8DAA8D;YAC9D,IAAI,OAAO,GAAG,QAAQ,CAAC;YACvB,6GAA6G;YAC7G,OAAO,OAAO,IAAI,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpD,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC3B,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;oBAC3C,sDAAsD;oBACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;oBAClD,uEAAuE;oBACvE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBACxC,CAAC;gBACD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;YAED,uDAAuD;YACvD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,UAAkB,EAAE,UAAkB;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACvD,OAAO,CACL,QAAQ,KAAK,EAAE;YACf,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAC3D,CAAC;IACJ,CAAC;IAEO,mBAAmB,CACzB,IAAa,EACb,YAAsB,EACtB,YAAsB,EACtB,MAAM,GAAG,EAAE;QAEX,MAAM,KAAK,GAA6C,EAAE,CAAC;QAE3D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;YAElD,IAAI,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBACnC,SAAS;YACX,CAAC;YAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,IACE,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC;oBAC9B,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACpB,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;oBACzB,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;oBACpB,GAAG,KAAK,QAAQ;oBAChB,GAAG,KAAK,aAAa,EACrB,CAAC;oBACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACrC,KAAK,CAAC,IAAI,CACR,GAAG,IAAI,CAAC,mBAAmB,CACzB,KAAK,EACL,YAAY,EACZ,YAAY,EACZ,OAAO,CACR,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/src/safety/built-in.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/safety/built-in.test.js

@@ -0,0 +1,199 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import * as fs from 'node:fs/promises';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { AllowedPathChecker } from './built-in.js';
+import { SafetyCheckDecision } from './protocol.js';
+describe('AllowedPathChecker', () => {
+    let checker;
+    let testRootDir;
+    let mockCwd;
+    let mockWorkspaces;
+    beforeEach(async () => {
+        checker = new AllowedPathChecker();
+        testRootDir = await fs.mkdtemp(path.join(os.tmpdir(), 'safety-test-'));
+        mockCwd = path.join(testRootDir, 'home', 'user', 'project');
+        await fs.mkdir(mockCwd, { recursive: true });
+        mockWorkspaces = [
+            mockCwd,
+            path.join(testRootDir, 'home', 'user', 'other-project'),
+        ];
+        await fs.mkdir(mockWorkspaces[1], { recursive: true });
+    });
+    afterEach(async () => {
+        await fs.rm(testRootDir, { recursive: true, force: true });
+    });
+    const createInput = (toolArgs, config) => ({
+        protocolVersion: '1.0.0',
+        toolCall: {
+            name: 'test_tool',
+            args: toolArgs,
+        },
+        context: {
+            environment: {
+                cwd: mockCwd,
+                workspaces: mockWorkspaces,
+            },
+        },
+        config,
+    });
+    it('should allow paths within CWD', async () => {
+        const filePath = path.join(mockCwd, 'file.txt');
+        await fs.writeFile(filePath, 'test content');
+        const input = createInput({
+            path: filePath,
+        });
+        const result = await checker.check(input);
+        expect(result.decision).toBe(SafetyCheckDecision.ALLOW);
+    });
+    it('should allow paths within workspace roots', async () => {
+        const filePath = path.join(mockWorkspaces[1], 'data.json');
+        await fs.writeFile(filePath, 'test content');
+        const input = createInput({
+            path: filePath,
+        });
+        const result = await checker.check(input);
+        expect(result.decision).toBe(SafetyCheckDecision.ALLOW);
+    });
+    it('should deny paths outside allowed areas', async () => {
+        const outsidePath = path.join(testRootDir, 'etc', 'passwd');
+        await fs.mkdir(path.dirname(outsidePath), { recursive: true });
+        await fs.writeFile(outsidePath, 'secret');
+        const input = createInput({ path: outsidePath });
+        const result = await checker.check(input);
+        expect(result.decision).toBe(SafetyCheckDecision.DENY);
+        expect(result.reason).toContain('outside of the allowed workspace');
+    });
+    it('should deny paths using ../ to escape', async () => {
+        const secretPath = path.join(testRootDir, 'home', 'user', 'secret.txt');
+        await fs.writeFile(secretPath, 'secret');
+        const input = createInput({
+            path: path.join(mockCwd, '..', 'secret.txt'),
+        });
+        const result = await checker.check(input);
+        expect(result.decision).toBe(SafetyCheckDecision.DENY);
+    });
+    it('should check multiple path arguments', async () => {
+        const passwdPath = path.join(testRootDir, 'etc', 'passwd');
+        await fs.mkdir(path.dirname(passwdPath), { recursive: true });
+        await fs.writeFile(passwdPath, 'secret');
+        const srcPath = path.join(mockCwd, 'src.txt');
+        await fs.writeFile(srcPath, 'source content');
+        const input = createInput({
+            source: srcPath,
+            destination: passwdPath,
+        });
+        const result = await checker.check(input);
+        expect(result.decision).toBe(SafetyCheckDecision.DENY);
+        expect(result.reason).toContain(passwdPath);
+    });
+    it('should handle non-existent paths gracefully if they are inside allowed dir', async () => {
