@google/gemini-cli 0.57.0 → 0.58.0-preview.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (58) hide show
  1. package/bundle/{chunk-FYAMITQ2.js → chunk-2BLMLPHM.js} +1 -1
  2. package/bundle/{chunk-GAROUUGQ.js → chunk-2DH4DX65.js} +1 -1
  3. package/bundle/{chunk-AOE6E7MU.js → chunk-2XOTT2FI.js} +2 -2
  4. package/bundle/{chunk-4H4K2RBL.js → chunk-4FKXMALD.js} +3 -3
  5. package/bundle/{chunk-DFPYJMVX.js → chunk-4KFMA4KD.js} +242 -106
  6. package/bundle/{chunk-O7TOZUUB.js → chunk-6EGII27G.js} +3 -3
  7. package/bundle/{chunk-TAWZWX2B.js → chunk-7HQEQECM.js} +1 -1
  8. package/bundle/{chunk-HY6GN2F7.js → chunk-BOI2NL3I.js} +1 -1
  9. package/bundle/{chunk-RLDNVR77.js → chunk-CNAVMEMA.js} +1 -1
  10. package/bundle/{chunk-IKHAM2LG.js → chunk-E7K62ODO.js} +7 -7
  11. package/bundle/{chunk-GPOBVDAD.js → chunk-FJTXPUG2.js} +1 -1
  12. package/bundle/{chunk-7ZGWPQVZ.js → chunk-FMLOQLUD.js} +1 -1
  13. package/bundle/{chunk-ISXOUBN5.js → chunk-GNLIR4RW.js} +2 -2
  14. package/bundle/{chunk-XG56CL6B.js → chunk-JCGNL7TH.js} +1 -1
  15. package/bundle/{chunk-ASZFEU6C.js → chunk-JO5YRKX4.js} +7 -7
  16. package/bundle/{chunk-GAS2GAYB.js → chunk-JPMNKIVX.js} +1 -1
  17. package/bundle/{chunk-S3MXVTTY.js → chunk-M33HH4UA.js} +242 -106
  18. package/bundle/{chunk-FVC4WCSP.js → chunk-OEY2TDVE.js} +1 -1
  19. package/bundle/{chunk-MNBBUQQS.js → chunk-PGYTXBPD.js} +3 -3
  20. package/bundle/{chunk-YW7SDLZQ.js → chunk-PXFYRLFH.js} +1 -1
  21. package/bundle/{chunk-7IKUWYZO.js → chunk-RBQHWQSS.js} +1 -1
  22. package/bundle/{chunk-7HKQGPWB.js → chunk-TYMOJXZO.js} +181 -45
  23. package/bundle/{chunk-QJ33O2NH.js → chunk-WE4JKUV6.js} +7 -7
  24. package/bundle/{chunk-LQJHQ4BU.js → chunk-WHCFVERV.js} +2 -2
  25. package/bundle/{cleanup-2HUWGXK6.js → cleanup-KTXX3JEU.js} +2 -2
  26. package/bundle/{cleanup-7N2HFE2E.js → cleanup-NLNXSTS6.js} +2 -2
  27. package/bundle/{cleanup-DA7OSZS5.js → cleanup-RW3JYSTT.js} +2 -2
  28. package/bundle/{core-CFPIDJ4Z.js → core-SU4ABXSV.js} +3 -1
  29. package/bundle/{dist-AMP5W5P2.js → core-WFITWJMX.js} +3 -1
  30. package/bundle/{devtoolsService-WMEEEXY6.js → devtoolsService-BUAVSMN6.js} +2 -2
  31. package/bundle/{devtoolsService-7YYOUGVF.js → devtoolsService-MNBGW66M.js} +2 -2
  32. package/bundle/{devtoolsService-VQSLUOYF.js → devtoolsService-P42LXPJX.js} +2 -2
  33. package/bundle/{core-2NMRPWUN.js → dist-2CGQYGZC.js} +3 -1
  34. package/bundle/docs/changelogs/preview.md +78 -94
  35. package/bundle/{gemini-OYYGXMHL.js → gemini-3PHRRMWS.js} +266 -20
  36. package/bundle/{gemini-5LF4JAP7.js → gemini-BUCCXM4N.js} +266 -20
  37. package/bundle/{gemini-PSRJNVY5.js → gemini-VIRT6VT3.js} +266 -20
  38. package/bundle/gemini.js +7 -7
  39. package/bundle/{interactiveCli-5E2C3XOC.js → interactiveCli-BP2ZFGLX.js} +8 -9
  40. package/bundle/{interactiveCli-PP7WTUZL.js → interactiveCli-GGARXT6P.js} +8 -9
  41. package/bundle/{interactiveCli-5O6FZS57.js → interactiveCli-N6VXS5Z4.js} +8 -9
  42. package/bundle/{liteRtServerManager-LK6HOSMO.js → liteRtServerManager-L46MRFSW.js} +4 -4
  43. package/bundle/{liteRtServerManager-ZPDALIDY.js → liteRtServerManager-QUODN3RR.js} +4 -4
  44. package/bundle/{liteRtServerManager-5QBFCLBK.js → liteRtServerManager-YLOGF7RQ.js} +4 -4
  45. package/bundle/{oauth2-provider-CO22I6UM.js → oauth2-provider-BKWSLZJ6.js} +1 -1
  46. package/bundle/{oauth2-provider-BGMEA7RS.js → oauth2-provider-IIC2YPC5.js} +1 -1
  47. package/bundle/{oauth2-provider-BYKBBEKI.js → oauth2-provider-KVIL4ITH.js} +1 -1
  48. package/bundle/policies/write.toml +10 -2
  49. package/bundle/sandbox-macos-permissive-open.sb +50 -0
  50. package/bundle/sandbox-macos-permissive-proxied.sb +50 -0
  51. package/bundle/sandbox-macos-restrictive-open.sb +50 -1
  52. package/bundle/sandbox-macos-restrictive-proxied.sb +50 -0
  53. package/bundle/sandbox-macos-strict-open.sb +50 -0
  54. package/bundle/sandbox-macos-strict-proxied.sb +50 -0
  55. package/bundle/{start-KH6WSP5C.js → start-2365H4YX.js} +6 -6
  56. package/bundle/{start-O6LWZY6K.js → start-VPQOFEIR.js} +6 -6
  57. package/bundle/{start-JRTTCV3K.js → start-Y7LKFE47.js} +6 -6
