@google/gemini-cli 0.57.0 → 0.58.0-preview.0

package/bundle/{core-2NMRPWUN.js → dist-2CGQYGZC.js}

@@ -553,6 +553,7 @@ import {
   buildUserSteeringHintPrompt,
   bytesToMB,
   calculateReplacement,
+  canonicalizeMacosPath,
   captureHeapSnapshot,
   categorizeAndConcatenate,
   checkExhaustive,
@@ -1083,7 +1084,7 @@ import {
   wrapUntrusted,
   writeToStderr,
   writeToStdout
-} from "./chunk-DFPYJMVX.js";
+} from "./chunk-TYMOJXZO.js";
 import "./chunk-664ZODQF.js";
 import {
   SpanStatusCode,
@@ -1647,6 +1648,7 @@ export {
   buildUserSteeringHintPrompt,
   bytesToMB,
   calculateReplacement,
+  canonicalizeMacosPath,
   captureHeapSnapshot,
   categorizeAndConcatenate,
   checkExhaustive,

package/bundle/docs/changelogs/preview.md

@@ -1,6 +1,6 @@
-# Preview release: v0.55.0-preview.1
+# Preview release: v0.57.0-preview.0
 
-Released: August 06, 2026
+Released: August 19, 2026
 
 Our preview release includes the latest, new, and experimental features. This
 release may not be as stable as our [latest weekly release](latest.md).
@@ -13,101 +13,85 @@ npm install -g @google/gemini-cli@preview
 
 ## Highlights
 
-- **Antigravity Agent & PR Generator:** Integrated the Antigravity agent runner,
-  Firestore dual-locking for concurrency, prompt templates, and ingestion
-  testing utilities.
-- **Caretaker Triage & Issue Management:** Enhanced the issue triage workflow by
-  automatically posting a comment before closing issues, and sanitizing and
-  wrapping issue titles in `untrusted_context`.
-- **Core API & Session Stability:** Enforced HTTPS for
-  GoogleCredentialsAuthProvider to prevent cleartext leakage, rotated session
-  IDs on model fallback to prevent stateful API errors, and refined chat history
-  by filtering out thought parts when context management is disabled.
+- **TUI & UX Enhancements**: Prevented indefinite TUI hangs by adding execution
+  timeouts, improved autocomplete suggestions with trailing spaces, forced
+  terminal buffer rerenders when exiting external editors, and clarified privacy
+  notice selection options.
+- **Improved Evals & Testing**: Added a new tool call formatter and integrated
+  failure summaries into evals, improving visibility and test validation.
+- **Core Reliability & Resilience**: Implemented context-aware silent retries
+  and availability TTL for capacity errors, rolled back entire multi-turn
+  requests on cancellation or abort, and dynamically resolved Cloud Workstations
+  proxy redirect URIs for OAuth flows.
+- **Sub-agent & Guardrail Fixes**: Formatted the `cli_help` subagent output as
+  Markdown, prevented subagents from running when agents mode is disabled, and
+  resolved a subagent handoff token regression on startup.
 
