@odla-ai/harness 0.11.11 → 0.11.13

package/dist/node.d.cts

@@ -596,6 +596,15 @@ interface CodeToolBrokerOptions {
     onDecision?(decision: CodeToolDecision): Promise<void> | void;
 }
 
+/** A host directory (or, for build products, a file) lent into a run's workspace. */
+interface LentDirectory {
+    /** Absolute path on the host. */
+    source: string;
+    /** Workspace-relative path it appears at. A mounted tree's last segment must be a reserved name. */
+    mountAs: string;
+    /** The workspace package it belongs to. A workspace without that directory does not receive the entry. */
+    within?: string;
+}
 /**
  * An installed dependency tree lent to a recipe for the length of one run.
  *
@@ -608,7 +617,27 @@ interface RecipeDependencies {
     /** Where it appears inside the workspace. Must be a reserved name, so the
      *  agent still cannot address it. */
     mountAs?: string;
-}
+    /** Workspace packages whose own `node_modules` the install produced (a
+     *  version the root tree could not hoist), each lent at its own path. */
+    nested?: LentDirectory[];
+    /** The host's build output per workspace package, copied into the run's
+     *  workspace wherever it has none, so a test can import a sibling package
+     *  the way npm resolves it: through its `dist`. */
+    products?: LentDirectory[];
+    /** When set, every run gets its own copy-on-write clone of the tree under
+     *  this directory and mounts it writable. vite and vitest write caches and
+     *  bundled configs into `node_modules` and refuse a read-only one. */
+    runsDir?: string;
+    /** True only on the per-run clone `lendDependencies` makes. The shared tree
+     *  is never mounted writable. */
+    writable?: boolean;
+}
+/** Refuse a lent path that leaves the workspace. */
+declare function assertLentPath(mountAs: string): void;
+/** Refuse any mounted tree the agent could address: inside the workspace, and ending in a reserved name. */
+declare function assertReservedMount(mountAs: string): void;
+/** Every directory a dependency set lends: the root tree first, then each nested one. */
+declare function lentDirectories(dependencies: RecipeDependencies): LentDirectory[];
 /**
  * Wrap an executor so `dependencies.source` is present during each recipe run.
  *
@@ -710,8 +739,9 @@ interface TheseusRuntimeEngineOptions {
     /** Injectable agent attempt. Defaults to runAgent over the brokered surface. */
     runAgentAttempt?: (options: CodeAgentAttemptOptions) => Promise<CodeAgentAttemptResult>;
     recipeExecutor?: CodeRecipeExecutor;
-    /** The host's installed dependency tree, lent read-only to every recipe
-     * container so a real test runner can be a proof in an offline sandbox. */
+    /** The host's prepared dependency tree, lent to every recipe container (as
+     * the run's own writable clone when the set allows one) so a real test
+     * runner can be a proof in an offline sandbox. */
     recipeDependencies?: RecipeDependencies | null;
     /** Owner-visible and terminal-visible bounded runtime failures. */
     onDiagnostic?: (message: string) => void;
@@ -1616,10 +1646,10 @@ declare const DEPENDENCY_INSTALL_TIMEOUT_MS: number;
 /** What preparing a tree needs: the engine and pinned image, the repository, and the cache root; `run` is injectable for tests. */
 interface DependencyCacheInput {
     engine: ContainerEngine;
-    /** The pinned recipe image; its node and npm install the tree. */
+    /** The pinned recipe image; its node installs the tree. */
     image: string;
     repoRoot: string;
-    /** Where trees live: `<cacheRoot>/<key>/node_modules`. */
+    /** Where trees live: `<cacheRoot>/<key>/tree/node_modules`, with per-run clones under `<cacheRoot>/<key>/runs`. */
     cacheRoot: string;
     run?: (engine: ContainerEngine, args: string[], name: string, limits: {
         timeoutMs: number;
@@ -1627,15 +1657,24 @@ interface DependencyCacheInput {
     }) => Promise<CodeRecipeResult>;
     log?: (line: string) => void;
 }
-/** The cache key: the lockfile's bytes, the image, and the architecture the container runs. Null without a lockfile. */
-declare function dependencyCacheKey(repoRoot: string, image: string, arch?: NodeJS.Architecture): Promise<string | null>;
+/** The npm the repository generates its lockfile with: an exact `engines.npm`, or null when it pins none. */
+declare function pinnedNpmVersion(repoRoot: string): Promise<string | null>;
+/** The cache key: the lockfile's bytes, the image, the architecture the container runs, and the npm that installs. Null without a lockfile. */
+declare function dependencyCacheKey(repoRoot: string, image: string, arch?: NodeJS.Architecture, npmVersion?: string | null): Promise<string | null>;
+/** Every workspace directory the root manifest declares that has a package.json, repository-relative, in declaration order. */
+declare function workspaceDirs(repoRoot: string): Promise<string[]>;
 /** Copy only what npm ci needs: the root manifests and every workspace's package.json. Returns what was staged. */
 declare function stageManifests(repoRoot: string, stageDir: string): Promise<string[]>;
-/** The helper's command: networked, writable stage, scripts disabled, nothing else of the host mounted. */
-declare function dependencyInstallArgs(engine: ContainerEngine, image: string, stageDir: string, name: string): string[];
+/** The helper's command: networked, writable stage, scripts disabled, nothing else of the host mounted; the repository's npm when it pins one. */
+declare function dependencyInstallArgs(engine: ContainerEngine, image: string, stageDir: string, name: string, npmVersion?: string | null): string[];
+/** The lines of an npm failure worth reading: from `npm error code` on, never the usage boilerplate npm ends with. */
+declare function npmFailureSummary(stderr: string): string;
 /** The tree for this repository's lockfile, from the cache or freshly installed; null when there is no lockfile or the install failed. */
 declare function prepareContainerDependencies(input: DependencyCacheInput): Promise<RecipeDependencies | null>;
 
+/** The host checkout's build output to lend into a run's workspace: each package's `dist`, then every ignored file the policy allows. */
+declare function hostBuildProducts(repoRoot: string): Promise<LentDirectory[]>;
+
 /** Every ordinary, policy-legal source path under `root`, sorted. */
 declare function registeredFiles(root: string, limit?: number): Promise<string[]>;
 
@@ -1647,10 +1686,27 @@ declare function createContainerRecipeExecutor(engine: ContainerEngine, options?
 }): CodeRecipeExecutor;
 /** Validate immutable recipe identity, digest image, command, and resource bounds. */
 declare function assertCodeBuildRecipe(recipe: CodeBuildRecipe): void;
+/** The command's own output: the Apple engine prefixes stderr with its image and kernel progress
+ *  (`[1/6] Fetching image …`), which is the engine's, not the recipe's, and it was all a bounded
+ *  failure reason ever showed of a red test run (bug eff741ee). */
+declare function recipeOutput(engine: ContainerEngine, stderr: string): string;
 /** Run one container command to completion under an output cap and a timeout, never through a shell. */
 declare function runContainerCommand(engine: ContainerEngine, args: string[], name: string, recipe: {
     timeoutMs: number;
     maxOutputBytes: number;
 }, signal?: AbortSignal): Promise<CodeRecipeResult>;
 
