@jami-studio/core 0.92.36 → 0.92.37

package/dist/deploy/workspace-build-cache.js

@@ -0,0 +1,258 @@
+/**
+ * Content-hash build cache for `agent-native deploy` workspace builds.
+ *
+ * Rebuilding every app on every workspace deploy is pure waste when only a
+ * few apps changed. Each app's build is a deterministic function of:
+ *
+ *   1. The app directory's source files (excluding build outputs + deps).
+ *   2. The workspace-local packages it depends on via `workspace:*`.
+ *   3. The root lockfile (captures every registry dependency version,
+ *      including the framework runtime itself).
+ *   4. The environment the build is invoked with: the deploy preset, the
+ *      computed per-app env block (base path, audience, workspace manifest,
+ *      gateway URL, ...) and any ambient env Vite/Nitro can bake into the
+ *      bundle (`VITE_*`, `AGENT_NATIVE_*`, `WORKSPACE_*`, ...).
+ *   5. The version of this package doing the building.
+ *
+ * When all of that is byte-identical to the previous run AND the app's
+ * previous build output still exists on disk, the build is skipped and the
+ * existing output is reused. The workspace output assembly (copy into
+ * dist/, manifests, dedupe, routing) always runs fresh — it is cheap and
+ * keeps the artifact deterministic.
+ *
+ * Safety posture: a false MISS costs one redundant rebuild; a false HIT
+ * ships a stale artifact. Every choice below prefers false misses — full
+ * content hashing (no mtimes), lockfile-wide invalidation, and the entire
+ * invocation env block folded into the key.
+ *
+ * Opt out with `--no-build-cache` or AGENT_NATIVE_WORKSPACE_BUILD_CACHE=0.
+ */
+import crypto from "crypto";
+import fs from "fs";
+import path from "path";
+/** Directories inside an app that are build outputs or dependencies — never
+ * build inputs. Everything else in the app dir participates in the hash. */
+const EXCLUDED_APP_DIRS = new Set([
+    "node_modules",
+    "dist",
+    "build",
+    ".output",
+    ".deploy-tmp",
+    ".netlify",
+    ".vercel",
+    ".react-router",
+    ".cache",
+    ".turbo",
+    ".git",
+]);
+/** Ambient process.env prefixes that can be baked into app bundles. */
+const ENV_PREFIXES = ["VITE_", "AGENT_NATIVE_", "WORKSPACE_", "NETLIFY_"];
+const ENV_EXACT_KEYS = [
+    "APP_URL",
+    "BETTER_AUTH_URL",
+    "DATABASE_URL",
+    "NITRO_PRESET",
+    "NODE_ENV",
+];
+const STAMP_DIR = path.join("node_modules", ".cache", "agent-native");
+const STAMP_FILE = "workspace-build.json";
+export function isWorkspaceBuildCacheEnabled(rawArgs) {
+    if (rawArgs.includes("--no-build-cache"))
+        return false;
+    const env = process.env.AGENT_NATIVE_WORKSPACE_BUILD_CACHE;
+    if (env === "0" || env === "false")
+        return false;
+    return true;
+}
+/** Compute the cache key for one app build. Returns null when hashing is not
+ * possible (treat as cache miss — never as a hit). */
+export function computeWorkspaceAppBuildHash(opts) {
+    try {
+        const hash = crypto.createHash("sha256");
+        hash.update(`builder:${opts.builderVersion}\0`);
+        hash.update(`preset:${opts.preset}\0`);
+        // 1. App sources.
+        hashDirInto(hash, opts.appDir, opts.appDir);
+        // 2. workspace:* dependency packages (source-level inputs the lockfile
+        //    does not pin).
+        for (const depDir of resolveWorkspaceDepDirs(opts.workspaceRoot, opts.appDir)) {
+            hash.update(`workspace-dep:${path.basename(depDir)}\0`);
+            hashDirInto(hash, depDir, depDir);
+        }
+        // 3. Root lockfile — pins every registry dependency (framework runtime
+        //    included), so a core bump or any dep change invalidates all apps.
+        for (const lock of ["pnpm-lock.yaml", "package-lock.json", "yarn.lock"]) {
+            const lockPath = path.join(opts.workspaceRoot, lock);
+            if (fs.existsSync(lockPath)) {
+                hash.update(`lock:${lock}\0`);
+                hash.update(fs.readFileSync(lockPath));
+                hash.update("\0");
+            }
+        }
+        // 4. Invocation env: the computed per-app block plus ambient bakeable
+        //    env. Values are hashed, never stored.
