@office-ai/aioncli-core 0.30.0 → 0.30.1

package/dist/src/routing/strategies/gemmaClassifierStrategy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemmaClassifierStrategy.test.js","sourceRoot":"","sources":["../../../../src/routing/strategies/gemmaClassifierStrategy.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAa,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAIvE,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAGzD,EAAE,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;AAE7C,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,IAAI,QAAiC,CAAC;IACtC,IAAI,WAA2B,CAAC;IAChC,IAAI,UAAkB,CAAC;IACvB,IAAI,iBAAgC,CAAC;IACrC,IAAI,uBAA4C,CAAC;IACjD,IAAI,gBAAsB,CAAC;IAE3B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,gBAAgB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAE3B,UAAU,GAAG;YACX,2BAA2B,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC;gBACnD,OAAO,EAAE,IAAI;gBACb,UAAU,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE;aAC9C,CAAC;YACF,QAAQ,EAAE,GAAG,EAAE,CAAC,oBAAoB;YACpC,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAK;SACX,CAAC;QAEvB,QAAQ,GAAG,IAAI,uBAAuB,EAAE,CAAC;QACzC,WAAW,GAAG;YACZ,OAAO,EAAE,EAAE;YACX,OAAO,EAAE,aAAa;YACtB,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC,MAAM;SACrC,CAAC;QAEF,iBAAiB,GAAG,EAAmB,CAAC;QACxC,uBAAuB,GAAG;YACxB,YAAY,EAAE,gBAAgB;SACG,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,eAAe,CAAC;YAChE,OAAO,EAAE,KAAK;SACf,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CACnC,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,uBAAuB,CACxB,CAAC;QACF,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC,eAAe,CAAC;YAChE,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE;SACrC,CAAC,CAAC;QAEH,MAAM,MAAM,CACV,QAAQ,CAAC,KAAK,CACZ,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,uBAAuB,CACxB,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,eAAe,GAAG;YACtB,SAAS,EAAE,aAAa;YACxB,YAAY,EAAE,OAAO;SACtB,CAAC;QACF,gBAAgB,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAEpD,MAAM,QAAQ,CAAC,KAAK,CAClB,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,uBAAuB,CACxB,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,CAAC,oBAAoB,CAC3C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EACjB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAClB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAClB,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CACxB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,eAAe,GAAG;YACtB,SAAS,EAAE,wBAAwB;YACnC,YAAY,EAAE,OAAO;SACtB,CAAC;QACF,gBAAgB,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAEpD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CACnC,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,uBAAuB,CACxB,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAChD,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YACvB,KAAK,EAAE,0BAA0B;YACjC,QAAQ,EAAE;gBACR,MAAM,EAAE,iBAAiB;gBACzB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC7B,SAAS,EAAE,eAAe,CAAC,SAAS;aACrC;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,eAAe,GAAG;YACtB,SAAS,EAAE,yBAAyB;YACpC,YAAY,EAAE,KAAK;SACpB,CAAC;QACF,gBAAgB,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QACpD,WAAW,CAAC,OAAO,GAAG,6BAA6B,CAAC;QAEpD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CACnC,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,uBAAuB,CACxB,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAChD,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC;YACvB,KAAK,EAAE,oBAAoB;YAC3B,QAAQ,EAAE;gBACR,MAAM,EAAE,iBAAiB;gBACzB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC7B,SAAS,EAAE,eAAe,CAAC,SAAS;aACrC;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,cAAc,GAAG,EAAE;aACtB,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC;aAC1B,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAChC,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QAC3C,gBAAgB,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAE9C,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CACnC,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,uBAAuB,CACxB,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5B,MAAM,CAAC,cAAc,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC1C,cAAc,CAAC,WAAW,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,cAAc,GAAG,EAAE;aACtB,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC;aAC1B,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAChC,MAAM,oBAAoB,GAAG;YAC3B,SAAS,EAAE,wBAAwB;YACnC,iEAAiE;SAClE,CAAC;QACF,gBAAgB,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;QAEzD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CACnC,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,uBAAuB,CACxB,CAAC;QAEF,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