@google/gemini-cli 0.59.0-nightly.20260902.g4963a4456 → 0.59.0

package/bundle/{chunk-7JLIYXNU.js → chunk-ZEWQGTD3.js}

@@ -1,7 +1,7 @@
 const require = (await import('node:module')).createRequire(import.meta.url); const __chunk_filename = (await import('node:url')).fileURLToPath(import.meta.url); const __chunk_dirname = (await import('node:path')).dirname(__chunk_filename);
 import {
   runExitCleanup
-} from "./chunk-NMQMMCVT.js";
+} from "./chunk-NBDWOAFH.js";
 import {
   __commonJS,
   __require

package/bundle/{cleanup-25YS5RTX.js → cleanup-V6FPOSLQ.js}

@@ -11,8 +11,8 @@ import {
   runSyncCleanup,
   setupSignalHandlers,
   setupTtyCheck
-} from "./chunk-Q5JIA6GT.js";
-import "./chunk-DIOSE3BS.js";
+} from "./chunk-5MBZBBH2.js";
+import "./chunk-SM627E5R.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";

package/bundle/{cleanup-6GCA4T3P.js → cleanup-XITK52PU.js}

@@ -11,8 +11,8 @@ import {
   runSyncCleanup,
   setupSignalHandlers,
   setupTtyCheck
-} from "./chunk-IWRJCZ6U.js";
-import "./chunk-ER2BMKIS.js";
+} from "./chunk-NNFB47JH.js";
+import "./chunk-YSBB75DZ.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";

package/bundle/{cleanup-LZUO77TQ.js → cleanup-XLXFAFOM.js}

@@ -11,8 +11,8 @@ import {
   runSyncCleanup,
   setupSignalHandlers,
   setupTtyCheck
-} from "./chunk-XIHG4K2H.js";
-import "./chunk-IGCPJWUF.js";
+} from "./chunk-NBDWOAFH.js";
+import "./chunk-S4PJ76PA.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";

package/bundle/{core-2TCJDOL6.js → core-3RU5PE2Y.js}

@@ -590,8 +590,6 @@ import {
   createHookOutput,
   createPolicyEngineConfig,
   createPolicyUpdater,
-  createSafeAgent,
-  createSafeConnector,
   createSafeProxyAgent,
   createSandboxManager,
   createSessionId,
@@ -1018,7 +1016,6 @@ import {
   runInDevTraceSpan,
   safeJsonToMarkdown,
   safeLiteralReplace,
-  safeLookup,
   safeTemplateReplace,
   sanitizeAdminSettings,
   sanitizeFilenamePart,
@@ -1086,12 +1083,11 @@ import {
   validatePath,
   validatePlanContent,
   validatePlanPath,
-  validateUrlDestination,
   wrapInAccountChooser,
   wrapUntrusted,
   writeToStderr,
   writeToStdout
-} from "./chunk-DIOSE3BS.js";
+} from "./chunk-SM627E5R.js";
 import "./chunk-664ZODQF.js";
 import {
   SpanStatusCode,
@@ -1692,8 +1688,6 @@ export {
   createHookOutput,
   createPolicyEngineConfig,
   createPolicyUpdater,
-  createSafeAgent,
-  createSafeConnector,
   createSafeProxyAgent,
   createSandboxManager,
   createSessionId,
@@ -2120,7 +2114,6 @@ export {
   runInDevTraceSpan,
   safeJsonToMarkdown,
   safeLiteralReplace,
-  safeLookup,
   safeTemplateReplace,
   sanitizeAdminSettings,
   sanitizeFilenamePart,
@@ -2188,7 +2181,6 @@ export {
   validatePath,
   validatePlanContent,
   validatePlanPath,
-  validateUrlDestination,
   wrapInAccountChooser,
   wrapUntrusted,
   writeToStderr,

