Antigravity CLI 1.4.7 asks less often in Auto mode

Verdict, October 26, 2026. OP to update to Antigravity CLI 1.4.7 if Application Default Credentials never loaded skills, rules, hooks, or plugins, or if plugin MCP OAuth on macOS or Windows could be read by another user of the same computer account. Mid to leave Auto mode on if your rule is still "ask before you stop a process." The October 24 note puts that action on the routine list that asks less often. It does not say the prompt is gone, and it prints no count. Mid as a reason to leave Codex, Claude Code, or Cursor. No letter moves on the AI Coding Agents board. S stays locked. OP or Mid has not run 1.4.7.

Pages below were read October 26, 2026. Behavior in the release notes is a vendor claim.

What 1.4.7 changed about asking

NERF to oversight. BUFF to an uninterrupted turn. GitHub published 1.4.7 on October 24, 2026 at 02:47 UTC. The note says Auto mode asks for approval less often on routine commands, such as cleaning up temporary files, stopping a local process, or running a code formatter. Source: 1.4.7 (opens in a new tab).

The modes page does not use those examples. It says safe, reversible commands, such as workspace build, test, lint, and format, run without asking, and irreversible or high-risk actions still pause. It does not mention 1.4.7 or stopping a local process. Source: execution modes (opens in a new tab).

1.4.4, published October 21, 2026, says Auto mode's review of commands that leave the terminal sandbox prompts before destructive Git or file commands. 1.4.7 does not say that sentence was removed. Source: 1.4.4 (opens in a new tab). Read the two notes as two claims. Do not collapse them into "a process kill still always prompts" or "a process kill never prompts."

accept-edits still asks before every terminal command and auto-approves workspace file edits. default asks before files and commands. Shift+Tab cycles default, accept-edits, auto, then plan. Auto is Preview: v1.3.5 and later on macOS and Linux, v1.4.4 and later on Windows, and only with the terminal sandbox. Business and enterprise accounts, including Antigravity in Gemini Enterprise, do not get it. If it is missing, the CLI starts in default and hides Auto from Shift+Tab and /config. Windows needs 11 24H2 or later with the August 2026 update. From v1.4.4, Auto is also hidden when the sandbox cannot run, including Windows 10 and Linux hosts that block unprivileged user namespaces. A headless --mode=auto that cannot start warns and continues in default. Source: execution modes (opens in a new tab).

/permissions allow, ask, and deny rules still win in every mode. So do strict tool permissions and --dangerously-skip-permissions (always-proceed). A mode change in /config is written to settings.json at ~/.gemini/antigravity-cli/settings.json. "agentMode": "accept-edits" or omitting the key (default) is the persistent way to keep command prompts. --mode overrides that file for one run. Source: execution modes (opens in a new tab).

The fixes that are the upgrade

BUFF With AGY_ADC_AUTH, 1.4.7 says skills, rules, custom agents, plugins, plugin MCP servers, and hooks load again. The note says they were not loading. Source: 1.4.7 (opens in a new tab).

BUFF On macOS and Windows, plugin MCP servers that sign in with OAuth could use a token saved by another user of the same computer account, or keep the previous user's connection after an account switch or sign-out. The note says tokens now belong to the signed-in user, those servers reconnect when the user changes, and you may need to sign in again. A token too large for the system keychain is stored in the CLI's private secrets file. The note does not name that path. Source: 1.4.7 (opens in a new tab).

NEW Hook commands receive lastUserInput in the JSON on stdin, so a hook can read the latest message you sent. The note's example is screening a prompt before the agent acts. It does not include a hook file. Source: 1.4.7 (opens in a new tab).

BUFF MCP tools loaded on demand can return up to 10 KB straight to the agent. The note says anything over 4 KB used to be saved to a file the agent had to read. Source: 1.4.7 (opens in a new tab).

BUFF Conversations no longer compact over and over when one message, tool output, or attached document is too large for the context. The note does not say whether that item is dropped, trimmed, or left to fail the turn. Source: 1.4.7 (opens in a new tab).

VENDOR CLAIM Headless -p runs use much less CPU because they skip the conversation search index, transcript rendering, and custom status line and window title commands. The note prints no CPU figure. This article did not measure one. Source: 1.4.7 (opens in a new tab).

1.4.6, published October 23, 2026, is a different release. Sandboxed commands can no longer read or modify ~/.docker, ~/.kube, or ~/_netrc unless you grant access. The note says ~/.docker and ~/.kube were writable inside the sandbox before that. 1.4.7 does not retract it. Source: 1.4.6 (opens in a new tab).

The web changelog has not caught up

The public changelog page still heads its CLI section at v1.4.0, dated October 16, 2026, and says new versions roll out gradually and may take a few days to reach all users. Source: changelog (opens in a new tab). The 1.4.7 text is on the GitHub tag and in CHANGELOG.md at that tag. Sources: 1.4.7 (opens in a new tab), CHANGELOG.md (opens in a new tab). agy update updates the binary. agy changelog prints the notes without a prompt. Source: changelog command (opens in a new tab).

The October 19 steer piece is still the mid-turn control: default Queue waits, Send Immediately interrupts, alt+m flips one message. 1.4.7 does not mention queued messages.

The board stays on October 15

No letter moves. Antigravity with Gemini 4 Argon stays in A on the October 15 AI Coding Agents list, next to Codex, Claude Code, and Cursor. S stays locked. Quieter Auto mode is a mode setting, and the OAuth note ships with a fix in the same release. Gemini 4 Argon stays A on the frontier board. The Gemini API row is the model API, not this CLI, and this release does not change it. This is not a hands-on test.

What to do today

If the status bar says auto and you want a prompt before every terminal command, Shift+Tab to accept-edits, or to default if you also want file diffs. Set agentMode in ~/.gemini/antigravity-cli/settings.json when that should survive a restart. A /permissions deny still blocks the action.
If you use AGY_ADC_AUTH and customizations were missing, or if more than one person uses plugin MCP OAuth on one macOS or Windows account, run agy update, then sign those plugin servers in again.
Confirm the notes with agy changelog. If Auto never appears in the cycle, the modes page treats that as the account or the sandbox, not as proof that the update failed.
Do not change harnesses because an on-demand MCP result can come back inline up to 10 KB. The October 19 piece is still the comparison for a message typed mid-turn.

The weekly patch is on beehiiv: subscribe free (opens in a new tab).

The OP or Mid Team

Sources

Checked October 26, 2026.