openpond 0.0.68 → 0.0.69

package/dist/chunks/{chunk-J2REM7LE.js → chunk-HFPUR4CQ.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-SMNFI2FU.js";
 import {
   createOpenPondSandboxClient
-} from "./chunk-JGOP4GCK.js";
+} from "./chunk-JTHL5XJ2.js";
 import {
   DEFAULT_CACHE_TTL_MS,
   SANDBOX_RUNTIME_PROFILE_IDS,
@@ -15,13 +15,12 @@ import {
   getDeploymentLogs,
   getDeploymentStatus,
   listApps,
-  listConfiguredProfiles,
   listUserTools,
   loadConfig,
   saveGlobalConfig,
   setCachedApps,
   setCachedTools
-} from "./chunk-DBHSOTYZ.js";
+} from "./chunk-D7BO5Y5J.js";
 import {
   DEFAULT_OPENPOND_API_BASE_URL,
   DEFAULT_OPENPOND_WEB_BASE_URL
@@ -291,71 +290,6 @@ async function promptForPath(defaultPath) {
   }
 }
 
-// src/cli/common/vercel-protection.ts
-import { spawnSync } from "node:child_process";
-import path from "node:path";
-function ensureStagingVercelProtectionBypass(requestUrl, options = {}) {
-  const env = options.env ?? process.env;
-  if (env.VERCEL_AUTOMATION_BYPASS_SECRET?.trim()) return true;
-  if (!isOpenPondStagingUrl(requestUrl)) return false;
-  const cwd = path.resolve(options.cwd ?? process.cwd());
-  const projectDirectories = candidateProjectDirectories(cwd, env);
-  const run = options.run ?? runProtectionCommand;
-  const command = process.platform === "win32" ? "vercel.cmd" : "vercel";
-  for (const projectDirectory of projectDirectories) {
-    const result = run({
-      command,
-      args: ["project", "protection", "--format", "json"],
-      cwd: projectDirectory,
-      env
-    });
-    if (result.status !== 0 || !result.stdout.trim()) continue;
-    const secret = vercelProtectionBypassSecret(result.stdout);
-    if (!secret) continue;
-    env.VERCEL_AUTOMATION_BYPASS_SECRET = secret;
-    return true;
-  }
-  return false;
-}
-function vercelProtectionBypassSecret(rawProtectionJson) {
-  try {
-    const payload = JSON.parse(rawProtectionJson);
-    const entries = Object.entries(payload.protectionBypass ?? {});
-    const selected = entries.find(([, metadata]) => metadata?.isEnvVar === true) ?? entries[0];
-    return selected?.[0]?.trim() || null;
-  } catch {
-    return null;
-  }
-}
-function isOpenPondStagingUrl(requestUrl) {
-  try {
-    const hostname = new URL(requestUrl).hostname.toLowerCase();
-    return hostname === "staging.openpond.ai" || hostname === "staging-api.openpond.ai" || hostname.endsWith(".staging-api.openpond.ai");
-  } catch {
-    return false;
-  }
-}
-function candidateProjectDirectories(cwd, env) {
-  const configured = env.OPENPOND_VERCEL_PROJECT_DIR?.trim();
-  return [.../* @__PURE__ */ new Set([
-    ...configured ? [path.resolve(cwd, configured)] : [],
-    path.resolve(cwd, "../sandbox"),
-    cwd
-  ])];
-}
-function runProtectionCommand(input3) {
-  const result = spawnSync(input3.command, input3.args, {
-    cwd: input3.cwd,
-    env: input3.env,
-    encoding: "utf8",
-    stdio: ["ignore", "pipe", "ignore"]
-  });
-  return {
-    status: result.status,
-    stdout: typeof result.stdout === "string" ? result.stdout : ""
-  };
-}
-
 // src/cli/common/sandbox-options.ts
 var SANDBOX_WORKFLOW_MODES = [
   "readonly",
@@ -374,13 +308,7 @@ var SANDBOX_RUNTIME_PROFILES = [
   ...SANDBOX_RUNTIME_PROFILE_IDS
 ];
 function resolveSandboxBaseUrl(config, options) {
-  const envName = typeof options.env === "string" ? options.env.trim().toLowerCase() : typeof options.environment === "string" ? options.environment.trim().toLowerCase() : "";
-  if (envName === "staging") {
-    return "https://api-new.staging-api.openpond.ai";
-  }
-  if (envName && envName !== "production") {
-    throw new Error("sandbox env must be staging or production");
-  }
+  void options;
   const base = process.env.OPENPOND_SANDBOX_BASE_URL || process.env.OPENPOND_API_URL || config.apiBaseUrl || mapUiBaseToApiBase(process.env.OPENPOND_BASE_URL || config.baseUrl) || DEFAULT_OPENPOND_API_BASE_URL;
   return base.replace(/\/$/, "");
 }
@@ -390,52 +318,13 @@ async function resolveSandboxClient(options) {
   const apiKey = await ensureApiKey(config, uiBase);
   const sandboxApiUrl = resolveSandboxApiUrlOption(options) || process.env.OPENPOND_SANDBOX_API_URL?.trim() || null;
   const baseUrl = resolveSandboxBaseUrl(config, options);
-  ensureStagingVercelProtectionBypass(sandboxApiUrl ?? baseUrl);
   return createOpenPondSandboxClient(
     sandboxApiUrl ? { apiKey, sandboxApiUrl } : { apiKey, baseUrl }
   );
 }
 async function loadSandboxConfig(options) {
-  const environment = sandboxEnvironmentOption(options);
-  if (!environment) return loadConfig();
-  const profiles = await listConfiguredProfiles();
-  const requestedAccount = typeof options.account === "string" ? options.account.trim().toLowerCase() : typeof options.profile === "string" ? options.profile.trim().toLowerCase() : "";
-  const matches = profiles.filter(
-    (profile) => profileMatchesEnvironment(profile, environment) && (!requestedAccount || profile.handle.toLowerCase() === requestedAccount)
-  );
-  const selected = matches.find((profile) => profile.isActive) ?? (matches.length === 1 ? matches[0] : null);
-  if (!selected) {
-    throw new Error(
-      matches.length === 0 ? `no saved ${environment} OpenPond account found; run openpond login for that environment first` : `multiple saved ${environment} OpenPond accounts found; pass --account and --base-url to select one`
-    );
-  }
-  return loadConfig({
-    account: selected.handle,
-    ...selected.baseUrl ? { baseUrl: selected.baseUrl } : {}
-  });
-}
-function sandboxEnvironmentOption(options) {
-  const value = typeof options.env === "string" ? options.env.trim().toLowerCase() : typeof options.environment === "string" ? options.environment.trim().toLowerCase() : "";
-  if (!value) return null;
-  if (value !== "production" && value !== "staging") {
-    throw new Error("sandbox env must be staging or production");
-  }
-  return value;
-}
-function profileMatchesEnvironment(profile, environment) {
-  const hosts = [profile.baseUrl, profile.apiBaseUrl].flatMap((value) => {
-    if (!value) return [];
-    try {
-      return [new URL(value).hostname.toLowerCase()];
-    } catch {
-      return [];
-    }
-  });
-  const isStaging = hosts.some(
-    (hostname) => hostname === "staging.openpond.ai" || hostname === "staging-api.openpond.ai" || hostname.endsWith(".staging-api.openpond.ai")
-  );
-  if (environment === "staging") return isStaging;
-  return !isStaging && profile.environment?.toLowerCase() === "production";
+  void options;
+  return loadConfig();
 }
 function parseSandboxWorkflowModeOption(value) {
   if (value === void 0) return void 0;

package/dist/chunks/{chunk-JIEUB6OS.js → chunk-J3YDKJFD.js}

@@ -1,7 +1,7 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
 import {
   writePrivateJsonFile
-} from "./chunk-DBHSOTYZ.js";
+} from "./chunk-D7BO5Y5J.js";
 
