@google/gemini-cli 0.56.0 → 0.57.0-preview.1

package/bundle/docs/changelogs/latest.md

@@ -1,6 +1,6 @@
-# Latest stable release: v0.54.0
+# Latest stable release: v0.55.1
 
-Released: August 6, 2026
+Released: August 11, 2026
 
 For most users, our latest stable release is the recommended release. Install
 the latest stable version with:
@@ -27,6 +27,227 @@ npm install -g @google/gemini-cli
 
 ## What's Changed
 
+- fix/verify release npm ci ignore scripts by @rmedranollamas in
+  [#28116](https://github.com/google-gemini/gemini-cli/pull/28116)
+- fix(ci): prevent workspace binary shadowing in release verification by
+  @galdawave in [#28132](https://github.com/google-gemini/gemini-cli/pull/28132)
+- Feat/tool registry discovery by @ved015 in
+  [#28113](https://github.com/google-gemini/gemini-cli/pull/28113)
+- fix(ci): prevent bad NPM releases and promote job crashes by @galdawave in
+  [#28147](https://github.com/google-gemini/gemini-cli/pull/28147)
+- Changelog for v0.50.0-preview.1 by @gemini-cli-robot in
+  [#28150](https://github.com/google-gemini/gemini-cli/pull/28150)
+- Fix no_proxy test by @jerrylin3321 in
+  [#28131](https://github.com/google-gemini/gemini-cli/pull/28131)
+- chore(release): bump version to 0.51.0-nightly.20260625.g3fbf93e26 by
+  @gemini-cli-robot in
+  [#28151](https://github.com/google-gemini/gemini-cli/pull/28151)
+- Vertex base url update by @DavidAPierce in
+  [#28145](https://github.com/google-gemini/gemini-cli/pull/28145)
+- fix(security): enforce case-insensitive sensitive path blocklist and vscode
+  hitl by @luisfelipe-alt in
+  [#27966](https://github.com/google-gemini/gemini-cli/pull/27966)
+- fix(core-tools): resolve defensive path resolution for at-reference files and
+  fix macOS tests by @luisfelipe-alt in
+  [#28053](https://github.com/google-gemini/gemini-cli/pull/28053)
+- feat(caretaker): implement Cloud Run webhook ingestion service by @chadd28 in
+  [#28015](https://github.com/google-gemini/gemini-cli/pull/28015)
+- fix(core): resolve symbolic link directory escape in memory import processor
+  by @luisfelipe-alt in
+  [#28233](https://github.com/google-gemini/gemini-cli/pull/28233)
+- feat(caretaker): egress cloud run service skeleton by @chadd28 in
+  [#28167](https://github.com/google-gemini/gemini-cli/pull/28167)
+- fix(sandbox): make ~/.gitconfig read-only in the macOS sandbox by
+  @ompatel-aiml in
+  [#28221](https://github.com/google-gemini/gemini-cli/pull/28221)
+- fix(core): preserve escape sequences in string literals for modern models by
+  @luisfelipe-alt in
+  [#28299](https://github.com/google-gemini/gemini-cli/pull/28299)
+- fix(core): strip thoughts from scrubbed history turns and resolve thought
+  leakage by @amelidev in
+  [#27971](https://github.com/google-gemini/gemini-cli/pull/27971)
+- Refactor: exclude transient CI configuration files from workspace context by
+  @DavidAPierce in
+  [#28216](https://github.com/google-gemini/gemini-cli/pull/28216)
+- feat(caretaker-triage): add triage worker core foundational modules by
+  @chadd28 in [#28163](https://github.com/google-gemini/gemini-cli/pull/28163)
+- feat(caretaker-egress): implement octokit github action handler for egress
+  service by @chadd28 in
+  [#28303](https://github.com/google-gemini/gemini-cli/pull/28303)
+- chore(release): bump version to 0.52.0-nightly.20260707.g27a3da3e8 by
+  @gemini-cli-robot in
+  [#28323](https://github.com/google-gemini/gemini-cli/pull/28323)
+- Changelog for v0.51.0-preview.0 by @gemini-cli-robot in
+  [#28320](https://github.com/google-gemini/gemini-cli/pull/28320)
