kritya 0.8.23-beta → 0.8.24-beta

package/README.md

@@ -50,7 +50,8 @@ review → fix` for building something new end-to-end
   state
 - **Office docs & notebooks** — read/write Word, Excel, PowerPoint, PDF,
   Jupyter
-- **Headless/CI mode** — scriptable, no-TTY runs for automation
+  - **Headless/CI mode** — scriptable, no-TTY runs for automation
+  - **Privacy mode** — `--privacy`, `KRITYA_PRIVACY=1`, or `"privacyMode": true` disables transcript, audit, and telemetry persistence
 
 ## Setup
 

package/dist/agent/loop.js

@@ -78,6 +78,14 @@ export class Agent {
     audit;
     /** OpenTelemetry-shaped tracer for the tool loop. No-op unless enabled. */
     tracer = NOOP_TRACER;
+    /**
+     * Fired around compact() so the UI can show a live "compacting…" indicator
+     * for the summarization call, which otherwise runs silently until it
+     * either finishes or fails (see onToolEnd's "compact" record for the
+     * after-the-fact summary).
+     */
+    onCompactStart;
+    onCompactEnd;
     /** OTLP metrics recorder for tool/turn durations. No-op unless enabled. */
     meter = NOOP_METER;
     /**
@@ -266,6 +274,7 @@ export class Agent {
         this.kill.assertLive();
         const compactSpan = this.tracer.startSpan("agent.compact", { parent: this.currentTurnSpan });
         const tokensBefore = this.lastPromptTokens;
+        this.onCompactStart?.();
         try {
             const note = await this.doCompact(signal, compactSpan);
             compactSpan.setStatus("OK");
@@ -279,6 +288,7 @@ export class Agent {
             compactSpan.setAttribute("kritya.prompt_tokens_before", tokensBefore);
             compactSpan.setAttribute("kritya.prompt_tokens_after", this.lastPromptTokens);
             compactSpan.end();
+            this.onCompactEnd?.();
         }
     }
     async doCompact(signal, compactSpan) {
@@ -444,6 +454,7 @@ export class Agent {
                 onTextDelta: handlers.onTextDelta,
                 onReasoningDelta: handlers.onReasoningDelta,
                 onRetry: handlers.onRetry,
+                onFallback: handlers.onFallback,
             }, signal, { tracer: this.tracer, parent: this.currentTurnSpan });
             let result;
             try {

package/dist/agent/toolExecutor.js

@@ -1,5 +1,5 @@
 import { classifyDanger } from "../permissions/danger.js";
-import { acknowledgeUnsandboxedFallback, sandboxFallbackWarning } from "../shell/sandbox.js";
+import { acknowledgeUnsandboxedFallback, sandboxAvailable, sandboxFallbackWarning, } from "../shell/sandbox.js";
 import { isPlanningDocWrite, loadProjectState } from "./workflow.js";
 import { redactSecrets } from "../tools/secretScan.js";
 /** How much tool output to hand the UI (it shows a preview and expands on toggle). */
@@ -251,7 +251,21 @@ export class ToolExecutor {
                     diff = undefined;
                 }
             }
-            const decision = await handlers.requestPermission(tool.name, summary, diff, danger ?? undefined);
+            const permissionDetails = [
+                summary,
+                `workspace: ${host.ctx.workspace}`,
+                typeof args.path === "string" ? `affected path: ${args.path}` : undefined,
+                tool.name === "shell"
+                    ? `command: ${shellCommand}\nsandbox: ${host.ctx.sandboxMode === "off"
+                        ? "off"
+                        : sandboxAvailable()
+                            ? `${host.ctx.sandboxMode ?? "auto"} (available)`
+                            : `${host.ctx.sandboxMode ?? "auto"} (unavailable; unsandboxed)`}`
+                    : undefined,
+            ]
+                .filter(Boolean)
+                .join("\n");
+            const decision = await handlers.requestPermission(tool.name, permissionDetails, diff, danger ?? undefined);
             // A forced (danger) prompt does not grant a lasting allowance.
             if (danger === null)
                 host.permissions.record(tool.name, decision, args);

package/dist/audit/audit.js

@@ -3,7 +3,7 @@ import fs from "node:fs";
 import path from "node:path";
 import { CONFIG_DIR } from "../config/config.js";
 import { hardenWindowsDir } from "../config/winAcl.js";
-import { debugLog, warnUser } from "../config/debug.js";
+import { debugLog, warnPersistenceFailure } from "../config/debug.js";
 const GENESIS = "0".repeat(64);
 /**
  * Where all audit logs live, across every workspace (not scoped per-project).
@@ -108,7 +108,7 @@ export class AuditLog {
         }
         catch (err) {
             // best-effort
-            warnUser(`AuditLog.write(${this.file})`, err);
+            warnPersistenceFailure(`AuditLog.write(${this.file})`, err);
         }
     }
     ensureDir() {

