@google/gemini-cli 0.35.0-preview.2 → 0.36.0-nightly.20260321.fc03891a1

package/bundle/{dist-AWPSKKKO.js → dist-RXTU4IDW.js}

@@ -234,6 +234,7 @@ import {
   ReadManyFilesTool,
   RecordingContentGenerator,
   ReleaseChannel,
+  RequiredMcpServerConfigSchema,
   ResourceRegistry,
   RetryableQuotaError,
   RewindEvent,
@@ -244,8 +245,11 @@ import {
   SERVICE_NAME,
   SESSION_FILE_PREFIX,
   SHELL_TOOL_NAMES,
+  SUBAGENT_CANCELLED_ERROR_MESSAGE,
+  SUBAGENT_REJECTED_ERROR_PREFIX,
   SYNTHETIC_THOUGHT_SIGNATURE,
   SYSTEM_FILE_EXCLUDES,
+  SandboxedFileSystemService,
   Scheduler,
   SemanticAttributes,
   SessionEndReason,
@@ -261,6 +265,7 @@ import {
   StartupProfiler,
   StreamEventType,
   StreamJsonFormatter,
+  SubagentActivityErrorType,
   TASK_TYPE_LABELS,
   TOOL_OUTPUTS_DIR,
   TRUSTED_MCP_SERVER_PRIORITY,
@@ -299,7 +304,9 @@ import {
   WebFetchFallbackAttemptEvent,
   WebFetchTool,
   WebSearchTool,
+  WindowsSandboxManager,
   WorkspaceContext,
+  WorktreeService,
   WriteFileTool,
   WriteTodosTool,
   _clearCache,
@@ -309,6 +316,7 @@ import {
   appendToLastTextPart,
   applyAdminAllowlist,
   applyReplacement,
+  applyRequiredServers,
   assumeExhaustive,
   authEvents,
   buildG1Url,
@@ -319,6 +327,7 @@ import {
   canUseRipgrep,
   checkExhaustive,
   classifyGoogleError,
+  cleanupWorktree,
   clearApiKey,
   clearCachedCredentialFile,
   clearEmittedPolicyWarnings,
@@ -345,6 +354,8 @@ import {
   createTransport,
   createUnauthorizedToolError,
   createWorkingStdio,
+  createWorktree,
+  createWorktreeService,
   decodeTagName,
   detectBOM,
   detectEncodingFromBuffer,
@@ -446,6 +457,7 @@ import {
   getPolicyDirectories,
   getPolicyTier,
   getPreviousSession,
+  getProjectRootForWorktree,
   getPromptIdWithFallback,
   getPty,
   getRealPath,
@@ -462,11 +474,13 @@ import {
   getToolSuggestion,
   getTruncatedCheckpointNames,
   getVersion,
+  getWorktreePath,
   handleFallback,
   hasNetworkTransport,
   hasRedirection,
   hasValidEditorCommand,
   hasValidEditorCommandAsync,
+  hasWorktreeChanges,
   ideContextStore,
   initializeActivityMonitor,
   initializeMemoryMonitor,
@@ -480,17 +494,21 @@ import {
   isBinaryFile,
   isCloudShell,
   isCompletedAskUserTool,
+  isDumbTerminal,
   isEditToolParams,
   isEditorAvailable,
   isEditorAvailableAsync,
   isEmpty,
   isEnabled,
+  isGeminiWorktree,
   isGitRepository,
+  isGnuScreen,
   isGuiEditor,
   isHeadlessMode,
