@odla-ai/harness 0.9.2 → 0.9.3

package/dist/code-runtime-cli.js

@@ -7,7 +7,7 @@ import {
   createCodeRuntimeControlClient,
   createCodeRuntimeSessionSkillLoader,
   runCodeRuntimeHeartbeatLoop
-} from "./chunk-Q4NL5XO3.js";
+} from "./chunk-AEAISFY3.js";
 import "./chunk-FAN2R3GW.js";
 import {
   assertPinnedImage,

package/dist/node.cjs

@@ -2116,12 +2116,24 @@ async function materializeCommandWorkspace(input) {
       resume
     });
     if (command.payload.sourceSet) {
-      const selected = await input.control.source(command.sessionId);
-      if (selected.repository !== metadata.repository || selected.commitSha !== metadata.baseCommitSha || selected.treeDigest !== metadata.sourceTreeDigest) {
+      if (prepared.trustedBaseDigest !== metadata.sourceTreeDigest) {
         await prepared.workspace.cleanup();
         throw new TypeError("Code local source does not match the selected GitHub primary source");
       }
-      await attachCodeRuntimeReferences(prepared.workspace, selected.references ?? []);
+      const set = command.payload.sourceSet && typeof command.payload.sourceSet === "object" && !Array.isArray(command.payload.sourceSet) ? command.payload.sourceSet : null;
+      const references = set?.references;
+      if (!Array.isArray(references)) {
+        await prepared.workspace.cleanup();
+        throw new TypeError("Code selected source set is invalid");
+      }
+      if (references.length) {
+        const selected = await input.control.source(command.sessionId);
+        if (selected.repository !== metadata.repository || selected.commitSha !== metadata.baseCommitSha || selected.treeDigest !== metadata.sourceTreeDigest) {
+          await prepared.workspace.cleanup();
+          throw new TypeError("Code local source does not match the selected GitHub primary source");
+        }
+        await attachCodeRuntimeReferences(prepared.workspace, selected.references ?? []);
+      }
     }
     return {
       workspace: prepared.workspace,