@google/gemini-cli 0.67.0-nightly.20261104.g89e9d25d6 → 0.67.0

package/bundle/docs/cli/sandbox.md

@@ -415,14 +415,8 @@ $env:SANDBOX_FLAGS="--flag1 --flag2=value"
 
 ### Linux UID/GID handling
 
-Gemini CLI automatically handles user permissions in container sandboxes on
-Linux. When the sandbox runs as your host UID/GID (the default on supported
-Linux distributions) and you use rootless Podman, Gemini CLI also passes
-`--userns=keep-id`. This keeps files that the sandbox creates in mounted
-directories owned by your host user. To use a different user namespace mode, add
-your own `--userns` option to `SANDBOX_FLAGS`.
-
-Override the default Linux UID/GID mapping behavior with:
+The sandbox automatically handles user permissions on Linux. Override these
+permissions with:
 
 **macOS/Linux**
 

package/bundle/docs/cli/themes.md

@@ -97,6 +97,7 @@ nested configuration objects. For example:
   - `diff.removed`: Background for removed lines in diffs.
 - **`border`**: Defines border colors.
   - `default`: The standard border color.
+  - `focused`: Border color when an element is focused.
 - **`status`**: Colors for status indicators.
   - `success`: Used for successful operations.
   - `warning`: Used for warnings.
@@ -104,9 +105,6 @@ nested configuration objects. For example:
 - **`ui`**: Other UI elements.
   - `comment`: Color for code comments.
   - `symbol`: Color for code symbols and operators.
-  - `active`: Border and text color for active or running elements.
-  - `focus`: Color for focused elements, such as selected menu items and focused
-    borders.
   - `gradient`: An array of colors used for gradient effects.
 
 **Required properties:**
@@ -168,7 +166,8 @@ custom theme defined in `settings.json`.
     "accent": "#d3869b"
   },
   "border": {
-    "default": "#3c3836"
+    "default": "#3c3836",
+    "focused": "#458588"
   },
   "status": {
     "success": "#b8bb26",
@@ -178,8 +177,6 @@ custom theme defined in `settings.json`.
   "ui": {
     "comment": "#928374",
     "symbol": "#8ec07c",
-    "active": "#83a598",
-    "focus": "#b8bb26",
     "gradient": ["#cc241d", "#d65d0e", "#d79921"]
   }
 }

package/bundle/docs/extensions/releasing.md

@@ -29,38 +29,6 @@ To have your extension automatically discovered and listed:
 Our system crawls tagged repositories daily. Once you tag your repository, your
 extension will appear in the gallery if it passes validation.
 
-### Troubleshooting gallery indexing
-
-If your extension doesn't appear in the gallery after 24 to 48 hours despite
-meeting the listing requirements, GitHub Code Search may not have indexed your
-repository's manifest file yet.
-
-The gallery crawler relies on GitHub Code Search to discover
-`gemini-extension.json` files across public repositories. Newly created or
-recently pushed repositories are often indexed lazily by GitHub.
-
-To check whether GitHub has indexed your repository's manifest, run the
-following command using the GitHub CLI:
-
-```bash
-gh api 'search/code?q=repo:<owner>/<repo>+filename:gemini-extension.json' --jq .total_count
-```
-
-If the count is `0`, or if you don't use the GitHub CLI, trigger indexing
-manually in your web browser:
-
-1.  Sign in to GitHub.
-2.  Navigate to
-    `https://github.com/search?q=repo%3A<owner>%2F<repo>+gemini-extension.json&type=code`
-    (replace `<owner>/<repo>` with your repository path).
-3.  If GitHub displays "This repository's code is being indexed right now", wait
-    15 to 30 minutes for indexing to finish.
-4.  Re-run the search until `gemini-extension.json` appears in the search
-    results.
-
-Once GitHub indexes the manifest file, the crawler will discover and index your
-extension during its next scheduled cycle.
-
 ## Release through a Git repository
 
