@office-ai/aioncli-core 0.8.1 → 0.18.4

package/dist/src/safety/checker-runner.test.js

@@ -0,0 +1,238 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import { spawn } from 'node:child_process';
+import { CheckerRunner } from './checker-runner.js';
+import { ContextBuilder } from './context-builder.js';
+import { CheckerRegistry } from './registry.js';
+import { InProcessCheckerType, } from '../policy/types.js';
+import { SafetyCheckDecision } from './protocol.js';
+// Mock dependencies
+vi.mock('./registry.js');
+vi.mock('./context-builder.js');
+vi.mock('node:child_process');
+describe('CheckerRunner', () => {
+    let runner;
+    let mockContextBuilder;
+    let mockRegistry;
+    const mockToolCall = { name: 'test_tool', args: {} };
+    const mockInProcessConfig = {
+        type: 'in-process',
+        name: InProcessCheckerType.ALLOWED_PATH,
+    };
+    beforeEach(() => {
+        mockContextBuilder = new ContextBuilder({});
+        mockRegistry = new CheckerRegistry('/mock/dist');
+        CheckerRegistry.prototype.resolveInProcess = vi.fn();
+        runner = new CheckerRunner(mockContextBuilder, mockRegistry, {
+            checkersPath: '/mock/dist',
+        });
+    });
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+    it('should run in-process checker successfully', async () => {
+        const mockResult = {
+            decision: SafetyCheckDecision.ALLOW,
+        };
+        const mockChecker = {
+            check: vi.fn().mockResolvedValue(mockResult),
+        };
+        vi.mocked(mockRegistry.resolveInProcess).mockReturnValue(mockChecker);
+        vi.mocked(mockContextBuilder.buildFullContext).mockReturnValue({
+            environment: { cwd: '/tmp', workspaces: [] },
+        });
+        const result = await runner.runChecker(mockToolCall, mockInProcessConfig);
+        expect(result).toEqual(mockResult);
+        expect(mockRegistry.resolveInProcess).toHaveBeenCalledWith(InProcessCheckerType.ALLOWED_PATH);
+        expect(mockChecker.check).toHaveBeenCalled();
+    });
+    it('should handle in-process checker errors', async () => {
+        const mockChecker = {
+            check: vi.fn().mockRejectedValue(new Error('Checker failed')),
+        };
+        vi.mocked(mockRegistry.resolveInProcess).mockReturnValue(mockChecker);
+        vi.mocked(mockContextBuilder.buildFullContext).mockReturnValue({
+            environment: { cwd: '/tmp', workspaces: [] },
+        });
+        const result = await runner.runChecker(mockToolCall, mockInProcessConfig);
+        expect(result.decision).toBe(SafetyCheckDecision.DENY);
+        expect(result.reason).toContain('Failed to run in-process checker');
+        expect(result.reason).toContain('Checker failed');
+    });
+    it('should respect timeout for in-process checkers', async () => {
+        vi.useFakeTimers();
+        const mockChecker = {
+            check: vi.fn().mockImplementation(async () => {
+                await new Promise((resolve) => setTimeout(resolve, 6000)); // Longer than default 5s timeout
+                return { decision: SafetyCheckDecision.ALLOW };
+            }),
+        };
+        vi.mocked(mockRegistry.resolveInProcess).mockReturnValue(mockChecker);
+        vi.mocked(mockContextBuilder.buildFullContext).mockReturnValue({
+            environment: { cwd: '/tmp', workspaces: [] },
+        });
+        const runPromise = runner.runChecker(mockToolCall, mockInProcessConfig);
+        vi.advanceTimersByTime(5001);
+        const result = await runPromise;
+        expect(result.decision).toBe(SafetyCheckDecision.DENY);
+        expect(result.reason).toContain('timed out');
+        vi.useRealTimers();
+    });
+    it('should use minimal context when requested', async () => {
+        const configWithContext = {
+            ...mockInProcessConfig,
+            required_context: ['environment'],
+        };
+        const mockChecker = {
+            check: vi.fn().mockResolvedValue({ decision: SafetyCheckDecision.ALLOW }),
+        };
+        vi.mocked(mockRegistry.resolveInProcess).mockReturnValue(mockChecker);
+        vi.mocked(mockContextBuilder.buildMinimalContext).mockReturnValue({
+            environment: { cwd: '/tmp', workspaces: [] },
+        });
+        await runner.runChecker(mockToolCall, configWithContext);
+        expect(mockContextBuilder.buildMinimalContext).toHaveBeenCalledWith([
+            'environment',
+        ]);
+        expect(mockContextBuilder.buildFullContext).not.toHaveBeenCalled();
+    });
+    it('should pass config to in-process checker via toolCall', async () => {
+        const mockConfig = { included_args: ['foo'] };
+        const configWithConfig = {
+            ...mockInProcessConfig,
+            config: mockConfig,
+        };
+        const mockResult = {
+            decision: SafetyCheckDecision.ALLOW,
+        };
+        const mockChecker = {
+            check: vi.fn().mockResolvedValue(mockResult),
+        };
+        vi.mocked(mockRegistry.resolveInProcess).mockReturnValue(mockChecker);
+        vi.mocked(mockContextBuilder.buildFullContext).mockReturnValue({
+            environment: { cwd: '/tmp', workspaces: [] },
+        });
+        await runner.runChecker(mockToolCall, configWithConfig);
+        expect(mockChecker.check).toHaveBeenCalledWith(expect.objectContaining({
+            toolCall: mockToolCall,
+            config: mockConfig,
+        }));
+    });
+    describe('External Checkers', () => {
+        const mockExternalConfig = {
+            type: 'external',
+            name: 'python-checker',
