@google/gemini-cli 0.52.0 → 0.54.0-nightly.20260726.g3818efbbf

package/bundle/docs/CONTRIBUTING.md

@@ -421,9 +421,9 @@ To debug the CLI's React-based UI, you can use React DevTools.
 
 On macOS, `gemini` uses Seatbelt (`sandbox-exec`) under a `permissive-open`
 profile (see `packages/cli/src/utils/sandbox-macos-permissive-open.sb`) that
-restricts writes to the project folder but otherwise allows all other operations
-and outbound network traffic ("open") by default. You can switch to a
-`strict-open` profile (see
+denies operations by default, confining writes to the project folder while
+allowing broad file reads and outbound network traffic ("open") by default. You
+can switch to a `strict-open` profile (see
 `packages/cli/src/utils/sandbox-macos-strict-open.sb`) that restricts both reads
 and writes to the working directory while allowing outbound network traffic by
 setting `SEATBELT_PROFILE=strict-open` in your environment or `.env` file.

package/bundle/docs/changelogs/index.md

@@ -18,6 +18,26 @@ on GitHub.
 | [Preview](preview.md) | Experimental features ready for early feedback. |
 | [Stable](latest.md)   | Stable, recommended for general use.            |
 
+## Announcements: v0.52.0 - 2026-07-22
+
+- **Caretaker Triage & Egress Services:** Implemented the core triage worker
+  foundational modules, main worker execution loops, and egress action
+  publishers alongside the octokit GitHub Action handler for egress services
+  ([#28163](https://github.com/google-gemini/gemini-cli/pull/28163),
+  [#28306](https://github.com/google-gemini/gemini-cli/pull/28306) by @chadd28).
+- **Core Tool Enhancements:** Bypassed LLM correction for JSON and IPYNB files
+  in `write_file` and `replace` tools, and simplified plan mode write policy to
+  support relative paths
+  ([#28223](https://github.com/google-gemini/gemini-cli/pull/28223) by
+  @amelidev, [#28398](https://github.com/google-gemini/gemini-cli/pull/28398) by
+  @DavidAPierce).
+- **Auth & Privacy Improvements:** Displayed clear error messages when user
+  account has no Code Assist tier, and bumped `google-auth-library` to version
+  10.9.0 ([#28304](https://github.com/google-gemini/gemini-cli/pull/28304) by
+  @ompatel-aiml,
+  [#28385](https://github.com/google-gemini/gemini-cli/pull/28385) by
+  @jerrylin3321).
+
 ## Announcements: v0.50.0 - 2026-07-08
 
 - **Tool Registry Discovery:** Introduced tool registry discovery capabilities

package/bundle/docs/changelogs/latest.md

@@ -1,6 +1,6 @@
-# Latest stable release: v0.50.0
+# Latest stable release: v0.52.0
 
-Released: July 08, 2026
+Released: July 22, 2026
 
 For most users, our latest stable release is the recommended release. Install
 the latest stable version with:
@@ -11,24 +11,59 @@ npm install -g @google/gemini-cli
 
 ## Highlights
 
-- **Tool Registry Discovery:** Introduced tool registry discovery capabilities,
-  enabling automatic detection and registration of tools to improve
-  extensibility.
-- **Release Verification Improvements:** Enhanced release verification by
-  ignoring scripts during `npm ci` and preventing workspace binary shadowing.
-- **CI Pipeline Safeguards:** Strengthened the CI pipeline to prevent bad NPM
-  releases and ensure promote job failures are correctly surfaced.
+- **Caretaker Services:** Introduced a new caretaker triage worker including
+  core foundational modules, main worker execution loops, egress action
+  publishers, and octokit GitHub Action handlers.
+- **Robust File Editing:** Core tools like `write_file` and `replace` now bypass
+  LLM corrections for JSON and IPYNB files to ensure accurate and direct file
+  modifications.
+- **Plan Mode Improvements:** Simplified plan mode write policies to natively
+  support writing to relative paths, enhancing project directory navigation.
+- **Enhanced Account Visibility:** Improved clear user-facing messages when the
+  user account does not have a Code Assist tier, and enriched shared project
+  quota limit errors with setup instructions.
 