  58. package/package.json +1 -1
@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
2
2
  import {
3
3
  startCommand,
4
4
  startServer
5
- } from "./chunk-MNBBUQQS.js";
5
+ } from "./chunk-6EGII27G.js";
6
6
  import {
7
7
  BuiltinCommandLoader,
8
8
  CommandService,
@@ -45,11 +45,11 @@ import {
45
45
  updateAllUpdatableExtensions,
46
46
  updateExtension,
47
47
  validateAuthMethod
48
- } from "./chunk-IKHAM2LG.js";
48
+ } from "./chunk-WE4JKUV6.js";
49
49
  import {
50
50
  exitCli,
51
51
  require_source
52
- } from "./chunk-HY6GN2F7.js";
52
+ } from "./chunk-BOI2NL3I.js";
53
53
  import {
54
54
  appEvents
55
55
  } from "./chunk-5PS3AYFU.js";
@@ -87,11 +87,11 @@ import {
87
87
  resolveGemmaConfig,
88
88
  saveModelChange,
89
89
  stripAnsi
90
- } from "./chunk-GPOBVDAD.js";
90
+ } from "./chunk-FJTXPUG2.js";
91
91
  import {
92
92
  RELAUNCH_EXIT_CODE
93
- } from "./chunk-ISXOUBN5.js";
94
- import "./chunk-FVC4WCSP.js";
93
+ } from "./chunk-WHCFVERV.js";
94
+ import "./chunk-OEY2TDVE.js";
95
95
  import {
96
96
  cleanupCheckpoints,
97
97
  registerCleanup,
@@ -100,7 +100,7 @@ import {
100
100
  runExitCleanup,
101
101
  runSyncCleanup,
102
102
  setupSignalHandlers
103
- } from "./chunk-RLDNVR77.js";
103
+ } from "./chunk-RBQHWQSS.js";
104
104
  import {
105
105
  ASK_USER_TOOL_NAME,
106
106
  AuthType,
@@ -238,7 +238,7 @@ import {
238
238
  updatePolicy,
239
239
  writeToStderr,
240
240
  writeToStdout
241
- } from "./chunk-DFPYJMVX.js";
241
+ } from "./chunk-4KFMA4KD.js";
242
242
  import "./chunk-664ZODQF.js";
243
243
  import "./chunk-IUUIT4SU.js";
244
244
  import "./chunk-TUDYL3X4.js";
@@ -7832,7 +7832,7 @@ async function loadSandboxConfig(settings, argv) {
7832
7832
  }
7833
7833
  const command2 = getSandboxCommand(sandboxValue);
7834
7834
  const packageJson = await getPackageJson(__dirname3);
7835
- const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.57.0-preview.1" ?? customImage ?? packageJson?.config?.sandboxImageUri;
7835
+ const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.58.0-preview.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
7836
7836
  const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
7837
7837
  return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
7838
7838
  }
@@ -9002,7 +9002,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
9002
9002
  (allow file-ioctl (regex #"^/dev/tty.*"))
9003
9003
  (allow network-inbound (local ip "*:*"))
9004
9004
  (allow network-bind (local ip "*:*"))
9005
- (allow network-outbound)`,
9005
+ (allow network-outbound)
9006
+ (deny file-read* file-write*
9007
+ (literal "/var/run/docker.sock")
9008
+ (literal "/var/run/docker.sock.raw")
9009
+ (literal "/private/var/run/docker.sock")
9010
+ (literal "/private/var/run/docker.sock.raw")
9011
+ (subpath "/var/run/docker")
9012
+ (subpath "/private/var/run/docker")
9013
+ (subpath "/Users/Shared/.docker")
9014
+ (subpath (string-append (param "HOME_DIR") "/.docker/run"))
9015
+ (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
9016
+ (subpath (string-append (param "HOME_DIR") "/.colima"))
9017
+ (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
9018
+ (subpath (string-append (param "HOME_DIR") "/.rd"))
9019
+ )
9020
+ (deny process-exec
9021
+ (literal "/usr/local/bin/docker")
9022
+ (literal "/usr/local/bin/dockerd")
9023
+ (literal "/usr/local/bin/docker-compose")
9024
+ (literal "/usr/bin/docker")
9025
+ (literal "/opt/homebrew/bin/docker")
9026
+ (literal "/opt/homebrew/bin/dockerd")
9027
+ (literal "/opt/homebrew/bin/docker-compose")
9028
+ (literal "/opt/homebrew/bin/podman")
9029
+ (literal "/usr/local/bin/podman")
9030
+ (literal "/opt/homebrew/bin/colima")
9031
+ (literal "/usr/local/bin/colima")
9032
+ (literal "/opt/homebrew/bin/orb")
9033
+ (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
9034
+ (subpath "/Applications/Docker.app/Contents/MacOS/")
9035
+ (subpath "/Applications/OrbStack.app/Contents/MacOS/")
9036
+ (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
9037
+ )
9038
+ (deny mach-lookup
9039
+ (xpc-service-name-prefix "com.docker.")