 // ../../packages/cloud/src/profile/source-upload-cache.ts
 import { createHash } from "node:crypto";

package/dist/chunks/{chunk-JGOP4GCK.js → chunk-JTHL5XJ2.js}

@@ -1,24 +1,5 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
 
-// ../../packages/cloud/dist/api/vercel-protection.js
-var VERCEL_PROTECTION_BYPASS_HEADER = "x-vercel-protection-bypass";
-function withVercelProtectionBypass(requestUrl, inputHeaders, env = typeof process === "undefined" ? {} : process.env) {
-  const headers = new Headers(inputHeaders);
-  const secret = env.VERCEL_AUTOMATION_BYPASS_SECRET?.trim();
-  if (!secret || !isOpenPondStagingUrl(requestUrl))
-    return headers;
-  headers.set(VERCEL_PROTECTION_BYPASS_HEADER, secret);
-  return headers;
-}
-function isOpenPondStagingUrl(requestUrl) {
-  try {
-    const hostname = new URL(requestUrl).hostname.toLowerCase();
-    return hostname === "staging.openpond.ai" || hostname === "staging-api.openpond.ai" || hostname.endsWith(".staging-api.openpond.ai");
-  } catch {
-    return false;
-  }
-}
-
 // ../../packages/cloud/dist/api/core.js
 var DEFAULT_API_TIMEOUT_MS = 3e4;
 var DEFAULT_API_RESPONSE_BYTES = 8 * 1024 * 1024;
@@ -61,7 +42,7 @@ var OpenPondApiError = class extends Error {
 async function apiFetch(baseUrl, token, requestPath, options = {}) {
   const { timeoutMs = DEFAULT_API_TIMEOUT_MS, maxResponseBytes = DEFAULT_API_RESPONSE_BYTES, ...init } = options;
   const requestUrl = `${baseUrl}${requestPath}`;
-  const headers = withVercelProtectionBypass(requestUrl, init.headers);
+  const headers = new Headers(init.headers);
   headers.set("Content-Type", "application/json");
   const apiKey = process.env.OPENPOND_API_KEY;
   const trimmedToken = token?.trim() || "";
@@ -203,7 +184,7 @@ function apiRootUrlFromSandboxApiUrl(sandboxApiUrl) {
   return sandboxApiUrl.slice(0, -suffix.length);
 }
 function isOpenPondHostedApiHost(hostname) {
-  return hostname === "api.openpond.ai" || hostname === "staging-api.openpond.ai" || hostname.startsWith("api") && hostname.endsWith(".openpond.ai");
+  return hostname === "api.openpond.ai" || hostname.startsWith("api") && hostname.endsWith(".openpond.ai");
 }
 
 // ../../packages/cloud/dist/sandbox/client-handles.js
@@ -1781,14 +1762,14 @@ function requireToken(value) {
     throw new Error("OpenPond API key is required");
   return trimmed;
 }
-function hostedHeaders(requestUrl, token, accept, requestId) {
+function hostedHeaders(token, accept, requestId) {
   const headers = new Headers();
   headers.set("Authorization", `Bearer ${requireToken(token)}`);
   headers.set("Content-Type", "application/json");
   headers.set("Accept", accept);
   headers.set("x-openpond-client", "openpond-code");
   headers.set("x-openpond-request-id", requestId || randomUUID());
-  return withVercelProtectionBypass(requestUrl, headers);
+  return headers;
 }
 async function readError(response) {
   const text = await response.text().catch(() => "");
@@ -1834,7 +1815,7 @@ async function sendHostedChatTurn(options) {
   const requestUrl = `${apiBaseUrl}/chat/completions`;
   const response = await fetch(requestUrl, {
     method: "POST",
-    headers: hostedHeaders(requestUrl, options.token, "application/json", options.requestId),
+    headers: hostedHeaders(options.token, "application/json", options.requestId),
     body: JSON.stringify(buildHostedChatBody(options, false)),
     signal: options.signal
   });
@@ -1845,7 +1826,6 @@ async function sendHostedChatTurn(options) {
 }
 
 export {
-  withVercelProtectionBypass,
   OpenPondApiError,
   apiFetch,
   readApiJson,

