@odla-ai/harness 0.11.8 → 0.11.10

package/dist/node.d.cts

@@ -596,6 +596,34 @@ interface CodeToolBrokerOptions {
     onDecision?(decision: CodeToolDecision): Promise<void> | void;
 }
 
+/**
+ * An installed dependency tree lent to a recipe for the length of one run.
+ *
+ * Mounted under a reserved name and removed in a finally, so the agent can run
+ * a real build without the tree ever being addressable by a patch.
+ */
+interface RecipeDependencies {
+    /** Absolute path to an installed dependency tree on the host. */
+    source: string;
+    /** Where it appears inside the workspace. Must be a reserved name, so the
+     *  agent still cannot address it. */
+    mountAs?: string;
+}
+/**
+ * Wrap an executor so `dependencies.source` is present during each recipe run.
+ *
+ * It is linked, not copied. A link costs nothing per run, and dependencies are
+ * identical across every attempt, racer and verification — copying them would
+ * multiply the largest thing in the tree by the number of stages.
+ *
+ * The link is removed in a `finally`, so a recipe that times out or throws
+ * cannot leave it behind for `workspace.patch()` to diff or
+ * `digestStagedWorkspace` to hash.
+ */
+declare function withRecipeDependencies(executor: CodeRecipeExecutor, dependencies: RecipeDependencies): CodeRecipeExecutor;
+/** Resolve the dependency tree for a repository root, when it has one. */
+declare function installedDependencies(repoRoot: string): Promise<RecipeDependencies | null>;
+
 /** The file at a repository's root that declares its verification recipes. */
 declare const REPOSITORY_RECIPES_FILE = "odla.recipes.json";
 /** The release-owned execution envelope every repository-declared recipe runs in.
@@ -682,6 +710,9 @@ interface TheseusRuntimeEngineOptions {
     /** Injectable agent attempt. Defaults to runAgent over the brokered surface. */
     runAgentAttempt?: (options: CodeAgentAttemptOptions) => Promise<CodeAgentAttemptResult>;
     recipeExecutor?: CodeRecipeExecutor;
+    /** The host's installed dependency tree, lent read-only to every recipe
+     * container so a real test runner can be a proof in an offline sandbox. */
+    recipeDependencies?: RecipeDependencies | null;
     /** Owner-visible and terminal-visible bounded runtime failures. */
     onDiagnostic?: (message: string) => void;
     /** Skills the host adds for a session, beyond the sandbox surface.
@@ -1580,42 +1611,46 @@ declare function describePatchFailure(patch: string, detail: string): string;
 /** Apply a previously validated patch without invoking a shell or repository hooks. */
 declare function applyCodePatch(workspaceDir: string, rawPatch: string, paths: readonly string[]): Promise<void>;
 
-/**
- * An installed dependency tree lent to a recipe for the length of one run.
- *
- * Mounted under a reserved name and removed in a finally, so the agent can run
- * a real build without the tree ever being addressable by a patch.
- */
-interface RecipeDependencies {
-    /** Absolute path to an installed dependency tree on the host. */
-    source: string;
-    /** Where it appears inside the workspace. Must be a reserved name, so the
-     *  agent still cannot address it. */
-    mountAs?: string;
-}
-/**
- * Wrap an executor so `dependencies.source` is present during each recipe run.
- *
- * It is linked, not copied. A link costs nothing per run, and dependencies are
- * identical across every attempt, racer and verification — copying them would
- * multiply the largest thing in the tree by the number of stages.
- *
- * The link is removed in a `finally`, so a recipe that times out or throws
- * cannot leave it behind for `workspace.patch()` to diff or
- * `digestStagedWorkspace` to hash.
- */
-declare function withRecipeDependencies(executor: CodeRecipeExecutor, dependencies: RecipeDependencies): CodeRecipeExecutor;
-/** Resolve the dependency tree for a repository root, when it has one. */
-declare function installedDependencies(repoRoot: string): Promise<RecipeDependencies | null>;
+/** How long one npm ci may take before the cache gives up on it. */
+declare const DEPENDENCY_INSTALL_TIMEOUT_MS: number;
+/** What preparing a tree needs: the engine and pinned image, the repository, and the cache root; `run` is injectable for tests. */
+interface DependencyCacheInput {
+    engine: ContainerEngine;
+    /** The pinned recipe image; its node and npm install the tree. */
+    image: string;
+    repoRoot: string;
+    /** Where trees live: `<cacheRoot>/<key>/node_modules`. */
+    cacheRoot: string;
+    run?: (engine: ContainerEngine, args: string[], name: string, limits: {
+        timeoutMs: number;
+        maxOutputBytes: number;
+    }) => Promise<CodeRecipeResult>;
+    log?: (line: string) => void;
+}
+/** The cache key: the lockfile's bytes, the image, and the architecture the container runs. Null without a lockfile. */
+declare function dependencyCacheKey(repoRoot: string, image: string, arch?: NodeJS.Architecture): Promise<string | null>;
+/** Copy only what npm ci needs: the root manifests and every workspace's package.json. Returns what was staged. */
+declare function stageManifests(repoRoot: string, stageDir: string): Promise<string[]>;
+/** The helper's command: networked, writable stage, scripts disabled, nothing else of the host mounted. */
+declare function dependencyInstallArgs(engine: ContainerEngine, image: string, stageDir: string, name: string): string[];
+/** The tree for this repository's lockfile, from the cache or freshly installed; null when there is no lockfile or the install failed. */
+declare function prepareContainerDependencies(input: DependencyCacheInput): Promise<RecipeDependencies | null>;
 
