@pome-sh/cli 0.1.0 → 0.2.0

package/node_modules/@pome-sh/sdk/dist/db.js.map

@@ -1 +1 @@
-{"version":3,"file":"db.js","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,0EAA0E;AAC1E,4EAA4E;AAC5E,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,wEAAwE;AACxE,gEAAgE;AAChE,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,yDAAyD;AAEzD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0CpC,IAAI,MAAqC,CAAC;AAE1C,SAAS,UAAU;IACjB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAsB,CAAC;IAC1D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAI,GAAG,UAAU,EACjB,UAAmC,EAAE;IAErC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;IAC9B,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACjC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAChC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC/B,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACtB,OAAO,EAAE,CAAC;AACZ,CAAC"}
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAC3E,4EAA4E;AAC5E,qEAAqE;AACrE,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,oCAAoC;AAEpC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAwC3C,MAAM,sBAAsB;IACjB,GAAG,CAAe;IAC3B,YAAY,GAAG,CAAC,CAAC;IAEjB,YAAY,IAAY;QACtB,IAAI,CAAC,GAAG,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,CAAC,GAAW;QACjB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAExC,OAAO;YACL,GAAG,EAAE,CAAC,GAAG,MAAiB,EAAiB,EAAE;gBAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,GAAI,MAAiB,CAAC,CAAC;gBACpD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;YACtF,CAAC;YACD,GAAG,EAAE,CAAC,GAAG,MAAiB,EAAW,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAI,MAAiB,CAAC;YAC5E,GAAG,EAAE,CAAC,GAAG,MAAiB,EAAa,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAI,MAAiB,CAAC;SAC/E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,GAAW;QACd,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,SAAiB,EAAE,UAAgC,EAAE;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,SAAS,EAAE,CAAC,CAAC,GAAG,EAAoC,CAAC;QAC7F,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC;IAC5C,CAAC;IAED,WAAW,CAA0C,EAAK;QACxD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAK,EAAE,CAChC,CAAC,CAAC,GAAG,IAAa,EAAE,EAAE;YACpB,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;gBACxB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACxB,OAAO,GAAG,CAAC;YACb,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,mEAAmE;gBACnE,sDAAsD;gBACtD,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa;oBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACtD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAM,CAAC;QACV,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAuB,CAAC;QAC/C,EAAE,CAAC,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACvC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAA0C,EAAK,EAAE,IAAa;QACnE,MAAM,IAAI,GAAG,YAAY,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YACjC,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;gBAC3B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;gBACrC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YACnC,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACxC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAI,GAAG,UAAU,EACjB,UAAmC,EAAE;IAErC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC5C,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACtC,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACrC,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACpC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACtB,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/node_modules/@pome-sh/sdk/dist/fidelity-inventory.d.ts

@@ -0,0 +1,121 @@
+import { z } from "zod";
+export declare const heatTierSchema: z.ZodEnum<{
+    hot: "hot";
+    warm: "warm";
+    cold: "cold";
+    unclassified: "unclassified";
+}>;
+export type HeatTier = z.infer<typeof heatTierSchema>;
+export declare const fidelitySurfaceSchema: z.ZodObject<{
+    name: z.ZodString;
+    heat: z.ZodEnum<{
+        hot: "hot";
+        warm: "warm";
+        cold: "cold";
+        unclassified: "unclassified";
+    }>;
+    fidelity: z.ZodEnum<{
+        semantic: "semantic";
+        unsupported: "unsupported";
+        shape: "shape";
+    }>;
+    justification: z.ZodString;
+}, z.core.$strict>;
+export type FidelitySurface = z.infer<typeof fidelitySurfaceSchema>;
+export declare const fidelityDocDriftSchema: z.ZodObject<{
+    kind: z.ZodEnum<{
+        tool: "tool";
+        rest: "rest";
+    }>;
