feat(antigravity): initial steps for Antigravity anti-ban alignment by LinearSakana · Pull Request #141 · decolua/9router

LinearSakana · 2026-02-17T03:15:15Z

Description

A few updates to make 9router behave more like the official Antigravity client. These changes help with compatibility and lower the chance of being flagged by the provider.

Changes

Client Identity Spoofing (Binary Alignment)

Replaced string-based client metadata ("IDE_UNSPECIFIED") with numeric enums (ideType: 9, platform: <runtime>, pluginType: 2) as required by the Cloud Code API tiering logic.
Implemented runtime platform detection (getPlatformEnum) to accurately report OS/Arch.
Updated User-Agent to be dynamically generated based on the host platform.
Added mode: 1 parameter to loadCodeAssist and onboardUser calls.

Session ID Generation & Caching

Replaced the random negative number session ID format with the official binary format: UUID + Date.now().
Introduced sessionManager.js to implement per-connection Session ID caching. This ensures session continuity for Prompt Caching, matching the binary's process-lifetime behavior.
Updated antigravity executor and openai-to-gemini translator to use derived session IDs.

Header Fingerprint Alignment & Source Anonymization

Introduced ANTIGRAVITY_HEADERS constant including X-Client-Name, X-Client-Version, and x-goog-api-client to mirror official client fingerprints.
Updated the antigravity executor to inject X-Machine-Session-Id into request headers, aligning with backend session tracking requirements.
Removed the X-9Router-Source custom header to eliminate proxy-specific identifying traces.

System Instruction Double Injection

Implemented a dual-injection mechanism (Raw + [ignore] wrapped) for system instructions to ensure model stability, matching official client behavior.

Dynamic Signature Injection & Static Fingerprint Removal

Removed the static DEFAULT_THINKING_GEMINI_SIGNATURE constant to eliminate detectable static patterns.
Implemented side-channel signature caching in [sessionManager.js] to capture real thoughtSignatures from responses (bypassing the intermediate OpenAI format limitation).
Updated antigravity executor to dynamically inject cached signatures into functionCall parts or fallback to random UUIDs, ensuring compatibility with Gemini 3+ models while maintaining anonymity.

Verification

npm run build passed successfully.
Verified full end-to-end connectivity: Successfully established a stable connection to the Antigravity provider and confirmed functional request/response flow.

- Update client metadata (ideType, platform, pluginType) to use numeric enums matching binary specs - Add runtime platform detection to accurately report OS and architecture - Add 'mode: 1' parameter to loadCodeAssist and onboardUser API calls - Generate dynamic User-Agent based on system runtime information

- Update session ID format to `UUID + Date.now().toString()` to align with binary specs - Introduce sessionManager to handle per-connection/account session persistence - Ensure session ID stability during the process lifetime to improve prompt caching - Integrate session derivation into both Antigravity executor and translator

- Introduce `ANTIGRAVITY_HEADERS` constant with specific client version and gRPC metadata - Update `AntigravityExecutor` to include standard client headers - Inject `X-Machine-Session-Id` header derived from the request session ID - Remove custom `X-9Router-Source` header to better mimic official client behavior - Reorder execution logic to extract session ID from transformed body before building headers

- Add `mode: 1` to `loadCodeAssist`, `onboardUser`, and usage quota requests to match binary protocol - Replace hardcoded metadata with centralized `getOAuthClientMetadata()` and `CLIENT_METADATA` in Gemini and Antigravity services - Update Antigravity User-Agent to use dynamic platform-specific string via `getPlatformUserAgent()` (cherry picked from commit 1805188)

RepairYourTech · 2026-02-19T03:39:09Z

why isnt this merged?

xuandung38 · 2026-02-19T14:20:40Z

I got banned without notification from google haha

RepairYourTech · 2026-02-19T14:50:37Z

@decolua

decolua · 2026-02-19T14:54:04Z

Sorry, I’m away on holiday right now. I’ll be back at my desk tomorrow

…natures

LinearSakana · 2026-02-19T15:07:27Z

https://github.com/NikkeTryHard/zerogravity
maybe this one will work 👆

RepairYourTech · 2026-02-19T19:50:45Z

https://github.com/NikkeTryHard/zerogravity
maybe this one will work 👆

Im just going to wait before i risk my ultra account lol, i already used it to get opus 4.6 and g3 flash in claude code, but ill just keep using AG directly for now lol

decolua · 2026-02-20T07:46:31Z

Cherry-picked commits 1-5 into our fork. Thanks @LinearSakana! 🙏

Cherry-picked from #141 (author: LinearSakana / zx <me@char.moe>) - Implement client identity spoofing with numeric enums (ideType: 9, pluginType: 2) - Add runtime platform detection for User-Agent and metadata - Implement per-connection session ID caching (binary-compatible format) - Add ANTIGRAVITY_HEADERS (X-Client-Name, X-Client-Version, x-goog-api-client) - Add X-Machine-Session-Id header injection - Align metadata/mode parameters across all Antigravity API calls - Implement double injection for system prompt (raw + [ignore] wrapped) - Rename internal anti-loop header to x-request-source for anonymity Skipped: commit 6 (signature side-channel caching) — kept DEFAULT_THINKING_GEMINI_SIGNATURE Co-authored-by: Cursor <cursoragent@cursor.com>

