docs(changelog): update for v0.45.0-preview.1

Co-authored-by: gemini-cli-robot <224641728+gemini-cli-robot@users.noreply.github.com>

docs/changelogs/preview.md

@@ -1,6 +1,6 @@
-# Preview release: v0.44.0-preview.0
+# Preview release: v0.45.0-preview.1
 
-Released: May 22, 2026
+Released: May 28, 2026
 
 Our preview release includes the latest, new, and experimental features. This
 release may not be as stable as our [latest weekly release](latest.md).
@@ -13,208 +13,56 @@ npm install -g @google/gemini-cli@preview
 
 ## Highlights
 
-- **Simplified Modes:** Merged existing Auto modes into a single, unified Auto
-  mode for a more streamlined user experience.
-- **Enhanced Agent Registration:** Improved agent registration logic to
-  prioritize project-specific agents using a first-wins strategy.
-- **New Developer Skills:** Introduced `agent-tui` and `tui-tester` skills to
-  empower developers with better terminal UI testing and automation
-  capabilities.
-- **Expanded Editor Support:** Added support for Sublime Text and Emacs Client,
-  providing more flexibility for external editing tasks.
-- **Session Management:** Added new session invocation types
-  (`LocalSessionInvocation`, `RemoteSessionInvocation`) and improved context
-  recovery across sessions.
+- **Context Simplification:** Completed major architectural work to simplify and
+  optimize how the agent manages and processes session context.
+- **A2A Usage Metadata:** The Agent-to-Agent (A2A) interface now exposes
+  detailed usage metadata, providing better visibility into resource
+  consumption.
+- **Improved Routing:** Updated default auto-routing logic and added bypasses
+  for certain routing classifiers to prevent orphaned function response errors.
+- **Terminal Stability:** Fixed several issues affecting terminal environments,
+  including Termux relaunch loops and PTY resize errors.
+- **Security & Fixes:** Strengthened MCP list security and addressed issues with
+  session resumption and PTY environment signals.
 
