openpond 0.0.61 → 0.0.63

package/dist/chunks/{actions-command-QVYIPEN5.js → actions-command-DZ6D7JTO.js}

@@ -6,8 +6,8 @@ import {
 } from "./chunk-QETF6ILG.js";
 import {
   createOpenPondClient
-} from "./chunk-IZ3XGRAG.js";
-import "./chunk-XSHMPOQV.js";
+} from "./chunk-K4JEWEJQ.js";
+import "./chunk-JGOP4GCK.js";
 import {
   parseBooleanOption
 } from "./chunk-MUMPWI4O.js";

package/dist/chunks/{app-layer-GCNXR4F3.js → app-layer-TUAFALOE.js}

@@ -1,14 +1,14 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
 import {
   runProcessCommand
-} from "./chunk-XIUCBUUQ.js";
+} from "./chunk-J2REM7LE.js";
 import {
   CliUsageError
-} from "./chunk-ZAX7MLQJ.js";
+} from "./chunk-LEL5AQJU.js";
 import "./chunk-SMNFI2FU.js";
-import "./chunk-LBIVEX6V.js";
-import "./chunk-IZ3XGRAG.js";
-import "./chunk-XSHMPOQV.js";
+import "./chunk-YDH34BGG.js";
+import "./chunk-K4JEWEJQ.js";
+import "./chunk-JGOP4GCK.js";
 import "./chunk-DBHSOTYZ.js";
 import "./chunk-KSRWKXRB.js";
 import "./chunk-MUMPWI4O.js";

package/dist/chunks/{app-server-runtime-737DBOSH.js → app-server-runtime-O26LVUYH.js}

@@ -2,16 +2,16 @@ import { createRequire as __openpondCreateRequire } from "node:module"; var requ
 import {
   APP_SERVER_COMPOSITION,
   createOpenPondAppServer
-} from "./chunk-BQQS5RRI.js";
-import "./chunk-NPEWMLRH.js";
+} from "./chunk-V2CTXKS2.js";
+import "./chunk-66KQLYSH.js";
 import "./chunk-OYWTQABY.js";
-import "./chunk-6RMGHEFF.js";
-import "./chunk-32R4GQD3.js";
-import "./chunk-L5JTI6LQ.js";
+import "./chunk-7IFPXSSJ.js";
+import "./chunk-IXA5PMXC.js";
+import "./chunk-KGU437HZ.js";
 import "./chunk-QETF6ILG.js";
-import "./chunk-TOMMZN6V.js";
+import "./chunk-JTFDOA2P.js";
 import "./chunk-WYDVQOBL.js";
-import "./chunk-XSHMPOQV.js";
+import "./chunk-JGOP4GCK.js";
 import "./chunk-UACZUFIA.js";
 export {
   APP_SERVER_COMPOSITION,

package/dist/chunks/{apps-JB3POF6Z.js → apps-KSZRA7Y2.js}

@@ -10,15 +10,15 @@ import {
   normalizeRepoName,
   pollDeploymentLogs,
   resolveAppTarget
-} from "./chunk-XIUCBUUQ.js";
-import "./chunk-ZAX7MLQJ.js";
+} from "./chunk-J2REM7LE.js";
+import "./chunk-LEL5AQJU.js";
 import {
   resolveBaseUrl,
   resolvePublicApiBaseUrl
 } from "./chunk-SMNFI2FU.js";
-import "./chunk-LBIVEX6V.js";
-import "./chunk-IZ3XGRAG.js";
-import "./chunk-XSHMPOQV.js";
+import "./chunk-YDH34BGG.js";
+import "./chunk-K4JEWEJQ.js";
+import "./chunk-JGOP4GCK.js";
 import {
   createAgentFromPrompt,
   deployApp,

package/dist/chunks/{chunk-NPEWMLRH.js → chunk-66KQLYSH.js}

@@ -1,7 +1,7 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
 import {
   now
-} from "./chunk-6RMGHEFF.js";
+} from "./chunk-7IFPXSSJ.js";
 
