@finalai/agent-provider 0.1.0

package/dist/modules/credentials.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/credentials.ts"],
+  "sourcesContent": ["import * as z from 'zod';\nimport { DynamicEvent } from \"./dynamic.mjs\";\n\n// Credential policies. Authors build them from resolver\n// functions; each compiles to a small JSON node so the manifest stays renderable\n// and harnesses never parse a policy. The broker in agent-session-service is the\n// only resolver.\n\nexport enum CredentialPayer {\n  AgentOwner = 'agent-owner',\n  Organization = 'organization',\n  PromptingUser = 'prompting-user',\n  ConversationOwner = 'conversation-owner',\n}\n\nexport enum CredentialOwner {\n  Payer = 'payer',\n  Organization = 'organization',\n}\n\nexport enum CredentialNodeKind {\n  Subscription = 'subscription',\n  ApiKey = 'api-key',\n  Platform = 'platform',\n  HarnessOwned = 'harness-owned',\n  Custom = 'custom',\n}\n\n// Credential kinds a harness can consume (HarnessDescriptionIface.inference.kinds).\nexport enum InferenceCredentialKind {\n  Subscription = 'subscription',\n  ApiKey = 'api-key',\n  Platform = 'platform',\n  HarnessOwned = 'harness-owned',\n}\n\nexport enum CredentialDelivery {\n  PerRequest = 'per-request',\n  AtOpen = 'at-open',\n}\n\n// Vendors are open strings; these are the ones the broker knows today.\nexport const KNOWN_INFERENCE_VENDORS = [\n  'openai',\n  'anthropic',\n  'openrouter',\n  'google',\n  'bedrock',\n] as const;\n\nexport const subscriptionNodeSchema = z.object({\n  kind: z.literal(CredentialNodeKind.Subscription),\n  owner: z.nativeEnum(CredentialOwner),\n  vendor: z.string().min(1).optional(),\n  pin: z.string().min(1).optional(),\n});\n\nexport const apiKeyOwnerNodeSchema = z.object({\n  pin: z.string().min(1).optional(),\n  kind: z.literal(CredentialNodeKind.ApiKey),\n  owner: z.nativeEnum(CredentialOwner),\n  vendor: z.string().min(1).optional(),\n});\n\nexport const apiKeySecretNodeSchema = z.object({\n  kind: z.literal(CredentialNodeKind.ApiKey),\n  secret: z.string().min(1),\n  baseUrl: z.string().url().optional(),\n  vendor: z.string().min(1).optional(),\n});\n\nexport const platformNodeSchema = z.object({\n  kind: z.literal(CredentialNodeKind.Platform),\n  budget: z.string().min(1).optional(),\n});\n\nexport const harnessNodeSchema = z.object({\n  kind: z.literal(CredentialNodeKind.HarnessOwned),\n});\n\nexport const customNodeSchema = z.object({\n  kind: z.literal(CredentialNodeKind.Custom),\n  // Bundle export of a defineDynamic resolver returning one of the other nodes,\n  // or `{ kind: 'api-key', value }` held in memory by the broker.\n  resolver: z.string().min(1),\n  events: z.array(z.nativeEnum(DynamicEvent)).default([DynamicEvent.SessionStarted]),\n});\n\nexport const credentialNodeSchema = z.union([\n  subscriptionNodeSchema,\n  apiKeySecretNodeSchema,\n  apiKeyOwnerNodeSchema,\n  platformNodeSchema,\n  harnessNodeSchema,\n  customNodeSchema,\n]);\n\nexport const credentialPolicySchema = z.object({\n  payer: z.nativeEnum(CredentialPayer),\n  tryInOrder: z.array(credentialNodeSchema).min(1),\n});\n\nexport type SubscriptionNodeIface = z.infer<typeof subscriptionNodeSchema>;\nexport type ApiKeyOwnerNodeIface = z.infer<typeof apiKeyOwnerNodeSchema>;\nexport type ApiKeySecretNodeIface = z.infer<typeof apiKeySecretNodeSchema>;\nexport type PlatformNodeIface = z.infer<typeof platformNodeSchema>;\nexport type HarnessOwnedNodeIface = z.infer<typeof harnessNodeSchema>;\nexport type CustomNodeIface = z.infer<typeof customNodeSchema>;\nexport type CredentialNode = z.infer<typeof credentialNodeSchema>;\nexport type CredentialPolicyIface = z.infer<typeof credentialPolicySchema>;\n\n// What a custom resolver may return at run time: any static node, or a literal\n// key the broker holds in memory and redacts from snapshots.\nexport const customResolverResultSchema = z.union([\n  credentialNodeSchema,\n  z.object({\n    kind: z.literal(CredentialNodeKind.ApiKey),\n    value: z.string().min(1),\n    vendor: z.string().min(1).optional(),\n    baseUrl: z.string().url().optional(),\n  }),\n]);\nexport type CustomResolverResult = z.infer<typeof customResolverResultSchema>;\n\ninterface SubscriptionArgsIface {\n  owner: CredentialOwner | `${CredentialOwner}`;\n  vendor?: string;\n  pin?: string;\n}\n\ninterface ApiKeyOwnerArgsIface {\n  pin?: string;\n  owner: CredentialOwner | `${CredentialOwner}`;\n  vendor?: string;\n}\n\ninterface ApiKeySecretArgsIface {\n  secret: string;\n  baseUrl?: string;\n  vendor?: string;\n}\n\ninterface ChainArgsIface {\n  payer: CredentialPayer | `${CredentialPayer}`;\n  tryInOrder: CredentialNode[];\n}\n\nconst ownerSchema = z.nativeEnum(CredentialOwner);\nconst toOwner = (owner: CredentialOwner | `${CredentialOwner}`): CredentialOwner =>\n  ownerSchema.parse(owner);\n\nconst payerSchema = z.nativeEnum(CredentialPayer);\nconst toPayer = (payer: CredentialPayer | `${CredentialPayer}`): CredentialPayer =>\n  payerSchema.parse(payer);\n\n// A defineDynamic-shaped value: only the bundle export name is recorded in the\n// manifest; the compiler fills it in when it sees the resolver in the bundle.