@pome-sh/cli 0.1.0 → 0.2.0

package/node_modules/@pome-sh/sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pome-sh/sdk",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Twin engine for Pome digital twins — defineTwin() + serve(): HTTP mounting, bearer auth, trace recorder, MCP dispatch, SQLite-backed state.",
   "private": false,
   "type": "module",
@@ -14,6 +14,10 @@
     "./server": {
       "types": "./dist/server.d.ts",
       "default": "./dist/server.js"
+    },
+    "./parity": {
+      "types": "./dist/parity.d.ts",
+      "default": "./dist/parity.js"
     }
   },
   "publishConfig": {
@@ -32,20 +36,16 @@
     "dist"
   ],
   "dependencies": {
-    "@pome-sh/shared-types": "0.6.0",
+    "@pome-sh/shared-types": "0.6.1",
     "hono": "^4.12.27",
     "zod": "^4.1.13"
   },
   "peerDependencies": {
-    "@hono/node-server": "^2.0.8",
-    "better-sqlite3": "^12.5.0"
+    "@hono/node-server": "^2.0.8"
   },
   "peerDependenciesMeta": {
     "@hono/node-server": {
       "optional": true
-    },
-    "better-sqlite3": {
-      "optional": true
     }
   },
   "engines": {

package/node_modules/@pome-sh/shared-types/dist/errors.d.ts

@@ -0,0 +1,39 @@
+import { z } from "zod";
+export declare const apiErrorTypeSchema: z.ZodEnum<{
+    invalid_auth: "invalid_auth";
+    revoked_key: "revoked_key";
+    forbidden: "forbidden";
+    quota_exceeded: "quota_exceeded";
+    validation_failed: "validation_failed";
+    not_found: "not_found";
+    session_expired: "session_expired";
+    conflict: "conflict";
+    rate_limited: "rate_limited";
+    internal_error: "internal_error";
+    endpoint_not_implemented: "endpoint_not_implemented";
+    downstream_unavailable: "downstream_unavailable";
+}>;
+export type ApiErrorType = z.infer<typeof apiErrorTypeSchema>;
+export declare const apiErrorSchema: z.ZodObject<{
+    error: z.ZodObject<{
+        type: z.ZodEnum<{
+            invalid_auth: "invalid_auth";
+            revoked_key: "revoked_key";
+            forbidden: "forbidden";
+            quota_exceeded: "quota_exceeded";
+            validation_failed: "validation_failed";
+            not_found: "not_found";
+            session_expired: "session_expired";
+            conflict: "conflict";
+            rate_limited: "rate_limited";
+            internal_error: "internal_error";
+            endpoint_not_implemented: "endpoint_not_implemented";
+            downstream_unavailable: "downstream_unavailable";
+        }>;
+        message: z.ZodString;
+        details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        documentation_url: z.ZodOptional<z.ZodString>;
+        request_id: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>;
+export type ApiError = z.infer<typeof apiErrorSchema>;

package/node_modules/@pome-sh/shared-types/dist/errors.js

@@ -0,0 +1,33 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// shared-types §5 — ERROR ENVELOPE (public REST). The `error.type` enum and the
+// wrapping envelope shape. Re-exported through the `@pome-sh/shared-types`
+// barrel (index.ts).
+import { z } from "zod";
+// ─────────────────────────────────────────────────────────────────────────────
+// 5. ERROR ENVELOPE (public REST)
+// ─────────────────────────────────────────────────────────────────────────────
+export const apiErrorTypeSchema = z.enum([
+    "invalid_auth",
+    "revoked_key",
+    "forbidden", // 403 non-auth permission denial
+    "quota_exceeded",
+    "validation_failed",
+    "not_found",
+    "session_expired", // distinct from not_found for CLI UX
+    "conflict", // 409 (uniqueness, etc.)
+    "rate_limited",
+    "internal_error",
+    "endpoint_not_implemented",
+    "downstream_unavailable",
+]);
+export const apiErrorSchema = z.object({
+    error: z.object({
+        type: apiErrorTypeSchema,
+        message: z.string(),
+        details: z.record(z.string(), z.unknown()).optional(),
+        documentation_url: z.string().url().optional(),
+        request_id: z.string(),
+    }),
+});
+//# sourceMappingURL=errors.js.map

