kaizen-agent 1.9.2 → 1.9.4

package/cli/notes.ts

@@ -1,9 +1,9 @@
 // The notebook's files: plain markdown under <state>/notes/, folders and all, so any
 // editor (Obsidian included) can open the same folder. Every name that arrives from
 // the page goes through safeName before it becomes a path.
-import { existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, rmdirSync, statSync, writeFileSync } from "node:fs";
+import { existsSync, mkdirSync, readdirSync, realpathSync, renameSync, rmdirSync, statSync, writeFileSync } from "node:fs";
 import { join, dirname, resolve, sep } from "node:path";
-import { boardCards, reviewFindings } from "./state.ts";
+import { boardCards, reviewFindings, readText } from "./state.ts";
 import { wikilinks, boardLink, resolveRun } from "../web/notes-lib.ts";
 
 export type Note = { name: string; mtime: number; text: string };
@@ -49,7 +49,7 @@ export function listNotes(state: string): Note[] {
       try { st = statSync(p); } catch { continue; }
       if (st.isDirectory()) walk(p, prefix + n + "/");
       else if (n.toLowerCase().endsWith(".md") && safeName(prefix + n) === prefix + n.slice(0, -3)) {
-        try { out.push({ name: prefix + n.slice(0, -3), mtime: st.mtimeMs, text: readFileSync(p, "utf8") }); } catch { /* vanished */ }
+        try { out.push({ name: prefix + n.slice(0, -3), mtime: st.mtimeMs, text: readText(p) }); } catch { /* vanished */ }
       }
     }
   };
@@ -65,7 +65,7 @@ export function saveNote(state: string, name: unknown, text: string, base: numbe
   if (!t) return { ok: false, why: "bad name" };
   if (existsSync(t.file)) {
     const now = statSync(t.file).mtimeMs;
-    if (now !== base) return { ok: false, why: "conflict", text: readFileSync(t.file, "utf8"), mtime: now };
+    if (now !== base) return { ok: false, why: "conflict", text: readText(t.file), mtime: now };
   } else if (base) return { ok: false, why: "conflict", text: "", mtime: 0 };
   mkdirSync(dirname(t.file), { recursive: true });
   writeFileSync(t.file, text);
@@ -116,7 +116,7 @@ export function boardIndex(state: string) {
   const cards = boardCards([state], Date.now());
   const backlog = (id: string) => {
     let text = "";
-    try { text = readFileSync(join(state, "runs", id, "06-backlog.md"), "utf8"); } catch { /* none */ }
+    try { text = readText(join(state, "runs", id, "06-backlog.md")); } catch { /* none */ }
     return [...text.matchAll(/^\s*-\s*(open|done|rejected):\s*(.*)$/gm)].map((m, i) => ({ n: i + 1, status: m[1]!, text: m[2]!.trim() }));
   };
   return {

package/cli/settings.ts

@@ -1,8 +1,9 @@
 // Full-screen settings browser for .kaizen/config.yml.
 // Arrow keys move and change; every change is written straight to the file.
-import { existsSync, readFileSync, writeFileSync, copyFileSync, mkdirSync } from "node:fs";
+import { existsSync, writeFileSync, copyFileSync, mkdirSync } from "node:fs";
 import { join, dirname } from "node:path";
 import { homedir } from "node:os";
+import { readText } from "./state.ts";
 
