[777genius]

Problem

Project installation must select Gemini's workspace configuration without redirecting the detected user profile or borrowing user-scoped ownership.

Changes

• Route owned skills and MCP entries to .gemini/skills and .gemini/settings.json using the validated project context.
• Preserve selected user-profile authority, project A/B isolation, exact-entry ownership, rollback, repeat reconciliation, and removal.
• Qualify Gemini's project component lifecycle in the catalog.
• Report configuration as prepared + installed. Workspace trust, system policy, native discovery, MCP initialization and tool execution remain separate evidence; a positive activation flag cannot manufacture it.
• Preserve disabled/restricted settings and report potentially shadowing .agents/skills entries.
• Support Gemini's pinned comment-only JSON grammar while retaining foreign comments; duplicate members and trailing commas remain rejected.
• Exercise the real UAP loader/planner/stager/provider composition for command/skill/MCP packages. New cross-layer tests live in providers to preserve the clients-no-upward architecture boundary.

Research and review

All client plans completed two independent review/fix rounds before implementation. Official Gemini CLI 0.65.0 release bytes were checksum-verified and actual version/skills/MCP help inspected in a fresh networkless namespace. This establishes help/schema evidence, not project runtime qualification.

This stack targets the project integration PR #472. Both independent implementation review/fix rounds are GO at the final code checkpoint. The PR records both reports, pinned research evidence and a current-core merge; no adapter code changed after the reviewed checkpoint.

Validation at the current checkpoint

• Project provider/nativeconfig contracts: PASS, including user/A/B byte and mode isolation, repeat reconciliation/verification, malformed settings, collisions and rollback after skill staging when MCP locking fails.
• Full Gemini, nativeconfig and domain tests: PASS.
• Exact golangci-lint 2.13.2 changed-line checks and full size/architecture gate: 0 issues.
• Post-merge project contracts across providers, nativeconfig, state and production CLI: PASS.
• Genuine native version/help inspection: PASS.
• Native project discovery, MCP handshake/tool execution, account/authentication and release qualification: not claimed.

Remaining before merge

Await the final cross-platform CI results, then merge this stack into #472. The composed saved-project lifecycle is being exercised in the parent integration. The two feature PRs remain unreleased.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 4e0956ea-0763-4643-9a6c-5ff6d9d9be59

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}