@ai-sdk/harness 1.0.121 → 1.0.123

package/dist/bridge/index.js

@@ -549,7 +549,6 @@ async function runBridge(options) {
         const data = await onStop?.() ?? {};
         sendControl(ws, { type: "bridge-stop", data });
         drainThenExit(ws, 1e3, "stop");
-        return;
       }
     }
   };

package/dist/bridge/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/bridge/index.ts","../../src/bridge/harness-bridge-capability-unsupported-error.ts"],"sourcesContent":["// Shared in-sandbox bridge runtime. Adapter `bridge.mjs` bundles re-bundle\n// this module (tsup inlines it; `ws` stays external and resolves from the\n// sandbox-installed node_modules). It owns everything generic to the bridge\n// transport — the WebSocket server, token auth, the in-memory event log +\n// monotonic `seq`, resume replay, and the lifecycle/meta files. Any number of\n// hosts may be connected; exactly one of them owns the event stream, and\n// `start`/`resume` transfer that ownership. The adapter supplies only `onStart`\n// (drive its CLI/SDK and translate to wire events) and lifecycle cleanup hooks.\n\nimport { appendFile, mkdir, writeFile } from 'node:fs/promises';\nimport { existsSync, readFileSync } from 'node:fs';\nimport { randomUUID } from 'node:crypto';\nimport { env as procEnv, pid, stdout } from 'node:process';\nimport type { ToolResultPart } from '@ai-sdk/provider-utils';\nimport { WebSocketServer, type WebSocket } from 'ws';\n\nexport { HarnessBridgeCapabilityUnsupportedError } from './harness-bridge-capability-unsupported-error';\n\nexport type BridgeState = 'init' | 'waiting' | 'running' | 'draining' | 'done';\n\n/** Outbound turn event the adapter emits. `seq` is added by the runtime. */\nexport type BridgeEvent = Record<string, unknown> & { type: string };\n\nexport type BridgeDebugLevel = 'error' | 'warn' | 'info' | 'debug' | 'trace';\n\nexport interface Experimental_BridgeUserMessage {\n  readonly messageId: string;\n  readonly text: string;\n  accept(): void;\n  reject(error: unknown): void;\n}\n\nexport interface Experimental_BridgeUserMessageQueue extends AsyncIterable<Experimental_BridgeUserMessage> {\n  readonly pendingCount: number;\n  close(error?: unknown): void;\n}\n\ntype InternalBridgeUserMessageQueue = Experimental_BridgeUserMessageQueue & {\n  enqueue(input: { messageId: string; text: string }): void;\n};\n\ntype BridgeUserMessageResponse = {\n  type: 'user-message-response';\n  messageId: string;\n  accepted: boolean;\n  error?: { message: string };\n};\n\n/**\n * Per-session diagnostics config. The host resolves it from settings +\n * env and sends it on `start.debug`; the bridge gates console capture and\n * structured `debug-event`s on it. When disabled, nothing is captured or\n * emitted and no `seq` is consumed.\n */\nexport interface BridgeDebugConfig {\n  enabled?: boolean;\n  level?: BridgeDebugLevel;\n  subsystems?: string[];\n}\n\nconst DEBUG_LEVEL_WEIGHT: Record<BridgeDebugLevel, number> = {\n  error: 0,\n  warn: 1,\n  info: 2,\n  debug: 3,\n  trace: 4,\n};\n\n/** Exact-or-dotted-prefix subsystem match (`'bridge'` matches `'bridge.turn'`). */\nfunction subsystemMatches(\n  filters: string[] | undefined,\n  subsystem: string,\n): boolean {\n  if (!filters || filters.length === 0) return true;\n  return filters.some(\n    filter => subsystem === filter || subsystem.startsWith(`${filter}.`),\n  );\n}\n\nfunction formatBridgeError(err: unknown): {\n  name?: string;\n  message: string;\n  stack?: string;\n} {\n  if (err instanceof Error) {\n    return { name: err.name, message: err.message, stack: err.stack };\n  }\n  if (typeof err === 'string') {\n    return { message: err };\n  }\n  if (err !== null && typeof err === 'object') {\n    try {\n      return { message: JSON.stringify(err) };\n    } catch {}\n  }\n  return { message: String(err) };\n}\n\nfunction createBridgeUserMessageQueue(options: {\n  respond(response: BridgeUserMessageResponse): void;\n}): InternalBridgeUserMessageQueue {\n  const messages: Experimental_BridgeUserMessage[] = [];\n  const waiters: Array<\n    (result: IteratorResult<Experimental_BridgeUserMessage>) => void\n  > = [];\n  const entries = new Map<\n    string,\n    {\n      response?: BridgeUserMessageResponse;\n      reject(error: unknown): void;\n    }\n  >();\n  let closed = false;\n  let pendingCount = 0;\n\n  const enqueue = (input: { messageId: string; text: string }): void => {\n    const existing = entries.get(input.messageId);\n    if (existing != null) {\n      if (existing.response != null) {\n        options.respond(existing.response);\n      }\n      return;\n    }\n\n    let settled = false;\n    const settle = (response: BridgeUserMessageResponse): void => {\n      if (settled) return;\n      settled = true;\n      pendingCount--;\n      const entry = entries.get(input.messageId);\n      if (entry != null) entry.response = response;\n      options.respond(response);\n    };\n    const message: Experimental_BridgeUserMessage = {\n      messageId: input.messageId,\n      text: input.text,\n      accept: () => {\n        settle({\n          type: 'user-message-response',\n          messageId: input.messageId,\n          accepted: true,\n        });\n      },\n      reject: error => {\n        settle({\n          type: 'user-message-response',\n          messageId: input.messageId,\n          accepted: false,\n          error: { message: formatBridgeError(error).message },\n        });\n      },\n    };\n    entries.set(input.messageId, {\n      reject: message.reject,\n    });\n    pendingCount++;\n\n    if (closed) {\n      message.reject(\n        new Error('The bridge turn is no longer accepting user messages.'),\n      );\n      return;\n    }\n\n    const waiter = waiters.shift();\n    if (waiter != null) {\n      waiter({ done: false, value: message });\n    } else {\n      messages.push(message);\n    }\n  };\n\n  const close = (error?: unknown): void => {\n    if (closed) return;\n    closed = true;\n    const reason =\n      error ??\n      new Error('The bridge turn ended before accepting the user message.');\n    for (const entry of entries.values()) {\n      if (entry.response == null) entry.reject(reason);\n    }\n    messages.length = 0;\n    while (waiters.length > 0) {\n      waiters.shift()!({ done: true, value: undefined });\n    }\n  };\n\n  return {\n    get pendingCount() {\n      return pendingCount;\n    },\n    enqueue,\n    close,\n    [Symbol.asyncIterator]() {\n      return {\n        next: () => {\n          const message = messages.shift();\n          if (message != null) {\n            return Promise.resolve({ done: false as const, value: message });\n          }\n          if (closed) {\n            return Promise.resolve({\n              done: true as const,\n              value: undefined,\n            });\n          }\n          return new Promise<IteratorResult<Experimental_BridgeUserMessage>>(\n            resolve => {\n              waiters.push(resolve);\n            },\n          );\n        },\n      };\n    },\n  };\n}\n\nfunction parseEnvList(value: string | undefined): string[] | undefined {\n  if (!value) return undefined;\n  const items = value\n    .split(',')\n    .map(item => item.trim())\n    .filter(Boolean);\n  return items.length > 0 ? items : undefined;\n}\n\nconst ENV_TRUTHY = new Set(['1', 'true', 'yes', 'on']);\n\n/**\n * Per-turn surface handed to {@link RunBridgeOptions.onStart}. The adapter\n * drives its runtime against these primitives; the runtime owns the transport.\n */\nexport interface BridgeTurn {\n  /**\n   * Emit a turn event to the host. Stamps a monotonic `seq`, appends to the\n   * in-memory replay log, and sends to the live socket (best-effort — if the\n   * host is mid-reconnect the event waits in the log and is replayed on\n   * resume).\n   */\n  emit(event: BridgeEvent): void;\n\n  /**\n   * Register interest in a host-executed tool result and resolve when the\n   * matching `tool-result` arrives. The adapter emits the `tool-call` event\n   * itself (via {@link emit}) using the same `toolCallId`.\n   */\n  requestToolResult(\n    input:\n      | string\n      | {\n          toolCallId: string;\n          matches?: (result: {\n            output: unknown;\n            isError?: boolean;\n            toolResult?: ToolResultPart;\n          }) => boolean;\n        },\n  ): Promise<{\n    output: unknown;\n    isError?: boolean;\n    toolResult?: ToolResultPart;\n  }>;\n\n  /**\n   * Register interest in a host approval decision and resolve when the matching\n   * `tool-approval-response` arrives. The adapter emits the\n   * `tool-approval-request` event itself using the same `approvalId`.\n   */\n  requestToolApproval(\n    approvalId: string,\n  ): Promise<{ approved: boolean; reason?: string }>;\n\n  readonly experimental_userMessages: Experimental_BridgeUserMessageQueue;\n\n  /** Aborts when the host sends `abort`. */\n  readonly abortSignal: AbortSignal;\n\n  /** True for the first turn since this bridge process started. */\n  readonly firstTurn: boolean;\n\n  /**\n   * Emit a structured diagnostic. Gated by the session's debug level +\n   * subsystem filter; a no-op when diagnostics are disabled. Adapters use this\n   * for runtime-level instrumentation; raw `console.*` output is captured and\n   * forwarded automatically.\n   */\n  bridgeLog(input: {\n    level?: BridgeDebugLevel;\n    subsystem: string;\n    message: string;\n    attrs?: Record<string, unknown>;\n    error?: unknown;\n  }): void;\n\n  /**\n   * Emit a non-fatal bridge warning to stderr using the runtime's harness\n   * prefix. This is diagnostic-only: it does not emit a stream event, does not\n   * consume a `seq`, and does not fail the turn.\n   */\n  emitWarning(input: { message: string }): void;\n\n  emitError(input: { error: unknown; message?: string }): void;\n}\n\nexport interface RunBridgeOptions<TStart extends { type: 'start' }> {\n  /** Identifier written into `bridge-meta.json` (`'claude-code'` / `'codex'`). */\n  bridgeType: string;\n  /** Directory for `bridge-meta.json` / `start-config.json`. Created if absent. */\n  bridgeStateDir: string;\n  /**\n   * Drive one prompt turn. Rejections surface to the host as an `error`\n   * event.\n   *\n   * Contract: once `turn.abortSignal` fires, wind down promptly — turns are\n   * serialized, and a replacement `start` waits up to\n   * {@link turnTeardownGraceMs} for this promise to settle before it\n   * proceeds anyway.\n   */\n  onStart(start: TStart, turn: BridgeTurn): Promise<void>;\n  /**\n   * How long a replacement `start` waits for the previous turn's teardown\n   * after aborting it, in milliseconds. Turns are serialized so an aborted\n   * turn cannot emit into its replacement's event log or overlap its runtime\n   * process — but only within this bound: an adapter that does not settle\n   * `onStart` after its abort signal fires forfeits the protection for that\n   * boundary, and the new turn proceeds anyway rather than blocking forever.\n   * The default of ten seconds exceeds the Claude bridge's five-second\n   * hard-abort fallback.\n   */\n  turnTeardownGraceMs?: number;\n  /**\n   * Produce the adapter-defined runtime resume data for `stop`. Defaults to\n   * `{}`.\n   */\n  onStop?(): unknown | Promise<unknown>;\n  /**\n   * Perform adapter-defined destruction before the bridge exits.\n   */\n  onDestroy?(): void | Promise<void>;\n  /** WS port. Defaults to `BRIDGE_WS_PORT` env (0 = OS-assigned). */\n  port?: number;\n  /** Auth token. Defaults to `BRIDGE_CHANNEL_TOKEN` env. */\n  token?: string;\n  /** Called with the bound port once the server is listening. */\n  onListening?(port: number): void;\n  /**\n   * Tear the process down after `stop` / `destroy`. Defaults to closing\n   * the server and calling `process.exit(0)`. Overridable for tests.\n   */\n  onExit?(): void;\n}\n\ntype InboundControl =\n  | {\n      type: 'tool-result';\n      toolCallId: string;\n      output: unknown;\n      isError?: boolean;\n      toolResult?: ToolResultPart;\n    }\n  | {\n      type: 'tool-approval-response';\n      approvalId: string;\n      approved: boolean;\n      reason?: string;\n    }\n  | { type: 'user-message'; messageId?: string; text: string }\n  | { type: 'abort' }\n  | { type: 'stop' }\n  | { type: 'destroy' }\n  | { type: 'resume'; lastSeenEventId: number };\n\nconst WS_OPEN = 1;\n\n/**\n * Boot the bridge: bind the WebSocket server, announce `bridge-ready`, and\n * service host connections for the lifetime of the process. Resolves once the\n * server is listening; the process then stays alive on the server until a\n * `stop` / `destroy` exits it.\n */\nexport interface BridgeHandle {\n  /** The port the WebSocket server bound to. */\n  readonly port: number;\n  /** Close the WebSocket server. Does not call `process.exit`. */\n  close(): Promise<void>;\n}\n\nexport async function runBridge<TStart extends { type: 'start' }>(\n  options: RunBridgeOptions<TStart>,\n): Promise<BridgeHandle> {\n  const { bridgeType, bridgeStateDir, onStart, onStop, onDestroy } = options;\n  const teardownGraceMs = options.turnTeardownGraceMs ?? 10_000;\n  const expectedToken = options.token ?? procEnv.BRIDGE_CHANNEL_TOKEN ?? '';\n  const bridgeWsPort =\n    options.port ?? parseInt(procEnv.BRIDGE_WS_PORT ?? '0', 10);\n\n  const bridgeMetaPath = `${bridgeStateDir}/bridge-meta.json`;\n  const startConfigPath = `${bridgeStateDir}/start-config.json`;\n  const rerunStartConfigPath = `${bridgeStateDir}/rerun-start-config.json`;\n  const eventLogPath = `${bridgeStateDir}/event-log.ndjson`;\n\n  try {\n    await mkdir(bridgeStateDir, { recursive: true });\n  } catch {\n    // Best-effort; the bridge still runs without its state files.\n  }\n\n  // ─── mutable runtime state ──────────────────────────────────────────\n  let currentBoundPort = 0;\n  let currentTurnState: BridgeState = 'init';\n  /*\n   * The one connection turn events stream to. A socket claims it by asking for\n   * work — `start` (a turn) or `resume` (a catch-up) — never by connecting:\n   * every event goes here alone, so claiming on connect would silence a turn\n   * already streaming to someone else. Any number of sockets may be connected;\n   * the others still exchange control frames, they just get no events.\n   */\n  let activeSocket: WebSocket | undefined;\n  let isFirstTurn = true;\n  let turnAbort: AbortController | undefined;\n  let currentUserMessages: InternalBridgeUserMessageQueue | undefined;\n  /**\n   * Settles when the in-flight turn has fully wound down — `onStart`\n   * returned or threw AND its completion state was recorded. `undefined`\n   * between turns. A new `start` fences on this so turns never overlap.\n   */\n  let activeTurn: Promise<void> | undefined;\n\n  // Diagnostics. Resolved per turn from `start.debug` with a sandbox-side\n  // env fallback; gates console capture + structured `debug-event`s.