Summary

In Settings → Repository pane, typing Korean (Hangul) into the Display Name input caused syllables to decompose into bare jamo (가나다 → ㄱㅏㄴㅏㄷㅏ). The Worktree Location input had the same bug with the same root cause but manifested as dropped characters at fast typing speed.

Root cause: Both inputs were controlled inputs bound directly to the zustand store (value={repo.displayName}). updateRepo only writes to the store after an awaited IPC round-trip (repos:update). On every keystroke React synchronously restored the input to the stale store value, which silently killed the active IME composition (no compositionend fires). The async IPC echo then re-inserted the cancelled jamo as committed text.

Fix: Introduce a RepoSettingsDraftInput wrapper component that keeps keystrokes in local draft state so the input is always synchronously controlled. The store is still written on every keystroke in the background so the sidebar stays live. The draft resets only when the pane switches to a different repo, so async IPC echoes can never clobber newer draft text.

Applied to both the Display Name and Worktree Location inputs. Also linked the Display Name Label to its input via htmlFor/id (a11y + test locator).

Screenshots

No visual change — the fix is entirely behavioral (correct IME composition in Korean and other CJK input methods).

Testing

• pnpm lint
• pnpm typecheck
• pnpm test
• pnpm build
• Added or updated high-quality tests that would catch regressions, or explained why tests were not needed

Unit tests (RepositoryPaneDraftInput.test.tsx, happy-dom, 7 cases):

• Draft survives a stale store re-render after a keystroke
• Draft survives a stale IPC echo arriving after newer keystrokes
• Draft resets when the active repo changes (repo switch)
• onUpdate fires on every keystroke (per-keystroke persistence)

Playwright e2e (tests/e2e/settings-display-name-ime.spec.ts):

• Drives Blink's real IME pipeline via CDP Input.imeSetComposition / Input.insertText with an adaptive 2-set Korean IME emulator
• The emulator detects page-clobbered composition the same way a real OS IME is cancelled
• Fails with exactly Received: "ㄱㅏㄴㅏㄷㅏ" on the pre-fix code; passes with 가나다 on the fix
• Slow per-key pacing (50 ms) to surface the IPC-echo race

AI Review Report

Reviewed the fix for correctness across the IME composition lifecycle. Key risks checked:

• Race condition safety: The draft reset guard uses a ref comparison (repo.id) rather than a deep-equality check, which is fast and correct — repo identity is stable within a single pane view.
• Double-write risk: onUpdate is called on every draft keystroke. Confirmed the IPC handler is idempotent and debounce is not needed given the existing async behavior.
• Cross-platform: The fix is pure React state; no platform-specific keyboard or path handling is involved. Confirmed compatible with macOS, Linux, and Windows.
• SSH use case: The Worktree Location input retains its existing path-change behavior; the draft only gates the controlled value, not the persistence path.
• No regressions to other settings inputs: RepoSettingsDraftInput is scoped to the two affected fields; no other inputs in RepositoryPane were changed.

No flags raised that required code changes beyond the initial implementation.

Security Audit

• No new IPC channels introduced; the fix sits entirely in the renderer.
• onUpdate passes draft string values through the existing repos:update IPC handler — no change to input sanitization surface.
• No secrets, auth tokens, or path traversal concerns in the changed files.
• No new dependencies added.

Notes

• The e2e spec requires CDP access (Electron in debug mode with --remote-debugging-port). The test file documents the required launch flags and will be skipped gracefully if CDP is unavailable.
• test-results/ artifacts from local Playwright runs are intentionally not committed.