@google/gemini-cli 0.57.0-preview.1 → 0.58.0-preview.0

package/bundle/{gemini-W2B6CLJC.js → gemini-BUCCXM4N.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-UMQE7UC6.js";
+} from "./chunk-PGYTXBPD.js";
 import {
   BuiltinCommandLoader,
   CommandService,
@@ -45,11 +45,11 @@ import {
   updateAllUpdatableExtensions,
   updateExtension,
   validateAuthMethod
-} from "./chunk-SWQAIZEQ.js";
+} from "./chunk-E7K62ODO.js";
 import {
   exitCli,
   require_source
-} from "./chunk-3BVBON3V.js";
+} from "./chunk-2BLMLPHM.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -87,11 +87,11 @@ import {
   resolveGemmaConfig,
   saveModelChange,
   stripAnsi
-} from "./chunk-4ALCU2HQ.js";
+} from "./chunk-FMLOQLUD.js";
 import {
   RELAUNCH_EXIT_CODE
-} from "./chunk-ZMPGHLGO.js";
-import "./chunk-NQ4RH42O.js";
+} from "./chunk-2XOTT2FI.js";
+import "./chunk-7HQEQECM.js";
 import {
   cleanupCheckpoints,
   registerCleanup,
@@ -100,15 +100,12 @@ import {
   runExitCleanup,
   runSyncCleanup,
   setupSignalHandlers
-} from "./chunk-VGGWKRAC.js";
+} from "./chunk-JPMNKIVX.js";
 import {
   ASK_USER_TOOL_NAME,
-  ApprovalMode,
   AuthType,
   Client,
   Config,
-  CoreEvent,
-  CoreToolCallStatus,
   DEFAULT_CONTEXT_FILENAME,
   DEFAULT_FILE_FILTERING_OPTIONS,
   DEFAULT_GEMINI_EMBEDDING_MODEL,
@@ -130,27 +127,19 @@ import {
   FolderTrustDiscoveryService,
   GEMINI_DIR,
   GEMINI_MODEL_ALIAS_AUTO,
-  GeminiEventType,
   IdeClient,
-  IntegrityStatus,
   InvalidStreamError,
   JsonFormatter,
-  JsonStreamEventType,
-  Kind,
   LegacyAgentSession,
   Logger,
   MAX_TOKENS_EXCEEDED_SUGGESTION,
   MCPServerConfig,
-  MCPServerStatus,
-  MessageBusType,
   OTHER_BLOCKED_MESSAGE,
-  OutputFormat,
   PREVIEW_GEMINI_3_1_CUSTOM_TOOLS_MODEL,
   PREVIEW_GEMINI_3_1_MODEL,
   PREVIEW_GEMINI_FLASH_LITE_MODEL,
   PREVIEW_GEMINI_FLASH_MODEL,
   PREVIEW_GEMINI_MODEL,
-  PolicyDecision,
   PolicyIntegrityManager,
   RECITATION_BLOCKED_MESSAGE,
   REFERENCE_CONTENT_START,
@@ -158,8 +147,6 @@ import {
   ReadManyFilesTool,
   SAFETY_BLOCKED_MESSAGE,
   Scheduler,
-  SessionEndReason,
-  SessionStartSource,
   ShellExecutionService,
   SimpleExtensionLoader,
   Storage,
@@ -168,13 +155,10 @@ import {
   TRUE_EMPTY_RESPONSE_MESSAGE,
   ToolCallEvent,
   ToolConfirmationOutcome,
-  ToolErrorType,
-  TrustLevel,
   UserAccountManager,
   UserPromptEvent,
   ValidationCancelledError,
   ValidationRequiredError,
-  WarningPriority,
   applyAdminAllowlist,
   applyRequiredServers,
   clearCachedCredentialFile,
@@ -254,7 +238,7 @@ import {
   updatePolicy,
   writeToStderr,
   writeToStdout
-} from "./chunk-NPOI4K6X.js";
+} from "./chunk-M33HH4UA.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -5384,7 +5368,7 @@ var MCP_LIST_DEFAULT_TIMEOUT_MSEC = 5e3;
 async function testMCPConnection(serverName, config, isTrusted, activeSettings) {
   const isStdio = !!config.command;
   if (isStdio && !isTrusted) {
-    return MCPServerStatus.DISCONNECTED;
+    return "disconnected" /* DISCONNECTED */;
   }
   const client = new Client({
     name: "mcp-test-client",
@@ -5420,7 +5404,7 @@ async function testMCPConnection(serverName, config, isTrusted, activeSettings)
     transport = await createTransport(serverName, config, false, mcpContext);
   } catch {
     await client.close();
-    return MCPServerStatus.DISCONNECTED;
+    return "disconnected" /* DISCONNECTED */;
   }
   try {
     const timeout = config.timeout ?? MCP_LIST_DEFAULT_TIMEOUT_MSEC;
@@ -5434,10 +5418,10 @@ async function testMCPConnection(serverName, config, isTrusted, activeSettings)
       );
     }
     await client.close();
-    return MCPServerStatus.CONNECTED;
+    return "connected" /* CONNECTED */;
   } catch {
     await transport.close();
-    return MCPServerStatus.DISCONNECTED;
+    return "disconnected" /* DISCONNECTED */;
   }
 }
 async function getServerStatus(serverName, server, isTrusted, activeSettings, consolidatedExcluded, consolidatedAllowed) {
@@ -5450,12 +5434,12 @@ async function getServerStatus(serverName, server, isTrusted, activeSettings, co
   });
   if (!loadResult.allowed) {
     if (loadResult.blockType === "admin" || loadResult.blockType === "allowlist" || loadResult.blockType === "excludelist") {
-      return MCPServerStatus.BLOCKED;
+      return "blocked" /* BLOCKED */;
     }
-    return MCPServerStatus.DISABLED;
+    return "disabled" /* DISABLED */;
   }
   if (!isTrusted) {
-    return MCPServerStatus.DISABLED;
+    return "disabled" /* DISABLED */;
   }
   return testMCPConnection(serverName, server, isTrusted, activeSettings);
 }
@@ -5501,23 +5485,23 @@ async function listMcpServers(loadedSettingsArg) {
     let statusIndicator = "";
     let statusText = "";
     switch (status) {
-      case MCPServerStatus.CONNECTED:
+      case "connected" /* CONNECTED */:
         statusIndicator = import_chalk.default.green("\u2713");
         statusText = "Connected";
         break;
-      case MCPServerStatus.CONNECTING:
+      case "connecting" /* CONNECTING */:
         statusIndicator = import_chalk.default.yellow("\u2026");
         statusText = "Connecting";
         break;
-      case MCPServerStatus.BLOCKED:
+      case "blocked" /* BLOCKED */:
         statusIndicator = import_chalk.default.red("\u26D4");
         statusText = "Blocked";
         break;
-      case MCPServerStatus.DISABLED:
+      case "disabled" /* DISABLED */:
         statusIndicator = import_chalk.default.gray("\u25CB");
         statusText = "Disabled";
         break;
-      case MCPServerStatus.DISCONNECTED:
+      case "disconnected" /* DISCONNECTED */:
       default:
         statusIndicator = import_chalk.default.red("\u2717");
         statusText = "Disconnected";
@@ -5803,7 +5787,7 @@ async function handleInstall(args) {
         );
         if (confirmed) {
           const trustedFolders = loadTrustedFolders();
-          await trustedFolders.setValue(realPath, TrustLevel.TRUST_FOLDER);
+          await trustedFolders.setValue(realPath, "TRUST_FOLDER" /* TRUST_FOLDER */);
         } else {
           throw new Error(
             `Installation aborted: Folder "${absolutePath}" is not trusted.`
@@ -7848,7 +7832,7 @@ async function loadSandboxConfig(settings, argv) {
   }
   const command2 = getSandboxCommand(sandboxValue);
   const packageJson = await getPackageJson(__dirname3);
-  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.57.0-preview.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
+  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.56.0-nightly.20260806.g761f604c1" ?? customImage ?? packageJson?.config?.sandboxImageUri;
   const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
   return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
 }
@@ -7907,9 +7891,9 @@ async function resolveWorkspacePolicyState(options) {
       cwd,
       potentialWorkspacePoliciesDir
     );
-    if (integrityResult.status === IntegrityStatus.MATCH) {
+    if (integrityResult.status === "MATCH" /* MATCH */) {
       workspacePoliciesDir = potentialWorkspacePoliciesDir;
-    } else if (integrityResult.status === IntegrityStatus.NEW && integrityResult.fileCount === 0) {
+    } else if (integrityResult.status === "NEW" /* NEW */ && integrityResult.fileCount === 0) {
       workspacePoliciesDir = void 0;
     } else if (interactive && !autoAcceptWorkspacePolicies) {
       policyUpdateConfirmationRequest = {
@@ -8337,23 +8321,23 @@ async function loadCliConfig(settings, sessionId, argv, options = {}) {
   if (rawApprovalMode) {
     switch (rawApprovalMode) {
       case "yolo":
-        approvalMode = ApprovalMode.YOLO;
+        approvalMode = "yolo" /* YOLO */;
         break;
       case "auto_edit":
-        approvalMode = ApprovalMode.AUTO_EDIT;
+        approvalMode = "autoEdit" /* AUTO_EDIT */;
         break;
       case "plan":
         if (!(settings.general?.plan?.enabled ?? true)) {
           debugLogger.warn(
             'Approval mode "plan" is disabled in your settings. Falling back to "default".'