+- Changelog for v0.50.0 by @gemini-cli-robot in
+  [#28322](https://github.com/google-gemini/gemini-cli/pull/28322)
+- fix(core-tools): bypass LLM correction for JSON and IPYNB files in write_file
+  and replace by @amelidev in
+  [#28223](https://github.com/google-gemini/gemini-cli/pull/28223)
+- fix(core): use unambiguous previous intent label in fallback summary by
+  @amelidev in [#28343](https://github.com/google-gemini/gemini-cli/pull/28343)
+- feat(caretaker-triage): implement main worker execution loop and egress action
+  publisher by @chadd28 in
+  [#28306](https://github.com/google-gemini/gemini-cli/pull/28306)
+- fix(privacy): show a clear message when the account has no Code Assist tier by
+  @ompatel-aiml in
+  [#28304](https://github.com/google-gemini/gemini-cli/pull/28304)
+- fix(core): enrich shared project quota limit errors with setup hint by
+  @amelidev in [#28391](https://github.com/google-gemini/gemini-cli/pull/28391)
+- fix(a2a-server): ensure task cancellation aborts execution loop by
+  @luisfelipe-alt in
+  [#28316](https://github.com/google-gemini/gemini-cli/pull/28316)
+- fix(core): simplify plan mode write policy to support relative paths by
+  @DavidAPierce in
+  [#28398](https://github.com/google-gemini/gemini-cli/pull/28398)
+- feat(core): Bump node google-auth-library version to 10.9.0 by @jerrylin3321
+  in [#28385](https://github.com/google-gemini/gemini-cli/pull/28385)
+- chore/release: bump version to 0.52.0-nightly.20260715.gfa975395b by
+  @gemini-cli-robot in
+  [#28402](https://github.com/google-gemini/gemini-cli/pull/28402)
+- fix(core,a2a): group cancelled tool responses and coalesce consecutive roles
+  to prevent 400 Bad Request by @luisfelipe-alt in
+  [#28407](https://github.com/google-gemini/gemini-cli/pull/28407)
+- feat(caretaker-triage): implement LLM triage orchestrator and container build
+  by @chadd28 in
+  [#28345](https://github.com/google-gemini/gemini-cli/pull/28345)
+- refactor(cli): align macOS permissive Seatbelt profiles with deny-default
+  model by @ompatel-aiml in
+  [#28424](https://github.com/google-gemini/gemini-cli/pull/28424)
+- fix(core): mitigate infinite ReAct loops and prompt injection loops by
+  @amelidev in [#28429](https://github.com/google-gemini/gemini-cli/pull/28429)
+- fix(a2a-server): enforce workspace trust and task isolation to prevent RCE by
+  @luisfelipe-alt in
+  [#28470](https://github.com/google-gemini/gemini-cli/pull/28470)
+- fix(core): sequentially verify cached credentials and restore
+  GOOGLE_APPLICATION_CREDENTIALS fallback by @luisfelipe-alt in
+  [#28472](https://github.com/google-gemini/gemini-cli/pull/28472)
+- feat(evals): add eval coverage report command by @ved015 in
+  [#28169](https://github.com/google-gemini/gemini-cli/pull/28169)
+- Changelog for v0.53.0-preview.0 by @gemini-cli-robot in
+  [#28507](https://github.com/google-gemini/gemini-cli/pull/28507)
+- Changelog for v0.52.0 by @gemini-cli-robot in
+  [#28508](https://github.com/google-gemini/gemini-cli/pull/28508)
+- chore(release): bump version to 0.54.0-nightly.20260722.gf743ab579 by
+  @gemini-cli-robot in
+  [#28510](https://github.com/google-gemini/gemini-cli/pull/28510)
+- fix(caretaker): sanitize and wrap issue title in untrusted_context by @chadd28
+  in [#28352](https://github.com/google-gemini/gemini-cli/pull/28352)
+- chore(caretaker): update vitest to v3.2.4 and add package-lock.json files by
+  @chadd28 in [#28409](https://github.com/google-gemini/gemini-cli/pull/28409)
+- fix(core): rotate session ID on model fallback to prevent stateful API errors
+  by @amelidev in