package/bundle/{dist-U5EX4CQJ.js → core-W643DPU2.js}

@@ -590,8 +590,6 @@ import {
   createHookOutput,
   createPolicyEngineConfig,
   createPolicyUpdater,
-  createSafeAgent,
-  createSafeConnector,
   createSafeProxyAgent,
   createSandboxManager,
   createSessionId,
@@ -1018,7 +1016,6 @@ import {
   runInDevTraceSpan,
   safeJsonToMarkdown,
   safeLiteralReplace,
-  safeLookup,
   safeTemplateReplace,
   sanitizeAdminSettings,
   sanitizeFilenamePart,
@@ -1086,12 +1083,11 @@ import {
   validatePath,
   validatePlanContent,
   validatePlanPath,
-  validateUrlDestination,
   wrapInAccountChooser,
   wrapUntrusted,
   writeToStderr,
   writeToStdout
-} from "./chunk-JPE4HCHY.js";
+} from "./chunk-S4PJ76PA.js";
 import "./chunk-664ZODQF.js";
 import {
   SpanStatusCode,
@@ -1692,8 +1688,6 @@ export {
   createHookOutput,
   createPolicyEngineConfig,
   createPolicyUpdater,
-  createSafeAgent,
-  createSafeConnector,
   createSafeProxyAgent,
   createSandboxManager,
   createSessionId,
@@ -2120,7 +2114,6 @@ export {
   runInDevTraceSpan,
   safeJsonToMarkdown,
   safeLiteralReplace,
-  safeLookup,
   safeTemplateReplace,
   sanitizeAdminSettings,
   sanitizeFilenamePart,
@@ -2188,7 +2181,6 @@ export {
   validatePath,
   validatePlanContent,
   validatePlanPath,
-  validateUrlDestination,
   wrapInAccountChooser,
   wrapUntrusted,
   writeToStderr,

package/bundle/{devtoolsService-2IXJHCHW.js → devtoolsService-6HD2JXSA.js}

@@ -3,7 +3,7 @@ import {
   CoreEvent,
   coreEvents,
   debugLogger
-} from "./chunk-JPE4HCHY.js";
+} from "./chunk-YSBB75DZ.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -4325,7 +4325,7 @@ async function toggleDevToolsPanel(config, isOpen, toggle, setOpen) {
     return;
   }
   try {
-    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./dist-U5EX4CQJ.js");
+    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./dist-LLWWE5PU.js");
     const url = await startDevToolsServer(config);
     if (shouldLaunchBrowser()) {
       try {

package/bundle/{devtoolsService-CU22AZND.js → devtoolsService-MHCZCWFY.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   coreEvents,
   debugLogger
-} from "./chunk-DIOSE3BS.js";
+} from "./chunk-S4PJ76PA.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -4324,7 +4324,7 @@ async function toggleDevToolsPanel(config, isOpen, toggle, setOpen) {
     return;
   }
   try {
-    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./core-2TCJDOL6.js");
+    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./core-W643DPU2.js");
     const url = await startDevToolsServer(config);
     if (shouldLaunchBrowser()) {
       try {

package/bundle/{devtoolsService-BJMUO2XL.js → devtoolsService-QCWLN43R.js}

@@ -1,9 +1,8 @@
 const require = (await import('node:module')).createRequire(import.meta.url); const __chunk_filename = (await import('node:url')).fileURLToPath(import.meta.url); const __chunk_dirname = (await import('node:path')).dirname(__chunk_filename);
 import {
-  CoreEvent,
   coreEvents,
   debugLogger
-} from "./chunk-ER2BMKIS.js";
+} from "./chunk-SM627E5R.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -4174,7 +4173,7 @@ var bridgeAttached = false;
 function bridgeCoreEvents(capture) {
   if (bridgeAttached) return;
   bridgeAttached = true;
-  coreEvents.on(CoreEvent.ConsoleLog, (payload) => {
+  coreEvents.on("console-log" /* ConsoleLog */, (payload) => {
     capture.logConsole(payload);
   });
 }
@@ -4325,7 +4324,7 @@ async function toggleDevToolsPanel(config, isOpen, toggle, setOpen) {
     return;
   }
   try {
-    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./dist-VR7BVPAT.js");
+    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./core-3RU5PE2Y.js");
     const url = await startDevToolsServer(config);
     if (shouldLaunchBrowser()) {
       try {

