@salesforce/sfdx-agent-harness-openai 0.0.1

package/CHANGELOG.md

@@ -0,0 +1,37 @@
+# Changelog
+
+All notable changes to `@salesforce/sfdx-agent-harness-openai` are documented in this file. Format follows
+[Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+
+## [0.0.1] - 2026-07-22
+
+### Features
+- **harness-openai**: full conformance gate + e2e closeout @W-23447579@ ([#684](https://github.com/forcedotcom/agentic-dx/pull/684))
+- **harness-openai**: compaction, telemetry, hooks @W-23447576@ ([#683](https://github.com/forcedotcom/agentic-dx/pull/683))
+- **harness-openai**: MCP lifecycle + updateAgent preservation @W-23447574@ ([#678](https://github.com/forcedotcom/agentic-dx/pull/678))
+- **harness-openai**: approval + consumer tools @W-23447572@ ([#677](https://github.com/forcedotcom/agentic-dx/pull/677))
+- **harness-openai**: sessions, tools, history + isError sidecar @W-23447571@ ([#676](https://github.com/forcedotcom/agentic-dx/pull/676))
+- **harness-openai**: scaffold OpenAI Agents SDK harness with connectivity + streamed turn @W-23447570@ ([#675](https://github.com/forcedotcom/agentic-dx/pull/675))
+
+### Fixes
+- **ci**: bump openai harness off seed version so it can publish @W-23447579@ ([#686](https://github.com/forcedotcom/agentic-dx/pull/686))
+
+### Chores
+- **deps-dev**: bump eslint from 10.6.0 to 10.7.0 in the eslint group ([#680](https://github.com/forcedotcom/agentic-dx/pull/680))
+
+## [Unreleased]
+
+### Features
+
+- Scaffold the package: `OpenAIAgentsHarnessFactory` (`harnessId: 'openai-agents'`, `protocolVersion: 1`,
+  `supportedProviderHints: ['openai-responses', 'openai']`), proxy-aware inner fetch, and connectivity via a custom
+  `ModelProvider` / `Model` bound to the live `ModelConnectivityInfo` bag.
+- Milestone A: a bare, tool-free streamed turn against the Salesforce LLM Gateway `/responses` endpoint, with
+  mid-stream-error synthesis (`error` + terminal `finish`).
+- Milestone D: MCP server lifecycle + `updateAgent` preservation. `createAgent` constructs, connects, and
+  background-discovers the agent's configured MCP servers; `getMcpServerInfo` returns a synchronous status snapshot;
+  `reconnectMcpServer` cycles a server's transport and re-discovers its tools; `updateAgent` preserves MCP clients whose
+  config is structurally unchanged (no reconnect, no `tools/list` — #541) and cycles only the changed / added / removed
+  servers. MCP-sourced `tool-call` / `tool-result` events are enriched with `serverName` / `bareToolName` /
+  `annotations`. The reconnection-options field-merge is wired into the cross-harness conformance gate. MCP-tool
+  approval gating and MCP telemetry are deferred to later milestones.

