@odla-ai/harness 0.11.8 → 0.11.9

package/dist/code-runtime-cli.js

@@ -7,7 +7,7 @@ import {
   createCodeRuntimeControlClient,
   createCodeRuntimeSessionSkillLoader,
   runCodeRuntimeHeartbeatLoop
-} from "./chunk-NUDKRYL4.js";
+} from "./chunk-X5KT7NHM.js";
 import "./chunk-INL642J5.js";
 import {
   assertPinnedImage,

package/dist/node.cjs

@@ -1704,8 +1704,9 @@ var import_node_process2 = require("process");
 var import_node_crypto2 = require("crypto");
 var ARTIFACT_PATH = /^[A-Za-z0-9_@+.,-]+(?:\/[A-Za-z0-9_@+.,-]+)*$/;
 var PRIVATE_ARTIFACT_PART = /^(?:\.git|\.odla|\.wrangler|\.env(?:\..+)?|\.dev\.vars|credentials(?:\..+)?\.json)$/i;
-function buildRecipeContainerArgs(engine, workspaceDir, recipe2, name = `odla-recipe-${(0, import_node_crypto2.randomUUID)().slice(0, 12)}`) {
+function buildRecipeContainerArgs(engine, workspaceDir, recipe2, name = `odla-recipe-${(0, import_node_crypto2.randomUUID)().slice(0, 12)}`, dependencies = null) {
   assertCodeBuildRecipe(recipe2);
+  const mounts = dependencies ? [dependencyMount(engine, dependencies)] : [];
   if (/[,\r\n]/.test(workspaceDir)) throw new TypeError("workspace path contains unsupported mount characters");
   const uid = typeof import_node_process2.getuid === "function" ? (0, import_node_process2.getuid)() : 1e3;
   const gid = typeof import_node_process2.getgid === "function" ? (0, import_node_process2.getgid)() : 1e3;
@@ -1728,6 +1729,7 @@ function buildRecipeContainerArgs(engine, workspaceDir, recipe2, name = `odla-re
       `--user=${uid}:${gid}`,
       "--tmpfs=/tmp",
       `--mount=type=bind,source=${workspaceDir},target=/workspace`,
+      ...mounts,
       "--workdir=/workspace",
       "--env=CI=1",
       recipe2.image,
@@ -1749,18 +1751,28 @@ function buildRecipeContainerArgs(engine, workspaceDir, recipe2, name = `odla-re
     `--user=${uid}:${gid}`,
     `--tmpfs=/tmp:rw,noexec,nosuid,nodev,size=${limits.tmpfs}`,
     `--mount=type=bind,src=${workspaceDir},dst=/workspace`,
+    ...mounts,
     "--workdir=/workspace",
     "--env=CI=1",
     recipe2.image,
     ...recipe2.command
   ];
 }
-function createContainerRecipeExecutor(engine) {
+var LENDABLE = /* @__PURE__ */ new Set(["node_modules", "dist", "coverage"]);
+function dependencyMount(engine, dependencies) {
+  const mountAs = dependencies.mountAs ?? "node_modules";
+  if (!dependencies.source.startsWith("/") || /[,\r\n]/.test(dependencies.source)) {
+    throw new TypeError("recipe dependency source must be an absolute path without mount separators");
+  }
+  if (!LENDABLE.has(mountAs)) throw new TypeError(`recipe dependencies must mount at a reserved name, not "${mountAs}"`);
+  return engine === "container" ? `--mount=type=bind,source=${dependencies.source},target=/workspace/${mountAs},readonly` : `--mount=type=bind,src=${dependencies.source},dst=/workspace/${mountAs},readonly`;
+}
+function createContainerRecipeExecutor(engine, options = {}) {
   return {
     async run(input) {
       await verifyContainerEngineBoundary(engine);
       const name = `odla-recipe-${(0, import_node_crypto2.randomUUID)().slice(0, 12)}`;
-      const args = buildRecipeContainerArgs(engine, input.workspaceDir, input.recipe, name);
+      const args = buildRecipeContainerArgs(engine, input.workspaceDir, input.recipe, name, options.dependencies ?? null);
       return execute(engine, args, name, input.recipe, input.signal);
     }
   };
@@ -4769,7 +4781,7 @@ var TheseusRuntimeEngine = class {
     this.#checkpoints = new CodeRuntimeCheckpointManager({
       control: options.control,
       recipes: options.recipes,
-      recipeExecutor: options.recipeExecutor ?? createContainerRecipeExecutor(options.engine),
+      recipeExecutor: options.recipeExecutor ?? createContainerRecipeExecutor(options.engine, { dependencies: options.recipeDependencies ?? null }),
       fallbackPolicyDigest: this.#buildPolicyDigest,
       event: (command, event, refs) => this.#event(command, event, refs)
     });
@@ -4877,7 +4889,7 @@ var TheseusRuntimeEngine = class {
     active.done = startGoalPursuit({
       spec,
       recipes: active.recipes,
-      recipeExecutor: this.options.recipeExecutor ?? createContainerRecipeExecutor(this.options.engine),
+      recipeExecutor: this.options.recipeExecutor ?? createContainerRecipeExecutor(this.options.engine, { dependencies: this.options.recipeDependencies ?? null }),
       workspace: active.workspace,
       baseCommitSha: active.baseCommitSha,
       trustedBaseDigest: active.trustedBaseDigest,