@terminai/core 0.21.0

package/dist/src/config/storage.test.js

@@ -0,0 +1,57 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, vi } from 'vitest';
+import * as os from 'node:os';
+import * as path from 'node:path';
+vi.mock('fs', async (importOriginal) => {
+    const actual = await importOriginal();
+    return {
+        ...actual,
+        mkdirSync: vi.fn(),
+    };
+});
+import { Storage } from './storage.js';
+import { GEMINI_DIR } from '../utils/paths.js';
+describe('Storage – getGlobalSettingsPath', () => {
+    it('returns path to ~/.gemini/settings.json', () => {
+        const expected = path.join(os.homedir(), GEMINI_DIR, 'settings.json');
+        expect(Storage.getGlobalSettingsPath()).toBe(expected);
+    });
+});
+describe('Storage – additional helpers', () => {
+    const projectRoot = '/tmp/project';
+    const storage = new Storage(projectRoot);
+    it('getWorkspaceSettingsPath returns project/.gemini/settings.json', () => {
+        const expected = path.join(projectRoot, GEMINI_DIR, 'settings.json');
+        expect(storage.getWorkspaceSettingsPath()).toBe(expected);
+    });
+    it('getUserCommandsDir returns ~/.gemini/commands', () => {
+        const expected = path.join(os.homedir(), GEMINI_DIR, 'commands');
+        expect(Storage.getUserCommandsDir()).toBe(expected);
+    });
+    it('getProjectCommandsDir returns project/.gemini/commands', () => {
+        const expected = path.join(projectRoot, GEMINI_DIR, 'commands');
+        expect(storage.getProjectCommandsDir()).toBe(expected);
+    });
+    it('getUserAgentsDir returns ~/.gemini/agents', () => {
+        const expected = path.join(os.homedir(), GEMINI_DIR, 'agents');
+        expect(Storage.getUserAgentsDir()).toBe(expected);
+    });
+    it('getProjectAgentsDir returns project/.gemini/agents', () => {
+        const expected = path.join(projectRoot, GEMINI_DIR, 'agents');
+        expect(storage.getProjectAgentsDir()).toBe(expected);
+    });
+    it('getMcpOAuthTokensPath returns ~/.gemini/mcp-oauth-tokens.json', () => {
+        const expected = path.join(os.homedir(), GEMINI_DIR, 'mcp-oauth-tokens.json');
+        expect(Storage.getMcpOAuthTokensPath()).toBe(expected);
+    });
+    it('getGlobalBinDir returns ~/.gemini/tmp/bin', () => {
+        const expected = path.join(os.homedir(), GEMINI_DIR, 'tmp', 'bin');
+        expect(Storage.getGlobalBinDir()).toBe(expected);
+    });
+});
+//# sourceMappingURL=storage.test.js.map

package/dist/src/config/storage.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.test.js","sourceRoot":"","sources":["../../../src/config/storage.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACrC,MAAM,MAAM,GAAG,MAAM,cAAc,EAAuB,CAAC;IAC3D,OAAO;QACL,GAAG,MAAM;QACT,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;KACnB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QACtE,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,MAAM,WAAW,GAAG,cAAc,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAEzC,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QACrE,MAAM,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QACjE,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QAChE,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC/D,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC9D,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,EAAE,CAAC,OAAO,EAAE,EACZ,UAAU,EACV,uBAAuB,CACxB,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACnE,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/confirmation-bus/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export * from './message-bus.js';
+export * from './types.js';

package/dist/src/confirmation-bus/index.js

@@ -0,0 +1,9 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export * from './message-bus.js';
+export * from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/src/confirmation-bus/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/confirmation-bus/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC"}

package/dist/src/confirmation-bus/message-bus.d.ts

@@ -0,0 +1,25 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { EventEmitter } from 'node:events';
+import type { PolicyEngine } from '../policy/policy-engine.js';
+import { type Message } from './types.js';
+export declare class MessageBus extends EventEmitter {
+    private readonly policyEngine;
+    private readonly debug;
+    constructor(policyEngine: PolicyEngine, debug?: boolean);
+    private isValidMessage;
+    private emitMessage;
+    publish(message: Message): Promise<void>;
+    subscribe<T extends Message>(type: T['type'], listener: (message: T) => void): void;
+    unsubscribe<T extends Message>(type: T['type'], listener: (message: T) => void): void;
+    /**
+     * Request-response pattern: Publish a message and wait for a correlated response
+     * This enables synchronous-style communication over the async MessageBus
+     * The correlation ID is generated internally and added to the request
+     */
+    request<TRequest extends Message, TResponse extends Message>(request: Omit<TRequest, 'correlationId'>, responseType: TResponse['type'], timeoutMs?: number): Promise<TResponse>;
+}

