@weave_protocol/adapter-geminicli 0.0.0-stage → 0.2.0

package/README.md

@@ -1,3 +1,81 @@
-# Temporary Holding Version
+# 🛡️ @weave_protocol/adapter-geminicli
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+> Enforce [WARD.md](https://github.com/Tyox-all/Weave_Protocol/tree/main/ward) in **Gemini CLI** with its `BeforeTool` hook. Every tool call the agent makes is checked against your policy before it runs.
+
+[![npm](https://img.shields.io/npm/v/@weave_protocol/adapter-geminicli?color=000&style=flat-square)](https://www.npmjs.com/package/@weave_protocol/adapter-geminicli)
+
+The fourth WARD harness adapter, after Claude Code, Antigravity and Microsoft Agent Framework. The same WARD.md works in all of them.
+
+## Quick start
+
+```bash
+npm i -g @weave_protocol/adapter-geminicli
+weave-gemini init          # adds the hook to ~/.gemini/settings.json
+weave-gemini status        # hook installed? which WARD.md is active?
+```
+
+Then restart Gemini CLI. Add a `WARD.md` to your project (`npx @weave_protocol/ward init`), or a user-wide one at `~/.gemini/WARD.md`.
+
+## What it checks
+
+The hook uses Ward's shared evaluator (`evaluateToolCall`), so the rules match the other adapters exactly:
+
+- **Capability:** the tool's WARD capability (`run_shell_command` → `shell_exec`, `read_file` → `file_read`, …) or its raw name.
+- **Arguments:** every path and URL argument, with `..` and `~` normalized, including every entry of `read_many_files`' `include` list.
+- **Shell commands:** every URL and every absolute or `~` path in `run_shell_command`, with relative paths resolved against its `dir_path`.
+- **`web_fetch`:** every URL inside its free-text `prompt`.
+- **MCP tools** (`mcp_<server>_<tool>`): by name, plus their path and URL arguments.
+
+Gemini CLI's planning and interaction tools (`ask_user`, `write_todos`, plan mode, the task tracker, `update_topic`) share one capability, `task_planning`, so a default-deny policy can allow them in one line:
+
+```yaml
+## Capabilities
+allow:
+  - file_read
+  - task_planning
+default: deny
+```
+
+## Decisions
+
+| WARD decision | What Gemini CLI sees |
+|---|---|
+| allow | nothing (`{}`): Gemini CLI's own confirmation prompts still apply |
+| deny | `{"decision": "deny", "reason": "WARD: …"}`; the reason goes to the agent as the tool error |
+| require_approval | a deny whose reason says approval is needed (Gemini CLI hooks have no "ask") |
+
+**Failure modes:**
+- **An invalid WARD.md always denies**, so a typo can't silently switch enforcement off.
+- **No WARD.md anywhere means no enforcement.**
+- **Malformed payloads and evaluator errors** allow by default. `weave-gemini init --fail-closed` makes them deny.
+
+WARD.md is looked up in this order:
+1. `$WEAVE_WARD_PATH`
+2. `<project>/WARD.md`
+3. `<project>/.gemini/WARD.md`
+4. `<project>/.weave/WARD.md`
+5. `~/.gemini/WARD.md`
+
+## Commands
+
+```bash
+weave-gemini init [--matcher=REGEX] [--timeout=MS] [--fail-closed]
+weave-gemini disable
+weave-gemini status
+weave-gemini test read_file --input='{"file_path":"secrets/key"}'   # dry run
+weave-gemini hook before-tool                                        # what Gemini CLI runs
+```
+
+`init` backs up `settings.json`, edits it atomically, and finds its own entry by the hook name `weave-ward`, so your other hooks are untouched. It installs at user level. Gemini CLI fingerprints project-level hooks and warns when one changes, but a user-level hook covers every project.
+
+## Dashboard
+
+Set `WEAVE_DASHBOARD_URL` (and `WEAVE_API_KEY`) where you run the agent, and each decision is reported to a local [Weave API](https://github.com/Tyox-all/Weave_Protocol/tree/main/api) dashboard (0.2.0+). Only the decision and the tool name are sent, never command or argument contents. Reporting never changes a decision and gives up after 250 ms.
+
+## Verified
+
+Built against the [hooks reference](https://geminicli.com/docs/hooks/reference) and [tools reference](https://geminicli.com/docs/reference/tools). Live-checked in Gemini CLI 0.66.0: a `read_file` of a denied path was blocked with the WARD reason, and an allowed read went through.
+
+## License
+
+Apache-2.0

package/dist/cli.d.ts

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+/**
+ * weave-gemini CLI
+ *
+ *   weave-gemini init [--matcher=REGEX] [--timeout=MS] [--fail-closed]   Install the WARD hook
+ *   weave-gemini disable                                                 Remove it
+ *   weave-gemini status                                                  Hook + active WARD.md
+ *   weave-gemini test <tool> [--input=JSON]                              Dry-run a tool call
+ *   weave-gemini hook before-tool [--fail-closed]                        Hook handler (run by Gemini CLI)
+ */
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;GAQG"}

