@rarebit-one/harness-kernel 0.8.0 → 0.10.0

package/dist/private.js

@@ -0,0 +1,245 @@
+/**
+ * Private runs: the run's observable channels carry phase codes only.
+ *
+ * A run marked `RunSpec.private` works on material its caller must not let out
+ * of the host: the tool arguments, tool results and model prose of such a run
+ * are the material itself. Everything else in the kernel assumes the opposite —
+ * `log` lines quote tool errors and cancel reasons, and the event stream carries
+ * raw tool arguments and every turn's text — so a private run cannot simply
+ * reuse those channels and hope each sink redacts.
+ *
+ * Instead the channels are narrowed at the source. {@link privateRunChannels}
+ * wraps a caller's `log` and event sink so that:
+ *
+ *   - **`log` receives no free text at all.** Every line the kernel (or a loop,
+ *     a context provider, a connector) would have written is dropped, and one
+ *     fixed-vocabulary phase line is written per event instead.
+ *   - **Events keep their shape, `seq` and `at`, but lose their content.**
+ *     Model text, tool arguments, error messages and the final text are
+ *     removed; the event is marked `redacted: true` so a consumer can tell an
+ *     empty field from a withheld one. A tool name the run did not register (a
+ *     name the model made up, which is model output) is replaced as well, and
+ *     every tool-call id (provider output) becomes a per-run `call-<n>`
+ *     surrogate. Events are rebuilt from an allow-list of fields, so anything
+ *     the kernel does not know about is dropped rather than forwarded.
+ *
+ * What survives is deliberately structural: event types, step numbers, the
+ * registered tool names, outcomes, budgets, numeric usage and result sizes in
+ * bytes. That is enough for a caller to show progress and account for cost, and
+ * none of it is the run's material.
+ *
+ * The run's return value is NOT narrowed: `EngineResult.text` goes back to the
+ * caller that started the run, which decides where (if anywhere) it is written.
+ */
+/** What every withheld string field is replaced with. */
+export const PRIVATE_REDACTION = "[redacted]";
+/** Stands in for a tool name the run never registered (model output). */
+const UNREGISTERED_TOOL = "(unregistered)";
+/**
+ * Thrown by an engine in place of whatever a private run threw. The original
+ * error's message can quote the run's material (a tool's error, a provider's
+ * echo of the prompt), so it is not carried — not as the message and not as
+ * `cause`, which error reporters walk and upload. Only the phase survives.
+ */
+export class PrivateRunError extends Error {
+    /** Where the run failed: setting the run up, or inside the loop. */
+    phase;
+    constructor(phase) {
+        super(`private run failed during ${phase} (details withheld)`);
+        this.name = "PrivateRunError";
+        this.phase = phase;
+    }
+}
+/**
+ * Narrow a run's `log` and event sink for a private run. One instance per run:
+ * it learns the registered tool names from that run's `run.started`.
+ */
+export function privateRunChannels(log, sink) {
+    let registered;
+    const toolName = (name) => (registered?.has(name) ? name : UNREGISTERED_TOOL);
+    // Tool-call ids come from the provider's output, so they are model output
+    // too. Each is replaced by a surrogate assigned in first-seen order; the map
+    // lives for the run, so a turn's call and its tool events still correlate.
+    const surrogates = new Map();
+    const callId = (id) => {
+        let surrogate = surrogates.get(id);
+        if (surrogate === undefined) {
+            surrogate = `call-${surrogates.size + 1}`;
+            surrogates.set(id, surrogate);
+        }
+        return surrogate;
+    };
+    // Each redacted event is REBUILT from an allow-list of fields rather than
+    // spread from the original: a field the kernel does not know about (one a
+    // custom loop added, say) is dropped, never forwarded. Enum-typed fields are
+    // re-checked at runtime, since a custom loop's value is only as narrow as
+    // its author's types.
