orizu 0.5.21 → 0.5.23

package/dist/hosted-provider-settings.js

@@ -0,0 +1,69 @@
+function isRecord(value) {
+    return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+function hasOnlyKeys(value, keys) {
+    return Object.keys(value).every(key => keys.includes(key));
+}
+function isChoice(value, choices) {
+    return typeof value === 'string' && choices.includes(value);
+}
+function isProviderObject(value, keys, choices) {
+    return isRecord(value) && hasOnlyKeys(value, keys)
+        && Object.entries(value).every(([key, nested]) => isChoice(nested, choices[key] ?? []));
+}
+function isCredentialKey(key) {
+    const tokens = key.replaceAll(/([a-z0-9])([A-Z])/g, '$1 $2').toLowerCase().split(/[^a-z0-9]+/).filter(Boolean);
+    return tokens.some(token => ['auth', 'authorization', 'token', 'secret', 'password', 'passwd', 'credential', 'credentials', 'key'].includes(token))
+        || /(?:authorization|authheader|bearer|token|secret|password|passwd|credential|credentials|apikey|accesskey(?:id)?|privatekey|clientkey|secretkey|connection(?:string|url)|dsn)$/.test(tokens.join(''));
+}
+function containsCredential(value, root = true) {
+    if (Array.isArray(value))
+        return root || value.some(nested => containsCredential(nested, false));
+    if (!isRecord(value))
+        return root ? value !== undefined
+            : typeof value === 'string' && (/(?:authorization|bearer|x-api-key|x-auth-token)\s*[: ]/i.test(value)
+                || /^[a-z]+:\/\/[^/@]*:[^/@]*@/i.test(value));
+    return Object.entries(value).some(([key, nested]) => isCredentialKey(key) || containsCredential(nested, false));
+}
+function unsupportedHostedSetting(value, model) {
+    if (value === undefined)
+        return null;
+    if (!isRecord(value))
+        return '<root>';
+    const providerKeys = model.startsWith('openai/') ? ['reasoning']
+        : model.startsWith('anthropic/') ? ['thinking', 'output_config'] : [];
+    const unknown = Object.keys(value).find(key => !['top_p', ...providerKeys].includes(key));
+    if (unknown)
+        return unknown;
+    if (value.top_p !== undefined && (typeof value.top_p !== 'number'
+        || !Number.isFinite(value.top_p) || value.top_p < 0 || value.top_p > 1))
+        return 'top_p';
+    if (value.thinking !== undefined && (!isRecord(value.thinking) || value.thinking.type === undefined))
+        return 'thinking.type';
+    for (const [key, nested, keys, choices] of [
+        ['thinking', value.thinking, ['type'], { type: ['adaptive'] }],
+        ['output_config', value.output_config, ['effort'], { effort: ['low', 'medium', 'high', 'max'] }],
+        ['reasoning', value.reasoning, ['effort', 'summary'], { effort: ['minimal', 'low', 'medium', 'high', 'xhigh'], summary: ['auto', 'concise', 'detailed'] }],
+    ])
+        if (nested !== undefined && !isProviderObject(nested, keys, choices)) {
+            if (!isRecord(nested))
+                return key;
+            return `${key}.${Object.keys(nested).find(child => !keys.includes(child)
+                || !isChoice(nested[child], choices[child] ?? [])) ?? key}`;
+        }
+    return null;
+}
+export function hostedSettingsContainCredentials(value) { return containsCredential(value); }
+export function hostedProviderSettingsError(value, model = 'anthropic/', temperature) {
+    if (hostedSettingsContainCredentials(value)) {
+        return 'Hosted reflection provider settings must not contain credential-bearing fields.';
+    }
+    const unsupported = unsupportedHostedSetting(value, model);
+    if (unsupported)
+        return `Unsupported hosted setting "${unsupported}".`;
+    if (model.startsWith('anthropic/') && temperature !== undefined && temperature !== null
+        && isRecord(value) && value.thinking !== undefined) {
+        return 'reflection_temperature cannot be combined with Anthropic thinking';
+    }
+    return null;
+}

