@hifullmoon/aicommit 2.0.0 → 2.1.0

package/src/split.js

@@ -62,13 +62,7 @@ import {
   splitCheckpointPath,
   writeSplitCheckpoint,
 } from './split-checkpoint.js';
-import {
-  discoverSplitHunks,
-  fallbackHunkGroups,
-  stripHunkCatalog,
-  validateHunkTransaction,
-} from './split-hunks.js';
-import { extensionHostFor } from './extensions.js';
+import { fallbackHunkGroups, stripHunkCatalog, validateHunkTransaction } from './split-hunks.js';
 import { runModelTask } from './generation-ui.js';
 
 // ═══════════════════════════════════════════════════════════════════════════
@@ -1321,23 +1315,6 @@ export function executeSplit(
 
 // Returns a structured result when split mode handled the run; false means
 // "fall back to the normal single-commit flow" for a lone interactive file.
-export async function validateSplitExtensionMessages(groups, config, warnings = []) {
-  const host = extensionHostFor(config);
-  if (!host) return [];
-  const policy = normalizeCommitPolicy(config.commitPolicy, config.language);
-  const violations = [];
-  for (const [index, group] of groups.entries()) {
-    const issues = await host.validateMessage(group.message, policy);
-    const errors = issues.filter((item) => item.severity === 'error');
-    for (const issue of issues.filter((item) => item.severity === 'warning')) {
-      const warning = `Split group ${index + 1}: ${issue.message}`;
-      if (!warnings.includes(warning)) warnings.push(warning);
-    }
-    if (errors.length) violations.push({ group: index + 1, errors });
-  }
-  return violations;
-}
-
 export async function splitFlow(
   config,
   projectRoot,
@@ -1348,7 +1325,6 @@ export async function splitFlow(
     machineOutput = false,
     provider = null,
     exportPlanPath = null,
-    splitHunks = false,
   } = {},
 ) {
   const reasoningEnabled = config.reasoning.mode === 'on';
@@ -1411,42 +1387,13 @@ export async function splitFlow(
     throw fail(ERROR_CATEGORIES.GIT_STATE, 'No changes to commit.', { reported: true });
   }
 
-  if (allFiles.length === 1 && !yes && !exportPlanPath && !splitHunks) {
+  if (allFiles.length === 1 && !yes && !exportPlanPath) {
     console.log('\n  ' + chalk.dim('Only one changed file — falling back to single-commit mode.'));
     return false;
   }
 
   const branch = getBranch(projectRoot);
   const head = hasHead(projectRoot);
-  const baseHead = head ? readGit(['rev-parse', 'HEAD'], projectRoot).trim() : null;
-  let hunkSnapshots = null;
-  let hunkMode = false;
-  if (splitHunks) {
-    try {
-      hunkSnapshots = captureCheckpointSnapshots(projectRoot, scope, allFiles);
-      const discovered = discoverSplitHunks(projectRoot, baseHead, allFiles, hunkSnapshots);
-      if (discovered.some((change) => change.hunks?.length)) {
-        allFiles = discovered;
-        hunkMode = true;
-      } else {
-        warnings.push('Experimental hunk split found no eligible multi-hunk text modifications.');
-        console.log(
-          '  ' +
-            chalk.yellow(
-              '⚠ Hunk split found no eligible multi-hunk text modifications; using file-level planning.',
-            ),
-        );
-      }
-    } catch (err) {
-      warnings.push(`Experimental hunk discovery fell back to file-level planning: ${err.message}`);
-      console.log(
-        '  ' +
-          chalk.yellow(
-            `⚠ Hunk discovery could not prove a safe patch boundary; using file-level planning (${sanitizeTerminalText(err.message)}).`,
-          ),
-      );
-    }
-  }
 
   console.log(
     '\n  ' +
@@ -1461,10 +1408,6 @@ export async function splitFlow(
   }
 