-export { CODE_PATCH_PATH, CODE_RUNTIME_PROTOCOL_VERSION, type CodeAgentAttemptOptions, type CodeAgentAttemptResult, type CodeAgentRun, type CodeBuildRecipe, type CodeExpectedArtifact, type CodeLocalSourceDescriptor, type CodeMemory, type CodeMemoryEvidence, type CodeMemoryKind, type CodeMemoryStore, type CodeRecipeExecutor, type CodeRecipeResult, type CodeRuntimeAgentControlPlane, type CodeRuntimeBinding, type CodeRuntimeCandidateResponse, type CodeRuntimeCapabilities, CodeRuntimeCheckpointManager, type CodeRuntimeClientOptions, type CodeRuntimeCollaborationSkillManifest, type CodeRuntimeCollaborationToolManifest, type CodeRuntimeCollaborationToolRequest, type CodeRuntimeCommand, type CodeRuntimeCommandEngine, type CodeRuntimeCommandKind, type CodeRuntimeCommandResult, CodeRuntimeControlError, type CodeRuntimeControlPlane, type CodeRuntimeInferenceOptions, type CodeRuntimeLoopOptions, type CodeRuntimeMemory, type CodeRuntimeNewMemory, CodeRuntimeReconciler, type CodeRuntimeReviewRequest, type CodeRuntimeReviewResponse, type CodeRuntimeSnapshot, type CodeRuntimeSourceArchive, type CodeRuntimeSourceSnapshot, type CodeSkillOpts, type CodeSurface, type CodeToolBrokerOptions, type CodeToolCallRecord, type CodeToolDecision, type CodeVerificationEvidence, type CodeVerificationLog, type CodeVerificationPolicy, type ContainerEngine, type ContainerEngineSelectionOptions, type ContainerEngineVerificationOptions, type ContainerLimits, type ContainerRunOptions, type ContainerRunResult, type CreateCodeWorkspaceCheckpointInput, DEPENDENCY_INSTALL_TIMEOUT_MS, type DecomposedRun, DecompositionError, type DependencyCacheInput, type GoalAttempt, type GoalAttemptInput, type GoalAttemptOutcome, type GoalAttemptRecord, type GoalBudget, type GoalEvent, type GoalOutcome, type GoalRun, type GoalRunSpec, type GoalStoppedReason, type GoalStrategy, type HarnessRunnerOptions, type IntegrateOptions, type IntegrationStep, MAX_MEMORY_BODY, MEASURED_PREMIUM, type MaterializedCodeSource, type MaterializedGitTree, type NewCodeMemory, PROOF_RECIPE_PREFIX, type PrepareRuntimeCheckpointInput, type PreparedRuntimeCheckpoint, REPOSITORY_RECIPES_FILE, type RacedAttemptOptions, type RacedOutcome, type RecallOptions, type RecipeDependencies, type RepositoryRecipeEnvelope, type ResolvedCodeRecipes, type RestoreCodeWorkspaceCheckpointInput, type RestoredCodeWorkspaceCheckpoint, type RunCodeAgentOptions, type RuntimeCheckpointSession, SYSTEM_PROMPT_FOR, type StageWorkspaceOptions, type StagedWorkspace, type StrategyChoice, type StrategySignals, type SubGoal, type SubGoalResult, TheseusRuntimeEngine, type TheseusRuntimeEngineOptions, V1_SYSTEM_PROMPT, V2_SYSTEM_PROMPT, V3_SYSTEM_PROMPT, type VerifyCodeCandidateInput, applyCodePatch, applyPatchDialectToDiff, assertCodeBuildRecipe, assertDisjointPlan, assertPinnedImage, attachCodeRuntimeReferences, buildContainerRunArgs, buildRecipeContainerArgs, chooseStrategy, codeSkill, createCodeRuntimeControlClient, createCodeRuntimeInference, createCodeRuntimeSessionSkillLoader, createCodeToolBroker, createCodeWorkspaceCheckpoint, createContainerRecipeExecutor, dependencyCacheKey, dependencyInstallArgs, describeCodeRecipes, describeGateFailure, describePatchFailure, digestStagedWorkspace, feedbackIsActionable, hasContextFreeHunk, hazardFromAttempt, installedDependencies, integrateSubGoals, isCheckpointEffectCompleted, materializeCodeRuntimeArchive, materializeCodeRuntimeSource, materializeCommandWorkspace, materializeGitTree, outcomeCloses, outcomeMemory, parseRepositoryRecipes, patchPaths, planReachCollisions, prepareContainerDependencies, prepareRuntimeCheckpoint, racedAttempt, readOnlyNotice, readRepositoryRecipes, recallAbout, registeredFiles, renderMemories, renderOutcome, resolveCodePath, resolveCodeRecipes, restoreCodeWorkspaceCheckpoint, runCodeAgent, runCodeAgentAttempt, runCodeRuntimeHeartbeatLoop, runContainerAttempt, runContainerCommand, runGoal, runHarnessRunner, runLeasedAttempt, runtimeMemoryStore, safeWorkspaceLabel, selectContainerEngine, selectWinner, sessionRecipesFor, sessionSkillsFor, stageManifests, stageWorkspace, stageWorkspacePair, straySubGoalFiles, stripPatchEnvelope, validateCodePatch, validateMemory, validateRelativePath, verifyCodeCandidate, verifyContainerEngineBoundary, withProofRecipes, withRecipeDependencies };
+/** A dependency set lent to one run, and how to give it back. */
+interface LentDependencies {
+    dependencies: RecipeDependencies | null;
+    /** Remove the run's clone. A no-op when nothing was cloned. */
+    release(): Promise<void>;
+}
+/** Clone a directory tree, sharing blocks with the original where the filesystem can and copying otherwise. */
+declare function cloneTree(source: string, target: string, platform?: NodeJS.Platform): Promise<void>;
+/** Give one run its own writable clone of the tree when the set allows it; otherwise lend the set as it is, read-only. */
+declare function lendDependencies(dependencies: RecipeDependencies | null, runId: string): Promise<LentDependencies>;
+/** Copy the host's build output into the workspace wherever its package exists there and it has no copy of its own. Returns what was lent. */
+declare function lendBuildProducts(products: readonly LentDirectory[], workspaceDir: string): Promise<string[]>;
+
+export { CODE_PATCH_PATH, CODE_RUNTIME_PROTOCOL_VERSION, type CodeAgentAttemptOptions, type CodeAgentAttemptResult, type CodeAgentRun, type CodeBuildRecipe, type CodeExpectedArtifact, type CodeLocalSourceDescriptor, type CodeMemory, type CodeMemoryEvidence, type CodeMemoryKind, type CodeMemoryStore, type CodeRecipeExecutor, type CodeRecipeResult, type CodeRuntimeAgentControlPlane, type CodeRuntimeBinding, type CodeRuntimeCandidateResponse, type CodeRuntimeCapabilities, CodeRuntimeCheckpointManager, type CodeRuntimeClientOptions, type CodeRuntimeCollaborationSkillManifest, type CodeRuntimeCollaborationToolManifest, type CodeRuntimeCollaborationToolRequest, type CodeRuntimeCommand, type CodeRuntimeCommandEngine, type CodeRuntimeCommandKind, type CodeRuntimeCommandResult, CodeRuntimeControlError, type CodeRuntimeControlPlane, type CodeRuntimeInferenceOptions, type CodeRuntimeLoopOptions, type CodeRuntimeMemory, type CodeRuntimeNewMemory, CodeRuntimeReconciler, type CodeRuntimeReviewRequest, type CodeRuntimeReviewResponse, type CodeRuntimeSnapshot, type CodeRuntimeSourceArchive, type CodeRuntimeSourceSnapshot, type CodeSkillOpts, type CodeSurface, type CodeToolBrokerOptions, type CodeToolCallRecord, type CodeToolDecision, type CodeVerificationEvidence, type CodeVerificationLog, type CodeVerificationPolicy, type ContainerEngine, type ContainerEngineSelectionOptions, type ContainerEngineVerificationOptions, type ContainerLimits, type ContainerRunOptions, type ContainerRunResult, type CreateCodeWorkspaceCheckpointInput, DEPENDENCY_INSTALL_TIMEOUT_MS, type DecomposedRun, DecompositionError, type DependencyCacheInput, type GoalAttempt, type GoalAttemptInput, type GoalAttemptOutcome, type GoalAttemptRecord, type GoalBudget, type GoalEvent, type GoalOutcome, type GoalRun, type GoalRunSpec, type GoalStoppedReason, type GoalStrategy, type HarnessRunnerOptions, type IntegrateOptions, type IntegrationStep, type LentDependencies, type LentDirectory, MAX_MEMORY_BODY, MEASURED_PREMIUM, type MaterializedCodeSource, type MaterializedGitTree, type NewCodeMemory, PROOF_RECIPE_PREFIX, type PrepareRuntimeCheckpointInput, type PreparedRuntimeCheckpoint, REPOSITORY_RECIPES_FILE, type RacedAttemptOptions, type RacedOutcome, type RecallOptions, type RecipeDependencies, type RepositoryRecipeEnvelope, type ResolvedCodeRecipes, type RestoreCodeWorkspaceCheckpointInput, type RestoredCodeWorkspaceCheckpoint, type RunCodeAgentOptions, type RuntimeCheckpointSession, SYSTEM_PROMPT_FOR, type StageWorkspaceOptions, type StagedWorkspace, type StrategyChoice, type StrategySignals, type SubGoal, type SubGoalResult, TheseusRuntimeEngine, type TheseusRuntimeEngineOptions, V1_SYSTEM_PROMPT, V2_SYSTEM_PROMPT, V3_SYSTEM_PROMPT, type VerifyCodeCandidateInput, applyCodePatch, applyPatchDialectToDiff, assertCodeBuildRecipe, assertDisjointPlan, assertLentPath, assertPinnedImage, assertReservedMount, attachCodeRuntimeReferences, buildContainerRunArgs, buildRecipeContainerArgs, chooseStrategy, cloneTree, codeSkill, createCodeRuntimeControlClient, createCodeRuntimeInference, createCodeRuntimeSessionSkillLoader, createCodeToolBroker, createCodeWorkspaceCheckpoint, createContainerRecipeExecutor, dependencyCacheKey, dependencyInstallArgs, describeCodeRecipes, describeGateFailure, describePatchFailure, digestStagedWorkspace, feedbackIsActionable, hasContextFreeHunk, hazardFromAttempt, hostBuildProducts, installedDependencies, integrateSubGoals, isCheckpointEffectCompleted, lendBuildProducts, lendDependencies, lentDirectories, materializeCodeRuntimeArchive, materializeCodeRuntimeSource, materializeCommandWorkspace, materializeGitTree, npmFailureSummary, outcomeCloses, outcomeMemory, parseRepositoryRecipes, patchPaths, pinnedNpmVersion, planReachCollisions, prepareContainerDependencies, prepareRuntimeCheckpoint, racedAttempt, readOnlyNotice, readRepositoryRecipes, recallAbout, recipeOutput, registeredFiles, renderMemories, renderOutcome, resolveCodePath, resolveCodeRecipes, restoreCodeWorkspaceCheckpoint, runCodeAgent, runCodeAgentAttempt, runCodeRuntimeHeartbeatLoop, runContainerAttempt, runContainerCommand, runGoal, runHarnessRunner, runLeasedAttempt, runtimeMemoryStore, safeWorkspaceLabel, selectContainerEngine, selectWinner, sessionRecipesFor, sessionSkillsFor, stageManifests, stageWorkspace, stageWorkspacePair, straySubGoalFiles, stripPatchEnvelope, validateCodePatch, validateMemory, validateRelativePath, verifyCodeCandidate, verifyContainerEngineBoundary, withProofRecipes, withRecipeDependencies, workspaceDirs };