           );
-          approvalMode = ApprovalMode.DEFAULT;
+          approvalMode = "default" /* DEFAULT */;
         } else {
-          approvalMode = ApprovalMode.PLAN;
+          approvalMode = "plan" /* PLAN */;
         }
         break;
       case "default":
-        approvalMode = ApprovalMode.DEFAULT;
+        approvalMode = "default" /* DEFAULT */;
         break;
       default:
         throw new Error(
@@ -8361,10 +8345,10 @@ async function loadCliConfig(settings, sessionId, argv, options = {}) {
         );
     }
   } else {
-    approvalMode = ApprovalMode.DEFAULT;
+    approvalMode = "default" /* DEFAULT */;
   }
   if (settings.security?.disableYoloMode || settings.admin?.secureModeEnabled) {
-    if (approvalMode === ApprovalMode.YOLO) {
+    if (approvalMode === "yolo" /* YOLO */) {
       if (settings.admin?.secureModeEnabled) {
         debugLogger.error(
           'YOLO mode is disabled by "secureModeEnabled" setting.'
@@ -8382,16 +8366,16 @@ async function loadCliConfig(settings, sessionId, argv, options = {}) {
         )
       );
     }
-  } else if (approvalMode === ApprovalMode.YOLO) {
+  } else if (approvalMode === "yolo" /* YOLO */) {
     debugLogger.warn(
       "YOLO mode is enabled. All tool calls will be automatically approved."
     );
   }
-  if (!trustedFolder && approvalMode !== ApprovalMode.DEFAULT) {
+  if (!trustedFolder && approvalMode !== "default" /* DEFAULT */) {
     debugLogger.warn(
       `Approval mode overridden to "default" because the current folder is not trusted.`
     );
-    approvalMode = ApprovalMode.DEFAULT;
+    approvalMode = "default" /* DEFAULT */;
   }
   let telemetrySettings;
   try {
@@ -9018,7 +9002,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "*:*"))
 (allow network-bind (local ip "*:*"))
-(allow network-outbound)`,
+(allow network-outbound)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "permissive-proxied": `(version 1)
 (deny default)
 (allow file-read*)
@@ -9113,7 +9138,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
 (allow network-bind (local ip "*:*"))
-(allow network-outbound (remote tcp "localhost:8877"))`,
+(allow network-outbound (remote tcp "localhost:8877"))
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "restrictive-open": `(version 1)
 (deny default)
 (allow file-read*)
@@ -9185,7 +9251,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow mach-lookup (global-name "com.apple.sysmond"))
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
-(allow network-outbound)`,
+(allow network-outbound)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "restrictive-proxied": `(version 1)
 (deny default)
 (allow file-read*)
@@ -9257,7 +9364,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow mach-lookup (global-name "com.apple.sysmond"))
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
-(allow network-outbound (remote tcp "localhost:8877"))`,
+(allow network-outbound (remote tcp "localhost:8877"))
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "strict-open": `(version 1)
 (deny default)
 (allow file-read*
@@ -9358,7 +9506,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow mach-lookup (global-name "com.apple.sysmond"))
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
-(allow network-outbound)`,
+(allow network-outbound)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "strict-proxied": `(version 1)
 (deny default)
 (allow file-read*
@@ -9459,7 +9648,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow mach-lookup (global-name "com.apple.sysmond"))
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
-(allow network-outbound (remote tcp "localhost:8877"))`
+(allow network-outbound (remote tcp "localhost:8877"))
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`
 };
 BUILTIN_SEATBELT_PROFILE_CONTENTS["permissive-closed"] = BUILTIN_SEATBELT_PROFILE_CONTENTS["strict-open"];
 BUILTIN_SEATBELT_PROFILE_CONTENTS["restrictive-closed"] = BUILTIN_SEATBELT_PROFILE_CONTENTS["strict-proxied"];
@@ -10428,7 +10658,7 @@ import path9 from "node:path";
 import process4 from "node:process";
 var homeDirectoryCheck = {
   id: "home-directory",
-  priority: WarningPriority.Low,
+  priority: "low" /* Low */,
   check: async (workspaceRoot, settings) => {
     if (settings.ui?.showHomeDirectoryWarning === false) {
       return null;
@@ -10452,7 +10682,7 @@ var homeDirectoryCheck = {
 };
 var rootDirectoryCheck = {
   id: "root-directory",
-  priority: WarningPriority.High,
+  priority: "high" /* High */,
   check: async (workspaceRoot, _settings) => {
     try {
       const workspaceRealPath = await fs9.realpath(workspaceRoot);
@@ -10468,7 +10698,7 @@ var rootDirectoryCheck = {
 };
 var folderTrustCheck = {
   id: "folder-trust",
-  priority: WarningPriority.High,
+  priority: "high" /* High */,
   check: async (workspaceRoot, settings) => {
     if (!isFolderTrustEnabled(settings)) {
       return null;
@@ -10658,12 +10888,12 @@ function handleError(error, config, customErrorCode) {
     error,
     config.getContentGeneratorConfig()?.authType
   );
-  if (config.getOutputFormat() === OutputFormat.STREAM_JSON) {
+  if (config.getOutputFormat() === "stream-json" /* STREAM_JSON */) {
     const streamFormatter = new StreamJsonFormatter();
     const errorCode = customErrorCode ?? extractErrorCode(error);
     const metrics = uiTelemetryService.getMetrics();
     streamFormatter.emitEvent({
-      type: JsonStreamEventType.RESULT,
+      type: "result" /* RESULT */,
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
       status: "error",
       error: {
@@ -10674,7 +10904,7 @@ function handleError(error, config, customErrorCode) {
     });
     runSyncCleanup();
     process.exit(getNumericExitCode(errorCode));
-  } else if (config.getOutputFormat() === OutputFormat.JSON) {
+  } else if (config.getOutputFormat() === "json" /* JSON */) {
     const formatter = new JsonFormatter();
     const errorCode = customErrorCode ?? extractErrorCode(error);
     const formattedError = formatter.formatError(
@@ -10694,11 +10924,11 @@ function handleToolError(toolName, toolError, config, errorType, resultDisplay)
   const isFatal = isFatalToolError(errorType);
   if (isFatal) {
     const toolExecutionError = new FatalToolExecutionError(errorMessage);
-    if (config.getOutputFormat() === OutputFormat.STREAM_JSON) {
+    if (config.getOutputFormat() === "stream-json" /* STREAM_JSON */) {
       const streamFormatter = new StreamJsonFormatter();
       const metrics = uiTelemetryService.getMetrics();
       streamFormatter.emitEvent({
-        type: JsonStreamEventType.RESULT,
+        type: "result" /* RESULT */,
         timestamp: (/* @__PURE__ */ new Date()).toISOString(),
         status: "error",
         error: {
@@ -10707,7 +10937,7 @@ function handleToolError(toolName, toolError, config, errorType, resultDisplay)
         },
         stats: streamFormatter.convertToStreamStats(metrics, 0)
       });
-    } else if (config.getOutputFormat() === OutputFormat.JSON) {
+    } else if (config.getOutputFormat() === "json" /* JSON */) {
       const formatter = new JsonFormatter();
       const formattedError = formatter.formatError(
         toolExecutionError,
@@ -10725,11 +10955,11 @@ function handleToolError(toolName, toolError, config, errorType, resultDisplay)
 }
 function handleCancellationError(config) {
   const cancellationError = new FatalCancellationError("Operation cancelled.");
-  if (config.getOutputFormat() === OutputFormat.STREAM_JSON) {
+  if (config.getOutputFormat() === "stream-json" /* STREAM_JSON */) {
     const streamFormatter = new StreamJsonFormatter();
     const metrics = uiTelemetryService.getMetrics();
     streamFormatter.emitEvent({
-      type: JsonStreamEventType.RESULT,
+      type: "result" /* RESULT */,
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
       status: "error",
       error: {
@@ -10740,7 +10970,7 @@ function handleCancellationError(config) {
     });
     runSyncCleanup();
     process.exit(cancellationError.exitCode);
-  } else if (config.getOutputFormat() === OutputFormat.JSON) {
+  } else if (config.getOutputFormat() === "json" /* JSON */) {
     const formatter = new JsonFormatter();
     const formattedError = formatter.formatError(
       cancellationError,
@@ -10760,11 +10990,11 @@ function handleMaxTurnsExceededError(config) {
   const maxTurnsError = new FatalTurnLimitedError(
     "Reached max session turns for this session. Increase the number of turns by specifying maxSessionTurns in settings.json."
