@ai-sdk/harness 1.0.121 → 1.0.123

package/CHANGELOG.md

@@ -1,5 +1,35 @@
 # @ai-sdk/harness
 
+## 1.0.123
+
+### Patch Changes
+
+- 9c8c0c1: feat (harness): keep harness-generated state out of the sandbox workspace. The framework and every bridge adapter now resolve their generated state — bootstrap recipes and their dependencies (`.harness-bootstrap/…`) and per-session run state (`.agent-runs/…`) — through the new `harnessV1StateDirectory()` helper, which always resolves to a fixed directory (`~/.ai-sdk-harness`) under the sandbox's own HOME, never the sandbox's working directory. This is not configurable: every sandbox provider gets the same layout, so harness infrastructure never lands in a user-owned workspace. This changes the on-disk layout for every provider (a breaking change, acceptable given the experimental nature of this API) — sandboxes bootstrapped under the previous layout re-bootstrap once under the new path.
+- 771e74b: chore: enable dead code lint rules
+- 7115a3f: fix(harness): preserve buffered SandboxChannel event order without blocking selective listeners and forward Claude Code compaction events
+- Updated dependencies [dcdb011]
+- Updated dependencies [8f72832]
+- Updated dependencies [fe07867]
+- Updated dependencies [b74c0cb]
+- Updated dependencies [a4b0940]
+- Updated dependencies [2693319]
+- Updated dependencies [c93ee90]
+- Updated dependencies [771e74b]
+  - ai@7.0.113
+  - @ai-sdk/provider-utils@5.0.47
+
+## 1.0.122
+
+### Patch Changes
+
+- Updated dependencies [9a98fd9]
+- Updated dependencies [a0553d6]
+- Updated dependencies [ffb0e76]
+- Updated dependencies [fde0d66]
+  - ai@7.0.112
+  - @ai-sdk/provider@4.0.18
+  - @ai-sdk/provider-utils@5.0.46
+
 ## 1.0.121
 
 ### Patch Changes

package/dist/agent/index.d.ts

@@ -8,7 +8,7 @@ import { JSONSchema7, JSONValue, LanguageModelV4StreamPart, LanguageModelV4ToolC
 /**
  * One file to write into the sandbox as part of an adapter's bootstrap recipe.
  * Absolute paths are used as-is. Relative paths are resolved against the
- * sandbox's default working directory. Paths should live under
+ * harness state directory (`$HOME/.ai-sdk-harness`). Paths should live under
  * {@link HarnessV1Bootstrap.bootstrapDir}.
  */
 interface HarnessV1BootstrapFile {
@@ -37,10 +37,10 @@ interface HarnessV1Bootstrap {
     readonly harnessId: string;
     /**
      * Path inside the sandbox where this recipe writes its state. Absolute paths
-     * are used as-is. Relative paths are resolved against the sandbox's default
-     * working directory. The marker file lives directly under it. Files
-     * declared in {@link files} should also use this prefix so an adapter upgrade
-     * can sweep stale state by clearing the directory.
+     * are used as-is. Relative paths are resolved against the harness state
+     * directory (`$HOME/.ai-sdk-harness`). The marker file lives directly under
+     * it. Files declared in {@link files} should also use this prefix so an
+     * adapter upgrade can sweep stale state by clearing the directory.
      */
     readonly bootstrapDir: string;
     /** Files to write into the sandbox before any command runs. */

package/dist/agent/index.js

@@ -38,6 +38,34 @@ var HarnessCapabilityUnsupportedError = class extends (_b2 = HarnessError, _a2 =
   }
 };
 
