Method GetExecutionSteps

pkg/workflow/gemini_engine.go:155–367

GetExecutionSteps returns the GitHub Actions steps for executing Gemini

(workflowData *WorkflowData, logFile string)

// GetExecutionSteps returns the GitHub Actions steps for executing Gemini
func (e *GeminiEngine) GetExecutionSteps(workflowData *WorkflowData, logFile string) []GitHubActionStep {
	geminiLog.Printf("Generating execution steps for Gemini engine: workflow=%s, firewall=%v", workflowData.Name, isFirewallEnabled(workflowData))

	var steps []GitHubActionStep

	// Write .gemini/settings.json with context.includeDirectories and tools.core.
	// This step runs after the MCP gateway setup (which may have written mcpServers config)
	// and merges the context/tools settings into any existing settings.json.
	settingsStep := e.generateGeminiSettingsStep(workflowData)
	steps = append(steps, settingsStep)

	// Build gemini CLI arguments based on configuration
	var geminiArgs []string

	// Model is passed via the native GEMINI_MODEL environment variable only when explicitly
	// configured. When not configured, the Gemini CLI uses its built-in default model.
	// This avoids embedding the value directly in the shell command (which fails template injection
	// validation for GitHub Actions expressions like ${{ inputs.model }}).
	modelConfigured := workflowData.EngineConfig != nil && workflowData.EngineConfig.Model != ""

	// Gemini CLI reads MCP config from .gemini/settings.json (project-level)
	// The conversion script (convert_gateway_config_gemini.sh) writes settings.json
	// during the MCP setup step, so no --mcp-config flag is needed here.

	// Auto-approve all tool executions (equivalent to Codex's --dangerously-bypass-approvals-and-sandbox)
	// Without this, Gemini CLI's default approval mode rejects tool calls with "Tool execution denied by policy"
	geminiArgs = append(geminiArgs, "--yolo")

	// Skip the workspace trust check so --yolo is not overridden to "default" approval mode.
	// Gemini CLI v1.x checks whether the working directory is trusted and overrides --yolo
	// with "default" approval mode (exit code 55) when the folder is untrusted.
	// GEMINI_CLI_TRUST_WORKSPACE=true (also set in the step env) handles the same case via
	// environment variable, but --skip-trust is more reliable when AWF's sandbox does not
	// forward all host environment variables into the container.
	geminiArgs = append(geminiArgs, "--skip-trust")

	// Add streaming JSON output (JSONL format, compatible with the log parser)
	geminiArgs = append(geminiArgs, "--output-format", "stream-json")

	// Note: the --prompt argument is appended raw after shellJoinArgs below because it contains
	// a shell command substitution ("$(cat ...)") that must NOT go through shellEscapeArg —
	// single-quoting it would prevent shell expansion at runtime.

	// Build the command
	commandName := "gemini"
	if workflowData.EngineConfig != nil && workflowData.EngineConfig.Command != "" {
		commandName = workflowData.EngineConfig.Command
	}

	// Append the prompt arg raw (not through shellJoinArgs) to preserve shell expansion
	geminiCommand := fmt.Sprintf(`%s %s --prompt "$(cat /tmp/gh-aw/aw-prompts/prompt.txt)"`, commandName, shellJoinArgs(geminiArgs))
	geminiCommand = getWorkspaceCommandPrefixFor(workflowData.EngineConfig) + geminiCommand

	// Build the full command with AWF wrapping if enabled
	var command string
	firewallEnabled := isFirewallEnabled(workflowData)
	if firewallEnabled {
		// Get allowed domains: prefer the pre-warmed cache on WorkflowData to avoid