openpond 0.0.67 → 0.0.69

package/dist/chunks/{chunk-J2REM7LE.js → chunk-HFPUR4CQ.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-SMNFI2FU.js";
 import {
   createOpenPondSandboxClient
-} from "./chunk-JGOP4GCK.js";
+} from "./chunk-JTHL5XJ2.js";
 import {
   DEFAULT_CACHE_TTL_MS,
   SANDBOX_RUNTIME_PROFILE_IDS,
@@ -15,13 +15,12 @@ import {
   getDeploymentLogs,
   getDeploymentStatus,
   listApps,
-  listConfiguredProfiles,
   listUserTools,
   loadConfig,
   saveGlobalConfig,
   setCachedApps,
   setCachedTools
-} from "./chunk-DBHSOTYZ.js";
+} from "./chunk-D7BO5Y5J.js";
 import {
   DEFAULT_OPENPOND_API_BASE_URL,
   DEFAULT_OPENPOND_WEB_BASE_URL
@@ -291,71 +290,6 @@ async function promptForPath(defaultPath) {
   }
 }
 
-// src/cli/common/vercel-protection.ts
-import { spawnSync } from "node:child_process";
-import path from "node:path";
-function ensureStagingVercelProtectionBypass(requestUrl, options = {}) {
-  const env = options.env ?? process.env;
-  if (env.VERCEL_AUTOMATION_BYPASS_SECRET?.trim()) return true;
-  if (!isOpenPondStagingUrl(requestUrl)) return false;
-  const cwd = path.resolve(options.cwd ?? process.cwd());
-  const projectDirectories = candidateProjectDirectories(cwd, env);
-  const run = options.run ?? runProtectionCommand;
-  const command = process.platform === "win32" ? "vercel.cmd" : "vercel";
-  for (const projectDirectory of projectDirectories) {
-    const result = run({
-      command,
-      args: ["project", "protection", "--format", "json"],
-      cwd: projectDirectory,
-      env
-    });
-    if (result.status !== 0 || !result.stdout.trim()) continue;
-    const secret = vercelProtectionBypassSecret(result.stdout);
-    if (!secret) continue;
-    env.VERCEL_AUTOMATION_BYPASS_SECRET = secret;
-    return true;
-  }
-  return false;
-}
-function vercelProtectionBypassSecret(rawProtectionJson) {
-  try {
-    const payload = JSON.parse(rawProtectionJson);
-    const entries = Object.entries(payload.protectionBypass ?? {});
-    const selected = entries.find(([, metadata]) => metadata?.isEnvVar === true) ?? entries[0];
-    return selected?.[0]?.trim() || null;
-  } catch {
-    return null;
-  }
-}
-function isOpenPondStagingUrl(requestUrl) {
-  try {
-    const hostname = new URL(requestUrl).hostname.toLowerCase();
-    return hostname === "staging.openpond.ai" || hostname === "staging-api.openpond.ai" || hostname.endsWith(".staging-api.openpond.ai");
-  } catch {
-    return false;
-  }
-}
-function candidateProjectDirectories(cwd, env) {
-  const configured = env.OPENPOND_VERCEL_PROJECT_DIR?.trim();
-  return [.../* @__PURE__ */ new Set([
-    ...configured ? [path.resolve(cwd, configured)] : [],
-    path.resolve(cwd, "../sandbox"),
-    cwd
-  ])];
-}
-function runProtectionCommand(input3) {
-  const result = spawnSync(input3.command, input3.args, {
-    cwd: input3.cwd,
-    env: input3.env,
-    encoding: "utf8",
-    stdio: ["ignore", "pipe", "ignore"]
-  });
-  return {
-    status: result.status,
-    stdout: typeof result.stdout === "string" ? result.stdout : ""
-  };
-}
-
 // src/cli/common/sandbox-options.ts
 var SANDBOX_WORKFLOW_MODES = [
   "readonly",
@@ -374,13 +308,7 @@ var SANDBOX_RUNTIME_PROFILES = [
   ...SANDBOX_RUNTIME_PROFILE_IDS
 ];
 function resolveSandboxBaseUrl(config, options) {
-  const envName = typeof options.env === "string" ? options.env.trim().toLowerCase() : typeof options.environment === "string" ? options.environment.trim().toLowerCase() : "";
