Gemini Session

Direct (review, analysis, quick edits — no git)

First run:

gemini -p "${PROMPT}" -o json --approval-mode auto_edit

Following runs:

gemini -p "${PROMPT}" -o json --approval-mode auto_edit -r ${SESSION_ID}

Worktree (implementation — sandboxed with git)

Claude prepares worktree, then launches Gemini:

1. git worktree add .worktrees/${NAME} -b ${NAME} main
2. Copy .env* files (incl. GOOGLE_API_KEY), run uv sync where needed

Select sandbox profile via env var. Git works natively — .git is not denied.

Profiles

code — git, edit, tests. No network.

cd .worktrees/${NAME} && SEATBELT_PROFILE=permissive-closed gemini -p "${PROMPT}" -o json -s -y

test — code + localhost (dev servers, browser tests).

cd .worktrees/${NAME} && SEATBELT_PROFILE=permissive-open gemini -p "${PROMPT}" -o json -s -y

e2e — test + controlled network via proxy.

cd .worktrees/${NAME} && SEATBELT_PROFILE=permissive-proxied gemini -p "${PROMPT}" -o json -s -y

Following runs — append -r ${SESSION_ID}:

cd .worktrees/${NAME} && SEATBELT_PROFILE=permissive-closed gemini -p "${PROMPT}" -o json -s -y -r ${SESSION_ID}

Additional writable directories

Use --include-directories for paths outside worktree (max 5):

gemini -p "${PROMPT}" -o json -s -y --include-directories /path/to/shared

Response parsing

-o json returns single JSON: {"session_id":"...","response":"...","stats":{...}}. -o stream-json streams JSONL events.

Parse session_id from response → set ${SESSION_ID} for -r resume.

If error or empty output: show stderr, STOP. Use Bash timeout >= 300000 for long-running tasks.

Sandbox profiles (macOS Seatbelt)

Custom profiles: .gemini/sandbox-macos-<name>.sb in project dir. Container sandbox (Docker/Podman): set GEMINI_SANDBOX=docker or podman.