openpond 0.2.52 → 0.2.53

package/dist/chunks/{chunk-L3V4QKRV.js → chunk-NHFGEVVH.js}

@@ -1,5 +1,5 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
-import{f as fn,h as hn}from"./chunk-DLZP22WV.js";import{b as Bo,c as Jo,d as Rc,e as pn,f as Vt,g as mn}from"./chunk-OE2VF6KU.js";import{a as Tc,c as vc,g as Ec,h as Sc}from"./chunk-QJRXTIOC.js";import{D as an,E as fr,F as Jt,G as hr,H as ic,I as cc,J as dc,K as cn,L as lc,M as Uo,N as uc,O as xe,P as pc,Q as mc,R as fc,S as hc,T as gc,U as dn,V as yc,W as ln,aa as un,e as oi,ea as wc,f as si,fa as Me,ja as kc,m as ac,n as Fo}from"./chunk-7MXZJQS7.js";import{b as gn,m as xc,p as bc,s as Ic,t as yn,y as Cc,z as wn}from"./chunk-USMZT5FZ.js";import{d as Ve,g as Xe}from"./chunk-5CMKGD43.js";import{G as oc,P as sc}from"./chunk-HA7EFTPF.js";import{b as nc,e as on,f as sn}from"./chunk-7QEE4PBI.js";import{Ac as Ut,Ad as Ki,Bc as en,Bd as _i,Cc as tn,Cd as nn,Da as Hi,Dc as J,Ec as Xi,Ed as $i,Fa as _r,Fc as Bt,Fd as Rt,Gb as Fi,Gc as zi,Ib as re,Ic as Zi,Jb as Ui,Jc as jo,Kc as Yi,Kd as tc,La as Ho,Lb as Bi,Ld as tt,Ma as Wi,N as Mi,Oa as ji,Od as Se,Rd as mr,Sd as rc,Ta as qi,Y as Li,od as rn,pd as Qi,qd as Gi,rd as qo,va as Di,xc as $,yc as Ji,zc as Vi}from"./chunk-XDMUD4FW.js";import{c as ai,ga as Wo,z as Ni}from"./chunk-IKWDL3RB.js";import{Ba as Ci,Ca as pr,Oa as Ai,Qa as Je,Ra as Oi,Sa as Pi,Ta as et,ja as Ti,ka as vi,la as Ei,m as Ee,ma as Si,oa as xi,pc as $r,wc as ec,xa as bi,ya as Ii}from"./chunk-QRWPEW3Z.js";import{qa as ii,ra as Kr,sa as ci,ta as di,ua as lr,va as Ft,wa as li,x as _a}from"./chunk-WV2APYWG.js";import{Db as Gr,Eb as ri,Jb as qt,Qa as $a,Ra as Lo,Ta as ei,U as Qr,Vc as Ue,Wc as Be,a as Za,b as G,d as Ya,ga as $e,ha as Qa,ja as Ga,ka as Mo,la as ue,sd as ni,vb as Y,wb as ti,ya as Ka,z as Yr}from"./chunk-PJM2G7SG.js";import{A as ja,B as Ro,G as Jr,H as Vr,I as To,J as Fa,K as Ua,L as vo,M as Xr,N as Eo,O as So,P as cr,T as xo,U as Ba,V as Ja,W as Va,X as Xa,Y as za,Z as bo,_ as Io,e as Ma,ga as dr,ha as Co,ia as Ao,ja as Oo,ka as Po,la as zr,ma as Zr,n as La,na as jt,o as Da,oa as No,pa as Z,w as Ha,x as Wa}from"./chunk-SDEDAHV6.js";import{E as wi,F as ki,G as Ri,e as ui,f as wt}from"./chunk-DALJMSJG.js";import{B as pi,H as Do,N as mi,y as kt}from"./chunk-TGIB24K4.js";import{b as gt,c as he,d as yt,f as Aa,h as Oa,i as Pa,k as Na,l as ve,m as y,o as qa}from"./chunk-NNF6KCHD.js";import{b as g}from"./chunk-ES2ISFJC.js";import{h as ur,n as fi,o as hi,p as gi,q as yi}from"./chunk-H7IWJN7L.js";import{a as i,c as ko,e as Cp}from"./chunk-FTQLQJQV.js";var rd=ko((pv,td)=>{"use strict";var Im=["||","&&",";;","|&","<(","<<<",">>",">&","<&","&",";","(",")","|","<",">"],ed=/[\n\r\u2028\u2029]/,Cm=/[\s#!"$&'():;<=>@\\^`|]/g;td.exports=i(function(t){return t.map(function(r){if(r==="")return"''";if(r&&typeof r=="object"){if("op"in r&&r.op==="glob"){if(typeof r.pattern!="string")throw new TypeError("glob token requires a string `pattern`");if(ed.test(r.pattern))throw new TypeError("glob `pattern` must not contain line terminators");return r.pattern.replace(Cm,"\\$&")}if("op"in r&&typeof r.op=="string"){if(Im.indexOf(r.op)<0)throw new TypeError("invalid `op` value: "+JSON.stringify(r.op));return r.op.replace(/[\s\S]/g,"\\$&")}if("comment"in r&&typeof r.comment=="string"){if(ed.test(r.comment))throw new TypeError("`comment` must not contain line terminators");return"#"+r.comment}throw new TypeError("unrecognized object token shape")}return/["\s\\]/.test(r)&&!/'/.test(r)?"'"+r.replace(/(['])/g,"\\$1")+"'":/["'\s]/.test(r)?'"'+r.replace(/(["\\$`!])/g,"\\$1")+'"':String(r).replace(/([A-Za-z]:)?([#!"$&'()*,:;<=>?@[\\\]^`{|}~])/g,"$1\\$2")}).join(" ")},"quote")});var dd=ko((fv,cd)=>{"use strict";var id="(?:"+["\\|\\|","\\&\\&",";;","\\|\\&","\\<\\(","\\<\\<\\<",">>",">\\&","<\\&","[&;()|<>]"].join("|")+")",nd=new RegExp("^"+id+"$"),od="|&;()<> \\t",Am="'([^']*?)'",Om='"((\\\\"|[^"])*?)"',Pm=/^#$/,sd="'",ad='"',In="$",Et="",Nm=4294967296;for($o=0;$o<4;$o++)Et+=(Nm*Math.random()).toString(16);var $o,Mm=new RegExp("^"+Et);function Lm(e,t){for(var r=t.lastIndex,n=[],o;o=t.exec(e);)n[n.length]=o,t.lastIndex===o.index&&(t.lastIndex+=1);return t.lastIndex=r,n}i(Lm,"matchAll");function Dm(e,t,r){var n=typeof e=="function"?e(r):e[r];return typeof n>"u"&&r!=""?n="":typeof n>"u"&&(n="$"),typeof n=="object"?t+Et+JSON.stringify(n)+Et:t+n}i(Dm,"getVar");function Hm(e,t,r){r||(r={});var n=r.escape||"\\",o=r.splitUnquoted===!0?` 	
+import{f as fn,h as hn}from"./chunk-FPUUZQUP.js";import{b as Bo,c as Jo,d as Rc,e as pn,f as Vt,g as mn}from"./chunk-6VF3Q6QJ.js";import{a as Tc,c as vc,g as Ec,h as Sc}from"./chunk-USKE34VR.js";import{D as an,E as fr,F as Jt,G as hr,H as ic,I as cc,J as dc,K as cn,L as lc,M as Uo,N as uc,O as xe,P as pc,Q as mc,R as fc,S as hc,T as gc,U as dn,V as yc,W as ln,aa as un,e as oi,ea as wc,f as si,fa as Me,ja as kc,m as ac,n as Fo}from"./chunk-4TZHH5FC.js";import{b as gn,m as xc,p as bc,s as Ic,t as yn,y as Cc,z as wn}from"./chunk-USMZT5FZ.js";import{d as Ve,g as Xe}from"./chunk-5CMKGD43.js";import{G as oc,P as sc}from"./chunk-HA7EFTPF.js";import{b as nc,e as on,f as sn}from"./chunk-7QEE4PBI.js";import{Ac as Ut,Ad as Ki,Bc as en,Bd as _i,Cc as tn,Cd as nn,Da as Hi,Dc as J,Ec as Xi,Ed as $i,Fa as _r,Fc as Bt,Fd as Rt,Gb as Fi,Gc as zi,Ib as re,Ic as Zi,Jb as Ui,Jc as jo,Kc as Yi,Kd as tc,La as Ho,Lb as Bi,Ld as tt,Ma as Wi,N as Mi,Oa as ji,Od as Se,Rd as mr,Sd as rc,Ta as qi,Y as Li,od as rn,pd as Qi,qd as Gi,rd as qo,va as Di,xc as $,yc as Ji,zc as Vi}from"./chunk-2JO2KWT3.js";import{c as ai,ga as Wo,z as Ni}from"./chunk-IKWDL3RB.js";import{Ba as Ci,Ca as pr,Oa as Ai,Qa as Je,Ra as Oi,Sa as Pi,Ta as et,ja as Ti,ka as vi,la as Ei,m as Ee,ma as Si,oa as xi,pc as $r,wc as ec,xa as bi,ya as Ii}from"./chunk-QRWPEW3Z.js";import{qa as ii,ra as Kr,sa as ci,ta as di,ua as lr,va as Ft,wa as li,x as _a}from"./chunk-WV2APYWG.js";import{Db as Gr,Eb as ri,Jb as qt,Qa as $a,Ra as Lo,Ta as ei,U as Qr,Vc as Ue,Wc as Be,a as Za,b as G,d as Ya,ga as $e,ha as Qa,ja as Ga,ka as Mo,la as ue,sd as ni,vb as Y,wb as ti,ya as Ka,z as Yr}from"./chunk-PJM2G7SG.js";import{A as ja,B as Ro,G as Jr,H as Vr,I as To,J as Fa,K as Ua,L as vo,M as Xr,N as Eo,O as So,P as cr,T as xo,U as Ba,V as Ja,W as Va,X as Xa,Y as za,Z as bo,_ as Io,e as Ma,ga as dr,ha as Co,ia as Ao,ja as Oo,ka as Po,la as zr,ma as Zr,n as La,na as jt,o as Da,oa as No,pa as Z,w as Ha,x as Wa}from"./chunk-SDEDAHV6.js";import{E as wi,F as ki,G as Ri,e as ui,f as wt}from"./chunk-DALJMSJG.js";import{B as pi,H as Do,N as mi,y as kt}from"./chunk-TGIB24K4.js";import{b as gt,c as he,d as yt,f as Aa,h as Oa,i as Pa,k as Na,l as ve,m as y,o as qa}from"./chunk-NNF6KCHD.js";import{b as g}from"./chunk-ES2ISFJC.js";import{h as ur,n as fi,o as hi,p as gi,q as yi}from"./chunk-H7IWJN7L.js";import{a as i,c as ko,e as Cp}from"./chunk-FTQLQJQV.js";var rd=ko((pv,td)=>{"use strict";var Im=["||","&&",";;","|&","<(","<<<",">>",">&","<&","&",";","(",")","|","<",">"],ed=/[\n\r\u2028\u2029]/,Cm=/[\s#!"$&'():;<=>@\\^`|]/g;td.exports=i(function(t){return t.map(function(r){if(r==="")return"''";if(r&&typeof r=="object"){if("op"in r&&r.op==="glob"){if(typeof r.pattern!="string")throw new TypeError("glob token requires a string `pattern`");if(ed.test(r.pattern))throw new TypeError("glob `pattern` must not contain line terminators");return r.pattern.replace(Cm,"\\$&")}if("op"in r&&typeof r.op=="string"){if(Im.indexOf(r.op)<0)throw new TypeError("invalid `op` value: "+JSON.stringify(r.op));return r.op.replace(/[\s\S]/g,"\\$&")}if("comment"in r&&typeof r.comment=="string"){if(ed.test(r.comment))throw new TypeError("`comment` must not contain line terminators");return"#"+r.comment}throw new TypeError("unrecognized object token shape")}return/["\s\\]/.test(r)&&!/'/.test(r)?"'"+r.replace(/(['])/g,"\\$1")+"'":/["'\s]/.test(r)?'"'+r.replace(/(["\\$`!])/g,"\\$1")+'"':String(r).replace(/([A-Za-z]:)?([#!"$&'()*,:;<=>?@[\\\]^`{|}~])/g,"$1\\$2")}).join(" ")},"quote")});var dd=ko((fv,cd)=>{"use strict";var id="(?:"+["\\|\\|","\\&\\&",";;","\\|\\&","\\<\\(","\\<\\<\\<",">>",">\\&","<\\&","[&;()|<>]"].join("|")+")",nd=new RegExp("^"+id+"$"),od="|&;()<> \\t",Am="'([^']*?)'",Om='"((\\\\"|[^"])*?)"',Pm=/^#$/,sd="'",ad='"',In="$",Et="",Nm=4294967296;for($o=0;$o<4;$o++)Et+=(Nm*Math.random()).toString(16);var $o,Mm=new RegExp("^"+Et);function Lm(e,t){for(var r=t.lastIndex,n=[],o;o=t.exec(e);)n[n.length]=o,t.lastIndex===o.index&&(t.lastIndex+=1);return t.lastIndex=r,n}i(Lm,"matchAll");function Dm(e,t,r){var n=typeof e=="function"?e(r):e[r];return typeof n>"u"&&r!=""?n="":typeof n>"u"&&(n="$"),typeof n=="object"?t+Et+JSON.stringify(n)+Et:t+n}i(Dm,"getVar");function Hm(e,t,r){r||(r={});var n=r.escape||"\\",o=r.splitUnquoted===!0?` 	
 `:typeof r.splitUnquoted=="string"?r.splitUnquoted:"",s="(\\"+n+`['"`+od+`]|[^\\s'"`+od+"])+",a=new RegExp(["("+id+")","("+s+"|"+Om+"|"+Am+")+"].join("|"),"g"),c=Lm(e,a);if(c.length===0)return[];t||(t={});var d=!1;return c.map(function(l){var p=l[0];if(!p||d)return;if(nd.test(p))return{op:p};var u=!1,m=!1,f="",h=[],R=!1,w=null,k=!1,x;function C(){x+=1;var E,b,D=p.charAt(x);if(D==="{"){if(x+=1,p.charAt(x)==="}")throw new Error("Bad substitution: "+p.slice(x-2,x+1));var F=1;for(E=x;F>0&&E<p.length;)p.charAt(E)==="{"&&p.charAt(E-1)==="$"?F+=1:p.charAt(E)==="}"&&(F-=1),E+=1;if(F!==0)throw new Error("Bad substitution: "+p.slice(x));E-=1,b=p.slice(x,E),x=E}else if(/[*@#?$!_-]/.test(D))b=D,x+=1;else{var V=p.slice(x);E=V.match(/[^\w\d_]/),E?(b=V.slice(0,E.index),x+=E.index-1):(b=V,x=p.length)}return Dm(t,"",b)}i(C,"parseEnvVar");function A(){if(w!==null){if(w===0)f!==""&&(h[h.length]=f,f="");else{h[h.length]=f,f="";for(var E=1;E<w;E+=1)h[h.length]=""}w=null}}for(i(A,"flushRun"),x=0;x<p.length;x++){var T=p.charAt(x);if(o&&T!==In&&A(),k=k||!u&&(T==="*"||T==="?"),m)f+=T,m=!1;else if(u)T===u?u=!1:u==sd?f+=T:T===n?(x+=1,T=p.charAt(x),T===ad||T===n||T===In?f+=T:f+=n+T):T===In?f+=C():f+=T;else if(T===ad||T===sd)u=T,R=!0;else{if(nd.test(T))return{op:p};if(Pm.test(T)){d=!0;var P={comment:e.slice(l.index+x+1)};return f.length?[f,P]:[P]}else if(T===n)m=!0;else if(T===In){var v=C();if(!o)f+=v;else for(var I=0;I<v.length;I+=1){var S=v.charAt(I);o.indexOf(S)<0?(A(),f+=S):w===null?w=S===" "||S==="	"||S===`
 `?0:1:S!==" "&&S!=="	"&&S!==`
 `&&(w+=1)}}else f+=T}}if(k)return{op:"glob",pattern:f};if(o){if(w!==null&&w>0){h[h.length]=f,f="";for(var N=1;N<w;N+=1)h[h.length]=""}return(f!==""||R&&h.length===0)&&(h[h.length]=f),h}return f}).reduce(function(l,p){return typeof p>"u"||[].concat(p).forEach(function(u){l[l.length]=u}),l},[])}i(Hm,"parseInternal");cd.exports=i(function(t,r,n){var o=Hm(t,r,n);return typeof r!="function"?o:o.reduce(function(s,a){if(typeof a=="object")return s[s.length]=a,s;var c=a.split(RegExp("("+Et+".*?"+Et+")","g"));return c.length===1?(s[s.length]=c[0],s):(c.filter(Boolean).forEach(function(d){s[s.length]=Mm.test(d)?JSON.parse(d.split(Et)[1]):d}),s)},[])},"parse")});var ld=ko(es=>{"use strict";es.quote=rd();es.parse=dd()});import{promises as Lc}from"node:fs";import rt from"node:path";var Ap="openpond.workEvidenceReceipt.v1",Op="openpond.workProcessTrace.v1",Pp="openpond.workFeedbackReceipt.v1",hk="openpond.workEvidenceEligibility.v1",Np=g.string().regex(/^urn:openpond:work:[a-f0-9]{64}$/,"Work source references must be opaque SHA-256 URNs."),Mp=g.string().regex(/^urn:openpond:workspace:[a-f0-9]{64}$/,"Workspace references must be opaque SHA-256 URNs."),Lp=g.string().regex(/^urn:openpond:artifact:[a-f0-9]{64}$/,"Evidence artifacts must use content-addressed SHA-256 URNs."),ie=Pa.extend({id:Lp}).strict().superRefine((e,t)=>{e.id!==Pc(e.contentHash)&&t.addIssue({code:"custom",message:"Evidence artifact id must contain its content hash.",path:["id"]})}),Dp=g.enum(["tool","validation","state_transition","approval","question","artifact","cleanup"]),Hp=g.enum(["agent","environment"]),Wp=g.enum(["turn_started","turn_completed","turn_failed","turn_cancelled","turn_timed_out","tool_invoked","tool_completed","tool_failed","validation_completed","validation_failed","approval_requested","approval_resolved","question_asked","question_answered","question_dismissed","artifact_created","workspace_changed","environment_created","environment_reset","environment_destroyed","cleanup_completed","cleanup_failed"]),jp=g.enum(["started","completed","failed","cancelled"]),qp=g.enum(["filesystem","source_control","command","browser","connected_app","sandbox","agent","other"]),Fp=g.enum(["structural","visual","test","user_review","other"]),Up=g.enum(["running","completed","failed","cancelled","timeout"]),Bp=g.enum(["requested","approved","denied","answered","dismissed"]),Jp=g.enum(["policy","validation","environment","infrastructure","timeout","cancelled","unknown"]),Vp=g.enum(["missing_start","missing_terminal","source_truncated","unsupported_events_dropped","uncorrelated_environment_step","artifact_unavailable"]),Xp=g.object({sequence:g.number().int().nonnegative().max(1e6),timestamp:yt,layer:Hp,kind:Dp,action:Wp,status:jp,inputHash:he.nullable(),outputHash:he.nullable(),receiptHash:he.nullable(),parentReceiptHash:he.nullable(),artifactRefs:g.array(ie).max(1e3),attributes:g.object({toolCategory:qp.nullable(),validationKind:Fp.nullable(),transitionState:Up.nullable(),interventionOutcome:Bp.nullable(),artifactCount:g.number().int().nonnegative().max(1e5),exitCode:g.number().int().min(-1).max(255).nullable(),durationMs:g.number().int().nonnegative().max(31536e6).nullable(),cpuTimeMs:g.number().int().nonnegative().max(31536e6).nullable(),memoryPeakBytes:g.number().int().nonnegative().max(0x4000000000000).nullable(),errorClass:Jp.nullable()}).strict()}).strict().superRefine((e,t)=>{e.layer==="agent"&&e.parentReceiptHash!==null&&t.addIssue({code:"custom",message:"Agent-layer steps cannot have a parent environment correlation.",path:["parentReceiptHash"]}),e.layer==="environment"&&e.parentReceiptHash===null&&t.addIssue({code:"custom",message:"Environment steps must correlate to an Agent receipt.",path:["parentReceiptHash"]})}),Ac=g.object({schemaVersion:g.literal(Op),sourceRevisionHash:he,sanitationPolicyVersion:gt,incomplete:g.boolean(),incompleteReasons:g.array(Vp).max(10),droppedEventCount:g.number().int().nonnegative().max(1e6),steps:g.array(Xp).max(1e5)}).strict().superRefine((e,t)=>{e.incomplete!==e.incompleteReasons.length>0&&t.addIssue({code:"custom",message:"incomplete must match the presence of incompleteReasons.",path:["incomplete"]});for(let r=0;r<e.steps.length;r+=1)e.steps[r].sequence!==r&&t.addIssue({code:"custom",message:"Process trace sequences must be contiguous and zero-based.",path:["steps",r,"sequence"]})}),Xo=Ac.safeExtend({contentHash:he}).strict(),zp=g.enum(["policy_failure","validation_failure","model_failure","environment_failure","infrastructure_failure","timeout","cancelled","unknown"]),Zp=g.object({status:g.enum(["completed","failed","cancelled","timeout"]),failureClass:zp.nullable()}).strict().superRefine((e,t)=>{e.status==="completed"&&e.failureClass!==null&&t.addIssue({code:"custom",message:"Completed Work cannot carry a failure class.",path:["failureClass"]}),e.status!=="completed"&&e.failureClass===null&&t.addIssue({code:"custom",message:"Non-completed Work requires a failure class.",path:["failureClass"]}),e.status==="cancelled"&&e.failureClass!=="cancelled"&&t.addIssue({code:"custom",message:"Cancelled Work must use the cancelled failure class.",path:["failureClass"]}),e.status==="timeout"&&e.failureClass!