@google/gemini-cli 0.60.0-nightly.20260908.g85aca163f → 0.60.0

package/bundle/{gemini-DM7UHG5I.js → gemini-ZTU7EMI3.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-JE7V5AAP.js";
+} from "./chunk-UEQMLKXK.js";
 import {
   BuiltinCommandLoader,
   CommandService,
@@ -46,11 +46,11 @@ import {
   updateExtension,
   validateAuthMethod,
   validateContextFilePath
-} from "./chunk-L5DTYBPR.js";
+} from "./chunk-CMLALLX3.js";
 import {
   exitCli,
   require_source
-} from "./chunk-FX53IMQ4.js";
+} from "./chunk-7QC7KWAE.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -88,11 +88,11 @@ import {
   resolveGemmaConfig,
   saveModelChange,
   stripAnsi
-} from "./chunk-VIXOL23X.js";
+} from "./chunk-WRNJPSJG.js";
 import {
   RELAUNCH_EXIT_CODE
-} from "./chunk-XTLORUWQ.js";
-import "./chunk-G4V32KTT.js";
+} from "./chunk-P3SNRA43.js";
+import "./chunk-2CNCBL5E.js";
 import {
   cleanupCheckpoints,
   registerCleanup,
@@ -101,7 +101,7 @@ import {
   runExitCleanup,
   runSyncCleanup,
   setupSignalHandlers
-} from "./chunk-3CDPEGVA.js";
+} from "./chunk-32DXU4EF.js";
 import {
   ASK_USER_TOOL_NAME,
   AuthType,
@@ -239,7 +239,7 @@ import {
   updatePolicy,
   writeToStderr,
   writeToStdout
-} from "./chunk-FIESYQDV.js";
+} from "./chunk-VCAJDPDX.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -1524,11 +1524,11 @@ var parser = new YargsParser({
   resolve: resolve2,
   // TODO: figure  out a  way to combine ESM and CJS coverage, such  that
   // we can exercise all the lines below:
-  require: (path16) => {
+  require: (path17) => {
     if (typeof __require !== "undefined") {
-      return __require(path16);
-    } else if (path16.match(/\.json$/)) {
-      return JSON.parse(readFileSync(path16, "utf8"));
+      return __require(path17);
+    } else if (path17.match(/\.json$/)) {
+      return JSON.parse(readFileSync(path17, "utf8"));
     } else {
       throw Error("only .json config files are supported in ESM");
     }
@@ -6313,27 +6313,27 @@ import { fileURLToPath as fileURLToPath2 } from "node:url";
 var __filename = fileURLToPath2(import.meta.url);
 var __dirname2 = dirname3(__filename);
 var EXAMPLES_PATH = join(__dirname2, "examples");
-async function pathExists(path16) {
+async function pathExists(path17) {
   try {
-    await access(path16);
+    await access(path17);
     return true;
   } catch {
     return false;
   }
 }
-async function createDirectory(path16) {
-  if (await pathExists(path16)) {
-    throw new Error(`Path already exists: ${path16}`);
+async function createDirectory(path17) {
+  if (await pathExists(path17)) {
+    throw new Error(`Path already exists: ${path17}`);
   }
-  await mkdir(path16, { recursive: true });
+  await mkdir(path17, { recursive: true });
 }
-async function copyDirectory(template, path16) {
-  await createDirectory(path16);
+async function copyDirectory(template, path17) {
+  await createDirectory(path17);
   const examplePath = join(EXAMPLES_PATH, template);
   const entries = await readdir(examplePath, { withFileTypes: true });
   for (const entry of entries) {
     const srcPath = join(examplePath, entry.name);
-    const destPath = join(path16, entry.name);
+    const destPath = join(path17, entry.name);
     await cp(srcPath, destPath, { recursive: true });
   }
 }
@@ -6614,7 +6614,7 @@ async function handleEnable3(args) {
   const result = enableSkill(settings, name);
   const feedback = renderSkillActionFeedback(
     result,
-    (label, path16) => `${import_chalk5.default.bold(label)} (${import_chalk5.default.dim(path16)})`
+    (label, path17) => `${import_chalk5.default.bold(label)} (${import_chalk5.default.dim(path17)})`
   );
   debugLogger.log(feedback);
 }
@@ -6644,7 +6644,7 @@ async function handleDisable3(args) {
   const result = disableSkill(settings, name, scope);
   const feedback = renderSkillActionFeedback(
     result,
-    (label, path16) => `${import_chalk6.default.bold(label)} (${import_chalk6.default.dim(path16)})`