 ## What's Changed
 
-- chore(release): bump version to 0.44.0-nightly.20260512.g022e8baef by
+- fix(patch): cherry-pick bd53951 to release/v0.45.0-preview.0-pr-27496 to patch
+  version v0.45.0-preview.0 and create version 0.45.0-preview.1 by
   @gemini-cli-robot in
-  [#26957](https://github.com/google-gemini/gemini-cli/pull/26957)
-- Changelog for v0.42.0 by @gemini-cli-robot in
-  [#26958](https://github.com/google-gemini/gemini-cli/pull/26958)
-- Refactor: Eliminate `no-unsafe-return` suppressions via strict type validation
-  by @M-DEV-1 in
-  [#20668](https://github.com/google-gemini/gemini-cli/pull/20668)
-- Changelog for v0.43.0-preview.0 by @gemini-cli-robot in
-  [#26959](https://github.com/google-gemini/gemini-cli/pull/26959)
-- feat(core): change agent registration to first-wins and prioritize project by
-  @adamfweidman in
-  [#26953](https://github.com/google-gemini/gemini-cli/pull/26953)
-- feat(cli): merge Auto modes into a single Auto mode by @DavidAPierce in
-  [#26714](https://github.com/google-gemini/gemini-cli/pull/26714)
-- fix(core): preserve OAuth refresh tokens during rotation and retrieval by
-  @cocosheng-g in
-  [#26924](https://github.com/google-gemini/gemini-cli/pull/26924)
-- fix(cli): allow keychain auth for --list-sessions and non-interactive mode by
-  @cocosheng-g in
-  [#26921](https://github.com/google-gemini/gemini-cli/pull/26921)
-- fix(core): handle EISDIR on virtual drives in memory discovery by @cocosheng-g
-  in [#26985](https://github.com/google-gemini/gemini-cli/pull/26985)
-- fix(cli): auto-approve shell redirections in AUTO_EDIT mode by @cocosheng-g in
-  [#27003](https://github.com/google-gemini/gemini-cli/pull/27003)
-- ci: suppress bot comments during standard triage maintenance by @cocosheng-g
-  in [#27006](https://github.com/google-gemini/gemini-cli/pull/27006)
-- fix(core): refresh MCP OAuth token usage after re-auth by @sahilkirad in
-  [#26312](https://github.com/google-gemini/gemini-cli/pull/26312)
-- fix(ui): clamped table column widths by @devr0306 in
-  [#26991](https://github.com/google-gemini/gemini-cli/pull/26991)
-- fix(core): isolate subagent thread context by @akh64bit in
-  [#26449](https://github.com/google-gemini/gemini-cli/pull/26449)
-- chore: add execution permission to scripts/review.sh by @scidomino in
-  [#27009](https://github.com/google-gemini/gemini-cli/pull/27009)
-- fix(core): made context files append instead of replace by @devr0306 in
-  [#26950](https://github.com/google-gemini/gemini-cli/pull/26950)
-- fix: add system PATH fallback for ripgrep resolution (#26777) by @cocosheng-g
-  in [#26868](https://github.com/google-gemini/gemini-cli/pull/26868)
-- chore: clean up launched memory features by @SandyTao520 in
-  [#26941](https://github.com/google-gemini/gemini-cli/pull/26941)
-- fix(core): throttle shell text output and bound live UI buffer by
-  @emersonbusson in
-  [#26955](https://github.com/google-gemini/gemini-cli/pull/26955)
-- fix(cli): don't crash when an @-mention captures a non-path blob by @ifitisit
-  in [#25980](https://github.com/google-gemini/gemini-cli/pull/25980)
-- fix(core): ensure stable fallback for restricted preview models by @galz10 in
-  [#26999](https://github.com/google-gemini/gemini-cli/pull/26999)
-- feat(core): expose RAG snippets to local log file for debugging by @spencer426
-  in [#27016](https://github.com/google-gemini/gemini-cli/pull/27016)
-- fix(acp/auth): prevent conflicting credentials on enterprise gateways and
-  support optional API keys natively by @sripasg in
-  [#27021](https://github.com/google-gemini/gemini-cli/pull/27021)
-- fix(core): respect NO_PROXY for network-based MCP servers by @cocosheng-g in
-  [#27012](https://github.com/google-gemini/gemini-cli/pull/27012)
-- fix(cli): resolve permission denied in sandbox on NixOS and other distros by
-  @cocosheng-g in
-  [#27004](https://github.com/google-gemini/gemini-cli/pull/27004)
-- fix(ui): preserve new line at the end of edit window by @devr0306 in
-  [#27057](https://github.com/google-gemini/gemini-cli/pull/27057)
-- fix(core): ensure Vertex AI sets hasAccessToPreviewModels and remove
-  aggressive 404 fallback revocation by @galz10 in
-  [#27067](https://github.com/google-gemini/gemini-cli/pull/27067)
-- fix(core): ensure stable admin settings comparison across IPC to prevent
-  restart loop by @DavidAPierce in
-  [#27066](https://github.com/google-gemini/gemini-cli/pull/27066)
-- fix(deps): update vulnerable dependencies by @scidomino in
-  [#27062](https://github.com/google-gemini/gemini-cli/pull/27062)
-- fix(core): resolve EISDIR errors during file processing (#21527) by @ProthamD
-  in [#27041](https://github.com/google-gemini/gemini-cli/pull/27041)
-- docs(extensions): clarify env var sanitization policy for MCP and ext… by
-  @galz10 in [#22854](https://github.com/google-gemini/gemini-cli/pull/22854)
-- fix(ui): add ENAMETOOLONG and ENOTDIR to exceptions for file parsing errors by
-  @devr0306 in [#27069](https://github.com/google-gemini/gemini-cli/pull/27069)
-- fix(cli): explicitly clear entrypoint when spawning sandbox container by
-  @cocosheng-g in
-  [#27059](https://github.com/google-gemini/gemini-cli/pull/27059)
-- docs: update sandbox image command by @sjhddh in
-  [#26774](https://github.com/google-gemini/gemini-cli/pull/26774)
-- fix(core): externalize https-proxy-agent to fix proxy support by @sotokisehiro
-  in [#26361](https://github.com/google-gemini/gemini-cli/pull/26361)
-- security: update dependencies to fix critical and high vulnerabilities by
-  @scidomino in [#27077](https://github.com/google-gemini/gemini-cli/pull/27077)
-- Fix/web fetch ctrl c abort by @ProthamD in
-  [#24320](https://github.com/google-gemini/gemini-cli/pull/24320)
-- fix(core): add aliases and thinking config for gemini-3.1 models by
-  @anishs1207 in
-  [#27007](https://github.com/google-gemini/gemini-cli/pull/27007)
-- fix(core): use hasAccessToPreview for auto model resolution and fix
-  disappearing models by @DavidAPierce in
-  [#27112](https://github.com/google-gemini/gemini-cli/pull/27112)
-- feat(core): add adk.agentSessionSubagentEnabled flag by @adamfweidman in
-  [#26947](https://github.com/google-gemini/gemini-cli/pull/26947)
-- fix(core): enforce compile-time exhaustiveness in content-utils by
-  @adamfweidman in
-  [#27207](https://github.com/google-gemini/gemini-cli/pull/27207)
-- feat(skills): add agent-tui and tui-tester skills by @adamfweidman in
-  [#27121](https://github.com/google-gemini/gemini-cli/pull/27121)
-- fix(context): Fix snapshot recovery across sessions. by @joshualitt in
-  [#26939](https://github.com/google-gemini/gemini-cli/pull/26939)
-- fix(core): add unit tests for stableStringify by @devr0306 in
-  [#27212](https://github.com/google-gemini/gemini-cli/pull/27212)
-- fix(core): prefer pwsh.exe over Windows PowerShell 5.1 (#25859) by @kaluchi in
-  [#25900](https://github.com/google-gemini/gemini-cli/pull/25900)
-- feat(core): add LocalSessionInvocation by @adamfweidman in
-  [#26665](https://github.com/google-gemini/gemini-cli/pull/26665)
-- refactor: decouple auto model description and configuration from
