feat(cli): add temporary flag to disable workspace policies

[Abhijit-2592]

Summary

Introduces a temporary disableWorkspacePolicies flag to the policy resolution logic. This allows bypassing workspace-level policy resolution even when a folder is trusted, helping to reduce friction during the auto-acceptance phase.

Details

• Added disableWorkspacePolicies (default false) and its setter setDisableWorkspacePolicies to packages/cli/src/config/policy.ts.
• Updated resolveWorkspacePolicyState to respect this flag.
• Added a comprehensive unit test in packages/cli/src/config/policy.test.ts to verify the new behavior.
• This change is part of an effort to streamline workspace trust and policy management.

Related Issues

Closes #20522

How to Validate

Run the unit tests specifically for policy configuration:

npm test -w @google/gemini-cli -- src/config/policy.test.ts

Verify that the new test case "should return empty state if disableWorkspacePolicies is true even if folder is trusted" passes.

Pre-Merge Checklist

• Updated relevant documentation and README (if needed)
• Added/updated tests (if needed)
• Noted breaking changes (if any)
• Validated on required platforms/methods:
  • MacOS
    • npm run
    • npx
    • Docker
    • Podman
    • Seatbelt

[gemini-code-assist]

Summary of Changes

Hello, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request implements a temporary mechanism to disable workspace-level policy resolution within the CLI. This change aims to streamline the auto-acceptance phase of policy management by providing a way to bypass workspace policies, even in trusted folders, thereby reducing friction and improving workflow efficiency for specific scenarios.

Highlights

• New Feature Flag: Introduced a temporary disableWorkspacePolicies flag and its corresponding setter function to control workspace policy resolution.
• Policy Resolution Logic Update: Modified the resolveWorkspacePolicyState function to conditionally bypass workspace policy resolution when the disableWorkspacePolicies flag is active.
• Unit Test Coverage: Added a new comprehensive unit test to verify that policy resolution correctly returns an empty state when disableWorkspacePolicies is set to true, even if the folder is trusted.

Changelog

• packages/cli/src/config/policy.test.ts
  • Imported disableWorkspacePolicies and setDisableWorkspacePolicies for testing purposes.
  • Added a new test case to assert that policy resolution yields an empty state when disableWorkspacePolicies is enabled.
  • Updated the description of an existing test case for improved clarity.
• packages/cli/src/config/policy.ts
  • Added a new let variable disableWorkspacePolicies initialized to false.
  • Introduced an exported function setDisableWorkspacePolicies to programmatically control the disableWorkspacePolicies flag.
  • Modified the resolveWorkspacePolicyState function to incorporate a conditional check for !disableWorkspacePolicies before proceeding with workspace policy evaluation.

Activity

• No specific activity (comments, reviews, or progress updates) has been recorded for this pull request yet.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[gemini-code-assist]

Code Review

This pull request introduces a temporary disableWorkspacePolicies flag to bypass workspace policy resolution, which is a useful feature for testing and reducing friction. The implementation is straightforward and includes a corresponding unit test. The existing feedback suggesting refactoring the new test case to use beforeEach/afterEach for state management is valid and aligns with repository testing conventions, so it has been kept.

[github-actions]

Size Change: +64 B (0%)

Total Size: 25.7 MB

ℹ️ View Unchanged

Filename	Size	Change
./bundle/gemini.js	25.2 MB	+64 B (0%)
./bundle/node_modules/@google/gemini-cli-devtools/dist/client/main.js	221 kB	0 B
./bundle/node_modules/@google/gemini-cli-devtools/dist/src/_client-assets.js	227 kB	0 B
./bundle/node_modules/@google/gemini-cli-devtools/dist/src/index.js	11.5 kB	0 B
./bundle/node_modules/@google/gemini-cli-devtools/dist/src/types.js	132 B	0 B
./bundle/sandbox-macos-permissive-open.sb	890 B	0 B
./bundle/sandbox-macos-permissive-proxied.sb	1.31 kB	0 B
./bundle/sandbox-macos-restrictive-open.sb	3.36 kB	0 B
./bundle/sandbox-macos-restrictive-proxied.sb	3.56 kB	0 B
./bundle/sandbox-macos-strict-open.sb	4.82 kB	0 B
./bundle/sandbox-macos-strict-proxied.sb	5.02 kB	0 B

_{compressed-size-action}