openpond 0.0.43 → 0.0.44

package/dist/chunks/{src-L2H4X4IY.js → src-22E2EIT5.js}

@@ -22,6 +22,7 @@ import {
   createHostedTurnHelpers,
   createImproveLimit,
   createImproveTargetKind,
+  createLocalHarnessEvaluationReviewScheduler,
   createLocalHarnessImprovementRuntime,
   createLocalHarnessModelToolDefinitions,
   createLocalHarnessSettingsRoutePayloads,
@@ -78,6 +79,7 @@ import {
   resolveOpenPondSandboxClient,
   resolveSelectedLocalHarnessRelease,
   resolveWorkspaceExecutionTarget,
+  reviewSelectedLocalHarnessEvaluation,
   runHostedContextCompaction,
   safeChatAttachmentPathSegment,
   sandboxRequestPayload,
@@ -96,14 +98,14 @@ import {
   workspaceHasHead,
   workspaceToolExperienceBlocker,
   writeWorkspaceFile
-} from "./chunk-SBVJGA3Y.js";
+} from "./chunk-6GLNUWY2.js";
 import {
   runOpenPondServerCli
-} from "./chunk-YYLUURQ4.js";
+} from "./chunk-JBUNQVLP.js";
 import {
   createAppServer,
   runAgentCompaction
-} from "./chunk-YEKQWRBS.js";
+} from "./chunk-SLTKA5AW.js";
 import {
   createOpenPondRepoApp,
   getBundledRuntimeVersion,
@@ -117,7 +119,7 @@ import {
   streamOpenPondHostedChatTurn,
   switchOpenPondAccount,
   updateOpenPondAccountConfig
-} from "./chunk-ZTE6A2VE.js";
+} from "./chunk-2NP3E4GP.js";
 import {
   appWorkspacePaths,
   checkWorkspaceGitAvailability,
@@ -145,7 +147,7 @@ import {
   runCommand,
   startMacOSCommandLineToolsInstall,
   workspaceImageContentType
-} from "./chunk-DBHT62E5.js";
+} from "./chunk-HLEQDBYN.js";
 import {
   APP_PREFERENCES_CACHE_KEY,
   APP_PREFERENCES_CACHE_TYPE,
@@ -157,7 +159,7 @@ import {
   isCliEntrypoint,
   now,
   textFromUnknown
-} from "./chunk-L7SIUJEV.js";
+} from "./chunk-HKJG7VBI.js";
 import {
   AccountStateSchema,
   AdapterValidationReceiptSchema,
@@ -419,13 +421,14 @@ import {
   workFormatCapabilityForContentType,
   workspacePathFromLocalPathWorkspaceId,
   writeSourceUploadCache
-} from "./chunk-2SF6HLT7.js";
+} from "./chunk-53YZBGDC.js";
 import {
   AgentSnapshotSchema,
   AttemptReceiptSchema,
   CONNECTED_APP_INTEGRATION_SKILLS,
   EvidenceArtifactRefSchema,
   HarnessReleaseSchema,
+  HarnessReviewSourcePolicyRefSchema,
   ImmutableReleaseRefSchema,
   OPENPOND_MANIFEST_FILE_NAME,
   SANDBOX_TEMPLATE_BUILD_PLAN_FILE_NAME,
@@ -441,7 +444,9 @@ import {
   contentHash,
   createAgentSnapshot,
   createAttemptReceipt,
+  createHarnessEvaluationReviewReceipt,
   createHarnessRelease,
+  createModelImprovementQualificationReceipt,
   createRunManifest,
   createWorkEvidenceReceipt,
   createWorkFeedbackReceipt,
@@ -456,7 +461,7 @@ import {
   workEvidenceReceiptRef,
   workSourceOpaqueRef,
   workWorkspaceOpaqueRef
-} from "./chunk-M2NXTLH2.js";
+} from "./chunk-ZXWFYFFB.js";
 import {
   external_exports,
   yaml
@@ -14557,10 +14562,10 @@ function codexContextUsageRecord(input) {
 function asRecord(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
-function stringValue(record10, keys) {
-  if (!record10) return void 0;
+function stringValue(record11, keys) {
+  if (!record11) return void 0;
   for (const key of keys) {
-    const value = record10[key];
+    const value = record11[key];
     if (typeof value === "string" && value.trim()) return value;
   }
   return void 0;
@@ -14627,13 +14632,13 @@ function findImagePathValue(value, depth = 0, key = "") {
     return null;
   }
   if (typeof value !== "object") return null;
-  const record10 = value;
-  for (const [childKey, child] of Object.entries(record10)) {
+  const record11 = value;
+  for (const [childKey, child] of Object.entries(record11)) {
     if (!isImagePathKey(childKey)) continue;
     const candidate2 = findImagePathValue(child, depth + 1, childKey);
     if (candidate2) return candidate2;
   }
-  for (const [childKey, child] of Object.entries(record10)) {
+  for (const [childKey, child] of Object.entries(record11)) {
     if (isImagePathKey(childKey)) continue;
     const candidate2 = findImagePathValue(child, depth + 1, childKey);
     if (candidate2) return candidate2;
@@ -14692,18 +14697,18 @@ function codexAgentMessagePhase(item) {
 function codexAgentMessageKey(sessionId, itemId) {
   return `${sessionId}:${itemId}`;
 }
-function numberValue(record10, keys) {
-  if (!record10) return null;
+function numberValue(record11, keys) {
+  if (!record11) return null;
   for (const key of keys) {
-    const value = record10[key];
+    const value = record11[key];
     if (typeof value === "number" && Number.isFinite(value) && value >= 0) return Math.round(value);
   }
   return null;
 }
-function recordValue(record10, keys) {
-  if (!record10) return null;
+function recordValue(record11, keys) {
+  if (!record11) return null;
   for (const key of keys) {
-    const value = asRecord(record10[key]);
+    const value = asRecord(record11[key]);
     if (value) return value;
   }
   return null;
@@ -15047,15 +15052,15 @@ var ProviderCatalogCacheSchema = ProviderCatalogSchema.transform((catalog) => ca
 var providerFileQueues = /* @__PURE__ */ new Map();
 function normalizeCatalogCache(value) {
   if (!value || typeof value !== "object") return null;
-  const record10 = value;
-  const catalog = ProviderCatalogCacheSchema.safeParse(record10.catalog);
-  const fetchedAt = typeof record10.fetchedAt === "string" && record10.fetchedAt.trim() ? record10.fetchedAt : null;
+  const record11 = value;
+  const catalog = ProviderCatalogCacheSchema.safeParse(record11.catalog);
+  const fetchedAt = typeof record11.fetchedAt === "string" && record11.fetchedAt.trim() ? record11.fetchedAt : null;
   if (!catalog.success || !fetchedAt) return null;
   return {
     source: "hosted",
     fetchedAt,
-    lastError: typeof record10.lastError === "string" ? record10.lastError : null,
-    catalogHash: typeof record10.catalogHash === "string" && record10.catalogHash.trim() ? record10.catalogHash : null,
+    lastError: typeof record11.lastError === "string" ? record11.lastError : null,
+    catalogHash: typeof record11.catalogHash === "string" && record11.catalogHash.trim() ? record11.catalogHash : null,
     catalog: catalog.data
   };
 }
@@ -16151,12 +16156,12 @@ function encryptValue(value, key) {
     tag: cipher.getAuthTag().toString("base64")
   };
 }
-function decryptValue(record10, key) {
-  if (!key || !record10.ciphertext || !record10.iv || !record10.tag) return null;
-  const decipher = createDecipheriv("aes-256-gcm", key, Buffer.from(record10.iv, "base64"));
-  decipher.setAuthTag(Buffer.from(record10.tag, "base64"));
+function decryptValue(record11, key) {
+  if (!key || !record11.ciphertext || !record11.iv || !record11.tag) return null;
+  const decipher = createDecipheriv("aes-256-gcm", key, Buffer.from(record11.iv, "base64"));
+  decipher.setAuthTag(Buffer.from(record11.tag, "base64"));
   return Buffer.concat([
-    decipher.update(Buffer.from(record10.ciphertext, "base64")),
+    decipher.update(Buffer.from(record11.ciphertext, "base64")),
     decipher.final()
   ]).toString("utf8");
 }
@@ -16180,34 +16185,34 @@ async function writeRawSecretsFile(secretsFilePath, value) {
 async function readProviderSecrets(paths) {
   const raw = await readRawSecretsFile(paths.secretsFilePath);
   const needsKey = Object.values(raw.providers).some(
-    (record10) => record10.source === "local_secret" || record10.source === "chatgpt_subscription"
+    (record11) => record11.source === "local_secret" || record11.source === "chatgpt_subscription"
   );
   const key = needsKey ? await readSecretKey(paths.keyFilePath) : null;
   const providers = {};
-  for (const [providerId, record10] of Object.entries(raw.providers)) {
-    const createdAt = record10.createdAt ?? record10.updatedAt ?? null;
-    const updatedAt = record10.updatedAt ?? record10.createdAt ?? null;
+  for (const [providerId, record11] of Object.entries(raw.providers)) {
+    const createdAt = record11.createdAt ?? record11.updatedAt ?? null;
+    const updatedAt = record11.updatedAt ?? record11.createdAt ?? null;
     if (!createdAt || !updatedAt) continue;
-    if (record10.source === "env") {
+    if (record11.source === "env") {
       providers[providerId] = {
         source: "env",
         value: null,
-        envVar: record10.envVar ?? null,
+        envVar: record11.envVar ?? null,
         oauth: null,
         createdAt,
         updatedAt,
-        lastValidatedAt: record10.lastValidatedAt ?? null,
-        lastError: record10.lastError ?? null
+        lastValidatedAt: record11.lastValidatedAt ?? null,
+        lastError: record11.lastError ?? null
       };
       continue;
     }
     let value = null;
     let oauth = null;
-    let lastError = record10.lastError ?? null;
+    let lastError = record11.lastError ?? null;
     try {
-      value = decryptValue(record10, key);
+      value = decryptValue(record11, key);
       if (!value) lastError = lastError ?? "Provider credential could not be decrypted.";
-      if (record10.source === "chatgpt_subscription") {
+      if (record11.source === "chatgpt_subscription") {
         oauth = parseChatGptSubscriptionCredential(value);
         value = null;
         if (!oauth) lastError = lastError ?? "Provider ChatGPT subscription credential could not be read.";
@@ -16218,13 +16223,13 @@ async function readProviderSecrets(paths) {
       lastError = error instanceof Error ? error.message : String(error);
     }
     providers[providerId] = {
-      source: record10.source,
+      source: record11.source,
       value,
       envVar: null,
       oauth,
       createdAt,
       updatedAt,
-      lastValidatedAt: record10.lastValidatedAt ?? null,
+      lastValidatedAt: record11.lastValidatedAt ?? null,
       lastError
     };
   }
@@ -16234,14 +16239,14 @@ function parseChatGptSubscriptionCredential(value) {
   if (!value) return null;
   const parsed = JSON.parse(value);
   if (!parsed || typeof parsed !== "object") return null;
-  const record10 = parsed;
-  const refreshToken = stringValue2(record10.refreshToken);
+  const record11 = parsed;
+  const refreshToken = stringValue2(record11.refreshToken);
   if (!refreshToken) return null;
   return {
-    accessToken: stringValue2(record10.accessToken),
+    accessToken: stringValue2(record11.accessToken),
     refreshToken,
-    expiresAt: typeof record10.expiresAt === "number" && Number.isFinite(record10.expiresAt) ? record10.expiresAt : 0,
-    accountId: stringValue2(record10.accountId)
+    expiresAt: typeof record11.expiresAt === "number" && Number.isFinite(record11.expiresAt) ? record11.expiresAt : 0,
+    accountId: stringValue2(record11.accountId)
   };
 }
 function parseProviderCredentialWriteRequest(input) {
@@ -16642,10 +16647,10 @@ function stringValue3(value) {
 function numberValue2(value) {
   return typeof value === "number" && Number.isFinite(value) ? value : null;
 }
-function stringMap(record10) {
+function stringMap(record11) {
   const map = /* @__PURE__ */ new Map();
-  if (!record10) return map;
-  for (const [key, value] of Object.entries(record10)) {
+  if (!record11) return map;
+  for (const [key, value] of Object.entries(record11)) {
     if (typeof value === "string" && value.trim()) map.set(key, value.trim());
   }
   return map;
@@ -16867,9 +16872,9 @@ function threadLookupCacheKey(codexHome, threadId) {
 }
 async function readCodexHistorySearchText(thread) {
   const messages = [];
-  await readJsonlRecords(thread.filePath, (record10) => {
-    const payload = asRecord3(record10.payload);
-    const responsePayload = responsePayloadFromCodexRecord(record10, payload);
+  await readJsonlRecords(thread.filePath, (record11) => {
+    const payload = asRecord3(record11.payload);
+    const responsePayload = responsePayloadFromCodexRecord(record11, payload);
     if (responsePayload?.type !== "message") return;
     const role = stringValue3(responsePayload.role);
     if (role !== "user" && role !== "assistant") return;
@@ -16883,8 +16888,8 @@ async function readCodexHistorySearchText(thread) {
 }
 async function parseCodexSessionFile(input) {
   const parser = createCodexRecordParser(input);
-  await readJsonlRecords(input.filePath, (record10) => {
-    parser.accept(record10);
+  await readJsonlRecords(input.filePath, (record11) => {
+    parser.accept(record11);
   });
   return parser.finish();
 }
@@ -16893,8 +16898,8 @@ async function parseCodexSessionTailFile(input) {
   const tail = await readTail(input.filePath, input.maxBytes);
   for (const line of tail.split(/\r?\n/)) {
     if (!line.trim()) continue;
-    const record10 = parseJson(line);
-    if (record10) parser.accept(record10);
+    const record11 = parseJson(line);
+    if (record11) parser.accept(record11);
   }
   return parser.finish();
 }
@@ -17030,11 +17035,11 @@ function createCodexRecordParser(input) {
       pushThreadGoalCleared(timestamp, turnId, "Goal cleared", true);
     }
   }
-  function accept(record10) {
-    const timestamp = isoTimestamp(record10.timestamp) ?? input.fallbackTimestamp;
+  function accept(record11) {
+    const timestamp = isoTimestamp(record11.timestamp) ?? input.fallbackTimestamp;
     latestRecordAt = latestIso([latestRecordAt, timestamp]);
-    const payload = asRecord3(record10.payload);
-    if (record10.type === "event_msg" && payload) {
+    const payload = asRecord3(record11.payload);
+    if (record11.type === "event_msg" && payload) {
       const type = stringValue3(payload.type);
       if (type === "thread_goal_updated") {
         const goal = asRecord3(payload.goal);
@@ -17100,7 +17105,7 @@ function createCodexRecordParser(input) {
         return;
       }
     }
-    const responsePayload = responsePayloadFromCodexRecord(record10, payload);
+    const responsePayload = responsePayloadFromCodexRecord(record11, payload);
     if (!responsePayload) return;
     const providerTurnId = providerTurnIdFromResponsePayload(responsePayload);
     const providerItemId = stringValue3(responsePayload.id);
@@ -17187,7 +17192,7 @@ function createCodexRecordParser(input) {
       if (role === "assistant") {
         const turnId = activeTurnId(providerTurnId);
         const phase = stringValue3(responsePayload.phase);
-        const legacyFinalAnswer = record10.type === "message";
+        const legacyFinalAnswer = record11.type === "message";
         const visibleContent = visibleCodexAssistantContent(content);
         if (visibleContent) {
           assistantIndex += 1;
@@ -17341,8 +17346,8 @@ function createCodexRecordParser(input) {
 }
 async function readPromptHistory(codexHome) {
   const entries = /* @__PURE__ */ new Map();
-  await readJsonlRecords(path8.join(codexHome, "history.jsonl"), (record10) => {
-    const payload = asRecord3(record10);
+  await readJsonlRecords(path8.join(codexHome, "history.jsonl"), (record11) => {
+    const payload = asRecord3(record11);
     const threadId = stringValue3(payload?.session_id);
     const text3 = normalizeTitleText(stringValue3(payload?.text) ?? "");
     const timestamp = isoFromEpochSeconds(numberValue2(payload?.ts));
@@ -17369,8 +17374,8 @@ async function readSessionIndex(codexHome) {
   const entries = /* @__PURE__ */ new Map();
   await readJsonlRecords(
     path8.join(codexHome, "session_index.jsonl"),
-    (record10) => {
-      const payload = asRecord3(record10);
+    (record11) => {
+      const payload = asRecord3(record11);
       const id = stringValue3(payload?.id);
       if (!id) return;
       entries.set(id, {
@@ -17402,19 +17407,19 @@ async function readCodexSessionMetadata(file) {
   if (cached && cached.mtimeMs === file.stats.mtimeMs && cached.size === file.stats.size)
     return cached.metadata;
   let metadata = { id: null, cwd: null, createdAt: null };
-  await readInitialJsonlRecords(file.filePath, 80, (record10) => {
-    const payload = asRecord3(record10.payload);
+  await readInitialJsonlRecords(file.filePath, 80, (record11) => {
+    const payload = asRecord3(record11.payload);
     if (!payload) return;
-    if (record10.type === "session_meta") {
+    if (record11.type === "session_meta") {
       metadata = {
         id: metadata.id ?? stringValue3(payload.id) ?? stringValue3(payload.session_id),
         cwd: metadata.cwd ?? stringValue3(payload.cwd),
         createdAt: metadata.createdAt ?? isoTimestamp(
-          stringValue3(payload.timestamp) ?? stringValue3(record10.timestamp)
+          stringValue3(payload.timestamp) ?? stringValue3(record11.timestamp)
         )
       };
     }
-    if (record10.type === "turn_context" && !metadata.cwd) {
+    if (record11.type === "turn_context" && !metadata.cwd) {
       metadata = {
         ...metadata,
         cwd: stringValue3(payload.cwd)
@@ -17445,11 +17450,11 @@ async function statusForCodexHistoryFile(file, fallbackUpdatedAt) {
   let latestKnownGoalRuntime = null;
   let hasRunningMarker = false;
   for (const line of tail.split(/\r?\n/)) {
-    const record10 = parseJson(line);
-    if (!record10) continue;
-    const timestamp = isoTimestamp(record10.timestamp) ?? fallbackUpdatedAt;
-    const payload = asRecord3(record10.payload);
-    if (record10.type === "event_msg" && payload) {
+    const record11 = parseJson(line);
+    if (!record11) continue;
+    const timestamp = isoTimestamp(record11.timestamp) ?? fallbackUpdatedAt;
+    const payload = asRecord3(record11.payload);
+    if (record11.type === "event_msg" && payload) {
       const type = stringValue3(payload.type);
       if (type === "thread_goal_updated") {
         const goal = asRecord3(payload.goal);
@@ -17478,7 +17483,7 @@ async function statusForCodexHistoryFile(file, fallbackUpdatedAt) {
       }
       continue;
     }
-    const responsePayload = responsePayloadFromCodexRecord(record10, payload);
+    const responsePayload = responsePayloadFromCodexRecord(record11, payload);
     if (!responsePayload) continue;
     if (responsePayload.type === "message") {
       const role = stringValue3(responsePayload.role);
@@ -17500,7 +17505,7 @@ async function statusForCodexHistoryFile(file, fallbackUpdatedAt) {
       }
       if (role === "assistant" && content) {
         latestAssistantAt = timestamp;
-        if (stringValue3(responsePayload.phase) === "final_answer" || record10.type === "message") {
+        if (stringValue3(responsePayload.phase) === "final_answer" || record11.type === "message") {
           latestFinalAt = timestamp;
         }
       }