=="timeout"&&t.addIssue({code:"custom",message:"Timed-out Work must use the timeout failure class.",path:["failureClass"]})}),zo=g.object({schemaVersion:g.literal(Ap),id:g.string().regex(/^work-evidence-[a-f0-9]{24}$/),source:g.object({surface:g.enum(["desktop","hosted"]),experience:g.enum(["work","development"]),opaqueRef:Np,revisionHash:he}).strict(),agentSnapshot:Aa.nullable(),model:qa,runtime:g.object({adapterId:gt,adapterVersion:gt,capabilityRef:ie.nullable()}).strict(),inputHash:he,terminal:Zp,trace:g.object({sanitizedRef:ie,traceHash:he,sanitationPolicyVersion:gt,incomplete:g.boolean()}).strict(),outputRefs:g.array(ie).max(1e4),artifactRefs:g.array(ie).max(1e5),validationEvidenceRefs:g.array(ie).max(1e4),interventions:g.object({approvals:g.number().int().nonnegative().max(1e6),questions:g.number().int().nonnegative().max(1e6),steeringEvents:g.number().int().nonnegative().max(1e6),otherUserInterventions:g.number().int().nonnegative().max(1e6)}).strict(),timing:g.object({startedAt:yt,completedAt:yt,latencyMs:g.number().int().nonnegative().max(31536e6)}).strict(),usage:g.object({promptTokens:g.number().int().nonnegative().nullable(),completionTokens:g.number().int().nonnegative().nullable(),totalTokens:g.number().int().nonnegative().nullable()}).strict(),costUsd:g.number().nonnegative().max(1e6).nullable(),provenance:g.object({consentReceiptRef:ie,consentScope:g.literal("work_process_and_artifacts"),consentGrantedAt:yt,policyVersion:gt,projectorVersion:gt,disclosure:g.literal("portable_sanitized"),ownershipScope:g.enum(["personal","workspace"]),workspaceRef:Mp.nullable(),participantPolicy:g.enum(["creator_only","all_participants"]),retention:g.object({policy:g.literal("source_bound"),deleteWithSource:g.literal(!0),expiresAt:yt.nullable()}).strict()}).strict()}).strict().superRefine((e,t)=>{e.trace.traceHash!==e.trace.sanitizedRef.contentHash&&t.addIssue({code:"custom",message:"Sanitized trace reference must bind traceHash.",path:["trace","traceHash"]});let r=Date.parse(e.timing.completedAt)-Date.parse(e.timing.startedAt);(r<0||r!==e.timing.latencyMs)&&t.addIssue({code:"custom",message:"latencyMs must equal completedAt minus startedAt.",path:["timing","latencyMs"]}),e.provenance.ownershipScope==="workspace"&&e.provenance.workspaceRef===null&&t.addIssue({code:"custom",message:"Workspace-owned evidence requires workspaceRef.",path:["provenance","workspaceRef"]}),e.provenance.ownershipScope==="personal"&&e.provenance.workspaceRef!==null&&t.addIssue({code:"custom",message:"Personal evidence cannot carry workspaceRef.",path:["provenance","workspaceRef"]}),Vo(e.outputRefs,["outputRefs"],t),Vo(e.artifactRefs,["artifactRefs"],t),Vo(e.validationEvidenceRefs,["validationEvidenceRefs"],t)}),kn=zo.safeExtend({contentHash:he}).strict(),Yp=g.enum(["accepted","needs_correction","not_useful"]),Qp=g.enum(["correct","complete","high_quality","incorrect","incomplete","wrong_format","unsafe","stale","irrelevant","other"]),Oc=g.object({schemaVersion:g.literal(Pp),id:g.string().regex(/^work-feedback-[a-f0-9]{24}$/),evidenceReceiptRef:ie,outputRevisionRef:ie.nullable(),verdict:Yp,reasonCodes:g.array(Qp).max(16),correctionRef:ie.nullable(),correctedOutputRevisionRef:ie.nullable(),actor:g.literal("user"),createdAt:yt}).strict().superRefine((e,t)=>{new Set(e.reasonCodes).size!==e.reasonCodes.length&&t.addIssue({code:"custom",message:"Feedback reason codes must be unique.",path:["reasonCodes"]}),e.verdict!=="needs_correction"&&(e.correctionRef||e.correctedOutputRevisionRef)&&t.addIssue({code:"custom",message:"Only needs_correction feedback may bind correction artifacts.",path:["verdict"]})}),Zo=Oc.safeExtend({contentHash:he}).strict();function Pc(e){return`urn:openpond:artifact:${e}`}i(Pc,"evidenceArtifactId");function gk(e){return`urn:openpond:work:${y(e)}`}i(gk,"workSourceOpaqueRef");function yk(e){return`urn:openpond:workspace:${y(e)}`}i(yk,"workWorkspaceOpaqueRef");function Gp(e){return ie.parse({id:Pc(e.contentHash),contentHash:e.contentHash,mediaType:e.mediaType??null,sizeBytes:e.sizeBytes??null})}i(Gp,"evidenceArtifactRef");function wk(e){let t=Ac.parse(e);return Xo.parse({...t,contentHash:y(t)})}i(wk,"createWorkProcessTrace");function kk(e){let t=zo.parse(e);return kn.parse({...t,contentHash:y(t)})}i(kk,"createWorkEvidenceReceipt");function Rk(e,t){let r=Oc.parse(e),n=Zo.parse({...r,contentHash:y(r)});return t&&Kp(n,t),n}i(Rk,"createWorkFeedbackReceipt");function Tk(e){return _p(e,kn,zo)}i(Tk,"verifyWorkEvidenceReceipt");function vk(e){return Gp({contentHash:e.contentHash,mediaType:"application/vnd.openpond.work-evidence+json",sizeBytes:null})}i(vk,"workEvidenceReceiptRef");function Kp(e,t){if(e.evidenceReceiptRef.contentHash!==t.contentHash)throw new Error("Feedback targets a different Work evidence receipt.");if(e.outputRevisionRef&&!t.outputRefs.some(r=>r.contentHash===e.outputRevisionRef.contentHash))throw new Error("Feedback targets an output revision not bound by the Work evidence receipt.")}i(Kp,"assertFeedbackTargetsEvidence");function _p(e,t,r){let n=t.safeParse(e);if(!n.success)return!1;let{contentHash:o,...s}=n.data;return y(r.parse(s))===o}i(_p,"verifyHashedValue");function Vo(e,t,r){let n=e.map(o=>o.contentHash);new Set(n).size!==n.length&&r.addIssue({code:"custom",message:"Artifact content hashes must be unique.",path:t})}i(Vo,"addDuplicateHashIssues");import{randomUUID as $p}from"node:crypto";import{promises as Rn}from"node:fs";import Nc from"node:path";function Xt(e){return{binding:i(()=>{let t=gi(e.home,"refiner_bindings","active");return t?Xr.parse(t.value):null},"binding"),releases:i(async()=>{let t=(await Rn.readdir(e.releases)).filter(r=>r.endsWith(".json"));return Promise.all(t.map(async r=>vo.parse(JSON.parse(await Rn.readFile(Nc.join(e.releases,r),"utf8")))))},"releases"),transitions:i(()=>Object.values(yi(e.home,"refiner_transitions")).map(t=>Eo.parse(t.value)),"transitions"),release:i(async t=>{let r=vo.parse(JSON.parse(await Rn.readFile(Nc.join(e.releases,`${t.contentHash}.json`),"utf8")));if(r.id!==t.id||r.contentHash!==t.contentHash)throw new Error("Refiner release reference does not match immutable release content.");return r},"release"),persistRelease:i(async t=>Mc(e.releases+`/${t.contentHash}.json`,Na(t),!0),"persistRelease"),writeSource:i(async t=>Mc(e.source,t),"writeSource"),transition:i(async(t,r)=>{hi(e.home,n=>{n.exec("BEGIN IMMEDIATE");try{let o=n.prepare("SELECT payload FROM refiner_bindings WHERE id = 'active'").get(),s=o?Xr.parse(JSON.parse(o.payload)):null,a=new Date().toISOString(),c={id:t.id,contentHash:t.contentHash},d={schemaVersion:"openpond.refinerTransitionReceipt.v1",id:`refiner-transition-${$p()}`,operation:r.operation,bindingChanged:r.bindingChanged,previousRelease:s?.release??null,nextRelease:c,actor:r.actor,reason:r.reason,authoringSkillHash:r.authoringSkillHash,validation:{valid:!0,messages:[]},createdAt:a},l=Eo.parse({...d,contentHash:y(d)});if(n.prepare("INSERT INTO refiner_transitions VALUES (?, ?, 1)").run(l.contentHash,JSON.stringify(l)),r.bindingChanged){let p=Xr.parse({schemaVersion:"openpond.refinerBinding.v1",channel:"active",revision:(s?.revision??-1)+1,release:c,updatedAt:a});n.prepare("INSERT INTO refiner_bindings VALUES ('active', ?, 1) ON CONFLICT(id) DO UPDATE SET payload=excluded.payload, revision=revision+1").run(JSON.stringify(p))}n.exec("COMMIT")}catch(o){throw n.exec("ROLLBACK"),o}})},"transition")}}i(Xt,"createLocalRefinerProfileRepository");async function Mc(e,t,r=!1){await wt(e,async()=>{if(r){let n=await Rn.readFile(e,"utf8").catch(()=>null);if(n!==null){if(n!==t)throw new Error("Immutable Refiner release bytes changed.");return}}await ui(e,t)})}i(Mc,"atomicWrite");var Dc="OpenPond Refiner Core: evidence admission, privacy, ownership, validation, and immutable activation boundaries.";function gr(e){let t=rt.join(e,"library","refiners");return{home:e,root:t,source:rt.join(t,"source","openpond.review.json"),releases:rt.join(t,"releases")}}i(gr,"refinerProfilePaths");function qk(e){let t=i(()=>ze(e),"inspect"),r=i(s=>em(e,s),"update"),n=i(s=>rm(e,s),"activate"),o=i(s=>om(e,s),"rollback");return{refinerHistoryPayload:t,updateRefinerProfilePayload:r,activateRefinerReleasePayload:n,rollbackRefinerReleasePayload:o,inspectRefiner:t,updateRefiner:r,activateRefiner:n,rollbackRefiner:o}}i(qk,"createRefinerProfileRoutePayloads");async function ze(e){let t=gr(e),r=Xt(t),n=r.binding();if(!n)throw new Error("Active Refiner binding is unavailable.");let o=(await r.releases()).sort((c,d)=>d.createdAt.localeCompare(c.createdAt)),s=o.find(c=>c.id===n.release.id&&c.contentHash===n.release.contentHash);if(!s)throw new Error("Active Refiner release is unavailable.");let a=r.transitions().sort((c,d)=>d.createdAt.localeCompare(c.createdAt));return Qi.parse({rootPath:t.root,sourcePath:t.source,binding:n,currentRelease:s,releases:o,transitions:a})}i(ze,"inspectRefinerProfile");async function Hc(e){return(await ze(e)).currentRelease}i(Hc,"loadActiveRefinerRelease");async function em(e,t){return wt(rt.join(ur(e).runtime,"refiner-edit"),()=>tm(e,t))}i(em,"updateRefinerProfile");async function tm(e,t){let r=Gi.parse(t),n=gr(e),o=Xt(n);await Yo(n);let s=Fa.parse(r.profile),a=So({profile:s,coreVersion:xo,corePrompt:Dc}),d=(await o.releases()).find(p=>p.composedPromptHash===a.composedPromptHash&&p.profileHash===a.profileHash)??a;await o.persistRelease(d),await o.writeSource(cr(s));let l=o.binding();if(!l)throw new Error("Active Refiner binding is unavailable.");return r.activate&&l.release.contentHash===d.contentHash||!r.activate&&o.transitions().some(m=>!m.bindingChanged&&m.nextRelease.contentHash===d.contentHash&&m.actor===r.actor&&m.reason===r.reason&&m.authoringSkillHash===r.authoringSkillHash)||await o.transition(d,{operation:"update",bindingChanged:r.activate,actor:r.actor,reason:r.reason,authoringSkillHash:r.authoringSkillHash}),ze(e)}i(tm,"updateRefinerProfileUnlocked");async function rm(e,t){return wt(rt.join(ur(e).runtime,"refiner-edit"),()=>nm(e,t))}i(rm,"activateRefinerRelease");async function nm(e,t){let r=qo.parse(t),n=gr(e),o=Xt(n);await Yo(n);let s=await o.release(r.release),a=o.binding();if(!a)throw new Error("Active Refiner binding is unavailable.");return a.release.contentHash===s.contentHash||(await o.transition(s,{operation:"activate",bindingChanged:!0,actor:r.actor,reason:r.reason,authoringSkillHash:null}),await o.writeSource(cr(s.profile))),ze(e)}i(nm,"activateRefinerReleaseUnlocked");async function om(e,t){return wt(rt.join(ur(e).runtime,"refiner-edit"),()=>sm(e,t))}i(om,"rollbackRefinerRelease");async function sm(e,t){let r=qo.parse(t),n=gr(e),o=Xt(n);await Yo(n);let s=await o.release(r.release),a=o.binding();if(!a)throw new Error("Active Refiner binding is unavailable.");return a.release.contentHash===s.contentHash||(await o.transition(s,{operation:"rollback",bindingChanged:!0,actor:r.actor,reason:r.reason,authoringSkillHash:null}),await o.writeSource(cr(s.profile))),ze(e)}i(sm,"rollbackRefinerReleaseUnlocked");async function am(e){await wt(rt.join(ur(e).runtime,"refiner-initialize"),()=>im(gr(e)))}i(am,"initializeRefinerProfile");async function Yo(e){await am(e.home)}i(Yo,"ensureInitialized");async function im(e){let t=Xt(e);if(await Promise.all([Lc.mkdir(rt.dirname(e.source),{recursive:!0,mode:448}),Lc.mkdir(e.releases,{recursive:!0,mode:448})]),t.binding())return;let r=So({profile:Ua,coreVersion:xo,corePrompt:Dc});await t.persistRelease(r),await t.writeSource(cr(r.profile)),await t.transition(r,{operation:"initialize",bindingChanged:!0,actor:"openpond",reason:"Initialize the default Refiner Review Profile.",authoringSkillHash:null})}i(im,"initialize");import{randomUUID as fm}from"node:crypto";var cm=["prompt_tokens","promptTokens","input_tokens","inputTokens"],dm=["completion_tokens","completionTokens","output_tokens","outputTokens"],lm=["total_tokens","totalTokens"];function Ze(e){let t=e&&typeof e=="object"&&!Array.isArray(e)?e:{},r=Qo(t,cm),n=um(t,r),o=n.promptTokens,s=Qo(t,dm),c=Qo(t,lm)??(o!==null&&s!==null?o+s:null);return{promptTokens:o,cachedPromptTokens:n.cachedPromptTokens,uncachedPromptTokens:n.uncachedPromptTokens,cacheWritePromptTokens:n.cacheWritePromptTokens,cacheTelemetrySource:n.cacheTelemetrySource,completionTokens:s,totalTokens:c}}i(Ze,"normalizeModelUsageTokens");function um(e,t){let r=Tn(e,["cached_input_tokens","cachedInputTokens","cached_prompt_tokens","cachedPromptTokens","prompt_cache_hit_tokens","promptCacheHitTokens"]),n=Tn(e,["prompt_cache_miss_tokens","promptCacheMissTokens"]),o=Tn(e,["cache_read_input_tokens","cacheReadInputTokens"]),s=mm(e,[["prompt_tokens_details","cached_tokens"],["promptTokensDetails","cachedTokens"],["input_tokens_details","cached_tokens"],["inputTokensDetails","cachedTokens"]]),a=Tn(e,["cache_creation_input_tokens","cacheCreationInputTokens","cache_write_input_tokens","cacheWriteInputTokens"]),c=r.value!==null?r:o.value!==null?o:s,d=c.value!==null||n.value!==null||a.value!==null,l=d?pm(e):null;if(!d)return{promptTokens:t,cachedPromptTokens:null,uncachedPromptTokens:null,cacheWritePromptTokens:null,cacheTelemetrySource:null};let p=c.value,u=a.present?a.value:null,m=c===o&&o.value!==null||a.value!==null,f=t??(c.value!==null&&n.value!==null?c.value+n.value:null);if(f===null)return{promptTokens:null,cachedPromptTokens:p,uncachedPromptTokens:n.value,cacheWritePromptTokens:u,cacheTelemetrySource:l};if(m){let w=p??0,k=u??0,x=t??n.value??0;return{promptTokens:x+w+k,cachedPromptTokens:p,uncachedPromptTokens:x+k,cacheWritePromptTokens:u,cacheTelemetrySource:l}}let h=p===null?null:Math.min(f,p),R=n.value===null?h===null?null:f-h:Math.min(f-(h??0),n.value);return{promptTokens:f,cachedPromptTokens:h,uncachedPromptTokens:R,cacheWritePromptTokens:u,cacheTelemetrySource:l}}i(um,"normalizeCacheUsage");function pm(e){return(e.cache_telemetry_source??e.cacheTelemetrySource)==="provider_response_headers"?"provider_response_headers":"provider_usage_body"}i(pm,"cacheTelemetrySourceFromUsage");function Tn(e,t){for(let r of t)if(Object.prototype.hasOwnProperty.call(e,r))return{present:!0,value:Go(e[r])};return{present:!1,value:null}}i(Tn,"firstPresentTokenCount");function mm(e,t){for(let[r,n]of t){let o=e[r];if(!o||typeof o!="object"||Array.isArray(o))continue;let s=o;if(Object.prototype.hasOwnProperty.call(s,n))return{present:!0,value:Go(s[n])}}return{present:!1,value:null}}i(mm,"firstPresentNestedTokenCount");function Qo(e,t){for(let r of t){let n=Go(e[r]);if(n!==null)return n}return null}i(Qo,"firstTokenCount");function Go(e){if(typeof e=="number"&&Number.isFinite(e)&&e>=0)return Math.trunc(e);if(typeof e!="string")return null;let t=e.trim();if(!/^\d+$/.test(t))return null;let r=Number(t);return Number.isSafeInteger(r)?r:null}i(Go,"tokenCount");function En(e){let t=vn(vn(vn(e.metadata).billing).pricing);return{version:zt(t.version,"pricing version"),source:zt(t.source,"pricing source"),effectiveAt:zt(t.effectiveAt,"pricing effective date"),inputUsdPerMillionTokens:Zt(t.inputUsdPerMillionTokens,"input token rate"),cachedInputUsdPerMillionTokens:Zt(t.cachedInputUsdPerMillionTokens,"cached input token rate"),outputUsdPerMillionTokens:Zt(t.outputUsdPerMillionTokens,"output token rate")}}i(En,"hostedTokenPricingFromCatalog");function Xk(e){let t=vn(e);try{return{version:zt(t.version,"pricing version"),source:zt(t.source,"pricing source"),effectiveAt:zt(t.effectiveAt,"pricing effective date"),inputUsdPerMillionTokens:Zt(t.inputUsdPerMillionTokens,"input token rate"),cachedInputUsdPerMillionTokens:Zt(t.cachedInputUsdPerMillionTokens,"cached input token rate"),outputUsdPerMillionTokens:Zt(t.outputUsdPerMillionTokens,"output token rate")}}catch{return null}}i(Xk,"hostedTokenPricingFromValue");function nt(e,t){let r=Ze(e);if(r.promptTokens===null&&r.completionTokens===null)return null;let n=r.cachedPromptTokens??0;return((r.uncachedPromptTokens??r.promptTokens??0)*t.inputUsdPerMillionTokens+n*t.cachedInputUsdPerMillionTokens+(r.completionTokens??0)*t.outputUsdPerMillionTokens)/1e6}i(nt,"hostedUsageCostUsd");function vn(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:{}}i(vn,"record");function zt(e,t){if(typeof e=="string"&&e.trim())return e.trim();throw new Error(`Hosted model catalog is missing ${t}.