\ninterface CustomResolverRefIface {\n  resolverExport: string;\n  events?: DynamicEvent[];\n}\n\nexport const credentials = {\n  chain: (args: ChainArgsIface): CredentialPolicyIface =>\n    credentialPolicySchema.parse({ payer: toPayer(args.payer), tryInOrder: args.tryInOrder }),\n  subscription: (args: SubscriptionArgsIface): SubscriptionNodeIface => {\n    const node: SubscriptionNodeIface = {\n      kind: CredentialNodeKind.Subscription,\n      owner: toOwner(args.owner),\n    };\n    if (args.vendor != null) node.vendor = args.vendor;\n    if (args.pin != null) node.pin = args.pin;\n    return node;\n  },\n  apiKey: (args: ApiKeyOwnerArgsIface | ApiKeySecretArgsIface): CredentialNode => {\n    if ('secret' in args) {\n      const node: ApiKeySecretNodeIface = { kind: CredentialNodeKind.ApiKey, secret: args.secret };\n      if (args.baseUrl != null) node.baseUrl = args.baseUrl;\n      if (args.vendor != null) node.vendor = args.vendor;\n      return node;\n    }\n    const node: ApiKeyOwnerNodeIface = {\n      kind: CredentialNodeKind.ApiKey,\n      owner: toOwner(args.owner),\n    };\n    if (args.vendor != null) node.vendor = args.vendor;\n    if (args.pin != null) node.pin = args.pin;\n    return node;\n  },\n  platform: (args?: { budget?: string }): PlatformNodeIface => {\n    const node: PlatformNodeIface = { kind: CredentialNodeKind.Platform };\n    if (args?.budget != null) node.budget = args.budget;\n    return node;\n  },\n  harness: (): HarnessOwnedNodeIface => ({ kind: CredentialNodeKind.HarnessOwned }),\n  custom: (ref: CustomResolverRefIface): CustomNodeIface => ({\n    kind: CredentialNodeKind.Custom,\n    resolver: ref.resolverExport,\n    events: ref.events ?? [DynamicEvent.SessionStarted],\n  }),\n};\n\n// Defaults: personal agents pay with the owner's subscriptions,\n// organization agents with the organization's; both fall back to the platform.\nexport const defaultPersonalCredentialPolicy = (): CredentialPolicyIface =>\n  credentials.chain({\n    payer: CredentialPayer.AgentOwner,\n    tryInOrder: [\n      credentials.subscription({ owner: CredentialOwner.Payer }),\n      credentials.platform(),\n    ],\n  });\n\nexport const defaultOrganizationCredentialPolicy = (): CredentialPolicyIface =>\n  credentials.chain({\n    payer: CredentialPayer.Organization,\n    tryInOrder: [\n      credentials.subscription({ owner: CredentialOwner.Organization }),\n      credentials.platform(),\n    ],\n  });\n\n// Maps a policy node onto the inference credential kind it produces, for the\n// compatibility report and for the broker dropping entries a harness cannot use.\nexport const inferenceKindOfNode = (node: CredentialNode): InferenceCredentialKind | null => {\n  switch (node.kind) {\n    case CredentialNodeKind.Subscription:\n      return InferenceCredentialKind.Subscription;\n    case CredentialNodeKind.ApiKey:\n      return InferenceCredentialKind.ApiKey;\n    case CredentialNodeKind.Platform:\n      return InferenceCredentialKind.Platform;\n    case CredentialNodeKind.HarnessOwned:\n      return InferenceCredentialKind.HarnessOwned;\n    case CredentialNodeKind.Custom:\n      return null;\n  }\n};\n\n// Why a resolution could not produce a model grant; shown to people as a notice.\nexport enum CredentialFailureReason {\n  SubscriptionNotConnected = 'subscription_not_connected',\n  UsageExhausted = 'usage_exhausted',\n  BudgetExceeded = 'budget_exceeded',\n  CredentialInvalid = 'credential_invalid',\n  HarnessIncompatible = 'harness_incompatible',\n}\n\n// Why a candidate was skipped during resolution (recorded as fallback_reason).\nexport enum CredentialFallbackReason {\n  Archived = 'archived',\n  Invalid = 'invalid',\n  VendorMismatch = 'vendor_mismatch',\n  Exhausted = 'exhausted',\n  NotGranted = 'not_granted',\n  OverBudget = 'over_budget',\n  KindUnsupported = 'kind_unsupported',\n  Missing = 'missing',\n}\n"],
