@google/gemini-cli 0.36.0-preview.0 → 0.36.0-preview.2

package/bundle/{chunk-K2M7OTIP.js → chunk-25V3TYNR.js}

@@ -186,7 +186,7 @@ import {
   toFriendlyError,
   unescapePath,
   zodToJsonSchema
-} from "./chunk-PVQN7ZVP.js";
+} from "./chunk-PXG3YTLU.js";
 import {
   require_dist as require_dist2,
   require_src
@@ -250034,7 +250034,7 @@ var Float64Vector = import_vector.default.Float64Vector;
 var PointerVector = import_vector.default.PointerVector;
 
 // packages/core/src/generated/git-commit.ts
-var GIT_COMMIT_INFO = "bf80e27db";
+var GIT_COMMIT_INFO = "a3a3e6692";
 var CLI_VERSION = "0.36.0-preview.0";
 
 // packages/core/src/ide/detect-ide.ts
@@ -303558,7 +303558,8 @@ var ShellTool = class _ShellTool extends BaseDeclarativeTool {
     });
     const definition = getShellDefinition(
       context2.config.getEnableInteractiveShell(),
-      context2.config.getEnableShellOutputEfficiency()
+      context2.config.getEnableShellOutputEfficiency(),
+      context2.config.getSandboxEnabled()
     );
     super(
       _ShellTool.Name,
@@ -303600,7 +303601,8 @@ var ShellTool = class _ShellTool extends BaseDeclarativeTool {
   getSchema(modelId) {
     const definition = getShellDefinition(
       this.context.config.getEnableInteractiveShell(),
-      this.context.config.getEnableShellOutputEfficiency()
+      this.context.config.getEnableShellOutputEfficiency(),
+      this.context.config.getSandboxEnabled()
     );
     return resolveToolDeclaration(definition, modelId);
   }
@@ -323672,9 +323674,6 @@ var PolicyEngine = class {
         }
       }
     }
-    if (decision === "allow" /* ALLOW */ && toolCall.args?.["additional_permissions"]) {
-      decision = "ask_user" /* ASK_USER */;
-    }
     return {
       decision: this.applyNonInteractiveMode(decision),
       rule: matchedRule
@@ -329821,7 +329820,7 @@ var A2AAuthProviderFactory = class _A2AAuthProviderFactory {
         return provider;
       }
       case "oauth2": {
-        const { OAuth2AuthProvider } = await import("./oauth2-provider-G7GIGUQF.js");
+        const { OAuth2AuthProvider } = await import("./oauth2-provider-ZT3CIEZO.js");
         const provider = new OAuth2AuthProvider(
           authConfig,
           options.agentName ?? "unknown",
@@ -350759,7 +350758,7 @@ var Config = class {
     this.model = params.model;
     this.disableLoopDetection = params.disableLoopDetection ?? false;
     this._activeModel = params.model;
-    this.enableAgents = params.enableAgents ?? false;
+    this.enableAgents = params.enableAgents ?? true;
     this.agents = params.agents ?? {};
     this.disableLLMCorrection = params.disableLLMCorrection ?? true;
     this.planEnabled = params.plan ?? true;
@@ -351622,7 +351621,7 @@ var Config = class {
     if (this.experimentalJitContext && this.contextManager) {
       await this.contextManager.refresh();
     } else {
-      const { refreshServerHierarchicalMemory: refreshServerHierarchicalMemory2 } = await import("./memoryDiscovery-WPGC7DAZ.js");
+      const { refreshServerHierarchicalMemory: refreshServerHierarchicalMemory2 } = await import("./memoryDiscovery-JXHCZBWK.js");
       await refreshServerHierarchicalMemory2(this);
     }
     if (this._geminiClient?.isInitialized()) {

