@ai-sdk/harness 1.0.10 → 1.0.12

package/dist/index.d.ts

@@ -704,6 +704,21 @@ type HarnessV1ToolSpec = {
     readonly inputSchema?: JSONSchema7;
 };
 
+type HarnessV1BuiltinToolFiltering = {
+    mode: 'allow';
+    toolNames: string[];
+} | {
+    mode: 'deny';
+    toolNames: string[];
+};
+declare function isHarnessV1BuiltinToolIncluded(input: {
+    toolName: string;
+    toolFiltering: HarnessV1BuiltinToolFiltering | undefined;
+}): boolean;
+declare function getHarnessV1BuiltinToolFilteringDenialReason(input: {
+    toolName: string;
+}): string;
+
 /**
  * Options passed to `HarnessV1.doStart`.
  *
@@ -741,6 +756,12 @@ type HarnessV1StartOptions = {
      * the adapter.
      */
     readonly permissionMode?: HarnessV1PermissionMode;
+    /**
+     * Adapter-native built-in tools that should be available for this session.
+     * Custom host-executed tools are filtered by the framework before they reach
+     * the adapter.
+     */
+    readonly builtinToolFiltering?: HarnessV1BuiltinToolFiltering;
     /**
      * Signal that aborts startup. The adapter must propagate cancellation to
      * any spawned processes or network calls.
@@ -977,6 +998,16 @@ type HarnessV1<TBuiltinTools extends ToolSet = ToolSet> = {
      * only describes adapter-native tool approval support.
      */
     readonly supportsBuiltinToolApprovals?: boolean;
+    /**
+     * Whether the adapter can prevent its underlying runtime from seeing or
+     * calling inactive built-in tools for every tool in `builtinTools`.
+     *
+     * Adapters without native filtering can still support `activeTools` and
+     * `inactiveTools` for built-ins when `supportsBuiltinToolApprovals` is
+     * `true`: the framework routes inactive built-in tool calls through the
+     * approval path and auto-denies them before they execute.
+     */
+    readonly supportsBuiltinToolFiltering?: boolean;
     /**
      * Optional schema for the adapter-defined `data` payload returned by session
      * lifecycle methods. When present, the adapter promises that exported state
@@ -1179,6 +1210,13 @@ declare const harnessV1BridgePermissionModeSchema: z.ZodEnum<{
     "allow-reads": "allow-reads";
     "allow-edits": "allow-edits";
 }>;
+declare const harnessV1BridgeBuiltinToolFilteringSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    mode: z.ZodLiteral<"allow">;
+    toolNames: z.ZodArray<z.ZodString>;
+}, z.core.$strip>, z.ZodObject<{
+    mode: z.ZodLiteral<"deny">;
+    toolNames: z.ZodArray<z.ZodString>;
+}, z.core.$strip>]>;
 /**
  * Common fields of the inbound `start` message. Each adapter extends this with
  * its runtime-specific configuration (e.g. `thinking`/`continue` for Claude
@@ -1214,6 +1252,13 @@ declare const harnessV1BridgeStartBaseSchema: z.ZodObject<{
         "allow-reads": "allow-reads";
         "allow-edits": "allow-edits";
     }>>;
+    builtinToolFiltering: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        mode: z.ZodLiteral<"allow">;
+        toolNames: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        mode: z.ZodLiteral<"deny">;
+        toolNames: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>]>>;
 }, z.core.$strip>;
 /**
  * Sent the instant the bridge accepts an authenticated WS connection. The host
@@ -1533,4 +1578,4 @@ declare class HarnessCapabilityUnsupportedError extends HarnessError {
     static isInstance(error: unknown): error is HarnessCapabilityUnsupportedError;
 }
 
-export { HARNESS_V1_BUILTIN_TOOLS, HARNESS_V1_BUILTIN_TOOL_NAMES, HarnessCapabilityUnsupportedError, HarnessError, type HarnessV1, type HarnessV1Bootstrap, type HarnessV1BootstrapCommand, type HarnessV1BootstrapFile, type HarnessV1BridgeDebugEvent, type HarnessV1BridgeOutboundMessage, type HarnessV1BridgeReady, type HarnessV1BridgeSandboxLog, type HarnessV1BridgeToolWire, type HarnessV1BuiltinTool, type HarnessV1BuiltinToolName, type HarnessV1BuiltinToolUseKind, type HarnessV1CallWarning, type HarnessV1ContinueTurnOptions, type HarnessV1ContinueTurnState, type HarnessV1DebugConfig, type HarnessV1DebugLevel, type HarnessV1Diagnostic, type HarnessV1LifecycleState, type HarnessV1Metadata, type HarnessV1NetworkPolicy, type HarnessV1NetworkSandboxSession, type HarnessV1Observability, type HarnessV1PendingToolApproval, type HarnessV1PermissionMode, type HarnessV1Prompt, type HarnessV1PromptControl, type HarnessV1PromptTurnOptions, type HarnessV1ResumeSessionState, type HarnessV1SandboxProvider, type HarnessV1Session, type HarnessV1Skill, type HarnessV1StartOptions, type HarnessV1StreamPart, type HarnessV1ToolSpec, commonTool, harnessV1BridgeAbortInboundSchema, harnessV1BridgeDebugEventSchema, harnessV1BridgeDetachInboundSchema, harnessV1BridgeDetachSchema, harnessV1BridgeHelloSchema, harnessV1BridgeInboundCommandSchemas, harnessV1BridgeOutboundMessageSchema, harnessV1BridgePermissionModeSchema, harnessV1BridgeReadySchema, harnessV1BridgeResumeInboundSchema, harnessV1BridgeSandboxLogSchema, harnessV1BridgeShutdownInboundSchema, harnessV1BridgeStartBaseSchema, harnessV1BridgeThreadSchema, harnessV1BridgeToolApprovalResponseInboundSchema, harnessV1BridgeToolResultInboundSchema, harnessV1BridgeToolWireSchema, harnessV1BridgeUserMessageInboundSchema, harnessV1DebugConfigSchema, harnessV1DebugLevelSchema, harnessV1DiagnosticFromBridgeFrame, harnessV1ErrorPartSchema, harnessV1FileChangePartSchema, harnessV1FinishPartSchema, harnessV1FinishStepPartSchema, harnessV1RawPartSchema, harnessV1ReasoningDeltaPartSchema, harnessV1ReasoningEndPartSchema, harnessV1ReasoningStartPartSchema, harnessV1StreamPartSchema, harnessV1StreamStartPartSchema, harnessV1TextDeltaPartSchema, harnessV1TextEndPartSchema, harnessV1TextStartPartSchema, harnessV1ToolApprovalRequestPartSchema, harnessV1ToolCallPartSchema, harnessV1ToolResultPartSchema };
+export { HARNESS_V1_BUILTIN_TOOLS, HARNESS_V1_BUILTIN_TOOL_NAMES, HarnessCapabilityUnsupportedError, HarnessError, type HarnessV1, type HarnessV1Bootstrap, type HarnessV1BootstrapCommand, type HarnessV1BootstrapFile, type HarnessV1BridgeDebugEvent, type HarnessV1BridgeOutboundMessage, type HarnessV1BridgeReady, type HarnessV1BridgeSandboxLog, type HarnessV1BridgeToolWire, type HarnessV1BuiltinTool, type HarnessV1BuiltinToolFiltering, type HarnessV1BuiltinToolName, type HarnessV1BuiltinToolUseKind, type HarnessV1CallWarning, type HarnessV1ContinueTurnOptions, type HarnessV1ContinueTurnState, type HarnessV1DebugConfig, type HarnessV1DebugLevel, type HarnessV1Diagnostic, type HarnessV1LifecycleState, type HarnessV1Metadata, type HarnessV1NetworkPolicy, type HarnessV1NetworkSandboxSession, type HarnessV1Observability, type HarnessV1PendingToolApproval, type HarnessV1PermissionMode, type HarnessV1Prompt, type HarnessV1PromptControl, type HarnessV1PromptTurnOptions, type HarnessV1ResumeSessionState, type HarnessV1SandboxProvider, type HarnessV1Session, type HarnessV1Skill, type HarnessV1StartOptions, type HarnessV1StreamPart, type HarnessV1ToolSpec, commonTool, getHarnessV1BuiltinToolFilteringDenialReason, harnessV1BridgeAbortInboundSchema, harnessV1BridgeBuiltinToolFilteringSchema, harnessV1BridgeDebugEventSchema, harnessV1BridgeDetachInboundSchema, harnessV1BridgeDetachSchema, harnessV1BridgeHelloSchema, harnessV1BridgeInboundCommandSchemas, harnessV1BridgeOutboundMessageSchema, harnessV1BridgePermissionModeSchema, harnessV1BridgeReadySchema, harnessV1BridgeResumeInboundSchema, harnessV1BridgeSandboxLogSchema, harnessV1BridgeShutdownInboundSchema, harnessV1BridgeStartBaseSchema, harnessV1BridgeThreadSchema, harnessV1BridgeToolApprovalResponseInboundSchema, harnessV1BridgeToolResultInboundSchema, harnessV1BridgeToolWireSchema, harnessV1BridgeUserMessageInboundSchema, harnessV1DebugConfigSchema, harnessV1DebugLevelSchema, harnessV1DiagnosticFromBridgeFrame, harnessV1ErrorPartSchema, harnessV1FileChangePartSchema, harnessV1FinishPartSchema, harnessV1FinishStepPartSchema, harnessV1RawPartSchema, harnessV1ReasoningDeltaPartSchema, harnessV1ReasoningEndPartSchema, harnessV1ReasoningStartPartSchema, harnessV1StreamPartSchema, harnessV1StreamStartPartSchema, harnessV1TextDeltaPartSchema, harnessV1TextEndPartSchema, harnessV1TextStartPartSchema, harnessV1ToolApprovalRequestPartSchema, harnessV1ToolCallPartSchema, harnessV1ToolResultPartSchema, isHarnessV1BuiltinToolIncluded };

package/dist/index.js

@@ -265,13 +265,27 @@ var harnessV1BridgePermissionModeSchema = z4.enum([
   "allow-edits",
   "allow-all"
 ]);
+var harnessV1BridgeBuiltinToolFilteringSchema = z4.discriminatedUnion(
+  "mode",
+  [
+    z4.object({
+      mode: z4.literal("allow"),
+      toolNames: z4.array(z4.string())
+    }),
+    z4.object({
+      mode: z4.literal("deny"),
+      toolNames: z4.array(z4.string())
+    })
+  ]
+);
 var harnessV1BridgeStartBaseSchema = z4.object({
   type: z4.literal("start"),
   prompt: z4.string(),
   tools: z4.array(harnessV1BridgeToolWireSchema).optional(),
   model: z4.string().optional(),
   debug: harnessV1DebugConfigSchema.optional(),
-  permissionMode: harnessV1BridgePermissionModeSchema.optional()
+  permissionMode: harnessV1BridgePermissionModeSchema.optional(),
+  builtinToolFiltering: harnessV1BridgeBuiltinToolFilteringSchema.optional()
 });
 var harnessV1BridgeHelloSchema = z4.object({
   type: z4.literal("bridge-hello"),
@@ -397,6 +411,15 @@ var harnessV1BridgeReadySchema = z4.object({
   port: z4.number()
 });
 
