Multi-account CLI for Antigravity products:

• Antigravity CLI (agy)
• Antigravity IDE
• Antigravity desktop

Manage Google accounts, quotas, and session switching from a single static binary. Own encrypted local store — no other apps required for login or account management.

Module: github.com/shyim/agm

go install github.com/shyim/agm@latest

Or from a clone of this repository:

go build -o agm .
# optional: install to PATH
cp agm ~/.local/bin/agm

Requires Go 1.22+ to build. Runs on macOS, Linux, and Windows.

agm help

agm init                          # create local store (also automatic)
agm login                         # add a Google account via browser OAuth
agm list
agm switch you@gmail.com --target agy

agm login
# alias: agm add

1. Listens on http://localhost:8888 (falls back through 8892 if busy)
2. Opens the browser for Google consent (offline access + refresh token)
3. Stores encrypted tokens and a quota snapshot locally

Run once per Google account.

Imports the currently active session only. For additional accounts, use agm login or switch the product session and import again.

agm export accounts_backup.json
agm import-backup accounts_backup.json

Exports keep fields encrypted. Restoring on another machine needs the same master key (.mk). Prefer agm login on a fresh machine.

agm switch <email|alias|partial> [--target agy|ide|all]

agm switch work --target agy
agm switch you@gmail.com -t ide
agm switch personal --target=all

Expired access tokens are refreshed automatically when a refresh token is available.

agm alias work you@gmail.com
agm switch work --target agy
agm alias          # list
agm unalias work

agm list                       # accounts + quota summary (tags: cli / ide)
agm info you@gmail.com         # per-model quotas
agm status                     # active account snapshot
agm refresh you@gmail.com
agm refresh-all
agm validate                   # refresh expired tokens only
agm sync                       # local DB vs IDE vs CLI credentials
agm doctor                     # diagnostics
agm watch --interval 15        # live list
agm remove you@gmail.com
agm auto-switch --min 40 --model claude

Default: ~/.antigravity-agent/

~/.antigravity-agent/
├── cloud_accounts.db    # SQLite (encrypted token/quota fields + settings)
├── .mk                  # AES-256 master key as hex (mode 0600)
└── aliases.json         # optional shortcuts

Created automatically on first use.

  agm login / import-*
           │
           ▼
   ~/.antigravity-agent/
     cloud_accounts.db
           │
           │  agm switch --target …
     ┌─────┴─────┐
     ▼           ▼
    agy         IDE
  keychain     vscdb

• Credential store — macOS Keychain (gemini / antigravity), Linux secret-tool, Windows Credential Manager
• SQLite — unified OAuth entry in Antigravity state.vscdb (antigravityUnifiedStateSync.oauthToken)

Restarting IDE/desktop after switch is best-effort. Token injection still applies if the executable is not found.

• Tokens encrypted at rest with AES-256-GCM (agm_enc_v1:…)
• Master key in .mk — keep ~/.antigravity-agent private (0700 / 0600)
• Do not commit .mk, databases, or export files
• Uses the public Antigravity OAuth client (same as the official apps)

agm doctor

go test ./...
go vet ./...
go build -o agm .

.
├── main.go
├── go.mod                 # module github.com/shyim/agm
├── internal/
│   ├── api/               # OAuth, refresh, quota
│   ├── credstore/         # OS credential store
│   ├── crypto/            # master key + AES-GCM
│   ├── db/                # SQLite + IDE inject
│   ├── paths/
│   ├── process/
│   ├── proto/
│   ├── target/            # agy | ide | all
│   └── aliases/
└── README.md

See LICENSE in this repository.