@google/gemini-cli 0.46.0-preview.1 → 0.47.0-nightly.20260604.g4196596f7

package/bundle/{chunk-QEVRJ7HY.js → chunk-OQQDPZ7U.js}

@@ -3017,8 +3017,8 @@ var require_graceful_fs = __commonJS({
       }
       var fs$copyFile = fs95.copyFile;
       if (fs$copyFile)
-        fs95.copyFile = copyFile;
-      function copyFile(src, dest, flags2, cb) {
+        fs95.copyFile = copyFile2;
+      function copyFile2(src, dest, flags2, cb) {
         if (typeof flags2 === "function") {
           cb = flags2;
           flags2 = 0;
@@ -14069,7 +14069,7 @@ var require_filesubjecttokensupplier = __commonJS({
     }));
     var realpath5 = (0, util_1.promisify)(fs94.realpath ?? (() => {
     }));
-    var lstat5 = (0, util_1.promisify)(fs94.lstat ?? (() => {
+    var lstat6 = (0, util_1.promisify)(fs94.lstat ?? (() => {
     }));
     var FileSubjectTokenSupplier = class {
       filePath;
@@ -14095,7 +14095,7 @@ var require_filesubjecttokensupplier = __commonJS({
         let parsedFilePath = this.filePath;
         try {
           parsedFilePath = await realpath5(parsedFilePath);
-          if (!(await lstat5(parsedFilePath)).isFile()) {
+          if (!(await lstat6(parsedFilePath)).isFile()) {
             throw new Error();
           }
         } catch (err2) {
@@ -25004,7 +25004,7 @@ var require_filesubjecttokensupplier2 = __commonJS({
     });
     var realpath5 = (0, util_1.promisify)((_b = fs94.realpath) !== null && _b !== void 0 ? _b : () => {
     });
-    var lstat5 = (0, util_1.promisify)((_c = fs94.lstat) !== null && _c !== void 0 ? _c : () => {
+    var lstat6 = (0, util_1.promisify)((_c = fs94.lstat) !== null && _c !== void 0 ? _c : () => {
     });
     var FileSubjectTokenSupplier = class {
       /**
@@ -25027,7 +25027,7 @@ var require_filesubjecttokensupplier2 = __commonJS({
         let parsedFilePath = this.filePath;
         try {
           parsedFilePath = await realpath5(parsedFilePath);
-          if (!(await lstat5(parsedFilePath)).isFile()) {
+          if (!(await lstat6(parsedFilePath)).isFile()) {
             throw new Error();
           }
         } catch (err2) {
@@ -279559,8 +279559,8 @@ function isValidToolName(name3, options = {}) {
 }
 
 // packages/core/src/generated/git-commit.ts
-var GIT_COMMIT_INFO = "700c96118";
-var CLI_VERSION = "0.46.0-preview.0";
+var GIT_COMMIT_INFO = "4196596f7";
+var CLI_VERSION = "0.47.0-nightly.20260602.gcfcecebe8";
 