+    name: z.ZodString;
+    reason: z.ZodString;
+    ticket: z.ZodString;
+}, z.core.$strict>;
+export type FidelityDocDrift = z.infer<typeof fidelityDocDriftSchema>;
+export declare const fidelityInventorySchema: z.ZodObject<{
+    twin: z.ZodString;
+    package: z.ZodString;
+    updated: z.ZodString;
+    notes: z.ZodOptional<z.ZodString>;
+    tools: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        heat: z.ZodEnum<{
+            hot: "hot";
+            warm: "warm";
+            cold: "cold";
+            unclassified: "unclassified";
+        }>;
+        fidelity: z.ZodEnum<{
+            semantic: "semantic";
+            unsupported: "unsupported";
+            shape: "shape";
+        }>;
+        justification: z.ZodString;
+    }, z.core.$strict>>;
+    rest: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        heat: z.ZodEnum<{
+            hot: "hot";
+            warm: "warm";
+            cold: "cold";
+            unclassified: "unclassified";
+        }>;
+        fidelity: z.ZodEnum<{
+            semantic: "semantic";
+            unsupported: "unsupported";
+            shape: "shape";
+        }>;
+        justification: z.ZodString;
+    }, z.core.$strict>>;
+    doc_drift: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<{
+            tool: "tool";
+            rest: "rest";
+        }>;
+        name: z.ZodString;
+        reason: z.ZodString;
+        ticket: z.ZodString;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export type FidelityInventory = z.infer<typeof fidelityInventorySchema>;
+export declare function loadFidelityInventory(path: string): FidelityInventory;
+export interface FidelityDocRow {
+    name: string;
+    fidelity: string;
+    /** Present only when the table carries the optional Heat column. */
+    heat?: string;
+}
+export interface FidelityDocSource {
+    /** Shown in lint problems, e.g. "FIDELITY.md". */
+    label: string;
+    kind: "tool" | "rest";
+    markdown: string;
+}
+/**
+ * Expand one name cell into surface names. Backticked spans are the names;
+ * a span with no `.`, `/`, or space is shorthand for a sibling of the first
+ * span (Slack-style `` `reactions.add` / `remove` / `get` ``) and inherits
+ * its dotted prefix. Cells with no backticks name the surface verbatim
+ * (e.g. "Any unsupported path").
+ */
+export declare function expandSurfaceCell(cell: string): string[];
+/**
+ * Parse every markdown table whose header names surfaces of `kind` + Tier.
+ * The Heat column (ENDPOINT-TIERS.md) is optional: parsed when the header
+ * names it, omitted otherwise, so pre-heat tables stay legal.
+ */
+export declare function parseFidelityDocRows(markdown: string, kind: "tool" | "rest"): FidelityDocRow[];
+/**
+ * 1:1-lint the inventory against the FIDELITY doc tables. Returns human-
+ * readable problems (empty = clean). Directions checked per kind:
+ * every doc row must be in the inventory with the same fidelity tier, and
+ * every inventory entry must be documented unless a `doc_drift` entry
+ * (with its owning ticket) declares the gap. A drift declaration whose
+ * name IS documented is stale and reported, so drift entries self-expire.
+ */
+export declare function lintFidelityInventory(inventory: FidelityInventory, docs: FidelityDocSource[]): string[];
+/** Set-compare tool names: inventory vs the live `listTools()` surface. */
+export declare function compareToolNames(inventoryNames: string[], liveNames: string[]): {
+    missing: string[];
+    extra: string[];
+};

package/node_modules/@pome-sh/sdk/dist/fidelity-inventory.js

@@ -0,0 +1,204 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// Structured fidelity inventory (F-730). Each twin ships a machine-readable
+// surface list — `fidelity.inventory.json` — carrying, per MCP tool and REST
+// surface, the heat tier (how deep the endpoint SHOULD be, ruled by the
+// F-729 rubric) orthogonal to the fidelity tier (how deep it IS, per
+// `fidelityTierSchema`), plus a justification for the classification.
+//
+// The FIDELITY doc tables are 1:1-linted against this inventory instead of
+// the old soft "docs mention the tool name" checks (which let twin-stripe's
+// implemented-but-undocumented refunds drift by silently). Known, ticketed
+// doc gaps are declared in `doc_drift`: the lint accepts exactly those
+// gaps and fails loudly once the docs catch up, so a declaration can never
+// outlive the drift it describes.
