@google/gemini-cli 0.46.0-preview.1 → 0.47.0-nightly.20260605.g4196596f7

package/bundle/{chunk-YIOYXRDP.js → chunk-3W7O744A.js}

@@ -6,7 +6,7 @@ import {
 import {
   exitCli,
   require_source
-} from "./chunk-VETILJQA.js";
+} from "./chunk-K2SOQJMX.js";
 import {
   DEFAULT_BACKGROUND_OPACITY,
   DEFAULT_BORDER_OPACITY,
@@ -58,14 +58,14 @@ import {
   stripUnsafeCharacters,
   toCodePoints,
   validateCustomTheme
-} from "./chunk-4B7MDBUK.js";
+} from "./chunk-H3N5WAYS.js";
 import {
   isDevelopment
-} from "./chunk-3EC3ZLRQ.js";
+} from "./chunk-FKA6UHBW.js";
 import {
   emptyIcon,
   require_react
-} from "./chunk-YINW7YTJ.js";
+} from "./chunk-KAOVKGFU.js";
 import {
   ALL_EDITORS,
   ApprovalMode,
@@ -230,7 +230,7 @@ import {
   tokenLimit,
   uiTelemetryService,
   unescapePath
-} from "./chunk-QEVRJ7HY.js";
+} from "./chunk-OQQDPZ7U.js";
 import {
   require_src
 } from "./chunk-TUDYL3X4.js";
@@ -56501,7 +56501,7 @@ var authCommand = {
 import process28 from "node:process";
 
 // packages/cli/src/generated/git-commit.ts
-var GIT_COMMIT_INFO = "700c96118";
+var GIT_COMMIT_INFO = "4196596f7";
 
 // packages/cli/src/ui/utils/historyExportUtils.ts
 import * as fsPromises from "node:fs/promises";
@@ -62262,7 +62262,7 @@ Use /mcp auth <server-name> to authenticate.`
         type: "info",
         text: `Starting OAuth authentication for MCP server '${serverName}'...`
       });
-      const { MCPOAuthProvider } = await import("./core-3UQQYNJF.js");
+      const { MCPOAuthProvider } = await import("./core-63AY4S7W.js");
       let oauthConfig = server.oauth;
       if (!oauthConfig) {
         oauthConfig = { enabled: false };

package/bundle/{chunk-5CWORGE3.js → chunk-74B75BQV.js}

@@ -32,7 +32,7 @@ import {
   require_strip_json_comments,
   sanitizeFilenamePart,
   stripAnsi
-} from "./chunk-ITC7TFJU.js";
+} from "./chunk-LJF3I3XH.js";
 import {
   __commonJS,
   __require,

package/bundle/{chunk-UM53YDCH.js → chunk-AMNFGDP3.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   CoreToolCallStatus,
   checkExhaustive
-} from "./chunk-KOJR46UO.js";
+} from "./chunk-LJF3I3XH.js";
 import {
   __commonJS,
   __toESM

package/bundle/{chunk-7Y6NU65D.js → chunk-AW75DLSA.js}

@@ -5,7 +5,7 @@ import {
   isTelemetrySdkInitialized,
   resetBrowserSession,
   shutdownTelemetry
-} from "./chunk-ITC7TFJU.js";
+} from "./chunk-OQQDPZ7U.js";
 
 // packages/cli/src/utils/cleanup.ts
 import { promises as fs } from "node:fs";

package/bundle/{chunk-EG7USKV5.js → chunk-DIEVWRYU.js}

@@ -32,7 +32,7 @@ import {
   require_strip_json_comments,
   sanitizeFilenamePart,
   stripAnsi
-} from "./chunk-KOJR46UO.js";
+} from "./chunk-EEJECZXO.js";
 import {
   __commonJS,
   __require,