+// src/v1/harness-v1-network-sandbox-session.ts
+import { posix } from "path";
+var HARNESS_V1_STATE_DIRECTORY_NAME = ".ai-sdk-harness";
+function harnessStateDirectoryPath({
+  sandboxHomeDir
+}) {
+  return posix.join(sandboxHomeDir, HARNESS_V1_STATE_DIRECTORY_NAME);
+}
+
+// src/v1/harness-session-data-directory-path.ts
+import { posix as posix2 } from "path";
+function encodeHarnessPathSegment(value) {
+  const encoded = encodeURIComponent(value);
+  if (encoded === "") return "%";
+  if (encoded === ".") return "%2E";
+  if (encoded === "..") return "%2E%2E";
+  return encoded;
+}
+
+// src/v1/harness-v1-tool-filtering.ts
+function isHarnessV1BuiltinToolIncluded(input) {
+  if (input.toolFiltering == null) return true;
+  return input.toolFiltering.mode === "allow" ? input.toolFiltering.toolNames.includes(input.toolName) : !input.toolFiltering.toolNames.includes(input.toolName);
+}
+function getHarnessV1BuiltinToolFilteringDenialReason(input) {
+  return `Tool '${input.toolName}' is inactive due to the HarnessAgent tool filtering policy.`;
+}
+
 // src/agent/harness-agent.ts
 import {
   asArray as asArray2,
@@ -115,15 +143,6 @@ async function validateLifecycleStateData(input) {
   };
 }
 
-// src/v1/harness-v1-tool-filtering.ts
-function isHarnessV1BuiltinToolIncluded(input) {
-  if (input.toolFiltering == null) return true;
-  return input.toolFiltering.mode === "allow" ? input.toolFiltering.toolNames.includes(input.toolName) : !input.toolFiltering.toolNames.includes(input.toolName);
-}
-function getHarnessV1BuiltinToolFilteringDenialReason(input) {
-  return `Tool '${input.toolName}' is inactive due to the HarnessAgent tool filtering policy.`;
-}
-
 // src/agent/internal/to-harness-stream.ts
 async function toHarnessStream(options) {
   let controller;
@@ -764,9 +783,7 @@ var HarnessStreamTextResult = class {
         this.currentStepContent.push({
           ...part
         });
-        return;
       default:
-        return;
     }
   }
 };
@@ -3251,7 +3268,7 @@ function collectHarnessAgentToolResultContinuations(input) {
 }
 
 // src/agent/internal/bootstrap-recipe.ts
-import { posix } from "path";
+import { posix as posix3 } from "path";
 var BOOTSTRAP_SCHEMA_VERSION = 1;
 async function hashHarnessBootstrap(recipe) {
   const encoder = new TextEncoder();
@@ -3260,6 +3277,7 @@ async function hashHarnessBootstrap(recipe) {
     chunks.push(encoder.encode(value));
     chunks.push(encoder.encode("\0"));
   };
+  pushString(harnessStateDirectoryPath({ sandboxHomeDir: "$HOME" }));
   pushString(recipe.harnessId);
   pushString(recipe.bootstrapDir);
   const sortedFiles = [...recipe.files].sort(
@@ -3289,12 +3307,12 @@ async function hashHarnessBootstrap(recipe) {
 function bootstrapMarkerPath({
   recipe,
   identity,
-  defaultWorkingDirectory
+  stateDirectory
 }) {
-  return posix.join(
+  return posix3.join(
     resolveBootstrapPath({
       path: recipe.bootstrapDir,
-      defaultWorkingDirectory
+      stateDirectory
     }),
     `.bootstrap-${identity}.ok`
   );
@@ -3303,13 +3321,13 @@ async function applyBootstrapRecipe({
   session,
   recipe,
   identity,
-  defaultWorkingDirectory,
+  stateDirectory,
   abortSignal
 }) {
   const markerPath = bootstrapMarkerPath({
     recipe,
     identity,
-    defaultWorkingDirectory
+    stateDirectory
   });
   const existingMarker = await session.readTextFile({
     path: markerPath,
@@ -3320,11 +3338,10 @@ async function applyBootstrapRecipe({
   }
   const bootstrapDir = resolveBootstrapPath({
     path: recipe.bootstrapDir,
-    defaultWorkingDirectory
+    stateDirectory
   });
   const mkdirResult = await session.run({
     command: 'mkdir -p "$BOOTSTRAP_DIR"',
-    workingDirectory: defaultWorkingDirectory,
     env: { BOOTSTRAP_DIR: bootstrapDir },
     abortSignal
   });
@@ -3338,7 +3355,7 @@ ${mkdirResult.stderr || mkdirResult.stdout}`
     await session.writeTextFile({
       path: resolveBootstrapPath({
         path: file.path,
-        defaultWorkingDirectory
+        stateDirectory
       }),
       content: file.content,
       abortSignal
@@ -3364,17 +3381,17 @@ ${result.stderr || result.stdout}`
   });
 }
 function resolveBootstrapPath({
-  path,
-  defaultWorkingDirectory
+  path: path2,
+  stateDirectory
 }) {
-  return posix.isAbsolute(path) ? path : posix.resolve(defaultWorkingDirectory, path);
+  return posix3.isAbsolute(path2) ? path2 : posix3.resolve(stateDirectory, path2);
 }
 
