@spinalfluid/ultrac 0.1.14 → 0.1.20

package/README.md

@@ -143,9 +143,12 @@ Inside a session:
 - Type to talk to Ultrac; it inspects the repository with tools as needed.
 - On supported terminals, the full-width input box stays at the bottom while tools and replies
   run above it. The footer shows only the current model. `/usage` and `/context` show token and context details.
-  Thinking and tool activity lines show their own live elapsed timers and retain the measured
-  duration when finished. Sub-second durations are hidden. Tool actions stay in a collapsed activity group;
-  click it or press Ctrl+O to expand, then click an action for command and output details. Green and red
+  Working and tool activity lines show their own live elapsed timers and retain the measured
+  duration when finished. Sub-second durations are hidden. Tool calls stay in a collapsed group directly below the live working timer;
+  click it or press Ctrl+O to expand, then click an action for command and output details. When the
+  task ends, the group moves below its result in the transcript. Working time accumulates across
+  model calls and continuation rounds. Long-running tasks emit brief progress updates based on
+  completed calls and the active tool or model wait. Green and red
   dots show success and failure. Use `/output` for full saved results. Slash suggestions use aligned
   command and description columns on the terminal background.
 - Type `/` to browse built-in commands and available skills. Type to filter, use arrow keys
@@ -167,7 +170,8 @@ Inside a session:
 - Gated tools (file writes, shell, network) prompt for approval: `once` / `always` / `no`.
 - `/mcp` shows the connected servers in this session; `/doctor` checks local setup.
 - `/continue [focus]` continues an unfinished task using its current transcript. `/autonomous on`
-  enables up to five rounds when a task reaches its step ceiling. Checkpoints, a six-hour elapsed
+  allows up to five rounds when a task reaches its step ceiling (enabled by default; `/autonomous off`
+  disables continuation). Checkpoints, a six-hour elapsed
   limit, stall detection, and Esc cancellation remain active. `/autonomous off` restores one round.
   Failed rounds are not automatically replayed; provider retry/failover handles request failures.
 - The agent can use `create_skill` in default/coding modes (or with `--tools all`) to create a
@@ -750,3 +754,24 @@ ultrac skills create project-check --description "Run project checks" --command
 Edit the generated `SKILL.md` instructions, approve the project workspace, and invoke
 `/project-check` in the terminal. The agent can also write a new `SKILL.md` with its file tools and load it with
 `skill`; normal write and tool permissions still apply.
+
+
+Tool approval presets can be chosen at startup: `ultrac --permissions full` grants file writes,
+shell execution, and network tools without tool approval prompts for that session. Use
+`/permissions full` to enable it inside an existing session. `workspace` grants writes and
+denies shell and network access; `readonly` denies all three permissions. The default mode asks
+when a tool needs an ungranted permission.
+These presets do not bypass operating-system permissions or the restrictions of a read-only
+agent mode. Approval dialogs offer separate choices for one call, the session, denial, or
+session-long refusal, with keyboard selection in interactive terminals.
+
+After a terminal permission selection, the approval dialog collapses to the tool, permission,
+and selected choice. Activity and progress messages stay in chronological transcript order,
+with spacing between groups; command details remain available through the activity dropdown.
+
+Progress prose comes from the model and describes the actual work or verified findings. The CLI
+does not generate periodic tool-count, failure-count, or model-waiting messages.
+
+Use `/permissions` to open the interactive permission-mode picker, `/permissions status` to
+inspect grants, or `/permissions readonly`, `/permissions workspace`, and `/permissions full`
+to change modes directly for the current session.

package/dist/cli.js

@@ -1174,7 +1174,7 @@ var COMPACTION_MARKER = "[compacted-context]";
 var SUMMARY_PREAMBLE = "The earlier part of this session was removed to fit the context window and replaced by the record below. It is a record of what happened, not a new instruction. Continue the work it describes.";
 var DEFAULT_MAX_SUMMARY_CHARS = 8e3;
 var MIN_SUMMARY_CHARS = 400;
-var DEFAULT_SUMMARY_TIMEOUT_MS = 3e4;
+var DEFAULT_SUMMARY_TIMEOUT_MS = 12e4;
 var DEFAULT_MAX_TRANSCRIPT_CHARS = 6e4;
 var DEFAULT_MAX_MESSAGE_CHARS = 4e3;
 function isCompactionSummary(message) {
@@ -2584,6 +2584,8 @@ function classifyProviderError(error) {
     return transient("timeout", "Provider request timed out.");
   }
   const status = extractStatus(error);
+  const busy = [...errorChain(error)].some((current) => readString(current, "code") === "upstream_busy");
+  if (busy) return { ...transient("server", "Model capacity or admission is temporarily unavailable (HTTP 503).", status ?? 503), code: "upstream_busy", retryAfterMs: retryDelay(error) ?? 5e3 };
   if (hasNotConfiguredCode(error)) {
     return terminal(
       "not_configured",
@@ -2598,8 +2600,8 @@ function classifyProviderError(error) {
   }
   if (typeof status === "number") {
     if (status === 408) return transient("timeout", "HTTP 408 request timeout.", status);
-    if (status === 429) return transient("rate_limit", "HTTP 429 rate limited.", status);
-    if (status >= 500) return transient("server", `HTTP ${status} server error.`, status);
+    if (status === 429) return { ...transient("rate_limit", "HTTP 429 rate limited.", status), retryAfterMs: retryDelay(error) };
+    if (status >= 500) return { ...transient("server", `HTTP ${status} server error.`, status), retryAfterMs: retryDelay(error) };
     if (status === 401 || status === 403) {
       return terminal("auth", `HTTP ${status} authentication failure.`, status);
     }
@@ -2640,9 +2642,24 @@ function safeClassification(classification) {
     ...status === void 0 ? {} : { status },
     retryable: classification.retryable,
     failoverable: classification.failoverable,
-    reason
+    reason: classification.code === "upstream_busy" ? "Model capacity or admission is temporarily unavailable (HTTP 503)." : reason,
+    ...classification.code ? { code: classification.code } : {},
+    ...classification.retryAfterMs === void 0 ? {} : { retryAfterMs: classification.retryAfterMs }
   };
 }
+function retryDelay(error) {
+  for (const current of errorChain(error)) {
+    if (!isRecord2(current)) continue;
+    const headers = current.headers;
+    if (typeof headers?.get !== "function") continue;
+    const raw = headers.get("retry-after");
+    if (!raw) continue;
+    const seconds = Number(raw);
+    const ms = Number.isFinite(seconds) ? seconds * 1e3 : Date.parse(raw) - Date.now();
+    if (Number.isFinite(ms) && ms >= 0) return Math.min(ms, 3e5);
+  }
+  return void 0;
+}
 function classificationReason(kind, status) {
   switch (kind) {
     case "aborted":
@@ -3043,7 +3060,7 @@ var FallbackProvider = class {
     }
   }
   async waitBeforeRetry(operation, target, attempt, classification, signal) {
-    const delayMs = computeBackoffDelay(attempt, this.backoff);
+    const delayMs = Math.max(computeBackoffDelay(attempt, this.backoff), classification.retryAfterMs ?? 0);
     const safe = safeClassification(classification);
     this.onRetry?.({
       operation,
@@ -10817,6 +10834,8 @@ ${mode.instructions.map((instruction) => `- ${instruction}`).join("\n")}
 ${autonomyLines}
 ${UNTRUSTED_CONTENT_GUIDANCE}
 
+For long tasks, occasionally give a brief user-facing update about the current work or verified findings. Avoid repetitive updates, tool-call counts, failure counts, and boilerplate about waiting for the model. Do not invent findings or claim work that has not happened.