package/dist/src/confirmation-bus/message-bus.js

@@ -0,0 +1,150 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { randomUUID } from 'node:crypto';
+import { EventEmitter } from 'node:events';
+import { PolicyDecision, getHookSource } from '../policy/types.js';
+import { MessageBusType, } from './types.js';
+import { safeJsonStringify } from '../utils/safeJsonStringify.js';
+export class MessageBus extends EventEmitter {
+    policyEngine;
+    debug;
+    constructor(policyEngine, debug = false) {
+        super();
+        this.policyEngine = policyEngine;
+        this.debug = debug;
+        this.debug = debug;
+    }
+    isValidMessage(message) {
+        if (!message || !message.type) {
+            return false;
+        }
+        if (message.type === MessageBusType.TOOL_CONFIRMATION_REQUEST &&
+            !('correlationId' in message)) {
+            return false;
+        }
+        return true;
+    }
+    emitMessage(message) {
+        this.emit(message.type, message);
+    }
+    async publish(message) {
+        if (this.debug) {
+            console.debug(`[MESSAGE_BUS] publish: ${safeJsonStringify(message)}`);
+        }
+        try {
+            if (!this.isValidMessage(message)) {
+                throw new Error(`Invalid message structure: ${safeJsonStringify(message)}`);
+            }
+            if (message.type === MessageBusType.TOOL_CONFIRMATION_REQUEST) {
+                const { decision } = await this.policyEngine.check(message.toolCall, message.serverName);
+                switch (decision) {
+                    case PolicyDecision.ALLOW:
+                        // Directly emit the response instead of recursive publish
+                        this.emitMessage({
+                            type: MessageBusType.TOOL_CONFIRMATION_RESPONSE,
+                            correlationId: message.correlationId,
+                            confirmed: true,
+                        });
+                        break;
+                    case PolicyDecision.DENY:
+                        // Emit both rejection and response messages
+                        this.emitMessage({
+                            type: MessageBusType.TOOL_POLICY_REJECTION,
+                            toolCall: message.toolCall,
+                        });
+                        this.emitMessage({
+                            type: MessageBusType.TOOL_CONFIRMATION_RESPONSE,
+                            correlationId: message.correlationId,
+                            confirmed: false,
+                        });
+                        break;
+                    case PolicyDecision.ASK_USER:
+                        // Pass through to UI for user confirmation
+                        this.emitMessage(message);
+                        break;
+                    default:
+                        throw new Error(`Unknown policy decision: ${decision}`);
+                }
+            }
+            else if (message.type === MessageBusType.HOOK_EXECUTION_REQUEST) {
+                // Handle hook execution requests through policy evaluation
+                const hookRequest = message;
+                const decision = await this.policyEngine.checkHook(hookRequest);
+                // Map decision to allow/deny for observability (ASK_USER treated as deny for hooks)
+                const effectiveDecision = decision === PolicyDecision.ALLOW ? 'allow' : 'deny';
+                // Emit policy decision for observability
+                this.emitMessage({
+                    type: MessageBusType.HOOK_POLICY_DECISION,
+                    eventName: hookRequest.eventName,
+                    hookSource: getHookSource(hookRequest.input),
+                    decision: effectiveDecision,
+                    reason: decision !== PolicyDecision.ALLOW
+                        ? 'Hook execution denied by policy'
+                        : undefined,
+                });
+                // If allowed, emit the request for hook system to handle
+                if (decision === PolicyDecision.ALLOW) {
+                    this.emitMessage(message);
+                }
+                else {
+                    // If denied or ASK_USER, emit error response (hooks don't support interactive confirmation)
+                    this.emitMessage({
+                        type: MessageBusType.HOOK_EXECUTION_RESPONSE,
+                        correlationId: hookRequest.correlationId,
+                        success: false,
+                        error: new Error('Hook execution denied by policy'),
+                    });
+                }
+            }
+            else {
+                // For all other message types, just emit them
+                this.emitMessage(message);
+            }
+        }
+        catch (error) {
+            this.emit('error', error);
+        }
+    }
+    subscribe(type, listener) {
+        this.on(type, listener);
+    }
+    unsubscribe(type, listener) {
+        this.off(type, listener);
+    }
+    /**
+     * Request-response pattern: Publish a message and wait for a correlated response
+     * This enables synchronous-style communication over the async MessageBus
+     * The correlation ID is generated internally and added to the request
+     */
+    async request(request, responseType, timeoutMs = 60000) {
+        const correlationId = randomUUID();
+        return new Promise((resolve, reject) => {
+            const timeoutId = setTimeout(() => {
+                cleanup();
+                reject(new Error(`Request timed out waiting for ${responseType}`));
+            }, timeoutMs);
+            const cleanup = () => {
+                clearTimeout(timeoutId);
+                this.unsubscribe(responseType, responseHandler);
+            };
+            const responseHandler = (response) => {
+                // Check if this response matches our request
+                if ('correlationId' in response &&
+                    response.correlationId === correlationId) {
+                    cleanup();
+                    resolve(response);
+                }
+            };
+            // Subscribe to responses
+            this.subscribe(responseType, responseHandler);
+            // Publish the request with correlation ID
+            // eslint-disable-next-line @typescript-eslint/no-floating-promises
+            this.publish({ ...request, correlationId });
+        });
+    }
+}
+//# sourceMappingURL=message-bus.js.map