 // src/agent/internal/sandbox-bootstrap.ts
-import { posix as posix3 } from "path";
+import { posix as posix5 } from "path";
 
 // src/utils/resolve-sandbox-default-working-directory.ts
-import { posix as posix2 } from "path";
+import { posix as posix4 } from "path";
 async function resolveSandboxDefaultWorkingDirectory({
   sandboxSession,
   abortSignal
@@ -3392,7 +3409,7 @@ async function resolveSandboxDefaultWorkingDirectory({
     );
   }
   const cwd = result.stdout.trim();
-  if (!posix2.isAbsolute(cwd)) {
+  if (!posix4.isAbsolute(cwd)) {
     throw new Error(
       `Failed to resolve sandbox default working directory: expected an absolute path, got ${JSON.stringify(cwd)}.`
     );
@@ -3400,6 +3417,25 @@ async function resolveSandboxDefaultWorkingDirectory({
   return cwd === "/" ? cwd : cwd.replace(/\/+$/, "");
 }
 
+// src/utils/sandbox-home-dir.ts
+import path from "path";
+async function resolveSandboxHomeDir({
+  sandbox,
+  abortSignal
+}) {
+  const result = await sandbox.run({
+    command: 'printf "%s" "$HOME"',
+    abortSignal
+  });
+  const homeDir = result.stdout.trim();
+  if (result.exitCode !== 0 || !homeDir || !path.posix.isAbsolute(homeDir)) {
+    throw new Error(
+      `Unable to resolve sandbox HOME directory: ${result.stderr || result.stdout}`
+    );
+  }
+  return homeDir;
+}
+
 // src/agent/internal/sandbox-bootstrap.ts
 var SANDBOX_BOOTSTRAP_IDENTITY_VERSION = 1;
 function validateSandboxBootstrapSettings(settings) {
@@ -3426,10 +3462,10 @@ function normalizeSandboxWorkDir(workDir) {
       "HarnessAgent: `sandboxConfig.workDir` must use POSIX path separators."
     );
   }
-  if (posix3.isAbsolute(workDir)) {
+  if (posix5.isAbsolute(workDir)) {
     throw new Error("HarnessAgent: `sandboxConfig.workDir` must be relative.");
   }
-  const normalized = posix3.normalize(workDir);
+  const normalized = posix5.normalize(workDir);
   if (normalized === "." || normalized === ".." || normalized.startsWith("../")) {
     throw new Error(
       "HarnessAgent: `sandboxConfig.workDir` must stay inside the sandbox default working directory."
@@ -3445,7 +3481,7 @@ function resolveSessionWorkDir({
 }) {
   return joinSandboxPath({
     base: defaultWorkingDirectory,
-    path: workDir != null ? workDir : `${harnessId}-${sessionId}`
+    path: workDir != null ? workDir : `${encodeHarnessPathSegment(harnessId)}-${encodeHarnessPathSegment(sessionId)}`
   });
 }
 async function createSandboxBootstrapPlan({
@@ -3488,20 +3524,30 @@ async function runSandboxBootstrap({
   abortSignal
 }) {
   if (recipe == null && onBootstrap == null) return;
-  const resolvedDefaultWorkingDirectory = defaultWorkingDirectory != null ? defaultWorkingDirectory : await resolveSandboxDefaultWorkingDirectory({
-    sandboxSession: session,
-    abortSignal
-  });
   if (recipe != null && recipeIdentity != null) {
     await applyBootstrapRecipe({
       session,
       recipe,
       identity: recipeIdentity,
-      defaultWorkingDirectory: resolvedDefaultWorkingDirectory,
+      // Harness infrastructure always lives under the sandbox's own HOME,
+      // never the working directory resolved below for the caller's own
+      // `onBootstrap` hook. Resolved directly from `session` — this runs
+      // from a provider's `onFirstCreate`, before a
+      // `HarnessV1NetworkSandboxSession` even exists.
+      stateDirectory: harnessStateDirectoryPath({
+        sandboxHomeDir: await resolveSandboxHomeDir({
+          sandbox: session,
+          abortSignal
+        })
+      }),
       abortSignal
     });
   }
   if (onBootstrap == null) return;
+  const resolvedDefaultWorkingDirectory = defaultWorkingDirectory != null ? defaultWorkingDirectory : await resolveSandboxDefaultWorkingDirectory({
+    sandboxSession: session,
+    abortSignal
+  });
   const bootstrapWorkDir = workDir == null ? resolvedDefaultWorkingDirectory : joinSandboxPath({
     base: resolvedDefaultWorkingDirectory,
     path: workDir
@@ -3561,9 +3607,9 @@ async function hashSandboxBootstrapIdentity({
 }
 function joinSandboxPath({
   base,
-  path
+  path: path2
 }) {
-  return posix3.join(base, path);
+  return posix5.join(base, path2);
 }
 