+  "mappings": "AAAA,YAAY,OAAO;AACnB,SAAS,oBAAoB;AAOtB,IAAK,kBAAL,kBAAKA,qBAAL;AACL,EAAAA,iBAAA,gBAAa;AACb,EAAAA,iBAAA,kBAAe;AACf,EAAAA,iBAAA,mBAAgB;AAChB,EAAAA,iBAAA,uBAAoB;AAJV,SAAAA;AAAA,GAAA;AAOL,IAAK,kBAAL,kBAAKC,qBAAL;AACL,EAAAA,iBAAA,WAAQ;AACR,EAAAA,iBAAA,kBAAe;AAFL,SAAAA;AAAA,GAAA;AAKL,IAAK,qBAAL,kBAAKC,wBAAL;AACL,EAAAA,oBAAA,kBAAe;AACf,EAAAA,oBAAA,YAAS;AACT,EAAAA,oBAAA,cAAW;AACX,EAAAA,oBAAA,kBAAe;AACf,EAAAA,oBAAA,YAAS;AALC,SAAAA;AAAA,GAAA;AASL,IAAK,0BAAL,kBAAKC,6BAAL;AACL,EAAAA,yBAAA,kBAAe;AACf,EAAAA,yBAAA,YAAS;AACT,EAAAA,yBAAA,cAAW;AACX,EAAAA,yBAAA,kBAAe;AAJL,SAAAA;AAAA,GAAA;AAOL,IAAK,qBAAL,kBAAKC,wBAAL;AACL,EAAAA,oBAAA,gBAAa;AACb,EAAAA,oBAAA,YAAS;AAFC,SAAAA;AAAA,GAAA;AAML,MAAM,0BAA0B;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,MAAM,EAAE,QAAQ,iCAA+B;AAAA,EAC/C,OAAO,EAAE,WAAW,eAAe;AAAA,EACnC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACnC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAClC,CAAC;AAEM,MAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAChC,MAAM,EAAE,QAAQ,sBAAyB;AAAA,EACzC,OAAO,EAAE,WAAW,eAAe;AAAA,EACnC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AACrC,CAAC;AAEM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,MAAM,EAAE,QAAQ,sBAAyB;AAAA,EACzC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACnC,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AACrC,CAAC;AAEM,MAAM,qBAAqB,EAAE,OAAO;AAAA,EACzC,MAAM,EAAE,QAAQ,yBAA2B;AAAA,EAC3C,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AACrC,CAAC;AAEM,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,MAAM,EAAE,QAAQ,kCAA+B;AACjD,CAAC;AAEM,MAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,MAAM,EAAE,QAAQ,qBAAyB;AAAA;AAAA;AAAA,EAGzC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,QAAQ,EAAE,MAAM,EAAE,WAAW,YAAY,CAAC,EAAE,QAAQ,CAAC,aAAa,cAAc,CAAC;AACnF,CAAC;AAEM,MAAM,uBAAuB,EAAE,MAAM;AAAA,EAC1C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,MAAM,yBAAyB,EAAE,OAAO;AAAA,EAC7C,OAAO,EAAE,WAAW,eAAe;AAAA,EACnC,YAAY,EAAE,MAAM,oBAAoB,EAAE,IAAI,CAAC;AACjD,CAAC;AAaM,MAAM,6BAA6B,EAAE,MAAM;AAAA,EAChD;AAAA,EACA,EAAE,OAAO;AAAA,IACP,MAAM,EAAE,QAAQ,sBAAyB;AAAA,IACzC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,IACnC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS;AAAA,EACrC,CAAC;AACH,CAAC;AA0BD,MAAM,cAAc,EAAE,WAAW,eAAe;AAChD,MAAM,UAAU,CAAC,UACf,YAAY,MAAM,KAAK;AAEzB,MAAM,cAAc,EAAE,WAAW,eAAe;AAChD,MAAM,UAAU,CAAC,UACf,YAAY,MAAM,KAAK;AASlB,MAAM,cAAc;AAAA,EACzB,OAAO,CAAC,SACN,uBAAuB,MAAM,EAAE,OAAO,QAAQ,KAAK,KAAK,GAAG,YAAY,KAAK,WAAW,CAAC;AAAA,EAC1F,cAAc,CAAC,SAAuD;AACpE,UAAM,OAA8B;AAAA,MAClC,MAAM;AAAA,MACN,OAAO,QAAQ,KAAK,KAAK;AAAA,IAC3B;AACA,QAAI,KAAK,UAAU,KAAM,MAAK,SAAS,KAAK;AAC5C,QAAI,KAAK,OAAO,KAAM,MAAK,MAAM,KAAK;AACtC,WAAO;AAAA,EACT;AAAA,EACA,QAAQ,CAAC,SAAuE;AAC9E,QAAI,YAAY,MAAM;AACpB,YAAMC,QAA8B,EAAE,MAAM,wBAA2B,QAAQ,KAAK,OAAO;AAC3F,UAAI,KAAK,WAAW,KAAM,CAAAA,MAAK,UAAU,KAAK;AAC9C,UAAI,KAAK,UAAU,KAAM,CAAAA,MAAK,SAAS,KAAK;AAC5C,aAAOA;AAAA,IACT;AACA,UAAM,OAA6B;AAAA,MACjC,MAAM;AAAA,MACN,OAAO,QAAQ,KAAK,KAAK;AAAA,IAC3B;AACA,QAAI,KAAK,UAAU,KAAM,MAAK,SAAS,KAAK;AAC5C,QAAI,KAAK,OAAO,KAAM,MAAK,MAAM,KAAK;AACtC,WAAO;AAAA,EACT;AAAA,EACA,UAAU,CAAC,SAAkD;AAC3D,UAAM,OAA0B,EAAE,MAAM,0BAA4B;AACpE,QAAI,MAAM,UAAU,KAAM,MAAK,SAAS,KAAK;AAC7C,WAAO;AAAA,EACT;AAAA,EACA,SAAS,OAA8B,EAAE,MAAM,mCAAgC;AAAA,EAC/E,QAAQ,CAAC,SAAkD;AAAA,IACzD,MAAM;AAAA,IACN,UAAU,IAAI;AAAA,IACd,QAAQ,IAAI,UAAU,CAAC,aAAa,cAAc;AAAA,EACpD;AACF;AAIO,MAAM,kCAAkC,MAC7C,YAAY,MAAM;AAAA,EAChB,OAAO;AAAA,EACP,YAAY;AAAA,IACV,YAAY,aAAa,EAAE,OAAO,oBAAsB,CAAC;AAAA,IACzD,YAAY,SAAS;AAAA,EACvB;AACF,CAAC;AAEI,MAAM,sCAAsC,MACjD,YAAY,MAAM;AAAA,EAChB,OAAO;AAAA,EACP,YAAY;AAAA,IACV,YAAY,aAAa,EAAE,OAAO,kCAA6B,CAAC;AAAA,IAChE,YAAY,SAAS;AAAA,EACvB;AACF,CAAC;AAII,MAAM,sBAAsB,CAAC,SAAyD;AAC3F,UAAQ,KAAK,MAAM;AAAA,IACjB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,EACX;AACF;AAGO,IAAK,0BAAL,kBAAKC,6BAAL;AACL,EAAAA,yBAAA,8BAA2B;AAC3B,EAAAA,yBAAA,oBAAiB;AACjB,EAAAA,yBAAA,oBAAiB;AACjB,EAAAA,yBAAA,uBAAoB;AACpB,EAAAA,yBAAA,yBAAsB;AALZ,SAAAA;AAAA,GAAA;AASL,IAAK,2BAAL,kBAAKC,8BAAL;AACL,EAAAA,0BAAA,cAAW;AACX,EAAAA,0BAAA,aAAU;AACV,EAAAA,0BAAA,oBAAiB;AACjB,EAAAA,0BAAA,eAAY;AACZ,EAAAA,0BAAA,gBAAa;AACb,EAAAA,0BAAA,gBAAa;AACb,EAAAA,0BAAA,qBAAkB;AAClB,EAAAA,0BAAA,aAAU;AARA,SAAAA;AAAA,GAAA;",
+  "names": ["CredentialPayer", "CredentialOwner", "CredentialNodeKind", "InferenceCredentialKind", "CredentialDelivery", "node", "CredentialFailureReason", "CredentialFallbackReason"]
+}

package/dist/modules/dynamic.d.mts

@@ -0,0 +1,32 @@
+import * as z from 'zod';
+import type { JsonValue } from "./json.mjs";
+export declare enum DynamicEvent {
+    SessionStarted = "session.started",
+    TurnStarted = "turn.started"
+}
+export declare const dynamicSlotSchema: z.ZodObject<{
+    $dynamic: z.ZodObject<{
+        resolver: z.ZodString;
+        events: z.ZodArray<z.ZodEnum<typeof DynamicEvent>>;
+        description: z.ZodOptional<z.ZodString>;
+        preview: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type DynamicSlotIface = z.infer<typeof dynamicSlotSchema>;
+export type Dynamic<_T> = DynamicSlotIface;
+export declare const isDynamicSlot: <T>(value: T) => value is T & DynamicSlotIface;