+    (label, path17) => `${import_chalk6.default.bold(label)} (${import_chalk6.default.dim(path17)})`
   );
   debugLogger.log(feedback);
 }
@@ -7839,7 +7839,7 @@ async function loadSandboxConfig(settings, argv) {
   }
   const command2 = getSandboxCommand(sandboxValue);
   const packageJson = await getPackageJson(__dirname3);
-  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.60.0-nightly.20260901.g0bd1d4397" ?? customImage ?? packageJson?.config?.sandboxImageUri;
+  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.60.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
   const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
   return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
 }
@@ -8774,7 +8774,7 @@ import { createHash as createHash2 } from "node:crypto";
 import v8 from "node:v8";
 import os6 from "node:os";
 import dns from "node:dns";
-import * as path15 from "node:path";
+import * as path16 from "node:path";
 import * as fsPromises from "node:fs/promises";
 
 // packages/cli/src/utils/sandbox.ts
@@ -8786,7 +8786,7 @@ import {
   spawn as spawn2,
   spawnSync
 } from "node:child_process";
-import path8 from "node:path";
+import path9 from "node:path";
 import fs7 from "node:fs";
 import os3 from "node:os";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
@@ -8797,6 +8797,7 @@ import { randomBytes } from "node:crypto";
 var import_shell_quote = __toESM(require_shell_quote(), 1);
 import os2 from "node:os";
 import fs6 from "node:fs";
+import path8 from "node:path";
 import { readFile } from "node:fs/promises";
 var LOCAL_DEV_SANDBOX_IMAGE_NAME = "gemini-cli-sandbox";
 var SANDBOX_NETWORK_NAME = "gemini-cli-sandbox";
@@ -8811,6 +8812,58 @@ var BUILTIN_SEATBELT_PROFILES = [
   "strict-open",
   "strict-proxied"
 ];
+var SENSITIVE_SETTINGS_FILENAMES = /* @__PURE__ */ new Set([
+  "oauth_creds.json",
+  "google_accounts.json",
+  "gemini-credentials.json",
+  "mcp-oauth-tokens.json",
+  "a2a-oauth-tokens.json"
+]);
+function isCredentialOrSensitivePath(targetPath, rootDir) {
+  if (rootDir && path8.resolve(targetPath) === path8.resolve(rootDir)) {
+    return false;
+  }
+  const base = path8.basename(targetPath).toLowerCase();
+  if (SENSITIVE_SETTINGS_FILENAMES.has(base)) {
+    return true;
+  }
+  const isRootChild = rootDir ? path8.dirname(path8.resolve(targetPath)) === path8.resolve(rootDir) : true;
+  if (isRootChild && (base === "history" || base === "tmp" || base === "bin")) {
+    return true;
+  }
+  const hasSensitiveSuffix = (s) => {
+    if (base === s) return true;
+    if (base.endsWith(s)) {
+      const charBefore = base.charAt(base.length - s.length - 1);
+      return charBefore === "-" || charBefore === "_" || charBefore === ".";
+    }
+    return false;
+  };
+  if (base.endsWith(".credentials") || hasSensitiveSuffix("credentials") || hasSensitiveSuffix("credentials.json") || hasSensitiveSuffix("tokens.json") || hasSensitiveSuffix("token.json") || hasSensitiveSuffix("token") || hasSensitiveSuffix("creds.json") || hasSensitiveSuffix("cred.json") || base.endsWith(".env") || base.endsWith(".key") || base.endsWith(".pem") || base.endsWith(".p12") || hasSensitiveSuffix("key.json")) {
+    return true;
+  }
+  return false;
+}
+function prepareIsolatedSettingsDir(userSettingsDirOnHost) {
+  const baseTmpDir = os2.tmpdir() || "/tmp";
+  const isolatedDir = fs6.mkdtempSync(
+    path8.join(baseTmpDir, "gemini-sandbox-settings-")
+  );
+  fs6.chmodSync(isolatedDir, 448);
+  if (fs6.existsSync(userSettingsDirOnHost)) {
+    try {
+      fs6.cpSync(userSettingsDirOnHost, isolatedDir, {
+        recursive: true,
+        filter: (source) => !isCredentialOrSensitivePath(source, userSettingsDirOnHost)
+      });
+    } catch (err) {
+      debugLogger.warn(
+        `Failed to copy user settings to sandbox directory: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  }
+  return isolatedDir;
+}
 function getContainerPath(hostPath) {
   if (os2.platform() !== "win32") {
     return hostPath;
@@ -9713,7 +9766,18 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
