@mastra/e2b 0.11.0-alpha.2 → 0.11.0-alpha.4

package/dist/index.cjs

@@ -1554,6 +1554,31 @@ var E2BSandbox = class E2BSandbox extends _mastra_core_workspace.MastraSandbox {
 	}
 };
 //#endregion
+//#region ../../packages/_internals/workspace/dist/index.js
+/**
+* Setup completion marker shared by repo templates and their consumers.
+*
+* A repo template writes this file beside the checkout as its last build
+* step, so it exists only in images where every setup command succeeded. Its
+* content is a digest of the setup commands the image ran, letting a sandbox
+* booted from the image tell whether the setup it is about to run already
+* happened. Relative to the template's build cwd, which is also the runtime
+* working directory the repo was cloned into.
+*/
+const SETUP_MARKER_PATH = ".mastra-sandbox/setup";
+/** Blank entries never become build steps, so they never count toward the digest either. */
+function normalizeSetupCommands$1(setupCommand) {
+	return (setupCommand === void 0 ? [] : Array.isArray(setupCommand) ? setupCommand : [setupCommand]).filter((command) => command.trim() !== "");
+}
+/** The marker content for a setup command list: `sha256:<hex>` over the commands joined by newlines. */
+function setupMarkerContent(setupCommand) {
+	return `sha256:${(0, crypto.createHash)("sha256").update(normalizeSetupCommands$1(setupCommand).join("\n")).digest("hex")}`;
+}
+/** Shell step that writes the marker relative to the cwd. `content` is a digest, so it is shell-safe. */
+function setupMarkerCommand(content) {
+	return `mkdir -p "$(dirname "${SETUP_MARKER_PATH}")" && printf '%s' '${content}' > "${SETUP_MARKER_PATH}"`;
+}
+//#endregion
 //#region src/utils/repo-template.ts
 /**
 * Sha-tagged repo templates.
@@ -1773,7 +1798,9 @@ function buildRepoTemplateSpec(identity, token) {
 	}
 	template = template.runCmd(`git ${auth}clone ${cloneUrl} "${repoDir}"`);
 	if (sha) template = template.runCmd(`git -C "${repoDir}" ${auth}fetch origin ${sha}`).runCmd(`git -C "${repoDir}" checkout ${sha}`);
-	for (const command of normalizeSetupCommands(setupCommand)) template = template.runCmd(`cd "${repoDir}" && ${command}`);
+	const setupCommands = normalizeSetupCommands(setupCommand);
+	for (const command of setupCommands) template = template.runCmd(`cd "${repoDir}" && ${command}`);
+	template = template.runCmd(setupMarkerCommand(setupMarkerContent(setupCommands)));
 	return {
 		ref: repoTemplateRef(identity),
 		template,
@@ -1786,13 +1813,52 @@ function buildRepoTemplateSpec(identity, token) {
 	};
 }
 /**
-* Resolve the repository's current default-branch head over HTTPS
-* (`git ls-remote <url> HEAD` — no clone; authenticated via an in-process
-* `http.extraheader` when a token is provided). Returns undefined when the
+* `owner/repo` for a github.com clone URL, else undefined. Only the public
+* host is API-resolvable: GitHub Enterprise and other forges keep the git
+* path.
+*/
+function parseGithubRepo(cloneUrl) {
+	let url;
+	try {
+		url = new URL(cloneUrl);
+	} catch {
+		return;
+	}
+	if (url.hostname.toLowerCase() !== "github.com") return void 0;
+	const [owner, repo, ...rest] = url.pathname.split("/").filter(Boolean);
+	if (!owner || !repo || rest.length > 0) return void 0;
+	return {
+		owner,
+		repo: repo.replace(/\.git$/i, "")
+	};
+}
+/**
+* Resolve the repository's current default-branch head without cloning.
+* github.com repositories go through the REST API so resolution works
+* wherever the host runs, including images without a git binary; other
+* hosts use `git ls-remote <url> HEAD`, authenticated via an in-process
+* `http.extraheader` when a token is provided. Returns undefined when the
 * head cannot be resolved (inaccessible repo, offline, no git binary);
 * callers degrade to the untagged template ref.
 */
 async function resolveDefaultBranchHead(cloneUrl, token) {
+	const github = parseGithubRepo(cloneUrl);
+	if (github) try {
+		const response = await fetch(`https://api.github.com/repos/${github.owner}/${github.repo}/commits/HEAD`, {
+			headers: {
+				Accept: "application/vnd.github.sha",
+				"X-GitHub-Api-Version": "2022-11-28",
+				"User-Agent": "mastra-e2b",
+				...token ? { Authorization: `Bearer ${token}` } : {}
+			},
+			signal: AbortSignal.timeout(1e4)
+		});
+		if (!response.ok) return void 0;
+		const sha = (await response.text()).trim();
+		return SHA_PATTERN.test(sha) ? sha : void 0;
+	} catch {
+		return;
+	}
 	try {
 		const authArgs = token ? ["-c", `http.extraheader=AUTHORIZATION: basic ${Buffer.from(`x-access-token:${token}`).toString("base64")}`] : [];
 		const { stdout } = await execFileAsync("git", [