@quantum-ai/gemini-cli 0.45.3 → 0.45.5

package/dist/src/config/extensions/variables.js

@@ -0,0 +1,62 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as path from 'node:path';
+import { VARIABLE_SCHEMA } from './variableSchema.js';
+import { GEMINI_DIR } from '@google/gemini-cli-core';
+/**
+ * Represents a set of keys that will be considered invalid while unmarshalling
+ * JSON in recursivelyHydrateStrings.
+ */
+const UNMARSHALL_KEY_IGNORE_LIST = new Set([
+    '__proto__',
+    'constructor',
+    'prototype',
+]);
+export const EXTENSIONS_DIRECTORY_NAME = path.join(GEMINI_DIR, 'extensions');
+export const EXTENSIONS_CONFIG_FILENAME = 'gemini-extension.json';
+export const INSTALL_METADATA_FILENAME = '.gemini-extension-install.json';
+export const EXTENSION_SETTINGS_FILENAME = '.env';
+export function validateVariables(variables, schema) {
+    for (const key in schema) {
+        const definition = schema[key];
+        if (definition.required && !variables[key]) {
+            throw new Error(`Missing required variable: ${key}`);
+        }
+    }
+}
+export function hydrateString(str, context) {
+    validateVariables(context, VARIABLE_SCHEMA);
+    const regex = /\${(.*?)}/g;
+    return str.replace(regex, (match, key) => {
+        const val = context[key];
+        return val == null ? match : String(val);
+    });
+}
+export function recursivelyHydrateStrings(obj, values) {
+    if (typeof obj === 'string') {
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion
+        return hydrateString(obj, values);
+    }
+    if (Array.isArray(obj)) {
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion
+        return obj.map((item) => recursivelyHydrateStrings(item, values));
+    }
+    if (typeof obj === 'object' && obj !== null) {
+        const newObj = {};
+        for (const key in obj) {
+            if (!UNMARSHALL_KEY_IGNORE_LIST.has(key) &&
+                Object.prototype.hasOwnProperty.call(obj, key)) {
+                newObj[key] = recursivelyHydrateStrings(
+                // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion
+                obj[key], values);
+            }
+        }
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion
+        return newObj;
+    }
+    return obj;
+}
+//# sourceMappingURL=variables.js.map

package/dist/src/config/extensions/variables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"variables.js","sourceRoot":"","sources":["../../../../src/config/extensions/variables.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAuB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD;;;GAGG;AACH,MAAM,0BAA0B,GAAgB,IAAI,GAAG,CAAS;IAC9D,WAAW;IACX,aAAa;IACb,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AAC7E,MAAM,CAAC,MAAM,0BAA0B,GAAG,uBAAuB,CAAC;AAClE,MAAM,CAAC,MAAM,yBAAyB,GAAG,gCAAgC,CAAC;AAC1E,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC;AAgBlD,MAAM,UAAU,iBAAiB,CAC/B,SAA0B,EAC1B,MAAsB;IAEtB,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,UAAU,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,OAAwB;IACjE,iBAAiB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,YAAY,CAAC;IAC3B,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,GAAM,EACN,MAAuB;IAEvB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,uEAAuE;QACvE,OAAO,aAAa,CAAC,GAAG,EAAE,MAAM,CAAiB,CAAC;IACpD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,uEAAuE;QACvE,OAAQ,GAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACrC,yBAAyB,CAAC,IAAI,EAAE,MAAM,CAAC,CACxB,CAAC;IACpB,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;YACtB,IACE,CAAC,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC;gBACpC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAC9C,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,yBAAyB;gBACrC,uEAAuE;gBACtE,GAA+B,CAAC,GAAG,CAAC,EACrC,MAAM,CACP,CAAC;YACJ,CAAC;QACH,CAAC;QACD,uEAAuE;QACvE,OAAO,MAAW,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/src/config/mcp/mcpServerEnablement.js

