PR #25037: refactor(plan) Clean default plan toml

• Repository: google-gemini/gemini-cli
• Author: ruomengz
• State: closed | merged: True
• Link: https://github.com/google-gemini/gemini-cli/pull/25037

Description (problem / solution / changelog)

Summary

This PR simplifies the plan.toml policy file by consolidating the regex patterns for plan file access and removing redundant "deny" rules for non-interactive mode.

Details

• Consolidated Plan File Regex: Merged two separate rules for write_file and replace in Plan Mode into a single rule. The updated argsPattern uses a non-capturing group (?:[\\w-]+[\\\\/]+[\\w-]+|[\\w-]+) to handle both path formats (with and without session IDs) across platforms.
• Removed Redundant Rules: Eliminated rules that explicitly denied tools in non-interactive mode (interactive = false). These cases are already covered by higher-priority rules or the default catch-all rule (priority 40) in Plan Mode, making the explicit "deny" rules unnecessary and the configuration cleaner.

Related Issues

#25039

How to Validate

1. Run core policy tests: npm test -w @google/gemini-cli-core -- src/policy/toml-loader.test.ts src/policy/config.test.ts
2. Verify that plan file access still works as expected in Plan Mode (validated via existing tests).
3. Ensure linting and type checking pass: npm run lint && npm run typecheck.

Pre-Merge Checklist

• Updated relevant documentation and README (if needed)
• Added/updated tests (if needed)
• Noted breaking changes (if any)
• Validated on required platforms/methods:
  • MacOS
    • npm run
    • npx
    • Docker
    • Podman
    • Seatbelt
  • Windows
    • npm run
    • npx
    • Docker
  • Linux
    • npm run
    • npx
    • Docker

Changed files

• packages/core/src/policy/policies/plan.toml (modified, +3/-16)