openpond 0.0.61 → 0.0.62

package/dist/chunks/{chunk-LBIVEX6V.js → chunk-GMX47RLP.js}

@@ -317,6 +317,7 @@ var AGENT_OPTION_SCHEMA = {
   agentId: string,
   agentEdit: json,
   allowLatestSource: boolean,
+  allowedActions: string,
   attachmentsJson: json,
   baseSha: string,
   chatMode: string,
@@ -341,6 +342,7 @@ var AGENT_OPTION_SCHEMA = {
   payload: json,
   projectId: string,
   prompt: string,
+  provider: string,
   publishedSnapshotId: string,
   ref: string,
   requirePublishedSnapshot: boolean,
@@ -397,7 +399,7 @@ var CLI_COMMAND_REGISTRY = [
     name: "help",
     usage: "openpond help",
     optionSchema: {},
-    handler: async () => (await import("./help-ZUIE4EPY.js")).printHelp()
+    handler: async () => (await import("./help-4MQ4EOIS.js")).printHelp()
   },
   {
     name: "version",
@@ -409,19 +411,19 @@ var CLI_COMMAND_REGISTRY = [
     name: "check-update",
     usage: "openpond check-update",
     optionSchema: {},
-    handler: async () => (await import("./core-commands-KCFU7U5Y.js")).runCheckUpdate()
+    handler: async () => (await import("./core-commands-STKFZZVR.js")).runCheckUpdate()
   },
   {
     name: "login",
     usage: "openpond login [--base-url <url>]",
     optionSchema: CLI_GLOBAL_OPTION_SCHEMA,
-    handler: async ({ options }) => (await import("./core-commands-KCFU7U5Y.js")).runLogin(options)
+    handler: async ({ options }) => (await import("./core-commands-STKFZZVR.js")).runLogin(options)
   },
   {
     name: "init",
     usage: "openpond init [--path <dir>]",
     optionSchema: { path: "string" },
-    handler: async ({ options }) => (await import("./profile-GF57OWI6.js")).runOpenPondInitCommand(options)
+    handler: async ({ options }) => (await import("./profile-5H3GF252.js")).runOpenPondInitCommand(options)
   },
   {
     name: "profile",
@@ -449,13 +451,13 @@ var CLI_COMMAND_REGISTRY = [
       publishHostedSource: "boolean",
       teamId: "string"
     },
-    handler: async ({ options, rest }) => (await import("./profile-GF57OWI6.js")).runOpenPondProfileCommand(options, rest)
+    handler: async ({ options, rest }) => (await import("./profile-5H3GF252.js")).runOpenPondProfileCommand(options, rest)
   },
   {
     name: "agents",
     usage: "openpond agents [--json]",
     optionSchema: { json: "boolean" },
-    handler: async ({ options, rest }) => (await import("./profile-GF57OWI6.js")).runOpenPondAgentsCommand(options, rest)
+    handler: async ({ options, rest }) => (await import("./profile-5H3GF252.js")).runOpenPondAgentsCommand(options, rest)
   },
   {
     name: "actions",
@@ -475,7 +477,7 @@ var CLI_COMMAND_REGISTRY = [
       teamId: "string",
       timeoutMs: "integer"
     },
-    handler: async ({ options, rest }) => (await import("./actions-command-QVYIPEN5.js")).runProjectActionsCommand(options, rest)
+    handler: async ({ options, rest }) => (await import("./actions-command-DZ6D7JTO.js")).runProjectActionsCommand(options, rest)
   },
   ...profileSdkAliasDefinitions(),
   {
@@ -488,25 +490,25 @@ var CLI_COMMAND_REGISTRY = [
       "openpond extension remove <owner/repo> [--json]"
     ],
     optionSchema: { all: "boolean", json: "boolean", ref: "string" },
-    handler: async ({ options, rest }) => (await import("./extension-M4DH25KH.js")).runOpenPondExtensionCommand(options, rest)
+    handler: async ({ options, rest }) => (await import("./extension-MVWXKSAD.js")).runOpenPondExtensionCommand(options, rest)
   },
   {
     name: "profiles",
     usage: "openpond profiles [args]",
     optionSchema: { json: "boolean" },
-    handler: async ({ options, rest }) => (await import("./core-commands-KCFU7U5Y.js")).runProfiles(options, rest)
+    handler: async ({ options, rest }) => (await import("./core-commands-STKFZZVR.js")).runProfiles(options, rest)
   },
   {
     name: "account",
     usage: "openpond account",
     optionSchema: { json: "boolean" },
-    handler: async () => (await import("./core-commands-KCFU7U5Y.js")).runAccount()
+    handler: async () => (await import("./core-commands-STKFZZVR.js")).runAccount()
   },
   {
     name: "health",
     usage: "openpond health",
     optionSchema: { json: "boolean" },
-    handler: async ({ options }) => (await import("./core-commands-KCFU7U5Y.js")).runHealth(options)
+    handler: async ({ options }) => (await import("./core-commands-STKFZZVR.js")).runHealth(options)
   },
   {
     name: "app-server",
@@ -514,7 +516,7 @@ var CLI_COMMAND_REGISTRY = [
