openpond 0.0.38 → 0.0.39

package/dist/chunks/{chunk-275WCETC.js → chunk-FCVVOMIP.js}

@@ -1,24 +1,27 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import {
+  createOpenPondSandboxClient
+} from "./chunk-KHNHUA2H.js";
 import {
   mapUiBaseToApiBase,
   resolveBaseUrl,
   resolveSandboxApiUrlOption
-} from "./chunk-GDZYDLEL.js";
+} from "./chunk-SMNFI2FU.js";
 import {
   DEFAULT_CACHE_TTL_MS,
   SANDBOX_RUNTIME_PROFILE_IDS,
-  createOpenPondSandboxClient,
   getCachedApps,
   getCachedTools,
   getDeploymentLogs,
   getDeploymentStatus,
   listApps,
+  listConfiguredProfiles,
   listUserTools,
   loadConfig,
   saveGlobalConfig,
   setCachedApps,
   setCachedTools
-} from "./chunk-ZI4GDAUB.js";
+} from "./chunk-DBHSOTYZ.js";
 import {
   DEFAULT_OPENPOND_API_BASE_URL,
   DEFAULT_OPENPOND_WEB_BASE_URL
@@ -288,6 +291,99 @@ async function promptForPath(defaultPath) {
   }
 }
 
+// ../../packages/sdk/src/work.ts
+var MAX_WORK_INPUT_BYTES = 100 * 1024 * 1024;
+var WORK_OUTPUT_MIME_TYPES = Object.freeze({
+  ".avif": "image/avif",
+  ".csv": "text/csv",
+  ".docx": "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+  ".gif": "image/gif",
+  ".html": "text/html",
+  ".jpeg": "image/jpeg",
+  ".jpg": "image/jpeg",
+  ".json": "application/json",
+  ".m4a": "audio/mp4",
+  ".md": "text/markdown",
+  ".mov": "video/quicktime",
+  ".mp3": "audio/mpeg",
+  ".mp4": "video/mp4",
+  ".pdf": "application/pdf",
+  ".png": "image/png",
+  ".pptx": "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+  ".svg": "image/svg+xml",
+  ".tsv": "text/tab-separated-values",
+  ".txt": "text/plain",
+  ".wav": "audio/wav",
+  ".webm": "video/webm",
+  ".webp": "image/webp",
+  ".xlsx": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
+});
+
+// src/cli/common/vercel-protection.ts
+import { spawnSync } from "node:child_process";
+import path from "node:path";
+function ensureStagingVercelProtectionBypass(requestUrl, options = {}) {
+  const env = options.env ?? process.env;
+  if (env.VERCEL_AUTOMATION_BYPASS_SECRET?.trim()) return true;
+  if (!isOpenPondStagingUrl(requestUrl)) return false;
+  const cwd = path.resolve(options.cwd ?? process.cwd());
+  const projectDirectories = candidateProjectDirectories(cwd, env);
+  const run = options.run ?? runProtectionCommand;
+  const command = process.platform === "win32" ? "vercel.cmd" : "vercel";
+  for (const projectDirectory of projectDirectories) {
+    const result = run({
+      command,
+      args: ["project", "protection", "--format", "json"],
+      cwd: projectDirectory,
+      env
+    });
+    if (result.status !== 0 || !result.stdout.trim()) continue;
+    const secret = vercelProtectionBypassSecret(result.stdout);
+    if (!secret) continue;
+    env.VERCEL_AUTOMATION_BYPASS_SECRET = secret;
+    return true;
+  }
+  return false;
+}
+function vercelProtectionBypassSecret(rawProtectionJson) {
+  try {
+    const payload = JSON.parse(rawProtectionJson);
+    const entries = Object.entries(payload.protectionBypass ?? {});
+    const selected = entries.find(([, metadata]) => metadata?.isEnvVar === true) ?? entries[0];
+    return selected?.[0]?.trim() || null;
+  } catch {
+    return null;
+  }
+}
+function isOpenPondStagingUrl(requestUrl) {
+  try {
+    const hostname = new URL(requestUrl).hostname.toLowerCase();
+    return hostname === "staging.openpond.ai" || hostname === "staging-api.openpond.ai" || hostname.endsWith(".staging-api.openpond.ai");
+  } catch {
+    return false;
+  }
+}
+function candidateProjectDirectories(cwd, env) {
+  const configured = env.OPENPOND_VERCEL_PROJECT_DIR?.trim();
+  return [.../* @__PURE__ */ new Set([
+    ...configured ? [path.resolve(cwd, configured)] : [],
