@ai-sdk/harness 1.0.106 → 1.0.108

package/dist/index.d.ts

@@ -472,6 +472,12 @@ type HarnessV1PendingToolResult = {
     readonly toolName: string;
     readonly input: string;
     readonly providerOptions?: ProviderOptions;
+    /** Executed while suspending; submit on resume without running the tool again. */
+    readonly completedResult?: {
+        readonly output: unknown;
+        readonly isError?: boolean;
+        readonly toolResult?: ToolResultPart;
+    };
 };
 /**
  * Framework-owned settings captured when a turn begins. The same settings are

package/dist/utils/index.d.ts

@@ -240,9 +240,70 @@ declare function getAiGatewayAuthFromEnv({ env, }: {
  * process environment for authentication discovery.
  */
 type HarnessV1AuthenticationEnvironment = Readonly<Record<string, string>>;
+/**
+ * Authentication options shared by harness adapters. Adapter choices must be
+ * a non-empty union of concrete string values.
+ */
+type HarnessV1Authentication<ADAPTER_CHOICES extends string = 'direct'> = [
+    ADAPTER_CHOICES
+] extends [never] ? never : string extends ADAPTER_CHOICES ? never : 'auto' | 'ai-gateway' | ADAPTER_CHOICES | HarnessV1AuthenticationEnvironment;
 
 declare function isHarnessAuthenticationEnvironment(value: unknown): value is HarnessV1AuthenticationEnvironment;
 
+declare function parseJwtPayload({ token, }: {
+    token: string;
+}): Promise<Readonly<Record<string, unknown>> | undefined>;
+declare function getJwtExpiresAt({ token, }: {
+    token: string;
+}): Promise<number | undefined>;
+
+declare function readLinuxSecretServicePassword({ attributes, }: {
+    attributes: Readonly<Record<string, string>>;
+}): Promise<string | undefined>;
+
+declare function readMacOSKeychainPassword({ service, account, }: {
+    service: string;
+    account: string;
+}): Promise<string | undefined>;
+
+declare function shouldResolveNativeSubscription({ auth, env, hasDirectCredential, }: {
+    auth: Extract<HarnessV1Authentication, string> | undefined;
+    env: Readonly<Record<string, string | undefined>>;
+    hasDirectCredential: boolean;
+}): boolean;
+
+declare function readWindowsCredentialManagerPassword({ targetName, }: {
+    targetName: string;
+}): Promise<string | undefined>;
+
+type OAuthCredential = {
+    readonly accessToken: string;
+    readonly refreshToken: string;
+    readonly expiresAt: number;
+};
+type RefreshOAuthAccessTokenResult = {
+    readonly accessToken: string;
+    readonly expiresAt: number;
+    readonly refreshToken?: string;
+};
+declare function isAccessTokenExpiringSoon({ expiresAt, now, refreshWindowMs, }: {
+    readonly expiresAt: number;
+    readonly now?: number;
+    readonly refreshWindowMs?: number;
+}): boolean;
+declare function refreshOAuthAccessToken({ tokenUrl, clientId, refreshToken, requestFormat, headers, fetch: fetchImplementation, }: {
+    readonly tokenUrl: string;
+    readonly clientId: string;
+    readonly refreshToken: string;
+    readonly requestFormat?: 'json' | 'form';
+    readonly headers?: Record<string, string>;
+    readonly fetch?: typeof globalThis.fetch;
+}): Promise<RefreshOAuthAccessTokenResult>;
+
+declare function isMacOS(platform: NodeJS.Platform): boolean;
+declare function isLinux(platform: NodeJS.Platform): boolean;
+declare function isWindows(platform: NodeJS.Platform): boolean;
+
 /**
  * Connection details for a sandbox-exposed port. Headers are scoped to the
  * returned URL and must be included when opening the connection.
@@ -639,4 +700,4 @@ declare function resolveSandboxDefaultWorkingDirectory({ sandboxSession, abortSi
 
 declare function getRestrictedSandboxSession(sandboxSession: HarnessV1NetworkSandboxSession | Experimental_SandboxSession): Experimental_SandboxSession;
 