package/LICENSE.txt

@@ -0,0 +1,21 @@
+Terms of Use
+
+Copyright 2026 Salesforce, Inc. All rights reserved.
+
+These Terms of Use govern the download, installation, and/or use of this software provided by Salesforce, Inc. ("Salesforce") (the "Software"), were last updated on March 24, 2026, and constitute a legally binding agreement between you and Salesforce. If you do not agree to these Terms of Use, do not install or use the Software. The Software may link to third-party software components licensed under various open source licenses ("Open Source Components"). These Terms of Use pertain solely to Salesforce's proprietary code in the Software. It does not alter or extend any rights or obligations regarding the Open Source Components. For clarity, your use of the Open Source Components is governed by the terms of the applicable open source license(s). You are solely responsible for complying with the terms and conditions of those open source licenses.
+
+Salesforce grants you a worldwide, non-exclusive, no-charge, royalty-free copyright license to reproduce, revocable, publicly display, publicly perform, sublicense, and distribute the Software and derivative works subject to these Terms. These Terms shall be included in all copies or substantial portions of the Software.
+
+Subject to the limited rights expressly granted hereunder, Salesforce reserves all rights, title, and interest in and to all intellectual property subsisting in the Software. No rights are granted to you hereunder other than as expressly set forth herein. Users residing in countries on the United States Office of Foreign Assets Control sanction list, or which are otherwise subject to a US export embargo, may not use the Software.
+
+Implementation of the Software may require development work, for which you are responsible. The Software may contain bugs, errors and incompatibilities and is made available on an AS IS basis without support, updates, or service level commitments.
+
+Salesforce reserves the right at any time to modify, suspend, or discontinue, the Software (or any part thereof) with or without notice. You agree that Salesforce shall not be liable to you or to any third party for any modification, suspension, or discontinuance.
+
+You agree to defend Salesforce against any claim, demand, suit or proceeding made or brought against Salesforce by a third party arising out of or accruing from (a) your use of the Software, and (b) any application you develop with the Software that infringes any copyright, trademark, trade secret, trade dress, patent, or other intellectual property right of any person or defames any person or violates their rights of publicity or privacy (each a "Claim Against Salesforce"), and will indemnify Salesforce from any damages, attorney fees, and costs finally awarded against Salesforce as a result of, or for any amounts paid by Salesforce under a settlement approved by you in writing of, a Claim Against Salesforce, provided Salesforce (x) promptly gives you written notice of the Claim Against Salesforce, (y) gives you sole control of the defense and settlement of the Claim Against Salesforce (except that you may not settle any Claim Against Salesforce unless it unconditionally releases Salesforce of all liability), and (z) gives you all reasonable assistance, at your expense.
+
+WITHOUT LIMITING THE GENERALITY OF THE FOREGOING, THE SOFTWARE IS NOT SUPPORTED AND IS PROVIDED "AS IS," WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. IN NO EVENT SHALL SALESFORCE HAVE ANY LIABILITY FOR ANY DAMAGES, INCLUDING, BUT NOT LIMITED TO, DIRECT, INDIRECT, SPECIAL, INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR DAMAGES BASED ON LOST PROFITS, DATA, OR USE, IN CONNECTION WITH THE SOFTWARE, HOWEVER CAUSED AND WHETHER IN CONTRACT, TORT, OR UNDER ANY OTHER THEORY OF LIABILITY, WHETHER OR NOT YOU HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+These Terms of Use shall be governed exclusively by the internal laws of the State of California, without regard to its conflicts of laws rules. Each party hereby consents to the exclusive jurisdiction of the state and federal courts located in San Francisco County, California to adjudicate any dispute arising out of or relating to these Terms of Use and the download, installation, and/or use of the Software. Except as expressly stated herein, these Terms of Use constitute the entire agreement between the parties, and supersede all prior and contemporaneous agreements, proposals, or representations, written or oral, concerning their subject matter. No modification, amendment, or waiver of any provision of these Terms of Use shall be effective unless it is by an update to these Terms of Use that Salesforce makes available, or is in writing and signed by the party against whom the modification, amendment, or waiver is to be asserted.
+
+Data Privacy: Salesforce may collect, process, and store device, system, and other information related to your use of the Software. This information includes, but is not limited to, IP address, user metrics, and other data ("Usage Data"). Salesforce may use Usage Data for analytics, product development, and marketing purposes. You acknowledge that files generated in conjunction with the Software may contain sensitive or confidential data, and you are solely responsible for anonymizing and protecting such data.

