aiur-cli 0.0.3 → 0.0.5-nightly.24dcc4d

package/libexec/guard-pr-deletions.sh

@@ -0,0 +1,70 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+readonly deletion_threshold=50
+base_branch="${1:-${AIUR_BASE_BRANCH:-}}"
+
+if [[ -z "$base_branch" ]]; then
+  echo "guard-pr-deletions: base branch is required (argument or AIUR_BASE_BRANCH)" >&2
+  exit 2
+fi
+
+if ! git diff --quiet || ! git diff --cached --quiet; then
+  echo "guard-pr-deletions: tracked changes must be committed before checking PR deletions" >&2
+  exit 2
+fi
+
+if ! git fetch --quiet --no-tags origin "refs/heads/$base_branch"; then
+  echo "guard-pr-deletions: could not fetch origin/$base_branch; refusing to use a stale base" >&2
+  exit 2
+fi
+
+if ! base_sha="$(git rev-parse --verify 'FETCH_HEAD^{commit}')"; then
+  echo "guard-pr-deletions: fetched base commit is unavailable" >&2
+  exit 2
+fi
+
+scratch_dir="$(mktemp -d)"
+trap 'rm -rf "$scratch_dir"' EXIT
+
+git diff --diff-filter=D --name-only "$base_sha"..HEAD | LC_ALL=C sort -u >"$scratch_dir/deleted"
+deleted_count="$(wc -l <"$scratch_dir/deleted" | tr -d ' ')"
+
+if ((deleted_count <= deletion_threshold)); then
+  echo "guard-pr-deletions: $deleted_count untouched file deletions (limit: $deletion_threshold)"
+  exit 0
+fi
+
+branch_start="${AIUR_BRANCH_START_SHA:-}"
+
+if [[ -z "$branch_start" ]] && git rev-parse --verify --quiet 'refs/aiur/branch-start^{commit}' >/dev/null; then
+  branch_start="$(git rev-parse --verify 'refs/aiur/branch-start^{commit}')"
+fi
+
+if [[ -z "$branch_start" ]]; then
+  echo "guard-pr-deletions: refusing $deleted_count deletions because the workspace branch-start ref is unavailable" >&2
+  exit 1
+fi
+
+if ! git merge-base --is-ancestor "$branch_start" HEAD; then
+  echo "guard-pr-deletions: workspace branch-start $branch_start is not an ancestor of HEAD" >&2
+  exit 2
+fi
+
+git log --format= --name-only "$branch_start"..HEAD | sed '/^$/d' | LC_ALL=C sort -u >"$scratch_dir/touched"
+# Both inputs are sorted with LC_ALL=C, so comm must compare with the same
+# collation. Under a UTF-8 locale comm reads C-sorted input as unsorted (any
+# mix of upper- and lower-case initial paths, e.g. README.md beside src/...)
+# and its output on unsorted input is undefined -- it can drop rows, which
+# would make this guard under-count untouched deletions and fail open.
+LC_ALL=C comm -23 "$scratch_dir/deleted" "$scratch_dir/touched" >"$scratch_dir/untouched-deletions"
+
+untouched_count="$(wc -l <"$scratch_dir/untouched-deletions" | tr -d ' ')"
+
+if ((untouched_count > deletion_threshold)); then
+  echo "guard-pr-deletions: refusing PR with $untouched_count untouched file deletions (limit: $deletion_threshold)" >&2
+  sed -n '1,20p' "$scratch_dir/untouched-deletions" >&2
+  exit 1
+fi
+
+echo "guard-pr-deletions: $untouched_count untouched file deletions (limit: $deletion_threshold)"

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "aiur-cli",
-  "version": "0.0.3",
+  "version": "0.0.5-nightly.24dcc4d",
   "description": "AI Unit Runtime for Executors.",
   "license": "Apache-2.0",
-  "homepage": "https://github.com/its-everdred/aiur",
+  "homepage": "https://github.com/aiur-team/aiur",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/its-everdred/aiur.git"
+    "url": "git+https://github.com/aiur-team/aiur.git"
   },
   "bin": {
     "aiur": "bin/aiur.js"
@@ -18,17 +18,18 @@
   "files": [
     "bin/aiur.js",
     "libexec/aiur-engine.sh",
+    "libexec/guard-pr-deletions.sh",
     "scripts/postinstall.mjs",
     "share/aiur.tmux.conf"
   ],
   "engines": {
     "node": ">=18"
   },
-  "opencodeVersion": "1.15.6",
+  "opencodeVersion": "1.17.10",
   "optionalDependencies": {
-    "aiur-cli-linux-x64": "0.0.3",
-    "aiur-cli-linux-arm64": "0.0.3",
-    "aiur-cli-darwin-x64": "0.0.3",
-    "aiur-cli-darwin-arm64": "0.0.3"
+    "aiur-cli-linux-x64": "0.0.5-nightly.24dcc4d",
+    "aiur-cli-linux-arm64": "0.0.5-nightly.24dcc4d",
+    "aiur-cli-darwin-x64": "0.0.5-nightly.24dcc4d",
+    "aiur-cli-darwin-arm64": "0.0.5-nightly.24dcc4d"
   }
 }

package/scripts/postinstall.mjs

@@ -23,14 +23,15 @@ import path from "node:path";
 
 // Pinned opencode version, read from package.json `opencodeVersion` (single
 // source of truth — keep in sync with mise.toml). aiur's opencode pane
-// integration is validated against this version; 1.17.x broke custom-provider
-// model resolution (ProviderModelNotFoundError), blanking the chat panes.
+// integration is validated end-to-end against this exact version; floating to
+// `latest` would adopt an unverified opencode that could regress custom-provider
+// model resolution or the chat panes, so the spec must carry a fixed version.
 const pkg = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
 export const OPENCODE_PACKAGE = `opencode-ai@${pkg.opencodeVersion}`;
 
 // True only when the *pinned* opencode version is on PATH. A wrong (e.g.
-// newer) version must be reinstalled — leaving 1.17.x in place keeps the
-// panes broken — so a mere presence check isn't enough.
+// newer, unverified) version must be reinstalled to the pin — so a mere
+// presence check isn't enough.
 export function opencodeMatchesPin() {
   const result = spawnSync("opencode", ["--version"], { encoding: "utf8" });
   return !result.error && result.status === 0 && result.stdout.trim() === pkg.opencodeVersion;