2026 Кризис доверия к open source Gemini CLI: миграция на Antigravity CLI и решение об удалённом Mac

В июне 2025 Google выпустил Gemini CLI под Apache 2.0: 100 000+ звёзд на GitHub, 6000+ merged pull requests, активный fork graph и production runbooks у десятков компаний. 19 мая 2026 на Google I/O анонсировали Antigravity CLI и cutoff 18 июня 2026 для bundled API-доступа Gemini CLI у free, Pro и Ultra. Antigravity — closed source; free-tier упал с 1000 до 20 req/day (−98 %). GitHub discussion с ~31 net downvotes фиксирует bait-and-switch sentiment. Этот текст — технический decision runbook: три numbered pain points, матрица CLI, шесть шагов миграции, hard numbers, разбор влияния на OpenClaw/Hermes/Cursor и bridge к SFTPMAC remote Mac для 7×24 agent gateways на Apple Silicon с launchd и стабильным egress.

1. Три pain points: trust, quota cliff, agent continuity

Vendor pivot терпим, когда boundary conditions известны заранее. История Gemini CLI ломается по трём осям, которые platform engineering должен закладывать в architecture review. Open-source trust erosion: Apache 2.0 позволял аудит сетевых вызовов, патч race conditions в CLI wrapper и reproducible builds в air-gapped CI. Antigravity CLI как closed-source binary убирает эти controls — вы не можете grepнуть бинарник на hardcoded telemetry endpoints или подставить patched build в production, пока ждёте релиз Google. Quota cliff: 1000 → 20 req/day — не throttling, а denial of service для agent loop с repo scan + tool calls; один interactive session с five-round-trip pattern сжигает четверть суточного free Antigravity budget. Agent continuity: OpenClaw gateway держит long-lived WebSocket/TCP к channel adapters; Hermes compacts memory layers в ~/.hermes; Cursor Cloud Agent polling не знает про ваш Google subscription calendar — OAuth expiry на host = silent provider failure с green channel probe.

Эффекты мультипликативны. Solo dev может вручную экономить 20 requests; команда с nightly CI, где gemini CLI — default reviewer, исчерпывает Antigravity free до первого merge batch. Enterprise contract защищает другой path, но shadow usage через founder Ultra OAuth на bare-metal server остаётся unprotected. Tag каждый workload entitlement class до выбора migration branch.

2. Таймлайн: Apache 2.0 → cutoff 18 июня

Июнь 2025: релиз Gemini CLI, Apache 2.0, 100k+ GitHub stars, 6000+ merged PR — signal уровня early Docker/K8s CLI adoption. Организации инвестировали в internal mirrors, SBOM для npm bundle, training. 19 мая 2026 (Google I/O): Antigravity CLI как forward path; bundled Gemini CLI API access sunset для consumer tiers. 18 июня 2026: hard cutoff для free, Pro, Ultra без отдельного paid API key. Enterprise Standard/Enterprise и billing через Google AI Studio/Cloud с own key — вне cutoff, если service account реально deployed на server, а не OAuth token в ~/.config на shared Mac mini.

Окно миграции ~4 недели, часто overlap с Q2 release freeze. Treat 18 июня как hard dependency в change calendar; staging на bundled Ultra OAuth упадёт в prod синхронно с cutoff, если не cut over credentials.

3. Что меняет Antigravity CLI на уровне runtime

Antigravity — не rename. Distribution model: closed-source binary — нет source-level audit networking behavior, нет local patch для blocking bug, нет deterministic hash verify в supply chain pipeline. Subscription bundled access reroutes в Antigravity quota model. Makefile targets, pre-commit hooks, OpenClaw provider templates с gemini CLI verbs требуют explicit regression matrix: flag compatibility, error code mapping, latency profile под load — не assume drop-in.

Open-source Gemini CLI repo остаётся на GitHub. Path BYO API key + metered billing сохраняет inspectability ценой budget line items и key rotation discipline. Antigravity оптимизирует convenience в Google walled garden; BYO Gemini — transparency; Claude Code / Codex CLI — model diversity. Ни один path не fix agent uptime — это hosting и process supervision layer.

