@sagentlab/navarch-runtime 0.1.107 → 0.1.112

package/dist/session.cjs

@@ -50,7 +50,7 @@ function resolveSessionExecution(config, claimed) {
         model: runtime === "codex" ? "gpt-6-astra"
             : runtime === "pi-local" ? "qwen3.8-flash-next-iq2_xs"
                 : runtime === "gemini" ? "auto"
-                    : runtime === "opencode" || runtime === "acp" || runtime === "qoder" ? "default"
+                    : runtime === "antigravity" || runtime === "opencode" || runtime === "acp" || runtime === "qoder" ? "default"
                         : "claude-opus-5-5",
         reasoning_effort: "medium",
     };
@@ -65,7 +65,7 @@ function resolveSessionExecution(config, claimed) {
  *   2. fetch secrets from the broker at session start (managed GitHub git
  *      credentials are subsequently refreshed by a lease-scoped helper)
  *   3. optionally stand up a Docker sandbox when explicitly configured
- *   4. run the adapter selected by the claim (Claude Code, Codex, Gemini, or OpenCode;
+ *   4. run the adapter selected by the claim (Claude Code, Codex, Antigravity, or OpenCode;
  *      adapters/index.cts#selectAdapter), heartbeating the
  *      lease throughout
  *   5. redact + upload the transcript, map the exit condition, complete the
@@ -150,6 +150,8 @@ async function runClaimedSession(deps, claimed, sessionId, lifecycle) {
     // GitWorktree.cleanup removes that session-marked entry before teardown.
     // Docker env injection remains tmpfs-backed (sandbox.cts injectEnv).
     const registry = new redact_cjs_1.SecretRegistry();
+    // Lease MCP and managed Git refresh can expose this value in CLI errors.
+    registry.register(api.getToken());
     let secrets = {};
     let managedGithubCredential = false;
     const secretNames = bundle.secret_manifest.map((s) => s.name);
@@ -356,23 +358,25 @@ async function runClaimedSession(deps, claimed, sessionId, lifecycle) {
             machineToken: api.getToken() ?? "",
             leaseId,
         };
-        const mcpConfig = runtime === "opencode"
+        const mcpConfig = (runtime === "opencode" || runtime === "antigravity")
             ? (0, mcp_config_cjs_1.buildEnvReferencedNavarchMcpConfig)(mcpOptions)
             : { config: (0, mcp_config_cjs_1.buildNavarchMcpConfig)(mcpOptions), env: {} };
         Object.assign(sessionEnv, mcpConfig.env);
         await node_fs_1.promises.writeFile(node_path_1.default.join(workDir, MCP_CONFIG_FILENAME), JSON.stringify(mcpConfig.config, null, 2), "utf8");
         mcpConfigPath = node_path_1.default.join(workDir, MCP_CONFIG_FILENAME);
     }
+    if (runtime === "antigravity") {
+        promptText += "\n\nNavarch creates a temporary .agents/mcp_config.json solely for this turn. Do not edit, stage, commit or remove that file. It is removed by the runtime before delivery; staging it fails the session.\n";
+    }
     // Worktree boundary guard (worktree-guard.cts): several sessions share this
     // machine. Host-mode Claude gets a generated PreToolUse hook; host-mode
     // Codex gets an OS-enforced native permission profile over the same roots;
-    // Gemini gets a native sandbox mount list; OpenCode fails closed on the
+    // Antigravity and OpenCode fail closed on the
     // guarded host path because its CLI cannot express the full boundary.
     // Docker mode already has a container boundary. NAVARCH_WORKTREE_GUARD=off
     // opts out for any agent.
     let claudeSettingsPath = null;
     let codexGuardArgs;
-    let geminiGuardMounts;
     if (config.sandboxMode === "host" && config.worktreeGuard) {
         if (runtime === "claude-code") {
             if (config.claudeExtraArgs.includes("--settings")) {
@@ -396,15 +400,6 @@ async function runClaimedSession(deps, claimed, sessionId, lifecycle) {
                 Object.assign(sessionEnv, { TMPDIR: tmpDir, TMP: tmpDir, TEMP: tmpDir });
             }
         }
-        else if (runtime === "gemini") {
-            geminiGuardMounts = (0, worktree_guard_cjs_1.geminiSandboxMounts)({
-                workDir,
-                worktreePath: gitWorktree.worktreePath,
-                repositoryPath: gitWorktree.repositoryPath,
-                workspaceRoot: config.workspaceRoot,
-                extraRoots: config.guardExtraRoots,
-            });
-        }
     }
     // Kept outside the try so the crash path can report the telemetry this
     // session actually produced instead of zeroing it.
@@ -452,14 +447,22 @@ async function runClaimedSession(deps, claimed, sessionId, lifecycle) {
         if (!config.mcpConfigPath && config.sandboxMode === "host"
             && ["build", "verify", "qa"].includes(task.task_type)
             && task.required_capabilities?.includes("browser-use")
-            && ["codex", "claude-code", "gemini", "opencode", "acp"].includes(runtime)) {
+            && ["codex", "claude-code", "antigravity", "opencode", "acp"].includes(runtime)) {
             browserEvidence = await (0, browser_evidence_cjs_1.startBrowserEvidence)({
                 apiBase: api.getBaseUrl(), machineToken: api.getToken() ?? "", leaseId,
                 isActive: () => !leaseLost && !sessionClosing && !deps.shutdownSignal?.aborted,
             });
             registry.register(browserEvidence.token);
             const mcp = JSON.parse(await node_fs_1.promises.readFile(mcpConfigPath, "utf8"));
-            mcp.mcpServers.navarch_browser = browserEvidence.config;
+            const browserConfig = structuredClone(browserEvidence.config);
+            if (runtime === "antigravity") {
