@odla-ai/harness 0.5.2 → 0.7.0

package/dist/code-runtime-cli.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   CODE_RUNTIME_PROTOCOL_VERSION,
-  CodePiRuntimeEngine,
   CodeRuntimeReconciler,
+  TheseusRuntimeEngine,
   assertCodeBuildRecipe,
   createCodeRuntimeControlClient,
   runCodeRuntimeHeartbeatLoop
-} from "./chunk-5HX5LWTG.js";
+} from "./chunk-QZXCQSPZ.js";
 import {
   assertPinnedImage,
   selectContainerEngine
@@ -85,8 +85,8 @@ async function main() {
   };
   const controller = new AbortController();
   for (const signal of ["SIGINT", "SIGTERM"]) process.once(signal, () => controller.abort(signal));
-  const control = createCodeRuntimeControlClient({ endpoint: options.endpoint, token, signal: controller.signal });
-  const commandEngine = new CodePiRuntimeEngine({
+  const control = createCodeRuntimeControlClient({ endpoint: options.endpoint, token });
+  const commandEngine = new TheseusRuntimeEngine({
     control,
     engine,
     recipes: policy.recipes,

package/dist/code-runtime-cli.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/code-runtime-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { cpus, totalmem } from \"node:os\";\nimport { readFile } from \"node:fs/promises\";\nimport {\n  CODE_RUNTIME_PROTOCOL_VERSION,\n  CodeRuntimeReconciler,\n  createCodeRuntimeControlClient,\n  runCodeRuntimeHeartbeatLoop,\n  type CodeRuntimeCapabilities,\n} from \"./code-runtime\";\nimport { CodePiRuntimeEngine } from \"./code-runtime-engine\";\nimport { assertPinnedImage, selectContainerEngine, type ContainerEngine } from \"./container\";\nimport { assertCodeBuildRecipe } from \"./recipe-container\";\nimport type { CodeBuildRecipe } from \"./code-tool-types\";\n\nconst VERSION = \"0.1.0\";\n\nfunction usage(): string {\n  return `Usage:\n  ODLA_CODE_HOST_TOKEN=odla_code_host_... odla-code-runtime \\\\\n    --endpoint https://odla.ai --image registry/odla-pi@sha256:... \\\\\n    --build-policy ./odla-code-build.json [--engine auto|container|podman|docker] [--once]\n\nThe host token is read only from ODLA_CODE_HOST_TOKEN. The runtime makes\noutbound HTTPS heartbeats and never opens a listener.`;\n}\n\nfunction parse(argv: string[]): {\n  endpoint: string; engine: ContainerEngine | \"auto\"; image: string;\n  buildPolicy: string; heartbeatMs: number; once: boolean;\n} {\n  const values = new Map<string, string>();\n  const flags = new Set<string>();\n  for (let index = 0; index < argv.length; index++) {\n    const arg = argv[index]!;\n    if (arg === \"--once\") { flags.add(arg); continue; }\n    if (!arg.startsWith(\"--\") || !argv[index + 1]) throw new TypeError(usage());\n    values.set(arg, argv[++index]!);\n  }\n  const endpoint = values.get(\"--endpoint\");\n  const image = values.get(\"--image\");\n  const buildPolicy = values.get(\"--build-policy\");\n  const engine = values.get(\"--engine\") ?? \"auto\";\n  const heartbeatMs = Number(values.get(\"--heartbeat-ms\") ?? 