+    path.resolve(cwd, "../sandbox"),
+    cwd
+  ])];
+}
+function runProtectionCommand(input3) {
+  const result = spawnSync(input3.command, input3.args, {
+    cwd: input3.cwd,
+    env: input3.env,
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "ignore"]
+  });
+  return {
+    status: result.status,
+    stdout: typeof result.stdout === "string" ? result.stdout : ""
+  };
+}
+
 // src/cli/common/sandbox-options.ts
 var SANDBOX_WORKFLOW_MODES = [
   "readonly",
@@ -317,13 +413,57 @@ function resolveSandboxBaseUrl(config, options) {
   return base.replace(/\/$/, "");
 }
 async function resolveSandboxClient(options) {
-  const config = await loadConfig();
+  const config = await loadSandboxConfig(options);
   const uiBase = resolveBaseUrl(config);
   const apiKey = await ensureApiKey(config, uiBase);
   const sandboxApiUrl = resolveSandboxApiUrlOption(options) || process.env.OPENPOND_SANDBOX_API_URL?.trim() || null;
+  const baseUrl = resolveSandboxBaseUrl(config, options);
+  ensureStagingVercelProtectionBypass(sandboxApiUrl ?? baseUrl);
   return createOpenPondSandboxClient(
-    sandboxApiUrl ? { apiKey, sandboxApiUrl } : { apiKey, baseUrl: resolveSandboxBaseUrl(config, options) }
+    sandboxApiUrl ? { apiKey, sandboxApiUrl } : { apiKey, baseUrl }
+  );
+}
+async function loadSandboxConfig(options) {
+  const environment = sandboxEnvironmentOption(options);
+  if (!environment) return loadConfig();
+  const profiles = await listConfiguredProfiles();
+  const requestedAccount = typeof options.account === "string" ? options.account.trim().toLowerCase() : typeof options.profile === "string" ? options.profile.trim().toLowerCase() : "";
+  const matches = profiles.filter(
+    (profile) => profileMatchesEnvironment(profile, environment) && (!requestedAccount || profile.handle.toLowerCase() === requestedAccount)
+  );
+  const selected = matches.find((profile) => profile.isActive) ?? (matches.length === 1 ? matches[0] : null);
+  if (!selected) {
+    throw new Error(
+      matches.length === 0 ? `no saved ${environment} OpenPond account found; run openpond login for that environment first` : `multiple saved ${environment} OpenPond accounts found; pass --account and --base-url to select one`
+    );
+  }
+  return loadConfig({
+    account: selected.handle,
+    ...selected.baseUrl ? { baseUrl: selected.baseUrl } : {}
+  });
+}
+function sandboxEnvironmentOption(options) {
+  const value = typeof options.env === "string" ? options.env.trim().toLowerCase() : typeof options.environment === "string" ? options.environment.trim().toLowerCase() : "";
+  if (!value) return null;
+  if (value !== "production" && value !== "staging") {
+    throw new Error("sandbox env must be staging or production");
+  }
+  return value;
+}
+function profileMatchesEnvironment(profile, environment) {
+  const hosts = [profile.baseUrl, profile.apiBaseUrl].flatMap((value) => {
+    if (!value) return [];
+    try {
+      return [new URL(value).hostname.toLowerCase()];
+    } catch {
+      return [];
+    }
+  });
+  const isStaging = hosts.some(
+    (hostname) => hostname === "staging.openpond.ai" || hostname === "staging-api.openpond.ai" || hostname.endsWith(".staging-api.openpond.ai")
   );
+  if (environment === "staging") return isStaging;
+  return !isStaging && profile.environment?.toLowerCase() === "production";
 }
 function parseSandboxWorkflowModeOption(value) {
   if (value === void 0) return void 0;

package/dist/chunks/{chunk-GB6VUZUA.js → chunk-JIEUB6OS.js}

@@ -1,7 +1,7 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
 import {
   writePrivateJsonFile
-} from "./chunk-ZI4GDAUB.js";
+} from "./chunk-DBHSOTYZ.js";
 