package/dist/cli.js

@@ -0,0 +1,107 @@
+#!/usr/bin/env node
+/**
+ * weave-gemini CLI
+ *
+ *   weave-gemini init [--matcher=REGEX] [--timeout=MS] [--fail-closed]   Install the WARD hook
+ *   weave-gemini disable                                                 Remove it
+ *   weave-gemini status                                                  Hook + active WARD.md
+ *   weave-gemini test <tool> [--input=JSON]                              Dry-run a tool call
+ *   weave-gemini hook before-tool [--fail-closed]                        Hook handler (run by Gemini CLI)
+ */
+import { installHook, removeHook, isHookInstalled, readSettings, geminiSettingsPath, userWardPath } from './config.js';
+import { resolveWardForCwd, evaluateCall, runBeforeToolHook } from './hook.js';
+const tty = process.stderr.isTTY && !process.env.NO_COLOR;
+const c = {
+    reset: tty ? '\x1b[0m' : '', bold: tty ? '\x1b[1m' : '', red: tty ? '\x1b[31m' : '',
+    green: tty ? '\x1b[32m' : '', yellow: tty ? '\x1b[33m' : '', cyan: tty ? '\x1b[36m' : '', gray: tty ? '\x1b[90m' : '',
+};
+const say = (s = '') => console.error(s);
+const flag = (args, name) => args.includes(`--${name}`);
+const option = (args, name) => args.find((a) => a.startsWith(`--${name}=`))?.slice(name.length + 3);
+function help() {
+    say(`\n${c.cyan}${c.bold}🛡️  weave-gemini${c.reset} ${c.gray}WARD.md enforcement for Gemini CLI${c.reset}\n`);
+    say(`${c.bold}Commands:${c.reset}`);
+    say(`  ${c.cyan}init${c.reset} ${c.gray}[--matcher=REGEX] [--timeout=MS] [--fail-closed]${c.reset}  Install the BeforeTool hook in ~/.gemini/settings.json`);
+    say(`  ${c.cyan}disable${c.reset}                                              Remove the hook`);
+    say(`  ${c.cyan}status${c.reset}                                               Show the hook and the active WARD.md`);
+    say(`  ${c.cyan}test${c.reset} ${c.gray}<tool> [--input=JSON]${c.reset}                           Dry-run a tool call against WARD.md`);
+    say(`  ${c.cyan}hook before-tool${c.reset} ${c.gray}[--fail-closed]${c.reset}                    Hook handler (Gemini CLI runs this)\n`);
+    return 0;
+}
+function init(args) {
+    const timeout = option(args, 'timeout');
+    installHook({
+        matcher: option(args, 'matcher'),
+        timeoutMs: timeout ? Number(timeout) : undefined,
+        failClosed: flag(args, 'fail-closed'),
+    });
+    say(`${c.green}✓${c.reset} WARD hook installed in ${geminiSettingsPath()}`);
+    const ward = safeResolve(process.cwd());
+    if (!ward) {
+        say(`${c.yellow}!${c.reset} No WARD.md found here or at ${userWardPath()}; calls are allowed until you add one.`);
+    }
+    say(`${c.gray}Restart Gemini CLI for the hook to take effect.${c.reset}`);
+    return 0;
+}
+function disable() {
+    const { removed } = removeHook();
+    say(removed ? `${c.green}✓${c.reset} Removed the WARD hook from ${geminiSettingsPath()}` : 'No WARD hook was installed.');
+    return 0;
+}
+function safeResolve(cwd) {
+    try {
+        return resolveWardForCwd(cwd);
+    }
+    catch (err) {
+        say(`${c.red}✗${c.reset} ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+}
+function status() {
+    const installed = isHookInstalled(readSettings());
+    say(`Hook:     ${installed ? `${c.green}installed${c.reset}` : `${c.yellow}not installed${c.reset}`} (${geminiSettingsPath()})`);
+    const ward = safeResolve(process.cwd());
+    say(`WARD.md:  ${ward ? ward.source : `${c.yellow}none found${c.reset}`}`);
+    return installed && ward ? 0 : 1;
+}
+function test(args) {
+    const tool = args.find((a) => !a.startsWith('--'));
+    if (!tool) {
+        say('Usage: weave-gemini test <tool> [--input=JSON]');
+        return 2;
+    }
+    const ward = safeResolve(process.cwd());
+    if (!ward) {
+        say('No WARD.md found; nothing to test against.');
+        return 2;
+    }
+    const input = JSON.parse(option(args, 'input') ?? '{}');
+    const result = evaluateCall(ward.policy, tool, input, process.cwd());
+    const color = result.decision === 'allow' ? c.green : result.decision === 'deny' ? c.red : c.yellow;
+    say(`${color}${result.decision}${c.reset} ${tool}`);
+    for (const r of result.reasons)
+        say(`  ${c.gray}${r}${c.reset}`);
+    return result.decision === 'allow' ? 0 : 1;
+}
+async function main() {
+    const [cmd, ...rest] = process.argv.slice(2);
+    switch (cmd) {
+        case 'init': return init(rest);
+        case 'disable':
+        case 'uninstall': return disable();
+        case 'status': return status();
+        case 'test': return test(rest);
+        case 'hook':
+            if (rest[0] === 'before-tool' || !rest[0])
+                return runBeforeToolHook(flag(rest, 'fail-closed'));
+            // Other events: leave the call alone
+            process.stdout.write('{}');
+            return 0;
+        default: return help();
+    }
+}
+main().then((code) => process.exit(code), (err) => {
+    say(`weave-gemini: ${err instanceof Error ? err.message : String(err)}`);
+    process.exit(1);
+});
