agy-powerline 1.0.1 → 1.1.0

package/CHANGELOG.md

@@ -5,6 +5,24 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.1.0] - 2026-10-12
+
+### Added
+
+- `tasks` widget: running subagents and background tasks, e.g. `👥 2 subagents, 1 task`, hidden when nothing runs; part of the `full` preset (#14)
+- `mode` widget: the approval mode (e.g. `accept-edits`) and the Vim mode, which Antigravity's own status line shows; hidden in the default mode with Vim editing off; part of the `workspace` and `full` presets (#15)
+- `title` widget: the conversation's title on one line, cut to 30 columns, hidden until the conversation has one (#16)
+
+### Fixed
+
+- The statusline no longer hangs until Antigravity kills it when Antigravity keeps its input open without sending anything; repeated kills made Antigravity turn the statusline off (#13)
+
+## [1.0.2] - 2026-10-11
+
+### Security
+
+- On macOS and Linux, the config, `exec` cache, problem log and payload dump are now readable by your account only, and saving Antigravity's `settings.json` keeps its permissions. Run `agy-powerline init --yes` after updating to apply this to existing files (#11)
+
 ## [1.0.1] - 2026-10-11
 
 ### Fixed

package/README.md

@@ -42,7 +42,7 @@ Start from a preset, then adjust:
 | ----------- | ---------------------------------------------------------------------------- |
 | `default`   | Model, context, git; 5h and 7d quotas with resets on a second row            |
 | `compact`   | One line: short model, tightest quota, context %, git                        |
-| `workspace` | Project, git, agent state, model; context and tightest quota                 |
+| `workspace` | Project, git, agent state, model; context, tightest quota and mode           |
 | `limits`    | Every quota (5h, 7d, third-party), one per row                               |
 | `full`      | Everything: session, project and git; context, tokens and cache; both quotas |
 
@@ -86,6 +86,9 @@ Preview them all with `npx agy-powerline theme --gallery`.
 | `git`                                                   | Branch, uncommitted changes and ahead/behind                                                       |
 | `project`, `cwd`                                        | Project folder, current folder                                                                     |
 | `agentState`, `plan`, `sandbox`, `artifacts`, `version` | What the agent is doing, your plan, sandbox, artifacts, CLI version                                |
+| `tasks`                                                 | Running subagents and background tasks                                                             |
+| `mode`                                                  | Approval mode (e.g. accept-edits) and Vim mode                                                     |
+| `title`                                                 | The conversation's title                                                                           |
 | `totalTokens`, `cacheHit`, `cacheRead`, `cacheCreate`   | Session tokens and prompt cache usage                                                              |
 | `ram`                                                   | Memory used on your machine                                                                        |
 | `customText`, `exec`                                    | Your own text, or the output of a [shell command](docs/configuration.md#shell-command-widget-exec) |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agy-powerline",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "Interactive statusline for Google Antigravity",
   "bin": {
     "agy-powerline": "src/index.js"

package/src/cli/init.js

@@ -11,6 +11,7 @@ const {
   readSettingsForUpdate,
   settingsBackupPath,
   writeJsonSafely,
+  restrictPrivateFiles,
   isWindowsNodeOnWsl,
   windowsNodeOnWslMessage,
   cmdBreakingChars,
@@ -81,6 +82,7 @@ async function initCommand(options = {}) {
 
   try {
     fs.mkdirSync(installDir, { recursive: true });
+    restrictPrivateFiles(installDir);
 
     const destStatusline = path.join(installDir, "statusline.js");
     const destConfig = path.join(installDir, "statusline.config.json");

package/src/lib/catalog.js

@@ -105,6 +105,24 @@ const WIDGET_CATALOG = [
     unique: true,
     description: "number of artifacts",
   },
+  {
+    id: "tasks",
+    label: "Subagents & Tasks",
+    unique: true,
+    description: "running subagents and background tasks, shown only when there are some",
+  },
+  {
+    id: "mode",
+    label: "Mode",
+    unique: true,
+    description: "approval mode (e.g. accept-edits) and Vim mode, shown only when one is on",
+  },
+  {
+    id: "title",
+    label: "Conversation Title",
+    unique: true,
+    description: "name of the current conversation, shown once it has one",
+  },
   { id: "ram", label: "RAM Usage", unique: true, description: "memory used on this machine" },
   { id: "version", label: "CLI Version", unique: true, description: "Antigravity CLI version" },
   {

package/src/lib/config.js

@@ -6,7 +6,7 @@ const { resolveColorModeId } = require("./colors");
 const { resolveThemeId } = require("./themes");
 const { stripControl, normalizeClock } = require("./formatters");
 const { normalizePowerline } = require("./powerline");
-const { writeFileAtomic } = require("./paths");
+const { writeFileAtomic, PRIVATE_FILE_MODE } = require("./paths");
 
