Initial commit

src/download/checksum/checksum.ts

@@ -0,0 +1,55 @@
+import * as fs from 'fs'
+import * as crypto from 'crypto'
+
+import * as core from '@actions/core'
+import {KNOWN_CHECKSUMS} from './known-checksums'
+import {Architecture, Platform} from '../../utils/platforms'
+
+export async function validateChecksum(
+  checkSum: string | undefined,
+  downloadPath: string,
+  arch: Architecture,
+  platform: Platform,
+  version: string
+): Promise<void> {
+  let isValid = true
+  if (checkSum !== undefined && checkSum !== '') {
+    isValid = await validateFileCheckSum(downloadPath, checkSum)
+  } else {
+    core.debug(`Checksum not provided. Checking known checksums.`)
+    const key = `${arch}-${platform}-${version}`
+    if (key in KNOWN_CHECKSUMS) {
+      const knownChecksum = KNOWN_CHECKSUMS[`${arch}-${platform}-${version}`]
+      core.debug(`Checking checksum for ${arch}-${platform}-${version}.`)
+      isValid = await validateFileCheckSum(downloadPath, knownChecksum)
+    } else {
+      core.debug(`No known checksum found for ${key}.`)
+    }
+  }
+
+  if (!isValid) {
+    throw new Error(`Checksum for ${downloadPath} did not match ${checkSum}.`)
+  }
+  core.debug(`Checksum for ${downloadPath} is valid.`)
+}
+
+async function validateFileCheckSum(
+  filePath: string,
+  expected: string
+): Promise<boolean> {
+  return new Promise((resolve, reject) => {
+    const hash = crypto.createHash('sha256')
+    const stream = fs.createReadStream(filePath)
+    stream.on('error', err => reject(err))
+    stream.on('data', chunk => hash.update(chunk))
+    stream.on('end', () => {
+      const actual = hash.digest('hex')
+      resolve(actual === expected)
+    })
+  })
+}
+
+export function isknownVersion(version: string): boolean {
+  const pattern = new RegExp(`^.*-.*-${version}$`)
+  return Object.keys(KNOWN_CHECKSUMS).some(key => pattern.test(key))
+}

src/download/checksum/update-known-checksums.ts

@@ -0,0 +1,39 @@
+import {promises as fs} from 'fs'
+import * as tc from '@actions/tool-cache'
+export async function updateChecksums(
+  filePath: string,
+  downloadUrls: string[]
+): Promise<void> {
+  await fs.rm(filePath)
+  await fs.appendFile(
+    filePath,
+    '// AUTOGENERATED_DO_NOT_EDIT\nexport const KNOWN_CHECKSUMS: {[key: string]: string} = {\n'
+  )
+  let firstLine = true
+  for (const downloadUrl of downloadUrls) {
+    const content = await downloadAssetContent(downloadUrl)
+    const checksum = content.split(' ')[0].trim()
+    const key = getKey(downloadUrl)
+    if (!firstLine) {
+      await fs.appendFile(filePath, ',\n')
+    }
+    await fs.appendFile(filePath, `  '${key}':\n    '${checksum}'`)
+    firstLine = false
+  }
+  await fs.appendFile(filePath, '}\n')
+}
+
+function getKey(downloadUrl: string): string {
+  // https://github.com/astral-sh/uv/releases/download/0.3.2/uv-aarch64-apple-darwin.tar.gz.sha256
+  const parts = downloadUrl.split('/')
+  const fileName = parts[parts.length - 1]
+  const name = fileName.split('.')[0].split('uv-')[1]
+  const version = parts[parts.length - 2]
+  return `${name}-${version}`
+}
+
+async function downloadAssetContent(downloadUrl: string): Promise<string> {
+  const downloadPath = await tc.downloadTool(downloadUrl)
+  const content = await fs.readFile(downloadPath, 'utf8')
+  return content
+}