9040
+ (global-name-prefix "com.docker.")
9041
+ (global-name-prefix "dev.kdrag0n.OrbStack")
9042
+ )
9043
+ (deny ipc-posix-shm*
9044
+ (ipc-posix-name-prefix "docker")
9045
+ (ipc-posix-name-prefix "com.docker.")
9046
+ )`,
9006
9047
  "permissive-proxied": `(version 1)
9007
9048
  (deny default)
9008
9049
  (allow file-read*)
@@ -9097,7 +9138,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
9097
9138
  (allow file-ioctl (regex #"^/dev/tty.*"))
9098
9139
  (allow network-inbound (local ip "localhost:9229"))
9099
9140
  (allow network-bind (local ip "*:*"))
9100
- (allow network-outbound (remote tcp "localhost:8877"))`,
9141
+ (allow network-outbound (remote tcp "localhost:8877"))
9142
+ (deny file-read* file-write*
9143
+ (literal "/var/run/docker.sock")
9144
+ (literal "/var/run/docker.sock.raw")
9145
+ (literal "/private/var/run/docker.sock")
9146
+ (literal "/private/var/run/docker.sock.raw")
9147
+ (subpath "/var/run/docker")
9148
+ (subpath "/private/var/run/docker")
9149
+ (subpath "/Users/Shared/.docker")
9150
+ (subpath (string-append (param "HOME_DIR") "/.docker/run"))
9151
+ (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
9152
+ (subpath (string-append (param "HOME_DIR") "/.colima"))
9153
+ (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
9154
+ (subpath (string-append (param "HOME_DIR") "/.rd"))
9155
+ )
9156
+ (deny process-exec
9157
+ (literal "/usr/local/bin/docker")
9158
+ (literal "/usr/local/bin/dockerd")
9159
+ (literal "/usr/local/bin/docker-compose")
9160
+ (literal "/usr/bin/docker")
9161
+ (literal "/opt/homebrew/bin/docker")
9162
+ (literal "/opt/homebrew/bin/dockerd")
9163
+ (literal "/opt/homebrew/bin/docker-compose")
9164
+ (literal "/opt/homebrew/bin/podman")
9165
+ (literal "/usr/local/bin/podman")
9166
+ (literal "/opt/homebrew/bin/colima")
9167
+ (literal "/usr/local/bin/colima")
9168
+ (literal "/opt/homebrew/bin/orb")
9169
+ (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
9170
+ (subpath "/Applications/Docker.app/Contents/MacOS/")
9171
+ (subpath "/Applications/OrbStack.app/Contents/MacOS/")
9172
+ (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
9173
+ )
9174
+ (deny mach-lookup
9175
+ (xpc-service-name-prefix "com.docker.")
9176
+ (global-name-prefix "com.docker.")
9177
+ (global-name-prefix "dev.kdrag0n.OrbStack")
9178
+ )
9179
+ (deny ipc-posix-shm*
9180
+ (ipc-posix-name-prefix "docker")
9181
+ (ipc-posix-name-prefix "com.docker.")