 // Display text in widget configs is printed as-is, so strip terminal control
 // from it. cmd/command are left alone: they are executed, not printed.
@@ -40,6 +40,9 @@ const VALID_WIDGET_IDS = new Set([
   "plan",
   "agentState",
   "artifacts",
+  "tasks",
+  "mode",
+  "title",
   "ram",
   "version",
   "sandbox",
@@ -225,7 +228,9 @@ function saveConfig(config) {
     throw new InvalidConfigError(getConfigPath(), current.error);
   }
 
-  writeFileAtomic(getConfigPath(), JSON.stringify(mergeConfig(config), null, 2) + "\n");
+  writeFileAtomic(getConfigPath(), JSON.stringify(mergeConfig(config), null, 2) + "\n", {
+    mode: PRIVATE_FILE_MODE,
+  });
 }
 
 // Presets set the widget list only; the layout (Pills or Lines) stays the one
@@ -258,7 +263,7 @@ const PRESETS = {
   workspace: {
     id: "workspace",
     name: "Several repos",
-    description: "Project, git, agent state and model; context and tightest quota below",
+    description: "Project, git, agent state and model; context, tightest quota and mode below",
     widgets: [
       { id: "project" },
       { id: "git" },
@@ -269,6 +274,7 @@ const PRESETS = {
       { id: "context" },
       { id: "separator" },
       { id: "quota" },
+      { id: "mode" },
     ],
   },
   limits: {
@@ -292,6 +298,7 @@ const PRESETS = {
     description: "Session, project and git; context, tokens and cache; both quotas, on three rows",
     widgets: [
       { id: "agentState" },
+      { id: "tasks" },
       { id: "model" },
       { id: "plan" },
       { id: "sandbox" },
@@ -302,6 +309,7 @@ const PRESETS = {
       { id: "context" },
       { id: "totalTokens", split: true },
       { id: "cacheHit" },
+      { id: "mode" },
       { id: "lineBreak" },
       { id: "fiveHourBar" },
       { id: "fiveHourReset" },

package/src/lib/exec.js

@@ -7,6 +7,7 @@ const crypto = require("crypto");
 const { execSync } = require("child_process");
 const { stripControl } = require("./formatters");
 const { logWarning } = require("./log");
+const { PRIVATE_FILE_MODE } = require("./paths");
 
 const DEFAULT_TIMEOUT_MS = 500;
 const DEFAULT_INTERVAL_SEC = 10;
@@ -54,7 +55,8 @@ function loadDiskCache() {
 
 // Several agy windows refresh at once, so the cache is written to a fresh temp
 // file and renamed into place: a reader never sees half a file. "wx" refuses a
-// file that already exists (or a planted link) in a shared temp folder.
+// file that already exists (or a planted link) in a shared temp folder, and the
+// file is owner-only because it holds the output of the user's commands.
 function saveDiskCache(cache) {
   let tmp = "";
   try {
@@ -64,7 +66,11 @@ function saveDiskCache(cache) {
       fs.mkdirSync(dir, { recursive: true });
     }
     tmp = `${file}.${process.pid}.${crypto.randomBytes(4).toString("hex")}.tmp`;
-    fs.writeFileSync(tmp, JSON.stringify(cache), { encoding: "utf8", flag: "wx" });
+    fs.writeFileSync(tmp, JSON.stringify(cache), {
+      encoding: "utf8",
+      flag: "wx",
+      mode: PRIVATE_FILE_MODE,
+    });
     fs.renameSync(tmp, file);
   } catch {
     // The cache is best effort: skip this write rather than risk a torn file.

