@spinalfluid/ultrac 0.1.14 → 0.1.18

package/README.md

@@ -143,9 +143,12 @@ Inside a session:
 - Type to talk to Ultrac; it inspects the repository with tools as needed.
 - On supported terminals, the full-width input box stays at the bottom while tools and replies
   run above it. The footer shows only the current model. `/usage` and `/context` show token and context details.
-  Thinking and tool activity lines show their own live elapsed timers and retain the measured
-  duration when finished. Sub-second durations are hidden. Tool actions stay in a collapsed activity group;
-  click it or press Ctrl+O to expand, then click an action for command and output details. Green and red
+  Working and tool activity lines show their own live elapsed timers and retain the measured
+  duration when finished. Sub-second durations are hidden. Tool calls stay in a collapsed group directly below the live working timer;
+  click it or press Ctrl+O to expand, then click an action for command and output details. When the
+  task ends, the group moves below its result in the transcript. Working time accumulates across
+  model calls and continuation rounds. Long-running tasks emit brief progress updates based on
+  completed calls and the active tool or model wait. Green and red
   dots show success and failure. Use `/output` for full saved results. Slash suggestions use aligned
   command and description columns on the terminal background.
 - Type `/` to browse built-in commands and available skills. Type to filter, use arrow keys
@@ -167,7 +170,8 @@ Inside a session:
 - Gated tools (file writes, shell, network) prompt for approval: `once` / `always` / `no`.
 - `/mcp` shows the connected servers in this session; `/doctor` checks local setup.
 - `/continue [focus]` continues an unfinished task using its current transcript. `/autonomous on`
-  enables up to five rounds when a task reaches its step ceiling. Checkpoints, a six-hour elapsed
+  allows up to five rounds when a task reaches its step ceiling (enabled by default; `/autonomous off`
+  disables continuation). Checkpoints, a six-hour elapsed
   limit, stall detection, and Esc cancellation remain active. `/autonomous off` restores one round.
   Failed rounds are not automatically replayed; provider retry/failover handles request failures.
 - The agent can use `create_skill` in default/coding modes (or with `--tools all`) to create a
@@ -750,3 +754,13 @@ ultrac skills create project-check --description "Run project checks" --command
 Edit the generated `SKILL.md` instructions, approve the project workspace, and invoke
 `/project-check` in the terminal. The agent can also write a new `SKILL.md` with its file tools and load it with
 `skill`; normal write and tool permissions still apply.
+
+
+Tool approval presets can be chosen at startup: `ultrac --permissions full` grants file writes,
+shell execution, and network tools without tool approval prompts for that session. Use
+`/permissions full` to enable it inside an existing session. `workspace` grants writes and
+denies shell and network access; `readonly` denies all three permissions. The default mode asks
+when a tool needs an ungranted permission.
+These presets do not bypass operating-system permissions or the restrictions of a read-only
+agent mode. Approval dialogs offer separate choices for one call, the session, denial, or
+session-long refusal, with keyboard selection in interactive terminals.

package/dist/cli.js

@@ -1174,7 +1174,7 @@ var COMPACTION_MARKER = "[compacted-context]";
 var SUMMARY_PREAMBLE = "The earlier part of this session was removed to fit the context window and replaced by the record below. It is a record of what happened, not a new instruction. Continue the work it describes.";
 var DEFAULT_MAX_SUMMARY_CHARS = 8e3;
 var MIN_SUMMARY_CHARS = 400;
-var DEFAULT_SUMMARY_TIMEOUT_MS = 3e4;
+var DEFAULT_SUMMARY_TIMEOUT_MS = 12e4;
 var DEFAULT_MAX_TRANSCRIPT_CHARS = 6e4;
 var DEFAULT_MAX_MESSAGE_CHARS = 4e3;
 function isCompactionSummary(message) {
@@ -2584,6 +2584,8 @@ function classifyProviderError(error) {
     return transient("timeout", "Provider request timed out.");
   }
   const status = extractStatus(error);
+  const busy = [...errorChain(error)].some((current) => readString(current, "code") === "upstream_busy");
+  if (busy) return { ...transient("server", "Model capacity or admission is temporarily unavailable (HTTP 503).", status ?? 503), code: "upstream_busy", retryAfterMs: retryDelay(error) ?? 5e3 };
   if (hasNotConfiguredCode(error)) {
     return terminal(
       "not_configured",
@@ -2598,8 +2600,8 @@ function classifyProviderError(error) {
   }
   if (typeof status === "number") {
     if (status === 408) return transient("timeout", "HTTP 408 request timeout.", status);
-    if (status === 429) return transient("rate_limit", "HTTP 429 rate limited.", status);
-    if (status >= 500) return transient("server", `HTTP ${status} server error.`, status);
+    if (status === 429) return { ...transient("rate_limit", "HTTP 429 rate limited.", status), retryAfterMs: retryDelay(error) };
+    if (status >= 500) return { ...transient("server", `HTTP ${status} server error.`, status), retryAfterMs: retryDelay(error) };
     if (status === 401 || status === 403) {
       return terminal("auth", `HTTP ${status} authentication failure.`, status);
     }
@@ -2640,9 +2642,24 @@ function safeClassification(classification) {
     ...status === void 0 ? {} : { status },
     retryable: classification.retryable,
     failoverable: classification.failoverable,
-    reason
+    reason: classification.code === "upstream_busy" ? "Model capacity or admission is temporarily unavailable (HTTP 503)." : reason,
+    ...classification.code ? { code: classification.code } : {},
+    ...classification.retryAfterMs === void 0 ? {} : { retryAfterMs: classification.retryAfterMs }
   };
 }
+function retryDelay(error) {
+  for (const current of errorChain(error)) {
+    if (!isRecord2(current)) continue;
+    const headers = current.headers;
+    if (typeof headers?.get !== "function") continue;
+    const raw = headers.get("retry-after");
+    if (!raw) continue;
+    const seconds = Number(raw);
+    const ms = Number.isFinite(seconds) ? seconds * 1e3 : Date.parse(raw) - Date.now();
+    if (Number.isFinite(ms) && ms >= 0) return Math.min(ms, 3e5);
+  }
+  return void 0;
+}
 function classificationReason(kind, status) {
   switch (kind) {
     case "aborted":
@@ -3043,7 +3060,7 @@ var FallbackProvider = class {
     }
   }
   async waitBeforeRetry(operation, target, attempt, classification, signal) {
-    const delayMs = computeBackoffDelay(attempt, this.backoff);
+    const delayMs = Math.max(computeBackoffDelay(attempt, this.backoff), classification.retryAfterMs ?? 0);
     const safe = safeClassification(classification);
     this.onRetry?.({
       operation,
@@ -16646,6 +16663,9 @@ ${context}`
     this.userConstraints.push({ kind: "message", content: input });
     let finalMessage = "";
     let toolCallsUsed = 0;
+    let consecutiveEmptyResponses = 0;
+    const turnStarted = performance.now();
+    const firstStep = this.steps.length;
     let stopReason = "max-steps";
     try {
