Open Brain
VercelEngineering PostOfficial Source

The fx adapter now runs the harness on the host

The AI SDK's fx adapter moves the harness and model requests onto the host while keeping built-in shell and filesystem tools sandboxed, so model credentials stay off the sandbox.

Vercel · Oct 29, 2026
Open Source Open MarkdownOpen JSON
Source Summary

The AI SDK's fx adapter now runs the harness and model requests in the **host process**, while built-in filesystem and shell operations remain in the sandbox. It removes the need for an fx install in the sandbox, a bridge, or an exposed sandbox port; model credentials stay on the host.

Practical Implication

Builders using HarnessAgent can update `@ai-sdk/harness-fx` to gain tool filtering, mid-turn steering, schema-based structured output, image tool results, and sessions that can resume in a new host process.

Agent-Ready Context
The AI SDK's fx adapter now runs the harness and model requests in the **host process**, while built-in filesystem and shell operations remain in the sandbox. It removes the need for an fx install in the sandbox, a bridge, or an exposed sandbox port; model credentials stay on the host.

Builders using HarnessAgent can update `@ai-sdk/harness-fx` to gain tool filtering, mid-turn steering, schema-based structured output, image tool results, and sessions that can resume in a new host process.

The material does not specify a version number or discuss compatibility and operational tradeoffs of the new host/sandbox boundary.
Connected Context · Feed7 Judgment

This clarifies the fx adapter boundary: harness execution, model requests, and credentials stay on the host, while built-in filesystem and shell tools remain sandboxed. It removes the sandbox install and bridge requirements and adds resumable sessions and other HarnessAgent capabilities. The source leaves compatibility and operational tradeoffs unspecified.

Context Map
agentcodingsecurity#harness-engineering#sandboxing#agent-sdks
Uncertainty
The material does not specify a version number or discuss compatibility and operational tradeoffs of the new host/sandbox boundary.