@google/gemini-cli 0.66.0-nightly.20261019.ged96faedf → 0.66.0-preview.0

package/bundle/{devtoolsService-FBTSVQ57.js → devtoolsService-KQTX22AU.js}

@@ -1,9 +1,8 @@
 const require = (await import('node:module')).createRequire(import.meta.url); const __chunk_filename = (await import('node:url')).fileURLToPath(import.meta.url); const __chunk_dirname = (await import('node:path')).dirname(__chunk_filename);
 import {
-  CoreEvent,
   coreEvents,
   debugLogger
-} from "./chunk-ZFQ347ZN.js";
+} from "./chunk-D6WVFS5S.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";
@@ -3521,6 +3520,7 @@ import zlib from "node:zlib";
 import fs from "node:fs";
 import path from "node:path";
 import { EventEmitter } from "node:events";
+import { StringDecoder } from "node:string_decoder";
 var ACTIVITY_ID_HEADER = "x-activity-request-id";
 var MAX_BUFFER_SIZE = 100;
 function isHeaderRecord(h) {
@@ -3886,49 +3886,111 @@ var ActivityLogger = class _ActivityLogger extends EventEmitter {
       };
       req.on("response", (res) => {
         const responseChunks = [];
+        const decompressedChunks = [];
+        const decoder = new StringDecoder("utf8");
         let chunkIndex = 0;
-        res.on("data", (chunk) => {
-          const chunkBuffer = Buffer.from(chunk);
-          responseChunks.push(chunkBuffer);
+        const emitChunk = (chunkData) => {
+          if (!chunkData) return;
           self.safeEmitNetwork({
             id,
             pending: true,
             chunk: {
               index: chunkIndex++,
-              data: chunkBuffer.toString("utf8"),
+              data: chunkData,
               timestamp: Date.now()
             }
           });
+        };
+        let responseEmitted = false;
+        const processBuffer = (finalBuffer) => {
+          if (responseEmitted) return;
+          responseEmitted = true;
+          const resBody = finalBuffer.toString("utf8");
+          const startTime = self.requestStartTimes.get(id);
+          const durationMs = startTime ? Date.now() - startTime : 0;
+          self.requestStartTimes.delete(id);
+          self.safeEmitNetwork({
+            id,
+            pending: false,
+            response: {
+              status: res.statusCode || 0,
+              headers: self.stringifyHeaders(res.headers),
+              body: resBody,
+              durationMs
+            }
+          });
+        };
+        const rawEncoding = res.headers["content-encoding"];
+        const encoding = typeof rawEncoding === "string" ? rawEncoding.toLowerCase().trim() : "";
+        let decompressor = null;
+        if (encoding === "gzip" || encoding === "x-gzip") {
+          decompressor = zlib.createGunzip({
+            flush: zlib.constants.Z_SYNC_FLUSH
+          });
+        } else if (encoding === "deflate") {
+          decompressor = zlib.createInflate({
+            flush: zlib.constants.Z_SYNC_FLUSH
+          });
+        }
+        let decompressionFailed = false;
+        let responseEnded = false;
+        if (decompressor) {
+          decompressor.on("data", (decompressedChunk) => {
+            if (decompressionFailed || responseEmitted) return;
+            decompressedChunks.push(decompressedChunk);
+            emitChunk(decoder.write(decompressedChunk));
+          });
+          decompressor.on("end", () => {
+            if (decompressionFailed || responseEmitted) return;
+            emitChunk(decoder.end());
+            processBuffer(Buffer.concat(decompressedChunks));
+          });
+          decompressor.on("error", () => {
+            decompressionFailed = true;
+            if (responseEnded) {
+              processBuffer(Buffer.concat(responseChunks));
+            }
+          });
+          decompressor.on("close", () => {
+            if (responseEnded && !responseEmitted) {
+              processBuffer(Buffer.concat(responseChunks));
+            }
+          });
+        }
+        res.on("data", (chunk) => {
+          const chunkBuffer = Buffer.from(chunk);
+          responseChunks.push(chunkBuffer);
+          if (decompressor) {
+            if (!decompressionFailed && !decompressor.destroyed && !decompressor.writableEnded) {
+              try {
+                decompressor.write(chunkBuffer);
+              } catch {
+                decompressionFailed = true;
+                if (responseEnded) {
+                  processBuffer(Buffer.concat(responseChunks));
+                }
+              }
+            }
+          } else {
+            emitChunk(decoder.write(chunkBuffer));
+          }
         });
         res.on("end", () => {
-          const buffer = Buffer.concat(responseChunks);
-          const encoding = res.headers["content-encoding"];
-          const processBuffer = (finalBuffer) => {
-            const resBody = finalBuffer.toString("utf8");
-            const startTime = self.requestStartTimes.get(id);
-            const durationMs = startTime ? Date.now() - startTime : 0;
-            self.requestStartTimes.delete(id);
-            self.safeEmitNetwork({
-              id,
-              pending: false,
-              response: {
-                status: res.statusCode || 0,
-                headers: self.stringifyHeaders(res.headers),
-                body: resBody,
-                durationMs
+          responseEnded = true;
+          if (decompressor) {
+            if (decompressionFailed || decompressor.destroyed || decompressor.writableEnded) {
+              processBuffer(Buffer.concat(responseChunks));
+            } else {
+              try {
+                decompressor.end();
+              } catch {
+                decompressionFailed = true;
+                processBuffer(Buffer.concat(responseChunks));
               }
-            });
-          };
-          if (encoding === "gzip") {
-            zlib.gunzip(buffer, (err, decompressed) => {
-              processBuffer(err ? buffer : decompressed);
-            });
-          } else if (encoding === "deflate") {
-            zlib.inflate(buffer, (err, decompressed) => {
-              processBuffer(err ? buffer : decompressed);
-            });
+            }
           } else {
-            processBuffer(buffer);
+            emitChunk(decoder.end());
+            processBuffer(Buffer.concat(responseChunks));
           }
         });
       });
@@ -4174,7 +4236,7 @@ var bridgeAttached = false;
 function bridgeCoreEvents(capture) {
   if (bridgeAttached) return;
   bridgeAttached = true;
-  coreEvents.on(CoreEvent.ConsoleLog, (payload) => {
+  coreEvents.on("console-log" /* ConsoleLog */, (payload) => {
     capture.logConsole(payload);
   });
 }
@@ -4325,7 +4387,7 @@ async function toggleDevToolsPanel(config, isOpen, toggle, setOpen) {
     return;
   }
   try {
-    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./dist-2ELAEESC.js");
+    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./core-CEUTCQ3Z.js");
     const url = await startDevToolsServer(config);
     if (shouldLaunchBrowser()) {
       try {