+        };
+        it('should spawn external checker directly', async () => {
+            const mockCheckerPath = '/mock/dist/python-checker';
+            vi.mocked(mockRegistry.resolveExternal).mockReturnValue(mockCheckerPath);
+            vi.mocked(mockContextBuilder.buildFullContext).mockReturnValue({
+                environment: { cwd: '/tmp', workspaces: [] },
+            });
+            const mockStdout = {
+                on: vi.fn().mockImplementation((event, callback) => {
+                    if (event === 'data') {
+                        callback(Buffer.from(JSON.stringify({ decision: SafetyCheckDecision.ALLOW })));
+                    }
+                }),
+            };
+            const mockChildProcess = {
+                stdin: { write: vi.fn(), end: vi.fn() },
+                stdout: mockStdout,
+                stderr: { on: vi.fn() },
+                on: vi.fn().mockImplementation((event, callback) => {
+                    if (event === 'close') {
+                        // Defer the close callback slightly to allow stdout 'data' to be registered
+                        setTimeout(() => callback(0), 0);
+                    }
+                }),
+                kill: vi.fn(),
+            };
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            vi.mocked(spawn).mockReturnValue(mockChildProcess);
+            const result = await runner.runChecker(mockToolCall, mockExternalConfig);
+            expect(result.decision).toBe(SafetyCheckDecision.ALLOW);
+            expect(spawn).toHaveBeenCalledWith(mockCheckerPath, [], expect.anything());
+        });
+        it('should include checker name in timeout error message', async () => {
+            vi.useFakeTimers();
+            const mockCheckerPath = '/mock/dist/python-checker';
+            vi.mocked(mockRegistry.resolveExternal).mockReturnValue(mockCheckerPath);
+            vi.mocked(mockContextBuilder.buildFullContext).mockReturnValue({
+                environment: { cwd: '/tmp', workspaces: [] },
+            });
+            const mockChildProcess = {
+                stdin: { write: vi.fn(), end: vi.fn() },
+                stdout: { on: vi.fn() },
+                stderr: { on: vi.fn() },
+                on: vi.fn(), // Never calls 'close'
+                kill: vi.fn(),
+            };
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            vi.mocked(spawn).mockReturnValue(mockChildProcess);
+            const runPromise = runner.runChecker(mockToolCall, mockExternalConfig);
+            vi.advanceTimersByTime(5001);
+            const result = await runPromise;
+            expect(result.decision).toBe(SafetyCheckDecision.DENY);
+            expect(result.reason).toContain('Safety checker "python-checker" timed out');
+            vi.useRealTimers();
+        });
+        it('should send SIGKILL if process ignores SIGTERM', async () => {
+            vi.useFakeTimers();
+            const mockCheckerPath = '/mock/dist/python-checker';
+            vi.mocked(mockRegistry.resolveExternal).mockReturnValue(mockCheckerPath);
+            vi.mocked(mockContextBuilder.buildFullContext).mockReturnValue({
+                environment: { cwd: '/tmp', workspaces: [] },
+            });
+            const mockChildProcess = {
+                stdin: { write: vi.fn(), end: vi.fn() },
+                stdout: { on: vi.fn() },
+                stderr: { on: vi.fn() },
+                on: vi.fn(), // Never calls 'close' automatically
+                kill: vi.fn(),
+            };
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            vi.mocked(spawn).mockReturnValue(mockChildProcess);
+            const runPromise = runner.runChecker(mockToolCall, mockExternalConfig);
+            // Trigger main timeout
+            vi.advanceTimersByTime(5001);
+            // Should have sent SIGTERM
+            expect(mockChildProcess.kill).toHaveBeenCalledWith('SIGTERM');
+            // Advance past cleanup timeout (5000ms)
+            vi.advanceTimersByTime(5000);
+            // Should have sent SIGKILL
+            expect(mockChildProcess.kill).toHaveBeenCalledWith('SIGKILL');
+            // Clean up promise
+            await runPromise;
+            vi.useRealTimers();
+        });
+        it('should include checker name in non-zero exit code error message', async () => {
+            const mockCheckerPath = '/mock/dist/python-checker';
+            vi.mocked(mockRegistry.resolveExternal).mockReturnValue(mockCheckerPath);
+            vi.mocked(mockContextBuilder.buildFullContext).mockReturnValue({
+                environment: { cwd: '/tmp', workspaces: [] },
+            });
+            const mockChildProcess = {
+                stdin: { write: vi.fn(), end: vi.fn() },
+                stdout: { on: vi.fn() },
+                stderr: { on: vi.fn() },
+                on: vi.fn().mockImplementation((event, callback) => {
+                    if (event === 'close') {
+                        callback(1); // Exit code 1
+                    }
+                }),
+                kill: vi.fn(),
+            };
+            // eslint-disable-next-line @typescript-eslint/no-explicit-any
+            vi.mocked(spawn).mockReturnValue(mockChildProcess);
+            const result = await runner.runChecker(mockToolCall, mockExternalConfig);
+            expect(result.decision).toBe(SafetyCheckDecision.DENY);
+            expect(result.reason).toContain('Safety checker "python-checker" exited with code 1');
+        });
+    });
+});
+//# sourceMappingURL=checker-runner.test.js.map

