@google/gemini-cli 0.60.0-nightly.20260908.g85aca163f → 0.60.0

package/bundle/{gemini-FPHQ6YA6.js → gemini-LUNNHKPJ.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-RRTGK7KM.js";
+} from "./chunk-QRYVAS35.js";
 import {
   BuiltinCommandLoader,
   CommandService,
@@ -46,11 +46,11 @@ import {
   updateExtension,
   validateAuthMethod,
   validateContextFilePath
-} from "./chunk-R55JHECT.js";
+} from "./chunk-GNCCSIBA.js";
 import {
   exitCli,
   require_source
-} from "./chunk-JIOJKKRV.js";
+} from "./chunk-RZALYEQN.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -88,11 +88,11 @@ import {
   resolveGemmaConfig,
   saveModelChange,
   stripAnsi
-} from "./chunk-CYA6LLPT.js";
+} from "./chunk-OCLZG6C5.js";
 import {
   RELAUNCH_EXIT_CODE
-} from "./chunk-ACSEKHMC.js";
-import "./chunk-5AXHFT2M.js";
+} from "./chunk-PJREBWY3.js";
+import "./chunk-4IIDTAFR.js";
 import {
   cleanupCheckpoints,
   registerCleanup,
@@ -101,7 +101,7 @@ import {
   runExitCleanup,
   runSyncCleanup,
   setupSignalHandlers
-} from "./chunk-MI66NSWG.js";
+} from "./chunk-GFHSA4BE.js";
 import {
   ASK_USER_TOOL_NAME,
   ApprovalMode,
@@ -255,7 +255,7 @@ import {
   updatePolicy,
   writeToStderr,
   writeToStdout
-} from "./chunk-GD2JGMGI.js";
+} from "./chunk-M6NSK26M.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-TUDYL3X4.js";
@@ -1540,11 +1540,11 @@ var parser = new YargsParser({
   resolve: resolve2,
   // TODO: figure  out a  way to combine ESM and CJS coverage, such  that
   // we can exercise all the lines below:
-  require: (path16) => {
+  require: (path17) => {
     if (typeof __require !== "undefined") {
-      return __require(path16);
-    } else if (path16.match(/\.json$/)) {
-      return JSON.parse(readFileSync(path16, "utf8"));
+      return __require(path17);
+    } else if (path17.match(/\.json$/)) {
+      return JSON.parse(readFileSync(path17, "utf8"));
     } else {
       throw Error("only .json config files are supported in ESM");
     }
@@ -6329,27 +6329,27 @@ import { fileURLToPath as fileURLToPath2 } from "node:url";
 var __filename = fileURLToPath2(import.meta.url);
 var __dirname2 = dirname3(__filename);
 var EXAMPLES_PATH = join(__dirname2, "examples");
-async function pathExists(path16) {
+async function pathExists(path17) {
   try {
-    await access(path16);
+    await access(path17);
     return true;
   } catch {
     return false;
   }
 }
-async function createDirectory(path16) {
-  if (await pathExists(path16)) {
-    throw new Error(`Path already exists: ${path16}`);
+async function createDirectory(path17) {
+  if (await pathExists(path17)) {
+    throw new Error(`Path already exists: ${path17}`);
   }
-  await mkdir(path16, { recursive: true });
+  await mkdir(path17, { recursive: true });
 }
-async function copyDirectory(template, path16) {
-  await createDirectory(path16);
+async function copyDirectory(template, path17) {
+  await createDirectory(path17);
   const examplePath = join(EXAMPLES_PATH, template);
   const entries = await readdir(examplePath, { withFileTypes: true });
   for (const entry of entries) {
     const srcPath = join(examplePath, entry.name);
-    const destPath = join(path16, entry.name);
+    const destPath = join(path17, entry.name);
     await cp(srcPath, destPath, { recursive: true });
   }
 }
@@ -6630,7 +6630,7 @@ async function handleEnable3(args) {
   const result = enableSkill(settings, name);
   const feedback = renderSkillActionFeedback(
     result,
-    (label, path16) => `${import_chalk5.default.bold(label)} (${import_chalk5.default.dim(path16)})`
