@odla-ai/harness 0.9.3 → 0.10.0

package/dist/node.d.cts

@@ -158,7 +158,7 @@ interface CodeRuntimeClientOptions {
 declare function createCodeRuntimeControlClient(options: CodeRuntimeClientOptions): CodeRuntimeAgentControlPlane;
 
 /** Version of the outbound Code host heartbeat contract. */
-declare const CODE_RUNTIME_PROTOCOL_VERSION: 1;
+declare const CODE_RUNTIME_PROTOCOL_VERSION: 2;
 /** Frozen, secret-filtered view of the checkout from which a terminal connected. */
 interface CodeLocalSourceDescriptor {
     kind: "local_checkout";
@@ -419,6 +419,10 @@ interface CodeSkillOpts {
     broker: HarnessToolBroker;
     lease: HarnessLease;
     workspaceDir: string;
+    /** Expose repository inspection only. The broker still enforces this at the
+     * trust boundary; removing mutation tools from the manifest keeps a planner
+     * from spending turns calling effects it can never own. */
+    readOnly?: boolean;
     /** Exact CaMeL-registered recipes available to this attempt. */
     recipeIds?: readonly string[];
     /** Defaults to v1 so an unqualified run reproduces the baseline. */
@@ -447,6 +451,8 @@ interface CodeAgentAttemptOptions {
     workspaceDir: string;
     prompt: string;
     surface?: CodeSurface;
+    /** Present only repository inspection tools. */
+    readOnly?: boolean;
     maxSteps?: number;
     /** Exact registered build/test recipe IDs available to the runtime. */
     recipeIds?: readonly string[];
@@ -677,6 +683,7 @@ declare class CodeRuntimeCheckpointManager {
 
 interface CodeCommandMetadata {
     role: "coding" | "review";
+    readOnly: boolean;
     title: string;
     prompt: string;
     maxTokensPerInteraction: number;
@@ -756,6 +763,8 @@ interface RunCodeAgentOptions {
     compaction?: CompactionPolicy | null;
     /** Tool surface the agent sees. Defaults to v1, the recorded baseline. */
     surface?: CodeSurface;
+    /** Present only repository inspection tools. */
+    readOnly?: boolean;
     /** Overrides the surface's system prompt. Leave unset to keep runs comparable. */
     system?: string;
     maxTokens?: number;

package/dist/node.d.ts

@@ -158,7 +158,7 @@ interface CodeRuntimeClientOptions {
 declare function createCodeRuntimeControlClient(options: CodeRuntimeClientOptions): CodeRuntimeAgentControlPlane;
 
 /** Version of the outbound Code host heartbeat contract. */
-declare const CODE_RUNTIME_PROTOCOL_VERSION: 1;
+declare const CODE_RUNTIME_PROTOCOL_VERSION: 2;
 /** Frozen, secret-filtered view of the checkout from which a terminal connected. */
 interface CodeLocalSourceDescriptor {
     kind: "local_checkout";
@@ -419,6 +419,10 @@ interface CodeSkillOpts {
     broker: HarnessToolBroker;
     lease: HarnessLease;
     workspaceDir: string;
+    /** Expose repository inspection only. The broker still enforces this at the
+     * trust boundary; removing mutation tools from the manifest keeps a planner
+     * from spending turns calling effects it can never own. */
+    readOnly?: boolean;
     /** Exact CaMeL-registered recipes available to this attempt. */
     recipeIds?: readonly string[];
     /** Defaults to v1 so an unqualified run reproduces the baseline. */
@@ -447,6 +451,8 @@ interface CodeAgentAttemptOptions {
     workspaceDir: string;
     prompt: string;
     surface?: CodeSurface;
+    /** Present only repository inspection tools. */
+    readOnly?: boolean;
     maxSteps?: number;
     /** Exact registered build/test recipe IDs available to the runtime. */
     recipeIds?: readonly string[];
@@ -677,6 +683,7 @@ declare class CodeRuntimeCheckpointManager {
 
 interface CodeCommandMetadata {
     role: "coding" | "review";
+    readOnly: boolean;
     title: string;
     prompt: string;
     maxTokensPerInteraction: number;
@@ -756,6 +763,8 @@ interface RunCodeAgentOptions {
     compaction?: CompactionPolicy | null;
     /** Tool surface the agent sees. Defaults to v1, the recorded baseline. */
     surface?: CodeSurface;
+    /** Present only repository inspection tools. */
+    readOnly?: boolean;
     /** Overrides the surface's system prompt. Leave unset to keep runs comparable. */
     system?: string;
     maxTokens?: number;

package/dist/node.js

@@ -48,7 +48,7 @@ import {
   validateMemory,
   validateRelativePath,
   verifyCodeCandidate
-} from "./chunk-AEAISFY3.js";
+} from "./chunk-5MDYIJXC.js";
 import "./chunk-FAN2R3GW.js";
 import {
   assertPinnedImage,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@odla-ai/harness",
-  "version": "0.9.3",
+  "version": "0.10.0",
   "description": "Safe, inspectable coding-task protocol and credentialless container runner for odla Studio.",
   "license": "MIT",
   "homepage": "https://odla.ai/docs/packages/harness",