-export { type BridgeReadyErrorContext, type BridgeReadySource, type DiskLogRecoveryMode, type Experimental_BridgeUserMessageRequest, type Experimental_BridgeUserMessageResponse, type Experimental_BridgeUserMessageSubmitter, SandboxChannel, type SandboxChannelDebugEvent, type SandboxChannelOptions, type SandboxChannelReconnectOptions, type SkillFilePathMode, type WaitForBridgeReadyOptions, type WaitForBridgeReadyResult, type WriteInstructionsOptions, type WriteInstructionsResult, type WriteSkillsOptions, type WriteSkillsResult, applyCredentialForwarding, classifyDiskLog, createBridgeErrorHandler, createBridgeStartupError, createBridgeToken, createCredentialRequestTransformation, createReadBridgeAsset, createSandboxCredentialEnvironment, drainBridgeProcessStream, experimental_createBridgeUserMessageSubmitter, formatBridgeError, forwardBridgeProcessStream, generateSandboxCredentialPlaceholder, getAiGatewayAuthFromEnv, getRestrictedSandboxSession, isHarnessAuthenticationEnvironment, isSandboxCredentialPlaceholder, logBridgeError, markBridgeStarting, maskSandboxCredentials, resolveSandboxDefaultWorkingDirectory, resolveSandboxHomeDir, shellQuote, waitForBridgeReady, warnCredentialBrokeringUnavailable, withBridgeToken, writeInstructions, writeSkills };
+export { type BridgeReadyErrorContext, type BridgeReadySource, type DiskLogRecoveryMode, type Experimental_BridgeUserMessageRequest, type Experimental_BridgeUserMessageResponse, type Experimental_BridgeUserMessageSubmitter, type OAuthCredential, type RefreshOAuthAccessTokenResult, SandboxChannel, type SandboxChannelDebugEvent, type SandboxChannelOptions, type SandboxChannelReconnectOptions, type SkillFilePathMode, type WaitForBridgeReadyOptions, type WaitForBridgeReadyResult, type WriteInstructionsOptions, type WriteInstructionsResult, type WriteSkillsOptions, type WriteSkillsResult, applyCredentialForwarding, classifyDiskLog, createBridgeErrorHandler, createBridgeStartupError, createBridgeToken, createCredentialRequestTransformation, createReadBridgeAsset, createSandboxCredentialEnvironment, drainBridgeProcessStream, experimental_createBridgeUserMessageSubmitter, formatBridgeError, forwardBridgeProcessStream, generateSandboxCredentialPlaceholder, getAiGatewayAuthFromEnv, getJwtExpiresAt, getRestrictedSandboxSession, isAccessTokenExpiringSoon, isHarnessAuthenticationEnvironment, isLinux, isMacOS, isSandboxCredentialPlaceholder, isWindows, logBridgeError, markBridgeStarting, maskSandboxCredentials, parseJwtPayload, readLinuxSecretServicePassword, readMacOSKeychainPassword, readWindowsCredentialManagerPassword, refreshOAuthAccessToken, resolveSandboxDefaultWorkingDirectory, resolveSandboxHomeDir, shellQuote, shouldResolveNativeSubscription, waitForBridgeReady, warnCredentialBrokeringUnavailable, withBridgeToken, writeInstructions, writeSkills };

package/dist/utils/index.js

@@ -450,6 +450,229 @@ function isHarnessAuthenticationEnvironment(value) {
   return true;
 }
 