+    (label, path17) => `${import_chalk5.default.bold(label)} (${import_chalk5.default.dim(path17)})`
   );
   debugLogger.log(feedback);
 }
@@ -6660,7 +6660,7 @@ async function handleDisable3(args) {
   const result = disableSkill(settings, name, scope);
   const feedback = renderSkillActionFeedback(
     result,
-    (label, path16) => `${import_chalk6.default.bold(label)} (${import_chalk6.default.dim(path16)})`
+    (label, path17) => `${import_chalk6.default.bold(label)} (${import_chalk6.default.dim(path17)})`
   );
   debugLogger.log(feedback);
 }
@@ -7855,7 +7855,7 @@ async function loadSandboxConfig(settings, argv) {
   }
   const command2 = getSandboxCommand(sandboxValue);
   const packageJson = await getPackageJson(__dirname3);
-  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.60.0-nightly.20260908.g85aca163f" ?? customImage ?? packageJson?.config?.sandboxImageUri;
+  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.60.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
   const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
   return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
 }
@@ -8790,7 +8790,7 @@ import { createHash as createHash2 } from "node:crypto";
 import v8 from "node:v8";
 import os6 from "node:os";
 import dns from "node:dns";
-import * as path15 from "node:path";
+import * as path16 from "node:path";
 import * as fsPromises from "node:fs/promises";
 
 // packages/cli/src/utils/sandbox.ts
@@ -8802,7 +8802,7 @@ import {
   spawn as spawn2,
   spawnSync
 } from "node:child_process";
-import path8 from "node:path";
+import path9 from "node:path";
 import fs7 from "node:fs";
 import os3 from "node:os";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
@@ -8813,6 +8813,7 @@ import { randomBytes } from "node:crypto";
 var import_shell_quote = __toESM(require_shell_quote(), 1);
 import os2 from "node:os";
 import fs6 from "node:fs";
+import path8 from "node:path";
 import { readFile } from "node:fs/promises";
 var LOCAL_DEV_SANDBOX_IMAGE_NAME = "gemini-cli-sandbox";
 var SANDBOX_NETWORK_NAME = "gemini-cli-sandbox";
@@ -8827,6 +8828,58 @@ var BUILTIN_SEATBELT_PROFILES = [
   "strict-open",
   "strict-proxied"
 ];
+var SENSITIVE_SETTINGS_FILENAMES = /* @__PURE__ */ new Set([
+  "oauth_creds.json",
+  "google_accounts.json",
+  "gemini-credentials.json",
+  "mcp-oauth-tokens.json",
+  "a2a-oauth-tokens.json"
+]);
+function isCredentialOrSensitivePath(targetPath, rootDir) {
+  if (rootDir && path8.resolve(targetPath) === path8.resolve(rootDir)) {
+    return false;
+  }
+  const base = path8.basename(targetPath).toLowerCase();
+  if (SENSITIVE_SETTINGS_FILENAMES.has(base)) {
+    return true;
+  }
+  const isRootChild = rootDir ? path8.dirname(path8.resolve(targetPath)) === path8.resolve(rootDir) : true;
+  if (isRootChild && (base === "history" || base === "tmp" || base === "bin")) {
+    return true;
+  }
+  const hasSensitiveSuffix = (s) => {
+    if (base === s) return true;
+    if (base.endsWith(s)) {
+      const charBefore = base.charAt(base.length - s.length - 1);
+      return charBefore === "-" || charBefore === "_" || charBefore === ".";
+    }
+    return false;
+  };
+  if (base.endsWith(".credentials") || hasSensitiveSuffix("credentials") || hasSensitiveSuffix("credentials.json") || hasSensitiveSuffix("tokens.json") || hasSensitiveSuffix("token.json") || hasSensitiveSuffix("token") || hasSensitiveSuffix("creds.json") || hasSensitiveSuffix("cred.json") || base.endsWith(".env") || base.endsWith(".key") || base.endsWith(".pem") || base.endsWith(".p12") || hasSensitiveSuffix("key.json")) {
+    return true;
+  }
+  return false;
+}
