openpond-sdk 0.6.7 → 0.7.0

package/dist/{chunk-YGCHXNPI.js.map → chunk-DT7FRNIZ.js.map}

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../src/taskset-authored-portable-release.ts", "../src/taskset-package-grader-projection.ts"],
-  "sourcesContent": ["import type { Taskset } from \"./taskset-authored-contracts.js\";\nimport type {\n  GraderSpec,\n  TaskDataRecord,\n} from \"./taskset-draft-core.js\";\nimport {\n  TaskRecordSchema,\n  GraderSpecSchema as PortableGraderSpecSchema,\n  TasksetReleaseContentSchema,\n  TasksetReleaseSchema,\n  bindTasksetExecutionReleases,\n  createEnvironmentRelease,\n  createVerifierSetRelease,\n  EnvironmentReleaseSchema,\n  VerifierSetReleaseSchema,\n  verifyEnvironmentRelease,\n  verifyVerifierSetRelease,\n  verifyPreferenceComparisonRelease,\n  type EnvironmentContract,\n  type GraderSpec as PortableGraderSpec,\n  type PreferenceComparisonRelease,\n  type TasksetRelease,\n} from \"@openpond/evals\";\nimport type {\n  ImmutableAssetRef,\n  ToolDeclaration,\n} from \"@openpond/harness\";\nimport {\n  CapabilityRequirementSchema,\n  ImmutableAssetRefSchema,\n  ToolDeclarationSchema,\n} from \"@openpond/harness\";\n\nimport { contentHash, sha256 } from \"@openpond/harness\";\nimport { TaskBatchPackageMetadataSchema } from \"@openpond/evals/learning\";\nimport { compileBoundGraders, RewardBindingSchema, RewardReleaseSchema, type RewardBinding, type RewardRelease } from \"@openpond/evals/rewards\";\nimport { portableDeterministicCheck } from \"@openpond/evals/graders\";\n\nexport type TasksetRewardExecution = { binding: RewardBinding; rewards: RewardRelease[] };\n\nexport function resolvePortableTasksetRewardExecution(taskset: Taskset, supplied?: TasksetRewardExecution): TasksetRewardExecution | null {\n  const learning = taskset.metadata.learning === undefined ? null : TaskBatchPackageMetadataSchema.parse(taskset.metadata.learning);\n  const embedded = taskset.metadata.rewardExecution as { binding?: unknown; rewards?: unknown } | undefined;\n  const execution = supplied ?? (embedded ? {\n    binding: RewardBindingSchema.parse(embedded.binding),\n    rewards: RewardReleaseSchema.array().parse(embedded.rewards),\n  } : learning);\n  if (taskset.metadata.rewardBinding !== undefined) {\n    const reference = taskset.metadata.rewardBinding as Partial<RewardBinding> | null;\n    if (!execution || !reference || reference.id !== execution.binding.id\n      || reference.revision !== execution.binding.revision || reference.contentHash !== execution.binding.contentHash) {\n      throw new Error(\"Portable Taskset requires its exact published Reward binding.\");\n    }\n  }\n  if (execution) compileBoundGraders(execution.binding, execution.rewards);\n  return execution ? { binding: execution.binding, rewards: execution.rewards } : null;\n}\n\nexport function materializePortableTasksetRelease(input: {\n  taskset: Taskset;\n  selectedTasks?: TaskDataRecord[];\n  adapterId: string;\n  admittedTasksetRelease?: TasksetRelease | null;\n  rewardExecution?: TasksetRewardExecution;\n}): {\n  environmentRelease: ReturnType<typeof createEnvironmentRelease>;\n  verifierSetRelease: ReturnType<typeof createVerifierSetRelease>;\n  tasksetRelease: TasksetRelease;\n} {\n  const environment = portableEnvironment(input.taskset);\n  const tools = portableTools(input.taskset);\n  const learning = input.taskset.metadata.learning === undefined ? null : TaskBatchPackageMetadataSchema.parse(input.taskset.metadata.learning);\n  const embedded = input.taskset.metadata.rewardExecution;\n  const rewardExecution = resolvePortableTasksetRewardExecution(input.taskset, input.rewardExecution);\n  const graders = rewardExecution ? compileBoundGraders(rewardExecution.binding, rewardExecution.rewards) : input.taskset.graders.map(portableGrader);\n  const tasks = input.selectedTasks?.length\n    ? input.selectedTasks\n    : input.taskset.tasks;\n  if (!tasks.length) throw new Error(\"A portable Taskset release requires at least one task.\");\n  const pinned = input.taskset.environment.metadata.portableExecutionResources as { environment?: unknown; verifierSet?: unknown } | undefined;\n  if (environment.entrypoint === \"openpond.javascript-environment.v1\" && !pinned) throw new Error(\"Tool Taskset publication requires its pinned execution resources.\");\n  const environmentRelease = pinned ? EnvironmentReleaseSchema.parse(pinned.environment) : createEnvironmentRelease({\n    schemaVersion: \"openpond.environmentRelease.v1\",\n    id: `environment-release-${input.taskset.id}-r${input.taskset.revision}`,\n    revision: input.taskset.revision,\n    contract: environment,\n    actionSchemaRef: null,\n    observationSchemaRef: null,\n    stateSchemaRef: null,\n    artifactCollection: {\n      maxArtifacts: 100_000,\n      maxTotalBytes: 250_000_000,\n    },\n    adapterConformanceHashes: {\n      [input.adapterId]: contentHash({ adapterId: input.adapterId, environment, tools }),\n    },\n    metadata: {\n      sourceTasksetId: input.taskset.id,\n      sourcePackageHash: input.taskset.metadata.sourcePackageHash ?? null,\n      resources: input.taskset.environment.resources ?? [],\n    },\n  });\n  const verifierSetRelease = pinned?.verifierSet !== undefined ? VerifierSetReleaseSchema.parse(pinned.verifierSet) : createVerifierSetRelease({\n    schemaVersion: \"openpond.verifierSetRelease.v1\",\n    id: `verifier-set-release-${input.taskset.id}-r${input.taskset.revision}`,\n    revision: input.taskset.revision,\n    graders,\n    isolation: {\n      processBoundary: \"isolated_process\",\n      networkPolicy: \"none\",\n      defaultTimeoutMs: Math.min(input.taskset.environment.defaultTimeoutMs, 300_000),\n    },\n    calibrationReceiptRefs: [],\n    metadata: { sourceTasksetId: input.taskset.id },\n  });\n  if (!verifyEnvironmentRelease(environmentRelease) || !verifyVerifierSetRelease(verifierSetRelease) ||\n      contentHash(environmentRelease.contract) !== contentHash(environment) || contentHash(verifierSetRelease.graders) !== contentHash(graders)) {\n    throw new Error(\"Taskset execution resources differ from its declared environment or graders.\");\n  }\n  const tasksetContent = TasksetReleaseContentSchema.parse({\n    schemaVersion: \"openpond.tasksetRelease.v2\",\n    id: input.taskset.metadata.derivedPortableMetadata === undefined ? `taskset-release-${input.taskset.id}-r${input.taskset.revision}` : input.taskset.id,\n    revision: input.taskset.revision,\n    policy: {\n      policyVisibleFields: input.taskset.policy.policyVisibleFields,\n      privilegedFields: input.taskset.policy.privilegedFields,\n      hiddenGraderRefs: input.taskset.policy.hiddenGraderRefs,\n      connectedAppScopes: input.taskset.policy.connectedAppScopes,\n    },\n    environment,\n    tools,\n    capabilities: portableCapabilities(input.taskset),\n    tasks: tasks.map(projectPortableTaskRecord),\n    graders,\n    ...(input.taskset.metrics ? { metrics: input.taskset.metrics } : {}),\n    metadata: input.taskset.metadata.derivedPortableMetadata ?? {\n      sourceTasksetId: input.taskset.id,\n      sourceTasksetHash: input.taskset.contentHash,\n      sourcePackageHash: input.taskset.metadata.sourcePackageHash ?? null,\n      environmentResources: input.taskset.environment.resources ?? [],\n      ordinaryAuthoring: {\n        instructions: input.taskset.objective,\n        graderFixtures: input.taskset.graderFixtures,\n        judgeCalibrationFixtures: Object.fromEntries(input.taskset.graders\n          .filter(grader => grader.kind === \"model_judge\")\n          .map(grader => [grader.id, grader.calibrationFixtureRefs])),\n      },\n      ...(learning ? { learning } : {}),\n      // A sealed batch already pins these resources in learning metadata.\n      // Resolving that same binding at admission must not change its release.\n      ...(rewardExecution && !learning && (input.rewardExecution || embedded) ? { rewardExecution: { binding: rewardExecution.binding, rewards: rewardExecution.rewards } } : {}),\n    },\n  });\n  const draft = input.admittedTasksetRelease\n    ? TasksetReleaseSchema.parse(input.admittedTasksetRelease)\n    : TasksetReleaseSchema.parse({\n      ...tasksetContent,\n      contentHash: contentHash(tasksetContent),\n    });\n  const tasksetRelease = draft.environmentRelease\n    ? assertReleaseBindings({ draft, environmentRelease, verifierSetRelease })\n    : bindTasksetExecutionReleases({\n      taskset: draft,\n      environment: environmentRelease,\n      verifierSet: verifierSetRelease,\n    });\n  return { environmentRelease, verifierSetRelease, tasksetRelease };\n}\n\n/**\n * Admits a published comparison policy against the exact portable Taskset\n * release it names. A comparison is deliberately not embedded in that release:\n * doing so would create a content-hash cycle between Taskset and comparison.\n */\nexport function projectPreferenceComparisonRelease(input: {\n  tasksetRelease: TasksetRelease;\n  preferenceComparison: PreferenceComparisonRelease;\n}): PreferenceComparisonRelease {\n  if (!verifyPreferenceComparisonRelease(input.preferenceComparison)) {\n    throw new Error(\"Preference comparison release failed immutable content verification.\");\n  }\n  const release = input.preferenceComparison;\n  if (\n    release.tasksetRelease.id !== input.tasksetRelease.id\n    || release.tasksetRelease.contentHash !== input.tasksetRelease.contentHash\n  ) {\n    throw new Error(\"Preference comparison release must reference the admitted portable Taskset release.\");\n  }\n  return release;\n}\n\nexport function portableTasksetEnvironment(taskset: Taskset): EnvironmentContract {\n  return portableEnvironment(taskset);\n}\n\nexport function portableTasksetTools(taskset: Taskset): ToolDeclaration[] {\n  return portableTools(taskset);\n}\n\n/** Preserve immutable file/schema references while overlaying current edits. */\nexport function projectPortableTaskRecord(task: TaskDataRecord) {\n  const admitted = task.metadata.portableTaskRecord;\n  if (admitted !== undefined) {\n    const original = TaskRecordSchema.parse(admitted);\n    const projected = TaskRecordSchema.parse({\n      ...original,\n      id: task.id,\n      clusterKey: task.clusterKey,\n      split: task.split,\n      input: task.input,\n      expectedOutput: portableExpectedOutput(task),\n      policyVisibleContext: task.policyVisibleContext,\n      privilegedContextRef: task.privilegedContextRef,\n      tags: task.tags,\n      artifactRefs: task.assets === undefined ? original.artifactRefs : task.assets.map((asset) => {\n        const previous = original.artifactRefs.find(item => item.id === asset.id);\n        return {\n          id: asset.id,\n          path: previous?.path ?? `tasks/${segment(task.id)}/${segment(asset.fileName)}`,\n          contentHash: hash(asset.sha256),\n          sizeBytes: asset.sizeBytes,\n          mediaType: asset.mediaType,\n          visibility: previous?.visibility ?? \"policy\",\n        };\n      }),\n      requiredOutputs: task.requiredOutputs === undefined ? original.requiredOutputs : task.requiredOutputs.map((output) => {\n        const previous = original.requiredOutputs?.find(item => item.path === output.path);\n        return {\n          path: output.path,\n          mediaType: output.mediaType,\n          schemaRef: previous?.schemaRef && previous.schemaRef.id === output.schemaRef ? previous.schemaRef : null,\n          maxBytes: output.maxBytes ?? null,\n          metadata: {\n            ...output.metadata,\n            ...(output.schemaRef && previous?.schemaRef?.id !== output.schemaRef\n              ? { legacySchemaRef: output.schemaRef }\n              : {}),\n          },\n        };\n      }),\n    });\n    if (projected.requiredOutputs === undefined) delete projected.requiredOutputs;\n    return projected;\n  }\n  return {\n    id: task.id,\n    clusterKey: task.clusterKey,\n    split: task.split,\n    input: task.input,\n    expectedOutput: portableExpectedOutput(task),\n    policyVisibleContext: task.policyVisibleContext,\n    privilegedContextRef: task.privilegedContextRef,\n    artifactRefs: (task.assets ?? []).map((item) => ({\n      id: item.id,\n      path: `tasks/${segment(task.id)}/${segment(item.fileName)}`,\n      contentHash: hash(item.sha256),\n      sizeBytes: item.sizeBytes,\n      mediaType: item.mediaType,\n      visibility: \"policy\" as const,\n    })),\n    requiredOutputs: (task.requiredOutputs ?? []).map((output) => ({\n      path: output.path,\n      mediaType: output.mediaType,\n      schemaRef: null,\n      maxBytes: output.maxBytes ?? null,\n      metadata: {\n        ...output.metadata,\n        legacySchemaRef: output.schemaRef ?? null,\n      },\n    })),\n    tags: task.tags,\n  };\n}\n\nfunction portableExpectedOutput(\n  task: TaskDataRecord,\n): Record<string, unknown> | null {\n  if (!task.expectedOutput) return null;\n  if (\"artifactRenderer\" in task.expectedOutput) {\n    throw new Error(\n      `Task ${task.id} embeds an artifact renderer. Put shared renderer configuration in Environment resources and reference it from the Scenario.`,\n    );\n  }\n  return task.expectedOutput;\n}\n\nfunction portableEnvironment(taskset: Taskset): EnvironmentContract {\n  const kind: EnvironmentContract[\"kind\"] = taskset.environment.kind === \"chat\"\n    ? \"text\"\n    : taskset.environment.kind === \"work\" ? \"work\"\n      : taskset.environment.kind === \"program\" ? \"custom_program\" : \"agent\";\n  return {\n    protocolVersion: \"openpond.environment.v1\",\n    kind,\n    entrypoint: taskset.environment.entrypoint,\n    stateful: taskset.environment.stateful,\n    deterministicSeeds: taskset.environment.deterministicSeeds,\n    lifecycle: [\"create\", \"reset\", \"step\", \"collect\", \"destroy\"],\n    networkPolicy: taskset.environment.networkPolicy,\n    defaultTimeoutMs: taskset.environment.defaultTimeoutMs,\n  };\n}\n\nfunction portableTools(taskset: Taskset): ToolDeclaration[] {\n  const admitted = taskset.environment.metadata.portableTools;\n  if (admitted !