@machina.ai/cell-cli-core 1.49.0-rc4 → 1.49.0-rc6

package/dist/docs/CHANGES.md

@@ -39,6 +39,11 @@ requirements:
 - **Glue Code**: The existing codebase has been modified to integrate and
   utilize the new packages described above.
 - **Re-branding**: Minor changes have been made to reflect a different branding.
+- **Sandbox and Isolation**: Rebranded the native sandbox environment from
+  `gemini-cli-sandbox` to `cell-cli-sandbox`. Updated the Docker orchestration
+  files and the custom `scripts/build_sandbox.js` to bundle local `@machina.ai`
+  packages, ensuring fully isolated sandboxed execution runs with our own
+  customized CLI and core.
 - **Package Aliasing**: To minimize intrusive changes to the original source
   code, package aliases are used in `package.json`. This allows the original
   import paths to remain the same while pointing to the new, custom packages

package/dist/docs/cli/sandbox.md

@@ -47,14 +47,14 @@ gemini -s -p "analyze the code structure"
 **macOS/Linux**
 
 ```bash
-export GEMINI_SANDBOX=true
+export CELL_SANDBOX=true
 gemini -p "run the test suite"
 ```
 
 **Windows (PowerShell)**
 
 ```powershell
-$env:GEMINI_SANDBOX="true"
+$env:CELL_SANDBOX="true"
 gemini -p "run the test suite"
 ```
 
@@ -74,7 +74,7 @@ Enable sandboxing using one of the following methods (in order of precedence):
 
 1. **Command flag**: `-s` or `--sandbox`
 2. **Environment variable**:
-   `GEMINI_SANDBOX=true|docker|podman|sandbox-exec|runsc|lxc`
+   `CELL_SANDBOX=true|docker|podman|sandbox-exec|runsc|lxc`
 3. **Settings file**: `"sandbox": true` in the `tools` object of your
    `settings.json` file (for example, `{"tools": {"sandbox": true}}`).
 
@@ -124,7 +124,7 @@ Docker as the provider:
 
 ```bash
 # Using the environment variable (Recommended)
-export GEMINI_SANDBOX=docker
+export CELL_SANDBOX=docker
 gemini -p "build the project"
 
 # Or configure it permanently in your settings.json
@@ -142,7 +142,7 @@ Podman image as your sandbox, provided it has standard shell utilities (like
 
 To configure a custom image that is hosted on a registry (or built locally),
 update your `settings.json` to use an object for the sandbox configuration, or
-set the `GEMINI_SANDBOX_IMAGE` environment variable.
+set the `CELL_SANDBOX_IMAGE` environment variable.
 
 _Example: Configuring via `settings.json`_
 
@@ -160,7 +160,7 @@ _Example: Configuring via `settings.json`_
 _Example: Configuring via environment variable_
 
 ```bash
-export GEMINI_SANDBOX_IMAGE="us-central1-docker.pkg.dev/my-project/my-repo/my-custom-sandbox:latest"
+export CELL_SANDBOX_IMAGE="us-central1-docker.pkg.dev/my-project/my-repo/my-custom-sandbox:latest"
 ```
 
 **Option B: Building a local custom image automatically**
@@ -174,7 +174,7 @@ and Cell CLI will build the image automatically.
 3.  Run your command with the `BUILD_SANDBOX` environment variable set:
 
 ```bash
-BUILD_SANDBOX=1 GEMINI_SANDBOX=docker gemini -p "run my custom build"
+BUILD_SANDBOX=1 CELL_SANDBOX=docker gemini -p "run my custom build"
 ```
 
 ### 3. Windows Native Sandbox (Windows only)
@@ -210,7 +210,7 @@ strong security barrier between AI operations and the host OS.
 
 When you set `sandbox: "runsc"`, Cell CLI runs `docker run --runtime=runsc ...`
 to execute containers with gVisor isolation. runsc is not auto-detected; you
-must specify it explicitly (e.g. `GEMINI_SANDBOX=runsc` or `sandbox: "runsc"`).
+must specify it explicitly (e.g. `CELL_SANDBOX=runsc` or `sandbox: "runsc"`).
 
 To set up runsc:
 
@@ -239,18 +239,18 @@ such as Snapcraft and Rockcraft.
 lxd init --auto
 
 # Create and start an Ubuntu container
-lxc launch ubuntu:24.04 gemini-sandbox
+lxc launch ubuntu:24.04 cell-sandbox
 
 # Enable LXC sandboxing
-export GEMINI_SANDBOX=lxc
+export CELL_SANDBOX=lxc
 gemini -p "build the project"
 ```
 
 **Custom container name**:
 
 ```bash
-export GEMINI_SANDBOX=lxc
-export GEMINI_SANDBOX_IMAGE=my-snapcraft-container
+export CELL_SANDBOX=lxc
+export CELL_SANDBOX_IMAGE=my-snapcraft-container
 gemini -p "build the snap"
 ```
 
