@nemoobc/opencode-termux 1.20.1 → 1.20.5

package/lib/integrity.ts

@@ -0,0 +1,28 @@
+/**
+ * Verifikasi integritas file terhadap hash sha512 format registry npm
+ * ("sha512-<base64>"). Mencegah tarball korup/termanipulasi saat transit.
+ */
+import crypto from "crypto"
+import fs from "fs"
+
+export interface Packument {
+  versions?: Record<string, { dist?: { integrity?: string } }>
+}
+
+export function expectedFromRegistry(packument: Packument, version: string): string | null {
+  const dist = packument?.versions?.[version]?.dist
+  return dist?.integrity?.startsWith("sha512-") ? dist.integrity.slice(7) : null
+}
+
+export function verifySha512(filePath: string, expectedB64: string): true {
+  if (!expectedB64) throw new Error("tidak ada hash acuan (integrity) dari registry")
+  const h = crypto.createHash("sha512")
+  h.update(fs.readFileSync(filePath))
+  const got = h.digest("base64")
+  const a = Buffer.from(got)
+  const b = Buffer.from(expectedB64)
+  if (a.length !== b.length || !crypto.timingSafeEqual(a, b)) {
+    throw new Error(`integritas gagal: file ≠ sha512 registry (${filePath})`)
+  }
+  return true
+}

package/lib/net.mjs

@@ -2,6 +2,8 @@
  * Utilitas jaringan: fetch dengan retry + backoff eksponensial.
  * fetchFn dapat disuntik untuk unit test.
  */
+const RETRYABLE_ERRORS = new Set(["ENOTFOUND", "ECONNRESET", "ETIMEDOUT", "ENETUNREACH", "EAI_AGAIN"])
+
 export async function fetchWithRetry(fetchFn, url, opts = {}, retries = 3, log = () => {}) {
   let lastErr
   for (let attempt = 1; attempt <= retries; attempt++) {
@@ -13,6 +15,10 @@ export async function fetchWithRetry(fetchFn, url, opts = {}, retries = 3, log =
       lastErr = new Error(`HTTP ${res.status} — ${url}`)
     } catch (e) {
       lastErr = e
+      const code = e?.cause?.code || e?.code
+      if (code && !RETRYABLE_ERRORS.has(code)) {
+        throw e
+      }
     }
     if (attempt < retries) {
       const wait = Math.min(1000 * 2 ** (attempt - 1), 8000)

package/lib/net.ts

@@ -0,0 +1,51 @@
+/**
+ * Utilitas jaringan: fetch dengan retry + backoff eksponensial.
+ * fetchFn dapat disuntik untuk unit test.
+ */
+
+interface ResponseLike {
+  ok: boolean
+  status: number
+  body: ReadableStream<Uint8Array> | null
+  text(): Promise<string>
+  json<T = unknown>(): Promise<T>
+}
+
+interface ErrorWithCode extends Error {
+  code?: string
+  cause?: { code?: string }
+}
+
+const RETRYABLE_ERRORS = new Set(["ENOTFOUND", "ECONNRESET", "ETIMEDOUT", "ENETUNREACH", "EAI_AGAIN"])
+
+export type FetchFn = (url: string, options?: RequestInit) => Promise<ResponseLike | Response>
+
+export async function fetchWithRetry(
+  fetchFn: FetchFn,
+  url: string,
+  opts: RequestInit = {},
+  retries = 3,
+  log: (msg: string) => void = () => {}
+): Promise<ResponseLike | Response> {
+  let lastErr: unknown
+  for (let attempt = 1; attempt <= retries; attempt++) {
+    try {
+      const res = await fetchFn(url, opts)
+      if (!res.ok && res.status < 500 && res.status !== 429) return res
+      if (res.ok) return res
+      lastErr = new Error(`HTTP ${res.status} — ${url}`)
+    } catch (e) {
+      lastErr = e
+      const code = (e as ErrorWithCode).cause?.code || (e as ErrorWithCode).code
+      if (code && !RETRYABLE_ERRORS.has(code)) {
+        throw e
+      }
+    }
+    if (attempt < retries) {
+      const wait = Math.min(1000 * 2 ** (attempt - 1), 8000)
+      log(`gagal (${attempt}/${retries}) — ulang dalam ${wait}ms`)
+      await new Promise(r => setTimeout(r, wait))
+    }
+  }
+  throw lastErr
+}