   );
-  if (config.getOutputFormat() === OutputFormat.STREAM_JSON) {
+  if (config.getOutputFormat() === "stream-json" /* STREAM_JSON */) {
     const streamFormatter = new StreamJsonFormatter();
     const metrics = uiTelemetryService.getMetrics();
     streamFormatter.emitEvent({
-      type: JsonStreamEventType.RESULT,
+      type: "result" /* RESULT */,
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
       status: "error",
       error: {
@@ -10775,7 +11005,7 @@ function handleMaxTurnsExceededError(config) {
     });
     runSyncCleanup();
     process.exit(maxTurnsError.exitCode);
-  } else if (config.getOutputFormat() === OutputFormat.JSON) {
+  } else if (config.getOutputFormat() === "json" /* JSON */) {
     const formatter = new JsonFormatter();
     const formattedError = formatter.formatError(
       maxTurnsError,
@@ -10855,7 +11085,7 @@ async function runNonInteractive({
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-V46GUHRF.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-P42LXPJX.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -10871,7 +11101,7 @@ async function runNonInteractive({
       }
     };
     const startTime = Date.now();
-    const streamFormatter = config.getOutputFormat() === OutputFormat.STREAM_JSON ? new StreamJsonFormatter() : null;
+    const streamFormatter = config.getOutputFormat() === "stream-json" /* STREAM_JSON */ ? new StreamJsonFormatter() : null;
     const abortController = new AbortController();
     let isAborting = false;
     let cancelMessageTimer = null;
@@ -10924,13 +11154,13 @@ async function runNonInteractive({
     };
     try {
       consolePatcher.patch();
-      if (config.getRawOutput() && !config.getAcceptRawOutputRisk() && config.getOutputFormat() === OutputFormat.TEXT) {
+      if (config.getRawOutput() && !config.getAcceptRawOutputRisk() && config.getOutputFormat() === "text" /* TEXT */) {
         process.stderr.write(
           "[WARNING] --raw-output is enabled. Model output is not sanitized and may contain harmful ANSI sequences (e.g. for phishing or command injection). Use --accept-raw-output-risk to suppress this warning.\n"
         );
       }
       setupStdinCancellation();
-      coreEvents.on(CoreEvent.UserFeedback, handleUserFeedback);
+      coreEvents.on("user-feedback" /* UserFeedback */, handleUserFeedback);
       coreEvents.drainBacklogs();
       process.stdout.on("error", (err) => {
         if (err.code === "EPIPE") {
@@ -10956,7 +11186,7 @@ async function runNonInteractive({
       }
       if (streamFormatter) {
         streamFormatter.emitEvent({
-          type: JsonStreamEventType.INIT,
+          type: "init" /* INIT */,
           timestamp: (/* @__PURE__ */ new Date()).toISOString(),
           session_id: config.getSessionId(),
           model: config.getModel()
@@ -10994,7 +11224,7 @@ async function runNonInteractive({
       }
       if (streamFormatter) {
         streamFormatter.emitEvent({
-          type: JsonStreamEventType.MESSAGE,
+          type: "message" /* MESSAGE */,
           timestamp: (/* @__PURE__ */ new Date()).toISOString(),
           role: "user",
           content: input
@@ -11033,12 +11263,12 @@ async function runNonInteractive({
           const metrics = uiTelemetryService.getMetrics();
           const durationMs = Date.now() - startTime;
           streamFormatter.emitEvent({
-            type: JsonStreamEventType.RESULT,
+            type: "result" /* RESULT */,
             timestamp: (/* @__PURE__ */ new Date()).toISOString(),
             status: errorPayload ? "error" : "success",
             stats: streamFormatter.convertToStreamStats(metrics, durationMs)
           });
-        } else if (config.getOutputFormat() === OutputFormat.JSON) {
+        } else if (config.getOutputFormat() === "json" /* JSON */) {
           const formatter = new JsonFormatter();
           const stats = uiTelemetryService.getMetrics();
           textOutput.write(
@@ -11131,13 +11361,13 @@ async function runNonInteractive({
                   const output = isRaw ? part.text : stripAnsi(part.text);
                   if (streamFormatter) {
                     streamFormatter.emitEvent({
-                      type: JsonStreamEventType.MESSAGE,
+                      type: "message" /* MESSAGE */,
                       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
                       role: "assistant",
                       content: output,
                       delta: true
                     });
-                  } else if (config.getOutputFormat() === OutputFormat.JSON) {
+                  } else if (config.getOutputFormat() === "json" /* JSON */) {
                     responseText += output;
                   } else {
                     if (part.text) {
@@ -11150,13 +11380,13 @@ async function runNonInteractive({
             break;
           }
           case "tool_request": {
-            if (config.getOutputFormat() === OutputFormat.JSON) {
+            if (config.getOutputFormat() === "json" /* JSON */) {
               preToolResponseText = responseText || preToolResponseText;
               responseText = "";
             }
             if (streamFormatter) {
               streamFormatter.emitEvent({
-                type: JsonStreamEventType.TOOL_USE,
+                type: "tool_use" /* TOOL_USE */,
                 timestamp: (/* @__PURE__ */ new Date()).toISOString(),
                 tool_name: event.name,
                 tool_id: event.requestId,
@@ -11172,7 +11402,7 @@ async function runNonInteractive({
               const displayText = displayContentToString(display);
               const errorMsg = getTextContent(event.content) ?? "Tool error";
               streamFormatter.emitEvent({
-                type: JsonStreamEventType.TOOL_RESULT,
+                type: "tool_result" /* TOOL_RESULT */,
                 timestamp: (/* @__PURE__ */ new Date()).toISOString(),
                 tool_id: event.requestId,
                 status: event.isError ? "error" : "success",
@@ -11187,17 +11417,17 @@ async function runNonInteractive({
               const display = event.display?.result;
               const displayText = displayContentToString(display);
               const errorMsg = getTextContent(event.content) ?? "Tool error";
-              if (event.data?.["errorType"] === ToolErrorType.STOP_EXECUTION) {
-                if (config.getOutputFormat() === OutputFormat.JSON && !responseText && preToolResponseText) {
+              if (event.data?.["errorType"] === "stop_execution" /* STOP_EXECUTION */) {
+                if (config.getOutputFormat() === "json" /* JSON */ && !responseText && preToolResponseText) {
                   responseText = preToolResponseText;
                 }
                 const stopMessage = `Agent execution stopped: ${errorMsg}`;
-                if (config.getOutputFormat() === OutputFormat.TEXT) {
+                if (config.getOutputFormat() === "text" /* TEXT */) {
                   process.stderr.write(`${stopMessage}
 `);
                 }
               }
-              if (event.data?.["errorType"] === ToolErrorType.NO_SPACE_LEFT) {
+              if (event.data?.["errorType"] === "no_space_left" /* NO_SPACE_LEFT */) {
                 throw new FatalToolExecutionError(
                   "Error executing tool " + event.name + ": " + (displayText || errorMsg)
                 );
@@ -11232,12 +11462,12 @@ async function runNonInteractive({
               }
               if (streamFormatter) {
                 streamFormatter.emitEvent({