package/dist/config/config.js

@@ -5,6 +5,13 @@ import { hardenWindowsDir } from "./winAcl.js";
 import { debugLog, warnUser } from "./debug.js";
 import { writeFileAtomicSync } from "../atomicWrite.js";
 import { assertJsonWithinLimits } from "./jsonSafety.js";
+/** KRITYA_PRIVACY wins over config.json; truthy values enable privacy mode. */
+export function privacyModeFor(config) {
+    const value = process.env.KRITYA_PRIVACY;
+    if (value !== undefined)
+        return /^(1|true|yes|on)$/i.test(value.trim());
+    return config.privacyMode === true;
+}
 /**
  * Bounds on `mcpServers` entries (from config.json or a workspace's
  * .mcp.json) — without these, an oversized or malicious server list could

package/dist/config/debug.js

@@ -47,3 +47,36 @@ export function warnUser(context, err) {
     }
     debugLog(context, err);
 }
+/** Contexts currently warning via warnPersistenceFailure, in the order first seen. */
+const persistenceWarnings = [];
+const persistenceListeners = new Set();
+function notifyPersistenceListeners() {
+    const snapshot = [...persistenceWarnings];
+    for (const listener of persistenceListeners)
+        listener(snapshot);
+}
+/** Current persistence-failure warnings (session/audit/telemetry writes that failed this process). */
+export function activePersistenceWarnings() {
+    return [...persistenceWarnings];
+}
+/** Subscribe to persistence-warning changes. Returns an unsubscribe function. */
+export function onPersistenceWarning(listener) {
+    persistenceListeners.add(listener);
+    return () => persistenceListeners.delete(listener);
+}
+/**
+ * Like warnUser, but for the specific best-effort writes whose failure means
+ * silent data loss (session transcripts, audit log, telemetry) — a stderr
+ * line alone is easy to miss since Ink's full-screen redraws can immediately
+ * paint over it. Recorded once per context, same dedup as warnUser, so the
+ * UI badge doesn't grow without bound from a write that fails every turn.
+ */
+export function warnPersistenceFailure(context, err) {
+    const isNewContext = !warnedContexts.has(context);
+    warnUser(context, err);
+    if (isNewContext) {
+        const message = err instanceof Error ? err.message : String(err);
+        persistenceWarnings.push({ context, message });
+        notifyPersistenceListeners();
+    }
+}

package/dist/engine.js

@@ -1,6 +1,6 @@
 import path from "node:path";
 import { Agent } from "./agent/loop.js";
-import { CONFIG_DIR, legacyGlobalModel, loadConfig, loadDotEnv, resolveProvider, } from "./config/config.js";
+import { CONFIG_DIR, legacyGlobalModel, loadConfig, loadDotEnv, privacyModeFor, resolveProvider, } from "./config/config.js";
 import { DEFAULT_MODEL, contextWindowFor } from "./config/models.js";
 import { PermissionManager } from "./permissions/permissions.js";
 import { loadRules } from "./permissions/rules.js";
@@ -35,6 +35,7 @@ export async function createEngineSession(dir, opts = {}) {
     if (trustWorkspace)
         loadDotEnv([path.join(workspace, ".env")]);
     const config = loadConfig();
+    const privacyMode = privacyModeFor(config);
     const provider = resolveProvider(config, opts.provider);
     if (!provider.apiKey) {
         throw new Error(`No API key found for provider "${provider.name}". Set it via env var, a .env file, or ~/.kritya/config.json.`);
@@ -49,9 +50,11 @@ export async function createEngineSession(dir, opts = {}) {
     const client = provider.name === "switchyard"
         ? await createSwitchyardClient(provider.apiKey, sampling)
         : new ProviderClient(provider.apiKey, provider.baseUrl, sampling);
-    const session = new SessionStore(workspace);
+    const session = new SessionStore(workspace, privacyMode);
     session.start([]);
-    const sessionMeter = createMeter(session.id, config.otel);
+    const sessionMeter = privacyMode
+        ? createMeter(session.id, "off")
+        : createMeter(session.id, config.otel);
     // The crash path is fire-and-forget best-effort by Node's own constraints
     // (a crash handler can't reliably await async work), so this uses the
     // synchronous flush() rather than flushAndWait().
@@ -79,8 +82,10 @@ export async function createEngineSession(dir, opts = {}) {
     if (trustWorkspace) {
         agent.hooks = new HookRunner(loadHooks(workspace, trustWorkspace), workspace);
     }
-    agent.audit = AuditLog.forSession(session.id, config.audit);
-    agent.tracer = createTracer(session.id, config.otel);
+    agent.audit = privacyMode ? undefined : AuditLog.forSession(session.id, config.audit);
+    agent.tracer = privacyMode
+        ? createTracer(session.id, "off")
+        : createTracer(session.id, config.otel);
     agent.meter = sessionMeter;
     if (agent.hooks)
         agent.hooks.tracer = agent.tracer;