     optionSchema: {
       storeDir: "string"
     },
-    handler: async ({ options, rest }) => (await import("./app-layer-GCNXR4F3.js")).runOpenPondServerCommand("app-server", options, rest)
+    handler: async ({ options, rest }) => (await import("./app-layer-MSLVVYLM.js")).runOpenPondServerCommand("app-server", options, rest)
   },
   {
     name: "serve",
@@ -525,7 +527,7 @@ var CLI_COMMAND_REGISTRY = [
       listen: "string",
       port: "integer"
     },
-    handler: async ({ options, rest }) => (await import("./app-layer-GCNXR4F3.js")).runOpenPondServerCommand("serve", options, rest)
+    handler: async ({ options, rest }) => (await import("./app-layer-MSLVVYLM.js")).runOpenPondServerCommand("serve", options, rest)
   },
   {
     name: "ui",
@@ -538,7 +540,7 @@ var CLI_COMMAND_REGISTRY = [
       port: "integer",
       webRoot: "string"
     },
-    handler: async ({ options, rest }) => (await import("./app-layer-GCNXR4F3.js")).runOpenPondServerCommand("web", options, rest)
+    handler: async ({ options, rest }) => (await import("./app-layer-MSLVVYLM.js")).runOpenPondServerCommand("web", options, rest)
   },
   {
     name: "tui",
@@ -552,13 +554,13 @@ var CLI_COMMAND_REGISTRY = [
       provider: "string",
       server: "string"
     },
-    handler: async ({ options, rest }) => (await import("./app-layer-GCNXR4F3.js")).runOpenPondTerminalCommand(options, rest)
+    handler: async ({ options, rest }) => (await import("./app-layer-MSLVVYLM.js")).runOpenPondTerminalCommand(options, rest)
   },
   {
     name: "chat",
     usage: "openpond chat (--message-file <path>|--message <text>|--stdin) --non-interactive [--provider <id>] [--model <id>] [--agent <id>] [--project <id>] [--resume <session-id>] [--yes] [--approval-policy <policy>] [--json] [--timeout-sec <n>] [--max-output-bytes <n>] [--sandbox <mode>]",
     optionSchema: CHAT_OPTION_SCHEMA,
-    handler: async ({ options, rest }) => (await import("./app-layer-GCNXR4F3.js")).runOpenPondTerminalCommand(options, rest)
+    handler: async ({ options, rest }) => (await import("./app-layer-MSLVVYLM.js")).runOpenPondTerminalCommand(options, rest)
   },
   {
     name: "tool",
@@ -594,7 +596,7 @@ var CLI_COMMAND_REGISTRY = [
     name: "sandbox-template",
     usage: "openpond sandbox-template <command> [args]",
     optionSchema: SANDBOX_TEMPLATE_OPTION_SCHEMA,
-    handler: async ({ options, rest }) => (await import("./sandbox-template-W5HU24TF.js")).runSandboxTemplateCommand(options, rest)
+    handler: async ({ options, rest }) => (await import("./sandbox-template-RZ5AJ4KB.js")).runSandboxTemplateCommand(options, rest)
   },
   {
     name: "repo",
@@ -639,13 +641,13 @@ var CLI_COMMAND_REGISTRY = [
       toolset: "string",
       url: "string"
     },
-    handler: async ({ options, rest }) => (await import("./organizations-ZWPFNM6K.js")).runOrganizationsCommand(options, rest)
+    handler: async ({ options, rest }) => (await import("./organizations-ATM4CZII.js")).runOrganizationsCommand(options, rest)
   },
   {
     name: "project",
     usage: "openpond project <list|create|upsert|get|update|sync|source-upload|archive> [args]",
     optionSchema: PROJECT_OPTION_SCHEMA,
-    handler: async ({ options, rest }) => (await import("./project-agent-65MXZHGM.js")).runProjectCommand(options, rest)
+    handler: async ({ options, rest }) => (await import("./project-agent-RSKSO5GT.js")).runProjectCommand(options, rest)
   },
   {
     name: "agent",
@@ -657,7 +659,7 @@ var CLI_COMMAND_REGISTRY = [
       "openpond agent source publish <agentId> --team-id <id> [--expected-manifest-hash <hash>]"
     ],
     optionSchema: AGENT_OPTION_SCHEMA,
-    handler: async ({ options, rest }) => (await import("./project-agent-65MXZHGM.js")).runAgentCommand(options, rest)
+    handler: async ({ options, rest }) => (await import("./project-agent-RSKSO5GT.js")).runAgentCommand(options, rest)
   },
   {
     name: "desktop-test",
@@ -678,13 +680,13 @@ var CLI_COMMAND_REGISTRY = [
       token: "string",
       tokenFile: "string"
     },
-    handler: async ({ options, rest }) => (await import("./desktop-test-FEQVX4N4.js")).runDesktopTestCommand(options, rest)
+    handler: async ({ options, rest }) => (await import("./desktop-test-ACKJN4UV.js")).runDesktopTestCommand(options, rest)
   },
   {
     name: "sandbox",
     usage: "openpond sandbox <command> [args]",
     optionSchema: SANDBOX_OPTION_SCHEMA,