package/dist/hosted-session-cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-session-cli.d.ts","sourceRoot":"","sources":["../src/hosted-session-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAIH,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAA;AAK9B,OAAO,EAAE,oBAAoB,EAAqB,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAMlG,OAAO,EAKL,KAAK,sBAAsB,EAC5B,MAAM,mBAAmB,CAAA;AAQ1B,OAAO,EAAE,oBAAoB,EAAE,CAAA;AAC/B,eAAO,MAAM,wBAAwB,KAAK,CAAA;AAC1C,eAAO,MAAM,oBAAoB,QAAU,CAAA;AAC3C,eAAO,MAAM,4BAA4B,QAAiB,CAAA;AAC1D;6EAC6E;AAC7E,eAAO,MAAM,sBAAsB,QAAY,CAAA;AAC/C,eAAO,MAAM,+BAA+B,KAAK,CAAA;AACjD;sDACsD;AACtD,eAAO,MAAM,4BAA4B,QAAY,CAAA;AACrD,eAAO,MAAM,yBAAyB,MAAM,CAAA;AAC5C,yEAAyE;AACzE,eAAO,MAAM,2BAA2B,QAAa,CAAA;AAMrD;mFACmF;AACnF,eAAO,MAAM,mBAAmB,0CAA0C,CAAA;AAK1E;;+EAE+E;AAC/E,eAAO,MAAM,gCAAgC,QAAS,CAAA;AACtD,eAAO,MAAM,mCAAmC,QAAa,CAAA;AAC7D,0EAA0E;AAC1E,eAAO,MAAM,oCAAoC,QACf,CAAA;AAClC;gFACgF;AAChF,eAAO,MAAM,uCAAuC,QACP,CAAA;AAE7C;;mCAEmC;AACnC,qBAAa,mCAAoC,SAAQ,KAAK;IAC5D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;gBAElB,KAAK,EAAE;QACjB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;QAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;KAC/B;CAUF;AAID,gFAAgF;AAChF,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEjF;2EAC2E;AAC3E,wBAAgB,aAAa,CAC3B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,WAAW,GACpB,WAAW,CAOb;AAkJD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,cAAc,CAAA;IACvB,OAAO,EAAE,iBAAiB,CAAA;IAC1B,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB;qDACiD;IACjD,MAAM,EAAE,MAAM,CAAA;CACf;AAeD,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,yBAAyB;IACxC,4EAA4E;IAC5E,OAAO,EAAE,WAAW,CAAA;IACpB,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,eAAe,CAAA;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B;0EACsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,2EAA2E;IAC3E,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;iFAC6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,4EAA4E;IAC5E,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAErC,QAAQ,CAAC,EAAE,WAAW,CAAA;IACtB,WAAW,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAA;IAC9D,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACxD;;;yCAGqC;IACrC,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE;QAC1B,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;QAC/B,cAAc,EAAE,MAAM,CAAA;KACvB,KAAK,mBAAmB,GAAG,SAAS,CAAA;IACrC;;8DAE0D;IAC1D,yBAAyB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAA;IAC/E,gFAAgF;IAChF,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C,0EAA0E;IAC1E,qBAAqB,CAAC,EAAE,sBAAsB,CAAA;IAC9C,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,8CAA8C;IAC9C,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,mDAAmD;IACnD,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,6EAA6E;IAC7E,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5D,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAChC,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IACtD;kFAC8E;IAC9E,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,cAAc,CAAC;QAAC,KAAK,EAAE,kBAAkB,CAAA;KAAE,KAAK,IAAI,CAAA;IACvF,uEAAuE;IACvE,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACjD;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,WAAW,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;CACnD;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,WAAW,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,MAAM,CAAA;IACjB,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACpC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC5B;AAmDD,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,OAAO,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,WAAW,EAAE,OAAO,CAAA;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,cAAc,CAiDhB;AAoDD,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,wBAAwB,CAAC,CA0dnC;AAID,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACjC,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AA4ID;kDACkD;AAClD,eAAO,MAAM,4BAA4B,QAGkC,CAAA;AAE3E;;;;GAIG;AACH;;;;;;;;;;;;+DAY+D;AAC/D,eAAO,MAAM,8BAA8B,QAAS,CAAA;AACpD,eAAO,MAAM,6BAA6B,OAAQ,CAAA;AAElD,eAAO,MAAM,gCAAgC,QAE5C,CAAA;AAiCD,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,EAAE,EAAE,eAAe,EACnB,OAAO,GAAE,WAAqD,EAC9D,KAAK,GAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAyD,EAC5F,qBAAqB,CAAC,EAAE,sBAAsB,GAC7C,OAAO,CAAC,MAAM,CAAC,CAkPjB;AAED,kFAAkF;AAClF,MAAM,WAAW,iBAAiB;IAChC,cAAc,CAAC,EAAE,OAAO,oBAAoB,CAAA;IAC5C,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CAC9H;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,EAAE,EAAE,eAAe,EACnB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAkLjB"}