 // ../server/src/workspace/workspace-command.ts
 import { spawn, spawnSync } from "node:child_process";

package/dist/chunks/{chunk-ZJPLJP2Q.js → chunk-6FKBOGA4.js}

@@ -15,7 +15,7 @@ import {
   resolveRepoUrl,
   runCommand,
   warnOnRepoHostMismatch
-} from "./chunk-XIUCBUUQ.js";
+} from "./chunk-J2REM7LE.js";
 import {
   normalizeTemplateRepoUrl,
   resolveApiBaseUrlOption,
@@ -28,7 +28,7 @@ import {
   compareSemver,
   fetchLatestNpmVersion,
   getInstalledCliVersion
-} from "./chunk-LBIVEX6V.js";
+} from "./chunk-YDH34BGG.js";
 import {
   checkOpenPondApiHealth,
   createHeadlessApps,

package/dist/chunks/{chunk-6RMGHEFF.js → chunk-7IFPXSSJ.js}

@@ -3,7 +3,7 @@ import { createRequire as __openpondCreateRequire } from "node:module"; var requ
 // ../server/src/constants.ts
 var DEFAULT_HOST = "127.0.0.1";
 var DEFAULT_PORT = 17874;
-var VERSION = "0.0.61";
+var VERSION = "0.0.63";
 var HOSTED_CHAT_SYSTEM_PROMPT = "You are OpenPond Chat. Respond in the user's language. If the user's latest message is language-neutral, ambiguous, or only a short test, respond in English. Be concise and directly answer the latest request. Do not use emojis. Use Markdown when it improves scanability. If you emit reasoning or thinking content, keep it sparse and user-readable: at most one short sentence for major progress, decisions, or blockers. Omit reasoning for routine searches, reads, tool calls, and obvious next steps. Do not restate the user request, narrate every action, or include code blocks, code excerpts, diffs, raw tool payloads, or markdown examples in reasoning. Put necessary code or exact snippets only in the final assistant answer. When the user asks to show or preview an image that is available as a workspace path or signed image URL, use Markdown image syntax like ![description](path-or-url) instead of a bare path or raw HTML. For workspace-backed answers, use a Codex-style shape: brief outcome first, then Changed Files if files changed, then Verification if checks ran. End with a concise final answer that summarizes the result and verification when relevant. Do not mention raw tool JSON, internal repo paths, or origin/remote URLs unless the user explicitly asks for them or they are necessary to explain a git/deploy failure.";
 var APP_PREFERENCES_CACHE_TYPE = "app_preferences";
 var APP_PREFERENCES_CACHE_KEY = "global";

package/dist/chunks/{chunk-5HMXXGWZ.js → chunk-7UVEB2AZ.js}

@@ -6,11 +6,11 @@ import {
   DEFAULT_HOST,
   DEFAULT_PORT,
   parseListen
-} from "./chunk-6RMGHEFF.js";
+} from "./chunk-7IFPXSSJ.js";
 import {
   getBundledRuntimeVersion,
   openUrlWithSystemBrowser
-} from "./chunk-32R4GQD3.js";
+} from "./chunk-IXA5PMXC.js";
 
 // ../server/src/cli.ts
 import { existsSync } from "node:fs";

package/dist/chunks/{chunk-32R4GQD3.js → chunk-IXA5PMXC.js}

@@ -12,12 +12,12 @@ import {
   saveConfig,
   saveProfileApiKey,
   setActiveProfile
-} from "./chunk-L5JTI6LQ.js";
+} from "./chunk-KGU437HZ.js";
 import {
   DEFAULT_OPENPOND_API_BASE_URL,
   DEFAULT_OPENPOND_WEB_BASE_URL,
   withVercelProtectionBypass
-} from "./chunk-XSHMPOQV.js";
+} from "./chunk-JGOP4GCK.js";
 
 // ../../packages/runtime/dist/chat.js
 import { randomUUID } from "node:crypto";

package/dist/chunks/{chunk-XIUCBUUQ.js → chunk-J2REM7LE.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-SMNFI2FU.js";
 import {
   createOpenPondSandboxClient
-} from "./chunk-XSHMPOQV.js";
+} from "./chunk-JGOP4GCK.js";
 import {
   DEFAULT_CACHE_TTL_MS,
   SANDBOX_RUNTIME_PROFILE_IDS,

