feat: Define auth secrets and inject them into the environment.

Author: stainless-app[bot]

.stats.yml

@@ -1,4 +1,4 @@
 configured_endpoints: 14
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/warp-bnavetta%2Fwarp-api-d45cb71aa9505f79b4ad42f50c3528e028508a941068c137393cbf2f54a8dd20.yml
-openapi_spec_hash: 2816d2eedf7d73fdde8a3fbb7bc96336
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/warp-bnavetta%2Fwarp-api-d57dae004e23149ddae4bd26e3ba05c2378d2c1070df0f303b19e45111c780d5.yml
+openapi_spec_hash: 6a15b456e6520a79981fafed3b0c94b9
 config_hash: 40327fb76b7cce7b97f23de9b8d48efb

src/resources/agent/agent.ts

@@ -236,6 +236,14 @@ export namespace AmbientAgentConfig {
    * uses Warp's built-in harness.
    */
   export interface Harness {
+    /**
+     * Name of a managed secret to use as the authentication credential for the
+     * harness. The secret must exist within the caller's personal or team scope. The
+     * environment variable injected into the agent is determined by the secret type
+     * (e.g. ANTHROPIC_API_KEY for anthropic_api_key secrets).
+     */
+    auth_secret_name?: string;
+
     /**
      * The harness type identifier.
      *

tests/api-resources/agent/schedules.test.ts

@@ -32,7 +32,7 @@ describe('resource schedules', () => {
         base_prompt: 'base_prompt',
         computer_use_enabled: true,
         environment_id: 'environment_id',
-        harness: { type: 'oz' },
+        harness: { auth_secret_name: 'auth_secret_name', type: 'oz' },
         idle_timeout_minutes: 1,
         mcp_servers: {
           foo: {
@@ -93,7 +93,7 @@ describe('resource schedules', () => {
         base_prompt: 'base_prompt',
         computer_use_enabled: true,
         environment_id: 'environment_id',
-        harness: { type: 'oz' },
+        harness: { auth_secret_name: 'auth_secret_name', type: 'oz' },
         idle_timeout_minutes: 1,
         mcp_servers: {
           foo: {