@nanhara/hara 0.125.0 → 0.125.1

package/CHANGELOG.md

@@ -5,6 +5,16 @@ All notable changes to `@nanhara/hara`.
 > Versioning (pre-1.0, SemVer-style): the **minor** (middle) number bumps for a **new feature**; the
 > **patch** (last) number bumps for **optimizations/fixes of existing features**.
 
+## 0.125.1 — 2026-07-18 — installed plugin commands inside agent tasks
+
+- **Commands contributed by an installed Hara plugin are now available to Hara's own tool subprocesses.**
+  Hara appends the user-approved `~/.hara/bin` directory after the inherited `PATH`, so a plugin command
+  such as `hara-video` can be called during an agent task without shadowing a project or system executable.
+  Interactive shells remain user-controlled and still receive the existing one-time PATH hint.
+- This closes the failure mode where the Video Skill was loaded but the agent saw `hara-video: command not
+  found`, hand-built an ungoverned replacement project, and then bypassed the plugin's verification command.
+- Upgrade with `npm i -g @nanhara/hara@0.125.1`.
+
 ## 0.125.0 — 2026-07-18 — Claude-compatible specialist orchestration
 
 - **Personal Claude Code subagents now work in Hara without copying prompts.** Hara discovers

package/dist/index.js

@@ -13,7 +13,7 @@ import { readFileSync, existsSync, realpathSync, statSync, writeFileSync, rmSync
 import { homedir, tmpdir } from "node:os";
 import { fileURLToPath } from "node:url";
 import { randomUUID } from "node:crypto";
-import { dirname, join, relative, resolve } from "node:path";
+import { delimiter, dirname, join, relative, resolve } from "node:path";
 import { loadConfig, configPath, readRawConfig, writeConfigValue, setModelVisionOverride, providerEnvKey, providerDefaultBaseURL, CONFIG_KEYS, APPROVAL_MODES, SANDBOX_MODES, REASONING_EFFORTS, } from "./config.js";
 import { runAgent } from "./agent/loop.js";
 import { formatAgentDuration, parseAgentRunTimeoutMs, MIN_AGENT_RUN_TIMEOUT_MS, MAX_AGENT_RUN_TIMEOUT_MS, MAX_AGENT_MAX_ROUNDS, } from "./agent/limits.js";
@@ -2655,11 +2655,13 @@ pluginCmd
             m.mcpServers ? `${Object.keys(m.mcpServers).length} mcp server(s)` : "",
         ].filter(Boolean);
         out(c.green(`Installed ${p.name}@${p.version}${parts.length ? c.dim(" — " + parts.join(", ")) : ""}\n`));
-        // A plugin can ship CLI commands (manifest `bin`); they're linked into ~/.hara/bin. Tell the user to PATH it.
+        // Hara's model-controlled subprocesses append this directory automatically. The user's independent
+        // interactive shell still needs its own PATH entry when they want to invoke the command directly.
         const bins = Object.keys(m.bin ?? {});
         if (bins.length) {
-            const onPath = (process.env.PATH ?? "").split(":").includes(haraBinDir());
+            const onPath = (process.env.PATH ?? "").split(delimiter).includes(haraBinDir());
             out(c.green(`Linked command(s): ${bins.join(", ")} → ${c.dim(haraBinDir())}\n`));
+            out(c.dim("  available to tool commands started inside Hara automatically\n"));
             if (!onPath)
                 out(c.yellow(`  add to PATH once:  echo 'export PATH="$HOME/.hara/bin:$PATH"' >> ~/.zshrc && source ~/.zshrc\n`));
         }

package/dist/security/subprocess-env.js

@@ -3,7 +3,10 @@
 // A user can explicitly pass selected names with HARA_SUBPROCESS_ENV_ALLOW=NAME,OTHER before launching Hara.
 import { redactSensitiveText } from "./secrets.js";
 import { spawn } from "node:child_process";
+import { existsSync } from "node:fs";
 import { platform } from "node:os";
+import { delimiter, join } from "node:path";
+import { normalizePortableWindowsHome } from "../runtime.js";
 const SECRET_NAME = /(?:^|_)(?:API_?KEY|KEY|SECRET|TOKEN|PASSWORD|PASSWD|CREDENTIALS?|COOKIE|JWT|AUTH)(?:_|$)/i;
 const SECRET_EXACT = new Set([
     "DATABASE_URL",
@@ -27,6 +30,32 @@ function explicitAllow(env) {
         .filter((name) => /^[A-Za-z_][A-Za-z0-9_]*$/.test(name))
         .map((name) => name.toUpperCase()));
 }
+function environmentValue(env, name) {
+    const key = Object.keys(env).find((candidate) => candidate.toUpperCase() === name);
+    return key ? env[key] : undefined;
+}
+/** Installed plugin commands are user-approved Hara extensions. Make them reachable by model-controlled
+ * subprocesses without allowing them to shadow an existing system/project command: ~/.hara/bin is appended,
+ * never prepended. The interactive shell still owns its own PATH configuration. */
+function appendHaraPluginBin(env) {
+    const explicitHome = environmentValue(env, "HOME");
+    const fallbackHome = environmentValue(env, "USERPROFILE");
+    // Match Hara's portable-home contract: an explicit Git Bash/MSYS HOME wins on Windows too.
+    const home = platform() === "win32" && explicitHome
+        ? normalizePortableWindowsHome(explicitHome)
+        : explicitHome ?? fallbackHome;
+    if (!home)
+        return;
+    const pluginBin = join(home, ".hara", "bin");
+    if (!existsSync(pluginBin))
+        return;
+    const pathKey = Object.keys(env).find((candidate) => candidate.toUpperCase() === "PATH") ?? "PATH";
+    const current = env[pathKey] ?? "";
+    const comparable = (value) => platform() === "win32" ? value.toLowerCase() : value;
+    if (current.split(delimiter).some((entry) => comparable(entry) === comparable(pluginBin)))
+        return;
+    env[pathKey] = current ? `${current}${delimiter}${pluginBin}` : pluginBin;
+}
 /** Build an own copy so callers never mutate process.env. Explicit overrides (for example an MCP server's
  * configured env) are intentional and win after the inherited environment has been scrubbed. */
 export function toolSubprocessEnv(source = process.env, overrides = {}) {
@@ -48,6 +77,7 @@ export function toolSubprocessEnv(source = process.env, overrides = {}) {
         else
             out[name] = value;
     }
+    appendHaraPluginBin(out);
     return out;
 }
 /** Redact both recognizable credential syntax and the exact values of secret-named environment variables.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nanhara/hara",
-  "version": "0.125.0",
+  "version": "0.125.1",
   "description": "hara — a coding agent CLI that runs like an engineering org.",
   "bin": {
     "hara": "runtime-bootstrap.cjs"