package/bundle/{chunk-ITC7TFJU.js → chunk-EEJECZXO.js}

@@ -3017,8 +3017,8 @@ var require_graceful_fs = __commonJS({
       }
       var fs$copyFile = fs95.copyFile;
       if (fs$copyFile)
-        fs95.copyFile = copyFile;
-      function copyFile(src, dest, flags2, cb) {
+        fs95.copyFile = copyFile2;
+      function copyFile2(src, dest, flags2, cb) {
         if (typeof flags2 === "function") {
           cb = flags2;
           flags2 = 0;
@@ -14069,7 +14069,7 @@ var require_filesubjecttokensupplier = __commonJS({
     }));
     var realpath5 = (0, util_1.promisify)(fs94.realpath ?? (() => {
     }));
-    var lstat5 = (0, util_1.promisify)(fs94.lstat ?? (() => {
+    var lstat6 = (0, util_1.promisify)(fs94.lstat ?? (() => {
     }));
     var FileSubjectTokenSupplier = class {
       filePath;
@@ -14095,7 +14095,7 @@ var require_filesubjecttokensupplier = __commonJS({
         let parsedFilePath = this.filePath;
         try {
           parsedFilePath = await realpath5(parsedFilePath);
-          if (!(await lstat5(parsedFilePath)).isFile()) {
+          if (!(await lstat6(parsedFilePath)).isFile()) {
             throw new Error();
           }
         } catch (err2) {
@@ -25004,7 +25004,7 @@ var require_filesubjecttokensupplier2 = __commonJS({
     });
     var realpath5 = (0, util_1.promisify)((_b = fs94.realpath) !== null && _b !== void 0 ? _b : () => {
     });
-    var lstat5 = (0, util_1.promisify)((_c = fs94.lstat) !== null && _c !== void 0 ? _c : () => {
+    var lstat6 = (0, util_1.promisify)((_c = fs94.lstat) !== null && _c !== void 0 ? _c : () => {
     });
     var FileSubjectTokenSupplier = class {
       /**
@@ -25027,7 +25027,7 @@ var require_filesubjecttokensupplier2 = __commonJS({
         let parsedFilePath = this.filePath;
         try {
           parsedFilePath = await realpath5(parsedFilePath);
-          if (!(await lstat5(parsedFilePath)).isFile()) {
+          if (!(await lstat6(parsedFilePath)).isFile()) {
             throw new Error();
           }
         } catch (err2) {
@@ -279300,8 +279300,8 @@ function isValidToolName(name3, options = {}) {
 }
 
 // packages/core/dist/src/generated/git-commit.js
-var GIT_COMMIT_INFO = "700c96118";
-var CLI_VERSION = "0.46.0-preview.1";
+var GIT_COMMIT_INFO = "4196596f7";
+var CLI_VERSION = "0.47.0-nightly.20260605.g4196596f7";
 