 // ../../packages/cloud/src/profile/source-upload-cache.ts
 import { createHash } from "node:crypto";

package/dist/chunks/{chunk-HS2AGRDV.js → chunk-JJPAMKXZ.js}

@@ -3,7 +3,7 @@ import { createRequire as __openpondCreateRequire } from "node:module"; var requ
 // ../server/src/constants.ts
 var DEFAULT_HOST = "127.0.0.1";
 var DEFAULT_PORT = 17874;
-var VERSION = "0.0.38";
+var VERSION = "0.0.39";
 var HOSTED_CHAT_SYSTEM_PROMPT = "You are OpenPond Chat. Respond in the user's language. If the user's latest message is language-neutral, ambiguous, or only a short test, respond in English. Be concise and directly answer the latest request. Do not use emojis. Use Markdown when it improves scanability. If you emit reasoning or thinking content, keep it sparse and user-readable: at most one short sentence for major progress, decisions, or blockers. Omit reasoning for routine searches, reads, tool calls, and obvious next steps. Do not restate the user request, narrate every action, or include code blocks, code excerpts, diffs, raw tool payloads, or markdown examples in reasoning. Put necessary code or exact snippets only in the final assistant answer. When the user asks to show or preview an image that is available as a workspace path or signed image URL, use Markdown image syntax like ![description](path-or-url) instead of a bare path or raw HTML. For workspace-backed answers, use a Codex-style shape: brief outcome first, then Changed Files if files changed, then Verification if checks ran. End with a concise final answer that summarizes the result and verification when relevant. Do not mention raw tool JSON, internal repo paths, or origin/remote URLs unless the user explicitly asks for them or they are necessary to explain a git/deploy failure.";
 var APP_PREFERENCES_CACHE_TYPE = "app_preferences";
 var APP_PREFERENCES_CACHE_KEY = "global";

package/dist/chunks/{chunk-GDZYDLEL.js → chunk-JRROTGQT.js}

@@ -4,111 +4,11 @@ import {
   getAnyCliOptionKind,
   getCliCommandDefinition,
   getCliOptionKind
-} from "./chunk-XCATKTK3.js";
-import {
-  DEFAULT_OPENPOND_API_BASE_URL,
-  DEFAULT_OPENPOND_WEB_BASE_URL
-} from "./chunk-KSRWKXRB.js";
+} from "./chunk-3CDPPVLE.js";
 import {
   parseJsonOption
 } from "./chunk-MUMPWI4O.js";
 