package/dist/chunks/{chunk-XSHMPOQV.js → chunk-JGOP4GCK.js}

@@ -265,6 +265,7 @@ function createSandboxAgentNamespace(client) {
     sourceDeployPlan: (agentId, input) => client.getAgentSourceDeployPlan(agentId, input),
     manifestSnapshots: (agentId, input) => client.listAgentManifestSnapshots(agentId, input),
     requestSourceChecks: (agentId, input) => client.requestAgentSourceChecks(agentId, input),
+    configureSourceSetup: (agentId, input) => client.configureAgentSourceSetup(agentId, input),
     publishSource: (agentId, input) => client.publishAgentSource(agentId, input)
   };
 }
@@ -1310,6 +1311,11 @@ var OpenPondSandboxClient = class extends OpenPondSandboxInstanceClient {
       timeoutMs: 15 * 60 * 1e3
     });
   }
+  configureAgentSourceSetup(agentId, input) {
+    const query = new URLSearchParams({ teamId: input.teamId });
+    const { teamId: _teamId, ...body } = input;
+    return this.requestApiRoot(`/agents/${encodeURIComponent(agentId)}/source/setup?${query.toString()}`, { method: "POST", body: JSON.stringify(body) });
+  }
   publishAgentSource(agentId, input) {
     const query = new URLSearchParams({ teamId: input.teamId });
     const { teamId: _teamId, ...body } = input;