 // packages/core/dist/src/ide/detect-ide.js
 var IDE_DEFINITIONS = {
@@ -303466,7 +303466,7 @@ function getVersion() {
   }
   versionPromise = (async () => {
     const pkgJson = await getPackageJson(__dirname4);
-    return "0.46.0-preview.1";
+    return "0.47.0-nightly.20260605.g4196596f7";
   })();
   return versionPromise;
 }
@@ -335804,7 +335804,7 @@ var A2AAuthProviderFactory = class _A2AAuthProviderFactory {
         return provider;
       }
       case "oauth2": {
-        const { OAuth2AuthProvider } = await import("./oauth2-provider-PJJE326A.js");
+        const { OAuth2AuthProvider } = await import("./oauth2-provider-KFSZCFQQ.js");
         const provider = new OAuth2AuthProvider(authConfig, options.agentName ?? "unknown", agentCard, options.agentCardUrl);
         await provider.initialize();
         return provider;
@@ -361489,6 +361489,7 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
     }
     if (message.persist) {
       persistenceQueue = persistenceQueue.then(async () => {
+        let tmpFile;
         try {
           const policyFile = message.persistScope === "workspace" ? storage2.getWorkspaceAutoSavedPolicyPath() : storage2.getAutoSavedPolicyPath();
           await fs73.mkdir(path83.dirname(policyFile), { recursive: true });
@@ -361500,8 +361501,16 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
               existingData = parsed;
             }
           } catch (error40) {
-            if (!isNodeError(error40) || error40.code !== "ENOENT") {
-              debugLogger.warn(`Failed to parse ${policyFile}, overwriting with new policy.`, error40);
+            if (isNodeError(error40) && error40.code === "ENOENT") {
+            } else if (!isNodeError(error40)) {
+              coreEvents.emitFeedback("warning", `Syntax error found in policy file. Backing up corrupted file to ${policyFile}.bak and starting fresh.`);
+              if (!(await fs73.lstat(policyFile).catch(() => null))?.isSymbolicLink()) {
+                await fs73.copyFile(policyFile, `${policyFile}.bak`).catch(() => {
+                });
+              }
+              existingData = {};
+            } else {
+              throw error40;
             }
           }
           if (!existingData.rule) {
@@ -361532,7 +361541,7 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
           }
           const newContent = import_toml3.default.stringify(existingData);
           const tmpSuffix = crypto18.randomBytes(8).toString("hex");
-          const tmpFile = `${policyFile}.${tmpSuffix}.tmp`;
+          tmpFile = `${policyFile}.${tmpSuffix}.tmp`;
           let handle2;
           try {
             handle2 = await fs73.open(tmpFile, "wx");
@@ -361540,9 +361549,26 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
           } finally {
             await handle2?.close();
           }
-          await fs73.rename(tmpFile, policyFile);
+          try {
+            await fs73.rename(tmpFile, policyFile);
+          } catch (renameError) {
+            if (isNodeError(renameError) && (renameError.code === "EXDEV" || renameError.code === "EBUSY")) {
+              if ((await fs73.lstat(policyFile).catch(() => null))?.isSymbolicLink())
+                throw renameError;
+              await fs73.copyFile(tmpFile, policyFile);
+              await fs73.unlink(tmpFile).catch(() => {
+              });
+            } else {
+              throw renameError;
+            }
+          }
         } catch (error40) {
-          coreEvents.emitFeedback("error", `Failed to persist policy for ${toolName}`, error40);
+          if (tmpFile) {
+            await fs73.unlink(tmpFile).catch(() => {
+            });
+          }
+          const reason = error40 instanceof Error ? error40.message : String(error40);
+          coreEvents.emitFeedback("error", `Failed to persist policy for ${toolName}: ${reason}`, error40);
         }
       });
     }
@@ -381153,7 +381179,7 @@ import { readdir as readdir11, stat as stat11 } from "node:fs/promises";
 import * as sp2 from "node:path";
 
 // packages/core/node_modules/readdirp/index.js
-import { lstat as lstat3, readdir as readdir10, realpath as realpath4, stat as stat9 } from "node:fs/promises";
+import { lstat as lstat4, readdir as readdir10, realpath as realpath4, stat as stat9 } from "node:fs/promises";
 import { join as pjoin, relative as prelative, resolve as presolve, sep as psep } from "node:path";
 import { Readable as Readable4 } from "node:stream";
 var EntryTypes = {
@@ -381234,7 +381260,7 @@ var ReaddirpStream = class extends Readable4 {
     const { root, type: type2 } = opts;
     this._fileFilter = normalizeFilter(opts.fileFilter);
     this._directoryFilter = normalizeFilter(opts.directoryFilter);
-    const statMethod = opts.lstat ? lstat3 : stat9;
+    const statMethod = opts.lstat ? lstat4 : stat9;
     if (wantBigintFsStats) {
       this._stat = (path113) => statMethod(path113, { bigint: true });
     } else {
@@ -381344,7 +381370,7 @@ var ReaddirpStream = class extends Readable4 {
       const full = entry.fullPath;
       try {
         const entryRealPath = await realpath4(full);
-        const entryRealPathStats = await lstat3(entryRealPath);
+        const entryRealPathStats = await lstat4(entryRealPath);
         if (entryRealPathStats.isFile()) {
           return "file";
         }
@@ -381387,7 +381413,7 @@ function readdirp(root, options = {}) {
 