@@ -17542,8 +17547,8 @@ async function readJsonlRecords(filePath, onRecord) {
   const reader = createInterface({ input: stream, crlfDelay: Infinity });
   for await (const line of reader) {
     if (!line.trim()) continue;
-    const record10 = parseJson(line);
-    if (record10) onRecord(record10);
+    const record11 = parseJson(line);
+    if (record11) onRecord(record11);
   }
 }
 async function readInitialJsonlRecords(filePath, maxRecords, onRecord) {
@@ -17553,9 +17558,9 @@ async function readInitialJsonlRecords(filePath, maxRecords, onRecord) {
   try {
     for await (const line of reader) {
       if (!line.trim()) continue;
-      const record10 = parseJson(line);
-      if (record10) {
-        onRecord(record10);
+      const record11 = parseJson(line);
+      if (record11) {
+        onRecord(record11);
         count += 1;
       }
       if (count >= maxRecords) return;
@@ -17591,8 +17596,8 @@ function titleForThread(indexEntry, prompt) {
   );
 }
 function commandFromToolCall(name, args) {
-  const record10 = asRecord3(args);
-  return stringValue3(record10?.cmd) ?? stringValue3(record10?.command) ?? stringValue3(record10?.tool) ?? name;
+  const record11 = asRecord3(args);
+  return stringValue3(record11?.cmd) ?? stringValue3(record11?.command) ?? stringValue3(record11?.tool) ?? name;
 }
 function commandFromCustomToolCall(name, input) {
   if (name !== "exec") return null;
@@ -17625,10 +17630,10 @@ function isCodexToolCall(type) {
 function isCodexToolCallOutput(type) {
   return type === "function_call_output" || type === "custom_tool_call_output";
 }
-function responsePayloadFromCodexRecord(record10, payload) {
-  if (record10.type === "response_item") return payload;
-  if (!isLegacyResponseItemType(record10.type)) return null;
-  return asRecord3(record10);
+function responsePayloadFromCodexRecord(record11, payload) {
+  if (record11.type === "response_item") return payload;
+  if (!isLegacyResponseItemType(record11.type)) return null;
+  return asRecord3(record11);
 }
 function providerTurnIdFromResponsePayload(payload) {
   const metadata = asRecord3(
@@ -17686,10 +17691,10 @@ function goalRecordIsActive2(goal) {
 }
 async function latestKnownActiveGoalRuntimeForCodexHistoryFile(file, fallbackUpdatedAt) {
   let latestKnownGoalRuntime = null;
-  await readJsonlRecords(file.filePath, (record10) => {
-    const timestamp = isoTimestamp(record10.timestamp) ?? fallbackUpdatedAt;
-    const payload = asRecord3(record10.payload);
-    if (record10.type === "event_msg" && payload) {
+  await readJsonlRecords(file.filePath, (record11) => {
+    const timestamp = isoTimestamp(record11.timestamp) ?? fallbackUpdatedAt;
+    const payload = asRecord3(record11.payload);
+    if (record11.type === "event_msg" && payload) {
       const type = stringValue3(payload.type);
       if (type === "thread_goal_updated") {
         const goal = asRecord3(payload.goal);
@@ -17705,7 +17710,7 @@ async function latestKnownActiveGoalRuntimeForCodexHistoryFile(file, fallbackUpd
         return;
       }
     }
-    const responsePayload = responsePayloadFromCodexRecord(record10, payload);
+    const responsePayload = responsePayloadFromCodexRecord(record11, payload);
     if (responsePayload?.type !== "message" || stringValue3(responsePayload.role) !== "user")
       return;
     const internalGoalRuntime = activeGoalRuntimeFromCodexInternalContext(
@@ -17724,21 +17729,21 @@ function sessionMetadataWithCodexGoalRuntime(metadata, goalRuntime) {
   return Object.keys(next).length > 0 ? next : void 0;
 }
 function codexGoalRuntimeFromSessionMetadata(metadata) {
-  const record10 = asRecord3(metadata?.codexGoalRuntime);
-  if (!record10 || stringValue3(record10.provider) !== "codex") return null;
-  const objective = stringValue3(record10.objective);
-  const status = stringValue3(record10.status);
-  const updatedAt = isoTimestamp(record10.updatedAt);
+  const record11 = asRecord3(metadata?.codexGoalRuntime);
+  if (!record11 || stringValue3(record11.provider) !== "codex") return null;
+  const objective = stringValue3(record11.objective);
+  const status = stringValue3(record11.status);
+  const updatedAt = isoTimestamp(record11.updatedAt);
   if (!objective || !status || !updatedAt) return null;
   return {
     provider: "codex",
     objective,
     status,
     timeUsedSeconds: nonNegativeInteger(
-      numberValue2(record10.timeUsedSeconds) ?? 0
+      numberValue2(record11.timeUsedSeconds) ?? 0
     ),
-    tokensUsed: nullableNonNegativeInteger(numberValue2(record10.tokensUsed)),
-    tokenBudget: nullableNonNegativeInteger(numberValue2(record10.tokenBudget)),
+    tokensUsed: nullableNonNegativeInteger(numberValue2(record11.tokensUsed)),
+    tokenBudget: nullableNonNegativeInteger(numberValue2(record11.tokenBudget)),
     updatedAt
   };
 }
@@ -17781,8 +17786,8 @@ function textFromContent(content) {
   if (!Array.isArray(content)) return "";
   return content.map((item) => {
     if (typeof item === "string") return item;
-    const record10 = asRecord3(item);
-    return stringValue3(record10?.text) ?? "";
+    const record11 = asRecord3(item);
+    return stringValue3(record11?.text) ?? "";
   }).filter(Boolean).join("\n").trim();
 }
 var CODEX_ATTACHMENT_CONTEXT_PATTERN = /(?:^|\n)\s*<attachments>\s*([\s\S]*?)\s*<\/attachments>\s*/g;
@@ -17874,11 +17879,11 @@ function codexUserContentParts(content) {
       text3.push(item);
       continue;
     }
-    const record10 = asRecord3(item);
-    const itemText = stringValue3(record10?.text);
+    const record11 = asRecord3(item);
+    const itemText = stringValue3(record11?.text);
     if (itemText) text3.push(itemText);
-    const imageUrl = stringValue3(record10?.image_url);
-    if (imageUrl && stringValue3(record10?.type) === "input_image")
+    const imageUrl = stringValue3(record11?.image_url);
+    if (imageUrl && stringValue3(record11?.type) === "input_image")
       inputImages.push(imageUrl);
   }
   return {
@@ -19906,11 +19911,11 @@ var WorkspaceLspClient = class {
   }
   handleNotification(method, params) {
     if (method !== "textDocument/publishDiagnostics") return;
-    const record10 = asRecord4(params);
-    const uri = typeof record10?.uri === "string" ? record10.uri : null;
+    const record11 = asRecord4(params);
+    const uri = typeof record11?.uri === "string" ? record11.uri : null;
     if (!uri?.startsWith("file://")) return;
     const filePath = normalizeAbsolutePath(fileURLToPath(uri));
-    const diagnostics = Array.isArray(record10?.diagnostics) ? record10.diagnostics : [];
+    const diagnostics = Array.isArray(record11?.diagnostics) ? record11.diagnostics : [];
     this.diagnostics.set(
       filePath,
       diagnostics.map((item) => normalizeDiagnostic(filePath, item)).filter(Boolean)
@@ -19961,11 +19966,11 @@ function assertLspTextSize(sizeBytes, filePath) {
   );
 }
 function normalizeDiagnostic(filePath, value) {
-  const record10 = asRecord4(value);
-  const range = asRecord4(record10?.range);
+  const record11 = asRecord4(value);
+  const range = asRecord4(record11?.range);
   const start = asRecord4(range?.start);
   const end = asRecord4(range?.end);
-  if (!record10 || !range || !start || !end || typeof record10.message !== "string") return null;
+  if (!record11 || !range || !start || !end || typeof record11.message !== "string") return null;
   return {
     path: filePath,
     range: {
@@ -19978,10 +19983,10 @@ function normalizeDiagnostic(filePath, value) {
         character: numberOrZero(end.character)
       }
     },
-    severity: severityName(record10.severity),
-    message: record10.message,
-    source: typeof record10.source === "string" ? record10.source : null,
-    code: typeof record10.code === "string" || typeof record10.code === "number" ? String(record10.code) : null
+    severity: severityName(record11.severity),
+    message: record11.message,
+    source: typeof record11.source === "string" ? record11.source : null,
+    code: typeof record11.code === "string" || typeof record11.code === "number" ? String(record11.code) : null
   };
 }
 function severityName(input) {
@@ -20776,8 +20781,8 @@ function asRecord5(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
 function nonEmptyRecord(value) {
-  const record10 = asRecord5(value);
-  return Object.keys(record10).length > 0 ? record10 : null;
+  const record11 = asRecord5(value);
+  return Object.keys(record11).length > 0 ? record11 : null;
 }
 function asRecordArray(value) {
   return Array.isArray(value) ? value.map(asRecord5).filter((item) => Object.keys(item).length > 0) : [];
@@ -21751,11 +21756,11 @@ function sha256Hex(contents) {
 function dependencySetupCommands(value) {
   if (!value || typeof value !== "object" || Array.isArray(value))
     return [];
-  const record10 = value;
-  if (Array.isArray(record10.commands)) {
-    return record10.commands.filter((command) => typeof command === "string" && command.trim() !== "");
+  const record11 = value;
+  if (Array.isArray(record11.commands)) {
+    return record11.commands.filter((command) => typeof command === "string" && command.trim() !== "");
   }
-  return typeof record10.installCommand === "string" && record10.installCommand.trim() ? [record10.installCommand.trim()] : [];
+  return typeof record11.installCommand === "string" && record11.installCommand.trim() ? [record11.installCommand.trim()] : [];
 }
 function mergeManifestSetupCommands(manifest, commands) {
   if (commands.length === 0)
@@ -22143,12 +22148,12 @@ async function readJsonFileIfExists(filePath) {
     return null;
   }
 }
-function setupRequirementIdentity(record10) {
+function setupRequirementIdentity(record11) {
   return [
-    text(record10.actionId) ?? "",
-    text(record10.actionName) ?? "",
-    text(record10.kind) ?? text(record10.type) ?? "",
-    text(record10.label) ?? text(record10.name) ?? text(record10.key) ?? text(record10.provider) ?? text(record10.tool) ?? text(record10.command) ?? text(record10.packageName) ?? ""
+    text(record11.actionId) ?? "",
+    text(record11.actionName) ?? "",
+    text(record11.kind) ?? text(record11.type) ?? "",
+    text(record11.label) ?? text(record11.name) ?? text(record11.key) ?? text(record11.provider) ?? text(record11.tool) ?? text(record11.command) ?? text(record11.packageName) ?? ""
   ].join(":");
 }
 function readAgentSdkProjectPackageJson(projectPath) {
@@ -25199,15 +25204,15 @@ function usageTotals(records, rangeEnd) {
   let failedRequests = 0;
   let missingUsageRequests = 0;
   let longestRequestMs = null;
-  for (const record10 of records) {
-    addRecord(totals, record10);
-    models.add(`${record10.provider}\0${record10.model}`);
-    activeDateKeys.add(localDateKey(record10.startedAt));
-    if (record10.status === "completed") completedRequests += 1;
-    if (record10.status === "failed") failedRequests += 1;
-    if (record10.source === "missing") missingUsageRequests += 1;
-    if (record10.durationMs !== null) {
-      longestRequestMs = Math.max(longestRequestMs ?? 0, record10.durationMs);
+  for (const record11 of records) {
+    addRecord(totals, record11);
+    models.add(`${record11.provider}\0${record11.model}`);
+    activeDateKeys.add(localDateKey(record11.startedAt));
+    if (record11.status === "completed") completedRequests += 1;
+    if (record11.status === "failed") failedRequests += 1;
+    if (record11.source === "missing") missingUsageRequests += 1;
+    if (record11.durationMs !== null) {
+      longestRequestMs = Math.max(longestRequestMs ?? 0, record11.durationMs);
     }
   }
   const daily = dailyBuckets(records);
@@ -25272,21 +25277,21 @@ function localDayDistance(left, right) {
 }
 function dailyBuckets(records) {
   const days = /* @__PURE__ */ new Map();
-  for (const record10 of records) {
-    const date = localDateKey(record10.startedAt);
-    const modelKey = `${record10.provider}\0${record10.model}`;
+  for (const record11 of records) {
+    const date = localDateKey(record11.startedAt);
+    const modelKey = `${record11.provider}\0${record11.model}`;
     let models = days.get(date);
     if (!models) {
       models = /* @__PURE__ */ new Map();
       days.set(date, models);
     }
     const current = models.get(modelKey) ?? {
-      provider: record10.provider,
-      model: record10.model,
+      provider: record11.provider,
+      model: record11.model,
       totalTokens: 0,
       requests: 0
     };
-    current.totalTokens += record10.totalTokens ?? 0;
+    current.totalTokens += record11.totalTokens ?? 0;
     current.requests += 1;
     models.set(modelKey, current);
   }
@@ -25304,15 +25309,15 @@ function dailyBuckets(records) {
 }
 function modelBreakdowns(records) {
   const groups = /* @__PURE__ */ new Map();
-  for (const record10 of records) {
-    const key = `${record10.provider}\0${record10.model}\0${record10.route}`;
+  for (const record11 of records) {
+    const key = `${record11.provider}\0${record11.model}\0${record11.route}`;
     const group = groups.get(key) ?? {
-      provider: record10.provider,
-      model: record10.model,
-      route: record10.route,
+      provider: record11.provider,
+      model: record11.model,
+      route: record11.route,
       totals: accumulator()
     };
-    addRecord(group.totals, record10);
+    addRecord(group.totals, record11);
     groups.set(key, group);
   }
   return [...groups.values()].map((group) => ({
@@ -25324,11 +25329,11 @@ function modelBreakdowns(records) {
 }
 function threadBreakdowns(records, sessionById) {
   const groups = /* @__PURE__ */ new Map();
-  for (const record10 of records) {
-    if (!record10.sessionId) continue;
-    const totals = groups.get(record10.sessionId) ?? accumulator();
-    addRecord(totals, record10);
-    groups.set(record10.sessionId, totals);
+  for (const record11 of records) {
+    if (!record11.sessionId) continue;
+    const totals = groups.get(record11.sessionId) ?? accumulator();
+    addRecord(totals, record11);
+    groups.set(record11.sessionId, totals);
   }
   return [...groups.entries()].map(([sessionId, totals]) => {
     const session = sessionById.get(sessionId);
@@ -25343,17 +25348,17 @@ function threadBreakdowns(records, sessionById) {
 }
 function commandBreakdowns(records) {
   const groups = /* @__PURE__ */ new Map();
-  for (const record10 of records) {
-    const commandName = record10.attribution.commandName;
+  for (const record11 of records) {
+    const commandName = record11.attribution.commandName;
     if (!commandName) continue;
-    const commandSource = record10.attribution.commandSource;
+    const commandSource = record11.attribution.commandSource;
     const key = `${commandName}\0${commandSource ?? ""}`;
     const group = groups.get(key) ?? {
       commandName,
       commandSource,
       totals: accumulator()
     };
-    addRecord(group.totals, record10);
+    addRecord(group.totals, record11);
     groups.set(key, group);
   }
   return [...groups.values()].map((group) => ({
@@ -25364,10 +25369,10 @@ function commandBreakdowns(records) {
 }
 function routeBreakdowns(records) {
   const groups = /* @__PURE__ */ new Map();
-  for (const record10 of records) {
-    const totals = groups.get(record10.route) ?? accumulator();
-    addRecord(totals, record10);
-    groups.set(record10.route, totals);
+  for (const record11 of records) {
+    const totals = groups.get(record11.route) ?? accumulator();
+    addRecord(totals, record11);
+    groups.set(record11.route, totals);
   }
   return [...groups.entries()].map(([route, totals]) => ({
     route,
@@ -25376,10 +25381,10 @@ function routeBreakdowns(records) {
 }
 function statusBreakdowns(records) {
   const groups = /* @__PURE__ */ new Map();
-  for (const record10 of records) {
-    const totals = groups.get(record10.status) ?? accumulator();
-    addRecord(totals, record10);
-    groups.set(record10.status, totals);
+  for (const record11 of records) {
+    const totals = groups.get(record11.status) ?? accumulator();
+    addRecord(totals, record11);
+    groups.set(record11.status, totals);
   }
   return [...groups.entries()].map(([status, totals]) => ({
     status,
@@ -25388,10 +25393,10 @@ function statusBreakdowns(records) {
 }
 function sourceBreakdowns(records) {
   const groups = /* @__PURE__ */ new Map();
-  for (const record10 of records) {
-    const totals = groups.get(record10.source) ?? accumulator();
-    addRecord(totals, record10);
-    groups.set(record10.source, totals);
+  for (const record11 of records) {
+    const totals = groups.get(record11.source) ?? accumulator();
+    addRecord(totals, record11);
+    groups.set(record11.source, totals);
   }
   return [...groups.entries()].map(([source, totals]) => ({
     source,
@@ -25414,28 +25419,28 @@ function accumulator() {
     lastSeenAt: null
   };
 }
-function addRecord(accumulator2, record10) {
+function addRecord(accumulator2, record11) {
   accumulator2.requests += 1;
-  if (record10.promptTokens !== null) {
-    accumulator2.promptTokens += record10.promptTokens;
+  if (record11.promptTokens !== null) {
+    accumulator2.promptTokens += record11.promptTokens;
     accumulator2.promptTokenRows += 1;
   }
-  if (record10.completionTokens !== null) {
-    accumulator2.completionTokens += record10.completionTokens;
+  if (record11.completionTokens !== null) {
+    accumulator2.completionTokens += record11.completionTokens;
     accumulator2.completionTokenRows += 1;
   }
-  if (record10.totalTokens !== null) {
-    accumulator2.totalTokens += record10.totalTokens;
+  if (record11.totalTokens !== null) {
+    accumulator2.totalTokens += record11.totalTokens;
     accumulator2.totalTokenRows += 1;
   }
-  if (record10.durationMs !== null) accumulator2.durations.push(record10.durationMs);
-  if (record10.firstTokenMs !== null) accumulator2.firstTokenDurations.push(record10.firstTokenMs);
-  if (record10.status === "failed" || record10.status === "interrupted") accumulator2.failures += 1;
-  if (!accumulator2.firstSeenAt || record10.startedAt < accumulator2.firstSeenAt) {
-    accumulator2.firstSeenAt = record10.startedAt;
+  if (record11.durationMs !== null) accumulator2.durations.push(record11.durationMs);
+  if (record11.firstTokenMs !== null) accumulator2.firstTokenDurations.push(record11.firstTokenMs);