   const contextReport = collectRepositoryContext(projectRoot, allFiles, config.repositoryContext);
-  const extensionContext = await extensionHostFor(config)?.collectContext({
-    files: allFiles,
-    branch,
-  });
   config = {
     ...config,
     commitPolicy: applyCommitlintPolicy(
@@ -1472,12 +1415,9 @@ export async function splitFlow(
       contextReport.constraints,
       config.language,
     ),
-    repositoryContextText: [contextReport.text, extensionContext?.text]
-      .filter(Boolean)
-      .join('\n\n'),
+    repositoryContextText: contextReport.text,
   };
   warnings.push(...contextReport.warnings);
-  warnings.push(...(extensionContext?.warnings || []));
   console.log(
     '  ' + chalk.dim(`Context: ${sanitizeTerminalText(repositoryContextSummary(contextReport))}`),
   );
@@ -1631,51 +1571,13 @@ export async function splitFlow(
     });
   }
 
-  const validateOrFallbackHunks = () => {
-    if (!hunkMode) return;
-    const provisional = createSplitPlanArtifact({
-      scope,
-      baseHead,
-      fingerprint: plannedStateFingerprint,
-      language: config.language,
-      commitPolicy: config.commitPolicy,
-      changes: allFiles,
-      groups,
-      hunkMode: true,
-    });
-    try {
-      validateHunkTransaction(projectRoot, provisional, hunkSnapshots);
-    } catch (err) {
-      warnings.push(`Experimental hunk plan fell back to file-level grouping: ${err.message}`);
-      console.log(
-        '\n  ' +
-          chalk.yellow(
-            `⚠ Hunk plan was not lossless; falling back to file-level grouping (${sanitizeTerminalText(err.message)}).`,
-          ),
-      );
-      groups = fallbackHunkGroups(groups, allFiles);
-      allFiles = stripHunkCatalog(allFiles);
-      hunkMode = false;
-    }
-  };
-  validateOrFallbackHunks();
-
   // Review / edit / regenerate loop
   let regenCounts = groups.map(() => 0);
   let planEdited = false;
   let rewriteCount = 0;
 
   while (true) {
-    const extensionViolations = await validateSplitExtensionMessages(groups, config, warnings);
     displayPlan(groups, allFiles);
-    if (extensionViolations.length) {
-      console.log('\n  ' + chalk.yellow.bold('⚠ Extension validation blocked this plan:'));
-      for (const violation of extensionViolations) {
-        for (const issue of violation.errors) {
-          console.log(`    Group ${violation.group}: ${sanitizeTerminalText(issue.message)}`);
-        }
-      }
-    }
 
     const action = yes
       ? dryRun
@@ -1731,7 +1633,6 @@ export async function splitFlow(
       const edited = await editPlan(groups, allFiles, config.language, config.commitPolicy);
       if (edited) {
         groups = edited;
-        validateOrFallbackHunks();
         regenCounts = groups.map(() => 0);
         planEdited = true;
       }
@@ -1814,22 +1715,6 @@ export async function splitFlow(
       continue; // show the updated plan again
     }
 
-    if (extensionViolations.length) {
-      const details = extensionViolations
-        .map(
-          (violation) =>
-            `Split group ${violation.group}: ${violation.errors
-              .map((item) => item.message)
-              .join(' ')}`,
-        )
-        .join(' ');
-      if (!yes) {
-        console.log(chalk.dim('\n  Edit the plan or regenerate its messages before continuing.\n'));
-        continue;
-      }
-      throw fail(ERROR_CATEGORIES.RESPONSE_FORMAT, details);
-    }
-
     break; // commit, or finish the dry run
   }
 
@@ -1841,7 +1726,7 @@ export async function splitFlow(
     commitPolicy: config.commitPolicy,
     changes: allFiles,
     groups,
-    hunkMode,
+    hunkMode: false,
   });
   let writtenPlanPath = null;
   if (exportPlanPath) {

package/src/utils.js

@@ -140,7 +140,7 @@ const SENSITIVE_URL_PARAMETER_RE =
 // Provider endpoints occasionally need non-secret query parameters such as
 // `api-version`, but credentials embedded in userinfo or well-known secret
 // parameters must never be echoed to terminals, JSON inspection output, or
-// extension processes. Fragments are omitted because HTTP never sends them.
+// diagnostics. Fragments are omitted because HTTP never sends them.
 export function redactSensitiveUrl(value) {
   try {
     const url = new URL(String(value));

