openpond 0.2.42 → 0.2.44

package/dist/chunks/datasets-42AZHVSV.js

@@ -0,0 +1,13 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import"./chunk-B3O2GAQH.js";import{c as Pa}from"./chunk-65BW2QXY.js";import{c as Ea,f as Aa}from"./chunk-BSHAIAXY.js";import"./chunk-OI2N2636.js";import"./chunk-4S4WH65X.js";import"./chunk-XWPC3AN4.js";import{c as G,f as oa}from"./chunk-3M53YXEI.js";import{d as xa}from"./chunk-DZVVGU6K.js";import"./chunk-4TMC5F2P.js";import"./chunk-NM2GYDPA.js";import"./chunk-6MI4KKWF.js";import{$ as ge,N as ne,Q as se,T as xe,V as Re,W as wa,Z as he,c as ya,ta as pt,wa as Ta}from"./chunk-OMM4ZO7E.js";import"./chunk-OGPHXXCD.js";import"./chunk-Z2BYC6TP.js";import{a as _e,b as x,c as M,d as Vt,e as Ra,f as _a}from"./chunk-ARJUNUH6.js";import{d as Ia}from"./chunk-DXAZUJPA.js";import"./chunk-GLUWATL5.js";import"./chunk-3QC2DDQ5.js";import"./chunk-Z3D4C7BG.js";import{$ as ba,B as ue,H as fe,P as Oe,R as Fe,T as ha,W as ga,_ as ka,b as pe,d as zt,f as pa,fa as I,ga as D,ha as E,ia as mt,j as ct,ka as re,la as va,m as la,ma as Q,o as ua,p as qt,q as Ve,r as fa,s as O,t as dt,va as Bt,wa as Sa,xa as Ue,y as le}from"./chunk-LNEOLOK2.js";import{g as da,h as ma}from"./chunk-Z6ZR5O3J.js";import"./chunk-6FA3GG5B.js";import"./chunk-SDO4FC4Q.js";import"./chunk-IR3YJWPW.js";import"./chunk-ALZRXBEC.js";import"./chunk-MTJNKRXL.js";import{a as nt,b as st,e as it,f as ca,g as K,j as ae,k as z,l as g,q as ot}from"./chunk-HZP5U2AA.js";import{b as e}from"./chunk-ES2ISFJC.js";import"./chunk-H7IWJN7L.js";import{a as c}from"./chunk-FTQLQJQV.js";var ke=Oe.shape.id,Ge=e.string().regex(/^[a-f0-9]{64}$/),ja=e.object({scopeId:ke,modelId:ke}).strict(),Ot=e.object({schemaVersion:e.literal("openpond.modelTasksetAuthoring.v1"),owner:ja,root:Oe,parent:Oe}).strict(),Or=e.object({schemaVersion:e.literal("openpond.modelTasksetDraftRequest.v1"),operationId:ke,modelId:ke,expectedModelRevision:e.number().int().positive(),sourcePackageHash:Ge}).strict(),Ie=e.object({schemaVersion:e.literal("openpond.modelTasksetDraftPreparation.v1"),draftId:ke,requestHash:Ge,sourcePackageHash:Ge,sourceTasksetRef:Oe,tasksetId:ke,tasksetRevision:e.number().int().positive(),lineage:Ot,authoringGraph:e.literal("bound").optional()}).strict(),X=e.string().min(1).max(1024).refine(t=>!t.includes("\\")&&!t.includes(":")&&!t.includes("\0")&&!t.startsWith("/")&&!t.split("/").some(a=>!a||a==="."||a===".."||a.startsWith(".env")),"Use a relative Taskset file path without environment files."),Fr=e.object({path:X,sizeBytes:e.number().int().nonnegative(),writable:e.boolean()}).strict(),Ft=e.object({encoding:e.enum(["utf8","base64"]),data:e.string().max(8e6)}).strict(),zs=Fr.extend({contentHash:Ge,content:Ft}).strict(),Ur=e.object({draftId:ke,expectedDraftRevision:e.number().int().positive(),path:X,expectedFileHash:Ge.nullable(),content:Ft.nullable()}).strict();var F=e.string().trim().min(1).max(240),Y=e.string().trim().min(1),ie=e.string().trim().min(8).max(256),Da=e.string().trim().min(1).max(1e3).refine(t=>!t.startsWith("/")&&!t.startsWith("\\")&&!t.split(/[\\/]/).includes(".."),"Artifact paths must be relative and stay inside the Dataset."),oe=e.enum(["train","validation","test","frozen_eval"]),Gr=e.object({name:e.string().trim().min(1).max(500),semanticRole:e.enum(["row_id","cluster_id","prompt","messages","demonstration","chosen","rejected","expected_output","privileged_context","reward","feedback","tag","metadata"]),logicalType:e.enum(["string","integer","float","boolean","json","messages"]),nullable:e.boolean(),policy:e.enum(["visible","privileged","metadata"])}),Nr=e.object({schemaVersion:e.literal("openpond.datasetSemanticSchema.v1"),fields:e.array(Gr).min(1).max(1e4),schemaHash:ie}),Lr=e.object({id:F,split:oe,path:Da,contentHash:ie,schemaHash:ie,sizeBytes:e.number().int().nonnegative(),rowCount:e.number().int().positive(),rowGroupCount:e.number().int().positive()}),Ne=e.object({schemaVersion:e.literal("openpond.datasetArtifact.v1"),id:F,tasksetId:F,tasksetRevision:e.number().int().positive(),contentHash:ie,format:e.literal("parquet"),schema:Nr,shards:e.array(Lr).min(1).max(1e5),rowCount:e.number().int().positive(),splitCounts:e.record(oe,e.number().int().nonnegative()),sourceReceiptRefs:e.array(F).min(1).max(1e5),mappingHash:ie,qualityReportHash:ie,createdAt:Y}),Vs=e.object({schemaVersion:e.literal("openpond.datasetArtifactSummary.v1"),artifactId:F,tasksetId:F,tasksetRevision:e.number().int().positive(),format:e.literal("parquet"),rowCount:e.number().int().positive(),splitCounts:e.record(oe,e.number().int().nonnegative()),sizeBytes:e.number().int().nonnegative(),contentHash:ie,available:e.boolean(),unavailableReason:e.string().trim().min(1).max(2e3).nullable(),createdAt:Y}),Jr=e.object({schemaVersion:e.literal("openpond.datasetCatalogItem.v1"),tasksetId:F,tasksetRevision:e.number().int().positive(),artifactId:F.nullable(),name:e.string().trim().min(1).max(500),status:e.enum(["draft","awaiting_disclosure_approval","awaiting_materialization_approval","materializing","validating","needs_review","baselining","ready","blocked","failed","archived"]),storageKind:e.enum(["inline","parquet"]),rowCount:e.number().int().nonnegative(),splitCounts:e.record(oe,e.number().int().nonnegative()),sizeBytes:e.number().int().nonnegative().nullable(),available:e.boolean(),unavailableReason:e.string().trim().min(1).max(2e3).nullable(),createdAt:Y,updatedAt:Y}),Os=e.object({schemaVersion:e.literal("openpond.datasetCatalog.v1"),profileId:F,datasets:e.array(Jr),generatedAt:Y}),Fs=e.object({schemaVersion:e.literal("openpond.datasetArtifactRegistry.v1"),manifest:Ne,profileId:F,storageRoot:e.string().trim().min(1).max(4e3),relativeManifestPath:Da,available:e.boolean(),unavailableReason:e.string().trim().min(1).max(2e3).nullable(),verifiedAt:Y.nullable(),createdAt:Y,updatedAt:Y}),Us=e.object({split:oe.nullable().default(null),cursor:e.string().trim().min(1).max(2e3).nullable().default(null),limit:e.number().int().min(1).max(100).default(25),columns:e.array(e.string().trim().min(1).max(500)).max(100).default([])}),Gs=e.object({schemaVersion:e.literal("openpond.datasetRowPage.v1"),tasksetId:F,tasksetRevision:e.number().int().positive(),artifactHash:ie,split:oe.nullable(),rows:e.array(e.record(e.string(),e.unknown())).max(100),nextCursor:e.string().max(2e3).nullable(),totalRows:e.number().int().nonnegative(),returnedRows:e.number().int().nonnegative()}),Wr=e.object({schemaVersion:e.literal("openpond.datasetStorageSettings.v1"),datasetStorePath:e.string().trim().min(1).max(4e3),updatedAt:Y}),Kr=e.object({id:F,label:e.string().trim().min(1).max(500),path:e.string().trim().min(1).max(4e3),datasetStorePath:e.string().trim().min(1).max(4e3),kind:e.enum(["local","network","removable","cache"]),configured:e.boolean(),mounted:e.boolean(),writable:e.boolean(),totalBytes:e.number().int().nonnegative().nullable(),freeBytes:e.number().int().nonnegative().nullable()}),Ns=e.object({schemaVersion:e.literal("openpond.datasetStorageState.v1"),settings:Wr,storageRoots:e.array(Kr)}),Ls=e.object({datasetStorePath:e.string().trim().min(1).max(4e3)});var Pe=e.string().trim().min(1).max(240),Qr=e.string().trim().min(1),Ee=e.string().trim().min(8).max(256),Xr=e.record(e.string(),e.unknown()).default({}),Yr=e.string().trim().min(7).max(256),Zr=e.enum(["pending","approved","review","blocked"]),lt=e.object({id:Pe,profileId:Pe,title:e.string().trim().min(1).max(500),sourceHash:Ee,occurredAt:Qr,licensingStatus:Zr,secretScanStatus:e.enum(["pending","passed","blocked"]),piiScanStatus:e.enum(["pending","passed","review","blocked"]),metadata:Xr}),en=lt.extend({schemaVersion:e.literal("openpond.huggingFaceDatasetSource.v1"),kind:e.literal("huggingface"),repositoryId:e.string().trim().regex(/^[^/\s]+\/[^/\s]+$/).max(500),repositoryUrl:e.string().url().max(2e3),revision:Yr,configuration:e.string().trim().min(1).max(500),upstreamSplits:e.array(e.string().trim().min(1).max(500)).min(1).max(1e3),gated:e.boolean(),private:e.boolean(),declaredLicense:e.string().trim().min(1).max(500).nullable(),sourceFileHashes:e.array(Ee).min(1).max(1e5)}),tn=lt.extend({schemaVersion:e.literal("openpond.uploadedFileDatasetSource.v1"),kind:e.literal("uploaded_file"),originalFileNames:e.array(e.string().trim().min(1).max(500)).min(1).max(1e3),mediaTypes:e.array(e.string().trim().min(1).max(200)).min(1).max(1e3),sourceFileHashes:e.array(Ee).min(1).max(1e3),totalBytes:e.number().int().nonnegative(),parserVersion:e.string().trim().min(1).max(200)}),an=lt.extend({schemaVersion:e.literal("openpond.generatedDatasetSource.v1"),kind:e.literal("generated"),generatorId:Pe,generatorVersion:e.string().trim().min(1).max(200),seed:e.number().int(),generatorHash:Ee}),rn=lt.extend({schemaVersion:e.literal("openpond.learningBatchDatasetSource.v1"),kind:e.literal("learning_batch"),batch:e.object({id:Pe,revision:e.number().int().positive(),contentHash:Ee}).strict(),taskDefinition:e.object({id:Pe,revision:e.number().int().positive(),contentHash:Ee}).strict(),admittedBy:Pe}),Ha=e.discriminatedUnion("kind",[en,tn,an,rn]);var Ca=e.object({schemaVersion:e.literal("openpond.harnessActionBinding.v1"),actionId:nt,modelToolName:e.string().trim().min(1).max(64).regex(/^[a-zA-Z][a-zA-Z0-9_-]*$/),description:e.string().trim().min(1).max(1e3),inputSchema:e.record(e.string(),e.unknown()),actionSchemaHash:st,agentRelease:it,implementationHash:st,runtimeBindingId:nt,capabilityReceiptHash:st,sideEffect:e.enum(["read","write"]),studentVisible:e.boolean(),timeoutMs:e.number().int().positive().max(36e5),episodeArgumentBindings:e.array(e.object({argument:nt,source:e.literal("case_id")}).strict()).max(20).default([])}).strict();var w=e.string().trim().min(1).max(240),Ut=e.string().trim().min(1),nn=e.string().trim().min(8).max(256),Gt=e.string().trim().regex(/^[a-f0-9]{64}$/),sn=e.string().trim().regex(/^[A-Za-z_$][A-Za-z0-9_$]*$/),N=e.record(e.string(),e.unknown()).default({}),ft=w.nullable();function Le(t){let a=t.trim().replaceAll("\\","/");return!a||a.startsWith("/")||a==="."||a===".."?!1:!a.split("/").some(r=>!r||r==="."||r==="..")}c(Le,"safeRelativeFilePath");function on(t){let a=t.trim();return a.length>0&&a!=="."&&a!==".."&&!a.includes("/")&&!a.includes("\\")&&!a.includes("\0")}c(on,"safeFileName");var ut=oe,ht=e.enum(["general","benchmark"]),gt=e.object({schemaVersion:e.literal("openpond.tasksetBenchmark.v1"),definitionId:w,releaseId:w,releaseHash:Gt,managedReleasePath:e.string().trim().min(1).max(1e3).refine(Le,"Benchmark release paths must remain relative."),adaptationSplit:ut,evaluationSplit:ut,primaryMetric:e.enum(["foreground_tokens","success_rate","latency_ms","cost_usd"]),qualityGate:e.enum(["none","non_regression","all_pass"]),source:e.enum(["builtin","imported"]),metadata:N}),kt=e.object({schemaVersion:e.literal("openpond.tasksetPreferenceComparisonBinding.v1"),releaseId:w,releaseHash:Gt,publishedAt:Ut,metadata:N}),cn=e.object({status:e.enum(["pending","granted","denied","revoked"]),scope:e.enum(["metadata_only","selected_turns","full_session"]),grantedBy:ft,grantedAt:Ut.nullable(),purpose:e.literal("task_authoring_and_evaluation")}),dn=e.object({schemaVersion:e.literal("openpond.trainingSource.v1"),id:w,profileId:w,sessionId:w,turnIds:e.array(w).max(1e3).default([]),workspaceId:ft,sourceHash:nn,clusterKey:w,title:e.string().trim().min(1).max(500),occurredAt:Ut,consent:cn,connectedAppIds:e.array(w).max(100).default([]),secretScanStatus:e.enum(["pending","passed","blocked"]),piiScanStatus:e.enum(["pending","passed","review","blocked"]),licensingStatus:e.enum(["pending","approved","review","blocked"]),metadata:N}),bt=e.union([dn,Ha]),vt=e.object({policyVisibleFields:e.array(w).max(1e3).default([]),privilegedFields:e.array(w).max(1e3).default([]),hiddenGraderRefs:e.array(w).max(100).default([]),connectedAppScopes:e.array(w).max(100).default([])}),mn=e.object({id:w,sourceRefId:w,artifactRef:e.string().trim().min(1).max(4e3).refine(Le,"Task asset references must be safe relative paths."),fileName:e.string().trim().min(1).max(500).refine(on,"Task asset file names must not contain path separators."),mediaType:e.string().trim().min(1).max(200),sha256:Gt,sizeBytes:e.number().int().nonnegative().max(25e7),split:ut,metadata:N}),pn=e.object({path:e.string().trim().min(1).max(1e3).refine(Le,"Required output paths must stay inside the Work output directory."),mediaType:e.string().trim().min(1).max(200),schemaRef:w.nullable().optional(),maxBytes:e.number().int().positive().max(1e7).optional(),metadata:N}),Ae=e.object({schemaVersion:e.literal("openpond.taskData.v1"),id:w,clusterKey:w,split:ut,input:e.record(e.string(),e.unknown()),expectedOutput:e.record(e.string(),e.unknown()).nullable(),policyVisibleContext:e.record(e.string(),e.unknown()).default({}),privilegedContextRef:ft,sourceRefs:e.array(w).min(1).max(100),assets:e.array(mn).max(1e3).optional(),resourceRefs:e.array(w).max(1e3).optional(),requiredOutputs:e.array(pn).max(100).optional(),tags:e.array(w).max(100).default([]),metadata:N}),ln=e.object({id:w,kind:e.enum(["file","catalog","configuration","code_module"]),path:e.string().trim().min(1).max(1e3).refine(Le,"Environment resource paths must remain relative."),mediaType:e.string().trim().min(1).max(200).nullable().optional(),visibility:e.enum(["policy_visible","policy_hidden","privileged"]),required:e.boolean(),metadata:N}),je=e.object({id:w,taskId:ft,sourceRefs:e.array(w).min(1).max(100),artifactRef:w,approved:e.boolean(),confidence:e.number().min(0).max(1),metadata:N}),Ma=je.extend({kind:e.literal("demonstration"),prompt:e.string().max(1e5).nullable().default(null),response:e.string().max(2e5).nullable().default(null)}),$a=je.extend({kind:e.literal("preference"),prompt:e.string().max(1e5),chosen:e.string().max(2e5),rejected:e.string().max(2e5),rationale:e.string().max(1e5).nullable().default(null)}),za=je.extend({kind:e.literal("correction"),original:e.string().max(2e5),corrected:e.string().max(2e5),rationale:e.string().max(1e5).nullable().default(null)}),qa=je.extend({kind:e.literal("feedback"),feedback:e.string().max(1e5),polarity:e.enum(["positive","negative","mixed","neutral"])}),Ba=je.extend({kind:e.literal("reward"),task:e.string().max(1e5),rules:e.array(e.object({id:w,points:e.number().finite(),condition:e.string().trim().min(1).max(1e5)})).min(1).max(1e3),otherwisePoints:e.number().finite(),executable:e.boolean()}),Va=je.extend({kind:e.literal("label"),labelKind:e.literal("rubric"),task:e.string().max(1e5),criteria:e.array(e.object({id:w,label:e.string().trim().min(1).max(500),description:e.string().trim().min(1).max(1e5)})).min(1).max(1e3),calibrationExamples:e.object({positive:e.string().trim().min(1).max(2e5),negative:e.string().trim().min(1).max(2e5),boundary:e.string().trim().min(1).max(2e5)})}),si=e.discriminatedUnion("kind",[Ma,$a,za,qa,Ba,Va]),St=e.object({demonstrations:e.array(Ma).max(1e5).default([]),preferences:e.array($a).max(1e5).default([]),corrections:e.array(za).max(1e5).default([]),feedback:e.array(qa).max(1e5).default([]),rewards:e.array(Ba).max(1e5).default([]),labels:e.array(Va).max(1e5).default([])}),yt=e.object({protocolVersion:e.literal("openpond.taskEnvironment.v1"),kind:e.enum(["chat","agent","program","stateful_harness","work"]),entrypoint:e.string().trim().min(1).max(1e3),stateful:e.boolean(),deterministicSeeds:e.boolean(),toolNames:e.array(w).max(200).default([]),actionBindings:e.array(Ca).max(200).optional(),lifecycle:e.array(e.enum(["create","reset","step","grade","cleanup"])).min(1),defaultTimeoutMs:e.number().int().positive().max(36e5),networkPolicy:e.enum(["none","declared_read_only","declared_scoped"]),resources:e.array(ln).max(1e4).optional(),metadata:N}),wt=e.object({schemaVersion:e.literal("openpond.tasksetCapabilities.v1"),taskKind:e.enum(["chat","single_agent","multi_agent","custom_program"]),supportedSignals:e.array(e.enum(["demonstration","preference","correction","feedback","reward","label"])),compatibleMethods:e.array(e.enum(["none","retrieval","sft","dpo","grpo","ppo","sdft","opd","opsd","sdpo"])),rewardKinds:e.array(e.enum(["none","exact","deterministic","model_judge","human"])),requiresTools:e.boolean(),requiresState:e.boolean(),requiresPrivilegedGrading:e.boolean(),environmentPlacements:e.array(e.enum(["local","remote","colocated","provider_native"])),exportable:e.boolean(),portabilityBlockers:e.array(e.string().trim().min(1).max(2e3)).default([])}),Tt=e.object({id:w,version:e.string().trim().min(1).max(100),label:e.string().trim().min(1).max(500),weight:e.number().min(0).max(1e3).default(1),hardGate:e.boolean().default(!1),rewardEligible:e.boolean().default(!1),privileged:e.boolean().default(!1),metadata:N}),un=Tt.extend({kind:e.enum(["content","schema","file","diff","test","runtime_event","state"]),config:e.record(e.string(),e.unknown())}),fn=Tt.extend({kind:e.literal("model_judge"),rubric:e.string().trim().min(1).max(5e4),judge:ot,calibrationFixtureRefs:e.array(w).min(1).max(500),calibrationStatus:e.enum(["pending","passed","failed"]),temperature:e.number().min(0).max(2).default(0)}),hn=Tt.extend({kind:e.literal("human"),rubric:e.string().trim().min(1).max(5e4),reviewerRole:e.string().trim().min(1).max(500)}),gn=Tt.extend({kind:e.literal("custom_verifier"),runtime:ua.optional(),module:e.string().trim().min(1).max(1e3).refine(Le,"Custom verifier modules must use a safe relative path."),exportName:sn,timeoutMs:e.number().int().positive().max(3e5),networkPolicy:e.literal("none")}),xt=e.union([un,fn,hn,gn]),kn=e.enum(["positive","negative","boundary","adversarial","prompt_injection","infrastructure_failure"]),Rt=e.object({id:w,taskId:w,label:kn,output:e.record(e.string(),e.unknown()),infrastructureError:e.string().trim().min(1).max(1e4).nullable(),expectedPassed:e.boolean(),expectedRewardEligible:e.boolean(),metadata:N});var De=e.string().trim().min(1).max(240),Oa=e.string().trim().min(1),bn=e.string().trim().min(8).max(256),vn=e.string().trim().regex(/^[A-Za-z_$][A-Za-z0-9_$]*$/),Sn=e.record(e.string(),e.unknown()).default({});function Fa(t){let a=t.trim().replaceAll("\\","/");return!a||a.startsWith("/")||a==="."||a===".."?!1:!a.split("/").some(r=>!r||r==="."||r==="..")}c(Fa,"safeRelativeFilePath");var yn=Ae.extend({sourceRefs:e.array(De).max(100).default([])}),wn=e.enum(["draft","validating","needs_review","published"]),Tn=e.object({enabled:e.boolean(),candidateCount:e.number().int().min(2).max(4),minimumSamples:e.number().int().min(1).max(1e4).default(100),allowTies:e.boolean(),allowRejectAll:e.boolean(),rubric:e.string().trim().max(5e4),criteria:e.array(e.object({id:De,label:e.string().trim().min(1).max(500),description:e.string().trim().max(1e4),weight:e.number().nonnegative().max(1e3)})).max(100)}),xn=e.object({mode:e.enum(["text","structured_json","artifacts"]),jsonSchema:e.record(e.string(),e.unknown()).nullable(),renderer:e.object({module:e.string().trim().min(1).max(1e3).refine(Fa,"Renderer modules must use a safe relative path."),exportName:vn,configRef:e.string().trim().min(1).max(1e3).refine(Fa,"Renderer configuration must use a safe relative path.").nullable().default(null)}).nullable()}).superRefine((t,a)=>{t.mode==="structured_json"&&!t.jsonSchema&&a.addIssue({code:"custom",message:"Structured JSON output requires a JSON Schema.",path:["jsonSchema"]}),t.mode==="text"&&t.renderer&&a.addIssue({code:"custom",message:"Text output cannot configure an artifact renderer.",path:["renderer"]})}),be=e.object({schemaVersion:e.literal("openpond.tasksetDraft.v1"),id:De,revision:e.number().int().positive(),profileId:De,modelScope:e.object({modelId:De,expectedModelRevision:e.number().int().positive(),source:Ie.optional()}).strict().nullable().default(null),name:e.string().trim().max(500),objective:e.string().trim().max(2e4),purpose:ht.default("general"),benchmark:gt.nullable().default(null),preferenceComparison:kt.nullable().default(null),status:wn,sourceRefs:e.array(bt).max(1e5).default([]),datasetArtifact:Ne.nullable().optional(),policy:vt,environment:yt,output:xn.default({mode:"text",jsonSchema:null,renderer:null}),capabilities:wt,metrics:ct,review:Tn,tasks:e.array(yn).max(1e6).default([]),graders:e.array(xt).max(1e3).default([]),graderFixtures:e.array(Rt).max(1e5).default([]),learningSignals:St,publishedTasksetRef:e.object({id:De,revision:e.number().int().positive(),contentHash:bn}).nullable(),createdAt:Oa,updatedAt:Oa,metadata:Sn}).superRefine((t,a)=>{t.purpose==="benchmark"&&!t.benchmark&&a.addIssue({code:"custom",message:"Benchmark drafts require an immutable benchmark binding.",path:["benchmark"]}),t.purpose!=="benchmark"&&t.benchmark&&a.addIssue({code:"custom",message:"Only benchmark drafts may carry a benchmark binding.",path:["benchmark"]}),t.datasetArtifact&&t.tasks.length>0&&a.addIssue({code:"custom",message:"Artifact-backed drafts may not duplicate canonical rows inline.",path:["tasks"]}),t.status==="published"&&!t.publishedTasksetRef&&a.addIssue({code:"custom",message:"Published drafts require an immutable Taskset reference.",path:["publishedTasksetRef"]})});var Rn=new Set(["taskset.json","capabilities.json","data/tasks.jsonl","tasks/tasks.jsonl","graders/graders.json","fixtures/grader-fixtures.json","metrics/policy.json","assets/manifest.json","environment/contract.json","environment/taskset.ts","rubrics/preference-review.md","comparisons/policy.json"]);function Ua(t){return Rn.has(X.parse(t))}c(Ua,"isManagedTasksetDraftFilePath");function Nt(t){let a=be.parse(t);return new Map([["taskset.json",ae(a)],["tasks/tasks.jsonl",In(a.tasks)],["graders/graders.json",ae(a.graders)],["fixtures/grader-fixtures.json",ae(a.graderFixtures)],["metrics/policy.json",ae(a.metrics)],["assets/manifest.json",ae(a.tasks.flatMap(r=>r.assets??[]))],["environment/contract.json",ae(a.environment)],["rubrics/preference-review.md",_n(a)],["comparisons/policy.json",ae(a.review)]])}c(Nt,"renderTasksetDraftManifests");function _n(t){let a=t.review.criteria.length?`
+
+## Criteria
+
+${t.review.criteria.map(r=>`- **${r.label}** (${r.weight}): ${r.description}`).join(`
+`)}`:"";return`# Preference review rubric
+
+${t.review.rubric}${a}
+`}c(_n,"rubricMarkdown");function In(t){return t.length?`${t.map(a=>JSON.stringify(a)).join(`
+`)}
+`:""}c(In,"jsonLines");var Lt=64*1024*1024,Ga=e.string().regex(/^[a-f0-9]{64}$/),Na=e.object({path:X,contentHash:Ga,sizeBytes:e.number().int().nonnegative().max(Lt),base64:e.string().max(Lt)}).strict(),Pn=e.object({schemaVersion:e.literal("openpond.tasksetDraftWorkspace.v1"),draft:be,files:e.array(Na).max(1e4)}).strict(),_t=Pn.extend({contentHash:Ga}).strict();function Je(t){pe(t,Lt);let a=_t.parse(t),{contentHash:r,...n}=a;if(g(n)!==r)throw new Error("Taskset draft workspace differs from its retained bytes.");let s=null,i=new Set;for(let o of a.files){if(Ua(o.path))throw new Error("Managed Taskset files are represented by the draft document.");if(s!==null&&s>=o.path)throw new Error("Taskset draft file paths must be unique and sorted.");let u=o.path.split("/");for(let l=1;l<u.length;l++)if(i.has(u.slice(0,l).join("/")))throw new Error("A Taskset draft file occupies another file's directory.");Jt(o),i.add(o.path),s=o.path}return a}c(Je,"validateTasksetDraftWorkspace");function Jt(t){let a=Na.parse(t),r;try{r=atob(a.base64)}catch{throw new Error("Taskset draft file contains invalid base64.")}if(btoa(r)!==a.base64)throw new Error("Taskset draft file contains noncanonical base64.");let n=Uint8Array.from(r,s=>s.charCodeAt(0));if(n.byteLength!==a.sizeBytes||z(n)!==a.contentHash)throw new Error("Taskset draft file differs from its retained bytes.");return n}c(Jt,"decodeTasksetDraftWorkspaceFile");var We=e.string().trim().min(1).max(500),En=e.string().regex(/^[a-f0-9]{64}$/),ve=e.object({id:We,revision:e.number().int().positive(),contentHash:En}).strict(),An=e.object({schemaVersion:e.literal("openpond.hostedTasksetSummary.v1"),id:We,teamId:We,release:ve,name:e.string().min(1).max(500),description:e.string().max(2e4),taskCount:e.number().int().nonnegative(),buildIntent:e.string().min(1).max(100),methodHint:e.string().min(1).max(100).nullable(),packageBytes:e.number().int().nonnegative().nullable(),storedBytes:e.number().int().nonnegative().nullable(),createdAt:e.string().datetime({offset:!0})}).strict(),qi=e.object({afterId:e.string().trim().min(1).max(2e3).optional(),limit:e.number().int().min(1).max(100).default(30),modelProjectId:We.optional(),projectId:We.optional(),search:e.string().trim().max(100).optional(),sort:e.enum(["id","name","updated"]).default("id")}).strict(),Bi=e.object({items:e.array(An).max(100),nextCursor:e.string().trim().min(1).max(2e3).nullable()}).strict(),Vi=e.object({code:e.string().min(1),message:e.string().min(1)}).strict();function La(t){return`model-authored-taskset-${g({owner:t.owner,root:t.root})}`}c(La,"modelAuthoredTasksetId");function Wt(t){if(t.metadata.modelTasksetAuthoring===void 0)return null;let a=Ot.parse(t.metadata.modelTasksetAuthoring);if(t.id!==La(a)||(t.revision===1?!D(a.parent,a.root):a.parent.id!==t.id||a.parent.revision!==t.revision-1))throw new Error("Authored Taskset revision differs from its ownership lineage.");return a}c(Wt,"assertModelTasksetAuthoring");var to=e.string().regex(/^[a-f0-9]{64}$/);var ce=e.object({environment:ne,verifierSet:se,javascript:pt}).strict(),ao=e.object({actions:e.array(e.object({name:e.string().min(1).max(64),arguments:e.record(e.string(),e.unknown())}).strict()).max(1e3)}).strict();function Ke(t){if(!t.environmentRelease||!t.verifierSetRelease)throw new Error("Starter execution release references are missing.");return`starter-execution-${E({environment:t.environmentRelease,verifiers:t.verifierSetRelease}).contentHash}`}c(Ke,"modelStarterExecutionAssetId");function Ja(t){let a=ce.parse(t);Wa(a);let r=Ke({environmentRelease:{id:a.environment.id,contentHash:a.environment.contentHash},verifierSetRelease:{id:a.verifierSet.id,contentHash:a.verifierSet.contentHash}}),n=va({text:_e(a),path:"environment/execution.json",mediaType:"application/json",visibility:"host_private"}),{contentHash:s,...i}=n;return E({...i,id:r,asset:{...i.asset,id:r}})}c(Ja,"createModelStarterExecutionAsset");function Se(t,a){return E({value:t}).contentHash===E({value:a}).contentHash}c(Se,"equal");function Wa(t){Ta(t.javascript);for(let a of[t.environment,t.verifierSet]){let{contentHash:r,...n}=a;if(E(n).contentHash!==r)throw new Error(`Starter execution resource integrity failed: ${a.id}.`)}if(!Se(t.environment.metadata.javascriptEnvironment,I(t.javascript)))throw new Error("Starter execution resources differ from its declared task context.")}c(Wa,"assertExecutionIntegrity");function It(t,a,r){if(!t){if(a.environment.entrypoint==="openpond.javascript-environment.v1")throw new Error("Starter JavaScript execution resources are missing.");return}let{environment:n,verifierSet:s,javascript:i}=t;if(Wa(t),!Se(a.environmentRelease,{id:n.id,contentHash:n.contentHash})||!Se(a.verifierSetRelease,{id:s.id,contentHash:s.contentHash})||!Se(n.contract,a.environment)||!Se(s.graders,a.graders)||!Se(a.tools,i.tools)||!Se(n.metadata.javascriptEnvironment,I(i)))throw new Error("Starter execution resources differ from its declared task context.");let o=n.contract;if(o.entrypoint!