package/src/lib/fit.js

@@ -6,18 +6,21 @@ const { charWidth, visibleWidth } = require("./formatters");
 // first entry first. Ids not listed (custom ones) go before all of them.
 const DROP_ORDER = [
   "customText",
+  "title",
   "version",
   "cacheCreate",
   "cacheRead",
   "totalTokens",
   "cacheHit",
   "artifacts",
+  "tasks",
   "plan",
   "ram",
   "project",
   "cwd",
   "exec",
   "agentState",
+  "mode",
   "thirdPartyWeekly",
   "thirdPartyFiveHour",
   "weeklyReset",

package/src/lib/formatters.js

@@ -477,6 +477,37 @@ function formatGitSync(ahead, behind, ascii = false) {
   return "";
 }
 
+// "2 subagents, 1 task", or "" when nothing runs.
+function formatTasks(subagents, tasks) {
+  const part = (n, word) => (n > 0 ? `${n} ${word}${n === 1 ? "" : "s"}` : "");
+  return [part(subagents, "subagent"), part(tasks, "task")].filter(Boolean).join(", ");
+}
+
+// "accept-edits, NORMAL", or "" in the default mode with Vim editing off.
+function formatMode(approval, vim) {
+  return [approval === "default" ? "" : approval, vim].filter(Boolean).join(", ");
+}
+
+// Cuts text to `max` terminal columns, ending with an ellipsis when cut.
+function clipText(text, max, ascii = false) {
+  const value = String(text);
+  if (visibleWidth(value) <= max) {
+    return value;
+  }
+  const ellipsis = ascii ? "..." : "…";
+  let out = "";
+  let width = 0;
+  for (const char of value) {
+    const w = charWidth(char.codePointAt(0));
+    if (width + w > max - ellipsis.length) {
+      break;
+    }
+    out += char;
+    width += w;
+  }
+  return out.trimEnd() + ellipsis;
+}
+
 // Removes escape sequences and control characters from text that did not
 // come from us (payload fields, branch names, command output), so it cannot
 // drive the terminal: cursor moves, OSC 52 clipboard writes, hyperlinks...
@@ -555,6 +586,9 @@ module.exports = {
   shortModelName,
   formatTokenSplit,
   formatGitSync,
+  formatTasks,
+  formatMode,
+  clipText,
   quotaColor,
   contextColor,
   resolveQuotaThresholds,

package/src/lib/layouts/lines.js

@@ -8,6 +8,9 @@ const {
   paceIndex,
   paceGlyph,
   formatGitSync,
+  formatTasks,
+  formatMode,
+  clipText,
   formatTokens,
   formatContextTokens,
   shortModelName,
@@ -28,6 +31,7 @@ const {
   hasNoData,
   RAM_CAUTION,
   RAM_DANGER,
+  TITLE_MAX,
 } = require("../widget-style");
 
 const LINES = NAMED_COLORS;
@@ -374,6 +378,31 @@ function buildLinesSegment(id, session, palette, emojis, ascii = false, widget =
       }
       return fg(palette.text) + tag() + String(session.artifacts) + RESET;
 
+    case "tasks": {
+      const text = formatTasks(session.subagents, session.tasks);
+      if (!text) {
+        return null;
+      }
+      return fg(palette.text) + tag() + text + RESET;
+    }
+
+    case "mode": {
+      const text = formatMode(session.approvalMode, session.vimMode);
+      if (!text) {
+        return null;
+      }
+      // An approval mode like accept-edits changes what the agent may do alone.
+      const approval = session.approvalMode && session.approvalMode !== "default";
+      const color = approval ? palette.quotaHigh || palette.yellow || LINES.yellow : palette.text;
+      return fg(color) + tag() + text + RESET;
+    }
+
+    case "title":
+      if (!session.title) {
+        return null;
+      }
+      return fg(palette.text) + tag() + clipText(session.title, TITLE_MAX, ascii) + RESET;
+
     case "sandbox": {
       if (!session.sandbox) {
         return null;

package/src/lib/layouts/pills.js

@@ -24,6 +24,9 @@ const {
   shortModelName,
   formatTokenSplit,
   formatGitSync,
+  formatTasks,
+  formatMode,
+  clipText,
   homePath,
   basenameOf,
   label,
@@ -41,6 +44,7 @@ const {
   hasNoData,
   RAM_CAUTION,
   RAM_DANGER,
+  TITLE_MAX,
 } = require("../widget-style");
 
 const WHITE = [255, 255, 255];
@@ -420,6 +424,30 @@ function buildSegment(id, session, colors, emojis, ascii = false, widget = {}, c
       }
       return pill(colors.meta, lbl(String(session.artifacts)));
 