\n  let debugConfig: BridgeDebugConfig | undefined;\n  let consoleCaptureInstalled = false;\n  const envDebugEnabled = ENV_TRUTHY.has(\n    (procEnv.HARNESS_DEBUG ?? '').toLowerCase(),\n  );\n\n  // Replay log. `seq` is monotonic across the whole process — never reset —\n  // because the host's `SandboxChannel` cursor (`lastSeenEventId`) lives across\n  // turns. The log *contents* are cleared at the start of each turn to bound\n  // memory; the just-finished turn stays replayable until the next `start`.\n  let seqCounter = 0;\n  let eventLog: Array<{ seq: number; line: string }> = [];\n\n  /*\n   * Disk mirror of the in-memory replay log. The in-memory log is lost when the\n   * bridge process dies; the on-disk `event-log.ndjson` survives in the sandbox\n   * filesystem so a respawned bridge (started with `BRIDGE_REPLAY_FROM_DISK=1`)\n   * can reload the in-flight turn and serve a host's resume cursor —\n   * `replay` recovery. Writes are batched on `setImmediate` (single-flight via\n   * `flushPromise`) to keep `emit` off the disk hot path.\n   */\n  let diskBuffer = '';\n  let flushPromise: Promise<void> | null = null;\n\n  const flushEventsToDisk = async (): Promise<void> => {\n    while (diskBuffer.length > 0) {\n      const buf = diskBuffer;\n      diskBuffer = '';\n      await appendFile(eventLogPath, buf).catch(() => {\n        // Best-effort crash-recovery mirror; the in-memory log is the source of\n        // truth for the live connection.\n      });\n    }\n  };\n\n  const scheduleEventFlush = (): void => {\n    if (flushPromise) return;\n    flushPromise = new Promise<void>(resolve => {\n      setImmediate(() => {\n        void flushEventsToDisk().finally(resolve);\n      });\n    }).finally(() => {\n      flushPromise = null;\n      if (diskBuffer.length > 0) {\n        scheduleEventFlush();\n      }\n    });\n  };\n\n  const flushPendingEventsToDisk = async (): Promise<void> => {\n    if (diskBuffer.length > 0 && !flushPromise) {\n      scheduleEventFlush();\n    }\n    // Await each in-flight flush, re-reading `flushPromise` after every await\n    // since a fresh flush may have been scheduled for buffer that arrived while\n    // we waited.\n    let inFlight = flushPromise;\n    while (inFlight) {\n      await inFlight;\n      inFlight = flushPromise;\n    }\n  };\n\n  /*\n   * When respawned for `replay`, reload the previous turn's log from disk before\n   * accepting any connection so the very first `resume{lastSeenEventId}` can be\n   * served the tail (including the terminal `finish`). The seq counter is\n   * restored to the last persisted seq so it stays aligned with the host's\n   * long-lived cursor. The file is NOT truncated in this mode — only a fresh\n   * `start` (next turn) clears it.\n   */\n  const replayFromDisk = procEnv.BRIDGE_REPLAY_FROM_DISK === '1';\n  if (replayFromDisk && existsSync(eventLogPath)) {\n    try {\n      const lines = readFileSync(eventLogPath, 'utf8')\n        .split('\\n')\n        .map(line => line.trim())\n        .filter(Boolean);\n      eventLog = lines.map(line => ({\n        seq: (JSON.parse(line) as { seq: number }).seq,\n        line,\n      }));\n      seqCounter = eventLog.at(-1)?.seq ?? 0;\n    } catch {\n      // Corrupt/partial log: fall back to an empty log; the host then degrades\n      // to `rerun` instead of replaying a malformed tail.\n      eventLog = [];\n      seqCounter = 0;\n    }\n  }\n\n  const pendingToolResults = new Map<\n    string,\n    {\n      resolve: (output: {\n        output: unknown;\n        isError?: boolean;\n        toolResult?: ToolResultPart;\n      }) => void;\n      matches?: (output: {\n        output: unknown;\n        isError?: boolean;\n        toolResult?: ToolResultPart;\n      }) => boolean;\n    }\n  >();\n  const bufferedToolResults: Array<{\n    toolCallId: string;\n    result: {\n      output: unknown;\n      isError?: boolean;\n      toolResult?: ToolResultPart;\n    };\n  }> = [];\n  const pendingToolApprovals = new Map<\n    string,\n    (response: { approved: boolean; reason?: string }) => void\n  >();\n\n  // ─── persistence (best-effort meta + start config) ──────────────────\n  const writeBridgeMeta = async (state: BridgeState): Promise<void> => {\n    try {\n      await writeFile(\n        bridgeMetaPath,\n        JSON.stringify({\n          type: bridgeType,\n          port: currentBoundPort,\n          state,\n          pid,\n        }),\n      );\n    } catch {\n      // Best-effort resilience metadata; not load-bearing for the active turn.\n    }\n  };\n\n  const writeStartConfig = async (start: unknown): Promise<void> => {\n    try {\n      const serialized = JSON.stringify(start);\n      await writeFile(startConfigPath, serialized);\n      // Frozen copy: written once, restored over start-config.json by future\n      // rerun-mode recovery to re-run the original turn from scratch.\n      if (!existsSync(rerunStartConfigPath)) {\n        await writeFile(rerunStartConfigPath, serialized);\n      }\n    } catch {\n      // Best-effort.\n    }\n  };\n\n  // ─── wire send + replay ─────────────────────────────────────────────\n  const emit = (event: BridgeEvent): void => {\n    const seq = ++seqCounter;\n    const line = JSON.stringify({ ...event, seq });\n    eventLog.push({ seq, line });\n    diskBuffer += `${line}\\n`;\n    scheduleEventFlush();\n    if (activeSocket?.readyState === WS_OPEN) {\n      try {\n        activeSocket.send(line);\n      } catch {\n        // Send is best-effort: a dropped socket leaves the event in the log,\n        // replayed once the host reconnects and sends `resume`.\n      }\n    }\n  };\n\n  const replay = (ws: WebSocket, afterSeq: number): void => {\n    for (const entry of eventLog) {\n      if (entry.seq > afterSeq && ws.readyState === WS_OPEN) {\n        ws.send(entry.line);\n      }\n    }\n  };\n\n  // ─── diagnostics ──────────────────────────────────────────────\n  const shouldEmitDebugEvent = (\n    level: BridgeDebugLevel,\n    subsystem: string,\n  ): boolean => {\n    if (!debugConfig?.enabled) return false;\n    const threshold = debugConfig.level ?? 'debug';\n    if (DEBUG_LEVEL_WEIGHT[level] > DEBUG_LEVEL_WEIGHT[threshold]) return false;\n    return subsystemMatches(debugConfig.subsystems, subsystem);\n  };\n\n  /*\n   * Forward sandbox console output. We line-buffer the original writers (kept so\n   * output still reaches the real fds) and emit one `sandbox-log` per complete\n   * line. `emit` never writes to stdout/stderr, so there is no recursion.\n   * Installed lazily the first time a turn enables diagnostics; once installed,\n   * capture is gated per-write on `debugConfig.enabled` so a later turn can\n   * disable it. Console capture is independent of the subsystem/level filter.\n   */\n  const rawStdoutWrite = process.stdout.write.bind(process.stdout);\n  const rawStderrWrite = process.stderr.write.bind(process.stderr);\n\n  const writeErrorToStderr = (input: {\n    message: string;\n    error: unknown;\n  }): void => {\n    try {\n      const formatted = formatBridgeError(input.error);\n      rawStderrWrite(\n        `[harness:${bridgeType}:error] ${input.message}: ${formatted.message}\\n`,\n      );\n      if (formatted.stack) {\n        rawStderrWrite(`${formatted.stack}\\n`);\n      }\n    } catch {}\n  };\n\n  const emitWarning = (input: { message: string }): void => {\n    try {\n      for (const line of input.message.split('\\n')) {\n        if (line.trim().length > 0) {\n          rawStderrWrite(`[harness:${bridgeType}:warn] ${line}\\n`);\n        }\n      }\n    } catch {}\n  };\n\n  const emitError = (input: { error: unknown; message?: string }): void => {\n    writeErrorToStderr({\n      message: input.message ?? 'bridge error',\n      error: input.error,\n    });\n    emit({ type: 'error', error: serialiseError(input.error) });\n  };\n\n  const installConsoleCapture = (): void => {\n    if (consoleCaptureInstalled) return;\n    consoleCaptureInstalled = true;\n    const buffers: { stdout: string; stderr: string } = {\n      stdout: '',\n      stderr: '',\n    };\n    const patch =\n      (stream: 'stdout' | 'stderr', raw: typeof process.stdout.write) =>\n      (chunk: unknown, encoding?: unknown, cb?: unknown): boolean => {\n        if (debugConfig?.enabled) {\n          try {\n            const enc = typeof encoding === 'string' ? encoding : 'utf8';\n            const text =\n              typeof chunk === 'string'\n                ? chunk\n                : Buffer.from(chunk as Uint8Array).toString(\n                    enc as BufferEncoding,\n                  );\n            const combined = buffers[stream] + text.replace(/\\r\\n/g, '\\n');\n            const parts = combined.split('\\n');\n            buffers[stream] = parts.pop() ?? '';\n            for (const line of parts) {\n              const trimmed = line.replace(/\\s+$/, '');\n              if (trimmed) {\n                emit({\n                  type: 'sandbox-log',\n                  source: bridgeType,\n                  stream,\n                  line: trimmed,\n                });\n              }\n            }\n          } catch {\n            // Never let capture break real output.\n          }\n        }\n        return (raw as (c: unknown, e?: unknown, cb?: unknown) => boolean)(\n          chunk,\n          encoding,\n          cb,\n        );\n      };\n    process.stdout.write = patch(\n      'stdout',\n      rawStdoutWrite,\n    ) as typeof process.stdout.write;\n    process.stderr.write = patch(\n      'stderr',\n      rawStderrWrite,\n    ) as typeof process.stderr.write;\n  };\n\n  // ─── inbound routing ────────────────────────────────────────────────\n  const handleInbound = async (\n    msg: TStart | InboundControl,\n    ws: WebSocket,\n  ): Promise<void> => {\n    switch (msg.type) {\n      case 'start': {\n        /*\n         * A new turn replaces the active one — but only after the active one\n         * has fully wound down. Inbound frames are dispatched concurrently,\n         * and the host settles a caller abort immediately, so a retry's\n         * `start` can arrive while the aborted turn is still tearing down\n         * (e.g. a graceful interrupt). Without this fence the old turn would\n         * keep emitting into the new turn's cleared event log, two runtime\n         * processes would run side by side, and the old turn's completion\n         * would mark the bridge `waiting` underneath the new turn. Abort the\n         * old turn to hasten its teardown; adapters are expected to bound\n         * that teardown themselves (e.g. a hard-abort fallback), but the\n         * runtime does not rely on it: the wait is capped by the teardown\n         * grace period, after which the new turn proceeds anyway — the\n         * pre-fence overlapping behavior — rather than hanging behind a\n         * teardown that never settles.\n         */\n        for (;;) {\n          const pendingTurn = activeTurn;\n          if (pendingTurn == null) break;\n          turnAbort?.abort();\n          currentUserMessages?.close(\n            new Error('A new bridge turn replaced the active turn.'),\n          );\n          let graceTimer: ReturnType<typeof setTimeout> | undefined;\n          const settled = await Promise.race([\n            pendingTurn.then(() => true as const),\n            new Promise<false>(resolve => {\n              graceTimer = setTimeout(() => resolve(false), teardownGraceMs);\n              graceTimer.unref?.();\n            }),\n          ]);\n          clearTimeout(graceTimer);\n          if (!settled) break;\n        }\n        let turnFinished!: () => void;\n        const thisTurn = new Promise<void>(resolve => (turnFinished = resolve));\n        activeTurn = thisTurn;\n        activeSocket = ws; // asking for a turn claims the event stream\n        const firstTurn = isFirstTurn;\n        isFirstTurn = false;\n        eventLog = []; // clear previous turn; keep seqCounter monotonic\n        // Mirror the in-memory clear to disk: the log tracks only the current\n        // turn. Discard any unflushed tail from the prior turn first.\n        diskBuffer = '';\n        void writeFile(eventLogPath, '').catch(() => {});\n        turnAbort = new AbortController();\n        currentTurnState = 'running';\n        void writeStartConfig(msg);\n        void writeBridgeMeta('running');\n        const startDebug = (msg as { debug?: BridgeDebugConfig }).debug;\n        debugConfig = {\n          enabled: startDebug?.enabled ?? envDebugEnabled,\n          level:\n            startDebug?.level ??\n            (procEnv.HARNESS_DEBUG_LEVEL as BridgeDebugLevel | undefined),\n          subsystems:\n            startDebug?.subsystems ??\n            parseEnvList(procEnv.HARNESS_DEBUG_SUBSYSTEMS),\n        };\n        if (debugConfig.enabled) {\n          installConsoleCapture();\n        }\n        const userMessages = createBridgeUserMessageQueue({ respond: emit });\n        const turn: BridgeTurn = {\n          emit,\n          requestToolResult: requestInput => {\n            const request =\n              typeof requestInput === 'string'\n                ? { toolCallId: requestInput }\n                : requestInput;\n            const bufferedIndex = bufferedToolResults.findIndex(\n              buffered =>\n                buffered.toolCallId === request.toolCallId ||\n                request.matches?.(buffered.result) === true,\n            );\n            if (bufferedIndex >= 0) {\n              return Promise.resolve(\n                bufferedToolResults.splice(bufferedIndex, 1)[0].result,\n              );\n            }\n            return new Promise(resolve => {\n              pendingToolResults.set(request.toolCallId, {\n                resolve,\n                matches: request.matches,\n              });\n            });\n          },\n          requestToolApproval: approvalId =>\n            new Promise(resolve => {\n              pendingToolApprovals.set(approvalId, resolve);\n            }),\n          experimental_userMessages: userMessages,\n          abortSignal: turnAbort.signal,\n          firstTurn,\n          bridgeLog: input => {\n            const level = input.level ?? 'debug';\n            if (!shouldEmitDebugEvent(level, input.subsystem)) return;\n            emit({\n              type: 'debug-event',\n              level,\n              subsystem: input.subsystem,\n              message: input.message,\n              ...(input.attrs ? { attrs: input.attrs } : {}),\n              ...(input.error !== undefined\n                ? { error: formatBridgeError(input.error) }\n                : {}),\n            });\n          },\n          emitWarning,\n          emitError,\n        };\n        currentUserMessages = userMessages;\n        try {\n          await onStart(msg as TStart, turn);\n        } catch (err) {\n          emitError({ error: err, message: 'bridge turn failed' });\n        } finally {\n          userMessages.close();\n          if (currentUserMessages === userMessages) {\n            currentUserMessages = undefined;\n          }\n          // Only the still-active turn records completion: after a fence\n          // timeout a replacement turn is already running, and this stale\n          // completion must not mark the bridge waiting underneath it.