+  if (record11.status === "failed" || record11.status === "interrupted") accumulator2.failures += 1;
+  if (!accumulator2.firstSeenAt || record11.startedAt < accumulator2.firstSeenAt) {
+    accumulator2.firstSeenAt = record11.startedAt;
   }
-  if (!accumulator2.lastSeenAt || record10.startedAt > accumulator2.lastSeenAt) {
-    accumulator2.lastSeenAt = record10.startedAt;
+  if (!accumulator2.lastSeenAt || record11.startedAt > accumulator2.lastSeenAt) {
+    accumulator2.lastSeenAt = record11.startedAt;
   }
 }
 function breakdownTotals(accumulator2) {
@@ -26752,12 +26757,12 @@ function signedLocalVideoUrlPayload(input, requestUrl, token) {
   return { url: url.toString(), expiresAt };
 }
 function signedChatAttachmentImageUrlPayload(input, requestUrl, token) {
-  const record10 = inputRecord(input);
-  const sessionId = requiredSignedAssetString(record10.sessionId, "sessionId", 200);
-  const turnId = requiredSignedAssetString(record10.turnId, "turnId", 200);
-  const attachmentId = requiredSignedAssetString(record10.attachmentId, "attachmentId", 200);
-  const rawStorageName = requiredSignedAssetString(record10.storageName, "storageName", 240);
-  const rawContentType = requiredSignedAssetString(record10.contentType, "contentType", 160);
+  const record11 = inputRecord(input);
+  const sessionId = requiredSignedAssetString(record11.sessionId, "sessionId", 200);
+  const turnId = requiredSignedAssetString(record11.turnId, "turnId", 200);
+  const attachmentId = requiredSignedAssetString(record11.attachmentId, "attachmentId", 200);
+  const rawStorageName = requiredSignedAssetString(record11.storageName, "storageName", 240);
+  const rawContentType = requiredSignedAssetString(record11.contentType, "contentType", 160);
   const storageName = normalizeSignedChatAttachmentStorageName(rawStorageName);
   const contentType2 = normalizeSignedChatAttachmentContentType(rawContentType);
   if (!storageName) throw new Error("Chat attachment image storage name is invalid.");
@@ -27066,10 +27071,10 @@ async function handleExtensionRoute({
   if (request.method === "POST" && updateMatch) {
     const source = decodedSource(updateMatch[1], updateMatch[2]);
     const body = await readJson(request);
-    const record10 = body && typeof body === "object" && !Array.isArray(body) ? body : {};
+    const record11 = body && typeof body === "object" && !Array.isArray(body) ? body : {};
     sendJson(response, 200, await deps.extensionUpdatePayload({
       source,
-      ...typeof record10.ref === "string" ? { ref: record10.ref } : {}
+      ...typeof record11.ref === "string" ? { ref: record11.ref } : {}
     }));
     return true;
   }
@@ -27103,6 +27108,18 @@ async function handleHarnessRoutes({
     sendJson(response, 200, await deps.updateHarnessBackgroundReviewPayload(await readJson(request)));
     return true;
   }
+  if (request.method === "POST" && requestUrl.pathname === "/v1/harness/evaluation-review") {
+    sendJson(response, 200, await deps.reviewHarnessEvaluationPayload(await readJson(request)));
+    return true;
+  }
+  if (request.method === "POST" && requestUrl.pathname === "/v1/harness/evaluation-review/settings") {
+    sendJson(
+      response,
+      200,
+      await deps.updateHarnessEvaluationReviewSchedulePayload(await readJson(request))
+    );
+    return true;
+  }
   if (request.method === "POST" && requestUrl.pathname === "/v1/harness/diff") {
     sendJson(response, 200, await deps.harnessDiffPayload(await readJson(request)));
     return true;
@@ -30576,9 +30593,9 @@ function localSandboxTemplateUploadsArg(value) {
   if (!Array.isArray(value)) return [];
   return value.flatMap((item) => {
     if (!item || typeof item !== "object" || Array.isArray(item)) return [];
-    const record10 = item;
-    const uploadPath = typeof record10.path === "string" ? record10.path.trim() : "";
-    const contentsBase64 = typeof record10.contentsBase64 === "string" ? record10.contentsBase64 : "";
+    const record11 = item;
+    const uploadPath = typeof record11.path === "string" ? record11.path.trim() : "";
+    const contentsBase64 = typeof record11.contentsBase64 === "string" ? record11.contentsBase64 : "";
     return uploadPath && contentsBase64 ? [{ path: uploadPath, contentsBase64 }] : [];
   });
 }
@@ -30591,12 +30608,12 @@ function sandboxTemplateEnvArg(value) {
     if (!item || typeof item !== "object" || Array.isArray(item)) {
       throw new Error("Sandbox template env entries must be objects.");
     }
-    const record10 = item;
-    if ("value" in record10) {
+    const record11 = item;
+    if ("value" in record11) {
       throw new Error("Sandbox template env entries must use secretRef, not inline values.");
     }
-    const name = typeof record10.name === "string" ? record10.name.trim() : "";
-    const secretRef = typeof record10.secretRef === "string" ? record10.secretRef.trim() : "";
+    const name = typeof record11.name === "string" ? record11.name.trim() : "";
+    const secretRef = typeof record11.secretRef === "string" ? record11.secretRef.trim() : "";
     if (!name || !secretRef) {
       throw new Error("Sandbox template env entries require name and secretRef.");
     }
@@ -31434,8 +31451,8 @@ function sandboxRecordsFromPayload(payload) {
   const sandboxes = asRecord8(payload).sandboxes;
   if (!Array.isArray(sandboxes)) return [];
   return sandboxes.flatMap((sandbox) => {
-    const record10 = linkedSandboxRecord(sandbox);
-    return record10 ? [record10] : [];
+    const record11 = linkedSandboxRecord(sandbox);
+    return record11 ? [record11] : [];
   });
 }
 function sandboxRecordFromPayload(payload) {
@@ -31456,17 +31473,17 @@ function mergeSandboxRuntimeSandboxPayload(runtimePayload, sandboxPayload) {
   };
 }
 function linkedSandboxRecord(value) {
-  const record10 = asRecord8(value);
-  const id = typeof record10.id === "string" ? record10.id.trim() : "";
-  const state = typeof record10.state === "string" ? record10.state.trim() : "";
+  const record11 = asRecord8(value);
+  const id = typeof record11.id === "string" ? record11.id.trim() : "";
+  const state = typeof record11.state === "string" ? record11.state.trim() : "";
   if (!id || !state) return null;
   return {
     id,
     state,
-    repo: typeof record10.repo === "string" ? record10.repo : null,
-    metadata: asRecord8(record10.metadata),
-    createdAt: typeof record10.createdAt === "string" ? record10.createdAt : null,
-    updatedAt: typeof record10.updatedAt === "string" ? record10.updatedAt : null
+    repo: typeof record11.repo === "string" ? record11.repo : null,
+    metadata: asRecord8(record11.metadata),
+    createdAt: typeof record11.createdAt === "string" ? record11.createdAt : null,
+    updatedAt: typeof record11.updatedAt === "string" ? record11.updatedAt : null
   };
 }
 function sandboxCommandFromPayload(payload) {
@@ -32958,9 +32975,9 @@ async function waitForRecoveredSandboxCreate(input) {
         ...input.agentId ? { agentId: input.agentId } : {}
       }
     });
-    const record10 = asRecord9(payload);
-    const account2 = record10.account;
-    const sandboxes = Array.isArray(record10.sandboxes) ? record10.sandboxes : [];
+    const record11 = asRecord9(payload);
+    const account2 = record11.account;
+    const sandboxes = Array.isArray(record11.sandboxes) ? record11.sandboxes : [];
     const match = sandboxes.map(asRecord9).find((sandbox) => sandboxMatchesCreateRequest(sandbox, input));
     if (match) {
       latestMatch = { sandbox: match, account: account2 };
@@ -32997,10 +33014,10 @@ async function readSandboxRecoveryLogs(sandboxId2) {
 }
 function formatSandboxLogLine(value) {
   if (typeof value === "string") return value.trim();
-  const record10 = asRecord9(value);
-  const timestamp = typeof record10.timestamp === "string" ? record10.timestamp : "";
-  const level = typeof record10.level === "string" ? record10.level : "";
-  const message3 = typeof record10.message === "string" ? record10.message : typeof record10.output === "string" ? record10.output : typeof record10.line === "string" ? record10.line : "";
+  const record11 = asRecord9(value);
+  const timestamp = typeof record11.timestamp === "string" ? record11.timestamp : "";
+  const level = typeof record11.level === "string" ? record11.level : "";
+  const message3 = typeof record11.message === "string" ? record11.message : typeof record11.output === "string" ? record11.output : typeof record11.line === "string" ? record11.line : "";
   return [timestamp, level, message3].filter(Boolean).join(" ").trim();
 }
 function sandboxCreateRecoveryMessage(sandbox, logs) {
@@ -34029,8 +34046,8 @@ function fileOutputRefs(value, depth = 0) {
   if (Array.isArray(value)) {
     return value.flatMap((item) => fileOutputRefs(item, depth + 1));
   }
-  const record10 = asRecord10(value);
-  return Object.values(record10).flatMap(
+  const record11 = asRecord10(value);
+  return Object.values(record11).flatMap(
     (child) => fileOutputRefs(child, depth + 1)
   );
 }
@@ -34157,8 +34174,8 @@ function findOutputRef(value, depth = 0) {
     }
     return null;
   }
-  const record10 = asRecord10(value);
-  for (const child of Object.values(record10)) {
+  const record11 = asRecord10(value);
+  for (const child of Object.values(record11)) {
     const outputRef = findOutputRef(child, depth + 1);
     if (outputRef) return outputRef;
   }
@@ -34180,9 +34197,9 @@ function findOutputRefById(value, outputId, revision, depth = 0) {
     }
     return latest2;
   }
-  const record10 = asRecord10(value);
+  const record11 = asRecord10(value);
   let latest = null;
-  for (const child of Object.values(record10)) {
+  for (const child of Object.values(record11)) {
     const outputRef = findOutputRefById(child, outputId, revision, depth + 1);
     if (outputRef && (!latest || outputRef.revision > latest.revision)) {
       latest = outputRef;
@@ -34954,11 +34971,11 @@ function nestedString(value, keys, depth = 0) {
     }
     return null;
   }
-  const record10 = value;
+  const record11 = value;
   for (const key of keys) {
-    if (typeof record10[key] === "string" && record10[key]) return record10[key];
+    if (typeof record11[key] === "string" && record11[key]) return record11[key];
   }
-  for (const child of Object.values(record10)) {
+  for (const child of Object.values(record11)) {
     const found = nestedString(child, keys, depth + 1);
     if (found) return found;
   }
@@ -34973,11 +34990,11 @@ function nestedNumber(value, keys, depth = 0) {
     }
     return null;
   }
-  const record10 = value;
+  const record11 = value;
   for (const key of keys) {
-    if (typeof record10[key] === "number" && Number.isFinite(record10[key])) return record10[key];
+    if (typeof record11[key] === "number" && Number.isFinite(record11[key])) return record11[key];
   }
-  for (const child of Object.values(record10)) {
+  for (const child of Object.values(record11)) {
     const found = nestedNumber(child, keys, depth + 1);
     if (found !== null) return found;
   }
@@ -34992,9 +35009,9 @@ function findRecordWithKey(value, key, depth = 0) {
     }
     return null;
   }
-  const record10 = value;
-  if (key in record10) return record10;
-  for (const child of Object.values(record10)) {
+  const record11 = value;
+  if (key in record11) return record11;
+  for (const child of Object.values(record11)) {
     const found = findRecordWithKey(child, key, depth + 1);
     if (found) return found;
   }
@@ -35025,9 +35042,9 @@ function receiptTiming(turn) {
 }
 function usageSummary(records) {
   return {
-    promptTokens: sumKnown(records.map((record10) => record10.promptTokens)),
-    completionTokens: sumKnown(records.map((record10) => record10.completionTokens)),
-    totalTokens: sumKnown(records.map((record10) => record10.totalTokens))
+    promptTokens: sumKnown(records.map((record11) => record11.promptTokens)),
+    completionTokens: sumKnown(records.map((record11) => record11.completionTokens)),
+    totalTokens: sumKnown(records.map((record11) => record11.totalTokens))
   };
 }
 function sumKnown(values) {
@@ -35995,8 +36012,8 @@ function sha2562(bytes2) {
   return createHash8("sha256").update(bytes2).digest("hex");
 }
 function nullableRecord(value) {
-  const record10 = asRecord11(value);
-  return Object.keys(record10).length > 0 ? record10 : null;
+  const record11 = asRecord11(value);
+  return Object.keys(record11).length > 0 ? record11 : null;
 }
 function asRecord11(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : {};
@@ -36582,23 +36599,23 @@ function parseTailscaleVersion(result) {
   return result.stdout.split(/\r?\n/).find((line) => line.trim())?.trim() ?? null;
 }
 function peerFromRecord(value, isSelf) {
-  const record10 = asRecord12(value);
-  if (!record10) return null;
-  const id = stringValue9(record10.ID) ?? stringValue9(record10.PublicKey) ?? (isSelf ? "self" : null);
+  const record11 = asRecord12(value);
+  if (!record11) return null;
+  const id = stringValue9(record11.ID) ?? stringValue9(record11.PublicKey) ?? (isSelf ? "self" : null);
   if (!id) return null;
-  const hostName = stringValue9(record10.HostName);
-  const dnsName = normalizeDnsName(record10.DNSName);
+  const hostName = stringValue9(record11.HostName);
+  const dnsName = normalizeDnsName(record11.DNSName);
   const name = hostName ?? dnsName ?? id;
   return {
     id,
     name,
     dnsName,
-    os: stringValue9(record10.OS),
-    online: booleanValue2(record10.Online),
-    active: booleanValue2(record10.Active),
+    os: stringValue9(record11.OS),
+    online: booleanValue2(record11.Online),
+    active: booleanValue2(record11.Active),
     isSelf,
-    tailscaleIps: stringArray4(record10.TailscaleIPs),
-    lastSeen: normalizeTimestamp(record10.LastSeen)
+    tailscaleIps: stringArray4(record11.TailscaleIPs),
+    lastSeen: normalizeTimestamp(record11.LastSeen)
   };
 }
 function tailscaleBaseUrl(state) {
@@ -36666,8 +36683,8 @@ function valueContainsTarget(value, port) {
     return value.includes(`127.0.0.1:${port}`) || value.includes(`localhost:${port}`);
   }
   if (Array.isArray(value)) return value.some((item) => valueContainsTarget(item, port));
-  const record10 = asRecord12(value);
-  return record10 ? Object.values(record10).some((item) => valueContainsTarget(item, port)) : false;
+  const record11 = asRecord12(value);
+  return record11 ? Object.values(record11).some((item) => valueContainsTarget(item, port)) : false;
 }
 function targetUrlFromValue(value, port) {
   if (typeof value === "string" && valueContainsTarget(value, port)) return value;
@@ -36677,9 +36694,9 @@ function targetUrlFromValue(value, port) {
       if (target) return target;
     }
   }
-  const record10 = asRecord12(value);
-  if (!record10) return null;
-  for (const [key, item] of Object.entries(record10)) {
+  const record11 = asRecord12(value);
+  if (!record11) return null;
+  for (const [key, item] of Object.entries(record11)) {
     if ((key.toLowerCase() === "proxy" || key.toLowerCase() === "target") && typeof item === "string" && valueContainsTarget(item, port)) {
       return item;
     }
@@ -36689,9 +36706,9 @@ function targetUrlFromValue(value, port) {
   return null;
 }
 function findEndpoint(value, port) {
-  const record10 = asRecord12(value);
-  if (!record10) return null;
-  for (const [key, item] of Object.entries(record10)) {
+  const record11 = asRecord12(value);
+  if (!record11) return null;
+  for (const [key, item] of Object.entries(record11)) {
     const endpoint = endpointFromKey(key);
     if (endpoint && valueContainsTarget(item, port)) {
       return {
@@ -37033,9 +37050,9 @@ function createVoiceTranscriptionService(input) {
   return { close, status, transcribe };
 }
 function parseVoiceTranscriptionRequest(payload) {
-  const record10 = payload && typeof payload === "object" ? payload : {};
-  const audioBase64 = typeof record10.audioBase64 === "string" ? record10.audioBase64.trim() : "";
-  const mimeType = typeof record10.mimeType === "string" ? record10.mimeType.trim() : "";
+  const record11 = payload && typeof payload === "object" ? payload : {};
+  const audioBase64 = typeof record11.audioBase64 === "string" ? record11.audioBase64.trim() : "";
+  const mimeType = typeof record11.mimeType === "string" ? record11.mimeType.trim() : "";
   if (!audioBase64) throw new Error("Voice transcription requires audio.");
   if (mimeType && mimeType !== "audio/wav" && mimeType !== "audio/wave") {
     throw new Error(`Unsupported voice audio format: ${mimeType}`);
@@ -37043,8 +37060,8 @@ function parseVoiceTranscriptionRequest(payload) {
   return {
     audioBase64,
     mimeType: mimeType || "audio/wav",
-    durationMs: typeof record10.durationMs === "number" && Number.isFinite(record10.durationMs) ? Math.max(0, Math.round(record10.durationMs)) : void 0,
-    language: typeof record10.language === "string" && record10.language.trim() ? record10.language.trim() : void 0
+    durationMs: typeof record11.durationMs === "number" && Number.isFinite(record11.durationMs) ? Math.max(0, Math.round(record11.durationMs)) : void 0,
+    language: typeof record11.language === "string" && record11.language.trim() ? record11.language.trim() : void 0
   };
 }
 async function runWhisper(input) {
@@ -37275,9 +37292,9 @@ function createBrowserControlQueue(input = {}) {
     scroll: (request) => enqueue("scroll", "openpond_browser_scroll", request)
   };
   function registerDesktopExecutor(payload) {
-    const record10 = asRecord13(payload);
-    const executorToken = stringField(record10, "executorToken");
-    const instanceId = optionalStringField(record10, "instanceId") ?? `desktop_${randomUUID14()}`;
+    const record11 = asRecord13(payload);
+    const executorToken = stringField(record11, "executorToken");
+    const instanceId = optionalStringField(record11, "instanceId") ?? `desktop_${randomUUID14()}`;
     if (!executorToken) throw new Error("executorToken is required");
     desktop = {
       executorToken,
@@ -37445,18 +37462,18 @@ function serializeBrowserInput(input) {
   return rest;
 }
 function parseBrowserControlResult(toolName, payload) {
-  const record10 = asRecord13(payload);
-  if (!record10) {
+  const record11 = asRecord13(payload);
+  if (!record11) {
     return {
       ok: false,
       action: toolName,
       output: "Browser action returned an invalid result."