`)}i(zt,"requiredString");function Zt(e,t){if(typeof e=="number"&&Number.isFinite(e)&&e>=0)return e;throw new Error(`Hosted model catalog is missing ${t}.`)}i(Zt,"requiredRate");function qc(e={}){let t=e.catalog??fn,r=e.stream??hn;return{async prepare(n){if(n.providerId!=="openpond")throw new Error("The selected judge provider is not connected to the hosted judge transport.");if(n.revision!==null)throw new Error("This judge transport cannot enforce a model revision; select a provider with revision support.");let o=await t();if(o.error)throw new Error(`Judge model catalog unavailable: ${o.error}`);let s=o.models.find(u=>u.id===n.modelId);if(!s)throw new Error("The selected judge model is unavailable.");let a=Wc(s.raw),c=En(a),d=jc(a.context_window,"context window"),l=Math.min(4096,jc(a.output_limit,"output limit")),p=(d*Math.max(c.inputUsdPerMillionTokens,c.cachedInputUsdPerMillionTokens)+l*c.outputUsdPerMillionTokens)/1e6;if(!(p>0))throw new Error("The judge model must have a positive known charge ceiling.");return{maximumChargeUsd:p,async dispatch(u){u?.throwIfAborted();let m="",f=null,h=null,R=null,w=!1;for await(let C of r({model:n.modelId,messages:[{role:"system",content:n.system},{role:"user",content:n.data}],requestId:`learning-judge-${fm()}`,maxTokens:l,temperature:n.temperature,signal:u})){let A=Wc(C.raw);if(typeof A.model=="string"){if(f!==null&&A.model!==f)throw new Error("Judge response model identity changed during streaming.");f=A.model}if(typeof A.id=="string"){if(h!==null&&h!==A.id)throw new Error("Judge response identity changed during streaming.");h=A.id}if(C.type==="text_delta"&&(m+=C.text),m.length>1e5)throw new Error("Judge response exceeds the retained response limit.");C.type==="usage"&&(R=C.usage),C.type==="finish"&&(w=!0)}if(!w||!f||!h)throw new Error("Judge response did not include a complete model receipt.");let k=Ze(R),x=k.promptTokens!==null&&k.completionTokens!==null?nt(R,c):null;return{text:m,modelId:f,modelRevision:null,responseId:h,inputTokens:k.promptTokens,outputTokens:k.completionTokens,costUsd:x}}}},async cancel({run:n}){return!n.judgeCalls?.some(o=>o.status==="reserved")}}}i(qc,"createLearningHostedJudgeProvider");function Wc(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:{}}i(Wc,"record");function jc(e,t){if(typeof e!="number"||!Number.isSafeInteger(e)||e<=0)throw new Error(`Judge catalog is missing its ${t}.`);return e}i(jc,"positiveInteger");function sR(e,t=qc()){return{execute(r){if(r.definition.execution.environment.entrypoint==="openpond.javascript-environment.v1")throw new Error("Tool Tasksets require grading an owner-recorded environment attempt.");let n=ni({repository:e,scope:r.scope,run:r.run});return Qa({binding:r.binding,rewards:r.rewards,task:Gr(r.evidence,r.definition),evidence:ri(r.evidence,r.run.output),evaluatorContext:r.evidence.submission.evaluatorContext,signal:r.signal,modelJudge:$a({readRubric:i(o=>e.transaction(r.scope,async s=>ue(await Ue(s,"asset",o.id,1),o)),"readRubric"),async executeBudgeted(o,s){let a=await t.prepare(o,{scope:r.scope,run:r.run});return ei({store:n,maximumCharge:i(()=>a.maximumChargeUsd,"maximumCharge"),dispatch:i((d,l)=>a.dispatch(l),"dispatch")})(`grade-${y(o)}`,o,s)}}),customVerifier:i(async({grader:o,task:s,evidence:a})=>{let c=await yr({repository:e,scope:r.scope,grader:o,task:s,evidence:a,evaluatorContext:r.evidence.submission.evaluatorContext,timeoutMs:r.run.timeoutMs,signal:r.signal});return{score:c.score,passed:c.passed,rewardEligible:o.rewardEligible,failureClass:null,feedback:[c.feedback],visibleEvidenceRefs:[],privilegedEvidenceRefs:c.evidenceRefs}},"customVerifier")})},async cancel({scope:r,run:n}){let o=await e.transaction(r,s=>Ue(s,"grade",n.id));return o.judgeCalls?.some(s=>s.status==="reserved")?!1:t.cancel({scope:r,run:o})}}}i(sR,"createLocalTaskGradeExecutor");async function yr(e){let t=await e.repository.transaction(e.scope,async r=>ue(await Ue(r,"asset",e.grader.verifierRef.id,1),e.grader.verifierRef));return Vt({source:t,exportName:e.grader.exportName,runtime:e.grader.runtime,timeoutMs:Math.min(e.grader.timeoutMs,e.timeoutMs??e.grader.timeoutMs),signal:e.signal,value:{task:e.task,attempt:e.evidence,input:e.task.input,output:e.evidence.output,expectedOutput:e.task.expectedOutput,evaluatorContext:e.evaluatorContext,infrastructureError:e.evidence.infrastructureError??null}})}i(yr,"executeLocalLearningVerifier");import hm from"node:path";async function Fc(e,t,r){if(!r)throw new Error("Ordinary tool execution requires its owner's package directory.");let n=$r({taskset:e,adapterId:dn(e)}),o=await wc({root:hm.join(r,"training","tasksets",Me(e)),content:{schemaVersion:"openpond.tasksetPackage.v1",taskset:n.tasksetRelease,environment:n.environmentRelease,verifierSet:n.verifierSetRelease},sources:ec.parse(e.metadata.portableFileInventory)}),s=Ii(o);if(!s)throw new Error("The Taskset does not declare a JavaScript execution graph.");let a=o.taskset.tasks.find(l=>l.id===t.id);if(!a)throw new Error("The selected task is missing from its executable package.");let c=s.assets.find(l=>l.id===s.execution.javascript.module.id),d=s.assets.find(l=>l.id===a.privilegedContextRef);return{execution:s.execution,module:c,initialState:JSON.parse(d.text),definition:Y(o.taskset),instructions:Ci(o),task:a}}i(Fc,"loadOrdinaryToolEnvironment");var ce="openpond.javascript-environment.v1";async function Yt(e,t,r,n){let o=t.tasks.find(s=>s.id===r.id);if(!o||y(o)!==y(r))throw new Error("Tool task differs from the selected immutable Taskset.");return t.metadata.taskDefinition===void 0?Fc(t,r,n):e.learningRepository().transaction(t.profileId,async s=>{let a=await Be(s,"definition",Ee.parse(t.metadata.taskDefinition)),c=a.execution.environment;if(c.entrypoint!==ce||t.environment.entrypoint!==ce||t.environment.kind!=="agent"||t.environment.stateful!==c.stateful||t.environment.defaultTimeoutMs!==c.defaultTimeoutMs||t.environment.networkPolicy!==c.networkPolicy||t.environment.deterministicSeeds!==c.deterministicSeeds||y(t.environment.toolNames)!==y(a.execution.tools.map(T=>T.name))||y(t.environment.metadata.portableTools)!==y(a.execution.tools)||y(t.policy)!==y(a.execution.policy)||y(t.metadata.rewardBinding)!==y(a.rewardBinding))throw new Error("Tool Taskset context differs from its pinned task definition.");let d=await Be(s,"binding",a.rewardBinding),l=await Promise.all(d.sources.map(T=>Be(s,"reward",T.reward))),p=Qr.parse({id:r.id,clusterKey:r.clusterKey,split:r.split,input:r.input,expectedOutput:r.expectedOutput,policyVisibleContext:r.policyVisibleContext,privilegedContextRef:r.privilegedContextRef,artifactRefs:[],tags:r.tags}),u={...a.execution,graders:$e(d,l),tasks:[p]},m=await Ue(s,"asset",Si(u),1),f=vi.parse(JSON.parse(ue(m,m.asset))),h=[f.javascript.module,f.environment.actionSchemaRef,f.environment.observationSchemaRef,f.environment.stateSchemaRef].filter(T=>T!==null),R=[...new Set([...h.map(T=>T.id),r.privilegedContextRef].filter(T=>T!==null))],w=await Promise.all(R.map(T=>Ue(s,"asset",T,1))),k=xi(u,m,w);if(y(t.environment.metadata.portableExecutionResources)!==y({environment:k.environment,verifierSet:k.verifierSet}))throw new Error("Tool Taskset publication differs from its private execution resources.");let x=w.find(T=>T.id===k.javascript.module.id),C=w.find(T=>T.id===r.privilegedContextRef),A=JSON.parse(ue(C,C.asset));return{execution:k,module:x,initialState:A,definition:Y(a),instructions:a.instructions,task:p}})}i(Yt,"loadStarterToolEnvironment");function Uc(e){let t=Mo({text:e.instructions,path:"policy/instructions.txt",mediaType:"text/plain",visibility:"policy"}),r=Mo({text:JSON.stringify({environment:Y(e.execution.environment),verifierSet:Y(e.execution.verifierSet),javascript:Y(e.execution.javascript)}),path:"environment/dependencies.json",mediaType:"application/json",visibility:"host_private"}),n=La({schemaVersion:"openpond.agentSnapshot.v2",id:`starter-agent-${e.definition.contentHash}`,sourceRelease:{id:e.definition.id,contentHash:e.definition.contentHash},instructions:[t.asset],skills:[],agents:[],toolDeclarations:e.execution.javascript.tools,capabilityRequirements:[],dependencyLock:r.asset,portability:{portable:!0,blockers:[],localOnlyAssetRefs:[],hostPrivateAssetRefs:[e.module.id,r.id]},metadata:{execution:ce}}),o=Da({schemaVersion:"openpond.harnessRelease.v2",id:`starter-harness-${n.contentHash}`,agentSnapshot:{id:n.id,contentHash:n.contentHash},program:e.module.asset,tools:e.execution.javascript.tools,lifecycle:{create:!0,reset:!0,step:!0,collect:!0,destroy:!0,resetScope:"attempt"},graderInterface:{visibleEvidence:["output"],privilegedEvidence:["environment_state","private_verifier"],privateVerifierIsolation:!0},files:[t.asset,r.asset,e.module.asset],metadata:{execution:ce}});return{agentSnapshot:n,harnessRelease:o,instructionContext:void 0}}i(Uc,"compileStarterToolHarness");import Sn from"node:path";import{constants as Bc}from"node:fs";import{open as gm,realpath as Jc}from"node:fs/promises";var ym=g.string().regex(/^[a-f0-9]{64}$/),wm=g.object({schemaVersion:g.literal("openpond.starterToolAttempt.v1"),requestId:g.string(),taskset:Ee,taskHash:ym,model:g.unknown(),seed:g.number().int(),attempt:g.number().int(),definition:Ee,policySource:g.enum(["model","fixture"]),environment:Ee,verifierSet:Ee,result:Ti}).strict();async function xn(e){let{store:t,taskset:r,task:n,attempt:o}=e,s=await Yt(t,r,n,e.storeDir),c=(await t.listTaskAttemptArtifacts({attemptId:o.id})).filter(x=>x.kind==="environment_state"&&x.tasksetId===r.id&&x.taskId===n.id&&x.attemptId===o.id&&o.artifactRefs.includes(x.id)&&o.privilegedOutcomeRef===x.id);if(c.length!==1)throw new Error("Tool grading requires exactly one owner-recorded environment artifact.");let d=c[0],l=await Jc(Sn.join(e.storeDir,"training","evaluation-artifacts")),p=await Jc(Sn.dirname(d.path)),u=Sn.relative(l,p);if(!u||u.startsWith("..")||Sn.isAbsolute(u))throw new Error("Tool evidence is outside the execution owner's artifact directory.");let m=await gm(d.path,Bc.O_RDONLY|Bc.O_NOFOLLOW),f;try{let x=await m.stat();if(!x.isFile()||x.size>33554432||x.size!==d.sizeBytes)throw new Error("Tool evidence exceeds its declared byte boundary.");f=await m.readFile()}finally{await m.close()}if(f.byteLength!==d.sizeBytes||ve(f)!==d.sha256)throw new Error("Owner-recorded tool evidence bytes changed.");let h=wm.parse(JSON.parse(f.toString("utf8"))),{contentHash:R,...w}=h.result,k=h.result;if(y(w)!==R||!k.snapshot||!k.environmentCleanupComplete||!["completed","budget_exhausted","policy_failure"].includes(k.status)||y(h.taskset)!==y(Y(r))||h.taskHash!==y(n)||y(h.model)!==y(o.modelRef)||h.seed!==o.seed||h.attempt!==o.attempt||o.tasksetId!==r.id||o.taskId!==n.id||o.split!==n.split||y(h.definition)!==y(s.definition)||y(h.environment)!==y(Y(s.execution.environment))||y(h.verifierSet)!==y(Y(s.execution.verifierSet))||k.taskId!==n.id||k.snapshot.seed!==o.seed||k.snapshot.inputHash!==y(n.input)||y(k.snapshot.definition)!==y(Y(s.execution.javascript))||k.snapshot.finalStateHash!==y(k.snapshot.state)||y(o.output)!==y({text:k.output??""})||o.metadata.environmentAttemptHash!==R)throw new Error("Tool evidence differs from the selected task, model or recorded attempt.");if(o.metadata.policySource!==h.policySource)throw new Error("Tool evidence policy source changed.");return{environment:{status:k.status,collected:k.collected,definition:k.snapshot.definition,initialStateHash:k.snapshot.initialStateHash,finalStateHash:k.snapshot.finalStateHash,finalState:k.snapshot.state,events:k.snapshot.events}}}i(xn,"readStarterToolEvidence");async function ot(e,t){if(t.metadata.learning!==void 0)return qt.parse(t.metadata.learning);if(t.metadata.rewardBinding===void 0)return;let r=Ee.parse(t.metadata.rewardBinding);return e.learningRepository().transaction(t.profileId,async n=>{let o=await Be(n,"binding",r),s=[...new Map(o.sources.map(c=>[`${c.reward.id}:${c.reward.revision}:${c.reward.contentHash}`,c.reward])).values()],a=await Promise.all(s.map(c=>Be(n,"reward",c)));return{binding:o,rewards:a}})}i(ot,"resolveTasksetRewardBinding");async function km(e,t,r){let n=await ot(e,t);if(!n)return{rewardExecution:void 0,verifierAssets:[]};let o=$e(n.binding,n.rewards).flatMap(c=>c.kind==="custom_verifier"?[c.verifierRef]:c.kind==="model_judge"?[c.rubricRef]:[]),s=t.metadata.learning===void 0?void 0:await un(r,t);if(s){let c=[...new Map(o.map(d=>{let l=s.learningResources.assets.find(p=>p.id===d.id);if(!l)throw new Error("Imported batch verifier is missing from its package.");return ue(l,d),[l.id,l]})).values()];return{rewardExecution:n,verifierAssets:c}}let a=await e.learningRepository().transaction(t.profileId,async c=>{let d=new Map;for(let l of o){let p=await Ue(c,"asset",l.id,1);ue(p,l),d.set(p.id,p)}return[...d.values()]});return{rewardExecution:n,verifierAssets:a}}i(km,"resolveTasksetTrainingReward");async function YR(e,t,r){let n=await km(e,t,r.storeDir);if(!n.rewardExecution)return n;let o=$e(n.rewardExecution.binding,n.rewardExecution.rewards);if(!n.rewardExecution.binding.sources.some(s=>s.role==="evaluation"&&s.weight>0))throw new Error("Managed training requires a positively weighted evaluation Reward source for retained validation.");if(o.some(s=>s.kind==="custom_verifier"&&s.runtime==="sandbox_process"))throw new Error("Managed preparation requires a qualified isolated sandbox for process verifiers.");if(r.placement!=="remote"||t.environment.kind==="work"||t.capabilities.requiresState||t.capabilities.requiresTools||o.some(s=>s.kind==="human"||s.kind==="model_judge"&&(!s.model||s.calibrationStatus!=="passed"))||t.tasks.some(s=>s.privilegedContextRef!==null)||!n.rewardExecution.binding.sources.some(s=>s.role==="training"&&s.weight>0)||r.hasLearnedPreferenceReward)throw new Error("This Reward binding requires an additional managed execution adapter.");return n}i(YR,"resolveManagedTasksetReward");async function Vc(e,t,r){let n=await ot(e,t);if(!n)throw new Error("The Taskset has no published Reward binding.");let o=$e(n.binding,n.rewards);return async({grader:s,task:a,attempt:c,signal:d})=>{let l=t.tasks.find(f=>f.id===a.id);if(!l||y(l)!==y(a))throw new Error("Task differs from the selected immutable Taskset.");let p=null;if(t.environment.entrypoint===ce){if(!r)throw new Error("Tool grading requires the execution owner's artifact directory.");p=await xn({store:e,storeDir:r,taskset:t,task:a,attempt:c})}else if(a.privilegedContextRef!==null)throw new Error("This authored Taskset requires a private evaluator-context resolver.");let u=o.find(f=>f.id===s.id);if(u?.kind!=="custom_verifier")throw new Error("The verifier is absent from the published Reward binding.");let m=Qr.parse({id:a.id,clusterKey:a.clusterKey,split:a.split,input:a.input,expectedOutput:a.expectedOutput,policyVisibleContext:a.policyVisibleContext,privilegedContextRef:a.privilegedContextRef,artifactRefs:[],tags:a.tags});return yr({repository:e.learningRepository(),scope:t.profileId,grader:u,task:m,evidence:{output:c.output,artifactRefs:c.artifactRefs,runtimeEventRefs:c.runtimeEventRefs,infrastructureError:c.infrastructureError},evaluatorContext:p,signal:d})}}i(Vc,"createTasksetBindingVerifier");async function Tt(e,t,r){let n=r?Ee.parse(r):null;if(n&&n.id!