\n          if (activeTurn === thisTurn) {\n            activeTurn = undefined;\n            currentTurnState = 'waiting';\n            void writeBridgeMeta('waiting');\n          }\n          turnFinished();\n        }\n        return;\n      }\n      case 'tool-result': {\n        const result = {\n          output: msg.output,\n          isError: msg.isError,\n          toolResult: msg.toolResult,\n        };\n        const exactPending = pendingToolResults.get(msg.toolCallId);\n        const matchingPending =\n          exactPending == null\n            ? Array.from(pendingToolResults.entries()).find(\n                ([, pending]) => pending.matches?.(result) === true,\n              )\n            : undefined;\n        const pending = exactPending ?? matchingPending?.[1];\n        const pendingId =\n          exactPending != null ? msg.toolCallId : matchingPending?.[0];\n        if (pending != null && pendingId != null) {\n          pendingToolResults.delete(pendingId);\n          pending.resolve(result);\n        } else {\n          bufferedToolResults.push({\n            toolCallId: msg.toolCallId,\n            result,\n          });\n        }\n        return;\n      }\n      case 'tool-approval-response': {\n        const resolver = pendingToolApprovals.get(msg.approvalId);\n        if (resolver) {\n          pendingToolApprovals.delete(msg.approvalId);\n          resolver({ approved: msg.approved, reason: msg.reason });\n        }\n        return;\n      }\n      case 'user-message': {\n        const messageId = msg.messageId ?? randomUUID();\n        if (currentUserMessages == null) {\n          sendControl(ws, {\n            type: 'user-message-response',\n            messageId,\n            accepted: false,\n            error: { message: 'The bridge has no active turn to steer.' },\n          });\n          return;\n        }\n        if (ws !== activeSocket) {\n          sendControl(ws, {\n            type: 'user-message-response',\n            messageId,\n            accepted: false,\n            error: {\n              message: 'The connection does not own the active bridge turn.',\n            },\n          });\n          return;\n        }\n        currentUserMessages.enqueue({\n          messageId,\n          text: msg.text,\n        });\n        return;\n      }\n      case 'abort':\n        turnAbort?.abort();\n        return;\n      case 'resume':\n        activeSocket = ws; // asking for a catch-up claims it too\n        // Synchronous, so no event can slip out live ahead of the replayed tail.\n        replay(ws, msg.lastSeenEventId);\n        return;\n      case 'destroy':\n        currentTurnState = 'done';\n        void writeBridgeMeta('done');\n        await onDestroy?.();\n        drainThenExit(ws, 1000, 'destroy');\n        return;\n      case 'stop': {\n        currentTurnState = 'done';\n        void writeBridgeMeta('done');\n        const data = (await onStop?.()) ?? {};\n        sendControl(ws, { type: 'bridge-stop', data });\n        drainThenExit(ws, 1000, 'stop');\n        return;\n      }\n    }\n  };\n\n  // ─── server ─────────────────────────────────────────────────────────\n  void writeBridgeMeta('init');\n\n  const wss = new WebSocketServer({ port: bridgeWsPort, host: '0.0.0.0' });\n\n  const exit = (): void => {\n    if (options.onExit) {\n      options.onExit();\n      return;\n    }\n    wss.close(() => process.exit(0));\n    setTimeout(() => process.exit(0), 1000).unref();\n  };\n\n  const drainThenExit = (ws: WebSocket, code: number, reason: string): void => {\n    const start = Date.now();\n    const tick = (): void => {\n      const drained = ws.bufferedAmount === 0 || ws.readyState !== WS_OPEN;\n      if (drained || Date.now() - start >= 5_000) {\n        // Flush the on-disk log so a clean stop/destroy leaves a complete\n        // event-log.ndjson for any later replay recovery.\n        void flushPendingEventsToDisk().finally(() => {\n          try {\n            ws.close(code, reason);\n          } finally {\n            exit();\n          }\n        });\n        return;\n      }\n      setTimeout(tick, 10).unref();\n    };\n    tick();\n  };\n\n  wss.on('listening', () => {\n    const addr = wss.address();\n    currentBoundPort = typeof addr === 'object' && addr ? addr.port : 0;\n    currentTurnState = 'waiting';\n    void writeBridgeMeta('waiting');\n    stdout.write(\n      JSON.stringify({\n        type: 'bridge-ready',\n        port: currentBoundPort,\n      }) + '\\n',\n    );\n    options.onListening?.(currentBoundPort);\n  });\n\n  wss.on('connection', (ws: WebSocket, req: { url?: string }) => {\n    const url = new URL(req.url ?? '/', 'http://localhost');\n    if (url.searchParams.get('agent_bridge_token') !== expectedToken) {\n      ws.close(1008, 'unauthorized');\n      return;\n    }\n\n    // Announce liveness the instant we accept. Some sandbox runtimes complete\n    // the host-side WS handshake before the connection is forwarded here; the\n    // host waits for this frame before sending `start`/`resume`.\n    sendControl(ws, {\n      type: 'bridge-hello',\n      state: currentTurnState,\n      lastSeq: seqCounter,\n      capabilities: { experimental_userMessageResponses: true },\n    });\n\n    ws.on('message', (raw: ArrayBufferLike | string) => {\n      let parsed: TStart | InboundControl;\n      try {\n        const text =\n          typeof raw === 'string' ? raw : Buffer.from(raw).toString('utf8');\n        parsed = JSON.parse(text) as TStart | InboundControl;\n      } catch (err) {\n        sendControl(ws, {\n          type: 'error',\n          error: `protocol parse error: ${(err as Error).message}`,\n        });\n        return;\n      }\n      void handleInbound(parsed, ws);\n    });\n\n    ws.on('close', () => {\n      // Only the stream owner's close matters; a socket that never claimed it,\n      // or that a later `start`/`resume` displaced, closes as a no-op.\n      // Crucially we do NOT abort the in-flight turn: it keeps running and its\n      // events accumulate in the log for replay on reconnect.\n      if (activeSocket === ws) {\n        activeSocket = undefined;\n      }\n    });\n\n    ws.on('error', () => {\n      // 'close' follows; nothing to do beyond keeping the process alive.\n    });\n  });\n\n  // Surface bridge-internal crashes to the host instead of dying silently.\n  process.on('uncaughtException', err => {\n    emitError({ error: err, message: 'uncaught exception' });\n  });\n  process.on('unhandledRejection', err => {\n    emitError({ error: err, message: 'unhandled rejection' });\n  });\n\n  await new Promise<void>((resolve, reject) => {\n    if (wss.address() != null) {\n      resolve();\n      return;\n    }\n\n    wss.once('listening', resolve);\n    wss.once('error', reject);\n  });\n\n  return {\n    port: currentBoundPort,\n    close: () =>\n      new Promise<void>(resolve => {\n        wss.close(() => resolve());\n      }),\n  };\n}\n\n/*\n * Control frames answer the socket that sent the frame they reply to, so the\n * target is always explicit. Event streaming is the separate, stateful path\n * (`emit` → `activeSocket`); this one carries no state at all.\n */\nfunction sendControl(\n  socket: WebSocket | undefined,\n  message: Record<string, unknown>,\n): void {\n  if (socket?.readyState === WS_OPEN) {\n    try {\n      socket.send(JSON.stringify(message));\n    } catch {\n      // best-effort\n    }\n  }\n}\n\nfunction serialiseError(err: unknown): unknown {\n  if (err instanceof Error) {\n    return { name: err.name, message: err.message, stack: err.stack };\n  }\n  return err;\n}\n","const name = 'AI_HarnessBridgeCapabilityUnsupportedError';\n\n/**\n * Signals an unsupported capability discovered inside a sandbox bridge.\n * `isInstance` also recognizes the serialized error shape received by the\n * host, where it can be translated to `HarnessCapabilityUnsupportedError`.\n */\nexport class HarnessBridgeCapabilityUnsupportedError extends Error {\n  readonly harnessId?: string;\n  readonly cause?: unknown;\n\n  constructor({\n    message,\n    harnessId,\n    cause,\n  }: {\n    message: string;\n    harnessId?: string;\n    cause?: unknown;\n  }) {\n    super(message);\n    Object.defineProperty(this, 'name', { value: name });\n    this.harnessId = harnessId;\n    this.cause = cause;\n  }\n\n  static isInstance(\n    error: unknown,\n  ): error is HarnessBridgeCapabilityUnsupportedError {\n    return (\n      error != null &&\n      typeof error === 'object' &&\n      'name' in error &&\n      error.name === name &&\n      'message' in error &&\n      typeof error.message === 'string'\n    );\n  }\n}\n"],"mappings":";AASA,SAAS,YAAY,OAAO,iBAAiB;AAC7C,SAAS,YAAY,oBAAoB;AACzC,SAAS,kBAAkB;AAC3B,SAAS,OAAO,SAAS,KAAK,cAAc;AAE5C,SAAS,uBAAuC;;;ACdhD,IAAM,OAAO;AAON,IAAM,0CAAN,cAAsD,MAAM;AAAA,EAIjE,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIG;AACD,UAAM,OAAO;AACb,WAAO,eAAe,MAAM,QAAQ,EAAE,OAAO,KAAK,CAAC;AACnD,SAAK,YAAY;AACjB,SAAK,QAAQ;AAAA,EACf;AAAA,EAEA,OAAO,WACL,OACkD;AAClD,WACE,SAAS,QACT,OAAO,UAAU,YACjB,UAAU,SACV,MAAM,SAAS,QACf,aAAa,SACb,OAAO,MAAM,YAAY;AAAA,EAE7B;AACF;;;ADsBA,IAAM,qBAAuD;AAAA,EAC3D,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AAAA,EACN,OAAO;AAAA,EACP,OAAO;AACT;AAGA,SAAS,iBACP,SACA,WACS;AACT,MAAI,CAAC,WAAW,QAAQ,WAAW,EAAG,QAAO;AAC7C,SAAO,QAAQ;AAAA,IACb,YAAU,cAAc,UAAU,UAAU,WAAW,GAAG,MAAM,GAAG;AAAA,EACrE;AACF;AAEA,SAAS,kBAAkB,KAIzB;AACA,MAAI,eAAe,OAAO;AACxB,WAAO,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,SAAS,OAAO,IAAI,MAAM;AAAA,EAClE;AACA,MAAI,OAAO,QAAQ,UAAU;AAC3B,WAAO,EAAE,SAAS,IAAI;AAAA,EACxB;AACA,MAAI,QAAQ,QAAQ,OAAO,QAAQ,UAAU;AAC3C,QAAI;AACF,aAAO,EAAE,SAAS,KAAK,UAAU,GAAG,EAAE;AAAA,IACxC,QAAQ;AAAA,IAAC;AAAA,EACX;AACA,SAAO,EAAE,SAAS,OAAO,GAAG,EAAE;AAChC;AAEA,SAAS,6BAA6B,SAEH;AACjC,QAAM,WAA6C,CAAC;AACpD,QAAM,UAEF,CAAC;AACL,QAAM,UAAU,oBAAI,IAMlB;AACF,MAAI,SAAS;AACb,MAAI,eAAe;AAEnB,QAAM,UAAU,CAAC,UAAqD;AACpE,UAAM,WAAW,QAAQ,IAAI,MAAM,SAAS;AAC5C,QAAI,YAAY,MAAM;AACpB,UAAI,SAAS,YAAY,MAAM;AAC7B,gBAAQ,QAAQ,SAAS,QAAQ;AAAA,MACnC;AACA;AAAA,IACF;AAEA,QAAI,UAAU;AACd,UAAM,SAAS,CAAC,aAA8C;AAC5D,UAAI,QAAS;AACb,gBAAU;AACV;AACA,YAAM,QAAQ,QAAQ,IAAI,MAAM,SAAS;AACzC,UAAI,SAAS,KAAM,OAAM,WAAW;AACpC,cAAQ,QAAQ,QAAQ;AAAA,IAC1B;AACA,UAAM,UAA0C;AAAA,MAC9C,WAAW,MAAM;AAAA,MACjB,MAAM,MAAM;AAAA,MACZ,QAAQ,MAAM;AACZ,eAAO;AAAA,UACL,MAAM;AAAA,UACN,WAAW,MAAM;AAAA,UACjB,UAAU;AAAA,QACZ,CAAC;AAAA,MACH;AAAA,MACA,QAAQ,WAAS;AACf,eAAO;AAAA,UACL,MAAM;AAAA,UACN,WAAW,MAAM;AAAA,UACjB,UAAU;AAAA,UACV,OAAO,EAAE,SAAS,kBAAkB,KAAK,EAAE,QAAQ;AAAA,QACrD,CAAC;AAAA,MACH;AAAA,IACF;AACA,YAAQ,IAAI,MAAM,WAAW;AAAA,MAC3B,QAAQ,QAAQ;AAAA,IAClB,CAAC;AACD;AAEA,QAAI,QAAQ;AACV,cAAQ;AAAA,QACN,IAAI,MAAM,uDAAuD;AAAA,MACnE;AACA;AAAA,IACF;AAEA,UAAM,SAAS,QAAQ,MAAM;AAC7B,QAAI,UAAU,MAAM;AAClB,aAAO,EAAE,MAAM,OAAO,OAAO,QAAQ,CAAC;AAAA,IACxC,OAAO;AACL,eAAS,KAAK,OAAO;AAAA,IACvB;AAAA,EACF;AAEA,QAAM,QAAQ,CAAC,UAA0B;AACvC,QAAI,OAAQ;AACZ,aAAS;AACT,UAAM,SACJ,SACA,IAAI,MAAM,0DAA0D;AACtE,eAAW,SAAS,QAAQ,OAAO,GAAG;AACpC,UAAI,MAAM,YAAY,KAAM,OAAM,OAAO,MAAM;AAAA,IACjD;AACA,aAAS,SAAS;AAClB,WAAO,QAAQ,SAAS,GAAG;AACzB,cAAQ,MAAM,EAAG,EAAE,MAAM,MAAM,OAAO,OAAU,CAAC;AAAA,IACnD;AAAA,EACF;AAEA,SAAO;AAAA,IACL,IAAI,eAAe;AACjB,aAAO;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA,CAAC,OAAO,aAAa,IAAI;AACvB,aAAO;AAAA,QACL,MAAM,MAAM;AACV,gBAAM,UAAU,SAAS,MAAM;AAC/B,cAAI,WAAW,MAAM;AACnB,mBAAO,QAAQ,QAAQ,EAAE,MAAM,OAAgB,OAAO,QAAQ,CAAC;AAAA,UACjE;AACA,cAAI,QAAQ;AACV,mBAAO,QAAQ,QAAQ;AAAA,cACrB,MAAM;AAAA,cACN,OAAO;AAAA,YACT,CAAC;AAAA,UACH;AACA,iBAAO,IAAI;AAAA,YACT,aAAW;AACT,sBAAQ,KAAK,OAAO;AAAA,YACtB;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,aAAa,OAAiD;AACrE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,MACX,MAAM,GAAG,EACT,IAAI,UAAQ,KAAK,KAAK,CAAC,EACvB,OAAO,OAAO;AACjB,SAAO,MAAM,SAAS,IAAI,QAAQ;AACpC;AAEA,IAAM,aAAa,oBAAI,IAAI,CAAC,KAAK,QAAQ,OAAO,IAAI,CAAC;AAkJrD,IAAM,UAAU;AAehB,eAAsB,UACpB,SACuB;AACvB,QAAM,EAAE,YAAY,gBAAgB,SAAS,QAAQ,UAAU,IAAI;AACnE,QAAM,kBAAkB,QAAQ,uBAAuB;AACvD,QAAM,gBAAgB,QAAQ,SAAS,QAAQ,wBAAwB;AACvE,QAAM,eACJ,QAAQ,QAAQ,SAAS,QAAQ,kBAAkB,KAAK,EAAE;AAE5D,QAAM,iBAAiB,GAAG,cAAc;AACxC,QAAM,kBAAkB,GAAG,cAAc;AACzC,QAAM,uBAAuB,GAAG,cAAc;AAC9C,QAAM,eAAe,GAAG,cAAc;AAEtC,MAAI;AACF,UAAM,MAAM,gBAAgB,EAAE,WAAW,KAAK,CAAC;AAAA,EACjD,QAAQ;AAAA,EAER;AAGA,MAAI,mBAAmB;AACvB,MAAI,mBAAgC;AAQpC,MAAI;AACJ,MAAI,cAAc;AAClB,MAAI;AACJ,MAAI;AAMJ,MAAI;AAIJ,MAAI;AACJ,MAAI,0BAA0B;AAC9B,QAAM,kBAAkB,WAAW;AAAA,KAChC,QAAQ,iBAAiB,IAAI,YAAY;AAAA,EAC5C;AAMA,MAAI,aAAa;AACjB,MAAI,WAAiD,CAAC;AAUtD,MAAI,aAAa;AACjB,MAAI,eAAqC;AAEzC,QAAM,oBAAoB,YAA2B;AACnD,WAAO,WAAW,SAAS,GAAG;AAC5B,YAAM,MAAM;AACZ,mBAAa;AACb,YAAM,WAAW,cAAc,GAAG,EAAE,MAAM,MAAM;AAAA,MAGhD,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,qBAAqB,MAAY;AACrC,QAAI,aAAc;AAClB,mBAAe,IAAI,QAAc,aAAW;AAC1C,mBAAa,MAAM;AACjB,aAAK,kBAAkB,EAAE,QAAQ,OAAO;AAAA,MAC1C,CAAC;AAAA,IACH,CAAC,EAAE,QAAQ,MAAM;AACf,qBAAe;AACf,UAAI,WAAW,SAAS,GAAG;AACzB,2BAAmB;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,2BAA2B,YAA2B;AAC1D,QAAI,WAAW,SAAS,KAAK,CAAC,cAAc;AAC1C,yBAAmB;AAAA,IACrB;AAIA,QAAI,WAAW;AACf,WAAO,UAAU;AACf,YAAM;AACN,iBAAW;AAAA,IACb;AAAA,EACF;AAUA,QAAM,iBAAiB,QAAQ,4BAA4B;AAC3D,MAAI,kBAAkB,WAAW,YAAY,GAAG;AAC9C,QAAI;AACF,YAAM,QAAQ,aAAa,cAAc,MAAM,EAC5C,MAAM,IAAI,EACV,IAAI,UAAQ,KAAK,KAAK,CAAC,EACvB,OAAO,OAAO;AACjB,iBAAW,MAAM,IAAI,WAAS;AAAA,QAC5B,KAAM,KAAK,MAAM,IAAI,EAAsB;AAAA,QAC3C;AAAA,MACF,EAAE;AACF,mBAAa,SAAS,GAAG,EAAE,GAAG,OAAO;AAAA,IACvC,QAAQ;AAGN,iBAAW,CAAC;AACZ,mBAAa;AAAA,IACf;AAAA,EACF;AAEA,QAAM,qBAAqB,oBAAI,IAc7B;AACF,QAAM,sBAOD,CAAC;AACN,QAAM,uBAAuB,oBAAI,IAG/B;AAGF,QAAM,kBAAkB,OAAO,UAAsC;AACnE,QAAI;AACF,YAAM;AAAA,QACJ;AAAA,QACA,KAAK,UAAU;AAAA,UACb,MAAM;AAAA,UACN,MAAM;AAAA,UACN;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,QAAM,mBAAmB,OAAO,UAAkC;AAChE,QAAI;AACF,YAAM,aAAa,KAAK,UAAU,KAAK;AACvC,YAAM,UAAU,iBAAiB,UAAU;AAG3C,UAAI,CAAC,WAAW,oBAAoB,GAAG;AACrC,cAAM,UAAU,sBAAsB,UAAU;AAAA,MAClD;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAGA,QAAM,OAAO,CAAC,UAA6B;AACzC,UAAM,MAAM,EAAE;AACd,UAAM,OAAO,KAAK,UAAU,EAAE,GAAG,OAAO,IAAI,CAAC;AAC7C,aAAS,KAAK,EAAE,KAAK,KAAK,CAAC;AAC3B,kBAAc,GAAG,IAAI;AAAA;AACrB,uBAAmB;AACnB,QAAI,cAAc,eAAe,SAAS;AACxC,UAAI;AACF,qBAAa,KAAK,IAAI;AAAA,MACxB,QAAQ;AAAA,MAGR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAS,CAAC,IAAe,aAA2B;AACxD,eAAW,SAAS,UAAU;AAC5B,UAAI,MAAM,MAAM,YAAY,GAAG,eAAe,SAAS;AACrD,WAAG,KAAK,MAAM,IAAI;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AAGA,QAAM,uBAAuB,CAC3B,OACA,cACY;AACZ,QAAI,CAAC,aAAa,QAAS,QAAO;AAClC,UAAM,YAAY,YAAY,SAAS;AACvC,QAAI,mBAAmB,KAAK,IAAI,mBAAmB,SAAS,EAAG,QAAO;AACtE,WAAO,iBAAiB,YAAY,YAAY,SAAS;AAAA,EAC3D;AAUA,QAAM,iBAAiB,QAAQ,OAAO,MAAM,KAAK,QAAQ,MAAM;AAC/D,QAAM,iBAAiB,QAAQ,OAAO,MAAM,KAAK,QAAQ,MAAM;AAE/D,QAAM,qBAAqB,CAAC,UAGhB;AACV,QAAI;AACF,YAAM,YAAY,kBAAkB,MAAM,KAAK;AAC/C;AAAA,QACE,YAAY,UAAU,WAAW,MAAM,OAAO,KAAK,UAAU,OAAO;AAAA;AAAA,MACtE;AACA,UAAI,UAAU,OAAO;AACnB,uBAAe,GAAG,UAAU,KAAK;AAAA,CAAI;AAAA,MACvC;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX;AAEA,QAAM,cAAc,CAAC,UAAqC;AACxD,QAAI;AACF,iBAAW,QAAQ,MAAM,QAAQ,MAAM,IAAI,GAAG;AAC5C,YAAI,KAAK,KAAK,EAAE,SAAS,GAAG;AAC1B,yBAAe,YAAY,UAAU,UAAU,IAAI;AAAA,CAAI;AAAA,QACzD;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX;AAEA,QAAM,YAAY,CAAC,UAAsD;AACvE,uBAAmB;AAAA,MACjB,SAAS,MAAM,WAAW;AAAA,MAC1B,OAAO,MAAM;AAAA,IACf,CAAC;AACD,SAAK,EAAE,MAAM,SAAS,OAAO,eAAe,MAAM,KAAK,EAAE,CAAC;AAAA,EAC5D;AAEA,QAAM,wBAAwB,MAAY;AACxC,QAAI,wBAAyB;AAC7B,8BAA0B;AAC1B,UAAM,UAA8C;AAAA,MAClD,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AACA,UAAM,QACJ,CAAC,QAA6B,QAC9B,CAAC,OAAgB,UAAoB,OAA0B;AAC7D,UAAI,aAAa,SAAS;AACxB,YAAI;AACF,gBAAM,MAAM,OAAO,aAAa,WAAW,WAAW;AACtD,gBAAM,OACJ,OAAO,UAAU,WACb,QACA,OAAO,KAAK,KAAmB,EAAE;AAAA,YAC/B;AAAA,UACF;AACN,gBAAM,WAAW,QAAQ,MAAM,IAAI,KAAK,QAAQ,SAAS,IAAI;AAC7D,gBAAM,QAAQ,SAAS,MAAM,IAAI;AACjC,kBAAQ,MAAM,IAAI,MAAM,IAAI,KAAK;AACjC,qBAAW,QAAQ,OAAO;AACxB,kBAAM,UAAU,KAAK,QAAQ,QAAQ,EAAE;AACvC,gBAAI,SAAS;AACX,mBAAK;AAAA,gBACH,MAAM;AAAA,gBACN,QAAQ;AAAA,gBACR;AAAA,gBACA,MAAM;AAAA,cACR,CAAC;AAAA,YACH;AAAA,UACF;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AACA,aAAQ;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACF,YAAQ,OAAO,QAAQ;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,YAAQ,OAAO,QAAQ;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAGA,QAAM,gBAAgB,OACpB,KACA,OACkB;AAClB,YAAQ,IAAI,MAAM;AAAA,MAChB,KAAK,SAAS;AAiBZ,mBAAS;AACP,gBAAM,cAAc;AACpB,cAAI,eAAe,KAAM;AACzB,qBAAW,MAAM;AACjB,+BAAqB;AAAA,YACnB,IAAI,MAAM,6CAA6C;AAAA,UACzD;AACA,cAAI;AACJ,gBAAM,UAAU,MAAM,QAAQ,KAAK;AAAA,YACjC,YAAY,KAAK,MAAM,IAAa;AAAA,YACpC,IAAI,QAAe,aAAW;AAC5B,2BAAa,WAAW,MAAM,QAAQ,KAAK,GAAG,eAAe;AAC7D,yBAAW,QAAQ;AAAA,YACrB,CAAC;AAAA,UACH,CAAC;AACD,uBAAa,UAAU;AACvB,cAAI,CAAC,QAAS;AAAA,QAChB;AACA,YAAI;AACJ,cAAM,WAAW,IAAI,QAAc,aAAY,eAAe,OAAQ;AACtE,qBAAa;AACb,uBAAe;AACf,cAAM,YAAY;AAClB,sBAAc;AACd,mBAAW,CAAC;AAGZ,qBAAa;AACb,aAAK,UAAU,cAAc,EAAE,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAC/C,oBAAY,IAAI,gBAAgB;AAChC,2BAAmB;AACnB,aAAK,iBAAiB,GAAG;AACzB,aAAK,gBAAgB,SAAS;AAC9B,cAAM,aAAc,IAAsC;AAC1D,sBAAc;AAAA,UACZ,SAAS,YAAY,WAAW;AAAA,UAChC,OACE,YAAY,SACX,QAAQ;AAAA,UACX,YACE,YAAY,cACZ,aAAa,QAAQ,wBAAwB;AAAA,QACjD;AACA,YAAI,YAAY,SAAS;AACvB,gCAAsB;AAAA,QACxB;AACA,cAAM,eAAe,6BAA6B,EAAE,SAAS,KAAK,CAAC;AACnE,cAAM,OAAmB;AAAA,UACvB;AAAA,UACA,mBAAmB,kBAAgB;AACjC,kBAAM,UACJ,OAAO,iBAAiB,WACpB,EAAE,YAAY,aAAa,IAC3B;AACN,kBAAM,gBAAgB,oBAAoB;AAAA,cACxC,cACE,SAAS,eAAe,QAAQ,cAChC,QAAQ,UAAU,SAAS,MAAM,MAAM;AAAA,YAC3C;AACA,gBAAI,iBAAiB,GAAG;AACtB,qBAAO,QAAQ;AAAA,gBACb,oBAAoB,OAAO,eAAe,CAAC,EAAE,CAAC,EAAE;AAAA,cAClD;AAAA,YACF;AACA,mBAAO,IAAI,QAAQ,aAAW;AAC5B,iCAAmB,IAAI,QAAQ,YAAY;AAAA,gBACzC;AAAA,gBACA,SAAS,QAAQ;AAAA,cACnB,CAAC;AAAA,YACH,CAAC;AAAA,UACH;AAAA,UACA,qBAAqB,gBACnB,IAAI,QAAQ,aAAW;AACrB,iCAAqB,IAAI,YAAY,OAAO;AAAA,UAC9C,CAAC;AAAA,UACH,2BAA2B;AAAA,UAC3B,aAAa,UAAU;AAAA,UACvB;AAAA,UACA,WAAW,WAAS;AAClB,kBAAM,QAAQ,MAAM,SAAS;AAC7B,gBAAI,CAAC,qBAAqB,OAAO,MAAM,SAAS,EAAG;AACnD,iBAAK;AAAA,cACH,MAAM;AAAA,cACN;AAAA,cACA,WAAW,MAAM;AAAA,cACjB,SAAS,MAAM;AAAA,cACf,GAAI,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,cAC5C,GAAI,MAAM,UAAU,SAChB,EAAE,OAAO,kBAAkB,MAAM,KAAK,EAAE,IACxC,CAAC;AAAA,YACP,CAAC;AAAA,UACH;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,8BAAsB;AACtB,YAAI;AACF,gBAAM,QAAQ,KAAe,IAAI;AAAA,QACnC,SAAS,KAAK;AACZ,oBAAU,EAAE,OAAO,KAAK,SAAS,qBAAqB,CAAC;AAAA,QACzD,UAAE;AACA,uBAAa,MAAM;AACnB,cAAI,wBAAwB,cAAc;AACxC,kCAAsB;AAAA,UACxB;AAIA,cAAI,eAAe,UAAU;AAC3B,yBAAa;AACb,+BAAmB;AACnB,iBAAK,gBAAgB,SAAS;AAAA,UAChC;AACA,uBAAa;AAAA,QACf;AACA;AAAA,MACF;AAAA,MACA,KAAK,eAAe;AAClB,cAAM,SAAS;AAAA,UACb,QAAQ,IAAI;AAAA,UACZ,SAAS,IAAI;AAAA,UACb,YAAY,IAAI;AAAA,QAClB;AACA,cAAM,eAAe,mBAAmB,IAAI,IAAI,UAAU;AAC1D,cAAM,kBACJ,gBAAgB,OACZ,MAAM,KAAK,mBAAmB,QAAQ,CAAC,EAAE;AAAA,UACvC,CAAC,CAAC,EAAEA,QAAO,MAAMA,SAAQ,UAAU,MAAM,MAAM;AAAA,QACjD,IACA;AACN,cAAM,UAAU,gBAAgB,kBAAkB,CAAC;AACnD,cAAM,YACJ,gBAAgB,OAAO,IAAI,aAAa,kBAAkB,CAAC;AAC7D,YAAI,WAAW,QAAQ,aAAa,MAAM;AACxC,6BAAmB,OAAO,SAAS;AACnC,kBAAQ,QAAQ,MAAM;AAAA,QACxB,OAAO;AACL,8BAAoB,KAAK;AAAA,YACvB,YAAY,IAAI;AAAA,YAChB;AAAA,UACF,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAAA,MACA,KAAK,0BAA0B;AAC7B,cAAM,WAAW,qBAAqB,IAAI,IAAI,UAAU;AACxD,YAAI,UAAU;AACZ,+BAAqB,OAAO,IAAI,UAAU;AAC1C,mBAAS,EAAE,UAAU,IAAI,UAAU,QAAQ,IAAI,OAAO,CAAC;AAAA,QACzD;AACA;AAAA,MACF;AAAA,MACA,KAAK,gBAAgB;AACnB,cAAM,YAAY,IAAI,aAAa,WAAW;AAC9C,YAAI,uBAAuB,MAAM;AAC/B,sBAAY,IAAI;AAAA,YACd,MAAM;AAAA,YACN;AAAA,YACA,UAAU;AAAA,YACV,OAAO,EAAE,SAAS,0CAA0C;AAAA,UAC9D,CAAC;AACD;AAAA,QACF;AACA,YAAI,OAAO,cAAc;AACvB,sBAAY,IAAI;AAAA,YACd,MAAM;AAAA,YACN;AAAA,YACA,UAAU;AAAA,YACV,OAAO;AAAA,cACL,SAAS;AAAA,YACX;AAAA,UACF,CAAC;AACD;AAAA,QACF;AACA,4BAAoB,QAAQ;AAAA,UAC1B;AAAA,UACA,MAAM,IAAI;AAAA,QACZ,CAAC;AACD;AAAA,MACF;AAAA,MACA,KAAK;AACH,mBAAW,MAAM;AACjB;AAAA,MACF,KAAK;AACH,uBAAe;AAEf,eAAO,IAAI,IAAI,eAAe;AAC9B;AAAA,MACF,KAAK;AACH,2BAAmB;AACnB,aAAK,gBAAgB,MAAM;AAC3B,cAAM,YAAY;AAClB,sBAAc,IAAI,KAAM,SAAS;AACjC;AAAA,MACF,KAAK,QAAQ;AACX,2BAAmB;AACnB,aAAK,gBAAgB,MAAM;AAC3B,cAAM,OAAQ,MAAM,SAAS,KAAM,CAAC;AACpC,oBAAY,IAAI,EAAE,MAAM,eAAe,KAAK,CAAC;AAC7C,sBAAc,IAAI,KAAM,MAAM;AAC9B;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAGA,OAAK,gBAAgB,MAAM;AAE3B,QAAM,MAAM,IAAI,gBAAgB,EAAE,MAAM,cAAc,MAAM,UAAU,CAAC;AAEvE,QAAM,OAAO,MAAY;AACvB,QAAI,QAAQ,QAAQ;AAClB,cAAQ,OAAO;AACf;AAAA,IACF;AACA,QAAI,MAAM,MAAM,QAAQ,KAAK,CAAC,CAAC;AAC/B,eAAW,MAAM,QAAQ,KAAK,CAAC,GAAG,GAAI,EAAE,MAAM;AAAA,EAChD;AAEA,QAAM,gBAAgB,CAAC,IAAe,MAAc,WAAyB;AAC3E,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,OAAO,MAAY;AACvB,YAAM,UAAU,GAAG,mBAAmB,KAAK,GAAG,eAAe;AAC7D,UAAI,WAAW,KAAK,IAAI,IAAI,SAAS,KAAO;AAG1C,aAAK,yBAAyB,EAAE,QAAQ,MAAM;AAC5C,cAAI;AACF,eAAG,MAAM,MAAM,MAAM;AAAA,UACvB,UAAE;AACA,iBAAK;AAAA,UACP;AAAA,QACF,CAAC;AACD;AAAA,MACF;AACA,iBAAW,MAAM,EAAE,EAAE,MAAM;AAAA,IAC7B;AACA,SAAK;AAAA,EACP;AAEA,MAAI,GAAG,aAAa,MAAM;AACxB,UAAM,OAAO,IAAI,QAAQ;AACzB,uBAAmB,OAAO,SAAS,YAAY,OAAO,KAAK,OAAO;AAClE,uBAAmB;AACnB,SAAK,gBAAgB,SAAS;AAC9B,WAAO;AAAA,MACL,KAAK,UAAU;AAAA,QACb,MAAM;AAAA,QACN,MAAM;AAAA,MACR,CAAC,IAAI;AAAA,IACP;AACA,YAAQ,cAAc,gBAAgB;AAAA,EACxC,CAAC;AAED,MAAI,GAAG,cAAc,CAAC,IAAe,QAA0B;AAC7D,UAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,kBAAkB;AACtD,QAAI,IAAI,aAAa,IAAI,oBAAoB,MAAM,eAAe;AAChE,SAAG,MAAM,MAAM,cAAc;AAC7B;AAAA,IACF;AAKA,gBAAY,IAAI;AAAA,MACd,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS;AAAA,MACT,cAAc,EAAE,mCAAmC,KAAK;AAAA,IAC1D,CAAC;AAED,OAAG,GAAG,WAAW,CAAC,QAAkC;AAClD,UAAI;AACJ,UAAI;AACF,cAAM,OACJ,OAAO,QAAQ,WAAW,MAAM,OAAO,KAAK,GAAG,EAAE,SAAS,MAAM;AAClE,iBAAS,KAAK,MAAM,IAAI;AAAA,MAC1B,SAAS,KAAK;AACZ,oBAAY,IAAI;AAAA,UACd,MAAM;AAAA,UACN,OAAO,yBAA0B,IAAc,OAAO;AAAA,QACxD,CAAC;AACD;AAAA,MACF;AACA,WAAK,cAAc,QAAQ,EAAE;AAAA,IAC/B,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AAKnB,UAAI,iBAAiB,IAAI;AACvB,uBAAe;AAAA,MACjB;AAAA,IACF,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AAAA,IAErB,CAAC;AAAA,EACH,CAAC;AAGD,UAAQ,GAAG,qBAAqB,SAAO;AACrC,cAAU,EAAE,OAAO,KAAK,SAAS,qBAAqB,CAAC;AAAA,EACzD,CAAC;AACD,UAAQ,GAAG,sBAAsB,SAAO;AACtC,cAAU,EAAE,OAAO,KAAK,SAAS,sBAAsB,CAAC;AAAA,EAC1D,CAAC;AAED,QAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,QAAI,IAAI,QAAQ,KAAK,MAAM;AACzB,cAAQ;AACR;AAAA,IACF;AAEA,QAAI,KAAK,aAAa,OAAO;AAC7B,QAAI,KAAK,SAAS,MAAM;AAAA,EAC1B,CAAC;AAED,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,MACL,IAAI,QAAc,aAAW;AAC3B,UAAI,MAAM,MAAM,QAAQ,CAAC;AAAA,IAC3B,CAAC;AAAA,EACL;AACF;AAOA,SAAS,YACP,QACA,SACM;AACN,MAAI,QAAQ,eAAe,SAAS;AAClC,QAAI;AACF,aAAO,KAAK,KAAK,UAAU,OAAO,CAAC;AAAA,IACrC,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEA,SAAS,eAAe,KAAuB;AAC7C,MAAI,eAAe,OAAO;AACxB,WAAO,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,SAAS,OAAO,IAAI,MAAM;AAAA,EAClE;AACA,SAAO;AACT;","names":["pending"]}
+{"version":3,"sources":["../../src/bridge/index.ts","../../src/bridge/harness-bridge-capability-unsupported-error.ts"],"sourcesContent":["// Shared in-sandbox bridge runtime. Adapter `bridge.mjs` bundles re-bundle\n// this module (tsup inlines it; `ws` stays external and resolves from the\n// sandbox-installed node_modules). It owns everything generic to the bridge\n// transport — the WebSocket server, token auth, the in-memory event log +\n// monotonic `seq`, resume replay, and the lifecycle/meta files. Any number of\n// hosts may be connected; exactly one of them owns the event stream, and\n// `start`/`resume` transfer that ownership. The adapter supplies only `onStart`\n// (drive its CLI/SDK and translate to wire events) and lifecycle cleanup hooks.\n\nimport { appendFile, mkdir, writeFile } from 'node:fs/promises';\nimport { existsSync, readFileSync } from 'node:fs';\nimport { randomUUID } from 'node:crypto';\nimport { env as procEnv, pid, stdout } from 'node:process';\nimport type { ToolResultPart } from '@ai-sdk/provider-utils';\nimport { WebSocketServer, type WebSocket } from 'ws';\n\nexport { HarnessBridgeCapabilityUnsupportedError } from './harness-bridge-capability-unsupported-error';\n\nexport type BridgeState = 'init' | 'waiting' | 'running' | 'draining' | 'done';\n\n/** Outbound turn event the adapter emits. `seq` is added by the runtime. */\nexport type BridgeEvent = Record<string, unknown> & { type: string };\n\nexport type BridgeDebugLevel = 'error' | 'warn' | 'info' | 'debug' | 'trace';\n\nexport interface Experimental_BridgeUserMessage {\n  readonly messageId: string;\n  readonly text: string;\n  accept(): void;\n  reject(error: unknown): void;\n}\n\nexport interface Experimental_BridgeUserMessageQueue extends AsyncIterable<Experimental_BridgeUserMessage> {\n  readonly pendingCount: number;\n  close(error?: unknown): void;\n}\n\ntype InternalBridgeUserMessageQueue = Experimental_BridgeUserMessageQueue & {\n  enqueue(input: { messageId: string; text: string }): void;\n};\n\ntype BridgeUserMessageResponse = {\n  type: 'user-message-response';\n  messageId: string;\n  accepted: boolean;\n  error?: { message: string };\n};\n\n/**\n * Per-session diagnostics config. The host resolves it from settings +\n * env and sends it on `start.debug`; the bridge gates console capture and\n * structured `debug-event`s on it. When disabled, nothing is captured or\n * emitted and no `seq` is consumed.\n */\nexport interface BridgeDebugConfig {\n  enabled?: boolean;\n  level?: BridgeDebugLevel;\n  subsystems?: string[];\n}\n\nconst DEBUG_LEVEL_WEIGHT: Record<BridgeDebugLevel, number> = {\n  error: 0,\n  warn: 1,\n  info: 2,\n  debug: 3,\n  trace: 4,\n};\n\n/** Exact-or-dotted-prefix subsystem match (`'bridge'` matches `'bridge.turn'`). */\nfunction subsystemMatches(\n  filters: string[] | undefined,\n  subsystem: string,\n): boolean {\n  if (!filters || filters.length === 0) return true;\n  return filters.some(\n    filter => subsystem === filter || subsystem.startsWith(`${filter}.`),\n  );\n}\n\nfunction formatBridgeError(err: unknown): {\n  name?: string;\n  message: string;\n  stack?: string;\n} {\n  if (err instanceof Error) {\n    return { name: err.name, message: err.message, stack: err.stack };\n  }\n  if (typeof err === 'string') {\n    return { message: err };\n  }\n  if (err !== null && typeof err === 'object') {\n    try {\n      return { message: JSON.stringify(err) };\n    } catch {}\n  }\n  return { message: String(err) };\n}\n\nfunction createBridgeUserMessageQueue(options: {\n  respond(response: BridgeUserMessageResponse): void;\n}): InternalBridgeUserMessageQueue {\n  const messages: Experimental_BridgeUserMessage[] = [];\n  const waiters: Array<\n    (result: IteratorResult<Experimental_BridgeUserMessage>) => void\n  > = [];\n  const entries = new Map<\n    string,\n    {\n      response?: BridgeUserMessageResponse;\n      reject(error: unknown): void;\n    }\n  >();\n  let closed = false;\n  let pendingCount = 0;\n\n  const enqueue = (input: { messageId: string; text: string }): void => {\n    const existing = entries.get(input.messageId);\n    if (existing != null) {\n      if (existing.response != null) {\n        options.respond(existing.response);\n      }\n      return;\n    }\n\n    let settled = false;\n    const settle = (response: BridgeUserMessageResponse): void => {\n      if (settled) return;\n      settled = true;\n      pendingCount--;\n      const entry = entries.get(input.messageId);\n      if (entry != null) entry.response = response;\n      options.respond(response);\n    };\n    const message: Experimental_BridgeUserMessage = {\n      messageId: input.messageId,\n      text: input.text,\n      accept: () => {\n        settle({\n          type: 'user-message-response',\n          messageId: input.messageId,\n          accepted: true,\n        });\n      },\n      reject: error => {\n        settle({\n          type: 'user-message-response',\n          messageId: input.messageId,\n          accepted: false,\n          error: { message: formatBridgeError(error).message },\n        });\n      },\n    };\n    entries.set(input.messageId, {\n      reject: message.reject,\n    });\n    pendingCount++;\n\n    if (closed) {\n      message.reject(\n        new Error('The bridge turn is no longer accepting user messages.'),\n      );\n      return;\n    }\n\n    const waiter = waiters.shift();\n    if (waiter != null) {\n      waiter({ done: false, value: message });\n    } else {\n      messages.push(message);\n    }\n  };\n\n  const close = (error?: unknown): void => {\n    if (closed) return;\n    closed = true;\n    const reason =\n      error ??\n      new Error('The bridge turn ended before accepting the user message.');\n    for (const entry of entries.values()) {\n      if (entry.response == null) entry.reject(reason);\n    }\n    messages.length = 0;\n    while (waiters.length > 0) {\n      waiters.shift()!({ done: true, value: undefined });\n    }\n  };\n\n  return {\n    get pendingCount() {\n      return pendingCount;\n    },\n    enqueue,\n    close,\n    [Symbol.asyncIterator]() {\n      return {\n        next: () => {\n          const message = messages.shift();\n          if (message != null) {\n            return Promise.resolve({ done: false as const, value: message });\n          }\n          if (closed) {\n            return Promise.resolve({\n              done: true as const,\n              value: undefined,\n            });\n          }\n          return new Promise<IteratorResult<Experimental_BridgeUserMessage>>(\n            resolve => {\n              waiters.push(resolve);\n            },\n          );\n        },\n      };\n    },\n  };\n}\n\nfunction parseEnvList(value: string | undefined): string[] | undefined {\n  if (!value) return undefined;\n  const items = value\n    .split(',')\n    .map(item => item.trim())\n    .filter(Boolean);\n  return items.length > 0 ? items : undefined;\n}\n\nconst ENV_TRUTHY = new Set(['1', 'true', 'yes', 'on']);\n\n/**\n * Per-turn surface handed to {@link RunBridgeOptions.onStart}. The adapter\n * drives its runtime against these primitives; the runtime owns the transport.