+        const envEntries = [];
+        for (const [key, value] of Object.entries(opts.buildEnv)) {
+            if (value !== undefined)
+                envEntries.push(`${key}=${value}`);
+        }
+        for (const [key, value] of Object.entries(process.env)) {
+            if (value === undefined)
+                continue;
+            if (key in opts.buildEnv)
+                continue; // computed block wins
+            const relevant = ENV_EXACT_KEYS.includes(key) ||
+                ENV_PREFIXES.some((p) => key.startsWith(p));
+            if (relevant)
+                envEntries.push(`${key}=${value}`);
+        }
+        envEntries.sort();
+        hash.update(`env:${envEntries.join("\n")}\0`);
+        return hash.digest("hex");
+    }
+    catch {
+        return null;
+    }
+}
+/** True when the app's previous build can be reused as-is. */
+export function workspaceAppBuildCacheHit(opts, hashValue) {
+    if (!hashValue)
+        return false;
+    const stamp = readStamp(opts.appDir);
+    if (!stamp || stamp.hash !== hashValue || stamp.preset !== opts.preset) {
+        return false;
+    }
+    return requiredOutputsExist(opts.appDir, opts.preset);
+}
+/** Record a successful build so the next identical run can skip it. */
+export function writeWorkspaceAppBuildStamp(opts, hashValue) {
+    if (!hashValue)
+        return;
+    try {
+        const dir = path.join(opts.appDir, STAMP_DIR);
+        fs.mkdirSync(dir, { recursive: true });
+        fs.writeFileSync(path.join(dir, STAMP_FILE), JSON.stringify({
+            hash: hashValue,
+            preset: opts.preset,
+            builderVersion: opts.builderVersion,
+            createdAt: new Date().toISOString(),
+        }, null, 2));
+    }
+    catch {
+        // Best-effort: a missing stamp only costs a rebuild next time.
+    }
+}
+function readStamp(appDir) {
+    try {
+        const raw = fs.readFileSync(path.join(appDir, STAMP_DIR, STAMP_FILE), "utf-8");
+        const parsed = JSON.parse(raw);
+        if (typeof parsed.hash !== "string" || typeof parsed.preset !== "string") {
+            return null;
+        }
+        return { hash: parsed.hash, preset: parsed.preset };
+    }
+    catch {
+        return null;
+    }
+}
+function requiredOutputsExist(appDir, preset) {
+    if (preset === "vercel") {
+        return fs.existsSync(path.join(appDir, ".vercel", "output"));
+    }
+    const buildOut = fs.existsSync(path.join(appDir, "dist")) ||
+        fs.existsSync(path.join(appDir, ".output"));
+    if (!buildOut)
+        return false;
+    if (preset === "netlify") {
+        return fs.existsSync(path.join(appDir, ".netlify", "functions-internal", "server"));
+    }
+    return true;
+}
+/** Deterministically hash every build-input file under `dir`. */
+function hashDirInto(hash, dir, rootDir) {
+    let entries;
+    try {
+        entries = fs.readdirSync(dir, { withFileTypes: true });
+    }
+    catch {
+        return;
+    }
+    entries.sort((a, b) => a.name.localeCompare(b.name));
+    for (const entry of entries) {
+        if (entry.name.startsWith(".DS_"))
+            continue;
+        const full = path.join(dir, entry.name);
+        if (entry.isDirectory()) {
+            if (dir === rootDir && EXCLUDED_APP_DIRS.has(entry.name))
+                continue;
+            // Nested node_modules (e.g. inside checked-in fixtures) are still deps.
+            if (entry.name === "node_modules")
+                continue;
+            hashDirInto(hash, full, rootDir);
+        }
+        else if (entry.isFile()) {
+            const rel = path.relative(rootDir, full).split(path.sep).join("/");
+            hash.update(`f:${rel}\0`);
+            try {
+                hash.update(fs.readFileSync(full));
+            }
+            catch {
+                hash.update("<unreadable>");
+            }
+            hash.update("\0");
+        }
+        // Symlinks and other entry types are skipped: their targets are either
+        // covered elsewhere (workspace deps) or not build inputs.