package/dist/chunks/{chunk-TOMMZN6V.js → chunk-JTFDOA2P.js}

@@ -2869,10 +2869,22 @@ var HarnessRefinerCapabilitiesSchema = external_exports.object({
   agent: external_exports.boolean()
 }).strict();
 var SourceKindSchema = external_exports.enum(["memory", "instruction", "skill", "agent"]);
+var RefinerSourceFileSchema = external_exports.object({
+  path: external_exports.string().trim().min(1).max(2e3),
+  kind: SourceKindSchema,
+  content: external_exports.string().max(6e4),
+  loaded: external_exports.boolean()
+}).strict();
+var RefinerSourceCatalogEntrySchema = external_exports.object({
+  path: external_exports.string().trim().min(1).max(2e3),
+  kind: SourceKindSchema,
+  loaded: external_exports.boolean()
+}).strict();
 var LocalHarnessRefinerEvidenceSchema = external_exports.object({
   capabilities: HarnessRefinerCapabilitiesSchema,
   trigger: external_exports.record(external_exports.string(), external_exports.unknown()),
   observations: external_exports.array(external_exports.record(external_exports.string(), external_exports.unknown())).max(20),
+  admissibleEvidenceIds: external_exports.array(external_exports.string().trim().min(1).max(2e3)).max(1e4),
   reviewPacket: external_exports.object({
     currentTurn: external_exports.object({
       id: external_exports.string().trim().min(1).max(2e3),
@@ -2908,17 +2920,15 @@ var LocalHarnessRefinerEvidenceSchema = external_exports.object({
       timelineTruncated: external_exports.boolean()
     }).strict()
   }).strict(),
-  sourceFiles: external_exports.array(external_exports.object({
-    path: external_exports.string().trim().min(1).max(2e3),
-    kind: SourceKindSchema,
-    content: external_exports.string().max(6e4),
-    loaded: external_exports.boolean()
-  }).strict()).max(100),
-  sourceCatalog: external_exports.array(external_exports.object({
-    path: external_exports.string().trim().min(1).max(2e3),
-    kind: SourceKindSchema,
-    loaded: external_exports.boolean()
-  }).strict()).max(1e3),
+  runtimeActivation: external_exports.object({
+    admittedRelease: ImmutableReleaseRefSchema,
+    currentRelease: ImmutableReleaseRefSchema,
+    rebasedOntoCurrent: external_exports.boolean(),
+    admittedSourceFiles: external_exports.array(RefinerSourceFileSchema).max(100),
+    admittedSourceCatalog: external_exports.array(RefinerSourceCatalogEntrySchema).max(1e3)
+  }).strict(),
+  sourceFiles: external_exports.array(RefinerSourceFileSchema).max(100),
+  sourceCatalog: external_exports.array(RefinerSourceCatalogEntrySchema).max(1e3),
   additionalEvidence: external_exports.unknown().nullable().optional()
 }).strict();
 var DEFAULT_REFINER_TIMEOUT_MS = 6e4;
@@ -2934,8 +2944,9 @@ async function authorLocalHarnessRefinementWithModel(input) {
       stream: input.stream,
       signal: timeout.signal
     });
-    if (draft.decision === "no_action")
+    if (draft.decision === "no_action" && !requiresNoActionChallenge(evidence2)) {
       return draft;
+    }
     const draftAdmissionIssues = decisionAdmissionIssues(draft, evidence2);
     const reviewed = await requestRefinerDecision({
       messages: [
@@ -2944,13 +2955,17 @@ async function authorLocalHarnessRefinementWithModel(input) {
         {
           role: "user",
           content: [
-            "Perform a mandatory independent critique before any Harness mutation.",
+            draft.decision === "no_action" ? "Perform an independent challenge of the proposed no_action decision." : "Perform a mandatory independent critique before any Harness mutation.",
             "Re-read the chronological packet and verify the declared evidence basis, failure mechanism, ownership, target layer, exact edit, and expected future effect.",
+            "A completed user outcome and successful recovery do not erase a concrete, avoidable internal execution error. When a recovered failure exposes a specific prevention rule that would avoid future tool calls, retries, or token burn, prefer the smallest validated Harness correction.",
+            "Do not treat a generic instruction to recover and continue as proof that no narrower prevention guidance is useful. Treat repeated failures in the same turn as reinforcing evidence when they share a mechanism.",
+            "If the model violated a loaded instruction and only later recovered, do not use the instruction's presence as a reason for no_action. Test whether a small, non-duplicative operationalization of that instruction would improve first-attempt compliance; no_action is defensible only when the existing rule was followed or no such improvement is supported by the supplied evidence.",
             "Reject invented recurrence, unsupported evidence references, material counterevidence, unavailable capability layers, task-specific or benchmark content, inferred memory, broad instructions, and workarounds for runtime, product, taskset, or grader defects.",
             "Do not reject a concise correction merely because the deterministic failure appeared once when the mechanism and reusable prevention are clear.",
             "For adaptation cohorts, reject drafts that add work instead of removing the repeated foreground-token cost while preserving quality.",
+            `Copy supportingEvidenceIds only from this exact list: ${JSON.stringify(evidence2.admissibleEvidenceIds)}.`,
             ...draftAdmissionIssues.length ? [`The draft also failed deterministic admission: ${draftAdmissionIssues.join("; ")}. Correct it or return no_action.`] : [],
-            "Return the complete final JSON decision. Use no_action or route when the proposed Harness edit does not survive this critique."