9182
+ )`,
9101
9183
  "restrictive-open": `(version 1)
9102
9184
  (deny default)
9103
9185
  (allow file-read*)
@@ -9169,7 +9251,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
9169
9251
  (allow mach-lookup (global-name "com.apple.sysmond"))
9170
9252
  (allow file-ioctl (regex #"^/dev/tty.*"))
9171
9253
  (allow network-inbound (local ip "localhost:9229"))
9172
- (allow network-outbound)`,
9254
+ (allow network-outbound)
9255
+ (deny file-read* file-write*
9256
+ (literal "/var/run/docker.sock")
9257
+ (literal "/var/run/docker.sock.raw")
9258
+ (literal "/private/var/run/docker.sock")
9259
+ (literal "/private/var/run/docker.sock.raw")
9260
+ (subpath "/var/run/docker")
9261
+ (subpath "/private/var/run/docker")
9262
+ (subpath "/Users/Shared/.docker")
9263
+ (subpath (string-append (param "HOME_DIR") "/.docker/run"))
9264
+ (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
9265
+ (subpath (string-append (param "HOME_DIR") "/.colima"))
9266
+ (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
9267
+ (subpath (string-append (param "HOME_DIR") "/.rd"))
9268
+ )
9269
+ (deny process-exec
9270
+ (literal "/usr/local/bin/docker")
9271
+ (literal "/usr/local/bin/dockerd")
9272
+ (literal "/usr/local/bin/docker-compose")
9273
+ (literal "/usr/bin/docker")
9274
+ (literal "/opt/homebrew/bin/docker")
9275
+ (literal "/opt/homebrew/bin/dockerd")
9276
+ (literal "/opt/homebrew/bin/docker-compose")
9277
+ (literal "/opt/homebrew/bin/podman")
9278
+ (literal "/usr/local/bin/podman")
9279
+ (literal "/opt/homebrew/bin/colima")
9280
+ (literal "/usr/local/bin/colima")
9281
+ (literal "/opt/homebrew/bin/orb")
9282
+ (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
9283
+ (subpath "/Applications/Docker.app/Contents/MacOS/")
9284
+ (subpath "/Applications/OrbStack.app/Contents/MacOS/")
9285
+ (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
9286
+ )
9287
+ (deny mach-lookup
9288
+ (xpc-service-name-prefix "com.docker.")
9289
+ (global-name-prefix "com.docker.")
9290
+ (global-name-prefix "dev.kdrag0n.OrbStack")
9291
+ )
9292
+ (deny ipc-posix-shm*
9293
+ (ipc-posix-name-prefix "docker")
9294
+ (ipc-posix-name-prefix "com.docker.")
9295
+ )`,
9173
9296
  "restrictive-proxied": `(version 1)
9174
9297
  (deny default)
9175
9298
  (allow file-read*)
@@ -9241,7 +9364,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
9241
9364
  (allow mach-lookup (global-name "com.apple.sysmond"))
9242
9365
  (allow file-ioctl (regex #"^/dev/tty.*"))
9243
9366
  (allow network-inbound (local ip "localhost:9229"))
9244
- (allow network-outbound (remote tcp "localhost:8877"))`,
9367
+ (allow network-outbound (remote tcp "localhost:8877"))
9368
+ (deny file-read* file-write*
9369
+ (literal "/var/run/docker.sock")
9370
+ (literal "/var/run/docker.sock.raw")
9371
+ (literal "/private/var/run/docker.sock")
9372
+ (literal "/private/var/run/docker.sock.raw")
9373
+ (subpath "/var/run/docker")
9374
+ (subpath "/private/var/run/docker")
9375
+ (subpath "/Users/Shared/.docker")
9376
+ (subpath (string-append (param "HOME_DIR") "/.docker/run"))
9377
+ (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
9378
+ (subpath (string-append (param "HOME_DIR") "/.colima"))
9379
+ (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
9380
+ (subpath (string-append (param "HOME_DIR") "/.rd"))
9381
+ )
9382
+ (deny process-exec
9383
+ (literal "/usr/local/bin/docker")
9384
+ (literal "/usr/local/bin/dockerd")
9385
+ (literal "/usr/local/bin/docker-compose")
9386
+ (literal "/usr/bin/docker")
9387
+ (literal "/opt/homebrew/bin/docker")
9388
+ (literal "/opt/homebrew/bin/dockerd")
9389
+ (literal "/opt/homebrew/bin/docker-compose")
9390
+ (literal "/opt/homebrew/bin/podman")
9391
+ (literal "/usr/local/bin/podman")
9392
+ (literal "/opt/homebrew/bin/colima")
9393
+ (literal "/usr/local/bin/colima")
9394
+ (literal "/opt/homebrew/bin/orb")
9395
+ (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
9396
+ (subpath "/Applications/Docker.app/Contents/MacOS/")
9397
+ (subpath "/Applications/OrbStack.app/Contents/MacOS/")
9398
+ (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
9399
+ )
9400
+ (deny mach-lookup
9401
+ (xpc-service-name-prefix "com.docker.")
9402
+ (global-name-prefix "com.docker.")
9403
+ (global-name-prefix "dev.kdrag0n.OrbStack")
9404
+ )
9405
+ (deny ipc-posix-shm*
9406
+ (ipc-posix-name-prefix "docker")
9407
+ (ipc-posix-name-prefix "com.docker.")
