@mastra/platform-workspace 1.5.0 → 1.5.1-alpha.0

package/dist/index.cjs

@@ -2015,6 +2015,14 @@ const BUILD_TOKEN_ENV = "MASTRA_REPOSITORY_ACCESS_TOKEN";
 const CLONE_URL_ALLOWED_CHARS = /^[a-z0-9:/._-]+$/i;
 const CLONE_URL_HOST_PATTERN = /^[a-z0-9.-]+$/i;
 const CLONE_URL_SEGMENT_PATTERN = /^[\w.-]+$/;
+/** Last default-branch head resolved per clone URL, shared across resolvers in this process. */
+const lastKnownHeads = /* @__PURE__ */ new Map();
+const MAX_LAST_KNOWN_HEADS = 1e3;
+function rememberHead(cloneUrl, sha) {
+	lastKnownHeads.delete(cloneUrl);
+	lastKnownHeads.set(cloneUrl, sha);
+	if (lastKnownHeads.size > MAX_LAST_KNOWN_HEADS) lastKnownHeads.delete(lastKnownHeads.keys().next().value);
+}
 /**
 * Create a lazy repository template definition for PlatformSandbox, mirroring
 * `@mastra/e2b`'s `createRepoTemplate`: pass the sandbox context through and a
@@ -2025,8 +2033,10 @@ const CLONE_URL_SEGMENT_PATTERN = /^[\w.-]+$/;
 * what gets cloned and what the template is identified by can't drift — and
 * pins repositories to their current default-branch commit. Private repository
 * credentials are used for head resolution and sent to the provider as
-* transient build envs; they never enter the serialized definition. If the
-* repository or its head cannot be resolved, the resolver keeps `cpuCount` and
+* transient build envs; they never enter the serialized definition. A failed
+* head lookup reuses the last head resolved for the same clone URL in this
+* process. If the repository cannot be resolved, or no head has been resolved
+* yet, the resolver keeps `cpuCount` and
 * `memoryMB` in a resources-only template so the sandbox still boots at the
 * requested size, and the caller's runtime setup materializes the checkout.
 */
@@ -2057,16 +2067,30 @@ function createRepoTemplate(options) {
 		}
 		const token = access.authorization?.token;
 		let headError;
-		const sha = await (token ? resolveHead(cloneUrl, token) : resolveHead(cloneUrl)).catch((error) => {
+		const resolved = await (token ? resolveHead(cloneUrl, token) : resolveHead(cloneUrl)).catch((error) => {
 			headError = error;
 		});
-		if (!sha || !SHA_PATTERN.test(sha)) {
-			console.warn("[platform-workspace] repo template skipped: could not resolve default-branch head", {
+		let sha;
+		if (resolved && SHA_PATTERN.test(resolved)) {
+			sha = resolved;
+			rememberHead(cloneUrl, sha);
+		} else {
+			const lastKnown = lastKnownHeads.get(cloneUrl);
+			if (!lastKnown) {
+				console.warn("[platform-workspace] repo template skipped: could not resolve default-branch head", {
+					cloneUrl,
+					sha: resolved,
+					error: redactSecrets(headError)
+				});
+				return resourcesOnly();
+			}
+			console.warn("[platform-workspace] repo template pinned to the last known default-branch head", {
 				cloneUrl,
-				sha,
+				sha: lastKnown,
+				resolved,
 				error: redactSecrets(headError)
 			});
-			return resourcesOnly();
+			sha = lastKnown;
 		}
 		const workingDirectory = options.workingDirectory === void 0 ? void 0 : trimTrailingSlashes(assertWorkingDirectory(options.workingDirectory));
 		const repoDir = repoDirName(cloneUrl);