You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
bun run build fails in checkGaGraph when repository is cloned into a directory named antigravity #46
Because graph.files holds absolute filesystem paths and GA_FORBIDDEN_SOURCE is unanchored, cloning the repository into a directory named antigravity (for example /workspace/antigravity) causes every file path to match /\/antigravity\// on the checkout directory segment.
Reproduction
Clone the repository into a folder named antigravity:
git clone https://github.com/cortexkit/antigravity-auth.git antigravity
cd antigravity
bun run build
packages/opencode build fails immediately in checkGaGraph:
error: graph.ga: forbidden GA source /.../antigravity/packages/opencode/src/common-auth-embedded/quota/codec.js
at checkGaGraph (packages/opencode/scripts/build-tui.ts:165:17)
Fix
Slice audited file paths from the last /src/ segment before testing GA_FORBIDDEN_SOURCE so parent checkout directory names above src/ cannot trigger false positives while forbidden paths under src/ (/src/antigravity/, /src/rpc/, /src/plugin/, etc.) remain blocked.
Thanks for the clear report and reproduction. Confirmed: building from a checkout directory named antigravity fails in checkGaGraph, because the forbidden-path pattern is matched against the absolute path. The same happens for parent directories named plugin, hooks or rpc, and a separate check in the same script has the same problem with a parent directory named tools. We'll follow up in #47.
Fixed in 3.0.14 (https://github.com/cortexkit/antigravity-auth/releases/tag/v3.0.14) by #47: the build's checks now compare paths relative to the package root, so a checkout under a folder named antigravity, plugin, hooks or rpc builds. Thanks again for the report and the fix.
Activity
agauth-alfonso commentedon Oct 26, 2026
Thanks for the clear report and the fix PR. We're reproducing it against the current code and will reply here with the result.
agauth-alfonso commentedon Oct 26, 2026
Thanks for the clear report and reproduction. Confirmed: building from a checkout directory named
antigravityfails incheckGaGraph, because the forbidden-path pattern is matched against the absolute path. The same happens for parent directories namedplugin,hooksorrpc, and a separate check in the same script has the same problem with a parent directory namedtools. We'll follow up in #47.agauth-alfonso commentedon Oct 27, 2026
Fixed in 3.0.14 (https://github.com/cortexkit/antigravity-auth/releases/tag/v3.0.14) by #47: the build's checks now compare paths relative to the package root, so a checkout under a folder named
antigravity,plugin,hooksorrpcbuilds. Thanks again for the report and the fix.