+                for (const [index, [header, value]] of Object.entries(browserConfig.headers).entries()) {
+                    const name = `NAVARCH_AGY_MCP_BROWSER_${index}`;
+                    sessionEnv[name] = value;
+                    browserConfig.headers[header] = `{env:${name}}`;
+                }
+            }
+            mcp.mcpServers.navarch_browser = browserConfig;
             await node_fs_1.promises.writeFile(mcpConfigPath, JSON.stringify(mcp), { mode: 0o600 });
             promptText += "\n\nNavarch supplies capture_visual_evidence through navarch_browser. Use it first for desktop/mobile screenshots of the verified preview URL and source commit. It runs outside the coding-agent sandbox, uploads images as task artifacts, and the runtime attaches them to the delivery PR before completion. Inspect the returned images before accepting the UI. Do not use GitHub's upload UI or add capture tools to the target repository. If the base commit has no runnable UI, report before evidence as not applicable with the base SHA and reason; still capture the current head. For interactive walkthroughs of a service you start on this machine, use navarch_browser's local_browser_open, local_browser_click, local_browser_fill, local_browser_press, local_browser_snapshot, and local_browser_screenshot with http://localhost:<port> or http://127.0.0.1:<port>. That browser also runs outside the sandbox and reaches only this machine's loopback services; prefer it over launching Chromium yourself, which Codex's macOS sandbox kills at startup.\n";
         }
@@ -499,7 +502,9 @@ async function runClaimedSession(deps, claimed, sessionId, lifecycle) {
             for (const denial of sandbox.describe().denials) {
                 log.warn(`sandbox policy denial [${denial.policy}/${denial.code}]: ${denial.detail}`);
             }
-            await sandbox.injectEnv(sessionEnv);
+            await sandbox.injectEnv(runtime === "antigravity"
+                ? Object.fromEntries(Object.entries(sessionEnv).filter(([name]) => !name.startsWith("NAVARCH_OPENCODE_MCP_") && !name.startsWith("NAVARCH_AGY_MCP_")))
+                : sessionEnv);
         }
         // The control plane returns the agent type selected for this worker.
         // Any agent type may run any task; capabilities remain the task-level gate.
@@ -527,6 +532,7 @@ async function runClaimedSession(deps, claimed, sessionId, lifecycle) {
         let completionRemediationRetries = 0;
         let deliveryCorrectionRetries = 0;
         let deliveredPullRequest = false;
+        let antigravityResume;
         while (true) {
             // Guidance can arrive while the worktree/sandbox is being prepared.
             // It is already included in deliveredGuidance, so clear the pending
@@ -565,7 +571,8 @@ async function runClaimedSession(deps, claimed, sessionId, lifecycle) {
                     env: sessionEnv,
                     settingsPath: claudeSettingsPath,
                     codexGuardArgs,
-                    geminiSandboxMounts: geminiGuardMounts,
+                    antigravityHostGuard: runtime === "antigravity" && config.sandboxMode === "host" && config.worktreeGuard,
+                    antigravityResume,
                     opencodeHostGuard: runtime === "opencode" && config.sandboxMode === "host" && config.worktreeGuard,
                     // ACP requires an absolute session cwd. Docker mounts the worktree at
                     // this same absolute path, while the other Docker adapters ignore cwd.
@@ -588,6 +595,7 @@ async function runClaimedSession(deps, claimed, sessionId, lifecycle) {
                 execution.model = turnResult.model;
                 executionReport = { ...executionReport, model: turnResult.model };
             }
+            antigravityResume = turnResult.antigravityResume;
             attempts.push(turnResult);
             liveStdout = "";
             liveTranscript.markDirty();
@@ -877,7 +885,8 @@ async function runClaimedSession(deps, claimed, sessionId, lifecycle) {
             failure_summary: failureSummary,
             failed_before_start: !adapterStarted,
             evidence_urls: lastCompletion?.evidence_urls ?? [],
-            cost: lastCompletion?.cost ?? { tokens_in: 0, tokens_out: 0, cost_usd: 0 },
+            // Once the adapter has started, absent accounting is unknown, not free.
+            cost: lastCompletion?.cost ?? (adapterStarted ? {} : { tokens_in: 0, tokens_out: 0, cost_usd: 0 }),
             ...(crashTranscriptUrl ? { transcript_url: crashTranscriptUrl } : {}),
             exit_status: "crashed",
             agent_type: runtime,
@@ -928,6 +937,8 @@ function adapterCommand(config, runtime) {
             return { bin: config.codexBin, extraArgs: config.codexExtraArgs };
         case "gemini":
             return { bin: config.geminiBin, extraArgs: config.geminiExtraArgs };
+        case "antigravity":
+            return { bin: config.antigravityBin, extraArgs: config.antigravityExtraArgs };
         case "opencode":
             return { bin: config.opencodeBin, extraArgs: config.opencodeExtraArgs };
         case "acp":

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sagentlab/navarch-runtime",
-  "version": "0.1.107",
+  "version": "0.1.112",
   "description": "Navarch machine-side session manager: claims delivery tasks and runs them through local coding agents.",
   "type": "commonjs",
   "license": "MIT",
@@ -15,7 +15,7 @@
     "ai-agent",
     "claude-code",
     "codex",
-    "gemini-cli",
+    "antigravity-cli",
     "opencode",
     "agent-client-protocol",
     "deepseek-harness",