mirror of
https://github.com/hanzoai/cdn.git
synced 2026-10-30 15:06:53 +00:00
zeekayandHanzo Dev
edabf3842c
The Market read plane is files and nothing else. This makes that actually true
and actually deployable.
Catalog: was 10 mock "zoo-eco-agent" placeholders + 5 mock tools, which every
app would have shown to every user. Now generated from the curated flatfile
catalog (hanzoai/store data/{agents,tools}) -> 23 agents + 179 tools, each with
its own detail document. Drops purchases.json: per-user state has no business
on a public CDN. Strips upstream icon URLs, which are expired presigned R2 links
that carry an AWS credential + signature in the query string.
Versioning: index.json gains `schema` (breaking-shape gate, so a client that
does not recognise it keeps its bundle) and a `version` that is a content digest
over every served document. It changes iff what we serve changes, which is what
makes a deploy checkable rather than hopeful.
One writer: gen-market.py -> market.py with `gen` and `check`. It emits the CDN
documents AND each app's offline bundle, so the two cannot disagree about the
schema; `check` re-derives the digest and validates counts, ids, dangling
featured references and per-tool details, with no network and no other checkout.
Deploy: upload, then purge the Cloudflare edge for exactly the URLs written,
then verify the live manifest matches the repo and fail if it does not. Also
resolves wrangler once instead of re-resolving it per object.
CI: hanzo.yml + a 7-line cicd.yml importing hanzoai/ci. Static assets, so no
images:/deploy: — test: is the gate.
Co-authored-by: Hanzo Dev <[email protected]>
82 lines
3.0 KiB
Bash
Executable File
82 lines
3.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Publish CDN content to cdn.hanzo.ai (Cloudflare Worker + R2), purge the edge,
|
|
# and verify what is actually being served.
|
|
#
|
|
# cdn.hanzo.ai/<path> <- Worker <- R2 pub/hanzo/<path> <- repo hanzo/<path>
|
|
#
|
|
# export CLOUDFLARE_API_TOKEN=... # R2 write + Cache Purge on the zone
|
|
# ./deploy.sh # market catalog only (default)
|
|
# SUBTREE=hanzo ./deploy.sh # the whole asset tree
|
|
#
|
|
# Purge needs CLOUDFLARE_ZONE_ID. Without it the upload still succeeds and the
|
|
# edge ages out on its own — index.json is served with a short TTL, so that is
|
|
# minutes, not forever.
|
|
set -euo pipefail
|
|
cd "$(dirname "$0")"
|
|
|
|
BUCKET="${R2_BUCKET:-pub}"
|
|
SUBTREE="${SUBTREE:-hanzo/market}"
|
|
HOST="${CDN_HOST:-cdn.hanzo.ai}"
|
|
ZONE="${CLOUDFLARE_ZONE_ID:-}"
|
|
: "${CLOUDFLARE_API_TOKEN:?set CLOUDFLARE_API_TOKEN}"
|
|
|
|
[ -d "$SUBTREE" ] || { echo "no such subtree: $SUBTREE" >&2; exit 1; }
|
|
|
|
# Resolve wrangler ONCE. This previously ran `npx --yes wrangler@latest` per
|
|
# file, which re-resolved the package on every single object.
|
|
WRANGLER=(npx --yes wrangler@4)
|
|
|
|
content_type() {
|
|
case "$1" in
|
|
*.json) echo "application/json" ;;
|
|
*.html) echo "text/html" ;;
|
|
*.svg) echo "image/svg+xml" ;;
|
|
*.png) echo "image/png" ;;
|
|
*.jpg|*.jpeg) echo "image/jpeg" ;;
|
|
*.webp) echo "image/webp" ;;
|
|
*.woff2) echo "font/woff2" ;;
|
|
*.css) echo "text/css" ;;
|
|
*.js) echo "application/javascript" ;;
|
|
*) echo "application/octet-stream" ;;
|
|
esac
|
|
}
|
|
|
|
echo "==> uploading $SUBTREE -> r2://$BUCKET/$SUBTREE"
|
|
n=0
|
|
while IFS= read -r f; do
|
|
"${WRANGLER[@]}" r2 object put "${BUCKET}/${f}" \
|
|
--file="$f" --content-type="$(content_type "$f")" --remote >/dev/null
|
|
n=$((n + 1))
|
|
printf '\r %d files' "$n"
|
|
done < <(find "$SUBTREE" -type f | sort)
|
|
echo " uploaded"
|
|
|
|
# Purge the edge for exactly what we just wrote. Cloudflare caps purge-by-url at
|
|
# 30 files per call, so send it in batches.
|
|
if [ -n "$ZONE" ]; then
|
|
echo "==> purging edge cache on $HOST"
|
|
tmp=$(mktemp -d)
|
|
trap 'rm -rf "$tmp"' EXIT
|
|
find "$SUBTREE" -type f | sed "s#^hanzo/#https://${HOST}/#" | sort > "$tmp/urls"
|
|
split -l 30 "$tmp/urls" "$tmp/batch-"
|
|
for batch in "$tmp"/batch-*; do
|
|
curl -fsS -X POST \
|
|
"https://api.cloudflare.com/client/v4/zones/${ZONE}/purge_cache" \
|
|
-H "Authorization: Bearer ${CLOUDFLARE_API_TOKEN}" \
|
|
-H "Content-Type: application/json" \
|
|
--data "$(jq -R -s -c '{files: (split("\n") | map(select(length > 0)))}' < "$batch")" \
|
|
>/dev/null
|
|
done
|
|
echo " purged $n urls"
|
|
else
|
|
echo "==> skipping purge (set CLOUDFLARE_ZONE_ID to purge on demand)"
|
|
fi
|
|
|
|
# Verify the edge serves what the repo says it should. A deploy you cannot
|
|
# observe is not a deploy.
|
|
echo "==> verifying https://${HOST}/market/index.json"
|
|
want=$(jq -r .version hanzo/market/index.json)
|
|
got=$(curl -fsS --retry 3 --retry-delay 2 "https://${HOST}/market/index.json" | jq -r .version)
|
|
[ "$want" = "$got" ] || { echo "version mismatch: repo=$want edge=$got" >&2; exit 1; }
|
|
echo " live, version $got"
|