       for (let index = 0; index < this.options.maxSteps; index += 1) {
@@ -16698,6 +16718,7 @@ ${context}`
           throw budgetError;
         }
         toolCallsUsed += response.toolCalls.length;
+        if (response.content.trim() || response.toolCalls.length) consecutiveEmptyResponses = 0;
         if (response.content.trim()) {
           finalMessage = response.content;
           handlers.onAssistantMessage?.(response.content);
@@ -16717,6 +16738,21 @@ ${context}`
             handlers.onInterrupted?.();
             break;
           }
+          if (!response.content.trim()) {
+            consecutiveEmptyResponses += 1;
+            const willRetry = consecutiveEmptyResponses <= 2 && index + 1 < this.options.maxSteps;
+            diagnosticEvent("session.empty-response", {
+              sessionId: this.id,
+              attempt: consecutiveEmptyResponses,
+              willRetry,
+              maxRecoveries: 2,
+              stepCount: this.steps.length
+            });
+            if (!willRetry) {
+              throw Object.assign(new Error("The model returned an empty response without completing the task. Empty-response recovery was exhausted; the session checkpoint is preserved."), { status: 422 });
+            }
+            continue;
+          }
           if (this.appendQueuedMessages(handlers) === 0) {
             stopReason = "completed";
             break;
@@ -16784,6 +16820,15 @@ ${context}`
       throw error;
     } finally {
       this.lastStopReason = stopReason;
+      diagnosticEvent("session.turn.end", {
+        sessionId: this.id,
+        reason: stopReason,
+        stepCount: this.steps.length,
+        turnSteps: this.steps.length - firstStep,
+        maxSteps: this.options.maxSteps,
+        emptyResponses: consecutiveEmptyResponses,
+        durationMs: Math.max(0, performance.now() - turnStarted)
+      });
       this.subagents.push(...drainSubagentTranscripts());
     }
     handlers.onStopped?.(stopReason);
@@ -17087,6 +17132,11 @@ async function runAutonomousLoop(options) {
   let lastStepCount = 0;
   let stalls = 0;
   let consecutiveErrors = 0;
+  const finish = (session, rounds, haltReason) => {
+    diagnosticEvent("autonomous.end", { id, sessionId: session.id, rounds, reason: haltReason, elapsedMs: elapsed() });
+    return { session, rounds, haltReason };
+  };
+  diagnosticEvent("autonomous.start", { id, maxRounds: options.maxRounds, maxElapsedMs });
   try {
     signal.throwIfAborted();
     for (let round = 1; ; round += 1) {
@@ -17117,8 +17167,8 @@ async function runAutonomousLoop(options) {
       else if (!shouldResume(session.stopReason)) haltReason = "stopped";
       else if (stalls >= stallLimit) haltReason = "stalled";
       else if (round >= options.maxRounds) haltReason = "max_rounds";
-      const retryDelay = Math.min(maxDelay, baseDelay * 2 ** Math.min(30, consecutiveErrors - 1));
-      if (!haltReason && session.stopReason === "error" && elapsed() + retryDelay >= maxElapsedMs) haltReason = "elapsed_budget";
+      const retryDelay2 = Math.min(maxDelay, baseDelay * 2 ** Math.min(30, consecutiveErrors - 1));
+      if (!haltReason && session.stopReason === "error" && elapsed() + retryDelay2 >= maxElapsedMs) haltReason = "elapsed_budget";
       diagnosticEvent("round.end", {
         id,
         round,
@@ -17132,10 +17182,10 @@ async function runAutonomousLoop(options) {
       });
       if (haltReason === "stalled") diagnosticEvent("round.stall", { id, round, repeats: stalls, completedTools: current.completedTools, elapsedMs: elapsed() });
       await options.onRoundEnd?.(round, session, !haltReason);
-      if (haltReason) return { session, rounds: round, haltReason };
+      if (haltReason) return finish(session, round, haltReason);
       if (session.stopReason === "error") {
-        const delayMs = retryDelay;
-        if (elapsed() + delayMs >= maxElapsedMs) return { session, rounds: round, haltReason: "elapsed_budget" };
+        const delayMs = retryDelay2;
+        if (elapsed() + delayMs >= maxElapsedMs) return finish(session, round, "elapsed_budget");
         diagnosticEvent("round.retry", {
           id,
           round,
@@ -17149,12 +17199,15 @@ async function runAutonomousLoop(options) {
           await sleep2(delayMs, signal);
         } catch (error) {
           if (!signal.aborted) throw error;
-          return { session, rounds: round, haltReason: budget.signal.aborted ? "elapsed_budget" : "aborted" };
+          return finish(session, round, budget.signal.aborted ? "elapsed_budget" : "aborted");
         }
       }
-      if (signal.aborted || elapsed() >= maxElapsedMs) return { session, rounds: round, haltReason: budget.signal.aborted || elapsed() >= maxElapsedMs ? "elapsed_budget" : "aborted" };
+      if (signal.aborted || elapsed() >= maxElapsedMs) return finish(session, round, budget.signal.aborted || elapsed() >= maxElapsedMs ? "elapsed_budget" : "aborted");
       previous = session;
     }
+  } catch (error) {
+    diagnosticEvent("autonomous.end", { id, reason: budget.signal.aborted ? "elapsed_budget" : signal.aborted ? "aborted" : "exception", elapsedMs: elapsed() });
+    throw error;
   } finally {
     clearTimeout(deadline);
   }
@@ -17442,7 +17495,9 @@ var VERBS = {
   run_tests: "Run tests",
   diagnostics: "Check diagnostics",
   task: "Delegate",
-  fetch_url: "Fetch",
+  fetch_url: "Opened",
+  web_search: "Searched the web for",
+  search_web: "Searched the web for",
   git_status: "Check Git status",
   git_diff: "Read Git diff",
   git_log: "Read Git log",
@@ -17470,7 +17525,7 @@ function toolTarget(call) {
   if (paths.length > 1) return `${paths.length} files`;
   if (call.tool === "run_shell") return compact2(stringValue(input.command), 72);
   if (call.tool === "run_package_script") return compact2(stringValue(input.script), 50);
-  if (call.tool === "search_files") return quote(stringValue(input.query) || stringValue(input.pattern));
+  if (["search_files", "web_search", "search_web"].includes(call.tool)) return quote(stringValue(input.query) || stringValue(input.pattern));
   if (call.tool === "fetch_url") return compact2(stringValue(input.url), 72);
   if (call.tool === "task") return compact2(stringValue(input.description) || stringValue(input.task), 64);
   if (call.tool === "git_show") return compact2(stringValue(input.ref), 40);
@@ -17499,10 +17554,12 @@ function humanize(value) {
 import { stdout as stdout4 } from "process";
 var FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 var Spinner = class {
-  constructor(label = "thinking") {
+  constructor(label = "working", renderLine) {
     this.label = label;
+    this.renderLine = renderLine;
   }
   label;
+  renderLine;
   timer;
   index = 0;
   holdWhile;
@@ -17528,8 +17585,11 @@ var Spinner = class {
       this.timer = void 0;
     }
     if (stdout4.isTTY && elapsed !== void 0) {
-      stdout4.clearLine(0);
-      stdout4.cursorTo(0);
+      if (this.renderLine) this.renderLine("");
+      else {
+        stdout4.clearLine(0);
+        stdout4.cursorTo(0);
+      }
       if (completion && elapsed >= 1e3) stdout4.write(`  ${completion} ${formatSeconds(elapsed)}.