 Releasing through Git is the most flexible option. Create a public Git

package/bundle/docs/reference/configuration.md

@@ -1056,7 +1056,7 @@ their corresponding top-level category object in your `settings.json` file.
       "auto": {
         "displayName": "Auto",
         "tier": "auto",
-        "isPreview": false,
+        "isPreview": true,
         "isVisible": true,
         "features": {
           "thinking": true,
@@ -1191,7 +1191,15 @@ their corresponding top-level category object in your `settings.json` file.
         ]
       },
       "gemini-2.5-flash": {
-        "default": "gemini-2.5-flash"
+        "default": "gemini-2.5-flash",
+        "contexts": [
+          {
+            "condition": {
+              "useLatestFlash": true
+            },
+            "target": "gemini-3.8-flash"
+          }
+        ]
       },
       "gemini-3-pro-preview": {
         "default": "gemini-3-pro-preview",

package/bundle/{gemini-YFCTZ76S.js → gemini-4JPKPLQN.js}

@@ -2,7 +2,7 @@ const require = (await import('node:module')).createRequire(import.meta.url); co
 import {
   startCommand,
   startServer
-} from "./chunk-Q76ZDILI.js";
+} from "./chunk-GBUWHRK6.js";
 import {
   BuiltinCommandLoader,
   CommandService,
@@ -45,11 +45,11 @@ import {
   updateExtension,
   validateAuthMethod,
   validateContextFilePath
-} from "./chunk-B2FKXXUH.js";
+} from "./chunk-5RNHNFYV.js";
 import {
   exitCli,
   require_source
-} from "./chunk-JMHCFAD6.js";
+} from "./chunk-7LX6MRZ6.js";
 import {
   appEvents
 } from "./chunk-5PS3AYFU.js";
@@ -89,12 +89,12 @@ import {
   saveModelChange,
   setAmbiguousCharactersWide,
   stripAnsi
-} from "./chunk-HRM7UWGB.js";
+} from "./chunk-VO6PFWLY.js";
 import {
   RELAUNCH_EXIT_CODE,
   require_semver
-} from "./chunk-CXMHAFLN.js";
-import "./chunk-VBHMFLBY.js";
+} from "./chunk-MQNW2IRI.js";
+import "./chunk-IDJ4QXBF.js";
 import {
   cleanupCheckpoints,
   registerCleanup,
@@ -103,7 +103,7 @@ import {
   runExitCleanup,
   runSyncCleanup,
   setupSignalHandlers
-} from "./chunk-RD2EMHV2.js";
+} from "./chunk-VK766A3F.js";
 import {
   ASK_USER_TOOL_NAME,
   AjvJsonSchemaValidator,
@@ -273,7 +273,7 @@ import {
   updatePolicy,
   writeToStderr,
   writeToStdout
-} from "./chunk-RCF66HCI.js";
+} from "./chunk-O7MGOE2I.js";
 import "./chunk-664ZODQF.js";
 import "./chunk-IUUIT4SU.js";
 import "./chunk-L6PII3GR.js";
@@ -6496,57 +6496,6 @@ async function validateExtension(args) {
       `Warning: Version '${extensionConfig.version}' does not appear to be standard semver (e.g., 1.0.0).`
     );
   }
-  if (extensionConfig.mcpServers) {
-    if (typeof extensionConfig.mcpServers !== "object" || extensionConfig.mcpServers === null || Array.isArray(extensionConfig.mcpServers)) {
-      errors.push('The "mcpServers" field must be an object.');
-    } else {
-      for (const [serverName, serverConfig] of Object.entries(
-        extensionConfig.mcpServers
-      )) {
-        if (typeof serverConfig !== "object" || serverConfig === null || Array.isArray(serverConfig)) {
-          errors.push(
-            `MCP server configuration for "${serverName}" must be an object.`
-          );
-          continue;
-        }
-        const hasCommand = typeof serverConfig.command === "string" && serverConfig.command.trim().length > 0;
-        const hasUrl = typeof serverConfig.url === "string" && serverConfig.url.trim().length > 0;
-        const hasHttpUrl = typeof serverConfig.httpUrl === "string" && serverConfig.httpUrl.trim().length > 0;
-        const hasTcp = typeof serverConfig.tcp === "string" && serverConfig.tcp.trim().length > 0 || typeof serverConfig.tcp === "number";
-        if (!hasCommand && !hasUrl && !hasHttpUrl && !hasTcp) {
-          errors.push(
-            `MCP server "${serverName}" must specify a transport (e.g., "command", "url", or "httpUrl").`
-          );
-        }
-        if (hasHttpUrl) {
