opencode-navigator 0.21.8 → 0.23.0

package/package.json

@@ -1,10 +1,10 @@
 {
   "$schema": "https://json.schemastore.org/package.json",
   "name": "opencode-navigator",
-  "version": "0.21.8",
+  "version": "0.23.0",
   "description": "Search, navigate, and manage OpenCode sessions from the TUI",
   "type": "module",
-  "packageManager": "bun@1.4.2",
+  "packageManager": "bun@1.4.4",
   "license": "MIT",
   "author": "St1ggy",
   "repository": {
@@ -32,9 +32,12 @@
     "assets",
     "scripts/install-font.mjs",
     "scripts/update-local-snapshot.mjs",
+    "scripts/snapshot-runtime.mjs",
+    "scripts/snapshot-verifier.mjs",
     "scripts/save-project-profile.mjs",
     "README.md",
     "PROVIDERS.md",
+    "HOST_API.md",
     "CHANGELOG.md",
     "LICENSE"
   ],
@@ -57,7 +60,7 @@
     "access": "public"
   },
   "engines": {
-    "opencode": ">=1.18.30"
+    "opencode": "1.19.5 || 2.2.0"
   },
   "scripts": {
     "build": "bun run build.ts",
@@ -80,8 +83,8 @@
     "check": "bun run test && bun run typecheck && bun run lint && bun run bundle:size && bun run format:check"
   },
   "peerDependencies": {
-    "@opencode-ai/plugin": ">=1.18.30",
-    "@opencode/plugin": ">=2.0.11",
+    "@opencode-ai/plugin": "1.19.5",
+    "@opencode/plugin": "2.2.0",
     "@opentui/core": ">=0.4.5",
     "@opentui/solid": ">=0.4.5",
     "solid-js": ">=1.9.12"
@@ -104,12 +107,12 @@
     }
   },
   "devDependencies": {
-    "@opencode-ai/plugin": "1.18.34",
-    "@opencode-ai/sdk": "1.18.34",
-    "@opencode/plugin": "2.0.21",
-    "@opentui/core": "0.5.12",
-    "@opentui/keymap": "0.5.12",
-    "@opentui/solid": "0.5.12",
+    "@opencode-ai/plugin": "1.19.5",
+    "@opencode-ai/sdk": "1.19.5",
+    "@opencode/plugin": "2.2.0",
+    "@opentui/core": "0.7.0",
+    "@opentui/keymap": "0.7.0",
+    "@opentui/solid": "0.7.0",
     "@st1ggy/linter-config": "8.0.0",
     "@types/bun": "1.4.2",
     "eslint-plugin-solid": "0.18.0",

package/scripts/snapshot-runtime.mjs

@@ -0,0 +1,32 @@
+import { readFile } from 'node:fs/promises'
+import { join } from 'node:path'
+
+const PACKAGES = ['@opencode/plugin', '@opentui/core', '@opentui/keymap', '@opentui/solid', 'solid-js']
+
+export async function snapshotRuntime(directory, fallback) {
+  let source
+
+  try {
+    source = await readFile(join(directory, 'dist', 'runtime-dependencies.json'), 'utf8')
+  } catch (error) {
+    if (error.code === 'ENOENT') return fallback
+
+    throw error
+  }
+
+  const manifest = JSON.parse(source)
+  const dependencies = manifest?.dependencies
+
+  if (
+    manifest?.version !== 1 ||
+    Object.keys(manifest).some((key) => !['version', 'dependencies'].includes(key)) ||
+    !dependencies ||
+    typeof dependencies !== 'object' ||
+    Array.isArray(dependencies) ||
+    Object.keys(dependencies).length !== PACKAGES.length ||
+    PACKAGES.some((name) => typeof dependencies[name] !== 'string' || !/^\d+\.\d+\.\d+$/.test(dependencies[name]))
+  )
+    throw new Error('Navigator package has an invalid runtime dependency manifest')
+
+  return Object.fromEntries(PACKAGES.map((name) => [name, dependencies[name]]))
+}