-                  type: JsonStreamEventType.ERROR,
+                  type: "error" /* ERROR */,
                   timestamp: (/* @__PURE__ */ new Date()).toISOString(),
                   severity: "error",
                   message: errorMessage
                 });
-              } else if (config.getOutputFormat() === OutputFormat.TEXT) {
+              } else if (config.getOutputFormat() === "text" /* TEXT */) {
                 process.stderr.write(`[ERROR] ${errorMessage}
 `);
               }
@@ -11258,12 +11488,12 @@ async function runNonInteractive({
             const errorCode = event._meta?.["code"];
             if (errorCode === "AGENT_EXECUTION_BLOCKED") {
               const blockMessage = `Agent execution blocked: ${event.message.trim()}`;
-              if (config.getOutputFormat() === OutputFormat.TEXT) {
+              if (config.getOutputFormat() === "text" /* TEXT */) {
                 process.stderr.write(`[WARNING] ${blockMessage}
 `);
               } else if (streamFormatter) {
                 streamFormatter.emitEvent({
-                  type: JsonStreamEventType.ERROR,
+                  type: "error" /* ERROR */,
                   timestamp: (/* @__PURE__ */ new Date()).toISOString(),
                   severity: "warning",
                   message: stripAnsi(blockMessage)
@@ -11273,13 +11503,13 @@ async function runNonInteractive({
               break;
             }
             const severity = event.status === "RESOURCE_EXHAUSTED" ? "error" : "warning";
-            if (config.getOutputFormat() === OutputFormat.TEXT) {
+            if (config.getOutputFormat() === "text" /* TEXT */) {
               process.stderr.write(`[WARNING] ${event.message}
 `);
             }
             if (streamFormatter) {
               streamFormatter.emitEvent({
-                type: JsonStreamEventType.ERROR,
+                type: "error" /* ERROR */,
                 timestamp: (/* @__PURE__ */ new Date()).toISOString(),
                 severity,
                 message: stripAnsi(event.message)
@@ -11299,7 +11529,7 @@ async function runNonInteractive({
                 );
               } else if (streamFormatter) {
                 streamFormatter.emitEvent({
-                  type: JsonStreamEventType.ERROR,
+                  type: "error" /* ERROR */,
                   timestamp: (/* @__PURE__ */ new Date()).toISOString(),
                   severity: "error",
                   message: "Maximum session turns exceeded"
@@ -11307,7 +11537,7 @@ async function runNonInteractive({
               }
             }
             const stopMessage = typeof event.data?.["message"] === "string" ? event.data["message"] : "";
-            if (stopMessage && config.getOutputFormat() === OutputFormat.TEXT) {
+            if (stopMessage && config.getOutputFormat() === "text" /* TEXT */) {
               process.stderr.write(`Agent execution stopped: ${stopMessage}
 `);
             }
@@ -11337,7 +11567,7 @@ async function runNonInteractive({
       abortController.signal.removeEventListener("abort", abortSession);
       scheduler?.dispose();
       consolePatcher.cleanup();
-      coreEvents.off(CoreEvent.UserFeedback, handleUserFeedback);
+      coreEvents.off("user-feedback" /* UserFeedback */, handleUserFeedback);
     }
     if (errorToHandle) {
       handleError(errorToHandle, config);
@@ -11365,7 +11595,7 @@ async function runNonInteractive2(params) {
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-V46GUHRF.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-P42LXPJX.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -11381,7 +11611,7 @@ async function runNonInteractive2(params) {
       }
     };
     const startTime = Date.now();
-    const streamFormatter = config.getOutputFormat() === OutputFormat.STREAM_JSON ? new StreamJsonFormatter() : null;
+    const streamFormatter = config.getOutputFormat() === "stream-json" /* STREAM_JSON */ ? new StreamJsonFormatter() : null;
     const abortController = new AbortController();
     let isAborting = false;
     let cancelMessageTimer = null;
@@ -11432,13 +11662,13 @@ async function runNonInteractive2(params) {
     let scheduler;
     try {
       consolePatcher.patch();
-      if (config.getRawOutput() && !config.getAcceptRawOutputRisk() && config.getOutputFormat() === OutputFormat.TEXT) {
+      if (config.getRawOutput() && !config.getAcceptRawOutputRisk() && config.getOutputFormat() === "text" /* TEXT */) {
         process.stderr.write(
           "[WARNING] --raw-output is enabled. Model output is not sanitized and may contain harmful ANSI sequences (e.g. for phishing or command injection). Use --accept-raw-output-risk to suppress this warning.\n"
         );
       }
       setupStdinCancellation();
-      coreEvents.on(CoreEvent.UserFeedback, handleUserFeedback);
+      coreEvents.on("user-feedback" /* UserFeedback */, handleUserFeedback);
       coreEvents.drainBacklogs();
       process.stdout.on("error", (err) => {
         if (err.code === "EPIPE") {
@@ -11462,7 +11692,7 @@ async function runNonInteractive2(params) {
       }
       if (streamFormatter) {
         streamFormatter.emitEvent({
-          type: JsonStreamEventType.INIT,
+          type: "init" /* INIT */,
           timestamp: (/* @__PURE__ */ new Date()).toISOString(),
           session_id: config.getSessionId(),
           model: config.getModel()
@@ -11500,7 +11730,7 @@ async function runNonInteractive2(params) {
       }
       if (streamFormatter) {
         streamFormatter.emitEvent({
-          type: JsonStreamEventType.MESSAGE,
+          type: "message" /* MESSAGE */,
           timestamp: (/* @__PURE__ */ new Date()).toISOString(),
           role: "user",
           content: input
@@ -11528,28 +11758,28 @@ async function runNonInteractive2(params) {
           if (abortController.signal.aborted) {
             handleCancellationError(config);
           }
-          if (event.type === GeminiEventType.Content) {
+          if (event.type === "content" /* Content */) {
             const isRaw = config.getRawOutput() || config.getAcceptRawOutputRisk();
             const output = isRaw ? event.value : stripAnsi(event.value);
             if (streamFormatter) {
               streamFormatter.emitEvent({
-                type: JsonStreamEventType.MESSAGE,
+                type: "message" /* MESSAGE */,
                 timestamp: (/* @__PURE__ */ new Date()).toISOString(),
                 role: "assistant",
                 content: output,
                 delta: true
               });
-            } else if (config.getOutputFormat() === OutputFormat.JSON) {
+            } else if (config.getOutputFormat() === "json" /* JSON */) {
               responseText += output;
             } else {
               if (event.value) {
                 textOutput.write(output);
               }
             }
-          } else if (event.type === GeminiEventType.ToolCallRequest) {
+          } else if (event.type === "tool_call_request" /* ToolCallRequest */) {
             if (streamFormatter) {
               streamFormatter.emitEvent({
-                type: JsonStreamEventType.TOOL_USE,
+                type: "tool_use" /* TOOL_USE */,
                 timestamp: (/* @__PURE__ */ new Date()).toISOString(),
                 tool_name: event.value.name,
                 tool_id: event.value.callId,
@@ -11557,33 +11787,33 @@ async function runNonInteractive2(params) {
               });
             }
             toolCallRequests.push(event.value);
-          } else if (event.type === GeminiEventType.LoopDetected) {