package/dist/node.d.ts

@@ -596,6 +596,15 @@ interface CodeToolBrokerOptions {
     onDecision?(decision: CodeToolDecision): Promise<void> | void;
 }
 
+/** A host directory (or, for build products, a file) lent into a run's workspace. */
+interface LentDirectory {
+    /** Absolute path on the host. */
+    source: string;
+    /** Workspace-relative path it appears at. A mounted tree's last segment must be a reserved name. */
+    mountAs: string;
+    /** The workspace package it belongs to. A workspace without that directory does not receive the entry. */
+    within?: string;
+}
 /**
  * An installed dependency tree lent to a recipe for the length of one run.
  *
@@ -608,7 +617,27 @@ interface RecipeDependencies {
     /** Where it appears inside the workspace. Must be a reserved name, so the
      *  agent still cannot address it. */
     mountAs?: string;
-}
+    /** Workspace packages whose own `node_modules` the install produced (a
+     *  version the root tree could not hoist), each lent at its own path. */
+    nested?: LentDirectory[];
+    /** The host's build output per workspace package, copied into the run's
+     *  workspace wherever it has none, so a test can import a sibling package
+     *  the way npm resolves it: through its `dist`. */
+    products?: LentDirectory[];
+    /** When set, every run gets its own copy-on-write clone of the tree under
+     *  this directory and mounts it writable. vite and vitest write caches and
+     *  bundled configs into `node_modules` and refuse a read-only one. */
+    runsDir?: string;
+    /** True only on the per-run clone `lendDependencies` makes. The shared tree
+     *  is never mounted writable. */
+    writable?: boolean;
+}
+/** Refuse a lent path that leaves the workspace. */
+declare function assertLentPath(mountAs: string): void;
+/** Refuse any mounted tree the agent could address: inside the workspace, and ending in a reserved name. */
+declare function assertReservedMount(mountAs: string): void;
+/** Every directory a dependency set lends: the root tree first, then each nested one. */
+declare function lentDirectories(dependencies: RecipeDependencies): LentDirectory[];
 /**
  * Wrap an executor so `dependencies.source` is present during each recipe run.
  *
@@ -710,8 +739,9 @@ interface TheseusRuntimeEngineOptions {
     /** Injectable agent attempt. Defaults to runAgent over the brokered surface. */
     runAgentAttempt?: (options: CodeAgentAttemptOptions) => Promise<CodeAgentAttemptResult>;
     recipeExecutor?: CodeRecipeExecutor;
-    /** The host's installed dependency tree, lent read-only to every recipe
-     * container so a real test runner can be a proof in an offline sandbox. */
+    /** The host's prepared dependency tree, lent to every recipe container (as
+     * the run's own writable clone when the set allows one) so a real test
+     * runner can be a proof in an offline sandbox. */
     recipeDependencies?: RecipeDependencies | null;
     /** Owner-visible and terminal-visible bounded runtime failures. */
     onDiagnostic?: (message: string) => void;
@@ -1616,10 +1646,10 @@ declare const DEPENDENCY_INSTALL_TIMEOUT_MS: number;
 /** What preparing a tree needs: the engine and pinned image, the repository, and the cache root; `run` is injectable for tests. */
 interface DependencyCacheInput {
     engine: ContainerEngine;
-    /** The pinned recipe image; its node and npm install the tree. */
+    /** The pinned recipe image; its node installs the tree. */
     image: string;
     repoRoot: string;
-    /** Where trees live: `<cacheRoot>/<key>/node_modules`. */
+    /** Where trees live: `<cacheRoot>/<key>/tree/node_modules`, with per-run clones under `<cacheRoot>/<key>/runs`. */
     cacheRoot: string;
     run?: (engine: ContainerEngine, args: string[], name: string, limits: {
         timeoutMs: number;
@@ -1627,15 +1657,24 @@ interface DependencyCacheInput {
     }) => Promise<CodeRecipeResult>;
     log?: (line: string) => void;
 }
-/** The cache key: the lockfile's bytes, the image, and the architecture the container runs. Null without a lockfile. */
-declare function dependencyCacheKey(repoRoot: string, image: string, arch?: NodeJS.Architecture): Promise<string | null>;
+/** The npm the repository generates its lockfile with: an exact `engines.npm`, or null when it pins none. */
+declare function pinnedNpmVersion(repoRoot: string): Promise<string | null>;
+/** The cache key: the lockfile's bytes, the image, the architecture the container runs, and the npm that installs. Null without a lockfile. */
+declare function dependencyCacheKey(repoRoot: string, image: string, arch?: NodeJS.Architecture, npmVersion?: string | null): Promise<string | null>;
+/** Every workspace directory the root manifest declares that has a package.json, repository-relative, in declaration order. */
+declare function workspaceDirs(repoRoot: string): Promise<string[]>;
 /** Copy only what npm ci needs: the root manifests and every workspace's package.json. Returns what was staged. */
 declare function stageManifests(repoRoot: string, stageDir: string): Promise<string[]>;
-/** The helper's command: networked, writable stage, scripts disabled, nothing else of the host mounted. */
-declare function dependencyInstallArgs(engine: ContainerEngine, image: string, stageDir: string, name: string): string[];
+/** The helper's command: networked, writable stage, scripts disabled, nothing else of the host mounted; the repository's npm when it pins one. */
+declare function dependencyInstallArgs(engine: ContainerEngine, image: string, stageDir: string, name: string, npmVersion?: string | null): string[];
+/** The lines of an npm failure worth reading: from `npm error code` on, never the usage boilerplate npm ends with. */
+declare function npmFailureSummary(stderr: string): string;
 /** The tree for this repository's lockfile, from the cache or freshly installed; null when there is no lockfile or the install failed. */
 declare function prepareContainerDependencies(input: DependencyCacheInput): Promise<RecipeDependencies | null>;
 
+/** The host checkout's build output to lend into a run's workspace: each package's `dist`, then every ignored file the policy allows. */
+declare function hostBuildProducts(repoRoot: string): Promise<LentDirectory[]>;
+
 /** Every ordinary, policy-legal source path under `root`, sorted. */
 declare function registeredFiles(root: string, limit?: number): Promise<string[]>;
 
@@ -1647,10 +1686,27 @@ declare function createContainerRecipeExecutor(engine: ContainerEngine, options?
 }): CodeRecipeExecutor;
 /** Validate immutable recipe identity, digest image, command, and resource bounds. */
 declare function assertCodeBuildRecipe(recipe: CodeBuildRecipe): void;
+/** The command's own output: the Apple engine prefixes stderr with its image and kernel progress
+ *  (`[1/6] Fetching image …`), which is the engine's, not the recipe's, and it was all a bounded
+ *  failure reason ever showed of a red test run (bug eff741ee). */
+declare function recipeOutput(engine: ContainerEngine, stderr: string): string;
 /** Run one container command to completion under an output cap and a timeout, never through a shell. */
 declare function runContainerCommand(engine: ContainerEngine, args: string[], name: string, recipe: {
     timeoutMs: number;
     maxOutputBytes: number;
 }, signal?: AbortSignal): Promise<CodeRecipeResult>;
 
