mirror of
https://github.com/wirenboard/agent-vm.git
synced 2026-07-22 14:18:04 +00:00
620db380b9
Code review of the per-agent cache keys found two sources didn't track what the installer actually installs — so the key could miss a real update (stale image) or rebuild for nothing: - claude: keyed on npm @anthropic-ai/claude-code `latest`, but claude.ai/install.sh installs a NATIVE binary from downloads.claude.ai/claude-code-releases/latest. npm dist-tags move on a separate cadence (currently stable=2.1.170, latest=next=2.1.181), so npm `latest` can diverge from the native channel. Switch to the native `/latest` endpoint (a plain version string) that install.sh itself reads. - opencode: keyed on github sst/opencode, but opencode.ai/install downloads from anomalyco/opencode (the repo was renamed). sst/* only resolves today via GitHub's rename redirect. Pin the real repo. codex was already consistent (install.sh resolves from the same openai/codex releases/latest endpoint) — unchanged. Also harden the step: per-source `fail()` messages (the old generic `::error::` was unreachable under `set -e`, which aborts at the failing assignment before the validation loop), and a plausibility check that rejects an HTTP-200-but-garbage body (empty / null / HTML) becoming a cache key. Dry-run resolves codex=rust-v0.141.0 opencode=v1.17.8 claude=2.1.181. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_016gtxsKVWPrR8K1M1Te57MG |
||
|---|---|---|
| .. | ||
| workflows | ||
| dependabot.yml | ||