package/dist/chunks/{chunk-OQLYO7TA.js → chunk-MMRJNSWY.js}

@@ -8,14 +8,20 @@ import {
   HarnessTargetedValidationReceiptSchema,
   HarnessTurnSnapshotSchema,
   HarnessWorkspaceSchema,
+  ImmutableReleaseRefSchema,
   LifecycleContractSchema,
+  ModelProjectSchema,
   OptimizerTrainingSampleSchema,
+  RefinerBindingSchema,
+  RefinerReleaseSchema,
+  RefinerReviewProfileSchema,
+  RefinerTransitionReceiptSchema,
   SandboxTemplateManifestSchema,
   SandboxTemplateValidationDiagnosticSchema,
   ToolDeclarationSchema,
   createHarnessAdvanceReceipt,
   validateConnectedAppToolCallRequest
-} from "./chunk-MUS7KPXK.js";
+} from "./chunk-BLFIIAWZ.js";
 import {
   yaml
 } from "./chunk-X7ZG4TSW.js";
@@ -23,15 +29,10 @@ import {
   DEFAULT_OPENPOND_API_BASE_URL,
   DEFAULT_OPENPOND_WEB_BASE_URL,
   apiFetch
-} from "./chunk-JGOP4GCK.js";
+} from "./chunk-JTHL5XJ2.js";
 import {
-  ImmutableReleaseRefSchema,
-  RefinerBindingSchema,
-  RefinerReleaseSchema,
-  RefinerReviewProfileSchema,
-  RefinerTransitionReceiptSchema,
   external_exports
-} from "./chunk-MLWNI3WG.js";
+} from "./chunk-FQS2QL5F.js";
 