 // packages/core/src/ide/detect-ide.ts
 var IDE_DEFINITIONS = {
@@ -304029,7 +304029,7 @@ function getVersion() {
   }
   versionPromise = (async () => {
     const pkgJson = await getPackageJson(__dirname4);
-    return "0.46.0-preview.0";
+    return "0.47.0-nightly.20260602.gcfcecebe8";
   })();
   return versionPromise;
 }
@@ -338373,7 +338373,7 @@ var A2AAuthProviderFactory = class _A2AAuthProviderFactory {
         return provider;
       }
       case "oauth2": {
-        const { OAuth2AuthProvider } = await import("./oauth2-provider-CTPS7JLT.js");
+        const { OAuth2AuthProvider } = await import("./oauth2-provider-TLVZNHJT.js");
         const provider = new OAuth2AuthProvider(
           authConfig,
           options.agentName ?? "unknown",
@@ -366472,6 +366472,7 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
       }
       if (message.persist) {
         persistenceQueue = persistenceQueue.then(async () => {
+          let tmpFile;
           try {
             const policyFile = message.persistScope === "workspace" ? storage2.getWorkspaceAutoSavedPolicyPath() : storage2.getAutoSavedPolicyPath();
             await fs73.mkdir(path83.dirname(policyFile), { recursive: true });
@@ -366483,11 +366484,19 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
                 existingData = parsed;
               }
             } catch (error40) {
-              if (!isNodeError(error40) || error40.code !== "ENOENT") {
-                debugLogger.warn(
-                  `Failed to parse ${policyFile}, overwriting with new policy.`,
-                  error40
+              if (isNodeError(error40) && error40.code === "ENOENT") {
+              } else if (!isNodeError(error40)) {
+                coreEvents.emitFeedback(
+                  "warning",
+                  `Syntax error found in policy file. Backing up corrupted file to ${policyFile}.bak and starting fresh.`
                 );
+                if (!(await fs73.lstat(policyFile).catch(() => null))?.isSymbolicLink()) {
+                  await fs73.copyFile(policyFile, `${policyFile}.bak`).catch(() => {
+                  });
+                }
+                existingData = {};
+              } else {
+                throw error40;
               }
             }
             if (!existingData.rule) {
@@ -366520,7 +366529,7 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
             }
             const newContent = import_toml3.default.stringify(existingData);
             const tmpSuffix = crypto18.randomBytes(8).toString("hex");
-            const tmpFile = `${policyFile}.${tmpSuffix}.tmp`;
+            tmpFile = `${policyFile}.${tmpSuffix}.tmp`;
             let handle2;
             try {
               handle2 = await fs73.open(tmpFile, "wx");
@@ -366528,11 +366537,28 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
             } finally {
               await handle2?.close();
             }
-            await fs73.rename(tmpFile, policyFile);
+            try {
+              await fs73.rename(tmpFile, policyFile);
+            } catch (renameError) {
+              if (isNodeError(renameError) && (renameError.code === "EXDEV" || renameError.code === "EBUSY")) {
+                if ((await fs73.lstat(policyFile).catch(() => null))?.isSymbolicLink())
+                  throw renameError;
+                await fs73.copyFile(tmpFile, policyFile);
+                await fs73.unlink(tmpFile).catch(() => {
+                });
+              } else {
+                throw renameError;
+              }
+            }
           } catch (error40) {
+            if (tmpFile) {
+              await fs73.unlink(tmpFile).catch(() => {
+              });
+            }
+            const reason = error40 instanceof Error ? error40.message : String(error40);
             coreEvents.emitFeedback(
               "error",
-              `Failed to persist policy for ${toolName}`,
+              `Failed to persist policy for ${toolName}: ${reason}`,
               error40
             );
           }
@@ -387432,7 +387458,7 @@ import { readdir as readdir11, stat as stat11 } from "node:fs/promises";
 import * as sp2 from "node:path";
 
 // packages/core/node_modules/readdirp/index.js
-import { lstat as lstat3, readdir as readdir10, realpath as realpath4, stat as stat9 } from "node:fs/promises";
+import { lstat as lstat4, readdir as readdir10, realpath as realpath4, stat as stat9 } from "node:fs/promises";
 import { join as pjoin, relative as prelative, resolve as presolve, sep as psep } from "node:path";
 import { Readable as Readable4 } from "node:stream";
 var EntryTypes = {
@@ -387513,7 +387539,7 @@ var ReaddirpStream = class extends Readable4 {
     const { root, type: type2 } = opts;
     this._fileFilter = normalizeFilter(opts.fileFilter);
     this._directoryFilter = normalizeFilter(opts.directoryFilter);
-    const statMethod = opts.lstat ? lstat3 : stat9;
+    const statMethod = opts.lstat ? lstat4 : stat9;
     if (wantBigintFsStats) {
       this._stat = (path113) => statMethod(path113, { bigint: true });
     } else {
@@ -387623,7 +387649,7 @@ var ReaddirpStream = class extends Readable4 {
       const full = entry.fullPath;
       try {
         const entryRealPath = await realpath4(full);
-        const entryRealPathStats = await lstat3(entryRealPath);
+        const entryRealPathStats = await lstat4(entryRealPath);
         if (entryRealPathStats.isFile()) {
           return "file";
         }
@@ -387666,7 +387692,7 @@ function readdirp(root, options = {}) {
 