== undefined) {\n    return ToolDeclarationSchema.array().max(200).parse(admitted);\n  }\n  const bindings = taskset.environment.actionBindings ?? [];\n  if (bindings.length) return bindings.map((binding) => ({\n    name: binding.modelToolName,\n    description: binding.description,\n    inputSchema: binding.inputSchema,\n    inputSchemaHash: hash(binding.actionSchemaHash),\n    sideEffect: binding.sideEffect,\n    timeoutMs: binding.timeoutMs,\n  }));\n  return taskset.environment.toolNames.map((name) => ({\n    name,\n    description: `Host-provided ${name} tool.`,\n    inputSchema: {},\n    inputSchemaHash: contentHash({}),\n    sideEffect: \"write\" as const,\n    timeoutMs: taskset.environment.defaultTimeoutMs,\n  }));\n}\n\nfunction portableGrader(grader: GraderSpec): PortableGraderSpec {\n  const base = {\n    id: grader.id,\n    version: grader.version,\n    weight: grader.weight,\n    hardGate: grader.hardGate,\n    rewardEligible: grader.rewardEligible,\n    privileged: grader.privileged,\n  };\n  if (grader.kind === \"model_judge\") return {\n    ...base,\n    kind: \"model_judge\",\n    rubricRef: rubricAsset(grader),\n    model: modelJudgeRef(grader),\n    temperature: grader.temperature,\n    calibrationStatus: grader.calibrationStatus,\n  };\n  if (grader.kind === \"custom_verifier\") {\n    if (grader.metadata.portableVerifierRef === undefined) {\n      throw new Error(`Custom verifier ${grader.id} requires its immutable executable asset before publication.`);\n    }\n    const imported = PortableGraderSpecSchema.safeParse(grader.metadata.portableGrader);\n    // An omitted portable export means \"verify\". Preserve that encoding on an\n    // unchanged import so executing it does not silently replace its release.\n    const preserveDefault = imported.success && imported.data.kind === \"custom_verifier\"\n      && imported.data.exportName === undefined && grader.exportName === \"verify\";\n    return {\n      ...base,\n      kind: \"custom_verifier\",\n      ...(grader.runtime === undefined ? {} : { runtime: grader.runtime }),\n      verifierRef: ImmutableAssetRefSchema.parse(grader.metadata.portableVerifierRef),\n      timeoutMs: grader.timeoutMs,\n      ...(preserveDefault ? {} : { exportName: grader.exportName }),\n      networkPolicy: \"none\",\n    };\n  }\n  if (grader.kind === \"human\") return {\n    ...base,\n    kind: \"human\",\n    rubricRef: rubricAsset(grader),\n    reviewerRole: grader.reviewerRole,\n  };\n  return {\n    ...base,\n    ...portableDeterministicCheck(grader),\n  };\n}\n\nfunction portableCapabilities(taskset: Taskset) {\n  const admitted = taskset.metadata.portableCapabilities;\n  if (admitted !== undefined) {\n    return CapabilityRequirementSchema.array().max(200).parse(admitted);\n  }\n  return [\n    ...(taskset.capabilities.requiresTools\n      ? [{ id: \"tools\", required: true, scopes: taskset.environment.toolNames }]\n      : []),\n    ...(taskset.capabilities.requiresState\n      ? [{ id: \"local-state\", required: true, scopes: [] }]\n      : []),\n    ...(taskset.capabilities.requiresPrivilegedGrading\n      ? [{ id: \"private-verifier\", required: true, scopes: taskset.policy.hiddenGraderRefs }]\n      : []),\n    ...taskset.policy.connectedAppScopes.map((scope) => ({\n      id: `connected-app-${segment(scope)}`,\n      required: true,\n      scopes: [scope],\n    })),\n  ].map((requirement) => ({\n    ...requirement,\n    portability: requirement.id === \"local-state\" ? \"host_adapter\" as const : \"portable\" as const,\n  }));\n}\n\nfunction assertReleaseBindings(input: {\n  draft: TasksetRelease;\n  environmentRelease: ReturnType<typeof createEnvironmentRelease>;\n  verifierSetRelease: ReturnType<typeof createVerifierSetRelease>;\n}): TasksetRelease {\n  if (\n    input.draft.environmentRelease?.id !== input.environmentRelease.id\n    || input.draft.environmentRelease.contentHash !== input.environmentRelease.contentHash\n  ) {\n    throw new Error(\"Admitted Taskset Release binds a different Environment Release.\");\n  }\n  if (\n    input.draft.verifierSetRelease?.id !== input.verifierSetRelease.id\n    || input.draft.verifierSetRelease.contentHash !== input.verifierSetRelease.contentHash\n  ) {\n    throw new Error(\"Admitted Taskset Release binds a different Verifier Set Release.\");\n  }\n  if (contentHash(input.draft.environment) !== contentHash(input.environmentRelease.contract)) {\n    throw new Error(\"Admitted Taskset Environment differs from its bound Environment Release.\");\n  }\n  if (contentHash(input.draft.graders) !== contentHash(input.verifierSetRelease.graders)) {\n    throw new Error(\"Admitted Taskset graders differ from its bound Verifier Set Release.\");\n  }\n  return input.draft;\n}\n\nfunction modelJudgeRef(grader: Extract<GraderSpec, { kind: \"model_judge\" }>) {\n  const previous = grader.metadata.portableGrader === undefined ? null : PortableGraderSpecSchema.parse(grader.metadata.portableGrader);\n  const revision = previous?.kind === \"model_judge\" && previous.model?.providerId === grader.judge.providerId && previous.model.modelId === grader.judge.modelId ? previous.model.revision : null;\n  return { ...grader.judge, revision };\n}\n\nfunction rubricAsset(grader: Extract<GraderSpec, { kind: \"human\" | \"model_judge\" }>): ImmutableAssetRef {\n  const contentHash = sha256(grader.rubric);\n  const sizeBytes = new TextEncoder().encode(grader.rubric).byteLength;\n  const reference = grader.metadata.portableRubricRef;\n  if (reference !== undefined) {\n    const asset = ImmutableAssetRefSchema.parse(reference);\n    if (asset.contentHash !== contentHash || asset.sizeBytes !== sizeBytes || asset.visibility === \"policy\") throw new Error(\"Taskset rubric differs from its published private source.\");\n    return asset;\n  }\n  return { id: `rubric-${grader.id}`, path: `graders/${segment(grader.id)}/rubric.md`, contentHash, sizeBytes, mediaType: \"text/markdown\", visibility: \"verifier\" };\n}\n\nfunction hash(value: string): string {\n  return /^[a-f0-9]{64}$/.test(value) ? value : contentHash(value);\n}\n\nfunction segment(value: string): string {\n  const normalized = value.trim().replace(/[^a-zA-Z0-9._-]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  return normalized || \"asset\";\n}\n", "import { compileBoundGraders, resolveBoundRewards, type RewardBinding, type RewardRelease } from \"@openpond/evals/rewards\";\nimport { learningRef, verifyLearningTextAsset, RewardFixtureAuthoringFieldsSchema, type LearningTextAsset } from \"@openpond/evals/learning\";\nimport type { GraderSpec } from \"./taskset-draft-core.js\";\nimport { GraderSpecSchema } from \"./taskset-draft-core.js\";\nimport { decodeTasksetPackageFile, type TasksetPackage } from \"./taskset-package-contracts.js\";\nimport { z } from \"zod\";\n\n/** Project an ordinary portable package without inventing a Reward binding. */\nexport function importedPackageGraders(value: TasksetPackage) {\n  const authoring = value.taskset.metadata.ordinaryAuthoring as { judgeCalibrationFixtures?: unknown } | undefined;\n  const calibrationFixtures = z.record(z.string(), z.array(z.string().min(1)).max(100_000)).parse(authoring?.judgeCalibrationFixtures ?? {});\n  return value.taskset.graders.map(grader => {\n    const base = { ...grader, label: grader.id, metadata: { portableGrader: grader } };\n    if (grader.kind === \"custom_verifier\") return GraderSpecSchema.parse({ ...base,\n      module: learningVerifierModule(grader.verifierRef.contentHash), exportName: grader.exportName ?? \"verify\",\n      metadata: { ...base.metadata, portableVerifierRef: grader.verifierRef } });\n    if (grader.kind === \"human\" || grader.kind === \"model_judge\") {\n      const file = value.files.find(file => file.asset.id === grader.rubricRef.id);\n      if (!file) throw new Error(`Imported rubric is missing: ${grader.id}.`);\n      const rubric = new TextDecoder(\"utf-8\", { fatal: true }).decode(decodeTasksetPackageFile(file));\n      const metadata = { ...base.metadata, portableRubricRef: grader.rubricRef };\n      if (grader.kind === \"human\") return GraderSpecSchema.parse({ ...base, rubric, metadata });\n      if (!grader.model) throw new Error(`Imported judge ${grader.id} requires its declared model before local preparation.`);\n      return GraderSpecSchema.parse({ ...base, rubric, metadata, judge: grader.model, temperature: grader.temperature ?? 0,\n        calibrationStatus: \"pending\", calibrationFixtureRefs: calibrationFixtures[grader.id] ?? [] });\n    }\n    return GraderSpecSchema.parse({ ...base, kind: grader.kind === \"artifact\" ? \"file\" : grader.kind,\n      config: grader.kind === \"artifact\" ? { ...grader.config, ...(grader.config.refIncludes === undefined ? {} : { pathIncludes: grader.config.refIncludes }) } : grader.config });\n  });\n}\n\nexport function projectLearningBatchGraders(binding: RewardBinding, rewards: RewardRelease[], assets: LearningTextAsset[] = []): GraderSpec[] {\n  const resolved = resolveBoundRewards(binding, rewards);\n  return compileBoundGraders(binding, rewards).map((grader) => {\n    const reward = resolved.find(({ source }) => source.graderId === grader.id)!.reward;\n    const base = { ...grader, label: reward.name, metadata: { rewardBinding: learningRef(binding) } };\n    if (grader.kind === \"model_judge\") {\n      if (!grader.model || grader.calibrationStatus !== \"passed\" || !reward.calibrationCheckRef || !reward.fixtureSetRef) throw new Error(`Reward ${grader.id} needs a retained passing calibration check before preparation.`);\n      const rubric = assets.find(asset => asset.id === grader.rubricRef.id);\n      const fixtures = assets.find(asset => asset.id === reward.fixtureSetRef!.id);\n      if (!rubric || !fixtures) throw new Error(`Reward ${grader.id} is missing its immutable rubric or calibration fixtures.`);\n      const fields = RewardFixtureAuthoringFieldsSchema.array().min(1).max(50).parse(JSON.parse(verifyLearningTextAsset(fixtures, reward.fixtureSetRef)));\n      return GraderSpecSchema.parse({ ...base, rubric: verifyLearningTextAsset(rubric, grader.rubricRef), judge: grader.model,\n        temperature: grader.temperature ?? 0, calibrationFixtureRefs: fields.map(fixture => fixture.id),\n        metadata: { ...base.metadata, portableRubricRef: grader.rubricRef,\n          calibrationEvidenceHash: reward.calibrationCheckRef.contentHash, calibrationCheckRef: reward.calibrationCheckRef },\n      });\n    }\n    if (grader.kind === \"custom_verifier\") return GraderSpecSchema.parse({ ...base,\n      module: learningVerifierModule(grader.verifierRef.contentHash), exportName: grader.exportName ?? \"verify\",\n      metadata: { ...base.metadata, portableVerifierRef: grader.verifierRef },\n    });\n    if (grader.kind === \"human\") {\n      const asset = assets.find((asset) => asset.id === grader.rubricRef.id);\n      if (!asset) throw new Error(`Reward ${grader.id} is missing its immutable rubric.`);\n      return GraderSpecSchema.parse({ ...base, rubric: verifyLearningTextAsset(asset, grader.rubricRef) });\n    }\n    return GraderSpecSchema.parse({ ...base, kind: grader.kind === \"artifact\" ? \"file\" : grader.kind });\n  });\n}\n\nexport function learningVerifierModule(hash: string) { return `graders/reward-${hash}.js`; }\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;AAKA;AAAA,EACE;AAAA,EACA,oBAAoB;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AAYP,SAAS,sCAAsC;AAC/C,SAAS,qBAAqB,qBAAqB,2BAAmE;AACtH,SAAS,kCAAkC;AAIpC,SAAS,sCAAsC,SAAkB,UAAkE;AACxI,QAAM,WAAW,QAAQ,SAAS,aAAa,SAAY,OAAO,+BAA+B,MAAM,QAAQ,SAAS,QAAQ;AAChI,QAAM,WAAW,QAAQ,SAAS;AAClC,QAAM,YAAY,aAAa,WAAW;AAAA,IACxC,SAAS,oBAAoB,MAAM,SAAS,OAAO;AAAA,IACnD,SAAS,oBAAoB,MAAM,EAAE,MAAM,SAAS,OAAO;AAAA,EAC7D,IAAI;AACJ,MAAI,QAAQ,SAAS,kBAAkB,QAAW;AAChD,UAAM,YAAY,QAAQ,SAAS;AACnC,QAAI,CAAC,aAAa,CAAC,aAAa,UAAU,OAAO,UAAU,QAAQ,MAC9D,UAAU,aAAa,UAAU,QAAQ,YAAY,UAAU,gBAAgB,UAAU,QAAQ,aAAa;AACjH,YAAM,IAAI,MAAM,+DAA+D;AAAA,IACjF;AAAA,EACF;AACA,MAAI,UAAW,qBAAoB,UAAU,SAAS,UAAU,OAAO;AACvE,SAAO,YAAY,EAAE,SAAS,UAAU,SAAS,SAAS,UAAU,QAAQ,IAAI;AAClF;AAEO,SAAS,kCAAkC,OAUhD;AACA,QAAM,cAAc,oBAAoB,MAAM,OAAO;AACrD,QAAM,QAAQ,cAAc,MAAM,OAAO;AACzC,QAAM,WAAW,MAAM,QAAQ,SAAS,aAAa,SAAY,OAAO,+BAA+B,MAAM,MAAM,QAAQ,SAAS,QAAQ;AAC5I,QAAM,WAAW,MAAM,QAAQ,SAAS;AACxC,QAAM,kBAAkB,sCAAsC,MAAM,SAAS,MAAM,eAAe;AAClG,QAAM,UAAU,kBAAkB,oBAAoB,gBAAgB,SAAS,gBAAgB,OAAO,IAAI,MAAM,QAAQ,QAAQ,IAAI,cAAc;AAClJ,QAAM,QAAQ,MAAM,eAAe,SAC/B,MAAM,gBACN,MAAM,QAAQ;AAClB,MAAI,CAAC,MAAM,OAAQ,OAAM,IAAI,MAAM,wDAAwD;AAC3F,QAAM,SAAS,MAAM,QAAQ,YAAY,SAAS;AAClD,MAAI,YAAY,eAAe,wCAAwC,CAAC,OAAQ,OAAM,IAAI,MAAM,mEAAmE;AACnK,QAAM,qBAAqB,SAAS,yBAAyB,MAAM,OAAO,WAAW,IAAI,yBAAyB;AAAA,IAChH,eAAe;AAAA,IACf,IAAI,uBAAuB,MAAM,QAAQ,EAAE,KAAK,MAAM,QAAQ,QAAQ;AAAA,IACtE,UAAU,MAAM,QAAQ;AAAA,IACxB,UAAU;AAAA,IACV,iBAAiB;AAAA,IACjB,sBAAsB;AAAA,IACtB,gBAAgB;AAAA,IAChB,oBAAoB;AAAA,MAClB,cAAc;AAAA,MACd,eAAe;AAAA,IACjB;AAAA,IACA,0BAA0B;AAAA,MACxB,CAAC,MAAM,SAAS,GAAG,YAAY,EAAE,WAAW,MAAM,WAAW,aAAa,MAAM,CAAC;AAAA,IACnF;AAAA,IACA,UAAU;AAAA,MACR,iBAAiB,MAAM,QAAQ;AAAA,MAC/B,mBAAmB,MAAM,QAAQ,SAAS,qBAAqB;AAAA,MAC/D,WAAW,MAAM,QAAQ,YAAY,aAAa,CAAC;AAAA,IACrD;AAAA,EACF,CAAC;AACD,QAAM,qBAAqB,QAAQ,gBAAgB,SAAY,yBAAyB,MAAM,OAAO,WAAW,IAAI,yBAAyB;AAAA,IAC3I,eAAe;AAAA,IACf,IAAI,wBAAwB,MAAM,QAAQ,EAAE,KAAK,MAAM,QAAQ,QAAQ;AAAA,IACvE,UAAU,MAAM,QAAQ;AAAA,IACxB;AAAA,IACA,WAAW;AAAA,MACT,iBAAiB;AAAA,MACjB,eAAe;AAAA,MACf,kBAAkB,KAAK,IAAI,MAAM,QAAQ,YAAY,kBAAkB,GAAO;AAAA,IAChF;AAAA,IACA,wBAAwB,CAAC;AAAA,IACzB,UAAU,EAAE,iBAAiB,MAAM,QAAQ,GAAG;AAAA,EAChD,CAAC;AACD,MAAI,CAAC,yBAAyB,kBAAkB,KAAK,CAAC,yBAAyB,kBAAkB,KAC7F,YAAY,mBAAmB,QAAQ,MAAM,YAAY,WAAW,KAAK,YAAY,mBAAmB,OAAO,MAAM,YAAY,OAAO,GAAG;AAC7I,UAAM,IAAI,MAAM,8EAA8E;AAAA,EAChG;AACA,QAAM,iBAAiB,4BAA4B,MAAM;AAAA,IACvD,eAAe;AAAA,IACf,IAAI,MAAM,QAAQ,SAAS,4BAA4B,SAAY,mBAAmB,MAAM,QAAQ,EAAE,KAAK,MAAM,QAAQ,QAAQ,KAAK,MAAM,QAAQ;AAAA,IACpJ,UAAU,MAAM,QAAQ;AAAA,IACxB,QAAQ;AAAA,MACN,qBAAqB,MAAM,QAAQ,OAAO;AAAA,MAC1C,kBAAkB,MAAM,QAAQ,OAAO;AAAA,MACvC,kBAAkB,MAAM,QAAQ,OAAO;AAAA,MACvC,oBAAoB,MAAM,QAAQ,OAAO;AAAA,IAC3C;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc,qBAAqB,MAAM,OAAO;AAAA,IAChD,OAAO,MAAM,IAAI,yBAAyB;AAAA,IAC1C;AAAA,IACA,GAAI,MAAM,QAAQ,UAAU,EAAE,SAAS,MAAM,QAAQ,QAAQ,IAAI,CAAC;AAAA,IAClE,UAAU,MAAM,QAAQ,SAAS,2BAA2B;AAAA,MAC1D,iBAAiB,MAAM,QAAQ;AAAA,MAC/B,mBAAmB,MAAM,QAAQ;AAAA,MACjC,mBAAmB,MAAM,QAAQ,SAAS,qBAAqB;AAAA,MAC/D,sBAAsB,MAAM,QAAQ,YAAY,aAAa,CAAC;AAAA,MAC9D,mBAAmB;AAAA,QACjB,cAAc,MAAM,QAAQ;AAAA,QAC5B,gBAAgB,MAAM,QAAQ;AAAA,QAC9B,0BAA0B,OAAO,YAAY,MAAM,QAAQ,QACxD,OAAO,YAAU,OAAO,SAAS,aAAa,EAC9C,IAAI,YAAU,CAAC,OAAO,IAAI,OAAO,sBAAsB,CAAC,CAAC;AAAA,MAC9D;AAAA,MACA,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA;AAAA;AAAA,MAG/B,GAAI,mBAAmB,CAAC,aAAa,MAAM,mBAAmB,YAAY,EAAE,iBAAiB,EAAE,SAAS,gBAAgB,SAAS,SAAS,gBAAgB,QAAQ,EAAE,IAAI,CAAC;AAAA,IAC3K;AAAA,EACF,CAAC;AACD,QAAM,QAAQ,MAAM,yBAChB,qBAAqB,MAAM,MAAM,sBAAsB,IACvD,qBAAqB,MAAM;AAAA,IAC3B,GAAG;AAAA,IACH,aAAa,YAAY,cAAc;AAAA,EACzC,CAAC;AACH,QAAM,iBAAiB,MAAM,qBACzB,sBAAsB,EAAE,OAAO,oBAAoB,mBAAmB,CAAC,IACvE,6BAA6B;AAAA,IAC7B,SAAS;AAAA,IACT,aAAa;AAAA,IACb,aAAa;AAAA,EACf,CAAC;AACH,SAAO,EAAE,oBAAoB,oBAAoB,eAAe;AAClE;AAOO,SAAS,mCAAmC,OAGnB;AAC9B,MAAI,CAAC,kCAAkC,MAAM,oBAAoB,GAAG;AAClE,UAAM,IAAI,MAAM,sEAAsE;AAAA,EACxF;AACA,QAAM,UAAU,MAAM;AACtB,MACE,QAAQ,eAAe,OAAO,MAAM,eAAe,MAChD,QAAQ,eAAe,gBAAgB,MAAM,eAAe,aAC/D;AACA,UAAM,IAAI,MAAM,qFAAqF;AAAA,EACvG;AACA,SAAO;AACT;AAEO,SAAS,2BAA2B,SAAuC;AAChF,SAAO,oBAAoB,OAAO;AACpC;AAEO,SAAS,qBAAqB,SAAqC;AACxE,SAAO,cAAc,OAAO;AAC9B;AAGO,SAAS,0BAA0B,MAAsB;AAC9D,QAAM,WAAW,KAAK,SAAS;AAC/B,MAAI,aAAa,QAAW;AAC1B,UAAM,WAAW,iBAAiB,MAAM,QAAQ;AAChD,UAAM,YAAY,iBAAiB,MAAM;AAAA,MACvC,GAAG;AAAA,MACH,IAAI,KAAK;AAAA,MACT,YAAY,KAAK;AAAA,MACjB,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ,gBAAgB,uBAAuB,IAAI;AAAA,MAC3C,sBAAsB,KAAK;AAAA,MAC3B,sBAAsB,KAAK;AAAA,MAC3B,MAAM,KAAK;AAAA,MACX,cAAc,KAAK,WAAW,SAAY,SAAS,eAAe,KAAK,OAAO,IAAI,CAAC,UAAU;AAC3F,cAAM,WAAW,SAAS,aAAa,KAAK,UAAQ,KAAK,OAAO,MAAM,EAAE;AACxE,eAAO;AAAA,UACL,IAAI,MAAM;AAAA,UACV,MAAM,UAAU,QAAQ,SAAS,QAAQ,KAAK,EAAE,CAAC,IAAI,QAAQ,MAAM,QAAQ,CAAC;AAAA,UAC5E,aAAa,KAAK,MAAM,MAAM;AAAA,UAC9B,WAAW,MAAM;AAAA,UACjB,WAAW,MAAM;AAAA,UACjB,YAAY,UAAU,cAAc;AAAA,QACtC;AAAA,MACF,CAAC;AAAA,MACD,iBAAiB,KAAK,oBAAoB,SAAY,SAAS,kBAAkB,KAAK,gBAAgB,IAAI,CAAC,WAAW;AACpH,cAAM,WAAW,SAAS,iBAAiB,KAAK,UAAQ,KAAK,SAAS,OAAO,IAAI;AACjF,eAAO;AAAA,UACL,MAAM,OAAO;AAAA,UACb,WAAW,OAAO;AAAA,UAClB,WAAW,UAAU,aAAa,SAAS,UAAU,OAAO,OAAO,YAAY,SAAS,YAAY;AAAA,UACpG,UAAU,OAAO,YAAY;AAAA,UAC7B,UAAU;AAAA,YACR,GAAG,OAAO;AAAA,YACV,GAAI,OAAO,aAAa,UAAU,WAAW,OAAO,OAAO,YACvD,EAAE,iBAAiB,OAAO,UAAU,IACpC,CAAC;AAAA,UACP;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AACD,QAAI,UAAU,oBAAoB,OAAW,QAAO,UAAU;AAC9D,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,YAAY,KAAK;AAAA,IACjB,OAAO,KAAK;AAAA,IACZ,OAAO,KAAK;AAAA,IACZ,gBAAgB,uBAAuB,IAAI;AAAA,IAC3C,sBAAsB,KAAK;AAAA,IAC3B,sBAAsB,KAAK;AAAA,IAC3B,eAAe,KAAK,UAAU,CAAC,GAAG,IAAI,CAAC,UAAU;AAAA,MAC/C,IAAI,KAAK;AAAA,MACT,MAAM,SAAS,QAAQ,KAAK,EAAE,CAAC,IAAI,QAAQ,KAAK,QAAQ,CAAC;AAAA,MACzD,aAAa,KAAK,KAAK,MAAM;AAAA,MAC7B,WAAW,KAAK;AAAA,MAChB,WAAW,KAAK;AAAA,MAChB,YAAY;AAAA,IACd,EAAE;AAAA,IACF,kBAAkB,KAAK,mBAAmB,CAAC,GAAG,IAAI,CAAC,YAAY;AAAA,MAC7D,MAAM,OAAO;AAAA,MACb,WAAW,OAAO;AAAA,MAClB,WAAW;AAAA,MACX,UAAU,OAAO,YAAY;AAAA,MAC7B,UAAU;AAAA,QACR,GAAG,OAAO;AAAA,QACV,iBAAiB,OAAO,aAAa;AAAA,MACvC;AAAA,IACF,EAAE;AAAA,IACF,MAAM,KAAK;AAAA,EACb;AACF;AAEA,SAAS,uBACP,MACgC;AAChC,MAAI,CAAC,KAAK,eAAgB,QAAO;AACjC,MAAI,sBAAsB,KAAK,gBAAgB;AAC7C,UAAM,IAAI;AAAA,MACR,QAAQ,KAAK,EAAE;AAAA,IACjB;AAAA,EACF;AACA,SAAO,KAAK;AACd;AAEA,SAAS,oBAAoB,SAAuC;AAClE,QAAM,OAAoC,QAAQ,YAAY,SAAS,SACnE,SACA,QAAQ,YAAY,SAAS,SAAS,SACpC,QAAQ,YAAY,SAAS,YAAY,mBAAmB;AAClE,SAAO;AAAA,IACL,iBAAiB;AAAA,IACjB;AAAA,IACA,YAAY,QAAQ,YAAY;AAAA,IAChC,UAAU,QAAQ,YAAY;AAAA,IAC9B,oBAAoB,QAAQ,YAAY;AAAA,IACxC,WAAW,CAAC,UAAU,SAAS,QAAQ,WAAW,SAAS;AAAA,IAC3D,eAAe,QAAQ,YAAY;AAAA,IACnC,kBAAkB,QAAQ,YAAY;AAAA,EACxC;AACF;AAEA,SAAS,cAAc,SAAqC;AAC1D,QAAM,WAAW,QAAQ,YAAY,SAAS;AAC9C,MAAI,aAAa,QAAW;AAC1B,WAAO,sBAAsB,MAAM,EAAE,IAAI,GAAG,EAAE,MAAM,QAAQ;AAAA,EAC9D;AACA,QAAM,WAAW,QAAQ,YAAY,kBAAkB,CAAC;AACxD,MAAI,SAAS,OAAQ,QAAO,SAAS,IAAI,CAAC,aAAa;AAAA,IACrD,MAAM,QAAQ;AAAA,IACd,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,iBAAiB,KAAK,QAAQ,gBAAgB;AAAA,IAC9C,YAAY,QAAQ;AAAA,IACpB,WAAW,QAAQ;AAAA,EACrB,EAAE;AACF,SAAO,QAAQ,YAAY,UAAU,IAAI,CAAC,UAAU;AAAA,IAClD;AAAA,IACA,aAAa,iBAAiB,IAAI;AAAA,IAClC,aAAa,CAAC;AAAA,IACd,iBAAiB,YAAY,CAAC,CAAC;AAAA,IAC/B,YAAY;AAAA,IACZ,WAAW,QAAQ,YAAY;AAAA,EACjC,EAAE;AACJ;AAEA,SAAS,eAAe,QAAwC;AAC9D,QAAM,OAAO;AAAA,IACX,IAAI,OAAO;AAAA,IACX,SAAS,OAAO;AAAA,IAChB,QAAQ,OAAO;AAAA,IACf,UAAU,OAAO;AAAA,IACjB,gBAAgB,OAAO;AAAA,IACvB,YAAY,OAAO;AAAA,EACrB;AACA,MAAI,OAAO,SAAS,cAAe,QAAO;AAAA,IACxC,GAAG;AAAA,IACH,MAAM;AAAA,IACN,WAAW,YAAY,MAAM;AAAA,IAC7B,OAAO,cAAc,MAAM;AAAA,IAC3B,aAAa,OAAO;AAAA,IACpB,mBAAmB,OAAO;AAAA,EAC5B;AACA,MAAI,OAAO,SAAS,mBAAmB;AACrC,QAAI,OAAO,SAAS,wBAAwB,QAAW;AACrD,YAAM,IAAI,MAAM,mBAAmB,OAAO,EAAE,8DAA8D;AAAA,IAC5G;AACA,UAAM,WAAW,yBAAyB,UAAU,OAAO,SAAS,cAAc;AAGlF,UAAM,kBAAkB,SAAS,WAAW,SAAS,KAAK,SAAS,qBAC9D,SAAS,KAAK,eAAe,UAAa,OAAO,eAAe;AACrE,WAAO;AAAA,MACL,GAAG;AAAA,MACH,MAAM;AAAA,MACN,GAAI,OAAO,YAAY,SAAY,CAAC,IAAI,EAAE,SAAS,OAAO,QAAQ;AAAA,MAClE,aAAa,wBAAwB,MAAM,OAAO,SAAS,mBAAmB;AAAA,MAC9E,WAAW,OAAO;AAAA,MAClB,GAAI,kBAAkB,CAAC,IAAI,EAAE,YAAY,OAAO,WAAW;AAAA,MAC3D,eAAe;AAAA,IACjB;AAAA,EACF;AACA,MAAI,OAAO,SAAS,QAAS,QAAO;AAAA,IAClC,GAAG;AAAA,IACH,MAAM;AAAA,IACN,WAAW,YAAY,MAAM;AAAA,IAC7B,cAAc,OAAO;AAAA,EACvB;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAG,2BAA2B,MAAM;AAAA,EACtC;AACF;AAEA,SAAS,qBAAqB,SAAkB;AAC9C,QAAM,WAAW,QAAQ,SAAS;AAClC,MAAI,aAAa,QAAW;AAC1B,WAAO,4BAA4B,MAAM,EAAE,IAAI,GAAG,EAAE,MAAM,QAAQ;AAAA,EACpE;AACA,SAAO;AAAA,IACL,GAAI,QAAQ,aAAa,gBACrB,CAAC,EAAE,IAAI,SAAS,UAAU,MAAM,QAAQ,QAAQ,YAAY,UAAU,CAAC,IACvE,CAAC;AAAA,IACL,GAAI,QAAQ,aAAa,gBACrB,CAAC,EAAE,IAAI,eAAe,UAAU,MAAM,QAAQ,CAAC,EAAE,CAAC,IAClD,CAAC;AAAA,IACL,GAAI,QAAQ,aAAa,4BACrB,CAAC,EAAE,IAAI,oBAAoB,UAAU,MAAM,QAAQ,QAAQ,OAAO,iBAAiB,CAAC,IACpF,CAAC;AAAA,IACL,GAAG,QAAQ,OAAO,mBAAmB,IAAI,CAAC,WAAW;AAAA,MACnD,IAAI,iBAAiB,QAAQ,KAAK,CAAC;AAAA,MACnC,UAAU;AAAA,MACV,QAAQ,CAAC,KAAK;AAAA,IAChB,EAAE;AAAA,EACJ,EAAE,IAAI,CAAC,iBAAiB;AAAA,IACtB,GAAG;AAAA,IACH,aAAa,YAAY,OAAO,gBAAgB,iBAA0B;AAAA,EAC5E,EAAE;AACJ;AAEA,SAAS,sBAAsB,OAIZ;AACjB,MACE,MAAM,MAAM,oBAAoB,OAAO,MAAM,mBAAmB,MAC7D,MAAM,MAAM,mBAAmB,gBAAgB,MAAM,mBAAmB,aAC3E;AACA,UAAM,IAAI,MAAM,iEAAiE;AAAA,EACnF;AACA,MACE,MAAM,MAAM,oBAAoB,OAAO,MAAM,mBAAmB,MAC7D,MAAM,MAAM,mBAAmB,gBAAgB,MAAM,mBAAmB,aAC3E;AACA,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACA,MAAI,YAAY,MAAM,MAAM,WAAW,MAAM,YAAY,MAAM,mBAAmB,QAAQ,GAAG;AAC3F,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC5F;AACA,MAAI,YAAY,MAAM,MAAM,OAAO,MAAM,YAAY,MAAM,mBAAmB,OAAO,GAAG;AACtF,UAAM,IAAI,MAAM,sEAAsE;AAAA,EACxF;AACA,SAAO,MAAM;AACf;AAEA,SAAS,cAAc,QAAsD;AAC3E,QAAM,WAAW,OAAO,SAAS,mBAAmB,SAAY,OAAO,yBAAyB,MAAM,OAAO,SAAS,cAAc;AACpI,QAAM,WAAW,UAAU,SAAS,iBAAiB,SAAS,OAAO,eAAe,OAAO,MAAM,cAAc,SAAS,MAAM,YAAY,OAAO,MAAM,UAAU,SAAS,MAAM,WAAW;AAC3L,SAAO,EAAE,GAAG,OAAO,OAAO,SAAS;AACrC;AAEA,SAAS,YAAY,QAAmF;AACtG,QAAMA,eAAc,OAAO,OAAO,MAAM;AACxC,QAAM,YAAY,IAAI,YAAY,EAAE,OAAO,OAAO,MAAM,EAAE;AAC1D,QAAM,YAAY,OAAO,SAAS;AAClC,MAAI,cAAc,QAAW;AAC3B,UAAM,QAAQ,wBAAwB,MAAM,SAAS;AACrD,QAAI,MAAM,gBAAgBA,gBAAe,MAAM,cAAc,aAAa,MAAM,eAAe,SAAU,OAAM,IAAI,MAAM,2DAA2D;AACpL,WAAO;AAAA,EACT;AACA,SAAO,EAAE,IAAI,UAAU,OAAO,EAAE,IAAI,MAAM,WAAW,QAAQ,OAAO,EAAE,CAAC,cAAc,aAAAA,cAAa,WAAW,WAAW,iBAAiB,YAAY,WAAW;AAClK;AAEA,SAAS,KAAK,OAAuB;AACnC,SAAO,iBAAiB,KAAK,KAAK,IAAI,QAAQ,YAAY,KAAK;AACjE;AAEA,SAAS,QAAQ,OAAuB;AACtC,QAAM,aAAa,MAAM,KAAK,EAAE,QAAQ,qBAAqB,GAAG,EAC7D,QAAQ,YAAY,EAAE;AACzB,SAAO,cAAc;AACvB;;;ACrcA,SAAS,uBAAAC,sBAAqB,2BAAmE;AACjG,SAAS,aAAa,yBAAyB,0CAAkE;AAIjH,SAAS,SAAS;AAGX,SAAS,uBAAuB,OAAuB;AAC5D,QAAM,YAAY,MAAM,QAAQ,SAAS;AACzC,QAAM,sBAAsB,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,IAAI,GAAO,CAAC,EAAE,MAAM,WAAW,4BAA4B,CAAC,CAAC;AACzI,SAAO,MAAM,QAAQ,QAAQ,IAAI,YAAU;AACzC,UAAM,OAAO,EAAE,GAAG,QAAQ,OAAO,OAAO,IAAI,UAAU,EAAE,gBAAgB,OAAO,EAAE;AACjF,QAAI,OAAO,SAAS,kBAAmB,QAAO,iBAAiB,MAAM;AAAA,MAAE,GAAG;AAAA,MACxE,QAAQ,uBAAuB,OAAO,YAAY,WAAW;AAAA,MAAG,YAAY,OAAO,cAAc;AAAA,MACjG,UAAU,EAAE,GAAG,KAAK,UAAU,qBAAqB,OAAO,YAAY;AAAA,IAAE,CAAC;AAC3E,QAAI,OAAO,SAAS,WAAW,OAAO,SAAS,eAAe;AAC5D,YAAM,OAAO,MAAM,MAAM,KAAK,CAAAC,UAAQA,MAAK,MAAM,OAAO,OAAO,UAAU,EAAE;AAC3E,UAAI,CAAC,KAAM,OAAM,IAAI,MAAM,+BAA+B,OAAO,EAAE,GAAG;AACtE,YAAM,SAAS,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC,EAAE,OAAO,yBAAyB,IAAI,CAAC;AAC9F,YAAM,WAAW,EAAE,GAAG,KAAK,UAAU,mBAAmB,OAAO,UAAU;AACzE,UAAI,OAAO,SAAS,QAAS,QAAO,iBAAiB,MAAM,EAAE,GAAG,MAAM,QAAQ,SAAS,CAAC;AACxF,UAAI,CAAC,OAAO,MAAO,OAAM,IAAI,MAAM,kBAAkB,OAAO,EAAE,wDAAwD;AACtH,aAAO,iBAAiB,MAAM;AAAA,QAAE,GAAG;AAAA,QAAM;AAAA,QAAQ;AAAA,QAAU,OAAO,OAAO;AAAA,QAAO,aAAa,OAAO,eAAe;AAAA,QACjH,mBAAmB;AAAA,QAAW,wBAAwB,oBAAoB,OAAO,EAAE,KAAK,CAAC;AAAA,MAAE,CAAC;AAAA,IAChG;AACA,WAAO,iBAAiB,MAAM;AAAA,MAAE,GAAG;AAAA,MAAM,MAAM,OAAO,SAAS,aAAa,SAAS,OAAO;AAAA,MAC1F,QAAQ,OAAO,SAAS,aAAa,EAAE,GAAG,OAAO,QAAQ,GAAI,OAAO,OAAO,gBAAgB,SAAY,CAAC,IAAI,EAAE,cAAc,OAAO,OAAO,YAAY,EAAG,IAAI,OAAO;AAAA,IAAO,CAAC;AAAA,EAChL,CAAC;AACH;AAEO,SAAS,4BAA4B,SAAwB,SAA0B,SAA8B,CAAC,GAAiB;AAC5I,QAAM,WAAW,oBAAoB,SAAS,OAAO;AACrD,SAAOC,qBAAoB,SAAS,OAAO,EAAE,IAAI,CAAC,WAAW;AAC3D,UAAM,SAAS,SAAS,KAAK,CAAC,EAAE,OAAO,MAAM,OAAO,aAAa,OAAO,EAAE,EAAG;AAC7E,UAAM,OAAO,EAAE,GAAG,QAAQ,OAAO,OAAO,MAAM,UAAU,EAAE,eAAe,YAAY,OAAO,EAAE,EAAE;AAChG,QAAI,OAAO,SAAS,eAAe;AACjC,UAAI,CAAC,OAAO,SAAS,OAAO,sBAAsB,YAAY,CAAC,OAAO,uBAAuB,CAAC,OAAO,cAAe,OAAM,IAAI,MAAM,UAAU,OAAO,EAAE,iEAAiE;AACxN,YAAM,SAAS,OAAO,KAAK,WAAS,MAAM,OAAO,OAAO,UAAU,EAAE;AACpE,YAAM,WAAW,OAAO,KAAK,WAAS,MAAM,OAAO,OAAO,cAAe,EAAE;AAC3E,UAAI,CAAC,UAAU,CAAC,SAAU,OAAM,IAAI,MAAM,UAAU,OAAO,EAAE,2DAA2D;AACxH,YAAM,SAAS,mCAAmC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,KAAK,MAAM,wBAAwB,UAAU,OAAO,aAAa,CAAC,CAAC;AAClJ,aAAO,iBAAiB,MAAM;AAAA,QAAE,GAAG;AAAA,QAAM,QAAQ,wBAAwB,QAAQ,OAAO,SAAS;AAAA,QAAG,OAAO,OAAO;AAAA,QAChH,aAAa,OAAO,eAAe;AAAA,QAAG,wBAAwB,OAAO,IAAI,aAAW,QAAQ,EAAE;AAAA,QAC9F,UAAU;AAAA,UAAE,GAAG,KAAK;AAAA,UAAU,mBAAmB,OAAO;AAAA,UACtD,yBAAyB,OAAO,oBAAoB;AAAA,UAAa,qBAAqB,OAAO;AAAA,QAAoB;AAAA,MACrH,CAAC;AAAA,IACH;AACA,QAAI,OAAO,SAAS,kBAAmB,QAAO,iBAAiB,MAAM;AAAA,MAAE,GAAG;AAAA,MACxE,QAAQ,uBAAuB,OAAO,YAAY,WAAW;AAAA,MAAG,YAAY,OAAO,cAAc;AAAA,MACjG,UAAU,EAAE,GAAG,KAAK,UAAU,qBAAqB,OAAO,YAAY;AAAA,IACxE,CAAC;AACD,QAAI,OAAO,SAAS,SAAS;AAC3B,YAAM,QAAQ,OAAO,KAAK,CAACC,WAAUA,OAAM,OAAO,OAAO,UAAU,EAAE;AACrE,UAAI,CAAC,MAAO,OAAM,IAAI,MAAM,UAAU,OAAO,EAAE,mCAAmC;AAClF,aAAO,iBAAiB,MAAM,EAAE,GAAG,MAAM,QAAQ,wBAAwB,OAAO,OAAO,SAAS,EAAE,CAAC;AAAA,IACrG;AACA,WAAO,iBAAiB,MAAM,EAAE,GAAG,MAAM,MAAM,OAAO,SAAS,aAAa,SAAS,OAAO,KAAK,CAAC;AAAA,EACpG,CAAC;AACH;AAEO,SAAS,uBAAuBC,OAAc;AAAE,SAAO,kBAAkBA,KAAI;AAAO;",
-  "names": ["contentHash", "compileBoundGraders", "file", "compileBoundGraders", "asset", "hash"]
+  "sources": ["../src/taskset-authored-portable-release.ts"],
+  "sourcesContent": ["import type { Taskset } from \"./taskset-authored-contracts.js\";\nimport type {\n  GraderSpec,\n  TaskDataRecord,\n} from \"./taskset-draft-core.js\";\nimport {\n  TaskRecordSchema,\n  GraderSpecSchema as PortableGraderSpecSchema,\n  TasksetReleaseContentSchema,\n  TasksetReleaseSchema,\n  bindTasksetExecutionReleases,\n  createEnvironmentRelease,\n  createVerifierSetRelease,\n  EnvironmentReleaseSchema,\n  VerifierSetReleaseSchema,\n  verifyEnvironmentRelease,\n  verifyVerifierSetRelease,\n  verifyPreferenceComparisonRelease,\n  type EnvironmentContract,\n  type GraderSpec as PortableGraderSpec,\n  type PreferenceComparisonRelease,\n  type TasksetRelease,\n} from \"@openpond/evals\";\nimport type {\n  ImmutableAssetRef,\n  ToolDeclaration,\n} from \"@openpond/harness\";\nimport {\n  CapabilityRequirementSchema,\n  ImmutableAssetRefSchema,\n  ToolDeclarationSchema,\n} from \"@openpond/harness\";\n\nimport { contentHash, sha256 } from \"@openpond/harness\";\nimport { TaskBatchPackageMetadataSchema } from \"@openpond/evals/learning\";\nimport { compileBoundGraders, RewardBindingSchema, RewardReleaseSchema, type RewardBinding, type RewardRelease } from \"@openpond/evals/rewards\";\nimport { portableDeterministicCheck } from \"@openpond/evals/graders\";\n\nexport type TasksetRewardExecution = { binding: RewardBinding; rewards: RewardRelease[] };\n\nexport function resolvePortableTasksetRewardExecution(taskset: Taskset, supplied?: TasksetRewardExecution): TasksetRewardExecution | null {\n  const learning = taskset.metadata.learning === undefined ? null : TaskBatchPackageMetadataSchema.parse(taskset.metadata.learning);\n  const embedded = taskset.metadata.rewardExecution as { binding?: unknown; rewards?: unknown } | undefined;\n  const execution = supplied ?? (embedded ? {\n    binding: RewardBindingSchema.parse(embedded.binding),\n    rewards: RewardReleaseSchema.array().parse(embedded.rewards),\n  } : learning);\n  if (taskset.metadata.rewardBinding !== undefined) {\n    const reference = taskset.metadata.rewardBinding as Partial<RewardBinding> | null;\n    if (!execution || !reference || reference.id !== execution.binding.id\n      || reference.revision !== execution.binding.revision || reference.contentHash !== execution.binding.contentHash) {\n      throw new Error(\"Portable Taskset requires its exact published Reward binding.