feat(cli): add --safe-mode flag to disable all customizations for troubleshooting

packages/cli/src/config/config.test.ts

@@ -2721,6 +2721,140 @@ describe('loadCliConfig with includeDirectories', () => {
   });
 });
 
+describe('loadCliConfig safe mode', () => {
+  const originalArgv = process.argv;
+
+  beforeEach(() => {
+    vi.resetAllMocks();
+    vi.mocked(os.homedir).mockReturnValue('/mock/home/user');
+    vi.stubEnv('GEMINI_API_KEY', 'test-api-key');
+    vi.spyOn(process, 'cwd').mockReturnValue(
+      path.resolve(path.sep, 'home', 'user', 'project'),
+    );
+  });
+
+  afterEach(() => {
+    process.argv = originalArgv;
+    vi.unstubAllEnvs();
+    vi.restoreAllMocks();
+  });
+
+  it('should strip settings-sourced permissions in safe mode', async () => {
+    process.argv = ['node', 'script.js', '--safe-mode'];
+    const argv = await parseArguments();
+    const settings: Settings = {
+      permissions: {
+        allow: ['Bash(*)'],
+        ask: ['Edit'],
+        deny: ['ReadFile'],
+        autoMode: { hints: { allow: ['everything'] } },
+      },
+      tools: {
+        allowed: ['ShellTool'],
+        exclude: ['WriteFile'],
+      },
+    };
+    const config = await loadCliConfig(settings, argv, undefined, []);
+
+    expect(config.getPermissionsAllow()).toEqual([]);
+    expect(config.getPermissionsAsk()).toEqual([]);
+    // mergedDeny should not contain settings-sourced rules.
+    // Non-interactive mode exclusions (run_shell_command, monitor, edit,
+    // write_file) are expected since no prompt/interactive flag was passed.
+    expect(config.getPermissionsDeny()).not.toContain('WriteFile');
+    expect(config.getAutoModeSettings()).toEqual({});
+  });
+
+  it('should ignore settings-sourced coreTools in safe mode', async () => {
+    process.argv = ['node', 'script.js', '--safe-mode'];
+    const argv = await parseArguments();
+    const settings: Settings = {
+      tools: {
+        core: [ToolNames.WEB_FETCH],
+      },
+    };
+    const config = await loadCliConfig(settings, argv, undefined, []);
+
+    expect(config.getCoreTools()).toBeUndefined();
+  });
+
+  it('should ignore settings-sourced allowedTools in safe mode but keep argv ones', async () => {
+    process.argv = [
+      'node',
+      'script.js',
+      '--safe-mode',
+      '--allowed-tools',
+      'ReadFile',
+    ];
+    const argv = await parseArguments();
+    const settings: Settings = {
+      tools: {
+        allowed: ['ShellTool'],
+      },
+    };
+    const config = await loadCliConfig(settings, argv, undefined, []);
+
+    expect(config.getPermissionsAllow()).toContain('ReadFile');
+    expect(config.getPermissionsAllow()).not.toContain('ShellTool');
+  });
+
+  it('should ignore settings-sourced approvalMode in safe mode', async () => {
+    process.argv = ['node', 'script.js', '--safe-mode'];
+    const argv = await parseArguments();
+    const settings = {
+      tools: {
+        approvalMode: 'yolo',
+      },
+    } as unknown as Settings;
+    const config = await loadCliConfig(settings, argv, undefined, []);
+
+    expect(config.getApprovalMode()).toBe(ServerConfig.ApprovalMode.DEFAULT);
+  });
+
+  it('should ignore settings-sourced disabled slash commands in safe mode', async () => {
+    process.argv = ['node', 'script.js', '--safe-mode'];
+    const argv = await parseArguments();
+    const settings: Settings = {
+      slashCommands: {
+        disabled: ['/review', '/bug'],
+      },
+    };
+    const config = await loadCliConfig(settings, argv, undefined, []);
+
+    expect(config.getDisabledSlashCommands()).toEqual([]);
+  });
+
+  it('should ignore settings-sourced disabledTools in safe mode', async () => {
+    process.argv = ['node', 'script.js', '--safe-mode'];
+    const argv = await parseArguments();
+    const settings: Settings = {
+      tools: {
+        disabled: ['WebFetch', 'ReadFile'],
+      },
+    };
+    const config = await loadCliConfig(settings, argv, undefined, []);
+
+    expect(config.getDisabledTools().size).toBe(0);
+  });
+
+  it('should respect safe mode via QWEN_CODE_SAFE_MODE env var', async () => {
+    vi.stubEnv('QWEN_CODE_SAFE_MODE', 'true');
+    process.argv = ['node', 'script.js'];
+    const argv = await parseArguments();
+    const settings: Settings = {
+      permissions: {
+        allow: ['Bash(*)'],
+        autoMode: { hints: { allow: ['everything'] } },
+      },
+    };
+    const config = await loadCliConfig(settings, argv, undefined, []);
+
+    expect(config.getPermissionsAllow()).toEqual([]);
+    expect(config.getAutoModeSettings()).toEqual({});
+    expect(config.isSafeMode()).toBe(true);
+  });
+});
+
 describe('loadCliConfig chatCompression', () => {
   const originalArgv = process.argv;