 // packages/core/node_modules/chokidar/handler.js
 import { watch as fs_watch, unwatchFile, watchFile } from "node:fs";
-import { realpath as fsrealpath, lstat as lstat4, open as open7, stat as stat10 } from "node:fs/promises";
+import { realpath as fsrealpath, lstat as lstat5, open as open7, stat as stat10 } from "node:fs/promises";
 import { type as osType } from "node:os";
 import * as sp from "node:path";
 var STR_DATA = "data";
@@ -387693,7 +387719,7 @@ var EVENTS = {
 };
 var EV = EVENTS;
 var THROTTLE_MODE_WATCH = "watch";
-var statMethods = { lstat: lstat4, stat: stat10 };
+var statMethods = { lstat: lstat5, stat: stat10 };
 var KEY_LISTENERS = "listeners";
 var KEY_ERR = "errHandlers";
 var KEY_RAW = "rawEmitters";

package/bundle/{chunk-QFWAILKU.js → chunk-P2LFCR6H.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   exitCli,
   require_source
-} from "./chunk-QMCEWHRR.js";
+} from "./chunk-WXZDGQ54.js";
 import {
   DEFAULT_PORT,
   SERVER_START_WAIT_MS,
@@ -14,10 +14,10 @@ import {
   isServerRunning,
   resolveGemmaConfig,
   writeServerProcessInfo
-} from "./chunk-EG7USKV5.js";
+} from "./chunk-WMO6YVSB.js";
 import {
   debugLogger
-} from "./chunk-KOJR46UO.js";
+} from "./chunk-PML6IHTI.js";
 import {
   __toESM
 } from "./chunk-34MYV7JD.js";

package/bundle/{chunk-KOJR46UO.js → chunk-PML6IHTI.js}

@@ -3017,8 +3017,8 @@ var require_graceful_fs = __commonJS({
       }
       var fs$copyFile = fs95.copyFile;
       if (fs$copyFile)
-        fs95.copyFile = copyFile;
-      function copyFile(src, dest, flags2, cb) {
+        fs95.copyFile = copyFile2;
+      function copyFile2(src, dest, flags2, cb) {
         if (typeof flags2 === "function") {
           cb = flags2;
           flags2 = 0;
@@ -14069,7 +14069,7 @@ var require_filesubjecttokensupplier = __commonJS({
     }));
     var realpath5 = (0, util_1.promisify)(fs94.realpath ?? (() => {
     }));
-    var lstat5 = (0, util_1.promisify)(fs94.lstat ?? (() => {
+    var lstat6 = (0, util_1.promisify)(fs94.lstat ?? (() => {
     }));
     var FileSubjectTokenSupplier = class {
       filePath;
@@ -14095,7 +14095,7 @@ var require_filesubjecttokensupplier = __commonJS({
         let parsedFilePath = this.filePath;
         try {
           parsedFilePath = await realpath5(parsedFilePath);
-          if (!(await lstat5(parsedFilePath)).isFile()) {
+          if (!(await lstat6(parsedFilePath)).isFile()) {
             throw new Error();
           }
         } catch (err2) {
@@ -25004,7 +25004,7 @@ var require_filesubjecttokensupplier2 = __commonJS({
     });
     var realpath5 = (0, util_1.promisify)((_b = fs94.realpath) !== null && _b !== void 0 ? _b : () => {
     });
-    var lstat5 = (0, util_1.promisify)((_c = fs94.lstat) !== null && _c !== void 0 ? _c : () => {
+    var lstat6 = (0, util_1.promisify)((_c = fs94.lstat) !== null && _c !== void 0 ? _c : () => {
     });
     var FileSubjectTokenSupplier = class {
       /**
@@ -25027,7 +25027,7 @@ var require_filesubjecttokensupplier2 = __commonJS({
         let parsedFilePath = this.filePath;
         try {
           parsedFilePath = await realpath5(parsedFilePath);
-          if (!(await lstat5(parsedFilePath)).isFile()) {
+          if (!(await lstat6(parsedFilePath)).isFile()) {
             throw new Error();
           }
         } catch (err2) {
@@ -279300,8 +279300,8 @@ function isValidToolName(name3, options = {}) {
 }
 
