kritya 0.8.2-beta → 0.8.3-beta

package/README.md

@@ -1,5 +1,9 @@
 # kritya
 
+[![CI](https://github.com/GenAICloudDevOps/Kritya/actions/workflows/ci.yml/badge.svg)](https://github.com/GenAICloudDevOps/Kritya/actions/workflows/ci.yml)
+[![npm version](https://img.shields.io/npm/v/kritya/beta)](https://www.npmjs.com/package/kritya)
+[![License](https://img.shields.io/github/license/GenAICloudDevOps/Kritya)](LICENSE)
+
 > ⚠️ **Beta** — APIs, flags, and behavior may still change between releases.
 
 Open source, [MIT licensed](LICENSE).

package/dist/lsp/client.js

@@ -47,6 +47,11 @@ export class LspClient {
                 windowsHide: true,
             });
             this.proc = proc;
+            // A write can still be in flight when dispose() kills the process —
+            // stdin then errors asynchronously (EPIPE), separately from proc's own
+            // "error" event below. Unhandled, that's an uncaught exception; on
+            // Windows the timing between kill() and pipe teardown makes it common.
+            proc.stdin.on("error", () => { });
             proc.on("error", (err) => {
                 this.markDead(err.code === "ENOENT"
                     ? `'${this.config.command}' is not installed (install: ${this.config.installHint})`

package/dist/trust/trust.js

@@ -149,10 +149,30 @@ function readGatedContent(workspace) {
         return null;
     return { allow, hooks, env, commands, mcp, memory, skills };
 }
+/**
+ * Redacts secret values from .env content while preserving variable names, so
+ * the trust prompt can show what's being loaded without printing raw
+ * credentials to the terminal (visible in scrollback, screen shares,
+ * recordings, or session logs).
+ */
+function redactEnvContent(env) {
+    return env
+        .split("\n")
+        .map((line) => {
+        const match = /^([A-Za-z_][A-Za-z0-9_]*)=(.*)$/.exec(line);
+        if (!match)
+            return line;
+        const [, key, value] = match;
+        return value.length ? `${key}=<redacted>` : line;
+    })
+        .join("\n");
+}
 /**
  * A human-readable rendering of ALL the gated content, for the trust prompt.
  * The user must be able to see everything they're approving — not just
- * settings.json but the .env contents and each custom command file.
+ * settings.json but the .env contents and each custom command file. .env
+ * values are redacted (see {@link redactEnvContent}) since they're often
+ * secrets that shouldn't be printed to the terminal.
  */
 export function describeGatedContent(workspace) {
     const { allow, hooks } = readSettingsGatedContent(workspace);
@@ -163,7 +183,7 @@ export function describeGatedContent(workspace) {
         sections.push(`.kritya/settings.json (allow rules / hooks):\n${JSON.stringify({ allow, hooks }, null, 2)}`);
     }
     if (env !== undefined) {
-        sections.push(`.env (loaded into the environment of every command):\n${env.trimEnd()}`);
+        sections.push(`.env (loaded into the environment of every command — values redacted):\n${redactEnvContent(env.trimEnd())}`);
     }
     if (commands) {
         const list = Object.entries(commands)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kritya",
-  "version": "0.8.2-beta",
+  "version": "0.8.3-beta",
   "description": "Kritya — a lean, provider-agnostic terminal coding agent (NVIDIA, OpenAI, OpenRouter, Groq, Ollama, and more)",
   "type": "module",
   "bin": {