@odla-ai/harness 0.10.4 → 0.11.1

package/dist/code-runtime-cli.js

@@ -7,7 +7,7 @@ import {
   createCodeRuntimeControlClient,
   createCodeRuntimeSessionSkillLoader,
   runCodeRuntimeHeartbeatLoop
-} from "./chunk-IV3VMKDV.js";
+} from "./chunk-DP6LOGBF.js";
 import "./chunk-KXFI3WM2.js";
 import {
   assertPinnedImage,

package/dist/node.cjs

@@ -27,6 +27,7 @@ __export(node_exports, {
   DecompositionError: () => DecompositionError,
   MAX_MEMORY_BODY: () => MAX_MEMORY_BODY,
   MEASURED_PREMIUM: () => MEASURED_PREMIUM,
+  REPOSITORY_RECIPES_FILE: () => REPOSITORY_RECIPES_FILE,
   SYSTEM_PROMPT_FOR: () => SYSTEM_PROMPT_FOR,
   TheseusRuntimeEngine: () => TheseusRuntimeEngine,
   V1_SYSTEM_PROMPT: () => V1_SYSTEM_PROMPT,
@@ -48,6 +49,7 @@ __export(node_exports, {
   createCodeToolBroker: () => createCodeToolBroker,
   createCodeWorkspaceCheckpoint: () => createCodeWorkspaceCheckpoint,
   createContainerRecipeExecutor: () => createContainerRecipeExecutor,
+  describeCodeRecipes: () => describeCodeRecipes,
   describePatchFailure: () => describePatchFailure,
   digestStagedWorkspace: () => digestStagedWorkspace,
   feedbackIsActionable: () => feedbackIsActionable,
@@ -62,16 +64,19 @@ __export(node_exports, {
   materializeGitTree: () => materializeGitTree,
   outcomeCloses: () => outcomeCloses,
   outcomeMemory: () => outcomeMemory,
+  parseRepositoryRecipes: () => parseRepositoryRecipes,
   patchPaths: () => patchPaths,
   planReachCollisions: () => planReachCollisions,
   prepareRuntimeCheckpoint: () => prepareRuntimeCheckpoint,
   racedAttempt: () => racedAttempt,
   readOnlyNotice: () => readOnlyNotice,
+  readRepositoryRecipes: () => readRepositoryRecipes,
   recallAbout: () => recallAbout,
   registeredFiles: () => registeredFiles,
   renderMemories: () => renderMemories,
   renderOutcome: () => renderOutcome,
   resolveCodePath: () => resolveCodePath,
+  resolveCodeRecipes: () => resolveCodeRecipes,
   restoreCodeWorkspaceCheckpoint: () => restoreCodeWorkspaceCheckpoint,
   runCodeAgent: () => runCodeAgent,
   runCodeAgentAttempt: () => runCodeAgentAttempt,
@@ -84,6 +89,7 @@ __export(node_exports, {
   safeWorkspaceLabel: () => safeWorkspaceLabel,
   selectContainerEngine: () => selectContainerEngine,
   selectWinner: () => selectWinner,
+  sessionRecipesFor: () => sessionRecipesFor,
   sessionSkillsFor: () => sessionSkillsFor,
   stageWorkspace: () => stageWorkspace,
   stageWorkspacePair: () => stageWorkspacePair,
@@ -1315,40 +1321,40 @@ async function readBoundedResponse(body, maximum) {
   return result;
 }
 
-// src/code-runtime.ts
-var CODE_RUNTIME_PROTOCOL_VERSION = 3;
-async function runCodeRuntimeHeartbeatLoop(options) {
-  const heartbeatMs = options.heartbeatMs ?? 15e3;
-  if (!Number.isSafeInteger(heartbeatMs) || heartbeatMs < 1e3 || heartbeatMs > 3e5) {
-    throw new TypeError("heartbeatMs must be an integer from 1000 to 300000");
-  }
-  let retryMs = 1e3;
-  do {
-    if (options.signal?.aborted) return;
+// src/code-runtime-overload.ts
+var OVERLOAD_RETRY_DELAYS_MS = [2e3, 4e3, 8e3, 16e3];
+var RETRYABLE_CODES = /* @__PURE__ */ new Set(["control_plane_overloaded", "registry_overloaded", "transport_unavailable"]);
+function overloadedControlFailure(cause) {
+  if (!cause || typeof cause !== "object") return false;
+  const failure = cause;