+{"version":3,"file":"hosted-session-cli.d.ts","sourceRoot":"","sources":["../src/hosted-session-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAIH,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAIL,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACxB,MAAM,uBAAuB,CAAA;AAK9B,OAAO,EAAE,oBAAoB,EAAqB,KAAK,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAOlG,OAAO,EAKL,KAAK,sBAAsB,EAC5B,MAAM,mBAAmB,CAAA;AAQ1B,OAAO,EAAE,oBAAoB,EAAE,CAAA;AAC/B,eAAO,MAAM,wBAAwB,KAAK,CAAA;AAC1C,eAAO,MAAM,oBAAoB,QAAU,CAAA;AAC3C,eAAO,MAAM,4BAA4B,QAAiB,CAAA;AAC1D;6EAC6E;AAC7E,eAAO,MAAM,sBAAsB,QAAY,CAAA;AAC/C,eAAO,MAAM,+BAA+B,KAAK,CAAA;AACjD;sDACsD;AACtD,eAAO,MAAM,4BAA4B,QAAY,CAAA;AACrD,eAAO,MAAM,yBAAyB,MAAM,CAAA;AAC5C,yEAAyE;AACzE,eAAO,MAAM,2BAA2B,QAAa,CAAA;AAMrD;mFACmF;AACnF,eAAO,MAAM,mBAAmB,0CAA0C,CAAA;AAK1E;;+EAE+E;AAC/E,eAAO,MAAM,gCAAgC,QAAS,CAAA;AACtD,eAAO,MAAM,mCAAmC,QAAa,CAAA;AAC7D,0EAA0E;AAC1E,eAAO,MAAM,oCAAoC,QACf,CAAA;AAClC;gFACgF;AAChF,eAAO,MAAM,uCAAuC,QACP,CAAA;AAE7C;;mCAEmC;AACnC,qBAAa,mCAAoC,SAAQ,KAAK;IAC5D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;gBAElB,KAAK,EAAE;QACjB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;QAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;QAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;KAC/B;CAUF;AAID,gFAAgF;AAChF,MAAM,MAAM,WAAW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEjF;2EAC2E;AAC3E,wBAAgB,aAAa,CAC3B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,WAAW,GACpB,WAAW,CAOb;AAkJD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,cAAc,CAAA;IACvB,OAAO,EAAE,iBAAiB,CAAA;IAC1B,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB;qDACiD;IACjD,MAAM,EAAE,MAAM,CAAA;CACf;AAeD,MAAM,WAAW,cAAc;IAC7B,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,yBAAyB;IACxC,4EAA4E;IAC5E,OAAO,EAAE,WAAW,CAAA;IACpB,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,eAAe,CAAA;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B;0EACsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,wEAAwE;IACxE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,2EAA2E;IAC3E,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;iFAC6E;IAC7E,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,4EAA4E;IAC5E,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAErC,QAAQ,CAAC,EAAE,WAAW,CAAA;IACtB,WAAW,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAA;IAC9D,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACxD;;;yCAGqC;IACrC,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE;QAC1B,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAA;QAC/B,cAAc,EAAE,MAAM,CAAA;KACvB,KAAK,mBAAmB,GAAG,SAAS,CAAA;IACrC;;8DAE0D;IAC1D,yBAAyB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAA;IAC/E,gFAAgF;IAChF,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C,0EAA0E;IAC1E,qBAAqB,CAAC,EAAE,sBAAsB,CAAA;IAC9C,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,8CAA8C;IAC9C,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B,mDAAmD;IACnD,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,6EAA6E;IAC7E,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5D,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAChC,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;IACtD;kFAC8E;IAC9E,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,cAAc,CAAC;QAAC,KAAK,EAAE,kBAAkB,CAAA;KAAE,KAAK,IAAI,CAAA;IACvF,uEAAuE;IACvE,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CACjD;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,WAAW,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAA;CACnD;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,WAAW,CAAA;IACpB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,MAAM,CAAA;IACjB,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACpC,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;CAC5B;AAmDD,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,OAAO,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,WAAW,EAAE,OAAO,CAAA;IACpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CACrB;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,cAAc,CAiDhB;AAoDD,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,yBAAyB,GAC9B,OAAO,CAAC,wBAAwB,CAAC,CA0dnC;AAID,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACjC,IAAI,CAAC,EAAE,OAAO,CAAA;CACf;AA4ID;kDACkD;AAClD,eAAO,MAAM,4BAA4B,QAGkC,CAAA;AAE3E;;;;GAIG;AACH;;;;;;;;;;;;+DAY+D;AAC/D,eAAO,MAAM,8BAA8B,QAAS,CAAA;AACpD,eAAO,MAAM,6BAA6B,OAAQ,CAAA;AAElD,eAAO,MAAM,gCAAgC,QAE5C,CAAA;AAiCD,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,EAAE,EAAE,eAAe,EACnB,OAAO,GAAE,WAAqD,EAC9D,KAAK,GAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAyD,EAC5F,qBAAqB,CAAC,EAAE,sBAAsB,GAC7C,OAAO,CAAC,MAAM,CAAC,CAkPjB;AAED,kFAAkF;AAClF,MAAM,WAAW,iBAAiB;IAChC,cAAc,CAAC,EAAE,OAAO,oBAAoB,CAAA;IAC5C,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,eAAe,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CAC9H;AAED;;;;;;;;GAQG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EAAE,EACd,EAAE,EAAE,eAAe,EACnB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAoLjB"}