+export declare const maybeDynamic: <T extends z.ZodType>(schema: T) => z.ZodUnion<readonly [z.ZodObject<{
+    $dynamic: z.ZodObject<{
+        resolver: z.ZodString;
+        events: z.ZodArray<z.ZodEnum<typeof DynamicEvent>>;
+        description: z.ZodOptional<z.ZodString>;
+        preview: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>, T]>;
+export interface DynamicSlotLocationIface {
+    path: string;
+    slot: DynamicSlotIface;
+}
+export declare const findDynamicSlots: <T>(value: T, path?: string) => DynamicSlotLocationIface[];
+export declare const containsDynamicSlot: <T>(value: T) => boolean;
+export declare const replaceDynamicSlots: (value: JsonValue, resolved: Record<string, JsonValue | null>, path?: string) => JsonValue;

package/dist/modules/dynamic.mjs

@@ -0,0 +1,77 @@
+import * as z from "zod";
+var DynamicEvent = /* @__PURE__ */ ((DynamicEvent2) => {
+  DynamicEvent2["SessionStarted"] = "session.started";
+  DynamicEvent2["TurnStarted"] = "turn.started";
+  return DynamicEvent2;
+})(DynamicEvent || {});
+const dynamicSlotSchema = z.object({
+  $dynamic: z.object({
+    // Bundle export that implements the resolver ('instructions/org-context').
+    resolver: z.string().min(1),
+    events: z.array(z.nativeEnum(DynamicEvent)).min(1),
+    // Final additions so Build can render a slot without resolving it.
+    description: z.string().optional(),
+    preview: z.string().optional()
+  })
+});
+const isDynamicSlot = (value) => dynamicSlotSchema.safeParse(value).success;
+const slotOf = (value) => {
+  const parsed = dynamicSlotSchema.safeParse(value);
+  return parsed.success ? parsed.data : null;
+};
+const listSchema = z.array(z.json());
+const objectSchema = z.record(z.string(), z.json());
+const looseListSchema = z.array(z.unknown());
+const looseObjectSchema = z.record(z.string(), z.unknown());
+const maybeDynamic = (schema) => z.union([dynamicSlotSchema, schema]);
+const indexPath = (parent, index) => `${parent}[${index}]`;
+const keyPath = (parent, key) => parent.length === 0 ? key : `${parent}.${key}`;
+const findDynamicSlots = (value, path = "") => {
+  const slot = slotOf(value);
+  if (slot != null) return [{ path, slot }];
+  const list = looseListSchema.safeParse(value);
+  if (list.success) {
+    return list.data.flatMap((item, index) => findDynamicSlots(item, indexPath(path, index)));
+  }
+  const object = looseObjectSchema.safeParse(value);
+  if (object.success) {
+    return Object.entries(object.data).flatMap(
+      ([key, item]) => findDynamicSlots(item, keyPath(path, key))
+    );
+  }
+  return [];
+};
+const containsDynamicSlot = (value) => findDynamicSlots(value).length > 0;
+const replaceDynamicSlots = (value, resolved, path = "") => {
+  if (isDynamicSlot(value)) return resolved[path] ?? null;
+  const list = listSchema.safeParse(value);
+  if (list.success) {
+    const out = [];
+    list.data.forEach((item, index) => {
+      const itemPath = indexPath(path, index);
+      if (isDynamicSlot(item) && resolved[itemPath] == null) return;
+      out.push(replaceDynamicSlots(item, resolved, itemPath));
+    });
+    return out;
+  }
+  const object = objectSchema.safeParse(value);
+  if (object.success) {
+    return Object.fromEntries(
+      Object.entries(object.data).map(([key, item]) => [
+        key,
+        replaceDynamicSlots(item, resolved, keyPath(path, key))
+      ])
+    );
+  }
+  return value;
+};
+export {
+  DynamicEvent,
+  containsDynamicSlot,
+  dynamicSlotSchema,
+  findDynamicSlots,
+  isDynamicSlot,
+  maybeDynamic,
+  replaceDynamicSlots
+};
+//# sourceMappingURL=dynamic.mjs.map

package/dist/modules/dynamic.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/dynamic.ts"],
+  "sourcesContent": ["import * as z from 'zod';\nimport type { JsonValue } from \"./json.mjs\";\n\n// Lifecycle boundaries a dynamic slot may resolve at.\n// The harness owns steps, so `step.started` is not supported.\nexport enum DynamicEvent {\n  SessionStarted = 'session.started',\n  TurnStarted = 'turn.started',\n}\n\nexport const dynamicSlotSchema = z.object({\n  $dynamic: z.object({\n    // Bundle export that implements the resolver ('instructions/org-context').\n    resolver: z.string().min(1),\n    events: z.array(z.nativeEnum(DynamicEvent)).min(1),\n    // Final additions so Build can render a slot without resolving it.