openpond 0.2.61 → 0.2.63

package/dist/chunks/hosted-experiment-improvement-UXC542SZ.js

@@ -0,0 +1,3 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{a as xe,b as Ee,c as Te,d as Pe,e as Ae,f as Ce,h as B,i as je,j as ze}from"./chunk-IWWXIUAQ.js";import{e as De,f as U}from"./chunk-ZPTKR3GB.js";import{A as He,v as ye,w as Re}from"./chunk-ERT32RZA.js";import"./chunk-G6OR5NB6.js";import{b as Se}from"./chunk-QU4UE73E.js";import"./chunk-YM4PSVFW.js";import"./chunk-H6C4MAUN.js";import"./chunk-JORRZ4BB.js";import{b as be,c as ke}from"./chunk-AKGCM53D.js";import"./chunk-FEAKTSRS.js";import{a as z}from"./chunk-HIYQPZ7C.js";import"./chunk-XVDFJ3ZF.js";import"./chunk-F6UQ6PPK.js";import"./chunk-SDO4FC4Q.js";import"./chunk-IR3YJWPW.js";import"./chunk-NT7N6KLE.js";import"./chunk-UPWJSNL5.js";import"./chunk-6EBCS57F.js";import"./chunk-WP2L2NY2.js";import"./chunk-KCOTDUGW.js";import{a as ge,b as we}from"./chunk-W2TICQ62.js";import"./chunk-RZUCVF2Q.js";import{a as Ie}from"./chunk-FYYYECHE.js";import"./chunk-NZTCH6K5.js";import{b as ve,c as G}from"./chunk-4SZ3HKHU.js";import"./chunk-DQI5TE6A.js";import"./chunk-AN525SPP.js";import"./chunk-IZ6DLEVY.js";import"./chunk-EZRUWIP6.js";import"./chunk-SYUKES6H.js";import"./chunk-AH26AQN7.js";import"./chunk-5MHYGMJG.js";import"./chunk-XNOMIWEY.js";import{b as me,i as fe,m as D,n as he}from"./chunk-LK2K3SPM.js";import"./chunk-7PXZ4X4P.js";import"./chunk-ELX7VRSU.js";import"./chunk-CZ5R4JXZ.js";import"./chunk-7KWD2I6W.js";import"./chunk-WWQNMC7C.js";import{y as W}from"./chunk-B4RKHHF7.js";import"./chunk-DLANLLKH.js";import"./chunk-YU3C6U5V.js";import"./chunk-KVTBX2UP.js";import"./chunk-LKKMLBOH.js";import"./chunk-ERL2M773.js";import"./chunk-GXCUH2VV.js";import"./chunk-4ZBOYWQ3.js";import"./chunk-DMFUEUAZ.js";import"./chunk-JHR3LF2F.js";import{a as ce,ga as le,ha as ue,w as C,x as $}from"./chunk-M3FLEZ4E.js";import"./chunk-OQPJ7FJF.js";import"./chunk-WBUK73ST.js";import"./chunk-P7HRF4FM.js";import{A as pe}from"./chunk-GS6ZUSIN.js";import"./chunk-2ITZW2CN.js";import{g as se,l as V,n as de}from"./chunk-OG33QAG6.js";import"./chunk-W5W4IODW.js";import"./chunk-PWK5Z5S3.js";import"./chunk-W45RKGM6.js";import"./chunk-MWXW2CA6.js";import"./chunk-L3KS6MOV.js";import"./chunk-M3SCON53.js";import"./chunk-IZ56L2ZK.js";import"./chunk-KCJVFLBB.js";import"./chunk-3YXYBYWK.js";import"./chunk-MPNJ2BB4.js";import"./chunk-KOKX7PBS.js";import"./chunk-V7KR74NO.js";import"./chunk-XGY4OQLC.js";import"./chunk-7O6Z3VOZ.js";import"./chunk-5EP2DZLJ.js";import"./chunk-IDOGNIMV.js";import"./chunk-W45RKGM6.js";import"./chunk-PBTXLQAU.js";import"./chunk-7WYL2IDD.js";import"./chunk-4N4EH3RJ.js";import"./chunk-HFJUXKT5.js";import"./chunk-5ZBLCWEJ.js";import"./chunk-PCB65K4G.js";import"./chunk-6RS4NAOY.js";import"./chunk-ZZHXQCNB.js";import{ga as ae,ja as ie}from"./chunk-YNQWJWIC.js";import"./chunk-VNJAAYNQ.js";import"./chunk-7ZLXFKRI.js";import"./chunk-7HRLWPPZ.js";import"./chunk-MTP3B2SU.js";import{c as re,d as oe,f as ne}from"./chunk-LAOLJDVB.js";import{c as Y,g as ee}from"./chunk-UWHIU24L.js";import"./chunk-JCLTFDVW.js";import"./chunk-LV3CQ72P.js";import"./chunk-ABF3W2MO.js";import"./chunk-RV7PUSI2.js";import"./chunk-KCV5VN4X.js";import"./chunk-6FA3GG5B.js";import"./chunk-2EPR4HLF.js";import"./chunk-BKEDG3A4.js";import{f as X}from"./chunk-OE22TAXP.js";import"./chunk-UGOK7VTC.js";import"./chunk-J572ANHX.js";import{Pb as M}from"./chunk-PBZCXPPC.js";import{r as te}from"./chunk-NJLULBTM.js";import{m as J,n as R}from"./chunk-VVNV4NNW.js";import{A as e}from"./chunk-PF56N7ZY.js";import{a as i}from"./chunk-FTQLQJQV.js";import{promises as $e}from"node:fs";import Ue from"node:path";import Le from"node:http";var Q=e.object({socketPath:e.string().min(1).max(1e3),capability:e.string().regex(/^[a-f0-9]{64}$/),jobId:e.string().min(1),pinHash:e.string().regex(/^[a-f0-9]{64}$/)}).strict(),Ne=e.object({jobId:e.string().min(1),pinHash:e.string().regex(/^[a-f0-9]{64}$/),requestId:e.string().min(1).max(500),model:X,reasoningEffort:e.enum(["off","low","medium","high","xhigh","max","none"]).nullable(),messages:e.array(e.unknown()).min(1).max(1e3),tools:e.array(e.unknown()).max(100),toolChoice:e.unknown(),maxOutputTokens:e.number().int().positive().max(131072),temperature:e.number().finite().optional(),topP:e.number().finite().optional(),seed:e.number().int().optional()}).strict(),Je=e.discriminatedUnion("kind",[e.object({kind:e.literal("chat_completions_reasoning"),reasoningContent:e.string()}).strict(),e.object({kind:e.literal("responses_reasoning_items"),items:e.array(e.record(e.string(),e.unknown()))}).strict()]),Ve=e.object({id:e.string().optional(),type:e.string(),function:e.object({name:e.string().optional(),arguments:e.string().optional()}).passthrough().optional()}).passthrough(),Ge=e.object({text:e.string().optional(),usage:e.unknown().optional(),costUsd:e.number().finite().nonnegative().optional(),continuation:Je.optional(),toolCalls:e.array(Ve).optional()}).strict();function qe(s,r){let t=Q.parse(s);async function n(u,v,I=r){I.throwIfAborted();let x=Buffer.from(JSON.stringify({action:u,jobId:t.jobId,pinHash:t.pinHash,value:v}));if(x.length>8*1024*1024)throw new Error("Hosted advanced request exceeds its private byte limit.");return new Promise((y,h)=>{let l=Le.request({socketPath:t.socketPath,path:"/",method:"POST",headers:{authorization:`Bearer ${t.capability}`,"content-type":"application/json","content-length":x.length},signal:I},H=>{let E=[],P=0;H.on("data",w=>{if(P+=w.length,P>8388608){H.destroy(new Error("Hosted advanced response exceeds its private byte limit."));return}E.push(w)}),H.on("error",h),H.on("end",()=>{try{let w=JSON.parse(Buffer.concat(E).toString("utf8"));if(H.statusCode!==200)throw new Error(typeof w?.error=="string"?w.error:"The actual hosted advanced owner refused this operation.");y(w)}catch(w){h(w)}})});l.on("error",h),l.end(x)})}i(n,"call");let d=i(async function*(u){let v=Ne.parse({jobId:t.jobId,pinHash:t.pinHash,requestId:u.requestId,model:u.model,reasoningEffort:u.reasoningEffort,messages:u.messages,tools:u.tools,toolChoice:u.toolChoice,maxOutputTokens:u.maxOutputTokens??4096,...u.temperature===void 0?{}:{temperature:u.temperature},...u.topP===void 0?{}:{topP:u.topP},...u.seed===void 0?{}:{seed:u.seed}}),I=e.object({deltas:e.array(Ge).max(1e5)}).strict().parse(await n("model",v,AbortSignal.any([r,u.signal])));for(let x of I.deltas)yield x},"stream");return{stream:d,text:i(async u=>{let v="";for await(let I of d({...u,reasoningEffort:u.reasoningEffort??null,tools:[],toolChoice:"none"}))I.text&&(v+=I.text),I.usage!==void 0&&u.onUsage?.(I.usage,I.costUsd);return v},"text"),authorize:i(async()=>{await n("authorize",{})},"authorize"),ceiling:i(async(u,v,I)=>e.object({configurationHash:e.string().regex(/^[a-f0-9]{64}$/),maximumChargeUsd:e.number().finite().positive()}).strict().parse(await n("ceiling",{modelId:u,pricing:v,maximumOutputTokens:I})),"ceiling"),compute:i((u,v=!1)=>n("compute",u,v?AbortSignal.timeout(6e4):r),"compute"),checkpoint:i(u=>n("checkpoint",u),"checkpoint")}}i(qe,"createHostedAdvancedModelBridge");import Qe from"node:path";var Me=e.string().regex(/^[a-f0-9]{64}$/),Ke=e.object({taskId:e.string().min(1),caseHash:Me,session:C,turn:$,events:e.array(ce).max(1e4),traceHash:Me,output:e.string().nullable()}).strict(),K=e.object({packageValue:ae,contexts:e.array(Ke).max(1e4)}).strict();async function _e(s){let r=V(s.pin),t=K.parse(s.privateSource),n=ie(t.packageValue),d=M(e.object({manifest:e.unknown(),result:e.unknown()}).parse(s.evidence));async function m(){if(await s.authorize(),r.actorId!==s.actor.actorId||r.teamId!==s.actor.teamId||r.profileRef.source!=="openpond_git"||r.profileRef.repositoryId!==s.source.repositoryId||r.profileRef.profileId!==s.source.profileId||r.sourceRevision!==s.source.sourceRevision)throw new Error("The actual hosted advanced source owner changed.")}if(i(m,"authorize"),await m(),d.manifest.teamId!==r.teamId||d.result.status!=="completed"||d.manifest.id!==r.evidence.id||d.result.contentHash!==r.evidence.contentHash||R(d.manifest.dataset)!==R(r.externalDatasetBinding.dataset))throw new Error("The exact completed hosted advanced evidence changed.");if(n.contentHash!==r.externalDatasetBinding.packageHash||n.contentHash!==r.adaptationDatasetBinding.packageHash||n.environment.contentHash!==r.environmentPolicy.environmentHash||n.environment.contract.networkPolicy!=="none")throw new Error("The hosted advanced environment/package is not the exact reviewed closed-network release.");if(n.taskset.tools.some(l=>l.name==="web_search"||l.name==="web_fetch"))throw new Error("Live external tools require their own qualified frozen-observation and budget owner.");if(n.verifierSet.graders.some(l=>l.kind==="human"||l.kind==="model_judge"&&l.calibrationStatus!=="passed"))throw new Error("Advanced hosted evaluation needs executable, qualified independent graders.");let u=r.adaptationTaskIds.map(l=>n.taskset.tasks.find(H=>H.id===l)),v=r.holdoutTaskIds.map(l=>n.taskset.tasks.find(H=>H.id===l)),I=new Set(u.map(l=>l?.clusterKey));if(u.some(l=>!l||l.split!==r.adaptationSplit)||v.some(l=>!l||l.split!==r.holdoutSplit||I.has(l.clusterKey)))throw new Error("Hosted adaptation/holdout membership or independent families changed.");let x=await s.store.getHarnessReleaseRecord(r.baselineRelease.contentHash);if(!x||x.harnessRelease.id!==r.baselineRelease.id||s.workspace.currentChannel.release?.contentHash!==r.baselineRelease.contentHash)throw new Error("The exact hosted source baseline is unavailable.");let y=await D({workspaceId:typeof x.agentSnapshot.metadata.workspaceId=="string"?x.agentSnapshot.metadata.workspaceId:x.workspaceId,sourceDir:Qe.join(x.bundlePath,"source")});if(z(y).protectedClosureHash!==r.privateClosureHash)throw new Error("The protected hosted Profile closure changed.");let h={packageValue:n,authorize:m};return{read:i(async l=>{if(V(l).contentHash!==r.contentHash)throw new Error("The actual hosted advanced admission changed.");return await m(),h},"read"),evidence:i(async()=>(await m(),d),"evidence"),authorize:i(async()=>m(),"authorize"),reviewContext:i(async(l,H)=>{await m();let E=t.contexts.filter(p=>p.taskId===H),P=d.result.cases.find(p=>p.identity.caseId===H);if(E.length!==1||!P||P.status!=="completed")throw new Error("The actual retained hosted review case is unavailable.");let w=E[0];if(w.caseHash!==R(P)||w.session.cloudTeamId!==r.teamId||w.turn.sessionId!==w.session.id||w.turn.status==="in_progress"||w.events.some(p=>p.sessionId!==w.session.id||p.turnId!==w.turn.id))throw new Error("The actual hosted review session/turn/trace binding changed.");return await m(),{...w,case:{output:w.output}}},"reviewContext")}}i(_e,"createHostedAdvancedRefinerSource");import{randomUUID as Ze}from"node:crypto";function Oe(s){async function r(n){let d=await s.store.getSession(n);if(!d||d.cloudTeamId!==s.teamId||d.metadata?.hostedAdvancedTurnId!==s.hostedTurnId||d.metadata?.parentModelRunId!==s.modelRunId)throw new Error("The actual hosted advanced case owner changed.");return d}i(r,"read");async function t(n,d,m){let u=await r(n),v=e.object({action:e.string()}).passthrough().parse(d).action;return ue.parse(await s.bridge.compute({session:u,payload:d,turnId:m??null},v==="sandbox_stop"||v==="sandbox_receipts"))}return i(t,"tool"),{createSession:i(async n=>{await s.bridge.authorize();let d=C.partial().parse(n),m=new Date().toISOString();if(d.metadata?.parentModelRunId!==s.modelRunId)throw new Error("The foreground case belongs to another actual advanced Run.");let u=C.parse({...d,id:`hosted-advanced-case-${Ze()}`,provider:"openpond",currentProfile:s.profileRef,cloudTeamId:s.teamId,cwd:null,codexThreadId:null,appId:null,appName:null,createdAt:m,updatedAt:m,status:"active",pinned:!1,archived:!1,order:0,hiddenFromDefaultSidebar:!0,title:d.title??"Advanced hosted evaluation case",metadata:{...d.metadata,source:"hosted-advanced-evaluation",hostedAdvancedTurnId:s.hostedTurnId,actorId:s.actorId,workspaceTarget:"hosted",benchmarkRuntime:"hosted_managed_work"}});return await s.store.insertSessionAtFront(u),await s.bridge.authorize(),u},"createSession"),getSession:r,runtimeEventsForSession:i(n=>s.store.runtimeEventsForSession(n),"runtimeEventsForSession"),executeWorkspaceTool:i((n,d,m)=>t(n,d,m?.turnId),"executeWorkspaceTool"),settleCostEvidence:i((n,d)=>t(n,{action:"sandbox_receipts",args:{}},d?.turnId),"settleCostEvidence")}}i(Oe,"createHostedAdvancedWorkRuntime");var Xe=e.string().regex(/^[a-f0-9]{64}$/),Be=e.object({version:e.string().min(1),source:e.string().min(1),effectiveAt:e.string().min(1),inputUsdPerMillionTokens:e.number().finite().nonnegative(),cachedInputUsdPerMillionTokens:e.number().finite().nonnegative(),outputUsdPerMillionTokens:e.number().finite().nonnegative()}).strict(),Z=e.object({operation:e.enum(["prepare_run","start","read","resume","cancel"]),request:de,configuration:e.object({id:e.string().min(1),profileId:e.string().min(1),etag:Xe}).strict(),refinerRelease:Y,privateSource:K,upstream:e.object({modelId:e.string().min(1),revision:e.string().min(1),pricing:Be}).strict(),judgeModels:e.array(e.object({modelId:e.string().min(1),revision:e.string().min(1),pricing:Be}).strict()).max(50),bridge:Q.optional(),hostedTurnId:e.string().min(1).optional()}).strict();async function Fe(s){let r=Z.parse(s.request),t=r.request.pin;if(r.request.model.providerId!=="openpond"||r.request.model.modelId!==r.upstream.modelId||r.configuration.id!==r.request.modelId||r.configuration.profileId!==t.profileRef.profileId||r.request.profileId!==t.profileRef.profileId||r.refinerRelease.id!==t.refinerRelease.id||r.refinerRelease.contentHash!==t.refinerRelease.contentHash)throw new Error("The actual hosted advanced configuration/model/Refiner admission changed.");let n=`advanced-refiner-${R([t.actorId,t.teamId,t.operationId,t.contentHash,r.request.model,[r.request.seed],1]).slice(0,40)}`;if((r.operation==="start"||r.operation==="resume")&&(!r.bridge||!r.hostedTurnId))throw new Error("The actual hosted advanced execution grant is unavailable.");let m=r.bridge?qe(r.bridge,s.signal):null;if(r.bridge&&(r.bridge.jobId!==n||r.bridge.pinHash!==t.contentHash))throw new Error("The hosted model bridge belongs to another actual Run.");let u=i(async()=>{s.signal.throwIfAborted(),await s.authorize(),m&&await m.authorize()},"authorize"),v=await _e({...s,pin:t,privateSource:r.privateSource,authorize:u}),I=ge(we(s.storeDir));await I.persistRelease(r.refinerRelease),await I.writeSource(ee(r.refinerRelease.profile)),I.binding()?.release.contentHash!==t.refinerRelease.contentHash&&await I.transition(r.refinerRelease,{operation:"activate",bindingChanged:!0,actor:s.actor.actorId,reason:"Pin the actual hosted evaluation fork to its admitted immutable Refiner release.",authoringSkillHash:null});let y=Re({storeDir:s.storeDir,authorize:i(async()=>u(),"authorize"),packageForPin:i(async()=>r.privateSource.packageValue,"packageForPin"),prepareModel:i(async(c,f,k)=>{if(!m)throw new Error("The actual hosted model ceiling owner is unavailable.");return m.ceiling(c,k,f)},"prepareModel")}),h=i(async function*(c){let f=ye(),k=[r.upstream,...r.judgeModels].find(q=>q.modelId===c.model.modelId);if(!m||!f||!k)throw new Error("The actual hosted model and durable shared budget are unavailable.");let{signal:T,...j}=c,O=c.maxOutputTokens??4096,L=await f.call(c.requestId,j,k.pricing,O,async()=>{let q=[],F=null;for await(let N of m.stream({...c,signal:AbortSignal.any([T,f.signal])}))q.push(N),N.costUsd!==void 0&&(F=(F??0)+N.costUsd);return{value:q,costUsd:F}});for(let q of L)yield q},"stream"),l=i(async c=>{let f="";for await(let k of h({...c,reasoningEffort:c.reasoningEffort??null,tools:[],toolChoice:"none"}))k.text&&(f+=k.text),k.usage!==void 0&&c.onUsage?.(k.usage,k.costUsd);return f},"text"),H=xe({store:s.store,storeDir:s.storeDir}),E=await H.projectSelected({profileId:t.profileRef.profileId,package:r.privateSource.packageValue,adaptationSplit:t.adaptationSplit,holdoutSplit:t.holdoutSplit}),P=i(async c=>{let f=C.partial().parse(c),k=new Date().toISOString(),T=C.parse({...f,id:`hosted-review-${R([n,f.metadata]).slice(0,40)}`,cloudTeamId:t.teamId,currentProfile:t.profileRef,appId:null,appName:null,cwd:null,codexThreadId:null,title:f.title??"Hosted Refiner review",provider:"openpond",createdAt:k,updatedAt:k,status:"active",pinned:!1,archived:!1,order:0,metadata:{...f.metadata,hostedAdvancedTurnId:r.hostedTurnId??null,actorId:t.actorId,source:"hosted-advanced-evaluation"}});return await s.store.insertSessionAtFront(T),T},"createSession"),w=m&&r.hostedTurnId?Oe({store:s.store,bridge:m,teamId:t.teamId,actorId:t.actorId,hostedTurnId:r.hostedTurnId,modelRunId:n,profileRef:t.profileRef}):void 0,p=He({store:s.store,storeDir:s.storeDir,modelJudge:Ee({store:s.store,modelText:l}),modelText:l,modelStream:h,workRuntime:w,resolveTasksetRelease:i(c=>H.releaseForTaskset(c),"resolveTasksetRelease")}),a={store:s.store,storeDir:s.storeDir,evaluation:p,benchmarkTasksets:H,loadProfileState:i(async()=>s.profile,"loadProfileState"),resolveEvaluationProject:i(async(c,f)=>{if(await u(),c!==r.configuration.id||f!==r.configuration.profileId)throw new Error("The actual hosted evaluation configuration changed.");return{id:c,profileId:f}},"resolveEvaluationProject"),resolveUpstreamModel:i(async()=>({providerId:"openpond",modelId:r.upstream.modelId,revision:r.upstream.revision,pricing:r.upstream.pricing}),"resolveUpstreamModel"),advancedBoundary:y,refinerStream:i(async function*(c){if(!c.requestId)throw new Error("A hosted Refiner call needs its actual retained ID.");yield*h({model:c.model,reasoningEffort:"low",messages:c.messages,tools:[],toolChoice:"none",requestId:c.requestId,maxOutputTokens:4096,signal:c.signal,hostedTokenPricing:c.pricing})},"refinerStream")},o=Te({...a,reviewQuality:Pe({source:v,boundary:y,benchmark:a,createSession:P})}),g={advancedEvaluation:t,selectedTaskset:{id:E.id,revision:E.revision,contentHash:E.contentHash},modelId:r.request.modelId,profileId:r.request.profileId,model:r.request.model,reasoningEffort:r.request.reasoningEffort,seeds:[r.request.seed],repetitions:1,maximumSpendUsd:t.maximumCostUsd},b,S=i(()=>{o.cancel(n)},"stop");s.signal.addEventListener("abort",S,{once:!0});try{if(r.operation==="prepare_run")return o.prepare(g);let c=await s.store.getModelRun(n);if(!c||c.evaluation?.benchmarkId!=="harness-refiner"||c.evaluation.advancedEvaluation?.contentHash!==t.contentHash)throw new Error("The original hosted advanced Run is unavailable.");if(r.operation==="read")return c;if(r.operation==="cancel")return o.cancel(n);if(m){let T=!1;b=setInterval(()=>{T||(T=!0,s.store.getModelRun(n).then(j=>j?m.checkpoint(j):void 0).catch(()=>S()).finally(()=>{T=!1}))},2e3)}r.operation==="start"?await o.start(g):await o.resume(n);let f=await o.wait(n);if(!f)throw new Error("The actual hosted advanced engine did not retain its Run.");let k=pe.parse(f);return m&&await m.checkpoint(k),k}finally{b&&clearInterval(b),s.signal.removeEventListener("abort",S),await o.close(),await y.close()}}i(Fe,"runHostedAdvancedRefinerOwner");import{promises as _}from"node:fs";import A from"node:path";var Ye=e.object({actor:e.object({actorId:e.string().min(1),teamId:e.string().min(1)}).strict(),storeDir:e.string().min(1),source:e.object({repoPath:e.string().min(1),repositoryId:e.string().min(1),profileId:e.string().min(1),sourceRevision:e.string().regex(/^[a-f0-9]{40,64}$/),filesHash:e.string().regex(/^[a-f0-9]{64}$/)}).strict(),evidence:e.object({manifest:e.unknown(),result:e.unknown()}).strict(),operation:e.enum(["advanced","describe","command","queue","cancelQueued","bind","finish","beginTesting","cancelTesting","failTesting","comparison","beginAdoption","export","source","tool","toolCatalog"]),advanced:Z.optional(),command:se.optional(),candidateId:e.string().optional(),revision:e.number().int().positive().optional(),actualSession:C.optional(),actualTurn:$.optional(),recipe:e.unknown().optional(),baseline:e.object({manifest:e.unknown(),result:e.unknown()}).strict().optional(),candidate:e.object({manifest:e.unknown(),result:e.unknown()}).strict().optional(),humanProjection:oe.optional(),humanSelections:re.optional(),adoptionReadback:e.unknown().optional(),failure:e.object({message:e.string().max(2e3),cancelled:e.boolean()}).strict().optional(),tool:e.object({name:e.string(),args:e.record(e.string(),e.unknown()),callId:e.string()}).strict().optional(),agentRuntime:e.object({source:e.string(),cliRelativePath:e.string()}).strict().optional(),queued:e.object({sessionId:e.string(),turnId:e.string(),createdAt:e.string().datetime()}).strict().optional()}).strict();async function We(s,r=new AbortController().signal){r.throwIfAborted();let t=Ye.parse(s),{actor:n,source:d}=t;if(!A.isAbsolute(t.storeDir)||!A.isAbsolute(d.repoPath))throw new Error("Hosted candidate owner requires contained absolute private paths.");let m=M(t.evidence),u=[t.baseline,t.candidate].filter(l=>l!==void 0).map(l=>M(l));if(m.manifest.teamId!==n.teamId)throw new Error("Hosted candidate evidence belongs to another team.");if(await B(d.repoPath)!==d.filesHash)throw new Error("The admitted hosted Profile source bytes changed.");let v=`hosted-improve-source-${R([n,d.repositoryId,d.profileId,d.sourceRevision]).slice(0,40)}`,I=A.join(t.storeDir,"library","profile-experiment-origins",v);if(await _.mkdir(A.dirname(I),{recursive:!0,mode:448}),await _.stat(I).catch(()=>null)||await _.cp(d.repoPath,I,{recursive:!0,errorOnExist:!0,force:!1}),await B(I)!==d.filesHash)throw new Error("The private accepted Profile cache changed.");let x=await W(I,d.profileId);if(x.error||!x.sourcePath)throw new Error("The accepted hosted Profile does not compile.");let y=new Ie(t.storeDir),h;try{let l=await y.getHarnessWorkspace(v);l||(l=(await fe({store:y,storeDir:t.storeDir,id:v,ownerId:n.actorId,name:d.profileId,profile:x,sourceRevision:d.sourceRevision,repositoryId:d.repositoryId,selectionEligible:!1,originMetadata:{profileExperimentOrigin:{schemaVersion:"openpond.profileExperimentOrigin.v1",...n,sourceRevision:d.sourceRevision,sourcePath:I,sourceFilesHash:d.filesHash},hostedImprovementOwner:!0}})).workspace);let H={source:"openpond_git",repositoryId:d.repositoryId,profileId:d.profileId},E=i(async()=>{if(r.throwIfAborted(),await B(I)!==d.filesHash||await B(d.repoPath)!==d.filesHash)throw new Error("Accepted source changed during private candidate I/O.")},"authorizer");if(t.operation==="advanced"){if(!t.advanced)throw new Error("Missing actual hosted advanced owner command.");return Fe({store:y,storeDir:t.storeDir,actor:n,profile:x,workspace:l,source:d,evidence:m,request:t.advanced,authorize:E,signal:r})}let P=i(()=>{if(!t.adoptionReadback)throw new Error("Actual hosted Git owner has not returned its sealed adoption receipt.");return e.object({receipt:e.object({id:e.string(),contentHash:e.string().regex(/^[a-f0-9]{64}$/)}).strict(),activeRelease:e.object({id:e.string(),contentHash:e.string().regex(/^[a-f0-9]{64}$/)}).strict(),testedCandidateRelease:e.object({id:e.string(),contentHash:e.string().regex(/^[a-f0-9]{64}$/)}).strict(),executableSourceHash:e.string().regex(/^[a-f0-9]{64}$/),protectedClosureHash:e.string().regex(/^[a-f0-9]{64}$/)}).strict().parse(t.adoptionReadback)},"readback");h=Ae({store:y,storeDir:t.storeDir,projectHumanComparison:i(async()=>{if(await E(),!t.humanProjection)throw new Error("The current private Human comparison owner is unavailable.");return ne(t.humanProjection)},"projectHumanComparison"),authorizeOwner:i(async(a,o,g,b,S)=>{if(R(a)!==R(n)||R(g)!==R(H)||o.id!==v)throw new Error("Hosted candidate source owner changed.");if(S.requireCurrentBase&&(o.currentChannel.release?.contentHash!==l.currentChannel.release?.contentHash||d.sourceRevision!==o.metadata.profileExperimentOrigin.sourceRevision))throw new Error("Hosted candidate accepted revision changed.");await E()},"authorizeOwner"),loadEvidence:i(async(a,o)=>{if(R(a)!==R(n))throw new Error("Hosted candidate evidence actor changed.");let g=[m,...u].find(b=>b.manifest.id===o.id&&b.result.contentHash===o.contentHash&&b.manifest.teamId===n.teamId);if(!g)throw new Error("Hosted candidate exact retained evidence changed.");return await E(),g},"loadEvidence"),freezeProfile:i(async(a,o,g)=>{let b=await y.getHarnessReleaseRecord(o.baseRelease.contentHash);if(!b)throw new Error("Hosted source baseline is missing.");let S=await D({workspaceId:typeof b.agentSnapshot.metadata.workspaceId=="string"?b.agentSnapshot.metadata.workspaceId:b.workspaceId,sourceDir:A.join(b.bundlePath,"source")}),c=await D({workspaceId:typeof g.release.agentSnapshot.metadata.workspaceId=="string"?g.release.agentSnapshot.metadata.workspaceId:g.release.workspaceId,sourceDir:A.join(g.release.bundlePath,"source")});return je({store:y,storeDir:t.storeDir,state:o},async f=>{await De({...f,state:o,base:S,candidate:c});let k=await W(f.root,o.profileRef.profileId),T=await U({storeDir:t.storeDir,state:o,profile:k,sourceRevision:g.profileSourceRevision,base:S}),j=z(T);if(j.protectedClosureHash!==z(S).protectedClosureHash)throw new Error("Hosted source candidate changed protected evaluation closure.");let O=A.join(t.storeDir,"library","profile-candidate-archives",o.id,j.contentHash);await _.mkdir(A.dirname(O),{recursive:!0,mode:448}),await _.stat(O).catch(()=>null)||await _.cp(f.root,O,{recursive:!0,errorOnExist:!0,force:!1});let L=await W(O,o.profileRef.profileId);if((await U({storeDir:t.storeDir,state:o,profile:L,sourceRevision:g.profileSourceRevision,base:S})).harnessRelease.contentHash!==T.harnessRelease.contentHash)throw new Error("Hosted frozen Profile archive readback differs.");let F=await he({storeDir:t.storeDir,workspaceId:g.release.workspaceId,compiled:T,createdAt:g.release.createdAt});return await E(),{...g,release:F,executableIdentity:j}})},"freezeProfile"),adopt:i(async()=>P(),"adopt"),readAdoption:i(async()=>t.adoptionReadback?P():null,"readAdoption"),rollback:i(async()=>P(),"rollback")});let w=Ce({store:y,improvements:h,actorId:i(async()=>n.actorId,"actorId"),teamId:i(async()=>n.teamId,"teamId"),loadProfile:i(async a=>{if(R(a)!==R(H))throw new Error("Candidate requested another source owner.");return x},"loadProfile"),agentRuntime:t.agentRuntime,operationSignal:r,loadAgentRuntime:be({storeDir:t.storeDir,loadArchive:ke({storeDir:t.storeDir})})});if(t.operation==="describe"){await E();let a=l.currentChannel.release,o=a?await y.getHarnessReleaseRecord(a.contentHash):null;if(!a||!o||o.workspaceId!==l.id||o.harnessRelease.id!==a.id||o.harnessRelease.contentHash!==a.contentHash||l.ownerScope.kind!=="personal"||l.ownerScope.id!==n.actorId)throw new Error("Hosted source release is unavailable to its admitted owner.");let g=await D({workspaceId:typeof o.agentSnapshot.metadata.workspaceId=="string"?o.agentSnapshot.metadata.workspaceId:v,sourceDir:A.join(o.bundlePath,"source")});if(g.harnessRelease.contentHash!==o.harnessRelease.contentHash)throw new Error("Hosted source compiler readback changed.");let b=await Se({runtime:{release:o},ref:H,sourceRevision:d.sourceRevision,harnessRelease:a}),S=i(c=>{let f=g.sourceFiles.find(k=>k.path===c)?.bytes;return f?JSON.parse(Buffer.from(f).toString("utf8")):null},"readJson");return await E(),{workspaceId:v,ownerRevision:l.revision,profileRef:H,baseRelease:l.currentChannel.release,profileSourceRevision:d.sourceRevision,manifest:g.manifest,executable:z(g),catalogHash:b.catalogHash,workflows:S("workflows/catalog.json"),actions:S("workflows/actions.json")}}if(t.operation==="command"){let a=t.command;if(!a)throw new Error("Missing canonical Improve command.");if(a.operation==="start")return h.start(n,a.request);if(a.operation==="list")return h.list(n,a.limit,a.cursor);if(!("id"in a))throw new Error("Discover exact hosted source choices through the authenticated host.");let o=await h.read(n,a.id);if(a.operation==="read")return o;if(a.operation==="instructions"){let g=await h.partition(n,o.id),b=await me(g.sourceRoot,o.component.path),S=await _.readFile(b);if(S.length>25e4)throw new Error("Instruction editor size limit exceeded.");let c=S.toString("utf8");if(o.component.kind==="workflow"){let f=JSON.parse(c).workflows?.find(k=>k.id===o.component.workflowId);if(f?.invocation?.kind!=="instructions")throw new Error("Use Work to author this executable Workflow.");c=f.invocation.instructions}return{candidateId:o.id,candidateRevision:o.revision,path:o.component.path,text:c,textHash:J(c),contentHash:J(S)}}if(a.operation==="humanComparisonOptions")throw new Error("Read the actual paired sources through their current hosted Experiment owner.");if(!("revision"in a)||o.revision!==a.revision)throw new Error("Candidate revision changed.");if(a.operation==="edit")return h.edit(n,o.id,o.revision,a.expectedFileHash,a.text);if(a.operation==="mode")return h.setMode(n,o.id,o.revision,a.mode);if(a.operation==="freeze")return h.freeze(n,o.id,o.revision);if(a.operation==="useCandidate")return h.useCandidate(n,o.id,o.revision);if(a.operation==="rollback")return h.rollback(n,o.id,o.revision);if(a.operation==="discard")return h.discard(n,o.id,o.revision);throw new Error("Hosted Work/test lifecycle requires the actual host turn/run admission.")}if(!t.candidateId)throw new Error("Missing actual hosted candidate ID.");let p=await h.read(n,t.candidateId);if(t.operation==="beginAdoption")return h.beginAdoption(n,p.id,t.revision);if(t.operation==="export")return ze(y,p,"hosted_execution");if(t.operation==="source"){if(!p.frozen||p.status!=="frozen"&&p.status!=="testing"&&p.status!=="ready_for_review"&&p.status!=="adopting")throw new Error("Only the exact frozen source can enter hosted preparation.");let a=await y.getHarnessReleaseRecord(p.frozen.release.contentHash);if(!a||a.harnessRelease.id!==p.frozen.release.id)throw new Error("Frozen hosted source is unavailable.");let o=await D({workspaceId:typeof a.agentSnapshot.metadata.workspaceId=="string"?a.agentSnapshot.metadata.workspaceId:a.workspaceId,sourceDir:A.join(a.bundlePath,"source")}),g=z(o);if(o.harnessRelease.contentHash!==p.frozen.release.contentHash||g.contentHash!==p.frozen.executableSourceHash||g.protectedClosureHash!==p.frozen.protectedClosureHash)throw new Error("Frozen hosted executable changed.");let b=A.join(t.storeDir,"library","profile-candidate-archives",p.id,g.contentHash),S=await W(b,p.profileRef.profileId);if(S.error||!S.sourcePath)throw new Error("Frozen actual Profile archive is unavailable.");let c=await y.getHarnessReleaseRecord(p.baseRelease.contentHash);if(!c)throw new Error("Frozen baseline is unavailable.");let f=await D({workspaceId:typeof c.agentSnapshot.metadata.workspaceId=="string"?c.agentSnapshot.metadata.workspaceId:c.workspaceId,sourceDir:A.join(c.bundlePath,"source")}),k=await U({storeDir:t.storeDir,state:p,profile:S,sourceRevision:p.frozen.profileSourceRevision,base:f});if(k.harnessRelease.contentHash!==p.frozen.release.contentHash||z(k).contentHash!==g.contentHash)throw new Error("Actual frozen Profile archive differs from its compiled release.");return{state:p,profileSource:{repoPath:b,profileId:p.profileRef.profileId,sourceRevision:p.frozen.profileSourceRevision,repositoryId:p.profileRef.repositoryId,filesHash:await B(b)},sourcePackage:te({agentSnapshot:o.agentSnapshot,harnessRelease:o.harnessRelease,files:new Map(o.sourceFiles.map(T=>[T.path,T.bytes]))})}}if(t.operation==="comparison"){if(!t.baseline||!t.candidate)throw new Error("Missing actual hosted paired evidence.");return h.completeComparison(n,p.id,t.revision,M(t.baseline),M(t.candidate),t.humanSelections)}if(t.operation==="beginTesting")return h.beginTesting(n,p.id,t.revision,t.recipe);if(t.operation==="failTesting"){if(!t.failure)throw new Error("Missing actual hosted test failure.");return h.failTesting(n,p.id,t.revision,t.failure.message,t.failure.cancelled)}if(t.operation==="cancelTesting")return h.cancelTesting(n,p.id,t.revision);if(t.operation==="queue"){if(!t.queued)throw new Error("Missing actual hosted queue admission.");return h.queueAuthoringTurn(n,p.id,t.revision,t.queued.sessionId,t.queued.turnId,t.queued.createdAt)}if(t.operation==="cancelQueued")return h.cancelQueuedAuthoring(n,p.id,t.revision);if(t.operation==="bind"||t.operation==="finish"||t.operation==="tool"||t.operation==="toolCatalog"){if(!t.actualSession||!t.actualTurn||t.actualTurn.sessionId!==t.actualSession.id||t.actualSession.cloudTeamId!==n.teamId||R(t.actualSession.currentProfile)!==R(H))throw new Error("Actual hosted candidate Work binding changed.");let a=t.actualSession,o=t.actualTurn,g=await y.getSession(a.id);if(!g)await y.insertSessionAtFront(a);else if(R({...g,updatedAt:a.updatedAt,status:a.status})!==R(a))throw new Error("Retained hosted candidate session changed.");let b=await y.getTurn(o.id);if(!b)await y.insertTurn(o);else{if(b.sessionId!==o.sessionId||R(b.metadata.refinementCandidate)!==R(o.metadata.refinementCandidate)||b.prompt!==o.prompt)throw new Error("Actual hosted candidate turn identity changed.");await y.updateTurn(o.id,()=>o)}if(t.operation==="bind")return h.bindAuthoringTurn(n,p.id,t.revision,a.id,o.id);if(t.operation==="finish")return h.finishAuthoring(n,p.id,t.revision);if(t.operation==="toolCatalog")return await w.candidateAuthoringForTurn(a.id,o.id),[...G({loadProfileState:i(async()=>x,"loadProfileState"),resolveCandidateProfile:w.resolveCandidateProfile,executeCandidateAgentCommand:w.executeCandidateAgentCommand}),...ve(async()=>{throw new Error("Hosted file tools require a bound private call.")}),{name:"exec_command",description:"Run a bounded command confined to the selected public candidate component.",parameters:{type:"object",additionalProperties:!1,properties:{command:{type:"string",minLength:1,maxLength:2e4},cwd:{type:"string"}},required:["command"]}},{name:"view_image",description:"Inspect an image inside the candidate public source tree.",parameters:{type:"object",additionalProperties:!1,properties:{path:{type:"string"}},required:["path"]}}].map(({name:c,description:f,parameters:k})=>({name:c,description:f,parameters:k}));if(!t.tool)throw new Error("Missing candidate tool call.");await w.authorizeCandidateTool({sessionId:a.id,turnId:o.id,name:t.tool.name});let S={session:a,turnId:o.id,args:t.tool.args,callId:t.tool.callId,signal:r,workspaceDiffBaseline:null,turnPermissions:{approvalPolicy:"never",sandbox:"workspace-write",codexPermissionMode:"default"},provider:a.provider,model:o.modelRef?.modelId??a.modelRef?.modelId??"",mentionedApps:[],userPrompt:o.prompt,turnMetadata:o.metadata};if(t.tool.name==="get_profile"||t.tool.name.startsWith("agent_")||t.tool.name==="ask_user"){let c=G({loadProfileState:i(async()=>x,"loadProfileState"),resolveCandidateProfile:w.resolveCandidateProfile,executeCandidateAgentCommand:w.executeCandidateAgentCommand}).find(f=>f.name===t.tool.name);if(!c)throw new Error("Candidate authoring tool is unavailable.");return c.execute(S)}if(t.tool.name==="view_image")return w.executeCandidateImage(S);if(t.tool.name==="exec_command")return w.executeCandidateCommand(S,{session:a,turnId:o.id,command:e.string().min(1).max(2e4).parse(t.tool.args.command),cwd:typeof t.tool.args.cwd=="string"?t.tool.args.cwd:null,signal:S.signal,source:"model_tool"});if(["list_files","read_files","search_files","workspace_status","write_file","write_files","edit_file","delete_file"].includes(t.tool.name))return w.executeCandidateWorkspaceTool({session:a,turnId:o.id,request:le.parse({action:t.tool.name,args:t.tool.args,source:"chat_action"})});throw new Error("This hosted tool has no confined candidate transport.")}throw new Error("Unknown private hosted Improve operation.")}finally{await h?.close(),await y.close()}}i(We,"runHostedExperimentImprovementOwner");async function wr(s){if(s.length!==1||s[0].length>16e3||!/^[A-Za-z0-9_-]+$/.test(s[0]))throw new Error("Hosted Improve IPC argument is invalid.");let r=e.object({directory:e.string(),file:e.string().regex(/^[A-Za-z0-9_-]+\.json$/)}).strict().parse(JSON.parse(Buffer.from(s[0],"base64url").toString("utf8")));if(!Ue.isAbsolute(r.directory))throw new Error("Hosted Improve IPC requires an absolute private directory.");let t=Ue.join(r.directory,r.file),n=await $e.lstat(t);if(!n.isFile()||n.isSymbolicLink()||n.size>32*1024*1024)throw new Error("Hosted Improve private request exceeds its byte/type limit.");let d=new AbortController,m=i(()=>d.abort(new Error("The actual hosted owner stopped this private operation.")),"stop");process.once("SIGTERM",m),process.once("SIGINT",m);try{let u=await We(JSON.parse(await $e.readFile(t,"utf8")),d.signal),v=Buffer.from(JSON.stringify(u));if(v.length>32*1024*1024)throw new Error("Hosted Improve private response exceeds its byte limit.");process.stdout.write(`${v.toString("utf8")}
+`)}finally{process.removeListener("SIGTERM",m),process.removeListener("SIGINT",m)}}i(wr,"runHostedExperimentImprovementCli");export{wr as runHostedExperimentImprovementCli};