package/bundle/{dist-VR7BVPAT.js → dist-LLWWE5PU.js}

@@ -590,8 +590,6 @@ import {
   createHookOutput,
   createPolicyEngineConfig,
   createPolicyUpdater,
-  createSafeAgent,
-  createSafeConnector,
   createSafeProxyAgent,
   createSandboxManager,
   createSessionId,
@@ -1018,7 +1016,6 @@ import {
   runInDevTraceSpan,
   safeJsonToMarkdown,
   safeLiteralReplace,
-  safeLookup,
   safeTemplateReplace,
   sanitizeAdminSettings,
   sanitizeFilenamePart,
@@ -1086,12 +1083,11 @@ import {
   validatePath,
   validatePlanContent,
   validatePlanPath,
-  validateUrlDestination,
   wrapInAccountChooser,
   wrapUntrusted,
   writeToStderr,
   writeToStdout
-} from "./chunk-ER2BMKIS.js";
+} from "./chunk-YSBB75DZ.js";
 import "./chunk-664ZODQF.js";
 import {
   SpanStatusCode,
@@ -1692,8 +1688,6 @@ export {
   createHookOutput,
   createPolicyEngineConfig,
   createPolicyUpdater,
-  createSafeAgent,
-  createSafeConnector,
   createSafeProxyAgent,
   createSandboxManager,
   createSessionId,
@@ -2120,7 +2114,6 @@ export {
   runInDevTraceSpan,
   safeJsonToMarkdown,
   safeLiteralReplace,
-  safeLookup,
   safeTemplateReplace,
   sanitizeAdminSettings,
   sanitizeFilenamePart,
@@ -2188,7 +2181,6 @@ export {
   validatePath,
   validatePlanContent,
   validatePlanPath,
-  validateUrlDestination,
   wrapInAccountChooser,
   wrapUntrusted,
   writeToStderr,

package/bundle/docs/reference/tools.md

@@ -148,10 +148,10 @@ each tool.
 
 ### Web
 
-| Tool                                          | Kind     | Description                                                                                                                                                                              |
-| :-------------------------------------------- | :------- | :--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| [`google_web_search`](../tools/web-search.md) | `Search` | Performs a Google Search to find up-to-date information.                                                                                                                                 |
-| [`web_fetch`](../tools/web-fetch.md)          | `Fetch`  | Retrieves and processes content from specific URLs. Outbound requests are validated against private and reserved IP ranges. In Plan Mode, this tool requires explicit user confirmation. |
+| Tool                                          | Kind     | Description                                                                                                                                                                                                                                                                     |
+| :-------------------------------------------- | :------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| [`google_web_search`](../tools/web-search.md) | `Search` | Performs a Google Search to find up-to-date information.                                                                                                                                                                                                                        |
+| [`web_fetch`](../tools/web-fetch.md)          | `Fetch`  | Retrieves and processes content from specific URLs. **Warning:** This tool can access local and private network addresses (for example, localhost), which may pose a security risk if used with untrusted prompts. In Plan Mode, this tool requires explicit user confirmation. |
 
 ### Tool argument keys
 

package/bundle/docs/tools/web-fetch.md

@@ -16,17 +16,13 @@ specific operations like summarization or extraction.
 
 ## Technical behavior
 
-- **Network access:** Destination URLs and resolved IP addresses are validated
-  to restrict access to private, reserved, loopback, and internal networks
-  (e.g., RFC 1918 addresses and internal domains). Transport connections are
-  pinned to the resolved destination IP address.
 - **Confirmation:** Triggers a confirmation dialog showing the converted URLs.
 - **Plan Mode:** In [Plan Mode](../cli/plan-mode.md), `web_fetch` is available
-  but always requires explicit user confirmation (`ask_user`).
+  but always requires explicit user confirmation (`ask_user`) due to security
+  implications of accessing external or private network addresses.
 - **Processing:** Uses the Gemini API's `urlContext` for retrieval.
 - **Fallback:** If API access fails, the tool attempts to fetch raw content
-  directly from your local machine (with destination IP validation and
-  connection pinning applied).
+  directly from your local machine.
 - **Formatting:** Returns a synthesized response with source attribution.
 