 // `text` is a value typed rather than chosen: a path. It has no values to cycle.
 type Setting = { key: string; label: string; group: string; values: string[]; help: string; text?: boolean };
@@ -123,8 +124,8 @@ const SETTINGS: Setting[] = [
 // one place decides what a setting is called, what it may be, and how it is saved.
 export function listSettings(repoRoot: string) {
   const file = locate();
-  const defaults = readFileSync(join(repoRoot, "skills/kaizen/config.default.yml"), "utf8");
-  const text = existsSync(file) ? readFileSync(file, "utf8") : "";
+  const defaults = readText(join(repoRoot, "skills/kaizen/config.default.yml"));
+  const text = existsSync(file) ? readText(file) : "";
   const preset = detectPreset(text, defaults);
   return {
     file: tilde(file),
@@ -141,8 +142,8 @@ export function setSetting(repoRoot: string, key: string, value: string) {
   const file = locate();
   const defaultsPath = join(repoRoot, "skills/kaizen/config.default.yml");
   if (!existsSync(file)) { mkdirSync(dirname(file), { recursive: true }); copyFileSync(defaultsPath, file); }
-  const defaults = readFileSync(defaultsPath, "utf8");
-  const text = readFileSync(file, "utf8");
+  const defaults = readText(defaultsPath);
+  const text = readText(file);
   let updated: string;
   if (key === "preset") {
     if (value === "custom") return { error: "custom is what any other change makes" };
@@ -180,12 +181,12 @@ export async function settings(repoRoot: string, standalone = true) {
   const { stdin, stdout } = process;
   if (!stdin.isTTY) { console.log(`Settings live in ${file}`); return; }
 
-  const defaults = readFileSync(join(repoRoot, "skills/kaizen/config.default.yml"), "utf8");
+  const defaults = readText(join(repoRoot, "skills/kaizen/config.default.yml"));
   let active = 0, saved = "";
   // Screen line -> setting index, rebuilt on every draw; the mouse clicks by line.
   let rowAt: number[] = [];
   const draw = () => {
-    const text = readFileSync(file, "utf8");
+    const text = readText(file);
     const currentPreset = detectPreset(text, defaults);
     // Booleans as a checkbox, numeric scales as a level bar; the file still holds the words.
     const show = (s: Setting, v: string) => {
@@ -227,7 +228,7 @@ export async function settings(repoRoot: string, standalone = true) {
   };
 
   stdout.write("\x1b[?1049h\x1b[?25l");      // alternate screen, hide cursor
-  const mouse = /^\s*ui:\s*\n(?:\s*#.*\n)*\s*mouse:\s*(\S+)/m.exec(readFileSync(file, "utf8"));
+  const mouse = /^\s*ui:\s*\n(?:\s*#.*\n)*\s*mouse:\s*(\S+)/m.exec(readText(file));
   const mouseOn = mouse?.[1] === "true";
   if (mouseOn) { stdout.write("\x1b[?1000h\x1b[?1006h"); mouseArmed = true; }
   stdin.setRawMode(true);
@@ -238,7 +239,7 @@ export async function settings(repoRoot: string, standalone = true) {
     const s = SETTINGS[active]!;
     const wasMouse = s.key === "ui.mouse";
     if (s.text) { saved = c.dim(`type ${s.key} in the board's settings, or in ${tilde(file)}`); return; }
-    const text = readFileSync(file, "utf8");
+    const text = readText(file);
     if (s.key === "preset") {
       const current = detectPreset(text, defaults);
       const presets: PresetName[] = ["low", "medium", "ultra"];

package/cli/state.test.ts

@@ -466,3 +466,12 @@ test("notifier: only a run seen before, saying something new, and not a done the
   expect(notifier.toString()).toStartWith("function notifier(");
   expect(readFileSync(join(import.meta.dir, "..", "web", "board.html"), "utf8")).toContain("(/*notifier*/)()");
 });
+
+test("files written by Windows PowerShell, with a byte order mark, still read: the run shows, the first idea is an idea", () => {
+  const st = join(mkdtempSync(join(tmpdir(), "kaizen-bom-")), ".kaizen");
+  mkdirSync(join(st, "runs", "r1"), { recursive: true });
+  writeFileSync(join(st, "runs", "r1", "state.json"), "" + JSON.stringify({ id: "r1", stage: "plan", awaiting: "approvals.plan" }));
+  writeFileSync(join(st, "inbox.md"), "- open: first idea\n");
+  expect(readRuns(st).map((r) => [r.id, r.stage])).toEqual([["r1", "plan"]]);
+  expect(readInbox(st)).toEqual([{ status: "open", text: "first idea" }]);
+});