   let stopProxy = void 0;
   let tempProfileFile = null;
   let sandboxTmpDir = null;
+  let isolatedSettingsDir = null;
   const cleanup = () => {
+    if (isolatedSettingsDir) {
+      const dirToDelete = isolatedSettingsDir;
+      isolatedSettingsDir = null;
+      try {
+        if (fs7.existsSync(dirToDelete)) {
+          fs7.rmSync(dirToDelete, { recursive: true, force: true });
+        }
+      } catch {
+      }
+    }
     if (sandboxTmpDir) {
       const dirToDelete = sandboxTmpDir;
       sandboxTmpDir = null;
@@ -9766,10 +9830,10 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
         new URL(`sandbox-macos-${profile}.sb`, import.meta.url)
       );
       if (!BUILTIN_SEATBELT_PROFILES.includes(profile)) {
-        const safeProfile = path8.basename(profile);
+        const safeProfile = path9.basename(profile);
         const fileName = `sandbox-macos-${safeProfile}.sb`;
-        const userProfileFile = path8.join(homedir(), GEMINI_DIR, fileName);
-        const projectProfileFile = path8.join(GEMINI_DIR, fileName);
+        const userProfileFile = path9.join(homedir(), GEMINI_DIR, fileName);
+        const projectProfileFile = path9.join(GEMINI_DIR, fileName);
         profileFile = fs7.existsSync(userProfileFile) ? userProfileFile : projectProfileFile;
       } else {
         if (!fs7.existsSync(profileFile)) {
@@ -9778,7 +9842,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
             try {
               const tempDir = fs7.realpathSync(os3.tmpdir());
               const rand = randomBytes(8).toString("hex");
-              tempProfileFile = path8.join(
+              tempProfileFile = path9.join(
                 tempDir,
                 `gemini-sandbox-macos-${profile}-${rand}.sb`
               );
@@ -9808,7 +9872,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
         ].join(" ");
         const hostTmpDir = fs7.realpathSync(os3.tmpdir());
         const resolvedTmpDir = fs7.mkdtempSync(
-          path8.join(hostTmpDir, "gemini-sandbox-")
+          path9.join(hostTmpDir, "gemini-sandbox-")
         );
         sandboxTmpDir = resolvedTmpDir;
         const args2 = [
@@ -9836,7 +9900,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
         }
         if (config.allowedPaths) {
           for (const hostPath of config.allowedPaths) {
-            if (hostPath && path8.isAbsolute(hostPath) && fs7.existsSync(hostPath)) {
+            if (hostPath && path9.isAbsolute(hostPath) && fs7.existsSync(hostPath)) {
               const realDir = fs7.realpathSync(hostPath);
               if (!includedDirs.includes(realDir) && realDir !== targetDir) {
                 includedDirs.push(realDir);
@@ -9942,7 +10006,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
     if (!command2) throw new FatalSandboxError("Sandbox command is required");
     debugLogger.log(`hopping into sandbox (command: ${command2}) ...`);
     const gcPath = process.argv[1] ? fs7.realpathSync(process.argv[1]) : "";
-    const projectSandboxDockerfile = path8.join(
+    const projectSandboxDockerfile = path9.join(
       GEMINI_DIR,
       "sandbox.Dockerfile"
     );
@@ -9951,7 +10015,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
     if (!image) throw new FatalSandboxError("Sandbox image is required");
     if (!/^[a-zA-Z0-9_.:/-]+$/.test(image))
       throw new FatalSandboxError("Invalid sandbox image name");
-    const workdir = path8.resolve(process.cwd());
+    const workdir = path9.resolve(process.cwd());
     const containerWorkdir = getContainerPath(workdir);
     if (process.env["BUILD_SANDBOX"]) {
       if (!gcPath.includes("gemini-cli/packages/")) {
@@ -9962,13 +10026,13 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
         debugLogger.log("building sandbox ...");
         const gcRoot = gcPath.split("/packages/")[0];
         let buildArgs = "";
-        const projectSandboxDockerfile2 = path8.join(
+        const projectSandboxDockerfile2 = path9.join(
           GEMINI_DIR,