-  if (envName === "staging") {
-    return "https://api-new.staging-api.openpond.ai";
-  }
-  if (envName && envName !== "production") {
-    throw new Error("sandbox env must be staging or production");
-  }
+  void options;
   const base = process.env.OPENPOND_SANDBOX_BASE_URL || process.env.OPENPOND_API_URL || config.apiBaseUrl || mapUiBaseToApiBase(process.env.OPENPOND_BASE_URL || config.baseUrl) || DEFAULT_OPENPOND_API_BASE_URL;
   return base.replace(/\/$/, "");
 }
@@ -390,52 +318,13 @@ async function resolveSandboxClient(options) {
   const apiKey = await ensureApiKey(config, uiBase);
   const sandboxApiUrl = resolveSandboxApiUrlOption(options) || process.env.OPENPOND_SANDBOX_API_URL?.trim() || null;
   const baseUrl = resolveSandboxBaseUrl(config, options);
-  ensureStagingVercelProtectionBypass(sandboxApiUrl ?? baseUrl);
   return createOpenPondSandboxClient(
     sandboxApiUrl ? { apiKey, sandboxApiUrl } : { apiKey, baseUrl }
   );
 }
 async function loadSandboxConfig(options) {
-  const environment = sandboxEnvironmentOption(options);
-  if (!environment) return loadConfig();
-  const profiles = await listConfiguredProfiles();
-  const requestedAccount = typeof options.account === "string" ? options.account.trim().toLowerCase() : typeof options.profile === "string" ? options.profile.trim().toLowerCase() : "";
-  const matches = profiles.filter(
-    (profile) => profileMatchesEnvironment(profile, environment) && (!requestedAccount || profile.handle.toLowerCase() === requestedAccount)
-  );
-  const selected = matches.find((profile) => profile.isActive) ?? (matches.length === 1 ? matches[0] : null);
-  if (!selected) {
-    throw new Error(
-      matches.length === 0 ? `no saved ${environment} OpenPond account found; run openpond login for that environment first` : `multiple saved ${environment} OpenPond accounts found; pass --account and --base-url to select one`
-    );
-  }
-  return loadConfig({
-    account: selected.handle,
-    ...selected.baseUrl ? { baseUrl: selected.baseUrl } : {}
-  });
-}
-function sandboxEnvironmentOption(options) {
-  const value = typeof options.env === "string" ? options.env.trim().toLowerCase() : typeof options.environment === "string" ? options.environment.trim().toLowerCase() : "";
-  if (!value) return null;
-  if (value !== "production" && value !== "staging") {
-    throw new Error("sandbox env must be staging or production");
-  }
-  return value;
-}
-function profileMatchesEnvironment(profile, environment) {
-  const hosts = [profile.baseUrl, profile.apiBaseUrl].flatMap((value) => {
-    if (!value) return [];
-    try {
-      return [new URL(value).hostname.toLowerCase()];
-    } catch {
-      return [];
-    }
-  });
-  const isStaging = hosts.some(
-    (hostname) => hostname === "staging.openpond.ai" || hostname === "staging-api.openpond.ai" || hostname.endsWith(".staging-api.openpond.ai")
-  );
-  if (environment === "staging") return isStaging;
-  return !isStaging && profile.environment?.toLowerCase() === "production";
+  void options;
+  return loadConfig();
 }
 function parseSandboxWorkflowModeOption(value) {
   if (value === void 0) return void 0;

package/dist/chunks/{chunk-JIEUB6OS.js → chunk-J3YDKJFD.js}

@@ -1,7 +1,7 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
 import {
   writePrivateJsonFile
-} from "./chunk-DBHSOTYZ.js";
+} from "./chunk-D7BO5Y5J.js";
 