package/package.json

@@ -1,14 +1,18 @@
 {
   "name": "@nemoobc/opencode-termux",
-  "version": "1.20.1",
-  "description": "opencode CLI native untuk Termux/Android tanpa proot — membundel loader musl + binary opencode resmi (upstream opencode-ai)",
+  "version": "1.20.5",
+  "description": "opencode CLI native untuk Termux/Android tanpa proot \u2014 membundel loader musl + binary opencode resmi (upstream opencode-ai)",
+  "type": "module",
   "bin": {
     "opencode-termux": "./bin/opencode-termux.js"
   },
   "scripts": {
     "postinstall": "node install.mjs",
     "test": "node test/run.mjs",
-    "test:e2e": "node test/run.mjs --e2e"
+    "test:e2e": "node test/run.mjs --e2e",
+    "lint": "echo 'No linter configured'",
+    "typecheck": "tsc --noEmit",
+    "build": "tsc"
   },
   "keywords": [
     "opencode",
@@ -32,7 +36,12 @@
     "commands",
     "config"
   ],
-  "opencodeUpstream": "1.18.22",
+  "devDependencies": {
+    "@types/node": "^26.4.0",
+    "typescript": "^5.9.3",
+    "tsx": "^4.19.0"
+  },
+  "opencodeUpstream": "1.18.25",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/nemoobc/opencode-termux.git"

package/prebuilt/README.md

@@ -0,0 +1,77 @@
+# Prebuilt musl Loader Rebuild Guide
+
+File `ld-musl-aarch64-termux.so` adalah custom musl loader yang dipatch agar:
+- Membaca `/etc/resolv.conf` dan `/etc/hosts` dari `$PREFIX/etc/` (Termux prefix)
+- Bukan dari `/etc/` (butuh root)
+
+## Cara Rebuild
+
+### Prasyarat
+- Linux host (bisa WSL, VM, atau CI)
+- Docker terinstall
+- `aarch64-linux-musl` toolchain
+
+### Langkah Build
+
+```bash
+# 1. Clone musl repo (versi yang kompatibel dengan Alpine 3.21)
+git clone https://git.musl-libc.org/git/musl
+cd musl
+git checkout v1.2.5  # atau tag yang dipakai Alpine 3.21
+
+# 2. Patch src/internal/dynlink.c untuk ganti path resolv.conf & hosts
+# Cari baris yang define RESOLV_CONF dan HOSTS_PATH, ganti ke:
+# #define RESOLV_CONF "/data/data/com.termux/files/usr/etc/resolv.conf"
+# #define HOSTS_PATH  "/data/data/com.termux/files/usr/etc/hosts"
+
+# 3. Build dengan cross-compiler aarch64
+./configure --prefix=/out --target=aarch64-linux-musl --disable-shared
+make -j$(nproc)
+make install
+
+# 4. Ambil ld-musl-aarch64.so.1 dari /out/lib/
+# Rename ke ld-musl-aarch64-termux.so
+cp /out/lib/ld-musl-aarch64.so.1 ../prebuilt/ld-musl-aarch64-termux.so
+chmod +x ../prebuilt/ld-musl-aarch64-termux.so
+```
+
+### Alternatif: Build via Docker (lebih bersih)
+
+```dockerfile
+# Dockerfile.build-musl
+FROM alpine:3.21 AS builder
+RUN apk add --no-cache build-base linux-headers git
+WORKDIR /musl
+RUN git clone https://git.musl-libc.org/git/musl . && git checkout v1.2.5
+# Apply patch di sini (sed atau patch file)
+RUN sed -i 's|/etc/resolv.conf|/data/data/com.termux/files/usr/etc/resolv.conf|g' src/internal/dynlink.c
+RUN sed -i 's|/etc/hosts|/data/data/com.termux/files/usr/etc/hosts|g' src/internal/dynlink.c
+RUN ./configure --prefix=/out --target=aarch64-linux-musl --disable-shared && make -j$(nproc) && make install
+
+FROM scratch
+COPY --from=builder /out/lib/ld-musl-aarch64.so.1 /ld-musl-aarch64-termux.so
+```
+
+```bash
+docker build -f Dockerfile.build-musl -t musl-builder .
+docker create --name temp musl-builder
+docker cp temp:/ld-musl-aarch64-termux.so ./prebuilt/ld-musl-aarch64-termux.so
+docker rm temp
+```
+
+### Verifikasi
+
+```bash
+# Cek ELF
+file prebuilt/ld-musl-aarch64-termux.so
+# Output: ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked
+
+# Cek string patch
+strings prebuilt/ld-musl-aarch64-termux.so | grep -E 'resolv.conf|hosts'
+# Harus muncul path Termux prefix
+```
+
+### Catatan
+- Loader ini **hanya untuk ARM64 (aarch64)**. Untuk x64, install.mjs otomatis ambil dari Alpine minirootfs.
+- Jika Alpine naik versi major (mis. 3.22), mungkin perlu rebuild ulang loader agar kompatibel.
+- Simpan binary hasil build ke `prebuilt/ld-musl-aarch64-termux.so` dan commit.