 ## What's Changed
 
-- chore(release): bump version to 0.55.0-nightly.20260728.gd29268d36 by
-  @gemini-cli-robot in
-  [#28569](https://github.com/google-gemini/gemini-cli/pull/28569)
-- Changelog for v0.54.0-preview.0 by @gemini-cli-robot in
-  [#28567](https://github.com/google-gemini/gemini-cli/pull/28567)
-- Changelog for v0.53.0 by @gemini-cli-robot in
-  [#28568](https://github.com/google-gemini/gemini-cli/pull/28568)
-- chore/release: bump version to 0.55.0-nightly.20260729.g3499c84f7 by
-  @gemini-cli-robot in
-  [#28573](https://github.com/google-gemini/gemini-cli/pull/28573)
-- fix(core): classify capacity exhaustion as terminal to prevent retry hangs by
+- fix(core): dynamically resolve Cloud Workstations proxy redirect URI for OAuth
+  flows by @amelidev in
+  [#28688](https://github.com/google-gemini/gemini-cli/pull/28688)
+- fix(core): resolve swallowed directory mismatch in IDE connections by
+  @amelidev in [#28729](https://github.com/google-gemini/gemini-cli/pull/28729)
+- Feat/eval validate by @ved015 in
+  [#28344](https://github.com/google-gemini/gemini-cli/pull/28344)
+- feat(evals): add tool call formatter and integrate failure summaries by
+  @ved015 in [#28305](https://github.com/google-gemini/gemini-cli/pull/28305)
+- Changelog for v0.55.1 by @gemini-cli-robot in
+  [#28779](https://github.com/google-gemini/gemini-cli/pull/28779)
+- test(e2e): stabilize file-system-interactive test on slow runners by
+  @DavidAPierce in
+  [#28793](https://github.com/google-gemini/gemini-cli/pull/28793)
+- fix(core): implement context-aware silent retries and availability TTL for
+  capacity errors (#28761) by @DavidAPierce in
+  [#28790](https://github.com/google-gemini/gemini-cli/pull/28790)
+- fix(core): rollback entire multi-turn request on cancellation or abort by
+  @amelidev in [#28801](https://github.com/google-gemini/gemini-cli/pull/28801)
+- fix(core): normalize git environment and resolve workspace state mismatch by
   @luisfelipe-alt in
-  [#28599](https://github.com/google-gemini/gemini-cli/pull/28599)
-- fix(core,cli): propagate InvalidStreamError details to UI for specific empty
-  response guidance by @DavidAPierce in
-  [#28566](https://github.com/google-gemini/gemini-cli/pull/28566)
-- fix(cli): fall back to embedded macOS seatbelt profiles if missing by
-  @amelidev in [#28551](https://github.com/google-gemini/gemini-cli/pull/28551)
-- feat(pr-generator-core): add environment config parser, command executor,
-  GitHub R… by @joneba-google in
-  [#28435](https://github.com/google-gemini/gemini-cli/pull/28435)
-- feat(pr-generator-orchestrator): implement iterative bug-fixing state machine
-  and container worker entrypoint by @joneba-google in
-  [#28433](https://github.com/google-gemini/gemini-cli/pull/28433)
-- feat(pr-generator-infra): configure Cloud Run job, Workflows definition, and
-  Dockerfile by @joneba-google in
-  [#28431](https://github.com/google-gemini/gemini-cli/pull/28431)
-- fix(release): handle npm dist-tag deletion failures on registries that forbid
-  it by @DavidAPierce in
-  [#28694](https://github.com/google-gemini/gemini-cli/pull/28694)
-- fix(core): stop a new user message fusing into an unanswered tool response by
-  @adamfweidman in
-  [#28700](https://github.com/google-gemini/gemini-cli/pull/28700)
-- fix(core,cli): repair /compress session reload and quota-fallback tool
-  response loss by @adamfweidman in
-  [#28672](https://github.com/google-gemini/gemini-cli/pull/28672)
-- fix(core): preserve functionCall thoughtSignature when stripping thought parts
-  by @sarbojitrana in
-  [#28607](https://github.com/google-gemini/gemini-cli/pull/28607)
-- fix(core): unwrap and parse nested gaxios streaming errors from cause message
-  by @luisfelipe-alt in
-  [#28689](https://github.com/google-gemini/gemini-cli/pull/28689)
-- Changelog for v0.53.0-preview.0 by @gemini-cli-robot in
-  [#28507](https://github.com/google-gemini/gemini-cli/pull/28507)
-- Changelog for v0.52.0 by @gemini-cli-robot in
-  [#28508](https://github.com/google-gemini/gemini-cli/pull/28508)
-- chore(release): bump version to 0.54.0-nightly.20260722.gf743ab579 by
-  @gemini-cli-robot in
-  [#28510](https://github.com/google-gemini/gemini-cli/pull/28510)
-- fix(caretaker): sanitize and wrap issue title in untrusted_context by @chadd28
-  in [#28352](https://github.com/google-gemini/gemini-cli/pull/28352)
