@odla-ai/harness 0.10.2 → 0.10.4

package/dist/code-runtime-cli.js

@@ -7,7 +7,7 @@ import {
   createCodeRuntimeControlClient,
   createCodeRuntimeSessionSkillLoader,
   runCodeRuntimeHeartbeatLoop
-} from "./chunk-VIZALA6O.js";
+} from "./chunk-IV3VMKDV.js";
 import "./chunk-KXFI3WM2.js";
 import {
   assertPinnedImage,

package/dist/node.cjs

@@ -66,6 +66,7 @@ __export(node_exports, {
   planReachCollisions: () => planReachCollisions,
   prepareRuntimeCheckpoint: () => prepareRuntimeCheckpoint,
   racedAttempt: () => racedAttempt,
+  readOnlyNotice: () => readOnlyNotice,
   recallAbout: () => recallAbout,
   registeredFiles: () => registeredFiles,
   renderMemories: () => renderMemories,
@@ -2824,12 +2825,17 @@ function codeSkill(opts) {
       true
     )
   ];
-  const effects = opts.readOnly ? [] : [applyPatch, runRecipe];
+  const runsRecipes = opts.recipes ?? !opts.readOnly;
+  const effects = [...opts.readOnly ? [] : [applyPatch], ...runsRecipes ? [runRecipe] : []];
   const tools = opts.surface === "v3" ? [...orientation, searchFiles, read2, ...opts.readOnly ? [] : [editFile], ...effects] : opts.surface === "v2" ? [listFiles, searchFiles, read2, ...effects] : [read2, ...effects];
   return { name: "code", tools };
 }
 
 // src/code-agent.ts
+function readOnlyNotice(readOnly, recipes) {
+  if (!readOnly) return "";
+  return recipes ? "\n\nThis session is read-only: inspect and report; repository mutation is intentionally unavailable. The registered proof recipes are available through odla_run_recipe and must be run before any verdict." : "\n\nThis session is read-only. Inspect and report; repository mutation and recipe execution are intentionally unavailable.";
+}
 async function runCodeAgent(options) {
   const toolCalls = [];
   const surface = options.surface ?? "v1";
@@ -2839,6 +2845,7 @@ async function runCodeAgent(options) {
     workspaceDir: options.workspaceDir,
     surface,
     ...options.readOnly === void 0 ? {} : { readOnly: options.readOnly },
+    ...options.recipes === void 0 ? {} : { recipes: options.recipes },
     ...options.recipeIds ? { recipeIds: options.recipeIds } : {},
     onToolCall: (call) => {
       toolCalls.push(call);
@@ -2851,7 +2858,7 @@ async function runCodeAgent(options) {
     {
       name: "odla-code",
       model: options.model,
-      system: options.system ?? `${SYSTEM_PROMPT_FOR[surface]}${options.readOnly ? "\n\nThis session is read-only. Inspect and report; repository mutation and recipe execution are intentionally unavailable." : ""}`,
+      system: options.system ?? `${SYSTEM_PROMPT_FOR[surface]}${readOnlyNotice(options.readOnly, options.recipes)}`,
       skills: [skill, ...options.extraSkills ?? []],
       maxSteps: options.maxSteps ?? 24,
       maxTokens: options.maxTokens ?? 16384
@@ -2882,6 +2889,7 @@ async function runCodeAgentAttempt(options) {
       model: "brokered",
       surface,
       ...options.readOnly === void 0 ? {} : { readOnly: options.readOnly },
+      ...options.recipes === void 0 ? {} : { recipes: options.recipes },
       ...options.recipeIds ? { recipeIds: options.recipeIds } : {},
       ...options.extraSkills ? { extraSkills: options.extraSkills } : {},
       ...options.maxSteps === void 0 ? {} : { maxSteps: options.maxSteps },
@@ -4003,16 +4011,17 @@ function createCodeRuntimeToolBroker(input, lease, role) {
     readerId: `code-session:${lease.task.taskId}`,
     readOnlyPrefixes: [".odla-references"]
   });
-  const reviewReads = /* @__PURE__ */ new Set([
+  const reviewTools = /* @__PURE__ */ new Set([
     "sandbox.read",
     "sandbox.list",
     "sandbox.search",
     "sandbox.overview",
     "sandbox.where_is",
     "sandbox.who_imports",
-    "sandbox.who_touches"
+    "sandbox.who_touches",
+    "sandbox.run_recipe"
   ]);
-  return role === "coding" ? broker : { execute: (context, request) => reviewReads.has(request.tool) ? broker.execute(context, request) : Promise.resolve({ requestId: request.requestId, ok: false, content: "review sessions are read-only" }) };
+  return role === "coding" ? broker : { execute: (context, request) => reviewTools.has(request.tool) ? broker.execute(context, request) : Promise.resolve({ requestId: request.requestId, ok: false, content: "review sessions are read-only" }) };
 }
 
 // src/code-memory.ts
@@ -4621,6 +4630,9 @@ var TheseusRuntimeEngine = class {
       prompt: metadata.prompt,
       signal: active.abort.signal,
       readOnly: metadata.readOnly,
+      // A review-role session is read-only and still runs the proof; a planner
+      // marked read-only by its payload runs nothing.
+      recipes: metadata.role === "review" || !metadata.readOnly,
       recipeIds: this.options.recipes.map((recipe2) => recipe2.id),
       ...extraSkills.length ? { extraSkills } : {}
     });
@@ -5033,6 +5045,7 @@ async function installedDependencies(repoRoot) {
   planReachCollisions,
   prepareRuntimeCheckpoint,
   racedAttempt,
+  readOnlyNotice,
   recallAbout,
   registeredFiles,
   renderMemories,