package/cli/state.ts

@@ -25,7 +25,7 @@ export function detectDefaultAgent(projectDir: string): { name: string; cmd: str
     ? join(projectDir, ".kaizen", "config.yml")
     : join(home, ".kaizen", "config.yml");
   if (existsSync(cfgFile)) {
-    const text = readFileSync(cfgFile, "utf8");
+    const text = readText(cfgFile);
     const m = /^\s*agent:\s*\n\s*default:\s*(\S+)/m.exec(text) || /^\s*agent\.default:\s*(\S+)/m.exec(text);
     if (m && m[1] && m[1] !== "auto") {
       const found = KNOWN_AGENTS.find((a) => a.cmd === m[1] || a.name.toLowerCase() === m[1].toLowerCase());
@@ -59,7 +59,7 @@ const EFFORT_FLAGS: Record<string, (e: string) => string[]> = {
 export function agentFlags(projectDir: string, cmd: string, configText?: string): string[] {
   if (configText === undefined) {
     const f = [join(projectDir, ".kaizen", "config.yml"), join(home, ".kaizen", "config.yml")].find(existsSync);
-    configText = f ? readFileSync(f, "utf8") : "";
+    configText = f ? readText(f) : "";
   }
   // ponytail: regex over the yaml, like detectDefaultAgent; a parser when a third key needs it
   const block = new RegExp(`^agent:\\n(?:[ \\t]+.*\\n)*?[ \\t]+${cmd}:[ \\t]*(\\{[^}]*\\}|\\n(?:[ \\t]+[a-z]+:.*\\n?)+)`, "m").exec(configText);
@@ -77,6 +77,11 @@ export function agentFlags(projectDir: string, cmd: string, configText?: string)
 const shq = (a: string) => `'${a.replace(/'/g, `'\\''`)}'`;
 
 // Bun.which reads the PATH the process started with unless handed the current one.
+// Windows PowerShell 5.1 writes `Set-Content -Encoding utf8` with a byte order mark,
+// and agents on Windows write run files that way. JSON.parse refuses a leading BOM
+// (the run vanished from the board) and it hides a first line from every ^ regex.
+export const readText = (file: string) => readFileSync(file, "utf8").replace(/^\uFEFF/, "");
+
 const onPath = (bin: string) => Bun.which(bin, { PATH: process.env.PATH });
 
 // Windows' own programs by full path: a board started from the shortcut or a
@@ -93,7 +98,7 @@ function answers(cmd: string[]): boolean {
   const bin = onPath(cmd[0]);
   if (!bin) return false;
   try {
-    return Bun.spawnSync([bin, ...cmd.slice(1)], { stdin: "ignore", stdout: "ignore", stderr: "ignore", timeout: 2000 }).exitCode === 0;
+    return Bun.spawnSync([bin, ...cmd.slice(1)], { stdin: "ignore", stdout: "ignore", stderr: "ignore", timeout: 2000, windowsHide: true }).exitCode === 0;
   } catch {
     return false;
   }
@@ -211,7 +216,7 @@ export function searchRoots(extra: string[] = []): string[] {
 
