@odla-ai/harness 0.9.3 → 0.10.0

package/dist/code-runtime-cli.js

@@ -7,7 +7,7 @@ import {
   createCodeRuntimeControlClient,
   createCodeRuntimeSessionSkillLoader,
   runCodeRuntimeHeartbeatLoop
-} from "./chunk-AEAISFY3.js";
+} from "./chunk-5MDYIJXC.js";
 import "./chunk-FAN2R3GW.js";
 import {
   assertPinnedImage,

package/dist/node.cjs

@@ -1217,7 +1217,7 @@ function createCodeRuntimeControlClient(options) {
 }
 
 // src/code-runtime.ts
-var CODE_RUNTIME_PROTOCOL_VERSION = 1;
+var CODE_RUNTIME_PROTOCOL_VERSION = 2;
 async function runCodeRuntimeHeartbeatLoop(options) {
   const heartbeatMs = options.heartbeatMs ?? 15e3;
   if (!Number.isSafeInteger(heartbeatMs) || heartbeatMs < 1e3 || heartbeatMs > 3e5) {
@@ -1940,6 +1940,10 @@ function codeCommandMetadata(payload, resume) {
   if (role !== "coding" && role !== "review" || typeof title !== "string" || typeof prompt !== "string") {
     throw new TypeError(`invalid Code ${resume ? "resume" : "start"} metadata`);
   }
+  if (payload.readOnly !== void 0 && typeof payload.readOnly !== "boolean") {
+    throw new TypeError(`invalid Code ${resume ? "resume" : "start"} read-only capability`);
+  }
+  const readOnly = role === "review" || payload.readOnly === true;
   const planning = trusted?.planningInputDigest;
   const attestation = trusted?.attestationDigest;
   const repository = trusted?.repository;
@@ -1953,6 +1957,7 @@ function codeCommandMetadata(payload, resume) {
   }
   return {
     role,
+    readOnly,
     title,
     prompt,
     maxTokensPerInteraction: Number(maxTokensPerInteraction),
@@ -2345,7 +2350,8 @@ function codeSkill(opts) {
       true
     )
   ];
-  const tools = opts.surface === "v3" ? [...orientation, searchFiles, read2, applyPatch, runRecipe] : opts.surface === "v2" ? [listFiles, searchFiles, read2, applyPatch, runRecipe] : [read2, applyPatch, runRecipe];
+  const effects = opts.readOnly ? [] : [applyPatch, runRecipe];
+  const tools = opts.surface === "v3" ? [...orientation, searchFiles, read2, ...effects] : opts.surface === "v2" ? [listFiles, searchFiles, read2, ...effects] : [read2, ...effects];
   return { name: "code", tools };
 }
 
@@ -2358,6 +2364,7 @@ async function runCodeAgent(options) {
     lease: options.lease,
     workspaceDir: options.workspaceDir,
     surface,
+    ...options.readOnly === void 0 ? {} : { readOnly: options.readOnly },
     ...options.recipeIds ? { recipeIds: options.recipeIds } : {},
     onToolCall: (call) => {
       toolCalls.push(call);
@@ -2370,7 +2377,7 @@ async function runCodeAgent(options) {
     {
       name: "odla-code",
       model: options.model,
-      system: options.system ?? SYSTEM_PROMPT_FOR[surface],
+      system: options.system ?? `${SYSTEM_PROMPT_FOR[surface]}${options.readOnly ? "\n\nThis session is read-only. Inspect and report; repository mutation and recipe execution are intentionally unavailable." : ""}`,
       skills: [skill, ...options.extraSkills ?? []],
       maxSteps: options.maxSteps ?? 24,
       maxTokens: options.maxTokens ?? 16384
@@ -2400,6 +2407,7 @@ async function runCodeAgentAttempt(options) {
       // id only labels the request the control plane is about to rewrite.
       model: "brokered",
       surface,
+      ...options.readOnly === void 0 ? {} : { readOnly: options.readOnly },
       ...options.recipeIds ? { recipeIds: options.recipeIds } : {},
       ...options.extraSkills ? { extraSkills: options.extraSkills } : {},
       ...options.maxSteps === void 0 ? {} : { maxSteps: options.maxSteps },
@@ -3417,7 +3425,16 @@ function createCodeRuntimeToolBroker(input, lease, role) {
     readerId: `code-session:${lease.task.taskId}`,
     readOnlyPrefixes: [".odla-references"]
   });
-  return role === "coding" ? broker : { execute: (context, request) => request.tool === "sandbox.read" ? broker.execute(context, request) : Promise.resolve({ requestId: request.requestId, ok: false, content: "review sessions are read-only" }) };
+  const reviewReads = /* @__PURE__ */ new Set([
+    "sandbox.read",
+    "sandbox.list",
+    "sandbox.search",
+    "sandbox.overview",
+    "sandbox.where_is",
+    "sandbox.who_imports",
+    "sandbox.who_touches"
+  ]);
+  return role === "coding" ? broker : { execute: (context, request) => reviewReads.has(request.tool) ? broker.execute(context, request) : Promise.resolve({ requestId: request.requestId, ok: false, content: "review sessions are read-only" }) };
 }
 
 // src/code-memory.ts
@@ -3873,6 +3890,7 @@ var TheseusRuntimeEngine = class {
       acknowledged: false,
       startGate,
       role: metadata.role,
+      readOnly: metadata.readOnly,
       title: metadata.title,
       maxTokensPerInteraction: metadata.maxTokensPerInteraction,
       baseCommitSha: metadata.baseCommitSha,
@@ -3929,6 +3947,7 @@ var TheseusRuntimeEngine = class {
       event: (event) => this.#event(command, event, active.conversationRefs).then(() => void 0, () => void 0),
       attempt: (prompt) => this.#runAttempt(command, {
         role: active.role,
+        readOnly: active.readOnly,
         title: active.title,
         prompt,
         maxTokensPerInteraction: active.maxTokensPerInteraction,
@@ -3971,6 +3990,7 @@ var TheseusRuntimeEngine = class {
     await this.#takeOver(command, "prompt requires an active Code session");
     active.done = this.#runAttempt(command, {
       role: active.role,
+      readOnly: active.readOnly,
       title: active.title,
       prompt,
       maxTokensPerInteraction: active.maxTokensPerInteraction,
@@ -4018,6 +4038,7 @@ var TheseusRuntimeEngine = class {
       workspaceDir: active.workspace.workspaceDir,
       prompt: metadata.prompt,
       signal: active.abort.signal,
+      readOnly: metadata.readOnly,
       recipeIds: this.options.recipes.map((recipe2) => recipe2.id),
       ...extraSkills.length ? { extraSkills } : {}
     });