package/README.md

@@ -0,0 +1,55 @@
+# @salesforce/sfdx-agent-harness-openai
+
+OpenAI Agents SDK-backed `AgentHarness` implementation for [`@salesforce/sfdx-agent-sdk`](../sfdx-agent-sdk).
+
+> **Closed source.** This package is published to npm under the [Salesforce Public Code License](../../LICENSE.txt) and
+> is for use by Salesforce only.
+
+> **Milestone F — closeout (this release).** All six milestones (A–F) have landed: A's connectivity + streamed turn, B's
+> disk-backed sessions / thread lifecycle / message history, C's tool approval + consumer-executed tools, D's MCP server
+> lifecycle + `updateAgent` preservation (#541), E's compaction / telemetry / hooks, and F's full conformance-gate + e2e
+> closeout. Every `AgentHarness` method has a working implementation, the shared cross-harness conformance gate is
+> green, and the harness passes the SDK's `describe.each` e2e matrix under `--harness openai` against the real gateway.
+> **Known deferred gaps** (each excluded from the e2e matrix with a documented rationale, not a silent skip): MCP-tool
+> **approval gating** (the `@openai/agents` native `Agent({ mcpServers })` attach exposes no per-tool `needsApproval`
+> hook), **multimodal** input (the harness is text-only), `AgentConfig.rules` / `skills` composition, and MCP
+> `tool-progress`. Consumer-tool approval + `submitToolResult`, and tool-result redaction, ARE supported.
+
+## What it is
+
+A third implementation of the SDK's `AgentHarness` contract, alongside the Mastra and Claude harnesses. It is backed by
+the OpenAI Agents SDK — an agentic _framework_ (it owns the run loop, tool orchestration, and sessions), peer to Mastra
+and the Claude Agent SDK, not a model. GPT models are already served through the Mastra harness's `/responses`
+pass-through; this harness exists to provide an OpenAI-maintained run loop and a genuine third implementation that
+stress-validates the `AgentHarness` contract's harness-agnosticism.
+
+The harness advertises `supportedProviderHints: ['openai-responses', 'openai']`.
+
+## Quick start
+
+```ts
+import { createAgentManager } from '@salesforce/sfdx-agent-sdk';
+import { OpenAIAgentsHarnessFactory } from '@salesforce/sfdx-agent-harness-openai';
+
+const manager = await createAgentManager(storageRootFolder, new OpenAIAgentsHarnessFactory());
+```
+
+The SDK's `AgentConnectivityResolver` supplies the gateway URL, native model id, provider hint, and per-request auth
+headers as a `ModelConnectivityInfo` bag; the factory carries only harness-internal concerns.
+
+## Public API
+
+| Export                             | Kind  | Description                                                                                                                                                                                                                                          |
+| ---------------------------------- | ----- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `OpenAIAgentsHarnessFactory`       | class | `HarnessFactory` that constructs the harness. Pass to `createAgentManager`.                                                                                                                                                                          |
+| `OpenAIAgentsHarnessFactoryConfig` | type  | Optional factory configuration. Carries `toolApprovalTimeoutMs` (per-`toolCallId` approval timeout, default 600_000 ms); connectivity flows in from the SDK's resolver, not the factory.                                                             |
+| `OPENAI_BUILT_IN_TOOL_POLICIES`    | const | The harness's built-in tool-approval tier fed to `resolveToolApprovalPolicy` (the `tiers.harness` slice). Empty today — the harness registers no runtime built-in tools of its own. Mirrors the Mastra / Claude `*_BUILT_IN_TOOL_POLICIES` surfaces. |
+
+Connectivity flows in from the SDK as a `ModelConnectivityInfo` bag — for Salesforce-org gateway routing use
+`DefaultAgentConnectivityResolver` from `@salesforce/sfdx-agent-sdk` (or any custom resolver); for direct-OpenAI / BYOK
+paths use `ApiKeyConnectivityResolver`.
+
+## Development
+
+See [DEVELOPING.md](DEVELOPING.md) for build, test, and packaging commands, and [ARCHITECTURE.md](ARCHITECTURE.md) for
+internal design.

package/dist/gen-sink.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Re-export of the `GenSink` primitive from the SDK's harness-implementation
+ * subpath (`@salesforce/sfdx-agent-sdk/harness`). See that surface for the
+ * single-iteration invariant; issue #529 is the rationale for the
+ * cross-harness lift and for the subpath split (consumer applications can no
+ * longer import `GenSink` from the bare specifier — they have no use for it).
+ */
+export { GenSink } from '@salesforce/sfdx-agent-sdk/harness';