15_000);\n  if (!endpoint || !image || !buildPolicy || ![\"auto\", \"container\", \"podman\", \"docker\"].includes(engine)) {\n    throw new TypeError(usage());\n  }\n  assertPinnedImage(image);\n  if (!Number.isSafeInteger(heartbeatMs) || heartbeatMs < 1_000 || heartbeatMs > 300_000) {\n    throw new TypeError(\"--heartbeat-ms must be an integer from 1000 to 300000\");\n  }\n  return { endpoint, image, buildPolicy, engine: engine as ContainerEngine | \"auto\",\n    heartbeatMs, once: flags.has(\"--once\") };\n}\n\nasync function readPolicy(path: string): Promise<{\n  recipes: CodeBuildRecipe[]; recipeAuthorization: \"registered_recipe\" | \"exact_approval\";\n}> {\n  const value = JSON.parse(await readFile(path, \"utf8\")) as Record<string, unknown>;\n  if (!value || Object.keys(value).some((key) => ![\"recipes\", \"recipeAuthorization\"].includes(key))\n    || !Array.isArray(value.recipes) || !value.recipes.length\n    || (value.recipeAuthorization !== undefined && value.recipeAuthorization !== \"registered_recipe\"\n      && value.recipeAuthorization !== \"exact_approval\")) throw new TypeError(\"invalid Code build policy file\");\n  const recipes = value.recipes as CodeBuildRecipe[];\n  for (const recipe of recipes) assertCodeBuildRecipe(recipe);\n  const recipeAuthorization = value.recipeAuthorization === \"exact_approval\"\n    ? \"exact_approval\" : \"registered_recipe\";\n  return { recipes, recipeAuthorization };\n}\n\nasync function main(): Promise<void> {\n  const token = process.env.ODLA_CODE_HOST_TOKEN;\n  if (!token) throw new TypeError(\"ODLA_CODE_HOST_TOKEN is required\");\n  const options = parse(process.argv.slice(2));\n  if (process.platform !== \"darwin\" && process.platform !== \"linux\") throw new TypeError(\"Code runtime requires macOS or Linux\");\n  const engine = await selectContainerEngine(options.engine);\n  const policy = await readPolicy(options.buildPolicy);\n  const capabilities: CodeRuntimeCapabilities = {\n    protocolVersion: CODE_RUNTIME_PROTOCOL_VERSION,\n    platform: process.platform === \"darwin\" ? \"macos\" : \"linux\",\n    arch: process.arch,\n    engines: [engine],\n    cpuCount: cpus().length,\n    memoryBytes: totalmem(),\n  };\n  const controller = new AbortController();\n  for (const signal of [\"SIGINT\", \"SIGTERM\"] as const) process.once(signal, () => controller.abort(signal));\n  const control = createCodeRuntimeControlClient({ endpoint: options.endpoint, token, signal: controller.signal });\n  const commandEngine = new CodePiRuntimeEngine({\n    control, engine, recipes: policy.recipes,\n    recipeAuthorization: policy.recipeAuthorization,\n    onDiagnostic: (message) => process.stderr.write(`[odla-code-runtime] agent failed · ${message}\\n`),\n  });\n  const reconciler = new CodeRuntimeReconciler(control, commandEngine);\n  try {\n    await runCodeRuntimeHeartbeatLoop({\n      control, runtimeVersion: VERSION, capabilities, heartbeatMs: options.heartbeatMs,\n      once: options.once, signal: controller.signal,\n      onSnapshot: async (snapshot) => {\n        