@google/gemini-cli 0.57.0 → 0.58.0

package/bundle/{gemini-OYYGXMHL.js → gemini-CKAAKWBN.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-4H4K2RBL.js";
+} from "./chunk-MPJ66UCC.js";
 import {
   BuiltinCommandLoader,
   CommandService,
@@ -45,11 +45,11 @@ import {
   updateAllUpdatableExtensions,
   updateExtension,
   validateAuthMethod
-} from "./chunk-ASZFEU6C.js";
+} from "./chunk-SU3CRXG4.js";
 import {
   exitCli,
   require_source
-} from "./chunk-FYAMITQ2.js";
+} from "./chunk-NI56QRLL.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -87,11 +87,11 @@ import {
   resolveGemmaConfig,
   saveModelChange,
   stripAnsi
-} from "./chunk-GAROUUGQ.js";
+} from "./chunk-34DO53P3.js";
 import {
   RELAUNCH_EXIT_CODE
-} from "./chunk-LQJHQ4BU.js";
-import "./chunk-XG56CL6B.js";
+} from "./chunk-7AZ2H37B.js";
+import "./chunk-DT2UHOVP.js";
 import {
   cleanupCheckpoints,
   registerCleanup,
@@ -100,7 +100,7 @@ import {
   runExitCleanup,
   runSyncCleanup,
   setupSignalHandlers
-} from "./chunk-GAS2GAYB.js";
+} from "./chunk-VR4KVJQS.js";
 import {
   ASK_USER_TOOL_NAME,
   ApprovalMode,
@@ -254,7 +254,7 @@ import {
   updatePolicy,
   writeToStderr,
   writeToStdout
-} from "./chunk-7HKQGPWB.js";
+} from "./chunk-MFLFXOVQ.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -7848,7 +7848,7 @@ async function loadSandboxConfig(settings, argv) {
   }
   const command2 = getSandboxCommand(sandboxValue);
   const packageJson = await getPackageJson(__dirname3);
-  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.57.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
+  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.58.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
   const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
   return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
 }
@@ -9018,7 +9018,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "*:*"))
 (allow network-bind (local ip "*:*"))
-(allow network-outbound)`,
+(allow network-outbound)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "permissive-proxied": `(version 1)
 (deny default)
 (allow file-read*)
@@ -9113,7 +9154,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
 (allow network-bind (local ip "*:*"))
-(allow network-outbound (remote tcp "localhost:8877"))`,
+(allow network-outbound (remote tcp "localhost:8877"))
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "restrictive-open": `(version 1)
 (deny default)
 (allow file-read*)
@@ -9185,7 +9267,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow mach-lookup (global-name "com.apple.sysmond"))
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
-(allow network-outbound)`,
+(allow network-outbound)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "restrictive-proxied": `(version 1)
 (deny default)
 (allow file-read*)
@@ -9257,7 +9380,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow mach-lookup (global-name "com.apple.sysmond"))
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
-(allow network-outbound (remote tcp "localhost:8877"))`,
+(allow network-outbound (remote tcp "localhost:8877"))
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "strict-open": `(version 1)
 (deny default)
 (allow file-read*
@@ -9358,7 +9522,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow mach-lookup (global-name "com.apple.sysmond"))
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
-(allow network-outbound)`,
+(allow network-outbound)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "strict-proxied": `(version 1)
 (deny default)
 (allow file-read*
@@ -9459,7 +9664,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow mach-lookup (global-name "com.apple.sysmond"))
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
-(allow network-outbound (remote tcp "localhost:8877"))`
+(allow network-outbound (remote tcp "localhost:8877"))
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`
 };
 BUILTIN_SEATBELT_PROFILE_CONTENTS["permissive-closed"] = BUILTIN_SEATBELT_PROFILE_CONTENTS["strict-open"];
 BUILTIN_SEATBELT_PROFILE_CONTENTS["restrictive-closed"] = BUILTIN_SEATBELT_PROFILE_CONTENTS["strict-proxied"];
@@ -10855,7 +11101,7 @@ async function runNonInteractive({
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-WMEEEXY6.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-ZBZO7WJL.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -11365,7 +11611,7 @@ async function runNonInteractive2(params) {
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-WMEEEXY6.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-ZBZO7WJL.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -16575,7 +16821,7 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
   }
 }
 async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
-  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-5O6FZS57.js");
+  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-COQ6GM4I.js");
   await doStartUI(
     config,
     settings,
@@ -16784,7 +17030,7 @@ ${finalArgs[promptIndex + 1]}`;
     await config.storage.initialize();
     adminControlsListner.setConfig(config);
     if (config.isInteractive() && settings.merged.general.devtools) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-WMEEEXY6.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-ZBZO7WJL.js");
       setupInitialActivityLogger(config);
     }
     registerTelemetryConfig(config);
@@ -16843,7 +17089,7 @@ ${finalArgs[promptIndex + 1]}`;
     const initAppHandle = startupProfiler.start("initialize_app");
     const initializationResult = await initializeApp(config, settings);
     initAppHandle?.end();
-    import("./liteRtServerManager-LK6HOSMO.js").then(({ LiteRtServerManager }) => {
+    import("./liteRtServerManager-NDS4QOEU.js").then(({ LiteRtServerManager }) => {
       const mergedGemma = settings.merged.experimental?.gemmaModelRouter;
       if (!mergedGemma) return;
       const userGemma = settings.forScope("User" /* User */).settings.experimental?.gemmaModelRouter;