 // packages/core/dist/src/generated/git-commit.js
-var GIT_COMMIT_INFO = "700c96118";
-var CLI_VERSION = "0.46.0-preview.0";
+var GIT_COMMIT_INFO = "4196596f7";
+var CLI_VERSION = "0.47.0-nightly.20260602.gcfcecebe8";
 
 // packages/core/dist/src/ide/detect-ide.js
 var IDE_DEFINITIONS = {
@@ -303466,7 +303466,7 @@ function getVersion() {
   }
   versionPromise = (async () => {
     const pkgJson = await getPackageJson(__dirname4);
-    return "0.46.0-preview.0";
+    return "0.47.0-nightly.20260602.gcfcecebe8";
   })();
   return versionPromise;
 }
@@ -335804,7 +335804,7 @@ var A2AAuthProviderFactory = class _A2AAuthProviderFactory {
         return provider;
       }
       case "oauth2": {
-        const { OAuth2AuthProvider } = await import("./oauth2-provider-3WXIASQA.js");
+        const { OAuth2AuthProvider } = await import("./oauth2-provider-Z6MAYPWZ.js");
         const provider = new OAuth2AuthProvider(authConfig, options.agentName ?? "unknown", agentCard, options.agentCardUrl);
         await provider.initialize();
         return provider;
@@ -361489,6 +361489,7 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
     }
     if (message.persist) {
       persistenceQueue = persistenceQueue.then(async () => {
+        let tmpFile;
         try {
           const policyFile = message.persistScope === "workspace" ? storage2.getWorkspaceAutoSavedPolicyPath() : storage2.getAutoSavedPolicyPath();
           await fs73.mkdir(path83.dirname(policyFile), { recursive: true });
@@ -361500,8 +361501,16 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
               existingData = parsed;
             }
           } catch (error40) {
-            if (!isNodeError(error40) || error40.code !== "ENOENT") {
-              debugLogger.warn(`Failed to parse ${policyFile}, overwriting with new policy.`, error40);
+            if (isNodeError(error40) && error40.code === "ENOENT") {
+            } else if (!isNodeError(error40)) {
+              coreEvents.emitFeedback("warning", `Syntax error found in policy file. Backing up corrupted file to ${policyFile}.bak and starting fresh.`);
+              if (!(await fs73.lstat(policyFile).catch(() => null))?.isSymbolicLink()) {
+                await fs73.copyFile(policyFile, `${policyFile}.bak`).catch(() => {
+                });
+              }
+              existingData = {};
+            } else {
+              throw error40;
             }
           }
           if (!existingData.rule) {
@@ -361532,7 +361541,7 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
           }
           const newContent = import_toml3.default.stringify(existingData);
           const tmpSuffix = crypto18.randomBytes(8).toString("hex");
-          const tmpFile = `${policyFile}.${tmpSuffix}.tmp`;
+          tmpFile = `${policyFile}.${tmpSuffix}.tmp`;
           let handle2;
           try {
             handle2 = await fs73.open(tmpFile, "wx");
@@ -361540,9 +361549,26 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
           } finally {
             await handle2?.close();
           }
-          await fs73.rename(tmpFile, policyFile);
+          try {
+            await fs73.rename(tmpFile, policyFile);
+          } catch (renameError) {
+            if (isNodeError(renameError) && (renameError.code === "EXDEV" || renameError.code === "EBUSY")) {
+              if ((await fs73.lstat(policyFile).catch(() => null))?.isSymbolicLink())
+                throw renameError;
+              await fs73.copyFile(tmpFile, policyFile);
+              await fs73.unlink(tmpFile).catch(() => {
+              });
+            } else {
+              throw renameError;
+            }
+          }
         } catch (error40) {
-          coreEvents.emitFeedback("error", `Failed to persist policy for ${toolName}`, error40);
+          if (tmpFile) {
+            await fs73.unlink(tmpFile).catch(() => {
+            });
+          }
+          const reason = error40 instanceof Error ? error40.message : String(error40);
+          coreEvents.emitFeedback("error", `Failed to persist policy for ${toolName}: ${reason}`, error40);
         }
       });
     }
@@ -381153,7 +381179,7 @@ import { readdir as readdir11, stat as stat11 } from "node:fs/promises";
 import * as sp2 from "node:path";
 
