@google/gemini-cli 0.57.0 → 0.59.0-nightly.20260826.g64b5b79a6

package/bundle/docs/changelogs/preview.md

@@ -1,6 +1,6 @@
-# Preview release: v0.55.0-preview.1
+# Preview release: v0.58.0-preview.0
 
-Released: August 06, 2026
+Released: August 25, 2026
 
 Our preview release includes the latest, new, and experimental features. This
 release may not be as stable as our [latest weekly release](latest.md).
@@ -13,101 +13,37 @@ npm install -g @google/gemini-cli@preview
 
 ## Highlights
 
-- **Antigravity Agent & PR Generator:** Integrated the Antigravity agent runner,
-  Firestore dual-locking for concurrency, prompt templates, and ingestion
-  testing utilities.
-- **Caretaker Triage & Issue Management:** Enhanced the issue triage workflow by
-  automatically posting a comment before closing issues, and sanitizing and
-  wrapping issue titles in `untrusted_context`.
-- **Core API & Session Stability:** Enforced HTTPS for
-  GoogleCredentialsAuthProvider to prevent cleartext leakage, rotated session
-  IDs on model fallback to prevent stateful API errors, and refined chat history
-  by filtering out thought parts when context management is disabled.
+- **Sandbox Security Enhancements**: Isolated Docker and container runtime
+  sockets and binaries in macOS Seatbelt to improve sandbox safety.
+- **Core Path Resolution Fixes**: Ensured consistent symlink evaluation in
+  ignore path handling within core services.
+- **History & Retry Optimizations**: Enhanced history rollback and optimized
+  retry nudges for smoother session management.
+- **A2A Server Resilience**: Cleared stale cancellation errors on new message
+  turns to prevent incorrect error states.
+- **Write Policy & Safety Improvements**: Declared top-level safety checkers in
+  the write policy configuration to strengthen execution guardrails.
 