\n */\nexport interface BridgeTurn {\n  /**\n   * Emit a turn event to the host. Stamps a monotonic `seq`, appends to the\n   * in-memory replay log, and sends to the live socket (best-effort — if the\n   * host is mid-reconnect the event waits in the log and is replayed on\n   * resume).\n   */\n  emit(event: BridgeEvent): void;\n\n  /**\n   * Register interest in a host-executed tool result and resolve when the\n   * matching `tool-result` arrives. The adapter emits the `tool-call` event\n   * itself (via {@link emit}) using the same `toolCallId`.\n   */\n  requestToolResult(\n    input:\n      | string\n      | {\n          toolCallId: string;\n          matches?: (result: {\n            output: unknown;\n            isError?: boolean;\n            toolResult?: ToolResultPart;\n          }) => boolean;\n        },\n  ): Promise<{\n    output: unknown;\n    isError?: boolean;\n    toolResult?: ToolResultPart;\n  }>;\n\n  /**\n   * Register interest in a host approval decision and resolve when the matching\n   * `tool-approval-response` arrives. The adapter emits the\n   * `tool-approval-request` event itself using the same `approvalId`.\n   */\n  requestToolApproval(\n    approvalId: string,\n  ): Promise<{ approved: boolean; reason?: string }>;\n\n  readonly experimental_userMessages: Experimental_BridgeUserMessageQueue;\n\n  /** Aborts when the host sends `abort`. */\n  readonly abortSignal: AbortSignal;\n\n  /** True for the first turn since this bridge process started. */\n  readonly firstTurn: boolean;\n\n  /**\n   * Emit a structured diagnostic. Gated by the session's debug level +\n   * subsystem filter; a no-op when diagnostics are disabled. Adapters use this\n   * for runtime-level instrumentation; raw `console.*` output is captured and\n   * forwarded automatically.\n   */\n  bridgeLog(input: {\n    level?: BridgeDebugLevel;\n    subsystem: string;\n    message: string;\n    attrs?: Record<string, unknown>;\n    error?: unknown;\n  }): void;\n\n  /**\n   * Emit a non-fatal bridge warning to stderr using the runtime's harness\n   * prefix. This is diagnostic-only: it does not emit a stream event, does not\n   * consume a `seq`, and does not fail the turn.\n   */\n  emitWarning(input: { message: string }): void;\n\n  emitError(input: { error: unknown; message?: string }): void;\n}\n\nexport interface RunBridgeOptions<TStart extends { type: 'start' }> {\n  /** Identifier written into `bridge-meta.json` (`'claude-code'` / `'codex'`). */\n  bridgeType: string;\n  /** Directory for `bridge-meta.json` / `start-config.json`. Created if absent. */\n  bridgeStateDir: string;\n  /**\n   * Drive one prompt turn. Rejections surface to the host as an `error`\n   * event.\n   *\n   * Contract: once `turn.abortSignal` fires, wind down promptly — turns are\n   * serialized, and a replacement `start` waits up to\n   * {@link turnTeardownGraceMs} for this promise to settle before it\n   * proceeds anyway.\n   */\n  onStart(start: TStart, turn: BridgeTurn): Promise<void>;\n  /**\n   * How long a replacement `start` waits for the previous turn's teardown\n   * after aborting it, in milliseconds. Turns are serialized so an aborted\n   * turn cannot emit into its replacement's event log or overlap its runtime\n   * process — but only within this bound: an adapter that does not settle\n   * `onStart` after its abort signal fires forfeits the protection for that\n   * boundary, and the new turn proceeds anyway rather than blocking forever.\n   * The default of ten seconds exceeds the Claude bridge's five-second\n   * hard-abort fallback.\n   */\n  turnTeardownGraceMs?: number;\n  /**\n   * Produce the adapter-defined runtime resume data for `stop`. Defaults to\n   * `{}`.\n   */\n  onStop?(): unknown | Promise<unknown>;\n  /**\n   * Perform adapter-defined destruction before the bridge exits.\n   */\n  onDestroy?(): void | Promise<void>;\n  /** WS port. Defaults to `BRIDGE_WS_PORT` env (0 = OS-assigned). */\n  port?: number;\n  /** Auth token. Defaults to `BRIDGE_CHANNEL_TOKEN` env. */\n  token?: string;\n  /** Called with the bound port once the server is listening. */\n  onListening?(port: number): void;\n  /**\n   * Tear the process down after `stop` / `destroy`. Defaults to closing\n   * the server and calling `process.exit(0)`. Overridable for tests.\n   */\n  onExit?(): void;\n}\n\ntype InboundControl =\n  | {\n      type: 'tool-result';\n      toolCallId: string;\n      output: unknown;\n      isError?: boolean;\n      toolResult?: ToolResultPart;\n    }\n  | {\n      type: 'tool-approval-response';\n      approvalId: string;\n      approved: boolean;\n      reason?: string;\n    }\n  | { type: 'user-message'; messageId?: string; text: string }\n  | { type: 'abort' }\n  | { type: 'stop' }\n  | { type: 'destroy' }\n  | { type: 'resume'; lastSeenEventId: number };\n\nconst WS_OPEN = 1;\n\n/**\n * Boot the bridge: bind the WebSocket server, announce `bridge-ready`, and\n * service host connections for the lifetime of the process. Resolves once the\n * server is listening; the process then stays alive on the server until a\n * `stop` / `destroy` exits it.\n */\nexport interface BridgeHandle {\n  /** The port the WebSocket server bound to. */\n  readonly port: number;\n  /** Close the WebSocket server. Does not call `process.exit`. */\n  close(): Promise<void>;\n}\n\nexport async function runBridge<TStart extends { type: 'start' }>(\n  options: RunBridgeOptions<TStart>,\n): Promise<BridgeHandle> {\n  const { bridgeType, bridgeStateDir, onStart, onStop, onDestroy } = options;\n  const teardownGraceMs = options.turnTeardownGraceMs ?? 10_000;\n  const expectedToken = options.token ?? procEnv.BRIDGE_CHANNEL_TOKEN ?? '';\n  const bridgeWsPort =\n    options.port ?? parseInt(procEnv.BRIDGE_WS_PORT ?? '0', 10);\n\n  const bridgeMetaPath = `${bridgeStateDir}/bridge-meta.json`;\n  const startConfigPath = `${bridgeStateDir}/start-config.json`;\n  const rerunStartConfigPath = `${bridgeStateDir}/rerun-start-config.json`;\n  const eventLogPath = `${bridgeStateDir}/event-log.ndjson`;\n\n  try {\n    await mkdir(bridgeStateDir, { recursive: true });\n  } catch {\n    // Best-effort; the bridge still runs without its state files.\n  }\n\n  // ─── mutable runtime state ──────────────────────────────────────────\n  let currentBoundPort = 0;\n  let currentTurnState: BridgeState = 'init';\n  /*\n   * The one connection turn events stream to. A socket claims it by asking for\n   * work — `start` (a turn) or `resume` (a catch-up) — never by connecting:\n   * every event goes here alone, so claiming on connect would silence a turn\n   * already streaming to someone else. Any number of sockets may be connected;\n   * the others still exchange control frames, they just get no events.\n   */\n  let activeSocket: WebSocket | undefined;\n  let isFirstTurn = true;\n  let turnAbort: AbortController | undefined;\n  let currentUserMessages: InternalBridgeUserMessageQueue | undefined;\n  /**\n   * Settles when the in-flight turn has fully wound down — `onStart`\n   * returned or threw AND its completion state was recorded. `undefined`\n   * between turns. A new `start` fences on this so turns never overlap.\n   */\n  let activeTurn: Promise<void> | undefined;\n\n  // Diagnostics. Resolved per turn from `start.debug` with a sandbox-side\n  // env fallback; gates console capture + structured `debug-event`s.\n  let debugConfig: BridgeDebugConfig | undefined;\n  let consoleCaptureInstalled = false;\n  const envDebugEnabled = ENV_TRUTHY.has(\n    (procEnv.HARNESS_DEBUG ?? '').toLowerCase(),\n  );\n\n  // Replay log. `seq` is monotonic across the whole process — never reset —\n  // because the host's `SandboxChannel` cursor (`lastSeenEventId`) lives across\n  // turns. The log *contents* are cleared at the start of each turn to bound\n  // memory; the just-finished turn stays replayable until the next `start`.\n  let seqCounter = 0;\n  let eventLog: Array<{ seq: number; line: string }> = [];\n\n  /*\n   * Disk mirror of the in-memory replay log. The in-memory log is lost when the\n   * bridge process dies; the on-disk `event-log.ndjson` survives in the sandbox\n   * filesystem so a respawned bridge (started with `BRIDGE_REPLAY_FROM_DISK=1`)\n   * can reload the in-flight turn and serve a host's resume cursor —\n   * `replay` recovery. Writes are batched on `setImmediate` (single-flight via\n   * `flushPromise`) to keep `emit` off the disk hot path.\n   */\n  let diskBuffer = '';\n  let flushPromise: Promise<void> | null = null;\n\n  const flushEventsToDisk = async (): Promise<void> => {\n    while (diskBuffer.length > 0) {\n      const buf = diskBuffer;\n      diskBuffer = '';\n      await appendFile(eventLogPath, buf).catch(() => {\n        // Best-effort crash-recovery mirror; the in-memory log is the source of\n        // truth for the live connection.\n      });\n    }\n  };\n\n  const scheduleEventFlush = (): void => {\n    if (flushPromise) return;\n    flushPromise = new Promise<void>(resolve => {\n      setImmediate(() => {\n        void flushEventsToDisk().finally(resolve);\n      });\n    }).finally(() => {\n      flushPromise = null;\n      if (diskBuffer.length > 0) {\n        scheduleEventFlush();\n      }\n    });\n  };\n\n  const flushPendingEventsToDisk = async (): Promise<void> => {\n    if (diskBuffer.length > 0 && !flushPromise) {\n      scheduleEventFlush();\n    }\n    // Await each in-flight flush, re-reading `flushPromise` after every await\n    // since a fresh flush may have been scheduled for buffer that arrived while\n    // we waited.\n    let inFlight = flushPromise;\n    while (inFlight) {\n      await inFlight;\n      inFlight = flushPromise;\n    }\n  };\n\n  /*\n   * When respawned for `replay`, reload the previous turn's log from disk before\n   * accepting any connection so the very first `resume{lastSeenEventId}` can be\n   * served the tail (including the terminal `finish`). The seq counter is\n   * restored to the last persisted seq so it stays aligned with the host's\n   * long-lived cursor. The file is NOT truncated in this mode — only a fresh\n   * `start` (next turn) clears it.\n   */\n  const replayFromDisk = procEnv.BRIDGE_REPLAY_FROM_DISK === '1';\n  if (replayFromDisk && existsSync(eventLogPath)) {\n    try {\n      const lines = readFileSync(eventLogPath, 'utf8')\n        .split('\\n')\n        .map(line => line.trim())\n        .filter(Boolean);\n      eventLog = lines.map(line => ({\n        seq: (JSON.parse(line) as { seq: number }).seq,\n        line,\n      }));\n      seqCounter = eventLog.at(-1)?.seq ?? 0;\n    } catch {\n      // Corrupt/partial log: fall back to an empty log; the host then degrades\n      // to `rerun` instead of replaying a malformed tail.\n      eventLog = [];\n      seqCounter = 0;\n    }\n  }\n\n  const pendingToolResults = new Map<\n    string,\n    {\n      resolve: (output: {\n        output: unknown;\n        isError?: boolean;\n        toolResult?: ToolResultPart;\n      }) => void;\n      matches?: (output: {\n        output: unknown;\n        isError?: boolean;\n        toolResult?: ToolResultPart;\n      }) => boolean;\n    }\n  >();\n  const bufferedToolResults: Array<{\n    toolCallId: string;\n    result: {\n      output: unknown;\n      isError?: boolean;\n      toolResult?: ToolResultPart;\n    };\n  }> = [];\n  const pendingToolApprovals = new Map<\n    string,\n    (response: { approved: boolean; reason?: string }) => void\n  >();\n\n  // ─── persistence (best-effort meta + start config) ──────────────────\n  const writeBridgeMeta = async (state: BridgeState): Promise<void> => {\n    try {\n      await writeFile(\n        bridgeMetaPath,\n        JSON.stringify({\n          type: bridgeType,\n          port: currentBoundPort,\n          state,\n          pid,\n        }),\n      );\n    } catch {\n      // Best-effort resilience metadata; not load-bearing for the active turn.\n    }\n  };\n\n  const writeStartConfig = async (start: unknown): Promise<void> => {\n    try {\n      const serialized = JSON.stringify(start);\n      await writeFile(startConfigPath, serialized);\n      // Frozen copy: written once, restored over start-config.json by future\n      // rerun-mode recovery to re-run the original turn from scratch.\n      if (!existsSync(rerunStartConfigPath)) {\n        await writeFile(rerunStartConfigPath, serialized);\n      }\n    } catch {\n      // Best-effort.\n    }\n  };\n\n  // ─── wire send + replay ─────────────────────────────────────────────\n  const emit = (event: BridgeEvent): void => {\n    const seq = ++seqCounter;\n    const line = JSON.stringify({ ...event, seq });\n    eventLog.push({ seq, line });\n    diskBuffer += `${line}\\n`;\n    scheduleEventFlush();\n    if (activeSocket?.readyState === WS_OPEN) {\n      try {\n        activeSocket.send(line);\n      } catch {\n        // Send is best-effort: a dropped socket leaves the event in the log,\n        // replayed once the host reconnects and sends `resume`.\n      }\n    }\n  };\n\n  const replay = (ws: WebSocket, afterSeq: number): void => {\n    for (const entry of eventLog) {\n      if (entry.seq > afterSeq && ws.readyState === WS_OPEN) {\n        ws.send(entry.line);\n      }\n    }\n  };\n\n  // ─── diagnostics ──────────────────────────────────────────────\n  const shouldEmitDebugEvent = (\n    level: BridgeDebugLevel,\n    subsystem: string,\n  ): boolean => {\n    if (!debugConfig?.enabled) return false;\n    const threshold = debugConfig.level ?? 'debug';\n    if (DEBUG_LEVEL_WEIGHT[level] > DEBUG_LEVEL_WEIGHT[threshold]) return false;\n    return subsystemMatches(debugConfig.subsystems, subsystem);\n  };\n\n  /*\n   * Forward sandbox console output. We line-buffer the original writers (kept so\n   * output still reaches the real fds) and emit one `sandbox-log` per complete\n   * line. `emit` never writes to stdout/stderr, so there is no recursion.\n   * Installed lazily the first time a turn enables diagnostics; once installed,\n   * capture is gated per-write on `debugConfig.enabled` so a later turn can\n   * disable it. Console capture is independent of the subsystem/level filter.\n   */\n  const rawStdoutWrite = process.stdout.write.bind(process.stdout);\n  const rawStderrWrite = process.stderr.write.bind(process.stderr);\n\n  const writeErrorToStderr = (input: {\n    message: string;\n    error: unknown;\n  }): void => {\n    try {\n      const formatted = formatBridgeError(input.error);\n      rawStderrWrite(\n        `[harness:${bridgeType}:error] ${input.message}: ${formatted.message}\\n`,\n      );\n      if (formatted.stack) {\n        rawStderrWrite(`${formatted.stack}\\n`);\n      }\n    } catch {}\n  };\n\n  const emitWarning = (input: { message: string }): void => {\n    try {\n      for (const line of input.message.split('\\n')) {\n        if (line.trim().length > 0) {\n          rawStderrWrite(`[harness:${bridgeType}:warn] ${line}\\n`);\n        }\n      }\n    } catch {}\n  };\n\n  const emitError = (input: { error: unknown; message?: string }): void => {\n    writeErrorToStderr({\n      message: input.message ?? 