На Apple Silicon host CLI latency часто упирается не в CPU, а в cold start Node wrapper и TLS handshake к Google endpoint; closed binary усложняет strace/dtrace profiling при regression. На remote Mac с pinned semver и launchd KeepAlive вы хотите reproducible startup time — closed Antigravity превращает perf tuning в black box.

4. Матрица CLI: Antigravity vs BYO key vs alternatives

Матрица для architecture committee: scores отражают agent-heavy ops, не brand loyalty.

Rule of thumb: >20 model round-trips/day — любой serious agent — Antigravity free unusable. Compliance lane requiring source read → Antigravity fail. Skills на agentskills.io decouple procedure from provider: swap model ID в openclaw.json, не переписывай SKILL.md triggers.

5. Математика квот и Enterprise exceptions

Minimal agent loop: user msg + repo scan + 3 tool calls + summary ≈ 5 API-equivalent requests. At 1000/day bundled Gemini CLI → ~200 loops/day. At 20/day Antigravity free → 4 loops. 98 % reduction bundled daily capacity. CI с one CLI invocation per PR × 10 engineers can exhaust budget pre-lunch.

Enterprise Standard/Enterprise: separate contractual schedules. Paid Gemini API key via AI Studio/Cloud: recommended for machine-facing workloads. Document три billing IDs: consumer OAuth, enterprise service account, metered API key. Mixing — classic cause «agents dead on schedule while dashboard shows paid seat».

• 100 000+ GitHub stars (June 2025 launch window).
• 6000+ merged PRs — non-trivial corporate investment signal.
• 1000 → 20 bundled free daily requests.
• 18 июня 2026 — cutoff free/Pro/Ultra bundled access.
• ~31 net downvotes на representative GitHub discussion thread.

6. Шесть шагов миграции до 18 июня

1. Inventory всех Gemini CLI touchpoints. grep infra repos, CI YAML, OpenClaw/Hermes provider blocks, Cursor hooks; tag human-interactive vs unmanned gateway.
2. Classify entitlement per environment. Separate consumer OAuth, enterprise contract, BYO API key; servers on bundled Ultra must move pre-cutoff.
3. Select target CLI per workload class. Gateways/CI → BYO key or Claude/Codex; solo editing → Antigravity only if quota fits; compliance → Apache 2.0 Gemini + audited keys.
4. Rotate credentials into secret store. Remove OAuth from shell profiles on shared Mac minis; short-lived keys + rotation alarms; never commit .env masked by bundled auth.
5. Pin versions + regression probes. Lock CLI semver in CI images; scripted session with production-equivalent tool calls; measure burn vs Antigravity 20 or API budget alerts.
6. Cut over gateways on supervised remote Mac. launchd KeepAlive, channel probes, laptop off critical path; APFS snapshot before provider URL/model ID swap.

Rollback: keep previous provider block feature-flagged 7 days. OpenClaw requires explicit gateway restart after provider edit — см. наш launchd gateway restart guide.

# Inventory helper из корня infra repo
grep -RIn "gemini" .github/workflows Makefile openclaw.json 2>/dev/null
grep -RIn "GOOGLE_API_KEY\|GEMINI" .env.example deploy/ 2>/dev/null

7. Open-source trust, isitopen.ai, community backlash

OSS licenses — legal promises; business models still pivot default experience. Apache 2.0 marketing для Gemini CLI создал reasonable expectation inspectable canonical terminal client. Antigravity closed-source default onboarding без удаления old repo = bait-and-switch pattern: narrative continuity «Gemini in terminal» при opaque binary path. GitHub discussions с visible pushback, включая posts с ~31 net downvotes на official framing — rare signal в maintainer-friendly communities.

Linux Foundation promotes isitopen.ai evaluation checklist: license, source availability, build reproducibility, data handling, exit strategy. Не заменяет legal review, но даёт platform team vocabulary reject closed binaries в regulated lanes. Pair с internal «days until next vendor pivot» metric — optimism не control.

Trust recovery slower than loss. Teams diversify models, keep Skills portable — healthy stack: provider abstraction at gateway, Skills in SKILL.md, secrets in vault, hosts with explicit SLA.