+            draft.decision === "no_action" ? "Return no_action only if you can identify no concrete reusable prevention rule in the supplied recovery evidence. Otherwise return the smallest valid route or proposal." : "Return the complete final JSON decision. Use no_action or route when the proposed Harness edit does not survive this critique."
           ].join("\n")
         }
       ],
@@ -2967,6 +2982,9 @@ async function authorLocalHarnessRefinementWithModel(input) {
     timeout.cleanup();
   }
 }
+function requiresNoActionChallenge(evidence2) {
+  return evidence2.observations.some((observation) => observation.kind === "recovery" || observation.kind === "tool_failure");
+}
 async function requestRefinerDecision(input) {
   const first = await collect(input.stream({
     messages: input.messages,
@@ -3016,9 +3034,13 @@ function refinerMessages(evidence2) {
         "A taskset_grade diagnostic is authoritative evaluation evidence. A failed grade is not cancelled by polished output or successful tools; identify whether its root cause belongs in the Harness or an external owner.",
         "A taskset grade proves only the measured outcome. It does not prove that the root owner is the Harness rather than runtime, product, fixture, grader, taskset, or model behavior.",
         "Optimize future work, not the completed turn. A repeated avoidable strategy is strong evidence, but one high-confidence deterministic failure may justify a small validated correction when the failure mechanism and reusable prevention are both clear. Recurrence strengthens confidence; it is not universally required.",
+        "Recovered internal mistakes are not automatically ordinary successful work. A concrete API mismatch, incompatible dependency or format, or repeated command construction error can justify a narrow preventive skill or prompt correction when the trace shows how to avoid it next time.",
+        "runtimeActivation is authoritative about activation timing. admittedSourceFiles describe the exact released source available to the reviewed turn. sourceFiles and sourceCatalog describe the current editable release. When rebasedOntoCurrent is true, do not claim a current-only instruction was loaded by the reviewed turn.",
+        "When the supplied trace shows that the model violated an already-loaded Harness instruction before recovering, the instruction's existence is not counterevidence. Treat that as evidence that its current wording, placement, or operational form was ineffective. Evaluate the smallest non-duplicative change that makes the rule actionable at the decision point, such as a concise preflight or checklist. Do not merely restate the existing rule.",
+        "For command, API, or structured-output construction failures, prefer an observable invariant over a vague reminder: name the forbidden combination precisely, state where it is forbidden, remove ambiguous qualifiers, and include one valid alternative when the evidence proves it. A post-activation recurrence should strengthen the operational form rather than duplicate the same wording in another file.",
         crossRunCandidate ? "This is a bounded cross-Work candidate continuation. Verify the supplied candidate, review, authorization, admitted release, independent occurrences, and counterevidence. Use recurrent_independent only; do not reinterpret unrelated wording as recurrence." : "This is an immediate completed-turn review, not an unbounded cross-Work archive review. Use only supplied observations and priorIncidents. Defer ambiguous recurrence to recurring-pattern review.",
         "Every route or proposal must declare evidenceBasis. Use single_deterministic only when a supplied incident exposes an observed deterministic mechanism and reusable prevention rule with no material counterevidence. Use recurrent_independent only for at least two materially independent supplied incidents; similar wording, topic, tool name, or artifact family is not independence.",
-        "supportingEvidenceIds must name actual supplied observation or prior-incident IDs. List material counterevidence explicitly. Never invent recurrence or omit contradictory supplied evidence.",
+        "supportingEvidenceIds must copy exact values from admissibleEvidenceIds. Do not synthesize labels from timeline sequences, event names, tools, or descriptions. List material counterevidence explicitly. Never invent recurrence or omit contradictory supplied evidence.",
         "Use no_action for ordinary successful work, conversation-specific facts, or insufficient evidence. High token use alone is not a reason to edit the Harness.",
         "Use route whenever a runtime, product, taskset, or training defect materially prevented the requested outcome. Routing records ownership; it does not blame the agent and does not require recurrence. A good fallback, transparent disclosure, or likely transient outage does not erase the external defect.",
         "For a Harness proposal, encode only the reusable root behavior. Do not copy subject matter, named entities, business facts, requested artifact content, benchmark wording, secrets, raw user data, or transient paths.",
@@ -3089,7 +3111,10 @@ function decisionAdmissionIssues(decision2, evidence2) {
   return issues;
 }
 function suppliedEvidenceIds(evidence2) {
-  const ids = /* @__PURE__ */ new Set([evidence2.reviewPacket.currentTurn.id]);
+  const ids = /* @__PURE__ */ new Set([
+    evidence2.reviewPacket.currentTurn.id,
+    ...evidence2.admissibleEvidenceIds
+  ]);
   for (const item of evidence2.observations)
     addRecordId(ids, item);
   for (const item of evidence2.reviewPacket.priorIncidents)