package/dist/headless.js

@@ -1,7 +1,7 @@
 import path from "node:path";
 import { Agent } from "./agent/loop.js";
 import { KillSwitchError } from "./agent/killSwitch.js";
-import { CONFIG_DIR, legacyGlobalModel, listProviders, loadConfig, loadDotEnv, resolveProvider, } from "./config/config.js";
+import { CONFIG_DIR, legacyGlobalModel, listProviders, loadConfig, loadDotEnv, privacyModeFor, resolveProvider, } from "./config/config.js";
 import { DEFAULT_MODEL, contextWindowFor } from "./config/models.js";
 import { PermissionManager } from "./permissions/permissions.js";
 import { loadRules } from "./permissions/rules.js";
@@ -78,6 +78,7 @@ export async function runHeadless(args) {
     if (trustWorkspace)
         loadDotEnv([path.join(workspace, ".env")]);
     const config = loadConfig();
+    const privacyMode = args.privacy === true || privacyModeFor(config);
     const provider = resolveProvider(config, args.provider || undefined);
     if (!provider.apiKey) {
         return finish(args, startedAt, {
@@ -102,12 +103,16 @@ export async function runHeadless(args) {
     const client = provider.name === "switchyard"
         ? await createSwitchyardClient(provider.apiKey, sampling)
         : new ProviderClient(provider.apiKey, provider.baseUrl, sampling);
-    const session = new SessionStore(workspace);
-    const initialHistory = args.continue ? (SessionStore.loadLatest(workspace) ?? []) : [];
+    const session = new SessionStore(workspace, privacyMode);
+    const initialHistory = !privacyMode && args.continue ? (SessionStore.loadLatest(workspace) ?? []) : [];
     session.start(initialHistory);
-    const sessionAudit = AuditLog.forSession(session.id, config.audit);
-    const sessionTracer = createTracer(session.id, config.otel);
-    const sessionMeter = createMeter(session.id, config.otel);
+    const sessionAudit = privacyMode ? undefined : AuditLog.forSession(session.id, config.audit);
+    const sessionTracer = privacyMode
+        ? createTracer(session.id, "off")
+        : createTracer(session.id, config.otel);
+    const sessionMeter = privacyMode
+        ? createMeter(session.id, "off")
+        : createMeter(session.id, config.otel);
     // A crash here orphans MCP children and background processes onto a CI
     // runner, where nothing will ever reap them. No terminal to restore. The
     // crash path is fire-and-forget best-effort by Node's own constraints (a

package/dist/index.js

@@ -4,7 +4,7 @@ import fs from "node:fs";
 import path from "node:path";
 import { render } from "ink";
 import { Agent } from "./agent/loop.js";
-import { CONFIG_DIR, legacyGlobalModel, loadConfig, loadDotEnv, resolveProvider, } from "./config/config.js";
+import { CONFIG_DIR, legacyGlobalModel, loadConfig, loadDotEnv, privacyModeFor, resolveProvider, } from "./config/config.js";
 import { DEFAULT_MODEL, contextWindowFor } from "./config/models.js";
 import { PermissionManager } from "./permissions/permissions.js";
 import { loadRules } from "./permissions/rules.js";
@@ -65,6 +65,7 @@ Headless / CI mode (no terminal UI, exits with 0 on success / 1 on failure):
                       since CI often checks out untrusted branches/PRs)
   --timeout <seconds> hard wall-clock cap for the whole run (default 1800)
   --non-interactive   accepted for compatibility; implied by --prompt
+  --privacy           do not persist transcripts, audit logs, or telemetry
 