 /** Every ordinary, policy-legal source path under `root`, sorted. */
 declare function registeredFiles(root: string, limit?: number): Promise<string[]>;
 
 /** Build a trusted, fixed command for an isolated and networkless recipe container. */
-declare function buildRecipeContainerArgs(engine: ContainerEngine, workspaceDir: string, recipe: CodeBuildRecipe, name?: string): string[];
+declare function buildRecipeContainerArgs(engine: ContainerEngine, workspaceDir: string, recipe: CodeBuildRecipe, name?: string, dependencies?: RecipeDependencies | null): string[];
 /** Create a recipe executor that never invokes a shell and never mounts credentials. */
-declare function createContainerRecipeExecutor(engine: ContainerEngine): CodeRecipeExecutor;
+declare function createContainerRecipeExecutor(engine: ContainerEngine, options?: {
+    dependencies?: RecipeDependencies | null;
+}): CodeRecipeExecutor;
 /** Validate immutable recipe identity, digest image, command, and resource bounds. */
 declare function assertCodeBuildRecipe(recipe: CodeBuildRecipe): void;
+/** Run one container command to completion under an output cap and a timeout, never through a shell. */
+declare function runContainerCommand(engine: ContainerEngine, args: string[], name: string, recipe: {
+    timeoutMs: number;
+    maxOutputBytes: number;
+}, signal?: AbortSignal): Promise<CodeRecipeResult>;
 