\");\n    }\n  }\n  if (execution) compileBoundGraders(execution.binding, execution.rewards);\n  return execution ? { binding: execution.binding, rewards: execution.rewards } : null;\n}\n\nexport function materializePortableTasksetRelease(input: {\n  taskset: Taskset;\n  selectedTasks?: TaskDataRecord[];\n  adapterId: string;\n  admittedTasksetRelease?: TasksetRelease | null;\n  rewardExecution?: TasksetRewardExecution;\n}): {\n  environmentRelease: ReturnType<typeof createEnvironmentRelease>;\n  verifierSetRelease: ReturnType<typeof createVerifierSetRelease>;\n  tasksetRelease: TasksetRelease;\n} {\n  const environment = portableEnvironment(input.taskset);\n  const tools = portableTools(input.taskset);\n  const learning = input.taskset.metadata.learning === undefined ? null : TaskBatchPackageMetadataSchema.parse(input.taskset.metadata.learning);\n  const embedded = input.taskset.metadata.rewardExecution;\n  const rewardExecution = resolvePortableTasksetRewardExecution(input.taskset, input.rewardExecution);\n  const graders = rewardExecution ? compileBoundGraders(rewardExecution.binding, rewardExecution.rewards) : input.taskset.graders.map(portableGrader);\n  const tasks = input.selectedTasks?.length\n    ? input.selectedTasks\n    : input.taskset.tasks;\n  if (!tasks.length) throw new Error(\"A portable Taskset release requires at least one task.\");\n  const pinned = input.taskset.environment.metadata.portableExecutionResources as { environment?: unknown; verifierSet?: unknown } | undefined;\n  if (environment.entrypoint === \"openpond.javascript-environment.v1\" && !pinned) throw new Error(\"Tool Taskset publication requires its pinned execution resources.\");\n  const environmentRelease = pinned ? EnvironmentReleaseSchema.parse(pinned.environment) : createEnvironmentRelease({\n    schemaVersion: \"openpond.environmentRelease.v1\",\n    id: `environment-release-${input.taskset.id}-r${input.taskset.revision}`,\n    revision: input.taskset.revision,\n    contract: environment,\n    actionSchemaRef: null,\n    observationSchemaRef: null,\n    stateSchemaRef: null,\n    artifactCollection: {\n      maxArtifacts: 100_000,\n      maxTotalBytes: 250_000_000,\n    },\n    adapterConformanceHashes: {\n      [input.adapterId]: contentHash({ adapterId: input.adapterId, environment, tools }),\n    },\n    metadata: {\n      sourceTasksetId: input.taskset.id,\n      sourcePackageHash: input.taskset.metadata.sourcePackageHash ?? null,\n      resources: input.taskset.environment.resources ?? [],\n    },\n  });\n  const verifierSetRelease = pinned?.verifierSet !== undefined ? VerifierSetReleaseSchema.parse(pinned.verifierSet) : createVerifierSetRelease({\n    schemaVersion: \"openpond.verifierSetRelease.v1\",\n    id: `verifier-set-release-${input.taskset.id}-r${input.taskset.revision}`,\n    revision: input.taskset.revision,\n    graders,\n    isolation: {\n      processBoundary: \"isolated_process\",\n      networkPolicy: \"none\",\n      defaultTimeoutMs: Math.min(input.taskset.environment.defaultTimeoutMs, 300_000),\n    },\n    calibrationReceiptRefs: [],\n    metadata: { sourceTasksetId: input.taskset.id },\n  });\n  if (!verifyEnvironmentRelease(environmentRelease) || !verifyVerifierSetRelease(verifierSetRelease) ||\n      contentHash(environmentRelease.contract) !== contentHash(environment) || contentHash(verifierSetRelease.graders) !== contentHash(graders)) {\n    throw new Error(\"Taskset execution resources differ from its declared environment or graders.\");\n  }\n  const tasksetContent = TasksetReleaseContentSchema.parse({\n    schemaVersion: \"openpond.tasksetRelease.v2\",\n    id: input.taskset.metadata.derivedPortableMetadata === undefined ? `taskset-release-${input.taskset.id}-r${input.taskset.revision}` : input.taskset.id,\n    revision: input.taskset.revision,\n    policy: {\n      policyVisibleFields: input.taskset.policy.policyVisibleFields,\n      privilegedFields: input.taskset.policy.privilegedFields,\n      hiddenGraderRefs: input.taskset.policy.hiddenGraderRefs,\n      connectedAppScopes: input.taskset.policy.connectedAppScopes,\n    },\n    environment,\n    tools,\n    capabilities: portableCapabilities(input.taskset),\n    tasks: tasks.map(projectPortableTaskRecord),\n    graders,\n    ...(input.taskset.metrics ? { metrics: input.taskset.metrics } : {}),\n    metadata: input.taskset.metadata.derivedPortableMetadata ?? {\n      sourceTasksetId: input.taskset.id,\n      sourceTasksetHash: input.taskset.contentHash,\n      sourcePackageHash: input.taskset.metadata.sourcePackageHash ?? null,\n      environmentResources: input.taskset.environment.resources ?? [],\n      ordinaryAuthoring: {\n        instructions: input.taskset.objective,\n        graderFixtures: input.taskset.graderFixtures,\n        judgeCalibrationFixtures: Object.fromEntries(input.taskset.graders\n          .filter(grader => grader.kind === \"model_judge\")\n          .map(grader => [grader.id, grader.calibrationFixtureRefs])),\n      },\n      ...(learning ? { learning } : {}),\n      // A sealed batch already pins these resources in learning metadata.\n      // Resolving that same binding at admission must not change its release.\n      ...(rewardExecution && !learning && (input.rewardExecution || embedded) ? { rewardExecution: { binding: rewardExecution.binding, rewards: rewardExecution.rewards } } : {}),\n    },\n  });\n  const draft = input.admittedTasksetRelease\n    ? TasksetReleaseSchema.parse(input.admittedTasksetRelease)\n    : TasksetReleaseSchema.parse({\n      ...tasksetContent,\n      contentHash: contentHash(tasksetContent),\n    });\n  const tasksetRelease = draft.environmentRelease\n    ? assertReleaseBindings({ draft, environmentRelease, verifierSetRelease })\n    : bindTasksetExecutionReleases({\n      taskset: draft,\n      environment: environmentRelease,\n      verifierSet: verifierSetRelease,\n    });\n  return { environmentRelease, verifierSetRelease, tasksetRelease };\n}\n\n/**\n * Admits a published comparison policy against the exact portable Taskset\n * release it names. A comparison is deliberately not embedded in that release:\n * doing so would create a content-hash cycle between Taskset and comparison.\n */\nexport function projectPreferenceComparisonRelease(input: {\n  tasksetRelease: TasksetRelease;\n  preferenceComparison: PreferenceComparisonRelease;\n}): PreferenceComparisonRelease {\n  if (!verifyPreferenceComparisonRelease(input.preferenceComparison)) {\n    throw new Error(\"Preference comparison release failed immutable content verification.\");\n  }\n  const release = input.preferenceComparison;\n  if (\n    release.tasksetRelease.id !== input.tasksetRelease.id\n    || release.tasksetRelease.contentHash !== input.tasksetRelease.contentHash\n  ) {\n    throw new Error(\"Preference comparison release must reference the admitted portable Taskset release.\");\n  }\n  return release;\n}\n\nexport function portableTasksetEnvironment(taskset: Taskset): EnvironmentContract {\n  return portableEnvironment(taskset);\n}\n\nexport function portableTasksetTools(taskset: Taskset): ToolDeclaration[] {\n  return portableTools(taskset);\n}\n\n/** Preserve immutable file/schema references while overlaying current edits. */\nexport function projectPortableTaskRecord(task: TaskDataRecord) {\n  const admitted = task.metadata.portableTaskRecord;\n  if (admitted !== undefined) {\n    const original = TaskRecordSchema.parse(admitted);\n    const projected = TaskRecordSchema.parse({\n      ...original,\n      id: task.id,\n      clusterKey: task.clusterKey,\n      split: task.split,\n      input: task.input,\n      expectedOutput: portableExpectedOutput(task),\n      policyVisibleContext: task.policyVisibleContext,\n      privilegedContextRef: task.privilegedContextRef,\n      tags: task.tags,\n      artifactRefs: task.assets === undefined ? original.artifactRefs : task.assets.map((asset) => {\n        const previous = original.artifactRefs.find(item => item.id === asset.id);\n        return {\n          id: asset.id,\n          path: previous?.path ?? `tasks/${segment(task.id)}/${segment(asset.fileName)}`,\n          contentHash: hash(asset.sha256),\n          sizeBytes: asset.sizeBytes,\n          mediaType: asset.mediaType,\n          visibility: previous?.visibility ?? \"policy\",\n        };\n      }),\n      requiredOutputs: task.requiredOutputs === undefined ? original.requiredOutputs : task.requiredOutputs.map((output) => {\n        const previous = original.requiredOutputs?.find(item => item.path === output.path);\n        return {\n          path: output.path,\n          mediaType: output.mediaType,\n          schemaRef: previous?.schemaRef && previous.schemaRef.id === output.schemaRef ? previous.schemaRef : null,\n          maxBytes: output.maxBytes ?? null,\n          metadata: {\n            ...output.metadata,\n            ...(output.schemaRef && previous?.schemaRef?.id !== output.schemaRef\n              ? { legacySchemaRef: output.schemaRef }\n              : {}),\n          },\n        };\n      }),\n    });\n    if (projected.requiredOutputs === undefined) delete projected.requiredOutputs;\n    return projected;\n  }\n  return {\n    id: task.id,\n    clusterKey: task.clusterKey,\n    split: task.split,\n    input: task.input,\n    expectedOutput: portableExpectedOutput(task),\n    policyVisibleContext: task.policyVisibleContext,\n    privilegedContextRef: task.privilegedContextRef,\n    artifactRefs: (task.assets ?? []).map((item) => ({\n      id: item.id,\n      path: `tasks/${segment(task.id)}/${segment(item.fileName)}`,\n      contentHash: hash(item.sha256),\n      sizeBytes: item.sizeBytes,\n      mediaType: item.mediaType,\n      visibility: \"policy\" as const,\n    })),\n    requiredOutputs: (task.requiredOutputs ?? []).map((output) => ({\n      path: output.path,\n      mediaType: output.mediaType,\n      schemaRef: null,\n      maxBytes: output.maxBytes ?? null,\n      metadata: {\n        ...output.metadata,\n        legacySchemaRef: output.schemaRef ?? null,\n      },\n    })),\n    tags: task.tags,\n  };\n}\n\nfunction portableExpectedOutput(\n  task: TaskDataRecord,\n): Record<string, unknown> | null {\n  if (!task.expectedOutput) return null;\n  if (\"artifactRenderer\" in task.expectedOutput) {\n    throw new Error(\n      `Task ${task.id} embeds an artifact renderer. Put shared renderer configuration in Environment resources and reference it from the Scenario.`,\n    );\n  }\n  return task.expectedOutput;\n}\n\nfunction portableEnvironment(taskset: Taskset): EnvironmentContract {\n  const kind: EnvironmentContract[\"kind\"] = taskset.environment.kind === \"chat\"\n    ? \"text\"\n    : taskset.environment.kind === \"work\" ? \"work\"\n      : taskset.environment.kind === \"program\" ? \"custom_program\" : \"agent\";\n  return {\n    protocolVersion: \"openpond.environment.v1\",\n    kind,\n    entrypoint: taskset.environment.entrypoint,\n    stateful: taskset.environment.stateful,\n    deterministicSeeds: taskset.environment.deterministicSeeds,\n    lifecycle: [\"create\", \"reset\", \"step\", \"collect\", \"destroy\"],\n    networkPolicy: taskset.environment.networkPolicy,\n    defaultTimeoutMs: taskset.environment.defaultTimeoutMs,\n  };\n}\n\nfunction portableTools(taskset: Taskset): ToolDeclaration[] {\n  const admitted = taskset.environment.metadata.portableTools;\n  if (admitted !== undefined) {\n    return ToolDeclarationSchema.array().max(200).parse(admitted);\n  }\n  const bindings = taskset.environment.actionBindings ?? [];\n  if (bindings.length) return bindings.map((binding) => ({\n    name: binding.modelToolName,\n    description: binding.description,\n    inputSchema: binding.inputSchema,\n    inputSchemaHash: hash(binding.actionSchemaHash),\n    sideEffect: binding.sideEffect,\n    timeoutMs: binding.timeoutMs,\n  }));\n  return taskset.environment.toolNames.map((name) => ({\n    name,\n    description: `Host-provided ${name} tool.`,\n    inputSchema: {},\n    inputSchemaHash: contentHash({}),\n    sideEffect: \"write\" as const,\n    timeoutMs: taskset.environment.defaultTimeoutMs,\n  }));\n}\n\nfunction portableGrader(grader: GraderSpec): PortableGraderSpec {\n  const base = {\n    id: grader.id,\n    version: grader.version,\n    weight: grader.weight,\n    hardGate: grader.hardGate,\n    rewardEligible: grader.rewardEligible,\n    privileged: grader.privileged,\n  };\n  if (grader.kind === \"model_judge\") return {\n    ...base,\n    kind: \"model_judge\",\n    rubricRef: rubricAsset(grader),\n    model: modelJudgeRef(grader),\n    temperature: grader.temperature,\n    calibrationStatus: grader.calibrationStatus,\n  };\n  if (grader.kind === \"custom_verifier\") {\n    if (grader.metadata.portableVerifierRef === undefined) {\n      throw new Error(`Custom verifier ${grader.id} requires its immutable executable asset before publication.`);\n    }\n    const imported = PortableGraderSpecSchema.safeParse(grader.metadata.portableGrader);\n    // An omitted portable export means \"verify\". Preserve that encoding on an\n    // unchanged import so executing it does not silently replace its release.\n    const preserveDefault = imported.success && imported.data.kind === \"custom_verifier\"\n      && imported.data.exportName === undefined && grader.exportName === \"verify\";\n    return {\n      ...base,\n      kind: \"custom_verifier\",\n      ...(grader.runtime === undefined ? {} : { runtime: grader.runtime }),\n      verifierRef: ImmutableAssetRefSchema.parse(grader.metadata.portableVerifierRef),\n      timeoutMs: grader.timeoutMs,\n      ...(preserveDefault ? {} : { exportName: grader.exportName }),\n      networkPolicy: \"none\",\n    };\n  }\n  if (grader.kind === \"human\") return {\n    ...base,\n    kind: \"human\",\n    rubricRef: rubricAsset(grader),\n    reviewerRole: grader.reviewerRole,\n  };\n  return {\n    ...base,\n    ...portableDeterministicCheck(grader),\n  };\n}\n\nfunction portableCapabilities(taskset: Taskset) {\n  const admitted = taskset.metadata.portableCapabilities;\n  if (admitted !