@google/gemini-cli 0.62.0-nightly.20260925.gbedef96ef → 0.62.0

package/bundle/{core-PLITVDXB.js → core-4NPF436I.js}

@@ -314,7 +314,6 @@ import {
   MAX_FILE_SIZE_MB,
   MAX_HISTORY_MESSAGES,
   MAX_LINE_LENGTH_TEXT_FILE,
-  MAX_STORED_TOOL_OUTPUT_BYTES,
   MAX_TOKENS_EXCEEDED_SUGGESTION,
   MAX_TOOL_OUTPUT_SIZE,
   MCPDiscoveryState,
@@ -1094,9 +1093,7 @@ import {
   translateEvent,
   trimTrailingSpacesAndDots,
   truncateFastAckInput,
-  truncateFunctionResponsePart,
   truncateString,
-  truncateToolOutput,
   uiTelemetryService,
   unescapePath,
   updateGlobalFetchTimeouts,
@@ -1115,7 +1112,7 @@ import {
   wrapUntrusted,
   writeToStderr,
   writeToStdout
-} from "./chunk-M4DUGOFW.js";
+} from "./chunk-72GZSNV7.js";
 import "./chunk-664ZODQF.js";
 import {
   SpanStatusCode,
@@ -1438,7 +1435,6 @@ export {
   MAX_FILE_SIZE_MB,
   MAX_HISTORY_MESSAGES,
   MAX_LINE_LENGTH_TEXT_FILE,
-  MAX_STORED_TOOL_OUTPUT_BYTES,
   MAX_TOKENS_EXCEEDED_SUGGESTION,
   MAX_TOOL_OUTPUT_SIZE,
   MCPDiscoveryState,
@@ -2220,9 +2216,7 @@ export {
   translateEvent,
   trimTrailingSpacesAndDots,
   truncateFastAckInput,
-  truncateFunctionResponsePart,
   truncateString,
-  truncateToolOutput,
   uiTelemetryService,
   unescapePath,
   updateGlobalFetchTimeouts,

package/bundle/{dist-5EPN333M.js → core-BXNHRQQE.js}

@@ -314,7 +314,6 @@ import {
   MAX_FILE_SIZE_MB,
   MAX_HISTORY_MESSAGES,
   MAX_LINE_LENGTH_TEXT_FILE,
-  MAX_STORED_TOOL_OUTPUT_BYTES,
   MAX_TOKENS_EXCEEDED_SUGGESTION,
   MAX_TOOL_OUTPUT_SIZE,
   MCPDiscoveryState,
@@ -1094,9 +1093,7 @@ import {
   translateEvent,
   trimTrailingSpacesAndDots,
   truncateFastAckInput,
-  truncateFunctionResponsePart,
   truncateString,
-  truncateToolOutput,
   uiTelemetryService,
   unescapePath,
   updateGlobalFetchTimeouts,
@@ -1115,7 +1112,7 @@ import {
   wrapUntrusted,
   writeToStderr,
   writeToStdout
-} from "./chunk-H3SOW6BD.js";
+} from "./chunk-2DHAEQE2.js";
 import "./chunk-664ZODQF.js";
 import {
   SpanStatusCode,
@@ -1438,7 +1435,6 @@ export {
   MAX_FILE_SIZE_MB,
   MAX_HISTORY_MESSAGES,
   MAX_LINE_LENGTH_TEXT_FILE,
-  MAX_STORED_TOOL_OUTPUT_BYTES,
   MAX_TOKENS_EXCEEDED_SUGGESTION,
   MAX_TOOL_OUTPUT_SIZE,
   MCPDiscoveryState,
@@ -2220,9 +2216,7 @@ export {
   translateEvent,
   trimTrailingSpacesAndDots,
   truncateFastAckInput,
-  truncateFunctionResponsePart,
   truncateString,
-  truncateToolOutput,
   uiTelemetryService,
   unescapePath,
   updateGlobalFetchTimeouts,