package/dist/gen-sink.js

@@ -0,0 +1,13 @@
+/*
+ * Copyright 2026, Salesforce, Inc. All rights reserved.
+ * See LICENSE.txt for license terms.
+ */
+/**
+ * Re-export of the `GenSink` primitive from the SDK's harness-implementation
+ * subpath (`@salesforce/sfdx-agent-sdk/harness`). See that surface for the
+ * single-iteration invariant; issue #529 is the rationale for the
+ * cross-harness lift and for the subpath split (consumer applications can no
+ * longer import `GenSink` from the bare specifier — they have no use for it).
+ */
+export { GenSink } from '@salesforce/sfdx-agent-sdk/harness';
+//# sourceMappingURL=gen-sink.js.map

package/dist/gen-sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gen-sink.js","sourceRoot":"","sources":["../src/gen-sink.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;;;GAMG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,oCAAoC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { OpenAIAgentsHarnessFactory, type OpenAIAgentsHarnessFactoryConfig } from './openai-agents-harness-factory.js';
+export { type OpenAIAgentsAgentHarness } from './openai-agents-harness.js';
+export { OPENAI_BUILT_IN_TOOL_POLICIES } from './openai-built-in-policies.js';

package/dist/index.js

@@ -0,0 +1,16 @@
+/*
+ * Copyright 2026, Salesforce, Inc. All rights reserved.
+ * See LICENSE.txt for license terms.
+ */
+export { OpenAIAgentsHarnessFactory } from './openai-agents-harness-factory.js';
+export {} from './openai-agents-harness.js';
+// The OpenAI harness's built-in tool-approval tier (the `tiers.harness` slice
+// fed to `resolveToolApprovalPolicy`). Exported for parity with the Mastra /
+// Claude `*_BUILT_IN_TOOL_POLICIES` surfaces so consumers can inspect it; empty
+// today (the harness registers no runtime built-in tools of its own).
+export { OPENAI_BUILT_IN_TOOL_POLICIES } from './openai-built-in-policies.js';
+// Connectivity flows in from the SDK as a `ModelConnectivityInfo` bag — there's
+// no per-harness transport-strategy seam. For Salesforce-org gateway routing use
+// `DefaultAgentConnectivityResolver` from `@salesforce/sfdx-agent-sdk` (or any
+// custom resolver); for direct-OpenAI / BYOK paths use `ApiKeyConnectivityResolver`.
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,0BAA0B,EAAyC,MAAM,oCAAoC,CAAC;AACvH,OAAO,EAAiC,MAAM,4BAA4B,CAAC;AAC3E,8EAA8E;AAC9E,6EAA6E;AAC7E,gFAAgF;AAChF,sEAAsE;AACtE,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,gFAAgF;AAChF,iFAAiF;AACjF,+EAA+E;AAC/E,qFAAqF"}

package/dist/mcp-error-classifier.d.ts

@@ -0,0 +1,36 @@
+import type { McpServerErrorCategory, McpServerErrorDetail } from '@salesforce/sfdx-agent-sdk';
+/**
+ * Strip V8 stack frames ("    at <frame>") and any framing that arrived inside
+ * the message string. The result is a single, human-readable summary line safe
+ * for UI banners, telemetry tags, and Sentry fingerprints. The full stack is
+ * still available on the underlying `Error` instance (`error.stack`) for
+ * debug-mode log surfaces.
+ *
+ * Inputs are loose on purpose: a string passes through, a non-Error object's
+ * `String(...)` form is sanitized the same way, and `undefined`/`null` round-trip
+ * through `String(...)`.
+ */
+export declare function sanitizeMcpErrorMessage(err: unknown): string;
+/**
+ * Map a caught error to the SDK's stable {@link McpServerErrorCategory}. The
+ * lookup is layered:
+ *
+ *  1. `DOMException` `AbortError` and Node's `code === 'ABORT_ERR'` map to
+ *     `'aborted'` regardless of the `.message`.
+ *  2. MCP-shaped errors (an `Error` carrying a numeric `code`, see
+ *     {@link isMcpErrorLike}) match by code: a positive code in `[100, 599]` is
+ *     an HTTP status (see {@link categoryForHttpStatus}); a negative code is a
+ *     JSON-RPC 2.0 error (`-32001` etc.).
+ *  3. Free-form `.message` text is matched against substrings the underlying
+ *     transports surface (`401`, `403`, `5xx`, `ECONNREFUSED`, etc.). This is
+ *     intentionally a small lookup — categories are stable, message shapes
+ *     are not, so the heuristic stays narrow and falls back to `'unknown'`.
+ */
+export declare function classifyMcpError(err: unknown): McpServerErrorCategory;
+/**
+ * Build the SDK-side {@link McpServerErrorDetail} from a caught error. The
+ * underlying JSON-RPC `code` (when the error is MCP-shaped, see
+ * {@link isMcpErrorLike}) is preserved so consumers can route on the code
+ * without having to introspect `cause`.
+ */
+export declare function buildMcpErrorDetail(err: unknown): McpServerErrorDetail;