-// src/cli/common/urls.ts
-var DEFAULT_OPENPOND_API_HOST = new URL(DEFAULT_OPENPOND_API_BASE_URL).hostname;
-var DEFAULT_OPENPOND_WEB_HOST = new URL(DEFAULT_OPENPOND_WEB_BASE_URL).hostname;
-function resolveAccountOption(options) {
-  const raw = typeof options.account === "string" ? options.account : typeof options.profile === "string" ? options.profile : null;
-  if (!raw) return null;
-  const trimmed = raw.trim();
-  if (!trimmed || trimmed === "true") {
-    throw new Error("account must be a non-empty value");
-  }
-  return trimmed;
-}
-function resolveBaseUrlOption(options) {
-  const raw = typeof options.baseUrl === "string" ? options.baseUrl : typeof options.baseurl === "string" ? options.baseurl : null;
-  if (!raw) return null;
-  const trimmed = raw.trim();
-  if (!trimmed || trimmed === "true") {
-    throw new Error("baseurl must be a non-empty value");
-  }
-  return trimmed.replace(/\/$/, "");
-}
-function resolveApiBaseUrlOption(options) {
-  const raw = typeof options.apiBaseUrl === "string" ? options.apiBaseUrl : typeof options.apiBaseurl === "string" ? options.apiBaseurl : null;
-  if (!raw) return null;
-  const trimmed = raw.trim();
-  if (!trimmed || trimmed === "true") {
-    throw new Error("api-base-url must be a non-empty value");
-  }
-  return trimmed.replace(/\/$/, "");
-}
-function resolveChatApiBaseUrlOption(options) {
-  const raw = typeof options.chatApiBaseUrl === "string" ? options.chatApiBaseUrl : typeof options.chatApiBaseurl === "string" ? options.chatApiBaseurl : typeof options.chatApiUrl === "string" ? options.chatApiUrl : null;
-  if (!raw) return null;
-  const trimmed = raw.trim();
-  if (!trimmed || trimmed === "true") {
-    throw new Error("chat-api-base-url must be a non-empty value");
-  }
-  return trimmed.replace(/\/$/, "");
-}
-function resolveSandboxApiUrlOption(options) {
-  const raw = typeof options.sandboxApiUrl === "string" ? options.sandboxApiUrl : typeof options.sandboxApiurl === "string" ? options.sandboxApiurl : null;
-  if (!raw) return null;
-  const trimmed = raw.trim();
-  if (!trimmed || trimmed === "true") {
-    throw new Error("sandbox-api-url must be a non-empty value");
-  }
-  return trimmed.replace(/\/$/, "");
-}
-function resolveBaseUrl(config) {
-  const envBase = process.env.OPENPOND_BASE_URL;
-  const base = envBase || config.baseUrl || DEFAULT_OPENPOND_WEB_BASE_URL;
-  return base.replace(/\/$/, "");
-}
-function mapUiBaseToApiBase(baseUrl) {
-  if (!baseUrl) return null;
-  const trimmed = baseUrl.replace(/\/$/, "");
-  try {
-    const url = new URL(trimmed);
-    const host = url.hostname.toLowerCase();
-    if (host === DEFAULT_OPENPOND_WEB_HOST || host === "openpond.live" || host === "www.openpond.live") {
-      return DEFAULT_OPENPOND_API_BASE_URL;
-    }
-    if (host === DEFAULT_OPENPOND_API_HOST || host.startsWith("api.")) {
-      return trimmed;
-    }
-  } catch {
-    return null;
-  }
-  return null;
-}
-function resolvePublicApiBaseUrl(config) {
-  const envBase = process.env.OPENPOND_API_URL;
-  const configuredApiBase = config?.apiBaseUrl?.trim();
-  const mapped = mapUiBaseToApiBase(
-    process.env.OPENPOND_BASE_URL || config?.baseUrl
-  );
-  const base = envBase || configuredApiBase || mapped || DEFAULT_OPENPOND_API_BASE_URL;
-  return base.replace(/\/$/, "");
-}
-function normalizeTemplateRepoUrl(input, baseUrl) {
-  const trimmed = input.trim();
-  if (!trimmed) {
-    throw new Error("template must be non-empty");
-  }
-  if (trimmed.startsWith("http://") || trimmed.startsWith("https://")) {
-    return trimmed.endsWith(".git") ? trimmed : `${trimmed}.git`;
-  }
-  const normalizedBase = baseUrl.replace(/\/$/, "");
-  const [owner, repoRaw] = trimmed.includes("/") ? trimmed.split("/", 2) : ["openpondai", trimmed];
-  const repo = repoRaw.endsWith(".git") ? repoRaw.slice(0, -4) : repoRaw;
-  if (!owner || !repo) {
-    throw new Error("template must be <owner>/<repo> or a full https URL");
-  }
-  return `${normalizedBase}/${owner}/${repo}.git`;
-}
-
 // src/cli/common/args.ts
 var CLI_OPTION_VALUES = /* @__PURE__ */ Symbol("openpondCliOptionValues");
 var CliUsageError = class extends Error {
@@ -278,15 +178,6 @@ function validateCommandOptions(command, options) {
 }
 
 export {
-  resolveAccountOption,
-  resolveBaseUrlOption,
-  resolveApiBaseUrlOption,
-  resolveChatApiBaseUrlOption,
-  resolveSandboxApiUrlOption,
-  resolveBaseUrl,
-  mapUiBaseToApiBase,
-  resolvePublicApiBaseUrl,
-  normalizeTemplateRepoUrl,
   CliUsageError,
   parseArgs
 };