package/bundle/{devtoolsService-AWYBM7VP.js → devtoolsService-YPLYVNTF.js}

@@ -3,7 +3,7 @@ import {
   CoreEvent,
   coreEvents,
   debugLogger
-} from "./chunk-G3S7WMRG.js";
+} from "./chunk-BAGLLEOA.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";
@@ -3521,6 +3521,7 @@ import zlib from "node:zlib";
 import fs from "node:fs";
 import path from "node:path";
 import { EventEmitter } from "node:events";
+import { StringDecoder } from "node:string_decoder";
 var ACTIVITY_ID_HEADER = "x-activity-request-id";
 var MAX_BUFFER_SIZE = 100;
 function isHeaderRecord(h) {
@@ -3886,49 +3887,111 @@ var ActivityLogger = class _ActivityLogger extends EventEmitter {
       };
       req.on("response", (res) => {
         const responseChunks = [];
+        const decompressedChunks = [];
+        const decoder = new StringDecoder("utf8");
         let chunkIndex = 0;
-        res.on("data", (chunk) => {
-          const chunkBuffer = Buffer.from(chunk);
-          responseChunks.push(chunkBuffer);
+        const emitChunk = (chunkData) => {
+          if (!chunkData) return;
           self.safeEmitNetwork({
             id,
             pending: true,
             chunk: {
               index: chunkIndex++,
-              data: chunkBuffer.toString("utf8"),
+              data: chunkData,
               timestamp: Date.now()
             }
           });
+        };
+        let responseEmitted = false;
+        const processBuffer = (finalBuffer) => {
+          if (responseEmitted) return;
+          responseEmitted = true;
+          const resBody = finalBuffer.toString("utf8");
+          const startTime = self.requestStartTimes.get(id);
+          const durationMs = startTime ? Date.now() - startTime : 0;
+          self.requestStartTimes.delete(id);
+          self.safeEmitNetwork({
+            id,
+            pending: false,
+            response: {
+              status: res.statusCode || 0,
+              headers: self.stringifyHeaders(res.headers),
+              body: resBody,
+              durationMs
+            }
+          });
+        };
+        const rawEncoding = res.headers["content-encoding"];
+        const encoding = typeof rawEncoding === "string" ? rawEncoding.toLowerCase().trim() : "";
+        let decompressor = null;
+        if (encoding === "gzip" || encoding === "x-gzip") {
+          decompressor = zlib.createGunzip({
+            flush: zlib.constants.Z_SYNC_FLUSH
+          });
+        } else if (encoding === "deflate") {
+          decompressor = zlib.createInflate({
+            flush: zlib.constants.Z_SYNC_FLUSH
+          });
+        }
+        let decompressionFailed = false;
+        let responseEnded = false;
+        if (decompressor) {
+          decompressor.on("data", (decompressedChunk) => {
+            if (decompressionFailed || responseEmitted) return;
+            decompressedChunks.push(decompressedChunk);
+            emitChunk(decoder.write(decompressedChunk));
+          });
+          decompressor.on("end", () => {
+            if (decompressionFailed || responseEmitted) return;
+            emitChunk(decoder.end());
+            processBuffer(Buffer.concat(decompressedChunks));
+          });
+          decompressor.on("error", () => {
+            decompressionFailed = true;
+            if (responseEnded) {
+              processBuffer(Buffer.concat(responseChunks));
+            }
+          });
+          decompressor.on("close", () => {
+            if (responseEnded && !responseEmitted) {
+              processBuffer(Buffer.concat(responseChunks));
+            }
+          });
+        }
+        res.on("data", (chunk) => {
+          const chunkBuffer = Buffer.from(chunk);
+          responseChunks.push(chunkBuffer);