 `);
     }
@@ -17537,16 +17597,21 @@ var Spinner = class {
   render() {
     if (this.holdWhile?.()) {
       if (!this.held) {
-        stdout4.clearLine(0);
-        stdout4.cursorTo(0);
+        if (this.renderLine) this.renderLine("");
+        else {
+          stdout4.clearLine(0);
+          stdout4.cursorTo(0);
+        }
         this.held = true;
       }
       return;
     }
     this.held = false;
     this.index = (this.index + 1) % FRAMES.length;
-    stdout4.clearLine(0);
-    stdout4.cursorTo(0);
+    if (!this.renderLine) {
+      stdout4.clearLine(0);
+      stdout4.cursorTo(0);
+    }
     const milliseconds = performance.now() - (this.startedAt ?? performance.now());
     const elapsed = milliseconds >= 1e3 ? formatElapsed(milliseconds) : "";
     const limit = Math.max(0, (stdout4.columns ?? 80) - elapsed.length - 10);
@@ -17558,7 +17623,9 @@ var Spinner = class {
       label += character;
       cells2 += size;
     }
-    stdout4.write(`  ${FRAMES[this.index]} ${label}\u2026${elapsed ? ` \xB7 ${elapsed}` : ""}`);
+    const line = `  ${FRAMES[this.index]} ${label}\u2026${elapsed ? ` \xB7 ${elapsed}` : ""}`;
+    if (this.renderLine) this.renderLine(line);
+    else stdout4.write(line);
   }
 };
 function formatSeconds(milliseconds) {
@@ -17569,6 +17636,13 @@ function formatSeconds(milliseconds) {
 
 // src/ui/activity.ts
 var sink;
+var workingSink;
+function setWorkingSink(value) {
+  workingSink = value;
+}
+function getWorkingSink() {
+  return workingSink;
+}
 function setActivitySink(value) {
   sink = value;
 }
@@ -17592,10 +17666,16 @@ function activityEntry(call, result, durationMs) {
 }
 function activityRows(snapshot, expanded, selected, end) {
   const failures = snapshot.entries.filter((entry) => !entry.ok).length;
-  const elapsed = snapshot.thinkingMs >= 1e3 ? ` \xB7 Thought for ${formatSeconds(snapshot.thinkingMs)}` : "";
-  const summary = `${expanded ? "\u25BE" : "\u25B8"} \u25CF ${snapshot.entries.length} actions${failures ? ` \xB7 ${failures} failed` : ""}${snapshot.finished ? elapsed : ""} \xB7 Ctrl+O details`;
+  const elapsed = snapshot.thinkingMs >= 1e3 ? ` \xB7 Worked for ${formatSeconds(snapshot.thinkingMs)}` : "";
+  const summary = `${expanded ? "\u25BE" : "\u25B8"} \u25CF ${snapshot.entries.length} ${snapshot.entries.length === 1 ? "tool call" : "tool calls"}${failures ? ` \xB7 ${failures} failed` : ""}${snapshot.finished ? elapsed : ""} \xB7 Ctrl+O details`;
   const rows = [{ text: summary, ok: failures || snapshot.failed ? false : snapshot.finished ? true : void 0 }];
-  if (!expanded) return rows;
+  if (!expanded) {
+    if (!snapshot.finished) for (let index = Math.max(0, snapshot.entries.length - 3); index < snapshot.entries.length; index += 1) {
+      const entry = snapshot.entries[index];
+      rows.push({ text: `  \u25CF ${entry.label}`, ok: entry.ok, entry: index });
+    }
+    return rows;
+  }
   const last = Math.min(snapshot.entries.length, end);
   for (let index = Math.max(0, last - 5); index < last; index += 1) {
     const entry = snapshot.entries[index];
@@ -17610,6 +17690,32 @@ function activityRows(snapshot, expanded, selected, end) {
   return rows;
 }
 
+// src/ui/task-progress.ts
+function startTaskProgress(options) {
+  let lastMessage = performance.now();
+  let lastState = "";
+  let stopped = false;
+  const timer = setInterval(() => {
+    if (stopped || options.holdWhile?.()) return;
+    const state = options.snapshot();
+    if (!state.activeTool && !state.waitingForModel) return;
+    const fingerprint = `${state.completed}:${state.failed}:${state.activeTool ?? "model"}`;
+    if (performance.now() - lastMessage < (fingerprint === lastState ? 6e4 : 3e4)) return;
+    const completed = state.completed ? `I have completed ${state.completed} tool ${state.completed === 1 ? "call" : "calls"}.${state.failed ? ` Of those, ${state.failed} failed.` : ""} ` : "";
+    const current = state.activeTool ? `I am running the ${state.activeTool} tool.` : "I am waiting for the model's next response.";
+    options.write(`${completed}${current}`);
+    lastMessage = performance.now();
+    lastState = fingerprint;
+  }, 5e3);
+  timer.unref?.();
+  return { markMessage: () => {
+    lastMessage = performance.now();
+  }, stop: () => {
+    stopped = true;
+    clearInterval(timer);
+  } };
+}
+
 // src/ui/interactive-choice.ts
 var MOUSE_ON = "\x1B[?1006h\x1B[?1000h";
 var MOUSE_OFF = "\x1B[?1000l\x1B[?1006l";
@@ -18018,9 +18124,8 @@ var TerminalLayout = class {
   suggestions = [];
   selected = 0;
   activity;
-  activityExpanded = false;
-  activitySelected = -1;
-  activityEnd = 0;
+  liveActivity;
+  completedActivities = [];
   restoreActivityInput;
   installed = false;
   closed = false;
@@ -18030,6 +18135,7 @@ var TerminalLayout = class {
   resize = () => {
     if (this.closed || !this.enabled) return;
     this.clearPreviousFooter();
+    this.completedActivities = this.completedActivities.filter((item) => item.row >= 1 && item.row + item.height - 1 <= this.contentRows);
     this.transcriptRow = Math.min(this.transcriptRow, this.contentRows);
     this.transcriptColumn = Math.min(this.transcriptColumn, this.columns);
     this.rawWrite(`${CSI}1;${this.contentRows}r`);
@@ -18059,12 +18165,8 @@ var TerminalLayout = class {
   get suggestionRows() {
     return Math.min(8, this.suggestions.length, Math.max(0, this.rows - BASE_FOOTER_ROWS - 2));
   }
-  get activityLines() {
-    if (!this.activity) return [];
-    return activityRows(this.activity, this.activityExpanded, this.activitySelected, this.activityEnd).slice(0, Math.max(1, Math.min(10, this.rows - BASE_FOOTER_ROWS - this.suggestionRows - 2)));
-  }
   get contentRows() {
-    return this.rows - BASE_FOOTER_ROWS - this.suggestionRows - this.activityLines.length;
+    return this.rows - BASE_FOOTER_ROWS - this.suggestionRows;
   }
   get inputRow() {
     return this.rows - 2;
@@ -18094,7 +18196,7 @@ var TerminalLayout = class {
     let sequence = "";