 Inspect the local audit log:
   kritya audit --list | --verify [file] | --show [file]
@@ -93,6 +94,7 @@ function parseArgs(argv) {
         allowAll: false,
         trust: false,
         timeoutSeconds: 1800,
+        privacy: false,
     };
     for (let i = 0; i < argv.length; i++) {
         const a = argv[i];
@@ -124,6 +126,8 @@ function parseArgs(argv) {
             args.trust = true;
         else if (a === "--timeout")
             args.timeoutSeconds = Number(argv[++i]) || args.timeoutSeconds;
+        else if (a === "--privacy")
+            args.privacy = true;
         else if (a === "--non-interactive") {
             // implied by --prompt; accepted so scripts can pass it explicitly
         }
@@ -176,6 +180,7 @@ if (args.prompt) {
         allowAll: args.allowAll,
         trust: args.trust,
         timeoutSeconds: args.timeoutSeconds,
+        privacy: args.privacy,
     }).then((code) => process.exit(code));
 }
 else {
@@ -261,6 +266,7 @@ async function showAiDisclosureNotice() {
 }
 async function main() {
     const config = loadConfig();
+    const privacyMode = args.privacy || privacyModeFor(config);
     if (!isAiDisclosureShown(workspace)) {
         await showAiDisclosureNotice();
         markAiDisclosureShown(workspace);
@@ -312,18 +318,22 @@ async function main() {
     let client = provider.name === "switchyard"
         ? await createSwitchyardClient(apiKey, sampling)
         : new ProviderClient(apiKey, provider.baseUrl, sampling);
-    const session = new SessionStore(workspace);
+    const session = new SessionStore(workspace, privacyMode);
     // Shared by the main agent and every subagent it spawns, so a write
     // subagent's commits and a read-only subagent's tool calls land in the same
     // audit trail and trace tree as the turn that spawned them — an agent that
     // edits the repo should never do so off the record.
-    const sessionAudit = AuditLog.forSession(session.id, config.audit);
-    const sessionTracer = createTracer(session.id, config.otel);
-    const sessionMeter = createMeter(session.id, config.otel);
-    const initialHistory = args.continue ? (SessionStore.loadLatest(workspace) ?? []) : [];
-    const initialTasks = args.continue ? SessionStore.loadLatestTasks(workspace) : [];
+    const sessionAudit = privacyMode ? undefined : AuditLog.forSession(session.id, config.audit);
+    const sessionTracer = privacyMode
+        ? createTracer(session.id, "off")
+        : createTracer(session.id, config.otel);
+    const sessionMeter = privacyMode
+        ? createMeter(session.id, "off")
+        : createMeter(session.id, config.otel);
+    const initialHistory = !privacyMode && args.continue ? (SessionStore.loadLatest(workspace) ?? []) : [];
+    const initialTasks = !privacyMode && args.continue ? SessionStore.loadLatestTasks(workspace) : [];
     session.start(initialHistory);
-    const resumeSessions = args.resume ? SessionStore.listSessions(workspace) : [];
+    const resumeSessions = !privacyMode && args.resume ? SessionStore.listSessions(workspace) : [];
     // Filled in once the app is mounted, below; the crash handler needs a way to
     // tear the UI down and is installed before there is a UI to tear down.
     const ui = {};
@@ -677,5 +687,5 @@ async function main() {
             permissionRef.current = fn;
         }, onRequestElicitationReady: (fn) => {
             elicitationRef.current = fn;
-        } }));
+        }, privacyMode: privacyMode }));
 }

package/dist/provider/switchyardClient.js

@@ -29,6 +29,7 @@ export class SwitchyardProviderClient extends ProviderClient {
             let lastErr = err;
             for (const fb of this.fallbacks) {
                 try {
+                    callbacks.onFallback?.("switchyard", fb.model);
                     return await fb.client.chat(fb.model, messages, tools, callbacks, signal, trace);
                 }
                 catch (fbErr) {

package/dist/session/store.js

@@ -4,7 +4,7 @@ import path from "node:path";
 import { writeFileAtomicSync } from "../atomicWrite.js";
 import { CONFIG_DIR } from "../config/config.js";
 import { hardenWindowsDir } from "../config/winAcl.js";
-import { debugLog, warnUser } from "../config/debug.js";
+import { debugLog, warnPersistenceFailure } from "../config/debug.js";
 /**
  * A session file loaded whole into memory has no upper bound otherwise —
  * `--continue` on a pathologically large transcript (corruption, a runaway
@@ -127,7 +127,7 @@ export class SessionStore {
             writeSessionFile(this.tasksFilePath(), JSON.stringify(tasks));
         }
         catch (err) {
-            warnUser(`SessionStore.saveTasks(${this.tasksFilePath()})`, err);
+            warnPersistenceFailure(`SessionStore.saveTasks(${this.tasksFilePath()})`, err);
         }
     }
     /** Loads the task checklist saved alongside a given session file, if any. */
@@ -178,7 +178,7 @@ export class SessionStore {
         }
         catch (err) {
             // Persistence is best-effort; never crash the session over it.
-            warnUser(`SessionStore.append(${this.file})`, err);
+            warnPersistenceFailure(`SessionStore.append(${this.file})`, err);
         }
     }
     /** Start over with a fresh session file (used by /clear). */
@@ -201,7 +201,7 @@ export class SessionStore {
         }
         catch (err) {
             // Persistence is best-effort; never crash the session over it.
-            warnUser(`SessionStore.overwrite(${this.file})`, err);
+            warnPersistenceFailure(`SessionStore.overwrite(${this.file})`, err);
         }
     }
     /**