==t)throw new Error("Taskset execution reference differs from the requested Taskset.");let o=n?await e.getTasksetRevision(n.id,n.revision):await e.getTaskset(t);if(!o||n&&(o.contentHash!==n.contentHash||et(o)!==n.contentHash))throw new Error("Taskset execution revision is unavailable or differs from its immutable hash.");return o}i(Tt,"requireLocalTasksetRevision");async function tT(e,t,r){let n=await e.releaseForTaskset(t);return n||$r({taskset:t,rewardExecution:r?await ot(r,t):void 0,adapterId:dn(t)}).tasksetRelease}i(tT,"requireReleasedTaskset");import{createHash as Rm}from"node:crypto";function Xc(e,t,r){if(t.metadata.importedPackageHash!==e.contentHash)throw new Error("The Work projection differs from the admitted published package.");let n=e.taskset.tasks.find(a=>a.id===r.id);if(!n||n.split!==r.split||y(r.metadata.portableTaskRecord)!==y(n))throw new Error("The Work task differs from its exact released population.");let o=0,s=(r.assets??[]).map(a=>{let c=n.artifactRefs.find(u=>u.id===a.id&&u.contentHash===a.sha256&&u.path===a.artifactRef),d=c&&e.files.find(u=>y(u.asset)===y(c));if(!c||!d||c.visibility!=="policy")throw new Error("The Work task requests an unavailable or private evaluator file.");let l=Buffer.from(bi(d));if(Rm("sha256").update(l).digest("hex")!==a.sha256||l.length!==a.sizeBytes||a.split!==r.split)throw new Error("The published Work input manifest changed.");if(o+=l.length,o>25e7)throw new Error("Published Work inputs exceed the admitted 250 MB ceiling.");return{...a,assetId:a.id,storageName:a.fileName,bytes:l,sizeBytes:l.length}});if(s.length!==n.artifactRefs.length)throw new Error("The exact policy-visible Work asset population is incomplete.");return s}i(Xc,"advancedPublishedWorkAssets");import{AsyncLocalStorage as Tm}from"node:async_hooks";var Zc=new Tm,wr=i(()=>Zc.getStore(),"currentScheduledAdmissionGuard");function lT(e,t){return Zc.run(e,t)}i(lT,"withScheduledAdmission");var Qt=class extends Error{constructor(r,n,o){super("The scheduled request was refused before provider transport.",{cause:o});this.executionId=r;this.requestId=n}executionId;requestId;static{i(this,"ScheduledTransportNotInvokedError")}},zc=class extends Error{constructor(r,n,o){super("The scheduled admission lost its exact owner lease before Run insertion.");this.scheduleId=r;this.operationId=n;this.configurationHash=o}scheduleId;operationId;configurationHash;static{i(this,"ScheduledAdmissionRejectedError")}};function bn(e,t){let r=t.scope==="arguments"?e.action?.arguments:e[t.scope];for(let n of t.path){if(!r||typeof r!="object"||!Object.hasOwn(r,n))throw new Error("environment_service_reference_missing");r=r[n]}return r}i(bn,"resolveValue");async function kr(e,t){if(!e.executionServices?.length)return t.controller(e);if(!Number.isSafeInteger(e.timeoutMs)||e.timeoutMs<1||e.timeoutMs>3e4)throw new Error("environment_timeout_invalid");G(e.value,4194304);let r=e.executionServices.map(c=>ci.parse(c));if(r.length>16)throw new Error("environment_service_limit");if(new Set(r.map(c=>c.id)).size!==r.length)throw new Error("environment_service_identity_collision");let n=Date.now(),o=new AbortController,s=e.signal?AbortSignal.any([e.signal,o.signal]):o.signal,a=setTimeout(()=>o.abort(new Error("environment_timeout")),e.timeoutMs);try{let c=Object.create(null);for(let l of r){if(s.throwIfAborted(),l.operation!==e.operation||l.operation==="step"&&l.toolName!==e.value.action?.name)throw new Error("environment_service_operation_mismatch");let p=Math.min(l.timeoutMs,e.timeoutMs-(Date.now()-n));if(p<1)throw new Error("environment_timeout");let u=new AbortController,m=AbortSignal.any([s,u.signal]),f=setTimeout(()=>u.abort(new Error("environment_service_timeout")),p),h=Date.now();try{if(l.kind==="sqlite.v1"){if(!t.sql)throw new Error("environment_sql_executor_required");let R=bn(e.value,l.sql);if(typeof R!="string"||!R.length||new TextEncoder().encode(R).byteLength>65536||R.includes("\0")){c[l.id]={status:"rejected",code:"invalid_submission"};continue}let w=Kr({schemaVersion:"openpond.sqlExecution.v1",snapshot:bn(e.value,l.snapshot),sql:R,maxRows:l.maxRows,maxResultBytes:l.maxResultBytes});c[l.id]=await t.sql({request:w,timeoutMs:e.timeoutMs,signal:m})}else{let R=bn(e.value,l.source),w=bn(e.value,l.cases);if(typeof R!="string"||new TextEncoder().encode(R).byteLength>524288){c[l.id]={status:"rejected",code:"invalid_submission"};continue}if(!Array.isArray(w)||!w.length||w.length>l.maxCases||w.some(x=>!x||typeof x!="object"||!Object.hasOwn(x,"input")))throw new Error("environment_service_cases_invalid");let k=[];for(let x of w){let C=p-(Date.now()-h);if(C<1&&(u.abort(new Error("environment_service_timeout")),m.throwIfAborted()),k.push(await t.candidate({source:R,exportName:l.exportName,value:structuredClone(x.input),timeoutMs:Math.max(1,C),maxResultBytes:l.maxResultBytes,deterministic:!0,errorPrefix:"candidate",signal:m})),new TextEncoder().encode(JSON.stringify({status:"completed",cases:k})).byteLength>l.maxResultBytes)throw new Bo("candidate_result_too_large")}c[l.id]={status:"completed",cases:k}}}catch(R){if(s.throwIfAborted(),u.signal.aborted)c[l.id]={status:"rejected",code:"timeout"};else if(R instanceof Bo)c[l.id]={status:"rejected",code:"execution_failed"};else throw R}finally{clearTimeout(f)}}s.throwIfAborted();let d=e.timeoutMs-(Date.now()-n);if(d<1)throw new Error("environment_timeout");return await t.controller({...e,executionServices:void 0,value:{...e.value,services:c},timeoutMs:d,signal:s})}finally{clearTimeout(a)}}i(kr,"executeEnvironmentWithServices");async function vm(e){let t=lr.parse(e.operation);return kr(e,{candidate:Jo,controller:i(async r=>Ft.parse(await Jo({...r,exportName:t,maxResultBytes:1572864,deterministic:!0,errorPrefix:"environment"})),"controller")})}i(vm,"executeJavaScriptEnvironment");var vt=class extends Error{static{i(this,"JavaScriptEnvironmentActionError")}code;constructor(t){super(`environment_${t}`),this.code=t,this.name="JavaScriptEnvironmentActionError"}};async function Yc(e){let t=li(e.definition),r=ue(e.asset,t.module);if(!Number.isSafeInteger(e.seed))throw new Error("environment_seed_invalid");let n=e.seed;G(e.input,1048576),G(e.initialState,t.maxStateBytes);let o=structuredClone(e.input),s=structuredClone(e.initialState),a=e.execute??vm,c=new AbortController,d=e.signal?AbortSignal.any([e.signal,c.signal]):c.signal,l={},p=0,u=!1,m=!1,f=null,h=[],R=null;async function w(x,C){if(u||m)throw new Error("environment_closed");if(f)throw new Error("environment_operation_in_progress");d.throwIfAborted(),C&&(G(C,262144),C=structuredClone(C));let A=y(l),T=C?t.tools.find(v=>v.name===C.name):null;if(x==="step"){if(p>=t.maxSteps)throw new vt("step_budget_exhausted");p++}let P=i((v,I)=>h.push({sequence:h.length,operation:x,toolName:C?.name??null,arguments:C?structuredClone(C.arguments):null,observation:v,beforeStateHash:A,afterStateHash:y(l),error:I}),"record");try{if(C&&!T)throw new vt("unknown_tool");if(C&&T&&!Ya(T.inputSchema,C.arguments).valid)throw new vt("invalid_arguments");let v=t.executionServices?.filter(E=>E.operation===x&&(x!=="step"||E.toolName===C?.name)),I=a({source:r,operation:x,value:{input:o,initialState:s,seed:n,state:structuredClone(l),sequence:p,action:C?structuredClone(C):null},timeoutMs:Math.min(t.operationTimeoutMs,T?.timeoutMs??t.operationTimeoutMs),signal:d,...v?.length?{executionServices:v}:{}});f=I;let S=Ft.parse(await I);if(d.throwIfAborted(),G(S.state,t.maxStateBytes),G(S.observation,t.maxObservationBytes),(x==="collect"||T?.sideEffect==="read")&&y(S.state)!==A)throw new Error("environment_read_changed_state");l=structuredClone(S.state);let N=structuredClone(S.observation);return P(N,null),{state:structuredClone(l),observation:N}}catch(v){throw P(null,v instanceof Error?v.message:"environment_execution_failed"),v}finally{f=null}}i(w,"invoke");async function k(){return R||(m=!0,c.abort(new Error("environment_destroyed")),R=(async()=>{try{try{await f}catch{}await a({source:r,operation:"destroy",value:{input:o,initialState:s,seed:n,state:structuredClone(l),sequence:p,action:null},timeoutMs:t.operationTimeoutMs})}finally{l={},u=!0}})(),R)}i(k,"destroy");try{await w("create");let x=await w("reset"),C=y(l),A=i(()=>{if(u)throw new Error("environment_closed");return{definition:{id:t.id,revision:t.revision,contentHash:t.contentHash},inputHash:y(o),seed:n,initialStateHash:C,finalStateHash:y(l),state:structuredClone(l),events:structuredClone(h)}},"snapshot");return{definition:structuredClone(t),observation:x.observation,async step(T){return(await w("step",T)).observation},async collect(){let T=await w("collect");return{...A(),observation:T.observation}},snapshot:A,destroy:k}}catch(x){try{await k()}catch{}throw x}}i(Yc,"createJavaScriptEnvironmentSession");var Em=g.string().trim().min(1).max(500),Sm=g.string().regex(/^[a-f0-9]{64}$/),Ko=g.object({kind:g.literal("model"),id:g.string().trim().min(1).max(191),taskId:Em,admissionHash:Sm,model:tc,instructions:g.string().max(262144),harness:Ka.optional(),input:g.record(g.string(),g.unknown()),policyVisibleContext:g.record(g.string(),g.unknown()),timeoutMs:g.number().int().positive().max(36e5),environment:g.discriminatedUnion("kind",[g.object({kind:g.literal("text")}).strict(),g.object({kind:g.literal("javascript"),definition:di,asset:Ga,initialState:g.record(g.string(),g.unknown()),seed:g.number().int().safe()}).strict()])}).strict(),MT=g.discriminatedUnion("kind",[Ko,g.object({kind:g.literal("profile"),request:g.unknown()}).strict()]);var Qc=g.string().trim().min(1).max(200),JT=g.object({receiptId:Qc,taskId:Qc,seed:g.string(),request:Ko}).strict(),M=class extends Error{constructor(r,n,o=409){super(n);this.code=r;this.status=o}code;status;static{i(this,"LocalExperimentError")}};async function _o(e,t=fn,r=!1){if(e.kind==="hosted_harness")return _o({kind:"hosted_chat",modelId:e.modelId,maxOutputTokens:4096,temperature:0,topP:1},t);if(e.kind!=="hosted_chat")throw new M("local_target_not_qualified","Select an explicit model target for local execution.",422);if(e.harness&&!r)throw new M("local_harness_not_qualified","This released Harness requires its native turn executor; it cannot run as a model-only case.",422);let n=await t();if(n.error)throw new M("local_model_catalog_unavailable",n.error,422);let o=n.models.find(m=>m.id===e.modelId);if(!o)throw new M("local_model_unavailable","The selected model is unavailable.",422);let s=Gc(o.raw),a=En(s),c=Gc(s.capabilities).samplingParameters===!0;if(!c&&(e.temperature!==0||e.topP!==1))throw new M("local_sampling_unsupported","This model uses provider-managed sampling. Custom temperature or top P requires an explicit supported capability.",422);let d=Kc(s.context_window),l=Kc(s.output_limit);if(e.maxOutputTokens>l)throw new M("local_model_output_limit","The model cannot accept the configured output limit.",422);let p={providerId:"openpond",modelId:e.modelId,maxOutputTokens:e.maxOutputTokens,...c?{temperature:e.temperature,topP:e.topP}:{},messages:e.messages??[]},u=(d*Math.max(a.inputUsdPerMillionTokens,a.cachedInputUsdPerMillionTokens)+e.maxOutputTokens*a.outputUsdPerMillionTokens)/1e6;if(!(u>0))throw new M("local_model_charge_unknown","The model must publish an enforceable positive request ceiling.",422);return{model:{...p,configurationHash:y({configuration:p,contextWindow:d,outputLimit:l,pricing:a})},pricing:a,maximumChargeUsd:u}}i(_o,"prepareLocalExperimentModel");function $T(e){let t=e.admission.streamFactory?.(e)??e.admission.stream??e.stream??hn;return async function*(r){if(!r.requestId)throw new M("local_request_identity_missing","Every local model dispatch requires a stable request identity.");let n=e.admission.model;if(r.model!==n.modelId||r.maxTokens!==n.maxOutputTokens||r.temperature!==n.temperature||r.topP!==n.topP)throw new M("local_model_configuration_conflict","The native model request changed its admitted model, output limit or sampling configuration.",422);let o=wr();o?.assertExecution(e.executionId);let s={teamId:e.teamId,id:e.executionId,ownerId:e.ownerId,requestId:r.requestId};await e.store.reserveLocalCharge({...s,caseId:e.caseId,maximumUsd:e.admission.maximumChargeUsd}),r.signal?.aborted&&(await e.store.settleLocalCharge({...s,costUsd:null,usage:null,notDispatched:!0}),r.signal.throwIfAborted());try{await e.store.markLocalChargeDispatched(s.teamId,s.id,s.requestId,s.ownerId)}catch(p){throw o&&await e.store.settleLocalCharge({...s,costUsd:null,usage:null,notDispatched:!0}),p}await e.store.appendLocalExperimentEvent({...s,caseId:e.caseId,type:"model.dispatch",payload:{requestId:s.requestId,model:r.model,messages:r.messages}});let a=null,c=!1,d=!1,l;try{for await(let p of t(r)){d=!0,p.type==="usage"&&(a=p.usage),p.type==="finish"&&(c=!0);let u=p.type==="text_delta"?{requestId:s.requestId,text:p.text}:p.type==="tool_call_delta"?{requestId:s.requestId,toolCalls:p.toolCalls}:p.type==="usage"?{requestId:s.requestId,usage:Ze(p.usage)}:p.type==="finish"?{requestId:s.requestId,finishReason:p.finishReason}:null;u&&await e.store.appendLocalExperimentEvent({...s,caseId:e.caseId,type:`model.${p.type}`,payload:u}),yield p}}catch(p){throw!d&&p instanceof Qt&&p.executionId===s.id&&p.requestId===s.requestId&&(l=p),p}finally{let p=Ze(a),u=e.admission.pricing&&c&&p.promptTokens!==null&&p.completionTokens!==null?nt(a,e.admission.pricing):null;await e.store.settleLocalCharge({...s,costUsd:u,confirmedTransportNotInvoked:l,usage:a===null?null:{promptTokens:p.promptTokens,completionTokens:p.completionTokens,cachedPromptTokens:p.cachedPromptTokens,uncachedPromptTokens:p.uncachedPromptTokens}})}}}i($T,"createLocalBudgetedModelStream");function Gc(e){return e&&typeof e=="object"&&!Array.isArray(e)?e:{}}i(Gc,"record");function Kc(e){if(typeof e!="number"||!Number.isSafeInteger(e)||e<=0)throw new M("local_model_bound_unknown","The model catalog is missing an enforceable context/output bound.",422);return e}i(Kc,"positive");import{AsyncLocalStorage as xm}from"node:async_hooks";import bm from"node:path";var _c=new xm;function $c(){return _c.getStore()}i($c,"currentAdvancedRefinerBoundary");function dv(e){let t=fi(bm.join(e.storeDir,"library","harnesses","advanced-refiner-paid-calls.sqlite"));t.exec(`CREATE TABLE IF NOT EXISTS advanced_refiner_budgets(id TEXT PRIMARY KEY,actor_id TEXT NOT NULL,team_id TEXT NOT NULL,pin_hash TEXT NOT NULL,maximum_spend REAL NOT NULL,maximum_steps INTEGER NOT NULL,expires_at TEXT NOT NULL);

package/dist/chunks/{chunk-HJEY5LBD.js → chunk-PQHTZ5CP.js}

@@ -1,2 +1,2 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
