@google/gemini-cli 0.39.0-preview.2 → 0.39.1

package/bundle/{gemini-NBKLSVA3.js → gemini-JN2NUSDI.js}

@@ -25,7 +25,6 @@ import {
   configureSpecificSetting,
   disableSkill,
   enableSkill,
-  execa,
   formatRelativeTime,
   getExtensionManager,
   getThemeTypeFromBackgroundColor,
@@ -35,6 +34,7 @@ import {
   installSkill,
   isAlternateBufferEnabled,
   isFolderTrustEnabled,
+  isRecord,
   isSlashCommand,
   isWorkspaceTrusted,
   isWorktreeEnabled,
@@ -58,7 +58,7 @@ import {
   updateAllUpdatableExtensions,
   updateExtension,
   validateAuthMethod
-} from "./chunk-N3GUGFOL.js";
+} from "./chunk-APBWRLCM.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -70,7 +70,7 @@ import {
   runExitCleanup,
   runSyncCleanup,
   setupSignalHandlers
-} from "./chunk-SS4CWRZ5.js";
+} from "./chunk-N6R5LJKJ.js";
 import {
   AuthType,
   ChatRecordingService,
@@ -102,6 +102,7 @@ import {
   StreamEventType,
   StreamJsonFormatter,
   ToolCallEvent,
+  TrustLevel,
   UserAccountManager,
   UserPromptEvent,
   ValidationCancelledError,
@@ -121,6 +122,7 @@ import {
   createWorktreeService,
   detectIdeFromEnv,
   displayContentToString,
+  execa,
   external_exports as external_exports2,
   geminiPartsToContentParts,
   generalistProfile,
@@ -167,7 +169,7 @@ import {
   updatePolicy,
   writeToStderr,
   writeToStdout
-} from "./chunk-5J5LWISO.js";
+} from "./chunk-UIBQS45C.js";
 import {
   ASK_USER_TOOL_NAME,
   ApprovalMode,
@@ -188,6 +190,7 @@ import {
   FatalSandboxError,
   FatalToolExecutionError,
   FatalTurnLimitedError,
+  FatalUntrustedWorkspaceError,
   GEMINI_DIR,
   GEMINI_MODEL_ALIAS_AUTO,
   Kind,
@@ -214,7 +217,7 @@ import {
   loadServerHierarchicalMemory,
   resolveToRealPath,
   setGeminiMdFilename
-} from "./chunk-67TFD6HC.js";
+} from "./chunk-FNPZLVJU.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-RJTRUG2J.js";
 import "./chunk-IUUIT4SU.js";
@@ -5901,7 +5904,7 @@ async function handleInstall(args) {
         );
         if (confirmed) {
           const trustedFolders = loadTrustedFolders();
-          await trustedFolders.setValue(realPath, "TRUST_FOLDER" /* TRUST_FOLDER */);
+          await trustedFolders.setValue(realPath, TrustLevel.TRUST_FOLDER);
         } else {
           throw new Error(
             `Installation aborted: Folder "${absolutePath}" is not trusted.`
@@ -7265,7 +7268,7 @@ async function loadSandboxConfig(settings, argv) {
   }
   const command2 = getSandboxCommand(sandboxValue);
   const packageJson = await getPackageJson(__dirname3);
-  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.39.0-preview.2" ?? customImage ?? packageJson?.config?.sandboxImageUri;
+  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.39.1" ?? customImage ?? packageJson?.config?.sandboxImageUri;
   const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
   return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
 }
@@ -7475,6 +7478,10 @@ async function parseArguments(settings) {
       type: "string",
       nargs: 1,
       description: "Execute the provided prompt and continue in interactive mode"
+    }).option("skip-trust", {
+      type: "boolean",
+      description: "Trust the current workspace for this session.",
+      default: false
     }).option("worktree", {
       alias: "w",
       type: "string",
@@ -7596,9 +7603,16 @@ async function parseArguments(settings) {
   yargsInstance.wrap(yargsInstance.terminalWidth());
   let result;
   try {
-    result = await yargsInstance.parse();
+    const parsed = await yargsInstance.parse();
+    if (!isRecord(parsed)) {