process.stderr.write(\n          `[odla-code-runtime] host ${snapshot.host.hostId} online · ${snapshot.bindings.length} active binding(s) · ${snapshot.commands.length} command(s)\\n`,\n        );\n        if (options.once && snapshot.commands.length) {\n          throw new TypeError(\"--once is diagnostic-only and refuses pending Code commands\");\n        }\n        await reconciler.reconcile(snapshot);\n      },\n      onRetry: (error, delayMs) => {\n        process.stderr.write(\n          `[odla-code-runtime] control plane unavailable; retrying in ${delayMs}ms · ${error instanceof Error ? error.message : String(error)}\\n`,\n        );\n      },\n    });\n  } finally { await commandEngine.close(); }\n}\n\nmain().catch((error) => {\n  process.stderr.write(`${error instanceof Error ? error.message : String(error)}\\n`);\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;;;;;;;;;;AACA,SAAS,MAAM,gBAAgB;AAC/B,SAAS,gBAAgB;AAazB,IAAM,UAAU;AAEhB,SAAS,QAAgB;AACvB,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAOT;AAEA,SAAS,MAAM,MAGb;AACA,QAAM,SAAS,oBAAI,IAAoB;AACvC,QAAM,QAAQ,oBAAI,IAAY;AAC9B,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS;AAChD,UAAM,MAAM,KAAK,KAAK;AACtB,QAAI,QAAQ,UAAU;AAAE,YAAM,IAAI,GAAG;AAAG;AAAA,IAAU;AAClD,QAAI,CAAC,IAAI,WAAW,IAAI,KAAK,CAAC,KAAK,QAAQ,CAAC,EAAG,OAAM,IAAI,UAAU,MAAM,CAAC;AAC1E,WAAO,IAAI,KAAK,KAAK,EAAE,KAAK,CAAE;AAAA,EAChC;AACA,QAAM,WAAW,OAAO,IAAI,YAAY;AACxC,QAAM,QAAQ,OAAO,IAAI,SAAS;AAClC,QAAM,cAAc,OAAO,IAAI,gBAAgB;AAC/C,QAAM,SAAS,OAAO,IAAI,UAAU,KAAK;AACzC,QAAM,cAAc,OAAO,OAAO,IAAI,gBAAgB,KAAK,IAAM;AACjE,MAAI,CAAC,YAAY,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,QAAQ,aAAa,UAAU,QAAQ,EAAE,SAAS,MAAM,GAAG;AACtG,UAAM,IAAI,UAAU,MAAM,CAAC;AAAA,EAC7B;AACA,oBAAkB,KAAK;AACvB,MAAI,CAAC,OAAO,cAAc,WAAW,KAAK,cAAc,OAAS,cAAc,KAAS;AACtF,UAAM,IAAI,UAAU,uDAAuD;AAAA,EAC7E;AACA,SAAO;AAAA,IAAE;AAAA,IAAU;AAAA,IAAO;AAAA,IAAa;AAAA,IACrC;AAAA,IAAa,MAAM,MAAM,IAAI,QAAQ;AAAA,EAAE;AAC3C;AAEA,eAAe,WAAW,MAEvB;AACD,QAAM,QAAQ,KAAK,MAAM,MAAM,SAAS,MAAM,MAAM,CAAC;AACrD,MAAI,CAAC,SAAS,OAAO,KAAK,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,WAAW,qBAAqB,EAAE,SAAS,GAAG,CAAC,KAC3F,CAAC,MAAM,QAAQ,MAAM,OAAO,KAAK,CAAC,MAAM,QAAQ,UAC/C,MAAM,wBAAwB,UAAa,MAAM,wBAAwB,uBACxE,MAAM,wBAAwB,iBAAmB,OAAM,IAAI,UAAU,gCAAgC;AAC5G,QAAM,UAAU,MAAM;AACtB,aAAW,UAAU,QAAS,uBAAsB,MAAM;AAC1D,QAAM,sBAAsB,MAAM,wBAAwB,mBACtD,mBAAmB;AACvB,SAAO,EAAE,SAAS,oBAAoB;AACxC;AAEA,eAAe,OAAsB;AACnC,QAAM,QAAQ,QAAQ,IAAI;AAC1B,MAAI,CAAC,MAAO,OAAM,IAAI,UAAU,kCAAkC;AAClE,QAAM,UAAU,MAAM,QAAQ,KAAK,MAAM,CAAC,CAAC;AAC3C,MAAI,QAAQ,aAAa,YAAY,QAAQ,aAAa,QAAS,OAAM,IAAI,UAAU,sCAAsC;AAC7H,QAAM,SAAS,MAAM,sBAAsB,QAAQ,MAAM;AACzD,QAAM,SAAS,MAAM,WAAW,QAAQ,WAAW;AACnD,QAAM,eAAwC;AAAA,IAC5C,iBAAiB;AAAA,IACjB,UAAU,QAAQ,aAAa,WAAW,UAAU;AAAA,IACpD,MAAM,QAAQ;AAAA,IACd,SAAS,CAAC,MAAM;AAAA,IAChB,UAAU,KAAK,EAAE;AAAA,IACjB,aAAa,SAAS;AAAA,EACxB;AACA,QAAM,aAAa,IAAI,gBAAgB;AACvC,aAAW,UAAU,CAAC,UAAU,SAAS,EAAY,SAAQ,KAAK,QAAQ,MAAM,WAAW,MAAM,MAAM,CAAC;AACxG,QAAM,UAAU,+BAA+B,EAAE,UAAU,QAAQ,UAAU,OAAO,QAAQ,