+  return failure.status === 503 && typeof failure.code === "string" && RETRYABLE_CODES.has(failure.code);
+}
+async function withOverloadRetry(call, wait2, onRetry = () => void 0) {
+  for (let attempt = 0; ; attempt += 1) {
     try {
-      const snapshot = await options.control.heartbeat(options.runtimeVersion, options.capabilities);
-      await options.onSnapshot?.(snapshot);
-      retryMs = 1e3;
-      if (options.once) return;
-      await wait(heartbeatMs, options.signal);
-    } catch (error) {
-      if (options.signal?.aborted) return;
-      if (options.once || !retryableControlFailure(error)) throw error;
-      await options.onRetry?.(error, retryMs);
-      await wait(retryMs, options.signal);
-      retryMs = Math.min(retryMs * 2, 3e4);
+      return await call();
+    } catch (cause) {
+      const delayMs = OVERLOAD_RETRY_DELAYS_MS[attempt];
+      if (delayMs === void 0 || !overloadedControlFailure(cause)) throw cause;
+      await onRetry(cause, delayMs);
+      await wait2(delayMs);
     }
-  } while (!options.signal?.aborted);
+  }
 }
+
+// src/code-runtime-reconciler.ts
+var sleep = (ms) => new Promise((resolve8) => setTimeout(resolve8, ms));
 var CodeRuntimeReconciler = class {
-  constructor(control, engine, onDiagnostic) {
+  constructor(control, engine, onDiagnostic, options = {}) {
     this.control = control;
     this.engine = engine;
     this.onDiagnostic = onDiagnostic;
+    this.options = options;
   }
   control;
   engine;
   onDiagnostic;
+  options;
   results = /* @__PURE__ */ new Map();
   async reconcile(snapshot) {
     for (const command of snapshot.commands) {
@@ -1367,7 +1373,15 @@ var CodeRuntimeReconciler = class {
       await this.control.acknowledge(command.commandId, completed.result);
       if (!completed.notified) {
         try {
-          await this.engine.acknowledged?.(command, completed.result);
+          await withOverloadRetry(
+            async () => {
+              await this.engine.acknowledged?.(command, completed.result);
+            },
+            (ms) => (this.options.wait ?? sleep)(ms),
+            (cause, delayMs) => this.onDiagnostic?.(
+              `command ${command.commandId} acknowledged handling waits ${delayMs}ms for an overloaded control plane \xB7 ${cause instanceof Error ? cause.message : String(cause)}`
+            )
+          );
         } catch (error) {
           this.onDiagnostic?.(
             `command ${command.commandId} acknowledged handling failed \xB7 ${error instanceof Error ? error.message : String(error)}`
@@ -1378,6 +1392,32 @@ var CodeRuntimeReconciler = class {
     }
   }
 };
+
+// src/code-runtime.ts
+var CODE_RUNTIME_PROTOCOL_VERSION = 3;
+async function runCodeRuntimeHeartbeatLoop(options) {
+  const heartbeatMs = options.heartbeatMs ?? 15e3;
+  if (!Number.isSafeInteger(heartbeatMs) || heartbeatMs < 1e3 || heartbeatMs > 3e5) {
+    throw new TypeError("heartbeatMs must be an integer from 1000 to 300000");
+  }
+  let retryMs = 1e3;
+  do {
+    if (options.signal?.aborted) return;
+    try {
+      const snapshot = await options.control.heartbeat(options.runtimeVersion, options.capabilities);
+      await options.onSnapshot?.(snapshot);
+      retryMs = 1e3;
+      if (options.once) return;
+      await wait(heartbeatMs, options.signal);
+    } catch (error) {