-export { CODE_PATCH_PATH, CODE_RUNTIME_PROTOCOL_VERSION, type CodeAgentAttemptOptions, type CodeAgentAttemptResult, type CodeAgentRun, type CodeBuildRecipe, type CodeExpectedArtifact, type CodeLocalSourceDescriptor, type CodeMemory, type CodeMemoryEvidence, type CodeMemoryKind, type CodeMemoryStore, type CodeRecipeExecutor, type CodeRecipeResult, type CodeRuntimeAgentControlPlane, type CodeRuntimeBinding, type CodeRuntimeCandidateResponse, type CodeRuntimeCapabilities, CodeRuntimeCheckpointManager, type CodeRuntimeClientOptions, type CodeRuntimeCollaborationSkillManifest, type CodeRuntimeCollaborationToolManifest, type CodeRuntimeCollaborationToolRequest, type CodeRuntimeCommand, type CodeRuntimeCommandEngine, type CodeRuntimeCommandKind, type CodeRuntimeCommandResult, CodeRuntimeControlError, type CodeRuntimeControlPlane, type CodeRuntimeInferenceOptions, type CodeRuntimeLoopOptions, type CodeRuntimeMemory, type CodeRuntimeNewMemory, CodeRuntimeReconciler, type CodeRuntimeReviewRequest, type CodeRuntimeReviewResponse, type CodeRuntimeSnapshot, type CodeRuntimeSourceArchive, type CodeRuntimeSourceSnapshot, type CodeSkillOpts, type CodeSurface, type CodeToolBrokerOptions, type CodeToolCallRecord, type CodeToolDecision, type CodeVerificationEvidence, type CodeVerificationLog, type CodeVerificationPolicy, type ContainerEngine, type ContainerEngineSelectionOptions, type ContainerEngineVerificationOptions, type ContainerLimits, type ContainerRunOptions, type ContainerRunResult, type CreateCodeWorkspaceCheckpointInput, type DecomposedRun, DecompositionError, type GoalAttempt, type GoalAttemptInput, type GoalAttemptOutcome, type GoalAttemptRecord, type GoalBudget, type GoalEvent, type GoalOutcome, type GoalRun, type GoalRunSpec, type GoalStoppedReason, type GoalStrategy, type HarnessRunnerOptions, type IntegrateOptions, type IntegrationStep, MAX_MEMORY_BODY, MEASURED_PREMIUM, type MaterializedCodeSource, type MaterializedGitTree, type NewCodeMemory, PROOF_RECIPE_PREFIX, type PrepareRuntimeCheckpointInput, type PreparedRuntimeCheckpoint, REPOSITORY_RECIPES_FILE, type RacedAttemptOptions, type RacedOutcome, type RecallOptions, type RecipeDependencies, type RepositoryRecipeEnvelope, type ResolvedCodeRecipes, type RestoreCodeWorkspaceCheckpointInput, type RestoredCodeWorkspaceCheckpoint, type RunCodeAgentOptions, type RuntimeCheckpointSession, SYSTEM_PROMPT_FOR, type StageWorkspaceOptions, type StagedWorkspace, type StrategyChoice, type StrategySignals, type SubGoal, type SubGoalResult, TheseusRuntimeEngine, type TheseusRuntimeEngineOptions, V1_SYSTEM_PROMPT, V2_SYSTEM_PROMPT, V3_SYSTEM_PROMPT, type VerifyCodeCandidateInput, applyCodePatch, applyPatchDialectToDiff, assertCodeBuildRecipe, assertDisjointPlan, assertPinnedImage, attachCodeRuntimeReferences, buildContainerRunArgs, buildRecipeContainerArgs, chooseStrategy, codeSkill, createCodeRuntimeControlClient, createCodeRuntimeInference, createCodeRuntimeSessionSkillLoader, createCodeToolBroker, createCodeWorkspaceCheckpoint, createContainerRecipeExecutor, describeCodeRecipes, describeGateFailure, describePatchFailure, digestStagedWorkspace, feedbackIsActionable, hasContextFreeHunk, hazardFromAttempt, installedDependencies, integrateSubGoals, isCheckpointEffectCompleted, materializeCodeRuntimeArchive, materializeCodeRuntimeSource, materializeCommandWorkspace, materializeGitTree, outcomeCloses, outcomeMemory, parseRepositoryRecipes, patchPaths, planReachCollisions, prepareRuntimeCheckpoint, racedAttempt, readOnlyNotice, readRepositoryRecipes, recallAbout, registeredFiles, renderMemories, renderOutcome, resolveCodePath, resolveCodeRecipes, restoreCodeWorkspaceCheckpoint, runCodeAgent, runCodeAgentAttempt, runCodeRuntimeHeartbeatLoop, runContainerAttempt, runGoal, runHarnessRunner, runLeasedAttempt, runtimeMemoryStore, safeWorkspaceLabel, selectContainerEngine, selectWinner, sessionRecipesFor, sessionSkillsFor, stageWorkspace, stageWorkspacePair, straySubGoalFiles, stripPatchEnvelope, validateCodePatch, validateMemory, validateRelativePath, verifyCodeCandidate, verifyContainerEngineBoundary, withProofRecipes, withRecipeDependencies };
+export { CODE_PATCH_PATH, CODE_RUNTIME_PROTOCOL_VERSION, type CodeAgentAttemptOptions, type CodeAgentAttemptResult, type CodeAgentRun, type CodeBuildRecipe, type CodeExpectedArtifact, type CodeLocalSourceDescriptor, type CodeMemory, type CodeMemoryEvidence, type CodeMemoryKind, type CodeMemoryStore, type CodeRecipeExecutor, type CodeRecipeResult, type CodeRuntimeAgentControlPlane, type CodeRuntimeBinding, type CodeRuntimeCandidateResponse, type CodeRuntimeCapabilities, CodeRuntimeCheckpointManager, type CodeRuntimeClientOptions, type CodeRuntimeCollaborationSkillManifest, type CodeRuntimeCollaborationToolManifest, type CodeRuntimeCollaborationToolRequest, type CodeRuntimeCommand, type CodeRuntimeCommandEngine, type CodeRuntimeCommandKind, type CodeRuntimeCommandResult, CodeRuntimeControlError, type CodeRuntimeControlPlane, type CodeRuntimeInferenceOptions, type CodeRuntimeLoopOptions, type CodeRuntimeMemory, type CodeRuntimeNewMemory, CodeRuntimeReconciler, type CodeRuntimeReviewRequest, type CodeRuntimeReviewResponse, type CodeRuntimeSnapshot, type CodeRuntimeSourceArchive, type CodeRuntimeSourceSnapshot, type CodeSkillOpts, type CodeSurface, type CodeToolBrokerOptions, type CodeToolCallRecord, type CodeToolDecision, type CodeVerificationEvidence, type CodeVerificationLog, type CodeVerificationPolicy, type ContainerEngine, type ContainerEngineSelectionOptions, type ContainerEngineVerificationOptions, type ContainerLimits, type ContainerRunOptions, type ContainerRunResult, type CreateCodeWorkspaceCheckpointInput, DEPENDENCY_INSTALL_TIMEOUT_MS, type DecomposedRun, DecompositionError, type DependencyCacheInput, type GoalAttempt, type GoalAttemptInput, type GoalAttemptOutcome, type GoalAttemptRecord, type GoalBudget, type GoalEvent, type GoalOutcome, type GoalRun, type GoalRunSpec, type GoalStoppedReason, type GoalStrategy, type HarnessRunnerOptions, type IntegrateOptions, type IntegrationStep, MAX_MEMORY_BODY, MEASURED_PREMIUM, type MaterializedCodeSource, type MaterializedGitTree, type NewCodeMemory, PROOF_RECIPE_PREFIX, type PrepareRuntimeCheckpointInput, type PreparedRuntimeCheckpoint, REPOSITORY_RECIPES_FILE, type RacedAttemptOptions, type RacedOutcome, type RecallOptions, type RecipeDependencies, type RepositoryRecipeEnvelope, type ResolvedCodeRecipes, type RestoreCodeWorkspaceCheckpointInput, type RestoredCodeWorkspaceCheckpoint, type RunCodeAgentOptions, type RuntimeCheckpointSession, SYSTEM_PROMPT_FOR, type StageWorkspaceOptions, type StagedWorkspace, type StrategyChoice, type StrategySignals, type SubGoal, type SubGoalResult, TheseusRuntimeEngine, type TheseusRuntimeEngineOptions, V1_SYSTEM_PROMPT, V2_SYSTEM_PROMPT, V3_SYSTEM_PROMPT, type VerifyCodeCandidateInput, applyCodePatch, applyPatchDialectToDiff, assertCodeBuildRecipe, assertDisjointPlan, assertPinnedImage, attachCodeRuntimeReferences, buildContainerRunArgs, buildRecipeContainerArgs, chooseStrategy, codeSkill, createCodeRuntimeControlClient, createCodeRuntimeInference, createCodeRuntimeSessionSkillLoader, createCodeToolBroker, createCodeWorkspaceCheckpoint, createContainerRecipeExecutor, dependencyCacheKey, dependencyInstallArgs, describeCodeRecipes, describeGateFailure, describePatchFailure, digestStagedWorkspace, feedbackIsActionable, hasContextFreeHunk, hazardFromAttempt, installedDependencies, integrateSubGoals, isCheckpointEffectCompleted, materializeCodeRuntimeArchive, materializeCodeRuntimeSource, materializeCommandWorkspace, materializeGitTree, outcomeCloses, outcomeMemory, parseRepositoryRecipes, patchPaths, planReachCollisions, prepareContainerDependencies, prepareRuntimeCheckpoint, racedAttempt, readOnlyNotice, readRepositoryRecipes, recallAbout, registeredFiles, renderMemories, renderOutcome, resolveCodePath, resolveCodeRecipes, restoreCodeWorkspaceCheckpoint, runCodeAgent, runCodeAgentAttempt, runCodeRuntimeHeartbeatLoop, runContainerAttempt, runContainerCommand, runGoal, runHarnessRunner, runLeasedAttempt, runtimeMemoryStore, safeWorkspaceLabel, selectContainerEngine, selectWinner, sessionRecipesFor, sessionSkillsFor, stageManifests, stageWorkspace, stageWorkspacePair, straySubGoalFiles, stripPatchEnvelope, validateCodePatch, validateMemory, validateRelativePath, verifyCodeCandidate, verifyContainerEngineBoundary, withProofRecipes, withRecipeDependencies };