=="openpond.javascript-environment.v1"||o.kind!=="agent"||!o.stateful||!o.deterministicSeeds||o.networkPolicy!=="none"||new Set(o.lifecycle).size!==5||a.capabilities.length||a.policy.connectedAppScopes.length)throw new Error("Starter JavaScript environment declares unsupported host capabilities.");for(let u of[i.module,n.actionSchemaRef,n.observationSchemaRef,n.stateSchemaRef]){if(!u)continue;let l=r.find(d=>d.id===u.id);if(!l)throw new Error(`Starter environment asset is missing: ${u.id}.`);Q(l,u)}for(let u of a.tasks){let l=r.find(m=>m.id===u.privilegedContextRef);if(!l||l.asset.visibility!=="host_private"||l.asset.mediaType!=="application/json")throw new Error(`Starter private initial state is missing: ${u.id}.`);let d=JSON.parse(Q(l,l.asset));if(!d||typeof d!="object"||Array.isArray(d))throw new Error(`Starter initial state must be a JSON object: ${u.id}.`);pe(d,i.maxStateBytes)}}c(It,"validateModelStarterExecution");var Ka=e.object({environment:ne,verifierSet:se}).strict();var Xa=e.object({scopeId:e.string().trim().min(1).max(500),modelId:e.string().trim().min(1).max(500)}).strict(),Kt=e.object({schemaVersion:e.literal("openpond.modelTasksetDerivation.v1"),owner:Xa,root:M,parent:M}).strict(),Qt=e.object({taskset:O,taskDefinition:Fe,rewardBinding:ue,rewards:e.array(le).min(1).max(100),assets:e.array(re).max(1e3),executionResources:Ka.optional(),execution:ce.optional(),instructionMode:e.literal("per_task").optional()}).strict(),Z=c((t,a)=>E({value:t}).contentHash===E({value:a}).contentHash,"same"),Qa=c((t,a)=>`model-taskset-${E({owner:t,root:a}).contentHash}`,"identity");function Ya(t){let a=Xa.parse(t.owner),r=t.source,n=t.edits??r,s=r.taskset.metadata.modelTasksetDerivation===void 0?null:Kt.parse(r.taskset.metadata.modelTasksetDerivation);if(s&&r.taskset.id!==Qa(s.owner,s.root))throw new Error("Derived Taskset identity differs from its ownership lineage.");let i=s&&Z(s.owner,a),o=i?s.root:I(r.taskset),u=i?r.taskset.id:Qa(a,o),l=i?r.taskset.revision+1:1,d=ue.parse(t.rewardBinding),m=t.rewards.map(me=>le.parse(me)),p=fe(d,m);if(d.recipeRef)throw new Error("Resolve the Reward recipe into one standalone binding before deriving a Taskset.");let f={...n.taskset.policy,hiddenGraderRefs:p.filter(me=>me.privileged).map(me=>me.id)},v=n.executionResources??n.execution,k=v?.environment??xe({schemaVersion:"openpond.environmentRelease.v1",id:`${u}-environment`,revision:1,contract:n.taskset.environment,actionSchemaRef:null,observationSchemaRef:null,stateSchemaRef:null,artifactCollection:{maxArtifacts:1e5,maxTotalBytes:25e7},adapterConformanceHashes:{},metadata:{}}),b=Re({schemaVersion:"openpond.verifierSetRelease.v1",id:`${u}-verifiers`,revision:l,graders:p,isolation:v?.verifierSet.isolation??{processBoundary:"isolated_process",networkPolicy:"none",defaultTimeoutMs:Math.min(n.taskset.environment.defaultTimeoutMs,3e5)},calibrationReceiptRefs:[],metadata:v?{sourceVerifierSet:I(v.verifierSet)}:{}}),R={environment:k,verifierSet:b},P=n.execution?{...n.execution,verifierSet:b}:void 0,{contentHash:C,...S}=n.taskset,{contentHash:Te,...te}=n.taskDefinition,h={...te.execution,policy:f,environmentRelease:{id:k.id,contentHash:k.contentHash},verifierSetRelease:{id:b.id,contentHash:b.contentHash}},y=Fe.parse(E({...te,id:`${u}-definition`,revision:l,rewardBinding:I(d),execution:h})),T=r.taskset.metadata.starterAuthoring??r.taskset.metadata.ordinaryAuthoring,A=T&&typeof T=="object"&&!Array.isArray(T)&&"graderFixtures"in T?T.graderFixtures:void 0,q=O.parse(E({...S,...h,id:u,revision:l,graders:p,metadata:{starter:{taskDefinition:I(y),rewardBinding:I(d)},rewardExecution:{binding:d,rewards:m},...A===void 0?{}:{starterAuthoring:{graderFixtures:A}},...n.taskset.metadata.environmentResources===void 0?{}:{environmentResources:n.taskset.metadata.environmentResources},modelTasksetDerivation:{schemaVersion:"openpond.modelTasksetDerivation.v1",owner:a,root:o,parent:I(r.taskset)}}}));return Xt({taskset:q,taskDefinition:y,rewardBinding:d,rewards:m,assets:t.assets,executionResources:R,...P?{execution:P}:{},...r.instructionMode?{instructionMode:r.instructionMode}:{}})}c(Ya,"compileModelTasksetReward");function Xt(t){let a=Qt.parse(t),{taskset:r,taskDefinition:n,rewardBinding:s,rewards:i,assets:o,execution:u}=a;for(let b of[r,n,s,...i,...o])mt(b);if(dt(r),s.recipeRef)throw new Error("Resolve the Reward recipe into one standalone binding before deriving a Taskset.");if(!D(n.rewardBinding,I(s)))throw new Error("Taskset definition differs from its Reward binding.");let{policy:l,environment:d,environmentRelease:m,tools:p,capabilities:f,verifierSetRelease:v}=r;if(!Z(n.execution,{policy:l,environment:d,...m?{environmentRelease:m}:{},tools:p,capabilities:f,...v?{verifierSetRelease:v}:{}}))throw new Error("Taskset definition differs from its execution resources.");if(!Z(r.graders,fe(s,i)))throw new Error("Taskset graders differ from its Reward binding.");if(r.metadata.starter!==void 0){let b=e.object({taskDefinition:M,rewardBinding:M}).passthrough().parse(r.metadata.starter);if(!D(b.taskDefinition,I(n))||!D(b.rewardBinding,I(s)))throw new Error("Taskset metadata differs from its immutable grading resources.")}if(r.metadata.rewardExecution!==void 0&&!Z(r.metadata.rewardExecution,{binding:s,rewards:i}))throw new Error("Taskset embedded Rewards differ from its immutable grading resources.");if(r.metadata.rewardBinding!==void 0&&!D(M.parse(r.metadata.rewardBinding),I(s)))throw new Error("Taskset Reward reference differs from its immutable grading resources.");let k=a.executionResources??u;if(r.environmentRelease&&!k)throw new Error("Deriving a Taskset requires its pinned execution resources.");if(k&&(!he(k.environment)||!ge(k.verifierSet)||!Z(r.environmentRelease,{id:k.environment.id,contentHash:k.environment.contentHash})||!Z(r.verifierSetRelease,{id:k.verifierSet.id,contentHash:k.verifierSet.contentHash})||!Z(r.environment,k.environment.contract)||!Z(r.graders,k.verifierSet.graders)))throw new Error("Taskset differs from its pinned execution resources.");if(It(u,r,o),new Set(o.map(b=>b.id)).size!==o.length)throw new Error("Taskset asset identities must be unique.");for(let b of o)Q(b,b.asset);for(let b of k?[k.environment.actionSchemaRef,k.environment.observationSchemaRef,k.environment.stateSchemaRef]:[]){if(!b)continue;let R=o.find(P=>P.id===b.id);if(!R)throw new Error(`Taskset environment asset is missing: ${b.id}.`);Q(R,b)}for(let b of r.tasks){if(n.requiredOutputs&&!Z(b.requiredOutputs,n.requiredOutputs))throw new Error(`Taskset outputs differ from its reviewed definition: ${b.id}.`);if(a.instructionMode!=="per_task"&&b.policyVisibleContext.instructions!==n.instructions||!zt(n.inputSchema,b.input).valid||b.expectedOutput!==null&&!zt(n.outputSchema,b.expectedOutput).valid)throw new Error(`Taskset task differs from its declared format: ${b.id}.`);if(b.privilegedContextRef&&!o.some(R=>R.id===b.privilegedContextRef&&R.asset.visibility==="host_private"))throw new Error(`Taskset private context is missing: ${b.id}.`)}for(let b of i){let R=b.implementation,P=[...b.assets,..."verifierRef"in R?[R.verifierRef]:[],..."rubricRef"in R?[R.rubricRef]:[],..."inputContract"in R?[R.inputContract]:[]];for(let C of P){let S=o.find(Te=>Te.id===C.id);if(!S||C.visibility==="policy")throw new Error(`Taskset Reward requires its private asset: ${C.id}.`);Q(S,C)}}return a}c(Xt,"validateModelTasksetPackage");var He=e.string().trim().min(1).max(240),Za=x.extend({revision:e.number().int().positive()}).strict(),er=Za.extend({teamId:He,jobId:He,plan:x,baseline:x,candidate:x,state:ya.shape.state,updatedAt:e.string().datetime()}).strict(),jn=e.object({schemaVersion:e.literal("openpond.trainingAcceptanceGroupPage.v1"),teamId:He,jobId:He,groups:e.array(er).max(100),nextCursor:He.nullable()}).strict(),Dn=e.object({cursor:He.optional(),limit:e.number().int().min(1).max(100).default(25)}).strict();var U=e.string().trim().min(1).max(191),Xe=e.string().regex(/^[a-f0-9]{64}$/),tr=e.object({schemaVersion:e.literal("openpond.trainingPreparationRequest.v1"),teamId:U,operationId:U,projectId:U.nullable(),configuration:e.object({id:U,expectedRevision:e.number().int().positive(),expectedEtag:Xe}).strict(),batch:M,name:e.string().trim().min(1).max(191),maximumSpendUsd:e.number().finite().positive().max(1e6)}).strict(),ar=e.object({schemaVersion:e.literal("openpond.trainingPreparationPlan.v1"),id:U,creatorUserId:U,request:tr,requestHash:Xe,source:e.lazy(()=>Yt),submissionHash:Xe,createdAt:e.string().datetime({offset:!0})}).strict(),rr=ar.extend({contentHash:Xe}).strict(),nr=e.object({schemaVersion:e.literal("openpond.trainingPreparationReceipt.v1"),plan:rr,revision:e.number().int().positive(),state:e.enum(["prepared","submitted","cancelled"]),jobId:U.nullable()}).strict().superRefine((t,a)=>{t.state==="submitted"!=!!t.jobId&&a.addIssue({code:"custom",path:["jobId"],message:"Only submitted preparations identify a job."})}),Hn=e.object({teamId:U,planHash:Xe,expectedRevision:e.number().int().positive()}).strict(),Cn=e.object({projectId:U.optional(),state:e.enum(["prepared","submitted","cancelled"]).optional(),afterId:U.optional(),limit:e.number().int().min(1).max(100).default(25)}).strict(),Mn=e.object({schemaVersion:e.literal("openpond.trainingPreparationPage.v1"),teamId:U,items:e.array(nr).max(100),nextCursor:U.nullable()}).strict();var $n=e.object({schemaVersion:e.literal("openpond.trainingHarnessSourcePublication.v1"),harnessRelease:it,sourcePackageHash:e.string().regex(/^[a-f0-9]{64}$/),sizeBytes:e.number().int().positive().max(67108864)}).strict();var Yo=e.array(e.object({id:e.string().trim().min(1)}).catchall(e.unknown())).min(1).max(1e3),Zo=e.object({binding:ue,rewards:e.array(le).min(1).max(100)}).strict();var zn=e.object({id:e.string().trim().min(1),clusterKey:e.string().trim().min(1),split:e.enum(["train","validation","frozen_eval"])}).passthrough(),qn=e.object({schemaVersion:e.literal("openpond.trainingEvaluationSource.v1"),taskset:M,tasks:e.array(zn).min(1).max(1e4),assets:e.array(e.object({path:e.string().trim().min(1).max(2e3),sha256:e.string().regex(/^[a-f0-9]{64}$/),sizeBytes:e.number().int().nonnegative(),encoding:e.literal("base64"),content:e.string().max(32*1024*1024)}).strict()).max(1e4)}).strict().superRefine((t,a)=>{let r=new Set;t.tasks.forEach((n,s)=>{n.split==="train"&&a.addIssue({code:"custom",path:["tasks",s,"split"],message:"Evaluation sources require held-out tasks."}),r.has(n.id)&&a.addIssue({code:"custom",path:["tasks",s,"id"],message:"Evaluation task identities must be unique."}),r.add(n.id)})});var j=e.string().trim().min(1).max(500),B=e.string().regex(/^[a-f0-9]{64}$/),L=e.string().datetime({offset:!0}),Hc=e.object({schemaVersion:e.literal("openpond.trainingInputArtifactUpload.v2"),kind:e.enum(["portable_training_bundle","reward_model_dataset"]),idempotencyKey:e.string().trim().min(1).max(500),sourceManifest:x,payload:e.unknown(),contentHash:B}).strict(),Cc=e.object({schemaVersion:e.literal("openpond.trainingInputArtifact.v2"),kind:e.enum(["portable_training_bundle","reward_model_dataset"]),sourceManifest:x,artifactRef:e.string().trim().min(1).max(2e3),contentHash:B,sizeBytes:e.number().int().positive(),createdAt:L}).strict();var ir=e.enum(["reward_model_train","policy_optimize"]),Un=e.enum(["queued","admitting","provisioning","running","stopping","cancelling","succeeded","failed","cancelled"]),Gn=e.object({id:j,version:e.string().trim().min(1).max(200).nullable().default(null),required:e.boolean().default(!0)}).strict(),Yt=e.object({modelProject:e.object({id:j,portableProjectId:j,revision:e.number().int().positive(),contentHash:B}).strict(),harnessRunManifest:x,harnessRelease:x,taskset:M,tasksetRelease:x,evaluation:e.object({taskset:M,dataset:x}).strict().nullable().optional(),dataset:x,evidenceSets:e.array(x).max(1e4)}).strict(),Nn=e.object({kind:e.literal("reward_model_train"),baseModel:Vt,preferenceDatasetRelease:x,processorRelease:x,recipe:e.object({schemaVersion:e.literal("openpond.rewardModelRecipe.v1"),method:e.literal("reward_model"),parameterization:e.literal("lora_with_scalar_head")}).catchall(e.unknown())}).strict(),Ln=e.object({kind:e.literal("deterministic"),grader:x,composer:x.nullable().default(null)}).strict(),Jn=e.object({kind:e.literal("learned_reward"),rewardModelVersion:x,qualificationReport:x.nullable().default(null),evaluationReferences:e.array(x).max(1e3).default([]),scorerArtifact:e.object({artifactRef:e.string().trim().min(1).max(2e3),contentHash:B,executionReceipt:x}).strict(),processorRelease:x,rewardComposerRelease:x}).strict(),Wn=e.object({kind:e.literal("policy_optimize"),baseModel:Vt,recipe:Ra,rewardSource:e.discriminatedUnion("kind",[Ln,Jn]),resumeFrom:x.nullable().default(null)}).strict(),Kn=e.discriminatedUnion("kind",[Nn,Wn]),Qn=e.object({approvalHash:B,approvedAt:L,exportApproved:e.boolean(),maximumSpendUsd:e.number().nonnegative(),retentionDays:e.number().int().nonnegative().nullable(),region:e.string().trim().min(1).max(200).nullable().default(null)}).strict(),Mc=e.object({schemaVersion:e.literal("openpond.trainingJobSubmission.v2"),idempotencyKey:e.string().trim().min(1).max(500),name:e.string().trim().min(1).max(200),source:Yt,job:Kn,requestedCapabilities:e.array(Gn).max(1e3),placementObjective:e.enum(["fast","balanced","economical"]),budget:e.object({maximumSpendUsd:e.number().nonnegative(),maximumWallSeconds:e.number().int().positive()}).strict(),approval:Qn,contentHash:B}).strict().superRefine((t,a)=>{t.approval.maximumSpendUsd!==t.budget.maximumSpendUsd&&a.addIssue({code:"custom",path:["approval","maximumSpendUsd"],message:"Approved spend must equal the immutable Job budget."})});var Xn=e.object({schemaVersion:e.literal("openpond.trainingJob.v2"),id:j,teamId:j,kind:ir,modelProjectId:j,portableProjectId:j,sourceProjectRevision:e.number().int().positive(),submissionHash:B,state:Un,phase:e.string().trim().min(1).max(200),version:e.number().int().nonnegative(),progress:e.number().min(0).max(1),rolloutProgress:e.object({groupsCompleted:e.number().int().nonnegative(),groupsTarget:e.number().int().nonnegative(),optimizerUpdatesApplied:e.number().int().nonnegative(),optimizerUpdatesSkipped:e.number().int().nonnegative()}).strict(),accruedSpendUsd:e.number().nonnegative(),terminalReason:e.string().trim().min(1).max(5e3).nullable(),createdAt:L,updatedAt:L,completedAt:L.nullable()}).strict(),$c=e.object({schemaVersion:e.literal("openpond.trainingJobPage.v2"),jobs:e.array(Xn).max(1e3),nextCursor:e.string().trim().min(1).max(2e3).nullable()}).strict(),zc=e.object({schemaVersion:e.literal("openpond.trainingJobEvent.v2"),id:j,jobId:j,sequence:e.number().int().nonnegative(),type:j,phase:e.string().trim().min(1).max(200),message:e.string().trim().min(1).max(5e3).nullable(),data:e.record(e.string(),e.unknown()).default({}),createdAt:L}).strict(),qc=e.object({schemaVersion:e.literal("openpond.trainingJobLog.v2"),jobId:j,sequence:e.number().int().nonnegative(),level:e.enum(["debug","info","warning","error"]),message:e.string().max(2e4),createdAt:L}).strict(),Bc=e.object({expectedVersion:e.number().int().nonnegative()}).strict(),Yn=e.object({schemaVersion:e.literal("openpond.trainingJobOutput.v2"),id:j,jobId:j,kind:e.enum(["checkpoint","adapter","scorer","metrics","evaluation","trace","receipt"]),artifactRef:e.string().trim().min(1).max(2e3),contentHash:B,sizeBytes:e.number().int().nonnegative(),metadata:e.record(e.string(),e.unknown()).default({}),createdAt:L}).strict(),Zn=e.object({schemaVersion:e.literal("openpond.trainingExecutionReceipt.v2"),id:j,teamId:j,jobId:j,submissionHash:B,manifestHash:B,recipeHash:B,capabilityHash:B,runtimeRelease:x,inputs:e.array(x).max(1e4),outputs:e.array(x).max(1e4),spendUsd:e.number().nonnegative(),durationSeconds:e.number().nonnegative(),cleanupComplete:e.boolean(),issuer:j,issuedAt:L,signature:e.string().trim().min(1).max(1e4).nullable()}).strict();var Vc=e.object({schemaVersion:e.literal("openpond.trainingJobOutputs.v2"),outputs:e.array(Yn).max(1e4),receipt:Zn.nullable()}).strict(),Oc=e.object({schemaVersion:e.literal("openpond.trainingApiError.v2"),code:e.string().trim().min(1).max(200),message:e.string().trim().min(1).max(5e3),retryable:e.boolean().default(!1),requestId:e.string().trim().min(1).max(500).nullable().default(null),details:e.record(e.string(),e.unknown()).default({})}).strict();var Fc=e.object({schemaVersion:e.literal("openpond.trainingCapabilities.v2"),capabilityHash:B,jobKinds:e.array(ir),methods:e.array(e.string().trim().min(1).max(200)),placements:e.array(e.enum(["local","remote","colocated","provider_native"])),controls:e.object({cancel:e.boolean(),stopAfterGroup:e.boolean(),resumeFromCheckpoint:e.boolean()}).strict(),limits:e.object({maximumSpendUsd:e.number().nonnegative(),maximumWallSeconds:e.number().int().positive(),maximumArtifactBytes:e.number().int().positive()}).strict(),checkedAt:L,expiresAt:L}).strict();var ea=e.object({batch:ba,evidence:e.array(ga).min(1).max(1e4),decisions:e.array(ka).min(1).max(1e4),sources:e.array(ha).min(1).max(1e4),assets:e.array(re).max(1e3)}).strict();function or(t){return t.evidence.filter(a=>a.submission.evaluatorContext!==null).map(a=>{let r=_e(a.submission.evaluatorContext),n=new TextEncoder().encode(r);return{asset:{id:`task-evidence:${a.contentHash}`,path:`learning/context/${a.contentHash}.json`,contentHash:z(n),sizeBytes:n.byteLength,mediaType:"application/json",visibility:"host_private"},base64:btoa(Array.from(n,s=>String.fromCharCode(s)).join(""))}})}c(or,"learningPackageContextFiles");function cr(t,a){let r=ea.parse(a),n=Ue(t);if(!D(I(r.batch),n.batch))throw new Error("Taskset learning batch differs from its admission metadata.");for(let d of[r.evidence,r.decisions,r.sources,r.assets]){let m=new Set;for(let p of d){mt(p);let f=`${p.id}:${p.revision}`;if(m.has(f))throw new Error("Taskset learning resource identities must be unique.");m.add(f)}}if(r.evidence.length!==r.batch.examples.length||r.decisions.length!==r.batch.examples.length)throw new Error("Taskset learning snapshots must match the admitted batch inventory.");for(let d of r.evidence){let m=r.sources.find(p=>D(I(p),d.source));if(!m||!D(m.taskDefinition,I(n.definition)))throw new Error("Taskset evidence source differs from its task definition.")}if(r.sources.some(d=>!r.evidence.some(m=>D(m.source,I(d)))))throw new Error("Taskset package includes an unrelated learning source.");let s=n.rewards.flatMap(d=>[...d.assets,...d.implementation.kind==="custom_verifier"?[d.implementation.verifierRef]:d.implementation.kind==="model_judge"||d.implementation.kind==="human"?[d.implementation.rubricRef]:[],..."inputContract"in d.implementation?[d.implementation.inputContract]:[]]);for(let d of s){let m=r.assets.find(p=>p.id===d.id);if(!m)throw new Error("Taskset learning Reward asset is missing.");Q(m,d)}if(r.assets.some(d=>!s.some(m=>m.id===d.id)))throw new Error("Taskset package includes an unrelated learning asset.");let i=Sa({batch:r.batch,definition:n.definition,binding:n.binding,rewards:n.rewards,evidence:r.evidence,decisions:r.decisions}),o=Ue(i);if(g(o)!==g(n))throw new Error("Taskset admission metadata differs from its reviewed snapshots.");let u=c(d=>({policy:d.policy,environment:d.environment,tools:d.tools}),"execution");if(g(u(i))!==g(u(t)))throw new Error("Taskset execution differs from its reviewed task definition.");let l=c(d=>({id:d.id,clusterKey:d.clusterKey,split:d.split,input:d.input,expectedOutput:d.expectedOutput,policyVisibleContext:d.policyVisibleContext,privilegedContextRef:d.privilegedContextRef,artifactRefs:d.artifactRefs,requiredOutputs:d.requiredOutputs??[],tags:d.tags}),"taskContent");if(g(i.tasks.map(l))!==g(t.tasks.map(l)))throw new Error("Taskset rows differ from their reviewed evidence.");return r}c(cr,"validateTasksetLearningResources");var ye=64*1024*1024,Et=e.object({asset:K,base64:e.string().max(Math.ceil(ye/3)*4)}).strict();function ee(t){let a=Et.parse(t),r=atob(a.base64);if(btoa(r)!==a.base64)throw new Error(`Taskset asset ${a.asset.id} has noncanonical base64.`);let n=Uint8Array.from(r,s=>s.charCodeAt(0));if(n.byteLength!==a.asset.sizeBytes||z(n)!==a.asset.contentHash)throw new Error(`Taskset asset ${a.asset.id} differs from its immutable bytes.`);return n}c(ee,"decodeTasksetPackageFile");function de(t){if(t.taskset.environment.entrypoint!=="openpond.javascript-environment.v1")return null;let a=new Map(t.files.map(o=>[o.asset.id,o])),r=c(o=>{let u=a.get(o);if(!u)throw new Error(`Taskset environment asset is missing: ${o}.`);if(u.asset.sizeBytes>524288)throw new Error("Taskset environment source exceeds the authored asset limit.");let l=new TextDecoder("utf-8",{fatal:!0}).decode(ee(u));return re.parse(E({schemaVersion:"openpond.learningTextAsset.v1",id:o,revision:1,asset:u.asset,text:l}))},"read"),n;if(t.modelResources){if(!t.modelResources.execution)throw new Error("Bound Taskset JavaScript execution resources are missing.");n=ce.parse(t.modelResources.execution)}else{let o=r(Ke(t.taskset));if(o.asset.visibility!=="host_private"||o.asset.mediaType!=="application/json"||o.asset.path!=="environment/execution.json")throw new Error("Taskset execution declaration must be private JSON at environment/execution.json.");n=ce.parse(JSON.parse(o.text))}let i=[...new Set([n.javascript.module.id,...[n.environment.actionSchemaRef,n.environment.observationSchemaRef,n.environment.stateSchemaRef].flatMap(o=>o?[o.id]:[]),...t.taskset.tasks.flatMap(o=>o.privilegedContextRef?[o.privilegedContextRef]:[])])].map(r);return It(n,t.taskset,i),{execution:n,assets:i}}c(de,"resolveTasksetPackageExecution");function Ye(t){let a=Ja(t),r=new TextEncoder().encode(a.text),n="";for(let s of r)n+=String.fromCharCode(s);return{asset:a.asset,base64:btoa(n)}}c(Ye,"createTasksetPackageExecutionFile");var es=Qt.omit({taskset:!0,executionResources:!0}),dr=e.object({schemaVersion:e.literal("openpond.tasksetPackage.v1"),taskset:O,environment:ne,verifierSet:se,files:e.array(Et).max(1e4),modelResources:es.optional(),learningResources:ea.optional()}).strict(),ts=dr.extend({contentHash:e.string().regex(/^[a-f0-9]{64}$/)}).strict();function ta(t){return t.learningResources?Ue(t.taskset).definition.instructions:t.modelResources?t.modelResources.taskDefinition.instructions:e.object({instructions:e.string().max(2e4).optional()}).passthrough().parse(t.taskset.metadata.ordinaryAuthoring??{}).instructions??""}c(ta,"resolveTasksetPackageInstructions");function $e(t){pe(t,ye);let a=ts.parse(t),{contentHash:r,...n}=a;if(g(n)!==r)throw new Error("Taskset package content hash differs from its bytes.");let{taskset:s,environment:i,verifierSet:o}=a;if(dt(s),Wt(s)&&(a.modelResources||a.learningResources))throw new Error("Taskset package cannot declare competing authoring graphs.");if(!he(i)||!ge(o)||!Me(s.environmentRelease,{id:i.id,contentHash:i.contentHash})||!Me(s.verifierSetRelease,{id:o.id,contentHash:o.contentHash})||!Me(s.environment,i.contract)||!Me(s.graders,o.graders))throw new Error("Taskset package execution releases do not match its Taskset.");let l=new Map;for(let m of a.files){if(l.has(m.asset.id))throw new Error(`Duplicate Taskset asset identity: ${m.asset.id}.`);ee(m),l.set(m.asset.id,m)}function d(m){let p=l.get(m.id);if(!p||!Me(p.asset,m))throw new Error(`Taskset package asset is missing or mismatched: ${m.id}.`)}c(d,"requireAsset");for(let m of s.tasks){for(let p of m.artifactRefs)d(p);for(let p of m.requiredOutputs??[])p.schemaRef&&d(p.schemaRef);if(m.privilegedContextRef&&l.get(m.privilegedContextRef)?.asset.visibility!=="host_private")throw new Error(`Taskset package private context is missing: ${m.id}.`)}for(let m of[i.actionSchemaRef,i.observationSchemaRef,i.stateSchemaRef])m&&d(m);for(let m of s.graders){let p="verifierRef"in m?m.verifierRef:"rubricRef"in m?m.rubricRef:null;if(p&&(d(p),p.visibility==="policy"))throw new Error(`Taskset grader asset must be private: ${p.id}.`)}if(s.metrics?.customAggregator){let m=s.metrics.customAggregator,p=a.files.filter(f=>f.asset.path===m.module);if(p.length!==1||p[0].asset.contentHash!==m.contentHash||p[0].asset.sizeBytes>524288||p[0].asset.visibility==="policy")throw new Error("Taskset metric module is missing or mismatched, public, or exceeds the source limit.")}for(let m of[s.metadata.environmentResources,i.metadata.resources])if(m!==void 0){for(let p of e.array(e.object({path:e.string().min(1)}).passthrough()).parse(m))if(!a.files.some(f=>f.asset.path===p.path))throw new Error(`Taskset environment resource is missing: ${p.path}.`)}if(a.learningResources){if(a.modelResources)throw new Error("Taskset package cannot declare competing authoring graphs.");let m=cr(s,a.learningResources);for(let p of or(m))if(!Me(l.get(p.asset.id),p))throw new Error("Taskset private context differs from its reviewed evidence.");for(let p of m.assets)d(p.asset)}else if(a.modelResources){let m=Xt({...a.modelResources,taskset:s,executionResources:{environment:i,verifierSet:o}});for(let p of m.assets)d(p.asset)}else if(["starter","rewardBinding","rewardExecution","modelTasksetDerivation","learning"].some(m=>s.metadata[m]!==void 0))throw new Error("Bound Taskset publication requires its complete model resources.");return de(a),ta(a),a}c($e,"validateTasksetPackage");function ze(t){pe(t,ye);let a=dr.parse(t);return $e({...a,contentHash:g(a)})}c(ze,"createTasksetPackage");function Me(t,a){return g({value:t})===g({value:a})}c(Me,"same");function mr(t){let a=$e(t.source),r=$e(t.edited),n=t.preparation;if(n.authoringGraph!=="bound"||!a.modelResources||a.learningResources||r.modelResources||r.learningResources)throw new Error("Bound task editing requires its source Reward and an ordinary edited workspace.");if(a.contentHash!==n.sourcePackageHash||!D(I(a.taskset),n.sourceTasksetRef))throw new Error("Bound draft differs from its retained source package.");let s=c(_=>_.taskset.graders.map(J=>J.kind==="custom_verifier"?{...J,exportName:J.exportName??"verify"}:J),"normalizedGraders");if(g(s(a))!==g(s(r)))throw new Error("Edit the saved Reward in Rewards before changing this Taskset's graders.");let i=a.modelResources,o=new Map(i.assets.map(_=>[_.id,_])),u=de(r),l=de(a),d=c(_=>{let{id:J,revision:Ct,contentHash:Mt,metadata:$t,...Vr}=_,{javascriptEnvironment:Cs,...ia}=$t;return{...Vr,metadata:{...ia,resources:ia.resources??[]}}},"environmentContent"),m=c(_=>{if(!_)return null;let{id:J,revision:Ct,contentHash:Mt,...$t}=_.execution.javascript;return $t},"javascriptContent"),p=g(d(a.environment))===g(d(r.environment))&&g(m(l))===g(m(u)),f=p?a.environment:r.environment,v=p?l:u,k=new Set([...i.assets.map(_=>_.id),...r.taskset.tasks.flatMap(_=>_.privilegedContextRef?[_.privilegedContextRef]:[]),...[r.environment.actionSchemaRef,r.environment.observationSchemaRef,r.environment.stateSchemaRef].flatMap(_=>_?[_.id]:[]),...u?.assets.map(_=>_.id)??