@pome-sh/checks 0.3.9 → 0.4.0

package/CHANGELOG.md

@@ -1,5 +1,47 @@
 # @pome-sh/checks
 
+## 0.4.0 — 2026-08-29
+
+**Every twin's `parseSeed` refuses a key no seed field matches** (F-1689). The
+github, slack and stripe schemas this package re-exports are `z.strictObject` at
+every level; gmail and linear already were. A misspelled field used to be an
+absence rather than an error — the seed parsed clean, the twin booted, and the
+route that should have served the field answered `[]`.
+
+This is the SQLite-free door pome-cloud reaches `parseSeed` through, so the
+refusal lands on the hosted seed path with it. `packages/checks/test/seed-strictness.test.ts`
+is the gate: it walks each twin's own zod tree, so a nested object added later
+without strictness reds even though nothing in that file names it.
+
+All five `parseSeed`s drop a top-level `_meta` before validating — Pome's own
+provenance block, dropped rather than declared so it stays out of each schema's
+declared field set.
+
+`@pome-sh/twin-stripe/seed` is a zod-only leaf now (F-584): `applySeed` and its
+row inserts moved to that twin's `apply-seed.ts`, so the module this package
+bundles for `stripe.seedSchema` no longer reaches `./domain/schema.js`. This
+package never re-exported `applySeed` — `surface.test.ts` asserts it does not —
+so nothing it serves changes. What changes is that the declaration it bundles is
+now reachable from a consumer with no SQLite, which is what let the CLI stop
+hand-copying the stripe seed shape.
+
+`slack` gains the `SlackStateSeed` type, matching the other four twins.
+
+`github.parseSeed` refuses a seed that claims one number for two entities in a
+repository (F-1153) — an issue and a pull request, two pull requests, or two
+issues. Issues and pull requests share one per-repo counter, so a number names
+one entity or the other. This is a NEW refusal on a seed that parsed clean
+before, and it is what makes the applier's renumber unambiguous.
+
+## 0.3.10 — 2026-08-29
+
+**Comment only.** The `stripe.refund-count` / `stripe.refund-exists` source file
+carried a `//` comment claiming that an `Idempotency-Key` on a retry does not
+separate one refund row from two. Measured false: with the key one row lands,
+without it two. Unlike 0.3.9, the corrected text is **not** a published string —
+no `description`, `template`, `params` or id moved, so nothing this package
+serves changes and no consumer needs to act.
+
 ## 0.3.9 — 2026-08-27
 
 **Prose only.** Two Linear declared-check descriptions (`linear.issue-has-label`,

package/dist/_types/sdk/failure-injection-rules.d.ts

@@ -23,7 +23,7 @@ export declare const failureInjectionRuleSchema: z.ZodObject<{
     }>>;
     status: z.ZodNumber;
     body: z.ZodUnknown;
-}, z.core.$strip>;
+}, z.core.$strict>;
 export type FailureInjectionStore = {
     setRules(rules: FailureInjectionRule[]): void;
     clear(): void;

