@inflexa-ai/harness 0.4.4 → 0.4.5

package/dist/sandbox/docker-client.d.ts

@@ -44,7 +44,12 @@ export interface DockerClientConfig {
     resolveWorkspaceRoot: ResolveWorkspaceRoot;
     /** Host lib store; bind-mounted read-only at `/mnt/libs` when set. */
     libStorePath?: string;
-    /** Host ref store; bind-mounted read-only at `/mnt/refs` when set. */
+    /**
+     * Host ref store; bind-mounted read-only at `/mnt/refs`. Embedders pass the
+     * configured store location unconditionally — existence is (re-)checked at each
+     * sandbox creation, so a store installed mid-session is mounted into subsequent
+     * sandboxes without a runtime restart.
+     */
     refStorePath?: string;
     /**
      * Force the container platform (e.g. `linux/amd64`). Set by hosts that mount

package/dist/sandbox/docker-client.js

@@ -28,7 +28,7 @@
  * Either way the workload ends as uid 1000 with `no-new-privileges` and no
  * effective capabilities.
  */
-import { existsSync, statSync } from "node:fs";
+import { existsSync, lstatSync, statSync } from "node:fs";
 import { join } from "node:path";
 import Docker from "dockerode";
 import { ResultAsync, err, ok } from "neverthrow";
@@ -80,6 +80,30 @@ function libStoreUsable(libStorePath) {
     }
     return existsSync(join(current, "packages.txt")) && existsSync(join(current, "meta.json"));
 }
+/**
+ * Whether `refStorePath` is, right now, a real directory fit to be a bind authority.
+ * Deliberately shallow — it checks existence-as-a-directory only, never the store's
+ * interior: the harness knows nothing of the ref store's layout, and dataset
+ * completeness/receipts are the embedder's concern, so (unlike `libStoreUsable`, which
+ * validates harness-known `current` layout) there is nothing here to validate beyond
+ * "a directory is present."
+ *
+ * `lstatSync` (not `statSync`) does NOT follow symlinks, so a symlinked path is rejected
+ * even when it resolves to a directory: the bind authority must itself be the store
+ * directory, not an indirection that may later point elsewhere.
+ *
+ * Binding a missing source makes Docker auto-create a root-owned directory at the path —
+ * the same hazard `libStoreUsable` documents — which would also brick the embedder's
+ * later store install (its store tool cannot write into a root-owned dir).
+ */
+function refStoreUsable(refStorePath) {
+    try {
+        return lstatSync(refStorePath).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
 async function pollHealth(fetchImpl, url, timeoutMs) {
     const deadline = Date.now() + timeoutMs;
     let lastErr;
@@ -187,9 +211,16 @@ export function createDockerSandboxOps(config) {
                 if (config.libStorePath && !libsMounted) {
                     logger.warn("lib store configured but `current` is missing or incomplete at sandbox creation — mounting no library store (sandbox degrades to available:false)", { libStorePath: config.libStorePath, sandboxId });
                 }
+                // Re-checked here too, so a ref store installed after boot is mounted into
+                // the next sandbox. Unlike libs, a missing ref store is NOT warned: a missing
+                // lib store is a degradation (it was configured and working, then broke),
+                // whereas a missing ref store is the normal cold state — the user simply has
+                // not installed reference data yet — and warning on every create would be
+                // noise. A store that appears mid-session is picked up by the next create.
+                const refsMounted = !!config.refStorePath && refStoreUsable(config.refStorePath);
                 const plan = buildMountPlan(meta, {
                     libs: libsMounted,
-                    refs: !!config.refStorePath,
+                    refs: refsMounted,
                 });
                 const hostTreePath = config.resolveWorkspaceRoot(meta.analysisId);
                 // `stepWritePrefix` (not a raw `join`) so the RW bind source runs through
@@ -200,7 +231,7 @@ export function createDockerSandboxOps(config) {
                     `${hostTreePath}:${plan.readonlyTreePath}:ro`,
                     ...(plan.writableStepPath ? [`${hostStepPath}:${plan.writableStepPath}:rw`] : []),
                     ...(libsMounted && config.libStorePath ? [`${config.libStorePath}:${plan.libsPath}:ro`] : []),
-                    ...(config.refStorePath ? [`${config.refStorePath}:${plan.refsPath}:ro`] : []),
+                    ...(refsMounted && config.refStorePath ? [`${config.refStorePath}:${plan.refsPath}:ro`] : []),
                 ];
                 const createFailed = (status, cause) => ({
                     type: "container_create_failed",

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@inflexa-ai/harness",
-    "version": "0.4.4",
+    "version": "0.4.5",
     "description": "Host-agnostic bioinformatics agent harness \u2014 hand-rolled agent loop, DBOS-durable workflows, sandboxed compute.",
     "license": "Apache-2.0",
     "type": "module",