[Hieraphant]

What

Review fixes for upstream 5uck1ess/devkit#114 (review pullrequestreview-5293488905). Merging this into feat/agy-runner-devkit-ask updates that PR automatically. The branch is also merged with current upstream main (v2.1.53); there were no conflicts.

Review items → changes

#	Reviewer asked	Change
1	Unverified agy exec [-C dir] - argv	Default is now agy --dangerously-skip-permissions --print, prompt on stdin, cwd via cmd.Dir — the shape the maintainer smoke-tested against agy v1.0.0 in 5uck1ess#102 and that the headless reference documents. --print goes last because the v1.5.2 release notes record a fix for a valueless prompt flag swallowing the next flag. Exit-0 Error: ... lines are surfaced as errors (agyOutputIsError from feat/agy-runner).
2	Recursion	DEVKIT_ASK_DEPTH: refused at depth ≥ 1; every peer is launched with the depth incremented via new RunOpts.Env (applied by claude/codex/gemini/agy runners). Malformed values refused.
3	Sandbox / workdir	workdir must be an existing directory, validated before anything is spawned. --dangerously-skip-permissions mirrors gemini -y. --sandbox is documented and present in the binary but not defaulted: the binary also reports "terminal sandbox unavailable" on some hosts and the combination is unverified. Opt in with AGY_ARGS.
4	Timeout	Optional timeout (seconds), default 300, cap 1800; zero/negative/NaN/non-numeric/over-cap rejected; cap checked before Duration conversion; deadline hit reported as <peer> timed out after <d>.
5	Docs	CLAUDE.md runners row lists agy.go; MCP tools row lists devkit_ask + depth guard. README tool list and runner lines updated.
6	"Generated with Claude Code" in PR body	Not editable from this fork PR — replacement body for 5uck1ess#114 is in the follow-up notes.

Evidence for the agy invocation

agy could not be executed in the environment that produced this branch (the sandbox refused to run the downloaded binary). What was checked instead:

• feat: add AgyRunner for Google Antigravity CLI 5uck1ess/devkit#102's smoke test against v1.0.0: stdin + --print works; an argv prompt was ignored.
• Official headless reference: -p/--print/--prompt, --output-format, --input-format, --print-timeout (default 0s), --sandbox, --dangerously-skip-permissions; no working-directory flag.
• Strings in the v1.5.2 Linux binary (sha512-verified download from the official installer's manifest): all of the above flags present; "Print mode: --dangerously-skip-permissions set, auto-approving all tool permissions"; "the %s tool(s) required approval that headless mode cannot prompt for, so they were auto-denied"; release notes stating print-timeout now exits 3 with an AGY_ERROR line on stderr, and the fix for --print --sandbox 'do the task' mis-parsing.

Open question for the maintainer

isDevkitMCPTool in src/cmd/guard.go allows any mcp__plugin_devkit_devkit-engine__* tool during enforced steps, so devkit_ask is already allowed there by prefix. Not changed here; flagged in case devkit_ask should be blocked during hard steps.

Verification

gofmt -l .            # clean
go vet ./...          # clean
go test ./... -race -count=1   # all packages pass

New tests: src/runners/agy_test.go, src/runners/agy_run_test.go (fake agy on PATH; unix only like claude_run_test.go), src/mcp/ask_test.go (fake peer injected via askDetectRunners).

---

Generated by Claude Code