package/dist/telemetry/metrics.js

@@ -1,4 +1,5 @@
 import { VERSION } from "../version.js";
+import { warnPersistenceFailure } from "../config/debug.js";
 import { encodeMetricsSnapshot, postOtlp, postOtlpAndWait, } from "./otlp.js";
 const NOOP_COUNTER = { add() { } };
 const NOOP_HISTOGRAM = { record() { } };
@@ -113,8 +114,10 @@ class RealMeter {
                 return;
             postOtlp(this.endpoint, "/v1/metrics", body, this.headers);
         }
-        catch {
-            // best-effort: metrics must never crash the process
+        catch (err) {
+            // best-effort: metrics must never crash the process, but a dropped
+            // export should still be visible to the user.
+            warnPersistenceFailure("metrics.flush", err);
         }
     }
     async flushAndWait() {
@@ -124,8 +127,8 @@ class RealMeter {
                 return;
             await postOtlpAndWait(this.endpoint, "/v1/metrics", body, this.headers);
         }
-        catch {
-            // best-effort: metrics must never crash the process
+        catch (err) {
+            warnPersistenceFailure("metrics.flushAndWait", err);
         }
     }
     stop() {

package/dist/telemetry/otlp.js

@@ -1,4 +1,4 @@
-import { warnUser } from "../config/debug.js";
+import { warnPersistenceFailure } from "../config/debug.js";
 import { assertSafeUrl, pinnedDispatcherAllowLoopback, } from "../net/urlSafety.js";
 function toAnyValue(value) {
     if (typeof value === "string")
@@ -109,10 +109,10 @@ export function postOtlp(endpoint, path, body, headers) {
             body: JSON.stringify(body),
             dispatcher: pinnedDispatcherAllowLoopback,
         };
-        fetch(url.href, init).catch((err) => warnUser(`postOtlp(${path})`, err));
+        fetch(url.href, init).catch((err) => warnPersistenceFailure(`postOtlp(${path})`, err));
     }
     catch (err) {
-        warnUser(`postOtlp(${path})`, err);
+        warnPersistenceFailure(`postOtlp(${path})`, err);
     }
 }
 /**
@@ -134,6 +134,6 @@ export async function postOtlpAndWait(endpoint, path, body, headers) {
         await fetch(url.href, init);
     }
     catch (err) {
-        warnUser(`postOtlpAndWait(${path})`, err);
+        warnPersistenceFailure(`postOtlpAndWait(${path})`, err);
     }
 }

package/dist/telemetry/tracer.js

@@ -3,7 +3,7 @@ import fs from "node:fs";
 import path from "node:path";
 import { CONFIG_DIR } from "../config/config.js";
 import { hardenWindowsDir } from "../config/winAcl.js";
-import { debugLog, warnUser } from "../config/debug.js";
+import { debugLog, warnPersistenceFailure } from "../config/debug.js";
 import { VERSION } from "../version.js";
 import { encodeSpan, postOtlp } from "./otlp.js";
 function nowUnixNano() {
@@ -158,7 +158,7 @@ function fileSink(file) {
         }
         catch (err) {
             // best-effort: telemetry must never crash a turn
-            warnUser(`tracer.fileSink(${file})`, err);
+            warnPersistenceFailure(`tracer.fileSink(${file})`, err);
         }
     };
 }