 // packages/core/node_modules/chokidar/handler.js
 import { watch as fs_watch, unwatchFile, watchFile } from "node:fs";
-import { realpath as fsrealpath, lstat as lstat4, open as open7, stat as stat10 } from "node:fs/promises";
+import { realpath as fsrealpath, lstat as lstat5, open as open7, stat as stat10 } from "node:fs/promises";
 import { type as osType } from "node:os";
 import * as sp from "node:path";
 var STR_DATA = "data";
@@ -381414,7 +381440,7 @@ var EVENTS = {
 };
 var EV = EVENTS;
 var THROTTLE_MODE_WATCH = "watch";
-var statMethods = { lstat: lstat4, stat: stat10 };
+var statMethods = { lstat: lstat5, stat: stat10 };
 var KEY_LISTENERS = "listeners";
 var KEY_ERR = "errHandlers";
 var KEY_RAW = "rawEmitters";

package/bundle/{chunk-24H54ISH.js → chunk-EO3RKLTR.js}

@@ -6,7 +6,7 @@ import {
 import {
   exitCli,
   require_source
-} from "./chunk-QMCEWHRR.js";
+} from "./chunk-WXZDGQ54.js";
 import {
   DEFAULT_BACKGROUND_OPACITY,
   DEFAULT_BORDER_OPACITY,
@@ -58,14 +58,14 @@ import {
   stripUnsafeCharacters,
   toCodePoints,
   validateCustomTheme
-} from "./chunk-EG7USKV5.js";
+} from "./chunk-WMO6YVSB.js";
 import {
   isDevelopment
-} from "./chunk-EZDKSTIF.js";
+} from "./chunk-XYFHAF63.js";
 import {
   emptyIcon,
   require_react
-} from "./chunk-UM53YDCH.js";
+} from "./chunk-SMQML5YF.js";
 import {
   ALL_EDITORS,
   ApprovalMode,
@@ -243,7 +243,7 @@ import {
   tokenLimit,
   uiTelemetryService,
   unescapePath
-} from "./chunk-KOJR46UO.js";
+} from "./chunk-PML6IHTI.js";
 import {
   require_src
 } from "./chunk-TUDYL3X4.js";
@@ -56514,7 +56514,7 @@ var authCommand = {
 import process28 from "node:process";
 
 // packages/cli/src/generated/git-commit.ts
-var GIT_COMMIT_INFO = "700c96118";
+var GIT_COMMIT_INFO = "4196596f7";
 
 // packages/cli/src/ui/utils/historyExportUtils.ts
 import * as fsPromises from "node:fs/promises";
@@ -62275,7 +62275,7 @@ Use /mcp auth <server-name> to authenticate.`
         type: "info",
         text: `Starting OAuth authentication for MCP server '${serverName}'...`
       });
-      const { MCPOAuthProvider } = await import("./dist-4NVM6I2N.js");
+      const { MCPOAuthProvider } = await import("./dist-YXW6V43L.js");
       let oauthConfig = server.oauth;
       if (!oauthConfig) {
         oauthConfig = { enabled: false };

package/bundle/{chunk-5IBYZHR7.js → chunk-FKA6UHBW.js}

@@ -1,13 +1,13 @@
 const require = (await import('node:module')).createRequire(import.meta.url); const __chunk_filename = (await import('node:url')).fileURLToPath(import.meta.url); const __chunk_dirname = (await import('node:path')).dirname(__chunk_filename);
 import {
   runExitCleanup
-} from "./chunk-GRD2P7HY.js";
+} from "./chunk-AW75DLSA.js";
 import {
   RELEASE_CHANNEL_STABILITY,
   debugLogger,
   getChannelFromVersion,
   isGitRepository
-} from "./chunk-XVDCGVTF.js";
+} from "./chunk-OQQDPZ7U.js";
 
 // packages/cli/src/utils/installationInfo.ts
 import * as fs from "node:fs";

package/bundle/{chunk-4B7MDBUK.js → chunk-H3N5WAYS.js}

@@ -29,7 +29,7 @@ import {
   require_strip_json_comments,
   sanitizeFilenamePart,
   stripAnsi
-} from "./chunk-QEVRJ7HY.js";
+} from "./chunk-OQQDPZ7U.js";
 import {
   __commonJS,
   __require,

package/bundle/{chunk-JF6RJW53.js → chunk-JSS7IYM6.js}

@@ -1,7 +1,7 @@
 const require = (await import('node:module')).createRequire(import.meta.url); const __chunk_filename = (await import('node:url')).fileURLToPath(import.meta.url); const __chunk_dirname = (await import('node:path')).dirname(__chunk_filename);
 import {
   runExitCleanup
-} from "./chunk-GRD2P7HY.js";
+} from "./chunk-T6IVWXQ5.js";
 import {
   __commonJS,
   __require

