@ai-sdk/harness-acp 1.0.45 → 1.0.46

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @ai-sdk/harness-acp
 
+## 1.0.46
+
+### Patch Changes
+
+- cdc12a1: feat(harness): add support for using adapter-native subscriptions where available
+- Updated dependencies [4d1bf28]
+- Updated dependencies [cdc12a1]
+- Updated dependencies [d70a334]
+- Updated dependencies [81ba84c]
+- Updated dependencies [813bb36]
+- Updated dependencies [c43e4b7]
+  - @ai-sdk/harness@1.0.108
+  - @ai-sdk/provider-utils@5.0.40
+
 ## 1.0.45
 
 ### Patch Changes

package/dist/bridge/host-tool-mcp.mjs

@@ -12,7 +12,7 @@ import {
   ListToolsRequestSchema,
   McpError
 } from "@modelcontextprotocol/sdk/types.js";
-var VERSION = true ? "1.0.45" : "0.0.0-test";
+var VERSION = true ? "1.0.46" : "0.0.0-test";
 function createHostToolMCPServer({
   tools: tools2,
   revision = 1,

package/dist/bridge/index.mjs

@@ -2416,7 +2416,7 @@ import {
   ListToolsRequestSchema,
   McpError
 } from "@modelcontextprotocol/sdk/types.js";
-var VERSION = true ? "1.0.45" : "0.0.0-test";
+var VERSION = true ? "1.0.46" : "0.0.0-test";
 function createHostToolMCPServer({
   tools,
   revision = 1,

package/dist/index.d.ts

@@ -157,6 +157,18 @@ type ACPCredentialBrokering = ({ env, sandboxEnv, headers, }: {
     sandboxEnv?: Readonly<Record<string, string>>;
     headers?: Readonly<Record<string, string>>;
 }) => ReadonlyArray<HarnessV1RequestTransformation>;
+type ACPAuthenticationFile = {
+    /** Path relative to the ACP implementation's private home directory. */
+    readonly path: string;
+    readonly content: string;
+};
+type ACPAuthenticationFiles = (options: {
+    /** Host values resolved for the implementation. */
+    readonly env: Readonly<Record<string, string>>;
+    /** Values exposed to the sandbox process after credential brokering. */
+    readonly sandboxEnv: Readonly<Record<string, string>>;
+    readonly credentialBrokeringAvailable: boolean;
+}) => ReadonlyArray<ACPAuthenticationFile>;
 type ACPPermissionModeTarget = {
     readonly type: 'session-mode';
     readonly modeId: string;
@@ -217,12 +229,25 @@ type ACPV1Settings = {
     readonly mcpServers?: Record<string, unknown>;
     readonly isMcpToolCall?: (toolCall: ACPToolCall) => boolean;
     readonly auth?: ACPAuthenticationMode$1;
+    /**
+     * Resolves adapter-owned authentication on the host before any environment
+     * values are forwarded to the ACP implementation.
+     */
+    readonly resolveAuthenticationEnvironment?: (options: {
+        readonly auth: ACPAuthenticationMode$1 | undefined;
+        readonly env: Readonly<Record<string, string | undefined>>;
+    }) => Promise<Readonly<Record<string, string | undefined>>>;
     readonly source: ACPSource;
     readonly executable: string;
     readonly args?: ReadonlyArray<string>;
     readonly forwardEnv?: ReadonlyArray<string>;
     readonly credentialEnv?: ReadonlyArray<string>;
     readonly credentialBrokering?: ACPCredentialBrokering;
+    /**
+     * Materializes private authentication files below the ACP implementation's
+     * home directory before the implementation starts.
+     */
+    readonly authenticationFiles?: ACPAuthenticationFiles;
     /**
      * Customizes each credential value before it is forwarded into a sandbox
      * process. This does not restrict which credentials the harness adapter can
@@ -302,12 +327,14 @@ type ACPHarnessSettings<TBuiltinTools extends ToolSet = {}, TAskUserQuestions ex
     readonly version?: ACPV1Settings['version'];
     readonly harnessId: ACPV1Settings['harnessId'];
     readonly auth?: ACPAuthenticationMode;
+    readonly resolveAuthenticationEnvironment?: ACPV1Settings['resolveAuthenticationEnvironment'];
     readonly source: ACPV1Settings['source'];
     readonly executable: ACPV1Settings['executable'];
     readonly args?: ACPV1Settings['args'];
     readonly forwardEnv?: ACPV1Settings['forwardEnv'];
     readonly credentialEnv?: ACPV1Settings['credentialEnv'];
     readonly credentialBrokering?: ACPV1Settings['credentialBrokering'];
+    readonly authenticationFiles?: ACPV1Settings['authenticationFiles'];
     /**
      * Customizes each credential value before it is forwarded into a sandbox
      * process. This does not restrict which credentials the harness adapter can
@@ -345,4 +372,4 @@ declare function createACP<TBuiltinTools extends ToolSet = {}, TAskUserQuestions
 
 declare const VERSION: string;
 