package/dist/src/confirmation-bus/message-bus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-bus.js","sourceRoot":"","sources":["../../../src/confirmation-bus/message-bus.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EACL,cAAc,GAGf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,MAAM,OAAO,UAAW,SAAQ,YAAY;IAEvB;IACA;IAFnB,YACmB,YAA0B,EAC1B,QAAQ,KAAK;QAE9B,KAAK,EAAE,CAAC;QAHS,iBAAY,GAAZ,YAAY,CAAc;QAC1B,UAAK,GAAL,KAAK,CAAQ;QAG9B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAEO,cAAc,CAAC,OAAgB;QACrC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IACE,OAAO,CAAC,IAAI,KAAK,cAAc,CAAC,yBAAyB;YACzD,CAAC,CAAC,eAAe,IAAI,OAAO,CAAC,EAC7B,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,WAAW,CAAC,OAAgB;QAClC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAgB;QAC5B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,0BAA0B,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CACb,8BAA8B,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAC3D,CAAC;YACJ,CAAC;YAED,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,CAAC,yBAAyB,EAAE,CAAC;gBAC9D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAChD,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,UAAU,CACnB,CAAC;gBAEF,QAAQ,QAAQ,EAAE,CAAC;oBACjB,KAAK,cAAc,CAAC,KAAK;wBACvB,0DAA0D;wBAC1D,IAAI,CAAC,WAAW,CAAC;4BACf,IAAI,EAAE,cAAc,CAAC,0BAA0B;4BAC/C,aAAa,EAAE,OAAO,CAAC,aAAa;4BACpC,SAAS,EAAE,IAAI;yBAChB,CAAC,CAAC;wBACH,MAAM;oBACR,KAAK,cAAc,CAAC,IAAI;wBACtB,4CAA4C;wBAC5C,IAAI,CAAC,WAAW,CAAC;4BACf,IAAI,EAAE,cAAc,CAAC,qBAAqB;4BAC1C,QAAQ,EAAE,OAAO,CAAC,QAAQ;yBAC3B,CAAC,CAAC;wBACH,IAAI,CAAC,WAAW,CAAC;4BACf,IAAI,EAAE,cAAc,CAAC,0BAA0B;4BAC/C,aAAa,EAAE,OAAO,CAAC,aAAa;4BACpC,SAAS,EAAE,KAAK;yBACjB,CAAC,CAAC;wBACH,MAAM;oBACR,KAAK,cAAc,CAAC,QAAQ;wBAC1B,2CAA2C;wBAC3C,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;wBAC1B,MAAM;oBACR;wBACE,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;gBAC5D,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,CAAC,sBAAsB,EAAE,CAAC;gBAClE,2DAA2D;gBAC3D,MAAM,WAAW,GAAG,OAAO,CAAC;gBAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;gBAEhE,oFAAoF;gBACpF,MAAM,iBAAiB,GACrB,QAAQ,KAAK,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;gBAEvD,yCAAyC;gBACzC,IAAI,CAAC,WAAW,CAAC;oBACf,IAAI,EAAE,cAAc,CAAC,oBAAoB;oBACzC,SAAS,EAAE,WAAW,CAAC,SAAS;oBAChC,UAAU,EAAE,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC;oBAC5C,QAAQ,EAAE,iBAAiB;oBAC3B,MAAM,EACJ,QAAQ,KAAK,cAAc,CAAC,KAAK;wBAC/B,CAAC,CAAC,iCAAiC;wBACnC,CAAC,CAAC,SAAS;iBACM,CAAC,CAAC;gBAEzB,yDAAyD;gBACzD,IAAI,QAAQ,KAAK,cAAc,CAAC,KAAK,EAAE,CAAC;oBACtC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;gBAC5B,CAAC;qBAAM,CAAC;oBACN,4FAA4F;oBAC5F,IAAI,CAAC,WAAW,CAAC;wBACf,IAAI,EAAE,cAAc,CAAC,uBAAuB;wBAC5C,aAAa,EAAE,WAAW,CAAC,aAAa;wBACxC,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,IAAI,KAAK,CAAC,iCAAiC,CAAC;qBACpD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,8CAA8C;gBAC9C,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,SAAS,CACP,IAAe,EACf,QAA8B;QAE9B,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1B,CAAC;IAED,WAAW,CACT,IAAe,EACf,QAA8B;QAE9B,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,OAAO,CACX,OAAwC,EACxC,YAA+B,EAC/B,YAAoB,KAAK;QAEzB,MAAM,aAAa,GAAG,UAAU,EAAE,CAAC;QAEnC,OAAO,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAChD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;gBAChC,OAAO,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,YAAY,EAAE,CAAC,CAAC,CAAC;YACrE,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,YAAY,CAAC,SAAS,CAAC,CAAC;gBACxB,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;YAClD,CAAC,CAAC;YAEF,MAAM,eAAe,GAAG,CAAC,QAAmB,EAAE,EAAE;gBAC9C,6CAA6C;gBAC7C,IACE,eAAe,IAAI,QAAQ;oBAC3B,QAAQ,CAAC,aAAa,KAAK,aAAa,EACxC,CAAC;oBACD,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,QAAQ,CAAC,CAAC;gBACpB,CAAC;YACH,CAAC,CAAC;YAEF,yBAAyB;YACzB,IAAI,CAAC,SAAS,CAAY,YAAY,EAAE,eAAe,CAAC,CAAC;YAEzD,0CAA0C;YAC1C,mEAAmE;YACnE,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAc,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/src/confirmation-bus/message-bus.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/confirmation-bus/message-bus.test.js