package/bundle/{chunk-QMCEWHRR.js → chunk-K2SOQJMX.js}

@@ -1,7 +1,7 @@
 const require = (await import('node:module')).createRequire(import.meta.url); const __chunk_filename = (await import('node:url')).fileURLToPath(import.meta.url); const __chunk_dirname = (await import('node:path')).dirname(__chunk_filename);
 import {
   runExitCleanup
-} from "./chunk-3WW2LTMX.js";
+} from "./chunk-AW75DLSA.js";
 import {
   __commonJS,
   __require

package/bundle/{chunk-YINW7YTJ.js → chunk-KAOVKGFU.js}

@@ -1,7 +1,7 @@
 const require = (await import('node:module')).createRequire(import.meta.url); const __chunk_filename = (await import('node:url')).fileURLToPath(import.meta.url); const __chunk_dirname = (await import('node:path')).dirname(__chunk_filename);
 import {
   checkExhaustive
-} from "./chunk-QEVRJ7HY.js";
+} from "./chunk-OQQDPZ7U.js";
 import {
   __commonJS,
   __toESM

package/bundle/{chunk-ONUDATHO.js → chunk-LFOB62B3.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   exitCli,
   require_source
-} from "./chunk-RXYIE5L5.js";
+} from "./chunk-YYYIXNU5.js";
 import {
   DEFAULT_PORT,
   SERVER_START_WAIT_MS,
@@ -14,10 +14,10 @@ import {
   isServerRunning,
   resolveGemmaConfig,
   writeServerProcessInfo
-} from "./chunk-5CWORGE3.js";
+} from "./chunk-DIEVWRYU.js";
 import {
   debugLogger
-} from "./chunk-ITC7TFJU.js";
+} from "./chunk-EEJECZXO.js";
 import {
   __toESM
 } from "./chunk-34MYV7JD.js";

package/bundle/{chunk-KOJR46UO.js → chunk-LJF3I3XH.js}

@@ -3017,8 +3017,8 @@ var require_graceful_fs = __commonJS({
       }
       var fs$copyFile = fs95.copyFile;
       if (fs$copyFile)
-        fs95.copyFile = copyFile;
-      function copyFile(src, dest, flags2, cb) {
+        fs95.copyFile = copyFile2;
+      function copyFile2(src, dest, flags2, cb) {
         if (typeof flags2 === "function") {
           cb = flags2;
           flags2 = 0;
@@ -14069,7 +14069,7 @@ var require_filesubjecttokensupplier = __commonJS({
     }));
     var realpath5 = (0, util_1.promisify)(fs94.realpath ?? (() => {
     }));
-    var lstat5 = (0, util_1.promisify)(fs94.lstat ?? (() => {
+    var lstat6 = (0, util_1.promisify)(fs94.lstat ?? (() => {
     }));
     var FileSubjectTokenSupplier = class {
       filePath;
@@ -14095,7 +14095,7 @@ var require_filesubjecttokensupplier = __commonJS({
         let parsedFilePath = this.filePath;
         try {
           parsedFilePath = await realpath5(parsedFilePath);
-          if (!(await lstat5(parsedFilePath)).isFile()) {
+          if (!(await lstat6(parsedFilePath)).isFile()) {
             throw new Error();
           }
         } catch (err2) {
@@ -25004,7 +25004,7 @@ var require_filesubjecttokensupplier2 = __commonJS({
     });
     var realpath5 = (0, util_1.promisify)((_b = fs94.realpath) !== null && _b !== void 0 ? _b : () => {
     });
-    var lstat5 = (0, util_1.promisify)((_c = fs94.lstat) !== null && _c !== void 0 ? _c : () => {
+    var lstat6 = (0, util_1.promisify)((_c = fs94.lstat) !== null && _c !== void 0 ? _c : () => {
     });
     var FileSubjectTokenSupplier = class {
       /**
@@ -25027,7 +25027,7 @@ var require_filesubjecttokensupplier2 = __commonJS({
         let parsedFilePath = this.filePath;
         try {
           parsedFilePath = await realpath5(parsedFilePath);
-          if (!(await lstat5(parsedFilePath)).isFile()) {
+          if (!(await lstat6(parsedFilePath)).isFile()) {
             throw new Error();
           }
         } catch (err2) {
@@ -279300,8 +279300,8 @@ function isValidToolName(name3, options = {}) {
 }
 