package/dist/src/safety/checker-runner.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checker-runner.test.js","sourceRoot":"","sources":["../../../src/safety/checker-runner.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAEL,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAGpD,oBAAoB;AACpB,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;AACzB,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;AAChC,EAAE,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAE9B,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,MAAqB,CAAC;IAC1B,IAAI,kBAAkC,CAAC;IACvC,IAAI,YAA6B,CAAC;IAElC,MAAM,YAAY,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACrD,MAAM,mBAAmB,GAA2B;QAClD,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,oBAAoB,CAAC,YAAY;KACxC,CAAC;IAEF,UAAU,CAAC,GAAG,EAAE;QACd,kBAAkB,GAAG,IAAI,cAAc,CAAC,EAAY,CAAC,CAAC;QACtD,YAAY,GAAG,IAAI,eAAe,CAAC,YAAY,CAAC,CAAC;QACjD,eAAe,CAAC,SAAS,CAAC,gBAAgB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAErD,MAAM,GAAG,IAAI,aAAa,CAAC,kBAAkB,EAAE,YAAY,EAAE;YAC3D,YAAY,EAAE,YAAY;SAC3B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,UAAU,GAAsB;YACpC,QAAQ,EAAE,mBAAmB,CAAC,KAAK;SACpC,CAAC;QACF,MAAM,WAAW,GAAG;YAClB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC;SAC7C,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACtE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,eAAe,CAAC;YAC7D,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;SAC7C,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAE1E,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,oBAAoB,CACxD,oBAAoB,CAAC,YAAY,CAClC,CAAC;QACF,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,gBAAgB,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,WAAW,GAAG;YAClB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;SAC9D,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACtE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,eAAe,CAAC;YAC7D,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;SAC7C,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAE1E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,kCAAkC,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,WAAW,GAAG;YAClB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE;gBAC3C,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,iCAAiC;gBAC5F,OAAO,EAAE,QAAQ,EAAE,mBAAmB,CAAC,KAAK,EAAE,CAAC;YACjD,CAAC,CAAC;SACH,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACtE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,eAAe,CAAC;YAC7D,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;SAC7C,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QACxE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAE7C,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,iBAAiB,GAA2B;YAChD,GAAG,mBAAmB;YACtB,gBAAgB,EAAE,CAAC,aAAa,CAAC;SAClC,CAAC;QACF,MAAM,WAAW,GAAG;YAClB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,QAAQ,EAAE,mBAAmB,CAAC,KAAK,EAAE,CAAC;SAC1E,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACtE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,eAAe,CAAC;YAChE,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;SAC7C,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;QAEzD,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAC,oBAAoB,CAAC;YAClE,aAAa;SACd,CAAC,CAAC;QACH,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,UAAU,GAAG,EAAE,aAAa,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,MAAM,gBAAgB,GAA2B;YAC/C,GAAG,mBAAmB;YACtB,MAAM,EAAE,UAAU;SACnB,CAAC;QACF,MAAM,UAAU,GAAsB;YACpC,QAAQ,EAAE,mBAAmB,CAAC,KAAK;SACpC,CAAC;QACF,MAAM,WAAW,GAAG;YAClB,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,UAAU,CAAC;SAC7C,CAAC;QACF,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;QACtE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,eAAe,CAAC;YAC7D,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;SAC7C,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;QAExD,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAC5C,MAAM,CAAC,gBAAgB,CAAC;YACtB,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE,UAAU;SACnB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,MAAM,kBAAkB,GAAG;YACzB,IAAI,EAAE,UAAmB;YACzB,IAAI,EAAE,gBAAgB;SACvB,CAAC;QAEF,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,eAAe,GAAG,2BAA2B,CAAC;YACpD,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,eAAe,CAAC;gBAC7D,