package/dist/node.d.ts

@@ -596,6 +596,34 @@ interface CodeToolBrokerOptions {
     onDecision?(decision: CodeToolDecision): Promise<void> | void;
 }
 
+/**
+ * An installed dependency tree lent to a recipe for the length of one run.
+ *
+ * Mounted under a reserved name and removed in a finally, so the agent can run
+ * a real build without the tree ever being addressable by a patch.
+ */
+interface RecipeDependencies {
+    /** Absolute path to an installed dependency tree on the host. */
+    source: string;
+    /** Where it appears inside the workspace. Must be a reserved name, so the
+     *  agent still cannot address it. */
+    mountAs?: string;
+}
+/**
+ * Wrap an executor so `dependencies.source` is present during each recipe run.
+ *
+ * It is linked, not copied. A link costs nothing per run, and dependencies are
+ * identical across every attempt, racer and verification — copying them would
+ * multiply the largest thing in the tree by the number of stages.
+ *
+ * The link is removed in a `finally`, so a recipe that times out or throws
+ * cannot leave it behind for `workspace.patch()` to diff or
+ * `digestStagedWorkspace` to hash.
+ */
+declare function withRecipeDependencies(executor: CodeRecipeExecutor, dependencies: RecipeDependencies): CodeRecipeExecutor;
+/** Resolve the dependency tree for a repository root, when it has one. */
+declare function installedDependencies(repoRoot: string): Promise<RecipeDependencies | null>;
+
 /** The file at a repository's root that declares its verification recipes. */
 declare const REPOSITORY_RECIPES_FILE = "odla.recipes.json";
 /** The release-owned execution envelope every repository-declared recipe runs in.
@@ -682,6 +710,9 @@ interface TheseusRuntimeEngineOptions {
     /** Injectable agent attempt. Defaults to runAgent over the brokered surface. */
     runAgentAttempt?: (options: CodeAgentAttemptOptions) => Promise<CodeAgentAttemptResult>;
     recipeExecutor?: CodeRecipeExecutor;
+    /** The host's installed dependency tree, lent read-only to every recipe
+     * container so a real test runner can be a proof in an offline sandbox. */
+    recipeDependencies?: RecipeDependencies | null;
     /** Owner-visible and terminal-visible bounded runtime failures. */
     onDiagnostic?: (message: string) => void;
     /** Skills the host adds for a session, beyond the sandbox surface.
@@ -1580,42 +1611,46 @@ declare function describePatchFailure(patch: string, detail: string): string;
 /** Apply a previously validated patch without invoking a shell or repository hooks. */
 declare function applyCodePatch(workspaceDir: string, rawPatch: string, paths: readonly string[]): Promise<void>;
 
