lbjlaq/Antigravity-Manager v5.0.1-beta.5

Antigravity Tools v5.0.1-beta.5

on GitHub

• [Prompt Sanitization Split by Injection Region / Current Turn; User Content Fully Exempt] (Fixes #3764):
  • Current Turn Passed Through 100%: Sanitization tracks are now System / Content, with a new Anchored track for the current turn — only the contents of <system*> / <identity*> tags are normalized; everything outside the tags is preserved byte-for-byte. Single-turn translation, proofreading, and code-audit requests are no longer rewritten into the official identity. (Fixes #3764)
  • Injection Boundary Keyed to the Last Text Part: The injected region ends before the last text part of the final user message, which covers clients that put the system prompt in multiple leading parts as well as those appending images or files after text. Billing-metadata parts are dropped before scope selection so indices cannot drift and misclassify the current turn. (Fixes #3764)
  • Two-Stage Guard for Identity Declarations: The bridge segment between noun phrase and attribution verb can no longer cross line breaks (preventing You are ... and a following Based on ... paragraph from being swallowed together), and the replacement callback now skips interrogative sentences and cross-clause conjunctions, keeping 你是基于什么模型开发的？ and ..., and it was created by ... untouched. (Fixes #3764)
  • Idempotent Across Multiple Passes: The sanitizer runs at the adapter, handler, and pre-send stages, and again on retries. An idempotency regression test protects compute_prefix_hash prefix stability and Prompt Caching. (Fixes #3764)
• [Process Identity Detection Consolidated into a Single Entry Point; Antigravity IDE 2.6.0 Account Switch Fixed] (Fixes #3762, Thanks to @cubelikeplayDaniel):
  • Identity Only from Executable Name/Path: Added classify_process; command-line arguments are demoted to an IDE-vs-classic discriminator and only the Chromium --user-data-dir value is read. The weak (antigravity && vscode) heuristic was removed, so VS Code, terminals, and Explorer windows that merely open an antigravity project are no longer swept into the taskkill /F /T list. (Fixes #3762)
  • IDE Targets Forced to SQLite Injection: When the target is an IDE, credentials are always written to state.vscdb instead of falling back to the system Keyring merely because the version is >= 2.0.0, which previously forced a re-login; an explicit classic selection always wins. (Fixes #3762)
  • Manager Guard Restricted to File Names: The loose branch of is_manager_or_tools_process now inspects only the file stem, fixing the silent failure where a client installed under D:\Tools\Antigravity or C:\Tools\agy was mistaken for the Manager (never detected, so account switching wrote credentials without restarting it). (Fixes #3762)
  • Orphan Language Servers Swept per Target: sweep_orphan_language_servers(target_ide) now cleans up only the matching client, so IDE and classic instances never kill each other. (Fixes #3762, Ref #3769)

• [提示词清洗按注入区/当前轮分轨，用户正文永久豁免] (Fixes #3764):
  • 当前轮 100% 透传: 清洗轨道收敛为 System / Content，并为当前轮新增 Anchored 轨——只清洗 <system*> / <identity*> 标签内部，标签外用户正文逐字保留；单轮翻译、校对、代码审计类请求不再被整句改写为官方身份。(Fixes #3764)
  • 注入区边界按「最后一条 user 消息的最后一个 text part」裁定: 兼容客户端把系统提示词放进首轮 user 多 part、以及在文本后追加图片/文件的形态；计费元数据 Part 在选轨道前剔除，避免下标漂移把当轮正文误判为注入区。(Fixes #3764)
  • 身份声明正则双重防护: 桥接段不再跨行（消除 You are ... 与下一段 Based on ... 被整段吞噬），替换回调新增疑问句豁免与跨子句连词豁免，你是基于什么模型开发的？ 与 ..., and it was created by ... 均保持原样。(Fixes #3764)
  • 多轮清洗幂等: 同一请求在适配层、handler 与发包前会多次清洗，新增幂等回归用例，保护 compute_prefix_hash 的前缀稳定性与 Prompt Caching。(Fixes #3764)
• [进程身份判定收敛为唯一入口，修复 Antigravity IDE 2.6.0 切号失败] (Fixes #3762, Thanks to @cubelikeplayDaniel):
  • 身份只来自可执行文件名/路径: 新增 classify_process，命令行参数降级为 IDE / 经典判别器且只读取 Chromium --user-data-dir 的值；删除 (antigravity && vscode) 弱特征组合，杜绝把打开 antigravity 工程的 VS Code / 终端 / 资源管理器纳入 taskkill /F /T 关闭列表。(Fixes #3762)
  • IDE 目标强制 SQLite 注入: 目标确认为 IDE 时坚决写入 state.vscdb，不再因版本号 ≥ 2.0.0 误走系统 Keyring 而提示重新登录；显式 classic 选择优先。(Fixes #3762)
  • Manager 守卫只看文件名: is_manager_or_tools_process 的宽松兜底改为 file stem 判定，修复装在 D:\Tools\Antigravity / C:\Tools\agy 的客户端被误判为 Manager 导致的「检测不到 → 切号只写凭据不重启」静默失败。(Fixes #3762)
  • 孤儿语言服务按目标隔离: sweep_orphan_language_servers(target_ide) 统一清理对应客户端，IDE 与经典版互不误杀。(Fixes #3762, Ref #3769)

Full Changelog: v5.0.1-beta.4...v5.0.1-beta.5