package/node_modules/@pome-sh/shared-types/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,gFAAgF;AAChF,2EAA2E;AAC3E,qBAAqB;AAErB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAChF,kCAAkC;AAClC,gFAAgF;AAEhF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC;IACvC,cAAc;IACd,aAAa;IACb,WAAW,EAAkC,iCAAiC;IAC9E,gBAAgB;IAChB,mBAAmB;IACnB,WAAW;IACX,iBAAiB,EAA4B,qCAAqC;IAClF,UAAU,EAAmC,yBAAyB;IACtE,cAAc;IACd,gBAAgB;IAChB,0BAA0B;IAC1B,wBAAwB;CACzB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;QACrD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;KACvB,CAAC;CACH,CAAC,CAAC"}

package/node_modules/@pome-sh/shared-types/dist/finalize-shapes.d.ts

@@ -0,0 +1,252 @@
+import { z } from "zod";
+export declare const finalizeRequestSchema: z.ZodObject<{
+    stop_reason: z.ZodString;
+    exit_code: z.ZodNumber;
+    duration_ms: z.ZodNumber;
+    agent_model: z.ZodString;
+    agent_sdk: z.ZodNullable<z.ZodString>;
+    criteria: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        text: z.ZodString;
+        kind: z.ZodEnum<{
+            D: "D";
+            P: "P";
+        }>;
+        twin: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    scenario_name: z.ZodString;
+    scenario_hash: z.ZodString;
+    scenario_prompt: z.ZodString;
+    expected_behavior: z.ZodString;
+    trace_storage_key: z.ZodOptional<z.ZodString>;
+    state_initial_storage_key: z.ZodOptional<z.ZodString>;
+    state_final_storage_key: z.ZodOptional<z.ZodString>;
+    signals_storage_key: z.ZodOptional<z.ZodString>;
+    per_twin_state_keys: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        state_initial_key: z.ZodOptional<z.ZodString>;
+        state_final_key: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type FinalizeRequest = z.infer<typeof finalizeRequestSchema>;
+export declare const finalizeResponseSchema: z.ZodObject<{
+    run_id: z.ZodString;
+    score: z.ZodNumber;
+    judge_model: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    dashboard_url: z.ZodString;
+    criteria_results: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
+        criterion: z.ZodObject<{
+            type: z.ZodPipe<z.ZodEnum<{
+                model: "model";
+                code: "code";
+                D: "D";
+                P: "P";
+            }>, z.ZodTransform<"model" | "code", "model" | "code" | "D" | "P">>;
+            text: z.ZodString;
+            twin: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        passed: z.ZodBoolean;
+        skipped: z.ZodBoolean;
+        reason: z.ZodString;
+        confidence: z.ZodNumber;
+        judge_model: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        criterion: z.ZodObject<{
+            type: z.ZodPipe<z.ZodEnum<{
+                model: "model";
+                code: "code";
+                D: "D";
+                P: "P";
+            }>, z.ZodTransform<"model" | "code", "model" | "code" | "D" | "P">>;
+            text: z.ZodString;
+            twin: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        passed: z.ZodBoolean;
+        skipped: z.ZodBoolean;
+        reason: z.ZodString;
+    }, z.core.$strip>]>>>;
+}, z.core.$strip>;
+export type FinalizeResponse = z.infer<typeof finalizeResponseSchema>;
+export declare const finalizeStatusUrlSchema: z.ZodString;
+export type FinalizeStatusUrl = z.infer<typeof finalizeStatusUrlSchema>;
+export declare const finalizeAcceptedResponseSchema: z.ZodObject<{
+    evaluation_id: z.ZodString;
+    run_id: z.ZodString;
+    status: z.ZodLiteral<"queued">;
+    status_url: z.ZodString;