-/**
- * An installed dependency tree lent to a recipe for the length of one run.
- *
- * Mounted under a reserved name and removed in a finally, so the agent can run
- * a real build without the tree ever being addressable by a patch.
- */
-interface RecipeDependencies {
-    /** Absolute path to an installed dependency tree on the host. */
-    source: string;
-    /** Where it appears inside the workspace. Must be a reserved name, so the
-     *  agent still cannot address it. */
-    mountAs?: string;
-}
-/**
- * Wrap an executor so `dependencies.source` is present during each recipe run.
- *
- * It is linked, not copied. A link costs nothing per run, and dependencies are
- * identical across every attempt, racer and verification — copying them would
- * multiply the largest thing in the tree by the number of stages.
- *
- * The link is removed in a `finally`, so a recipe that times out or throws
- * cannot leave it behind for `workspace.patch()` to diff or
- * `digestStagedWorkspace` to hash.
- */
-declare function withRecipeDependencies(executor: CodeRecipeExecutor, dependencies: RecipeDependencies): CodeRecipeExecutor;
-/** Resolve the dependency tree for a repository root, when it has one. */
-declare function installedDependencies(repoRoot: string): Promise<RecipeDependencies | null>;
+/** How long one npm ci may take before the cache gives up on it. */
+declare const DEPENDENCY_INSTALL_TIMEOUT_MS: number;
+/** What preparing a tree needs: the engine and pinned image, the repository, and the cache root; `run` is injectable for tests. */
+interface DependencyCacheInput {
+    engine: ContainerEngine;
+    /** The pinned recipe image; its node and npm install the tree. */
+    image: string;
+    repoRoot: string;
+    /** Where trees live: `<cacheRoot>/<key>/node_modules`. */
+    cacheRoot: string;
+    run?: (engine: ContainerEngine, args: string[], name: string, limits: {
+        timeoutMs: number;
+        maxOutputBytes: number;
+    }) => Promise<CodeRecipeResult>;
+    log?: (line: string) => void;
+}
+/** The cache key: the lockfile's bytes, the image, and the architecture the container runs. Null without a lockfile. */
+declare function dependencyCacheKey(repoRoot: string, image: string, arch?: NodeJS.Architecture): Promise<string | null>;
+/** Copy only what npm ci needs: the root manifests and every workspace's package.json. Returns what was staged. */
+declare function stageManifests(repoRoot: string, stageDir: string): Promise<string[]>;
+/** The helper's command: networked, writable stage, scripts disabled, nothing else of the host mounted. */
+declare function dependencyInstallArgs(engine: ContainerEngine, image: string, stageDir: string, name: string): string[];
+/** The tree for this repository's lockfile, from the cache or freshly installed; null when there is no lockfile or the install failed. */
+declare function prepareContainerDependencies(input: DependencyCacheInput): Promise<RecipeDependencies | null>;
 
 /** Every ordinary, policy-legal source path under `root`, sorted. */
 declare function registeredFiles(root: string, limit?: number): Promise<string[]>;
 
 /** Build a trusted, fixed command for an isolated and networkless recipe container. */
-declare function buildRecipeContainerArgs(engine: ContainerEngine, workspaceDir: string, recipe: CodeBuildRecipe, name?: string): string[];
+declare function buildRecipeContainerArgs(engine: ContainerEngine, workspaceDir: string, recipe: CodeBuildRecipe, name?: string, dependencies?: RecipeDependencies | null): string[];
 /** Create a recipe executor that never invokes a shell and never mounts credentials. */
-declare function createContainerRecipeExecutor(engine: ContainerEngine): CodeRecipeExecutor;
+declare function createContainerRecipeExecutor(engine: ContainerEngine, options?: {
+    dependencies?: RecipeDependencies | null;
+}): CodeRecipeExecutor;
 /** Validate immutable recipe identity, digest image, command, and resource bounds. */
 declare function assertCodeBuildRecipe(recipe: CodeBuildRecipe): void;
+/** Run one container command to completion under an output cap and a timeout, never through a shell. */
+declare function runContainerCommand(engine: ContainerEngine, args: string[], name: string, recipe: {
+    timeoutMs: number;
+    maxOutputBytes: number;
+}, signal?: AbortSignal): Promise<CodeRecipeResult>;
 