 ## What's Changed
 
-- fix/verify release npm ci ignore scripts by @rmedranollamas in
-  [#28116](https://github.com/google-gemini/gemini-cli/pull/28116)
-- fix(ci): prevent workspace binary shadowing in release verification by
-  @galdawave in [#28132](https://github.com/google-gemini/gemini-cli/pull/28132)
-- Feat/tool registry discovery by @ved015 in
-  [#28113](https://github.com/google-gemini/gemini-cli/pull/28113)
-- fix(ci): prevent bad NPM releases and promote job crashes by @galdawave in
-  [#28147](https://github.com/google-gemini/gemini-cli/pull/28147)
+- Refactor: exclude transient CI configuration files from workspace context by
+  @DavidAPierce in
+  [#28216](https://github.com/google-gemini/gemini-cli/pull/28216)
+- feat(caretaker-triage): add triage worker core foundational modules by
+  @chadd28 in [#28163](https://github.com/google-gemini/gemini-cli/pull/28163)
+- feat(caretaker-egress): implement octokit github action handler for egress
+  service by @chadd28 in
+  [#28303](https://github.com/google-gemini/gemini-cli/pull/28303)
+- chore(release): bump version to 0.52.0-nightly.20260707.g27a3da3e8 by
+  @gemini-cli-robot in
+  [#28323](https://github.com/google-gemini/gemini-cli/pull/28323)
+- Changelog for v0.51.0-preview.0 by @gemini-cli-robot in
+  [#28320](https://github.com/google-gemini/gemini-cli/pull/28320)
+- Changelog for v0.50.0 by @gemini-cli-robot in
+  [#28322](https://github.com/google-gemini/gemini-cli/pull/28322)
+- fix(core-tools): bypass LLM correction for JSON and IPYNB files in write_file
+  and replace by @amelidev in
+  [#28223](https://github.com/google-gemini/gemini-cli/pull/28223)
+- fix(core): use unambiguous previous intent label in fallback summary by
+  @amelidev in [#28343](https://github.com/google-gemini/gemini-cli/pull/28343)
+- feat(caretaker-triage): implement main worker execution loop and egress action
+  publisher by @chadd28 in
+  [#28306](https://github.com/google-gemini/gemini-cli/pull/28306)
+- fix(privacy): show a clear message when the account has no Code Assist tier by
+  @ompatel-aiml in
+  [#28304](https://github.com/google-gemini/gemini-cli/pull/28304)
+- fix(core): enrich shared project quota limit errors with setup hint by
+  @amelidev in [#28391](https://github.com/google-gemini/gemini-cli/pull/28391)
+- fix(a2a-server): ensure task cancellation aborts execution loop by
+  @luisfelipe-alt in
+  [#28316](https://github.com/google-gemini/gemini-cli/pull/28316)
+- fix(core): simplify plan mode write policy to support relative paths by
+  @DavidAPierce in
+  [#28398](https://github.com/google-gemini/gemini-cli/pull/28398)
+- feat(core): Bump node google-auth-library version to 10.9.0 by @jerrylin3321
+  in [#28385](https://github.com/google-gemini/gemini-cli/pull/28385)
+- chore/release: bump version to 0.52.0-nightly.20260715.gfa975395b by
+  @gemini-cli-robot in
+  [#28402](https://github.com/google-gemini/gemini-cli/pull/28402)
 
 **Full Changelog**:
-https://github.com/google-gemini/gemini-cli/compare/v0.49.0...v0.50.0
+https://github.com/google-gemini/gemini-cli/compare/v0.51.0...v0.52.0

package/bundle/docs/changelogs/preview.md

@@ -1,6 +1,6 @@
-# Preview release: v0.51.0-preview.0
+# Preview release: v0.53.0-preview.0
 
-Released: July 8, 2026
+Released: July 22, 2026
 
 Our preview release includes the latest, new, and experimental features. This
 release may not be as stable as our [latest weekly release](latest.md).
@@ -13,53 +13,42 @@ npm install -g @google/gemini-cli@preview
 
 ## Highlights
 
-- **Caretaker Cloud Run Services**: Implemented a Cloud Run webhook ingestion
-  service and egress service skeleton to support advanced caretaker features.
-- **Enhanced Security & Sandbox Hardening**: Enforced a case-insensitive
-  sensitive path blocklist and VS Code human-in-the-loop (HITL) checks, resolved
-  a directory escape vulnerability in the memory import processor, and marked
-  `~/.gitconfig` as read-only within the macOS sandbox.
-- **Improved Thought Leakage and Escape Handling**: Resolved potential thought
-  leakage by stripping thinking/thought processes from scrubbed history turns,
-  and ensured escape sequences in string literals are correctly preserved for
-  modern models.
-- **Robust Path & API Updates**: Enhanced defensive path resolution for
-  at-reference files, and updated the Vertex AI base URL configuration to
-  support the latest API updates.
+- **Caretaker LLM Triage Orchestrator**: Implemented the LLM triage orchestrator
+  and container build configuration to support caretaker triage workflows.
+- **Enhanced Workspace Trust & Sandbox Hardening**: Aligned macOS permissive
+  Seatbelt profiles with the deny-default model and enforced workspace trust and
+  task isolation in the Agent-to-Agent (A2A) server to prevent remote code
+  execution (RCE).
+- **Core Robustness & API Protections**: Mitigated infinite ReAct and prompt
+  injection loops, and prevented 400 Bad Request errors by grouping cancelled
+  tool responses and coalescing consecutive roles.
+- **Robust Credentials & Fallbacks**: Restored the
+  `GOOGLE_APPLICATION_CREDENTIALS` environment variable fallback and
+  sequentially verified cached credentials.
+- **Evaluation Coverage Reporting**: Added a new command to generate
+  comprehensive eval coverage reports.
 