@@ -0,0 +1,171 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, beforeEach, vi } from 'vitest';
+import { MessageBus } from './message-bus.js';
+import { PolicyEngine } from '../policy/policy-engine.js';
+import { PolicyDecision } from '../policy/types.js';
+import { MessageBusType, } from './types.js';
+describe('MessageBus', () => {
+    let messageBus;
+    let policyEngine;
+    beforeEach(() => {
+        policyEngine = new PolicyEngine();
+        messageBus = new MessageBus(policyEngine);
+    });
+    describe('publish', () => {
+        it('should emit error for invalid message', async () => {
+            const errorHandler = vi.fn();
+            messageBus.on('error', errorHandler);
+            // @ts-expect-error - Testing invalid message
+            await messageBus.publish({ invalid: 'message' });
+            expect(errorHandler).toHaveBeenCalledWith(expect.objectContaining({
+                message: expect.stringContaining('Invalid message structure'),
+            }));
+        });
+        it('should validate tool confirmation requests have correlationId', async () => {
+            const errorHandler = vi.fn();
+            messageBus.on('error', errorHandler);
+            // @ts-expect-error - Testing missing correlationId
+            await messageBus.publish({
+                type: MessageBusType.TOOL_CONFIRMATION_REQUEST,
+                toolCall: { name: 'test' },
+            });
+            expect(errorHandler).toHaveBeenCalled();
+        });
+        it('should emit confirmation response when policy allows', async () => {
+            vi.spyOn(policyEngine, 'check').mockResolvedValue({
+                decision: PolicyDecision.ALLOW,
+            });
+            const responseHandler = vi.fn();
+            messageBus.subscribe(MessageBusType.TOOL_CONFIRMATION_RESPONSE, responseHandler);
+            const request = {
+                type: MessageBusType.TOOL_CONFIRMATION_REQUEST,
+                toolCall: { name: 'test-tool', args: {} },
+                correlationId: '123',
+            };
+            await messageBus.publish(request);
+            const expectedResponse = {
+                type: MessageBusType.TOOL_CONFIRMATION_RESPONSE,
+                correlationId: '123',
+                confirmed: true,
+            };
+            expect(responseHandler).toHaveBeenCalledWith(expectedResponse);
+        });
+        it('should emit rejection and response when policy denies', async () => {
+            vi.spyOn(policyEngine, 'check').mockResolvedValue({
+                decision: PolicyDecision.DENY,
+            });
+            const responseHandler = vi.fn();
+            const rejectionHandler = vi.fn();
+            messageBus.subscribe(MessageBusType.TOOL_CONFIRMATION_RESPONSE, responseHandler);
+            messageBus.subscribe(MessageBusType.TOOL_POLICY_REJECTION, rejectionHandler);
+            const request = {
+                type: MessageBusType.TOOL_CONFIRMATION_REQUEST,
+                toolCall: { name: 'test-tool', args: {} },
+                correlationId: '123',
+            };
+            await messageBus.publish(request);
+            const expectedRejection = {
+                type: MessageBusType.TOOL_POLICY_REJECTION,
+                toolCall: { name: 'test-tool', args: {} },
+            };
+            expect(rejectionHandler).toHaveBeenCalledWith(expectedRejection);
+            const expectedResponse = {
+                type: MessageBusType.TOOL_CONFIRMATION_RESPONSE,
+                correlationId: '123',
+                confirmed: false,
+            };
+            expect(responseHandler).toHaveBeenCalledWith(expectedResponse);
+        });
+        it('should pass through to UI when policy says ASK_USER', async () => {
+            vi.spyOn(policyEngine, 'check').mockResolvedValue({
+                decision: PolicyDecision.ASK_USER,
