@nanhara/hara 0.132.2 → 0.132.4

package/CHANGELOG.md

@@ -5,14 +5,35 @@ All notable changes to `@nanhara/hara`.
 > Versioning (pre-1.0, SemVer-style): the **minor** (middle) number bumps for a **new feature**; the
 > **patch** (last) number bumps for **optimizations/fixes of existing features**.
 
-## 0.132.2 — 2026-07-22 — complete bounded native release gates
+## 0.132.4 — 2026-07-22 — release-class Intel readiness handshakes
+
+- Non-Git `@path` completion now skips the bounded Git inventory subprocess when no repository marker
+  exists. Slow or contended machines keep the full synchronous budget for the actual filesystem walk instead
+  of occasionally returning an empty completion list.
+- TUI streaming and semantic-cancellation regressions now synchronize on concrete composer, render, provider,
+  and completion handshakes rather than fixed millisecond sleeps. Main-branch CI also runs the complete suite
+  on the same Intel macOS class used for native releases before any immutable version tag is created.
+- This patch carries the complete 0.132 feature set into the native and Desktop release train. Upgrade with
+  `npm i -g @nanhara/hara@0.132.4`.
+
+## 0.132.3 — 2026-07-22 — immediate prompt-key routing (npm published; native assets withheld)
+
+- TUI approval/select input now reads the live visible prompt and selection through stable refs. A key pressed
+  immediately after the prompt paints can no longer hit the previous render's null-prompt closure and be
+  swallowed; rapid arrow-plus-Enter input also uses the current selection before the next paint.
+- The confirmation regression waits for the visible prompt and then presses `y` without an arbitrary grace
+  delay, covering the Node 24 CI failure directly. Remaining process-tree fixtures also wait for valid PID
+  content rather than file creation alone. The npm package is valid, but native assembly was withheld after
+  the release-class Intel lane exposed additional completion/render fixture races; upgrade to 0.132.4 instead.
+
+## 0.132.2 — 2026-07-22 — complete bounded native release gates (npm published; native assets withheld)
 
 - The remaining approved-org process-tree and TUI confirmation tests now wait for concrete PID/render
   readiness before starting their decisive assertion, and always clean up mounted Ink apps after a failure.
   This closes the last Intel macOS release-runner races without weakening runtime timeouts or child cleanup.
-- This patch is the standalone/Desktop release carrier for the observable gateway status, scoped web proxy,
-  complete config redaction, and user-managed organization connection features introduced in 0.132.0.
-  Upgrade with `npm i -g @nanhara/hara@0.132.2`.
+- The npm package contains the observable gateway status, scoped web proxy, complete config redaction, and
+  user-managed organization connection features introduced in 0.132.0. Native release assembly was cancelled
+  after Node 24 CI exposed a visible-prompt input-handler race; upgrade to 0.132.3 instead.
 
 ## 0.132.1 — 2026-07-22 — bounded native release-gate waits (npm published; native assets withheld)
 

package/dist/fs-walk.js

@@ -1,8 +1,8 @@
 // Shared filesystem walker — powers @file completion and the grep/glob tools.
 // Walks a directory tree, skipping noise dirs, capped so huge trees stay responsive.
-import { readdirSync, statSync } from "node:fs";
+import { lstatSync, readdirSync, realpathSync, statSync } from "node:fs";
 import { opendir } from "node:fs/promises";
-import { join, relative, sep } from "node:path";
+import { dirname, join, relative, resolve, sep } from "node:path";
 import { execFile, execSync } from "node:child_process";
 import { fuzzyRank } from "./fuzzy.js";
 import { isSensitiveFilePath } from "./security/sensitive-files.js";
@@ -22,6 +22,37 @@ const DEFAULT_ASYNC_TIMEOUT_MS = 2_000;
 // interruptible. Keep them on a much tighter wall budget; agent/tool paths use the async APIs below.
 const DEFAULT_SYNC_TIMEOUT_MS = 250;
 const DEFAULT_YIELD_EVERY = 128;
+function gitMarkerOnPath(start) {
+    let dir = resolve(start);
+    for (let depth = 0; depth < 128; depth++) {
+        try {
+            lstatSync(join(dir, ".git"));
+            return true;
+        }
+        catch (error) {
+            // An unreadable or otherwise suspicious marker must still take the Git path. Only a definite
+            // absence permits the filesystem fallback to skip spawning Git.
+            if (error?.code !== "ENOENT")
+                return true;
+        }
+        const parent = dirname(dir);
+        if (parent === dir)
+            return false;
+        dir = parent;
+    }
+    return true;
+}
+function gitMarkerAbove(start) {
+    if (gitMarkerOnPath(start))
+        return true;
+    // Preserve worktree semantics when callers reach a repository through a symlinked project path.
+    try {
+        return gitMarkerOnPath(realpathSync.native(start));
+    }
+    catch {
+        return false;
+    }
+}
 function finiteLimit(value, fallback) {
     return Number.isFinite(value) ? Math.max(0, Math.floor(value)) : fallback;
 }
@@ -228,6 +259,12 @@ export function listProjectFiles(root, cap = 8000) {
     if (recursiveRootContainsHome(root))
         return [];
     const startedAt = Date.now();
+    // On a non-repository directory, a contended `git ls-files` can consume the entire synchronous
+    // completion budget before the real filesystem walk starts. A bounded marker scan is sufficient to
+    // prove that Git cannot be authoritative here, leaving the budget for the user's actual files.
+    if (!gitMarkerAbove(root)) {
+        return walkFiles(root, cap, { timeoutMs: Math.max(0, DEFAULT_SYNC_TIMEOUT_MS - (Date.now() - startedAt)) });
+    }
     try {
         const out = execSync("git ls-files --cached --others --exclude-standard", {
             cwd: root,
@@ -288,6 +325,19 @@ export async function listProjectFilesAsync(root, options = {}) {
     if (cfg.maxEntries === 0)
         return result([], 0, 0, "entry_limit");
     const remaining = () => cfg.timeoutMs - (Date.now() - startedAt);
+    if (!gitMarkerAbove(root)) {
+        const timeoutMs = remaining();
+        if (timeoutMs <= 0)
+            return result([], 0, 0, "time_limit");
+        return walkFilesAsync(root, {
+            maxFiles: cfg.maxFiles,
+            maxDirectories: cfg.maxDirectories,
+            maxEntries: cfg.maxEntries,
+            timeoutMs,
+            signal: cfg.signal,
+            yieldEvery: cfg.yieldEvery,
+        });
+    }
     try {
         if (remaining() <= 0)
             return result([], 0, 0, "time_limit");

