Something went wrong. Try again.
opencode v2 mirror
Something went wrong. Try again.
TypeScript
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119import { createHash } from "node:crypto"import { createReadStream } from "node:fs"import path from "node:path"
type Artifact = { channel: string name: string distribution: string version: string metadata: Record<string, unknown>}
export namespace UpdateArtifact { export async function publish(artifact: Artifact) { if (process.env.GITHUB_ACTIONS !== "true") { console.log("skipped update artifact publication outside GitHub Actions") return } const requestURL = process.env.ACTIONS_ID_TOKEN_REQUEST_URL const requestToken = process.env.ACTIONS_ID_TOKEN_REQUEST_TOKEN if (!requestURL || !requestToken) throw new Error("GitHub Actions OIDC is unavailable")
const url = new URL(requestURL) url.searchParams.set("audience", "https://update.opencode.ai") const tokenResponse = await fetch(url, { headers: { Authorization: `Bearer ${requestToken}` } }) if (!tokenResponse.ok) throw new Error(`Failed to request GitHub OIDC token: ${tokenResponse.status}`) const token: unknown = await tokenResponse.json() if (!isRecord(token) || typeof token.value !== "string") throw new Error("GitHub OIDC response did not include a token")
for (const attempt of [0, 1, 2]) { const response = await fetch("https://opencode.ai/update/api/publish", { method: "POST", headers: { Authorization: `Bearer ${token.value}`, "Content-Type": "application/json", }, body: JSON.stringify(artifact), }) if (response.ok) return // D1 can commit the upsert and still time out. Replaying the same artifact is safe. if (response.status >= 500 && attempt < 2) { await response.arrayBuffer() console.warn(`Update artifact publication returned ${response.status}; retrying`) await Bun.sleep((attempt + 1) * 1_000) continue } throw new Error(`Failed to publish update artifact: ${response.status} ${await response.text()}`) } }
export async function upload(input: { version: string; files: string[]; dryRun?: boolean }) { const { PutObjectCommand, S3Client } = await import("@aws-sdk/client-s3") const client = input.dryRun ? undefined : new S3Client(await credentials()) const prefix = `bin/${input.version}/` const base = `https://opencode.ai/files/bin/${encodeURIComponent(input.version)}/` try { return Object.fromEntries( await Promise.all( input.files.map(async (filepath) => { const file = Bun.file(filepath) const name = path.basename(filepath) if (!file.size) throw new Error(`Empty release file: ${filepath}`) const hash = createHash("sha256") for await (const chunk of file.stream()) hash.update(chunk) const metadata = { url: `${base}${encodeURIComponent(name)}`, sha256: hash.digest("hex"), size: file.size } console.log(`${input.dryRun ? "dry-run upload" : "upload"}: ${prefix}${name}`) if (client) { await client.send( new PutObjectCommand({ Bucket: "opencode-production-files", Key: `${prefix}${name}`, Body: createReadStream(filepath), ContentLength: file.size, ContentType: name.endsWith(".tar.gz") ? "application/gzip" : file.type || "application/octet-stream", ContentDisposition: `attachment; filename="${name}"`, CacheControl: "public, max-age=31536000, immutable", }), ) } return [name, metadata] as const }), ), ) } finally { client?.destroy() } }}
function isRecord(input: unknown): input is Record<string, unknown> { return typeof input === "object" && input !== null && !Array.isArray(input)}
async function credentials() { const account = process.env.CLOUDFLARE_ACCOUNT_ID const token = process.env.CLOUDFLARE_API_TOKEN if (!account || !token) throw new Error("CLOUDFLARE_ACCOUNT_ID and CLOUDFLARE_API_TOKEN are required") // R2 uses the token ID as its access key and SHA-256(token) as its secret. for (const scope of [`accounts/${account}`, "user"]) { const response = await fetch(`https://api.cloudflare.com/client/v4/${scope}/tokens/verify`, { headers: { Authorization: `Bearer ${token}` }, }) if (!response.ok) continue const data: unknown = await response.json() if (!isRecord(data) || data.success !== true || !isRecord(data.result) || typeof data.result.id !== "string") continue return { region: "auto", endpoint: `https://${account}.r2.cloudflarestorage.com`, credentials: { accessKeyId: data.result.id, secretAccessKey: createHash("sha256").update(token).digest("hex"), }, } } throw new Error("Cloudflare token verification failed")}