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;aAC7C,CAAC,CAAC;YAEH,MAAM,UAAU,GAAG;gBACjB,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;oBACjD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;wBACrB,QAAQ,CACN,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,mBAAmB,CAAC,KAAK,EAAE,CAAC,CACxD,CACF,CAAC;oBACJ,CAAC;gBACH,CAAC,CAAC;aACH,CAAC;YACF,MAAM,gBAAgB,GAAG;gBACvB,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;gBACvC,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;gBACvB,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;oBACjD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;wBACtB,4EAA4E;wBAC5E,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBACnC,CAAC;gBACH,CAAC,CAAC;gBACF,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;aACd,CAAC;YACF,8DAA8D;YAC9D,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,gBAAuB,CAAC,CAAC;YAE1D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;YAEzE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACxD,MAAM,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAChC,eAAe,EACf,EAAE,EACF,MAAM,CAAC,QAAQ,EAAE,CAClB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,EAAE,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,eAAe,GAAG,2BAA2B,CAAC;YACpD,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,eAAe,CAAC;gBAC7D,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;aAC7C,CAAC,CAAC;YAEH,MAAM,gBAAgB,GAAG;gBACvB,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;gBACvC,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;gBACvB,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;gBACvB,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,sBAAsB;gBACnC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;aACd,CAAC;YACF,8DAA8D;YAC9D,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,gBAAuB,CAAC,CAAC;YAE1D,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;YACvE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAE7B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;YAChC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAC7B,2CAA2C,CAC5C,CAAC;YAEF,EAAE,CAAC,aAAa,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,EAAE,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,eAAe,GAAG,2BAA2B,CAAC;YACpD,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,eAAe,CAAC;gBAC7D,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;aAC7C,CAAC,CAAC;YAEH,MAAM,gBAAgB,GAAG;gBACvB,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;gBACvC,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;gBACvB,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;gBACvB,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,oCAAoC;gBACjD,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;aACd,CAAC;YACF,8DAA8D;YAC9D,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,gBAAuB,CAAC,CAAC;YAE1D,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;YAEvE,uBAAuB;YACvB,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAE7B,2BAA2B;YAC3B,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;YAE9D,wCAAwC;YACxC,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;YAE7B,2BAA2B;YAC3B,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC;YAE9D,mBAAmB;YACnB,MAAM,UAAU,CAAC;YACjB,EAAE,CAAC,aAAa,EAAE,CAAC;QACrB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;YAC/E,MAAM,eAAe,GAAG,2BAA2B,CAAC;YACpD,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzE,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,eAAe,CAAC;gBAC7D,WAAW,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE;aAC7C,CAAC,CAAC;YAEH,MAAM,gBAAgB,GAAG;gBACvB,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;gBACvC,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;gBACvB,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE;gBACvB,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;oBACjD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;wBACtB,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc;oBAC7B,CAAC;gBACH,CAAC,CAAC;gBACF,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;aACd,CAAC;YACF,8DAA8D;YAC9D,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,gBAAuB,CAAC,CAAC;YAE1D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;YAEzE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAC7B,oDAAoD,CACrD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/safety/context-builder.d.ts