-          warnings.push(
-            `MCP server "${serverName}" uses deprecated "httpUrl". Consider using "url" with "type": "http" instead.`
-          );
-        }
-        const errorPrefix = `MCP server "${serverName}" specifies an invalid `;
-        if (hasUrl && serverConfig.url) {
-          const hasPlaceholder = serverConfig.url.includes("$");
-          if (!hasPlaceholder) {
-            try {
-              new URL(serverConfig.url);
-            } catch {
-              errors.push(`${errorPrefix}URL: "${serverConfig.url}".`);
-            }
-          }
-        }
-        if (hasHttpUrl && serverConfig.httpUrl) {
-          const hasPlaceholder = serverConfig.httpUrl.includes("$");
-          if (!hasPlaceholder) {
-            try {
-              new URL(serverConfig.httpUrl);
-            } catch {
-              errors.push(`${errorPrefix}httpUrl: "${serverConfig.httpUrl}".`);
-            }
-          }
-        }
-      }
-    }
-  }
   if (warnings.length > 0) {
     debugLogger.warn("Validation warnings:");
     for (const warning of warnings) {
@@ -6991,10 +6940,8 @@ var EVENT_MAPPING = {
   PostToolUse: "AfterTool",
   UserPromptSubmit: "BeforeAgent",
   Stop: "AfterAgent",
-  SubagentStop: "AfterAgent",
-  // Gemini doesn't have sub-agents, map to AfterAgent
   SubAgentStop: "AfterAgent",
-  // Fallback for alternate casing
+  // Gemini doesn't have sub-agents, map to AfterAgent
   SessionStart: "SessionStart",
   SessionEnd: "SessionEnd",
   PreCompact: "PreCompress",
@@ -7082,10 +7029,7 @@ function migrateClaudeHooks(claudeConfig) {
       }
       return migratedDef;
     });
-    geminiHooks[geminiEventName] = [
-      ...geminiHooks[geminiEventName] || [],
-      ...migratedDefinitions
-    ];
+    geminiHooks[geminiEventName] = migratedDefinitions;
   }
   return geminiHooks;
 }
@@ -8364,7 +8308,7 @@ async function loadSandboxConfig(settings, argv) {
   }
   const command2 = getSandboxCommand(sandboxValue);
   const packageJson = await getPackageJson(__dirname3);
-  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.67.0-nightly.20261020.gb041de017" ?? customImage ?? packageJson?.config?.sandboxImageUri;
+  const image = process.env["GEMINI_SANDBOX_IMAGE"] ?? "us-docker.pkg.dev/gemini-code-dev/gemini-cli/sandbox:0.67.0-preview.0" ?? customImage ?? packageJson?.config?.sandboxImageUri;
   const isNative = command2 === "windows-native" || command2 === "sandbox-exec" || command2 === "lxc";
   return command2 && (image || isNative) ? { enabled: true, allowedPaths, networkAccess, command: command2, image } : void 0;
 }
@@ -11432,45 +11376,6 @@ function isRecord3(value) {
 }
 var execAsync = promisify(exec);
 var execFileAsync = promisify(execFile);
-var PODMAN_INFO_TIMEOUT_MS = 5e3;
-async function isPodmanRootless() {
-  const formats = [
-    "{{.Host.Security.Rootless}}",
-    "{{.Host.ServiceIsRootless}}"
-  ];
-  for (const format3 of formats) {
-    try {
-      const { stdout } = await execFileAsync(
-        "podman",
-        ["info", "--format", format3],
-        {
-          encoding: "utf-8",
-          timeout: PODMAN_INFO_TIMEOUT_MS,
-          killSignal: "SIGKILL"
-        }
-      );
-      const trimmed = String(stdout ?? "").trim().toLowerCase();
-      if (trimmed === "true") {
-        return true;
-      }
-      if (trimmed === "false") {
-        return false;
-      }
-    } catch (err) {
-      const isMissingBinary = isNodeError(err) && err.code === "ENOENT";
-      const timedOut = isRecord3(err) && err["killed"] === true;
-      if (isMissingBinary || timedOut) {
-        break;
-      }
-    }
-  }
-  return false;
-}
-function hasUsernsFlag(flags) {
-  return flags.some(
-    (flag) => flag === "--userns" || flag.startsWith("--userns=")
-  );
-}
 async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
   const patcher = new ConsolePatcher({
