Antigravity 1.3.3

在長篇對話裡向上捲動翻查舊紀錄，很容易讀著讀著就忘記眼前這段回答最初是在回應哪一道問題。現在處於無閃爍模式時，產生你正在閱讀的這則回覆的提示詞，會直接常駐在視窗頂部。

翻閱冗長的分析報告時更能隨時掌握脈絡，點擊該標頭還能立刻跳轉回最初提問的位置。

串接大量常用工具後，若每次發問都得等 AI 重新檢視清單才能上工，對話節奏難免被打斷。

現在 MCP（Model Context Protocol，讓 AI 連接外部工具的協定）伺服器能將高頻率使用的工具標記為常駐載入。只要在 tools/list 回覆的工具資料裡加入以下設定：

{"_meta": {"antigravity/alwaysLoad": true}}

代理就能直接取得該項工具，不再需要於執行過程中臨時隨需探索。

放手讓自動化指令在沙盒裡執行，許多人最在意的就是其他應用程式儲存的私密憑證會不會被看光。

macOS 上的桌面應用程式習慣將登入憑證與工作階段 token（授權令牌）存放在 ~/Library/Application Support 目錄下。以前沙盒內的指令預設可以直接讀取該路徑，現在預設直接阻擋這項權限。如果你的特定腳本確實需要取用裡面的設定檔，依然可以在沙盒規則中明確手動放行。

為團隊量身製作外掛時，往往需要同時打包專屬的子代理、技能設定與運作規則。現在外掛根目錄支援建立 agents.json，讓作者能像以往用 skills.json 和 rules.json 宣告技能與規則那樣，直接宣告專屬的子代理。在 /plugin 指令的「已安裝」分頁中，搜尋體驗也更加順手。你現在能在搜尋關鍵字裡輸入空格，按下 Enter 結束搜尋後，用 Space 空白鍵即可切換啟用選取的外掛，按 Enter 展開查看詳細資訊，直接再次打字便能繼續搜尋。執行 agy plugin validate 驗證與瀏覽清單時，以前容易漏掉在 plugin.json 裡透過 skills 欄位宣告的技能，或者忽略了 skills.json 的排除項目；現在這些顯示已與實際載入的技能完全一致，同時修復了匯入外掛時可能遺失結果的競爭問題。

遇到企業代理伺服器阻擋時，主控台若被整段 HTML 原始碼淹沒，很難第一時間掌握原因。現在遇到這類錯誤頁面只會顯示網頁標題，其他過長的非 JSON 錯誤內容也會在 500 個位元組處截斷。個人配額（quota，使用額度）用盡時會立刻回報，不再反覆重試。工作階段中若登入憑證過期或被撤銷，現在會明確提示 Authentication expired. Please log back in.，且背景中正在傳輸的權杖更新也不會還原失效憑證。使用 AGY_ADC_AUTH 應用程式預設憑證登入時，因遠端控制尚未支援，加上 --remote-control 參數會清楚退出並說明原因，選單中的 /remote-control 指令也會自動隱藏。

When scrolling up through long conversations to review past messages, it is easy to lose track of which prompt initiated the answer you are reading. In flicker-free mode, the prompt that generated the reply you are currently viewing now remains pinned to the top of the window.

This preserves context when skimming lengthy analysis reports, and clicking the header takes you straight back to the original question.

After connecting many frequently used tools, waiting for the AI to re-inspect the catalog before every query breaks the conversational flow.

MCP servers can now mark high-frequency tools to be loaded permanently. By adding the following metadata to the tool payload in tools/list responses:

{"_meta": {"antigravity/alwaysLoad": true}}

The agent receives the tool immediately, eliminating runtime on-demand discovery.

When allowing automated commands to run inside a sandbox, a primary concern is whether private credentials stored by other applications might be exposed.

Desktop applications on macOS typically store login credentials and session tokens in ~/Library/Application Support. Sandboxed commands previously had read access to that path by default, but this access is now blocked. If a specific script genuinely requires access to configuration files in that path, you can still grant permission explicitly in sandbox rules.

Tailoring a plugin for a team often requires packaging dedicated subagents, skills, and operational rules together. Plugins now support an agents.json file in their root directory, enabling authors to declare subagents directly, just as they declare skills and rules via skills.json and rules.json. In the Installed tab of the /plugin command, searching is also more intuitive. You can now include spaces in search queries, press Enter to finish searching, toggle the selected plugin with Space, press Enter to expand details, or type again to continue searching. When running agy plugin validate to verify and inspect the list, skills declared through the skills field in plugin.json or excluded in skills.json were previously sometimes overlooked; the validation display now matches loaded skills, and a race condition that could drop imported plugin results has been fixed.

When an enterprise proxy blocks requests, drowning the console in raw HTML makes identifying the cause difficult. Error pages now display only the page title, and other excessively long non-JSON error bodies are truncated at 500 bytes. When personal quota is exhausted, the system reports it immediately instead of retrying repeatedly. If login credentials expire or are revoked during a session, the system now provides an explicit Authentication expired. Please log back in. notice, and background token refresh transmissions will not restore invalid credentials. Because remote control is not supported when authenticating with AGY_ADC_AUTH application default credentials, passing --remote-control now exits cleanly with an explanation, and /remote-control is automatically hidden from menus.