@@ -0,0 +1,279 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import fs from 'node:fs/promises';
+import path from 'node:path';
+import { Storage, coreEvents } from '@google/gemini-cli-core';
+/**
+ * Normalize a server ID to canonical lowercase form.
+ */
+export function normalizeServerId(serverId) {
+    return serverId.toLowerCase().trim();
+}
+/**
+ * Check if a server ID is in a settings list (with backward compatibility).
+ * Handles case-insensitive matching and plain name fallback for ext: servers.
+ */
+export function isInSettingsList(serverId, list) {
+    const normalizedId = normalizeServerId(serverId);
+    const normalizedList = list.map(normalizeServerId);
+    // Exact canonical match
+    if (normalizedList.includes(normalizedId)) {
+        return { found: true };
+    }
+    // Backward compat: for ext: servers, check if plain name matches
+    if (normalizedId.startsWith('ext:')) {
+        const plainName = normalizedId.split(':').pop();
+        if (plainName && normalizedList.includes(plainName)) {
+            return {
+                found: true,
+                deprecationWarning: `Settings reference '${plainName}' matches extension server '${serverId}'. ` +
+                    `Update your settings to use the full identifier '${serverId}' instead.`,
+            };
+        }
+    }
+    return { found: false };
+}
+/**
+ * Single source of truth for whether a server can be loaded.
+ * Used by: isAllowedMcpServer(), connectServer(), CLI handlers, slash handlers.
+ *
+ * Uses callbacks instead of direct enablementManager reference to keep
+ * packages/core independent of packages/cli.
+ */
+export async function canLoadServer(serverId, config) {
+    const normalizedId = normalizeServerId(serverId);
+    // 1. Admin kill switch
+    if (!config.adminMcpEnabled) {
+        return {
+            allowed: false,
+            reason: 'MCP servers are disabled by administrator. Check admin settings or contact your admin.',
+            blockType: 'admin',
+        };
+    }
+    // 2. Allowlist check
+    if (config.allowedList !== undefined) {
+        const { found, deprecationWarning } = isInSettingsList(normalizedId, config.allowedList);
+        if (deprecationWarning) {
+            coreEvents.emitFeedback('warning', deprecationWarning);
+        }
+        if (!found) {
+            return {
+                allowed: false,
+                reason: `Server '${serverId}' is not in mcp.allowed list. Add it to settings.json mcp.allowed array to enable.`,
+                blockType: 'allowlist',
+            };
+        }
+    }
+    // 3. Excludelist check
+    if (config.excludedList) {
+        const { found, deprecationWarning } = isInSettingsList(normalizedId, config.excludedList);
+        if (deprecationWarning) {
+            coreEvents.emitFeedback('warning', deprecationWarning);
+        }
+        if (found) {
+            return {
+                allowed: false,
+                reason: `Server '${serverId}' is blocked by mcp.excluded. Remove it from settings.json mcp.excluded array to enable.`,
+                blockType: 'excludelist',
+            };
+        }
+    }
+    // 4. Session disable check (before file-based enablement)
+    if (config.enablement?.isSessionDisabled(normalizedId)) {
+        return {
+            allowed: false,
+            reason: `Server '${serverId}' is disabled for this session. Run 'gemini mcp enable ${serverId} --session' to clear.`,
+            blockType: 'session',
+        };
+    }
+    // 5. File-based enablement check
+    if (config.enablement &&
+        !(await config.enablement.isFileEnabled(normalizedId))) {
+        return {
+            allowed: false,
+            reason: `Server '${serverId}' is disabled. Run 'gemini mcp enable ${serverId}' to enable.`,
+            blockType: 'enablement',
+        };
+    }
+    return { allowed: true };
+}
+const MCP_ENABLEMENT_FILENAME = 'mcp-server-enablement.json';
+/**
+ * McpServerEnablementManager
+ *
+ * Manages the enabled/disabled state of MCP servers.
+ * Uses a simplified format compared to ExtensionEnablementManager.
+ * Supports both persistent (file) and session-only (in-memory) states.
+ *
+ * NOTE: Use getInstance() to get the singleton instance. This ensures
+ * session state (sessionDisabled Set) is shared across all code paths.
+ */
+export class McpServerEnablementManager {
+    static instance = null;
+    configFilePath;
+    configDir;
+    sessionDisabled = new Set();
+    /**
+     * Get the singleton instance.
+     */
+    static getInstance() {
+        if (!McpServerEnablementManager.instance) {
+            McpServerEnablementManager.instance = new McpServerEnablementManager();
+        }
+        return McpServerEnablementManager.instance;
+    }
+    /**
+     * Reset the singleton instance (for testing only).
+     */
+    static resetInstance() {
+        McpServerEnablementManager.instance = null;
+    }
+    constructor() {