+    const base = (event) => ({
+        seq: event.seq,
+        at: event.at,
+        redacted: true,
+    });
+    const redact = (event) => {
+        switch (event.type) {
+            case "run.started":
+                registered = new Set(event.tools);
+                return {
+                    ...base(event),
+                    type: event.type,
+                    maxSteps: event.maxSteps,
+                    maxDurationMs: event.maxDurationMs,
+                    tools: [...event.tools],
+                };
+            case "model.turn": {
+                const usage = redactUsage(event.usage);
+                return {
+                    ...base(event),
+                    type: event.type,
+                    step: event.step,
+                    text: "",
+                    toolCalls: event.toolCalls.map((c) => ({ id: callId(c.id), name: toolName(c.name) })),
+                    ...(usage ? { usage } : {}),
+                };
+            }
+            case "model.turn.failed":
+                return {
+                    ...base(event),
+                    type: event.type,
+                    step: event.step,
+                    phase: "summary",
+                    error: PRIVATE_REDACTION,
+                };
+            case "tool.called":
+                return {
+                    ...base(event),
+                    type: event.type,
+                    step: event.step,
+                    callId: callId(event.callId),
+                    name: toolName(event.name),
+                    input: {},
+                    ...undoFields(event),
+                };
+            case "tool.succeeded":
+                return {
+                    ...base(event),
+                    type: event.type,
+                    step: event.step,
+                    callId: callId(event.callId),
+                    name: toolName(event.name),
+                    bytes: event.bytes,
+                    ...undoFields(event),
+                };
+            case "tool.failed":
+                return {
+                    ...base(event),
+                    type: event.type,
+                    step: event.step,
+                    callId: callId(event.callId),
+                    name: toolName(event.name),
+                    reason: oneOf(event.reason, FAILURE_REASONS, "threw"),
+                    error: PRIVATE_REDACTION,
+                };
+            case "run.budget_exhausted":
+                return {
+                    ...base(event),
+                    type: event.type,
+                    kind: oneOf(event.kind, BUDGET_KINDS, "steps"),
+                    step: event.step,
+                };
+            case "run.finished":
+                // `text` is the run's final prose; dropped rather than blanked, the same
+                // way the failure path omits it.
+                return {
+                    ...base(event),
+                    type: event.type,
+                    outcome: oneOf(event.outcome, OUTCOMES, "failed"),
+                    ...(event.steps !== undefined ? { steps: event.steps } : {}),
+                    ...(event.error !== undefined ? { error: PRIVATE_REDACTION } : {}),
+                };
+        }
+    };
+    return {
+        log: () => { },
+        emit(event) {
+            const redacted = redact(event);
+            log(phaseLine(redacted));
+            sink?.(redacted);
+        },
+    };
+}
+const FAILURE_REASONS = ["threw", "unknown_tool", "aborted"];
+const BUDGET_KINDS = ["steps", "duration"];
+const OUTCOMES = ["completed", "steps_exhausted", "timed_out", "canceled", "failed"];
+/** `value` when it is one of `allowed`, else `fallback`. */
+function oneOf(value, allowed, fallback) {
+    return allowed.includes(value) ? value : fallback;
+}
+/** Numbers only. A unit-usage `unit` label is provider-supplied text, so it goes. */
+function redactUsage(usage) {
+    if (!usage)
+        return undefined;
+    if ("units" in usage)
+        return typeof usage.units === "number" ? { units: usage.units } : undefined;
+    const out = {};
+    for (const key of [
+        "inputTokens",
+        "outputTokens",
+        "totalTokens",
+        "cacheReadTokens",
+        "cacheWriteTokens",
+    ]) {
+        const n = usage[key];
+        if (typeof n === "number")
+            out[key] = n;
+    }
+    return out;
+}
+/**
+ * The reversibility fields, copied from the tool's own registered metadata
+ * (application-supplied, never model output), each only when declared.
