zomp-git
LOW
maintainer rotko
0 votes
scanned 2026-09-12 03:10:21.490280
Why flagged
The package builds from a legitimate git repository, uses SKIP'd checksums appropriately for git sources, and produces a binary from the project's own source; the low severity is due to few votes and recent upload, not malicious content.
Triggered rules
Low
Few votes, recently uploaded
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
Low
AI review
llm_review
An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a legitimate git repository, uses SKIP'd checksums appropriately for git sources, and produces a binary from the project's own source; the low severity is due to few votes and recent upload, not malicious content.
PKGBUILD
1
# Maintainer: Rotko Networks <hq@rotko.net>
2
#
3
# Canonical, in-repo source of truth for the AUR package. The workflow at
4
# .github/workflows/aur.yml copies this file into the AUR repo whenever it
5
# changes on main. Do not hand-edit the AUR copy.
6
#
7
# zomp is a rolling fork: main is a rebased commit series on top of upstream
8
# oh-my-pi, so this is a -git package. pkgver() reads the checkout, which means
9
# upstream moving — or the series being rewritten under it — never needs a new
10
# release here.
11
pkgname=zomp-git
12
# Snapshot only: makepkg recomputes this with pkgver() at build time, and the
13
# .SRCINFO the AUR ships is generated from the same function.
14
pkgver=v18.1.17.r211.g565d82c
15
pkgrel=1
16
pkgdesc="Fork of oh-my-pi (omp) that runs tool calls through zish's kernel sandbox (git build)"
17
arch=('x86_64' 'aarch64')
18
url="https://github.com/rotkonetworks/zomp"
19
license=('MIT')
20
# gcc-libs: the bundled pi_natives addon links libstdc++/libgcc at runtime.
21
depends=('glibc' 'gcc-libs')
22
# rustup (not rust): rust-toolchain.toml pins nightly-2026-08-08, and rustup is
23
# what honors it. cmake/make build the C dependencies of pi_natives.
24
makedepends=('git' 'bun' 'rustup' 'cmake' 'make')
25
optdepends=('zish: kernel-enforced (Landlock+seccomp) sandbox for the external-shell backend'
26
'chromium: browser tool (headless web automation)'
27
'python: persistent Python eval cells')
28
provides=('omp' 'oh-my-pi')
29
conflicts=('omp' 'oh-my-pi' 'oh-my-pi-git' 'oh-my-pi-bin')
30
# !lto is required, not cosmetic: makepkg appends LTOFLAGS (-flto=auto) to
31
# CFLAGS/LDFLAGS, and GCC's LTO at link time drops the C dependencies of the
32
# bundled pi_natives addon (oniguruma, PCRE2, tree-sitter) from the cdylib. The
33
# addon then loads with `undefined symbol: ts_node_is_missing` and every command
34
# that touches natives — the bash tool included — dies. The artifact is a Bun
35
# single-file executable: stripping or debug-splitting it corrupts the embedded
36
# runtime.
37
options=('!lto' '!strip' '!debug')
38
source=("$pkgname::git+https://github.com/rotkonetworks/zomp.git")
39
sha256sums=('SKIP')
40
41
pkgver() {
42
cd "$pkgname"
43
local desc
44
# v18.1.17-211-g565d82c → v18.1.17.r211.g565d82c
45
if desc="$(git describe --tags --long --abbrev=7 2>/dev/null)"; then
46
printf '%s' "$desc" | sed 's/-\([0-9]\+\)-g/.r\1.g/'
47
else
48
printf 'r%s.g%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
49
fi
50
}
51
52
build() {
53
cd "$pkgname"
54
bun install --frozen-lockfile
55
56
# pi_natives addon through napi + cargo. The `ci` profile is the one release
57
# CI builds the shipping addons with (see .github/workflows/ci.yml): the
58
# default `local` profile — thin LTO plus incremental compilation — emits a
59
# cdylib whose tree-sitter symbols stay unresolved, and loading the addon
60
# then dies with `undefined symbol: ts_node_is_missing`.
61
OMP_NATIVE_CARGO_PROFILE=ci bun run build:native
62
63
# Compiles src/cli.ts into a single-file executable with the addon and the
64
# generated tool views embedded; writes packages/coding-agent/dist/omp.
65
bun --cwd=packages/coding-agent run build
66
}
67
68
# No check(): upstream's test suite drives the full agent (natives, PTY, network)
69
# and is run in CI; packaging should not gate a user's install on it. The build
70
# itself already fails on a broken checkout.
71
72
package() {
73
cd "$pkgname"
74
local _omp="$pkgdir/usr/bin/omp"
75
install -Dm755 packages/coding-agent/dist/omp "$_omp"
76
install -Dm644 LICENSE "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
77
78
# Shell completions generated from the live CLI metadata. The Bun binary
79
# needs a writable HOME for its extraction cache.
80
export HOME="$srcdir/.omp-home"
81
install -dm755 "$HOME"
82
install -dm755 "$pkgdir/usr/share/bash-completion/completions"
83
"$_omp" completions bash > "$pkgdir/usr/share/bash-completion/completions/omp" 2>/dev/null \
84
|| rm -f "$pkgdir/usr/share/bash-completion/completions/omp"
85
install -dm755 "$pkgdir/usr/share/zsh/site-functions"
86
"$_omp" completions zsh > "$pkgdir/usr/share/zsh/site-functions/_omp" 2>/dev/null \
87
|| rm -f "$pkgdir/usr/share/zsh/site-functions/_omp"
88
install -dm755 "$pkgdir/usr/share/fish/vendor_completions.d"
89
"$_omp" completions fish > "$pkgdir/usr/share/fish/vendor_completions.d/omp.fish" 2>/dev/null \
90
|| rm -f "$pkgdir/usr/share/fish/vendor_completions.d/omp.fish"
91
}
92
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-12 03:10:21 | Low | 2 |