-export { type ACPAnnotations, type ACPAskUserQuestionsSettings, type ACPAudioContent, type ACPAuthentication, type ACPAuthenticationMode, type ACPBlobResourceContents, type ACPClientApp, type ACPContentBlock, type ACPCredentialBrokering, type ACPEmbeddedResource, type ACPHarnessSettings, type ACPHostToolMCPTransport, type ACPImageContent, type ACPInstallCommandSource, type ACPInstructionMapping, type ACPMetadata, type ACPModelMapping, type ACPNpmLockedSource, type ACPNpmSimpleSource, type ACPOutputSchemaMapping, type ACPPermissionModeMapping, type ACPPermissionModeTarget, type ACPProfileValue, type ACPProviderAuthentication, type ACPResourceLink, type ACPRole, type ACPSerializablePrimitive, type ACPSerializableValue, type ACPSource, type ACPTextContent, type ACPTextResourceContents, type ACPToolCall, type ACPToolCallContent, type ACPToolCallLocation, type ACPToolCallStatus, type ACPToolKind, type ACPV1Settings, type ACPValueSource, VERSION, createACP };
+export { type ACPAnnotations, type ACPAskUserQuestionsSettings, type ACPAudioContent, type ACPAuthentication, type ACPAuthenticationFile, type ACPAuthenticationFiles, type ACPAuthenticationMode, type ACPBlobResourceContents, type ACPClientApp, type ACPContentBlock, type ACPCredentialBrokering, type ACPEmbeddedResource, type ACPHarnessSettings, type ACPHostToolMCPTransport, type ACPImageContent, type ACPInstallCommandSource, type ACPInstructionMapping, type ACPMetadata, type ACPModelMapping, type ACPNpmLockedSource, type ACPNpmSimpleSource, type ACPOutputSchemaMapping, type ACPPermissionModeMapping, type ACPPermissionModeTarget, type ACPProfileValue, type ACPProviderAuthentication, type ACPResourceLink, type ACPRole, type ACPSerializablePrimitive, type ACPSerializableValue, type ACPSource, type ACPTextContent, type ACPTextResourceContents, type ACPToolCall, type ACPToolCallContent, type ACPToolCallLocation, type ACPToolCallStatus, type ACPToolKind, type ACPV1Settings, type ACPValueSource, VERSION, createACP };

package/dist/index.js

@@ -1239,14 +1239,17 @@ function createACPV1({
       }
       const permissionMode = startOptions.permissionMode ?? "allow-all";
       const env = { ...process.env };
-      const authenticationEnvironment = resolveACPAuthenticationEnvironment({
+      const authenticationEnvironment = settings.resolveAuthenticationEnvironment == null ? resolveACPAuthenticationEnvironment({
+        auth: settings.auth,
+        env
+      }) : await settings.resolveAuthenticationEnvironment({
         auth: settings.auth,
         env
       });
       const providerAuthenticationCompatibility = resolveACPProviderAuthenticationCompatibility({
         auth: settings.auth,
         providerAuthentication: settings.providerAuthentication,
-        env
+        env: authenticationEnvironment
       });
       const implementationIdentity = createImplementationIdentity({
         harnessId: settings.harnessId,
@@ -1268,7 +1271,7 @@ function createACPV1({
           providerAuthentication: settings.providerAuthentication,
           clientApp
         },
-        env,
+        env: authenticationEnvironment,
         compatibility: providerAuthenticationCompatibility
       });
       const sandboxSession = startOptions.sandboxSession;
@@ -1307,7 +1310,7 @@ function createACPV1({
       }
       const implementationEnvironment = resolveImplementationEnvironment({
         implementation,
-        env,
+        env: { ...env, ...authenticationEnvironment },
         credentialEnv: authenticationEnvironment
       });
       let sandboxImplementationEnvironment = implementationEnvironment;
@@ -1579,6 +1582,16 @@ function createACPV1({
           ]
         });
       }
+      await writeACPAuthenticationFiles({
+        sandbox: toolSafeSandboxSession,
+        homePath: implementationHomeDir,
+        files: settings.authenticationFiles?.({
+          env: implementationEnvironment,
+          sandboxEnv: forwardedImplementationEnvironment,
+          credentialBrokeringAvailable: sandboxCredentialEnvironment != null
+        }) ?? [],
+        abortSignal: startOptions.abortSignal
+      });
       const port = resolveBridgePort({
         sandboxSession,
         override: portOverride,
@@ -1751,6 +1764,38 @@ function createACPV1({
     }
   };
 }
+async function writeACPAuthenticationFiles({
+  sandbox,
+  homePath,
+  files,
+  abortSignal
+}) {
+  const targetPaths = files.map((file) => {
+    if (file.path.length === 0 || posix.isAbsolute(file.path) || file.path.split("/").some((segment) => segment === "..")) {
+      throw new Error(
+        `ACP authentication file path must be relative without traversal: ${JSON.stringify(file.path)}.`
+      );
+    }
+    return posix.join(homePath, file.path);
+  });
+  for (let index = 0; index < files.length; index++) {
+    await sandbox.writeTextFile({
+      path: targetPaths[index],
+      content: files[index].content,
+      abortSignal
+    });
+  }
+  if (targetPaths.length === 0) return;
+  const result = await sandbox.run({
+    command: `chmod 600 -- ${targetPaths.map(shellQuote).join(" ")}`,
+    abortSignal
+  });
+  if (result.exitCode !== 0) {
+    throw new Error(
+      `Failed to secure ACP authentication files (exit ${result.exitCode})${result.stderr ? `: ${result.stderr}` : ""}`
+    );
+  }
+}
 function resolveProviderEnvironment({
   resolvedProviderAuthentication,
   clientApp
@@ -2837,7 +2882,7 @@ function deserializeBridgeError({
 }
 
 // src/version.ts
-var VERSION = true ? "1.0.45" : "0.0.0-test";
+var VERSION = true ? "1.0.46" : "0.0.0-test";
 
 // src/acp-harness.ts
 var ACP_CLIENT_APP = {