8. OpenClaw, Hermes, Cursor: provider layer и uptime

Terminal CLI — front door only. Production stack 2026: Cursor Agent Skills + OpenClaw multi-channel gateways + Hermes persistent-memory bots на macOS/Linux hosts с provider blocks. Cursor: bundled Gemini CLI access loss без Antigravity или own key; Cloud Agents inherit host credentials — fix host first. OpenClaw: stale Gemini provider → green probes, silent model failure on OAuth expiry; run doctor ladder post-swap. Hermes: CLI auth death mid-compaction looks like «bot forgot» — actually provider block dead.

agentskills.io Skills decouple procedure from provider. Post-migration update CLI verb examples in Skills, keep triggers stable. Multi-model fallback patterns: наш Cursor Agent Skills guide. Never prod cutover same day as laptop Antigravity experiment — sequence: staging remote Mac → channel probes → load test → prod with snapshot rollback.

Provider swap на gateway без restart — classic footgun: daemon holds stale HTTP client pool bound to old auth headers. launchd-managed restart после config change — mandatory step, не optional cleanup.

9. Remote Mac 7×24: launchd, Metal, egress

Subscription auth belongs on human workstation; machine workloads need stable keys + measurable uptime. Sleeping MacBook interrupts OpenClaw/Hermes regardless of CLI vendor. Rented Mac mini on Apple Silicon: launchd KeepAlive для gateway process, macOS-native toolchain для Xcode-adjacent agents (codesign, simctl hooks), APFS snapshots pre-provider-edit, SFTP/Git sync для Skill repos — same ops pattern как WeChat ClawBot и Cursor gateway hosting в наших 2026 guides.

Apple Silicon UMA на M4-class host даёт headroom для concurrent agent orchestration без swap thrashing — relevant когда gateway fan-out triggers sub-agents. Metal не ускоряет Gemini API calls, но ускоряет local embedding/index steps в hybrid RAG pipelines рядом с CLI agent — reason держать agent host на real Mac hardware, не Linux VPS без Apple stack.

Post-migration sequence на SFTPMAC-class host: Node 22 + pinned CLI semver, API keys via env readable only gateway user, launchd restart, channel + doctor probes, CI push openclaw.json/Skills с checksum gates. Next Google quota pivot — swap provider config on server без re-pairing phones или OAuth на closed laptop в 02:00 UTC.

20 Antigravity req/day cannot sustain Telegram gateway; modest BYO budget needs continuous monitoring scripts — argument against laptop host suspending those on lid close. Remote Mac rental converts Gemini CLI controversy из emergency в scheduled infra upgrade с uptime metrics.

10. FAQ

Точная дата cutoff bundled access? 18 июня 2026 для free, Pro, Ultra без отдельного paid key.

Enterprise affected? Enterprise Standard/Enterprise вне consumer cutoff — verify service accounts on servers.

Можно остаться на open-source Gemini CLI? Да, с own Gemini API key и metered billing; Apache 2.0 repo available.

Antigravity для CI? Нет на 20-req/day free tier.

Alternatives? Claude Code, Codex CLI, BYO Gemini; transparency via isitopen.ai.

Заключение: diversify CLI auth, stabilize agents на remote Mac

Часть 1 — Value. Workload mapping, CLI path per class, credential rotation до 18 июня превращает vendor pivot в controlled migration. Skills и gateway configs сохраняются; dependence на bundled OAuth уходит.

Часть 2 — Limits. Antigravity closed source + 98 % free cut — poor foundation для 7×24 agents без enterprise rates. Laptops sleep. CLI diversification без centralized uptime multiplies failure modes.

Часть 3 — SFTPMAC bridge. SFTPMAC remote Mac rental — Apple Silicon macOS с launchd-supervised OpenClaw, Hermes, Cursor gateways, SFTP workspace sync, stable egress для model APIs beyond subscription bundling. Для teams с always-on AI agents аренда dedicated Mac beats re-auth Gemini/Antigravity на machine you close nightly — migrate keys to server, one full channel acceptance cycle, Skills portable для next vendor pivot.