 // ../../packages/cloud/src/profile/source-upload-cache.ts
 import { createHash } from "node:crypto";

package/dist/chunks/{chunk-JGOP4GCK.js → chunk-JTHL5XJ2.js}

@@ -1,24 +1,5 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
 
-// ../../packages/cloud/dist/api/vercel-protection.js
-var VERCEL_PROTECTION_BYPASS_HEADER = "x-vercel-protection-bypass";
-function withVercelProtectionBypass(requestUrl, inputHeaders, env = typeof process === "undefined" ? {} : process.env) {
-  const headers = new Headers(inputHeaders);
-  const secret = env.VERCEL_AUTOMATION_BYPASS_SECRET?.trim();
-  if (!secret || !isOpenPondStagingUrl(requestUrl))
-    return headers;
-  headers.set(VERCEL_PROTECTION_BYPASS_HEADER, secret);
-  return headers;
-}
-function isOpenPondStagingUrl(requestUrl) {
-  try {
-    const hostname = new URL(requestUrl).hostname.toLowerCase();
-    return hostname === "staging.openpond.ai" || hostname === "staging-api.openpond.ai" || hostname.endsWith(".staging-api.openpond.ai");
-  } catch {
-    return false;
-  }
-}
-
 // ../../packages/cloud/dist/api/core.js
 var DEFAULT_API_TIMEOUT_MS = 3e4;
 var DEFAULT_API_RESPONSE_BYTES = 8 * 1024 * 1024;
@@ -61,7 +42,7 @@ var OpenPondApiError = class extends Error {
 async function apiFetch(baseUrl, token, requestPath, options = {}) {
   const { timeoutMs = DEFAULT_API_TIMEOUT_MS, maxResponseBytes = DEFAULT_API_RESPONSE_BYTES, ...init } = options;
   const requestUrl = `${baseUrl}${requestPath}`;
-  const headers = withVercelProtectionBypass(requestUrl, init.headers);
+  const headers = new Headers(init.headers);
   headers.set("Content-Type", "application/json");
   const apiKey = process.env.OPENPOND_API_KEY;
   const trimmedToken = token?.trim() || "";
@@ -203,7 +184,7 @@ function apiRootUrlFromSandboxApiUrl(sandboxApiUrl) {
   return sandboxApiUrl.slice(0, -suffix.length);
 }
 function isOpenPondHostedApiHost(hostname) {
-  return hostname === "api.openpond.ai" || hostname === "staging-api.openpond.ai" || hostname.startsWith("api") && hostname.endsWith(".openpond.ai");
+  return hostname === "api.openpond.ai" || hostname.startsWith("api") && hostname.endsWith(".openpond.ai");
 }
 
 // ../../packages/cloud/dist/sandbox/client-handles.js
@@ -1781,14 +1762,14 @@ function requireToken(value) {
     throw new Error("OpenPond API key is required");
   return trimmed;
 }
-function hostedHeaders(requestUrl, token, accept, requestId) {
+function hostedHeaders(token, accept, requestId) {
   const headers = new Headers();
   headers.set("Authorization", `Bearer ${requireToken(token)}`);
   headers.set("Content-Type", "application/json");
   headers.set("Accept", accept);
   headers.set("x-openpond-client", "openpond-code");
   headers.set("x-openpond-request-id", requestId || randomUUID());
-  return withVercelProtectionBypass(requestUrl, headers);
+  return headers;
 }
 async function readError(response) {
   const text = await response.text().catch(() => "");
@@ -1834,7 +1815,7 @@ async function sendHostedChatTurn(options) {
   const requestUrl = `${apiBaseUrl}/chat/completions`;
   const response = await fetch(requestUrl, {
     method: "POST",
-    headers: hostedHeaders(requestUrl, options.token, "application/json", options.requestId),
+    headers: hostedHeaders(options.token, "application/json", options.requestId),
     body: JSON.stringify(buildHostedChatBody(options, false)),
     signal: options.signal
   });
@@ -1845,7 +1826,6 @@ async function sendHostedChatTurn(options) {
 }
 
 export {
-  withVercelProtectionBypass,
   OpenPondApiError,
   apiFetch,
   readApiJson,