package/dist/chunks/hosted-harness-runtime-6PEI7F2U.js

@@ -0,0 +1,2 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{b as a,c as b}from"./chunk-HUCBKXTU.js";import"./chunk-AH26AQN7.js";import"./chunk-5MHYGMJG.js";import"./chunk-XNOMIWEY.js";import"./chunk-LK2K3SPM.js";import"./chunk-B4RKHHF7.js";import"./chunk-M3FLEZ4E.js";import"./chunk-OQPJ7FJF.js";import"./chunk-WBUK73ST.js";import"./chunk-P7HRF4FM.js";import"./chunk-GS6ZUSIN.js";import"./chunk-2ITZW2CN.js";import"./chunk-OG33QAG6.js";import"./chunk-W5W4IODW.js";import"./chunk-PWK5Z5S3.js";import"./chunk-W45RKGM6.js";import"./chunk-MWXW2CA6.js";import"./chunk-L3KS6MOV.js";import"./chunk-M3SCON53.js";import"./chunk-IZ56L2ZK.js";import"./chunk-KCJVFLBB.js";import"./chunk-3YXYBYWK.js";import"./chunk-MPNJ2BB4.js";import"./chunk-KOKX7PBS.js";import"./chunk-V7KR74NO.js";import"./chunk-XGY4OQLC.js";import"./chunk-7O6Z3VOZ.js";import"./chunk-5EP2DZLJ.js";import"./chunk-IDOGNIMV.js";import"./chunk-W45RKGM6.js";import"./chunk-PBTXLQAU.js";import"./chunk-7WYL2IDD.js";import"./chunk-HFJUXKT5.js";import"./chunk-5ZBLCWEJ.js";import"./chunk-PCB65K4G.js";import"./chunk-6RS4NAOY.js";import"./chunk-ZZHXQCNB.js";import"./chunk-YNQWJWIC.js";import"./chunk-VNJAAYNQ.js";import"./chunk-7ZLXFKRI.js";import"./chunk-7HRLWPPZ.js";import"./chunk-MTP3B2SU.js";import"./chunk-LAOLJDVB.js";import"./chunk-UWHIU24L.js";import"./chunk-LV3CQ72P.js";import"./chunk-ABF3W2MO.js";import"./chunk-RV7PUSI2.js";import"./chunk-KCV5VN4X.js";import"./chunk-6FA3GG5B.js";import"./chunk-2EPR4HLF.js";import"./chunk-BKEDG3A4.js";import"./chunk-OE22TAXP.js";import"./chunk-UGOK7VTC.js";import"./chunk-J572ANHX.js";import"./chunk-PBZCXPPC.js";import"./chunk-NJLULBTM.js";import"./chunk-VVNV4NNW.js";import"./chunk-PF56N7ZY.js";import"./chunk-FTQLQJQV.js";export{a as loadHostedHarnessRuntime,b as loadHostedHarnessRuntimeForSession};

package/dist/chunks/hosted-profile-candidate-HM44BIUX.js

@@ -0,0 +1,3 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{a,e as F}from"./chunk-ZPTKR3GB.js";import{a as h}from"./chunk-HIYQPZ7C.js";import{a as D}from"./chunk-EZRUWIP6.js";import{j as I,m as M,n as O}from"./chunk-LK2K3SPM.js";import{z as w}from"./chunk-B4RKHHF7.js";import"./chunk-M3FLEZ4E.js";import"./chunk-OQPJ7FJF.js";import{a as A}from"./chunk-WBUK73ST.js";import"./chunk-P7HRF4FM.js";import"./chunk-GS6ZUSIN.js";import"./chunk-2ITZW2CN.js";import"./chunk-OG33QAG6.js";import"./chunk-W5W4IODW.js";import"./chunk-PWK5Z5S3.js";import"./chunk-W45RKGM6.js";import"./chunk-MWXW2CA6.js";import"./chunk-L3KS6MOV.js";import"./chunk-M3SCON53.js";import"./chunk-IZ56L2ZK.js";import"./chunk-KCJVFLBB.js";import"./chunk-3YXYBYWK.js";import"./chunk-MPNJ2BB4.js";import"./chunk-KOKX7PBS.js";import"./chunk-V7KR74NO.js";import"./chunk-XGY4OQLC.js";import"./chunk-7O6Z3VOZ.js";import"./chunk-5EP2DZLJ.js";import"./chunk-IDOGNIMV.js";import"./chunk-W45RKGM6.js";import"./chunk-PBTXLQAU.js";import"./chunk-7WYL2IDD.js";import"./chunk-HFJUXKT5.js";import"./chunk-5ZBLCWEJ.js";import"./chunk-PCB65K4G.js";import"./chunk-6RS4NAOY.js";import"./chunk-ZZHXQCNB.js";import"./chunk-YNQWJWIC.js";import"./chunk-VNJAAYNQ.js";import"./chunk-7ZLXFKRI.js";import"./chunk-7HRLWPPZ.js";import"./chunk-MTP3B2SU.js";import"./chunk-LAOLJDVB.js";import"./chunk-UWHIU24L.js";import"./chunk-LV3CQ72P.js";import"./chunk-ABF3W2MO.js";import"./chunk-RV7PUSI2.js";import"./chunk-KCV5VN4X.js";import"./chunk-6FA3GG5B.js";import"./chunk-2EPR4HLF.js";import"./chunk-BKEDG3A4.js";import"./chunk-OE22TAXP.js";import"./chunk-UGOK7VTC.js";import"./chunk-J572ANHX.js";import"./chunk-PBZCXPPC.js";import{u as R}from"./chunk-NJLULBTM.js";import{l as C,m as v}from"./chunk-VVNV4NNW.js";import{A as c}from"./chunk-PF56N7ZY.js";import{a as f}from"./chunk-FTQLQJQV.js";import{promises as m}from"node:fs";import n from"node:path";var $=c.object({action:c.enum(["stage","readback","rollback"]),repoPath:c.string(),outputDir:c.string(),exportFile:c.string(),commit:c.string().regex(/^[a-f0-9]{40}$/).optional(),expectedExecutableSourceHash:c.string().regex(/^[a-f0-9]{64}$/).optional()}).strict();async function z(l){let e=$.parse(l);if(!n.isAbsolute(e.repoPath)||!n.isAbsolute(e.outputDir)||!/^[a-zA-Z0-9_-]+\.json$/.test(e.exportFile))throw new Error("Hosted candidate private IPC is not contained.");let g=n.join(e.outputDir,e.exportFile),H=await m.lstat(g);if(!H.isFile()||H.isSymbolicLink()||H.size>8*1024*1024)throw new Error("Hosted candidate export exceeds its private IPC bound.");let t=D(JSON.parse(await m.readFile(g,"utf8"))),u=await w({repoPath:e.repoPath,profileId:t.profileRef.profileId});if(u.error||!u.sourcePath)throw new Error("Actual hosted Profile source is unavailable.");if(e.action!=="readback"){let o=!1;try{await a(e.repoPath,["symbolic-ref","-q","HEAD"]),o=!0}catch{}if(o||await a(e.repoPath,["rev-parse","HEAD"])!==(e.action==="rollback"?e.commit:t.expectedCommit)||await a(e.repoPath,["status","--porcelain","--untracked-files=all"]))throw new Error("Candidate staging requires a clean detached exact original source worktree.")}let x=f(async o=>I({storeDir:e.outputDir,workspaceId:t.compiler.workspaceId,name:t.compiler.name,profile:await w({repoPath:e.repoPath,profileId:t.profileRef.profileId}),sourceRevision:o,repositoryId:t.compiler.repositoryId}),"compile");if(e.action==="readback"){if(!e.commit||await a(e.repoPath,["rev-parse","HEAD"])!==e.commit)throw new Error("Hosted Profile readback is not the committed source.");let o=await x(e.commit),i=h(o);if(i.profileGitHead!==e.commit||i.contentHash!==(e.expectedExecutableSourceHash??t.executableSourceHash)||i.protectedClosureHash!==t.protectedClosureHash)throw new Error("Hosted active executable differs from the actual tested candidate.");let s=await O({storeDir:e.outputDir,workspaceId:t.compiler.workspaceId,compiled:o,createdAt:t.createdAt});return{commit:e.commit,activeRelease:{id:s.harnessRelease.id,contentHash:s.harnessRelease.contentHash},executableSourceHash:i.contentHash,protectedClosureHash:i.protectedClosureHash}}if(e.action==="rollback"){if(!e.commit)throw new Error("Rollback requires the exact accepted commit.");await a(e.repoPath,["-c","core.hooksPath=/dev/null","revert","--no-commit",e.commit])}let p=await x(t.expectedCommit);if(p.harnessRelease.contentHash!==t.baseRelease.contentHash||p.harnessRelease.id!==t.baseRelease.id)throw new Error("Hosted original source differs from the owner-attested baseline release.");if(e.action==="stage"){let o=Buffer.from(t.sourceManifest.base64,"base64");if(o.toString("base64")!==t.sourceManifest.base64||o.length!==t.sourceManifest.sizeBytes||v(o)!==t.sourceManifest.contentHash)throw new Error("Candidate source manifest byte identity differs.");let i=A.parse(JSON.parse(o.toString("utf8"))),s=n.join(e.outputDir,"candidate-source");await m.mkdir(s,{recursive:!0}),await m.writeFile(n.join(s,"harness.json"),C(i));let _=R(t.policySource),j=new Map(p.sourceFiles.filter(r=>r.asset.visibility!=="policy").map(r=>[r.path,r]));for(let r of i.files){let k=r.visibility==="policy"?_.get(r.path):j.get(r.path)?.bytes;if(!k)throw new Error("The hosted source cannot hydrate the exact protected candidate closure.");let y=n.join(s,r.path);if(n.relative(s,y).startsWith(".."))throw new Error("Candidate release path escapes private staging.");await m.mkdir(n.dirname(y),{recursive:!0}),await m.writeFile(y,k)}let P=await M({workspaceId:t.compiler.workspaceId,sourceDir:s}),S=h(P);if(P.harnessRelease.contentHash!==t.policySource.harnessRelease.contentHash||S.contentHash!==t.executableSourceHash||S.protectedClosureHash!==t.protectedClosureHash)throw new Error("Owner-attested candidate differs from independently compiled hosted source.");await F({source:u.sourcePath,state:{component:t.component},base:p,candidate:P,profile:u})}await a(e.repoPath,["add","--all"]),await a(e.repoPath,["-c","core.hooksPath=/dev/null","-c","commit.gpgSign=false","commit","-m",`${e.action==="rollback"?"Roll back":"Adopt"} owner-tested candidate ${t.candidateId}`],{GIT_AUTHOR_NAME:"OpenPond",GIT_AUTHOR_EMAIL:"profile-candidate@openpond.local",GIT_COMMITTER_NAME:"OpenPond",GIT_COMMITTER_EMAIL:"profile-candidate@openpond.local"});let E=await a(e.repoPath,["rev-parse","HEAD"]),T=await w({repoPath:e.repoPath,profileId:t.profileRef.profileId}),b=await I({storeDir:e.outputDir,workspaceId:t.compiler.workspaceId,name:t.compiler.name,profile:T,sourceRevision:E,repositoryId:t.compiler.repositoryId}),d=h(b);if(e.action==="stage"&&(d.contentHash!==t.executableSourceHash||d.protectedClosureHash!==t.protectedClosureHash)||e.action==="rollback"&&(d.contentHash!==h(p).contentHash||d.protectedClosureHash!==h(p).protectedClosureHash))throw new Error("Staged actual source differs from its exact tested executable graph.");return{commit:E,activeRelease:{id:b.harnessRelease.id,contentHash:b.harnessRelease.contentHash},executableSourceHash:d.contentHash,protectedClosureHash:d.protectedClosureHash}}f(z,"hostedProfileCandidate");async function Q(l){if(l.length!==1||l[0].length>16e3||!/^[a-zA-Z0-9_-]+$/.test(l[0]))throw new Error("Hosted candidate IPC argument is invalid.");process.stdout.write(`${JSON.stringify(await z(JSON.parse(Buffer.from(l[0],"base64url").toString("utf8"))))}
+`)}f(Q,"runHostedProfileCandidateCli");export{z as hostedProfileCandidate,Q as runHostedProfileCandidateCli};