+    case "tasks": {
+      const text = formatTasks(session.subagents, session.tasks);
+      if (!text) {
+        return null;
+      }
+      return pill(colors.meta, lbl(text));
+    }
+
+    case "mode": {
+      const text = formatMode(session.approvalMode, session.vimMode);
+      if (!text) {
+        return null;
+      }
+      // An approval mode like accept-edits changes what the agent may do alone.
+      const approval = session.approvalMode && session.approvalMode !== "default";
+      return pill(approval ? colors.caution : colors.meta, lbl(text));
+    }
+
+    case "title":
+      if (!session.title) {
+        return null;
+      }
+      return pill(colors.meta, lbl(clipText(session.title, TITLE_MAX, ascii)));
+
     case "ram": {
       const pct = session.ramPct ?? 0;
       let color = colors.meta;

package/src/lib/log.js

@@ -9,7 +9,7 @@
 const fs = require("fs");
 const os = require("os");
 const path = require("path");
-const { writeFileAtomic, readInstallMeta } = require("./paths");
+const { writeFileAtomic, readInstallMeta, PRIVATE_FILE_MODE } = require("./paths");
 const { stripControl } = require("./formatters");
 
 const LOG_NAME = "agy-powerline.log";
@@ -246,7 +246,7 @@ function logEvent(level, code, details = {}) {
       lines = lines.slice(1);
     }
 
-    writeFileAtomic(file, lines.join("\n") + "\n");
+    writeFileAtomic(file, lines.join("\n") + "\n", { mode: PRIVATE_FILE_MODE });
   } catch {
     // Read-only disk, full disk, permissions: the bar matters more.
   }

package/src/lib/mock-data.js

@@ -62,6 +62,13 @@ function sampleData() {
     },
     sandbox: { enabled: false },
     artifact_count: 2,
+    subagents: [
+      { name: "research", role: "Find where the config is loaded", status: "running" },
+      { name: "review", role: "Check the error messages", status: "completed" },
+    ],
+    task_count: 1,
+    cycle_mode: "accept-edits",
+    conversation_title: "Fix the config loader",
     plan_tier: "Pro",
     terminal_width: process.stdout.columns || 120,
   };

package/src/lib/paths.js

@@ -28,17 +28,25 @@ const RUNTIME_FILES = [
   path.join("layouts", "pills.js"),
 ];
 
+// Files that can hold the user's commands, their output or session details.
+// They are written readable by the owner only, so other accounts on a shared
+// machine can't read them (Windows profile folders are private already).
+const PRIVATE_FILES = [
+  "statusline.config.json",
+  ".exec-cache.json",
+  "last-payload.json",
+  // LOG_NAME in log.js, spelled out because log.js requires this file.
+  "agy-powerline.log",
+];
+const PRIVATE_FILE_MODE = 0o600;
+
 // Everything init or the runtime may create in the install dir. uninstall
 // --delete removes only these, never the whole directory tree.
 const INSTALLED_FILES = [
   "statusline.js",
   "statusline.cmd",
   INSTALL_META_NAME,
-  "statusline.config.json",
-  ".exec-cache.json",
-  "last-payload.json",
-  // LOG_NAME in log.js, spelled out because log.js requires this file.
-  "agy-powerline.log",
+  ...PRIVATE_FILES,
   ...RUNTIME_FILES,
 ];
 
@@ -238,11 +246,24 @@ function writeJsonSafely(file, data) {
 }
 
 // Writes via temp file + rename so an interrupted write cannot leave a
-// truncated file behind.
-function writeFileAtomic(file, body) {
+// truncated file behind. The new file gets `mode` when given, otherwise the
+// mode the existing file had, so rewriting a file never widens who can read
+// it (the rename would otherwise reset it to the default).
+function writeFileAtomic(file, body, { mode } = {}) {
   fs.mkdirSync(path.dirname(file), { recursive: true });
   const tmp = `${file}.${process.pid}.tmp`;
-  fs.writeFileSync(tmp, body, "utf8");
+  const target = process.platform === "win32" ? undefined : (mode ?? existingMode(file));
+  fs.writeFileSync(tmp, body, { encoding: "utf8", mode: target ?? 0o666 });
+  if (target !== undefined) {
+    // The mode passed to writeFileSync is reduced by the umask; set it exactly.
+    // Some filesystems (e.g. Windows drives under WSL) refuse chmod; the write
+    // still matters more.
+    try {
+      fs.chmodSync(tmp, target);
+    } catch {
+      // Keep the mode writeFileSync gave it.
+    }
+  }
 
   try {
     fs.renameSync(tmp, file);
@@ -253,6 +274,29 @@ function writeFileAtomic(file, body) {
   }
 }
 