     };
   }
-  const ok = record10.ok === true;
-  const output = typeof record10.output === "string" && record10.output.trim() ? record10.output.trim() : ok ? "Browser action completed." : "Browser action failed.";
-  const data = asRecord13(record10.data) ?? void 0;
-  const metadata = parseBrowserMetadata(record10.metadata);
+  const ok = record11.ok === true;
+  const output = typeof record11.output === "string" && record11.output.trim() ? record11.output.trim() : ok ? "Browser action completed." : "Browser action failed.";
+  const data = asRecord13(record11.data) ?? void 0;
+  const metadata = parseBrowserMetadata(record11.metadata);
   return {
     ok,
     action: toolName,
@@ -37466,30 +37483,30 @@ function parseBrowserControlResult(toolName, payload) {
   };
 }
 function parseBrowserMetadata(value) {
-  const record10 = asRecord13(value);
-  if (!record10) return void 0;
-  const cursor = asRecord13(record10.cursor);
-  const screenshot = asRecord13(record10.screenshot);
+  const record11 = asRecord13(value);
+  if (!record11) return void 0;
+  const cursor = asRecord13(record11.cursor);
+  const screenshot = asRecord13(record11.screenshot);
   return {
-    ...typeof record10.activeTabId === "string" ? { activeTabId: record10.activeTabId } : {},
-    ...typeof record10.title === "string" ? { title: record10.title } : {},
-    ...typeof record10.url === "string" ? { url: record10.url } : {},
-    ...Array.isArray(record10.openTabIds) ? { openTabIds: record10.openTabIds.filter((item) => typeof item === "string") } : {},
+    ...typeof record11.activeTabId === "string" ? { activeTabId: record11.activeTabId } : {},
+    ...typeof record11.title === "string" ? { title: record11.title } : {},
+    ...typeof record11.url === "string" ? { url: record11.url } : {},
+    ...Array.isArray(record11.openTabIds) ? { openTabIds: record11.openTabIds.filter((item) => typeof item === "string") } : {},
     ...cursor && typeof cursor.x === "number" && typeof cursor.y === "number" ? { cursor: { x: cursor.x, y: cursor.y } } : {},
-    ...typeof record10.snapshotId === "string" ? { snapshotId: record10.snapshotId } : {},
+    ...typeof record11.snapshotId === "string" ? { snapshotId: record11.snapshotId } : {},
     ...screenshot && typeof screenshot.tabId === "string" && typeof screenshot.url === "string" ? { screenshot: { tabId: screenshot.tabId, url: screenshot.url } } : {}
   };
 }
 function asRecord13(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
 }
-function stringField(record10, key) {
-  const value = record10?.[key];
+function stringField(record11, key) {
+  const value = record11?.[key];
   if (typeof value !== "string" || !value.trim()) return "";
   return value.trim();
 }
-function optionalStringField(record10, key) {
-  const value = record10?.[key];
+function optionalStringField(record11, key) {
+  const value = record11?.[key];
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
 function headerValue2(value) {
@@ -37514,16 +37531,16 @@ function stableHash(value) {
 function stableJson(value) {
   if (Array.isArray(value)) return `[${value.map(stableJson).join(",")}]`;
   if (value && typeof value === "object") {
-    const record10 = value;
-    return `{${Object.keys(record10).sort().map((key) => `${JSON.stringify(key)}:${stableJson(record10[key])}`).join(",")}}`;
+    const record11 = value;
+    return `{${Object.keys(record11).sort().map((key) => `${JSON.stringify(key)}:${stableJson(record11[key])}`).join(",")}}`;
   }
   return JSON.stringify(value);
 }
 function parseJsonObject(value) {
   const parsed = JSON.parse(value);
-  const record10 = asRecord14(parsed);
-  if (!record10) throw new Error("Expected JSON object");
-  return record10;
+  const record11 = asRecord14(parsed);
+  if (!record11) throw new Error("Expected JSON object");
+  return record11;
 }
 function parseJsonObjectSafe(value) {
   try {
@@ -37535,9 +37552,9 @@ function parseJsonObjectSafe(value) {
 function readPath(value, pathParts) {
   let current = value;
   for (const part of pathParts) {
-    const record10 = asRecord14(current);
-    if (!record10) return void 0;
-    current = record10[part];
+    const record11 = asRecord14(current);
+    if (!record11) return void 0;
+    current = record11[part];
   }
   return current;
 }
@@ -38004,22 +38021,22 @@ async function inspectAgentProject(agentRootPath) {
 function readScheduleDefinitions(manifest) {
   const schedules = Array.isArray(readPath(manifest, ["schedules"])) ? readPath(manifest, ["schedules"]) : [];
   return schedules.flatMap((entry) => {
-    const record10 = asRecord14(entry);
-    const name = stringValue10(record10.name);
+    const record11 = asRecord14(entry);
+    const name = stringValue10(record11.name);
     if (!name) return [];
-    const scheduleType = record10.scheduleType === "rate" ? "rate" : "cron";
-    const expression = scheduleType === "rate" ? stringValue10(record10.rate) ?? stringValue10(record10.scheduleExpression) : stringValue10(record10.cron) ?? stringValue10(record10.scheduleExpression);
+    const scheduleType = record11.scheduleType === "rate" ? "rate" : "cron";
+    const expression = scheduleType === "rate" ? stringValue10(record11.rate) ?? stringValue10(record11.scheduleExpression) : stringValue10(record11.cron) ?? stringValue10(record11.scheduleExpression);
     if (!expression) return [];
-    const target = asRecord14(record10.target);
-    const targetAction = stringValue10(target.action) ?? stringValue10(record10.action) ?? stringValue10(record10.targetAction) ?? "chat";
-    const input = asRecord14(record10.input);
+    const target = asRecord14(record11.target);
+    const targetAction = stringValue10(target.action) ?? stringValue10(record11.action) ?? stringValue10(record11.targetAction) ?? "chat";
+    const input = asRecord14(record11.input);
     const definition = {
       name,
       scheduleType,
       scheduleExpression: unwrapScheduleExpression(expression, scheduleType),
-      timezone: stringValue10(record10.timezone),
+      timezone: stringValue10(record11.timezone),
       targetAction,
-      enabledByDefault: record10.enabledByDefault === true,
+      enabledByDefault: record11.enabledByDefault === true,
       input
     };
     return [
@@ -38824,9 +38841,9 @@ function completionText(value) {
       }
       return null;
     }
-    const record10 = current;
+    const record11 = current;
     for (const key of ["text", "outputText", "message", "content"]) {
-      const found = visit(record10[key], depth + 1);
+      const found = visit(record11[key], depth + 1);
       if (found) return found;
     }
     return null;
@@ -40203,7 +40220,7 @@ function createCrossSystemExpertBootstrapService(deps) {
     if (records.length !== prepared.taskLinks.length) {
       throw new Error("Every reviewed train task must produce one exact, reward-eligible expert trajectory.");
     }
-    const recordByEnvironmentTaskId = new Map(records.map((record10) => [record10.taskId, record10]));
+    const recordByEnvironmentTaskId = new Map(records.map((record11) => [record11.taskId, record11]));
     const approval = CrossSystemExpertBootstrapApprovalSchema.parse({
       status: "approved",
       approvedBy: actor,
@@ -40214,22 +40231,22 @@ function createCrossSystemExpertBootstrapService(deps) {
     const tasks = taskset.tasks.map((task) => {
       const link2 = prepared.taskLinks.find((candidate2) => candidate2.tasksetTask.id === task.id);
       if (!link2) return task;
-      const record10 = recordByEnvironmentTaskId.get(link2.environmentTask.id);
-      if (!record10) throw new Error(`Approved trajectory for ${link2.environmentTask.id} is missing.`);
-      return approvedTask(task, record10, approval);
+      const record11 = recordByEnvironmentTaskId.get(link2.environmentTask.id);
+      if (!record11) throw new Error(`Approved trajectory for ${link2.environmentTask.id} is missing.`);
+      return approvedTask(task, record11, approval);
     });
     const demonstrations = [
       ...taskset.learningSignals.demonstrations.filter(
         (signal) => !prepared.taskLinks.some((link2) => link2.tasksetTask.id === signal.taskId)
       ),
       ...prepared.taskLinks.map(({ tasksetTask, environmentTask }) => {
-        const record10 = recordByEnvironmentTaskId.get(environmentTask.id);
+        const record11 = recordByEnvironmentTaskId.get(environmentTask.id);
         return {
           id: `demo_${tasksetTask.id}`,
           kind: "demonstration",
           taskId: tasksetTask.id,
           sourceRefs: tasksetTask.sourceRefs,
-          artifactRef: record10.id,
+          artifactRef: record11.id,
           approved: true,
           confidence: 1,
           metadata: {
@@ -40238,8 +40255,8 @@ function createCrossSystemExpertBootstrapService(deps) {
             approvedAt,
             approval: "explicit_expert_trajectory_review",
             previewHash: approval.previewHash,
-            trajectoryId: record10.trajectoryId,
-            toolContractHash: record10.toolContractHash
+            trajectoryId: record11.trajectoryId,
+            toolContractHash: record11.toolContractHash
           }
         };
       })
@@ -40283,7 +40300,7 @@ function createCrossSystemExpertBootstrapService(deps) {
           previewHash: approval.previewHash,
           fixturePath: EXPERT_BOOTSTRAP_FIXTURE,
           approval,
-          recordIds: records.map((record10) => record10.id),
+          recordIds: records.map((record11) => record11.id),
           trajectoryHashes: prepared.preview.tasks.map((item) => item.trajectoryHash)
         }
       }
@@ -40331,14 +40348,14 @@ function createCrossSystemExpertBootstrapService(deps) {
       approvedBy: "preview",
       approvedAt: taskset.updatedAt
     });
-    const recordByTaskId = new Map(previewRecords.map((record10) => [record10.taskId, record10]));
+    const recordByTaskId = new Map(previewRecords.map((record11) => [record11.taskId, record11]));
     const resultByTrajectoryId = new Map(results.map((result) => [result.trajectoryId, result]));
     const trajectoryByTaskId = new Map(trajectories.map((trajectory) => [trajectory.taskId, trajectory]));
     const previewTasks = taskLinks.map(({ tasksetTask, environmentTask }) => {
       const trajectory = trajectoryByTaskId.get(environmentTask.id);
-      const record10 = recordByTaskId.get(environmentTask.id);
+      const record11 = recordByTaskId.get(environmentTask.id);
       const result = trajectory ? resultByTrajectoryId.get(trajectory.id) : null;
-      if (!trajectory || !record10 || result?.reward === null || result?.reward === void 0) {
+      if (!trajectory || !record11 || result?.reward === null || result?.reward === void 0) {
         throw new Error(`Expert preview for ${environmentTask.id} is incomplete.`);
       }
       const final = [...trajectory.steps].reverse().find((step) => step.kind === "final");
@@ -40353,13 +40370,13 @@ function createCrossSystemExpertBootstrapService(deps) {
         trajectoryId: trajectory.id,
         trajectoryHash: contentHash({
           trajectory,
-          trainingMessages: record10.messages
+          trainingMessages: record11.messages
         }),
         toolNames,
         toolCallCount: toolNames.length,
-        messageCount: record10.messages.length,
+        messageCount: record11.messages.length,
         reward: result.reward,
-        messages: record10.messages
+        messages: record11.messages
       };
     });
     const previewHash = contentHash({
@@ -40427,14 +40444,14 @@ function createCrossSystemExpertBootstrapService(deps) {
   }
   return { preview, approve };
 }
-function approvedTask(task, record10, approval) {
-  const inputMessages = record10.messages.slice(0, 2);
-  const outputMessages = record10.messages.slice(2);
+function approvedTask(task, record11, approval) {
+  const inputMessages = record11.messages.slice(0, 2);
+  const outputMessages = record11.messages.slice(2);
   if (inputMessages[0]?.role !== "system" || inputMessages[1]?.role !== "user") {
-    throw new Error(`Expert trajectory ${record10.trajectoryId} has an invalid prompt prefix.`);
+    throw new Error(`Expert trajectory ${record11.trajectoryId} has an invalid prompt prefix.`);
   }
   if (outputMessages.at(-1)?.role !== "assistant") {
-    throw new Error(`Expert trajectory ${record10.trajectoryId} must end with an assistant target.`);
+    throw new Error(`Expert trajectory ${record11.trajectoryId} must end with an assistant target.`);
   }
   return {
     ...task,
@@ -40446,8 +40463,8 @@ function approvedTask(task, record10, approval) {
       approvalStatus: "approved",
       exampleOrigin: "expert_authored",
       exampleRationale: "Exact deterministic environment trajectory explicitly reviewed and approved for SFT bootstrap.",
-      expertBootstrapRecordId: record10.id,
-      expertTrajectoryId: record10.trajectoryId,
+      expertBootstrapRecordId: record11.id,
+      expertTrajectoryId: record11.trajectoryId,
       expertApproval: approval
     }
   };
@@ -40687,10 +40704,10 @@ function ambiguousTaskPrompt() {
 }
 function parseWorldSpec(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return [];
-  const record10 = value;
-  const split = record10.split === "train" || record10.split === "validation" || record10.split === "frozen_eval" ? record10.split : null;
-  const difficulty = record10.difficulty === "easy" || record10.difficulty === "medium" || record10.difficulty === "hard" ? record10.difficulty : null;
-  return typeof record10.seed === "number" && Number.isInteger(record10.seed) && split && difficulty ? [{ seed: record10.seed, split, difficulty }] : [];
+  const record11 = value;
+  const split = record11.split === "train" || record11.split === "validation" || record11.split === "frozen_eval" ? record11.split : null;
+  const difficulty = record11.difficulty === "easy" || record11.difficulty === "medium" || record11.difficulty === "hard" ? record11.difficulty : null;
+  return typeof record11.seed === "number" && Number.isInteger(record11.seed) && split && difficulty ? [{ seed: record11.seed, split, difficulty }] : [];
 }
 function failure(request, message3) {
   return {
@@ -41419,19 +41436,19 @@ function enrichCrossSystemProposal(proposal, sources) {
   const traceBySource = new Map(lineage.traces.map((trace) => [trace.sourceId, trace]));
   const taskById = new Map(tasks.map((task) => [task.id, task]));
   const approvedSuccessfulSources = new Set(sources.flatMap((source) => {
-    const record10 = metadataRecord(source.metadata.crossSystemOperations);
-    return record10?.approved === true && record10.outcome === "correct" ? [source.id] : [];
+    const record11 = metadataRecord(source.metadata.crossSystemOperations);
+    return record11?.approved === true && record11.outcome === "correct" ? [source.id] : [];
   }));
   const existingExampleBySource = new Map(
     proposal.proposedExamples.map((example) => [example.sourceId, example])
   );
   const proposedExamples = sources.flatMap((source) => {
     const trace = traceBySource.get(source.id);
-    const record10 = metadataRecord(source.metadata.crossSystemOperations);
-    const taskId = typeof record10?.taskId === "string" ? record10.taskId : null;
+    const record11 = metadataRecord(source.metadata.crossSystemOperations);
+    const taskId = typeof record11?.taskId === "string" ? record11.taskId : null;
     const task = taskId ? taskById.get(taskId) ?? null : null;
-    const prompt = typeof record10?.taskPrompt === "string" ? record10.taskPrompt : task?.prompt;
-    const expectedAnswer = metadataRecord(record10?.expectedAnswer) ?? task?.expectedAnswer ?? null;
+    const prompt = typeof record11?.taskPrompt === "string" ? record11.taskPrompt : task?.prompt;
+    const expectedAnswer = metadataRecord(record11?.expectedAnswer) ?? task?.expectedAnswer ?? null;
     if (!trace || !prompt || !expectedAnswer) return [];
     const existing = existingExampleBySource.get(source.id);
     const approved = approvedSuccessfulSources.has(source.id);
@@ -41501,17 +41518,17 @@ function enrichCrossSystemProposal(proposal, sources) {
 }
 function crossSystemGroundTruth(source) {
   if (!source) return null;
-  const record10 = metadataRecord(source.metadata.crossSystemOperations);
-  if (!record10 || record10.toolContractHash !== CROSS_SYSTEM_TOOL_CONTRACT_HASH) return null;
-  const directPrompt = typeof record10.taskPrompt === "string" ? record10.taskPrompt : null;
-  const directExpectedAnswer = metadataRecord(record10.expectedAnswer);
+  const record11 = metadataRecord(source.metadata.crossSystemOperations);
+  if (!record11 || record11.toolContractHash !== CROSS_SYSTEM_TOOL_CONTRACT_HASH) return null;
+  const directPrompt = typeof record11.taskPrompt === "string" ? record11.taskPrompt : null;
+  const directExpectedAnswer = metadataRecord(record11.expectedAnswer);
   if (directPrompt && directExpectedAnswer) {
     return { prompt: directPrompt, expectedAnswer: directExpectedAnswer };
   }
-  const worldSeed = typeof record10.worldSeed === "number" && Number.isInteger(record10.worldSeed) ? record10.worldSeed : null;
-  const worldSplit = crossSystemSplit(record10.worldSplit);
-  const worldDifficulty = crossSystemDifficulty(record10.worldDifficulty);
-  const taskId = typeof record10.taskId === "string" ? record10.taskId : null;
+  const worldSeed = typeof record11.worldSeed === "number" && Number.isInteger(record11.worldSeed) ? record11.worldSeed : null;
+  const worldSplit = crossSystemSplit(record11.worldSplit);
+  const worldDifficulty = crossSystemDifficulty(record11.worldDifficulty);
+  const taskId = typeof record11.taskId === "string" ? record11.taskId : null;
   if (worldSeed === null || !worldSplit || !worldDifficulty || !taskId) return null;
   const task = generateCrossSystemTasks(generateCrossSystemWorld({
     seed: worldSeed,
@@ -41536,14 +41553,14 @@ function crossSystemTasksetMetadata(sources) {
   } : {};
 }
 function crossSystemExampleMetadata(source) {
-  const record10 = metadataRecord(source.metadata.crossSystemOperations);
-  return record10?.toolContractHash === CROSS_SYSTEM_TOOL_CONTRACT_HASH ? {
+  const record11 = metadataRecord(source.metadata.crossSystemOperations);
+  return record11?.toolContractHash === CROSS_SYSTEM_TOOL_CONTRACT_HASH ? {
     flagship: "cross-system-operations",
     toolContractHash: CROSS_SYSTEM_TOOL_CONTRACT_HASH,
-    trajectoryId: record10.trajectoryId,
-    worldId: record10.worldId,
-    taskId: record10.taskId,
-    approvalStatus: record10.approved === true ? "approved" : "unapproved"
+    trajectoryId: record11.trajectoryId,
+    worldId: record11.worldId,
+    taskId: record11.taskId,
+    approvalStatus: record11.approved === true ? "approved" : "unapproved"
   } : {};
 }
 function supersededCrossSystemWarning(warning) {
@@ -41553,22 +41570,22 @@ function supersededCrossSystemWarning(warning) {
 function crossSystemLineage(sources) {
   if (sources.length < 3) return null;
   const traces = sources.flatMap((source) => {
-    const record10 = metadataRecord(source.metadata.crossSystemOperations);
-    if (!record10 || record10.toolContractHash !== CROSS_SYSTEM_TOOL_CONTRACT_HASH) return [];
-    const worldSeed = typeof record10.worldSeed === "number" && Number.isInteger(record10.worldSeed) ? record10.worldSeed : null;
-    const worldSplit = crossSystemSplit(record10.worldSplit);
-    const worldDifficulty = crossSystemDifficulty(record10.worldDifficulty);
+    const record11 = metadataRecord(source.metadata.crossSystemOperations);
+    if (!record11 || record11.toolContractHash !== CROSS_SYSTEM_TOOL_CONTRACT_HASH) return [];
+    const worldSeed = typeof record11.worldSeed === "number" && Number.isInteger(record11.worldSeed) ? record11.worldSeed : null;
+    const worldSplit = crossSystemSplit(record11.worldSplit);
+    const worldDifficulty = crossSystemDifficulty(record11.worldDifficulty);
     return worldSeed === null || !worldSplit || !worldDifficulty ? [] : [{ sourceId: source.id, worldSeed, worldSplit, worldDifficulty }];
   });
   if (traces.length !== sources.length) return null;
   const rewards = sources.flatMap((source) => {
-    const record10 = metadataRecord(source.metadata.crossSystemOperations);
-    return typeof record10?.reward === "number" && Number.isFinite(record10.reward) ? [record10.reward] : [];
+    const record11 = metadataRecord(source.metadata.crossSystemOperations);
+    return typeof record11?.reward === "number" && Number.isFinite(record11.reward) ? [record11.reward] : [];
   });
   if (rewards.length < 3) return null;
   const mean = rewards.reduce((sum, reward) => sum + reward, 0) / rewards.length;
-  const variance = rewards.reduce((sum, reward) => sum + (reward - mean) ** 2, 0) / rewards.length;
-  return { traces, rewards, variance };
+  const variance2 = rewards.reduce((sum, reward) => sum + (reward - mean) ** 2, 0) / rewards.length;
+  return { traces, rewards, variance: variance2 };
 }
 function metadataRecord(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
@@ -41933,6 +41950,224 @@ function safeTasksetId(name, snapshotId) {
   return `${slug}-${contentHash(snapshotId).slice(0, 8)}`;
 }
 
+// ../server/src/training/harness-review-taskset.ts
+async function startHarnessReviewTasksetAuthoring(input) {
+  const review = await requireTasksetReview(input.store, input.workspaceId, input.reviewRef);
+  const candidateId = `harness-review-${review.contentHash.slice(0, 24)}`;
+  const existing = (await input.store.listTaskCreationSnapshots(input.profileId)).find((snapshot) => snapshot.request.candidateId === candidateId);
+  if (existing) return existing;
+  const [routes, triggers, observations] = await Promise.all([
+    input.store.listHarnessImprovementArtifacts(input.workspaceId, "route_decision", 1e3),
+    input.store.listHarnessImprovementArtifacts(input.workspaceId, "trigger_decision", 1e3),
+    input.store.listHarnessImprovementArtifacts(input.workspaceId, "observation", 1e3)
+  ]);
+  const routeByRef = new Map(
+    routes.map((route) => [artifactKey(route), route])
+  );
+  const triggerByRef = new Map(
+    triggers.map((trigger) => [artifactKey(trigger), trigger])
+  );
+  const observationByRef = new Map(
+    observations.map((observation) => [artifactKey(observation), observation])
+  );
+  const sourceGroups = /* @__PURE__ */ new Map();
+  for (const selected of review.selectedEvidence) {
+    if (selected.kind !== "route_decision") continue;
+    const route = routeByRef.get(artifactKey(selected.evidence));
+    const trigger = route ? triggerByRef.get(artifactKey(route.trigger)) : null;
+    if (!route || !trigger) {
+      throw new Error(`Harness review evidence ${selected.evidence.id} cannot be reconstructed.`);
+    }
+    const matching = trigger.observations.map((reference) => observationByRef.get(artifactKey(reference)) ?? null).filter(
+      (observation) => observation?.runRef === selected.sourceRef
+    );
+    if (!matching.length) {
+      throw new Error(`Harness review source ${selected.sourceRef} has no exact observation evidence.`);
+    }
+    const group = sourceGroups.get(selected.sourceRef) ?? {
+      turnIds: /* @__PURE__ */ new Set(),
+      evidenceRefs: [],
+      sourcePolicies: []
+    };
+    for (const observation of matching) group.turnIds.add(observation.turnId);
+    group.evidenceRefs.push(selected.evidence);
+    group.sourcePolicies.push(selected.sourcePolicy);
+    sourceGroups.set(selected.sourceRef, group);
+  }
+  if (!sourceGroups.size) {
+    throw new Error("Harness Taskset review has no reconstructable source runs.");
+  }