-    handler: async ({ options, rest }) => (await import("./sandbox-command-WH2OQRHP.js")).runSandboxCommand(options, rest)
+    handler: async ({ options, rest }) => (await import("./sandbox-command-MTYSZR6P.js")).runSandboxCommand(options, rest)
   },
   {
     name: "training",
@@ -732,7 +734,7 @@ var CLI_COMMAND_REGISTRY = [
       skipTool: "boolean",
       stream: "boolean"
     },
-    handler: async ({ options, rest }) => (await import("./opchat-7KRZIFFD.js")).runOpChatCommand(options, rest)
+    handler: async ({ options, rest }) => (await import("./opchat-DUIZT4G6.js")).runOpChatCommand(options, rest)
   },
   {
     name: "teams-bot",
@@ -741,7 +743,7 @@ var CLI_COMMAND_REGISTRY = [
       json: "boolean",
       teamId: "string"
     },
-    handler: async ({ options, rest }) => (await import("./teams-bot-5ATLXSHC.js")).runTeamsBotCommand(options, rest)
+    handler: async ({ options, rest }) => (await import("./teams-bot-FF3LDAYL.js")).runTeamsBotCommand(options, rest)
   },
   {
     name: "apps",
@@ -762,7 +764,7 @@ var CLI_COMMAND_REGISTRY = [
     name: "opentool",
     usage: "openpond opentool <init|validate|build> [args]",
     optionSchema: {},
-    handler: async ({ rest }) => (await import("./core-commands-KCFU7U5Y.js")).runOpentool(rest)
+    handler: async ({ rest }) => (await import("./core-commands-STKFZZVR.js")).runOpentool(rest)
   }
 ];
 var CLI_COMMAND_BY_NAME = /* @__PURE__ */ new Map();
@@ -834,11 +836,11 @@ function profileSdkAliasDefinitions() {
     name,
     usage: `openpond ${name} [args]`,
     optionSchema: PROFILE_SDK_OPTION_SCHEMA,
-    handler: async ({ options, rest }) => (await import("./profile-GF57OWI6.js")).runOpenPondProfileSdkAlias(name, options, rest)
+    handler: async ({ options, rest }) => (await import("./profile-5H3GF252.js")).runOpenPondProfileSdkAlias(name, options, rest)
   }));
 }
 async function runToolCommand({ options, rest }) {
-  const { runToolList, runToolRun } = await import("./core-commands-KCFU7U5Y.js");
+  const { runToolList, runToolRun } = await import("./core-commands-STKFZZVR.js");
   const subcommand = rest[0];
   if (subcommand === "list") {
     const target = rest[1];
@@ -862,8 +864,8 @@ async function runToolCommand({ options, rest }) {
   throw new Error("usage: tool <list|run> <handle>/<repo> [args]");
 }
 async function runBacktestCommand({ options, rest }) {
-  const { runBacktestRun } = await import("./core-commands-KCFU7U5Y.js");
-  const { runBacktestEvents, runBacktestGet } = await import("./apps-JB3POF6Z.js");
+  const { runBacktestRun } = await import("./core-commands-STKFZZVR.js");
+  const { runBacktestEvents, runBacktestGet } = await import("./apps-6PAXKTB5.js");
   const subcommand = rest[0] || "run";
   if (subcommand === "run") {
     const target = rest[1];
@@ -897,7 +899,7 @@ async function runBacktestCommand({ options, rest }) {
   throw new Error("usage: backtest <run|events|get> <handle>/<repo> [args]");
 }
 async function runDeployCommand({ options, rest }) {
-  const { runDeployWatch } = await import("./core-commands-KCFU7U5Y.js");
+  const { runDeployWatch } = await import("./core-commands-STKFZZVR.js");
   const subcommand = rest[0] || "watch";
   if (subcommand !== "watch") {
     throw new Error(
@@ -913,7 +915,7 @@ async function runDeployCommand({ options, rest }) {
   await runDeployWatch(options, target);
 }
 async function runTemplateCommand({ options, rest }) {
-  const { runTemplateBranches, runTemplateStatus, runTemplateUpdate } = await import("./core-commands-KCFU7U5Y.js");
+  const { runTemplateBranches, runTemplateStatus, runTemplateUpdate } = await import("./core-commands-STKFZZVR.js");
   const subcommand = rest[0] || "status";
   const target = rest[1];
   if (!target) {
@@ -938,7 +940,7 @@ async function runTemplateCommand({ options, rest }) {
   );
 }
 async function runRepoCommand({ options, rest }) {
-  const { runRepoCreate, runRepoPush } = await import("./core-commands-KCFU7U5Y.js");
+  const { runRepoCreate, runRepoPush } = await import("./core-commands-STKFZZVR.js");
   const subcommand = rest[0] || "create";
   if (subcommand === "create") {
     await runRepoCreate(options, rest.slice(1));
@@ -965,7 +967,7 @@ async function runAppsCommand({ options, rest }) {
     runAppsSummary,
     runAppsTools,
     runAppsToolsExecute
-  } = await import("./apps-JB3POF6Z.js");
+  } = await import("./apps-6PAXKTB5.js");
   const subcommand = rest[0];
   if (subcommand === "list") {
     await runAppsList(options);

