@odla-ai/harness 0.11.8 → 0.11.10

package/dist/{chunk-NUDKRYL4.js → chunk-4IGSN53G.js}

@@ -833,8 +833,9 @@ import { getgid, getuid } from "process";
 import { randomUUID } from "crypto";
 var ARTIFACT_PATH = /^[A-Za-z0-9_@+.,-]+(?:\/[A-Za-z0-9_@+.,-]+)*$/;
 var PRIVATE_ARTIFACT_PART = /^(?:\.git|\.odla|\.wrangler|\.env(?:\..+)?|\.dev\.vars|credentials(?:\..+)?\.json)$/i;
-function buildRecipeContainerArgs(engine, workspaceDir, recipe2, name = `odla-recipe-${randomUUID().slice(0, 12)}`) {
+function buildRecipeContainerArgs(engine, workspaceDir, recipe2, name = `odla-recipe-${randomUUID().slice(0, 12)}`, dependencies = null) {
   assertCodeBuildRecipe(recipe2);
+  const mounts = dependencies ? [dependencyMount(engine, dependencies)] : [];
   if (/[,\r\n]/.test(workspaceDir)) throw new TypeError("workspace path contains unsupported mount characters");
   const uid = typeof getuid === "function" ? getuid() : 1e3;
   const gid = typeof getgid === "function" ? getgid() : 1e3;
@@ -857,6 +858,7 @@ function buildRecipeContainerArgs(engine, workspaceDir, recipe2, name = `odla-re
       `--user=${uid}:${gid}`,
       "--tmpfs=/tmp",
       `--mount=type=bind,source=${workspaceDir},target=/workspace`,
+      ...mounts,
       "--workdir=/workspace",
       "--env=CI=1",
       recipe2.image,
@@ -878,18 +880,28 @@ function buildRecipeContainerArgs(engine, workspaceDir, recipe2, name = `odla-re
     `--user=${uid}:${gid}`,
     `--tmpfs=/tmp:rw,noexec,nosuid,nodev,size=${limits.tmpfs}`,
     `--mount=type=bind,src=${workspaceDir},dst=/workspace`,
+    ...mounts,
     "--workdir=/workspace",
     "--env=CI=1",
     recipe2.image,
     ...recipe2.command
   ];
 }
-function createContainerRecipeExecutor(engine) {
+var LENDABLE = /* @__PURE__ */ new Set(["node_modules", "dist", "coverage"]);
+function dependencyMount(engine, dependencies) {
+  const mountAs = dependencies.mountAs ?? "node_modules";
+  if (!dependencies.source.startsWith("/") || /[,\r\n]/.test(dependencies.source)) {
+    throw new TypeError("recipe dependency source must be an absolute path without mount separators");
+  }
+  if (!LENDABLE.has(mountAs)) throw new TypeError(`recipe dependencies must mount at a reserved name, not "${mountAs}"`);
+  return engine === "container" ? `--mount=type=bind,source=${dependencies.source},target=/workspace/${mountAs},readonly` : `--mount=type=bind,src=${dependencies.source},dst=/workspace/${mountAs},readonly`;
+}
+function createContainerRecipeExecutor(engine, options = {}) {
   return {
     async run(input) {
       await verifyContainerEngineBoundary(engine);
       const name = `odla-recipe-${randomUUID().slice(0, 12)}`;
-      const args = buildRecipeContainerArgs(engine, input.workspaceDir, input.recipe, name);
+      const args = buildRecipeContainerArgs(engine, input.workspaceDir, input.recipe, name, options.dependencies ?? null);
       return execute(engine, args, name, input.recipe, input.signal);
     }
   };
@@ -910,6 +922,9 @@ function parseMemory(value) {
   return Number(match[1]) * scale;
 }
 function execute(engine, args, name, recipe2, signal) {
+  return runContainerCommand(engine, args, name, { timeoutMs: recipe2.timeoutMs, maxOutputBytes: recipe2.maxOutputBytes }, signal);
+}
+function runContainerCommand(engine, args, name, recipe2, signal) {
   return new Promise((accept, reject) => {
     const started = Date.now();
     const child = spawn2(engine, args, { shell: false, stdio: ["ignore", "pipe", "pipe"] });
@@ -3750,7 +3765,7 @@ var TheseusRuntimeEngine = class {
     this.#checkpoints = new CodeRuntimeCheckpointManager({
       control: options.control,
       recipes: options.recipes,
-      recipeExecutor: options.recipeExecutor ?? createContainerRecipeExecutor(options.engine),
+      recipeExecutor: options.recipeExecutor ?? createContainerRecipeExecutor(options.engine, { dependencies: options.recipeDependencies ?? null }),
       fallbackPolicyDigest: this.#buildPolicyDigest,
       event: (command, event, refs) => this.#event(command, event, refs)
     });
@@ -3858,7 +3873,7 @@ var TheseusRuntimeEngine = class {
     active.done = startGoalPursuit({
       spec,
       recipes: active.recipes,
-      recipeExecutor: this.options.recipeExecutor ?? createContainerRecipeExecutor(this.options.engine),
+      recipeExecutor: this.options.recipeExecutor ?? createContainerRecipeExecutor(this.options.engine, { dependencies: this.options.recipeDependencies ?? null }),
       workspace: active.workspace,
       baseCommitSha: active.baseCommitSha,
       trustedBaseDigest: active.trustedBaseDigest,
@@ -4050,6 +4065,7 @@ export {
   buildRecipeContainerArgs,
   createContainerRecipeExecutor,
   assertCodeBuildRecipe,
+  runContainerCommand,
   verifyCodeCandidate,
   prepareRuntimeCheckpoint,
   describeGateFailure,
@@ -4087,4 +4103,4 @@ export {
   withProofRecipes,
   TheseusRuntimeEngine
 };
-//# sourceMappingURL=chunk-NUDKRYL4.js.map
+//# sourceMappingURL=chunk-4IGSN53G.js.map