@quantum-ai/gemini-cli 0.45.8 → 0.45.9

package/dist/config/extension.js

@@ -0,0 +1,20 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { INSTALL_METADATA_FILENAME } from './extensions/variables.js';
+export function loadInstallMetadata(extensionDir) {
+    const metadataFilePath = path.join(extensionDir, INSTALL_METADATA_FILENAME);
+    try {
+        const configContent = fs.readFileSync(metadataFilePath, 'utf-8');
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion
+        const metadata = JSON.parse(configContent);
+        return metadata;
+    }
+    catch {
+        return undefined;
+    }
+}

package/dist/config/extensionRegistryClient.js

@@ -0,0 +1,93 @@
+/**
+ * @license
+ * Copyright 2026 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as fs from 'node:fs/promises';
+import { fetchWithTimeout, resolveToRealPath, isPrivateIp, } from '@google/gemini-cli-core';
+import { AsyncFzf } from 'fzf';
+export class ExtensionRegistryClient {
+    static DEFAULT_REGISTRY_URL = 'https://geminicli.com/extensions.json';
+    static FETCH_TIMEOUT_MS = 10000; // 10 seconds
+    static fetchPromise = null;
+    registryURI;
+    constructor(registryURI) {
+        this.registryURI =
+            registryURI || ExtensionRegistryClient.DEFAULT_REGISTRY_URL;
+    }
+    /** @internal */
+    static resetCache() {
+        ExtensionRegistryClient.fetchPromise = null;
+    }
+    async getExtensions(page = 1, limit = 10, orderBy = 'ranking') {
+        const allExtensions = [...(await this.fetchAllExtensions())];
+        switch (orderBy) {
+            case 'ranking':
+                allExtensions.sort((a, b) => a.rank - b.rank);
+                break;
+            case 'alphabetical':
+                allExtensions.sort((a, b) => a.extensionName.localeCompare(b.extensionName));
+                break;
+            default: {
+                const _exhaustiveCheck = orderBy;
+                throw new Error(`Unhandled orderBy: ${_exhaustiveCheck}`);
+            }
+        }
+        const startIndex = (page - 1) * limit;
+        const endIndex = startIndex + limit;
+        return {
+            extensions: allExtensions.slice(startIndex, endIndex),
+            total: allExtensions.length,
+        };
+    }
+    async searchExtensions(query) {
+        const allExtensions = await this.fetchAllExtensions();
+        if (!query.trim()) {
+            return allExtensions;
+        }
+        const fzf = new AsyncFzf(allExtensions, {
+            selector: (ext) => `${ext.extensionName} ${ext.extensionDescription} ${ext.fullName}`,
+            fuzzy: true,
+        });
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment
+        const results = await fzf.find(query);
+        return results.map((r) => r.item);
+    }
+    async getExtension(id) {
+        const allExtensions = await this.fetchAllExtensions();
+        return allExtensions.find((ext) => ext.id === id);
+    }
+    async fetchAllExtensions() {
+        if (ExtensionRegistryClient.fetchPromise) {
+            return ExtensionRegistryClient.fetchPromise;
+        }
+        const uri = this.registryURI;
+        ExtensionRegistryClient.fetchPromise = (async () => {
+            try {
+                if (uri.startsWith('http')) {
+                    if (isPrivateIp(uri)) {
+                        throw new Error('Private IP addresses are not allowed for the extension registry.');
+                    }
+                    const response = await fetchWithTimeout(uri, ExtensionRegistryClient.FETCH_TIMEOUT_MS);
+                    if (!response.ok) {
+                        throw new Error(`Failed to fetch extensions: ${response.statusText}`);
+                    }
+                    // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion
+                    return (await response.json());
+                }
+                else {
+                    // Handle local file path
+                    const filePath = resolveToRealPath(uri);
+                    const content = await fs.readFile(filePath, 'utf-8');
+                    // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion
+                    return JSON.parse(content);
+                }
+            }
+            catch (error) {
+                ExtensionRegistryClient.fetchPromise = null;
+                throw error;
+            }
+        })();
+        return ExtensionRegistryClient.fetchPromise;
+    }
+}

package/dist/config/extensions/consent.js

@@ -0,0 +1,195 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { debugLogger } from '@google/gemini-cli-core';
+import chalk from 'chalk';
+import { escapeAnsiCtrlCodes } from '../../ui/utils/textUtils.js';
+export const INSTALL_WARNING_MESSAGE = chalk.yellow('The extension you are about to install may have been created by a third-party developer and sourced from a public repository. Google does not vet, endorse, or guarantee the functionality or security of extensions. Please carefully inspect any extension and its source code before installing to understand the permissions it requires and the actions it may perform.');
+export const SKILLS_WARNING_MESSAGE = chalk.yellow("Agent skills inject specialized instructions and domain-specific knowledge into the agent's system prompt. This can change how the agent interprets your requests and interacts with your environment. Review the skill definitions at the location(s) provided below to ensure they meet your security standards.");
+/**
+ * Builds a consent string for installing agent skills.