+function existingMode(file) {
+  try {
+    return fs.statSync(file).mode & 0o777;
+  } catch {
+    return undefined;
+  }
+}
+
+// Installs made before the private-file change left these files readable by
+// everyone; init narrows them. Best effort: a file we can't chmod stays as is.
+function restrictPrivateFiles(installDir) {
+  if (process.platform === "win32") {
+    return;
+  }
+  for (const name of PRIVATE_FILES) {
+    try {
+      fs.chmodSync(path.join(installDir, name), PRIVATE_FILE_MODE);
+    } catch {
+      // Missing file, or not ours to change.
+    }
+  }
+}
+
 function removeSettingsFile(file = AGY_SETTINGS) {
   if (fs.existsSync(file)) {
     fs.copyFileSync(file, settingsBackupPath(file));
@@ -305,6 +349,9 @@ module.exports = {
   INSTALL_META_NAME,
   RUNTIME_FILES,
   INSTALLED_FILES,
+  PRIVATE_FILES,
+  PRIVATE_FILE_MODE,
+  restrictPrivateFiles,
   resolveInstallDir,
   isTrustedInstallDir,
   statuslineCommand,

package/src/lib/payload-dump.js

@@ -7,9 +7,9 @@
 // branch names become placeholders. A field Antigravity adds later is left
 // out until it is listed here.
 
-const fs = require("fs");
 const path = require("path");
 const { stripControl } = require("./formatters");
+const { writeFileAtomic, PRIVATE_FILE_MODE } = require("./paths");
 
 const NUMBER = "number";
 const BOOL = "boolean";
@@ -17,6 +17,7 @@ const TEXT = "text";
 const TIME = "time";
 const PATH = "path";
 const BRANCH = "branch";
+const TITLE = "title";
 
 const QUOTA = {
   remaining_fraction: NUMBER,
@@ -52,6 +53,11 @@ const SCHEMA = {
   vcs: VCS,
   sandbox: { enabled: BOOL, allow_network: BOOL },
   artifact_count: NUMBER,
+  subagents: "subagents",
+  task_count: NUMBER,
+  cycle_mode: TEXT,
+  vim: { mode: TEXT },
+  conversation_title: TITLE,
   terminal_width: NUMBER,
 };
 
@@ -102,6 +108,18 @@ function pick(value, rule, seen) {
   if (rule === BRANCH) {
     return typeof value === "string" && value ? branchPlaceholder(value) : undefined;
   }
+  if (rule === TITLE) {
+    // A title can name the user's work; the placeholder keeps its length.
+    return typeof value === "string" && value
+      ? "title" + "x".repeat(Math.max(0, Math.min(200, value.length) - 5))
+      : undefined;
+  }
+  if (rule === "subagents") {
+    // Only the status: a subagent's name and role describe the user's work.
+    return Array.isArray(value)
+      ? value.slice(0, 50).map((agent) => pick(agent, { status: TEXT }, seen) || {})
+      : undefined;
+  }
   if (rule === "quota") {
     if (typeof value !== "object") {
       return undefined;
@@ -160,9 +178,9 @@ function writePayloadDump(target, rawInput) {
   }
 
   try {
-    const resolved = path.resolve(target);
-    fs.mkdirSync(path.dirname(resolved), { recursive: true });
-    fs.writeFileSync(resolved, JSON.stringify(body, null, 2) + "\n", "utf8");
+    writeFileAtomic(path.resolve(target), JSON.stringify(body, null, 2) + "\n", {
+      mode: PRIVATE_FILE_MODE,
+    });
   } catch {
     // Best-effort debug write; the bar matters more.
   }