-import{b as H}from"./chunk-ZBZBV5TB.js";import{a as L}from"./chunk-T5LE6R5S.js";import{F as g,K as N,L as B}from"./chunk-PVSUQGWK.js";import{qa as _}from"./chunk-7MXZJQS7.js";import{O as x,R as V,S as F,Y as R}from"./chunk-XDMUD4FW.js";import{ta as I}from"./chunk-IKWDL3RB.js";import{Ca as b}from"./chunk-QRWPEW3Z.js";import{ma as E,na as C,oa as y}from"./chunk-PJM2G7SG.js";import{Ga as A}from"./chunk-SDEDAHV6.js";import{c as D,e as v,f as U,g as M,i as O,qa as T}from"./chunk-DALJMSJG.js";import{m as p}from"./chunk-NNF6KCHD.js";import{b as o}from"./chunk-ES2ISFJC.js";import{a as w,c as P,f as j,h as c}from"./chunk-H7IWJN7L.js";import{a as i}from"./chunk-FTQLQJQV.js";import h from"node:path";import{AsyncLocalStorage as ee}from"node:async_hooks";import{promises as z}from"node:fs";var J=new ee;function fe(r,e=!1){let t=J.getStore();t&&(e&&(t.length=0),t.push(r))}i(fe,"onStartupFailure");async function ge(r,e){await T(r);let t;try{t=await M(h.join(c(r).runtime,"server-owner"),100)}catch(n){if(n instanceof P&&n.issue.code==="STORAGE_BUSY"){let a=await O(h.join(c(r).runtime,"endpoint.json"),()=>null);throw new P({code:"RUNTIME_ALREADY_RUNNING",path:r,message:"An OpenPond runtime already owns this home.",action:a?.url?`Connect to the existing runtime at ${a.url}, or stop it before starting another.`:"Stop the existing runtime before starting another with this home."})}throw n}let s=[];try{let n=await w(r,()=>J.run(s,e)),a=n.close.bind(n);s.length=0;let d;return{...n,close:i(()=>d??=(async()=>{try{await w(r,a)}finally{await z.rm(h.join(c(r).runtime,"endpoint.json"),{force:!0}),await t()}})(),"close")}}catch(n){try{for(let a of s.reverse())await Promise.resolve().then(()=>w(r,a)).catch(()=>{});await z.rm(h.join(c(r).runtime,"endpoint.json"),{force:!0})}finally{await t()}throw n}}i(ge,"ownHomeRuntime");async function he(r,e,t){await v(h.join(c(r).runtime,"endpoint.json"),JSON.stringify({schemaVersion:"openpond.runtimeEndpoint.v1",pid:process.pid,url:e,serverId:t}))}i(he,"publishRuntimeEndpoint");function ye(r){return te({runtime:B(r.ports),close:r.close})}i(ye,"createAppServer");function te(r){let e=!1;return{runtime:r.runtime,close:i(async()=>{e||(e=!0,await r.close?.())},"close")}}i(te,"attachAppServer");async function Pe(r){let e=typeof r.appServer=="function"?null:r.appServer;try{await N({host:e?.runtime??(async()=>(e=await r.appServer(),e.runtime)),readable:r.readable,writable:r.writable,hostStorageClient:r.hostStorageClient})}finally{await e?.close()}}i(Pe,"runAppServerJsonl");import S from"node:path";import{lstat as re,readFile as oe,realpath as $}from"node:fs/promises";import{randomUUID as se}from"node:crypto";var ne=o.object({id:o.string(),version:o.string(),contentHash:o.string().regex(/^[a-f0-9]{64}$/),feedbackKey:o.string(),release:o.object({id:o.string(),revision:o.union([o.string(),o.number()]),contentHash:o.string().regex(/^[a-f0-9]{64}$/)}).strict().nullable()}).strict(),G=o.object({binding:C,packageValue:o.unknown(),graders:o.array(ne).max(100),actualGrading:o.object({pass:o.unknown(),evidence:o.unknown()}).strict().optional(),sourceCandidate:E.optional()}).strict();async function Me(r,e){let t=await $(e),s=S.resolve(r);if(S.dirname(s)!==t||await $(s)!==s)throw new Error("External Dataset package escaped its private owner home.");let n=await re(s);if(!n.isFile()||n.isSymbolicLink()||n.size>32*1024*1024)throw new Error("External Dataset package is not a bounded regular file.");let a=G.parse(JSON.parse(new TextDecoder("utf8",{fatal:!0}).decode(await oe(s))));return a.binding=y(a.binding),a.packageValue=I({...a,packageValue:b(a.packageValue)}),a}i(Me,"readHostProfileExternalDataset");async function Oe(r){let e=G.parse(r.value),t=y(e.binding),s=r.release,n={id:s.harnessRelease.id,contentHash:s.harnessRelease.contentHash};if(t.protectedProfileClosureHash!==p(s.harnessRelease.files.filter(l=>l.visibility!=="policy").map(l=>({path:l.path,asset:l}))))throw new Error("The external Dataset protected Profile closure changed.");if(e.sourceCandidate){let l=await _({workspaceId:typeof s.agentSnapshot.metadata.workspaceId=="string"?s.agentSnapshot.metadata.workspaceId:s.workspaceId,sourceDir:S.join(s.bundlePath,"source")});if(p(e.sourceCandidate.harnessRelease)!==p(n)||L(l).protectedClosureHash!==e.sourceCandidate.protectedClosureHash)throw new Error("The external Dataset candidate differs from its retained frozen compiled source.")}let a=i(async l=>{if(o.object({authorized:o.literal(!0),bindingHash:o.string().regex(/^[a-f0-9]{64}$/)}).strict().parse(await r.client.request({contractVersion:1,requestId:se(),operation:"profile.externalDataset.authorize",params:{...l,bindingHash:t.contentHash}})).bindingHash!==t.contentHash)throw new Error("The host authorized another external Dataset binding.")},"authorize");return{authorize:a,resolveExternalDataset:i(async(l,m)=>{if(await a(),p(l)!==p(t)||m.profileRef.profileId!==t.profileId||m.sourceRevision!==r.sourceRevision||p(m.harnessRelease)!==p(n))throw new Error("External Dataset requested another actual Profile source or recipe.");let f=I({...e,binding:l,packageValue:b(e.packageValue)});return{binding:t,packageValue:f,authorize:a}},"resolveExternalDataset"),sourceCandidate:e.sourceCandidate}}i(Oe,"createHostProfileExternalDataset");import{randomBytes as ae}from"node:crypto";function Ne(){return j()}i(Ne,"appDataDir");function Be(r){return c(r).config}i(Be,"providersConfigPath");function Le(r){return c(r).credentials}i(Le,"providerSecretsConfigPath");function ze(r){return c(r).key}i(ze,"providerSecretsKeyPath");async function Je(r){let e=c(r).token;return U(e,async()=>{let t=(await D(e))?.trim(),s=process.env.OPENPOND_APP_TOKEN||t||ae(32).toString("base64url");return s!==t&&await v(e,s),{token:s,tokenFile:e}})}i(Je,"ensureCapabilityToken");import u from"node:path";import{readFile as W}from"node:fs/promises";var q=o.object({profileId:o.string().min(1),sourceRevision:o.string().min(1),repositoryId:o.string().min(1),harnessRelease:o.object({id:o.string().min(1),contentHash:o.string().regex(/^[a-f0-9]{64}$/)}).strict(),hostExecution:o.object({conversationId:o.string().min(1),turnId:o.string().min(1)}).strict().optional(),workspaceId:o.string().min(1),assetsPath:o.string().min(1).refine(u.isAbsolute)}).strict();async function Ze(r,e){let t=q.parse(e),s=await H(r,t.harnessRelease);if(!s||u.resolve(s.release.bundlePath)!==u.resolve(t.assetsPath))throw new Error("Hosted Profile release changed after admission.");let n=s.release.harnessRelease.metadata.profile;if(!n||typeof n!="object"||n.id!==t.profileId||n.sourceRevision!==t.sourceRevision||n.repositoryId!==void 0&&n.repositoryId!==t.repositoryId)throw new Error("Hosted Profile provenance differs from admitted release.");return{profile:F(),profileLibrary:V()}}i(Ze,"loadHostedProfileStateAndLibrary");async function et(r,e){let t=q.parse(e),s=await H(r,t.harnessRelease);if(!s||u.resolve(s.release.bundlePath)!==u.resolve(t.assetsPath))throw new Error("Hosted Profile workflow release is unavailable.");let n=s.release.harnessRelease.metadata.profile;if(n?.id!==t.profileId||n.sourceRevision!==t.sourceRevision||n.repositoryId!==void 0&&n.repositoryId!==t.repositoryId)throw new Error("Hosted Profile workflow provenance changed.");let a=t.harnessRelease,d={source:"openpond_git",repositoryId:t.repositoryId,profileId:t.profileId};if(!s.release.harnessRelease.files.some(f=>f.path==="workflows/catalog.json"))return{profileRef:d,sourceRevision:t.sourceRevision,harnessRelease:a,workflows:[]};let l=u.join(s.release.bundlePath,"source","workflows"),m=A({agentSnapshot:s.release.agentSnapshot,harnessRelease:s.release.harnessRelease,catalogBytes:await W(u.join(l,"catalog.json")),actionBytes:await W(u.join(l,"actions.json"))});return{profileRef:d,sourceRevision:t.sourceRevision,harnessRelease:a,workflows:m.catalog.workflows.map(f=>({workflow:f,binding:{schemaVersion:"openpond.profileWorkflowBinding.v1",profileId:t.profileId,sourceRevision:t.sourceRevision,harnessRelease:a,catalogHash:m.catalogHash,workflowId:f.id}}))}}i(et,"listHostedProfileWorkflows");import{createHash as ie,randomUUID as k}from"node:crypto";var K=o.object({approval:x,revision:o.number().int().positive()}).strict(),Q=o.object({record:R}).strict(),le=o.object({startedAt:o.string().min(1),requestOrdinal:o.number().int().nonnegative(),id:o.string().min(1)}).strict(),ce=o.object({records:o.array(R).max(200),nextBefore:le.nullable()}).strict(),Y=1e4,X=class{constructor(e){this.client=e}client;static{i(this,"HostedApprovalStorage")}async readApproval(e){let t=await this.client.request({contractVersion:g,requestId:k(),operation:"approval/get",params:{approvalId:e}});return t===null?null:K.parse(t)}async getApproval(e){return(await this.readApproval(e))?.approval??null}async putApproval(e){let t=x.parse(e.approval);if(!e.requestId.trim())throw new Error("Approval mutation requires a stable request ID.");return K.parse(await this.client.request({contractVersion:g,requestId:e.requestId,operation:"approval/upsert",params:{approval:t,expectedRevision:e.expectedRevision}}))}},Z=class{constructor(e){this.client=e}client;static{i(this,"HostedModelUsageStorage")}async upsertModelUsageRecord(e){let t=R.parse(e),s=ie("sha256").update(JSON.stringify(t)).digest("hex"),n=await this.client.request({contractVersion:g,requestId:`usage:${s}`,operation:"usage/upsert",params:{record:t}}),a=Q.parse(n).record;if(a.requestId!==t.requestId)throw new Error("Host usage upsert changed request identity.");return a}async getModelUsageRecordByRequestId(e){let t=await this.client.request({contractVersion:g,requestId:k(),operation:"usage/getByRequestId",params:{requestId:e}});return t===null?null:Q.parse(t).record}async listModelUsageRecords(e={}){let t=e.limit===void 0||e.limit>=Y,s=e.limit===void 0?Y:Math.max(1,Math.min(1e4,Math.trunc(e.limit))),n={...e.sessionId?{sessionId:e.sessionId}:{},...e.turnId?{turnId:e.turnId}:{},...e.provider?{provider:e.provider}:{},...e.model?{model:e.model}:{},...e.startedAtFrom?{startedAtFrom:e.startedAtFrom}:{},...e.startedAtTo?{startedAtTo:e.startedAtTo}:{},...e.visibility&&e.visibility!=="all"?{visibility:e.visibility}:{},...e.status&&e.status!=="all"?{status:e.status}:{}},a=[],d=null;for(;a.length<s+(t?1:0);){let l=ce.parse(await this.client.request({contractVersion:g,requestId:k(),operation:"usage/page",params:{query:n,before:d,limit:Math.min(200,s+(t?1:0)-a.length)}}));if(a.push(...l.records),a.length>s)throw new Error(`Hosted usage query exceeds ${s} rows; narrow its filters or use a streamed aggregation.`);if(l.nextBefore===null)break;if(l.records.length===0||JSON.stringify(l.nextBefore)===JSON.stringify(d))throw new Error("Host usage cursor did not advance.");d=l.nextBefore}return a}async listModelUsageRecordsComplete(e={}){return this.listModelUsageRecords(e)}};export{fe as a,ge as b,he as c,ye as d,Pe as e,Me as f,Oe as g,Ne as h,Be as i,Le as j,ze as k,Je as l,q as m,Ze as n,et as o,X as p,Z as q};
+import{b as H}from"./chunk-GCOUYYHG.js";import{a as L}from"./chunk-T5LE6R5S.js";import{F as g,K as N,L as B}from"./chunk-7ZG3IT7C.js";import{qa as _}from"./chunk-4TZHH5FC.js";import{O as x,R as V,S as F,Y as R}from"./chunk-2JO2KWT3.js";import{ta as I}from"./chunk-IKWDL3RB.js";import{Ca as b}from"./chunk-QRWPEW3Z.js";import{ma as E,na as C,oa as y}from"./chunk-PJM2G7SG.js";import{Ga as A}from"./chunk-SDEDAHV6.js";import{c as D,e as v,f as U,g as M,i as O,qa as T}from"./chunk-DALJMSJG.js";import{m as p}from"./chunk-NNF6KCHD.js";import{b as o}from"./chunk-ES2ISFJC.js";import{a as w,c as P,f as j,h as c}from"./chunk-H7IWJN7L.js";import{a as i}from"./chunk-FTQLQJQV.js";import h from"node:path";import{AsyncLocalStorage as ee}from"node:async_hooks";import{promises as z}from"node:fs";var J=new ee;function fe(r,e=!1){let t=J.getStore();t&&(e&&(t.length=0),t.push(r))}i(fe,"onStartupFailure");async function ge(r,e){await T(r);let t;try{t=await M(h.join(c(r).runtime,"server-owner"),100)}catch(n){if(n instanceof P&&n.issue.code==="STORAGE_BUSY"){let a=await O(h.join(c(r).runtime,"endpoint.json"),()=>null);throw new P({code:"RUNTIME_ALREADY_RUNNING",path:r,message:"An OpenPond runtime already owns this home.",action:a?.url?`Connect to the existing runtime at ${a.url}, or stop it before starting another.`:"Stop the existing runtime before starting another with this home."})}throw n}let s=[];try{let n=await w(r,()=>J.run(s,e)),a=n.close.bind(n);s.length=0;let d;return{...n,close:i(()=>d??=(async()=>{try{await w(r,a)}finally{await z.rm(h.join(c(r).runtime,"endpoint.json"),{force:!0}),await t()}})(),"close")}}catch(n){try{for(let a of s.reverse())await Promise.resolve().then(()=>w(r,a)).catch(()=>{});await z.rm(h.join(c(r).runtime,"endpoint.json"),{force:!0})}finally{await t()}throw n}}i(ge,"ownHomeRuntime");async function he(r,e,t){await v(h.join(c(r).runtime,"endpoint.json"),JSON.stringify({schemaVersion:"openpond.runtimeEndpoint.v1",pid:process.pid,url:e,serverId:t}))}i(he,"publishRuntimeEndpoint");function ye(r){return te({runtime:B(r.ports),close:r.close})}i(ye,"createAppServer");function te(r){let e=!1;return{runtime:r.runtime,close:i(async()=>{e||(e=!0,await r.close?.())},"close")}}i(te,"attachAppServer");async function Pe(r){let e=typeof r.appServer=="function"?null:r.appServer;try{await N({host:e?.runtime??(async()=>(e=await r.appServer(),e.runtime)),readable:r.readable,writable:r.writable,hostStorageClient:r.hostStorageClient})}finally{await e?.close()}}i(Pe,"runAppServerJsonl");import S from"node:path";import{lstat as re,readFile as oe,realpath as $}from"node:fs/promises";import{randomUUID as se}from"node:crypto";var ne=o.object({id:o.string(),version:o.string(),contentHash:o.string().regex(/^[a-f0-9]{64}$/),feedbackKey:o.string(),release:o.object({id:o.string(),revision:o.union([o.string(),o.number()]),contentHash:o.string().regex(/^[a-f0-9]{64}$/)}).strict().nullable()}).strict(),G=o.object({binding:C,packageValue:o.unknown(),graders:o.array(ne).max(100),actualGrading:o.object({pass:o.unknown(),evidence:o.unknown()}).strict().optional(),sourceCandidate:E.optional()}).strict();async function Me(r,e){let t=await $(e),s=S.resolve(r);if(S.dirname(s)!==t||await $(s)!==s)throw new Error("External Dataset package escaped its private owner home.");let n=await re(s);if(!n.isFile()||n.isSymbolicLink()||n.size>32*1024*1024)throw new Error("External Dataset package is not a bounded regular file.");let a=G.parse(JSON.parse(new TextDecoder("utf8",{fatal:!0}).decode(await oe(s))));return a.binding=y(a.binding),a.packageValue=I({...a,packageValue:b(a.packageValue)}),a}i(Me,"readHostProfileExternalDataset");async function Oe(r){let e=G.parse(r.value),t=y(e.binding),s=r.release,n={id:s.harnessRelease.id,contentHash:s.harnessRelease.contentHash};if(t.protectedProfileClosureHash!==p(s.harnessRelease.files.filter(l=>l.visibility!=="policy").map(l=>({path:l.path,asset:l}))))throw new Error("The external Dataset protected Profile closure changed.");if(e.sourceCandidate){let l=await _({workspaceId:typeof s.agentSnapshot.metadata.workspaceId=="string"?s.agentSnapshot.metadata.workspaceId:s.workspaceId,sourceDir:S.join(s.bundlePath,"source")});if(p(e.sourceCandidate.harnessRelease)!==p(n)||L(l).protectedClosureHash!==e.sourceCandidate.protectedClosureHash)throw new Error("The external Dataset candidate differs from its retained frozen compiled source.")}let a=i(async l=>{if(o.object({authorized:o.literal(!0),bindingHash:o.string().regex(/^[a-f0-9]{64}$/)}).strict().parse(await r.client.request({contractVersion:1,requestId:se(),operation:"profile.externalDataset.authorize",params:{...l,bindingHash:t.contentHash}})).bindingHash!==t.contentHash)throw new Error("The host authorized another external Dataset binding.")},"authorize");return{authorize:a,resolveExternalDataset:i(async(l,m)=>{if(await a(),p(l)!==p(t)||m.profileRef.profileId!==t.profileId||m.sourceRevision!==r.sourceRevision||p(m.harnessRelease)!