+// src/v1/harness-v1-tool-filtering.ts
+function isHarnessV1BuiltinToolIncluded(input) {
+  if (input.toolFiltering == null) return true;
+  return input.toolFiltering.mode === "allow" ? input.toolFiltering.toolNames.includes(input.toolName) : !input.toolFiltering.toolNames.includes(input.toolName);
+}
+function getHarnessV1BuiltinToolFilteringDenialReason(input) {
+  return `Tool '${input.toolName}' is inactive due to the HarnessAgent tool filtering policy.`;
+}
+
 // src/errors/harness-error.ts
 import { AISDKError } from "@ai-sdk/provider";
 var name = "AI_HarnessError";
@@ -440,7 +463,9 @@ export {
   HarnessCapabilityUnsupportedError,
   HarnessError,
   commonTool,
+  getHarnessV1BuiltinToolFilteringDenialReason,
   harnessV1BridgeAbortInboundSchema,
+  harnessV1BridgeBuiltinToolFilteringSchema,
   harnessV1BridgeDebugEventSchema,
   harnessV1BridgeDetachInboundSchema,
   harnessV1BridgeDetachSchema,
@@ -476,6 +501,7 @@ export {
   harnessV1TextStartPartSchema,
   harnessV1ToolApprovalRequestPartSchema,
   harnessV1ToolCallPartSchema,
-  harnessV1ToolResultPartSchema
+  harnessV1ToolResultPartSchema,
+  isHarnessV1BuiltinToolIncluded
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/v1/harness-v1-builtin-tool.ts","../src/v1/harness-v1-stream-part.ts","../src/v1/harness-v1-bridge-protocol.ts","../src/v1/harness-v1-diagnostic.ts","../src/errors/harness-error.ts","../src/errors/harness-capability-unsupported-error.ts"],"sourcesContent":["import { tool, type FlexibleSchema, type Tool } from '@ai-sdk/provider-utils';\nimport { z } from 'zod/v4';\n\n/**\n * Cross-harness vocabulary of common built-in tool names with their baseline\n * input schemas. Adapters that declare a built-in with one of these\n * `commonName`s must accept (at least) every input the baseline schema\n * accepts. Extra optional fields are encouraged.\n *\n * Used both as runtime values (spread into `ToolSet`s for inspection) and as\n * a vocabulary source — `HarnessV1BuiltinToolName` is derived from its keys.\n */\nexport const HARNESS_V1_BUILTIN_TOOLS = {\n  read: tool({\n    description: 'Read file contents',\n    inputSchema: z.object({ file_path: z.string() }),\n    outputSchema: z.unknown(),\n  }),\n  write: tool({\n    description: 'Write content to a file',\n    inputSchema: z.object({ file_path: z.string(), content: z.string() }),\n    outputSchema: z.unknown(),\n  }),\n  edit: tool({\n    description: 'Edit a file by replacing text',\n    inputSchema: z.object({\n      file_path: z.string(),\n      old_string: z.string(),\n      new_string: z.string(),\n    }),\n    outputSchema: z.unknown(),\n  }),\n  bash: tool({\n    description: 'Execute a shell command',\n    inputSchema: z.object({ command: z.string() }),\n    outputSchema: z.unknown(),\n  }),\n  grep: tool({\n    description: 'Search file contents with regex',\n    inputSchema: z.object({ pattern: z.string() }),\n    outputSchema: z.unknown(),\n  }),\n  glob: tool({\n    description: 'Find files matching a glob pattern',\n    inputSchema: z.object({ pattern: z.string() }),\n    outputSchema: z.unknown(),\n  }),\n  webSearch: tool({\n    description: 'Search the web',\n    inputSchema: z.object({ query: z.string() }),\n    outputSchema: z.unknown(),\n  }),\n} as const;\n\nexport type HarnessV1BuiltinToolName = keyof typeof HARNESS_V1_BUILTIN_TOOLS;\n\nexport const HARNESS_V1_BUILTIN_TOOL_NAMES = Object.keys(\n  HARNESS_V1_BUILTIN_TOOLS,\n) as ReadonlyArray<HarnessV1BuiltinToolName>;\n\nexport type HarnessV1BuiltinToolUseKind = 'readonly' | 'edit' | 'bash';\n\n/**\n * A tool that the adapter's underlying runtime exposes natively. Extends the\n * AI SDK `Tool` shape with two optional harness-specific fields:\n *\n *  - `nativeName`: the name as the underlying runtime knows it. Required\n *    only when the tool's key in the harness's `builtinTools` is not the\n *    native name — i.e. when the tool maps to a `commonName` (e.g. key\n *    `'bash'` for Claude Code's native `'Bash'`). Tools without a common\n *    equivalent are keyed by their native name directly, so `nativeName`\n *    is redundant and omitted.\n *  - `commonName`: cross-harness label drawn from\n *    `HARNESS_V1_BUILTIN_TOOL_NAMES`. Set when the tool maps to a familiar\n *    capability; consumers use it to recognize, e.g., that Claude Code's\n *    `Bash` and Codex's `shell` are the same kind of tool.\n *\n * Always set both fields together via the `commonTool` helper, or neither\n * (declare the tool with the AI SDK's `tool()` directly).\n */\nexport type HarnessV1BuiltinTool<INPUT = unknown, OUTPUT = unknown> = Tool<\n  INPUT,\n  OUTPUT,\n  any\n> & {\n  readonly nativeName?: string;\n  readonly commonName?: HarnessV1BuiltinToolName;\n  readonly toolUseKind?: HarnessV1BuiltinToolUseKind;\n};\n\ntype InputOf<T> = T extends Tool<infer I, any, any> ? I : never;\n\ntype StandardInputOf<N extends HarnessV1BuiltinToolName> = InputOf<\n  (typeof HARNESS_V1_BUILTIN_TOOLS)[N]\n>;\n\n/*\n * Type-level superset check. If `TStandard` is assignable to `TAdapter`\n * (i.e. the adapter accepts every input the standard accepts), the return\n * type is `TOk`. Otherwise it's a tagged error tuple that surfaces a clear\n * TypeScript error at the call site.\n */\ntype SupersetCheck<TStandard, TAdapter, TOk> = TStandard extends TAdapter\n  ? TOk\n  : [\n      'ERROR: adapter input schema must be a superset of the standard schema',\n      { expected: TStandard; got: TAdapter },\n    ];\n\n/**\n * Declare a built-in tool that maps to a cross-harness common name. The\n * adapter's input schema must accept every input the standard schema for\n * `commonName` accepts. Extra optional fields are encouraged.\n *\n * If the schema is missing a field the standard requires (or has an\n * incompatible type), the return type collapses to a tagged error tuple,\n * which fails the surrounding `as const satisfies ToolSet` assignment and\n * surfaces a readable TypeScript error at the offending entry.\n */\nexport function commonTool<TName extends HarnessV1BuiltinToolName, TInput>(\n  commonName: TName,\n  opts: {\n    readonly nativeName: string;\n    readonly toolUseKind?: HarnessV1BuiltinToolUseKind;\n    readonly description?: string;\n    readonly inputSchema: FlexibleSchema<TInput>;\n  },\n): SupersetCheck<StandardInputOf<TName>, TInput, HarnessV1BuiltinTool<TInput>> {\n  return {\n    ...tool({\n      description: opts.description,\n      inputSchema: opts.inputSchema as FlexibleSchema<TInput>,\n    }),\n    nativeName: opts.nativeName,\n    commonName,\n    toolUseKind: opts.toolUseKind,\n  } as never;\n}\n","import type {\n  JSONValue,\n  LanguageModelV4FinishReason,\n  LanguageModelV4ToolApprovalRequest,\n  LanguageModelV4ToolCall,\n  LanguageModelV4ToolResult,\n  LanguageModelV4Usage,\n  SharedV4ProviderMetadata,\n} from '@ai-sdk/provider';\nimport { z } from 'zod/v4';\nimport type { HarnessV1CallWarning } from './harness-v1-call-warning';\nimport type { HarnessV1Metadata } from './harness-v1-metadata';\n\n/**\n * One event emitted by a harness adapter during a prompt turn.\n *\n * Mirrors `LanguageModelV4StreamPart` on the variants it shares so a\n * `HarnessAgent` can pipe events through to AI SDK consumers with minimal\n * translation. Primitive types from the V4 spec (`LanguageModelV4ToolCall`,\n * `LanguageModelV4ToolResult`, `LanguageModelV4ToolApprovalRequest`,\n * `LanguageModelV4Usage`, `LanguageModelV4FinishReason`) are reused\n * verbatim — type-compat tests assert this stays the case.\n *\n * The metadata field is named `harnessMetadata` (not `providerMetadata`)\n * because a harness is a peer to a provider, not a kind of provider. The\n * agent rebinds it when forwarding to AI SDK consumers.\n */\nexport type HarnessV1StreamPart =\n  | {\n      type: 'stream-start';\n      warnings?: ReadonlyArray<HarnessV1CallWarning>;\n      /**\n       * The model the runtime actually resolved to for this turn, when the\n       * adapter learns it at stream start (e.g. Claude Code's `init` message\n       * reports the resolved/default model). Surfaced into telemetry as\n       * `gen_ai.request.model`. Omitted when the adapter doesn't know it here.\n       */\n      modelId?: string;\n    }\n\n  // Text blocks\n  | { type: 'text-start'; id: string; harnessMetadata?: HarnessV1Metadata }\n  | {\n      type: 'text-delta';\n      id: string;\n      delta: string;\n      harnessMetadata?: HarnessV1Metadata;\n    }\n  | { type: 'text-end'; id: string; harnessMetadata?: HarnessV1Metadata }\n\n  // Reasoning blocks\n  | { type: 'reasoning-start'; id: string; harnessMetadata?: HarnessV1Metadata }\n  | {\n      type: 'reasoning-delta';\n      id: string;\n      delta: string;\n      harnessMetadata?: HarnessV1Metadata;\n    }\n  | { type: 'reasoning-end'; id: string; harnessMetadata?: HarnessV1Metadata }\n\n  // Tool calls, approvals, results — reuse V4 primitives.\n  //\n  // `nativeName` is the only harness-only extension on `tool-call`. It lets\n  // adapters surface the runtime's native name for a builtin when it differs\n  // from the wire `toolName` (e.g. `toolName: 'bash'`, `nativeName: 'Bash'`).\n  //\n  // Whether the call was executed by the underlying runtime (Claude Code's\n  // built-in `Bash`, Codex's `shell`) vs. needs host dispatch is signalled by\n  // the standard `providerExecuted` field on `LanguageModelV4ToolCall` —\n  // `true` for runtime-executed builtins, false/undefined for host tools.\n  | (LanguageModelV4ToolCall & {\n      nativeName?: string;\n    })\n  | LanguageModelV4ToolApprovalRequest\n  | LanguageModelV4ToolResult\n\n  // Step boundary inside a multi-step turn.\n  | {\n      type: 'finish-step';\n      finishReason: LanguageModelV4FinishReason;\n      usage: LanguageModelV4Usage;\n      harnessMetadata?: HarnessV1Metadata;\n    }\n\n  // Turn end.\n  | {\n      type: 'finish';\n      finishReason: LanguageModelV4FinishReason;\n      totalUsage: LanguageModelV4Usage;\n      harnessMetadata?: HarnessV1Metadata;\n    }\n\n  // Workspace file mutation that occurred through an opaque underlying\n  // mechanism (one with no visible `tool-call` carrying the same data, e.g.\n  // Codex's internal `apply_patch`). Emitted per changed path. Path-only by\n  // design — when the mutation goes through a visible tool call, the\n  // tool-call/tool-result pair already carries the information.\n  | {\n      type: 'file-change';\n      event: 'create' | 'modify' | 'delete';\n      path: string;\n      harnessMetadata?: HarnessV1Metadata;\n    }\n\n  // Context compaction performed by the underlying runtime (Claude Code's\n  // native compaction, Pi's summarization). Observation only — the runtime\n  // owns the compaction; the harness neither implements nor schedules it.\n  // Emitted once, on completion, since `summary`/`tokensAfter` only exist then.\n  | {\n      type: 'compaction';\n      trigger: 'manual' | 'auto';\n      summary: string;\n      tokensBefore?: number;\n      tokensAfter?: number;\n      harnessMetadata?: HarnessV1Metadata;\n    }\n\n  // Errors. Multiple may be emitted in a single turn.\n  | { type: 'error'; error: unknown }\n\n  // Adapter-specific passthrough. Consumers can opt in to receive these via\n  // `HarnessAgent` settings; otherwise they are dropped.\n  | { type: 'raw'; rawValue: unknown };\n\n/*\n * Runtime (Zod) encoding of `HarnessV1StreamPart`.\n *\n * `HarnessV1StreamPart` is a compile-time type built on `LanguageModelV4*`\n * types that ship no runtime validator. Bridge adapters receive these parts as\n * JSON across a trust boundary (the sandbox WebSocket), so they need a runtime\n * schema. These schemas ARE that encoding — one source of truth, kept from\n * diverging from the type by the `_assignable` guard below and the mutual\n * `toEqualTypeOf` assertion in `harness-v1-stream-part.test-d.ts`.\n *\n * Members are exported individually so `harness-v1-bridge-protocol.ts` can\n * compose them into the bridge outbound union alongside the transport frames.\n */\n\nconst harnessV1JsonValueSchema: z.ZodType<JSONValue> = z.lazy(() =>\n  z.union([\n    z.string(),\n    z.number(),\n    z.boolean(),\n    z.null(),\n    z.array(harnessV1JsonValueSchema),\n    z.record(z.string(), harnessV1JsonValueSchema),\n  ]),\n);\n\n/*\n * Tool-result values. The inferred type is the spec's `NonNullable<JSONValue>`\n * (matching `LanguageModelV4ToolResult`), but the runtime validator\n * deliberately also accepts `null`: adapters emit `result: <value> ?? null` for\n * tools that produced no output, and that `null` must survive the trust\n * boundary unchanged (it reaches consumers exactly as it did before this schema\n * existed, when a cast hid it). Leniency at runtime, strictness in the type.