-  releaseChannel by @danielweis in
-  [#27227](https://github.com/google-gemini/gemini-cli/pull/27227)
-- fix(core): prevent isBinary false-positive on Windows PTY streams by
-  @TirthNaik-99 in
-  [#26565](https://github.com/google-gemini/gemini-cli/pull/26565)
-- fix(cli): Prevent unmapped keys in Vim Normal mode from inserting text into
-  prompt Input. by @Rajeshpatel07 in
-  [#25139](https://github.com/google-gemini/gemini-cli/pull/25139)
-- fix(a2a-server): Implement default policy loading for parity with CLI by
-  @kschaab in [#27073](https://github.com/google-gemini/gemini-cli/pull/27073)
-- feat(core): add RemoteSessionInvocation by @adamfweidman in
-  [#26937](https://github.com/google-gemini/gemini-cli/pull/26937)
-- fix: allow configured MCP servers in non-interactive mode by @cocosheng-g in
-  [#27215](https://github.com/google-gemini/gemini-cli/pull/27215)
-- fix(core): add exception handling to migrateFromFileStorage by @devr0306 in
-  [#27229](https://github.com/google-gemini/gemini-cli/pull/27229)
-- fix(cli): bundle ink worker-entry.js by @rmedranollamas in
-  [#27249](https://github.com/google-gemini/gemini-cli/pull/27249)
-- feat(core): wire AgentSession invocations into agent-tool by @adamfweidman in
-  [#26948](https://github.com/google-gemini/gemini-cli/pull/26948)
-- fix(core): prevent path traversal in custome command file injection by
-  @ompatel-aiml in
-  [#27234](https://github.com/google-gemini/gemini-cli/pull/27234)
-- fix(core): respect NO_PROXY in global fetch dispatcher by @cocosheng-g in
-  [#27216](https://github.com/google-gemini/gemini-cli/pull/27216)
-- fix(core): correctly handle nullable array types in MCP tools by @devr0306 in
-  [#27228](https://github.com/google-gemini/gemini-cli/pull/27228)
-- fix(cli): preserve proxy-agent named exports in ESM bundle by @ashishch432 in
-  [#27145](https://github.com/google-gemini/gemini-cli/pull/27145)
-- Proposal: deterministic encoding for child-process I/O by @kaluchi in
-  [#27247](https://github.com/google-gemini/gemini-cli/pull/27247)
-- feat(cli): add Sublime Text and Emacs Client editors, improve error messages
-  and documentation by @alberti42 in
-  [#21090](https://github.com/google-gemini/gemini-cli/pull/21090)
-- Changelog for v0.43.0-preview.1 by @gemini-cli-robot in
-  [#27297](https://github.com/google-gemini/gemini-cli/pull/27297)
-- fix(devtools): bundle devtools package to avoid resolution errors by
+  [#27535](https://github.com/google-gemini/gemini-cli/pull/27535)
+- chore(release): bump version to 0.45.0-nightly.20260521.g854f811be by
+  @gemini-cli-robot in
+  [#27362](https://github.com/google-gemini/gemini-cli/pull/27362)
+- fix(cli): prevent Termux relaunch and resize remount loops by @saymanq in
+  [#27110](https://github.com/google-gemini/gemini-cli/pull/27110)
+- Feat/a2a expose usage metadata by @jvargassanchez-dot in
+  [#27288](https://github.com/google-gemini/gemini-cli/pull/27288)
+- feat(context): Complete simplification work. by @joshualitt in
+  [#27345](https://github.com/google-gemini/gemini-cli/pull/27345)
+- fix(core): force update_topic tool to execute sequentially by
+  @jvargassanchez-dot in
+  [#27357](https://github.com/google-gemini/gemini-cli/pull/27357)
+- Changelog for v0.44.0-preview.0 by @gemini-cli-robot in
+  [#27360](https://github.com/google-gemini/gemini-cli/pull/27360)
+- Changelog for v0.43.0 by @gemini-cli-robot in
+  [#27361](https://github.com/google-gemini/gemini-cli/pull/27361)
+- Revert "fix(core): prevent SIGHUP kills in PTY environments" by @bbiggs in
+  [#27401](https://github.com/google-gemini/gemini-cli/pull/27401)
+- fix(cli): filter internal session context from history during resumption by
   @rmedranollamas in
-  [#27250](https://github.com/google-gemini/gemini-cli/pull/27250)
-- fix(cli): integrate PolicyEngine into ACP session to prevent deadlocks
-  (#23507) by @cocosheng-g in
-  [#27252](https://github.com/google-gemini/gemini-cli/pull/27252)
-- fix: robust ripgrep path resolution and 1p hermetic execution support by
-  @cocosheng-g in
-  [#27253](https://github.com/google-gemini/gemini-cli/pull/27253)
-- refactor: decouple stored session deletion from ChatRecordingService (#22920)
-  by @yuvrajangadsingh in
-  [#27039](https://github.com/google-gemini/gemini-cli/pull/27039)
-- fix(core): improve Alpine shell compatibility by @dibyx in
-  [#26770](https://github.com/google-gemini/gemini-cli/pull/26770)
-- fix(core): generalize MCP compliance fix for tool results by @cocosheng-g in
-  [#27045](https://github.com/google-gemini/gemini-cli/pull/27045)
-- fix(scripts): scrub CI env vars in dev to keep interactive mode by @Hashaam101
-  in [#27159](https://github.com/google-gemini/gemini-cli/pull/27159)
-- fix(core): Added date field for the GCal MCP by @devr0306 in
-  [#27251](https://github.com/google-gemini/gemini-cli/pull/27251)
-- fix(core): centralize path validation to prevent crashes from malformed
-  prompts by @cocosheng-g in
-  [#27211](https://github.com/google-gemini/gemini-cli/pull/27211)
-- fix(core): prevent SIGHUP kills in PTY environments (WSL2/Kitty/Alacritty) by
-  @ProthamD in [#27267](https://github.com/google-gemini/gemini-cli/pull/27267)
-- fix(core): dynamic fallback routing for exhausted quota models by @cocosheng-g
-  in [#27315](https://github.com/google-gemini/gemini-cli/pull/27315)
-- Auto detect pnpm global installation path for macOS and Windows by @tisonkun
-  in [#22748](https://github.com/google-gemini/gemini-cli/pull/22748)
-- fix(windows): resolve interactive shell arrow-key navigation on Windows by
-  @KumarADITHYA123 in
-  [#23505](https://github.com/google-gemini/gemini-cli/pull/23505)
-- ci: robust stale issue lifecycle and consolidated triage labels by
-  @cocosheng-g in
-  [#27015](https://github.com/google-gemini/gemini-cli/pull/27015)
-- fix(context): Ensure last message is processed. by @joshualitt in
-  [#27232](https://github.com/google-gemini/gemini-cli/pull/27232)
-- chore/release: bump version to 0.44.0-nightly.20260521.g57c42a5c4 by
-  @gemini-cli-robot in
-  [#27324](https://github.com/google-gemini/gemini-cli/pull/27324)
-- fix(ui): added volta to auto update check by @devr0306 in
-  [#27353](https://github.com/google-gemini/gemini-cli/pull/27353)
-- perf: optimize issue triage and lifecycle management by @cocosheng-g in
-  [#27346](https://github.com/google-gemini/gemini-cli/pull/27346)
+  [#27391](https://github.com/google-gemini/gemini-cli/pull/27391)
+- Update default auto routing by @DavidAPierce in
+  [#27071](https://github.com/google-gemini/gemini-cli/pull/27071)
+- fix(core): bypass routing classifiers to prevent orphaned function response
+  errors by @danielweis in
+  [#27389](https://github.com/google-gemini/gemini-cli/pull/27389)
+- fix(core): suppress PTY resize EBADF errors by @scidomino in
+  [#27461](https://github.com/google-gemini/gemini-cli/pull/27461)
+- fix(core): prevent blacklist bypass in mcp list by @ompatel-aiml in
+  [#27377](https://github.com/google-gemini/gemini-cli/pull/27377)
+- fix(cli): ignore unmapped vim normal keys by @MukundaKatta in
+  [#27102](https://github.com/google-gemini/gemini-cli/pull/27102)
 