@@ -0,0 +1,23 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { SafetyCheckInput, ConversationTurn } from './protocol.js';
+import type { Config } from '../config/config.js';
+/**
+ * Builds context objects for safety checkers, ensuring sensitive data is filtered.
+ */
+export declare class ContextBuilder {
+    private readonly config;
+    private readonly conversationHistory;
+    constructor(config: Config, conversationHistory?: ConversationTurn[]);
+    /**
+     * Builds the full context object with all available data.
+     */
+    buildFullContext(): SafetyCheckInput['context'];
+    /**
+     * Builds a minimal context with only the specified keys.
+     */
+    buildMinimalContext(requiredKeys: Array<keyof SafetyCheckInput['context']>): SafetyCheckInput['context'];
+}

package/dist/src/safety/context-builder.js

@@ -0,0 +1,47 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Builds context objects for safety checkers, ensuring sensitive data is filtered.
+ */
+export class ContextBuilder {
+    config;
+    conversationHistory;
+    constructor(config, conversationHistory = []) {
+        this.config = config;
+        this.conversationHistory = conversationHistory;
+    }
+    /**
+     * Builds the full context object with all available data.
+     */
+    buildFullContext() {
+        return {
+            environment: {
+                cwd: process.cwd(),
+                workspaces: this.config
+                    .getWorkspaceContext()
+                    .getDirectories(),
+            },
+            history: {
+                turns: this.conversationHistory,
+            },
+        };
+    }
+    /**
+     * Builds a minimal context with only the specified keys.
+     */
+    buildMinimalContext(requiredKeys) {
+        const fullContext = this.buildFullContext();
+        const minimalContext = {};
+        for (const key of requiredKeys) {
+            if (key in fullContext) {
+                // eslint-disable-next-line @typescript-eslint/no-explicit-any
+                minimalContext[key] = fullContext[key];
+            }
+        }
+        return minimalContext;
+    }
+}
+//# sourceMappingURL=context-builder.js.map

package/dist/src/safety/context-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-builder.js","sourceRoot":"","sources":["../../../src/safety/context-builder.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH;;GAEG;AACH,MAAM,OAAO,cAAc;IAEN;IACA;IAFnB,YACmB,MAAc,EACd,sBAA0C,EAAE;QAD5C,WAAM,GAAN,MAAM,CAAQ;QACd,wBAAmB,GAAnB,mBAAmB,CAAyB;IAC5D,CAAC;IAEJ;;OAEG;IACH,gBAAgB;QACd,OAAO;YACL,WAAW,EAAE;gBACX,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClB,UAAU,EAAE,IAAI,CAAC,MAAM;qBACpB,mBAAmB,EAAE;qBACrB,cAAc,EAAc;aAChC;YACD,OAAO,EAAE;gBACP,KAAK,EAAE,IAAI,CAAC,mBAAmB;aAChC;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,mBAAmB,CACjB,YAAsD;QAEtD,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC5C,MAAM,cAAc,GAAyC,EAAE,CAAC;QAEhE,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC/B,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;gBACvB,8DAA8D;gBAC7D,cAAsB,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QAED,OAAO,cAA6C,CAAC;IACvD,CAAC;CACF"}

package/dist/src/safety/context-builder.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/safety/context-builder.test.js