+ */
+export async function skillsConsentString(skills, source, targetDir, isLink = false) {
+    const action = isLink ? 'Linking' : 'Installing';
+    const output = [];
+    output.push(`${action} agent skill(s) from "${source}".`);
+    output.push(`\nThe following agent skill(s) will be ${action.toLowerCase()}:\n`);
+    output.push(...(await renderSkillsList(skills)));
+    if (targetDir) {
+        const destLabel = isLink ? 'Link' : 'Install';
+        output.push(`${destLabel} Destination: ${targetDir}`);
+    }
+    output.push('\n' + SKILLS_WARNING_MESSAGE);
+    return output.join('\n');
+}
+/**
+ * Requests consent from the user to perform an action, by reading a Y/n
+ * character from stdin.
+ *
+ * This should not be called from interactive mode as it will break the CLI.
+ *
+ * @param consentDescription The description of the thing they will be consenting to.
+ * @returns boolean, whether they consented or not.
+ */
+export async function requestConsentNonInteractive(consentDescription) {
+    debugLogger.log(consentDescription);
+    const result = await promptForConsentNonInteractive('Do you want to continue? [Y/n]: ');
+    return result;
+}
+/**
+ * Requests consent from the user to perform an action, in interactive mode.
+ *
+ * This should not be called from non-interactive mode as it will not work.
+ *
+ * @param consentDescription The description of the thing they will be consenting to.
+ * @param addExtensionUpdateConfirmationRequest A function to actually add a prompt to the UI.
+ * @returns boolean, whether they consented or not.
+ */
+export async function requestConsentInteractive(consentDescription, addExtensionUpdateConfirmationRequest, clearConfirmationRequest) {
+    return promptForConsentInteractive(consentDescription + '\n\nDo you want to continue?', addExtensionUpdateConfirmationRequest, clearConfirmationRequest);
+}
+/**
+ * Asks users a prompt and awaits for a y/n response on stdin.
+ *
+ * This should not be called from interactive mode as it will break the CLI.
+ *
+ * @param prompt A yes/no prompt to ask the user
+ * @param defaultValue Whether to resolve as true or false on enter.
+ * @returns Whether or not the user answers 'y' (yes).
+ */
+export async function promptForConsentNonInteractive(prompt, defaultValue = true) {
+    const readline = await import('node:readline');
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    return new Promise((resolve) => {
+        rl.question(prompt, (answer) => {
+            rl.close();
+            const trimmedAnswer = answer.trim().toLowerCase();
+            if (trimmedAnswer === '') {
+                resolve(defaultValue);
+            }
+            else {
+                resolve(['y', 'yes'].includes(trimmedAnswer));
+            }
+        });
+    });
+}
+/**
+ * Asks users an interactive yes/no prompt.
+ *
+ * This should not be called from non-interactive mode as it will break the CLI.
+ *
+ * @param prompt A markdown prompt to ask the user
+ * @param addExtensionUpdateConfirmationRequest Function to update the UI state with the confirmation request.
+ * @returns Whether or not the user answers yes.