5B,MAAM,CAAC,cAAc,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC1C,cAAc,CAAC,WAAW,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,WAAW,CAAC,OAAO,GAAG;YACpB,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,EAAE;YAClD;gBACE,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC;aAC3D;YACD;gBACE,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE;oBACL,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;iBACpE;aACF;YACD,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,EAAE;SACzD,CAAC;QACF,MAAM,eAAe,GAAG;YACtB,SAAS,EAAE,SAAS;YACpB,YAAY,EAAE,OAAO;SACtB,CAAC;QACF,gBAAgB,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAEpD,MAAM,QAAQ,CAAC,KAAK,CAClB,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,uBAAuB,CACxB,CAAC;QAIF,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAA2B,CAAC;QAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC;YACrB,qCAAqC;YACrC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YACtC,OAAO;QACT,CAAC;QACD,MAAM,gBAAgB,GAAG;;;;;;;;;CAS5B,CAAC;QACE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,WAAW,GAAc,EAAE,CAAC;QAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YACtE,oCAAoC;YACpC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChB,WAAW,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,OAAO;oBACb,KAAK,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC;iBACvD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,WAAW,CAAC,OAAO,GAAG,WAAW,CAAC;QAClC,MAAM,eAAe,GAAG;YACtB,SAAS,EAAE,SAAS;YACpB,YAAY,EAAE,OAAO;SACtB,CAAC;QACF,gBAAgB,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAEpD,MAAM,QAAQ,CAAC,KAAK,CAClB,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,uBAAuB,CACxB,CAAC;QAEF,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE3D,yDAAyD;QACzD,MAAM,CAAC,gBAAgB,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,WAAW,CAAC,OAAO,GAAG;YACpB,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE;YACpD,+DAA+D;YAC/D,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAa;YACxC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,EAAE;SACtD,CAAC;QACF,MAAM,eAAe,GAAG;YACtB,SAAS,EAAE,SAAS;YACpB,YAAY,EAAE,OAAO;SACtB,CAAC;QACF,gBAAgB,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAEpD,MAAM,QAAQ,CAAC,KAAK,CAClB,WAAW,EACX,UAAU,EACV,iBAAiB,EACjB,uBAAuB,CACxB,CAAC;QAGF,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAA2B,CAAC;QAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAE/B,MAAM,gBAAgB,GAAG;;;;;;;;;CAS5B,CAAC;QAEE,MAAM,CAAC,QAAS,CAAC,KAAM,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/safety/conseca/conseca.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { InProcessChecker } from '../built-in.js';
+import { type SafetyCheckInput, type SafetyCheckResult } from '../protocol.js';
+import type { Config } from '../../config/config.js';
+import type { SecurityPolicy } from './types.js';
+export declare class ConsecaSafetyChecker implements InProcessChecker {
+    private static instance;
+    private currentPolicy;
+    private activeUserPrompt;
+    private config;
+    /**
+     * Private constructor to enforce singleton pattern.
+     * Use `getInstance()` to access the instance.
+     */
+    private constructor();
+    static getInstance(): ConsecaSafetyChecker;
+    /**
+     * Resets the singleton instance. Use only in tests.
+     */
+    static resetInstance(): void;
+    setConfig(config: Config): void;
+    check(input: SafetyCheckInput): Promise<SafetyCheckResult>;
+    getPolicy(userPrompt: string, trustedContent: string, config: Config): Promise<SecurityPolicy>;
+    private extractUserPrompt;
+    getCurrentPolicy(): SecurityPolicy | null;
+    getActiveUserPrompt(): string | null;
+}

package/dist/src/safety/conseca/conseca.js

@@ -0,0 +1,105 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { SafetyCheckDecision, } from '../protocol.js';
+import { logConsecaPolicyGeneration, ConsecaPolicyGenerationEvent, logConsecaVerdict, ConsecaVerdictEvent, } from '../../telemetry/index.js';
+import { debugLogger } from '../../utils/debugLogger.js';
+import { generatePolicy } from './policy-generator.js';
+import { enforcePolicy } from './policy-enforcer.js';
+export class ConsecaSafetyChecker {
+    static instance;
+    currentPolicy = null;
+    activeUserPrompt = null;
+    config = null;
+    /**
+     * Private constructor to enforce singleton pattern.
+     * Use `getInstance()` to access the instance.
+     */
+    constructor() { }
+    static getInstance() {
+        if (!ConsecaSafetyChecker.instance) {
+            ConsecaSafetyChecker.instance = new ConsecaSafetyChecker();
+        }
+        return ConsecaSafetyChecker.instance;
+    }
+    /**
+     * Resets the singleton instance. Use only in tests.