package/bundle/{chunk-N7MAJ3JD.js → chunk-6F64DR53.js}

@@ -1,7 +1,7 @@
 const require = (await import('node:module')).createRequire(import.meta.url); const __chunk_filename = (await import('node:url')).fileURLToPath(import.meta.url); const __chunk_dirname = (await import('node:path')).dirname(__chunk_filename);
 import {
   runExitCleanup
-} from "./chunk-3HNPGRRW.js";
+} from "./chunk-IOJJTEIC.js";
 import {
   AsyncFzf,
   AuthProviderType,
@@ -164,7 +164,7 @@ import {
   tokenLimit,
   uiTelemetryService,
   yellowBright
-} from "./chunk-6UAL5KXG.js";
+} from "./chunk-SV2TJWFU.js";
 import {
   ApprovalMode,
   CoreEvent,
@@ -193,7 +193,7 @@ import {
   shortenPath,
   tildeifyPath,
   unescapePath
-} from "./chunk-BE2CAP4N.js";
+} from "./chunk-HLML5SVJ.js";
 import {
   __commonJS,
   __export,
@@ -48160,7 +48160,7 @@ var SETTINGS_SCHEMA = {
         label: "Enable Agents",
         category: "Experimental",
         requiresRestart: true,
-        default: false,
+        default: true,
         description: "Enable local and remote subagents.",
         showInDialog: false
       },
@@ -83036,7 +83036,7 @@ var authCommand = {
 import process29 from "node:process";
 
 // packages/cli/src/generated/git-commit.ts
-var GIT_COMMIT_INFO = "0223181cf";
+var GIT_COMMIT_INFO = "a3a3e6692";
 
 // packages/cli/src/ui/utils/historyExportUtils.ts
 import * as fsPromises2 from "node:fs/promises";
@@ -88437,7 +88437,7 @@ Use /mcp auth <server-name> to authenticate.`
         type: "info",
         text: `Starting OAuth authentication for MCP server '${serverName}'...`
       });
-      const { MCPOAuthProvider } = await import("./dist-6WEZWPRQ.js");
+      const { MCPOAuthProvider } = await import("./dist-X3ESBKEG.js");
       let oauthConfig = server.oauth;
       if (!oauthConfig) {
         oauthConfig = { enabled: false };

package/bundle/{chunk-6UAL5KXG.js → chunk-EUXACAGL.js}

@@ -192,7 +192,7 @@ import {
   toFriendlyError,
   unescapePath,
   zodToJsonSchema
-} from "./chunk-BE2CAP4N.js";
+} from "./chunk-HLML5SVJ.js";
 import {
   require_dist as require_dist2,
   require_src
@@ -249986,8 +249986,8 @@ var Float64Vector = import_vector.default.Float64Vector;
 var PointerVector = import_vector.default.PointerVector;
 
 // packages/core/dist/src/generated/git-commit.js
-var GIT_COMMIT_INFO = "bf80e27db";
-var CLI_VERSION = "0.36.0-preview.0";
+var GIT_COMMIT_INFO = "a3a3e6692";
+var CLI_VERSION = "0.36.0-preview.2";
 
