@odla-ai/harness 0.11.8 → 0.11.9

package/dist/node.d.cts

@@ -596,6 +596,34 @@ interface CodeToolBrokerOptions {
     onDecision?(decision: CodeToolDecision): Promise<void> | void;
 }
 
+/**
+ * An installed dependency tree lent to a recipe for the length of one run.
+ *
+ * Mounted under a reserved name and removed in a finally, so the agent can run
+ * a real build without the tree ever being addressable by a patch.
+ */
+interface RecipeDependencies {
+    /** Absolute path to an installed dependency tree on the host. */
+    source: string;
+    /** Where it appears inside the workspace. Must be a reserved name, so the
+     *  agent still cannot address it. */
+    mountAs?: string;
+}
+/**
+ * Wrap an executor so `dependencies.source` is present during each recipe run.
+ *
+ * It is linked, not copied. A link costs nothing per run, and dependencies are
+ * identical across every attempt, racer and verification — copying them would
+ * multiply the largest thing in the tree by the number of stages.
+ *
+ * The link is removed in a `finally`, so a recipe that times out or throws
+ * cannot leave it behind for `workspace.patch()` to diff or
+ * `digestStagedWorkspace` to hash.
+ */
+declare function withRecipeDependencies(executor: CodeRecipeExecutor, dependencies: RecipeDependencies): CodeRecipeExecutor;
+/** Resolve the dependency tree for a repository root, when it has one. */
+declare function installedDependencies(repoRoot: string): Promise<RecipeDependencies | null>;
+
 /** The file at a repository's root that declares its verification recipes. */
 declare const REPOSITORY_RECIPES_FILE = "odla.recipes.json";
 /** The release-owned execution envelope every repository-declared recipe runs in.
@@ -682,6 +710,9 @@ interface TheseusRuntimeEngineOptions {
     /** Injectable agent attempt. Defaults to runAgent over the brokered surface. */
     runAgentAttempt?: (options: CodeAgentAttemptOptions) => Promise<CodeAgentAttemptResult>;
     recipeExecutor?: CodeRecipeExecutor;
+    /** The host's installed dependency tree, lent read-only to every recipe
+     * container so a real test runner can be a proof in an offline sandbox. */
+    recipeDependencies?: RecipeDependencies | null;
     /** Owner-visible and terminal-visible bounded runtime failures. */
     onDiagnostic?: (message: string) => void;
     /** Skills the host adds for a session, beyond the sandbox surface.
@@ -1580,41 +1611,15 @@ declare function describePatchFailure(patch: string, detail: string): string;
 /** Apply a previously validated patch without invoking a shell or repository hooks. */
 declare function applyCodePatch(workspaceDir: string, rawPatch: string, paths: readonly string[]): Promise<void>;
 
-/**
- * An installed dependency tree lent to a recipe for the length of one run.
- *
- * Mounted under a reserved name and removed in a finally, so the agent can run
- * a real build without the tree ever being addressable by a patch.
- */
-interface RecipeDependencies {
-    /** Absolute path to an installed dependency tree on the host. */
-    source: string;
-    /** Where it appears inside the workspace. Must be a reserved name, so the
-     *  agent still cannot address it. */
-    mountAs?: string;
-}
-/**
- * Wrap an executor so `dependencies.source` is present during each recipe run.
- *
- * It is linked, not copied. A link costs nothing per run, and dependencies are
- * identical across every attempt, racer and verification — copying them would
- * multiply the largest thing in the tree by the number of stages.
- *
- * The link is removed in a `finally`, so a recipe that times out or throws
- * cannot leave it behind for `workspace.patch()` to diff or
- * `digestStagedWorkspace` to hash.
- */
-declare function withRecipeDependencies(executor: CodeRecipeExecutor, dependencies: RecipeDependencies): CodeRecipeExecutor;
-/** Resolve the dependency tree for a repository root, when it has one. */
-declare function installedDependencies(repoRoot: string): Promise<RecipeDependencies | null>;
-
 /** Every ordinary, policy-legal source path under `root`, sorted. */
 declare function registeredFiles(root: string, limit?: number): Promise<string[]>;
 
 /** Build a trusted, fixed command for an isolated and networkless recipe container. */
-declare function buildRecipeContainerArgs(engine: ContainerEngine, workspaceDir: string, recipe: CodeBuildRecipe, name?: string): string[];
+declare function buildRecipeContainerArgs(engine: ContainerEngine, workspaceDir: string, recipe: CodeBuildRecipe, name?: string, dependencies?: RecipeDependencies | null): string[];
 /** Create a recipe executor that never invokes a shell and never mounts credentials. */
-declare function createContainerRecipeExecutor(engine: ContainerEngine): CodeRecipeExecutor;
+declare function createContainerRecipeExecutor(engine: ContainerEngine, options?: {
+    dependencies?: RecipeDependencies | null;
+}): CodeRecipeExecutor;
 /** Validate immutable recipe identity, digest image, command, and resource bounds. */
 declare function assertCodeBuildRecipe(recipe: CodeBuildRecipe): void;
 

package/dist/node.d.ts

@@ -596,6 +596,34 @@ interface CodeToolBrokerOptions {
     onDecision?(decision: CodeToolDecision): Promise<void> | void;
 }
 
