openpond 0.0.68 → 0.1.0

package/dist/chunks/{chunk-HFQHD35D.js → chunk-AN2EYCN3.js}

@@ -3,7 +3,7 @@ import { createRequire as __openpondCreateRequire } from "node:module"; var requ
 // ../server/src/constants.ts
 var DEFAULT_HOST = "127.0.0.1";
 var DEFAULT_PORT = 17874;
-var VERSION = "0.0.68";
+var VERSION = "0.1.0";
 var HOSTED_CHAT_SYSTEM_PROMPT = "You are OpenPond Chat. Respond in the user's language. If the user's latest message is language-neutral, ambiguous, or only a short test, respond in English. Be concise and directly answer the latest request. Do not use emojis. Use Markdown when it improves scanability. If you emit reasoning or thinking content, keep it sparse and user-readable: at most one short sentence for major progress, decisions, or blockers. Omit reasoning for routine searches, reads, tool calls, and obvious next steps. Do not restate the user request, narrate every action, or include code blocks, code excerpts, diffs, raw tool payloads, or markdown examples in reasoning. Put necessary code or exact snippets only in the final assistant answer. When the user asks to show or preview an image that is available as a workspace path or signed image URL, use Markdown image syntax like ![description](path-or-url) instead of a bare path or raw HTML. For workspace-backed answers, use a Codex-style shape: brief outcome first, then Changed Files if files changed, then Verification if checks ran. End with a concise final answer that summarizes the result and verification when relevant. Do not mention raw tool JSON, internal repo paths, or origin/remote URLs unless the user explicitly asks for them or they are necessary to explain a git/deploy failure.";
 var APP_PREFERENCES_CACHE_TYPE = "app_preferences";
 var APP_PREFERENCES_CACHE_KEY = "global";

package/dist/chunks/{chunk-3KLQ52B2.js → chunk-BVY5JYM6.js}

@@ -1,7 +1,4 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
-import {
-  withVercelProtectionBypass
-} from "./chunk-DBHSOTYZ.js";
 import {
   DEFAULT_OPENPOND_OPCHAT_API_BASE_URL
 } from "./chunk-KSRWKXRB.js";
@@ -41,14 +38,14 @@ function requireToken(value) {
   if (!trimmed) throw new Error("OpenPond API key is required");
   return trimmed;
 }
-function hostedHeaders(requestUrl, token, accept, requestId) {
+function hostedHeaders(token, accept, requestId) {
   const headers = new Headers();
   headers.set("Authorization", `Bearer ${requireToken(token)}`);
   headers.set("Content-Type", "application/json");
   headers.set("Accept", accept);
   headers.set("x-openpond-client", "openpond-code");
   headers.set("x-openpond-request-id", requestId || randomUUID());
-  return withVercelProtectionBypass(requestUrl, headers);
+  return headers;
 }
 async function readError(response) {
   const text = await response.text().catch(() => "");
@@ -93,7 +90,7 @@ async function listOpChatModels(options) {
   const requestUrl = `${apiBaseUrl}/models`;
   const response = await fetch(requestUrl, {
     method: "GET",
-    headers: hostedHeaders(requestUrl, options.token, "application/json"),
+    headers: hostedHeaders(options.token, "application/json"),
     signal: options.signal
   });
   if (!response.ok) {
@@ -112,7 +109,7 @@ async function getOpChatModel(options) {
     requestUrl,
     {
       method: "GET",
-      headers: hostedHeaders(requestUrl, options.token, "application/json"),
+      headers: hostedHeaders(options.token, "application/json"),
       signal: options.signal
     }
   );
@@ -131,7 +128,6 @@ async function sendHostedChatTurn(options) {
   const response = await fetch(requestUrl, {
     method: "POST",
     headers: hostedHeaders(
-      requestUrl,
       options.token,
       "application/json",
       options.requestId
@@ -181,7 +177,6 @@ async function* streamHostedChatTurn(options) {
   const response = await fetch(requestUrl, {
     method: "POST",
     headers: hostedHeaders(
-      requestUrl,
       options.token,
       "text/event-stream",
       options.requestId