 ## What's Changed
 
-- Changelog for v0.50.0-preview.1 by @gemini-cli-robot in
-  [#28150](https://github.com/google-gemini/gemini-cli/pull/28150)
-- Fix no_proxy test by @jerrylin3321 in
-  [#28131](https://github.com/google-gemini/gemini-cli/pull/28131)
-- chore(release): bump version to 0.51.0-nightly.20260625.g3fbf93e26 by
-  @gemini-cli-robot in
-  [#28151](https://github.com/google-gemini/gemini-cli/pull/28151)
-- Vertex base url update by @DavidAPierce in
-  [#28145](https://github.com/google-gemini/gemini-cli/pull/28145)
-- fix(security): enforce case-insensitive sensitive path blocklist and vscode
-  hitl by @luisfelipe-alt in
-  [#27966](https://github.com/google-gemini/gemini-cli/pull/27966)
-- fix(core-tools): resolve defensive path resolution for at-reference files and
-  fix macOS tests by @luisfelipe-alt in
-  [#28053](https://github.com/google-gemini/gemini-cli/pull/28053)
-- feat(caretaker): implement Cloud Run webhook ingestion service by @chadd28 in
-  [#28015](https://github.com/google-gemini/gemini-cli/pull/28015)
-- fix(core): resolve symbolic link directory escape in memory import processor
-  by @luisfelipe-alt in
-  [#28233](https://github.com/google-gemini/gemini-cli/pull/28233)
-- feat(caretaker): egress cloud run service skeleton by @chadd28 in
-  [#28167](https://github.com/google-gemini/gemini-cli/pull/28167)
-- fix(sandbox): make ~/.gitconfig read-only in the macOS sandbox by
-  @ompatel-aiml in
-  [#28221](https://github.com/google-gemini/gemini-cli/pull/28221)
-- fix(core): preserve escape sequences in string literals for modern models by
+- fix(core,a2a): group cancelled tool responses and coalesce consecutive roles
+  to prevent 400 Bad Request by @luisfelipe-alt in
+  [#28407](https://github.com/google-gemini/gemini-cli/pull/28407)
+- feat(caretaker-triage): implement LLM triage orchestrator and container build
+  by @chadd28 in
+  [#28345](https://github.com/google-gemini/gemini-cli/pull/28345)
+- refactor(cli): align macOS permissive Seatbelt profiles with deny-default
+  model by @ompatel-aiml in
+  [#28424](https://github.com/google-gemini/gemini-cli/pull/28424)
+- fix(core): mitigate infinite ReAct loops and prompt injection loops by
+  @amelidev in [#28429](https://github.com/google-gemini/gemini-cli/pull/28429)
+- fix(a2a-server): enforce workspace trust and task isolation to prevent RCE by
   @luisfelipe-alt in
-  [#28299](https://github.com/google-gemini/gemini-cli/pull/28299)
-- fix(core): strip thoughts from scrubbed history turns and resolve thought
-  leakage by @amelidev in
-  [#27971](https://github.com/google-gemini/gemini-cli/pull/27971)
+  [#28470](https://github.com/google-gemini/gemini-cli/pull/28470)
+- fix(core): sequentially verify cached credentials and restore
+  GOOGLE_APPLICATION_CREDENTIALS fallback by @luisfelipe-alt in
+  [#28472](https://github.com/google-gemini/gemini-cli/pull/28472)
+- feat(evals): add eval coverage report command by @ved015 in
+  [#28169](https://github.com/google-gemini/gemini-cli/pull/28169)
 
 **Full Changelog**:
-https://github.com/google-gemini/gemini-cli/compare/v0.50.0-preview.1...v0.51.0-preview.0
+https://github.com/google-gemini/gemini-cli/compare/v0.52.0-preview.0...v0.53.0-preview.0

package/bundle/docs/cli/sandbox.md

@@ -87,8 +87,9 @@ preferred container solution.
 
 Lightweight, built-in sandboxing using `sandbox-exec`.
 
