jyablonski / arc / 27470952438

74%

push

github

feat: add aur update triage to system update (#25)

## Description

Makes AUR updates interactive and adds a triage layer that runs before
yay: it surfaces high-signal review findings (maintainer changes,
orphaned packages, suspicious PKGBUILD patterns), but always leaves the
final review up to the user.

Code improvements came out of the Atomic Arch incident from June 9 - 12,
2026

### Added

- `internal/aurreview` package: AUR RPC provenance baseline
(maintainer-change detection), a gated PKGBUILD/`.install` static scan,
and cross-package cluster detection. Findings only; the baseline is
committed only after a successful yay run.

### Updated

- `arc update system` forces yay's diff/PKGBUILD review menus and clears
saved pre-answers.
- Triages pending AUR updates before yay, skips `IgnorePkg` packages,
and stays quiet when nothing is pending.
- Defers the kernel reboot prompt to the end so AUR updates and cache
cleanup always complete first.

280 of 363 new or added lines in 4 files covered. (77.13%)

4236 of 5666 relevant lines covered (74.76%)

5.7 hits per line