Cherry-picked from decolua#141 (author: LinearSakana / zx <me@char.moe>) - Implement client identity spoofing with numeric enums (ideType: 9, pluginType: 2) - Add runtime platform detection for User-Agent and metadata - Implement per-connection session ID caching (binary-compatible format) - Add ANTIGRAVITY_HEADERS (X-Client-Name, X-Client-Version, x-goog-api-client) - Add X-Machine-Session-Id header injection - Align metadata/mode parameters across all Antigravity API calls - Implement double injection for system prompt (raw + [ignore] wrapped) - Rename internal anti-loop header to x-request-source for anonymity Skipped: commit 6 (signature side-channel caching) — kept DEFAULT_THINKING_GEMINI_SIGNATURE Co-authored-by: Cursor <cursoragent@cursor.com>

### Bug Fixes * remove duplicated opencode prefix from model IDs and handle it in executor ([180f884](180f884)) * update opencode endpoint and model IDs ([6be8a03](6be8a03)) ### Features * add opencode provider ([03c846e](03c846e)) ## [0.2.96](5645d0a...v0.2.96) (2026-02-24) ### Bug Fixes * GitHub Copilot model ([95fd950](95fd950)) * **auth:** allow HTTP for local network ([0a394d0](0a394d0)) * **auth:** prevent auto-login after logout ([49df3dc](49df3dc)) * **codex:** use user-agent detection for Droid CLI compatibility ([8c6e3b8](8c6e3b8)) * Correct indentation for clarity in chatCore and claude-to-openai response handlers ([fa06226](fa06226)) * correct token extraction for Claude non-streaming responses ([decolua#131](https://github.com/involvex/involvex-claude-router/issues/131)) ([9fbd6e6](9fbd6e6)) * **dashboard:** resolve 'Provider not found' for free providers ([45a4d3b](45a4d3b)) * **db:** improve error handling and null checks ([e6ef852](e6ef852)) * **gemini:** improve base64 image data parsing ([5645d0a](5645d0a)) * **github:** Implement dynamic fallback for Codex models requiring /responses endpoint ([decolua#127](https://github.com/involvex/involvex-claude-router/issues/127)) ([6913129](6913129)) * improve code formatting and reduce auto-refresh interval ([7f71916](7f71916)) * improve cursor auto-import reliability on macOS ([decolua#161](https://github.com/involvex/involvex-claude-router/issues/161)) ([d7e06c3](d7e06c3)) * **login:** avoid infinite loading on settings fetch failure ([01c9410](01c9410)) * **open-sse:** emit [DONE] in passthrough SSE mode ([decolua#142](https://github.com/involvex/involvex-claude-router/issues/142)) ([b9a6979](b9a6979)) * prevent race conditions in sticky round-robin ([3ad2f8d](3ad2f8d)) * resolve SonarQube findings and Next.js Image warnings ([7058b06](7058b06)) * update Codex executor for gpt-5.3-codex support ([d7d5dc9](d7d5dc9)) ### Features * add /v1/embeddings endpoint (OpenAI-compatible) ([decolua#146](https://github.com/involvex/involvex-claude-router/issues/146)) ([e1b8361](e1b8361)), closes [decolua#117](https://github.com/involvex/involvex-claude-router/issues/117) * Add Anthropic Compatible provider support ([da5bdef](da5bdef)) * add API endpoint dimension to usage statistics dashboard ([decolua#152](https://github.com/involvex/involvex-claude-router/issues/152)) ([806bd4a](806bd4a)) * add Claude Opus 4.6 to GitHub Copilot provider ([decolua#97](https://github.com/involvex/involvex-claude-router/issues/97)) ([3d60597](3d60597)) * Add Claude Sonnet 4.6 to GitHub Copilot ([decolua#149](https://github.com/involvex/involvex-claude-router/issues/149)) ([4e2a3f8](4e2a3f8)) * add CLI entry points for claude-router commands ([62c632d](62c632d)) * add enable/disable toggle for provider connections ([ed796d2](ed796d2)) * add Gemini 3.1 Pro models to provider ([f2025cc](f2025cc)) * add Gemini embeddings support + Letta compatibility fixes ([a57a8ce](a57a8ce)), closes [decolua#148](decolua#148) * add GLM 5 and MiniMax M2.5 models to providerModels.js; add Claude Sonnet 4.6 to CLI tools ([e1e5a81](e1e5a81)) * add GLM Coding (China) provider and Usage by API Keys statistics ([1ae4e31](1ae4e31)) * add GPT 4o to GitHub Copilot provider ([decolua#98](https://github.com/involvex/involvex-claude-router/issues/98)) ([c090bb0](c090bb0)) * add GPT 5.3 Codex Spark model to pricing and provider models ([decolua#133](https://github.com/involvex/involvex-claude-router/issues/133)) ([c7d4410](c7d4410)) * Add GPT 5.3 Codex to GitHub Copilot ([decolua#150](https://github.com/involvex/involvex-claude-router/issues/150)) ([c4aa424](c4aa424)) * add GPT-3.5 Turbo to GitHub Copilot provider ([e3dbd44](e3dbd44)) * add GPT-4 to GitHub Copilot provider ([6ade8ef](6ade8ef)) * add GPT-4o mini to GitHub Copilot provider ([053e490](053e490)) * add models management and router process control commands ([c65fd42](c65fd42)) * Add OpenAI-compatible provider nodes ([0a28f9f](0a28f9f)) * add password change functionality and dependencies ([23cfb19](23cfb19)) * add pause/resume functionality for API keys ([decolua#158](https://github.com/involvex/involvex-claude-router/issues/158)) ([73388a0](73388a0)) * add Qwen3.5 Coder Model configuration ([decolua#156](https://github.com/involvex/involvex-claude-router/issues/156)) ([f933dd9](f933dd9)) * add request logging functionality and usage metrics display ([e476907](e476907)) * add round-robin routing strategy ([9ebd7d3](9ebd7d3)) * add sticky round-robin routing strategy ([4f292aa](4f292aa)) * add support for GLM 5 (if) ([decolua#123](https://github.com/involvex/involvex-claude-router/issues/123)) ([03ab554](03ab554)) * add URL-based tab state persistence in usage page ([decolua#129](https://github.com/involvex/involvex-claude-router/issues/129)) ([6caef7f](6caef7f)) * allow custom user data directory via DATA_DIR environment variable ([d83bd86](d83bd86)) * **antigravity:** initial steps for Antigravity anti-ban alignment ([a229d79](a229d79)), closes [decolua#141](decolua#141) * **antigravity:** integrate Antigravity tool with MITM support and update CLI tools ([2e854bd](2e854bd)) * **auth:** add model-level rate limit locking for multi-bucket providers ([decolua#120](https://github.com/involvex/involvex-claude-router/issues/120)) ([202fee7](202fee7)), closes [decolua#110](https://github.com/involvex/involvex-claude-router/issues/110) * **auth:** Enhance authentication flow and settings management ([249fc28](249fc28)) * **cli-tools:** update CLI tools and add new models ([a2122e3](a2122e3)) * **cli-tools:** update default local endpoint port to 20128 ([6c41573](6c41573)) * **cli:** add new CLI package with basic scaffolding ([9cf4628](9cf4628)) * **cloud:** harden sync/auth flow, SSE fallback, and update changelog ([3d43983](3d43983)) * **codex:** add GPT 5.3, fix API translation, add thinking levels ([127475d](127475d)) * **codex:** Cursor compatibility + Next.js 16 proxy migration ([1c6dd6d](1c6dd6d)) * **codex:** Cursor compatibility + Next.js 16 proxy migration ([7b864a9](7b864a9)) * **codex:** Cursor compatibility + Next.js 16 proxy migration ([e9b0a73](e9b0a73)) * **config:** add Cloudflare MCP server and account ID configuration ([67297ea](67297ea)) * **cursor:** Add cursor Provider ([0a026c7](0a026c7)) * **cursor:** Integrate Cursor IDE support with OAuth import token flow ([137f315](137f315)) * **docker:** add Docker setup, environment examples, and architecture docs ([5e4a15b](5e4a15b)) * enhance disconnect handling and request tracking in chatCore.js ([decolua#126](https://github.com/involvex/involvex-claude-router/issues/126)) ([3d29b86](3d29b86)) * enhance request handling and error management in chatCore and streamToJsonConverter ([e2db638](e2db638)) * enhance usage stats with sortable columns and improved data handling ([bf6e09b](bf6e09b)) * Enhance usage tracking across response handlers ([a33924b](a33924b)) * **executors:** Improved UI components for displaying provider limits and usage statistics in the dashboard. ([32aefe5](32aefe5)) * **iflow:** add IFlowExecutor with HMAC-SHA256 signature and enable models ([bd23ab4](bd23ab4)) * **iflow:** add kimi-k2.5 model support ([9e357a7](9e357a7)) * implement API key requirement toggle ([4cf25dc](4cf25dc)) * Implement buffer addition to usage tracking for improved context handling ([7881db8](7881db8)) * implement lazy loading for UsagePage with suspense fallback ([decolua#136](https://github.com/involvex/involvex-claude-router/issues/136)) ([05b09e6](05b09e6)) * implement provider connection reordering on create, update, and delete ([f2abcc6](f2abcc6)) * implement real project ID fetching for Antigravity ([decolua#170](https://github.com/involvex/involvex-claude-router/issues/170)) ([ea67742](ea67742)) * implement request tracking and enhance usage stats display ([e4f92cd](e4f92cd)) * implement usage tracking for AI requests ([9c3d6f4](9c3d6f4)) * Improve Antigravity quota monitoring and fix Droid CLI compatibility ([3c65e0c](3c65e0c)) * **open-sse:** add Claude Sonnet 4.6 ([b057c43](b057c43)) * OpenAI compatibility improvements & build fixes ([d9b8e48](d9b8e48)), closes [decolua#18](https://github.com/involvex/involvex-claude-router/issues/18) * **provider:** add free providers and enhance error handling ([bdbe816](bdbe816)) * **providers:** add Minimax Coding (China) provider ([7c609d7](7c609d7)) * **providers:** add provider icons to dashboard ([60bd686](60bd686)) * **providers:** auto-validate API keys on save ([b275dfd](b275dfd)) * rename app to involvex-claude-router and add lenient JSON parsing ([bec206d](bec206d)) * **responses:** respect client streaming preference + string input support ([decolua#121](https://github.com/involvex/involvex-claude-router/issues/121)) ([ac7cedd](ac7cedd)) * **translator:** add thinking parameter support in OpenAI → Claude ([54e01d6](54e01d6)) * **ui:** add cost tracking to usage dashboard and pricing settings ([f302c88](f302c88)) * **ui:** add model support for custom providers and improve UX ([a7a52be](a7a52be)) * Update response handling and logging for improved usage tracking ([df0e1d6](df0e1d6)) * **usage:** implement cost tracking backend and pricing configuration ([a36afaa](a36afaa))