+  [#28469](https://github.com/google-gemini/gemini-cli/pull/28469)
+- feat(caretaker-triage): post comment before auto-closing issues by @chadd28 in
+  [#28411](https://github.com/google-gemini/gemini-cli/pull/28411)
+- fix(core): enforce HTTPS for GoogleCredentialsAuthProvider to prevent
+  cleartext leakage by @amelidev in
+  [#28517](https://github.com/google-gemini/gemini-cli/pull/28517)
+- fix(core): filter out thought parts from getHistoryTurns when context
+  management is disabled by @DavidAPierce in
+  [#28509](https://github.com/google-gemini/gemini-cli/pull/28509)
+- fix(a2a-server): normalize CRLF line endings to LF in getProposedContent by
+  @luisfelipe-alt in
+  [#28531](https://github.com/google-gemini/gemini-cli/pull/28531)
+- fix(core): enforce explicit tag length and validation in file keychain by
+  @luisfelipe-alt in
+  [#28523](https://github.com/google-gemini/gemini-cli/pull/28523)
+- chore/release: bump version to 0.54.0-nightly.20260728.gbef611950 by
+  @gemini-cli-robot in
+  [#28552](https://github.com/google-gemini/gemini-cli/pull/28552)
+- feat(pr-generator-db): implement Firestore concurrency dual-locking and test
+  ingestion utilities by @joneba-google in
+  [#28432](https://github.com/google-gemini/gemini-cli/pull/28432)
+- feat(pr-generator-agent): implement Antigravity agent runner and prompt
+  templates … by @joneba-google in
+  [#28434](https://github.com/google-gemini/gemini-cli/pull/28434)
+- fix(core): skip merged function-response turns when finding the active loop by
+  @adamfweidman in
+  [#28565](https://github.com/google-gemini/gemini-cli/pull/28565)
+- chore(release): bump version to 0.55.0-nightly.20260728.gd29268d36 by
+  @gemini-cli-robot in
+  [#28569](https://github.com/google-gemini/gemini-cli/pull/28569)
+- Changelog for v0.54.0-preview.0 by @gemini-cli-robot in
+  [#28567](https://github.com/google-gemini/gemini-cli/pull/28567)
+- Changelog for v0.53.0 by @gemini-cli-robot in
+  [#28568](https://github.com/google-gemini/gemini-cli/pull/28568)
+- chore/release: bump version to 0.55.0-nightly.20260729.g3499c84f7 by
+  @gemini-cli-robot in
+  [#28573](https://github.com/google-gemini/gemini-cli/pull/28573)
+- fix(core): classify capacity exhaustion as terminal to prevent retry hangs by
+  @luisfelipe-alt in
+  [#28599](https://github.com/google-gemini/gemini-cli/pull/28599)
+- fix(core,cli): propagate InvalidStreamError details to UI for specific empty
+  response guidance by @DavidAPierce in
+  [#28566](https://github.com/google-gemini/gemini-cli/pull/28566)
+- fix(cli): fall back to embedded macOS seatbelt profiles if missing by
+  @amelidev in [#28551](https://github.com/google-gemini/gemini-cli/pull/28551)
+- feat(pr-generator-core): add environment config parser, command executor,
+  GitHub R… by @joneba-google in
+  [#28435](https://github.com/google-gemini/gemini-cli/pull/28435)
+- feat(pr-generator-orchestrator): implement iterative bug-fixing state machine
+  and container worker entrypoint by @joneba-google in
+  [#28433](https://github.com/google-gemini/gemini-cli/pull/28433)
+- feat(pr-generator-infra): configure Cloud Run job, Workflows definition, and
+  Dockerfile by @joneba-google in
+  [#28431](https://github.com/google-gemini/gemini-cli/pull/28431)
+- fix(release): handle npm dist-tag deletion failures on registries that forbid
+  it by @DavidAPierce in
+  [#28694](https://github.com/google-gemini/gemini-cli/pull/28694)
+- fix(core): stop a new user message fusing into an unanswered tool response by
+  @adamfweidman in
+  [#28700](https://github.com/google-gemini/gemini-cli/pull/28700)