 // packages/core/node_modules/readdirp/index.js
-import { lstat as lstat3, readdir as readdir10, realpath as realpath4, stat as stat9 } from "node:fs/promises";
+import { lstat as lstat4, readdir as readdir10, realpath as realpath4, stat as stat9 } from "node:fs/promises";
 import { join as pjoin, relative as prelative, resolve as presolve, sep as psep } from "node:path";
 import { Readable as Readable4 } from "node:stream";
 var EntryTypes = {
@@ -381234,7 +381260,7 @@ var ReaddirpStream = class extends Readable4 {
     const { root, type: type2 } = opts;
     this._fileFilter = normalizeFilter(opts.fileFilter);
     this._directoryFilter = normalizeFilter(opts.directoryFilter);
-    const statMethod = opts.lstat ? lstat3 : stat9;
+    const statMethod = opts.lstat ? lstat4 : stat9;
     if (wantBigintFsStats) {
       this._stat = (path113) => statMethod(path113, { bigint: true });
     } else {
@@ -381344,7 +381370,7 @@ var ReaddirpStream = class extends Readable4 {
       const full = entry.fullPath;
       try {
         const entryRealPath = await realpath4(full);
-        const entryRealPathStats = await lstat3(entryRealPath);
+        const entryRealPathStats = await lstat4(entryRealPath);
         if (entryRealPathStats.isFile()) {
           return "file";
         }
@@ -381387,7 +381413,7 @@ function readdirp(root, options = {}) {
 
 // packages/core/node_modules/chokidar/handler.js
 import { watch as fs_watch, unwatchFile, watchFile } from "node:fs";
-import { realpath as fsrealpath, lstat as lstat4, open as open7, stat as stat10 } from "node:fs/promises";
+import { realpath as fsrealpath, lstat as lstat5, open as open7, stat as stat10 } from "node:fs/promises";
 import { type as osType } from "node:os";
 import * as sp from "node:path";
 var STR_DATA = "data";
@@ -381414,7 +381440,7 @@ var EVENTS = {
 };
 var EV = EVENTS;
 var THROTTLE_MODE_WATCH = "watch";
-var statMethods = { lstat: lstat4, stat: stat10 };
+var statMethods = { lstat: lstat5, stat: stat10 };
 var KEY_LISTENERS = "listeners";
 var KEY_ERR = "errHandlers";
 var KEY_RAW = "rawEmitters";

package/bundle/{chunk-O3UKVEBS.js → chunk-PQODER6W.js}

@@ -6,7 +6,7 @@ import {
 import {
   exitCli,
   require_source
-} from "./chunk-RXYIE5L5.js";
+} from "./chunk-MCHAK65W.js";
 import {
   DEFAULT_BACKGROUND_OPACITY,
   DEFAULT_BORDER_OPACITY,
@@ -58,14 +58,14 @@ import {
   stripUnsafeCharacters,
   toCodePoints,
   validateCustomTheme
-} from "./chunk-5CWORGE3.js";
+} from "./chunk-A3QBI6HT.js";
 import {
   isDevelopment
-} from "./chunk-JPYTHGMI.js";
+} from "./chunk-GRGDQ7OF.js";
 import {
   emptyIcon,
   require_react
-} from "./chunk-WRWCUHAM.js";
+} from "./chunk-BB7JWK6H.js";
 import {
   ALL_EDITORS,
   ApprovalMode,
@@ -243,7 +243,7 @@ import {
   tokenLimit,
   uiTelemetryService,
   unescapePath
-} from "./chunk-ITC7TFJU.js";
+} from "./chunk-UGUHWSGX.js";
 import {
   require_src
 } from "./chunk-TUDYL3X4.js";
@@ -56514,7 +56514,7 @@ var authCommand = {
 import process28 from "node:process";
 