nabz-polo · 2026-03-11T11:50:54Z

@decolua if I start sharing pulls to improve the account anti ban detection are you going to approve my pulls ? I honestly don’t feel like wasting time

decolua · 2026-03-11T12:22:26Z

if I start sharing pulls to improve the account anti ban detection are you going to approve my pulls ? I honestly don’t feel like wasting time

@nabz-polo Sure, my friend. That’s exactly what everyone is hoping for. I’ve already updated the headers to match the latest Antigravity version, and added round-robin for accounts and per-account proxies as well — all mainly to help with anti-ban.

zx added 2 commits February 17, 2026 10:57

LinearSakana changed the title ~~feat(antigravity): initial steps for Antigravity defense alignment~~ feat(antigravity): initial steps for Antigravity anti-ban alignment Feb 17, 2026

zx added 2 commits February 17, 2026 20:09

LinearSakana marked this pull request as ready for review February 17, 2026 12:48

feat(antigravity): update default system prompt with double injection

2e62bfe

feat(antigravity): implement session ID caching and retrieval for sig…

12a909d

…natures

chore: trigger PR update

d80fc29

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat(antigravity): initial steps for Antigravity anti-ban alignment#141

feat(antigravity): initial steps for Antigravity anti-ban alignment#141
LinearSakana wants to merge 7 commits intodecolua:masterfrom
LinearSakana:feat/anti-antigravity-ban

LinearSakana commented Feb 17, 2026 •

edited

Loading

Uh oh!

RepairYourTech commented Feb 19, 2026

Uh oh!

xuandung38 commented Feb 19, 2026

Uh oh!

RepairYourTech commented Feb 19, 2026

Uh oh!

decolua commented Feb 19, 2026

Uh oh!

LinearSakana commented Feb 19, 2026

Uh oh!

RepairYourTech commented Feb 19, 2026

Uh oh!

decolua commented Feb 20, 2026

Uh oh!

nabz-polo commented Mar 11, 2026

Uh oh!

decolua commented Mar 11, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Conversation

LinearSakana commented Feb 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Description

Changes

Verification

Uh oh!

RepairYourTech commented Feb 19, 2026

Uh oh!

xuandung38 commented Feb 19, 2026

Uh oh!

RepairYourTech commented Feb 19, 2026

Uh oh!

decolua commented Feb 19, 2026

Uh oh!

LinearSakana commented Feb 19, 2026

Uh oh!

RepairYourTech commented Feb 19, 2026

Uh oh!

decolua commented Feb 20, 2026

Uh oh!

nabz-polo commented Mar 11, 2026

Uh oh!

decolua commented Mar 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

LinearSakana commented Feb 17, 2026 •

edited

Loading

decolua commented Mar 11, 2026 •

edited

Loading