+      if (options.signal?.aborted) return;
+      if (options.once || !retryableControlFailure(error)) throw error;
+      await options.onRetry?.(error, retryMs);
+      await wait(retryMs, options.signal);
+      retryMs = Math.min(retryMs * 2, 3e4);
+    }
+  } while (!options.signal?.aborted);
+}
 function retryableControlFailure(value) {
   if (!value || typeof value !== "object") return false;
   const failure = value;
@@ -2000,8 +2040,8 @@ var CodeRuntimeCheckpointManager = class {
       trustedBaseDigest: active.trustedBaseDigest,
       planningInputDigest: active.planningInputDigest,
       conversationRefs: active.conversationRefs,
-      fallbackPolicyDigest: this.options.fallbackPolicyDigest,
-      recipes: this.options.recipes,
+      fallbackPolicyDigest: active.buildPolicyDigest ?? this.options.fallbackPolicyDigest,
+      recipes: active.recipes ?? this.options.recipes,
       recipeExecutor: this.options.recipeExecutor,
       review: (patch2, verification) => this.options.control.review(command.sessionId, { patch: patch2, verification })
     });
@@ -2942,13 +2982,19 @@ function createCodeRuntimeSessionSkillLoader(control) {
         ...tool.acceptsTaint === void 0 ? {} : { acceptsTaint: tool.acceptsTaint },
         handler: async (input, context) => {
           if (!context.toolCallId) throw new TypeError("collaboration tool call identity is required");
-          return execute2(command.sessionId, {
-            commandId: command.commandId,
-            toolCallId: context.toolCallId,
-            skill: manifest.name,
-            tool: tool.name,
-            input
-          }, context.signal);
+          try {
+            return await execute2(command.sessionId, {
+              commandId: command.commandId,
+              toolCallId: context.toolCallId,
+              skill: manifest.name,
+              tool: tool.name,
+              input
+            }, context.signal);
+          } catch (cause) {
+            if (context.signal?.aborted) throw cause;
+            const detail = (cause instanceof Error ? cause.message : String(cause)).slice(0, 500);
+            return { content: `Tool "${tool.name}" failed: ${detail}`, isError: true };
+          }
         }
       }))
     }));
@@ -2966,23 +3012,7 @@ async function sessionSkillsFor(options, command) {
 }
 
 // src/code-runtime-inference.ts
-var OVERLOAD_RETRY_DELAYS_MS = [2e3, 4e3, 8e3, 16e3];
-var RETRYABLE_CODES = /* @__PURE__ */ new Set(["control_plane_overloaded", "registry_overloaded", "transport_unavailable"]);
-function overloadedControlFailure(cause) {
-  return cause instanceof CodeRuntimeControlError && cause.status === 503 && RETRYABLE_CODES.has(cause.code);
-}
-async function inferWithBackoff(infer, wait2, onRetry) {
-  for (let attempt = 0; ; attempt += 1) {
-    try {
-      return await infer();
-    } catch (cause) {
-      const delayMs = OVERLOAD_RETRY_DELAYS_MS[attempt];
-      if (delayMs === void 0 || !overloadedControlFailure(cause)) throw cause;
-      await onRetry(cause, delayMs);
-      await wait2(delayMs);
-    }
-  }
-}
+var inferWithBackoff = (infer, wait2, onRetry) => withOverloadRetry(infer, wait2, (cause, delayMs) => onRetry(cause, delayMs));
 async function handleCodeRuntimeInference(input) {
   const { command, request, state } = input;
   const startedAt = Date.now();