+    }
+}
+/** Resolve the app's `workspace:*` dependencies to their package dirs. */
+function resolveWorkspaceDepDirs(workspaceRoot, appDir) {
+    const dirs = [];
+    let pkg;
+    try {
+        pkg = JSON.parse(fs.readFileSync(path.join(appDir, "package.json"), "utf-8"));
+    }
+    catch {
+        return dirs;
+    }
+    const workspaceDepNames = Object.entries({
+        ...pkg.dependencies,
+        ...pkg.devDependencies,
+    })
+        .filter(([, spec]) => typeof spec === "string" && spec.startsWith("workspace:"))
+        .map(([name]) => name);
+    if (workspaceDepNames.length === 0)
+        return dirs;
+    const packagesDir = path.join(workspaceRoot, "packages");
+    let candidates = [];
+    try {
+        candidates = fs
+            .readdirSync(packagesDir, { withFileTypes: true })
+            .filter((e) => e.isDirectory())
+            .map((e) => path.join(packagesDir, e.name));
+    }
+    catch {
+        return dirs;
+    }
+    const byName = new Map();
+    for (const candidate of candidates) {
+        try {
+            const name = JSON.parse(fs.readFileSync(path.join(candidate, "package.json"), "utf-8")).name;
+            if (typeof name === "string")
+                byName.set(name, candidate);
+        }
+        catch {
+            // skip unreadable packages
+        }
+    }
+    for (const depName of workspaceDepNames.sort()) {
+        const dir = byName.get(depName);
+        if (dir)
+            dirs.push(dir);
+        // Unresolvable workspace deps fall back to lockfile coverage; the sorted
+        // dep-name list itself is not hashed separately because package.json is
+        // already part of the app-source hash.
+    }
+    return dirs;
+}
+//# sourceMappingURL=workspace-build-cache.js.map

package/dist/deploy/workspace-build-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-build-cache.js","sourceRoot":"","sources":["../../src/deploy/workspace-build-cache.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB;4EAC4E;AAC5E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,cAAc;IACd,MAAM;IACN,OAAO;IACP,SAAS;IACT,aAAa;IACb,UAAU;IACV,SAAS;IACT,eAAe;IACf,QAAQ;IACR,QAAQ;IACR,MAAM;CACP,CAAC,CAAC;AAEH,uEAAuE;AACvE,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;AAC1E,MAAM,cAAc,GAAG;IACrB,SAAS;IACT,iBAAiB;IACjB,cAAc;IACd,cAAc;IACd,UAAU;CACX,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;AACtE,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAc1C,MAAM,UAAU,4BAA4B,CAAC,OAAiB;IAC5D,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC;IAC3D,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;sDACsD;AACtD,MAAM,UAAU,4BAA4B,CAC1C,IAAgC;IAEhC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,cAAc,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QAEvC,kBAAkB;QAClB,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAE5C,uEAAuE;QACvE,oBAAoB;QACpB,KAAK,MAAM,MAAM,IAAI,uBAAuB,CAC1C,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,MAAM,CACZ,EAAE,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxD,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QAED,uEAAuE;QACvE,uEAAuE;QACvE,KAAK,MAAM,IAAI,IAAI,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,WAAW,CAAC,EAAE,CAAC;YACxE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YACrD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC;gBAC9B,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACvC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QAED,sEAAsE;QACtE,2CAA2C;QAC3C,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzD,IAAI,KAAK,KAAK,SAAS;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvD,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,IAAI,GAAG,IAAI,IAAI,CAAC,QAAQ;gBAAE,SAAS,CAAC,sBAAsB;YAC1D,MAAM,QAAQ,GACZ,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAC5B,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,IAAI,QAAQ;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,UAAU,CAAC,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,MAAM,CAAC