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACvH,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE/E,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC1D,MAAM,CAAC,GAAG;IACR,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;IACnF,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;CACtH,CAAC;AACF,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEzC,MAAM,IAAI,GAAG,CAAC,IAAc,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;AAC1E,MAAM,MAAM,GAAG,CAAC,IAAc,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAEtH,SAAS,IAAI;IACX,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,oBAAoB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,qCAAqC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAC/G,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACpC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,mDAAmD,CAAC,CAAC,KAAK,0DAA0D,CAAC,CAAC;IAC7J,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,KAAK,+DAA+D,CAAC,CAAC;IACjG,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,KAAK,qFAAqF,CAAC,CAAC;IACtH,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,wBAAwB,CAAC,CAAC,KAAK,gEAAgE,CAAC,CAAC;IACxI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,mBAAmB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,2DAA2D,CAAC,CAAC;IACzI,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,IAAI,CAAC,IAAc;IAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,WAAW,CAAC;QACV,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC;QAChC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAChD,UAAU,EAAE,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC;KACtC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,2BAA2B,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC5E,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,gCAAgC,YAAY,EAAE,wCAAwC,CAAC,CAAC;IACpH,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,kDAAkD,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,OAAO;IACd,MAAM,EAAE,OAAO,EAAE,GAAG,UAAU,EAAE,CAAC;IACjC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,+BAA+B,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC;IAC1H,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/E,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,MAAM;IACb,MAAM,SAAS,GAAG,eAAe,CAAC,YAAY,EAAE,CAAC,CAAC;IAClD,GAAG,CAAC,aAAa,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,gBAAgB,CAAC,CAAC,KAAK,EAAE,KAAK,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACjI,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,GAAG,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3E,OAAO,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,IAAI,CAAC,IAAc;IAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,gDAAgD,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAClD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACpG,GAAG,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;IACpD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO;QAAE,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACjE,OAAO,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7C,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,SAAS,CAAC;QACf,KAAK,WAAW,EAAE,OAAO,OAAO,EAAE,CAAC;QACnC,KAAK,QAAQ,EAAE,OAAO,MAAM,EAAE,CAAC;QAC/B,KAAK,MAAM,EAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,MAAM;YACT,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;YAC/F,qCAAqC;YACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,CAAC;QACX,SAAS,OAAO,IAAI,EAAE,CAAC;IACzB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE;IAChD,GAAG,CAAC,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Manage ~/.gemini/settings.json — install, remove, inspect the WARD hook.
+ *
+ * Safety rules:
+ *  - Back up settings.json before changing it, and write atomically
+ *  - Idempotent: init twice leaves one entry
+ *  - Our entry is found by its hook name; other hooks and keys are untouched
+ *
+ * Installed at user level. Gemini CLI fingerprints project-level hooks and
+ * warns when they change; a user-level hook applies to every project.
+ */
+import type { GeminiHookEntry } from './types.js';
+export declare const HOOK_NAME = "weave-ward";
+export declare function geminiConfigDir(): string;
+export declare function geminiSettingsPath(): string;
+/** User-global WARD.md, used when a project has none. */
+export declare function userWardPath(): string;
+export interface GeminiSettings {
+    hooks?: {
+        BeforeTool?: GeminiHookEntry[];
+        [event: string]: GeminiHookEntry[] | unknown;
+    };
+    [other: string]: unknown;
+}
+export declare function readSettings(path?: string): GeminiSettings;
+export declare function writeSettings(settings: GeminiSettings, path?: string): void;
+export interface InstallOptions {
+    /** Command that runs this CLI. Default: "weave-gemini" */
+    binary?: string;
+    /** Regex of tool names to gate. Default: every tool */
+    matcher?: string;
+    /** Hook timeout in milliseconds (Gemini CLI's unit). Default 5000 */
+    timeoutMs?: number;
+    /** Deny on malformed payloads and evaluator errors. Default: allow */
+    failClosed?: boolean;
+}
+export declare function isHookInstalled(settings?: GeminiSettings): boolean;
+export declare function installHook(opts?: InstallOptions): GeminiSettings;
+export declare function removeHook(): {
+    removed: number;
+    settings: GeminiSettings;
+};
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,eAAO,MAAM,SAAS,eAAe,CAAC;AAEtC,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,yDAAyD;AACzD,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE;QACN,UAAU,CAAC,EAAE,eAAe,EAAE,CAAC;QAC/B,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,EAAE,GAAG,OAAO,CAAC;KAC9C,CAAC;IACF,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAED,wBAAgB,YAAY,CAAC,IAAI,SAAuB,GAAG,cAAc,CASxE;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,SAAuB,GAAG,IAAI,CAMzF;AAED,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAID,wBAAgB,eAAe,CAAC,QAAQ,GAAE,cAA+B,GAAG,OAAO,CAElF;AAED,wBAAgB,WAAW,CAAC,IAAI,GAAE,cAAmB,GAAG,cAAc,CAiBrE;AAED,wBAAgB,UAAU,IAAI;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,cAAc,CAAA;CAAE,CAW1E"}