-export { CODE_PATCH_PATH, CODE_RUNTIME_PROTOCOL_VERSION, type CodeAgentAttemptOptions, type CodeAgentAttemptResult, type CodeAgentRun, type CodeBuildRecipe, type CodeExpectedArtifact, type CodeLocalSourceDescriptor, type CodeMemory, type CodeMemoryEvidence, type CodeMemoryKind, type CodeMemoryStore, type CodeRecipeExecutor, type CodeRecipeResult, type CodeRuntimeAgentControlPlane, type CodeRuntimeBinding, type CodeRuntimeCandidateResponse, type CodeRuntimeCapabilities, CodeRuntimeCheckpointManager, type CodeRuntimeClientOptions, type CodeRuntimeCollaborationSkillManifest, type CodeRuntimeCollaborationToolManifest, type CodeRuntimeCollaborationToolRequest, type CodeRuntimeCommand, type CodeRuntimeCommandEngine, type CodeRuntimeCommandKind, type CodeRuntimeCommandResult, CodeRuntimeControlError, type CodeRuntimeControlPlane, type CodeRuntimeInferenceOptions, type CodeRuntimeLoopOptions, type CodeRuntimeMemory, type CodeRuntimeNewMemory, CodeRuntimeReconciler, type CodeRuntimeReviewRequest, type CodeRuntimeReviewResponse, type CodeRuntimeSnapshot, type CodeRuntimeSourceArchive, type CodeRuntimeSourceSnapshot, type CodeSkillOpts, type CodeSurface, type CodeToolBrokerOptions, type CodeToolCallRecord, type CodeToolDecision, type CodeVerificationEvidence, type CodeVerificationLog, type CodeVerificationPolicy, type ContainerEngine, type ContainerEngineSelectionOptions, type ContainerEngineVerificationOptions, type ContainerLimits, type ContainerRunOptions, type ContainerRunResult, type CreateCodeWorkspaceCheckpointInput, type DecomposedRun, DecompositionError, type GoalAttempt, type GoalAttemptInput, type GoalAttemptOutcome, type GoalAttemptRecord, type GoalBudget, type GoalEvent, type GoalOutcome, type GoalRun, type GoalRunSpec, type GoalStoppedReason, type GoalStrategy, type HarnessRunnerOptions, type IntegrateOptions, type IntegrationStep, MAX_MEMORY_BODY, MEASURED_PREMIUM, type MaterializedCodeSource, type MaterializedGitTree, type NewCodeMemory, PROOF_RECIPE_PREFIX, type PrepareRuntimeCheckpointInput, type PreparedRuntimeCheckpoint, REPOSITORY_RECIPES_FILE, type RacedAttemptOptions, type RacedOutcome, type RecallOptions, type RecipeDependencies, type RepositoryRecipeEnvelope, type ResolvedCodeRecipes, type RestoreCodeWorkspaceCheckpointInput, type RestoredCodeWorkspaceCheckpoint, type RunCodeAgentOptions, type RuntimeCheckpointSession, SYSTEM_PROMPT_FOR, type StageWorkspaceOptions, type StagedWorkspace, type StrategyChoice, type StrategySignals, type SubGoal, type SubGoalResult, TheseusRuntimeEngine, type TheseusRuntimeEngineOptions, V1_SYSTEM_PROMPT, V2_SYSTEM_PROMPT, V3_SYSTEM_PROMPT, type VerifyCodeCandidateInput, applyCodePatch, applyPatchDialectToDiff, assertCodeBuildRecipe, assertDisjointPlan, assertPinnedImage, attachCodeRuntimeReferences, buildContainerRunArgs, buildRecipeContainerArgs, chooseStrategy, codeSkill, createCodeRuntimeControlClient, createCodeRuntimeInference, createCodeRuntimeSessionSkillLoader, createCodeToolBroker, createCodeWorkspaceCheckpoint, createContainerRecipeExecutor, describeCodeRecipes, describeGateFailure, describePatchFailure, digestStagedWorkspace, feedbackIsActionable, hasContextFreeHunk, hazardFromAttempt, installedDependencies, integrateSubGoals, isCheckpointEffectCompleted, materializeCodeRuntimeArchive, materializeCodeRuntimeSource, materializeCommandWorkspace, materializeGitTree, outcomeCloses, outcomeMemory, parseRepositoryRecipes, patchPaths, planReachCollisions, prepareRuntimeCheckpoint, racedAttempt, readOnlyNotice, readRepositoryRecipes, recallAbout, registeredFiles, renderMemories, renderOutcome, resolveCodePath, resolveCodeRecipes, restoreCodeWorkspaceCheckpoint, runCodeAgent, runCodeAgentAttempt, runCodeRuntimeHeartbeatLoop, runContainerAttempt, runGoal, runHarnessRunner, runLeasedAttempt, runtimeMemoryStore, safeWorkspaceLabel, selectContainerEngine, selectWinner, sessionRecipesFor, sessionSkillsFor, stageWorkspace, stageWorkspacePair, straySubGoalFiles, stripPatchEnvelope, validateCodePatch, validateMemory, validateRelativePath, verifyCodeCandidate, verifyContainerEngineBoundary, withProofRecipes, withRecipeDependencies };