 export function knownProjects(): string[] {
   if (!existsSync(REGISTRY)) return [];
-  return readFileSync(REGISTRY, "utf8").split("\n")
+  return readText(REGISTRY).split("\n")
     .map((l) => l.trim())
     .filter((l) => l && !l.startsWith("#"))
     .map(nativePath)
@@ -289,7 +294,7 @@ export function readRuns(state: string): Run[] {
   return readdirSync(dir).sort().flatMap((id) => {
     try {
       const file = join(dir, id, "state.json");
-      const s = JSON.parse(readFileSync(file, "utf8"));
+      const s = JSON.parse(readText(file));
       // When the run last moved. Kaizen records no liveness signal, so the file's
       // own mtime is the only evidence that anything is still working on it.
       let moved = 0;
@@ -310,7 +315,7 @@ export function pruneRuns(state: string, keep: number, apply = false): { id: str
     const open = r.stage === "done" ? readBacklog(join(dir, "06-backlog.md")) : [];
     if (apply) {
       const orphanage = join(state, "backlog.md");
-      const gap = existsSync(orphanage) && !readFileSync(orphanage, "utf8").endsWith("\n") ? "\n" : "";
+      const gap = existsSync(orphanage) && !readText(orphanage).endsWith("\n") ? "\n" : "";
       if (open.length) appendFileSync(orphanage, gap + open.map((i) => `- open: ${i} | from ${r.id}\n`).join(""));
       rmSync(dir, { recursive: true, force: true });
     }
@@ -336,13 +341,13 @@ export function backlog(state: string) {
   let n = 0;
   for (const f of files) {
     if (!existsSync(f)) continue;
-    n += (readFileSync(f, "utf8").match(/^\s*-\s*open:/gm) ?? []).length;
+    n += (readText(f).match(/^\s*-\s*open:/gm) ?? []).length;
   }
   return n;
 }
 
 export function version(repo: string) {
-  try { return JSON.parse(readFileSync(join(repo, "package.json"), "utf8")).version; } catch { return ""; }
+  try { return JSON.parse(readText(join(repo, "package.json"))).version; } catch { return ""; }
 }
 // The global state directory is not a project and has no parent worth naming.
 export function label(stateDir: string) {
@@ -354,7 +359,7 @@ export function tilde(p: string) { return p.startsWith(home) ? "~" + p.slice(hom
 // The first few real lines of a file's body, blank lines and headings dropped.
 export function section(file: string, n: number) {
   if (!existsSync(file)) return [];
-  return readFileSync(file, "utf8").split("\n")
+  return readText(file).split("\n")
     .map((l) => l.trim())
     .filter((l) => l && !l.startsWith("#"))
     .slice(0, n);
@@ -362,7 +367,7 @@ export function section(file: string, n: number) {
 
 export function readFindings(file: string) {
   if (!existsSync(file)) return [];
-  return readFileSync(file, "utf8").split("\n")
+  return readText(file).split("\n")
     .map((l) => l.trim())
     .filter((l) => /^\d+\.\s/.test(l) || /\b(critical|high|medium|low)\b:/.test(l));
 }
@@ -377,7 +382,7 @@ export function reviewFindings(state: string, id: string) {
   const base = join(state, "runs", id);
   const read = (f: string) => {
     const p = join(base, f);
-    return existsSync(p) ? readFileSync(p, "utf8").split("\n").map((l) => l.trim()) : [];
+    return existsSync(p) ? readText(p).split("\n").map((l) => l.trim()) : [];
   };
   let lines = read("04-review.md");
   const at = lines.findIndex((l) => /^#+\s*findings/i.test(l));
@@ -390,7 +395,7 @@ export function reviewFindings(state: string, id: string) {
   const closed = read("06-backlog.md").flatMap((l) => /^-\s*(?:done|rejected):\s*(.*)$/.exec(l)?.[1] ?? []);
   const iter = join(base, "05-iterations");
   const rechecked = new Set((existsSync(iter) ? readdirSync(iter) : []).filter((f) => f.endsWith("-recheck.md"))
-    .flatMap((f) => [...readFileSync(join(iter, f), "utf8").matchAll(/finding\s+(\d+)\W{1,8}closed/gi)].map((m) => Number(m[1]))));
+    .flatMap((f) => [...readText(join(iter, f)).matchAll(/finding\s+(\d+)\W{1,8}closed/gi)].map((m) => Number(m[1]))));
   return lines.flatMap((l) => {
     const m = /^(\d+)\.\s+(.+)$/.exec(l);
     if (!m) return [];
@@ -439,7 +444,7 @@ export function tidy(text: string) {
 