-**Default profile**: `permissive-open` - restricts writes outside project
-directory but allows most other operations.
+**Default profile**: `permissive-open` - denies operations by default; confines
+writes to the project directory while allowing broad file reads and network
+access.
 
 Built-in profiles (set via `SEATBELT_PROFILE` env var):
 

package/bundle/docs/reference/configuration.md

@@ -2736,10 +2736,10 @@ the `advanced.excludedEnvVars` setting in your `settings.json` file.
   - Run the CLI once with this set to generate the file.
 - **`SEATBELT_PROFILE`** (macOS specific):
   - Switches the Seatbelt (`sandbox-exec`) profile on macOS.
-  - `permissive-open`: (Default) Restricts writes to the project folder (and a
-    few other folders, see
-    `packages/cli/src/utils/sandbox-macos-permissive-open.sb`) but allows other
-    operations.
+  - `permissive-open`: (Default) Denies operations by default, confining writes
+    to the project folder (and a few other folders, see
+    `packages/cli/src/utils/sandbox-macos-permissive-open.sb`) while allowing
+    broad file reads and network access.
   - `restrictive-open`: Declines operations by default, allows network.
   - `strict-open`: Restricts both reads and writes to the working directory,
     allows network.

package/bundle/{gemini-6K6USV55.js → gemini-7SBFMAVQ.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-6Z2GQGII.js";
+} from "./chunk-F6U6G4L3.js";
 import {
   BuiltinCommandLoader,
   CommandService,
@@ -45,11 +45,11 @@ import {
   updateAllUpdatableExtensions,
   updateExtension,
   validateAuthMethod
-} from "./chunk-SDT3SMSX.js";
+} from "./chunk-TIAQUEGU.js";
 import {
   exitCli,
   require_source
-} from "./chunk-24R3JJRB.js";
+} from "./chunk-6EXP7MNC.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -87,11 +87,11 @@ import {
   resolveGemmaConfig,
   saveModelChange,
   stripAnsi
-} from "./chunk-ZINRZXUN.js";
+} from "./chunk-TUTBB2EI.js";
 import {
   RELAUNCH_EXIT_CODE
-} from "./chunk-FBGJOW3X.js";
-import "./chunk-ZLL3UXFN.js";
+} from "./chunk-YONEX6IX.js";
+import "./chunk-MHTDGIIL.js";
 import {
   cleanupCheckpoints,
   registerCleanup,
@@ -100,7 +100,7 @@ import {
   runExitCleanup,
   runSyncCleanup,
   setupSignalHandlers
-} from "./chunk-Y5NBDPUP.js";
+} from "./chunk-RVYNXMAI.js";
 import {
   ASK_USER_TOOL_NAME,
   ApprovalMode,
@@ -247,7 +247,7 @@ import {
   updatePolicy,
   writeToStderr,
   writeToStdout
-} from "./chunk-7LQRUKPT.js";
+} from "./chunk-CP4PCA5K.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -7841,7 +7841,7 @@ async function loadSandboxConfig(settings, argv) {
   }
   const command2 = getSandboxCommand(sandboxValue);
   const packageJson = await getPackageJson(__dirname3);
-  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.52.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
+  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.54.0-nightly.20260726.g3818efbbf" ?? customImage ?? packageJson?.config?.sandboxImageUri;
   const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
   return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
 }
@@ -10249,7 +10249,7 @@ async function runNonInteractive({
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-UB2E5377.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-465M2LE6.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -10720,7 +10720,7 @@ async function runNonInteractive2(params) {
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-UB2E5377.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-465M2LE6.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -15911,7 +15911,7 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
   }
 }
 async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
-  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-3XBP73G4.js");
+  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-QQIQEHF4.js");
   await doStartUI(
     config,
     settings,
@@ -16120,7 +16120,7 @@ ${finalArgs[promptIndex + 1]}`;
     await config.storage.initialize();
     adminControlsListner.setConfig(config);
     if (config.isInteractive() && settings.merged.general.devtools) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-UB2E5377.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-465M2LE6.js");
       setupInitialActivityLogger(config);
     }
     registerTelemetryConfig(config);
@@ -16179,7 +16179,7 @@ ${finalArgs[promptIndex + 1]}`;
     const initAppHandle = startupProfiler.start("initialize_app");
     const initializationResult = await initializeApp(config, settings);
     initAppHandle?.end();
-    import("./liteRtServerManager-A77B57ZY.js").then(({ LiteRtServerManager }) => {
+    import("./liteRtServerManager-IZIEAP3T.js").then(({ LiteRtServerManager }) => {
       const mergedGemma = settings.merged.experimental?.gemmaModelRouter;
       if (!mergedGemma) return;
       const userGemma = settings.forScope("User" /* User */).settings.experimental?.gemmaModelRouter;