package/dist/_types/twin-github/src/seed.d.ts

@@ -8,7 +8,7 @@ export declare const seedSchema: z.ZodObject<{
             Organization: "Organization";
         }>>;
         name: z.ZodDefault<z.ZodString>;
-    }, z.core.$strip>>>;
+    }, z.core.$strict>>>;
     repositories: z.ZodArray<z.ZodObject<{
         owner: z.ZodString;
         name: z.ZodString;
@@ -20,13 +20,13 @@ export declare const seedSchema: z.ZodObject<{
             name: z.ZodString;
             color: z.ZodDefault<z.ZodString>;
             description: z.ZodDefault<z.ZodString>;
-        }, z.core.$strip>>>;
+        }, z.core.$strict>>>;
         files: z.ZodDefault<z.ZodArray<z.ZodObject<{
             path: z.ZodString;
             content: z.ZodOptional<z.ZodString>;
             branch: z.ZodOptional<z.ZodString>;
             renamed_from: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>>;
+        }, z.core.$strict>>>;
         milestones: z.ZodDefault<z.ZodArray<z.ZodObject<{
             number: z.ZodOptional<z.ZodNumber>;
             title: z.ZodString;
@@ -36,11 +36,11 @@ export declare const seedSchema: z.ZodObject<{
                 closed: "closed";
             }>>;
             due_on: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>>;
+        }, z.core.$strict>>>;
         tags: z.ZodDefault<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             target: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>>;
+        }, z.core.$strict>>>;
         releases: z.ZodDefault<z.ZodArray<z.ZodObject<{
             tag_name: z.ZodString;
             name: z.ZodOptional<z.ZodString>;
@@ -49,7 +49,7 @@ export declare const seedSchema: z.ZodObject<{
             draft: z.ZodDefault<z.ZodBoolean>;
             prerelease: z.ZodDefault<z.ZodBoolean>;
             author: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>>>;
+        }, z.core.$strict>>>;
         issues: z.ZodDefault<z.ZodArray<z.ZodObject<{
             number: z.ZodOptional<z.ZodNumber>;
             title: z.ZodString;
@@ -63,8 +63,8 @@ export declare const seedSchema: z.ZodObject<{
             comments: z.ZodDefault<z.ZodArray<z.ZodObject<{
                 body: z.ZodString;
                 author: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>>>;
-        }, z.core.$strip>>>;
+            }, z.core.$strict>>>;
+        }, z.core.$strict>>>;
         pull_requests: z.ZodDefault<z.ZodArray<z.ZodObject<{
             number: z.ZodOptional<z.ZodNumber>;
             title: z.ZodString;
@@ -84,7 +84,7 @@ export declare const seedSchema: z.ZodObject<{
                     COMMENTED: "COMMENTED";
                 }>>;
                 body: z.ZodDefault<z.ZodString>;
-            }, z.core.$strip>>>;
+            }, z.core.$strict>>>;
             statuses: z.ZodDefault<z.ZodArray<z.ZodObject<{
                 context: z.ZodDefault<z.ZodString>;
                 state: z.ZodDefault<z.ZodEnum<{
@@ -94,11 +94,11 @@ export declare const seedSchema: z.ZodObject<{
                     pending: "pending";
                 }>>;
                 description: z.ZodDefault<z.ZodString>;
-            }, z.core.$strip>>>;
+            }, z.core.$strict>>>;
             comments: z.ZodDefault<z.ZodArray<z.ZodObject<{
                 body: z.ZodString;
                 author: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>>>;
+            }, z.core.$strict>>>;
             review_comments: z.ZodDefault<z.ZodArray<z.ZodObject<{
                 body: z.ZodString;
                 path: z.ZodString;
@@ -108,10 +108,10 @@ export declare const seedSchema: z.ZodObject<{
                     RIGHT: "RIGHT";
                 }>>;
                 author: z.ZodOptional<z.ZodString>;
-            }, z.core.$strip>>>;
-        }, z.core.$strip>>>;
-    }, z.core.$strip>>;
-}, z.core.$strip>;
+            }, z.core.$strict>>>;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
 export type ParsedGitHubStateSeed = z.output<typeof seedSchema>;
 export declare function parseSeed(input: unknown): ParsedGitHubStateSeed;
 /**

package/dist/_types/twin-slack/src/seed.d.ts

@@ -1,11 +1,12 @@
 import { z } from "zod";
 import type { SlackStateSeed } from "./types.js";
+export type { SlackStateSeed } from "./types.js";
 export declare const seedSchema: z.ZodObject<{
     team: z.ZodPrefault<z.ZodObject<{
         id: z.ZodOptional<z.ZodString>;
         name: z.ZodDefault<z.ZodString>;
         domain: z.ZodDefault<z.ZodString>;
-    }, z.core.$strip>>;
+    }, z.core.$strict>>;
     users: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodOptional<z.ZodString>;
         name: z.ZodString;
@@ -15,7 +16,7 @@ export declare const seedSchema: z.ZodObject<{
         is_admin: z.ZodDefault<z.ZodBoolean>;
         tz: z.ZodDefault<z.ZodString>;
         profile: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
-    }, z.core.$strip>>>;
+    }, z.core.$strict>>>;
     channels: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodOptional<z.ZodString>;
         name: z.ZodString;
@@ -32,9 +33,9 @@ export declare const seedSchema: z.ZodObject<{
             reactions: z.ZodDefault<z.ZodArray<z.ZodObject<{
                 name: z.ZodString;
                 user: z.ZodString;
-            }, z.core.$strip>>>;
-        }, z.core.$strip>>>;
-    }, z.core.$strip>>>;
+            }, z.core.$strict>>>;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>>>;
     files: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodOptional<z.ZodString>;
         name: z.ZodString;
@@ -43,13 +44,13 @@ export declare const seedSchema: z.ZodObject<{
         user: z.ZodOptional<z.ZodString>;
         channels: z.ZodDefault<z.ZodArray<z.ZodString>>;
         content: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>>;
+    }, z.core.$strict>>>;
     emoji: z.ZodDefault<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
         url: z.ZodOptional<z.ZodString>;
         alias: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>>;
-}, z.core.$strip>;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
 export declare function parseSeed(input: unknown): SlackStateSeed;
 /**
  * Boot-time seed loader: prefer `POME_SEED_JSON` env (set by the cloud

