@odla-ai/harness 0.5.0 → 0.5.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/{chunk-UVGZHNLW.js → chunk-L2T3LPEF.js} +16 -9
- package/dist/chunk-L2T3LPEF.js.map +1 -0
- package/dist/code-runtime-cli.cjs +15 -8
- package/dist/code-runtime-cli.cjs.map +1 -1
- package/dist/code-runtime-cli.js +1 -1
- package/dist/node.cjs +15 -8
- package/dist/node.cjs.map +1 -1
- package/dist/node.js +1 -1
- package/package.json +1 -1
- package/dist/chunk-UVGZHNLW.js.map +0 -1
|
@@ -277,6 +277,7 @@ function parseSnapshot(value) {
|
|
|
277
277
|
return { host, bindings, commands };
|
|
278
278
|
}
|
|
279
279
|
async function parseSource(value) {
|
|
280
|
+
const repositoryLimits = { maximumFiles: 1e5, maximumBytes: 80 * 1024 * 1024 };
|
|
280
281
|
const snapshot = record(record(value)?.snapshot);
|
|
281
282
|
if (!snapshot || typeof snapshot.repository !== "string" || typeof snapshot.commitSha !== "string" || typeof snapshot.treeDigest !== "string" || !Array.isArray(snapshot.files)) throw invalid("source");
|
|
282
283
|
const files = snapshot.files.map((value2) => {
|
|
@@ -298,12 +299,12 @@ async function parseSource(value) {
|
|
|
298
299
|
return { path: file.path, content: file.content };
|
|
299
300
|
});
|
|
300
301
|
const source2 = { repository: reference.repository, commitSha: reference.commitSha, files: referenceFiles };
|
|
301
|
-
const referenceDigest = await digestCodeRepositorySnapshot(source2,
|
|
302
|
+
const referenceDigest = await digestCodeRepositorySnapshot(source2, repositoryLimits);
|
|
302
303
|
if (referenceDigest !== reference.treeDigest) throw invalid("reference source digest");
|
|
303
304
|
references.push({ alias: reference.alias, ...source2, treeDigest: referenceDigest });
|
|
304
305
|
}
|
|
305
306
|
const source = { repository: snapshot.repository, commitSha: snapshot.commitSha, files };
|
|
306
|
-
const digest = await digestCodeRepositorySnapshot(source,
|
|
307
|
+
const digest = await digestCodeRepositorySnapshot(source, repositoryLimits);
|
|
307
308
|
if (digest !== snapshot.treeDigest) throw invalid("source digest");
|
|
308
309
|
return { ...source, treeDigest: digest, ...references.length ? { references } : {} };
|
|
309
310
|
}
|
|
@@ -999,8 +1000,11 @@ import { tmpdir } from "os";
|
|
|
999
1000
|
import { dirname, join as join2, resolve as resolve3, sep as sep2 } from "path";
|
|
1000
1001
|
var RESERVED2 = /* @__PURE__ */ new Set([".git", ".odla", ".wrangler", "node_modules", "dist", "coverage"]);
|
|
1001
1002
|
var SECRET2 = /^(?:\.env(?:\..+)?|\.dev\.vars|credentials(?:\..+)?\.json|dev-token(?:\..+)?\.json)$/i;
|
|
1003
|
+
var SOURCE_MAX_FILES = 1e5;
|
|
1004
|
+
var SOURCE_MAX_BYTES = 80 * 1024 * 1024;
|
|
1005
|
+
var SOURCE_SET_MAX_BYTES = 480 * 1024 * 1024;
|
|
1002
1006
|
async function materializeCodeRuntimeSource(snapshot, tempRoot = tmpdir()) {
|
|
1003
|
-
if (!snapshot.files.length || snapshot.files.length >
|
|
1007
|
+
if (!snapshot.files.length || snapshot.files.length > SOURCE_MAX_FILES) throw new TypeError("Code source file count is invalid");
|
|
1004
1008
|
const root = await mkdtemp(join2(tempRoot, "odla-code-source-"));
|
|
1005
1009
|
const sourceDir = join2(root, "source");
|
|
1006
1010
|
await mkdir(sourceDir);
|
|
@@ -1012,7 +1016,7 @@ async function materializeCodeRuntimeSource(snapshot, tempRoot = tmpdir()) {
|
|
|
1012
1016
|
if (seen.has(file.path)) throw new TypeError("Code source repeats a path");