package/dist/mcp-error-classifier.js

@@ -0,0 +1,166 @@
+/*
+ * Copyright 2026, Salesforce, Inc. All rights reserved.
+ * See LICENSE.txt for license terms.
+ */
+import { getErrorMessage, isAbortError } from '@salesforce/agentic-common';
+/**
+ * Structural duck-type for MCP-shaped errors. Matches the upstream
+ * `@modelcontextprotocol/sdk` `McpError` class (`extends Error`, numeric
+ * `code`) without an `instanceof` check. We avoid the import for two reasons:
+ *
+ * 1. **Dual-package hazard.** If a transport ever pins
+ *    `@modelcontextprotocol/sdk` to a version that diverges from one this
+ *    package would pin, npm hoists two copies and `instanceof` returns false
+ *    across realms. Structural matching survives that case.
+ * 2. **JSON-RPC codes are the contract, not the class.** The numeric codes
+ *    (`-32001 RequestTimeout`, `-32603 InternalError`, …) are stable per the
+ *    JSON-RPC 2.0 spec. Any error with `code: number` originating from
+ *    MCP-shaped infrastructure will match — which is what consumers want.
+ *
+ * Node's `SystemError` (e.g. `ECONNREFUSED`) also has a `.code` field but as
+ * a `string`, so the `typeof === 'number'` check disambiguates.
+ *
+ * This classifier is a copy of the Claude and Mastra harnesses' copies —
+ * cross-harness imports are lint-blocked (`harnessIsolationPack`), so the code
+ * is duplicated on purpose and the shared `@salesforce/harness-conformance`
+ * `MCP_ERROR_FIXTURES` table is the drift-guard that keeps the three in
+ * lockstep. If a third-and-beyond harness ships, this should graduate to a
+ * shared package.
+ */
+function isMcpErrorLike(err) {
+    return err instanceof Error && typeof err.code === 'number';
+}
+/**
+ * Strip V8 stack frames ("    at <frame>") and any framing that arrived inside
+ * the message string. The result is a single, human-readable summary line safe
+ * for UI banners, telemetry tags, and Sentry fingerprints. The full stack is
+ * still available on the underlying `Error` instance (`error.stack`) for
+ * debug-mode log surfaces.
+ *
+ * Inputs are loose on purpose: a string passes through, a non-Error object's
+ * `String(...)` form is sanitized the same way, and `undefined`/`null` round-trip
+ * through `String(...)`.
+ */
+export function sanitizeMcpErrorMessage(err) {
+    const raw = getErrorMessage(err);
+    const lines = raw.split(/\r?\n/);
+    // Keep the first line that is NOT a V8 stack frame. V8 frames start with
+    // arbitrary leading whitespace followed by "at " (matched at line start).
+    for (const line of lines) {
+        if (!/^\s*at\s/.test(line)) {
+            return line.trim();
+        }
+    }
+    // All lines were stack frames — fall back to the raw single-line input.
+    return lines[0]?.trim() ?? '';
+}
+/**
+ * Map an HTTP status code to the SDK's stable {@link McpServerErrorCategory}.
+ * HTTP status codes are positive (100–599); JSON-RPC error codes are negative,
+ * so the two never collide on the numeric `code` field. The MCP SDK's
+ * `StreamableHTTPError` carries the HTTP status verbatim on `code`
+ * (`@modelcontextprotocol/sdk` `streamableHttp.js`), so a 404 "org not enabled"
+ * surfaces as `http-4xx` + `code: 404` rather than collapsing to `unknown`
+ * (W-23231658). Kept in lockstep with the Mastra and Claude harnesses' copies.
+ */
+function categoryForHttpStatus(status) {
+    if (status === 401)
+        return 'http-401';
+    if (status === 403)
+        return 'http-403';
+    if (status >= 400 && status <= 499)
+        return 'http-4xx';
+    if (status >= 500 && status <= 599)
+        return 'http-5xx';