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE9C,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,yBAAyB,CACvC,IAAgC,EAChC,SAAwB;IAExB,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACvE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,oBAAoB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;AACxD,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,2BAA2B,CACzC,IAAgC,EAChC,SAAwB;IAExB,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC9C,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,EAC1B,IAAI,CAAC,SAAS,CACZ;YACE,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;IACjE,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAChB,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CACzB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,EACxC,OAAO,CACR,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyC,CAAC;QACvE,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAc,EAAE,MAAc;IAC1D,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,QAAQ,GACZ,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC,UAAU,CAClB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CAC9D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iEAAiE;AACjE,SAAS,WAAW,CAClB,IAAiB,EACjB,GAAW,EACX,OAAe;IAEf,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,SAAS;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,GAAG,KAAK,OAAO,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACnE,wEAAwE;YACxE,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAAE,SAAS;YAC5C,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;YAC1B,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,uEAAuE;QACvE,0DAA0D;IAC5D,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,SAAS,uBAAuB,CAC9B,aAAqB,EACrB,MAAc;IAEd,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,GAGH,CAAC;IACF,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CACd,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAC5D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC;QACvC,GAAG,GAAG,CAAC,YAAY;QACnB,GAAG,GAAG,CAAC,eAAe;KACvB,CAAC;SACC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;SAC/E,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IACzD,IAAI,UAAU,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC;QACH,UAAU,GAAG,EAAE;aACZ,WAAW,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GACR,IAAI,CAAC,KAAK,CACR,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAEjE,CAAC,IAAI,CAAC;YACP,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,GAAG;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,yEAAyE;QACzE,wEAAwE;QACxE,uCAAuC;IACzC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC","sourcesContent":["/**\r\n * Content-hash build cache for `agent-native deploy` workspace builds.\r\n *\r\n * Rebuilding every app on every workspace deploy is pure waste when only a\r\n * few apps changed. Each app's build is a deterministic function of:\r\n *\r\n *   1. The app directory's source files (excluding build outputs + deps).\r\n *   2. The workspace-local packages it depends on via `workspace:*`.\r\n *   3. The root lockfile (captures every registry dependency version,\r\n *      including the framework runtime itself).\r\n *   4. The environment the build is invoked with: the deploy preset, the\r\n *      computed per-app env block (base path, audience, workspace manifest,\r\n *      gateway URL, ...) and any ambient env Vite/Nitro can bake into the\r\n *      bundle (`VITE_*`, `AGENT_NATIVE_*`, `WORKSPACE_*`, ...).\r\n *   5. The version of this package doing the building.\r\n *\r\n * When all of that is byte-identical to the previous run AND the app's\r\n * previous build output still exists on disk, the build is skipped and the\r\n * existing output is reused. The workspace output assembly (copy into\r\n * dist/, manifests, dedupe, routing) always runs fresh — it is cheap and\r\n * keeps the artifact deterministic.\r\n *\r\n * Safety posture: a false MISS costs one redundant rebuild; a false HIT\r\n * ships a stale artifact. Every choice below prefers false misses — full\r\n * content hashing (no mtimes), lockfile-wide invalidation, and the entire\r\n * invocation env block folded into the key.