9408
+ )`,
9245
9409
  "strict-open": `(version 1)
9246
9410
  (deny default)
9247
9411
  (allow file-read*
@@ -9342,7 +9506,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
9342
9506
  (allow mach-lookup (global-name "com.apple.sysmond"))
9343
9507
  (allow file-ioctl (regex #"^/dev/tty.*"))
9344
9508
  (allow network-inbound (local ip "localhost:9229"))
9345
- (allow network-outbound)`,
9509
+ (allow network-outbound)
9510
+ (deny file-read* file-write*
9511
+ (literal "/var/run/docker.sock")
9512
+ (literal "/var/run/docker.sock.raw")
9513
+ (literal "/private/var/run/docker.sock")
9514
+ (literal "/private/var/run/docker.sock.raw")
9515
+ (subpath "/var/run/docker")
9516
+ (subpath "/private/var/run/docker")
9517
+ (subpath "/Users/Shared/.docker")
9518
+ (subpath (string-append (param "HOME_DIR") "/.docker/run"))
9519
+ (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
9520
+ (subpath (string-append (param "HOME_DIR") "/.colima"))
9521
+ (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
9522
+ (subpath (string-append (param "HOME_DIR") "/.rd"))
9523
+ )
9524
+ (deny process-exec
9525
+ (literal "/usr/local/bin/docker")
9526
+ (literal "/usr/local/bin/dockerd")
9527
+ (literal "/usr/local/bin/docker-compose")
9528
+ (literal "/usr/bin/docker")
9529
+ (literal "/opt/homebrew/bin/docker")
9530
+ (literal "/opt/homebrew/bin/dockerd")
9531
+ (literal "/opt/homebrew/bin/docker-compose")
9532
+ (literal "/opt/homebrew/bin/podman")
9533
+ (literal "/usr/local/bin/podman")
9534
+ (literal "/opt/homebrew/bin/colima")
9535
+ (literal "/usr/local/bin/colima")
9536
+ (literal "/opt/homebrew/bin/orb")
9537
+ (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
9538
+ (subpath "/Applications/Docker.app/Contents/MacOS/")
9539
+ (subpath "/Applications/OrbStack.app/Contents/MacOS/")
9540
+ (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
9541
+ )
9542
+ (deny mach-lookup
9543
+ (xpc-service-name-prefix "com.docker.")
9544
+ (global-name-prefix "com.docker.")
9545
+ (global-name-prefix "dev.kdrag0n.OrbStack")
9546
+ )
9547
+ (deny ipc-posix-shm*
9548
+ (ipc-posix-name-prefix "docker")
9549
+ (ipc-posix-name-prefix "com.docker.")
9550
+ )`,
9346
9551
  "strict-proxied": `(version 1)
9347
9552
  (deny default)
9348
9553
  (allow file-read*
@@ -9443,7 +9648,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
9443
9648
  (allow mach-lookup (global-name "com.apple.sysmond"))
9444
9649
  (allow file-ioctl (regex #"^/dev/tty.*"))
9445
9650
  (allow network-inbound (local ip "localhost:9229"))
9446
- (allow network-outbound (remote tcp "localhost:8877"))`
9651
+ (allow network-outbound (remote tcp "localhost:8877"))
9652
+ (deny file-read* file-write*
9653
+ (literal "/var/run/docker.sock")
9654
+ (literal "/var/run/docker.sock.raw")
9655
+ (literal "/private/var/run/docker.sock")
9656
+ (literal "/private/var/run/docker.sock.raw")
9657
+ (subpath "/var/run/docker")
9658
+ (subpath "/private/var/run/docker")
9659
+ (subpath "/Users/Shared/.docker")
9660
+ (subpath (string-append (param "HOME_DIR") "/.docker/run"))
9661
+ (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
9662
+ (subpath (string-append (param "HOME_DIR") "/.colima"))
9663
+ (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
9664
+ (subpath (string-append (param "HOME_DIR") "/.rd"))
9665
+ )
9666
+ (deny process-exec
9667
+ (literal "/usr/local/bin/docker")
9668
+ (literal "/usr/local/bin/dockerd")
9669
+ (literal "/usr/local/bin/docker-compose")
9670
+ (literal "/usr/bin/docker")
9671
+ (literal "/opt/homebrew/bin/docker")
9672
+ (literal "/opt/homebrew/bin/dockerd")
9673
+ (literal "/opt/homebrew/bin/docker-compose")
9674
+ (literal "/opt/homebrew/bin/podman")
9675
+ (literal "/usr/local/bin/podman")
9676
+ (literal "/opt/homebrew/bin/colima")
9677
+ (literal "/usr/local/bin/colima")
9678
+ (literal "/opt/homebrew/bin/orb")
9679
+ (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
9680
+ (subpath "/Applications/Docker.app/Contents/MacOS/")
9681
+ (subpath "/Applications/OrbStack.app/Contents/MacOS/")
9682
+ (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
9683
+ )
9684
+ (deny mach-lookup
9685
+ (xpc-service-name-prefix "com.docker.")
9686
+ (global-name-prefix "com.docker.")
9687
+ (global-name-prefix "dev.kdrag0n.OrbStack")
9688
+ )
9689
+ (deny ipc-posix-shm*
9690
+ (ipc-posix-name-prefix "docker")
9691
+ (ipc-posix-name-prefix "com.docker.")