 // packages/core/dist/src/generated/git-commit.js
-var GIT_COMMIT_INFO = "700c96118";
-var CLI_VERSION = "0.46.0-preview.0";
+var GIT_COMMIT_INFO = "4196596f7";
+var CLI_VERSION = "0.47.0-nightly.20260602.gcfcecebe8";
 
 // packages/core/dist/src/ide/detect-ide.js
 var IDE_DEFINITIONS = {
@@ -303466,7 +303466,7 @@ function getVersion() {
   }
   versionPromise = (async () => {
     const pkgJson = await getPackageJson(__dirname4);
-    return "0.46.0-preview.0";
+    return "0.47.0-nightly.20260605.g4196596f7";
   })();
   return versionPromise;
 }
@@ -335804,7 +335804,7 @@ var A2AAuthProviderFactory = class _A2AAuthProviderFactory {
         return provider;
       }
       case "oauth2": {
-        const { OAuth2AuthProvider } = await import("./oauth2-provider-3WXIASQA.js");
+        const { OAuth2AuthProvider } = await import("./oauth2-provider-XX6LWKOJ.js");
         const provider = new OAuth2AuthProvider(authConfig, options.agentName ?? "unknown", agentCard, options.agentCardUrl);
         await provider.initialize();
         return provider;
@@ -361489,6 +361489,7 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
     }
     if (message.persist) {
       persistenceQueue = persistenceQueue.then(async () => {
+        let tmpFile;
         try {
           const policyFile = message.persistScope === "workspace" ? storage2.getWorkspaceAutoSavedPolicyPath() : storage2.getAutoSavedPolicyPath();
           await fs73.mkdir(path83.dirname(policyFile), { recursive: true });
@@ -361500,8 +361501,16 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
               existingData = parsed;
             }
           } catch (error40) {
-            if (!isNodeError(error40) || error40.code !== "ENOENT") {
-              debugLogger.warn(`Failed to parse ${policyFile}, overwriting with new policy.`, error40);
+            if (isNodeError(error40) && error40.code === "ENOENT") {
+            } else if (!isNodeError(error40)) {
+              coreEvents.emitFeedback("warning", `Syntax error found in policy file. Backing up corrupted file to ${policyFile}.bak and starting fresh.`);
+              if (!(await fs73.lstat(policyFile).catch(() => null))?.isSymbolicLink()) {
+                await fs73.copyFile(policyFile, `${policyFile}.bak`).catch(() => {
+                });
+              }
+              existingData = {};
+            } else {
+              throw error40;
             }
           }
           if (!existingData.rule) {
@@ -361532,7 +361541,7 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
           }
           const newContent = import_toml3.default.stringify(existingData);
           const tmpSuffix = crypto18.randomBytes(8).toString("hex");
-          const tmpFile = `${policyFile}.${tmpSuffix}.tmp`;
+          tmpFile = `${policyFile}.${tmpSuffix}.tmp`;
           let handle2;
           try {
             handle2 = await fs73.open(tmpFile, "wx");
@@ -361540,9 +361549,26 @@ function createPolicyUpdater(policyEngine, messageBus, storage2) {
           } finally {
             await handle2?.close();
           }
-          await fs73.rename(tmpFile, policyFile);
+          try {
+            await fs73.rename(tmpFile, policyFile);
+          } catch (renameError) {
+            if (isNodeError(renameError) && (renameError.code === "EXDEV" || renameError.code === "EBUSY")) {
+              if ((await fs73.lstat(policyFile).catch(() => null))?.isSymbolicLink())
+                throw renameError;
+              await fs73.copyFile(tmpFile, policyFile);
+              await fs73.unlink(tmpFile).catch(() => {
+              });
+            } else {
+              throw renameError;
+            }
+          }
         } catch (error40) {
-          coreEvents.emitFeedback("error", `Failed to persist policy for ${toolName}`, error40);
+          if (tmpFile) {
+            await fs73.unlink(tmpFile).catch(() => {
+            });
+          }
+          const reason = error40 instanceof Error ? error40.message : String(error40);
+          coreEvents.emitFeedback("error", `Failed to persist policy for ${toolName}: ${reason}`, error40);
         }
       });
     }
@@ -381153,7 +381179,7 @@ import { readdir as readdir11, stat as stat11 } from "node:fs/promises";
 import * as sp2 from "node:path";
 