+      throw new Error("Failed to parse arguments");
+    }
+    result = parsed;
+    if (result["skip-trust"]) {
+      process3.env["GEMINI_CLI_TRUST_WORKSPACE"] = "true";
+    }
   } catch (e) {
-    const msg = e instanceof Error ? e.message : String(e);
+    const msg = getErrorMessage(e);
     debugLogger.error(msg);
     yargsInstance.showHelp();
     await runExitCleanup();
@@ -7608,8 +7622,13 @@ async function parseArguments(settings) {
     await runExitCleanup();
     process3.exit(0);
   }
-  const queryArg = result.query;
-  const q = Array.isArray(queryArg) ? queryArg.join(" ") : queryArg;
+  const queryArg = result["query"];
+  let q;
+  if (Array.isArray(queryArg)) {
+    q = queryArg.join(" ");
+  } else if (typeof queryArg === "string") {
+    q = queryArg;
+  }
   if (q && !result["prompt"]) {
     if (!isHeadlessMode()) {
       startupMessages.push(
@@ -7640,7 +7659,7 @@ async function loadCliConfig(settings, sessionId, argv, options = {}) {
   const includeDirectoryTree = settings.context?.includeDirectoryTree ?? true;
   const ideMode = settings.ide?.enabled ?? false;
   const folderTrust = process3.env["GEMINI_CLI_INTEGRATION_TEST"] === "true" || process3.env["VITEST"] === "true" ? false : settings.security?.folderTrust?.enabled ?? false;
-  const trustedFolder = isWorkspaceTrusted(settings, cwd, void 0, {
+  const trustedFolder = isWorkspaceTrusted(settings, cwd, {
     prompt: argv.prompt,
     query: argv.query
   })?.isTrusted ?? false;
@@ -7669,7 +7688,7 @@ async function loadCliConfig(settings, sessionId, argv, options = {}) {
         return resolveToRealPath(trimmedPath) !== realCwd;
       } catch (e) {
         debugLogger.debug(
-          `[IDE] Skipping inaccessible workspace folder: ${trimmedPath} (${e instanceof Error ? e.message : String(e)})`
+          `[IDE] Skipping inaccessible workspace folder: ${trimmedPath} (${getErrorMessage(e)})`
         );
         return false;
       }
@@ -8060,7 +8079,7 @@ async function resolveWorktreeSettings(cwd) {
     worktreeBaseSha = stdout.trim();
   } catch (e) {
     debugLogger.debug(
-      `Failed to resolve worktree base SHA at ${worktreePath}: ${e instanceof Error ? e.message : String(e)}`
+      `Failed to resolve worktree base SHA at ${worktreePath}: ${getErrorMessage(e)}`
     );
   }
   if (!worktreeBaseSha) {
@@ -9195,9 +9214,29 @@ var rootDirectoryCheck = {
     }
   }
 };
+var folderTrustCheck = {
+  id: "folder-trust",
+  priority: WarningPriority.High,
+  check: async (workspaceRoot, settings) => {
+    if (!isFolderTrustEnabled(settings)) {
+      return null;
+    }
+    const { isTrusted } = isWorkspaceTrusted(settings, workspaceRoot);
+    if (isTrusted === true) {
+      return null;
+    }
+    if (isHeadlessMode()) {
+      throw new FatalUntrustedWorkspaceError(
+        "Gemini CLI is not running in a trusted directory. To proceed, either use `--skip-trust`, set the `GEMINI_CLI_TRUST_WORKSPACE=true` environment variable, or trust this directory in interactive mode. For more details, see https://geminicli.com/docs/cli/trusted-folders/#headless-and-automated-environments"
+      );
+    }
+    return null;
+  }
+};
 var WARNING_CHECKS = [
   homeDirectoryCheck,
-  rootDirectoryCheck
+  rootDirectoryCheck,
+  folderTrustCheck
 ];
 async function getUserStartupWarnings(settings, workspaceRoot = process4.cwd(), options) {
   const results = await Promise.all(
@@ -9562,7 +9601,7 @@ async function runNonInteractive({
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-X4577PYZ.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-6GKOMHGW.js");