@@ -0,0 +1,49 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { ContextBuilder } from './context-builder.js';
+describe('ContextBuilder', () => {
+    let contextBuilder;
+    let mockConfig;
+    const mockHistory = [
+        { user: { text: 'hello' }, model: { text: 'hi' } },
+    ];
+    const mockCwd = '/home/user/project';
+    const mockWorkspaces = ['/home/user/project'];
+    beforeEach(() => {
+        vi.spyOn(process, 'cwd').mockReturnValue(mockCwd);
+        mockConfig = {
+            getWorkspaceContext: vi.fn().mockReturnValue({
+                getDirectories: vi.fn().mockReturnValue(mockWorkspaces),
+            }),
+            apiKey: 'secret-api-key',
+            somePublicConfig: 'public-value',
+            nested: {
+                secretToken: 'hidden',
+                public: 'visible',
+            },
+        };
+        contextBuilder = new ContextBuilder(mockConfig, mockHistory);
+    });
+    it('should build full context with all fields', () => {
+        const context = contextBuilder.buildFullContext();
+        expect(context.environment.cwd).toBe(mockCwd);
+        expect(context.environment.workspaces).toEqual(mockWorkspaces);
+        expect(context.history?.turns).toEqual(mockHistory);
+    });
+    it('should build minimal context with only required keys', () => {
+        const context = contextBuilder.buildMinimalContext(['environment']);
+        expect(context).toHaveProperty('environment');
+        expect(context).not.toHaveProperty('config');
+        expect(context).not.toHaveProperty('history');
+    });
+    it('should handle missing history', () => {
+        contextBuilder = new ContextBuilder(mockConfig);
+        const context = contextBuilder.buildFullContext();
+        expect(context.history?.turns).toEqual([]);
+    });
+});
+//# sourceMappingURL=context-builder.test.js.map

package/dist/src/safety/context-builder.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-builder.test.js","sourceRoot":"","sources":["../../../src/safety/context-builder.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAItD,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,cAA8B,CAAC;IACnC,IAAI,UAAkB,CAAC;IACvB,MAAM,WAAW,GAAuB;QACtC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;KACnD,CAAC;IACF,MAAM,OAAO,GAAG,oBAAoB,CAAC;IACrC,MAAM,cAAc,GAAG,CAAC,oBAAoB,CAAC,CAAC;IAE9C,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QAClD,UAAU,GAAG;YACX,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC;gBAC3C,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,cAAc,CAAC;aACxD,CAAC;YACF,MAAM,EAAE,gBAAgB;YACxB,gBAAgB,EAAE,cAAc;YAChC,MAAM,EAAE;gBACN,WAAW,EAAE,QAAQ;gBACrB,MAAM,EAAE,SAAS;aAClB;SACmB,CAAC;QACvB,cAAc,GAAG,IAAI,cAAc,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,OAAO,GAAG,cAAc,CAAC,gBAAgB,EAAE,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,mBAAmB,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QACpE,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,cAAc,GAAG,IAAI,cAAc,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,cAAc,CAAC,gBAAgB,EAAE,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/safety/protocol.d.ts

@@ -0,0 +1,88 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { FunctionCall } from '@google/genai';
+/**
+ * Represents a single turn in the conversation between the user and the model.
+ * This provides semantic context for why a tool call might be happening.
+ */
+export interface ConversationTurn {
+    user: {
+        text: string;
+    };
+    model: {
+        text?: string;
+        toolCalls?: FunctionCall[];
+    };
+}
+/**
+ * The data structure passed from the CLI to a safety checker process via stdin.
+ */
+export interface SafetyCheckInput {
+    /**
+     * The semantic version of the protocol (e.g., "1.0.0"). This allows
+     * for introducing breaking changes in the future while maintaining
+     * support for older checkers.
+     */
+    protocolVersion: '1.0.0';
+    /**
+     * The specific tool call that is being validated.
+     */
+    toolCall: FunctionCall;
+    /**
+     * A container for all contextual information from the CLI's internal state.
+     * By grouping data into categories, we can easily add new context in the
+     * future without creating a flat, unmanageable object.
+     */
+    context: {
+        /**
+         * Information about the user's file system and execution environment.
+         */
+        environment: {
+            cwd: string;
+            workspaces: string[];
+        };
+        /**
+         * The recent history of the conversation. This can be used by checkers
+         * that need to understand the intent behind a tool call.
+         */
+        history?: {
+            turns: ConversationTurn[];
+        };
+    };
+    /**
+     * Configuration for the safety checker.
+     * This allows checkers to be parameterized (e.g. allowed paths).
+     */
+    config?: unknown;
+}
+/**
+ * The possible decisions a safety checker can make.
+ */
+export declare enum SafetyCheckDecision {
+    ALLOW = "allow",
+    DENY = "deny",
+    ASK_USER = "ask_user"
+}
+/**
+ * The data structure returned by a safety checker process via stdout.
+ */
+export type SafetyCheckResult = {
+    /**
+     * The decision made by the safety checker.
+     */
+    decision: SafetyCheckDecision.ALLOW;
+    /**
+     * If not allowed, a message explaining why the tool call was blocked.
+     * This will be shown to the user.
+     */
+    reason?: string;
+} | {
+    decision: SafetyCheckDecision.DENY;
+    reason: string;
+} | {
+    decision: SafetyCheckDecision.ASK_USER;
+    reason: string;
+};

