@nanhara/hara 0.132.3 → 0.133.0

package/dist/tools/web.js

@@ -10,6 +10,7 @@ import { request as httpsRequest } from "node:https";
 import { ProxyAgent, fetch as undiciFetch, request as undiciRequest } from "undici";
 import { wrapUntrusted } from "../security/external-content.js";
 import { loadConfig } from "../config.js";
+import { renderHeadlessHtml } from "./headless-web.js";
 const MAX = 60_000;
 const SEARCH_ATTEMPT_MS = 8_000;
 const SEARCH_UA = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 Chrome/124.0 Safari/537.36";
@@ -699,22 +700,31 @@ registerTool({
 });
 registerTool({
     name: "web_fetch",
-    description: "Fetch an http(s) URL and return its text content (HTML is reduced to readable text). Read-only. " +
-        "Use for docs, references, or pages the user mentions. Not sandboxed.",
+    description: "Fetch an http(s) URL and return its text content (HTML is reduced to readable text). Ordinary fetches are read-only. " +
+        "For an SPA shell, retry with render=true to use an installed Chromium-family browser in a fresh isolated profile; " +
+        "rendering executes page JavaScript and therefore requires the computer-use approval boundary. Not sandboxed.",
     input_schema: {
         type: "object",
         properties: {
             url: { type: "string", description: "http:// or https:// URL" },
             max_chars: { type: "number", description: "cap on returned text (default 60000)" },
+            render: { type: "boolean", description: "render JavaScript in an isolated headless browser (approval required; use for SPA shells)" },
         },
         required: ["url"],
     },
     kind: "read",
-    concurrencySafe: true,
+    classify(input) {
+        return input?.render
+            ? { effect: "computer", concurrencySafe: false }
+            : { effect: "read", concurrencySafe: true };
+    },
     visibility: "deferred",
     async run(input, ctx) {
         if (ctx.signal?.aborted)
             throw interrupted("web fetch");
+        if (input.render !== undefined && typeof input.render !== "boolean") {
+            return "Error: web_fetch `render` must be true or false.";
+        }
         let url;
         try {
             url = new URL(input.url);
@@ -776,8 +786,35 @@ registerTool({
             if (text.length > cap)
                 text = text.slice(0, cap) + `\n…[truncated ${text.length - cap} chars]`;
             if (/html/i.test(ct) && looksLikeJsRenderedShell(raw, text)) {
+                if (input.render === true) {
+                    const rendered = await renderHeadlessHtml(current, async (target) => {
+                        const approved = await resolvePublicHost(target.hostname);
+                        const proxy = webProxy(target, ctx.cwd);
+                        return { ...approved, ...(proxy ? { proxyUri: proxy.uri } : {}) };
+                    }, signal);
+                    if (ctx.signal?.aborted)
+                        throw interrupted("web fetch");
+                    if (rendered.html) {
+                        let renderedText = htmlToText(rendered.html);
+                        if (renderedText.length > cap) {
+                            renderedText = renderedText.slice(0, cap) + `\n…[truncated ${renderedText.length - cap} chars]`;
+                        }
+                        if (renderedText && !looksLikeJsRenderedShell(rendered.html, renderedText)) {
+                            return `# ${current.href} (rendered in isolated headless browser)\n\n${wrapUntrusted(renderedText, current.href)}`;
+                        }
+                    }
+                    const reason = rendered.error === "browser-unavailable"
+                        ? "No installed Chromium-family browser was found. Install Chrome/Chromium/Edge or set HARA_BROWSER_PATH to its executable."
+                        : rendered.error === "timed-out"
+                            ? "The isolated browser did not finish within 25 seconds."
+                            : rendered.error === "output-too-large"
+                                ? "The rendered DOM exceeded the 4 MiB safety ceiling."
+                                : "The isolated browser finished without usable rendered text.";
+                    return `# ${current.href} (HTTP ${res.status})\n\n${wrapUntrusted(`${text || "(empty shell)"}\n\nHeadless render unavailable: ${reason}`, current.href)}`;
+                }
                 const hint = "This page appears to be JavaScript-rendered; web_fetch received only the SPA shell and does not execute page scripts. " +
-                    "Use an available browser/web skill for the rendered page, or the site's authenticated API/connector (for example the Feishu Docs API).";
+                    "Retry web_fetch with render=true (it uses a fresh isolated browser and requires approval), use an available browser/web skill, " +
+                    "or use the site's authenticated API/connector (for example the Feishu Docs API).";
                 return `# ${current.href} (HTTP ${res.status})\n\n${wrapUntrusted(`${text || "(empty shell)"}\n\n${hint}`, current.href)}`;
             }
             return `# ${current.href} (HTTP ${res.status})\n\n${wrapUntrusted(text || "(empty body)", current.href)}`;

package/dist/tui/InputBox.js

@@ -14,7 +14,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 //      of leaning on ink's soft-wrap of a single <Text>, which mis-aligns wrapped rows against the
 //      "› " prompt gutter and reflows unpredictably as you type.
 import { Box, Text, useInput, useStdout } from "ink";
-import { memo, useMemo, useRef, useState } from "react";
+import { memo, useEffectEvent, useMemo, useRef, useState } from "react";
 import { fileCandidates } from "../context/mentions.js";
 import { imagePathFromPaste } from "../images.js";
 import { vimNormal } from "./vim.js";
@@ -476,7 +476,11 @@ export function InputBox({ status, cwd, model, route, width, onSubmit, onClipboa
         setSel(0);
         setDismissed(false);
     };
-    useInput((input, key) => {
+    // Ink's useInput effect depends on the callback identity. An inline callback therefore tears down and
+    // re-adds the stdin listener after every rendered keystroke; on a loaded/remote terminal, the next key can
+    // arrive after paint but before the passive effect re-subscribes and be lost. Effect Events keep one stable
+    // subscription while reading the latest render state, and are invoked by Ink's effect-owned listener.
+    const handleInput = useEffectEvent((input, key) => {
         if (popupOpen && (key.upArrow || key.downArrow)) {
             const n = candidates.length;
             setSel((s) => (key.downArrow ? (s + 1) % n : (s - 1 + n) % n));
@@ -641,7 +645,8 @@ export function InputBox({ status, cwd, model, route, width, onSubmit, onClipboa
             }
             set(value.slice(0, cursor) + input + value.slice(cursor), cursor + input.length);
         }
-    }, { isActive });
+    });
+    useInput(handleInput, { isActive });
     const gutter = vim && mode === "normal" ? "◆ " : "› ";
     const gutterColor = vim ? (mode === "normal" ? "yellow" : "green") : "cyan";
     // The box borders (1 each side) + paddingX (1 each side) subtract 4 cells; InputLine's deterministic

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nanhara/hara",
-  "version": "0.132.3",
+  "version": "0.133.0",
   "description": "hara — a coding agent CLI that runs like an engineering org.",
   "bin": {
     "hara": "runtime-bootstrap.cjs"
@@ -81,6 +81,6 @@
     },
     "@hono/node-server": "2.0.11",
     "hono": "4.12.31",
-    "fast-uri": "3.1.3"
+    "fast-uri": "3.1.4"
   }
 }