+import { readFileSync } from "node:fs";
+import { z } from "zod";
+import { fidelityTierSchema } from "./index.js";
+export const heatTierSchema = z.enum(["hot", "warm", "cold", "unclassified"]);
+export const fidelitySurfaceSchema = z.strictObject({
+    /** MCP tool name, or the REST surface string exactly as documented. */
+    name: z.string().min(1),
+    heat: heatTierSchema,
+    fidelity: fidelityTierSchema,
+    justification: z.string().min(1),
+});
+export const fidelityDocDriftSchema = z.strictObject({
+    kind: z.enum(["tool", "rest"]),
+    /** Must match an inventory entry of the same kind. */
+    name: z.string().min(1),
+    reason: z.string().min(1),
+    /** The Linear ticket that owns reconciling the docs. */
+    ticket: z.string().regex(/^F-\d+$/),
+});
+export const fidelityInventorySchema = z.strictObject({
+    twin: z.string().min(1),
+    package: z.string().min(1),
+    /** ISO date (YYYY-MM-DD) of the last human review of this inventory. */
+    updated: z.string().regex(/^\d{4}-\d{2}-\d{2}$/),
+    notes: z.string().optional(),
+    tools: z.array(fidelitySurfaceSchema).min(1),
+    rest: z.array(fidelitySurfaceSchema),
+    doc_drift: z.array(fidelityDocDriftSchema).default([]),
+});
+export function loadFidelityInventory(path) {
+    return fidelityInventorySchema.parse(JSON.parse(readFileSync(path, "utf8")));
+}
+const TOOL_NAME_HEADERS = new Set(["tool"]);
+const REST_NAME_HEADERS = new Set(["route", "endpoint", "surface"]);
+function splitTableRow(line) {
+    return line
+        .replace(/^\s*\|/, "")
+        .replace(/\|\s*$/, "")
+        .split("|")
+        .map((cell) => cell.trim());
+}
+function isSeparatorRow(cells) {
+    return cells.every((cell) => /^:?-{3,}:?$/.test(cell));
+}
+/**
+ * Expand one name cell into surface names. Backticked spans are the names;
+ * a span with no `.`, `/`, or space is shorthand for a sibling of the first
+ * span (Slack-style `` `reactions.add` / `remove` / `get` ``) and inherits
+ * its dotted prefix. Cells with no backticks name the surface verbatim
+ * (e.g. "Any unsupported path").
+ */
+export function expandSurfaceCell(cell) {
+    const spans = [...cell.matchAll(/`([^`]+)`/g)].map((match) => match[1].trim());
+    if (spans.length === 0) {
+        const text = cell.trim();
+        return text.length > 0 ? [text] : [];
+    }
+    const [first, ...rest] = spans;
+    const lastDot = first.lastIndexOf(".");
+    const prefix = lastDot >= 0 ? first.slice(0, lastDot + 1) : "";
+    return [
+        first,
+        ...rest.map((span) => /[./ ]/.test(span) || prefix === "" ? span : `${prefix}${span}`),
+    ];
+}
+/**
+ * Parse every markdown table whose header names surfaces of `kind` + Tier.
+ * The Heat column (ENDPOINT-TIERS.md) is optional: parsed when the header
+ * names it, omitted otherwise, so pre-heat tables stay legal.
+ */
+export function parseFidelityDocRows(markdown, kind) {
+    const nameHeaders = kind === "tool" ? TOOL_NAME_HEADERS : REST_NAME_HEADERS;
+    const rows = [];
+    const lines = markdown.split("\n");
+    let nameIdx = -1;
+    let tierIdx = -1;
+    let heatIdx = -1;
+    let inTable = false;
+    for (const line of lines) {
+        if (!line.trimStart().startsWith("|")) {
+            inTable = false;
+            nameIdx = -1;
+            tierIdx = -1;
+            heatIdx = -1;
+            continue;
+        }
+        const cells = splitTableRow(line);
+        if (!inTable) {
+            const headers = cells.map((cell) => cell.toLowerCase());
+            nameIdx = headers.findIndex((header) => nameHeaders.has(header));
+            tierIdx = headers.findIndex((header) => header === "tier");
+            heatIdx = headers.findIndex((header) => header === "heat");
+            inTable = true;
+            continue;
+        }
+        if (isSeparatorRow(cells) || nameIdx < 0 || tierIdx < 0)
+            continue;
+        const fidelity = cells[tierIdx] ?? "";
+        const heat = heatIdx >= 0 ? { heat: cells[heatIdx] ?? "" } : {};
+        for (const name of expandSurfaceCell(cells[nameIdx] ?? "")) {
+            rows.push({ name, fidelity, ...heat });
+        }
+    }
+    return rows;
+}
+// ─── Lint: inventory ⇔ docs, both directions ─────────────────────────────────
+/**
+ * 1:1-lint the inventory against the FIDELITY doc tables. Returns human-
+ * readable problems (empty = clean). Directions checked per kind:
+ * every doc row must be in the inventory with the same fidelity tier, and
+ * every inventory entry must be documented unless a `doc_drift` entry
+ * (with its owning ticket) declares the gap. A drift declaration whose
+ * name IS documented is stale and reported, so drift entries self-expire.