package/dist/tui/App.js

@@ -373,6 +373,13 @@ export function App({ initialStatus, model, cwd, header, onSubmit, agentSlashCom
     const [status, setStatus] = useState({ ...initialStatus, agents: 0 });
     const [prompt, setPrompt] = useState(null);
     const [promptSel, setPromptSel] = useState(0);
+    // Ink updates useInput's callback after a render effect. Keep the visible prompt/selection in refs too,
+    // so the already-registered handler can consume a key pressed immediately after the prompt paints instead
+    // of routing it through the previous render's null prompt closure.
+    const promptRef = useRef(prompt);
+    promptRef.current = prompt;
+    const promptSelRef = useRef(promptSel);
+    promptSelRef.current = promptSel;
     // Free-text question prompt (ask_user with no/declined options): re-enables the InputBox to capture one
     // line, then resolves the awaiting tool with that text. Separate from `prompt` (the select-only path).
     const [askText, setAskText] = useState(null);
@@ -598,6 +605,7 @@ export function App({ initialStatus, model, cwd, header, onSubmit, agentSlashCom
                 reject(promptAbortReason(signal));
             };
             signal.addEventListener("abort", onAbort, { once: true });
+            promptSelRef.current = 0;
             setPromptSel(0);
             setPrompt({
                 token,
@@ -720,6 +728,7 @@ export function App({ initialStatus, model, cwd, header, onSubmit, agentSlashCom
         });
     }, [working, prompt, askText, handleSubmit]);
     useInput((input, key) => {
+        const activePrompt = promptRef.current;
         if (key.ctrl && input === "t")
             return setShowTranscript((x) => !x); // open/close the full-transcript overlay
         if (showTranscript)
@@ -736,28 +745,36 @@ export function App({ initialStatus, model, cwd, header, onSubmit, agentSlashCom
             }
             return;
         }
-        if (prompt) {
-            const opts = prompt.options;
+        if (activePrompt) {
+            const opts = activePrompt.options;
             if (key.upArrow)
-                setPromptSel((s) => (s - 1 + opts.length) % opts.length);
+                setPromptSel((s) => {
+                    const next = (s - 1 + opts.length) % opts.length;
+                    promptSelRef.current = next;
+                    return next;
+                });
             else if (key.downArrow)
-                setPromptSel((s) => (s + 1) % opts.length);
+                setPromptSel((s) => {
+                    const next = (s + 1) % opts.length;
+                    promptSelRef.current = next;
+                    return next;
+                });
             else if (key.return) {
-                prompt.resolve(opts[Math.min(promptSel, opts.length - 1)].value);
+                activePrompt.resolve(opts[Math.min(promptSelRef.current, opts.length - 1)].value);
             }
             else if (key.escape) {
-                if (prompt.abortTurnOnEscape && working && ctrlRef.current)
+                if (activePrompt.abortTurnOnEscape && working && ctrlRef.current)
                     abortCurrentTurn();
                 else
-                    prompt.resolve(opts[opts.length - 1].value); // select-only prompt: last option = cancel/no
+                    activePrompt.resolve(opts[opts.length - 1].value); // select-only prompt: last option = cancel/no
             }
             else if (/^[1-9]$/.test(input) && Number(input) <= opts.length) {
-                prompt.resolve(opts[Number(input) - 1].value); // type a number to pick directly
+                activePrompt.resolve(opts[Number(input) - 1].value); // type a number to pick directly
             }
             else if (input) {
                 const hit = opts.find((o) => o.key && o.key === input.toLowerCase());
                 if (hit) {
-                    prompt.resolve(hit.value);
+                    activePrompt.resolve(hit.value);
                 }
             }
             return;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nanhara/hara",
-  "version": "0.132.2",
+  "version": "0.132.4",
   "description": "hara — a coding agent CLI that runs like an engineering org.",
   "bin": {
     "hara": "runtime-bootstrap.cjs"