+        this.configDir = Storage.getGlobalGeminiDir();
+        this.configFilePath = path.join(this.configDir, MCP_ENABLEMENT_FILENAME);
+    }
+    /**
+     * Check if server is enabled in FILE (persistent config only).
+     * Does NOT include session state.
+     */
+    async isFileEnabled(serverName) {
+        const config = await this.readConfig();
+        const state = config[normalizeServerId(serverName)];
+        return state?.enabled ?? true;
+    }
+    /**
+     * Check if server is session-disabled.
+     */
+    isSessionDisabled(serverName) {
+        return this.sessionDisabled.has(normalizeServerId(serverName));
+    }
+    /**
+     * Check effective enabled state (combines file + session).
+     * Convenience method; canLoadServer() uses separate callbacks for granular blockType.
+     */
+    async isEffectivelyEnabled(serverName) {
+        if (this.isSessionDisabled(serverName)) {
+            return false;
+        }
+        return this.isFileEnabled(serverName);
+    }
+    /**
+     * Enable a server persistently.
+     * Removes the server from config file (defaults to enabled).
+     */
+    async enable(serverName) {
+        const normalizedName = normalizeServerId(serverName);
+        const config = await this.readConfig();
+        if (normalizedName in config) {
+            delete config[normalizedName];
+            await this.writeConfig(config);
+        }
+    }
+    /**
+     * Disable a server persistently.
+     * Adds server to config file with enabled: false.
+     */
+    async disable(serverName) {
+        const config = await this.readConfig();
+        config[normalizeServerId(serverName)] = { enabled: false };
+        await this.writeConfig(config);
+    }
+    /**
+     * Disable a server for current session only (in-memory).
+     */
+    disableForSession(serverName) {
+        this.sessionDisabled.add(normalizeServerId(serverName));
+    }
+    /**
+     * Clear session disable for a server.
+     */
+    clearSessionDisable(serverName) {
+        this.sessionDisabled.delete(normalizeServerId(serverName));
+    }
+    /**
+     * Get display state for a specific server (for UI).
+     */
+    async getDisplayState(serverName) {
+        const isSessionDisabled = this.isSessionDisabled(serverName);
+        const isPersistentDisabled = !(await this.isFileEnabled(serverName));
+        return {
+            enabled: !isSessionDisabled && !isPersistentDisabled,
+            isSessionDisabled,
+            isPersistentDisabled,
+        };
+    }
+    /**
+     * Get all display states (for UI listing).
+     */
+    async getAllDisplayStates(serverIds) {
+        const result = {};
+        for (const serverId of serverIds) {
+            result[normalizeServerId(serverId)] =
+                await this.getDisplayState(serverId);
+        }
+        return result;
+    }
+    /**
+     * Get enablement callbacks for passing to core.
+     */
+    getEnablementCallbacks() {
+        return {
+            isSessionDisabled: (id) => this.isSessionDisabled(id),
+            isFileEnabled: (id) => this.isFileEnabled(id),
+        };
+    }
+    /**
+     * Auto-enable any disabled MCP servers by name.
+     * Returns server names that were actually re-enabled.
+     */
+    async autoEnableServers(serverNames) {
+        const enabledServers = [];
+        for (const serverName of serverNames) {
+            const normalizedName = normalizeServerId(serverName);
+            const state = await this.getDisplayState(normalizedName);
+            let wasDisabled = false;
+            if (state.isPersistentDisabled) {
+                await this.enable(normalizedName);
+                wasDisabled = true;
+            }
+            if (state.isSessionDisabled) {
+                this.clearSessionDisable(normalizedName);
+                wasDisabled = true;
+            }
+            if (wasDisabled) {
+                enabledServers.push(serverName);
+            }
+        }
+        return enabledServers;
+    }
+    /**
+     * Read config from file asynchronously.
+     */
+    async readConfig() {
+        try {
+            const content = await fs.readFile(this.configFilePath, 'utf-8');
+            // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion
+            return JSON.parse(content);
+        }
+        catch (error) {
+            if (error instanceof Error &&
+                'code' in error &&
+                error.code === 'ENOENT') {
+                return {};
+            }
+            coreEvents.emitFeedback('error', 'Failed to read MCP server enablement config.', error);
+            return {};
+        }
+    }
+    /**
+     * Write config to file asynchronously.
+     */
+    async writeConfig(config) {
+        await fs.mkdir(this.configDir, { recursive: true });
+        await fs.writeFile(this.configFilePath, JSON.stringify(config, null, 2));
+    }
+}
+//# sourceMappingURL=mcpServerEnablement.js.map