+  const sources = [];
+  for (const [sessionId, group] of [...sourceGroups.entries()].sort(([left], [right]) => left.localeCompare(right))) {
+    const source = await input.taskCreator.addSessionSource({
+      profileId: input.profileId,
+      sessionId,
+      turnIds: [...group.turnIds].sort(),
+      consentScope: "selected_turns"
+    });
+    const priorReviews = Array.isArray(source.metadata.harnessEvaluationReviews) ? source.metadata.harnessEvaluationReviews : [];
+    const enriched = {
+      ...source,
+      metadata: {
+        ...source.metadata,
+        harnessEvaluationReviews: uniqueObjects([
+          ...priorReviews,
+          {
+            id: review.id,
+            contentHash: review.contentHash,
+            workspaceId: review.workspaceRef,
+            harnessRelease: review.harnessRelease,
+            claimFingerprint: review.claim?.fingerprint ?? null,
+            evidenceRefs: group.evidenceRefs,
+            sourcePolicies: group.sourcePolicies
+          }
+        ])
+      }
+    };
+    sources.push(await input.store.upsertTrainingSource(enriched));
+  }
+  return input.startCreation({
+    profileId: input.profileId,
+    sourceIds: sources.map((source) => source.id),
+    surface: "task_candidate",
+    mode: "customize",
+    entryMode: "automated",
+    resourceIntent: "workproduct",
+    buildIntent: "rubric",
+    buildSpecification: null,
+    objective: review.claim?.statement ?? review.reason,
+    methodHint: null,
+    preferredBaseModelId: null,
+    preferredBaseModel: null,
+    candidateId,
+    analysisModel: input.analysisModel ?? null,
+    analysisReasoningEffort: input.analysisReasoningEffort ?? null,
+    createImproveRunId: null,
+    targetIntent: {
+      kind: "model",
+      id: null,
+      displayName: null,
+      operation: "create"
+    }
+  });
+}
+function harnessReviewLineageFromSources(sources) {
+  const entries = sources.flatMap(
+    (source) => Array.isArray(source.metadata.harnessEvaluationReviews) ? source.metadata.harnessEvaluationReviews.filter(isRecord4) : []
+  );
+  if (!entries.length) return null;
+  const reviewKey = `${String(entries[0].id)}:${String(entries[0].contentHash)}`;
+  const matching = entries.filter(
+    (entry) => `${String(entry.id)}:${String(entry.contentHash)}` === reviewKey
+  );
+  if (matching.length !== sources.length) {
+    return null;
+  }
+  const first = matching[0];
+  return {
+    review: {
+      id: String(first.id),
+      contentHash: String(first.contentHash),
+      workspaceId: String(first.workspaceId),
+      harnessRelease: first.harnessRelease,
+      claimFingerprint: typeof first.claimFingerprint === "string" ? first.claimFingerprint : null
+    },
+    evidenceRefs: uniqueObjects(matching.flatMap((entry) => Array.isArray(entry.evidenceRefs) ? entry.evidenceRefs : [])),
+    sourcePolicies: uniqueObjects(matching.flatMap((entry) => Array.isArray(entry.sourcePolicies) ? entry.sourcePolicies : []))
+  };
+}
+async function linkHarnessReviewTaskset(input) {
+  const lineage = input.taskset.metadata.harnessEvaluationLineage;
+  if (!isRecord4(lineage) || !isRecord4(lineage.review)) return null;
+  const workspaceId = String(lineage.review.workspaceId ?? "");
+  const originRef = {
+    id: String(lineage.review.id ?? ""),
+    contentHash: String(lineage.review.contentHash ?? "")
+  };
+  if (!workspaceId || !originRef.id || !originRef.contentHash) {
+    throw new Error("Taskset Harness Evaluation lineage is incomplete.");
+  }
+  const reviews = await input.store.listHarnessImprovementArtifacts(
+    workspaceId,
+    "evaluation_review",
+    1e3
+  );
+  const origin = reviews.find((review) => artifactKey(review) === artifactKey(originRef));
+  if (!origin) throw new Error("Originating Harness Evaluation review was not found.");
+  const evaluationRef = input.evaluationResult ? { id: input.evaluationResult.id, contentHash: input.evaluationResult.contentHash } : null;
+  const tasksetRef = { id: input.taskset.id, contentHash: input.taskset.contentHash };
+  const linkKey = contentHash({ originRef, tasksetRef, evaluationRef });
+  const existing = reviews.find((review) => review.metadata.downstreamLinkKey === linkKey);
+  if (existing) return existing;
+  const createdAt = (input.now ?? (() => (/* @__PURE__ */ new Date()).toISOString()))();
+  const receipt = createHarnessEvaluationReviewReceipt({
+    schemaVersion: "openpond.harnessEvaluationReviewReceipt.v1",
+    id: `evaluation-review-link-${linkKey.slice(0, 24)}`,
+    ownerScope: origin.ownerScope,
+    workspaceRef: origin.workspaceRef,
+    harnessRelease: origin.harnessRelease,
+    previousWatermark: origin.nextWatermark,
+    nextWatermark: {
+      cursor: contentHash({ cursor: origin.nextWatermark.cursor, tasksetRef, evaluationRef }),
+      throughCreatedAt: createdAt
+    },
+    selectedEvidence: origin.selectedEvidence,
+    excludedEvidence: origin.excludedEvidence,
+    claim: origin.claim,
+    classification: "taskset",
+    triage: origin.triage,
+    reason: evaluationRef ? "The approved Taskset completed a real baseline Evaluation." : "The approved Harness review materialized one immutable Taskset.",
+    nextAuthority: "human_review",
+    maxEstimatedCostUsd: origin.maxEstimatedCostUsd,
+    tasksetProposal: tasksetRef,
+    evaluation: evaluationRef,
+    trainingQualification: null,
+    policyVersion: origin.policyVersion,
+    createdAt,
+    metadata: {
+      originReview: originRef,
+      downstreamLinkKey: linkKey,
+      tasksetRevision: input.taskset.revision
+    }
+  });
+  await input.store.saveHarnessImprovementArtifact(workspaceId, "evaluation_review", receipt);
+  return receipt;
+}
+async function requireTasksetReview(store, workspaceId, expected) {
+  const workspace = await store.getHarnessWorkspace(workspaceId);
+  if (!workspace) throw new Error(`Harness workspace ${workspaceId} was not found.`);
+  const review = (await store.listHarnessImprovementArtifacts(workspaceId, "evaluation_review", 1e3)).find((candidate2) => candidate2.id === expected.id && candidate2.contentHash === expected.contentHash);
+  if (!review || review.schemaVersion !== "openpond.harnessEvaluationReviewReceipt.v1") {
+    throw new Error("Harness Evaluation review was not found.");
+  }
+  const typed = review;
+  if (typed.classification !== "taskset" || typed.nextAuthority !== "human_review") {
+    throw new Error("Only a human-review Taskset recommendation can enter Taskset authoring.");
+  }
+  if (typed.tasksetProposal) {
+    throw new Error("Harness Evaluation review already has a materialized Taskset link.");
+  }
+  if (typed.ownerScope.kind !== workspace.ownerScope.kind || typed.ownerScope.id !== workspace.ownerScope.id) {
+    throw new Error("Harness Evaluation review owner scope does not match its workspace.");
+  }
+  return typed;
+}
+function artifactKey(value) {
+  return `${value.id}:${value.contentHash}`;
+}
+function isRecord4(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function uniqueObjects(values) {
+  const seen = /* @__PURE__ */ new Set();
+  return values.filter((value) => {
+    const key = JSON.stringify(value);
+    if (seen.has(key)) return false;
+    seen.add(key);
+    return true;
+  });
+}
+
 // ../server/src/training/task-creator.ts
 function createTaskCreatorService(deps) {
   async function reconcileInterruptedCreations() {
@@ -42269,6 +42504,7 @@ function createTaskCreatorService(deps) {
     }
     const manual = manualBuildEvidence(snapshot);
     const effectiveSources = manual ? [...sources, manual.source] : sources;
+    const harnessReviewLineage = harnessReviewLineageFromSources(effectiveSources);
     const tasksetId = materializedTasksetId(snapshot, proposal);
     const existingTaskset = snapshot.request.resourceIntent === "dataset" && snapshot.request.targetIntent.operation === "improve" ? await deps.store.getTaskset(tasksetId) : null;
     if (snapshot.request.resourceIntent === "dataset" && snapshot.request.targetIntent.operation === "improve" && !existingTaskset) {
@@ -42372,6 +42608,13 @@ function createTaskCreatorService(deps) {
         diagnosis: proposal.diagnosis,
         assumptions: proposal.assumptions,
         warnings: proposal.warnings,
+        ...harnessReviewLineage ? {
+          harnessEvaluationReview: {
+            id: harnessReviewLineage.review.id,
+            contentHash: harnessReviewLineage.review.contentHash
+          },
+          harnessEvaluationLineage: harnessReviewLineage
+        } : {},
         ...crossSystemTasksetMetadata(effectiveSources)
       }
     };
@@ -43096,9 +43339,9 @@ function createTaskMinerService(deps) {
           throw error;
         }
       }));
-      for (const record10 of records) if (record10.source) sourceIds.add(record10.source.id);
+      for (const record11 of records) if (record11.source) sourceIds.add(record11.source.id);
       processedSources += batch.length;
-      skippedSources += records.filter((record10) => record10.skipped).length;
+      skippedSources += records.filter((record11) => record11.skipped).length;
       current = await deps.store.saveTaskMinerRun({
         ...persisted,
         status: "running",
@@ -43466,10 +43709,10 @@ function verifierFunctionSource(source, exportName) {
 }
 function normalizeResult(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error("Verifier must return an object.");
-  const record10 = value;
-  const score = typeof record10.score === "number" ? Math.max(0, Math.min(1, record10.score)) : record10.passed === true ? 1 : 0;
-  const feedback = typeof record10.feedback === "string" ? record10.feedback : typeof record10.reason === "string" ? record10.reason : "Custom verifier completed.";
-  return { score, passed: record10.passed === true, feedback: feedback.slice(0, 2e4), evidenceRefs: Array.isArray(record10.evidenceRefs) ? record10.evidenceRefs.filter((item) => typeof item === "string").slice(0, 1e4) : [] };
+  const record11 = value;
+  const score = typeof record11.score === "number" ? Math.max(0, Math.min(1, record11.score)) : record11.passed === true ? 1 : 0;
+  const feedback = typeof record11.feedback === "string" ? record11.feedback : typeof record11.reason === "string" ? record11.reason : "Custom verifier completed.";
+  return { score, passed: record11.passed === true, feedback: feedback.slice(0, 2e4), evidenceRefs: Array.isArray(record11.evidenceRefs) ? record11.evidenceRefs.filter((item) => typeof item === "string").slice(0, 1e4) : [] };
 }
 function withTimeout(promise, timeoutMs) {
   return new Promise((resolve, reject) => {
@@ -43745,9 +43988,9 @@ import { readFile as readFile9 } from "node:fs/promises";
 
 // ../server/src/training/taskset-work-cost-evidence.ts
 function workRuntimeCostEvidence(value) {
-  const record10 = asRecord15(value);
-  const sandbox = asRecord15(record10.sandbox);
-  const receiptValues = Array.isArray(record10.receipts) ? record10.receipts : Array.isArray(sandbox.receipts) ? sandbox.receipts : [];
+  const record11 = asRecord15(value);
+  const sandbox = asRecord15(record11.sandbox);
+  const receiptValues = Array.isArray(record11.receipts) ? record11.receipts : Array.isArray(sandbox.receipts) ? sandbox.receipts : [];
   const receipts = receiptValues.map(asRecord15);
   const captured = receipts.flatMap((receipt) => {
     const id = typeof receipt.id === "string" ? receipt.id : null;
@@ -44571,8 +44814,8 @@ function userPrompt(task) {
     return task.input.prompt.trim();
   }
   const messages = Array.isArray(task.input.messages) ? task.input.messages.flatMap((value) => {
-    const record10 = asRecord16(value);
-    return (record10.role === "system" || record10.role === "user") && typeof record10.content === "string" && record10.content.trim() ? [record10.content.trim()] : [];
+    const record11 = asRecord16(value);
+    return (record11.role === "system" || record11.role === "user") && typeof record11.content === "string" && record11.content.trim() ? [record11.content.trim()] : [];
   }) : [];
   if (messages.length) return messages.join("\n\n");
   throw new Error(`Evaluation task ${task.id} has no policy-visible prompt.`);
@@ -45274,7 +45517,8 @@ function createTaskEvaluationService(deps) {
       selectedTask: task,
       profile,
       releasedHarness,
-      model: input.model
+      model: input.model,
+      now: input.admittedAt ? () => input.admittedAt : void 0
     });
     const attempt = await runPostTrainingEvaluationAttempt({
       store: deps.store,
@@ -45593,6 +45837,104 @@ function createTaskEvaluationService(deps) {
     });
     return report;
   }
+  async function executeBaseline(input) {
+    const taskset = await requireTaskset(input.tasksetId);
+    if (taskset.status !== "ready" || taskset.readiness?.ready !== true) {
+      throw new Error("Taskset must pass grader audit and readiness before baseline Evaluation.");
+    }
+    const lineage = taskset.metadata.harnessEvaluationReview;
+    if (!lineage || typeof lineage !== "object" || Array.isArray(lineage) || lineage.id !== input.reviewRef.id || lineage.contentHash !== input.reviewRef.contentHash) {
+      throw new Error("Taskset does not bind the supplied Harness Evaluation review.");
+    }
+    const existing = (await deps.store.listEvaluationResults(taskset.id, "baseline")).find(
+      (result) => result.metadata.sourceTasksetHash === taskset.contentHash && result.model.provider === input.model.providerId && result.model.model === input.model.modelId && reviewRefMatches(result.metadata.harnessEvaluationReview, input.reviewRef)
+    );
+    if (existing) return { evaluationResult: existing, attempts: [], reused: true };
+    const tasks = taskset.tasks.filter((task) => task.split === "frozen_eval");
+    if (!tasks.length) {
+      throw new Error("Baseline Evaluation requires at least one isolated frozen-evaluation task.");
+    }
+    const seeds = [...new Set(input.seeds?.length ? input.seeds : [17])].slice(0, 100);
+    const attemptsPerTask = Math.max(1, Math.min(20, Math.trunc(input.attemptsPerTask ?? 1)));
+    const admittedAt = (/* @__PURE__ */ new Date()).toISOString();
+    const executions = [];
+    for (const task of tasks) {
+      for (const seed of seeds) {
+        for (let attempt = 0; attempt < attemptsPerTask; attempt += 1) {
+          if (input.signal?.aborted) throw input.signal.reason;
+          executions.push(await execute({
+            tasksetId: taskset.id,
+            taskId: task.id,
+            model: input.model,
+            seed,
+            attempt,
+            sampling: input.sampling,
+            signal: input.signal,
+            admittedAt,
+            resultId: `baseline-attempt-${contentHash({
+              reviewRef: input.reviewRef,
+              tasksetHash: taskset.contentHash,
+              model: input.model,
+              taskId: task.id,
+              seed,
+              attempt
+            }).slice(0, 24)}`
+          }));
+        }
+      }
+    }
+    const manifest = executions[0].portable.runManifest;
+    if (executions.some((execution) => execution.portable.runManifest.contentHash !== manifest.contentHash)) {
+      throw new Error("Baseline attempts did not share one frozen Run Manifest.");
+    }
+    const receipts = executions.map((execution) => execution.portable.receipt);
+    const portableTaskset = executions[0].portable.tasksetRelease;
+    const scores = receipts.flatMap(
+      (receipt) => typeof receipt.metadata.score === "number" ? [receipt.metadata.score] : []
+    );
+    const evaluationResult = aggregateEvaluationReceipts({
+      id: `baseline-evaluation-${contentHash({
+        manifest: manifest.contentHash,
+        receipts: receipts.map((receipt) => receipt.contentHash),
+        reviewRef: input.reviewRef
+      }).slice(0, 24)}`,
+      manifest,
+      receipts,
+      metadata: {
+        kind: "baseline",
+        sourceTasksetId: taskset.id,
+        sourceTasksetRevision: taskset.revision,
+        sourceTasksetHash: taskset.contentHash,
+        harnessEvaluationReview: input.reviewRef,
+        environmentHash: contentHash(portableTaskset.environment),
+        toolContractHash: contentHash(portableTaskset.tools),
+        permissionContractHash: contentHash({
+          connectedAppScopes: portableTaskset.policy.connectedAppScopes,
+          networkPolicy: portableTaskset.environment.networkPolicy
+        }),
+        policyHash: contentHash(portableTaskset.policy),
+        verifierRef: {
+          id: `verifier-${taskset.id}-r${taskset.revision}`,
+          contentHash: contentHash(portableTaskset.graders)
+        },
+        scores,
+        scoreVariance: variance(scores),
+        admittedAt
+      }
+    });
+    await deps.store.saveEvaluationResult({
+      tasksetId: taskset.id,
+      kind: "baseline",
+      result: evaluationResult,
+      createdAt: admittedAt
+    });
+    await linkHarnessReviewTaskset({
+      store: deps.store,
+      taskset,
+      evaluationResult
+    });
+    return { evaluationResult, attempts: executions, reused: false };
+  }
   async function requireTaskset(id) {
     const taskset = await deps.store.getTaskset(id);
     if (!taskset) throw new Error("Taskset not found.");
@@ -45637,10 +45979,21 @@ function createTaskEvaluationService(deps) {
     auditFixtures,
     calibrateModelJudges,
     readiness,
+    executeBaseline,
     close: async () => {
     }
   };
 }
+function reviewRefMatches(value, expected) {
+  return Boolean(
+    value && typeof value === "object" && !Array.isArray(value) && value.id === expected.id && value.contentHash === expected.contentHash
+  );
+}
+function variance(values) {
+  if (values.length < 2) return 0;
+  const mean = values.reduce((total, value) => total + value, 0) / values.length;
+  return values.reduce((total, value) => total + (value - mean) ** 2, 0) / values.length;
+}
 
 // ../server/src/training/training-service.ts
 import { access as access4, cp as cp2, mkdir as mkdir11, rename as rename2, rm as rm5 } from "node:fs/promises";
@@ -46046,9 +46399,9 @@ var TrainingDestinationRegistry = class {
 function createTrainingPlan(input) {
   const createdAt = (/* @__PURE__ */ new Date()).toISOString();
   const environmentPlacement = input.destinationId === "openpond_managed" ? input.environmentPlacement ?? "local" : "local";
-  const id = `training_plan_${contentHash([input.modelId, input.taskset.contentHash, input.destinationId, environmentPlacement, input.recipe]).slice(0, 24)}`;
+  const id = `training_plan_${contentHash([input.modelId, input.taskset.contentHash, input.destinationId, environmentPlacement, input.recipe, input.modelImprovementQualification ?? null]).slice(0, 24)}`;
   const compatibility = { schemaVersion: "openpond.trainingCompatibility.v1", compatible: false, destinationId: input.destinationId, tasksetId: input.taskset.id, recipeMethod: input.recipe.method, issues: [{ code: "compatibility_pending", severity: "error", path: null, message: "Destination compatibility has not been checked." }], checkedAt: createdAt };
-  const draft = { schemaVersion: "openpond.trainingPlan.v1", id, modelId: input.modelId, tasksetId: input.taskset.id, tasksetHash: input.taskset.contentHash, harnessRelease: input.harnessRelease ?? null, destinationId: input.destinationId, recipe: input.recipe, environmentPlacement, compatibility, dataPolicy: { exportApproved: input.exportApproved ?? false, approvedSourceIds: input.taskset.sourceRefs.map((source) => source.id), retentionDays: input.retentionDays ?? null, region: input.region ?? null }, estimatedCostUsd: input.destinationId === "local_cpu_fixture" ? 0 : null, createdAt, contentHash: "00000000" };
+  const draft = { schemaVersion: "openpond.trainingPlan.v1", id, modelId: input.modelId, tasksetId: input.taskset.id, tasksetHash: input.taskset.contentHash, harnessRelease: input.harnessRelease ?? null, modelImprovementQualification: input.modelImprovementQualification ?? null, destinationId: input.destinationId, recipe: input.recipe, environmentPlacement, compatibility, dataPolicy: { exportApproved: input.exportApproved ?? false, approvedSourceIds: input.taskset.sourceRefs.map((source) => source.id), retentionDays: input.retentionDays ?? null, region: input.region ?? null }, estimatedCostUsd: input.destinationId === "local_cpu_fixture" ? 0 : null, createdAt, contentHash: "00000000" };
   const parsed = TrainingPlanSchema.parse(draft);
   return TrainingPlanSchema.parse({ ...parsed, contentHash: contentHash({ ...parsed, contentHash: "" }) });
 }
@@ -49147,6 +49500,20 @@ var OpenPondManagedTrainingAdapter = class {
         });
       }
       if (taskset && trainingPlan && taskset.contentHash === trainingPlan.tasksetHash) {
+        if (taskset.metadata.harnessEvaluationReview !== void 0) {
+          const qualification = await managedQualification({
+            store: this.dependencies.store,
+            taskset,
+            qualificationRef: trainingPlan.modelImprovementQualification ?? null
+          });
+          if (!qualification || qualification.decision !== "rl" || approval?.modelImprovementQualification?.id !== qualification.id || approval.modelImprovementQualification.contentHash !== qualification.contentHash || qualification.metadata.sourceTasksetId !== taskset.id || qualification.metadata.sourceTasksetHash !== taskset.contentHash || approval.maximumCostUsd !== null && approval.maximumCostUsd > qualification.maximumCostUsd) {
+            issues.push({
+              code: "managed_qualification_invalid",
+              path: "execution",
+              message: "OpenPond Managed requires an exact qualified RL receipt on the immutable Taskset, plan, and approval."
+            });
+          }
+        }
         const requiresHarness = taskset.capabilities.requiresState || taskset.capabilities.requiresTools;
         if (requiresHarness && !supportsManagedRlHarness(taskset, plan.runtime.placement)) {
           issues.push({
@@ -49241,6 +49608,7 @@ var OpenPondManagedTrainingAdapter = class {
         revision: taskset.revision,
         contentHash: taskset.contentHash
       },
+      modelImprovementQualification: trainingPlan.modelImprovementQualification ?? null,
       recipe: plan.recipe,
       resolvedBundle: {
         manifest: bundleManifest,
@@ -49432,6 +49800,23 @@ var OpenPondManagedTrainingAdapter = class {
     executor.start();
   }
 };
+async function managedQualification(input) {
+  if (!input.qualificationRef) return null;
+  const lineage = input.taskset.metadata.harnessEvaluationLineage;
+  if (!lineage || typeof lineage !== "object" || Array.isArray(lineage)) return null;
+  const review = lineage.review;
+  if (!review || typeof review !== "object" || Array.isArray(review)) return null;
+  const workspaceId = review.workspaceId;
+  if (typeof workspaceId !== "string" || !workspaceId) return null;
+  const receipts = await input.store.listHarnessImprovementArtifacts(
+    workspaceId,
+    "training_qualification",
+    1e3
+  );
+  return receipts.find(
+    (receipt) => receipt.id === input.qualificationRef.id && receipt.contentHash === input.qualificationRef.contentHash
+  ) ?? null;
+}
 function dateString(value) {
   return new Date(value).toISOString();
 }
@@ -51786,6 +52171,11 @@ function createTrainingPlanLifecycleService(deps) {
         "Taskset is not ready for training. Resolve readiness blockers first."
       );
     }
+    if (taskset.metadata.harnessEvaluationReview !== void 0 && !input.modelImprovementQualification) {
+      throw new Error(
+        "Harness-origin Tasksets require an exact model-improvement qualification before training planning."