+ */
+export function lintFidelityInventory(inventory, docs) {
+    const problems = [];
+    for (const kind of ["tool", "rest"]) {
+        const sources = docs.filter((doc) => doc.kind === kind);
+        if (sources.length === 0)
+            continue;
+        const labels = sources.map((doc) => doc.label).join(", ");
+        const entries = kind === "tool" ? inventory.tools : inventory.rest;
+        const drift = new Map(inventory.doc_drift.filter((d) => d.kind === kind).map((d) => [d.name, d]));
+        const inventoryByName = new Map();
+        for (const entry of entries) {
+            if (inventoryByName.has(entry.name)) {
+                problems.push(`inventory ${kind} '${entry.name}' is listed twice`);
+            }
+            inventoryByName.set(entry.name, entry);
+        }
+        const documented = new Map();
+        for (const source of sources) {
+            for (const row of parseFidelityDocRows(source.markdown, kind)) {
+                const existing = documented.get(row.name);
+                if (existing && existing.fidelity !== row.fidelity) {
+                    problems.push(`${labels}: ${kind} '${row.name}' is documented twice with conflicting tiers ('${existing.fidelity}' vs '${row.fidelity}')`);
+                    continue;
+                }
+                if (existing &&
+                    existing.heat !== undefined &&
+                    row.heat !== undefined &&
+                    existing.heat !== row.heat) {
+                    problems.push(`${labels}: ${kind} '${row.name}' is documented twice with conflicting heat ('${existing.heat}' vs '${row.heat}')`);
+                    continue;
+                }
+                documented.set(row.name, row);
+            }
+        }
+        for (const [name, row] of documented) {
+            const entry = inventoryByName.get(name);
+            if (!entry) {
+                problems.push(`${labels}: ${kind} '${name}' documented but missing from fidelity.inventory.json`);
+                continue;
+            }
+            if (entry.fidelity !== row.fidelity) {
+                problems.push(`${kind} '${name}': inventory says fidelity '${entry.fidelity}' but ${labels} says '${row.fidelity}'`);
+            }
+            if (row.heat !== undefined && entry.heat !== row.heat) {
+                problems.push(`${kind} '${name}': inventory says heat '${entry.heat}' but ${labels} says '${row.heat}'`);
+            }
+        }
+        for (const entry of entries) {
+            if (documented.has(entry.name))
+                continue;
+            const declared = drift.get(entry.name);
+            if (!declared) {
+                problems.push(`${kind} '${entry.name}' is in fidelity.inventory.json but undocumented in ${labels}; add the row or declare doc_drift`);
+            }
+        }
+        for (const declared of drift.values()) {
+            if (!inventoryByName.has(declared.name)) {
+                problems.push(`doc_drift ${kind} '${declared.name}' (${declared.ticket}) matches no inventory entry`);
+            }
+            if (documented.has(declared.name)) {
+                problems.push(`doc_drift ${kind} '${declared.name}' (${declared.ticket}) is stale — ${labels} now documents it; remove the declaration`);
+            }
+        }
+    }
+    return problems;
+}
+/** Set-compare tool names: inventory vs the live `listTools()` surface. */
+export function compareToolNames(inventoryNames, liveNames) {
+    const inventory = new Set(inventoryNames);
+    const live = new Set(liveNames);
+    return {
+        missing: [...live].filter((name) => !inventory.has(name)).sort(),
+        extra: [...inventory].filter((name) => !live.has(name)).sort(),
+    };
+}
+//# sourceMappingURL=fidelity-inventory.js.map