 // ../../packages/cloud/dist/profile/profile-skills.js
 import { createHash } from "node:crypto";
@@ -10189,6 +10190,7 @@ var RewardModelRunReceiptSchema = external_exports.object({
   bucketHead: ImmutableReleaseRefSchema2.nullable(),
   processorRelease: ImmutableReleaseRefSchema2,
   optimizerEvidence: ImmutableReleaseRefSchema2,
+  managedExecutionReceipt: ImmutableReleaseRefSchema2.nullable().default(null),
   parameterDeltaHash: ReleaseHashSchema,
   cleanup: external_exports.object({
     computeReleased: external_exports.boolean(),
@@ -10691,7 +10693,7 @@ var LearnedPreferenceRewardBindingSchema = external_exports.object({
   runtime: RewardModelRuntimeSchema,
   processorRelease: external_exports.object({ id: IdSchema7, contentHash: HashSchema6 }).strict(),
   rewardComposerRelease: external_exports.object({ id: IdSchema7, contentHash: HashSchema6 }).strict(),
-  qualificationKind: external_exports.enum(["synthetic_smoke", "human_heldout"])
+  executionReceipt: external_exports.object({ id: IdSchema7, contentHash: HashSchema6 }).strict()
 }).strict();
 var PolicyOptimizationContractSchema = external_exports.object({
   schemaVersion: external_exports.literal("openpond.policyOptimization.v1"),
@@ -11677,74 +11679,7 @@ var ModelRunPresetSchema = external_exports.enum([
   "custom",
   "small_experiment"
 ]);
-var ModelProjectSchema = external_exports.object({
-  schemaVersion: external_exports.literal("openpond.modelProject.v1"),
-  id: TrainingIdSchema,
-  profileId: TrainingIdSchema,
-  revision: external_exports.number().int().positive().default(1),
-  name: external_exports.string().trim().min(1).max(200),
-  objective: external_exports.string().trim().max(5e3).nullable(),
-  defaultBaseModel: BaseModelPreferenceSchema.nullable(),
-  defaultDestinationId: TrainingDestinationIdSchema.nullable(),
-  hosted: external_exports.object({
-    schemaVersion: external_exports.literal("openpond.hostedModelProjectLink.v1"),
-    teamId: TrainingIdSchema,
-    projectId: TrainingIdSchema,
-    portableProjectId: TrainingIdSchema,
-    revision: external_exports.number().int().positive(),
-    etag: TrainingHashSchema,
-    syncedSourceRevision: external_exports.number().int().positive(),
-    syncedAt: TrainingTimestampSchema,
-    tasksets: external_exports.array(external_exports.object({
-      localTasksetId: TrainingIdSchema,
-      releaseId: TrainingIdSchema,
-      releaseRevision: external_exports.number().int().positive(),
-      releaseHash: TrainingHashSchema,
-      hostedTasksetId: TrainingIdSchema,
-      syncedAt: TrainingTimestampSchema
-    }).strict()).max(1e4).default([])
-  }).strict().nullable().default(null),
-  tasksetSyncs: external_exports.array(external_exports.object({
-    localTasksetId: TrainingIdSchema,
-    releaseId: TrainingIdSchema,
-    releaseRevision: external_exports.number().int().positive(),
-    releaseHash: TrainingHashSchema,
-    state: external_exports.enum(["syncing", "synced", "sync_failed"]),
-    hostedTasksetId: TrainingIdSchema.nullable().default(null),
-    lastAttemptAt: TrainingTimestampSchema,
-    syncedAt: TrainingTimestampSchema.nullable().default(null),
-    lastError: external_exports.string().trim().min(1).max(5e3).nullable().default(null)
-  }).strict()).max(1e4).default([]),
-  createdAt: TrainingTimestampSchema,
-  updatedAt: TrainingTimestampSchema
-});
-var ModelRunDraftSchema = external_exports.object({
-  schemaVersion: external_exports.literal("openpond.modelRunDraft.v1"),
-  id: TrainingIdSchema,
-  profileId: TrainingIdSchema,
-  modelId: TrainingIdSchema,
-  status: external_exports.enum(["draft", "ready_to_run", "launched", "cancelled"]),
-  title: external_exports.string().trim().min(1).max(200),
-  datasetMode: external_exports.enum(["existing", "build"]).nullable(),
-  tasksetRef: external_exports.object({
-    id: TrainingIdSchema,
-    revision: external_exports.number().int().positive(),
-    contentHash: TrainingHashSchema
-  }).nullable(),
-  harnessRelease: ImmutableReleaseRefSchema2.nullable().optional(),
-  tasksetRelease: ImmutableReleaseRefSchema2.nullable().optional(),
-  datasetCreationId: TrainingIdSchema.nullable(),
-  buildIntent: DatasetBuildIntentSchema.nullable(),
-  buildSpecification: DatasetBuildSpecificationSchema.nullable(),