+ */
+function undoFields(event) {
+    return {
+        ...(typeof event.reversible === "boolean" ? { reversible: event.reversible } : {}),
+        ...(event.undoToolName !== undefined ? { undoToolName: event.undoToolName } : {}),
+        ...(event.undoWindowSeconds !== undefined
+            ? { undoWindowSeconds: event.undoWindowSeconds }
+            : {}),
+        ...(event.replay === "safe" || event.replay === "unsafe" ? { replay: event.replay } : {}),
+    };
+}
+/** The one log line a redacted event becomes: fixed keys, structural values. */
+function phaseLine(event) {
+    switch (event.type) {
+        case "run.started":
+            return `phase=${event.type} tools=${event.tools.length} max_steps=${event.maxSteps}`;
+        case "model.turn":
+            return `phase=${event.type} step=${event.step} tool_calls=${event.toolCalls.length}`;
+        case "model.turn.failed":
+            return `phase=${event.type} step=${event.step} during=${event.phase}`;
+        case "tool.called":
+        case "tool.succeeded":
+            return `phase=${event.type} step=${event.step} tool=${event.name}`;
+        case "tool.failed":
+            return `phase=${event.type} step=${event.step} tool=${event.name} reason=${event.reason}`;
+        case "run.budget_exhausted":
+            return `phase=${event.type} step=${event.step} kind=${event.kind}`;
+        case "run.finished":
+            return `phase=${event.type} outcome=${event.outcome}${event.steps !== undefined ? ` steps=${event.steps}` : ""}`;
+    }
+}
+/**
+ * The `supports()` refusal every out-of-process engine gives a private run.
+ * Such an engine hands the run's material to a harness process the kernel does
+ * not observe, so it cannot keep the private-run guarantees — and per the
+ * fail-loud rule it refuses rather than running without them.
+ */
+export function refusePrivateRun(engine, spec) {
+    if (!spec.private)
+        return undefined;
+    return {
+        ok: false,
+        reason: `${engine} engine cannot run a private run: only the in-process native engine keeps its material off the run's log and event channels`,
+    };
+}
+//# sourceMappingURL=private.js.map

package/dist/private.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private.js","sourceRoot":"","sources":["../src/private.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAKH,yDAAyD;AACzD,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAA;AAE7C,yEAAyE;AACzE,MAAM,iBAAiB,GAAG,gBAAgB,CAAA;AAE1C;;;;;GAKG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,oEAAoE;IAC3D,KAAK,CAAkB;IAEhC,YAAY,KAAuB;QACjC,KAAK,CAAC,6BAA6B,KAAK,qBAAqB,CAAC,CAAA;QAC9D,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;QAC7B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;CACF;AAcD;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAA2B,EAC3B,IAAmB;IAEnB,IAAI,UAAmC,CAAA;IACvC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAA;IAE7F,0EAA0E;IAC1E,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC5C,MAAM,MAAM,GAAG,CAAC,EAAU,EAAU,EAAE;QACpC,IAAI,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAClC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,SAAS,GAAG,QAAQ,UAAU,CAAC,IAAI,GAAG,CAAC,EAAE,CAAA;YACzC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;QAC/B,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC,CAAA;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,6EAA6E;IAC7E,0EAA0E;IAC1E,sBAAsB;IACtB,MAAM,IAAI,GAAG,CAAC,KAAe,EAA+C,EAAE,CAAC,CAAC;QAC9E,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,QAAQ,EAAE,IAAI;KACf,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,CAAC,KAAe,EAAY,EAAE;QAC3C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,aAAa;gBAChB,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;gBACjC,OAAO;oBACL,GAAG,IAAI,CAAC,KAAK,CAAC;oBACd,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;iBACxB,CAAA;YACH,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;gBACtC,OAAO;oBACL,GAAG,IAAI,CAAC,KAAK,CAAC;oBACd,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,EAAE;oBACR,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBACrF,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5B,CAAA;YACH,CAAC;YACD,KAAK,mBAAmB;gBACtB,OAAO;oBACL,GAAG,IAAI,CAAC,KAAK,CAAC;oBACd,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,KAAK,EAAE,SAAS;oBAChB,