package/dist/config.js

@@ -0,0 +1,80 @@
+/**
+ * Manage ~/.gemini/settings.json — install, remove, inspect the WARD hook.
+ *
+ * Safety rules:
+ *  - Back up settings.json before changing it, and write atomically
+ *  - Idempotent: init twice leaves one entry
+ *  - Our entry is found by its hook name; other hooks and keys are untouched
+ *
+ * Installed at user level. Gemini CLI fingerprints project-level hooks and
+ * warns when they change; a user-level hook applies to every project.
+ */
+import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync, copyFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { homedir } from 'node:os';
+export const HOOK_NAME = 'weave-ward';
+export function geminiConfigDir() {
+    return join(homedir(), '.gemini');
+}
+export function geminiSettingsPath() {
+    return join(geminiConfigDir(), 'settings.json');
+}
+/** User-global WARD.md, used when a project has none. */
+export function userWardPath() {
+    return join(geminiConfigDir(), 'WARD.md');
+}
+export function readSettings(path = geminiSettingsPath()) {
+    if (!existsSync(path))
+        return {};
+    try {
+        return JSON.parse(readFileSync(path, 'utf8'));
+    }
+    catch (err) {
+        throw new Error(`Failed to parse ${path}; fix the JSON or move it aside and re-run. ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+export function writeSettings(settings, path = geminiSettingsPath()) {
+    mkdirSync(dirname(path), { recursive: true });
+    if (existsSync(path))
+        copyFileSync(path, `${path}.weave-backup`);
+    const tmp = `${path}.tmp`;
+    writeFileSync(tmp, JSON.stringify(settings, null, 2) + '\n', 'utf8');
+    renameSync(tmp, path);
+}
+const ours = (e) => e.hooks?.some((h) => h.name === HOOK_NAME);
+export function isHookInstalled(settings = readSettings()) {
+    return (settings.hooks?.BeforeTool ?? []).some(ours);
+}
+export function installHook(opts = {}) {
+    const settings = readSettings();
+    const command = `${opts.binary ?? 'weave-gemini'} hook before-tool${opts.failClosed ? ' --fail-closed' : ''}`;
+    const entry = {
+        matcher: opts.matcher ?? '.*',
+        hooks: [{
+                type: 'command',
+                name: HOOK_NAME,
+                command,
+                timeout: opts.timeoutMs ?? 5000,
+                description: 'Weave Protocol: enforce WARD.md on every tool call',
+            }],
+    };
+    const hooks = (settings.hooks ??= {});
+    hooks.BeforeTool = [...(hooks.BeforeTool ?? []).filter((e) => !ours(e)), entry];
+    writeSettings(settings);
+    return settings;
+}
+export function removeHook() {
+    const settings = readSettings();
+    const before = settings.hooks?.BeforeTool ?? [];
+    const after = before.filter((e) => !ours(e));
+    const removed = before.length - after.length;
+    if (removed > 0 && settings.hooks) {
+        if (after.length)
+            settings.hooks.BeforeTool = after;
+        else
+            delete settings.hooks.BeforeTool;
+        writeSettings(settings);
+    }
+    return { removed, settings };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAGlC,MAAM,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC;AAEtC,MAAM,UAAU,eAAe;IAC7B,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,eAAe,EAAE,EAAE,eAAe,CAAC,CAAC;AAClD,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,CAAC,eAAe,EAAE,EAAE,SAAS,CAAC,CAAC;AAC5C,CAAC;AAUD,MAAM,UAAU,YAAY,CAAC,IAAI,GAAG,kBAAkB,EAAE;IACtD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAmB,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,+CAA+C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAwB,EAAE,IAAI,GAAG,kBAAkB,EAAE;IACjF,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,YAAY,CAAC,IAAI,EAAE,GAAG,IAAI,eAAe,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC;IAC1B,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACrE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAaD,MAAM,IAAI,GAAG,CAAC,CAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;AAEhF,MAAM,UAAU,eAAe,CAAC,QAAQ,GAAmB,YAAY,EAAE;IACvE,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAI,GAAmB,EAAE;IACnD,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,oBAAoB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC9G,MAAM,KAAK,GAAoB;QAC7B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;QAC7B,KAAK,EAAE,CAAC;gBACN,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,SAAS;gBACf,OAAO;gBACP,OAAO,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;gBAC/B,WAAW,EAAE,oDAAoD;aAClE,CAAC;KACH,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IACtC,KAAK,CAAC,UAAU,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAChF,aAAa,CAAC,QAAQ,CAAC,CAAC;IACxB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC7C,IAAI,OAAO,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,MAAM;YAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC;;YAC/C,OAAO,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QACtC,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC"}