-  baseModel: BaseModelPreferenceSchema.nullable(),
-  method: TrainingMethodSchema.nullable(),
-  destinationId: TrainingDestinationIdSchema.nullable(),
-  managedRolloutPlacement: external_exports.enum(["local", "remote"]).optional(),
-  runPreset: ModelRunPresetSchema.nullable(),
-  recipe: TrainingRecipeSchema.nullable(),
-  createdAt: TrainingTimestampSchema,
-  updatedAt: TrainingTimestampSchema
-});
+var ModelProjectSchema2 = ModelProjectSchema;
 var TrainingPlanSchema = external_exports.object({
   schemaVersion: external_exports.literal("openpond.trainingPlan.v1"),
   id: TrainingIdSchema,
@@ -11838,6 +11773,21 @@ var TrainingApprovalSchema = external_exports.object({
   approvedBy: TrainingIdSchema,
   approvedAt: TrainingTimestampSchema
 });
+var TrainingJobSourceSnapshotSchema = external_exports.object({
+  schemaVersion: external_exports.literal("openpond.trainingJobSourceSnapshot.v1"),
+  modelProjectId: TrainingIdSchema,
+  sourceProjectRevision: external_exports.number().int().positive(),
+  profileId: TrainingIdSchema,
+  taskset: external_exports.object({
+    id: TrainingIdSchema,
+    revision: external_exports.number().int().positive(),
+    contentHash: TrainingHashSchema
+  }).strict(),
+  tasksetRelease: ImmutableReleaseRefSchema2,
+  harnessRelease: ImmutableReleaseRefSchema2,
+  baseModel: BaseModelPreferenceSchema,
+  method: TrainingMethodSchema
+}).strict();
 var TrainingJobStatusSchema = external_exports.enum([
   "queued",
   "starting",
@@ -11916,6 +11866,7 @@ var PolicyOptimizationMetricSchema = external_exports.object({
   learningRate: external_exports.number().nonnegative().nullable().default(null),
   policyLoss: external_exports.number().nullable(),
   valueLoss: external_exports.number().nullable(),
+  gradientNorm: external_exports.number().nonnegative().nullable().default(null),
   meanReward: external_exports.number().nullable(),
   meanReturn: external_exports.number().nullable(),
   kl: external_exports.number().nullable(),
@@ -11927,6 +11878,7 @@ var PolicyOptimizationMetricSchema = external_exports.object({
   inputTokens: external_exports.number().int().nonnegative(),
   outputTokens: external_exports.number().int().nonnegative(),
   environmentExecutions: external_exports.number().int().nonnegative(),
+  trajectoryCount: external_exports.number().int().nonnegative().nullable().default(null),
   costUsd: external_exports.number().nonnegative().nullable()
 });
 var ManagedTrainingRunEvidenceSchema = external_exports.object({
@@ -12138,8 +12090,7 @@ var TrainingStateResponseSchema = external_exports.object({
   candidates: external_exports.array(TaskCandidateSchema),
   minerConfig: TaskMinerConfigSchema,
   minerRuns: external_exports.array(TaskMinerRunSchema).default([]),
-  modelProjects: external_exports.array(ModelProjectSchema).default([]),
-  modelRunDrafts: external_exports.array(ModelRunDraftSchema).default([]),
+  modelProjects: external_exports.array(ModelProjectSchema2).default([]),
   modelVersions: external_exports.array(ModelVersionSchema).default([]),
   modelRuns: external_exports.array(ModelRunSchema).default([]),
   rewardModelVersions: external_exports.array(RewardModelVersionSchema).default([]),
@@ -13088,6 +13039,8 @@ var AdapterValidationReceiptSchema = external_exports.object({
 var TrainingExecutionRefSchema = external_exports.object({
   runId: ReleaseIdSchema,
   adapterId: ReleaseIdSchema,
+  protocolVersion: external_exports.enum(["openpond.training.v2", "adapter.native.v1"]).default("adapter.native.v1"),
+  routeFamily: external_exports.enum(["training_v2", "adapter_native"]).default("adapter_native"),
   routeId: ReleaseIdSchema.optional(),
   providerJobId: external_exports.string().trim().min(1).max(1e3).nullable(),
   tenantId: ReleaseIdSchema.optional(),
@@ -13538,13 +13491,13 @@ export {
   TrainingDestinationCapabilitiesSchema,
   BaseModelCandidateSchema,
   TrainingCompatibilityReportSchema,
-  ModelProjectSchema,
-  ModelRunDraftSchema,
+  ModelProjectSchema2 as ModelProjectSchema,
   TrainingPlanSchema,
   TrainingBundleManifestSchema,
   TrainingBundleExportSchema,
   TrainingPreparedStartSchema,
   TrainingApprovalSchema,
+  TrainingJobSourceSnapshotSchema,
   TrainingJobSchema,
   TrainingJobEventSchema,
   SftStepMetricSchema,