\n */\nconst harnessV1ToolResultValueSchema =\n  harnessV1JsonValueSchema as unknown as z.ZodType<NonNullable<JSONValue>>;\n\nconst harnessV1JsonObjectSchema = z.record(\n  z.string(),\n  harnessV1JsonValueSchema,\n) as unknown as z.ZodType<Record<string, JSONValue>>;\n\nconst harnessV1MetadataSchema = z.record(\n  z.string(),\n  z.record(z.string(), harnessV1JsonValueSchema),\n) as unknown as z.ZodType<HarnessV1Metadata>;\n\nconst harnessV1ProviderMetadataSchema = z.record(\n  z.string(),\n  z.record(z.string(), harnessV1JsonValueSchema),\n) as unknown as z.ZodType<SharedV4ProviderMetadata>;\n\nconst harnessV1CallWarningSchema = z.union([\n  z.object({\n    type: z.literal('unsupported-setting'),\n    setting: z.string(),\n    details: z.string().optional(),\n  }),\n  z.object({\n    type: z.literal('unsupported-tool'),\n    tool: z.string(),\n    details: z.string().optional(),\n  }),\n  z.object({ type: z.literal('other'), message: z.string() }),\n]) as z.ZodType<HarnessV1CallWarning>;\n\nconst harnessV1UsageSchema = z.object({\n  inputTokens: z.object({\n    total: z.number().optional(),\n    noCache: z.number().optional(),\n    cacheRead: z.number().optional(),\n    cacheWrite: z.number().optional(),\n  }),\n  outputTokens: z.object({\n    total: z.number().optional(),\n    text: z.number().optional(),\n    reasoning: z.number().optional(),\n  }),\n  raw: harnessV1JsonObjectSchema.optional(),\n}) as unknown as z.ZodType<LanguageModelV4Usage>;\n\nconst harnessV1FinishReasonSchema = z.object({\n  unified: z.enum([\n    'stop',\n    'length',\n    'content-filter',\n    'tool-calls',\n    'error',\n    'other',\n  ]),\n  raw: z.string().optional(),\n}) as unknown as z.ZodType<LanguageModelV4FinishReason>;\n\nexport const harnessV1StreamStartPartSchema = z.object({\n  type: z.literal('stream-start'),\n  warnings: z.array(harnessV1CallWarningSchema).readonly().optional(),\n  modelId: z.string().optional(),\n});\n\nexport const harnessV1TextStartPartSchema = z.object({\n  type: z.literal('text-start'),\n  id: z.string(),\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1TextDeltaPartSchema = z.object({\n  type: z.literal('text-delta'),\n  id: z.string(),\n  delta: z.string(),\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1TextEndPartSchema = z.object({\n  type: z.literal('text-end'),\n  id: z.string(),\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1ReasoningStartPartSchema = z.object({\n  type: z.literal('reasoning-start'),\n  id: z.string(),\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1ReasoningDeltaPartSchema = z.object({\n  type: z.literal('reasoning-delta'),\n  id: z.string(),\n  delta: z.string(),\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1ReasoningEndPartSchema = z.object({\n  type: z.literal('reasoning-end'),\n  id: z.string(),\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1ToolCallPartSchema = z.object({\n  type: z.literal('tool-call'),\n  toolCallId: z.string(),\n  toolName: z.string(),\n  input: z.string(),\n  providerExecuted: z.boolean().optional(),\n  dynamic: z.boolean().optional(),\n  providerMetadata: harnessV1ProviderMetadataSchema.optional(),\n  nativeName: z.string().optional(),\n});\n\nexport const harnessV1ToolApprovalRequestPartSchema = z.object({\n  type: z.literal('tool-approval-request'),\n  approvalId: z.string(),\n  toolCallId: z.string(),\n  providerMetadata: harnessV1ProviderMetadataSchema.optional(),\n});\n\nexport const harnessV1ToolResultPartSchema = z.object({\n  type: z.literal('tool-result'),\n  toolCallId: z.string(),\n  toolName: z.string(),\n  result: harnessV1ToolResultValueSchema,\n  isError: z.boolean().optional(),\n  preliminary: z.boolean().optional(),\n  dynamic: z.boolean().optional(),\n  providerMetadata: harnessV1ProviderMetadataSchema.optional(),\n});\n\nexport const harnessV1FinishStepPartSchema = z.object({\n  type: z.literal('finish-step'),\n  finishReason: harnessV1FinishReasonSchema,\n  usage: harnessV1UsageSchema,\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1FinishPartSchema = z.object({\n  type: z.literal('finish'),\n  finishReason: harnessV1FinishReasonSchema,\n  totalUsage: harnessV1UsageSchema,\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1FileChangePartSchema = z.object({\n  type: z.literal('file-change'),\n  event: z.enum(['create', 'modify', 'delete']),\n  path: z.string(),\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1CompactionPartSchema = z.object({\n  type: z.literal('compaction'),\n  trigger: z.enum(['manual', 'auto']),\n  summary: z.string(),\n  tokensBefore: z.number().optional(),\n  tokensAfter: z.number().optional(),\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1ErrorPartSchema = z.object({\n  type: z.literal('error'),\n  error: z.unknown(),\n});\n\nexport const harnessV1RawPartSchema = z.object({\n  type: z.literal('raw'),\n  rawValue: z.unknown(),\n});\n\n/**\n * Assembled discriminated union over every `HarnessV1StreamPart` variant. Left\n * un-annotated so it keeps its precise inferred type — the protocol layer\n * composes the individual member schemas, and the type test asserts the\n * inferred union equals `HarnessV1StreamPart`.\n */\nexport const harnessV1StreamPartSchema = z.discriminatedUnion('type', [\n  harnessV1StreamStartPartSchema,\n  harnessV1TextStartPartSchema,\n  harnessV1TextDeltaPartSchema,\n  harnessV1TextEndPartSchema,\n  harnessV1ReasoningStartPartSchema,\n  harnessV1ReasoningDeltaPartSchema,\n  harnessV1ReasoningEndPartSchema,\n  harnessV1ToolCallPartSchema,\n  harnessV1ToolApprovalRequestPartSchema,\n  harnessV1ToolResultPartSchema,\n  harnessV1FinishStepPartSchema,\n  harnessV1FinishPartSchema,\n  harnessV1FileChangePartSchema,\n  harnessV1CompactionPartSchema,\n  harnessV1ErrorPartSchema,\n  harnessV1RawPartSchema,\n]);\n\n/*\n * Fail-fast guard at the definition site: the schema's output must be\n * assignable to `HarnessV1StreamPart` (catches a schema variant inventing a\n * shape the type does not allow). The reverse direction — the type being a\n * subset of the schema — is covered by the `toEqualTypeOf` assertion in the\n * type test.\n */\nconst _assignable: z.ZodType<HarnessV1StreamPart> = harnessV1StreamPartSchema;\nvoid _assignable;\n","import { z } from 'zod/v4';\nimport {\n  harnessV1DebugConfigSchema,\n  harnessV1DebugLevelSchema,\n  type HarnessV1Diagnostic,\n} from './harness-v1-diagnostic';\nimport {\n  harnessV1CompactionPartSchema,\n  harnessV1ErrorPartSchema,\n  harnessV1FileChangePartSchema,\n  harnessV1FinishPartSchema,\n  harnessV1FinishStepPartSchema,\n  harnessV1RawPartSchema,\n  harnessV1ReasoningDeltaPartSchema,\n  harnessV1ReasoningEndPartSchema,\n  harnessV1ReasoningStartPartSchema,\n  harnessV1StreamStartPartSchema,\n  harnessV1TextDeltaPartSchema,\n  harnessV1TextEndPartSchema,\n  harnessV1TextStartPartSchema,\n  harnessV1ToolApprovalRequestPartSchema,\n  harnessV1ToolCallPartSchema,\n  harnessV1ToolResultPartSchema,\n} from './harness-v1-stream-part';\n\n/*\n * The bridge wire protocol shared by every bridge-backed harness adapter.\n *\n * This is the serialization of the host<->runtime contract for adapters that\n * run the agent runtime inside the sandbox and talk to the host over a\n * WebSocket. It exists ONLY because of that transport: untrusted JSON frames\n * crossing the sandbox boundary need runtime validation, the connection needs\n * a handshake, and the host drives turns with serialized commands. Every export\n * here is therefore prefixed `harnessV1Bridge…`.\n *\n * It has three tiers:\n *\n *  1. The OUTBOUND events — `HarnessV1StreamPart` re-expressed as Zod (imported\n *     member schemas from `harness-v1-stream-part.ts`), because the part type is\n *     compile-time only and the frames need runtime validation at the boundary.\n *  2. The transport/control frames that are NOT consumer events — `bridge-hello`\n *     (handshake), `bridge-detach` (resume payload), `bridge-thread` (a resume\n *     coordinate some runtimes announce). These ride the same socket.\n *  3. The INBOUND command vocabulary the host sends back: the shared commands\n *     live here; the per-adapter `start` payload extends\n *     `harnessV1BridgeStartBaseSchema` and assembles the final inbound union in\n *     the adapter package.\n *\n * Non-bridge adapters (e.g. Pi) do not use this layer at all — they have no\n * serialization boundary and target the universal `HarnessV1StreamPart` type\n * directly. That is the deliberate split: `harness-v1-stream-part.ts` is the\n * transport-agnostic event vocabulary; this file is the bridge transport.\n */\n\n/**\n * The subset of a host-defined tool that travels on the `start` message. The\n * runtime only needs the name, description, and JSON-Schema input to surface\n * the tool; `execute` stays on the host.\n */\nexport const harnessV1BridgeToolWireSchema = z.object({\n  name: z.string(),\n  description: z.string().optional(),\n  inputSchema: z.unknown().optional(),\n});\n\nexport type HarnessV1BridgeToolWire = z.infer<\n  typeof harnessV1BridgeToolWireSchema\n>;\n\nexport const harnessV1BridgePermissionModeSchema = z.enum([\n  'allow-reads',\n  'allow-edits',\n  'allow-all',\n]);\n\n/**\n * Common fields of the inbound `start` message. Each adapter extends this with\n * its runtime-specific configuration (e.g. `thinking`/`continue` for Claude\n * Code, `reasoningEffort`/`webSearch`/`skills`/`resumeThreadId` for Codex) and\n * assembles the final inbound union from the shared command members below.\n *\n * `debug` carries the general `HarnessV1DebugConfig` — diagnostics config is not\n * a bridge concept, it just happens to ride the `start` frame for bridge-backed\n * adapters.\n */\nexport const harnessV1BridgeStartBaseSchema = z.object({\n  type: z.literal('start'),\n  prompt: z.string(),\n  tools: z.array(harnessV1BridgeToolWireSchema).optional(),\n  model: z.string().optional(),\n  debug: harnessV1DebugConfigSchema.optional(),\n  permissionMode: harnessV1BridgePermissionModeSchema.optional(),\n});\n\n// --- Transport / control frames (outbound, not consumer events) ---\n\n/**\n * Sent the instant the bridge accepts an authenticated WS connection. The host\n * waits for it before sending `start`/`resume`, because some sandbox runtimes\n * complete the upstream WS handshake before the connection is wired through to\n * the bridge process — anything sent in that gap is dropped. Carries the\n * bridge's lifecycle `state` and highest emitted `seq` for reconnect.\n */\nexport const harnessV1BridgeHelloSchema = z.object({\n  type: z.literal('bridge-hello'),\n  state: z.string().optional(),\n  lastSeq: z.number().optional(),\n});\n\n/**\n * The bridge's reply to an inbound `detach`. Carries the adapter-specific\n * payload the host serializes into lifecycle state `data`.\n */\nexport const harnessV1BridgeDetachSchema = z.object({\n  type: z.literal('bridge-detach'),\n  data: z.unknown(),\n});\n\n/**\n * A resume coordinate the bridge proactively announces (e.g. Codex's thread id)\n * so the host can cache it for a later resume without waiting for `detach`.\n */\nexport const harnessV1BridgeThreadSchema = z.object({\n  type: z.literal('bridge-thread'),\n  threadId: z.string(),\n});\n\n// --- Diagnostics frames (outbound, not consumer events) ---\n\n/**\n * One captured console line from inside the sandbox. The bridge line-buffers\n * `process.stdout`/`process.stderr` and emits one of these per complete line.\n * Routed host-side to the diagnostics sink, never to the consumer stream.\n */\nexport const harnessV1BridgeSandboxLogSchema = z.object({\n  type: z.literal('sandbox-log'),\n  source: z.string(),\n  stream: z.enum(['stdout', 'stderr']),\n  line: z.string(),\n});\n\n/**\n * A structured diagnostic an adapter emits from inside the bridge via\n * `turn.bridgeLog(...)`. Gated by the session's debug level + subsystem filter.\n */\nexport const harnessV1BridgeDebugEventSchema = z.object({\n  type: z.literal('debug-event'),\n  level: harnessV1DebugLevelSchema,\n  subsystem: z.string(),\n  message: z.string(),\n  attrs: z.record(z.string(), z.unknown()).optional(),\n  error: z\n    .object({\n      name: z.string().optional(),\n      message: z.string(),\n      stack: z.string().optional(),\n    })\n    .optional(),\n});\n\n/**\n * Every frame a bridge can send to the host: the stream-part events plus the\n * transport/control frames. This is the schema the host `SandboxChannel`\n * validates inbound frames against.\n */\nexport const harnessV1BridgeOutboundMessageSchema = z.discriminatedUnion(\n  'type',\n  [\n    harnessV1StreamStartPartSchema,\n    harnessV1TextStartPartSchema,\n    harnessV1TextDeltaPartSchema,\n    harnessV1TextEndPartSchema,\n    harnessV1ReasoningStartPartSchema,\n    harnessV1ReasoningDeltaPartSchema,\n    harnessV1ReasoningEndPartSchema,\n    harnessV1ToolCallPartSchema,\n    harnessV1ToolApprovalRequestPartSchema,\n    harnessV1ToolResultPartSchema,\n    harnessV1FinishStepPartSchema,\n    harnessV1FinishPartSchema,\n    harnessV1FileChangePartSchema,\n    harnessV1CompactionPartSchema,\n    harnessV1ErrorPartSchema,\n    harnessV1RawPartSchema,\n    harnessV1BridgeHelloSchema,\n    harnessV1BridgeDetachSchema,\n    harnessV1BridgeThreadSchema,\n    harnessV1BridgeSandboxLogSchema,\n    harnessV1BridgeDebugEventSchema,\n  ],\n);\n\nexport type HarnessV1BridgeOutboundMessage = z.infer<\n  typeof harnessV1BridgeOutboundMessageSchema\n>;\n\nexport type HarnessV1BridgeSandboxLog = z.infer<\n  typeof harnessV1BridgeSandboxLogSchema\n>;\n\nexport type HarnessV1BridgeDebugEvent = z.infer<\n  typeof harnessV1BridgeDebugEventSchema\n>;\n\n/**\n * Normalize a bridge diagnostics wire frame into the transport-agnostic\n * `HarnessV1Diagnostic` an adapter reports to the framework. A captured console\n * line maps `stderr` → `warn` and `stdout` → `info`; a structured event passes\n * its fields through. This is the seam where the bridge's serialization is\n * lifted into the general emission shape every harness shares.\n */\nexport function harnessV1DiagnosticFromBridgeFrame(\n  frame: HarnessV1BridgeSandboxLog | HarnessV1BridgeDebugEvent,\n  context: { sessionId?: string; timestamp: number },\n): HarnessV1Diagnostic {\n  if (frame.type === 'sandbox-log') {\n    return {\n      level: frame.stream === 'stderr' ? 'warn' : 'info',\n      message: frame.line,\n      subsystem: `sandbox.log.${frame.source}`,\n      kind: 'log',\n      source: frame.source,\n      stream: frame.stream,\n      sessionId: context.sessionId,\n      timestamp: context.timestamp,\n    };\n  }\n  return {\n    level: frame.level,\n    message: frame.message,\n    subsystem: frame.subsystem,\n    kind: 'event',\n    attrs: frame.attrs,\n    error: frame.error,\n    sessionId: context.sessionId,\n    timestamp: context.timestamp,\n  };\n}\n\n// --- Shared inbound command members (host -> bridge) ---\n\nexport const harnessV1BridgeToolResultInboundSchema = z.object({\n  type: z.literal('tool-result'),\n  toolCallId: z.string(),\n  output: z.unknown(),\n  isError: z.boolean().optional(),\n});\n\nexport const harnessV1BridgeToolApprovalResponseInboundSchema = z.object({\n  type: z.literal('tool-approval-response'),\n  approvalId: z.string(),\n  approved: z.boolean(),\n  reason: z.string().optional(),\n});\n\nexport const harnessV1BridgeUserMessageInboundSchema = z.object({\n  type: z.literal('user-message'),\n  text: z.string(),\n});\n\nexport const harnessV1BridgeAbortInboundSchema = z.object({\n  type: z.literal('abort'),\n});\n\nexport const harnessV1BridgeShutdownInboundSchema = z.object({\n  type: z.literal('shutdown'),\n});\n\n/**\n * Reconnect: after re-establishing the socket the host asks the bridge to\n * replay every buffered event with `seq > lastSeenEventId`.\n */\nexport const harnessV1BridgeResumeInboundSchema = z.object({\n  type: z.literal('resume'),\n  lastSeenEventId: z.number(),\n});\n\n/**\n * The bridge replies with `bridge-detach` carrying any cached resume payload,\n * then exits.\n */\nexport const harnessV1BridgeDetachInboundSchema = z.object({\n  type: z.literal('detach'),\n});\n\n/**\n * The inbound command members shared by every bridge adapter. Spread these\n * alongside the adapter's own `start` schema to build the final inbound union:\n * `z.discriminatedUnion('type', [adapterStartSchema, ...harnessV1BridgeInboundCommandSchemas])`.\n */\nexport const harnessV1BridgeInboundCommandSchemas = [\n  harnessV1BridgeToolResultInboundSchema,\n  harnessV1BridgeToolApprovalResponseInboundSchema,\n  harnessV1BridgeUserMessageInboundSchema,\n  harnessV1BridgeAbortInboundSchema,\n  harnessV1BridgeShutdownInboundSchema,\n  harnessV1BridgeResumeInboundSchema,\n  harnessV1BridgeDetachInboundSchema,\n] as const;\n\n/**\n * The JSON line the bridge writes to stdout once its WebSocket server is bound,\n * announcing the port the host should connect to.