+          } else if (event.type === "loop_detected" /* LoopDetected */) {
             const message = "Loop detected, stopping execution";
             if (streamFormatter) {
               streamFormatter.emitEvent({
-                type: JsonStreamEventType.ERROR,
+                type: "error" /* ERROR */,
                 timestamp: (/* @__PURE__ */ new Date()).toISOString(),
                 severity: "warning",
                 message
               });
             }
             warnings.push(message);
-          } else if (event.type === GeminiEventType.MaxSessionTurns) {
+          } else if (event.type === "max_session_turns" /* MaxSessionTurns */) {
             const message = "Maximum session turns exceeded";
             if (streamFormatter) {
               streamFormatter.emitEvent({
-                type: JsonStreamEventType.ERROR,
+                type: "error" /* ERROR */,
                 timestamp: (/* @__PURE__ */ new Date()).toISOString(),
                 severity: "error",
                 message
               });
             }
             warnings.push(message);
-          } else if (event.type === GeminiEventType.Error) {
+          } else if (event.type === "error" /* Error */) {
             throw event.value.error;
-          } else if (event.type === GeminiEventType.AgentExecutionStopped) {
+          } else if (event.type === "agent_execution_stopped" /* AgentExecutionStopped */) {
             const stopMessage = `Agent execution stopped: ${event.value.systemMessage?.trim() || event.value.reason}`;
-            if (config.getOutputFormat() === OutputFormat.TEXT) {
+            if (config.getOutputFormat() === "text" /* TEXT */) {
               process.stderr.write(`${stopMessage}
 `);
             }
@@ -11591,7 +11821,7 @@ async function runNonInteractive2(params) {
               const metrics = uiTelemetryService.getMetrics();
               const durationMs = Date.now() - startTime;
               streamFormatter.emitEvent({
-                type: JsonStreamEventType.RESULT,
+                type: "result" /* RESULT */,
                 timestamp: (/* @__PURE__ */ new Date()).toISOString(),
                 status: "success",
                 stats: streamFormatter.convertToStreamStats(
@@ -11599,7 +11829,7 @@ async function runNonInteractive2(params) {
                   durationMs
                 )
               });
-            } else if (config.getOutputFormat() === OutputFormat.JSON) {
+            } else if (config.getOutputFormat() === "json" /* JSON */) {
               const formatter = new JsonFormatter();
               const stats = uiTelemetryService.getMetrics();
               textOutput.write(
@@ -11615,21 +11845,21 @@ async function runNonInteractive2(params) {
               textOutput.ensureTrailingNewline();
             }
             return;
-          } else if (event.type === GeminiEventType.AgentExecutionBlocked) {
+          } else if (event.type === "agent_execution_blocked" /* AgentExecutionBlocked */) {
             const blockMessage = `Agent execution blocked: ${event.value.systemMessage?.trim() || event.value.reason}`;
-            if (config.getOutputFormat() === OutputFormat.TEXT) {
+            if (config.getOutputFormat() === "text" /* TEXT */) {
               process.stderr.write(`[WARNING] ${blockMessage}
 `);
             } else if (streamFormatter) {
               streamFormatter.emitEvent({
-                type: JsonStreamEventType.ERROR,
+                type: "error" /* ERROR */,
                 timestamp: (/* @__PURE__ */ new Date()).toISOString(),
                 severity: "warning",
                 message: stripAnsi(blockMessage)
               });
             }
             warnings.push(blockMessage);
-          } else if (event.type === GeminiEventType.InvalidStream) {
+          } else if (event.type === "invalid_stream" /* InvalidStream */) {
             const eventValue = event.value;
             if (eventValue?.type === "NO_RESPONSE_TEXT") {
               invalidStreamError = TRUE_EMPTY_RESPONSE_MESSAGE;
@@ -11652,12 +11882,12 @@ async function runNonInteractive2(params) {
             );
             if (streamFormatter) {
               streamFormatter.emitEvent({
-                type: JsonStreamEventType.ERROR,
+                type: "error" /* ERROR */,
                 timestamp: (/* @__PURE__ */ new Date()).toISOString(),
                 severity: "error",
                 message: invalidStreamError
               });
-            } else if (config.getOutputFormat() === OutputFormat.TEXT) {
+            } else if (config.getOutputFormat() === "text" /* TEXT */) {
               process.stderr.write(`[ERROR] ${invalidStreamError}
 `);
             }
@@ -11677,7 +11907,7 @@ async function runNonInteractive2(params) {
             const requestInfo = completedToolCall.request;
             if (streamFormatter) {
               streamFormatter.emitEvent({
-                type: JsonStreamEventType.TOOL_RESULT,
+                type: "tool_result" /* TOOL_RESULT */,
                 timestamp: (/* @__PURE__ */ new Date()).toISOString(),
                 tool_id: requestInfo.callId,
                 status: completedToolCall.status === "error" ? "error" : "success",
@@ -11711,11 +11941,11 @@ async function runNonInteractive2(params) {
             );
           }
           const stopExecutionTool = completedToolCalls.find(
-            (tc) => tc.response.errorType === ToolErrorType.STOP_EXECUTION
+            (tc) => tc.response.errorType === "stop_execution" /* STOP_EXECUTION */
           );
           if (stopExecutionTool && stopExecutionTool.response.error) {
             const stopMessage = `Agent execution stopped: ${stopExecutionTool.response.error.message}`;
-            if (config.getOutputFormat() === OutputFormat.TEXT) {
+            if (config.getOutputFormat() === "text" /* TEXT */) {
               process.stderr.write(`${stopMessage}
 `);
             }
@@ -11723,7 +11953,7 @@ async function runNonInteractive2(params) {
               const metrics = uiTelemetryService.getMetrics();
               const durationMs = Date.now() - startTime;
               streamFormatter.emitEvent({
-                type: JsonStreamEventType.RESULT,
+                type: "result" /* RESULT */,
                 timestamp: (/* @__PURE__ */ new Date()).toISOString(),
                 status: "success",
                 stats: streamFormatter.convertToStreamStats(
@@ -11731,7 +11961,7 @@ async function runNonInteractive2(params) {
                   durationMs
                 )
               });
-            } else if (config.getOutputFormat() === OutputFormat.JSON) {
+            } else if (config.getOutputFormat() === "json" /* JSON */) {
               const formatter = new JsonFormatter();
               const stats = uiTelemetryService.getMetrics();
               textOutput.write(
@@ -11754,12 +11984,12 @@ async function runNonInteractive2(params) {
             const metrics = uiTelemetryService.getMetrics();
             const durationMs = Date.now() - startTime;
             streamFormatter.emitEvent({
-              type: JsonStreamEventType.RESULT,
+              type: "result" /* RESULT */,
               timestamp: (/* @__PURE__ */ new Date()).toISOString(),
               status: invalidStreamError ? "error" : "success",
               stats: streamFormatter.convertToStreamStats(metrics, durationMs)
             });
-          } else if (config.getOutputFormat() === OutputFormat.JSON) {
