Skip to content

fix(server): reject Antigravity wrappers that chain onto setlocal - #5

Closed
cestercian wants to merge 468 commits into
mainfrom
cursor/antigravity-cmd-wrapper-8860
Closed

cestercian wants to merge 468 commits into
mainfrom
cursor/antigravity-cmd-wrapper-8860

Conversation

@cestercian

Copy link
Copy Markdown
Owner

Custom Windows Antigravity wrappers that chain a launch onto an ignorable setup line such as setlocal are now rejected instead of following a later launch target.

Unquoted command-chain metacharacters are checked before BATCH_IGNORABLE_LINE matching. Control-flow and quote-balance checks are unchanged.

Open in Web Open in Cursor 

shivamhwp and others added 30 commits September 15, 2026 21:37
…dotgg#11906)

Co-authored-by: T3 Code Test <t3code-test@example.com>
…gg#11381)

Co-authored-by: yashranaway <yashranaway@users.noreply.github.com>
…ngdotgg#8309)

Co-authored-by: Julius Marminge <julius0216@outlook.com>
…tgg#11958)

Co-authored-by: Antony <tnybyn@gmail.com>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
Co-authored-by: Julius Marminge <julius0216@outlook.com>
Co-authored-by: Julius Marminge <51714798+juliusmarminge@users.noreply.github.com>
…folders (pingdotgg#12008)

The health probe launched the PyInstaller ACP binary every minute and force killed it, leaving about 1 GB of _MEI files per run. The probe now resolves the install on disk without spawning. Each ACP process gets its own temp directory under the profile that is removed when the runtime closes, and the driver sweeps the profile temp root on create.

Continues pingdotgg#11657 by Vita Skacel. Owned temp directory approach from pingdotgg#9626 by ariszz.

Co-authored-by: Vita Skacel <skacel.vita@gmail.com>
Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
…ingdotgg#12002)

Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
juliusmarminge and others added 27 commits September 20, 2026 16:44
…g#12808)

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
…off (pingdotgg#12807)

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
…s page (pingdotgg#12536)

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
…2243)

Co-authored-by: Simone <185146821+Lucenx9@users.noreply.github.com>
…2805)

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
pingdotgg#12833)

Co-authored-by: Claude Fable 5.1 <noreply@anthropic.com>
…nch (pingdotgg#12623)

Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Co-authored-by: Julius Marminge <51714798+juliusmarminge@users.noreply.github.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Co-authored-by: maria-rcks <254055478+maria-rcks@users.noreply.github.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
Custom binaryPath values that point at .cmd/.bat launchers were treated as
the ACP process and required localharness_external.exe in the wrapper
directory. Resolve the real agy_acp_server.exe (sibling or referenced),
pair its same-version harness, and spawn that executable so ACP stdio is
not routed through cmd.exe.
A Windows .cmd/.bat next to a stale agy_acp_server.exe was unwrapped to
that sibling without reading the launcher. Resolve only a proven batch
launch target so a wrapper that points at another release keeps that ACP
pair, and reject wrappers whose target cannot be proven.
BATCH_IGNORABLE_LINE matched `setlocal & ...exe` before the unquoted `&` check, so a later launch line could win. Reject command-chain metacharacters first, then ignore genuine setup lines.
@cestercian cestercian closed this Sep 21, 2026
@github-actions github-actions Bot added vouch:trusted PR author is trusted by repo permissions or the VOUCHED list. size:XXL labels Sep 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:XXL vouch:trusted PR author is trusted by repo permissions or the VOUCHED list.

Projects

None yet

Development

Successfully merging this pull request may close these issues.