   isInvalidArgumentError,
   isJetBrainsTerminal,
   isLoopbackHost,
+  isLowColorTmux,
   isNightly,
   isOverageEligibleModel,
   isPerformanceMonitoringActive,
@@ -504,6 +522,7 @@ import {
   isSubagentProgress,
   isTelemetrySdkInitialized,
   isTerminalEditor,
+  isTmux,
   isToolCallResponseInfo,
   isUserActive,
   isValidNonThoughtTextPart,
@@ -665,8 +684,7 @@ import {
   wrapInAccountChooser,
   writeToStderr,
   writeToStdout
-} from "./chunk-6AQAEYFC.js";
-import "./chunk-37ZTTFQF.js";
+} from "./chunk-MIAZ3PM6.js";
 import {
   ACTIVATE_SKILL_TOOL_NAME,
   ALL_BUILTIN_TOOL_NAMES,
@@ -782,6 +800,7 @@ import {
   PREVIEW_GEMINI_MODEL,
   PREVIEW_GEMINI_MODEL_AUTO,
   PRIORITY_SUBAGENT_TOOL,
+  PRIORITY_YOLO_ALLOW_ALL,
   PolicyDecision,
   QuestionType,
   READ_FILE_DISPLAY_NAME,
@@ -863,9 +882,11 @@ import {
   isNodeError,
   isPreviewModel,
   isProModel,
+  isRecord,
   isSubpath,
   isTool,
   isValidToolName,
+  jsonToMarkdown,
   loadJitSubdirectoryMemory,
   loadServerHierarchicalMemory,
   makeRelative,
@@ -877,6 +898,7 @@ import {
   resolveClassifierModel,
   resolveModel,
   resolveToRealPath,
+  safeJsonToMarkdown,
   setGeminiMdFilename,
   shortenPath,
   supportsModernFeatures,
@@ -885,7 +907,7 @@ import {
   tmpdir,
   toFriendlyError,
   unescapePath
-} from "./chunk-C2LINL7G.js";
+} from "./chunk-W5ORWYUB.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-RJTRUG2J.js";
 import {
@@ -1228,6 +1250,7 @@ export {
   PREVIEW_GEMINI_MODEL,
   PREVIEW_GEMINI_MODEL_AUTO,
   PRIORITY_SUBAGENT_TOOL,
+  PRIORITY_YOLO_ALLOW_ALL,
   PYTHON_EXCLUDES,
   PerformanceMetricType,
   PlanErrorMessages,
@@ -1256,6 +1279,7 @@ export {
   ReadManyFilesTool,
   RecordingContentGenerator,
   ReleaseChannel,
+  RequiredMcpServerConfigSchema,
   ResourceRegistry,
   RetryableQuotaError,
   RewindEvent,
@@ -1272,8 +1296,11 @@ export {
   SHELL_TOOL_NAME,
   SHELL_TOOL_NAMES,
   SKILL_PARAM_NAME,
+  SUBAGENT_CANCELLED_ERROR_MESSAGE,
+  SUBAGENT_REJECTED_ERROR_PREFIX,
   SYNTHETIC_THOUGHT_SIGNATURE,
   SYSTEM_FILE_EXCLUDES,
+  SandboxedFileSystemService,
   Scheduler,
   SchemaValidator,
   SemanticAttributes,
@@ -1292,6 +1319,7 @@ export {
   Storage,
   StreamEventType,
   StreamJsonFormatter,
+  SubagentActivityErrorType,
   TASK_TYPE_LABELS,
   TODOS_ITEM_PARAM_DESCRIPTION,
   TODOS_ITEM_PARAM_STATUS,
@@ -1353,7 +1381,9 @@ export {
   WebFetchFallbackAttemptEvent,
   WebFetchTool,
   WebSearchTool,