package/dist/chunks/hosted-profile-compiler-UAZ4PHYE.js

@@ -0,0 +1,2 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{a,b,c,d}from"./chunk-C2LAEGOW.js";import"./chunk-LK2K3SPM.js";import"./chunk-B4RKHHF7.js";import"./chunk-WBUK73ST.js";import"./chunk-MWXW2CA6.js";import"./chunk-L3KS6MOV.js";import"./chunk-M3SCON53.js";import"./chunk-IZ56L2ZK.js";import"./chunk-KCJVFLBB.js";import"./chunk-3YXYBYWK.js";import"./chunk-MPNJ2BB4.js";import"./chunk-XGY4OQLC.js";import"./chunk-5EP2DZLJ.js";import"./chunk-HFJUXKT5.js";import"./chunk-YNQWJWIC.js";import"./chunk-VNJAAYNQ.js";import"./chunk-7ZLXFKRI.js";import"./chunk-7HRLWPPZ.js";import"./chunk-MTP3B2SU.js";import"./chunk-UWHIU24L.js";import"./chunk-LV3CQ72P.js";import"./chunk-ABF3W2MO.js";import"./chunk-RV7PUSI2.js";import"./chunk-KCV5VN4X.js";import"./chunk-6FA3GG5B.js";import"./chunk-2EPR4HLF.js";import"./chunk-BKEDG3A4.js";import"./chunk-OE22TAXP.js";import"./chunk-UGOK7VTC.js";import"./chunk-J572ANHX.js";import"./chunk-PBZCXPPC.js";import"./chunk-NJLULBTM.js";import"./chunk-VVNV4NNW.js";import"./chunk-PF56N7ZY.js";import"./chunk-FTQLQJQV.js";export{a as compileHostedProfileRelease,b as runHostedProfileCompilerCli,c as runHostedProfileEvaluationCli,d as runHostedProfileInspectionCli};

package/dist/chunks/hosted-profile-evaluation-control-EUL57FAB.js

@@ -0,0 +1,2 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{a as m,b as c}from"./chunk-KUPJNBWG.js";import{a as l}from"./chunk-Z3BWCFLV.js";import{v as f}from"./chunk-M3FLEZ4E.js";import"./chunk-OQPJ7FJF.js";import"./chunk-WBUK73ST.js";import"./chunk-P7HRF4FM.js";import"./chunk-GS6ZUSIN.js";import"./chunk-2ITZW2CN.js";import"./chunk-OG33QAG6.js";import"./chunk-W5W4IODW.js";import"./chunk-PWK5Z5S3.js";import"./chunk-W45RKGM6.js";import"./chunk-3YXYBYWK.js";import"./chunk-MPNJ2BB4.js";import"./chunk-KOKX7PBS.js";import"./chunk-V7KR74NO.js";import"./chunk-XGY4OQLC.js";import"./chunk-7O6Z3VOZ.js";import"./chunk-5EP2DZLJ.js";import"./chunk-IDOGNIMV.js";import"./chunk-W45RKGM6.js";import"./chunk-PBTXLQAU.js";import"./chunk-7WYL2IDD.js";import"./chunk-5ZBLCWEJ.js";import"./chunk-PCB65K4G.js";import"./chunk-6RS4NAOY.js";import"./chunk-ZZHXQCNB.js";import"./chunk-YNQWJWIC.js";import"./chunk-VNJAAYNQ.js";import"./chunk-7ZLXFKRI.js";import"./chunk-7HRLWPPZ.js";import"./chunk-MTP3B2SU.js";import"./chunk-LAOLJDVB.js";import"./chunk-UWHIU24L.js";import"./chunk-LV3CQ72P.js";import{Hb as s,Ob as u}from"./chunk-ABF3W2MO.js";import"./chunk-RV7PUSI2.js";import"./chunk-KCV5VN4X.js";import"./chunk-6FA3GG5B.js";import"./chunk-BKEDG3A4.js";import"./chunk-OE22TAXP.js";import"./chunk-J572ANHX.js";import"./chunk-PBZCXPPC.js";import"./chunk-NJLULBTM.js";import{o as t}from"./chunk-VVNV4NNW.js";import{A as n}from"./chunk-PF56N7ZY.js";import{a as i}from"./chunk-FTQLQJQV.js";var v=n.object({profileRef:f,sourceRevision:n.string().min(1),action:n.enum(["compare","report"]),request:n.unknown(),runs:n.array(l).max(1e4),comparisons:n.array(s).max(1e4),suiteRuns:n.array(u).max(1e4)}).strict();async function h(p){let o=v.parse(p);for(let e of[...o.runs,...o.comparisons,...o.suiteRuns])t(e,"Hosted evaluation evidence");let a={getProfileEvaluationRun:i(async e=>o.runs.find(r=>r.manifest.id===e)??null,"getProfileEvaluationRun"),getProfileEvaluationComparison:i(async e=>o.comparisons.find(r=>r.id===e)??null,"getProfileEvaluationComparison"),getProfileEvaluationSuiteRun:i(async e=>o.suiteRuns.find(r=>r.id===e)??null,"getProfileEvaluationSuiteRun"),saveProfileEvaluationComparison:i(async(e,r)=>r,"saveProfileEvaluationComparison")};return o.action==="compare"?m({store:a,selectedProfile:i(async()=>({ref:o.profileRef,sourceRevision:o.sourceRevision}),"selectedProfile")})(o.request):c({store:a,profileRef:o.profileRef,request:o.request})}i(h,"controlHostedProfileEvaluation");export{h as controlHostedProfileEvaluation};

package/dist/chunks/hosted-profile-evaluation-inspection-7USY75Z4.js

@@ -0,0 +1,3 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{b as R,c as P}from"./chunk-7YLXGILH.js";import{a as E}from"./chunk-Z3BWCFLV.js";import"./chunk-F7QTIHXX.js";import{a as h,v,w as S,x as w}from"./chunk-M3FLEZ4E.js";import"./chunk-OQPJ7FJF.js";import"./chunk-WBUK73ST.js";import"./chunk-P7HRF4FM.js";import"./chunk-GS6ZUSIN.js";import"./chunk-2ITZW2CN.js";import"./chunk-OG33QAG6.js";import{b as y}from"./chunk-W5W4IODW.js";import"./chunk-PWK5Z5S3.js";import"./chunk-W45RKGM6.js";import"./chunk-3YXYBYWK.js";import"./chunk-MPNJ2BB4.js";import"./chunk-KOKX7PBS.js";import"./chunk-V7KR74NO.js";import"./chunk-XGY4OQLC.js";import"./chunk-7O6Z3VOZ.js";import"./chunk-5EP2DZLJ.js";import"./chunk-IDOGNIMV.js";import"./chunk-W45RKGM6.js";import"./chunk-PBTXLQAU.js";import"./chunk-7WYL2IDD.js";import"./chunk-5ZBLCWEJ.js";import"./chunk-PCB65K4G.js";import"./chunk-6RS4NAOY.js";import"./chunk-ZZHXQCNB.js";import"./chunk-YNQWJWIC.js";import"./chunk-VNJAAYNQ.js";import"./chunk-7ZLXFKRI.js";import"./chunk-7HRLWPPZ.js";import"./chunk-MTP3B2SU.js";import"./chunk-LAOLJDVB.js";import"./chunk-UWHIU24L.js";import"./chunk-LV3CQ72P.js";import{f as g}from"./chunk-ABF3W2MO.js";import"./chunk-RV7PUSI2.js";import"./chunk-KCV5VN4X.js";import"./chunk-6FA3GG5B.js";import"./chunk-BKEDG3A4.js";import"./chunk-OE22TAXP.js";import"./chunk-J572ANHX.js";import{J as m}from"./chunk-PBZCXPPC.js";import"./chunk-NJLULBTM.js";import"./chunk-VVNV4NNW.js";import{A as s}from"./chunk-PF56N7ZY.js";import{a as n}from"./chunk-FTQLQJQV.js";var I=s.object({profileRef:v,inspection:R,run:E.nullable(),receipts:s.array(g).max(1e4),grades:s.array(m).max(1e4),sessions:s.array(S).max(1e4),turns:s.array(w).max(1e4),events:s.array(h).max(1e4),usage:s.array(y).max(1e4)}).strict();async function x(c){let t=I.parse(c),o=n((e,i)=>{let f=new Map;for(let p of e){let d=i(p);if(f.has(d))throw new Error("Hosted evaluation inspection has duplicate evidence identities.");f.set(d,p)}return f},"map"),r=o(t.receipts,e=>e.id),u=o(t.grades,e=>e.contentHash),l=o(t.sessions,e=>e.id),a=o(t.turns,e=>e.id);return P({profileRef:t.profileRef,...t.inspection,store:{getProfileEvaluationRun:n(async e=>t.run?.manifest.id===e?t.run:null,"getProfileEvaluationRun"),getProfileEvaluationReceipt:n(async e=>r.get(e)??null,"getProfileEvaluationReceipt"),getProfileEvaluationGrade:n(async e=>u.get(e)??null,"getProfileEvaluationGrade"),getSession:n(async e=>l.get(e)??null,"getSession"),getTurn:n(async e=>a.get(e)??null,"getTurn"),runtimeEventsForTurn:n(async e=>t.events.filter(i=>i.turnId===e),"runtimeEventsForTurn"),listModelUsageRecords:n(async e=>t.usage.filter(i=>(!e?.sessionId||i.sessionId===e.sessionId)&&(!e?.turnId||i.turnId===e.turnId)),"listModelUsageRecords")}})}n(x,"inspectHostedProfileEvaluation");async function B(c){if(c.length!==0)throw new Error("Hosted evaluation inspection uses bounded standard input.");let t=[],o=0;for await(let l of process.stdin){let a=Buffer.from(l);if(o+=a.length,o>32*1024*1024)throw new Error("Hosted evaluation inspection input is too large.");t.push(a)}let r=JSON.parse(Buffer.concat(t).toString("utf8")),u=r.action==="compare"||r.action==="report"?await(await import("./hosted-profile-evaluation-control-EUL57FAB.js")).controlHostedProfileEvaluation(r):await x(r);process.stdout.write(`${JSON.stringify(u)}
+`)}n(B,"runHostedProfileInspectionCli");export{x as inspectHostedProfileEvaluation,B as runHostedProfileInspectionCli};

package/dist/chunks/{hosted-profile-evaluation-preparation-ZAOGDQXO.js → hosted-profile-evaluation-preparation-2LSMZQNA.js}

@@ -1,3 +1,3 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
-import{a as V}from"./chunk-SIV5P6JO.js";import{b as x,t as j,u as D}from"./chunk-F5JDBDYL.js";import{b as E}from"./chunk-SID4X3YN.js";import"./chunk-S7A2OGL2.js";import"./chunk-AWPYTDH4.js";import"./chunk-6PKXJEJM.js";import{a as I}from"./chunk-HIYQPZ7C.js";import"./chunk-MCIIGQT7.js";import"./chunk-SDO4FC4Q.js";import"./chunk-FEAKTSRS.js";import"./chunk-W45RKGM6.js";import"./chunk-IR3YJWPW.js";import"./chunk-EIIGTADO.js";import"./chunk-B47JMAVW.js";import"./chunk-E3EKBPCB.js";import"./chunk-GQUS7MCH.js";import"./chunk-VFH5C6D2.js";import"./chunk-TTN63EAM.js";import"./chunk-TH6Y4K5Z.js";import{m as C}from"./chunk-MHYI7ATG.js";import"./chunk-WRQEYW3V.js";import"./chunk-5MTN6KXV.js";import"./chunk-3DVWJCOA.js";import"./chunk-MWXW2CA6.js";import"./chunk-L3KS6MOV.js";import"./chunk-4LZLO4OW.js";import{a as b}from"./chunk-IZ56L2ZK.js";import"./chunk-KCJVFLBB.js";import"./chunk-UBCLPZSQ.js";import"./chunk-OQPJ7FJF.js";import"./chunk-WBUK73ST.js";import"./chunk-P7HRF4FM.js";import"./chunk-LNRFRAV5.js";import"./chunk-2ITZW2CN.js";import"./chunk-CQF6QZEL.js";import"./chunk-D5ADDBS5.js";import"./chunk-QRJPLZF7.js";import"./chunk-PWK5Z5S3.js";import"./chunk-CN5OXQ7A.js";import"./chunk-NR5VASQB.js";import"./chunk-OZ6LRNRE.js";import"./chunk-IDOGNIMV.js";import"./chunk-W45RKGM6.js";import"./chunk-W45RKGM6.js";import{j as m}from"./chunk-TMMFF6DO.js";import"./chunk-BQUWZRWU.js";import"./chunk-SGK4GR44.js";import"./chunk-5ZBLCWEJ.js";import"./chunk-CM5USMXN.js";import"./chunk-WFVOG5PU.js";import"./chunk-XGY4OQLC.js";import"./chunk-VWJ5IYQP.js";import"./chunk-E67M5WGY.js";import"./chunk-PCB65K4G.js";import"./chunk-4N3UF3U5.js";import"./chunk-HZLV773Y.js";import{ha as S}from"./chunk-M4ZRCRJM.js";import"./chunk-VNJAAYNQ.js";import"./chunk-XK7SPL63.js";import"./chunk-NVHZRKXB.js";import"./chunk-MTP3B2SU.js";import"./chunk-YBNKGA5C.js";import"./chunk-LAOLJDVB.js";import"./chunk-UWHIU24L.js";import"./chunk-LV3CQ72P.js";import"./chunk-M6JRS5PA.js";import"./chunk-KCV5VN4X.js";import"./chunk-RV7PUSI2.js";import"./chunk-6FA3GG5B.js";import"./chunk-KK626T3Z.js";import"./chunk-6DCXAXVD.js";import"./chunk-OE22TAXP.js";import"./chunk-UGOK7VTC.js";import"./chunk-4M3YW3EQ.js";import{ab as H,f as y}from"./chunk-PBZCXPPC.js";import{e as P,i as R}from"./chunk-NJLULBTM.js";import{n as d}from"./chunk-VVNV4NNW.js";import{A as e}from"./chunk-PF56N7ZY.js";import{a as s}from"./chunk-FTQLQJQV.js";import{readFile as h,realpath as z,lstat as T}from"node:fs/promises";import l from"node:path";var B=e.object({compile:e.object({repoPath:e.string(),profileId:e.string(),repositoryId:e.string(),sourceRevision:e.string(),workspaceId:e.string(),outputDir:e.string()}).strict(),externalDatasetPackage:e.string().regex(/^external-dataset-[a-f0-9-]+\.json$/).optional(),sourceCandidate:H.optional(),action:e.enum(["catalog","prepare"]),request:e.unknown().optional()}).strict();async function G(t){let o=await V(t.compile);if(t.sourceCandidate){let a=await C({workspaceId:typeof o.agentSnapshot.metadata.workspaceId=="string"?o.agentSnapshot.metadata.workspaceId:o.workspaceId,sourceDir:l.join(o.bundlePath,"source")});if(d(t.sourceCandidate.harnessRelease)!==d({id:o.harnessRelease.id,contentHash:o.harnessRelease.contentHash})||I(a).protectedClosureHash!==t.sourceCandidate.protectedClosureHash)throw new Error("Private candidate source differs from its actual frozen compiled release.")}let g={release:b.parse({schemaVersion:"openpond.localHarnessReleaseRecord.v1",workspaceId:o.workspaceId,sourceRevision:o.sourceRevision,agentSnapshot:P.parse(o.agentSnapshot),harnessRelease:R.parse(o.harnessRelease),bundlePath:o.bundlePath,createdAt:new Date().toISOString()})},p={source:"openpond_git",profileId:t.compile.profileId,repositoryId:t.compile.repositoryId},f=t.compile.sourceRevision,c={id:o.harnessRelease.id,contentHash:o.harnessRelease.contentHash},w=s(async a=>E({...a,runtime:g}),"loadCatalog"),q=await w({ref:p,sourceRevision:f,harnessRelease:c}),k=l.join(o.bundlePath,"source"),v=o.harnessRelease.files.some(a=>a.path==="workflows/catalog.json")?await(async()=>{let a=y({agentSnapshot:o.agentSnapshot,harnessRelease:o.harnessRelease,catalogBytes:await h(l.join(k,"workflows/catalog.json")),actionBytes:await h(l.join(k,"workflows/actions.json"))});return a.catalog.workflows.map(r=>({workflow:r,binding:{schemaVersion:"openpond.profileWorkflowBinding.v1",profileId:p.profileId,sourceRevision:f,harnessRelease:c,catalogHash:a.catalogHash,workflowId:r.id}}))})():[],A={profileRef:p,sourceRevision:f,harnessRelease:c,workflows:v};if(t.action==="catalog")return{...q,workflows:v};let u=t.externalDatasetPackage?await(async()=>{let a=await z(t.compile.outputDir),r=l.join(a,t.externalDatasetPackage),i=await T(r);if(!i.isFile()||i.isSymbolicLink()||i.size>32*1024*1024||await z(r)!==r)throw new Error("External Dataset cache is outside its bounded verifier storage.");let n=e.object({packageValue:e.unknown(),graders:e.array(e.object({id:e.string(),version:e.string(),contentHash:e.string(),feedbackKey:e.string(),release:e.object({id:e.string(),revision:e.union([e.string(),e.number()]),contentHash:e.string()}).strict().nullable()}).strict()).max(100)}).strict().parse(JSON.parse(await h(r,"utf8")));return{packageValue:S(n.packageValue),graders:n.graders}})():null;return j({privateGradingPreflight:s(a=>D(a,!1),"privateGradingPreflight"),sourceCandidate:t.sourceCandidate,resolveExternalDataset:u?async a=>{let r=m({binding:a,...u}),i=d(o.harnessRelease.files.filter(n=>n.visibility!=="policy").map(n=>({path:n.path,asset:n})));if(a.protectedProfileClosureHash!==i)throw new Error("The selected Profile's protected evaluator closure changed.");return{binding:a,packageValue:r,authorize:s(async()=>{m({binding:a,...u})},"authorize")}}:void 0,loadCatalog:w,selectedWorkflows:s(async()=>A,"selectedWorkflows"),placement:"remote",boundedWorkComputeAvailable:!0,loadTasksetPackage:s(async a=>{let r=await x({runtime:g,definition:a,harnessRelease:c});if(!r)throw new Error("Hosted evaluation Taskset is absent from its published Profile release.");return r},"loadTasksetPackage"),modelConfigurationHash:s(async(a,r)=>{if(a.providerId!=="openpond"||!r.hostModelConfigurationHash)throw new Error("Hosted evaluation preparation requires a trusted model configuration receipt.");return r.hostModelConfigurationHash},"modelConfigurationHash")})(t.request)}s(G,"prepareHostedProfileEvaluation");async function ae(t){if(t.length!==1||t[0].length>48e3||!/^[A-Za-z0-9_-]+$/.test(t[0]))throw new Error("Hosted Profile evaluation preparation argument is invalid.");let o=B.parse(JSON.parse(Buffer.from(t[0],"base64url").toString("utf8")));process.stdout.write(`${JSON.stringify(await G(o))}
+import{a as V}from"./chunk-C2LAEGOW.js";import{b as x,p as j,q as D}from"./chunk-C2AXMKK4.js";import{b as E}from"./chunk-QU4UE73E.js";import"./chunk-S7A2OGL2.js";import"./chunk-YM4PSVFW.js";import"./chunk-6PKXJEJM.js";import"./chunk-FEAKTSRS.js";import{a as I}from"./chunk-HIYQPZ7C.js";import"./chunk-F6UQ6PPK.js";import"./chunk-SDO4FC4Q.js";import"./chunk-IR3YJWPW.js";import"./chunk-NT7N6KLE.js";import"./chunk-B5R53U74.js";import"./chunk-W45RKGM6.js";import"./chunk-6EBCS57F.js";import"./chunk-KCOTDUGW.js";import"./chunk-SI5W5LBV.js";import"./chunk-RZUCVF2Q.js";import"./chunk-VFH5C6D2.js";import"./chunk-AH26AQN7.js";import"./chunk-5MHYGMJG.js";import"./chunk-XNOMIWEY.js";import{m as C}from"./chunk-LK2K3SPM.js";import"./chunk-ZG6353RM.js";import"./chunk-B4RKHHF7.js";import"./chunk-M3FLEZ4E.js";import"./chunk-OQPJ7FJF.js";import"./chunk-WBUK73ST.js";import"./chunk-P7HRF4FM.js";import"./chunk-GS6ZUSIN.js";import"./chunk-2ITZW2CN.js";import"./chunk-OG33QAG6.js";import"./chunk-W5W4IODW.js";import"./chunk-PWK5Z5S3.js";import"./chunk-W45RKGM6.js";import"./chunk-MWXW2CA6.js";import"./chunk-L3KS6MOV.js";import"./chunk-M3SCON53.js";import{a as b}from"./chunk-IZ56L2ZK.js";import"./chunk-KCJVFLBB.js";import"./chunk-3YXYBYWK.js";import"./chunk-MPNJ2BB4.js";import"./chunk-KOKX7PBS.js";import"./chunk-V7KR74NO.js";import"./chunk-XGY4OQLC.js";import"./chunk-7O6Z3VOZ.js";import"./chunk-5EP2DZLJ.js";import"./chunk-IDOGNIMV.js";import"./chunk-W45RKGM6.js";import{j as m}from"./chunk-PBTXLQAU.js";import"./chunk-7WYL2IDD.js";import"./chunk-HFJUXKT5.js";import"./chunk-5ZBLCWEJ.js";import"./chunk-PCB65K4G.js";import"./chunk-6RS4NAOY.js";import"./chunk-ZZHXQCNB.js";import{ja as S}from"./chunk-YNQWJWIC.js";import"./chunk-VNJAAYNQ.js";import"./chunk-7ZLXFKRI.js";import"./chunk-7HRLWPPZ.js";import"./chunk-MTP3B2SU.js";import"./chunk-YBNKGA5C.js";import"./chunk-LAOLJDVB.js";import"./chunk-UWHIU24L.js";import"./chunk-LV3CQ72P.js";import"./chunk-ABF3W2MO.js";import"./chunk-RV7PUSI2.js";import"./chunk-KCV5VN4X.js";import"./chunk-6FA3GG5B.js";import"./chunk-2EPR4HLF.js";import"./chunk-BKEDG3A4.js";import"./chunk-OE22TAXP.js";import"./chunk-UGOK7VTC.js";import"./chunk-J572ANHX.js";import{ab as H,f as y}from"./chunk-PBZCXPPC.js";import{e as P,i as R}from"./chunk-NJLULBTM.js";import{n as d}from"./chunk-VVNV4NNW.js";import{A as e}from"./chunk-PF56N7ZY.js";import{a as s}from"./chunk-FTQLQJQV.js";import{readFile as h,realpath as z,lstat as T}from"node:fs/promises";import l from"node:path";var B=e.object({compile:e.object({repoPath:e.string(),profileId:e.string(),repositoryId:e.string(),sourceRevision:e.string(),workspaceId:e.string(),outputDir:e.string()}).strict(),externalDatasetPackage:e.string().regex(/^external-dataset-[a-f0-9-]+\.json$/).optional(),sourceCandidate:H.optional(),action:e.enum(["catalog","prepare"]),request:e.unknown().optional()}).strict();async function G(t){let o=await V(t.compile);if(t.sourceCandidate){let a=await C({workspaceId:typeof o.agentSnapshot.metadata.workspaceId=="string"?o.agentSnapshot.metadata.workspaceId:o.workspaceId,sourceDir:l.join(o.bundlePath,"source")});if(d(t.sourceCandidate.harnessRelease)!==d({id:o.harnessRelease.id,contentHash:o.harnessRelease.contentHash})||I(a).protectedClosureHash!==t.sourceCandidate.protectedClosureHash)throw new Error("Private candidate source differs from its actual frozen compiled release.")}let g={release:b.parse({schemaVersion:"openpond.localHarnessReleaseRecord.v1",workspaceId:o.workspaceId,sourceRevision:o.sourceRevision,agentSnapshot:P.parse(o.agentSnapshot),harnessRelease:R.parse(o.harnessRelease),bundlePath:o.bundlePath,createdAt:new Date().toISOString()})},p={source:"openpond_git",profileId:t.compile.profileId,repositoryId:t.compile.repositoryId},f=t.compile.sourceRevision,c={id:o.harnessRelease.id,contentHash:o.harnessRelease.contentHash},w=s(async a=>E({...a,runtime:g}),"loadCatalog"),q=await w({ref:p,sourceRevision:f,harnessRelease:c}),k=l.join(o.bundlePath,"source"),v=o.harnessRelease.files.some(a=>a.path==="workflows/catalog.json")?await(async()=>{let a=y({agentSnapshot:o.agentSnapshot,harnessRelease:o.harnessRelease,catalogBytes:await h(l.join(k,"workflows/catalog.json")),actionBytes:await h(l.join(k,"workflows/actions.json"))});return a.catalog.workflows.map(r=>({workflow:r,binding:{schemaVersion:"openpond.profileWorkflowBinding.v1",profileId:p.profileId,sourceRevision:f,harnessRelease:c,catalogHash:a.catalogHash,workflowId:r.id}}))})():[],A={profileRef:p,sourceRevision:f,harnessRelease:c,workflows:v};if(t.action==="catalog")return{...q,workflows:v};let u=t.externalDatasetPackage?await(async()=>{let a=await z(t.compile.outputDir),r=l.join(a,t.externalDatasetPackage),i=await T(r);if(!i.isFile()||i.isSymbolicLink()||i.size>32*1024*1024||await z(r)!==r)throw new Error("External Dataset cache is outside its bounded verifier storage.");let n=e.object({packageValue:e.unknown(),graders:e.array(e.object({id:e.string(),version:e.string(),contentHash:e.string(),feedbackKey:e.string(),release:e.object({id:e.string(),revision:e.union([e.string(),e.number()]),contentHash:e.string()}).strict().nullable()}).strict()).max(100)}).strict().parse(JSON.parse(await h(r,"utf8")));return{packageValue:S(n.packageValue),graders:n.graders}})():null;return j({privateGradingPreflight:s(a=>D(a,!1),"privateGradingPreflight"),sourceCandidate:t.sourceCandidate,resolveExternalDataset:u?async a=>{let r=m({binding:a,...u}),i=d(o.harnessRelease.files.filter(n=>n.visibility!=="policy").map(n=>({path:n.path,asset:n})));if(a.protectedProfileClosureHash!==i)throw new Error("The selected Profile's protected evaluator closure changed.");return{binding:a,packageValue:r,authorize:s(async()=>{m({binding:a,...u})},"authorize")}}:void 0,loadCatalog:w,selectedWorkflows:s(async()=>A,"selectedWorkflows"),placement:"remote",boundedWorkComputeAvailable:!0,loadTasksetPackage:s(async a=>{let r=await x({runtime:g,definition:a,harnessRelease:c});if(!r)throw new Error("Hosted evaluation Taskset is absent from its published Profile release.");return r},"loadTasksetPackage"),modelConfigurationHash:s(async(a,r)=>{if(a.providerId!=="openpond"||!r.hostModelConfigurationHash)throw new Error("Hosted evaluation preparation requires a trusted model configuration receipt.");return r.hostModelConfigurationHash},"modelConfigurationHash")})(t.request)}s(G,"prepareHostedProfileEvaluation");async function ae(t){if(t.length!==1||t[0].length>48e3||!/^[A-Za-z0-9_-]+$/.test(t[0]))throw new Error("Hosted Profile evaluation preparation argument is invalid.");let o=B.parse(JSON.parse(Buffer.from(t[0],"base64url").toString("utf8")));process.stdout.write(`${JSON.stringify(await G(o))}
 `)}s(ae,"runHostedProfileEvaluationCli");export{G as prepareHostedProfileEvaluation,ae as runHostedProfileEvaluationCli};