9692
+ )`
9447
9693
  };
9448
9694
  BUILTIN_SEATBELT_PROFILE_CONTENTS["permissive-closed"] = BUILTIN_SEATBELT_PROFILE_CONTENTS["strict-open"];
9449
9695
  BUILTIN_SEATBELT_PROFILE_CONTENTS["restrictive-closed"] = BUILTIN_SEATBELT_PROFILE_CONTENTS["strict-proxied"];
@@ -10839,7 +11085,7 @@ async function runNonInteractive({
10839
11085
  }
10840
11086
  });
10841
11087
  if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
10842
- const { setupInitialActivityLogger } = await import("./devtoolsService-7YYOUGVF.js");
11088
+ const { setupInitialActivityLogger } = await import("./devtoolsService-MNBGW66M.js");
10843
11089
  setupInitialActivityLogger(config);
10844
11090
  }
10845
11091
  const { stdout: workingStdout } = createWorkingStdio();
@@ -11349,7 +11595,7 @@ async function runNonInteractive2(params) {
11349
11595
  }
11350
11596
  });
11351
11597
  if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
11352
- const { setupInitialActivityLogger } = await import("./devtoolsService-7YYOUGVF.js");
11598
+ const { setupInitialActivityLogger } = await import("./devtoolsService-MNBGW66M.js");
11353
11599
  setupInitialActivityLogger(config);
11354
11600
  }
11355
11601
  const { stdout: workingStdout } = createWorkingStdio();
@@ -16559,7 +16805,7 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
16559
16805
  }
16560
16806
  }
16561
16807
  async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
16562
- const { startInteractiveUI: doStartUI } = await import("./interactiveCli-5E2C3XOC.js");
16808
+ const { startInteractiveUI: doStartUI } = await import("./interactiveCli-BP2ZFGLX.js");
16563
16809
  await doStartUI(
16564
16810
  config,
16565
16811
  settings,
@@ -16768,7 +17014,7 @@ ${finalArgs[promptIndex + 1]}`;
16768
17014
  await config.storage.initialize();
16769
17015
  adminControlsListner.setConfig(config);
16770
17016
  if (config.isInteractive() && settings.merged.general.devtools) {
16771
- const { setupInitialActivityLogger } = await import("./devtoolsService-7YYOUGVF.js");
17017
+ const { setupInitialActivityLogger } = await import("./devtoolsService-MNBGW66M.js");
16772
17018
  setupInitialActivityLogger(config);
16773
17019
  }
16774
17020
  registerTelemetryConfig(config);
@@ -16827,7 +17073,7 @@ ${finalArgs[promptIndex + 1]}`;
16827
17073
  const initAppHandle = startupProfiler.start("initialize_app");
16828
17074
  const initializationResult = await initializeApp(config, settings);
16829
17075
  initAppHandle?.end();
16830
- import("./liteRtServerManager-5QBFCLBK.js").then(({ LiteRtServerManager }) => {
17076
+ import("./liteRtServerManager-L46MRFSW.js").then(({ LiteRtServerManager }) => {
16831
17077
  const mergedGemma = settings.merged.experimental?.gemmaModelRouter;
16832
17078
  if (!mergedGemma) return;
16833
17079
  const userGemma = settings.forScope("User" /* User */).settings.experimental?.gemmaModelRouter;
package/bundle/gemini.js CHANGED
@@ -4,10 +4,10 @@ import {
4
4
  RELAUNCH_EXIT_CODE,
5
5
  getScriptArgs,
6
6
  getSpawnConfig
7
- } from "./chunk-LQJHQ4BU.js";
8
- import "./chunk-XG56CL6B.js";
9
- import "./chunk-GAS2GAYB.js";
10
- import "./chunk-7HKQGPWB.js";
7
+ } from "./chunk-GNLIR4RW.js";
8
+ import "./chunk-JCGNL7TH.js";
9
+ import "./chunk-CNAVMEMA.js";
10
+ import "./chunk-TYMOJXZO.js";
11
11
  import "./chunk-664ZODQF.js";
12
12
  import "./chunk-IUUIT4SU.js";
13
13
  import "./chunk-TUDYL3X4.js";
@@ -115,9 +115,9 @@ ${error instanceof Error ? error.stack ?? error.message : String(error)}
115
115
  }
116
116
  }
117
117
  } else {
118
- const { main } = await import("./gemini-OYYGXMHL.js");
119
- const { FatalError, writeToStderr } = await import("./dist-AMP5W5P2.js");
120
- const { runExitCleanup } = await import("./cleanup-DA7OSZS5.js");
118
+ const { main } = await import("./gemini-3PHRRMWS.js");
119
+ const { FatalError, writeToStderr } = await import("./dist-2CGQYGZC.js");
120
+ const { runExitCleanup } = await import("./cleanup-RW3JYSTT.js");
121
121
  main().catch(async (error) => {
122
122
  const cleanupTimeout = setTimeout(() => {
123
123