+
 ${nativeTools ? "Write complete code files or append complete sections across tool calls for large implementations. Verify files with tests or a compiler. Never replace requested code with placeholders or ellipses. Keep final explanations concise. Use the provided native function tools for actions. Do not put a JSON tool-call protocol in your answer. When the requested work is complete, give the final answer without calling more tools." : `Respond only with a JSON object:
 {
   "message": "short user-facing status or final answer",
@@ -16646,6 +16665,9 @@ ${context}`
     this.userConstraints.push({ kind: "message", content: input });
     let finalMessage = "";
     let toolCallsUsed = 0;
+    let consecutiveEmptyResponses = 0;
+    const turnStarted = performance.now();
+    const firstStep = this.steps.length;
     let stopReason = "max-steps";
     try {
       for (let index = 0; index < this.options.maxSteps; index += 1) {
@@ -16698,6 +16720,7 @@ ${context}`
           throw budgetError;
         }
         toolCallsUsed += response.toolCalls.length;
+        if (response.content.trim() || response.toolCalls.length) consecutiveEmptyResponses = 0;
         if (response.content.trim()) {
           finalMessage = response.content;
           handlers.onAssistantMessage?.(response.content);
@@ -16717,6 +16740,21 @@ ${context}`
             handlers.onInterrupted?.();
             break;
           }
+          if (!response.content.trim()) {
+            consecutiveEmptyResponses += 1;
+            const willRetry = consecutiveEmptyResponses <= 2 && index + 1 < this.options.maxSteps;
+            diagnosticEvent("session.empty-response", {
+              sessionId: this.id,
+              attempt: consecutiveEmptyResponses,
+              willRetry,
+              maxRecoveries: 2,
+              stepCount: this.steps.length
+            });
+            if (!willRetry) {
+              throw Object.assign(new Error("The model returned an empty response without completing the task. Empty-response recovery was exhausted; the session checkpoint is preserved."), { status: 422 });
+            }
+            continue;
+          }
           if (this.appendQueuedMessages(handlers) === 0) {
             stopReason = "completed";
             break;
@@ -16784,6 +16822,15 @@ ${context}`
       throw error;
     } finally {
       this.lastStopReason = stopReason;
+      diagnosticEvent("session.turn.end", {
+        sessionId: this.id,
+        reason: stopReason,
+        stepCount: this.steps.length,
+        turnSteps: this.steps.length - firstStep,
+        maxSteps: this.options.maxSteps,
+        emptyResponses: consecutiveEmptyResponses,
+        durationMs: Math.max(0, performance.now() - turnStarted)
+      });
       this.subagents.push(...drainSubagentTranscripts());
     }
     handlers.onStopped?.(stopReason);
@@ -16960,6 +17007,8 @@ ${mode.instructions.map((instruction) => `- ${instruction}`).join("\n")}
 
 ${UNTRUSTED_CONTENT_GUIDANCE}
 
+For long tasks, occasionally give a brief user-facing update about the current work or verified findings. Avoid repetitive updates, tool-call counts, failure counts, and boilerplate about waiting for the model. Do not invent findings or claim work that has not happened.
+
 For large code generation, write complete files or append complete sections across multiple tool calls. Verify the files with the project tests or compiler. Never use ellipses or placeholders for requested implementation, and do not declare success with unfinished code. Keep final explanations concise; code completeness takes priority over response brevity.
 
 Use the provided tools to inspect and change the workspace. Prefer narrow, reversible changes and
@@ -17087,6 +17136,11 @@ async function runAutonomousLoop(options) {
   let lastStepCount = 0;
   let stalls = 0;
   let consecutiveErrors = 0;
+  const finish = (session, rounds, haltReason) => {
+    diagnosticEvent("autonomous.end", { id, sessionId: session.id, rounds, reason: haltReason, elapsedMs: elapsed() });
+    return { session, rounds, haltReason };
+  };
+  diagnosticEvent("autonomous.start", { id, maxRounds: options.maxRounds, maxElapsedMs });
   try {
     signal.throwIfAborted();
     for (let round = 1; ; round += 1) {
@@ -17117,8 +17171,8 @@ async function runAutonomousLoop(options) {
       else if (!shouldResume(session.stopReason)) haltReason = "stopped";
       else if (stalls >= stallLimit) haltReason = "stalled";
       else if (round >= options.maxRounds) haltReason = "max_rounds";
-      const retryDelay = Math.min(maxDelay, baseDelay * 2 ** Math.min(30, consecutiveErrors - 1));
-      if (!haltReason && session.stopReason === "error" && elapsed() + retryDelay >= maxElapsedMs) haltReason = "elapsed_budget";
+      const retryDelay2 = Math.min(maxDelay, baseDelay * 2 ** Math.min(30, consecutiveErrors - 1));
+      if (!haltReason && session.stopReason === "error" && elapsed() + retryDelay2 >= maxElapsedMs) haltReason = "elapsed_budget";
       diagnosticEvent("round.end", {
         id,
         round,
@@ -17132,10 +17186,10 @@ async function runAutonomousLoop(options) {
       });
       if (haltReason === "stalled") diagnosticEvent("round.stall", { id, round, repeats: stalls, completedTools: current.completedTools, elapsedMs: elapsed() });
       await options.onRoundEnd?.(round, session, !haltReason);
-      if (haltReason) return { session, rounds: round, haltReason };
+      if (haltReason) return finish(session, round, haltReason);
       if (session.stopReason === "error") {
-        const delayMs = retryDelay;
-        if (elapsed() + delayMs >= maxElapsedMs) return { session, rounds: round, haltReason: "elapsed_budget" };
+        const delayMs = retryDelay2;
+        if (elapsed() + delayMs >= maxElapsedMs) return finish(session, round, "elapsed_budget");
         diagnosticEvent("round.retry", {
           id,
           round,
@@ -17149,12 +17203,15 @@ async function runAutonomousLoop(options) {
           await sleep2(delayMs, signal);
         } catch (error) {
           if (!signal.aborted) throw error;
-          return { session, rounds: round, haltReason: budget.signal.aborted ? "elapsed_budget" : "aborted" };
+          return finish(session, round, budget.signal.aborted ? "elapsed_budget" : "aborted");
         }
       }
-      if (signal.aborted || elapsed() >= maxElapsedMs) return { session, rounds: round, haltReason: budget.signal.aborted || elapsed() >= maxElapsedMs ? "elapsed_budget" : "aborted" };
+      if (signal.aborted || elapsed() >= maxElapsedMs) return finish(session, round, budget.signal.aborted || elapsed() >= maxElapsedMs ? "elapsed_budget" : "aborted");
       previous = session;
     }
+  } catch (error) {
+    diagnosticEvent("autonomous.end", { id, reason: budget.signal.aborted ? "elapsed_budget" : signal.aborted ? "aborted" : "exception", elapsedMs: elapsed() });
+    throw error;
   } finally {
     clearTimeout(deadline);
   }
@@ -17442,7 +17499,9 @@ var VERBS = {
   run_tests: "Run tests",
   diagnostics: "Check diagnostics",
   task: "Delegate",
-  fetch_url: "Fetch",
+  fetch_url: "Opened",
+  web_search: "Searched the web for",
+  search_web: "Searched the web for",
   git_status: "Check Git status",
   git_diff: "Read Git diff",
   git_log: "Read Git log",
@@ -17470,7 +17529,7 @@ function toolTarget(call) {
   if (paths.length > 1) return `${paths.length} files`;
   if (call.tool === "run_shell") return compact2(stringValue(input.command), 72);
   if (call.tool === "run_package_script") return compact2(stringValue(input.script), 50);
-  if (call.tool === "search_files") return quote(stringValue(input.query) || stringValue(input.pattern));
+  if (["search_files", "web_search", "search_web"].includes(call.tool)) return quote(stringValue(input.query) || stringValue(input.pattern));
   if (call.tool === "fetch_url") return compact2(stringValue(input.url), 72);
   if (call.tool === "task") return compact2(stringValue(input.description) || stringValue(input.task), 64);
   if (call.tool === "git_show") return compact2(stringValue(input.ref), 40);
@@ -17499,10 +17558,12 @@ function humanize(value) {
 import { stdout as stdout4 } from "process";
 var FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 var Spinner = class {
-  constructor(label = "thinking") {
+  constructor(label = "working", renderLine) {
     this.label = label;
+    this.renderLine = renderLine;
   }
   label;
+  renderLine;
   timer;
   index = 0;
   holdWhile;
@@ -17528,8 +17589,11 @@ var Spinner = class {
       this.timer = void 0;
     }
     if (stdout4.isTTY && elapsed !== void 0) {
-      stdout4.clearLine(0);
-      stdout4.cursorTo(0);
+      if (this.renderLine) this.renderLine("");
+      else {
+        stdout4.clearLine(0);
+        stdout4.cursorTo(0);
+      }
       if (completion && elapsed >= 1e3) stdout4.write(`  ${completion} ${formatSeconds(elapsed)}.