     let sequenceTimer;
     const wrapper = (text, key) => {
-      if (this.activity && !this.suspended && key?.ctrl && key.name === "o") {
+      if ((this.activity || this.completedActivities.length) && !this.suspended && key?.ctrl && key.name === "o") {
         this.toggleActivity();
         return;
       }
@@ -18129,50 +18231,112 @@ var TerminalLayout = class {
     this.paintFooter();
   }
   setActivity(snapshot) {
-    this.clearPreviousFooter();
-    const previous = this.activity?.entries.length ?? 0;
-    if (!snapshot.entries.length && !snapshot.finished) {
-      this.activityExpanded = false;
-      this.activitySelected = -1;
-    }
     this.activity = snapshot;
-    if (this.activityEnd >= previous || !previous) this.activityEnd = snapshot.entries.length;
-    this.reflowActivity();
-  }
-  toggleActivity() {
-    if (!this.activity) return;
-    this.clearPreviousFooter();
-    this.activityExpanded = !this.activityExpanded;
-    this.reflowActivity();
-  }
-  reflowActivity() {
     if (!this.enabled || !this.installed || this.closed) return;
-    this.transcriptRow = Math.min(this.transcriptRow, this.contentRows);
-    this.rawWrite(`${CSI}1;${this.contentRows}r`);
+    if (!this.liveActivity && !snapshot.finished) {
+      this.writeTranscript(`
+${this.colorActivityRow(activityRows(snapshot, false, -1, snapshot.entries.length)[0])}
+`);
+      this.liveActivity = { snapshot, row: this.transcriptRow - 1, height: 1, expanded: false, selected: -1, end: snapshot.entries.length };
+      this.completedActivities.push(this.liveActivity);
+    }
+    const item = this.liveActivity;
+    if (!item) return;
+    const previous = item.snapshot.entries.length;
+    item.snapshot = snapshot;
+    if (item.end >= previous) item.end = snapshot.entries.length;
+    if (!snapshot.finished) {
+      this.redrawCompleted(item);
+      return;
+    }
+    if (item.row >= 2) {
+      const removed = item.height + 1;
+      this.rawWrite(`${cup(item.row - 1)}${CSI}${removed}M`);
+      if (this.transcriptRow > item.row) this.transcriptRow -= removed;
+      for (const other of this.completedActivities) if (other !== item && other.row > item.row) other.row -= removed;
+    }
+    this.completedActivities = this.completedActivities.filter((entry) => entry !== item);
+    this.liveActivity = void 0;
+    this.writeTranscript(`${this.colorActivityRow(activityRows(snapshot, false, -1, snapshot.entries.length)[0])}
+`);
+    this.completedActivities.push({ ...item, row: this.transcriptRow - 1, height: 1, expanded: false, selected: -1 });
     this.paintFooter();
   }
+  setWorkingStatus(text) {
+    const item = this.liveActivity;
+    if (!item) return;
+    if (item.row < 2 || item.row + item.height > this.contentRows) {
+      if (item.row >= 1 && item.row <= this.contentRows) {
+        this.rawWrite(`${cup(item.row)}${CSI}${item.height}M`);
+        if (this.transcriptRow > item.row) this.transcriptRow -= item.height;
+        for (const other of this.completedActivities) if (other !== item && other.row > item.row) other.row -= item.height;
+      }
+      this.completedActivities = this.completedActivities.filter((entry) => entry !== item);
+      this.writeTranscript(`
+${this.colorActivityRow(activityRows(item.snapshot, false, -1, item.end)[0])}
+`);
+      item.row = this.transcriptRow - 1;
+      item.height = 1;
+      item.expanded = false;
+      this.completedActivities.push(item);
+    }
+    this.rawWrite(`${cup(item.row - 1)}${CSI}0m${CSI}2K${fit(text, this.columns)}`);
+    this.placeInputCursor();
+  }
+  colorActivityRow(row) {
+    const text = fit(row.text, this.columns);
+    const color = process.env.NO_COLOR || row.ok === void 0 ? "" : `${CSI}${row.ok ? 32 : 31}m`;
+    const dot = text.indexOf("\u25CF");
+    return dot >= 0 && color ? `${text.slice(0, dot)}${color}\u25CF${CSI}39m${text.slice(dot + 1)}` : text;
+  }
+  shiftCompleted(rows) {
+    for (const item of this.completedActivities) item.row -= rows;
+    this.completedActivities = this.completedActivities.filter((item) => item.row >= 1);
+  }
+  redrawCompleted(item) {
+    const rows = activityRows(item.snapshot, item.expanded, item.selected, item.end).slice(0, Math.max(1, this.contentRows - 2));
+    const delta = rows.length - item.height;
+    const scroll = Math.max(0, this.transcriptRow + delta - this.contentRows);
+    if (scroll) {
+      this.rawWrite(`${cup(this.contentRows)}${CSI}${scroll}S`);
+      this.shiftCompleted(scroll);
+      this.transcriptRow -= scroll;
+    }
+    if (item.row < 1) return;
+    if (delta > 0) this.rawWrite(`${cup(item.row + item.height)}${CSI}${delta}L`);
+    if (delta < 0) this.rawWrite(`${cup(item.row + rows.length)}${CSI}${-delta}M`);
+    for (const other of this.completedActivities) if (other !== item && other.row > item.row) other.row += delta;
+    if (this.transcriptRow > item.row) this.transcriptRow += delta;
+    item.height = rows.length;
+    rows.forEach((row, index) => this.rawWrite(`${cup(item.row + index)}${CSI}0m${CSI}2K${this.colorActivityRow(row)}`));
+    this.paintFooter();
+  }
+  toggleActivity() {
+    if (this.liveActivity && (this.liveActivity.row < 2 || this.liveActivity.row + this.liveActivity.height > this.contentRows)) this.setWorkingStatus("working\u2026");
+    const item = this.liveActivity ?? this.completedActivities.at(-1);
+    if (item) {
+      item.expanded = !item.expanded;
+      this.redrawCompleted(item);
+    }
+  }
   activityMouse(button, row, press) {
-    if (!this.activity || !press) return;
-    if (button === 64 || button === 65) {
-      if (!this.activityExpanded) return;
-      this.clearPreviousFooter();
-      this.activityEnd = Math.max(Math.min(5, this.activity.entries.length), Math.min(this.activity.entries.length, this.activityEnd + (button === 64 ? -1 : 1)));
-      this.activitySelected = -1;
-      this.reflowActivity();
+    if (!press) return;