+          if (decompressor) {
+            if (!decompressionFailed && !decompressor.destroyed && !decompressor.writableEnded) {
+              try {
+                decompressor.write(chunkBuffer);
+              } catch {
+                decompressionFailed = true;
+                if (responseEnded) {
+                  processBuffer(Buffer.concat(responseChunks));
+                }
+              }
+            }
+          } else {
+            emitChunk(decoder.write(chunkBuffer));
+          }
         });
         res.on("end", () => {
-          const buffer = Buffer.concat(responseChunks);
-          const encoding = res.headers["content-encoding"];
-          const processBuffer = (finalBuffer) => {
-            const resBody = finalBuffer.toString("utf8");
-            const startTime = self.requestStartTimes.get(id);
-            const durationMs = startTime ? Date.now() - startTime : 0;
-            self.requestStartTimes.delete(id);
-            self.safeEmitNetwork({
-              id,
-              pending: false,
-              response: {
-                status: res.statusCode || 0,
-                headers: self.stringifyHeaders(res.headers),
-                body: resBody,
-                durationMs
+          responseEnded = true;
+          if (decompressor) {
+            if (decompressionFailed || decompressor.destroyed || decompressor.writableEnded) {
+              processBuffer(Buffer.concat(responseChunks));
+            } else {
+              try {
+                decompressor.end();
+              } catch {
+                decompressionFailed = true;
+                processBuffer(Buffer.concat(responseChunks));
               }
-            });
-          };
-          if (encoding === "gzip") {
-            zlib.gunzip(buffer, (err, decompressed) => {
-              processBuffer(err ? buffer : decompressed);
-            });
-          } else if (encoding === "deflate") {
-            zlib.inflate(buffer, (err, decompressed) => {
-              processBuffer(err ? buffer : decompressed);
-            });
+            }
           } else {
-            processBuffer(buffer);
+            emitChunk(decoder.end());
+            processBuffer(Buffer.concat(responseChunks));
           }
         });
       });
@@ -4325,7 +4388,7 @@ async function toggleDevToolsPanel(config, isOpen, toggle, setOpen) {
     return;
   }
   try {
-    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./dist-F22VU44K.js");
+    const { openBrowserSecurely, shouldLaunchBrowser } = await import("./dist-Q63VF7PG.js");
     const url = await startDevToolsServer(config);
     if (shouldLaunchBrowser()) {
       try {

package/bundle/{dist-4PMK5N6W.js → dist-Q63VF7PG.js}

@@ -831,6 +831,7 @@ import {
   isEditorAvailableAsync,
   isEmpty,
   isEnabled,
+  isEnterprisePrivateAddress,
   isFatalToolError,
   isFileAndDirectorySecureSync,
   isFileDiff,
@@ -1133,7 +1134,7 @@ import {
   wrapWithSynchronizedOutput,
   writeToStderr,
   writeToStdout
-} from "./chunk-5YXWOKC2.js";
+} from "./chunk-BAGLLEOA.js";
 import "./chunk-664ZODQF.js";
 import {
   SpanStatusCode,
@@ -1974,6 +1975,7 @@ export {
   isEditorAvailableAsync,
   isEmpty,
   isEnabled,
+  isEnterprisePrivateAddress,
   isFatalToolError,
   isFileAndDirectorySecureSync,
   isFileDiff,

package/bundle/docs/cli/plan-mode.md

@@ -340,7 +340,7 @@ if [ -f "$plan_path" ]; then
   filename="$(date +%s)_$(basename "$plan_path")"
 
   # Upload the plan to GCS in the background so it doesn't block the CLI
-  gsutil cp "$plan_path" "gs://my-audit-bucket/gemini-plans/$filename" > /dev/null 2>&1 &
+  gcloud storage cp "$plan_path" "gs://my-audit-bucket/gemini-plans/$filename" > /dev/null 2>&1 &
 fi
 