== undefined) {\n    return CapabilityRequirementSchema.array().max(200).parse(admitted);\n  }\n  return [\n    ...(taskset.capabilities.requiresTools\n      ? [{ id: \"tools\", required: true, scopes: taskset.environment.toolNames }]\n      : []),\n    ...(taskset.capabilities.requiresState\n      ? [{ id: \"local-state\", required: true, scopes: [] }]\n      : []),\n    ...(taskset.capabilities.requiresPrivilegedGrading\n      ? [{ id: \"private-verifier\", required: true, scopes: taskset.policy.hiddenGraderRefs }]\n      : []),\n    ...taskset.policy.connectedAppScopes.map((scope) => ({\n      id: `connected-app-${segment(scope)}`,\n      required: true,\n      scopes: [scope],\n    })),\n  ].map((requirement) => ({\n    ...requirement,\n    portability: requirement.id === \"local-state\" ? \"host_adapter\" as const : \"portable\" as const,\n  }));\n}\n\nfunction assertReleaseBindings(input: {\n  draft: TasksetRelease;\n  environmentRelease: ReturnType<typeof createEnvironmentRelease>;\n  verifierSetRelease: ReturnType<typeof createVerifierSetRelease>;\n}): TasksetRelease {\n  if (\n    input.draft.environmentRelease?.id !== input.environmentRelease.id\n    || input.draft.environmentRelease.contentHash !== input.environmentRelease.contentHash\n  ) {\n    throw new Error(\"Admitted Taskset Release binds a different Environment Release.\");\n  }\n  if (\n    input.draft.verifierSetRelease?.id !== input.verifierSetRelease.id\n    || input.draft.verifierSetRelease.contentHash !== input.verifierSetRelease.contentHash\n  ) {\n    throw new Error(\"Admitted Taskset Release binds a different Verifier Set Release.\");\n  }\n  if (contentHash(input.draft.environment) !== contentHash(input.environmentRelease.contract)) {\n    throw new Error(\"Admitted Taskset Environment differs from its bound Environment Release.\");\n  }\n  if (contentHash(input.draft.graders) !== contentHash(input.verifierSetRelease.graders)) {\n    throw new Error(\"Admitted Taskset graders differ from its bound Verifier Set Release.\");\n  }\n  return input.draft;\n}\n\nfunction modelJudgeRef(grader: Extract<GraderSpec, { kind: \"model_judge\" }>) {\n  const previous = grader.metadata.portableGrader === undefined ? null : PortableGraderSpecSchema.parse(grader.metadata.portableGrader);\n  const revision = previous?.kind === \"model_judge\" && previous.model?.providerId === grader.judge.providerId && previous.model.modelId === grader.judge.modelId ? previous.model.revision : null;\n  return { ...grader.judge, revision };\n}\n\nfunction rubricAsset(grader: Extract<GraderSpec, { kind: \"human\" | \"model_judge\" }>): ImmutableAssetRef {\n  const contentHash = sha256(grader.rubric);\n  const sizeBytes = new TextEncoder().encode(grader.rubric).byteLength;\n  const reference = grader.metadata.portableRubricRef;\n  if (reference !== undefined) {\n    const asset = ImmutableAssetRefSchema.parse(reference);\n    if (asset.contentHash !== contentHash || asset.sizeBytes !== sizeBytes || asset.visibility === \"policy\") throw new Error(\"Taskset rubric differs from its published private source.\");\n    return asset;\n  }\n  return { id: `rubric-${grader.id}`, path: `graders/${segment(grader.id)}/rubric.md`, contentHash, sizeBytes, mediaType: \"text/markdown\", visibility: \"verifier\" };\n}\n\nfunction hash(value: string): string {\n  return /^[a-f0-9]{64}$/.test(value) ? value : contentHash(value);\n}\n\nfunction segment(value: string): string {\n  const normalized = value.trim().replace(/[^a-zA-Z0-9._-]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  return normalized || \"asset\";\n}\n"],
+  "mappings": ";;;;;;;;;;;AAKA;AAAA,EACE;AAAA,EACA,oBAAoB;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAKK;AAYP,SAAS,sCAAsC;AAC/C,SAAS,qBAAqB,qBAAqB,2BAAmE;AACtH,SAAS,kCAAkC;AAIpC,SAAS,sCAAsC,SAAkB,UAAkE;AACxI,QAAM,WAAW,QAAQ,SAAS,aAAa,SAAY,OAAO,+BAA+B,MAAM,QAAQ,SAAS,QAAQ;AAChI,QAAM,WAAW,QAAQ,SAAS;AAClC,QAAM,YAAY,aAAa,WAAW;AAAA,IACxC,SAAS,oBAAoB,MAAM,SAAS,OAAO;AAAA,IACnD,SAAS,oBAAoB,MAAM,EAAE,MAAM,SAAS,OAAO;AAAA,EAC7D,IAAI;AACJ,MAAI,QAAQ,SAAS,kBAAkB,QAAW;AAChD,UAAM,YAAY,QAAQ,SAAS;AACnC,QAAI,CAAC,aAAa,CAAC,aAAa,UAAU,OAAO,UAAU,QAAQ,MAC9D,UAAU,aAAa,UAAU,QAAQ,YAAY,UAAU,gBAAgB,UAAU,QAAQ,aAAa;AACjH,YAAM,IAAI,MAAM,+DAA+D;AAAA,IACjF;AAAA,EACF;AACA,MAAI,UAAW,qBAAoB,UAAU,SAAS,UAAU,OAAO;AACvE,SAAO,YAAY,EAAE,SAAS,UAAU,SAAS,SAAS,UAAU,QAAQ,IAAI;AAClF;AAEO,SAAS,kCAAkC,OAUhD;AACA,QAAM,cAAc,oBAAoB,MAAM,OAAO;AACrD,QAAM,QAAQ,cAAc,MAAM,OAAO;AACzC,QAAM,WAAW,MAAM,QAAQ,SAAS,aAAa,SAAY,OAAO,+BAA+B,MAAM,MAAM,QAAQ,SAAS,QAAQ;AAC5I,QAAM,WAAW,MAAM,QAAQ,SAAS;AACxC,QAAM,kBAAkB,sCAAsC,MAAM,SAAS,MAAM,eAAe;AAClG,QAAM,UAAU,kBAAkB,oBAAoB,gBAAgB,SAAS,gBAAgB,OAAO,IAAI,MAAM,QAAQ,QAAQ,IAAI,cAAc;AAClJ,QAAM,QAAQ,MAAM,eAAe,SAC/B,MAAM,gBACN,MAAM,QAAQ;AAClB,MAAI,CAAC,MAAM,OAAQ,OAAM,IAAI,MAAM,wDAAwD;AAC3F,QAAM,SAAS,MAAM,QAAQ,YAAY,SAAS;AAClD,MAAI,YAAY,eAAe,wCAAwC,CAAC,OAAQ,OAAM,IAAI,MAAM,mEAAmE;AACnK,QAAM,qBAAqB,SAAS,yBAAyB,MAAM,OAAO,WAAW,IAAI,yBAAyB;AAAA,IAChH,eAAe;AAAA,IACf,IAAI,uBAAuB,MAAM,QAAQ,EAAE,KAAK,MAAM,QAAQ,QAAQ;AAAA,IACtE,UAAU,MAAM,QAAQ;AAAA,IACxB,UAAU;AAAA,IACV,iBAAiB;AAAA,IACjB,sBAAsB;AAAA,IACtB,gBAAgB;AAAA,IAChB,oBAAoB;AAAA,MAClB,cAAc;AAAA,MACd,eAAe;AAAA,IACjB;AAAA,IACA,0BAA0B;AAAA,MACxB,CAAC,MAAM,SAAS,GAAG,YAAY,EAAE,WAAW,MAAM,WAAW,aAAa,MAAM,CAAC;AAAA,IACnF;AAAA,IACA,UAAU;AAAA,MACR,iBAAiB,MAAM,QAAQ;AAAA,MAC/B,mBAAmB,MAAM,QAAQ,SAAS,qBAAqB;AAAA,MAC/D,WAAW,MAAM,QAAQ,YAAY,aAAa,CAAC;AAAA,IACrD;AAAA,EACF,CAAC;AACD,QAAM,qBAAqB,QAAQ,gBAAgB,SAAY,yBAAyB,MAAM,OAAO,WAAW,IAAI,yBAAyB;AAAA,IAC3I,eAAe;AAAA,IACf,IAAI,wBAAwB,MAAM,QAAQ,EAAE,KAAK,MAAM,QAAQ,QAAQ;AAAA,IACvE,UAAU,MAAM,QAAQ;AAAA,IACxB;AAAA,IACA,WAAW;AAAA,MACT,iBAAiB;AAAA,MACjB,eAAe;AAAA,MACf,kBAAkB,KAAK,IAAI,MAAM,QAAQ,YAAY,kBAAkB,GAAO;AAAA,IAChF;AAAA,IACA,wBAAwB,CAAC;AAAA,IACzB,UAAU,EAAE,iBAAiB,MAAM,QAAQ,GAAG;AAAA,EAChD,CAAC;AACD,MAAI,CAAC,yBAAyB,kBAAkB,KAAK,CAAC,yBAAyB,kBAAkB,KAC7F,YAAY,mBAAmB,QAAQ,MAAM,YAAY,WAAW,KAAK,YAAY,mBAAmB,OAAO,MAAM,YAAY,OAAO,GAAG;AAC7I,UAAM,IAAI,MAAM,8EAA8E;AAAA,EAChG;AACA,QAAM,iBAAiB,4BAA4B,MAAM;AAAA,IACvD,eAAe;AAAA,IACf,IAAI,MAAM,QAAQ,SAAS,4BAA4B,SAAY,mBAAmB,MAAM,QAAQ,EAAE,KAAK,MAAM,QAAQ,QAAQ,KAAK,MAAM,QAAQ;AAAA,IACpJ,UAAU,MAAM,QAAQ;AAAA,IACxB,QAAQ;AAAA,MACN,qBAAqB,MAAM,QAAQ,OAAO;AAAA,MAC1C,kBAAkB,MAAM,QAAQ,OAAO;AAAA,MACvC,kBAAkB,MAAM,QAAQ,OAAO;AAAA,MACvC,oBAAoB,MAAM,QAAQ,OAAO;AAAA,IAC3C;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc,qBAAqB,MAAM,OAAO;AAAA,IAChD,OAAO,MAAM,IAAI,yBAAyB;AAAA,IAC1C;AAAA,IACA,GAAI,MAAM,QAAQ,UAAU,EAAE,SAAS,MAAM,QAAQ,QAAQ,IAAI,CAAC;AAAA,IAClE,UAAU,MAAM,QAAQ,SAAS,2BAA2B;AAAA,MAC1D,iBAAiB,MAAM,QAAQ;AAAA,MAC/B,mBAAmB,MAAM,QAAQ;AAAA,MACjC,mBAAmB,MAAM,QAAQ,SAAS,qBAAqB;AAAA,MAC/D,sBAAsB,MAAM,QAAQ,YAAY,aAAa,CAAC;AAAA,MAC9D,mBAAmB;AAAA,QACjB,cAAc,MAAM,QAAQ;AAAA,QAC5B,gBAAgB,MAAM,QAAQ;AAAA,QAC9B,0BAA0B,OAAO,YAAY,MAAM,QAAQ,QACxD,OAAO,YAAU,OAAO,SAAS,aAAa,EAC9C,IAAI,YAAU,CAAC,OAAO,IAAI,OAAO,sBAAsB,CAAC,CAAC;AAAA,MAC9D;AAAA,MACA,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA;AAAA;AAAA,MAG/B,GAAI,mBAAmB,CAAC,aAAa,MAAM,mBAAmB,YAAY,EAAE,iBAAiB,EAAE,SAAS,gBAAgB,SAAS,SAAS,gBAAgB,QAAQ,EAAE,IAAI,CAAC;AAAA,IAC3K;AAAA,EACF,CAAC;AACD,QAAM,QAAQ,MAAM,yBAChB,qBAAqB,MAAM,MAAM,sBAAsB,IACvD,qBAAqB,MAAM;AAAA,IAC3B,GAAG;AAAA,IACH,aAAa,YAAY,cAAc;AAAA,EACzC,CAAC;AACH,QAAM,iBAAiB,MAAM,qBACzB,sBAAsB,EAAE,OAAO,oBAAoB,mBAAmB,CAAC,IACvE,6BAA6B;AAAA,IAC7B,SAAS;AAAA,IACT,aAAa;AAAA,IACb,aAAa;AAAA,EACf,CAAC;AACH,SAAO,EAAE,oBAAoB,oBAAoB,eAAe;AAClE;AAOO,SAAS,mCAAmC,OAGnB;AAC9B,MAAI,CAAC,kCAAkC,MAAM,oBAAoB,GAAG;AAClE,UAAM,IAAI,MAAM,sEAAsE;AAAA,EACxF;AACA,QAAM,UAAU,MAAM;AACtB,MACE,QAAQ,eAAe,OAAO,MAAM,eAAe,MAChD,QAAQ,eAAe,gBAAgB,MAAM,eAAe,aAC/D;AACA,UAAM,IAAI,MAAM,qFAAqF;AAAA,EACvG;AACA,SAAO;AACT;AAEO,SAAS,2BAA2B,SAAuC;AAChF,SAAO,oBAAoB,OAAO;AACpC;AAEO,SAAS,qBAAqB,SAAqC;AACxE,SAAO,cAAc,OAAO;AAC9B;AAGO,SAAS,0BAA0B,MAAsB;AAC9D,QAAM,WAAW,KAAK,SAAS;AAC/B,MAAI,aAAa,QAAW;AAC1B,UAAM,WAAW,iBAAiB,MAAM,QAAQ;AAChD,UAAM,YAAY,iBAAiB,MAAM;AAAA,MACvC,GAAG;AAAA,MACH,IAAI,KAAK;AAAA,MACT,YAAY,KAAK;AAAA,MACjB,OAAO,KAAK;AAAA,MACZ,OAAO,KAAK;AAAA,MACZ,gBAAgB,uBAAuB,IAAI;AAAA,MAC3C,sBAAsB,KAAK;AAAA,MAC3B,sBAAsB,KAAK;AAAA,MAC3B,MAAM,KAAK;AAAA,MACX,cAAc,KAAK,WAAW,SAAY,SAAS,eAAe,KAAK,OAAO,IAAI,CAAC,UAAU;AAC3F,cAAM,WAAW,SAAS,aAAa,KAAK,UAAQ,KAAK,OAAO,MAAM,EAAE;AACxE,eAAO;AAAA,UACL,IAAI,MAAM;AAAA,UACV,MAAM,UAAU,QAAQ,SAAS,QAAQ,KAAK,EAAE,CAAC,IAAI,QAAQ,MAAM,QAAQ,CAAC;AAAA,UAC5E,aAAa,KAAK,MAAM,MAAM;AAAA,UAC9B,WAAW,MAAM;AAAA,UACjB,WAAW,MAAM;AAAA,UACjB,YAAY,UAAU,cAAc;AAAA,QACtC;AAAA,MACF,CAAC;AAAA,MACD,iBAAiB,KAAK,oBAAoB,SAAY,SAAS,kBAAkB,KAAK,gBAAgB,IAAI,CAAC,WAAW;AACpH,cAAM,WAAW,SAAS,iBAAiB,KAAK,UAAQ,KAAK,SAAS,OAAO,IAAI;AACjF,eAAO;AAAA,UACL,MAAM,OAAO;AAAA,UACb,WAAW,OAAO;AAAA,UAClB,WAAW,UAAU,aAAa,SAAS,UAAU,OAAO,OAAO,YAAY,SAAS,YAAY;AAAA,UACpG,UAAU,OAAO,YAAY;AAAA,UAC7B,UAAU;AAAA,YACR,GAAG,OAAO;AAAA,YACV,GAAI,OAAO,aAAa,UAAU,WAAW,OAAO,OAAO,YACvD,EAAE,iBAAiB,OAAO,UAAU,IACpC,CAAC;AAAA,UACP;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AACD,QAAI,UAAU,oBAAoB,OAAW,QAAO,UAAU;AAC9D,WAAO;AAAA,EACT;AACA,SAAO;AAAA,IACL,IAAI,KAAK;AAAA,IACT,YAAY,KAAK;AAAA,IACjB,OAAO,KAAK;AAAA,IACZ,OAAO,KAAK;AAAA,IACZ,gBAAgB,uBAAuB,IAAI;AAAA,IAC3C,sBAAsB,KAAK;AAAA,IAC3B,sBAAsB,KAAK;AAAA,IAC3B,eAAe,KAAK,UAAU,CAAC,GAAG,IAAI,CAAC,UAAU;AAAA,MAC/C,IAAI,KAAK;AAAA,MACT,MAAM,SAAS,QAAQ,KAAK,EAAE,CAAC,IAAI,QAAQ,KAAK,QAAQ,CAAC;AAAA,MACzD,aAAa,KAAK,KAAK,MAAM;AAAA,MAC7B,WAAW,KAAK;AAAA,MAChB,WAAW,KAAK;AAAA,MAChB,YAAY;AAAA,IACd,EAAE;AAAA,IACF,kBAAkB,KAAK,mBAAmB,CAAC,GAAG,IAAI,CAAC,YAAY;AAAA,MAC7D,MAAM,OAAO;AAAA,MACb,WAAW,OAAO;AAAA,MAClB,WAAW;AAAA,MACX,UAAU,OAAO,YAAY;AAAA,MAC7B,UAAU;AAAA,QACR,GAAG,OAAO;AAAA,QACV,iBAAiB,OAAO,aAAa;AAAA,MACvC;AAAA,IACF,EAAE;AAAA,IACF,MAAM,KAAK;AAAA,EACb;AACF;AAEA,SAAS,uBACP,MACgC;AAChC,MAAI,CAAC,KAAK,eAAgB,QAAO;AACjC,MAAI,sBAAsB,KAAK,gBAAgB;AAC7C,UAAM,IAAI;AAAA,MACR,QAAQ,KAAK,EAAE;AAAA,IACjB;AAAA,EACF;AACA,SAAO,KAAK;AACd;AAEA,SAAS,oBAAoB,SAAuC;AAClE,QAAM,OAAoC,QAAQ,YAAY,SAAS,SACnE,SACA,QAAQ,YAAY,SAAS,SAAS,SACpC,QAAQ,YAAY,SAAS,YAAY,mBAAmB;AAClE,SAAO;AAAA,IACL,iBAAiB;AAAA,IACjB;AAAA,IACA,YAAY,QAAQ,YAAY;AAAA,IAChC,UAAU,QAAQ,YAAY;AAAA,IAC9B,oBAAoB,QAAQ,YAAY;AAAA,IACxC,WAAW,CAAC,UAAU,SAAS,QAAQ,WAAW,SAAS;AAAA,IAC3D,eAAe,QAAQ,YAAY;AAAA,IACnC,kBAAkB,QAAQ,YAAY;AAAA,EACxC;AACF;AAEA,SAAS,cAAc,SAAqC;AAC1D,QAAM,WAAW,QAAQ,YAAY,SAAS;AAC9C,MAAI,aAAa,QAAW;AAC1B,WAAO,sBAAsB,MAAM,EAAE,IAAI,GAAG,EAAE,MAAM,QAAQ;AAAA,EAC9D;AACA,QAAM,WAAW,QAAQ,YAAY,kBAAkB,CAAC;AACxD,MAAI,SAAS,OAAQ,QAAO,SAAS,IAAI,CAAC,aAAa;AAAA,IACrD,MAAM,QAAQ;AAAA,IACd,aAAa,QAAQ;AAAA,IACrB,aAAa,QAAQ;AAAA,IACrB,iBAAiB,KAAK,QAAQ,gBAAgB;AAAA,IAC9C,YAAY,QAAQ;AAAA,IACpB,WAAW,QAAQ;AAAA,EACrB,EAAE;AACF,SAAO,QAAQ,YAAY,UAAU,IAAI,CAAC,UAAU;AAAA,IAClD;AAAA,IACA,aAAa,iBAAiB,IAAI;AAAA,IAClC,aAAa,CAAC;AAAA,IACd,iBAAiB,YAAY,CAAC,CAAC;AAAA,IAC/B,YAAY;AAAA,IACZ,WAAW,QAAQ,YAAY;AAAA,EACjC,EAAE;AACJ;AAEA,SAAS,eAAe,QAAwC;AAC9D,QAAM,OAAO;AAAA,IACX,IAAI,OAAO;AAAA,IACX,SAAS,OAAO;AAAA,IAChB,QAAQ,OAAO;AAAA,IACf,UAAU,OAAO;AAAA,IACjB,gBAAgB,OAAO;AAAA,IACvB,YAAY,OAAO;AAAA,EACrB;AACA,MAAI,OAAO,SAAS,cAAe,QAAO;AAAA,IACxC,GAAG;AAAA,IACH,MAAM;AAAA,IACN,WAAW,YAAY,MAAM;AAAA,IAC7B,OAAO,cAAc,MAAM;AAAA,IAC3B,aAAa,OAAO;AAAA,IACpB,mBAAmB,OAAO;AAAA,EAC5B;AACA,MAAI,OAAO,SAAS,mBAAmB;AACrC,QAAI,OAAO,SAAS,wBAAwB,QAAW;AACrD,YAAM,IAAI,MAAM,mBAAmB,OAAO,EAAE,8DAA8D;AAAA,IAC5G;AACA,UAAM,WAAW,yBAAyB,UAAU,OAAO,SAAS,cAAc;AAGlF,UAAM,kBAAkB,SAAS,WAAW,SAAS,KAAK,SAAS,qBAC9D,SAAS,KAAK,eAAe,UAAa,OAAO,eAAe;AACrE,WAAO;AAAA,MACL,GAAG;AAAA,MACH,MAAM;AAAA,MACN,GAAI,OAAO,YAAY,SAAY,CAAC,IAAI,EAAE,SAAS,OAAO,QAAQ;AAAA,MAClE,aAAa,wBAAwB,MAAM,OAAO,SAAS,mBAAmB;AAAA,MAC9E,WAAW,OAAO;AAAA,MAClB,GAAI,kBAAkB,CAAC,IAAI,EAAE,YAAY,OAAO,WAAW;AAAA,MAC3D,eAAe;AAAA,IACjB;AAAA,EACF;AACA,MAAI,OAAO,SAAS,QAAS,QAAO;AAAA,IAClC,GAAG;AAAA,IACH,MAAM;AAAA,IACN,WAAW,YAAY,MAAM;AAAA,IAC7B,cAAc,OAAO;AAAA,EACvB;AACA,SAAO;AAAA,IACL,GAAG;AAAA,IACH,GAAG,2BAA2B,MAAM;AAAA,EACtC;AACF;AAEA,SAAS,qBAAqB,SAAkB;AAC9C,QAAM,WAAW,QAAQ,SAAS;AAClC,MAAI,aAAa,QAAW;AAC1B,WAAO,4BAA4B,MAAM,EAAE,IAAI,GAAG,EAAE,MAAM,QAAQ;AAAA,EACpE;AACA,SAAO;AAAA,IACL,GAAI,QAAQ,aAAa,gBACrB,CAAC,EAAE,IAAI,SAAS,UAAU,MAAM,QAAQ,QAAQ,YAAY,UAAU,CAAC,IACvE,CAAC;AAAA,IACL,GAAI,QAAQ,aAAa,gBACrB,CAAC,EAAE,IAAI,eAAe,UAAU,MAAM,QAAQ,CAAC,EAAE,CAAC,IAClD,CAAC;AAAA,IACL,GAAI,QAAQ,aAAa,4BACrB,CAAC,EAAE,IAAI,oBAAoB,UAAU,MAAM,QAAQ,QAAQ,OAAO,iBAAiB,CAAC,IACpF,CAAC;AAAA,IACL,GAAG,QAAQ,OAAO,mBAAmB,IAAI,CAAC,WAAW;AAAA,MACnD,IAAI,iBAAiB,QAAQ,KAAK,CAAC;AAAA,MACnC,UAAU;AAAA,MACV,QAAQ,CAAC,KAAK;AAAA,IAChB,EAAE;AAAA,EACJ,EAAE,IAAI,CAAC,iBAAiB;AAAA,IACtB,GAAG;AAAA,IACH,aAAa,YAAY,OAAO,gBAAgB,iBAA0B;AAAA,EAC5E,EAAE;AACJ;AAEA,SAAS,sBAAsB,OAIZ;AACjB,MACE,MAAM,MAAM,oBAAoB,OAAO,MAAM,mBAAmB,MAC7D,MAAM,MAAM,mBAAmB,gBAAgB,MAAM,mBAAmB,aAC3E;AACA,UAAM,IAAI,MAAM,iEAAiE;AAAA,EACnF;AACA,MACE,MAAM,MAAM,oBAAoB,OAAO,MAAM,mBAAmB,MAC7D,MAAM,MAAM,mBAAmB,gBAAgB,MAAM,mBAAmB,aAC3E;AACA,UAAM,IAAI,MAAM,kEAAkE;AAAA,EACpF;AACA,MAAI,YAAY,MAAM,MAAM,WAAW,MAAM,YAAY,MAAM,mBAAmB,QAAQ,GAAG;AAC3F,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC5F;AACA,MAAI,YAAY,MAAM,MAAM,OAAO,MAAM,YAAY,MAAM,mBAAmB,OAAO,GAAG;AACtF,UAAM,IAAI,MAAM,sEAAsE;AAAA,EACxF;AACA,SAAO,MAAM;AACf;AAEA,SAAS,cAAc,QAAsD;AAC3E,QAAM,WAAW,OAAO,SAAS,mBAAmB,SAAY,OAAO,yBAAyB,MAAM,OAAO,SAAS,cAAc;AACpI,QAAM,WAAW,UAAU,SAAS,iBAAiB,SAAS,OAAO,eAAe,OAAO,MAAM,cAAc,SAAS,MAAM,YAAY,OAAO,MAAM,UAAU,SAAS,MAAM,WAAW;AAC3L,SAAO,EAAE,GAAG,OAAO,OAAO,SAAS;AACrC;AAEA,SAAS,YAAY,QAAmF;AACtG,QAAMA,eAAc,OAAO,OAAO,MAAM;AACxC,QAAM,YAAY,IAAI,YAAY,EAAE,OAAO,OAAO,MAAM,EAAE;AAC1D,QAAM,YAAY,OAAO,SAAS;AAClC,MAAI,cAAc,QAAW;AAC3B,UAAM,QAAQ,wBAAwB,MAAM,SAAS;AACrD,QAAI,MAAM,gBAAgBA,gBAAe,MAAM,cAAc,aAAa,MAAM,eAAe,SAAU,OAAM,IAAI,MAAM,2DAA2D;AACpL,WAAO;AAAA,EACT;AACA,SAAO,EAAE,IAAI,UAAU,OAAO,EAAE,IAAI,MAAM,WAAW,QAAQ,OAAO,EAAE,CAAC,cAAc,aAAAA,cAAa,WAAW,WAAW,iBAAiB,YAAY,WAAW;AAClK;AAEA,SAAS,KAAK,OAAuB;AACnC,SAAO,iBAAiB,KAAK,KAAK,IAAI,QAAQ,YAAY,KAAK;AACjE;AAEA,SAAS,QAAQ,OAAuB;AACtC,QAAM,aAAa,MAAM,KAAK,EAAE,QAAQ,qBAAqB,GAAG,EAC7D,QAAQ,YAAY,EAAE;AACzB,SAAO,cAAc;AACvB;",
+  "names": ["contentHash"]
 }