package/dist/src/safety/protocol.js

@@ -0,0 +1,15 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * The possible decisions a safety checker can make.
+ */
+export var SafetyCheckDecision;
+(function (SafetyCheckDecision) {
+    SafetyCheckDecision["ALLOW"] = "allow";
+    SafetyCheckDecision["DENY"] = "deny";
+    SafetyCheckDecision["ASK_USER"] = "ask_user";
+})(SafetyCheckDecision || (SafetyCheckDecision = {}));
+//# sourceMappingURL=protocol.js.map

package/dist/src/safety/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../src/safety/protocol.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAgEH;;GAEG;AACH,MAAM,CAAN,IAAY,mBAIX;AAJD,WAAY,mBAAmB;IAC7B,sCAAe,CAAA;IACf,oCAAa,CAAA;IACb,4CAAqB,CAAA;AACvB,CAAC,EAJW,mBAAmB,KAAnB,mBAAmB,QAI9B"}

package/dist/src/safety/registry.d.ts

@@ -0,0 +1,26 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type InProcessChecker } from './built-in.js';
+/**
+ * Registry for managing safety checker resolution.
+ */
+export declare class CheckerRegistry {
+    private readonly checkersPath;
+    private static readonly BUILT_IN_EXTERNAL_CHECKERS;
+    private static readonly BUILT_IN_IN_PROCESS_CHECKERS;
+    private static readonly VALID_NAME_PATTERN;
+    constructor(checkersPath: string);
+    /**
+     * Resolves an external checker name to an absolute executable path.
+     */
+    resolveExternal(name: string): string;
+    /**
+     * Resolves an in-process checker name to a checker instance.
+     */
+    resolveInProcess(name: string): InProcessChecker;
+    private static isValidCheckerName;
+    static getBuiltInCheckers(): string[];
+}