package/scripts/snapshot-verifier.mjs

@@ -0,0 +1,36 @@
+import { readFile } from 'node:fs/promises'
+import { join } from 'node:path'
+
+function supports(version, minimum) {
+  const value = version.replace(/^v/, '').split('.').map(Number)
+  const required = minimum.split('.').map(Number)
+
+  for (let index = 0; index < 3; index++) {
+    if (value[index] !== required[index]) return value[index] > required[index]
+  }
+
+  return true
+}
+
+export async function snapshotVerifier(directory, probe) {
+  const source = await readFile(join(directory, 'dist', 'runtime-requirements.json'), 'utf8').catch((error) => {
+    if (error.code !== 'ENOENT') throw error
+  })
+
+  if (!source) return 'node'
+
+  const requirements = JSON.parse(source)
+
+  if (requirements.version !== 1 || ['bun', 'node'].some((name) => !/^\d+\.\d+\.\d+$/.test(requirements[name])))
+    throw new Error('Navigator package has invalid runtime requirements')
+
+  for (const runtime of ['bun', 'node']) {
+    const version = await probe(runtime).catch(() => '')
+
+    if (/^v?\d+\.\d+\.\d+$/.test(version.trim()) && supports(version.trim(), requirements[runtime])) return runtime
+  }
+
+  throw new Error(
+    `Snapshot verification requires Bun >=${requirements.bun} or Node >=${requirements.node}; the installed snapshot was preserved`,
+  )
+}

package/scripts/update-local-snapshot.mjs

@@ -5,16 +5,23 @@ import { mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises'
 import { basename, dirname, join, resolve } from 'node:path'
 import { pathToFileURL } from 'node:url'
 
-function command(program, args) {
+import { snapshotRuntime } from './snapshot-runtime.mjs'
+import { snapshotVerifier } from './snapshot-verifier.mjs'
+
+function command(program, args, capture = false) {
   return new Promise((resolveCommand, reject) => {
-    const child = spawn(program, args, { stdio: ['ignore', 'ignore', 'pipe'] })
+    const child = spawn(program, args, { stdio: ['ignore', capture ? 'pipe' : 'ignore', 'pipe'] })
     let error = ''
+    let output = ''
+
+    child.stdout?.setEncoding('utf8')
+    child.stdout?.on('data', (chunk) => (output += chunk))
 
     child.stderr.setEncoding('utf8')
     child.stderr.on('data', (chunk) => (error += chunk))
     child.on('error', reject)
     child.on('close', (code) => {
-      if (code === 0) resolveCommand()
+      if (code === 0) resolveCommand(output.trim())
       else reject(new Error(error.trim() || `${program} exited with code ${code}`))
     })
   })
@@ -33,7 +40,7 @@ export function pinnedSnapshot(wrapper, read = readFile) {
   })
 }
 
-async function validate(directory, version) {
+async function validate(directory, version, { checkRuntime = true } = {}) {
   const metadata = JSON.parse(await readFile(join(directory, 'package.json'), 'utf8'))
 
   if (
@@ -48,6 +55,26 @@ async function validate(directory, version) {
   const changelog = await readFile(join(directory, 'CHANGELOG.md'), 'utf8')
 
   if (!changelog.includes(`## [${version}]`)) throw new Error(`Snapshot ${version} has no bundled changelog entry`)
+
+  // Older installers inherited the predecessor's pins even when a new package
+  // declared a runtime manifest. Accept that running source; verify the target.
+  if (!checkRuntime) return
+
+  const runtime = await snapshotRuntime(directory, metadata.dependencies)
+
+  if (runtime && Object.entries(runtime).some(([name, pinned]) => metadata.dependencies?.[name] !== pinned))
+    throw new Error(`Snapshot ${version} has mismatched runtime dependencies`)
+}
+
+async function verifySnapshot(directory, runtime) {
+  const verifier = runtime ?? (await snapshotVerifier(directory, (program) => command(program, ['--version'], true)))
+  const importURL = JSON.stringify(pathToFileURL(join(directory, 'dist', 'tui.js')).href)
+
+  await command(verifier, [
+    '--input-type=module',
+    '--eval',
+    `const plugin=(await import(${importURL})).default;if(plugin?.id!=='opencode-navigator')throw Error('Invalid Navigator plugin bundle')`,
+  ])
 }
 