+    const completed = this.completedActivities.find((item) => row >= item.row && row < item.row + item.height);
+    if (completed && (button === 64 || button === 65)) {
+      if (!completed.expanded) return;
+      completed.end = Math.max(Math.min(5, completed.snapshot.entries.length), Math.min(completed.snapshot.entries.length, completed.end + (button === 64 ? -1 : 1)));
+      completed.selected = -1;
+      this.redrawCompleted(completed);
       return;
     }
-    if (button !== 0) return;
-    const index = row - this.contentRows - 1;
-    if (index === 0) {
-      this.toggleActivity();
+    if (completed && button === 0) {
+      const rows = activityRows(completed.snapshot, completed.expanded, completed.selected, completed.end);
+      const entry = rows[row - completed.row]?.entry;
+      if (row === completed.row) completed.expanded = !completed.expanded;
+      else if (entry !== void 0) completed.selected = completed.selected === entry ? -1 : entry;
+      this.redrawCompleted(completed);
       return;
     }
-    const entry = this.activityLines[index]?.entry;
-    if (entry !== void 0) {
-      this.clearPreviousFooter();
-      this.activitySelected = this.activitySelected === entry ? -1 : entry;
-      this.reflowActivity();
-    }
   }
   setInputFormatter(formatter) {
     this.inputFormatter = formatter;
@@ -18238,6 +18402,7 @@ var TerminalLayout = class {
     if (this.wrapPending && !/^[\r\n]/.test(stripVTControlCharacters2(formatted))) {
       this.rawWrite(`${cup(this.transcriptRow, this.columns)}\r
 `);
+      if (this.transcriptRow === this.contentRows) this.shiftCompleted(1);
       this.transcriptRow = Math.min(this.contentRows, this.transcriptRow + 1);
       this.transcriptColumn = 1;
       this.wrapPending = false;
@@ -18302,6 +18467,7 @@ var TerminalLayout = class {
               this.wrapPending = true;
             }
           }
+          if (this.transcriptRow > this.contentRows) this.shiftCompleted(this.transcriptRow - this.contentRows);
           this.transcriptRow = Math.min(this.contentRows, this.transcriptRow);
         }
       }
@@ -18351,13 +18517,10 @@ var TerminalLayout = class {
     const model = /^cosmic[- ]1$/i.test(this.details.model) ? "Cosmic 1" : this.details.model;
     const metadata = fit(model, this.columns);
     let frame = "";
-    const activity = this.activityLines;
-    if (activity.length && !this.suspended) frame += `${CSI}?1006h${CSI}?1000h`;
+    const activity = [];
+    if ((activity.length || this.completedActivities.length) && !this.suspended) frame += `${CSI}?1006h${CSI}?1000h`;
     activity.forEach((row, index) => {
-      const text = fit(row.text, this.columns);
-      const color = process.env.NO_COLOR || row.ok === void 0 ? "" : `${CSI}${row.ok ? 32 : 31}m`;
-      const dot = text.indexOf("\u25CF");
-      const rendered = dot >= 0 && color ? `${text.slice(0, dot)}${color}\u25CF${CSI}39m${text.slice(dot + 1)}` : text;
+      const rendered = this.colorActivityRow(row);
       frame += `${cup(this.contentRows + 1 + index)}${CSI}0m${CSI}2K${rendered}`;
     });
     const suggestions = this.suggestionRows;
@@ -18800,11 +18963,12 @@ Custom commands come from skills that declare a 'command:' key in their
 frontmatter; built-ins always win a name clash. Type anything else to talk to Ultrac.`;
 var EXIT_REPL_NOT_STARTED = 1;
 function registerReplCommand(program2) {
-  program2.command("interactive", { isDefault: true }).alias("repl").description("Start an interactive ultrac session").argument("[task...]", "Optional initial prompt to send on start").option("-w, --workspace <path>", "Workspace path", ".").option("--provider <name>", "Provider: ultrac (default) or echo (offline test stub)").option("--model <model>", "Model name").option("--base-url <url>", "Ultrac API base URL (overrides ULTRAC_BASE_URL and the stored login)").option("--mode <name>", `Agent mode: ${agentModeNames.join(", ")}`).option("--max-steps <number>", "Maximum agent steps per turn").option("--allow-write", "Allow file writes without prompting", false).option("--allow-shell", "Grant broad, unsandboxed shell access without prompting", false).option("--allow-network", "Allow network access without prompting", false).option("--no-native-tools", "Use the JSON tool protocol instead of native tool calling").option("--tools <list>", "Tools to advertise: `all`, or a comma-separated list. Default: the mode's set").option("--context-tokens <number>", "Model context window in tokens (default 262144)").option("--max-tool-result-chars <number>", "Cap on one tool result in the transcript (default 6000)").action(async (taskParts, options, command) => {
+  program2.command("interactive", { isDefault: true }).alias("repl").description("Start an interactive ultrac session").argument("[task...]", "Optional initial prompt to send on start").option("-w, --workspace <path>", "Workspace path", ".").option("--provider <name>", "Provider: ultrac (default) or echo (offline test stub)").option("--model <model>", "Model name").option("--base-url <url>", "Ultrac API base URL (overrides ULTRAC_BASE_URL and the stored login)").option("--mode <name>", `Agent mode: ${agentModeNames.join(", ")}`).option("--max-steps <number>", "Maximum agent steps per turn").option("--permissions <mode>", "Tool permission preset: readonly, workspace, or full (no tool approval prompts)").option("--allow-write", "Allow file writes without prompting", false).option("--allow-shell", "Grant broad, unsandboxed shell access without prompting", false).option("--allow-network", "Allow network access without prompting", false).option("--no-native-tools", "Use the JSON tool protocol instead of native tool calling").option("--tools <list>", "Tools to advertise: `all`, or a comma-separated list. Default: the mode's set").option("--context-tokens <number>", "Model context window in tokens (default 262144)").option("--max-tool-result-chars <number>", "Cap on one tool result in the transcript (default 6000)").action(async (taskParts, options, command) => {