package/dist/hook.d.ts

@@ -0,0 +1,50 @@
+/**
+ * BeforeTool hook handler: reads Gemini CLI's payload from stdin, finds the
+ * active WARD.md, decides with Ward's shared evaluator, and prints the
+ * decision.
+ *
+ * WARD.md resolution (cwd = the payload's cwd):
+ *   1. $WEAVE_WARD_PATH
+ *   2. <cwd>/WARD.md
+ *   3. <cwd>/.gemini/WARD.md
+ *   4. <cwd>/.weave/WARD.md
+ *   5. ~/.gemini/WARD.md (user-global)
+ *
+ * Output: a deny prints { decision: "deny", reason }. Anything else prints
+ * {} so Gemini CLI's own confirmation flow still applies (an explicit
+ * "allow" is never sent). Gemini CLI has no "ask", so require_approval is a
+ * deny that says approval is needed.
+ *
+ * Failure modes:
+ *   - A WARD.md that exists but is invalid always denies: a typo must not
+ *     silently switch enforcement off.
+ *   - Malformed payloads and evaluator errors allow by default (with a note
+ *     on stderr); --fail-closed denies instead.
+ */
+import { type WardPolicy } from '@weave_protocol/ward';
+import { type GeminiHookOutput } from './types.js';
+export interface ResolvedWard {
+    policy: WardPolicy;
+    source: string;
+}
+export interface HookDecision {
+    decision: 'allow' | 'deny' | 'require_approval';
+    reasons: string[];
+}
+export declare function resolveWardForCwd(cwd: string): ResolvedWard | null;
+/**
+ * Shape Gemini CLI arguments for Ward: web_fetch's URLs live inside its
+ * free-text prompt, and a shell command runs in dir_path.
+ */
+export declare function normalizeInput(toolName: string, input: Record<string, unknown> | undefined, cwd: string): {
+    args: {
+        [x: string]: unknown;
+    };
+    commandCwd: string;
+};
+/** Decide a Gemini CLI tool call against a WARD policy. */
+export declare function evaluateCall(policy: WardPolicy, toolName: string, toolInput: Record<string, unknown> | undefined, cwd?: string): HookDecision;
+/** WARD decision → Gemini CLI output. */
+export declare function toHookOutput(result: HookDecision, source: string): GeminiHookOutput;
+export declare function runBeforeToolHook(failClosed: boolean): Promise<never>;
+//# sourceMappingURL=hook.d.ts.map

package/dist/hook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.d.ts","sourceRoot":"","sources":["../src/hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,EAAmD,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACxG,OAAO,EAAuC,KAAK,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGxF,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,kBAAkB,CAAC;IAChD,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAmBlE;AAID;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM;;;;;EAUvG;AAED,2DAA2D;AAC3D,wBAAgB,YAAY,CAC1B,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC9C,GAAG,GAAE,MAAsB,GAC1B,YAAY,CAId;AAED,yCAAyC;AACzC,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAWnF;AAeD,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAsC3E"}