 **Full Changelog**:
-https://github.com/google-gemini/gemini-cli/compare/v0.43.0-preview.1...v0.44.0-preview.0
+https://github.com/google-gemini/gemini-cli/compare/v0.44.0-preview.0...v0.45.0-preview.1

packages/cli/index.ts

@@ -17,17 +17,24 @@ import {
 
 // --- Global Entry Point ---
 
-// Suppress known race condition error in node-pty on Windows
+// Suppress known race condition error in node-pty on Windows and Linux
 // Tracking bug: https://github.com/microsoft/node-pty/issues/827
 process.on('uncaughtException', (error) => {
-  if (
-    process.platform === 'win32' &&
-    error instanceof Error &&
-    error.message === 'Cannot resize a pty that has already exited'
-  ) {
-    // This error happens on Windows with node-pty when resizing a pty that has just exited.
-    // It is a race condition in node-pty that we cannot prevent, so we silence it.
-    return;
+  if (error instanceof Error) {
+    const message = error.message || '';
+    const isPtyResizeError =
+      message === 'Cannot resize a pty that has already exited';
+    const isEbadfError =
+      message.includes('EBADF') ||
+      (error as { code?: string }).code === 'EBADF';
+    const isFromNodePty =
+      error.stack?.includes('node-pty') || error.stack?.includes('PtyResize');
+
+    if ((isPtyResizeError || isEbadfError) && isFromNodePty) {
+      // This error happens with node-pty when resizing a pty that has just exited.
+      // It is a race condition in node-pty that we cannot prevent, so we silence it.
+      return;
+    }
   }
 
   // For other errors, we rely on the default behavior, but since we attached a listener,

