fix: add --yolo flag to Gemini CLI for auto-approving tool executions

pkg/workflow/gemini_engine.go

@@ -176,6 +176,10 @@ func (e *GeminiEngine) GetExecutionSteps(workflowData *WorkflowData, logFile str
 	// The conversion script (convert_gateway_config_gemini.sh) writes settings.json
 	// during the MCP setup step, so no --mcp-config flag is needed here.
 
+	// Auto-approve all tool executions (equivalent to Codex's --dangerously-bypass-approvals-and-sandbox)
+	// Without this, Gemini CLI's default approval mode rejects tool calls with "Tool execution denied by policy"
+	geminiArgs = append(geminiArgs, "--yolo")
+
 	// Add headless mode with JSON output
 	geminiArgs = append(geminiArgs, "--output-format", "json")
 

pkg/workflow/gemini_engine_test.go

@@ -151,6 +151,7 @@ func TestGeminiEngineExecution(t *testing.T) {
 		assert.Contains(t, stepContent, "name: Run Gemini", "Should have correct step name")
 		assert.Contains(t, stepContent, "id: agentic_execution", "Should have agentic_execution ID")
 		assert.Contains(t, stepContent, "gemini", "Should invoke gemini command")
+		assert.Contains(t, stepContent, "--yolo", "Should include --yolo flag for auto-approving tool executions")
 		assert.Contains(t, stepContent, "--output-format json", "Should use JSON output format")
 		assert.Contains(t, stepContent, `--prompt "$(cat /tmp/gh-aw/aw-prompts/prompt.txt)"`, "Should include prompt argument with correct shell quoting")
 		assert.Contains(t, stepContent, "/tmp/test.log", "Should include log file")