@@ -352,7 +352,7 @@ docker run -it \
   -v /var/run/docker.sock:/var/run/docker.sock \
   -v /absolute/path/on/host/project:/absolute/path/on/host/project \
   -w /absolute/path/on/host/project \
-  -e GEMINI_SANDBOX=docker \
+  -e CELL_SANDBOX=docker \
   ghcr.io/google/gemini-cli:latest
 ```
 

package/dist/docs/core/subagents.md

@@ -308,7 +308,7 @@ To use the browser agent in a Docker sandbox:
 3. Launch the CLI with port forwarding:
 
    ```bash
-   GEMINI_SANDBOX=docker SANDBOX_PORTS=9222 gemini
+   CELL_SANDBOX=docker SANDBOX_PORTS=9222 gemini
    ```
 
 ## Creating custom subagents

package/dist/docs/examples/proxy-script.md

@@ -1,7 +1,7 @@
 # Example proxy script
 
 The following is an example of a proxy script that can be used with the
-`GEMINI_SANDBOX_PROXY_COMMAND` environment variable. This script only allows
+`CELL_SANDBOX_PROXY_COMMAND` environment variable. This script only allows
 `HTTPS` connections to `example.com:443` and declines all other requests.
 
 ```javascript
@@ -14,7 +14,7 @@ The following is an example of a proxy script that can be used with the
  */
 
 // Example proxy server that listens on :::8877 and only allows HTTPS connections to example.com.
-// Set `GEMINI_SANDBOX_PROXY_COMMAND=scripts/example-proxy.js` to run proxy alongside sandbox
+// Set `CELL_SANDBOX_PROXY_COMMAND=scripts/example-proxy.js` to run proxy alongside sandbox
 // Test via `curl https://example.com` inside sandbox (in shell mode or via shell tool)
 
 import http from 'node:http';

package/dist/docs/reference/configuration.md

@@ -2791,7 +2791,7 @@ the `advanced.excludedEnvVars` setting in your `settings.json` file.
   - Required for using Vertex AI in non-express mode.
   - Example: `export GOOGLE_CLOUD_LOCATION="YOUR_PROJECT_LOCATION"` (Windows
     PowerShell: `$env:GOOGLE_CLOUD_LOCATION="YOUR_PROJECT_LOCATION"`).
-- **`GEMINI_SANDBOX`**:
+- **`CELL_SANDBOX`**:
   - Alternative to the `sandbox` setting in `settings.json`.
   - Accepts `true`, `false`, `docker`, `podman`, or a custom command string.
 - **`CELL_SYSTEM_MD`**:
@@ -3090,17 +3090,17 @@ modifications) within a sandboxed environment to protect your system.
 Sandboxing is disabled by default, but you can enable it in a few ways:
 
 - Using `--sandbox` or `-s` flag.
-- Setting `GEMINI_SANDBOX` environment variable.
+- Setting `CELL_SANDBOX` environment variable.
 - Sandbox is enabled when using `--yolo` or `--approval-mode=yolo` by default.
 
-By default, it uses a pre-built `gemini-cli-sandbox` Docker image.
+By default, it uses a pre-built `cell-cli-sandbox` Docker image.
 