packages/cli/src/commands/mcp/list.test.ts

@@ -475,4 +475,258 @@ describe('mcp list command', () => {
     );
     expect(mockedCreateTransport).not.toHaveBeenCalled();
   });
+
+  it('should block servers excluded by user settings even if workspace settings override/clear the excluded list', async () => {
+    const mockSettings = createMockSettings({
+      user: {
+        path: '/user/settings.json',
+        settings: {
+          mcp: {
+            excluded: ['blocked-server'],
+          },
+        },
+        originalSettings: {
+          mcp: {
+            excluded: ['blocked-server'],
+          },
+        },
+      },
+      workspace: {
+        path: '/workspace/settings.json',
+        settings: {
+          mcp: {
+            excluded: [],
+          },
+        },
+        originalSettings: {
+          mcp: {
+            excluded: [],
+          },
+        },
+      },
+      mcpServers: {
+        'blocked-server': { command: '/test/server' },
+      },
+      isTrusted: true,
+      merged: {
+        mcp: {
+          excluded: [], // workspace has overridden user settings!
+        },
+        mcpServers: {
+          'blocked-server': { command: '/test/server' },
+        },
+      },
+    });
+
+    mockedLoadSettings.mockReturnValue(mockSettings);
+
+    await listMcpServers();
+
+    expect(debugLogger.log).toHaveBeenCalledWith(
+      expect.stringContaining(
+        'blocked-server: /test/server  (stdio) - Blocked',
+      ),
+    );
+    expect(mockedCreateTransport).not.toHaveBeenCalled();
+  });
+
+  it('should block servers case-insensitively when excluded', async () => {
+    const mockSettings = createMockSettings({
+      user: {
+        path: '/user/settings.json',
+        settings: {
+          mcp: {
+            excluded: ['BLOCKED-server'],
+          },
+        },
+        originalSettings: {
+          mcp: {
+            excluded: ['BLOCKED-server'],
+          },
+        },
+      },
+      mcpServers: {
+        'blocked-server': { command: '/test/server' },
+      },
+      isTrusted: true,
+      merged: {
+        mcpServers: {
+          'blocked-server': { command: '/test/server' },
+        },
+      },
+    });
+
+    mockedLoadSettings.mockReturnValue(mockSettings);
+
+    await listMcpServers();
+
+    expect(debugLogger.log).toHaveBeenCalledWith(
+      expect.stringContaining(
+        'blocked-server: /test/server  (stdio) - Blocked',
+      ),
+    );
+    expect(mockedCreateTransport).not.toHaveBeenCalled();
+  });
+
+  it('should restrict allowed servers to the intersection of all defined allowlists', async () => {
+    const mockSettings = createMockSettings({
+      user: {
+        path: '/user/settings.json',
+        settings: {
+          mcp: {
+            allowed: ['allowed-server-1', 'allowed-server-2'],
+          },
+        },
+        originalSettings: {
+          mcp: {
+            allowed: ['allowed-server-1', 'allowed-server-2'],
+          },
+        },
+      },
+      workspace: {
+        path: '/workspace/settings.json',
+        settings: {
+          mcp: {
+            allowed: ['allowed-server-1', 'malicious-server'],
+          },
+        },
+        originalSettings: {
+          mcp: {
+            allowed: ['allowed-server-1', 'malicious-server'],
+          },
+        },
+      },
+      mcpServers: {
+        'allowed-server-1': { command: '/allowed/1' },
+        'allowed-server-2': { command: '/allowed/2' },
+        'malicious-server': { command: '/malicious' },
+      },
+      isTrusted: true,
+      merged: {
+        mcp: {
+          allowed: ['allowed-server-1', 'malicious-server'], // workspace overrode user settings!
+        },
+        mcpServers: {
+          'allowed-server-1': { command: '/allowed/1' },
+          'allowed-server-2': { command: '/allowed/2' },
+          'malicious-server': { command: '/malicious' },
+        },
+      },
+    });
+
+    mockedLoadSettings.mockReturnValue(mockSettings);
+    mockClient.connect.mockResolvedValue(undefined);
+    mockClient.ping.mockResolvedValue(undefined);
+
+    await listMcpServers();
+
+    // allowed-server-1 is in the intersection, so it should connect
+    expect(debugLogger.log).toHaveBeenCalledWith(
+      expect.stringContaining(
+        'allowed-server-1: /allowed/1  (stdio) - Connected',
+      ),
+    );
+    // allowed-server-2 and malicious-server are not in the intersection, so they should be Blocked
+    expect(debugLogger.log).toHaveBeenCalledWith(
+      expect.stringContaining(
+        'allowed-server-2: /allowed/2  (stdio) - Blocked',
+      ),
+    );
+    expect(debugLogger.log).toHaveBeenCalledWith(
+      expect.stringContaining(
+        'malicious-server: /malicious  (stdio) - Blocked',
+      ),
+    );
+
+    expect(mockedCreateTransport).toHaveBeenCalledTimes(1);
+    expect(mockedCreateTransport).toHaveBeenCalledWith(
+      'allowed-server-1',
+      expect.any(Object),
+      false,
+      expect.any(Object),
+    );
+  });
+
+  it('should block all servers if the intersection of user and workspace allowlists is empty (disjoint allowlists)', async () => {
+    const mockSettings = createMockSettings({
+      user: {
+        path: '/user/settings.json',
+        settings: {
+          mcp: {
+            allowed: ['user-allowed-server'],
+          },
+        },
+        originalSettings: {
+          mcp: {
+            allowed: ['user-allowed-server'],
+          },
+        },
+      },
+      workspace: {
+        path: '/workspace/settings.json',
+        settings: {
+          mcp: {
+            allowed: ['workspace-allowed-server'],
+          },
+        },
+        originalSettings: {
+          mcp: {
+            allowed: ['workspace-allowed-server'],
+          },
+        },
+      },
+      mcpServers: {
+        'user-allowed-server': { command: '/allowed/user' },
+        'workspace-allowed-server': { command: '/allowed/workspace' },
+      },
+      isTrusted: true,
+      merged: {
+        mcp: {
+          allowed: ['workspace-allowed-server'], // workspace override
+        },
+        mcpServers: {
+          'user-allowed-server': { command: '/allowed/user' },
+          'workspace-allowed-server': { command: '/allowed/workspace' },
+        },
+      },
+    });
+
+    mockedLoadSettings.mockReturnValue(mockSettings);
+
+    await listMcpServers();
+
+    // Since the intersection is empty ([]), both servers should be Blocked!
+    expect(debugLogger.log).toHaveBeenCalledWith(
+      expect.stringContaining(
+        'user-allowed-server: /allowed/user  (stdio) - Blocked',
+      ),
+    );
+    expect(debugLogger.log).toHaveBeenCalledWith(
+      expect.stringContaining(
+        'workspace-allowed-server: /allowed/workspace  (stdio) - Blocked',
+      ),
+    );
+    expect(mockedCreateTransport).not.toHaveBeenCalled();
+  });
+
+  it('should block all servers if allowlist is configured as empty array []', async () => {
+    const mockSettings = createMockSettings({
+      mcp: {
+        allowed: [], // empty allowlist configured!
+      },
+      mcpServers: {
+        'test-server': { command: '/test/server' },
+      },
+      isTrusted: true,
+    });
+
+    mockedLoadSettings.mockReturnValue(mockSettings);
+
+    await listMcpServers();
+
+    expect(debugLogger.log).toHaveBeenCalledWith(
+      expect.stringContaining('test-server: /test/server  (stdio) - Blocked'),
+    );
+    expect(mockedCreateTransport).not.toHaveBeenCalled();
+  });
 });

packages/cli/src/commands/mcp/list.ts

@@ -159,12 +159,16 @@ async function getServerStatus(
   server: MCPServerConfig,
   isTrusted: boolean,
   activeSettings: MergedSettings,
+  consolidatedExcluded: string[],
+  consolidatedAllowed: string[] | undefined,
 ): Promise<MCPServerStatus> {
   const mcpEnablementManager = McpServerEnablementManager.getInstance();
+
   const loadResult = await canLoadServer(serverName, {
     adminMcpEnabled: activeSettings.admin?.mcp?.enabled ?? true,
-    allowedList: activeSettings.mcp?.allowed,
-    excludedList: activeSettings.mcp?.excluded,
+    allowedList: consolidatedAllowed,
+    excludedList:
+      consolidatedExcluded.length > 0 ? consolidatedExcluded : undefined,
     enablement: mcpEnablementManager.getEnablementCallbacks(),
   });
 