     const task = (taskParts ?? []).join(" ").trim();
     const invokedByName = namesReplCommand(command, command.parent?.args[0]);
     const mistyped = invokedByName ? void 0 : mistypedCommand(task, knownCommandNames(program2));
     if (mistyped) throw new Error(mistyped);
+    if (options.permissions && !["readonly", "workspace", "full"].includes(options.permissions)) throw new Error("--permissions must be readonly, workspace, or full.");
     await runRepl(options, task);
   });
 }
@@ -18912,7 +19076,7 @@ async function runRepl(options, initialTask = "") {
         diagnosticEvent("provider.retry", event);
         console.log(
           chalk11.yellow(
-            `  retrying ${event.target.provider} (${event.target.model}) in ${event.delayMs}ms after ${event.classification.reason}`
+            `  ${event.classification.reason} Retrying ${event.target.model} in ${(event.delayMs / 1e3).toFixed(1)} seconds (retry ${event.attempt}).`
           )
         );
       }
@@ -18923,9 +19087,9 @@ async function runRepl(options, initialTask = "") {
     return;
   }
   const basePermissions = {
-    write: options.allowWrite || config.permissions.write,
-    shell: options.allowShell || config.permissions.shell,
-    network: options.allowNetwork || config.permissions.network
+    write: options.permissions ? options.permissions !== "readonly" : options.allowWrite || config.permissions.write,
+    shell: options.permissions ? options.permissions === "full" : options.allowShell || config.permissions.shell,
+    network: options.permissions ? options.permissions === "full" : options.allowNetwork || config.permissions.network
   };
   const registry = createDefaultToolRegistry();
   const mcpRuntime = await connectWorkspaceMcpServers(config.mcpServers, { workspace, registry });
@@ -18942,7 +19106,11 @@ async function runRepl(options, initialTask = "") {
       ...toolSelection ? { tools: toolSelection } : {}
     };
     setSubagentRuntime({ provider, model: init.model, mode: init.mode, registry });
-    return useNativeTools ? new NativeSession(opts) : new InteractiveSession(opts);
+    const created = useNativeTools ? new NativeSession(opts) : new InteractiveSession(opts);
+    if (options.permissions) for (const permission of ["write", "shell", "network"]) {
+      created.setPermission(permission, init.permissions[permission]);
+    }
+    return created;
   };
   let session = createSession({
     model,
@@ -18956,6 +19124,7 @@ async function runRepl(options, initialTask = "") {
     details: { provider: provider.name, model: session.model, mode: session.mode, status: "Idle" }
   }) : void 0;
   setActivitySink(layout?.enabled ? (snapshot) => layout.setActivity(snapshot) : void 0);
+  setWorkingSink(layout?.enabled ? (text) => layout.setWorkingStatus(text) : void 0);
   const refreshDetails = () => {
     if (!layout?.enabled) return;
     const steps = session.toSession().steps;
@@ -19039,7 +19208,7 @@ async function runRepl(options, initialTask = "") {
     }
   };
   const drainQueuedMessages = () => reader.drainQueuedMessages();
-  let autonomousRounds = 1;
+  let autonomousRounds = 5;
   setAskUserRuntime(async (text, options2, signal) => {
     console.log(chalk11.white(`
   ? ${text}`));
@@ -19196,6 +19365,7 @@ async function runRepl(options, initialTask = "") {
     if (stdin5.isTTY) stdin5.off("keypress", onKeypress);
     setAskUserRuntime(void 0);
     setActivitySink(void 0);
+    setWorkingSink(void 0);
     rl.close();
     try {
       await saveTranscript(session, writeCheckpoint);
@@ -19206,16 +19376,22 @@ async function runRepl(options, initialTask = "") {
   }
   console.log(chalk11.gray("Goodbye."));
 }
-async function runTurn(session, input, question, signal, drainQueuedMessages, persist, isComposing, allowImageDrop = true) {
+async function runTurn(session, input, question, signal, drainQueuedMessages, persist, isComposing, allowImageDrop = true, activityState) {
   const activity = isGhostEnabled(session) ? void 0 : getActivitySink();
-  const entries = [];
-  let thinkingMs = 0;
+  const entries = activityState?.entries ?? [];
+  let thinkingMs = activityState?.thinkingMs ?? 0;
   let thinkingStarted;
   let turnFailed = false;
-  const refreshActivity = (finished = false) => activity?.({ entries: [...entries], thinkingMs, finished, failed: turnFailed });
+  const refreshActivity = (finished = false) => {
+    if (activityState) {
+      activityState.thinkingMs = thinkingMs;
+      activityState.failed ||= turnFailed;
+    }
+    activity?.({ entries: [...entries], thinkingMs, finished: finished && !activityState, failed: turnFailed });
+  };
   refreshActivity();
-  const spinner = new Spinner();
-  const workSpinner = new Spinner("working");
+  const spinner = new Spinner("working", activity ? getWorkingSink() : void 0);
+  const workSpinner = new Spinner("working", activity ? getWorkingSink() : void 0);
   const activeTools = /* @__PURE__ */ new Map();
   let permissionPrompts = 0;
   const renderWorking = () => {
@@ -19229,6 +19405,17 @@ async function runTurn(session, input, question, signal, drainQueuedMessages, pe
   const detachProgress = quiet ? () => {
   } : attachProgressUi();
   let deltaChars = 0;
+  const progress2 = quiet ? void 0 : startTaskProgress({
+    snapshot: () => ({
+      completed: entries.length,
+      failed: entries.filter((entry) => !entry.ok).length,
+      activeTool: [...activeTools.keys()].at(-1)?.tool,
+      waitingForModel: thinkingStarted !== void 0
+    }),
+    holdWhile: () => permissionPrompts > 0 || [...activeTools.keys()].some((call) => call.tool === "ask_user"),
+    write: (text) => console.log(`
+${text}`)
+  });
   try {
     const prepared = allowImageDrop ? await prepareImageInput(input) : { text: input };
     await session.ask(prepared.text, {
@@ -19247,22 +19434,23 @@ async function runTurn(session, input, question, signal, drainQueuedMessages, pe
         deltaChars = 0;