WAAW,OAAO,CAAC;AAC/G,QAAM,gBAAgB,IAAI,oBAAoB;AAAA,IAC5C;AAAA,IAAS;AAAA,IAAQ,SAAS,OAAO;AAAA,IACjC,qBAAqB,OAAO;AAAA,IAC5B,cAAc,CAAC,YAAY,QAAQ,OAAO,MAAM,yCAAsC,OAAO;AAAA,CAAI;AAAA,EACnG,CAAC;AACD,QAAM,aAAa,IAAI,sBAAsB,SAAS,aAAa;AACnE,MAAI;AACF,UAAM,4BAA4B;AAAA,MAChC;AAAA,MAAS,gBAAgB;AAAA,MAAS;AAAA,MAAc,aAAa,QAAQ;AAAA,MACrE,MAAM,QAAQ;AAAA,MAAM,QAAQ,WAAW;AAAA,MACvC,YAAY,OAAO,aAAa;AAC9B,gBAAQ,OAAO;AAAA,UACb,4BAA4B,SAAS,KAAK,MAAM,gBAAa,SAAS,SAAS,MAAM,2BAAwB,SAAS,SAAS,MAAM;AAAA;AAAA,QACvI;AACA,YAAI,QAAQ,QAAQ,SAAS,SAAS,QAAQ;AAC5C,gBAAM,IAAI,UAAU,6DAA6D;AAAA,QACnF;AACA,cAAM,WAAW,UAAU,QAAQ;AAAA,MACrC;AAAA,MACA,SAAS,CAAC,OAAO,YAAY;AAC3B,gBAAQ,OAAO;AAAA,UACb,8DAA8D,OAAO,WAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA;AAAA,QACrI;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,UAAE;AAAU,UAAM,cAAc,MAAM;AAAA,EAAG;AAC3C;AAEA,KAAK,EAAE,MAAM,CAAC,UAAU;AACtB,UAAQ,OAAO,MAAM,GAAG,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,CAAI;AAClF,UAAQ,WAAW;AACrB,CAAC;","names":[]}
+{"version":3,"sources":["../src/code-runtime-cli.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { cpus, totalmem } from \"node:os\";\nimport { readFile } from \"node:fs/promises\";\nimport {\n  CODE_RUNTIME_PROTOCOL_VERSION,\n  CodeRuntimeReconciler,\n  createCodeRuntimeControlClient,\n  runCodeRuntimeHeartbeatLoop,\n  type CodeRuntimeCapabilities,\n} from \"./code-runtime\";\nimport { TheseusRuntimeEngine } from \"./code-runtime-engine\";\nimport { assertPinnedImage, selectContainerEngine, type ContainerEngine } from \"./container\";\nimport { assertCodeBuildRecipe } from \"./recipe-container\";\nimport type { CodeBuildRecipe } from \"./code-tool-types\";\n\nconst VERSION = \"0.1.0\";\n\nfunction usage(): string {\n  return `Usage:\n  ODLA_CODE_HOST_TOKEN=odla_code_host_... odla-code-runtime \\\\\n    --endpoint https://odla.ai --image registry/odla-pi@sha256:... \\\\\n    --build-policy ./odla-code-build.json [--engine auto|container|podman|docker] [--once]\n\nThe host token is read only from ODLA_CODE_HOST_TOKEN. The runtime makes\noutbound HTTPS heartbeats and never opens a listener.`;\n}\n\nfunction parse(argv: string[]): {\n  endpoint: string; engine: ContainerEngine | \"auto\"; image: string;\n  buildPolicy: string; heartbeatMs: number; once: boolean;\n} {\n  const values = new Map<string, string>();\n  const flags = new Set<string>();\n  for (let index = 0; index < argv.length; index++) {\n    const arg = argv[index]!;\n    if (arg === \"--once\") { flags.add(arg); continue; }\n    if (!arg.startsWith(\"--\") || !argv[index + 1]) throw new TypeError(usage());\n    values.set(arg, argv[++index]!);\n  }\n  const endpoint = values.get(\"--endpoint\");\n  const image = values.get(\"--image\");\n  const buildPolicy = values.get(\"--build-policy\");\n  const engine = values.get(\"--engine\") ?? \"auto\";\n  const heartbeatMs = Number(values.get(\"--heartbeat-ms\") ?? 