package/dist/chunks/{chunk-TOMMZN6V.js → chunk-IY2AW5F3.js}

@@ -2934,8 +2934,9 @@ async function authorLocalHarnessRefinementWithModel(input) {
       stream: input.stream,
       signal: timeout.signal
     });
-    if (draft.decision === "no_action")
+    if (draft.decision === "no_action" && !requiresNoActionChallenge(evidence2)) {
       return draft;
+    }
     const draftAdmissionIssues = decisionAdmissionIssues(draft, evidence2);
     const reviewed = await requestRefinerDecision({
       messages: [
@@ -2944,13 +2945,16 @@ async function authorLocalHarnessRefinementWithModel(input) {
         {
           role: "user",
           content: [
-            "Perform a mandatory independent critique before any Harness mutation.",
+            draft.decision === "no_action" ? "Perform an independent challenge of the proposed no_action decision." : "Perform a mandatory independent critique before any Harness mutation.",
             "Re-read the chronological packet and verify the declared evidence basis, failure mechanism, ownership, target layer, exact edit, and expected future effect.",
+            "A completed user outcome and successful recovery do not erase a concrete, avoidable internal execution error. When a recovered failure exposes a specific prevention rule that would avoid future tool calls, retries, or token burn, prefer the smallest validated Harness correction.",
+            "Do not treat a generic instruction to recover and continue as proof that no narrower prevention guidance is useful. Treat repeated failures in the same turn as reinforcing evidence when they share a mechanism.",
+            "If the model violated a loaded instruction and only later recovered, do not use the instruction's presence as a reason for no_action. Test whether a small, non-duplicative operationalization of that instruction would improve first-attempt compliance; no_action is defensible only when the existing rule was followed or no such improvement is supported by the supplied evidence.",
             "Reject invented recurrence, unsupported evidence references, material counterevidence, unavailable capability layers, task-specific or benchmark content, inferred memory, broad instructions, and workarounds for runtime, product, taskset, or grader defects.",
             "Do not reject a concise correction merely because the deterministic failure appeared once when the mechanism and reusable prevention are clear.",
             "For adaptation cohorts, reject drafts that add work instead of removing the repeated foreground-token cost while preserving quality.",
             ...draftAdmissionIssues.length ? [`The draft also failed deterministic admission: ${draftAdmissionIssues.join("; ")}. Correct it or return no_action.`] : [],
-            "Return the complete final JSON decision. Use no_action or route when the proposed Harness edit does not survive this critique."
+            draft.decision === "no_action" ? "Return no_action only if you can identify no concrete reusable prevention rule in the supplied recovery evidence. Otherwise return the smallest valid route or proposal." : "Return the complete final JSON decision. Use no_action or route when the proposed Harness edit does not survive this critique."
           ].join("\n")
         }
       ],
@@ -2967,6 +2971,9 @@ async function authorLocalHarnessRefinementWithModel(input) {
     timeout.cleanup();
   }
 }
+function requiresNoActionChallenge(evidence2) {
+  return evidence2.observations.some((observation) => observation.kind === "recovery" || observation.kind === "tool_failure");
+}
 async function requestRefinerDecision(input) {
   const first = await collect(input.stream({
     messages: input.messages,
@@ -3016,6 +3023,8 @@ function refinerMessages(evidence2) {
         "A taskset_grade diagnostic is authoritative evaluation evidence. A failed grade is not cancelled by polished output or successful tools; identify whether its root cause belongs in the Harness or an external owner.",
         "A taskset grade proves only the measured outcome. It does not prove that the root owner is the Harness rather than runtime, product, fixture, grader, taskset, or model behavior.",
         "Optimize future work, not the completed turn. A repeated avoidable strategy is strong evidence, but one high-confidence deterministic failure may justify a small validated correction when the failure mechanism and reusable prevention are both clear. Recurrence strengthens confidence; it is not universally required.",
+        "Recovered internal mistakes are not automatically ordinary successful work. A concrete API mismatch, incompatible dependency or format, or repeated command construction error can justify a narrow preventive skill or prompt correction when the trace shows how to avoid it next time.",
+        "When the supplied trace shows that the model violated an already-loaded Harness instruction before recovering, the instruction's existence is not counterevidence. Treat that as evidence that its current wording, placement, or operational form was ineffective. Evaluate the smallest non-duplicative change that makes the rule actionable at the decision point, such as a concise preflight or checklist. Do not merely restate the existing rule.",
         crossRunCandidate ? "This is a bounded cross-Work candidate continuation. Verify the supplied candidate, review, authorization, admitted release, independent occurrences, and counterevidence. Use recurrent_independent only; do not reinterpret unrelated wording as recurrence." : "This is an immediate completed-turn review, not an unbounded cross-Work archive review. Use only supplied observations and priorIncidents. Defer ambiguous recurrence to recurring-pattern review.",
         "Every route or proposal must declare evidenceBasis. Use single_deterministic only when a supplied incident exposes an observed deterministic mechanism and reusable prevention rule with no material counterevidence. Use recurrent_independent only for at least two materially independent supplied incidents; similar wording, topic, tool name, or artifact family is not independence.",
         "supportingEvidenceIds must name actual supplied observation or prior-incident IDs. List material counterevidence explicitly. Never invent recurrence or omit contradictory supplied evidence.",