[]]);for(let _ of k){let J=r.files.find(Mt=>Mt.asset.id===_);if(!J)throw new Error(`Bound Taskset asset is missing: ${_}.`);let Ct=new TextDecoder("utf-8",{fatal:!0}).decode(ee(J));o.set(_,re.parse(E({schemaVersion:"openpond.learningTextAsset.v1",id:_,revision:1,asset:J.asset,text:Ct})))}let b=ta(r),{contentHash:R,...P}=i.taskDefinition,{policy:C,environment:S,environmentRelease:Te,tools:te,capabilities:h,verifierSetRelease:y}=r.taskset,T=Fe.parse(E({...P,instructions:b,execution:{policy:C,environment:S,environmentRelease:Te,tools:te,capabilities:h,verifierSetRelease:y}})),{contentHash:A,...q}=r.taskset,me=O.parse(E({...q,tasks:r.taskset.tasks.map(_=>i.instructionMode==="per_task"?_:{..._,policyVisibleContext:{..._.policyVisibleContext,instructions:b}})})),rt=Ya({owner:n.lineage.owner,source:{...i,taskset:a.taskset,executionResources:{environment:a.environment,verifierSet:a.verifierSet}},rewardBinding:i.rewardBinding,rewards:i.rewards,assets:[...o.values()],edits:{taskset:me,taskDefinition:T,executionResources:{environment:f,verifierSet:r.verifierSet},...v?{execution:v.execution}:{}}}),$r=Kt.parse(rt.taskset.metadata.modelTasksetDerivation);if(rt.taskset.id!==n.tasksetId||rt.taskset.revision!==n.tasksetRevision||g({...$r,schemaVersion:n.lineage.schemaVersion})!==g(n.lineage))throw new Error("Bound draft differs from its retained ownership lineage.");let{taskset:zr,executionResources:qr,...Br}=rt;return ze({schemaVersion:"openpond.tasksetPackage.v1",taskset:zr,...qr,modelResources:Br,files:r.files})}c(mr,"publishBoundModelTasksetDraftPackage");function pr(t){let a=Ie.parse(t.preparation);if(!D(a.sourceTasksetRef,a.lineage.parent))throw new Error("Taskset draft preparation differs from its source lineage.");if(a.authoringGraph==="bound"){if(!t.source)throw new Error("Bound Taskset authoring requires its retained source package.");return mr({preparation:a,source:t.source,edited:t.edited})}let r=as(t.edited),{contentHash:n,...s}=r.verifierSet,i=Re({...s,id:`${a.tasksetId}-verifiers`,revision:a.tasksetRevision,calibrationReceiptRefs:[],metadata:{sourceVerifierSet:I(r.verifierSet)}}),{contentHash:o,...u}=r.taskset,l=O.parse(E({...u,id:a.tasksetId,revision:a.tasksetRevision,verifierSetRelease:{id:i.id,contentHash:i.contentHash},metadata:{modelTasksetAuthoring:a.lineage,...r.taskset.metadata.environmentResources===void 0?{}:{environmentResources:r.taskset.metadata.environmentResources},...r.taskset.metadata.ordinaryAuthoring===void 0?{}:{ordinaryAuthoring:r.taskset.metadata.ordinaryAuthoring}}})),d=de(r),m=d?[...r.files.filter(p=>p.asset.id!==Ke(r.taskset)),Ye({...d.execution,verifierSet:i})]:r.files;return ze({schemaVersion:"openpond.tasksetPackage.v1",taskset:l,environment:r.environment,verifierSet:i,files:m})}c(pr,"publishModelTasksetDraftPackage");function as(t){let a=$e(t);if(a.modelResources||a.learningResources)throw new Error("This Taskset requires its bound or reviewed authoring workflow.");return a}c(as,"requireOrdinaryPackage");var W=e.string().trim().min(1).max(240),Ze=e.string().trim().min(1),At=e.string().trim().min(8).max(256),ur=e.record(e.string(),e.unknown()).default({}),rs=W.nullable(),fr=["work_capabilities","work_environment","work_list_files","work_read_file","work_read_document","work_write_file","work_write_docx","work_edit_file","work_delete_file","work_exec","work_save_output","work_stop"],ns=e.enum(["draft","awaiting_disclosure_approval","awaiting_materialization_approval","materializing","validating","needs_review","baselining","ready","blocked","failed","archived"]),ss=e.enum(["demonstrations","preferences","verifiable_reward","rubric","discovery"]),$=e.string().trim().max(1e5),is=e.discriminatedUnion("kind",[e.object({kind:e.literal("demonstrations"),behavior:$,examples:e.array(e.object({id:W,prompt:$,response:$})).max(1e3).default([])}),e.object({kind:e.literal("preferences"),preference:$,pairs:e.array(e.object({id:W,prompt:$,chosen:$,rejected:$,rationale:$})).max(1e3).default([])}),e.object({kind:e.literal("verifiable_reward"),task:$,rules:e.array(e.object({id:W,points:e.number().finite(),condition:$})).max(1e3).default([]),otherwisePoints:e.number().finite().default(0)}),e.object({kind:e.literal("rubric"),task:$,criteria:e.array(e.object({id:W,label:e.string().trim().max(500),description:$})).max(1e3).default([]),positiveExample:$,negativeExample:$,boundaryExample:$})]),sm=e.object({path:e.string().trim().min(1).max(1e3),role:e.enum(["environment","verifier","fixture"]),content:e.string().max(25e4)}),os=e.object({primaryMethod:e.enum(["sft","dpo","grpo","ppo","sdft","opsd","sdpo"]),bootstrap:e.object({method:e.literal("sft"),purpose:e.literal("trajectory_bootstrap"),demonstrationRefs:e.array(W).min(1).max(1e5),limitations:e.array(e.string().trim().min(1).max(5e3)).min(1).max(100)}).nullable()}),cs=e.enum(["taskset_not_ready","demonstrations_missing","preference_pairs_missing","preference_pairs_invalid","executable_reward_missing","reward_not_calibrated","reward_model_missing","value_model_required","frozen_eval_missing"]),ds=e.object({method:e.enum(["sft","dpo","grpo","ppo"]),status:e.enum(["recommended","compatible","needs_dataset_work"]),reasonCodes:e.array(cs).default([]),reasons:e.array(e.string().trim().min(1).max(5e3)).default([])}),lr=e.object({code:W,message:e.string().trim().min(1).max(5e3),path:e.string().trim().max(2e3).nullable()}),ms=e.object({schemaVersion:e.literal("openpond.tasksetReadiness.v1"),tasksetId:W,tasksetHash:At,ready:e.boolean(),recommendedMethod:e.enum(["none","retrieval","sft","dpo","grpo","ppo","sdft","opd","opsd","sdpo"]),trainingPath:os.nullable().default(null),methodReadiness:e.array(ds).default([]),compatibleDestinationClasses:e.array(e.enum(["export","custom","hosted_managed"])),blockers:e.array(lr).default([]),advisories:e.array(lr).default([]),warnings:e.array(e.string().trim().min(1).max(5e3)).default([]),generatedAt:Ze}),ps=e.object({attempt:e.number().int().positive(),summary:e.string().trim().min(1).max(5e3),createdAt:Ze}),ls=e.object({schemaVersion:e.literal("openpond.taskAuthoringProvenance.v1"),model:ot.nullable(),modelConfig:ur,skillHash:At,promptTemplateVersion:e.string().trim().min(1).max(200),buildIntent:ss.default("demonstrations"),buildSpecification:is.nullable().default(null),evidenceHashes:e.array(At).max(1e5),tasksetSdkVersion:e.string().trim().min(1).max(100),sourceCommit:e.string().trim().min(1).max(256).nullable(),repairHistory:e.array(ps).max(1e3),createdAt:Ze}),V=e.object({schemaVersion:e.literal("openpond.taskset.v1"),id:W,revision:e.number().int().positive().default(1),profileId:W,profileRelease:ca.nullable().optional(),createImproveRunId:rs.default(null),name:e.string().trim().min(1).max(500),objective:e.string().trim().max(2e4),purpose:ht.default("general"),benchmark:gt.nullable().default(null),preferenceComparison:kt.nullable().default(null),status:ns,sourceRefs:e.array(bt).min(1).max(1e5),datasetArtifact:Ne.nullable().optional(),policy:vt,environment:yt,capabilities:wt,metrics:ct.optional(),tasks:e.array(Ae).max(1e6),graders:e.array(xt).min(1).max(1e3),graderFixtures:e.array(Rt).max(1e5),learningSignals:St,authoringProvenance:ls,readiness:ms.nullable(),contentHash:At,createdAt:Ze,updatedAt:Ze,metadata:ur}).superRefine((t,a)=>{t.purpose==="benchmark"&&!t.benchmark&&a.addIssue({code:"custom",message:"Benchmark Tasksets require an immutable benchmark binding.",path:["benchmark"]}),t.purpose!=="benchmark"&&t.benchmark&&a.addIssue({code:"custom",message:"Only benchmark Tasksets may carry a benchmark binding.",path:["benchmark"]}),t.datasetArtifact&&t.tasks.length>0&&a.addIssue({code:"custom",message:"Artifact-backed Tasksets may not duplicate canonical rows inline.",path:["tasks"]}),!t.datasetArtifact&&t.tasks.length===0&&a.addIssue({code:"custom",message:"A Taskset requires inline tasks or a Dataset artifact manifest.",path:["tasks"]})});function hr(t){return t.schemaVersion==="openpond.trainingSource.v1"}c(hr,"isTrainingSourceRef");var et=class extends Error{static{c(this,"TasksetDraftPublishError")}issues;constructor(a){super(a.map(r=>r.message).join(`
+`)),this.name="TasksetDraftPublishError",this.issues=a}};function gr(t){let a=[];t.name.trim()||a.push({code:"name_missing",message:"Name is required.",path:"name"}),t.objective.trim()||a.push({code:"objective_missing",message:"Objective is required.",path:"objective"}),!t.datasetArtifact&&t.tasks.length===0&&a.push({code:"tasks_missing",message:"Add at least one task or Dataset artifact.",path:"tasks"}),t.graders.length===0&&a.push({code:"graders_missing",message:"Add at least one grader.",path:"graders"}),t.graderFixtures.length===0&&a.push({code:"grader_fixtures_missing",message:"Add grader fixtures before publishing.",path:"graderFixtures"});let r=new Set(t.sourceRefs.map(n=>n.id));for(let n of t.tasks)for(let s of n.sourceRefs)r.has(s)||a.push({code:"task_source_missing",message:`Task ${n.id} references missing source ${s}.`,path:`tasks.${n.id}.sourceRefs`});return a}c(gr,"draftPublishIssues");function kr(t,a={}){let r=V.safeParse(t);if(!r.success)return{valid:!1,taskset:null,computedHash:null,issues:r.error.issues.map(o=>({code:"schema_invalid",severity:"error",message:o.message,path:o.path.join(".")}))};let n=r.data,s=[];hs(n,s),fs(n,s),gs(n,s),bs(n,s),vs(n,s),us(n,s,a),Ss(n,s),ys(n.capabilities,s,n),ks(n,s);let i=br(n);return n.contentHash!==i&&s.push({code:"content_hash_mismatch",severity:"error",message:`Taskset contentHash is ${n.contentHash}, expected ${i}.`,path:"contentHash"}),{valid:!s.some(o=>o.severity==="error"),taskset:n,computedHash:i,issues:s}}c(kr,"validateTaskset");function us(t,a,r){!t.graderFixtures.length&&!(r.allowUnscoredOnlineRewardBatch&&t.metadata.trainingMethod==="grpo"&&t.metadata.learning)&&a.push({code:"grader_fixtures_required",severity:"error",message:"Taskset admission requires authored grader fixtures.",path:"graderFixtures"});let n=new Set(t.tasks.map(i=>i.id)),s=new Set(["positive","negative","boundary","adversarial","prompt_injection","infrastructure_failure"]);for(let i of t.graderFixtures)!t.datasetArtifact&&!n.has(i.taskId)&&a.push({code:"grader_fixture_task_missing",severity:"warning",message:`Fixture ${i.id} references a task outside this Taskset revision (${i.taskId}).`,path:`graderFixtures.${i.id}.taskId`}),s.delete(i.label),i.label==="infrastructure_failure"&&!i.infrastructureError&&a.push({code:"infrastructure_fixture_error_missing",severity:"error",message:`Infrastructure fixture ${i.id} must declare an infrastructure error.`,path:`graderFixtures.${i.id}.infrastructureError`});for(let i of s)a.push({code:"grader_fixture_missing",severity:"warning",message:`Taskset does not include the optional ${i} grader calibration fixture.`,path:"graderFixtures"})}c(us,"validateGraderFixtures");function fs(t,a){let r=t.datasetArtifact;if(!r)return;(r.tasksetId!==t.id||r.tasksetRevision!==t.revision)&&a.push({code:"dataset_artifact_taskset_mismatch",severity:"error",message:"Dataset artifact identity does not match its Taskset revision.",path:"datasetArtifact"});let n=Object.values(r.splitCounts).reduce((l,d)=>l+d,0),s=r.shards.reduce((l,d)=>l+d.rowCount,0);(n!==r.rowCount||s!==r.rowCount)&&a.push({code:"dataset_artifact_row_count_mismatch",severity:"error",message:"Dataset artifact row, split, and shard counts do not agree.",path:"datasetArtifact.rowCount"});let i=new Map;for(let l of r.shards)i.set(l.split,(i.get(l.split)??0)+l.rowCount);for(let[l,d]of Object.entries(r.splitCounts))(i.get(l)??0)!==d&&a.push({code:"dataset_artifact_split_count_mismatch",severity:"error",message:`Dataset artifact ${l} shard counts do not match its manifest.`,path:`datasetArtifact.splitCounts.${l}`});let{contentHash:o,...u}=r;g(u)!==r.contentHash&&a.push({code:"dataset_artifact_hash_mismatch",severity:"error",message:"Dataset artifact manifest content hash is invalid.",path:"datasetArtifact.contentHash"})}c(fs,"validateDatasetArtifact");function qe(t){return br(t)}c(qe,"computeTasksetHash");function br(t){let{contentHash:a,status:r,readiness:n,updatedAt:s,...i}=t;return g(i)}c(br,"tasksetContentHash");function hs(t,a){for(let[r,n]of t.sourceRefs.entries())hr(n)&&n.consent.status!=="granted"&&a.push({code:"source_consent_missing",severity:"error",message:`Source ${n.id} is not consented.`,path:`sourceRefs.${r}.consent.status`}),n.secretScanStatus!=="passed"&&a.push({code:"source_secret_scan",severity:"error",message:`Source ${n.id} did not pass secret scanning.`,path:`sourceRefs.${r}.secretScanStatus`}),n.piiScanStatus!=="passed"&&a.push({code:"source_pii_scan",severity:"error",message:`Source ${n.id} has unresolved PII policy.`,path:`sourceRefs.${r}.piiScanStatus`}),n.licensingStatus!=="approved"&&a.push({code:"source_license",severity:"error",message:`Source ${n.id} has unresolved licensing policy.`,path:`sourceRefs.${r}.licensingStatus`})}c(hs,"validateSourceConsent");function gs(t,a){let r=new Map;for(let s of t.tasks){let i=r.get(s.clusterKey)??new Set;i.add(s.split),r.set(s.clusterKey,i)}for(let[s,i]of r)i.size>1&&a.push({code:"split_cluster_contamination",severity:"error",message:`Source cluster ${s} appears in multiple splits: ${[...i].join(", ")}.`,path:"tasks"});(t.datasetArtifact?t.datasetArtifact.splitCounts.frozen_eval??0:t.tasks.filter(s=>s.split==="frozen_eval").length)===0&&a.push({code:"frozen_eval_missing",severity:"warning",message:"Add an independent test example before training.",path:"tasks"})}c(gs,"validateSplitIsolation");function ks(t,a){if(t.environment.kind!=="work")return;t.environment.entrypoint!=="openpond-work-v1"&&a.push({code:"work_entrypoint_invalid",severity:"error",message:"Work Tasksets must use the openpond-work-v1 entrypoint.",path:"environment.entrypoint"}),(!t.environment.lifecycle.includes("reset")||!t.environment.lifecycle.includes("cleanup"))&&a.push({code:"work_reset_lifecycle_missing",severity:"error",message:"Work attempts require reset and cleanup; filesystem state belongs to one attempt.",path:"environment.lifecycle"});let r=new Set(fr),n=t.environment.toolNames.filter(i=>!r.has(i));n.length&&a.push({code:"work_tool_unknown",severity:"error",message:`Work Taskset declares unknown tools: ${n.join(", ")}.`,path:"environment.toolNames"}),t.environment.toolNames.includes("work_save_output")||a.push({code:"work_output_tool_missing",severity:"error",message:"Work Tasksets must declare work_save_output.",path:"environment.toolNames"});for(let i of["create","reset","step","grade","cleanup"])t.environment.lifecycle.includes(i)||a.push({code:"work_lifecycle_incomplete",severity:"error",message:`Work Tasksets require the ${i} lifecycle stage.`,path:"environment.lifecycle"});let s=new Map(t.sourceRefs.map(i=>[i.id,i]));for(let[i,o]of t.tasks.entries()){let u=new Set,l=new Set;for(let[m,p]of(o.assets??[]).entries()){let f=`tasks.${i}.assets.${m}`;u.has(p.id)&&a.push({code:"work_asset_duplicate_id",severity:"error",message:`Task ${o.id} repeats asset id ${p.id}.`,path:`${f}.id`}),l.has(p.fileName)&&a.push({code:"work_asset_duplicate_name",severity:"error",message:`Task ${o.id} repeats staged file name ${p.fileName}.`,path:`${f}.fileName`}),u.add(p.id),l.add(p.fileName),o.sourceRefs.includes(p.sourceRefId)||a.push({code:"work_asset_task_source_missing",severity:"error",message:`Asset ${p.id} references source ${p.sourceRefId} outside task ${o.id}.`,path:`${f}.sourceRefId`});let v=s.get(p.sourceRefId);v?"sourceFileHashes"in v&&!v.sourceFileHashes.includes(p.sha256)&&a.push({code:"work_asset_hash_unregistered",severity:"error",message:`Asset ${p.id} hash is not registered by source ${p.sourceRefId}.`,path:`${f}.sha256`}):a.push({code:"work_asset_source_missing",severity:"error",message:`Asset ${p.id} references missing source ${p.sourceRefId}.`,path:`${f}.sourceRefId`}),v&&"kind"in v&&v.kind==="uploaded_file"&&!v.originalFileNames.includes(p.fileName)&&a.push({code:"work_asset_name_unregistered",severity:"error",message:`Asset ${p.id} file name is not registered by source ${p.sourceRefId}.`,path:`${f}.fileName`}),v&&"kind"in v&&v.kind==="uploaded_file"&&!v.mediaTypes.includes(p.mediaType)&&a.push({code:"work_asset_media_type_unregistered",severity:"error",message:`Asset ${p.id} media type is not registered by source ${p.sourceRefId}.`,path:`${f}.mediaType`}),p.split!==o.split&&a.push({code:"work_asset_split_mismatch",severity:"error",message:`Asset ${p.id} is assigned to ${p.split}, not task split ${o.split}.`,path:`${f}.split`})}let d=new Set;for(let[m,p]of(o.requiredOutputs??[]).entries()){let f=p.path.replaceAll("\\","/"),v=`tasks.${i}.requiredOutputs.${m}.path`;d.has(f)&&a.push({code:"work_output_duplicate_path",severity:"error",message:`Task ${o.id} repeats required output path ${f}.`,path:v}),d.add(f)}(o.requiredOutputs??[]).length===0&&a.push({code:"work_output_missing",severity:"error",message:`Work task ${o.id} must declare at least one required output.`,path:`tasks.${i}.requiredOutputs`})}}c(ks,"validateWorkExecution");function bs(t,a){let r=new Set(t.policy.policyVisibleFields);for(let n of t.policy.privilegedFields)r.has(n)&&a.push({code:"privileged_field_visible",severity:"error",message:`Field ${n} is both policy-visible and privileged.`,path:"policy"});for(let n of t.tasks)n.privilegedContextRef&&Object.keys(n.policyVisibleContext).includes(n.privilegedContextRef)&&a.push({code:"privileged_context_leak",severity:"error",message:`Task ${n.id} exposes its privileged context reference.`,path:`tasks.${n.id}.policyVisibleContext`})}c(bs,"validatePolicyBoundary");function vs(t,a){let r=new Set;for(let n of t.graders)r.has(n.id)&&a.push({code:"grader_duplicate",severity:"error",message:`Duplicate grader id ${n.id}.`,path:"graders"}),r.add(n.id),n.kind==="model_judge"&&n.rewardEligible&&n.calibrationStatus!=="passed"&&a.push({code:"judge_calibration_pending",severity:"warning",message:`Model judge ${n.id} is selected for reward without a passing advisory calibration report.`,path:`graders.${n.id}`}),n.kind==="model_judge"&&n.calibrationStatus==="passed"&&typeof n.metadata.calibrationEvidenceHash!="string"&&a.push({code:"judge_calibration_evidence_missing",severity:"warning",message:`Model judge ${n.id} declares calibration without an OpenPond fixture evidence hash.`,path:`graders.${n.id}.metadata.calibrationEvidenceHash`}),n.kind==="human"&&n.rewardEligible&&a.push({code:"human_online_reward",severity:"error",message:`Human grader ${n.id} cannot be an online optimizer reward.`,path:`graders.${n.id}`})}c(vs,"validateGraders");function Ss(t,a){let r=new Set(t.tasks.map(s=>s.id)),n=new Set(t.sourceRefs.map(s=>s.id));for(let s of[...t.learningSignals.demonstrations,...t.learningSignals.preferences,...t.learningSignals.corrections,...t.learningSignals.feedback,...t.learningSignals.rewards,...t.learningSignals.labels])s.taskId&&!t.datasetArtifact&&!r.has(s.taskId)&&a.push({code:"learning_signal_task_missing",severity:"error",message:`Signal ${s.id} references missing task ${s.taskId}.`,path:`learningSignals.${s.kind}.${s.id}.taskId`}),s.sourceRefs.some(i=>!n.has(i))&&a.push({code:"learning_signal_source_missing",severity:"error",message:`Signal ${s.id} references a source outside the Dataset.`,path:`learningSignals.${s.kind}.${s.id}.sourceRefs`});for(let s of t.learningSignals.preferences)s.chosen.trim()===s.rejected.trim()&&a.push({code:"preference_pair_identical",severity:"error",message:`Preference ${s.id} has identical chosen and rejected responses.`,path:`learningSignals.preferences.${s.id}`});for(let s of t.learningSignals.rewards)s.executable||a.push({code:"reward_not_executable",severity:"warning",message:`Reward ${s.id} is a reviewed specification but has no executable verifier yet.`,path:`learningSignals.rewards.${s.id}.executable`})}c(Ss,"validateLearningSignals");function ys(t,a,r){!t.exportable&&t.portabilityBlockers.length===0&&a.push({code:"portability_reason_missing",severity:"error",message:"Non-exportable Tasksets must declare a portability blocker.",path:"capabilities.portabilityBlockers"}),t.compatibleMethods.includes("grpo")&&!t.rewardKinds.some(n=>n==="exact"||n==="deterministic"||n==="model_judge")&&a.push({code:"grpo_reward_missing",severity:"error",message:"GRPO compatibility requires a scalar reward kind.",path:"capabilities.rewardKinds"}),r?.capabilities.compatibleMethods.includes("sft")&&r.learningSignals.demonstrations.length===0&&a.push({code:"sft_demonstrations_missing",severity:"error",message:"SFT compatibility requires approved demonstrations.",path:"learningSignals.demonstrations"}),r?.capabilities.compatibleMethods.includes("dpo")&&r.learningSignals.preferences.length===0&&a.push({code:"dpo_preferences_missing",severity:"error",message:"DPO compatibility requires chosen and rejected response pairs.",path:"learningSignals.preferences"}),r&&(r.capabilities.compatibleMethods.includes("grpo")||r.capabilities.compatibleMethods.includes("ppo"))&&!r.learningSignals.rewards.some(n=>n.executable)&&!r.graders.some(n=>n.rewardEligible&&n.weight>0&&n.kind!=="human")&&a.push({code:"online_reward_not_executable",severity:"error",message:"GRPO/PPO compatibility requires an executable scalar reward.",path:"learningSignals.rewards"})}c(ys,"validateCapabilities");function vr(t){let a=be.parse(t.draft),r=t.now??new Date().toISOString(),n=gr(a);if(n.length)throw new et(n);let s=a.modelScope?.source;if(s&&t.tasksetId&&t.tasksetId!==s.tasksetId)throw new Error("Taskset draft publication differs from its prepared identity.");let i=s?.tasksetId||t.tasksetId?.trim()||a.publishedTasksetRef?.id||a.id.replace(/-draft$/,""),o=s?.tasksetRevision??(a.publishedTasksetRef?.id===i?a.publishedTasksetRef.revision+1:1),u=a.sourceRefs.length?a.sourceRefs:[ws(a,i,r)],l=u[0].id,d=a.tasks.map(S=>Ae.parse({...S,sourceRefs:S.sourceRefs.length?S.sourceRefs:[l],metadata:{exampleOrigin:"expert_authored",...S.metadata}})),m=a.capabilities.compatibleMethods.find(S=>S!=="none"&&S!=="retrieval")??null,p=Ts(a),f=a.graders.filter(S=>S.rewardEligible&&S.weight>0&&S.kind!=="human"),v=m===null&&p==="verifiable_reward"&&f.length>0,k=m??(v?"grpo":null),b=V.parse({schemaVersion:"openpond.taskset.v1",id:i,revision:o,profileId:a.profileId,profileRelease:null,createImproveRunId:null,name:a.name,objective:a.objective,purpose:a.purpose,benchmark:a.benchmark,preferenceComparison:a.preferenceComparison,status:"needs_review",sourceRefs:u,datasetArtifact:a.datasetArtifact??null,policy:a.policy,environment:a.environment,capabilities:v?{...a.capabilities,compatibleMethods:["grpo"],rewardKinds:[...new Set(f.map(S=>S.kind==="model_judge"?"model_judge":"deterministic"))]}:a.capabilities,metrics:a.metrics,tasks:d,graders:a.graders,graderFixtures:a.graderFixtures,learningSignals:a.learningSignals,authoringProvenance:{schemaVersion:"openpond.taskAuthoringProvenance.v1",model:null,modelConfig:{},skillHash:g("openpond-taskset-draft-authoring-v1"),promptTemplateVersion:"taskset-draft-v1",buildIntent:p,buildSpecification:null,evidenceHashes:u.map(S=>S.sourceHash),tasksetSdkVersion:"draft-v1",sourceCommit:null,repairHistory:[],createdAt:r},readiness:null,contentHash:"00000000",createdAt:o===1?a.createdAt:r,updatedAt:r,metadata:{...a.metadata,...s?{modelTasksetAuthoring:s.lineage}:{},tasksetReviewPolicy:a.review,tasksetOutputContract:a.output,...t.sourcePackageHash?{sourcePackageHash:t.sourcePackageHash}:{},...k?{trainingMethod:k}:{},diagnosis:{schemaVersion:"openpond.capabilityDiagnosis.v1",summary:a.objective,stableBehavior:[a.objective],changingKnowledge:[],requiredContext:[],requiredTools:a.environment.toolNames,intervention:k==="dpo"?"preference":k==="grpo"||k==="ppo"?"grpo_rft":k==="sft"?"sft":"no_training",trainingEligible:k!==null,rationale:k?[`The author selected ${k.toUpperCase()} compatibility.`]:["The Taskset is currently configured for evaluation only."],confidence:1}}}),R=V.parse({...b,contentHash:qe(b)}),C=kr(R).issues.filter(S=>S.severity==="error");if(C.length)throw new et(C.map(S=>({code:S.code,message:S.message,path:S.path})));return R}c(vr,"publishTasksetDraft");function ws(t,a,r){let n=g({draftId:t.id,draftRevision:t.revision,tasks:t.tasks});return{schemaVersion:"openpond.generatedDatasetSource.v1",kind:"generated",id:`source-${a}`,profileId:t.profileId,title:`${t.name} manual authoring`,sourceHash:n,occurredAt:r,licensingStatus:"approved",secretScanStatus:"passed",piiScanStatus:"passed",generatorId:"openpond-taskset-draft",generatorVersion:"1",seed:0,generatorHash:n,metadata:{draftId:t.id,draftRevision:t.revision}}}c(ws,"generatedDraftSource");function Ts(t){return t.learningSignals.preferences.length?"preferences":t.learningSignals.rewards.length?"verifiable_reward":t.learningSignals.labels.length?"rubric":!t.capabilities.compatibleMethods.some(a=>a!=="none"&&a!=="retrieval")&&t.graders.some(a=>a.rewardEligible&&a.weight>0&&a.kind!=="human")?"verifiable_reward":"demonstrations"}c(Ts,"buildIntentForDraft");function xs(t,a){let r=t.metadata.learning===void 0?null:Bt.parse(t.metadata.learning),n=t.metadata.rewardExecution,s=a??(n?{binding:ue.parse(n.binding),rewards:le.array().parse(n.rewards)}:r);if(t.metadata.rewardBinding!==void 0){let i=t.metadata.rewardBinding;if(!s||!i||i.id!==s.binding.id||i.revision!==s.binding.revision||i.contentHash!==s.binding.contentHash)throw new Error("Portable Taskset requires its exact published Reward binding.")}return s&&fe(s.binding,s.rewards),s?{binding:s.binding,rewards:s.rewards}:null}c(xs,"resolvePortableTasksetRewardExecution");function jt(t){let a=Tr(t.taskset),r=Rs(t.taskset),n=t.taskset.metadata.learning===void 0?null:Bt.parse(t.taskset.metadata.learning),s=t.taskset.metadata.rewardExecution,i=xs(t.taskset,t.rewardExecution),o=i?fe(i.binding,i.rewards):t.taskset.graders.map(_s),u=t.selectedTasks?.length?t.selectedTasks:t.taskset.tasks;if(!u.length)throw new Error("A portable Taskset release requires at least one task.");let l=t.taskset.environment.metadata.portableExecutionResources;if(a.entrypoint==="openpond.javascript-environment.v1"&&!l)throw new Error("Tool Taskset publication requires its pinned execution resources.");let d=l?ne.parse(l.environment):xe({schemaVersion:"openpond.environmentRelease.v1",id:`environment-release-${t.taskset.id}-r${t.taskset.revision}`,revision:t.taskset.revision,contract:a,actionSchemaRef:null,observationSchemaRef:null,stateSchemaRef:null,artifactCollection:{maxArtifacts:1e5,maxTotalBytes:25e7},adapterConformanceHashes:{[t.adapterId]:g({adapterId:t.adapterId,environment:a,tools:r})},metadata:{sourceTasksetId:t.taskset.id,sourcePackageHash:t.taskset.metadata.sourcePackageHash??null,resources:t.taskset.environment.resources??[]}}),m=l?.verifierSet!==void 0?se.parse(l.verifierSet):Re({schemaVersion:"openpond.verifierSetRelease.v1",id:`verifier-set-release-${t.taskset.id}-r${t.taskset.revision}`,revision:t.taskset.revision,graders:o,isolation:{processBoundary:"isolated_process",networkPolicy:"none",defaultTimeoutMs:Math.min(t.taskset.environment.defaultTimeoutMs,3e5)},calibrationReceiptRefs:[],metadata:{sourceTasksetId:t.taskset.id}});if(!he(d)||!ge(m)||g(d.contract)!