KAAK,EAAE,iBAAiB;iBACzB,CAAA;YACH,KAAK,aAAa;gBAChB,OAAO;oBACL,GAAG,IAAI,CAAC,KAAK,CAAC;oBACd,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC5B,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;oBAC1B,KAAK,EAAE,EAAE;oBACT,GAAG,UAAU,CAAC,KAAK,CAAC;iBACrB,CAAA;YACH,KAAK,gBAAgB;gBACnB,OAAO;oBACL,GAAG,IAAI,CAAC,KAAK,CAAC;oBACd,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC5B,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;oBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,GAAG,UAAU,CAAC,KAAK,CAAC;iBACrB,CAAA;YACH,KAAK,aAAa;gBAChB,OAAO;oBACL,GAAG,IAAI,CAAC,KAAK,CAAC;oBACd,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;oBAC5B,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;oBAC1B,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC;oBACrD,KAAK,EAAE,iBAAiB;iBACzB,CAAA;YACH,KAAK,sBAAsB;gBACzB,OAAO;oBACL,GAAG,IAAI,CAAC,KAAK,CAAC;oBACd,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC;oBAC9C,IAAI,EAAE,KAAK,CAAC,IAAI;iBACjB,CAAA;YACH,KAAK,cAAc;gBACjB,yEAAyE;gBACzE,iCAAiC;gBACjC,OAAO;oBACL,GAAG,IAAI,CAAC,KAAK,CAAC;oBACd,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC;oBACjD,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5D,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACnE,CAAA;QACL,CAAC;IACH,CAAC,CAAA;IAED,OAAO;QACL,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC;QACb,IAAI,CAAC,KAAe;YAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;YAC9B,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAA;YACxB,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAA;QAClB,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAU,CAAA;AACrE,MAAM,YAAY,GAAG,CAAC,OAAO,EAAE,UAAU,CAAU,CAAA;AACnD,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,iBAAiB,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAU,CAAA;AAE7F,4DAA4D;AAC5D,SAAS,KAAK,CAAmB,KAAa,EAAE,OAAqB,EAAE,QAAW;IAChF,OAAQ,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAW,CAAC,CAAC,CAAC,QAAQ,CAAA;AACjF,CAAC;AAED,qFAAqF;AACrF,SAAS,WAAW,CAAC,KAAwB;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAA;IAC5B,IAAI,OAAO,IAAI,KAAK;QAAE,OAAO,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;IACjG,MAAM,GAAG,GAAe,EAAE,CAAA;IAC1B,KAAK,MAAM,GAAG,IAAI;QAChB,aAAa;QACb,cAAc;QACd,aAAa;QACb,iBAAiB;QACjB,kBAAkB;KACV,EAAE,CAAC;QACX,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;QACpB,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACzC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,KAKnB;IAMC,OAAO;QACL,GAAG,CAAC,OAAO,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1F,CAAA;AACH,CAAC;AAED,gFAAgF;AAChF,SAAS,SAAS,CAAC,KAAe;IAChC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,aAAa;YAChB,OAAO,SAAS,KAAK,CAAC,IAAI,UAAU,KAAK,CAAC,KAAK,CAAC,MAAM,cAAc,KAAK,CAAC,QAAQ,EAAE,CAAA;QACtF,KAAK,YAAY;YACf,OAAO,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,eAAe,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAA;QACtF,KAAK,mBAAmB;YACtB,OAAO,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,WAAW,KAAK,CAAC,KAAK,EAAE,CAAA;QACvE,KAAK,aAAa,CAAC;QACnB,KAAK,gBAAgB;YACnB,OAAO,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,EAAE,CAAA;QACpE,KAAK,aAAa;YAChB,OAAO,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,WAAW,KAAK,CAAC,MAAM,EAAE,CAAA;QAC3F,KAAK,sBAAsB;YACzB,OAAO,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,IAAI,EAAE,CAAA;QACpE,KAAK,cAAc;YACjB,OAAO,SAAS,KAAK,CAAC,IAAI,YAAY,KAAK,CAAC,OAAO,GACjD,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EACxD,EAAE,CAAA;IACN,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAc,EACd,IAAuC;IAEvC,IAAI,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAA;IACnC,OAAO;QACL,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,GAAG,MAAM,6HAA6H;KAC/I,CAAA;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rarebit-one/harness-kernel",
-  "version": "0.8.0",
+  "version": "0.10.0",
   "description": "Provider-neutral AI-harness kernel — LLM adapters, tool-use loop, MCP connectors, and a pluggable agent-engine seam",
   "license": "MIT",
   "author": "Jaryl Sim <code@jaryl.dev>",
@@ -51,7 +51,7 @@
   },
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.3.228",
-    "@anthropic-ai/sdk": "^0.129.0",
+    "@anthropic-ai/sdk": "^0.131.0",
     "@modelcontextprotocol/sdk": "^1.30.0",
     "@zed-industries/agent-client-protocol": "^0.4.5",
     "openai": "^7.4.0",