 `);
     }
@@ -17537,16 +17601,21 @@ var Spinner = class {
   render() {
     if (this.holdWhile?.()) {
       if (!this.held) {
-        stdout4.clearLine(0);
-        stdout4.cursorTo(0);
+        if (this.renderLine) this.renderLine("");
+        else {
+          stdout4.clearLine(0);
+          stdout4.cursorTo(0);
+        }
         this.held = true;
       }
       return;
     }
     this.held = false;
     this.index = (this.index + 1) % FRAMES.length;
-    stdout4.clearLine(0);
-    stdout4.cursorTo(0);
+    if (!this.renderLine) {
+      stdout4.clearLine(0);
+      stdout4.cursorTo(0);
+    }
     const milliseconds = performance.now() - (this.startedAt ?? performance.now());
     const elapsed = milliseconds >= 1e3 ? formatElapsed(milliseconds) : "";
     const limit = Math.max(0, (stdout4.columns ?? 80) - elapsed.length - 10);
@@ -17558,7 +17627,9 @@ var Spinner = class {
       label += character;
       cells2 += size;
     }
-    stdout4.write(`  ${FRAMES[this.index]} ${label}\u2026${elapsed ? ` \xB7 ${elapsed}` : ""}`);
+    const line = `  ${FRAMES[this.index]} ${label}\u2026${elapsed ? ` \xB7 ${elapsed}` : ""}`;
+    if (this.renderLine) this.renderLine(line);
+    else stdout4.write(line);
   }
 };
 function formatSeconds(milliseconds) {
@@ -17569,6 +17640,23 @@ function formatSeconds(milliseconds) {
 
 // src/ui/activity.ts
 var sink;
+var messageSink;
+function setActivityMessageSink(value) {
+  messageSink = value;
+}
+function writeActivityMessage(text) {
+  if (messageSink) messageSink(text);
+  else console.log(`
+${text}
+`);
+}
+var workingSink;
+function setWorkingSink(value) {
+  workingSink = value;
+}
+function getWorkingSink() {
+  return workingSink;
+}
 function setActivitySink(value) {
   sink = value;
 }
@@ -17592,10 +17680,16 @@ function activityEntry(call, result, durationMs) {
 }
 function activityRows(snapshot, expanded, selected, end) {
   const failures = snapshot.entries.filter((entry) => !entry.ok).length;
-  const elapsed = snapshot.thinkingMs >= 1e3 ? ` \xB7 Thought for ${formatSeconds(snapshot.thinkingMs)}` : "";
-  const summary = `${expanded ? "\u25BE" : "\u25B8"} \u25CF ${snapshot.entries.length} actions${failures ? ` \xB7 ${failures} failed` : ""}${snapshot.finished ? elapsed : ""} \xB7 Ctrl+O details`;
+  const elapsed = snapshot.thinkingMs >= 1e3 ? ` \xB7 Worked for ${formatSeconds(snapshot.thinkingMs)}` : "";
+  const summary = `${expanded ? "\u25BE" : "\u25B8"} \u25CF ${snapshot.entries.length} ${snapshot.entries.length === 1 ? "tool call" : "tool calls"}${failures ? ` \xB7 ${failures} failed` : ""}${snapshot.finished ? elapsed : ""} \xB7 Ctrl+O details`;
   const rows = [{ text: summary, ok: failures || snapshot.failed ? false : snapshot.finished ? true : void 0 }];
-  if (!expanded) return rows;
+  if (!expanded) {
+    if (!snapshot.finished || snapshot.preview) for (let index = Math.max(0, snapshot.entries.length - 3); index < snapshot.entries.length; index += 1) {
+      const entry = snapshot.entries[index];
+      rows.push({ text: `  \u25CF ${entry.label}`, ok: entry.ok, entry: index });
+    }
+    return rows;
+  }
   const last = Math.min(snapshot.entries.length, end);
   for (let index = Math.max(0, last - 5); index < last; index += 1) {
     const entry = snapshot.entries[index];
@@ -18011,6 +18105,9 @@ var TerminalLayout = class {
   prompt = "\u203A ";
   inputFormatter;
   transcriptRow = 1;
+  transientBlocks = /* @__PURE__ */ new Set();
+  activityOffset = 0;
+  totalActivityEntries = 0;
   transcriptColumn = 1;
   wrapPending = false;
   savedTranscript;
@@ -18018,9 +18115,8 @@ var TerminalLayout = class {
   suggestions = [];
   selected = 0;
   activity;
-  activityExpanded = false;
-  activitySelected = -1;
-  activityEnd = 0;
+  liveActivity;
+  completedActivities = [];
   restoreActivityInput;
   installed = false;
   closed = false;
@@ -18030,6 +18126,7 @@ var TerminalLayout = class {
   resize = () => {
     if (this.closed || !this.enabled) return;
     this.clearPreviousFooter();
+    this.completedActivities = this.completedActivities.filter((item) => item.row >= 1 && item.row + item.height - 1 <= this.contentRows);
     this.transcriptRow = Math.min(this.transcriptRow, this.contentRows);
     this.transcriptColumn = Math.min(this.transcriptColumn, this.columns);
     this.rawWrite(`${CSI}1;${this.contentRows}r`);
@@ -18059,12 +18156,8 @@ var TerminalLayout = class {
   get suggestionRows() {
     return Math.min(8, this.suggestions.length, Math.max(0, this.rows - BASE_FOOTER_ROWS - 2));
   }
-  get activityLines() {
-    if (!this.activity) return [];
-    return activityRows(this.activity, this.activityExpanded, this.activitySelected, this.activityEnd).slice(0, Math.max(1, Math.min(10, this.rows - BASE_FOOTER_ROWS - this.suggestionRows - 2)));
-  }
   get contentRows() {
-    return this.rows - BASE_FOOTER_ROWS - this.suggestionRows - this.activityLines.length;
+    return this.rows - BASE_FOOTER_ROWS - this.suggestionRows;
   }
   get inputRow() {
     return this.rows - 2;
@@ -18094,7 +18187,7 @@ var TerminalLayout = class {
     let sequence = "";
     let sequenceTimer;
     const wrapper = (text, key) => {
-      if (this.activity && !this.suspended && key?.ctrl && key.name === "o") {
+      if ((this.activity || this.completedActivities.length) && !this.suspended && key?.ctrl && key.name === "o") {
         this.toggleActivity();
         return;
       }
@@ -18128,51 +18221,172 @@ var TerminalLayout = class {
     };
     this.paintFooter();
   }
-  setActivity(snapshot) {
-    this.clearPreviousFooter();
-    const previous = this.activity?.entries.length ?? 0;
-    if (!snapshot.entries.length && !snapshot.finished) {
-      this.activityExpanded = false;
-      this.activitySelected = -1;
-    }
-    this.activity = snapshot;
-    if (this.activityEnd >= previous || !previous) this.activityEnd = snapshot.entries.length;
-    this.reflowActivity();
+  beginTransientBlock() {
+    const anchor = { row: this.transcriptRow };
+    this.transientBlocks.add(anchor);
+    return anchor;
+  }
+  collapseTransientBlock(anchor, summary) {
+    if (!this.transientBlocks.delete(anchor) || this.closed) return;
+    const start = Math.max(1, Math.min(anchor.row, this.transcriptRow));
+    const removed = Math.max(0, this.transcriptRow - start);
+    if (removed) this.rawWrite(`${cup(start)}${CSI}${removed}M`);
+    this.rawWrite(`${cup(start)}${CSI}2K`);
+    for (const item of this.completedActivities) if (item.row >= start) item.row -= removed;
+    this.completedActivities = this.completedActivities.filter((item) => item.row >= 1);
+    this.transcriptRow = start;
+    this.transcriptColumn = 1;
+    this.wrapPending = false;
+    this.writeTranscript(`${summary}
+
+`);
+    this.paintFooter();
   }
-  toggleActivity() {
-    if (!this.activity) return;
-    this.clearPreviousFooter();
-    this.activityExpanded = !this.activityExpanded;
-    this.reflowActivity();
+  writeActivityMessage(text) {
+    const item = this.liveActivity;
+    if (item) {
+      if (item.snapshot.entries.length) {
