The purpose-built option — honest status
What AgentBarista does today for Kiro
Straight answer, in two parts. The Kiro IDE is in AgentBarista's built-in agent
list, so you don't have to add it yourself — we key on the app itself rather than on a
process name, and that part needs no permission. But Kiro is a graphical editor, and for GUI apps we
deliberately do not trust CPU as proof of work: an editor window redraws, indexes and
animates at percentages that would clear any threshold we could set, so treating that as "the agent is
working" would mean holding your Mac awake for as long as Kiro is open — the battery-flattening
behavior the app exists to prevent. So the work signal has to come from text on screen, which needs
the macOS Accessibility permission.
Now the gap, and it's really two. Our status phrases for
Kiro have not been checked against a real Kiro screen — they're a reasonable guess at what an
agentic editor shows while a turn runs, not something we've watched happen. If Kiro words it
differently, we'd see the app running and treat it as idle. And the on-screen-text signal keys on
Kiro's exact bundle identifier, which we have not confirmed against an installed copy — Kiro isn't on
a Mac of ours. If that identifier is different from what we have, the work signal can't fire at all,
correct phrases or not. Seeing that Kiro is running should be unaffected either way — though that leans on the app's
folder name, which we haven't confirmed on a real Mac either. So don't rely
on us for an unattended overnight Kiro run yet — use one of the free options above for that, and treat our entry as unverified
rather than tested. Kiro CLI is a separate matter: it is not in our list at all, and
per the section above it isn't the plain-binary shape a keep-awake tool would expect on a Mac either.
The IDE is in the built-in list
Kiro ships in AgentBarista's agent catalog — no custom setup, and spotting that it's running needs no permission. We have not confirmed the identifiers it keys on against an installed copy — Kiro isn't on a Mac of ours.
The gaps we'd rather name
For a GUI editor we don't trust CPU, so the signal is on-screen text — and neither our phrase list (against a real Kiro screen) nor the bundle identifier it keys on (against an installed copy) has been checked. Unverified, not tested.
Has a safety net regardless
A battery cutoff, plus a one-click restore — it asks for your password once — for the rare case a crash leaves sleep disabled. True for every app AgentBarista watches, verified or not.
Kiro IDE (built-in list, verification pending)
Kiro CLI (not covered yet)
Claude Code
Cursor
Codex
Gemini CLI
Copilot CLI
OpenCode
Zed
Claude
ChatGPT
+ more
Worth saying plainly: free tools like Keepresso and adrafinil are
open source and genuinely good, and both read agent hooks, which is a more accurate signal than
guessing from CPU or reading the screen. If you're a solo dev running one agent, either is a reasonable
choice. Where we put our effort is being quick to support brand-new agents as they ship, and being
straight about which ones we've actually measured — which is why this page tells you Kiro isn't one of
them yet.
It runs on your Mac. AgentBarista never opens your files. To tell a working agent from a finished one it looks at process command lines and CPU, at the names and modification times of your agents' session files, and — only if you grant macOS Accessibility permission — at the on-screen text of the agent apps you enable and of the terminals we support. Two of those can contain your own words: a command line includes any prompt you pass on it, and on-screen text includes whatever is visible in that window, your code included. Both are matched against status phrases on your Mac and discarded on the spot: never stored, never sent. Nothing about your work leaves your Mac — no file contents, no code, no prompts, no file names, no activity data. Your stats and settings stay on this Mac. The app contains no analytics or telemetry of any kind. Its network calls are two: license validation, sent to our payment provider, Lemon Squeezy — activating a license sends your license key and your Mac’s name, and the routine check after that sends your license key and an anonymous instance id, nothing else — and an update check that fetches the new-version list from agentbarista.com, sends no personal data, and can be turned off in Settings.