package/dist/chunks/{chunk-IZ3XGRAG.js → chunk-K4JEWEJQ.js}

@@ -6,7 +6,7 @@ import {
   readApiJson,
   resolveOpChatApiBaseUrl,
   sendHostedChatTurn
-} from "./chunk-XSHMPOQV.js";
+} from "./chunk-JGOP4GCK.js";
 
 // ../../packages/sdk/src/work.ts
 var DEFAULT_MODEL = "openpond-chat";

package/dist/chunks/{chunk-L5JTI6LQ.js → chunk-KGU437HZ.js}

@@ -15,7 +15,7 @@ import {
   ToolDeclarationSchema,
   createHarnessAdvanceReceipt,
   validateConnectedAppToolCallRequest
-} from "./chunk-TOMMZN6V.js";
+} from "./chunk-JTFDOA2P.js";
 import {
   external_exports,
   yaml
@@ -24,7 +24,7 @@ import {
   DEFAULT_OPENPOND_API_BASE_URL,
   DEFAULT_OPENPOND_WEB_BASE_URL,
   apiFetch
-} from "./chunk-XSHMPOQV.js";
+} from "./chunk-JGOP4GCK.js";
 
 // ../../packages/cloud/dist/profile/profile-skills.js
 import { createHash } from "node:crypto";
@@ -4977,6 +4977,7 @@ function normalizeSubagentRoleSettings(roles) {
 // ../../packages/contracts/dist/settings.js
 var DEFAULT_CODEX_CHAT_MODEL = "gpt-5.6-sol";
 var DEFAULT_OPENPOND_CHAT_MODEL = "openpond-chat";
+var DEFAULT_HARNESS_REFINER_MODEL = "accounts/fireworks/models/deepseek-v4-flash";
 var DEFAULT_CHAT_PROVIDER = "openpond";
 var DEFAULT_CHAT_MODEL = DEFAULT_OPENPOND_CHAT_MODEL;
 var DEFAULT_CODEX_PERMISSION_MODE = "default";
@@ -12807,6 +12808,7 @@ export {
   AccountStateSchema,
   DEFAULT_CODEX_CHAT_MODEL,
   DEFAULT_OPENPOND_CHAT_MODEL,
+  DEFAULT_HARNESS_REFINER_MODEL,
   DEFAULT_CHAT_PROVIDER,
   DEFAULT_CODEX_REASONING_EFFORT,
   DEFAULT_OPENPOND_COMMAND_ACCESS_MODE,

package/dist/chunks/{chunk-ZAX7MLQJ.js → chunk-LEL5AQJU.js}

@@ -4,7 +4,7 @@ import {
   getAnyCliOptionKind,
   getCliCommandDefinition,
   getCliOptionKind
-} from "./chunk-LBIVEX6V.js";
+} from "./chunk-YDH34BGG.js";
 import {
   parseJsonOption
 } from "./chunk-MUMPWI4O.js";