+      );
+    }
     const recipe = TrainingRecipeSchema.parse(
       withAuthoritativeRecipeHashes(taskset, input.recipe)
     );
@@ -51800,7 +52190,8 @@ function createTrainingPlanLifecycleService(deps) {
       exportApproved: input.exportApproved,
       retentionDays: input.retentionDays,
       region: input.region,
-      harnessRelease: input.harnessRelease
+      harnessRelease: input.harnessRelease,
+      modelImprovementQualification: input.modelImprovementQualification
     });
     const requestedPlacement = input.environmentPlacement ?? initial.environmentPlacement;
     const environmentPlacement = capabilities.environmentPlacements.includes(requestedPlacement) ? requestedPlacement : recipe.method === "ppo" && capabilities.environmentPlacements.includes("local") ? "local" : capabilities.environmentPlacements[0] ?? "none";
@@ -51875,6 +52266,7 @@ function createTrainingPlanLifecycleService(deps) {
       approvalModel.id,
       recipe.method,
       recipe.parameterization,
+      plan.modelImprovementQualification,
       maximumCostUsd,
       approvedBy
     ]).slice(0, 24)}`;
@@ -51892,7 +52284,8 @@ function createTrainingPlanLifecycleService(deps) {
       maximumCostUsd,
       approvedBy,
       approvedAt: (/* @__PURE__ */ new Date()).toISOString(),
-      harnessRelease: plan.harnessRelease
+      harnessRelease: plan.harnessRelease,
+      modelImprovementQualification: plan.modelImprovementQualification
     });
     return deps.store.saveTrainingApproval(approval);
   }
@@ -53254,10 +53647,381 @@ function revisions(items, project) {
   return items.map(project).sort((left, right) => left[0].localeCompare(right[0]));
 }
 
+// ../server/src/training/harness-model-improvement.ts
+async function qualifyHarnessModelImprovement(input) {
+  const [taskset, baseline] = await Promise.all([
+    input.store.getTaskset(input.tasksetId),
+    input.store.getEvaluationResult(input.baselineEvaluationId)
+  ]);
+  if (!taskset) throw new Error("Taskset was not found for model-improvement qualification.");
+  if (!baseline) throw new Error("Baseline Evaluation was not found.");
+  if (taskset.status !== "ready" || taskset.readiness?.ready !== true || taskset.readiness.tasksetHash !== taskset.contentHash) {
+    throw new Error("Taskset readiness is stale or blocked.");
+  }
+  assertBaselineLineage(taskset, baseline, input.reviewRef);
+  const lineage = harnessLineage(taskset);
+  const sourcePolicies = HarnessReviewSourcePolicyRefSchema.array().parse(lineage.sourcePolicies);
+  const frozenEvidenceRefs = taskEvidenceRefs(
+    taskset,
+    new Set(taskset.tasks.filter((task) => task.split === "frozen_eval").flatMap((task) => task.sourceRefs))
+  );
+  const signal = signalForTaskset(taskset, baseline);
+  const trainingEvidenceRefs = taskEvidenceRefs(taskset, signal.sourceIds);
+  const privacyReady = taskset.sourceRefs.every(
+    (source) => !isTrainingSourceRef(source) || source.consent.status === "granted" && source.secretScanStatus === "passed" && source.piiScanStatus === "passed" && source.licensingStatus === "approved"
+  );
+  const reasons = [...signal.reasons];
+  let decision = signal.decision;
+  if (baseline.meanScore !== null && baseline.meanScore >= 0.95) {
+    decision = "no_training";
+    reasons.push("The real baseline already meets the protected success threshold.");
+  }
+  if (!privacyReady || !input.privacyApproval) {
+    decision = "no_training";
+    reasons.push("A separate privacy approval over eligible training evidence is required.");
+  }
+  if (!input.budgetApproval) {
+    decision = "no_training";
+    reasons.push("A separate bounded-cost approval is required before planning training.");
+  }
+  if (!sourcePolicies.length || sourcePolicies.some((policy) => policy.state !== "authorized")) {
+    decision = "no_training";
+    reasons.push("Every learning source must retain an authorized source-policy receipt.");
+  }
+  if (signal.confounded) {
+    decision = "no_training";
+    reasons.push("The baseline signal is confounded by non-reward-eligible or infrastructure outcomes.");
+  }
+  const createdAt = (input.now ?? (() => (/* @__PURE__ */ new Date()).toISOString()))();
+  const tasksetRelease = {
+    id: baseline.tasksetRelease.id,
+    contentHash: baseline.tasksetRelease.contentHash
+  };
+  const verifierRef = immutableRef(baseline.metadata.verifierRef, "Baseline verifier");
+  const receipt = createModelImprovementQualificationReceipt({
+    schemaVersion: "openpond.modelImprovementQualificationReceipt.v1",
+    id: `model-qualification-${contentHash({
+      review: input.reviewRef,
+      tasksetRelease,
+      baseline: baseline.contentHash,
+      model: baseline.model,
+      privacyApproval: input.privacyApproval ?? null,
+      budgetApproval: input.budgetApproval ?? null,
+      maximumCostUsd: input.maximumCostUsd,
+      decision
+    }).slice(0, 24)}`,
+    review: input.reviewRef,
+    harnessRelease: baseline.harnessRelease,
+    tasksetRelease,
+    baselineEvaluation: { id: baseline.id, contentHash: baseline.contentHash },
+    model: baseline.model,
+    environmentHash: hashMetadata(baseline, "environmentHash"),
+    toolContractHash: hashMetadata(baseline, "toolContractHash"),
+    permissionContractHash: hashMetadata(baseline, "permissionContractHash"),
+    policyHash: hashMetadata(baseline, "policyHash"),
+    verifierRef,
+    sourcePolicies,
+    trainingEvidenceRefs,
+    frozenEvaluationEvidenceRefs: frozenEvidenceRefs,
+    privacyApproval: input.privacyApproval ?? null,
+    budgetApproval: input.budgetApproval ?? null,
+    maximumCostUsd: input.maximumCostUsd,
+    signal: {
+      kind: signal.kind,
+      strength: signal.strength,
+      calibrated: signal.calibrated,
+      confounded: signal.confounded,
+      variance: signal.variance,
+      evidenceRefs: trainingEvidenceRefs
+    },
+    decision,
+    reasons: [...new Set(reasons)],
+    createdAt,
+    metadata: {
+      sourceTasksetId: taskset.id,
+      sourceTasksetRevision: taskset.revision,
+      sourceTasksetHash: taskset.contentHash,
+      workspaceId: lineage.review.workspaceId
+    }
+  });
+  const existing = (await input.store.listHarnessImprovementArtifacts(
+    lineage.review.workspaceId,
+    "training_qualification",
+    1e3
+  )).find((candidate2) => candidate2.id === receipt.id);
+  if (existing) {
+    if (existing.contentHash !== receipt.contentHash) {
+      throw new Error("Model-improvement qualification ID already has different immutable content.");
+    }
+    return existing;
+  }
+  await input.store.saveHarnessImprovementArtifact(
+    lineage.review.workspaceId,
+    "training_qualification",
+    receipt
+  );
+  await linkQualificationReview({
+    store: input.store,
+    originRef: input.reviewRef,
+    workspaceId: lineage.review.workspaceId,
+    taskset,
+    baseline,
+    qualification: receipt,
+    createdAt
+  });
+  return receipt;
+}
+async function requireQualifiedModelImprovement(input) {
+  const receipt = (await input.store.listHarnessImprovementArtifacts(
+    input.workspaceId,
+    "training_qualification",
+    1e3
+  )).find(
+    (candidate2) => candidate2.id === input.qualificationRef.id && candidate2.contentHash === input.qualificationRef.contentHash
+  );
+  if (!receipt || receipt.decision === "no_training") {
+    throw new Error("A qualified model-improvement receipt is required before planning training.");
+  }
+  const taskset = await input.store.getTaskset(input.tasksetId);
+  if (!taskset || taskset.metadata.harnessEvaluationReview === void 0) {
+    throw new Error("Qualified Taskset was not found.");
+  }
+  if (receipt.metadata.sourceTasksetId !== taskset.id || receipt.metadata.sourceTasksetHash !== taskset.contentHash) {
+    throw new Error("Model-improvement qualification does not match the current immutable Taskset.");
+  }
+  if (!recipeMatches(receipt.decision, input.recipe.method)) {
+    throw new Error("Training recipe method does not match the qualification decision.");
+  }
+  if (receipt.model.model !== input.baseModelId) {
+    throw new Error("Training base Model does not match the qualified baseline Model.");
+  }
+  if (input.maximumCostUsd !== null && input.maximumCostUsd !== void 0 && input.maximumCostUsd > receipt.maximumCostUsd) {
+    throw new Error("Training approval exceeds the qualified maximum cost.");
+  }
+  return receipt;
+}
+function signalForTaskset(taskset, baseline) {
+  const calibrated = taskset.graders.every(
+    (grader) => grader.kind !== "model_judge" || grader.calibrationStatus === "passed"
+  );
+  const confounded = baseline.rewardEligibleCount < baseline.attemptCount || (baseline.failureCounts.infrastructure_failure ?? 0) > 0;
+  const variance2 = typeof baseline.metadata.scoreVariance === "number" ? baseline.metadata.scoreVariance : null;
+  if (taskset.learningSignals.rewards.length) {
+    const sourceIds = new Set(taskset.learningSignals.rewards.flatMap((signal) => signal.sourceRefs));
+    const usable = calibrated && !confounded && variance2 !== null && variance2 > 0 && sourceIds.size > 0;
+    return {
+      decision: usable ? "rl" : "no_training",
+      kind: "scalar_reward",
+      strength: usable ? "usable" : variance2 === 0 ? "weak" : "absent",
+      calibrated,
+      confounded,
+      variance: variance2,
+      sourceIds,
+      reasons: [usable ? "The Taskset has calibrated scalar reward with non-zero baseline variance." : "RL requires calibrated, non-confounded scalar reward with non-zero baseline variance."]
+    };
+  }
+  if (taskset.learningSignals.preferences.length) {
+    const sourceIds = new Set(taskset.learningSignals.preferences.flatMap((signal) => signal.sourceRefs));
+    const usable = calibrated && !confounded && sourceIds.size > 0;
+    return {
+      decision: usable ? "preference" : "no_training",
+      kind: "chosen_rejected",
+      strength: usable ? "usable" : "weak",
+      calibrated,
+      confounded,
+      variance: variance2,
+      sourceIds,
+      reasons: [usable ? "The Taskset has approved chosen/rejected pairs." : "Preference training lacks usable approved chosen/rejected signal."]
+    };
+  }
+  if (taskset.learningSignals.demonstrations.length) {
+    const sourceIds = new Set(taskset.learningSignals.demonstrations.flatMap((signal) => signal.sourceRefs));
+    const usable = calibrated && !confounded && sourceIds.size > 0;
+    return {
+      decision: usable ? "sft" : "no_training",
+      kind: "demonstrations",
+      strength: usable ? "usable" : "weak",
+      calibrated,
+      confounded,
+      variance: variance2,
+      sourceIds,
+      reasons: [usable ? "The Taskset has approved demonstration signal." : "SFT lacks usable approved demonstration signal."]
+    };
+  }
+  return {
+    decision: "no_training",
+    kind: "none",
+    strength: "absent",
+    calibrated,
+    confounded,
+    variance: variance2,
+    sourceIds: /* @__PURE__ */ new Set(),
+    reasons: ["The Taskset has no eligible non-frozen learning signal."]
+  };
+}
+function taskEvidenceRefs(taskset, sourceIds) {
+  return taskset.sourceRefs.filter((source) => sourceIds.has(source.id)).map((source) => ({
+    id: source.id,
+    contentHash: isTrainingSourceRef(source) ? source.sourceHash : contentHash(source)
+  }));
+}
+function assertBaselineLineage(taskset, baseline, reviewRef) {
+  const boundReview = taskset.metadata.harnessEvaluationReview;
+  if (!sameRef(boundReview, reviewRef)) {
+    throw new Error("Taskset does not match the supplied Harness Evaluation review.");
+  }
+  if (baseline.metadata.kind !== "baseline" || baseline.metadata.sourceTasksetId !== taskset.id || baseline.metadata.sourceTasksetHash !== taskset.contentHash || !sameRef(baseline.metadata.harnessEvaluationReview, reviewRef)) {
+    throw new Error("Baseline Evaluation lineage does not match the Taskset and review.");
+  }
+}
+function harnessLineage(taskset) {
+  const value = taskset.metadata.harnessEvaluationLineage;
+  if (!isRecord5(value) || !isRecord5(value.review) || !Array.isArray(value.sourcePolicies)) {
+    throw new Error("Taskset has no exact Harness Evaluation source-policy lineage.");
+  }
+  return {
+    review: {
+      id: String(value.review.id ?? ""),
+      contentHash: String(value.review.contentHash ?? ""),
+      workspaceId: String(value.review.workspaceId ?? "")
+    },
+    sourcePolicies: value.sourcePolicies
+  };
+}
+async function linkQualificationReview(input) {
+  const reviews = await input.store.listHarnessImprovementArtifacts(
+    input.workspaceId,
+    "evaluation_review",
+    1e3
+  );
+  const origin = reviews.find((review) => sameRef(review, input.originRef));
+  if (!origin) throw new Error("Originating Harness Evaluation review was not found.");
+  const qualificationRef = { id: input.qualification.id, contentHash: input.qualification.contentHash };
+  const linkKey = contentHash({
+    origin: input.originRef,
+    taskset: input.taskset.contentHash,
+    baseline: input.baseline.contentHash,
+    qualification: qualificationRef
+  });
+  if (reviews.some((review) => review.metadata.downstreamLinkKey === linkKey)) return;
+  const qualified = input.qualification.decision !== "no_training";
+  const receipt = createHarnessEvaluationReviewReceipt({
+    schemaVersion: "openpond.harnessEvaluationReviewReceipt.v1",
+    id: `evaluation-review-qualification-${linkKey.slice(0, 24)}`,
+    ownerScope: origin.ownerScope,
+    workspaceRef: origin.workspaceRef,
+    harnessRelease: origin.harnessRelease,
+    previousWatermark: origin.nextWatermark,
+    nextWatermark: {
+      cursor: contentHash({ cursor: origin.nextWatermark.cursor, qualificationRef }),
+      throughCreatedAt: input.createdAt
+    },
+    selectedEvidence: origin.selectedEvidence,
+    excludedEvidence: origin.excludedEvidence,
+    claim: origin.claim,
+    classification: qualified ? "model_improvement" : "taskset",
+    triage: [...origin.triage, {
+      layer: "model",
+      status: qualified ? "unresolved" : "blocked",
+      reason: input.qualification.reasons.join(" "),
+      evidenceRefs: [
+        { id: input.baseline.id, contentHash: input.baseline.contentHash },
+        qualificationRef
+      ]
+    }],
+    reason: input.qualification.reasons.join(" "),
+    nextAuthority: "human_review",
+    maxEstimatedCostUsd: input.qualification.maximumCostUsd,
+    tasksetProposal: { id: input.taskset.id, contentHash: input.taskset.contentHash },
+    evaluation: { id: input.baseline.id, contentHash: input.baseline.contentHash },
+    trainingQualification: qualificationRef,
+    policyVersion: origin.policyVersion,
+    createdAt: input.createdAt,
+    metadata: { originReview: input.originRef, downstreamLinkKey: linkKey }
+  });
+  await input.store.saveHarnessImprovementArtifact(input.workspaceId, "evaluation_review", receipt);
+}
+function immutableRef(value, label) {
+  const parsed = ImmutableReleaseRefSchema.safeParse(value);
+  if (!parsed.success) throw new Error(`${label} reference is missing from the baseline Evaluation.`);
+  return parsed.data;
+}
+function hashMetadata(baseline, key) {
+  const value = baseline.metadata[key];
+  if (typeof value !== "string") throw new Error(`Baseline Evaluation is missing ${key}.`);
+  return value;
+}
+function recipeMatches(decision, method) {
+  if (decision === "sft") return method === "sft";
+  if (decision === "preference") return method === "dpo";
+  if (decision === "rl") return method === "grpo" || method === "ppo";
+  return false;
+}
+function sameRef(value, expected) {
+  return isRecord5(value) && value.id === expected.id && value.contentHash === expected.contentHash;
+}
+function isRecord5(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+
+// ../server/src/training/harness-training-api-inputs.ts
+function harnessIntegerArray(value, label) {
+  if (value === void 0) return void 0;
+  if (!Array.isArray(value) || value.some((item) => !Number.isInteger(item))) {
+    throw new Error(`${label} must be an array of integers.`);
+  }
+  return value;
+}
+function nonnegativeHarnessNumber(value, name) {
+  if (typeof value !== "number" || !Number.isFinite(value) || value < 0) {
+    throw new Error(`${name} must be a non-negative number.`);
+  }
+  return value;
+}
+function optionalImmutableRef(value, name) {
+  if (value === void 0 || value === null) return null;
+  return requiredImmutableRef(value, name);
+}
+function requiredImmutableRef(value, name) {
+  const candidate2 = record9(value);
+  return {
+    id: requiredString8(candidate2.id, `${name}.id`),
+    contentHash: requiredString8(candidate2.contentHash, `${name}.contentHash`)
+  };
+}
+function sameImmutableRef(value, expected) {
+  const candidate2 = record9(value);
+  return candidate2.id === expected.id && candidate2.contentHash === expected.contentHash;
+}
+function recipeBaseModelId(recipe) {
+  const method = recipe.method;
+  const base = record9(recipe.baseModel);
+  if (method === "sft" || method === "grpo") {
+    return requiredString8(base.id, "recipe.baseModel.id");
+  }
+  if (method === "dpo") {
+    return requiredString8(record9(recipe.policyModel).id, "recipe.policyModel.id");
+  }
+  if (method === "ppo") {
+    return requiredString8(
+      record9(record9(recipe.policyOptimization).policyModel).id,
+      "recipe.policyOptimization.policyModel.id"
+    );
+  }
+  throw new Error("Qualified training recipe method is not executable.");
+}
+function record9(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+function requiredString8(value, name) {
+  if (typeof value !== "string" || !value.trim()) throw new Error(`${name} is required.`);
+  return value.trim();
+}
+
 // ../server/src/training/training-api.ts
 function createTrainingApi(deps) {
   async function request(action, payload, requestUrl) {
-    const input = record9(payload);
+    const input = record10(payload);
     if (action === "state") return state(string(input.profileId) ?? requestUrl?.searchParams.get("profileId") ?? "default");
     if (action === "activity") return activity(string(input.profileId) ?? requestUrl?.searchParams.get("profileId") ?? "default");
     if (action === "portable_catalog") {
@@ -53310,7 +54074,7 @@ function createTrainingApi(deps) {
     }
     if (action === "delete_model_run_draft") {
       const draft = await deps.store.getModelRunDraft(
-        requiredString8(input.draftId, "draftId")
+        requiredString9(input.draftId, "draftId")
       );
       if (!draft) return { deleted: false };
       if (draft.status === "launched") {
@@ -53319,9 +54083,9 @@ function createTrainingApi(deps) {
       await deps.store.deleteModelRunDraft(draft.id);
       return { deleted: true, draftId: draft.id };
     }
-    if (action === "add_source") return deps.taskCreator.addSessionSource({ profileId: requiredString8(input.profileId, "profileId"), sessionId: requiredString8(input.sessionId, "sessionId"), turnIds: stringArray6(input.turnIds), consentScope: input.consentScope === "selected_turns" ? "selected_turns" : "full_session" });
+    if (action === "add_source") return deps.taskCreator.addSessionSource({ profileId: requiredString9(input.profileId, "profileId"), sessionId: requiredString9(input.sessionId, "sessionId"), turnIds: stringArray6(input.turnIds), consentScope: input.consentScope === "selected_turns" ? "selected_turns" : "full_session" });
     if (action === "add_sources") {
-      const profileId = requiredString8(input.profileId, "profileId");
+      const profileId = requiredString9(input.profileId, "profileId");
       const sources = [];
       for (const sessionId of requiredStringArray(input.sessionIds, "sessionIds")) {
         sources.push(await deps.taskCreator.addSessionSource({ profileId, sessionId, consentScope: "full_session" }));
@@ -53333,7 +54097,7 @@ function createTrainingApi(deps) {
     if (action === "dataset_rows") {
       if (!requestUrl) throw new Error("Dataset row query is missing its URL.");
       return deps.datasetArtifacts.rows(
-        requiredString8(input.tasksetId, "tasksetId"),
+        requiredString9(input.tasksetId, "tasksetId"),
         {
           split: requestUrl.searchParams.get("split") || null,
           cursor: requestUrl.searchParams.get("cursor") || null,
@@ -53350,37 +54114,53 @@ function createTrainingApi(deps) {
     if (action === "materialize_dataset_import") {
       const approved = ApproveDatasetImportMappingRequestSchema.parse(input);
       return deps.datasetImports.materialize({
-        id: requiredString8(input.importId, "importId"),
+        id: requiredString9(input.importId, "importId"),
         ...approved
       });
     }
     if (action === "cancel_dataset_import") {
-      return deps.datasetImports.cancel(requiredString8(input.importId, "importId"));
+      return deps.datasetImports.cancel(requiredString9(input.importId, "importId"));