+// src/utils/native-subscription/jwt.ts
+import { isRecord, safeParseJSON as safeParseJSON3 } from "@ai-sdk/provider-utils";
+async function parseJwtPayload({
+  token
+}) {
+  const segments = token.split(".");
+  if (segments.length !== 3) return void 0;
+  try {
+    const parsed = await safeParseJSON3({
+      text: Buffer.from(segments[1], "base64url").toString("utf8")
+    });
+    return parsed.success && isRecord(parsed.value) ? parsed.value : void 0;
+  } catch (e) {
+    return void 0;
+  }
+}
+async function getJwtExpiresAt({
+  token
+}) {
+  const payload = await parseJwtPayload({ token });
+  const expiresAt = payload == null ? void 0 : payload.exp;
+  return typeof expiresAt === "number" && Number.isFinite(expiresAt) ? expiresAt * 1e3 : void 0;
+}
+
+// src/utils/native-subscription/linux-secret-service.ts
+import { execFile } from "child_process";
+import { promisify } from "util";
+var execFileAsync = promisify(execFile);
+async function readLinuxSecretServicePassword({
+  attributes
+}) {
+  try {
+    const result = await execFileAsync("secret-tool", [
+      "lookup",
+      ...Object.entries(attributes).flatMap(([attribute, value]) => [
+        attribute,
+        value
+      ])
+    ]);
+    return result.stdout || void 0;
+  } catch (e) {
+    return void 0;
+  }
+}
+
+// src/utils/native-subscription/macos-keychain.ts
+import { execFile as execFile2 } from "child_process";
+import { promisify as promisify2 } from "util";
+var execFileAsync2 = promisify2(execFile2);
+async function readMacOSKeychainPassword({
+  service,
+  account
+}) {
+  try {
+    const result = await execFileAsync2("/usr/bin/security", [
+      "find-generic-password",
+      "-s",
+      service,
+      "-a",
+      account,
+      "-w"
+    ]);
+    return result.stdout.trim() || void 0;
+  } catch (e) {
+    return void 0;
+  }
+}
+
+// src/utils/native-subscription/should-resolve-native.ts
+function shouldResolveNativeSubscription({
+  auth,
+  env,
+  hasDirectCredential
+}) {
+  return auth !== "ai-gateway" && !hasDirectCredential && (auth === "direct" || getAiGatewayAuthFromEnv({ env }).apiKey == null);
+}
+
+// src/utils/native-subscription/windows-credential-manager.ts
+import { execFile as execFile3 } from "child_process";
+import { promisify as promisify3 } from "util";
+var execFileAsync3 = promisify3(execFile3);
+var credentialManagerSource = `
+using System;
+using System.Runtime.InteropServices;
+using System.Text;
+public static class AISDKCredentialManager {
+  [StructLayout(LayoutKind.Sequential, CharSet = CharSet.Unicode)]
+  public struct Credential {
+    public UInt32 Flags; public UInt32 Type; public string TargetName;
+    public string Comment; public System.Runtime.InteropServices.ComTypes.FILETIME LastWritten;
+    public UInt32 CredentialBlobSize; public IntPtr CredentialBlob;
+    public UInt32 Persist; public UInt32 AttributeCount; public IntPtr Attributes;
+    public string TargetAlias; public string UserName;
+  }
+  [DllImport("advapi32.dll", EntryPoint = "CredReadW", CharSet = CharSet.Unicode, SetLastError = true)]
+  static extern bool CredRead(string target, UInt32 type, UInt32 flags, out IntPtr credential);
+  [DllImport("advapi32.dll", SetLastError = true)] static extern void CredFree(IntPtr credential);
+  public static string Read(string target) {
+    IntPtr pointer;
+    if (!CredRead(target, 1, 0, out pointer)) return null;
+    try {
+      Credential value = Marshal.PtrToStructure<Credential>(pointer);
+      byte[] bytes = new byte[value.CredentialBlobSize];
+      Marshal.Copy(value.CredentialBlob, bytes, 0, bytes.Length);
+      return Encoding.Unicode.GetString(bytes);
+    } finally { CredFree(pointer); }
+  }
+}`;
+async function readWindowsCredentialManagerPassword({
+  targetName
+}) {
+  try {
+    const result = await execFileAsync3(
+      "powershell.exe",
+      [
+        "-NoProfile",
+        "-NonInteractive",
+        "-Command",
+        `Add-Type -TypeDefinition $env:AI_SDK_WINDOWS_CREDENTIAL_MANAGER_SOURCE; $value = [AISDKCredentialManager]::Read($env:AI_SDK_WINDOWS_CREDENTIAL_MANAGER_TARGET); if ($null -ne $value) { [Console]::Out.Write($value) }`
+      ],
+      {
+        env: {
+          ...process.env,
+          AI_SDK_WINDOWS_CREDENTIAL_MANAGER_SOURCE: credentialManagerSource,
+          AI_SDK_WINDOWS_CREDENTIAL_MANAGER_TARGET: targetName
+        },
+        windowsHide: true
+      }
+    );
+    return result.stdout || void 0;