+    return 'unknown';
+}
+/**
+ * Map a caught error to the SDK's stable {@link McpServerErrorCategory}. The
+ * lookup is layered:
+ *
+ *  1. `DOMException` `AbortError` and Node's `code === 'ABORT_ERR'` map to
+ *     `'aborted'` regardless of the `.message`.
+ *  2. MCP-shaped errors (an `Error` carrying a numeric `code`, see
+ *     {@link isMcpErrorLike}) match by code: a positive code in `[100, 599]` is
+ *     an HTTP status (see {@link categoryForHttpStatus}); a negative code is a
+ *     JSON-RPC 2.0 error (`-32001` etc.).
+ *  3. Free-form `.message` text is matched against substrings the underlying
+ *     transports surface (`401`, `403`, `5xx`, `ECONNREFUSED`, etc.). This is
+ *     intentionally a small lookup — categories are stable, message shapes
+ *     are not, so the heuristic stays narrow and falls back to `'unknown'`.
+ */
+export function classifyMcpError(err) {
+    if (isAbortError(err))
+        return 'aborted';
+    if (isMcpErrorLike(err)) {
+        // HTTP status (positive, 100–599) before the JSON-RPC switch — the two
+        // code spaces are disjoint (JSON-RPC codes are negative), so an HTTP
+        // 404 no longer falls through the JSON-RPC `default` to `unknown`.
+        if (err.code >= 100 && err.code <= 599) {
+            return categoryForHttpStatus(err.code);
+        }
+        switch (err.code) {
+            case -32001: // RequestTimeout
+                return 'connect-timeout';
+            case -32700: // ParseError
+            case -32600: // InvalidRequest
+            case -32601: // MethodNotFound
+            case -32602: // InvalidParams
+            case -32603: // InternalError
+                return 'protocol-error';
+            case -32000: // ConnectionClosed
+                return 'transport-eof';
+            default:
+                return 'unknown';
+        }
+    }
+    const message = err instanceof Error ? err.message : typeof err === 'string' ? err : '';
+    if (/\b401\b/.test(message))
+        return 'http-401';
+    if (/\b403\b/.test(message))
+        return 'http-403';
+    if (/\b4\d\d\b/.test(message))
+        return 'http-4xx';
+    if (/\b5\d\d\b/.test(message))
+        return 'http-5xx';
+    if (/ECONNREFUSED|ECONNRESET|EPIPE|socket hang up/i.test(message))
+        return 'transport-eof';
+    if (/timed out|timeout/i.test(message))
+        return 'connect-timeout';
+    return 'unknown';
+}
+/**
+ * Whether the SDK considers the failure transient (worth a retry via
+ * `Agent.reconnectMcpServer` / `Agent.refreshMcpAuth`). Aborted operations and
+ * permanent protocol violations are non-retriable; everything else is retriable
+ * by default — failing-open here is correct because the consumer always has
+ * the option to ignore the hint.
+ */
+function isCategoryRetriable(category) {
+    switch (category) {
+        case 'aborted':
+        case 'protocol-error':
+        case 'config-error':
+            return false;
+        default:
+            return true;
+    }
+}
+/**
+ * Build the SDK-side {@link McpServerErrorDetail} from a caught error. The
+ * underlying JSON-RPC `code` (when the error is MCP-shaped, see
+ * {@link isMcpErrorLike}) is preserved so consumers can route on the code
+ * without having to introspect `cause`.
+ */
+export function buildMcpErrorDetail(err) {
+    const category = classifyMcpError(err);
+    const detail = {
+        category,
+        retriable: isCategoryRetriable(category),
+    };
+    if (isMcpErrorLike(err)) {
+        detail.code = err.code;
+    }
+    return detail;
+}
+//# sourceMappingURL=mcp-error-classifier.js.map