\n */\nexport const harnessV1BridgeReadySchema = z.object({\n  type: z.literal('bridge-ready'),\n  port: z.number(),\n});\n\nexport type HarnessV1BridgeReady = z.infer<typeof harnessV1BridgeReadySchema>;\n","import { z } from 'zod/v4';\n\n/*\n * Diagnostics EMISSION contract — part of the `HarnessV1` spec.\n *\n * These are the types a harness adapter produces and receives: an adapter\n * reports a `HarnessV1Diagnostic` to the framework (a bridge adapter normalizes\n * its wire frames into one; a non-bridge adapter constructs one directly), and\n * receives a `HarnessV1DebugConfig` to gate what it emits. They are distinct\n * from the unaffixed host-facing `HarnessDiagnostic` / `HarnessDebugConfig`\n * (the external/telemetry surface) — the framework maps between the two at the\n * boundary, so the emission and consumption surfaces can evolve independently.\n */\n\n/** Severity of a diagnostic, ordered most → least severe. */\nexport const harnessV1DebugLevelSchema = z.enum([\n  'error',\n  'warn',\n  'info',\n  'debug',\n  'trace',\n]);\n\nexport type HarnessV1DebugLevel = z.infer<typeof harnessV1DebugLevelSchema>;\n\n/**\n * Per-session diagnostics configuration the framework hands an adapter (and the\n * host sends on `start.debug`). When absent or `enabled` is false the adapter\n * captures and emits nothing. `subsystems` filters structured events by dotted\n * prefix; console capture is independent of the subsystem filter.\n */\nexport const harnessV1DebugConfigSchema = z.object({\n  enabled: z.boolean().optional(),\n  level: harnessV1DebugLevelSchema.optional(),\n  subsystems: z.array(z.string()).optional(),\n});\n\nexport type HarnessV1DebugConfig = z.infer<typeof harnessV1DebugConfigSchema>;\n\n/**\n * A diagnostic as emitted by a harness adapter. Structurally identical to the\n * host-facing `HarnessDiagnostic` today, but kept separate: this is the spec's\n * emission shape, that is the external consumption shape.\n */\nexport type HarnessV1Diagnostic = {\n  /** Severity. */\n  readonly level: HarnessV1DebugLevel;\n  /** Human-readable line (console capture) or message (structured event). */\n  readonly message: string;\n  /** Dotted subsystem (`sandbox.log.<source>` for console capture). */\n  readonly subsystem: string;\n  /** `'log'` = captured console line; `'event'` = structured emission. */\n  readonly kind: 'log' | 'event';\n  /** Originating source label (console capture). */\n  readonly source?: string;\n  /** Which standard stream the line came from (console capture). */\n  readonly stream?: 'stdout' | 'stderr';\n  /** Structured attributes (structured events only). */\n  readonly attrs?: Record<string, unknown>;\n  /** Error payload (structured events only). */\n  readonly error?: { name?: string; message: string; stack?: string };\n  /** The harness session this diagnostic originated from. */\n  readonly sessionId?: string;\n  /** Emission time (epoch ms). */\n  readonly timestamp: number;\n};\n","import { AISDKError } from '@ai-sdk/provider';\n\nconst name = 'AI_HarnessError';\nconst marker = `vercel.ai.error.${name}`;\nconst symbol = Symbol.for(marker);\n\n/**\n * Base error type for failures originating in or signalled by a harness\n * adapter. Specific failure modes (e.g. unsupported capability) extend this\n * class.\n */\nexport class HarnessError extends AISDKError {\n  private readonly [symbol] = true;\n\n  constructor({ message, cause }: { message: string; cause?: unknown }) {\n    super({ name, message, cause });\n  }\n\n  static isInstance(error: unknown): error is HarnessError {\n    return AISDKError.hasMarker(error, marker);\n  }\n}\n","import { AISDKError } from '@ai-sdk/provider';\nimport { HarnessError } from './harness-error';\n\nconst name = 'AI_HarnessCapabilityUnsupportedError';\nconst marker = `vercel.ai.error.${name}`;\nconst symbol = Symbol.for(marker);\n\n/**\n * Thrown when a caller asks the harness to do something the adapter (or the\n * supplied sandbox) does not support, e.g. requesting manual compaction from\n * an adapter that only auto-compacts, or invoking `getPortUrl` on a sandbox\n * that does not expose one.\n *\n * The caller supplies the full human-readable message. Optional `harnessId`\n * is recorded as structured context for tooling.\n */\nexport class HarnessCapabilityUnsupportedError extends HarnessError {\n  private readonly [symbol] = true;\n\n  readonly harnessId?: string;\n\n  constructor({\n    message,\n    harnessId,\n    cause,\n  }: {\n    message: string;\n    harnessId?: string;\n    cause?: unknown;\n  }) {\n    super({ message, cause });\n    Object.defineProperty(this, 'name', { value: name });\n    this.harnessId = harnessId;\n  }\n\n  static isInstance(\n    error: unknown,\n  ): error is HarnessCapabilityUnsupportedError {\n    return AISDKError.hasMarker(error, marker);\n  }\n}\n"],"mappings":";AAAA,SAAS,YAA4C;AACrD,SAAS,SAAS;AAWX,IAAM,2BAA2B;AAAA,EACtC,MAAM,KAAK;AAAA,IACT,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAAA,IAC/C,cAAc,EAAE,QAAQ;AAAA,EAC1B,CAAC;AAAA,EACD,OAAO,KAAK;AAAA,IACV,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC;AAAA,IACpE,cAAc,EAAE,QAAQ;AAAA,EAC1B,CAAC;AAAA,EACD,MAAM,KAAK;AAAA,IACT,aAAa;AAAA,IACb,aAAa,EAAE,OAAO;AAAA,MACpB,WAAW,EAAE,OAAO;AAAA,MACpB,YAAY,EAAE,OAAO;AAAA,MACrB,YAAY,EAAE,OAAO;AAAA,IACvB,CAAC;AAAA,IACD,cAAc,EAAE,QAAQ;AAAA,EAC1B,CAAC;AAAA,EACD,MAAM,KAAK;AAAA,IACT,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAAA,IAC7C,cAAc,EAAE,QAAQ;AAAA,EAC1B,CAAC;AAAA,EACD,MAAM,KAAK;AAAA,IACT,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAAA,IAC7C,cAAc,EAAE,QAAQ;AAAA,EAC1B,CAAC;AAAA,EACD,MAAM,KAAK;AAAA,IACT,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAAA,IAC7C,cAAc,EAAE,QAAQ;AAAA,EAC1B,CAAC;AAAA,EACD,WAAW,KAAK;AAAA,IACd,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,IAC3C,cAAc,EAAE,QAAQ;AAAA,EAC1B,CAAC;AACH;AAIO,IAAM,gCAAgC,OAAO;AAAA,EAClD;AACF;AA6DO,SAAS,WACd,YACA,MAM6E;AAC7E,SAAO;AAAA,IACL,GAAG,KAAK;AAAA,MACN,aAAa,KAAK;AAAA,MAClB,aAAa,KAAK;AAAA,IACpB,CAAC;AAAA,IACD,YAAY,KAAK;AAAA,IACjB;AAAA,IACA,aAAa,KAAK;AAAA,EACpB;AACF;;;AChIA,SAAS,KAAAA,UAAS;AAiIlB,IAAM,2BAAiDA,GAAE;AAAA,EAAK,MAC5DA,GAAE,MAAM;AAAA,IACNA,GAAE,OAAO;AAAA,IACTA,GAAE,OAAO;AAAA,IACTA,GAAE,QAAQ;AAAA,IACVA,GAAE,KAAK;AAAA,IACPA,GAAE,MAAM,wBAAwB;AAAA,IAChCA,GAAE,OAAOA,GAAE,OAAO,GAAG,wBAAwB;AAAA,EAC/C,CAAC;AACH;AAUA,IAAM,iCACJ;AAEF,IAAM,4BAA4BA,GAAE;AAAA,EAClCA,GAAE,OAAO;AAAA,EACT;AACF;AAEA,IAAM,0BAA0BA,GAAE;AAAA,EAChCA,GAAE,OAAO;AAAA,EACTA,GAAE,OAAOA,GAAE,OAAO,GAAG,wBAAwB;AAC/C;AAEA,IAAM,kCAAkCA,GAAE;AAAA,EACxCA,GAAE,OAAO;AAAA,EACTA,GAAE,OAAOA,GAAE,OAAO,GAAG,wBAAwB;AAC/C;AAEA,IAAM,6BAA6BA,GAAE,MAAM;AAAA,EACzCA,GAAE,OAAO;AAAA,IACP,MAAMA,GAAE,QAAQ,qBAAqB;AAAA,IACrC,SAASA,GAAE,OAAO;AAAA,IAClB,SAASA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,CAAC;AAAA,EACDA,GAAE,OAAO;AAAA,IACP,MAAMA,GAAE,QAAQ,kBAAkB;AAAA,IAClC,MAAMA,GAAE,OAAO;AAAA,IACf,SAASA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,CAAC;AAAA,EACDA,GAAE,OAAO,EAAE,MAAMA,GAAE,QAAQ,OAAO,GAAG,SAASA,GAAE,OAAO,EAAE,CAAC;AAC5D,CAAC;AAED,IAAM,uBAAuBA,GAAE,OAAO;AAAA,EACpC,aAAaA,GAAE,OAAO;AAAA,IACpB,OAAOA,GAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,SAASA,GAAE,OAAO,EAAE,SAAS;AAAA,IAC7B,WAAWA,GAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,YAAYA,GAAE,OAAO,EAAE,SAAS;AAAA,EAClC,CAAC;AAAA,EACD,cAAcA,GAAE,OAAO;AAAA,IACrB,OAAOA,GAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,MAAMA,GAAE,OAAO,EAAE,SAAS;AAAA,IAC1B,WAAWA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC;AAAA,EACD,KAAK,0BAA0B,SAAS;AAC1C,CAAC;AAED,IAAM,8BAA8BA,GAAE,OAAO;AAAA,EAC3C,SAASA,GAAE,KAAK;AAAA,IACd;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACD,KAAKA,GAAE,OAAO,EAAE,SAAS;AAC3B,CAAC;AAEM,IAAM,iCAAiCA,GAAE,OAAO;AAAA,EACrD,MAAMA,GAAE,QAAQ,cAAc;AAAA,EAC9B,UAAUA,GAAE,MAAM,0BAA0B,EAAE,SAAS,EAAE,SAAS;AAAA,EAClE,SAASA,GAAE,OAAO,EAAE,SAAS;AAC/B,CAAC;AAEM,IAAM,+BAA+BA,GAAE,OAAO;AAAA,EACnD,MAAMA,GAAE,QAAQ,YAAY;AAAA,EAC5B,IAAIA,GAAE,OAAO;AAAA,EACb,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,+BAA+BA,GAAE,OAAO;AAAA,EACnD,MAAMA,GAAE,QAAQ,YAAY;AAAA,EAC5B,IAAIA,GAAE,OAAO;AAAA,EACb,OAAOA,GAAE,OAAO;AAAA,EAChB,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,6BAA6BA,GAAE,OAAO;AAAA,EACjD,MAAMA,GAAE,QAAQ,UAAU;AAAA,EAC1B,IAAIA,GAAE,OAAO;AAAA,EACb,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,oCAAoCA,GAAE,OAAO;AAAA,EACxD,MAAMA,GAAE,QAAQ,iBAAiB;AAAA,EACjC,IAAIA,GAAE,OAAO;AAAA,EACb,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,oCAAoCA,GAAE,OAAO;AAAA,EACxD,MAAMA,GAAE,QAAQ,iBAAiB;AAAA,EACjC,IAAIA,GAAE,OAAO;AAAA,EACb,OAAOA,GAAE,OAAO;AAAA,EAChB,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,kCAAkCA,GAAE,OAAO;AAAA,EACtD,MAAMA,GAAE,QAAQ,eAAe;AAAA,EAC/B,IAAIA,GAAE,OAAO;AAAA,EACb,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,8BAA8BA,GAAE,OAAO;AAAA,EAClD,MAAMA,GAAE,QAAQ,WAAW;AAAA,EAC3B,YAAYA,GAAE,OAAO;AAAA,EACrB,UAAUA,GAAE,OAAO;AAAA,EACnB,OAAOA,GAAE,OAAO;AAAA,EAChB,kBAAkBA,GAAE,QAAQ,EAAE,SAAS;AAAA,EACvC,SAASA,GAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,kBAAkB,gCAAgC,SAAS;AAAA,EAC3D,YAAYA,GAAE,OAAO,EAAE,SAAS;AAClC,CAAC;AAEM,IAAM,yCAAyCA,GAAE,OAAO;AAAA,EAC7D,MAAMA,GAAE,QAAQ,uBAAuB;AAAA,EACvC,YAAYA,GAAE,OAAO;AAAA,EACrB,YAAYA,GAAE,OAAO;AAAA,EACrB,kBAAkB,gCAAgC,SAAS;AAC7D,CAAC;AAEM,IAAM,gCAAgCA,GAAE,OAAO;AAAA,EACpD,MAAMA,GAAE,QAAQ,aAAa;AAAA,EAC7B,YAAYA,GAAE,OAAO;AAAA,EACrB,UAAUA,GAAE,OAAO;AAAA,EACnB,QAAQ;AAAA,EACR,SAASA,GAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,aAAaA,GAAE,QAAQ,EAAE,SAAS;AAAA,EAClC,SAASA,GAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,kBAAkB,gCAAgC,SAAS;AAC7D,CAAC;AAEM,IAAM,gCAAgCA,GAAE,OAAO;AAAA,EACpD,MAAMA,GAAE,QAAQ,aAAa;AAAA,EAC7B,cAAc;AAAA,EACd,OAAO;AAAA,EACP,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,4BAA4BA,GAAE,OAAO;AAAA,EAChD,MAAMA,GAAE,QAAQ,QAAQ;AAAA,EACxB,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,gCAAgCA,GAAE,OAAO;AAAA,EACpD,MAAMA,GAAE,QAAQ,aAAa;AAAA,EAC7B,OAAOA,GAAE,KAAK,CAAC,UAAU,UAAU,QAAQ,CAAC;AAAA,EAC5C,MAAMA,GAAE,OAAO;AAAA,EACf,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,gCAAgCA,GAAE,OAAO;AAAA,EACpD,MAAMA,GAAE,QAAQ,YAAY;AAAA,EAC5B,SAASA,GAAE,KAAK,CAAC,UAAU,MAAM,CAAC;AAAA,EAClC,SAASA,GAAE,OAAO;AAAA,EAClB,cAAcA,GAAE,OAAO,EAAE,SAAS;AAAA,EAClC,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,2BAA2BA,GAAE,OAAO;AAAA,EAC/C,MAAMA,GAAE,QAAQ,OAAO;AAAA,EACvB,OAAOA,GAAE,QAAQ;AACnB,CAAC;AAEM,IAAM,yBAAyBA,GAAE,OAAO;AAAA,EAC7C,MAAMA,GAAE,QAAQ,KAAK;AAAA,EACrB,UAAUA,GAAE,QAAQ;AACtB,CAAC;AAQM,IAAM,4BAA4BA,GAAE,mBAAmB,QAAQ;AAAA,EACpE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;;;AChWD,SAAS,KAAAC,UAAS;;;ACAlB,SAAS,KAAAC,UAAS;AAeX,IAAM,4BAA4BA,GAAE,KAAK;AAAA,EAC9C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAUM,IAAM,6BAA6BA,GAAE,OAAO;AAAA,EACjD,SAASA,GAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,OAAO,0BAA0B,SAAS;AAAA,EAC1C,YAAYA,GAAE,MAAMA,GAAE,OAAO,CAAC,EAAE,SAAS;AAC3C,CAAC;;;ADwBM,IAAM,gCAAgCC,GAAE,OAAO;AAAA,EACpD,MAAMA,GAAE,OAAO;AAAA,EACf,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAaA,GAAE,QAAQ,EAAE,SAAS;AACpC,CAAC;AAMM,IAAM,sCAAsCA,GAAE,KAAK;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAYM,IAAM,iCAAiCA,GAAE,OAAO;AAAA,EACrD,MAAMA,GAAE,QAAQ,OAAO;AAAA,EACvB,QAAQA,GAAE,OAAO;AAAA,EACjB,OAAOA,GAAE,MAAM,6BAA6B,EAAE,SAAS;AAAA,EACvD,OAAOA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,OAAO,2BAA2B,SAAS;AAAA,EAC3C,gBAAgB,oCAAoC,SAAS;AAC/D,CAAC;AAWM,IAAM,6BAA6BA,GAAE,OAAO;AAAA,EACjD,MAAMA,GAAE,QAAQ,cAAc;AAAA,EAC9B,OAAOA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,SAASA,GAAE,OAAO,EAAE,SAAS;AAC/B,CAAC;AAMM,IAAM,8BAA8BA,GAAE,OAAO;AAAA,EAClD,MAAMA,GAAE,QAAQ,eAAe;AAAA,EAC/B,MAAMA,GAAE,QAAQ;AAClB,CAAC;AAMM,IAAM,8BAA8BA,GAAE,OAAO;AAAA,EAClD,MAAMA,GAAE,QAAQ,eAAe;AAAA,EAC/B,UAAUA,GAAE,OAAO;AACrB,CAAC;AASM,IAAM,kCAAkCA,GAAE,OAAO;AAAA,EACtD,MAAMA,GAAE,QAAQ,aAAa;AAAA,EAC7B,QAAQA,GAAE,OAAO;AAAA,EACjB,QAAQA,GAAE,KAAK,CAAC,UAAU,QAAQ,CAAC;AAAA,EACnC,MAAMA,GAAE,OAAO;AACjB,CAAC;AAMM,IAAM,kCAAkCA,GAAE,OAAO;AAAA,EACtD,MAAMA,GAAE,QAAQ,aAAa;AAAA,EAC7B,OAAO;AAAA,EACP,WAAWA,GAAE,OAAO;AAAA,EACpB,SAASA,GAAE,OAAO;AAAA,EAClB,OAAOA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAClD,OAAOA,GACJ,OAAO;AAAA,IACN,MAAMA,GAAE,OAAO,EAAE,SAAS;AAAA,IAC1B,SAASA,GAAE,OAAO;AAAA,IAClB,OAAOA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,CAAC,EACA,SAAS;AACd,CAAC;AAOM,IAAM,uCAAuCA,GAAE;AAAA,EACpD;AAAA,EACA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAqBO,SAAS,mCACd,OACA,SACqB;AACrB,MAAI,MAAM,SAAS,eAAe;AAChC,WAAO;AAAA,MACL,OAAO,MAAM,WAAW,WAAW,SAAS;AAAA,MAC5C,SAAS,MAAM;AAAA,MACf,WAAW,eAAe,MAAM,MAAM;AAAA,MACtC,MAAM;AAAA,MACN,QAAQ,MAAM;AAAA,MACd,QAAQ,MAAM;AAAA,MACd,WAAW,QAAQ;AAAA,MACnB,WAAW,QAAQ;AAAA,IACrB;AAAA,EACF;AACA,SAAO;AAAA,IACL,OAAO,MAAM;AAAA,IACb,SAAS,MAAM;AAAA,IACf,WAAW,MAAM;AAAA,IACjB,MAAM;AAAA,IACN,OAAO,MAAM;AAAA,IACb,OAAO,MAAM;AAAA,IACb,WAAW,QAAQ;AAAA,IACnB,WAAW,QAAQ;AAAA,EACrB;AACF;AAIO,IAAM,yCAAyCA,GAAE,OAAO;AAAA,EAC7D,MAAMA,GAAE,QAAQ,aAAa;AAAA,EAC7B,YAAYA,GAAE,OAAO;AAAA,EACrB,QAAQA,GAAE,QAAQ;AAAA,EAClB,SAASA,GAAE,QAAQ,EAAE,SAAS;AAChC,CAAC;AAEM,IAAM,mDAAmDA,GAAE,OAAO;AAAA,EACvE,MAAMA,GAAE,QAAQ,wBAAwB;AAAA,EACxC,YAAYA,GAAE,OAAO;AAAA,EACrB,UAAUA,GAAE,QAAQ;AAAA,EACpB,QAAQA,GAAE,OAAO,EAAE,SAAS;AAC9B,CAAC;AAEM,IAAM,0CAA0CA,GAAE,OAAO;AAAA,EAC9D,MAAMA,GAAE,QAAQ,cAAc;AAAA,EAC9B,MAAMA,GAAE,OAAO;AACjB,CAAC;AAEM,IAAM,oCAAoCA,GAAE,OAAO;AAAA,EACxD,MAAMA,GAAE,QAAQ,OAAO;AACzB,CAAC;AAEM,IAAM,uCAAuCA,GAAE,OAAO;AAAA,EAC3D,MAAMA,GAAE,QAAQ,UAAU;AAC5B,CAAC;AAMM,IAAM,qCAAqCA,GAAE,OAAO;AAAA,EACzD,MAAMA,GAAE,QAAQ,QAAQ;AAAA,EACxB,iBAAiBA,GAAE,OAAO;AAC5B,CAAC;AAMM,IAAM,qCAAqCA,GAAE,OAAO;AAAA,EACzD,MAAMA,GAAE,QAAQ,QAAQ;AAC1B,CAAC;AAOM,IAAM,uCAAuC;AAAA,EAClD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAMO,IAAM,6BAA6BA,GAAE,OAAO;AAAA,EACjD,MAAMA,GAAE,QAAQ,cAAc;AAAA,EAC9B,MAAMA,GAAE,OAAO;AACjB,CAAC;;;AEnTD,SAAS,kBAAkB;AAE3B,IAAM,OAAO;AACb,IAAM,SAAS,mBAAmB,IAAI;AACtC,IAAM,SAAS,OAAO,IAAI,MAAM;AAJhC;AAWO,IAAM,eAAN,eAA2B,iBACd,aADc,IAAW;AAAA,EAG3C,YAAY,EAAE,SAAS,MAAM,GAAyC;AACpE,UAAM,EAAE,MAAM,SAAS,MAAM,CAAC;AAHhC,SAAkB,MAAU;AAAA,EAI5B;AAAA,EAEA,OAAO,WAAW,OAAuC;AACvD,WAAO,WAAW,UAAU,OAAO,MAAM;AAAA,EAC3C;AACF;;;ACrBA,SAAS,cAAAC,mBAAkB;AAG3B,IAAMC,QAAO;AACb,IAAMC,UAAS,mBAAmBD,KAAI;AACtC,IAAME,UAAS,OAAO,IAAID,OAAM;AALhC,IAAAE,KAAAC;AAgBO,IAAM,oCAAN,eAAgDA,MAAA,cACnCD,MAAAD,SADmCE,KAAa;AAAA,EAKlE,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIG;AACD,UAAM,EAAE,SAAS,MAAM,CAAC;AAb1B,SAAkBD,OAAU;AAc1B,WAAO,eAAe,MAAM,QAAQ,EAAE,OAAOH,MAAK,CAAC;AACnD,SAAK,YAAY;AAAA,EACnB;AAAA,EAEA,OAAO,WACL,OAC4C;AAC5C,WAAOK,YAAW,UAAU,OAAOJ,OAAM;AAAA,EAC3C;AACF;","names":["z","z","z","z","AISDKError","name","marker","symbol","_a","_b","AISDKError"]}