@@ -227,6 +231,10 @@ export async function listMcpServers(
     );
   }
 
+  const consolidatedExcluded =
+    loadedSettings.getConsolidatedExcludedMcpServers();
+  const consolidatedAllowed = loadedSettings.getConsolidatedAllowedMcpServers();
+
   debugLogger.log('Configured MCP servers:\n');
 
   for (const serverName of serverNames) {
@@ -237,6 +245,8 @@ export async function listMcpServers(
       server,
       loadedSettings.isTrusted,
       activeSettings,
+      consolidatedExcluded,
+      consolidatedAllowed,
     );
 
     let statusIndicator = '';

packages/cli/src/config/config.ts

@@ -576,6 +576,7 @@ export interface LoadCliConfigOptions {
   };
   worktreeSettings?: WorktreeSettings;
   skipExtensions?: boolean;
+  loadedSettings?: LoadedSettings;
 }
 
 export async function loadCliConfig(
@@ -584,7 +585,12 @@ export async function loadCliConfig(
   argv: CliArgs,
   options: LoadCliConfigOptions = {},
 ): Promise<Config> {
-  const { cwd = process.cwd(), projectHooks, skipExtensions = false } = options;
+  const {
+    cwd = process.cwd(),
+    projectHooks,
+    skipExtensions = false,
+    loadedSettings,
+  } = options;
   const debugMode = isDebugMode(argv);
 
   const worktreeSettings =
@@ -985,12 +991,17 @@ export async function loadCliConfig(
     agents: settings.agents,
     adminSkillsEnabled,
     allowedMcpServers: mcpEnabled
-      ? (argv.allowedMcpServerNames ?? settings.mcp?.allowed)
+      ? (argv.allowedMcpServerNames ??
+        (loadedSettings
+          ? loadedSettings.getConsolidatedAllowedMcpServers()
+          : settings.mcp?.allowed))
       : undefined,
     blockedMcpServers: mcpEnabled
       ? argv.allowedMcpServerNames
         ? undefined
-        : settings.mcp?.excluded
+        : loadedSettings
+          ? loadedSettings.getConsolidatedExcludedMcpServers()
+          : settings.mcp?.excluded
       : undefined,
     blockedEnvironmentVariables:
       settings.security?.environmentVariableRedaction?.blocked,

packages/cli/src/config/mcp/mcpServerEnablement.ts

@@ -119,7 +119,7 @@ export async function canLoadServer(
   }
 
   // 2. Allowlist check
-  if (config.allowedList && config.allowedList.length > 0) {
+  if (config.allowedList !== undefined) {
     const { found, deprecationWarning } = isInSettingsList(
       normalizedId,
       config.allowedList,

packages/cli/src/config/settings.test.ts

@@ -1109,6 +1109,77 @@ describe('Settings Loading and Merging', () => {
       });
     });
 
+    describe('LoadedSettings MCP consolidation', () => {
+      it('should consolidate mcp excluded list across all scopes', () => {
+        const loaded = new LoadedSettings(
+          {
+            path: '',
+            settings: { mcp: { excluded: ['system-excluded'] } },
+            originalSettings: {},
+          },
+          {
+            path: '',
+            settings: { mcp: { excluded: ['defaults-excluded'] } },
+            originalSettings: {},
+          },
+          {
+            path: '',
+            settings: { mcp: { excluded: ['user-excluded'] } },
+            originalSettings: {},
+          },
+          {
+            path: '',
+            settings: { mcp: { excluded: ['workspace-excluded'] } },
+            originalSettings: {},
+          },
+          true,
+        );
+
+        expect(loaded.getConsolidatedExcludedMcpServers()).toEqual([
+          'system-excluded',
+          'defaults-excluded',
+          'user-excluded',
+          'workspace-excluded',
+        ]);
+      });
+
+      it('should consolidate allowed mcp list via case-insensitive intersection', () => {
+        const loaded = new LoadedSettings(
+          {
+            path: '',
+            settings: { mcp: { allowed: ['Server-A', 'Server-B'] } },
+            originalSettings: {},
+          },
+          {
+            path: '',
+            settings: { mcp: { allowed: ['server-a', 'Server-C'] } },
+            originalSettings: {},
+          },
+          { path: '', settings: {}, originalSettings: {} }, // no allowlist in user
+          {
+            path: '',
+            settings: { mcp: { allowed: ['SERVER-A', 'Server-D'] } },
+            originalSettings: {},
+          },
+          true,
+        );
+
+        expect(loaded.getConsolidatedAllowedMcpServers()).toEqual(['Server-A']);
+      });
+
+      it('should return undefined allowed list if no scopes define one', () => {
+        const loaded = new LoadedSettings(
+          { path: '', settings: {}, originalSettings: {} },
+          { path: '', settings: {}, originalSettings: {} },
+          { path: '', settings: {}, originalSettings: {} },
+          { path: '', settings: {}, originalSettings: {} },
+          true,
+        );
+
+        expect(loaded.getConsolidatedAllowedMcpServers()).toBeUndefined();
+      });
+    });
+
     describe('compressionThreshold settings', () => {
       it.each([
         {