+- fix(core,cli): repair /compress session reload and quota-fallback tool
+  response loss by @adamfweidman in
+  [#28672](https://github.com/google-gemini/gemini-cli/pull/28672)
+- fix(core): preserve functionCall thoughtSignature when stripping thought parts
+  by @sarbojitrana in
+  [#28607](https://github.com/google-gemini/gemini-cli/pull/28607)
+- fix(core): unwrap and parse nested gaxios streaming errors from cause message
+  by @luisfelipe-alt in
+  [#28689](https://github.com/google-gemini/gemini-cli/pull/28689)
+- Changelog for v0.55.0-preview.1 by @gemini-cli-robot in
+  [#28706](https://github.com/google-gemini/gemini-cli/pull/28706)
+- chore(release): bump version to 0.56.0-nightly.20260806.g761f604c1 by
+  @gemini-cli-robot in
+  [#28707](https://github.com/google-gemini/gemini-cli/pull/28707)
+- Changelog for v0.54.0 by @gemini-cli-robot in
+  [#28708](https://github.com/google-gemini/gemini-cli/pull/28708)
+- Reclassifying Capacity Exhaustion as Terminal Error by @luisfelipe-alt in
+  [#28716](https://github.com/google-gemini/gemini-cli/pull/28716)
+- feat(caretaker): update Firestore schema with error, and pr_number fields by
+  @chadd28 in [#28467](https://github.com/google-gemini/gemini-cli/pull/28467)
+- feat(caretaker-triage): prompt hill-climbing & orchestrator updates by
+  @chadd28 in [#28524](https://github.com/google-gemini/gemini-cli/pull/28524)
+- feat(caretaker): add triage Cloud Run job workflow by @chadd28 in
+  [#28468](https://github.com/google-gemini/gemini-cli/pull/28468)
+- feat(caretaker-evals): add triage evaluation framework and judge runner by
+  @chadd28 in [#28530](https://github.com/google-gemini/gemini-cli/pull/28530)
+- feat(caretaker-evals): add local golden issue collection and firestore sync
+  tools by @chadd28 in
+  [#28532](https://github.com/google-gemini/gemini-cli/pull/28532)
+- feat(caretaker): publish workable spec event to ready-for-code Pub/Sub topic
+  by @chadd28 in
+  [#28588](https://github.com/google-gemini/gemini-cli/pull/28588)
+- feat(caretaker): add GCP deployment script for caretaker agent services by
+  @chadd28 in [#28529](https://github.com/google-gemini/gemini-cli/pull/28529)
+- feat(caretaker-evals): add Cloud Run job entrypoint for eval runner by
+  @chadd28 in [#28727](https://github.com/google-gemini/gemini-cli/pull/28727)
+- fix(caretaker): clear lock on NEEDS_HUMAN transition by @chadd28 in
+  [#28601](https://github.com/google-gemini/gemini-cli/pull/28601)
+- feat(ingestion): add issue comment handling and re-triage workflow by @chadd28
+  in [#28690](https://github.com/google-gemini/gemini-cli/pull/28690)
+- fix(core): refresh MCP OAuth tokens with the stored client ID by
+  @ParthivNaresh in
+  [#28481](https://github.com/google-gemini/gemini-cli/pull/28481)
+- fix(core,cli): resolve false model capacity exhaustion and fix core quota
+  lookup model mapping by @DavidAPierce in
+  [#28730](https://github.com/google-gemini/gemini-cli/pull/28730)
+- feat(evals): add local report command and developer documentation by @ved015
+  in [#28369](https://github.com/google-gemini/gemini-cli/pull/28369)
+- fix(core): dynamically resolve Cloud Workstations proxy redirect URI for OAuth
+  flows by @amelidev in
+  [#28688](https://github.com/google-gemini/gemini-cli/pull/28688)
 - Changelog for v0.53.0-preview.0 by @gemini-cli-robot in
   [#28507](https://github.com/google-gemini/gemini-cli/pull/28507)
 - Changelog for v0.52.0 by @gemini-cli-robot in
@@ -73,4 +294,4 @@ npm install -g @google/gemini-cli
   [#28609](https://github.com/google-gemini/gemini-cli/pull/28609)
 