 // packages/core/dist/src/ide/detect-ide.js
 var IDE_DEFINITIONS = {
@@ -275701,7 +275701,7 @@ function getVersion() {
   }
   versionPromise = (async () => {
     const pkgJson = await getPackageJson(__dirname4);
-    return "0.36.0-preview.0";
+    return "0.36.0-preview.2";
   })();
   return versionPromise;
 }
@@ -302024,7 +302024,7 @@ var ShellTool = class _ShellTool extends BaseDeclarativeTool {
   constructor(context2, messageBus) {
     void initializeShellParsers().catch(() => {
     });
-    const definition = getShellDefinition(context2.config.getEnableInteractiveShell(), context2.config.getEnableShellOutputEfficiency());
+    const definition = getShellDefinition(context2.config.getEnableInteractiveShell(), context2.config.getEnableShellOutputEfficiency(), context2.config.getSandboxEnabled());
     super(
       _ShellTool.Name,
       "Shell",
@@ -302052,7 +302052,7 @@ var ShellTool = class _ShellTool extends BaseDeclarativeTool {
     return new ShellToolInvocation(this.context.config, params, messageBus, _toolName, _toolDisplayName);
   }
   getSchema(modelId) {
-    const definition = getShellDefinition(this.context.config.getEnableInteractiveShell(), this.context.config.getEnableShellOutputEfficiency());
+    const definition = getShellDefinition(this.context.config.getEnableInteractiveShell(), this.context.config.getEnableShellOutputEfficiency(), this.context.config.getSandboxEnabled());
     return resolveToolDeclaration(definition, modelId);
   }
 };
@@ -321207,9 +321207,6 @@ var PolicyEngine = class {
         }
       }
     }
-    if (decision === PolicyDecision.ALLOW && toolCall.args?.["additional_permissions"]) {
-      decision = PolicyDecision.ASK_USER;
-    }
     return {
       decision: this.applyNonInteractiveMode(decision),
       rule: matchedRule
@@ -327041,7 +327038,7 @@ var A2AAuthProviderFactory = class _A2AAuthProviderFactory {
         return provider;
       }
       case "oauth2": {
-        const { OAuth2AuthProvider } = await import("./oauth2-provider-X3F7PSVB.js");
+        const { OAuth2AuthProvider } = await import("./oauth2-provider-D6HJJAVX.js");
         const provider = new OAuth2AuthProvider(authConfig, options.agentName ?? "unknown", agentCard, options.agentCardUrl);
         await provider.initialize();
         return provider;
@@ -346401,7 +346398,7 @@ var Config = class {
     this.model = params.model;
     this.disableLoopDetection = params.disableLoopDetection ?? false;
     this._activeModel = params.model;
-    this.enableAgents = params.enableAgents ?? false;
+    this.enableAgents = params.enableAgents ?? true;
     this.agents = params.agents ?? {};
     this.disableLLMCorrection = params.disableLLMCorrection ?? true;
     this.planEnabled = params.plan ?? true;
@@ -347195,7 +347192,7 @@ var Config = class {
     if (this.experimentalJitContext && this.contextManager) {
       await this.contextManager.refresh();
     } else {
-      const { refreshServerHierarchicalMemory: refreshServerHierarchicalMemory2 } = await import("./memoryDiscovery-FNLUOGLO.js");
+      const { refreshServerHierarchicalMemory: refreshServerHierarchicalMemory2 } = await import("./memoryDiscovery-VQKOP6YW.js");
       await refreshServerHierarchicalMemory2(this);
     }
     if (this._geminiClient?.isInitialized()) {

