@pome-sh/cli 0.19.0 → 0.21.0

package/dist/src/doctor/scan.js

@@ -1,127 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// FDRS-634 — static routing scan: the named-cause half of doctor's routing
-// check.
-//
-// Finds hardcoded production API hosts (file:line) that would bypass the
-// POME_*_REST_URL env contract, and collects positive wiring evidence — a
-// POME_*_{REST,MCP}_URL / POME_*_API_BASE read or an adapter import. The
-// dynamic proof that requests reach the twin is `pome run`'s recorded trace;
-// doctor stays fast, deterministic, and LLM-free, so its routing verdict is
-// "would this source bypass the twin", answered statically with a nameable
-// file and line.
-import { readdir, readFile, stat } from "node:fs/promises";
-import { join, relative } from "node:path";
-// Production hosts of the twinned services. A hardcoded one of these in
-// agent source means requests would bypass the twin — exactly the failure
-// the design's moment-03 card names.
-const PRODUCTION_HOSTS = [
-    { host: "api.github.com", envVar: "POME_GITHUB_REST_URL" },
-    { host: "api.stripe.com", envVar: "POME_STRIPE_REST_URL" },
-    { host: "hooks.slack.com", envVar: "POME_SLACK_REST_URL" },
-    { host: "slack.com/api", envVar: "POME_SLACK_REST_URL" },
-    // Gmail only — do not flag Calendar/Drive/etc. on googleapis hosts.
-    { host: "gmail.googleapis.com", envVar: "POME_GMAIL_REST_URL" },
-    { host: "www.googleapis.com/gmail/", envVar: "POME_GMAIL_REST_URL" },
-];
-const WIRING_ENV_REGEX = /POME_[A-Z0-9]+_(?:REST_URL|MCP_URL|API_BASE)/;
-const ADAPTER_REGEX = /@pome-sh\/adapter-|withPome\s*\(/;
-const CODE_EXTENSIONS = new Set([".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"]);
-const SKIP_DIRS = new Set([
-    "node_modules",
-    ".git",
-    "dist",
-    "build",
-    "out",
-    "coverage",
-    "runs",
-    ".pome-data",
-]);
-const MAX_FILES = 400;
-const MAX_FILE_BYTES = 1_000_000;
-function isCommentLine(line) {
-    const trimmed = line.trimStart();
-    return (trimmed.startsWith("//") ||
-        trimmed.startsWith("*") ||
-        trimmed.startsWith("/*") ||
-        trimmed.startsWith("#"));
-}
-async function collectFiles(root) {
-    const files = [];
-    const queue = [root];
-    while (queue.length > 0 && files.length < MAX_FILES) {
-        const dir = queue.shift();
-        let entries;
-        try {
-            entries = await readdir(dir, { withFileTypes: true });
-        }
-        catch {
-            continue;
-        }
-        for (const entry of entries) {
-            if (entry.isDirectory()) {
-                if (!SKIP_DIRS.has(entry.name))
-                    queue.push(join(dir, entry.name));
-                continue;
-            }
-            const dot = entry.name.lastIndexOf(".");
-            if (dot === -1 || !CODE_EXTENSIONS.has(entry.name.slice(dot)))
-                continue;
-            files.push(join(dir, entry.name));
-            if (files.length >= MAX_FILES)
-                break;
-        }
-    }
-    return files;
-}
-export async function scanAgentSources(rootDir) {
-    const files = await collectFiles(rootDir);
-    let hardcoded = null;
-    const wiring = { envVar: null, adapterImport: false };
-    let filesScanned = 0;
-    for (const file of files) {
-        try {
-            const info = await stat(file);
-            if (info.size > MAX_FILE_BYTES)
-                continue;
-        }
-        catch {
-            continue;
-        }
-        let content;
-        try {
-            content = await readFile(file, "utf8");
-        }
-        catch {
-            continue;
-        }
-        filesScanned += 1;
-        const lines = content.split("\n");
-        for (let i = 0; i < lines.length; i++) {
-            const line = lines[i];
-            if (isCommentLine(line))
-                continue;
-            if (!hardcoded) {
-                for (const { host, envVar } of PRODUCTION_HOSTS) {
-                    if (line.includes(host)) {
-                        hardcoded = {
-                            file: relative(rootDir, file),
-                            line: i + 1,
-                            host,
-                            envVar,
-                        };
-                        break;
-                    }
-                }
-            }
-            if (wiring.envVar === null) {
-                const match = WIRING_ENV_REGEX.exec(line);
-                if (match)
-                    wiring.envVar = match[0];
-            }
-            if (!wiring.adapterImport && ADAPTER_REGEX.test(line)) {
-                wiring.adapterImport = true;
-            }
-        }
-    }
-    return { hardcoded, wiring, filesScanned };
-}