\r\n *\r\n * Opt out with `--no-build-cache` or AGENT_NATIVE_WORKSPACE_BUILD_CACHE=0.\r\n */\r\nimport crypto from \"crypto\";\r\nimport fs from \"fs\";\r\nimport path from \"path\";\r\n\r\n/** Directories inside an app that are build outputs or dependencies — never\r\n * build inputs. Everything else in the app dir participates in the hash. */\r\nconst EXCLUDED_APP_DIRS = new Set([\r\n  \"node_modules\",\r\n  \"dist\",\r\n  \"build\",\r\n  \".output\",\r\n  \".deploy-tmp\",\r\n  \".netlify\",\r\n  \".vercel\",\r\n  \".react-router\",\r\n  \".cache\",\r\n  \".turbo\",\r\n  \".git\",\r\n]);\r\n\r\n/** Ambient process.env prefixes that can be baked into app bundles. */\r\nconst ENV_PREFIXES = [\"VITE_\", \"AGENT_NATIVE_\", \"WORKSPACE_\", \"NETLIFY_\"];\r\nconst ENV_EXACT_KEYS = [\r\n  \"APP_URL\",\r\n  \"BETTER_AUTH_URL\",\r\n  \"DATABASE_URL\",\r\n  \"NITRO_PRESET\",\r\n  \"NODE_ENV\",\r\n];\r\n\r\nconst STAMP_DIR = path.join(\"node_modules\", \".cache\", \"agent-native\");\r\nconst STAMP_FILE = \"workspace-build.json\";\r\n\r\nexport interface WorkspaceBuildCacheOptions {\r\n  workspaceRoot: string;\r\n  appDir: string;\r\n  app: string;\r\n  preset: string;\r\n  /** The exact env block the app build is invoked with (delta over\r\n   * process.env computed by the deploy orchestrator). */\r\n  buildEnv: Record<string, string | undefined>;\r\n  /** Version of the framework package performing the build. */\r\n  builderVersion: string;\r\n}\r\n\r\nexport function isWorkspaceBuildCacheEnabled(rawArgs: string[]): boolean {\r\n  if (rawArgs.includes(\"--no-build-cache\")) return false;\r\n  const env = process.env.AGENT_NATIVE_WORKSPACE_BUILD_CACHE;\r\n  if (env === \"0\" || env === \"false\") return false;\r\n  return true;\r\n}\r\n\r\n/** Compute the cache key for one app build. Returns null when hashing is not\r\n * possible (treat as cache miss — never as a hit). */\r\nexport function computeWorkspaceAppBuildHash(\r\n  opts: WorkspaceBuildCacheOptions,\r\n): string | null {\r\n  try {\r\n    const hash = crypto.createHash(\"sha256\");\r\n    hash.update(`builder:${opts.builderVersion}\\0`);\r\n    hash.update(`preset:${opts.preset}\\0`);\r\n\r\n    // 1. App sources.\r\n    hashDirInto(hash, opts.appDir, opts.appDir);\r\n\r\n    // 2. workspace:* dependency packages (source-level inputs the lockfile\r\n    //    does not pin).\r\n    for (const depDir of resolveWorkspaceDepDirs(\r\n      opts.workspaceRoot,\r\n      opts.appDir,\r\n    )) {\r\n      hash.update(`workspace-dep:${path.basename(depDir)}\\0`);\r\n      hashDirInto(hash, depDir, depDir);\r\n    }\r\n\r\n    // 3. Root lockfile — pins every registry dependency (framework runtime\r\n    //    included), so a core bump or any dep change invalidates all apps.\r\n    for (const lock of [\"pnpm-lock.yaml\", \"package-lock.json\", \"yarn.lock\"]) {\r\n      const lockPath = path.join(opts.workspaceRoot, lock);\r\n      if (fs.existsSync(lockPath)) {\r\n        hash.update(`lock:${lock}\\0`);\r\n        hash.update(fs.readFileSync(lockPath));\r\n        hash.update(\"\\0\");\r\n      }\r\n    }\r\n\r\n    // 4. Invocation env: the computed per-app block plus ambient bakeable\r\n    //    env. Values are hashed, never stored.\r\n    const envEntries: string[] = [];\r\n    for (const [key, value] of Object.entries(opts.buildEnv)) {\r\n      if (value !== undefined) envEntries.push(`${key}=${value}`);\r\n    }\r\n    for (const [key, value] of Object.entries(process.env)) {\r\n      if (value === undefined) continue;\r\n      if (key in opts.buildEnv) continue; // computed block wins\r\n      const relevant =\r\n        ENV_EXACT_KEYS.includes(key) ||\r\n        ENV_PREFIXES.some((p) => key.startsWith(p));\r\n      if (relevant) envEntries.push(`${key}=${value}`);\r\n    }\r\n    envEntries.sort();\r\n    hash.update(`env:${envEntries.join(\"\\n\")}\\0`);\r\n\r\n    return hash.digest(\"hex\");\r\n  } catch {\r\n    return null;\r\n  }\r\n}\r\n\r\n/** True when the app's previous build can be reused as-is. */\r\nexport function workspaceAppBuildCacheHit(\r\n  opts: WorkspaceBuildCacheOptions,\r\n  hashValue: string | null,\r\n): boolean {\r\n  if (!hashValue) return false;\r\n  const stamp = readStamp(opts.appDir);\r\n  if (!stamp || stamp.hash !