package/dist/chunks/{chunk-XIUCBUUQ.js → chunk-J2REM7LE.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-SMNFI2FU.js";
 import {
   createOpenPondSandboxClient
-} from "./chunk-XSHMPOQV.js";
+} from "./chunk-JGOP4GCK.js";
 import {
   DEFAULT_CACHE_TTL_MS,
   SANDBOX_RUNTIME_PROFILE_IDS,

package/dist/chunks/{chunk-XSHMPOQV.js → chunk-JGOP4GCK.js}

@@ -265,6 +265,7 @@ function createSandboxAgentNamespace(client) {
     sourceDeployPlan: (agentId, input) => client.getAgentSourceDeployPlan(agentId, input),
     manifestSnapshots: (agentId, input) => client.listAgentManifestSnapshots(agentId, input),
     requestSourceChecks: (agentId, input) => client.requestAgentSourceChecks(agentId, input),
+    configureSourceSetup: (agentId, input) => client.configureAgentSourceSetup(agentId, input),
     publishSource: (agentId, input) => client.publishAgentSource(agentId, input)
   };
 }
@@ -1310,6 +1311,11 @@ var OpenPondSandboxClient = class extends OpenPondSandboxInstanceClient {
       timeoutMs: 15 * 60 * 1e3
     });
   }
+  configureAgentSourceSetup(agentId, input) {
+    const query = new URLSearchParams({ teamId: input.teamId });
+    const { teamId: _teamId, ...body } = input;
+    return this.requestApiRoot(`/agents/${encodeURIComponent(agentId)}/source/setup?${query.toString()}`, { method: "POST", body: JSON.stringify(body) });
+  }
   publishAgentSource(agentId, input) {
     const query = new URLSearchParams({ teamId: input.teamId });
     const { teamId: _teamId, ...body } = input;

package/dist/chunks/{chunk-IZ3XGRAG.js → chunk-K4JEWEJQ.js}

@@ -6,7 +6,7 @@ import {
   readApiJson,
   resolveOpChatApiBaseUrl,
   sendHostedChatTurn
-} from "./chunk-XSHMPOQV.js";
+} from "./chunk-JGOP4GCK.js";
 