 // packages/core/node_modules/readdirp/index.js
-import { lstat as lstat3, readdir as readdir10, realpath as realpath4, stat as stat9 } from "node:fs/promises";
+import { lstat as lstat4, readdir as readdir10, realpath as realpath4, stat as stat9 } from "node:fs/promises";
 import { join as pjoin, relative as prelative, resolve as presolve, sep as psep } from "node:path";
 import { Readable as Readable4 } from "node:stream";
 var EntryTypes = {
@@ -381234,7 +381260,7 @@ var ReaddirpStream = class extends Readable4 {
     const { root, type: type2 } = opts;
     this._fileFilter = normalizeFilter(opts.fileFilter);
     this._directoryFilter = normalizeFilter(opts.directoryFilter);
-    const statMethod = opts.lstat ? lstat3 : stat9;
+    const statMethod = opts.lstat ? lstat4 : stat9;
     if (wantBigintFsStats) {
       this._stat = (path113) => statMethod(path113, { bigint: true });
     } else {
@@ -381344,7 +381370,7 @@ var ReaddirpStream = class extends Readable4 {
       const full = entry.fullPath;
       try {
         const entryRealPath = await realpath4(full);
-        const entryRealPathStats = await lstat3(entryRealPath);
+        const entryRealPathStats = await lstat4(entryRealPath);
         if (entryRealPathStats.isFile()) {
           return "file";
         }
@@ -381387,7 +381413,7 @@ function readdirp(root, options = {}) {
 
 // packages/core/node_modules/chokidar/handler.js
 import { watch as fs_watch, unwatchFile, watchFile } from "node:fs";
-import { realpath as fsrealpath, lstat as lstat4, open as open7, stat as stat10 } from "node:fs/promises";
+import { realpath as fsrealpath, lstat as lstat5, open as open7, stat as stat10 } from "node:fs/promises";
 import { type as osType } from "node:os";
 import * as sp from "node:path";
 var STR_DATA = "data";
@@ -381414,7 +381440,7 @@ var EVENTS = {
 };
 var EV = EVENTS;
 var THROTTLE_MODE_WATCH = "watch";
-var statMethods = { lstat: lstat4, stat: stat10 };
+var statMethods = { lstat: lstat5, stat: stat10 };
 var KEY_LISTENERS = "listeners";
 var KEY_ERR = "errHandlers";
 var KEY_RAW = "rawEmitters";

package/bundle/{chunk-3EC3ZLRQ.js → chunk-MLWGH3HC.js}

@@ -1,13 +1,13 @@
 const require = (await import('node:module')).createRequire(import.meta.url); const __chunk_filename = (await import('node:url')).fileURLToPath(import.meta.url); const __chunk_dirname = (await import('node:path')).dirname(__chunk_filename);
 import {
   runExitCleanup
-} from "./chunk-HQNVDCXK.js";
+} from "./chunk-TKQVT37U.js";
 import {
   RELEASE_CHANNEL_STABILITY,
   debugLogger,
   getChannelFromVersion,
   isGitRepository
-} from "./chunk-QEVRJ7HY.js";
+} from "./chunk-EEJECZXO.js";
 
 // packages/cli/src/utils/installationInfo.ts
 import * as fs from "node:fs";

package/bundle/{chunk-GRD2P7HY.js → chunk-NGEP3723.js}

@@ -5,7 +5,7 @@ import {
   isTelemetrySdkInitialized,
   resetBrowserSession,
   shutdownTelemetry
-} from "./chunk-XVDCGVTF.js";
+} from "./chunk-PML6IHTI.js";
 
 // packages/cli/src/utils/cleanup.ts
 import { promises as fs } from "node:fs";

package/bundle/{chunk-VEHSYWQT.js → chunk-O2EKTC5B.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   CoreToolCallStatus,
   checkExhaustive
-} from "./chunk-XVDCGVTF.js";
+} from "./chunk-EEJECZXO.js";
 import {
   __commonJS,
   __toESM