+function prepareIsolatedSettingsDir(userSettingsDirOnHost) {
+  const baseTmpDir = os2.tmpdir() || "/tmp";
+  const isolatedDir = fs6.mkdtempSync(
+    path8.join(baseTmpDir, "gemini-sandbox-settings-")
+  );
+  fs6.chmodSync(isolatedDir, 448);
+  if (fs6.existsSync(userSettingsDirOnHost)) {
+    try {
+      fs6.cpSync(userSettingsDirOnHost, isolatedDir, {
+        recursive: true,
+        filter: (source) => !isCredentialOrSensitivePath(source, userSettingsDirOnHost)
+      });
+    } catch (err) {
+      debugLogger.warn(
+        `Failed to copy user settings to sandbox directory: ${err instanceof Error ? err.message : String(err)}`
+      );
+    }
+  }
+  return isolatedDir;
+}
 function getContainerPath(hostPath) {
   if (os2.platform() !== "win32") {
     return hostPath;
@@ -9729,7 +9782,18 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
   let stopProxy = void 0;
   let tempProfileFile = null;
   let sandboxTmpDir = null;
+  let isolatedSettingsDir = null;
   const cleanup = () => {
+    if (isolatedSettingsDir) {
+      const dirToDelete = isolatedSettingsDir;
+      isolatedSettingsDir = null;
+      try {
+        if (fs7.existsSync(dirToDelete)) {
+          fs7.rmSync(dirToDelete, { recursive: true, force: true });
+        }
+      } catch {
+      }
+    }
     if (sandboxTmpDir) {
       const dirToDelete = sandboxTmpDir;
       sandboxTmpDir = null;
@@ -9782,10 +9846,10 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
         new URL(`sandbox-macos-${profile}.sb`, import.meta.url)
       );
       if (!BUILTIN_SEATBELT_PROFILES.includes(profile)) {
-        const safeProfile = path8.basename(profile);
+        const safeProfile = path9.basename(profile);
         const fileName = `sandbox-macos-${safeProfile}.sb`;
-        const userProfileFile = path8.join(homedir(), GEMINI_DIR, fileName);
-        const projectProfileFile = path8.join(GEMINI_DIR, fileName);
+        const userProfileFile = path9.join(homedir(), GEMINI_DIR, fileName);
+        const projectProfileFile = path9.join(GEMINI_DIR, fileName);
         profileFile = fs7.existsSync(userProfileFile) ? userProfileFile : projectProfileFile;
       } else {
         if (!fs7.existsSync(profileFile)) {
@@ -9794,7 +9858,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
             try {
               const tempDir = fs7.realpathSync(os3.tmpdir());
               const rand = randomBytes(8).toString("hex");
-              tempProfileFile = path8.join(
+              tempProfileFile = path9.join(
                 tempDir,
                 `gemini-sandbox-macos-${profile}-${rand}.sb`
               );
@@ -9824,7 +9888,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
         ].join(" ");
         const hostTmpDir = fs7.realpathSync(os3.tmpdir());
         const resolvedTmpDir = fs7.mkdtempSync(
-          path8.join(hostTmpDir, "gemini-sandbox-")
+          path9.join(hostTmpDir, "gemini-sandbox-")
         );
         sandboxTmpDir = resolvedTmpDir;
         const args2 = [
@@ -9852,7 +9916,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
         }
         if (config.allowedPaths) {
           for (const hostPath of config.allowedPaths) {
-            if (hostPath && path8.isAbsolute(hostPath) && fs7.existsSync(hostPath)) {
+            if (hostPath && path9.isAbsolute(hostPath) && fs7.existsSync(hostPath)) {
               const realDir = fs7.realpathSync(hostPath);
               if (!includedDirs.includes(realDir) && realDir !== targetDir) {
                 includedDirs.push(realDir);
@@ -9958,7 +10022,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