+     */
+    static resetInstance() {
+        ConsecaSafetyChecker.instance = undefined;
+    }
+    setConfig(config) {
+        this.config = config;
+    }
+    async check(input) {
+        debugLogger.debug(`[Conseca] check called. History is: ${JSON.stringify(input.context.history)}`);
+        if (!this.config) {
+            debugLogger.debug('[Conseca] check failed: Config not initialized');
+            return {
+                decision: SafetyCheckDecision.ALLOW,
+                reason: 'Config not initialized',
+            };
+        }
+        if (!this.config.enableConseca) {
+            debugLogger.debug('[Conseca] check skipped: Conseca is not enabled.');
+            return {
+                decision: SafetyCheckDecision.ALLOW,
+                reason: 'Conseca is disabled',
+            };
+        }
+        const userPrompt = this.extractUserPrompt(input);
+        let trustedContent = '';
+        const toolRegistry = this.config.getToolRegistry();
+        if (toolRegistry) {
+            const tools = toolRegistry.getFunctionDeclarations();
+            trustedContent = JSON.stringify(tools, null, 2);
+        }
+        if (userPrompt) {
+            await this.getPolicy(userPrompt, trustedContent, this.config);
+        }
+        else {
+            debugLogger.debug(`[Conseca] Skipping policy generation because userPrompt is null`);
+        }
+        let result;
+        if (!this.currentPolicy) {
+            result = {
+                decision: SafetyCheckDecision.ALLOW, // Fallback if no policy generated yet
+                reason: 'No security policy generated.',
+                error: 'No security policy generated.',
+            };
+        }
+        else {
+            result = await enforcePolicy(this.currentPolicy, input.toolCall, this.config);
+        }
+        logConsecaVerdict(this.config, new ConsecaVerdictEvent(userPrompt || '', JSON.stringify(this.currentPolicy || {}), JSON.stringify(input.toolCall), result.decision, result.reason || '', 'error' in result ? result.error : undefined));
+        return result;
+    }
+    async getPolicy(userPrompt, trustedContent, config) {
+        if (this.activeUserPrompt === userPrompt && this.currentPolicy) {
+            return this.currentPolicy;
+        }
+        const { policy, error } = await generatePolicy(userPrompt, trustedContent, config);
+        this.currentPolicy = policy;
+        this.activeUserPrompt = userPrompt;
+        logConsecaPolicyGeneration(config, new ConsecaPolicyGenerationEvent(userPrompt, trustedContent, JSON.stringify(policy), error));
+        return policy;
+    }
+    extractUserPrompt(input) {
+        const prompt = input.context.history?.turns.at(-1)?.user.text;
+        if (prompt) {
+            return prompt;
+        }
+        debugLogger.debug(`[Conseca] extractUserPrompt failed.`);
+        return null;
+    }
+    // Helper methods for testing state
+    getCurrentPolicy() {
+        return this.currentPolicy;
+    }
+    getActiveUserPrompt() {
+        return this.activeUserPrompt;
+    }
+}
+//# sourceMappingURL=conseca.js.map

package/dist/src/safety/conseca/conseca.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conseca.js","sourceRoot":"","sources":["../../../../src/safety/conseca/conseca.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,mBAAmB,GAGpB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,EAC5B,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAGzD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD,MAAM,OAAO,oBAAoB;IACvB,MAAM,CAAC,QAAQ,CAAmC;IAClD,aAAa,GAA0B,IAAI,CAAC;IAC5C,gBAAgB,GAAkB,IAAI,CAAC;IACvC,MAAM,GAAkB,IAAI,CAAC;IAErC;;;OAGG;IACH,gBAAuB,CAAC;IAExB,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,CAAC;YACnC,oBAAoB,CAAC,QAAQ,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7D,CAAC;QACD,OAAO,oBAAoB,CAAC,QAAQ,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAa;QAClB,oBAAoB,CAAC,QAAQ,GAAG,SAAS,CAAC;IAC5C,CAAC;IAED,SAAS,CAAC,MAAc;QACtB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAuB;QACjC,WAAW,CAAC,KAAK,CACf,uCAAuC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAC/E,CAAC;QAEF,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,WAAW,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;YACpE,OAAO;gBACL,QAAQ,EAAE,mBAAmB,CAAC,KAAK;gBACnC,MAAM,EAAE,wBAAwB;aACjC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC/B,WAAW,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACtE,OAAO;gBACL,QAAQ,EAAE,mBAAmB,CAAC,KAAK;gBACnC,MAAM,EAAE,qBAAqB;aAC9B,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,cAAc,GAAG,EAAE,CAAC;QAExB,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QACnD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,YAAY,CAAC,uBAAuB,EAAE,CAAC;YACrD,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAChE,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,KAAK,CACf,iEAAiE,CAClE,CAAC;QACJ,CAAC;QAED,IAAI,MAAyB,CAAC;QAE9B,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,GAAG;gBACP,QAAQ,EAAE,mBAAmB,CAAC,KAAK,EAAE,sCAAsC;gBAC3E,MAAM,EAAE,+BAA+B;gBACvC,KAAK,EAAE,+BAA+B;aACvC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,MAAM,aAAa,CAC1B,IAAI,CAAC,aAAa,EAClB,KAAK,CAAC,QAAQ,EACd,IAAI,CAAC,MAAM,CACZ,CAAC;QACJ,CAAC;QAED,iBAAiB,CACf,IAAI,CAAC,MAAM,EACX,IAAI,mBAAmB,CACrB,UAAU,IAAI,EAAE,EAChB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,EACxC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAC9B,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,MAAM,IAAI,EAAE,EACnB,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC7C,CACF,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,SAAS,CACb,UAAkB,EAClB,cAAsB,EACtB,MAAc;QAEd,IAAI,IAAI,CAAC,gBAAgB,KAAK,UAAU,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC,aAAa,CAAC;QAC5B,CAAC;QAED,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,cAAc,CAC5C,UAAU,EACV,cAAc,EACd,MAAM,CACP,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;QAC5B,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC;QAEnC,0BAA0B,CACxB,MAAM,EACN,IAAI,4BAA4B,CAC9B,UAAU,EACV,cAAc,EACd,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACtB,KAAK,CACN,CACF,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,iBAAiB,CAAC,KAAuB;QAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC;QAC9D,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,WAAW,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mCAAmC;IACnC,gBAAgB;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;CACF"}