+ */
+async function promptForConsentInteractive(prompt, addExtensionUpdateConfirmationRequest, clearConfirmationRequest) {
+    return new Promise((resolve) => {
+        addExtensionUpdateConfirmationRequest({
+            prompt,
+            onConfirm: (resolvedConfirmed) => {
+                clearConfirmationRequest?.();
+                setImmediate(() => resolve(resolvedConfirmed));
+            },
+        });
+    });
+}
+/**
+ * Builds a consent string for installing an extension based on it's
+ * extensionConfig.
+ */
+async function extensionConsentString(extensionConfig, hasHooks, skills = [], previousName, wasMigrated) {
+    const sanitizedConfig = escapeAnsiCtrlCodes(extensionConfig);
+    const output = [];
+    const mcpServerEntries = Object.entries(sanitizedConfig.mcpServers || {});
+    if (wasMigrated) {
+        if (previousName && previousName !== sanitizedConfig.name) {
+            output.push(`Migrating extension "${previousName}" to a new repository, renaming to "${sanitizedConfig.name}", and installing updates.`);
+        }
+        else {
+            output.push(`Migrating extension "${sanitizedConfig.name}" to a new repository and installing updates.`);
+        }
+    }
+    else if (previousName && previousName !== sanitizedConfig.name) {
+        output.push(`Renaming extension "${previousName}" to "${sanitizedConfig.name}" and installing updates.`);
+    }
+    else {
+        output.push(`Installing extension "${sanitizedConfig.name}".`);
+    }
+    if (mcpServerEntries.length) {
+        output.push('This extension will run the following MCP servers:');
+        for (const [key, mcpServer] of mcpServerEntries) {
+            const isLocal = !!mcpServer.command;
+            const source = mcpServer.httpUrl ??
+                `${mcpServer.command || ''}${mcpServer.args ? ' ' + mcpServer.args.join(' ') : ''}`;
+            output.push(`  * ${key} (${isLocal ? 'local' : 'remote'}): ${source}`);
+        }
+    }
+    if (sanitizedConfig.contextFileName) {
+        output.push(`This extension will append info to your gemini.md context using ${sanitizedConfig.contextFileName}`);
+    }
+    if (sanitizedConfig.excludeTools) {
+        output.push(`This extension will exclude the following core tools: ${sanitizedConfig.excludeTools}`);
+    }
+    if (hasHooks) {
+        output.push('⚠️  This extension contains Hooks which can automatically execute commands.');
+    }
+    if (skills.length > 0) {
+        output.push(`\n${chalk.bold('Agent Skills:')}`);
+        output.push('\nThis extension will install the following agent skills:\n');
+        output.push(...(await renderSkillsList(skills)));
+    }
+    output.push('\n' + INSTALL_WARNING_MESSAGE);
+    if (skills.length > 0) {
+        output.push('\n' + SKILLS_WARNING_MESSAGE);
+    }
+    return output.join('\n');
+}
+/**
+ * Shared logic for formatting a list of agent skills for a consent prompt.
+ */
+async function renderSkillsList(skills) {
+    const output = [];
+    for (const skill of skills) {
+        output.push(`  * ${chalk.bold(skill.name)}: ${skill.description}`);
+        const skillDir = path.dirname(skill.location);
+        let fileCountStr = '';
+        try {
+            const skillDirItems = await fs.readdir(skillDir);
+            fileCountStr = ` (${skillDirItems.length} items in directory)`;
+        }
+        catch {
+            fileCountStr = ` ${chalk.red('⚠️ (Could not count items in directory)')}`;
+        }
+        output.push(chalk.dim(`    (Source: ${skill.location})${fileCountStr}`));
+        output.push('');
+    }
+    return output;
+}
+/**
+ * Requests consent from the user to install an extension (extensionConfig), if
+ * there is any difference between the consent string for `extensionConfig` and
+ * `previousExtensionConfig`.
+ *
+ * Always requests consent if previousExtensionConfig is null.
+ *
+ * Throws if the user does not consent.