+export { CODE_PATCH_PATH, CODE_RUNTIME_PROTOCOL_VERSION, type CodeAgentAttemptOptions, type CodeAgentAttemptResult, type CodeAgentRun, type CodeBuildRecipe, type CodeExpectedArtifact, type CodeLocalSourceDescriptor, type CodeMemory, type CodeMemoryEvidence, type CodeMemoryKind, type CodeMemoryStore, type CodeRecipeExecutor, type CodeRecipeResult, type CodeRuntimeAgentControlPlane, type CodeRuntimeBinding, type CodeRuntimeCandidateResponse, type CodeRuntimeCapabilities, CodeRuntimeCheckpointManager, type CodeRuntimeClientOptions, type CodeRuntimeCollaborationSkillManifest, type CodeRuntimeCollaborationToolManifest, type CodeRuntimeCollaborationToolRequest, type CodeRuntimeCommand, type CodeRuntimeCommandEngine, type CodeRuntimeCommandKind, type CodeRuntimeCommandResult, CodeRuntimeControlError, type CodeRuntimeControlPlane, type CodeRuntimeInferenceOptions, type CodeRuntimeLoopOptions, type CodeRuntimeMemory, type CodeRuntimeNewMemory, CodeRuntimeReconciler, type CodeRuntimeReviewRequest, type CodeRuntimeReviewResponse, type CodeRuntimeSnapshot, type CodeRuntimeSourceArchive, type CodeRuntimeSourceSnapshot, type CodeSkillOpts, type CodeSurface, type CodeToolBrokerOptions, type CodeToolCallRecord, type CodeToolDecision, type CodeVerificationEvidence, type CodeVerificationLog, type CodeVerificationPolicy, type ContainerEngine, type ContainerEngineSelectionOptions, type ContainerEngineVerificationOptions, type ContainerLimits, type ContainerRunOptions, type ContainerRunResult, type CreateCodeWorkspaceCheckpointInput, DEPENDENCY_INSTALL_TIMEOUT_MS, type DecomposedRun, DecompositionError, type DependencyCacheInput, type GoalAttempt, type GoalAttemptInput, type GoalAttemptOutcome, type GoalAttemptRecord, type GoalBudget, type GoalEvent, type GoalOutcome, type GoalRun, type GoalRunSpec, type GoalStoppedReason, type GoalStrategy, type HarnessRunnerOptions, type IntegrateOptions, type IntegrationStep, MAX_MEMORY_BODY, MEASURED_PREMIUM, type MaterializedCodeSource, type MaterializedGitTree, type NewCodeMemory, PROOF_RECIPE_PREFIX, type PrepareRuntimeCheckpointInput, type PreparedRuntimeCheckpoint, REPOSITORY_RECIPES_FILE, type RacedAttemptOptions, type RacedOutcome, type RecallOptions, type RecipeDependencies, type RepositoryRecipeEnvelope, type ResolvedCodeRecipes, type RestoreCodeWorkspaceCheckpointInput, type RestoredCodeWorkspaceCheckpoint, type RunCodeAgentOptions, type RuntimeCheckpointSession, SYSTEM_PROMPT_FOR, type StageWorkspaceOptions, type StagedWorkspace, type StrategyChoice, type StrategySignals, type SubGoal, type SubGoalResult, TheseusRuntimeEngine, type TheseusRuntimeEngineOptions, V1_SYSTEM_PROMPT, V2_SYSTEM_PROMPT, V3_SYSTEM_PROMPT, type VerifyCodeCandidateInput, applyCodePatch, applyPatchDialectToDiff, assertCodeBuildRecipe, assertDisjointPlan, assertPinnedImage, attachCodeRuntimeReferences, buildContainerRunArgs, buildRecipeContainerArgs, chooseStrategy, codeSkill, createCodeRuntimeControlClient, createCodeRuntimeInference, createCodeRuntimeSessionSkillLoader, createCodeToolBroker, createCodeWorkspaceCheckpoint, createContainerRecipeExecutor, dependencyCacheKey, dependencyInstallArgs, describeCodeRecipes, describeGateFailure, describePatchFailure, digestStagedWorkspace, feedbackIsActionable, hasContextFreeHunk, hazardFromAttempt, installedDependencies, integrateSubGoals, isCheckpointEffectCompleted, materializeCodeRuntimeArchive, materializeCodeRuntimeSource, materializeCommandWorkspace, materializeGitTree, outcomeCloses, outcomeMemory, parseRepositoryRecipes, patchPaths, planReachCollisions, prepareContainerDependencies, prepareRuntimeCheckpoint, racedAttempt, readOnlyNotice, readRepositoryRecipes, recallAbout, registeredFiles, renderMemories, renderOutcome, resolveCodePath, resolveCodeRecipes, restoreCodeWorkspaceCheckpoint, runCodeAgent, runCodeAgentAttempt, runCodeRuntimeHeartbeatLoop, runContainerAttempt, runContainerCommand, runGoal, runHarnessRunner, runLeasedAttempt, runtimeMemoryStore, safeWorkspaceLabel, selectContainerEngine, selectWinner, sessionRecipesFor, sessionSkillsFor, stageManifests, stageWorkspace, stageWorkspacePair, straySubGoalFiles, stripPatchEnvelope, validateCodePatch, validateMemory, validateRelativePath, verifyCodeCandidate, verifyContainerEngineBoundary, withProofRecipes, withRecipeDependencies };