package/dist/chunks/{hosted-tasksets-CVUP7MS6.js → hosted-tasksets-WGXGXJ7E.js}

@@ -1,2 +1,2 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
-import{m as h}from"./chunk-XLULTQLZ.js";import"./chunk-RPOD6I64.js";import"./chunk-WRQEYW3V.js";import"./chunk-SYUKES6H.js";import"./chunk-VPDG2V2R.js";import"./chunk-ZBBVRYU3.js";import"./chunk-OQPJ7FJF.js";import"./chunk-CQF6QZEL.js";import"./chunk-TMMFF6DO.js";import"./chunk-BQUWZRWU.js";import"./chunk-BFKYRQMA.js";import"./chunk-SGK4GR44.js";import"./chunk-5ZBLCWEJ.js";import"./chunk-4N3UF3U5.js";import"./chunk-HZLV773Y.js";import"./chunk-M4ZRCRJM.js";import"./chunk-VNJAAYNQ.js";import"./chunk-XK7SPL63.js";import"./chunk-NVHZRKXB.js";import"./chunk-MTP3B2SU.js";import"./chunk-OSVGNONV.js";import"./chunk-YBNKGA5C.js";import"./chunk-ZZWAQBA2.js";import"./chunk-LAOLJDVB.js";import"./chunk-LV3CQ72P.js";import"./chunk-YR5ID2SS.js";import"./chunk-M6JRS5PA.js";import"./chunk-KCV5VN4X.js";import"./chunk-RV7PUSI2.js";import"./chunk-6FA3GG5B.js";import"./chunk-KK626T3Z.js";import"./chunk-6DCXAXVD.js";import"./chunk-OE22TAXP.js";import"./chunk-UGOK7VTC.js";import"./chunk-4M3YW3EQ.js";import"./chunk-PBZCXPPC.js";import"./chunk-NJLULBTM.js";import"./chunk-VVNV4NNW.js";import"./chunk-PF56N7ZY.js";import{a as r}from"./chunk-FTQLQJQV.js";import{createHash as p}from"node:crypto";import{setTimeout as b}from"node:timers/promises";async function T(e){if(e.signal.throwIfAborted(),!e.turnId.trim()||!e.callId.trim())throw new Error("Hosted Taskset actions require their originating turn and tool call.");let s=y(e.session.metadata?.hostConversationId),l=y(e.session.metadata?.hostSandboxId);if(e.session.workspaceKind!=="sandbox"||!l||e.session.workspaceId!==l||!s)throw new Error("Hosted Taskset actions require the bound Work workspace.");if(e.action==="answer_questions")throw new Error("Hosted Taskset authoring has no separate question queue. Revise with the complete buildSpecification.");if(e.action==="revise"&&!e.payload.buildSpecification)throw new Error("Hosted Taskset revisions require the complete buildSpecification.");let g=I(e.payload.sourceReferenceIds??e.payload.sourceIds),u=k({action:e.action,clientRequestId:w(e),creationId:e.payload.creationId,tasksetId:e.payload.tasksetId,objective:e.payload.objective,buildIntent:e.payload.buildIntent,buildSpecification:e.payload.buildSpecification,sourceReferenceIds:g,methodHint:e.payload.methodHint,approved:e.payload.approved,split:e.payload.split,taskLimit:e.payload.taskLimit,attemptsPerTask:e.payload.attemptsPerTask,maximumSpendUsd:e.payload.maximumSpendUsd,message:e.payload.message,answers:e.payload.answers}),f=e.request??h,n=["audit_graders","calibrate_judges","baseline","readiness"].includes(e.action),o=n?AbortSignal.any([e.signal,AbortSignal.timeout(900*1e3)]):e.signal,c=null;try{for(;;){o.throwIfAborted();let a=await f({path:"/hosted-tasksets/actions",method:"POST",body:u,signal:o,...n?{timeoutMs:3e4}:{}});o.throwIfAborted();let t=a.result;if(!n||!t||typeof t!="object"||Array.isArray(t)||!("schemaVersion"in t)||t.schemaVersion!=="openpond.hostedTasksetOperation.v1")return a;let m="status"in t?t.status:null,i="id"in t?t.id:null,d="retryAfterMs"in t?t.retryAfterMs:null;if(m!=="queued"&&m!=="running"||typeof i!="string"||!i||typeof d!="number"||!Number.isFinite(d)||d<1)throw new Error("Hosted Taskset check returned an invalid operation status.");if(c!==null&&c!==i)throw new Error("Hosted Taskset check operation identity changed while polling.");c=i,await b(Math.min(d,5e3),void 0,{signal:o})}}catch(a){throw n&&o.aborted&&(await f({path:"/hosted-tasksets/actions",method:"POST",body:{...u,cancelCheck:!0},timeoutMs:1e4,signal:AbortSignal.timeout(1e4)}).catch(()=>{}),o.throwIfAborted()),a}}r(T,"executeHostedTasksetAction");function w(e){let s=p("sha256").update(JSON.stringify([e.session.id,e.turnId,e.callId])).digest("hex").slice(0,32);return`${e.session.id}:${s}`.slice(0,191)}r(w,"actionRequestId");function k(e){return Object.fromEntries(Object.entries(e).filter(([,s])=>s!==void 0))}r(k,"compact");function y(e){return typeof e=="string"&&e.trim()?e.trim():null}r(y,"stringValue");function I(e){return Array.isArray(e)&&e.every(s=>typeof s=="string")?e:void 0}r(I,"stringArray");export{T as executeHostedTasksetAction};
+import{m as h}from"./chunk-DTTFUANI.js";import"./chunk-EZRUWIP6.js";import"./chunk-SYUKES6H.js";import"./chunk-MEGKXGW3.js";import"./chunk-ZG6353RM.js";import"./chunk-WWQNMC7C.js";import"./chunk-OQPJ7FJF.js";import"./chunk-OG33QAG6.js";import"./chunk-PBTXLQAU.js";import"./chunk-7WYL2IDD.js";import"./chunk-4N4EH3RJ.js";import"./chunk-HFJUXKT5.js";import"./chunk-5ZBLCWEJ.js";import"./chunk-6RS4NAOY.js";import"./chunk-ZZHXQCNB.js";import"./chunk-YNQWJWIC.js";import"./chunk-VNJAAYNQ.js";import"./chunk-7ZLXFKRI.js";import"./chunk-7HRLWPPZ.js";import"./chunk-MTP3B2SU.js";import"./chunk-OSVGNONV.js";import"./chunk-2LJCJOJ7.js";import"./chunk-YBNKGA5C.js";import"./chunk-LAOLJDVB.js";import"./chunk-JCLTFDVW.js";import"./chunk-LV3CQ72P.js";import"./chunk-ABF3W2MO.js";import"./chunk-RV7PUSI2.js";import"./chunk-KCV5VN4X.js";import"./chunk-6FA3GG5B.js";import"./chunk-2EPR4HLF.js";import"./chunk-BKEDG3A4.js";import"./chunk-OE22TAXP.js";import"./chunk-UGOK7VTC.js";import"./chunk-J572ANHX.js";import"./chunk-PBZCXPPC.js";import"./chunk-NJLULBTM.js";import"./chunk-VVNV4NNW.js";import"./chunk-PF56N7ZY.js";import{a as r}from"./chunk-FTQLQJQV.js";import{createHash as p}from"node:crypto";import{setTimeout as b}from"node:timers/promises";async function T(e){if(e.signal.throwIfAborted(),!e.turnId.trim()||!e.callId.trim())throw new Error("Hosted Taskset actions require their originating turn and tool call.");let s=y(e.session.metadata?.hostConversationId),l=y(e.session.metadata?.hostSandboxId);if(e.session.workspaceKind!=="sandbox"||!l||e.session.workspaceId!==l||!s)throw new Error("Hosted Taskset actions require the bound Work workspace.");if(e.action==="answer_questions")throw new Error("Hosted Taskset authoring has no separate question queue. Revise with the complete buildSpecification.");if(e.action==="revise"&&!e.payload.buildSpecification)throw new Error("Hosted Taskset revisions require the complete buildSpecification.");let g=I(e.payload.sourceReferenceIds??e.payload.sourceIds),u=k({action:e.action,clientRequestId:w(e),creationId:e.payload.creationId,tasksetId:e.payload.tasksetId,objective:e.payload.objective,buildIntent:e.payload.buildIntent,buildSpecification:e.payload.buildSpecification,sourceReferenceIds:g,methodHint:e.payload.methodHint,approved:e.payload.approved,split:e.payload.split,taskLimit:e.payload.taskLimit,attemptsPerTask:e.payload.attemptsPerTask,maximumSpendUsd:e.payload.maximumSpendUsd,message:e.payload.message,answers:e.payload.answers}),f=e.request??h,n=["audit_graders","calibrate_judges","baseline","readiness"].includes(e.action),o=n?AbortSignal.any([e.signal,AbortSignal.timeout(900*1e3)]):e.signal,c=null;try{for(;;){o.throwIfAborted();let a=await f({path:"/hosted-tasksets/actions",method:"POST",body:u,signal:o,...n?{timeoutMs:3e4}:{}});o.throwIfAborted();let t=a.result;if(!n||!t||typeof t!="object"||Array.isArray(t)||!("schemaVersion"in t)||t.schemaVersion!=="openpond.hostedTasksetOperation.v1")return a;let m="status"in t?t.status:null,i="id"in t?t.id:null,d="retryAfterMs"in t?t.retryAfterMs:null;if(m!=="queued"&&m!=="running"||typeof i!="string"||!i||typeof d!="number"||!Number.isFinite(d)||d<1)throw new Error("Hosted Taskset check returned an invalid operation status.");if(c!==null&&c!==i)throw new Error("Hosted Taskset check operation identity changed while polling.");c=i,await b(Math.min(d,5e3),void 0,{signal:o})}}catch(a){throw n&&o.aborted&&(await f({path:"/hosted-tasksets/actions",method:"POST",body:{...u,cancelCheck:!0},timeoutMs:1e4,signal:AbortSignal.timeout(1e4)}).catch(()=>{}),o.throwIfAborted()),a}}r(T,"executeHostedTasksetAction");function w(e){let s=p("sha256").update(JSON.stringify([e.session.id,e.turnId,e.callId])).digest("hex").slice(0,32);return`${e.session.id}:${s}`.slice(0,191)}r(w,"actionRequestId");function k(e){return Object.fromEntries(Object.entries(e).filter(([,s])=>s!==void 0))}r(k,"compact");function y(e){return typeof e=="string"&&e.trim()?e.trim():null}r(y,"stringValue");function I(e){return Array.isArray(e)&&e.every(s=>typeof s=="string")?e:void 0}r(I,"stringArray");export{T as executeHostedTasksetAction};

package/dist/chunks/human-review-M26UKGJL.js

@@ -0,0 +1,2 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{a as E,d as S}from"./chunk-AHOBCBVZ.js";import"./chunk-GPL2Z65R.js";import{c as I}from"./chunk-SXMR6E2W.js";import"./chunk-2HAWOMZK.js";import"./chunk-SFKZITAG.js";import"./chunk-XRKFTPHD.js";import{c as x,f as y}from"./chunk-BSHAIAXY.js";import"./chunk-XWPC3AN4.js";import{c as n}from"./chunk-3M53YXEI.js";import"./chunk-MILEWROZ.js";import{p as R}from"./chunk-OTUBJV6C.js";import"./chunk-27JGS3KB.js";import"./chunk-BT5YNE5U.js";import{d as g}from"./chunk-UTNGEMW5.js";import"./chunk-U2K7QJCG.js";import"./chunk-WSOUMXH3.js";import"./chunk-N42HT64M.js";import"./chunk-NG2L6D7G.js";import{b}from"./chunk-GLUWATL5.js";import"./chunk-OSVGNONV.js";import"./chunk-2LJCJOJ7.js";import"./chunk-YBNKGA5C.js";import{a as v}from"./chunk-LAOLJDVB.js";import"./chunk-UWHIU24L.js";import"./chunk-JCLTFDVW.js";import"./chunk-LV3CQ72P.js";import"./chunk-ABF3W2MO.js";import"./chunk-RV7PUSI2.js";import"./chunk-KCV5VN4X.js";import"./chunk-2EPR4HLF.js";import"./chunk-BKEDG3A4.js";import"./chunk-OE22TAXP.js";import"./chunk-UGOK7VTC.js";import"./chunk-J572ANHX.js";import{fa as w,ga as f,pa as p,qa as h}from"./chunk-PBZCXPPC.js";import"./chunk-NJLULBTM.js";import{n as u}from"./chunk-VVNV4NNW.js";import"./chunk-PF56N7ZY.js";import{a as m}from"./chunk-FTQLQJQV.js";import{readFile as A,stat as L}from"node:fs/promises";async function C(r,l){let[o,a]=l,i=n(r,"team"),q=r.local===!0||r.local==="true";if(!i||!o||l.length>2)throw new Error("usage: human-review <read|inbox|inspect|results|request> [id] --team <id> [--input-file <path>] [--local --server-url <loopback-origin>]");let t;if(o==="request"){let e=n(r,"inputFile");if(a||!e||(await L(e)).size>1048576)throw new Error("Request requires a bounded --input-file with exact scoped pins, revision and stable operationId for mutations.");if(t=p.parse(JSON.parse(await A(e,"utf8"))),t.scope!==i)throw new Error("Input belongs to another workspace.")}else if(o==="inbox"){if(a)throw new Error("Inbox does not accept an assignment id.");t=p.parse({endpoint:"inbox",scope:i,view:n(r,"view")||"mine",status:n(r,"status")||"active",limit:Number(n(r,"limit")||100),...n(r,"project")?{projectId:n(r,"project")}:{},...n(r,"afterId")?{afterId:n(r,"afterId")}:{}})}else{if(!a)throw new Error(`${o} requires an exact assignment or execution id.`);t=p.parse(o==="read"?{endpoint:"get",scope:i,id:a,...n(r,"revision")?{revision:Number(n(r,"revision"))}:{}}:o==="inspect"?{endpoint:"inspect",scope:i,id:a,...n(r,"slot")?{slot:Number(n(r,"slot"))}:{},...n(r,"afterId")?{afterId:n(r,"afterId")}:{}}:o==="results"?{endpoint:"results",scope:i,executionId:a}:{endpoint:o,scope:i,id:a})}let s;if(q){let e=new URL(n(r,"serverUrl")||E);if(e.protocol!=="http:"||!["localhost","127.0.0.1","[::1]"].includes(e.hostname)||e.username||e.password||e.search||e.hash||e.pathname!=="/")throw new Error("Local Human review requires an HTTP loopback server origin.");let c=await S(e.origin),d=await c(new URL("/v1/human-review?location=local",e),{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify(t),redirect:"error",signal:AbortSignal.timeout(3e4)}),H=await U(d);if(s=JSON.parse(H),!d.ok)throw new Error(typeof s.error=="string"?s.error:`Local Human request failed (${d.status}).`)}else{let e=await g();s=await new R({scope:i,apiKey:await I(e,y(e)),baseUrl:x(r)??e.apiBaseUrl??b}).request(t,AbortSignal.timeout(3e4))}if(t.endpoint==="get"||t.endpoint==="command"){let e=w.parse(s),c=t.endpoint==="get"?t.id:t.command.id;if(e.id!==c||e.scope!==i)throw new Error("Review response differs from the requested identity.")}if(t.endpoint==="inbox"&&f.parse(s).items.some(c=>c.scope!==i||t.projectId&&c.projectId!==t.projectId))throw new Error("Inbox response differs from the requested scope.");if(t.endpoint==="inspect"&&h.parse(s).some(e=>e.reviewId!==t.id))throw new Error("Inspection response differs from the selected assignment.");if(t.endpoint==="results"){let e=v.parse(s),{contentHash:c,...d}=e;if(e.executionId!==t.executionId||u(d)!==c||t.selection!==void 0&&u(e.selection)!==u(t.selection))throw new Error("Result response differs from the selected execution or retained review revisions.")}console.log(JSON.stringify(s,null,2))}m(C,"runHumanReviewCommand");async function U(r){let l=r.body?.getReader();if(!l)throw new Error("Review response is unavailable.");let o=[],a=0;try{for(;;){let i=await l.read();if(i.done)break;if(a+=i.value.byteLength,a>8388608)throw new Error("Review response exceeds its bounded transport.");o.push(i.value)}}finally{await l.cancel(),l.releaseLock()}return Buffer.concat(o).toString("utf8")}m(U,"boundedResponse");export{C as runHumanReviewCommand};