package/dist/hosted-session-cli.js

@@ -44,6 +44,7 @@ import { buildEgressPolicy, DEFAULT_EGRESS_CANARY_HOST } from './egress-policy.j
 import { DEFAULT_HOSTED_MODEL, hostedLoopCommand } from './hosted-loop.js';
 import { hostedBootCommand } from './hosted-boot.js';
 import { mergeJobCommand } from './merge-job.js';
+import { skilledProposerBakeCommand } from './skilled-proposer-launch.js';
 import { authedFetch } from './http.js';
 import { resolveBaseUrl } from './http.js';
 import { findUnknownOption } from './option-validation.js';
@@ -1185,7 +1186,11 @@ export async function hostedCommand(args, io, deps = {}) {
         if (positional[1] === 'merge-job') {
             return mergeJobCommand(io);
         }
-        io.printErr?.('Usage: orizu internal <hosted-loop --context <path> | hosted-boot | merge-job>');
+        if (positional[1] === 'bake-skilled-proposer-venv')
+            return skilledProposerBakeCommand(io);
+        if (positional[1] === 'verify-skilled-proposer-bake')
+            return skilledProposerBakeCommand(io, true);
+        io.printErr?.('Usage: orizu internal <hosted-loop --context <path> | hosted-boot | merge-job | bake-skilled-proposer-venv | verify-skilled-proposer-bake>');
         return 1;
     }
     const unknownOption = findUnknownOption(args, HOSTED_START_OPTIONS, HOSTED_START_VALUE_OPTIONS);