== hashValue || stamp.preset !== opts.preset) {\r\n    return false;\r\n  }\r\n  return requiredOutputsExist(opts.appDir, opts.preset);\r\n}\r\n\r\n/** Record a successful build so the next identical run can skip it. */\r\nexport function writeWorkspaceAppBuildStamp(\r\n  opts: WorkspaceBuildCacheOptions,\r\n  hashValue: string | null,\r\n): void {\r\n  if (!hashValue) return;\r\n  try {\r\n    const dir = path.join(opts.appDir, STAMP_DIR);\r\n    fs.mkdirSync(dir, { recursive: true });\r\n    fs.writeFileSync(\r\n      path.join(dir, STAMP_FILE),\r\n      JSON.stringify(\r\n        {\r\n          hash: hashValue,\r\n          preset: opts.preset,\r\n          builderVersion: opts.builderVersion,\r\n          createdAt: new Date().toISOString(),\r\n        },\r\n        null,\r\n        2,\r\n      ),\r\n    );\r\n  } catch {\r\n    // Best-effort: a missing stamp only costs a rebuild next time.\r\n  }\r\n}\r\n\r\nfunction readStamp(\r\n  appDir: string,\r\n): { hash: string; preset: string } | null {\r\n  try {\r\n    const raw = fs.readFileSync(\r\n      path.join(appDir, STAMP_DIR, STAMP_FILE),\r\n      \"utf-8\",\r\n    );\r\n    const parsed = JSON.parse(raw) as { hash?: unknown; preset?: unknown };\r\n    if (typeof parsed.hash !== \"string\" || typeof parsed.preset !== \"string\") {\r\n      return null;\r\n    }\r\n    return { hash: parsed.hash, preset: parsed.preset };\r\n  } catch {\r\n    return null;\r\n  }\r\n}\r\n\r\nfunction requiredOutputsExist(appDir: string, preset: string): boolean {\r\n  if (preset === \"vercel\") {\r\n    return fs.existsSync(path.join(appDir, \".vercel\", \"output\"));\r\n  }\r\n  const buildOut =\r\n    fs.existsSync(path.join(appDir, \"dist\")) ||\r\n    fs.existsSync(path.join(appDir, \".output\"));\r\n  if (!buildOut) return false;\r\n  if (preset === \"netlify\") {\r\n    return fs.existsSync(\r\n      path.join(appDir, \".netlify\", \"functions-internal\", \"server\"),\r\n    );\r\n  }\r\n  return true;\r\n}\r\n\r\n/** Deterministically hash every build-input file under `dir`. */\r\nfunction hashDirInto(\r\n  hash: crypto.Hash,\r\n  dir: string,\r\n  rootDir: string,\r\n): void {\r\n  let entries: fs.Dirent[];\r\n  try {\r\n    entries = fs.readdirSync(dir, { withFileTypes: true });\r\n  } catch {\r\n    return;\r\n  }\r\n  entries.sort((a, b) => a.name.localeCompare(b.name));\r\n  for (const entry of entries) {\r\n    if (entry.name.startsWith(\".DS_\")) continue;\r\n    const full = path.join(dir, entry.name);\r\n    if (entry.isDirectory()) {\r\n      if (dir === rootDir && EXCLUDED_APP_DIRS.has(entry.name)) continue;\r\n      // Nested node_modules (e.g. inside checked-in fixtures) are still deps.\r\n      if (entry.name === \"node_modules\") continue;\r\n      hashDirInto(hash, full, rootDir);\r\n    } else if (entry.isFile()) {\r\n      const rel = path.relative(rootDir, full).split(path.sep).join(\"/\");\r\n      hash.update(`f:${rel}\\0`);\r\n      try {\r\n        hash.update(fs.readFileSync(full));\r\n      } catch {\r\n        hash.update(\"<unreadable>\");\r\n      }\r\n      hash.update(\"\\0\");\r\n    }\r\n    // Symlinks and other entry types are skipped: their targets are either\r\n    // covered elsewhere (workspace deps) or not build inputs.