+{"version":3,"sources":["../src/v1/harness-v1-builtin-tool.ts","../src/v1/harness-v1-stream-part.ts","../src/v1/harness-v1-bridge-protocol.ts","../src/v1/harness-v1-diagnostic.ts","../src/v1/harness-v1-tool-filtering.ts","../src/errors/harness-error.ts","../src/errors/harness-capability-unsupported-error.ts"],"sourcesContent":["import { tool, type FlexibleSchema, type Tool } from '@ai-sdk/provider-utils';\nimport { z } from 'zod/v4';\n\n/**\n * Cross-harness vocabulary of common built-in tool names with their baseline\n * input schemas. Adapters that declare a built-in with one of these\n * `commonName`s must accept (at least) every input the baseline schema\n * accepts. Extra optional fields are encouraged.\n *\n * Used both as runtime values (spread into `ToolSet`s for inspection) and as\n * a vocabulary source — `HarnessV1BuiltinToolName` is derived from its keys.\n */\nexport const HARNESS_V1_BUILTIN_TOOLS = {\n  read: tool({\n    description: 'Read file contents',\n    inputSchema: z.object({ file_path: z.string() }),\n    outputSchema: z.unknown(),\n  }),\n  write: tool({\n    description: 'Write content to a file',\n    inputSchema: z.object({ file_path: z.string(), content: z.string() }),\n    outputSchema: z.unknown(),\n  }),\n  edit: tool({\n    description: 'Edit a file by replacing text',\n    inputSchema: z.object({\n      file_path: z.string(),\n      old_string: z.string(),\n      new_string: z.string(),\n    }),\n    outputSchema: z.unknown(),\n  }),\n  bash: tool({\n    description: 'Execute a shell command',\n    inputSchema: z.object({ command: z.string() }),\n    outputSchema: z.unknown(),\n  }),\n  grep: tool({\n    description: 'Search file contents with regex',\n    inputSchema: z.object({ pattern: z.string() }),\n    outputSchema: z.unknown(),\n  }),\n  glob: tool({\n    description: 'Find files matching a glob pattern',\n    inputSchema: z.object({ pattern: z.string() }),\n    outputSchema: z.unknown(),\n  }),\n  webSearch: tool({\n    description: 'Search the web',\n    inputSchema: z.object({ query: z.string() }),\n    outputSchema: z.unknown(),\n  }),\n} as const;\n\nexport type HarnessV1BuiltinToolName = keyof typeof HARNESS_V1_BUILTIN_TOOLS;\n\nexport const HARNESS_V1_BUILTIN_TOOL_NAMES = Object.keys(\n  HARNESS_V1_BUILTIN_TOOLS,\n) as ReadonlyArray<HarnessV1BuiltinToolName>;\n\nexport type HarnessV1BuiltinToolUseKind = 'readonly' | 'edit' | 'bash';\n\n/**\n * A tool that the adapter's underlying runtime exposes natively. Extends the\n * AI SDK `Tool` shape with two optional harness-specific fields:\n *\n *  - `nativeName`: the name as the underlying runtime knows it. Required\n *    only when the tool's key in the harness's `builtinTools` is not the\n *    native name — i.e. when the tool maps to a `commonName` (e.g. key\n *    `'bash'` for Claude Code's native `'Bash'`). Tools without a common\n *    equivalent are keyed by their native name directly, so `nativeName`\n *    is redundant and omitted.\n *  - `commonName`: cross-harness label drawn from\n *    `HARNESS_V1_BUILTIN_TOOL_NAMES`. Set when the tool maps to a familiar\n *    capability; consumers use it to recognize, e.g., that Claude Code's\n *    `Bash` and Codex's `shell` are the same kind of tool.\n *\n * Always set both fields together via the `commonTool` helper, or neither\n * (declare the tool with the AI SDK's `tool()` directly).\n */\nexport type HarnessV1BuiltinTool<INPUT = unknown, OUTPUT = unknown> = Tool<\n  INPUT,\n  OUTPUT,\n  any\n> & {\n  readonly nativeName?: string;\n  readonly commonName?: HarnessV1BuiltinToolName;\n  readonly toolUseKind?: HarnessV1BuiltinToolUseKind;\n};\n\ntype InputOf<T> = T extends Tool<infer I, any, any> ? I : never;\n\ntype StandardInputOf<N extends HarnessV1BuiltinToolName> = InputOf<\n  (typeof HARNESS_V1_BUILTIN_TOOLS)[N]\n>;\n\n/*\n * Type-level superset check. If `TStandard` is assignable to `TAdapter`\n * (i.e. the adapter accepts every input the standard accepts), the return\n * type is `TOk`. Otherwise it's a tagged error tuple that surfaces a clear\n * TypeScript error at the call site.\n */\ntype SupersetCheck<TStandard, TAdapter, TOk> = TStandard extends TAdapter\n  ? TOk\n  : [\n      'ERROR: adapter input schema must be a superset of the standard schema',\n      { expected: TStandard; got: TAdapter },\n    ];\n\n/**\n * Declare a built-in tool that maps to a cross-harness common name. The\n * adapter's input schema must accept every input the standard schema for\n * `commonName` accepts. Extra optional fields are encouraged.\n *\n * If the schema is missing a field the standard requires (or has an\n * incompatible type), the return type collapses to a tagged error tuple,\n * which fails the surrounding `as const satisfies ToolSet` assignment and\n * surfaces a readable TypeScript error at the offending entry.\n */\nexport function commonTool<TName extends HarnessV1BuiltinToolName, TInput>(\n  commonName: TName,\n  opts: {\n    readonly nativeName: string;\n    readonly toolUseKind?: HarnessV1BuiltinToolUseKind;\n    readonly description?: string;\n    readonly inputSchema: FlexibleSchema<TInput>;\n  },\n): SupersetCheck<StandardInputOf<TName>, TInput, HarnessV1BuiltinTool<TInput>> {\n  return {\n    ...tool({\n      description: opts.description,\n      inputSchema: opts.inputSchema as FlexibleSchema<TInput>,\n    }),\n    nativeName: opts.nativeName,\n    commonName,\n    toolUseKind: opts.toolUseKind,\n  } as never;\n}\n","import type {\n  JSONValue,\n  LanguageModelV4FinishReason,\n  LanguageModelV4ToolApprovalRequest,\n  LanguageModelV4ToolCall,\n  LanguageModelV4ToolResult,\n  LanguageModelV4Usage,\n  SharedV4ProviderMetadata,\n} from '@ai-sdk/provider';\nimport { z } from 'zod/v4';\nimport type { HarnessV1CallWarning } from './harness-v1-call-warning';\nimport type { HarnessV1Metadata } from './harness-v1-metadata';\n\n/**\n * One event emitted by a harness adapter during a prompt turn.\n *\n * Mirrors `LanguageModelV4StreamPart` on the variants it shares so a\n * `HarnessAgent` can pipe events through to AI SDK consumers with minimal\n * translation. Primitive types from the V4 spec (`LanguageModelV4ToolCall`,\n * `LanguageModelV4ToolResult`, `LanguageModelV4ToolApprovalRequest`,\n * `LanguageModelV4Usage`, `LanguageModelV4FinishReason`) are reused\n * verbatim — type-compat tests assert this stays the case.\n *\n * The metadata field is named `harnessMetadata` (not `providerMetadata`)\n * because a harness is a peer to a provider, not a kind of provider. The\n * agent rebinds it when forwarding to AI SDK consumers.\n */\nexport type HarnessV1StreamPart =\n  | {\n      type: 'stream-start';\n      warnings?: ReadonlyArray<HarnessV1CallWarning>;\n      /**\n       * The model the runtime actually resolved to for this turn, when the\n       * adapter learns it at stream start (e.g. Claude Code's `init` message\n       * reports the resolved/default model). Surfaced into telemetry as\n       * `gen_ai.request.model`. Omitted when the adapter doesn't know it here.\n       */\n      modelId?: string;\n    }\n\n  // Text blocks\n  | { type: 'text-start'; id: string; harnessMetadata?: HarnessV1Metadata }\n  | {\n      type: 'text-delta';\n      id: string;\n      delta: string;\n      harnessMetadata?: HarnessV1Metadata;\n    }\n  | { type: 'text-end'; id: string; harnessMetadata?: HarnessV1Metadata }\n\n  // Reasoning blocks\n  | { type: 'reasoning-start'; id: string; harnessMetadata?: HarnessV1Metadata }\n  | {\n      type: 'reasoning-delta';\n      id: string;\n      delta: string;\n      harnessMetadata?: HarnessV1Metadata;\n    }\n  | { type: 'reasoning-end'; id: string; harnessMetadata?: HarnessV1Metadata }\n\n  // Tool calls, approvals, results — reuse V4 primitives.\n  //\n  // `nativeName` is the only harness-only extension on `tool-call`. It lets\n  // adapters surface the runtime's native name for a builtin when it differs\n  // from the wire `toolName` (e.g. `toolName: 'bash'`, `nativeName: 'Bash'`).\n  //\n  // Whether the call was executed by the underlying runtime (Claude Code's\n  // built-in `Bash`, Codex's `shell`) vs. needs host dispatch is signalled by\n  // the standard `providerExecuted` field on `LanguageModelV4ToolCall` —\n  // `true` for runtime-executed builtins, false/undefined for host tools.\n  | (LanguageModelV4ToolCall & {\n      nativeName?: string;\n    })\n  | LanguageModelV4ToolApprovalRequest\n  | LanguageModelV4ToolResult\n\n  // Step boundary inside a multi-step turn.\n  | {\n      type: 'finish-step';\n      finishReason: LanguageModelV4FinishReason;\n      usage: LanguageModelV4Usage;\n      harnessMetadata?: HarnessV1Metadata;\n    }\n\n  // Turn end.\n  | {\n      type: 'finish';\n      finishReason: LanguageModelV4FinishReason;\n      totalUsage: LanguageModelV4Usage;\n      harnessMetadata?: HarnessV1Metadata;\n    }\n\n  // Workspace file mutation that occurred through an opaque underlying\n  // mechanism (one with no visible `tool-call` carrying the same data, e.g.\n  // Codex's internal `apply_patch`). Emitted per changed path. Path-only by\n  // design — when the mutation goes through a visible tool call, the\n  // tool-call/tool-result pair already carries the information.\n  | {\n      type: 'file-change';\n      event: 'create' | 'modify' | 'delete';\n      path: string;\n      harnessMetadata?: HarnessV1Metadata;\n    }\n\n  // Context compaction performed by the underlying runtime (Claude Code's\n  // native compaction, Pi's summarization). Observation only — the runtime\n  // owns the compaction; the harness neither implements nor schedules it.\n  // Emitted once, on completion, since `summary`/`tokensAfter` only exist then.\n  | {\n      type: 'compaction';\n      trigger: 'manual' | 'auto';\n      summary: string;\n      tokensBefore?: number;\n      tokensAfter?: number;\n      harnessMetadata?: HarnessV1Metadata;\n    }\n\n  // Errors. Multiple may be emitted in a single turn.\n  | { type: 'error'; error: unknown }\n\n  // Adapter-specific passthrough. Consumers can opt in to receive these via\n  // `HarnessAgent` settings; otherwise they are dropped.\n  | { type: 'raw'; rawValue: unknown };\n\n/*\n * Runtime (Zod) encoding of `HarnessV1StreamPart`.\n *\n * `HarnessV1StreamPart` is a compile-time type built on `LanguageModelV4*`\n * types that ship no runtime validator. Bridge adapters receive these parts as\n * JSON across a trust boundary (the sandbox WebSocket), so they need a runtime\n * schema. These schemas ARE that encoding — one source of truth, kept from\n * diverging from the type by the `_assignable` guard below and the mutual\n * `toEqualTypeOf` assertion in `harness-v1-stream-part.test-d.ts`.\n *\n * Members are exported individually so `harness-v1-bridge-protocol.ts` can\n * compose them into the bridge outbound union alongside the transport frames.\n */\n\nconst harnessV1JsonValueSchema: z.ZodType<JSONValue> = z.lazy(() =>\n  z.union([\n    z.string(),\n    z.number(),\n    z.boolean(),\n    z.null(),\n    z.array(harnessV1JsonValueSchema),\n    z.record(z.string(), harnessV1JsonValueSchema),\n  ]),\n);\n\n/*\n * Tool-result values. The inferred type is the spec's `NonNullable<JSONValue>`\n * (matching `LanguageModelV4ToolResult`), but the runtime validator\n * deliberately also accepts `null`: adapters emit `result: <value> ?? null` for\n * tools that produced no output, and that `null` must survive the trust\n * boundary unchanged (it reaches consumers exactly as it did before this schema\n * existed, when a cast hid it). Leniency at runtime, strictness in the type.\n */\nconst harnessV1ToolResultValueSchema =\n  harnessV1JsonValueSchema as unknown as z.ZodType<NonNullable<JSONValue>>;\n\nconst harnessV1JsonObjectSchema = z.record(\n  z.string(),\n  harnessV1JsonValueSchema,\n) as unknown as z.ZodType<Record<string, JSONValue>>;\n\nconst harnessV1MetadataSchema = z.record(\n  z.string(),\n  z.record(z.string(), harnessV1JsonValueSchema),\n) as unknown as z.ZodType<HarnessV1Metadata>;\n\nconst harnessV1ProviderMetadataSchema = z.record(\n  z.string(),\n  z.record(z.string(), harnessV1JsonValueSchema),\n) as unknown as z.ZodType<SharedV4ProviderMetadata>;\n\nconst harnessV1CallWarningSchema = z.union([\n  z.object({\n    type: z.literal('unsupported-setting'),\n    setting: z.string(),\n    details: z.string().optional(),\n  }),\n  z.object({\n    type: z.literal('unsupported-tool'),\n    tool: z.string(),\n    details: z.string().optional(),\n  }),\n  z.object({ type: z.literal('other'), message: z.string() }),\n]) as z.ZodType<HarnessV1CallWarning>;\n\nconst harnessV1UsageSchema = z.object({\n  inputTokens: z.object({\n    total: z.number().optional(),\n    noCache: z.number().optional(),\n    cacheRead: z.number().optional(),\n    cacheWrite: z.number().optional(),\n  }),\n  outputTokens: z.object({\n    total: z.number().optional(),\n    text: z.number().optional(),\n    reasoning: z.number().optional(),\n  }),\n  raw: harnessV1JsonObjectSchema.optional(),\n}) as unknown as z.ZodType<LanguageModelV4Usage>;\n\nconst harnessV1FinishReasonSchema = z.object({\n  unified: z.enum([\n    'stop',\n    'length',\n    'content-filter',\n    'tool-calls',\n    'error',\n    'other',\n  ]),\n  raw: z.string().optional(),\n}) as unknown as z.ZodType<LanguageModelV4FinishReason>;\n\nexport const harnessV1StreamStartPartSchema = z.object({\n  type: z.literal('stream-start'),\n  warnings: z.array(harnessV1CallWarningSchema).readonly().optional(),\n  modelId: z.string().optional(),\n});\n\nexport const harnessV1TextStartPartSchema = z.object({\n  type: z.literal('text-start'),\n  id: z.string(),\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1TextDeltaPartSchema = z.object({\n  type: z.literal('text-delta'),\n  id: z.string(),\n  delta: z.string(),\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1TextEndPartSchema = z.object({\n  type: z.literal('text-end'),\n  id: z.string(),\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1ReasoningStartPartSchema = z.object({\n  type: z.literal('reasoning-start'),\n  id: z.string(),\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1ReasoningDeltaPartSchema = z.object({\n  type: z.literal('reasoning-delta'),\n  id: z.string(),\n  delta: z.string(),\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1ReasoningEndPartSchema = z.object({\n  type: z.literal('reasoning-end'),\n  id: z.string(),\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1ToolCallPartSchema = z.object({\n  type: z.literal('tool-call'),\n  toolCallId: z.string(),\n  toolName: z.string(),\n  input: z.string(),\n  providerExecuted: z.boolean().optional(),\n  dynamic: z.boolean().optional(),\n  providerMetadata: harnessV1ProviderMetadataSchema.optional(),\n  nativeName: z.string().optional(),\n});\n\nexport const harnessV1ToolApprovalRequestPartSchema = z.object({\n  type: z.literal('tool-approval-request'),\n  approvalId: z.string(),\n  toolCallId: z.string(),\n  providerMetadata: harnessV1ProviderMetadataSchema.optional(),\n});\n\nexport const harnessV1ToolResultPartSchema = z.object({\n  type: z.literal('tool-result'),\n  toolCallId: z.string(),\n  toolName: z.string(),\n  result: harnessV1ToolResultValueSchema,\n  isError: z.boolean().optional(),\n  preliminary: z.boolean().optional(),\n  dynamic: z.boolean().optional(),\n  providerMetadata: harnessV1ProviderMetadataSchema.optional(),\n});\n\nexport const harnessV1FinishStepPartSchema = z.object({\n  type: z.literal('finish-step'),\n  finishReason: harnessV1FinishReasonSchema,\n  usage: harnessV1UsageSchema,\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1FinishPartSchema = z.object({\n  type: z.literal('finish'),\n  finishReason: harnessV1FinishReasonSchema,\n  totalUsage: harnessV1UsageSchema,\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1FileChangePartSchema = z.object({\n  type: z.literal('file-change'),\n  event: z.enum(['create', 'modify', 'delete']),\n  path: z.string(),\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1CompactionPartSchema = z.object({\n  type: z.literal('compaction'),\n  trigger: z.enum(['manual', 'auto']),\n  summary: z.string(),\n  tokensBefore: z.number().optional(),\n  tokensAfter: z.number().optional(),\n  harnessMetadata: harnessV1MetadataSchema.optional(),\n});\n\nexport const harnessV1ErrorPartSchema = z.object({\n  type: z.literal('error'),\n  error: z.unknown(),\n});\n\nexport const harnessV1RawPartSchema = z.object({\n  type: z.literal('raw'),\n  rawValue: z.unknown(),\n});\n\n/**\n * Assembled discriminated union over every `HarnessV1StreamPart` variant. Left\n * un-annotated so it keeps its precise inferred type — the protocol layer\n * composes the individual member schemas, and the type test asserts the\n * inferred union equals `HarnessV1StreamPart`.