wirenboard-agent-vm/.github/workflows
Evgeny Boger 620db380b9 image: fix agent version sources to match each installer's real channel
Code review of the per-agent cache keys found two sources didn't track
what the installer actually installs — so the key could miss a real
update (stale image) or rebuild for nothing:

- claude: keyed on npm @anthropic-ai/claude-code `latest`, but
  claude.ai/install.sh installs a NATIVE binary from
  downloads.claude.ai/claude-code-releases/latest. npm dist-tags move
  on a separate cadence (currently stable=2.1.170, latest=next=2.1.181),
  so npm `latest` can diverge from the native channel. Switch to the
  native `/latest` endpoint (a plain version string) that install.sh
  itself reads.
- opencode: keyed on github sst/opencode, but opencode.ai/install
  downloads from anomalyco/opencode (the repo was renamed). sst/* only
  resolves today via GitHub's rename redirect. Pin the real repo.

codex was already consistent (install.sh resolves from the same
openai/codex releases/latest endpoint) — unchanged.

Also harden the step: per-source `fail()` messages (the old generic
`::error::` was unreachable under `set -e`, which aborts at the failing
assignment before the validation loop), and a plausibility check that
rejects an HTTP-200-but-garbage body (empty / null / HTML) becoming a
cache key. Dry-run resolves codex=rust-v0.141.0 opencode=v1.17.8
claude=2.1.181.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016gtxsKVWPrR8K1M1Te57MG
2026-06-18 10:44:22 +00:00
..
build-image.yml image: fix agent version sources to match each installer's real channel 2026-06-18 10:44:22 +00:00
release-npm.yml release-npm: publish via npm OIDC trusted publishing; restore agentd-from-source 2026-06-01 20:26:08 +00:00