package/bundle/{devtoolsService-BUSRWWOS.js → devtoolsService-2TDRPBCW.js}

@@ -3,7 +3,7 @@ import {
   CoreEvent,
   coreEvents,
   debugLogger
-} from "./chunk-TYD74VXO.js";
+} from "./chunk-MLY4WQFO.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";
@@ -4325,7 +4325,7 @@ async function toggleDevToolsPanel(config, isOpen, toggle, setOpen) {
     return;
   }
   try {
-    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./dist-SYCD6I6K.js");
+    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./dist-6S53KFXU.js");
     const url = await startDevToolsServer(config);
     if (shouldLaunchBrowser()) {
       try {

package/bundle/{devtoolsService-4D2QFII3.js → devtoolsService-47DUPCKM.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   coreEvents,
   debugLogger
-} from "./chunk-M4DUGOFW.js";
+} from "./chunk-2DHAEQE2.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";
@@ -4324,7 +4324,7 @@ async function toggleDevToolsPanel(config, isOpen, toggle, setOpen) {
     return;
   }
   try {
-    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./core-PLITVDXB.js");
+    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./core-BXNHRQQE.js");
     const url = await startDevToolsServer(config);
     if (shouldLaunchBrowser()) {
       try {

package/bundle/{devtoolsService-P7HLE6U4.js → devtoolsService-BIYZH2ME.js}

@@ -1,9 +1,8 @@
 const require = (await import('node:module')).createRequire(import.meta.url); const __chunk_filename = (await import('node:url')).fileURLToPath(import.meta.url); const __chunk_dirname = (await import('node:path')).dirname(__chunk_filename);
 import {
-  CoreEvent,
   coreEvents,
   debugLogger
-} from "./chunk-H3SOW6BD.js";
+} from "./chunk-72GZSNV7.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";
@@ -4174,7 +4173,7 @@ var bridgeAttached = false;
 function bridgeCoreEvents(capture) {
   if (bridgeAttached) return;
   bridgeAttached = true;
-  coreEvents.on(CoreEvent.ConsoleLog, (payload) => {
+  coreEvents.on("console-log" /* ConsoleLog */, (payload) => {
     capture.logConsole(payload);
   });
 }
@@ -4325,7 +4324,7 @@ async function toggleDevToolsPanel(config, isOpen, toggle, setOpen) {
     return;
   }
   try {
-    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./dist-5EPN333M.js");
+    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./core-4NPF436I.js");
     const url = await startDevToolsServer(config);
     if (shouldLaunchBrowser()) {
       try {

package/bundle/{dist-EBAUDX6K.js → dist-6S53KFXU.js}

@@ -314,7 +314,6 @@ import {
   MAX_FILE_SIZE_MB,
   MAX_HISTORY_MESSAGES,
   MAX_LINE_LENGTH_TEXT_FILE,
-  MAX_STORED_TOOL_OUTPUT_BYTES,
   MAX_TOKENS_EXCEEDED_SUGGESTION,
   MAX_TOOL_OUTPUT_SIZE,
   MCPDiscoveryState,
@@ -1094,9 +1093,7 @@ import {
   translateEvent,
   trimTrailingSpacesAndDots,
   truncateFastAckInput,
-  truncateFunctionResponsePart,
   truncateString,
-  truncateToolOutput,
   uiTelemetryService,
   unescapePath,
   updateGlobalFetchTimeouts,
@@ -1115,7 +1112,7 @@ import {
   wrapUntrusted,
   writeToStderr,
   writeToStdout
-} from "./chunk-X4QSELXY.js";
+} from "./chunk-MLY4WQFO.js";
 import "./chunk-664ZODQF.js";
 import {
   SpanStatusCode,
@@ -1438,7 +1435,6 @@ export {
   MAX_FILE_SIZE_MB,
   MAX_HISTORY_MESSAGES,
   MAX_LINE_LENGTH_TEXT_FILE,
-  MAX_STORED_TOOL_OUTPUT_BYTES,
   MAX_TOKENS_EXCEEDED_SUGGESTION,
   MAX_TOOL_OUTPUT_SIZE,
   MCPDiscoveryState,
@@ -2220,9 +2216,7 @@ export {
   translateEvent,
   trimTrailingSpacesAndDots,
   truncateFastAckInput,
-  truncateFunctionResponsePart,
   truncateString,
-  truncateToolOutput,
   uiTelemetryService,
   unescapePath,
   updateGlobalFetchTimeouts,

package/bundle/docs/changelogs/index.md

@@ -18,22 +18,6 @@ on GitHub.
 | [Preview](preview.md) | Experimental features ready for early feedback. |
 | [Stable](latest.md)   | Stable, recommended for general use.            |
 
