@salesforce/sfdx-agent-sdk 0.82.0 → 0.84.0

package/CHANGELOG.md

@@ -3,6 +3,16 @@
 All notable changes to `@salesforce/sfdx-agent-sdk` are documented in this file.
 Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [0.84.0] - 2026-09-16
+
+### Fixes
+- **agentic-common**: bypass /ide/auth mint when the credential is already a JWT @W-23616439@ ([#822](https://github.com/forcedotcom/agentic-dx/pull/822))
+
+## [0.83.0] - 2026-09-16
+
+### Features
+- **harness-mastra**: stream tool-call argument deltas from pass-through builders @W-23954558@ ([#824](https://github.com/forcedotcom/agentic-dx/pull/824))
+
 ## [0.82.0] - 2026-09-15
 
 _No changes — released alongside dependent packages._

package/README.md

@@ -1296,6 +1296,7 @@ const manager = await createAgentManager('/path/to/storage', new MastraHarnessFa
 | `providerHint`       | `ProviderHint`                    | Wire shape. Must be one a harness in the consumer's setup advertises via `HarnessFactory.supportedProviderHints`.                                                                                                                                                               |
 | `nativeModelIdFor?`  | `(model: Model) => string`        | Optional translator from canonical `model.name` to the endpoint-native model id. Direct-provider endpoints expect their own naming (`claude-sonnet-4-6`); gateway-shaped endpoints accept the canonical `sfdc_ai__Default*` id verbatim. Defaults to `model.name`.              |
 | `connectionFactory?` | `OrgConnectionFactory`            | Optional. When supplied, the resolver mints an org connection + JWT alongside the api-key bag — the BYOK shape (api-key authenticates the LLM; org JWT authenticates MCP servers / identity). Without it, `orgConnection` and `orgJwt` are omitted from `ResolvedConnectivity`. |
+| `logBus?`            | `LogBus`                          | Optional. When set (with `connectionFactory`), routes the org-JWT bypass/mint logs onto the bus so the BYOK org-gateway first-token acquisition is observable via `manager.onLog`.                                                                                              |
 
 The resolver throws `AgentSDKError(NOT_SUPPORTED)` when `getApiKey()` returns empty / nullish so consumers see "the
 resolver returned an empty key" rather than chasing a 401 through provider logs after `Authorization: Bearer ` (no key)

package/dist/agent-connectivity-resolver.d.ts

@@ -1,5 +1,5 @@
 import { Model } from './models/index.js';
-import { type JSONWebToken, type OrgConnection, type OrgConnectionFactory, SfApiEnv } from '@salesforce/agentic-common';
+import { type JSONWebToken, type LogBus, type OrgConnection, type OrgConnectionFactory, SfApiEnv } from '@salesforce/agentic-common';
 import type { AgentConfig } from './harness/harness-config.js';
 import type { ModelConnectivityInfo, ProviderHint } from './types/model-connectivity-info.js';
 /**
@@ -65,10 +65,13 @@ export interface AgentConnectivityResolver {
  */
 export declare class DefaultAgentConnectivityResolver implements AgentConnectivityResolver {
     private readonly connectionFactory;
+    private readonly logBus?;
     /**
      * @param connectionFactory - Creates authenticated Salesforce org connections.
+     * @param logBus - Optional root {@link LogBus} the JWT mint + injected-JWT-bypass logs are
+     *   forwarded onto, so first-token acquisition is observable via `manager.onLog` / `onBootLog`.
      */
-    constructor(connectionFactory?: OrgConnectionFactory);
+    constructor(connectionFactory?: OrgConnectionFactory, logBus?: LogBus | undefined);
     /**
      * Resolves the org and produces the harness-facing `ModelConnectivityInfo` bag.
      *

package/dist/agent-connectivity-resolver.js

@@ -13,11 +13,15 @@ import { connectionProviderFor, createJWTFromConnection, RealOrgConnectionFactor
  */
 export class DefaultAgentConnectivityResolver {
     connectionFactory;
+    logBus;
     /**
      * @param connectionFactory - Creates authenticated Salesforce org connections.
+     * @param logBus - Optional root {@link LogBus} the JWT mint + injected-JWT-bypass logs are
+     *   forwarded onto, so first-token acquisition is observable via `manager.onLog` / `onBootLog`.
      */
-    constructor(connectionFactory = new RealOrgConnectionFactory()) {
+    constructor(connectionFactory = new RealOrgConnectionFactory(), logBus) {
         this.connectionFactory = connectionFactory;
+        this.logBus = logBus;
     }
     /**
      * Resolves the org and produces the harness-facing `ModelConnectivityInfo` bag.
@@ -41,7 +45,9 @@ export class DefaultAgentConnectivityResolver {
         });
         const orgConnection = await reresolve();
         const env = orgConnection.getInferredSfApiEnv();
-        const orgJwt = await createJWTFromConnection(reuseThenReresolve(orgConnection, reresolve));
+        const orgJwt = await createJWTFromConnection(reuseThenReresolve(orgConnection, reresolve), {
+            logBus: this.logBus,
+        });
         const model = resolveAgentConfigModel(config.modelId);
         const modelConnectivityInfo = {
             model,