'bridge error',\n      error: input.error,\n    });\n    emit({ type: 'error', error: serialiseError(input.error) });\n  };\n\n  const installConsoleCapture = (): void => {\n    if (consoleCaptureInstalled) return;\n    consoleCaptureInstalled = true;\n    const buffers: { stdout: string; stderr: string } = {\n      stdout: '',\n      stderr: '',\n    };\n    const patch =\n      (stream: 'stdout' | 'stderr', raw: typeof process.stdout.write) =>\n      (chunk: unknown, encoding?: unknown, cb?: unknown): boolean => {\n        if (debugConfig?.enabled) {\n          try {\n            const enc = typeof encoding === 'string' ? encoding : 'utf8';\n            const text =\n              typeof chunk === 'string'\n                ? chunk\n                : Buffer.from(chunk as Uint8Array).toString(\n                    enc as BufferEncoding,\n                  );\n            const combined = buffers[stream] + text.replace(/\\r\\n/g, '\\n');\n            const parts = combined.split('\\n');\n            buffers[stream] = parts.pop() ?? '';\n            for (const line of parts) {\n              const trimmed = line.replace(/\\s+$/, '');\n              if (trimmed) {\n                emit({\n                  type: 'sandbox-log',\n                  source: bridgeType,\n                  stream,\n                  line: trimmed,\n                });\n              }\n            }\n          } catch {\n            // Never let capture break real output.\n          }\n        }\n        return (raw as (c: unknown, e?: unknown, cb?: unknown) => boolean)(\n          chunk,\n          encoding,\n          cb,\n        );\n      };\n    process.stdout.write = patch(\n      'stdout',\n      rawStdoutWrite,\n    ) as typeof process.stdout.write;\n    process.stderr.write = patch(\n      'stderr',\n      rawStderrWrite,\n    ) as typeof process.stderr.write;\n  };\n\n  // ─── inbound routing ────────────────────────────────────────────────\n  const handleInbound = async (\n    msg: TStart | InboundControl,\n    ws: WebSocket,\n  ): Promise<void> => {\n    switch (msg.type) {\n      case 'start': {\n        /*\n         * A new turn replaces the active one — but only after the active one\n         * has fully wound down. Inbound frames are dispatched concurrently,\n         * and the host settles a caller abort immediately, so a retry's\n         * `start` can arrive while the aborted turn is still tearing down\n         * (e.g. a graceful interrupt). Without this fence the old turn would\n         * keep emitting into the new turn's cleared event log, two runtime\n         * processes would run side by side, and the old turn's completion\n         * would mark the bridge `waiting` underneath the new turn. Abort the\n         * old turn to hasten its teardown; adapters are expected to bound\n         * that teardown themselves (e.g. a hard-abort fallback), but the\n         * runtime does not rely on it: the wait is capped by the teardown\n         * grace period, after which the new turn proceeds anyway — the\n         * pre-fence overlapping behavior — rather than hanging behind a\n         * teardown that never settles.\n         */\n        for (;;) {\n          const pendingTurn = activeTurn;\n          if (pendingTurn == null) break;\n          turnAbort?.abort();\n          currentUserMessages?.close(\n            new Error('A new bridge turn replaced the active turn.'),\n          );\n          let graceTimer: ReturnType<typeof setTimeout> | undefined;\n          const settled = await Promise.race([\n            pendingTurn.then(() => true as const),\n            new Promise<false>(resolve => {\n              graceTimer = setTimeout(() => resolve(false), teardownGraceMs);\n              graceTimer.unref?.();\n            }),\n          ]);\n          clearTimeout(graceTimer);\n          if (!settled) break;\n        }\n        let turnFinished!: () => void;\n        const thisTurn = new Promise<void>(resolve => (turnFinished = resolve));\n        activeTurn = thisTurn;\n        activeSocket = ws; // asking for a turn claims the event stream\n        const firstTurn = isFirstTurn;\n        isFirstTurn = false;\n        eventLog = []; // clear previous turn; keep seqCounter monotonic\n        // Mirror the in-memory clear to disk: the log tracks only the current\n        // turn. Discard any unflushed tail from the prior turn first.\n        diskBuffer = '';\n        void writeFile(eventLogPath, '').catch(() => {});\n        turnAbort = new AbortController();\n        currentTurnState = 'running';\n        void writeStartConfig(msg);\n        void writeBridgeMeta('running');\n        const startDebug = (msg as { debug?: BridgeDebugConfig }).debug;\n        debugConfig = {\n          enabled: startDebug?.enabled ?? envDebugEnabled,\n          level:\n            startDebug?.level ??\n            (procEnv.HARNESS_DEBUG_LEVEL as BridgeDebugLevel | undefined),\n          subsystems:\n            startDebug?.subsystems ??\n            parseEnvList(procEnv.HARNESS_DEBUG_SUBSYSTEMS),\n        };\n        if (debugConfig.enabled) {\n          installConsoleCapture();\n        }\n        const userMessages = createBridgeUserMessageQueue({ respond: emit });\n        const turn: BridgeTurn = {\n          emit,\n          requestToolResult: requestInput => {\n            const request =\n              typeof requestInput === 'string'\n                ? { toolCallId: requestInput }\n                : requestInput;\n            const bufferedIndex = bufferedToolResults.findIndex(\n              buffered =>\n                buffered.toolCallId === request.toolCallId ||\n                request.matches?.(buffered.result) === true,\n            );\n            if (bufferedIndex >= 0) {\n              return Promise.resolve(\n                bufferedToolResults.splice(bufferedIndex, 1)[0].result,\n              );\n            }\n            return new Promise(resolve => {\n              pendingToolResults.set(request.toolCallId, {\n                resolve,\n                matches: request.matches,\n              });\n            });\n          },\n          requestToolApproval: approvalId =>\n            new Promise(resolve => {\n              pendingToolApprovals.set(approvalId, resolve);\n            }),\n          experimental_userMessages: userMessages,\n          abortSignal: turnAbort.signal,\n          firstTurn,\n          bridgeLog: input => {\n            const level = input.level ?? 'debug';\n            if (!shouldEmitDebugEvent(level, input.subsystem)) return;\n            emit({\n              type: 'debug-event',\n              level,\n              subsystem: input.subsystem,\n              message: input.message,\n              ...(input.attrs ? { attrs: input.attrs } : {}),\n              ...(input.error !== undefined\n                ? { error: formatBridgeError(input.error) }\n                : {}),\n            });\n          },\n          emitWarning,\n          emitError,\n        };\n        currentUserMessages = userMessages;\n        try {\n          await onStart(msg as TStart, turn);\n        } catch (err) {\n          emitError({ error: err, message: 'bridge turn failed' });\n        } finally {\n          userMessages.close();\n          if (currentUserMessages === userMessages) {\n            currentUserMessages = undefined;\n          }\n          // Only the still-active turn records completion: after a fence\n          // timeout a replacement turn is already running, and this stale\n          // completion must not mark the bridge waiting underneath it.\n          if (activeTurn === thisTurn) {\n            activeTurn = undefined;\n            currentTurnState = 'waiting';\n            void writeBridgeMeta('waiting');\n          }\n          turnFinished();\n        }\n        return;\n      }\n      case 'tool-result': {\n        const result = {\n          output: msg.output,\n          isError: msg.isError,\n          toolResult: msg.toolResult,\n        };\n        const exactPending = pendingToolResults.get(msg.toolCallId);\n        const matchingPending =\n          exactPending == null\n            ? Array.from(pendingToolResults.entries()).find(\n                ([, pending]) => pending.matches?.(result) === true,\n              )\n            : undefined;\n        const pending = exactPending ?? matchingPending?.[1];\n        const pendingId =\n          exactPending != null ? msg.toolCallId : matchingPending?.[0];\n        if (pending != null && pendingId != null) {\n          pendingToolResults.delete(pendingId);\n          pending.resolve(result);\n        } else {\n          bufferedToolResults.push({\n            toolCallId: msg.toolCallId,\n            result,\n          });\n        }\n        return;\n      }\n      case 'tool-approval-response': {\n        const resolver = pendingToolApprovals.get(msg.approvalId);\n        if (resolver) {\n          pendingToolApprovals.delete(msg.approvalId);\n          resolver({ approved: msg.approved, reason: msg.reason });\n        }\n        return;\n      }\n      case 'user-message': {\n        const messageId = msg.messageId ?? randomUUID();\n        if (currentUserMessages == null) {\n          sendControl(ws, {\n            type: 'user-message-response',\n            messageId,\n            accepted: false,\n            error: { message: 'The bridge has no active turn to steer.' },\n          });\n          return;\n        }\n        if (ws !== activeSocket) {\n          sendControl(ws, {\n            type: 'user-message-response',\n            messageId,\n            accepted: false,\n            error: {\n              message: 'The connection does not own the active bridge turn.',\n            },\n          });\n          return;\n        }\n        currentUserMessages.enqueue({\n          messageId,\n          text: msg.text,\n        });\n        return;\n      }\n      case 'abort':\n        turnAbort?.abort();\n        return;\n      case 'resume':\n        activeSocket = ws; // asking for a catch-up claims it too\n        // Synchronous, so no event can slip out live ahead of the replayed tail.\n        replay(ws, msg.lastSeenEventId);\n        return;\n      case 'destroy':\n        currentTurnState = 'done';\n        void writeBridgeMeta('done');\n        await onDestroy?.();\n        drainThenExit(ws, 1000, 'destroy');\n        return;\n      case 'stop': {\n        currentTurnState = 'done';\n        void writeBridgeMeta('done');\n        const data = (await onStop?.()) ?? {};\n        sendControl(ws, { type: 'bridge-stop', data });\n        drainThenExit(ws, 1000, 'stop');\n      }\n    }\n  };\n\n  // ─── server ─────────────────────────────────────────────────────────\n  void writeBridgeMeta('init');\n\n  const wss = new WebSocketServer({ port: bridgeWsPort, host: '0.0.0.0' });\n\n  const exit = (): void => {\n    if (options.onExit) {\n      options.onExit();\n      return;\n    }\n    wss.close(() => process.exit(0));\n    setTimeout(() => process.exit(0), 1000).unref();\n  };\n\n  const drainThenExit = (ws: WebSocket, code: number, reason: string): void => {\n    const start = Date.now();\n    const tick = (): void => {\n      const drained = ws.bufferedAmount === 0 || ws.readyState !== WS_OPEN;\n      if (drained || Date.now() - start >= 5_000) {\n        // Flush the on-disk log so a clean stop/destroy leaves a complete\n        // event-log.ndjson for any later replay recovery.\n        void flushPendingEventsToDisk().finally(() => {\n          try {\n            ws.close(code, reason);\n          } finally {\n            exit();\n          }\n        });\n        return;\n      }\n      setTimeout(tick, 10).unref();\n    };\n    tick();\n  };\n\n  wss.on('listening', () => {\n    const addr = wss.address();\n    currentBoundPort = typeof addr === 'object' && addr ? addr.port : 0;\n    currentTurnState = 'waiting';\n    void writeBridgeMeta('waiting');\n    stdout.write(\n      JSON.stringify({\n        type: 'bridge-ready',\n        port: currentBoundPort,\n      }) + '\\n',\n    );\n    options.onListening?.(currentBoundPort);\n  });\n\n  wss.on('connection', (ws: WebSocket, req: { url?: string }) => {\n    const url = new URL(req.url ?? '/', 'http://localhost');\n    if (url.searchParams.get('agent_bridge_token') !== expectedToken) {\n      ws.close(1008, 'unauthorized');\n      return;\n    }\n\n    // Announce liveness the instant we accept. Some sandbox runtimes complete\n    // the host-side WS handshake before the connection is forwarded here; the\n    // host waits for this frame before sending `start`/`resume`.\n    sendControl(ws, {\n      type: 'bridge-hello',\n      state: currentTurnState,\n      lastSeq: seqCounter,\n      capabilities: { experimental_userMessageResponses: true },\n    });\n\n    ws.on('message', (raw: ArrayBufferLike | string) => {\n      let parsed: TStart | InboundControl;\n      try {\n        const text =\n          typeof raw === 'string' ? raw : Buffer.from(raw).toString('utf8');\n        parsed = JSON.parse(text) as TStart | InboundControl;\n      } catch (err) {\n        sendControl(ws, {\n          type: 'error',\n          error: `protocol parse error: ${(err as Error).message}`,\n        });\n        return;\n      }\n      void handleInbound(parsed, ws);\n    });\n\n    ws.on('close', () => {\n      // Only the stream owner's close matters; a socket that never claimed it,\n      // or that a later `start`/`resume` displaced, closes as a no-op.\n      // Crucially we do NOT abort the in-flight turn: it keeps running and its\n      // events accumulate in the log for replay on reconnect.\n      if (activeSocket === ws) {\n        activeSocket = undefined;\n      }\n    });\n\n    ws.on('error', () => {\n      // 'close' follows; nothing to do beyond keeping the process alive.\n    });\n  });\n\n  // Surface bridge-internal crashes to the host instead of dying silently.\n  process.on('uncaughtException', err => {\n    emitError({ error: err, message: 'uncaught exception' });\n  });\n  process.on('unhandledRejection', err => {\n    emitError({ error: err, message: 'unhandled rejection' });\n  });\n\n  await new Promise<void>((resolve, reject) => {\n    if (wss.address() != null) {\n      resolve();\n      return;\n    }\n\n    wss.once('listening', resolve);\n    wss.once('error', reject);\n  });\n\n  return {\n    port: currentBoundPort,\n    close: () =>\n      new Promise<void>(resolve => {\n        wss.close(() => resolve());\n      }),\n  };\n}\n\n/*\n * Control frames answer the socket that sent the frame they reply to, so the\n * target is always explicit. Event streaming is the separate, stateful path\n * (`emit` → `activeSocket`); this one carries no state at all.