 export async function updateLocalSnapshot(wrapper, target, operations = {}) {
@@ -59,7 +86,7 @@ export async function updateLocalSnapshot(wrapper, target, operations = {}) {
 
   if (target === version) return
 
-  await validate(previous, version)
+  await validate(previous, version, { checkRuntime: false })
   const previousMetadata = JSON.parse(await readFile(join(previous, 'package.json'), 'utf8'))
   const dependencies = previousMetadata.dependencies
 
@@ -70,8 +97,11 @@ export async function updateLocalSnapshot(wrapper, target, operations = {}) {
   const replacement = join(root, `.tui-${randomUUID()}.tmp`)
 
   try {
-    if (existsSync(next)) await validate(next, target)
-    else {
+    if (existsSync(next)) {
+      await validate(next, target)
+
+      await (operations.verify ? operations.verify(next) : verifySnapshot(next))
+    } else {
       await mkdir(staging)
 
       if (operations.stage) await operations.stage(staging, target)
@@ -92,6 +122,10 @@ export async function updateLocalSnapshot(wrapper, target, operations = {}) {
       if (metadata.name !== 'opencode-navigator' || metadata.version !== target)
         throw new Error('Downloaded Navigator package does not match the requested version')
 
+      const verifier = operations.verify
+        ? undefined
+        : await snapshotVerifier(staging, (runtime) => command(runtime, ['--version'], true))
+
       await writeFile(
         join(staging, 'package.json'),
         JSON.stringify({
@@ -99,7 +133,7 @@ export async function updateLocalSnapshot(wrapper, target, operations = {}) {
           version: target,
           private: true,
           type: 'module',
-          dependencies,
+          dependencies: await snapshotRuntime(staging, dependencies),
           optionalDependencies: { ...previousMetadata.optionalDependencies, ...metadata.optionalDependencies },
         }),
       )
@@ -118,17 +152,7 @@ export async function updateLocalSnapshot(wrapper, target, operations = {}) {
 
       await validate(staging, target)
 
-      if (operations.verify) await operations.verify(staging)
-      else {
-        const bundleURL = pathToFileURL(join(staging, 'dist', 'tui.js')).href
-        const importURL = JSON.stringify(bundleURL)
-
-        await command('node', [
-          '--input-type=module',
-          '--eval',
-          `const plugin=(await import(${importURL})).default;if(plugin?.id!=='opencode-navigator')throw Error('Invalid Navigator plugin bundle')`,
-        ])
-      }
+      await (operations.verify ? operations.verify(staging) : verifySnapshot(staging, verifier))
 
       await rename(staging, next)
     }

package/dist/chunk-d1bws32s.js

@@ -1,8 +0,0 @@
-var PLUGIN_ID="opencode-navigator"
-var TOGGLE_COMMAND=`${PLUGIN_ID}.toggle`
-var FOCUS_COMMAND=`${PLUGIN_ID}.focus`
-var SEARCH_COMMAND=`${PLUGIN_ID}.search`;
-var QUICK_ACTION_IDS=["session.rename","session.timeline","session.copy","session.export","session.compact","session.list","session.new","session.fork","messages.copy","session.first","session.last","session.messages_last_user","session.message.next","session.message.previous","permission.mode"]
-var SECTION_DEFINITIONS=[{name:"limits",label:"Limits"},{name:"todo",label:"Todo"},{name:"subagents",label:"Subagents"},{name:"skills",label:"Skills"},{name:"quick_actions",label:"Quick actions"},{name:"lsp",label:"LSP"},{name:"mcp",label:"MCP"}];
-var MAX_LIMITS_REFRESH_MINUTES=Math.floor(2147483647 / 60000)
-export{QUICK_ACTION_IDS,SECTION_DEFINITIONS,PLUGIN_ID}