package/docs/examples/extension/aicommit-extension.json

@@ -1,9 +0,0 @@
-{
-  "kind": "aicommit-extension",
-  "apiVersion": 1,
-  "id": "team-rules",
-  "version": "1.0.0",
-  "entry": "./index.mjs",
-  "capabilities": ["contextProvider", "messageValidator", "providerAdapter"],
-  "permissions": { "credentials": false }
-}

package/docs/examples/extension/index.mjs

@@ -1,32 +0,0 @@
-export function contextProvider({ files }) {
-  const packages = [...new Set(files.map(({ path }) => path.split('/')[0]).filter(Boolean))];
-  return { text: `Changed top-level areas: ${packages.join(', ')}`, warnings: [] };
-}
-
-export function messageValidator({ message }) {
-  return {
-    issues: /(?:ACME|ticket)-\d+/i.test(message)
-      ? []
-      : [{ severity: 'warning', code: 'ticket', message: 'consider including a ticket id' }],
-  };
-}
-
-export function providerAdapter({ operation, config, request, response, reasoning }) {
-  if (operation === 'buildRequest') {
-    return {
-      model: config.modelId,
-      input: request.messages,
-      max_output_tokens: request.maxTokens,
-    };
-  }
-  if (operation === 'normalizeResponse') {
-    return {
-      content: response.output_text || '',
-      model: response.model,
-      usage: response.usage,
-      finishReason: response.status,
-    };
-  }
-  if (operation === 'reasoningForFollowUp') return { ...reasoning, mode: 'off' };
-  throw new Error(`Unsupported providerAdapter operation: ${operation}`);
-}