\n */\nfunction sendControl(\n  socket: WebSocket | undefined,\n  message: Record<string, unknown>,\n): void {\n  if (socket?.readyState === WS_OPEN) {\n    try {\n      socket.send(JSON.stringify(message));\n    } catch {\n      // best-effort\n    }\n  }\n}\n\nfunction serialiseError(err: unknown): unknown {\n  if (err instanceof Error) {\n    return { name: err.name, message: err.message, stack: err.stack };\n  }\n  return err;\n}\n","const name = 'AI_HarnessBridgeCapabilityUnsupportedError';\n\n/**\n * Signals an unsupported capability discovered inside a sandbox bridge.\n * `isInstance` also recognizes the serialized error shape received by the\n * host, where it can be translated to `HarnessCapabilityUnsupportedError`.\n */\nexport class HarnessBridgeCapabilityUnsupportedError extends Error {\n  readonly harnessId?: string;\n  readonly cause?: unknown;\n\n  constructor({\n    message,\n    harnessId,\n    cause,\n  }: {\n    message: string;\n    harnessId?: string;\n    cause?: unknown;\n  }) {\n    super(message);\n    Object.defineProperty(this, 'name', { value: name });\n    this.harnessId = harnessId;\n    this.cause = cause;\n  }\n\n  static isInstance(\n    error: unknown,\n  ): error is HarnessBridgeCapabilityUnsupportedError {\n    return (\n      error != null &&\n      typeof error === 'object' &&\n      'name' in error &&\n      error.name === name &&\n      'message' in error &&\n      typeof error.message === 'string'\n    );\n  }\n}\n"],"mappings":";AASA,SAAS,YAAY,OAAO,iBAAiB;AAC7C,SAAS,YAAY,oBAAoB;AACzC,SAAS,kBAAkB;AAC3B,SAAS,OAAO,SAAS,KAAK,cAAc;AAE5C,SAAS,uBAAuC;;;ACdhD,IAAM,OAAO;AAON,IAAM,0CAAN,cAAsD,MAAM;AAAA,EAIjE,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAIG;AACD,UAAM,OAAO;AACb,WAAO,eAAe,MAAM,QAAQ,EAAE,OAAO,KAAK,CAAC;AACnD,SAAK,YAAY;AACjB,SAAK,QAAQ;AAAA,EACf;AAAA,EAEA,OAAO,WACL,OACkD;AAClD,WACE,SAAS,QACT,OAAO,UAAU,YACjB,UAAU,SACV,MAAM,SAAS,QACf,aAAa,SACb,OAAO,MAAM,YAAY;AAAA,EAE7B;AACF;;;ADsBA,IAAM,qBAAuD;AAAA,EAC3D,OAAO;AAAA,EACP,MAAM;AAAA,EACN,MAAM;AAAA,EACN,OAAO;AAAA,EACP,OAAO;AACT;AAGA,SAAS,iBACP,SACA,WACS;AACT,MAAI,CAAC,WAAW,QAAQ,WAAW,EAAG,QAAO;AAC7C,SAAO,QAAQ;AAAA,IACb,YAAU,cAAc,UAAU,UAAU,WAAW,GAAG,MAAM,GAAG;AAAA,EACrE;AACF;AAEA,SAAS,kBAAkB,KAIzB;AACA,MAAI,eAAe,OAAO;AACxB,WAAO,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,SAAS,OAAO,IAAI,MAAM;AAAA,EAClE;AACA,MAAI,OAAO,QAAQ,UAAU;AAC3B,WAAO,EAAE,SAAS,IAAI;AAAA,EACxB;AACA,MAAI,QAAQ,QAAQ,OAAO,QAAQ,UAAU;AAC3C,QAAI;AACF,aAAO,EAAE,SAAS,KAAK,UAAU,GAAG,EAAE;AAAA,IACxC,QAAQ;AAAA,IAAC;AAAA,EACX;AACA,SAAO,EAAE,SAAS,OAAO,GAAG,EAAE;AAChC;AAEA,SAAS,6BAA6B,SAEH;AACjC,QAAM,WAA6C,CAAC;AACpD,QAAM,UAEF,CAAC;AACL,QAAM,UAAU,oBAAI,IAMlB;AACF,MAAI,SAAS;AACb,MAAI,eAAe;AAEnB,QAAM,UAAU,CAAC,UAAqD;AACpE,UAAM,WAAW,QAAQ,IAAI,MAAM,SAAS;AAC5C,QAAI,YAAY,MAAM;AACpB,UAAI,SAAS,YAAY,MAAM;AAC7B,gBAAQ,QAAQ,SAAS,QAAQ;AAAA,MACnC;AACA;AAAA,IACF;AAEA,QAAI,UAAU;AACd,UAAM,SAAS,CAAC,aAA8C;AAC5D,UAAI,QAAS;AACb,gBAAU;AACV;AACA,YAAM,QAAQ,QAAQ,IAAI,MAAM,SAAS;AACzC,UAAI,SAAS,KAAM,OAAM,WAAW;AACpC,cAAQ,QAAQ,QAAQ;AAAA,IAC1B;AACA,UAAM,UAA0C;AAAA,MAC9C,WAAW,MAAM;AAAA,MACjB,MAAM,MAAM;AAAA,MACZ,QAAQ,MAAM;AACZ,eAAO;AAAA,UACL,MAAM;AAAA,UACN,WAAW,MAAM;AAAA,UACjB,UAAU;AAAA,QACZ,CAAC;AAAA,MACH;AAAA,MACA,QAAQ,WAAS;AACf,eAAO;AAAA,UACL,MAAM;AAAA,UACN,WAAW,MAAM;AAAA,UACjB,UAAU;AAAA,UACV,OAAO,EAAE,SAAS,kBAAkB,KAAK,EAAE,QAAQ;AAAA,QACrD,CAAC;AAAA,MACH;AAAA,IACF;AACA,YAAQ,IAAI,MAAM,WAAW;AAAA,MAC3B,QAAQ,QAAQ;AAAA,IAClB,CAAC;AACD;AAEA,QAAI,QAAQ;AACV,cAAQ;AAAA,QACN,IAAI,MAAM,uDAAuD;AAAA,MACnE;AACA;AAAA,IACF;AAEA,UAAM,SAAS,QAAQ,MAAM;AAC7B,QAAI,UAAU,MAAM;AAClB,aAAO,EAAE,MAAM,OAAO,OAAO,QAAQ,CAAC;AAAA,IACxC,OAAO;AACL,eAAS,KAAK,OAAO;AAAA,IACvB;AAAA,EACF;AAEA,QAAM,QAAQ,CAAC,UAA0B;AACvC,QAAI,OAAQ;AACZ,aAAS;AACT,UAAM,SACJ,SACA,IAAI,MAAM,0DAA0D;AACtE,eAAW,SAAS,QAAQ,OAAO,GAAG;AACpC,UAAI,MAAM,YAAY,KAAM,OAAM,OAAO,MAAM;AAAA,IACjD;AACA,aAAS,SAAS;AAClB,WAAO,QAAQ,SAAS,GAAG;AACzB,cAAQ,MAAM,EAAG,EAAE,MAAM,MAAM,OAAO,OAAU,CAAC;AAAA,IACnD;AAAA,EACF;AAEA,SAAO;AAAA,IACL,IAAI,eAAe;AACjB,aAAO;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA,CAAC,OAAO,aAAa,IAAI;AACvB,aAAO;AAAA,QACL,MAAM,MAAM;AACV,gBAAM,UAAU,SAAS,MAAM;AAC/B,cAAI,WAAW,MAAM;AACnB,mBAAO,QAAQ,QAAQ,EAAE,MAAM,OAAgB,OAAO,QAAQ,CAAC;AAAA,UACjE;AACA,cAAI,QAAQ;AACV,mBAAO,QAAQ,QAAQ;AAAA,cACrB,MAAM;AAAA,cACN,OAAO;AAAA,YACT,CAAC;AAAA,UACH;AACA,iBAAO,IAAI;AAAA,YACT,aAAW;AACT,sBAAQ,KAAK,OAAO;AAAA,YACtB;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,aAAa,OAAiD;AACrE,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,MACX,MAAM,GAAG,EACT,IAAI,UAAQ,KAAK,KAAK,CAAC,EACvB,OAAO,OAAO;AACjB,SAAO,MAAM,SAAS,IAAI,QAAQ;AACpC;AAEA,IAAM,aAAa,oBAAI,IAAI,CAAC,KAAK,QAAQ,OAAO,IAAI,CAAC;AAkJrD,IAAM,UAAU;AAehB,eAAsB,UACpB,SACuB;AACvB,QAAM,EAAE,YAAY,gBAAgB,SAAS,QAAQ,UAAU,IAAI;AACnE,QAAM,kBAAkB,QAAQ,uBAAuB;AACvD,QAAM,gBAAgB,QAAQ,SAAS,QAAQ,wBAAwB;AACvE,QAAM,eACJ,QAAQ,QAAQ,SAAS,QAAQ,kBAAkB,KAAK,EAAE;AAE5D,QAAM,iBAAiB,GAAG,cAAc;AACxC,QAAM,kBAAkB,GAAG,cAAc;AACzC,QAAM,uBAAuB,GAAG,cAAc;AAC9C,QAAM,eAAe,GAAG,cAAc;AAEtC,MAAI;AACF,UAAM,MAAM,gBAAgB,EAAE,WAAW,KAAK,CAAC;AAAA,EACjD,QAAQ;AAAA,EAER;AAGA,MAAI,mBAAmB;AACvB,MAAI,mBAAgC;AAQpC,MAAI;AACJ,MAAI,cAAc;AAClB,MAAI;AACJ,MAAI;AAMJ,MAAI;AAIJ,MAAI;AACJ,MAAI,0BAA0B;AAC9B,QAAM,kBAAkB,WAAW;AAAA,KAChC,QAAQ,iBAAiB,IAAI,YAAY;AAAA,EAC5C;AAMA,MAAI,aAAa;AACjB,MAAI,WAAiD,CAAC;AAUtD,MAAI,aAAa;AACjB,MAAI,eAAqC;AAEzC,QAAM,oBAAoB,YAA2B;AACnD,WAAO,WAAW,SAAS,GAAG;AAC5B,YAAM,MAAM;AACZ,mBAAa;AACb,YAAM,WAAW,cAAc,GAAG,EAAE,MAAM,MAAM;AAAA,MAGhD,CAAC;AAAA,IACH;AAAA,EACF;AAEA,QAAM,qBAAqB,MAAY;AACrC,QAAI,aAAc;AAClB,mBAAe,IAAI,QAAc,aAAW;AAC1C,mBAAa,MAAM;AACjB,aAAK,kBAAkB,EAAE,QAAQ,OAAO;AAAA,MAC1C,CAAC;AAAA,IACH,CAAC,EAAE,QAAQ,MAAM;AACf,qBAAe;AACf,UAAI,WAAW,SAAS,GAAG;AACzB,2BAAmB;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,EACH;AAEA,QAAM,2BAA2B,YAA2B;AAC1D,QAAI,WAAW,SAAS,KAAK,CAAC,cAAc;AAC1C,yBAAmB;AAAA,IACrB;AAIA,QAAI,WAAW;AACf,WAAO,UAAU;AACf,YAAM;AACN,iBAAW;AAAA,IACb;AAAA,EACF;AAUA,QAAM,iBAAiB,QAAQ,4BAA4B;AAC3D,MAAI,kBAAkB,WAAW,YAAY,GAAG;AAC9C,QAAI;AACF,YAAM,QAAQ,aAAa,cAAc,MAAM,EAC5C,MAAM,IAAI,EACV,IAAI,UAAQ,KAAK,KAAK,CAAC,EACvB,OAAO,OAAO;AACjB,iBAAW,MAAM,IAAI,WAAS;AAAA,QAC5B,KAAM,KAAK,MAAM,IAAI,EAAsB;AAAA,QAC3C;AAAA,MACF,EAAE;AACF,mBAAa,SAAS,GAAG,EAAE,GAAG,OAAO;AAAA,IACvC,QAAQ;AAGN,iBAAW,CAAC;AACZ,mBAAa;AAAA,IACf;AAAA,EACF;AAEA,QAAM,qBAAqB,oBAAI,IAc7B;AACF,QAAM,sBAOD,CAAC;AACN,QAAM,uBAAuB,oBAAI,IAG/B;AAGF,QAAM,kBAAkB,OAAO,UAAsC;AACnE,QAAI;AACF,YAAM;AAAA,QACJ;AAAA,QACA,KAAK,UAAU;AAAA,UACb,MAAM;AAAA,UACN,MAAM;AAAA,UACN;AAAA,UACA;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,QAAM,mBAAmB,OAAO,UAAkC;AAChE,QAAI;AACF,YAAM,aAAa,KAAK,UAAU,KAAK;AACvC,YAAM,UAAU,iBAAiB,UAAU;AAG3C,UAAI,CAAC,WAAW,oBAAoB,GAAG;AACrC,cAAM,UAAU,sBAAsB,UAAU;AAAA,MAClD;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAGA,QAAM,OAAO,CAAC,UAA6B;AACzC,UAAM,MAAM,EAAE;AACd,UAAM,OAAO,KAAK,UAAU,EAAE,GAAG,OAAO,IAAI,CAAC;AAC7C,aAAS,KAAK,EAAE,KAAK,KAAK,CAAC;AAC3B,kBAAc,GAAG,IAAI;AAAA;AACrB,uBAAmB;AACnB,QAAI,cAAc,eAAe,SAAS;AACxC,UAAI;AACF,qBAAa,KAAK,IAAI;AAAA,MACxB,QAAQ;AAAA,MAGR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAS,CAAC,IAAe,aAA2B;AACxD,eAAW,SAAS,UAAU;AAC5B,UAAI,MAAM,MAAM,YAAY,GAAG,eAAe,SAAS;AACrD,WAAG,KAAK,MAAM,IAAI;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AAGA,QAAM,uBAAuB,CAC3B,OACA,cACY;AACZ,QAAI,CAAC,aAAa,QAAS,QAAO;AAClC,UAAM,YAAY,YAAY,SAAS;AACvC,QAAI,mBAAmB,KAAK,IAAI,mBAAmB,SAAS,EAAG,QAAO;AACtE,WAAO,iBAAiB,YAAY,YAAY,SAAS;AAAA,EAC3D;AAUA,QAAM,iBAAiB,QAAQ,OAAO,MAAM,KAAK,QAAQ,MAAM;AAC/D,QAAM,iBAAiB,QAAQ,OAAO,MAAM,KAAK,QAAQ,MAAM;AAE/D,QAAM,qBAAqB,CAAC,UAGhB;AACV,QAAI;AACF,YAAM,YAAY,kBAAkB,MAAM,KAAK;AAC/C;AAAA,QACE,YAAY,UAAU,WAAW,MAAM,OAAO,KAAK,UAAU,OAAO;AAAA;AAAA,MACtE;AACA,UAAI,UAAU,OAAO;AACnB,uBAAe,GAAG,UAAU,KAAK;AAAA,CAAI;AAAA,MACvC;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX;AAEA,QAAM,cAAc,CAAC,UAAqC;AACxD,QAAI;AACF,iBAAW,QAAQ,MAAM,QAAQ,MAAM,IAAI,GAAG;AAC5C,YAAI,KAAK,KAAK,EAAE,SAAS,GAAG;AAC1B,yBAAe,YAAY,UAAU,UAAU,IAAI;AAAA,CAAI;AAAA,QACzD;AAAA,MACF;AAAA,IACF,QAAQ;AAAA,IAAC;AAAA,EACX;AAEA,QAAM,YAAY,CAAC,UAAsD;AACvE,uBAAmB;AAAA,MACjB,SAAS,MAAM,WAAW;AAAA,MAC1B,OAAO,MAAM;AAAA,IACf,CAAC;AACD,SAAK,EAAE,MAAM,SAAS,OAAO,eAAe,MAAM,KAAK,EAAE,CAAC;AAAA,EAC5D;AAEA,QAAM,wBAAwB,MAAY;AACxC,QAAI,wBAAyB;AAC7B,8BAA0B;AAC1B,UAAM,UAA8C;AAAA,MAClD,QAAQ;AAAA,MACR,QAAQ;AAAA,IACV;AACA,UAAM,QACJ,CAAC,QAA6B,QAC9B,CAAC,OAAgB,UAAoB,OAA0B;AAC7D,UAAI,aAAa,SAAS;AACxB,YAAI;AACF,gBAAM,MAAM,OAAO,aAAa,WAAW,WAAW;AACtD,gBAAM,OACJ,OAAO,UAAU,WACb,QACA,OAAO,KAAK,KAAmB,EAAE;AAAA,YAC/B;AAAA,UACF;AACN,gBAAM,WAAW,QAAQ,MAAM,IAAI,KAAK,QAAQ,SAAS,IAAI;AAC7D,gBAAM,QAAQ,SAAS,MAAM,IAAI;AACjC,kBAAQ,MAAM,IAAI,MAAM,IAAI,KAAK;AACjC,qBAAW,QAAQ,OAAO;AACxB,kBAAM,UAAU,KAAK,QAAQ,QAAQ,EAAE;AACvC,gBAAI,SAAS;AACX,mBAAK;AAAA,gBACH,MAAM;AAAA,gBACN,QAAQ;AAAA,gBACR;AAAA,gBACA,MAAM;AAAA,cACR,CAAC;AAAA,YACH;AAAA,UACF;AAAA,QACF,QAAQ;AAAA,QAER;AAAA,MACF;AACA,aAAQ;AAAA,QACN;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACF,YAAQ,OAAO,QAAQ;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AACA,YAAQ,OAAO,QAAQ;AAAA,MACrB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAGA,QAAM,gBAAgB,OACpB,KACA,OACkB;AAClB,YAAQ,IAAI,MAAM;AAAA,MAChB,KAAK,SAAS;AAiBZ,mBAAS;AACP,gBAAM,cAAc;AACpB,cAAI,eAAe,KAAM;AACzB,qBAAW,MAAM;AACjB,+BAAqB;AAAA,YACnB,IAAI,MAAM,6CAA6C;AAAA,UACzD;AACA,cAAI;AACJ,gBAAM,UAAU,MAAM,QAAQ,KAAK;AAAA,YACjC,YAAY,KAAK,MAAM,IAAa;AAAA,YACpC,IAAI,QAAe,aAAW;AAC5B,2BAAa,WAAW,MAAM,QAAQ,KAAK,GAAG,eAAe;AAC7D,yBAAW,QAAQ;AAAA,YACrB,CAAC;AAAA,UACH,CAAC;AACD,uBAAa,UAAU;AACvB,cAAI,CAAC,QAAS;AAAA,QAChB;AACA,YAAI;AACJ,cAAM,WAAW,IAAI,QAAc,aAAY,eAAe,OAAQ;AACtE,qBAAa;AACb,uBAAe;AACf,cAAM,YAAY;AAClB,sBAAc;AACd,mBAAW,CAAC;AAGZ,qBAAa;AACb,aAAK,UAAU,cAAc,EAAE,EAAE,MAAM,MAAM;AAAA,QAAC,CAAC;AAC/C,oBAAY,IAAI,gBAAgB;AAChC,2BAAmB;AACnB,aAAK,iBAAiB,GAAG;AACzB,aAAK,gBAAgB,SAAS;AAC9B,cAAM,aAAc,IAAsC;AAC1D,sBAAc;AAAA,UACZ,SAAS,YAAY,WAAW;AAAA,UAChC,OACE,YAAY,SACX,QAAQ;AAAA,UACX,YACE,YAAY,cACZ,aAAa,QAAQ,wBAAwB;AAAA,QACjD;AACA,YAAI,YAAY,SAAS;AACvB,gCAAsB;AAAA,QACxB;AACA,cAAM,eAAe,6BAA6B,EAAE,SAAS,KAAK,CAAC;AACnE,cAAM,OAAmB;AAAA,UACvB;AAAA,UACA,mBAAmB,kBAAgB;AACjC,kBAAM,UACJ,OAAO,iBAAiB,WACpB,EAAE,YAAY,aAAa,IAC3B;AACN,kBAAM,gBAAgB,oBAAoB;AAAA,cACxC,cACE,SAAS,eAAe,QAAQ,cAChC,QAAQ,UAAU,SAAS,MAAM,MAAM;AAAA,YAC3C;AACA,gBAAI,iBAAiB,GAAG;AACtB,qBAAO,QAAQ;AAAA,gBACb,oBAAoB,OAAO,eAAe,CAAC,EAAE,CAAC,EAAE;AAAA,cAClD;AAAA,YACF;AACA,mBAAO,IAAI,QAAQ,aAAW;AAC5B,iCAAmB,IAAI,QAAQ,YAAY;AAAA,gBACzC;AAAA,gBACA,SAAS,QAAQ;AAAA,cACnB,CAAC;AAAA,YACH,CAAC;AAAA,UACH;AAAA,UACA,qBAAqB,gBACnB,IAAI,QAAQ,aAAW;AACrB,iCAAqB,IAAI,YAAY,OAAO;AAAA,UAC9C,CAAC;AAAA,UACH,2BAA2B;AAAA,UAC3B,aAAa,UAAU;AAAA,UACvB;AAAA,UACA,WAAW,WAAS;AAClB,kBAAM,QAAQ,MAAM,SAAS;AAC7B,gBAAI,CAAC,qBAAqB,OAAO,MAAM,SAAS,EAAG;AACnD,iBAAK;AAAA,cACH,MAAM;AAAA,cACN;AAAA,cACA,WAAW,MAAM;AAAA,cACjB,SAAS,MAAM;AAAA,cACf,GAAI,MAAM,QAAQ,EAAE,OAAO,MAAM,MAAM,IAAI,CAAC;AAAA,cAC5C,GAAI,MAAM,UAAU,SAChB,EAAE,OAAO,kBAAkB,MAAM,KAAK,EAAE,IACxC,CAAC;AAAA,YACP,CAAC;AAAA,UACH;AAAA,UACA;AAAA,UACA;AAAA,QACF;AACA,8BAAsB;AACtB,YAAI;AACF,gBAAM,QAAQ,KAAe,IAAI;AAAA,QACnC,SAAS,KAAK;AACZ,oBAAU,EAAE,OAAO,KAAK,SAAS,qBAAqB,CAAC;AAAA,QACzD,UAAE;AACA,uBAAa,MAAM;AACnB,cAAI,wBAAwB,cAAc;AACxC,kCAAsB;AAAA,UACxB;AAIA,cAAI,eAAe,UAAU;AAC3B,yBAAa;AACb,+BAAmB;AACnB,iBAAK,gBAAgB,SAAS;AAAA,UAChC;AACA,uBAAa;AAAA,QACf;AACA;AAAA,MACF;AAAA,MACA,KAAK,eAAe;AAClB,cAAM,SAAS;AAAA,UACb,QAAQ,IAAI;AAAA,UACZ,SAAS,IAAI;AAAA,UACb,YAAY,IAAI;AAAA,QAClB;AACA,cAAM,eAAe,mBAAmB,IAAI,IAAI,UAAU;AAC1D,cAAM,kBACJ,gBAAgB,OACZ,MAAM,KAAK,mBAAmB,QAAQ,CAAC,EAAE;AAAA,UACvC,CAAC,CAAC,EAAEA,QAAO,MAAMA,SAAQ,UAAU,MAAM,MAAM;AAAA,QACjD,IACA;AACN,cAAM,UAAU,gBAAgB,kBAAkB,CAAC;AACnD,cAAM,YACJ,gBAAgB,OAAO,IAAI,aAAa,kBAAkB,CAAC;AAC7D,YAAI,WAAW,QAAQ,aAAa,MAAM;AACxC,6BAAmB,OAAO,SAAS;AACnC,kBAAQ,QAAQ,MAAM;AAAA,QACxB,OAAO;AACL,8BAAoB,KAAK;AAAA,YACvB,YAAY,IAAI;AAAA,YAChB;AAAA,UACF,CAAC;AAAA,QACH;AACA;AAAA,MACF;AAAA,MACA,KAAK,0BAA0B;AAC7B,cAAM,WAAW,qBAAqB,IAAI,IAAI,UAAU;AACxD,YAAI,UAAU;AACZ,+BAAqB,OAAO,IAAI,UAAU;AAC1C,mBAAS,EAAE,UAAU,IAAI,UAAU,QAAQ,IAAI,OAAO,CAAC;AAAA,QACzD;AACA;AAAA,MACF;AAAA,MACA,KAAK,gBAAgB;AACnB,cAAM,YAAY,IAAI,aAAa,WAAW;AAC9C,YAAI,uBAAuB,MAAM;AAC/B,sBAAY,IAAI;AAAA,YACd,MAAM;AAAA,YACN;AAAA,YACA,UAAU;AAAA,YACV,OAAO,EAAE,SAAS,0CAA0C;AAAA,UAC9D,CAAC;AACD;AAAA,QACF;AACA,YAAI,OAAO,cAAc;AACvB,sBAAY,IAAI;AAAA,YACd,MAAM;AAAA,YACN;AAAA,YACA,UAAU;AAAA,YACV,OAAO;AAAA,cACL,SAAS;AAAA,YACX;AAAA,UACF,CAAC;AACD;AAAA,QACF;AACA,4BAAoB,QAAQ;AAAA,UAC1B;AAAA,UACA,MAAM,IAAI;AAAA,QACZ,CAAC;AACD;AAAA,MACF;AAAA,MACA,KAAK;AACH,mBAAW,MAAM;AACjB;AAAA,MACF,KAAK;AACH,uBAAe;AAEf,eAAO,IAAI,IAAI,eAAe;AAC9B;AAAA,MACF,KAAK;AACH,2BAAmB;AACnB,aAAK,gBAAgB,MAAM;AAC3B,cAAM,YAAY;AAClB,sBAAc,IAAI,KAAM,SAAS;AACjC;AAAA,MACF,KAAK,QAAQ;AACX,2BAAmB;AACnB,aAAK,gBAAgB,MAAM;AAC3B,cAAM,OAAQ,MAAM,SAAS,KAAM,CAAC;AACpC,oBAAY,IAAI,EAAE,MAAM,eAAe,KAAK,CAAC;AAC7C,sBAAc,IAAI,KAAM,MAAM;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AAGA,OAAK,gBAAgB,MAAM;AAE3B,QAAM,MAAM,IAAI,gBAAgB,EAAE,MAAM,cAAc,MAAM,UAAU,CAAC;AAEvE,QAAM,OAAO,MAAY;AACvB,QAAI,QAAQ,QAAQ;AAClB,cAAQ,OAAO;AACf;AAAA,IACF;AACA,QAAI,MAAM,MAAM,QAAQ,KAAK,CAAC,CAAC;AAC/B,eAAW,MAAM,QAAQ,KAAK,CAAC,GAAG,GAAI,EAAE,MAAM;AAAA,EAChD;AAEA,QAAM,gBAAgB,CAAC,IAAe,MAAc,WAAyB;AAC3E,UAAM,QAAQ,KAAK,IAAI;AACvB,UAAM,OAAO,MAAY;AACvB,YAAM,UAAU,GAAG,mBAAmB,KAAK,GAAG,eAAe;AAC7D,UAAI,WAAW,KAAK,IAAI,IAAI,SAAS,KAAO;AAG1C,aAAK,yBAAyB,EAAE,QAAQ,MAAM;AAC5C,cAAI;AACF,eAAG,MAAM,MAAM,MAAM;AAAA,UACvB,UAAE;AACA,iBAAK;AAAA,UACP;AAAA,QACF,CAAC;AACD;AAAA,MACF;AACA,iBAAW,MAAM,EAAE,EAAE,MAAM;AAAA,IAC7B;AACA,SAAK;AAAA,EACP;AAEA,MAAI,GAAG,aAAa,MAAM;AACxB,UAAM,OAAO,IAAI,QAAQ;AACzB,uBAAmB,OAAO,SAAS,YAAY,OAAO,KAAK,OAAO;AAClE,uBAAmB;AACnB,SAAK,gBAAgB,SAAS;AAC9B,WAAO;AAAA,MACL,KAAK,UAAU;AAAA,QACb,MAAM;AAAA,QACN,MAAM;AAAA,MACR,CAAC,IAAI;AAAA,IACP;AACA,YAAQ,cAAc,gBAAgB;AAAA,EACxC,CAAC;AAED,MAAI,GAAG,cAAc,CAAC,IAAe,QAA0B;AAC7D,UAAM,MAAM,IAAI,IAAI,IAAI,OAAO,KAAK,kBAAkB;AACtD,QAAI,IAAI,aAAa,IAAI,oBAAoB,MAAM,eAAe;AAChE,SAAG,MAAM,MAAM,cAAc;AAC7B;AAAA,IACF;AAKA,gBAAY,IAAI;AAAA,MACd,MAAM;AAAA,MACN,OAAO;AAAA,MACP,SAAS;AAAA,MACT,cAAc,EAAE,mCAAmC,KAAK;AAAA,IAC1D,CAAC;AAED,OAAG,GAAG,WAAW,CAAC,QAAkC;AAClD,UAAI;AACJ,UAAI;AACF,cAAM,OACJ,OAAO,QAAQ,WAAW,MAAM,OAAO,KAAK,GAAG,EAAE,SAAS,MAAM;AAClE,iBAAS,KAAK,MAAM,IAAI;AAAA,MAC1B,SAAS,KAAK;AACZ,oBAAY,IAAI;AAAA,UACd,MAAM;AAAA,UACN,OAAO,yBAA0B,IAAc,OAAO;AAAA,QACxD,CAAC;AACD;AAAA,MACF;AACA,WAAK,cAAc,QAAQ,EAAE;AAAA,IAC/B,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AAKnB,UAAI,iBAAiB,IAAI;AACvB,uBAAe;AAAA,MACjB;AAAA,IACF,CAAC;AAED,OAAG,GAAG,SAAS,MAAM;AAAA,IAErB,CAAC;AAAA,EACH,CAAC;AAGD,UAAQ,GAAG,qBAAqB,SAAO;AACrC,cAAU,EAAE,OAAO,KAAK,SAAS,qBAAqB,CAAC;AAAA,EACzD,CAAC;AACD,UAAQ,GAAG,sBAAsB,SAAO;AACtC,cAAU,EAAE,OAAO,KAAK,SAAS,sBAAsB,CAAC;AAAA,EAC1D,CAAC;AAED,QAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,QAAI,IAAI,QAAQ,KAAK,MAAM;AACzB,cAAQ;AACR;AAAA,IACF;AAEA,QAAI,KAAK,aAAa,OAAO;AAC7B,QAAI,KAAK,SAAS,MAAM;AAAA,EAC1B,CAAC;AAED,SAAO;AAAA,IACL,MAAM;AAAA,IACN,OAAO,MACL,IAAI,QAAc,aAAW;AAC3B,UAAI,MAAM,MAAM,QAAQ,CAAC;AAAA,IAC3B,CAAC;AAAA,EACL;AACF;AAOA,SAAS,YACP,QACA,SACM;AACN,MAAI,QAAQ,eAAe,SAAS;AAClC,QAAI;AACF,aAAO,KAAK,KAAK,UAAU,OAAO,CAAC;AAAA,IACrC,QAAQ;AAAA,IAER;AAAA,EACF;AACF;AAEA,SAAS,eAAe,KAAuB;AAC7C,MAAI,eAAe,OAAO;AACxB,WAAO,EAAE,MAAM,IAAI,MAAM,SAAS,IAAI,SAAS,OAAO,IAAI,MAAM;AAAA,EAClE;AACA,SAAO;AACT;","names":["pending"]}

package/dist/index.d.ts

@@ -7,7 +7,7 @@ import { JSONSchema7, JSONValue, LanguageModelV4StreamPart, LanguageModelV4ToolC
 /**
  * One file to write into the sandbox as part of an adapter's bootstrap recipe.