package/dist/_types/twin-stripe/src/seed.d.ts

@@ -1,6 +1,5 @@
 import { z } from "zod";
-import { type FailureInjectionStore } from "../../sdk/failure-injection-rules.js";
-import type { SeedState, TwinStripeDatabase } from "./types.js";
+import type { SeedState } from "./types.js";
 export type { SeedState } from "./types.js";
 export declare const DEFAULT_SID = "default";
 export declare const DEFAULT_API_KEY = "sk_test_pome_default";
@@ -31,7 +30,7 @@ declare const paymentIntentSeedSchema: z.ZodObject<{
     updated: z.ZodNumber;
     canceled_at: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
     captured_at: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
-}, z.core.$strip>;
+}, z.core.$strict>;
 declare const chargeSeedSchema: z.ZodObject<{
     id: z.ZodString;
     account_id: z.ZodString;
@@ -48,7 +47,7 @@ declare const chargeSeedSchema: z.ZodObject<{
     captured: z.ZodDefault<z.ZodBoolean>;
     currency: z.ZodString;
     created: z.ZodNumber;
-}, z.core.$strip>;
+}, z.core.$strict>;
 declare const refundSeedSchema: z.ZodObject<{
     id: z.ZodString;
     account_id: z.ZodString;
@@ -66,7 +65,7 @@ declare const refundSeedSchema: z.ZodObject<{
     balance_transaction_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     idempotency_key: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     created: z.ZodNumber;
-}, z.core.$strip>;
+}, z.core.$strict>;
 declare const balanceTransactionSeedSchema: z.ZodObject<{
     id: z.ZodString;
     account_id: z.ZodString;
@@ -83,7 +82,7 @@ declare const balanceTransactionSeedSchema: z.ZodObject<{
         available: "available";
     }>>;
     created: z.ZodNumber;
-}, z.core.$strip>;
+}, z.core.$strict>;
 export type PaymentIntentSeed = z.infer<typeof paymentIntentSeedSchema>;
 export type ChargeSeed = z.infer<typeof chargeSeedSchema>;
 export type RefundSeed = z.infer<typeof refundSeedSchema>;
@@ -93,7 +92,7 @@ export declare const seedSchema: z.ZodObject<{
         key: z.ZodString;
         sid: z.ZodString;
         account_id: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>>;
+    }, z.core.$strict>>>;
     failure_injection: z.ZodDefault<z.ZodArray<z.ZodObject<{
         method: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
         path: z.ZodString;
@@ -104,7 +103,7 @@ export declare const seedSchema: z.ZodObject<{
         }>>;
         status: z.ZodNumber;
         body: z.ZodUnknown;
-    }, z.core.$strip>>>;
+    }, z.core.$strict>>>;
     payment_intents: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         account_id: z.ZodString;
@@ -132,7 +131,7 @@ export declare const seedSchema: z.ZodObject<{
         updated: z.ZodNumber;
         canceled_at: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
         captured_at: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
-    }, z.core.$strip>>>;
+    }, z.core.$strict>>>;
     charges: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         account_id: z.ZodString;
@@ -149,7 +148,7 @@ export declare const seedSchema: z.ZodObject<{
         captured: z.ZodDefault<z.ZodBoolean>;
         currency: z.ZodString;
         created: z.ZodNumber;
-    }, z.core.$strip>>>;
+    }, z.core.$strict>>>;
     refunds: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         account_id: z.ZodString;
@@ -167,7 +166,7 @@ export declare const seedSchema: z.ZodObject<{
         balance_transaction_id: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         idempotency_key: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         created: z.ZodNumber;
-    }, z.core.$strip>>>;
+    }, z.core.$strict>>>;
     balance_transactions: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         account_id: z.ZodString;
@@ -184,8 +183,8 @@ export declare const seedSchema: z.ZodObject<{
             available: "available";
         }>>;
         created: z.ZodNumber;
-    }, z.core.$strip>>>;
-}, z.core.$strip>;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
 export declare function parseSeed(input: unknown): SeedState;
 /**
  * Boot-time seed loader: prefer `POME_SEED_JSON` env (set by the cloud
@@ -210,4 +209,3 @@ export declare function parseSeed(input: unknown): SeedState;
  */
 export declare function loadSeedFromEnv(env?: Record<string, string | undefined>): SeedState;
 export declare function defaultSeed(): SeedState;
-export declare function applySeed(db: TwinStripeDatabase, seed: SeedState, failureInjection?: FailureInjectionStore): void;