\n    description: z.string().optional(),\n    preview: z.string().optional(),\n  }),\n});\n\nexport type DynamicSlotIface = z.infer<typeof dynamicSlotSchema>;\nexport type Dynamic<_T> = DynamicSlotIface;\n\nexport const isDynamicSlot = <T>(value: T): value is T & DynamicSlotIface =>\n  dynamicSlotSchema.safeParse(value).success;\n\nconst slotOf = <T>(value: T): DynamicSlotIface | null => {\n  const parsed = dynamicSlotSchema.safeParse(value);\n  return parsed.success ? parsed.data : null;\n};\n\nconst listSchema = z.array(z.json());\nconst objectSchema = z.record(z.string(), z.json());\nconst looseListSchema = z.array(z.unknown());\nconst looseObjectSchema = z.record(z.string(), z.unknown());\n\nexport const maybeDynamic = <T extends z.ZodType>(schema: T) =>\n  z.union([dynamicSlotSchema, schema]);\n\n// A dynamic slot found while walking a JSON document, addressed by a stable\n// path ('harness.config.instructions[1]') that the manifest's bundle.resolvers\n// map keys by.\nexport interface DynamicSlotLocationIface {\n  path: string;\n  slot: DynamicSlotIface;\n}\n\nconst indexPath = (parent: string, index: number): string => `${parent}[${index}]`;\nconst keyPath = (parent: string, key: string): string =>\n  parent.length === 0 ? key : `${parent}.${key}`;\n\nexport const findDynamicSlots = <T>(value: T, path = ''): DynamicSlotLocationIface[] => {\n  const slot = slotOf(value);\n  if (slot != null) return [{ path, slot }];\n  const list = looseListSchema.safeParse(value);\n  if (list.success) {\n    return list.data.flatMap((item, index) => findDynamicSlots(item, indexPath(path, index)));\n  }\n  const object = looseObjectSchema.safeParse(value);\n  if (object.success) {\n    return Object.entries(object.data).flatMap(([key, item]) =>\n      findDynamicSlots(item, keyPath(path, key)),\n    );\n  }\n  return [];\n};\n\nexport const containsDynamicSlot = <T>(value: T): boolean => findDynamicSlots(value).length > 0;\n\n// Replaces each slot with the resolver output for its path. A resolver that\n// returned null removes an array entry and leaves an object field as null.\nexport const replaceDynamicSlots = (\n  value: JsonValue,\n  resolved: Record<string, JsonValue | null>,\n  path = '',\n): JsonValue => {\n  if (isDynamicSlot(value)) return resolved[path] ?? null;\n  const list = listSchema.safeParse(value);\n  if (list.success) {\n    const out: JsonValue[] = [];\n    list.data.forEach((item, index) => {\n      const itemPath = indexPath(path, index);\n      if (isDynamicSlot(item) && resolved[itemPath] == null) return;\n      out.push(replaceDynamicSlots(item, resolved, itemPath));\n    });\n    return out;\n  }\n  const object = objectSchema.safeParse(value);\n  if (object.success) {\n    return Object.fromEntries(\n      Object.entries(object.data).map(([key, item]) => [\n        key,\n        replaceDynamicSlots(item, resolved, keyPath(path, key)),\n      ]),\n    );\n  }\n  return value;\n};\n"],
+  "mappings": "AAAA,YAAY,OAAO;AAKZ,IAAK,eAAL,kBAAKA,kBAAL;AACL,EAAAA,cAAA,oBAAiB;AACjB,EAAAA,cAAA,iBAAc;AAFJ,SAAAA;AAAA,GAAA;AAKL,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACxC,UAAU,EAAE,OAAO;AAAA;AAAA,IAEjB,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IAC1B,QAAQ,EAAE,MAAM,EAAE,WAAW,YAAY,CAAC,EAAE,IAAI,CAAC;AAAA;AAAA,IAEjD,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,IACjC,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,CAAC;AACH,CAAC;AAKM,MAAM,gBAAgB,CAAI,UAC/B,kBAAkB,UAAU,KAAK,EAAE;AAErC,MAAM,SAAS,CAAI,UAAsC;AACvD,QAAM,SAAS,kBAAkB,UAAU,KAAK;AAChD,SAAO,OAAO,UAAU,OAAO,OAAO;AACxC;AAEA,MAAM,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC;AACnC,MAAM,eAAe,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,KAAK,CAAC;AAClD,MAAM,kBAAkB,EAAE,MAAM,EAAE,QAAQ,CAAC;AAC3C,MAAM,oBAAoB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAEnD,MAAM,eAAe,CAAsB,WAChD,EAAE,MAAM,CAAC,mBAAmB,MAAM,CAAC;AAUrC,MAAM,YAAY,CAAC,QAAgB,UAA0B,GAAG,MAAM,IAAI,KAAK;AAC/E,MAAM,UAAU,CAAC,QAAgB,QAC/B,OAAO,WAAW,IAAI,MAAM,GAAG,MAAM,IAAI,GAAG;AAEvC,MAAM,mBAAmB,CAAI,OAAU,OAAO,OAAmC;AACtF,QAAM,OAAO,OAAO,KAAK;AACzB,MAAI,QAAQ,KAAM,QAAO,CAAC,EAAE,MAAM,KAAK,CAAC;AACxC,QAAM,OAAO,gBAAgB,UAAU,KAAK;AAC5C,MAAI,KAAK,SAAS;AAChB,WAAO,KAAK,KAAK,QAAQ,CAAC,MAAM,UAAU,iBAAiB,MAAM,UAAU,MAAM,KAAK,CAAC,CAAC;AAAA,EAC1F;AACA,QAAM,SAAS,kBAAkB,UAAU,KAAK;AAChD,MAAI,OAAO,SAAS;AAClB,WAAO,OAAO,QAAQ,OAAO,IAAI,EAAE;AAAA,MAAQ,CAAC,CAAC,KAAK,IAAI,MACpD,iBAAiB,MAAM,QAAQ,MAAM,GAAG,CAAC;AAAA,IAC3C;AAAA,EACF;AACA,SAAO,CAAC;AACV;AAEO,MAAM,sBAAsB,CAAI,UAAsB,iBAAiB,KAAK,EAAE,SAAS;AAIvF,MAAM,sBAAsB,CACjC,OACA,UACA,OAAO,OACO;AACd,MAAI,cAAc,KAAK,EAAG,QAAO,SAAS,IAAI,KAAK;AACnD,QAAM,OAAO,WAAW,UAAU,KAAK;AACvC,MAAI,KAAK,SAAS;AAChB,UAAM,MAAmB,CAAC;AAC1B,SAAK,KAAK,QAAQ,CAAC,MAAM,UAAU;AACjC,YAAM,WAAW,UAAU,MAAM,KAAK;AACtC,UAAI,cAAc,IAAI,KAAK,SAAS,QAAQ,KAAK,KAAM;AACvD,UAAI,KAAK,oBAAoB,MAAM,UAAU,QAAQ,CAAC;AAAA,IACxD,CAAC;AACD,WAAO;AAAA,EACT;AACA,QAAM,SAAS,aAAa,UAAU,KAAK;AAC3C,MAAI,OAAO,SAAS;AAClB,WAAO,OAAO;AAAA,MACZ,OAAO,QAAQ,OAAO,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM;AAAA,QAC/C;AAAA,QACA,oBAAoB,MAAM,UAAU,QAAQ,MAAM,GAAG,CAAC;AAAA,MACxD,CAAC;AAAA,IACH;AAAA,EACF;AACA,SAAO;AACT;",