\r\n  }\r\n}\r\n\r\n/** Resolve the app's `workspace:*` dependencies to their package dirs. */\r\nfunction resolveWorkspaceDepDirs(\r\n  workspaceRoot: string,\r\n  appDir: string,\r\n): string[] {\r\n  const dirs: string[] = [];\r\n  let pkg: {\r\n    dependencies?: Record<string, string>;\r\n    devDependencies?: Record<string, string>;\r\n  };\r\n  try {\r\n    pkg = JSON.parse(\r\n      fs.readFileSync(path.join(appDir, \"package.json\"), \"utf-8\"),\r\n    );\r\n  } catch {\r\n    return dirs;\r\n  }\r\n  const workspaceDepNames = Object.entries({\r\n    ...pkg.dependencies,\r\n    ...pkg.devDependencies,\r\n  })\r\n    .filter(([, spec]) => typeof spec === \"string\" && spec.startsWith(\"workspace:\"))\r\n    .map(([name]) => name);\r\n  if (workspaceDepNames.length === 0) return dirs;\r\n\r\n  const packagesDir = path.join(workspaceRoot, \"packages\");\r\n  let candidates: string[] = [];\r\n  try {\r\n    candidates = fs\r\n      .readdirSync(packagesDir, { withFileTypes: true })\r\n      .filter((e) => e.isDirectory())\r\n      .map((e) => path.join(packagesDir, e.name));\r\n  } catch {\r\n    return dirs;\r\n  }\r\n  const byName = new Map<string, string>();\r\n  for (const candidate of candidates) {\r\n    try {\r\n      const name = (\r\n        JSON.parse(\r\n          fs.readFileSync(path.join(candidate, \"package.json\"), \"utf-8\"),\r\n        ) as { name?: string }\r\n      ).name;\r\n      if (typeof name === \"string\") byName.set(name, candidate);\r\n    } catch {\r\n      // skip unreadable packages\r\n    }\r\n  }\r\n  for (const depName of workspaceDepNames.sort()) {\r\n    const dir = byName.get(depName);\r\n    if (dir) dirs.push(dir);\r\n    // Unresolvable workspace deps fall back to lockfile coverage; the sorted\r\n    // dep-name list itself is not hashed separately because package.json is\r\n    // already part of the app-source hash.\r\n  }\r\n  return dirs;\r\n}\r\n"]}

package/dist/deploy/workspace-deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-deploy.d.ts","sourceRoot":"","sources":["../../src/deploy/workspace-deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAqB7C,MAAM,MAAM,qBAAqB,GAAG,kBAAkB,GAAG,SAAS,GAAG,QAAQ,CAAC;AAiD9E,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,qDAAqD;IACrD,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,qDAAqD;IACrD,QAAQ,CAAC,EAAE,OAAO,YAAY,CAAC;CAChC;AAED,wBAAsB,kBAAkB,CACtC,IAAI,GAAE,sBAA2B,GAChC,OAAO,CAAC,IAAI,CAAC,CA0Gf;AA0MD;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,GACb,MAAM,EAAE,CAmCV"}
+{"version":3,"file":"workspace-deploy.d.ts","sourceRoot":"","sources":["../../src/deploy/workspace-deploy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AA4B7C,MAAM,MAAM,qBAAqB,GAAG,kBAAkB,GAAG,SAAS,GAAG,QAAQ,CAAC;AA8D9E,MAAM,WAAW,sBAAsB;IACrC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,qDAAqD;IACrD,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,qDAAqD;IACrD,QAAQ,CAAC,EAAE,OAAO,YAAY,CAAC;CAChC;AAED,wBAAsB,kBAAkB,CACtC,IAAI,GAAE,sBAA2B,GAChC,OAAO,CAAC,IAAI,CAAC,CA8Hf;AAmOD;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,GACb,MAAM,EAAE,CAmCV"}

package/dist/deploy/workspace-deploy.js

@@ -17,8 +17,10 @@
 import { execFileSync } from "child_process";
 import fs from "fs";
 import path from "path";
+import { fileURLToPath } from "url";
 import { AGENT_CHAT_PROCESS_RUN_PATH } from "../agent/durable-background.js";
 import { findWorkspaceRoot } from "../scripts/utils.js";
+import { computeWorkspaceAppBuildHash, isWorkspaceBuildCacheEnabled, workspaceAppBuildCacheHit, writeWorkspaceAppBuildStamp, } from "./workspace-build-cache.js";
 import { DEFAULT_WORKSPACE_APP_AUDIENCE, normalizeWorkspaceAppAudience, normalizeWorkspaceAppPathList, workspaceAppAudienceFromPackageJson, workspaceAppRouteAccessFromPackageJson, } from "../shared/workspace-app-audience.js";
 import { DISPATCH_WORKSPACE_ROOT_REDIRECTS } from "../shared/workspace-app-id.js";
 import { collectImmutableAssetPaths, IMMUTABLE_ASSET_CACHE_HEADERS, } from "./immutable-assets.js";
@@ -48,6 +50,15 @@ const WORKSPACE_APPS_ENV_KEY = "AGENT_NATIVE_WORKSPACE_APPS_JSON";
 const WORKSPACE_APPS_MANIFEST_DIR = ".agent-native";
 const WORKSPACE_APPS_MANIFEST_FILE = "workspace-apps.json";
 const VERCEL_OUTPUT_DIR = ".vercel/output";
+// Version of this package — folds into the build-cache key so upgrading the
+// framework invalidates every cached app build.