package/dist/hook.js

@@ -0,0 +1,139 @@
+/**
+ * BeforeTool hook handler: reads Gemini CLI's payload from stdin, finds the
+ * active WARD.md, decides with Ward's shared evaluator, and prints the
+ * decision.
+ *
+ * WARD.md resolution (cwd = the payload's cwd):
+ *   1. $WEAVE_WARD_PATH
+ *   2. <cwd>/WARD.md
+ *   3. <cwd>/.gemini/WARD.md
+ *   4. <cwd>/.weave/WARD.md
+ *   5. ~/.gemini/WARD.md (user-global)
+ *
+ * Output: a deny prints { decision: "deny", reason }. Anything else prints
+ * {} so Gemini CLI's own confirmation flow still applies (an explicit
+ * "allow" is never sent). Gemini CLI has no "ask", so require_approval is a
+ * deny that says approval is needed.
+ *
+ * Failure modes:
+ *   - A WARD.md that exists but is invalid always denies: a typo must not
+ *     silently switch enforcement off.
+ *   - Malformed payloads and evaluator errors allow by default (with a note
+ *     on stderr); --fail-closed denies instead.
+ */
+import { readFileSync, existsSync } from 'node:fs';
+import { isAbsolute, join, resolve } from 'node:path';
+import { parseAndValidate, evaluateToolCall, reportEvent } from '@weave_protocol/ward';
+import { TOOL_MAPPINGS } from './types.js';
+import { userWardPath } from './config.js';
+export function resolveWardForCwd(cwd) {
+    const candidates = [
+        process.env.WEAVE_WARD_PATH,
+        cwd && join(cwd, 'WARD.md'),
+        cwd && join(cwd, '.gemini', 'WARD.md'),
+        cwd && join(cwd, '.weave', 'WARD.md'),
+        userWardPath(),
+    ].filter((p) => !!p);
+    for (const path of candidates) {
+        const full = resolve(path);
+        if (!existsSync(full))
+            continue;
+        const result = parseAndValidate(readFileSync(full, 'utf8'));
+        if (!result.valid || !result.policy) {
+            throw new Error(`Invalid WARD.md at ${full}: ${result.errors.map((e) => e.message).join('; ')}`);
+        }
+        return { policy: result.policy, source: full };
+    }
+    return null;
+}
+const URL_IN_TEXT = /[a-z][a-z0-9+.-]*:\/\/[^\s'"`<>()]+/gi;
+/**
+ * Shape Gemini CLI arguments for Ward: web_fetch's URLs live inside its
+ * free-text prompt, and a shell command runs in dir_path.
+ */
+export function normalizeInput(toolName, input, cwd) {
+    const args = { ...(input ?? {}) };
+    let commandCwd = cwd;
+    if (toolName === 'web_fetch' && typeof args.prompt === 'string') {
+        args.urls = (args.prompt.match(URL_IN_TEXT) ?? []).map((u) => u.replace(/[.,;:!?]+$/, ''));
+    }
+    if (toolName === 'run_shell_command' && typeof args.dir_path === 'string' && args.dir_path) {
+        commandCwd = isAbsolute(args.dir_path) ? args.dir_path : join(cwd, args.dir_path);
+    }
+    return { args, commandCwd };
+}
+/** Decide a Gemini CLI tool call against a WARD policy. */
+export function evaluateCall(policy, toolName, toolInput, cwd = process.cwd()) {
+    const { args, commandCwd } = normalizeInput(toolName, toolInput, cwd);
+    const { decision, reasons } = evaluateToolCall(policy, toolName, args, { mappings: TOOL_MAPPINGS, cwd: commandCwd });
+    return { decision, reasons };
+}
+/** WARD decision → Gemini CLI output. */
+export function toHookOutput(result, source) {
+    if (result.decision === 'deny') {
+        return { decision: 'deny', reason: `WARD: ${result.reasons.join(' | ')} (policy: ${source})` };
+    }
+    if (result.decision === 'require_approval') {
+        return {
+            decision: 'deny',
+            reason: `WARD requires approval before this call: ${result.reasons.join(' | ')} (policy: ${source}). Ask the user to approve it or update WARD.md.`,
+        };
+    }
+    return {};
+}
+async function readStdin() {
+    if (process.stdin.isTTY)
+        return '';
+    let data = '';
+    process.stdin.setEncoding('utf8');
+    for await (const chunk of process.stdin)
+        data += chunk;
+    return data;
+}
+function emit(output) {
+    process.stdout.write(JSON.stringify(output));
+    process.exit(0);
+}
+export async function runBeforeToolHook(failClosed) {
+    const raw = await readStdin();
+    if (!raw.trim())
+        emit({});
+    let payload;
+    try {
+        payload = JSON.parse(raw);
+    }
+    catch {
+        if (failClosed)
+            emit({ decision: 'deny', reason: 'WARD hook: malformed payload from Gemini CLI' });
+        process.stderr.write('weave-gemini: malformed hook payload, allowing\n');
+        emit({});
+    }
+    if (!payload.tool_name)
+        emit({});
+    const cwd = payload.cwd || process.env.GEMINI_PROJECT_DIR || process.cwd();
+    let resolved;
+    try {
+        resolved = resolveWardForCwd(cwd);
+    }
+    catch (err) {
+        // A policy exists but can't be used: deny rather than run unprotected.
+        emit({ decision: 'deny', reason: `WARD policy could not be loaded: ${err instanceof Error ? err.message : String(err)}. Fix WARD.md to continue.` });
+    }
+    if (!resolved)
+        emit({});
+    let result;
+    try {
+        result = evaluateCall(resolved.policy, payload.tool_name, payload.tool_input, cwd);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        if (failClosed)
+            emit({ decision: 'deny', reason: `WARD evaluation failed: ${msg}` });
+        process.stderr.write(`weave-gemini: WARD evaluation failed (${msg}), allowing\n`);
+        emit({});
+    }
+    // Dashboard reporting (only when WEAVE_DASHBOARD_URL is set; at most 250ms)
+    await reportEvent({ surface: 'gemini-cli', decision: result.decision, subject: payload.tool_name, reason: result.reasons[0] });
+    emit(toHookOutput(result, resolved.source));
+}
+//# sourceMappingURL=hook.js.map