package/dist/{chunk-KTTJCEDH.js → chunk-GL26LYWH.js}

@@ -1051,8 +1051,16 @@ var gmailSeedSchema = z.object({
     }
   }
 });
+function withoutSidecarMeta(input) {
+  if (!input || typeof input !== "object" || Array.isArray(input))
+    return input;
+  if (!("_meta" in input))
+    return input;
+  const { _meta, ...rest } = input;
+  return rest;
+}
 function parseSeed(input) {
-  return gmailSeedSchema.parse(input);
+  return gmailSeedSchema.parse(withoutSidecarMeta(input));
 }
 var DEFAULT_GMAIL_AGENT_EMAIL = "pome-agent@pome-twin.test";
 function agentPathInboxMailbox(email2 = DEFAULT_GMAIL_AGENT_EMAIL) {

package/dist/{chunk-XOUAZPNB.js → chunk-JBKRUBMR.js}

@@ -699,7 +699,7 @@ var STRIPE_CHECKS = [
   x402FirstRequestChallenged,
   x402RetryIncludesPayment
 ];
-var failureInjectionRuleSchema = z.object({
+var failureInjectionRuleSchema = z.strictObject({
   method: z.string().min(1).transform((s) => s.toUpperCase()),
   path: z.string().min(1),
   attempt: z.number().int().positive(),
@@ -723,7 +723,7 @@ var PI_STATUSES = [
 var CHARGE_STATUSES2 = ["pending", "succeeded", "failed"];
 var REFUND_STATUSES = ["succeeded", "pending", "failed", "canceled"];
 var BALANCE_TX_STATUSES = ["pending", "available"];
-var paymentIntentSeedSchema = z.object({
+var paymentIntentSeedSchema = z.strictObject({
   id: z.string().min(1),
   account_id: z.string().min(1),
   amount: z.number().int(),
@@ -743,7 +743,7 @@ var paymentIntentSeedSchema = z.object({
   canceled_at: z.number().int().nullable().optional(),
   captured_at: z.number().int().nullable().optional()
 });
-var chargeSeedSchema = z.object({
+var chargeSeedSchema = z.strictObject({
   id: z.string().min(1),
   account_id: z.string().min(1),
   payment_intent_id: z.string().min(1),
@@ -756,7 +756,7 @@ var chargeSeedSchema = z.object({
   currency: z.string().min(1),
   created: z.number().int()
 });
-var refundSeedSchema = z.object({
+var refundSeedSchema = z.strictObject({
   id: z.string().min(1),
   account_id: z.string().min(1),
   charge_id: z.string().min(1),
@@ -769,7 +769,7 @@ var refundSeedSchema = z.object({
   idempotency_key: z.string().nullable().optional(),
   created: z.number().int()
 });
-var balanceTransactionSeedSchema = z.object({
+var balanceTransactionSeedSchema = z.strictObject({
   id: z.string().min(1),
   account_id: z.string().min(1),
   type: z.string().min(1),
@@ -783,8 +783,8 @@ var balanceTransactionSeedSchema = z.object({
   status: z.enum(BALANCE_TX_STATUSES).default("available"),
   created: z.number().int()
 });
-var seedSchema = z.object({
-  api_keys: z.array(z.object({
+var seedSchema = z.strictObject({
+  api_keys: z.array(z.strictObject({
     key: z.string().min(1),
     sid: z.string().min(1),
     account_id: z.string().min(1).optional()
@@ -795,8 +795,16 @@ var seedSchema = z.object({
   refunds: z.array(refundSeedSchema).default([]),
   balance_transactions: z.array(balanceTransactionSeedSchema).default([])
 });
+function withoutSidecarMeta(input) {
+  if (!input || typeof input !== "object" || Array.isArray(input))
+    return input;
+  if (!("_meta" in input))
+    return input;
+  const { _meta, ...rest } = input;
+  return rest;
+}
 function parseSeed(input) {
-  return seedSchema.parse(input);
+  return seedSchema.parse(withoutSidecarMeta(input));
 }
 function defaultSeed() {
   return {