package/dist/ui/App.js

@@ -30,7 +30,7 @@ const IMAGE_RE = /\.(png|jpe?g|gif|webp|bmp)$/i;
 // Erase screen + scrollback, then home the cursor (same sequence Ink itself
 // uses for its own "content taller than the terminal" clear path).
 const CLEAR_TERMINAL = "\x1b[2J\x1b[3J\x1b[H";
-export function App({ agent, workspace, modelRef, providerRef, config, resumedCount, initialTasks, undoStack, uiBridge, resumeSessions, customCommands = [], mcpToolCount = 0, onSwitchClient, onRequestPermissionReady, onRequestElicitationReady, }) {
+export function App({ agent, workspace, modelRef, providerRef, config, resumedCount, initialTasks, undoStack, uiBridge, resumeSessions, customCommands = [], mcpToolCount = 0, onSwitchClient, onRequestPermissionReady, onRequestElicitationReady, privacyMode, }) {
     const { exit } = useApp();
     const { stdout } = useStdout();
     const [input, setInput] = useState("");
@@ -125,7 +125,7 @@ export function App({ agent, workspace, modelRef, providerRef, config, resumedCo
             .catch(() => { });
     }, [workspace]);
     useEffect(refreshFileList, [refreshFileList]);
-    const { items, addItem, phase, setPhase, stream, thinking, activity, setActivity, runningPhase, setRunningPhase, workflow, refreshWorkflow, permission, elicitation, inFlight, model, provider, servedModel, totalUsage, totalCost, tasks, setTasks, ctxPct, setCtxPct, tokenBudget, budgetPct, budgetUsed, budgetStopped, resetBudget, setBudgetLimit, branch, planMode, setPlanMode, dryRunMode, killed, killReason, engageKill, releaseKill, acceptEdits, setAcceptEdits, autoApprovedCount, cycleMode, onAcceptEditsConfirm, abortRef, setModelEverywhere, setProviderEverywhere, costReport, runAgent, runWebSearch, onPermissionDecision, onElicitationDecision, onResumeSelect, requestPermission, requestElicitation, } = useAgent({
+    const { items, addItem, phase, setPhase, stream, thinking, activity, setActivity, runningPhase, setRunningPhase, workflow, refreshWorkflow, permission, elicitation, inFlight, model, provider, servedModel, totalUsage, totalCost, tasks, setTasks, ctxPct, setCtxPct, tokenBudget, budgetPct, budgetUsed, budgetStopped, resetBudget, setBudgetLimit, branch, planMode, setPlanMode, dryRunMode, killed, killReason, engageKill, releaseKill, acceptEdits, setAcceptEdits, autoApprovedCount, cycleMode, onAcceptEditsConfirm, abortRef, setModelEverywhere, setProviderEverywhere, costReport, runAgent, runWebSearch, onPermissionDecision, onElicitationDecision, onResumeSelect, requestPermission, requestElicitation, persistenceWarningCount, } = useAgent({
         agent,
         workspace,
         modelRef,
@@ -195,6 +195,7 @@ export function App({ agent, workspace, modelRef, providerRef, config, resumedCo
             return;
         }
         if (key.escape && phase === "working") {
+            setActivity("cancelling…");
             abortRef.current?.abort();
         }
         // Ctrl+O toggles showing full tool output.
@@ -444,7 +445,7 @@ export function App({ agent, workspace, modelRef, providerRef, config, resumedCo
                                     setInput((prev) => (isCtrlEcho(prev, v) ? prev : v.replace(/\t/g, "")));
                                     setCmdIndex(0);
                                     setFileIndex(0);
-                                }, onSubmit: handleSubmit }, inputKey)] }), suggestions.length > 0 && (_jsxs(Box, { flexDirection: "column", paddingLeft: 2, children: [suggestions.map((c, i) => (_jsxs(Text, { color: i === selectedCmd ? "cyan" : undefined, children: [i === selectedCmd ? "❯ " : "  ", _jsx(Text, { bold: i === selectedCmd, children: c.name }), _jsxs(Text, { dimColor: true, children: [" \u2014 ", c.description] })] }, c.name))), _jsx(Text, { dimColor: true, children: "\u2191\u2193 select \u00B7 Tab/Enter select \u00B7 Enter again to run" })] })), fileSuggestions.length > 0 && (_jsxs(Box, { flexDirection: "column", paddingLeft: 2, children: [fileSuggestions.map((f, i) => (_jsxs(Text, { color: i === selectedFile ? "cyan" : undefined, children: [i === selectedFile ? "❯ " : "  ", f] }, f))), _jsx(Text, { dimColor: true, children: "\u2191\u2193 select \u00B7 Tab/Enter attach file" })] }))] })), _jsx(Box, { children: _jsx(StatusLine, { killed: killed, killReason: killReason, dryRunMode: dryRunMode, planMode: planMode, acceptEdits: acceptEdits, autoApprovedCount: autoApprovedCount, model: servedModel && servedModel !== model
+                                }, onSubmit: handleSubmit }, inputKey)] }), suggestions.length > 0 && (_jsxs(Box, { flexDirection: "column", paddingLeft: 2, children: [suggestions.map((c, i) => (_jsxs(Text, { color: i === selectedCmd ? "cyan" : undefined, children: [i === selectedCmd ? "❯ " : "  ", _jsx(Text, { bold: i === selectedCmd, children: c.name }), _jsxs(Text, { dimColor: true, children: [" \u2014 ", c.description] })] }, c.name))), _jsx(Text, { dimColor: true, children: "\u2191\u2193 select \u00B7 Tab/Enter select \u00B7 Enter again to run" })] })), fileSuggestions.length > 0 && (_jsxs(Box, { flexDirection: "column", paddingLeft: 2, children: [fileSuggestions.map((f, i) => (_jsxs(Text, { color: i === selectedFile ? "cyan" : undefined, children: [i === selectedFile ? "❯ " : "  ", f] }, f))), _jsx(Text, { dimColor: true, children: "\u2191\u2193 select \u00B7 Tab/Enter attach file" })] }))] })), _jsx(Box, { children: _jsx(StatusLine, { killed: killed, killReason: killReason, dryRunMode: dryRunMode, planMode: planMode, acceptEdits: acceptEdits, autoApprovedCount: autoApprovedCount, provider: provider, model: servedModel && servedModel !== model
                         ? `${model}-${modelDisplaySlug(servedModel)}`
-                        : model, workflow: workflow, branch: branch, tasks: tasks, ctxPct: ctxPct, budgetPct: budgetPct, budgetStopped: budgetStopped, phase: phase, elapsed: elapsed, totalUsage: totalUsage, totalCost: totalCost, verbose: verbose, workspace: workspace, sandboxActive: (config.sandboxExec ?? defaultSandboxMode()) !== "off" && sandboxAvailable() }) })] }));
+                        : model, workflow: workflow, branch: branch, tasks: tasks, ctxPct: ctxPct, budgetPct: budgetPct, budgetStopped: budgetStopped, phase: phase, elapsed: elapsed, totalUsage: totalUsage, totalCost: totalCost, verbose: verbose, workspace: workspace, sandboxActive: (config.sandboxExec ?? defaultSandboxMode()) !== "off" && sandboxAvailable(), persistenceWarningCount: persistenceWarningCount, privacyMode: privacyMode }) })] }));
 }