package/src/lib/session.js

@@ -175,6 +175,16 @@ function extractSession(data, config) {
     plan: firstText(data.plan_tier),
     agentState: firstText(data.agent_state),
     artifacts: Math.floor(count(data.artifact_count)),
+    // Finished subagents stay in the list Antigravity sends; only running ones count.
+    subagents: Array.isArray(data.subagents)
+      ? data.subagents.filter((agent) => agent?.status === "running").length
+      : 0,
+    tasks: Math.floor(count(data.task_count)),
+    // Left out in the default mode, and with Vim editing off.
+    approvalMode: firstText(data.cycle_mode),
+    vimMode: firstText(data.vim?.mode),
+    // Left out until the conversation has a title; kept to one line.
+    title: firstText(data.conversation_title).replace(/\s+/g, " ").trim(),
     version: firstText(data.version),
     sandbox: data.sandbox?.enabled === true,
     sandboxNet: data.sandbox?.allow_network === true,

package/src/lib/widget-style.js

@@ -102,6 +102,9 @@ const WIDGET_TAGS = {
   plan: { icon: "⭐", name: "Plan" },
   agentState: { icon: "🟣", name: "Agent" },
   artifacts: { icon: "📎", name: "Artifacts" },
+  tasks: { icon: "👥", name: "" },
+  mode: { icon: "🧭", name: "" },
+  title: { icon: "💬", name: "" },
   ram: { icon: "💻", name: "RAM" },
   version: { icon: "🔖", name: "" },
   sandbox: { icon: "🔒", name: "" },
@@ -127,6 +130,9 @@ function widgetTag(id, { emojis = true, raw = false, icon } = {}) {
   return `${icon ?? tag.icon} ${tag.iconOnly ? "" : named}`;
 }
 
+// Longest conversation title shown, in terminal columns.
+const TITLE_MAX = 30;
+
 // RAM use (%) that turns the ram widget to the caution, then danger color.
 const RAM_CAUTION = 80;
 const RAM_DANGER = 90;
@@ -154,4 +160,5 @@ module.exports = {
   hasNoData,
   RAM_CAUTION,
   RAM_DANGER,
+  TITLE_MAX,
 };

package/src/runtime/statusline.js

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-const fs = require("fs");
 const path = require("path");
 const { readConfigFile, renderStatusline } = require("./shared");
 const { isTrustedInstallDir } = require("./paths");
@@ -17,6 +16,12 @@ const {
 // A refresh slower than this is worth a line in the problem log.
 const SLOW_RENDER_MS = 750;
 
+// Antigravity can start the command and keep stdin open without writing to it
+// (google-antigravity/antigravity-cli#698). A blocking read would wait until
+// Antigravity kills the script, and a few kills in a row turn the custom
+// statusline off, so the read gives up after this long.
+const STDIN_TIMEOUT_MS = 1000;
+
 // The config decides whether problems are logged, so it is read first. A
 // broken config can't say, so logging stays on (AGY_POWERLINE_LOG=0 still
 // turns it off).
@@ -32,58 +37,87 @@ process.on("uncaughtException", (err) => {
   process.exit(0);
 });
 
-const input = fs
-  .readFileSync(0, "utf8")
-  .replace(/^\uFEFF/, "")
-  .trim();
-
-if (!input) {
-  process.exit(0);
+// Resolves with what stdin sent and whether it closed before the deadline.
+function readStdin(timeoutMs) {
+  return new Promise((resolve) => {
+    const chunks = [];
+    let done = false;
+    const finish = (complete) => {
+      if (done) return;
+      done = true;
+      clearTimeout(timer);
+      // An open stdin would keep the process alive after the bar is printed.
+      process.stdin.destroy();
+      resolve({ text: Buffer.concat(chunks).toString("utf8"), complete });
+    };
+    const timer = setTimeout(() => finish(false), timeoutMs);
+    process.stdin.on("data", (chunk) => chunks.push(chunk));
+    process.stdin.on("end", () => finish(true));
+    process.stdin.on("error", () => finish(true));
+  });
 }
 
-// Debug dumps keep only the fields the bar renders, never personal ones.
-const dumpPath =
-  dumpTarget(process.env.AGY_POWERLINE_DUMP_PAYLOAD, __dirname) ||
-  (process.env.AGY_POWERLINE_DEBUG ? path.join(__dirname, "last-payload.json") : null);
-if (dumpPath) {
-  writePayloadDump(dumpPath, input);
-}
+readStdin(STDIN_TIMEOUT_MS).then(({ text, complete }) => {
+  render(text.replace(/^\uFEFF/, "").trim(), complete);
+});
 