==p(n))throw new Error("External Dataset requested another actual Profile source or recipe.");let f=I({...e,binding:l,packageValue:b(e.packageValue)});return{binding:t,packageValue:f,authorize:a}},"resolveExternalDataset"),sourceCandidate:e.sourceCandidate}}i(Oe,"createHostProfileExternalDataset");import{randomBytes as ae}from"node:crypto";function Ne(){return j()}i(Ne,"appDataDir");function Be(r){return c(r).config}i(Be,"providersConfigPath");function Le(r){return c(r).credentials}i(Le,"providerSecretsConfigPath");function ze(r){return c(r).key}i(ze,"providerSecretsKeyPath");async function Je(r){let e=c(r).token;return U(e,async()=>{let t=(await D(e))?.trim(),s=process.env.OPENPOND_APP_TOKEN||t||ae(32).toString("base64url");return s!==t&&await v(e,s),{token:s,tokenFile:e}})}i(Je,"ensureCapabilityToken");import u from"node:path";import{readFile as W}from"node:fs/promises";var q=o.object({profileId:o.string().min(1),sourceRevision:o.string().min(1),repositoryId:o.string().min(1),harnessRelease:o.object({id:o.string().min(1),contentHash:o.string().regex(/^[a-f0-9]{64}$/)}).strict(),hostExecution:o.object({conversationId:o.string().min(1),turnId:o.string().min(1)}).strict().optional(),workspaceId:o.string().min(1),assetsPath:o.string().min(1).refine(u.isAbsolute)}).strict();async function Ze(r,e){let t=q.parse(e),s=await H(r,t.harnessRelease);if(!s||u.resolve(s.release.bundlePath)!==u.resolve(t.assetsPath))throw new Error("Hosted Profile release changed after admission.");let n=s.release.harnessRelease.metadata.profile;if(!n||typeof n!="object"||n.id!==t.profileId||n.sourceRevision!==t.sourceRevision||n.repositoryId!==void 0&&n.repositoryId!==t.repositoryId)throw new Error("Hosted Profile provenance differs from admitted release.");return{profile:F(),profileLibrary:V()}}i(Ze,"loadHostedProfileStateAndLibrary");async function et(r,e){let t=q.parse(e),s=await H(r,t.harnessRelease);if(!s||u.resolve(s.release.bundlePath)!==u.resolve(t.assetsPath))throw new Error("Hosted Profile workflow release is unavailable.");let n=s.release.harnessRelease.metadata.profile;if(n?.id!==t.profileId||n.sourceRevision!==t.sourceRevision||n.repositoryId!==void 0&&n.repositoryId!==t.repositoryId)throw new Error("Hosted Profile workflow provenance changed.");let a=t.harnessRelease,d={source:"openpond_git",repositoryId:t.repositoryId,profileId:t.profileId};if(!s.release.harnessRelease.files.some(f=>f.path==="workflows/catalog.json"))return{profileRef:d,sourceRevision:t.sourceRevision,harnessRelease:a,workflows:[]};let l=u.join(s.release.bundlePath,"source","workflows"),m=A({agentSnapshot:s.release.agentSnapshot,harnessRelease:s.release.harnessRelease,catalogBytes:await W(u.join(l,"catalog.json")),actionBytes:await W(u.join(l,"actions.json"))});return{profileRef:d,sourceRevision:t.sourceRevision,harnessRelease:a,workflows:m.catalog.workflows.map(f=>({workflow:f,binding:{schemaVersion:"openpond.profileWorkflowBinding.v1",profileId:t.profileId,sourceRevision:t.sourceRevision,harnessRelease:a,catalogHash:m.catalogHash,workflowId:f.id}}))}}i(et,"listHostedProfileWorkflows");import{createHash as ie,randomUUID as k}from"node:crypto";var K=o.object({approval:x,revision:o.number().int().positive()}).strict(),Q=o.object({record:R}).strict(),le=o.object({startedAt:o.string().min(1),requestOrdinal:o.number().int().nonnegative(),id:o.string().min(1)}).strict(),ce=o.object({records:o.array(R).max(200),nextBefore:le.nullable()}).strict(),Y=1e4,X=class{constructor(e){this.client=e}client;static{i(this,"HostedApprovalStorage")}async readApproval(e){let t=await this.client.request({contractVersion:g,requestId:k(),operation:"approval/get",params:{approvalId:e}});return t===null?null:K.parse(t)}async getApproval(e){return(await this.readApproval(e))?.approval??null}async putApproval(e){let t=x.parse(e.approval);if(!e.requestId.trim())throw new Error("Approval mutation requires a stable request ID.");return K.parse(await this.client.request({contractVersion:g,requestId:e.requestId,operation:"approval/upsert",params:{approval:t,expectedRevision:e.expectedRevision}}))}},Z=class{constructor(e){this.client=e}client;static{i(this,"HostedModelUsageStorage")}async upsertModelUsageRecord(e){let t=R.parse(e),s=ie("sha256").update(JSON.stringify(t)).digest("hex"),n=await this.client.request({contractVersion:g,requestId:`usage:${s}`,operation:"usage/upsert",params:{record:t}}),a=Q.parse(n).record;if(a.requestId!==t.requestId)throw new Error("Host usage upsert changed request identity.");return a}async getModelUsageRecordByRequestId(e){let t=await this.client.request({contractVersion:g,requestId:k(),operation:"usage/getByRequestId",params:{requestId:e}});return t===null?null:Q.parse(t).record}async listModelUsageRecords(e={}){let t=e.limit===void 0||e.limit>=Y,s=e.limit===void 0?Y:Math.max(1,Math.min(1e4,Math.trunc(e.limit))),n={...e.sessionId?{sessionId:e.sessionId}:{},...e.turnId?{turnId:e.turnId}:{},...e.provider?{provider:e.provider}:{},...e.model?{model:e.model}:{},...e.startedAtFrom?{startedAtFrom:e.startedAtFrom}:{},...e.startedAtTo?{startedAtTo:e.startedAtTo}:{},...e.visibility&&e.visibility!=="all"?{visibility:e.visibility}:{},...e.status&&e.status!=="all"?{status:e.status}:{}},a=[],d=null;for(;a.length<s+(t?1:0);){let l=ce.parse(await this.client.request({contractVersion:g,requestId:k(),operation:"usage/page",params:{query:n,before:d,limit:Math.min(200,s+(t?1:0)-a.length)}}));if(a.push(...l.records),a.length>s)throw new Error(`Hosted usage query exceeds ${s} rows; narrow its filters or use a streamed aggregation.`);if(l.nextBefore===null)break;if(l.records.length===0||JSON.stringify(l.nextBefore)===JSON.stringify(d))throw new Error("Host usage cursor did not advance.");d=l.nextBefore}return a}async listModelUsageRecordsComplete(e={}){return this.listModelUsageRecords(e)}};export{fe as a,ge as b,he as c,ye as d,Pe as e,Me as f,Oe as g,Ne as h,Be as i,Le as j,ze as k,Je as l,q as m,Ze as n,et as o,X as p,Z as q};

package/dist/chunks/{chunk-QJRXTIOC.js → chunk-USKE34VR.js}

@@ -1,5 +1,5 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
-import{ka as P,la as V,ma as M,qa as E,ra as q}from"./chunk-7MXZJQS7.js";import{b as x}from"./chunk-L3KS6MOV.js";import{kd as T}from"./chunk-XDMUD4FW.js";import{r as _,s as A,t as C,y as W}from"./chunk-SDEDAHV6.js";import{l as D,m as L,n as b}from"./chunk-NNF6KCHD.js";import{a as w}from"./chunk-FTQLQJQV.js";import{randomUUID as I}from"node:crypto";import{promises as p}from"node:fs";import{stripTypeScriptTypes as X}from"node:module";import R from"node:path";async function le(e){let r=_.parse(e.overlay),t=A.parse(e.proposal),o=e.validations.map(v=>C.parse(v));if((t.route==="agent"?t.edits.filter(v=>v.target!=="harness.json"&&v.operation!=="delete"):[]).length>0){let v=t.validationPlan.find(s=>s.kind==="component_activation"&&s.required);if(!v)throw new Error("Desktop Work Agent proposals require component-activation validation before review.");if(o.find(s=>s.validationId===v.id)?.status==="passed")throw new Error("Desktop Work cannot accept a passed Agent activation receipt until an Agent source executor exists.")}if(t.overlay.id!==r.id||t.overlay.revision!==r.revision||t.overlay.contentHash!==r.contentHash)throw new Error("Refiner proposal is not bound to the supplied run overlay.");if(r.status!=="frozen")throw new Error("Only a frozen run overlay can advance a Harness workspace.");let n=await e.store.getHarnessWorkspace(t.expectedWorkspace.workspaceId);if(!n)throw new Error(`Harness workspace ${t.expectedWorkspace.workspaceId} does not exist.`);if(n.location!==e.store.harnessStoragePlacement)throw new Error("Refiner workspace does not match the admitted storage placement.");let c=P(e.storeDir,n.id),d=await E({workspaceId:n.id,sourceDir:c.source});if(d.sourceRevision!==n.sourceRevision)throw new Error(`Harness source is ${d.sourceRevision}; workspace expects ${n.sourceRevision}. Record or revert the source change before refinement.`);let h=R.join(c.root,`.source-candidate-${I()}`);await p.cp(c.source,h,{recursive:!0,force:!1,errorOnExist:!0,verbatimSymlinks:!1});try{await K(h,t);let v=await E({workspaceId:n.id,sourceDir:h}),m=(e.now??(()=>new Date().toISOString()))(),s=await q({storeDir:e.storeDir,workspaceId:n.id,compiled:v,createdAt:m});await e.store.saveHarnessReleaseRecord(s),await e.store.saveHarnessImprovementArtifact(n.id,"run_overlay",r),await e.store.saveHarnessImprovementArtifact(n.id,"proposal",t);for(let i of o)await e.store.saveHarnessImprovementArtifact(n.id,"targeted_validation",i);if(!T({workspace:n,proposal:t}).eligible&&!e.reviewAuthority)return e.store.advanceHarnessWorkspaceAtomically({receiptId:e.receiptId,workspaceId:n.id,proposal:t,validations:o,nextRelease:{id:s.harnessRelease.id,contentHash:s.harnessRelease.contentHash},nextSourceRevision:s.sourceRevision,now:m});let u=R.join(c.root,`.source-backup-${I()}`),l=R.join(c.root,"source-swap.json");await J(l,{schemaVersion:"openpond.localHarnessSourceSwap.v1",workspaceId:n.id,expectedWorkspaceRevision:n.revision,previousSourceRevision:n.sourceRevision,nextSourceRevision:s.sourceRevision,backupSource:u,candidateSource:h,createdAt:m}),await p.rename(c.source,u),await p.rename(h,c.source);try{let i=e.reviewAuthority?await e.store.advanceReviewedHarnessWorkspaceAtomically({receiptId:e.receiptId,workspaceId:n.id,proposal:t,validations:o,nextRelease:{id:s.harnessRelease.id,contentHash:s.harnessRelease.contentHash},nextSourceRevision:s.sourceRevision,reviewer:e.reviewAuthority.reviewer,now:m}):await e.store.advanceHarnessWorkspaceAtomically({receiptId:e.receiptId,workspaceId:n.id,proposal:t,validations:o,nextRelease:{id:s.harnessRelease.id,contentHash:s.harnessRelease.contentHash},nextSourceRevision:s.sourceRevision,now:m});return i.receipt.decision!=="advanced"?await $(c.source,u):await p.rm(u,{recursive:!0,force:!0}),await p.rm(l,{force:!0}),i}catch(i){throw await $(c.source,u).catch(()=>{}),await p.rm(l,{force:!0}).catch(()=>{}),i}}finally{await p.rm(h,{recursive:!0,force:!0}).catch(()=>{})}}w(le,"applyLocalHarnessRefinerProposal");async function de(e){let r=await e.store.getHarnessWorkspace(e.workspaceId);if(!r||r.location!==e.store.harnessStoragePlacement)throw new Error(`Local Harness workspace ${e.workspaceId} does not exist.`);if(r.currentChannel.release?.id!==e.rollbackOf.id||r.currentChannel.release.contentHash!==e.rollbackOf.contentHash)throw new Error("Harness rollback source is no longer the current release.");let t=await e.store.getHarnessReleaseRecord(e.targetRelease.contentHash);if(!t||t.workspaceId!==r.id||t.harnessRelease.id!==e.targetRelease.id)throw new Error("Harness rollback target is unavailable in this workspace.");let o=P(e.storeDir,r.id);if((await E({workspaceId:r.id,sourceDir:o.source})).sourceRevision!==r.sourceRevision)throw new Error("Harness source changed before rollback.");let n=R.join(o.root,`.source-rollback-${I()}`);await p.cp(R.join(t.bundlePath,"source"),n,{recursive:!0,force:!1,errorOnExist:!0,verbatimSymlinks:!1});try{if((await E({workspaceId:r.id,sourceDir:n})).sourceRevision!==t.sourceRevision)throw new Error("Harness rollback bundle does not reproduce its registered source revision.");let d=(e.now??(()=>new Date().toISOString()))(),h=R.join(o.root,`.source-backup-${I()}`),v=R.join(o.root,"source-swap.json");await J(v,{schemaVersion:"openpond.localHarnessSourceSwap.v1",workspaceId:r.id,expectedWorkspaceRevision:r.revision,previousSourceRevision:r.sourceRevision,nextSourceRevision:t.sourceRevision,backupSource:h,candidateSource:n,createdAt:d}),await p.rename(o.source,h),await p.rename(n,o.source);try{let m=await e.store.rollbackHarnessWorkspaceAtomically({receiptId:e.receiptId,workspaceId:r.id,expectedWorkspaceRevision:r.revision,expectedChannelRevision:r.currentChannel.revision,targetRelease:e.targetRelease,targetSourceRevision:t.sourceRevision,rollbackOf:e.rollbackOf,now:d});return m.receipt.decision!=="rolled_back"?await $(o.source,h):await p.rm(h,{recursive:!0,force:!0}),await p.rm(v,{force:!0}),m}catch(m){throw await $(o.source,h).catch(()=>{}),await p.rm(v,{force:!0}).catch(()=>{}),m}}finally{await p.rm(n,{recursive:!0,force:!0}).catch(()=>{})}}w(de,"rollbackLocalHarnessWorkspaceRelease");async function pe(e){let r=A.parse(e.proposal);if(r.expectedWorkspace.workspaceId!==e.workspace.id)throw new Error("Refiner proposal targets a different Harness workspace.");if(r.route==="memory")return Y({proposal:r,now:e.now});let t=P(e.storeDir,e.workspace.id),o=await E({workspaceId:e.workspace.id,sourceDir:t.source});if(o.sourceRevision!==r.expectedWorkspace.sourceRevision)throw new Error("Refiner proposal source revision no longer matches the Local Harness workspace.");let a=R.join(t.root,`.validation-candidate-${I()}`);await p.cp(t.source,a,{recursive:!0,force:!1,errorOnExist:!0,verbatimSymlinks:!1});let n=(e.now??(()=>new Date().toISOString()))();try{await K(a,r);let c=await E({workspaceId:e.workspace.id,sourceDir:a}),d=new Map(c.manifest.files.map(s=>[s.path,s])),h=new Map(r.edits.map(s=>[s.target,s])),v=N(o),m=N(c);return Promise.all(r.validationPlan.map(async s=>{let f="passed",u="The candidate Harness source compiles and preserves its manifest contract.";try{if(s.kind==="observed_recovery"){let l=r.evidence.filter(i=>i.kind==="recovery");if(l.length===0)throw new Error("Observed-recovery validation requires recorded recovery evidence.");u=`Validated ${l.length} immutable recovery evidence reference(s) before candidate advancement.`}else if(s.kind==="prompt"){let l=r.edits.filter(i=>i.route==="prompt"&&i.target!=="harness.json");if(l.length===0)throw new Error("Prompt validation requires an instruction-file edit.");for(let i of l){let g=d.get(i.target);if(i.operation==="delete"){if(g)throw new Error(`Deleted instruction ${i.target} remains declared.`)}else if(g?.kind!=="instruction")throw new Error(`Instruction ${i.target} is not declared in the candidate Harness.`);if(i.content!==null&&/\b(?:api[_-]?key|access[_-]?token|password|secret)\s*[:=]/i.test(i.content))throw new Error(`Instruction ${i.target} appears to contain credential material.`)}u=`Validated ${l.length} textual instruction edit(s) and compiled candidate ${c.harnessRelease.id}.`}else if(s.kind==="skill"){let l=r.edits.filter(i=>i.route==="skill"&&i.target!=="harness.json");if(l.length===0)throw new Error("Skill validation requires a declared Skill-file edit.");for(let i of l){let g=d.get(i.target);if(i.operation==="delete"){if(g)throw new Error(`Deleted Skill ${i.target} remains declared.`);continue}if(g?.kind!=="skill")throw new Error(`Skill ${i.target} is not declared in the candidate Harness.`);let k=h.get(i.target)?.content;if(!k)throw new Error(`Skill edit ${i.target} has no content.`);let H=x(k);if(!H.name||!H.description||H.messages.length>0)throw new Error(`Skill ${i.target} is invalid: ${H.messages.join(" ")}`)}u=`Validated ${l.length} Skill edit(s), Skill frontmatter, and compiled candidate ${c.harnessRelease.id}.`}else if(s.kind==="dependency"){let l=c.manifest.files.find(i=>i.kind==="dependency_lock");if(!l)throw new Error("Candidate Harness has no dependency lock.");JSON.parse(await p.readFile(z(a,l.path),"utf8")),u=`Validated dependency lock ${l.path} and compiled candidate ${c.harnessRelease.id}.`}else if(s.kind==="schema")A.parse(r),u=`Validated proposal, manifest, and candidate release schemas for ${c.harnessRelease.id}.`;else if(s.kind==="package"){let l=r.edits.filter(i=>i.route==="agent"&&i.operation!=="delete"&&i.target!=="harness.json");for(let i of l){if(!i.content)throw new Error(`Agent edit ${i.target} has no source.`);X(i.content,{mode:"transform",sourceUrl:i.target,sourceMap:!1})}u=l.length>0?`Syntax-checked ${l.length} Agent source edit(s) and compiled candidate ${c.harnessRelease.id}.`:`Compiled candidate package ${c.harnessRelease.id} and preserved the Harness source manifest contract.