 export function readBacklog(file: string) {
   if (!existsSync(file)) return [];
-  return readFileSync(file, "utf8").split("\n")
+  return readText(file).split("\n")
     .map((l) => l.trim())
     .filter((l) => /^-\s*open:/.test(l))
     .map((l) => l.replace(/^-\s*open:\s*/, ""));
@@ -493,7 +498,7 @@ export function startedRuns(state: string): string[] {
   if (!existsSync(dir)) return [];
   const out: string[] = [];
   for (const id of readdirSync(dir)) {
-    try { out.push(normalise(readFileSync(join(dir, id, "00-request.md"), "utf8"))); }
+    try { out.push(normalise(readText(join(dir, id, "00-request.md")))); }
     catch { /* no request file, or unreadable */ }
   }
   return out;
@@ -539,7 +544,7 @@ export function readInbox(state: string): InboxLine[] {
   const f = join(state, "inbox.md");
   if (!existsSync(f)) return [];
   const out: InboxLine[] = [];
-  for (const raw of readFileSync(f, "utf8").split("\n")) {
+  for (const raw of readText(f).split("\n")) {
     const m = /^-\s*(open|started|done|rejected|archived):\s*(.+)$/.exec(raw.trim());
     if (m) { out.push({ status: m[1]!, text: m[2]!.trim() }); continue; }
     // An indented line belongs to the bullet above it; anything else is noise.
@@ -579,7 +584,7 @@ export function requestOf(text: string, notes?: string, state?: string) {
 // Free text beside a run -- what the user learned after the idea became a run.
 // Its own file, never state.json: that shape is the resume contract.
 export function readNotes(state: string, id: string) {
-  try { return readFileSync(join(state, "runs", id, "notes.md"), "utf8"); } catch { return ""; }
+  try { return readText(join(state, "runs", id, "notes.md")); } catch { return ""; }
 }
 