\n */\nexport const harnessV1StreamPartSchema = z.discriminatedUnion('type', [\n  harnessV1StreamStartPartSchema,\n  harnessV1TextStartPartSchema,\n  harnessV1TextDeltaPartSchema,\n  harnessV1TextEndPartSchema,\n  harnessV1ReasoningStartPartSchema,\n  harnessV1ReasoningDeltaPartSchema,\n  harnessV1ReasoningEndPartSchema,\n  harnessV1ToolCallPartSchema,\n  harnessV1ToolApprovalRequestPartSchema,\n  harnessV1ToolResultPartSchema,\n  harnessV1FinishStepPartSchema,\n  harnessV1FinishPartSchema,\n  harnessV1FileChangePartSchema,\n  harnessV1CompactionPartSchema,\n  harnessV1ErrorPartSchema,\n  harnessV1RawPartSchema,\n]);\n\n/*\n * Fail-fast guard at the definition site: the schema's output must be\n * assignable to `HarnessV1StreamPart` (catches a schema variant inventing a\n * shape the type does not allow). The reverse direction — the type being a\n * subset of the schema — is covered by the `toEqualTypeOf` assertion in the\n * type test.\n */\nconst _assignable: z.ZodType<HarnessV1StreamPart> = harnessV1StreamPartSchema;\nvoid _assignable;\n","import { z } from 'zod/v4';\nimport {\n  harnessV1DebugConfigSchema,\n  harnessV1DebugLevelSchema,\n  type HarnessV1Diagnostic,\n} from './harness-v1-diagnostic';\nimport {\n  harnessV1CompactionPartSchema,\n  harnessV1ErrorPartSchema,\n  harnessV1FileChangePartSchema,\n  harnessV1FinishPartSchema,\n  harnessV1FinishStepPartSchema,\n  harnessV1RawPartSchema,\n  harnessV1ReasoningDeltaPartSchema,\n  harnessV1ReasoningEndPartSchema,\n  harnessV1ReasoningStartPartSchema,\n  harnessV1StreamStartPartSchema,\n  harnessV1TextDeltaPartSchema,\n  harnessV1TextEndPartSchema,\n  harnessV1TextStartPartSchema,\n  harnessV1ToolApprovalRequestPartSchema,\n  harnessV1ToolCallPartSchema,\n  harnessV1ToolResultPartSchema,\n} from './harness-v1-stream-part';\n\n/*\n * The bridge wire protocol shared by every bridge-backed harness adapter.\n *\n * This is the serialization of the host<->runtime contract for adapters that\n * run the agent runtime inside the sandbox and talk to the host over a\n * WebSocket. It exists ONLY because of that transport: untrusted JSON frames\n * crossing the sandbox boundary need runtime validation, the connection needs\n * a handshake, and the host drives turns with serialized commands. Every export\n * here is therefore prefixed `harnessV1Bridge…`.\n *\n * It has three tiers:\n *\n *  1. The OUTBOUND events — `HarnessV1StreamPart` re-expressed as Zod (imported\n *     member schemas from `harness-v1-stream-part.ts`), because the part type is\n *     compile-time only and the frames need runtime validation at the boundary.\n *  2. The transport/control frames that are NOT consumer events — `bridge-hello`\n *     (handshake), `bridge-detach` (resume payload), `bridge-thread` (a resume\n *     coordinate some runtimes announce). These ride the same socket.\n *  3. The INBOUND command vocabulary the host sends back: the shared commands\n *     live here; the per-adapter `start` payload extends\n *     `harnessV1BridgeStartBaseSchema` and assembles the final inbound union in\n *     the adapter package.\n *\n * Non-bridge adapters (e.g. Pi) do not use this layer at all — they have no\n * serialization boundary and target the universal `HarnessV1StreamPart` type\n * directly. That is the deliberate split: `harness-v1-stream-part.ts` is the\n * transport-agnostic event vocabulary; this file is the bridge transport.\n */\n\n/**\n * The subset of a host-defined tool that travels on the `start` message. The\n * runtime only needs the name, description, and JSON-Schema input to surface\n * the tool; `execute` stays on the host.\n */\nexport const harnessV1BridgeToolWireSchema = z.object({\n  name: z.string(),\n  description: z.string().optional(),\n  inputSchema: z.unknown().optional(),\n});\n\nexport type HarnessV1BridgeToolWire = z.infer<\n  typeof harnessV1BridgeToolWireSchema\n>;\n\nexport const harnessV1BridgePermissionModeSchema = z.enum([\n  'allow-reads',\n  'allow-edits',\n  'allow-all',\n]);\n\nexport const harnessV1BridgeBuiltinToolFilteringSchema = z.discriminatedUnion(\n  'mode',\n  [\n    z.object({\n      mode: z.literal('allow'),\n      toolNames: z.array(z.string()),\n    }),\n    z.object({\n      mode: z.literal('deny'),\n      toolNames: z.array(z.string()),\n    }),\n  ],\n);\n\n/**\n * Common fields of the inbound `start` message. Each adapter extends this with\n * its runtime-specific configuration (e.g. `thinking`/`continue` for Claude\n * Code, `reasoningEffort`/`webSearch`/`skills`/`resumeThreadId` for Codex) and\n * assembles the final inbound union from the shared command members below.\n *\n * `debug` carries the general `HarnessV1DebugConfig` — diagnostics config is not\n * a bridge concept, it just happens to ride the `start` frame for bridge-backed\n * adapters.\n */\nexport const harnessV1BridgeStartBaseSchema = z.object({\n  type: z.literal('start'),\n  prompt: z.string(),\n  tools: z.array(harnessV1BridgeToolWireSchema).optional(),\n  model: z.string().optional(),\n  debug: harnessV1DebugConfigSchema.optional(),\n  permissionMode: harnessV1BridgePermissionModeSchema.optional(),\n  builtinToolFiltering: harnessV1BridgeBuiltinToolFilteringSchema.optional(),\n});\n\n// --- Transport / control frames (outbound, not consumer events) ---\n\n/**\n * Sent the instant the bridge accepts an authenticated WS connection. The host\n * waits for it before sending `start`/`resume`, because some sandbox runtimes\n * complete the upstream WS handshake before the connection is wired through to\n * the bridge process — anything sent in that gap is dropped. Carries the\n * bridge's lifecycle `state` and highest emitted `seq` for reconnect.\n */\nexport const harnessV1BridgeHelloSchema = z.object({\n  type: z.literal('bridge-hello'),\n  state: z.string().optional(),\n  lastSeq: z.number().optional(),\n});\n\n/**\n * The bridge's reply to an inbound `detach`. Carries the adapter-specific\n * payload the host serializes into lifecycle state `data`.\n */\nexport const harnessV1BridgeDetachSchema = z.object({\n  type: z.literal('bridge-detach'),\n  data: z.unknown(),\n});\n\n/**\n * A resume coordinate the bridge proactively announces (e.g. Codex's thread id)\n * so the host can cache it for a later resume without waiting for `detach`.\n */\nexport const harnessV1BridgeThreadSchema = z.object({\n  type: z.literal('bridge-thread'),\n  threadId: z.string(),\n});\n\n// --- Diagnostics frames (outbound, not consumer events) ---\n\n/**\n * One captured console line from inside the sandbox. The bridge line-buffers\n * `process.stdout`/`process.stderr` and emits one of these per complete line.\n * Routed host-side to the diagnostics sink, never to the consumer stream.\n */\nexport const harnessV1BridgeSandboxLogSchema = z.object({\n  type: z.literal('sandbox-log'),\n  source: z.string(),\n  stream: z.enum(['stdout', 'stderr']),\n  line: z.string(),\n});\n\n/**\n * A structured diagnostic an adapter emits from inside the bridge via\n * `turn.bridgeLog(...)`. Gated by the session's debug level + subsystem filter.\n */\nexport const harnessV1BridgeDebugEventSchema = z.object({\n  type: z.literal('debug-event'),\n  level: harnessV1DebugLevelSchema,\n  subsystem: z.string(),\n  message: z.string(),\n  attrs: z.record(z.string(), z.unknown()).optional(),\n  error: z\n    .object({\n      name: z.string().optional(),\n      message: z.string(),\n      stack: z.string().optional(),\n    })\n    .optional(),\n});\n\n/**\n * Every frame a bridge can send to the host: the stream-part events plus the\n * transport/control frames. This is the schema the host `SandboxChannel`\n * validates inbound frames against.\n */\nexport const harnessV1BridgeOutboundMessageSchema = z.discriminatedUnion(\n  'type',\n  [\n    harnessV1StreamStartPartSchema,\n    harnessV1TextStartPartSchema,\n    harnessV1TextDeltaPartSchema,\n    harnessV1TextEndPartSchema,\n    harnessV1ReasoningStartPartSchema,\n    harnessV1ReasoningDeltaPartSchema,\n    harnessV1ReasoningEndPartSchema,\n    harnessV1ToolCallPartSchema,\n    harnessV1ToolApprovalRequestPartSchema,\n    harnessV1ToolResultPartSchema,\n    harnessV1FinishStepPartSchema,\n    harnessV1FinishPartSchema,\n    harnessV1FileChangePartSchema,\n    harnessV1CompactionPartSchema,\n    harnessV1ErrorPartSchema,\n    harnessV1RawPartSchema,\n    harnessV1BridgeHelloSchema,\n    harnessV1BridgeDetachSchema,\n    harnessV1BridgeThreadSchema,\n    harnessV1BridgeSandboxLogSchema,\n    harnessV1BridgeDebugEventSchema,\n  ],\n);\n\nexport type HarnessV1BridgeOutboundMessage = z.infer<\n  typeof harnessV1BridgeOutboundMessageSchema\n>;\n\nexport type HarnessV1BridgeSandboxLog = z.infer<\n  typeof harnessV1BridgeSandboxLogSchema\n>;\n\nexport type HarnessV1BridgeDebugEvent = z.infer<\n  typeof harnessV1BridgeDebugEventSchema\n>;\n\n/**\n * Normalize a bridge diagnostics wire frame into the transport-agnostic\n * `HarnessV1Diagnostic` an adapter reports to the framework. A captured console\n * line maps `stderr` → `warn` and `stdout` → `info`; a structured event passes\n * its fields through. This is the seam where the bridge's serialization is\n * lifted into the general emission shape every harness shares.\n */\nexport function harnessV1DiagnosticFromBridgeFrame(\n  frame: HarnessV1BridgeSandboxLog | HarnessV1BridgeDebugEvent,\n  context: { sessionId?: string; timestamp: number },\n): HarnessV1Diagnostic {\n  if (frame.type === 'sandbox-log') {\n    return {\n      level: frame.stream === 'stderr' ? 'warn' : 'info',\n      message: frame.line,\n      subsystem: `sandbox.log.${frame.source}`,\n      kind: 'log',\n      source: frame.source,\n      stream: frame.stream,\n      sessionId: context.sessionId,\n      timestamp: context.timestamp,\n    };\n  }\n  return {\n    level: frame.level,\n    message: frame.message,\n    subsystem: frame.subsystem,\n    kind: 'event',\n    attrs: frame.attrs,\n    error: frame.error,\n    sessionId: context.sessionId,\n    timestamp: context.timestamp,\n  };\n}\n\n// --- Shared inbound command members (host -> bridge) ---\n\nexport const harnessV1BridgeToolResultInboundSchema = z.object({\n  type: z.literal('tool-result'),\n  toolCallId: z.string(),\n  output: z.unknown(),\n  isError: z.boolean().optional(),\n});\n\nexport const harnessV1BridgeToolApprovalResponseInboundSchema = z.object({\n  type: z.literal('tool-approval-response'),\n  approvalId: z.string(),\n  approved: z.boolean(),\n  reason: z.string().optional(),\n});\n\nexport const harnessV1BridgeUserMessageInboundSchema = z.object({\n  type: z.literal('user-message'),\n  text: z.string(),\n});\n\nexport const harnessV1BridgeAbortInboundSchema = z.object({\n  type: z.literal('abort'),\n});\n\nexport const harnessV1BridgeShutdownInboundSchema = z.object({\n  type: z.literal('shutdown'),\n});\n\n/**\n * Reconnect: after re-establishing the socket the host asks the bridge to\n * replay every buffered event with `seq > lastSeenEventId`.\n */\nexport const harnessV1BridgeResumeInboundSchema = z.object({\n  type: z.literal('resume'),\n  lastSeenEventId: z.number(),\n});\n\n/**\n * The bridge replies with `bridge-detach` carrying any cached resume payload,\n * then exits.\n */\nexport const harnessV1BridgeDetachInboundSchema = z.object({\n  type: z.literal('detach'),\n});\n\n/**\n * The inbound command members shared by every bridge adapter. Spread these\n * alongside the adapter's own `start` schema to build the final inbound union:\n * `z.discriminatedUnion('type', [adapterStartSchema, ...harnessV1BridgeInboundCommandSchemas])`.\n */\nexport const harnessV1BridgeInboundCommandSchemas = [\n  harnessV1BridgeToolResultInboundSchema,\n  harnessV1BridgeToolApprovalResponseInboundSchema,\n  harnessV1BridgeUserMessageInboundSchema,\n  harnessV1BridgeAbortInboundSchema,\n  harnessV1BridgeShutdownInboundSchema,\n  harnessV1BridgeResumeInboundSchema,\n  harnessV1BridgeDetachInboundSchema,\n] as const;\n\n/**\n * The JSON line the bridge writes to stdout once its WebSocket server is bound,\n * announcing the port the host should connect to.\n */\nexport const harnessV1BridgeReadySchema = z.object({\n  type: z.literal('bridge-ready'),\n  port: z.number(),\n});\n\nexport type HarnessV1BridgeReady = z.infer<typeof harnessV1BridgeReadySchema>;\n","import { z } from 'zod/v4';\n\n/*\n * Diagnostics EMISSION contract — part of the `HarnessV1` spec.\n *\n * These are the types a harness adapter produces and receives: an adapter\n * reports a `HarnessV1Diagnostic` to the framework (a bridge adapter normalizes\n * its wire frames into one; a non-bridge adapter constructs one directly), and\n * receives a `HarnessV1DebugConfig` to gate what it emits. They are distinct\n * from the unaffixed host-facing `HarnessDiagnostic` / `HarnessDebugConfig`\n * (the external/telemetry surface) — the framework maps between the two at the\n * boundary, so the emission and consumption surfaces can evolve independently.