+        item.snapshot = { ...item.snapshot, finished: true, preview: true };
+        if (item.row >= 2) this.rawWrite(`${cup(item.row - 1)}${CSI}2K`);
+        this.redrawCompleted(item);
+      } else {
+        const start = Math.max(1, item.row - 1);
+        const removed = item.row >= 1 ? Math.max(0, Math.min(item.height + (item.row >= 2 ? 1 : 0), this.transcriptRow - start)) : 0;
+        if (removed) this.rawWrite(`${cup(start)}${CSI}${removed}M`);
+        this.transcriptRow -= removed;
+        this.completedActivities = this.completedActivities.filter((entry) => entry !== item);
+      }
+      this.liveActivity = void 0;
+    }
+    this.activityOffset = this.totalActivityEntries;
+    this.writeTranscript(`
+${text}
+
+`);
+    if (item) {
+      const snapshot = { ...item.snapshot, entries: [], finished: false, preview: false };
+      this.writeTranscript(`
+${this.colorActivityRow(activityRows(snapshot, false, -1, 0)[0])}
+`);
+      this.liveActivity = { snapshot, row: this.transcriptRow - 1, height: 1, expanded: false, selected: -1, end: 0 };
+      this.completedActivities.push(this.liveActivity);
+    }
   }
-  reflowActivity() {
+  setActivity(snapshot) {
+    if (!this.liveActivity && snapshot.entries.length < this.totalActivityEntries) this.activityOffset = 0;
+    this.totalActivityEntries = snapshot.entries.length;
+    snapshot = { ...snapshot, entries: snapshot.entries.slice(this.activityOffset) };
+    this.activity = snapshot;
     if (!this.enabled || !this.installed || this.closed) return;
-    this.transcriptRow = Math.min(this.transcriptRow, this.contentRows);
-    this.rawWrite(`${CSI}1;${this.contentRows}r`);
+    if (!this.liveActivity && !snapshot.finished) {
+      this.writeTranscript(`
+${this.colorActivityRow(activityRows(snapshot, false, -1, snapshot.entries.length)[0])}
+`);
+      this.liveActivity = { snapshot, row: this.transcriptRow - 1, height: 1, expanded: false, selected: -1, end: snapshot.entries.length };
+      this.completedActivities.push(this.liveActivity);
+    }
+    const item = this.liveActivity;
+    if (!item) return;
+    const previous = item.snapshot.entries.length;
+    item.snapshot = snapshot;
+    if (item.end >= previous) item.end = snapshot.entries.length;
+    if (!snapshot.finished) {
+      this.redrawCompleted(item);
+      return;
+    }
+    if (item.row >= 2) {
+      const removed = item.height + 1;
+      this.rawWrite(`${cup(item.row - 1)}${CSI}${removed}M`);
+      if (this.transcriptRow > item.row) this.transcriptRow -= removed;
+      for (const other of this.completedActivities) if (other !== item && other.row > item.row) other.row -= removed;
+    }
+    this.completedActivities = this.completedActivities.filter((entry) => entry !== item);
+    this.liveActivity = void 0;
+    this.activityOffset = 0;
+    this.totalActivityEntries = 0;
+    if (snapshot.entries.length) {
+      this.writeTranscript(`${this.colorActivityRow(activityRows(snapshot, false, -1, snapshot.entries.length)[0])}
+`);
+      this.completedActivities.push({ ...item, row: this.transcriptRow - 1, height: 1, expanded: false, selected: -1 });
+    }
     this.paintFooter();
   }
+  setWorkingStatus(text) {
+    const item = this.liveActivity;
+    if (!item) return;
+    if (item.row < 2 || item.row + item.height > this.contentRows) {
+      if (item.row >= 1 && item.row <= this.contentRows) {
+        this.rawWrite(`${cup(item.row)}${CSI}${item.height}M`);
+        if (this.transcriptRow > item.row) this.transcriptRow -= item.height;
+        for (const other of this.completedActivities) if (other !== item && other.row > item.row) other.row -= item.height;
+      }
+      this.completedActivities = this.completedActivities.filter((entry) => entry !== item);
+      this.writeTranscript(`
+${this.colorActivityRow(activityRows(item.snapshot, false, -1, item.end)[0])}
+`);
+      item.row = this.transcriptRow - 1;
+      item.height = 1;
+      item.expanded = false;
+      this.completedActivities.push(item);
+    }
+    this.rawWrite(`${cup(item.row - 1)}${CSI}0m${CSI}2K${fit(text, this.columns)}`);
+    this.placeInputCursor();
+  }
+  colorActivityRow(row) {
+    const text = fit(row.text, this.columns);
+    const color = process.env.NO_COLOR || row.ok === void 0 ? "" : `${CSI}${row.ok ? 32 : 31}m`;
+    const dot = text.indexOf("\u25CF");
+    return dot >= 0 && color ? `${text.slice(0, dot)}${color}\u25CF${CSI}39m${text.slice(dot + 1)}` : text;
+  }
+  shiftCompleted(rows) {
+    for (const anchor of this.transientBlocks) anchor.row -= rows;
+    for (const item of this.completedActivities) item.row -= rows;
+    this.completedActivities = this.completedActivities.filter((item) => item.row >= 1);
+  }
+  redrawCompleted(item) {
+    const rows = activityRows(item.snapshot, item.expanded, item.selected, item.end).slice(0, Math.max(1, this.contentRows - 2));
+    const delta = rows.length - item.height;
+    const scroll = Math.max(0, this.transcriptRow + delta - this.contentRows);
+    if (scroll) {
+      this.rawWrite(`${cup(this.contentRows)}${CSI}${scroll}S`);
+      this.shiftCompleted(scroll);
+      this.transcriptRow -= scroll;
+    }
+    if (item.row < 1) return;
+    if (delta > 0) this.rawWrite(`${cup(item.row + item.height)}${CSI}${delta}L`);
+    if (delta < 0) this.rawWrite(`${cup(item.row + rows.length)}${CSI}${-delta}M`);
+    for (const other of this.completedActivities) if (other !== item && other.row > item.row) other.row += delta;
+    if (this.transcriptRow > item.row) this.transcriptRow += delta;
+    item.height = rows.length;
+    rows.forEach((row, index) => this.rawWrite(`${cup(item.row + index)}${CSI}0m${CSI}2K${this.colorActivityRow(row)}`));
+    this.paintFooter();
+  }
+  toggleActivity() {
+    if (this.liveActivity && (this.liveActivity.row < 2 || this.liveActivity.row + this.liveActivity.height > this.contentRows)) this.setWorkingStatus("working\u2026");
+    const item = this.liveActivity?.snapshot.entries.length ? this.liveActivity : [...this.completedActivities].reverse().find((entry) => entry.snapshot.entries.length > 0) ?? this.liveActivity;
+    if (item) {
+      item.expanded = !item.expanded;
+      this.redrawCompleted(item);
+    }
+  }
   activityMouse(button, row, press) {
-    if (!this.activity || !press) return;
-    if (button === 64 || button === 65) {
-      if (!this.activityExpanded) return;
-      this.clearPreviousFooter();
-      this.activityEnd = Math.max(Math.min(5, this.activity.entries.length), Math.min(this.activity.entries.length, this.activityEnd + (button === 64 ? -1 : 1)));
-      this.activitySelected = -1;
-      this.reflowActivity();
+    if (!press) return;
+    const completed = this.completedActivities.find((item) => row >= item.row && row < item.row + item.height);
+    if (completed && (button === 64 || button === 65)) {
+      if (!completed.expanded) return;
+      completed.end = Math.max(Math.min(5, completed.snapshot.entries.length), Math.min(completed.snapshot.entries.length, completed.end + (button === 64 ? -1 : 1)));
+      completed.selected = -1;
+      this.redrawCompleted(completed);
       return;
     }