==g(a)||g(m.graders)!==g(o))throw new Error("Taskset execution resources differ from its declared environment or graders.");let p=fa.parse({schemaVersion:"openpond.tasksetRelease.v2",id:t.taskset.metadata.derivedPortableMetadata===void 0?`taskset-release-${t.taskset.id}-r${t.taskset.revision}`:t.taskset.id,revision:t.taskset.revision,policy:{policyVisibleFields:t.taskset.policy.policyVisibleFields,privilegedFields:t.taskset.policy.privilegedFields,hiddenGraderRefs:t.taskset.policy.hiddenGraderRefs,connectedAppScopes:t.taskset.policy.connectedAppScopes},environment:a,tools:r,capabilities:Is(t.taskset),tasks:u.map(ra),graders:o,...t.taskset.metrics?{metrics:t.taskset.metrics}:{},metadata:t.taskset.metadata.derivedPortableMetadata??{sourceTasksetId:t.taskset.id,sourceTasksetHash:t.taskset.contentHash,sourcePackageHash:t.taskset.metadata.sourcePackageHash??null,environmentResources:t.taskset.environment.resources??[],ordinaryAuthoring:{instructions:t.taskset.objective,graderFixtures:t.taskset.graderFixtures,judgeCalibrationFixtures:Object.fromEntries(t.taskset.graders.filter(k=>k.kind==="model_judge").map(k=>[k.id,k.calibrationFixtureRefs]))},...n?{learning:n}:{},...i&&!n&&(t.rewardExecution||s)?{rewardExecution:{binding:i.binding,rewards:i.rewards}}:{}}}),f=t.admittedTasksetRelease?O.parse(t.admittedTasksetRelease):O.parse({...p,contentHash:g(p)}),v=f.environmentRelease?Ps({draft:f,environmentRelease:d,verifierSetRelease:m}):wa({taskset:f,environment:d,verifierSet:m});return{environmentRelease:d,verifierSetRelease:m,tasksetRelease:v}}c(jt,"materializePortableTasksetRelease");function wr(t){return Tr(t)}c(wr,"portableTasksetEnvironment");function ra(t){let a=t.metadata.portableTaskRecord;if(a!==void 0){let r=Ve.parse(a),n=Ve.parse({...r,id:t.id,clusterKey:t.clusterKey,split:t.split,input:t.input,expectedOutput:Sr(t),policyVisibleContext:t.policyVisibleContext,privilegedContextRef:t.privilegedContextRef,tags:t.tags,artifactRefs:t.assets===void 0?r.artifactRefs:t.assets.map(s=>{let i=r.artifactRefs.find(o=>o.id===s.id);return{id:s.id,path:i?.path??`tasks/${Be(t.id)}/${Be(s.fileName)}`,contentHash:aa(s.sha256),sizeBytes:s.sizeBytes,mediaType:s.mediaType,visibility:i?.visibility??"policy"}}),requiredOutputs:t.requiredOutputs===void 0?r.requiredOutputs:t.requiredOutputs.map(s=>{let i=r.requiredOutputs?.find(o=>o.path===s.path);return{path:s.path,mediaType:s.mediaType,schemaRef:i?.schemaRef&&i.schemaRef.id===s.schemaRef?i.schemaRef:null,maxBytes:s.maxBytes??null,metadata:{...s.metadata,...s.schemaRef&&i?.schemaRef?.id!==s.schemaRef?{legacySchemaRef:s.schemaRef}:{}}}})});return n.requiredOutputs===void 0&&delete n.requiredOutputs,n}return{id:t.id,clusterKey:t.clusterKey,split:t.split,input:t.input,expectedOutput:Sr(t),policyVisibleContext:t.policyVisibleContext,privilegedContextRef:t.privilegedContextRef,artifactRefs:(t.assets??[]).map(r=>({id:r.id,path:`tasks/${Be(t.id)}/${Be(r.fileName)}`,contentHash:aa(r.sha256),sizeBytes:r.sizeBytes,mediaType:r.mediaType,visibility:"policy"})),requiredOutputs:(t.requiredOutputs??[]).map(r=>({path:r.path,mediaType:r.mediaType,schemaRef:null,maxBytes:r.maxBytes??null,metadata:{...r.metadata,legacySchemaRef:r.schemaRef??null}})),tags:t.tags}}c(ra,"projectPortableTaskRecord");function Sr(t){if(!t.expectedOutput)return null;if("artifactRenderer"in t.expectedOutput)throw new Error(`Task ${t.id} embeds an artifact renderer. Put shared renderer configuration in Environment resources and reference it from the Scenario.`);return t.expectedOutput}c(Sr,"portableExpectedOutput");function Tr(t){return{protocolVersion:"openpond.environment.v1",kind:t.environment.kind==="chat"?"text":t.environment.kind==="work"?"work":t.environment.kind==="program"?"custom_program":"agent",entrypoint:t.environment.entrypoint,stateful:t.environment.stateful,deterministicSeeds:t.environment.deterministicSeeds,lifecycle:["create","reset","step","collect","destroy"],networkPolicy:t.environment.networkPolicy,defaultTimeoutMs:t.environment.defaultTimeoutMs}}c(Tr,"portableEnvironment");function Rs(t){let a=t.environment.metadata.portableTools;if(a!==void 0)return da.array().max(200).parse(a);let r=t.environment.actionBindings??[];return r.length?r.map(n=>({name:n.modelToolName,description:n.description,inputSchema:n.inputSchema,inputSchemaHash:aa(n.actionSchemaHash),sideEffect:n.sideEffect,timeoutMs:n.timeoutMs})):t.environment.toolNames.map(n=>({name:n,description:`Host-provided ${n} tool.`,inputSchema:{},inputSchemaHash:g({}),sideEffect:"write",timeoutMs:t.environment.defaultTimeoutMs}))}c(Rs,"portableTools");function _s(t){let a={id:t.id,version:t.version,weight:t.weight,hardGate:t.hardGate,rewardEligible:t.rewardEligible,privileged:t.privileged};if(t.kind==="model_judge")return{...a,kind:"model_judge",rubricRef:yr(t),model:Es(t),temperature:t.temperature,calibrationStatus:t.calibrationStatus};if(t.kind==="custom_verifier"){if(t.metadata.portableVerifierRef===void 0)throw new Error(`Custom verifier ${t.id} requires its immutable executable asset before publication.`);let r=qt.safeParse(t.metadata.portableGrader),n=r.success&&r.data.kind==="custom_verifier"&&r.data.exportName===void 0&&t.exportName==="verify";return{...a,kind:"custom_verifier",...t.runtime===void 0?{}:{runtime:t.runtime},verifierRef:K.parse(t.metadata.portableVerifierRef),timeoutMs:t.timeoutMs,...n?{}:{exportName:t.exportName},networkPolicy:"none"}}return t.kind==="human"?{...a,kind:"human",rubricRef:yr(t),reviewerRole:t.reviewerRole}:{...a,...pa(t)}}c(_s,"portableGrader");function Is(t){let a=t.metadata.portableCapabilities;return a!==void 0?ma.array().max(200).parse(a):[...t.capabilities.requiresTools?[{id:"tools",required:!0,scopes:t.environment.toolNames}]:[],...t.capabilities.requiresState?[{id:"local-state",required:!0,scopes:[]}]:[],...t.capabilities.requiresPrivilegedGrading?[{id:"private-verifier",required:!0,scopes:t.policy.hiddenGraderRefs}]:[],...t.policy.connectedAppScopes.map(r=>({id:`connected-app-${Be(r)}`,required:!0,scopes:[r]}))].map(r=>({...r,portability:r.id==="local-state"?"host_adapter":"portable"}))}c(Is,"portableCapabilities");function Ps(t){if(t.draft.environmentRelease?.id!==t.environmentRelease.id||t.draft.environmentRelease.contentHash!==t.environmentRelease.contentHash)throw new Error("Admitted Taskset Release binds a different Environment Release.");if(t.draft.verifierSetRelease?.id!==t.verifierSetRelease.id||t.draft.verifierSetRelease.contentHash!==t.verifierSetRelease.contentHash)throw new Error("Admitted Taskset Release binds a different Verifier Set Release.");if(g(t.draft.environment)!==g(t.environmentRelease.contract))throw new Error("Admitted Taskset Environment differs from its bound Environment Release.");if(g(t.draft.graders)!==g(t.verifierSetRelease.graders))throw new Error("Admitted Taskset graders differ from its bound Verifier Set Release.");return t.draft}c(Ps,"assertReleaseBindings");function Es(t){let a=t.metadata.portableGrader===void 0?null:qt.parse(t.metadata.portableGrader),r=a?.kind==="model_judge"&&a.model?.providerId===t.judge.providerId&&a.model.modelId===t.judge.modelId?a.model.revision:null;return{...t.judge,revision:r}}c(Es,"modelJudgeRef");function yr(t){let a=z(t.rubric),r=new TextEncoder().encode(t.rubric).byteLength,n=t.metadata.portableRubricRef;if(n!==void 0){let s=K.parse(n);if(s.contentHash!==a||s.sizeBytes!==r||s.visibility==="policy")throw new Error("Taskset rubric differs from its published private source.");return s}return{id:`rubric-${t.id}`,path:`graders/${Be(t.id)}/rubric.md`,contentHash:a,sizeBytes:r,mediaType:"text/markdown",visibility:"verifier"}}c(yr,"rubricAsset");function aa(t){return/^[a-f0-9]{64}$/.test(t)?t:g(t)}c(aa,"hash");function Be(t){return t.trim().replace(/[^a-zA-Z0-9._-]+/g,"-").replace(/^-+|-+$/g,"")||"asset"}c(Be,"segment");function xr(t,a,r,n){if(t.environment.entrypoint!=="openpond.javascript-environment.v1")return{taskset:t,inventory:r,generatedFiles:[]};let s="environment/execution.json",i=a.get(s);if(!i||i.length>524288)throw new Error("Authored tool environment requires its bounded private execution declaration.");let o=ce.parse(JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(i))),u=c(P=>{if(!P)return null;let C=r.find(S=>S.asset.id===P.id&&S.asset.path===P.path);if(!C)throw new Error(`Authored environment dependency is missing: ${P.id}.`);return C.asset},"repin"),{contentHash:l,...d}=o.javascript,m=pt.parse(E({...d,id:`javascript-${t.id}`,revision:t.revision,module:u(o.javascript.module)}));if(g(m.tools)!==g(t.environment.metadata.portableTools)||g(m.tools.map(P=>P.name))!==g(t.environment.toolNames))throw new Error("Authored environment tools differ from the Taskset's declared tools.");let p=xe({schemaVersion:"openpond.environmentRelease.v1",id:`environment-${t.id}`,revision:t.revision,contract:wr(t),actionSchemaRef:u(o.environment.actionSchemaRef),observationSchemaRef:u(o.environment.observationSchemaRef),stateSchemaRef:u(o.environment.stateSchemaRef),artifactCollection:o.environment.artifactCollection,adapterConformanceHashes:{},metadata:{javascriptEnvironment:I(m),resources:t.environment.resources??[]}}),f=V.parse({...t,environment:{...t.environment,metadata:{...t.environment.metadata,portableExecutionResources:{environment:p}}}}),v=jt({taskset:f,adapterId:n}),k=Ye({javascript:m,environment:p,verifierSet:v.verifierSetRelease}),b=[...r.filter(P=>P.sourcePath!==s),{asset:k.asset,sourcePath:s}],R=V.parse({...f,metadata:{...f.metadata,portableFileInventory:b}});return{taskset:V.parse({...R,contentHash:qe(R)}),inventory:b,generatedFiles:[{path:s,role:"environment",content:new TextDecoder().decode(ee(k))}]}}c(xr,"prepareAuthoredToolEnvironment");var Dt=e.array(e.object({asset:K,sourcePath:e.string().min(1)}).strict()).max(1e4),As=new Set(["taskset.json","capabilities.json","data/tasks.jsonl","graders/graders.json","fixtures/grader-fixtures.json","environment/taskset.ts"]);function Rr(t){return As.has(t)}c(Rr,"isGeneratedTasksetPublicationFilePath");function _r(t,a,r){let n=V.parse(t);if(n.metadata.taskDefinition!==void 0||n.metadata.rewardBinding!==void 0)return{taskset:n,generatedFiles:[]};let s=new Map,i=0;for(let[h,y]of a){if(X.parse(h),i+=y.byteLength,s.size>=1e4||i>ye*3/4)throw new Error("Taskset source exceeds the package byte limit.");s.set(h,y.slice())}let o=n.metrics?.customAggregator,u=o?s.get(o.module):void 0;if(o&&!u)throw new Error("Declared Taskset metric module is missing.");let l=o&&u?{...n.metrics,customAggregator:{...o,contentHash:z(u)}}:n.metrics,d=new Map,m=new Set,p=[],f=c((h,y,T,A)=>{let q=s.get(y);if(!q)throw new Error(`Declared Taskset file is missing: ${y}.`);return{id:h,path:y,contentHash:z(q),sizeBytes:q.byteLength,mediaType:T,visibility:A}},"ref"),v=c((h,y=h.path)=>{let T=d.get(h.id);if(T&&g(T)!==g({asset:h,sourcePath:y}))throw new Error(`Conflicting Taskset file identity: ${h.id}.`);let A=s.get(y);if(!A||A.length!==h.sizeBytes||z(A)!==h.contentHash)throw new Error(`Taskset file differs from its declared bytes: ${h.id}.`);d.set(h.id,{asset:h,sourcePath:y}),m.add(y)},"add");for(let h of n.tasks){let y=ra(h);for(let T of y.artifactRefs)v(T,h.assets?.find(A=>A.id===T.id)?.artifactRef??T.path);for(let T of y.requiredOutputs??[])T.schemaRef&&v(T.schemaRef)}for(let h of n.environment.resources??[])v(f(h.id,h.path,h.mediaType??"application/octet-stream",h.visibility==="policy_visible"?"policy":"host_private"));let k=n.graders.map(h=>{if(h.kind==="custom_verifier"){let y=f(`verifier-${h.id}`,h.module,"application/javascript","host_private"),T=K.safeParse(h.metadata.portableVerifierRef);return T.success&&T.data.contentHash===y.contentHash&&T.data.sizeBytes===y.sizeBytes&&(y=T.data),v(y,h.module),{...h,metadata:{...h.metadata,portableVerifierRef:y}}}if(h.kind==="human"||h.kind==="model_judge"){let y=new TextEncoder().encode(h.rubric),T=`graders/rubric-${z(y)}.md`;s.set(T,y);let A=f(`rubric-${h.id}`,T,"text/markdown","verifier"),q=K.safeParse(h.metadata.portableRubricRef);if(q.success&&q.data.contentHash===A.contentHash&&q.data.sizeBytes===A.sizeBytes){if(q.data.visibility==="policy")throw new Error("A grader rubric cannot become policy-visible.");A=q.data}return v(A,T),p.push({path:T,role:"verifier",content:h.rubric}),{...h,metadata:{...h.metadata,portableRubricRef:A}}}return h});o&&![...d.values()].some(h=>h.asset.path===o.module&&h.sourcePath===o.module&&h.asset.visibility!=="policy")&&v(f(`metric-${g(o.module)}`,o.module,"application/javascript","host_private"));let b=Dt.parse(n.metadata.portableFileInventory??[]);for(let h of[...s.keys()].sort())if(!m.has(h)){let y=b.find(T=>T.sourcePath===h&&!d.has(T.asset.id));v(y?{...f(y.asset.id,h,y.asset.mediaType,y.asset.visibility),path:y.asset.path}:f(`taskset-file-${g(h)}`,h,"application/octet-stream","host_private"),h)}let{importedPackageHash:R,derivedPortableMetadata:P,...C}=n.metadata,S={...n.environment.metadata};if(S.portableExecutionResources!==void 0){let h=e.object({environment:e.unknown(),verifierSet:e.unknown().optional()}).parse(S.portableExecutionResources);S.portableExecutionResources={environment:h.environment}}let Te=V.parse({...n,graders:k,metrics:l,environment:{...n.environment,metadata:S},metadata:{...C,...R===void 0?{}:{sourceImportedPackageHash:R},portableFileInventory:Dt.parse([...d.values()].sort((h,y)=>h.asset.id.localeCompare(y.asset.id)))}}),te=xr(Te,s,[...d.values()],r);return{taskset:V.parse({...te.taskset,contentHash:qe(te.taskset)}),generatedFiles:[...p,...te.generatedFiles]}}c(_r,"prepareAuthoredTasksetSource");function na(t){let a=Je(t.workspace),r=t.preparation===null?null:Ie.parse(t.preparation);if(r?a.draft.id!==r.draftId||a.draft.modelScope?.modelId!==r.lineage.owner.modelId||a.draft.profileId!==r.lineage.owner.scopeId||g(a.draft.modelScope?.source??null)!==g(r):a.draft.modelScope?.source!==void 0)throw new Error("Taskset draft differs from its retained source preparation.");let n=vr({draft:a.draft,now:a.draft.updatedAt,sourcePackageHash:a.contentHash}),s=new Map(a.files.map(d=>[d.path,Jt(d)]));for(let[d,m]of Nt(a.draft))Rr(d)||s.set(d,new TextEncoder().encode(m));let i=_r(n,s,t.adapterId);for(let d of i.generatedFiles)s.set(d.path,new TextEncoder().encode(d.content));let o=jt({taskset:i.taskset,adapterId:t.adapterId}),u=Dt.parse(i.taskset.metadata.portableFileInventory),l=ze({schemaVersion:"openpond.tasksetPackage.v1",taskset:o.tasksetRelease,environment:o.environmentRelease,verifierSet:o.verifierSetRelease,files:u.map(d=>{let m=s.get(d.sourcePath);if(!m)throw new Error(`Captured Taskset file is missing: ${d.sourcePath}.`);return{asset:d.asset,base64:Buffer.from(m).toString("base64")}})});return r?pr({preparation:r,edited:l,source:t.source}):l}c(na,"compileTasksetDraftWorkspace");var H=e.string().trim().min(1).max(240),tt=e.string().regex(/^[a-f0-9]{64}$/),Ir=e.object({cursor:e.string().trim().min(1).max(2e3).optional(),projectId:H.optional(),search:e.string().trim().max(100).optional(),sort:e.enum(["id","name","updated"]).default("id"),limit:e.number().int().min(1).max(100).default(100)}).strict(),Pr=e.object({operationId:H,expectedRevision:e.number().int().nonnegative(),originProjectId:H.optional(),workspace:_t,ownerScope:e.enum(["workspace","personal"]).optional()}).strict().superRefine((t,a)=>{t.workspace.draft.modelScope!==null&&a.addIssue({code:"custom",message:"Independent datasets cannot carry Model-owned draft preparation."}),t.workspace.draft.status!=="draft"&&a.addIssue({code:"custom",message:"Only draft workspaces can be saved."})}),we=e.object({schemaVersion:e.literal("openpond.datasetWorkspaceReceipt.v1"),teamId:H,datasetId:H,revision:e.number().int().positive(),originProjectId:H.optional(),workspace:_t,ownerScope:e.enum(["workspace","personal"]).optional(),publication:e.object({tasksetId:H,release:ve,packageHash:tt}).strict().nullable()}).strict().superRefine((t,a)=>{(t.workspace.draft.id!==t.datasetId||t.workspace.draft.profileId!==t.teamId||t.workspace.draft.revision!==t.revision||t.workspace.draft.modelScope!==null)&&a.addIssue({code:"custom",message:"Dataset workspace scope/revision mismatch."})}),Er=e.object({operationId:H,expectedRevision:e.number().int().positive(),workspaceHash:tt,packageHash:tt}).strict(),Ar=e.object({operationId:H,expectedRevision:e.number().int().positive()}).strict(),jr=e.object({teamId:H,datasetId:H,items:e.array(e.object({workspaceRevision:e.number().int().positive(),publication:we.shape.publication.unwrap(),publishedAt:e.iso.datetime()}).strict()).max(25),nextBeforeRevision:e.number().int().positive().nullable()}).strict(),Dr=e.object({teamId:H,datasets:e.array(e.object({id:H,revision:e.number().int().positive(),originProjectId:H.optional(),name:e.string(),status:e.enum(["draft","published"]),ownerScope:e.enum(["workspace","personal"]).optional(),publication:we.shape.publication,updatedAt:e.string().datetime()}).strict()).max(100),nextCursor:e.string().trim().min(1).max(2e3).nullable()}).strict(),Hr=e.object({teamId:H,datasetId:H,revision:e.number().int().positive(),workspaceHash:tt,packageHash:tt,release:ve}).strict();var sa=e.enum(["create","save","publish","begin_version"]),Cr=e.object({operationId:e.string().trim().min(1).max(240),kind:sa,requestHash:e.string().regex(/^[a-f0-9]{64}$/),receipt:we,base:we.nullable()}).strict().superRefine((t,a)=>{let{receipt:r,base:n,kind:s}=t;(n&&(n.teamId!==r.teamId||n.datasetId!==r.datasetId||n.revision+1!==r.revision)||!n&&r.revision!==1)&&a.addIssue({code:"custom",message:"Operation recovery history identity/revision mismatch."}),n&&((n.ownerScope??"workspace")!==(r.ownerScope??"workspace")||n.originProjectId!==r.originProjectId||n.workspace.draft.createdAt!==r.workspace.draft.createdAt)&&a.addIssue({code:"custom",message:"Operation recovery cannot change Dataset ownership or origin."});let i=n?r.workspace.draft.status==="published"?"publish":n.workspace.draft.status==="published"?"begin_version":"save":"create";s!==i&&a.addIssue({code:"custom",message:"Operation recovery kind differs from its retained lifecycle."})});var at=class{constructor(a){this.options=a;let r=new URL(a.baseUrl);if(!["http:","https:"].includes(r.protocol)||r.username||r.password||r.search||r.hash||!a.apiKey.trim()||!a.teamId.trim())throw new Error("A clean API origin and workspace credentials are required.");this.baseUrl=r.toString().replace(/\/+$/,"")}options;static{c(this,"OpenPondDatasetWorkspaceClient")}baseUrl;async list(a={}){let{signal:r,...n}=a,s=Ir.parse(n),i=new URLSearchParams(Object.entries(s).filter(([,u])=>u!==void 0).map(([u,l])=>[u,String(l)])),o=Dr.parse(await this.request(`?${i}`,"GET",void 0,r));if(o.teamId!==this.options.teamId||o.datasets.length>s.limit||new Set(o.datasets.map(u=>u.id)).size!==o.datasets.length)throw new Error("Dataset list workspace/page mismatch.");return o}async get(a,r){return this.readback(await this.request(`/${encodeURIComponent(a)}`,"GET",void 0,r),a)}async operationResult(a,r){let n=sa.parse(r.kind),s=new URLSearchParams({kind:n,...r.datasetId?{datasetId:r.datasetId}:{}}),i=await this.request(`/operations/${encodeURIComponent(a)}?${s}`,"GET",void 0,r.signal,132*1024*1024);if(i===null)return null;let o=Cr.parse(i);if(this.readback(o.receipt,o.receipt.datasetId),o.base&&this.readback(o.base,o.receipt.datasetId),o.operationId!==a||o.kind!==n||r.datasetId&&o.receipt.datasetId!==r.datasetId||r.requestHash&&o.requestHash!==r.requestHash)throw new Error("Dataset operation recovery identity/request mismatch.");return o}async beginVersion(a,r,n){let s=Ar.parse(r),i=this.readback(await this.request(`/${encodeURIComponent(a)}/begin-version`,"POST",s,n),a);if(i.revision!==s.expectedRevision+1||i.workspace.draft.status!=="draft"||!i.publication||!i.workspace.draft.publishedTasksetRef)throw new Error("Editable version receipt mismatch.");return i}async versions(a,r={}){let n=new URLSearchParams(r.beforeRevision===void 0?{}:{beforeRevision:String(r.beforeRevision)}),s=jr.parse(await this.request(`/${encodeURIComponent(a)}/versions?${n}`,"GET",void 0,r.signal));if(s.teamId!==this.options.teamId||s.datasetId!==a||s.items.some((i,o)=>o>0&&i.workspaceRevision>=s.items[o-1].workspaceRevision||r.beforeRevision!==void 0&&i.workspaceRevision>=r.beforeRevision))throw new Error("Dataset version history scope/order mismatch.");return s}async version(a,r,n){let s=this.readback(await this.request(`/${encodeURIComponent(a)}/versions/${r}`,"GET",void 0,n),a);if(s.revision!==r||s.workspace.draft.status!=="published")throw new Error("Dataset immutable version mismatch.");return s}async save(a,r){let n=Pr.parse(a),s=Je(n.workspace);if(s.draft.profileId!==this.options.teamId||s.draft.revision!==n.expectedRevision+1)throw new Error("Dataset write scope or revision mismatch.");let i=this.readback(await this.request(`/${encodeURIComponent(s.draft.id)}`,"PUT",n,r),s.draft.id);if(n.originProjectId&&i.originProjectId!==n.originProjectId)throw new Error("Dataset origin Project mismatch.");if(n.ownerScope&&i.ownerScope!==n.ownerScope)throw new Error("Dataset owner scope mismatch.");if(i.workspace.contentHash!==s.contentHash)throw new Error("Dataset write receipt differs from the saved bytes.");return i}async validate(a,r,n){let s=Hr.parse(await this.request(`/${encodeURIComponent(a)}/validate`,"POST",{expectedRevision:r},n));if(s.teamId!==this.options.teamId||s.datasetId!==a||s.revision!==r)throw new Error("Dataset validation receipt mismatch.");return s}async publish(a,r,n){let s=Er.parse(r),i=this.readback(await this.request(`/${encodeURIComponent(a)}/publish`,"POST",s,n),a);if(i.revision!==s.expectedRevision+1||i.workspace.draft.status!=="published"||i.publication?.packageHash!==s.packageHash)throw new Error("Dataset publication receipt mismatch.");return i}readback(a,r){let n=we.parse(a);if(Je(n.workspace),n.datasetId!==r||n.teamId!==this.options.teamId)throw new Error("Dataset identity mismatch.");return n}async request(a,r,n,s,i){let o=await(this.options.fetch??fetch)(`${this.baseUrl}/v1/dataset-workspaces${a}`,{method:r,signal:s,redirect:"error",headers:{Authorization:`Bearer ${this.options.apiKey}`,"X-OpenPond-Team-Id":this.options.teamId,"Content-Type":"application/json"},...n===void 0?{}:{body:JSON.stringify(n)}});if(!o.ok)throw new Error(`Dataset request failed (${o.status}).`);if(i!==void 0){if(!o.body)throw new Error("Dataset response is empty.");let u=o.body.getReader(),l=[],d=0;try{for(;;){let f=await u.read();if(f.done)break;if(d+=f.value.byteLength,d>i)throw new Error("Dataset recovery exceeds its bounded response.");l.push(f.value)}}finally{await u.cancel()}let m=new Uint8Array(d),p=0;for(let f of l)m.set(f,p),p+=f.length;return JSON.parse(new TextDecoder("utf-8",{fatal:!0}).decode(m))}return o.json()}};var Ht=e.string().trim().min(1).max(500),js=e.string().regex(/^[a-f0-9]{64}$/),Ds=e.object({release:ve,afterId:Ht.optional(),limit:e.number().int().min(1).max(1e4).default(100),view:e.enum(["ids","policy"]).default("ids")}).strict().superRefine((t,a)=>{t.view==="policy"&&t.limit>100&&a.addIssue({code:"custom",path:["limit"],message:"Policy previews are bounded to 100 tasks."})}),Mr=e.object({id:Ve.shape.id,split:la}).strict(),Hs=Mr.extend({input:e.record(e.string(),e.unknown()),policyVisibleContext:e.record(e.string(),e.unknown()),artifacts:e.array(e.object({id:Ht,path:e.string(),mediaType:e.string(),sizeBytes:e.number().int().nonnegative()}).strict()).max(1e3)}).strict(),Ep=e.object({schemaVersion:e.literal("openpond.datasetPopulationPage.v1"),teamId:Ht,release:ve,view:Ds.shape.view,taskCount:e.number().int().nonnegative(),items:e.array(e.union([Mr,Hs])).max(1e4),graders:e.array(_a).max(1e3),nextCursor:Ht.nullable(),contentHash:js}).strict().superRefine((t,a)=>{t.view==="policy"&&t.items.length>100&&a.addIssue({code:"custom",message:"Policy preview exceeded its task bound."}),t.items.some(r=>"input"in r!=(t.view==="policy"))&&a.addIssue({code:"custom",message:"Dataset task view differs from the requested projection."})});async function Op(t,a){let[r,n]=a,s=G(t,"team"),i=Ea(t);if(!s||!i||!r||a.length>2||!["upload","read","list","validate","publish"].includes(r))throw new Error("usage: datasets <upload|read|list|validate|publish> [folder|id] --team <id> --api-base-url <origin> [--operation-id <id>] [--expected-revision <n>] [--publish] [--project <id>]");let o=await Ia(),u=new at({teamId:s,baseUrl:i,apiKey:await Pa(o,Aa(o))}),l=G(t,"operationId"),d;if(r==="list"){if(n)throw new Error("List does not accept a dataset id.");d=await u.list({cursor:G(t,"cursor")||void 0})}else{if(!n)throw new Error(`${r} requires a ${r==="upload"?"folder":"dataset id"}.`);if(r==="read")d=await u.get(n);else if(r==="upload"){if(!l||l.length>220)throw new Error("Upload requires a stable --operation-id of at most 220 characters. Reuse it after an uncertain response.");let m=G(t,"expectedRevision"),p=m?Number(m):0;if(!Number.isSafeInteger(p)||p<0)throw new Error("Expected revision must be a nonnegative integer.");let f=await xa({directory:n,teamId:s,expectedRevision:p,datasetId:G(t,"datasetId")||void 0}),v=na({workspace:f.workspace,preparation:null,adapterId:"openpond-hosted-taskset-authoring-v1",now:f.workspace.draft.updatedAt}),k=await u.save({operationId:`${l}:save`,expectedRevision:p,workspace:f.workspace,...G(t,"project")?{originProjectId:G(t,"project")}:{}}),b=await u.get(k.datasetId);if(b.workspace.draft.status==="draft"){let P=await u.validate(k.datasetId,k.revision);if(P.workspaceHash!==f.workspace.contentHash||P.packageHash!==v.contentHash)throw new Error("Hosted validation differs from the captured folder bytes.")}else if(b.publication?.packageHash!==v.contentHash)throw new Error("This dataset was changed after the upload receipt. Read the current version before continuing.");let R=oa(t.publish)?await u.publish(k.datasetId,{operationId:`${l}:publish`,expectedRevision:k.revision,workspaceHash:k.workspace.contentHash,packageHash:v.contentHash}):k;d={teamId:s,datasetId:R.datasetId,revision:R.revision,status:R.workspace.draft.status,operationId:l,capturedBytes:f.capturedBytes,sourceHash:f.sourceHash,sourceFiles:f.sourceFiles,workspaceHash:k.workspace.contentHash,packageHash:v.contentHash,publication:R.publication}}else{let m=Number(G(t,"expectedRevision"));if(!Number.isSafeInteger(m)||m<=0)throw new Error(`${r} requires --expected-revision with the retained dataset revision.`);if(r==="validate")d=await u.validate(n,m);else{if(!l)throw new Error("Publish requires a stable --operation-id.");let p=G(t,"workspaceHash"),f=G(t,"packageHash");if(!p||!f)throw new Error("Publish requires --workspace-hash and --package-hash from the retained validation receipt. Keep these pins and the operation id unchanged on retry.");d=await u.publish(n,{operationId:l,expectedRevision:m,workspaceHash:p,packageHash:f})}}}console.log(JSON.stringify(d,null,2))}c(Op,"runDatasetsCommand");export{Op as runDatasetsCommand};