+  "names": ["DynamicEvent"]
+}

package/dist/modules/harness.d.mts

@@ -0,0 +1,397 @@
+import type { McpServer } from '@agentclientprotocol/sdk/experimental/v2';
+import * as z from 'zod';
+import { CredentialRoute, type RouteGrantIface } from "./credential-routes.mjs";
+import { CredentialDelivery, InferenceCredentialKind } from "./credentials.mjs";
+import type { JsonSchema, JsonValue } from "./json.mjs";
+import { BaseCapability, type ResolvedAgentManifestIface } from "./manifest.mjs";
+import { type ProviderRef } from "./provider-ref.mjs";
+export declare const PENDING_BUNDLE_EXPORT = "<pending>";
+export declare enum AcpTransport {
+    Relay = "relay",
+    Ws = "ws",
+    Http = "http",
+    Stdio = "stdio"
+}
+export declare enum McpTransportKind {
+    Acp = "acp",
+    Http = "http",
+    Stdio = "stdio"
+}
+export declare enum BaseToolProvision {
+    Bound = "bound",
+    HostDisableable = "host-disableable",
+    HostFixed = "host-fixed"
+}
+export declare enum SandboxWire {
+    HandleRpc = "handle-rpc",
+    Mcp = "mcp"
+}
+export declare enum UserInstructionDelivery {
+    History = "history",
+    System = "system"
+}
+export declare enum HarnessTrustClass {
+    FirstParty = "first-party",
+    ThirdParty = "third-party"
+}
+export declare enum PromptWhileRunning {
+    Inject = "inject",
+    Queue = "queue"
+}
+export declare const DEFAULT_PROMPT_WHILE_RUNNING = PromptWhileRunning.Queue;
+export declare const DEFAULT_SESSION_SURVIVES_DISCONNECT = false;
+export declare const baseToolDeclarationSchema: z.ZodObject<{
+    provision: z.ZodEnum<typeof BaseToolProvision>;
+    nativeTools: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export declare const harnessDescriptionSchema: z.ZodObject<{
+    configSchema: z.ZodType<import("./json.mjs").JsonObject, unknown, z.core.$ZodTypeInternals<import("./json.mjs").JsonObject, unknown>>;
+    userInstructionDelivery: z.ZodOptional<z.ZodEnum<typeof UserInstructionDelivery>>;
+    acp: z.ZodObject<{
+        transports: z.ZodArray<z.ZodEnum<typeof AcpTransport>>;
+        mcp: z.ZodArray<z.ZodEnum<typeof McpTransportKind>>;
+    }, z.core.$strip>;
+    baseTools: z.ZodRecord<z.ZodEnum<typeof BaseCapability> & z.core.$partial, z.ZodObject<{
+        provision: z.ZodEnum<typeof BaseToolProvision>;
+        nativeTools: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+    consumes: z.ZodArray<z.ZodEnum<typeof SandboxWire>>;
+    inference: z.ZodObject<{
+        vendors: z.ZodArray<z.ZodString>;
+        kinds: z.ZodArray<z.ZodEnum<typeof InferenceCredentialKind>>;
+        delivery: z.ZodEnum<typeof CredentialDelivery>;
+    }, z.core.$strip>;
+    trust: z.ZodOptional<z.ZodEnum<typeof HarnessTrustClass>>;
+    supports: z.ZodObject<{
+        observe: z.ZodBoolean;
+        resumeReplay: z.ZodBoolean;
+        fork: z.ZodBoolean;
+        authorMeta: z.ZodBoolean;
+        nativeToolPolicy: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>;
+    promptWhileRunning: z.ZodDefault<z.ZodEnum<typeof PromptWhileRunning>>;
+    sessionSurvivesDisconnect: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+export type BaseToolDeclarationIface = z.infer<typeof baseToolDeclarationSchema>;
+export type HarnessDescriptionIface = z.infer<typeof harnessDescriptionSchema>;
+export declare const deliveredHarnessConfig: (args: {
+    config: JsonValue;
+    description: HarnessDescriptionIface;
+}) => JsonValue;
+export declare const harnessSessionRefSchema: z.ZodObject<{
+    harness: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<import("./provider-ref.mjs").ProviderRefKind.Package>;
+        specifier: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<import("./provider-ref.mjs").ProviderRefKind.Bundle>;
+        export: z.ZodString;
+    }, z.core.$strip>], "kind">;
+    harnessSessionRef: z.ZodString;
+    generation: z.ZodNumber;
+}, z.core.$strip>;
+export type HarnessSessionRefIface = z.infer<typeof harnessSessionRefSchema>;
+export { credentialRefreshRequestSchema, CredentialRoute, routeGrantSchema, type CredentialRefreshRequestIface, type RouteGrantIface, } from "./credential-routes.mjs";
+export interface CredentialGrantIface {
+    brokerUrl: string;
+    grants: RouteGrantIface[];
+    atOpen: AtOpenModelCredentialIface | null;
+    refresh: CredentialGrantRefreshIface | null;
+}
+export interface CredentialGrantRefreshIface {
+    url: string;
+    token: string;
+    harnessSessionId: string;
+    expiresAt: string;
+}
+export interface AtOpenModelCredentialIface {
+    vendor: string;
+    kind: InferenceCredentialKind;
+    baseUrl: string | null;
+    apiKey: string | null;
+    subscription: {