packages/cli/src/config/settings.ts

@@ -509,6 +509,51 @@ export class LoadedSettings {
     this._remoteAdminSettings = { admin };
     this._merged = this.computeMergedSettings();
   }
+
+  /**
+   * Returns a consolidated list of excluded MCP servers across all settings files.
+   */
+  getConsolidatedExcludedMcpServers(): string[] {
+    const scopes = [
+      this.system,
+      this.systemDefaults,
+      this.user,
+      this.workspace,
+    ];
+    return scopes.flatMap((scope) => {
+      const excluded = scope?.settings?.mcp?.excluded;
+      return Array.isArray(excluded) ? excluded : [];
+    });
+  }
+
+  /**
+   * Returns a consolidated list of allowed MCP servers (via intersection of all defined lists).
+   */
+  getConsolidatedAllowedMcpServers(): string[] | undefined {
+    const scopes = [
+      this.system,
+      this.systemDefaults,
+      this.user,
+      this.workspace,
+    ];
+    const definedAllowlists = scopes.flatMap((scope) => {
+      const allowed = scope?.settings?.mcp?.allowed;
+      return Array.isArray(allowed) ? [allowed] : [];
+    });
+
+    if (definedAllowlists.length === 0) {
+      return undefined;
+    }
+
+    return definedAllowlists.reduce((acc, current) => {
+      const normalizedCurrent = new Set(
+        current.map((item) => item.toLowerCase().trim()),
+      );
+      return acc.filter((item) =>
+        normalizedCurrent.has(item.toLowerCase().trim()),
+      );
+    });
+  }
 }
 
 function findEnvFile(

packages/cli/src/gemini.tsx

@@ -499,6 +499,7 @@ export async function main() {
   const partialConfig = await loadCliConfig(settings.merged, sessionId, argv, {
     projectHooks: settings.workspace.settings.hooks,
     skipExtensions: true,
+    loadedSettings: settings,
   });
 
   adminControlsListner.setConfig(partialConfig);
@@ -627,6 +628,7 @@ export async function main() {
     config = await loadCliConfig(settings.merged, sessionId, argv, {
       projectHooks: settings.workspace.settings.hooks,
       worktreeSettings: worktreeInfo,
+      loadedSettings: settings,
     });
     loadConfigHandle?.end();
 

packages/cli/src/ui/hooks/vim-passthrough.test.tsx

@@ -81,4 +81,24 @@ describe('useVim passthrough', () => {
 
     expect(handled).toBe(false);
   });
+
+  it.each(['H', 'M', 'Q', 'm'])(
+    'should ignore unmapped printable key %s in NORMAL mode',
+    async (sequence) => {
+      mockVimContext.vimMode = 'NORMAL';
+      const { result } = await renderHook(() =>
+        useVim(mockBuffer as TextBuffer),
+      );
+
+      let handled = false;
+      act(() => {
+        handled = result.current.handleInput(
+          createKey({ name: sequence, sequence, insertable: true }),
+        );
+      });
+
+      expect(handled).toBe(true);
+      expect(mockBuffer.handleInput).not.toHaveBeenCalled();
+    },
+  );
 });

packages/cli/src/ui/hooks/vim.ts

@@ -1486,8 +1486,14 @@ export function useVim(buffer: TextBuffer, onSubmit?: (value: string) => void) {
             // Unknown command, clear count and pending states
             dispatch({ type: 'CLEAR_PENDING_STATES' });
 
-            // Ignore any Insertable key in Normal Mode
-            if (normalizedKey.insertable) {
+            // Ignore unmapped Insertable keys in Normal Mode, but let
+            // modifier-key chords (ctrl/alt/cmd) fall through to other handlers.
+            if (
+              normalizedKey.insertable &&
+              !normalizedKey.ctrl &&
+              !normalizedKey.alt &&
+              !normalizedKey.cmd
+            ) {
               return true;
             }
 

packages/core/src/context/contextManager.ts

@@ -139,11 +139,7 @@ export class ContextManager {
         this.hasPerformedHotStart = true;
         if (this.buffer.nodes.length > 0) {
           const nodesForHotStart = [...this.buffer.nodes, ...previewNodes];
-          await this.performHotStartCalibration(
-            nodesForHotStart,
-            this.env.model,
-            abortSignal,
-          );
+          await this.performHotStartCalibration(nodesForHotStart, abortSignal);
         }
       }
     })();
@@ -472,7 +468,6 @@ export class ContextManager {
 
   private async performHotStartCalibration(
     nodes: readonly ConcreteNode[],
-    model: string,
     abortSignal?: AbortSignal,
   ) {
     const history = this.env.graphMapper.fromGraph(nodes);
@@ -480,7 +475,7 @@ export class ContextManager {
 
     try {
       const { totalTokens } = await this.env.llmClient.countTokens({
-        modelConfigKey: { model },
+        modelConfigKey: { model: 'context-calibrator' },
         contents,
         abortSignal,
       });

packages/core/src/context/initializer.ts

@@ -116,7 +116,6 @@ export async function initializeContextManager(
 
   const env = new ContextEnvironmentImpl(
     () => config.getBaseLlmClient(),
-    () => config.getActiveModel(),
     config.getSessionId(),
     lastPromptId,
     logDir,

