@google/gemini-cli 0.57.0 → 0.58.0-preview.0

package/bundle/{liteRtServerManager-ZPDALIDY.js → liteRtServerManager-QUODN3RR.js}

@@ -3,11 +3,11 @@ import {
   DEFAULT_PORT,
   getBinaryPath,
   isServerRunning
-} from "./chunk-7ZGWPQVZ.js";
-import "./chunk-TAWZWX2B.js";
+} from "./chunk-2DH4DX65.js";
+import "./chunk-JCGNL7TH.js";
 import {
   debugLogger
-} from "./chunk-S3MXVTTY.js";
+} from "./chunk-TYMOJXZO.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -41,7 +41,7 @@ var LiteRtServerManager = class {
       `[LiteRtServerManager] Auto-starting LiteRT server on port ${port}...`
     );
     try {
-      const { startServer } = await import("./start-KH6WSP5C.js");
+      const { startServer } = await import("./start-Y7LKFE47.js");
       const started = await startServer(binaryPath, port);
       if (started) {
         debugLogger.log(`[LiteRtServerManager] Server started on port ${port}`);

package/bundle/{liteRtServerManager-5QBFCLBK.js → liteRtServerManager-YLOGF7RQ.js}

@@ -3,11 +3,11 @@ import {
   DEFAULT_PORT,
   getBinaryPath,
   isServerRunning
-} from "./chunk-GPOBVDAD.js";
-import "./chunk-FVC4WCSP.js";
+} from "./chunk-FMLOQLUD.js";
+import "./chunk-7HQEQECM.js";
 import {
   debugLogger
-} from "./chunk-DFPYJMVX.js";
+} from "./chunk-M33HH4UA.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -41,7 +41,7 @@ var LiteRtServerManager = class {
       `[LiteRtServerManager] Auto-starting LiteRT server on port ${port}...`
     );
     try {
-      const { startServer } = await import("./start-JRTTCV3K.js");
+      const { startServer } = await import("./start-VPQOFEIR.js");
       const started = await startServer(binaryPath, port);
       if (started) {
         debugLogger.log(`[LiteRtServerManager] Server started on port ${port}`);

package/bundle/{oauth2-provider-CO22I6UM.js → oauth2-provider-BKWSLZJ6.js}

@@ -16,7 +16,7 @@ import {
   openBrowserSecurely,
   refreshAccessToken,
   startCallbackServer
-} from "./chunk-DFPYJMVX.js";
+} from "./chunk-M33HH4UA.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";

package/bundle/{oauth2-provider-BGMEA7RS.js → oauth2-provider-IIC2YPC5.js}

@@ -16,7 +16,7 @@ import {
   openBrowserSecurely,
   refreshAccessToken,
   startCallbackServer
-} from "./chunk-S3MXVTTY.js";
+} from "./chunk-4KFMA4KD.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";

package/bundle/{oauth2-provider-BYKBBEKI.js → oauth2-provider-KVIL4ITH.js}

@@ -16,7 +16,7 @@ import {
   openBrowserSecurely,
   refreshAccessToken,
   startCallbackServer
-} from "./chunk-7HKQGPWB.js";
+} from "./chunk-TYMOJXZO.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";

package/bundle/policies/write.toml

@@ -39,7 +39,11 @@ decision = "allow"
 priority = 15
 modes = ["autoEdit"]
 
-[rule.safety_checker]
+[[safety_checker]]
+toolName = "replace"
+priority = 15
+modes = ["autoEdit"]
+[safety_checker.checker]
 type = "in-process"
 name = "allowed-path"
 required_context = ["environment"]
@@ -68,7 +72,11 @@ decision = "allow"
 priority = 15
 modes = ["autoEdit"]
 
-[rule.safety_checker]
+[[safety_checker]]
+toolName = "write_file"
+priority = 15
+modes = ["autoEdit"]
+[safety_checker.checker]
 type = "in-process"
 name = "allowed-path"
 required_context = ["environment"]

package/bundle/sandbox-macos-permissive-open.sb

@@ -133,3 +133,53 @@
 
 ;; allow all outbound network traffic
 (allow network-outbound)
+
+;; Block Docker & container daemon UNIX domain sockets (read & write)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+
+;; Block container CLI and daemon binaries from execution
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+
+;; Block com.docker.* and container manager Mach lookup / XPC services
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+
+;; Block Docker POSIX Shared Memory
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)
+

package/bundle/sandbox-macos-permissive-proxied.sb

@@ -136,3 +136,53 @@
 ;; set `GEMINI_SANDBOX_PROXY_COMMAND=<command>` to run proxy alongside sandbox
 ;; proxy must listen on :::8877 (see docs/examples/proxy-script.md)
 (allow network-outbound (remote tcp "localhost:8877"))
+
+;; Block Docker & container daemon UNIX domain sockets (read & write)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+
+;; Block container CLI and daemon binaries from execution
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+
+;; Block com.docker.* and container manager Mach lookup / XPC services
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+
+;; Block Docker POSIX Shared Memory
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)
+

package/bundle/sandbox-macos-restrictive-open.sb

@@ -92,4 +92,53 @@
 (allow network-inbound (local ip "localhost:9229"))
 