     if (!command2) throw new FatalSandboxError("Sandbox command is required");
     debugLogger.log(`hopping into sandbox (command: ${command2}) ...`);
     const gcPath = process.argv[1] ? fs7.realpathSync(process.argv[1]) : "";
-    const projectSandboxDockerfile = path8.join(
+    const projectSandboxDockerfile = path9.join(
       GEMINI_DIR,
       "sandbox.Dockerfile"
     );
@@ -9967,7 +10031,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
     if (!image) throw new FatalSandboxError("Sandbox image is required");
     if (!/^[a-zA-Z0-9_.:/-]+$/.test(image))
       throw new FatalSandboxError("Invalid sandbox image name");
-    const workdir = path8.resolve(process.cwd());
+    const workdir = path9.resolve(process.cwd());
     const containerWorkdir = getContainerPath(workdir);
     if (process.env["BUILD_SANDBOX"]) {
       if (!gcPath.includes("gemini-cli/packages/")) {
@@ -9978,13 +10042,13 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
         debugLogger.log("building sandbox ...");
         const gcRoot = gcPath.split("/packages/")[0];
         let buildArgs = "";
-        const projectSandboxDockerfile2 = path8.join(
+        const projectSandboxDockerfile2 = path9.join(
           GEMINI_DIR,
           "sandbox.Dockerfile"
         );
         if (isCustomProjectSandbox) {
           debugLogger.log(`using ${projectSandboxDockerfile2} for sandbox`);
-          buildArgs += `-f ${path8.resolve(projectSandboxDockerfile2)} -i ${image}`;
+          buildArgs += `-f ${path9.resolve(projectSandboxDockerfile2)} -i ${image}`;
         }
         execSync(
           `cd ${gcRoot} && node scripts/build_sandbox.js -s ${buildArgs}`,
@@ -10028,18 +10092,16 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
     if (!fs7.existsSync(userHomeDirOnHost)) {
       fs7.mkdirSync(userHomeDirOnHost, { recursive: true });
     }
-    const userSettingsDirOnHost = path8.join(userHomeDirOnHost, GEMINI_DIR);
+    const userSettingsDirOnHost = path9.join(userHomeDirOnHost, GEMINI_DIR);
     if (!fs7.existsSync(userSettingsDirOnHost)) {
       fs7.mkdirSync(userSettingsDirOnHost, { recursive: true });
     }
-    args.push(
-      "--volume",
-      `${userSettingsDirOnHost}:${userSettingsDirInSandbox}`
-    );
+    isolatedSettingsDir = prepareIsolatedSettingsDir(userSettingsDirOnHost);
+    args.push("--volume", `${isolatedSettingsDir}:${userSettingsDirInSandbox}`);
     if (userSettingsDirInSandbox !== getContainerPath(userSettingsDirOnHost)) {
       args.push(
         "--volume",
-        `${userSettingsDirOnHost}:${getContainerPath(userSettingsDirOnHost)}`
+        `${isolatedSettingsDir}:${getContainerPath(userSettingsDirOnHost)}`
       );
     }
     args.push("--volume", `${os3.tmpdir()}:${getContainerPath(os3.tmpdir())}`);
@@ -10049,7 +10111,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
         `${userHomeDirOnHost}:${getContainerPath(userHomeDirOnHost)}`
       );
     }
-    const gcloudConfigDir = path8.join(homedir(), ".config", "gcloud");
+    const gcloudConfigDir = path9.join(homedir(), ".config", "gcloud");
     if (fs7.existsSync(gcloudConfigDir)) {
       args.push(
         "--volume",
@@ -10073,7 +10135,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
           to = to || from;
           opts = opts || "ro";
           mount = `${from}:${to}:${opts}`;
-          if (!path8.isAbsolute(from)) {
+          if (!path9.isAbsolute(from)) {
             throw new FatalSandboxError(
               `Path '${from}' listed in SANDBOX_MOUNTS must be absolute`
             );
@@ -10090,7 +10152,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