package/dist/hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook.js","sourceRoot":"","sources":["../src/hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,WAAW,EAAmB,MAAM,sBAAsB,CAAC;AACxG,OAAO,EAAE,aAAa,EAA+C,MAAM,YAAY,CAAC;AACxF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAY3C,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,UAAU,GAAG;QACjB,OAAO,CAAC,GAAG,CAAC,eAAe;QAC3B,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC;QAC3B,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC;QACtC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC;QACrC,YAAY,EAAE;KACf,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,WAAW,GAAG,uCAAuC,CAAC;AAE5D;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,KAA0C,EAAE,GAAW;IACtG,MAAM,IAAI,GAAG,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;IAClC,IAAI,UAAU,GAAG,GAAG,CAAC;IACrB,IAAI,QAAQ,KAAK,WAAW,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChE,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,QAAQ,KAAK,mBAAmB,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3F,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,YAAY,CAC1B,MAAkB,EAClB,QAAgB,EAChB,SAA8C,EAC9C,GAAG,GAAW,OAAO,CAAC,GAAG,EAAE;IAE3B,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,cAAc,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACtE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;IACrH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,YAAY,CAAC,MAAoB,EAAE,MAAc;IAC/D,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,MAAM,GAAG,EAAE,CAAC;IACjG,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QAC3C,OAAO;YACL,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,4CAA4C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,MAAM,kDAAkD;SACpJ,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;QAAE,IAAI,IAAI,KAAK,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,IAAI,CAAC,MAAwB;IACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAAmB;IACzD,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAE1B,IAAI,OAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,UAAU;YAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,8CAA8C,EAAE,CAAC,CAAC;QACnG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACzE,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAEjC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAE3E,IAAI,QAA6B,CAAC;IAClC,IAAI,CAAC;QACH,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,EAAE,CAAC,CAAC;IACvJ,CAAC;IACD,IAAI,CAAC,QAAQ;QAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAExB,IAAI,MAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,UAAU;YAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,2BAA2B,GAAG,EAAE,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,GAAG,eAAe,CAAC,CAAC;QAClF,IAAI,CAAC,EAAE,CAAC,CAAC;IACX,CAAC;IAED,4EAA4E;IAC5E,MAAM,WAAW,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/H,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9C,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @weave_protocol/adapter-geminicli — WARD.md enforcement for Gemini CLI.
+ */
+export * from './types.js';
+export { HOOK_NAME, geminiConfigDir, geminiSettingsPath, userWardPath, readSettings, writeSettings, installHook, removeHook, isHookInstalled, } from './config.js';
+export type { GeminiSettings, InstallOptions } from './config.js';
+export { resolveWardForCwd, evaluateCall, normalizeInput, toHookOutput } from './hook.js';
+export type { ResolvedWard, HookDecision } from './hook.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,OAAO,EACL,SAAS,EACT,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,WAAW,EACX,UAAU,EACV,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC1F,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -0,0 +1,7 @@
+/**
+ * @weave_protocol/adapter-geminicli — WARD.md enforcement for Gemini CLI.
+ */
+export * from './types.js';
+export { HOOK_NAME, geminiConfigDir, geminiSettingsPath, userWardPath, readSettings, writeSettings, installHook, removeHook, isHookInstalled, } from './config.js';
+export { resolveWardForCwd, evaluateCall, normalizeInput, toHookOutput } from './hook.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,cAAc,YAAY,CAAC;AAC3B,OAAO,EACL,SAAS,EACT,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,YAAY,EACZ,aAAa,EACb,WAAW,EACX,UAAU,EACV,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Gemini CLI hook contract (https://geminicli.com/docs/hooks/reference):
+ *
+ *   stdin  { session_id, transcript_path, cwd, hook_event_name, timestamp,
+ *            tool_name, tool_input, mcp_context? }
+ *   stdout { decision: "allow" | "deny", reason }   (JSON only)
+ *
+ * There is no "ask" decision, so a WARD require_approval is a deny whose
+ * reason says approval is needed. MCP tools arrive as mcp_<server>_<tool>.
+ */
+import type { ToolMapping } from '@weave_protocol/ward';
+export interface GeminiHookInput {
+    session_id?: string;
+    transcript_path?: string;
+    cwd?: string;
+    hook_event_name?: string;
+    timestamp?: string;
+    tool_name?: string;
+    tool_input?: Record<string, unknown>;
+    mcp_context?: Record<string, unknown>;
+}
+export interface GeminiHookOutput {
+    decision?: 'allow' | 'deny';
+    reason?: string;
+}
+/**
+ * Gemini CLI's built-in tools (https://geminicli.com/docs/reference/tools).
+ * Unknown tools, including MCP tools, use their own name as the capability;
+ * Ward still checks every path- and URL-named argument they carry.
+ */
+export declare const TOOL_MAPPINGS: Record<string, ToolMapping>;
+/** One BeforeTool entry in settings.json. */
+export interface GeminiHookEntry {
+    matcher?: string;
+    sequential?: boolean;
+    hooks: Array<{
+        type: 'command';
+        command: string;
+        name?: string;
+        timeout?: number;
+        description?: string;
+    }>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAExD,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAKD;;;;GAIG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CA8BrD,CAAC;AAEF,6CAA6C;AAC7C,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,KAAK,EAAE,KAAK,CAAC;QACX,IAAI,EAAE,SAAS,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC,CAAC;CACJ"}