+}, z.core.$strict>;
+export type FinalizeAcceptedResponse = z.infer<typeof finalizeAcceptedResponseSchema>;
+export declare const finalizeQueuedStatusResponseSchema: z.ZodObject<{
+    status: z.ZodLiteral<"queued">;
+    evaluation_id: z.ZodString;
+    run_id: z.ZodString;
+}, z.core.$strict>;
+export type FinalizeQueuedStatusResponse = z.infer<typeof finalizeQueuedStatusResponseSchema>;
+export declare const finalizeRunningStatusResponseSchema: z.ZodObject<{
+    status: z.ZodLiteral<"running">;
+    evaluation_id: z.ZodString;
+    run_id: z.ZodString;
+}, z.core.$strict>;
+export type FinalizeRunningStatusResponse = z.infer<typeof finalizeRunningStatusResponseSchema>;
+export declare const finalizeFailureErrorSchema: z.ZodObject<{
+    type: z.ZodString;
+    message: z.ZodString;
+    details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strict>;
+export type FinalizeFailureError = z.infer<typeof finalizeFailureErrorSchema>;
+export declare const finalizeFailedStatusResponseSchema: z.ZodObject<{
+    status: z.ZodLiteral<"failed">;
+    error: z.ZodObject<{
+        type: z.ZodString;
+        message: z.ZodString;
+        details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strict>;
+    evaluation_id: z.ZodString;
+    run_id: z.ZodString;
+}, z.core.$strict>;
+export type FinalizeFailedStatusResponse = z.infer<typeof finalizeFailedStatusResponseSchema>;
+export declare const finalizeCompletedStatusResponseSchema: z.ZodObject<{
+    status: z.ZodLiteral<"completed">;
+    result: z.ZodObject<{
+        run_id: z.ZodString;
+        score: z.ZodNumber;
+        judge_model: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        dashboard_url: z.ZodString;
+        criteria_results: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
+            criterion: z.ZodObject<{
+                type: z.ZodPipe<z.ZodEnum<{
+                    model: "model";
+                    code: "code";
+                    D: "D";
+                    P: "P";
+                }>, z.ZodTransform<"model" | "code", "model" | "code" | "D" | "P">>;
+                text: z.ZodString;
+                twin: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            passed: z.ZodBoolean;
+            skipped: z.ZodBoolean;
+            reason: z.ZodString;
+            confidence: z.ZodNumber;
+            judge_model: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            criterion: z.ZodObject<{
+                type: z.ZodPipe<z.ZodEnum<{
+                    model: "model";
+                    code: "code";
+                    D: "D";
+                    P: "P";
+                }>, z.ZodTransform<"model" | "code", "model" | "code" | "D" | "P">>;
+                text: z.ZodString;
+                twin: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            passed: z.ZodBoolean;
+            skipped: z.ZodBoolean;
+            reason: z.ZodString;
+        }, z.core.$strip>]>>>;
+    }, z.core.$strip>;
+    evaluation_id: z.ZodString;
+    run_id: z.ZodString;
+}, z.core.$strict>;
+export type FinalizeCompletedStatusResponse = z.infer<typeof finalizeCompletedStatusResponseSchema>;
+export declare const finalizeStatusResponseSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    status: z.ZodLiteral<"queued">;
+    evaluation_id: z.ZodString;
+    run_id: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    status: z.ZodLiteral<"running">;
+    evaluation_id: z.ZodString;
+    run_id: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    status: z.ZodLiteral<"failed">;
+    error: z.ZodObject<{
