fix: pin Aider binary for portal canary

scripts/release-portal-canary-prod.sh

@@ -24,6 +24,7 @@ CANARY_USERNAMES="john"
 CANARY_WECHAT_USER_IDS="wx_ul610et8"
 CANARY_WECHAT_PAGE_DATA_AIDER_REVIEW_ENABLED="1"
 CANARY_WECHAT_PAGE_DATA_AIDER_REVIEW_USER_IDS="a70ff537-8908-486e-9b6c-042e07cc25db"
+CANARY_AIDER_BIN="/opt/homebrew/bin/aider"
 RELEASE_TS="$(date +%Y%m%d-%H%M%S)"
 FULL_SHA="$(git -C "${ROOT}" rev-parse HEAD)"
 SHORT_SHA="${FULL_SHA:0:7}"
@@ -183,6 +184,7 @@ printf '%s  %s\n' "${bundle_sha}" "$(basename "${BUNDLE_PATH}")" > "${SHA_PATH}"
   echo "canary_wechat_user_ids=${CANARY_WECHAT_USER_IDS}"
   echo "canary_wechat_page_data_aider_review_enabled=${CANARY_WECHAT_PAGE_DATA_AIDER_REVIEW_ENABLED}"
   echo "canary_wechat_page_data_aider_review_user_ids=${CANARY_WECHAT_PAGE_DATA_AIDER_REVIEW_USER_IDS}"
+  echo "canary_aider_bin=${CANARY_AIDER_BIN}"
   echo "manual_environment_changes=none"
 } > "${MANIFEST_PATH}"
 
@@ -197,6 +199,7 @@ ssh -o BatchMode=yes -o ConnectTimeout=15 "${HOST}" \
   "test -d '${STABLE_DIR}' \
    && test -f '${STABLE_DIR}/.env' \
    && test -f '${GOOSED_DIR}/docker-compose.prod.yml' \
+   && test -x '${CANARY_AIDER_BIN}' \
    && curl -fsS http://127.0.0.1:8081/api/status >/dev/null \
    && ! lsof -nP -iTCP:${CANARY_PROXY_PORT} -sTCP:LISTEN >/dev/null 2>&1 \
    && ! lsof -nP -iTCP:${DEEPSEEK_COMPAT_PORT} -sTCP:LISTEN >/dev/null 2>&1 \
@@ -314,6 +317,7 @@ ssh -o BatchMode=yes "${HOST}" \
    CANARY_WECHAT_USER_IDS='${CANARY_WECHAT_USER_IDS}' \
    CANARY_WECHAT_PAGE_DATA_AIDER_REVIEW_ENABLED='${CANARY_WECHAT_PAGE_DATA_AIDER_REVIEW_ENABLED}' \
    CANARY_WECHAT_PAGE_DATA_AIDER_REVIEW_USER_IDS='${CANARY_WECHAT_PAGE_DATA_AIDER_REVIEW_USER_IDS}' \
+   CANARY_AIDER_BIN='${CANARY_AIDER_BIN}' \
    /bin/bash" <<'REMOTE_SCRIPT'
 set -euo pipefail
 
@@ -578,6 +582,7 @@ cat > "${CANDIDATE_PLIST}" <<EOF
     <key>MEMIND_CANARY_DEEPSEEK_PROXY_PORT</key><string>${DEEPSEEK_COMPAT_PORT}</string>
     <key>MEMIND_CANARY_WECHAT_PAGE_DATA_AIDER_REVIEW_ENABLED</key><string>${CANARY_WECHAT_PAGE_DATA_AIDER_REVIEW_ENABLED}</string>
     <key>MEMIND_CANARY_WECHAT_PAGE_DATA_AIDER_REVIEW_USER_IDS</key><string>${CANARY_WECHAT_PAGE_DATA_AIDER_REVIEW_USER_IDS}</string>
+    <key>MEMIND_CANARY_AIDER_BIN</key><string>${CANARY_AIDER_BIN}</string>
   </dict>
   <key>RunAtLoad</key><true/>
   <key>KeepAlive</key><true/>

scripts/run-memind-portal-candidate.sh

@@ -40,6 +40,7 @@ export MEMIND_DEEPSEEK_NO_THINK_PORT="${MEMIND_CANARY_DEEPSEEK_PROXY_PORT:-18036
 export MEMIND_GOOSED_HOST_GATEWAY=host.docker.internal
 export H5_WECHAT_MP_PAGE_DATA_AIDER_REVIEW_ENABLED="${MEMIND_CANARY_WECHAT_PAGE_DATA_AIDER_REVIEW_ENABLED:-0}"
 export H5_WECHAT_MP_PAGE_DATA_AIDER_REVIEW_USERS="${MEMIND_CANARY_WECHAT_PAGE_DATA_AIDER_REVIEW_USER_IDS:-}"
+export AIDER_BIN="${MEMIND_CANARY_AIDER_BIN:-/opt/homebrew/bin/aider}"
 unset MEMIND_DEEPSEEK_NO_THINK_BASE_URL
 unset MEMIND_DEEPSEEK_NO_THINK_HOST
 unset TKMIND_API_TARGET_1
@@ -48,6 +49,10 @@ NODE_BIN="${NODE_BIN:-/opt/homebrew/opt/node@24/bin/node}"
 if [[ ! -x "${NODE_BIN}" ]]; then
   NODE_BIN="$(command -v node)"
 fi
+if [[ "${H5_WECHAT_MP_PAGE_DATA_AIDER_REVIEW_ENABLED}" == "1" && ! -x "${AIDER_BIN}" ]]; then
+  echo "[portal-candidate] configured Aider executable is unavailable: ${AIDER_BIN}" >&2
+  exit 1
+fi
 
 port="${H5_PORT}"
 if lsof -tiTCP:"${port}" -sTCP:LISTEN >/dev/null 2>&1; then