package/dist/types.js

@@ -0,0 +1,49 @@
+/**
+ * Gemini CLI hook contract (https://geminicli.com/docs/hooks/reference):
+ *
+ *   stdin  { session_id, transcript_path, cwd, hook_event_name, timestamp,
+ *            tool_name, tool_input, mcp_context? }
+ *   stdout { decision: "allow" | "deny", reason }   (JSON only)
+ *
+ * There is no "ask" decision, so a WARD require_approval is a deny whose
+ * reason says approval is needed. MCP tools arrive as mcp_<server>_<tool>.
+ */
+/** Shared by the planning and interaction tools, so a policy can allow them in one line. */
+const PLANNING = { capability: 'task_planning' };
+/**
+ * Gemini CLI's built-in tools (https://geminicli.com/docs/reference/tools).
+ * Unknown tools, including MCP tools, use their own name as the capability;
+ * Ward still checks every path- and URL-named argument they carry.
+ */
+export const TOOL_MAPPINGS = {
+    // dir_path is where the command runs: checked as a read
+    run_shell_command: { capability: 'shell_exec', commandField: 'command', pathField: 'dir_path', fsOp: 'read' },
+    read_file: { capability: 'file_read', pathField: 'file_path', fsOp: 'read' },
+    read_many_files: { capability: 'file_read', pathField: 'include', fsOp: 'read' },
+    write_file: { capability: 'file_write', pathField: 'file_path', fsOp: 'write' },
+    replace: { capability: 'file_write', pathField: 'file_path', fsOp: 'write' },
+    list_directory: { capability: 'file_list', pathField: 'dir_path', fsOp: 'list' },
+    glob: { capability: 'file_list', pathField: 'dir_path', fsOp: 'list' },
+    grep_search: { capability: 'file_read', pathField: 'dir_path', fsOp: 'read' },
+    search_file_content: { capability: 'file_read', pathField: 'dir_path', fsOp: 'read' },
+    // web_fetch takes a free-text prompt; the hook pulls its URLs into "urls"
+    web_fetch: { capability: 'http_request', urlField: 'urls' },
+    google_web_search: { capability: 'web_search' },
+    save_memory: { capability: 'memory_write' },
+    // Not in the tools reference, but offered by 0.66.0
+    invoke_agent: { capability: 'subagent' },
+    activate_skill: { capability: 'skill' },
+    get_internal_docs: { capability: 'docs_read' },
+    ask_user: PLANNING,
+    write_todos: PLANNING,
+    enter_plan_mode: PLANNING,
+    exit_plan_mode: PLANNING,
+    update_topic: PLANNING,
+    tracker_create_task: PLANNING,
+    tracker_update_task: PLANNING,
+    tracker_get_task: PLANNING,
+    tracker_list_tasks: PLANNING,
+    tracker_add_dependency: PLANNING,
+    tracker_visualize: PLANNING,
+};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAoBH,4FAA4F;AAC5F,MAAM,QAAQ,GAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;AAE9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAgC;IACxD,wDAAwD;IACxD,iBAAiB,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IAC7G,SAAS,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE;IAC5E,eAAe,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE;IAChF,UAAU,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;IAC/E,OAAO,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5E,cAAc,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IAChF,IAAI,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IACtE,WAAW,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IAC7E,mBAAmB,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE;IACrF,0EAA0E;IAC1E,SAAS,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE;IAC3D,iBAAiB,EAAE,EAAE,UAAU,EAAE,YAAY,EAAE;IAC/C,WAAW,EAAE,EAAE,UAAU,EAAE,cAAc,EAAE;IAC3C,oDAAoD;IACpD,YAAY,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE;IACxC,cAAc,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE;IACvC,iBAAiB,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE;IAC9C,QAAQ,EAAE,QAAQ;IAClB,WAAW,EAAE,QAAQ;IACrB,eAAe,EAAE,QAAQ;IACzB,cAAc,EAAE,QAAQ;IACxB,YAAY,EAAE,QAAQ;IACtB,mBAAmB,EAAE,QAAQ;IAC7B,mBAAmB,EAAE,QAAQ;IAC7B,gBAAgB,EAAE,QAAQ;IAC1B,kBAAkB,EAAE,QAAQ;IAC5B,sBAAsB,EAAE,QAAQ;IAChC,iBAAiB,EAAE,QAAQ;CAC5B,CAAC"}

package/package.json

@@ -1,6 +1,55 @@
 {
   "name": "@weave_protocol/adapter-geminicli",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.0",
+  "description": "Weave Protocol adapter for Gemini CLI - enforces WARD.md policies via Gemini CLI's BeforeTool hook",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "weave-gemini": "dist/cli.js"
+  },
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "test": "npm run build && node --test test/*.test.mjs",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "weave-protocol",
+    "ward",
+    "gemini-cli",
+    "gemini",
+    "google",
+    "agent-security",
+    "ai-security",
+    "hooks",
+    "harness-adapter",
+    "policy-enforcement",
+    "ward-md"
+  ],
+  "author": "Trent Yoxall",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Tyox-all/Weave_Protocol.git",
+    "directory": "adapter-geminicli"
+  },
+  "homepage": "https://github.com/Tyox-all/Weave_Protocol/tree/main/adapter-geminicli#readme",
+  "bugs": {
+    "url": "https://github.com/Tyox-all/Weave_Protocol/issues"
+  },
+  "dependencies": {
+    "@weave_protocol/ward": "^0.3.1"
+  },
+  "devDependencies": {
+    "@types/node": "^26.6.6",
+    "typescript": "^7.0.2"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "files": [
+    "dist/",
+    "README.md"
+  ]
+}