package/dist/{chunk-DNEPLQXN.js → chunk-KYCQ7LZ4.js}

@@ -3,10 +3,7 @@ import {
   validateModelStarterExecution,
   validateModelTasksetPackage,
   validateTasksetPackage
-} from "./chunk-42YOB36J.js";
-import {
-  contentHash
-} from "./chunk-QUOW6URQ.js";
+} from "./chunk-WOPM32SE.js";
 import {
   ModelProjectBaseModelSchema,
   ModelProjectTrainingMethodSchema,
@@ -17,6 +14,9 @@ import {
 import {
   ModelInitialLearningSchema
 } from "./chunk-3KXDH6OB.js";
+import {
+  contentHash
+} from "./chunk-QUOW6URQ.js";
 
 // src/model-starters.ts
 import { z } from "zod";
@@ -308,4 +308,4 @@ export {
   previewModelStarter,
   validateResolvedModelStarter
 };
-//# sourceMappingURL=chunk-DNEPLQXN.js.map
+//# sourceMappingURL=chunk-KYCQ7LZ4.js.map

package/dist/{chunk-TXQHWOFM.js → chunk-LGEF4S5I.js}

@@ -1,6 +1,6 @@
 import {
   ChatModelRefSchema
-} from "./chunk-EAEYAU4R.js";
+} from "./chunk-Y4NGWGTA.js";
 import {
   ImmutableReleaseRefSchema,
   ReleaseHashSchema,
@@ -1226,4 +1226,4 @@ export {
   computeTasksetHash,
   validatePortability
 };
-//# sourceMappingURL=chunk-TXQHWOFM.js.map
+//# sourceMappingURL=chunk-LGEF4S5I.js.map