package/dist/chunks/desktop-test-DI76HKS7.js

@@ -0,0 +1,3 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{u as f}from"./chunk-B3O2GAQH.js";import"./chunk-65BW2QXY.js";import"./chunk-BSHAIAXY.js";import{a as c}from"./chunk-OI2N2636.js";import"./chunk-4S4WH65X.js";import"./chunk-XWPC3AN4.js";import{c as p,f as u}from"./chunk-3M53YXEI.js";import"./chunk-OGPHXXCD.js";import"./chunk-Z2BYC6TP.js";import"./chunk-ARJUNUH6.js";import"./chunk-DXAZUJPA.js";import"./chunk-GLUWATL5.js";import"./chunk-3QC2DDQ5.js";import"./chunk-Z3D4C7BG.js";import"./chunk-LNEOLOK2.js";import"./chunk-Z6ZR5O3J.js";import"./chunk-ALZRXBEC.js";import"./chunk-MTJNKRXL.js";import"./chunk-HZP5U2AA.js";import"./chunk-ES2ISFJC.js";import"./chunk-H7IWJN7L.js";import{a as r}from"./chunk-FTQLQJQV.js";import d from"node:path";import{access as v}from"node:fs/promises";import{constants as C}from"node:fs";import{createRequire as P}from"node:module";var l=d.join("scripts","desktop-harness.ts");async function $(n,t){let o=await j({options:n,rest:t}),e=await f(o.command,o.args,{cwd:o.cwd,inherit:!0,timeoutMs:0});if(e.code!==0)throw new m(e.code)}r($,"runDesktopTestCommand");async function j(n){let t=n.options,o=n.rest,e=o[0];if(e!=="run"&&e!=="attach")throw new c(D());let a=o.slice(1);if(a.length===0)throw new c("usage: openpond desktop-test run <scenario...> [options]");let g=p(t,"cwd")||n.cwd||process.cwd(),w=await O(g),k=(n.env??process.env).OPENPOND_NODE_BINARY?.trim()||process.execPath,s=[P(import.meta.url).resolve("tsx/cli"),l,"run",...a],h=x(t,e);return h&&s.push(`--${h}`),i(s,"--app",t,"app"),i(s,"--server",t,"server"),i(s,"--token",t,"token"),i(s,"--token-file",t,"tokenFile"),i(s,"--devtools-port",t,"devtoolsPort"),i(s,"--artifacts-dir",t,"artifactsDir"),H(s,t),i(s,"--grep",t,"grep"),i(s,"--timeout-ms",t,"timeoutMs"),u(t.keepHome)&&s.push("--keep-home"),{command:k,args:s,cwd:w}}r(j,"buildDesktopHarnessInvocation");async function O(n){let t=d.resolve(n);for(;;){let o=d.join(t,l);if(await R(o))return t;let e=d.dirname(t);if(e===t)throw new c(`Could not find ${l}. Run this command from the OpenPond source checkout or pass --cwd <repo>.`);t=e}}r(O,"resolveDesktopHarnessRepoRoot");function x(n,t){let o=t==="attach"?"attach":null;for(let e of["isolated","attach","packaged","none"])if(u(n[e])){if(o&&o!==e)throw new c("Choose only one desktop harness launch mode: --isolated, --attach, --packaged, or --none.");o=e}return o}r(x,"resolveLaunchMode");function i(n,t,o,e){let a=p(o,e);a&&n.push(t,a)}r(i,"appendStringFlag");function H(n,t){let o=p(t,"json"),e=p(t,"jsonPath");if(o&&y(o))throw new c("harness --json requires a report path. Use --json <path> or --json-path <path>.");if(o&&e&&o!==e)throw new c("Use only one JSON report path: --json <path> or --json-path <path>.");let a=o||e;a&&n.push("--json",a)}r(H,"appendJsonFlag");function y(n){return/^(true|false|1|0|yes|no)$/i.test(n)}r(y,"isBooleanLiteral");async function R(n){try{return await v(n,C.R_OK),!0}catch{return!1}}r(R,"fileExists");function D(){return["usage: openpond desktop-test run <scenario...> [options]","       openpond desktop-test attach <scenario...> [options]","","Options include --isolated, --attach, --packaged, --none, --app <path>,","--server <url>, --token <token>, --token-file <path>, --devtools-port <port>, --artifacts-dir <path>,","--json <path>, --json-path <path>, --grep <pattern>, --timeout-ms <ms>,","--keep-home, and --cwd <repo>."].join(`
+`)}r(D,"desktopHarnessCliUsage");var m=class extends Error{static{r(this,"HarnessCommandFailedError")}exitCode;constructor(t){let o=typeof t=="number"&&t>0?t:1;super(`desktop harness failed with exit code ${o}`),this.name="HarnessCommandFailedError",this.exitCode=o}};export{j as buildDesktopHarnessInvocation,O as resolveDesktopHarnessRepoRoot,$ as runDesktopTestCommand};

package/dist/chunks/dist-6YP37XI5.js

@@ -0,0 +1,2 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{A as D,B as E,C as F,D as G,E as H,F as I,G as J,H as K,I as L,J as M,K as N,L as O,M as P,N as Q,O as R,P as S,Q as T,R as U,S as V,T as W,U as X,V as Y,W as Z,a as d,b as e,c as f,d as g,e as h,f as i,g as j,h as k,i as l,j as m,k as n,l as o,m as p,n as q,o as r,p as s,q as t,r as u,s as v,t as w,u as x,v as y,w as z,x as A,y as B,z as C}from"./chunk-KRC2S5QF.js";import{va as a,wa as b,xa as c}from"./chunk-Z6ZR5O3J.js";import"./chunk-HZP5U2AA.js";import"./chunk-ES2ISFJC.js";import"./chunk-FTQLQJQV.js";export{l as AGENT_PROTOCOL_VERSION,m as AGENT_RPC_METHODS,Q as AgentCheckpointSchema,P as AgentEffectiveSurfaceSchema,i as AgentEventNameSchema,M as AgentHostStorageClient,t as AgentJsonRpcDispatcher,r as AgentProtocolEnvelopeSchema,u as AgentRpcClient,j as CanonicalAgentEventSchema,v as ExperimentEnvironmentParamsSchema,I as HOST_STORAGE_CONTRACT_VERSION,y as HarnessReviewStorageParamsSchema,L as HostStorageCapabilitySchema,K as HostStorageRequestSchema,J as HostStorageScopeSchema,A as HostedOutputBeginParamsSchema,B as HostedOutputChunkParamsSchema,C as HostedOutputCompleteParamsSchema,z as HostedOutputIdentitySchema,E as HostedOutputSaveSandboxFileParamsSchema,F as HostedSandboxActionSchema,D as HostedSandboxOutputIdentitySchema,G as HostedSandboxRequestParamsSchema,H as HostedToolAuthorizationParamsSchema,s as InitializeParamsSchema,q as JsonRpcErrorSchema,o as JsonRpcNotificationSchema,n as JsonRpcRequestSchema,p as JsonRpcSuccessSchema,x as RefinerStorageActionSchema,w as TaskInboxStorageParamsSchema,Z as TaskSerialExecutor,Y as TaskSignals,f as agentCompactionDecision,k as canonicalEventHash,e as canonicalHash,d as canonicalJson,S as checkpointHash,O as createAgentRuntimeService,U as createAgentToolCatalog,W as createAgentToolCatalogProjection,R as effectiveSurfaceHash,V as executeAgentTool,X as executeProjectedAgentTool,T as materializeAgentPrompt,a as providerRoundSequence,g as runAgentCompaction,h as runAgentCompactionProgram,N as runAgentJsonlServer,c as runProviderRound,b as runProviderRoundLoop};

package/dist/chunks/experiments-Z3S35BYN.js

@@ -0,0 +1,2 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{b as D,c as K}from"./chunk-HY2Q7EDK.js";import{a as T,c as $}from"./chunk-6XF4GI35.js";import"./chunk-B3O2GAQH.js";import{c as _}from"./chunk-65BW2QXY.js";import{c as N,f as O}from"./chunk-BSHAIAXY.js";import"./chunk-OI2N2636.js";import"./chunk-4S4WH65X.js";import"./chunk-XWPC3AN4.js";import{c as i}from"./chunk-3M53YXEI.js";import"./chunk-NM2GYDPA.js";import"./chunk-6MI4KKWF.js";import"./chunk-OMM4ZO7E.js";import"./chunk-OGPHXXCD.js";import"./chunk-Z2BYC6TP.js";import{g as H,h as q,i as b,j as C,k as A}from"./chunk-ARJUNUH6.js";import{d as P}from"./chunk-DXAZUJPA.js";import{b as U}from"./chunk-GLUWATL5.js";import"./chunk-3QC2DDQ5.js";import"./chunk-Z3D4C7BG.js";import{Db as L}from"./chunk-LNEOLOK2.js";import"./chunk-Z6ZR5O3J.js";import"./chunk-6FA3GG5B.js";import"./chunk-SDO4FC4Q.js";import"./chunk-IR3YJWPW.js";import"./chunk-ALZRXBEC.js";import"./chunk-MTJNKRXL.js";import{l as R}from"./chunk-HZP5U2AA.js";import{b as c}from"./chunk-ES2ISFJC.js";import"./chunk-H7IWJN7L.js";import{a as p}from"./chunk-FTQLQJQV.js";import{readFile as y,stat as v}from"node:fs/promises";var g=c.string().trim().min(1).max(500),j=c.string().regex(/^[a-f0-9]{64}$/),J=c.object({schemaVersion:c.literal("openpond.experimentCaseInspection.v1"),teamId:g,executionId:g,manifestHash:j,receiptId:g,taskId:g,seed:c.string().min(1),input:c.record(c.string(),c.unknown()).nullable(),output:c.unknown().nullable(),error:c.string().nullable(),events:c.array(c.record(c.string(),c.unknown())).max(25),nextEventCursor:g.nullable(),eventCount:c.number().int().nonnegative()}).strict(),G=J.extend({contentHash:j}).strict(),k=class{constructor(d){this.options=d;let e=new URL(d.baseUrl);if(!["http:","https:"].includes(e.protocol)||e.username||e.password||e.search||e.hash||!d.apiKey.trim()||!d.teamId.trim())throw new Error("A clean API origin and workspace credentials are required.");this.baseUrl=e.toString().replace(/\/+$/,"")}options;static{p(this,"OpenPondExperimentInspectionClient")}baseUrl;async case(d,e,t={}){let x=new URLSearchParams(t.afterId?{afterId:g.parse(t.afterId)}:{}),m=await(this.options.fetch??fetch)(`${this.baseUrl}/v1/experiments/${encodeURIComponent(g.parse(d))}/cases/${encodeURIComponent(g.parse(e))}?${x}`,{signal:t.signal,redirect:"error",headers:{Authorization:`Bearer ${this.options.apiKey}`,"X-OpenPond-Team-Id":this.options.teamId,Accept:"application/json"}}),E=await m.json();if(!m.ok)throw new Error(c.object({message:c.string()}).parse(E).message);let n=G.parse(E),{contentHash:o,...a}=n;if(R(a)!==o||n.teamId!==this.options.teamId||n.executionId!==d||n.receiptId!==e||t.manifestHash&&n.manifestHash!==t.manifestHash||n.events.length>n.eventCount)throw new Error("Case inspection differs from its requested workspace, execution or retained content.");return n}};import{readFile as z,stat as B}from"node:fs/promises";async function F(r,d){let[e,t,x]=d,m=i(r,"team");if(r.revision!==void 0)throw new Error("A local Experiment is one immutable run; read it by id rather than a saved configuration revision.");if(e!=="read"&&r.contentHash!==void 0)throw new Error("An exact configuration hash requires the local read action.");if(!m||!e||d.length>(e==="compare"?3:2))throw new Error("Local Experiments require an action and --team; use --server-url for an existing local server.");let E=i(r,"serverUrl")||process.env.OPENPOND_LOCAL_API_URL||T,n=new URL(E);if(n.protocol!=="http:"||!["localhost","127.0.0.1"].includes(n.hostname)||n.username||n.password||n.search||n.hash||n.pathname!=="/")throw new Error("Local Experiments require an HTTP loopback server origin.");let o=await $(n.origin);async function a(u,w){let s=await o(new URL("/v1/local-experiments",n),{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({teamId:m,action:u,payload:w})}),l=await s.json();if(!s.ok)throw new Error(typeof l.error=="string"?l.error:`Local Experiment request failed (${s.status}).`);return l}p(a,"command");async function h(){let u=i(r,"inputFile");if(!u||(await B(u)).size>67108864)throw new Error("Provide a bounded --input-file with exact local configuration and retained package bytes.");return JSON.parse(await z(u,"utf8"))}p(h,"input");let f;if(e==="prepare-harness"){if(t)throw new Error("Local Profile preparation accepts --input-file rather than an id.");f=await a("prepareHarness",await h())}else if(e==="run"){if(t)throw new Error("Local Run accepts reviewed configuration through --input-file rather than an id.");let u=await h();f=await a(u.package?"run":"runFromRelease",u)}else if(e==="list"){if(t)throw new Error("Local List does not accept an id.");let u=i(r,"status"),w=i(r,"limit"),s=i(r,"project"),l=i(r,"afterId"),I=i(r,"datasetHash"),S=i(r,"search");f=await a("list",{...u?{status:u}:{},...s?{projectId:s}:{},...I?{datasetHash:I}:{},...S?{search:S}:{},...l?{afterId:l}:{},...w?{limit:Number(w)}:{}})}else{if(!t)throw new Error(`${e} requires a local Experiment or scoring pass id.`);let u=i(r,"afterId"),w=i(r,"limit");if(e==="duplicate"){let s=i(r,"operationId");if(!s)throw new Error("Duplicate requires --operation-id for safe replay.");let l=D.parse(await a("read",{id:t})),I=b.parse({...l.configuration,operationId:s,request:{...l.configuration.request,operationId:s},sourceExperimentId:l.id});f=await a("runFromRelease",{configuration:I,expectedPackageHash:l.packageHash})}else if(e==="passes")f=await a("passes",{executionId:t,...u?{afterId:u}:{},...w?{limit:Number(w)}:{}});else if(e==="case"){let s=i(r,"receiptId"),l=i(r,"afterSequence");if(!s)throw new Error("Local case inspection requires --receipt-id from the retained execution.");f=await a("case",{id:t,receiptId:s,...l?{afterSequence:Number(l)}:{},...w?{limit:Number(w)}:{}})}else if(e==="score"){let s=await h();if(s.execution?.id!==t)throw new Error("Local scoring input belongs to a different retained execution.");f=await a("score",s)}else if(e==="compare"){if(!x)throw new Error("Local Compare requires baseline and candidate execution ids.");let s=K.parse(await a("compare",{baselineId:t,candidateId:x}));f={...s,comparison:L(s.baseline,s.candidate)}}else if(e==="read"){let s=i(r,"contentHash");f=await a("read",{id:t,...s?{configurationHash:s}:{}})}else if(["status","cancel","result","pass"].includes(e))f=await a(e,{id:t});else if(e==="cancel-pass")f=await a("cancel",{id:t});else if(e==="pass-result")f=await a("result",{id:t});else throw new Error(`Local Experiment action is unavailable: ${e}`)}console.log(JSON.stringify(f,null,2))}p(F,"runLocalExperimentsCommand");async function He(r,d){if(r.local===!0||r.local==="true")return F(r,d);if(r.revision!==void 0||r.contentHash!==void 0)throw new Error("Experiments retain their immutable configuration on the run; definition revisions are not selectable.");let[e,t]=d,x=i(r,"team");if(!x||!e||d.length>(e==="compare"?3:2))throw new Error("usage: experiments <prepare-harness|run|read|list|status|cancel|duplicate|score|passes|pass|cancel-pass|pass-result|result|compare|case> [id] [candidate-id] --team <id> [--input-file <path>] [--operation-id <id>]");let m=await P(),E={teamId:x,apiKey:await _(m,O(m)),baseUrl:N(r)??m.apiBaseUrl??U},n=new A(E),o;if(e==="prepare-harness"){let a=i(r,"inputFile");if(!a||t||(await v(a)).size>1048576)throw new Error("Harness preparation requires a bounded --input-file with its released target, model and ceiling.");o=await n.prepareHarness(q.parse(JSON.parse(await y(a,"utf8"))))}else if(e==="run"){let a=i(r,"inputFile");if(!a||t)throw new Error("Run requires --input-file with the reviewed configuration and stable operationId.");if((await v(a)).size>1048576)throw new Error("Experiment input exceeds one MiB.");o=await n.run(b.parse(JSON.parse(await y(a,"utf8"))))}else if(e==="list"){if(t)throw new Error("List does not accept an Experiment id.");let a=i(r,"limit");o=await n.list(H.parse({projectId:i(r,"project")||void 0,datasetHash:i(r,"datasetHash")||void 0,search:i(r,"search")||void 0,status:i(r,"status")||void 0,afterId:i(r,"afterId")||void 0,...a?{limit:Number(a)}:{}}))}else{if(!t)throw new Error(`${e} requires an id.`);if(e==="read")o=await n.get(t);else if(e==="status")o=await n.get(t);else if(e==="cancel")o=await n.cancel(t);else if(e==="duplicate"){let a=i(r,"operationId");if(!a)throw new Error("Duplicate requires a stable --operation-id for the new Experiment.");o=await n.duplicate(t,a)}else if(e==="score"){let a=i(r,"inputFile");if(!a||(await v(a)).size>1048576)throw new Error("Score requires --input-file containing an exact execution reference, grader releases and explicit ceiling, within one MiB.");let h=C.parse(JSON.parse(await y(a,"utf8")));if(h.execution.id!==t)throw new Error("Scoring input belongs to a different execution.");o=await n.score(h)}else if(e==="passes")o=await n.scoringPasses(t,{afterId:i(r,"afterId")||void 0});else if(e==="pass")o=await n.scoringPass(t);else if(e==="cancel-pass")o=await n.cancelScoringPass(t);else if(e==="pass-result")o=await n.scoringResult(t);else if(e==="result")o=await n.result(t);else if(e==="case"){let a=i(r,"receiptId");if(!a)throw new Error("Case inspection requires --receipt-id from the retained Experiment.");let h=await n.get(t);o=await new k(E).case(t,a,{manifestHash:h.manifest.contentHash,afterId:i(r,"afterId")||void 0})}else if(e==="compare"){if(!d[2])throw new Error("Compare requires a baseline and candidate execution id.");o=await n.compare(t,d[2])}else throw new Error(`Unknown Experiment action: ${e}`)}console.log(JSON.stringify(o,null,2))}p(He,"runExperimentsCommand");export{He as runExperimentsCommand};