+        type: z.ZodString;
+        message: z.ZodString;
+        details: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, z.core.$strict>;
+    evaluation_id: z.ZodString;
+    run_id: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    status: z.ZodLiteral<"completed">;
+    result: z.ZodObject<{
+        run_id: z.ZodString;
+        score: z.ZodNumber;
+        judge_model: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        dashboard_url: z.ZodString;
+        criteria_results: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
+            criterion: z.ZodObject<{
+                type: z.ZodPipe<z.ZodEnum<{
+                    model: "model";
+                    code: "code";
+                    D: "D";
+                    P: "P";
+                }>, z.ZodTransform<"model" | "code", "model" | "code" | "D" | "P">>;
+                text: z.ZodString;
+                twin: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            passed: z.ZodBoolean;
+            skipped: z.ZodBoolean;
+            reason: z.ZodString;
+            confidence: z.ZodNumber;
+            judge_model: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            criterion: z.ZodObject<{
+                type: z.ZodPipe<z.ZodEnum<{
+                    model: "model";
+                    code: "code";
+                    D: "D";
+                    P: "P";
+                }>, z.ZodTransform<"model" | "code", "model" | "code" | "D" | "P">>;
+                text: z.ZodString;
+                twin: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>;
+            passed: z.ZodBoolean;
+            skipped: z.ZodBoolean;
+            reason: z.ZodString;
+        }, z.core.$strip>]>>>;
+    }, z.core.$strip>;
+    evaluation_id: z.ZodString;
+    run_id: z.ZodString;
+}, z.core.$strict>], "status">;
+export type FinalizeStatusResponse = z.infer<typeof finalizeStatusResponseSchema>;
+export declare const finalizeInitialResponseSchema: z.ZodUnion<readonly [z.ZodObject<{
+    run_id: z.ZodString;
+    score: z.ZodNumber;
+    judge_model: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    dashboard_url: z.ZodString;
+    criteria_results: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
+        criterion: z.ZodObject<{
+            type: z.ZodPipe<z.ZodEnum<{
+                model: "model";
+                code: "code";
+                D: "D";
+                P: "P";
+            }>, z.ZodTransform<"model" | "code", "model" | "code" | "D" | "P">>;
+            text: z.ZodString;
+            twin: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        passed: z.ZodBoolean;
+        skipped: z.ZodBoolean;
+        reason: z.ZodString;
+        confidence: z.ZodNumber;
+        judge_model: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        criterion: z.ZodObject<{
+            type: z.ZodPipe<z.ZodEnum<{
+                model: "model";
+                code: "code";
+                D: "D";
+                P: "P";
+            }>, z.ZodTransform<"model" | "code", "model" | "code" | "D" | "P">>;
+            text: z.ZodString;
+            twin: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        passed: z.ZodBoolean;
+        skipped: z.ZodBoolean;
+        reason: z.ZodString;
+    }, z.core.$strip>]>>>;
+}, z.core.$strip>, z.ZodObject<{
+    evaluation_id: z.ZodString;
+    run_id: z.ZodString;
+    status: z.ZodLiteral<"queued">;
+    status_url: z.ZodString;
+}, z.core.$strict>]>;
+export type FinalizeInitialResponse = z.infer<typeof finalizeInitialResponseSchema>;