package/dist/chunks/{import-WLLUIDS6.js → import-6SI4BEKS.js}

@@ -1,3 +1,3 @@
 import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
-import{A as z,a as $,b as ce,c as le,d as de,g as ue,h as pe,i as _,j as fe,k as me,l as he,m as we,n as ge,o as H,p as N,q as ye,r as ve,s as be,t as V,u as O,v as Q,w as Ie,x as M,y as Se,z as Ce}from"./chunk-ISIXFK6U.js";import{k as Y}from"./chunk-Q66LWQGF.js";import{a as Ae}from"./chunk-TNHDD3LO.js";import"./chunk-HN2ZK6EV.js";import"./chunk-UJBEWIR3.js";import"./chunk-XRKFTPHD.js";import{c as $e,f as Ne}from"./chunk-BSHAIAXY.js";import"./chunk-XWPC3AN4.js";import{c as u,f as y}from"./chunk-3M53YXEI.js";import"./chunk-JFXINDOQ.js";import"./chunk-TYHCBVQT.js";import{o as Ee,p as xe,q as J}from"./chunk-VSUHJ46L.js";import"./chunk-FWIPHEVA.js";import"./chunk-BT5YNE5U.js";import{d as F,g as Re}from"./chunk-OJFDI7VM.js";import"./chunk-QCSLEMZF.js";import"./chunk-4RHM4WN2.js";import"./chunk-BLKTUFGB.js";import{b as Ue}from"./chunk-GLUWATL5.js";import"./chunk-OSVGNONV.js";import"./chunk-YBNKGA5C.js";import"./chunk-ZZWAQBA2.js";import"./chunk-LAOLJDVB.js";import"./chunk-UWHIU24L.js";import"./chunk-LV3CQ72P.js";import"./chunk-YR5ID2SS.js";import"./chunk-M6JRS5PA.js";import"./chunk-KCV5VN4X.js";import"./chunk-RV7PUSI2.js";import"./chunk-KK626T3Z.js";import"./chunk-6DCXAXVD.js";import"./chunk-OE22TAXP.js";import{a as L,f as ie}from"./chunk-UGOK7VTC.js";import"./chunk-4M3YW3EQ.js";import"./chunk-PBZCXPPC.js";import"./chunk-NJLULBTM.js";import{m as ae,n as x}from"./chunk-VVNV4NNW.js";import{A as g}from"./chunk-PF56N7ZY.js";import{a as d}from"./chunk-FTQLQJQV.js";import{createInterface as _e}from"node:readline/promises";import{join as so,resolve as Me}from"node:path";import{homedir as io}from"node:os";import{createHash as Te,generateKeyPairSync as Fe,createPublicKey as Ye,diffieHellman as Ge,createDecipheriv as We}from"node:crypto";import{spawn as Ve}from"node:child_process";var Oe=d(e=>Te("sha256").update(e).digest("hex"),"hash"),Qe=g.object({publicKey:g.string().max(200),iv:g.string().max(100),tag:g.string().max(100),ciphertext:g.string().max(1e4)}).strict();async function X(e,t,o){let r=await fetch(`${e}${t}`,{method:"POST",redirect:"error",signal:AbortSignal.timeout(15e3),headers:{"Content-Type":"application/json"},body:JSON.stringify(o)}),n=await r.text();if(n.length>16384)throw new Error("Authorization response exceeded its limit.");if(!r.ok)throw Object.assign(new Error(`Browser sign-in failed (${r.status}).`),{status:r.status});return JSON.parse(n)}d(X,"post");function Xe(e){let t=process.platform==="darwin"?"open":process.platform==="win32"?"rundll32":"xdg-open",o=process.platform==="win32"?["url.dll,FileProtocolHandler",e]:[e],r=Ve(t,o,{stdio:"ignore",detached:!0});r.on("error",()=>{}),r.unref()}d(Xe,"openBrowser");async function ke(e,t){let o=await F(),r=$e(t)||o.apiBaseUrl||Ue,n=u(t,"baseUrl")||(new URL(r).hostname==="staging-api.openpond.ai"?"https://staging.openpond.ai":Ne(o)),i=new URL(n),c=new URL(r);for(let h of[i,c])if(h.protocol!=="https:"&&!(h.protocol==="http:"&&["localhost","127.0.0.1"].includes(h.hostname))||h.username||h.password||h.search||h.hash)throw new Error("Sign-in requires a clean HTTPS origin or local development origin.");let s=`import-${Oe([i.origin,e.machineId,e.instanceId].join(":")).slice(0,24)}`,a=Fe("x25519"),f=a.publicKey.export({format:"der",type:"spki"}).toString("base64"),l=g.object({deviceCode:g.string(),userCode:g.string(),expiresAt:g.string().datetime(),intervalSeconds:g.number().min(2).max(10)}).strict().parse(await X(i.origin,"/api/cli/import/device",{publicKey:f,machineId:e.machineId,sourceInstanceId:e.instanceId,sourceLabel:$[e.source],sourceRoot:e.root,...u(t,"team")?{requestedTeamId:u(t,"team")}:{}})),w=`${i.origin}/console/connections/authorize?code=${encodeURIComponent(l.userCode)}`;for(console.log(`OpenPond sign-in code: ${l.userCode}
-${w}`),Xe(w);Date.now()<Date.parse(l.expiresAt);){await new Promise(R=>setTimeout(R,l.intervalSeconds*1e3));let h;try{h=await X(i.origin,"/api/cli/import/token",{deviceCode:l.deviceCode})}catch(R){if(Number(R.status)===429)continue;throw R}let b=g.object({state:g.enum(["pending","approved","denied","consumed"]),envelope:Qe.nullable().optional()}).strict().parse(h);if(b.state==="denied"||b.state==="consumed")throw new Error("Browser sign-in was declined or already consumed. Start the connection again.");if(b.state!=="approved"||!b.envelope)continue;let m=b.envelope,p=Ye({key:Buffer.from(m.publicKey,"base64"),format:"der",type:"spki"});if(p.asymmetricKeyType!=="x25519")throw new Error("Invalid sign-in encryption key.");let C=Te("sha256").update(Ge({privateKey:a.privateKey,publicKey:p})).digest(),v=We("aes-256-gcm",C,Buffer.from(m.iv,"base64"));v.setAAD(Buffer.from(Oe(l.deviceCode))),v.setAuthTag(Buffer.from(m.tag,"base64"));let S=g.object({apiKey:g.string().min(1),teamId:g.string().min(1),expiresAt:g.string().datetime()}).strict().parse(JSON.parse(Buffer.concat([v.update(Buffer.from(m.ciphertext,"base64")),v.final()]).toString("utf8")));if(u(t,"team")&&S.teamId!==u(t,"team"))throw new Error("Browser approved a different workspace.");return await Re({handle:s,apiKey:S.apiKey,baseUrl:i.origin,apiBaseUrl:c.origin,setActive:!1}),await X(i.origin,"/api/cli/import/token",{deviceCode:l.deviceCode,acknowledge:!0}),{apiKey:S.apiKey,teamId:S.teamId,baseUrl:c.origin,account:s,accountBaseUrl:i.origin}}throw new Error("Browser sign-in expired. Start the connection again.")}d(ke,"authorizeImporter");import{homedir as Ze}from"node:os";import{join as eo}from"node:path";import{zstdCompressSync as oo}from"node:zlib";function je(e,t,o){if(t.connectionId!==e.id||!t.boundaryIds.length||new Set(t.boundaryIds).size!==t.boundaryIds.length)throw Object.assign(new Error("Retained source selection differs from its connection."),{status:400});if(o.issues.length)throw Object.assign(new Error("Retained source normalization failed."),{status:400});let r=o.sessions.find(n=>JSON.stringify([e.source.instanceId,n.sessionId,n.branchId])===t.sessionKey);if(!r||t.boundaryIds.some(n=>{let i=r.boundaries.find(s=>s.id===n),c=i?r.events[i.start]?.occurredAt:null;return!i||i.projection!=="turn"||i.terminal==="unknown"||!c||!Number.isFinite(Date.parse(c))||e.since!==null&&Date.parse(c)<Date.parse(e.since)}))throw Object.assign(new Error("Retained source boundaries changed; inspect the connection before resuming."),{status:400});return{...t,contentHash:r.contentHash,operationId:r.contentHash===t.contentHash?t.operationId:`sync-${x([t.operationId,"source-normalization",r.contentHash]).slice(0,48)}`}}d(je,"refreshRetainedAdmission");async function k(e){let t=await L(e.credentialHome??eo(Ze(),".openpond"),()=>F({account:e.account,baseUrl:e.accountBaseUrl})),o=e.account?t.apiKey:Ae(t);if(!o)throw Object.assign(new Error("This source is disconnected. Reconnect it with OpenPond Importer to authorize collection."),{status:401});let r={apiKey:o,baseUrl:e.apiBaseUrl,teamId:e.teamId};return{evidence:new xe(r),sync:new J(r)}}d(k,"collectorClients");var Z=null;async function ee(e,t,o){let r=AbortSignal.any([AbortSignal.timeout(6e4),...t?[t]:[]]);try{return await o(r)}catch(n){let i=n&&typeof n=="object"&&"status"in n?n.status:void 0;throw Object.assign(new Error(`Conversation import ${e} failed: ${n instanceof Error?n.message:String(n)}`,{cause:n}),typeof i=="number"?{status:i}:{})}}d(ee,"admissionStep");var Be={async publishCoverage(e,t,o){let{sync:r}=await k(e);await r.publishCoverage({id:e.id,expectedRevision:e.revision,manifest:t},AbortSignal.any([AbortSignal.timeout(6e4),...o?[o]:[]]))},async heartbeat(e,t,o){let{sync:r}=await k(e),n=await r.heartbeat({id:e.id,expectedRevision:e.revision,...t},AbortSignal.any([AbortSignal.timeout(6e4),...o?[o]:[]]));return{revision:n.revision,state:n.state,destinations:me(e,n),requestedSyncRevision:n.requestedSyncRevision,completedSyncRevision:n.completedSyncRevision}},async admit(e,t,o){let{evidence:r,sync:n}=await k(e),i=x([e.id,e.revision,e.apiBaseUrl,e.teamId,e.account,e.credentialHome,e.projectId,e.source.instanceId,t.branchLeafId,t.files]);if(Z?.key!==i){let m=Buffer.from(JSON.stringify(t.files.map(C=>({path:C.path,encoding:"zstd",base64:oo(Buffer.from(C.text)).toString("base64")})))),p=le({source:e.source.source,files:t.files,acquisition:{machineId:e.source.machineId,sourceInstanceId:e.source.instanceId},...t.branchLeafId?{branchLeafId:t.branchLeafId}:{}});Z={key:i,bytes:m,upload:{hash:ae(m),parts:Math.ceil(m.length/2e5)},nextPart:0,normalized:p}}let c=Z,s=je(e,t,c.normalized),a=c.upload;for(;c.nextPart<a.parts;){let m=c.nextPart,p=Math.min(4,a.parts-m),C=await Promise.allSettled(Array.from({length:p},(R,j)=>{let B=m+j;return ee(`upload part ${B+1}/${a.parts}`,o,K=>r.uploadPart({...a,index:B,base64:c.bytes.subarray(B*2e5,(B+1)*2e5).toString("base64")},K))})),v=C.findIndex(R=>R.status==="rejected");c.nextPart+=v<0?p:v;let S=C[v];if(S?.status==="rejected")throw S.reason}let f={upload:a,source:e.source.source,...t.branchLeafId?{branchLeafId:t.branchLeafId}:{},destination:{kind:"existing",projectId:e.projectId},acquisition:{machineId:e.source.machineId,sourceInstanceId:e.source.instanceId}},l=c.preview??=await ee("preview",o,m=>r.preview(f,m));if(l.issues.length)throw Object.assign(new Error("Source schema was rejected; inspect the connection before resuming."),{status:400});let w=l.sessions.find(m=>m.sessionHash===s.contentHash);if(!w||t.boundaryIds.some(m=>!w.boundaries.some(p=>p.id===m&&p.projection==="turn"&&p.terminal!=="unknown")))throw Object.assign(new Error("Server preview differs from the retained source boundaries."),{status:400});let h={...f,operationId:s.operationId,previewHash:l.previewHash,selection:[{sessionHash:w.sessionHash,boundaryIds:t.boundaryIds}]},b=Ee.parse(await ee("commit",o,m=>n.commit({connectionId:e.id,expectedRevision:e.revision,request:h},m)));if(b.state!=="completed"||b.operationId!==s.operationId||b.requestHash!==x(h)||b.projectId!==e.projectId)throw new Error("Admission did not acknowledge this retained operation.")}};function G(e){if(e.everyMinute!==void 0)throw new Error("Every-minute imports are no longer supported. Use --continual --hourly or a slower schedule.");let t=y(e.continual),o=["daily","weekly","hourly"].filter(a=>y(e[a]));e.cron!==void 0&&o.push("cron");let r=e.at!==void 0||e.on!==void 0;if(!t&&(o.length||r))throw new Error("Add --continual to enable recurring imports. Without it, imports run once.");if(!t)return null;if(o.length>1)throw new Error("Choose one cadence: --daily, --weekly, --hourly, or --cron.");if(e.off!==void 0)throw new Error("Choose --continual or --off, not both.");let n=o[0]??"daily";if(["cron","hourly"].includes(n)){if(r)throw new Error("--at and --on are for daily/weekly imports; use a cron expression for other times.");return n==="cron"?ge({frequency:"cron",expression:u(e,"cron")}):{frequency:"hourly"}}if(n!=="weekly"&&e.on!==void 0)throw new Error("--on selects a weekday and requires --weekly.");let i=we(e.at===void 0?"00:00":u(e,"at"));if(n==="daily")return{frequency:"daily",time:i};let c=e.on===void 0?"mon":u(e,"on").toLowerCase(),s=he.findIndex(a=>a===c);if(s<0)throw new Error("Use --on sun|mon|tue|wed|thu|fri|sat (default: mon).");return{frequency:"weekly",time:i,day:s}}d(G,"importSchedule");import{setTimeout as to}from"node:timers/promises";async function Pe(e){console.log("Importing saved conversations. Ctrl+C cancels this run; queued work is retained.");let t=0;try{for(;!e.signal.aborted;){let n=(await O(e.directory)).connections.filter(s=>!e.connectionId||s.id===e.connectionId).find(s=>s.run?.state==="running"),i=n?.run,c=n&&i?`${n.source}: ${i.phase} \xB7 ${i.processed}/${i.discovered} conversations checked \xB7 ${i.uploaded} turns uploaded \xB7 ${n.queued} queued`:"Starting import\u2026";process.stdout.clearLine(0),process.stdout.cursorTo(0),process.stdout.write(`${["|","/","-","\\"][t++%4]} ${c}`);try{await to(500,void 0,{signal:e.signal})}catch{if(!e.signal.aborted)throw new Error("Import progress interrupted.")}}}finally{process.stdout.clearLine(0),process.stdout.cursorTo(0)}}d(Pe,"monitorImport");async function P(e){let t=new AbortController,o=d(()=>t.abort(new Error("Import cancelled.")),"stop");process.once("SIGINT",o),process.once("SIGTERM",o);let r=new AbortController,n=!!process.stdin.isTTY&&!!process.stdout.isTTY&&!e.json,i;try{let s=be({directory:e.directory,signal:t.signal,until:e.until,...e.connectionId?{connectionIds:[e.connectionId]}:{},...e.retainedStart?{}:{trigger:e.scheduled?"scheduled":"manual"},transport:Be}).finally(()=>r.abort());await Promise.all([s,n?Pe({directory:e.directory,connectionId:e.connectionId,signal:r.signal}):Promise.resolve()]),i=await O(e.directory)}finally{r.abort(),process.off("SIGINT",o),process.off("SIGTERM",o)}let c=i.connections.filter(s=>!e.connectionId||s.id===e.connectionId);if(e.json)console.log(JSON.stringify(i,null,2));else for(let s of c){let a=s.run;a&&console.log(`${s.source}: ${a.state}. ${a.processed} conversations checked, ${a.uploaded} turns uploaded, ${s.queued} queued.${a.error?` ${a.error}`:""}`),console.log(s.schedule?`Continual imports: ${H(s.schedule)} (${i.timezone}). Next: ${s.nextRunAt??"source paused"}.`:"Automatic sync is off. Run openpond import sync to import again.")}return t.signal.aborted?process.exitCode=130:c.some(s=>s.run?.state==="failed")&&(process.exitCode=1),i}d(P,"runImportJob");import{readFile as no}from"node:fs/promises";async function oe(e){let t=await no(e);if(t.byteLength>1024*1024)throw new Error("Conversation selection exceeds 1 MiB.");return ue.parse(JSON.parse(t.toString("utf8")))}d(oe,"readUploadSelection");async function qe(e,t){let o=await _(e.source,await oe(t));return{...e,since:null,selectedSessionKeys:[...o.sessionKeys].sort()}}d(qe,"applyUploadSelection");function W(e){return{directory:e,executable:process.execPath,args:[...process.execArgv,process.argv[1]],environment:{...process.env.OPENPOND_HOME?{OPENPOND_HOME:process.env.OPENPOND_HOME}:{},...process.env.ELECTRON_RUN_AS_NODE==="1"?{ELECTRON_RUN_AS_NODE:"1"}:{}}}}d(W,"collectorSetup");async function He(e,t,o,r){let n=d(c=>console.log(JSON.stringify(c,null,2)),"print"),i=y(r.json);if(t==="status")return n(await O(e)),!0;if(t==="conversations"){if(!o)throw new Error("Use openpond import conversations <connection-id> [--query <text>] [--range day|week|all] [--offset <number>].");let c=await N.open(e);try{let s=c.connections().find(a=>a.id===o);if(!s)throw new Error("Select a retained connection from import status.");n({sourceInstanceId:s.source.instanceId,...fe(s,await pe(s.source),{query:u(r,"query"),range:u(r,"range")||"all",offset:Number(u(r,"offset")||"0")})})}finally{c.close()}return!0}if(t==="coverage"){if(!o)throw new Error("Use openpond import coverage <connection-id>.");let c=await N.open(e);try{if(!c.connections().some(a=>a.id===o))throw new Error("Select a retained connection from import status.");let s=c.coverage.manifest(o);if(!s)throw new Error("This connection has no retained source coverage. Run import sync first.");n({manifest:s,summary:c.coverage.summary(o)})}finally{c.close()}return!0}if(t==="cancel")return n(await Q(e,"stop")),!0;if(t==="schedule"){if(!o)throw new Error("Use openpond import schedule <connection-id> --continual [--daily|--weekly|--hourly|--cron <expression>] or --off.");let c=G(r),s=y(r.off);if(!c&&!s)throw new Error("Choose --continual [--daily|--weekly|--hourly|--cron <expression>] or --off.");return n(await M(W(e),o,c)),!0}if(t==="sync"){let c=await O(e);if(o&&!c.connections.some(a=>a.id===o&&a.state==="active"))throw new Error("Select an active connection from import status; resume or reconnect it first.");if(!c.connections.some(a=>a.state==="active"))throw new Error("No active sources. Connect or resume a source first.");let s=u(r,"selectionFile");if(s){if(!o)throw new Error("Select a connection ID when uploading chosen conversations.");if(c.running)throw new Error("Wait for the running import or cancel it before selecting more conversations.");let a=await N.open(e);try{let f=a.connections().find(w=>w.id===o);if(!f)throw new Error("The selected connection is unavailable.");let l=await qe(f,s);if(f.since!==null){let{sync:w}=await k(f),h=await w.register({id:f.id,source:f.source.source,machineId:f.source.machineId,sourceInstanceId:f.source.instanceId,sourceLabel:$[f.source.source],sourceRoot:f.source.root,destination:{kind:"existing",projectId:f.projectId},since:null,keepSyncing:f.keepSyncing,expectedRevision:f.revision});l={...l,revision:h.revision,state:h.state,requestedSyncRevision:h.requestedSyncRevision,completedSyncRevision:h.completedSyncRevision}}a.put(l)}finally{a.close()}}else if(!c.connections.some(a=>a.state==="active"&&(!o||a.id===o)&&a.selectedConversations!==0))throw new Error("Choose conversations first with --selection-file <path>.");return await P({directory:e,connectionId:o,json:i,until:u(r,"until")||void 0}),!0}if(t!=="service")return!1;if(o==="status")n(await O(e));else if(o==="stop")n(await Q(e,"stop"));else if(o==="uninstall")n(await Se(e));else if(o==="install")n(await Ie(W(e)));else if(o==="start")await P({directory:e,json:i});else if(o==="run")await P({directory:e,json:i,scheduled:y(r.scheduled),retainedStart:!y(r.scheduled)});else throw new Error("usage: openpond import service <install|start|stop|status|run|uninstall>");return!0}d(He,"runImporterControl");async function te(e,t){let o=await N.open(e),r;try{r=o.connections().find(n=>n.id===t)}finally{o.close()}if(!r)throw new Error("Select a retained connection from openpond import status.");if(r.source.machineId!==await z(e))throw new Error("This connection belongs to another machine. Use explicit Connect setup.");if(!r.accountBaseUrl)throw new Error("The original sign-in destination is unavailable. Use explicit Connect setup.");return r}d(te,"retainedReconnect");function Ke(e,t){if(!t?.available||!t.capabilities.history||t.source!==e.source.source||t.machineId!==e.source.machineId||t.instanceId!==e.source.instanceId||t.root!==e.source.root)throw new Error("The retained source is unavailable or its identity changed. Restore its original location or use explicit Connect setup.")}d(Ke,"assertReconnectSource");async function De(e,t){let o=await te(e,t.id),r=d(n=>({...n,destinations:void 0,requestedSyncRevision:n.requestedSyncRevision??0,completedSyncRevision:n.completedSyncRevision??0}),"scope");if(x(r(o))!==x(r(t)))throw new Error("The connection changed during sign-in. Reconnect again after reviewing its current scope.")}d(De,"assertReconnectUnchanged");import{createInterface as ro}from"node:readline/promises";async function Le(e,t,o,r){let n=u(r,"session");if(!o||!n)throw new Error("Use openpond import branches <connection-id> --session <native-session-id>.");let i=await ye(e,o,n);if(t==="branches"){console.log(JSON.stringify(i,null,2));return}let c=process.stdin.isTTY&&process.stdout.isTTY&&!y(r.json),s=u(r,"leaf"),a=u(r,"revision");if(!s&&c){i.branches.forEach((w,h)=>console.log(`${h+1}. ${w.title||w.leafId} (${w.messages} messages; ${w.updatedAt||"date unavailable"})`));let l=ro({input:process.stdin,output:process.stdout});try{s=i.branches[Number(await l.question("Choose the branch to sync: "))-1]?.leafId??"",a=i.revision}finally{l.close()}}if(!s||!a)throw new Error("Supply --leaf and --revision from import branches, or choose interactively. No branch was selected.");if(!i.branches.some(l=>l.leafId===s)||a!==i.revision)throw new Error("Branch selection is stale or invalid. Run import branches again.");if(!y(r.yes)&&(!c||!await Y("Sync only this branch and its unambiguous future continuation for this conversation? Other branches stay excluded.",!1)))throw new Error("Branch selection was not approved.");let f=await ve(e,o,n,{leafId:s,revision:a});console.log(JSON.stringify({...f,next:`openpond import resume ${o}`},null,2))}d(Le,"runImporterBranchCommand");async function $t(e,t){let[o="connect",r]=t,n=Me(u(e,"collectorDir")||Ce()),i=y(e.json),c=d(I=>console.log(JSON.stringify(I,null,2)),"print"),s=G(e),a=y(e.upload),f=u(e,"selectionFile");if(a&&!["connect","reconnect"].includes(o))throw new Error("Use --upload with import connect or reconnect; import sync is already an explicit upload.");if(f&&!["connect","reconnect","sync"].includes(o))throw new Error("Use --selection-file with connect, reconnect, or sync.");if(f&&o!=="sync"&&!a)throw new Error("Use --upload to confirm the selected initial upload.");if(s&&!a&&o==="connect")throw new Error("Select an initial upload with --upload before enabling continual imports.");if(e.until&&o!=="sync")throw new Error("Use --until with import sync to select a fixed event-time cutoff.");if(s&&!["connect","reconnect","schedule"].includes(o))throw new Error("Use --continual with import connect, reconnect, or schedule.");if(y(e.off)&&o!=="schedule")throw new Error("Use import schedule <connection-id> --off to disable recurring imports.");if(o==="branches"||o==="branch"){await Le(n,o,r,e);return}if(await He(n,o,r,e))return;if(["pause","resume","disconnect"].includes(o)){let I=await N.open(n),U;try{U=I.connections().find(Je=>Je.id===r)}finally{I.close()}if(!U)throw new Error("Select a connection id from openpond import status.");let{sync:A}=await k(U),q=await A.control({id:U.id,expectedRevision:U.revision,action:o});await V(n,{...U,revision:q.revision,state:q.state}),c(q);return}let l=o==="reconnect"?await te(n,r):null;l&&(e={...e,source:l.source.source,sourcePath:l.source.root,project:l.projectId,connection:l.id,team:l.teamId,apiBaseUrl:l.apiBaseUrl,baseUrl:l.accountBaseUrl});let w=u(e,"source");if(w&&!(w in $))throw new Error("Choose a supported native source name.");let h=await z(n),b=await ce({machineId:h,...w&&u(e,"sourcePath")?{locations:{[w]:Me(u(e,"sourcePath"))}}:{}});if(o==="discover"){c(b);return}if(o!=="connect"&&o!=="reconnect")throw new Error("usage: openpond import <connect|reconnect|discover|status|conversations|coverage|sync|schedule|cancel|pause|resume|disconnect|branches|branch|service>");let m=b.filter(I=>I.source===w),p=m.length===1?m[0]:void 0,C=process.stdin.isTTY&&process.stdout.isTTY&&!i;if(l&&Ke(l,p),!p&&C){let I=m.length>1?m:b.filter(A=>A.available);I.forEach((A,q)=>console.log(`${q+1}. ${$[A.source]}  ${A.root}${A.capabilities.history?"":` (${A.reason})`}`));let U=_e({input:process.stdin,output:process.stdout});try{p=I[Number(await U.question("Choose a source: "))-1]}finally{U.close()}}if(!p?.capabilities.history)throw new Error(p?.reason??(m.length>1?"Multiple source instances found. Select the exact --source-path or use interactive setup.":"Select --source and optionally --source-path."));let v=u(e,"range")||"week";if(a&&!l&&C&&!e.range){let I=_e({input:process.stdin,output:process.stdout});try{v=(await I.question("Initial history: day, week, or all [default: week]: ")).trim()||"week"}finally{I.close()}}if(!["day","week","all"].includes(v))throw new Error("--range must be day, week or all.");let S=f?null:l?l.since:v==="all"?null:new Date(Date.now()-(v==="day"?1:7)*864e5).toISOString(),R=l?S?`since ${S}`:"all":v==="week"?`last week${e.range?"":" (default)"}`:v==="day"?"last day":"all",j=f?await _(p,await oe(f)):null,B=j?j.sessionKeys:l?l.selectedSessionKeys:a?void 0:[],K=await de(p,{since:S??void 0,limit:100});i||console.log(`Found ${K.items.length}${K.nextCursor?"+":""} sessions in ${p.root}. Initial history: ${R}.`),i||console.log(a?s?`Continual imports: ${H(s)} local time. Continual learning is unchanged.`:"One-time import. Continual imports default to off; existing schedules are unchanged.":"Connect only. No conversations will be uploaded. Choose conversations with import sync --selection-file when ready.");let D=u(e,"project");if(!y(e.yes)&&(!C||!await Y(`Connect this source to ${D||"your personal Imported conversations Project"}${a?` and upload ${j?`${j.sessionKeys.length} selected conversations`:"the selected history window"}`:" without uploading history"}${s?` and enable continual imports ${H(s)} local time`:""}?`,!0)))throw new Error("Connection was not approved. No history was uploaded.");let ne=l?l.credentialHome??so(io(),".openpond"):ie(),T=await L(ne,()=>ke(p,e)),re=new J(T),se=u(e,"connection")||`sync-${x([T.baseUrl,T.teamId,p.instanceId,D||"default"]).slice(0,40)}`;l&&await De(n,l);let ze=(await re.list()).items.find(I=>I.id===se),E=await re.register({id:se,source:p.source,machineId:h,sourceInstanceId:p.instanceId,sourceLabel:$[p.source],sourceRoot:p.root,destination:D?{kind:"existing",projectId:D}:{kind:"new",name:"Imported conversations"},since:S,keepSyncing:!1,expectedRevision:ze?.revision??0});await V(n,{id:E.id,teamId:T.teamId,apiBaseUrl:T.baseUrl,account:T.account,accountBaseUrl:T.accountBaseUrl,credentialHome:ne,source:p,projectId:E.projectId,revision:E.revision,requestedSyncRevision:E.requestedSyncRevision,completedSyncRevision:E.completedSyncRevision,since:S,selectedSessionKeys:B,keepSyncing:!1,state:E.state}),s&&await M(W(n),E.id,s),a?await P({directory:n,connectionId:E.id,json:i}):i?c({connectionId:E.id,uploaded:!1}):console.log(`Connected ${E.id}. Choose conversations to upload when ready.`)}d($t,"runImportCommand");export{$t as runImportCommand};