           "sandbox.Dockerfile"
         );
         if (isCustomProjectSandbox) {
           debugLogger.log(`using ${projectSandboxDockerfile2} for sandbox`);
-          buildArgs += `-f ${path8.resolve(projectSandboxDockerfile2)} -i ${image}`;
+          buildArgs += `-f ${path9.resolve(projectSandboxDockerfile2)} -i ${image}`;
         }
         execSync(
           `cd ${gcRoot} && node scripts/build_sandbox.js -s ${buildArgs}`,
@@ -10012,18 +10076,16 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
     if (!fs7.existsSync(userHomeDirOnHost)) {
       fs7.mkdirSync(userHomeDirOnHost, { recursive: true });
     }
-    const userSettingsDirOnHost = path8.join(userHomeDirOnHost, GEMINI_DIR);
+    const userSettingsDirOnHost = path9.join(userHomeDirOnHost, GEMINI_DIR);
     if (!fs7.existsSync(userSettingsDirOnHost)) {
       fs7.mkdirSync(userSettingsDirOnHost, { recursive: true });
     }
-    args.push(
-      "--volume",
-      `${userSettingsDirOnHost}:${userSettingsDirInSandbox}`
-    );
+    isolatedSettingsDir = prepareIsolatedSettingsDir(userSettingsDirOnHost);
+    args.push("--volume", `${isolatedSettingsDir}:${userSettingsDirInSandbox}`);
     if (userSettingsDirInSandbox !== getContainerPath(userSettingsDirOnHost)) {
       args.push(
         "--volume",
-        `${userSettingsDirOnHost}:${getContainerPath(userSettingsDirOnHost)}`
+        `${isolatedSettingsDir}:${getContainerPath(userSettingsDirOnHost)}`
       );
     }
     args.push("--volume", `${os3.tmpdir()}:${getContainerPath(os3.tmpdir())}`);
@@ -10033,7 +10095,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
         `${userHomeDirOnHost}:${getContainerPath(userHomeDirOnHost)}`
       );
     }
-    const gcloudConfigDir = path8.join(homedir(), ".config", "gcloud");
+    const gcloudConfigDir = path9.join(homedir(), ".config", "gcloud");
     if (fs7.existsSync(gcloudConfigDir)) {
       args.push(
         "--volume",
@@ -10057,7 +10119,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
           to = to || from;
           opts = opts || "ro";
           mount = `${from}:${to}:${opts}`;
-          if (!path8.isAbsolute(from)) {
+          if (!path9.isAbsolute(from)) {
             throw new FatalSandboxError(
               `Path '${from}' listed in SANDBOX_MOUNTS must be absolute`
             );
@@ -10074,7 +10136,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
     }
     if (config.allowedPaths) {
       for (const hostPath of config.allowedPaths) {
-        if (hostPath && path8.isAbsolute(hostPath) && fs7.existsSync(hostPath)) {
+        if (hostPath && path9.isAbsolute(hostPath) && fs7.existsSync(hostPath)) {
           const containerPath = getContainerPath(hostPath);
           debugLogger.log(
             `Config allowedPath: ${hostPath} -> ${containerPath} (ro)`
@@ -10194,7 +10256,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
       }
     }
     if (process.env["VIRTUAL_ENV"]?.toLowerCase().startsWith(workdir.toLowerCase())) {
-      const sandboxVenvPath = path8.resolve(GEMINI_DIR, "sandbox.venv");
+      const sandboxVenvPath = path9.resolve(GEMINI_DIR, "sandbox.venv");
       if (!fs7.existsSync(sandboxVenvPath)) {
         fs7.mkdirSync(sandboxVenvPath, { recursive: true });
       }
@@ -10231,7 +10293,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
     }
     args.push("--env", `SANDBOX=${containerName}`);
     if (command2 === "podman") {
-      const emptyAuthFilePath = path8.join(os3.tmpdir(), "empty_auth.json");
+      const emptyAuthFilePath = path9.join(os3.tmpdir(), "empty_auth.json");
       fs7.writeFileSync(emptyAuthFilePath, "{}", "utf-8");
       args.push("--authfile", emptyAuthFilePath);
     }
@@ -10360,7 +10422,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
 }
 async function start_lxc_sandbox(config, nodeArgs = [], cliArgs = []) {
   const containerName = config.image || "gemini-sandbox";
-  const workdir = path8.resolve(process.cwd());
+  const workdir = path9.resolve(process.cwd());