|
|
1013
1017
|
seen.add(file.path);
|
|
1014
1018
|
bytes += Buffer.byteLength(file.path) + Buffer.byteLength(file.content);
|
|
1015
|
-
if (bytes >
|
|
1019
|
+
if (bytes > SOURCE_MAX_BYTES) throw new TypeError("Code source exceeds its byte bound");
|
|
1016
1020
|
const target = resolve3(sourceDir, file.path);
|
|
1017
1021
|
if (!target.startsWith(`${resolve3(sourceDir)}${sep2}`)) throw new TypeError("Code source path escapes its root");
|
|
1018
1022
|
await mkdir(dirname(target), { recursive: true });
|
|
@@ -1020,14 +1024,14 @@ async function materializeCodeRuntimeSource(snapshot, tempRoot = tmpdir()) {
|
|
|
1020
1024
|
}
|
|
1021
1025
|
for (const reference of snapshot.references ?? []) {
|
|
1022
1026
|
validateAlias(reference.alias);
|
|
1023
|
-
if (!reference.files.length || reference.files.length >
|
|
1027
|
+
if (!reference.files.length || reference.files.length > SOURCE_MAX_FILES) throw new TypeError("Code reference file count is invalid");
|
|
1024
1028
|
for (const file of reference.files) {
|
|
1025
1029
|
validatePath(file.path);
|
|
1026
1030
|
const path = `.odla-references/${reference.alias}/${file.path}`;
|
|
1027
1031
|
if (seen.has(path)) throw new TypeError("Code reference repeats a path");
|
|
1028
1032
|
seen.add(path);
|
|
1029
1033
|
bytes += Buffer.byteLength(path) + Buffer.byteLength(file.content);
|
|
1030
|
-
if (bytes >
|
|
1034
|
+
if (bytes > SOURCE_SET_MAX_BYTES) throw new TypeError("Code source set exceeds its byte bound");
|
|
1031
1035
|
const target = resolve3(sourceDir, path);
|
|
1032
1036
|
if (!target.startsWith(`${resolve3(sourceDir)}${sep2}`)) throw new TypeError("Code reference path escapes its root");
|
|
1033
1037
|
await mkdir(dirname(target), { recursive: true });
|
|
@@ -1053,7 +1057,7 @@ async function attachCodeRuntimeReferences(workspace, references) {
|
|
|
1053
1057
|
validatePath(file.path);
|
|
1054
1058
|
const path = `.odla-references/${reference.alias}/${file.path}`;
|
|
1055
1059
|
bytes += Buffer.byteLength(path) + Buffer.byteLength(file.content);
|
|
1056
|
-
if (bytes >
|
|
1060
|
+
if (bytes > SOURCE_SET_MAX_BYTES - SOURCE_MAX_BYTES) throw new TypeError("Code reference set exceeds its byte bound");
|
|
1057
1061
|
for (const root of [workspace.baselineDir, workspace.workspaceDir]) {
|
|
1058
1062
|
const target = resolve3(root, path);
|
|
1059
1063
|
if (!target.startsWith(`${resolve3(root)}${sep2}`)) throw new TypeError("Code reference path escapes its root");
|
|
@@ -1103,7 +1107,10 @@ async function materializeCommandWorkspace(input) {
|
|
|
1103
1107
|
trustedBaseDir: materialized.sourceDir,
|
|
1104
1108
|
trustedBaseCommitSha: source.commitSha,
|
|
1105
1109
|
checkpoint: codeCheckpointPayload(command.payload)
|
|
1106
|
-
})).workspace : await stageWorkspace(materialized.sourceDir
|
|
1110
|
+
})).workspace : await stageWorkspace(materialized.sourceDir, {
|
|
1111
|
+
maxFiles: SOURCE_MAX_FILES,
|
|
1112
|
+
maxBytes: SOURCE_SET_MAX_BYTES
|
|
1113
|
+
});
|
|
1107
1114
|
return { workspace, sourceDigest: source.treeDigest, requestedLocal: null };
|
|
1108
1115
|
} finally {
|
|
1109
1116
|
await materialized.cleanup();
|
|
@@ -2666,4 +2673,4 @@ export {
|
|
|
2666
2673
|
runGoal,
|
|
2667
2674
|
CodePiRuntimeEngine
|
|
2668
2675
|
};
|
|
2669
|
-
//# sourceMappingURL=chunk-
|
|
2676
|
+
//# sourceMappingURL=chunk-L2T3LPEF.js.map
|