+        format: 'claude-setup-token' | 'chatgpt-auth-tokens';
+        value: string;
+    } | null;
+    fingerprint: string;
+}
+export declare const atOpenModelCredentialSchema: z.ZodObject<{
+    vendor: z.ZodString;
+    kind: z.ZodEnum<typeof InferenceCredentialKind>;
+    baseUrl: z.ZodNullable<z.ZodString>;
+    apiKey: z.ZodNullable<z.ZodString>;
+    subscription: z.ZodNullable<z.ZodObject<{
+        format: z.ZodUnion<readonly [z.ZodLiteral<"claude-setup-token">, z.ZodLiteral<"chatgpt-auth-tokens">]>;
+        value: z.ZodString;
+    }, z.core.$strip>>;
+    fingerprint: z.ZodString;
+}, z.core.$strip>;
+export declare const credentialGrantRefreshSchema: z.ZodObject<{
+    url: z.ZodString;
+    token: z.ZodString;
+    harnessSessionId: z.ZodString;
+    expiresAt: z.ZodString;
+}, z.core.$strip>;
+export declare const credentialGrantSchema: z.ZodObject<{
+    brokerUrl: z.ZodString;
+    grants: z.ZodArray<z.ZodObject<{
+        route: z.ZodEnum<typeof CredentialRoute>;
+        token: z.ZodString;
+        expiresAt: z.ZodString;
+    }, z.core.$strip>>;
+    atOpen: z.ZodNullable<z.ZodObject<{
+        vendor: z.ZodString;
+        kind: z.ZodEnum<typeof InferenceCredentialKind>;
+        baseUrl: z.ZodNullable<z.ZodString>;
+        apiKey: z.ZodNullable<z.ZodString>;
+        subscription: z.ZodNullable<z.ZodObject<{
+            format: z.ZodUnion<readonly [z.ZodLiteral<"claude-setup-token">, z.ZodLiteral<"chatgpt-auth-tokens">]>;
+            value: z.ZodString;
+        }, z.core.$strip>>;
+        fingerprint: z.ZodString;
+    }, z.core.$strip>>;
+    refresh: z.ZodNullable<z.ZodObject<{
+        url: z.ZodString;
+        token: z.ZodString;
+        harnessSessionId: z.ZodString;
+        expiresAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export interface RenewedMcpServerIface {
+    name: string;
+    url: string;
+    headers: {
+        name: string;
+        value: string;
+    }[];
+}
+export interface CredentialRefreshResultIface extends CredentialGrantIface {
+    mcpServers: RenewedMcpServerIface[];
+    sandboxes: Record<string, SandboxTargetEndpointIface>;
+}
+export declare const sandboxTargetEndpointSchema: z.ZodObject<{
+    target: z.ZodString;
+    bindingId: z.ZodString;
+    capabilities: z.ZodArray<z.ZodString>;
+    rpc: z.ZodNullable<z.ZodObject<{
+        url: z.ZodString;
+        token: z.ZodString;
+        expiresAt: z.ZodString;
+    }, z.core.$strip>>;
+    mcp: z.ZodNullable<z.ZodObject<{
+        url: z.ZodString;
+        token: z.ZodString;
+        expiresAt: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const renewedMcpServerSchema: z.ZodObject<{
+    name: z.ZodString;
+    url: z.ZodString;
+    headers: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        value: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const credentialRefreshResultSchema: z.ZodObject<{
+    brokerUrl: z.ZodString;
+    grants: z.ZodArray<z.ZodObject<{
+        route: z.ZodEnum<typeof CredentialRoute>;
+        token: z.ZodString;
+        expiresAt: z.ZodString;
+    }, z.core.$strip>>;
+    atOpen: z.ZodNullable<z.ZodObject<{
+        vendor: z.ZodString;
+        kind: z.ZodEnum<typeof InferenceCredentialKind>;
+        baseUrl: z.ZodNullable<z.ZodString>;
+        apiKey: z.ZodNullable<z.ZodString>;
+        subscription: z.ZodNullable<z.ZodObject<{
+            format: z.ZodUnion<readonly [z.ZodLiteral<"claude-setup-token">, z.ZodLiteral<"chatgpt-auth-tokens">]>;
+            value: z.ZodString;
+        }, z.core.$strip>>;
+        fingerprint: z.ZodString;
+    }, z.core.$strip>>;
+    refresh: z.ZodNullable<z.ZodObject<{
+        url: z.ZodString;
+        token: z.ZodString;
+        harnessSessionId: z.ZodString;
+        expiresAt: z.ZodString;
+    }, z.core.$strip>>;
+    mcpServers: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        url: z.ZodString;
+        headers: z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            value: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+    sandboxes: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
+        target: z.ZodString;
+        bindingId: z.ZodString;
+        capabilities: z.ZodArray<z.ZodString>;
+        rpc: z.ZodNullable<z.ZodObject<{
+            url: z.ZodString;
+            token: z.ZodString;
+            expiresAt: z.ZodString;
+        }, z.core.$strip>>;
+        mcp: z.ZodNullable<z.ZodObject<{
+            url: z.ZodString;
+            token: z.ZodString;
+            expiresAt: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export declare const grantRefreshFor: (args: {
+    brokerUrl: string;
+    harnessSessionId: string;
+    grants: readonly RouteGrantIface[];
+}) => CredentialGrantRefreshIface | null;