 # AfterTool hooks should generally allow the flow to continue

package/bundle/docs/tools/mcp-server.md

@@ -433,6 +433,12 @@ Use the `/mcp auth` command to manage OAuth authentication:
   random port, e.g., `http://localhost:<random-port>/oauth/callback`)
 - **`tokenParamName`** (string): Query parameter name for tokens in SSE URLs
 - **`audiences`** (string[]): Audiences the token is valid for
+- **`allowPrivateNetwork`** (boolean): Allow OAuth discovery, registration,
+  authorization, and token endpoints that resolve to private enterprise network
+  addresses (RFC 1918, RFC 6598 Carrier-Grade NAT, RFC 4193 IPv6 Unique Local,
+  and `.internal` or `.local` domains). Defaults to `false`. HTTPS is still
+  required for non-loopback endpoints, and link-local (`169.254.0.0/16`,
+  `fe80::/10`) and loopback (`127.0.0.0/8`, `::1`) addresses remain restricted.
 
 #### Token management
 

package/bundle/{gemini-GK2XZNXB.js → gemini-LRDBGCHF.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-5P6HIACT.js";
+} from "./chunk-VDKR3AIQ.js";
 import {
   BuiltinCommandLoader,
   CommandService,
@@ -45,11 +45,11 @@ import {
   updateExtension,
   validateAuthMethod,
   validateContextFilePath
-} from "./chunk-VGPHCSAB.js";
+} from "./chunk-D4FKL6WQ.js";
 import {
   exitCli,
   require_source
-} from "./chunk-O5W3WYI5.js";
+} from "./chunk-HH6UGBJR.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -88,12 +88,12 @@ import {
   resolveGemmaConfig,
   saveModelChange,
   stripAnsi
-} from "./chunk-V5XDOSXJ.js";
+} from "./chunk-7KFTNUNE.js";
 import {
   RELAUNCH_EXIT_CODE,
   require_semver
-} from "./chunk-CTWJ3T77.js";
-import "./chunk-W6ALEP4H.js";
+} from "./chunk-OCM26AU2.js";
+import "./chunk-LC5SKSCL.js";
 import {
   cleanupCheckpoints,
   registerCleanup,
@@ -102,7 +102,7 @@ import {
   runExitCleanup,
   runSyncCleanup,
   setupSignalHandlers
-} from "./chunk-CYBHTFCS.js";
+} from "./chunk-3RUC6ZA6.js";
 import {
   ASK_USER_TOOL_NAME,
   ApprovalMode,
@@ -257,7 +257,7 @@ import {
   updatePolicy,
   writeToStderr,
   writeToStdout
-} from "./chunk-G3S7WMRG.js";
+} from "./chunk-BAGLLEOA.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";
@@ -7876,7 +7876,7 @@ async function loadSandboxConfig(settings, argv) {
   }
   const command2 = getSandboxCommand(sandboxValue);
   const packageJson = await getPackageJson(__dirname3);
-  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.66.0-nightly.20261019.ged96faedf" ?? customImage ?? packageJson?.config?.sandboxImageUri;
+  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.66.0-preview.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
   const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
   return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
 }
@@ -11547,7 +11547,7 @@ async function runNonInteractive({
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-AWYBM7VP.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-YPLYVNTF.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -12057,7 +12057,7 @@ async function runNonInteractive2(params) {
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-AWYBM7VP.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-YPLYVNTF.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -17454,7 +17454,7 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
   }
 }
 async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
-  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-MGIJ7GNE.js");
+  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-3XUYDTSL.js");
   await doStartUI(
     config,
     settings,
@@ -17663,7 +17663,7 @@ ${finalArgs[promptIndex + 1]}`;
     await config.storage.initialize();
     adminControlsListner.setConfig(config);
     if (config.isInteractive() && settings.merged.general.devtools) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-AWYBM7VP.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-YPLYVNTF.js");
       setupInitialActivityLogger(config);
     }
     registerTelemetryConfig(config);
@@ -17722,7 +17722,7 @@ ${finalArgs[promptIndex + 1]}`;
     const initAppHandle = startupProfiler.start("initialize_app");
     const initializationResult = await initializeApp(config, settings);
     initAppHandle?.end();
-    import("./liteRtServerManager-OY2ULYPZ.js").then(({ LiteRtServerManager }) => {
+    import("./liteRtServerManager-KF2BIFPA.js").then(({ LiteRtServerManager }) => {
       const mergedGemma = settings.merged.experimental?.gemmaModelRouter;
       if (!mergedGemma) return;
       const userGemma = settings.forScope("User" /* User */).settings.experimental?.gemmaModelRouter;