15_000);\n  if (!endpoint || !image || !buildPolicy || ![\"auto\", \"container\", \"podman\", \"docker\"].includes(engine)) {\n    throw new TypeError(usage());\n  }\n  assertPinnedImage(image);\n  if (!Number.isSafeInteger(heartbeatMs) || heartbeatMs < 1_000 || heartbeatMs > 300_000) {\n    throw new TypeError(\"--heartbeat-ms must be an integer from 1000 to 300000\");\n  }\n  return { endpoint, image, buildPolicy, engine: engine as ContainerEngine | \"auto\",\n    heartbeatMs, once: flags.has(\"--once\") };\n}\n\nasync function readPolicy(path: string): Promise<{\n  recipes: CodeBuildRecipe[]; recipeAuthorization: \"registered_recipe\" | \"exact_approval\";\n}> {\n  const value = JSON.parse(await readFile(path, \"utf8\")) as Record<string, unknown>;\n  if (!value || Object.keys(value).some((key) => ![\"recipes\", \"recipeAuthorization\"].includes(key))\n    || !Array.isArray(value.recipes) || !value.recipes.length\n    || (value.recipeAuthorization !== undefined && value.recipeAuthorization !== \"registered_recipe\"\n      && value.recipeAuthorization !== \"exact_approval\")) throw new TypeError(\"invalid Code build policy file\");\n  const recipes = value.recipes as CodeBuildRecipe[];\n  for (const recipe of recipes) assertCodeBuildRecipe(recipe);\n  const recipeAuthorization = value.recipeAuthorization === \"exact_approval\"\n    ? \"exact_approval\" : \"registered_recipe\";\n  return { recipes, recipeAuthorization };\n}\n\nasync function main(): Promise<void> {\n  const token = process.env.ODLA_CODE_HOST_TOKEN;\n  if (!token) throw new TypeError(\"ODLA_CODE_HOST_TOKEN is required\");\n  const options = parse(process.argv.slice(2));\n  if (process.platform !== \"darwin\" && process.platform !== \"linux\") throw new TypeError(\"Code runtime requires macOS or Linux\");\n  const engine = await selectContainerEngine(options.engine);\n  const policy = await readPolicy(options.buildPolicy);\n  const capabilities: CodeRuntimeCapabilities = {\n    protocolVersion: CODE_RUNTIME_PROTOCOL_VERSION,\n    platform: process.platform === \"darwin\" ? \"macos\" : \"linux\",\n    arch: process.arch,\n    engines: [engine],\n    cpuCount: cpus().length,\n    memoryBytes: totalmem(),\n  };\n  const controller = new AbortController();\n  for (const signal of [\"SIGINT\", \"SIGTERM\"] as const) process.once(signal, () => controller.abort(signal));\n  // The heartbeat stops on the process signal, but the client must remain able\n  // to report the active attempt's terminal events during engine.close().\n  const control = createCodeRuntimeControlClient({ endpoint: options.endpoint, token });\n  const commandEngine = new TheseusRuntimeEngine({\n    control, engine, recipes: policy.recipes,\n    recipeAuthorization: policy.recipeAuthorization,\n    onDiagnostic: (message) => process.stderr.write(`[odla-code-runtime] agent failed · ${message}\\n`),\n  });\n  const reconciler = new CodeRuntimeReconciler(control, commandEngine);\n  try {\n    await runCodeRuntimeHeartbeatLoop({\n      control, runtimeVersion: VERSION, capabilities, heartbeatMs: options.heartbeatMs,\n      once: options.once, signal: controller.signal,\n      onSnapshot: async (snapshot) => {\n        process.stderr.write(\n          `[odla-code-runtime] host ${snapshot.host.hostId} online · ${snapshot.bindings.length} active binding(s) · ${snapshot.commands.length} command(s)\\n`,\n        );\n        if (options.once && snapshot.commands.length) {\n          throw new TypeError(\"--once is diagnostic-only and refuses pending Code commands\");\n        }\n        await reconciler.reconcile(snapshot);\n      },\n      onRetry: (error, delayMs) => {\n        process.stderr.write(\n          `[odla-code-runtime] control plane unavailable; retrying in ${delayMs}ms · ${error instanceof Error ? error.message : String(error)}\\n`,\n        );\n      },\n    });\n  } finally { await commandEngine.close(); }\n}\n\nmain().catch((error) => {\n  process.stderr.write(`${error instanceof Error ? error.message : String(error)}\\n`);\n  process.exitCode = 1;\n});\n"],"mappings":";;;;;;;;;;;;;;;;;AACA,SAAS,MAAM,gBAAgB;AAC/B,SAAS,gBAAgB;AAazB,IAAM,UAAU;AAEhB,SAAS,QAAgB;AACvB,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAOT;AAEA,SAAS,MAAM,MAGb;AACA,QAAM,SAAS,oBAAI,IAAoB;AACvC,QAAM,QAAQ,oBAAI,IAAY;AAC9B,WAAS,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SAAS;AAChD,UAAM,MAAM,KAAK,KAAK;AACtB,QAAI,QAAQ,UAAU;AAAE,YAAM,IAAI,GAAG;AAAG;AAAA,IAAU;AAClD,QAAI,CAAC,IAAI,WAAW,IAAI,KAAK,CAAC,KAAK,QAAQ,CAAC,EAAG,OAAM,IAAI,UAAU,MAAM,CAAC;AAC1E,WAAO,IAAI,KAAK,KAAK,EAAE,KAAK,CAAE;AAAA,EAChC;AACA,QAAM,WAAW,OAAO,IAAI,YAAY;AACxC,QAAM,QAAQ,OAAO,IAAI,SAAS;AAClC,QAAM,cAAc,OAAO,IAAI,gBAAgB;AAC/C,QAAM,SAAS,OAAO,IAAI,UAAU,KAAK;AACzC,QAAM,cAAc,OAAO,OAAO,IAAI,gBAAgB,KAAK,IAAM;AACjE,MAAI,CAAC,YAAY,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,QAAQ,aAAa,UAAU,QAAQ,EAAE,SAAS,MAAM,GAAG;AACtG,UAAM,IAAI,UAAU,MAAM,CAAC;AAAA,EAC7B;AACA,oBAAkB,KAAK;AACvB,MAAI,CAAC,OAAO,cAAc,WAAW,KAAK,cAAc,OAAS,cAAc,KAAS;AACtF,UAAM,IAAI,UAAU,uDAAuD;AAAA,EAC7E;AACA,SAAO;AAAA,IAAE;AAAA,IAAU;AAAA,IAAO;AAAA,IAAa;AAAA,IACrC;AAAA,IAAa,MAAM,MAAM,IAAI,QAAQ;AAAA,EAAE;AAC3C;AAEA,eAAe,WAAW,MAEvB;AACD,QAAM,QAAQ,KAAK,MAAM,MAAM,SAAS,MAAM,MAAM,CAAC;AACrD,MAAI,CAAC,SAAS,OAAO,KAAK,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,WAAW,qBAAqB,EAAE,SAAS,GAAG,CAAC,KAC3F,CAAC,MAAM,QAAQ,MAAM,OAAO,KAAK,CAAC,MAAM,QAAQ,UAC/C,MAAM,wBAAwB,UAAa,MAAM,wBAAwB,uBACxE,MAAM,wBAAwB,iBAAmB,OAAM,IAAI,UAAU,gCAAgC;AAC5G,QAAM,UAAU,MAAM;AACtB,aAAW,UAAU,QAAS,uBAAsB,MAAM;AAC1D,QAAM,sBAAsB,MAAM,wBAAwB,mBACtD,mBAAmB;AACvB,SAAO,EAAE,SAAS,oBAAoB;AACxC;AAEA,eAAe,OAAsB;AACnC,QAAM,QAAQ,QAAQ,IAAI;AAC1B,MAAI,CAAC,MAAO,OAAM,IAAI,UAAU,kCAAkC;AAClE,QAAM,UAAU,MAAM,QAAQ,KAAK,MAAM,CAAC,CAAC;AAC3C,MAAI,QAAQ,aAAa,YAAY,QAAQ,aAAa,QAAS,OAAM,IAAI,UAAU,sCAAsC;AAC7H,QAAM,SAAS,MAAM,sBAAsB,QAAQ,MAAM;AACzD,QAAM,SAAS,MAAM,WAAW,QAAQ,WAAW;AACnD,QAAM,eAAwC;AAAA,IAC5C,iBAAiB;AAAA,IACjB,UAAU,QAAQ,aAAa,WAAW,UAAU;AAAA,IACpD,MAAM,QAAQ;AAAA,IACd,SAAS,CAAC,MAAM;AAAA,IAChB,UAAU,KAAK,EAAE;AAAA,IACjB,aAAa,SAAS;AAAA,EACxB;AACA,QAAM,aAAa,IAAI,gBAAgB;AACvC,aAAW,UAAU,CAAC,UAAU,SAAS,EAAY,SAAQ,KAAK,QAAQ,MAAM,WAAW,MAAM,MAAM,CAAC;AAGxG,QAAM,UAAU,+BAA+B,EAAE,UAAU,QAAQ,UAAU,MAAM,CAAC;AACpF,QAAM,gBAAgB,IAAI,qBAAqB;AAAA,IAC7C;AAAA,IAAS;AAAA,IAAQ,SAAS,OAAO;AAAA,IACjC,qBAAqB,OAAO;AAAA,IAC5B,cAAc,CAAC,YAAY,QAAQ,OAAO,MAAM,yCAAsC,OAAO;AAAA,CAAI;AAAA,EACnG,CAAC;AACD,QAAM,aAAa,IAAI,sBAAsB,SAAS,aAAa;AACnE,MAAI;AACF,UAAM,4BAA4B;AAAA,MAChC;AAAA,MAAS,gBAAgB;AAAA,MAAS;AAAA,MAAc,aAAa,QAAQ;AAAA,MACrE,MAAM,QAAQ;AAAA,MAAM,QAAQ,WAAW;AAAA,MACvC,YAAY,OAAO,aAAa;AAC9B,gBAAQ,OAAO;AAAA,UACb,4BAA4B,SAAS,KAAK,MAAM,gBAAa,SAAS,SAAS,MAAM,2BAAwB,SAAS,SAAS,MAAM;AAAA;AAAA,QACvI;AACA,YAAI,QAAQ,QAAQ,SAAS,SAAS,QAAQ;AAC5C,gBAAM,IAAI,UAAU,6DAA6D;AAAA,QACnF;AACA,cAAM,WAAW,UAAU,QAAQ;AAAA,MACrC;AAAA,MACA,SAAS,CAAC,OAAO,YAAY;AAC3B,gBAAQ,OAAO;AAAA,UACb,8DAA8D,OAAO,WAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA;AAAA,QACrI;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,UAAE;AAAU,UAAM,cAAc,MAAM;AAAA,EAAG;AAC3C;AAEA,KAAK,EAAE,MAAM,CAAC,UAAU;AACtB,UAAQ,OAAO,MAAM,GAAG,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,CAAI;AAClF,UAAQ,WAAW;AACrB,CAAC;","names":[]}

package/dist/node.cjs

@@ -21,7 +21,6 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var node_exports = {};
 __export(node_exports, {
   CODE_RUNTIME_PROTOCOL_VERSION: () => CODE_RUNTIME_PROTOCOL_VERSION,
-  CodePiRuntimeEngine: () => CodePiRuntimeEngine,
   CodeRuntimeCheckpointManager: () => CodeRuntimeCheckpointManager,
   CodeRuntimeControlError: () => CodeRuntimeControlError,
   CodeRuntimeReconciler: () => CodeRuntimeReconciler,
@@ -29,6 +28,7 @@ __export(node_exports, {
   MAX_MEMORY_BODY: () => MAX_MEMORY_BODY,
   MEASURED_PREMIUM: () => MEASURED_PREMIUM,
   SYSTEM_PROMPT_FOR: () => SYSTEM_PROMPT_FOR,
+  TheseusRuntimeEngine: () => TheseusRuntimeEngine,
   V1_SYSTEM_PROMPT: () => V1_SYSTEM_PROMPT,
   V2_SYSTEM_PROMPT: () => V2_SYSTEM_PROMPT,
   V3_SYSTEM_PROMPT: () => V3_SYSTEM_PROMPT,
@@ -1731,7 +1731,7 @@ var CodeRuntimeCheckpointManager = class {
     await this.options.event(command, { type: "message", actor: "system", body: prepared.note }, active.conversationRefs).catch(() => void 0);
     await active.workspace.cleanup();
     await this.options.event(command, { type: "status", status: "checkpointed" }, active.conversationRefs).catch(() => void 0);
-    return { status: "checkpointed", checkpoint: prepared.checkpoint, message: "Pi stopped at a portable checkpoint" };
+    return { status: "checkpointed", checkpoint: prepared.checkpoint, message: "Theseus stopped at a portable checkpoint" };
   }
   async acknowledged(command, result) {
     if (command.kind !== "checkpoint_stop" || result.status !== "checkpointed") return false;
@@ -1973,7 +1973,7 @@ var import_ai2 = require("@odla-ai/ai");
 var import_ai = require("@odla-ai/ai");
 
 // src/code-agent-skill.ts
-var V1_SYSTEM_PROMPT = `You are Pi, the coding agent inside an odla Code harness.
+var V1_SYSTEM_PROMPT = `You are Theseus, the coding agent inside an odla Code harness.
 Use only the odla_read, odla_apply_git_diff, and odla_run_recipe tools.