package/node_modules/@pome-sh/shared-types/dist/finalize-shapes.js

@@ -0,0 +1,122 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// shared-types — /v1/sessions/:id/finalize response family (part of §4 PUBLIC
+// REST API). ADR-013 managed-judge synchronous result plus the F-700 async
+// `Prefer: respond-async` accepted/status/union shapes. Re-exported through the
+// `@pome-sh/shared-types` barrel (index.ts).
+import { z } from "zod";
+import { criterionResultSchema } from "./run.js";
+import { criterionDefSchema, perTwinStateKeysSchema } from "./rest.js";
+// POST /v1/sessions/:id/finalize — ADR-013 managed-judge REQUEST. This is the
+// LIVE scoring wire: the CLI (cli/src/hosted/client.ts `finalize`) uploads trace
+// / state / signals blobs via the presigned upload-url routes, then POSTs the
+// criterion *definitions* plus the storage KEYS here; the cloud runs the managed
+// judge and returns `finalizeInitialResponseSchema`. (The sibling
+// `submitResultRequestSchema` in rest.ts is the DEPRECATED BYOK shim that scores
+// CLI-side and uploads inline state_*_json_b64.)
+//
+// Not `.strict()`: a tolerant reader that strips unknown additive keys, matching
+// the rest of the §4 request/response family. Field set mirrors the CLI body
+// exactly — `scenario_*` vocab (finalize does not take the W3 `task_*` aliases),
+// storage keys optional (cloud falls back to conventional paths when omitted).
+export const finalizeRequestSchema = z.object({
+    stop_reason: z.string(), // "completed" | "timeout" | "preflight_failed" | …
+    exit_code: z.number().int(),
+    duration_ms: z.number().int(),
+    agent_model: z.string(),
+    agent_sdk: z.string().nullable(), // normalizeAgentSdk() output: trimmed string or null
+    // Criterion DEFINITIONS (not results): cloud judges these against the recorded
+    // trace/state and returns the authoritative score. Carries optional per-criterion
+    // twin attribution (multi-twin M3).
+    criteria: z.array(criterionDefSchema),
+    scenario_name: z.string(),
+    scenario_hash: z.string(),
+    scenario_prompt: z.string(),
+    expected_behavior: z.string(),
+    // Optional storage-key overrides; omitted keys fall back to the conventional
+    // team-<>/session-<>/<filename> paths written by the *-upload-url routes.
+    trace_storage_key: z.string().optional(),
+    state_initial_storage_key: z.string().optional(),
+    state_final_storage_key: z.string().optional(),
+    signals_storage_key: z.string().optional(),
+    // Multi-twin (M3): additive per-twin state storage keys, keyed by twin id.
+    // Absent on single-twin sessions, which use the flat state_*_storage_key fields
+    // above. Unknown to an older cloud, which strips it and scores the primary twin
+    // unchanged (new CLI × old cloud degrades gracefully).
+    per_twin_state_keys: perTwinStateKeysSchema.optional(),
+});
+// /v1/sessions/:id/finalize — ADR-013 managed-judge response.
+// Not `.strict()`: cloud may emit additive M7 keys (`evaluator_version`,
+// `criteria_breakdown`, `all_skipped`, `provenance`) that older/newer CLIs
+// strip rather than reject.
+export const finalizeResponseSchema = z.object({
+    run_id: z.string(),
+    score: z.number().int().min(0).max(100),
+    judge_model: z.string().nullable().optional(),
+    dashboard_url: z.string().url(),
+    criteria_results: z.array(criterionResultSchema).optional(),
+});
+// F-700: `status_url` is a same-origin absolute URL *or* an absolute-path
+// relative URL (cloud returns `/v1/sessions/:id/evaluation`).
+export const finalizeStatusUrlSchema = z
+    .string()
+    .min(1)
+    .refine((value) => {
+    if (value.startsWith("/") && !value.startsWith("//"))
+        return true;
+    try {
+        new URL(value);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}, { message: "Invalid status_url" });
+// POST /v1/sessions/:id/finalize with `Prefer: respond-async`.
+// The legacy scored response remains in the initial-response union for the
+// synchronous N-1 compatibility window.
+export const finalizeAcceptedResponseSchema = z.object({
+    evaluation_id: z.string().min(1),
+    run_id: z.string().min(1),
+    status: z.literal("queued"),
+    status_url: finalizeStatusUrlSchema,
+}).strict();
+const finalizeStatusIdentitySchema = {
+    evaluation_id: z.string().min(1),
+    run_id: z.string().min(1),
+};
+export const finalizeQueuedStatusResponseSchema = z.object({
+    ...finalizeStatusIdentitySchema,
+    status: z.literal("queued"),
+}).strict();
+export const finalizeRunningStatusResponseSchema = z.object({
+    ...finalizeStatusIdentitySchema,
+    status: z.literal("running"),
+}).strict();
+// F-700 wire error on GET .../evaluation failed status.
+export const finalizeFailureErrorSchema = z.object({
+    type: z.string().min(1),
+    message: z.string().min(1),
+    details: z.record(z.string(), z.unknown()).optional(),
+}).strict();
+export const finalizeFailedStatusResponseSchema = z.object({
+    ...finalizeStatusIdentitySchema,
+    status: z.literal("failed"),
+    error: finalizeFailureErrorSchema,
+}).strict();
+export const finalizeCompletedStatusResponseSchema = z.object({
+    ...finalizeStatusIdentitySchema,
+    status: z.literal("completed"),
+    result: finalizeResponseSchema,
+}).strict();
+export const finalizeStatusResponseSchema = z.discriminatedUnion("status", [
+    finalizeQueuedStatusResponseSchema,
+    finalizeRunningStatusResponseSchema,
+    finalizeFailedStatusResponseSchema,
+    finalizeCompletedStatusResponseSchema,
+]);
+export const finalizeInitialResponseSchema = z.union([
+    finalizeResponseSchema,
+    finalizeAcceptedResponseSchema,
+]);
+//# sourceMappingURL=finalize-shapes.js.map

