Sticky Prompt Keeps Context Visible During Deep Scrollbacks, Clicking Jumps to Origin
When scrolling up through long conversations to review past messages, it is easy to lose track of which prompt initiated the answer you are reading. In flicker-free mode, the prompt that generated the reply you are currently viewing now remains pinned to the top of the window.
This preserves context when skimming lengthy analysis reports, and clicking the header takes you straight back to the original question.
After connecting many frequently used tools, waiting for the AI to re-inspect the catalog before every query breaks the conversational flow.
MCP servers can now mark high-frequency tools to be loaded permanently. By adding the following metadata to the tool payload in tools/list responses:
{"_meta": {"antigravity/alwaysLoad": true}}
The agent receives the tool immediately, eliminating runtime on-demand discovery.
FEATURE
macOS Sandbox Blocks Application Support Directory by Default to Prevent Key Leaks
When allowing automated commands to run inside a sandbox, a primary concern is whether private credentials stored by other applications might be exposed.
Desktop applications on macOS typically store login credentials and session tokens in ~/Library/Application Support. Sandboxed commands previously had read access to that path by default, but this access is now blocked. If a specific script genuinely requires access to configuration files in that path, you can still grant permission explicitly in sandbox rules.
FEATURE
Plugins Support Declaring Subagents, Management Interface Improves Search and Validation
Tailoring a plugin for a team often requires packaging dedicated subagents, skills, and operational rules together. Plugins now support an agents.json file in their root directory, enabling authors to declare subagents directly, just as they declare skills and rules via skills.json and rules.json. In the Installed tab of the /plugin command, searching is also more intuitive. You can now include spaces in search queries, press Enter to finish searching, toggle the selected plugin with Space, press Enter to expand details, or type again to continue searching. When running agy plugin validate to verify and inspect the list, skills declared through the skills field in plugin.json or excluded in skills.json were previously sometimes overlooked; the validation display now matches loaded skills, and a race condition that could drop imported plugin results has been fixed.
BUGFIX
Subagent Workspaces Enforce Full Isolation, Stopping Clears Pending Approvals Promptly
When background subagents operate across multiple projects, modifying files you are currently editing makes troubleshooting difficult.
In workspaces with multiple repositories, subagents launched in branch or share workspace mode previously operated against your actual checkout directories behind the scenes; this is now fixed, giving each repository its own isolated copy. When you stop a subagent manually, unresolved approval requests previously kept it lingering in the active list; issuing a stop command now clears all pending approvals immediately, cleanly removing the subagent.
When entering a slash command with an invalid directory path, a silent mock success can lead to incorrect assumptions about the environment. When running /add-dir, entering a nonexistent path or a regular file previously reported success anyway; it now explicitly returns directory not found or not a directory. Asking side questions with /btw previously triggered user and workspace hooks, causing stop hooks to loop or adding unnecessary overhead to simple inquiries, an issue that is now resolved. Running /keybindings to view keyboard shortcuts now displays an error if the configured editor cannot be located instead of failing silently. When the git diff fallback for /diff fails, it now displays the actual underlying cause, such as index corruption, instead of misreporting an error with git diff HEAD.
FEATURE
Connection and Authentication Errors Surface Clearer Details, Exhausted Quotas Halt Retries
When an enterprise proxy blocks requests, drowning the console in raw HTML makes identifying the cause difficult. Error pages now display only the page title, and other excessively long non-JSON error bodies are truncated at 500 bytes. When personal quota is exhausted, the system reports it immediately instead of retrying repeatedly. If login credentials expire or are revoked during a session, the system now provides an explicit Authentication expired. Please log back in. notice, and background token refresh transmissions will not restore invalid credentials. Because remote control is not supported when authenticating with AGY_ADC_AUTH application default credentials, passing --remote-control now exits cleanly with an explanation, and /remote-control is automatically hidden from menus.
BUGFIX
Terminal Pager Hangs Resolved, Shortcut Keys and Cross-Platform Runs Gain Stability
Running version control commands or custom key combinations in the terminal can freeze unexpectedly due to subtle cross-platform differences. When the agent ran Jujutsu commands like jj diff or jj log, it often hung on interactive pagers; commands now pass JJ_PAGER=cat automatically, matching existing handling for PAGER and GIT_PAGER. In macOS Terminal.app and VS Code terminals, custom shortcuts such as alt+s failing because the system did not treat Option as a Meta key have been resolved. On Windows, sandboxed commands executed with PowerShell 7 installed from the Microsoft Store previously encountered Access is denied.; execution now automatically falls back to Windows PowerShell.