     }
     if (config.allowedPaths) {
       for (const hostPath of config.allowedPaths) {
-        if (hostPath && path8.isAbsolute(hostPath) && fs7.existsSync(hostPath)) {
+        if (hostPath && path9.isAbsolute(hostPath) && fs7.existsSync(hostPath)) {
           const containerPath = getContainerPath(hostPath);
           debugLogger.log(
             `Config allowedPath: ${hostPath} -> ${containerPath} (ro)`
@@ -10210,7 +10272,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
       }
     }
     if (process.env["VIRTUAL_ENV"]?.toLowerCase().startsWith(workdir.toLowerCase())) {
-      const sandboxVenvPath = path8.resolve(GEMINI_DIR, "sandbox.venv");
+      const sandboxVenvPath = path9.resolve(GEMINI_DIR, "sandbox.venv");
       if (!fs7.existsSync(sandboxVenvPath)) {
         fs7.mkdirSync(sandboxVenvPath, { recursive: true });
       }
@@ -10247,7 +10309,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
     }
     args.push("--env", `SANDBOX=${containerName}`);
     if (command2 === "podman") {
-      const emptyAuthFilePath = path8.join(os3.tmpdir(), "empty_auth.json");
+      const emptyAuthFilePath = path9.join(os3.tmpdir(), "empty_auth.json");
       fs7.writeFileSync(emptyAuthFilePath, "{}", "utf-8");
       args.push("--authfile", emptyAuthFilePath);
     }
@@ -10376,7 +10438,7 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
 }
 async function start_lxc_sandbox(config, nodeArgs = [], cliArgs = []) {
   const containerName = config.image || "gemini-sandbox";
-  const workdir = path8.resolve(process.cwd());
+  const workdir = path9.resolve(process.cwd());
   debugLogger.log(
     `starting lxc sandbox (container: ${containerName}, workdir: ${workdir}) ...`
   );
@@ -10457,7 +10519,7 @@ async function start_lxc_sandbox(config, nodeArgs = [], cliArgs = []) {
     }
     if (config.allowedPaths) {
       for (const hostPath of config.allowedPaths) {
-        if (hostPath && path8.isAbsolute(hostPath) && fs7.existsSync(hostPath)) {
+        if (hostPath && path9.isAbsolute(hostPath) && fs7.existsSync(hostPath)) {
           const allowedDeviceName = `gemini-allowed-${randomBytes(4).toString(
             "hex"
           )}`;
@@ -10703,7 +10765,7 @@ async function getStartupWarnings() {
 // packages/cli/src/utils/userStartupWarnings.ts
 import fs9 from "node:fs/promises";
 import { homedir as osHomedir } from "node:os";
-import path9 from "node:path";
+import path10 from "node:path";
 import process4 from "node:process";
 var homeDirectoryCheck = {
   id: "home-directory",
@@ -10717,7 +10779,7 @@ var homeDirectoryCheck = {
         fs9.realpath(workspaceRoot),
         fs9.realpath(osHomedir())
       ]);
-      if (path9.resolve(workspaceRealPath) === path9.resolve(homeRealPath)) {
+      if (path10.resolve(workspaceRealPath) === path10.resolve(homeRealPath)) {
         if (isFolderTrustEnabled(settings) && isWorkspaceTrusted(settings).isTrusted) {
           return null;
         }
@@ -10736,7 +10798,7 @@ var rootDirectoryCheck = {
     try {
       const workspaceRealPath = await fs9.realpath(workspaceRoot);
       const errorMessage = "Warning: You are running Gemini CLI in the root directory. Your entire folder structure will be used for context. It is strongly recommended to run in a project-specific directory.";
-      if (path9.dirname(workspaceRealPath) === workspaceRealPath) {
+      if (path10.dirname(workspaceRealPath) === workspaceRealPath) {
         return errorMessage;
       }
       return null;
@@ -11134,7 +11196,7 @@ async function runNonInteractive({