-## Announcements: v0.61.0 - 2026-09-23
-
-- **Core Security Hardening:** Prevented indirect prompt injection
-  vulnerabilities via build file modifications and untrusted flags, while
-  hardening filesystem boundaries and isolating runtime state
-  ([#29250](https://github.com/google-gemini/gemini-cli/pull/29250) by
-  @villahernandez-coder,
-  [#29214](https://github.com/google-gemini/gemini-cli/pull/29214) by
-  @diegogodinezr).
-- **Agent Loop and Model Stability:** Ensured AgentLoopContext state
-  preservation across spread operations and preserved explicit versioned Flash
-  model IDs ([#29335](https://github.com/google-gemini/gemini-cli/pull/29335) by
-  @diegogodinezr,
-  [#29252](https://github.com/google-gemini/gemini-cli/pull/29252) by
-  @SandyTao520).
-
 ## Announcements: v0.60.0 - 2026-09-15
 
 - **Extension & Tool Safety Hardening:** Prompt for user consent on environment

package/bundle/docs/changelogs/latest.md

@@ -1,6 +1,6 @@
-# Latest stable release: v0.61.0
+# Latest stable release: v0.60.0
 
-Released: September 23, 2026
+Released: September 15, 2026
 
 For most users, our latest stable release is the recommended release. Install
 the latest stable version with:
@@ -11,41 +11,62 @@ npm install -g @google/gemini-cli
 
 ## Highlights
 
-- **Prompt Injection Defense:** Enhanced security by preventing indirect prompt
-  injection attacks through build file modifications and untrusted command
-  flags.
-- **Sandbox & State Hardening:** Hardened filesystem boundaries and isolated
-  internal runtime state to ensure more secure execution environments.
-- **Agent Loop Robustness:** Guaranteed that internal state properties within
-  `AgentLoopContext` are fully preserved during object spread operations,
-  improving agent reliability.
-- **Versioned Model Preserves:** Ensured explicit versioned Flash model IDs are
-  correctly preserved and used directly during routing and execution.
+- **Extension Consent & Isolation:** Introduced explicit prompting for user
+  consent on environment changes requested by extensions, along with
+  sanitization of runtime-altering environment variables to ensure secure
+  execution environments.
+- **Sandbox & Directory Hardening:** Isolated the settings directory and
+  temporary directories within sandbox containers, including specific path
+  isolation enhancements for the macOS Seatbelt sandbox.
+- **Robust Boundary & Path Resolution:** Hardened workspace boundary validation,
+  symlink resolution, and NTFS 8.3 short name (SFN) path mitigation across
+  command safety and file discovery utilities.
+- **Enhanced API & Connection Security:** Implemented strict RFC 9207 issuer
+  identification in the Model Context Protocol (MCP) OAuth flow, along with
+  improved destination validation and connection routing inside web fetch
+  utilities.
 