 For project-specific sandboxing needs, you can create a custom Dockerfile at
 `.cell-cli/sandbox.Dockerfile` in your project's root directory. This Dockerfile
 can be based on the base sandbox image:
 
 ```dockerfile
-FROM gemini-cli-sandbox
+FROM cell-cli-sandbox
 
 # Add your custom dependencies or configurations here.
 # Note: The base image runs as the non-root 'node' user.

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@machina.ai/cell-cli-core",
-  "version": "1.49.0-rc4",
+  "version": "1.49.0-rc6",
   "description": "Cell CLI Core",
   "repository": {
     "type": "git",

package/dist/src/config/config.test.js

@@ -30,7 +30,7 @@ import { RipgrepFallbackEvent } from '../telemetry/types.js';
 import { ToolRegistry } from '../tools/tool-registry.js';
 import { ACTIVATE_SKILL_TOOL_NAME } from '../tools/tool-names.js';
 import { DEFAULT_MODEL_CONFIGS } from './defaultModelConfigs.js';
-import { DEFAULT_GEMINI_MODEL, PREVIEW_GEMINI_3_1_MODEL, DEFAULT_GEMINI_MODEL_AUTO, PREVIEW_GEMINI_MODEL_AUTO, PREVIEW_GEMINI_FLASH_MODEL, DEFAULT_GEMINI_FLASH_MODEL, } from './models.js';
+import { DEFAULT_GEMINI_MODEL, PREVIEW_GEMINI_3_1_MODEL, DEFAULT_GEMINI_MODEL_AUTO, PREVIEW_GEMINI_MODEL_AUTO, PREVIEW_GEMINI_FLASH_MODEL, DEFAULT_GEMINI_FLASH_MODEL, setFlashModels, } from './models.js';
 import { Storage } from './storage.js';
 import { runWithScopedAutoMemoryExtractionWriteAccess, runWithScopedMemoryInboxAccess, } from './scoped-config.js';
 vi.mock('fs', async (importOriginal) => {
@@ -200,12 +200,13 @@ vi.mock('../code_assist/codeAssist.js');
 vi.mock('../code_assist/experiments/experiments.js');
 afterEach(() => {
     vi.clearAllMocks();
+    setFlashModels('gemini-3-flash-preview', 'gemini-2.5-flash');
 });
 describe('Server Config (config.ts)', () => {
     const MODEL = DEFAULT_GEMINI_MODEL;
     const SANDBOX = createMockSandboxConfig({
         command: 'docker',
-        image: 'gemini-cli-sandbox',
+        image: 'cell-cli-sandbox',
     });
     const TARGET_DIR = '/path/to/target';
     const DEBUG_MODE = false;
@@ -775,7 +776,7 @@ describe('Server Config (config.ts)', () => {
             await config.refreshAuth(AuthType.LOGIN_WITH_GOOGLE);
             await config.getExperimentsAsync();
             await vi.waitFor(() => {
-                expect(config.getModel()).toBe(PREVIEW_GEMINI_FLASH_MODEL);
+                expect(config.getModel()).toBe('gemini-3-flash-preview');
             });
         });
         it('should NOT switch to flash model if user has Pro access and model is auto', async () => {
@@ -1617,7 +1618,7 @@ describe('GemmaModelRouterSettings', () => {
     const MODEL = DEFAULT_GEMINI_MODEL;
     const SANDBOX = createMockSandboxConfig({
         command: 'docker',
-        image: 'gemini-cli-sandbox',
+        image: 'cell-cli-sandbox',
     });
     const TARGET_DIR = '/path/to/target';
     const DEBUG_MODE = false;
@@ -1920,7 +1921,7 @@ describe('BaseLlmClient Lifecycle', () => {
     const MODEL = 'gemini-pro';
     const SANDBOX = createMockSandboxConfig({
         command: 'docker',
-        image: 'gemini-cli-sandbox',
+        image: 'cell-cli-sandbox',
     });
     const TARGET_DIR = '/path/to/target';
     const DEBUG_MODE = false;
@@ -1969,7 +1970,7 @@ describe('Generation Config Merging (HACK)', () => {
     const MODEL = 'gemini-pro';
     const SANDBOX = createMockSandboxConfig({
         command: 'docker',
-        image: 'gemini-cli-sandbox',
+        image: 'cell-cli-sandbox',
     });
     const TARGET_DIR = '/path/to/target';
     const DEBUG_MODE = false;
@@ -2221,7 +2222,7 @@ describe('LocalLiteRtLmClient Lifecycle', () => {
     const MODEL = 'gemini-pro';
     const SANDBOX = createMockSandboxConfig({
         command: 'docker',
-        image: 'gemini-cli-sandbox',
+        image: 'cell-cli-sandbox',
     });
     const TARGET_DIR = '/path/to/target';
     const DEBUG_MODE = false;
@@ -2490,7 +2491,7 @@ describe('Config Quota & Preview Model Access', () => {
             allowedPaths: [],
             networkAccess: false,
             command: 'docker',
-            image: 'gemini-cli-sandbox',
+            image: 'cell-cli-sandbox',
         },
     };
     beforeEach(() => {
@@ -3413,7 +3414,7 @@ describe('hasGemini35FlashGAAccess model setting', () => {
         expect(DEFAULT_GEMINI_FLASH_MODEL).toBe('gemini-3.5-flash');
         expect(PREVIEW_GEMINI_FLASH_MODEL).toBe('gemini-3-flash-preview');
     });
-    it('should set DEFAULT_GEMINI_FLASH_MODEL to gemini-3.5-flash and PREVIEW_GEMINI_FLASH_MODEL to gemini-3-flash-preview if hasGemini35FlashGAAccess returns true and authType is LOGIN_WITH_GOOGLE', () => {
+    it('should set DEFAULT_GEMINI_FLASH_MODEL to gemini-3-flash and PREVIEW_GEMINI_FLASH_MODEL to gemini-3-flash if hasGemini35FlashGAAccess returns true and authType is LOGIN_WITH_GOOGLE', () => {
         const config = new Config(baseParams);
         config['contentGeneratorConfig'] = { authType: AuthType.LOGIN_WITH_GOOGLE };
         // Set experiment to return true for GEMINI_3_5_FLASH_GA_LAUNCHED
@@ -3428,8 +3429,8 @@ describe('hasGemini35FlashGAAccess model setting', () => {
         // Call the method
         const result = config.hasGemini35FlashGAAccess();
         expect(result).toBe(true);
-        expect(DEFAULT_GEMINI_FLASH_MODEL).toBe('gemini-3.5-flash');
-        expect(PREVIEW_GEMINI_FLASH_MODEL).toBe('gemini-3-flash-preview');
+        expect(DEFAULT_GEMINI_FLASH_MODEL).toBe('gemini-3-flash');
+        expect(PREVIEW_GEMINI_FLASH_MODEL).toBe('gemini-3-flash');
     });
     it('should set DEFAULT_GEMINI_FLASH_MODEL to gemini-3.5-flash and PREVIEW_GEMINI_FLASH_MODEL to gemini-3-flash-preview if hasGemini35FlashGAAccess returns true and authType is KEYCLOAK', () => {
         const config = new Config(baseParams);