     }
     if (action === "remove_source") {
-      await deps.store.deleteTrainingSource(requiredString8(input.sourceId, "sourceId"));
+      await deps.store.deleteTrainingSource(requiredString9(input.sourceId, "sourceId"));
       return { removed: true };
     }
-    if (action === "delete_taskset") return deps.training.deleteTaskset(requiredString8(input.tasksetId, "tasksetId"));
+    if (action === "delete_taskset") return deps.training.deleteTaskset(requiredString9(input.tasksetId, "tasksetId"));
     if (action === "create_model_from_taskset") {
       const preferredBaseModel = requiredBaseModelPreference(
         input.preferredBaseModel,
         input.preferredBaseModelId
       );
       return createModelFromTaskset({
-        profileId: requiredString8(input.profileId, "profileId"),
-        tasksetId: requiredString8(input.tasksetId, "tasksetId"),
+        profileId: requiredString9(input.profileId, "profileId"),
+        tasksetId: requiredString9(input.tasksetId, "tasksetId"),
         preferredBaseModelId: preferredBaseModel.modelId,
         preferredBaseModel
       });
     }
+    if (action === "accept_harness_review") {
+      const reviewRef = record10(input.reviewRef);
+      return startHarnessReviewTasksetAuthoring({
+        store: deps.store,
+        taskCreator: deps.taskCreator,
+        startCreation: startModelCreation,
+        profileId: requiredString9(input.profileId, "profileId"),
+        workspaceId: requiredString9(input.workspaceId, "workspaceId"),
+        reviewRef: {
+          id: requiredString9(reviewRef.id, "reviewRef.id"),
+          contentHash: requiredString9(reviewRef.contentHash, "reviewRef.contentHash")
+        },
+        analysisModel: input.analysisModel ? ChatModelRefSchema.parse(input.analysisModel) : null,
+        analysisReasoningEffort: input.analysisReasoningEffort ? CodexReasoningEffortSchema.parse(input.analysisReasoningEffort) : null
+      });
+    }
     if (action === "start_creation") {
       const preferredBaseModel = nullableBaseModelPreference(
         input.preferredBaseModel,
         input.preferredBaseModelId
       );
       return startModelCreation({
-        profileId: requiredString8(input.profileId, "profileId"),
+        profileId: requiredString9(input.profileId, "profileId"),
         sourceIds: stringArray6(input.sourceIds),
         surface: creationSurface(input.surface),
         mode: input.mode === "customize" ? "customize" : "defaults",
@@ -53399,34 +54179,38 @@ function createTrainingApi(deps) {
         targetIntent: tasksetTargetIntent(input.targetIntent)
       });
     }
-    if (action === "approve_disclosure") return syncCreation(await deps.taskCreator.approveDisclosure(requiredString8(input.creationId, "creationId"), input.approved === true));
-    if (action === "retry_creation") return retryModelCreation(requiredString8(input.creationId, "creationId"));
-    if (action === "answer_questions") return syncCreation(await deps.taskCreator.answerQuestions(requiredString8(input.creationId, "creationId"), stringRecord(input.answers)));
+    if (action === "approve_disclosure") return syncCreation(await deps.taskCreator.approveDisclosure(requiredString9(input.creationId, "creationId"), input.approved === true));
+    if (action === "retry_creation") return retryModelCreation(requiredString9(input.creationId, "creationId"));
+    if (action === "answer_questions") return syncCreation(await deps.taskCreator.answerQuestions(requiredString9(input.creationId, "creationId"), stringRecord(input.answers)));
     if (action === "approve_materialization") {
-      const creation = await deps.taskCreator.approveMaterialization(requiredString8(input.creationId, "creationId"), input.approved === true);
-      if (creation.state === "ready" && creation.materializedTasksetId) await deps.evaluation.readiness(creation.materializedTasksetId);
+      const creation = await deps.taskCreator.approveMaterialization(requiredString9(input.creationId, "creationId"), input.approved === true);
+      if (creation.state === "ready" && creation.materializedTasksetId) {
+        await deps.evaluation.readiness(creation.materializedTasksetId);
+        const taskset = await deps.store.getTaskset(creation.materializedTasksetId);
+        if (taskset) await linkHarnessReviewTaskset({ store: deps.store, taskset });
+      }
       return syncCreation(creation);
     }
-    if (action === "chat_creation") return syncCreation(await deps.taskCreator.chat(requiredString8(input.creationId, "creationId"), requiredString8(input.message, "message")));
-    if (action === "rename_creation") return syncCreation(await deps.taskCreator.rename(requiredString8(input.creationId, "creationId"), requiredString8(input.name, "name")));
-    if (action === "cancel_creation") return syncCreation(await deps.taskCreator.cancel(requiredString8(input.creationId, "creationId")));
+    if (action === "chat_creation") return syncCreation(await deps.taskCreator.chat(requiredString9(input.creationId, "creationId"), requiredString9(input.message, "message")));
+    if (action === "rename_creation") return syncCreation(await deps.taskCreator.rename(requiredString9(input.creationId, "creationId"), requiredString9(input.name, "name")));
+    if (action === "cancel_creation") return syncCreation(await deps.taskCreator.cancel(requiredString9(input.creationId, "creationId")));
     if (action === "run_miner") return deps.taskMiner.startRun(RunTaskMinerRequestSchema.parse(input));
-    if (action === "cancel_miner_run") return deps.taskMiner.cancelRun(requiredString8(input.runId, "runId"));
-    if (action === "configure_miner") return deps.taskMiner.updateConfig(requiredString8(input.profileId, "profileId"), TaskMinerConfigSchema.parse(input.config));
-    if (action === "patch_candidate") return deps.taskMiner.patch(requiredString8(input.candidateId, "candidateId"), PatchTaskCandidateRequestSchema.parse(input.patch));
+    if (action === "cancel_miner_run") return deps.taskMiner.cancelRun(requiredString9(input.runId, "runId"));
+    if (action === "configure_miner") return deps.taskMiner.updateConfig(requiredString9(input.profileId, "profileId"), TaskMinerConfigSchema.parse(input.config));
+    if (action === "patch_candidate") return deps.taskMiner.patch(requiredString9(input.candidateId, "candidateId"), PatchTaskCandidateRequestSchema.parse(input.patch));
     if (action === "create_candidate") {
-      const candidate2 = await deps.store.getTaskCandidate(requiredString8(input.candidateId, "candidateId"));
+      const candidate2 = await deps.store.getTaskCandidate(requiredString9(input.candidateId, "candidateId"));
       if (!candidate2) throw new Error("Task Candidate not found.");
       const sourceIds = [...new Set(candidate2.evidence.flatMap((item) => item.sourceRefIds))];
       await deps.taskMiner.patch(candidate2.id, { status: "creating" });
       return startModelCreation({ profileId: candidate2.profileId, sourceIds, surface: "task_candidate", mode: input.mode === "customize" ? "customize" : "defaults", entryMode: "automated", objective: string(input.objective) ?? candidate2.summary, candidateId: candidate2.id, analysisModel: input.analysisModel ? ChatModelRefSchema.parse(input.analysisModel) : null, analysisReasoningEffort: input.analysisReasoningEffort ? CodexReasoningEffortSchema.parse(input.analysisReasoningEffort) : null });
     }
-    if (action === "grade") return deps.evaluation.grade({ tasksetId: requiredString8(input.tasksetId, "tasksetId"), taskId: requiredString8(input.taskId, "taskId"), attempt: input.attempt });
+    if (action === "grade") return deps.evaluation.grade({ tasksetId: requiredString9(input.tasksetId, "tasksetId"), taskId: requiredString9(input.taskId, "taskId"), attempt: input.attempt });
     if (action === "execute_taskset_attempt") {
-      const sampling = record9(input.sampling);
+      const sampling = record10(input.sampling);
       return deps.evaluation.execute({
-        tasksetId: requiredString8(input.tasksetId, "tasksetId"),
-        taskId: requiredString8(input.taskId, "taskId"),
+        tasksetId: requiredString9(input.tasksetId, "tasksetId"),
+        taskId: requiredString9(input.taskId, "taskId"),
         model: ChatModelRefSchema.parse(input.model),
         seed: boundedInteger(input.seed, "seed", -2147483648, 2147483647, 17),
         attempt: boundedInteger(input.attempt, "attempt", 0, 1e6, 0),
@@ -53456,38 +54240,121 @@ function createTrainingApi(deps) {
         resultId: string(input.resultId) ?? void 0
       });
     }
-    if (action === "audit_graders") return deps.evaluation.auditFixtures({ tasksetId: requiredString8(input.tasksetId, "tasksetId"), fixtures: Array.isArray(input.fixtures) ? input.fixtures : void 0 });
-    if (action === "calibrate_judges") return deps.evaluation.calibrateModelJudges(requiredString8(input.tasksetId, "tasksetId"));
-    if (action === "readiness") return deps.evaluation.readiness(requiredString8(input.tasksetId, "tasksetId"));
-    if (action === "preview_expert_bootstrap") return deps.training.previewExpertBootstrap(requiredString8(input.tasksetId, "tasksetId"));
+    if (action === "execute_harness_review_baseline") {
+      const reviewRef = record10(input.reviewRef);
+      const sampling = record10(input.sampling);
+      return deps.evaluation.executeBaseline({
+        tasksetId: requiredString9(input.tasksetId, "tasksetId"),
+        model: ChatModelRefSchema.parse(input.model),
+        reviewRef: {
+          id: requiredString9(reviewRef.id, "reviewRef.id"),
+          contentHash: requiredString9(reviewRef.contentHash, "reviewRef.contentHash")
+        },
+        seeds: harnessIntegerArray(input.seeds, "seeds"),
+        attemptsPerTask: boundedInteger(
+          input.attemptsPerTask,
+          "attemptsPerTask",
+          1,
+          20,
+          1
+        ),
+        sampling: {
+          maxOutputTokens: boundedInteger(
+            sampling.maxOutputTokens,
+            "sampling.maxOutputTokens",
+            1,
+            128e3,
+            4096
+          ),
+          temperature: boundedNumber(
+            sampling.temperature,
+            "sampling.temperature",
+            0,
+            2,
+            0
+          ),
+          topP: boundedNumber(sampling.topP, "sampling.topP", 0, 1, 1)
+        }
+      });
+    }
+    if (action === "qualify_harness_model_improvement") {
+      const reviewRef = requiredImmutableRef(input.reviewRef, "reviewRef");
+      return qualifyHarnessModelImprovement({
+        store: deps.store,
+        tasksetId: requiredString9(input.tasksetId, "tasksetId"),
+        baselineEvaluationId: requiredString9(input.baselineEvaluationId, "baselineEvaluationId"),
+        reviewRef,
+        privacyApproval: optionalImmutableRef(input.privacyApproval, "privacyApproval"),
+        budgetApproval: optionalImmutableRef(input.budgetApproval, "budgetApproval"),
+        maximumCostUsd: nonnegativeHarnessNumber(input.maximumCostUsd, "maximumCostUsd")
+      });
+    }
+    if (action === "audit_graders") return deps.evaluation.auditFixtures({ tasksetId: requiredString9(input.tasksetId, "tasksetId"), fixtures: Array.isArray(input.fixtures) ? input.fixtures : void 0 });
+    if (action === "calibrate_judges") return deps.evaluation.calibrateModelJudges(requiredString9(input.tasksetId, "tasksetId"));
+    if (action === "readiness") return deps.evaluation.readiness(requiredString9(input.tasksetId, "tasksetId"));
+    if (action === "preview_expert_bootstrap") return deps.training.previewExpertBootstrap(requiredString9(input.tasksetId, "tasksetId"));
     if (action === "approve_expert_bootstrap") return deps.training.approveExpertBootstrap({
-      tasksetId: requiredString8(input.tasksetId, "tasksetId"),
-      previewHash: requiredString8(input.previewHash, "previewHash")
-    });
-    if (action === "create_plan") return deps.training.createPlan({ modelId: requiredString8(input.modelId, "modelId"), tasksetId: requiredString8(input.tasksetId, "tasksetId"), destinationId: TrainingDestinationIdSchema.parse(input.destinationId), recipe: input.recipe, environmentPlacement: managedRolloutPlacement(input.environmentPlacement), exportApproved: input.exportApproved === true, retentionDays: nullableNumber(input.retentionDays), region: string(input.region) });
+      tasksetId: requiredString9(input.tasksetId, "tasksetId"),
+      previewHash: requiredString9(input.previewHash, "previewHash")
+    });
+    if (action === "create_plan") return deps.training.createPlan({ modelId: requiredString9(input.modelId, "modelId"), tasksetId: requiredString9(input.tasksetId, "tasksetId"), destinationId: TrainingDestinationIdSchema.parse(input.destinationId), recipe: input.recipe, environmentPlacement: managedRolloutPlacement(input.environmentPlacement), exportApproved: input.exportApproved === true, retentionDays: nullableNumber(input.retentionDays), region: string(input.region) });
+    if (action === "prepare_qualified_model_improvement") {
+      const qualificationRef = requiredImmutableRef(input.qualificationRef, "qualificationRef");
+      const workspaceId = requiredString9(input.workspaceId, "workspaceId");
+      const tasksetId = requiredString9(input.tasksetId, "tasksetId");
+      const recipe = record10(input.recipe);
+      const destinationId = TrainingDestinationIdSchema.parse(input.destinationId);
+      const qualification = await requireQualifiedModelImprovement({
+        store: deps.store,
+        workspaceId,
+        qualificationRef,
+        tasksetId,
+        recipe,
+        baseModelId: recipeBaseModelId(recipe)
+      });
+      if (qualification.decision === "rl" && destinationId !== "openpond_managed") {
+        throw new Error("Qualified RL must use the OpenPond Managed boundary.");
+      }
+      const prepared = await deps.training.prepareStart({
+        modelId: requiredString9(input.modelId, "modelId"),
+        tasksetId,
+        destinationId,
+        recipe,
+        environmentPlacement: managedRolloutPlacement(input.environmentPlacement),
+        exportApproved: input.exportApproved === true,
+        retentionDays: nullableNumber(input.retentionDays),
+        region: string(input.region),
+        harnessRelease: qualification.harnessRelease,
+        modelImprovementQualification: qualificationRef
+      });
+      if (prepared.plan.estimatedCostUsd !== null && prepared.plan.estimatedCostUsd > qualification.maximumCostUsd) {
+        throw new Error("Prepared Training Plan exceeds the qualified maximum cost.");
+      }
+      return { qualification, prepared };
+    }
     if (action === "prepare_model_run") return deps.training.prepareModelRun({
-      modelRunId: requiredString8(input.modelRunId, "modelRunId"),
+      modelRunId: requiredString9(input.modelRunId, "modelRunId"),
       maximumSpendUsd: nullableNumber(input.maximumSpendUsd),
       retentionDays: nullableNumber(input.retentionDays)
     });
     if (action === "start_model_run") return deps.training.startModelRun({
-      modelRunId: requiredString8(input.modelRunId, "modelRunId"),
+      modelRunId: requiredString9(input.modelRunId, "modelRunId"),
       maximumSpendUsd: nullableNumber(input.maximumSpendUsd),
       retentionDays: nullableNumber(input.retentionDays),
       exportApproved: input.exportApproved === true,
       manifest: input.manifest
     });
-    if (action === "model_run_status") return deps.training.modelRunStatus(requiredString8(input.modelRunId, "modelRunId"));
-    if (action === "model_run_events") return deps.training.modelRunEvents(requiredString8(input.modelRunId, "modelRunId"));
-    if (action === "model_run_logs") return deps.training.modelRunLogs(requiredString8(input.modelRunId, "modelRunId"));
-    if (action === "model_run_artifacts") return deps.training.modelRunArtifacts(requiredString8(input.modelRunId, "modelRunId"));
-    if (action === "cancel_model_run") return deps.training.cancelModelRun(requiredString8(input.modelRunId, "modelRunId"));
-    if (action === "build_bundle") return deps.training.buildBundle(requiredString8(input.planId, "planId"));
-    if (action === "approve_training") return deps.training.approve({ planId: requiredString8(input.planId, "planId"), bundleId: requiredString8(input.bundleId, "bundleId"), approvedBy: string(input.approvedBy) ?? void 0, maximumCostUsd: nullableNumber(input.maximumCostUsd) });
-    if (action === "launch") return deps.training.launch({ planId: requiredString8(input.planId, "planId"), approvalId: requiredString8(input.approvalId, "approvalId") });
+    if (action === "model_run_status") return deps.training.modelRunStatus(requiredString9(input.modelRunId, "modelRunId"));
+    if (action === "model_run_events") return deps.training.modelRunEvents(requiredString9(input.modelRunId, "modelRunId"));
+    if (action === "model_run_logs") return deps.training.modelRunLogs(requiredString9(input.modelRunId, "modelRunId"));
+    if (action === "model_run_artifacts") return deps.training.modelRunArtifacts(requiredString9(input.modelRunId, "modelRunId"));
+    if (action === "cancel_model_run") return deps.training.cancelModelRun(requiredString9(input.modelRunId, "modelRunId"));
+    if (action === "build_bundle") return deps.training.buildBundle(requiredString9(input.planId, "planId"));
+    if (action === "approve_training") return deps.training.approve({ planId: requiredString9(input.planId, "planId"), bundleId: requiredString9(input.bundleId, "bundleId"), approvedBy: string(input.approvedBy) ?? void 0, maximumCostUsd: nullableNumber(input.maximumCostUsd) });
+    if (action === "launch") return deps.training.launch({ planId: requiredString9(input.planId, "planId"), approvalId: requiredString9(input.approvalId, "approvalId") });
     if (action === "prepare_start") return deps.training.prepareStart({
-      modelId: requiredString8(input.modelId, "modelId"),
-      tasksetId: requiredString8(input.tasksetId, "tasksetId"),
+      modelId: requiredString9(input.modelId, "modelId"),
+      tasksetId: requiredString9(input.tasksetId, "tasksetId"),
       destinationId: TrainingDestinationIdSchema.parse(input.destinationId),
       recipe: input.recipe,
       environmentPlacement: managedRolloutPlacement(input.environmentPlacement),
@@ -53497,41 +54364,66 @@ function createTrainingApi(deps) {
     });
     if (action === "start_prepared") {
       const result = await deps.training.startPrepared({
-        planId: requiredString8(input.planId, "planId"),
-        bundleId: requiredString8(input.bundleId, "bundleId"),
+        planId: requiredString9(input.planId, "planId"),
+        bundleId: requiredString9(input.bundleId, "bundleId"),
         maximumCostUsd: nullableNumber(input.maximumCostUsd)
       });
       return linkStartedTraining(result);
     }
+    if (action === "start_qualified_model_improvement") {
+      const qualificationRef = requiredImmutableRef(input.qualificationRef, "qualificationRef");
+      const planId = requiredString9(input.planId, "planId");
+      const bundleId = requiredString9(input.bundleId, "bundleId");
+      const plan = await deps.store.getTrainingPlan(planId);
+      if (!plan || !sameImmutableRef(plan.modelImprovementQualification, qualificationRef)) {
+        throw new Error("Prepared Training Plan does not match the supplied qualification.");
+      }
+      const maximumCostUsd = nonnegativeHarnessNumber(input.maximumCostUsd, "maximumCostUsd");
+      const qualification = await requireQualifiedModelImprovement({
+        store: deps.store,
+        workspaceId: requiredString9(input.workspaceId, "workspaceId"),
+        qualificationRef,
+        tasksetId: plan.tasksetId,
+        recipe: plan.recipe,
+        baseModelId: recipeBaseModelId(plan.recipe),
+        maximumCostUsd
+      });
+      const result = await deps.training.startPrepared({
+        planId,
+        bundleId,
+        maximumCostUsd
+      });
+      return { ...await linkStartedTraining(result), qualification };
+    }
     if (action === "start") {
-      const result = await deps.training.start({ modelId: requiredString8(input.modelId, "modelId"), tasksetId: requiredString8(input.tasksetId, "tasksetId"), destinationId: TrainingDestinationIdSchema.parse(input.destinationId), recipe: input.recipe, environmentPlacement: managedRolloutPlacement(input.environmentPlacement), exportApproved: input.exportApproved === true, maximumCostUsd: nullableNumber(input.maximumCostUsd), retentionDays: nullableNumber(input.retentionDays), region: string(input.region) });
+      const result = await deps.training.start({ modelId: requiredString9(input.modelId, "modelId"), tasksetId: requiredString9(input.tasksetId, "tasksetId"), destinationId: TrainingDestinationIdSchema.parse(input.destinationId), recipe: input.recipe, environmentPlacement: managedRolloutPlacement(input.environmentPlacement), exportApproved: input.exportApproved === true, maximumCostUsd: nullableNumber(input.maximumCostUsd), retentionDays: nullableNumber(input.retentionDays), region: string(input.region) });