package/dist/chunk-QABCKPW6.js

@@ -0,0 +1,171 @@
+import {
+  MAX_TASKSET_PACKAGE_BYTES,
+  TasksetPackageSchema,
+  tasksetPackageRewardBinding,
+  validateTasksetPackage
+} from "./chunk-WOPM32SE.js";
+import {
+  HostedModelProjectSummarySchema,
+  HostedModelProjectSyncSchema,
+  HostedModelProjectTrainingSetupSchema
+} from "./chunk-TCHAWJMB.js";
+import {
+  TasksetCatalogReleaseRefSchema
+} from "./chunk-A4ZDOZKP.js";
+import {
+  contentHash
+} from "./chunk-QUOW6URQ.js";
+
+// src/taskset-package-client.ts
+import { z } from "zod";
+import { learningRef } from "@openpond/evals/learning";
+var IdSchema = z.string().trim().min(1).max(500);
+var HashSchema = z.string().regex(/^[a-f0-9]{64}$/);
+var TasksetPackageModelConfigurationSchema = HostedModelProjectSyncSchema.pick({
+  portableProjectId: true,
+  name: true,
+  objective: true,
+  defaultBaseModel: true,
+  defaultDestinationId: true,
+  sourceRevision: true,
+  sourceUpdatedAt: true
+}).extend({ trainingSetup: HostedModelProjectTrainingSetupSchema.omit({ tasksetRef: true, rewardBindingRef: true, tasksetRelease: true }) }).strict();
+var TasksetPackagePublicationSchema = z.object({
+  schemaVersion: z.literal("openpond.tasksetPackagePublication.v1"),
+  operationId: IdSchema,
+  modelProjectId: IdSchema,
+  expectedProjectEtag: HashSchema.nullable(),
+  name: z.string().trim().min(1).max(200),
+  description: z.string().max(5e3),
+  buildIntent: z.enum(["demonstrations", "preferences", "verifiable_reward", "rubric", "discovery"]),
+  methodHint: z.enum(["sft", "dpo", "grpo", "ppo"]).nullable(),
+  package: TasksetPackageSchema,
+  modelConfiguration: TasksetPackageModelConfigurationSchema.optional(),
+  evaluationPackage: TasksetPackageSchema.optional(),
+  selection: z.enum(["select", "attach"]).optional()
+}).strict().refine((value) => value.selection !== "attach" || value.modelConfiguration === void 0, "Attachment-only publication cannot replace Model configuration.").refine(
+  (value) => !value.evaluationPackage || value.modelConfiguration !== void 0 && value.modelConfiguration.trainingSetup.evaluationTasksetRef != null && contentHash(value.modelConfiguration.trainingSetup.evaluationTasksetRef) === contentHash(learningRef(value.evaluationPackage.taskset)),
+  "Evaluation package must match the selected immutable evaluation in Model configuration."
+);
+var TasksetPackageReceiptSchema = z.object({
+  schemaVersion: z.literal("openpond.tasksetPackageReceipt.v1"),
+  teamId: IdSchema,
+  modelProjectId: IdSchema,
+  operationId: IdSchema,
+  taskset: TasksetCatalogReleaseRefSchema,
+  packageHash: HashSchema,
+  hostedTasksetId: IdSchema,
+  projectEtag: HashSchema,
+  project: HostedModelProjectSummarySchema.optional(),
+  selection: z.enum(["select", "attach"]).optional(),
+  evaluation: z.object({ taskset: TasksetCatalogReleaseRefSchema, packageHash: HashSchema, hostedTasksetId: IdSchema }).strict().optional()
+}).strict();
+var TasksetPackageReadbackSchema = z.object({
+  schemaVersion: z.literal("openpond.tasksetPackageReadback.v1"),
+  teamId: IdSchema,
+  modelProjectId: IdSchema,
+  package: TasksetPackageSchema
+}).strict();
+var OpenPondTasksetPackageError = class extends Error {
+  constructor(status, code, message) {
+    super(message);
+    this.status = status;
+    this.code = code;
+    this.name = "OpenPondTasksetPackageError";
+  }
+  status;
+  code;
+};
+var OpenPondTasksetPackageClient = class {
+  #options;
+  constructor(options) {
+    const url = new URL(options.baseUrl);
+    if (!["http:", "https:"].includes(url.protocol) || url.username || url.password || url.search || url.hash || !options.apiKey.trim() || !options.teamId.trim()) throw new Error("Taskset package client requires a clean HTTP(S) endpoint and workspace credentials.");
+    this.#options = { ...options, baseUrl: url.toString().replace(/\/+$/, "") };
+  }
+  async publish(input, options = {}) {
+    const request = TasksetPackagePublicationSchema.parse(input);
+    validateTasksetPackage(request.package);
+    if (request.evaluationPackage) validateTasksetPackage(request.evaluationPackage);
+    const receipt = TasksetPackageReceiptSchema.parse(await this.#request("", "POST", request, options.signal));
+    const release = request.package.taskset;
+    if (receipt.teamId !== this.#options.teamId || receipt.modelProjectId !== request.modelProjectId || receipt.operationId !== request.operationId || receipt.packageHash !== request.package.contentHash || receipt.taskset.id !== release.id || receipt.taskset.revision !== release.revision || receipt.taskset.contentHash !== release.contentHash) {
+      throw new OpenPondTasksetPackageError(502, "package_receipt_mismatch", "Taskset publication receipt did not match the requested package and owner.");
+    }
+    if (request.selection !== void 0 && receipt.selection !== request.selection) throw new OpenPondTasksetPackageError(502, "package_receipt_mismatch", "Taskset publication did not retain its selection mode.");
+    if (request.evaluationPackage && (!receipt.evaluation || receipt.evaluation.packageHash !== request.evaluationPackage.contentHash || contentHash(receipt.evaluation.taskset) !== contentHash(learningRef(request.evaluationPackage.taskset)))) {
+      throw new OpenPondTasksetPackageError(502, "package_receipt_mismatch", "Taskset publication did not retain the complete selected evaluation package.");
+    }
+    if (request.selection === "attach" && receipt.projectEtag !== request.expectedProjectEtag) throw new OpenPondTasksetPackageError(502, "package_receipt_mismatch", "Attaching a historical Taskset changed the Model configuration.");
+    if (request.modelConfiguration) {
+      const expected = request.modelConfiguration;
+      const project = receipt.project;
+      const binding = tasksetPackageRewardBinding(request.package);
+      const setup = HostedModelProjectTrainingSetupSchema.parse({
+        ...expected.trainingSetup,
+        tasksetRef: learningRef(release),
+        rewardBindingRef: binding ? learningRef(binding) : null,
+        tasksetRelease: null
+      });
+      if (!project || project.teamId !== this.#options.teamId || project.etag !== receipt.projectEtag || ![project.id, project.portableProjectId].includes(request.modelProjectId) || project.portableProjectId !== expected.portableProjectId || project.name !== expected.name || project.objective !== expected.objective || project.sourceRevision !== expected.sourceRevision || Date.parse(project.sourceUpdatedAt) !== Date.parse(expected.sourceUpdatedAt) || contentHash(project.defaultBaseModel) !== contentHash(expected.defaultBaseModel) || project.defaultDestinationId !== expected.defaultDestinationId || contentHash(project.trainingSetup) !== contentHash(setup)) {
+        throw new OpenPondTasksetPackageError(502, "package_receipt_mismatch", "Taskset publication did not retain the requested Model configuration.");
+      }
+    }
+    return receipt;
+  }
+  async get(modelProjectId, reference, options = {}) {
+    const project = IdSchema.parse(modelProjectId);
+    const ref = TasksetCatalogReleaseRefSchema.parse(reference);
+    const expectedPackageHash = options.expectedPackageHash === void 0 ? void 0 : HashSchema.parse(options.expectedPackageHash);
+    const response = TasksetPackageReadbackSchema.parse(await this.#request(`/${encodeURIComponent(project)}/${encodeURIComponent(ref.id)}/${ref.revision}/${ref.contentHash}`, "GET", void 0, options.signal));
+    const taskset = response.package.taskset;
+    if (response.teamId !== this.#options.teamId || response.modelProjectId !== project || taskset.id !== ref.id || taskset.revision !== ref.revision || taskset.contentHash !== ref.contentHash) throw new OpenPondTasksetPackageError(502, "package_readback_mismatch", "Taskset package did not match the requested release and owner.");
+    if (expectedPackageHash !== void 0 && response.package.contentHash !== expectedPackageHash) throw new OpenPondTasksetPackageError(502, "package_readback_mismatch", "Taskset package did not match the saved publication receipt.");
+    return validateTasksetPackage(response.package);
+  }
+  async #request(path, method, body, signal) {
+    const serialized = body === void 0 ? void 0 : JSON.stringify(body);
+    if (serialized && new TextEncoder().encode(serialized).byteLength > MAX_TASKSET_PACKAGE_BYTES) throw new OpenPondTasksetPackageError(413, "package_too_large", "Taskset publication exceeds the 64 MiB envelope.");
+    const response = await (this.#options.fetch ?? globalThis.fetch)(`${this.#options.baseUrl}/v1/taskset-packages${path}`, {
+      method,
+      headers: { Authorization: `Bearer ${this.#options.apiKey}`, "X-OpenPond-Team-Id": this.#options.teamId, Accept: "application/json", ...serialized ? { "Content-Type": "application/json" } : {} },
+      body: serialized,
+      signal,
+      redirect: "error"
+    });
+    const reader = response.body?.getReader();
+    if (!reader) throw new OpenPondTasksetPackageError(response.status, "empty_response", "Taskset package response was empty.");
+    const decoder = new TextDecoder("utf-8", { fatal: true });
+    let bytes = 0;
+    let text = "";
+    try {
+      while (true) {
+        const chunk = await reader.read();
+        if (chunk.done) break;
+        bytes += chunk.value.byteLength;
+        if (bytes > MAX_TASKSET_PACKAGE_BYTES) throw new OpenPondTasksetPackageError(413, "package_too_large", "Taskset response exceeds the 64 MiB envelope.");
+        text += decoder.decode(chunk.value, { stream: true });
+      }
+      text += decoder.decode();
+    } finally {
+      await reader.cancel();
+      reader.releaseLock();
+    }
+    const payload = JSON.parse(text);
+    if (!response.ok) {
+      const error = z.object({ code: z.string(), message: z.string() }).safeParse(payload);
+      throw new OpenPondTasksetPackageError(response.status, error.success ? error.data.code : "package_request_failed", error.success ? error.data.message : `Taskset package request failed (${response.status}).`);
+    }
+    return payload;
+  }
+};
+
+export {
+  TasksetPackageModelConfigurationSchema,
+  TasksetPackagePublicationSchema,
+  TasksetPackageReceiptSchema,
+  TasksetPackageReadbackSchema,
+  OpenPondTasksetPackageError,
+  OpenPondTasksetPackageClient
+};
+//# sourceMappingURL=chunk-QABCKPW6.js.map