         thinkingStarted = performance.now();
         if (!quiet) {
-          spinner.update("thinking");
-          spinner.start(isComposing);
+          spinner.update("working");
+          spinner.start(isComposing, performance.now() - thinkingMs);
         }
       },
       onModelDelta: (text) => {
         deltaChars += text.length;
-        if (!quiet) spinner.update(`thinking (${deltaChars} chars)`);
+        if (!quiet) spinner.update(`working (${deltaChars} chars)`);
       },
       onModelSettled: () => {
         if (thinkingStarted !== void 0) thinkingMs += performance.now() - thinkingStarted;
         thinkingStarted = void 0;
-        spinner.stop(activity ? void 0 : signal?.aborted ? "Thinking stopped after" : "Thought for");
+        spinner.stop(activity ? void 0 : signal?.aborted ? "Work stopped after" : "Worked for");
         refreshActivity();
       },
       onAssistantMessage: (message) => {
         if (message.trim()) {
+          progress2?.markMessage();
           console.log(`
 ${message.trim()}`);
         }
@@ -19300,7 +19488,7 @@ ${message.trim()}`);
         console.log(chalk11.yellow(`  ! ${notice}`));
       },
       onStopped: (reason) => {
-        if (reason === "aborted") return;
+        if (reason === "aborted" || reason === "max-steps" && activityState?.continuing) return;
         const line = stopReasonLine(reason);
         const hint = turnStopHint(reason, session.maxSteps);
         if (!line || !hint) return;
@@ -19312,13 +19500,25 @@ ${message.trim()}`);
         permissionPrompts += 1;
         workSpinner.stop();
         try {
-          const prompt = permission === "shell" && call.tool === "run_shell" ? shellApprovalPrompt(call, session.toSession().workspace) : permission === "shell" ? `  ${call.tool} wants shell access. [o]nce (this call only) / [a]lways (all shell tools for this session) / [n]o (this call) / n[e]ver (this session) \u203A ` : `  ${call.tool} wants ${permission} access. [o]nce / [a]lways / [n]o / n[e]ver \u203A `;
-          const rawAnswer = await question(chalk11.yellow(prompt), signal);
+          const prompt = permission === "shell" && call.tool === "run_shell" ? shellApprovalPrompt(call, session.toSession().workspace) : permission === "shell" ? `  ${call.tool} wants shell access.
+  1. [o]nce (this call only)
+  2. [a]lways (this session)
+  3. [n]o (this call)
+  4. n[e]ver (this session)
+  Answer: ` : `  ${call.tool} wants ${permission} access.
+  1. [o]nce
+  2. [a]lways (this session)
+  3. [n]o
+  4. n[e]ver (this session)
+  Answer: `;
+          const choices = ["Allow once", "Allow for this session", "Deny this call", "Never allow this permission this session"];
+          const asker = getAskUserRuntime();
+          const rawAnswer = asker ? await asker(prompt.split("\n").slice(0, -5).join("\n"), choices, signal) : await question(chalk11.yellow(prompt), signal);
           if (signal?.aborted || rawAnswer === null) return "deny";
           const answer = rawAnswer.trim().toLowerCase();
-          if (answer === "a" || answer === "always") return "always";
-          if (answer === "o" || answer === "once" || answer === "y" || answer === "yes") return "once";
-          if (answer === "e" || answer === "never") {
+          if (answer === "a" || answer === "always" || answer === "2" || answer === choices[1].toLowerCase()) return "always";
+          if (answer === "o" || answer === "once" || answer === "y" || answer === "yes" || answer === "1" || answer === choices[0].toLowerCase()) return "once";
+          if (answer === "e" || answer === "never" || answer === "4" || answer === choices[3].toLowerCase()) {
             console.log(
               chalk11.gray(
                 `  ${permission} refused for the rest of the session \u2014 nothing will ask again. /allow ${permission} undoes it.`
@@ -19345,19 +19545,21 @@ ${message.trim()}`);
     activeTools.clear();
     if (thinkingStarted !== void 0) thinkingMs += performance.now() - thinkingStarted;
     refreshActivity(true);
+    progress2?.stop();
     detachProgress();
   }
 }
 async function runAndCheckpointTurn(session, input, question, signal, persist, drainQueuedMessages, isComposing, maxRounds = 1, allowImageDrop = true) {
+  const activityState = { entries: [], thinkingMs: 0, continuing: maxRounds > 1 };
   try {
-    if (maxRounds === 1) return await runTurn(session, input, question, signal, drainQueuedMessages, persist, isComposing, allowImageDrop);
+    if (maxRounds === 1) return await runTurn(session, input, question, signal, drainQueuedMessages, persist, isComposing, allowImageDrop, activityState);
     let successful = true;
     const result = await runAutonomousLoop({
       maxRounds,
       signal,
       classifyFailure: () => ({ kind: "unknown", retryable: false, failoverable: false, reason: "Interactive provider retries already exhausted." }),
       runRound: async (round, _previous, roundSignal) => {
-        successful = await runTurn(session, round === 1 ? input : AUTONOMOUS_CONTINUE_TASK, question, roundSignal, drainQueuedMessages, persist, isComposing, allowImageDrop);
+        successful = await runTurn(session, round === 1 ? input : AUTONOMOUS_CONTINUE_TASK, question, roundSignal, drainQueuedMessages, persist, isComposing, allowImageDrop, activityState);
         await persist(session);
         const snapshot = session.toSession();
         return successful ? snapshot : { ...snapshot, stopReason: roundSignal.aborted ? "aborted" : "error" };
@@ -19369,6 +19571,7 @@ async function runAndCheckpointTurn(session, input, question, signal, persist, d
     if (result.haltReason !== "completed" && result.haltReason !== "aborted") console.log(chalk11.gray(`Automatic continuation stopped: ${result.haltReason}. Session preserved.`));
     return successful;
   } finally {
+    if (!isGhostEnabled(session)) getActivitySink()?.({ ...activityState, entries: [...activityState.entries], finished: true });
     await persist(session);
   }
