Collaborating with Gemini

Use Gemini CLI as a collaborator while Codex remains the primary implementer.

The bridge script (scripts/gemini_bridge.py) wraps gemini -p (headless mode), returns structured JSON, and manages session continuity via SESSION_ID.

Safety

Gemini can read and write files in the workspace by default. The bridge does not restrict this.

To limit what Gemini can do:

• --sandbox — blocks shell commands and file writes. Recommended for review/consultation tasks.
• Include OUTPUT: Unified Diff Patch ONLY. Do not modify any files. in your prompt when requesting code changes. This is a convention, not enforced.

⚠️ --approval-mode plan does NOT reliably prevent writes — Gemini may self-approve plans and use shell commands to bypass file-write restrictions. Do not rely on it for safety.