package/node_modules/@pome-sh/shared-types/dist/finalize-shapes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finalize-shapes.js","sourceRoot":"","sources":["../src/finalize-shapes.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,gFAAgF;AAChF,6CAA6C;AAE7C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,WAAW,CAAC;AAEvE,8EAA8E;AAC9E,iFAAiF;AACjF,8EAA8E;AAC9E,iFAAiF;AACjF,kEAAkE;AAClE,iFAAiF;AACjF,iDAAiD;AACjD,EAAE;AACF,iFAAiF;AACjF,6EAA6E;AAC7E,iFAAiF;AACjF,+EAA+E;AAC/E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAwB,mDAAmD;IAClG,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAe,qDAAqD;IACpG,+EAA+E;IAC/E,kFAAkF;IAClF,oCAAoC;IACpC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7B,6EAA6E;IAC7E,0EAA0E;IAC1E,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,yBAAyB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChD,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1C,2EAA2E;IAC3E,gFAAgF;IAChF,gFAAgF;IAChF,uDAAuD;IACvD,mBAAmB,EAAE,sBAAsB,CAAC,QAAQ,EAAE;CACvD,CAAC,CAAC;AAGH,8DAA8D;AAC9D,yEAAyE;AACzE,2EAA2E;AAC3E,4BAA4B;AAC5B,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC/B,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;CAC5D,CAAC,CAAC;AAGH,0EAA0E;AAC1E,8DAA8D;AAC9D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,MAAM,CACL,CAAC,KAAK,EAAE,EAAE;IACR,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAClE,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,EACD,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAClC,CAAC;AAGJ,+DAA+D;AAC/D,2EAA2E;AAC3E,wCAAwC;AACxC,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3B,UAAU,EAAE,uBAAuB;CACpC,CAAC,CAAC,MAAM,EAAE,CAAC;AAKZ,MAAM,4BAA4B,GAAG;IACnC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC;AAEF,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,GAAG,4BAA4B;IAC/B,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;CAC5B,CAAC,CAAC,MAAM,EAAE,CAAC;AAKZ,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,GAAG,4BAA4B;IAC/B,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;CAC7B,CAAC,CAAC,MAAM,EAAE,CAAC;AAKZ,wDAAwD;AACxD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC,MAAM,EAAE,CAAC;AAKZ,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,GAAG,4BAA4B;IAC/B,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3B,KAAK,EAAE,0BAA0B;CAClC,CAAC,CAAC,MAAM,EAAE,CAAC;AAKZ,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,GAAG,4BAA4B;IAC/B,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC9B,MAAM,EAAE,sBAAsB;CAC/B,CAAC,CAAC,MAAM,EAAE,CAAC;AAKZ,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IACzE,kCAAkC;IAClC,mCAAmC;IACnC,kCAAkC;IAClC,qCAAqC;CACtC,CAAC,CAAC;AAKH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC;IACnD,sBAAsB;IACtB,8BAA8B;CAC/B,CAAC,CAAC"}