 **Full Changelog**:
-https://github.com/google-gemini/gemini-cli/compare/v0.53.1...v0.54.0
+https://github.com/google-gemini/gemini-cli/compare/v0.53.1...v0.55.1

package/bundle/docs/get-started/authentication.mdx

@@ -131,7 +131,7 @@ following authentication options:
 
 Regardless of your authentication method for Vertex AI, you'll need to set
 `GOOGLE_CLOUD_PROJECT` to your Google Cloud project ID with the Vertex AI API
-enabled, and `GOOGLE_CLOUD_LOCATION` to the location of your Vertex AI resources
+enabled, and `GOOGLE_CLOUD_LOCATION` to the [location of your Vertex AI resources](https://cloud.google.com/vertex-ai/generative-ai/docs/learn/locations)
 or the location where you want to run your jobs.
 
 For example:

package/bundle/docs/reference/commands.md

@@ -101,11 +101,13 @@ Slash commands provide meta-level control over the CLI itself.
 
 ### `/clear`
 
-- **Description:** Clear the terminal screen, including the visible session
-  history and scrollback within the CLI. The underlying session data (for
-  history recall) might be preserved depending on the exact implementation, but
-  the visual display is cleared.
-- **Keyboard shortcut:** Press **Ctrl+L** at any time to perform a clear action.
+- **Description:** Clear the agent conversation context (active conversation
+  history) and start a new session, in addition to clearing the visible terminal
+  screen, history, and scrollback within the CLI.
+- **Keyboard shortcut:** Press **Ctrl+L** at any time to perform a visual clear
+  action (note that **Ctrl+L** only clears the terminal display and redraws the
+  UI, preserving the active conversation context; use `/clear` to start a new
+  session).
 