-    if (button !== 0) return;
-    const index = row - this.contentRows - 1;
-    if (index === 0) {
-      this.toggleActivity();
+    if (completed && button === 0) {
+      const rows = activityRows(completed.snapshot, completed.expanded, completed.selected, completed.end);
+      const entry = rows[row - completed.row]?.entry;
+      if (row === completed.row) completed.expanded = !completed.expanded;
+      else if (entry !== void 0) completed.selected = completed.selected === entry ? -1 : entry;
+      this.redrawCompleted(completed);
       return;
     }
-    const entry = this.activityLines[index]?.entry;
-    if (entry !== void 0) {
-      this.clearPreviousFooter();
-      this.activitySelected = this.activitySelected === entry ? -1 : entry;
-      this.reflowActivity();
-    }
   }
   setInputFormatter(formatter) {
     this.inputFormatter = formatter;
@@ -18238,6 +18452,7 @@ var TerminalLayout = class {
     if (this.wrapPending && !/^[\r\n]/.test(stripVTControlCharacters2(formatted))) {
       this.rawWrite(`${cup(this.transcriptRow, this.columns)}\r
 `);
+      if (this.transcriptRow === this.contentRows) this.shiftCompleted(1);
       this.transcriptRow = Math.min(this.contentRows, this.transcriptRow + 1);
       this.transcriptColumn = 1;
       this.wrapPending = false;
@@ -18302,6 +18517,7 @@ var TerminalLayout = class {
               this.wrapPending = true;
             }
           }
+          if (this.transcriptRow > this.contentRows) this.shiftCompleted(this.transcriptRow - this.contentRows);
           this.transcriptRow = Math.min(this.contentRows, this.transcriptRow);
         }
       }
@@ -18351,13 +18567,10 @@ var TerminalLayout = class {
     const model = /^cosmic[- ]1$/i.test(this.details.model) ? "Cosmic 1" : this.details.model;
     const metadata = fit(model, this.columns);
     let frame = "";
-    const activity = this.activityLines;
-    if (activity.length && !this.suspended) frame += `${CSI}?1006h${CSI}?1000h`;
+    const activity = [];
+    if ((activity.length || this.completedActivities.length) && !this.suspended) frame += `${CSI}?1006h${CSI}?1000h`;
     activity.forEach((row, index) => {
-      const text = fit(row.text, this.columns);
-      const color = process.env.NO_COLOR || row.ok === void 0 ? "" : `${CSI}${row.ok ? 32 : 31}m`;
-      const dot = text.indexOf("\u25CF");
-      const rendered = dot >= 0 && color ? `${text.slice(0, dot)}${color}\u25CF${CSI}39m${text.slice(dot + 1)}` : text;
+      const rendered = this.colorActivityRow(row);
       frame += `${cup(this.contentRows + 1 + index)}${CSI}0m${CSI}2K${rendered}`;
     });
     const suggestions = this.suggestionRows;
@@ -18763,7 +18976,7 @@ var HELP = `Commands:
   /autonomous [on|off|status]  Continue step-limited turns (up to five rounds)
   /model [name]         Show or set the model
   /mode [name]          Show or set the agent mode (${agentModeNames.join(", ")})
-  /permissions [readonly|workspace|full]  Show or set permissions
+  /permissions [readonly|workspace|full|status]  Choose or set tool access
   /deny <perm>          Revoke a permission for this session
   /plan [task]          Plan without workspace edits
   /review [focus]       Review current changes without editing
@@ -18800,11 +19013,12 @@ Custom commands come from skills that declare a 'command:' key in their
 frontmatter; built-ins always win a name clash. Type anything else to talk to Ultrac.`;
 var EXIT_REPL_NOT_STARTED = 1;
 function registerReplCommand(program2) {
-  program2.command("interactive", { isDefault: true }).alias("repl").description("Start an interactive ultrac session").argument("[task...]", "Optional initial prompt to send on start").option("-w, --workspace <path>", "Workspace path", ".").option("--provider <name>", "Provider: ultrac (default) or echo (offline test stub)").option("--model <model>", "Model name").option("--base-url <url>", "Ultrac API base URL (overrides ULTRAC_BASE_URL and the stored login)").option("--mode <name>", `Agent mode: ${agentModeNames.join(", ")}`).option("--max-steps <number>", "Maximum agent steps per turn").option("--allow-write", "Allow file writes without prompting", false).option("--allow-shell", "Grant broad, unsandboxed shell access without prompting", false).option("--allow-network", "Allow network access without prompting", false).option("--no-native-tools", "Use the JSON tool protocol instead of native tool calling").option("--tools <list>", "Tools to advertise: `all`, or a comma-separated list. Default: the mode's set").option("--context-tokens <number>", "Model context window in tokens (default 262144)").option("--max-tool-result-chars <number>", "Cap on one tool result in the transcript (default 6000)").action(async (taskParts, options, command) => {
+  program2.command("interactive", { isDefault: true }).alias("repl").description("Start an interactive ultrac session").argument("[task...]", "Optional initial prompt to send on start").option("-w, --workspace <path>", "Workspace path", ".").option("--provider <name>", "Provider: ultrac (default) or echo (offline test stub)").option("--model <model>", "Model name").option("--base-url <url>", "Ultrac API base URL (overrides ULTRAC_BASE_URL and the stored login)").option("--mode <name>", `Agent mode: ${agentModeNames.join(", ")}`).option("--max-steps <number>", "Maximum agent steps per turn").option("--permissions <mode>", "Tool permission preset: readonly, workspace, or full (no tool approval prompts)").option("--allow-write", "Allow file writes without prompting", false).option("--allow-shell", "Grant broad, unsandboxed shell access without prompting", false).option("--allow-network", "Allow network access without prompting", false).option("--no-native-tools", "Use the JSON tool protocol instead of native tool calling").option("--tools <list>", "Tools to advertise: `all`, or a comma-separated list. Default: the mode's set").option("--context-tokens <number>", "Model context window in tokens (default 262144)").option("--max-tool-result-chars <number>", "Cap on one tool result in the transcript (default 6000)").action(async (taskParts, options, command) => {
     const task = (taskParts ?? []).join(" ").trim();
     const invokedByName = namesReplCommand(command, command.parent?.args[0]);
     const mistyped = invokedByName ? void 0 : mistypedCommand(task, knownCommandNames(program2));
     if (mistyped) throw new Error(mistyped);
+    if (options.permissions && !["readonly", "workspace", "full"].includes(options.permissions)) throw new Error("--permissions must be readonly, workspace, or full.");
     await runRepl(options, task);
   });
 }
@@ -18912,7 +19126,7 @@ async function runRepl(options, initialTask = "") {
         diagnosticEvent("provider.retry", event);
         console.log(
           chalk11.yellow(
-            `  retrying ${event.target.provider} (${event.target.model}) in ${event.delayMs}ms after ${event.classification.reason}`
+            `  ${event.classification.reason} Retrying ${event.target.model} in ${(event.delayMs / 1e3).toFixed(1)} seconds (retry ${event.attempt}).`
           )
         );
       }