       return linkStartedTraining(result);
     }
-    if (action === "import_artifact") return deps.training.importExternal({ planId: requiredString8(input.planId, "planId"), bundleId: requiredString8(input.bundleId, "bundleId"), artifactDirectory: requiredString8(input.artifactDirectory, "artifactDirectory") });
-    if (action === "export_bundle") return deps.training.exportBundle(requiredString8(input.bundleId, "bundleId"));
-    if (action === "artifact_download") return deps.training.artifactDownload(requiredString8(input.artifactId, "artifactId"));
-    if (action === "model_package_download") return deps.training.modelPackageDownload(requiredString8(input.modelId, "modelId"));
-    if (action === "reject_model") return deps.training.rejectModel({ modelId: requiredString8(input.modelId, "modelId"), reason: requiredString8(input.reason, "reason") });
+    if (action === "import_artifact") return deps.training.importExternal({ planId: requiredString9(input.planId, "planId"), bundleId: requiredString9(input.bundleId, "bundleId"), artifactDirectory: requiredString9(input.artifactDirectory, "artifactDirectory") });
+    if (action === "export_bundle") return deps.training.exportBundle(requiredString9(input.bundleId, "bundleId"));
+    if (action === "artifact_download") return deps.training.artifactDownload(requiredString9(input.artifactId, "artifactId"));
+    if (action === "model_package_download") return deps.training.modelPackageDownload(requiredString9(input.modelId, "modelId"));
+    if (action === "reject_model") return deps.training.rejectModel({ modelId: requiredString9(input.modelId, "modelId"), reason: requiredString9(input.reason, "reason") });
     if (action === "bind_model") return deps.training.bindModel({
-      profileId: requiredString8(input.profileId, "profileId"),
-      modelId: requiredString8(input.modelId, "modelId"),
-      role: requiredString8(input.role, "role"),
-      roleTargetId: requiredString8(input.roleTargetId, "roleTargetId"),
+      profileId: requiredString9(input.profileId, "profileId"),
+      modelId: requiredString9(input.modelId, "modelId"),
+      role: requiredString9(input.role, "role"),
+      roleTargetId: requiredString9(input.roleTargetId, "roleTargetId"),
       promotedBy: string(input.promotedBy) ?? void 0
     });
     if (action === "rollback_model_binding") return deps.training.rollbackModelBinding({
-      bindingId: requiredString8(input.bindingId, "bindingId"),
+      bindingId: requiredString9(input.bindingId, "bindingId"),
       rolledBackBy: string(input.rolledBackBy) ?? void 0
     });
-    if (action === "update_model_configuration") return deps.training.updateModelConfiguration({ modelId: requiredString8(input.modelId, "modelId"), configuration: record9(input.configuration) });
+    if (action === "update_model_configuration") return deps.training.updateModelConfiguration({ modelId: requiredString9(input.modelId, "modelId"), configuration: record10(input.configuration) });
     if (action === "set_model_pinned") return deps.training.setModelPinned({
-      modelId: requiredString8(input.modelId, "modelId"),
+      modelId: requiredString9(input.modelId, "modelId"),
       pinned: input.pinned === true
     });
-    if (action === "cancel_job") return deps.training.cancelJob(requiredString8(input.jobId, "jobId"));
-    if (action === "job_events") return deps.store.listTrainingJobEvents(requiredString8(input.jobId, "jobId"));
+    if (action === "cancel_job") return deps.training.cancelJob(requiredString9(input.jobId, "jobId"));
+    if (action === "job_events") return deps.store.listTrainingJobEvents(requiredString9(input.jobId, "jobId"));
     if (action === "run_detail") {
-      const jobId = requiredString8(input.jobId, "jobId");
+      const jobId = requiredString9(input.jobId, "jobId");
       await deps.training.refreshManagedRunEvidence(jobId).catch(() => void 0);
       return trainingRunDetail(deps.store, jobId);
     }
@@ -53621,6 +54513,9 @@ function createTrainingApi(deps) {
     ]);
     await syncModelTrainingCreateImproveRuns({ store: deps.store, profileId, execution });
     const graderAuditReports = (await Promise.all(tasksets.map((taskset) => deps.store.listGraderAuditReports(taskset.id)))).flat();
+    const evaluationResults = (await Promise.all(
+      tasksets.map((taskset) => deps.store.listEvaluationResults(taskset.id))
+    )).flat();
     const activity2 = projectTrainingActivity({
       profileId,
       state: {
@@ -53639,6 +54534,7 @@ function createTrainingApi(deps) {
       datasetImports,
       datasetArtifacts,
       graderAuditReports,
+      evaluationResults,
       candidates,
       minerConfig,
       minerRuns,
@@ -53850,13 +54746,13 @@ function createTrainingApi(deps) {
 function portableMethod(value) {
   return value === "sft" || value === "dpo" || value === "grpo" || value === "ppo" ? value : void 0;
 }
-function record9(value) {
+function record10(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
 function string(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
-function requiredString8(value, name) {
+function requiredString9(value, name) {
   const parsed = string(value);
   if (!parsed) throw new Error(`${name} is required.`);
   return parsed;
@@ -53881,7 +54777,7 @@ function requiredStringArray(value, name) {
   return parsed;
 }
 function stringRecord(value) {
-  return Object.fromEntries(Object.entries(record9(value)).filter((entry) => typeof entry[1] === "string"));
+  return Object.fromEntries(Object.entries(record10(value)).filter((entry) => typeof entry[1] === "string"));
 }
 function nullableNumber(value) {
   return typeof value === "number" && Number.isFinite(value) ? value : null;
@@ -53910,7 +54806,7 @@ function trainingMethodHint(value) {
   return value === "sft" || value === "dpo" || value === "grpo" || value === "ppo" ? value : null;
 }
 function tasksetTargetIntent(value) {
-  const candidate2 = record9(value);
+  const candidate2 = record10(value);
   const kind = candidate2.kind;
   return {
     kind: kind === "agent" || kind === "skill" || kind === "extension" || kind === "model" || kind === "configuration" ? kind : null,
@@ -54391,7 +55287,7 @@ async function inspectHuggingFaceDataset(locatorInput, request = fetch) {
     request,
     `https://huggingface.co/api/datasets/${locator.repositoryId}${revisionSuffix}`
   );
-  const resolvedRevision = requiredString9(repository.sha, "resolved Dataset revision");
+  const resolvedRevision = requiredString10(repository.sha, "resolved Dataset revision");
   const gated = repository.gated === true || typeof repository.gated === "string";
   const privateRepository = repository.private === true;
   if (gated || privateRepository) {
@@ -54430,8 +55326,8 @@ async function inspectHuggingFaceDataset(locatorInput, request = fetch) {
     )
   ]);
   const previewRows = Array.isArray(firstRows.rows) ? firstRows.rows.slice(0, 25).flatMap((value) => {
-    const record10 = asRecord17(value);
-    return record10 && asRecord17(record10.row) ? [record10.row] : [];
+    const record11 = asRecord17(value);
+    return record11 && asRecord17(record11.row) ? [record11.row] : [];
   }) : [];
   const columns = sourceColumns(firstRows.features, previewRows);
   const sizeBySplit = datasetSizeBySplit(sizes);
@@ -54448,7 +55344,7 @@ ${split.split}`) ?? {
       "Hugging Face has not produced a complete Parquet projection for this Dataset."
     );
   }
-  const parquetRevisionSha = requiredString9(
+  const parquetRevisionSha = requiredString10(
     parquetRevision.sha,
     "resolved Dataset Parquet revision"
   );
@@ -54640,9 +55536,9 @@ function flattenRecord(value, prefix, paths, rows) {
 function nestedValue(value, path72) {
   let current = value;
   for (const segment2 of path72.split(".")) {
-    const record10 = asRecord17(current);
-    if (!record10) return null;
-    current = record10[segment2];
+    const record11 = asRecord17(current);
+    if (!record11) return null;
+    current = record11[segment2];
   }
   return current;
 }
@@ -54711,9 +55607,9 @@ async function fetchJson(request, url) {
     }
     const bytes2 = Buffer.concat(chunks.map((chunk) => Buffer.from(chunk)));
     const parsed = JSON.parse(new TextDecoder().decode(bytes2));
-    const record10 = asRecord17(parsed);
-    if (!record10) throw new Error("Hugging Face returned invalid inspection metadata.");
-    return record10;
+    const record11 = asRecord17(parsed);
+    if (!record11) throw new Error("Hugging Face returned invalid inspection metadata.");
+    return record11;
   } finally {
     clearTimeout(timeout);
   }
@@ -54724,7 +55620,7 @@ function firstPresent(paths, candidates) {
 function asRecord17(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
-function requiredString9(value, label) {
+function requiredString10(value, label) {
   if (typeof value !== "string" || !value.trim()) {
     throw new Error(`Hugging Face did not return a ${label}.`);
   }
@@ -55189,11 +56085,11 @@ function requiredDatasetStorageBytes(sourceBytes) {
   return Math.ceil(sourceBytes * 2.2) + 256 * 1024 * 1024;
 }
 function parseDatasetMaterializeResult(value) {
-  const record10 = asRecord19(value);
-  if (record10?.schemaVersion !== "openpond.datasetMaterializeResult.v1" || typeof record10.rowCount !== "number" || !asRecord19(record10.splitCounts) || !Array.isArray(record10.shards) || typeof record10.schemaHash !== "string" || !asRecord19(record10.qualityReport) || typeof record10.qualityReportHash !== "string" || !Array.isArray(record10.previewRows) || !asRecord19(record10.firstTaskIds)) {
+  const record11 = asRecord19(value);
+  if (record11?.schemaVersion !== "openpond.datasetMaterializeResult.v1" || typeof record11.rowCount !== "number" || !asRecord19(record11.splitCounts) || !Array.isArray(record11.shards) || typeof record11.schemaHash !== "string" || !asRecord19(record11.qualityReport) || typeof record11.qualityReportHash !== "string" || !Array.isArray(record11.previewRows) || !asRecord19(record11.firstTaskIds)) {
     throw new Error("Dataset worker returned an invalid materialization result.");
   }
-  return record10;
+  return record11;
 }
 function selectedDatasetSourceRows(inspection, mapping) {
   return inspection.splits.filter(
@@ -55780,9 +56676,9 @@ function reusableSourceFiles(taskset, configuredRoot) {
   return result;
 }
 function finalizeMapping(input) {
-  const record10 = asRecord20(input);
-  if (!record10) throw new Error("Dataset mapping is required.");
-  const base = { ...record10, mappingHash: "00000000" };
+  const record11 = asRecord20(input);
+  if (!record11) throw new Error("Dataset mapping is required.");
+  const base = { ...record11, mappingHash: "00000000" };
   const parsed = DatasetImportMappingSchema.parse(base);
   const { mappingHash: _ignored, ...hashable } = parsed;
   return DatasetImportMappingSchema.parse({
@@ -56632,12 +57528,12 @@ function parseWindowsLogicalDisks(value, storeDir) {
   const rows = Array.isArray(parsed) ? parsed : [parsed];
   return rows.flatMap((row) => {
     if (!row || typeof row !== "object") return [];
-    const record10 = row;
-    const deviceId = typeof record10.DeviceID === "string" ? record10.DeviceID.trim() : "";
-    const driveType = typeof record10.DriveType === "number" ? record10.DriveType : Number(record10.DriveType);
+    const record11 = row;
+    const deviceId = typeof record11.DeviceID === "string" ? record11.DeviceID.trim() : "";
+    const driveType = typeof record11.DriveType === "number" ? record11.DriveType : Number(record11.DriveType);
     if (!/^[a-z]:$/i.test(deviceId) || ![2, 3, 4].includes(driveType)) return [];
     const root = `${deviceId}\\`;
-    const volumeName = typeof record10.VolumeName === "string" ? record10.VolumeName.trim() : "";
+    const volumeName = typeof record11.VolumeName === "string" ? record11.VolumeName.trim() : "";
     const kind = driveType === 4 ? "network" : driveType === 2 ? "removable" : "local";
     const storeRoot = path68.win32.parse(path68.win32.resolve(storeDir)).root.toLowerCase();
     return [{
@@ -57652,13 +58548,13 @@ function registryArtifacts(value) {
   return Array.isArray(value) ? value.map(requiredRegistryArtifact) : [];
 }
 function requiredRegistryCapabilities(value) {
-  if (!isRecord4(value) || value.schemaVersion !== "openpond.modelAdapterPlatformCapabilities.v1" || !isRecord4(value.contractVersions) || value.contractVersions.baseModelProfile !== "openpond.baseModelProfile.v2" || !isRecord4(value.lifecycle) || value.lifecycle.policyOwner !== "sandbox" || !Array.isArray(value.baseProfiles)) {
+  if (!isRecord6(value) || value.schemaVersion !== "openpond.modelAdapterPlatformCapabilities.v1" || !isRecord6(value.contractVersions) || value.contractVersions.baseModelProfile !== "openpond.baseModelProfile.v2" || !isRecord6(value.lifecycle) || value.lifecycle.policyOwner !== "sandbox" || !Array.isArray(value.baseProfiles)) {
     throw new Error(
       "Managed adapter registry returned incompatible platform capabilities."
     );
   }
   const baseProfiles = value.baseProfiles.map((profile) => {
-    if (!isRecord4(profile) || typeof profile.id !== "string" || typeof profile.repository !== "string" || typeof profile.revision !== "string" || typeof profile.tokenizerRevision !== "string" || typeof profile.chatTemplateHash !== "string" || !["draft", "qualified", "retired"].includes(String(profile.status))) {
+    if (!isRecord6(profile) || typeof profile.id !== "string" || typeof profile.repository !== "string" || typeof profile.revision !== "string" || typeof profile.tokenizerRevision !== "string" || typeof profile.chatTemplateHash !== "string" || !["draft", "qualified", "retired"].includes(String(profile.status))) {
       throw new Error(
         "Managed adapter registry returned an invalid base profile capability."
       );
@@ -57684,7 +58580,7 @@ function registryDeployments(value) {
   return value.map(requiredRegistryDeployment);
 }
 function requiredRegistryArtifact(value) {
-  if (!isRecord4(value) || typeof value.id !== "string" || typeof value.source !== "string" || typeof value.sourceRef !== "string" || typeof value.state !== "string" || typeof value.promotable !== "boolean" || typeof value.customerBindingAllowed !== "boolean") {
+  if (!isRecord6(value) || typeof value.id !== "string" || typeof value.source !== "string" || typeof value.sourceRef !== "string" || typeof value.state !== "string" || typeof value.promotable !== "boolean" || typeof value.customerBindingAllowed !== "boolean") {
     throw new Error("Managed adapter registry returned an invalid artifact.");
   }
   return {
@@ -57699,7 +58595,7 @@ function requiredRegistryArtifact(value) {
   };
 }
 function requiredRegistryDeployment(item) {
-  if (!isRecord4(item) || typeof item.id !== "string" || typeof item.artifactId !== "string" || typeof item.state !== "string") {
+  if (!isRecord6(item) || typeof item.id !== "string" || typeof item.artifactId !== "string" || typeof item.state !== "string") {
     throw new Error("Managed adapter registry returned an invalid deployment.");
   }
   return {
@@ -57708,7 +58604,7 @@ function requiredRegistryDeployment(item) {
     state: item.state
   };
 }
-function isRecord4(value) {
+function isRecord6(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 
@@ -57834,18 +58730,18 @@ function createManagedAdapterRegistryClient(dependencies = {}) {
       );
     }
     for await (const raw of parseSse(response.body, input.signal)) {
-      if (isRecord5(raw) && isRecord5(raw.error)) {
+      if (isRecord7(raw) && isRecord7(raw.error)) {
         throw new Error(
           typeof raw.error.code === "string" ? raw.error.code : "managed_adapter_stream_failed"
         );
       }
-      const usage = isRecord5(raw) && isRecord5(raw.usage) ? raw.usage : null;
+      const usage = isRecord7(raw) && isRecord7(raw.usage) ? raw.usage : null;
       if (usage) yield { usage, raw };
-      const choices = isRecord5(raw) && Array.isArray(raw.choices) ? raw.choices : [];
+      const choices = isRecord7(raw) && Array.isArray(raw.choices) ? raw.choices : [];
       for (const choiceValue of choices) {
-        const choice = isRecord5(choiceValue) ? choiceValue : null;
+        const choice = isRecord7(choiceValue) ? choiceValue : null;
         if (!choice) continue;
-        const delta = isRecord5(choice.delta) ? choice.delta : {};
+        const delta = isRecord7(choice.delta) ? choice.delta : {};
         if (typeof delta.content === "string" && delta.content) {
           yield { text: delta.content, raw };
         }
@@ -57909,7 +58805,7 @@ function managedApiError(payload, status, fallback) {
   const detail = typeof payload.message === "string" ? payload.message : typeof payload.error === "string" ? payload.error : fallback;
   return `Managed adapter API failed (${status}): ${detail.slice(0, 512)}`;
 }
-function isRecord5(value) {
+function isRecord7(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 
@@ -58508,9 +59404,9 @@ function createTrainingModelRuntime(deps) {
 }
 function costFromUsage(usage) {
   if (!usage || typeof usage !== "object" || Array.isArray(usage)) return {};
-  const record10 = usage;
+  const record11 = usage;
   for (const key of ["costUsd", "cost_usd", "totalCostUsd", "total_cost_usd"]) {
-    const value = record10[key];
+    const value = record11[key];
     if (typeof value === "number" && Number.isFinite(value) && value >= 0) {
       return { costUsd: value };
     }
@@ -59416,23 +60312,23 @@ ${grader.rubric}`
       })
     );
   }
-  async function safeUpsertModelUsageRecord(record10) {
+  async function safeUpsertModelUsageRecord(record11) {
     try {
-      await store.upsertModelUsageRecord(record10);
+      await store.upsertModelUsageRecord(record11);
     } catch (error) {
       await appendRuntimeEvent(
         event({
-          sessionId: record10.sessionId ?? void 0,
-          turnId: record10.turnId ?? void 0,
+          sessionId: record11.sessionId ?? void 0,
+          turnId: record11.turnId ?? void 0,
           name: "diagnostic",
           source: "server",
           status: "failed",
           output: error instanceof Error ? error.message : "Failed to persist model usage record.",
           data: {
             kind: "model_usage_record_failed",
-            requestId: record10.requestId,
-            provider: record10.provider,
-            model: record10.model
+            requestId: record11.requestId,
+            provider: record11.provider,
+            model: record11.model
           }
         })
       ).catch(() => void 0);
@@ -59767,6 +60663,11 @@ ${grader.rubric}`
     throw new Error(result.error);
   }
   const harnessSettingsRoutes = createLocalHarnessSettingsRoutePayloads({ store, storeDir });
+  const harnessEvaluationReviewScheduler = createLocalHarnessEvaluationReviewScheduler({
+    store,
+    isClosing: () => closing,
+    logger
+  });
   const agentRuntime = createAppServer({
     ports: createAgentRuntimePorts({
       createSession,
@@ -59779,6 +60680,8 @@ ${grader.rubric}`
       interruptSessionTurn,
       resolveApproval,
       inspectHarness: harnessSettingsRoutes.harnessHistoryPayload,
+      reviewHarnessProposal: harnessSettingsRoutes.reviewHarnessProposalPayload,
+      reviewHarness: (request) => reviewSelectedLocalHarnessEvaluation({ store, request }),
       validateHarness: async () => {
         const release = await resolveSelectedLocalHarnessRelease(store);
         return release ? {
@@ -59791,7 +60694,6 @@ ${grader.rubric}`
       updateHarnessBackgroundReview: harnessSettingsRoutes.updateHarnessBackgroundReviewPayload,
       diffHarness: harnessSettingsRoutes.harnessDiffPayload,
       rollbackHarness: harnessSettingsRoutes.rollbackHarnessPayload,
-      reviewHarnessProposal: harnessSettingsRoutes.reviewHarnessProposalPayload,
       subscribeRuntimeEvents,
       observeRuntimeOperation: (runtimeEvent) => {
         logger.info("agent runtime operation", runtimeEvent);
@@ -59993,7 +60895,10 @@ ${grader.rubric}`
   }
   await turnRunner.recoverPendingSubagentCompletions();
   workSandboxLifecycle.start();
-  if (options.httpEnabled !== false) localAgentScheduleLoop.start();
+  if (options.httpEnabled !== false) {
+    localAgentScheduleLoop.start();
+    harnessEvaluationReviewScheduler.start();
+  }
   const status = {
     id: serverId,
     host,
@@ -60015,7 +60920,8 @@ ${grader.rubric}`
     },
     backgroundLoops: [
       taskMinerBackgroundLoop,
-      localAgentScheduleLoop
+      localAgentScheduleLoop,
+      harnessEvaluationReviewScheduler
     ],
     browserControlQueue,
     closeEventSubscribers,