`}else if(s.kind==="component_activation"){let l=r.edits.filter(i=>i.target!=="harness.json");if(l.length===0)throw new Error("Component activation requires a concrete Harness component edit.");if(r.route==="agent"){if(l.filter(g=>g.operation!=="delete").length>0)throw new Error("Desktop Work does not compile or execute released Agent source; use an active instruction or standalone Skill, or add an Agent executor before release.");u=`Confirmed ${l.length} deleted Agent component(s) were inactive in Desktop Work.`}else{if(!["prompt","skill"].includes(r.route))throw new Error(`Desktop Work has no activation policy for ${r.route} proposals.`);let i=r.route==="prompt"?"instruction":"skill";for(let g of l){let k=m.components.find(H=>H.path===g.target&&H.kind===i);if(g.operation==="delete"?k:!k)throw new Error(`${i} ${g.target} is not reflected in the candidate Desktop Work runtime surface.`)}if(v.contentHash===m.contentHash)throw new Error("The candidate does not change the effective Desktop Work runtime surface.");u=`Activated ${l.length} ${i} edit(s) in the candidate Desktop Work runtime surface.`}}else s.kind==="business_formula"?(f="blocked",u="Business or financial logic is retained for review until an approved deterministic fixture supplies inputs and expected outputs."):s.kind==="targeted_evaluation"?(f="blocked",u="This sensitive change requires an explicit authority-preserving targeted Evaluation before release."):s.kind==="file_render"?(f="blocked",u="File-render validation requires an exact produced artifact reference; no artifact was attached to this Harness-source proposal."):(f="blocked",u=`Local targeted validation does not yet own ${s.kind}; it requires its dedicated validator.`)}catch(l){f="failed",u=l instanceof Error?l.message:String(l)}return W({schemaVersion:"openpond.harnessTargetedValidationReceipt.v1",id:`validation-${r.id}-${s.id}`,proposal:{id:r.id,contentHash:r.contentHash},validationId:s.id,kind:s.kind,status:f,summary:u,evidenceRefs:r.evidence,createdAt:n,metadata:{candidateHarnessRelease:{id:c.harnessRelease.id,contentHash:c.harnessRelease.contentHash},sourceRevision:c.sourceRevision,...s.kind==="component_activation"?{targetRuntime:"desktop_work",beforeEffectiveRuntimeHash:v.contentHash,afterEffectiveRuntimeHash:m.contentHash,activatedComponentRefs:m.components,inactiveAgentRefs:m.inactiveAgents}:{}}})}))}catch(c){let d=c instanceof Error?c.message:String(c);return r.validationPlan.map(h=>W({schemaVersion:"openpond.harnessTargetedValidationReceipt.v1",id:`validation-${r.id}-${h.id}`,proposal:{id:r.id,contentHash:r.contentHash},validationId:h.id,kind:h.kind,status:"failed",summary:d,evidenceRefs:r.evidence,createdAt:n,metadata:{}}))}finally{await p.rm(a,{recursive:!0,force:!0}).catch(()=>{})}}w(pe,"validateLocalHarnessRefinerProposal");function N(e){let r=[...e.agentSnapshot.instructions.map(o=>({kind:"instruction",path:o.path,contentHash:o.contentHash})),...e.agentSnapshot.skills.map(o=>({kind:"skill",path:o.path,contentHash:o.contentHash}))].sort((o,a)=>o.path.localeCompare(a.path)),t=e.agentSnapshot.agents.map(o=>({path:o.path,contentHash:o.contentHash})).sort((o,a)=>o.path.localeCompare(a.path));return{contentHash:L({schemaVersion:"openpond.desktopWorkHarnessSurface.v1",components:r}),components:r,inactiveAgents:t}}w(N,"desktopWorkRuntimeSurface");function Y(e){let r=(e.now??(()=>new Date().toISOString()))(),t=e.proposal.edits.find(o=>o.route==="memory");return e.proposal.validationPlan.map(o=>{let a="passed",n="Memory candidate is bounded, scoped, and contains no obvious credential material.";try{if(o.kind==="observed_recovery"){if(!e.proposal.evidence.some(c=>c.kind==="recovery"))throw new Error("Observed-recovery validation requires recorded recovery evidence.");n="Memory proposal is grounded in immutable recovery evidence."}else if(o.kind==="memory"){if(!t||!/^memory\/[a-z0-9][a-z0-9-]{0,119}$/.test(t.target))throw new Error("Memory proposal requires one safe memory/<slug> target.");let c=e.proposal.metadata.expectedMemory;if(!c||typeof c!="object"||Array.isArray(c))throw new Error("Memory proposal requires an expected revision snapshot.");let d=c;if(d.key!==Z(t.target))throw new Error("Memory proposal expected revision targets a different key.");if(d.revision!==null&&(!Number.isInteger(d.revision)||Number(d.revision)<1))throw new Error("Memory proposal expected revision is invalid.");if(d.contentHash!==null&&typeof d.contentHash!="string")throw new Error("Memory proposal expected content hash is invalid.");if(d.status!==null&&d.status!=="active"&&d.status!=="deleted")throw new Error("Memory proposal expected status is invalid.");if(d.revision===null&&(d.contentHash!==null||d.status!==null))throw new Error("New memory snapshot must not claim existing content or status.");if(d.revision!==null&&(typeof d.contentHash!="string"||d.status===null))throw new Error("Existing memory snapshot requires its content hash and status.");if(t.operation==="delete"&&d.status!=="active")throw new Error("Memory deletion requires an active expected revision.");if(t.operation!=="delete"){if(!t.content?.trim()||t.content.length>24e3)throw new Error("Memory content must contain 1-24,000 characters.");if(/\b(?:api[_-]?key|access[_-]?token|password|secret)\s*[:=]/i.test(t.content))throw new Error("Memory content appears to contain credential material.")}}else a="blocked",n=`Memory validation cannot satisfy ${o.kind}.`}catch(c){a="failed",n=c instanceof Error?c.message:String(c)}return W({schemaVersion:"openpond.harnessTargetedValidationReceipt.v1",id:`validation-${e.proposal.id}-${o.id}`,proposal:{id:e.proposal.id,contentHash:e.proposal.contentHash},validationId:o.id,kind:o.kind,status:a,summary:n,evidenceRefs:e.proposal.evidence,createdAt:r,metadata:{externalState:"harness_memory"}})})}w(Y,"validateMemoryProposal");function Z(e){let r=e.replaceAll("\\","/"),t=/^memory\/([a-z0-9][a-z0-9-]{0,119})$/.exec(r);if(!t)throw new Error(`Invalid Harness memory target: ${e}.`);return t[1]}w(Z,"memoryKeyFromTarget");async function F(e){let r=await e.store.getHarnessWorkspace(e.workspaceId);if(!r)throw new Error(`Harness workspace ${e.workspaceId} does not exist.`);let t=P(e.storeDir,r.id),o=R.join(t.root,"source-swap.json"),a=await p.readFile(o,"utf8").then(JSON.parse).catch(d=>{if(d.code==="ENOENT")return null;throw d});if(!a)return"none";let n=await E({workspaceId:r.id,sourceDir:t.source});if(r.sourceRevision===a.nextSourceRevision&&n.sourceRevision===a.nextSourceRevision)return await p.rm(a.backupSource,{recursive:!0,force:!0}),await p.rm(o,{force:!0}),"completed";let c=await E({workspaceId:r.id,sourceDir:a.backupSource});if(r.sourceRevision===a.previousSourceRevision&&c.sourceRevision===a.previousSourceRevision)return await $(t.source,a.backupSource),await p.rm(o,{force:!0}),"restored";throw new Error("Harness source-swap recovery cannot reconcile filesystem and workspace revisions.")}w(F,"recoverLocalHarnessSourceSwap");async function K(e,r){for(let t of r.edits){let o=z(e,t.target);if(t.operation==="delete"){await p.rm(o,{force:!1});continue}if(t.content===null)throw new Error(`Refiner edit ${t.id} has no content.`);if(t.operation==="create")await p.mkdir(R.dirname(o),{recursive:!0}),await p.writeFile(o,t.content,{flag:"wx"});else{let a=await p.lstat(o);if(!a.isFile()||a.isSymbolicLink())throw new Error(`Refiner update target must be a regular file: ${t.target}`);await p.writeFile(o,t.content,{flag:"w"})}}}w(K,"applyOverlayEdits");function z(e,r){let t=R.resolve(e),o=R.resolve(t,...r.replaceAll("\\","/").split("/")),a=R.relative(t,o);if(!a||a.startsWith("..")||R.isAbsolute(a))throw new Error(`Refiner edit target escapes the Harness source: ${r}`);return o}w(z,"containedPath");async function J(e,r){let t=`${e}.${I()}.tmp`;await p.writeFile(t,`${JSON.stringify(r,null,2)}
+import{ka as P,la as V,ma as M,qa as E,ra as q}from"./chunk-4TZHH5FC.js";import{b as x}from"./chunk-L3KS6MOV.js";import{kd as T}from"./chunk-2JO2KWT3.js";import{r as _,s as A,t as C,y as W}from"./chunk-SDEDAHV6.js";import{l as D,m as L,n as b}from"./chunk-NNF6KCHD.js";import{a as w}from"./chunk-FTQLQJQV.js";import{randomUUID as I}from"node:crypto";import{promises as p}from"node:fs";import{stripTypeScriptTypes as X}from"node:module";import R from"node:path";async function le(e){let r=_.parse(e.overlay),t=A.parse(e.proposal),o=e.validations.map(v=>C.parse(v));if((t.route==="agent"?t.edits.filter(v=>v.target!=="harness.json"&&v.operation!=="delete"):[]).length>0){let v=t.validationPlan.find(s=>s.kind==="component_activation"&&s.required);if(!v)throw new Error("Desktop Work Agent proposals require component-activation validation before review.");if(o.find(s=>s.validationId===v.id)?.status==="passed")throw new Error("Desktop Work cannot accept a passed Agent activation receipt until an Agent source executor exists.")}if(t.overlay.id!==r.id||t.overlay.revision!==r.revision||t.overlay.contentHash!==r.contentHash)throw new Error("Refiner proposal is not bound to the supplied run overlay.");if(r.status!=="frozen")throw new Error("Only a frozen run overlay can advance a Harness workspace.");let n=await e.store.getHarnessWorkspace(t.expectedWorkspace.workspaceId);if(!n)throw new Error(`Harness workspace ${t.expectedWorkspace.workspaceId} does not exist.`);if(n.location!==e.store.harnessStoragePlacement)throw new Error("Refiner workspace does not match the admitted storage placement.");let c=P(e.storeDir,n.id),d=await E({workspaceId:n.id,sourceDir:c.source});if(d.sourceRevision!==n.sourceRevision)throw new Error(`Harness source is ${d.sourceRevision}; workspace expects ${n.sourceRevision}. Record or revert the source change before refinement.`);let h=R.join(c.root,`.source-candidate-${I()}`);await p.cp(c.source,h,{recursive:!0,force:!1,errorOnExist:!0,verbatimSymlinks:!1});try{await K(h,t);let v=await E({workspaceId:n.id,sourceDir:h}),m=(e.now??(()=>new Date().toISOString()))(),s=await q({storeDir:e.storeDir,workspaceId:n.id,compiled:v,createdAt:m});await e.store.saveHarnessReleaseRecord(s),await e.store.saveHarnessImprovementArtifact(n.id,"run_overlay",r),await e.store.saveHarnessImprovementArtifact(n.id,"proposal",t);for(let i of o)await e.store.saveHarnessImprovementArtifact(n.id,"targeted_validation",i);if(!T({workspace:n,proposal:t}).eligible&&!e.reviewAuthority)return e.store.advanceHarnessWorkspaceAtomically({receiptId:e.receiptId,workspaceId:n.id,proposal:t,validations:o,nextRelease:{id:s.harnessRelease.id,contentHash:s.harnessRelease.contentHash},nextSourceRevision:s.sourceRevision,now:m});let u=R.join(c.root,`.source-backup-${I()}`),l=R.join(c.root,"source-swap.json");await J(l,{schemaVersion:"openpond.localHarnessSourceSwap.v1",workspaceId:n.id,expectedWorkspaceRevision:n.revision,previousSourceRevision:n.sourceRevision,nextSourceRevision:s.sourceRevision,backupSource:u,candidateSource:h,createdAt:m}),await p.rename(c.source,u),await p.rename(h,c.source);try{let i=e.reviewAuthority?await e.store.advanceReviewedHarnessWorkspaceAtomically({receiptId:e.receiptId,workspaceId:n.id,proposal:t,validations:o,nextRelease:{id:s.harnessRelease.id,contentHash:s.harnessRelease.contentHash},nextSourceRevision:s.sourceRevision,reviewer:e.reviewAuthority.reviewer,now:m}):await e.store.advanceHarnessWorkspaceAtomically({receiptId:e.receiptId,workspaceId:n.id,proposal:t,validations:o,nextRelease:{id:s.harnessRelease.id,contentHash:s.harnessRelease.contentHash},nextSourceRevision:s.sourceRevision,now:m});return i.receipt.decision!=="advanced"?await $(c.source,u):await p.rm(u,{recursive:!0,force:!0}),await p.rm(l,{force:!0}),i}catch(i){throw await $(c.source,u).catch(()=>{}),await p.rm(l,{force:!0}).catch(()=>{}),i}}finally{await p.rm(h,{recursive:!0,force:!0}).catch(()=>{})}}w(le,"applyLocalHarnessRefinerProposal");async function de(e){let r=await e.store.getHarnessWorkspace(e.workspaceId);if(!r||r.location!==e.store.harnessStoragePlacement)throw new Error(`Local Harness workspace ${e.workspaceId} does not exist.`);if(r.currentChannel.release?.id!==e.rollbackOf.id||r.currentChannel.release.contentHash!==e.rollbackOf.contentHash)throw new Error("Harness rollback source is no longer the current release.");let t=await e.store.getHarnessReleaseRecord(e.targetRelease.contentHash);if(!t||t.workspaceId!==r.id||t.harnessRelease.id!==e.targetRelease.id)throw new Error("Harness rollback target is unavailable in this workspace.");let o=P(e.storeDir,r.id);if((await E({workspaceId:r.id,sourceDir:o.source})).sourceRevision!==r.sourceRevision)throw new Error("Harness source changed before rollback.");let n=R.join(o.root,`.source-rollback-${I()}`);await p.cp(R.join(t.bundlePath,"source"),n,{recursive:!0,force:!1,errorOnExist:!0,verbatimSymlinks:!1});try{if((await E({workspaceId:r.id,sourceDir:n})).sourceRevision!==t.sourceRevision)throw new Error("Harness rollback bundle does not reproduce its registered source revision.");let d=(e.now??(()=>new Date().toISOString()))(),h=R.join(o.root,`.source-backup-${I()}`),v=R.join(o.root,"source-swap.json");await J(v,{schemaVersion:"openpond.localHarnessSourceSwap.v1",workspaceId:r.id,expectedWorkspaceRevision:r.revision,previousSourceRevision:r.sourceRevision,nextSourceRevision:t.sourceRevision,backupSource:h,candidateSource:n,createdAt:d}),await p.rename(o.source,h),await p.rename(n,o.source);try{let m=await e.store.rollbackHarnessWorkspaceAtomically({receiptId:e.receiptId,workspaceId:r.id,expectedWorkspaceRevision:r.revision,expectedChannelRevision:r.currentChannel.revision,targetRelease:e.targetRelease,targetSourceRevision:t.sourceRevision,rollbackOf:e.rollbackOf,now:d});return m.receipt.decision!=="rolled_back"?await $(o.source,h):await p.rm(h,{recursive:!0,force:!0}),await p.rm(v,{force:!0}),m}catch(m){throw await $(o.source,h).catch(()=>{}),await p.rm(v,{force:!0}).catch(()=>{}),m}}finally{await p.rm(n,{recursive:!0,force:!0}).catch(()=>{})}}w(de,"rollbackLocalHarnessWorkspaceRelease");async function pe(e){let r=A.parse(e.proposal);if(r.expectedWorkspace.workspaceId!==e.workspace.id)throw new Error("Refiner proposal targets a different Harness workspace.");if(r.route==="memory")return Y({proposal:r,now:e.now});let t=P(e.storeDir,e.workspace.id),o=await E({workspaceId:e.workspace.id,sourceDir:t.source});if(o.sourceRevision!==r.expectedWorkspace.sourceRevision)throw new Error("Refiner proposal source revision no longer matches the Local Harness workspace.");let a=R.join(t.root,`.validation-candidate-${I()}`);await p.cp(t.source,a,{recursive:!0,force:!1,errorOnExist:!0,verbatimSymlinks:!1});let n=(e.now??(()=>new Date().toISOString()))();try{await K(a,r);let c=await E({workspaceId:e.workspace.id,sourceDir:a}),d=new Map(c.manifest.files.map(s=>[s.path,s])),h=new Map(r.edits.map(s=>[s.target,s])),v=N(o),m=N(c);return Promise.all(r.validationPlan.map(async s=>{let f="passed",u="The candidate Harness source compiles and preserves its manifest contract.";try{if(s.kind==="observed_recovery"){let l=r.evidence.filter(i=>i.kind==="recovery");if(l.length===0)throw new Error("Observed-recovery validation requires recorded recovery evidence.");u=`Validated ${l.length} immutable recovery evidence reference(s) before candidate advancement.`}else if(s.kind==="prompt"){let l=r.edits.filter(i=>i.route==="prompt"&&i.target!=="harness.json");if(l.length===0)throw new Error("Prompt validation requires an instruction-file edit.");for(let i of l){let g=d.get(i.target);if(i.operation==="delete"){if(g)throw new Error(`Deleted instruction ${i.target} remains declared.`)}else if(g?.kind!