package/dist/{chunk-CDY7HEPC.js → chunk-NKD5TSUV.js}

@@ -808,8 +808,16 @@ var linearSeedSchema = z.object({
     }
   }
 });
+function withoutSidecarMeta(input) {
+  if (!input || typeof input !== "object" || Array.isArray(input))
+    return input;
+  if (!("_meta" in input))
+    return input;
+  const { _meta, ...rest } = input;
+  return rest;
+}
 function parseSeed(input) {
-  return linearSeedSchema.parse(input);
+  return linearSeedSchema.parse(withoutSidecarMeta(input));
 }
 function defaultSeedState() {
   return {

package/dist/{chunk-6AXGU7BV.js → chunk-PCHPCMZH.js}

@@ -919,20 +919,20 @@ var GITHUB_CHECKS = [
   // slotted in front so the existing listing order does not move.
   toolWasCalled
 ];
-var seedSchema = z.object({
-  users: z.array(z.object({
+var seedSchema = z.strictObject({
+  users: z.array(z.strictObject({
     login: z.string().min(1),
     type: z.enum(["User", "Organization"]).default("User"),
     name: z.string().default("")
   })).default([]),
-  repositories: z.array(z.object({
+  repositories: z.array(z.strictObject({
     owner: z.string().min(1),
     name: z.string().min(1),
     description: z.string().default(""),
     private: z.boolean().default(false),
     default_branch: z.string().min(1).default("main"),
     collaborators: z.array(z.string().min(1)).default([]),
-    labels: z.array(z.object({
+    labels: z.array(z.strictObject({
       name: z.string().min(1),
       color: z.string().default("ededed"),
       description: z.string().default("")
@@ -952,7 +952,7 @@ var seedSchema = z.object({
     // remove. Refusing it keeps "the seed asked for a rename" and "the twin
     // serves a rename" the same statement. The content comes from the source
     // path, which the domain resolves on the branch the move happens on.
-    files: z.array(z.object({
+    files: z.array(z.strictObject({
       path: z.string().min(1),
       content: z.string().optional(),
       branch: z.string().optional(),
@@ -986,11 +986,13 @@ var seedSchema = z.object({
     // Milestones, tags and releases are repository-level entities the
     // twin already SERVES (`GET /milestones`, `/tags`, `/releases`,
     // `/releases/latest`, `/releases/tags/:tag`) and the seed could not
-    // express. Zod strips unknown keys, so a seed naming one reached the
+    // express. Zod stripped unknown keys, so a seed naming one reached the
     // domain as nothing at all and those routes could only ever answer `[]`
     // — a shape of infidelity no shape-diff can see, because an empty array
-    // on both sides compares zero elements.
-    milestones: z.array(z.object({
+    // on both sides compares zero elements. That silence is what `strictObject`
+    // closes for the general case (F-1689); this entry is the instance that
+    // was found first.
+    milestones: z.array(z.strictObject({
       // Assigned sequentially from 1 in seed order when omitted, the way
       // `nextMilestoneNumber` hands them out. Honored when given, so a
       // seed that pins `PATCH /milestones/2` addresses the milestone it
@@ -1007,11 +1009,11 @@ var seedSchema = z.object({
     // name or a SHA — and defaults to the repository's default-branch head. A
     // release whose `tag_name` matches an entry here reuses that tag rather
     // than minting a second one: `createRelease` looks the tag up first.
-    tags: z.array(z.object({
+    tags: z.array(z.strictObject({
       name: z.string().min(1),
       target: z.string().min(1).optional()
     })).default([]),
-    releases: z.array(z.object({
+    releases: z.array(z.strictObject({
       tag_name: z.string().min(1),
       // Nullable upstream, so an absent `name` means `null` — not `""`.
       name: z.string().optional(),
@@ -1021,7 +1023,7 @@ var seedSchema = z.object({
       prerelease: z.boolean().default(false),
       author: z.string().min(1).optional()
     })).default([]),
-    issues: z.array(z.object({
+    issues: z.array(z.strictObject({
       number: z.number().int().positive().optional(),
       title: z.string().min(1),
       body: z.string().default(""),