package/node_modules/@pome-sh/sdk/dist/fidelity-inventory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fidelity-inventory.js","sourceRoot":"","sources":["../src/fidelity-inventory.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,wEAAwE;AACxE,qEAAqE;AACrE,sEAAsE;AACtE,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,uEAAuE;AACvE,2EAA2E;AAC3E,kCAAkC;AAElC,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AAG9E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,YAAY,CAAC;IAClD,uEAAuE;IACvE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,kBAAkB;IAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,YAAY,CAAC;IACnD,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,sDAAsD;IACtD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,wDAAwD;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CACpC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,YAAY,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,wEAAwE;IACxE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;IACpC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACvD,CAAC,CAAC;AAGH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAkBD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5C,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAEpE,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI;SACR,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,cAAc,CAAC,KAAe;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;IAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,OAAO;QACL,KAAK;QACL,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACnB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAChE;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,IAAqB;IAC1E,MAAM,WAAW,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC;IAC5E,MAAM,IAAI,GAAqB,EAAE,CAAC;IAClC,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,GAAG,KAAK,CAAC;YAChB,OAAO,GAAG,CAAC,CAAC,CAAC;YACb,OAAO,GAAG,CAAC,CAAC,CAAC;YACb,OAAO,GAAG,CAAC,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACxD,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YACjE,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;YAC3D,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;YAC3D,OAAO,GAAG,IAAI,CAAC;YACf,SAAS;QACX,CAAC;QACD,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC;YAAE,SAAS;QAClE,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,KAAK,MAAM,IAAI,IAAI,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,SAA4B,EAC5B,IAAyB;IAEzB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,CAAU,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACxD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QACnE,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAC3E,CAAC;QAEF,MAAM,eAAe,GAAG,IAAI,GAAG,EAA2B,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpC,QAAQ,CAAC,IAAI,CAAC,aAAa,IAAI,KAAK,KAAK,CAAC,IAAI,mBAAmB,CAAC,CAAC;YACrE,CAAC;YACD,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,GAAG,EAA0B,CAAC;QACrD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,MAAM,GAAG,IAAI,oBAAoB,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC9D,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC1C,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;oBACnD,QAAQ,CAAC,IAAI,CACX,GAAG,MAAM,KAAK,IAAI,KAAK,GAAG,CAAC,IAAI,kDAAkD,QAAQ,CAAC,QAAQ,SAAS,GAAG,CAAC,QAAQ,IAAI,CAC5H,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,IACE,QAAQ;oBACR,QAAQ,CAAC,IAAI,KAAK,SAAS;oBAC3B,GAAG,CAAC,IAAI,KAAK,SAAS;oBACtB,QAAQ,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,EAC1B,CAAC;oBACD,QAAQ,CAAC,IAAI,CACX,GAAG,MAAM,KAAK,IAAI,KAAK,GAAG,CAAC,IAAI,iDAAiD,QAAQ,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,IAAI,CACnH,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,UAAU,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,IAAI,KAAK,IAAI,uDAAuD,CAAC,CAAC;gBAClG,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACpC,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,KAAK,IAAI,+BAA+B,KAAK,CAAC,QAAQ,SAAS,MAAM,UAAU,GAAG,CAAC,QAAQ,GAAG,CACtG,CAAC;YACJ,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;gBACtD,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,KAAK,IAAI,2BAA2B,KAAK,CAAC,IAAI,SAAS,MAAM,UAAU,GAAG,CAAC,IAAI,GAAG,CAC1F,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,KAAK,KAAK,CAAC,IAAI,uDAAuD,MAAM,oCAAoC,CACxH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,QAAQ,CAAC,IAAI,CACX,aAAa,IAAI,KAAK,QAAQ,CAAC,IAAI,MAAM,QAAQ,CAAC,MAAM,8BAA8B,CACvF,CAAC;YACJ,CAAC;YACD,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClC,QAAQ,CAAC,IAAI,CACX,aAAa,IAAI,KAAK,QAAQ,CAAC,IAAI,MAAM,QAAQ,CAAC,MAAM,gBAAgB,MAAM,2CAA2C,CAC1H,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,gBAAgB,CAC9B,cAAwB,EACxB,SAAmB;IAEnB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAChC,OAAO;QACL,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;QAChE,KAAK,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;KAC/D,CAAC;AACJ,CAAC"}

