feat: add Gemini CLI support

Signed-off-by: minhdqdev <minhdq.dev@gmail.com>

Author: minhdqdev

sandboxes/base/Dockerfile

@@ -74,7 +74,8 @@ RUN npm install -g \
         tar@7.5.11 \
         @hono/node-server@1.19.11 \
         opencode-ai@1.2.18 \
-        @openai/codex@0.111.0
+        @openai/codex@0.111.0 \
+        @google/gemini-cli@0.34.0
 
 # GitHub CLI
 RUN curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
@@ -118,7 +119,7 @@ COPY policy.yaml /etc/openshell/policy.yaml
 COPY skills/ /sandbox/.agents/skills/
 
 # Set up sandbox user home directory
-RUN mkdir -p /sandbox/.claude/skills && \
+RUN mkdir -p /sandbox/.claude/skills /sandbox/.gemini && \
     # Create a writable venv using uv-managed Python 3.13.
     # Sandbox users can `uv pip install` (or `pip install`) into
     # this venv without touching the base image layer.

sandboxes/base/README.md

@@ -9,7 +9,7 @@ The foundational sandbox image that all other OpenShell Community sandbox images
 | OS | Ubuntu 24.04 |
 | Languages | `python3` (3.13), `node` (22.22.1) |
 | Package managers | `npm` (11.11.0), `uv` (0.10.8), `pip` |
-| Coding agents | `claude`, `opencode`, `codex` |
+| Coding agents | `claude`, `opencode`, `codex`, `gemini` |
 | Developer | `gh`, `git`, `vim`, `nano` |
 | Networking | `ping`, `dig`, `nslookup`, `nc`, `traceroute`, `netstat`, `curl` |
 

sandboxes/base/policy.yaml

@@ -159,3 +159,18 @@ network_policies:
     - path: /usr/lib/node_modules/opencode-ai/bin/.opencode
     - path: /usr/bin/node
     - path: /usr/local/bin/opencode
+
+  gemini:
+    name: gemini
+    endpoints:
+      - { host: generativelanguage.googleapis.com, port: 443 }
+      - { host: aiplatform.googleapis.com, port: 443 }
+      - { host: cloudcode-pa.googleapis.com, port: 443 }
+      - { host: accounts.google.com, port: 443 }
+      - { host: oauth2.googleapis.com, port: 443 }
+      - { host: www.googleapis.com, port: 443 }
+      - { host: iamcredentials.googleapis.com, port: 443 }
+    binaries:
+      - { path: /usr/bin/gemini }
+      - { path: /usr/lib/node_modules/@google/gemini-cli/dist/index.js }
+      - { path: /usr/bin/node }