@@ -4417,6 +4447,96 @@ function observeCodeRuntimeSessionSkills(command, skills, emit) {
   }));
 }
 
+// src/code-repository-recipes.ts
+var import_promises15 = require("fs/promises");
+var import_node_path13 = require("path");
+var REPOSITORY_RECIPES_FILE = "odla.recipes.json";
+var MAX_RECIPES = 16;
+var DEFAULT_TIMEOUT_MS = 12e4;
+var MAX_TIMEOUT_MS = 15 * 6e4;
+var ID2 = /^[A-Za-z0-9._:-]{1,120}$/;
+var RECIPE_FIELDS = /* @__PURE__ */ new Set(["id", "command", "timeoutMs"]);
+var fault = (detail) => new TypeError(`${REPOSITORY_RECIPES_FILE} is malformed: ${detail}`);
+function parseRepositoryRecipes(text2, envelope) {
+  let parsed;
+  try {
+    parsed = JSON.parse(text2);
+  } catch {
+    throw fault("not valid JSON");
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw fault("the document must be an object");
+  const document = parsed;
+  if (document.version !== 1) throw fault("version must be 1");
+  const entries = document.recipes;
+  if (!Array.isArray(entries) || entries.length < 1) throw fault("recipes must be a non-empty array");
+  if (entries.length > MAX_RECIPES) throw fault(`at most ${MAX_RECIPES} recipes may be declared`);
+  const recipes = [];
+  const seen = /* @__PURE__ */ new Set();
+  entries.forEach((entry, index) => {
+    const label = `recipe ${index + 1}`;
+    if (!entry || typeof entry !== "object" || Array.isArray(entry)) throw fault(`${label} must be an object`);
+    const row = entry;
+    const unknown = Object.keys(row).filter((key) => !RECIPE_FIELDS.has(key));
+    if (unknown.length) throw fault(`${label} has unsupported field ${unknown[0]}; the host owns image and resource limits`);
+    if (typeof row.id !== "string" || !ID2.test(row.id)) throw fault(`${label} needs an id of 1 to 120 letters, digits, . _ : or -`);
+    if (seen.has(row.id)) throw fault(`${label} repeats id ${row.id}`);
+    seen.add(row.id);
+    if (!Array.isArray(row.command) || row.command.length < 1 || row.command.some((part) => typeof part !== "string" || !part)) {
+      throw fault(`${label} (${row.id}) needs command as a non-empty array of non-empty strings`);
+    }
+    const timeoutMs = row.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > MAX_TIMEOUT_MS) {
+      throw fault(`${label} (${row.id}) timeoutMs must be an integer from 1 to ${MAX_TIMEOUT_MS}`);
+    }
+    const recipe2 = {
+      id: row.id,
+      command: [...row.command],
+      timeoutMs,
+      image: envelope.image,
+      maxOutputBytes: envelope.maxOutputBytes,
+      cpus: envelope.cpus,
+      memory: envelope.memory,
+      pids: envelope.pids
+    };
+    try {
+      assertCodeBuildRecipe(recipe2);
+    } catch (cause) {
+      throw fault(`${label} (${row.id}) is not a runnable recipe: ${cause instanceof Error ? cause.message : String(cause)}`);
+    }
+    recipes.push(recipe2);
+  });
+  return recipes;
+}
+async function readRepositoryRecipes(baselineDir, envelope) {
+  let text2;
+  try {
+    text2 = await (0, import_promises15.readFile)((0, import_node_path13.join)(baselineDir, REPOSITORY_RECIPES_FILE), "utf8");
+  } catch (cause) {
+    if (cause.code === "ENOENT") return null;
+    throw cause;
+  }
+  return parseRepositoryRecipes(text2, envelope);
+}
+async function resolveCodeRecipes(baselineDir, release, envelope) {
