@odla-ai/harness 0.9.2 → 0.9.4

package/dist/{chunk-Q4NL5XO3.js → chunk-XSUUHWNX.js}

@@ -1266,12 +1266,24 @@ async function materializeCommandWorkspace(input) {
       resume
     });
     if (command.payload.sourceSet) {
-      const selected = await input.control.source(command.sessionId);
-      if (selected.repository !== metadata.repository || selected.commitSha !== metadata.baseCommitSha || selected.treeDigest !== metadata.sourceTreeDigest) {
+      if (prepared.trustedBaseDigest !== metadata.sourceTreeDigest) {
         await prepared.workspace.cleanup();
         throw new TypeError("Code local source does not match the selected GitHub primary source");
       }
-      await attachCodeRuntimeReferences(prepared.workspace, selected.references ?? []);
+      const set = command.payload.sourceSet && typeof command.payload.sourceSet === "object" && !Array.isArray(command.payload.sourceSet) ? command.payload.sourceSet : null;
+      const references = set?.references;
+      if (!Array.isArray(references)) {
+        await prepared.workspace.cleanup();
+        throw new TypeError("Code selected source set is invalid");
+      }
+      if (references.length) {
+        const selected = await input.control.source(command.sessionId);
+        if (selected.repository !== metadata.repository || selected.commitSha !== metadata.baseCommitSha || selected.treeDigest !== metadata.sourceTreeDigest) {
+          await prepared.workspace.cleanup();
+          throw new TypeError("Code local source does not match the selected GitHub primary source");
+        }
+        await attachCodeRuntimeReferences(prepared.workspace, selected.references ?? []);
+      }
     }
     return {
       workspace: prepared.workspace,
@@ -1477,7 +1489,8 @@ function codeSkill(opts) {
       true
     )
   ];
-  const tools = opts.surface === "v3" ? [...orientation, searchFiles, read2, applyPatch, runRecipe] : opts.surface === "v2" ? [listFiles, searchFiles, read2, applyPatch, runRecipe] : [read2, applyPatch, runRecipe];
+  const effects = opts.readOnly ? [] : [applyPatch, runRecipe];
+  const tools = opts.surface === "v3" ? [...orientation, searchFiles, read2, ...effects] : opts.surface === "v2" ? [listFiles, searchFiles, read2, ...effects] : [read2, ...effects];
   return { name: "code", tools };
 }
 
@@ -1494,6 +1507,7 @@ async function runCodeAgent(options) {
     lease: options.lease,
     workspaceDir: options.workspaceDir,
     surface,
+    ...options.readOnly === void 0 ? {} : { readOnly: options.readOnly },
     ...options.recipeIds ? { recipeIds: options.recipeIds } : {},
     onToolCall: (call) => {
       toolCalls.push(call);
@@ -1506,7 +1520,7 @@ async function runCodeAgent(options) {
     {
       name: "odla-code",
       model: options.model,
-      system: options.system ?? SYSTEM_PROMPT_FOR[surface],
+      system: options.system ?? `${SYSTEM_PROMPT_FOR[surface]}${options.readOnly ? "\n\nThis session is read-only. Inspect and report; repository mutation and recipe execution are intentionally unavailable." : ""}`,
       skills: [skill, ...options.extraSkills ?? []],
       maxSteps: options.maxSteps ?? 24,
       maxTokens: options.maxTokens ?? 16384
@@ -1537,6 +1551,7 @@ async function runCodeAgentAttempt(options) {
       // id only labels the request the control plane is about to rewrite.
       model: "brokered",
       surface,
+      ...options.readOnly === void 0 ? {} : { readOnly: options.readOnly },
       ...options.recipeIds ? { recipeIds: options.recipeIds } : {},
       ...options.extraSkills ? { extraSkills: options.extraSkills } : {},
       ...options.maxSteps === void 0 ? {} : { maxSteps: options.maxSteps },
@@ -2561,7 +2576,16 @@ function createCodeRuntimeToolBroker(input, lease, role) {
     readerId: `code-session:${lease.task.taskId}`,
     readOnlyPrefixes: [".odla-references"]
   });
-  return role === "coding" ? broker : { execute: (context, request) => request.tool === "sandbox.read" ? broker.execute(context, request) : Promise.resolve({ requestId: request.requestId, ok: false, content: "review sessions are read-only" }) };
+  const reviewReads = /* @__PURE__ */ new Set([
+    "sandbox.read",
+    "sandbox.list",
+    "sandbox.search",
+    "sandbox.overview",
+    "sandbox.where_is",
+    "sandbox.who_imports",
+    "sandbox.who_touches"
+  ]);
+  return role === "coding" ? broker : { execute: (context, request) => reviewReads.has(request.tool) ? broker.execute(context, request) : Promise.resolve({ requestId: request.requestId, ok: false, content: "review sessions are read-only" }) };
 }
 
 // src/code-runtime-goal.ts
@@ -3010,6 +3034,7 @@ var TheseusRuntimeEngine = class {
       workspaceDir: active.workspace.workspaceDir,
       prompt: metadata.prompt,
       signal: active.abort.signal,
+      readOnly: metadata.role === "review",
       recipeIds: this.options.recipes.map((recipe2) => recipe2.id),
       ...extraSkills.length ? { extraSkills } : {}
     });
@@ -3121,4 +3146,4 @@ export {
   runGoal,
   TheseusRuntimeEngine
 };
-//# sourceMappingURL=chunk-Q4NL5XO3.js.map
+//# sourceMappingURL=chunk-XSUUHWNX.js.map