+ */
+export async function maybeRequestConsentOrFail(extensionConfig, requestConsent, hasHooks, previousExtensionConfig, previousHasHooks, skills = [], previousSkills = [], isMigrating = false) {
+    const extensionConsent = await extensionConsentString(extensionConfig, hasHooks, skills, previousExtensionConfig?.name, isMigrating);
+    if (previousExtensionConfig) {
+        const previousExtensionConsent = await extensionConsentString(previousExtensionConfig, previousHasHooks ?? false, previousSkills);
+        if (previousExtensionConsent === extensionConsent) {
+            return;
+        }
+    }
+    if (!(await requestConsent(extensionConsent))) {
+        throw new Error(`Installation cancelled for "${extensionConfig.name}".`);
+    }
+}

package/dist/config/extensions/extensionEnablement.js

@@ -0,0 +1,192 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { coreEvents } from '@google/gemini-cli-core';
+import { ExtensionStorage } from './storage.js';
+import { z } from 'zod';
+export class Override {
+    baseRule;
+    isDisable;
+    includeSubdirs;
+    constructor(baseRule, isDisable, includeSubdirs) {
+        this.baseRule = baseRule;
+        this.isDisable = isDisable;
+        this.includeSubdirs = includeSubdirs;
+    }
+    static fromInput(inputRule, includeSubdirs) {
+        const isDisable = inputRule.startsWith('!');
+        let baseRule = isDisable ? inputRule.substring(1) : inputRule;
+        baseRule = ensureLeadingAndTrailingSlash(baseRule);
+        return new Override(baseRule, isDisable, includeSubdirs);
+    }
+    static fromFileRule(fileRule) {
+        const isDisable = fileRule.startsWith('!');
+        let baseRule = isDisable ? fileRule.substring(1) : fileRule;
+        const includeSubdirs = baseRule.endsWith('*');
+        baseRule = includeSubdirs
+            ? baseRule.substring(0, baseRule.length - 1)
+            : baseRule;
+        return new Override(baseRule, isDisable, includeSubdirs);
+    }
+    conflictsWith(other) {
+        if (this.baseRule === other.baseRule) {
+            return (this.includeSubdirs !== other.includeSubdirs ||
+                this.isDisable !== other.isDisable);
+        }
+        return false;
+    }
+    isEqualTo(other) {
+        return (this.baseRule === other.baseRule &&
+            this.includeSubdirs === other.includeSubdirs &&
+            this.isDisable === other.isDisable);
+    }
+    asRegex() {
+        return globToRegex(`${this.baseRule}${this.includeSubdirs ? '*' : ''}`);
+    }
+    isChildOf(parent) {
+        if (!parent.includeSubdirs) {
+            return false;
+        }
+        return parent.asRegex().test(this.baseRule);
+    }
+    output() {
+        return `${this.isDisable ? '!' : ''}${this.baseRule}${this.includeSubdirs ? '*' : ''}`;
+    }
+    matchesPath(path) {
+        return this.asRegex().test(path);
+    }
+}
+const ensureLeadingAndTrailingSlash = function (dirPath) {
+    // Normalize separators to forward slashes for consistent matching across platforms.
+    let result = dirPath.replace(/\\/g, '/');
+    if (result.charAt(0) !== '/') {
+        result = '/' + result;
+    }
+    if (result.charAt(result.length - 1) !== '/') {
+        result = result + '/';
+    }
+    return result;
+};
+/**
+ * Converts a glob pattern to a RegExp object.
+ * This is a simplified implementation that supports `*`.
+ *
+ * @param glob The glob pattern to convert.
+ * @returns A RegExp object.
+ */
+function globToRegex(glob) {
+    const regexString = glob
+        .replace(/[.+?^${}()|[\]\\]/g, '\\$&') // Escape special regex characters
+        .replace(/(\/?)\*/g, '($1.*)?'); // Convert * to optional group
+    return new RegExp(`^${regexString}$`);
+}
+export class ExtensionEnablementManager {
+    configFilePath;
+    configDir;
+    // If non-empty, this overrides all other extension configuration and enables
+    // only the ones in this list.