   debugLogger.log(
     `starting lxc sandbox (container: ${containerName}, workdir: ${workdir}) ...`
   );
@@ -10441,7 +10503,7 @@ async function start_lxc_sandbox(config, nodeArgs = [], cliArgs = []) {
     }
     if (config.allowedPaths) {
       for (const hostPath of config.allowedPaths) {
-        if (hostPath && path8.isAbsolute(hostPath) && fs7.existsSync(hostPath)) {
+        if (hostPath && path9.isAbsolute(hostPath) && fs7.existsSync(hostPath)) {
           const allowedDeviceName = `gemini-allowed-${randomBytes(4).toString(
             "hex"
           )}`;
@@ -10687,7 +10749,7 @@ async function getStartupWarnings() {
 // packages/cli/src/utils/userStartupWarnings.ts
 import fs9 from "node:fs/promises";
 import { homedir as osHomedir } from "node:os";
-import path9 from "node:path";
+import path10 from "node:path";
 import process4 from "node:process";
 var homeDirectoryCheck = {
   id: "home-directory",
@@ -10701,7 +10763,7 @@ var homeDirectoryCheck = {
         fs9.realpath(workspaceRoot),
         fs9.realpath(osHomedir())
       ]);
-      if (path9.resolve(workspaceRealPath) === path9.resolve(homeRealPath)) {
+      if (path10.resolve(workspaceRealPath) === path10.resolve(homeRealPath)) {
         if (isFolderTrustEnabled(settings) && isWorkspaceTrusted(settings).isTrusted) {
           return null;
         }
@@ -10720,7 +10782,7 @@ var rootDirectoryCheck = {
     try {
       const workspaceRealPath = await fs9.realpath(workspaceRoot);
       const errorMessage = "Warning: You are running Gemini CLI in the root directory. Your entire folder structure will be used for context. It is strongly recommended to run in a project-specific directory.";
-      if (path9.dirname(workspaceRealPath) === workspaceRealPath) {
+      if (path10.dirname(workspaceRealPath) === workspaceRealPath) {
         return errorMessage;
       }
       return null;
@@ -11118,7 +11180,7 @@ async function runNonInteractive({
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-J5IMHON6.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-TEWMGXKI.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -11628,7 +11690,7 @@ async function runNonInteractive2(params) {
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-J5IMHON6.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-TEWMGXKI.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -13619,7 +13681,7 @@ import { randomUUID as randomUUID2 } from "node:crypto";
 
 // packages/cli/src/acp/acpSession.ts
 import * as fs12 from "node:fs/promises";
-import * as path12 from "node:path";
+import * as path13 from "node:path";
 import { randomUUID } from "node:crypto";
 
 // packages/cli/src/acp/commands/commandRegistry.ts
@@ -14061,7 +14123,7 @@ var UpdateExtensionCommand = class {
 
 // packages/cli/src/acp/commands/init.ts
 import * as fs10 from "node:fs";
-import * as path10 from "node:path";
+import * as path11 from "node:path";
 var InitCommand = class {
   name = "init";
   description = "Analyzes the project and creates a tailored GEMINI.md file";
@@ -14071,7 +14133,7 @@ var InitCommand = class {
     if (!targetDir) {
       throw new Error("Command requires a workspace.");
     }
-    const geminiMdPath = path10.join(targetDir, "GEMINI.md");
+    const geminiMdPath = path11.join(targetDir, "GEMINI.md");
     const result = performInit(fs10.existsSync(geminiMdPath));
     switch (result.type) {
       case "message":
@@ -14104,7 +14166,7 @@ ${result.content}`
 
 // packages/cli/src/acp/commands/restore.ts
 import * as fs11 from "node:fs/promises";
-import * as path11 from "node:path";
+import * as path12 from "node:path";
 var RestoreCommand = class {
   name = "restore";
   description = "Restore to a previous checkpoint, or list available checkpoints to restore. This will reset the conversation and file history to the state it was in when the checkpoint was created";
@@ -14126,7 +14188,7 @@ var RestoreCommand = class {
       }
       const selectedFile = argsStr.endsWith(".json") ? argsStr : `${argsStr}.json`;
