Antigravity cli

[anantshri]

https://antigravity.google/product/antigravity-cli

[ai-anant]

🤖 Watchdog analysis

Root cause: aidc only knows five coding agents. Google Antigravity CLI (agy) is not installed in the image and is not a dispatch target, so aidc agy / aidc antigravity dies as unknown command.

Current support surface (same as #27 / #30):

1. Image install — templates/devcontainer/Dockerfile.tmpl lines 199–216: one RUN that mkdirs per-agent homedirs and curl | bashs claude / codex / opencode / cursor-agent / grok into ~/.local/bin.
2. Command dispatch — lib/aidc.sh top case lines 83–99 → aidc::cmd_* (702–757) → aidc::run_tool (875–934).
3. State volumes — templates/devcontainer/compose.yaml.tmpl lines 67–89: claude_home, codex_home, opencode_home, cursor_agent_home, grok_home. No Gemini/Antigravity volume.

Antigravity CLI is a native prebuilt binary (not npm). That matches aidc’s “no Node in the agent install” invariant (and PR #17 dropping nodejs):

• Install: curl -fsSL https://antigravity.google/cli/install.sh | bash → ~/.local/bin/agy (use --skip-path / --skip-aliases in Docker so it does not rewrite shell rc).
• Invoke: agy (TUI). Docs also mention --sandbox and --dangerously-skip-permissions.
• Config / history live under ~/.gemini/, not ~/.agy: settings at ~/.gemini/antigravity-cli/settings.json, transcripts under ~/.gemini/antigravity-cli/. This is leftover from Gemini CLI; Flutter docs treat Antigravity CLI as the Gemini CLI replacement.
• Auth: OS keyring first, else browser Google Sign-In. Over SSH it prints a URL + paste-back code (no local browser).
• Auto-update lock files live under ~/.gemini/antigravity-cli/updater/; AGY_CLI_DISABLE_AUTO_UPDATE=true is the documented opt-out.

Existing PR status: No open PR references #28, agy, or Antigravity. Timeline: none.

Related but not this issue:

• #27 — catalogue of other agents (Gemini CLI was the closest named cousin; Antigravity CLI is the current Google terminal agent).
• #15 (AIDC_AGENTS) — opt-in which agents get curl | bash at image build. New agent should plug into that list, not the unconditional RUN.
• #30 — per-agent install layers / volumes so adding agy does not bloat every project image.

Fix guidance: Wiring the binary is small; auth + homedir are the real work. Do not land a half-wired aidc agy that cannot log in inside the container.

1. Dockerfile.tmpl (or the feat: make coding-agent installs opt-in per project (AIDC_AGENTS) #15 AIDC_AGENTS case): mkdir -p /home/vscode/.gemini and
   curl -fsSL https://antigravity.google/cli/install.sh | bash -s -- --skip-path --skip-aliases
   (confirm the script accepts those flags after | bash -s --). Sanity-check agy --version. Set ENV AGY_CLI_DISABLE_AUTO_UPDATE=true so the binary in ~/.local/bin is not rewritten at runtime (same class of bug as Grok vs grok_home).

2. compose.yaml.tmpl: named volume gemini_home → /home/vscode/.gemini. Do not bind-mount the host ~/.gemini — that would leak host Gemini/Antigravity credentials and history into the container (violates the isolation README).

3. lib/aidc.sh:

   • Top case: agy|antigravity) aidc::cmd_agy "$@" ;; (pick one canonical name; alias the other).
   • aidc::cmd_agy() { aidc::run_tool "agy" "" "$@"; }
   • run_tool case: agy) command=("agy" "--dangerously-skip-permissions");; — confirm the flag name against agy --help before copying Claude’s flag. Container is already the sandbox; do not also run Antigravity’s inner sandbox unless you want nested denial.
   • Help text / README / docs/install.md agent table.

4. Auth in the container (blockers to decide before coding):

   • No host keyring in the Debian/vscode image, so silent keyring sign-in will fail.
   • Browser open from agy inside Docker will not reach the user’s macOS browser.
   • The SSH/device-code URL loop is the workable path: aidc agy must keep a TTY (compose exec without -T for this tool — today aidc::compose_exec needs a check that it is interactive). Document “paste the URL on the host, paste the code back”.
   • Optional later: pass a pre-created token via env if Google documents one (none found in current public install docs). Do not scrape the host keyring for Google tokens.

5. Session sync: auto_sync_sessions currently maps claude/codex/opencode/grok only. Transcripts are JSONL under ~/.gemini/antigravity-cli/. Either add an agy branch that copies that dir to /insights, or leave it on the volume only (same as cursor-agent today).

6. Compose with feat: make coding-agent installs opt-in per project (AIDC_AGENTS) #15 / Supporting seperate coding agent layers #30: if those merge first, agy belongs in AIDC_AGENTS / an agent store volume, not another line in the five-installer RUN. Do not add a sixth always-on binary to the default image.

7. Pitfalls:

   • Homedir is ~/.gemini, shared conceptually with any future Gemini CLI; one volume is enough, but wiping it wipes both.
   • First-launch TUI (theme, rendering, workspace trust) is interactive — fine for aidc agy, bad for CI.
   • Unpinned curl | bash is the same supply-chain issue as the other five installers; do not make this agent the one you invent pinning for unless you pin all of them.

PR status: No new PR. Not a quick fix — install line is easy, but volume + TTY auth + flag check + interaction with open PRs #15/#30 are not a ~50-line well-understood patch. No duplicate PR opened.

Verification: After implementation:

• agy --version inside a fresh container; binary under /home/vscode/.local/bin, not inside the gemini_home volume.
• aidc agy presents the SSH-style auth URL (not a failed xdg-open).
• bash -n lib/aidc.sh, shellcheck -x lib/aidc.sh, .github/scripts/bash-compat-check.sh.
• Confirm host ~/.gemini is untouched.