kaizen-agent 1.14.0 → 1.16.0

package/cli/state.test.ts

@@ -1,10 +1,10 @@
 // State module against a throwaway .kaizen/. Nothing here spawns a terminal: the
 // launch path is covered only up to the command it would run.
 import { test, expect, beforeAll, afterAll } from "bun:test";
-import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, rmSync, utimesSync, existsSync, readdirSync } from "node:fs";
+import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, rmSync, utimesSync, existsSync, readdirSync, realpathSync } from "node:fs";
 import { join, dirname } from "node:path";
 import { tmpdir } from "node:os";
-import { issueUrl, systemInfo, scrubHome, REPO_URL, home as realHome } from "./state.ts";
+import { issueUrl, systemInfo, scrubHome, REPO_URL, home as realHome, trustFolder } from "./state.ts";
 import {
   readRuns, readInbox, writeInbox, replaceIdea, abandonRun, allBacklog, backlog,
   statusOf, columnOf, parseItem, startedRuns, boardCards, readArchive, setArchived,
@@ -798,3 +798,22 @@ test("scrubHome hides a Windows home however the error spells it", () => {
   // Case matters off Windows: /home/Ann is not /home/ann.
   expect(scrubHome("/home/ann/a /home/Ann/b", ["/home/ann"], false)).toBe("~/a /home/Ann/b");
 });
+
+test("trustFolder: marks the repo root trusted in a temp config, keeps the rest, survives a bad file", () => {
+  const t = mkdtempSync(join(tmpdir(), "kz-trust-"));
+  const repo = join(t, "repo"), sub = join(repo, "sub"), plain = join(t, "plain");
+  mkdirSync(sub, { recursive: true }); mkdirSync(plain);
+  Bun.spawnSync(["git", "init", "-q", repo]);
+  const cfg = join(t, ".claude.json");
+  writeFileSync(cfg, JSON.stringify({ keep: 1, projects: { [plain]: { x: 2 } } }));
+  trustFolder(sub, cfg);
+  trustFolder(plain, cfg);
+  const d = JSON.parse(readFileSync(cfg, "utf8"));
+  expect(d.keep).toBe(1);
+  expect(d.projects[realpathSync(repo)]).toEqual({ hasTrustDialogAccepted: true });
+  expect(d.projects[plain]).toEqual({ x: 2, hasTrustDialogAccepted: true });
+  writeFileSync(cfg, "{bad");
+  trustFolder(plain, cfg);
+  expect(readFileSync(cfg, "utf8")).toBe("{bad");
+  rmSync(t, { recursive: true, force: true });
+});

package/cli/state.ts

@@ -1,7 +1,7 @@
 // Everything kaizen knows about a project's state, read from and written to the
 // `.kaizen/` directory. No terminal, no HTTP: the TUI (`dashboard.ts`) and the web
 // board (`web.ts`) both import this and draw it their own way.
-import { existsSync, readFileSync, readdirSync, appendFileSync, writeFileSync, mkdirSync, statSync, realpathSync, rmSync } from "node:fs";
+import { existsSync, readFileSync, readdirSync, appendFileSync, writeFileSync, mkdirSync, statSync, realpathSync, rmSync, renameSync } from "node:fs";
 import { join, dirname, win32 } from "node:path";
 import { homedir, arch, cpus, release, totalmem, version as osVersion } from "node:os";
 
@@ -1098,6 +1098,23 @@ export function sessionLaunch(projectDir: string, cmd: string, base: string[], p
   return { fullCmd, pidFile: join(sessionsDir(st), key + ".pid"), record };
 }
 
+// Claude Code asks "do you trust this folder?" the first time it opens one, and inside
+// a git repo it looks for the answer only up to the repo root. A launch from the board
+// is the user opening the project on purpose, so record yes for that root ahead of
+// time, in Claude's own config. Best effort: any failure just means Claude asks.
+export function trustFolder(dir: string, cfg = join(process.env.CLAUDE_CONFIG_DIR ?? homedir(), ".claude.json")) {
+  try {
+    const top = Bun.spawnSync(["git", "-C", dir, "rev-parse", "--show-toplevel"], { stderr: "ignore" });
+    const root = top.success ? top.stdout.toString().trim() || dir : dir;
+    const d = JSON.parse(readFileSync(cfg, "utf8"));
+    if (d.projects?.[root]?.hasTrustDialogAccepted) return;
+    d.projects ??= {};
+    d.projects[root] = { ...d.projects[root], hasTrustDialogAccepted: true };
+    writeFileSync(cfg + ".tmp", JSON.stringify(d, null, 2));
+    renameSync(cfg + ".tmp", cfg);
+  } catch { /* Claude asks as before */ }
+}
+
 // run: the run a decision is for. Without it, an idea starting a new run.
 // pick: the tool, model and yolo chosen for a new run; a decision takes the run's own
 // tool and model, and never yolo.
@@ -1107,6 +1124,7 @@ export function launchRun(it: Item, from: string, run?: string, pick: { agent?:
   remember(projectDir);
   const own = run && !pick.agent ? runAgent(join(projectDir, ".kaizen"), run) : null;
   const agent = detectDefaultAgent(projectDir, pick.agent ?? own?.cmd);
+  if (agent.cmd === "claude") trustFolder(projectDir);
   const agentBin = Bun.which(agent.cmd) ?? agent.cmd;
   const prompt = requestOf(it.where ? `/kaizen ${it.text} (${it.where})` : `/kaizen ${it.text}`, it.notes, from);
   const wanted = pick.model ?? (own?.cmd === agent.cmd ? own.model : null) ?? undefined;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kaizen-agent",
-  "version": "1.14.0",
+  "version": "1.16.0",
   "description": "Staged workflow for AI agents — code, writing, research, operations: plan, human approval, build, independent review, bounded fix loop.",
   "type": "module",
   "bin": {