karajan-code 4.1.0 → 4.1.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "karajan-code",
-  "version": "4.1.0",
+  "version": "4.1.1",
   "description": "Local multi-agent coding orchestrator with TDD, SonarQube, and code review pipeline",
   "type": "module",
   "license": "AGPL-3.0",

package/src/checks/mcp-health.js

@@ -102,8 +102,14 @@ export function createKarajanMcpCheck() {
       return {
         ok: result.ok,
         severity: result.ok ? "info" : "warn",
-        detail: result.ok ? result.detail : `karajan-mcp did not respond: ${result.detail}`,
-        fix: result.ok ? undefined : "Re-run karajan-mcp via `node bin/karajan-mcp.js`",
+        // KJC-BUG-0118: the MCP is OPTIONAL in the v4 environment (the host
+        // agent drives kj via CLI) — a dead MCP must read as a degraded
+        // optional, never as a broken install. The standalone (curl) binary
+        // cannot run it at all (no bundled native modules).
+        detail: result.ok
+          ? result.detail
+          : `karajan-mcp did not respond: ${result.detail} — OPTIONAL in v4: your agent runs kj directly; only shell-less hosts need MCP`,
+        fix: result.ok ? undefined : "Only if you need MCP: install via npm (`npm i -g karajan-code`) — the standalone binary does not bundle it",
         extra: { binPath },
       };
     },

package/src/checks/native-build.js

@@ -51,7 +51,10 @@ export function createNativeBuildCheck({ loadDb = defaultLoadDb, isPnpm = isPnpm
         return {
           ok: false,
           severity: "warn",
-          detail: `better-sqlite3 failed to load: ${firstLine}`,
+          // KJC-BUG-0118: the standalone (curl) binary ships without native
+          // modules by design — name the consequence (RAG/board/MCP need the
+          // npm install) instead of implying the install is broken.
+          detail: `better-sqlite3 failed to load: ${firstLine} — DB-backed features (RAG, board, MCP) unavailable; the standalone binary does not bundle native modules`,
           fix: "Reinstall to rebuild native modules: `npm i -g karajan-code`",
         };
       }

package/src/commands/harden.js

@@ -10,6 +10,7 @@ import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 
 import { loadConfig } from "../config.js";
+import { resolveTestOnPush } from "../harden/test-on-push.js";
 import { compareHarden, formatAdvisoryReport } from "../harden/advisory.js";
 import { interactiveHarden } from "../harden/interactive.js";
 import { createWizard, isTTY } from "../utils/wizard.js";
@@ -121,6 +122,14 @@ export async function hardenCommand({
 
   const roots = detectStackRoots(projectDir, { only: onlyDirs, exclude: excludeDirs });
   const cmds = await resolveCmds(projectDir, roots[0]?.language ?? null);
+  // KJC-TSK-0647: CI already running the suite per PR ⇒ pre-push drops its
+  // test command (false-red source under local parallelism); opt back in
+  // via package.json kj.harden.test_on_push.
+  const top = resolveTestOnPush({ projectDir, repoCfg, testCmd: cmds.test });
+  if (top.reason) {
+    logger.info?.(`kj harden: ${top.reason}`);
+    cmds.test = undefined;
+  }
   // KJC-TSK-0648: branch-first guard — the base branch only moves via PR.
   // Resolved from the project's kj config (default "main"); best-effort so
   // harden keeps working on repos that never ran kj init.

package/src/commands/review-gate.js

@@ -9,6 +9,7 @@ import { runCommand } from "../utils/process.js";
 import { checkVerdict } from "../review/verdict-store.js";
 import { runOneShotReview } from "../review/one-shot-review.js";
 import { runSolomonArbitration } from "../review/solomon-arbitration.js";
+import { ensureGateTrackable } from "../review/gate-gitignore.js";
 
 // Raw git always — never a wrapped/compressing runner (KJC-BUG-0115).
 async function rawDiff(range) {
@@ -64,6 +65,12 @@ export async function reviewGateCommand({ config, logger = null, flags = {} }) {
     await fs.mkdir(path.dirname(marker), { recursive: true });
     await fs.writeFile(marker, "# Cross-AI review gate enabled (ENV-C1). Commit this file so the whole team inherits the gate.\n");
     console.log("✓ review gate enabled — commits now require an approved cross-AI verdict (kj review --staged)");
+    // KJC-TSK-0646: a `.karajan/` dir-exclude would silently keep the
+    // contract out of git — rewrite it so the team actually inherits it.
+    const gi = await ensureGateTrackable(projectDir);
+    if (gi.changed) {
+      console.log("✓ .gitignore adjusted: the gate contract (.karajan/review-gate, hooks) is now trackable — commit it");
+    }
     const hookProbe = await runCommand("git", ["config", "core.hooksPath"]);
     if (!hookProbe.stdout?.trim()) {
       console.log("⚠ no core.hooksPath configured — run `kj harden` so the pre-commit hook enforces the gate");

package/src/harden/test-on-push.js

@@ -0,0 +1,38 @@
+/**
+ * Test-on-push policy (KJC-TSK-0647) — the full suite on every push is
+ * redundant when CI already runs it per PR, and a source of false reds
+ * (suites unstable under local parallelism). Field-reproduced.
+ *
+ * Policy: a CI workflow that runs tests ⇒ pre-push drops its test command
+ * (identity guard and chaining stay). Repos can force it back with
+ * `"kj": { "harden": { "test_on_push": true } }` in package.json. Repos
+ * without CI keep tests on push — there it IS the last safety net.
+ */
+import { existsSync, readdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+
+const TEST_STEP = /\b(npm (run )?test|vitest|jest|pytest|go test|phpunit|cargo test)\b/;
+
+export function ciRunsTests(projectDir) {
+  const dir = join(projectDir, ".github", "workflows");
+  if (!existsSync(dir)) return false;
+  try {
+    return readdirSync(dir)
+      .filter((f) => /\.ya?ml$/.test(f))
+      .some((f) => TEST_STEP.test(readFileSync(join(dir, f), "utf8")));
+  } catch {
+    return false;
+  }
+}
+
+export function resolveTestOnPush({ projectDir, repoCfg = {}, testCmd = null }) {
+  if (!testCmd) return { testCmd: null, reason: null };
+  if (repoCfg.test_on_push === true) return { testCmd, reason: null };
+  if (ciRunsTests(projectDir)) {
+    return {
+      testCmd: null,
+      reason: "CI already runs the suite per PR — pre-push keeps only the identity guard (opt back in with kj.harden.test_on_push: true in package.json)",
+    };
+  }
+  return { testCmd, reason: null };
+}