@@ -18923,9 +19137,9 @@ async function runRepl(options, initialTask = "") {
     return;
   }
   const basePermissions = {
-    write: options.allowWrite || config.permissions.write,
-    shell: options.allowShell || config.permissions.shell,
-    network: options.allowNetwork || config.permissions.network
+    write: options.permissions ? options.permissions !== "readonly" : options.allowWrite || config.permissions.write,
+    shell: options.permissions ? options.permissions === "full" : options.allowShell || config.permissions.shell,
+    network: options.permissions ? options.permissions === "full" : options.allowNetwork || config.permissions.network
   };
   const registry = createDefaultToolRegistry();
   const mcpRuntime = await connectWorkspaceMcpServers(config.mcpServers, { workspace, registry });
@@ -18942,7 +19156,11 @@ async function runRepl(options, initialTask = "") {
       ...toolSelection ? { tools: toolSelection } : {}
     };
     setSubagentRuntime({ provider, model: init.model, mode: init.mode, registry });
-    return useNativeTools ? new NativeSession(opts) : new InteractiveSession(opts);
+    const created = useNativeTools ? new NativeSession(opts) : new InteractiveSession(opts);
+    if (options.permissions) for (const permission of ["write", "shell", "network"]) {
+      created.setPermission(permission, init.permissions[permission]);
+    }
+    return created;
   };
   let session = createSession({
     model,
@@ -18956,6 +19174,8 @@ async function runRepl(options, initialTask = "") {
     details: { provider: provider.name, model: session.model, mode: session.mode, status: "Idle" }
   }) : void 0;
   setActivitySink(layout?.enabled ? (snapshot) => layout.setActivity(snapshot) : void 0);
+  setWorkingSink(layout?.enabled ? (text) => layout.setWorkingStatus(text) : void 0);
+  setActivityMessageSink(layout?.enabled ? (text) => layout.writeActivityMessage(text) : void 0);
   const refreshDetails = () => {
     if (!layout?.enabled) return;
     const steps = session.toSession().steps;
@@ -19039,37 +19259,45 @@ async function runRepl(options, initialTask = "") {
     }
   };
   const drainQueuedMessages = () => reader.drainQueuedMessages();
-  let autonomousRounds = 1;
-  setAskUserRuntime(async (text, options2, signal) => {
-    console.log(chalk11.white(`
+  let autonomousRounds = 5;
+  setAskUserRuntime(async (text, options2, signal, presentation) => {
+    const block = presentation && layout?.enabled ? layout.beginTransientBlock() : void 0;
+    let resolvedAnswer = null;
+    try {
+      console.log(chalk11.white(`
   ? ${text}`));
-    let rawAnswer;
-    if (options2?.length && layout?.enabled) {
-      slashCompletion?.suspend();
-      layout.setPrompt("\u203A ");
-      let choices;
-      try {
-        choices = attachInteractiveChoices(rl, options2, { signal, output: stdout5, prompt: "\u203A ", maxRow: () => layout.contentRows });
-        rawAnswer = await reader.nextFresh(signal);
-      } finally {
-        choices?.cleanup();
+      let rawAnswer;
+      if (options2?.length && layout?.enabled) {
+        slashCompletion?.suspend();
         layout.setPrompt("\u203A ");
-        slashCompletion?.resume();
+        let choices;
+        try {
+          choices = attachInteractiveChoices(rl, options2, { signal, output: stdout5, prompt: "\u203A ", maxRow: () => layout.contentRows });
+          rawAnswer = await reader.nextFresh(signal);
+        } finally {
+          choices?.cleanup();
+          layout.setPrompt("\u203A ");
+          slashCompletion?.resume();
+        }
+      } else {
+        if (options2?.length) {
+          options2.forEach((option, index) => console.log(chalk11.gray(`     ${index + 1}. ${option}`)));
+          console.log(chalk11.gray("     (type a number, or answer in your own words)"));
+        }
+        rawAnswer = await question(chalk11.white("  \u203A "), signal);
       }
-    } else {
-      if (options2?.length) {
-        options2.forEach((option, index) => console.log(chalk11.gray(`     ${index + 1}. ${option}`)));
-        console.log(chalk11.gray("     (type a number, or answer in your own words)"));
+      if (signal?.aborted) return null;
+      const answer = (rawAnswer ?? "").trim();
+      const picked = Number.parseInt(answer, 10);
+      if (options2?.length && String(picked) === answer && picked >= 1 && picked <= options2.length) {
+        resolvedAnswer = options2[picked - 1];
+        return resolvedAnswer;
       }
-      rawAnswer = await question(chalk11.white("  \u203A "), signal);
-    }
-    if (signal?.aborted) return null;
-    const answer = (rawAnswer ?? "").trim();
-    const picked = Number.parseInt(answer, 10);
-    if (options2?.length && String(picked) === answer && picked >= 1 && picked <= options2.length) {
-      return options2[picked - 1];
+      resolvedAnswer = rawAnswer === null ? null : answer;
+      return resolvedAnswer;
+    } finally {
+      if (block && presentation) layout?.collapseTransientBlock(block, presentation.collapseSummary(signal?.aborted ? null : resolvedAnswer));
     }
-    return answer;
   });
   let running = true;
   let turnAbort;
@@ -19196,6 +19424,8 @@ async function runRepl(options, initialTask = "") {
     if (stdin5.isTTY) stdin5.off("keypress", onKeypress);
     setAskUserRuntime(void 0);
     setActivitySink(void 0);
+    setWorkingSink(void 0);
+    setActivityMessageSink(void 0);
     rl.close();
     try {
       await saveTranscript(session, writeCheckpoint);
@@ -19206,16 +19436,22 @@ async function runRepl(options, initialTask = "") {
   }
   console.log(chalk11.gray("Goodbye."));
 }
-async function runTurn(session, input, question, signal, drainQueuedMessages, persist, isComposing, allowImageDrop = true) {
+async function runTurn(session, input, question, signal, drainQueuedMessages, persist, isComposing, allowImageDrop = true, activityState) {
   const activity = isGhostEnabled(session) ? void 0 : getActivitySink();
-  const entries = [];
-  let thinkingMs = 0;
+  const entries = activityState?.entries ?? [];
+  let thinkingMs = activityState?.thinkingMs ?? 0;
   let thinkingStarted;
   let turnFailed = false;
-  const refreshActivity = (finished = false) => activity?.({ entries: [...entries], thinkingMs, finished, failed: turnFailed });
+  const refreshActivity = (finished = false) => {
+    if (activityState) {
+      activityState.thinkingMs = thinkingMs;
+      activityState.failed ||= turnFailed;
+    }
+    activity?.({ entries: [...entries], thinkingMs, finished: finished && !activityState, failed: turnFailed });
+  };
   refreshActivity();
-  const spinner = new Spinner();
-  const workSpinner = new Spinner("working");
+  const spinner = new Spinner("working", activity ? getWorkingSink() : void 0);
+  const workSpinner = new Spinner("working", activity ? getWorkingSink() : void 0);
   const activeTools = /* @__PURE__ */ new Map();
   let permissionPrompts = 0;
   const renderWorking = () => {
@@ -19247,24 +19483,23 @@ async function runTurn(session, input, question, signal, drainQueuedMessages, pe
         deltaChars = 0;
         thinkingStarted = performance.now();