 ;; allow all outbound network traffic
-(allow network-outbound)
+(allow network-outbound)
+
+;; Block Docker & container daemon UNIX domain sockets (read & write)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+
+;; Block container CLI and daemon binaries from execution
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+
+;; Block com.docker.* and container manager Mach lookup / XPC services
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+
+;; Block Docker POSIX Shared Memory
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)

package/bundle/sandbox-macos-restrictive-proxied.sb

@@ -95,3 +95,53 @@
 ;; set `GEMINI_SANDBOX_PROXY_COMMAND=<command>` to run proxy alongside sandbox
 ;; proxy must listen on :::8877 (see docs/examples/proxy-script.md)
 (allow network-outbound (remote tcp "localhost:8877"))
+
+;; Block Docker & container daemon UNIX domain sockets (read & write)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+
+;; Block container CLI and daemon binaries from execution
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+
+;; Block com.docker.* and container manager Mach lookup / XPC services
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+
+;; Block Docker POSIX Shared Memory
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)
+

package/bundle/sandbox-macos-strict-open.sb

@@ -128,3 +128,53 @@
 
 ;; allow all outbound network traffic
 (allow network-outbound)
+
+;; Block Docker & container daemon UNIX domain sockets (read & write)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+
+;; Block container CLI and daemon binaries from execution
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+
+;; Block com.docker.* and container manager Mach lookup / XPC services
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+
+;; Block Docker POSIX Shared Memory
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)
+

package/bundle/sandbox-macos-strict-proxied.sb

@@ -130,3 +130,53 @@
 ;; set `GEMINI_SANDBOX_PROXY_COMMAND=<command>` to run proxy alongside sandbox
 ;; proxy must listen on :::8877 (see docs/examples/proxy-script.md)
 (allow network-outbound (remote tcp "localhost:8877"))
+
+;; Block Docker & container daemon UNIX domain sockets (read & write)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+
+;; Block container CLI and daemon binaries from execution
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+
+;; Block com.docker.* and container manager Mach lookup / XPC services
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+
+;; Block Docker POSIX Shared Memory
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)
+

package/bundle/{start-KH6WSP5C.js → start-2365H4YX.js}

@@ -2,12 +2,12 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-O7TOZUUB.js";
-import "./chunk-YW7SDLZQ.js";
-import "./chunk-7ZGWPQVZ.js";
-import "./chunk-TAWZWX2B.js";
-import "./chunk-7IKUWYZO.js";
-import "./chunk-S3MXVTTY.js";
+} from "./chunk-6EGII27G.js";
+import "./chunk-BOI2NL3I.js";
+import "./chunk-FJTXPUG2.js";
+import "./chunk-OEY2TDVE.js";
+import "./chunk-RBQHWQSS.js";
+import "./chunk-4KFMA4KD.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";

package/bundle/{start-O6LWZY6K.js → start-VPQOFEIR.js}

@@ -2,12 +2,12 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-4H4K2RBL.js";
-import "./chunk-FYAMITQ2.js";
-import "./chunk-GAROUUGQ.js";
-import "./chunk-XG56CL6B.js";
-import "./chunk-GAS2GAYB.js";
-import "./chunk-7HKQGPWB.js";
+} from "./chunk-PGYTXBPD.js";
+import "./chunk-2BLMLPHM.js";
+import "./chunk-FMLOQLUD.js";
+import "./chunk-7HQEQECM.js";
+import "./chunk-JPMNKIVX.js";
+import "./chunk-M33HH4UA.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";

package/bundle/{start-JRTTCV3K.js → start-Y7LKFE47.js}

@@ -2,12 +2,12 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-MNBBUQQS.js";
-import "./chunk-HY6GN2F7.js";
-import "./chunk-GPOBVDAD.js";
-import "./chunk-FVC4WCSP.js";
-import "./chunk-RLDNVR77.js";
-import "./chunk-DFPYJMVX.js";
+} from "./chunk-4FKXMALD.js";
+import "./chunk-PXFYRLFH.js";
+import "./chunk-2DH4DX65.js";
+import "./chunk-JCGNL7TH.js";
+import "./chunk-CNAVMEMA.js";
+import "./chunk-TYMOJXZO.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@google/gemini-cli",
-  "version": "0.57.0",
+  "version": "0.58.0-preview.0",
   "description": "Gemini CLI",
   "license": "Apache-2.0",
   "repository": {