@@ -1034,12 +1036,12 @@ var seedSchema = z.object({
       // stamps every comment `pome-agent`: a world in which the agent
       // under test wrote every comment on the issue it is being asked to
       // read is not one worth testing against.
-      comments: z.array(z.object({
+      comments: z.array(z.strictObject({
         body: z.string().min(1),
         author: z.string().min(1).optional()
       })).default([])
     })).default([]),
-    pull_requests: z.array(z.object({
+    pull_requests: z.array(z.strictObject({
       number: z.number().int().positive().optional(),
       title: z.string().min(1),
       body: z.string().default(""),
@@ -1049,7 +1051,7 @@ var seedSchema = z.object({
       author: z.string().min(1).optional(),
       // Reviews seeded on this PR. `state` mirrors GitHub's review
       // state enum; `author` must exist in the user/collaborator set.
-      reviews: z.array(z.object({
+      reviews: z.array(z.strictObject({
         author: z.string().min(1),
         state: z.enum(["APPROVED", "CHANGES_REQUESTED", "COMMENTED"]).default("APPROVED"),
         body: z.string().default("")
@@ -1057,7 +1059,7 @@ var seedSchema = z.object({
       // Commit statuses applied to this PR's head SHA. Wired into the
       // commit_statuses table so get_pull_request_status and the merge
       // path see them without needing a separate setup call.
-      statuses: z.array(z.object({
+      statuses: z.array(z.strictObject({
         context: z.string().min(1).default("ci/build"),
         state: z.enum(["error", "failure", "pending", "success"]).default("success"),
         description: z.string().default("")
@@ -1069,7 +1071,7 @@ var seedSchema = z.object({
       // keeps all three apart: `reviews[].body` is the prose on a review
       // verdict, `review_comments[]` below is anchored to a file and
       // line, and THIS one is the timeline.
-      comments: z.array(z.object({
+      comments: z.array(z.strictObject({
         body: z.string().min(1),
         author: z.string().min(1).optional()
       })).default([]),
@@ -1079,7 +1081,7 @@ var seedSchema = z.object({
       // `line` must exist in it: a seeded review comment is one
       // `POST /pulls/:n/comments` could have produced, not a row only the
       // seeder can make.
-      review_comments: z.array(z.object({
+      review_comments: z.array(z.strictObject({
         body: z.string().min(1),
         path: z.string().min(1),
         line: z.number().int().positive().default(1),
@@ -1087,10 +1089,41 @@ var seedSchema = z.object({
         author: z.string().min(1).optional()
       })).default([])
     })).default([])
+  }).superRefine((repo, ctx) => {
+    const claimed = /* @__PURE__ */ new Map();
+    const entries = [
+      ["issues", repo.issues ?? []],
+      ["pull_requests", repo.pull_requests ?? []]
+    ];
+    for (const [field, rows] of entries) {
+      for (const [index, row] of rows.entries()) {
+        if (row.number === void 0)
+          continue;
+        const where = `${field}[${index}]`;
+        const first = claimed.get(row.number);
+        if (first === void 0) {
+          claimed.set(row.number, where);
+          continue;
+        }
+        ctx.addIssue({
+          code: "custom",
+          path: [field, index, "number"],
+          message: `number ${row.number} is claimed by both ${first} and ${where} in ${repo.owner}/${repo.name}. Issues and pull requests share one per-repo counter, so a number names one entity or the other.`
+        });
+      }
+    }
   }))
 });
+function withoutSidecarMeta(input) {
+  if (!input || typeof input !== "object" || Array.isArray(input))
+    return input;
+  if (!("_meta" in input))
+    return input;
+  const { _meta, ...rest } = input;
+  return rest;
+}
 function parseSeed(input) {
-  const seed = seedSchema.parse(normalizeLegacyGitHubSeed(input));
+  const seed = seedSchema.parse(normalizeLegacyGitHubSeed(withoutSidecarMeta(input)));
   if (seed.repositories.length === 0) {
     throw new Error("GitHub seed must contain at least one repository");
   }