src/download/download-latest.ts

@@ -0,0 +1,64 @@
+import * as core from '@actions/core'
+import * as tc from '@actions/tool-cache'
+import * as path from 'path'
+import * as exec from '@actions/exec'
+import {Architecture, Platform} from '../utils/platforms'
+import {validateChecksum} from './checksum/checksum'
+import {OWNER, REPO} from '../utils/utils'
+
+export async function downloadLatest(
+  platform: Platform,
+  arch: Architecture,
+  checkSum: string | undefined,
+  githubToken: string | undefined
+): Promise<{downloadDir: string; version: string}> {
+  const binary = `uv-${arch}-${platform}`
+  let downloadUrl = `https://github.com/${OWNER}/${REPO}/releases/latest/download/${binary}`
+  if (platform === 'pc-windows-msvc') {
+    downloadUrl += '.zip'
+  } else {
+    downloadUrl += '.tar.gz'
+  }
+  core.info(`Downloading uv from "${downloadUrl}" ...`)
+
+  const downloadDir = `${process.cwd()}${path.sep}uv`
+  const downloadPath = await tc.downloadTool(
+    downloadUrl,
+    downloadDir,
+    githubToken
+  )
+  let uvExecutablePath: string
+  let extracted: string
+  if (platform === 'pc-windows-msvc') {
+    extracted = await tc.extractZip(downloadPath)
+    uvExecutablePath = path.join(extracted, 'uv.exe')
+  } else {
+    extracted = await tc.extractTar(downloadPath)
+    uvExecutablePath = path.join(extracted, 'uv')
+  }
+  const version = await getVersion(uvExecutablePath)
+  await validateChecksum(checkSum, downloadPath, arch, platform, version)
+
+  return {downloadDir, version}
+}
+
+async function getVersion(uvExecutablePath: string): Promise<string> {
+  // Parse the output of `uv --version` to get the version
+  // The output looks like
+  // uv 0.3.1 (be17d132a 2024-08-21)
+
+  const options: exec.ExecOptions = {
+    silent: !core.isDebug()
+  }
+  const execArgs = ['--version']
+
+  let output = ''
+  options.listeners = {
+    stdout: (data: Buffer) => {
+      output += data.toString()
+    }
+  }
+  await exec.exec(uvExecutablePath, execArgs, options)
+  const parts = output.split(' ')
+  return parts[1]
+}

src/download/download-version.ts

@@ -0,0 +1,48 @@
+import * as core from '@actions/core'
+import * as tc from '@actions/tool-cache'
+import {OWNER, REPO, TOOL_CACHE_NAME} from '../utils/utils'
+import path from 'path'
+import {Architecture, Platform} from '../utils/platforms'
+import {validateChecksum} from './checksum/checksum'
+
+export function tryGetFromToolCache(
+  arch: Architecture,
+  version: string
+): string | undefined {
+  core.debug(`Trying to get uv from tool cache for ${version}...`)
+  const cachedVersions = tc.findAllVersions(TOOL_CACHE_NAME, arch)
+  core.debug(`Cached versions: ${cachedVersions}`)
+  return tc.find(TOOL_CACHE_NAME, version, arch)
+}
+
+export async function downloadVersion(
+  platform: Platform,
+  arch: Architecture,
+  version: string,
+  checkSum: string | undefined,
+  githubToken: string | undefined
+): Promise<string> {
+  const binary = `uv-${arch}-${platform}`
+  let downloadUrl = `https://github.com/${OWNER}/${REPO}/releases/download/${version}/${binary}`
+  if (platform === 'pc-windows-msvc') {
+    downloadUrl += '.zip'
+  } else {
+    downloadUrl += '.tar.gz'
+  }
+  core.info(`Downloading uv from "${downloadUrl}" ...`)
+
+  const downloadDir = `${process.cwd()}${path.sep}uv`
+  const downloadPath = await tc.downloadTool(
+    downloadUrl,
+    downloadDir,
+    githubToken
+  )
+  await validateChecksum(checkSum, downloadPath, arch, platform, version)
+
+  if (platform === 'pc-windows-msvc') {
+    await tc.extractZip(downloadPath)
+  } else {
+    tc.extractTar(downloadPath)
+  }
+  return downloadPath
+}