package/dist/http.d.ts

@@ -4,5 +4,6 @@ export declare function resolveBaseUrl(flags?: GlobalFlags): string;
 export declare function resolveLoginBaseUrl(flags?: GlobalFlags): string;
 export declare function getBaseUrl(): string;
 export declare function assertSecureTokenTransport(baseUrl: string): void;
+export declare function credentialRequestRedirectPolicy(): Pick<RequestInit, 'redirect'>;
 export declare function authedFetch(path: string, init?: RequestInit): Promise<Response>;
 //# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAMA,OAAO,EAAkB,WAAW,EAAoB,MAAM,mBAAmB,CAAA;AAKjF,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,QAEhD;AAED,wBAAgB,cAAc,CAAC,KAAK,GAAE,WAA0B,GAAG,MAAM,CAiBxE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,GAAE,WAA0B,GAAG,MAAM,CAY7E;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAWD,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,QAmBzD;AA8CD,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,qBAkDrE"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAMA,OAAO,EAAkB,WAAW,EAAoB,MAAM,mBAAmB,CAAA;AAKjF,wBAAgB,cAAc,CAAC,KAAK,EAAE,WAAW,QAEhD;AAED,wBAAgB,cAAc,CAAC,KAAK,GAAE,WAA0B,GAAG,MAAM,CAiBxE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,GAAE,WAA0B,GAAG,MAAM,CAY7E;AAED,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAWD,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,QAmBzD;AAeD,wBAAgB,+BAA+B,IAAI,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,CAE/E;AAkCD,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,WAAgB,qBAqDrE"}

package/dist/http.js

@@ -65,6 +65,9 @@ function isExpired(expiresAt) {
     const nowUnix = Math.floor(Date.now() / 1000);
     return expiresAt <= nowUnix + 30;
 }
+export function credentialRequestRedirectPolicy() {
+    return process.env.ORIZU_CLI_AUTH_REDIRECT === 'error' ? { redirect: 'error' } : {};
+}
 async function refreshCredentials(baseUrl, credentials) {
     if (!isSessionCredentials(credentials)) {
         throw new Error('API key credentials do not refresh. Run `orizu login` again if access fails.');
@@ -74,6 +77,7 @@ async function refreshCredentials(baseUrl, credentials) {
         method: 'POST',
         headers: { 'Content-Type': 'application/json' },
         body: JSON.stringify({ refreshToken: credentials.refreshToken }),
+        ...credentialRequestRedirectPolicy(),
     });
     if (!response.ok) {
         throw new Error('Session expired. Run `orizu login` again.');
@@ -107,6 +111,7 @@ export async function authedFetch(path, init = {}) {
                 ...(init.headers || {}),
                 Authorization: `Bearer ${envBearer}`,
             },
+            ...credentialRequestRedirectPolicy(),
         });
     }
     const credentials = getServerCredentials(baseUrl);
@@ -123,6 +128,7 @@ export async function authedFetch(path, init = {}) {
             ...(init.headers || {}),
             Authorization: `Bearer ${getAuthorizationToken(activeCredentials)}`,
         },
+        ...credentialRequestRedirectPolicy(),
     });
     if (response.status === 401 && isSessionCredentials(activeCredentials)) {
         activeCredentials = await refreshCredentials(baseUrl, activeCredentials);
@@ -132,6 +138,7 @@ export async function authedFetch(path, init = {}) {
                 ...(init.headers || {}),
                 Authorization: `Bearer ${getAuthorizationToken(activeCredentials)}`,
             },
+            ...credentialRequestRedirectPolicy(),
         });
     }
     return response;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AA2FgF,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AA8BhJ,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAgU5E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAUD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOnD;AAyBD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE5D;AAcD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,GAAG,CAqB5E;AA6BD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAgBtD;AA+jKD,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CA0B1G;AAED,eAAO,MAAM,iBAAiB,SAAU,CAAA;AACxC,eAAO,MAAM,uBAAuB,QAAkB,CAAA;AACtD,eAAO,MAAM,oBAAoB,aAgB/B,CAAA;AAEF,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,CAaxH;AAWD,wBAAsB,wBAAwB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,IAAI,CAAA;CAAE,CAAC,CA6B3H;AA0LD,wBAAsB,IAAI,CAAC,OAAO,WAAwB,iBA0gBzD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAmGgF,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAoChJ,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAgU5E,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAUD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOnD;AAyBD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE5D;AAcD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,GAAG,CAqB5E;AA6BD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAgBtD;AAkkKD,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CA0B1G;AAED,eAAO,MAAM,iBAAiB,SAAU,CAAA;AACxC,eAAO,MAAM,uBAAuB,QAAkB,CAAA;AACtD,eAAO,MAAM,oBAAoB,aAgB/B,CAAA;AAEF,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,CAaxH;AAWD,wBAAsB,wBAAwB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,IAAI,CAAA;CAAE,CAAC,CAoC3H;AA0LD,wBAAsB,IAAI,CAAC,OAAO,WAAwB,iBAygBzD"}