 export function writeNotes(state: string, id: string, text: string): string | null {
@@ -701,7 +706,7 @@ export function short(id: string) { return id.replace(/^\d{4}-\d{2}-\d{2}-/, "")
 export function abandonRun(st: string, id: string, why: string): string | null {
   const file = join(st, "runs", id, "state.json");
   try {
-    const run = JSON.parse(readFileSync(file, "utf8"));
+    const run = JSON.parse(readText(file));
     if (run.stage === "abandoned") return "That run is already abandoned.";
     run.stage = "abandoned";
     run.awaiting = null;
@@ -731,7 +736,7 @@ export function replaceIdea(state: string, text: string, next: InboxLine | null)
 export function readArchive(state: string): Set<string> {
   const f = join(state, "archive.md");
   if (!existsSync(f)) return new Set();
-  return new Set(readFileSync(f, "utf8").split("\n")
+  return new Set(readText(f).split("\n")
     .map((l) => /^-\s*(\S+)/.exec(l.trim())?.[1])
     .filter((x): x is string => !!x));
 }
@@ -772,7 +777,7 @@ export function boardCards(states: string[], now: number): Card[] {
   const bodies = new Map<string, string>();
   const body = (st: string, id: string) => {
     const f = join(st, "runs", id, "00-request.md");
-    if (!bodies.has(f)) { try { bodies.set(f, readFileSync(f, "utf8")); } catch { bodies.set(f, ""); } }
+    if (!bodies.has(f)) { try { bodies.set(f, readText(f)); } catch { bodies.set(f, ""); } }
     return bodies.get(f)!;
   };
   const requests: string[] = [];
@@ -873,6 +878,9 @@ export function launchRun(it: Item, from: string): Launch {
       stdout: "ignore",
       stderr: "ignore",
       detached: term.detached,
+      // A detached launch is the terminal window itself; anything else (herdr's
+      // launcher) is plumbing, and must not flash a console on Windows.
+      windowsHide: !term.detached,
     });
     if (term.detached) proc.unref();
     return { ok: true, agent, prompt, projectDir, cmd: term.cmd };
@@ -897,7 +905,9 @@ export async function pidOnPort(port: number): Promise<number | null> {
 // ---- git, for the board's commit and push. Always argv, never a shell: the commit
 // message is whatever the user typed. A credential prompt has no terminal to appear
 // in, so git is told not to ask and is given a minute at most.
-const gitOpts = () => ({ env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }, stdin: "ignore" as const, timeout: 60_000 });
+// windowsHide: a board started from the Windows shortcut has no console, so each
+// git it runs would open one of its own -- a window flashing on every refresh.
+const gitOpts = () => ({ env: { ...process.env, GIT_TERMINAL_PROMPT: "0" }, stdin: "ignore" as const, timeout: 60_000, windowsHide: true });
 const gitDone = (code: number | null, stdout: string, stderr: string) => {
   const out = stdout.trimEnd(), err = stderr.trim();
   return { ok: code === 0, out, why: (err || out).split("\n").pop() || "git did not finish" };
@@ -944,7 +954,7 @@ function runReport(state: string, id: string) {
   const base = join(state, "runs", id), its = join(base, "05-iterations");
   const fixes = existsSync(its) ? readdirSync(its).filter((n) => n.endsWith("-fix.md")).map((n) => join(its, n)) : [];
   let text = "", at = 0;
-  for (const f of [join(base, "03-impl.md"), ...fixes]) try { text += readFileSync(f, "utf8") + "\n"; at = Math.max(at, statSync(f).mtimeMs); } catch {}
+  for (const f of [join(base, "03-impl.md"), ...fixes]) try { text += readText(f) + "\n"; at = Math.max(at, statSync(f).mtimeMs); } catch {}
   return { text, at };
 }
 const names = (report: string, path: string) => report.includes("`" + path + "`") || report.includes("`" + path + ":");
@@ -987,7 +997,7 @@ export function runGit(state: string, id: string): GitStatus {
 // mtime is the liveness signal.
 export function readCommit(state: string, id: string): { sha: string; pushed: boolean } | null {
   try {
-    const t = readFileSync(join(state, "runs", id, "07-commit.md"), "utf8");
+    const t = readText(join(state, "runs", id, "07-commit.md"));
     return { sha: /^commit: (\S+)/m.exec(t)?.[1] ?? "", pushed: /^pushed: yes/m.test(t) };
   } catch { return null; }
 }

package/cli/web.ts

@@ -1,11 +1,11 @@
 // `kaizen web`: the board in a browser. A loopback HTTP server over state.ts and
 // one HTML page; the page never sees the filesystem, only JSON.
-import { existsSync, readFileSync, readdirSync, statSync, watch, appendFileSync, mkdirSync, type FSWatcher } from "node:fs";
+import { existsSync, readdirSync, statSync, watch, appendFileSync, mkdirSync, type FSWatcher } from "node:fs";
 import { join, dirname } from "node:path";
 import {
   home, type Item, type Card, boardCards, knownProjects, remember, locate, label, tilde, searchRoots, findProjects,
   readInbox, writeInbox, replaceIdea, abandonRun, launchRun, parseItem, short, setArchived, writeNotes,
-  appendNote, saveAttachment, pidOnPort, cmdExe, sysExe, powershellExe, runGit, cardsGit, readCommit, commitPush, notice, notifier, LOGO,
+  appendNote, saveAttachment, pidOnPort, readText, cmdExe, sysExe, powershellExe, runGit, cardsGit, readCommit, commitPush, notice, notifier, LOGO,
   reviewFindings, pickFindings, fixPrompt,
 } from "./state.ts";
 import { readSources, addSource, removeSource, moveSource, gatherSource, gatherAll, gatherDirs, due } from "./sources.ts";
@@ -19,7 +19,7 @@ const DEFAULT_PORT = 7420;
 // Read once at start: a board keeps the code it started with, so this is what it
 // runs, not what is installed now. `/` sends it; `current()` compares the two.
 const VERSION = (() => {
-  try { return JSON.parse(readFileSync(join(dirname(import.meta.dir), "package.json"), "utf8")).version as string; }
+  try { return JSON.parse(readText(join(dirname(import.meta.dir), "package.json"))).version as string; }
   catch { return "unknown"; }
 })();
 