package/dist/chunks/{chunk-B3WVCPXG.js → chunk-PLDCQVNW.js}

@@ -15,7 +15,7 @@ import {
   parseSandboxRuntimePromotionPolicyOption,
   parseSandboxWorkflowModeOption,
   runProcessCommand
-} from "./chunk-XIUCBUUQ.js";
+} from "./chunk-J2REM7LE.js";
 import {
   optionString,
   optionalJsonObject,
@@ -158,7 +158,10 @@ async function buildAgentSdkMaterializedDependency(projectPath, packageJson) {
   if (!sdkSource) return null;
   const tempDir = await fs.mkdtemp(path3.join(tmpdir(), "openpond-agent-sdk-pack-"));
   try {
-    const sdkContents = sdkSource.kind === "package_root" ? await packOpenPondAgentSdkPackageRoot(sdkSource.packageRoot, tempDir) : sdkSource.tarballContents;
+    const sdkContents = sdkSource.kind === "package_root" ? await packOpenPondAgentSdkPackageRoot(sdkSource.packageRoot, tempDir) : sdkSource.kind === "registry" ? await packOpenPondAgentSdkRegistryPackage(
+      sdkSource.versionSpec,
+      tempDir
+    ) : sdkSource.tarballContents;
     const sdkDependencyTarballs = await packAgentSdkRuntimeDependencyTarballs({
       sdkPackageJson: sdkSource.packageJson,
       dependencyBaseDir: sdkSource.dependencyBaseDir,
@@ -238,7 +241,11 @@ async function packAgentSdkRuntimeDependencyTarballs(params) {
   const projectDependencies = recordStringMap(
     params.projectPackageJson.dependencies
   );
+  const projectDevDependencies = recordStringMap(
+    params.projectPackageJson.devDependencies
+  );
   delete projectDependencies["openpond-agent-sdk"];
+  delete projectDevDependencies["openpond-agent-sdk"];
   const pending = [
     ...Object.entries(sdkDependencies).map(([packageName, versionSpec]) => ({
       packageName,
@@ -249,7 +256,14 @@ async function packAgentSdkRuntimeDependencyTarballs(params) {
       packageName,
       versionSpec,
       dependencyBaseDir: params.projectPath
-    }))
+    })),
+    ...Object.entries(projectDevDependencies).map(
+      ([packageName, versionSpec]) => ({
+        packageName,
+        versionSpec,
+        dependencyBaseDir: params.projectPath
+      })
+    )
   ].sort((left, right) => left.packageName.localeCompare(right.packageName));
   const seen = /* @__PURE__ */ new Set();
   const tarballs = [];
@@ -281,7 +295,14 @@ ${details}` : ""}`
       );
     }
     const contents = await fs.readFile(path3.join(params.tempDir, tarballName));
-    const packedPackageJson = readPackageJsonFromNpmTarball(contents);
+    let packedPackageJson;
+    try {
+      packedPackageJson = readPackageJsonFromNpmTarball(contents);
+    } catch (error) {
+      throw new Error(
+        `failed to inspect packed dependency ${packageName}: ${error instanceof Error ? error.message : String(error)}`
+      );
+    }
     tarballs.push({
       packageName,
       source: "npm_dependency_tarball",
@@ -334,6 +355,33 @@ function npmPackTargetForDependency(params) {
 function sanitizeNpmPackageNameForVendor(packageName) {
   return packageName.replace(/^@/, "").replace(/[\/\\]/g, "__").replace(/[^a-zA-Z0-9._-]/g, "_");
 }
+async function packOpenPondAgentSdkRegistryPackage(versionSpec, tempDir) {
+  const pack = await runCommand(
+    "npm",
+    [
+      "pack",
+      "--silent",
+      "--pack-destination",
+      tempDir,
+      `openpond-agent-sdk@${versionSpec}`
+    ],
+    { cwd: tempDir }
+  );
+  if (pack.code !== 0) {
+    const details = [pack.stderr.trim(), pack.stdout.trim()].filter(Boolean).join("\n");
+    throw new Error(
+      `failed to pack openpond-agent-sdk for source upload${details ? `:
+${details}` : ""}`
+    );
+  }
+  const tarballName = pack.stdout.trim().split(/\r?\n/).filter(Boolean).pop();
+  if (!tarballName) {
+    throw new Error(
+      "failed to pack openpond-agent-sdk for source upload: npm pack did not return a tarball name"
+    );
+  }
+  return fs.readFile(path3.join(tempDir, tarballName));
+}
 function resolveLocalOpenPondAgentSdkMaterializationSource(projectPath, packageJson) {
   const versionSpec = readOpenPondAgentSdkVersionSpec(packageJson);
   if (versionSpec?.startsWith("file:")) {
@@ -375,6 +423,23 @@ function resolveLocalOpenPondAgentSdkMaterializationSource(projectPath, packageJ
       };
     }
   }
+  const installedPackageRoot = path3.join(
+    projectPath,
+    "node_modules",
+    "openpond-agent-sdk"
+  );
+  if (isOpenPondAgentSdkPackageRoot(installedPackageRoot)) {
+    const installedPackageJson = JSON.parse(
+      readFileSyncUtf8(path3.join(installedPackageRoot, "package.json"))
+    );
+    const installedVersion = text(installedPackageJson.version);
+    return {
+      kind: "registry",
+      versionSpec: installedVersion ?? versionSpec ?? "latest",
+      dependencyBaseDir: installedPackageRoot,
+      packageJson: installedPackageJson
+    };
+  }
   return null;
 }
 function findOpenPondAgentSdkPackageRootInAncestors(projectPath) {
@@ -420,14 +485,14 @@ function readPackageJsonFromNpmTarball(tarballContents) {
     }
     const dataStart = offset + 512;
     const dataEnd = dataStart + size;
-    if (entryPath === "package/package.json") {
+    if (entryPath === "package/package.json" || entryPath.endsWith("/package.json")) {
       return JSON.parse(
         tarContents.subarray(dataStart, dataEnd).toString("utf8")
       );
     }
     offset = dataStart + Math.ceil(size / 512) * 512;
   }
-  throw new Error("failed to read openpond-agent-sdk tarball: missing package.json");
+  throw new Error("failed to read npm package tarball: missing package.json");
 }
 function readTarString(header, start, length) {
   const field = header.subarray(start, start + length);

package/dist/chunks/{chunk-YSVY4O42.js → chunk-T55IL3GI.js}

@@ -4,7 +4,7 @@ import {
   parseSandboxRuntimeProfileIdOption,
   parseSandboxRuntimePromotionPolicyOption,
   parseSandboxWorkflowModeOption
-} from "./chunk-XIUCBUUQ.js";
+} from "./chunk-J2REM7LE.js";
 import {
   parseBooleanOption,
   parseCsvOption,