+import{A as z,a as $,b as ce,c as le,d as de,g as ue,h as pe,i as L,j as fe,k as me,l as he,m as we,n as ge,o as H,p as N,q as ye,r as ve,s as be,t as V,u as O,v as Q,w as Ie,x as M,y as Se,z as Ce}from"./chunk-UH4JSSRL.js";import{k as Y}from"./chunk-GPL2Z65R.js";import{a as Ae}from"./chunk-SXMR6E2W.js";import"./chunk-2HAWOMZK.js";import"./chunk-SFKZITAG.js";import"./chunk-XRKFTPHD.js";import{c as $e,f as Ne}from"./chunk-BSHAIAXY.js";import"./chunk-XWPC3AN4.js";import{c as u,f as y}from"./chunk-3M53YXEI.js";import"./chunk-JFXINDOQ.js";import"./chunk-MILEWROZ.js";import{k as Ee,l as xe,m as J}from"./chunk-OTUBJV6C.js";import"./chunk-27JGS3KB.js";import"./chunk-BT5YNE5U.js";import{d as F,g as Re}from"./chunk-UTNGEMW5.js";import"./chunk-U2K7QJCG.js";import"./chunk-WSOUMXH3.js";import"./chunk-N42HT64M.js";import"./chunk-NG2L6D7G.js";import{b as Ue}from"./chunk-GLUWATL5.js";import"./chunk-OSVGNONV.js";import"./chunk-2LJCJOJ7.js";import"./chunk-YBNKGA5C.js";import"./chunk-LAOLJDVB.js";import"./chunk-UWHIU24L.js";import"./chunk-JCLTFDVW.js";import"./chunk-LV3CQ72P.js";import"./chunk-ABF3W2MO.js";import"./chunk-RV7PUSI2.js";import"./chunk-KCV5VN4X.js";import"./chunk-2EPR4HLF.js";import"./chunk-BKEDG3A4.js";import"./chunk-OE22TAXP.js";import{a as _,f as ie}from"./chunk-UGOK7VTC.js";import"./chunk-J572ANHX.js";import"./chunk-PBZCXPPC.js";import"./chunk-NJLULBTM.js";import{m as ae,n as x}from"./chunk-VVNV4NNW.js";import{A as g}from"./chunk-PF56N7ZY.js";import{a as d}from"./chunk-FTQLQJQV.js";import{createInterface as Le}from"node:readline/promises";import{join as so,resolve as Me}from"node:path";import{homedir as io}from"node:os";import{createHash as Te,generateKeyPairSync as Fe,createPublicKey as Ye,diffieHellman as Ge,createDecipheriv as We}from"node:crypto";import{spawn as Ve}from"node:child_process";var Oe=d(e=>Te("sha256").update(e).digest("hex"),"hash"),Qe=g.object({publicKey:g.string().max(200),iv:g.string().max(100),tag:g.string().max(100),ciphertext:g.string().max(1e4)}).strict();async function X(e,t,o){let r=await fetch(`${e}${t}`,{method:"POST",redirect:"error",signal:AbortSignal.timeout(15e3),headers:{"Content-Type":"application/json"},body:JSON.stringify(o)}),n=await r.text();if(n.length>16384)throw new Error("Authorization response exceeded its limit.");if(!r.ok)throw Object.assign(new Error(`Browser sign-in failed (${r.status}).`),{status:r.status});return JSON.parse(n)}d(X,"post");function Xe(e){let t=process.platform==="darwin"?"open":process.platform==="win32"?"rundll32":"xdg-open",o=process.platform==="win32"?["url.dll,FileProtocolHandler",e]:[e],r=Ve(t,o,{stdio:"ignore",detached:!0});r.on("error",()=>{}),r.unref()}d(Xe,"openBrowser");async function ke(e,t){let o=await F(),r=$e(t)||o.apiBaseUrl||Ue,n=u(t,"baseUrl")||Ne(o),i=new URL(n),c=new URL(r);for(let h of[i,c])if(h.protocol!=="https:"&&!(h.protocol==="http:"&&["localhost","127.0.0.1"].includes(h.hostname))||h.username||h.password||h.search||h.hash)throw new Error("Sign-in requires a clean HTTPS origin or local development origin.");let s=`import-${Oe([i.origin,e.machineId,e.instanceId].join(":")).slice(0,24)}`,a=Fe("x25519"),f=a.publicKey.export({format:"der",type:"spki"}).toString("base64"),l=g.object({deviceCode:g.string(),userCode:g.string(),expiresAt:g.string().datetime(),intervalSeconds:g.number().min(2).max(10)}).strict().parse(await X(i.origin,"/api/cli/import/device",{publicKey:f,machineId:e.machineId,sourceInstanceId:e.instanceId,sourceLabel:$[e.source],sourceRoot:e.root,...u(t,"team")?{requestedTeamId:u(t,"team")}:{}})),w=`${i.origin}/console/connections/authorize?code=${encodeURIComponent(l.userCode)}`;for(console.log(`OpenPond sign-in code: ${l.userCode}
+${w}`),Xe(w);Date.now()<Date.parse(l.expiresAt);){await new Promise(R=>setTimeout(R,l.intervalSeconds*1e3));let h;try{h=await X(i.origin,"/api/cli/import/token",{deviceCode:l.deviceCode})}catch(R){if(Number(R.status)===429)continue;throw R}let b=g.object({state:g.enum(["pending","approved","denied","consumed"]),envelope:Qe.nullable().optional()}).strict().parse(h);if(b.state==="denied"||b.state==="consumed")throw new Error("Browser sign-in was declined or already consumed. Start the connection again.");if(b.state!=="approved"||!b.envelope)continue;let m=b.envelope,p=Ye({key:Buffer.from(m.publicKey,"base64"),format:"der",type:"spki"});if(p.asymmetricKeyType!=="x25519")throw new Error("Invalid sign-in encryption key.");let C=Te("sha256").update(Ge({privateKey:a.privateKey,publicKey:p})).digest(),v=We("aes-256-gcm",C,Buffer.from(m.iv,"base64"));v.setAAD(Buffer.from(Oe(l.deviceCode))),v.setAuthTag(Buffer.from(m.tag,"base64"));let S=g.object({apiKey:g.string().min(1),teamId:g.string().min(1),expiresAt:g.string().datetime()}).strict().parse(JSON.parse(Buffer.concat([v.update(Buffer.from(m.ciphertext,"base64")),v.final()]).toString("utf8")));if(u(t,"team")&&S.teamId!==u(t,"team"))throw new Error("Browser approved a different workspace.");return await Re({handle:s,apiKey:S.apiKey,baseUrl:i.origin,apiBaseUrl:c.origin,setActive:!1}),await X(i.origin,"/api/cli/import/token",{deviceCode:l.deviceCode,acknowledge:!0}),{apiKey:S.apiKey,teamId:S.teamId,baseUrl:c.origin,account:s,accountBaseUrl:i.origin}}throw new Error("Browser sign-in expired. Start the connection again.")}d(ke,"authorizeImporter");import{homedir as Ze}from"node:os";import{join as eo}from"node:path";import{zstdCompressSync as oo}from"node:zlib";function je(e,t,o){if(t.connectionId!==e.id||!t.boundaryIds.length||new Set(t.boundaryIds).size!==t.boundaryIds.length)throw Object.assign(new Error("Retained source selection differs from its connection."),{status:400});if(o.issues.length)throw Object.assign(new Error("Retained source normalization failed."),{status:400});let r=o.sessions.find(n=>JSON.stringify([e.source.instanceId,n.sessionId,n.branchId])===t.sessionKey);if(!r||t.boundaryIds.some(n=>{let i=r.boundaries.find(s=>s.id===n),c=i?r.events[i.start]?.occurredAt:null;return!i||i.projection!=="turn"||i.terminal==="unknown"||!c||!Number.isFinite(Date.parse(c))||e.since!==null&&Date.parse(c)<Date.parse(e.since)}))throw Object.assign(new Error("Retained source boundaries changed; inspect the connection before resuming."),{status:400});return{...t,contentHash:r.contentHash,operationId:r.contentHash===t.contentHash?t.operationId:`sync-${x([t.operationId,"source-normalization",r.contentHash]).slice(0,48)}`}}d(je,"refreshRetainedAdmission");async function k(e){let t=await _(e.credentialHome??eo(Ze(),".openpond"),()=>F({account:e.account,baseUrl:e.accountBaseUrl})),o=e.account?t.apiKey:Ae(t);if(!o)throw Object.assign(new Error("This source is disconnected. Reconnect it with OpenPond Importer to authorize collection."),{status:401});let r={apiKey:o,baseUrl:e.apiBaseUrl,teamId:e.teamId};return{evidence:new xe(r),sync:new J(r)}}d(k,"collectorClients");var Z=null;async function ee(e,t,o){let r=AbortSignal.any([AbortSignal.timeout(6e4),...t?[t]:[]]);try{return await o(r)}catch(n){let i=n&&typeof n=="object"&&"status"in n?n.status:void 0;throw Object.assign(new Error(`Conversation import ${e} failed: ${n instanceof Error?n.message:String(n)}`,{cause:n}),typeof i=="number"?{status:i}:{})}}d(ee,"admissionStep");var Be={async publishCoverage(e,t,o){let{sync:r}=await k(e);await r.publishCoverage({id:e.id,expectedRevision:e.revision,manifest:t},AbortSignal.any([AbortSignal.timeout(6e4),...o?[o]:[]]))},async heartbeat(e,t,o){let{sync:r}=await k(e),n=await r.heartbeat({id:e.id,expectedRevision:e.revision,...t},AbortSignal.any([AbortSignal.timeout(6e4),...o?[o]:[]]));return{revision:n.revision,state:n.state,destinations:me(e,n),requestedSyncRevision:n.requestedSyncRevision,completedSyncRevision:n.completedSyncRevision}},async admit(e,t,o){let{evidence:r,sync:n}=await k(e),i=x([e.id,e.revision,e.apiBaseUrl,e.teamId,e.account,e.credentialHome,e.projectId,e.source.instanceId,t.branchLeafId,t.files]);if(Z?.key!==i){let m=Buffer.from(JSON.stringify(t.files.map(C=>({path:C.path,encoding:"zstd",base64:oo(Buffer.from(C.text)).toString("base64")})))),p=le({source:e.source.source,files:t.files,acquisition:{machineId:e.source.machineId,sourceInstanceId:e.source.instanceId},...t.branchLeafId?{branchLeafId:t.branchLeafId}:{}});Z={key:i,bytes:m,upload:{hash:ae(m),parts:Math.ceil(m.length/2e5)},nextPart:0,normalized:p}}let c=Z,s=je(e,t,c.normalized),a=c.upload;for(;c.nextPart<a.parts;){let m=c.nextPart,p=Math.min(4,a.parts-m),C=await Promise.allSettled(Array.from({length:p},(R,j)=>{let B=m+j;return ee(`upload part ${B+1}/${a.parts}`,o,K=>r.uploadPart({...a,index:B,base64:c.bytes.subarray(B*2e5,(B+1)*2e5).toString("base64")},K))})),v=C.findIndex(R=>R.status==="rejected");c.nextPart+=v<0?p:v;let S=C[v];if(S?.status==="rejected")throw S.reason}let f={upload:a,source:e.source.source,...t.branchLeafId?{branchLeafId:t.branchLeafId}:{},destination:{kind:"existing",projectId:e.projectId},acquisition:{machineId:e.source.machineId,sourceInstanceId:e.source.instanceId}},l=c.preview??=await ee("preview",o,m=>r.preview(f,m));if(l.issues.length)throw Object.assign(new Error("Source schema was rejected; inspect the connection before resuming."),{status:400});let w=l.sessions.find(m=>m.sessionHash===s.contentHash);if(!w||t.boundaryIds.some(m=>!w.boundaries.some(p=>p.id===m&&p.projection==="turn"&&p.terminal!=="unknown")))throw Object.assign(new Error("Server preview differs from the retained source boundaries."),{status:400});let h={...f,operationId:s.operationId,previewHash:l.previewHash,selection:[{sessionHash:w.sessionHash,boundaryIds:t.boundaryIds}]},b=Ee.parse(await ee("commit",o,m=>n.commit({connectionId:e.id,expectedRevision:e.revision,request:h},m)));if(b.state!=="completed"||b.operationId!==s.operationId||b.requestHash!==x(h)||b.projectId!==e.projectId)throw new Error("Admission did not acknowledge this retained operation.")}};function G(e){if(e.everyMinute!==void 0)throw new Error("Every-minute imports are no longer supported. Use --continual --hourly or a slower schedule.");let t=y(e.continual),o=["daily","weekly","hourly"].filter(a=>y(e[a]));e.cron!==void 0&&o.push("cron");let r=e.at!==void 0||e.on!==void 0;if(!t&&(o.length||r))throw new Error("Add --continual to enable recurring imports. Without it, imports run once.");if(!t)return null;if(o.length>1)throw new Error("Choose one cadence: --daily, --weekly, --hourly, or --cron.");if(e.off!==void 0)throw new Error("Choose --continual or --off, not both.");let n=o[0]??"daily";if(["cron","hourly"].includes(n)){if(r)throw new Error("--at and --on are for daily/weekly imports; use a cron expression for other times.");return n==="cron"?ge({frequency:"cron",expression:u(e,"cron")}):{frequency:"hourly"}}if(n!=="weekly"&&e.on!==void 0)throw new Error("--on selects a weekday and requires --weekly.");let i=we(e.at===void 0?"00:00":u(e,"at"));if(n==="daily")return{frequency:"daily",time:i};let c=e.on===void 0?"mon":u(e,"on").toLowerCase(),s=he.findIndex(a=>a===c);if(s<0)throw new Error("Use --on sun|mon|tue|wed|thu|fri|sat (default: mon).");return{frequency:"weekly",time:i,day:s}}d(G,"importSchedule");import{setTimeout as to}from"node:timers/promises";async function Pe(e){console.log("Importing saved conversations. Ctrl+C cancels this run; queued work is retained.");let t=0;try{for(;!e.signal.aborted;){let n=(await O(e.directory)).connections.filter(s=>!e.connectionId||s.id===e.connectionId).find(s=>s.run?.state==="running"),i=n?.run,c=n&&i?`${n.source}: ${i.phase} \xB7 ${i.processed}/${i.discovered} conversations checked \xB7 ${i.uploaded} turns uploaded \xB7 ${n.queued} queued`:"Starting import\u2026";process.stdout.clearLine(0),process.stdout.cursorTo(0),process.stdout.write(`${["|","/","-","\\"][t++%4]} ${c}`);try{await to(500,void 0,{signal:e.signal})}catch{if(!e.signal.aborted)throw new Error("Import progress interrupted.")}}}finally{process.stdout.clearLine(0),process.stdout.cursorTo(0)}}d(Pe,"monitorImport");async function P(e){let t=new AbortController,o=d(()=>t.abort(new Error("Import cancelled.")),"stop");process.once("SIGINT",o),process.once("SIGTERM",o);let r=new AbortController,n=!!process.stdin.isTTY&&!!process.stdout.isTTY&&!e.json,i;try{let s=be({directory:e.directory,signal:t.signal,until:e.until,...e.connectionId?{connectionIds:[e.connectionId]}:{},...e.retainedStart?{}:{trigger:e.scheduled?"scheduled":"manual"},transport:Be}).finally(()=>r.abort());await Promise.all([s,n?Pe({directory:e.directory,connectionId:e.connectionId,signal:r.signal}):Promise.resolve()]),i=await O(e.directory)}finally{r.abort(),process.off("SIGINT",o),process.off("SIGTERM",o)}let c=i.connections.filter(s=>!e.connectionId||s.id===e.connectionId);if(e.json)console.log(JSON.stringify(i,null,2));else for(let s of c){let a=s.run;a&&console.log(`${s.source}: ${a.state}. ${a.processed} conversations checked, ${a.uploaded} turns uploaded, ${s.queued} queued.${a.error?` ${a.error}`:""}`),console.log(s.schedule?`Continual imports: ${H(s.schedule)} (${i.timezone}). Next: ${s.nextRunAt??"source paused"}.`:"Automatic sync is off. Run openpond import sync to import again.")}return t.signal.aborted?process.exitCode=130:c.some(s=>s.run?.state==="failed")&&(process.exitCode=1),i}d(P,"runImportJob");import{readFile as no}from"node:fs/promises";async function oe(e){let t=await no(e);if(t.byteLength>1024*1024)throw new Error("Conversation selection exceeds 1 MiB.");return ue.parse(JSON.parse(t.toString("utf8")))}d(oe,"readUploadSelection");async function qe(e,t){let o=await L(e.source,await oe(t));return{...e,since:null,selectedSessionKeys:[...o.sessionKeys].sort()}}d(qe,"applyUploadSelection");function W(e){return{directory:e,executable:process.execPath,args:[...process.execArgv,process.argv[1]],environment:{...process.env.OPENPOND_HOME?{OPENPOND_HOME:process.env.OPENPOND_HOME}:{},...process.env.ELECTRON_RUN_AS_NODE==="1"?{ELECTRON_RUN_AS_NODE:"1"}:{}}}}d(W,"collectorSetup");async function He(e,t,o,r){let n=d(c=>console.log(JSON.stringify(c,null,2)),"print"),i=y(r.json);if(t==="status")return n(await O(e)),!0;if(t==="conversations"){if(!o)throw new Error("Use openpond import conversations <connection-id> [--query <text>] [--range day|week|all] [--offset <number>].");let c=await N.open(e);try{let s=c.connections().find(a=>a.id===o);if(!s)throw new Error("Select a retained connection from import status.");n({sourceInstanceId:s.source.instanceId,...fe(s,await pe(s.source),{query:u(r,"query"),range:u(r,"range")||"all",offset:Number(u(r,"offset")||"0")})})}finally{c.close()}return!0}if(t==="coverage"){if(!o)throw new Error("Use openpond import coverage <connection-id>.");let c=await N.open(e);try{if(!c.connections().some(a=>a.id===o))throw new Error("Select a retained connection from import status.");let s=c.coverage.manifest(o);if(!s)throw new Error("This connection has no retained source coverage. Run import sync first.");n({manifest:s,summary:c.coverage.summary(o)})}finally{c.close()}return!0}if(t==="cancel")return n(await Q(e,"stop")),!0;if(t==="schedule"){if(!o)throw new Error("Use openpond import schedule <connection-id> --continual [--daily|--weekly|--hourly|--cron <expression>] or --off.");let c=G(r),s=y(r.off);if(!c&&!s)throw new Error("Choose --continual [--daily|--weekly|--hourly|--cron <expression>] or --off.");return n(await M(W(e),o,c)),!0}if(t==="sync"){let c=await O(e);if(o&&!c.connections.some(a=>a.id===o&&a.state==="active"))throw new Error("Select an active connection from import status; resume or reconnect it first.");if(!c.connections.some(a=>a.state==="active"))throw new Error("No active sources. Connect or resume a source first.");let s=u(r,"selectionFile");if(s){if(!o)throw new Error("Select a connection ID when uploading chosen conversations.");if(c.running)throw new Error("Wait for the running import or cancel it before selecting more conversations.");let a=await N.open(e);try{let f=a.connections().find(w=>w.id===o);if(!f)throw new Error("The selected connection is unavailable.");let l=await qe(f,s);if(f.since!==null){let{sync:w}=await k(f),h=await w.register({id:f.id,source:f.source.source,machineId:f.source.machineId,sourceInstanceId:f.source.instanceId,sourceLabel:$[f.source.source],sourceRoot:f.source.root,destination:{kind:"existing",projectId:f.projectId},since:null,keepSyncing:f.keepSyncing,expectedRevision:f.revision});l={...l,revision:h.revision,state:h.state,requestedSyncRevision:h.requestedSyncRevision,completedSyncRevision:h.completedSyncRevision}}a.put(l)}finally{a.close()}}else if(!c.connections.some(a=>a.state==="active"&&(!o||a.id===o)&&a.selectedConversations!==0))throw new Error("Choose conversations first with --selection-file <path>.");return await P({directory:e,connectionId:o,json:i,until:u(r,"until")||void 0}),!0}if(t!=="service")return!1;if(o==="status")n(await O(e));else if(o==="stop")n(await Q(e,"stop"));else if(o==="uninstall")n(await Se(e));else if(o==="install")n(await Ie(W(e)));else if(o==="start")await P({directory:e,json:i});else if(o==="run")await P({directory:e,json:i,scheduled:y(r.scheduled),retainedStart:!y(r.scheduled)});else throw new Error("usage: openpond import service <install|start|stop|status|run|uninstall>");return!0}d(He,"runImporterControl");async function te(e,t){let o=await N.open(e),r;try{r=o.connections().find(n=>n.id===t)}finally{o.close()}if(!r)throw new Error("Select a retained connection from openpond import status.");if(r.source.machineId!==await z(e))throw new Error("This connection belongs to another machine. Use explicit Connect setup.");if(!r.accountBaseUrl)throw new Error("The original sign-in destination is unavailable. Use explicit Connect setup.");return r}d(te,"retainedReconnect");function Ke(e,t){if(!t?.available||!t.capabilities.history||t.source!==e.source.source||t.machineId!==e.source.machineId||t.instanceId!==e.source.instanceId||t.root!==e.source.root)throw new Error("The retained source is unavailable or its identity changed. Restore its original location or use explicit Connect setup.")}d(Ke,"assertReconnectSource");async function De(e,t){let o=await te(e,t.id),r=d(n=>({...n,destinations:void 0,requestedSyncRevision:n.requestedSyncRevision??0,completedSyncRevision:n.completedSyncRevision??0}),"scope");if(x(r(o))!==x(r(t)))throw new Error("The connection changed during sign-in. Reconnect again after reviewing its current scope.")}d(De,"assertReconnectUnchanged");import{createInterface as ro}from"node:readline/promises";async function _e(e,t,o,r){let n=u(r,"session");if(!o||!n)throw new Error("Use openpond import branches <connection-id> --session <native-session-id>.");let i=await ye(e,o,n);if(t==="branches"){console.log(JSON.stringify(i,null,2));return}let c=process.stdin.isTTY&&process.stdout.isTTY&&!y(r.json),s=u(r,"leaf"),a=u(r,"revision");if(!s&&c){i.branches.forEach((w,h)=>console.log(`${h+1}. ${w.title||w.leafId} (${w.messages} messages; ${w.updatedAt||"date unavailable"})`));let l=ro({input:process.stdin,output:process.stdout});try{s=i.branches[Number(await l.question("Choose the branch to sync: "))-1]?.leafId??"",a=i.revision}finally{l.close()}}if(!s||!a)throw new Error("Supply --leaf and --revision from import branches, or choose interactively. No branch was selected.");if(!i.branches.some(l=>l.leafId===s)||a!==i.revision)throw new Error("Branch selection is stale or invalid. Run import branches again.");if(!y(r.yes)&&(!c||!await Y("Sync only this branch and its unambiguous future continuation for this conversation? Other branches stay excluded.",!1)))throw new Error("Branch selection was not approved.");let f=await ve(e,o,n,{leafId:s,revision:a});console.log(JSON.stringify({...f,next:`openpond import resume ${o}`},null,2))}d(_e,"runImporterBranchCommand");async function $t(e,t){let[o="connect",r]=t,n=Me(u(e,"collectorDir")||Ce()),i=y(e.json),c=d(I=>console.log(JSON.stringify(I,null,2)),"print"),s=G(e),a=y(e.upload),f=u(e,"selectionFile");if(a&&!["connect","reconnect"].includes(o))throw new Error("Use --upload with import connect or reconnect; import sync is already an explicit upload.");if(f&&!["connect","reconnect","sync"].includes(o))throw new Error("Use --selection-file with connect, reconnect, or sync.");if(f&&o!=="sync"&&!a)throw new Error("Use --upload to confirm the selected initial upload.");if(s&&!a&&o==="connect")throw new Error("Select an initial upload with --upload before enabling continual imports.");if(e.until&&o!=="sync")throw new Error("Use --until with import sync to select a fixed event-time cutoff.");if(s&&!["connect","reconnect","schedule"].includes(o))throw new Error("Use --continual with import connect, reconnect, or schedule.");if(y(e.off)&&o!=="schedule")throw new Error("Use import schedule <connection-id> --off to disable recurring imports.");if(o==="branches"||o==="branch"){await _e(n,o,r,e);return}if(await He(n,o,r,e))return;if(["pause","resume","disconnect"].includes(o)){let I=await N.open(n),U;try{U=I.connections().find(Je=>Je.id===r)}finally{I.close()}if(!U)throw new Error("Select a connection id from openpond import status.");let{sync:A}=await k(U),q=await A.control({id:U.id,expectedRevision:U.revision,action:o});await V(n,{...U,revision:q.revision,state:q.state}),c(q);return}let l=o==="reconnect"?await te(n,r):null;l&&(e={...e,source:l.source.source,sourcePath:l.source.root,project:l.projectId,connection:l.id,team:l.teamId,apiBaseUrl:l.apiBaseUrl,baseUrl:l.accountBaseUrl});let w=u(e,"source");if(w&&!(w in $))throw new Error("Choose a supported native source name.");let h=await z(n),b=await ce({machineId:h,...w&&u(e,"sourcePath")?{locations:{[w]:Me(u(e,"sourcePath"))}}:{}});if(o==="discover"){c(b);return}if(o!=="connect"&&o!=="reconnect")throw new Error("usage: openpond import <connect|reconnect|discover|status|conversations|coverage|sync|schedule|cancel|pause|resume|disconnect|branches|branch|service>");let m=b.filter(I=>I.source===w),p=m.length===1?m[0]:void 0,C=process.stdin.isTTY&&process.stdout.isTTY&&!i;if(l&&Ke(l,p),!p&&C){let I=m.length>1?m:b.filter(A=>A.available);I.forEach((A,q)=>console.log(`${q+1}. ${$[A.source]}  ${A.root}${A.capabilities.history?"":` (${A.reason})`}`));let U=Le({input:process.stdin,output:process.stdout});try{p=I[Number(await U.question("Choose a source: "))-1]}finally{U.close()}}if(!p?.capabilities.history)throw new Error(p?.reason??(m.length>1?"Multiple source instances found. Select the exact --source-path or use interactive setup.":"Select --source and optionally --source-path."));let v=u(e,"range")||"week";if(a&&!l&&C&&!e.range){let I=Le({input:process.stdin,output:process.stdout});try{v=(await I.question("Initial history: day, week, or all [default: week]: ")).trim()||"week"}finally{I.close()}}if(!["day","week","all"].includes(v))throw new Error("--range must be day, week or all.");let S=f?null:l?l.since:v==="all"?null:new Date(Date.now()-(v==="day"?1:7)*864e5).toISOString(),R=l?S?`since ${S}`:"all":v==="week"?`last week${e.range?"":" (default)"}`:v==="day"?"last day":"all",j=f?await L(p,await oe(f)):null,B=j?j.sessionKeys:l?l.selectedSessionKeys:a?void 0:[],K=await de(p,{since:S??void 0,limit:100});i||console.log(`Found ${K.items.length}${K.nextCursor?"+":""} sessions in ${p.root}. Initial history: ${R}.`),i||console.log(a?s?`Continual imports: ${H(s)} local time. Continual learning is unchanged.`:"One-time import. Continual imports default to off; existing schedules are unchanged.":"Connect only. No conversations will be uploaded. Choose conversations with import sync --selection-file when ready.");let D=u(e,"project");if(!y(e.yes)&&(!C||!await Y(`Connect this source to ${D||"your personal Imported conversations Project"}${a?` and upload ${j?`${j.sessionKeys.length} selected conversations`:"the selected history window"}`:" without uploading history"}${s?` and enable continual imports ${H(s)} local time`:""}?`,!0)))throw new Error("Connection was not approved. No history was uploaded.");let ne=l?l.credentialHome??so(io(),".openpond"):ie(),T=await _(ne,()=>ke(p,e)),re=new J(T),se=u(e,"connection")||`sync-${x([T.baseUrl,T.teamId,p.instanceId,D||"default"]).slice(0,40)}`;l&&await De(n,l);let ze=(await re.list()).items.find(I=>I.id===se),E=await re.register({id:se,source:p.source,machineId:h,sourceInstanceId:p.instanceId,sourceLabel:$[p.source],sourceRoot:p.root,destination:D?{kind:"existing",projectId:D}:{kind:"new",name:"Imported conversations"},since:S,keepSyncing:!1,expectedRevision:ze?.revision??0});await V(n,{id:E.id,teamId:T.teamId,apiBaseUrl:T.baseUrl,account:T.account,accountBaseUrl:T.accountBaseUrl,credentialHome:ne,source:p,projectId:E.projectId,revision:E.revision,requestedSyncRevision:E.requestedSyncRevision,completedSyncRevision:E.completedSyncRevision,since:S,selectedSessionKeys:B,keepSyncing:!1,state:E.state}),s&&await M(W(n),E.id,s),a?await P({directory:n,connectionId:E.id,json:i}):i?c({connectionId:E.id,uploaded:!1}):console.log(`Connected ${E.id}. Choose conversations to upload when ready.`)}d($t,"runImportCommand");export{$t as runImportCommand};