 // src/agent/internal/resolve-observability.ts
@@ -3829,7 +3875,14 @@ var HarnessAgent = class {
             session: toolSafeSandboxSession,
             recipe,
             identity: recipeIdentity,
-            defaultWorkingDirectory,
+            // Harness infrastructure always lives under the sandbox's own
+            // HOME, never the session's working directory.
+            stateDirectory: harnessStateDirectoryPath({
+              sandboxHomeDir: await resolveSandboxHomeDir({
+                sandbox: toolSafeSandboxSession,
+                abortSignal
+              })
+            }),
             abortSignal
           });
         } catch (err) {
@@ -3872,7 +3925,14 @@ var HarnessAgent = class {
               session: resumedSandboxSession.restricted(),
               recipe,
               identity: recipeIdentity,
-              defaultWorkingDirectory: resumedSandboxSession.defaultWorkingDirectory,
+              // Harness infrastructure always lives under the sandbox's own
+              // HOME, never the working directory.
+              stateDirectory: harnessStateDirectoryPath({
+                sandboxHomeDir: await resolveSandboxHomeDir({
+                  sandbox: resumedSandboxSession,
+                  abortSignal
+                })
+              }),
               abortSignal
             });
           } catch (err) {
@@ -3907,7 +3967,14 @@ var HarnessAgent = class {
               session: createdSandboxSession.restricted(),
               recipe: sandboxBootstrapPlan.recipe,
               identity: sandboxBootstrapPlan.recipeIdentity,
-              defaultWorkingDirectory: createdSandboxSession.defaultWorkingDirectory,
+              // Harness infrastructure always lives under the sandbox's own
+              // HOME, never the working directory.
+              stateDirectory: harnessStateDirectoryPath({
+                sandboxHomeDir: await resolveSandboxHomeDir({
+                  sandbox: createdSandboxSession,
+                  abortSignal
+                })
+              }),
               abortSignal
             });
           } catch (err) {
@@ -4147,7 +4214,6 @@ var HarnessAgent = class {
         };
       }
     }
-    return void 0;
   }
   /*
    * Reduce AI SDK input to the single user message the harness should run
@@ -4451,11 +4517,19 @@ async function prepareHarnessSandboxTemplate(options) {
   });
   try {
     if (bootstrapPlan.recipe != null && bootstrapPlan.recipeIdentity != null) {
+      const restrictedSession = sandboxSession.restricted();
       await applyBootstrapRecipe({
-        session: sandboxSession.restricted(),
+        session: restrictedSession,
         recipe: bootstrapPlan.recipe,
         identity: bootstrapPlan.recipeIdentity,
-        defaultWorkingDirectory: sandboxSession.defaultWorkingDirectory,