package/dist/index.js

@@ -21,7 +21,7 @@ import { parseGlobalFlags } from './global-flags.js';
 import { getCapabilities, renderHelpForArgs, renderRootHelp } from './help.js';
 import { runLocalAppPreview } from './preview-runtime.js';
 import { readAssignmentManifestJsonlFile } from './task-assignment-manifest.js';
-import { assertSecureTokenTransport, authedFetch, getBaseUrl, resolveLoginBaseUrl, setGlobalFlags } from './http.js';
+import { assertSecureTokenTransport, authedFetch, credentialRequestRedirectPolicy, getBaseUrl, resolveLoginBaseUrl, setGlobalFlags, } from './http.js';
 import { computeSkillContentHash, getSkillInstallPath, getSkillTargetStatus, getTargetForAgent, installSkillTarget, isSkillInstallAgent, isSkillInstallTarget, resolveSkillSource, SKILL_INSTALL_AGENTS, SKILL_INSTALL_TARGETS, targetNeedsOverwrite, } from './skill-installer.js';
 import { renderBanner } from './banner.js';
 import { formatTaskCreateError } from './task-create-error.js';
@@ -33,6 +33,7 @@ import { ARTIFACT_MAX_BYTES, runnerOptimizerCommand } from './artifact-pull.js';
 import { killSwitchCommand } from './kill-switch-cli.js';
 import { egressAllowlistCommand } from './egress-allowlist-cli.js';
 import { acceptScoreRunCommand } from './scores-accept-cli.js';
+import { cleanupAll, throwWithCleanup } from './cleanup.js';
 import { listOptimizationRunsCommand } from './optimizations-list-cli.js';
 import { promoteOptimizationCommand } from './optimizations-promote-cli.js';
 import { scorersCommand } from './scorers-cli.js';
@@ -41,7 +42,7 @@ import { archiveArtifactCommand, listAssignmentsCommand, printAppSummaries, prin
 import { teamConnectorsCommand } from './team-connectors-cli.js';
 import { manifestsCommand } from './manifests-cli.js';
 import { workbenchCommand } from './workbench-cli.js';
-import { hostedCommand } from './hosted-session-cli.js';
+import { dispatchHostedCommands } from './hosted-commands.js';
 import { workspaceSyncCommand } from './workspace-sync.js';
 import { runGitCredentialInvocation } from './git-credential.js';
 import { instructionSetsCommand, syncToDisk } from './instruction-sets-cli.js';
@@ -52,7 +53,7 @@ import { readMarkdownReportInput } from './markdown-report-input.js';
 import { promptPushErrorMessage, promptReportCommand } from './prompt-report-cli.js';
 import { setPromptLabel } from './prompt-label-cli.js';
 import { printPromptSummaryTable } from './prompt-summary-table.js';
-import { assertSnapshotManifestConfined, verifyGepaRunnerDirsFromArgs, verifyRunnerDirRegistered } from './runner-dir-verify.js';
+import { assertSnapshotManifestConfined, extractFlagValue, verifyGepaRunnerDirsFromArgs, verifyRunnerDirRegistered, } from './runner-dir-verify.js';
 import { runScorersRegister } from './scorer-draft-push.js';
 import { runZipArtifactPush } from './zip-draft-push.js';
 import { runGithubLink, runInteractiveHostedSetup } from './github-setup.js';
@@ -65,7 +66,7 @@ import { dispatchGepaEngine } from './gepa-engine-dispatch.js';
 import { resolveGepaInstructionSetProfileVersion } from './instruction-set-gepa-launch.js';
 import { getGepaPythonCommand } from './gepa-python-command.js';
 import { getGepaPythonPathEntries } from './gepa-python-paths.js';
-import { prepareSkilledProposerLaunch } from './skilled-proposer-launch.js';
+import { prepareSkilledProposerLaunch, spawnSkilledProposerChild } from './skilled-proposer-launch.js';
 export { parseJsonResponse, sanitizeTerminalText } from './json-response.js';
 function getErrorMessage(error) {
     return error instanceof Error ? error.message : String(error);
@@ -811,6 +812,7 @@ async function logout() {
             body: 'refreshToken' in credentials
                 ? JSON.stringify({ refreshToken: credentials.refreshToken })
                 : undefined,
+            ...credentialRequestRedirectPolicy(),
         });
         if (!response.ok) {
             remoteLogoutError = sanitizeTerminalText(await response.text()).slice(0, 180);
@@ -1205,39 +1207,6 @@ function refusePromptMutation(replacement) {
     process.exitCode = 1;
     throw new Error(`Use: orizu instructions ${replacement}`);
 }
-async function bindPromptScorer(role) {
-    const promptId = getPositionalArg(3);
-    const project = getArg('--project') || await resolveProjectSlug(null);
-    const scorerVersionId = getArg('--scorer-version');
-    if (!promptId || !scorerVersionId) {
-        throw new Error(`Usage: orizu prompts scorers ${role === 'headline' ? 'set-headline' : 'add'} <prompt-id> --scorer-version <id> [--dataset-version <id> --split-set <id> --split <name>] [--project <team/project>] [--json]`);
-    }
-    const response = await authedFetch(`/api/cli/prompts/scorers?project=${encodeURIComponent(project)}`, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({
-            promptId,
-            scorerVersionId,
-            role,
-            datasetVersionId: getArg('--dataset-version') || undefined,
-            splitSetId: getArg('--split-set') || undefined,
-            splitName: getArg('--split') || undefined,
-        }),
-    });
-    if (!response.ok) {
-        throw new Error(`Failed to bind prompt scorer: ${await response.text()}`);
-    }
-    const data = await parseJsonResponse(response, 'Prompt scorer bind');
-    if (hasJsonFlag()) {
-        printJson(data);
-        return;
-    }
-    printLine(`${role === 'headline' ? 'Set headline' : 'Added'} scorer ${sanitizeTerminalText(scorerVersionId)} for ${sanitizeTerminalText(promptId)}`);
-    if (data.owner) {
-        printLine(`Owner: ${sanitizeTerminalText(promptId)} -> ` +
-            `${sanitizeTerminalText(data.owner.instructionSetSlug)} / ${sanitizeTerminalText(data.owner.componentKey)}`);
-    }
-}
 function getPositionalArg(index) {
     const value = cliArgs[index];
     return value && !value.startsWith('--') ? value : null;
@@ -1784,6 +1753,30 @@ async function updateOptimizationRunLifecycle(action) {
 }
 // ALI-1073 list moved to optimizations-list-cli.ts (line ratchet, ALI-976);
 // ALI-1175 labels its best scores as agent-reported evidence there.
+const GEPA_RUNNER_MATERIALIZATION_PAIRS = [
+    { versionFlag: '--runner-version-id', dirFlag: '--candidate-runner-dir' },
+    { versionFlag: '--scorer-runner-version-id', dirFlag: '--scorer-runner-dir' },
+];
+async function materializeMissingGepaRunnerDirs(args) {
+    const rewritten = [...args];
+    const cleanups = [];
+    const cleanup = () => cleanupAll(cleanups, 'Failed to clean materialized runner directories');
+    try {
+        for (const pair of GEPA_RUNNER_MATERIALIZATION_PAIRS) {
+            const runnerVersionId = extractFlagValue(rewritten, pair.versionFlag);
+            const runnerDir = extractFlagValue(rewritten, pair.dirFlag);
+            if (!runnerVersionId || runnerDir)
+                continue;
+            const materialized = await materializeRunnerVersion(runnerVersionId);
+            cleanups.push(materialized.cleanup);
+            rewritten.push(pair.dirFlag, materialized.runnerDir);
+        }
+    }
+    catch (error) {
+        throwWithCleanup(error, cleanups, 'Runner materialization failed and cleanup also failed');
+    }
+    return { args: rewritten, cleanup };
+}
