@odla-ai/harness 0.8.0 → 0.8.1

package/dist/node.d.cts

@@ -406,6 +406,11 @@ interface CodeAgentAttemptOptions {
     /** Run-wide ceiling enforced by runAgent against incremental usage. */
     budget?: AgentRunBudget;
     signal?: AbortSignal;
+    /** Skills the host adds beyond the sandbox surface — PM, chat — built by the
+     * caller because they need a tenant-scoped database credential the harness
+     * deliberately does not hold. Without them a coordinator can read and patch
+     * code and then has no way to record a task, a decision or a bug. */
+    extraSkills?: Skill[];
     /** Emitted per brokered call so the engine can report tool activity. */
     onToolCall?(call: {
         tool: HarnessToolName;
@@ -507,6 +512,15 @@ interface TheseusRuntimeEngineOptions {
     recipeExecutor?: CodeRecipeExecutor;
     /** Owner-visible and terminal-visible bounded runtime failures. */
     onDiagnostic?: (message: string) => void;
+    /** Skills the host adds for a session, beyond the sandbox surface.
+     *
+     * A function of the command rather than a fixed list, because PM is scoped to
+     * one app and one project: the credential and the project are properties of
+     * the session being served, not of the engine. Absent means the coordinator
+     * gets code tools only, which is what it had — able to patch a file and
+     * unable to record that it did.
+     */
+    sessionSkills?: (command: CodeRuntimeCommand) => Skill[] | Promise<Skill[]>;
     /** Frozen checkout snapshot owned by the foreground terminal process. */
     localSource?: FrozenCodeLocalSource;
 }

package/dist/node.d.ts

@@ -406,6 +406,11 @@ interface CodeAgentAttemptOptions {
     /** Run-wide ceiling enforced by runAgent against incremental usage. */
     budget?: AgentRunBudget;
     signal?: AbortSignal;
+    /** Skills the host adds beyond the sandbox surface — PM, chat — built by the
+     * caller because they need a tenant-scoped database credential the harness
+     * deliberately does not hold. Without them a coordinator can read and patch
+     * code and then has no way to record a task, a decision or a bug. */
+    extraSkills?: Skill[];
     /** Emitted per brokered call so the engine can report tool activity. */
     onToolCall?(call: {
         tool: HarnessToolName;
@@ -507,6 +512,15 @@ interface TheseusRuntimeEngineOptions {
     recipeExecutor?: CodeRecipeExecutor;
     /** Owner-visible and terminal-visible bounded runtime failures. */
     onDiagnostic?: (message: string) => void;
+    /** Skills the host adds for a session, beyond the sandbox surface.
+     *
+     * A function of the command rather than a fixed list, because PM is scoped to
+     * one app and one project: the credential and the project are properties of
+     * the session being served, not of the engine. Absent means the coordinator
+     * gets code tools only, which is what it had — able to patch a file and
+     * unable to record that it did.
+     */
+    sessionSkills?: (command: CodeRuntimeCommand) => Skill[] | Promise<Skill[]>;
     /** Frozen checkout snapshot owned by the foreground terminal process. */
     localSource?: FrozenCodeLocalSource;
 }

package/dist/node.js

@@ -44,7 +44,7 @@ import {
   validateMemory,
   validateRelativePath,
   verifyCodeCandidate
-} from "./chunk-ISR434K7.js";
+} from "./chunk-IWVGSWY6.js";
 import {
   assertPinnedImage,
   buildContainerRunArgs,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@odla-ai/harness",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "Safe, inspectable coding-task protocol and credentialless container runner for odla Studio.",
   "license": "MIT",
   "homepage": "https://odla.ai/docs/packages/harness",