 // packages/cli/src/generated/git-commit.ts
-var GIT_COMMIT_INFO = "0ded806d2";
+var GIT_COMMIT_INFO = "4196596f7";
 
 // packages/cli/src/ui/utils/historyExportUtils.ts
 import * as fsPromises from "node:fs/promises";
@@ -62275,7 +62275,7 @@ Use /mcp auth <server-name> to authenticate.`
         type: "info",
         text: `Starting OAuth authentication for MCP server '${serverName}'...`
       });
-      const { MCPOAuthProvider } = await import("./dist-LIQULVXZ.js");
+      const { MCPOAuthProvider } = await import("./dist-VGFRXX7L.js");
       let oauthConfig = server.oauth;
       if (!oauthConfig) {
         oauthConfig = { enabled: false };

package/bundle/{chunk-R4LEIQZM.js → chunk-S6TN66XT.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   exitCli,
   require_source
-} from "./chunk-VETILJQA.js";
+} from "./chunk-MCHAK65W.js";
 import {
   DEFAULT_PORT,
   SERVER_START_WAIT_MS,
@@ -14,10 +14,10 @@ import {
   isServerRunning,
   resolveGemmaConfig,
   writeServerProcessInfo
-} from "./chunk-4B7MDBUK.js";
+} from "./chunk-A3QBI6HT.js";
 import {
   debugLogger
-} from "./chunk-QEVRJ7HY.js";
+} from "./chunk-UGUHWSGX.js";
 import {
   __toESM
 } from "./chunk-34MYV7JD.js";

package/bundle/{chunk-HQNVDCXK.js → chunk-SHFWC7OK.js}

@@ -5,7 +5,7 @@ import {
   isTelemetrySdkInitialized,
   resetBrowserSession,
   shutdownTelemetry
-} from "./chunk-QEVRJ7HY.js";
+} from "./chunk-UGUHWSGX.js";
 
 // packages/cli/src/utils/cleanup.ts
 import { promises as fs } from "node:fs";

package/bundle/{chunk-WRWCUHAM.js → chunk-SMQML5YF.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   CoreToolCallStatus,
   checkExhaustive
-} from "./chunk-ITC7TFJU.js";
+} from "./chunk-PML6IHTI.js";
 import {
   __commonJS,
   __toESM