-export { CODE_PATCH_PATH, CODE_RUNTIME_PROTOCOL_VERSION, type CodeAgentAttemptOptions, type CodeAgentAttemptResult, type CodeAgentRun, type CodeBuildRecipe, type CodeExpectedArtifact, type CodeLocalSourceDescriptor, type CodeMemory, type CodeMemoryEvidence, type CodeMemoryKind, type CodeMemoryStore, type CodeRecipeExecutor, type CodeRecipeResult, type CodeRuntimeAgentControlPlane, type CodeRuntimeBinding, type CodeRuntimeCandidateResponse, type CodeRuntimeCapabilities, CodeRuntimeCheckpointManager, type CodeRuntimeClientOptions, type CodeRuntimeCollaborationSkillManifest, type CodeRuntimeCollaborationToolManifest, type CodeRuntimeCollaborationToolRequest, type CodeRuntimeCommand, type CodeRuntimeCommandEngine, type CodeRuntimeCommandKind, type CodeRuntimeCommandResult, CodeRuntimeControlError, type CodeRuntimeControlPlane, type CodeRuntimeInferenceOptions, type CodeRuntimeLoopOptions, type CodeRuntimeMemory, type CodeRuntimeNewMemory, CodeRuntimeReconciler, type CodeRuntimeReviewRequest, type CodeRuntimeReviewResponse, type CodeRuntimeSnapshot, type CodeRuntimeSourceArchive, type CodeRuntimeSourceSnapshot, type CodeSkillOpts, type CodeSurface, type CodeToolBrokerOptions, type CodeToolCallRecord, type CodeToolDecision, type CodeVerificationEvidence, type CodeVerificationLog, type CodeVerificationPolicy, type ContainerEngine, type ContainerEngineSelectionOptions, type ContainerEngineVerificationOptions, type ContainerLimits, type ContainerRunOptions, type ContainerRunResult, type CreateCodeWorkspaceCheckpointInput, DEPENDENCY_INSTALL_TIMEOUT_MS, type DecomposedRun, DecompositionError, type DependencyCacheInput, type GoalAttempt, type GoalAttemptInput, type GoalAttemptOutcome, type GoalAttemptRecord, type GoalBudget, type GoalEvent, type GoalOutcome, type GoalRun, type GoalRunSpec, type GoalStoppedReason, type GoalStrategy, type HarnessRunnerOptions, type IntegrateOptions, type IntegrationStep, MAX_MEMORY_BODY, MEASURED_PREMIUM, type MaterializedCodeSource, type MaterializedGitTree, type NewCodeMemory, PROOF_RECIPE_PREFIX, type PrepareRuntimeCheckpointInput, type PreparedRuntimeCheckpoint, REPOSITORY_RECIPES_FILE, type RacedAttemptOptions, type RacedOutcome, type RecallOptions, type RecipeDependencies, type RepositoryRecipeEnvelope, type ResolvedCodeRecipes, type RestoreCodeWorkspaceCheckpointInput, type RestoredCodeWorkspaceCheckpoint, type RunCodeAgentOptions, type RuntimeCheckpointSession, SYSTEM_PROMPT_FOR, type StageWorkspaceOptions, type StagedWorkspace, type StrategyChoice, type StrategySignals, type SubGoal, type SubGoalResult, TheseusRuntimeEngine, type TheseusRuntimeEngineOptions, V1_SYSTEM_PROMPT, V2_SYSTEM_PROMPT, V3_SYSTEM_PROMPT, type VerifyCodeCandidateInput, applyCodePatch, applyPatchDialectToDiff, assertCodeBuildRecipe, assertDisjointPlan, assertPinnedImage, attachCodeRuntimeReferences, buildContainerRunArgs, buildRecipeContainerArgs, chooseStrategy, codeSkill, createCodeRuntimeControlClient, createCodeRuntimeInference, createCodeRuntimeSessionSkillLoader, createCodeToolBroker, createCodeWorkspaceCheckpoint, createContainerRecipeExecutor, dependencyCacheKey, dependencyInstallArgs, describeCodeRecipes, describeGateFailure, describePatchFailure, digestStagedWorkspace, feedbackIsActionable, hasContextFreeHunk, hazardFromAttempt, installedDependencies, integrateSubGoals, isCheckpointEffectCompleted, materializeCodeRuntimeArchive, materializeCodeRuntimeSource, materializeCommandWorkspace, materializeGitTree, outcomeCloses, outcomeMemory, parseRepositoryRecipes, patchPaths, planReachCollisions, prepareContainerDependencies, prepareRuntimeCheckpoint, racedAttempt, readOnlyNotice, readRepositoryRecipes, recallAbout, registeredFiles, renderMemories, renderOutcome, resolveCodePath, resolveCodeRecipes, restoreCodeWorkspaceCheckpoint, runCodeAgent, runCodeAgentAttempt, runCodeRuntimeHeartbeatLoop, runContainerAttempt, runContainerCommand, runGoal, runHarnessRunner, runLeasedAttempt, runtimeMemoryStore, safeWorkspaceLabel, selectContainerEngine, selectWinner, sessionRecipesFor, sessionSkillsFor, stageManifests, stageWorkspace, stageWorkspacePair, straySubGoalFiles, stripPatchEnvelope, validateCodePatch, validateMemory, validateRelativePath, verifyCodeCandidate, verifyContainerEngineBoundary, withProofRecipes, withRecipeDependencies };
+/** A dependency set lent to one run, and how to give it back. */
+interface LentDependencies {
+    dependencies: RecipeDependencies | null;
+    /** Remove the run's clone. A no-op when nothing was cloned. */
+    release(): Promise<void>;
+}
+/** Clone a directory tree, sharing blocks with the original where the filesystem can and copying otherwise. */
+declare function cloneTree(source: string, target: string, platform?: NodeJS.Platform): Promise<void>;
+/** Give one run its own writable clone of the tree when the set allows it; otherwise lend the set as it is, read-only. */