+        const input = createInput({
+            path: path.join(mockCwd, 'new-file.txt'),
+        });
+        const result = await checker.check(input);
+        expect(result.decision).toBe(SafetyCheckDecision.ALLOW);
+    });
+    it('should deny access if path contains a symlink pointing outside allowed directories', async () => {
+        const symlinkPath = path.join(mockCwd, 'symlink');
+        const targetPath = path.join(testRootDir, 'etc', 'passwd');
+        await fs.mkdir(path.dirname(targetPath), { recursive: true });
+        await fs.writeFile(targetPath, 'secret');
+        // Create symlink: mockCwd/symlink -> targetPath
+        await fs.symlink(targetPath, symlinkPath);
+        const input = createInput({ path: symlinkPath });
+        const result = await checker.check(input);
+        expect(result.decision).toBe(SafetyCheckDecision.DENY);
+        expect(result.reason).toContain('outside of the allowed workspace directories');
+    });
+    it('should allow access if path contains a symlink pointing INSIDE allowed directories', async () => {
+        const symlinkPath = path.join(mockCwd, 'symlink-inside');
+        const realFilePath = path.join(mockCwd, 'real-file');
+        await fs.writeFile(realFilePath, 'real content');
+        // Create symlink: mockCwd/symlink-inside -> mockCwd/real-file
+        await fs.symlink(realFilePath, symlinkPath);
+        const input = createInput({ path: symlinkPath });
+        const result = await checker.check(input);
+        expect(result.decision).toBe(SafetyCheckDecision.ALLOW);
+    });
+    it('should check explicitly included arguments', async () => {
+        const outsidePath = path.join(testRootDir, 'etc', 'passwd');
+        await fs.mkdir(path.dirname(outsidePath), { recursive: true });
+        await fs.writeFile(outsidePath, 'secret');
+        const input = createInput({ custom_arg: outsidePath }, { included_args: ['custom_arg'] });
+        const result = await checker.check(input);
+        expect(result.decision).toBe(SafetyCheckDecision.DENY);
+        expect(result.reason).toContain('outside of the allowed workspace');
+    });
+    it('should skip explicitly excluded arguments', async () => {
+        const outsidePath = path.join(testRootDir, 'etc', 'passwd');
+        await fs.mkdir(path.dirname(outsidePath), { recursive: true });
+        await fs.writeFile(outsidePath, 'secret');
+        // Normally 'path' would be checked, but we exclude it
+        const input = createInput({ path: outsidePath }, { excluded_args: ['path'] });
+        const result = await checker.check(input);
+        expect(result.decision).toBe(SafetyCheckDecision.ALLOW);
+    });
+    it('should handle both included and excluded arguments', async () => {
+        const outsidePath = path.join(testRootDir, 'etc', 'passwd');
+        await fs.mkdir(path.dirname(outsidePath), { recursive: true });
+        await fs.writeFile(outsidePath, 'secret');
+        const input = createInput({
+            path: outsidePath, // Excluded
+            custom_arg: outsidePath, // Included
+        }, {
+            excluded_args: ['path'],
+            included_args: ['custom_arg'],
+        });
+        const result = await checker.check(input);
+        expect(result.decision).toBe(SafetyCheckDecision.DENY);
+        // Should be denied because of custom_arg, not path
+        expect(result.reason).toContain(outsidePath);
+    });
+    it('should check nested path arguments', async () => {
+        const outsidePath = path.join(testRootDir, 'etc', 'passwd');
+        await fs.mkdir(path.dirname(outsidePath), { recursive: true });
+        await fs.writeFile(outsidePath, 'secret');
+        const input = createInput({
+            nested: {
+                path: outsidePath,
+            },
+        });
+        const result = await checker.check(input);
+        expect(result.decision).toBe(SafetyCheckDecision.DENY);
+        expect(result.reason).toContain(outsidePath);
+        expect(result.reason).toContain('nested.path');
+    });
+    it('should support dot notation for included_args', async () => {
+        const outsidePath = path.join(testRootDir, 'etc', 'passwd');
+        await fs.mkdir(path.dirname(outsidePath), { recursive: true });
+        await fs.writeFile(outsidePath, 'secret');
+        const input = createInput({
+            nested: {
+                custom: outsidePath,
+            },
+        }, { included_args: ['nested.custom'] });
+        const result = await checker.check(input);
+        expect(result.decision).toBe(SafetyCheckDecision.DENY);
+        expect(result.reason).toContain(outsidePath);
+        expect(result.reason).toContain('nested.custom');
+    });
+    it('should support dot notation for excluded_args', async () => {
+        const outsidePath = path.join(testRootDir, 'etc', 'passwd');
+        await fs.mkdir(path.dirname(outsidePath), { recursive: true });
+        await fs.writeFile(outsidePath, 'secret');
+        const input = createInput({
+            nested: {
+                path: outsidePath,
+            },
+        }, { excluded_args: ['nested.path'] });
+        const result = await checker.check(input);
+        expect(result.decision).toBe(SafetyCheckDecision.ALLOW);
+    });
+});
+//# sourceMappingURL=built-in.test.js.map