fix(antigravity): comprehensive fix for user skills, bypass permissions, subagent execution

omnigent/antigravity_native_bridge.py

@@ -339,6 +339,31 @@ def prepare_bridge_dir(bridge_id: str) -> Path:
 )
 
 
+# agy resolves imported plugins (skills + hooks) relative to its Gemini dir, so a
+# bridge-owned ``--gemini_dir`` starts with none of the user's plugins unless they
+# are seeded. ``plugins/`` is symlinked rather than copied: the payload is a git
+# checkout per plugin, and a link keeps a mid-session ``/plugin install`` or update
+# visible instead of pinning a stale copy.
+_AGY_PLUGINS_DIR = "plugins"
+_AGY_IMPORT_MANIFEST = "import_manifest.json"
+
+
+# agy's non-plugin skill trees, relative to the Gemini dir — the "Global" and
+# "Shared" sources its ``/skills`` panel names. They are linked for the same
+# reason plugins are: :func:`~omnigent.spec.skill_sources._agy_skill_dirs`
+# enumerates them from the user's REAL home, so a session that could not resolve
+# them under ``--gemini_dir`` would offer a skill agy then fails to expand.
+#
+# The panel's other two sources need no seeding: the workspace tree
+# (``<ws>/.agents/skills``) is not under the Gemini dir at all, and agy recreates
+# ``antigravity-cli/builtin/skills`` in whatever Gemini dir it is launched with
+# (live-verified — isolated dirs carry the same builtins as the real home).
+_AGY_SKILL_DIRS = (
+    Path("antigravity-cli") / "skills",
+    Path("skills"),
+)
+
+
 def agy_home_dir(bridge_dir: Path) -> Path:
     """Return the parent directory for this session's isolated agy state.
 
@@ -534,12 +559,80 @@ def seed_isolated_agy_home(
     with contextlib.suppress(OSError):
         (iso_gemini / _MCP_CONFIG_DIR / ".migrated").touch()
 
+    _seed_isolated_agy_plugins(real_home, iso_gemini)
+    _seed_isolated_agy_skills(real_home, iso_gemini)
+
     if trusted_workspace is not None:
         _seed_isolated_agy_workspace_trust(iso_gemini, Path(trusted_workspace))
 
     return {}
 
 
+def _seed_isolated_agy_plugins(real_home: Path, iso_gemini: Path) -> None:
+    """Expose the user's imported agy plugins under the isolated Gemini dir.
+
+    Links ``config/plugins`` to the real tree and copies ``import_manifest.json``
+    (agy needs both: the manifest declares which plugins are imported, the
+    directory holds their skills and hooks). Without this an omnigent-spawned
+    session lists zero plugin skills while a direct ``agy`` run lists them all.
+
+    Best-effort: a user with no plugins, or a platform that refuses symlinks,
+    simply gets a session without them rather than a failed launch.
+
+    :param real_home: The user's real home directory.
+    :param iso_gemini: The bridge-owned ``--gemini_dir`` being seeded.
+    """
+    real_config = real_home / ".gemini" / _MCP_CONFIG_DIR
+    iso_config = iso_gemini / _MCP_CONFIG_DIR
+
+    _link_into_isolated_gemini_dir(real_config / _AGY_PLUGINS_DIR, iso_config / _AGY_PLUGINS_DIR)
+
+    real_manifest = real_config / _AGY_IMPORT_MANIFEST
+    if real_manifest.is_file():
+        with contextlib.suppress(OSError):
+            (iso_config / _AGY_IMPORT_MANIFEST).write_bytes(real_manifest.read_bytes())
+
+
+def _seed_isolated_agy_skills(real_home: Path, iso_gemini: Path) -> None:
+    """Expose the user's Global and Shared agy skills under the isolated Gemini dir.
+
+    Links the trees in :data:`_AGY_SKILL_DIRS` back to the real home so the
+    ``/skills`` menu — which enumerates them from that same real home — cannot
+    offer a skill this session's agy would fail to expand.
+
+    Best-effort, like the plugin seed: a user with neither tree, or a platform
+    that refuses symlinks, gets a session without them rather than a failed launch.
+
+    :param real_home: The user's real home directory.
+    :param iso_gemini: The bridge-owned ``--gemini_dir`` being seeded.
+    """
+    for rel in _AGY_SKILL_DIRS:
+        _link_into_isolated_gemini_dir(real_home / ".gemini" / rel, iso_gemini / rel)
+
+
+def _link_into_isolated_gemini_dir(real: Path, link: Path) -> None:
+    """Symlink *link* at the isolated Gemini dir to the real tree *real*.
+
+    Linking rather than copying keeps a tree the user edits mid-session (a
+    ``/plugin install``, a newly authored skill) visible instead of pinning a
+    stale snapshot. A missing source seeds nothing.
+
+    :param real: Source directory in the user's real ``~/.gemini``.
+    :param link: Path to create under the bridge-owned ``--gemini_dir``.
+    :returns: None.
+    """
+    if not real.is_dir():
+        return
+    with contextlib.suppress(OSError):
+        # Re-seeding an existing bridge dir must not fail on the prior link;
+        # drop a stale or broken one so the target is always current.
+        if link.is_symlink() or link.is_file():
+            link.unlink()
+        if not link.exists():
+            link.parent.mkdir(mode=0o700, parents=True, exist_ok=True)
+            link.symlink_to(real.resolve(), target_is_directory=True)
+
+
 # agy's periodic engagement survey ("How's the CLI experience so far?") is gated by
 # this ``settings.json`` key. Its modal footer line ``esc to cancel`` is identical
 # to :data:`_AGY_ACTIVE_MARKER` (the running-turn signal the TUI inject path keys