+  WindowsSandboxManager,
   WorkspaceContext,
+  WorktreeService,
   WriteFileTool,
   WriteTodosTool,
   _clearCache,
@@ -1363,6 +1393,7 @@ export {
   appendToLastTextPart,
   applyAdminAllowlist,
   applyReplacement,
+  applyRequiredServers,
   assumeExhaustive,
   authEvents,
   buildG1Url,
@@ -1374,6 +1405,7 @@ export {
   categorizeAndConcatenate,
   checkExhaustive,
   classifyGoogleError,
+  cleanupWorktree,
   clearApiKey,
   clearCachedCredentialFile,
   clearEmittedPolicyWarnings,
@@ -1402,6 +1434,8 @@ export {
   createTransport,
   createUnauthorizedToolError,
   createWorkingStdio,
+  createWorktree,
+  createWorktreeService,
   debugLogger,
   decodeTagName,
   deduplicatePathsByFileIdentity,
@@ -1519,6 +1553,7 @@ export {
   getPolicyTier,
   getPreviousSession,
   getProjectHash,
+  getProjectRootForWorktree,
   getPromptIdWithFallback,
   getPty,
   getRealPath,
@@ -1536,12 +1571,14 @@ export {
   getToolSuggestion,
   getTruncatedCheckpointNames,
   getVersion,
+  getWorktreePath,
   handleFallback,
   hasCycleInSchema,
   hasNetworkTransport,
   hasRedirection,
   hasValidEditorCommand,
   hasValidEditorCommandAsync,
+  hasWorktreeChanges,
   homedir,
   ideContextStore,
   initializeActivityMonitor,
@@ -1563,6 +1600,7 @@ export {
   isCloudShell,
   isCompletedAskUserTool,
   isCustomModel,
+  isDumbTerminal,
   isEditToolParams,
   isEditorAvailable,
   isEditorAvailableAsync,
@@ -1571,12 +1609,15 @@ export {
   isFatalToolError,
   isGemini2Model,
   isGemini3Model,
+  isGeminiWorktree,
   isGitRepository,
+  isGnuScreen,
   isGuiEditor,
   isHeadlessMode,
   isInvalidArgumentError,
   isJetBrainsTerminal,
   isLoopbackHost,
+  isLowColorTmux,
   isMcpToolAnnotation,
   isMcpToolName,
   isNightly,
@@ -1588,6 +1629,7 @@ export {
   isPrivateIp,
   isPrivateIpAsync,
   isProModel,
+  isRecord,
   isRetryableError,
   isSchemaDepthError,
   isStable,
@@ -1596,6 +1638,7 @@ export {
   isSubpath,
   isTelemetrySdkInitialized,
   isTerminalEditor,
+  isTmux,
   isTool,
   isToolCallResponseInfo,
   isUserActive,
@@ -1605,6 +1648,7 @@ export {
   isWindows10,
   isWithinRoot,
   isWriteFileToolParams,
+  jsonToMarkdown,
   listExtensions,
   listMemoryFiles,
   loadAgentsFromDirectory,
@@ -1724,6 +1768,7 @@ export {
   resolveToRealPath,
   retryWithBackoff,
   runInDevTraceSpan,
+  safeJsonToMarkdown,
   safeLiteralReplace,
   safeTemplateReplace,
   sanitizeAdminSettings,