package/dist/mcp-error-classifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-error-classifier.js","sourceRoot":"","sources":["../src/mcp-error-classifier.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE3E;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAS,cAAc,CAAC,GAAY;IAChC,OAAO,GAAG,YAAY,KAAK,IAAI,OAAQ,GAA0B,CAAC,IAAI,KAAK,QAAQ,CAAC;AACxF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAY;IAChD,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjC,yEAAyE;IACzE,0EAA0E;IAC1E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;IACL,CAAC;IACD,wEAAwE;IACxE,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,qBAAqB,CAAC,MAAc;IACzC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,UAAU,CAAC;IACtC,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,UAAU,CAAC;IACtC,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IACtD,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,UAAU,CAAC;IACtD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY;IACzC,IAAI,YAAY,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAExC,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,uEAAuE;QACvE,qEAAqE;QACrE,mEAAmE;QACnE,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;YACrC,OAAO,qBAAqB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QACD,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACf,KAAK,CAAC,KAAK,EAAE,iBAAiB;gBAC1B,OAAO,iBAAiB,CAAC;YAC7B,KAAK,CAAC,KAAK,CAAC,CAAC,aAAa;YAC1B,KAAK,CAAC,KAAK,CAAC,CAAC,iBAAiB;YAC9B,KAAK,CAAC,KAAK,CAAC,CAAC,iBAAiB;YAC9B,KAAK,CAAC,KAAK,CAAC,CAAC,gBAAgB;YAC7B,KAAK,CAAC,KAAK,EAAE,gBAAgB;gBACzB,OAAO,gBAAgB,CAAC;YAC5B,KAAK,CAAC,KAAK,EAAE,mBAAmB;gBAC5B,OAAO,eAAe,CAAC;YAC3B;gBACI,OAAO,SAAS,CAAC;QACzB,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,UAAU,CAAC;IAC/C,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,UAAU,CAAC;IAC/C,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,UAAU,CAAC;IACjD,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,UAAU,CAAC;IACjD,IAAI,+CAA+C,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,eAAe,CAAC;IAC1F,IAAI,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACjE,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,QAAgC;IACzD,QAAQ,QAAQ,EAAE,CAAC;QACf,KAAK,SAAS,CAAC;QACf,KAAK,gBAAgB,CAAC;QACtB,KAAK,cAAc;YACf,OAAO,KAAK,CAAC;QACjB;YACI,OAAO,IAAI,CAAC;IACpB,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC5C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,MAAM,GAAyB;QACjC,QAAQ;QACR,SAAS,EAAE,mBAAmB,CAAC,QAAQ,CAAC;KAC3C,CAAC;IACF,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IAC3B,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/dist/openai-agents-harness-factory.d.ts

@@ -0,0 +1,36 @@
+import type { HarnessFactory, ProviderHint } from '@salesforce/sfdx-agent-sdk';
+import { type OpenAIAgentsAgentHarness } from './openai-agents-harness.js';
+/**
+ * Factory configuration for the OpenAI Agents harness.
+ *
+ * Connectivity flows in from the SDK's `AgentConnectivityResolver` as a
+ * `ModelConnectivityInfo` bag, not from the factory — so the config carries only
+ * harness-internal knobs.
+ */
+export interface OpenAIAgentsHarnessFactoryConfig {
+    /**
+     * Per-`toolCallId` tool-approval timeout, in milliseconds, forwarded to each
+     * turn's `OpenAIApprovalCoordinator`. Defaults to 600_000 (10 minutes) when
+     * unset — the same default the coordinator applies. Mirrors the Claude /
+     * Mastra factories' `toolApprovalTimeoutMs` so timeout-sensitive e2e
+     * scenarios can dial it in.
+     */
+    readonly toolApprovalTimeoutMs?: number;
+}
+/**
+ * Constructs an {@link OpenAIAgentsHarness} bound to a storage root.
+ *
+ * The OpenAI Agents SDK (`@openai/agents`) speaks the OpenAI Responses wire
+ * shape only, so the harness advertises `supportedProviderHints:
+ * ['openai-responses', 'openai']`. Routing it at a non-OpenAI model is a
+ * programming error caught at `createAgent` / `updateAgentConfig` by the
+ * manager's provider-hint validation.
+ */
+export declare class OpenAIAgentsHarnessFactory implements HarnessFactory<OpenAIAgentsAgentHarness> {
+    private readonly config;
+    readonly harnessId = "openai-agents";
+    readonly protocolVersion = 1;
+    readonly supportedProviderHints: readonly ProviderHint[];
+    constructor(config?: OpenAIAgentsHarnessFactoryConfig);
+    create(storageRootFolder: string): Promise<OpenAIAgentsAgentHarness>;
+}