package/dist/src/safety/conseca/conseca.test.js

@@ -0,0 +1,226 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, beforeEach, vi } from 'vitest';
+import { ConsecaSafetyChecker } from './conseca.js';
+import { SafetyCheckDecision } from '../protocol.js';
+import { logConsecaPolicyGeneration, logConsecaVerdict, } from '../../telemetry/index.js';
+import * as policyGenerator from './policy-generator.js';
+import * as policyEnforcer from './policy-enforcer.js';
+vi.mock('../../telemetry/index.js', () => ({
+    logConsecaPolicyGeneration: vi.fn(),
+    ConsecaPolicyGenerationEvent: vi.fn(),
+    logConsecaVerdict: vi.fn(),
+    ConsecaVerdictEvent: vi.fn(),
+}));
+vi.mock('./policy-generator.js');
+vi.mock('./policy-enforcer.js');
+describe('ConsecaSafetyChecker', () => {
+    let checker;
+    let mockConfig;
+    beforeEach(() => {
+        // Reset singleton instance to ensure clean state
+        ConsecaSafetyChecker.resetInstance();
+        // Get the fresh singleton instance
+        checker = ConsecaSafetyChecker.getInstance();
+        mockConfig = {
+            enableConseca: true,
+            getToolRegistry: vi.fn().mockReturnValue({
+                getFunctionDeclarations: vi.fn().mockReturnValue([]),
+            }),
+        };
+        checker.setConfig(mockConfig);
+        vi.clearAllMocks();
+        // Default mock implementations
+        vi.mocked(policyGenerator.generatePolicy).mockResolvedValue({ policy: {} });
+        vi.mocked(policyEnforcer.enforcePolicy).mockResolvedValue({
+            decision: SafetyCheckDecision.ALLOW,
+        });
+    });
+    it('should be a singleton', () => {
+        const instance1 = ConsecaSafetyChecker.getInstance();
+        const instance2 = ConsecaSafetyChecker.getInstance();
+        expect(instance1).toBe(instance2);
+    });
+    it('should return ALLOW when no user prompt is present in context', async () => {
+        const input = {
+            protocolVersion: '1.0.0',
+            toolCall: { name: 'testTool' },
+            context: {
+                environment: { cwd: '/tmp', workspaces: [] },
+            },
+        };
+        const result = await checker.check(input);
+        expect(result.decision).toBe(SafetyCheckDecision.ALLOW);
+    });
+    it('should return ALLOW if enableConseca is false', async () => {
+        const disabledConfig = {
+            enableConseca: false,
+        };
+        checker.setConfig(disabledConfig);
+        const input = {
+            protocolVersion: '1.0.0',
+            toolCall: { name: 'testTool' },
+            context: {
+                environment: { cwd: '/tmp', workspaces: [] },
+            },
+        };
+        const result = await checker.check(input);
+        expect(result.decision).toBe(SafetyCheckDecision.ALLOW);
+        expect(result.reason).toBe('Conseca is disabled');
+        expect(policyGenerator.generatePolicy).not.toHaveBeenCalled();
+    });
+    it('getPolicy should return cached policy if user prompt matches', async () => {
+        const mockPolicy = {
+            tool: {
+                permissions: SafetyCheckDecision.ALLOW,
+                constraints: 'None',
+                rationale: 'Test',
+            },
+        };
+        vi.mocked(policyGenerator.generatePolicy).mockResolvedValue({
+            policy: mockPolicy,
+        });
+        const policy1 = await checker.getPolicy('prompt', 'trusted', mockConfig);
+        const policy2 = await checker.getPolicy('prompt', 'trusted', mockConfig);
+        expect(policy1).toBe(mockPolicy);
+        expect(policy2).toBe(mockPolicy);
+        expect(policyGenerator.generatePolicy).toHaveBeenCalledTimes(1);
+    });
+    it('getPolicy should generate new policy if user prompt changes', async () => {
+        const mockPolicy1 = {
+            tool1: {
+                permissions: SafetyCheckDecision.ALLOW,
+                constraints: 'None',
+                rationale: 'Test',
+            },
+        };
+        const mockPolicy2 = {
+            tool2: {
+                permissions: SafetyCheckDecision.ALLOW,
+                constraints: 'None',
+                rationale: 'Test',
+            },
+        };
+        vi.mocked(policyGenerator.generatePolicy)
+            .mockResolvedValueOnce({ policy: mockPolicy1 })
+            .mockResolvedValueOnce({ policy: mockPolicy2 });
+        const policy1 = await checker.getPolicy('prompt1', 'trusted', mockConfig);
+        const policy2 = await checker.getPolicy('prompt2', 'trusted', mockConfig);
+        expect(policy1).toBe(mockPolicy1);
+        expect(policy2).toBe(mockPolicy2);
+        expect(policyGenerator.generatePolicy).toHaveBeenCalledTimes(2);
+    });
+    it('check should call getPolicy and enforcePolicy', async () => {
+        const mockPolicy = {
+            tool: {
+                permissions: SafetyCheckDecision.ALLOW,
+                constraints: 'None',
+                rationale: 'Test',
+            },
+        };
+        vi.mocked(policyGenerator.generatePolicy).mockResolvedValue({
+            policy: mockPolicy,
+        });
+        vi.mocked(policyEnforcer.enforcePolicy).mockResolvedValue({
+            decision: SafetyCheckDecision.ALLOW,