  writeToStderr("Cleanup timed out, forcing exit...\n");
@@ -157,10 +157,10 @@ import {
157
157
  widestLineFromStyledChars,
158
158
  wordBreakStyledChars,
159
159
  wrapStyledChars
160
- } from "./chunk-IKHAM2LG.js";
160
+ } from "./chunk-WE4JKUV6.js";
161
161
  import {
162
162
  require_source
163
- } from "./chunk-HY6GN2F7.js";
163
+ } from "./chunk-BOI2NL3I.js";
164
164
  import {
165
165
  appEvents
166
166
  } from "./chunk-5PS3AYFU.js";
@@ -214,24 +214,24 @@ import {
214
214
  stripAnsi,
215
215
  stripUnsafeCharacters,
216
216
  toCodePoints
217
- } from "./chunk-GPOBVDAD.js";
217
+ } from "./chunk-FJTXPUG2.js";
218
218
  import {
219
219
  handleAutoUpdate,
220
220
  isDevelopment,
221
221
  relaunchApp,
222
222
  setUpdateHandler
223
- } from "./chunk-ISXOUBN5.js";
223
+ } from "./chunk-WHCFVERV.js";
224
224
  import {
225
225
  isTodoList,
226
226
  mapCoreStatusToDisplayStatus,
227
227
  require_react
228
- } from "./chunk-FVC4WCSP.js";
228
+ } from "./chunk-OEY2TDVE.js";
229
229
  import {
230
230
  registerCleanup,
231
231
  removeCleanup,
232
232
  runExitCleanup,
233
233
  setupTtyCheck
234
- } from "./chunk-RLDNVR77.js";
234
+ } from "./chunk-RBQHWQSS.js";
235
235
  import {
236
236
  ACTIVATE_SKILL_TOOL_NAME,
237
237
  AGENT_TOOL_NAME,
@@ -418,7 +418,7 @@ import {
418
418
  validatePlanContent,
419
419
  validatePlanPath,
420
420
  writeToStdout
421
- } from "./chunk-DFPYJMVX.js";
421
+ } from "./chunk-4KFMA4KD.js";
422
422
  import "./chunk-664ZODQF.js";
423
423
  import "./chunk-IUUIT4SU.js";
424
424
  import "./chunk-TUDYL3X4.js";
@@ -28522,7 +28522,6 @@ var useGeminiStream = (geminiClient, history, addItem, config, settings, onDebug
28522
28522
  geminiClient.getHistory().slice(0, targetLength)
28523
28523
  );
28524
28524
  }
28525
- historyLengthAfterUserPromptRef.current = void 0;
28526
28525
  }
28527
28526
  const callIdsToMarkAsSubmitted2 = geminiTools.map(
28528
28527
  (toolCall) => toolCall.request.callId
@@ -33946,7 +33945,7 @@ ${queuedText}` : queuedText;
33946
33945
  if (keyMatchers["app.showErrorDetails" /* SHOW_ERROR_DETAILS */](key)) {
33947
33946
  if (settings.merged.general.devtools) {
33948
33947
  void (async () => {
33949
- const { toggleDevToolsPanel } = await import("./devtoolsService-7YYOUGVF.js");
33948
+ const { toggleDevToolsPanel } = await import("./devtoolsService-MNBGW66M.js");
33950
33949
  await toggleDevToolsPanel(
33951
33950
  config,
33952
33951
  showErrorDetails,
@@ -157,10 +157,10 @@ import {
157
157
  widestLineFromStyledChars,
158
158
  wordBreakStyledChars,
159
159
  wrapStyledChars
160
- } from "./chunk-QJ33O2NH.js";
160
+ } from "./chunk-E7K62ODO.js";
161
161
  import {
162
162
  require_source
163
- } from "./chunk-YW7SDLZQ.js";
163
+ } from "./chunk-2BLMLPHM.js";
164
164
  import {
165
165
  appEvents
166
166
  } from "./chunk-5PS3AYFU.js";
@@ -214,24 +214,24 @@ import {
214
214
  stripAnsi,
215
215
  stripUnsafeCharacters,
216
216
  toCodePoints
217
- } from "./chunk-7ZGWPQVZ.js";
217
+ } from "./chunk-FMLOQLUD.js";
218
218
  import {
219
219
  handleAutoUpdate,
220
220
  isDevelopment,
221
221
  relaunchApp,
222
222
  setUpdateHandler
223
- } from "./chunk-AOE6E7MU.js";
223
+ } from "./chunk-2XOTT2FI.js";
224
224
  import {
225
225
  isTodoList,
226
226
  mapCoreStatusToDisplayStatus,
227
227
  require_react
228
- } from "./chunk-TAWZWX2B.js";
228
+ } from "./chunk-7HQEQECM.js";
229
229
  import {
230
230
  registerCleanup,
231
231
  removeCleanup,
232
232
  runExitCleanup,
233
233
  setupTtyCheck
234
- } from "./chunk-7IKUWYZO.js";
234
+ } from "./chunk-JPMNKIVX.js";
235
235
  import {
236
236
  ACTIVATE_SKILL_TOOL_NAME,
237
237
  AGENT_TOOL_NAME,
@@ -418,7 +418,7 @@ import {
418
418
  validatePlanContent,
419
419
  validatePlanPath,
420
420
  writeToStdout
421
- } from "./chunk-S3MXVTTY.js";
421
+ } from "./chunk-M33HH4UA.js";
422
422
  import "./chunk-664ZODQF.js";
423
423
  import "./chunk-IUUIT4SU.js";
424
424
  import "./chunk-TUDYL3X4.js";
@@ -28522,7 +28522,6 @@ var useGeminiStream = (geminiClient, history, addItem, config, settings, onDebug