+  const declared = envelope ? await readRepositoryRecipes(baselineDir, envelope) : null;
+  return declared ? { recipes: declared, source: "repository" } : { recipes: release, source: "release" };
+}
+function describeCodeRecipes(resolved) {
+  const ids = resolved.recipes.map((recipe2) => recipe2.id).join(", ");
+  return resolved.source === "repository" ? `Verification recipes: declared by the repository in ${REPOSITORY_RECIPES_FILE} \xB7 ${ids}` : `Verification recipes: release-owned (the repository declares none in ${REPOSITORY_RECIPES_FILE}) \xB7 ${ids}`;
+}
+async function sessionRecipesFor(workspace, options, resume) {
+  const resolved = await resolveCodeRecipes(workspace.baselineDir, options.recipes, options.repositoryRecipes ?? null).catch(async (cause) => {
+    await workspace.cleanup();
+    throw cause;
+  });
+  return {
+    ...resolved,
+    buildPolicyDigest: digestRuntimeValue(JSON.stringify(resolved.recipes)),
+    note: !resume && resolved.source === "repository" ? describeCodeRecipes(resolved) : null
+  };
+}
+
 // src/code-runtime-engine.ts
 var TheseusRuntimeEngine = class {
   constructor(options) {
@@ -4468,6 +4588,7 @@ var TheseusRuntimeEngine = class {
       control: this.options.control,
       ...this.options.localSource ? { localSource: this.options.localSource } : {}
     });
+    const resolvedRecipes = await sessionRecipesFor(workspace, this.options, resume);
     const abort = new AbortController(), startGate = codeRuntimeAcknowledgementGate(abort.signal);
     const conversationRefs = [];
     const active = {
@@ -4476,6 +4597,8 @@ var TheseusRuntimeEngine = class {
       conversationRefs,
       acknowledged: false,
       startGate,
+      recipes: resolvedRecipes.recipes,
+      buildPolicyDigest: resolvedRecipes.buildPolicyDigest,
       role: metadata.role,
       readOnly: metadata.readOnly,
       title: metadata.title,
@@ -4493,6 +4616,7 @@ var TheseusRuntimeEngine = class {
       done: Promise.resolve(null)
     };
     this.#active.set(command.sessionId, active);
+    if (resolvedRecipes.note) await this.#event(command, { type: "message", actor: "system", body: resolvedRecipes.note }, conversationRefs);
     if (requestedLocal) {
       await this.#event(command, {
         type: "message",
@@ -4528,7 +4652,7 @@ var TheseusRuntimeEngine = class {
     const active = await this.#takeOver(command, "pursue requires an active Code session");
     active.done = startGoalPursuit({
       spec,
-      recipes: this.options.recipes,
+      recipes: active.recipes,
       recipeExecutor: this.options.recipeExecutor ?? createContainerRecipeExecutor(this.options.engine),
       workspace: active.workspace,
       baseCommitSha: active.baseCommitSha,
@@ -4607,7 +4731,7 @@ var TheseusRuntimeEngine = class {
   async #runAttempt(command, metadata, active) {
     const lease = fakeCodeLease(command, metadata);
     const broker = this.#observed(command, active, createCodeRuntimeToolBroker({
-      recipes: this.options.recipes,
+      recipes: active.recipes,
       engine: this.options.engine,
       recipeAuthorization: this.options.recipeAuthorization
     }, lease, metadata.role));
@@ -4633,7 +4757,7 @@ var TheseusRuntimeEngine = class {
       // A review-role session is read-only and still runs the proof; a planner
       // marked read-only by its payload runs nothing.