 ### `/commands`
 

package/bundle/{gemini-54R2PJOR.js → gemini-3M22N2C3.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-ZXYNNAXR.js";
+} from "./chunk-S5UX3QS5.js";
 import {
   BuiltinCommandLoader,
   CommandService,
@@ -45,11 +45,11 @@ import {
   updateAllUpdatableExtensions,
   updateExtension,
   validateAuthMethod
-} from "./chunk-7IXYIWSX.js";
+} from "./chunk-AKCYXG7C.js";
 import {
   exitCli,
   require_source
-} from "./chunk-Y734TK7O.js";
+} from "./chunk-SCBVGZXH.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -87,11 +87,11 @@ import {
   resolveGemmaConfig,
   saveModelChange,
   stripAnsi
-} from "./chunk-KUIZDCN6.js";
+} from "./chunk-ALVDOQNA.js";
 import {
   RELAUNCH_EXIT_CODE
-} from "./chunk-ISEPPPFO.js";
-import "./chunk-JFVPVDW6.js";
+} from "./chunk-4SNEOO5E.js";
+import "./chunk-VBK54QCZ.js";
 import {
   cleanupCheckpoints,
   registerCleanup,
@@ -100,7 +100,7 @@ import {
   runExitCleanup,
   runSyncCleanup,
   setupSignalHandlers
-} from "./chunk-3YGHKCB7.js";
+} from "./chunk-Q73BPF7A.js";
 import {
   ASK_USER_TOOL_NAME,
   AuthType,
@@ -196,6 +196,7 @@ import {
   getProjectRootForWorktree,
   getPty,
   getRealPath,
+  getSafeGitEnv,
   getToolCallDataSchema,
   getVersion,
   homedir,
@@ -237,7 +238,7 @@ import {
   updatePolicy,
   writeToStderr,
   writeToStdout
-} from "./chunk-MYCBWRZE.js";
+} from "./chunk-O7SBKM7M.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -7831,7 +7832,7 @@ async function loadSandboxConfig(settings, argv) {
   }
   const command2 = getSandboxCommand(sandboxValue);
   const packageJson = await getPackageJson(__dirname3);
-  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.56.0-preview.1" ?? customImage ?? packageJson?.config?.sandboxImageUri;
+  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.57.0-preview.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
   const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
   return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
 }
@@ -8655,7 +8656,8 @@ async function resolveWorktreeSettings(cwd) {
   let worktreePath;
   try {
     const { stdout } = await execa("git", ["rev-parse", "--show-toplevel"], {
-      cwd
+      cwd,
+      env: getSafeGitEnv()
     });
     const toplevel = stdout.trim();
     const projectRoot = await getProjectRootForWorktree(toplevel);
@@ -8671,7 +8673,8 @@ async function resolveWorktreeSettings(cwd) {
   let worktreeBaseSha;
   try {
     const { stdout } = await execa("git", ["rev-parse", "HEAD"], {
-      cwd: worktreePath
+      cwd: worktreePath,
+      env: getSafeGitEnv()
     });
     worktreeBaseSha = stdout.trim();
   } catch (e) {
@@ -10836,7 +10839,7 @@ async function runNonInteractive({
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-NWA77XKC.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-5J53UK6Z.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -11346,7 +11349,7 @@ async function runNonInteractive2(params) {
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-NWA77XKC.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-5J53UK6Z.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -16556,7 +16559,7 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
   }
 }
 async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
-  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-BAGEJ4VO.js");
+  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-LQJM6LRE.js");
   await doStartUI(
     config,
     settings,
@@ -16765,7 +16768,7 @@ ${finalArgs[promptIndex + 1]}`;
     await config.storage.initialize();
     adminControlsListner.setConfig(config);
     if (config.isInteractive() && settings.merged.general.devtools) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-NWA77XKC.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-5J53UK6Z.js");
       setupInitialActivityLogger(config);
     }
     registerTelemetryConfig(config);
@@ -16824,7 +16827,7 @@ ${finalArgs[promptIndex + 1]}`;
     const initAppHandle = startupProfiler.start("initialize_app");
     const initializationResult = await initializeApp(config, settings);
     initAppHandle?.end();
-    import("./liteRtServerManager-CYBHL4LH.js").then(({ LiteRtServerManager }) => {
+    import("./liteRtServerManager-3BY6TBHG.js").then(({ LiteRtServerManager }) => {
       const mergedGemma = settings.merged.experimental?.gemmaModelRouter;
       if (!mergedGemma) return;
       const userGemma = settings.forScope("User" /* User */).settings.experimental?.gemmaModelRouter;