package/dist/src/config/mcp/mcpServerEnablement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpServerEnablement.js","sourceRoot":"","sources":["../../../../src/config/mcp/mcpServerEnablement.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AA6C9D;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,IAAc;IAEd,MAAM,YAAY,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAEnD,wBAAwB;IACxB,IAAI,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,iEAAiE;IACjE,IAAI,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QAChD,IAAI,SAAS,IAAI,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACpD,OAAO;gBACL,KAAK,EAAE,IAAI;gBACX,kBAAkB,EAChB,uBAAuB,SAAS,+BAA+B,QAAQ,KAAK;oBAC5E,oDAAoD,QAAQ,YAAY;aAC3E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,QAAgB,EAChB,MAKC;IAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAEjD,uBAAuB;IACvB,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;QAC5B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EACJ,wFAAwF;YAC1F,SAAS,EAAE,OAAO;SACnB,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,gBAAgB,CACpD,YAAY,EACZ,MAAM,CAAC,WAAW,CACnB,CAAC;QACF,IAAI,kBAAkB,EAAE,CAAC;YACvB,UAAU,CAAC,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,WAAW,QAAQ,oFAAoF;gBAC/G,SAAS,EAAE,WAAW;aACvB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,uBAAuB;IACvB,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,MAAM,EAAE,KAAK,EAAE,kBAAkB,EAAE,GAAG,gBAAgB,CACpD,YAAY,EACZ,MAAM,CAAC,YAAY,CACpB,CAAC;QACF,IAAI,kBAAkB,EAAE,CAAC;YACvB,UAAU,CAAC,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,WAAW,QAAQ,0FAA0F;gBACrH,SAAS,EAAE,aAAa;aACzB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,0DAA0D;IAC1D,IAAI,MAAM,CAAC,UAAU,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;QACvD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,WAAW,QAAQ,0DAA0D,QAAQ,uBAAuB;YACpH,SAAS,EAAE,SAAS;SACrB,CAAC;IACJ,CAAC;IAED,iCAAiC;IACjC,IACE,MAAM,CAAC,UAAU;QACjB,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC,EACtD,CAAC;QACD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,WAAW,QAAQ,yCAAyC,QAAQ,cAAc;YAC1F,SAAS,EAAE,YAAY;SACxB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,uBAAuB,GAAG,4BAA4B,CAAC;AAE7D;;;;;;;;;GASG;AACH,MAAM,OAAO,0BAA0B;IAC7B,MAAM,CAAC,QAAQ,GAAsC,IAAI,CAAC;IAEjD,cAAc,CAAS;IACvB,SAAS,CAAS;IAClB,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAErD;;OAEG;IACH,MAAM,CAAC,WAAW;QAChB,IAAI,CAAC,0BAA0B,CAAC,QAAQ,EAAE,CAAC;YACzC,0BAA0B,CAAC,QAAQ,GAAG,IAAI,0BAA0B,EAAE,CAAC;QACzE,CAAC;QACD,OAAO,0BAA0B,CAAC,QAAQ,CAAC;IAC7C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAa;QAClB,0BAA0B,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC7C,CAAC;IAED;QACE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAC;IAC3E,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,UAAkB;QACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;QACpD,OAAO,KAAK,EAAE,OAAO,IAAI,IAAI,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,UAAkB;QAClC,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;IACjE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,oBAAoB,CAAC,UAAkB;QAC3C,IAAI,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,MAAM,cAAc,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAEvC,IAAI,cAAc,IAAI,MAAM,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC,cAAc,CAAC,CAAC;YAC9B,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,UAAkB;QAC9B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3D,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,UAAkB;QAClC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,UAAkB;QACpC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,UAAkB;QACtC,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;QAErE,OAAO;YACL,OAAO,EAAE,CAAC,iBAAiB,IAAI,CAAC,oBAAoB;YACpD,iBAAiB;YACjB,oBAAoB;SACrB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CACvB,SAAmB;QAEnB,MAAM,MAAM,GAA0C,EAAE,CAAC;QACzD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;gBACjC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,sBAAsB;QACpB,OAAO;YACL,iBAAiB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACrD,aAAa,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;SAC9C,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,WAAqB;QAC3C,MAAM,cAAc,GAAa,EAAE,CAAC;QAEpC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;YACrC,MAAM,cAAc,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;YAEzD,IAAI,WAAW,GAAG,KAAK,CAAC;YACxB,IAAI,KAAK,CAAC,oBAAoB,EAAE,CAAC;gBAC/B,MAAM,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;gBAClC,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;YACD,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;gBAC5B,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC;gBACzC,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;YAED,IAAI,WAAW,EAAE,CAAC;gBAChB,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,UAAU;QACtB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;YAChE,uEAAuE;YACvE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAA8B,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK,YAAY,KAAK;gBACtB,MAAM,IAAI,KAAK;gBACf,KAAK,CAAC,IAAI,KAAK,QAAQ,EACvB,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,UAAU,CAAC,YAAY,CACrB,OAAO,EACP,8CAA8C,EAC9C,KAAK,CACN,CAAC;YACF,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,WAAW,CAAC,MAAiC;QACzD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC"}