package/bundle/{dist-WOQEPX5R.js → dist-ULRCP5C6.js}

@@ -234,6 +234,7 @@ import {
   ReadManyFilesTool,
   RecordingContentGenerator,
   ReleaseChannel,
+  RequiredMcpServerConfigSchema,
   ResourceRegistry,
   RetryableQuotaError,
   RewindEvent,
@@ -244,8 +245,11 @@ import {
   SERVICE_NAME,
   SESSION_FILE_PREFIX,
   SHELL_TOOL_NAMES,
+  SUBAGENT_CANCELLED_ERROR_MESSAGE,
+  SUBAGENT_REJECTED_ERROR_PREFIX,
   SYNTHETIC_THOUGHT_SIGNATURE,
   SYSTEM_FILE_EXCLUDES,
+  SandboxedFileSystemService,
   Scheduler,
   SemanticAttributes,
   SessionEndReason,
@@ -261,6 +265,7 @@ import {
   StartupProfiler,
   StreamEventType,
   StreamJsonFormatter,
+  SubagentActivityErrorType,
   TASK_TYPE_LABELS,
   TOOL_OUTPUTS_DIR,
   TRUSTED_MCP_SERVER_PRIORITY,
@@ -299,7 +304,9 @@ import {
   WebFetchFallbackAttemptEvent,
   WebFetchTool,
   WebSearchTool,
+  WindowsSandboxManager,
   WorkspaceContext,
+  WorktreeService,
   WriteFileTool,
   WriteTodosTool,
   _clearCache,
@@ -309,6 +316,7 @@ import {
   appendToLastTextPart,
   applyAdminAllowlist,
   applyReplacement,
+  applyRequiredServers,
   assumeExhaustive,
   authEvents,
   buildG1Url,
@@ -319,6 +327,7 @@ import {
   canUseRipgrep,
   checkExhaustive,
   classifyGoogleError,
+  cleanupWorktree,
   clearApiKey,
   clearCachedCredentialFile,
   clearEmittedPolicyWarnings,
@@ -345,6 +354,8 @@ import {
   createTransport,
   createUnauthorizedToolError,
   createWorkingStdio,
+  createWorktree,
+  createWorktreeService,
   decodeTagName,
   detectBOM,
   detectEncodingFromBuffer,
@@ -446,6 +457,7 @@ import {
   getPolicyDirectories,
   getPolicyTier,
   getPreviousSession,
+  getProjectRootForWorktree,
   getPromptIdWithFallback,
   getPty,
   getRealPath,
@@ -462,11 +474,13 @@ import {
   getToolSuggestion,
   getTruncatedCheckpointNames,
   getVersion,
+  getWorktreePath,
   handleFallback,
   hasNetworkTransport,
   hasRedirection,
   hasValidEditorCommand,
   hasValidEditorCommandAsync,
+  hasWorktreeChanges,
   ideContextStore,
   initializeActivityMonitor,
   initializeMemoryMonitor,
@@ -480,17 +494,21 @@ import {
   isBinaryFile,
   isCloudShell,
   isCompletedAskUserTool,
+  isDumbTerminal,
   isEditToolParams,
   isEditorAvailable,
   isEditorAvailableAsync,
   isEmpty,
   isEnabled,
+  isGeminiWorktree,
   isGitRepository,
+  isGnuScreen,
   isGuiEditor,
   isHeadlessMode,
   isInvalidArgumentError,
   isJetBrainsTerminal,
   isLoopbackHost,
+  isLowColorTmux,
   isNightly,
   isOverageEligibleModel,
   isPerformanceMonitoringActive,
@@ -504,6 +522,7 @@ import {
   isSubagentProgress,
   isTelemetrySdkInitialized,
   isTerminalEditor,
+  isTmux,
   isToolCallResponseInfo,
   isUserActive,
   isValidNonThoughtTextPart,
@@ -665,8 +684,7 @@ import {
   wrapInAccountChooser,
   writeToStderr,
   writeToStdout
-} from "./chunk-5OVDZKPV.js";
-import "./chunk-37ZTTFQF.js";
+} from "./chunk-HFDLZAI6.js";
 import {
   ACTIVATE_SKILL_TOOL_NAME,
   ALL_BUILTIN_TOOL_NAMES,
@@ -782,6 +800,7 @@ import {
   PREVIEW_GEMINI_MODEL,
   PREVIEW_GEMINI_MODEL_AUTO,
   PRIORITY_SUBAGENT_TOOL,
+  PRIORITY_YOLO_ALLOW_ALL,
   PolicyDecision,
   QuestionType,
   READ_FILE_DISPLAY_NAME,
@@ -863,9 +882,11 @@ import {
   isNodeError,
   isPreviewModel,
   isProModel,
+  isRecord,
   isSubpath,
   isTool,
   isValidToolName,
+  jsonToMarkdown,
   loadJitSubdirectoryMemory,
   loadServerHierarchicalMemory,
   makeRelative,
@@ -877,6 +898,7 @@ import {
   resolveClassifierModel,
   resolveModel,
   resolveToRealPath,
+  safeJsonToMarkdown,
   setGeminiMdFilename,
   shortenPath,
   supportsModernFeatures,
@@ -885,7 +907,7 @@ import {
   tmpdir,