+declare function lendDependencies(dependencies: RecipeDependencies | null, runId: string): Promise<LentDependencies>;
+/** Copy the host's build output into the workspace wherever its package exists there and it has no copy of its own. Returns what was lent. */
+declare function lendBuildProducts(products: readonly LentDirectory[], workspaceDir: string): Promise<string[]>;
+
+export { CODE_PATCH_PATH, CODE_RUNTIME_PROTOCOL_VERSION, type CodeAgentAttemptOptions, type CodeAgentAttemptResult, type CodeAgentRun, type CodeBuildRecipe, type CodeExpectedArtifact, type CodeLocalSourceDescriptor, type CodeMemory, type CodeMemoryEvidence, type CodeMemoryKind, type CodeMemoryStore, type CodeRecipeExecutor, type CodeRecipeResult, type CodeRuntimeAgentControlPlane, type CodeRuntimeBinding, type CodeRuntimeCandidateResponse, type CodeRuntimeCapabilities, CodeRuntimeCheckpointManager, type CodeRuntimeClientOptions, type CodeRuntimeCollaborationSkillManifest, type CodeRuntimeCollaborationToolManifest, type CodeRuntimeCollaborationToolRequest, type CodeRuntimeCommand, type CodeRuntimeCommandEngine, type CodeRuntimeCommandKind, type CodeRuntimeCommandResult, CodeRuntimeControlError, type CodeRuntimeControlPlane, type CodeRuntimeInferenceOptions, type CodeRuntimeLoopOptions, type CodeRuntimeMemory, type CodeRuntimeNewMemory, CodeRuntimeReconciler, type CodeRuntimeReviewRequest, type CodeRuntimeReviewResponse, type CodeRuntimeSnapshot, type CodeRuntimeSourceArchive, type CodeRuntimeSourceSnapshot, type CodeSkillOpts, type CodeSurface, type CodeToolBrokerOptions, type CodeToolCallRecord, type CodeToolDecision, type CodeVerificationEvidence, type CodeVerificationLog, type CodeVerificationPolicy, type ContainerEngine, type ContainerEngineSelectionOptions, type ContainerEngineVerificationOptions, type ContainerLimits, type ContainerRunOptions, type ContainerRunResult, type CreateCodeWorkspaceCheckpointInput, DEPENDENCY_INSTALL_TIMEOUT_MS, type DecomposedRun, DecompositionError, type DependencyCacheInput, type GoalAttempt, type GoalAttemptInput, type GoalAttemptOutcome, type GoalAttemptRecord, type GoalBudget, type GoalEvent, type GoalOutcome, type GoalRun, type GoalRunSpec, type GoalStoppedReason, type GoalStrategy, type HarnessRunnerOptions, type IntegrateOptions, type IntegrationStep, type LentDependencies, type LentDirectory, MAX_MEMORY_BODY, MEASURED_PREMIUM, type MaterializedCodeSource, type MaterializedGitTree, type NewCodeMemory, PROOF_RECIPE_PREFIX, type PrepareRuntimeCheckpointInput, type PreparedRuntimeCheckpoint, REPOSITORY_RECIPES_FILE, type RacedAttemptOptions, type RacedOutcome, type RecallOptions, type RecipeDependencies, type RepositoryRecipeEnvelope, type ResolvedCodeRecipes, type RestoreCodeWorkspaceCheckpointInput, type RestoredCodeWorkspaceCheckpoint, type RunCodeAgentOptions, type RuntimeCheckpointSession, SYSTEM_PROMPT_FOR, type StageWorkspaceOptions, type StagedWorkspace, type StrategyChoice, type StrategySignals, type SubGoal, type SubGoalResult, TheseusRuntimeEngine, type TheseusRuntimeEngineOptions, V1_SYSTEM_PROMPT, V2_SYSTEM_PROMPT, V3_SYSTEM_PROMPT, type VerifyCodeCandidateInput, applyCodePatch, applyPatchDialectToDiff, assertCodeBuildRecipe, assertDisjointPlan, assertLentPath, assertPinnedImage, assertReservedMount, attachCodeRuntimeReferences, buildContainerRunArgs, buildRecipeContainerArgs, chooseStrategy, cloneTree, codeSkill, createCodeRuntimeControlClient, createCodeRuntimeInference, createCodeRuntimeSessionSkillLoader, createCodeToolBroker, createCodeWorkspaceCheckpoint, createContainerRecipeExecutor, dependencyCacheKey, dependencyInstallArgs, describeCodeRecipes, describeGateFailure, describePatchFailure, digestStagedWorkspace, feedbackIsActionable, hasContextFreeHunk, hazardFromAttempt, hostBuildProducts, installedDependencies, integrateSubGoals, isCheckpointEffectCompleted, lendBuildProducts, lendDependencies, lentDirectories, materializeCodeRuntimeArchive, materializeCodeRuntimeSource, materializeCommandWorkspace, materializeGitTree, npmFailureSummary, outcomeCloses, outcomeMemory, parseRepositoryRecipes, patchPaths, pinnedNpmVersion, planReachCollisions, prepareContainerDependencies, prepareRuntimeCheckpoint, racedAttempt, readOnlyNotice, readRepositoryRecipes, recallAbout, recipeOutput, registeredFiles, renderMemories, renderOutcome, resolveCodePath, resolveCodeRecipes, restoreCodeWorkspaceCheckpoint, runCodeAgent, runCodeAgentAttempt, runCodeRuntimeHeartbeatLoop, runContainerAttempt, runContainerCommand, runGoal, runHarnessRunner, runLeasedAttempt, runtimeMemoryStore, safeWorkspaceLabel, selectContainerEngine, selectWinner, sessionRecipesFor, sessionSkillsFor, stageManifests, stageWorkspace, stageWorkspacePair, straySubGoalFiles, stripPatchEnvelope, validateCodePatch, validateMemory, validateRelativePath, verifyCodeCandidate, verifyContainerEngineBoundary, withProofRecipes, withRecipeDependencies, workspaceDirs };