  * Absolute paths are used as-is. Relative paths are resolved against the
- * sandbox's default working directory. Paths should live under
+ * harness state directory (`$HOME/.ai-sdk-harness`). Paths should live under
  * {@link HarnessV1Bootstrap.bootstrapDir}.
  */
 interface HarnessV1BootstrapFile {
@@ -36,10 +36,10 @@ interface HarnessV1Bootstrap {
     readonly harnessId: string;
     /**
      * Path inside the sandbox where this recipe writes its state. Absolute paths
-     * are used as-is. Relative paths are resolved against the sandbox's default
-     * working directory. The marker file lives directly under it. Files
-     * declared in {@link files} should also use this prefix so an adapter upgrade
-     * can sweep stale state by clearing the directory.
+     * are used as-is. Relative paths are resolved against the harness state
+     * directory (`$HOME/.ai-sdk-harness`). The marker file lives directly under
+     * it. Files declared in {@link files} should also use this prefix so an
+     * adapter upgrade can sweep stale state by clearing the directory.
      */
     readonly bootstrapDir: string;
     /** Files to write into the sandbox before any command runs. */
@@ -56,6 +56,18 @@ type HarnessV1PortEndpoint = {
     readonly url: string;
     readonly headers?: Readonly<Record<string, string>>;
 };
+/**
+ * Fixed, non-configurable path for harness-generated state (bootstrap files,
+ * markers, and `.agent-runs`) under the sandbox's own HOME, never under
+ * {@link HarnessV1NetworkSandboxSession.defaultWorkingDirectory}. Resolve HOME
+ * with `resolveSandboxHomeDir` when it is not already known. This works from
+ * provider creation hooks that only have a plain sandbox session. The
+ * framework also calls this with a symbolic `$HOME` when hashing bootstrap
+ * recipes, so changes to the state path invalidate existing templates.
+ */
+declare function harnessStateDirectoryPath({ sandboxHomeDir, }: {
+    sandboxHomeDir: string;
+}): string;
 /**
  * Network sandbox session returned by `HarnessV1SandboxProvider.createSession()`. The
  * harness keeps this for the lifetime of a session. It is itself a
@@ -1480,6 +1492,16 @@ interface HarnessV1SandboxProvider {
     }) => PromiseLike<HarnessV1NetworkSandboxSession>;
 }
 
+/**
+ * Return the per-session harness state path under `.agent-runs`. Session IDs
+ * occupy one encoded path segment, so path separators and parent-directory
+ * references cannot move session data outside the harness state directory.
+ */
+declare function harnessSessionDataDirectoryPath({ stateDirectory, sessionId, }: {
+    stateDirectory: string;
+    sessionId: string;
+}): string;
+
 /**
  * The subset of a host-defined tool that travels on the `start` message. The
  * runtime only needs the name, description, and JSON-Schema input to surface
@@ -1933,4 +1955,4 @@ declare class HarnessSandboxAuthenticationError extends HarnessError {
     static isInstance(error: unknown): error is HarnessSandboxAuthenticationError;
 }
 
-export { type Experimental_HarnessV1BridgeUserMessageResponse, HARNESS_V1_BUILTIN_TOOLS, HARNESS_V1_BUILTIN_TOOL_NAMES, HarnessCapabilityUnsupportedError, HarnessError, HarnessSandboxAuthenticationError, type HarnessV1, type HarnessV1Authentication, type HarnessV1AuthenticationEnvironment, type HarnessV1Bootstrap, type HarnessV1BootstrapCommand, type HarnessV1BootstrapFile, type HarnessV1BridgeDebugEvent, type HarnessV1BridgeOutboundMessage, type HarnessV1BridgeReady, type HarnessV1BridgeSandboxLog, type HarnessV1BridgeToolWire, type HarnessV1BuiltinTool, type HarnessV1BuiltinToolFiltering, type HarnessV1BuiltinToolName, type HarnessV1BuiltinToolUseKind, type HarnessV1CallWarning, type HarnessV1ContinueTurnOptions, type HarnessV1ContinueTurnState, type HarnessV1CredentialForwarding, type HarnessV1DebugConfig, type HarnessV1DebugLevel, type HarnessV1Diagnostic, type HarnessV1JSONArray, type HarnessV1JSONObject, type HarnessV1JSONSchema, type HarnessV1JSONValue, type HarnessV1LifecycleState, type HarnessV1Metadata, type HarnessV1MintBridgeTokenCallback, type HarnessV1NetworkPolicy, type HarnessV1NetworkSandboxSession, type HarnessV1Observability, type HarnessV1PendingToolApproval, type HarnessV1PendingToolResult, type HarnessV1PermissionMode, type HarnessV1PortEndpoint, type HarnessV1Prompt, type HarnessV1PromptControl, type HarnessV1PromptTurnOptions, type HarnessV1QuestionsTool, type HarnessV1QuestionsToolInput, type HarnessV1QuestionsToolOutput, type HarnessV1RequestTransformation, type HarnessV1RequestTransformationSources, type HarnessV1ResponseFormat, type HarnessV1ResumeSessionState, type HarnessV1SandboxProvider, type HarnessV1Session, type HarnessV1Skill, type HarnessV1StartOptions, type HarnessV1StreamPart, type HarnessV1ToolSpec, type HarnessV1TurnSettings, commonTool, experimental_harnessV1BridgeUserMessageInboundSchema, experimental_harnessV1BridgeUserMessageResponseSchema, getHarnessV1BuiltinToolFilteringDenialReason, harnessV1BridgeAbortInboundSchema, harnessV1BridgeBuiltinToolFilteringSchema, harnessV1BridgeDebugEventSchema, harnessV1BridgeDestroyInboundSchema, harnessV1BridgeHelloSchema, harnessV1BridgeInboundCommandSchemas, harnessV1BridgeOutboundMessageSchema, harnessV1BridgePermissionModeSchema, harnessV1BridgeReadySchema, harnessV1BridgeResponseFormatSchema, harnessV1BridgeResumeInboundSchema, harnessV1BridgeSandboxLogSchema, harnessV1BridgeStartBaseSchema, harnessV1BridgeStopInboundSchema, harnessV1BridgeStopSchema, harnessV1BridgeThreadSchema, harnessV1BridgeToolApprovalResponseInboundSchema, harnessV1BridgeToolResultInboundSchema, harnessV1BridgeToolWireSchema, harnessV1BridgeUserMessageInboundSchema, harnessV1DebugConfigSchema, harnessV1DebugLevelSchema, harnessV1DiagnosticFromBridgeFrame, harnessV1ErrorPartSchema, harnessV1FileChangePartSchema, harnessV1FinishPartSchema, harnessV1FinishStepPartSchema, harnessV1QuestionsToolInputSchema, harnessV1QuestionsToolOutputSchema, harnessV1RawPartSchema, harnessV1ReasoningDeltaPartSchema, harnessV1ReasoningEndPartSchema, harnessV1ReasoningStartPartSchema, harnessV1StreamPartSchema, harnessV1StreamStartPartSchema, harnessV1TextDeltaPartSchema, harnessV1TextEndPartSchema, harnessV1TextStartPartSchema, harnessV1ToolApprovalRequestPartSchema, harnessV1ToolCallPartSchema, harnessV1ToolResultPartSchema, isHarnessV1BuiltinToolIncluded };
+export { type Experimental_HarnessV1BridgeUserMessageResponse, HARNESS_V1_BUILTIN_TOOLS, HARNESS_V1_BUILTIN_TOOL_NAMES, HarnessCapabilityUnsupportedError, HarnessError, HarnessSandboxAuthenticationError, type HarnessV1, type HarnessV1Authentication, type HarnessV1AuthenticationEnvironment, type HarnessV1Bootstrap, type HarnessV1BootstrapCommand, type HarnessV1BootstrapFile, type HarnessV1BridgeDebugEvent, type HarnessV1BridgeOutboundMessage, type HarnessV1BridgeReady, type HarnessV1BridgeSandboxLog, type HarnessV1BridgeToolWire, type HarnessV1BuiltinTool, type HarnessV1BuiltinToolFiltering, type HarnessV1BuiltinToolName, type HarnessV1BuiltinToolUseKind, type HarnessV1CallWarning, type HarnessV1ContinueTurnOptions, type HarnessV1ContinueTurnState, type HarnessV1CredentialForwarding, type HarnessV1DebugConfig, type HarnessV1DebugLevel, type HarnessV1Diagnostic, type HarnessV1JSONArray, type HarnessV1JSONObject, type HarnessV1JSONSchema, type HarnessV1JSONValue, type HarnessV1LifecycleState, type HarnessV1Metadata, type HarnessV1MintBridgeTokenCallback, type HarnessV1NetworkPolicy, type HarnessV1NetworkSandboxSession, type HarnessV1Observability, type HarnessV1PendingToolApproval, type HarnessV1PendingToolResult, type HarnessV1PermissionMode, type HarnessV1PortEndpoint, type HarnessV1Prompt, type HarnessV1PromptControl, type HarnessV1PromptTurnOptions, type HarnessV1QuestionsTool, type HarnessV1QuestionsToolInput, type HarnessV1QuestionsToolOutput, type HarnessV1RequestTransformation, type HarnessV1RequestTransformationSources, type HarnessV1ResponseFormat, type HarnessV1ResumeSessionState, type HarnessV1SandboxProvider, type HarnessV1Session, type HarnessV1Skill, type HarnessV1StartOptions, type HarnessV1StreamPart, type HarnessV1ToolSpec, type HarnessV1TurnSettings, commonTool, experimental_harnessV1BridgeUserMessageInboundSchema, experimental_harnessV1BridgeUserMessageResponseSchema, getHarnessV1BuiltinToolFilteringDenialReason, harnessSessionDataDirectoryPath, harnessStateDirectoryPath, harnessV1BridgeAbortInboundSchema, harnessV1BridgeBuiltinToolFilteringSchema, harnessV1BridgeDebugEventSchema, harnessV1BridgeDestroyInboundSchema, harnessV1BridgeHelloSchema, harnessV1BridgeInboundCommandSchemas, harnessV1BridgeOutboundMessageSchema, harnessV1BridgePermissionModeSchema, harnessV1BridgeReadySchema, harnessV1BridgeResponseFormatSchema, harnessV1BridgeResumeInboundSchema, harnessV1BridgeSandboxLogSchema, harnessV1BridgeStartBaseSchema, harnessV1BridgeStopInboundSchema, harnessV1BridgeStopSchema, harnessV1BridgeThreadSchema, harnessV1BridgeToolApprovalResponseInboundSchema, harnessV1BridgeToolResultInboundSchema, harnessV1BridgeToolWireSchema, harnessV1BridgeUserMessageInboundSchema, harnessV1DebugConfigSchema, harnessV1DebugLevelSchema, harnessV1DiagnosticFromBridgeFrame, harnessV1ErrorPartSchema, harnessV1FileChangePartSchema, harnessV1FinishPartSchema, harnessV1FinishStepPartSchema, harnessV1QuestionsToolInputSchema, harnessV1QuestionsToolOutputSchema, harnessV1RawPartSchema, harnessV1ReasoningDeltaPartSchema, harnessV1ReasoningEndPartSchema, harnessV1ReasoningStartPartSchema, harnessV1StreamPartSchema, harnessV1StreamStartPartSchema, harnessV1TextDeltaPartSchema, harnessV1TextEndPartSchema, harnessV1TextStartPartSchema, harnessV1ToolApprovalRequestPartSchema, harnessV1ToolCallPartSchema, harnessV1ToolResultPartSchema, isHarnessV1BuiltinToolIncluded };

package/dist/index.js

@@ -111,6 +111,35 @@ function commonTool(commonName, opts) {
   };
 }
 
+// src/v1/harness-v1-network-sandbox-session.ts
+import { posix } from "path";
+var HARNESS_V1_STATE_DIRECTORY_NAME = ".ai-sdk-harness";
+function harnessStateDirectoryPath({
+  sandboxHomeDir
+}) {
+  return posix.join(sandboxHomeDir, HARNESS_V1_STATE_DIRECTORY_NAME);
+}
+
+// src/v1/harness-session-data-directory-path.ts
+import { posix as posix2 } from "path";
+function encodeHarnessPathSegment(value) {
+  const encoded = encodeURIComponent(value);
+  if (encoded === "") return "%";
+  if (encoded === ".") return "%2E";
+  if (encoded === "..") return "%2E%2E";
+  return encoded;
+}
+function harnessSessionDataDirectoryPath({
+  stateDirectory,
+  sessionId
+}) {
+  return posix2.join(
+    stateDirectory,
+    ".agent-runs",
+    encodeHarnessPathSegment(sessionId)
+  );
+}
+
 // src/v1/harness-v1-stream-part.ts
 import { z as z3 } from "zod/v4";
 var harnessV1JsonValueSchema = z3.lazy(
@@ -595,6 +624,8 @@ export {
   experimental_harnessV1BridgeUserMessageInboundSchema,
   experimental_harnessV1BridgeUserMessageResponseSchema,
   getHarnessV1BuiltinToolFilteringDenialReason,
+  harnessSessionDataDirectoryPath,
+  harnessStateDirectoryPath,
   harnessV1BridgeAbortInboundSchema,
   harnessV1BridgeBuiltinToolFilteringSchema,
   harnessV1BridgeDebugEventSchema,