 ## Use cases

package/bundle/{gemini-636YD7YV.js → gemini-CQYKWDIK.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-UEJPTQC6.js";
+} from "./chunk-RSFMNCZQ.js";
 import {
   BuiltinCommandLoader,
   CommandService,
@@ -45,11 +45,11 @@ import {
   updateAllUpdatableExtensions,
   updateExtension,
   validateAuthMethod
-} from "./chunk-KWV4AQUZ.js";
+} from "./chunk-QEMQJ5WC.js";
 import {
   exitCli,
   require_source
-} from "./chunk-OGVFULXC.js";
+} from "./chunk-YINIG2CS.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -87,11 +87,11 @@ import {
   resolveGemmaConfig,
   saveModelChange,
   stripAnsi
-} from "./chunk-GSIUURFM.js";
+} from "./chunk-NWWZRJGH.js";
 import {
   RELAUNCH_EXIT_CODE
-} from "./chunk-V6Z4ITCV.js";
-import "./chunk-T7ZX2IIA.js";
+} from "./chunk-O4TDK2BP.js";
+import "./chunk-EZCKZ4FP.js";
 import {
   cleanupCheckpoints,
   registerCleanup,
@@ -100,7 +100,7 @@ import {
   runExitCleanup,
   runSyncCleanup,
   setupSignalHandlers
-} from "./chunk-Q5JIA6GT.js";
+} from "./chunk-5MBZBBH2.js";
 import {
   ASK_USER_TOOL_NAME,
   AuthType,
@@ -238,7 +238,7 @@ import {
   updatePolicy,
   writeToStderr,
   writeToStdout
-} from "./chunk-DIOSE3BS.js";
+} from "./chunk-SM627E5R.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -7832,7 +7832,7 @@ async function loadSandboxConfig(settings, argv) {
   }
   const command2 = getSandboxCommand(sandboxValue);
   const packageJson = await getPackageJson(__dirname3);
-  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.59.0-nightly.20260825.g812f7a2bc" ?? customImage ?? packageJson?.config?.sandboxImageUri;
+  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.59.0-preview.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
   const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
   return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
 }
@@ -11085,7 +11085,7 @@ async function runNonInteractive({
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-CU22AZND.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-QCWLN43R.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -11595,7 +11595,7 @@ async function runNonInteractive2(params) {
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-CU22AZND.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-QCWLN43R.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -16805,7 +16805,7 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
   }
 }
 async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
-  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-CS35GNLK.js");
+  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-7H2PS7RG.js");
   await doStartUI(
     config,
     settings,
@@ -17014,7 +17014,7 @@ ${finalArgs[promptIndex + 1]}`;
     await config.storage.initialize();
     adminControlsListner.setConfig(config);
     if (config.isInteractive() && settings.merged.general.devtools) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-CU22AZND.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-QCWLN43R.js");
       setupInitialActivityLogger(config);
     }
     registerTelemetryConfig(config);
@@ -17073,7 +17073,7 @@ ${finalArgs[promptIndex + 1]}`;
     const initAppHandle = startupProfiler.start("initialize_app");
     const initializationResult = await initializeApp(config, settings);
     initAppHandle?.end();
-    import("./liteRtServerManager-3TZXC7UK.js").then(({ LiteRtServerManager }) => {
+    import("./liteRtServerManager-3QXIGTR3.js").then(({ LiteRtServerManager }) => {
       const mergedGemma = settings.merged.experimental?.gemmaModelRouter;
       if (!mergedGemma) return;
       const userGemma = settings.forScope("User" /* User */).settings.experimental?.gemmaModelRouter;