ai-lens 0.8.108 → 0.8.109

package/.commithash

@@ -1 +1 @@
-3b3e261
+99dee20

package/CHANGELOG.md

@@ -2,6 +2,9 @@
 
 History of changes to the `ai-lens` CLI package on npm. New entries go on top. Format: `## X.Y.Z — YYYY-MM-DD`, followed by user-facing bullets.
 
+## 0.8.109 — 2026-06-22
+- fix: `init --yes` no longer captures every project or silently imports your local Claude history. It now scopes capture to the git root of the current folder (still `--projects all` for everything), and imports past history only when you pass `--import`.
+
 ## 0.8.108 — 2026-06-22
 - feat: `ai-lens init --mcp-only` registers just the MCP server in Claude Code and Cursor — for when you only need to read sessions from Claude, not capture hooks. It skips hook setup, authentication, and history import. The MCP scope now mirrors how AI Lens is installed: a local/project install registers the MCP at project scope, a global install at user scope (local wins if both are present); pass `--mcp-scope` to override.
 - change: `init --project-hooks` now also registers the MCP at project scope (Claude `local` + the project `.cursor/mcp.json`) to match where it writes hooks, instead of always registering globally. Pass `--mcp-scope` to override.

package/cli/init.js

@@ -35,6 +35,37 @@ function ask(question) {
   });
 }
 
+// Default `projects` scope for `init --yes` on a FRESH config: the git root of
+// cwd (the dev's work tree — the workspace when init is run there). Returns null
+// when cwd isn't inside a git repo (e.g. bot containers under /app) → capture-all,
+// which stays safe because the 90-day history import is separately gated to
+// opt-in (importMode).
+//
+// Uses the INNERMOST git root (`git rev-parse --show-toplevel`), NOT an outermost
+// walk-up: a `~/.git` dotfiles repo must never escalate the scope to $HOME (that
+// would re-introduce capture-all + a personal-history import). Without this,
+// `init --yes` left projects=null (= capture ALL).
+export function defaultProjectsScope(cwd = process.cwd()) {
+  try {
+    const root = execSync('git rev-parse --show-toplevel', {
+      cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'],
+    }).trim();
+    return root || null;
+  } catch {
+    return null; // not a git repo (or git unavailable) → keep capture-all
+  }
+}
+
+// History-import decision for `init`. Opt-in by design: `--import` runs it,
+// interactive prompts, and `--yes` SKIPS (it used to auto-run, which silently
+// imported the full 90-day ~/.claude history including personal projects).
+// `--no-import` is handled earlier (skips outright before the preview).
+export function importMode(flags = {}) {
+  if (flags.importHistory) return 'run';   // explicit opt-in (highest priority)
+  if (flags.yes) return 'skip';            // non-interactive: never auto-import
+  return 'prompt';                         // interactive: ask
+}
+
 function getJson(url) {
   return new Promise((resolve, reject) => {
     const parsed = new URL(url);
@@ -743,7 +774,11 @@ export default async function init() {
   if (flags.projects) {
     projects = flags.projects;
   } else if (auto) {
-    projects = currentProjects || projectHooksDefault;
+    // Fresh config under --yes: default to the git root of cwd (the work tree),
+    // not null. null = capture ALL projects. Stays null only when cwd isn't a
+    // git repo (bots/containers) — safe because the import is separately gated.
+    // `--projects all` is the explicit opt-in for capture-everything.
+    projects = currentProjects || projectHooksDefault || defaultProjectsScope();
   } else {
     const projectsDefault = currentProjects || projectHooksDefault || 'all';
     const projectsInput = await ask(
@@ -1406,7 +1441,8 @@ export default async function init() {
 
 /**
  * After a successful init, offer to import the developer's local Claude Code
- * history. `--no-import` skips; `--import` or `--yes` runs it without prompting;
+ * history. `--no-import` skips; `--import` runs it without prompting; `--yes`
+ * does NOT import (opt-in only — avoids silently pulling personal history);
  * otherwise asks interactively. No-op if there's no `~/.claude/projects`.
  */
 async function maybeOfferImportHistory(flags) {
@@ -1429,18 +1465,21 @@ async function maybeOfferImportHistory(flags) {
     ? `Found ${preview.count} Claude Code session${preview.count === 1 ? '' : 's'} from ${day(preview.earliest)} to ${day(preview.latest)} (last 90d).`
     : 'Local Claude Code history found.';
 
-  let run = flags.importHistory || flags.yes;
-  if (run) {
-    info(`  ${previewLine}`);
-  } else {
+  info(`  ${previewLine}`);
+  // History import is opt-IN (importMode): `--import` runs, interactive asks,
+  // `--yes` SKIPS. `--yes` used to auto-import (`|| flags.yes`), silently pulling
+  // the full 90-day ~/.claude history (incl. personal projects) on a fresh config.
+  const mode = importMode(flags);
+  let run = mode === 'run';
+  if (mode === 'prompt') {
     try {
-      const answer = (await ask(`${previewLine} Import now? (Y/n) `)).toLowerCase();
+      const answer = (await ask('  Import now? (Y/n) ')).toLowerCase();
       run = answer === '' || answer === 'y' || answer === 'yes';
     } catch { run = false; }
   }
   if (!run) {
     blank();
-    info('  Skipped import. Run `npx -y ai-lens import claude-code` anytime to bring it in.');
+    info('  Skipped local history import. Run `npx -y ai-lens import claude-code` (or pass `--import`) to bring it in.');
     return;
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-lens",
-  "version": "0.8.108",
+  "version": "0.8.109",
   "type": "module",
   "description": "Centralized session analytics for AI coding tools",
   "bin": {