entireio/cli v0.13.2 on GitHub

entire service-account secret create, list and delete manage a service account's secrets. create prints only the secret on stdout so it redirects cleanly into a file or secret store; --expires-in-days takes 1 to 365 and otherwise Core's 90-day default applies. An ENTIRE_TOKEN starting with ent_svc_ is exchanged for the service account's short-lived token, cached and renewed near expiry, including in git-remote-entire (#3020)
Each release also ships git-remote-entire on its own as a git-remote-entire-<os>-<arch> archive. The entire_* archive, Homebrew and Scoop still ship both binaries (#3019)
entire rsl offers to install the entire-rsl plugin when it is missing, like entire graph, entire brain and entire investigate (#3076)

Session and checkpoint tokens are counted from each agent's own running total instead of by slicing transcripts, for sessions started by this version with Claude Code, Codex, Copilot CLI, OpenCode, Pi, Factory Droid or Antigravity. Turns without file changes are no longer missed, and a repeated Stop, a commit in the middle of a turn or Copilot's cache no longer count twice. Checkpoint metadata adds session_token_usage, the session's total at that checkpoint (#2782)
Repository-scoped entire trail create and entire trail update are removed; assignees and editable descriptions live on project trails, whose create and update are unchanged. Repository-scoped trail output and --json no longer include assignees or the aggregate comment and unresolved counts (#3089)
OpenCode checkpoints: a tool still pending or running is no longer written as failed, an assistant message with only usage writes "content":null instead of "content":[], and a raw OpenCode 2 export converts in full. Live OpenCode views hide messages you undid, as OpenCode does (#3064)

Antigravity IDE and Antigravity 2.0 app sessions are captured: transcripts under ~/.gemini/antigravity/brain and ~/.gemini/antigravity-ide/brain are accepted, so a turn end no longer fails with transcript file not found and entire session attach finds those conversations (#3061)
entire api fills {repo_id} with the repository's processing placement and routes --to cell requests whose path contains {repo_id} to that placement's cell, except for /me paths or when --jurisdiction or a direct cell override selects the cell. entire recap's repository scope uses the same lookup (#2857)
install.sh verifies the archive against its exact line in checksums.txt instead of a suffix match that could pick the wrong archive (#3019)