package/dist/chunks/{extension-7GYFAHRP.js → extension-JEUZZJ5X.js}

@@ -1,4 +1,4 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
-import{a as se}from"./chunk-4F2Q4CFS.js";import"./chunk-BX4J2VDU.js";import{f as G}from"./chunk-3M53YXEI.js";import"./chunk-ZQWXPDCB.js";import"./chunk-6MI4KKWF.js";import"./chunk-TPMXLA5Y.js";import"./chunk-KIGN4FI6.js";import"./chunk-JEVA7YQL.js";import"./chunk-22UARBPW.js";import{a as T,x as D}from"./chunk-ZG7QX66E.js";import"./chunk-V62BHD5G.js";import"./chunk-Z2BYC6TP.js";import"./chunk-DXAZUJPA.js";import"./chunk-GLUWATL5.js";import"./chunk-TPOW52DO.js";import"./chunk-QUNRWDVO.js";import"./chunk-EAPFMACH.js";import"./chunk-6FA3GG5B.js";import"./chunk-SDO4FC4Q.js";import"./chunk-IR3YJWPW.js";import{f as N}from"./chunk-ALZRXBEC.js";import"./chunk-MTJNKRXL.js";import"./chunk-HZP5U2AA.js";import"./chunk-ES2ISFJC.js";import{f as ne,h as z,p as B,r as oe}from"./chunk-H7IWJN7L.js";import{a as r}from"./chunk-FTQLQJQV.js";var u=class extends Error{static{r(this,"GithubExtensionError")}code;status;constructor(t,o){super(t),this.name="GithubExtensionError",this.code=o.code,this.status=o.status??400}};import{createHash as ce}from"node:crypto";import J from"node:path";var ie="HEAD",ae=64,de=512,le=20*1024*1024,K=5*1024*1024,me=8,Ue=/^[a-z0-9]+(?:-[a-z0-9]+)*$/,pe=/^[A-Za-z0-9_.-]+$/,ue=new Set(["agents","assets","references","scripts"]);function Se(e={}){let t=e.fetch??fetch,o=e.githubToken?.trim()||process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()||null;return{async resolve(n){let s=await qe(n,t,o);return{preview:await Te(s,t,o),files:ge(s)}},async download(n,s){await _e({resolution:n,fetchImpl:t,githubToken:o,writeFile:s})}}}r(Se,"createGithubSourceClient");function I(e){let t=e.trim(),o="",n="";if(/^(?:https?:\/\/)?github\.com\//i.test(t)){let d=new URL(t.startsWith("http")?t:`https://${t}`);if(d.hostname.toLowerCase()!=="github.com")throw j(e);let a=d.pathname.replace(/^\/+|\/+$/g,"").split("/");if(a.length!==2)throw j(e);[o="",n=""]=a}else{let a=t.replace(/^github:/i,"").replace(/^\/+|\/+$/g,"").split("/");if(a.length!==2)throw j(e);[o="",n=""]=a}if(n=n.replace(/\.git$/i,""),!pe.test(o)||!pe.test(n))throw j(e);let s=o.toLowerCase(),i=n.toLowerCase();return{id:`github:${s}/${i}`,owner:s,repo:i,repositoryUrl:`https://github.com/${s}/${i}`}}r(I,"parseGithubExtensionSource");async function qe(e,t,o){let n=I(e.source),s=e.ref?.trim()||ie,i=await H(t,o,`/repos/${n.owner}/${n.repo}`),d=s===ie?i.default_branch?.trim()||"main":s,a=await H(t,o,`/repos/${n.owner}/${n.repo}/commits/${encodeURIComponent(d)}`),b=a.sha?.trim(),f=a.commit?.tree?.sha?.trim();if(!b||!f)throw new u("GitHub returned an incomplete commit response.",{code:"github_invalid_commit",status:502});let y=await H(t,o,`/repos/${n.owner}/${n.repo}/git/trees/${f}?recursive=1`);if(y.truncated)throw new u("The GitHub repository tree is too large to install safely.",{code:"github_tree_truncated"});let w=(y.tree??[]).filter(ze),x=Le(w);if(x.length===0)throw new u("No skills found. Add SKILL.md at the repository root or use a standard agent skills directory.",{code:"extension_no_skills"});if(x.length>ae)throw new u(`Extension contains more than ${ae} skills.`,{code:"extension_too_many_skills"});Ge(x);let A=w.find(m=>m.type==="blob"&&/^readme(?:\.[^/]+)?$/i.test(m.path))??null;return{identity:n,requestedRef:s,resolvedCommit:b,tree:w,skillPackages:x,readme:A}}r(qe,"resolveSource");async function Te(e,t,o){let n=await xe(e.skillPackages,me,async a=>{let b=await Fe(e,a.entry,t,o);return je(a,b)}),s=De(n.map(a=>a.name));for(let a of n)s.has(a.name)&&(a.validationStatus="error",a.validationMessages=[...a.validationMessages,`Duplicate skill name: ${a.name}`]);let i=n.flatMap(a=>a.validationMessages.map(b=>`${a.relativePath}: ${b}`)),d=ge(e);return{...e.identity,source:"github",requestedRef:e.requestedRef,resolvedCommit:e.resolvedCommit,sourcePath:null,readmePath:e.readme?.path??null,packageHash:Ne(d),skills:n.sort((a,b)=>a.name.localeCompare(b.name)),validationStatus:i.length===0?"valid":"error",validationMessages:i}}r(Te,"buildPreview");function je(e,t){let o=T(t),n=e.root==="."?null:J.posix.basename(e.root),s=o.name??n??"invalid-skill",i=[...o.messages];Ue.test(s)||i.push("Skill name must be lowercase kebab-case."),n&&s!==n&&i.push(`Skill name must match its directory name (${n}).`);let d=e.files.filter(a=>a.path!==e.entry.path).map(a=>Be(e.root,a.path)).sort();return{name:s,description:o.description??"",relativePath:e.root==="."?"SKILL.md":`${e.root}/SKILL.md`,sourcePath:"",charCount:t.length,sourceHash:ce("sha256").update(t).digest("hex"),resourceFiles:d,validationStatus:i.length===0?"valid":"error",validationMessages:[...new Set(i)]}}r(je,"previewSkill");function Le(e){let t=[],o=e.find(a=>a.type==="blob"&&a.path==="SKILL.md");o&&t.push({root:".",entry:o});let n=e.filter(a=>a.type==="blob"&&a.path.endsWith("/SKILL.md")),s=n.filter(a=>Me(a.path)),i=s.length>0?s:n,d=new Set(i.map(a=>J.posix.dirname(a.path)));for(let a of i){let b=J.posix.dirname(a.path);[...d].some(f=>f!==b&&b.startsWith(`${f}/`))||t.push({root:b,entry:a})}return t.map(({root:a,entry:b})=>{let f=e.filter(x=>{if(x.type!=="blob")return!1;if(a!==".")return x.path.startsWith(`${a}/`);if(x.path==="SKILL.md")return!0;let A=x.path.split("/",1)[0]??"";return ue.has(A)}),y=e.find(x=>x.type!=="blob"&&x.type!=="tree"&&(a==="."?x.path==="SKILL.md"||ue.has(x.path.split("/",1)[0]??""):x.path.startsWith(`${a}/`))),w=f.find(x=>x.mode==="120000");if(y||w)throw new u(`Skill package ${a} contains a symlink or submodule.`,{code:"extension_unsafe_entry"});return{root:a,entry:b,files:f}})}r(Le,"discoverSkillPackages");function Me(e){let t=e.split("/");if(t.at(-1)!=="SKILL.md")return!1;let o=t.slice(0,-1);if(o.length<2)return!1;let n=o.lastIndexOf("skills");if(n<0||n>2)return!1;let s=o.slice(0,n),i=o.slice(n+1);if(i.length<1||i.length>2)return!1;if(n===0)return!0;let d=s[0]??"";return d.startsWith(".")||d==="agent"||d==="data"}r(Me,"isStandardAgentSkillsPath");function ge(e){let t=new Map;e.readme&&t.set(e.readme.path,e.readme);for(let o of e.skillPackages)for(let n of o.files)t.set(n.path,n);return[...t.values()].sort((o,n)=>o.path.localeCompare(n.path))}r(ge,"filesToDownload");async function _e(e){let t=0;await xe(e.resolution.files,me,async o=>{let n=await be({owner:e.resolution.preview.owner,repo:e.resolution.preview.repo,commit:e.resolution.preview.resolvedCommit,file:o,fetchImpl:e.fetchImpl,githubToken:e.githubToken});if(t+=n.byteLength,t>le)throw new u("Extension download exceeds the maximum allowed size.",{code:"extension_too_large"});await e.writeFile(o.path,n,o.mode==="100755")})}r(_e,"downloadFiles");async function Fe(e,t,o,n){let s=await be({owner:e.identity.owner,repo:e.identity.repo,commit:e.resolvedCommit,file:t,fetchImpl:o,githubToken:n});return new TextDecoder("utf-8",{fatal:!0}).decode(s)}r(Fe,"downloadText");async function be(e){let t=e.file.path.split("/").map(encodeURIComponent).join("/"),o=`https://raw.githubusercontent.com/${e.owner}/${e.repo}/${e.commit}/${t}`,n=await e.fetchImpl(o,{headers:he(e.githubToken,"application/vnd.github.raw"),redirect:"follow"});if(!n.ok)throw new u(`GitHub file download failed (${n.status}): ${e.file.path}`,{code:"github_download_failed",status:n.status});let s=Number(n.headers.get("content-length"));if(Number.isFinite(s)&&s>K)throw new u(`Extension file is too large: ${e.file.path}`,{code:"extension_file_too_large"});let i=new Uint8Array(await n.arrayBuffer());if(i.byteLength>K)throw new u(`Extension file is too large: ${e.file.path}`,{code:"extension_file_too_large"});return i}r(be,"downloadBytes");async function H(e,t,o){let n=await e(`https://api.github.com${o}`,{headers:he(t,"application/vnd.github+json")});if(!n.ok){let s=await n.json().catch(()=>null),i=typeof s?.message=="string"?`: ${s.message}`:"";throw new u(`GitHub request failed (${n.status})${i}`,{code:n.status===404?"github_repository_not_found":"github_request_failed",status:n.status})}return await n.json()}r(H,"githubJson");function he(e,t){let o=new Headers({Accept:t,"User-Agent":"openpond-extension-installer","X-GitHub-Api-Version":"2022-11-28"});return e&&o.set("Authorization",`Bearer ${e}`),o}r(he,"githubHeaders");function Ge(e){let t=new Map;for(let n of e)for(let s of n.files)t.set(s.path,s);if(t.size>de)throw new u(`Extension contains more than ${de} skill files.`,{code:"extension_too_many_files"});let o=0;for(let n of t.values()){if((n.size??0)>K)throw new u(`Extension file is too large: ${n.path}`,{code:"extension_file_too_large"});o+=n.size??0}if(o>le)throw new u("Extension exceeds the maximum allowed size.",{code:"extension_too_large"})}r(Ge,"validateDownloadLimits");function ze(e){if(!e||typeof e!="object")return!1;let t=e;return typeof t.path=="string"&&!t.path.startsWith("/")&&!t.path.split("/").includes("..")&&typeof t.mode=="string"&&(t.type==="blob"||t.type==="tree"||t.type==="commit")&&typeof t.sha=="string"}r(ze,"validTreeEntry");function Ne(e){let t=ce("sha256");for(let o of e)t.update(`${o.path}\0${o.sha}\0${o.size??""}
+import{a as se}from"./chunk-HY2Q7EDK.js";import"./chunk-BX4J2VDU.js";import{f as G}from"./chunk-3M53YXEI.js";import"./chunk-NM2GYDPA.js";import"./chunk-6MI4KKWF.js";import"./chunk-OMM4ZO7E.js";import"./chunk-KIGN4FI6.js";import"./chunk-JEVA7YQL.js";import"./chunk-22UARBPW.js";import{a as T,x as D}from"./chunk-CR6CDOKS.js";import"./chunk-V62BHD5G.js";import"./chunk-Z2BYC6TP.js";import"./chunk-DXAZUJPA.js";import"./chunk-GLUWATL5.js";import"./chunk-LNEOLOK2.js";import"./chunk-Z6ZR5O3J.js";import"./chunk-EAPFMACH.js";import"./chunk-6FA3GG5B.js";import"./chunk-SDO4FC4Q.js";import"./chunk-IR3YJWPW.js";import{f as N}from"./chunk-ALZRXBEC.js";import"./chunk-MTJNKRXL.js";import"./chunk-HZP5U2AA.js";import"./chunk-ES2ISFJC.js";import{f as ne,h as z,p as B,r as oe}from"./chunk-H7IWJN7L.js";import{a as r}from"./chunk-FTQLQJQV.js";var u=class extends Error{static{r(this,"GithubExtensionError")}code;status;constructor(t,o){super(t),this.name="GithubExtensionError",this.code=o.code,this.status=o.status??400}};import{createHash as ce}from"node:crypto";import J from"node:path";var ie="HEAD",ae=64,de=512,le=20*1024*1024,K=5*1024*1024,me=8,Ue=/^[a-z0-9]+(?:-[a-z0-9]+)*$/,pe=/^[A-Za-z0-9_.-]+$/,ue=new Set(["agents","assets","references","scripts"]);function Se(e={}){let t=e.fetch??fetch,o=e.githubToken?.trim()||process.env.GITHUB_TOKEN?.trim()||process.env.GH_TOKEN?.trim()||null;return{async resolve(n){let s=await qe(n,t,o);return{preview:await Te(s,t,o),files:ge(s)}},async download(n,s){await _e({resolution:n,fetchImpl:t,githubToken:o,writeFile:s})}}}r(Se,"createGithubSourceClient");function I(e){let t=e.trim(),o="",n="";if(/^(?:https?:\/\/)?github\.com\//i.test(t)){let d=new URL(t.startsWith("http")?t:`https://${t}`);if(d.hostname.toLowerCase()!=="github.com")throw j(e);let a=d.pathname.replace(/^\/+|\/+$/g,"").split("/");if(a.length!==2)throw j(e);[o="",n=""]=a}else{let a=t.replace(/^github:/i,"").replace(/^\/+|\/+$/g,"").split("/");if(a.length!==2)throw j(e);[o="",n=""]=a}if(n=n.replace(/\.git$/i,""),!pe.test(o)||!pe.test(n))throw j(e);let s=o.toLowerCase(),i=n.toLowerCase();return{id:`github:${s}/${i}`,owner:s,repo:i,repositoryUrl:`https://github.com/${s}/${i}`}}r(I,"parseGithubExtensionSource");async function qe(e,t,o){let n=I(e.source),s=e.ref?.trim()||ie,i=await H(t,o,`/repos/${n.owner}/${n.repo}`),d=s===ie?i.default_branch?.trim()||"main":s,a=await H(t,o,`/repos/${n.owner}/${n.repo}/commits/${encodeURIComponent(d)}`),b=a.sha?.trim(),f=a.commit?.tree?.sha?.trim();if(!b||!f)throw new u("GitHub returned an incomplete commit response.",{code:"github_invalid_commit",status:502});let y=await H(t,o,`/repos/${n.owner}/${n.repo}/git/trees/${f}?recursive=1`);if(y.truncated)throw new u("The GitHub repository tree is too large to install safely.",{code:"github_tree_truncated"});let w=(y.tree??[]).filter(ze),x=Le(w);if(x.length===0)throw new u("No skills found. Add SKILL.md at the repository root or use a standard agent skills directory.",{code:"extension_no_skills"});if(x.length>ae)throw new u(`Extension contains more than ${ae} skills.`,{code:"extension_too_many_skills"});Ge(x);let A=w.find(m=>m.type==="blob"&&/^readme(?:\.[^/]+)?$/i.test(m.path))??null;return{identity:n,requestedRef:s,resolvedCommit:b,tree:w,skillPackages:x,readme:A}}r(qe,"resolveSource");async function Te(e,t,o){let n=await xe(e.skillPackages,me,async a=>{let b=await Fe(e,a.entry,t,o);return je(a,b)}),s=De(n.map(a=>a.name));for(let a of n)s.has(a.name)&&(a.validationStatus="error",a.validationMessages=[...a.validationMessages,`Duplicate skill name: ${a.name}`]);let i=n.flatMap(a=>a.validationMessages.map(b=>`${a.relativePath}: ${b}`)),d=ge(e);return{...e.identity,source:"github",requestedRef:e.requestedRef,resolvedCommit:e.resolvedCommit,sourcePath:null,readmePath:e.readme?.path??null,packageHash:Ne(d),skills:n.sort((a,b)=>a.name.localeCompare(b.name)),validationStatus:i.length===0?"valid":"error",validationMessages:i}}r(Te,"buildPreview");function je(e,t){let o=T(t),n=e.root==="."?null:J.posix.basename(e.root),s=o.name??n??"invalid-skill",i=[...o.messages];Ue.test(s)||i.push("Skill name must be lowercase kebab-case."),n&&s!==n&&i.push(`Skill name must match its directory name (${n}).`);let d=e.files.filter(a=>a.path!==e.entry.path).map(a=>Be(e.root,a.path)).sort();return{name:s,description:o.description??"",relativePath:e.root==="."?"SKILL.md":`${e.root}/SKILL.md`,sourcePath:"",charCount:t.length,sourceHash:ce("sha256").update(t).digest("hex"),resourceFiles:d,validationStatus:i.length===0?"valid":"error",validationMessages:[...new Set(i)]}}r(je,"previewSkill");function Le(e){let t=[],o=e.find(a=>a.type==="blob"&&a.path==="SKILL.md");o&&t.push({root:".",entry:o});let n=e.filter(a=>a.type==="blob"&&a.path.endsWith("/SKILL.md")),s=n.filter(a=>Me(a.path)),i=s.length>0?s:n,d=new Set(i.map(a=>J.posix.dirname(a.path)));for(let a of i){let b=J.posix.dirname(a.path);[...d].some(f=>f!==b&&b.startsWith(`${f}/`))||t.push({root:b,entry:a})}return t.map(({root:a,entry:b})=>{let f=e.filter(x=>{if(x.type!=="blob")return!1;if(a!==".")return x.path.startsWith(`${a}/`);if(x.path==="SKILL.md")return!0;let A=x.path.split("/",1)[0]??"";return ue.has(A)}),y=e.find(x=>x.type!=="blob"&&x.type!=="tree"&&(a==="."?x.path==="SKILL.md"||ue.has(x.path.split("/",1)[0]??""):x.path.startsWith(`${a}/`))),w=f.find(x=>x.mode==="120000");if(y||w)throw new u(`Skill package ${a} contains a symlink or submodule.`,{code:"extension_unsafe_entry"});return{root:a,entry:b,files:f}})}r(Le,"discoverSkillPackages");function Me(e){let t=e.split("/");if(t.at(-1)!=="SKILL.md")return!1;let o=t.slice(0,-1);if(o.length<2)return!1;let n=o.lastIndexOf("skills");if(n<0||n>2)return!1;let s=o.slice(0,n),i=o.slice(n+1);if(i.length<1||i.length>2)return!1;if(n===0)return!0;let d=s[0]??"";return d.startsWith(".")||d==="agent"||d==="data"}r(Me,"isStandardAgentSkillsPath");function ge(e){let t=new Map;e.readme&&t.set(e.readme.path,e.readme);for(let o of e.skillPackages)for(let n of o.files)t.set(n.path,n);return[...t.values()].sort((o,n)=>o.path.localeCompare(n.path))}r(ge,"filesToDownload");async function _e(e){let t=0;await xe(e.resolution.files,me,async o=>{let n=await be({owner:e.resolution.preview.owner,repo:e.resolution.preview.repo,commit:e.resolution.preview.resolvedCommit,file:o,fetchImpl:e.fetchImpl,githubToken:e.githubToken});if(t+=n.byteLength,t>le)throw new u("Extension download exceeds the maximum allowed size.",{code:"extension_too_large"});await e.writeFile(o.path,n,o.mode==="100755")})}r(_e,"downloadFiles");async function Fe(e,t,o,n){let s=await be({owner:e.identity.owner,repo:e.identity.repo,commit:e.resolvedCommit,file:t,fetchImpl:o,githubToken:n});return new TextDecoder("utf-8",{fatal:!0}).decode(s)}r(Fe,"downloadText");async function be(e){let t=e.file.path.split("/").map(encodeURIComponent).join("/"),o=`https://raw.githubusercontent.com/${e.owner}/${e.repo}/${e.commit}/${t}`,n=await e.fetchImpl(o,{headers:he(e.githubToken,"application/vnd.github.raw"),redirect:"follow"});if(!n.ok)throw new u(`GitHub file download failed (${n.status}): ${e.file.path}`,{code:"github_download_failed",status:n.status});let s=Number(n.headers.get("content-length"));if(Number.isFinite(s)&&s>K)throw new u(`Extension file is too large: ${e.file.path}`,{code:"extension_file_too_large"});let i=new Uint8Array(await n.arrayBuffer());if(i.byteLength>K)throw new u(`Extension file is too large: ${e.file.path}`,{code:"extension_file_too_large"});return i}r(be,"downloadBytes");async function H(e,t,o){let n=await e(`https://api.github.com${o}`,{headers:he(t,"application/vnd.github+json")});if(!n.ok){let s=await n.json().catch(()=>null),i=typeof s?.message=="string"?`: ${s.message}`:"";throw new u(`GitHub request failed (${n.status})${i}`,{code:n.status===404?"github_repository_not_found":"github_request_failed",status:n.status})}return await n.json()}r(H,"githubJson");function he(e,t){let o=new Headers({Accept:t,"User-Agent":"openpond-extension-installer","X-GitHub-Api-Version":"2022-11-28"});return e&&o.set("Authorization",`Bearer ${e}`),o}r(he,"githubHeaders");function Ge(e){let t=new Map;for(let n of e)for(let s of n.files)t.set(s.path,s);if(t.size>de)throw new u(`Extension contains more than ${de} skill files.`,{code:"extension_too_many_files"});let o=0;for(let n of t.values()){if((n.size??0)>K)throw new u(`Extension file is too large: ${n.path}`,{code:"extension_file_too_large"});o+=n.size??0}if(o>le)throw new u("Extension exceeds the maximum allowed size.",{code:"extension_too_large"})}r(Ge,"validateDownloadLimits");function ze(e){if(!e||typeof e!="object")return!1;let t=e;return typeof t.path=="string"&&!t.path.startsWith("/")&&!t.path.split("/").includes("..")&&typeof t.mode=="string"&&(t.type==="blob"||t.type==="tree"||t.type==="commit")&&typeof t.sha=="string"}r(ze,"validTreeEntry");function Ne(e){let t=ce("sha256");for(let o of e)t.update(`${o.path}\0${o.sha}\0${o.size??""}
 `);return t.digest("hex")}r(Ne,"hashTree");function Be(e,t){return e==="."?t:t.slice(e.length+1)}r(Be,"relativeSkillPath");function De(e){let t=new Set,o=new Set;for(let n of e)t.has(n)&&o.add(n),t.add(n);return o}r(De,"duplicateValues");async function xe(e,t,o){let n=new Array(e.length),s=0;async function i(){for(;s<e.length;){let d=s;s+=1,n[d]=await o(e[d])}}return r(i,"worker"),await Promise.all(Array.from({length:Math.min(t,e.length)},i)),n}r(xe,"mapConcurrent");function j(e){return new u(`Invalid GitHub extension source: ${e}. Use owner/repo or https://github.com/owner/repo.`,{code:"github_invalid_source"})}r(j,"invalidSource");import{createHash as He,randomUUID as we}from"node:crypto";import{existsSync as v}from"node:fs";import{mkdir as W,readFile as Je,rename as k,rm as E,stat as Ke,writeFile as Re}from"node:fs/promises";import g from"node:path";var M=1,We=15e3;function Oe(e={}){let t=g.resolve(e.home??e.rootPath??ne()),o=g.resolve(e.rootPath??g.join(t,"library","extensions")),n=z(t).database,s=Se({fetch:e.fetch,githubToken:e.githubToken}),i=e.now??(()=>new Date);async function d(){try{let m=await O(t),p=await Promise.all(m.extensions.map(S=>V(o,S)));return Ze(p,await C(e.reservedSkillNames)),{rootPath:o,registryPath:n,extensions:p.sort(Q),error:null}}catch(m){return{rootPath:o,registryPath:n,extensions:[],error:m instanceof Error?m.message:String(m)}}}r(d,"list");async function a(m){let p=await s.resolve(m),S=await O(t),c=S.extensions.find(l=>l.id===p.preview.id)??null;return U(p.preview,S.extensions.filter(l=>l.id!==c?.id),await C(e.reservedSkillNames)),p.preview}r(a,"preview");async function b(m){let p=I(m.source);return Y(o,p.id,async()=>{let S=await O(t);if(S.extensions.some(h=>h.id===p.id))throw new u(`${p.owner}/${p.repo} is already installed.`,{code:"extension_already_installed",status:409});let c=await s.resolve(m);Ie(c.preview),U(c.preview,S.extensions,await C(e.reservedSkillNames));let l=i().toISOString(),R=await fe({rootPath:o,resolution:c,installedAt:l,updatedAt:l,github:s});try{let h=await C(e.reservedSkillNames);return await X(t,i,P=>({...P,extensions:Xe(P,R,h)})),await Pe(o,R.id),R}catch(h){throw await ye(o,R.id),h}})}r(b,"add");async function f(m){let p=I(m.source);return Y(o,p.id,async()=>{let S=await O(t),c=L(S,p.id),l=await s.resolve({source:c.repositoryUrl,ref:m.ref?.trim()||c.requestedRef});if(Ie(l.preview),U(l.preview,S.extensions.filter(h=>h.id!==c.id),await C(e.reservedSkillNames)),c.resolvedCommit===l.preview.resolvedCommit&&c.packageHash===l.preview.packageHash&&c.requestedRef===l.preview.requestedRef)return V(o,c);let R=await fe({rootPath:o,resolution:l,installedAt:c.installedAt,updatedAt:i().toISOString(),github:s});try{let h=await C(e.reservedSkillNames);return await X(t,i,P=>({...P,extensions:Ye(P,R,h)})),await Pe(o,R.id),R}catch(h){throw await ye(o,R.id),h}})}r(f,"update");async function y(){let m=await d();if(m.error)throw new u(m.error,{code:"extension_registry_error"});let p={updated:[],unchanged:[],failed:[]};for(let S of m.extensions)try{let c=await f({source:S.repositoryUrl,ref:S.requestedRef});c.resolvedCommit===S.resolvedCommit&&c.packageHash===S.packageHash?p.unchanged.push(c):p.updated.push(c)}catch(c){p.failed.push({id:S.id,error:c instanceof Error?c.message:String(c)})}return p}r(y,"updateAll");async function w(m){let p=I(m),S=await O(t);return V(o,L(S,p.id))}r(w,"inspect");async function x(m){let p=I(m);return Y(o,p.id,async()=>{let S=await O(t),c=L(S,p.id),l=q(o,p.owner,p.repo),R=`${l}.${we()}.remove`;v(l)&&await k(l,R);try{return await X(t,i,h=>({...h,extensions:h.extensions.filter(P=>P.id!==c.id)})),await E(R,{recursive:!0,force:!0}),c}catch(h){throw v(R)&&!v(l)&&await k(R,l),h}})}r(x,"remove");async function A(m){let p=m.trim();if(!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(p))throw new u("Extension skill name must be lowercase kebab-case.",{code:"extension_skill_invalid_name"});let S=await d();if(S.error)throw new u(S.error,{code:"extension_registry_error"});let c=S.extensions.flatMap(te=>te.skills.filter(F=>F.name===p).map(F=>({extension:te,skill:F})));if(c.length===0)throw new u(`Extension skill not found: ${p}`,{code:"extension_skill_not_found",status:404});if(c.length>1)throw new u(`Extension skill name is ambiguous: ${p}`,{code:"extension_skill_conflict",status:409});let l=c[0];if(l.extension.validationStatus!=="valid"||l.skill.validationStatus!=="valid")throw new u(`Extension skill ${p} is not valid.`,{code:"extension_skill_invalid"});let R=$e(l.extension.sourcePath,l.skill.relativePath),h=await Je(R,"utf8"),P=He("sha256").update(h).digest("hex");if(P!==l.skill.sourceHash)throw new u(`Extension skill ${p} changed on disk. Update or reinstall its extension before using it.`,{code:"extension_skill_modified"});let $=T(h);if($.messages.length>0||$.name!==p||!$.description)throw new u(`Extension skill ${p} is not valid. ${$.messages.join(" ")}`.trim(),{code:"extension_skill_invalid"});return{name:p,description:$.description,body:$.body,path:l.skill.relativePath,sourcePath:l.extension.sourcePath,sourceHash:P,charCount:h.length,packagePath:g.dirname(R),resourceFiles:l.skill.resourceFiles}}return r(A,"readSkill"),{rootPath:o,registryPath:n,list:d,preview:a,add:b,update:f,updateAll:y,inspect:w,remove:x,readSkill:A}}r(Oe,"createGithubExtensionManager");async function fe(e){let t=e.resolution.preview,o=q(e.rootPath,t.owner,t.repo),n=`${o}.${we()}.install`,s=Z(e.rootPath,t.id),i=g.join(n,"current");await E(n,{recursive:!0,force:!0}),await E(s,{recursive:!0,force:!0}),await W(i,{recursive:!0,mode:448});try{await e.github.download(e.resolution,async(a,b,f)=>{let y=$e(i,a);await W(g.dirname(y),{recursive:!0,mode:448}),await Re(y,b,{mode:f?448:384})});let d=Ve(t,o,e.installedAt,e.updatedAt);return await Re(g.join(n,"extension.json"),`${JSON.stringify(d,null,2)}
 `,{mode:384}),await W(g.dirname(o),{recursive:!0,mode:448}),v(o)&&await k(o,s),await k(n,o),d}catch(d){throw await E(n,{recursive:!0,force:!0}),v(s)&&!v(o)&&await k(s,o),d}}r(fe,"materializeExtension");function Ve(e,t,o,n){let s=g.join(t,"current");return{...e,sourcePath:s,readmePath:e.readmePath?g.join(s,e.readmePath):null,installedAt:o,updatedAt:n,skills:e.skills.map(i=>({...i,sourcePath:g.join(s,i.relativePath)}))}}r(Ve,"installedExtension");async function Pe(e,t){await E(Z(e,t),{recursive:!0,force:!0})}r(Pe,"finalizeMaterialization");async function ye(e,t){let o=I(t.replace(/^github:/,"")),n=q(e,o.owner,o.repo),s=Z(e,t);await E(n,{recursive:!0,force:!0}),v(s)&&await k(s,n)}r(ye,"rollbackMaterialization");async function V(e,t){let o=q(e,t.owner,t.repo),n=g.join(o,"current"),s=(await Ke(g.join(o,"extension.json")).catch(()=>null))?.isFile()??!1,i=t.validationMessages.filter(d=>d!=="Installed files are missing.");return s||i.push("Installed files are missing."),{...t,sourcePath:n,readmePath:t.readmePath?g.join(n,g.basename(t.readmePath)):null,skills:t.skills.map(d=>({...d,sourcePath:g.join(n,d.relativePath)})),validationStatus:i.length===0?"valid":"error",validationMessages:i}}r(V,"hydrateExtension");function Ie(e){if(e.validationStatus!=="valid")throw new u(`Extension contains invalid skills: ${e.validationMessages.join(" ")}`,{code:"extension_invalid"})}r(Ie,"assertInstallable");function U(e,t,o){let n=new Map;for(let i of o)n.set(i,"a shipped OpenPond skill");for(let i of t)for(let d of i.skills)n.set(d.name,i.id);let s=e.skills.map(i=>({name:i.name,owner:n.get(i.name)})).filter(i=>!!i.owner);if(s.length!==0)throw new u(`Skill name conflict: ${s.map(i=>`${i.name} (${i.owner})`).join(", ")}.`,{code:"extension_skill_conflict",status:409})}r(U,"assertSkillNamesAvailable");function Xe(e,t,o){if(e.extensions.some(n=>n.id===t.id))throw new u(`${t.owner}/${t.repo} is already installed.`,{code:"extension_already_installed",status:409});return U(t,e.extensions,o),[...e.extensions,t].sort(Q)}r(Xe,"appendInstalledExtension");function Ye(e,t,o){return L(e,t.id),U(t,e.extensions.filter(n=>n.id!==t.id),o),e.extensions.map(n=>n.id===t.id?t:n).sort(Q)}r(Ye,"replaceInstalledExtension");function Ze(e,t){let o=new Map;for(let n of t)o.set(n,"built-in");for(let n of e)for(let s of n.skills){let i=o.get(s.name);if(!i){o.set(s.name,n.id);continue}let d=`Skill name conflicts with ${i}: ${s.name}`;s.validationStatus="error",s.validationMessages=[...new Set([...s.validationMessages,d])],n.validationStatus="error",n.validationMessages=[...new Set([...n.validationMessages,d])]}}r(Ze,"markInstalledSkillConflicts");async function C(e){let t=typeof e=="function"?await e():e??[];return[...new Set(t.map(o=>o.trim()).filter(Boolean))]}r(C,"reservedSkillNames");function L(e,t){let o=e.extensions.find(n=>n.id===t);if(o)return o;throw new u(`${t.replace(/^github:/,"")} is not installed.`,{code:"extension_not_installed",status:404})}r(L,"requireInstalled");async function O(e){let t=B(e,"extension_installations","registry")?.value;if(!t)return et();if(t.schemaVersion!==M||!Array.isArray(t.extensions)||!t.extensions.every(ve))throw new Error("Extension registry has an unsupported format.");return Qe(t)}r(O,"readRegistry");async function X(e,t,o){await N(g.join(z(e).runtime,"extension-registry"),async()=>{let n=B(e,"extension_installations","registry"),s=o(await O(e));oe(e,"extension_installations","registry",{...s,schemaVersion:M,updatedAt:t().toISOString()},n?.revision??null)})}r(X,"writeRegistry");function Qe(e){return{schemaVersion:M,updatedAt:typeof e?.updatedAt=="string"?e.updatedAt:null,extensions:Array.isArray(e?.extensions)?e.extensions.filter(ve):[]}}r(Qe,"normalizeRegistry");function et(){return{schemaVersion:M,updatedAt:null,extensions:[]}}r(et,"emptyRegistry");function ve(e){if(!e||typeof e!="object")return!1;let t=e;return t.source==="github"&&typeof t.id=="string"&&typeof t.owner=="string"&&typeof t.repo=="string"&&typeof t.repositoryUrl=="string"&&typeof t.requestedRef=="string"&&typeof t.resolvedCommit=="string"&&Array.isArray(t.skills)}r(ve,"isStoredExtension");function $e(e,t){if(g.isAbsolute(t)||t.split(/[\\/]/).includes(".."))throw new u(`Unsafe extension path: ${t}`,{code:"extension_unsafe_path"});let o=g.resolve(e,...t.split("/")),n=`${g.resolve(e)}${g.sep}`;if(!o.startsWith(n))throw new u(`Unsafe extension path: ${t}`,{code:"extension_unsafe_path"});return o}r($e,"safeDestination");function q(e,t,o){return g.join(e,"github",t,o)}r(q,"extensionDirectory");function Z(e,t){let o=I(t.replace(/^github:/,""));return`${q(e,o.owner,o.repo)}.previous`}r(Z,"backupDirectory");async function Y(e,t,o){let n=t.replace(/[^a-z0-9.-]+/gi,"-");return N(g.join(e,".locks",n),o,We)}r(Y,"withExtensionLock");function Q(e,t){return e.id.localeCompare(t.id)}r(Q,"extensionSort");async function Ln(e,t,o=Oe({reservedSkillNames:r(async()=>{let n=await D();return[...se,...n.skills.map(s=>s.name)]},"reservedSkillNames")})){let n=t[0]?.toLowerCase()||"list",s=G(e.json);if(n==="list"){let i=await o.list();if(i.error)throw new Error(i.error);tt(i.extensions,s);return}if(n==="add"||n==="preview"){let d={source:_(t[1],n),ref:Ce(e.ref)},a=n==="preview"?await o.preview(d):await o.add(d);ee(a,s,n==="preview"?"Preview":"Installed");return}if(n==="inspect"){ee(await o.inspect(_(t[1],n)),s,"Installed");return}if(n==="update"){if(G(e.all)){let a=await o.updateAll();if(s)console.log(JSON.stringify(a,null,2));else{console.log(`Updated ${a.updated.length}; unchanged ${a.unchanged.length}; failed ${a.failed.length}.`);for(let b of a.failed)console.log(`- ${b.id}: ${b.error}`)}a.failed.length>0&&(process.exitCode=1);return}let i=_(t[1],n),d=await o.update({source:i,ref:Ce(e.ref)});ee(d,s,"Updated");return}if(n==="remove"){let i=await o.remove(_(t[1],n));console.log(s?JSON.stringify({removed:i},null,2):`Removed ${i.owner}/${i.repo} and ${i.skills.length} skill(s).`);return}throw new Error("usage: openpond extension <add|preview|list|inspect|update|remove> [owner/repo] [--ref <ref>] [--all] [--json]")}r(Ln,"runOpenPondExtensionCommand");function ee(e,t,o){if(t){console.log(JSON.stringify(e,null,2));return}console.log(`${o} ${e.owner}/${e.repo}@${e.resolvedCommit.slice(0,12)} (${e.requestedRef}).`);for(let n of e.skills){let s=n.resourceFiles.length>0?`, ${n.resourceFiles.length} resource(s)`:"";console.log(`- ${n.name}${s}: ${n.description}`)}}r(ee,"printExtension");function tt(e,t){if(t){console.log(JSON.stringify({extensions:e},null,2));return}if(e.length===0){console.log("No third-party extensions installed.");return}console.log(`Third-party extensions (${e.length}):`);for(let o of e)console.log(`- ${o.owner}/${o.repo}@${o.resolvedCommit.slice(0,12)} \xB7 ${o.skills.length} skill(s) \xB7 ${o.validationStatus}`)}r(tt,"printExtensionList");function _(e,t){let o=e?.trim();if(o)return o;throw new Error(`usage: openpond extension ${t} <owner/repo>`)}r(_,"requiredSource");function Ce(e){return typeof e=="string"&&e.trim()?e.trim():void 0}r(Ce,"optionText");export{Ln as runOpenPondExtensionCommand};