+            });
+            const requestHandler = vi.fn();
+            messageBus.subscribe(MessageBusType.TOOL_CONFIRMATION_REQUEST, requestHandler);
+            const request = {
+                type: MessageBusType.TOOL_CONFIRMATION_REQUEST,
+                toolCall: { name: 'test-tool', args: {} },
+                correlationId: '123',
+            };
+            await messageBus.publish(request);
+            expect(requestHandler).toHaveBeenCalledWith(request);
+        });
+        it('should emit other message types directly', async () => {
+            const successHandler = vi.fn();
+            messageBus.subscribe(MessageBusType.TOOL_EXECUTION_SUCCESS, successHandler);
+            const message = {
+                type: MessageBusType.TOOL_EXECUTION_SUCCESS,
+                toolCall: { name: 'test-tool' },
+                result: 'success',
+            };
+            await messageBus.publish(message);
+            expect(successHandler).toHaveBeenCalledWith(message);
+        });
+    });
+    describe('subscribe/unsubscribe', () => {
+        it('should allow subscribing to specific message types', async () => {
+            const handler = vi.fn();
+            messageBus.subscribe(MessageBusType.TOOL_EXECUTION_SUCCESS, handler);
+            const message = {
+                type: MessageBusType.TOOL_EXECUTION_SUCCESS,
+                toolCall: { name: 'test' },
+                result: 'test',
+            };
+            await messageBus.publish(message);
+            expect(handler).toHaveBeenCalledWith(message);
+        });
+        it('should allow unsubscribing from message types', async () => {
+            const handler = vi.fn();
+            messageBus.subscribe(MessageBusType.TOOL_EXECUTION_SUCCESS, handler);
+            messageBus.unsubscribe(MessageBusType.TOOL_EXECUTION_SUCCESS, handler);
+            const message = {
+                type: MessageBusType.TOOL_EXECUTION_SUCCESS,
+                toolCall: { name: 'test' },
+                result: 'test',
+            };
+            await messageBus.publish(message);
+            expect(handler).not.toHaveBeenCalled();
+        });
+        it('should support multiple subscribers for the same message type', async () => {
+            const handler1 = vi.fn();
+            const handler2 = vi.fn();
+            messageBus.subscribe(MessageBusType.TOOL_EXECUTION_SUCCESS, handler1);
+            messageBus.subscribe(MessageBusType.TOOL_EXECUTION_SUCCESS, handler2);
+            const message = {
+                type: MessageBusType.TOOL_EXECUTION_SUCCESS,
+                toolCall: { name: 'test' },
+                result: 'test',
+            };
+            await messageBus.publish(message);
+            expect(handler1).toHaveBeenCalledWith(message);
+            expect(handler2).toHaveBeenCalledWith(message);
+        });
+    });
+    describe('error handling', () => {
+        it('should not crash on errors during message processing', async () => {
+            const errorHandler = vi.fn();
+            messageBus.on('error', errorHandler);
+            // Mock policyEngine to throw an error
+            vi.spyOn(policyEngine, 'check').mockImplementation(async () => {
+                throw new Error('Policy check failed');
+            });
+            const request = {
+                type: MessageBusType.TOOL_CONFIRMATION_REQUEST,
+                toolCall: { name: 'test-tool' },
+                correlationId: '123',
+            };
+            // Should not throw
+            await expect(messageBus.publish(request)).resolves.not.toThrow();
+            // Should emit error
+            expect(errorHandler).toHaveBeenCalledWith(expect.objectContaining({
+                message: 'Policy check failed',
+            }));
+        });
+    });
+});
+//# sourceMappingURL=message-bus.test.js.map