 async function runGepaOptimization() {
     const project = getArg('--project') || await resolveProjectSlug(null);
     const baseUrl = getBaseUrl();
@@ -1796,11 +1789,12 @@ async function runGepaOptimization() {
     // itself (both argparse flag forms), fail-closed on half-populated pairs,
     // and REWRITES the dir flags to verified snapshots (the exact hashed bytes)
     // so a post-hash mutation of the original dirs cannot change what runs.
-    const verified = await verifyGepaRunnerDirsFromArgs(forwardedArgs);
-    forwardedArgs = verified.args;
-    let result;
+    const materialized = await materializeMissingGepaRunnerDirs(forwardedArgs);
+    let verified;
     let selectedEngine = 'official';
     try {
+        verified = await verifyGepaRunnerDirsFromArgs(materialized.args);
+        forwardedArgs = verified.args;
         // Uniform resolution (ALI-1090): honors ORIZU_TOKEN / ORIZU_TOKEN_FILE before
         // credentials.json so hosted sandboxes can run optimizations. Read at spawn
         // time — AFTER the verification awaits above, so a hosted token-file
@@ -1827,17 +1821,21 @@ async function runGepaOptimization() {
             dispatch.environment.ORIZU_INSTRUCTION_SET_PROFILE_VERSION_ID = instructionSetProfileVersionId;
         selectedEngine = dispatch.engine;
         const launch = prepareSkilledProposerLaunch(python, dispatch.engine, dispatch.environment);
-        result = spawnSync(launch.python, ['-m', dispatch.module, ...dispatch.args], { stdio: 'inherit', env: launch.environment });
-    }
-    finally {
-        verified.cleanup();
-    }
-    if (result.error) {
-        throw new Error(`${selectedEngine} GEPA engine failed: ${result.error.message}`, { cause: result.error });
+        const result = await spawnSkilledProposerChild(launch.python, ['-m', dispatch.module, ...dispatch.args], dispatch.engine, launch.environment);
+        if (result.error) {
+            throw new Error(`${selectedEngine} GEPA engine failed: ${result.error.message}`, { cause: result.error });
+        }
+        if (result.status !== 0) {
+            throw new Error(`${selectedEngine} GEPA engine failed with exit code ${result.status}`);
+        }
     }
-    if (result.status !== 0) {
-        throw new Error(`${selectedEngine} GEPA engine failed with exit code ${result.status}`);
+    catch (error) {
+        throwWithCleanup(error, [
+            ...(verified ? [verified.cleanup] : []),
+            materialized.cleanup,
+        ], 'GEPA launch failed and runner cleanup also failed');
     }
+    cleanupAll([verified.cleanup, materialized.cleanup], 'Failed to clean GEPA runner directories');
     if (hasJsonFlag()) {
         printJson({ status: 'completed', exitCode: 0 });
     }
@@ -4500,24 +4498,27 @@ export async function materializeRunnerVersion(runnerVersionId) {
     const tempDir = mkdtempSync(join(tmpdir(), 'orizu-runner-version-'));
     const zipPath = join(tempDir, 'runner.zip');
     const runnerDir = join(tempDir, 'runner');
-    const zipBytes = new Uint8Array(await response.arrayBuffer());
-    if (zipBytes.byteLength > ARTIFACT_MAX_BYTES) {
-        rmSync(tempDir, { recursive: true, force: true });
-        throw new Error(`Runner artifact exceeds ${ARTIFACT_MAX_BYTES} bytes`);
-    }
-    writeFileSync(zipPath, zipBytes);
-    const result = spawnSync('unzip', ['-q', zipPath, '-d', runnerDir], {
-        encoding: 'utf8',
-    });
-    if (result.error) {
-        rmSync(tempDir, { recursive: true, force: true });
-        throw result.error;
+    const cleanup = () => rmSync(tempDir, { recursive: true, force: true });
+    try {
+        const zipBytes = new Uint8Array(await response.arrayBuffer());
+        if (zipBytes.byteLength > ARTIFACT_MAX_BYTES) {
+            throw new Error(`Runner artifact exceeds ${ARTIFACT_MAX_BYTES} bytes`);
+        }
+        writeFileSync(zipPath, zipBytes);
+        const result = spawnSync('unzip', ['-q', zipPath, '-d', runnerDir], {
+            encoding: 'utf8',
+        });
+        if (result.error) {
+            throw result.error;
+        }
+        if (result.status !== 0) {
+            throw new Error(`unzip failed: ${sanitizeTerminalText(result.stderr || result.stdout || '')}`);
+        }
+        return { runnerDir, cleanup };
     }
-    if (result.status !== 0) {
-        rmSync(tempDir, { recursive: true, force: true });
-        throw new Error(`unzip failed: ${sanitizeTerminalText(result.stderr || result.stdout || '')}`);
+    catch (error) {
+        throwWithCleanup(error, [cleanup], `Runner ${runnerVersionId} materialization failed and cleanup also failed`);
     }
-    return { runnerDir, cleanup: () => rmSync(tempDir, { recursive: true, force: true }) };
 }
 async function runnersExec() {
     const prompt = getArg('--prompt');
@@ -4854,12 +4855,10 @@ export async function main(rawArgs = process.argv.slice(2)) {
         return;
     }
     if (command === 'prompts' && subcommand === 'scorers' && cliArgs[2] === 'set-headline') {
-        await bindPromptScorer('headline');
-        return;
+        refusePromptMutation('scorers set-headline <set> --key <component-key> --scorer-version <id> --project <team/project>');
     }
     if (command === 'prompts' && subcommand === 'scorers' && cliArgs[2] === 'add') {
-        await bindPromptScorer('tracked');
-        return;
+        refusePromptMutation('scorers add <set> --key <component-key> --scorer-version <id> --project <team/project>');
     }
     if (command === 'judges' && subcommand === 'list') {
         await listJudges();
@@ -4930,6 +4929,8 @@ export async function main(rawArgs = process.argv.slice(2)) {
         await acceptScoreRunCommand(cliArgs.slice(2), { json: hasJsonFlag(), print: printLine, resolveProjectSlug });
         return;
     }
+    if (await dispatchHostedCommands(cliArgs, { environment: process.env, getArg, json: hasJsonFlag(), printJson, printLine, printErr: printError, resolveProjectSlug, setExitCode: code => { process.exitCode = code; } }))
+        return;
     if (command === 'optimizations' && subcommand === 'start') {
         await startOptimizationRun();
         return;
@@ -4958,7 +4959,8 @@ export async function main(rawArgs = process.argv.slice(2)) {
     }
     if (command === 'optimizations' && subcommand === 'promote') {
         await promoteOptimizationCommand(cliArgs.slice(2), {
-            json: hasJsonFlag(), print: printLine, resolveProjectSlug, fetcher: authedFetch,
+            json: hasJsonFlag(), origin: parsed.flags, print: printLine, printErr: printError,
+            resolveProjectSlug, fetcher: authedFetch,
         });
         return;
     }
@@ -5106,10 +5108,6 @@ export async function main(rawArgs = process.argv.slice(2)) {
         await downloadAnnotations();
         return;
     }
-    if (command === 'internal' || (command === 'session' && subcommand === 'start' && hasArg('--hosted'))) {
-        process.exitCode = await hostedCommand(cliArgs, { json: hasJsonFlag(), print: printLine, printErr: printError });
-        return;
-    }
     if (command === 'session' || command === 'run') {
         process.exitCode = await workbenchCommand(cliArgs, { json: hasJsonFlag(), print: printLine });
         return;