\n */\n\n/** Severity of a diagnostic, ordered most → least severe. */\nexport const harnessV1DebugLevelSchema = z.enum([\n  'error',\n  'warn',\n  'info',\n  'debug',\n  'trace',\n]);\n\nexport type HarnessV1DebugLevel = z.infer<typeof harnessV1DebugLevelSchema>;\n\n/**\n * Per-session diagnostics configuration the framework hands an adapter (and the\n * host sends on `start.debug`). When absent or `enabled` is false the adapter\n * captures and emits nothing. `subsystems` filters structured events by dotted\n * prefix; console capture is independent of the subsystem filter.\n */\nexport const harnessV1DebugConfigSchema = z.object({\n  enabled: z.boolean().optional(),\n  level: harnessV1DebugLevelSchema.optional(),\n  subsystems: z.array(z.string()).optional(),\n});\n\nexport type HarnessV1DebugConfig = z.infer<typeof harnessV1DebugConfigSchema>;\n\n/**\n * A diagnostic as emitted by a harness adapter. Structurally identical to the\n * host-facing `HarnessDiagnostic` today, but kept separate: this is the spec's\n * emission shape, that is the external consumption shape.\n */\nexport type HarnessV1Diagnostic = {\n  /** Severity. */\n  readonly level: HarnessV1DebugLevel;\n  /** Human-readable line (console capture) or message (structured event). */\n  readonly message: string;\n  /** Dotted subsystem (`sandbox.log.<source>` for console capture). */\n  readonly subsystem: string;\n  /** `'log'` = captured console line; `'event'` = structured emission. */\n  readonly kind: 'log' | 'event';\n  /** Originating source label (console capture). */\n  readonly source?: string;\n  /** Which standard stream the line came from (console capture). */\n  readonly stream?: 'stdout' | 'stderr';\n  /** Structured attributes (structured events only). */\n  readonly attrs?: Record<string, unknown>;\n  /** Error payload (structured events only). */\n  readonly error?: { name?: string; message: string; stack?: string };\n  /** The harness session this diagnostic originated from. */\n  readonly sessionId?: string;\n  /** Emission time (epoch ms). */\n  readonly timestamp: number;\n};\n","export type HarnessV1BuiltinToolFiltering =\n  | {\n      mode: 'allow';\n      toolNames: string[];\n    }\n  | {\n      mode: 'deny';\n      toolNames: string[];\n    };\n\nexport function isHarnessV1BuiltinToolIncluded(input: {\n  toolName: string;\n  toolFiltering: HarnessV1BuiltinToolFiltering | undefined;\n}): boolean {\n  if (input.toolFiltering == null) return true;\n  return input.toolFiltering.mode === 'allow'\n    ? input.toolFiltering.toolNames.includes(input.toolName)\n    : !input.toolFiltering.toolNames.includes(input.toolName);\n}\n\nexport function getHarnessV1BuiltinToolFilteringDenialReason(input: {\n  toolName: string;\n}): string {\n  return `Tool '${input.toolName}' is inactive due to the HarnessAgent tool filtering policy.`;\n}\n","import { AISDKError } from '@ai-sdk/provider';\n\nconst name = 'AI_HarnessError';\nconst marker = `vercel.ai.error.${name}`;\nconst symbol = Symbol.for(marker);\n\n/**\n * Base error type for failures originating in or signalled by a harness\n * adapter. Specific failure modes (e.g. unsupported capability) extend this\n * class.\n */\nexport class HarnessError extends AISDKError {\n  private readonly [symbol] = true;\n\n  constructor({ message, cause }: { message: string; cause?: unknown }) {\n    super({ name, message, cause });\n  }\n\n  static isInstance(error: unknown): error is HarnessError {\n    return AISDKError.hasMarker(error, marker);\n  }\n}\n","import { AISDKError } from '@ai-sdk/provider';\nimport { HarnessError } from './harness-error';\n\nconst name = 'AI_HarnessCapabilityUnsupportedError';\nconst marker = `vercel.ai.error.${name}`;\nconst symbol = Symbol.for(marker);\n\n/**\n * Thrown when a caller asks the harness to do something the adapter (or the\n * supplied sandbox) does not support, e.g. requesting manual compaction from\n * an adapter that only auto-compacts, or invoking `getPortUrl` on a sandbox\n * that does not expose one.\n *\n * The caller supplies the full human-readable message. Optional `harnessId`\n * is recorded as structured context for tooling.\n */\nexport class HarnessCapabilityUnsupportedError extends HarnessError {\n  private readonly [symbol] = true;\n\n  readonly harnessId?: string;\n\n  constructor({\n    message,\n    harnessId,\n    cause,\n  }: {\n    message: string;\n    harnessId?: string;\n    cause?: unknown;\n  }) {\n    super({ message, cause });\n    Object.defineProperty(this, 'name', { value: name });\n    this.harnessId = harnessId;\n  }\n\n  static isInstance(\n    error: unknown,\n  ): error is HarnessCapabilityUnsupportedError {\n    return AISDKError.hasMarker(error, marker);\n  }\n}\n"],"mappings":";AAAA,SAAS,YAA4C;AACrD,SAAS,SAAS;AAWX,IAAM,2BAA2B;AAAA,EACtC,MAAM,KAAK;AAAA,IACT,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;AAAA,IAC/C,cAAc,EAAE,QAAQ;AAAA,EAC1B,CAAC;AAAA,EACD,OAAO,KAAK;AAAA,IACV,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC;AAAA,IACpE,cAAc,EAAE,QAAQ;AAAA,EAC1B,CAAC;AAAA,EACD,MAAM,KAAK;AAAA,IACT,aAAa;AAAA,IACb,aAAa,EAAE,OAAO;AAAA,MACpB,WAAW,EAAE,OAAO;AAAA,MACpB,YAAY,EAAE,OAAO;AAAA,MACrB,YAAY,EAAE,OAAO;AAAA,IACvB,CAAC;AAAA,IACD,cAAc,EAAE,QAAQ;AAAA,EAC1B,CAAC;AAAA,EACD,MAAM,KAAK;AAAA,IACT,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAAA,IAC7C,cAAc,EAAE,QAAQ;AAAA,EAC1B,CAAC;AAAA,EACD,MAAM,KAAK;AAAA,IACT,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAAA,IAC7C,cAAc,EAAE,QAAQ;AAAA,EAC1B,CAAC;AAAA,EACD,MAAM,KAAK;AAAA,IACT,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAAA,IAC7C,cAAc,EAAE,QAAQ;AAAA,EAC1B,CAAC;AAAA,EACD,WAAW,KAAK;AAAA,IACd,aAAa;AAAA,IACb,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAAA,IAC3C,cAAc,EAAE,QAAQ;AAAA,EAC1B,CAAC;AACH;AAIO,IAAM,gCAAgC,OAAO;AAAA,EAClD;AACF;AA6DO,SAAS,WACd,YACA,MAM6E;AAC7E,SAAO;AAAA,IACL,GAAG,KAAK;AAAA,MACN,aAAa,KAAK;AAAA,MAClB,aAAa,KAAK;AAAA,IACpB,CAAC;AAAA,IACD,YAAY,KAAK;AAAA,IACjB;AAAA,IACA,aAAa,KAAK;AAAA,EACpB;AACF;;;AChIA,SAAS,KAAAA,UAAS;AAiIlB,IAAM,2BAAiDA,GAAE;AAAA,EAAK,MAC5DA,GAAE,MAAM;AAAA,IACNA,GAAE,OAAO;AAAA,IACTA,GAAE,OAAO;AAAA,IACTA,GAAE,QAAQ;AAAA,IACVA,GAAE,KAAK;AAAA,IACPA,GAAE,MAAM,wBAAwB;AAAA,IAChCA,GAAE,OAAOA,GAAE,OAAO,GAAG,wBAAwB;AAAA,EAC/C,CAAC;AACH;AAUA,IAAM,iCACJ;AAEF,IAAM,4BAA4BA,GAAE;AAAA,EAClCA,GAAE,OAAO;AAAA,EACT;AACF;AAEA,IAAM,0BAA0BA,GAAE;AAAA,EAChCA,GAAE,OAAO;AAAA,EACTA,GAAE,OAAOA,GAAE,OAAO,GAAG,wBAAwB;AAC/C;AAEA,IAAM,kCAAkCA,GAAE;AAAA,EACxCA,GAAE,OAAO;AAAA,EACTA,GAAE,OAAOA,GAAE,OAAO,GAAG,wBAAwB;AAC/C;AAEA,IAAM,6BAA6BA,GAAE,MAAM;AAAA,EACzCA,GAAE,OAAO;AAAA,IACP,MAAMA,GAAE,QAAQ,qBAAqB;AAAA,IACrC,SAASA,GAAE,OAAO;AAAA,IAClB,SAASA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,CAAC;AAAA,EACDA,GAAE,OAAO;AAAA,IACP,MAAMA,GAAE,QAAQ,kBAAkB;AAAA,IAClC,MAAMA,GAAE,OAAO;AAAA,IACf,SAASA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,CAAC;AAAA,EACDA,GAAE,OAAO,EAAE,MAAMA,GAAE,QAAQ,OAAO,GAAG,SAASA,GAAE,OAAO,EAAE,CAAC;AAC5D,CAAC;AAED,IAAM,uBAAuBA,GAAE,OAAO;AAAA,EACpC,aAAaA,GAAE,OAAO;AAAA,IACpB,OAAOA,GAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,SAASA,GAAE,OAAO,EAAE,SAAS;AAAA,IAC7B,WAAWA,GAAE,OAAO,EAAE,SAAS;AAAA,IAC/B,YAAYA,GAAE,OAAO,EAAE,SAAS;AAAA,EAClC,CAAC;AAAA,EACD,cAAcA,GAAE,OAAO;AAAA,IACrB,OAAOA,GAAE,OAAO,EAAE,SAAS;AAAA,IAC3B,MAAMA,GAAE,OAAO,EAAE,SAAS;AAAA,IAC1B,WAAWA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,CAAC;AAAA,EACD,KAAK,0BAA0B,SAAS;AAC1C,CAAC;AAED,IAAM,8BAA8BA,GAAE,OAAO;AAAA,EAC3C,SAASA,GAAE,KAAK;AAAA,IACd;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA,EACD,KAAKA,GAAE,OAAO,EAAE,SAAS;AAC3B,CAAC;AAEM,IAAM,iCAAiCA,GAAE,OAAO;AAAA,EACrD,MAAMA,GAAE,QAAQ,cAAc;AAAA,EAC9B,UAAUA,GAAE,MAAM,0BAA0B,EAAE,SAAS,EAAE,SAAS;AAAA,EAClE,SAASA,GAAE,OAAO,EAAE,SAAS;AAC/B,CAAC;AAEM,IAAM,+BAA+BA,GAAE,OAAO;AAAA,EACnD,MAAMA,GAAE,QAAQ,YAAY;AAAA,EAC5B,IAAIA,GAAE,OAAO;AAAA,EACb,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,+BAA+BA,GAAE,OAAO;AAAA,EACnD,MAAMA,GAAE,QAAQ,YAAY;AAAA,EAC5B,IAAIA,GAAE,OAAO;AAAA,EACb,OAAOA,GAAE,OAAO;AAAA,EAChB,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,6BAA6BA,GAAE,OAAO;AAAA,EACjD,MAAMA,GAAE,QAAQ,UAAU;AAAA,EAC1B,IAAIA,GAAE,OAAO;AAAA,EACb,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,oCAAoCA,GAAE,OAAO;AAAA,EACxD,MAAMA,GAAE,QAAQ,iBAAiB;AAAA,EACjC,IAAIA,GAAE,OAAO;AAAA,EACb,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,oCAAoCA,GAAE,OAAO;AAAA,EACxD,MAAMA,GAAE,QAAQ,iBAAiB;AAAA,EACjC,IAAIA,GAAE,OAAO;AAAA,EACb,OAAOA,GAAE,OAAO;AAAA,EAChB,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,kCAAkCA,GAAE,OAAO;AAAA,EACtD,MAAMA,GAAE,QAAQ,eAAe;AAAA,EAC/B,IAAIA,GAAE,OAAO;AAAA,EACb,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,8BAA8BA,GAAE,OAAO;AAAA,EAClD,MAAMA,GAAE,QAAQ,WAAW;AAAA,EAC3B,YAAYA,GAAE,OAAO;AAAA,EACrB,UAAUA,GAAE,OAAO;AAAA,EACnB,OAAOA,GAAE,OAAO;AAAA,EAChB,kBAAkBA,GAAE,QAAQ,EAAE,SAAS;AAAA,EACvC,SAASA,GAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,kBAAkB,gCAAgC,SAAS;AAAA,EAC3D,YAAYA,GAAE,OAAO,EAAE,SAAS;AAClC,CAAC;AAEM,IAAM,yCAAyCA,GAAE,OAAO;AAAA,EAC7D,MAAMA,GAAE,QAAQ,uBAAuB;AAAA,EACvC,YAAYA,GAAE,OAAO;AAAA,EACrB,YAAYA,GAAE,OAAO;AAAA,EACrB,kBAAkB,gCAAgC,SAAS;AAC7D,CAAC;AAEM,IAAM,gCAAgCA,GAAE,OAAO;AAAA,EACpD,MAAMA,GAAE,QAAQ,aAAa;AAAA,EAC7B,YAAYA,GAAE,OAAO;AAAA,EACrB,UAAUA,GAAE,OAAO;AAAA,EACnB,QAAQ;AAAA,EACR,SAASA,GAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,aAAaA,GAAE,QAAQ,EAAE,SAAS;AAAA,EAClC,SAASA,GAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,kBAAkB,gCAAgC,SAAS;AAC7D,CAAC;AAEM,IAAM,gCAAgCA,GAAE,OAAO;AAAA,EACpD,MAAMA,GAAE,QAAQ,aAAa;AAAA,EAC7B,cAAc;AAAA,EACd,OAAO;AAAA,EACP,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,4BAA4BA,GAAE,OAAO;AAAA,EAChD,MAAMA,GAAE,QAAQ,QAAQ;AAAA,EACxB,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,gCAAgCA,GAAE,OAAO;AAAA,EACpD,MAAMA,GAAE,QAAQ,aAAa;AAAA,EAC7B,OAAOA,GAAE,KAAK,CAAC,UAAU,UAAU,QAAQ,CAAC;AAAA,EAC5C,MAAMA,GAAE,OAAO;AAAA,EACf,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,gCAAgCA,GAAE,OAAO;AAAA,EACpD,MAAMA,GAAE,QAAQ,YAAY;AAAA,EAC5B,SAASA,GAAE,KAAK,CAAC,UAAU,MAAM,CAAC;AAAA,EAClC,SAASA,GAAE,OAAO;AAAA,EAClB,cAAcA,GAAE,OAAO,EAAE,SAAS;AAAA,EAClC,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,iBAAiB,wBAAwB,SAAS;AACpD,CAAC;AAEM,IAAM,2BAA2BA,GAAE,OAAO;AAAA,EAC/C,MAAMA,GAAE,QAAQ,OAAO;AAAA,EACvB,OAAOA,GAAE,QAAQ;AACnB,CAAC;AAEM,IAAM,yBAAyBA,GAAE,OAAO;AAAA,EAC7C,MAAMA,GAAE,QAAQ,KAAK;AAAA,EACrB,UAAUA,GAAE,QAAQ;AACtB,CAAC;AAQM,IAAM,4BAA4BA,GAAE,mBAAmB,QAAQ;AAAA,EACpE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;;;AChWD,SAAS,KAAAC,UAAS;;;ACAlB,SAAS,KAAAC,UAAS;AAeX,IAAM,4BAA4BA,GAAE,KAAK;AAAA,EAC9C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAUM,IAAM,6BAA6BA,GAAE,OAAO;AAAA,EACjD,SAASA,GAAE,QAAQ,EAAE,SAAS;AAAA,EAC9B,OAAO,0BAA0B,SAAS;AAAA,EAC1C,YAAYA,GAAE,MAAMA,GAAE,OAAO,CAAC,EAAE,SAAS;AAC3C,CAAC;;;ADwBM,IAAM,gCAAgCC,GAAE,OAAO;AAAA,EACpD,MAAMA,GAAE,OAAO;AAAA,EACf,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAaA,GAAE,QAAQ,EAAE,SAAS;AACpC,CAAC;AAMM,IAAM,sCAAsCA,GAAE,KAAK;AAAA,EACxD;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,IAAM,4CAA4CA,GAAE;AAAA,EACzD;AAAA,EACA;AAAA,IACEA,GAAE,OAAO;AAAA,MACP,MAAMA,GAAE,QAAQ,OAAO;AAAA,MACvB,WAAWA,GAAE,MAAMA,GAAE,OAAO,CAAC;AAAA,IAC/B,CAAC;AAAA,IACDA,GAAE,OAAO;AAAA,MACP,MAAMA,GAAE,QAAQ,MAAM;AAAA,MACtB,WAAWA,GAAE,MAAMA,GAAE,OAAO,CAAC;AAAA,IAC/B,CAAC;AAAA,EACH;AACF;AAYO,IAAM,iCAAiCA,GAAE,OAAO;AAAA,EACrD,MAAMA,GAAE,QAAQ,OAAO;AAAA,EACvB,QAAQA,GAAE,OAAO;AAAA,EACjB,OAAOA,GAAE,MAAM,6BAA6B,EAAE,SAAS;AAAA,EACvD,OAAOA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,OAAO,2BAA2B,SAAS;AAAA,EAC3C,gBAAgB,oCAAoC,SAAS;AAAA,EAC7D,sBAAsB,0CAA0C,SAAS;AAC3E,CAAC;AAWM,IAAM,6BAA6BA,GAAE,OAAO;AAAA,EACjD,MAAMA,GAAE,QAAQ,cAAc;AAAA,EAC9B,OAAOA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC3B,SAASA,GAAE,OAAO,EAAE,SAAS;AAC/B,CAAC;AAMM,IAAM,8BAA8BA,GAAE,OAAO;AAAA,EAClD,MAAMA,GAAE,QAAQ,eAAe;AAAA,EAC/B,MAAMA,GAAE,QAAQ;AAClB,CAAC;AAMM,IAAM,8BAA8BA,GAAE,OAAO;AAAA,EAClD,MAAMA,GAAE,QAAQ,eAAe;AAAA,EAC/B,UAAUA,GAAE,OAAO;AACrB,CAAC;AASM,IAAM,kCAAkCA,GAAE,OAAO;AAAA,EACtD,MAAMA,GAAE,QAAQ,aAAa;AAAA,EAC7B,QAAQA,GAAE,OAAO;AAAA,EACjB,QAAQA,GAAE,KAAK,CAAC,UAAU,QAAQ,CAAC;AAAA,EACnC,MAAMA,GAAE,OAAO;AACjB,CAAC;AAMM,IAAM,kCAAkCA,GAAE,OAAO;AAAA,EACtD,MAAMA,GAAE,QAAQ,aAAa;AAAA,EAC7B,OAAO;AAAA,EACP,WAAWA,GAAE,OAAO;AAAA,EACpB,SAASA,GAAE,OAAO;AAAA,EAClB,OAAOA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAClD,OAAOA,GACJ,OAAO;AAAA,IACN,MAAMA,GAAE,OAAO,EAAE,SAAS;AAAA,IAC1B,SAASA,GAAE,OAAO;AAAA,IAClB,OAAOA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC7B,CAAC,EACA,SAAS;AACd,CAAC;AAOM,IAAM,uCAAuCA,GAAE;AAAA,EACpD;AAAA,EACA;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAqBO,SAAS,mCACd,OACA,SACqB;AACrB,MAAI,MAAM,SAAS,eAAe;AAChC,WAAO;AAAA,MACL,OAAO,MAAM,WAAW,WAAW,SAAS;AAAA,MAC5C,SAAS,MAAM;AAAA,MACf,WAAW,eAAe,MAAM,MAAM;AAAA,MACtC,MAAM;AAAA,MACN,QAAQ,MAAM;AAAA,MACd,QAAQ,MAAM;AAAA,MACd,WAAW,QAAQ;AAAA,MACnB,WAAW,QAAQ;AAAA,IACrB;AAAA,EACF;AACA,SAAO;AAAA,IACL,OAAO,MAAM;AAAA,IACb,SAAS,MAAM;AAAA,IACf,WAAW,MAAM;AAAA,IACjB,MAAM;AAAA,IACN,OAAO,MAAM;AAAA,IACb,OAAO,MAAM;AAAA,IACb,WAAW,QAAQ;AAAA,IACnB,WAAW,QAAQ;AAAA,EACrB;AACF;AAIO,IAAM,yCAAyCA,GAAE,OAAO;AAAA,EAC7D,MAAMA,GAAE,QAAQ,aAAa;AAAA,EAC7B,YAAYA,GAAE,OAAO;AAAA,EACrB,QAAQA,GAAE,QAAQ;AAAA,EAClB,SAASA,GAAE,QAAQ,EAAE,SAAS;AAChC,CAAC;AAEM,IAAM,mDAAmDA,GAAE,OAAO;AAAA,EACvE,MAAMA,GAAE,QAAQ,wBAAwB;AAAA,EACxC,YAAYA,GAAE,OAAO;AAAA,EACrB,UAAUA,GAAE,QAAQ;AAAA,EACpB,QAAQA,GAAE,OAAO,EAAE,SAAS;AAC9B,CAAC;AAEM,IAAM,0CAA0CA,GAAE,OAAO;AAAA,EAC9D,MAAMA,GAAE,QAAQ,cAAc;AAAA,EAC9B,MAAMA,GAAE,OAAO;AACjB,CAAC;AAEM,IAAM,oCAAoCA,GAAE,OAAO;AAAA,EACxD,MAAMA,GAAE,QAAQ,OAAO;AACzB,CAAC;AAEM,IAAM,uCAAuCA,GAAE,OAAO;AAAA,EAC3D,MAAMA,GAAE,QAAQ,UAAU;AAC5B,CAAC;AAMM,IAAM,qCAAqCA,GAAE,OAAO;AAAA,EACzD,MAAMA,GAAE,QAAQ,QAAQ;AAAA,EACxB,iBAAiBA,GAAE,OAAO;AAC5B,CAAC;AAMM,IAAM,qCAAqCA,GAAE,OAAO;AAAA,EACzD,MAAMA,GAAE,QAAQ,QAAQ;AAC1B,CAAC;AAOM,IAAM,uCAAuC;AAAA,EAClD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAMO,IAAM,6BAA6BA,GAAE,OAAO;AAAA,EACjD,MAAMA,GAAE,QAAQ,cAAc;AAAA,EAC9B,MAAMA,GAAE,OAAO;AACjB,CAAC;;;AExTM,SAAS,+BAA+B,OAGnC;AACV,MAAI,MAAM,iBAAiB,KAAM,QAAO;AACxC,SAAO,MAAM,cAAc,SAAS,UAChC,MAAM,cAAc,UAAU,SAAS,MAAM,QAAQ,IACrD,CAAC,MAAM,cAAc,UAAU,SAAS,MAAM,QAAQ;AAC5D;AAEO,SAAS,6CAA6C,OAElD;AACT,SAAO,SAAS,MAAM,QAAQ;AAChC;;;ACxBA,SAAS,kBAAkB;AAE3B,IAAM,OAAO;AACb,IAAM,SAAS,mBAAmB,IAAI;AACtC,IAAM,SAAS,OAAO,IAAI,MAAM;AAJhC;AAWO,IAAM,eAAN,eAA2B,iBACd,aADc,IAAW;AAAA,EAG3C,YAAY,EAAE,SAAS,MAAM,GAAyC;AACpE,UAAM,EAAE,MAAM,SAAS,MAAM,CAAC;AAHhC,SAAkB,MAAU;AAAA,EAI5B;AAAA,EAEA,OAAO,WAAW,OAAuC;AACvD,WAAO,WAAW,UAAU,OAAO,MAAM;AAAA,EAC3C;AACF;;;ACrBA,SAAS,cAAAC,mBAAkB;AAG3B,IAAMC,QAAO;AACb,IAAMC,UAAS,mBAAmBD,KAAI;AACtC,IAAME,UAAS,OAAO,IAAID,OAAM;AALhC,IAAAE,KAAAC;AAgBO,IAAM,oCAAN,eAAgDA,MAAA,cACnCD,MAAAD,SADmCE,KAAa;AAAA,EAKlE,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIG;AACD,UAAM,EAAE,SAAS,MAAM,CAAC;AAb1B,SAAkBD,OAAU;AAc1B,WAAO,eAAe,MAAM,QAAQ,EAAE,OAAOH,MAAK,CAAC;AACnD,SAAK,YAAY;AAAA,EACnB;AAAA,EAEA,OAAO,WACL,OAC4C;AAC5C,WAAOK,YAAW,UAAU,OAAOJ,OAAM;AAAA,EAC3C;AACF;","names":["z","z","z","z","AISDKError","name","marker","symbol","_a","_b","AISDKError"]}

