From 84146924c1dbc5c3f868bdfb8b2580d335e8c9f5 Mon Sep 17 00:00:00 2001
From: npc0-hue <github@npc0.com>
Date: Wed, 26 Aug 2026 09:00:28 +0800
Subject: [PATCH] fix: locate run module before build

---
 platform/service/distribution_builder.go      | 12 +++++++++---
 platform/service/distribution_builder_test.go |  2 +-
 2 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/platform/service/distribution_builder.go b/platform/service/distribution_builder.go
index 06d3032..824b24c 100644
--- a/platform/service/distribution_builder.go
+++ b/platform/service/distribution_builder.go
@@ -484,15 +484,21 @@ if [ "$COMPONENT_KIND" = "run" ]; then
   rm -rf /workspace/build/run-source
   mkdir -p /workspace/build/run-source
   find /workspace/source -mindepth 1 -maxdepth 1 ! -name pax_global_header -exec cp -R {} /workspace/build/run-source/ \;
+  run_command_dir="$(find /workspace/build/run-source -type d -path '*/cmd/run' -print -quit)"
+  run_module_dir="${run_command_dir%/cmd/run}"
+  if [ -z "$run_command_dir" ] || [ ! -f "$run_module_dir/go.mod" ]; then
+    printf 'Run source snapshot must contain a Go module with cmd/run\n' >&2
+    exit 2
+  fi
   progress 34 'env_check: injecting run build metadata'
   seed_b64="$(base64 /workspace/input/workspace-seed.json | tr -d '\n')"
-  mkdir -p /workspace/build/run-source/config
-  cat > /workspace/build/run-source/config/workspace_seed_generated.go <<EOF
+  mkdir -p "$run_module_dir/config"
+  cat > "$run_module_dir/config/workspace_seed_generated.go" <<EOF
 package config
 
 func init() { BuildWorkspaceSeed = "$seed_b64" }
 EOF
-  cd /workspace/build/run-source
+  cd "$run_module_dir"
   ldflags="-s -w"
   ldflags="$ldflags -X browser.local/run/config.BuildMode=worker"
   ldflags="$ldflags -X browser.local/run/config.BuildPlatformURL=$PLATFORM_URL"
diff --git a/platform/service/distribution_builder_test.go b/platform/service/distribution_builder_test.go
index 0269f84..445b7a3 100644
--- a/platform/service/distribution_builder_test.go
+++ b/platform/service/distribution_builder_test.go
@@ -203,7 +203,7 @@ func TestDockerDistributionBuilderKeepsSecretInIsolatedInput(t *testing.T) {
 			if bytes.Contains(script, []byte(secret)) {
 				t.Fatal("build script must not embed the component auth key")
 			}
-			for _, ordered := range [][2]string{{"find /workspace/source -mindepth 1 -maxdepth 1 ! -name pax_global_header", "mkdir -p /workspace/build/run-source/config"}, {"mkdir -p /workspace/build/run-source/config", "workspace_seed_generated.go"}, {"workspace_seed_generated.go", "go build -trimpath -ldflags"}} {
+			for _, ordered := range [][2]string{{"find /workspace/source -mindepth 1 -maxdepth 1 ! -name pax_global_header", "run_command_dir=\"$(find /workspace/build/run-source -type d -path '*/cmd/run' -print -quit)\""}, {"run_command_dir=\"$(find /workspace/build/run-source -type d -path '*/cmd/run' -print -quit)\"", "run_module_dir=\"${run_command_dir%/cmd/run}\""}, {"run_module_dir=\"${run_command_dir%/cmd/run}\"", "mkdir -p \"$run_module_dir/config\""}, {"mkdir -p \"$run_module_dir/config\"", "workspace_seed_generated.go"}, {"workspace_seed_generated.go", "cd \"$run_module_dir\""}, {"cd \"$run_module_dir\"", "go build -trimpath -ldflags"}} {
 				if bytes.Index(script, []byte(ordered[0])) >= bytes.Index(script, []byte(ordered[1])) {
 					t.Fatalf("Run build script must prepare source before injecting config and compiling: %q before %q", ordered[0], ordered[1])
 				}