+        });
+        const input = {
+            protocolVersion: '1.0.0',
+            toolCall: { name: 'tool', args: {} },
+            context: {
+                environment: { cwd: '.', workspaces: [] },
+                history: {
+                    turns: [
+                        {
+                            user: { text: 'user prompt' },
+                            model: {},
+                        },
+                    ],
+                },
+            },
+        };
+        const result = await checker.check(input);
+        expect(policyGenerator.generatePolicy).toHaveBeenCalledWith('user prompt', expect.any(String), mockConfig);
+        expect(policyEnforcer.enforcePolicy).toHaveBeenCalledWith(mockPolicy, input.toolCall, mockConfig);
+        expect(result.decision).toBe(SafetyCheckDecision.ALLOW);
+    });
+    it('check should return ALLOW if no user prompt found (fallback)', async () => {
+        const input = {
+            protocolVersion: '1.0.0',
+            toolCall: { name: 'tool', args: {} },
+            context: {
+                environment: { cwd: '.', workspaces: [] },
+            },
+        };
+        const result = await checker.check(input);
+        expect(policyGenerator.generatePolicy).not.toHaveBeenCalled();
+        expect(result.decision).toBe(SafetyCheckDecision.ALLOW);
+    });
+    // Test state helpers
+    it('should expose current state via helpers', async () => {
+        const mockPolicy = {
+            tool: {
+                permissions: SafetyCheckDecision.ALLOW,
+                constraints: 'None',
+                rationale: 'Test',
+            },
+        };
+        vi.mocked(policyGenerator.generatePolicy).mockResolvedValue({
+            policy: mockPolicy,
+        });
+        await checker.getPolicy('prompt', 'trusted', mockConfig);
+        expect(checker.getCurrentPolicy()).toBe(mockPolicy);
+        expect(checker.getActiveUserPrompt()).toBe('prompt');
+    });
+    it('should log policy generation event when config is set', async () => {
+        const mockPolicy = {
+            tool: {
+                permissions: SafetyCheckDecision.ALLOW,
+                constraints: 'None',
+                rationale: 'Test',
+            },
+        };
+        vi.mocked(policyGenerator.generatePolicy).mockResolvedValue({
+            policy: mockPolicy,
+        });
+        await checker.getPolicy('telemetry_prompt', 'trusted', mockConfig);
+        expect(logConsecaPolicyGeneration).toHaveBeenCalledWith(mockConfig, expect.anything());
+    });
+    it('should log verdict event on check', async () => {
+        const mockPolicy = {
+            tool: {
+                permissions: SafetyCheckDecision.ALLOW,
+                constraints: 'None',
+                rationale: 'Test',
+            },
+        };
+        vi.mocked(policyGenerator.generatePolicy).mockResolvedValue({
+            policy: mockPolicy,
+        });
+        vi.mocked(policyEnforcer.enforcePolicy).mockResolvedValue({
+            decision: SafetyCheckDecision.ALLOW,
+            reason: 'Allowed by policy',
+        });
+        const input = {
+            protocolVersion: '1.0.0',
+            toolCall: { name: 'tool', args: {} },
+            context: {
+                environment: { cwd: '.', workspaces: [] },
+                history: {
+                    turns: [
+                        {
+                            user: { text: 'user prompt' },
+                            model: {},
+                        },
+                    ],
+                },
+            },
+        };
+        await checker.check(input);
+        expect(logConsecaVerdict).toHaveBeenCalledWith(mockConfig, expect.anything());
+    });
+});
+//# sourceMappingURL=conseca.test.js.map

package/dist/src/safety/conseca/conseca.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conseca.test.js","sourceRoot":"","sources":["../../../../src/safety/conseca/conseca.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAyB,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EACL,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,eAAe,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,cAAc,MAAM,sBAAsB,CAAC;AAEvD,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,0BAA0B,EAAE,EAAE,CAAC,EAAE,EAAE;IACnC,4BAA4B,EAAE,EAAE,CAAC,EAAE,EAAE;IACrC,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC1B,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC7B,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;AACjC,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;AAEhC,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAI,OAA6B,CAAC;IAClC,IAAI,UAAkB,CAAC;IAEvB,UAAU,CAAC,GAAG,EAAE;QACd,iDAAiD;QACjD,oBAAoB,CAAC,aAAa,EAAE,CAAC;QACrC,mCAAmC;QACnC,OAAO,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC;QAE7C,UAAU,GAAG;YACX,aAAa,EAAE,IAAI;YACnB,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC;gBACvC,uBAAuB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;aACrD,CAAC;SACkB,CAAC;QACvB,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC9B,EAAE,CAAC,aAAa,EAAE,CAAC;QAEnB,+BAA+B;QAC/B,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5E,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,iBAAiB,CAAC;YACxD,QAAQ,EAAE,mBAAmB,CAAC,KAAK;SACpC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,SAAS,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,SAAS,GAAG,oBAAoB,CAAC,WAAW,EAAE,CAAC;QACrD,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,KAAK,GAAqB;YAC9B,eAAe,EAAE,OAAO;YACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;YAC9B,OAAO,EAAE;gBACP,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;aAC7C;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,cAAc,GAAG;YACrB,aAAa,EAAE,KAAK;SACA,CAAC;QACvB,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAElC,MAAM,KAAK,GAAqB;YAC9B,eAAe,EAAE,OAAO;YACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;YAC9B,OAAO,EAAE;gBACP,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;aAC7C;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAClD,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,UAAU,GAAG;YACjB,IAAI,EAAE;gBACJ,WAAW,EAAE,mBAAmB,CAAC,KAAK;gBACtC,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,MAAM;aAClB;SACF,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC;YAC1D,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAEzE,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjC,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,MAAM,WAAW,GAAG;YAClB,KAAK,EAAE;gBACL,WAAW,EAAE,mBAAmB,CAAC,KAAK;gBACtC,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,MAAM;aAClB;SACF,CAAC;QACF,MAAM,WAAW,GAAG;YAClB,KAAK,EAAE;gBACL,WAAW,EAAE,mBAAmB,CAAC,KAAK;gBACtC,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,MAAM;aAClB;SACF,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC;aACtC,qBAAqB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;aAC9C,qBAAqB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAElD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAE1E,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAClC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAClC,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,UAAU,GAAG;YACjB,IAAI,EAAE;gBACJ,WAAW,EAAE,mBAAmB,CAAC,KAAK;gBACtC,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,MAAM;aAClB;SACF,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC;YAC1D,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,iBAAiB,CAAC;YACxD,QAAQ,EAAE,mBAAmB,CAAC,KAAK;SACpC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAqB;YAC9B,eAAe,EAAE,OAAO;YACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;YACpC,OAAO,EAAE;gBACP,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE;gBACzC,OAAO,EAAE;oBACP,KAAK,EAAE;wBACL;4BACE,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;4BAC7B,KAAK,EAAE,EAAE;yBACV;qBACF;iBACF;aACF;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE1C,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,oBAAoB,CACzD,aAAa,EACb,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAClB,UAAU,CACX,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,oBAAoB,CACvD,UAAU,EACV,KAAK,CAAC,QAAQ,EACd,UAAU,CACX,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,KAAK,GAAqB;YAC9B,eAAe,EAAE,OAAO;YACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;YACpC,OAAO,EAAE;gBACP,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE;aAC1C;SACF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE1C,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,qBAAqB;IACrB,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,UAAU,GAAG;YACjB,IAAI,EAAE;gBACJ,WAAW,EAAE,mBAAmB,CAAC,KAAK;gBACtC,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,MAAM;aAClB;SACF,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC;YAC1D,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAEzD,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,UAAU,GAAG;YACjB,IAAI,EAAE;gBACJ,WAAW,EAAE,mBAAmB,CAAC,KAAK;gBACtC,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,MAAM;aAClB;SACF,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC;YAC1D,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,SAAS,CAAC,kBAAkB,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAEnE,MAAM,CAAC,0BAA0B,CAAC,CAAC,oBAAoB,CACrD,UAAU,EACV,MAAM,CAAC,QAAQ,EAAE,CAClB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,UAAU,GAAG;YACjB,IAAI,EAAE;gBACJ,WAAW,EAAE,mBAAmB,CAAC,KAAK;gBACtC,WAAW,EAAE,MAAM;gBACnB,SAAS,EAAE,MAAM;aAClB;SACF,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC,iBAAiB,CAAC;YAC1D,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,iBAAiB,CAAC;YACxD,QAAQ,EAAE,mBAAmB,CAAC,KAAK;YACnC,MAAM,EAAE,mBAAmB;SAC5B,CAAC,CAAC;QAEH,MAAM,KAAK,GAAqB;YAC9B,eAAe,EAAE,OAAO;YACxB,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;YACpC,OAAO,EAAE;gBACP,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE;gBACzC,OAAO,EAAE;oBACP,KAAK,EAAE;wBACL;4BACE,IAAI,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;4BAC7B,KAAK,EAAE,EAAE;yBACV;qBACF;iBACF;aACF;SACF,CAAC;QAEF,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE3B,MAAM,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAC5C,UAAU,EACV,MAAM,CAAC,QAAQ,EAAE,CAClB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/safety/conseca/integration.test.js

@@ -0,0 +1,19 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect } from 'vitest';
+import { ConsecaSafetyChecker } from './conseca.js';
+import { InProcessCheckerType } from '../../policy/types.js';
+import { CheckerRegistry } from '../registry.js';
+describe('Conseca Integration', () => {
+    it('should be registered and resolvable via CheckerRegistry', () => {
+        const registry = new CheckerRegistry('.');
+        const checker = registry.resolveInProcess(InProcessCheckerType.CONSECA);
+        expect(checker).toBeDefined();
+        expect(checker).toBeInstanceOf(ConsecaSafetyChecker);
+        expect(checker).toBe(ConsecaSafetyChecker.getInstance());
+    });
+});
+//# sourceMappingURL=integration.test.js.map

package/dist/src/safety/conseca/integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration.test.js","sourceRoot":"","sources":["../../../../src/safety/conseca/integration.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAExE,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;QACrD,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/safety/conseca/policy-enforcer.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { Config } from '../../config/config.js';
+import type { FunctionCall } from '@google/genai';
+import { type SafetyCheckResult } from '../protocol.js';
+import type { SecurityPolicy } from './types.js';
+/**
+ * Enforces the security policy for a given tool call.