 For mutations, call odla_apply_git_diff with raw git diff text. It must start
 with "diff --git a/<path> b/<path>", include matching "---" and "+++" file
@@ -2020,7 +2020,12 @@ function codeSkill(opts) {
       { lease: opts.lease, workspaceDir: opts.workspaceDir, signal },
       { requestId: `bench-${tool}-${++seq}`, tool, input }
     );
-    opts.onToolCall?.({ tool, ok: response2.ok, durationMs: Date.now() - startedAt });
+    opts.onToolCall?.({
+      tool,
+      ok: response2.ok,
+      durationMs: Date.now() - startedAt,
+      ...response2.ok ? {} : { error: String(response2.content).slice(0, 300) }
+    });
     return { content: response2.content, isError: !response2.ok };
   };
   const read2 = {
@@ -2051,11 +2056,17 @@ function codeSkill(opts) {
   };
   const runRecipe = {
     name: "odla_run_recipe",
-    description: "Run one app-registered build or test recipe through CaMeL policy.",
+    description: `Run one app-registered build or test recipe through CaMeL policy.${opts.recipeIds?.length ? ` Available recipes: ${opts.recipeIds.join(", ")}.` : ""}`,
     inputSchema: {
       type: "object",
       required: ["recipeId"],
-      properties: { recipeId: { type: "string", minLength: 1, maxLength: 120, pattern: "^[a-zA-Z0-9._:-]+$" } },
+      properties: { recipeId: {
+        type: "string",
+        minLength: 1,
+        maxLength: 120,
+        pattern: "^[a-zA-Z0-9._:-]+$",
+        ...opts.recipeIds?.length ? { enum: [...opts.recipeIds] } : {}
+      } },
       additionalProperties: false
     },
     handler: (input, ctx) => call("sandbox.run_recipe", input, ctx.signal)
@@ -2139,6 +2150,7 @@ async function runCodeAgent(options) {
     lease: options.lease,
     workspaceDir: options.workspaceDir,
     surface,
+    ...options.recipeIds ? { recipeIds: options.recipeIds } : {},
     onToolCall: (call) => {
       toolCalls.push(call);
       options.onToolCall?.(call);
@@ -2169,7 +2181,7 @@ async function runCodeAgent(options) {
 // src/code-runtime-attempt.ts
 async function runCodeAgentAttempt(options) {
   try {
-    const surface = options.surface ?? "v2";
+    const surface = options.surface ?? "v3";
     const { run } = await runCodeAgent({
       inference: options.inference,
       broker: options.broker,
@@ -2180,6 +2192,7 @@ async function runCodeAgentAttempt(options) {
       // id only labels the request the control plane is about to rewrite.
       model: "brokered",
       surface,
+      ...options.recipeIds ? { recipeIds: options.recipeIds } : {},
       ...options.maxSteps === void 0 ? {} : { maxSteps: options.maxSteps },
       ...options.budget ? { budget: options.budget } : {},
       ...options.signal ? { signal: options.signal } : {},
@@ -3179,7 +3192,7 @@ var digestRuntimeValue = (value) => `sha256:${(0, import_node_crypto4.createHash
 var runtimeErrorMessage = (value) => value instanceof Error ? value.message : String(value);
 
 // src/code-runtime-engine.ts
-var CodePiRuntimeEngine = class {
+var TheseusRuntimeEngine = class {
   constructor(options) {
     this.options = options;
     this.#attempt = options.runAgentAttempt ?? runCodeAgentAttempt;
@@ -3265,7 +3278,7 @@ var CodePiRuntimeEngine = class {
       await this.#failure(command, active, detail);
       return null;
     });
-    return { status: "running", message: resume ? "Pi resumed from a portable checkpoint" : "Pi started" };
+    return { status: "running", message: resume ? "Theseus resumed from a portable checkpoint" : "Theseus started" };
   }
   /**
    * Pursue a goal: attempt, judge with the clean verifier, re-prompt from what
@@ -3353,7 +3366,7 @@ var CodePiRuntimeEngine = class {
       await this.#failure(command, active, detail);
       return null;
     });
-    return { status: "running", message: "Pi accepted the owner prompt" };
+    return { status: "running", message: "Theseus accepted the owner prompt" };
   }
   async #runAttempt(command, metadata, active) {
     const lease = fakeCodeLease(command, metadata);
@@ -3378,7 +3391,8 @@ var CodePiRuntimeEngine = class {
       lease,
       workspaceDir: active.workspace.workspaceDir,
       prompt: metadata.prompt,
-      signal: active.abort.signal
+      signal: active.abort.signal,
+      recipeIds: this.options.recipes.map((recipe2) => recipe2.id)
     });
     const closing = result.finalText.trim();
     const completed = result.status === "completed" && Boolean(closing);
@@ -3442,7 +3456,7 @@ var CodePiRuntimeEngine = class {
     }
   }
   async #diagnostic(command, active, value) {
-    const detail = value.trim().slice(0, 2e3) || "Pi runtime failed";
+    const detail = value.trim().slice(0, 2e3) || "Theseus runtime failed";
     this.options.onDiagnostic?.(detail);
     await this.#event(
       command,
@@ -3758,7 +3772,6 @@ async function installedDependencies(repoRoot) {
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   CODE_RUNTIME_PROTOCOL_VERSION,
-  CodePiRuntimeEngine,
   CodeRuntimeCheckpointManager,
   CodeRuntimeControlError,
   CodeRuntimeReconciler,
@@ -3766,6 +3779,7 @@ async function installedDependencies(repoRoot) {
   MAX_MEMORY_BODY,
   MEASURED_PREMIUM,
   SYSTEM_PROMPT_FOR,
+  TheseusRuntimeEngine,
   V1_SYSTEM_PROMPT,
   V2_SYSTEM_PROMPT,
   V3_SYSTEM_PROMPT,