@odla-ai/harness 0.6.0 → 0.7.0

package/README.md

@@ -2,14 +2,14 @@
 
 @odla-ai/harness is the experimental coding-task boundary shared by odla
 Studio, a trusted Mac/Linux runner, and an untrusted coding-agent container.
-It owns the protocol and safe runner defaults; agent implementations such as Pi
+It owns the protocol and safe runner defaults; agent implementations such as Theseus
 remain replaceable adapters.
 
 Harness can stage a bounded, secret-filtered copy of a local checkout. The
-brokered Pi image receives no workspace mount at all: reads and mutations cross
+brokered Theseus agent receives no workspace mount at all: reads and mutations cross
 the typed tool channel into that disposable snapshot. The original checkout,
 terminal credential, provider credentials, container-engine socket, and
-network are never available to Pi. Inference requests cross the same JSONL
+network are never available to Theseus. Inference requests cross the same JSONL
 channel and are fulfilled by the control plane through @odla-ai/ai.
 
 > **Ask the runbooks first.** odla's operational procedures live in a database,
@@ -32,7 +32,7 @@ npx @odla-ai/cli code connect \
   --env dev
 ~~~
 
-The terminal verifies the checkout and isolation engine, builds the Pi adapter
+The terminal verifies the checkout and isolation engine, builds the Theseus adapter
 bundled with the exact CLI release into a content-addressed local image, prepares
 each digest-pinned recipe image, and sends the connection request outbound to odla. The signed-in app
 owner approves it; no bearer is copied from the browser. The process stays in
@@ -49,20 +49,20 @@ otherwise Harness receives the immutable sources from the Registry. References
 are materialized under `.odla-references/<alias>` and the broker rejects every
 attempt to patch them. A checkpoint patch is computed against the selected
 primary Git base, so local developer changes remain explicit provenance
-alongside Pi's changes.
+alongside Theseus's changes.
 
 On Apple Silicon with macOS 26, install Apple's lightweight runtime once with
 `brew install container`; `code connect` selects it and starts its user service.
 On Linux, auto requires rootless Podman. Podman Machine is the macOS fallback;
 Docker is an explicit compatibility adapter only. Recipe images must be
-digest-pinned; the Pi adapter's local tag contains the SHA-256 of its CLI bundle
-and requires no registry credential. All adapters run Pi networkless and
-non-root with bounded CPU/memory; Pi has no
+digest-pinned; the Theseus adapter's local tag contains the SHA-256 of its CLI bundle
+and requires no registry credential. All adapters run Theseus networkless and
+non-root with bounded CPU/memory; Theseus has no
 checkout or engine-socket mount.
 
 ## Experimental task runner
 
-The older generic task queue is separate from the personal Pi terminal flow.
+The older generic task queue is separate from the personal Theseus terminal flow.
 It lives under **Code → Task runners · advanced**. To exercise it, register a
 workspace and keep its runner token outside shell history:
 
@@ -93,7 +93,7 @@ new copy.
 ## Build recipes
 
 The Code terminal advertises a closed recipe catalog. The content-addressed,
-CLI-embedded Pi image and every registry-digest-pinned recipe are prepared
+CLI-embedded Theseus adapter and every registry-digest-pinned recipe are prepared
 before approval:
 
 ~~~json
@@ -111,7 +111,7 @@ before approval:
 
 The runtime validates HTTPS, never places its credential in a request body,
 never opens a listener, and rejects malformed or cross-host binding responses.
-Pi reads, patches, and runs only registered build recipes through the typed
+Theseus reads, patches, and runs only registered build recipes through the typed
 CaMeL broker. Checkpoint-stop captures a bounded combined patch; resume verifies
 it against the same selected Git base and exact local source descriptor.
 
@@ -128,7 +128,7 @@ attempt.cancel, and attempt.complete.
 
 ## CaMeL tool and build boundary
 
-`createCodeToolBroker` is the trusted implementation for the three Pi tools:
+`createCodeToolBroker` is the trusted implementation for the three Theseus tools:
 registered staged-file reads, confined unified patches, and app-registered
 build recipes. Each request is labelled and evaluated by @odla-ai/camel before
 an effect. Patch data remains Prompt-Unsafe payload; file and recipe selectors

package/dist/{chunk-ZYNGL5SC.js → chunk-QZXCQSPZ.js}

@@ -882,7 +882,7 @@ var CodeRuntimeCheckpointManager = class {
     await this.options.event(command, { type: "message", actor: "system", body: prepared.note }, active.conversationRefs).catch(() => void 0);
     await active.workspace.cleanup();
     await this.options.event(command, { type: "status", status: "checkpointed" }, active.conversationRefs).catch(() => void 0);
-    return { status: "checkpointed", checkpoint: prepared.checkpoint, message: "Pi stopped at a portable checkpoint" };
+    return { status: "checkpointed", checkpoint: prepared.checkpoint, message: "Theseus stopped at a portable checkpoint" };
   }
   async acknowledged(command, result) {
     if (command.kind !== "checkpoint_stop" || result.status !== "checkpointed") return false;
@@ -1118,7 +1118,7 @@ async function materializeCommandWorkspace(input) {
 }
 