       await setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -10013,7 +10052,7 @@ async function runNonInteractive2(params) {
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-X4577PYZ.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-6GKOMHGW.js");
       await setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -14860,7 +14899,7 @@ async function resolveSessionId(resumeArg) {
   }
 }
 async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
-  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-H3NLGP7Z.js");
+  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-F6YUYJT5.js");
   await doStartUI(
     config,
     settings,
@@ -15062,7 +15101,7 @@ ${finalArgs[promptIndex + 1]}`;
     await config.storage.initialize();
     adminControlsListner.setConfig(config);
     if (config.isInteractive() && settings.merged.general.devtools) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-X4577PYZ.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-6GKOMHGW.js");
       await setupInitialActivityLogger(config);
     }
     registerTelemetryConfig(config);
@@ -15141,6 +15180,11 @@ ${finalArgs[promptIndex + 1]}`;
       })
     ];
     cliStartupHandle?.end();
+    if (!config.isInteractive()) {
+      for (const warning of startupWarnings) {
+        writeToStderr(warning.message + "\n");
+      }
+    }
     if (config.isInteractive()) {
       if (process.stdin.isTTY) {
         process.stdin.resume();

package/bundle/{gemini-YOFQ5KF4.js → gemini-ZVQNZBQE.js}

@@ -25,7 +25,6 @@ import {
   configureSpecificSetting,
   disableSkill,
   enableSkill,
-  execa,
   formatRelativeTime,
   getExtensionManager,
   getThemeTypeFromBackgroundColor,
@@ -35,6 +34,7 @@ import {
   installSkill,
   isAlternateBufferEnabled,
   isFolderTrustEnabled,
+  isRecord,
   isSlashCommand,
   isWorkspaceTrusted,
   isWorktreeEnabled,
@@ -58,7 +58,7 @@ import {
   updateAllUpdatableExtensions,
   updateExtension,
   validateAuthMethod
-} from "./chunk-GX4YOB7T.js";
+} from "./chunk-RNWNACRD.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -70,7 +70,7 @@ import {
   runExitCleanup,
   runSyncCleanup,
   setupSignalHandlers
-} from "./chunk-45GIY5RT.js";
+} from "./chunk-ZIXTYG56.js";
 import {
   AuthType,
   ChatRecordingService,
@@ -102,6 +102,7 @@ import {
   StreamEventType,
   StreamJsonFormatter,
   ToolCallEvent,
+  TrustLevel,
   UserAccountManager,
   UserPromptEvent,
   ValidationCancelledError,
@@ -121,6 +122,7 @@ import {
   createWorktreeService,
   detectIdeFromEnv,
   displayContentToString,
+  execa,
   external_exports as external_exports2,
   geminiPartsToContentParts,
   generalistProfile,
@@ -167,7 +169,7 @@ import {
   updatePolicy,
   writeToStderr,
   writeToStdout
-} from "./chunk-OXCH4FS3.js";
+} from "./chunk-GDRLBWZL.js";
 import {
   ASK_USER_TOOL_NAME,
   ApprovalMode,
@@ -188,6 +190,7 @@ import {
   FatalSandboxError,
   FatalToolExecutionError,
   FatalTurnLimitedError,
+  FatalUntrustedWorkspaceError,
   GEMINI_DIR,
   GEMINI_MODEL_ALIAS_AUTO,
   Kind,
@@ -214,7 +217,7 @@ import {
   loadServerHierarchicalMemory,
   resolveToRealPath,
   setGeminiMdFilename
-} from "./chunk-67TFD6HC.js";
+} from "./chunk-FNPZLVJU.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-RJTRUG2J.js";
 import "./chunk-IUUIT4SU.js";
@@ -5901,7 +5904,7 @@ async function handleInstall(args) {
         );
         if (confirmed) {
           const trustedFolders = loadTrustedFolders();
-          await trustedFolders.setValue(realPath, "TRUST_FOLDER" /* TRUST_FOLDER */);