@@ -203,7 +203,7 @@ export async function web(repoDir: string, opts: Opts = {}) {
       if (req.method === "GET" && path === "/") {
         if (!existsSync(PAGE)) return new Response("web/board.html missing", { status: 500 });
         // The page gets the notify rule from state.ts rather than keeping its own copy.
-        return new Response(readFileSync(PAGE, "utf8").replace("/*notifier*/", () => notifier.toString()), {
+        return new Response(readText(PAGE).replace("/*notifier*/", () => notifier.toString()), {
           headers: { "content-type": "text/html; charset=utf-8", "cache-control": "no-store", "x-kaizen-version": VERSION },
         });
       }
@@ -260,7 +260,7 @@ export async function web(repoDir: string, opts: Opts = {}) {
         if (!dir || !states(true).includes(dir) || !/^[\w.-]+$/.test(id)) return bad("no such run", 404);
         const base = join(dir, "runs", id);
         if (!existsSync(base)) return bad("no such run", 404);
-        const read = (f: string) => existsSync(join(base, f)) ? readFileSync(join(base, f), "utf8") : null;
+        const read = (f: string) => existsSync(join(base, f)) ? readText(join(base, f)) : null;
         return json({
           id, short: short(id), state: read("state.json"),
           request: read("00-request.md"), plan: read("01-plan.md"), approval: read("02-approval.md"),
@@ -508,7 +508,7 @@ export async function web(repoDir: string, opts: Opts = {}) {
           if (!/^[\w.-]+$/.test(id)) return bad("bad run id");
           if (dir === join(home, ".kaizen")) return bad("no project to commit", 409);
           let run: any;
-          try { run = JSON.parse(readFileSync(join(dir, "runs", id, "state.json"), "utf8")); } catch { return bad("no such run", 404); }
+          try { run = JSON.parse(readText(join(dir, "runs", id, "state.json"))); } catch { return bad("no such run", 404); }
           if (run.stage !== "done" && run.awaiting !== "approvals.review") return bad("this run is not finished", 409);
           const r = await commitPush(dir, id, String(body.message ?? ""), Array.isArray(body.files) ? body.files.map(String) : []);
           changed();
@@ -523,7 +523,7 @@ export async function web(repoDir: string, opts: Opts = {}) {
           if (!/^[\w.-]+$/.test(id)) return bad("bad run id");
           if (dir === join(home, ".kaizen")) return bad("no project to fix in", 409);
           let run: any;
-          try { run = JSON.parse(readFileSync(join(dir, "runs", id, "state.json"), "utf8")); } catch { return bad("no such run", 404); }
+          try { run = JSON.parse(readText(join(dir, "runs", id, "state.json"))); } catch { return bad("no such run", 404); }
           if (run.stage !== "done" && run.awaiting !== "approvals.review" && run.awaiting !== "findings") return bad("this run is still being worked on", 409);
           const nums = pickFindings(dir, id, body.nums);
           if (!nums) return bad("pick open findings of this review");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kaizen-agent",
-  "version": "1.9.2",
+  "version": "1.9.4",
   "description": "Staged workflow for AI agents — code, writing, research, operations: plan, human approval, build, independent review, bounded fix loop.",
   "type": "module",
   "bin": {