package/node_modules/@pome-sh/shared-types/dist/identity.d.ts

@@ -0,0 +1,90 @@
+import { z } from "zod";
+export declare const userSchema: z.ZodObject<{
+    id: z.ZodString;
+    clerk_user_id: z.ZodString;
+    email: z.ZodString;
+    display_name: z.ZodNullable<z.ZodString>;
+    created_at: z.ZodString;
+    updated_at: z.ZodString;
+}, z.core.$strip>;
+export type User = z.infer<typeof userSchema>;
+export declare const planTierSchema: z.ZodEnum<{
+    free: "free";
+    hobby: "hobby";
+    pro: "pro";
+    team: "team";
+    self_host_annual: "self_host_annual";
+    enterprise: "enterprise";
+}>;
+export type PlanTier = z.infer<typeof planTierSchema>;
+export declare const teamSchema: z.ZodObject<{
+    id: z.ZodString;
+    slug: z.ZodString;
+    name: z.ZodString;
+    plan_tier: z.ZodEnum<{
+        free: "free";
+        hobby: "hobby";
+        pro: "pro";
+        team: "team";
+        self_host_annual: "self_host_annual";
+        enterprise: "enterprise";
+    }>;
+    stripe_customer_id: z.ZodNullable<z.ZodString>;
+    created_at: z.ZodString;
+    updated_at: z.ZodString;
+}, z.core.$strip>;
+export type Team = z.infer<typeof teamSchema>;
+export declare const teamRoleSchema: z.ZodEnum<{
+    owner: "owner";
+    admin: "admin";
+    member: "member";
+}>;
+export type TeamRole = z.infer<typeof teamRoleSchema>;
+export declare const teamMemberSchema: z.ZodObject<{
+    team_id: z.ZodString;
+    user_id: z.ZodString;
+    role: z.ZodEnum<{
+        owner: "owner";
+        admin: "admin";
+        member: "member";
+    }>;
+    invited_at: z.ZodString;
+    accepted_at: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type TeamMember = z.infer<typeof teamMemberSchema>;
+export declare const teamInviteSchema: z.ZodObject<{
+    id: z.ZodString;
+    team_id: z.ZodString;
+    email: z.ZodString;
+    role: z.ZodEnum<{
+        owner: "owner";
+        admin: "admin";
+        member: "member";
+    }>;
+    invited_by: z.ZodString;
+    expires_at: z.ZodString;
+    accepted_at: z.ZodNullable<z.ZodString>;
+    created_at: z.ZodString;
+}, z.core.$strip>;
+export type TeamInvite = z.infer<typeof teamInviteSchema>;
+export declare const apiKeySchema: z.ZodObject<{
+    id: z.ZodString;
+    team_id: z.ZodString;
+    name: z.ZodString;
+    created_by: z.ZodString;
+    last_used_at: z.ZodNullable<z.ZodString>;
+    created_at: z.ZodString;
+    revoked_at: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type ApiKey = z.infer<typeof apiKeySchema>;
+export declare const apiKeyCreatedSchema: z.ZodObject<{
+    id: z.ZodString;
+    team_id: z.ZodString;
+    name: z.ZodString;
+    created_by: z.ZodString;
+    last_used_at: z.ZodNullable<z.ZodString>;
+    created_at: z.ZodString;
+    revoked_at: z.ZodNullable<z.ZodString>;
+    full_key: z.ZodString;
+}, z.core.$strip>;
+export type ApiKeyCreated = z.infer<typeof apiKeyCreatedSchema>;