package/dist/chunks/learning-HM3NWOV5.js

@@ -0,0 +1,2 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{$ as aa,$a as ab,$b as ac,A as B,Aa as Ba,Ab as Bb,B as C,Ba as Ca,Bb as Cb,C as D,Ca as Da,Cb as Db,D as E,Da as Ea,Db as Eb,E as F,Ea as Fa,Eb as Fb,F as G,Fa as Ga,Fb as Gb,G as H,Ga as Ha,Gb as Hb,H as I,Ha as Ia,Hb as Ib,I as J,Ia as Ja,Ib as Jb,J as K,Ja as Ka,Jb as Kb,K as L,Ka as La,Kb as Lb,L as M,La as Ma,Lb as Mb,M as N,Ma as Na,Mb as Nb,N as O,Na as Oa,Nb as Ob,O as P,Oa as Pa,Ob as Pb,P as Q,Pa as Qa,Pb as Qb,Q as R,Qa as Ra,Qb as Rb,R as S,Ra as Sa,Rb as Sb,S as T,Sa as Ta,Sb as Tb,T as U,Ta as Ua,Tb as Ub,U as V,Ua as Va,Ub as Vb,V as W,Va as Wa,Vb as Wb,W as X,Wa as Xa,Wb as Xb,X as Y,Xa as Ya,Xb as Yb,Y as Z,Ya as Za,Yb as Zb,Z as _,Za as _a,Zb as _b,_ as $,_a as $a,_b as $b,a as b,aa as ba,ab as bb,ac as bc,b as c,ba as ca,bb as cb,bc as cc,c as d,ca as da,cb as db,cc as dc,d as e,da as ea,db as eb,dc as ec,e as f,ea as fa,eb as fb,ec as fc,f as g,fa as ga,fb as gb,fc as gc,g as h,ga as ha,gb as hb,gc as hc,h as i,ha as ia,hb as ib,hc as ic,i as j,ia as ja,ib as jb,ic as jc,j as k,ja as ka,jb as kb,jc as kc,k as l,ka as la,kb as lb,kc as lc,l as m,la as ma,lb as mb,lc as mc,m as n,ma as na,mb as nb,mc as nc,n as o,na as oa,nb as ob,nc as oc,o as p,oa as pa,ob as pb,oc as pc,p as q,pa as qa,pb as qb,pc as qc,q as r,qa as ra,qb as rb,qc as rc,r as s,ra as sa,rb as sb,rc as sc,s as t,sa as ta,sb as tb,sc as tc,t as u,ta as ua,tb as ub,tc as uc,u as v,ua as va,ub as vb,v as w,va as wa,vb as wb,w as x,wa as xa,wb as xb,x as y,xa as ya,xb as yb,y as z,ya as za,yb as zb,z as A,za as Aa,zb as Ab}from"./chunk-J572ANHX.js";import{t as a}from"./chunk-PBZCXPPC.js";import"./chunk-NJLULBTM.js";import"./chunk-VVNV4NNW.js";import"./chunk-PF56N7ZY.js";import"./chunk-FTQLQJQV.js";export{gc as AcceptanceAttemptSchema,_b as AcceptanceCheckSchema,ec as AcceptanceGroupManifestContentSchema,fc as AcceptanceGroupManifestSchema,hc as AcceptanceGroupSnapshotContentSchema,ic as AcceptanceGroupSnapshotSchema,cc as AcceptanceMeasurementSchema,$b as AcceptancePlanContentSchema,ac as AcceptancePlanSchema,Ea as ApplyTaskCorrectionCommandSchema,La as ArchiveAuthoringDraftCommandSchema,pa as AuthoringDraftContentSchema,ra as AuthoringDraftFinalizationSchema,oa as AuthoringDraftInputSchema,qa as AuthoringDraftSchema,na as AuthoringTargetKindSchema,h as BoundJudgeResponseSchema,Ra as CancelLearningIterationCommandSchema,Qa as CancelLearningIterationReservationCommandSchema,Na as CancelRewardCheckCommandSchema,Ja as CancelTaskGradeCommandSchema,ma as CombinedRewardAuthoringFieldsSchema,tc as CorrectionMetricObservationSchema,uc as CorrectionMetricSummarySchema,sc as CorrectionOpportunitySchema,pc as CorrectionVerificationCheckSchema,qc as CorrectionVerificationPlanContentSchema,rc as CorrectionVerificationPlanSchema,Za as DEFAULT_REWARD_VERIFIER_SOURCE,za as ImportTaskIntakeCommandSchema,j as JudgeCallReservationSchema,K as LearningAcceptedParentSchema,Xb as LearningCandidateDecisionObservationSchema,fa as LearningChainSchema,Bb as LearningCommandRequestSchema,Ta as LearningCommandSchema,mb as LearningConflictError,ha as LearningConsumptionSchema,f as LearningContinuationModeOverrideSchema,a as LearningDomainError,ga as LearningEligibilityCountsSchema,Va as LearningIterationDispatchSchema,Wa as LearningIterationObservationSchema,ia as LearningIterationReservationSchema,M as LearningIterationSchema,L as LearningIterationStatusSchema,Ua as LearningIterationSubmissionSchema,ea as LearningIterationTriggerSchema,p as LearningJsonObjectSchema,r as LearningJsonPointerSchema,Eb as LearningOperationResultSchema,I as LearningPolicyContentSchema,ub as LearningPolicyInspectionResultSchema,J as LearningPolicySchema,Cb as LearningReadRequestSchema,lb as LearningResourceKindSchema,O as LearningResourceSchema,v as LearningReviewOriginSchema,q as LearningRevisionRefSchema,Ya as LearningScheduleFireSchema,Xa as LearningScheduleSchema,w as LearningSourceContentSchema,x as LearningSourceSchema,yb as LearningTaskQueueInspectionSchema,b as LearningTextAssetContentSchema,c as LearningTextAssetSchema,Pb as MAX_REWARD_CALIBRATION_CLOSURE_BYTES,m as NightlyScheduleSchema,Oa as PublishCheckedRewardCommandSchema,Aa as PublishLearningResourceCommandSchema,Ba as PublishLearningResourcesCommandSchema,Ma as QueueRewardCheckCommandSchema,Ga as QueueTaskGradeCommandSchema,Pa as ReserveLearningIterationCommandSchema,Fa as ResolveTaskFeedbackCommandSchema,Sa as RetryLearningIterationDispatchCommandSchema,Ha as ReviewTaskEvidenceCommandSchema,ka as RewardAuthoringFieldsSchema,Qb as RewardCalibrationClosureSchema,fb as RewardCheckRunSchema,db as RewardCheckRuntimeSchema,ja as RewardFixtureAuthoringFieldsSchema,eb as RewardFixtureCheckResultSchema,cb as RewardFixtureSchema,Ka as SaveAuthoringDraftCommandSchema,Ia as SealTaskBatchCommandSchema,Ca as SubmitTaskExampleCommandSchema,Da as SubmitTaskFeedbackCommandSchema,sa as TASK_INTAKE_LIMITS,E as TaskAdmissionDecisionContentSchema,F as TaskAdmissionDecisionSchema,G as TaskBatchContentSchema,ba as TaskBatchPackageMetadataSchema,H as TaskBatchSchema,s as TaskDefinitionContentSchema,t as TaskDefinitionSchema,z as TaskEvidenceContentSchema,Db as TaskEvidenceInspectionResultSchema,A as TaskEvidenceSchema,y as TaskExampleSubmissionSchema,D as TaskFeedbackSchema,C as TaskFeedbackSubmissionSchema,la as TaskFormatAuthoringFieldsSchema,N as TaskGradeRunSchema,ua as TaskIntakeFileSchema,ta as TaskIntakeFormatSchema,wa as TaskIntakePreviewSchema,va as TaskIntakeRecordSchema,B as TaskRatingSchema,u as TaskSourceMappingSchema,g as TrainingHandoffOriginSchema,oc as acceptanceGroupVerdict,nc as assertAcceptanceBaselineReuse,lc as assertAcceptanceGroupSnapshot,mc as assertAcceptanceGroupUpdate,Z as assertAdmissionDecision,_ as assertGradeIdentity,S as assertLearningContentHash,Ab as assertLearningRequestJson,xb as assertRewardCalibration,bb as authoringNumber,o as coalesceNightlyOccurrences,_a as compileRewardAuthoring,hb as compileRewardCheck,gb as compileRewardFixtures,ca as compileTaskBatch,jc as createAcceptanceGroupManifest,kc as createAcceptanceGroupSnapshot,bc as createAcceptancePlan,i as createBoundModelJudgeRunner,l as createBudgetedJudgeExecutor,Ob as createBudgetedRewardFixtureExecutor,Ib as createBuiltinTaskGradeExecutor,Nb as createIsolatedRewardFixtureExecutor,Wb as createLearningIterationWorker,Zb as createLearningScheduleWorker,Hb as createLearningService,d as createLearningTextAsset,Sb as createRewardCalibrationClosure,Lb as createRewardCheckJudgeBudgetStore,Vb as createRewardCheckWorker,Mb as createTaskGradeJudgeBudgetStore,Jb as createTaskGradeWorker,Fb as decodeTaskIntakeText,dc as evaluateAcceptancePlan,ib as executeRewardFixture,Tb as exportRewardCalibrationClosure,vb as inspectLearningPolicy,zb as inspectLearningTaskQueue,T as inspectTaskEvidence,ya as intakeDate,xa as intakeId,k as judgeCommittedSpend,pb as learningEvidenceId,qb as learningOperationId,P as learningRef,kb as learningResourceSchemas,sb as learningScheduleId,V as mapTaskSourceRecord,jb as matchRewardFixture,n as nextNightlyOccurrence,ab as parseRewardAuthoringObject,Gb as previewTaskIntake,wb as qualifyRewardCheck,W as readTaskJsonPointer,Yb as reconcileLearningCandidateDecision,ob as requireLearningRelease,nb as requireLearningResource,rb as resolveLearningTrainingParent,$a as rewardAuthoringFields,Ub as rewardCalibrationClosureAsset,Kb as rewardFixtureFromRating,Q as sameLearningRef,R as sealLearningContent,aa as sealTaskBatch,tb as synchronizeLearningSchedule,Y as taskAttemptEvidence,da as taskBatchPackageMetadata,$ as taskFamilyReservations,X as taskRecordFromEvidence,U as validateSourceSubmission,e as verifyLearningTextAsset,Rb as verifyRewardCalibrationClosure};

package/dist/chunks/local-harness-improvement-runtime-QGWFWNSR.js

@@ -0,0 +1,2 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{a}from"./chunk-Y766IN7Y.js";import"./chunk-H6C4MAUN.js";import"./chunk-JORRZ4BB.js";import"./chunk-W2TICQ62.js";import"./chunk-IZ6DLEVY.js";import"./chunk-5MHYGMJG.js";import"./chunk-LK2K3SPM.js";import"./chunk-G32BO6M5.js";import"./chunk-NLYZ5K7U.js";import"./chunk-7KWD2I6W.js";import"./chunk-B4RKHHF7.js";import"./chunk-LKKMLBOH.js";import"./chunk-M3FLEZ4E.js";import"./chunk-OQPJ7FJF.js";import"./chunk-WBUK73ST.js";import"./chunk-P7HRF4FM.js";import"./chunk-GS6ZUSIN.js";import"./chunk-2ITZW2CN.js";import"./chunk-OG33QAG6.js";import"./chunk-W5W4IODW.js";import"./chunk-PWK5Z5S3.js";import"./chunk-W45RKGM6.js";import"./chunk-MWXW2CA6.js";import"./chunk-L3KS6MOV.js";import"./chunk-M3SCON53.js";import"./chunk-IZ56L2ZK.js";import"./chunk-KCJVFLBB.js";import"./chunk-3YXYBYWK.js";import"./chunk-MPNJ2BB4.js";import"./chunk-KOKX7PBS.js";import"./chunk-V7KR74NO.js";import"./chunk-XGY4OQLC.js";import"./chunk-7O6Z3VOZ.js";import"./chunk-5EP2DZLJ.js";import"./chunk-IDOGNIMV.js";import"./chunk-W45RKGM6.js";import"./chunk-PBTXLQAU.js";import"./chunk-7WYL2IDD.js";import"./chunk-HFJUXKT5.js";import"./chunk-5ZBLCWEJ.js";import"./chunk-PCB65K4G.js";import"./chunk-6RS4NAOY.js";import"./chunk-ZZHXQCNB.js";import"./chunk-YNQWJWIC.js";import"./chunk-VNJAAYNQ.js";import"./chunk-7ZLXFKRI.js";import"./chunk-7HRLWPPZ.js";import"./chunk-MTP3B2SU.js";import"./chunk-LAOLJDVB.js";import"./chunk-UWHIU24L.js";import"./chunk-LV3CQ72P.js";import"./chunk-ABF3W2MO.js";import"./chunk-RV7PUSI2.js";import"./chunk-KCV5VN4X.js";import"./chunk-6FA3GG5B.js";import"./chunk-2EPR4HLF.js";import"./chunk-BKEDG3A4.js";import"./chunk-OE22TAXP.js";import"./chunk-UGOK7VTC.js";import"./chunk-J572ANHX.js";import"./chunk-PBZCXPPC.js";import"./chunk-NJLULBTM.js";import"./chunk-VVNV4NNW.js";import"./chunk-PF56N7ZY.js";import"./chunk-FTQLQJQV.js";export{a as createLocalHarnessImprovementRuntime};

package/dist/chunks/local-harness-taskset-review-KS4WPMN6.js

@@ -0,0 +1,2 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{i as a,j as b}from"./chunk-GXZCMO6S.js";import"./chunk-ERT32RZA.js";import"./chunk-G6OR5NB6.js";import"./chunk-S7A2OGL2.js";import"./chunk-YM4PSVFW.js";import"./chunk-FEAKTSRS.js";import"./chunk-XVDFJ3ZF.js";import"./chunk-F6UQ6PPK.js";import"./chunk-SDO4FC4Q.js";import"./chunk-IR3YJWPW.js";import"./chunk-NT7N6KLE.js";import"./chunk-UPWJSNL5.js";import"./chunk-6EBCS57F.js";import"./chunk-WP2L2NY2.js";import"./chunk-KCOTDUGW.js";import"./chunk-RZUCVF2Q.js";import"./chunk-N4VHLJBZ.js";import"./chunk-DQI5TE6A.js";import"./chunk-AN525SPP.js";import"./chunk-IZ6DLEVY.js";import"./chunk-SYUKES6H.js";import"./chunk-XNOMIWEY.js";import"./chunk-NLYZ5K7U.js";import"./chunk-7KWD2I6W.js";import"./chunk-WWQNMC7C.js";import"./chunk-B4RKHHF7.js";import"./chunk-DLANLLKH.js";import"./chunk-YU3C6U5V.js";import"./chunk-KVTBX2UP.js";import"./chunk-LKKMLBOH.js";import"./chunk-M3FLEZ4E.js";import"./chunk-OQPJ7FJF.js";import"./chunk-WBUK73ST.js";import"./chunk-P7HRF4FM.js";import"./chunk-GS6ZUSIN.js";import"./chunk-2ITZW2CN.js";import"./chunk-OG33QAG6.js";import"./chunk-W5W4IODW.js";import"./chunk-PWK5Z5S3.js";import"./chunk-W45RKGM6.js";import"./chunk-L3KS6MOV.js";import"./chunk-3YXYBYWK.js";import"./chunk-MPNJ2BB4.js";import"./chunk-KOKX7PBS.js";import"./chunk-V7KR74NO.js";import"./chunk-XGY4OQLC.js";import"./chunk-7O6Z3VOZ.js";import"./chunk-5EP2DZLJ.js";import"./chunk-IDOGNIMV.js";import"./chunk-W45RKGM6.js";import"./chunk-PBTXLQAU.js";import"./chunk-7WYL2IDD.js";import"./chunk-4N4EH3RJ.js";import"./chunk-HFJUXKT5.js";import"./chunk-5ZBLCWEJ.js";import"./chunk-PCB65K4G.js";import"./chunk-6RS4NAOY.js";import"./chunk-ZZHXQCNB.js";import"./chunk-YNQWJWIC.js";import"./chunk-VNJAAYNQ.js";import"./chunk-7ZLXFKRI.js";import"./chunk-7HRLWPPZ.js";import"./chunk-MTP3B2SU.js";import"./chunk-LAOLJDVB.js";import"./chunk-UWHIU24L.js";import"./chunk-JCLTFDVW.js";import"./chunk-LV3CQ72P.js";import"./chunk-ABF3W2MO.js";import"./chunk-RV7PUSI2.js";import"./chunk-KCV5VN4X.js";import"./chunk-6FA3GG5B.js";import"./chunk-2EPR4HLF.js";import"./chunk-BKEDG3A4.js";import"./chunk-OE22TAXP.js";import"./chunk-UGOK7VTC.js";import"./chunk-J572ANHX.js";import"./chunk-PBZCXPPC.js";import"./chunk-NJLULBTM.js";import"./chunk-VVNV4NNW.js";import"./chunk-PF56N7ZY.js";import"./chunk-FTQLQJQV.js";export{a as createLocalHarnessTasksetReviewControl,b as runLocalHarnessEvaluationBaseline};

package/dist/chunks/model-projects-YUAMBQTO.js

@@ -0,0 +1,2 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import"./chunk-IDOGNIMV.js";import{A as p,B as q,C as r,D as s,E as t,F as u,G as v,H as w,I as x,J as y,K as z,L as A,M as B,N as C,O as D,e as b,i as c,j as d,p as e,q as f,r as g,s as h,t as i,u as j,v as k,w as l,x as m,y as n,z as o}from"./chunk-7ZLXFKRI.js";import{a}from"./chunk-7HRLWPPZ.js";import"./chunk-MTP3B2SU.js";import"./chunk-J572ANHX.js";import"./chunk-PBZCXPPC.js";import"./chunk-NJLULBTM.js";import"./chunk-VVNV4NNW.js";import"./chunk-PF56N7ZY.js";import"./chunk-FTQLQJQV.js";export{A as HostedModelProjectDetailSchema,n as HostedModelProjectLinkSchema,y as HostedModelProjectSummarySchema,x as HostedModelProjectSyncSchema,m as HostedModelProjectTrainingSetupSchema,d as MODEL_PROJECT_API_RESPONSE_MAX_BYTES,c as MODEL_PROJECT_SYNC_MAX_BYTES,a as ModelInitialLearningSchema,k as ModelProfileEvaluationSelectionSchema,j as ModelProfileSourceSelectionSchema,B as ModelProjectApiErrorSchema,t as ModelProjectBaseModelCandidateSchema,g as ModelProjectBaseModelSchema,s as ModelProjectConfigurationCheckSchema,q as ModelProjectEditableSchema,e as ModelProjectImmutableRefSchema,i as ModelProjectRecipeDocumentSchema,z as ModelProjectResourceSummarySchema,r as ModelProjectSaveRequestSchema,p as ModelProjectSchema,o as ModelProjectTasksetSyncSchema,h as ModelProjectTrainingMethodSchema,l as ModelProjectTrainingSetupSchema,f as ModelProjectVersionedRefSchema,b as OPENPOND_MODEL_PROJECT_MEDIA_TYPE,C as OpenPondModelProjectApiError,w as createModelProjectSaveRequest,D as createModelProjectsClient,u as modelProjectConfigurationHash,v as parseModelProjectSaveRequest};

package/dist/chunks/opchat-AG4CWVY4.js

@@ -0,0 +1,3 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import"./chunk-T4QXKU5Y.js";import"./chunk-GPL2Z65R.js";import{c as m}from"./chunk-SXMR6E2W.js";import"./chunk-2HAWOMZK.js";import"./chunk-SFKZITAG.js";import"./chunk-XRKFTPHD.js";import{c as g,d as f,f as h}from"./chunk-BSHAIAXY.js";import"./chunk-XWPC3AN4.js";import{f as p}from"./chunk-3M53YXEI.js";import{a as k}from"./chunk-Q34IF4PW.js";import{a as d,c as w,d as B}from"./chunk-6XSSM4WT.js";import"./chunk-MILEWROZ.js";import"./chunk-OTUBJV6C.js";import"./chunk-27JGS3KB.js";import"./chunk-BT5YNE5U.js";import{d as u}from"./chunk-UTNGEMW5.js";import"./chunk-U2K7QJCG.js";import"./chunk-WSOUMXH3.js";import"./chunk-N42HT64M.js";import"./chunk-NG2L6D7G.js";import"./chunk-GLUWATL5.js";import"./chunk-OSVGNONV.js";import"./chunk-2LJCJOJ7.js";import"./chunk-YBNKGA5C.js";import"./chunk-LAOLJDVB.js";import"./chunk-UWHIU24L.js";import"./chunk-JCLTFDVW.js";import"./chunk-LV3CQ72P.js";import"./chunk-ABF3W2MO.js";import"./chunk-RV7PUSI2.js";import"./chunk-KCV5VN4X.js";import"./chunk-2EPR4HLF.js";import"./chunk-BKEDG3A4.js";import"./chunk-OE22TAXP.js";import"./chunk-UGOK7VTC.js";import"./chunk-J572ANHX.js";import"./chunk-PBZCXPPC.js";import"./chunk-NJLULBTM.js";import"./chunk-VVNV4NNW.js";import"./chunk-PF56N7ZY.js";import{a as i}from"./chunk-FTQLQJQV.js";import{randomUUID as U}from"node:crypto";async function T(t,r){let e=r[0]||"smoke";if(e==="chat"){if(r.length!==1)throw new Error("opchat chat accepts options, not positional arguments.");await(await import("./opchat-bounded-chat-IQMP5IIO.js")).runBoundedOpChat(t);return}let o=await u(),s=await m(o,h(o)),l=C(o,t);if(e==="provider-catalog"||e==="providers-catalog"||e==="catalog"){let n=await y({apiBaseUrl:l,token:s});console.log(JSON.stringify(n,null,2));return}if(e==="models"||e==="model-list"){let n=await w({apiBaseUrl:l,token:s});console.log(JSON.stringify(n,null,2));return}if(e==="model"||e==="model-get"){let n=r[1]||a(t,"model");if(!n)throw new Error("usage: opchat model <model>");let c=await B({apiBaseUrl:l,token:s,model:n});console.log(JSON.stringify(c,null,2));return}if(e==="smoke"){let n=await k({apiBaseUrl:l,token:s,defaultModel:a(t,"model")||void 0,compatibilityModel:a(t,"compatibilityModel")||a(t,"compatModel")||void 0,skipStream:p(t.skipStream),skipTool:p(t.skipTool),log:i(c=>console.log(c),"log")});p(t.json)&&console.log(JSON.stringify(n,null,2));return}throw new Error(`usage: opchat <provider-catalog|models|model|smoke> [--opchat-api-base-url <url>]
+  opchat chat --model <id> --message <text> --team-id <id> --max-output-tokens <n> --request-id <id> --timeout-sec <1..600> --max-spend <usd> [--stream] (one bounded request; JSON receipt after completion)`)}i(T,"runOpChatCommand");async function y(t){let r=t.apiBaseUrl.trim().replace(/\/+$/,"");if(!r)throw new Error("OpChat API base URL is required.");let e=t.token.trim();if(!e)throw new Error("OpenPond API key is required.");let o=await fetch(`${r}/provider-catalog`,{method:"GET",headers:{Authorization:`Bearer ${e}`,Accept:"application/json","Content-Type":"application/json","x-openpond-client":"openpond-cli","x-openpond-request-id":U()}});if(!o.ok)throw new Error(`Hosted provider catalog failed: ${o.status} ${await A(o)}`);return o.json()}i(y,"getOpChatProviderCatalog");async function A(t){let r=await t.text().catch(()=>"");if(!r)return t.statusText||`HTTP ${t.status}`;try{let e=JSON.parse(r);if(typeof e.message=="string")return e.message;if(typeof e.error=="string")return e.error;if(e.error&&typeof e.error=="object"&&!Array.isArray(e.error)){let o=e.error;return[o.code,o.message].filter(Boolean).join(": ")||r}return r}catch{return r}}i(A,"readResponseError");function C(t,r){let e=a(r,"opchatApiBaseUrl")||a(r,"opchatApiBaseurl")||a(r,"opChatApiBaseUrl")||a(r,"opChatApiBaseurl")||a(r,"opchatApiUrl")||a(r,"opChatApiUrl");return e?d({opChatApiBaseUrl:e}):d({apiBaseUrl:g(r)||t.apiBaseUrl,chatApiBaseUrl:f(r)||t.chatApiBaseUrl})}i(C,"resolveOpChatCliBaseUrl");function a(t,r){let e=t[r];return typeof e=="string"?e.trim():""}i(a,"optionString");export{T as runOpChatCommand};