package/dist/src/config/policy.d.ts

@@ -0,0 +1,41 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type PolicyEngineConfig, type ApprovalMode, type PolicyEngine, type MessageBus, Storage, type PolicyUpdateConfirmationRequest } from '@google/gemini-cli-core';
+import { type Settings } from './settings.js';
+/**
+ * Temporary flag to automatically accept workspace policies to reduce friction.
+ * Exported as 'let' to allow monkey patching in tests via the setter.
+ */
+export declare let autoAcceptWorkspacePolicies: boolean;
+/**
+ * Sets the autoAcceptWorkspacePolicies flag.
+ * Used primarily for testing purposes.
+ */
+export declare function setAutoAcceptWorkspacePolicies(value: boolean): void;
+/**
+ * Temporary flag to disable workspace level policies altogether.
+ * Exported as 'let' to allow monkey patching in tests via the setter.
+ */
+export declare let disableWorkspacePolicies: boolean;
+/**
+ * Sets the disableWorkspacePolicies flag.
+ * Used primarily for testing purposes.
+ */
+export declare function setDisableWorkspacePolicies(value: boolean): void;
+export declare function createPolicyEngineConfig(settings: Settings, approvalMode: ApprovalMode, workspacePoliciesDir?: string, interactive?: boolean): Promise<PolicyEngineConfig>;
+export declare function createPolicyUpdater(policyEngine: PolicyEngine, messageBus: MessageBus, storage: Storage): void;
+export interface WorkspacePolicyState {
+    workspacePoliciesDir?: string;
+    policyUpdateConfirmationRequest?: PolicyUpdateConfirmationRequest;
+}
+/**
+ * Resolves the workspace policy state by checking folder trust and policy integrity.
+ */
+export declare function resolveWorkspacePolicyState(options: {
+    cwd: string;
+    trustedFolder: boolean;
+    interactive: boolean;
+}): Promise<WorkspacePolicyState>;

package/dist/src/config/policy.js

@@ -0,0 +1,98 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { createPolicyEngineConfig as createCorePolicyEngineConfig, createPolicyUpdater as createCorePolicyUpdater, PolicyIntegrityManager, IntegrityStatus, Storage, writeToStderr, debugLogger, } from '@google/gemini-cli-core';
+import {} from './settings.js';
+/**
+ * Temporary flag to automatically accept workspace policies to reduce friction.
+ * Exported as 'let' to allow monkey patching in tests via the setter.
+ */
+export let autoAcceptWorkspacePolicies = true;
+/**
+ * Sets the autoAcceptWorkspacePolicies flag.
+ * Used primarily for testing purposes.
+ */
+export function setAutoAcceptWorkspacePolicies(value) {
+    autoAcceptWorkspacePolicies = value;
+}
+/**
+ * Temporary flag to disable workspace level policies altogether.
+ * Exported as 'let' to allow monkey patching in tests via the setter.
+ */
+export let disableWorkspacePolicies = true;
+/**
+ * Sets the disableWorkspacePolicies flag.
+ * Used primarily for testing purposes.
+ */
+export function setDisableWorkspacePolicies(value) {
+    disableWorkspacePolicies = value;
+}
+export async function createPolicyEngineConfig(settings, approvalMode, workspacePoliciesDir, interactive = true) {
+    // Explicitly construct PolicySettings from Settings to ensure type safety
+    // and avoid accidental leakage of other settings properties.
+    const policySettings = {
+        mcp: settings.mcp,
+        tools: settings.tools,
+        mcpServers: settings.mcpServers,
+        policyPaths: settings.policyPaths,
+        adminPolicyPaths: settings.adminPolicyPaths,
+        workspacePoliciesDir,
+        disableAlwaysAllow: settings.security?.disableAlwaysAllow ||
+            settings.admin?.secureModeEnabled,
+    };
+    return createCorePolicyEngineConfig(policySettings, approvalMode, undefined, interactive);
+}
+export function createPolicyUpdater(policyEngine, messageBus, storage) {
+    return createCorePolicyUpdater(policyEngine, messageBus, storage);
+}
+/**
+ * Resolves the workspace policy state by checking folder trust and policy integrity.
+ */
+export async function resolveWorkspacePolicyState(options) {
+    const { cwd, trustedFolder, interactive } = options;
+    let workspacePoliciesDir;
+    let policyUpdateConfirmationRequest;
+    if (trustedFolder && !disableWorkspacePolicies) {
+        const storage = new Storage(cwd);
+        // If we are in the home directory (or rather, our target Gemini dir is the global one),
+        // don't treat it as a workspace to avoid loading global policies twice.
+        if (storage.isWorkspaceHomeDir()) {
+            return { workspacePoliciesDir: undefined };
+        }
+        const potentialWorkspacePoliciesDir = storage.getWorkspacePoliciesDir();
+        const integrityManager = new PolicyIntegrityManager();
+        const integrityResult = await integrityManager.checkIntegrity('workspace', cwd, potentialWorkspacePoliciesDir);
+        if (integrityResult.status === IntegrityStatus.MATCH) {
+            workspacePoliciesDir = potentialWorkspacePoliciesDir;
+        }
+        else if (integrityResult.status === IntegrityStatus.NEW &&
+            integrityResult.fileCount === 0) {
+            // No workspace policies found
+            workspacePoliciesDir = undefined;
+        }
+        else if (interactive && !autoAcceptWorkspacePolicies) {
+            // Policies changed or are new, and we are in interactive mode and auto-accept is disabled
+            policyUpdateConfirmationRequest = {
+                scope: 'workspace',
+                identifier: cwd,
+                policyDir: potentialWorkspacePoliciesDir,
+                newHash: integrityResult.hash,
+            };
+        }
+        else {
+            // Non-interactive mode or auto-accept is enabled: automatically accept/load
+            await integrityManager.acceptIntegrity('workspace', cwd, integrityResult.hash);
+            workspacePoliciesDir = potentialWorkspacePoliciesDir;
+            if (!interactive) {
+                writeToStderr('WARNING: Workspace policies changed or are new. Automatically accepting and loading them.\n');
+            }
+            else {
+                debugLogger.warn('Workspace policies changed or are new. Automatically accepting and loading them.');
+            }
+        }
+    }
+    return { workspacePoliciesDir, policyUpdateConfirmationRequest };
+}
+//# sourceMappingURL=policy.js.map