 ## What's Changed
 
-- chore(release): bump version to 0.55.0-nightly.20260728.gd29268d36 by
-  @gemini-cli-robot in
-  [#28569](https://github.com/google-gemini/gemini-cli/pull/28569)
-- Changelog for v0.54.0-preview.0 by @gemini-cli-robot in
-  [#28567](https://github.com/google-gemini/gemini-cli/pull/28567)
-- Changelog for v0.53.0 by @gemini-cli-robot in
-  [#28568](https://github.com/google-gemini/gemini-cli/pull/28568)
-- chore/release: bump version to 0.55.0-nightly.20260729.g3499c84f7 by
-  @gemini-cli-robot in
-  [#28573](https://github.com/google-gemini/gemini-cli/pull/28573)
-- fix(core): classify capacity exhaustion as terminal to prevent retry hangs by
+- Changelog for v0.57.0-preview.0 by @gemini-cli-robot in
+  [#28918](https://github.com/google-gemini/gemini-cli/pull/28918)
+- fix(core): ensure consistent symlink evaluation in ignore path handling by
   @luisfelipe-alt in
-  [#28599](https://github.com/google-gemini/gemini-cli/pull/28599)
-- fix(core,cli): propagate InvalidStreamError details to UI for specific empty
-  response guidance by @DavidAPierce in
-  [#28566](https://github.com/google-gemini/gemini-cli/pull/28566)
-- fix(cli): fall back to embedded macOS seatbelt profiles if missing by
-  @amelidev in [#28551](https://github.com/google-gemini/gemini-cli/pull/28551)
-- feat(pr-generator-core): add environment config parser, command executor,
-  GitHub R… by @joneba-google in
-  [#28435](https://github.com/google-gemini/gemini-cli/pull/28435)
-- feat(pr-generator-orchestrator): implement iterative bug-fixing state machine
-  and container worker entrypoint by @joneba-google in
-  [#28433](https://github.com/google-gemini/gemini-cli/pull/28433)
-- feat(pr-generator-infra): configure Cloud Run job, Workflows definition, and
-  Dockerfile by @joneba-google in
-  [#28431](https://github.com/google-gemini/gemini-cli/pull/28431)
-- fix(release): handle npm dist-tag deletion failures on registries that forbid
-  it by @DavidAPierce in
-  [#28694](https://github.com/google-gemini/gemini-cli/pull/28694)
-- fix(core): stop a new user message fusing into an unanswered tool response by
-  @adamfweidman in
-  [#28700](https://github.com/google-gemini/gemini-cli/pull/28700)
-- fix(core,cli): repair /compress session reload and quota-fallback tool
-  response loss by @adamfweidman in
-  [#28672](https://github.com/google-gemini/gemini-cli/pull/28672)
-- fix(core): preserve functionCall thoughtSignature when stripping thought parts
-  by @sarbojitrana in
-  [#28607](https://github.com/google-gemini/gemini-cli/pull/28607)
-- fix(core): unwrap and parse nested gaxios streaming errors from cause message
-  by @luisfelipe-alt in
-  [#28689](https://github.com/google-gemini/gemini-cli/pull/28689)
-- Changelog for v0.53.0-preview.0 by @gemini-cli-robot in
-  [#28507](https://github.com/google-gemini/gemini-cli/pull/28507)
-- Changelog for v0.52.0 by @gemini-cli-robot in
-  [#28508](https://github.com/google-gemini/gemini-cli/pull/28508)
-- chore(release): bump version to 0.54.0-nightly.20260722.gf743ab579 by
-  @gemini-cli-robot in
-  [#28510](https://github.com/google-gemini/gemini-cli/pull/28510)
-- fix(caretaker): sanitize and wrap issue title in untrusted_context by @chadd28
-  in [#28352](https://github.com/google-gemini/gemini-cli/pull/28352)
-- chore(caretaker): update vitest to v3.2.4 and add package-lock.json files by
-  @chadd28 in [#28409](https://github.com/google-gemini/gemini-cli/pull/28409)
-- fix(core): rotate session ID on model fallback to prevent stateful API errors
-  by @amelidev in
-  [#28469](https://github.com/google-gemini/gemini-cli/pull/28469)
-- feat(caretaker-triage): post comment before auto-closing issues by @chadd28 in
-  [#28411](https://github.com/google-gemini/gemini-cli/pull/28411)
-- fix(core): enforce HTTPS for GoogleCredentialsAuthProvider to prevent
-  cleartext leakage by @amelidev in
-  [#28517](https://github.com/google-gemini/gemini-cli/pull/28517)
-- fix(core): filter out thought parts from getHistoryTurns when context
-  management is disabled by @DavidAPierce in
-  [#28509](https://github.com/google-gemini/gemini-cli/pull/28509)
-- fix(a2a-server): normalize CRLF line endings to LF in getProposedContent by
+  [#28915](https://github.com/google-gemini/gemini-cli/pull/28915)
+- refactor(core): remove eslint-disable and type-asserts from
+  shellExecutionService by @DavidAPierce in
+  [#28862](https://github.com/google-gemini/gemini-cli/pull/28862)
+- fix(sandbox): isolate Docker and container runtime sockets and binaries in
+  macOS Seatbelt by @josebalius in
+  [#28935](https://github.com/google-gemini/gemini-cli/pull/28935)
+- fix(a2a-server): clear stale cancellation error on new message turns by
+  @amelidev in [#28940](https://github.com/google-gemini/gemini-cli/pull/28940)
+- fix(core): declare top-level safety checkers in write policy configuration by
   @luisfelipe-alt in
-  [#28531](https://github.com/google-gemini/gemini-cli/pull/28531)
-- fix(core): enforce explicit tag length and validation in file keychain by
-  @luisfelipe-alt in
-  [#28523](https://github.com/google-gemini/gemini-cli/pull/28523)
-- chore/release: bump version to 0.54.0-nightly.20260728.gbef611950 by
-  @gemini-cli-robot in
-  [#28552](https://github.com/google-gemini/gemini-cli/pull/28552)
-- feat(pr-generator-db): implement Firestore concurrency dual-locking and test
-  ingestion utilities by @joneba-google in
-  [#28432](https://github.com/google-gemini/gemini-cli/pull/28432)
-- feat(pr-generator-agent): implement Antigravity agent runner and prompt
-  templates … by @joneba-google in
-  [#28434](https://github.com/google-gemini/gemini-cli/pull/28434)
-- fix(core): skip merged function-response turns when finding the active loop by
-  @adamfweidman in
-  [#28565](https://github.com/google-gemini/gemini-cli/pull/28565)
+  [#28961](https://github.com/google-gemini/gemini-cli/pull/28961)
+- (FIX) history rollback and retry nudge optimizations by @DavidAPierce in
+  [#28934](https://github.com/google-gemini/gemini-cli/pull/28934)
 