+          await trustedFolders.setValue(realPath, TrustLevel.TRUST_FOLDER);
         } else {
           throw new Error(
             `Installation aborted: Folder "${absolutePath}" is not trusted.`
@@ -7265,7 +7268,7 @@ async function loadSandboxConfig(settings, argv) {
   }
   const command2 = getSandboxCommand(sandboxValue);
   const packageJson = await getPackageJson(__dirname3);
-  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.39.0-preview.2" ?? customImage ?? packageJson?.config?.sandboxImageUri;
+  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.39.1" ?? customImage ?? packageJson?.config?.sandboxImageUri;
   const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
   return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
 }
@@ -7475,6 +7478,10 @@ async function parseArguments(settings) {
       type: "string",
       nargs: 1,
       description: "Execute the provided prompt and continue in interactive mode"
+    }).option("skip-trust", {
+      type: "boolean",
+      description: "Trust the current workspace for this session.",
+      default: false
     }).option("worktree", {
       alias: "w",
       type: "string",
@@ -7596,9 +7603,16 @@ async function parseArguments(settings) {
   yargsInstance.wrap(yargsInstance.terminalWidth());
   let result;
   try {
-    result = await yargsInstance.parse();
+    const parsed = await yargsInstance.parse();
+    if (!isRecord(parsed)) {
+      throw new Error("Failed to parse arguments");
+    }
+    result = parsed;
+    if (result["skip-trust"]) {
+      process3.env["GEMINI_CLI_TRUST_WORKSPACE"] = "true";
+    }
   } catch (e) {
-    const msg = e instanceof Error ? e.message : String(e);
+    const msg = getErrorMessage(e);
     debugLogger.error(msg);
     yargsInstance.showHelp();
     await runExitCleanup();
@@ -7608,8 +7622,13 @@ async function parseArguments(settings) {
     await runExitCleanup();
     process3.exit(0);
   }
-  const queryArg = result.query;
-  const q = Array.isArray(queryArg) ? queryArg.join(" ") : queryArg;
+  const queryArg = result["query"];
+  let q;
+  if (Array.isArray(queryArg)) {
+    q = queryArg.join(" ");
+  } else if (typeof queryArg === "string") {
+    q = queryArg;
+  }
   if (q && !result["prompt"]) {
     if (!isHeadlessMode()) {
       startupMessages.push(
@@ -7640,7 +7659,7 @@ async function loadCliConfig(settings, sessionId, argv, options = {}) {
   const includeDirectoryTree = settings.context?.includeDirectoryTree ?? true;
   const ideMode = settings.ide?.enabled ?? false;
   const folderTrust = process3.env["GEMINI_CLI_INTEGRATION_TEST"] === "true" || process3.env["VITEST"] === "true" ? false : settings.security?.folderTrust?.enabled ?? false;
-  const trustedFolder = isWorkspaceTrusted(settings, cwd, void 0, {
+  const trustedFolder = isWorkspaceTrusted(settings, cwd, {
     prompt: argv.prompt,
     query: argv.query
   })?.isTrusted ?? false;
@@ -7669,7 +7688,7 @@ async function loadCliConfig(settings, sessionId, argv, options = {}) {
         return resolveToRealPath(trimmedPath) !== realCwd;
       } catch (e) {
         debugLogger.debug(
-          `[IDE] Skipping inaccessible workspace folder: ${trimmedPath} (${e instanceof Error ? e.message : String(e)})`
+          `[IDE] Skipping inaccessible workspace folder: ${trimmedPath} (${getErrorMessage(e)})`
         );
         return false;
       }
@@ -8060,7 +8079,7 @@ async function resolveWorktreeSettings(cwd) {
     worktreeBaseSha = stdout.trim();
   } catch (e) {
     debugLogger.debug(
-      `Failed to resolve worktree base SHA at ${worktreePath}: ${e instanceof Error ? e.message : String(e)}`