package/node_modules/@pome-sh/sdk/dist/parity.d.ts

@@ -0,0 +1,55 @@
+import { type FidelityInventory } from "./fidelity-inventory.js";
+export type ParityState = Record<string, unknown>;
+export interface ParityStep {
+    tool: string;
+    arguments?: Record<string, unknown> | ((state: ParityState) => Record<string, unknown>);
+    /** Pull cross-call state (ids, numbers, shas) out of the response body. */
+    capture?: (body: unknown, state: ParityState) => void;
+    /** Expected HTTP status; default: any 2xx. */
+    status?: number;
+    /** Extra body assertion; return a problem string to fail the step. */
+    verify?: (body: unknown) => string | undefined;
+}
+export interface ParityRestProbe {
+    /** Label in the report, e.g. "unsupported-rest". */
+    surface: string;
+    method?: string;
+    /** Session-relative path, e.g. "/repos/acme/api/actions/runs". */
+    path: string;
+    /** Expected HTTP status. */
+    status: number;
+    /** Assert the body carries a `fidelity: "unsupported"` marker. */
+    expectUnsupportedEnvelope?: boolean;
+}
+export interface ParityAppLike {
+    request(path: string | Request, init?: RequestInit): Response | Promise<Response>;
+}
+export interface RunParityOptions {
+    app: ParityAppLike;
+    twin: string;
+    inventory: FidelityInventory;
+    /** `listTools()` names from the twin source — the code truth. */
+    liveToolNames: string[];
+    steps: ParityStep[];
+    restProbes?: ParityRestProbe[];
+    /** Session id; default "fidelity-parity". */
+    sid?: string;
+    /** JWT secret; default env TWIN_AUTH_SECRET or the engine dev secret. */
+    secret?: string;
+    /** Extra JWT claims (login, team_id, account_id, ...). */
+    claims?: Record<string, unknown>;
+    /** Applied to every step without its own `verify` (twin error envelopes). */
+    stepVerify?: (body: unknown) => string | undefined;
+    /** Optional live upstream probes; entries are appended to the report. */
+    live?: () => Promise<unknown[]>;
+}
+export interface ParityResult {
+    ok: boolean;
+    failures: string[];
+    report: unknown[];
+}
+export declare function runFidelityParity(options: RunParityOptions): Promise<ParityResult>;
+/** Script entrypoint: run, print the JSON report, set the exit code. */
+export declare function runParityCli(options: RunParityOptions): Promise<ParityResult>;
+export { compareToolNames, expandSurfaceCell, fidelityDocDriftSchema, fidelityInventorySchema, fidelitySurfaceSchema, heatTierSchema, lintFidelityInventory, loadFidelityInventory, parseFidelityDocRows, } from "./fidelity-inventory.js";
+export type { FidelityDocDrift, FidelityDocRow, FidelityDocSource, FidelityInventory, FidelitySurface, HeatTier, } from "./fidelity-inventory.js";

package/node_modules/@pome-sh/sdk/dist/parity.js

@@ -0,0 +1,112 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// Shared fidelity:parity runner (F-730). One engine-level runner; each twin
+// supplies declarative scenario data — an ordered, stateful chain of MCP
+// calls with cross-call captures (a PR number, a charge id, a message ts) —
+// plus its structured fidelity inventory. No per-twin runner copies (M1
+// "twin-infra copies: 0" gate).
+//
+// The runner asserts three rings agree before it reports green:
+//   1. live tool list (code truth from listTools())
+//   2. fidelity.inventory.json tools (the machine-readable inventory)
+//   3. scenario step coverage (every inventory tool exercised)
+// and that every step answers its expected status through the frozen
+// `POST /s/:sid/mcp/call` surface. Optional REST probes pin the loud-501
+// unsupported envelope; an optional `live` hook lets a twin compare
+// read-only shapes against the real upstream (e.g. `gh api`).