+          } else if (config.getOutputFormat() === "json" /* JSON */) {
             const formatter = new JsonFormatter();
             const stats = uiTelemetryService.getMetrics();
             textOutput.write(
@@ -11783,7 +12013,7 @@ async function runNonInteractive2(params) {
       cleanupStdinCancellation();
       scheduler?.dispose();
       consolePatcher.cleanup();
-      coreEvents.off(CoreEvent.UserFeedback, handleUserFeedback);
+      coreEvents.off("user-feedback" /* UserFeedback */, handleUserFeedback);
     }
     if (errorToHandle) {
       handleError(errorToHandle, config);
@@ -14174,12 +14404,12 @@ function toToolCallContent(toolResult) {
 }
 var basicPermissionOptions = [
   {
-    optionId: ToolConfirmationOutcome.ProceedOnce,
+    optionId: "proceed_once" /* ProceedOnce */,
     name: "Allow",
     kind: "allow_once"
   },
   {
-    optionId: ToolConfirmationOutcome.Cancel,
+    optionId: "cancel" /* Cancel */,
     name: "Reject",
     kind: "reject_once"
   }
@@ -14191,13 +14421,13 @@ function toPermissionOptions(confirmation, config, enablePermanentToolApproval =
     switch (confirmation.type) {
       case "edit":
         options.push({
-          optionId: ToolConfirmationOutcome.ProceedAlways,
+          optionId: "proceed_always" /* ProceedAlways */,
           name: "Allow for this session",
           kind: "allow_always"
         });
         if (enablePermanentToolApproval) {
           options.push({
-            optionId: ToolConfirmationOutcome.ProceedAlwaysAndSave,
+            optionId: "proceed_always_and_save" /* ProceedAlwaysAndSave */,
             name: "Allow for this file in all future sessions",
             kind: "allow_always"
           });
@@ -14205,13 +14435,13 @@ function toPermissionOptions(confirmation, config, enablePermanentToolApproval =
         break;
       case "exec":
         options.push({
-          optionId: ToolConfirmationOutcome.ProceedAlways,
+          optionId: "proceed_always" /* ProceedAlways */,
           name: "Allow for this session",
           kind: "allow_always"
         });
         if (enablePermanentToolApproval) {
           options.push({
-            optionId: ToolConfirmationOutcome.ProceedAlwaysAndSave,
+            optionId: "proceed_always_and_save" /* ProceedAlwaysAndSave */,
             name: "Allow this command for all future sessions",
             kind: "allow_always"
           });
@@ -14220,19 +14450,19 @@ function toPermissionOptions(confirmation, config, enablePermanentToolApproval =
       case "mcp":
         options.push(
           {
-            optionId: ToolConfirmationOutcome.ProceedAlwaysServer,
+            optionId: "proceed_always_server" /* ProceedAlwaysServer */,
             name: "Allow all server tools for this session",
             kind: "allow_always"
           },
           {
-            optionId: ToolConfirmationOutcome.ProceedAlwaysTool,
+            optionId: "proceed_always_tool" /* ProceedAlwaysTool */,
             name: "Allow tool for this session",
             kind: "allow_always"
           }
         );
         if (enablePermanentToolApproval) {
           options.push({
-            optionId: ToolConfirmationOutcome.ProceedAlwaysAndSave,
+            optionId: "proceed_always_and_save" /* ProceedAlwaysAndSave */,
             name: "Allow tool for all future sessions",
             kind: "allow_always"
           });
@@ -14240,13 +14470,13 @@ function toPermissionOptions(confirmation, config, enablePermanentToolApproval =
         break;
       case "info":
         options.push({
-          optionId: ToolConfirmationOutcome.ProceedAlways,
+          optionId: "proceed_always" /* ProceedAlways */,
           name: "Allow for this session",
           kind: "allow_always"
         });
         if (enablePermanentToolApproval) {
           options.push({
-            optionId: ToolConfirmationOutcome.ProceedAlwaysAndSave,
+            optionId: "proceed_always_and_save" /* ProceedAlwaysAndSave */,
             name: "Allow for all future sessions",
             kind: "allow_always"
           });
@@ -14278,21 +14508,21 @@ function toPermissionOptions(confirmation, config, enablePermanentToolApproval =
 }
 function toAcpToolKind(kind) {
   switch (kind) {
-    case Kind.Read:
-    case Kind.Edit:
-    case Kind.Execute:
-    case Kind.Search:
-    case Kind.Delete:
-    case Kind.Move:
-    case Kind.Think:
-    case Kind.Fetch:
-    case Kind.SwitchMode:
-    case Kind.Other:
+    case "read" /* Read */:
+    case "edit" /* Edit */:
+    case "execute" /* Execute */:
+    case "search" /* Search */:
+    case "delete" /* Delete */:
+    case "move" /* Move */:
+    case "think" /* Think */:
+    case "fetch" /* Fetch */:
+    case "switch_mode" /* SwitchMode */:
+    case "other" /* Other */:
       return kind;
-    case Kind.Agent:
+    case "agent" /* Agent */:
       return "think";
-    case Kind.Plan:
-    case Kind.Communicate:
+    case "plan" /* Plan */:
+    case "communicate" /* Communicate */:
     default:
       return "other";
   }
@@ -14300,24 +14530,24 @@ function toAcpToolKind(kind) {
 function buildAvailableModes(isPlanEnabled) {
   const modes = [
     {
-      id: ApprovalMode.DEFAULT,
+      id: "default" /* DEFAULT */,
       name: "Default",
       description: "Prompts for approval"
     },
     {
-      id: ApprovalMode.AUTO_EDIT,
+      id: "autoEdit" /* AUTO_EDIT */,
       name: "Auto Edit",
       description: "Auto-approves edit tools"
     },
     {
-      id: ApprovalMode.YOLO,
+      id: "yolo" /* YOLO */,
       name: "YOLO",
       description: "Auto-approves all tools"
     }
   ];
   if (isPlanEnabled) {
     modes.push({
-      id: ApprovalMode.PLAN,
+      id: "plan" /* PLAN */,
       name: "Plan",
       description: "Read-only mode"
     });
@@ -14330,7 +14560,7 @@ function buildAvailableModels(config, settings) {
   const useGemini31 = config.getGemini31LaunchedSync?.() ?? false;
   const useGemini3_5Flash = config.hasGemini35FlashGAAccess?.() ?? false;
   const selectedAuthType = settings.merged.security.auth.selectedType;
-  const useCustomToolModel = useGemini31 && selectedAuthType === AuthType.USE_GEMINI;
+  const useCustomToolModel = useGemini31 && selectedAuthType === "gemini-api-key" /* USE_GEMINI */;
   if (config.getExperimentalDynamicModelConfiguration?.() === true && config.getModelConfigService) {
     const options = config.getModelConfigService().getAvailableModelOptions({
       useGemini3_1: useGemini31,
@@ -14416,11 +14646,11 @@ var Session = class {
     this.connection = connection;
     this.settings = settings;
     coreEvents.on(
-      CoreEvent.ApprovalModeChanged,
+      "approval-mode-changed" /* ApprovalModeChanged */,
       this.handleApprovalModeChanged
     );
     this.context.config.getMessageBus()?.subscribe(
-      MessageBusType.TOOL_CONFIRMATION_REQUEST,
+      "tool-confirmation-request" /* TOOL_CONFIRMATION_REQUEST */,
       this.handleToolConfirmationRequest,
       { signal: this.disposeController.signal }
     );
@@ -14444,7 +14674,7 @@ var Session = class {
           "Policy engine missing. Denying tool confirmation request."
         );
         await messageBus.publish({
-          type: MessageBusType.TOOL_CONFIRMATION_RESPONSE,
+          type: "tool-confirmation-response" /* TOOL_CONFIRMATION_RESPONSE */,
           correlationId: request.correlationId,
           confirmed: false,
           requiresUserConfirmation: false
@@ -14457,7 +14687,7 @@ var Session = class {
           "Tool confirmation request missing tool name. Denying."