package/dist/src/config/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/config/policy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAML,wBAAwB,IAAI,4BAA4B,EACxD,mBAAmB,IAAI,uBAAuB,EAC9C,sBAAsB,EACtB,eAAe,EACf,OAAO,EAEP,aAAa,EACb,WAAW,GACZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAiB,MAAM,eAAe,CAAC;AAE9C;;;GAGG;AACH,MAAM,CAAC,IAAI,2BAA2B,GAAG,IAAI,CAAC;AAE9C;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAAC,KAAc;IAC3D,2BAA2B,GAAG,KAAK,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,IAAI,wBAAwB,GAAG,IAAI,CAAC;AAE3C;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,wBAAwB,GAAG,KAAK,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAkB,EAClB,YAA0B,EAC1B,oBAA6B,EAC7B,cAAuB,IAAI;IAE3B,0EAA0E;IAC1E,6DAA6D;IAC7D,MAAM,cAAc,GAAmB;QACrC,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;QAC3C,oBAAoB;QACpB,kBAAkB,EAChB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB;YACrC,QAAQ,CAAC,KAAK,EAAE,iBAAiB;KACpC,CAAC;IAEF,OAAO,4BAA4B,CACjC,cAAc,EACd,YAAY,EACZ,SAAS,EACT,WAAW,CACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,YAA0B,EAC1B,UAAsB,EACtB,OAAgB;IAEhB,OAAO,uBAAuB,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AACpE,CAAC;AAOD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAIjD;IACC,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IAEpD,IAAI,oBAAwC,CAAC;IAC7C,IAAI,+BAES,CAAC;IAEd,IAAI,aAAa,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;QAEjC,wFAAwF;QACxF,wEAAwE;QACxE,IAAI,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACjC,OAAO,EAAE,oBAAoB,EAAE,SAAS,EAAE,CAAC;QAC7C,CAAC;QAED,MAAM,6BAA6B,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC;QACxE,MAAM,gBAAgB,GAAG,IAAI,sBAAsB,EAAE,CAAC;QACtD,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,cAAc,CAC3D,WAAW,EACX,GAAG,EACH,6BAA6B,CAC9B,CAAC;QAEF,IAAI,eAAe,CAAC,MAAM,KAAK,eAAe,CAAC,KAAK,EAAE,CAAC;YACrD,oBAAoB,GAAG,6BAA6B,CAAC;QACvD,CAAC;aAAM,IACL,eAAe,CAAC,MAAM,KAAK,eAAe,CAAC,GAAG;YAC9C,eAAe,CAAC,SAAS,KAAK,CAAC,EAC/B,CAAC;YACD,8BAA8B;YAC9B,oBAAoB,GAAG,SAAS,CAAC;QACnC,CAAC;aAAM,IAAI,WAAW,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACvD,0FAA0F;YAC1F,+BAA+B,GAAG;gBAChC,KAAK,EAAE,WAAW;gBAClB,UAAU,EAAE,GAAG;gBACf,SAAS,EAAE,6BAA6B;gBACxC,OAAO,EAAE,eAAe,CAAC,IAAI;aAC9B,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,4EAA4E;YAC5E,MAAM,gBAAgB,CAAC,eAAe,CACpC,WAAW,EACX,GAAG,EACH,eAAe,CAAC,IAAI,CACrB,CAAC;YACF,oBAAoB,GAAG,6BAA6B,CAAC;YAErD,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,aAAa,CACX,6FAA6F,CAC9F,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,IAAI,CACd,kFAAkF,CACnF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,oBAAoB,EAAE,+BAA+B,EAAE,CAAC;AACnE,CAAC"}

package/dist/src/config/sandboxConfig.d.ts

@@ -0,0 +1,12 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type SandboxConfig } from '@google/gemini-cli-core';
+import type { Settings } from './settings.js';
+interface SandboxCliArgs {
+    sandbox?: boolean | string | null;
+}
+export declare function loadSandboxConfig(settings: Settings, argv: SandboxCliArgs): Promise<SandboxConfig | undefined>;
+export {};