package/node_modules/@pome-sh/shared-types/dist/identity.js

@@ -0,0 +1,72 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// shared-types §1 — IDENTITY. Users, teams, memberships, invites, API keys.
+// Re-exported through the `@pome-sh/shared-types` barrel (index.ts).
+import { z } from "zod";
+// ─────────────────────────────────────────────────────────────────────────────
+// 1. IDENTITY
+// ─────────────────────────────────────────────────────────────────────────────
+export const userSchema = z.object({
+    id: z.string(), // usr_<nanoid> (text, not uuid; per /plan-eng-review L7)
+    clerk_user_id: z.string(), // Clerk user ID (`user_*`)
+    email: z.string().email(),
+    display_name: z.string().nullable(),
+    created_at: z.string().datetime(),
+    updated_at: z.string().datetime(),
+});
+// FDRS-613: reconciled to pome-cloud /v1 wire truth — `hobby` and `team` were
+// added cloud-side for the launch pricing tiers; adopted here so a cloud-issued
+// MeResponse / UsageResponse (plan_tier) parses under the twins schema.
+export const planTierSchema = z.enum([
+    "free",
+    "hobby",
+    "pro",
+    "team",
+    "self_host_annual",
+    "enterprise",
+]);
+export const teamSchema = z.object({
+    id: z.string(), // tm_<nanoid>
+    slug: z.string(), // /dashboard/[teamSlug]/...
+    name: z.string(),
+    plan_tier: planTierSchema,
+    stripe_customer_id: z.string().nullable(),
+    created_at: z.string().datetime(),
+    updated_at: z.string().datetime(),
+});
+export const teamRoleSchema = z.enum(["owner", "admin", "member"]);
+export const teamMemberSchema = z.object({
+    team_id: z.string(),
+    user_id: z.string(),
+    role: teamRoleSchema,
+    invited_at: z.string().datetime(),
+    accepted_at: z.string().datetime().nullable(),
+});
+// Public invite shape — token is NEVER returned in API responses. The plaintext
+// token is delivered exactly once via `createInviteResponseSchema.invite_url`
+// (which embeds it as a path segment). Server stores only sha256(token) in
+// `team_invites.token_hash`.
+export const teamInviteSchema = z.object({
+    id: z.string(), // inv_<nanoid>
+    team_id: z.string(),
+    email: z.string().email(),
+    role: teamRoleSchema,
+    invited_by: z.string(), // user_id
+    expires_at: z.string().datetime(),
+    accepted_at: z.string().datetime().nullable(),
+    created_at: z.string().datetime(),
+});
+export const apiKeySchema = z.object({
+    id: z.string(), // pme_<short> public prefix; hashed_key NEVER appears in API responses (kept server-side only)
+    team_id: z.string(),
+    name: z.string(),
+    created_by: z.string(), // user_id
+    last_used_at: z.string().datetime().nullable(),
+    created_at: z.string().datetime(),
+    revoked_at: z.string().datetime().nullable(),
+});
+// One-time response shape — full key string is only in the create-response, never persisted.
+export const apiKeyCreatedSchema = apiKeySchema.extend({
+    full_key: z.string(), // pme_<full> — show once, then redact
+});
+//# sourceMappingURL=identity.js.map

package/node_modules/@pome-sh/shared-types/dist/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,4EAA4E;AAC5E,qEAAqE;AAErE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAChF,cAAc;AACd,gFAAgF;AAEhF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAA+B,yDAAyD;IACtG,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,EAAoB,2BAA2B;IACxE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,8EAA8E;AAC9E,gFAAgF;AAChF,wEAAwE;AACxE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC;IACnC,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,kBAAkB;IAClB,YAAY;CACb,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAA+B,cAAc;IAC3D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAA6B,4BAA4B;IACzE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,cAAc;IACzB,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAGnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,cAAc;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAGH,gFAAgF;AAChF,8EAA8E;AAC9E,2EAA2E;AAC3E,6BAA6B;AAC7B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAA+B,eAAe;IAC5D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,IAAI,EAAE,cAAc;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAuB,UAAU;IACvD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAA+B,+FAA+F;IAC5I,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAuB,UAAU;IACvD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAGH,6FAA6F;AAC7F,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC,MAAM,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAyB,sCAAsC;CACpF,CAAC,CAAC"}