 **Full Changelog**:
-https://github.com/google-gemini/gemini-cli/compare/v0.53.0-preview.0...v0.55.0-preview.1
+https://github.com/google-gemini/gemini-cli/compare/v0.57.0-preview.1...v0.58.0-preview.0

package/bundle/{gemini-OYYGXMHL.js → gemini-5EAA6NJV.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-4H4K2RBL.js";
+} from "./chunk-FE2O62SQ.js";
 import {
   BuiltinCommandLoader,
   CommandService,
@@ -45,11 +45,11 @@ import {
   updateAllUpdatableExtensions,
   updateExtension,
   validateAuthMethod
-} from "./chunk-ASZFEU6C.js";
+} from "./chunk-HHT4PH5C.js";
 import {
   exitCli,
   require_source
-} from "./chunk-FYAMITQ2.js";
+} from "./chunk-WV32QTVP.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -87,11 +87,11 @@ import {
   resolveGemmaConfig,
   saveModelChange,
   stripAnsi
-} from "./chunk-GAROUUGQ.js";
+} from "./chunk-ZDDE25R7.js";
 import {
   RELAUNCH_EXIT_CODE
-} from "./chunk-LQJHQ4BU.js";
-import "./chunk-XG56CL6B.js";
+} from "./chunk-H3LS7KZV.js";
+import "./chunk-GNGS7JAX.js";
 import {
   cleanupCheckpoints,
   registerCleanup,
@@ -100,7 +100,7 @@ import {
   runExitCleanup,
   runSyncCleanup,
   setupSignalHandlers
-} from "./chunk-GAS2GAYB.js";
+} from "./chunk-WLH25DMR.js";
 import {
   ASK_USER_TOOL_NAME,
   ApprovalMode,
@@ -254,7 +254,7 @@ import {
   updatePolicy,
   writeToStderr,
   writeToStdout
-} from "./chunk-7HKQGPWB.js";
+} from "./chunk-A4UDQKD5.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -7848,7 +7848,7 @@ async function loadSandboxConfig(settings, argv) {
   }
   const command2 = getSandboxCommand(sandboxValue);
   const packageJson = await getPackageJson(__dirname3);
-  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.57.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
+  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.59.0-nightly.20260826.g64b5b79a6" ?? customImage ?? packageJson?.config?.sandboxImageUri;
   const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
   return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
 }
@@ -9018,7 +9018,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "*:*"))
 (allow network-bind (local ip "*:*"))
-(allow network-outbound)`,
+(allow network-outbound)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "permissive-proxied": `(version 1)
 (deny default)
 (allow file-read*)
@@ -9113,7 +9154,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
 (allow network-bind (local ip "*:*"))
-(allow network-outbound (remote tcp "localhost:8877"))`,
+(allow network-outbound (remote tcp "localhost:8877"))
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "restrictive-open": `(version 1)
 (deny default)
 (allow file-read*)
@@ -9185,7 +9267,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow mach-lookup (global-name "com.apple.sysmond"))
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
-(allow network-outbound)`,
+(allow network-outbound)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "restrictive-proxied": `(version 1)
 (deny default)
 (allow file-read*)
@@ -9257,7 +9380,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow mach-lookup (global-name "com.apple.sysmond"))
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
-(allow network-outbound (remote tcp "localhost:8877"))`,
+(allow network-outbound (remote tcp "localhost:8877"))
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "strict-open": `(version 1)
 (deny default)
 (allow file-read*
@@ -9358,7 +9522,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow mach-lookup (global-name "com.apple.sysmond"))
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
-(allow network-outbound)`,
+(allow network-outbound)
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`,
   "strict-proxied": `(version 1)
 (deny default)
 (allow file-read*
@@ -9459,7 +9664,48 @@ var BUILTIN_SEATBELT_PROFILE_CONTENTS = {
 (allow mach-lookup (global-name "com.apple.sysmond"))
 (allow file-ioctl (regex #"^/dev/tty.*"))