package/dist/openai-agents-harness-factory.js

@@ -0,0 +1,39 @@
+/*
+ * Copyright 2026, Salesforce, Inc. All rights reserved.
+ * See LICENSE.txt for license terms.
+ */
+import { createProxyAwareFetch, resolveProxyDispatcher } from '@salesforce/agentic-common';
+import { OpenAIAgentsHarness } from './openai-agents-harness.js';
+/**
+ * Constructs an {@link OpenAIAgentsHarness} bound to a storage root.
+ *
+ * The OpenAI Agents SDK (`@openai/agents`) speaks the OpenAI Responses wire
+ * shape only, so the harness advertises `supportedProviderHints:
+ * ['openai-responses', 'openai']`. Routing it at a non-OpenAI model is a
+ * programming error caught at `createAgent` / `updateAgentConfig` by the
+ * manager's provider-hint validation.
+ */
+export class OpenAIAgentsHarnessFactory {
+    config;
+    harnessId = 'openai-agents';
+    protocolVersion = 1;
+    supportedProviderHints = ['openai-responses', 'openai'];
+    constructor(config = {}) {
+        this.config = config;
+    }
+    async create(storageRootFolder) {
+        // Build a proxy-aware inner fetch once per harness and thread it into the
+        // per-request gateway fetch, mirroring the Mastra and Claude factories.
+        // `resolveProxyDispatcher()` returns an `EnvHttpProxyAgent` when
+        // `HTTPS_PROXY` / `HTTP_PROXY` is set and `undefined` otherwise;
+        // `createProxyAwareFetch` wraps it into a `typeof fetch` (or returns
+        // `globalThis.fetch` unchanged when no dispatcher is supplied). No
+        // `globalThis` mutation.
+        const innerFetch = createProxyAwareFetch(resolveProxyDispatcher());
+        return new OpenAIAgentsHarness(storageRootFolder, {
+            innerFetch,
+            toolApprovalTimeoutMs: this.config.toolApprovalTimeoutMs,
+        });
+    }
+}
+//# sourceMappingURL=openai-agents-harness-factory.js.map

package/dist/openai-agents-harness-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-agents-harness-factory.js","sourceRoot":"","sources":["../src/openai-agents-harness-factory.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAE3F,OAAO,EAAE,mBAAmB,EAAiC,MAAM,4BAA4B,CAAC;AAoBhG;;;;;;;;GAQG;AACH,MAAM,OAAO,0BAA0B;IAKN;IAJpB,SAAS,GAAG,eAAe,CAAC;IAC5B,eAAe,GAAG,CAAC,CAAC;IACpB,sBAAsB,GAA4B,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IAE1F,YAA6B,SAA2C,EAAE;QAA7C,WAAM,GAAN,MAAM,CAAuC;IAAG,CAAC;IAE9E,KAAK,CAAC,MAAM,CAAC,iBAAyB;QAClC,0EAA0E;QAC1E,wEAAwE;QACxE,iEAAiE;QACjE,iEAAiE;QACjE,qEAAqE;QACrE,mEAAmE;QACnE,yBAAyB;QACzB,MAAM,UAAU,GAAG,qBAAqB,CAAC,sBAAsB,EAAE,CAAC,CAAC;QACnE,OAAO,IAAI,mBAAmB,CAAC,iBAAiB,EAAE;YAC9C,UAAU;YACV,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,qBAAqB;SAC3D,CAAC,CAAC;IACP,CAAC;CACJ"}