+import { sign } from "hono/jwt";
+import { compareToolNames, } from "./fidelity-inventory.js";
+function bodyKeys(body) {
+    if (Array.isArray(body))
+        return ["array"];
+    if (body && typeof body === "object") {
+        return Object.keys(body).sort();
+    }
+    return [];
+}
+export async function runFidelityParity(options) {
+    const sid = options.sid ?? "fidelity-parity";
+    const secret = options.secret ?? process.env.TWIN_AUTH_SECRET ?? "dev-only-insecure-secret";
+    const token = await sign({ sid, exp: Math.floor(Date.now() / 1000) + 3600, ...options.claims }, secret);
+    const base = `/s/${sid}`;
+    const failures = [];
+    const report = [];
+    // Ring 1 ⇔ ring 2: inventory tools must equal the live tool list.
+    const inventoryNames = options.inventory.tools.map((entry) => entry.name);
+    const inventoryDiff = compareToolNames(inventoryNames, options.liveToolNames);
+    for (const name of inventoryDiff.missing) {
+        failures.push(`tool '${name}' is live in listTools() but missing from fidelity.inventory.json`);
+    }
+    for (const name of inventoryDiff.extra) {
+        failures.push(`tool '${name}' is in fidelity.inventory.json but not in listTools()`);
+    }
+    // Ring 2 ⇔ ring 3: every inventory tool needs at least one scenario step.
+    const covered = new Set(options.steps.map((step) => step.tool));
+    for (const name of inventoryNames) {
+        if (!covered.has(name))
+            failures.push(`no parity scenario step covers tool '${name}'`);
+    }
+    for (const tool of covered) {
+        if (!inventoryNames.includes(tool)) {
+            failures.push(`scenario step calls '${tool}' which is not in fidelity.inventory.json`);
+        }
+    }
+    const state = {};
+    for (const step of options.steps) {
+        const args = typeof step.arguments === "function" ? step.arguments(state) : step.arguments ?? {};
+        const response = await options.app.request(`${base}/mcp/call`, {
+            method: "POST",
+            headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
+            body: JSON.stringify({ tool: step.tool, arguments: args }),
+        });
+        const body = await response.json().catch(() => ({}));
+        const expected = step.status === undefined ? response.ok : response.status === step.status;
+        if (!expected) {
+            failures.push(`${step.tool}: expected ${step.status ?? "2xx"}, got ${response.status} ${JSON.stringify(body).slice(0, 300)}`);
+        }
+        else {
+            const problem = (step.verify ?? options.stepVerify)?.(body);
+            if (problem)
+                failures.push(`${step.tool}: ${problem}`);
+            step.capture?.(body, state);
+        }
+        report.push({ tool: step.tool, status: response.status, ok: response.ok, keys: bodyKeys(body) });
+    }
+    for (const probe of options.restProbes ?? []) {
+        const response = await options.app.request(`${base}${probe.path}`, {
+            method: probe.method ?? "GET",
+            headers: { authorization: `Bearer ${token}` },
+        });
+        const body = await response.json().catch(() => ({}));
+        if (response.status !== probe.status) {
+            failures.push(`${probe.surface}: expected ${probe.status}, got ${response.status}`);
+        }
+        if (probe.expectUnsupportedEnvelope && !JSON.stringify(body).includes('"fidelity":"unsupported"')) {
+            failures.push(`${probe.surface}: body does not carry the fidelity:"unsupported" envelope`);
+        }
+        report.push({ surface: probe.surface, status: response.status, body });
+    }
+    if (options.live) {
+        report.push(...(await options.live()));
+    }
+    return { ok: failures.length === 0, failures, report };
+}
+/** Script entrypoint: run, print the JSON report, set the exit code. */
+export async function runParityCli(options) {
+    const result = await runFidelityParity(options);
+    console.log(JSON.stringify({
+        twin: options.twin,
+        tools: options.inventory.tools.length,
+        rest_surfaces: options.inventory.rest.length,
+        ok: result.ok,
+        failures: result.failures,
+        report: result.report,
+    }, null, 2));
+    if (!result.ok) {
+        console.error(`fidelity:parity FAILED for ${options.twin} (${result.failures.length} problem(s))`);
+        process.exitCode = 1;
+    }
+    return result;
+}
+export { compareToolNames, expandSurfaceCell, fidelityDocDriftSchema, fidelityInventorySchema, fidelitySurfaceSchema, heatTierSchema, lintFidelityInventory, loadFidelityInventory, parseFidelityDocRows, } from "./fidelity-inventory.js";
+//# sourceMappingURL=parity.js.map