package/dist/ui/StatusLine.js

@@ -1,11 +1,16 @@
 import { jsxs as _jsxs, jsx as _jsx } from "react/jsx-runtime";
 import { Text } from "ink";
-import path from "node:path";
 /** The single dim status bar pinned to the bottom of the screen. */
-export function StatusLine({ killed, killReason, dryRunMode, planMode, acceptEdits, autoApprovedCount, model, workflow, branch, tasks, ctxPct, budgetPct, budgetStopped, phase, elapsed, totalUsage, totalCost, verbose, workspace, sandboxActive, }) {
-    return (_jsxs(Text, { dimColor: true, children: [killed ? (_jsxs(Text, { bold: true, color: "red", children: ["\u26D4 KILLED", killReason ? ` (${killReason})` : "", " \u00B7", " "] })) : (""), dryRunMode ? (_jsx(Text, { color: "cyan", children: "dry-run \u00B7 " })) : planMode ? (_jsx(Text, { color: "cyan", children: "plan \u00B7 " })) : acceptEdits ? (_jsxs(Text, { color: "green", children: ["accept edits (", autoApprovedCount, " auto-approved) \u00B7 "] })) : (""), model, _jsxs(Text, { color: sandboxActive ? "green" : "red", children: [" ", "\u00B7 ", sandboxActive ? "🔒 sandbox:active" : "🔓 sandbox:inactive"] }), workflow ? (_jsxs(Text, { color: "magenta", children: [" ", "\u00B7 \u2691 ", workflow.name, ":", workflow.phase] })) : (""), branch ? ` · ⎇ ${branch}` : "", tasks.length > 0
+export function StatusLine({ killed, killReason, dryRunMode, planMode, acceptEdits, autoApprovedCount, provider, model, workflow, branch, tasks, ctxPct, budgetPct, budgetStopped, phase, elapsed, totalUsage, totalCost, verbose, workspace, sandboxActive, persistenceWarningCount, privacyMode, }) {
+    return (_jsxs(Text, { dimColor: true, children: [killed ? (_jsxs(Text, { bold: true, color: "red", children: ["\u26D4 KILLED", killReason ? ` (${killReason})` : "", " \u00B7", " "] })) : (""), _jsxs(Text, { color: dryRunMode || planMode ? "cyan" : acceptEdits ? "green" : undefined, children: ["mode:", " ", dryRunMode
+                        ? "dry-run"
+                        : planMode
+                            ? "plan"
+                            : acceptEdits
+                                ? `accept-edits (${autoApprovedCount} auto)`
+                                : "default", " · "] }), provider, "/", model, _jsxs(Text, { color: sandboxActive ? "green" : "red", children: [" ", "\u00B7 ", sandboxActive ? "🔒 sandbox:active" : "🔓 sandbox:inactive"] }), workflow ? (_jsxs(Text, { color: "magenta", children: [" ", "\u00B7 \u2691 ", workflow.name, ":", workflow.phase] })) : (""), branch ? ` · ⎇ ${branch}` : "", tasks.length > 0
                 ? ` · tasks ${tasks.filter((t) => t.status === "done").length}/${tasks.length}`
-                : "", ctxPct > 0 ? ` · ctx ${ctxPct}%` : "", budgetPct > 0 ? (_jsxs(Text, { color: budgetStopped ? "red" : budgetPct >= 80 ? "yellow" : undefined, children: [" ", "\u00B7 budget ", budgetPct, "%"] })) : (""), phase === "working" && elapsed > 0 ? ` · ${elapsed}s` : "", " \u00B7", " ", totalUsage.estimated ? "~" : "", totalUsage.promptTokens.toLocaleString(), " in", (totalUsage.cachedPromptTokens ?? 0) > 0
+                : "", ctxPct > 0 ? ` · ctx ${ctxPct}%` : "", budgetPct > 0 ? (_jsxs(Text, { color: budgetStopped ? "red" : budgetPct >= 80 ? "yellow" : undefined, children: [" ", "\u00B7 budget ", budgetPct, "%"] })) : (""), phase === "working" && elapsed > 0 ? ` · ${elapsed}s` : "", " \u00B7", " ", totalUsage.estimated ? "~" : "", "tokens: ", totalUsage.promptTokens.toLocaleString(), " in", (totalUsage.cachedPromptTokens ?? 0) > 0
                 ? ` (${Math.round(((totalUsage.cachedPromptTokens ?? 0) / totalUsage.promptTokens) * 100)}% cached)`
-                : "", " ", "/ ", totalUsage.completionTokens.toLocaleString(), " out", totalCost > 0 ? ` · $${totalCost.toFixed(4)}` : "", verbose ? " · verbose" : "", " \u00B7 ", path.basename(workspace)] }));
+                : "", " ", "/ ", totalUsage.completionTokens.toLocaleString(), " out", totalCost > 0 ? ` · $${totalCost.toFixed(4)}` : "", persistenceWarningCount > 0 ? (_jsxs(Text, { color: "yellow", children: [" \u00B7 \u26A0 persistence warnings: ", persistenceWarningCount] })) : (""), privacyMode ? _jsx(Text, { color: "cyan", children: " \u00B7 privacy:on" }) : "", verbose ? " · verbose" : "", " \u00B7 workspace: ", workspace] }));
 }