package/docs/extensions.md

@@ -1,93 +0,0 @@
-# Extensions / 扩展
-
-AICommit extension API v1 exposes three deliberately small interfaces without loading third-party code into the CLI process. Extensions are user-installed single-file ESM modules and are never enabled by repository config.
-
-AICommit 扩展 API v1 提供三个刻意保持精简的接口，第三方代码不会加载到 CLI 主进程。扩展由用户以单文件 ESM 模块安装，仓库配置无权启用扩展。
-
-## Security model / 安全模型
-
-- Every manifest must declare `"permissions": { "credentials": false }`; v1 rejects every other value.
-- The extension process receives no AICommit API key, credential-helper result, `HOME`/`USERPROFILE` value, or inherited secret environment variable.
-- On Node.js 20+, the child runs with Node's permission model and may read only the packaged runner and its own `.mjs` entry. File writes, child processes, workers, and unrelated reads are denied.
-- Node.js 18 remains supported for core AICommit. Executable extensions fail clearly instead of running without isolation; use Node.js 20+ when extensions are enabled.
-- A context provider receives bounded branch/file metadata, a validator receives the candidate and normalized policy, and an adapter receives non-secret provider settings plus the request/response value needed for its operation.
-- Extensions can observe the data passed to their selected capability and may have network access, including access to services reachable from the machine. Node's permission model is defense in depth, not a substitute for reviewing third-party code. Keep the manifest and entry in a dedicated directory; imports and multi-file packages are intentionally outside v1.
-
-- 每个清单必须声明 `"permissions": { "credentials": false }`，v1 会拒绝其他值。
-- 扩展进程不会收到 AICommit API key、credential helper 结果、`HOME`/`USERPROFILE` 值或继承的秘密环境变量。
-- 在 Node.js 20+ 上，子进程使用 Node 权限模型，只能读取随包发布的 runner 和自己的 `.mjs` 入口；文件写入、子进程、worker 与无关文件读取均被拒绝。
-- Node.js 18 仍可运行 AICommit 核心；启用扩展时会明确失败，而不会在无隔离条件下降级执行。扩展场景请使用 Node.js 20+。
-- context provider 只收到受限的分支/文件元数据，validator 收到候选消息和标准化 policy，adapter 只收到非敏感 provider 设置及当前操作需要的请求/响应值。
-- 扩展能看到其接口明确收到的数据，也可能访问网络，包括本机可达的服务。Node 权限模型是纵深防御，不能替代第三方代码审查。请把清单和入口放进独立目录；v1 有意不支持 import 和多文件扩展包。
-
-## Manifest and configuration / 清单与配置
-
-Copy the executable example in [`docs/examples/extension`](examples/extension), then add its absolute manifest path to the user config:
-
-复制 [`docs/examples/extension`](examples/extension) 中的可执行示例，再把清单绝对路径写入用户配置：
-
-```json
-{
-  "extensions": {
-    "manifests": ["/Users/me/.aicommit/extensions/team-rules/aicommit-extension.json"],
-    "timeoutMs": 3000,
-    "maxContextChars": 2000
-  }
-}
-```
-
-```json
-{
-  "kind": "aicommit-extension",
-  "apiVersion": 1,
-  "id": "team-rules",
-  "version": "1.0.0",
-  "entry": "./index.mjs",
-  "capabilities": ["contextProvider", "messageValidator", "providerAdapter"],
-  "permissions": { "credentials": false }
-}
-```
-
-Validate the config shape without resolving credentials, then exercise the installed code through a dry run or doctor:
-
-先在不解析凭据的情况下校验配置结构，再通过 dry run 或 doctor 实际加载扩展：
-
-```bash
-aicommit config validate
-aicommit --dry-run
-aicommit doctor
-```
-
-The published JSON Schema is [`schemas/aicommit-extension.schema.json`](../schemas/aicommit-extension.schema.json).
-
-## Interface contract / 接口契约
-
-All exports may be synchronous or asynchronous and must return JSON-serializable values.
-
-所有导出函数均可同步或异步执行，返回值必须可 JSON 序列化。
-
-```js
-export function contextProvider({ repository, branch, files }) {
-  return { text: 'bounded context text', warnings: [] };
-}
-
-export function messageValidator({ message, policy }) {
-  return {
-    issues: [{ severity: 'error', code: 'ticket', message: 'ticket id required' }],
-  };
-}
-
-export function providerAdapter({ operation, config, request, response, reasoning }) {
-  if (operation === 'buildRequest') return { model: config.modelId, messages: request.messages };
-  if (operation === 'normalizeResponse') return { content: response.answer };
-  if (operation === 'reasoningForFollowUp') return { ...reasoning, mode: 'off' };
-}
-```
-
-To select the adapter, set `"providerType": "extension:team-rules"`. Core code still owns endpoint validation, timeout/retry, HTTP transport, and Bearer authorization. Adapter-produced credential-like request fields are rejected. Therefore a new body dialect can be added without modifying the core Git or interaction flow, while custom credential schemes remain intentionally unsupported by extension API v1.
-
-选择 adapter 时设置 `"providerType": "extension:team-rules"`。endpoint 校验、超时/重试、HTTP 传输和 Bearer 鉴权仍由核心负责。adapter 返回的疑似凭据字段会被拒绝。因此，新的请求/响应 body 方言无需修改核心 Git 或交互流程即可加入，而自定义鉴权方案在扩展 API v1 中暂不支持。
-
-Validator errors participate in the same one-shot correction flow as built-in policy errors and fail closed if the extension crashes or returns malformed output. Context-provider failures become warnings so optional context cannot block a commit.
-
-Validator 错误与内置 policy 错误共用一次纠正流程；扩展崩溃或返回格式错误时会 fail closed。Context provider 失败只产生 warning，避免可选上下文阻断提交。

