v3.0.4

Gemini 4 Argon

• Added the google/antigravity-gemini-4-argon model, with low, medium and high thinking levels. medium is the default, as in the Antigravity CLI. It accepts up to 1,048,576 input tokens and 65,536 output tokens, including images and video. Argon requires a Google AI Ultra subscription.
• Argon requests use the same level-based thinking settings as the Antigravity CLI, with no token budget. The low request format was verified against the CLI; medium and high follow Antigravity's model list and are not yet verified.
• Argon reports its quota per model; it is not counted in the Gemini weekly pool.

Withdrawn Gemini models

Antigravity no longer offers Gemini 3.1 Pro, Gemini 3.6 Flash or Gemini 3.7 Flash, so these models have been removed from the model list. A request for one of them, for example from an older session, now fails immediately with a clear error and is never sent to Google. It is not silently switched to another model. You can still open earlier conversations that used them. Gemini 3.8 Flash, Gemini 3.5 Flash, image generation, Claude Opus and Sonnet 5.5, and GPT-OSS are unchanged.

The plugin now identifies itself as Antigravity CLI 1.3.5, the current release.

Vault setup explains each step

• After you choose Request vault access, Pi and OpenCode show the next steps: the operator's ck auth enroll approve command (with the request ID when known), the ck auth grant command that gives the enrollment read access, and the final step in the menu.
• If access is approved but the vault serves no accounts to this host, the menu says so and shows the grant command.
• If a new request is refused with pending_exists, the menu explains that an earlier request is still pending. You can either wait for it to expire (15 minutes after it was made), or deny it with ck auth enroll deny.
• Pi no longer offers Forget vault enrollment while a request is pending. Forgetting it there discarded the only way to collect the approval, and blocked new requests until the old one expired. The failure is also reported once instead of twice.

Windows: private files

The shared auth library is updated to common-auth 0.15.0 and its vault client to Claustrum 0.9.0. On Windows, account, lock, port and enrollment files are now created readable only by you. A folder that other users can write to, such as a shared temporary folder, is refused rather than used. Normal profile folders under your user directory work as before. macOS and Linux behavior is unchanged.