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-HJR727UG.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-J7SM2WQQ.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -11644,7 +11706,7 @@ async function runNonInteractive2(params) {
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-HJR727UG.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-J7SM2WQQ.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -13635,7 +13697,7 @@ import { randomUUID as randomUUID2 } from "node:crypto";
 
 // packages/cli/src/acp/acpSession.ts
 import * as fs12 from "node:fs/promises";
-import * as path12 from "node:path";
+import * as path13 from "node:path";
 import { randomUUID } from "node:crypto";
 
 // packages/cli/src/acp/commands/commandRegistry.ts
@@ -14077,7 +14139,7 @@ var UpdateExtensionCommand = class {
 
 // packages/cli/src/acp/commands/init.ts
 import * as fs10 from "node:fs";
-import * as path10 from "node:path";
+import * as path11 from "node:path";
 var InitCommand = class {
   name = "init";
   description = "Analyzes the project and creates a tailored GEMINI.md file";
@@ -14087,7 +14149,7 @@ var InitCommand = class {
     if (!targetDir) {
       throw new Error("Command requires a workspace.");
     }
-    const geminiMdPath = path10.join(targetDir, "GEMINI.md");
+    const geminiMdPath = path11.join(targetDir, "GEMINI.md");
     const result = performInit(fs10.existsSync(geminiMdPath));
     switch (result.type) {
       case "message":
@@ -14120,7 +14182,7 @@ ${result.content}`
 
 // packages/cli/src/acp/commands/restore.ts
 import * as fs11 from "node:fs/promises";
-import * as path11 from "node:path";
+import * as path12 from "node:path";
 var RestoreCommand = class {
   name = "restore";
   description = "Restore to a previous checkpoint, or list available checkpoints to restore. This will reset the conversation and file history to the state it was in when the checkpoint was created";
@@ -14142,7 +14204,7 @@ var RestoreCommand = class {
       }
       const selectedFile = argsStr.endsWith(".json") ? argsStr : `${argsStr}.json`;
       const checkpointDir = config.storage.getProjectTempCheckpointsDir();
-      const filePath = path11.join(checkpointDir, selectedFile);
+      const filePath = path12.join(checkpointDir, selectedFile);
       let data;
       try {
         data = await fs11.readFile(filePath, "utf-8");
@@ -14216,7 +14278,7 @@ var ListCheckpointsCommand = class {
       }
       const checkpointFiles = /* @__PURE__ */ new Map();
       for (const file of jsonFiles) {
-        const filePath = path11.join(checkpointDir, file);
+        const filePath = path12.join(checkpointDir, file);
         const data = await fs11.readFile(filePath, "utf-8");
         checkpointFiles.set(file, data);
       }
@@ -15478,7 +15540,7 @@ ${event.value.description}`;
       } else if (result.status === "invalid") {
         continue;
       } else {
-        absolutePath = path12.resolve(
+        absolutePath = path13.resolve(
           this.context.config.getTargetDir(),
           pathName
         );
@@ -15552,7 +15614,7 @@ ${event.value.description}`;
       }
       try {
         if (!validationError) {
-          if ((path12.isAbsolute(pathName) || !isWithinRoot(
+          if ((path13.isAbsolute(pathName) || !isWithinRoot(
             absolutePath,
             this.context.config.getTargetDir()
           )) && !readDirectly) {
@@ -15656,7 +15718,7 @@ ${contentToPush}`;
                 const lines = globResult.llmContent.split("\n");
                 if (lines.length > 1 && lines[1]) {
                   const firstMatchAbsolute = lines[1].trim();
-                  currentPathSpec = path12.relative(