package/dist/{chunk-OEGRXQ6W.js → chunk-RU5YFU2O.js}

@@ -348,13 +348,13 @@ var SLACK_CHECKS = [
   // that compares two worlds rather than reading one.
   noSecretNewlyExposed
 ];
-var seedSchema = z.object({
-  team: z.object({
+var seedSchema = z.strictObject({
+  team: z.strictObject({
     id: z.string().regex(/^T[A-Z0-9_]+$/).optional(),
     name: z.string().default("Pome Twin Workspace"),
     domain: z.string().default("pome-twin")
   }).prefault({}),
-  users: z.array(z.object({
+  users: z.array(z.strictObject({
     id: z.string().regex(/^[UB][A-Z0-9_]+$/).optional(),
     name: z.string().min(1),
     real_name: z.string().default(""),
@@ -364,7 +364,7 @@ var seedSchema = z.object({
     tz: z.string().default("America/Los_Angeles"),
     profile: z.record(z.string(), z.unknown()).default({})
   })).default([]),
-  channels: z.array(z.object({
+  channels: z.array(z.strictObject({
     id: z.string().regex(/^[CGDM][A-Z0-9_]+$/).optional(),
     name: z.string().regex(/^[a-z0-9_-]{1,80}$/),
     is_private: z.boolean().default(false),
@@ -372,18 +372,18 @@ var seedSchema = z.object({
     purpose: z.string().default(""),
     creator: z.string().optional(),
     members: z.array(z.string()).default([]),
-    messages: z.array(z.object({
+    messages: z.array(z.strictObject({
       ts: z.string().optional(),
       user: z.string(),
       text: z.string(),
       thread_ts: z.string().optional(),
-      reactions: z.array(z.object({ name: z.string(), user: z.string() })).default([])
+      reactions: z.array(z.strictObject({ name: z.string(), user: z.string() })).default([])
     })).default([])
   })).default([]),
   // Files present in the world before the agent runs. `user` and
   // `channels` are seed HANDLES (a user/channel `name`) or ids — the same
   // currency `channels[].members` and `channels[].messages[].user` already use.
-  files: z.array(z.object({
+  files: z.array(z.strictObject({
     id: z.string().regex(/^F[A-Z0-9_]+$/).optional(),
     name: z.string().min(1),
     title: z.string().optional(),
@@ -392,14 +392,22 @@ var seedSchema = z.object({
     channels: z.array(z.string()).default([]),
     content: z.string().optional()
   })).default([]),
-  emoji: z.array(z.object({
+  emoji: z.array(z.strictObject({
     name: z.string().regex(/^[a-z0-9_+-]{1,100}$/),
     url: z.string().url().optional(),
     alias: z.string().regex(/^[a-z0-9_+-]{1,100}$/).optional()
   })).default([])
 });
+function withoutSidecarMeta(input) {
+  if (!input || typeof input !== "object" || Array.isArray(input))
+    return input;
+  if (!("_meta" in input))
+    return input;
+  const { _meta, ...rest } = input;
+  return rest;
+}
 function parseSeed(input) {
-  return seedSchema.parse(input);
+  return seedSchema.parse(withoutSidecarMeta(input));
 }
 function defaultSeedState() {
   return {

package/dist/github.js

@@ -1,2 +1,2 @@
-export { GITHUB_CHECKS, defaultSeedState, parseSeed, seedSchema } from './chunk-6AXGU7BV.js';
+export { GITHUB_CHECKS, defaultSeedState, parseSeed, seedSchema } from './chunk-PCHPCMZH.js';
 import './chunk-W2JNYULF.js';

package/dist/gmail.js

@@ -1,2 +1,2 @@
-export { GMAIL_CHECKS, defaultSeedState, gmailSeedSchema, parseSeed } from './chunk-KTTJCEDH.js';
+export { GMAIL_CHECKS, defaultSeedState, gmailSeedSchema, parseSeed } from './chunk-GL26LYWH.js';
 import './chunk-W2JNYULF.js';

