@nanhara/hara 0.122.4 → 0.122.5

package/CHANGELOG.md

@@ -5,6 +5,25 @@ All notable changes to `@nanhara/hara`.
 > Versioning (pre-1.0, SemVer-style): the **minor** (middle) number bumps for a **new feature**; the
 > **patch** (last) number bumps for **optimizations/fixes of existing features**.
 
+## 0.122.5 — 2026-07-15 — standalone ambient-config security boundary
+
+- **Standalone binaries no longer trust the directory they are launched from.** Bun's runtime `.env` and
+  `bunfig.toml` autoloading is now explicitly disabled, together with the already-default-off project
+  `package.json` and `tsconfig.json` loaders. A repository can no longer run a `bunfig` preload before Hara's
+  permission checks or inject project `.env` values into the standalone/desktop-sidecar process. Users of the
+  `0.122.4` standalone binary should upgrade promptly; the npm/Node runtime was not affected by Bun's compiled
+  executable autoload path.
+- **The release gate exercises the real boundary.** Native standalone CI and tag publication launch the actual
+  binary from a hostile fixture directory containing both a marker-writing preload and a model-changing test
+  `.env`; the build fails if either executes or loads. A source-policy regression test also requires all four
+  ambient config loaders to remain explicitly disabled and the smoke to stay wired into CI/release.
+- **x64 standalone assets use Bun's baseline CPU target.** Intel macOS, Linux, and Windows sidecar callers no
+  longer inherit the modern/AVX assumption from an unqualified x64 target, improving compatibility with older
+  Intel machines and Rosetta validation without changing ARM64 builds.
+- **Optional native search stays optional at build time.** TypeScript now has an explicit ambient contract for
+  `@zvec/zvec`, so npm can omit the unsupported macOS Intel binding without breaking `npm ci`; runtime loading
+  still falls back to the durable JSON search path when the native module is unavailable.
+
 ## 0.122.4 — 2026-07-14 — bounded agent lifecycle and chat delivery hardening
 
 - **An active agent can no longer renew itself forever.** Every CLI, headless, org, and Desktop/serve turn

package/SECURITY.md

@@ -37,6 +37,10 @@ local user (who already has your shell).
   execution cannot approve those built-in paths past the check. `HARA_ALLOW_SENSITIVE_FILES=1` is an explicit
   launch-time exposure switch for one process: it removes the built-in denies and that process's shell
   protected-read preflight/Seatbelt mask.
+- **Standalone launch configuration is closed.** Released Bun-compiled binaries explicitly disable runtime
+  loading of the working directory's `.env`, `bunfig.toml`, `package.json`, and `tsconfig.json`. This prevents
+  a project preload or ambient environment file from running/injecting values before Hara's own boundaries.
+  Native CI executes each release binary from a hostile fixture directory and fails if either path activates.
 - **Shell guardrails differ by platform.** With the protected-file policy enabled, shell admission statically
   rejects literal protected paths and environment-dump commands on every OS. On macOS, Hara additionally
   applies a Seatbelt read mask to existing

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nanhara/hara",
-  "version": "0.122.4",
+  "version": "0.122.5",
   "description": "hara — a coding agent CLI that runs like an engineering org.",
   "bin": {
     "hara": "runtime-bootstrap.cjs"
@@ -45,7 +45,7 @@
     "start": "node runtime-bootstrap.cjs",
     "test": "npm run build && node --test --test-timeout=120000 test/*.test.mjs",
     "build:binary": "npm run build && bun scripts/build-binary.ts dist/bin/hara",
-    "build:binaries": "npm run build && bun scripts/build-binary.ts dist/bin/hara-darwin-arm64 bun-darwin-arm64 && bun scripts/build-binary.ts dist/bin/hara-darwin-x64 bun-darwin-x64 && bun scripts/build-binary.ts dist/bin/hara-linux-x64 bun-linux-x64 && bun scripts/build-binary.ts dist/bin/hara-linux-arm64 bun-linux-arm64"
+    "build:binaries": "npm run build && bun scripts/build-binary.ts dist/bin/hara-darwin-arm64 bun-darwin-arm64 && bun scripts/build-binary.ts dist/bin/hara-darwin-x64 bun-darwin-x64-baseline && bun scripts/build-binary.ts dist/bin/hara-linux-x64 bun-linux-x64-baseline && bun scripts/build-binary.ts dist/bin/hara-linux-arm64 bun-linux-arm64"
   },
   "publishConfig": {
     "access": "public"