package/dist/src/confirmation-bus/message-bus.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-bus.test.js","sourceRoot":"","sources":["../../../src/confirmation-bus/message-bus.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EACL,cAAc,GAKf,MAAM,YAAY,CAAC;AAEpB,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,IAAI,UAAsB,CAAC;IAC3B,IAAI,YAA0B,CAAC;IAE/B,UAAU,CAAC,GAAG,EAAE;QACd,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;QAClC,UAAU,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;QACvB,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAErC,6CAA6C;YAC7C,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YAEjD,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,MAAM,CAAC,gBAAgB,CAAC;gBACtB,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,2BAA2B,CAAC;aAC9D,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;YAC7E,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAErC,mDAAmD;YACnD,MAAM,UAAU,CAAC,OAAO,CAAC;gBACvB,IAAI,EAAE,cAAc,CAAC,yBAAyB;gBAC9C,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;aAC3B,CAAC,CAAC;YAEH,MAAM,CAAC,YAAY,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,iBAAiB,CAAC;gBAChD,QAAQ,EAAE,cAAc,CAAC,KAAK;aAC/B,CAAC,CAAC;YAEH,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,UAAU,CAAC,SAAS,CAClB,cAAc,CAAC,0BAA0B,EACzC,eAAe,CAChB,CAAC;YAEF,MAAM,OAAO,GAA4B;gBACvC,IAAI,EAAE,cAAc,CAAC,yBAAyB;gBAC9C,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;gBACzC,aAAa,EAAE,KAAK;aACrB,CAAC;YAEF,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAElC,MAAM,gBAAgB,GAA6B;gBACjD,IAAI,EAAE,cAAc,CAAC,0BAA0B;gBAC/C,aAAa,EAAE,KAAK;gBACpB,SAAS,EAAE,IAAI;aAChB,CAAC;YACF,MAAM,CAAC,eAAe,CAAC,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACrE,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,iBAAiB,CAAC;gBAChD,QAAQ,EAAE,cAAc,CAAC,IAAI;aAC9B,CAAC,CAAC;YAEH,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,MAAM,gBAAgB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YACjC,UAAU,CAAC,SAAS,CAClB,cAAc,CAAC,0BAA0B,EACzC,eAAe,CAChB,CAAC;YACF,UAAU,CAAC,SAAS,CAClB,cAAc,CAAC,qBAAqB,EACpC,gBAAgB,CACjB,CAAC;YAEF,MAAM,OAAO,GAA4B;gBACvC,IAAI,EAAE,cAAc,CAAC,yBAAyB;gBAC9C,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;gBACzC,aAAa,EAAE,KAAK;aACrB,CAAC;YAEF,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAElC,MAAM,iBAAiB,GAAwB;gBAC7C,IAAI,EAAE,cAAc,CAAC,qBAAqB;gBAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;aAC1C,CAAC;YACF,MAAM,CAAC,gBAAgB,CAAC,CAAC,oBAAoB,CAAC,iBAAiB,CAAC,CAAC;YAEjE,MAAM,gBAAgB,GAA6B;gBACjD,IAAI,EAAE,cAAc,CAAC,0BAA0B;gBAC/C,aAAa,EAAE,KAAK;gBACpB,SAAS,EAAE,KAAK;aACjB,CAAC;YACF,MAAM,CAAC,eAAe,CAAC,CAAC,oBAAoB,CAAC,gBAAgB,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;YACnE,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,iBAAiB,CAAC;gBAChD,QAAQ,EAAE,cAAc,CAAC,QAAQ;aAClC,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,UAAU,CAAC,SAAS,CAClB,cAAc,CAAC,yBAAyB,EACxC,cAAc,CACf,CAAC;YAEF,MAAM,OAAO,GAA4B;gBACvC,IAAI,EAAE,cAAc,CAAC,yBAAyB;gBAC9C,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE;gBACzC,aAAa,EAAE,KAAK;aACrB,CAAC;YAEF,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAElC,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,cAAc,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,UAAU,CAAC,SAAS,CAClB,cAAc,CAAC,sBAAsB,EACrC,cAAc,CACf,CAAC;YAEF,MAAM,OAAO,GAAiC;gBAC5C,IAAI,EAAE,cAAc,CAAC,sBAA+B;gBACpD,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;gBAC/B,MAAM,EAAE,SAAS;aAClB,CAAC;YAEF,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAElC,MAAM,CAAC,cAAc,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YACxB,UAAU,CAAC,SAAS,CAAC,cAAc,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;YAErE,MAAM,OAAO,GAAiC;gBAC5C,IAAI,EAAE,cAAc,CAAC,sBAA+B;gBACpD,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBAC1B,MAAM,EAAE,MAAM;aACf,CAAC;YAEF,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAElC,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YACxB,UAAU,CAAC,SAAS,CAAC,cAAc,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;YACrE,UAAU,CAAC,WAAW,CAAC,cAAc,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;YAEvE,MAAM,OAAO,GAAiC;gBAC5C,IAAI,EAAE,cAAc,CAAC,sBAA+B;gBACpD,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBAC1B,MAAM,EAAE,MAAM;aACf,CAAC;YAEF,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAElC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;YAC7E,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YACzB,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAEzB,UAAU,CAAC,SAAS,CAAC,cAAc,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC;YACtE,UAAU,CAAC,SAAS,CAAC,cAAc,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC;YAEtE,MAAM,OAAO,GAAiC;gBAC5C,IAAI,EAAE,cAAc,CAAC,sBAA+B;gBACpD,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;gBAC1B,MAAM,EAAE,MAAM;aACf,CAAC;YAEF,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAElC,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,CAAC,QAAQ,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;YACpE,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YAErC,sCAAsC;YACtC,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE;gBAC5D,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;YACzC,CAAC,CAAC,CAAC;YAEH,MAAM,OAAO,GAA4B;gBACvC,IAAI,EAAE,cAAc,CAAC,yBAAyB;gBAC9C,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;gBAC/B,aAAa,EAAE,KAAK;aACrB,CAAC;YAEF,mBAAmB;YACnB,MAAM,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;YAEjE,oBAAoB;YACpB,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CACvC,MAAM,CAAC,gBAAgB,CAAC;gBACtB,OAAO,EAAE,qBAAqB;aAC/B,CAAC,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/confirmation-bus/types.d.ts