-- chore(caretaker): update vitest to v3.2.4 and add package-lock.json files by
-  @chadd28 in [#28409](https://github.com/google-gemini/gemini-cli/pull/28409)
-- fix(core): rotate session ID on model fallback to prevent stateful API errors
-  by @amelidev in
-  [#28469](https://github.com/google-gemini/gemini-cli/pull/28469)
-- feat(caretaker-triage): post comment before auto-closing issues by @chadd28 in
-  [#28411](https://github.com/google-gemini/gemini-cli/pull/28411)
-- fix(core): enforce HTTPS for GoogleCredentialsAuthProvider to prevent
-  cleartext leakage by @amelidev in
-  [#28517](https://github.com/google-gemini/gemini-cli/pull/28517)
-- fix(core): filter out thought parts from getHistoryTurns when context
-  management is disabled by @DavidAPierce in
-  [#28509](https://github.com/google-gemini/gemini-cli/pull/28509)
-- fix(a2a-server): normalize CRLF line endings to LF in getProposedContent by
-  @luisfelipe-alt in
-  [#28531](https://github.com/google-gemini/gemini-cli/pull/28531)
-- fix(core): enforce explicit tag length and validation in file keychain by
-  @luisfelipe-alt in
-  [#28523](https://github.com/google-gemini/gemini-cli/pull/28523)
-- chore/release: bump version to 0.54.0-nightly.20260728.gbef611950 by
-  @gemini-cli-robot in
-  [#28552](https://github.com/google-gemini/gemini-cli/pull/28552)
-- feat(pr-generator-db): implement Firestore concurrency dual-locking and test
-  ingestion utilities by @joneba-google in
-  [#28432](https://github.com/google-gemini/gemini-cli/pull/28432)
-- feat(pr-generator-agent): implement Antigravity agent runner and prompt
-  templates … by @joneba-google in
-  [#28434](https://github.com/google-gemini/gemini-cli/pull/28434)
-- fix(core): skip merged function-response turns when finding the active loop by
-  @adamfweidman in
-  [#28565](https://github.com/google-gemini/gemini-cli/pull/28565)
+  [#28792](https://github.com/google-gemini/gemini-cli/pull/28792)
+- [SSR Agent] Issue Fix (19826): Migrate process.env to vi.stubEnv in a2a-server
+  tests by @joneba-google in
+  [#28811](https://github.com/google-gemini/gemini-cli/pull/28811)
+- [SSR Agent] Issue Fix (21911): Add composite flag to packages/cli tsconfig by
+  @joneba-google in
+  [#28813](https://github.com/google-gemini/gemini-cli/pull/28813)
+- [SSR Agent] Issue Fix (26120): Clarify privacy notice wording and selection
+  options by @joneba-google in
+  [#28820](https://github.com/google-gemini/gemini-cli/pull/28820)
+- [SSR Agent] Issue Fix (21919): Fix TypeScript strict-null errors in
+  integration tests by @joneba-google in
+  [#28814](https://github.com/google-gemini/gemini-cli/pull/28814)
+- [SSR Agent] Issue Fix (21477): Prevent indefinite TUI hang by adding execution
+  timeouts by @joneba-google in
+  [#28812](https://github.com/google-gemini/gemini-cli/pull/28812)
+- [SSR Agent] Issue Fix (19239): Update /clear command docs to include context
+  reset by @joneba-google in
+  [#28847](https://github.com/google-gemini/gemini-cli/pull/28847)
+- [SSR Agent] Issue Fix (24587): Fix misleading admin error for personal
+  accounts by @joneba-google in
+  [#28819](https://github.com/google-gemini/gemini-cli/pull/28819)
+- [SSR Agent] Issue Fix (19463): Format cli_help subagent output as markdown by
+  @joneba-google in
+  [#28864](https://github.com/google-gemini/gemini-cli/pull/28864)
+- [SSR Agent] Issue Fix (28050): Add Vertex AI locations documentation link by
+  @joneba-google in
+  [#28865](https://github.com/google-gemini/gemini-cli/pull/28865)
+- [SSR Agent] Issue Fix (22093): Prevent subagents from running when agents mode
+  is disabled by @joneba-google in
+  [#28867](https://github.com/google-gemini/gemini-cli/pull/28867)
+- [SSR Agent] Issue Fix (23954): Add trailing space to autocomplete suggestions
+  by @joneba-google in
+  [#28868](https://github.com/google-gemini/gemini-cli/pull/28868)
+- [SSR Agent] Issue Fix (24935): Force terminal buffer rerender after exiting
+  external editors by @joneba-google in
+  [#28880](https://github.com/google-gemini/gemini-cli/pull/28880)
+- [SSR Agent] Issue Fix (28518): Fix sub-agent handoff token regression on
+  startup by @joneba-google in
+  [#28882](https://github.com/google-gemini/gemini-cli/pull/28882)
+- fix(core): preserve empty text turns with tools or media by @DavidAPierce in
+  [#28892](https://github.com/google-gemini/gemini-cli/pull/28892)
 