+  } catch (e) {
+    return void 0;
+  }
+}
+
+// src/utils/oauth-access-token.ts
+import { isRecord as isRecord2, safeParseJSON as safeParseJSON4 } from "@ai-sdk/provider-utils";
+var DEFAULT_REFRESH_WINDOW_MS = 3e5;
+function isAccessTokenExpiringSoon({
+  expiresAt,
+  now = Date.now(),
+  refreshWindowMs = DEFAULT_REFRESH_WINDOW_MS
+}) {
+  return expiresAt <= now + refreshWindowMs;
+}
+async function refreshOAuthAccessToken({
+  tokenUrl,
+  clientId,
+  refreshToken,
+  requestFormat = "form",
+  headers,
+  fetch: fetchImplementation = globalThis.fetch
+}) {
+  const values = {
+    grant_type: "refresh_token",
+    client_id: clientId,
+    refresh_token: refreshToken
+  };
+  const response = await fetchImplementation(tokenUrl, {
+    method: "POST",
+    headers: {
+      "content-type": requestFormat === "json" ? "application/json" : "application/x-www-form-urlencoded",
+      ...headers
+    },
+    body: requestFormat === "json" ? JSON.stringify(values) : new URLSearchParams(values).toString()
+  });
+  const responseText = await response.text();
+  if (!response.ok) {
+    throw new Error(
+      `OAuth access token refresh failed with status ${response.status}.`
+    );
+  }
+  const parsed = await safeParseJSON4({ text: responseText });
+  if (!parsed.success || !isRecord2(parsed.value)) {
+    throw new Error("OAuth access token refresh returned invalid JSON.");
+  }
+  const accessToken = parsed.value.access_token;
+  if (typeof accessToken !== "string" || accessToken.length === 0) {
+    throw new Error(
+      "OAuth access token refresh response is missing access_token."
+    );
+  }
+  const expiresAt = await resolveExpiresAt({
+    accessToken,
+    expiresIn: parsed.value.expires_in
+  });
+  const rotatedRefreshToken = parsed.value.refresh_token;
+  if (rotatedRefreshToken != null && (typeof rotatedRefreshToken !== "string" || rotatedRefreshToken.length === 0)) {
+    throw new Error(
+      "OAuth access token refresh response contains an invalid refresh_token."
+    );
+  }
+  return {
+    accessToken,
+    expiresAt,
+    ...typeof rotatedRefreshToken === "string" ? { refreshToken: rotatedRefreshToken } : {}
+  };
+}
+async function resolveExpiresAt({
+  accessToken,
+  expiresIn
+}) {
+  if (typeof expiresIn === "number" && Number.isFinite(expiresIn) && expiresIn >= 0) {
+    return Date.now() + expiresIn * 1e3;
+  }
+  const jwtExpiresAt = await getJwtExpiresAt({ token: accessToken });
+  if (jwtExpiresAt != null) return jwtExpiresAt;
+  throw new Error(
+    "OAuth access token refresh response does not include a usable expiry."
+  );
+}
+
+// src/utils/os.ts
+function isMacOS(platform) {
+  return platform === "darwin";
+}
+function isLinux(platform) {
+  return platform === "linux";
+}
+function isWindows(platform) {
+  return platform === "win32";
+}
+
 // src/utils/sandbox-credential-brokering.ts
 import { randomBytes } from "crypto";
 var SANDBOX_CREDENTIAL_PLACEHOLDER_PREFIX = "aisdkhc_";
@@ -576,7 +799,7 @@ function shellQuote(value) {
 // src/utils/write-instructions.ts
 import path2 from "path";
 import {
-  safeParseJSON as safeParseJSON3
+  safeParseJSON as safeParseJSON5
 } from "@ai-sdk/provider-utils";
 var INSTRUCTIONS_METADATA_VERSION = 1;
 async function writeInstructions({
@@ -766,7 +989,7 @@ async function readInstructionsMetadata({
     abortSignal
   });
   if (content == null) return void 0;
-  const parsed = await safeParseJSON3({ text: content });
+  const parsed = await safeParseJSON5({ text: content });
   if (!parsed.success || !isInstructionsMetadata(parsed.value)) {
     throw new Error(
       `Invalid AI SDK harness instructions metadata: ${metadataPath}`
@@ -843,7 +1066,7 @@ async function runSandboxCommand({
 import { createHash } from "crypto";
 import path3 from "path";
 import {
-  safeParseJSON as safeParseJSON4
+  safeParseJSON as safeParseJSON6
 } from "@ai-sdk/provider-utils";
 var SKILLS_MANIFEST_FILENAME = ".ai-sdk-harness-skills.json";
 var SKILLS_MANIFEST_VERSION = 1;
@@ -1056,7 +1279,7 @@ async function readSkillsManifest({
     abortSignal
   });
   if (content == null) return void 0;
-  const parsed = await safeParseJSON4({ text: content });
+  const parsed = await safeParseJSON6({ text: content });
   if (!parsed.success || !isSkillsManifest(parsed.value)) {
     throw new Error(`Invalid AI SDK harness skills manifest: ${manifestPath}`);
   }
@@ -1258,7 +1481,7 @@ function resolveSkillsRootDir({
 