+ */
+export declare function enforcePolicy(policy: SecurityPolicy, toolCall: FunctionCall, config: Config): Promise<SafetyCheckResult>;

package/dist/src/safety/conseca/policy-enforcer.js

@@ -0,0 +1,135 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { SafetyCheckDecision } from '../protocol.js';
+import { getResponseText } from '../../utils/partUtils.js';
+import { safeTemplateReplace } from '../../utils/textUtils.js';
+import { DEFAULT_GEMINI_FLASH_MODEL } from '../../config/models.js';
+import { debugLogger } from '../../utils/debugLogger.js';
+import { LlmRole } from '../../telemetry/index.js';
+const CONSECA_ENFORCEMENT_PROMPT = `
+You are a security enforcement engine. Your goal is to check if a specific tool call complies with a given security policy.
+
+Input:
+1.  **Security Policy:** A set of rules defining allowed and denied actions for this specific tool.
+2.  **Tool Call:** The actual function call the system intends to execute.
+
+Security Policy:
+{{policy}}
+
+Tool Call:
+{{tool_call}}
+
+Evaluate the tool call against the policy.
+1. Check if the tool is allowed.
+2. Check if the arguments match the constraints.
+3. Output a JSON object with:
+   - "decision": "allow", "deny", or "ask_user".
+   - "reason": A brief explanation.
+
+Output strictly JSON.
+`;
+import { z } from 'zod';
+import { zodToJsonSchema } from 'zod-to-json-schema';
+const EnforcementResultSchema = z.object({
+    decision: z.enum(['allow', 'deny', 'ask_user']),
+    reason: z.string(),
+});
+/**
+ * Enforces the security policy for a given tool call.
+ */
+export async function enforcePolicy(policy, toolCall, config) {
+    const model = DEFAULT_GEMINI_FLASH_MODEL;
+    const contentGenerator = config.getContentGenerator();
+    if (!contentGenerator) {
+        return {
+            decision: SafetyCheckDecision.ALLOW,
+            reason: 'Content generator not initialized',
+            error: 'Content generator not initialized',
+        };
+    }
+    const toolName = toolCall.name;
+    // If tool name is missing, we cannot enforce the policy. Allow by default.
+    if (!toolName) {
+        return {
+            decision: SafetyCheckDecision.ALLOW,
+            reason: 'Tool name is missing',
+            error: 'Tool name is missing',
+        };
+    }
+    const toolPolicyStr = JSON.stringify(policy[toolName] || {}, null, 2);
+    const toolCallStr = JSON.stringify(toolCall, null, 2);
+    debugLogger.debug(`[Conseca] Enforcing policy for tool: ${toolName}`, toolCall, toolPolicyStr, toolCallStr);
+    try {
+        const result = await contentGenerator.generateContent({
+            model,
+            config: {
+                responseMimeType: 'application/json',
+                responseSchema: zodToJsonSchema(EnforcementResultSchema, {
+                    target: 'openApi3',
+                }),
+            },
+            contents: [
+                {
+                    role: 'user',
+                    parts: [
+                        {
+                            text: safeTemplateReplace(CONSECA_ENFORCEMENT_PROMPT, {
+                                policy: toolPolicyStr,
+                                tool_call: toolCallStr,
+                            }),
+                        },
+                    ],
+                },
+            ],
+        }, 'conseca-policy-enforcement', LlmRole.SUBAGENT);
+        const responseText = getResponseText(result);
+        debugLogger.debug(`[Conseca] Enforcement Raw Response: ${responseText}`);
+        if (!responseText) {
+            return {
+                decision: SafetyCheckDecision.ALLOW,
+                reason: 'Empty response from policy enforcer',
+                error: 'Empty response from policy enforcer',
+            };
+        }
+        try {
+            const parsed = EnforcementResultSchema.parse(JSON.parse(responseText));
+            debugLogger.debug(`[Conseca] Enforcement Parsed:`, parsed);
+            let decision;
+            switch (parsed.decision) {
+                case 'allow':