         );
         await messageBus.publish({
-          type: MessageBusType.TOOL_CONFIRMATION_RESPONSE,
+          type: "tool-confirmation-response" /* TOOL_CONFIRMATION_RESPONSE */,
           correlationId: request.correlationId,
           confirmed: false,
           requiresUserConfirmation: false
@@ -14470,7 +14700,7 @@ var Session = class {
           `Tool confirmation request for unknown tool: ${toolName}. Denying.`
         );
         await messageBus.publish({
-          type: MessageBusType.TOOL_CONFIRMATION_RESPONSE,
+          type: "tool-confirmation-response" /* TOOL_CONFIRMATION_RESPONSE */,
           correlationId: request.correlationId,
           confirmed: false,
           requiresUserConfirmation: false
@@ -14486,15 +14716,15 @@ var Session = class {
         request.subagent
       );
       await messageBus.publish({
-        type: MessageBusType.TOOL_CONFIRMATION_RESPONSE,
+        type: "tool-confirmation-response" /* TOOL_CONFIRMATION_RESPONSE */,
         correlationId: request.correlationId,
-        confirmed: result.decision === PolicyDecision.ALLOW,
-        requiresUserConfirmation: result.decision === PolicyDecision.ASK_USER
+        confirmed: result.decision === "allow" /* ALLOW */,
+        requiresUserConfirmation: result.decision === "ask_user" /* ASK_USER */
       });
     } catch (error) {
       debugLogger.error("Error handling tool confirmation request:", error);
       await this.context.config.getMessageBus()?.publish({
-        type: MessageBusType.TOOL_CONFIRMATION_RESPONSE,
+        type: "tool-confirmation-response" /* TOOL_CONFIRMATION_RESPONSE */,
         correlationId: request.correlationId,
         confirmed: false,
         requiresUserConfirmation: false
@@ -14514,7 +14744,7 @@ var Session = class {
   };
   dispose() {
     coreEvents.off(
-      CoreEvent.ApprovalModeChanged,
+      "approval-mode-changed" /* ApprovalModeChanged */,
       this.handleApprovalModeChanged
     );
     this.disposeController.abort();
@@ -14603,7 +14833,7 @@ ${thought.description}`;
             await this.sendUpdate({
               sessionUpdate: "tool_call",
               toolCallId: toolCall.id,
-              status: toolCall.status === CoreToolCallStatus.Success ? "completed" : "failed",
+              status: toolCall.status === "success" /* Success */ ? "completed" : "failed",
               title: toolCall.displayName || toolCall.name,
               content: toolCallContent,
               kind: tool ? toAcpToolKind(tool.kind) : "other"
@@ -14695,7 +14925,7 @@ ${thought.description}`;
             return { stopReason: "cancelled" };
           }
           switch (event.type) {
-            case GeminiEventType.Content: {
+            case "content" /* Content */: {
               const content = {
                 type: "text",
                 text: event.value
@@ -14706,7 +14936,7 @@ ${thought.description}`;
               });
               break;
             }
-            case GeminiEventType.Thought: {
+            case "thought" /* Thought */: {
               const thoughtText = `**${event.value.subject}**
 ${event.value.description}`;
               await this.sendUpdate({
@@ -14715,10 +14945,10 @@ ${event.value.description}`;
               });
               break;
             }
-            case GeminiEventType.ToolCallRequest:
+            case "tool_call_request" /* ToolCallRequest */:
               toolCallRequests.push(event.value);
               break;
-            case GeminiEventType.Finished: {
+            case "finished" /* Finished */: {
               const usage2 = event.value.usageMetadata;
               if (usage2) {
                 turnInputTokens = usage2.promptTokenCount ?? turnInputTokens;
@@ -14726,19 +14956,19 @@ ${event.value.description}`;
               }
               break;
             }
-            case GeminiEventType.ModelInfo:
+            case "model_info" /* ModelInfo */:
               turnModelId = event.value;
               break;
-            case GeminiEventType.MaxSessionTurns:
+            case "max_session_turns" /* MaxSessionTurns */:
               stopReason = "max_turn_requests";
               break;
-            case GeminiEventType.LoopDetected:
+            case "loop_detected" /* LoopDetected */:
               stopReason = "max_turn_requests";
               break;
-            case GeminiEventType.ContextWindowWillOverflow:
+            case "context_window_will_overflow" /* ContextWindowWillOverflow */:
               stopReason = "max_tokens";
               break;
-            case GeminiEventType.Error: {
+            case "error" /* Error */: {
               const parseResult = StructuredErrorSchema.safeParse(
                 event.value.error
               );
@@ -14966,7 +15196,7 @@ ${event.value.description}`;
         const output = RequestPermissionResponseSchema.parse(
           await this.connection.requestPermission(params)
         );
-        const outcome = output.outcome.outcome === "cancelled" ? ToolConfirmationOutcome.Cancel : external_exports.nativeEnum(ToolConfirmationOutcome).parse(output.outcome.optionId);
+        const outcome = output.outcome.outcome === "cancelled" ? "cancel" /* Cancel */ : external_exports.nativeEnum(ToolConfirmationOutcome).parse(output.outcome.optionId);
         await confirmationDetails.onConfirm(outcome);
         await updatePolicy(
           tool,
@@ -14977,16 +15207,16 @@ ${event.value.description}`;
           invocation
         );
         switch (outcome) {
-          case ToolConfirmationOutcome.Cancel:
+          case "cancel" /* Cancel */:
             return errorResponse(
               new Error(`Tool "${fc.name}" was canceled by the user.`)
             );
-          case ToolConfirmationOutcome.ProceedOnce:
-          case ToolConfirmationOutcome.ProceedAlways:
-          case ToolConfirmationOutcome.ProceedAlwaysAndSave:
-          case ToolConfirmationOutcome.ProceedAlwaysServer:
-          case ToolConfirmationOutcome.ProceedAlwaysTool:
-          case ToolConfirmationOutcome.ModifyWithEditor:
+          case "proceed_once" /* ProceedOnce */:
+          case "proceed_always" /* ProceedAlways */:
+          case "proceed_always_and_save" /* ProceedAlwaysAndSave */:
+          case "proceed_always_server" /* ProceedAlwaysServer */:
+          case "proceed_always_tool" /* ProceedAlwaysTool */:
+          case "modify_with_editor" /* ModifyWithEditor */:
             break;
           default: {
             const resultOutcome = outcome;
@@ -15040,7 +15270,7 @@ ${event.value.description}`;
       );
       this.chat.recordCompletedToolCalls(this.context.config.getActiveModel(), [
         {
-          status: CoreToolCallStatus.Success,
+          status: "success" /* Success */,
           request: {
             callId,
             name: fc.name,
@@ -15085,7 +15315,7 @@ ${event.value.description}`;
       });
       this.chat.recordCompletedToolCalls(this.context.config.getActiveModel(), [
         {
-          status: CoreToolCallStatus.Error,
+          status: "error" /* Error */,
           request: {
             callId,
             name: fc.name,
@@ -15213,12 +15443,12 @@ ${event.value.description}`;
               sessionId: this.id,
               options: [
                 {
-                  optionId: ToolConfirmationOutcome.ProceedOnce,
+                  optionId: "proceed_once" /* ProceedOnce */,
                   name: "Allow once",
                   kind: "allow_once"
                 },
                 {
-                  optionId: ToolConfirmationOutcome.Cancel,
+                  optionId: "cancel" /* Cancel */,
                   name: "Deny",
                   kind: "reject_once"
                 }
@@ -15243,8 +15473,8 @@ ${event.value.description}`;
             const output = RequestPermissionResponseSchema.parse(
               await this.connection.requestPermission(params)
             );
-            const outcome = output.outcome.outcome === "cancelled" ? ToolConfirmationOutcome.Cancel : external_exports.nativeEnum(ToolConfirmationOutcome).parse(output.outcome.optionId);
-            if (outcome === ToolConfirmationOutcome.ProceedOnce) {
+            const outcome = output.outcome.outcome === "cancelled" ? "cancel" /* Cancel */ : external_exports.nativeEnum(ToolConfirmationOutcome).parse(output.outcome.optionId);
+            if (outcome === "proceed_once" /* ProceedOnce */) {
               this.context.config.getWorkspaceContext().addReadOnlyPath(absolutePath);
               validationError = null;
             } else {
@@ -15681,7 +15911,7 @@ var AcpSessionManager = class {
       mcpServers,
       loadedSettings
     );
-    const authType = loadedSettings.merged.security.auth.selectedType || (authDetails.baseUrl || process.env["GOOGLE_GEMINI_BASE_URL"] ? AuthType.GATEWAY : AuthType.USE_GEMINI);
+    const authType = loadedSettings.merged.security.auth.selectedType || (authDetails.baseUrl || process.env["GOOGLE_GEMINI_BASE_URL"] ? "gateway" /* GATEWAY */ : "gemini-api-key" /* USE_GEMINI */);
