@ai-sdk/harness 1.0.87 → 1.0.90

package/src/utils/credential-forwarding.ts

@@ -1,4 +1,5 @@
 import type { HarnessV1CredentialForwarding } from '../v1';
+import { generateSandboxCredentialPlaceholder } from './sandbox-credential-brokering';
 
 export async function applyCredentialForwarding({
   environment,
@@ -26,3 +27,32 @@ export async function applyCredentialForwarding({
 
   return forwardedEnvironment;
 }
+
+export async function createSandboxCredentialEnvironment({
+  environment,
+  credentialEnvironmentVariables,
+  credentialForwarding,
+}: {
+  environment: Readonly<Record<string, string>>;
+  credentialEnvironmentVariables: ReadonlyArray<string>;
+  credentialForwarding: HarnessV1CredentialForwarding | undefined;
+}): Promise<Record<string, string>> {
+  const sandboxCredentialEnvironment: Record<string, string> = {};
+
+  for (const environmentVariableName of new Set(
+    credentialEnvironmentVariables,
+  )) {
+    if (environment[environmentVariableName] == null) continue;
+
+    const placeholder = generateSandboxCredentialPlaceholder();
+    sandboxCredentialEnvironment[environmentVariableName] =
+      credentialForwarding == null
+        ? placeholder
+        : await credentialForwarding({
+            credential: placeholder,
+            environmentVariableName,
+          });
+  }
+
+  return sandboxCredentialEnvironment;
+}

package/src/utils/index.ts

@@ -12,9 +12,14 @@ export {
 } from './bridge-user-message-submitter';
 export { classifyDiskLog, type DiskLogRecoveryMode } from './classify-disk-log';
 export { getAiGatewayAuthFromEnv } from './ai-gateway-auth';
-export { applyCredentialForwarding } from './credential-forwarding';
+export {
+  applyCredentialForwarding,
+  createSandboxCredentialEnvironment,
+} from './credential-forwarding';
 export {
   createCredentialRequestTransformation,
+  generateSandboxCredentialPlaceholder,
+  isSandboxCredentialPlaceholder,
   maskSandboxCredentials,
   warnCredentialBrokeringUnavailable,
 } from './sandbox-credential-brokering';

package/src/utils/sandbox-credential-brokering.ts

@@ -1,5 +1,16 @@
+import { randomBytes } from 'node:crypto';
 import type { HarnessV1RequestTransformation } from '../v1';
 
+const SANDBOX_CREDENTIAL_PLACEHOLDER_PREFIX = 'aisdkhc_';
+
+export function generateSandboxCredentialPlaceholder(): string {
+  return `${SANDBOX_CREDENTIAL_PLACEHOLDER_PREFIX}${randomBytes(32).toString('base64url')}`;
+}
+
+export function isSandboxCredentialPlaceholder(value: string): boolean {
+  return /^aisdkhc_[A-Za-z0-9_-]{43}$/.test(value);
+}
+
 export function warnCredentialBrokeringUnavailable(): void {
   console.warn(
     'The sandbox implementation does not support configuring request transformations, so credential brokering does not work. Falling back to less secure credential forwarding.',
@@ -23,19 +34,25 @@ export function maskSandboxCredentials({
 }
 
 export function createCredentialRequestTransformation({
-  baseUrl,
-  headers,
+  matchUrl,
+  matchHeaders,
+  transformHeaders,
 }: {
-  baseUrl: string;
-  headers: Readonly<Record<string, string>>;
+  matchUrl: string;
+  matchHeaders: Readonly<Record<string, string>>;
+  transformHeaders: Readonly<Record<string, string>>;
 }): HarnessV1RequestTransformation {
-  const url = new URL(baseUrl);
+  const url = new URL(matchUrl);
   const pathname = url.pathname.replace(/\/+$/, '');
   return {
     match: {
       host: url.hostname,
       ...(pathname.length === 0 ? {} : { path: { startsWith: pathname } }),
+      headers: Object.entries(matchHeaders).map(([key, value]) => ({
+        key: { exact: key },
+        value: { exact: value },
+      })),
     },
-    transform: { headers },
+    transform: { headers: transformHeaders },
   };
 }

package/src/v1/harness-v1-credential-forwarding.ts

@@ -8,8 +8,10 @@
  */
 export type HarnessV1CredentialForwarding = (options: {
   /**
-   * The credential value that the adapter would otherwise forward (either the
-   * real credential or a masked value).
+   * The credential value that the adapter would otherwise forward. This is a
+   * generated sandbox placeholder when credential brokering is available and
+   * the real credential otherwise. Use `isSandboxCredentialPlaceholder` from
+   * `@ai-sdk/harness/utils` to distinguish generated placeholders.
    */
   readonly credential: string;
   /** The environment variable name used to expose the value in the sandbox. */

package/src/v1/harness-v1-network-sandbox-session.ts

@@ -205,3 +205,9 @@ export type HarnessV1RequestTransformation = {
     readonly headers: Readonly<Record<string, string>>;
   };
 };
+
+export type HarnessV1RequestTransformationSources<AuthenticationMode> = {
+  env: Record<string, string>;
+  sandboxEnv: Record<string, string>;
+  auth: AuthenticationMode;
+};

package/src/v1/harness-v1-stream-part.ts

@@ -60,9 +60,14 @@ export type HarnessV1StreamPart =
 
   // Tool calls, approvals, results — reuse V4 primitives.
   //
-  // `nativeName` is the only harness-only extension on `tool-call`. It lets
-  // adapters surface the runtime's native name for a builtin when it differs
-  // from the wire `toolName` (e.g. `toolName: 'bash'`, `nativeName: 'Bash'`).
+  // `nativeName` lets adapters surface the runtime's native name for a builtin
+  // when it differs from the wire `toolName` (e.g. `toolName: 'bash'`,
+  // `nativeName: 'Bash'`).
+  //
+  // `stepToolCallCount` lets adapters that know a step's complete tool-call
+  // set up front report its cardinality. The host uses it to collect every
+  // approval/result request from the step before pausing; adapters that cannot
+  // know the count omit it and retain pause-on-first behavior.
   //
   // Whether the call was executed by the underlying runtime (Claude Code's
   // built-in `Bash`, Codex's `shell`) vs. needs host dispatch is signalled by
@@ -70,6 +75,11 @@ export type HarnessV1StreamPart =
   // `true` for runtime-executed builtins, false/undefined for host tools.
   | (LanguageModelV4ToolCall & {
       nativeName?: string;
+      /**
+       * Total tool calls in the current model step, when known before tool
+       * execution begins. Populate this on every tool call in the step.
+       */
+      stepToolCallCount?: number;
     })
   | LanguageModelV4ToolApprovalRequest
   | LanguageModelV4ToolResult
@@ -267,6 +277,7 @@ export const harnessV1ToolCallPartSchema = z.object({
   dynamic: z.boolean().optional(),
   providerMetadata: harnessV1ProviderMetadataSchema.optional(),
   nativeName: z.string().optional(),
+  stepToolCallCount: z.number().int().positive().optional(),
 });
 
 export const harnessV1ToolApprovalRequestPartSchema = z.object({

package/src/v1/index.ts

@@ -46,6 +46,7 @@ export type {
   HarnessV1NetworkSandboxSession,
   HarnessV1PortEndpoint,
   HarnessV1RequestTransformation,
+  HarnessV1RequestTransformationSources,
 } from './harness-v1-network-sandbox-session';
 export type { HarnessV1Skill } from './harness-v1-skill';
 export type { HarnessV1StreamPart } from './harness-v1-stream-part';