         if (!quiet) {
-          spinner.update("thinking");
-          spinner.start(isComposing);
+          spinner.update("working");
+          spinner.start(isComposing, performance.now() - thinkingMs);
         }
       },
       onModelDelta: (text) => {
         deltaChars += text.length;
-        if (!quiet) spinner.update(`thinking (${deltaChars} chars)`);
+        if (!quiet) spinner.update(`working (${deltaChars} chars)`);
       },
       onModelSettled: () => {
         if (thinkingStarted !== void 0) thinkingMs += performance.now() - thinkingStarted;
         thinkingStarted = void 0;
-        spinner.stop(activity ? void 0 : signal?.aborted ? "Thinking stopped after" : "Thought for");
+        spinner.stop(activity ? void 0 : signal?.aborted ? "Work stopped after" : "Worked for");
         refreshActivity();
       },
       onAssistantMessage: (message) => {
         if (message.trim()) {
-          console.log(`
-${message.trim()}`);
+          writeActivityMessage(message.trim());
         }
       },
       onToolStart: (call) => {
@@ -19300,7 +19535,7 @@ ${message.trim()}`);
         console.log(chalk11.yellow(`  ! ${notice}`));
       },
       onStopped: (reason) => {
-        if (reason === "aborted") return;
+        if (reason === "aborted" || reason === "max-steps" && activityState?.continuing) return;
         const line = stopReasonLine(reason);
         const hint = turnStopHint(reason, session.maxSteps);
         if (!line || !hint) return;
@@ -19312,13 +19547,29 @@ ${message.trim()}`);
         permissionPrompts += 1;
         workSpinner.stop();
         try {
-          const prompt = permission === "shell" && call.tool === "run_shell" ? shellApprovalPrompt(call, session.toSession().workspace) : permission === "shell" ? `  ${call.tool} wants shell access. [o]nce (this call only) / [a]lways (all shell tools for this session) / [n]o (this call) / n[e]ver (this session) \u203A ` : `  ${call.tool} wants ${permission} access. [o]nce / [a]lways / [n]o / n[e]ver \u203A `;
-          const rawAnswer = await question(chalk11.yellow(prompt), signal);
+          const prompt = permission === "shell" && call.tool === "run_shell" ? shellApprovalPrompt(call, session.toSession().workspace) : permission === "shell" ? `  ${call.tool} wants shell access.
+  1. [o]nce (this call only)
+  2. [a]lways (this session)
+  3. [n]o (this call)
+  4. n[e]ver (this session)
+  Answer: ` : `  ${call.tool} wants ${permission} access.
+  1. [o]nce
+  2. [a]lways (this session)
+  3. [n]o
+  4. n[e]ver (this session)
+  Answer: `;
+          const choices = ["Allow once", "Allow for this session", "Deny this call", "Never allow this permission this session"];
+          const asker = getAskUserRuntime();
+          const rawAnswer = asker ? await asker(prompt.split("\n").slice(0, -5).join("\n"), choices, signal, { collapseSummary: (value) => {
+            const answer2 = value?.trim().toLowerCase();
+            const label = !answer2 ? "Cancelled" : ["a", "always", "2", choices[1].toLowerCase()].includes(answer2) ? choices[1] : ["o", "once", "y", "yes", "1", choices[0].toLowerCase()].includes(answer2) ? choices[0] : ["e", "never", "4", choices[3].toLowerCase()].includes(answer2) ? choices[3] : choices[2];
+            return `  ${call.tool} \xB7 ${permission} permission: ${label}`;
+          } }) : await question(chalk11.yellow(prompt), signal);
           if (signal?.aborted || rawAnswer === null) return "deny";
           const answer = rawAnswer.trim().toLowerCase();
-          if (answer === "a" || answer === "always") return "always";
-          if (answer === "o" || answer === "once" || answer === "y" || answer === "yes") return "once";
-          if (answer === "e" || answer === "never") {
+          if (answer === "a" || answer === "always" || answer === "2" || answer === choices[1].toLowerCase()) return "always";
+          if (answer === "o" || answer === "once" || answer === "y" || answer === "yes" || answer === "1" || answer === choices[0].toLowerCase()) return "once";
+          if (answer === "e" || answer === "never" || answer === "4" || answer === choices[3].toLowerCase()) {
             console.log(
               chalk11.gray(
                 `  ${permission} refused for the rest of the session \u2014 nothing will ask again. /allow ${permission} undoes it.`
@@ -19349,15 +19600,16 @@ ${message.trim()}`);
   }
 }
 async function runAndCheckpointTurn(session, input, question, signal, persist, drainQueuedMessages, isComposing, maxRounds = 1, allowImageDrop = true) {
+  const activityState = { entries: [], thinkingMs: 0, continuing: maxRounds > 1 };
   try {
-    if (maxRounds === 1) return await runTurn(session, input, question, signal, drainQueuedMessages, persist, isComposing, allowImageDrop);
+    if (maxRounds === 1) return await runTurn(session, input, question, signal, drainQueuedMessages, persist, isComposing, allowImageDrop, activityState);
     let successful = true;
     const result = await runAutonomousLoop({
       maxRounds,
       signal,
       classifyFailure: () => ({ kind: "unknown", retryable: false, failoverable: false, reason: "Interactive provider retries already exhausted." }),
       runRound: async (round, _previous, roundSignal) => {
-        successful = await runTurn(session, round === 1 ? input : AUTONOMOUS_CONTINUE_TASK, question, roundSignal, drainQueuedMessages, persist, isComposing, allowImageDrop);
+        successful = await runTurn(session, round === 1 ? input : AUTONOMOUS_CONTINUE_TASK, question, roundSignal, drainQueuedMessages, persist, isComposing, allowImageDrop, activityState);
         await persist(session);
         const snapshot = session.toSession();
         return successful ? snapshot : { ...snapshot, stopReason: roundSignal.aborted ? "aborted" : "error" };
@@ -19369,6 +19621,7 @@ async function runAndCheckpointTurn(session, input, question, signal, persist, d
     if (result.haltReason !== "completed" && result.haltReason !== "aborted") console.log(chalk11.gray(`Automatic continuation stopped: ${result.haltReason}. Session preserved.`));
     return successful;
   } finally {
+    if (!isGhostEnabled(session)) getActivitySink()?.({ ...activityState, entries: [...activityState.entries], finished: true });
     await persist(session);
   }
 }
@@ -19620,15 +19873,43 @@ ${extra}`);
       return "ok";
     }
     case "permissions": {
-      if (argument) {
-        if (!["readonly", "workspace", "full"].includes(argument)) {
-          console.log("Usage: /permissions [readonly|workspace|full]");
+      let selectedMode = argument.toLowerCase();
+      const modes = ["readonly", "workspace", "full"];
+      const choices = ["Readonly: no write, shell, or network access", "Workspace: file writes; shell and network denied", "Full access: no tool approval prompts"];
+      const resolveMode = (value) => {
+        if (value === null) return void 0;
+        const text = value.trim().toLowerCase();
+        const index = choices.findIndex((choice) => choice.toLowerCase() === text);
+        if (index >= 0) return modes[index];