package/dist/chunks/{chunk-HFQHD35D.js → chunk-NPNIL6SQ.js}

@@ -3,7 +3,7 @@ import { createRequire as __openpondCreateRequire } from "node:module"; var requ
 // ../server/src/constants.ts
 var DEFAULT_HOST = "127.0.0.1";
 var DEFAULT_PORT = 17874;
-var VERSION = "0.0.68";
+var VERSION = "0.0.69";
 var HOSTED_CHAT_SYSTEM_PROMPT = "You are OpenPond Chat. Respond in the user's language. If the user's latest message is language-neutral, ambiguous, or only a short test, respond in English. Be concise and directly answer the latest request. Do not use emojis. Use Markdown when it improves scanability. If you emit reasoning or thinking content, keep it sparse and user-readable: at most one short sentence for major progress, decisions, or blockers. Omit reasoning for routine searches, reads, tool calls, and obvious next steps. Do not restate the user request, narrate every action, or include code blocks, code excerpts, diffs, raw tool payloads, or markdown examples in reasoning. Put necessary code or exact snippets only in the final assistant answer. When the user asks to show or preview an image that is available as a workspace path or signed image URL, use Markdown image syntax like ![description](path-or-url) instead of a bare path or raw HTML. For workspace-backed answers, use a Codex-style shape: brief outcome first, then Changed Files if files changed, then Verification if checks ran. End with a concise final answer that summarizes the result and verification when relevant. Do not mention raw tool JSON, internal repo paths, or origin/remote URLs unless the user explicitly asks for them or they are necessary to explain a git/deploy failure.";
 var APP_PREFERENCES_CACHE_TYPE = "app_preferences";
 var APP_PREFERENCES_CACHE_KEY = "global";