package/dist/chunks/opchat-bounded-chat-IQMP5IIO.js

@@ -0,0 +1,2 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import"./chunk-T4QXKU5Y.js";import{a as z}from"./chunk-NWQL6FNF.js";import"./chunk-GPL2Z65R.js";import"./chunk-SXMR6E2W.js";import{a as Z}from"./chunk-AZ7BL5FL.js";import"./chunk-2HAWOMZK.js";import"./chunk-SFKZITAG.js";import"./chunk-XRKFTPHD.js";import{c as j,d as $}from"./chunk-BSHAIAXY.js";import"./chunk-XWPC3AN4.js";import{c as A,f as H}from"./chunk-3M53YXEI.js";import"./chunk-4N4EH3RJ.js";import"./chunk-HFJUXKT5.js";import"./chunk-5ZBLCWEJ.js";import{a as D,d as X,i as J,j as Y}from"./chunk-6XSSM4WT.js";import"./chunk-MILEWROZ.js";import"./chunk-OTUBJV6C.js";import"./chunk-27JGS3KB.js";import"./chunk-BT5YNE5U.js";import"./chunk-UTNGEMW5.js";import"./chunk-U2K7QJCG.js";import"./chunk-WSOUMXH3.js";import"./chunk-N42HT64M.js";import"./chunk-NG2L6D7G.js";import"./chunk-GLUWATL5.js";import"./chunk-OSVGNONV.js";import"./chunk-2LJCJOJ7.js";import"./chunk-YBNKGA5C.js";import"./chunk-LAOLJDVB.js";import"./chunk-UWHIU24L.js";import"./chunk-JCLTFDVW.js";import"./chunk-LV3CQ72P.js";import"./chunk-ABF3W2MO.js";import"./chunk-RV7PUSI2.js";import"./chunk-KCV5VN4X.js";import"./chunk-6FA3GG5B.js";import"./chunk-2EPR4HLF.js";import{M as L}from"./chunk-BKEDG3A4.js";import"./chunk-OE22TAXP.js";import"./chunk-UGOK7VTC.js";import"./chunk-J572ANHX.js";import"./chunk-PBZCXPPC.js";import"./chunk-NJLULBTM.js";import"./chunk-VVNV4NNW.js";import{A as s}from"./chunk-PF56N7ZY.js";import{a as p}from"./chunk-FTQLQJQV.js";import{createHash as ne}from"node:crypto";var ee=new Set(["Error","TypeError","SyntaxError","AbortError","TimeoutError","SocketError","HeadersTimeoutError","BodyTimeoutError","ConnectTimeoutError"]),te=new Set(["UND_ERR_SOCKET","UND_ERR_HEADERS_TIMEOUT","UND_ERR_BODY_TIMEOUT","UND_ERR_CONNECT_TIMEOUT","UND_ERR_ABORTED","UND_ERR_DESTROYED","UND_ERR_CLOSED","UND_ERR_RESPONSE_STATUS_CODE","ECONNRESET","ECONNREFUSED","EPIPE","ETIMEDOUT","ENOTFOUND","EAI_AGAIN","ABORT_ERR"]);function K(n){let o=[],e=new Set,a=n;for(;a&&typeof a=="object"&&o.length<3&&!e.has(a);){e.add(a);let d=a;o.push({name:typeof d.name=="string"&&ee.has(d.name)?d.name:"unrecognized",code:d.code===void 0?null:typeof d.code=="string"&&te.has(d.code)?d.code:"unrecognized"}),a=d.cause}return o}p(K,"boundedTransportError");function V(){let n=null,o=null,e=null,a=null,d=null,M=null,l=0,y=0,m=0,S=0,c=0,i=0,E=null;return{observe:p(t=>{t.type==="request"&&(n=performance.now()-t.elapsedMs),t.type==="headers"&&(o=t),t.type==="bytes"&&(l=Math.max(l,t.elapsedMs-(a??o?.elapsedMs??0)),e??=t.elapsedMs,a=t.elapsedMs,y=Math.min(Number.MAX_SAFE_INTEGER,y+t.byteLength),m=Math.min(Number.MAX_SAFE_INTEGER,m+1)),t.type==="data"&&(S=Math.min(Number.MAX_SAFE_INTEGER,S+1),d=t.elapsedMs,t.errorFrame&&(i=Math.min(Number.MAX_SAFE_INTEGER,i+1))),t.type==="comment"&&(c=Math.min(Number.MAX_SAFE_INTEGER,c+1),M=t.elapsedMs),t.type==="done"&&(E=t.elapsedMs)},"observe"),snapshot:p(()=>{let t=n===null?null:Math.round(performance.now()-n);return{phase:n===null?"not_started":o?E!==null?"done":i>0?"error_frame":"response_body":"before_headers",elapsedMs:t,response:o===null?null:{status:o.status,headersAtMs:o.elapsedMs,eventStream:o.eventStream,noCache:o.noCache,noTransform:o.noTransform,bufferingDisabled:o.bufferingDisabled},bytes:y,readChunks:m,dataFrames:S,commentFrames:c,errorFrames:i,firstByteAtMs:e,lastByteAtMs:a,lastDataAtMs:d,lastCommentAtMs:M,doneAtMs:E,maxByteGapMs:l,silentForMs:t===null||o===null?null:Math.max(0,t-(a??o.elapsedMs))}},"snapshot")}}p(V,"createStreamDiagnostics");var O=s.coerce.number().int().positive().safe(),oe=s.object({model:s.string().trim().min(1).max(512),message:s.string().trim().min(1).max(131072),teamId:s.string().regex(/^[A-Za-z0-9_-]{3,191}$/),requestId:s.string().regex(/^[A-Za-z0-9._:-]{1,200}$/),maxOutputTokens:O,timeoutSec:O.max(600),maxSpend:s.coerce.number().finite().positive()}),q=s.number().finite().nonnegative(),re=s.object({id:s.string(),context_window:O,output_limit:O,metadata:s.object({billing:s.object({pricing:s.object({version:s.string().trim().min(1),source:s.string().trim().min(1),effectiveAt:s.string().refine(n=>Number.isFinite(Date.parse(n))),inputUsdPerMillionTokens:q,cachedInputUsdPerMillionTokens:q,outputUsdPerMillionTokens:q}).passthrough()})})});async function ge(n,o={}){let e=oe.parse({...n,message:A(n,"message")||A(n,"prompt")}),a=H(n.stream),d=n.effort===void 0?void 0:L.parse(n.effort),M=o.emit??(u=>console.log(JSON.stringify(u,null,2))),l=new AbortController,y=new Date().toISOString(),m=!1,S=null,c=null,i=null,E="",_=null,C=null,t=V(),x=null,B=p(u=>l.abort(new Error(`OpChat cancelled by ${u}.`)),"abort"),P=p(()=>B("SIGINT"),"interrupt"),v=p(()=>B("SIGTERM"),"terminate"),W=setTimeout(()=>l.abort(new DOMException("OpChat deadline reached.","TimeoutError")),e.timeoutSec*1e3);process.once("SIGINT",P),process.once("SIGTERM",v);let F=p((u,r)=>{let b=u==="completed"&&i&&i.estimated!==!0&&[i.prompt_tokens??i.input_tokens,i.completion_tokens??i.output_tokens].every(w=>typeof w=="number"&&Number.isSafeInteger(w)&&w>=0);return{schemaVersion:"openpond.boundedOpChatReceipt.v1",status:u,requestId:e.requestId,model:e.model,teamId:e.teamId,automaticRetry:!1,transport:a?"sse":"json",...a?{streamDiagnostics:t.snapshot()}:{},...x?{errorCauses:x}:{},startedAt:y,completedAt:new Date().toISOString(),apiOrigin:C,maxOutputTokens:e.maxOutputTokens,timeoutSec:e.timeoutSec,maximumSpendUsd:e.maxSpend,quote:S,dispatchAttempted:m,completion:c,usage:i,text:E,finishReason:_,accounting:{state:m?b?"usage_recorded":"unknown":"not_dispatched",chargedUsd:m?null:0,requiresLedgerReconciliation:m,cleanupConfirmed:!m},...r?{error:r}:{}}},"receipt");try{let u=await(o.account??z)(A(n,"account"));if(!u.token)throw new Error("Sign in to an OpenPond account before using OpChat.");let r=new URL(D({opChatApiBaseUrl:u.chatApiBaseUrl,env:{}})),b=[A(n,"opchatApiBaseUrl"),A(n,"opchatApiUrl"),$(n),j(n)].filter(g=>!!g);for(let g of b){let f=new URL(g);if(f.origin!==r.origin||f.username||f.password||f.search||f.hash)throw new Error("The OpChat API URL must match the signed-in account's chat origin.")}if(r.username||r.password||r.search||r.hash)throw new Error("The signed-in account has an invalid OpChat URL.");let w=D({opChatApiBaseUrl:b[0]??r.href,env:{}});C=r.origin,l.signal.throwIfAborted();let U=await X({apiBaseUrl:w,token:u.token,teamId:e.teamId,model:e.model,signal:AbortSignal.any([l.signal,AbortSignal.timeout(3e4)])}),Q=new Date().toISOString(),R=re.parse(U);if(R.id!==e.model)throw new Error("The catalog returned a different model identity.");if(e.maxOutputTokens>R.output_limit)throw new Error("The requested output limit exceeds the model's current limit.");let I=R.metadata.billing.pricing,N=Math.ceil(R.context_window*Math.max(I.inputUsdPerMillionTokens,I.cachedInputUsdPerMillionTokens)+e.maxOutputTokens*I.outputUsdPerMillionTokens);if(!Number.isSafeInteger(N)||N<=0)throw new Error("The model does not publish an enforceable positive request ceiling.");let k=N/1e6;if(S={kind:"worst_case_request_reservation",observedAt:Q,contextWindow:R.context_window,outputLimit:R.output_limit,pricing:I,maximumRequestCostUsd:k,predictedSpend:!1,catalog:U,catalogSha256:ne("sha256").update(JSON.stringify(U)).digest("hex")},k>e.maxSpend)throw new Error(`The current worst-case request reservation $${k} exceeds --max-spend $${e.maxSpend}.`);l.signal.throwIfAborted();let G={apiBaseUrl:w,token:u.token,teamId:e.teamId,model:e.model,requestId:e.requestId,reasoningEffort:d,maxTokens:e.maxOutputTokens,signal:l.signal,messages:[{role:"user",content:e.message}],...a?{onStreamDiagnostic:t.observe}:{}};if(m=!0,a){let g=null,f;for await(let h of Y(G)){l.signal.throwIfAborted();let T=h.raw&&typeof h.raw=="object"?h.raw:{};if(typeof T.id!="string"||!T.id||T.model!==e.model||T.request_id!==e.requestId||g!==null&&T.id!==g)throw new Error("The stream does not match the admitted completion, model and request identity.");if(g=T.id,typeof T.created=="number"&&(f=T.created),h.type==="text_delta"&&(E+=h.text),h.type==="usage"&&(i=h.usage),h.type==="finish"&&(_=h.finishReason),h.type==="tool_call_delta")throw new Error("The bounded OpChat request did not admit tool calls.")}if(!g||!_)throw new Error("The stream ended without a terminal completion receipt.");c={id:g,model:e.model,request_id:e.requestId,object:"chat.completion",assembledFromStream:!0,...f===void 0?{}:{created:f},choices:[{index:0,message:{role:"assistant",content:E},finish_reason:_}],...i===null?{}:{usage:i}}}else c=await J(G),i=c.usage??null,E=c.choices?.[0]?.message?.content??"",_=c.choices?.[0]?.finish_reason??null;if(!c.id||c.model!==e.model||c.request_id!==e.requestId)throw new Error("The completion does not match the admitted model and request identity.");if(l.signal.throwIfAborted(),!_)throw new Error("The response ended without a terminal completion receipt.");M(F("completed"))}catch(u){let r=l.signal.aborted?l.signal.reason:u;x=K(r);let b=r instanceof Error?r.message:String(r),w=l.signal.aborted?r instanceof Error&&r.name==="TimeoutError"?"timed_out":"cancelled":m?"failed":"rejected";throw M(F(w,b)),new Z(b)}finally{clearTimeout(W),process.removeListener("SIGINT",P),process.removeListener("SIGTERM",v)}}p(ge,"runBoundedOpChat");export{ge as runBoundedOpChat};

package/dist/chunks/organizations-KDKX77XZ.js

@@ -0,0 +1,2 @@
+import { createRequire as __openpondCreateRequire } from "node:module"; var require = __openpondCreateRequire(import.meta.url);
+import{b as M}from"./chunk-NWQL6FNF.js";import{m as x}from"./chunk-GPL2Z65R.js";import"./chunk-SXMR6E2W.js";import"./chunk-2HAWOMZK.js";import"./chunk-SFKZITAG.js";import"./chunk-XRKFTPHD.js";import"./chunk-BSHAIAXY.js";import"./chunk-XWPC3AN4.js";import{a as _,f as O,h as k,i as S}from"./chunk-3M53YXEI.js";import"./chunk-4N4EH3RJ.js";import"./chunk-HFJUXKT5.js";import"./chunk-5ZBLCWEJ.js";import"./chunk-MILEWROZ.js";import"./chunk-OTUBJV6C.js";import"./chunk-27JGS3KB.js";import"./chunk-BT5YNE5U.js";import"./chunk-UTNGEMW5.js";import"./chunk-U2K7QJCG.js";import"./chunk-WSOUMXH3.js";import"./chunk-N42HT64M.js";import"./chunk-NG2L6D7G.js";import"./chunk-GLUWATL5.js";import"./chunk-OSVGNONV.js";import"./chunk-2LJCJOJ7.js";import"./chunk-YBNKGA5C.js";import"./chunk-LAOLJDVB.js";import"./chunk-UWHIU24L.js";import"./chunk-JCLTFDVW.js";import"./chunk-LV3CQ72P.js";import"./chunk-ABF3W2MO.js";import"./chunk-RV7PUSI2.js";import"./chunk-KCV5VN4X.js";import"./chunk-6FA3GG5B.js";import"./chunk-2EPR4HLF.js";import"./chunk-BKEDG3A4.js";import"./chunk-OE22TAXP.js";import"./chunk-UGOK7VTC.js";import"./chunk-J572ANHX.js";import"./chunk-PBZCXPPC.js";import"./chunk-NJLULBTM.js";import"./chunk-VVNV4NNW.js";import"./chunk-PF56N7ZY.js";import{a as i}from"./chunk-FTQLQJQV.js";import{createHash as j,randomBytes as L}from"node:crypto";import{createServer as B}from"node:http";function D(e){return[e.slug,`team=${e.teamId}`,`role=${e.role}`,`status=${e.status}`,e.displayName].join("  ")}i(D,"formatOrganizationLine");function H(e){return[e.email??e.userId,`user=${e.userId}`,`role=${e.role}`,e.createdAt].join("  ")}i(H,"formatOrganizationMemberLine");function W(e){return e?[e.slug,`team=${e.teamId}`,`status=${e.status}`,`tools=${e.toolset.join(",")||"-"}`,e.resourceUrl].join("  "):"no mcp server configured"}i(W,"formatOrganizationMcpServerLine");var F=["estimate.read","estimate.write","estimate.execute","artifacts.read","artifacts.write"];function b(e){let t=e.trim().replace(/\/$/,"");if(!t)throw new Error("MCP resource URL must be non-empty");return new URL(t).toString().replace(/\/$/,"")}i(b,"normalizeMcpResourceUrl");function R(e,t){let r=typeof t.resourceUrl=="string"&&t.resourceUrl.trim()?t.resourceUrl.trim():typeof t.url=="string"&&t.url.trim()?t.url.trim():"";if(r)return b(r);if(!e?.resourceUrl)throw new Error("organization does not have an MCP server; run organizations mcp-generate first");return b(e.resourceUrl)}i(R,"resolveMcpProbeResourceUrl");function v(e,t){let r=typeof t.origin=="string"&&t.origin.trim()?t.origin.trim():"";return r?b(r):new URL(e).origin}i(v,"resolveMcpProbeOrigin");function U(e=32){return L(e).toString("base64url")}i(U,"randomOauthToken");function G(e){return j("sha256").update(e).digest("base64url")}i(G,"buildMcpOauthPkceChallenge");function V(e){let t=typeof e.scope=="string"&&e.scope.trim()?e.scope:typeof e.scopes=="string"&&e.scopes.trim()?e.scopes:"";if(!t)return[...F];let r=t.split(/[,\s]+/g).map(o=>o.trim()).filter(Boolean);if(r.length===0)throw new Error("scope must include at least one OAuth scope");return r}i(V,"parseMcpOAuthScopes");function q(e){let t=typeof e.clientId=="string"&&e.clientId.trim()?e.clientId.trim():"openpond-code-mcp-proof";if(t==="true")throw new Error("client-id must be a non-empty value");return t}i(q,"resolveMcpOAuthClientId");function Y(e){let t=k(e.timeoutSeconds,"timeout-seconds")??k(e.timeout,"timeout")??180;if(t<=0)throw new Error("timeout must be greater than zero");return t*1e3}i(Y,"resolveMcpOAuthTimeoutMs");function Z(e){let t=k(e.callbackPort,"callback-port")??0;if(t<0||t>65535)throw new Error("callback-port must be between 0 and 65535");return t}i(Z,"resolveMcpOAuthCallbackPort");function E(e){return new Promise((t,r)=>{e.close(o=>{o?r(o):t()})})}i(E,"closeServer");async function K(e){let t=!1,r=null,o=null,s=null,n=new Promise((u,l)=>{o=u,s=l}),a=i((u,l,g,m,p)=>{if(t){u.writeHead(204).end();return}t=!0,u.writeHead(l,{"cache-control":"no-store","content-type":"text/html; charset=utf-8"}),u.end(g),r&&clearTimeout(r),m?o?.(m):s?.(p??new Error("oauth_callback_failed"))},"settle"),c=B((u,l)=>{let g=u.headers.host??"127.0.0.1",m=new URL(u.url??"/",`http://${g}`);if(m.pathname!=="/callback"){l.writeHead(404,{"content-type":"text/plain; charset=utf-8"}),l.end("Not found");return}let p=m.searchParams.get("state")??"",f=m.searchParams.get("error")??"",w=m.searchParams.get("code")??"";if(p!==e.expectedState){a(l,400,"<!doctype html><title>OpenPond OAuth failed</title><p>State mismatch. Return to the terminal and retry.</p>",void 0,new Error("oauth_state_mismatch"));return}if(f){a(l,400,"<!doctype html><title>OpenPond OAuth denied</title><p>Authorization was not completed. Return to the terminal.</p>",void 0,new Error(`oauth_authorization_failed:${f}`));return}if(!w){a(l,400,"<!doctype html><title>OpenPond OAuth failed</title><p>Missing authorization code. Return to the terminal and retry.</p>",void 0,new Error("oauth_code_missing"));return}a(l,200,"<!doctype html><title>OpenPond OAuth complete</title><p>Authorization complete. You can return to the terminal.</p>",{code:w,state:p})});await new Promise((u,l)=>{let g=i(p=>{c.off("listening",m),l(p)},"onError"),m=i(()=>{c.off("error",g),u()},"onListening");c.once("error",g),c.once("listening",m),c.listen(e.port,"127.0.0.1")});let d=c.address();if(!d||typeof d.port!="number")throw await E(c),new Error("oauth_callback_listener_failed");return r=setTimeout(()=>{t||(t=!0,s?.(new Error("oauth_callback_timeout")))},e.timeoutMs),{close:i(async()=>{r&&clearTimeout(r),await E(c).catch(()=>{})},"close"),redirectUri:`http://127.0.0.1:${d.port}/callback`,waitForCallback:i(()=>n,"waitForCallback")}}i(K,"startMcpOAuthCallbackListener");function Q(e){M(e)}i(Q,"openUrlWithSystemBrowser");function X(e){let t=new URL(e.authorizationEndpoint);return t.searchParams.set("response_type","code"),t.searchParams.set("client_id",e.clientId),t.searchParams.set("redirect_uri",e.redirectUri),t.searchParams.set("code_challenge",e.codeChallenge),t.searchParams.set("code_challenge_method","S256"),t.searchParams.set("resource",e.resourceUrl),t.searchParams.set("scope",e.scopes.join(" ")),t.searchParams.set("state",e.state),t.toString()}i(X,"buildMcpOAuthAuthorizeUrl");async function ee(e){let t=new URLSearchParams;t.set("grant_type","authorization_code"),t.set("client_id",e.clientId),t.set("redirect_uri",e.redirectUri),t.set("code",e.code),t.set("code_verifier",e.codeVerifier);let r=await fetch(`${e.origin}/oauth/token`,{method:"POST",headers:{"content-type":"application/x-www-form-urlencoded"},body:t}),o=await N(r);if(!r.ok)throw new Error(`oauth_token_exchange_failed:${r.status}:${JSON.stringify(o)}`);if(!o||typeof o!="object"||Array.isArray(o))throw new Error("oauth_token_exchange_invalid_response");let s=o;if(typeof s.access_token!="string"||!s.access_token.trim())throw new Error("oauth_token_exchange_missing_access_token");return{access_token:s.access_token,...typeof s.expires_in=="number"?{expires_in:s.expires_in}:{},...typeof s.refresh_token=="string"?{refresh_token:s.refresh_token}:{},...typeof s.scope=="string"?{scope:s.scope}:{},...typeof s.token_type=="string"?{token_type:s.token_type}:{}}}i(ee,"exchangeMcpOAuthAuthorizationCode");async function N(e){let t=await e.text().catch(()=>"");if(!t)return null;let r=t.trim();if((e.headers.get("content-type")??"").toLowerCase().includes("application/json")||r.startsWith("{")||r.startsWith("["))try{return JSON.parse(r)}catch{return t}return t}i(N,"readMcpProbeBody");async function P(e,t={}){let r=await fetch(e,t);return{url:e,status:r.status,ok:r.ok,headers:{contentType:r.headers.get("content-type"),location:r.headers.get("location"),wwwAuthenticate:r.headers.get("www-authenticate")},body:await N(r)}}i(P,"fetchMcpProbe");function te(e,t,r){return r?{jsonrpc:"2.0",id:e,method:t,params:r}:{jsonrpc:"2.0",id:e,method:t}}i(te,"buildMcpJsonRpcRequest");function T(e){let t=typeof e.arguments=="string"&&e.arguments.trim()?e.arguments:typeof e.args=="string"&&e.args.trim()?e.args:"";if(!t)return{};let r=_(t,"arguments");if(!r||typeof r!="object"||Array.isArray(r))throw new Error("arguments must be a JSON object");return r}i(T,"parseMcpToolArguments");async function z(e){let t={"content-type":"application/json"};return e.accessToken&&(t.authorization=`Bearer ${e.accessToken}`),P(e.resourceUrl,{method:"POST",headers:t,body:JSON.stringify(te(e.id,e.method,e.params))})}i(z,"postMcpJsonRpcProbe");async function A(e){let t=b(e.resourceUrl),r=b(e.origin),o=`${t}/.well-known/oauth-protected-resource`,s=`${r}/.well-known/oauth-authorization-server`,[n,a,c,d,u,l,g]=await Promise.all([P(o),P(s),P(t),z({resourceUrl:t,id:1,method:"initialize"}),z({resourceUrl:t,id:2,method:"tools/list"}),z({resourceUrl:t,id:3,method:"tools/call",params:{name:e.toolName,arguments:e.toolArguments}}),e.accessToken?z({resourceUrl:t,id:4,method:"tools/call",params:{name:e.toolName,arguments:e.toolArguments},accessToken:e.accessToken}):Promise.resolve(null)]);return{resourceUrl:t,origin:r,protectedResource:n,authorizationServer:a,directGetChallenge:c,initialize:d,toolsList:u,unauthenticatedToolCall:l,...g?{authenticatedToolCall:g}:{}}}i(A,"probeOrganizationMcp");function re(e){let t=typeof e=="string"?e.trim():"";if(t==="owner"||t==="admin"||t==="member")return t;throw new Error("role must be owner, admin, or member")}i(re,"parseOrganizationRole");function ne(e){let t=typeof e.displayName=="string"&&e.displayName.trim()?e.displayName.trim():typeof e.name=="string"&&e.name.trim()?e.name.trim():"";if(!t)throw new Error("usage: organizations create --name <name> [--slug <slug>]");return{displayName:t,...typeof e.slug=="string"&&e.slug.trim()?{slug:e.slug.trim()}:{},...typeof e.primaryContactEmail=="string"&&e.primaryContactEmail.trim()?{primaryContactEmail:e.primaryContactEmail.trim()}:{},...typeof e.customDomain=="string"&&e.customDomain.trim()?{customDomain:e.customDomain.trim()}:{}}}i(ne,"buildOrganizationCreateInput");function oe(e){let t={},r=typeof e.displayName=="string"&&e.displayName.trim()?e.displayName.trim():typeof e.name=="string"&&e.name.trim()?e.name.trim():"";if(r&&(t.displayName=r),typeof e.slug=="string"&&e.slug.trim()&&(t.slug=e.slug.trim()),typeof e.primaryContactEmail=="string"&&(t.primaryContactEmail=e.primaryContactEmail.trim()||null),typeof e.customDomain=="string"&&(t.customDomain=e.customDomain.trim()||null),typeof e.status=="string"&&e.status.trim()){let o=e.status.trim();if(o!=="active"&&o!=="disabled"&&o!=="archived")throw new Error("status must be active, disabled, or archived");t.status=o}if(Object.keys(t).length===0)throw new Error("organizations update requires at least one changed field");return t}i(oe,"buildOrganizationUpdateInput");function ie(e){let t=typeof e.email=="string"?e.email.trim():"";if(!t)throw new Error("usage: organizations member-upsert <slug> --email <email> --role <role>");return{email:t,role:re(e.role)}}i(ie,"buildOrganizationMemberInput");function ae(e){return{...typeof e.origin=="string"&&e.origin.trim()?{origin:e.origin.trim()}:{},...typeof e.toolset=="string"&&e.toolset.trim()?{toolset:S(e.toolset)}:{}}}i(ae,"buildOrganizationMcpGenerateInput");async function ge(e,t){let r=t[0]||"list",o=await x(e),s=O(e.json);if(r==="list"){let n=await o.listOrganizations();if(s){console.log(JSON.stringify({organizations:n},null,2));return}if(n.length===0){console.log("no organizations found");return}for(let a of n)console.log(D(a));return}if(r==="create"){let n=await o.createOrganization(ne(e));console.log(JSON.stringify({organization:n},null,2));return}if(r==="get"){let n=t[1];if(!n)throw new Error("usage: organizations get <slug>");let a=await o.getOrganization(n);console.log(JSON.stringify({organization:a},null,2));return}if(r==="update"){let n=t[1];if(!n)throw new Error("usage: organizations update <slug> [--name <name>]");let a=await o.updateOrganization(n,oe(e));console.log(JSON.stringify({organization:a},null,2));return}if(r==="members"||r==="member-list"){let n=t[1];if(!n)throw new Error("usage: organizations members <slug>");let a=await o.listOrganizationMembers(n);if(s){console.log(JSON.stringify({members:a},null,2));return}if(a.length===0){console.log("no organization members found");return}for(let c of a)console.log(H(c));return}if(r==="member-upsert"||r==="member-add"){let n=t[1];if(!n)throw new Error("usage: organizations member-upsert <slug> --email <email> --role <role>");let a=await o.upsertOrganizationMember(n,ie(e));console.log(JSON.stringify({member:a},null,2));return}if(r==="mcp-get"||r==="mcp-server"){let n=t[1];if(!n)throw new Error("usage: organizations mcp-get <slug>");let a=await o.getOrganizationMcpServer(n);if(s){console.log(JSON.stringify({mcpServer:a},null,2));return}console.log(W(a));return}if(r==="mcp-generate"){let n=t[1];if(!n)throw new Error("usage: organizations mcp-generate <slug> [--origin <url>]");let a=await o.generateOrganizationMcpServer(n,ae(e));console.log(JSON.stringify({mcpServer:a},null,2));return}if(r==="mcp-probe"||r==="mcp-inspect"){let n=t[1];if(!n)throw new Error("usage: organizations mcp-probe <slug> [--origin <url>] [--tool <name>] [--arguments <json>] [--access-token <token>]");let a=await o.getOrganizationMcpServer(n),c=R(a,e),d=v(c,e),u=typeof e.tool=="string"&&e.tool.trim()?e.tool.trim():typeof e.toolName=="string"&&e.toolName.trim()?e.toolName.trim():"estimate_search_history",l=T(e),g=typeof e.accessToken=="string"&&e.accessToken.trim()?e.accessToken.trim():"",m=await A({resourceUrl:c,origin:d,toolName:u,toolArguments:l,...g?{accessToken:g}:{}});console.log(JSON.stringify({mcpServer:a,probe:m},null,2));return}if(r==="mcp-authorize"||r==="mcp-oauth"){let n=t[1];if(!n)throw new Error("usage: organizations mcp-authorize <slug> [--origin <url>] [--scope <csv|space>] [--tool <name>] [--arguments <json>] [--open]");let a=await o.getOrganizationMcpServer(n),c=R(a,e),d=v(c,e),u=q(e),l=V(e),g=U(18),m=U(48),p=G(m),f=await K({expectedState:g,port:Z(e),timeoutMs:Y(e)}),w=X({authorizationEndpoint:`${d}/oauth/authorize`,clientId:u,codeChallenge:p,redirectUri:f.redirectUri,resourceUrl:c,scopes:l,state:g});if(console.error("Open this URL to authorize the organization MCP connection:"),console.error(w),console.error(`Waiting for OAuth callback on ${f.redirectUri}`),O(e.open))try{Q(w)}catch(y){console.error(`Unable to open a browser automatically: ${y instanceof Error?y.message:String(y)}`)}try{let y=await f.waitForCallback(),h=await ee({clientId:u,code:y.code,codeVerifier:m,origin:d,redirectUri:f.redirectUri}),C=typeof e.tool=="string"&&e.tool.trim()?e.tool.trim():typeof e.toolName=="string"&&e.toolName.trim()?e.toolName.trim():"estimate_search_history",I=T(e),$=await A({accessToken:h.access_token,origin:d,resourceUrl:c,toolArguments:I,toolName:C}),J=O(e.printToken);console.log(JSON.stringify({mcpServer:a,oauth:{accessTokenReceived:!0,clientId:u,expiresIn:h.expires_in??null,refreshTokenReceived:!!h.refresh_token,scope:h.scope??l.join(" "),tokenType:h.token_type??"Bearer",...J?{accessToken:h.access_token,refreshToken:h.refresh_token??null}:{}},probe:$},null,2))}finally{await f.close()}return}if(r==="mcp-rotate"||r==="mcp-disable"||r==="mcp-enable"){let n=t[1];if(!n)throw new Error(`usage: organizations ${r} <slug>`);let a=r==="mcp-rotate"?await o.rotateOrganizationMcpServer(n):r==="mcp-disable"?await o.disableOrganizationMcpServer(n):await o.enableOrganizationMcpServer(n);console.log(JSON.stringify({mcpServer:a},null,2));return}throw new Error("usage: organizations <list|create|get|update|members|member-upsert|mcp-get|mcp-generate|mcp-probe|mcp-authorize|mcp-rotate|mcp-disable|mcp-enable> [args]")}i(ge,"runOrganizationsCommand");export{F as DEFAULT_MCP_AUTHORIZE_SCOPES,te as buildMcpJsonRpcRequest,X as buildMcpOAuthAuthorizeUrl,G as buildMcpOauthPkceChallenge,ne as buildOrganizationCreateInput,ae as buildOrganizationMcpGenerateInput,ie as buildOrganizationMemberInput,oe as buildOrganizationUpdateInput,E as closeServer,ee as exchangeMcpOAuthAuthorizationCode,P as fetchMcpProbe,D as formatOrganizationLine,W as formatOrganizationMcpServerLine,H as formatOrganizationMemberLine,b as normalizeMcpResourceUrl,Q as openUrlWithSystemBrowser,V as parseMcpOAuthScopes,T as parseMcpToolArguments,re as parseOrganizationRole,z as postMcpJsonRpcProbe,A as probeOrganizationMcp,U as randomOauthToken,N as readMcpProbeBody,Z as resolveMcpOAuthCallbackPort,q as resolveMcpOAuthClientId,Y as resolveMcpOAuthTimeoutMs,v as resolveMcpProbeOrigin,R as resolveMcpProbeResourceUrl,ge as runOrganizationsCommand,K as startMcpOAuthCallbackListener};