package/dist/node.js

@@ -1,7 +1,7 @@
 import {
   runHarnessRunner,
   runLeasedAttempt
-} from "./chunk-GNNAQ2JX.js";
+} from "./chunk-EXSEQEZ6.js";
 import {
   CODE_PATCH_PATH,
   CODE_RUNTIME_PROTOCOL_VERSION,
@@ -19,8 +19,11 @@ import {
   applyCodePatch,
   applyPatchDialectToDiff,
   assertCodeBuildRecipe,
+  assertLentPath,
+  assertReservedMount,
   attachCodeRuntimeReferences,
   buildRecipeContainerArgs,
+  cloneTree,
   codeSkill,
   createCodeRuntimeControlClient,
   createCodeRuntimeInference,
@@ -34,7 +37,11 @@ import {
   digestStagedWorkspace,
   hasContextFreeHunk,
   hazardFromAttempt,
+  installedDependencies,
   isCheckpointEffectCompleted,
+  lendBuildProducts,
+  lendDependencies,
+  lentDirectories,
   materializeCodeRuntimeArchive,
   materializeCodeRuntimeSource,
   materializeCommandWorkspace,
@@ -43,6 +50,7 @@ import {
   readOnlyNotice,
   readRepositoryRecipes,
   recallAbout,
+  recipeOutput,
   registeredFiles,
   renderMemories,
   resolveCodePath,
@@ -60,10 +68,12 @@ import {
   validateMemory,
   validateRelativePath,
   verifyCodeCandidate,
-  withProofRecipes
-} from "./chunk-4IGSN53G.js";
-import "./chunk-INL642J5.js";
+  withProofRecipes,
+  withRecipeDependencies
+} from "./chunk-B2PQAORN.js";
+import "./chunk-OXWLPB7P.js";
 import {
+  allowedWorkspacePath,
   assertPinnedImage,
   buildContainerRunArgs,
   materializeGitTree,
@@ -73,7 +83,7 @@ import {
   stageWorkspace,
   stageWorkspacePair,
   verifyContainerEngineBoundary
-} from "./chunk-ZM6AITC2.js";
+} from "./chunk-3ON6UAOV.js";
 import "./chunk-T2IW7MYQ.js";
 import "./chunk-ONYW2VSB.js";
 
@@ -343,82 +353,58 @@ function chooseStrategy(signals = {}) {
 }
 var feedbackIsActionable = actionable;
 
