@odla-ai/harness 0.11.8 → 0.11.10

package/dist/code-runtime-cli.cjs

@@ -1075,8 +1075,9 @@ async function verifyContainerEngineBoundary(engine, options = {}) {
 // src/recipe-container.ts
 var ARTIFACT_PATH = /^[A-Za-z0-9_@+.,-]+(?:\/[A-Za-z0-9_@+.,-]+)*$/;
 var PRIVATE_ARTIFACT_PART = /^(?:\.git|\.odla|\.wrangler|\.env(?:\..+)?|\.dev\.vars|credentials(?:\..+)?\.json)$/i;
-function buildRecipeContainerArgs(engine, workspaceDir, recipe2, name = `odla-recipe-${(0, import_node_crypto.randomUUID)().slice(0, 12)}`) {
+function buildRecipeContainerArgs(engine, workspaceDir, recipe2, name = `odla-recipe-${(0, import_node_crypto.randomUUID)().slice(0, 12)}`, dependencies = null) {
   assertCodeBuildRecipe(recipe2);
+  const mounts = dependencies ? [dependencyMount(engine, dependencies)] : [];
   if (/[,\r\n]/.test(workspaceDir)) throw new TypeError("workspace path contains unsupported mount characters");
   const uid = typeof import_node_process2.getuid === "function" ? (0, import_node_process2.getuid)() : 1e3;
   const gid = typeof import_node_process2.getgid === "function" ? (0, import_node_process2.getgid)() : 1e3;
@@ -1099,6 +1100,7 @@ function buildRecipeContainerArgs(engine, workspaceDir, recipe2, name = `odla-re
       `--user=${uid}:${gid}`,
       "--tmpfs=/tmp",
       `--mount=type=bind,source=${workspaceDir},target=/workspace`,
+      ...mounts,
       "--workdir=/workspace",
       "--env=CI=1",
       recipe2.image,
@@ -1120,18 +1122,28 @@ function buildRecipeContainerArgs(engine, workspaceDir, recipe2, name = `odla-re
     `--user=${uid}:${gid}`,
     `--tmpfs=/tmp:rw,noexec,nosuid,nodev,size=${limits.tmpfs}`,
     `--mount=type=bind,src=${workspaceDir},dst=/workspace`,
+    ...mounts,
     "--workdir=/workspace",
     "--env=CI=1",
     recipe2.image,
     ...recipe2.command
   ];
 }
-function createContainerRecipeExecutor(engine) {
+var LENDABLE = /* @__PURE__ */ new Set(["node_modules", "dist", "coverage"]);
+function dependencyMount(engine, dependencies) {
+  const mountAs = dependencies.mountAs ?? "node_modules";
+  if (!dependencies.source.startsWith("/") || /[,\r\n]/.test(dependencies.source)) {
+    throw new TypeError("recipe dependency source must be an absolute path without mount separators");
+  }
+  if (!LENDABLE.has(mountAs)) throw new TypeError(`recipe dependencies must mount at a reserved name, not "${mountAs}"`);
+  return engine === "container" ? `--mount=type=bind,source=${dependencies.source},target=/workspace/${mountAs},readonly` : `--mount=type=bind,src=${dependencies.source},dst=/workspace/${mountAs},readonly`;
+}
+function createContainerRecipeExecutor(engine, options = {}) {
   return {
     async run(input) {
       await verifyContainerEngineBoundary(engine);
       const name = `odla-recipe-${(0, import_node_crypto.randomUUID)().slice(0, 12)}`;
-      const args = buildRecipeContainerArgs(engine, input.workspaceDir, input.recipe, name);
+      const args = buildRecipeContainerArgs(engine, input.workspaceDir, input.recipe, name, options.dependencies ?? null);
       return execute(engine, args, name, input.recipe, input.signal);
     }
   };
@@ -1152,6 +1164,9 @@ function parseMemory(value) {
   return Number(match[1]) * scale;
 }
 function execute(engine, args, name, recipe2, signal) {
+  return runContainerCommand(engine, args, name, { timeoutMs: recipe2.timeoutMs, maxOutputBytes: recipe2.maxOutputBytes }, signal);
+}
+function runContainerCommand(engine, args, name, recipe2, signal) {
   return new Promise((accept, reject) => {
     const started = Date.now();
     const child = (0, import_node_child_process4.spawn)(engine, args, { shell: false, stdio: ["ignore", "pipe", "pipe"] });
@@ -4148,7 +4163,7 @@ var TheseusRuntimeEngine = class {
     this.#checkpoints = new CodeRuntimeCheckpointManager({
       control: options.control,
       recipes: options.recipes,
-      recipeExecutor: options.recipeExecutor ?? createContainerRecipeExecutor(options.engine),
+      recipeExecutor: options.recipeExecutor ?? createContainerRecipeExecutor(options.engine, { dependencies: options.recipeDependencies ?? null }),
       fallbackPolicyDigest: this.#buildPolicyDigest,
       event: (command, event, refs) => this.#event(command, event, refs)
     });
@@ -4256,7 +4271,7 @@ var TheseusRuntimeEngine = class {
     active.done = startGoalPursuit({
       spec,
       recipes: active.recipes,
-      recipeExecutor: this.options.recipeExecutor ?? createContainerRecipeExecutor(this.options.engine),
+      recipeExecutor: this.options.recipeExecutor ?? createContainerRecipeExecutor(this.options.engine, { dependencies: this.options.recipeDependencies ?? null }),
       workspace: active.workspace,
       baseCommitSha: active.baseCommitSha,
       trustedBaseDigest: active.trustedBaseDigest,