 // ../../packages/sdk/src/work.ts
 var DEFAULT_MODEL = "openpond-chat";

package/dist/chunks/{chunk-ZJPLJP2Q.js → chunk-KMBJLBQH.js}

@@ -15,7 +15,7 @@ import {
   resolveRepoUrl,
   runCommand,
   warnOnRepoHostMismatch
-} from "./chunk-XIUCBUUQ.js";
+} from "./chunk-J2REM7LE.js";
 import {
   normalizeTemplateRepoUrl,
   resolveApiBaseUrlOption,
@@ -28,7 +28,7 @@ import {
   compareSemver,
   fetchLatestNpmVersion,
   getInstalledCliVersion
-} from "./chunk-LBIVEX6V.js";
+} from "./chunk-GMX47RLP.js";
 import {
   checkOpenPondApiHealth,
   createHeadlessApps,

package/dist/chunks/{chunk-NPEWMLRH.js → chunk-MBF44RYK.js}

@@ -1,7 +1,7 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
 import {
   now
-} from "./chunk-6RMGHEFF.js";
+} from "./chunk-FYB6ELFM.js";
 
 // ../server/src/workspace/workspace-command.ts
 import { spawn, spawnSync } from "node:child_process";

package/dist/chunks/{chunk-B3WVCPXG.js → chunk-PLDCQVNW.js}

@@ -15,7 +15,7 @@ import {
   parseSandboxRuntimePromotionPolicyOption,
   parseSandboxWorkflowModeOption,
   runProcessCommand
-} from "./chunk-XIUCBUUQ.js";
+} from "./chunk-J2REM7LE.js";
 import {
   optionString,
   optionalJsonObject,
@@ -158,7 +158,10 @@ async function buildAgentSdkMaterializedDependency(projectPath, packageJson) {
   if (!sdkSource) return null;
   const tempDir = await fs.mkdtemp(path3.join(tmpdir(), "openpond-agent-sdk-pack-"));
   try {
-    const sdkContents = sdkSource.kind === "package_root" ? await packOpenPondAgentSdkPackageRoot(sdkSource.packageRoot, tempDir) : sdkSource.tarballContents;
+    const sdkContents = sdkSource.kind === "package_root" ? await packOpenPondAgentSdkPackageRoot(sdkSource.packageRoot, tempDir) : sdkSource.kind === "registry" ? await packOpenPondAgentSdkRegistryPackage(
+      sdkSource.versionSpec,
+      tempDir
+    ) : sdkSource.tarballContents;
     const sdkDependencyTarballs = await packAgentSdkRuntimeDependencyTarballs({
       sdkPackageJson: sdkSource.packageJson,
       dependencyBaseDir: sdkSource.dependencyBaseDir,
@@ -238,7 +241,11 @@ async function packAgentSdkRuntimeDependencyTarballs(params) {
   const projectDependencies = recordStringMap(
     params.projectPackageJson.dependencies
   );
+  const projectDevDependencies = recordStringMap(
+    params.projectPackageJson.devDependencies
+  );
   delete projectDependencies["openpond-agent-sdk"];
+  delete projectDevDependencies["openpond-agent-sdk"];
   const pending = [
     ...Object.entries(sdkDependencies).map(([packageName, versionSpec]) => ({
       packageName,
@@ -249,7 +256,14 @@ async function packAgentSdkRuntimeDependencyTarballs(params) {
       packageName,
       versionSpec,
       dependencyBaseDir: params.projectPath
-    }))
+    })),
+    ...Object.entries(projectDevDependencies).map(
+      ([packageName, versionSpec]) => ({
+        packageName,
+        versionSpec,
+        dependencyBaseDir: params.projectPath
+      })
+    )
   ].sort((left, right) => left.packageName.localeCompare(right.packageName));
   const seen = /* @__PURE__ */ new Set();
   const tarballs = [];
@@ -281,7 +295,14 @@ ${details}` : ""}`
       );
     }
     const contents = await fs.readFile(path3.join(params.tempDir, tarballName));
-    const packedPackageJson = readPackageJsonFromNpmTarball(contents);
+    let packedPackageJson;
+    try {
+      packedPackageJson = readPackageJsonFromNpmTarball(contents);
+    } catch (error) {
+      throw new Error(