package/dist/chunks/{help-MD7Z72QS.js → help-4F4QGL4C.js}

@@ -1,5 +1,5 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
-import{d as r,f as i,k as p}from"./chunk-AUOMUBLE.js";import"./chunk-3M53YXEI.js";import{a as t}from"./chunk-FTQLQJQV.js";function d(){console.log(m())}t(d,"printHelp");function m(){let n=["OpenPond CLI","","Usage:","  openpond [--no-open] [--hostname HOST] [--port PORT]","  openpond <command> [options] [-- passthrough...]","  openpond --version","","Commands:"];for(let o of i()){let s=o.aliases?.length?` (aliases: ${o.aliases.join(", ")})`:"";n.push(`  ${o.usage}${s}`);for(let e of o.usages??[])n.push(`    ${e}`)}n.push("","Global options:");for(let[o,s]of Object.entries(r).sort(([e],[a])=>e.localeCompare(a))){let e=o.replace(/[A-Z]/g,a=>`-${a.toLowerCase()}`);n.push(s==="boolean"?`  --${e}`:`  --${e} <${s}>`)}return n.push("","Run `openpond <command> --help` for the selected command schema.","Arguments after `--` are passed through without option parsing."),n.join(`
+import{d as r,f as i,k as p}from"./chunk-4S4WH65X.js";import"./chunk-3M53YXEI.js";import{a as t}from"./chunk-FTQLQJQV.js";function d(){console.log(m())}t(d,"printHelp");function m(){let n=["OpenPond CLI","","Usage:","  openpond [--no-open] [--hostname HOST] [--port PORT]","  openpond <command> [options] [-- passthrough...]","  openpond --version","","Commands:"];for(let o of i()){let s=o.aliases?.length?` (aliases: ${o.aliases.join(", ")})`:"";n.push(`  ${o.usage}${s}`);for(let e of o.usages??[])n.push(`    ${e}`)}n.push("","Global options:");for(let[o,s]of Object.entries(r).sort(([e],[a])=>e.localeCompare(a))){let e=o.replace(/[A-Z]/g,a=>`-${a.toLowerCase()}`);n.push(s==="boolean"?`  --${e}`:`  --${e} <${s}>`)}return n.push("","Run `openpond <command> --help` for the selected command schema.","Arguments after `--` are passed through without option parsing."),n.join(`
 `)}t(m,"formatCliHelp");function l(){return["# OpenPond CLI command reference","","<!-- Generated by `pnpm --dir apps/cli docs:commands`; do not edit by hand. -->","","Parsing, aliases, command help, and this reference use the same authoritative registry.","",...i().map(o=>`## ${o.name}
 
 \`\`\`text

package/dist/chunks/hosted-harness-runtime-VZNYNQ6T.js

@@ -0,0 +1,2 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{b as a,c as b}from"./chunk-ANVOHBUV.js";import"./chunk-KRC2S5QF.js";import"./chunk-ZEVARU6J.js";import"./chunk-QID62K65.js";import"./chunk-YF6IDYTS.js";import"./chunk-36RCXSEJ.js";import"./chunk-OQPFFKU6.js";import"./chunk-W5NQ2DI7.js";import"./chunk-DZVVGU6K.js";import"./chunk-4TMC5F2P.js";import"./chunk-NM2GYDPA.js";import"./chunk-6MI4KKWF.js";import"./chunk-L3KS6MOV.js";import"./chunk-OMM4ZO7E.js";import"./chunk-3QC2DDQ5.js";import"./chunk-Z3D4C7BG.js";import"./chunk-LNEOLOK2.js";import"./chunk-Z6ZR5O3J.js";import"./chunk-6FA3GG5B.js";import"./chunk-SDO4FC4Q.js";import"./chunk-IR3YJWPW.js";import"./chunk-ALZRXBEC.js";import"./chunk-MTJNKRXL.js";import"./chunk-HZP5U2AA.js";import"./chunk-ES2ISFJC.js";import"./chunk-H7IWJN7L.js";import"./chunk-FTQLQJQV.js";export{a as loadHostedHarnessRuntime,b as loadHostedHarnessRuntimeForSession};

package/dist/chunks/hosted-profile-compiler-JXLPR7SX.js

@@ -0,0 +1,2 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{a,b,c,d}from"./chunk-RAWEO7SJ.js";import"./chunk-QID62K65.js";import"./chunk-YF6IDYTS.js";import"./chunk-36RCXSEJ.js";import"./chunk-OQPFFKU6.js";import"./chunk-W5NQ2DI7.js";import"./chunk-DZVVGU6K.js";import"./chunk-4TMC5F2P.js";import"./chunk-NM2GYDPA.js";import"./chunk-6MI4KKWF.js";import"./chunk-L3KS6MOV.js";import"./chunk-OMM4ZO7E.js";import"./chunk-3QC2DDQ5.js";import"./chunk-Z3D4C7BG.js";import"./chunk-LNEOLOK2.js";import"./chunk-Z6ZR5O3J.js";import"./chunk-6FA3GG5B.js";import"./chunk-SDO4FC4Q.js";import"./chunk-IR3YJWPW.js";import"./chunk-ALZRXBEC.js";import"./chunk-MTJNKRXL.js";import"./chunk-HZP5U2AA.js";import"./chunk-ES2ISFJC.js";import"./chunk-H7IWJN7L.js";import"./chunk-FTQLQJQV.js";export{a as compileHostedProfileRelease,b as runHostedProfileCompilerCli,c as runHostedProfileEvaluationCli,d as runHostedProfileInspectionCli};

package/dist/chunks/{hosted-profile-evaluation-control-VV2NXFBE.js → hosted-profile-evaluation-control-Q54YXXIM.js}

@@ -1,2 +1,2 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
-import{a as m,b as c}from"./chunk-R6YJY7F2.js";import{a as s,c as u}from"./chunk-MOMDY22U.js";import{a as l}from"./chunk-S2MLTFZF.js";import{L as f}from"./chunk-VI3ZF54E.js";import"./chunk-ZQWXPDCB.js";import"./chunk-6MI4KKWF.js";import"./chunk-TPMXLA5Y.js";import"./chunk-TPOW52DO.js";import"./chunk-QUNRWDVO.js";import"./chunk-6FA3GG5B.js";import"./chunk-SDO4FC4Q.js";import"./chunk-IR3YJWPW.js";import"./chunk-MTJNKRXL.js";import{m as t}from"./chunk-HZP5U2AA.js";import{b as n}from"./chunk-ES2ISFJC.js";import{a as i}from"./chunk-FTQLQJQV.js";var v=n.object({profileRef:f,sourceRevision:n.string().min(1),action:n.enum(["compare","report"]),request:n.unknown(),runs:n.array(l).max(1e4),comparisons:n.array(s).max(1e4),suiteRuns:n.array(u).max(1e4)}).strict();async function h(p){let o=v.parse(p);for(let e of[...o.runs,...o.comparisons,...o.suiteRuns])t(e,"Hosted evaluation evidence");let a={getProfileEvaluationRun:i(async e=>o.runs.find(r=>r.manifest.id===e)??null,"getProfileEvaluationRun"),getProfileEvaluationComparison:i(async e=>o.comparisons.find(r=>r.id===e)??null,"getProfileEvaluationComparison"),getProfileEvaluationSuiteRun:i(async e=>o.suiteRuns.find(r=>r.id===e)??null,"getProfileEvaluationSuiteRun"),saveProfileEvaluationComparison:i(async(e,r)=>r,"saveProfileEvaluationComparison")};return o.action==="compare"?m({store:a,selectedProfile:i(async()=>({ref:o.profileRef,sourceRevision:o.sourceRevision}),"selectedProfile")})(o.request):c({store:a,profileRef:o.profileRef,request:o.request})}i(h,"controlHostedProfileEvaluation");export{h as controlHostedProfileEvaluation};
+import{a as m,b as c}from"./chunk-YOOPTMQK.js";import{a as s,c as u}from"./chunk-36RCXSEJ.js";import{a as l}from"./chunk-OQPFFKU6.js";import{L as f}from"./chunk-4TMC5F2P.js";import"./chunk-NM2GYDPA.js";import"./chunk-6MI4KKWF.js";import"./chunk-OMM4ZO7E.js";import"./chunk-LNEOLOK2.js";import"./chunk-Z6ZR5O3J.js";import"./chunk-6FA3GG5B.js";import"./chunk-SDO4FC4Q.js";import"./chunk-IR3YJWPW.js";import"./chunk-MTJNKRXL.js";import{m as t}from"./chunk-HZP5U2AA.js";import{b as n}from"./chunk-ES2ISFJC.js";import{a as i}from"./chunk-FTQLQJQV.js";var v=n.object({profileRef:f,sourceRevision:n.string().min(1),action:n.enum(["compare","report"]),request:n.unknown(),runs:n.array(l).max(1e4),comparisons:n.array(s).max(1e4),suiteRuns:n.array(u).max(1e4)}).strict();async function h(p){let o=v.parse(p);for(let e of[...o.runs,...o.comparisons,...o.suiteRuns])t(e,"Hosted evaluation evidence");let a={getProfileEvaluationRun:i(async e=>o.runs.find(r=>r.manifest.id===e)??null,"getProfileEvaluationRun"),getProfileEvaluationComparison:i(async e=>o.comparisons.find(r=>r.id===e)??null,"getProfileEvaluationComparison"),getProfileEvaluationSuiteRun:i(async e=>o.suiteRuns.find(r=>r.id===e)??null,"getProfileEvaluationSuiteRun"),saveProfileEvaluationComparison:i(async(e,r)=>r,"saveProfileEvaluationComparison")};return o.action==="compare"?m({store:a,selectedProfile:i(async()=>({ref:o.profileRef,sourceRevision:o.sourceRevision}),"selectedProfile")})(o.request):c({store:a,profileRef:o.profileRef,request:o.request})}i(h,"controlHostedProfileEvaluation");export{h as controlHostedProfileEvaluation};

package/dist/chunks/{hosted-profile-evaluation-inspection-XMPRKON6.js → hosted-profile-evaluation-inspection-7WESM3ZH.js}

@@ -1,3 +1,3 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
-import{c as R,d as P}from"./chunk-AT6XYNQ5.js";import{a as E}from"./chunk-S2MLTFZF.js";import{L as v,M as S,N as w,Y as y,a as h}from"./chunk-VI3ZF54E.js";import"./chunk-ZQWXPDCB.js";import"./chunk-6MI4KKWF.js";import"./chunk-TPMXLA5Y.js";import{Ma as g,h as m}from"./chunk-TPOW52DO.js";import"./chunk-QUNRWDVO.js";import"./chunk-6FA3GG5B.js";import"./chunk-SDO4FC4Q.js";import"./chunk-IR3YJWPW.js";import"./chunk-MTJNKRXL.js";import"./chunk-HZP5U2AA.js";import{b as s}from"./chunk-ES2ISFJC.js";import{a as n}from"./chunk-FTQLQJQV.js";var I=s.object({profileRef:v,inspection:R,run:E.nullable(),receipts:s.array(g).max(1e4),grades:s.array(m).max(1e4),sessions:s.array(S).max(1e4),turns:s.array(w).max(1e4),events:s.array(h).max(1e4),usage:s.array(y).max(1e4)}).strict();async function x(c){let t=I.parse(c),o=n((e,i)=>{let f=new Map;for(let p of e){let d=i(p);if(f.has(d))throw new Error("Hosted evaluation inspection has duplicate evidence identities.");f.set(d,p)}return f},"map"),r=o(t.receipts,e=>e.id),u=o(t.grades,e=>e.contentHash),l=o(t.sessions,e=>e.id),a=o(t.turns,e=>e.id);return P({profileRef:t.profileRef,...t.inspection,store:{getProfileEvaluationRun:n(async e=>t.run?.manifest.id===e?t.run:null,"getProfileEvaluationRun"),getProfileEvaluationReceipt:n(async e=>r.get(e)??null,"getProfileEvaluationReceipt"),getProfileEvaluationGrade:n(async e=>u.get(e)??null,"getProfileEvaluationGrade"),getSession:n(async e=>l.get(e)??null,"getSession"),getTurn:n(async e=>a.get(e)??null,"getTurn"),runtimeEventsForTurn:n(async e=>t.events.filter(i=>i.turnId===e),"runtimeEventsForTurn"),listModelUsageRecords:n(async e=>t.usage.filter(i=>(!e?.sessionId||i.sessionId===e.sessionId)&&(!e?.turnId||i.turnId===e.turnId)),"listModelUsageRecords")}})}n(x,"inspectHostedProfileEvaluation");async function B(c){if(c.length!==0)throw new Error("Hosted evaluation inspection uses bounded standard input.");let t=[],o=0;for await(let l of process.stdin){let a=Buffer.from(l);if(o+=a.length,o>32*1024*1024)throw new Error("Hosted evaluation inspection input is too large.");t.push(a)}let r=JSON.parse(Buffer.concat(t).toString("utf8")),u=r.action==="compare"||r.action==="report"?await(await import("./hosted-profile-evaluation-control-VV2NXFBE.js")).controlHostedProfileEvaluation(r):await x(r);process.stdout.write(`${JSON.stringify(u)}
+import{c as R,d as P}from"./chunk-L6HCBIAU.js";import{a as E}from"./chunk-OQPFFKU6.js";import{L as v,M as S,N as w,Y as y,a as h}from"./chunk-4TMC5F2P.js";import"./chunk-NM2GYDPA.js";import"./chunk-6MI4KKWF.js";import"./chunk-OMM4ZO7E.js";import{cb as g,h as m}from"./chunk-LNEOLOK2.js";import"./chunk-Z6ZR5O3J.js";import"./chunk-6FA3GG5B.js";import"./chunk-SDO4FC4Q.js";import"./chunk-IR3YJWPW.js";import"./chunk-MTJNKRXL.js";import"./chunk-HZP5U2AA.js";import{b as s}from"./chunk-ES2ISFJC.js";import{a as n}from"./chunk-FTQLQJQV.js";var I=s.object({profileRef:v,inspection:R,run:E.nullable(),receipts:s.array(g).max(1e4),grades:s.array(m).max(1e4),sessions:s.array(S).max(1e4),turns:s.array(w).max(1e4),events:s.array(h).max(1e4),usage:s.array(y).max(1e4)}).strict();async function x(c){let t=I.parse(c),o=n((e,i)=>{let f=new Map;for(let p of e){let d=i(p);if(f.has(d))throw new Error("Hosted evaluation inspection has duplicate evidence identities.");f.set(d,p)}return f},"map"),r=o(t.receipts,e=>e.id),u=o(t.grades,e=>e.contentHash),l=o(t.sessions,e=>e.id),a=o(t.turns,e=>e.id);return P({profileRef:t.profileRef,...t.inspection,store:{getProfileEvaluationRun:n(async e=>t.run?.manifest.id===e?t.run:null,"getProfileEvaluationRun"),getProfileEvaluationReceipt:n(async e=>r.get(e)??null,"getProfileEvaluationReceipt"),getProfileEvaluationGrade:n(async e=>u.get(e)??null,"getProfileEvaluationGrade"),getSession:n(async e=>l.get(e)??null,"getSession"),getTurn:n(async e=>a.get(e)??null,"getTurn"),runtimeEventsForTurn:n(async e=>t.events.filter(i=>i.turnId===e),"runtimeEventsForTurn"),listModelUsageRecords:n(async e=>t.usage.filter(i=>(!e?.sessionId||i.sessionId===e.sessionId)&&(!e?.turnId||i.turnId===e.turnId)),"listModelUsageRecords")}})}n(x,"inspectHostedProfileEvaluation");async function B(c){if(c.length!==0)throw new Error("Hosted evaluation inspection uses bounded standard input.");let t=[],o=0;for await(let l of process.stdin){let a=Buffer.from(l);if(o+=a.length,o>32*1024*1024)throw new Error("Hosted evaluation inspection input is too large.");t.push(a)}let r=JSON.parse(Buffer.concat(t).toString("utf8")),u=r.action==="compare"||r.action==="report"?await(await import("./hosted-profile-evaluation-control-Q54YXXIM.js")).controlHostedProfileEvaluation(r):await x(r);process.stdout.write(`${JSON.stringify(u)}
 `)}n(B,"runHostedProfileInspectionCli");export{x as inspectHostedProfileEvaluation,B as runHostedProfileInspectionCli};