+/**
+ * An installed dependency tree lent to a recipe for the length of one run.
+ *
+ * Mounted under a reserved name and removed in a finally, so the agent can run
+ * a real build without the tree ever being addressable by a patch.
+ */
+interface RecipeDependencies {
+    /** Absolute path to an installed dependency tree on the host. */
+    source: string;
+    /** Where it appears inside the workspace. Must be a reserved name, so the
+     *  agent still cannot address it. */
+    mountAs?: string;
+}
+/**
+ * Wrap an executor so `dependencies.source` is present during each recipe run.
+ *
+ * It is linked, not copied. A link costs nothing per run, and dependencies are
+ * identical across every attempt, racer and verification — copying them would
+ * multiply the largest thing in the tree by the number of stages.
+ *
+ * The link is removed in a `finally`, so a recipe that times out or throws
+ * cannot leave it behind for `workspace.patch()` to diff or
+ * `digestStagedWorkspace` to hash.
+ */
+declare function withRecipeDependencies(executor: CodeRecipeExecutor, dependencies: RecipeDependencies): CodeRecipeExecutor;
+/** Resolve the dependency tree for a repository root, when it has one. */
+declare function installedDependencies(repoRoot: string): Promise<RecipeDependencies | null>;
+
 /** The file at a repository's root that declares its verification recipes. */
 declare const REPOSITORY_RECIPES_FILE = "odla.recipes.json";
 /** The release-owned execution envelope every repository-declared recipe runs in.
@@ -682,6 +710,9 @@ interface TheseusRuntimeEngineOptions {
     /** Injectable agent attempt. Defaults to runAgent over the brokered surface. */
     runAgentAttempt?: (options: CodeAgentAttemptOptions) => Promise<CodeAgentAttemptResult>;
     recipeExecutor?: CodeRecipeExecutor;
+    /** The host's installed dependency tree, lent read-only to every recipe
+     * container so a real test runner can be a proof in an offline sandbox. */
+    recipeDependencies?: RecipeDependencies | null;
     /** Owner-visible and terminal-visible bounded runtime failures. */
     onDiagnostic?: (message: string) => void;
     /** Skills the host adds for a session, beyond the sandbox surface.
@@ -1580,41 +1611,15 @@ declare function describePatchFailure(patch: string, detail: string): string;
 /** Apply a previously validated patch without invoking a shell or repository hooks. */
 declare function applyCodePatch(workspaceDir: string, rawPatch: string, paths: readonly string[]): Promise<void>;
 
-/**
- * An installed dependency tree lent to a recipe for the length of one run.
- *
- * Mounted under a reserved name and removed in a finally, so the agent can run
- * a real build without the tree ever being addressable by a patch.
- */
-interface RecipeDependencies {
-    /** Absolute path to an installed dependency tree on the host. */
-    source: string;
-    /** Where it appears inside the workspace. Must be a reserved name, so the
-     *  agent still cannot address it. */
-    mountAs?: string;
-}
-/**
- * Wrap an executor so `dependencies.source` is present during each recipe run.
- *
- * It is linked, not copied. A link costs nothing per run, and dependencies are
- * identical across every attempt, racer and verification — copying them would
- * multiply the largest thing in the tree by the number of stages.
- *
- * The link is removed in a `finally`, so a recipe that times out or throws
- * cannot leave it behind for `workspace.patch()` to diff or
- * `digestStagedWorkspace` to hash.
- */
-declare function withRecipeDependencies(executor: CodeRecipeExecutor, dependencies: RecipeDependencies): CodeRecipeExecutor;
-/** Resolve the dependency tree for a repository root, when it has one. */
-declare function installedDependencies(repoRoot: string): Promise<RecipeDependencies | null>;
-
 /** Every ordinary, policy-legal source path under `root`, sorted. */
 declare function registeredFiles(root: string, limit?: number): Promise<string[]>;
 
 /** Build a trusted, fixed command for an isolated and networkless recipe container. */
-declare function buildRecipeContainerArgs(engine: ContainerEngine, workspaceDir: string, recipe: CodeBuildRecipe, name?: string): string[];
+declare function buildRecipeContainerArgs(engine: ContainerEngine, workspaceDir: string, recipe: CodeBuildRecipe, name?: string, dependencies?: RecipeDependencies | null): string[];
 /** Create a recipe executor that never invokes a shell and never mounts credentials. */
-declare function createContainerRecipeExecutor(engine: ContainerEngine): CodeRecipeExecutor;
+declare function createContainerRecipeExecutor(engine: ContainerEngine, options?: {
+    dependencies?: RecipeDependencies | null;
+}): CodeRecipeExecutor;
 /** Validate immutable recipe identity, digest image, command, and resource bounds. */
 declare function assertCodeBuildRecipe(recipe: CodeBuildRecipe): void;
 

package/dist/node.js

@@ -60,7 +60,7 @@ import {
   validateRelativePath,
   verifyCodeCandidate,
   withProofRecipes
-} from "./chunk-NUDKRYL4.js";
+} from "./chunk-X5KT7NHM.js";
 import "./chunk-INL642J5.js";
 import {
   assertPinnedImage,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@odla-ai/harness",
-  "version": "0.11.8",
+  "version": "0.11.9",
   "description": "Safe, inspectable coding-task protocol and credentialless container runner for odla Studio.",
   "license": "MIT",
   "homepage": "https://odla.ai/docs/packages/harness",