package/bundle/{chunk-BE2CAP4N.js → chunk-HLML5SVJ.js}

@@ -48538,7 +48538,7 @@ function getCommandDescription() {
   }
   return "Exact bash command to execute as `bash -c <command>`";
 }
-function getShellDeclaration(enableInteractiveShell, enableEfficiency) {
+function getShellDeclaration(enableInteractiveShell, enableEfficiency, enableToolSandboxing = false) {
   return {
     name: SHELL_TOOL_NAME,
     description: getShellToolDescription(enableInteractiveShell, enableEfficiency),
@@ -48561,31 +48561,33 @@ function getShellDeclaration(enableInteractiveShell, enableEfficiency) {
           type: "boolean",
           description: "Set to true if this command should be run in the background (e.g. for long-running servers or watchers). The command will be started, allowed to run for a brief moment to check for immediate errors, and then moved to the background."
         },
-        [PARAM_ADDITIONAL_PERMISSIONS]: {
-          type: "object",
-          description: 'Sandbox permissions for the command. Use this to request additional sandboxed filesystem or network permissions if a previous command failed with "Operation not permitted".',
-          properties: {
-            network: {
-              type: "boolean",
-              description: "Set to true to enable network access for this command."
-            },
-            fileSystem: {
-              type: "object",
-              properties: {
-                read: {
-                  type: "array",
-                  items: { type: "string" },
-                  description: "List of additional absolute paths to allow reading."
-                },
-                write: {
-                  type: "array",
-                  items: { type: "string" },
-                  description: "List of additional absolute paths to allow writing."
+        ...enableToolSandboxing ? {
+          [PARAM_ADDITIONAL_PERMISSIONS]: {
+            type: "object",
+            description: 'Sandbox permissions for the command. Use this to request additional sandboxed filesystem or network permissions if a previous command failed with "Operation not permitted".',
+            properties: {
+              network: {
+                type: "boolean",
+                description: "Set to true to enable network access for this command."
+              },
+              fileSystem: {
+                type: "object",
+                properties: {
+                  read: {
+                    type: "array",
+                    items: { type: "string" },
+                    description: "List of additional absolute paths to allow reading."
+                  },
+                  write: {
+                    type: "array",
+                    items: { type: "string" },
+                    description: "List of additional absolute paths to allow writing."
+                  }
                 }
               }
             }
           }
-        }
+        } : {}
       },
       required: [SHELL_PARAM_COMMAND]
     }
@@ -48841,7 +48843,7 @@ var DEFAULT_LEGACY_SET = {
       required: [PARAM_DIR_PATH]
     }
   },
-  run_shell_command: (enableInteractiveShell, enableEfficiency) => getShellDeclaration(enableInteractiveShell, enableEfficiency),
+  run_shell_command: (enableInteractiveShell, enableEfficiency, enableToolSandboxing) => getShellDeclaration(enableInteractiveShell, enableEfficiency, enableToolSandboxing),
   replace: {
     name: EDIT_TOOL_NAME,
     description: `Replaces text within a file. By default, the tool expects to find and replace exactly ONE occurrence of \`old_string\`. If you want to replace multiple occurrences of the exact same string, set \`allow_multiple\` to true. This tool requires providing significant context around the change to ensure precise targeting. Always use the ${READ_FILE_TOOL_NAME} tool to examine the file's current content before attempting a text replacement.
@@ -49432,7 +49434,7 @@ var GEMINI_3_SET = {
       required: [PARAM_DIR_PATH]
     }
   },
-  run_shell_command: (enableInteractiveShell, enableEfficiency) => getShellDeclaration(enableInteractiveShell, enableEfficiency),
+  run_shell_command: (enableInteractiveShell, enableEfficiency, enableToolSandboxing) => getShellDeclaration(enableInteractiveShell, enableEfficiency, enableToolSandboxing),
   replace: {
     name: EDIT_TOOL_NAME,
     description: `Replaces text within a file. By default, the tool expects to find and replace exactly ONE occurrence of \`old_string\`. If you want to replace multiple occurrences of the exact same string, set \`allow_multiple\` to true. This tool requires providing significant context around the change to ensure precise targeting.
@@ -49873,10 +49875,10 @@ var ENTER_PLAN_MODE_DEFINITION = {
   },
   overrides: (modelId) => getToolSet(modelId).enter_plan_mode
 };
-function getShellDefinition(enableInteractiveShell, enableEfficiency) {
+function getShellDefinition(enableInteractiveShell, enableEfficiency, enableToolSandboxing = false) {
   return {
-    base: getShellDeclaration(enableInteractiveShell, enableEfficiency),
-    overrides: (modelId) => getToolSet(modelId).run_shell_command(enableInteractiveShell, enableEfficiency)
+    base: getShellDeclaration(enableInteractiveShell, enableEfficiency, enableToolSandboxing),
+    overrides: (modelId) => getToolSet(modelId).run_shell_command(enableInteractiveShell, enableEfficiency, enableToolSandboxing)
   };
 }
 function getExitPlanModeDefinition() {

package/bundle/{chunk-3HNPGRRW.js → chunk-IOJJTEIC.js}

@@ -3,10 +3,10 @@ import {
   ExitCodes,
   isTelemetrySdkInitialized,
   shutdownTelemetry
-} from "./chunk-6UAL5KXG.js";
+} from "./chunk-SV2TJWFU.js";
 import {
   Storage
-} from "./chunk-BE2CAP4N.js";
+} from "./chunk-HLML5SVJ.js";
 