packages/core/src/context/pipeline/environment.ts

@@ -19,7 +19,6 @@ export interface RenderOptions {
 
 export interface ContextEnvironment {
   readonly llmClient: BaseLlmClient;
-  readonly model: string;
   readonly promptId: string;
   readonly sessionId: string;
   readonly traceDir: string;

packages/core/src/context/pipeline/environmentImpl.test.ts

@@ -21,7 +21,6 @@ describe('ContextEnvironmentImpl', () => {
 
     const env = new ContextEnvironmentImpl(
       () => mockLlmClient,
-      () => 'mock-model',
       'mock-session',
       'mock-prompt',
       '/tmp/trace',

packages/core/src/context/pipeline/environmentImpl.ts

@@ -19,7 +19,6 @@ export class ContextEnvironmentImpl implements ContextEnvironment {
 
   constructor(
     private readonly llmClientProvider: () => BaseLlmClient,
-    private readonly activeModel: () => string,
     readonly sessionId: string,
     readonly promptId: string,
     readonly traceDir: string,
@@ -38,8 +37,4 @@ export class ContextEnvironmentImpl implements ContextEnvironment {
   get llmClient(): BaseLlmClient {
     return this.llmClientProvider();
   }
-
-  get model(): string {
-    return this.activeModel();
-  }
 }

packages/core/src/context/system-tests/simulationHarness.ts

@@ -68,7 +68,6 @@ export class SimulationHarness {
 
     this.env = new ContextEnvironmentImpl(
       () => mockLlmClient,
-      () => 'mock-model',
       'sim-prompt',
       'sim-session',
       mockTempDir,

packages/core/src/context/testing/contextTestUtils.ts

@@ -181,7 +181,6 @@ export function createMockEnvironment(
 
   let env = new ContextEnvironmentImpl(
     () => llmClient as BaseLlmClient,
-    () => 'mock-model',
     'mock-session',
     'mock-prompt-id',
     '/tmp/.gemini/trace',
@@ -197,7 +196,6 @@ export function createMockEnvironment(
     if (overrides.llmClient) {
       env = new ContextEnvironmentImpl(
         () => overrides.llmClient!,
-        () => overrides.model ?? env.model,
         env.sessionId,
         env.promptId,
         env.traceDir,
@@ -278,7 +276,6 @@ export function createMockContextConfig(
     getTargetDir: vi.fn().mockReturnValue('/tmp'),
     getSessionId: vi.fn().mockReturnValue('test-session'),
     getExperimentalContextManagementConfig: vi.fn().mockReturnValue(undefined),
-    getActiveModel: vi.fn().mockReturnValue('mock-model'),
   };
 
   // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion
@@ -306,7 +303,6 @@ export function setupContextComponentTest(
 
   const env = new ContextEnvironmentImpl(
     () => config.getBaseLlmClient(),
-    () => config.getActiveModel(),
     'test prompt-id',
     'test-session',
     '/tmp',

packages/core/src/services/shellExecutionService.ts

@@ -37,6 +37,7 @@ import {
 } from './sandboxManager.js';
 import type { SandboxConfig } from '../config/config.js';
 import { killProcessGroup } from '../utils/process-utils.js';
+import { isNodeError } from '../utils/errors.js';
 import {
   ExecutionLifecycleService,
   type ExecutionHandle,
@@ -1507,30 +1508,45 @@ export class ShellExecutionService {
     }
 
     const activePty = this.activePtys.get(pid);
-    if (activePty) {
-      try {
-        activePty.ptyProcess.resize(cols, rows);
-        activePty.headlessTerminal.resize(cols, rows);
-      } catch (e) {
-        // Ignore errors if the pty has already exited, which can happen
-        // due to a race condition between the exit event and this call.
-        // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion
-        const err = e as { code?: string; message?: string };
-        const isEsrch = err.code === 'ESRCH';
-        const isWindowsPtyError = err.message?.includes(
-          'Cannot resize a pty that has already exited',
-        );
+    if (!activePty) {
+      return;
+    }
 
-        if (isEsrch || isWindowsPtyError) {
-          // On Unix, we get an ESRCH error.
-          // On Windows, we get a message-based error.
-          // In both cases, it's safe to ignore.
-        } else {
-          throw e;
+    // Skip Windows: process.kill(pid, 0) is heavy and native errors are catchable there.
+    if (process.platform !== 'win32') {
+      try {
+        process.kill(pid, 0);
+      } catch (e) {
+        // Bail only if the process is explicitly confirmed dead (ESRCH).
+        if (isNodeError(e) && e.code === 'ESRCH') {
+          return;
         }
       }
     }
 
+    try {
+      activePty.ptyProcess.resize(cols, rows);
+      activePty.headlessTerminal.resize(cols, rows);
+    } catch (e) {
+      // Ignore errors if the pty has already exited, which can happen
+      // due to a race condition between the exit event and this call.
+      // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion
+      const err = e as { code?: string; message?: string };
+      const isEsrch = err.code === 'ESRCH';
+      const isEbadf = err.code === 'EBADF' || err.message?.includes('EBADF');
+      const isWindowsPtyError = err.message?.includes(
+        'Cannot resize a pty that has already exited',
+      );
+
+      if (isEsrch || isEbadf || isWindowsPtyError) {
+        // On Unix, we get an ESRCH or EBADF error.
+        // On Windows, we get a message-based error.
+        // In both cases, it's safe to ignore.
+      } else {
+        throw e;
+      }
+    }
+
     // Force emit the new state after resize
     if (activePty) {
       const endLine = activePty.headlessTerminal.buffer.active.length;