feat: Disable safety filters by default and add --safety flag

The default safety settings of the Gemini API can be restrictive for certain queries, occasionally blocking responses that are not harmful.

This commit disables content safety filters by default to provide a less restrictive user experience out-of-the-box. This is achieved by setting the `threshold` to `BLOCK_NONE` for harassment, hate speech, sexually explicit, and dangerous content categories.

A new `--safety` command-line flag is introduced to allow users to re-enable the API's default safety mechanisms if they prefer. When the `--safety` flag is used, the custom safety settings are omitted from the request, and the API's standard filtering is applied.

Author: Zibri

Changelog.md

@@ -1,3 +1,11 @@
+### **Version 2.0.9**
+
+This is a user-safety and content filtering release that gives users explicit control over the API's safety settings.
+
+*   **Features:**
+    *   **Default Safety-Off:** The client now automatically disables the API's safety filters by default. It sends `BLOCK_NONE` thresholds for `HARM_CATEGORY_HARASSMENT`, `HARM_CATEGORY_HATE_SPEECH`, `HARM_CATEGORY_SEXUALLY_EXPLICIT`, and `HARM_CATEGORY_DANGEROUS_CONTENT`. This prevents the API from preemptively blocking responses, which is often desirable in a direct command-line interface.
+    *   **Opt-In Safety Flag:** A new `--safety` command-line flag has been introduced. When this flag is used, the client does *not* send the custom safety settings, thereby re-enabling the Gemini API's default content filtering. This allows users to opt back into the default safety measures if they prefer.
+
 ### **Version 2.0.8**
 
 This is a major feature release that introduces the ability to use YouTube videos as direct context for analysis.
@@ -289,4 +297,4 @@ This release enhances security and refactors the credential input process for be
     *   **Secure Origin Input:** The prompt for the API `Origin` now masks user input with asterisks, similar to the API key prompt. This prevents credentials from being accidentally exposed on-screen during the initial setup.
 *   **Refactoring:**
     *   **Modularized Secure Input:** A new `get_masked_input` helper function was created to handle all terminal-masked input. This abstracts the platform-specific (Windows/Unix) logic for disabling terminal echo.
-    *   **Simplified Credential Logic:** The `get_api_key_securely` function was refactored to use the new `get_masked_input` helper, which reduces code duplication and makes the credential-gathering process cleaner and more secure.
+    *   **Simplified Credential Logic:** The `get_api_key_securely` function was refactored to use the new `get_masked_input` helper, which reduces code duplication and makes the credential-gathering process cleaner and more secure.

gemini-cli.c

@@ -105,6 +105,7 @@ typedef struct AppState {
     char* save_session_path;
     char* final_code;
     char *host;
+    bool safety;
 } AppState;
 
 typedef struct {
@@ -2643,7 +2644,7 @@ typedef enum {
     OPT_MODEL, OPT_HOST, OPT_SYSTEM, OPT_CONFIG,
     OPT_TEMP, OPT_PROXY, OPT_SEED, OPT_MAX_TOKENS,
     OPT_TOPK, OPT_TOPP, OPT_BUDGET,
-    OPT_EXECUTE, OPT_QUIET, OPT_NO_GROUNDING, OPT_FREE, OPT_NO_URL_CONTEXT,
+    OPT_EXECUTE, OPT_QUIET, OPT_NO_GROUNDING, OPT_FREE, OPT_NO_URL_CONTEXT, OPT_SAFETY,
     OPT_LOC, OPT_MAP,
     OPT_LIST_KEYS, OPT_ADD_KEY, OPT_REMOVE_KEY, OPT_CHECK_KEYS,
     OPT_LIST_MODELS, OPT_LIST_SESSIONS, OPT_SAVE_SESSION, OPT_LOAD_SESSION,
@@ -2670,6 +2671,7 @@ static OptionType classify_option(const char *arg) {
     if (!STRCASECMP(arg, "-ng")         || !STRCASECMP(arg, "--no-grounding"))   return OPT_NO_GROUNDING;
     if (!STRCASECMP(arg, "-f")          || !STRCASECMP(arg, "--free"))           return OPT_FREE;
     if (!STRCASECMP(arg, "-nu")         || !STRCASECMP(arg, "--no-url-context")) return OPT_NO_URL_CONTEXT;
+    if (!STRCASECMP(arg, "--safety"))                                            return OPT_SAFETY;
     if (!STRCASECMP(arg, "--loc"))                                               return OPT_LOC;
     if (!STRCASECMP(arg, "--map"))                                               return OPT_MAP;
     if (!STRCASECMP(arg, "--list-keys"))                                         return OPT_LIST_KEYS;
@@ -2804,6 +2806,10 @@ int parse_common_options(int argc, char *argv[], AppState *state) {
                 state->loc_tile |= 1;
                 break;
 
+            case OPT_SAFETY:
+                state->safety |= 1;
+                break;
+
             case OPT_MAP:
                 state->loc_tile |= 2;
                 break;
@@ -3047,6 +3053,9 @@ void initialize_default_state(AppState* state) {
     state->final_code = NULL;
 
     state->loc_tile = 0;
+
+    state->safety = 0;
+
     state->loc_gathered = false;
 
     state->save_session_path = NULL;
@@ -3627,6 +3636,31 @@ cJSON* build_request_json(AppState* state) {
         cJSON_AddItemToObject(root, "tools", tools_array);
     }
 
+    // --- Add Safety Settings (Hardcoded to BLOCK_NONE) ---
+    if (!state->safety) {
+        cJSON* safety_settings_array = cJSON_CreateArray();
+        if (safety_settings_array) {
+            // CORRECTED: Use only the four universally supported categories.
+            const char* categories[] = {
+                "HARM_CATEGORY_HARASSMENT",
+                "HARM_CATEGORY_HATE_SPEECH",
+                "HARM_CATEGORY_SEXUALLY_EXPLICIT",
+                "HARM_CATEGORY_DANGEROUS_CONTENT",
+                "HARM_CATEGORY_CIVIC_INTEGRITY"
+            };
+            int num_categories = sizeof(categories) / sizeof(categories[0]);
+
+            for (int i = 0; i < num_categories; i++) {
+                cJSON* setting_item = cJSON_CreateObject();
+                if (setting_item) {
+                    cJSON_AddStringToObject(setting_item, "category", categories[i]);
+                    cJSON_AddStringToObject(setting_item, "threshold", "BLOCK_NONE");
+                    cJSON_AddItemToArray(safety_settings_array, setting_item);
+                }
+            }
+            cJSON_AddItemToObject(root, "safetySettings", safety_settings_array);
+        }
+    }
     // --- 4. Add Generation Configuration ---
     cJSON* gen_config = cJSON_CreateObject();
     cJSON_AddNumberToObject(gen_config, "temperature", state->temperature);