       const checkpointDir = config.storage.getProjectTempCheckpointsDir();
-      const filePath = path11.join(checkpointDir, selectedFile);
+      const filePath = path12.join(checkpointDir, selectedFile);
       let data;
       try {
         data = await fs11.readFile(filePath, "utf-8");
@@ -14200,7 +14262,7 @@ var ListCheckpointsCommand = class {
       }
       const checkpointFiles = /* @__PURE__ */ new Map();
       for (const file of jsonFiles) {
-        const filePath = path11.join(checkpointDir, file);
+        const filePath = path12.join(checkpointDir, file);
         const data = await fs11.readFile(filePath, "utf-8");
         checkpointFiles.set(file, data);
       }
@@ -15462,7 +15524,7 @@ ${event.value.description}`;
       } else if (result.status === "invalid") {
         continue;
       } else {
-        absolutePath = path12.resolve(
+        absolutePath = path13.resolve(
           this.context.config.getTargetDir(),
           pathName
         );
@@ -15536,7 +15598,7 @@ ${event.value.description}`;
       }
       try {
         if (!validationError) {
-          if ((path12.isAbsolute(pathName) || !isWithinRoot(
+          if ((path13.isAbsolute(pathName) || !isWithinRoot(
             absolutePath,
             this.context.config.getTargetDir()
           )) && !readDirectly) {
@@ -15640,7 +15702,7 @@ ${contentToPush}`;
                 const lines = globResult.llmContent.split("\n");
                 if (lines.length > 1 && lines[1]) {
                   const firstMatchAbsolute = lines[1].trim();
-                  currentPathSpec = path12.relative(
+                  currentPathSpec = path13.relative(
                     this.context.config.getTargetDir(),
                     firstMatchAbsolute
                   );
@@ -15858,7 +15920,7 @@ Content from @${contextPart.uri}:
 
 // packages/cli/src/acp/acpFileSystemService.ts
 import os5 from "node:os";
-import path13 from "node:path";
+import path14 from "node:path";
 var AcpFileSystemService = class {
   constructor(connection, sessionId, capabilities, fallback, root) {
     this.connection = connection;
@@ -15867,7 +15929,7 @@ var AcpFileSystemService = class {
     this.fallback = fallback;
     this.root = root;
   }
-  geminiDir = path13.join(os5.homedir(), ".gemini");
+  geminiDir = path14.join(os5.homedir(), ".gemini");
   shouldUseFallback(filePath) {
     return !isWithinRoot(filePath, this.root) || isWithinRoot(filePath, this.geminiDir);
   }
@@ -16503,7 +16565,7 @@ async function setupTerminalAndTheme(config, settings) {
 
 // packages/cli/src/utils/logCleanup.ts
 import { promises as fs13 } from "node:fs";
-import * as path14 from "node:path";
+import * as path15 from "node:path";
 var RETENTION_PERIOD_MS = 7 * 24 * 60 * 60 * 1e3;
 async function cleanupBackgroundLogs(debugMode = false) {
   try {
@@ -16518,7 +16580,7 @@ async function cleanupBackgroundLogs(debugMode = false) {
     let deletedCount = 0;
     for (const entry of entries) {
       if (entry.isFile() && entry.name.endsWith(".log")) {
-        const filePath = path14.join(logDir, entry.name);
+        const filePath = path15.join(logDir, entry.name);
         try {
           const stats = await fs13.stat(filePath);
           if (now - stats.mtime.getTime() > RETENTION_PERIOD_MS) {
@@ -16769,8 +16831,8 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
       sessionData.projectHash = getProjectHash(storage.getProjectRoot());
       sessionData.startTime = isoNow;
       sessionData.lastUpdated = isoNow;
-      const chatsDir = path15.join(storage.getProjectTempDir(), "chats");
-      const newSessionPath = path15.join(
+      const chatsDir = path16.join(storage.getProjectTempDir(), "chats");
+      const newSessionPath = path16.join(
         chatsDir,
         `session-${now}-${newSessionId.slice(0, 8)}.jsonl`
       );
@@ -16838,7 +16900,7 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
   }
 }
 async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
