fix: detect kiro approval prompts as blocked

refs #255

1 files changed, 17 insertions, 3 deletions

diff --git a/src/detect.rs b/src/detect.rs
index 9b973678..e50c3ad9 100644
--- a/src/detect.rs
+++ b/src/detect.rs
@@ -434,12 +434,20 @@ fn has_kimi_working_status(content: &str) -> bool {
 
 /// Kiro CLI detection.
 ///
-/// Kiro exposes reliable working and idle terminal markers. Confirmation
-/// prompts currently render as normal inline conversation followed by the input
-/// prompt, so they are intentionally treated as idle instead of guessing.
+/// Kiro exposes reliable working and idle terminal markers. Tool approval
+/// prompts render with a stable "requires approval" line and an action menu.
 fn detect_kiro(content: &str) -> AgentState {
     let lower = content.to_lowercase();
 
+    let has_approval_request = lower.contains("requires approval");
+    let has_approval_actions = lower.contains("yes, single permission")
+        || lower.contains("trust, always allow")
+        || lower.contains("no (tab to edit)")
+        || lower.contains("esc to close");
+    if has_approval_request && has_approval_actions {
+        return AgentState::Blocked;
+    }
+
     if lower.contains("kiro is working")
         || (lower.contains("esc to cancel") && has_kiro_tool_spinner(content))
     {
@@ -2125,6 +2133,12 @@ mod tests {
     }
 
     #[test]
+    fn kiro_blocked_on_tool_approval_prompt() {
+        let screen = "↓ Shell mkdir -p /tmp/test-kiro-{a,b,c} && ls /tmp/test-kiro-*\n\n─────────────────────────────────────────────────────────────────────────────────────────\n shell requires approval\n ❯ Yes, single permission\n   Trust, always allow in this session\n   No (Tab to edit)\n─────────────────────────────────────────────────────────────────────────────────────────\n ESC to close | Tab to edit";
+        assert_eq!(detect_state(Some(Agent::Kiro), screen), AgentState::Blocked);
+    }
+
+    #[test]
     fn kiro_does_not_treat_stale_failure_spinner_as_working() {
         let screen = "● 1 MCP failure — see /mcp\n─────────────────────────────────────────────────────\nKiro · auto · ◔ 6%\n\n ask a question or describe a task ↵";
         assert_eq!(detect_state(Some(Agent::Kiro), screen), AgentState::Idle);