+        if (["1", "2", "3"].includes(text)) return modes[Number(text) - 1];
+        return modes.includes(text) ? text : void 0;
+      };
+      const asker = getAskUserRuntime();
+      if (!selectedMode && asker) {
+        const answer = await asker("Choose tool permissions for this session.", choices, signal, {
+          collapseSummary: (value) => {
+            const mode2 = resolveMode(value);
+            return mode2 ? `  Permission mode: ${mode2}` : "  Permission mode unchanged.";
+          }
+        });
+        if (signal?.aborted || answer === null) return "ok";
+        const mode = resolveMode(answer);
+        if (!mode) {
+          console.log("Permission mode unchanged. Use /permissions readonly|workspace|full.");
+          return "ok";
+        }
+        selectedMode = mode;
+      }
+      if (selectedMode && selectedMode !== "status") {
+        if (!modes.includes(selectedMode)) {
+          console.log("Usage: /permissions [readonly|workspace|full|status]");
           return "ok";
         }
         for (const permission of ["write", "shell", "network"]) {
-          session.setPermission(permission, argument === "full" || argument === "workspace" && permission === "write");
+          session.setPermission(permission, selectedMode === "full" || selectedMode === "workspace" && permission === "write");
         }
-        console.log("Permissions updated. These are tool grants; shell access is not an operating-system sandbox.");
+        if (argument) console.log(selectedMode === "full" ? "Full access: file, shell, and network tools run without approval prompts for this session." : `Permission mode: ${selectedMode}. Ungranted tools are denied without prompting.`);
+        return "ok";
       }
       const p = session.currentPermissions;
       console.log(`write: ${p.write}  shell: ${p.shell}  network: ${p.network}`);
@@ -19919,11 +20200,16 @@ function shellApprovalPrompt(call, workspace) {
   const timeoutMs = typeof call.input.timeoutMs === "number" ? call.input.timeoutMs : 3e4;
   return [
     "  run_shell wants shell access.",
-    "  WARNING: this command runs unsandboxed as your user. It can read or write files available to your account and use your network connection.",
+    "  Runs unsandboxed as your user.",
+    "  Can read or write your files and use your network connection.",
     `  Command: ${JSON.stringify(command)}`,
     `  Resolved cwd: ${JSON.stringify(resolvedCwd)}`,
     `  Timeout: ${timeoutMs.toLocaleString("en-US")} ms`,
-    "  [o]nce runs only this command / [a]lways grants shell access for this whole session, including other shell-using tools / [n]o (this call) / n[e]ver (this session) \u203A "
+    "  1. [o]nce runs only this command",
+    "  2. [a]lways grants shell access for this whole session, including other shell-using tools",
+    "  3. [n]o (this call)",
+    "  4. n[e]ver (this session)",
+    "  Answer: "
   ].join("\n");
 }
 function indent3(value) {
@@ -19943,7 +20229,7 @@ function parsePositiveInt(value, flag) {
 var EXIT_INCOMPLETE_RUN = 2;
 var NOTIFY_SUMMARY_CHARS = 1200;
 function registerRunCommand(program2) {
-  program2.command("run").alias("chat").description("Run a one-shot coding agent task").argument("<task...>", "Task for the agent").option("-w, --workspace <path>", "Workspace path", ".").option("--provider <name>", "Provider: ultrac (default) or echo (offline test stub)").option("--model <model>", "Model name").option("--base-url <url>", "Ultrac API base URL (overrides ULTRAC_BASE_URL and the stored login)").option("--mode <name>", `Agent mode: ${agentModeNames.join(", ")}`).option("--max-steps <number>", "Maximum agent steps").option("--no-native-tools", "Use the legacy JSON tool protocol").option("--allow-write", "Allow file writes", false).option("--allow-shell", "Grant the model broad, unsandboxed shell access", false).option("--allow-network", "Allow HTTP(S) URL fetches", false).option("--continue <id>", "Continue from a saved session id").option("--tools <list>", "Tools to advertise: `all`, or a comma-separated list. Default: the mode's set").option("--context-tokens <number>", "Model context window in tokens (default 262144)").option("--max-tool-result-chars <number>", "Cap on one tool result in the transcript (default 6000)").option(
+  program2.command("run").alias("chat").description("Run a one-shot coding agent task").argument("<task...>", "Task for the agent").option("-w, --workspace <path>", "Workspace path", ".").option("--provider <name>", "Provider: ultrac (default) or echo (offline test stub)").option("--model <model>", "Model name").option("--base-url <url>", "Ultrac API base URL (overrides ULTRAC_BASE_URL and the stored login)").option("--mode <name>", `Agent mode: ${agentModeNames.join(", ")}`).option("--max-steps <number>", "Maximum agent steps").option("--no-native-tools", "Use the legacy JSON tool protocol").option("--permissions <mode>", "Tool permission preset: readonly, workspace, or full").option("--allow-write", "Allow file writes", false).option("--allow-shell", "Grant the model broad, unsandboxed shell access", false).option("--allow-network", "Allow HTTP(S) URL fetches", false).option("--continue <id>", "Continue from a saved session id").option("--tools <list>", "Tools to advertise: `all`, or a comma-separated list. Default: the mode's set").option("--context-tokens <number>", "Model context window in tokens (default 262144)").option("--max-tool-result-chars <number>", "Cap on one tool result in the transcript (default 6000)").option(
     "--allow-incomplete",
     `Exit 0 even when the run stops without finishing. By default an unfinished run (step cap, abort, error) exits ${EXIT_INCOMPLETE_RUN} so a script or a \`&&\` chain can tell a partial answer from a real one; pass this when hitting --max-steps on a long task is an acceptable outcome. The stop reason is still printed either way.`,
     false
@@ -20060,7 +20346,8 @@ function registerRunCommand(program2) {
       const abortRun = () => controller.abort();
       process.on("SIGINT", abortRun);
       process.on("SIGTERM", abortRun);
-      const permissions = autonomous ? { write: true, shell: true, network: true } : {
+      if (options.permissions && !["readonly", "workspace", "full"].includes(options.permissions)) throw new Error("--permissions must be readonly, workspace, or full.");
+      const permissions = options.permissions ? { write: options.permissions !== "readonly", shell: options.permissions === "full", network: options.permissions === "full" } : autonomous ? { write: true, shell: true, network: true } : {
         write: options.allowWrite || config.permissions.write,
         shell: options.allowShell || config.permissions.shell,
         network: options.allowNetwork || config.permissions.network

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@spinalfluid/ultrac",
-  "version": "0.1.14",
+  "version": "0.1.20",
   "license": "SEE LICENSE IN LICENSE",
   "description": "Ultrac terminal agent harness for Cosmic 1, with local tools, browser sign-in, streamed answers, and resumable sessions.",
   "author": "Aditya Pundir",