package/bundle/{gemini-KK7AERSF.js → gemini-LSMTDETS.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-Y3KSGWY2.js";
+} from "./chunk-W23OOD2C.js";
 import {
   BuiltinCommandLoader,
   CommandService,
@@ -45,11 +45,11 @@ import {
   updateAllUpdatableExtensions,
   updateExtension,
   validateAuthMethod
-} from "./chunk-CNSLGANE.js";
+} from "./chunk-FHDRG5U4.js";
 import {
   exitCli,
   require_source
-} from "./chunk-3KYPKZPU.js";
+} from "./chunk-Y3APL4PE.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -87,11 +87,11 @@ import {
   resolveGemmaConfig,
   saveModelChange,
   stripAnsi
-} from "./chunk-IG5K7R25.js";
+} from "./chunk-GK7NUJ35.js";
 import {
   RELAUNCH_EXIT_CODE
-} from "./chunk-M6D6BI7B.js";
-import "./chunk-VBIDFL63.js";
+} from "./chunk-MBWROXYM.js";
+import "./chunk-XESAM7IL.js";
 import {
   cleanupCheckpoints,
   registerCleanup,
@@ -100,7 +100,7 @@ import {
   runExitCleanup,
   runSyncCleanup,
   setupSignalHandlers
-} from "./chunk-HAZMOWRC.js";
+} from "./chunk-3NPMAHLX.js";
 import {
   ASK_USER_TOOL_NAME,
   ApprovalMode,
@@ -212,6 +212,7 @@ import {
   getProjectRootForWorktree,
   getPty,
   getRealPath,
+  getSafeGitEnv,
   getToolCallDataSchema,
   getVersion,
   homedir,
@@ -253,7 +254,7 @@ import {
   updatePolicy,
   writeToStderr,
   writeToStdout
-} from "./chunk-LZUWGCRJ.js";
+} from "./chunk-G65GW52B.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -7847,7 +7848,7 @@ async function loadSandboxConfig(settings, argv) {
   }
   const command2 = getSandboxCommand(sandboxValue);
   const packageJson = await getPackageJson(__dirname3);
-  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.56.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
+  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.57.0-preview.1" ?? customImage ?? packageJson?.config?.sandboxImageUri;
   const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
   return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
 }
@@ -8671,7 +8672,8 @@ async function resolveWorktreeSettings(cwd) {
   let worktreePath;
   try {
     const { stdout } = await execa("git", ["rev-parse", "--show-toplevel"], {
-      cwd
+      cwd,
+      env: getSafeGitEnv()
     });
     const toplevel = stdout.trim();
     const projectRoot = await getProjectRootForWorktree(toplevel);
@@ -8687,7 +8689,8 @@ async function resolveWorktreeSettings(cwd) {
   let worktreeBaseSha;
   try {
     const { stdout } = await execa("git", ["rev-parse", "HEAD"], {
-      cwd: worktreePath
+      cwd: worktreePath,
+      env: getSafeGitEnv()
     });
     worktreeBaseSha = stdout.trim();
   } catch (e) {
@@ -10852,7 +10855,7 @@ async function runNonInteractive({
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-BFW3BN3D.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-JBFUXTCT.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -11362,7 +11365,7 @@ async function runNonInteractive2(params) {
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-BFW3BN3D.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-JBFUXTCT.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -16572,7 +16575,7 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
   }
 }
 async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
-  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-QBZRIN4M.js");
+  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-D6H37PJQ.js");
   await doStartUI(
     config,
     settings,
@@ -16781,7 +16784,7 @@ ${finalArgs[promptIndex + 1]}`;
     await config.storage.initialize();
     adminControlsListner.setConfig(config);
     if (config.isInteractive() && settings.merged.general.devtools) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-BFW3BN3D.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-JBFUXTCT.js");
       setupInitialActivityLogger(config);
     }
     registerTelemetryConfig(config);
@@ -16840,7 +16843,7 @@ ${finalArgs[promptIndex + 1]}`;
     const initAppHandle = startupProfiler.start("initialize_app");
     const initializationResult = await initializeApp(config, settings);
     initAppHandle?.end();
-    import("./liteRtServerManager-7LTDMYKI.js").then(({ LiteRtServerManager }) => {
+    import("./liteRtServerManager-IGKUGGP4.js").then(({ LiteRtServerManager }) => {
       const mergedGemma = settings.merged.experimental?.gemmaModelRouter;
       if (!mergedGemma) return;
       const userGemma = settings.forScope("User" /* User */).settings.experimental?.gemmaModelRouter;