package/dist/src/config/sandboxConfig.js

@@ -0,0 +1,117 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { getPackageJson, FatalSandboxError, } from '@google/gemini-cli-core';
+import commandExists from 'command-exists';
+import * as os from 'node:os';
+import { fileURLToPath } from 'node:url';
+import path from 'node:path';
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = path.dirname(__filename);
+const VALID_SANDBOX_COMMANDS = [
+    'docker',
+    'podman',
+    'sandbox-exec',
+    'runsc',
+    'lxc',
+    'windows-native',
+];
+function isSandboxCommand(value) {
+    return VALID_SANDBOX_COMMANDS.includes(value);
+}
+function getSandboxCommand(sandbox) {
+    // If the SANDBOX env var is set, we're already inside the sandbox.
+    if (process.env['SANDBOX']) {
+        return '';
+    }
+    // note environment variable takes precedence over argument (from command line or settings)
+    const environmentConfiguredSandbox = process.env['GEMINI_SANDBOX']?.toLowerCase().trim() ?? '';
+    sandbox =
+        environmentConfiguredSandbox?.length > 0
+            ? environmentConfiguredSandbox
+            : sandbox;
+    if (sandbox === '1' || sandbox === 'true')
+        sandbox = true;
+    else if (sandbox === '0' || sandbox === 'false' || !sandbox)
+        sandbox = false;
+    if (sandbox === false) {
+        return '';
+    }
+    if (typeof sandbox === 'string' && sandbox) {
+        if (!isSandboxCommand(sandbox)) {
+            throw new FatalSandboxError(`Invalid sandbox command '${sandbox}'. Must be one of ${VALID_SANDBOX_COMMANDS.join(', ')}`);
+        }
+        // runsc (gVisor) is only supported on Linux
+        if (sandbox === 'runsc' && os.platform() !== 'linux') {
+            throw new FatalSandboxError('gVisor (runsc) sandboxing is only supported on Linux');
+        }
+        // windows-native is only supported on Windows
+        if (sandbox === 'windows-native' && os.platform() !== 'win32') {
+            throw new FatalSandboxError('Windows native sandboxing is only supported on Windows');
+        }
+        // confirm that specified command exists (unless it's built-in)
+        if (sandbox !== 'windows-native' && !commandExists.sync(sandbox)) {
+            throw new FatalSandboxError(`Missing sandbox command '${sandbox}' (from GEMINI_SANDBOX)`);
+        }
+        // runsc uses Docker with --runtime=runsc; both must be available (prioritize runsc when explicitly chosen)
+        if (sandbox === 'runsc' && !commandExists.sync('docker')) {
+            throw new FatalSandboxError("runsc (gVisor) requires Docker. Install Docker, or use sandbox: 'docker'.");
+        }
+        return sandbox;
+    }
+    // look for seatbelt, docker, or podman, in that order
+    // for container-based sandboxing, require sandbox to be enabled explicitly
+    // note: runsc is NOT auto-detected, it must be explicitly specified
+    if (os.platform() === 'darwin' && commandExists.sync('sandbox-exec')) {
+        return 'sandbox-exec';
+    }
+    else if (commandExists.sync('docker') && sandbox === true) {
+        return 'docker';
+    }
+    else if (commandExists.sync('podman') && sandbox === true) {
+        return 'podman';
+    }
+    // throw an error if user requested sandbox but no command was found
+    if (sandbox === true) {
+        throw new FatalSandboxError('GEMINI_SANDBOX is true but failed to determine command for sandbox; ' +
+            'install docker or podman or specify command in GEMINI_SANDBOX');
+    }
+    return '';
+    // Note: 'lxc' is intentionally not auto-detected because it requires a
+    // pre-existing, running container managed by the user. Use
+    // GEMINI_SANDBOX=lxc or sandbox: "lxc" in settings to enable it.
+}
+export async function loadSandboxConfig(settings, argv) {
+    const sandboxOption = argv.sandbox ?? settings.tools?.sandbox;
+    let sandboxValue;
+    let allowedPaths = [];
+    let networkAccess = true;
+    let customImage;
+    if (typeof sandboxOption === 'object' &&
+        sandboxOption !== null &&
+        !Array.isArray(sandboxOption)) {
+        const config = sandboxOption;
+        sandboxValue = config.enabled ? (config.command ?? true) : false;
+        allowedPaths = config.allowedPaths ?? [];
+        networkAccess = config.networkAccess ?? true;
+        customImage = config.image;
+    }
+    else if (typeof sandboxOption !== 'object' || sandboxOption === null) {
+        sandboxValue = sandboxOption;
+    }
+    const command = getSandboxCommand(sandboxValue);
+    const packageJson = await getPackageJson(__dirname);
+    const image = process.env['GEMINI_SANDBOX_IMAGE'] ??
+        process.env['GEMINI_SANDBOX_IMAGE_DEFAULT'] ??
+        customImage ??
+        packageJson?.config?.sandboxImageUri;
+    const isNative = command === 'windows-native' ||
+        command === 'sandbox-exec' ||
+        command === 'lxc';
+    return command && (image || isNative)
+        ? { enabled: true, allowedPaths, networkAccess, command, image }
+        : undefined;
+}
+//# sourceMappingURL=sandboxConfig.js.map