 }
@@ -19628,7 +19831,7 @@ ${extra}`);
         for (const permission of ["write", "shell", "network"]) {
           session.setPermission(permission, argument === "full" || argument === "workspace" && permission === "write");
         }
-        console.log("Permissions updated. These are tool grants; shell access is not an operating-system sandbox.");
+        console.log(argument === "full" ? "Full access: file, shell, and network tools run without approval prompts for this session." : "Permissions updated. Ungranted tools are denied without prompting; /allow restores access.");
       }
       const p = session.currentPermissions;
       console.log(`write: ${p.write}  shell: ${p.shell}  network: ${p.network}`);
@@ -19919,11 +20122,16 @@ function shellApprovalPrompt(call, workspace) {
   const timeoutMs = typeof call.input.timeoutMs === "number" ? call.input.timeoutMs : 3e4;
   return [
     "  run_shell wants shell access.",
-    "  WARNING: this command runs unsandboxed as your user. It can read or write files available to your account and use your network connection.",
+    "  Runs unsandboxed as your user.",
+    "  Can read or write your files and use your network connection.",
     `  Command: ${JSON.stringify(command)}`,
     `  Resolved cwd: ${JSON.stringify(resolvedCwd)}`,
     `  Timeout: ${timeoutMs.toLocaleString("en-US")} ms`,
-    "  [o]nce runs only this command / [a]lways grants shell access for this whole session, including other shell-using tools / [n]o (this call) / n[e]ver (this session) \u203A "
+    "  1. [o]nce runs only this command",
+    "  2. [a]lways grants shell access for this whole session, including other shell-using tools",
+    "  3. [n]o (this call)",
+    "  4. n[e]ver (this session)",
+    "  Answer: "
   ].join("\n");
 }
 function indent3(value) {
@@ -19943,7 +20151,7 @@ function parsePositiveInt(value, flag) {
 var EXIT_INCOMPLETE_RUN = 2;
 var NOTIFY_SUMMARY_CHARS = 1200;
 function registerRunCommand(program2) {
-  program2.command("run").alias("chat").description("Run a one-shot coding agent task").argument("<task...>", "Task for the agent").option("-w, --workspace <path>", "Workspace path", ".").option("--provider <name>", "Provider: ultrac (default) or echo (offline test stub)").option("--model <model>", "Model name").option("--base-url <url>", "Ultrac API base URL (overrides ULTRAC_BASE_URL and the stored login)").option("--mode <name>", `Agent mode: ${agentModeNames.join(", ")}`).option("--max-steps <number>", "Maximum agent steps").option("--no-native-tools", "Use the legacy JSON tool protocol").option("--allow-write", "Allow file writes", false).option("--allow-shell", "Grant the model broad, unsandboxed shell access", false).option("--allow-network", "Allow HTTP(S) URL fetches", false).option("--continue <id>", "Continue from a saved session id").option("--tools <list>", "Tools to advertise: `all`, or a comma-separated list. Default: the mode's set").option("--context-tokens <number>", "Model context window in tokens (default 262144)").option("--max-tool-result-chars <number>", "Cap on one tool result in the transcript (default 6000)").option(
+  program2.command("run").alias("chat").description("Run a one-shot coding agent task").argument("<task...>", "Task for the agent").option("-w, --workspace <path>", "Workspace path", ".").option("--provider <name>", "Provider: ultrac (default) or echo (offline test stub)").option("--model <model>", "Model name").option("--base-url <url>", "Ultrac API base URL (overrides ULTRAC_BASE_URL and the stored login)").option("--mode <name>", `Agent mode: ${agentModeNames.join(", ")}`).option("--max-steps <number>", "Maximum agent steps").option("--no-native-tools", "Use the legacy JSON tool protocol").option("--permissions <mode>", "Tool permission preset: readonly, workspace, or full").option("--allow-write", "Allow file writes", false).option("--allow-shell", "Grant the model broad, unsandboxed shell access", false).option("--allow-network", "Allow HTTP(S) URL fetches", false).option("--continue <id>", "Continue from a saved session id").option("--tools <list>", "Tools to advertise: `all`, or a comma-separated list. Default: the mode's set").option("--context-tokens <number>", "Model context window in tokens (default 262144)").option("--max-tool-result-chars <number>", "Cap on one tool result in the transcript (default 6000)").option(
     "--allow-incomplete",
     `Exit 0 even when the run stops without finishing. By default an unfinished run (step cap, abort, error) exits ${EXIT_INCOMPLETE_RUN} so a script or a \`&&\` chain can tell a partial answer from a real one; pass this when hitting --max-steps on a long task is an acceptable outcome. The stop reason is still printed either way.`,
     false
@@ -20060,7 +20268,8 @@ function registerRunCommand(program2) {
       const abortRun = () => controller.abort();
       process.on("SIGINT", abortRun);
       process.on("SIGTERM", abortRun);
-      const permissions = autonomous ? { write: true, shell: true, network: true } : {
+      if (options.permissions && !["readonly", "workspace", "full"].includes(options.permissions)) throw new Error("--permissions must be readonly, workspace, or full.");
+      const permissions = options.permissions ? { write: options.permissions !== "readonly", shell: options.permissions === "full", network: options.permissions === "full" } : autonomous ? { write: true, shell: true, network: true } : {
         write: options.allowWrite || config.permissions.write,
         shell: options.allowShell || config.permissions.shell,
         network: options.allowNetwork || config.permissions.network

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spinalfluid/ultrac",
-  "version": "0.1.14",
+  "version": "0.1.18",
   "license": "SEE LICENSE IN LICENSE",
   "description": "Ultrac terminal agent harness for Cosmic 1, with local tools, browser sign-in, streamed answers, and resumable sessions.",
   "author": "Aditya Pundir",