cli/multiselect: guard finish + defer teardown to microtask (fix BindingError on enter); bump v0.1.3

Author: knhn1004

Formula/agentlock.rb

@@ -1,10 +1,10 @@
 class Agentlock < Formula
   desc "Locally-hosted, open-source firewall for AI coding agents"
   homepage "https://openagentlock.github.io/OpenAgentLock"
-  url "https://registry.npmjs.org/@openagentlock/cli/-/cli-0.1.2.tgz"
-  sha256 "5bae7033ab61e64c1ef1723f5e0dab12a5fb3f2d20ecc54f8de06d95389bab8e"
+  url "https://registry.npmjs.org/@openagentlock/cli/-/cli-0.1.3.tgz"
+  sha256 "REPLACE_AFTER_NPM_PUBLISH"
   license "FSL-1.1-Apache-2.0"
-  version "0.1.2"
+  version "0.1.3"
 
   depends_on "bun"
 

cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openagentlock/cli",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",
   "description": "OpenAgentLock CLI — a firewall for AI coding agents. Detects local agent harnesses (Claude Code, Codex CLI, Cursor, OpenCode, Cline, Gemini CLI, Continue, Copilot), gates risky tool calls via a Go control plane, anchors decisions in a Rust Merkle ledger.",

cli/src/tui/multiselect.tsx

@@ -194,18 +194,34 @@ export async function multiselect<T extends string>(
   const root = createRoot(renderer);
 
   return await new Promise<T[] | null>((resolve) => {
+    let finished = false;
     const finish = (result: T[] | null): void => {
-      try {
-        root.unmount();
-      } catch {
-        // best-effort
-      }
-      try {
-        renderer.destroy();
-      } catch {
-        // best-effort
-      }
+      // Guard against the keypress handler firing finish twice (Enter
+      // can produce both `return` and `enter` on some terminals; q/esc
+      // similarly). React's reconciler does not tolerate a second
+      // unmount commit on a torn-down container — symptom is
+      // BindingError "Expected null or instance of Node" inside
+      // commitBeforeMutationEffects → clearContainer.
+      if (finished) return;
+      finished = true;
+      // Resolve first so the caller's `await` settles before teardown.
+      // Defer unmount + destroy to the next microtask so React's
+      // current commit cycle (the keypress that triggered finish)
+      // finishes before the reconciler tries to mutate a container we
+      // are about to clear.
       resolve(result);
+      queueMicrotask(() => {
+        try {
+          root.unmount();
+        } catch {
+          // best-effort
+        }
+        try {
+          renderer.destroy();
+        } catch {
+          // best-effort
+        }
+      });
     };
 
     root.render(