-// src/code-recipe-dependencies.ts
-import { lstat, rm, symlink } from "fs/promises";
-import { isAbsolute, join } from "path";
-var RESERVED_MOUNTS = /* @__PURE__ */ new Set(["node_modules", "dist", "coverage"]);
-function withRecipeDependencies(executor, dependencies) {
-  const mountAs = dependencies.mountAs ?? "node_modules";
-  if (!isAbsolute(dependencies.source)) {
-    throw new TypeError("recipe dependency source must be an absolute path");
-  }
-  if (!RESERVED_MOUNTS.has(mountAs)) {
-    throw new TypeError(`recipe dependencies must mount at a reserved name, not "${mountAs}"`);
-  }
-  return {
-    run: async (input) => {
-      const target = join(input.workspaceDir, mountAs);
-      let linked = false;
-      try {
-        const existing = await lstat(target).catch(() => null);
-        if (!existing) {
-          await symlink(dependencies.source, target, "dir");
-          linked = true;
-        }
-        return await executor.run(input);
-      } finally {
-        if (linked) await rm(target, { force: true, recursive: false }).catch(() => void 0);
-      }
-    }
-  };
-}
-async function installedDependencies(repoRoot) {
-  const source = join(repoRoot, "node_modules");
-  const info = await lstat(source).catch(() => null);
-  return info?.isDirectory() ? { source } : null;
-}
-
 // src/code-recipe-dependency-cache.ts
 import { createHash } from "crypto";
-import { copyFile, mkdir, readFile, readdir, rename, rm as rm2, stat, writeFile } from "fs/promises";
+import { copyFile, mkdir, readFile, readdir, rename, rm, stat, writeFile } from "fs/promises";
 import { getgid, getuid } from "process";
-import { join as join2 } from "path";
+import { join } from "path";
 var DEPENDENCY_INSTALL_TIMEOUT_MS = 20 * 6e4;
 var OUTPUT_CAP = 4 * 1024 * 1024;
+var EXACT_VERSION = /^\d+\.\d+\.\d+$/;
 var exists = async (path) => Boolean(await stat(path).catch(() => null));
-async function dependencyCacheKey(repoRoot, image, arch = process.arch) {
-  const lock = await readFile(join2(repoRoot, "package-lock.json")).catch(() => null);
+async function pinnedNpmVersion(repoRoot) {
+  const manifest = await readFile(join(repoRoot, "package.json"), "utf8").catch(() => null);
+  if (!manifest) return null;
+  const engines = JSON.parse(manifest).engines;
+  return typeof engines?.npm === "string" && EXACT_VERSION.test(engines.npm) ? engines.npm : null;
+}
+async function dependencyCacheKey(repoRoot, image, arch = process.arch, npmVersion = null) {
+  const lock = await readFile(join(repoRoot, "package-lock.json")).catch(() => null);
   if (!lock) return null;
-  return createHash("sha256").update(lock).update("\n").update(image).update("\n").update(arch).digest("hex").slice(0, 32);
+  return createHash("sha256").update(lock).update("\n").update(image).update("\n").update(arch).update("\n").update(npmVersion ?? "image").digest("hex").slice(0, 32);
+}
+async function workspaceDirs(repoRoot) {
+  const root = JSON.parse(await readFile(join(repoRoot, "package.json"), "utf8"));
+  const globs = Array.isArray(root.workspaces) ? root.workspaces : root.workspaces?.packages ?? [];
+  const dirs = [];
+  for (const glob of globs) {
+    const found = glob.endsWith("/*") ? (await readdir(join(repoRoot, glob.slice(0, -2)), { withFileTypes: true }).catch(() => [])).filter((entry) => entry.isDirectory()).map((entry) => `${glob.slice(0, -2)}/${entry.name}`) : [glob];
+    for (const dir of found) if (await exists(join(repoRoot, dir, "package.json"))) dirs.push(dir);
+  }
+  return dirs;
 }
 async function stageManifests(repoRoot, stageDir) {
   await mkdir(stageDir, { recursive: true });
   const staged = [];
   for (const name of ["package.json", "package-lock.json", ".npmrc"]) {
-    if (!await exists(join2(repoRoot, name))) continue;
-    await copyFile(join2(repoRoot, name), join2(stageDir, name));
+    if (!await exists(join(repoRoot, name))) continue;
+    await copyFile(join(repoRoot, name), join(stageDir, name));
     staged.push(name);
   }
-  const root = JSON.parse(await readFile(join2(repoRoot, "package.json"), "utf8"));
-  const globs = Array.isArray(root.workspaces) ? root.workspaces : root.workspaces?.packages ?? [];
-  for (const glob of globs) {
-    const dirs = glob.endsWith("/*") ? (await readdir(join2(repoRoot, glob.slice(0, -2)), { withFileTypes: true }).catch(() => [])).filter((entry) => entry.isDirectory()).map((entry) => `${glob.slice(0, -2)}/${entry.name}`) : [glob];
-    for (const dir of dirs) {
-      const manifest = join2(repoRoot, dir, "package.json");
-      if (!await exists(manifest)) continue;
-      await mkdir(join2(stageDir, dir), { recursive: true });
-      await copyFile(manifest, join2(stageDir, dir, "package.json"));
-      staged.push(`${dir}/package.json`);
-    }
+  for (const dir of await workspaceDirs(repoRoot)) {
+    await mkdir(join(stageDir, dir), { recursive: true });
+    await copyFile(join(repoRoot, dir, "package.json"), join(stageDir, dir, "package.json"));
+    staged.push(`${dir}/package.json`);
   }
   return staged;
 }
-function dependencyInstallArgs(engine, image, stageDir, name) {
+function dependencyInstallArgs(engine, image, stageDir, name, npmVersion = null) {
   if (/[,\r\n]/.test(stageDir)) throw new TypeError("stage path contains unsupported mount characters");
   const uid = typeof getuid === "function" ? getuid() : 1e3;
   const gid = typeof getgid === "function" ? getgid() : 1e3;
   const mount = engine === "container" ? `--mount=type=bind,source=${stageDir},target=/workspace` : `--mount=type=bind,src=${stageDir},dst=/workspace`;
-  const npm = ["npm", "ci", "--no-audit", "--no-fund", "--ignore-scripts", "--engine-strict=false"];
+  const install = ["ci", "--no-audit", "--no-fund", "--ignore-scripts", "--engine-strict=false"];
+  const npm = npmVersion ? ["npx", "--yes", `npm@${npmVersion}`, ...install] : ["npm", ...install];
   return [
     "run",
     "--rm",
@@ -437,34 +423,79 @@ function dependencyInstallArgs(engine, image, stageDir, name) {
     ...npm
   ];
 }
+function npmFailureSummary(stderr) {
+  const lines = stderr.split("\n").map((line) => line.trim()).filter((line) => line && line !== "npm error");
+  const at = lines.findIndex((line) => /^npm error code /.test(line));
