@mastra/platform-workspace 1.5.0-alpha.2 → 1.5.0-alpha.4

package/dist/index.cjs

@@ -28,6 +28,7 @@ let _mastra_core_workspace = require("@mastra/core/workspace");
 let e2b = require("e2b");
 let child_process = require("child_process");
 let util = require("util");
+let crypto = require("crypto");
 //#region src/client.ts
 const DEFAULT_PROXY_URL = "https://workspaces.mastra.ai";
 /**
@@ -1964,6 +1965,31 @@ var PlatformSandbox = class PlatformSandbox extends _mastra_core_workspace.Mastr
 	}
 };
 //#endregion
+//#region ../../packages/_internals/workspace/dist/index.js
+/**
+* Setup completion marker shared by repo templates and their consumers.
+*
+* A repo template writes this file beside the checkout as its last build
+* step, so it exists only in images where every setup command succeeded. Its
+* content is a digest of the setup commands the image ran, letting a sandbox
+* booted from the image tell whether the setup it is about to run already
+* happened. Relative to the template's build cwd, which is also the runtime
+* working directory the repo was cloned into.
+*/
+const SETUP_MARKER_PATH = ".mastra-sandbox/setup";
+/** Blank entries never become build steps, so they never count toward the digest either. */
+function normalizeSetupCommands(setupCommand) {
+	return (setupCommand === void 0 ? [] : Array.isArray(setupCommand) ? setupCommand : [setupCommand]).filter((command) => command.trim() !== "");
+}
+/** The marker content for a setup command list: `sha256:<hex>` over the commands joined by newlines. */
+function setupMarkerContent(setupCommand) {
+	return `sha256:${(0, crypto.createHash)("sha256").update(normalizeSetupCommands(setupCommand).join("\n")).digest("hex")}`;
+}
+/** Shell step that writes the marker relative to the cwd. `content` is a digest, so it is shell-safe. */
+function setupMarkerCommand(content) {
+	return `mkdir -p "$(dirname "${SETUP_MARKER_PATH}")" && printf '%s' '${content}' > "${SETUP_MARKER_PATH}"`;
+}
+//#endregion
 //#region src/repo-template.ts
 const execFileAsync = (0, util.promisify)(child_process.execFile);
 const SHA_PATTERN = /^[0-9a-f]{7,40}$/i;
@@ -2046,6 +2072,7 @@ function createRepoTemplate(options) {
 		if (workingDirectory) template = template.runCmd(`mkdir -p "${workingDirectory}"`).setWorkdir(workingDirectory);
 		template = template.runCmd(`git ${auth}clone ${cloneUrl} "${repoDir}"`).runCmd(`git -C "${repoDir}" ${auth}fetch origin ${sha}`).runCmd(`git -C "${repoDir}" checkout ${sha}`);
 		for (const command of setupCommands) template = template.runCmd(`cd "${repoDir}" && ${command}`);
+		template = template.runCmd(setupMarkerCommand(setupMarkerContent(setupCommands)));
 		return template.withFamily(family);
 	};
 }
@@ -2103,7 +2130,50 @@ function redactSecrets(value) {
 function gitAuthFlag() {
 	return `-c http.extraheader="AUTHORIZATION: basic $(printf 'x-access-token:%s' "$${BUILD_TOKEN_ENV}" | base64 -w0)"`;
 }
-async function resolveDefaultBranchHead(cloneUrl, token, execute = execFileAsync) {
+/**
+* `owner/repo` for a github.com clone URL, else undefined. Only the public
+* host is API-resolvable: GitHub Enterprise and other forges keep the git
+* path below.
+*/
+function parseGithubRepo(cloneUrl) {
+	let url;
+	try {
+		url = new URL(cloneUrl);
+	} catch {
+		return;
+	}
+	if (url.hostname.toLowerCase() !== "github.com") return void 0;
+	const [owner, repo, ...rest] = url.pathname.split("/").filter(Boolean);
+	if (!owner || !repo || rest.length > 0) return void 0;
+	return {
+		owner,
+		repo: repo.replace(/\.git$/i, "")
+	};
+}
+/**
+* Resolve the default-branch head. github.com repositories go through the
+* REST API so resolution works wherever the host runs, including deployed
+* images without a git binary; other hosts shell out to `git ls-remote`.
+* Throws with a redaction-safe message when the head cannot be resolved.
+*/
+async function resolveDefaultBranchHead(cloneUrl, token, execute = execFileAsync, fetchImpl = fetch) {
+	const github = parseGithubRepo(cloneUrl);
+	if (github) {
+		const response = await fetchImpl(`https://api.github.com/repos/${github.owner}/${github.repo}/commits/HEAD`, {
+			headers: {
+				Accept: "application/vnd.github.sha",
+				"X-GitHub-Api-Version": "2022-11-28",
+				"User-Agent": "mastra-platform-workspace",
+				...token ? { Authorization: `Bearer ${token}` } : {}
+			},
+			signal: AbortSignal.timeout(1e4)
+		}).catch((error) => {
+			throw new Error(`GitHub head lookup failed: ${error instanceof Error ? error.message : String(error)}`);
+		});
+		if (!response.ok) throw new Error(`GitHub head lookup failed: ${response.status} ${response.statusText}`.trim());
+		const sha = (await response.text()).trim();
+		return SHA_PATTERN.test(sha) ? sha : void 0;
+	}
 	try {
 		const env = {
 			...process.env,