package/docs/provider-presets.md

@@ -1,113 +0,0 @@
-# Provider presets / Provider 预设
-
-Provider presets are versioned setup data, not request code. The stable adapters in `src/providers.js` own request/response behavior; `presets/provider-presets.json` supplies a provider ID, display label, adapter ID, secure endpoint, a named model map, and the default model name. Each model supplies its API `modelId` and may include a label or bounded `extraBody` defaults. Adding another OpenAI-compatible service with the `custom` adapter does not change Git, interaction, or request orchestration code.
-
-Provider preset 是带版本的 setup 数据，不是请求代码。`src/providers.js` 中的稳定 adapter 负责请求/响应行为；`presets/provider-presets.json` 提供 provider ID、显示名称、adapter ID、安全 endpoint、命名模型表和默认模型名。每个模型提供 API `modelId`，也可提供显示名称或有界的 `extraBody` 默认值。使用 `custom` adapter 新增另一个 OpenAI-compatible 服务时，不需要修改 Git、交互或请求编排代码。
-
-## Compatibility contract / 兼容契约
-
-Every manifest declares:
-
-每份清单都声明：
-
-```json
-{
-  "kind": "aicommit-provider-presets",
-  "schemaVersion": 2,
-  "version": "2.0.0",
-  "compatibility": {
-    "coreMinimum": "1.5.1",
-    "coreMaximumExclusive": "3.0.0",
-    "adapterContract": 1
-  }
-}
-```
-
-- `version` versions the independently replaceable preset data.
-- The core range is inclusive at `coreMinimum` and exclusive at `coreMaximumExclusive`.
-- Core prerelease versions and build metadata follow SemVer; build metadata is ignored for precedence.
-- `adapterContract` declares the request-adapter interface expected by every entry.
-- Every provider declares a non-empty `models` map and a `defaultModel` that references one entry. Model names are setup aliases; `modelId` is sent to the API.
-- The runtime rejects unknown fields, duplicate/reserved IDs, unsupported adapters, remote HTTP, credentials, model-level `model`/`messages` overrides, oversized data, incompatible versions, and symlinked files.
-
-- `version` 标识可独立替换的 preset 数据版本。
-- core 范围包含 `coreMinimum`，不包含 `coreMaximumExclusive`。
-- Core 的预发布版本与构建元数据遵循 SemVer；构建元数据不参与优先级比较。
-- `adapterContract` 声明每个条目所依赖的请求 adapter 接口。
-- 每个 Provider 都声明非空 `models`，并通过 `defaultModel` 引用其中一项。模型名是 setup 使用的别名，`modelId` 才会发送给 API。
-- 运行时拒绝未知字段、重复/保留 ID、不支持的 adapter、远程 HTTP、凭据、模型级 `model`/`messages` 覆盖、超限数据、不兼容版本和符号链接文件。
-
-The published JSON Schema is [`schemas/aicommit-provider-presets.schema.json`](../schemas/aicommit-provider-presets.schema.json). Runtime validation is authoritative and adds semantic/security checks that JSON Schema alone cannot express.
-
-发布的 JSON Schema 位于 [`schemas/aicommit-provider-presets.schema.json`](../schemas/aicommit-provider-presets.schema.json)。运行时校验是最终依据，并补充 JSON Schema 无法完整表达的语义与安全检查。
-
-## Inspect and validate / 检视与校验
-
-```bash
-aicommit preset path
-aicommit preset show --output=json
-aicommit preset validate --file=provider-presets.json --output=json
-```
-
-The bundled manifest is used unless `~/.aicommit/provider-presets.json` exists. `show` reports the selected source, preset version, compatibility declaration, and provider count. These commands do not resolve provider credentials.
-
-默认使用随包发布的清单；如果存在 `~/.aicommit/provider-presets.json`，则优先使用用户清单。`show` 会报告选中来源、preset 版本、兼容声明和 provider 数量。这些命令不会解析 provider 凭据。
-
-## Independent update and rollback / 独立更新与回滚
-
-Validate before installation, install atomically, then verify setup sees the expected source/version:
-
-安装前先校验，原子安装后再确认 setup 使用了预期来源与版本：
-
-```bash
-aicommit preset validate --file=provider-presets.json
-aicommit preset install --file=provider-presets.json
-aicommit preset show --output=json
-aicommit setup
-```
-
-On a later install, AICommit writes the current valid manifest to `~/.aicommit/provider-presets.previous.json` before replacing it. Roll back without changing the core package:
-
-后续安装时，AICommit 会先把当前有效清单写入 `~/.aicommit/provider-presets.previous.json`，再执行替换。无需更改 core 包即可回滚：
-
-```bash
-aicommit preset rollback
-aicommit preset validate
-```
-
-If the active user manifest is malformed or incompatible, installation preserves its raw bytes as `provider-presets.invalid-<timestamp>.json` before repairing the active file. / 如果活动用户清单损坏或不兼容，安装会先将原始内容保存为 `provider-presets.invalid-<timestamp>.json`，再修复活动文件。
-
-There is deliberately no automatic network updater. Obtain manifests through a trusted channel, review the endpoint/model changes, and validate locally before installation.
-
-系统刻意不提供自动联网更新器。请通过可信渠道取得清单，审阅 endpoint/模型变更，并在安装前进行本地校验。
-
-## Add a compatible provider / 新增兼容 provider
-
-Add one entry to a copied manifest, bump `version`, validate, and install it:
-
-在清单副本中增加一个条目、提升 `version`，然后校验并安装：
-
-```json
-{
-  "id": "acme",
-  "label": "Acme Compatible",
-  "adapter": "custom",
-  "apiUrl": "https://api.acme.example/v1/chat/completions",
-  "defaultModel": "fast",
-  "models": {
-    "fast": {
-      "label": "Acme Chat",
-      "modelId": "acme-chat"
-    },
-    "quality": {
-      "label": "Acme Reasoner",
-      "modelId": "acme-reasoner",
-      "extraBody": { "reasoning": true }
-    }
-  }
-}
-```
-
-If the service speaks an existing adapter contract, no core flow changes are required. A genuinely new wire protocol belongs in a provider adapter extension, not in preset data.
-
-如果服务符合现有 adapter 契约，就不需要修改 core 流程。真正的新 wire protocol 应实现 provider adapter 扩展，而不是塞入 preset 数据。