package/dist/node.js

@@ -51,6 +51,7 @@ import {
   runCodeAgent,
   runCodeAgentAttempt,
   runCodeRuntimeHeartbeatLoop,
+  runContainerCommand,
   runGoal,
   sessionRecipesFor,
   sessionSkillsFor,
@@ -60,7 +61,7 @@ import {
   validateRelativePath,
   verifyCodeCandidate,
   withProofRecipes
-} from "./chunk-NUDKRYL4.js";
+} from "./chunk-4IGSN53G.js";
 import "./chunk-INL642J5.js";
 import {
   assertPinnedImage,
@@ -376,12 +377,102 @@ async function installedDependencies(repoRoot) {
   const info = await lstat(source).catch(() => null);
   return info?.isDirectory() ? { source } : null;
 }
+
+// src/code-recipe-dependency-cache.ts
+import { createHash } from "crypto";
+import { copyFile, mkdir, readFile, readdir, rename, rm as rm2, stat, writeFile } from "fs/promises";
+import { getgid, getuid } from "process";
+import { join as join2 } from "path";
+var DEPENDENCY_INSTALL_TIMEOUT_MS = 20 * 6e4;
+var OUTPUT_CAP = 4 * 1024 * 1024;
+var exists = async (path) => Boolean(await stat(path).catch(() => null));
+async function dependencyCacheKey(repoRoot, image, arch = process.arch) {
+  const lock = await readFile(join2(repoRoot, "package-lock.json")).catch(() => null);
+  if (!lock) return null;
+  return createHash("sha256").update(lock).update("\n").update(image).update("\n").update(arch).digest("hex").slice(0, 32);
+}
+async function stageManifests(repoRoot, stageDir) {
+  await mkdir(stageDir, { recursive: true });
+  const staged = [];
+  for (const name of ["package.json", "package-lock.json", ".npmrc"]) {
+    if (!await exists(join2(repoRoot, name))) continue;
+    await copyFile(join2(repoRoot, name), join2(stageDir, name));
+    staged.push(name);
+  }
+  const root = JSON.parse(await readFile(join2(repoRoot, "package.json"), "utf8"));
+  const globs = Array.isArray(root.workspaces) ? root.workspaces : root.workspaces?.packages ?? [];
+  for (const glob of globs) {
+    const dirs = glob.endsWith("/*") ? (await readdir(join2(repoRoot, glob.slice(0, -2)), { withFileTypes: true }).catch(() => [])).filter((entry) => entry.isDirectory()).map((entry) => `${glob.slice(0, -2)}/${entry.name}`) : [glob];
+    for (const dir of dirs) {
+      const manifest = join2(repoRoot, dir, "package.json");
+      if (!await exists(manifest)) continue;
+      await mkdir(join2(stageDir, dir), { recursive: true });
+      await copyFile(manifest, join2(stageDir, dir, "package.json"));
+      staged.push(`${dir}/package.json`);
+    }
+  }
+  return staged;
+}
+function dependencyInstallArgs(engine, image, stageDir, name) {
+  if (/[,\r\n]/.test(stageDir)) throw new TypeError("stage path contains unsupported mount characters");
+  const uid = typeof getuid === "function" ? getuid() : 1e3;
+  const gid = typeof getgid === "function" ? getgid() : 1e3;
+  const mount = engine === "container" ? `--mount=type=bind,source=${stageDir},target=/workspace` : `--mount=type=bind,src=${stageDir},dst=/workspace`;
+  const npm = ["npm", "ci", "--no-audit", "--no-fund", "--ignore-scripts"];
+  return [
+    "run",
+    "--rm",
+    `--name=${name}`,
+    "--cap-drop=ALL",
+    "--memory=2g",
+    "--cpus=2",
+    `--user=${uid}:${gid}`,
+    "--tmpfs=/tmp",
+    mount,
+    "--workdir=/workspace",
+    "--env=CI=1",
+    "--env=npm_config_cache=/tmp/npm-cache",
+    "--env=HOME=/tmp",
+    image,
+    ...npm
+  ];
+}
+async function prepareContainerDependencies(input) {
+  const key = await dependencyCacheKey(input.repoRoot, input.image);
+  if (!key) return null;
+  const dir = join2(input.cacheRoot, key);
+  const tree = join2(dir, "node_modules");
+  const stage = join2(dir, "stage");
+  if (await exists(tree)) return { source: tree };
+  const run = input.run ?? runContainerCommand;
+  await rm2(stage, { recursive: true, force: true });
+  const staged = await stageManifests(input.repoRoot, stage);
+  input.log?.(`installing ${key.slice(0, 12)}: ${staged.length} manifests, npm ci in ${input.image}`);
+  const name = `odla-deps-${key.slice(0, 12)}`;
+  const result = await run(
+    input.engine,
+    dependencyInstallArgs(input.engine, input.image, stage, name),
+    name,
+    { timeoutMs: DEPENDENCY_INSTALL_TIMEOUT_MS, maxOutputBytes: OUTPUT_CAP }
+  );
+  if (result.exitCode !== 0 || result.timedOut || !await exists(join2(stage, "node_modules"))) {
+    input.log?.(`install failed (exit ${result.exitCode}${result.timedOut ? ", timed out" : ""}): ${result.stderr.trim().split("\n").slice(-3).join(" | ").slice(0, 400)}`);
+    await rm2(stage, { recursive: true, force: true });
+    return null;
+  }
+  await rename(join2(stage, "node_modules"), tree);
+  await rm2(stage, { recursive: true, force: true });
+  await writeFile(join2(dir, "manifest.json"), JSON.stringify({ image: input.image, key, createdAt: Date.now() }, null, 2));
+  input.log?.(`installed ${key.slice(0, 12)} in ${Math.round(result.durationMs / 1e3)}s`);
+  return { source: tree };
+}
 export {
   CODE_PATCH_PATH,
   CODE_RUNTIME_PROTOCOL_VERSION,
   CodeRuntimeCheckpointManager,
   CodeRuntimeControlError,
   CodeRuntimeReconciler,
+  DEPENDENCY_INSTALL_TIMEOUT_MS,
   DecompositionError,
   MAX_MEMORY_BODY,
   MEASURED_PREMIUM,
@@ -408,6 +499,8 @@ export {
   createCodeToolBroker,
   createCodeWorkspaceCheckpoint,
   createContainerRecipeExecutor,
+  dependencyCacheKey,
+  dependencyInstallArgs,
   describeCodeRecipes,
   describeGateFailure,
   describePatchFailure,
@@ -427,6 +520,7 @@ export {
   parseRepositoryRecipes,
   patchPaths,
   planReachCollisions,
+  prepareContainerDependencies,
   prepareRuntimeCheckpoint,
   racedAttempt,
   readOnlyNotice,
@@ -442,6 +536,7 @@ export {
   runCodeAgentAttempt,
   runCodeRuntimeHeartbeatLoop,
   runContainerAttempt,
+  runContainerCommand,
   runGoal,
   runHarnessRunner,
   runLeasedAttempt,
@@ -451,6 +546,7 @@ export {
   selectWinner,
   sessionRecipesFor,
   sessionSkillsFor,
+  stageManifests,
   stageWorkspace,
   stageWorkspacePair,
   straySubGoalFiles,