 **Full Changelog**:
-https://github.com/google-gemini/gemini-cli/compare/v0.53.0-preview.0...v0.55.0-preview.1
+https://github.com/google-gemini/gemini-cli/compare/v0.56.0-preview.1...v0.57.0-preview.0

package/bundle/{gemini-OYYGXMHL.js → gemini-3PHRRMWS.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-4H4K2RBL.js";
+} from "./chunk-4FKXMALD.js";
 import {
   BuiltinCommandLoader,
   CommandService,
@@ -45,11 +45,11 @@ import {
   updateAllUpdatableExtensions,
   updateExtension,
   validateAuthMethod
-} from "./chunk-ASZFEU6C.js";
+} from "./chunk-JO5YRKX4.js";
 import {
   exitCli,
   require_source
-} from "./chunk-FYAMITQ2.js";
+} from "./chunk-PXFYRLFH.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -87,11 +87,11 @@ import {
   resolveGemmaConfig,
   saveModelChange,
   stripAnsi
-} from "./chunk-GAROUUGQ.js";
+} from "./chunk-2DH4DX65.js";
 import {
   RELAUNCH_EXIT_CODE
-} from "./chunk-LQJHQ4BU.js";
-import "./chunk-XG56CL6B.js";
+} from "./chunk-GNLIR4RW.js";
+import "./chunk-JCGNL7TH.js";
 import {
   cleanupCheckpoints,
   registerCleanup,
@@ -100,7 +100,7 @@ import {
   runExitCleanup,
   runSyncCleanup,
   setupSignalHandlers
-} from "./chunk-GAS2GAYB.js";
+} from "./chunk-CNAVMEMA.js";
 import {
   ASK_USER_TOOL_NAME,
   ApprovalMode,
@@ -254,7 +254,7 @@ import {
   updatePolicy,
   writeToStderr,
   writeToStdout
-} from "./chunk-7HKQGPWB.js";
+} from "./chunk-TYMOJXZO.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -7848,7 +7848,7 @@ async function loadSandboxConfig(settings, argv) {
   }
   const command2 = getSandboxCommand(sandboxValue);
   const packageJson = await getPackageJson(__dirname3);
-  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.57.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
+  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.58.0-preview.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
   const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
   return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
 }
@@ -9018,7 +9018,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "*:*"))
 (allow network-bind (local ip "*:*"))
-(allow network-outbound)`,
+(allow network-outbound)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "permissive-proxied": `(version 1)
 (deny default)
 (allow file-read*)
@@ -9113,7 +9154,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
 (allow network-bind (local ip "*:*"))
-(allow network-outbound (remote tcp "localhost:8877"))`,
+(allow network-outbound (remote tcp "localhost:8877"))
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "restrictive-open": `(version 1)
 (deny default)
 (allow file-read*)
@@ -9185,7 +9267,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow mach-lookup (global-name "com.apple.sysmond"))
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
-(allow network-outbound)`,
+(allow network-outbound)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "restrictive-proxied": `(version 1)
 (deny default)
 (allow file-read*)
@@ -9257,7 +9380,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow mach-lookup (global-name "com.apple.sysmond"))
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
-(allow network-outbound (remote tcp "localhost:8877"))`,
+(allow network-outbound (remote tcp "localhost:8877"))
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "strict-open": `(version 1)
 (deny default)
 (allow file-read*
@@ -9358,7 +9522,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow mach-lookup (global-name "com.apple.sysmond"))
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
-(allow network-outbound)`,
+(allow network-outbound)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "strict-proxied": `(version 1)
 (deny default)
 (allow file-read*
@@ -9459,7 +9664,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow mach-lookup (global-name "com.apple.sysmond"))
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
-(allow network-outbound (remote tcp "localhost:8877"))`
+(allow network-outbound (remote tcp "localhost:8877"))
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`
 };
 BUILTIN_SEATBELT_PROFILE_CONTENTS["permissive-closed"] = BUILTIN_SEATBELT_PROFILE_CONTENTS["strict-open"];
 BUILTIN_SEATBELT_PROFILE_CONTENTS["restrictive-closed"] = BUILTIN_SEATBELT_PROFILE_CONTENTS["strict-proxied"];
@@ -10855,7 +11101,7 @@ async function runNonInteractive({
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-WMEEEXY6.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-BUAVSMN6.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -11365,7 +11611,7 @@ async function runNonInteractive2(params) {
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-WMEEEXY6.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-BUAVSMN6.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -16575,7 +16821,7 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
   }
 }
 async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
-  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-5O6FZS57.js");
+  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-N6VXS5Z4.js");
   await doStartUI(
     config,
     settings,
@@ -16784,7 +17030,7 @@ ${finalArgs[promptIndex + 1]}`;
     await config.storage.initialize();
     adminControlsListner.setConfig(config);
     if (config.isInteractive() && settings.merged.general.devtools) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-WMEEEXY6.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-BUAVSMN6.js");
       setupInitialActivityLogger(config);
     }
     registerTelemetryConfig(config);
@@ -16843,7 +17089,7 @@ ${finalArgs[promptIndex + 1]}`;
     const initAppHandle = startupProfiler.start("initialize_app");
     const initializationResult = await initializeApp(config, settings);
     initAppHandle?.end();
-    import("./liteRtServerManager-LK6HOSMO.js").then(({ LiteRtServerManager }) => {
+    import("./liteRtServerManager-QUODN3RR.js").then(({ LiteRtServerManager }) => {
       const mergedGemma = settings.merged.experimental?.gemmaModelRouter;
       if (!mergedGemma) return;
       const userGemma = settings.forScope("User" /* User */).settings.experimental?.gemmaModelRouter;