   toFriendlyError,
   unescapePath
-} from "./chunk-C2LINL7G.js";
+} from "./chunk-W5ORWYUB.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-RJTRUG2J.js";
 import {
@@ -1228,6 +1250,7 @@ export {
   PREVIEW_GEMINI_MODEL,
   PREVIEW_GEMINI_MODEL_AUTO,
   PRIORITY_SUBAGENT_TOOL,
+  PRIORITY_YOLO_ALLOW_ALL,
   PYTHON_EXCLUDES,
   PerformanceMetricType,
   PlanErrorMessages,
@@ -1256,6 +1279,7 @@ export {
   ReadManyFilesTool,
   RecordingContentGenerator,
   ReleaseChannel,
+  RequiredMcpServerConfigSchema,
   ResourceRegistry,
   RetryableQuotaError,
   RewindEvent,
@@ -1272,8 +1296,11 @@ export {
   SHELL_TOOL_NAME,
   SHELL_TOOL_NAMES,
   SKILL_PARAM_NAME,
+  SUBAGENT_CANCELLED_ERROR_MESSAGE,
+  SUBAGENT_REJECTED_ERROR_PREFIX,
   SYNTHETIC_THOUGHT_SIGNATURE,
   SYSTEM_FILE_EXCLUDES,
+  SandboxedFileSystemService,
   Scheduler,
   SchemaValidator,
   SemanticAttributes,
@@ -1292,6 +1319,7 @@ export {
   Storage,
   StreamEventType,
   StreamJsonFormatter,
+  SubagentActivityErrorType,
   TASK_TYPE_LABELS,
   TODOS_ITEM_PARAM_DESCRIPTION,
   TODOS_ITEM_PARAM_STATUS,
@@ -1353,7 +1381,9 @@ export {
   WebFetchFallbackAttemptEvent,
   WebFetchTool,
   WebSearchTool,
+  WindowsSandboxManager,
   WorkspaceContext,
+  WorktreeService,
   WriteFileTool,
   WriteTodosTool,
   _clearCache,
@@ -1363,6 +1393,7 @@ export {
   appendToLastTextPart,
   applyAdminAllowlist,
   applyReplacement,
+  applyRequiredServers,
   assumeExhaustive,
   authEvents,
   buildG1Url,
@@ -1374,6 +1405,7 @@ export {
   categorizeAndConcatenate,
   checkExhaustive,
   classifyGoogleError,
+  cleanupWorktree,
   clearApiKey,
   clearCachedCredentialFile,
   clearEmittedPolicyWarnings,
@@ -1402,6 +1434,8 @@ export {
   createTransport,
   createUnauthorizedToolError,
   createWorkingStdio,
+  createWorktree,
+  createWorktreeService,
   debugLogger,
   decodeTagName,
   deduplicatePathsByFileIdentity,
@@ -1519,6 +1553,7 @@ export {
   getPolicyTier,
   getPreviousSession,
   getProjectHash,
+  getProjectRootForWorktree,
   getPromptIdWithFallback,
   getPty,
   getRealPath,
@@ -1536,12 +1571,14 @@ export {
   getToolSuggestion,
   getTruncatedCheckpointNames,
   getVersion,
+  getWorktreePath,
   handleFallback,
   hasCycleInSchema,
   hasNetworkTransport,
   hasRedirection,
   hasValidEditorCommand,
   hasValidEditorCommandAsync,
+  hasWorktreeChanges,
   homedir,
   ideContextStore,
   initializeActivityMonitor,
@@ -1563,6 +1600,7 @@ export {
   isCloudShell,
   isCompletedAskUserTool,
   isCustomModel,
+  isDumbTerminal,
   isEditToolParams,
   isEditorAvailable,
   isEditorAvailableAsync,
@@ -1571,12 +1609,15 @@ export {
   isFatalToolError,
   isGemini2Model,
   isGemini3Model,
+  isGeminiWorktree,
   isGitRepository,
+  isGnuScreen,
   isGuiEditor,
   isHeadlessMode,
   isInvalidArgumentError,
   isJetBrainsTerminal,
   isLoopbackHost,
+  isLowColorTmux,
   isMcpToolAnnotation,
   isMcpToolName,
   isNightly,
@@ -1588,6 +1629,7 @@ export {
   isPrivateIp,
   isPrivateIpAsync,
   isProModel,
+  isRecord,
   isRetryableError,
   isSchemaDepthError,
   isStable,
@@ -1596,6 +1638,7 @@ export {
   isSubpath,
   isTelemetrySdkInitialized,
   isTerminalEditor,
+  isTmux,
   isTool,
   isToolCallResponseInfo,
   isUserActive,
@@ -1605,6 +1648,7 @@ export {
   isWindows10,
   isWithinRoot,
   isWriteFileToolParams,
+  jsonToMarkdown,
   listExtensions,
   listMemoryFiles,
   loadAgentsFromDirectory,
@@ -1724,6 +1768,7 @@ export {
   resolveToRealPath,
   retryWithBackoff,
   runInDevTraceSpan,
+  safeJsonToMarkdown,
   safeLiteralReplace,
   safeTemplateReplace,
   sanitizeAdminSettings,