package/dist/chunks/hosted-profile-evaluation-preparation-QP24PYBL.js

@@ -0,0 +1,3 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{a as k}from"./chunk-RAWEO7SJ.js";import{b as R,d as v,e as P}from"./chunk-3XDFNA7W.js";import"./chunk-ZEVARU6J.js";import{da as w}from"./chunk-QID62K65.js";import"./chunk-YF6IDYTS.js";import"./chunk-36RCXSEJ.js";import"./chunk-OQPFFKU6.js";import"./chunk-W5NQ2DI7.js";import"./chunk-DZVVGU6K.js";import"./chunk-4TMC5F2P.js";import"./chunk-NM2GYDPA.js";import"./chunk-6MI4KKWF.js";import"./chunk-L3KS6MOV.js";import"./chunk-OMM4ZO7E.js";import"./chunk-3QC2DDQ5.js";import"./chunk-Z3D4C7BG.js";import"./chunk-LNEOLOK2.js";import{Da as g,i as m,l as h}from"./chunk-Z6ZR5O3J.js";import"./chunk-6FA3GG5B.js";import"./chunk-SDO4FC4Q.js";import"./chunk-IR3YJWPW.js";import"./chunk-ALZRXBEC.js";import"./chunk-MTJNKRXL.js";import"./chunk-HZP5U2AA.js";import{b as a}from"./chunk-ES2ISFJC.js";import"./chunk-H7IWJN7L.js";import{a as t}from"./chunk-FTQLQJQV.js";import{readFile as S}from"node:fs/promises";import c from"node:path";var I=a.object({compile:a.object({repoPath:a.string(),profileId:a.string(),repositoryId:a.string(),sourceRevision:a.string(),workspaceId:a.string(),outputDir:a.string()}).strict(),action:a.enum(["catalog","prepare"]),request:a.unknown().optional()}).strict();async function b(o){let e=await k(o.compile),p={release:w.parse({schemaVersion:"openpond.localHarnessReleaseRecord.v1",workspaceId:e.workspaceId,sourceRevision:e.sourceRevision,agentSnapshot:m.parse(e.agentSnapshot),harnessRelease:h.parse(e.harnessRelease),bundlePath:e.bundlePath,createdAt:new Date().toISOString()})},i={source:"openpond_git",profileId:o.compile.profileId,repositoryId:o.compile.repositoryId},l=o.compile.sourceRevision,n={id:e.harnessRelease.id,contentHash:e.harnessRelease.contentHash},f=t(async r=>R({...r,runtime:p}),"loadCatalog"),H=await f({ref:i,sourceRevision:l,harnessRelease:n}),d=c.join(e.bundlePath,"source"),u=e.harnessRelease.files.some(r=>r.path==="workflows/catalog.json")?await(async()=>{let r=g({agentSnapshot:e.agentSnapshot,harnessRelease:e.harnessRelease,catalogBytes:await S(c.join(d,"workflows/catalog.json")),actionBytes:await S(c.join(d,"workflows/actions.json"))});return r.catalog.workflows.map(s=>({workflow:s,binding:{schemaVersion:"openpond.profileWorkflowBinding.v1",profileId:i.profileId,sourceRevision:l,harnessRelease:n,catalogHash:r.catalogHash,workflowId:s.id}}))})():[],y={profileRef:i,sourceRevision:l,harnessRelease:n,workflows:u};return o.action==="catalog"?{...H,workflows:u}:P({loadCatalog:f,selectedWorkflows:t(async()=>y,"selectedWorkflows"),placement:"remote",loadTasksetPackage:t(async r=>{let s=await v({runtime:p,definition:r,harnessRelease:n});if(!s)throw new Error("Hosted evaluation Taskset is absent from its published Profile release.");return s},"loadTasksetPackage"),modelConfigurationHash:t(async(r,s)=>{if(r.providerId!=="openpond"||!s.hostModelConfigurationHash)throw new Error("Hosted evaluation preparation requires a trusted model configuration receipt.");return s.hostModelConfigurationHash},"modelConfigurationHash")})(o.request)}t(b,"prepareHostedProfileEvaluation");async function V(o){if(o.length!==1||o[0].length>48e3||!/^[A-Za-z0-9_-]+$/.test(o[0]))throw new Error("Hosted Profile evaluation preparation argument is invalid.");let e=I.parse(JSON.parse(Buffer.from(o[0],"base64url").toString("utf8")));process.stdout.write(`${JSON.stringify(await b(e))}
+`)}t(V,"runHostedProfileEvaluationCli");export{b as prepareHostedProfileEvaluation,V as runHostedProfileEvaluationCli};

package/dist/chunks/opchat-UFWWVJL6.js

@@ -0,0 +1,3 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import"./chunk-HY2Q7EDK.js";import"./chunk-B3O2GAQH.js";import{c as B}from"./chunk-65BW2QXY.js";import{c as U,d as C,f as O}from"./chunk-BSHAIAXY.js";import"./chunk-OI2N2636.js";import"./chunk-4S4WH65X.js";import"./chunk-XWPC3AN4.js";import{f as m}from"./chunk-3M53YXEI.js";import"./chunk-NM2GYDPA.js";import"./chunk-6MI4KKWF.js";import"./chunk-OMM4ZO7E.js";import{a as u,c as A,d as x,i as v,j as S,k as R}from"./chunk-JEVA7YQL.js";import"./chunk-OGPHXXCD.js";import"./chunk-Z2BYC6TP.js";import"./chunk-ARJUNUH6.js";import{d as k}from"./chunk-DXAZUJPA.js";import"./chunk-GLUWATL5.js";import"./chunk-3QC2DDQ5.js";import"./chunk-Z3D4C7BG.js";import"./chunk-LNEOLOK2.js";import"./chunk-Z6ZR5O3J.js";import"./chunk-6FA3GG5B.js";import"./chunk-SDO4FC4Q.js";import"./chunk-IR3YJWPW.js";import"./chunk-ALZRXBEC.js";import{L as y}from"./chunk-MTJNKRXL.js";import"./chunk-HZP5U2AA.js";import"./chunk-ES2ISFJC.js";import"./chunk-H7IWJN7L.js";import{a as i}from"./chunk-FTQLQJQV.js";import{randomUUID as b}from"node:crypto";async function G(r,t){let e=t[0]||"smoke",n=await k(),l=await B(n,O(n)),c=P(n,r);if(e==="provider-catalog"||e==="providers-catalog"||e==="catalog"){let a=await E({apiBaseUrl:c,token:l});console.log(JSON.stringify(a,null,2));return}if(e==="models"||e==="model-list"){let a=await A({apiBaseUrl:c,token:l});console.log(JSON.stringify(a,null,2));return}if(e==="model"||e==="model-get"){let a=t[1]||o(r,"model");if(!a)throw new Error("usage: opchat model <model>");let p=await x({apiBaseUrl:c,token:l,model:a});console.log(JSON.stringify(p,null,2));return}if(e==="chat"){let a=o(r,"model")||"openpond-chat",p=o(r,"effort"),f=p?y.parse(p):void 0,d=o(r,"message")||o(r,"prompt")||"Reply with a short confirmation from OpChat.";if(!m(r.stream)){let s=await v({apiBaseUrl:c,token:l,model:a,reasoningEffort:f,messages:[{role:"user",content:d}]});console.log(JSON.stringify(s,null,2));return}let g="",h=null,w=null;for await(let s of S({apiBaseUrl:c,token:l,model:a,reasoningEffort:f,messages:[{role:"user",content:d}]}))s.type==="text_delta"?(g+=s.text,process.stdout.write(s.text)):s.type==="finish"?h=s.finishReason:s.type==="usage"&&(w=s.usage);process.stdout.write(`
+`),console.log(JSON.stringify({finishReason:h,usage:w,text:g},null,2));return}if(e==="smoke"){let a=await R({apiBaseUrl:c,token:l,defaultModel:o(r,"model")||void 0,compatibilityModel:o(r,"compatibilityModel")||o(r,"compatModel")||void 0,skipStream:m(r.skipStream),skipTool:m(r.skipTool),log:i(p=>console.log(p),"log")});m(r.json)&&console.log(JSON.stringify(a,null,2));return}throw new Error("usage: opchat <provider-catalog|models|model|chat|smoke> [--opchat-api-base-url <url>] [chat --model <id> --effort <off|low|medium|high|xhigh|max>]")}i(G,"runOpChatCommand");async function E(r){let t=r.apiBaseUrl.trim().replace(/\/+$/,"");if(!t)throw new Error("OpChat API base URL is required.");let e=r.token.trim();if(!e)throw new Error("OpenPond API key is required.");let n=await fetch(`${t}/provider-catalog`,{method:"GET",headers:{Authorization:`Bearer ${e}`,Accept:"application/json","Content-Type":"application/json","x-openpond-client":"openpond-cli","x-openpond-request-id":b()}});if(!n.ok)throw new Error(`Hosted provider catalog failed: ${n.status} ${await T(n)}`);return n.json()}i(E,"getOpChatProviderCatalog");async function T(r){let t=await r.text().catch(()=>"");if(!t)return r.statusText||`HTTP ${r.status}`;try{let e=JSON.parse(t);if(typeof e.message=="string")return e.message;if(typeof e.error=="string")return e.error;if(e.error&&typeof e.error=="object"&&!Array.isArray(e.error)){let n=e.error;return[n.code,n.message].filter(Boolean).join(": ")||t}return t}catch{return t}}i(T,"readResponseError");function P(r,t){let e=o(t,"opchatApiBaseUrl")||o(t,"opchatApiBaseurl")||o(t,"opChatApiBaseUrl")||o(t,"opChatApiBaseurl")||o(t,"opchatApiUrl")||o(t,"opChatApiUrl");return e?u({opChatApiBaseUrl:e}):u({apiBaseUrl:U(t)||r.apiBaseUrl,chatApiBaseUrl:C(t)||r.chatApiBaseUrl})}i(P,"resolveOpChatCliBaseUrl");function o(r,t){let e=r[t];return typeof e=="string"?e.trim():""}i(o,"optionString");export{G as runOpChatCommand};

package/dist/chunks/organizations-SBBIOF6O.js

@@ -0,0 +1,2 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{m as B}from"./chunk-B3O2GAQH.js";import"./chunk-65BW2QXY.js";import"./chunk-BSHAIAXY.js";import"./chunk-OI2N2636.js";import"./chunk-4S4WH65X.js";import"./chunk-XWPC3AN4.js";import{a as E,f as b,h as k,i as _}from"./chunk-3M53YXEI.js";import"./chunk-W5NQ2DI7.js";import"./chunk-4TMC5F2P.js";import"./chunk-NM2GYDPA.js";import"./chunk-6MI4KKWF.js";import"./chunk-L3KS6MOV.js";import"./chunk-OMM4ZO7E.js";import"./chunk-OGPHXXCD.js";import"./chunk-Z2BYC6TP.js";import"./chunk-ARJUNUH6.js";import"./chunk-DXAZUJPA.js";import"./chunk-GLUWATL5.js";import"./chunk-3QC2DDQ5.js";import{d as x,e as C}from"./chunk-Z3D4C7BG.js";import"./chunk-LNEOLOK2.js";import"./chunk-Z6ZR5O3J.js";import"./chunk-6FA3GG5B.js";import"./chunk-SDO4FC4Q.js";import"./chunk-IR3YJWPW.js";import"./chunk-ALZRXBEC.js";import"./chunk-MTJNKRXL.js";import"./chunk-HZP5U2AA.js";import"./chunk-ES2ISFJC.js";import"./chunk-H7IWJN7L.js";import{a as o}from"./chunk-FTQLQJQV.js";import{createHash as ie,randomBytes as ae}from"node:crypto";import{createServer as le}from"node:http";var Se=new URL(C).hostname,Ee=new URL(x).hostname,_e=`${C}/opchat/v1`;import{spawn as se}from"node:child_process";function M(e,t=process.platform){return t==="darwin"?{command:"open",args:[e]}:t==="win32"?{command:"rundll32.exe",args:["url.dll,FileProtocolHandler",e]}:{command:"xdg-open",args:[e]}}o(M,"resolveSystemBrowserCommand");async function S(e,t={}){let n=t.command??M(e),s=t.handoffTimeoutMs??1500;return new Promise(u=>{let r=!1,i=null,c=o(a=>{r||(r=!0,i&&clearTimeout(i),u(a))},"finish"),p=se(n.command,n.args,{detached:!1,shell:!1,stdio:"ignore",windowsHide:!0});p.once("error",a=>{let l=a.code;c({opened:!1,error:l?`browser launcher ${n.command} failed (${l})`:`browser launcher ${n.command} failed`})}),p.once("close",(a,l)=>{if(a===0){c({opened:!0});return}let d=l?`signal ${l}`:`code ${a??"unknown"}`;c({opened:!1,error:`browser launcher ${n.command} exited with ${d}`})}),i=setTimeout(()=>{p.unref(),c({opened:!0})},s),i.unref()})}o(S,"openUrlWithSystemBrowser");function ce(e){return[e.slug,`team=${e.teamId}`,`role=${e.role}`,`status=${e.status}`,e.displayName].join("  ")}o(ce,"formatOrganizationLine");function ue(e){return[e.email??e.userId,`user=${e.userId}`,`role=${e.role}`,e.createdAt].join("  ")}o(ue,"formatOrganizationMemberLine");function de(e){return e?[e.slug,`team=${e.teamId}`,`status=${e.status}`,`tools=${e.toolset.join(",")||"-"}`,e.resourceUrl].join("  "):"no mcp server configured"}o(de,"formatOrganizationMcpServerLine");var pe=["estimate.read","estimate.write","estimate.execute","artifacts.read","artifacts.write"];function O(e){let t=e.trim().replace(/\/$/,"");if(!t)throw new Error("MCP resource URL must be non-empty");return new URL(t).toString().replace(/\/$/,"")}o(O,"normalizeMcpResourceUrl");function N(e,t){let n=typeof t.resourceUrl=="string"&&t.resourceUrl.trim()?t.resourceUrl.trim():typeof t.url=="string"&&t.url.trim()?t.url.trim():"";if(n)return O(n);if(!e?.resourceUrl)throw new Error("organization does not have an MCP server; run organizations mcp-generate first");return O(e.resourceUrl)}o(N,"resolveMcpProbeResourceUrl");function D(e,t){let n=typeof t.origin=="string"&&t.origin.trim()?t.origin.trim():"";return n?O(n):new URL(e).origin}o(D,"resolveMcpProbeOrigin");function $(e=32){return ae(e).toString("base64url")}o($,"randomOauthToken");function me(e){return ie("sha256").update(e).digest("base64url")}o(me,"buildMcpOauthPkceChallenge");function fe(e){let t=typeof e.scope=="string"&&e.scope.trim()?e.scope:typeof e.scopes=="string"&&e.scopes.trim()?e.scopes:"";if(!t)return[...pe];let n=t.split(/[,\s]+/g).map(s=>s.trim()).filter(Boolean);if(n.length===0)throw new Error("scope must include at least one OAuth scope");return n}o(fe,"parseMcpOAuthScopes");function ge(e){let t=typeof e.clientId=="string"&&e.clientId.trim()?e.clientId.trim():"openpond-code-mcp-proof";if(t==="true")throw new Error("client-id must be a non-empty value");return t}o(ge,"resolveMcpOAuthClientId");function he(e){let t=k(e.timeoutSeconds,"timeout-seconds")??k(e.timeout,"timeout")??180;if(t<=0)throw new Error("timeout must be greater than zero");return t*1e3}o(he,"resolveMcpOAuthTimeoutMs");function ye(e){let t=k(e.callbackPort,"callback-port")??0;if(t<0||t>65535)throw new Error("callback-port must be between 0 and 65535");return t}o(ye,"resolveMcpOAuthCallbackPort");function j(e){return new Promise((t,n)=>{e.close(s=>{s?n(s):t()})})}o(j,"closeServer");async function Pe(e){let t=!1,n=null,s=null,u=null,r=new Promise((a,l)=>{s=a,u=l}),i=o((a,l,d,m,f)=>{if(t){a.writeHead(204).end();return}t=!0,a.writeHead(l,{"cache-control":"no-store","content-type":"text/html; charset=utf-8"}),a.end(d),n&&clearTimeout(n),m?s?.(m):u?.(f??new Error("oauth_callback_failed"))},"settle"),c=le((a,l)=>{let d=a.headers.host??"127.0.0.1",m=new URL(a.url??"/",`http://${d}`);if(m.pathname!=="/callback"){l.writeHead(404,{"content-type":"text/plain; charset=utf-8"}),l.end("Not found");return}let f=m.searchParams.get("state")??"",g=m.searchParams.get("error")??"",P=m.searchParams.get("code")??"";if(f!==e.expectedState){i(l,400,"<!doctype html><title>OpenPond OAuth failed</title><p>State mismatch. Return to the terminal and retry.</p>",void 0,new Error("oauth_state_mismatch"));return}if(g){i(l,400,"<!doctype html><title>OpenPond OAuth denied</title><p>Authorization was not completed. Return to the terminal.</p>",void 0,new Error(`oauth_authorization_failed:${g}`));return}if(!P){i(l,400,"<!doctype html><title>OpenPond OAuth failed</title><p>Missing authorization code. Return to the terminal and retry.</p>",void 0,new Error("oauth_code_missing"));return}i(l,200,"<!doctype html><title>OpenPond OAuth complete</title><p>Authorization complete. You can return to the terminal.</p>",{code:P,state:f})});await new Promise((a,l)=>{let d=o(f=>{c.off("listening",m),l(f)},"onError"),m=o(()=>{c.off("error",d),a()},"onListening");c.once("error",d),c.once("listening",m),c.listen(e.port,"127.0.0.1")});let p=c.address();if(!p||typeof p.port!="number")throw await j(c),new Error("oauth_callback_listener_failed");return n=setTimeout(()=>{t||(t=!0,u?.(new Error("oauth_callback_timeout")))},e.timeoutMs),{close:o(async()=>{n&&clearTimeout(n),await j(c).catch(()=>{})},"close"),redirectUri:`http://127.0.0.1:${p.port}/callback`,waitForCallback:o(()=>r,"waitForCallback")}}o(Pe,"startMcpOAuthCallbackListener");function we(e){S(e)}o(we,"openUrlWithSystemBrowser");function Ae(e){let t=new URL(e.authorizationEndpoint);return t.searchParams.set("response_type","code"),t.searchParams.set("client_id",e.clientId),t.searchParams.set("redirect_uri",e.redirectUri),t.searchParams.set("code_challenge",e.codeChallenge),t.searchParams.set("code_challenge_method","S256"),t.searchParams.set("resource",e.resourceUrl),t.searchParams.set("scope",e.scopes.join(" ")),t.searchParams.set("state",e.state),t.toString()}o(Ae,"buildMcpOAuthAuthorizeUrl");async function Oe(e){let t=new URLSearchParams;t.set("grant_type","authorization_code"),t.set("client_id",e.clientId),t.set("redirect_uri",e.redirectUri),t.set("code",e.code),t.set("code_verifier",e.codeVerifier);let n=await fetch(`${e.origin}/oauth/token`,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:t}),s=await q(n);if(!n.ok)throw new Error(`oauth_token_exchange_failed:${n.status}:${JSON.stringify(s)}`);if(!s||typeof s!="object"||Array.isArray(s))throw new Error("oauth_token_exchange_invalid_response");let u=s;if(typeof u.access_token!="string"||!u.access_token.trim())throw new Error("oauth_token_exchange_missing_access_token");return{access_token:u.access_token,...typeof u.expires_in=="number"?{expires_in:u.expires_in}:{},...typeof u.refresh_token=="string"?{refresh_token:u.refresh_token}:{},...typeof u.scope=="string"?{scope:u.scope}:{},...typeof u.token_type=="string"?{token_type:u.token_type}:{}}}o(Oe,"exchangeMcpOAuthAuthorizationCode");async function q(e){let t=await e.text().catch(()=>"");if(!t)return null;let n=t.trim();if((e.headers.get("content-type")??"").toLowerCase().includes("application/json")||n.startsWith("{")||n.startsWith("["))try{return JSON.parse(n)}catch{return t}return t}o(q,"readMcpProbeBody");async function U(e,t={}){let n=await fetch(e,t);return{url:e,status:n.status,ok:n.ok,headers:{contentType:n.headers.get("content-type"),location:n.headers.get("location"),wwwAuthenticate:n.headers.get("www-authenticate")},body:await q(n)}}o(U,"fetchMcpProbe");function be(e,t,n){return n?{jsonrpc:"2.0",id:e,method:t,params:n}:{jsonrpc:"2.0",id:e,method:t}}o(be,"buildMcpJsonRpcRequest");function F(e){let t=typeof e.arguments=="string"&&e.arguments.trim()?e.arguments:typeof e.args=="string"&&e.args.trim()?e.args:"";if(!t)return{};let n=E(t,"arguments");if(!n||typeof n!="object"||Array.isArray(n))throw new Error("arguments must be a JSON object");return n}o(F,"parseMcpToolArguments");async function R(e){let t={"content-type":"application/json"};return e.accessToken&&(t.authorization=`Bearer ${e.accessToken}`),U(e.resourceUrl,{method:"POST",headers:t,body:JSON.stringify(be(e.id,e.method,e.params))})}o(R,"postMcpJsonRpcProbe");async function J(e){let t=O(e.resourceUrl),n=O(e.origin),s=`${t}/.well-known/oauth-protected-resource`,u=`${n}/.well-known/oauth-authorization-server`,[r,i,c,p,a,l,d]=await Promise.all([U(s),U(u),U(t),R({resourceUrl:t,id:1,method:"initialize"}),R({resourceUrl:t,id:2,method:"tools/list"}),R({resourceUrl:t,id:3,method:"tools/call",params:{name:e.toolName,arguments:e.toolArguments}}),e.accessToken?R({resourceUrl:t,id:4,method:"tools/call",params:{name:e.toolName,arguments:e.toolArguments},accessToken:e.accessToken}):Promise.resolve(null)]);return{resourceUrl:t,origin:n,protectedResource:r,authorizationServer:i,directGetChallenge:c,initialize:p,toolsList:a,unauthenticatedToolCall:l,...d?{authenticatedToolCall:d}:{}}}o(J,"probeOrganizationMcp");function ke(e){let t=typeof e=="string"?e.trim():"";if(t==="owner"||t==="admin"||t==="member")return t;throw new Error("role must be owner, admin, or member")}o(ke,"parseOrganizationRole");function xe(e){let t=typeof e.displayName=="string"&&e.displayName.trim()?e.displayName.trim():typeof e.name=="string"&&e.name.trim()?e.name.trim():"";if(!t)throw new Error("usage: organizations create --name <name> [--slug <slug>]");return{displayName:t,...typeof e.slug=="string"&&e.slug.trim()?{slug:e.slug.trim()}:{},...typeof e.primaryContactEmail=="string"&&e.primaryContactEmail.trim()?{primaryContactEmail:e.primaryContactEmail.trim()}:{},...typeof e.customDomain=="string"&&e.customDomain.trim()?{customDomain:e.customDomain.trim()}:{}}}o(xe,"buildOrganizationCreateInput");function Ce(e){let t={},n=typeof e.displayName=="string"&&e.displayName.trim()?e.displayName.trim():typeof e.name=="string"&&e.name.trim()?e.name.trim():"";if(n&&(t.displayName=n),typeof e.slug=="string"&&e.slug.trim()&&(t.slug=e.slug.trim()),typeof e.primaryContactEmail=="string"&&(t.primaryContactEmail=e.primaryContactEmail.trim()||null),typeof e.customDomain=="string"&&(t.customDomain=e.customDomain.trim()||null),typeof e.status=="string"&&e.status.trim()){let s=e.status.trim();if(s!=="active"&&s!=="disabled"&&s!=="archived")throw new Error("status must be active, disabled, or archived");t.status=s}if(Object.keys(t).length===0)throw new Error("organizations update requires at least one changed field");return t}o(Ce,"buildOrganizationUpdateInput");function Re(e){let t=typeof e.email=="string"?e.email.trim():"";if(!t)throw new Error("usage: organizations member-upsert <slug> --email <email> --role <role>");return{email:t,role:ke(e.role)}}o(Re,"buildOrganizationMemberInput");function Ue(e){return{...typeof e.origin=="string"&&e.origin.trim()?{origin:e.origin.trim()}:{},...typeof e.toolset=="string"&&e.toolset.trim()?{toolset:_(e.toolset)}:{}}}o(Ue,"buildOrganizationMcpGenerateInput");async function yo(e,t){let n=t[0]||"list",s=await B(e),u=b(e.json);if(n==="list"){let r=await s.listOrganizations();if(u){console.log(JSON.stringify({organizations:r},null,2));return}if(r.length===0){console.log("no organizations found");return}for(let i of r)console.log(ce(i));return}if(n==="create"){let r=await s.createOrganization(xe(e));console.log(JSON.stringify({organization:r},null,2));return}if(n==="get"){let r=t[1];if(!r)throw new Error("usage: organizations get <slug>");let i=await s.getOrganization(r);console.log(JSON.stringify({organization:i},null,2));return}if(n==="update"){let r=t[1];if(!r)throw new Error("usage: organizations update <slug> [--name <name>]");let i=await s.updateOrganization(r,Ce(e));console.log(JSON.stringify({organization:i},null,2));return}if(n==="members"||n==="member-list"){let r=t[1];if(!r)throw new Error("usage: organizations members <slug>");let i=await s.listOrganizationMembers(r);if(u){console.log(JSON.stringify({members:i},null,2));return}if(i.length===0){console.log("no organization members found");return}for(let c of i)console.log(ue(c));return}if(n==="member-upsert"||n==="member-add"){let r=t[1];if(!r)throw new Error("usage: organizations member-upsert <slug> --email <email> --role <role>");let i=await s.upsertOrganizationMember(r,Re(e));console.log(JSON.stringify({member:i},null,2));return}if(n==="mcp-get"||n==="mcp-server"){let r=t[1];if(!r)throw new Error("usage: organizations mcp-get <slug>");let i=await s.getOrganizationMcpServer(r);if(u){console.log(JSON.stringify({mcpServer:i},null,2));return}console.log(de(i));return}if(n==="mcp-generate"){let r=t[1];if(!r)throw new Error("usage: organizations mcp-generate <slug> [--origin <url>]");let i=await s.generateOrganizationMcpServer(r,Ue(e));console.log(JSON.stringify({mcpServer:i},null,2));return}if(n==="mcp-probe"||n==="mcp-inspect"){let r=t[1];if(!r)throw new Error("usage: organizations mcp-probe <slug> [--origin <url>] [--tool <name>] [--arguments <json>] [--access-token <token>]");let i=await s.getOrganizationMcpServer(r),c=N(i,e),p=D(c,e),a=typeof e.tool=="string"&&e.tool.trim()?e.tool.trim():typeof e.toolName=="string"&&e.toolName.trim()?e.toolName.trim():"estimate_search_history",l=F(e),d=typeof e.accessToken=="string"&&e.accessToken.trim()?e.accessToken.trim():"",m=await J({resourceUrl:c,origin:p,toolName:a,toolArguments:l,...d?{accessToken:d}:{}});console.log(JSON.stringify({mcpServer:i,probe:m},null,2));return}if(n==="mcp-authorize"||n==="mcp-oauth"){let r=t[1];if(!r)throw new Error("usage: organizations mcp-authorize <slug> [--origin <url>] [--scope <csv|space>] [--tool <name>] [--arguments <json>] [--open]");let i=await s.getOrganizationMcpServer(r),c=N(i,e),p=D(c,e),a=ge(e),l=fe(e),d=$(18),m=$(48),f=me(m),g=await Pe({expectedState:d,port:ye(e),timeoutMs:he(e)}),P=Ae({authorizationEndpoint:`${p}/oauth/authorize`,clientId:a,codeChallenge:f,redirectUri:g.redirectUri,resourceUrl:c,scopes:l,state:d});if(console.error("Open this URL to authorize the organization MCP connection:"),console.error(P),console.error(`Waiting for OAuth callback on ${g.redirectUri}`),b(e.open))try{we(P)}catch(w){console.error(`Unable to open a browser automatically: ${w instanceof Error?w.message:String(w)}`)}try{let w=await g.waitForCallback(),h=await Oe({clientId:a,code:w.code,codeVerifier:m,origin:p,redirectUri:g.redirectUri}),K=typeof e.tool=="string"&&e.tool.trim()?e.tool.trim():typeof e.toolName=="string"&&e.toolName.trim()?e.toolName.trim():"estimate_search_history",G=F(e),W=await J({accessToken:h.access_token,origin:p,resourceUrl:c,toolArguments:G,toolName:K}),V=b(e.printToken);console.log(JSON.stringify({mcpServer:i,oauth:{accessTokenReceived:!0,clientId:a,expiresIn:h.expires_in??null,refreshTokenReceived:!!h.refresh_token,scope:h.scope??l.join(" "),tokenType:h.token_type??"Bearer",...V?{accessToken:h.access_token,refreshToken:h.refresh_token??null}:{}},probe:W},null,2))}finally{await g.close()}return}if(n==="mcp-rotate"||n==="mcp-disable"||n==="mcp-enable"){let r=t[1];if(!r)throw new Error(`usage: organizations ${n} <slug>`);let i=n==="mcp-rotate"?await s.rotateOrganizationMcpServer(r):n==="mcp-disable"?await s.disableOrganizationMcpServer(r):await s.enableOrganizationMcpServer(r);console.log(JSON.stringify({mcpServer:i},null,2));return}throw new Error("usage: organizations <list|create|get|update|members|member-upsert|mcp-get|mcp-generate|mcp-probe|mcp-authorize|mcp-rotate|mcp-disable|mcp-enable> [args]")}o(yo,"runOrganizationsCommand");export{pe as DEFAULT_MCP_AUTHORIZE_SCOPES,be as buildMcpJsonRpcRequest,Ae as buildMcpOAuthAuthorizeUrl,me as buildMcpOauthPkceChallenge,xe as buildOrganizationCreateInput,Ue as buildOrganizationMcpGenerateInput,Re as buildOrganizationMemberInput,Ce as buildOrganizationUpdateInput,j as closeServer,Oe as exchangeMcpOAuthAuthorizationCode,U as fetchMcpProbe,ce as formatOrganizationLine,de as formatOrganizationMcpServerLine,ue as formatOrganizationMemberLine,O as normalizeMcpResourceUrl,we as openUrlWithSystemBrowser,fe as parseMcpOAuthScopes,F as parseMcpToolArguments,ke as parseOrganizationRole,R as postMcpJsonRpcProbe,J as probeOrganizationMcp,$ as randomOauthToken,q as readMcpProbeBody,ye as resolveMcpOAuthCallbackPort,ge as resolveMcpOAuthClientId,he as resolveMcpOAuthTimeoutMs,D as resolveMcpProbeOrigin,N as resolveMcpProbeResourceUrl,yo as runOrganizationsCommand,Pe as startMcpOAuthCallbackListener};