 // src/utils/bridge-ready.ts
 import {
-  safeParseJSON as safeParseJSON5
+  safeParseJSON as safeParseJSON7
 } from "@ai-sdk/provider-utils";
 import { z as z4 } from "zod/v4";
 
@@ -1750,7 +1973,7 @@ async function waitForBridgeReady({
       if (value === void 0) continue;
       for (const line of decoder.push(value)) {
         pushTail({ lines: stdoutTail, line });
-        const parsed = await safeParseJSON5({
+        const parsed = await safeParseJSON7({
           text: line,
           schema: harnessV1BridgeReadySchema
         });
@@ -1787,7 +2010,7 @@ async function readBridgeMetaReady({
     })
   ).catch(() => null);
   if (raw == null) return void 0;
-  const parsed = await safeParseJSON5({ text: raw, schema: bridgeMetaSchema });
+  const parsed = await safeParseJSON7({ text: raw, schema: bridgeMetaSchema });
   if (!parsed.success) return void 0;
   if (parsed.value.type !== bridgeType) return void 0;
   if (parsed.value.state !== "waiting") return void 0;
@@ -2072,15 +2295,26 @@ export {
   forwardBridgeProcessStream,
   generateSandboxCredentialPlaceholder,
   getAiGatewayAuthFromEnv,
+  getJwtExpiresAt,
   getRestrictedSandboxSession,
+  isAccessTokenExpiringSoon,
   isHarnessAuthenticationEnvironment,
+  isLinux,
+  isMacOS,
   isSandboxCredentialPlaceholder,
+  isWindows,
   logBridgeError,
   markBridgeStarting,
   maskSandboxCredentials,
+  parseJwtPayload,
+  readLinuxSecretServicePassword,
+  readMacOSKeychainPassword,
+  readWindowsCredentialManagerPassword,
+  refreshOAuthAccessToken,
   resolveSandboxDefaultWorkingDirectory,
   resolveSandboxHomeDir,
   shellQuote,
+  shouldResolveNativeSubscription,
   waitForBridgeReady,
   warnCredentialBrokeringUnavailable,
   withBridgeToken,