 ## What's Changed
 
-- Changelog for v0.60.0-preview.0 by @gemini-cli-robot in
-  [#29251](https://github.com/google-gemini/gemini-cli/pull/29251)
-- chore(release): bump version to 0.61.0-nightly.20260908.gc647533d6 by
+- fix(core): improve destination validation and connection routing in web fetch
+  utilities by @diegogodinezr in
+  [#29120](https://github.com/google-gemini/gemini-cli/pull/29120)
+- fix(core): enforce RFC 9207 issuer identification in MCP OAuth flow by
+  @jvargassanchez-dot in
+  [#29117](https://github.com/google-gemini/gemini-cli/pull/29117)
+- chore(release): bump version to 0.60.0-nightly.20260901.g0bd1d4397 by
   @gemini-cli-robot in
-  [#29254](https://github.com/google-gemini/gemini-cli/pull/29254)
-- Changelog for v0.59.0 by @gemini-cli-robot in
-  [#29253](https://github.com/google-gemini/gemini-cli/pull/29253)
-- fix(core): preserve explicit versioned Flash model IDs by @SandyTao520 in
-  [#29252](https://github.com/google-gemini/gemini-cli/pull/29252)
-- fix(core): prevent indirect prompt injection via build file modifications and
-  untrusted flags by @villahernandez-coder in
-  [#29250](https://github.com/google-gemini/gemini-cli/pull/29250)
-- fix(sandbox): harden filesystem boundaries and isolate runtime state by
-  @diegogodinezr in
-  [#29214](https://github.com/google-gemini/gemini-cli/pull/29214)
-- fix(core): ensure AgentLoopContext properties are preserved across object
-  spread by @diegogodinezr in
-  [#29335](https://github.com/google-gemini/gemini-cli/pull/29335)
-- fix(patch): cherry-pick 62364cb to release/v0.61.0-preview.0-pr-29443 to patch
-  version v0.61.0-preview.0 and create version 0.61.0-preview.1 by
-  @gemini-cli-robot in
-  [#29455](https://github.com/google-gemini/gemini-cli/pull/29455)
+  [#29162](https://github.com/google-gemini/gemini-cli/pull/29162)
+- Changelog for v0.58.0 by @gemini-cli-robot in
+  [#29161](https://github.com/google-gemini/gemini-cli/pull/29161)
+- fix(cli): isolate temporary directory for macOS Seatbelt sandbox by
+  @jvargassanchez-dot in
+  [#29171](https://github.com/google-gemini/gemini-cli/pull/29171)
+- feat(extensions): harden path resolution and boundary validation in extension
+  loader by @diegogodinezr in
+  [#29169](https://github.com/google-gemini/gemini-cli/pull/29169)
+- Changelog for v0.59.0-preview.0 by @gemini-cli-robot in
+  [#29159](https://github.com/google-gemini/gemini-cli/pull/29159)
+- fix(core): sanitize and remove hardcoded Google CrUX API key in
+  chrome-devtools-mcp by @amelidev in
+  [#29158](https://github.com/google-gemini/gemini-cli/pull/29158)
+- fix(extensions): prompt for consent on environment changes and sanitize
+  runtime-altering environment variables by @amelidev in
+  [#28863](https://github.com/google-gemini/gemini-cli/pull/28863)
+- fix(core): enhance workspace path boundary checks and symlink resolution in
+  command safety and file discovery by @jesussamuel-byte in
+  [#29170](https://github.com/google-gemini/gemini-cli/pull/29170)
+- fix(config): enforce strict permission and ownership checks on system-wide
+  configuration paths by @jesussamuel-byte in
+  [#29115](https://github.com/google-gemini/gemini-cli/pull/29115)
+- fix(core): mitigate NTFS 8.3 short name (SFN) path by @urielefrenvirtusa in
+  [#29116](https://github.com/google-gemini/gemini-cli/pull/29116)
+- fix(cli): isolate settings directory in sandbox containers by
+  @jvargassanchez-dot in
+  [#29216](https://github.com/google-gemini/gemini-cli/pull/29216)
+- fix(core): enforce envelope metadata provenance for untrusted tool outputs by
+  @luisfelipe-alt in
+  [#29215](https://github.com/google-gemini/gemini-cli/pull/29215)
 
 **Full Changelog**:
-https://github.com/google-gemini/gemini-cli/compare/v0.60.0...v0.61.0
+https://github.com/google-gemini/gemini-cli/compare/v0.59.0...v0.60.0

package/bundle/docs/changelogs/preview.md

@@ -1,6 +1,6 @@
-# Preview release: v0.61.0-preview.1
+# Preview release: v0.61.0-preview.0
 
-Released: September 23, 2026
+Released: September 15, 2026
 
 Our preview release includes the latest, new, and experimental features. This
 release may not be as stable as our [latest weekly release](latest.md).
@@ -26,10 +26,6 @@ npm install -g @google/gemini-cli@preview
 