package/bundle/docs/CONTRIBUTING.md

@@ -352,21 +352,6 @@ npm run lint
 - **Imports:** Pay special attention to import paths. The project uses ESLint to
   enforce restrictions on relative imports between packages.
 
-### Project structure
-
-- `packages/`: Contains the individual sub-packages of the project.
-  - `a2a-server`: A2A server implementation for the Gemini CLI. (Experimental)
-  - `cli/`: The command-line interface.
-  - `core/`: The core backend logic for the Gemini CLI.
-  - `test-utils` Utilities for creating and cleaning temporary file systems for
-    testing.
-  - `vscode-ide-companion/`: The Gemini CLI Companion extension pairs with
-    Gemini CLI.
-- `docs/`: Contains all project documentation.
-- `scripts/`: Utility scripts for building, testing, and development tasks.
-
-For more detailed architecture, see `docs/architecture.md`.
-
 ### Debugging
 
 #### VS Code

package/bundle/docs/admin/enterprise-controls.md

@@ -106,6 +106,67 @@ organization.
   ensures users maintain final control over which permitted servers are actually
   active in their environment.
 
+#### Required MCP Servers (preview)
+
+**Default**: empty
+
+Allows administrators to define MCP servers that are **always injected** into
+the user's environment. Unlike the allowlist (which filters user-configured
+servers), required servers are automatically added regardless of the user's
+local configuration.
+
+**Required Servers Format:**
+
+```json
+{
+  "requiredMcpServers": {
+    "corp-compliance-tool": {
+      "url": "https://mcp.corp/compliance",
+      "type": "http",
+      "trust": true,
+      "description": "Corporate compliance tool"
+    },
+    "internal-registry": {
+      "url": "https://registry.corp/mcp",
+      "type": "sse",
+      "authProviderType": "google_credentials",
+      "oauth": {
+        "scopes": ["https://www.googleapis.com/auth/scope"]
+      }
+    }
+  }
+}
+```
+
+**Supported Fields:**
+
+- `url`: (Required) The full URL of the MCP server endpoint.
+- `type`: (Required) The connection type (`sse` or `http`).
+- `trust`: (Optional) If set to `true`, tool execution will not require user
+  approval. Defaults to `true` for required servers.
+- `description`: (Optional) Human-readable description of the server.
+- `authProviderType`: (Optional) Authentication provider (`dynamic_discovery`,
+  `google_credentials`, or `service_account_impersonation`).
+- `oauth`: (Optional) OAuth configuration including `scopes`, `clientId`, and
+  `clientSecret`.
+- `targetAudience`: (Optional) OAuth target audience for service-to-service
+  auth.
+- `targetServiceAccount`: (Optional) Service account email to impersonate.
+- `headers`: (Optional) Additional HTTP headers to send with requests.
+- `includeTools` / `excludeTools`: (Optional) Tool filtering lists.
+- `timeout`: (Optional) Timeout in milliseconds for MCP requests.
+
+**Client Enforcement Logic:**
+
+- Required servers are injected **after** allowlist filtering, so they are
+  always available even if the allowlist is active.
+- If a required server has the **same name** as a locally configured server, the
+  admin configuration **completely overrides** the local one.
+- Required servers only support remote transports (`sse`, `http`). Local
+  execution fields (`command`, `args`, `env`, `cwd`) are not supported.
+- Required servers can coexist with allowlisted servers — both features work
+  independently.
+
 ### Unmanaged Capabilities
 
 **Enabled/Disabled** | Default: disabled

package/bundle/docs/changelogs/index.md

@@ -18,6 +18,17 @@ on GitHub.
 | [Preview](preview.md) | Experimental features ready for early feedback. |
 | [Stable](latest.md)   | Stable, recommended for general use.            |
 
+## Announcements: v0.34.0 - 2026-03-17
+
+- **Plan Mode Enabled by Default:** Plan Mode is now enabled by default to help
+  you break down complex tasks and execute them systematically
+  ([#21713](https://github.com/google-gemini/gemini-cli/pull/21713) by @jerop).
+- **Sandboxing Enhancements:** We've added native gVisor (runsc) and
+  experimental LXC container sandboxing support for safer execution environments
+  ([#21062](https://github.com/google-gemini/gemini-cli/pull/21062) by
+  @Zheyuan-Lin, [#20735](https://github.com/google-gemini/gemini-cli/pull/20735)
+  by @h30s).
+
 ## Announcements: v0.33.0 - 2026-03-11
 
 - **Agent Architecture Enhancements:** Introduced HTTP authentication for A2A