+    enabledExtensionNamesOverride;
+    constructor(enabledExtensionNames) {
+        this.configDir = ExtensionStorage.getUserExtensionsDir();
+        this.configFilePath = path.join(this.configDir, 'extension-enablement.json');
+        this.enabledExtensionNamesOverride =
+            enabledExtensionNames?.map((name) => name.toLowerCase()) ?? [];
+    }
+    validateExtensionOverrides(extensions) {
+        for (const name of this.enabledExtensionNamesOverride) {
+            if (name === 'none')
+                continue;
+            if (!extensions.some((ext) => ext.name.toLowerCase() === name.toLowerCase())) {
+                coreEvents.emitFeedback('error', `Extension not found: ${name}`);
+            }
+        }
+    }
+    /**
+     * Determines if an extension is enabled based on its name and the current
+     * path. The last matching rule in the overrides list wins.
+     *
+     * @param extensionName The name of the extension.
+     * @param currentPath The absolute path of the current working directory.
+     * @returns True if the extension is enabled, false otherwise.
+     */
+    isEnabled(extensionName, currentPath) {
+        // If we have a single override called 'none', this disables all extensions.
+        // Typically, this comes from the user passing `-e none`.
+        if (this.enabledExtensionNamesOverride.length === 1 &&
+            this.enabledExtensionNamesOverride[0] === 'none') {
+            return false;
+        }
+        // If we have explicit overrides, only enable those extensions.
+        if (this.enabledExtensionNamesOverride.length > 0) {
+            // When checking against overrides ONLY, we use a case insensitive match.
+            // The override names are already lowercased in the constructor.
+            return this.enabledExtensionNamesOverride.includes(extensionName.toLocaleLowerCase());
+        }
+        // Otherwise, we use the configuration settings
+        const config = this.readConfig();
+        const extensionConfig = config[extensionName];
+        // Extensions are enabled by default.
+        let enabled = true;
+        const allOverrides = extensionConfig?.overrides ?? [];
+        for (const rule of allOverrides) {
+            const override = Override.fromFileRule(rule);
+            if (override.matchesPath(ensureLeadingAndTrailingSlash(currentPath))) {
+                enabled = !override.isDisable;
+            }
+        }
+        return enabled;
+    }
+    readConfig() {
+        try {
+            const content = fs.readFileSync(this.configFilePath, 'utf-8');
+            const parsed = JSON.parse(content);
+            const schema = z.record(z.string(), z.object({ overrides: z.array(z.string()) }));
+            return schema.parse(parsed);
+        }
+        catch (error) {
+            if (error instanceof Error &&
+                'code' in error &&
+                error.code === 'ENOENT') {
+                return {};
+            }
+            coreEvents.emitFeedback('error', 'Failed to read extension enablement config.', error);
+            return {};
+        }
+    }
+    writeConfig(config) {
+        fs.mkdirSync(this.configDir, { recursive: true });
+        fs.writeFileSync(this.configFilePath, JSON.stringify(config, null, 2));
+    }
+    enable(extensionName, includeSubdirs, scopePath) {
+        const config = this.readConfig();
+        if (!config[extensionName]) {
+            config[extensionName] = { overrides: [] };
+        }
+        const override = Override.fromInput(scopePath, includeSubdirs);
+        const overrides = config[extensionName].overrides.filter((rule) => {
+            const fileOverride = Override.fromFileRule(rule);
+            if (fileOverride.conflictsWith(override) ||
+                fileOverride.isEqualTo(override)) {
+                return false; // Remove conflicts and equivalent values.
+            }
+            return !fileOverride.isChildOf(override);
+        });
+        overrides.push(override.output());
+        config[extensionName].overrides = overrides;
+        this.writeConfig(config);
+    }
+    disable(extensionName, includeSubdirs, scopePath) {
+        this.enable(extensionName, includeSubdirs, `!${scopePath}`);
+    }
+    remove(extensionName) {
+        const config = this.readConfig();
+        if (config[extensionName]) {
+            delete config[extensionName];
+            this.writeConfig(config);
+        }
+    }
+}