+        `failed to inspect packed dependency ${packageName}: ${error instanceof Error ? error.message : String(error)}`
+      );
+    }
     tarballs.push({
       packageName,
       source: "npm_dependency_tarball",
@@ -334,6 +355,33 @@ function npmPackTargetForDependency(params) {
 function sanitizeNpmPackageNameForVendor(packageName) {
   return packageName.replace(/^@/, "").replace(/[\/\\]/g, "__").replace(/[^a-zA-Z0-9._-]/g, "_");
 }
+async function packOpenPondAgentSdkRegistryPackage(versionSpec, tempDir) {
+  const pack = await runCommand(
+    "npm",
+    [
+      "pack",
+      "--silent",
+      "--pack-destination",
+      tempDir,
+      `openpond-agent-sdk@${versionSpec}`
+    ],
+    { cwd: tempDir }
+  );
+  if (pack.code !== 0) {
+    const details = [pack.stderr.trim(), pack.stdout.trim()].filter(Boolean).join("\n");
+    throw new Error(
+      `failed to pack openpond-agent-sdk for source upload${details ? `:
+${details}` : ""}`
+    );
+  }
+  const tarballName = pack.stdout.trim().split(/\r?\n/).filter(Boolean).pop();
+  if (!tarballName) {
+    throw new Error(
+      "failed to pack openpond-agent-sdk for source upload: npm pack did not return a tarball name"
+    );
+  }
+  return fs.readFile(path3.join(tempDir, tarballName));
+}
 function resolveLocalOpenPondAgentSdkMaterializationSource(projectPath, packageJson) {
   const versionSpec = readOpenPondAgentSdkVersionSpec(packageJson);
   if (versionSpec?.startsWith("file:")) {
@@ -375,6 +423,23 @@ function resolveLocalOpenPondAgentSdkMaterializationSource(projectPath, packageJ
       };
     }
   }
+  const installedPackageRoot = path3.join(
+    projectPath,
+    "node_modules",
+    "openpond-agent-sdk"
+  );
+  if (isOpenPondAgentSdkPackageRoot(installedPackageRoot)) {
+    const installedPackageJson = JSON.parse(
+      readFileSyncUtf8(path3.join(installedPackageRoot, "package.json"))
+    );
+    const installedVersion = text(installedPackageJson.version);
+    return {
+      kind: "registry",
+      versionSpec: installedVersion ?? versionSpec ?? "latest",
+      dependencyBaseDir: installedPackageRoot,
+      packageJson: installedPackageJson
+    };
+  }
   return null;
 }
 function findOpenPondAgentSdkPackageRootInAncestors(projectPath) {
@@ -420,14 +485,14 @@ function readPackageJsonFromNpmTarball(tarballContents) {
     }
     const dataStart = offset + 512;
     const dataEnd = dataStart + size;
-    if (entryPath === "package/package.json") {
+    if (entryPath === "package/package.json" || entryPath.endsWith("/package.json")) {
       return JSON.parse(
         tarContents.subarray(dataStart, dataEnd).toString("utf8")
       );
     }
     offset = dataStart + Math.ceil(size / 512) * 512;
   }
-  throw new Error("failed to read openpond-agent-sdk tarball: missing package.json");
+  throw new Error("failed to read npm package tarball: missing package.json");
 }
 function readTarString(header, start, length) {
   const field = header.subarray(start, start + length);

package/dist/chunks/{chunk-L5JTI6LQ.js → chunk-T4FMK5GN.js}

@@ -15,7 +15,7 @@ import {
   ToolDeclarationSchema,
   createHarnessAdvanceReceipt,
   validateConnectedAppToolCallRequest
-} from "./chunk-TOMMZN6V.js";
+} from "./chunk-IY2AW5F3.js";
 import {
   external_exports,
   yaml
@@ -24,7 +24,7 @@ import {
   DEFAULT_OPENPOND_API_BASE_URL,
   DEFAULT_OPENPOND_WEB_BASE_URL,
   apiFetch
-} from "./chunk-XSHMPOQV.js";
+} from "./chunk-JGOP4GCK.js";
 