package/bundle/{chunk-XVDCGVTF.js → chunk-UGUHWSGX.js}

@@ -3017,8 +3017,8 @@ var require_graceful_fs = __commonJS({
       }
       var fs$copyFile = fs95.copyFile;
       if (fs$copyFile)
-        fs95.copyFile = copyFile;
-      function copyFile(src, dest, flags2, cb) {
+        fs95.copyFile = copyFile2;
+      function copyFile2(src, dest, flags2, cb) {
         if (typeof flags2 === "function") {
           cb = flags2;
           flags2 = 0;
@@ -14069,7 +14069,7 @@ var require_filesubjecttokensupplier = __commonJS({
     }));
     var realpath5 = (0, util_1.promisify)(fs94.realpath ?? (() => {
     }));
-    var lstat5 = (0, util_1.promisify)(fs94.lstat ?? (() => {
+    var lstat6 = (0, util_1.promisify)(fs94.lstat ?? (() => {
     }));
     var FileSubjectTokenSupplier = class {
       filePath;
@@ -14095,7 +14095,7 @@ var require_filesubjecttokensupplier = __commonJS({
         let parsedFilePath = this.filePath;
         try {
           parsedFilePath = await realpath5(parsedFilePath);
-          if (!(await lstat5(parsedFilePath)).isFile()) {
+          if (!(await lstat6(parsedFilePath)).isFile()) {
             throw new Error();
           }
         } catch (err2) {
@@ -25004,7 +25004,7 @@ var require_filesubjecttokensupplier2 = __commonJS({
     });
     var realpath5 = (0, util_1.promisify)((_b = fs94.realpath) !== null && _b !== void 0 ? _b : () => {
     });
-    var lstat5 = (0, util_1.promisify)((_c = fs94.lstat) !== null && _c !== void 0 ? _c : () => {
+    var lstat6 = (0, util_1.promisify)((_c = fs94.lstat) !== null && _c !== void 0 ? _c : () => {
     });
     var FileSubjectTokenSupplier = class {
       /**
@@ -25027,7 +25027,7 @@ var require_filesubjecttokensupplier2 = __commonJS({
         let parsedFilePath = this.filePath;
         try {
           parsedFilePath = await realpath5(parsedFilePath);
-          if (!(await lstat5(parsedFilePath)).isFile()) {
+          if (!(await lstat6(parsedFilePath)).isFile()) {
             throw new Error();
           }
         } catch (err2) {
@@ -279300,8 +279300,8 @@ function isValidToolName(name3, options = {}) {
 }
 
 // packages/core/dist/src/generated/git-commit.js
-var GIT_COMMIT_INFO = "700c96118";
-var CLI_VERSION = "0.46.0-preview.0";
+var GIT_COMMIT_INFO = "4196596f7";
+var CLI_VERSION = "0.47.0-nightly.20260602.gcfcecebe8";
 
 // packages/core/dist/src/ide/detect-ide.js
 var IDE_DEFINITIONS = {
@@ -303466,7 +303466,7 @@ function getVersion() {
   }
   versionPromise = (async () => {
     const pkgJson = await getPackageJson(__dirname4);
-    return "0.46.0-preview.1";
+    return "0.47.0-nightly.20260604.g4196596f7";
   })();
   return versionPromise;
 }
@@ -335804,7 +335804,7 @@ var A2AAuthProviderFactory = class _A2AAuthProviderFactory {
         return provider;
       }
       case "oauth2": {
-        const { OAuth2AuthProvider } = await import("./oauth2-provider-K52EY6RG.js");
+        const { OAuth2AuthProvider } = await import("./oauth2-provider-7XEK25LP.js");
         const provider = new OAuth2AuthProvider(authConfig, options.agentName ?? "unknown", agentCard, options.agentCardUrl);
         await provider.initialize();
         return provider;
@@ -361489,6 +361489,7 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
     }
     if (message.persist) {
       persistenceQueue = persistenceQueue.then(async () => {
+        let tmpFile;
         try {
           const policyFile = message.persistScope === "workspace" ? storage2.getWorkspaceAutoSavedPolicyPath() : storage2.getAutoSavedPolicyPath();
           await fs73.mkdir(path83.dirname(policyFile), { recursive: true });
@@ -361500,8 +361501,16 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
               existingData = parsed;
             }
           } catch (error40) {
-            if (!isNodeError(error40) || error40.code !== "ENOENT") {
-              debugLogger.warn(`Failed to parse ${policyFile}, overwriting with new policy.`, error40);
+            if (isNodeError(error40) && error40.code === "ENOENT") {
+            } else if (!isNodeError(error40)) {
+              coreEvents.emitFeedback("warning", `Syntax error found in policy file. Backing up corrupted file to ${policyFile}.bak and starting fresh.`);
+              if (!(await fs73.lstat(policyFile).catch(() => null))?.isSymbolicLink()) {
+                await fs73.copyFile(policyFile, `${policyFile}.bak`).catch(() => {
+                });
+              }
+              existingData = {};
+            } else {
+              throw error40;
             }
           }
           if (!existingData.rule) {
@@ -361532,7 +361541,7 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
           }
           const newContent = import_toml3.default.stringify(existingData);
           const tmpSuffix = crypto18.randomBytes(8).toString("hex");
-          const tmpFile = `${policyFile}.${tmpSuffix}.tmp`;
+          tmpFile = `${policyFile}.${tmpSuffix}.tmp`;
           let handle2;
           try {
             handle2 = await fs73.open(tmpFile, "wx");
@@ -361540,9 +361549,26 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
           } finally {
             await handle2?.close();
           }
-          await fs73.rename(tmpFile, policyFile);
+          try {
+            await fs73.rename(tmpFile, policyFile);
+          } catch (renameError) {
+            if (isNodeError(renameError) && (renameError.code === "EXDEV" || renameError.code === "EBUSY")) {
+              if ((await fs73.lstat(policyFile).catch(() => null))?.isSymbolicLink())
+                throw renameError;
+              await fs73.copyFile(tmpFile, policyFile);
+              await fs73.unlink(tmpFile).catch(() => {
+              });
+            } else {
+              throw renameError;
+            }
+          }
         } catch (error40) {
-          coreEvents.emitFeedback("error", `Failed to persist policy for ${toolName}`, error40);
+          if (tmpFile) {
+            await fs73.unlink(tmpFile).catch(() => {
+            });
+          }
+          const reason = error40 instanceof Error ? error40.message : String(error40);
+          coreEvents.emitFeedback("error", `Failed to persist policy for ${toolName}: ${reason}`, error40);
         }
       });
     }
@@ -381153,7 +381179,7 @@ import { readdir as readdir11, stat as stat11 } from "node:fs/promises";
 import * as sp2 from "node:path";
 