package/dist/src/config/sandboxConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxConfig.js","sourceRoot":"","sources":["../../../src/config/sandboxConfig.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,cAAc,EAEd,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,aAAa,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAO3C,MAAM,sBAAsB,GAAG;IAC7B,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,OAAO;IACP,KAAK;IACL,gBAAgB;CACjB,CAAC;AAEF,SAAS,gBAAgB,CACvB,KAAa;IAEb,OAAQ,sBAA4D,CAAC,QAAQ,CAC3E,KAAK,CACN,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAiC;IAEjC,mEAAmE;IACnE,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,2FAA2F;IAC3F,MAAM,4BAA4B,GAChC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5D,OAAO;QACL,4BAA4B,EAAE,MAAM,GAAG,CAAC;YACtC,CAAC,CAAC,4BAA4B;YAC9B,CAAC,CAAC,OAAO,CAAC;IACd,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,GAAG,IAAI,CAAC;SACrD,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,OAAO,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,KAAK,CAAC;IAE7E,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC3C,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,iBAAiB,CACzB,4BAA4B,OAAO,qBAAqB,sBAAsB,CAAC,IAAI,CACjF,IAAI,CACL,EAAE,CACJ,CAAC;QACJ,CAAC;QACD,4CAA4C;QAC5C,IAAI,OAAO,KAAK,OAAO,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;YACrD,MAAM,IAAI,iBAAiB,CACzB,sDAAsD,CACvD,CAAC;QACJ,CAAC;QACD,8CAA8C;QAC9C,IAAI,OAAO,KAAK,gBAAgB,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;YAC9D,MAAM,IAAI,iBAAiB,CACzB,wDAAwD,CACzD,CAAC;QACJ,CAAC;QAED,+DAA+D;QAC/D,IAAI,OAAO,KAAK,gBAAgB,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,iBAAiB,CACzB,4BAA4B,OAAO,yBAAyB,CAC7D,CAAC;QACJ,CAAC;QACD,2GAA2G;QAC3G,IAAI,OAAO,KAAK,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,iBAAiB,CACzB,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,sDAAsD;IACtD,2EAA2E;IAC3E,oEAAoE;IACpE,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QACrE,OAAO,cAAc,CAAC;IACxB,CAAC;SAAM,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5D,OAAO,QAAQ,CAAC;IAClB,CAAC;SAAM,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,oEAAoE;IACpE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,iBAAiB,CACzB,sEAAsE;YACpE,+DAA+D,CAClE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,CAAC;IACV,uEAAuE;IACvE,2DAA2D;IAC3D,iEAAiE;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAkB,EAClB,IAAoB;IAEpB,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAE9D,IAAI,YAAiD,CAAC;IACtD,IAAI,YAAY,GAAa,EAAE,CAAC;IAChC,IAAI,aAAa,GAAG,IAAI,CAAC;IACzB,IAAI,WAA+B,CAAC;IAEpC,IACE,OAAO,aAAa,KAAK,QAAQ;QACjC,aAAa,KAAK,IAAI;QACtB,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAC7B,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC;QAC7B,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACjE,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;QACzC,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC;QAC7C,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;IAC7B,CAAC;SAAM,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QACvE,YAAY,GAAG,aAAa,CAAC;IAC/B,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAEhD,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,KAAK,GACT,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC;QAC3C,WAAW;QACX,WAAW,EAAE,MAAM,EAAE,eAAe,CAAC;IAEvC,MAAM,QAAQ,GACZ,OAAO,KAAK,gBAAgB;QAC5B,OAAO,KAAK,cAAc;QAC1B,OAAO,KAAK,KAAK,CAAC;IAEpB,OAAO,OAAO,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC;QACnC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE;QAChE,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/src/config/settings-validation.d.ts

@@ -0,0 +1,23 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { z } from 'zod';
+export declare const settingsZodSchema: z.ZodObject<Record<string, z.ZodTypeAny>, z.UnknownKeysParam, z.ZodTypeAny, {
+    [x: string]: any;
+}, {
+    [x: string]: any;
+}>;
+/**
+ * Validates settings data against the Zod schema
+ */
+export declare function validateSettings(data: unknown): {
+    success: boolean;
+    data?: unknown;
+    error?: z.ZodError;
+};
+/**
+ * Format a Zod error into a helpful error message
+ */
+export declare function formatValidationError(error: z.ZodError, filePath: string): string;