package/dist/ui/useAgent.js

@@ -12,6 +12,18 @@ import { tavilySearch } from "../tools/webSearch.js";
 import { killActiveNotice, useKillSwitch } from "./useKillSwitch.js";
 import { useUsageBudget } from "./useUsageBudget.js";
 import { useSessionResume } from "./useSessionResume.js";
+import { activePersistenceWarnings, onPersistenceWarning } from "../config/debug.js";
+function initialToolStatus(name) {
+    if (name.startsWith("mcp_"))
+        return "contacting MCP server…";
+    if (name.startsWith("lsp_"))
+        return "querying language server…";
+    if (name.includes("document"))
+        return "processing document…";
+    if (name.includes("notebook"))
+        return "processing notebook…";
+    return undefined;
+}
 /**
  * Owns everything tied to running agent turns: the transcript, streaming and
  * permission state, usage/cost tracking, and session resume. Input handling
@@ -44,6 +56,21 @@ export function useAgent({ agent, workspace, modelRef, providerRef, config, uiBr
     const [stream, setStream] = useState("");
     const [thinking, setThinking] = useState(false);
     const [activity, setActivity] = useState(null);
+    const [persistenceWarningCount, setPersistenceWarningCount] = useState(() => activePersistenceWarnings().length);
+    useEffect(() => onPersistenceWarning((warnings) => setPersistenceWarningCount(warnings.length)), []);
+    /**
+     * Compaction calls the model directly and can take a while, so without this
+     * the spinner would sit frozen on whatever it showed before compaction
+     * started until onToolEnd's after-the-fact "compact" record appears.
+     */
+    useEffect(() => {
+        agent.onCompactStart = () => setActivity("compacting context…");
+        agent.onCompactEnd = () => setActivity(null);
+        return () => {
+            agent.onCompactStart = undefined;
+            agent.onCompactEnd = undefined;
+        };
+    }, [agent]);
     /**
      * Which workflow phase the *current turn* is running. Turn-scoped and cleared
      * when the turn ends, unlike `workflow` below — `activity` can't carry this,
@@ -355,6 +382,7 @@ export function useAgent({ agent, workspace, modelRef, providerRef, config, uiBr
             return;
         }
         setPhase("working");
+        setActivity(`Calling ${provider}/${model}…`);
         const ac = new AbortController();
         abortRef.current = ac;
         setInFlight([]);
@@ -372,7 +400,10 @@ export function useAgent({ agent, workspace, modelRef, providerRef, config, uiBr
                 },
                 onToolStart: (id, name, summary) => {
                     setStream("");
-                    setInFlight((prev) => [...prev, { id, name, summary }]);
+                    setInFlight((prev) => [
+                        ...prev,
+                        { id, name, summary, status: initialToolStatus(name) },
+                    ]);
                 },
                 onToolEnd: (id, name, summary, preview, isError, resultSummary) => {
                     setInFlight((prev) => prev.filter((t) => t.id !== id));
@@ -397,6 +428,10 @@ export function useAgent({ agent, workspace, modelRef, providerRef, config, uiBr
                     setStream("");
                     setActivity(`Provider error${status ? ` (${status})` : ""} — retrying (attempt ${attempt})…`);
                 },
+                onFallback: (from, to) => {
+                    setStream("");
+                    setActivity(`${from} unavailable — trying fallback model ${to}…`);
+                },
                 onUsage: (usage) => {
                     if (usage.servedModel)
                         setServedModel(usage.servedModel);
@@ -498,6 +533,7 @@ export function useAgent({ agent, workspace, modelRef, providerRef, config, uiBr
         totalCost,
         tasks,
         setTasks,
+        persistenceWarningCount,
         ctxPct,
         setCtxPct,
         tokenBudget,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kritya",
-  "version": "0.8.23-beta",
+  "version": "0.8.24-beta",
   "description": "Kritya — a lean, provider-agnostic terminal coding agent (NVIDIA, OpenAI, OpenRouter, Groq, Ollama, and more)",
   "type": "module",
   "publishConfig": {