 // packages/cli/src/utils/cleanup.ts
 import { promises as fs } from "node:fs";

package/bundle/{chunk-S36ET7IB.js → chunk-KGPUJGU6.js}

@@ -1,7 +1,7 @@
 const require = (await import('node:module')).createRequire(import.meta.url); const __chunk_filename = (await import('node:url')).fileURLToPath(import.meta.url); const __chunk_dirname = (await import('node:path')).dirname(__chunk_filename);
 import {
   runExitCleanup
-} from "./chunk-HXZPARYO.js";
+} from "./chunk-OOZG4FMQ.js";
 import {
   AsyncFzf,
   AuthProviderType,
@@ -153,7 +153,7 @@ import {
   tokenLimit,
   uiTelemetryService,
   yellowBright
-} from "./chunk-CDXJ3P4V.js";
+} from "./chunk-25V3TYNR.js";
 import {
   ApprovalMode,
   CoreEvent,
@@ -181,7 +181,7 @@ import {
   shortenPath,
   tildeifyPath,
   unescapePath
-} from "./chunk-PVQN7ZVP.js";
+} from "./chunk-PXG3YTLU.js";
 import {
   __commonJS,
   __export,
@@ -48148,7 +48148,7 @@ var SETTINGS_SCHEMA = {
         label: "Enable Agents",
         category: "Experimental",
         requiresRestart: true,
-        default: false,
+        default: true,
         description: "Enable local and remote subagents.",
         showInDialog: false
       },
@@ -83024,7 +83024,7 @@ var authCommand = {
 import process29 from "node:process";
 
 // packages/cli/src/generated/git-commit.ts
-var GIT_COMMIT_INFO = "bf80e27db";
+var GIT_COMMIT_INFO = "a3a3e6692";
 
 // packages/cli/src/ui/utils/historyExportUtils.ts
 import * as fsPromises2 from "node:fs/promises";
@@ -88425,7 +88425,7 @@ Use /mcp auth <server-name> to authenticate.`
         type: "info",
         text: `Starting OAuth authentication for MCP server '${serverName}'...`
       });
-      const { MCPOAuthProvider } = await import("./core-J3CTNETR.js");
+      const { MCPOAuthProvider } = await import("./core-7GUY3XKQ.js");
       let oauthConfig = server.oauth;
       if (!oauthConfig) {
         oauthConfig = { enabled: false };

package/bundle/{chunk-3XQWOVPH.js → chunk-MRJRXC63.js}

@@ -3,10 +3,10 @@ import {
   ExitCodes,
   isTelemetrySdkInitialized,
   shutdownTelemetry
-} from "./chunk-K2M7OTIP.js";
+} from "./chunk-EUXACAGL.js";
 import {
   Storage
-} from "./chunk-PVQN7ZVP.js";
+} from "./chunk-HLML5SVJ.js";
 
 // packages/cli/src/utils/cleanup.ts
 import { promises as fs } from "node:fs";

package/bundle/{chunk-HXZPARYO.js → chunk-MXNIJ4RK.js}

@@ -3,10 +3,10 @@ import {
   ExitCodes,
   isTelemetrySdkInitialized,
   shutdownTelemetry
-} from "./chunk-CDXJ3P4V.js";
+} from "./chunk-WHT3ZS7S.js";
 import {
   Storage
-} from "./chunk-PVQN7ZVP.js";
+} from "./chunk-HLML5SVJ.js";
 
 // packages/cli/src/utils/cleanup.ts
 import { promises as fs } from "node:fs";