+  return (at >= 0 ? lines.slice(at, at + 3) : lines.slice(-3)).join(" | ").slice(0, 400);
+}
+async function nestedTrees(treeRoot, dirs) {
+  const nested = [];
+  for (const dir of dirs) {
+    if (await exists(join(treeRoot, dir, "node_modules"))) nested.push({ source: join(treeRoot, dir, "node_modules"), mountAs: `${dir}/node_modules` });
+  }
+  return nested;
+}
 async function prepareContainerDependencies(input) {
-  const key = await dependencyCacheKey(input.repoRoot, input.image);
+  const npmVersion = await pinnedNpmVersion(input.repoRoot);
+  const key = await dependencyCacheKey(input.repoRoot, input.image, process.arch, npmVersion);
   if (!key) return null;
-  const dir = join2(input.cacheRoot, key);
-  const tree = join2(dir, "node_modules");
-  const stage = join2(dir, "stage");
-  if (await exists(tree)) return { source: tree };
+  const dir = join(input.cacheRoot, key);
+  const tree = join(dir, "tree");
+  const stage = join(dir, "stage");
+  const runsDir = join(dir, "runs");
+  await rm(runsDir, { recursive: true, force: true });
+  const dirs = await workspaceDirs(input.repoRoot);
+  const lend = async () => ({ source: join(tree, "node_modules"), nested: await nestedTrees(tree, dirs), runsDir });
+  if (await exists(join(tree, "node_modules"))) return lend();
   const run = input.run ?? runContainerCommand;
-  await rm2(stage, { recursive: true, force: true });
+  await rm(stage, { recursive: true, force: true });
   const staged = await stageManifests(input.repoRoot, stage);
-  input.log?.(`installing ${key.slice(0, 12)}: ${staged.length} manifests, npm ci in ${input.image}`);
+  input.log?.(`installing ${key.slice(0, 12)}: ${staged.length} manifests, npm${npmVersion ? `@${npmVersion}` : ""} ci in ${input.image}`);
   const name = `odla-deps-${key.slice(0, 12)}`;
   const result = await run(
     input.engine,
-    dependencyInstallArgs(input.engine, input.image, stage, name),
+    dependencyInstallArgs(input.engine, input.image, stage, name, npmVersion),
     name,
     { timeoutMs: DEPENDENCY_INSTALL_TIMEOUT_MS, maxOutputBytes: OUTPUT_CAP }
   );
-  if (result.exitCode !== 0 || result.timedOut || !await exists(join2(stage, "node_modules"))) {
-    input.log?.(`install failed (exit ${result.exitCode}${result.timedOut ? ", timed out" : ""}): ${result.stderr.trim().split("\n").slice(-3).join(" | ").slice(0, 400)}`);
-    await rm2(stage, { recursive: true, force: true });
+  if (result.exitCode !== 0 || result.timedOut || !await exists(join(stage, "node_modules"))) {
+    input.log?.(`install failed (exit ${result.exitCode}${result.timedOut ? ", timed out" : ""}): ${npmFailureSummary(result.stderr)}`);
+    await rm(stage, { recursive: true, force: true });
     return null;
   }
-  await rename(join2(stage, "node_modules"), tree);
-  await rm2(stage, { recursive: true, force: true });
-  await writeFile(join2(dir, "manifest.json"), JSON.stringify({ image: input.image, key, createdAt: Date.now() }, null, 2));
-  input.log?.(`installed ${key.slice(0, 12)} in ${Math.round(result.durationMs / 1e3)}s`);
-  return { source: tree };
+  await rm(tree, { recursive: true, force: true });
+  await rename(stage, tree);
+  await writeFile(join(dir, "manifest.json"), JSON.stringify({ image: input.image, key, npmVersion, createdAt: Date.now() }, null, 2));
+  const lent = await lend();
+  input.log?.(`installed ${key.slice(0, 12)} in ${Math.round(result.durationMs / 1e3)}s, ${lent.nested?.length ?? 0} nested tree(s)`);
+  return lent;
+}
+
+// src/code-recipe-build-products.ts
+import { spawn } from "child_process";
+import { stat as stat2 } from "fs/promises";
+import { join as join2 } from "path";
+function gitIgnoredFiles(repoRoot) {
+  return new Promise((accept) => {
+    const child = spawn("git", ["-C", repoRoot, "ls-files", "--others", "--ignored", "--exclude-standard", "-z"], { shell: false, stdio: ["ignore", "pipe", "ignore"] });
+    const chunks = [];
+    child.stdout.on("data", (chunk) => chunks.push(chunk));
+    child.once("error", () => accept([]));
+    child.once("exit", (code) => accept(code === 0 ? Buffer.concat(chunks).toString("utf8").split("\0").filter(Boolean) : []));
+  });
+}
+async function hostBuildProducts(repoRoot) {
+  const dirs = await workspaceDirs(repoRoot);
+  const within = (path) => dirs.find((dir) => path.startsWith(`${dir}/`)) ?? ".";
+  const products = [];
+  for (const dir of dirs) {
+    const source = join2(repoRoot, dir, "dist");
+    if ((await stat2(source).catch(() => null))?.isDirectory()) products.push({ source, mountAs: `${dir}/dist`, within: dir });
+  }
+  for (const path of await gitIgnoredFiles(repoRoot)) {
+    if (allowedWorkspacePath(path)) products.push({ source: join2(repoRoot, path), mountAs: path, within: within(path) });
+  }
+  return products;
 }
 export {
   CODE_PATCH_PATH,
@@ -487,11 +518,14 @@ export {
   applyPatchDialectToDiff,
   assertCodeBuildRecipe,
   assertDisjointPlan,
+  assertLentPath,
   assertPinnedImage,
+  assertReservedMount,
   attachCodeRuntimeReferences,
   buildContainerRunArgs,
   buildRecipeContainerArgs,
   chooseStrategy,
+  cloneTree,
   codeSkill,
   createCodeRuntimeControlClient,
   createCodeRuntimeInference,
@@ -508,17 +542,23 @@ export {
   feedbackIsActionable,
   hasContextFreeHunk,
   hazardFromAttempt,
+  hostBuildProducts,
   installedDependencies,
   integrateSubGoals,
   isCheckpointEffectCompleted,
+  lendBuildProducts,
+  lendDependencies,
+  lentDirectories,
   materializeCodeRuntimeArchive,
   materializeCodeRuntimeSource,
   materializeCommandWorkspace,
   materializeGitTree,
+  npmFailureSummary,
   outcomeCloses,
   outcomeMemory,
   parseRepositoryRecipes,
   patchPaths,
+  pinnedNpmVersion,
   planReachCollisions,
   prepareContainerDependencies,
   prepareRuntimeCheckpoint,
@@ -526,6 +566,7 @@ export {
   readOnlyNotice,
   readRepositoryRecipes,
   recallAbout,
+  recipeOutput,
   registeredFiles,
   renderMemories,
   renderOutcome,
@@ -557,6 +598,7 @@ export {
   verifyCodeCandidate,
   verifyContainerEngineBoundary,
   withProofRecipes,
-  withRecipeDependencies
+  withRecipeDependencies,
+  workspaceDirs
 };
 //# sourceMappingURL=node.js.map