-  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-NC7ZBX74.js");
+  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-NQE3X2WY.js");
   await doStartUI(
     config,
     settings,
@@ -17047,7 +17109,7 @@ ${finalArgs[promptIndex + 1]}`;
     await config.storage.initialize();
     adminControlsListner.setConfig(config);
     if (config.isInteractive() && settings.merged.general.devtools) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-J5IMHON6.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-TEWMGXKI.js");
       setupInitialActivityLogger(config);
     }
     registerTelemetryConfig(config);
@@ -17106,7 +17168,7 @@ ${finalArgs[promptIndex + 1]}`;
     const initAppHandle = startupProfiler.start("initialize_app");
     const initializationResult = await initializeApp(config, settings);
     initAppHandle?.end();
-    import("./liteRtServerManager-JSW26OPJ.js").then(({ LiteRtServerManager }) => {
+    import("./liteRtServerManager-5YXPHG3Q.js").then(({ LiteRtServerManager }) => {
       const mergedGemma = settings.merged.experimental?.gemmaModelRouter;
       if (!mergedGemma) return;
       const userGemma = settings.forScope("User" /* User */).settings.experimental?.gemmaModelRouter;

package/bundle/gemini.js

@@ -4,10 +4,10 @@ import {
   RELAUNCH_EXIT_CODE,
   getScriptArgs,
   getSpawnConfig
-} from "./chunk-WET7Q2Z2.js";
-import "./chunk-3QU7MFQ7.js";
-import "./chunk-YMZA4EO3.js";
-import "./chunk-M24MUPYL.js";
+} from "./chunk-PJREBWY3.js";
+import "./chunk-4IIDTAFR.js";
+import "./chunk-GFHSA4BE.js";
+import "./chunk-M6NSK26M.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -115,9 +115,9 @@ ${error instanceof Error ? error.stack ?? error.message : String(error)}
       }
     }
   } else {
-    const { main } = await import("./gemini-RLSAAMB2.js");
-    const { FatalError, writeToStderr } = await import("./dist-IYMU3MAT.js");
-    const { runExitCleanup } = await import("./cleanup-GWIY2YES.js");
+    const { main } = await import("./gemini-LUNNHKPJ.js");
+    const { FatalError, writeToStderr } = await import("./dist-PD4ABRTS.js");
+    const { runExitCleanup } = await import("./cleanup-XYVEFB7E.js");
     main().catch(async (error) => {
       const cleanupTimeout = setTimeout(() => {
         writeToStderr("Cleanup timed out, forcing exit...\n");

package/bundle/{interactiveCli-BNCDBJK2.js → interactiveCli-COQJBPC2.js}

@@ -157,10 +157,10 @@ import {
   widestLineFromStyledChars,
   wordBreakStyledChars,
   wrapStyledChars
-} from "./chunk-A6IXIFRW.js";
+} from "./chunk-GNCCSIBA.js";
 import {
   require_source
-} from "./chunk-4YTSRQAI.js";
+} from "./chunk-RZALYEQN.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -214,24 +214,24 @@ import {
   stripAnsi,
   stripUnsafeCharacters,
   toCodePoints
-} from "./chunk-BOGYC66X.js";
+} from "./chunk-OCLZG6C5.js";
 import {
   handleAutoUpdate,
   isDevelopment,
   relaunchApp,
   setUpdateHandler
-} from "./chunk-WET7Q2Z2.js";
+} from "./chunk-PJREBWY3.js";
 import {
   isTodoList,
   mapCoreStatusToDisplayStatus,
   require_react
-} from "./chunk-3QU7MFQ7.js";
+} from "./chunk-4IIDTAFR.js";
 import {
   registerCleanup,
   removeCleanup,
   runExitCleanup,
   setupTtyCheck
-} from "./chunk-YMZA4EO3.js";
+} from "./chunk-GFHSA4BE.js";
 import {
   ACTIVATE_SKILL_TOOL_NAME,
   AGENT_TOOL_NAME,
@@ -437,7 +437,7 @@ import {
   validatePlanContent,
   validatePlanPath,
   writeToStdout
-} from "./chunk-M24MUPYL.js";
+} from "./chunk-M6NSK26M.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -33964,7 +33964,7 @@ ${queuedText}` : queuedText;
       if (keyMatchers["app.showErrorDetails" /* SHOW_ERROR_DETAILS */](key)) {
         if (settings.merged.general.devtools) {
           void (async () => {
-            const { toggleDevToolsPanel } = await import("./devtoolsService-R3332TAT.js");
+            const { toggleDevToolsPanel } = await import("./devtoolsService-J7SM2WQQ.js");
             await toggleDevToolsPanel(
               config,
               showErrorDetails,