opencode-navigator 0.21.7 → 0.22.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "opencode-navigator",
-  "version": "0.21.7",
+  "version": "0.22.0",
   "description": "Search, navigate, and manage OpenCode sessions from the TUI",
   "type": "module",
   "packageManager": "bun@1.4.2",
@@ -32,6 +32,7 @@
     "assets",
     "scripts/install-font.mjs",
     "scripts/update-local-snapshot.mjs",
+    "scripts/snapshot-runtime.mjs",
     "scripts/save-project-profile.mjs",
     "README.md",
     "PROVIDERS.md",
@@ -104,12 +105,12 @@
     }
   },
   "devDependencies": {
-    "@opencode-ai/plugin": "1.18.34",
-    "@opencode-ai/sdk": "1.18.34",
-    "@opencode/plugin": "2.0.21",
-    "@opentui/core": "0.5.12",
-    "@opentui/keymap": "0.5.12",
-    "@opentui/solid": "0.5.12",
+    "@opencode-ai/plugin": "1.19.3",
+    "@opencode-ai/sdk": "1.19.3",
+    "@opencode/plugin": "2.1.0",
+    "@opentui/core": "0.6.6",
+    "@opentui/keymap": "0.6.6",
+    "@opentui/solid": "0.6.6",
     "@st1ggy/linter-config": "8.0.0",
     "@types/bun": "1.4.2",
     "eslint-plugin-solid": "0.18.0",

package/scripts/snapshot-runtime.mjs

@@ -0,0 +1,32 @@
+import { readFile } from 'node:fs/promises'
+import { join } from 'node:path'
+
+const PACKAGES = ['@opencode/plugin', '@opentui/core', '@opentui/keymap', '@opentui/solid', 'solid-js']
+
+export async function snapshotRuntime(directory, fallback) {
+  let source
+
+  try {
+    source = await readFile(join(directory, 'dist', 'runtime-dependencies.json'), 'utf8')
+  } catch (error) {
+    if (error.code === 'ENOENT') return fallback
+
+    throw error
+  }
+
+  const manifest = JSON.parse(source)
+  const dependencies = manifest?.dependencies
+
+  if (
+    manifest?.version !== 1 ||
+    Object.keys(manifest).some((key) => !['version', 'dependencies'].includes(key)) ||
+    !dependencies ||
+    typeof dependencies !== 'object' ||
+    Array.isArray(dependencies) ||
+    Object.keys(dependencies).length !== PACKAGES.length ||
+    PACKAGES.some((name) => typeof dependencies[name] !== 'string' || !/^\d+\.\d+\.\d+$/.test(dependencies[name]))
+  )
+    throw new Error('Navigator package has an invalid runtime dependency manifest')
+
+  return Object.fromEntries(PACKAGES.map((name) => [name, dependencies[name]]))
+}

package/scripts/update-local-snapshot.mjs

@@ -5,6 +5,8 @@ import { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises'
 import { basename, dirname, join, resolve } from 'node:path'
 import { pathToFileURL } from 'node:url'
 
+import { snapshotRuntime } from './snapshot-runtime.mjs'
+
 function command(program, args) {
   return new Promise((resolveCommand, reject) => {
     const child = spawn(program, args, { stdio: ['ignore', 'ignore', 'pipe'] })
@@ -33,7 +35,7 @@ export function pinnedSnapshot(wrapper, read = readFile) {
   })
 }
 
-async function validate(directory, version) {
+async function validate(directory, version, { checkRuntime = true } = {}) {
   const metadata = JSON.parse(await readFile(join(directory, 'package.json'), 'utf8'))
 
   if (
@@ -48,6 +50,15 @@ async function validate(directory, version) {
   const changelog = await readFile(join(directory, 'CHANGELOG.md'), 'utf8')
 
   if (!changelog.includes(`## [${version}]`)) throw new Error(`Snapshot ${version} has no bundled changelog entry`)
+
+  // Older installers inherited the predecessor's pins even when a new package
+  // declared a runtime manifest. Accept that running source; verify the target.
+  if (!checkRuntime) return
+
+  const runtime = await snapshotRuntime(directory, metadata.dependencies)
+
+  if (runtime && Object.entries(runtime).some(([name, pinned]) => metadata.dependencies?.[name] !== pinned))
+    throw new Error(`Snapshot ${version} has mismatched runtime dependencies`)
 }
 
 export async function updateLocalSnapshot(wrapper, target, operations = {}) {
@@ -59,7 +70,7 @@ export async function updateLocalSnapshot(wrapper, target, operations = {}) {
 
   if (target === version) return
 
-  await validate(previous, version)
+  await validate(previous, version, { checkRuntime: false })
   const previousMetadata = JSON.parse(await readFile(join(previous, 'package.json'), 'utf8'))
   const dependencies = previousMetadata.dependencies
 
@@ -99,7 +110,7 @@ export async function updateLocalSnapshot(wrapper, target, operations = {}) {
           version: target,
           private: true,
           type: 'module',
-          dependencies,
+          dependencies: await snapshotRuntime(staging, dependencies),
           optionalDependencies: { ...previousMetadata.optionalDependencies, ...metadata.optionalDependencies },
         }),
       )