@@ -0,0 +1,77 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type FunctionCall } from '@google/genai';
+export declare enum MessageBusType {
+    TOOL_CONFIRMATION_REQUEST = "tool-confirmation-request",
+    TOOL_CONFIRMATION_RESPONSE = "tool-confirmation-response",
+    TOOL_POLICY_REJECTION = "tool-policy-rejection",
+    TOOL_EXECUTION_SUCCESS = "tool-execution-success",
+    TOOL_EXECUTION_FAILURE = "tool-execution-failure",
+    UPDATE_POLICY = "update-policy",
+    HOOK_EXECUTION_REQUEST = "hook-execution-request",
+    HOOK_EXECUTION_RESPONSE = "hook-execution-response",
+    HOOK_POLICY_DECISION = "hook-policy-decision"
+}
+export interface ToolConfirmationRequest {
+    type: MessageBusType.TOOL_CONFIRMATION_REQUEST;
+    toolCall: FunctionCall;
+    correlationId: string;
+    serverName?: string;
+}
+export interface ToolConfirmationResponse {
+    type: MessageBusType.TOOL_CONFIRMATION_RESPONSE;
+    correlationId: string;
+    confirmed: boolean;
+    /**
+     * When true, indicates that policy decision was ASK_USER and the tool should
+     * show its legacy confirmation UI instead of auto-proceeding.
+     */
+    requiresUserConfirmation?: boolean;
+}
+export interface UpdatePolicy {
+    type: MessageBusType.UPDATE_POLICY;
+    toolName: string;
+    persist?: boolean;
+    argsPattern?: string;
+    commandPrefix?: string;
+    mcpName?: string;
+}
+export interface ToolPolicyRejection {
+    type: MessageBusType.TOOL_POLICY_REJECTION;
+    toolCall: FunctionCall;
+}
+export interface ToolExecutionSuccess<T = unknown> {
+    type: MessageBusType.TOOL_EXECUTION_SUCCESS;
+    toolCall: FunctionCall;
+    result: T;
+}
+export interface ToolExecutionFailure<E = Error> {
+    type: MessageBusType.TOOL_EXECUTION_FAILURE;
+    toolCall: FunctionCall;
+    error: E;
+}
+export interface HookExecutionRequest {
+    type: MessageBusType.HOOK_EXECUTION_REQUEST;
+    eventName: string;
+    input: Record<string, unknown>;
+    correlationId: string;
+}
+export interface HookExecutionResponse {
+    type: MessageBusType.HOOK_EXECUTION_RESPONSE;
+    correlationId: string;
+    success: boolean;
+    output?: Record<string, unknown>;
+    error?: Error;
+}
+export interface HookPolicyDecision {
+    type: MessageBusType.HOOK_POLICY_DECISION;
+    eventName: string;
+    hookSource: 'project' | 'user' | 'system' | 'extension';
+    decision: 'allow' | 'deny';
+    reason?: string;
+}
+export type Message = ToolConfirmationRequest | ToolConfirmationResponse | ToolPolicyRejection | ToolExecutionSuccess | ToolExecutionFailure | UpdatePolicy | HookExecutionRequest | HookExecutionResponse | HookPolicyDecision;