package/dist/utils/index.d.ts

@@ -1,4 +1,4 @@
-import { FlexibleSchema, Experimental_SandboxProcess, Experimental_SandboxSession } from '@ai-sdk/provider-utils';
+import { FlexibleSchema, Experimental_SandboxSession, Experimental_SandboxProcess } from '@ai-sdk/provider-utils';
 import { WebSocket } from 'ws';
 
 /**
@@ -200,6 +200,64 @@ declare function getAiGatewayAuthFromEnv({ env, }: {
     baseUrl: string;
 };
 
+declare function resolveSandboxHomeDir({ sandbox, abortSignal, }: {
+    sandbox: Experimental_SandboxSession;
+    abortSignal?: AbortSignal;
+}): Promise<string>;
+
+declare function shellQuote(value: string): string;
+
+/**
+ * A self-contained instruction bundle the underlying runtime can load into
+ * its context. Adapters decide how to surface skills to the runtime.
+ */
+type HarnessV1Skill = {
+    /** Stable identifier for the skill (kebab-case slug). */
+    readonly name: string;
+    /**
+     * Short, model-facing description. This is what the runtime sees to
+     * decide whether the skill is relevant.
+     */
+    readonly description: string;
+    /** Full skill content the model loads when the skill is active. */
+    readonly content: string;
+    /**
+     * Additional files that belong to this skill. Adapters with native skill
+     * directories materialize these next to `SKILL.md`; adapters without native
+     * skill files include them with the skill content.
+     */
+    readonly files?: ReadonlyArray<HarnessV1SkillFile>;
+};
+type HarnessV1SkillFile = {
+    /**
+     * Skill-relative POSIX path, for example `reference.md` or
+     * `references/codes.md`. Absolute paths and `..` segments are rejected by
+     * adapters before writing.
+     */
+    readonly path: string;
+    /** UTF-8 text content for the file. */
+    readonly content: string;
+};
+
+type SkillFilePathMode = 'relative' | 'strip-leading-slashes';
+type WriteSkillsOptions = {
+    sandbox: Experimental_SandboxSession;
+    rootDir: string;
+    skills: ReadonlyArray<HarnessV1Skill>;
+    abortSignal?: AbortSignal;
+    skillNamePattern?: RegExp;
+    invalidSkillNameMessage?: (input: {
+        name: string;
+    }) => string;
+    filePathMode?: SkillFilePathMode;
+    invalidSkillFilePathMessage?: (input: {
+        skillName: string;
+        filePath: string;
+    }) => string;
+    trailingNewline?: boolean;
+};
+declare function writeSkills({ sandbox, rootDir, skills, abortSignal, skillNamePattern, invalidSkillNameMessage, filePathMode, invalidSkillFilePathMessage, trailingNewline, }: WriteSkillsOptions): Promise<void>;
+
 type BridgeReadySource = 'stdout' | 'metadata';
 type BridgeReadyErrorContext = {
     proc: Experimental_SandboxProcess;
@@ -229,4 +287,4 @@ declare function markBridgeStarting({ sandbox, bridgeStateDir, bridgeType, abort
 }): Promise<void>;
 declare function waitForBridgeReady({ proc, sandbox, bridgeStateDir, bridgeType, timeoutMs, abortSignal, pollIntervalMs, createTimeoutError, createExitError, }: WaitForBridgeReadyOptions): Promise<WaitForBridgeReadyResult>;
 
-export { type BridgeReadyErrorContext, type BridgeReadySource, type DiskLogRecoveryMode, SandboxChannel, type SandboxChannelDebugEvent, type SandboxChannelOptions, type SandboxChannelReconnectOptions, type WaitForBridgeReadyOptions, type WaitForBridgeReadyResult, classifyDiskLog, getAiGatewayAuthFromEnv, markBridgeStarting, waitForBridgeReady };
+export { type BridgeReadyErrorContext, type BridgeReadySource, type DiskLogRecoveryMode, SandboxChannel, type SandboxChannelDebugEvent, type SandboxChannelOptions, type SandboxChannelReconnectOptions, type SkillFilePathMode, type WaitForBridgeReadyOptions, type WaitForBridgeReadyResult, type WriteSkillsOptions, classifyDiskLog, getAiGatewayAuthFromEnv, markBridgeStarting, resolveSandboxHomeDir, shellQuote, waitForBridgeReady, writeSkills };

package/dist/utils/index.js

@@ -333,6 +333,131 @@ function getAiGatewayAuthFromEnv({
   };
 }
 
+// src/utils/sandbox-home-dir.ts
+import path from "path";
+async function resolveSandboxHomeDir({
+  sandbox,
+  abortSignal
+}) {
+  const result = await sandbox.run({
+    command: 'printf "%s" "$HOME"',
+    abortSignal
+  });
+  const homeDir = result.stdout.trim();
+  if (result.exitCode !== 0 || !homeDir || !path.posix.isAbsolute(homeDir)) {
+    throw new Error(
+      `Unable to resolve sandbox HOME directory: ${result.stderr || result.stdout}`
+    );
+  }
+  return homeDir;
+}
+
+// src/utils/shell-quote.ts
+function shellQuote(value) {
+  return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+
+// src/utils/write-skills.ts
+import path2 from "path";
+async function writeSkills({
+  sandbox,
+  rootDir,
+  skills,
+  abortSignal,
+  skillNamePattern = /^[A-Za-z0-9._-]+$/,
+  invalidSkillNameMessage = ({ name }) => `Invalid skill name: ${name}`,
+  filePathMode = "relative",
+  invalidSkillFilePathMessage = ({ skillName, filePath }) => `Invalid skill file path for ${skillName}: ${filePath}`,
+  trailingNewline = false
+}) {
+  var _a, _b;
+  for (const skill of skills) {
+    validateSkillName({
+      name: skill.name,
+      pattern: skillNamePattern,
+      message: invalidSkillNameMessage
+    });
+    for (const file of (_a = skill.files) != null ? _a : []) {
+      normalizeSkillFilePath({
+        skillName: skill.name,
+        filePath: file.path,
+        mode: filePathMode,
+        message: invalidSkillFilePathMessage
+      });
+    }
+  }
+  await sandbox.run({
+    command: `mkdir -p ${shellQuote(rootDir)}`,
+    abortSignal
+  });
+  for (const skill of skills) {
+    const name = validateSkillName({
+      name: skill.name,
+      pattern: skillNamePattern,
+      message: invalidSkillNameMessage
+    });
+    const skillDir = path2.posix.join(rootDir, name);
+    await sandbox.writeTextFile({
+      path: path2.posix.join(skillDir, "SKILL.md"),
+      content: renderSkillFile({ skill, trailingNewline }),
+      abortSignal
+    });
+    for (const file of (_b = skill.files) != null ? _b : []) {
+      const filePath = normalizeSkillFilePath({
+        skillName: skill.name,
+        filePath: file.path,
+        mode: filePathMode,
+        message: invalidSkillFilePathMessage
+      });
+      await sandbox.writeTextFile({
+        path: path2.posix.join(skillDir, filePath),
+        content: file.content,
+        abortSignal
+      });
+    }
+  }
+}
+function validateSkillName({
+  name,
+  pattern,
+  message
+}) {
+  var _a;
+  if (!pattern.test(name) || name === "." || name === "..") {
+    throw new Error((_a = message == null ? void 0 : message({ name })) != null ? _a : `Invalid skill name: ${name}`);
+  }
+  return name;
+}
+function normalizeSkillFilePath({
+  skillName,
+  filePath,
+  mode,
+  message
+}) {
+  var _a;
+  const normalized = mode === "strip-leading-slashes" ? filePath.replace(/^\/+/, "") : path2.posix.normalize(filePath);
+  const invalid = normalized === "" || mode === "relative" && normalized === "." || normalized.startsWith("../") || normalized.includes("/../") || normalized.endsWith("/..") || mode === "relative" && path2.posix.isAbsolute(normalized);
+  if (invalid) {
+    throw new Error(
+      (_a = message == null ? void 0 : message({ skillName: skillName != null ? skillName : "", filePath })) != null ? _a : `Invalid skill file path for ${skillName}: ${filePath}`
+    );
+  }
+  return normalized;
+}
+function renderSkillFile({
+  skill,
+  trailingNewline
+}) {
+  const content = `---
+name: ${skill.name}
+description: ${skill.description}
+---
+
+${skill.content}`;
+  return trailingNewline ? `${content}
+` : content;
+}
+
 // src/utils/bridge-ready.ts
 import {
   safeParseJSON as safeParseJSON3
@@ -547,13 +672,27 @@ var harnessV1BridgePermissionModeSchema = z3.enum([
   "allow-edits",
   "allow-all"
 ]);
+var harnessV1BridgeBuiltinToolFilteringSchema = z3.discriminatedUnion(
+  "mode",
+  [
+    z3.object({
+      mode: z3.literal("allow"),
+      toolNames: z3.array(z3.string())
+    }),
+    z3.object({
+      mode: z3.literal("deny"),
+      toolNames: z3.array(z3.string())
+    })
+  ]
+);
 var harnessV1BridgeStartBaseSchema = z3.object({
   type: z3.literal("start"),
   prompt: z3.string(),
   tools: z3.array(harnessV1BridgeToolWireSchema).optional(),
   model: z3.string().optional(),
   debug: harnessV1DebugConfigSchema.optional(),
-  permissionMode: harnessV1BridgePermissionModeSchema.optional()
+  permissionMode: harnessV1BridgePermissionModeSchema.optional(),
+  builtinToolFiltering: harnessV1BridgeBuiltinToolFilteringSchema.optional()
 });
 var harnessV1BridgeHelloSchema = z3.object({
   type: z3.literal("bridge-hello"),
@@ -855,6 +994,9 @@ export {
   classifyDiskLog,
   getAiGatewayAuthFromEnv,
   markBridgeStarting,
-  waitForBridgeReady
+  resolveSandboxHomeDir,
+  shellQuote,
+  waitForBridgeReady,
+  writeSkills
 };
 //# sourceMappingURL=index.js.map