=="instruction")throw new Error(`Instruction ${i.target} is not declared in the candidate Harness.`);if(i.content!==null&&/\b(?:api[_-]?key|access[_-]?token|password|secret)\s*[:=]/i.test(i.content))throw new Error(`Instruction ${i.target} appears to contain credential material.`)}u=`Validated ${l.length} textual instruction edit(s) and compiled candidate ${c.harnessRelease.id}.`}else if(s.kind==="skill"){let l=r.edits.filter(i=>i.route==="skill"&&i.target!=="harness.json");if(l.length===0)throw new Error("Skill validation requires a declared Skill-file edit.");for(let i of l){let g=d.get(i.target);if(i.operation==="delete"){if(g)throw new Error(`Deleted Skill ${i.target} remains declared.`);continue}if(g?.kind!=="skill")throw new Error(`Skill ${i.target} is not declared in the candidate Harness.`);let k=h.get(i.target)?.content;if(!k)throw new Error(`Skill edit ${i.target} has no content.`);let H=x(k);if(!H.name||!H.description||H.messages.length>0)throw new Error(`Skill ${i.target} is invalid: ${H.messages.join(" ")}`)}u=`Validated ${l.length} Skill edit(s), Skill frontmatter, and compiled candidate ${c.harnessRelease.id}.`}else if(s.kind==="dependency"){let l=c.manifest.files.find(i=>i.kind==="dependency_lock");if(!l)throw new Error("Candidate Harness has no dependency lock.");JSON.parse(await p.readFile(z(a,l.path),"utf8")),u=`Validated dependency lock ${l.path} and compiled candidate ${c.harnessRelease.id}.`}else if(s.kind==="schema")A.parse(r),u=`Validated proposal, manifest, and candidate release schemas for ${c.harnessRelease.id}.`;else if(s.kind==="package"){let l=r.edits.filter(i=>i.route==="agent"&&i.operation!=="delete"&&i.target!=="harness.json");for(let i of l){if(!i.content)throw new Error(`Agent edit ${i.target} has no source.`);X(i.content,{mode:"transform",sourceUrl:i.target,sourceMap:!1})}u=l.length>0?`Syntax-checked ${l.length} Agent source edit(s) and compiled candidate ${c.harnessRelease.id}.`:`Compiled candidate package ${c.harnessRelease.id} and preserved the Harness source manifest contract.`}else if(s.kind==="component_activation"){let l=r.edits.filter(i=>i.target!=="harness.json");if(l.length===0)throw new Error("Component activation requires a concrete Harness component edit.");if(r.route==="agent"){if(l.filter(g=>g.operation!=="delete").length>0)throw new Error("Desktop Work does not compile or execute released Agent source; use an active instruction or standalone Skill, or add an Agent executor before release.");u=`Confirmed ${l.length} deleted Agent component(s) were inactive in Desktop Work.`}else{if(!["prompt","skill"].includes(r.route))throw new Error(`Desktop Work has no activation policy for ${r.route} proposals.`);let i=r.route==="prompt"?"instruction":"skill";for(let g of l){let k=m.components.find(H=>H.path===g.target&&H.kind===i);if(g.operation==="delete"?k:!k)throw new Error(`${i} ${g.target} is not reflected in the candidate Desktop Work runtime surface.`)}if(v.contentHash===m.contentHash)throw new Error("The candidate does not change the effective Desktop Work runtime surface.");u=`Activated ${l.length} ${i} edit(s) in the candidate Desktop Work runtime surface.`}}else s.kind==="business_formula"?(f="blocked",u="Business or financial logic is retained for review until an approved deterministic fixture supplies inputs and expected outputs."):s.kind==="targeted_evaluation"?(f="blocked",u="This sensitive change requires an explicit authority-preserving targeted Evaluation before release."):s.kind==="file_render"?(f="blocked",u="File-render validation requires an exact produced artifact reference; no artifact was attached to this Harness-source proposal."):(f="blocked",u=`Local targeted validation does not yet own ${s.kind}; it requires its dedicated validator.`)}catch(l){f="failed",u=l instanceof Error?l.message:String(l)}return W({schemaVersion:"openpond.harnessTargetedValidationReceipt.v1",id:`validation-${r.id}-${s.id}`,proposal:{id:r.id,contentHash:r.contentHash},validationId:s.id,kind:s.kind,status:f,summary:u,evidenceRefs:r.evidence,createdAt:n,metadata:{candidateHarnessRelease:{id:c.harnessRelease.id,contentHash:c.harnessRelease.contentHash},sourceRevision:c.sourceRevision,...s.kind==="component_activation"?{targetRuntime:"desktop_work",beforeEffectiveRuntimeHash:v.contentHash,afterEffectiveRuntimeHash:m.contentHash,activatedComponentRefs:m.components,inactiveAgentRefs:m.inactiveAgents}:{}}})}))}catch(c){let d=c instanceof Error?c.message:String(c);return r.validationPlan.map(h=>W({schemaVersion:"openpond.harnessTargetedValidationReceipt.v1",id:`validation-${r.id}-${h.id}`,proposal:{id:r.id,contentHash:r.contentHash},validationId:h.id,kind:h.kind,status:"failed",summary:d,evidenceRefs:r.evidence,createdAt:n,metadata:{}}))}finally{await p.rm(a,{recursive:!0,force:!0}).catch(()=>{})}}w(pe,"validateLocalHarnessRefinerProposal");function N(e){let r=[...e.agentSnapshot.instructions.map(o=>({kind:"instruction",path:o.path,contentHash:o.contentHash})),...e.agentSnapshot.skills.map(o=>({kind:"skill",path:o.path,contentHash:o.contentHash}))].sort((o,a)=>o.path.localeCompare(a.path)),t=e.agentSnapshot.agents.map(o=>({path:o.path,contentHash:o.contentHash})).sort((o,a)=>o.path.localeCompare(a.path));return{contentHash:L({schemaVersion:"openpond.desktopWorkHarnessSurface.v1",components:r}),components:r,inactiveAgents:t}}w(N,"desktopWorkRuntimeSurface");function Y(e){let r=(e.now??(()=>new Date().toISOString()))(),t=e.proposal.edits.find(o=>o.route==="memory");return e.proposal.validationPlan.map(o=>{let a="passed",n="Memory candidate is bounded, scoped, and contains no obvious credential material.";try{if(o.kind==="observed_recovery"){if(!e.proposal.evidence.some(c=>c.kind==="recovery"))throw new Error("Observed-recovery validation requires recorded recovery evidence.");n="Memory proposal is grounded in immutable recovery evidence."}else if(o.kind==="memory"){if(!t||!/^memory\/[a-z0-9][a-z0-9-]{0,119}$/.test(t.target))throw new Error("Memory proposal requires one safe memory/<slug> target.");let c=e.proposal.metadata.expectedMemory;if(!c||typeof c!="object"||Array.isArray(c))throw new Error("Memory proposal requires an expected revision snapshot.");let d=c;if(d.key!==Z(t.target))throw new Error("Memory proposal expected revision targets a different key.");if(d.revision!==null&&(!Number.isInteger(d.revision)||Number(d.revision)<1))throw new Error("Memory proposal expected revision is invalid.");if(d.contentHash!==null&&typeof d.contentHash!="string")throw new Error("Memory proposal expected content hash is invalid.");if(d.status!==null&&d.status!=="active"&&d.status!=="deleted")throw new Error("Memory proposal expected status is invalid.");if(d.revision===null&&(d.contentHash!==null||d.status!==null))throw new Error("New memory snapshot must not claim existing content or status.");if(d.revision!==null&&(typeof d.contentHash!="string"||d.status===null))throw new Error("Existing memory snapshot requires its content hash and status.");if(t.operation==="delete"&&d.status!=="active")throw new Error("Memory deletion requires an active expected revision.");if(t.operation!=="delete"){if(!t.content?.trim()||t.content.length>24e3)throw new Error("Memory content must contain 1-24,000 characters.");if(/\b(?:api[_-]?key|access[_-]?token|password|secret)\s*[:=]/i.test(t.content))throw new Error("Memory content appears to contain credential material.")}}else a="blocked",n=`Memory validation cannot satisfy ${o.kind}.`}catch(c){a="failed",n=c instanceof Error?c.message:String(c)}return W({schemaVersion:"openpond.harnessTargetedValidationReceipt.v1",id:`validation-${e.proposal.id}-${o.id}`,proposal:{id:e.proposal.id,contentHash:e.proposal.contentHash},validationId:o.id,kind:o.kind,status:a,summary:n,evidenceRefs:e.proposal.evidence,createdAt:r,metadata:{externalState:"harness_memory"}})})}w(Y,"validateMemoryProposal");function Z(e){let r=e.replaceAll("\\","/"),t=/^memory\/([a-z0-9][a-z0-9-]{0,119})$/.exec(r);if(!t)throw new Error(`Invalid Harness memory target: ${e}.`);return t[1]}w(Z,"memoryKeyFromTarget");async function F(e){let r=await e.store.getHarnessWorkspace(e.workspaceId);if(!r)throw new Error(`Harness workspace ${e.workspaceId} does not exist.`);let t=P(e.storeDir,r.id),o=R.join(t.root,"source-swap.json"),a=await p.readFile(o,"utf8").then(JSON.parse).catch(d=>{if(d.code==="ENOENT")return null;throw d});if(!a)return"none";let n=await E({workspaceId:r.id,sourceDir:t.source});if(r.sourceRevision===a.nextSourceRevision&&n.sourceRevision===a.nextSourceRevision)return await p.rm(a.backupSource,{recursive:!0,force:!0}),await p.rm(o,{force:!0}),"completed";let c=await E({workspaceId:r.id,sourceDir:a.backupSource});if(r.sourceRevision===a.previousSourceRevision&&c.sourceRevision===a.previousSourceRevision)return await $(t.source,a.backupSource),await p.rm(o,{force:!0}),"restored";throw new Error("Harness source-swap recovery cannot reconcile filesystem and workspace revisions.")}w(F,"recoverLocalHarnessSourceSwap");async function K(e,r){for(let t of r.edits){let o=z(e,t.target);if(t.operation==="delete"){await p.rm(o,{force:!1});continue}if(t.content===null)throw new Error(`Refiner edit ${t.id} has no content.`);if(t.operation==="create")await p.mkdir(R.dirname(o),{recursive:!0}),await p.writeFile(o,t.content,{flag:"wx"});else{let a=await p.lstat(o);if(!a.isFile()||a.isSymbolicLink())throw new Error(`Refiner update target must be a regular file: ${t.target}`);await p.writeFile(o,t.content,{flag:"w"})}}}w(K,"applyOverlayEdits");function z(e,r){let t=R.resolve(e),o=R.resolve(t,...r.replaceAll("\\","/").split("/")),a=R.relative(t,o);if(!a||a.startsWith("..")||R.isAbsolute(a))throw new Error(`Refiner edit target escapes the Harness source: ${r}`);return o}w(z,"containedPath");async function J(e,r){let t=`${e}.${I()}.tmp`;await p.writeFile(t,`${JSON.stringify(r,null,2)}
 `,{flag:"wx"}),await p.rename(t,e)}w(J,"writeSwapJournal");async function $(e,r){await p.rm(e,{recursive:!0,force:!0}),await p.rename(r,e)}w($,"restoreSource");var y="desktop-personal",U="personal-default";async function ve(e){let r=await e.store.getSelectedHarnessWorkspace({ownerKind:"personal",ownerId:y});if(r&&r.metadata.selectionEligible!==!1)return await F({store:e.store,storeDir:e.storeDir,workspaceId:r.id}),O(e.store,r.id,r.currentChannel.release?.contentHash??null);let t=(await e.store.listHarnessWorkspaces({ownerKind:"personal",ownerId:y})).find(n=>n.metadata.selectionEligible!==!1);if(t)return await e.store.selectHarnessWorkspace({ownerKind:"personal",ownerId:y,workspaceId:t.id,updatedAt:(e.now??(()=>new Date().toISOString()))()}),O(e.store,t.id,t.currentChannel.release?.contentHash??null);let o=await e.loadProfileState(),a=o.mode==="local"&&o.sourcePath&&!o.error?await M({store:e.store,storeDir:e.storeDir,id:U,ownerId:y,name:o.activeProfile?.trim()||"Personal Harness",profile:o,now:e.now}):await V({store:e.store,storeDir:e.storeDir,id:U,ownerId:y,name:"Personal Harness",now:e.now});return await e.store.selectHarnessWorkspace({ownerKind:"personal",ownerId:y,workspaceId:a.workspace.id,updatedAt:(e.now??(()=>new Date().toISOString()))()}),a.release}w(ve,"ensureSelectedLocalHarnessWorkspace");async function B(e){let r=await e.getSelectedHarnessWorkspace({ownerKind:"personal",ownerId:y});return r?O(e,r.id,r.currentChannel.release?.contentHash??null):null}w(B,"resolveSelectedLocalHarnessRelease");async function O(e,r,t){if(!t)throw new Error(`Selected Harness workspace ${r} has no current release.`);let o=await e.getHarnessReleaseRecord(t);if(!o||o.workspaceId!==r)throw new Error(`Selected Harness workspace ${r} points to a missing release ${t}.`);return b(o.agentSnapshot,"Selected Agent snapshot"),b(o.harnessRelease,"Selected Harness release"),o}w(O,"requireCurrentRelease");import{promises as Q}from"node:fs";import S from"node:path";async function be(e,r){if(r){let a=await e.getHarnessReleaseRecord(r.contentHash);if(!a||a.harnessRelease.id!==r.id)throw new Error("The selected immutable Harness release is unavailable.");let n=await e.getHarnessWorkspace(a.workspaceId);if(!n||n.ownerScope.kind!=="personal"||n.ownerScope.id!==y)throw new Error("The selected Harness release is not available to this local owner.");return b(a.agentSnapshot,"Selected Agent snapshot"),b(a.harnessRelease,"Selected Harness release"),G({workspace:n,release:a})}let t=await B(e);if(!t)return null;let o=await e.getSelectedHarnessWorkspace({ownerKind:"personal",ownerId:y});if(!o||o.id!==t.workspaceId)throw new Error("Selected Harness workspace changed while its release was being admitted.");return G({workspace:o,release:t})}w(be,"loadSelectedLocalHarnessRuntime");async function G(e){let{workspace:r,release:t}=e;if(t.workspaceId!==r.id)throw new Error("Harness release does not belong to the requested workspace.");let o=S.join(t.bundlePath,"source");await Promise.all(t.harnessRelease.files.map(s=>ee(o,s.path,s.contentHash)));let a=await Promise.all(t.agentSnapshot.instructions.map(async s=>({path:s.path,content:await j(o,s.path,s.contentHash)}))),n=[],c=new Map;for(let s of t.agentSnapshot.skills){let f=await j(o,s.path,s.contentHash),u=x(f);if(!u.name||!u.description||u.messages.length>0)throw new Error(`Released Harness Skill ${s.path} is invalid: ${u.messages.join(" ")||"missing name or description"}`);if(c.has(u.name))throw new Error(`Released Harness has duplicate Skill ${u.name}.`);let l=`${S.posix.dirname(s.path)}/`,i=t.harnessRelease.files.filter(k=>k.visibility==="policy"&&k.path.startsWith(l)&&k.path!==s.path).map(k=>k.path.slice(l.length)).sort(),g={name:u.name,description:u.description,path:s.path,scope:"profile",enabled:!0,sourcePath:o,charCount:f.length,sourceHash:s.contentHash,validationStatus:"valid",validationMessages:[],resourceFiles:i};n.push(g),c.set(g.name,async()=>{let k=await j(o,s.path,s.contentHash),H=x(k);if(!H.name||!H.description||H.messages.length>0)throw new Error(`Released Harness Skill ${s.path} failed validation while loading.`);return{name:H.name,description:H.description,body:H.body,path:s.path,sourceHash:s.contentHash,charCount:k.length,packagePath:S.join(o,...S.posix.dirname(s.path).split("/")),resourceFiles:i}})}n.sort((s,f)=>s.name.localeCompare(f.name));let d={profileSourcePath:o,skills:n,readSkill:c.size>0?async s=>{let f=c.get(s);if(!f)throw new Error(`Released Harness Skill not found: ${s}`);return f()}:null},h=a.sort((s,f)=>s.path.localeCompare(f.path)).map(({path:s,content:f})=>[`Active Harness instruction (${s}):`,f.trim()].join(`
 `)).filter(s=>s.trim().length>0),m=[["Harness capability receipt:",JSON.stringify({harnessRelease:{id:t.harnessRelease.id,contentHash:t.harnessRelease.contentHash},agentSnapshot:{id:t.agentSnapshot.id,contentHash:t.agentSnapshot.contentHash},files:t.harnessRelease.files.filter(s=>s.visibility==="policy").map(s=>({path:s.path,contentHash:s.contentHash})),skills:t.agentSnapshot.skills.map(s=>s.path),agents:t.agentSnapshot.agents.map(s=>s.path),tools:t.agentSnapshot.toolDeclarations.map(s=>s.name),capabilityRequirements:t.agentSnapshot.capabilityRequirements})].join(`
 `),h.length>0?["Active Harness preflight:","Apply the following released instructions when planning work and immediately before every tool call.","Preflight each call: (1) identify any active instruction that matches the planned operation, (2) inspect the exact tool arguments for a forbidden pattern, and (3) rewrite the call before sending it when a pattern matches. Compliance is required even when the prohibited call might still succeed.",...h].join(`