package/dist/agent-manager.js

@@ -456,10 +456,13 @@ export async function createAgentManager(storageRootFolder, harnessFactory, opti
             `advertised version ${factoryVersion} (SDK supports: ${SUPPORTED_PROTOCOL_VERSIONS.join(', ')}). ` +
             `Update the SDK or harness package.`, AgentSDKErrorType.INCOMPATIBLE_HARNESS);
     }
-    const agentConnectivityResolver = options?.connectivityResolver ?? new DefaultAgentConnectivityResolver();
     const clock = new RealClock();
     // The manager's root log bus shares the manager clock and self-reads the process environment context.
     const logBus = new LogBus(clock);
+    // The default resolver forwards JWT-mint + injected-JWT-bypass logs onto the manager's root bus
+    // so first-token acquisition is observable via onBootLog / manager.onLog; a consumer-supplied
+    // resolver owns its own logging.
+    const agentConnectivityResolver = options?.connectivityResolver ?? new DefaultAgentConnectivityResolver(undefined, logBus);
     return DefaultAgentManager.__build(harness, harnessFactory.supportedProviderHints, agentConnectivityResolver, { hooksForAgent: options?.hooksForAgent, mcpAuthProviderResolver: options?.mcpAuthProviderResolver }, storageRootFolder, new UUIDGenerator(), clock, logBus, options?.onBootLog);
 }
 function isSupportedProtocolVersion(version) {

package/dist/api-key-connectivity-resolver.d.ts

@@ -1,5 +1,5 @@
 import { Model } from './models/index.js';
-import { type OrgConnectionFactory } from '@salesforce/agentic-common';
+import { type LogBus, type OrgConnectionFactory } from '@salesforce/agentic-common';
 import { type AgentConnectivityResolver, type ResolvedConnectivity } from './agent-connectivity-resolver.js';
 import type { AgentConfig } from './harness/harness-config.js';
 import type { ProviderHint } from './types/model-connectivity-info.js';
@@ -52,6 +52,8 @@ export type ApiKeyConnectivityResolverConfig = {
      * omitted from `ResolvedConnectivity`.
      */
     connectionFactory?: OrgConnectionFactory;
+    /** Optional bus to route the org-JWT bypass/mint logs onto (used only with `connectionFactory`). */
+    logBus?: LogBus;
 };
 /**
  * Generic api-key {@link AgentConnectivityResolver}. Covers every named

package/dist/api-key-connectivity-resolver.js

@@ -112,7 +112,9 @@ export class ApiKeyConnectivityResolver {
             projectRoot,
         });
         const orgConnection = await reresolve();
-        const orgJwt = await createJWTFromConnection(reuseThenReresolve(orgConnection, reresolve));
+        const orgJwt = await createJWTFromConnection(reuseThenReresolve(orgConnection, reresolve), {
+            logBus: this.cfg.logBus,
+        });
         return { orgConnection, orgJwt };
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@salesforce/sfdx-agent-sdk",
-  "version": "0.82.0",
+  "version": "0.84.0",
   "description": "Harness-agnostic agentic infrastructure for Salesforce developer experience tooling",
   "type": "module",
   "main": "dist/index.js",
@@ -43,14 +43,14 @@
     "LICENSE.txt"
   ],
   "dependencies": {
-    "@salesforce/agentic-common": "0.19.0",
+    "@salesforce/agentic-common": "0.20.0",
     "ajv": "^8.20.0"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
-    "@salesforce/sfdx-agent-harness-claude": "0.78.0",
-    "@salesforce/sfdx-agent-harness-mastra": "0.81.0",
-    "@salesforce/sfdx-agent-harness-openai": "0.47.0",
+    "@salesforce/sfdx-agent-harness-claude": "0.80.0",
+    "@salesforce/sfdx-agent-harness-mastra": "0.83.0",
+    "@salesforce/sfdx-agent-harness-openai": "0.49.0",
     "@types/node": "^22.20.1",
     "@vitest/coverage-istanbul": "^4.1.11",
     "@vitest/eslint-plugin": "^1.6.27",