 (allow network-inbound (local ip "localhost:9229"))
-(allow network-outbound (remote tcp "localhost:8877"))`
+(allow network-outbound (remote tcp "localhost:8877"))
+(deny file-read* file-write*
+    (literal "/var/run/docker.sock")
+    (literal "/var/run/docker.sock.raw")
+    (literal "/private/var/run/docker.sock")
+    (literal "/private/var/run/docker.sock.raw")
+    (subpath "/var/run/docker")
+    (subpath "/private/var/run/docker")
+    (subpath "/Users/Shared/.docker")
+    (subpath (string-append (param "HOME_DIR") "/.docker/run"))
+    (subpath (string-append (param "HOME_DIR") "/.docker/desktop"))
+    (subpath (string-append (param "HOME_DIR") "/.colima"))
+    (subpath (string-append (param "HOME_DIR") "/.orbstack/run"))
+    (subpath (string-append (param "HOME_DIR") "/.rd"))
+)
+(deny process-exec
+    (literal "/usr/local/bin/docker")
+    (literal "/usr/local/bin/dockerd")
+    (literal "/usr/local/bin/docker-compose")
+    (literal "/usr/bin/docker")
+    (literal "/opt/homebrew/bin/docker")
+    (literal "/opt/homebrew/bin/dockerd")
+    (literal "/opt/homebrew/bin/docker-compose")
+    (literal "/opt/homebrew/bin/podman")
+    (literal "/usr/local/bin/podman")
+    (literal "/opt/homebrew/bin/colima")
+    (literal "/usr/local/bin/colima")
+    (literal "/opt/homebrew/bin/orb")
+    (literal "/Applications/Docker.app/Contents/Resources/bin/docker")
+    (subpath "/Applications/Docker.app/Contents/MacOS/")
+    (subpath "/Applications/OrbStack.app/Contents/MacOS/")
+    (subpath "/Applications/Rancher Desktop.app/Contents/MacOS/")
+)
+(deny mach-lookup
+    (xpc-service-name-prefix "com.docker.")
+    (global-name-prefix "com.docker.")
+    (global-name-prefix "dev.kdrag0n.OrbStack")
+)
+(deny ipc-posix-shm*
+    (ipc-posix-name-prefix "docker")
+    (ipc-posix-name-prefix "com.docker.")
+)`
 };
 BUILTIN_SEATBELT_PROFILE_CONTENTS["permissive-closed"] = BUILTIN_SEATBELT_PROFILE_CONTENTS["strict-open"];
 BUILTIN_SEATBELT_PROFILE_CONTENTS["restrictive-closed"] = BUILTIN_SEATBELT_PROFILE_CONTENTS["strict-proxied"];
@@ -10855,7 +11101,7 @@ async function runNonInteractive({
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-WMEEEXY6.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-7S57JJNO.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -11365,7 +11611,7 @@ async function runNonInteractive2(params) {
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-WMEEEXY6.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-7S57JJNO.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -16575,7 +16821,7 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
   }
 }
 async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
-  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-5O6FZS57.js");
+  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-WOWDL7QG.js");
   await doStartUI(
     config,
     settings,
@@ -16784,7 +17030,7 @@ ${finalArgs[promptIndex + 1]}`;
     await config.storage.initialize();
     adminControlsListner.setConfig(config);
     if (config.isInteractive() && settings.merged.general.devtools) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-WMEEEXY6.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-7S57JJNO.js");
       setupInitialActivityLogger(config);
     }
     registerTelemetryConfig(config);
@@ -16843,7 +17089,7 @@ ${finalArgs[promptIndex + 1]}`;
     const initAppHandle = startupProfiler.start("initialize_app");
     const initializationResult = await initializeApp(config, settings);
     initAppHandle?.end();
-    import("./liteRtServerManager-LK6HOSMO.js").then(({ LiteRtServerManager }) => {
+    import("./liteRtServerManager-2OROP4PN.js").then(({ LiteRtServerManager }) => {
       const mergedGemma = settings.merged.experimental?.gemmaModelRouter;
       if (!mergedGemma) return;
       const userGemma = settings.forScope("User" /* User */).settings.experimental?.gemmaModelRouter;