 // src/code-agent-skill.ts
-var V1_SYSTEM_PROMPT = `You are Pi, the coding agent inside an odla Code harness.
+var V1_SYSTEM_PROMPT = `You are Theseus, the coding agent inside an odla Code harness.
 Use only the odla_read, odla_apply_git_diff, and odla_run_recipe tools.
 For mutations, call odla_apply_git_diff with raw git diff text. It must start
 with "diff --git a/<path> b/<path>", include matching "---" and "+++" file
@@ -1201,11 +1201,17 @@ function codeSkill(opts) {
   };
   const runRecipe = {
     name: "odla_run_recipe",
-    description: "Run one app-registered build or test recipe through CaMeL policy.",
+    description: `Run one app-registered build or test recipe through CaMeL policy.${opts.recipeIds?.length ? ` Available recipes: ${opts.recipeIds.join(", ")}.` : ""}`,
     inputSchema: {
       type: "object",
       required: ["recipeId"],
-      properties: { recipeId: { type: "string", minLength: 1, maxLength: 120, pattern: "^[a-zA-Z0-9._:-]+$" } },
+      properties: { recipeId: {
+        type: "string",
+        minLength: 1,
+        maxLength: 120,
+        pattern: "^[a-zA-Z0-9._:-]+$",
+        ...opts.recipeIds?.length ? { enum: [...opts.recipeIds] } : {}
+      } },
       additionalProperties: false
     },
     handler: (input, ctx) => call("sandbox.run_recipe", input, ctx.signal)
@@ -1293,6 +1299,7 @@ async function runCodeAgent(options) {
     lease: options.lease,
     workspaceDir: options.workspaceDir,
     surface,
+    ...options.recipeIds ? { recipeIds: options.recipeIds } : {},
     onToolCall: (call) => {
       toolCalls.push(call);
       options.onToolCall?.(call);
@@ -1324,7 +1331,7 @@ async function runCodeAgent(options) {
 import { extractText } from "@odla-ai/ai";
 async function runCodeAgentAttempt(options) {
   try {
-    const surface = options.surface ?? "v2";
+    const surface = options.surface ?? "v3";
     const { run } = await runCodeAgent({
       inference: options.inference,
       broker: options.broker,
@@ -1335,6 +1342,7 @@ async function runCodeAgentAttempt(options) {
       // id only labels the request the control plane is about to rewrite.
       model: "brokered",
       surface,
+      ...options.recipeIds ? { recipeIds: options.recipeIds } : {},
       ...options.maxSteps === void 0 ? {} : { maxSteps: options.maxSteps },
       ...options.budget ? { budget: options.budget } : {},
       ...options.signal ? { signal: options.signal } : {},
@@ -2349,7 +2357,7 @@ var digestRuntimeValue = (value) => `sha256:${createHash3("sha256").update(value
 var runtimeErrorMessage = (value) => value instanceof Error ? value.message : String(value);
 
 // src/code-runtime-engine.ts
-var CodePiRuntimeEngine = class {
+var TheseusRuntimeEngine = class {
   constructor(options) {
     this.options = options;
     this.#attempt = options.runAgentAttempt ?? runCodeAgentAttempt;
@@ -2435,7 +2443,7 @@ var CodePiRuntimeEngine = class {
       await this.#failure(command, active, detail);
       return null;
     });
-    return { status: "running", message: resume ? "Pi resumed from a portable checkpoint" : "Pi started" };
+    return { status: "running", message: resume ? "Theseus resumed from a portable checkpoint" : "Theseus started" };
   }
   /**
    * Pursue a goal: attempt, judge with the clean verifier, re-prompt from what
@@ -2523,7 +2531,7 @@ var CodePiRuntimeEngine = class {
       await this.#failure(command, active, detail);
       return null;
     });
-    return { status: "running", message: "Pi accepted the owner prompt" };
+    return { status: "running", message: "Theseus accepted the owner prompt" };
   }
   async #runAttempt(command, metadata, active) {
     const lease = fakeCodeLease(command, metadata);
@@ -2548,7 +2556,8 @@ var CodePiRuntimeEngine = class {
       lease,
       workspaceDir: active.workspace.workspaceDir,
       prompt: metadata.prompt,
-      signal: active.abort.signal
+      signal: active.abort.signal,
+      recipeIds: this.options.recipes.map((recipe2) => recipe2.id)
     });
     const closing = result.finalText.trim();
     const completed = result.status === "completed" && Boolean(closing);
@@ -2612,7 +2621,7 @@ var CodePiRuntimeEngine = class {
     }
   }
   async #diagnostic(command, active, value) {
-    const detail = value.trim().slice(0, 2e3) || "Pi runtime failed";
+    const detail = value.trim().slice(0, 2e3) || "Theseus runtime failed";
     this.options.onDiagnostic?.(detail);
     await this.#event(
       command,
@@ -2666,6 +2675,6 @@ export {
   renderMemories,
   hazardFromAttempt,
   runGoal,
-  CodePiRuntimeEngine
+  TheseusRuntimeEngine
 };
-//# sourceMappingURL=chunk-ZYNGL5SC.js.map
+//# sourceMappingURL=chunk-QZXCQSPZ.js.map