package/dist/src/confirmation-bus/types.js

@@ -0,0 +1,20 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import {} from '@google/genai';
+export var MessageBusType;
+(function (MessageBusType) {
+    MessageBusType["TOOL_CONFIRMATION_REQUEST"] = "tool-confirmation-request";
+    MessageBusType["TOOL_CONFIRMATION_RESPONSE"] = "tool-confirmation-response";
+    MessageBusType["TOOL_POLICY_REJECTION"] = "tool-policy-rejection";
+    MessageBusType["TOOL_EXECUTION_SUCCESS"] = "tool-execution-success";
+    MessageBusType["TOOL_EXECUTION_FAILURE"] = "tool-execution-failure";
+    MessageBusType["UPDATE_POLICY"] = "update-policy";
+    MessageBusType["HOOK_EXECUTION_REQUEST"] = "hook-execution-request";
+    MessageBusType["HOOK_EXECUTION_RESPONSE"] = "hook-execution-response";
+    MessageBusType["HOOK_POLICY_DECISION"] = "hook-policy-decision";
+})(MessageBusType || (MessageBusType = {}));
+//# sourceMappingURL=types.js.map

package/dist/src/confirmation-bus/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/confirmation-bus/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAqB,MAAM,eAAe,CAAC;AAElD,MAAM,CAAN,IAAY,cAUX;AAVD,WAAY,cAAc;IACxB,yEAAuD,CAAA;IACvD,2EAAyD,CAAA;IACzD,iEAA+C,CAAA;IAC/C,mEAAiD,CAAA;IACjD,mEAAiD,CAAA;IACjD,iDAA+B,CAAA;IAC/B,mEAAiD,CAAA;IACjD,qEAAmD,CAAA;IACnD,+DAA6C,CAAA;AAC/C,CAAC,EAVW,cAAc,KAAd,cAAc,QAUzB"}

package/dist/src/core/apiKeyCredentialStorage.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+/**
+ * Load cached API key
+ */
+export declare function loadApiKey(): Promise<string | null>;
+/**
+ * Save API key
+ */
+export declare function saveApiKey(apiKey: string | null | undefined): Promise<void>;
+/**
+ * Clear cached API key
+ */
+export declare function clearApiKey(): Promise<void>;

package/dist/src/core/apiKeyCredentialStorage.js

@@ -0,0 +1,65 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { HybridTokenStorage } from '../mcp/token-storage/hybrid-token-storage.js';
+import { debugLogger } from '../utils/debugLogger.js';
+const KEYCHAIN_SERVICE_NAME = 'gemini-cli-api-key';
+const DEFAULT_API_KEY_ENTRY = 'default-api-key';
+const storage = new HybridTokenStorage(KEYCHAIN_SERVICE_NAME);
+/**
+ * Load cached API key
+ */
+export async function loadApiKey() {
+    try {
+        const credentials = await storage.getCredentials(DEFAULT_API_KEY_ENTRY);
+        if (credentials?.token?.accessToken) {
+            return credentials.token.accessToken;
+        }
+        return null;
+    }
+    catch (error) {
+        // Log other errors but don't crash, just return null so user can re-enter key
+        debugLogger.error('Failed to load API key from storage:', error);
+        return null;
+    }
+}
+/**
+ * Save API key
+ */
+export async function saveApiKey(apiKey) {
+    if (!apiKey || apiKey.trim() === '') {
+        try {
+            await storage.deleteCredentials(DEFAULT_API_KEY_ENTRY);
+        }
+        catch (error) {
+            // Ignore errors when deleting, as it might not exist
+            debugLogger.warn('Failed to delete API key from storage:', error);
+        }
+        return;
+    }
+    // Wrap API key in OAuthCredentials format as required by HybridTokenStorage
+    const credentials = {
+        serverName: DEFAULT_API_KEY_ENTRY,
+        token: {
+            accessToken: apiKey,
+            tokenType: 'ApiKey',
+        },
+        updatedAt: Date.now(),
+    };
+    await storage.setCredentials(credentials);
+}
+/**
+ * Clear cached API key
+ */
+export async function clearApiKey() {
+    try {
+        await storage.deleteCredentials(DEFAULT_API_KEY_ENTRY);
+    }
+    catch (error) {
+        debugLogger.error('Failed to clear API key from storage:', error);
+    }
+}
+//# sourceMappingURL=apiKeyCredentialStorage.js.map