package/dist/instruction-set-loader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instruction-set-loader.d.ts","sourceRoot":"","sources":["../src/instruction-set-loader.ts"],"names":[],"mappings":"AAGA,qBAAa,yBAA0B,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;CAClC;AAOD,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAwBvH"}
+{"version":3,"file":"instruction-set-loader.d.ts","sourceRoot":"","sources":["../src/instruction-set-loader.ts"],"names":[],"mappings":"AAGA,qBAAa,yBAA0B,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM;CAClC;AA2DD,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAsBvH"}

package/dist/instruction-set-loader.js

@@ -1,4 +1,4 @@
-import { existsSync, realpathSync, readFileSync, statSync } from 'node:fs';
+import { existsSync, realpathSync, readFileSync, readdirSync, statSync } from 'node:fs';
 import { resolve, sep } from 'node:path';
 export class InstructionSetLoaderError extends Error {
     code;
@@ -9,11 +9,63 @@ export class InstructionSetLoaderError extends Error {
     }
 }
 function inside(root, candidate) { return candidate === root || candidate.startsWith(`${root}${sep}`); }
-export function loadInstructionSet(directory, name, modelConfigIdentity) {
-    const unresolvedRoot = resolve(directory, name);
-    if (!existsSync(unresolvedRoot) || !statSync(unresolvedRoot).isDirectory())
+function manifestMatchesReference(candidate, reference) {
+    try {
+        const manifest = JSON.parse(readFileSync(resolve(candidate, 'manifest.json'), 'utf8'));
+        return manifest.name === reference || manifest.slug === reference;
+    }
+    catch {
+        return false;
+    }
+}
+function resolveSetRoot(directory, reference) {
+    let directoryRoot;
+    try {
+        directoryRoot = realpathSync(directory);
+    }
+    catch {
         throw new InstructionSetLoaderError('instruction_set_not_synced');
-    const setRoot = realpathSync(unresolvedRoot);
+    }
+    const direct = resolve(directoryRoot, reference);
+    try {
+        if (inside(directoryRoot, direct) && existsSync(direct) && statSync(direct).isDirectory()) {
+            const realDirect = realpathSync(direct);
+            if (inside(directoryRoot, realDirect)) {
+                try {
+                    const manifest = JSON.parse(readFileSync(resolve(realDirect, 'manifest.json'), 'utf8'));
+                    if (manifest.name === reference || manifest.slug === reference) {
+                        return realDirect;
+                    }
+                }
+                catch {
+                    // Preserve the exact-path loader's specific missing/invalid manifest error.
+                    return realDirect;
+                }
+            }
+        }
+    }
+    catch {
+        // A stale or unreadable direct-path candidate must not shadow a valid set.
+    }
+    const matches = readdirSync(directoryRoot, { withFileTypes: true }).flatMap(entry => {
+        try {
+            if (entry.name.startsWith('.') || !entry.isDirectory())
+                return [];
+            const candidate = realpathSync(resolve(directoryRoot, entry.name));
+            return inside(directoryRoot, candidate) && manifestMatchesReference(candidate, reference)
+                ? [candidate]
+                : [];
+        }
+        catch {
+            return [];
+        }
+    });
+    if (matches.length !== 1)
+        throw new InstructionSetLoaderError(matches.length > 1 ? 'instruction_set_reference_ambiguous' : 'instruction_set_not_synced');
+    return matches[0];
+}
+export function loadInstructionSet(directory, name, modelConfigIdentity) {
+    const setRoot = resolveSetRoot(directory, name);
     const manifestPath = resolve(setRoot, 'manifest.json');
     if (!existsSync(manifestPath))
         throw new InstructionSetLoaderError('instruction_set_manifest_missing');

package/dist/instruction-sets-cli.d.ts

@@ -1,4 +1,4 @@
-import { renameSync, writeFileSync } from 'node:fs';
+import { renameSync, rmSync, writeFileSync } from 'node:fs';
 export interface InstructionSetsCommandIo {
     json: boolean;
     print: (line: string) => void;
@@ -23,6 +23,8 @@ export interface SyncProfile {
     production: SyncMaterial | null;
 }
 export interface SyncSet {
+    projectId?: string;
+    instructionSetId?: string;
     name: string;
     slug?: string;
     description?: string | null;
@@ -34,7 +36,8 @@ export interface SyncSet {
 export interface SyncFileOps {
     writeFileSync: typeof writeFileSync;
     renameSync?: typeof renameSync;
+    rmSync?: typeof rmSync;
 }
-export declare function syncToDisk(out: string, set: SyncSet, fileOps?: SyncFileOps): void;
+export declare function syncToDisk(out: string, set: SyncSet, fileOps?: SyncFileOps): string;
 export declare function instructionSetsCommand(args: string[], io: InstructionSetsCommandIo): Promise<number>;
 //# sourceMappingURL=instruction-sets-cli.d.ts.map

package/dist/instruction-sets-cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instruction-sets-cli.d.ts","sourceRoot":"","sources":["../src/instruction-sets-cli.ts"],"names":[],"mappings":"AAGA,OAAO,EAAuC,UAAU,EAAoB,aAAa,EAAE,MAAM,SAAS,CAAA;AAI1G,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CACjE;AA+BD,MAAM,WAAW,aAAa;IAAG,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;AAC5G,MAAM,WAAW,YAAY;IAAG,gBAAgB,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;CAAE;AAC/K,MAAM,WAAW,WAAW;IAAG,mBAAmB,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,YAAY,GAAG,IAAI,CAAA;CAAE;AACnH,MAAM,WAAW,OAAO;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,YAAY,CAAC;IAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE;AAM7K,MAAM,WAAW,WAAW;IAAG,aAAa,EAAE,OAAO,aAAa,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,UAAU,CAAA;CAAE;AAoCpG,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,GAAE,WAA+B,QAyC7F;AAED,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CA+K1G"}
+{"version":3,"file":"instruction-sets-cli.d.ts","sourceRoot":"","sources":["../src/instruction-sets-cli.ts"],"names":[],"mappings":"AAGA,OAAO,EAAuC,UAAU,EAAE,MAAM,EAAY,aAAa,EAAE,MAAM,SAAS,CAAA;AAI1G,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,kBAAkB,EAAE,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CACjE;AA+BD,MAAM,WAAW,aAAa;IAAG,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;AAC5G,MAAM,WAAW,YAAY;IAAG,gBAAgB,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,mBAAmB,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAA;CAAE;AAC/K,MAAM,WAAW,WAAW;IAAG,mBAAmB,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,YAAY,GAAG,IAAI,CAAA;CAAE;AACnH,MAAM,WAAW,OAAO;IACtB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,OAAO,EAAE,YAAY,CAAA;IACrB,QAAQ,EAAE,WAAW,EAAE,CAAA;IACvB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CACtB;AASD,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,OAAO,aAAa,CAAA;IACnC,UAAU,CAAC,EAAE,OAAO,UAAU,CAAA;IAC9B,MAAM,CAAC,EAAE,OAAO,MAAM,CAAA;CACvB;AA0FD,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,GAAE,WAA+B,UAsF7F;AAED,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAqN1G"}