package/dist/index.js

@@ -1,14 +1,14 @@
 import './chunk-ZXE6LAM3.js';
-import { GITHUB_CHECKS } from './chunk-6AXGU7BV.js';
-export { GITHUB_CHECKS, defaultSeedState as defaultGitHubSeed, seedSchema as githubSeedSchema, parseSeed as parseGitHubSeed } from './chunk-6AXGU7BV.js';
-import { GMAIL_CHECKS } from './chunk-KTTJCEDH.js';
-export { GMAIL_CHECKS, defaultSeedState as defaultGmailSeed, gmailSeedSchema, parseSeed as parseGmailSeed } from './chunk-KTTJCEDH.js';
-import { LINEAR_CHECKS } from './chunk-CDY7HEPC.js';
-export { LINEAR_CHECKS, defaultSeedState as defaultLinearSeed, linearSeedSchema, parseSeed as parseLinearSeed } from './chunk-CDY7HEPC.js';
-import { SLACK_CHECKS } from './chunk-OEGRXQ6W.js';
-export { SLACK_CHECKS, defaultSeedState as defaultSlackSeed, parseSeed as parseSlackSeed, seedSchema as slackSeedSchema } from './chunk-OEGRXQ6W.js';
-import { STRIPE_CHECKS } from './chunk-XOUAZPNB.js';
-export { STRIPE_CHECKS, defaultSeed as defaultStripeSeed, parseSeed as parseStripeSeed, seedSchema as stripeSeedSchema } from './chunk-XOUAZPNB.js';
+import { GITHUB_CHECKS } from './chunk-PCHPCMZH.js';
+export { GITHUB_CHECKS, defaultSeedState as defaultGitHubSeed, seedSchema as githubSeedSchema, parseSeed as parseGitHubSeed } from './chunk-PCHPCMZH.js';
+import { GMAIL_CHECKS } from './chunk-GL26LYWH.js';
+export { GMAIL_CHECKS, defaultSeedState as defaultGmailSeed, gmailSeedSchema, parseSeed as parseGmailSeed } from './chunk-GL26LYWH.js';
+import { LINEAR_CHECKS } from './chunk-NKD5TSUV.js';
+export { LINEAR_CHECKS, defaultSeedState as defaultLinearSeed, linearSeedSchema, parseSeed as parseLinearSeed } from './chunk-NKD5TSUV.js';
+import { SLACK_CHECKS } from './chunk-RU5YFU2O.js';
+export { SLACK_CHECKS, defaultSeedState as defaultSlackSeed, parseSeed as parseSlackSeed, seedSchema as slackSeedSchema } from './chunk-RU5YFU2O.js';
+import { STRIPE_CHECKS } from './chunk-JBKRUBMR.js';
+export { STRIPE_CHECKS, defaultSeed as defaultStripeSeed, parseSeed as parseStripeSeed, seedSchema as stripeSeedSchema } from './chunk-JBKRUBMR.js';
 export { REDACTION_PLACEHOLDER, VACUITY_SENTINEL, VACUITY_SENTINEL_NUMBER, VACUITY_SENTINEL_SNAKE, checkNearMissPattern, checkPattern, checksDigest, childStatePath, defineCheck, isRedacted, oneOf, parseCheck, probeDiscrimination, probeRedactionSurvival, probeStateCitation, renderCheck, repoRef, resolveStatePath, statePath, templateSlots } from './chunk-W2JNYULF.js';
 
 // src/index.ts

package/dist/linear.js

@@ -1,2 +1,2 @@
-export { LINEAR_CHECKS, defaultSeedState, linearSeedSchema, parseSeed } from './chunk-CDY7HEPC.js';
+export { LINEAR_CHECKS, defaultSeedState, linearSeedSchema, parseSeed } from './chunk-NKD5TSUV.js';
 import './chunk-W2JNYULF.js';

package/dist/slack.js

@@ -1,2 +1,2 @@
-export { SLACK_CHECKS, defaultSeedState, parseSeed, seedSchema } from './chunk-OEGRXQ6W.js';
+export { SLACK_CHECKS, defaultSeedState, parseSeed, seedSchema } from './chunk-RU5YFU2O.js';
 import './chunk-W2JNYULF.js';

package/dist/stripe.js

@@ -1,2 +1,2 @@
-export { STRIPE_CHECKS, defaultSeed, parseSeed, seedSchema } from './chunk-XOUAZPNB.js';
+export { STRIPE_CHECKS, defaultSeed, parseSeed, seedSchema } from './chunk-JBKRUBMR.js';
 import './chunk-W2JNYULF.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pome-sh/checks",
-  "version": "0.3.9",
+  "version": "0.4.0",
   "description": "Pome's grading vocabulary — the check declarations, seed schemas and default seeds of all five digital twins, plus the check DSL they are written in. Declarations only: no twin server, no database, no routes, no tools.",
   "private": false,
   "type": "module",