package/schemas/aicommit-extension.schema.json

@@ -1,27 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://github.com/hi-fullmoon/AICommit/schemas/aicommit-extension.schema.json",
-  "title": "AICommit extension manifest v1",
-  "type": "object",
-  "additionalProperties": false,
-  "required": ["kind", "apiVersion", "id", "version", "entry", "capabilities", "permissions"],
-  "properties": {
-    "kind": { "const": "aicommit-extension" },
-    "apiVersion": { "const": 1 },
-    "id": { "type": "string", "pattern": "^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$" },
-    "version": { "type": "string", "pattern": "^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?$" },
-    "entry": { "type": "string", "pattern": "^[^/].*\\.mjs$" },
-    "capabilities": {
-      "type": "array",
-      "minItems": 1,
-      "uniqueItems": true,
-      "items": { "enum": ["contextProvider", "messageValidator", "providerAdapter"] }
-    },
-    "permissions": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["credentials"],
-      "properties": { "credentials": { "const": false } }
-    }
-  }
-}

package/src/extension-runner.mjs

@@ -1,36 +0,0 @@
-import { readFile } from 'node:fs/promises';
-
-const MAX_INPUT_CHARS = 256_000;
-
-for (const method of ['log', 'info', 'warn', 'error']) {
-  console[method] = (...values) => {
-    process.stderr.write(`${values.map((value) => String(value)).join(' ')}\n`);
-  };
-}
-
-function write(value) {
-  process.stdout.write(`${JSON.stringify(value)}\n`);
-}
-
-let input = '';
-process.stdin.setEncoding('utf8');
-for await (const chunk of process.stdin) {
-  input += chunk;
-  if (input.length > MAX_INPUT_CHARS) throw new Error('Extension input exceeds 256000 characters.');
-}
-
-try {
-  const request = JSON.parse(input);
-  const source = await readFile(request.entry, 'utf8');
-  const moduleUrl = `data:text/javascript;base64,${Buffer.from(source).toString('base64')}`;
-  const extension = await import(moduleUrl);
-  const handler = extension[request.capability];
-  if (typeof handler !== 'function') {
-    throw new Error(`Extension does not export ${request.capability}().`);
-  }
-  const result = await handler(request.input);
-  write({ ok: true, result });
-} catch (error) {
-  write({ ok: false, error: String(error?.message || error).slice(0, 2000) });
-  process.exitCode = 1;
-}