+let BUILDER_VERSION = "unknown";
+try {
+    const __dirname = path.dirname(fileURLToPath(import.meta.url));
+    // dist/deploy/workspace-deploy.js → ../../package.json
+    BUILDER_VERSION = JSON.parse(fs.readFileSync(path.resolve(__dirname, "../../package.json"), "utf-8")).version ?? "unknown";
+}
+catch { }
 export async function runWorkspaceDeploy(opts = {}) {
     const workspaceRoot = opts.workspaceRoot ?? findWorkspaceRoot(process.cwd()) ?? process.cwd();
     const appsDir = path.join(workspaceRoot, "apps");
@@ -89,11 +100,21 @@ export async function runWorkspaceDeploy(opts = {}) {
         fs.mkdirSync(functionsDir, { recursive: true });
     }
     console.log(`[workspace-deploy] Building ${apps.length} app(s) for preset=${preset}`);
+    const buildCacheEnabled = isWorkspaceBuildCacheEnabled(rawArgs);
+    if (!buildCacheEnabled) {
+        console.log(`[workspace-deploy] Build cache disabled — rebuilding every app.`);
+    }
+    let cachedCount = 0;
     const execFile = opts.execFile ?? execFileSync;
     for (const app of apps) {
-        buildOneApp(workspaceRoot, app, preset, execFile, workspaceApps);
+        const skipped = buildOneApp(workspaceRoot, app, preset, execFile, workspaceApps, buildCacheEnabled);
+        if (skipped)
+            cachedCount++;
         moveAppBuildIntoWorkspaceOutput(workspaceRoot, app, preset, distDir, vercelOutputDir, workspaceApps);
     }
+    if (buildCacheEnabled && cachedCount > 0) {
+        console.log(`[workspace-deploy] Build cache: reused ${cachedCount}/${apps.length} unchanged app build(s), rebuilt ${apps.length - cachedCount}.`);
+    }
     writeWorkspaceAppManifests(workspaceRoot, distDir, apps, workspaceApps, preset);
     if (preset === "netlify") {
         writeNetlifyRedirects(distDir, apps);
@@ -124,7 +145,7 @@ export async function runWorkspaceDeploy(opts = {}) {
     }
     console.log(`All apps live at https://<origin>/<app-name>/*. Log in once on any app\nand the session is shared across the workspace.`);
 }
-function buildOneApp(workspaceRoot, app, preset, execFile, workspaceApps) {
+function buildOneApp(workspaceRoot, app, preset, execFile, workspaceApps, buildCacheEnabled) {
     const appDir = path.join(workspaceRoot, "apps", app);
     const workspaceAppAudience = workspaceAppAudienceForApp(workspaceApps, app);
     const workspaceAppRouteAccess = workspaceAppRouteAccessForApp(workspaceApps, app);
@@ -174,6 +195,24 @@ function buildOneApp(workspaceRoot, app, preset, execFile, workspaceApps) {
                 process.env.DATABASE_URL ??
                 env.DATABASE_URL;
     }
+    // Content-hash cache: when the app's sources, workspace deps, lockfile,
+    // and invocation env are byte-identical to the previous successful build
+    // (and its output still exists), reuse it instead of rebuilding.
+    const cacheOpts = {
+        workspaceRoot,
+        appDir,
+        app,
+        preset,
+        buildEnv: buildCacheEnvDelta(env),
+        builderVersion: BUILDER_VERSION,
+    };
+    const buildHash = buildCacheEnabled
+        ? computeWorkspaceAppBuildHash(cacheOpts)
+        : null;
+    if (buildCacheEnabled && workspaceAppBuildCacheHit(cacheOpts, buildHash)) {
+        console.log(`[workspace-deploy] ${app} unchanged — reusing cached build (base=/${app}, preset=${preset})`);
+        return true;
+    }
     console.log(`[workspace-deploy] Building ${app} (base=/${app}, preset=${preset})`);
     cleanAppBuildOutputs(appDir);
     // Windows: app builds occasionally die with a native access violation
@@ -191,7 +230,10 @@ function buildOneApp(workspaceRoot, app, preset, execFile, workspaceApps) {
                 env,
                 stdio: "inherit",
             });
-            return;
+            if (buildCacheEnabled) {
+                writeWorkspaceAppBuildStamp(cacheOpts, buildHash);
+            }
+            return false;
         }
         catch (error) {
             const status = error?.status ?? null;
@@ -854,6 +896,17 @@ function netlifyPublicRootAssetPaths(app, staticDir) {
 function netlifyFunctionsDir(workspaceRoot) {
     return path.join(workspaceRoot, ".netlify", "functions-internal");
 }
+/** The per-app build env is `{...process.env, ...computed}` — only the
+ * computed delta belongs in the cache key (ambient env is covered by the
+ * cache module's own prefix filter, machine noise like PATH stays out). */
+function buildCacheEnvDelta(env) {
+    const delta = {};
+    for (const [key, value] of Object.entries(env)) {
+        if (process.env[key] !== value)
+            delta[key] = value;
+    }
+    return delta;
+}
 function cleanAppBuildOutputs(appDir) {
     // .deploy-tmp: a crashed prior per-app build leaves partial artifacts that
     // silently poison the next build for that app (observed on Windows: stale