BUGFIX
Terminal Links Jump Accurately, Step and Code Search Counts Correct Singular Forms
When file paths in conversation transcripts point accurately to code line numbers, clicking to debug saves considerable manual cross-referencing. In response text, file links with percent-encoded line number anchors, such as file.go%23L795, previously failed to render their labels correctly. Labels now display line numbers clearly, and clicking them opens and navigates directly to the specified line. In terminals that support clickable links, hovering over one of several independent links pointing to the same URL previously highlighted all of them; links now react independently. Tool execution steps and the /codesearch panel have also corrected English singular counts, properly showing Found 1 result, 1 match, 1 file, and Wrote 1 line without plural suffixes, while fixing an issue where file creation steps overreported line counts by one.
Original changelog
Original changelogSticky Prompt Keeps Context Visible During Deep Scrollbacks, Clicking Jumps to Origin
Added a pinned prompt header in no flickering mode while you scroll back through a long conversation: the prompt that produced the response you're reading stays at the top of the transcript, and clicking it jumps back to that prompt.
Original changelogAlways-Loaded Tools Eliminate On-Demand Discovery Latency
Added support for MCP servers to mark a tool as always loaded by setting `_meta: {"antigravity/alwaysLoad": true}` on it in their `tools/list` response, so the agent gets that tool directly instead of discovering it on demand.
Original changelogmacOS Sandbox Blocks Application Support Directory by Default to Prevent Key Leaks
Changed the macOS terminal sandbox to block sandboxed commands from reading `~/Library/Application Support` by default, since desktop apps keep credentials and session tokens there; previously it was readable, and you can still allow it explicitly in your sandbox rules.
Original changelogPlugins Support Declaring Subagents, Management Interface Improves Search and Validation
Added support for a root-level `agents.json` in plugins, so a plugin can declare its subagents the same way it declares skills and rules with `skills.json` and `rules.json`.
Improved search in the `/plugin` Installed tab: you can now type spaces in a search query, press `Enter` to finish searching, then use `Space` to toggle the selected plugin and `Enter` to expand its details; start typing again to resume the search.
Fixed `agy plugin validate` and plugin listings missing skills declared through the `skills` field in `plugin.json` or ignoring `skills.json` exclusions, so they now match the skills that actually load, and fixed a race that could drop results when importing plugins.
Original changelogSubagent Workspaces Enforce Full Isolation, Stopping Clears Pending Approvals Promptly
Fixed subagents started with a `branch` or `share` workspace in a multi-repository workspace silently working in your real checkout; each repository now gets its own isolated copy.
Fixed a stopped subagent staying in the active agents list while it still had an approval pending; stopping it now clears its pending approvals right away.
Fixed `/add-dir` claiming it added a path that doesn't exist or isn't a directory; it now reports `directory not found` or `not a directory`.
Fixed `/btw` side questions running your user and workspace hooks, which could make hooks such as stop hooks loop or add extra steps to a quick question.
Fixed `/keybindings` silently doing nothing when the configured editor can't be found; it now shows an error.
Fixed `/diff` showing the error from `git diff HEAD` instead of the real cause, such as a corrupt index, when the fallback `git diff` also fails.
Original changelogConnection and Authentication Errors Surface Clearer Details, Exhausted Quotas Halt Retries
Improved error messages: a request that fails with an HTML error page, for example from a corporate proxy, now shows the page title instead of the raw HTML, other long non-JSON error bodies are cut off after 500 bytes, and reaching your individual quota is reported right away instead of being retried.
Fixed an expired or revoked sign-in showing an unclear error mid-session; the agent now says `Authentication expired. Please log back in.`, and a token refresh that was already in flight no longer restores the expired credentials.
Fixed `--remote-control` failing when you sign in with Application Default Credentials (`AGY_ADC_AUTH`); Remote Control doesn't support ADC yet, so the flag now exits with a clear error and the `/remote-control` command is hidden.
Original changelogTerminal Pager Hangs Resolved, Shortcut Keys and Cross-Platform Runs Gain Stability
Fixed Jujutsu (`jj`) commands run by the agent, such as `jj diff` or `jj log`, hanging in an interactive pager; agent commands now set `JJ_PAGER=cat` alongside `PAGER` and `GIT_PAGER`.
Fixed custom `alt` keybindings such as `alt+s` not working with the macOS Option key in terminals that don't treat Option as Meta, such as Terminal.app and VS Code-based terminals.
Fixed sandboxed commands failing with `Access is denied.` on Windows when PowerShell 7 was installed from the Microsoft Store; the agent now falls back to Windows PowerShell in that case.
Original changelogTerminal Links Jump Accurately, Step and Code Search Counts Correct Singular Forms
Fixed file links in agent responses whose line anchor was percent-encoded, such as `file.go%23L795`; the label now shows the line number and the link opens the correct line.
Fixed separate links to the same URL highlighting together when you hover over one of them in terminals that support clickable links.
Fixed counts in tool steps and the `/codesearch` panel, which now read "Found 1 result", "1 match", "1 file", and "Wrote 1 line" instead of "1 results", and the file-creation step reporting one line too many.