     debugMode: cliConfig?.getDebugMode() || !!process.env["DEBUG"],
@@ -11809,10 +11714,12 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
     if (config.command === "runsc") {
       args.push("--runtime=runsc");
     }
-    const customFlags = process.env["SANDBOX_FLAGS"] ? (0, import_shell_quote2.parse)(process.env["SANDBOX_FLAGS"], process.env).filter(
-      (f) => typeof f === "string"
-    ) : [];
-    args.push(...customFlags);
+    if (process.env["SANDBOX_FLAGS"]) {
+      const flags = (0, import_shell_quote2.parse)(process.env["SANDBOX_FLAGS"], process.env).filter(
+        (f) => typeof f === "string"
+      );
+      args.push(...flags);
+    }
     if (process.stdin.isTTY) {
       args.push("-t");
     }
@@ -12125,9 +12032,6 @@ async function start_sandbox(config, nodeArgs = [], cliConfig, cliArgs = []) {
       userFlag = "--user root";
     } else if (await shouldUseCurrentUserInSandbox()) {
       args.push("--user", "root");
-      if (command2 === "podman" && !hasUsernsFlag(customFlags) && await isPodmanRootless()) {
-        args.push("--userns=keep-id");
-      }
       const uid = (await execAsync("id -u")).stdout.trim();
       const gid = (await execAsync("id -g")).stdout.trim();
       const username = "gemini";
@@ -13032,7 +12936,7 @@ async function runNonInteractive({
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-EWNQDTC7.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-6V46WMXX.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -13560,7 +13464,7 @@ async function runNonInteractive2(params) {
       }
     });
     if (process.env["GEMINI_CLI_ACTIVITY_LOG_TARGET"]) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-EWNQDTC7.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-6V46WMXX.js");
       setupInitialActivityLogger(config);
     }
     const { stdout: workingStdout } = createWorkingStdio();
@@ -17810,11 +17714,9 @@ var AcpSessionManager = class {
           currentModelId
         }
       };
-      try {
-        await session.streamHistory(messages);
-      } catch (err) {
+      session.streamHistory(messages).catch((err) => {
         debugLogger.error(`Error streaming history: ${err}`);
-      }
+      });
       setTimeout(() => {
         session?.sendAvailableCommands().catch((err) => {
           debugLogger.error(`Error sending available commands: ${err}`);
@@ -18723,7 +18625,7 @@ async function resolveSessionId(resumeArg, sessionIdArg, sessionFileArg) {
   }
 }
 async function startInteractiveUI(config, settings, startupWarnings, workspaceRoot = process.cwd(), resumedSessionData, initializationResult) {
-  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-X54KN2EM.js");
+  const { startInteractiveUI: doStartUI } = await import("./interactiveCli-FQ3YKGOG.js");
   await doStartUI(
     config,
     settings,
@@ -18948,7 +18850,7 @@ ${finalArgs[promptIndex + 1]}`;
     await config.storage.initialize();
     adminControlsListner.setConfig(config);
     if (config.isInteractive() && settings.merged.general.devtools) {
-      const { setupInitialActivityLogger } = await import("./devtoolsService-EWNQDTC7.js");
+      const { setupInitialActivityLogger } = await import("./devtoolsService-6V46WMXX.js");
       setupInitialActivityLogger(config);
     }
     registerTelemetryConfig(config);
@@ -19007,7 +18909,7 @@ ${finalArgs[promptIndex + 1]}`;
     const initAppHandle = startupProfiler.start("initialize_app");
     const initializationResult = await initializeApp(config, settings);
     initAppHandle?.end();
-    import("./liteRtServerManager-FLPMMDNM.js").then(({ LiteRtServerManager }) => {
+    import("./liteRtServerManager-JAV3GR4V.js").then(({ LiteRtServerManager }) => {
       const mergedGemma = settings.merged.experimental?.gemmaModelRouter;
       if (!mergedGemma) return;
       const userGemma = settings.forScope("User" /* User */).settings.experimental?.gemmaModelRouter;