-let data;
+function render(input, complete) {
+  if (!input) {
+    if (!complete) {
+      logWarning("STDIN_TIMEOUT", { ms: STDIN_TIMEOUT_MS });
+    }
+    process.exit(0);
+  }
 
-try {
-  data = JSON.parse(input);
-} catch (err) {
-  logWarning("PAYLOAD_INVALID_JSON", { message: jsonErrorMessage(err.message) });
-  // Node's message quotes the bad input; only say where it broke.
-  process.stderr.write(`[agy-powerline] ${jsonErrorMessage(err.message)} on stdin\n`);
-  process.stdout.write("\x1b[31m[agy-powerline: invalid JSON]\x1b[0m\n");
-  process.exit(0);
-}
+  // Debug dumps keep only the fields the bar renders, never personal ones.
+  const dumpPath =
+    dumpTarget(process.env.AGY_POWERLINE_DUMP_PAYLOAD, __dirname) ||
+    (process.env.AGY_POWERLINE_DEBUG ? path.join(__dirname, "last-payload.json") : null);
+  if (dumpPath) {
+    writePayloadDump(dumpPath, input);
+  }
 
-// The one payload value the log keeps: Antigravity's version number.
-if (typeof data?.version === "string" && /^\d[\w.+-]{0,30}$/.test(data.version)) {
-  setLogContext({ antigravity: data.version });
-}
+  let data;
 
-// The config lives next to this script. A copy anywhere other than the
-// global install or AGY_POWERLINE_HOME (e.g. committed inside a repo) may be
-// edited by someone else, so its exec widgets stay off.
-const exec = isTrustedInstallDir(__dirname) ? "run" : "blocked";
+  try {
+    data = JSON.parse(input);
+  } catch (err) {
+    // Stdin was cut off by the deadline: nothing worth showing.
+    if (!complete) {
+      logWarning("STDIN_TIMEOUT", { ms: STDIN_TIMEOUT_MS });
+      process.exit(0);
+    }
+    logWarning("PAYLOAD_INVALID_JSON", { message: jsonErrorMessage(err.message) });
+    // Node's message quotes the bad input; only say where it broke.
+    process.stderr.write(`[agy-powerline] ${jsonErrorMessage(err.message)} on stdin\n`);
+    process.stdout.write("\x1b[31m[agy-powerline: invalid JSON]\x1b[0m\n");
+    process.exit(0);
+  }
 
-if (configError) {
-  logWarning("CONFIG_INVALID", {
-    message: /JSON/.test(configError) ? jsonErrorMessage(configError) : redact(configError),
-  });
-  process.stderr.write(`[agy-powerline] invalid statusline.config.json: ${configError}\n`);
-}
+  // The one payload value the log keeps: Antigravity's version number.
+  if (typeof data?.version === "string" && /^\d[\w.+-]{0,30}$/.test(data.version)) {
+    setLogContext({ antigravity: data.version });
+  }
 
-const started = Date.now();
-const output = renderStatusline(data, config, { exec, configError });
-const elapsed = Date.now() - started;
+  // The config lives next to this script. A copy anywhere other than the
+  // global install or AGY_POWERLINE_HOME (e.g. committed inside a repo) may be
+  // edited by someone else, so its exec widgets stay off.
+  const exec = isTrustedInstallDir(__dirname) ? "run" : "blocked";
 
-if (elapsed > SLOW_RENDER_MS) {
-  logWarning("SLOW_RENDER", { ms: elapsed, widgets: config.widgets.map((widget) => widget.id) });
-}
+  if (configError) {
+    logWarning("CONFIG_INVALID", {
+      message: /JSON/.test(configError) ? jsonErrorMessage(configError) : redact(configError),
+    });
+    process.stderr.write(`[agy-powerline] invalid statusline.config.json: ${configError}\n`);
+  }
 
-process.stdout.write(output);
+  const started = Date.now();
+  const output = renderStatusline(data, config, { exec, configError });
+  const elapsed = Date.now() - started;
+
+  if (elapsed > SLOW_RENDER_MS) {
+    logWarning("SLOW_RENDER", { ms: elapsed, widgets: config.widgets.map((widget) => widget.id) });
+  }
+
+  process.stdout.write(output);
+}