package/dist/chunk-QABCKPW6.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/taskset-package-client.ts"],
+  "sourcesContent": ["import { z } from \"zod\";\nimport { TasksetCatalogReleaseRefSchema } from \"./taskset-catalog.js\";\nimport { MAX_TASKSET_PACKAGE_BYTES, TasksetPackageSchema, tasksetPackageRewardBinding, validateTasksetPackage, type TasksetPackage } from \"./taskset-package-contracts.js\";\nimport { HostedModelProjectSummarySchema, HostedModelProjectSyncSchema, HostedModelProjectTrainingSetupSchema } from \"./model-projects.js\";\nimport { contentHash } from \"@openpond/harness\";\nimport { learningRef } from \"@openpond/evals/learning\";\n\nconst IdSchema = z.string().trim().min(1).max(500);\nconst HashSchema = z.string().regex(/^[a-f0-9]{64}$/);\n/** Configuration and package selection share one hosted commit. Package-owned\n * references cannot accidentally contain a Desktop-local content hash. */\nexport const TasksetPackageModelConfigurationSchema = HostedModelProjectSyncSchema.pick({\n  portableProjectId: true, name: true, objective: true, defaultBaseModel: true, defaultDestinationId: true,\n  sourceRevision: true, sourceUpdatedAt: true,\n}).extend({ trainingSetup: HostedModelProjectTrainingSetupSchema.omit({ tasksetRef: true, rewardBindingRef: true, tasksetRelease: true }) }).strict();\nexport const TasksetPackagePublicationSchema = z.object({\n  schemaVersion: z.literal(\"openpond.tasksetPackagePublication.v1\"),\n  operationId: IdSchema, modelProjectId: IdSchema, expectedProjectEtag: HashSchema.nullable(),\n  name: z.string().trim().min(1).max(200), description: z.string().max(5_000),\n  buildIntent: z.enum([\"demonstrations\", \"preferences\", \"verifiable_reward\", \"rubric\", \"discovery\"]),\n  methodHint: z.enum([\"sft\", \"dpo\", \"grpo\", \"ppo\"]).nullable(), package: TasksetPackageSchema,\n  modelConfiguration: TasksetPackageModelConfigurationSchema.optional(),\n  evaluationPackage: TasksetPackageSchema.optional(),\n  selection: z.enum([\"select\", \"attach\"]).optional(),\n}).strict().refine(value => value.selection !== \"attach\" || value.modelConfiguration === undefined, \"Attachment-only publication cannot replace Model configuration.\")\n  .refine(value => !value.evaluationPackage || (value.modelConfiguration !== undefined\n    && value.modelConfiguration.trainingSetup.evaluationTasksetRef != null\n    && contentHash(value.modelConfiguration.trainingSetup.evaluationTasksetRef) === contentHash(learningRef(value.evaluationPackage.taskset))),\n  \"Evaluation package must match the selected immutable evaluation in Model configuration.\");\nexport const TasksetPackageReceiptSchema = z.object({\n  schemaVersion: z.literal(\"openpond.tasksetPackageReceipt.v1\"),\n  teamId: IdSchema, modelProjectId: IdSchema, operationId: IdSchema,\n  taskset: TasksetCatalogReleaseRefSchema, packageHash: HashSchema,\n  hostedTasksetId: IdSchema, projectEtag: HashSchema,\n  project: HostedModelProjectSummarySchema.optional(),\n  selection: z.enum([\"select\", \"attach\"]).optional(),\n  evaluation: z.object({ taskset: TasksetCatalogReleaseRefSchema, packageHash: HashSchema, hostedTasksetId: IdSchema }).strict().optional(),\n}).strict();\nexport const TasksetPackageReadbackSchema = z.object({\n  schemaVersion: z.literal(\"openpond.tasksetPackageReadback.v1\"),\n  teamId: IdSchema, modelProjectId: IdSchema, package: TasksetPackageSchema,\n}).strict();\nexport type TasksetPackagePublication = z.infer<typeof TasksetPackagePublicationSchema>;\nexport type TasksetPackageReceipt = z.infer<typeof TasksetPackageReceiptSchema>;\nexport type TasksetPackageModelConfiguration = z.infer<typeof TasksetPackageModelConfigurationSchema>;\n\nexport class OpenPondTasksetPackageError extends Error {\n  constructor(readonly status: number, readonly code: string, message: string) { super(message); this.name = \"OpenPondTasksetPackageError\"; }\n}\n\n/** Private package operations are explicitly scoped to an authorized Model.\n * Catalog inventory remains metadata-only and never calls this client itself. */\nexport class OpenPondTasksetPackageClient {\n  readonly #options: { baseUrl: string; apiKey: string; teamId: string; fetch?: typeof globalThis.fetch };\n  constructor(options: { baseUrl: string; apiKey: string; teamId: string; fetch?: typeof globalThis.fetch }) {\n    const url = new URL(options.baseUrl);\n    if (![\"http:\", \"https:\"].includes(url.protocol) || url.username || url.password || url.search || url.hash || !options.apiKey.trim() || !options.teamId.trim()) throw new Error(\"Taskset package client requires a clean HTTP(S) endpoint and workspace credentials.\");\n    this.#options = { ...options, baseUrl: url.toString().replace(/\\/+$/, \"\") };\n  }\n\n  async publish(input: TasksetPackagePublication, options: { signal?: AbortSignal } = {}): Promise<TasksetPackageReceipt> {\n    const request = TasksetPackagePublicationSchema.parse(input);\n    validateTasksetPackage(request.package);\n    if (request.evaluationPackage) validateTasksetPackage(request.evaluationPackage);\n    const receipt = TasksetPackageReceiptSchema.parse(await this.#request(\"\", \"POST\", request, options.signal));\n    const release = request.package.taskset;\n    if (receipt.teamId !== this.#options.teamId || receipt.modelProjectId !== request.modelProjectId || receipt.operationId !== request.operationId\n      || receipt.packageHash !== request.package.contentHash || receipt.taskset.id !== release.id || receipt.taskset.revision !== release.revision || receipt.taskset.contentHash !== release.contentHash) {\n      throw new OpenPondTasksetPackageError(502, \"package_receipt_mismatch\", \"Taskset publication receipt did not match the requested package and owner.\");\n    }\n    if (request.selection !== undefined && receipt.selection !== request.selection) throw new OpenPondTasksetPackageError(502, \"package_receipt_mismatch\", \"Taskset publication did not retain its selection mode.\");\n    if (request.evaluationPackage && (!receipt.evaluation\n      || receipt.evaluation.packageHash !== request.evaluationPackage.contentHash\n      || contentHash(receipt.evaluation.taskset) !== contentHash(learningRef(request.evaluationPackage.taskset)))) {\n      throw new OpenPondTasksetPackageError(502, \"package_receipt_mismatch\", \"Taskset publication did not retain the complete selected evaluation package.\");\n    }\n    if (request.selection === \"attach\" && receipt.projectEtag !== request.expectedProjectEtag) throw new OpenPondTasksetPackageError(502, \"package_receipt_mismatch\", \"Attaching a historical Taskset changed the Model configuration.\");\n    if (request.modelConfiguration) {\n      const expected = request.modelConfiguration;\n      const project = receipt.project;\n      const binding = tasksetPackageRewardBinding(request.package);\n      const setup = HostedModelProjectTrainingSetupSchema.parse({ ...expected.trainingSetup, tasksetRef: learningRef(release),\n        rewardBindingRef: binding ? learningRef(binding) : null,\n        tasksetRelease: null });\n      if (!project || project.teamId !== this.#options.teamId || project.etag !== receipt.projectEtag\n        || ![project.id, project.portableProjectId].includes(request.modelProjectId)\n        || project.portableProjectId !== expected.portableProjectId || project.name !== expected.name || project.objective !== expected.objective\n        || project.sourceRevision !== expected.sourceRevision || Date.parse(project.sourceUpdatedAt) !== Date.parse(expected.sourceUpdatedAt)\n        || contentHash(project.defaultBaseModel) !== contentHash(expected.defaultBaseModel) || project.defaultDestinationId !== expected.defaultDestinationId\n        || contentHash(project.trainingSetup) !== contentHash(setup)) {\n        throw new OpenPondTasksetPackageError(502, \"package_receipt_mismatch\", \"Taskset publication did not retain the requested Model configuration.\");\n      }\n    }\n    return receipt;\n  }\n\n  async get(modelProjectId: string, reference: z.infer<typeof TasksetCatalogReleaseRefSchema>, options: { signal?: AbortSignal; expectedPackageHash?: string } = {}): Promise<TasksetPackage> {\n    const project = IdSchema.parse(modelProjectId);\n    const ref = TasksetCatalogReleaseRefSchema.parse(reference);\n    const expectedPackageHash = options.expectedPackageHash === undefined ? undefined : HashSchema.parse(options.expectedPackageHash);\n    const response = TasksetPackageReadbackSchema.parse(await this.#request(`/${encodeURIComponent(project)}/${encodeURIComponent(ref.id)}/${ref.revision}/${ref.contentHash}`, \"GET\", undefined, options.signal));\n    const taskset = response.package.taskset;\n    if (response.teamId !== this.#options.teamId || response.modelProjectId !== project || taskset.id !== ref.id || taskset.revision !== ref.revision || taskset.contentHash !== ref.contentHash) throw new OpenPondTasksetPackageError(502, \"package_readback_mismatch\", \"Taskset package did not match the requested release and owner.\");\n    if (expectedPackageHash !== undefined && response.package.contentHash !== expectedPackageHash) throw new OpenPondTasksetPackageError(502, \"package_readback_mismatch\", \"Taskset package did not match the saved publication receipt.\");\n    return validateTasksetPackage(response.package);\n  }\n\n  async #request(path: string, method: string, body: unknown, signal?: AbortSignal): Promise<unknown> {\n    const serialized = body === undefined ? undefined : JSON.stringify(body);\n    if (serialized && new TextEncoder().encode(serialized).byteLength > MAX_TASKSET_PACKAGE_BYTES) throw new OpenPondTasksetPackageError(413, \"package_too_large\", \"Taskset publication exceeds the 64 MiB envelope.\");\n    const response = await (this.#options.fetch ?? globalThis.fetch)(`${this.#options.baseUrl}/v1/taskset-packages${path}`, {\n      method, headers: { Authorization: `Bearer ${this.#options.apiKey}`, \"X-OpenPond-Team-Id\": this.#options.teamId, Accept: \"application/json\", ...(serialized ? { \"Content-Type\": \"application/json\" } : {}) },\n      body: serialized, signal, redirect: \"error\",\n    });\n    const reader = response.body?.getReader();\n    if (!reader) throw new OpenPondTasksetPackageError(response.status, \"empty_response\", \"Taskset package response was empty.\");\n    const decoder = new TextDecoder(\"utf-8\", { fatal: true });\n    let bytes = 0;\n    let text = \"\";\n    try {\n      while (true) {\n        const chunk = await reader.read();\n        if (chunk.done) break;\n        bytes += chunk.value.byteLength;\n        if (bytes > MAX_TASKSET_PACKAGE_BYTES) throw new OpenPondTasksetPackageError(413, \"package_too_large\", \"Taskset response exceeds the 64 MiB envelope.\");\n        text += decoder.decode(chunk.value, { stream: true });\n      }\n      text += decoder.decode();\n    } finally { await reader.cancel(); reader.releaseLock(); }\n    const payload: unknown = JSON.parse(text);\n    if (!response.ok) {\n      const error = z.object({ code: z.string(), message: z.string() }).safeParse(payload);\n      throw new OpenPondTasksetPackageError(response.status, error.success ? error.data.code : \"package_request_failed\", error.success ? error.data.message : `Taskset package request failed (${response.status}).`);\n    }\n    return payload;\n  }\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;AAAA,SAAS,SAAS;AAKlB,SAAS,mBAAmB;AAE5B,IAAM,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AACjD,IAAM,aAAa,EAAE,OAAO,EAAE,MAAM,gBAAgB;AAG7C,IAAM,yCAAyC,6BAA6B,KAAK;AAAA,EACtF,mBAAmB;AAAA,EAAM,MAAM;AAAA,EAAM,WAAW;AAAA,EAAM,kBAAkB;AAAA,EAAM,sBAAsB;AAAA,EACpG,gBAAgB;AAAA,EAAM,iBAAiB;AACzC,CAAC,EAAE,OAAO,EAAE,eAAe,sCAAsC,KAAK,EAAE,YAAY,MAAM,kBAAkB,MAAM,gBAAgB,KAAK,CAAC,EAAE,CAAC,EAAE,OAAO;AAC7I,IAAM,kCAAkC,EAAE,OAAO;AAAA,EACtD,eAAe,EAAE,QAAQ,uCAAuC;AAAA,EAChE,aAAa;AAAA,EAAU,gBAAgB;AAAA,EAAU,qBAAqB,WAAW,SAAS;AAAA,EAC1F,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAAA,EAAG,aAAa,EAAE,OAAO,EAAE,IAAI,GAAK;AAAA,EAC1E,aAAa,EAAE,KAAK,CAAC,kBAAkB,eAAe,qBAAqB,UAAU,WAAW,CAAC;AAAA,EACjG,YAAY,EAAE,KAAK,CAAC,OAAO,OAAO,QAAQ,KAAK,CAAC,EAAE,SAAS;AAAA,EAAG,SAAS;AAAA,EACvE,oBAAoB,uCAAuC,SAAS;AAAA,EACpE,mBAAmB,qBAAqB,SAAS;AAAA,EACjD,WAAW,EAAE,KAAK,CAAC,UAAU,QAAQ,CAAC,EAAE,SAAS;AACnD,CAAC,EAAE,OAAO,EAAE,OAAO,WAAS,MAAM,cAAc,YAAY,MAAM,uBAAuB,QAAW,iEAAiE,EAClK;AAAA,EAAO,WAAS,CAAC,MAAM,qBAAsB,MAAM,uBAAuB,UACtE,MAAM,mBAAmB,cAAc,wBAAwB,QAC/D,YAAY,MAAM,mBAAmB,cAAc,oBAAoB,MAAM,YAAY,YAAY,MAAM,kBAAkB,OAAO,CAAC;AAAA,EAC1I;AAAyF;AACpF,IAAM,8BAA8B,EAAE,OAAO;AAAA,EAClD,eAAe,EAAE,QAAQ,mCAAmC;AAAA,EAC5D,QAAQ;AAAA,EAAU,gBAAgB;AAAA,EAAU,aAAa;AAAA,EACzD,SAAS;AAAA,EAAgC,aAAa;AAAA,EACtD,iBAAiB;AAAA,EAAU,aAAa;AAAA,EACxC,SAAS,gCAAgC,SAAS;AAAA,EAClD,WAAW,EAAE,KAAK,CAAC,UAAU,QAAQ,CAAC,EAAE,SAAS;AAAA,EACjD,YAAY,EAAE,OAAO,EAAE,SAAS,gCAAgC,aAAa,YAAY,iBAAiB,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS;AAC1I,CAAC,EAAE,OAAO;AACH,IAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,eAAe,EAAE,QAAQ,oCAAoC;AAAA,EAC7D,QAAQ;AAAA,EAAU,gBAAgB;AAAA,EAAU,SAAS;AACvD,CAAC,EAAE,OAAO;AAKH,IAAM,8BAAN,cAA0C,MAAM;AAAA,EACrD,YAAqB,QAAyB,MAAc,SAAiB;AAAE,UAAM,OAAO;AAAvE;AAAyB;AAAiD,SAAK,OAAO;AAAA,EAA+B;AAAA,EAArH;AAAA,EAAyB;AAChD;AAIO,IAAM,+BAAN,MAAmC;AAAA,EAC/B;AAAA,EACT,YAAY,SAA+F;AACzG,UAAM,MAAM,IAAI,IAAI,QAAQ,OAAO;AACnC,QAAI,CAAC,CAAC,SAAS,QAAQ,EAAE,SAAS,IAAI,QAAQ,KAAK,IAAI,YAAY,IAAI,YAAY,IAAI,UAAU,IAAI,QAAQ,CAAC,QAAQ,OAAO,KAAK,KAAK,CAAC,QAAQ,OAAO,KAAK,EAAG,OAAM,IAAI,MAAM,qFAAqF;AACpQ,SAAK,WAAW,EAAE,GAAG,SAAS,SAAS,IAAI,SAAS,EAAE,QAAQ,QAAQ,EAAE,EAAE;AAAA,EAC5E;AAAA,EAEA,MAAM,QAAQ,OAAkC,UAAoC,CAAC,GAAmC;AACtH,UAAM,UAAU,gCAAgC,MAAM,KAAK;AAC3D,2BAAuB,QAAQ,OAAO;AACtC,QAAI,QAAQ,kBAAmB,wBAAuB,QAAQ,iBAAiB;AAC/E,UAAM,UAAU,4BAA4B,MAAM,MAAM,KAAK,SAAS,IAAI,QAAQ,SAAS,QAAQ,MAAM,CAAC;AAC1G,UAAM,UAAU,QAAQ,QAAQ;AAChC,QAAI,QAAQ,WAAW,KAAK,SAAS,UAAU,QAAQ,mBAAmB,QAAQ,kBAAkB,QAAQ,gBAAgB,QAAQ,eAC/H,QAAQ,gBAAgB,QAAQ,QAAQ,eAAe,QAAQ,QAAQ,OAAO,QAAQ,MAAM,QAAQ,QAAQ,aAAa,QAAQ,YAAY,QAAQ,QAAQ,gBAAgB,QAAQ,aAAa;AACrM,YAAM,IAAI,4BAA4B,KAAK,4BAA4B,4EAA4E;AAAA,IACrJ;AACA,QAAI,QAAQ,cAAc,UAAa,QAAQ,cAAc,QAAQ,UAAW,OAAM,IAAI,4BAA4B,KAAK,4BAA4B,wDAAwD;AAC/M,QAAI,QAAQ,sBAAsB,CAAC,QAAQ,cACtC,QAAQ,WAAW,gBAAgB,QAAQ,kBAAkB,eAC7D,YAAY,QAAQ,WAAW,OAAO,MAAM,YAAY,YAAY,QAAQ,kBAAkB,OAAO,CAAC,IAAI;AAC7G,YAAM,IAAI,4BAA4B,KAAK,4BAA4B,8EAA8E;AAAA,IACvJ;AACA,QAAI,QAAQ,cAAc,YAAY,QAAQ,gBAAgB,QAAQ,oBAAqB,OAAM,IAAI,4BAA4B,KAAK,4BAA4B,iEAAiE;AACnO,QAAI,QAAQ,oBAAoB;AAC9B,YAAM,WAAW,QAAQ;AACzB,YAAM,UAAU,QAAQ;AACxB,YAAM,UAAU,4BAA4B,QAAQ,OAAO;AAC3D,YAAM,QAAQ,sCAAsC,MAAM;AAAA,QAAE,GAAG,SAAS;AAAA,QAAe,YAAY,YAAY,OAAO;AAAA,QACpH,kBAAkB,UAAU,YAAY,OAAO,IAAI;AAAA,QACnD,gBAAgB;AAAA,MAAK,CAAC;AACxB,UAAI,CAAC,WAAW,QAAQ,WAAW,KAAK,SAAS,UAAU,QAAQ,SAAS,QAAQ,eAC/E,CAAC,CAAC,QAAQ,IAAI,QAAQ,iBAAiB,EAAE,SAAS,QAAQ,cAAc,KACxE,QAAQ,sBAAsB,SAAS,qBAAqB,QAAQ,SAAS,SAAS,QAAQ,QAAQ,cAAc,SAAS,aAC7H,QAAQ,mBAAmB,SAAS,kBAAkB,KAAK,MAAM,QAAQ,eAAe,MAAM,KAAK,MAAM,SAAS,eAAe,KACjI,YAAY,QAAQ,gBAAgB,MAAM,YAAY,SAAS,gBAAgB,KAAK,QAAQ,yBAAyB,SAAS,wBAC9H,YAAY,QAAQ,aAAa,MAAM,YAAY,KAAK,GAAG;AAC9D,cAAM,IAAI,4BAA4B,KAAK,4BAA4B,uEAAuE;AAAA,MAChJ;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,IAAI,gBAAwB,WAA2D,UAAkE,CAAC,GAA4B;AAC1L,UAAM,UAAU,SAAS,MAAM,cAAc;AAC7C,UAAM,MAAM,+BAA+B,MAAM,SAAS;AAC1D,UAAM,sBAAsB,QAAQ,wBAAwB,SAAY,SAAY,WAAW,MAAM,QAAQ,mBAAmB;AAChI,UAAM,WAAW,6BAA6B,MAAM,MAAM,KAAK,SAAS,IAAI,mBAAmB,OAAO,CAAC,IAAI,mBAAmB,IAAI,EAAE,CAAC,IAAI,IAAI,QAAQ,IAAI,IAAI,WAAW,IAAI,OAAO,QAAW,QAAQ,MAAM,CAAC;AAC7M,UAAM,UAAU,SAAS,QAAQ;AACjC,QAAI,SAAS,WAAW,KAAK,SAAS,UAAU,SAAS,mBAAmB,WAAW,QAAQ,OAAO,IAAI,MAAM,QAAQ,aAAa,IAAI,YAAY,QAAQ,gBAAgB,IAAI,YAAa,OAAM,IAAI,4BAA4B,KAAK,6BAA6B,gEAAgE;AACtU,QAAI,wBAAwB,UAAa,SAAS,QAAQ,gBAAgB,oBAAqB,OAAM,IAAI,4BAA4B,KAAK,6BAA6B,8DAA8D;AACrO,WAAO,uBAAuB,SAAS,OAAO;AAAA,EAChD;AAAA,EAEA,MAAM,SAAS,MAAc,QAAgB,MAAe,QAAwC;AAClG,UAAM,aAAa,SAAS,SAAY,SAAY,KAAK,UAAU,IAAI;AACvE,QAAI,cAAc,IAAI,YAAY,EAAE,OAAO,UAAU,EAAE,aAAa,0BAA2B,OAAM,IAAI,4BAA4B,KAAK,qBAAqB,kDAAkD;AACjN,UAAM,WAAW,OAAO,KAAK,SAAS,SAAS,WAAW,OAAO,GAAG,KAAK,SAAS,OAAO,uBAAuB,IAAI,IAAI;AAAA,MACtH;AAAA,MAAQ,SAAS,EAAE,eAAe,UAAU,KAAK,SAAS,MAAM,IAAI,sBAAsB,KAAK,SAAS,QAAQ,QAAQ,oBAAoB,GAAI,aAAa,EAAE,gBAAgB,mBAAmB,IAAI,CAAC,EAAG;AAAA,MAC1M,MAAM;AAAA,MAAY;AAAA,MAAQ,UAAU;AAAA,IACtC,CAAC;AACD,UAAM,SAAS,SAAS,MAAM,UAAU;AACxC,QAAI,CAAC,OAAQ,OAAM,IAAI,4BAA4B,SAAS,QAAQ,kBAAkB,qCAAqC;AAC3H,UAAM,UAAU,IAAI,YAAY,SAAS,EAAE,OAAO,KAAK,CAAC;AACxD,QAAI,QAAQ;AACZ,QAAI,OAAO;AACX,QAAI;AACF,aAAO,MAAM;AACX,cAAM,QAAQ,MAAM,OAAO,KAAK;AAChC,YAAI,MAAM,KAAM;AAChB,iBAAS,MAAM,MAAM;AACrB,YAAI,QAAQ,0BAA2B,OAAM,IAAI,4BAA4B,KAAK,qBAAqB,+CAA+C;AACtJ,gBAAQ,QAAQ,OAAO,MAAM,OAAO,EAAE,QAAQ,KAAK,CAAC;AAAA,MACtD;AACA,cAAQ,QAAQ,OAAO;AAAA,IACzB,UAAE;AAAU,YAAM,OAAO,OAAO;AAAG,aAAO,YAAY;AAAA,IAAG;AACzD,UAAM,UAAmB,KAAK,MAAM,IAAI;AACxC,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,OAAO;AACnF,YAAM,IAAI,4BAA4B,SAAS,QAAQ,MAAM,UAAU,MAAM,KAAK,OAAO,0BAA0B,MAAM,UAAU,MAAM,KAAK,UAAU,mCAAmC,SAAS,MAAM,IAAI;AAAA,IAChN;AACA,WAAO;AAAA,EACT;AACF;",
+  "names": []
+}

package/dist/{chunk-42YOB36J.js → chunk-WOPM32SE.js}

@@ -1,15 +1,15 @@
 import {
   ModelTasksetAuthoringSchema
 } from "./chunk-2U54EOXJ.js";
+import {
+  ModelProjectVersionedRefSchema,
+  canonicalJson
+} from "./chunk-TCHAWJMB.js";
 import {
   ImmutableAssetRefSchema,
   contentHash,
   sha256
 } from "./chunk-QUOW6URQ.js";
-import {
-  ModelProjectVersionedRefSchema,
-  canonicalJson
-} from "./chunk-TCHAWJMB.js";
 
 // src/model-starter-execution.ts
 import { z } from "zod";
@@ -537,6 +537,8 @@ function same2(left, right) {
 }
 
 export {
+  modelAuthoredTasksetId,
+  assertModelTasksetAuthoring,
   ModelStarterEnvironmentAttemptSchema,
   verifyModelStarterEnvironmentAttempt,
   ModelStarterExecutionSchema,
@@ -557,8 +559,6 @@ export {
   TasksetPackageLearningResourcesSchema,
   learningPackageContextFiles,
   validateTasksetLearningResources,
-  modelAuthoredTasksetId,
-  assertModelTasksetAuthoring,
   MAX_TASKSET_PACKAGE_BYTES,
   TasksetPackageFileSchema,
   decodeTasksetPackageFile,
@@ -571,4 +571,4 @@ export {
   validateTasksetPackage,
   createTasksetPackage
 };
-//# sourceMappingURL=chunk-42YOB36J.js.map
+//# sourceMappingURL=chunk-WOPM32SE.js.map

package/dist/{chunk-EAEYAU4R.js → chunk-Y4NGWGTA.js}

@@ -1558,7 +1558,7 @@ var ProfileWorkflowSchema = z10.object({
   description: z10.string().max(4e3),
   inputSchema: z10.record(z10.string(), z10.unknown()),
   invocation: z10.discriminatedUnion("kind", [
-    z10.object({ kind: z10.literal("instructions"), instructions: z10.string().trim().min(1).max(1e5) }).strict(),
+    z10.object({ kind: z10.literal("instructions"), instructions: z10.string().min(1).max(1e5).refine((value) => Boolean(value.trim())) }).strict(),
     z10.object({ kind: z10.literal("agent_action"), actionId: z10.string().trim().min(1).max(240) }).strict()
   ]),
   skillPaths: z10.array(SourcePathSchema).max(100)
@@ -1597,6 +1597,27 @@ var ProfileComponentBindingSchema = z10.object({
   ])
 }).strict();
 
+// ../harness/dist/profile-workflow-source.js
+import { parseDocument } from "yaml";
+import { z as z11 } from "zod";
+var PortablePathSchema = z11.string().min(1).max(2e3).refine((value) => !value.includes("\\") && !value.includes(":") && !value.startsWith("/") && value.split("/").every((part) => part !== "" && part !== "." && part !== ".."), "source paths must be portable relative paths");
+var WorkflowIdSchema2 = z11.string().regex(/^[a-z][a-z0-9_-]{0,119}$/);
+var EmptyInputSchema = { type: "object", properties: {}, additionalProperties: false };
+var ProfileWorkflowPromptMetadataSchema = z11.object({
+  name: z11.string().trim().min(1).max(240).optional(),
+  description: z11.string().max(4e3).optional(),
+  skillPaths: z11.array(PortablePathSchema).max(100).optional(),
+  assetPaths: z11.array(PortablePathSchema).max(100).optional()
+}).strict();
+var ProfileWorkflowActionSourceSchema = z11.object({
+  actionId: z11.string().trim().min(1).max(240),
+  name: z11.string().trim().min(1).max(240),
+  description: z11.string().max(4e3).default(""),
+  inputSchema: z11.record(z11.string(), z11.unknown()).default(EmptyInputSchema),
+  skillPaths: z11.array(PortablePathSchema).max(100).default([]),
+  assetPaths: z11.array(PortablePathSchema).max(100).default([])
+}).strict();
+
 export {
   ToolDeclarationSchema,
   CapabilityRequirementSchema,
@@ -1607,4 +1628,4 @@ export {
   validateHarnessPolicySourcePackage,
   validateHarnessSourcePackage
 };
-//# sourceMappingURL=chunk-EAEYAU4R.js.map
+//# sourceMappingURL=chunk-Y4NGWGTA.js.map