package/dist/src/safety/registry.js

@@ -0,0 +1,65 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as path from 'node:path';
+import * as fs from 'node:fs';
+import { AllowedPathChecker } from './built-in.js';
+import { InProcessCheckerType } from '../policy/types.js';
+/**
+ * Registry for managing safety checker resolution.
+ */
+export class CheckerRegistry {
+    checkersPath;
+    static BUILT_IN_EXTERNAL_CHECKERS = new Map([
+    // No external built-ins for now
+    ]);
+    static BUILT_IN_IN_PROCESS_CHECKERS = new Map([[InProcessCheckerType.ALLOWED_PATH, new AllowedPathChecker()]]);
+    // Regex to validate checker names (alphanumeric and hyphens only)
+    static VALID_NAME_PATTERN = /^[a-z0-9-]+$/;
+    constructor(checkersPath) {
+        this.checkersPath = checkersPath;
+    }
+    /**
+     * Resolves an external checker name to an absolute executable path.
+     */
+    resolveExternal(name) {
+        if (!CheckerRegistry.isValidCheckerName(name)) {
+            throw new Error(`Invalid checker name "${name}". Checker names must contain only lowercase letters, numbers, and hyphens.`);
+        }
+        const builtInPath = CheckerRegistry.BUILT_IN_EXTERNAL_CHECKERS.get(name);
+        if (builtInPath) {
+            const fullPath = path.join(this.checkersPath, builtInPath);
+            if (!fs.existsSync(fullPath)) {
+                throw new Error(`Built-in checker "${name}" not found at ${fullPath}`);
+            }
+            return fullPath;
+        }
+        // TODO: Phase 5 - Add support for custom external checkers
+        throw new Error(`Unknown external checker "${name}".`);
+    }
+    /**
+     * Resolves an in-process checker name to a checker instance.
+     */
+    resolveInProcess(name) {
+        if (!CheckerRegistry.isValidCheckerName(name)) {
+            throw new Error(`Invalid checker name "${name}".`);
+        }
+        const checker = CheckerRegistry.BUILT_IN_IN_PROCESS_CHECKERS.get(name);
+        if (checker) {
+            return checker;
+        }
+        throw new Error(`Unknown in-process checker "${name}". Available: ${Array.from(CheckerRegistry.BUILT_IN_IN_PROCESS_CHECKERS.keys()).join(', ')}`);
+    }
+    static isValidCheckerName(name) {
+        return this.VALID_NAME_PATTERN.test(name) && !name.includes('..');
+    }
+    static getBuiltInCheckers() {
+        return [
+            ...Array.from(this.BUILT_IN_EXTERNAL_CHECKERS.keys()),
+            ...Array.from(this.BUILT_IN_IN_PROCESS_CHECKERS.keys()),
+        ];
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/src/safety/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/safety/registry.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAyB,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D;;GAEG;AACH,MAAM,OAAO,eAAe;IAaG;IAZrB,MAAM,CAAU,0BAA0B,GAAG,IAAI,GAAG,CAAiB;IAC3E,gCAAgC;KACjC,CAAC,CAAC;IAEK,MAAM,CAAU,4BAA4B,GAAG,IAAI,GAAG,CAG5D,CAAC,CAAC,oBAAoB,CAAC,YAAY,EAAE,IAAI,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC;IAEnE,kEAAkE;IAC1D,MAAM,CAAU,kBAAkB,GAAG,cAAc,CAAC;IAE5D,YAA6B,YAAoB;QAApB,iBAAY,GAAZ,YAAY,CAAQ;IAAG,CAAC;IAErD;;OAEG;IACH,eAAe,CAAC,IAAY;QAC1B,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,6EAA6E,CAC3G,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,eAAe,CAAC,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzE,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YAC3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,kBAAkB,QAAQ,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,2DAA2D;QAC3D,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,IAAI,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,IAAY;QAC3B,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,IAAI,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,OAAO,GAAG,eAAe,CAAC,4BAA4B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvE,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,iBAAiB,KAAK,CAAC,IAAI,CAC5D,eAAe,CAAC,4BAA4B,CAAC,IAAI,EAAE,CACpD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACf,CAAC;IACJ,CAAC;IAEO,MAAM,CAAC,kBAAkB,CAAC,IAAY;QAC5C,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,CAAC,kBAAkB;QACvB,OAAO;YACL,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC;YACrD,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,IAAI,EAAE,CAAC;SACxD,CAAC;IACJ,CAAC"}

package/dist/src/safety/registry.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/safety/registry.test.js

@@ -0,0 +1,31 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, beforeEach } from 'vitest';
+import { CheckerRegistry } from './registry.js';
+import { InProcessCheckerType } from '../policy/types.js';
+import { AllowedPathChecker } from './built-in.js';
+describe('CheckerRegistry', () => {
+    let registry;
+    const mockCheckersPath = '/mock/checkers/path';
+    beforeEach(() => {
+        registry = new CheckerRegistry(mockCheckersPath);
+    });
+    it('should resolve built-in in-process checkers', () => {
+        const checker = registry.resolveInProcess(InProcessCheckerType.ALLOWED_PATH);
+        expect(checker).toBeInstanceOf(AllowedPathChecker);
+    });
+    it('should throw for unknown in-process checkers', () => {
+        expect(() => registry.resolveInProcess('unknown-checker')).toThrow('Unknown in-process checker "unknown-checker"');
+    });
+    it('should validate checker names', () => {
+        expect(() => registry.resolveInProcess('invalid name!')).toThrow('Invalid checker name');
+        expect(() => registry.resolveInProcess('../escape')).toThrow('Invalid checker name');
+    });
+    it('should throw for unknown external checkers (for now)', () => {
+        expect(() => registry.resolveExternal('some-external')).toThrow('Unknown external checker "some-external"');
+    });
+});
+//# sourceMappingURL=registry.test.js.map

package/dist/src/safety/registry.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.test.js","sourceRoot":"","sources":["../../../src/safety/registry.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEnD,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAI,QAAyB,CAAC;IAC9B,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;IAE/C,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,GAAG,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,OAAO,GAAG,QAAQ,CAAC,gBAAgB,CACvC,oBAAoB,CAAC,YAAY,CAClC,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAChE,8CAA8C,CAC/C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAC9D,sBAAsB,CACvB,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAC1D,sBAAsB,CACvB,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAC7D,0CAA0C,CAC3C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}