+                  currentPathSpec = path13.relative(
                     this.context.config.getTargetDir(),
                     firstMatchAbsolute
                   );
@@ -15874,7 +15936,7 @@ Content from @${contextPart.uri}:
 
 // packages/cli/src/acp/acpFileSystemService.ts
 import os5 from "node:os";
-import path13 from "node:path";
+import path14 from "node:path";
 var AcpFileSystemService = class {
   constructor(connection, sessionId, capabilities, fallback, root) {
     this.connection = connection;
@@ -15883,7 +15945,7 @@ var AcpFileSystemService = class {
     this.fallback = fallback;
     this.root = root;
   }
-  geminiDir = path13.join(os5.homedir(), ".gemini");
+  geminiDir = path14.join(os5.homedir(), ".gemini");
   shouldUseFallback(filePath) {
     return !isWithinRoot(filePath, this.root) || isWithinRoot(filePath, this.geminiDir);
   }
@@ -16519,7 +16581,7 @@ async function setupTerminalAndTheme(config, settings) {
 
 // packages/cli/src/utils/logCleanup.ts
 import { promises as fs13 } from "node:fs";
-import * as path14 from "node:path";
+import * as path15 from "node:path";
 var RETENTION_PERIOD_MS = 7 * 24 * 60 * 60 * 1e3;
 async function cleanupBackgroundLogs(debugMode = false) {
   try {
@@ -16534,7 +16596,7 @@ async function cleanupBackgroundLogs(debugMode = false) {
     let deletedCount = 0;
     for (const entry of entries) {
       if (entry.isFile() && entry.name.endsWith(".log")) {
-        const filePath = path14.join(logDir, entry.name);
+        const filePath = path15.join(logDir, entry.name);
         try {
           const stats = await fs13.stat(filePath);
           if (now - stats.mtime.getTime() > RETENTION_PERIOD_MS) {
@@ -16785,8 +16847,8 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
       sessionData.projectHash = getProjectHash(storage.getProjectRoot());
       sessionData.startTime = isoNow;
       sessionData.lastUpdated = isoNow;
-      const chatsDir = path15.join(storage.getProjectTempDir(), "chats");
-      const newSessionPath = path15.join(
+      const chatsDir = path16.join(storage.getProjectTempDir(), "chats");
+      const newSessionPath = path16.join(
         chatsDir,
         `session-${now}-${newSessionId.slice(0, 8)}.jsonl`
       );
@@ -16854,7 +16916,7 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
   }
 }
 async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
-  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-SWGF5F7W.js");
+  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-COQJBPC2.js");
   await doStartUI(
     config,
     settings,
@@ -17063,7 +17125,7 @@ ${finalArgs[promptIndex + 1]}`;
     await config.storage.initialize();
     adminControlsListner.setConfig(config);
     if (config.isInteractive() && settings.merged.general.devtools) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-HJR727UG.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-J7SM2WQQ.js");
       setupInitialActivityLogger(config);
     }
     registerTelemetryConfig(config);
@@ -17122,7 +17184,7 @@ ${finalArgs[promptIndex + 1]}`;
     const initAppHandle = startupProfiler.start("initialize_app");
     const initializationResult = await initializeApp(config, settings);
     initAppHandle?.end();
-    import("./liteRtServerManager-Y7KT37QX.js").then(({ LiteRtServerManager }) => {
+    import("./liteRtServerManager-PEAZFGHW.js").then(({ LiteRtServerManager }) => {
       const mergedGemma = settings.merged.experimental?.gemmaModelRouter;
       if (!mergedGemma) return;
       const userGemma = settings.forScope("User" /* User */).settings.experimental?.gemmaModelRouter;