+export interface SecretReaderIface {
+    get(name: string): Promise<string | null>;
+}
+export interface TraceContextIface {
+    traceparent: string | null;
+    tracestate: string | null;
+}
+export interface SandboxTargetEndpointIface {
+    target: string;
+    bindingId: string;
+    capabilities: string[];
+    rpc: {
+        url: string;
+        token: string;
+        expiresAt: string;
+    } | null;
+    mcp: {
+        url: string;
+        token: string;
+        expiresAt: string;
+    } | null;
+}
+export interface HarnessSessionContextIface {
+    sessionId: string;
+    organizationId: string;
+    definitionId: string;
+    revisionId: string;
+    sessionServiceUrl: string;
+    sessionServiceRegion?: string | null;
+}
+export interface HarnessObserverIface {
+    invocationAccepted?(event: {
+        invocationRef: string;
+        at: string;
+    }): void;
+    invocationStarted?(event: {
+        invocationRef: string;
+        at: string;
+        bootMs: number | null;
+        versionId?: string | null;
+        commitSha?: string | null;
+    }): void;
+    invocationKeepalive?(event: {
+        invocationRef: string;
+        at: string;
+        activeWork: number;
+    }): void;
+    invocationEnded?(event: {
+        invocationRef: string;
+        at: string;
+        reason: string;
+        error: string | null;
+        metering: Record<string, number>;
+    }): void;
+    trace?(event: {
+        name: string;
+        at: string;
+        fields: Record<string, JsonValue>;
+    }): void;
+}
+export interface OpenHarnessSessionArgsIface {
+    session: HarnessSessionContextIface;
+    harnessSessionId: string;
+    forkSource?: {
+        ref: HarnessSessionRefIface;
+        acpSessionId: string;
+    };
+    observer?: HarnessObserverIface;
+    config: JsonValue;
+    manifest: ResolvedAgentManifestIface;
+    mcpServers: McpServer[];
+    baseTools: Partial<Record<BaseCapability, SandboxTargetEndpointIface>>;
+    sandboxes: Record<string, SandboxTargetEndpointIface>;
+    credentials: CredentialGrantIface;
+    secrets: SecretReaderIface;
+    trace: TraceContextIface;
+}
+export interface ResumeHarnessSessionArgsIface extends OpenHarnessSessionArgsIface {
+    ref: HarnessSessionRefIface;
+    lastSeq: number;
+}
+export interface HarnessClientTlsIface {
+    cert: string;
+    key: string;
+    ca?: string;
+}
+export type HarnessEndpointIface = {
+    ref: HarnessSessionRefIface;
+    transport: AcpTransport.Ws;
+    url: string;
+    headers: Record<string, string>;
+    resolveHeaders?: () => Promise<Record<string, string>>;
+    tls?: HarnessClientTlsIface;
+} | {
+    ref: HarnessSessionRefIface;
+    transport: AcpTransport.Http;
+    url: string;
+    headers: Record<string, string>;
+    resolveHeaders?: () => Promise<Record<string, string>>;
+    tls?: HarnessClientTlsIface;
+} | {
+    ref: HarnessSessionRefIface;
+    transport: AcpTransport.Relay;
+    channel: string;
+    token: string;
+} | {
+    ref: HarnessSessionRefIface;
+    transport: AcpTransport.Stdio;
+    command: string;
+    args: string[];
+    env: Record<string, string>;
+};
+export interface HarnessHealthIface {
+    ok: boolean;
+    detail?: string;
+    checkedAt: string;
+}
+export interface DescribeHarnessArgsIface {
+    config: JsonValue;
+    secrets: SecretReaderIface;
+}
+export interface HarnessIface {
+    describe(binding?: DescribeHarnessArgsIface): Promise<HarnessDescriptionIface>;
+    open(args: OpenHarnessSessionArgsIface): Promise<HarnessEndpointIface>;
+    resume(args: ResumeHarnessSessionArgsIface): Promise<HarnessEndpointIface>;
+    park(ref: HarnessSessionRefIface): Promise<void>;
+    close(ref: HarnessSessionRefIface, opts?: CloseHarnessSessionOptsIface): Promise<void>;
+    health(ref: HarnessSessionRefIface, context?: DescribeHarnessArgsIface): Promise<HarnessHealthIface>;
+}
+export interface CloseHarnessSessionOptsIface {
+    force?: boolean;
+    context?: DescribeHarnessArgsIface;
+}
+export interface HarnessModuleIface<Config> {
+    ref: ProviderRef;
+    harness: HarnessIface;
+    binding: (config: Config) => {
+        harness: ProviderRef;
+        config: JsonValue;
+    };
+}
+export interface DefinedHarnessBindingIface {
+    harness: ProviderRef;
+    config: JsonValue;
+    definedHarness: true;
+}
+export interface DefinedHarnessIface<Config> extends HarnessIface {
+    (config: Config): DefinedHarnessBindingIface;
+}
+export declare const defineHarness: <Config extends JsonValue = JsonValue>(implementation: HarnessIface) => DefinedHarnessIface<Config>;
+export declare const describeConfigSchema: (description: HarnessDescriptionIface) => JsonSchema;