+        // Harness infrastructure always lives under the sandbox's own HOME,
+        // never the working directory.
+        stateDirectory: harnessStateDirectoryPath({
+          sandboxHomeDir: await resolveSandboxHomeDir({
+            sandbox: restrictedSession,
+            abortSignal
+          })
+        }),
         abortSignal
       });
     }
@@ -4485,7 +4559,7 @@ async function prepareSandboxForHarness(options) {
   const workDir = sandboxConfig.workDir == null ? void 0 : normalizeSandboxWorkDir(sandboxConfig.workDir);
   const recipeIdentities = {};
   const skippedHarnessIds = [];
-  let defaultWorkingDirectory;
+  let stateDirectory;
   for (const harness of harnesses) {
     const recipe = await ((_b4 = harness.getBootstrap) == null ? void 0 : _b4.call(harness, {
       abortSignal: options.abortSignal
@@ -4496,19 +4570,24 @@ async function prepareSandboxForHarness(options) {
     }
     const recipeIdentity = await hashHarnessBootstrap(recipe);
     recipeIdentities[harness.harnessId] = recipeIdentity;
-    defaultWorkingDirectory != null ? defaultWorkingDirectory : defaultWorkingDirectory = await resolveSandboxDefaultWorkingDirectory({
-      sandboxSession: options.session,
-      abortSignal: options.abortSignal
+    stateDirectory != null ? stateDirectory : stateDirectory = harnessStateDirectoryPath({
+      sandboxHomeDir: await resolveSandboxHomeDir({
+        sandbox: options.session,
+        abortSignal: options.abortSignal
+      })
     });
     await applyBootstrapRecipe({
       session: options.session,
       recipe,
       identity: recipeIdentity,
-      defaultWorkingDirectory,
+      stateDirectory,
       abortSignal: options.abortSignal
     });
   }
   if (sandboxConfig.onBootstrap != null) {
+    const defaultWorkingDirectory = await resolveSandboxDefaultWorkingDirectory(
+      { sandboxSession: options.session, abortSignal: options.abortSignal }
+    );
     await runSandboxBootstrap({
       session: options.session,
       workDir,
@@ -4604,7 +4683,7 @@ import { appendFileSync, mkdirSync } from "fs";
 function createFileReporter(options) {
   var _a4, _b4;
   const fileName = (_a4 = options.fileName) != null ? _a4 : "events.jsonl";
-  const path = `${options.dir}/${fileName}`;
+  const path2 = `${options.dir}/${fileName}`;
   const failOnly = (_b4 = options.failOnly) != null ? _b4 : false;
   const turns = /* @__PURE__ */ new Map();
   let lastOpenCallId;
@@ -4632,7 +4711,7 @@ function createFileReporter(options) {
         mkdirSync(options.dir, { recursive: true });
         dirReady = true;
       }
-      appendFileSync(path, lines.map((l) => JSON.stringify(l)).join("\n") + "\n");
+      appendFileSync(path2, lines.map((l) => JSON.stringify(l)).join("\n") + "\n");
     } catch (e) {
     }
   };