 // ../../packages/cloud/dist/profile/profile-skills.js
 import { createHash } from "node:crypto";
@@ -4977,6 +4977,7 @@ function normalizeSubagentRoleSettings(roles) {
 // ../../packages/contracts/dist/settings.js
 var DEFAULT_CODEX_CHAT_MODEL = "gpt-5.6-sol";
 var DEFAULT_OPENPOND_CHAT_MODEL = "openpond-chat";
+var DEFAULT_HARNESS_REFINER_MODEL = "accounts/fireworks/models/deepseek-v4-flash";
 var DEFAULT_CHAT_PROVIDER = "openpond";
 var DEFAULT_CHAT_MODEL = DEFAULT_OPENPOND_CHAT_MODEL;
 var DEFAULT_CODEX_PERMISSION_MODE = "default";
@@ -12807,6 +12808,7 @@ export {
   AccountStateSchema,
   DEFAULT_CODEX_CHAT_MODEL,
   DEFAULT_OPENPOND_CHAT_MODEL,
+  DEFAULT_HARNESS_REFINER_MODEL,
   DEFAULT_CHAT_PROVIDER,
   DEFAULT_CODEX_REASONING_EFFORT,
   DEFAULT_OPENPOND_COMMAND_ACCESS_MODE,

package/dist/chunks/{chunk-YSVY4O42.js → chunk-T55IL3GI.js}

@@ -4,7 +4,7 @@ import {
   parseSandboxRuntimeProfileIdOption,
   parseSandboxRuntimePromotionPolicyOption,
   parseSandboxWorkflowModeOption
-} from "./chunk-XIUCBUUQ.js";
+} from "./chunk-J2REM7LE.js";
 import {
   parseBooleanOption,
   parseCsvOption,

package/dist/chunks/{cli-MFFCFH3P.js → cli-L25X2EZL.js}

@@ -3,14 +3,14 @@ import {
   resolveWebLaunchMessages,
   runOpenPondAppServerCli,
   runOpenPondServerCli
-} from "./chunk-5HMXXGWZ.js";
+} from "./chunk-6JT34APP.js";
 import "./chunk-OYWTQABY.js";
-import "./chunk-6RMGHEFF.js";
-import "./chunk-32R4GQD3.js";
-import "./chunk-L5JTI6LQ.js";
-import "./chunk-TOMMZN6V.js";
+import "./chunk-FYB6ELFM.js";
+import "./chunk-BFAL2CV3.js";
+import "./chunk-T4FMK5GN.js";
+import "./chunk-IY2AW5F3.js";
 import "./chunk-WYDVQOBL.js";
-import "./chunk-XSHMPOQV.js";
+import "./chunk-JGOP4GCK.js";
 import "./chunk-UACZUFIA.js";
 export {
   resolveWebLaunchMessages,

package/dist/chunks/{core-commands-KCFU7U5Y.js → core-commands-STKFZZVR.js}

@@ -16,13 +16,13 @@ import {
   runTemplateUpdate,
   runToolList,
   runToolRun
-} from "./chunk-ZJPLJP2Q.js";
-import "./chunk-XIUCBUUQ.js";
-import "./chunk-ZAX7MLQJ.js";
+} from "./chunk-KMBJLBQH.js";
+import "./chunk-J2REM7LE.js";
+import "./chunk-64LYEFLR.js";
 import "./chunk-SMNFI2FU.js";
-import "./chunk-LBIVEX6V.js";
-import "./chunk-IZ3XGRAG.js";
-import "./chunk-XSHMPOQV.js";
+import "./chunk-GMX47RLP.js";
+import "./chunk-K4JEWEJQ.js";
+import "./chunk-JGOP4GCK.js";
 import "./chunk-DBHSOTYZ.js";
 import "./chunk-KSRWKXRB.js";
 import "./chunk-MUMPWI4O.js";

package/dist/chunks/{desktop-test-FEQVX4N4.js → desktop-test-ACKJN4UV.js}

@@ -1,14 +1,14 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
 import {
   runProcessCommand
-} from "./chunk-XIUCBUUQ.js";
+} from "./chunk-J2REM7LE.js";
 import {
   CliUsageError
-} from "./chunk-ZAX7MLQJ.js";
+} from "./chunk-64LYEFLR.js";
 import "./chunk-SMNFI2FU.js";
-import "./chunk-LBIVEX6V.js";
-import "./chunk-IZ3XGRAG.js";
-import "./chunk-XSHMPOQV.js";
+import "./chunk-GMX47RLP.js";
+import "./chunk-K4JEWEJQ.js";
+import "./chunk-JGOP4GCK.js";
 import "./chunk-DBHSOTYZ.js";
 import "./chunk-KSRWKXRB.js";
 import {

package/dist/chunks/{extension-M4DH25KH.js → extension-MVWXKSAD.js}

@@ -10,7 +10,7 @@ import {
   SandboxTemplateValidationDiagnosticSchema,
   ToolDeclarationSchema,
   validateConnectedAppToolCallRequest
-} from "./chunk-TOMMZN6V.js";
+} from "./chunk-IY2AW5F3.js";
 import "./chunk-3KLQ52B2.js";
 import "./chunk-W5GKHH77.js";
 import {