       recipes: metadata.role === "review" || !metadata.readOnly,
-      recipeIds: this.options.recipes.map((recipe2) => recipe2.id),
+      recipeIds: active.recipes.map((recipe2) => recipe2.id),
       ...extraSkills.length ? { extraSkills } : {}
     });
     const closing = result.finalText.trim();
@@ -4964,12 +5088,12 @@ function chooseStrategy(signals = {}) {
 var feedbackIsActionable = actionable;
 
 // src/code-recipe-dependencies.ts
-var import_promises15 = require("fs/promises");
-var import_node_path13 = require("path");
+var import_promises16 = require("fs/promises");
+var import_node_path14 = require("path");
 var RESERVED_MOUNTS = /* @__PURE__ */ new Set(["node_modules", "dist", "coverage"]);
 function withRecipeDependencies(executor, dependencies) {
   const mountAs = dependencies.mountAs ?? "node_modules";
-  if (!(0, import_node_path13.isAbsolute)(dependencies.source)) {
+  if (!(0, import_node_path14.isAbsolute)(dependencies.source)) {
     throw new TypeError("recipe dependency source must be an absolute path");
   }
   if (!RESERVED_MOUNTS.has(mountAs)) {
@@ -4977,24 +5101,24 @@ function withRecipeDependencies(executor, dependencies) {
   }
   return {
     run: async (input) => {
-      const target = (0, import_node_path13.join)(input.workspaceDir, mountAs);
+      const target = (0, import_node_path14.join)(input.workspaceDir, mountAs);
       let linked = false;
       try {
-        const existing = await (0, import_promises15.lstat)(target).catch(() => null);
+        const existing = await (0, import_promises16.lstat)(target).catch(() => null);
         if (!existing) {
-          await (0, import_promises15.symlink)(dependencies.source, target, "dir");
+          await (0, import_promises16.symlink)(dependencies.source, target, "dir");
           linked = true;
         }
         return await executor.run(input);
       } finally {
-        if (linked) await (0, import_promises15.rm)(target, { force: true, recursive: false }).catch(() => void 0);
+        if (linked) await (0, import_promises16.rm)(target, { force: true, recursive: false }).catch(() => void 0);
       }
     }
   };
 }
 async function installedDependencies(repoRoot) {
-  const source = (0, import_node_path13.join)(repoRoot, "node_modules");
-  const info = await (0, import_promises15.lstat)(source).catch(() => null);
+  const source = (0, import_node_path14.join)(repoRoot, "node_modules");
+  const info = await (0, import_promises16.lstat)(source).catch(() => null);
   return info?.isDirectory() ? { source } : null;
 }
 // Annotate the CommonJS export names for ESM import in node:
@@ -5006,6 +5130,7 @@ async function installedDependencies(repoRoot) {
   DecompositionError,
   MAX_MEMORY_BODY,
   MEASURED_PREMIUM,
+  REPOSITORY_RECIPES_FILE,
   SYSTEM_PROMPT_FOR,
   TheseusRuntimeEngine,
   V1_SYSTEM_PROMPT,
@@ -5027,6 +5152,7 @@ async function installedDependencies(repoRoot) {
   createCodeToolBroker,
   createCodeWorkspaceCheckpoint,
   createContainerRecipeExecutor,
+  describeCodeRecipes,
   describePatchFailure,
   digestStagedWorkspace,
   feedbackIsActionable,
@@ -5041,16 +5167,19 @@ async function installedDependencies(repoRoot) {
   materializeGitTree,
   outcomeCloses,
   outcomeMemory,
+  parseRepositoryRecipes,
   patchPaths,
   planReachCollisions,
   prepareRuntimeCheckpoint,
   racedAttempt,
   readOnlyNotice,
+  readRepositoryRecipes,
   recallAbout,
   registeredFiles,
   renderMemories,
   renderOutcome,
   resolveCodePath,
+  resolveCodeRecipes,
   restoreCodeWorkspaceCheckpoint,
   runCodeAgent,
   runCodeAgentAttempt,
@@ -5063,6 +5192,7 @@ async function installedDependencies(repoRoot) {
   safeWorkspaceLabel,
   selectContainerEngine,
   selectWinner,
+  sessionRecipesFor,
   sessionSkillsFor,
   stageWorkspace,
   stageWorkspacePair,