 // packages/core/node_modules/readdirp/index.js
-import { lstat as lstat3, readdir as readdir10, realpath as realpath4, stat as stat9 } from "node:fs/promises";
+import { lstat as lstat4, readdir as readdir10, realpath as realpath4, stat as stat9 } from "node:fs/promises";
 import { join as pjoin, relative as prelative, resolve as presolve, sep as psep } from "node:path";
 import { Readable as Readable4 } from "node:stream";
 var EntryTypes = {
@@ -381234,7 +381260,7 @@ var ReaddirpStream = class extends Readable4 {
     const { root, type: type2 } = opts;
     this._fileFilter = normalizeFilter(opts.fileFilter);
     this._directoryFilter = normalizeFilter(opts.directoryFilter);
-    const statMethod = opts.lstat ? lstat3 : stat9;
+    const statMethod = opts.lstat ? lstat4 : stat9;
     if (wantBigintFsStats) {
       this._stat = (path113) => statMethod(path113, { bigint: true });
     } else {
@@ -381344,7 +381370,7 @@ var ReaddirpStream = class extends Readable4 {
       const full = entry.fullPath;
       try {
         const entryRealPath = await realpath4(full);
-        const entryRealPathStats = await lstat3(entryRealPath);
+        const entryRealPathStats = await lstat4(entryRealPath);
         if (entryRealPathStats.isFile()) {
           return "file";
         }
@@ -381387,7 +381413,7 @@ function readdirp(root, options = {}) {
 
 // packages/core/node_modules/chokidar/handler.js
 import { watch as fs_watch, unwatchFile, watchFile } from "node:fs";
-import { realpath as fsrealpath, lstat as lstat4, open as open7, stat as stat10 } from "node:fs/promises";
+import { realpath as fsrealpath, lstat as lstat5, open as open7, stat as stat10 } from "node:fs/promises";
 import { type as osType } from "node:os";
 import * as sp from "node:path";
 var STR_DATA = "data";
@@ -381414,7 +381440,7 @@ var EVENTS = {
 };
 var EV = EVENTS;
 var THROTTLE_MODE_WATCH = "watch";
-var statMethods = { lstat: lstat4, stat: stat10 };
+var statMethods = { lstat: lstat5, stat: stat10 };
 var KEY_LISTENERS = "listeners";
 var KEY_ERR = "errHandlers";
 var KEY_RAW = "rawEmitters";