language_server_macos_arm causes ~250 GB/day uncontrolled upload to daily-cloudcode-pa.googleapis.com

[YiChin-17]

Environment

• macOS (Apple Silicon, ARM)
• Antigravity version: 2.1.x
• Date of incident: 2026-02-29

Summary

The language_server_macos_arm process caused a single-day upload spike of ~250 GB to daily-cloudcode-pa.googleapis.com, triggering an ISP over-quota alert. Normal daily usage is under 2 GB/day.

Observed behavior

The process was uploading at 14–24 MB per burst, approximately every 1 second, sustained over the entire day with no active user session running.

Captured traffic sample (from real-time network monitoring):

13:05:32 → daily-cloudcode-pa.googleapis.com:443  [language_server, PID 24402]  23.44 MB
13:05:33 → daily-cloudcode-pa.googleapis.com:443  [language_server, PID 24402]  20.12 MB
13:05:34 → 34.54.84.110:443                       [language_server, PID 24401]  18.67 MB

7-day monitoring summary (collected via nettop + netstat every 5 minutes):

Date	Mac Upload	WAN Upload	Note
2026-02-29	~250 GB	~250 GB	🚨 Incident day
2026-03-01	0.89 GB	—	Post-fix
2026-03-02	0.22 GB	—	Post-fix
2026-03-03	2.75 GB	2.88 GB	Post-fix
2026-03-04	0.16 GB	0.35 GB	Post-fix

Workaround

Setting the following in settings.json stopped the behavior:

"antigravity.searchMaxWorkspaceFileCount": 100,
"antigravity.persistentLanguageServer": false

After applying the fix, traffic dropped from ~250 GB/day → < 0.1 GB/week (verified with 7-day network monitoring).

Impact

• ISP over-quota warning triggered
• ~250 GB unexpected data usage in a single day
• Computer was completely idle when this occurred

Notes

• User was assigned to the daily-cloudcode-pa endpoint (experimental build). Behavior may be specific to this endpoint.
• The endpoint is one of three hardcoded in the app (cloudcode-pa, daily-cloudcode-pa, canary-cloudcode-pa). Users have no control over endpoint assignment.
• PIDs at time of discovery: 24401, 24402, 24479