package/node_modules/@pome-sh/sdk/dist/parity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parity.js","sourceRoot":"","sources":["../src/parity.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,4EAA4E;AAC5E,wEAAwE;AACxE,gCAAgC;AAChC,EAAE;AACF,gEAAgE;AAChE,oDAAoD;AACpD,sEAAsE;AACtE,+DAA+D;AAC/D,qEAAqE;AACrE,yEAAyE;AACzE,oEAAoE;AACpE,8DAA8D;AAE9D,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EACL,gBAAgB,GAEjB,MAAM,yBAAyB,CAAC;AAyDjC,SAAS,QAAQ,CAAC,IAAa;IAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,IAAI,CAAC,IAA+B,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAyB;IAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,iBAAiB,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,0BAA0B,CAAC;IAC5F,MAAM,KAAK,GAAG,MAAM,IAAI,CACtB,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,EACrE,MAAM,CACP,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,GAAG,EAAE,CAAC;IACzB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAc,EAAE,CAAC;IAE7B,kEAAkE;IAClE,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,gBAAgB,CAAC,cAAc,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9E,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,OAAO,EAAE,CAAC;QACzC,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,mEAAmE,CAAC,CAAC;IAClG,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;QACvC,QAAQ,CAAC,IAAI,CAAC,SAAS,IAAI,wDAAwD,CAAC,CAAC;IACvF,CAAC;IAED,0EAA0E;IAC1E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,wCAAwC,IAAI,GAAG,CAAC,CAAC;IACzF,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC,wBAAwB,IAAI,2CAA2C,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,GACR,OAAO,IAAI,CAAC,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QACtF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,WAAW,EAAE;YAC7D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YACjF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;SAC3D,CAAC,CAAC;QACH,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC;QAC3F,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,IAAI,CACX,GAAG,IAAI,CAAC,IAAI,cAAc,IAAI,CAAC,MAAM,IAAI,KAAK,SAAS,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC/G,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,OAAO;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;YACvD,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE;YACjE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,KAAK;YAC7B,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;SAC9C,CAAC,CAAC;QACH,MAAM,IAAI,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9D,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,cAAc,KAAK,CAAC,MAAM,SAAS,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;YAClG,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,OAAO,2DAA2D,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACzD,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAyB;IAC1D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ;QACE,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM;QACrC,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM;QAC5C,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,EACD,IAAI,EACJ,CAAC,CACF,CACF,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,8BAA8B,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,cAAc,CAAC,CAAC;QACnG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,cAAc,EACd,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,yBAAyB,CAAC"}

package/node_modules/@pome-sh/sdk/dist/server-helpers.d.ts

@@ -13,6 +13,21 @@ export declare function makeDeltaSink(): {
 };
 /** Hostnames the boot guard treats as loopback binds. */
 export declare function isLoopbackHost(value: string): boolean;
+/**
+ * F-708: self-generate `TWIN_AUTH_SECRET` on first boot. An env-injected
+ * secret always wins (pome-cloud injects per-tenant secrets — that contract
+ * is untouched), and loopback binds keep the dev-fallback path. Otherwise
+ * the secret persisted at the compose-era contract location
+ * `.pome-data/<twin>/secret` (cwd-relative; `POME_TWIN_DATA_DIR` overrides
+ * the directory) is reused, or a fresh 32-byte hex secret is generated,
+ * persisted there, and printed once to stdout so the operator can mint JWTs.
+ *
+ * The resolved secret lands in `process.env.TWIN_AUTH_SECRET`, which is
+ * process-global by design: the engine's auth (`resolveAuthSecret`) reads
+ * the env, so one process serves one secret — the frozen boot contract is
+ * one twin per process, and a multi-twin process shares the first secret.
+ */
+export declare function ensureTwinAuthSecret(twin: string, host: string): void;
 export declare function shadowedPrefix(routePath: string): string | null;
 export declare function assertUniqueToolNames<TDomain>(tools: ReadonlyArray<ToolSpec<TDomain>>, twinId: string): void;
 export declare function findTool<TDb, TSeed, TDomain>(definition: TwinDefinition<TDb, TSeed, TDomain>, name: string): ToolSpec<TDomain>;