package/dist/chunks/{chunk-KLD7NT5J.js → chunk-CNTM26OW.js}

@@ -15,7 +15,7 @@ import {
   resolveRepoUrl,
   runCommand,
   warnOnRepoHostMismatch
-} from "./chunk-J2REM7LE.js";
+} from "./chunk-HFPUR4CQ.js";
 import {
   normalizeTemplateRepoUrl,
   resolveApiBaseUrlOption,
@@ -28,7 +28,7 @@ import {
   compareSemver,
   fetchLatestNpmVersion,
   getInstalledCliVersion
-} from "./chunk-NA4L2HQM.js";
+} from "./chunk-N3TGCM7J.js";
 import {
   checkOpenPondApiHealth,
   createHeadlessApps,
@@ -45,7 +45,7 @@ import {
   saveProfileApiKey,
   setActiveProfile,
   submitBacktestRun
-} from "./chunk-DBHSOTYZ.js";
+} from "./chunk-D7BO5Y5J.js";
 import {
   parseBooleanOption,
   parseJsonOption,

package/dist/chunks/{chunk-DBHSOTYZ.js → chunk-D7BO5Y5J.js}

@@ -4,24 +4,6 @@ import {
   DEFAULT_OPENPOND_WEB_BASE_URL
 } from "./chunk-KSRWKXRB.js";
 
-// ../../packages/cloud/src/api/vercel-protection.ts
-var VERCEL_PROTECTION_BYPASS_HEADER = "x-vercel-protection-bypass";
-function withVercelProtectionBypass(requestUrl, inputHeaders, env = typeof process === "undefined" ? {} : process.env) {
-  const headers = new Headers(inputHeaders);
-  const secret = env.VERCEL_AUTOMATION_BYPASS_SECRET?.trim();
-  if (!secret || !isOpenPondStagingUrl(requestUrl)) return headers;
-  headers.set(VERCEL_PROTECTION_BYPASS_HEADER, secret);
-  return headers;
-}
-function isOpenPondStagingUrl(requestUrl) {
-  try {
-    const hostname = new URL(requestUrl).hostname.toLowerCase();
-    return hostname === "staging.openpond.ai" || hostname === "staging-api.openpond.ai" || hostname.endsWith(".staging-api.openpond.ai");
-  } catch {
-    return false;
-  }
-}
-
 // ../../packages/cloud/src/api/core.ts
 var DEFAULT_API_TIMEOUT_MS = 3e4;
 var DEFAULT_API_RESPONSE_BYTES = 8 * 1024 * 1024;
@@ -51,7 +33,7 @@ var ApiResponseTooLargeError = class extends Error {
 async function apiFetch(baseUrl, token, requestPath, options = {}) {
   const { timeoutMs = DEFAULT_API_TIMEOUT_MS, maxResponseBytes = DEFAULT_API_RESPONSE_BYTES, ...init } = options;
   const requestUrl = `${baseUrl}${requestPath}`;
-  const headers = withVercelProtectionBypass(requestUrl, init.headers);
+  const headers = new Headers(init.headers);
   headers.set("Content-Type", "application/json");
   const apiKey = process.env.OPENPOND_API_KEY;
   const trimmedToken = token?.trim() || "";
@@ -1048,8 +1030,7 @@ function sanitizeAccount(value) {
   if (typeof input.apiKey === "string") out.apiKey = input.apiKey;
   if (typeof input.baseUrl === "string") out.baseUrl = input.baseUrl;
   if (typeof input.apiBaseUrl === "string") out.apiBaseUrl = input.apiBaseUrl;
-  if (typeof input.chatApiBaseUrl === "string")
-    out.chatApiBaseUrl = input.chatApiBaseUrl;
+  if (typeof input.chatApiBaseUrl === "string") out.chatApiBaseUrl = input.chatApiBaseUrl;
   if (typeof input.environment === "string")
     out.environment = input.environment;
   const session = sanitizeSession(input.session);
@@ -1072,8 +1053,7 @@ function extractLegacyAccount(raw, handle) {
   if (typeof raw.apiKey === "string") out.apiKey = raw.apiKey;
   if (typeof raw.baseUrl === "string") out.baseUrl = raw.baseUrl;
   if (typeof raw.apiBaseUrl === "string") out.apiBaseUrl = raw.apiBaseUrl;
-  if (typeof raw.chatApiBaseUrl === "string")
-    out.chatApiBaseUrl = raw.chatApiBaseUrl;
+  if (typeof raw.chatApiBaseUrl === "string") out.chatApiBaseUrl = raw.chatApiBaseUrl;
   const session = extractLegacySession(raw);
   if (session) out.session = session;
   return out;
@@ -1507,7 +1487,6 @@ var SANDBOX_RUNTIME_PROFILE_IDS = [
 ];
 
 export {
-  withVercelProtectionBypass,
   deployApp,
   getDeploymentLogs,
   getDeploymentStatus,