 ## What's Changed
 
-- fix(patch): cherry-pick 62364cb to release/v0.61.0-preview.0-pr-29443 to patch
-  version v0.61.0-preview.0 and create version 0.61.0-preview.1 by
-  @gemini-cli-robot in
-  [#29455](https://github.com/google-gemini/gemini-cli/pull/29455)
 - Changelog for v0.60.0-preview.0 by @gemini-cli-robot in
   [#29251](https://github.com/google-gemini/gemini-cli/pull/29251)
 - chore(release): bump version to 0.61.0-nightly.20260908.gc647533d6 by
@@ -50,4 +46,4 @@ npm install -g @google/gemini-cli@preview
   [#29335](https://github.com/google-gemini/gemini-cli/pull/29335)
 
 **Full Changelog**:
-https://github.com/google-gemini/gemini-cli/compare/v0.60.0-preview.0...v0.61.0-preview.1
+https://github.com/google-gemini/gemini-cli/compare/v0.60.0-preview.0...v0.61.0-preview.0

package/bundle/{gemini-LJOD63ZZ.js → gemini-CGCV5XPN.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-QPGOBA6C.js";
+} from "./chunk-4GWDIIAP.js";
 import {
   BuiltinCommandLoader,
   CommandService,
@@ -46,11 +46,11 @@ import {
   updateExtension,
   validateAuthMethod,
   validateContextFilePath
-} from "./chunk-QE6SEL5N.js";
+} from "./chunk-ZRKGL4ZL.js";
 import {
   exitCli,
   require_source
-} from "./chunk-LUG3MZLD.js";
+} from "./chunk-L5NOFB6M.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -88,11 +88,11 @@ import {
   resolveGemmaConfig,
   saveModelChange,
   stripAnsi
-} from "./chunk-AKMRRSMV.js";
+} from "./chunk-RWN52KQV.js";
 import {
   RELAUNCH_EXIT_CODE
-} from "./chunk-YIGDOMHJ.js";
-import "./chunk-YZ6TLILF.js";
+} from "./chunk-GCL7X4WZ.js";
+import "./chunk-T4GE6V5B.js";
 import {
   cleanupCheckpoints,
   registerCleanup,
@@ -101,7 +101,7 @@ import {
   runExitCleanup,
   runSyncCleanup,
   setupSignalHandlers
-} from "./chunk-HBDPUOQW.js";
+} from "./chunk-7ETVC4KO.js";
 import {
   ASK_USER_TOOL_NAME,
   AuthType,
@@ -239,7 +239,7 @@ import {
   updatePolicy,
   writeToStderr,
   writeToStdout
-} from "./chunk-M4DUGOFW.js";
+} from "./chunk-72GZSNV7.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";
@@ -7839,7 +7839,7 @@ async function loadSandboxConfig(settings, argv) {
   }
   const command2 = getSandboxCommand(sandboxValue);
   const packageJson = await getPackageJson(__dirname3);
-  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.62.0-nightly.20260918.g9450ade79" ?? customImage ?? packageJson?.config?.sandboxImageUri;
+  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.62.0-preview.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
   const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
   return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
 }
@@ -11510,7 +11510,7 @@ async function runNonInteractive({
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-4D2QFII3.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-BIYZH2ME.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -12020,7 +12020,7 @@ async function runNonInteractive2(params) {
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-4D2QFII3.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-BIYZH2ME.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -17331,7 +17331,7 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
   }
 }
 async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
-  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-GCRH54ZM.js");
+  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-HUDGOV74.js");
   await doStartUI(
     config,
     settings,
@@ -17540,7 +17540,7 @@ ${finalArgs[promptIndex + 1]}`;
     await config.storage.initialize();
     adminControlsListner.setConfig(config);
     if (config.isInteractive() && settings.merged.general.devtools) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-4D2QFII3.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-BIYZH2ME.js");
       setupInitialActivityLogger(config);
     }
     registerTelemetryConfig(config);
@@ -17599,7 +17599,7 @@ ${finalArgs[promptIndex + 1]}`;
     const initAppHandle = startupProfiler.start("initialize_app");
     const initializationResult = await initializeApp(config, settings);
     initAppHandle?.end();
-    import("./liteRtServerManager-34QJA5UR.js").then(({ LiteRtServerManager }) => {
+    import("./liteRtServerManager-WXCXUPDQ.js").then(({ LiteRtServerManager }) => {
       const mergedGemma = settings.merged.experimental?.gemmaModelRouter;
       if (!mergedGemma) return;
       const userGemma = settings.forScope("User" /* User */).settings.experimental?.gemmaModelRouter;