+      `Failed to resolve worktree base SHA at ${worktreePath}: ${getErrorMessage(e)}`
     );
   }
   if (!worktreeBaseSha) {
@@ -9195,9 +9214,29 @@ var rootDirectoryCheck = {
     }
   }
 };
+var folderTrustCheck = {
+  id: "folder-trust",
+  priority: WarningPriority.High,
+  check: async (workspaceRoot, settings) => {
+    if (!isFolderTrustEnabled(settings)) {
+      return null;
+    }
+    const { isTrusted } = isWorkspaceTrusted(settings, workspaceRoot);
+    if (isTrusted === true) {
+      return null;
+    }
+    if (isHeadlessMode()) {
+      throw new FatalUntrustedWorkspaceError(
+        "Gemini CLI is not running in a trusted directory. To proceed, either use `--skip-trust`, set the `GEMINI_CLI_TRUST_WORKSPACE=true` environment variable, or trust this directory in interactive mode. For more details, see https://geminicli.com/docs/cli/trusted-folders/#headless-and-automated-environments"
+      );
+    }
+    return null;
+  }
+};
 var WARNING_CHECKS = [
   homeDirectoryCheck,
-  rootDirectoryCheck
+  rootDirectoryCheck,
+  folderTrustCheck
 ];
 async function getUserStartupWarnings(settings, workspaceRoot = process4.cwd(), options) {
   const results = await Promise.all(
@@ -9562,7 +9601,7 @@ async function runNonInteractive({
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-K4DENTYF.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-XJQQUBHU.js");
       await setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -10013,7 +10052,7 @@ async function runNonInteractive2(params) {
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-K4DENTYF.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-XJQQUBHU.js");
       await setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -14860,7 +14899,7 @@ async function resolveSessionId(resumeArg) {
   }
 }
 async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
-  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-TCZBSTKU.js");
+  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-WY7NQZAW.js");
   await doStartUI(
     config,
     settings,
@@ -15062,7 +15101,7 @@ ${finalArgs[promptIndex + 1]}`;
     await config.storage.initialize();
     adminControlsListner.setConfig(config);
     if (config.isInteractive() && settings.merged.general.devtools) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-K4DENTYF.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-XJQQUBHU.js");
       await setupInitialActivityLogger(config);
     }
     registerTelemetryConfig(config);
@@ -15141,6 +15180,11 @@ ${finalArgs[promptIndex + 1]}`;
       })
     ];
     cliStartupHandle?.end();
+    if (!config.isInteractive()) {
+      for (const warning of startupWarnings) {
+        writeToStderr(warning.message + "\n");
+      }
+    }
     if (config.isInteractive()) {
       if (process.stdin.isTTY) {
         process.stdin.resume();

package/bundle/gemini.js

@@ -103,9 +103,9 @@ ${error instanceof Error ? error.stack ?? error.message : String(error)}
       }
     }
   } else {
-    const { main } = await import("./gemini-YOFQ5KF4.js");
-    const { FatalError, writeToStderr } = await import("./dist-5ET5G5PC.js");
-    const { runExitCleanup } = await import("./cleanup-OG2MXKZ7.js");
+    const { main } = await import("./gemini-JN2NUSDI.js");
+    const { FatalError, writeToStderr } = await import("./dist-7UL5MZ3N.js");
+    const { runExitCleanup } = await import("./cleanup-ROCPAQIR.js");
     main().catch(async (error) => {
       const cleanupTimeout = setTimeout(() => {
         writeToStderr("Cleanup timed out, forcing exit...\n");