+                    decision = SafetyCheckDecision.ALLOW;
+                    break;
+                case 'ask_user':
+                    decision = SafetyCheckDecision.ASK_USER;
+                    break;
+                case 'deny':
+                default:
+                    decision = SafetyCheckDecision.DENY;
+                    break;
+            }
+            return {
+                decision,
+                reason: parsed.reason,
+            };
+        }
+        catch (parseError) {
+            return {
+                decision: SafetyCheckDecision.ALLOW,
+                reason: 'JSON Parse Error in enforcement response',
+                error: `JSON Parse Error: ${parseError instanceof Error ? parseError.message : String(parseError)}. Raw: ${responseText}`,
+            };
+        }
+    }
+    catch (error) {
+        debugLogger.error('Policy enforcement failed:', error);
+        return {
+            decision: SafetyCheckDecision.ALLOW,
+            reason: 'Policy enforcement failed',
+            error: `Policy enforcement failed: ${error instanceof Error ? error.message : String(error)}`,
+        };
+    }
+}
+//# sourceMappingURL=policy-enforcer.js.map

package/dist/src/safety/conseca/policy-enforcer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-enforcer.js","sourceRoot":"","sources":["../../../../src/safety/conseca/policy-enforcer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,EAAE,mBAAmB,EAA0B,MAAM,gBAAgB,CAAC;AAE7E,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAEzD,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAEnD,MAAM,0BAA0B,GAAG;;;;;;;;;;;;;;;;;;;;;CAqBlC,CAAC;AAEF,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAErD,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAsB,EACtB,QAAsB,EACtB,MAAc;IAEd,MAAM,KAAK,GAAG,0BAA0B,CAAC;IACzC,MAAM,gBAAgB,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;IAEtD,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO;YACL,QAAQ,EAAE,mBAAmB,CAAC,KAAK;YACnC,MAAM,EAAE,mCAAmC;YAC3C,KAAK,EAAE,mCAAmC;SAC3C,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC/B,2EAA2E;IAC3E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,QAAQ,EAAE,mBAAmB,CAAC,KAAK;YACnC,MAAM,EAAE,sBAAsB;YAC9B,KAAK,EAAE,sBAAsB;SAC9B,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD,WAAW,CAAC,KAAK,CACf,wCAAwC,QAAQ,EAAE,EAClD,QAAQ,EACR,aAAa,EACb,WAAW,CACZ,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,eAAe,CACnD;YACE,KAAK;YACL,MAAM,EAAE;gBACN,gBAAgB,EAAE,kBAAkB;gBACpC,cAAc,EAAE,eAAe,CAAC,uBAAuB,EAAE;oBACvD,MAAM,EAAE,UAAU;iBACnB,CAAC;aACH;YACD,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE;wBACL;4BACE,IAAI,EAAE,mBAAmB,CAAC,0BAA0B,EAAE;gCACpD,MAAM,EAAE,aAAa;gCACrB,SAAS,EAAE,WAAW;6BACvB,CAAC;yBACH;qBACF;iBACF;aACF;SACF,EACD,4BAA4B,EAC5B,OAAO,CAAC,QAAQ,CACjB,CAAC;QAEF,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAC7C,WAAW,CAAC,KAAK,CAAC,uCAAuC,YAAY,EAAE,CAAC,CAAC;QAEzE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;gBACL,QAAQ,EAAE,mBAAmB,CAAC,KAAK;gBACnC,MAAM,EAAE,qCAAqC;gBAC7C,KAAK,EAAE,qCAAqC;aAC7C,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;YACvE,WAAW,CAAC,KAAK,CAAC,+BAA+B,EAAE,MAAM,CAAC,CAAC;YAE3D,IAAI,QAA6B,CAAC;YAClC,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACxB,KAAK,OAAO;oBACV,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC;oBACrC,MAAM;gBACR,KAAK,UAAU;oBACb,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC;oBACxC,MAAM;gBACR,KAAK,MAAM,CAAC;gBACZ;oBACE,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC;oBACpC,MAAM;YACV,CAAC;YAED,OAAO;gBACL,QAAQ;gBACR,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,CAAC;QACJ,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,OAAO;gBACL,QAAQ,EAAE,mBAAmB,CAAC,KAAK;gBACnC,MAAM,EAAE,0CAA0C;gBAClD,KAAK,EAAE,qBAAqB,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,YAAY,EAAE;aAC1H,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;QACvD,OAAO;YACL,QAAQ,EAAE,mBAAmB,CAAC,KAAK;YACnC,MAAM,EAAE,2BAA2B;YACnC,KAAK,EAAE,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;SAC9F,CAAC;IACJ,CAAC;AACH,CAAC"}