package/bundle/{gemini-E77OMSLO.js → gemini-J6X2T2ZI.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-TFNEL7HO.js";
+} from "./chunk-OXDVMGJ3.js";
 import {
   BuiltinCommandLoader,
   CommandService,
@@ -46,11 +46,11 @@ import {
   updateExtension,
   validateAuthMethod,
   validateContextFilePath
-} from "./chunk-DOFIJ3YI.js";
+} from "./chunk-V43EQ7B6.js";
 import {
   exitCli,
   require_source
-} from "./chunk-OF7DGARD.js";
+} from "./chunk-YOPBONYF.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -88,11 +88,11 @@ import {
   resolveGemmaConfig,
   saveModelChange,
   stripAnsi
-} from "./chunk-GN6LRBHR.js";
+} from "./chunk-3VMO3WD7.js";
 import {
   RELAUNCH_EXIT_CODE
-} from "./chunk-4JZM4J6T.js";
-import "./chunk-UFG6C5KE.js";
+} from "./chunk-DML6Y2ZP.js";
+import "./chunk-DP2XO3WB.js";
 import {
   cleanupCheckpoints,
   registerCleanup,
@@ -101,7 +101,7 @@ import {
   runExitCleanup,
   runSyncCleanup,
   setupSignalHandlers
-} from "./chunk-NZIIZAV3.js";
+} from "./chunk-TYBBTU4O.js";
 import {
   ASK_USER_TOOL_NAME,
   ApprovalMode,
@@ -255,7 +255,7 @@ import {
   updatePolicy,
   writeToStderr,
   writeToStdout
-} from "./chunk-X4QSELXY.js";
+} from "./chunk-MLY4WQFO.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";
@@ -7855,7 +7855,7 @@ async function loadSandboxConfig(settings, argv) {
   }
   const command2 = getSandboxCommand(sandboxValue);
   const packageJson = await getPackageJson(__dirname3);
-  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.62.0-nightly.20260925.gbedef96ef" ?? customImage ?? packageJson?.config?.sandboxImageUri;
+  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.62.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
   const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
   return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
 }
@@ -11526,7 +11526,7 @@ async function runNonInteractive({
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-YD7ORPBB.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-2TDRPBCW.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -12036,7 +12036,7 @@ async function runNonInteractive2(params) {
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-YD7ORPBB.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-2TDRPBCW.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -17347,7 +17347,7 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
   }
 }
 async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
-  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-XDQJSJNE.js");
+  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-IDDEAOD5.js");
   await doStartUI(
     config,
     settings,
@@ -17556,7 +17556,7 @@ ${finalArgs[promptIndex + 1]}`;
     await config.storage.initialize();
     adminControlsListner.setConfig(config);
     if (config.isInteractive() && settings.merged.general.devtools) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-YD7ORPBB.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-2TDRPBCW.js");
       setupInitialActivityLogger(config);
     }
     registerTelemetryConfig(config);
@@ -17615,7 +17615,7 @@ ${finalArgs[promptIndex + 1]}`;
     const initAppHandle = startupProfiler.start("initialize_app");
     const initializationResult = await initializeApp(config, settings);
     initAppHandle?.end();
-    import("./liteRtServerManager-PJMI7L5V.js").then(({ LiteRtServerManager }) => {
+    import("./liteRtServerManager-QE27SHMQ.js").then(({ LiteRtServerManager }) => {
       const mergedGemma = settings.merged.experimental?.gemmaModelRouter;
       if (!mergedGemma) return;
       const userGemma = settings.forScope("User" /* User */).settings.experimental?.gemmaModelRouter;