opencode/packages/desktop/scripts/finalize-latest-json.ts

#!/usr/bin/env bun

import { $ } from "bun"
import path from "node:path"
import { parseArgs } from "node:util"

const { values } = parseArgs({
  args: Bun.argv.slice(2),
  options: {
    "dry-run": { type: "boolean", default: false },
  },
})

const dryRun = values["dry-run"]

const repo = process.env.GH_REPO
if (!repo) throw new Error("GH_REPO is required")

const version = process.env.OPENCODE_VERSION
if (!version) throw new Error("OPENCODE_VERSION is required")

const dir = process.env.LATEST_YML_DIR
if (!dir) throw new Error("LATEST_YML_DIR is required")
const root = dir

const token = process.env.GH_TOKEN ?? process.env.GITHUB_TOKEN
if (!token) throw new Error("GH_TOKEN or GITHUB_TOKEN is required")

type Item = {
  url: string
}

type Yml = {
  version: string
  files: Item[]
}

function parse(text: string): Yml {
  const lines = text.split("\n")
  let version = ""
  const files: Item[] = []
  let url = ""

  const flush = () => {
    if (!url) return
    files.push({ url })
    url = ""
  }

  for (const line of lines) {
    const trim = line.trim()
    if (line.startsWith("version:")) {
      version = line.slice("version:".length).trim()
      continue
    }
    if (trim.startsWith("- url:")) {
      flush()
      url = trim.slice("- url:".length).trim()
      continue
    }
    const indented = line.startsWith("  ") || line.startsWith("\t")
    if (!indented) flush()
  }
  flush()

  return { version, files }
}

async function read(sub: string, file: string) {
  const item = Bun.file(path.join(root, sub, file))
  if (!(await item.exists())) return undefined
  return parse(await item.text())
}

function pick(list: Item[], exts: string[]) {
  for (const ext of exts) {
    const found = list.find((item) => item.url.split("?")[0]?.toLowerCase().endsWith(ext))
    if (found) return found.url
  }
}

function link(raw: string) {
  if (raw.startsWith("https://") || raw.startsWith("http://")) return raw
  return `https://github.com/${repo}/releases/download/v${version}/${raw}`
}

function lkey(arch: string, raw: string | undefined) {
  if (!raw) return
  const low = raw.split("?")[0]?.toLowerCase() ?? ""
  if (low.endsWith(".deb")) return `linux-${arch}-deb`
  if (low.endsWith(".rpm")) return `linux-${arch}-rpm`
  if (low.endsWith(".appimage")) return `linux-${arch}-appimage`
}

async function sign(url: string, key: string) {
  const res = await fetch(url, {
    headers: { Authorization: `token ${token}` },
  })
  if (!res.ok) throw new Error(`Failed to fetch file: ${res.status} ${res.statusText}`)

  const name = decodeURIComponent(new URL(url).pathname.split("/").pop() ?? key)
  const tmp = process.env.RUNNER_TEMP ?? "/tmp"
  const file = path.join(tmp, name)
  await Bun.write(file, await res.arrayBuffer())
  const out = await $`bunx @tauri-apps/cli signer sign ${file}`.text()
  return out.trim()
}

const add = async (data: Record<string, { url: string; signature: string }>, key: string, raw: string | undefined) => {
  if (!raw) return
  if (data[key]) return
  const url = link(raw)
  data[key] = { url, signature: await sign(url, key) }
}

const alias = (data: Record<string, { url: string; signature: string }>, key: string, src: string) => {
  if (data[key]) return
  if (!data[src]) return
  data[key] = data[src]
}

const winx = await read("latest-yml-x86_64-pc-windows-msvc", "latest.yml")
const wina = await read("latest-yml-aarch64-pc-windows-msvc", "latest.yml")
const macx = await read("latest-yml-x86_64-apple-darwin", "latest-mac.yml")
const maca = await read("latest-yml-aarch64-apple-darwin", "latest-mac.yml")
const linx = await read("latest-yml-x86_64-unknown-linux-gnu", "latest-linux.yml")
const lina = await read("latest-yml-aarch64-unknown-linux-gnu", "latest-linux-arm64.yml")

const yver = winx?.version ?? wina?.version ?? macx?.version ?? maca?.version ?? linx?.version ?? lina?.version
if (yver && yver !== version) throw new Error(`latest.yml version mismatch: expected ${version}, got ${yver}`)

const out: Record<string, { url: string; signature: string }> = {}

const winxexe = pick(winx?.files ?? [], [".exe"])
const winaexe = pick(wina?.files ?? [], [".exe"])
const macxzip = pick(macx?.files ?? [], [".zip", ".dmg"])
const macazip = pick(maca?.files ?? [], [".zip", ".dmg"])
const linxapp = pick(linx?.files ?? [], [".appimage", ".deb", ".rpm"])
const linaapp = pick(lina?.files ?? [], [".appimage", ".deb", ".rpm"])
const linxkey = lkey("x86_64", linxapp)
const linakey = lkey("aarch64", linaapp)

await add(out, "windows-x86_64-nsis", winxexe)
await add(out, "windows-aarch64-nsis", winaexe)
await add(out, "darwin-x86_64-app", macxzip)
await add(out, "darwin-aarch64-app", macazip)
if (linxkey) await add(out, linxkey, linxapp)
if (linakey) await add(out, linakey, linaapp)

alias(out, "windows-x86_64", "windows-x86_64-nsis")
alias(out, "windows-aarch64", "windows-aarch64-nsis")
alias(out, "darwin-x86_64", "darwin-x86_64-app")
alias(out, "darwin-aarch64", "darwin-aarch64-app")
if (linxkey) alias(out, "linux-x86_64", linxkey)
if (linakey) alias(out, "linux-aarch64", linakey)

const platforms = Object.fromEntries(
  Object.keys(out)
    .sort()
    .map((key) => [key, out[key]]),
)

if (!Object.keys(platforms).length) throw new Error("No updater files found in latest.yml artifacts")

const data = {
  version,
  notes: "",
  pub_date: new Date().toISOString(),
  platforms,
}

const tmp = process.env.RUNNER_TEMP ?? "/tmp"
const file = path.join(tmp, "latest.json")
await Bun.write(file, JSON.stringify(data, null, 2))

const tag = `v${version}`

if (dryRun) {
  console.log(`dry-run: wrote latest.json for ${tag} to ${file}`)
  process.exit(0)
}
await $`gh release upload ${tag} ${file} --clobber --repo ${repo}`

console.log(`finalized latest.json for ${tag}`)