     let isAuthenticated = false;
     let authErrorMessage = "";
     try {
@@ -15693,7 +15923,7 @@ var AcpSessionManager = class {
       );
       isAuthenticated = true;
       const contentGeneratorConfig = config.getContentGeneratorConfig();
-      if (authType === AuthType.USE_GEMINI && (!contentGeneratorConfig || !contentGeneratorConfig.apiKey)) {
+      if (authType === "gemini-api-key" /* USE_GEMINI */ && (!contentGeneratorConfig || !contentGeneratorConfig.apiKey)) {
         isAuthenticated = false;
         authErrorMessage = "Gemini API key is missing or not configured.";
       }
@@ -15802,7 +16032,7 @@ var AcpSessionManager = class {
     return response;
   }
   async initializeSessionConfig(sessionId, cwd, mcpServers, authDetails) {
-    const selectedAuthType = this.settings.merged.security.auth.selectedType || (authDetails.baseUrl || process.env["GOOGLE_GEMINI_BASE_URL"] ? AuthType.GATEWAY : void 0);
+    const selectedAuthType = this.settings.merged.security.auth.selectedType || (authDetails.baseUrl || process.env["GOOGLE_GEMINI_BASE_URL"] ? "gateway" /* GATEWAY */ : void 0);
     if (!selectedAuthType) {
       throw RequestError.authRequired();
     }
@@ -15903,12 +16133,12 @@ var GeminiAgent = class {
     }
     const authMethods = [
       {
-        id: AuthType.LOGIN_WITH_GOOGLE,
+        id: "oauth-personal" /* LOGIN_WITH_GOOGLE */,
         name: "Log in with Google",
         description: "Log in with your Google account"
       },
       {
-        id: AuthType.USE_GEMINI,
+        id: "gemini-api-key" /* USE_GEMINI */,
         name: "Gemini API key",
         description: "Use an API key with Gemini Developer API",
         _meta: {
@@ -15918,12 +16148,12 @@ var GeminiAgent = class {
         }
       },
       {
-        id: AuthType.USE_VERTEX_AI,
+        id: "vertex-ai" /* USE_VERTEX_AI */,
         name: "Vertex AI",
         description: "Use an API key with Vertex AI GenAI API"
       },
       {
-        id: AuthType.GATEWAY,
+        id: "gateway" /* GATEWAY */,
         name: "AI API Gateway",
         description: "Use a custom AI API Gateway",
         _meta: {
@@ -16096,7 +16326,7 @@ async function validateNonInteractiveAuth(configuredAuthType, useExternalAuth, n
     }
     return authType;
   } catch (error) {
-    if (nonInteractiveConfig.getOutputFormat() === OutputFormat.JSON) {
+    if (nonInteractiveConfig.getOutputFormat() === "json" /* JSON */) {
       handleError(
         error instanceof Error ? error : new Error(String(error)),
         nonInteractiveConfig,
@@ -16291,10 +16521,10 @@ var SlashCommandConflictHandler = class {
     this.handleConflicts = this.handleConflicts.bind(this);
   }
   start() {
-    coreEvents.on(CoreEvent.SlashCommandConflicts, this.handleConflicts);
+    coreEvents.on("slash-command-conflicts" /* SlashCommandConflicts */, this.handleConflicts);
   }
   stop() {
-    coreEvents.off(CoreEvent.SlashCommandConflicts, this.handleConflicts);
+    coreEvents.off("slash-command-conflicts" /* SlashCommandConflicts */, this.handleConflicts);
     if (this.flushTimeout) {
       clearTimeout(this.flushTimeout);
       this.flushTimeout = null;
@@ -16575,7 +16805,7 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
   }
 }
 async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
-  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-RGOYDSMH.js");
+  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-GGARXT6P.js");
   await doStartUI(
     config,
     settings,
@@ -16678,12 +16908,12 @@ async function main() {
   dns.setDefaultResultOrder(
     validateDnsResolutionOrder(settings.merged.advanced.dnsResolutionOrder)
   );
-  if (!settings.merged.security.auth.selectedType || settings.merged.security.auth.selectedType === AuthType.LEGACY_CLOUD_SHELL) {
+  if (!settings.merged.security.auth.selectedType || settings.merged.security.auth.selectedType === "cloud-shell" /* LEGACY_CLOUD_SHELL */) {
     if (process.env["CLOUD_SHELL"] === "true" || process.env["GEMINI_CLI_USE_COMPUTE_ADC"] === "true") {
       settings.setValue(
         "User" /* User */,
         "security.auth.selectedType",
-        AuthType.COMPUTE_ADC
+        "compute-default-credentials" /* COMPUTE_ADC */
       );
     }
   }
@@ -16784,7 +17014,7 @@ ${finalArgs[promptIndex + 1]}`;
     await config.storage.initialize();
     adminControlsListner.setConfig(config);
     if (config.isInteractive() && settings.merged.general.devtools) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-V46GUHRF.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-P42LXPJX.js");
       setupInitialActivityLogger(config);
     }
     registerTelemetryConfig(config);
@@ -16792,7 +17022,7 @@ ${finalArgs[promptIndex + 1]}`;
     const messageBus = config.getMessageBus();
     createPolicyUpdater2(policyEngine, messageBus, config.storage);
     registerCleanup(async () => {
-      await config?.getHookSystem()?.fireSessionEndEvent(SessionEndReason.Exit);
+      await config?.getHookSystem()?.fireSessionEndEvent("exit" /* Exit */);
     });
     if (!config.getAcpMode()) {
       registerCleanup(consolePatcher.cleanup);
@@ -16843,7 +17073,7 @@ ${finalArgs[promptIndex + 1]}`;
     const initAppHandle = startupProfiler.start("initialize_app");
     const initializationResult = await initializeApp(config, settings);
     initAppHandle?.end();
-    import("./liteRtServerManager-IJ4I2PZA.js").then(({ LiteRtServerManager }) => {
+    import("./liteRtServerManager-YLOGF7RQ.js").then(({ LiteRtServerManager }) => {
       const mergedGemma = settings.merged.experimental?.gemmaModelRouter;
       if (!mergedGemma) return;
       const userGemma = settings.forScope("User" /* User */).settings.experimental?.gemmaModelRouter;
@@ -16853,7 +17083,7 @@ ${finalArgs[promptIndex + 1]}`;
         autoStartServer: userGemma?.autoStartServer
       });
     }).catch((e) => debugLogger.warn("LiteRT auto-start import failed:", e));
-    if (settings.merged.security.auth.selectedType === AuthType.LOGIN_WITH_GOOGLE && config.isBrowserLaunchSuppressed()) {
+    if (settings.merged.security.auth.selectedType === "oauth-personal" /* LOGIN_WITH_GOOGLE */ && config.isBrowserLaunchSuppressed()) {
       await getOauthClient(settings.merged.security.auth.selectedType, config);
     }
     if (config.getAcpMode()) {
@@ -16869,7 +17099,7 @@ ${finalArgs[promptIndex + 1]}`;
       ...rawStartupWarnings.map((message) => ({
         id: `startup-${createHash2("sha256").update(message).digest("hex").substring(0, 16)}`,
         message,
-        priority: WarningPriority.High
+        priority: "high" /* High */
       })),
       ...await getUserStartupWarnings(settings.merged, void 0, {
         isAlternateBuffer: useAlternateBuffer
@@ -16906,7 +17136,7 @@ ${finalArgs[promptIndex + 1]}`;
 ${input}` : stdinData;
       }
     }
-    const sessionStartSource = resumedSessionData ? SessionStartSource.Resume : SessionStartSource.Startup;
+    const sessionStartSource = resumedSessionData ? "resume" /* Resume */ : "startup" /* Startup */;
     const hookSystem = config?.getHookSystem();
     if (hookSystem) {
       const result = await hookSystem.fireSessionStartEvent(sessionStartSource);
@@ -16963,8 +17193,8 @@ ${input}` : wrappedContext;
   }
 }
 function initializeOutputListenersAndFlush(config) {
-  if (coreEvents.listenerCount(CoreEvent.Output) === 0) {
-    coreEvents.on(CoreEvent.Output, (payload) => {
+  if (coreEvents.listenerCount("output" /* Output */) === 0) {
+    coreEvents.on("output" /* Output */, (payload) => {
       if (payload.isStderr) {
         writeToStderr(payload.chunk, payload.encoding);
       } else {
@@ -16972,8 +17202,8 @@ function initializeOutputListenersAndFlush(config) {
       }
     });
   }
-  if (coreEvents.listenerCount(CoreEvent.ConsoleLog) === 0) {
-    coreEvents.on(CoreEvent.ConsoleLog, (payload) => {
+  if (coreEvents.listenerCount("console-log" /* ConsoleLog */) === 0) {
+    coreEvents.on("console-log" /* ConsoleLog */, (payload) => {
       if (payload.type === "error" || payload.type === "warn") {
         writeToStderr(payload.content + "\n");
       } else {
@@ -16981,8 +17211,8 @@ function initializeOutputListenersAndFlush(config) {
       }
     });
   }
-  if (coreEvents.listenerCount(CoreEvent.UserFeedback) === 0) {
-    coreEvents.on(CoreEvent.UserFeedback, (payload) => {
+  if (coreEvents.listenerCount("user-feedback" /* UserFeedback */) === 0) {
+    coreEvents.on("user-feedback" /* UserFeedback */, (payload) => {
       writeToStderr(payload.message + "\n");
     });
   }
@@ -16990,7 +17220,7 @@ function initializeOutputListenersAndFlush(config) {
   const forceToStderr = outputFormat === "json";
   coreEvents.drainBacklogs(
     (event, args) => {
-      if (forceToStderr && event === CoreEvent.Output) {
+      if (forceToStderr && event === "output" /* Output */) {
         const payload = args[0];
         if (!payload.isStderr) {
           return {