28522
28522
  geminiClient.getHistory().slice(0, targetLength)
28523
28523
  );
28524
28524
  }
28525
- historyLengthAfterUserPromptRef.current = void 0;
28526
28525
  }
28527
28526
  const callIdsToMarkAsSubmitted2 = geminiTools.map(
28528
28527
  (toolCall) => toolCall.request.callId
@@ -33946,7 +33945,7 @@ ${queuedText}` : queuedText;
33946
33945
  if (keyMatchers["app.showErrorDetails" /* SHOW_ERROR_DETAILS */](key)) {
33947
33946
  if (settings.merged.general.devtools) {
33948
33947
  void (async () => {
33949
- const { toggleDevToolsPanel } = await import("./devtoolsService-VQSLUOYF.js");
33948
+ const { toggleDevToolsPanel } = await import("./devtoolsService-P42LXPJX.js");
33950
33949
  await toggleDevToolsPanel(
33951
33950
  config,
33952
33951
  showErrorDetails,
@@ -157,10 +157,10 @@ import {
157
157
  widestLineFromStyledChars,
158
158
  wordBreakStyledChars,
159
159
  wrapStyledChars
160
- } from "./chunk-ASZFEU6C.js";
160
+ } from "./chunk-JO5YRKX4.js";
161
161
  import {
162
162
  require_source
163
- } from "./chunk-FYAMITQ2.js";
163
+ } from "./chunk-PXFYRLFH.js";
164
164
  import {
165
165
  appEvents
166
166
  } from "./chunk-5PS3AYFU.js";
@@ -214,24 +214,24 @@ import {
214
214
  stripAnsi,
215
215
  stripUnsafeCharacters,
216
216
  toCodePoints
217
- } from "./chunk-GAROUUGQ.js";
217
+ } from "./chunk-2DH4DX65.js";
218
218
  import {
219
219
  handleAutoUpdate,
220
220
  isDevelopment,
221
221
  relaunchApp,
222
222
  setUpdateHandler
223
- } from "./chunk-LQJHQ4BU.js";
223
+ } from "./chunk-GNLIR4RW.js";
224
224
  import {
225
225
  isTodoList,
226
226
  mapCoreStatusToDisplayStatus,
227
227
  require_react
228
- } from "./chunk-XG56CL6B.js";
228
+ } from "./chunk-JCGNL7TH.js";
229
229
  import {
230
230
  registerCleanup,
231
231
  removeCleanup,
232
232
  runExitCleanup,
233
233
  setupTtyCheck
234
- } from "./chunk-GAS2GAYB.js";
234
+ } from "./chunk-CNAVMEMA.js";
235
235
  import {
236
236
  ACTIVATE_SKILL_TOOL_NAME,
237
237
  AGENT_TOOL_NAME,
@@ -437,7 +437,7 @@ import {
437
437
  validatePlanContent,
438
438
  validatePlanPath,
439
439
  writeToStdout
440
- } from "./chunk-7HKQGPWB.js";
440
+ } from "./chunk-TYMOJXZO.js";
441
441
  import "./chunk-664ZODQF.js";
442
442
  import "./chunk-IUUIT4SU.js";
443
443
  import "./chunk-TUDYL3X4.js";
@@ -28541,7 +28541,6 @@ var useGeminiStream = (geminiClient, history, addItem, config, settings, onDebug
28541
28541
  geminiClient.getHistory().slice(0, targetLength)
28542
28542
  );
28543
28543
  }
28544
- historyLengthAfterUserPromptRef.current = void 0;
28545
28544
  }
28546
28545
  const callIdsToMarkAsSubmitted2 = geminiTools.map(
28547
28546
  (toolCall) => toolCall.request.callId
@@ -33965,7 +33964,7 @@ ${queuedText}` : queuedText;
33965
33964
  if (keyMatchers["app.showErrorDetails" /* SHOW_ERROR_DETAILS */](key)) {
33966
33965
  if (settings.merged.general.devtools) {
33967
33966
  void (async () => {
33968
- const { toggleDevToolsPanel } = await import("./devtoolsService-WMEEEXY6.js");
33967
+ const { toggleDevToolsPanel } = await import("./devtoolsService-BUAVSMN6.js");
33969
33968
  await toggleDevToolsPanel(
33970
33969
  config,
33971
33970
  showErrorDetails,
@@ -3,11 +3,11 @@ import {
3
3
  DEFAULT_PORT,
4
4
  getBinaryPath,
5
5
  isServerRunning
6
- } from "./chunk-GAROUUGQ.js";
7
- import "./chunk-XG56CL6B.js";
6
+ } from "./chunk-FJTXPUG2.js";
7
+ import "./chunk-OEY2TDVE.js";
8
8
  import {
9
9
  debugLogger
10
- } from "./chunk-7HKQGPWB.js";
10
+ } from "./chunk-4KFMA4KD.js";
11
11
  import "./chunk-664ZODQF.js";
12
12
  import "./chunk-IUUIT4SU.js";
13
13
  import "./chunk-TUDYL3X4.js";
@@ -41,7 +41,7 @@ var LiteRtServerManager = class {
41
41
  `[LiteRtServerManager] Auto-starting LiteRT server on port ${port}...`
42
42
  );
43
43
  try {
44
- const { startServer } = await import("./start-O6LWZY6K.js");
44
+ const { startServer } = await import("./start-2365H4YX.js");
45
45
  const started = await startServer(binaryPath, port);
46
46
  if (started) {
47
47
  debugLogger.log(`[LiteRtServerManager] Server started on port ${port}`);