package/dist/src/fix-prompt/index.d.ts

@@ -1,20 +0,0 @@
-import { type FixPromptContext, type GroupFixPromptContext } from "./prompt.js";
-/**
- * Build the paste-into-IDE fix prompt from the raw trace + the task's
- * criteria. PURE + synchronous — no network, no LLM, no local judge.
- *
- * The output is a complete prompt: the system instructions (how to write the
- * fix handoff) followed by the run context. The developer pastes it into
- * Cursor / Claude Code, whose model produces the actual handoff. The OSS CLI
- * never invokes a model itself.
- */
-export declare function buildFixPrompt(ctx: FixPromptContext): string;
-/**
- * FDRS-644 — run-set mode: ONE prompt for a whole trial group, from the
- * persisted cloud verdicts (grouped failure signatures) + raw traces.
- * Still PURE: no network, no LLM, no local judging — the verdicts were the
- * cloud's, cached at run time.
- */
-export declare function buildGroupFixPrompt(ctx: GroupFixPromptContext): string;
-export { buildFixUserPrompt, buildGroupFixUserPrompt, representativeFailingTrial, FIX_PROMPT_SYSTEM_PROMPT, FIX_PROMPT_TEMPLATE_VERSION, } from "./prompt.js";
-export type { FixPromptContext, GroupFixPromptContext, TrialFixInput, } from "./prompt.js";

package/dist/src/fix-prompt/index.js

@@ -1,31 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-//
-// `pome fix-prompt` — assemble a paste-into-IDE remediation prompt for a run
-// (FDRS-657). CAPTURE-ONLY: no LLM/judge call happens here. The former BYOK
-// CLI-side judge call (`callJudge`) that generated the handoff was removed;
-// this now returns the fully-assembled prompt (system instructions + the
-// task's criteria + the captured trace) for the developer to paste into
-// their own coding assistant.
-import { FIX_PROMPT_SYSTEM_PROMPT, buildFixUserPrompt, buildGroupFixUserPrompt, } from "./prompt.js";
-/**
- * Build the paste-into-IDE fix prompt from the raw trace + the task's
- * criteria. PURE + synchronous — no network, no LLM, no local judge.
- *
- * The output is a complete prompt: the system instructions (how to write the
- * fix handoff) followed by the run context. The developer pastes it into
- * Cursor / Claude Code, whose model produces the actual handoff. The OSS CLI
- * never invokes a model itself.
- */
-export function buildFixPrompt(ctx) {
-    return `${FIX_PROMPT_SYSTEM_PROMPT}\n\n${buildFixUserPrompt(ctx)}`;
-}
-/**
- * FDRS-644 — run-set mode: ONE prompt for a whole trial group, from the
- * persisted cloud verdicts (grouped failure signatures) + raw traces.
- * Still PURE: no network, no LLM, no local judging — the verdicts were the
- * cloud's, cached at run time.
- */
-export function buildGroupFixPrompt(ctx) {
-    return `${FIX_PROMPT_SYSTEM_PROMPT}\n\n${buildGroupFixUserPrompt(ctx)}`;
-}
-export { buildFixUserPrompt, buildGroupFixUserPrompt, representativeFailingTrial, FIX_PROMPT_SYSTEM_PROMPT, FIX_PROMPT_TEMPLATE_VERSION, } from "./prompt.js";

package/dist/src/fix-prompt/prompt.d.ts

@@ -1,32 +0,0 @@
-import type { RecorderEvent } from "../types/shared.js";
-import type { Task } from "../task/taskSchema.js";
-import type { VerdictArtifact } from "../hosted/evalResultCache.js";
-export declare const FIX_PROMPT_TEMPLATE_VERSION = "v1";
-export declare const FIX_PROMPT_SYSTEM_PROMPT: string;
-export declare function escapeTagContent(text: string): string;
-export interface FixPromptContext {
-    events: RecorderEvent[];
-    task: Task;
-}
-export declare function buildFixUserPrompt(ctx: FixPromptContext): string;
-export interface TrialFixInput {
-    /** Terminal-facing label, e.g. "trial 2 · ses_abc123". */
-    label: string;
-    /** The trial's artifacts dir (for naming non-representative traces). */
-    runDir: string;
-    verdict: VerdictArtifact;
-    events: RecorderEvent[];
-}
-export interface GroupFixPromptContext {
-    taskName: string;
-    groupId: string | null;
-    /** Parsed task file when it still resolves. Null degrades the prompt to
-     *  the verdict-embedded criteria (the file may have moved since the run). */
-    task: Task | null;
-    /** Completed trials of the run set (verdict.json present), run order. */
-    trials: TrialFixInput[];
-}
-/** The failing trial with the most failed criteria — the representative
- *  whose full trace anchors the prompt. */
-export declare function representativeFailingTrial(trials: TrialFixInput[]): TrialFixInput | null;
-export declare function buildGroupFixUserPrompt(ctx: GroupFixPromptContext): string;

package/dist/src/fix-prompt/prompt.js

@@ -1,240 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-//
-// Assembles the paste-into-IDE fix prompt for a failed run (FDRS-657).
-//
-// CAPTURE-ONLY: the OSS CLI does NOT call an LLM here. `pome fix-prompt`
-// assembles a self-contained prompt — system instructions + the task's
-// criteria + the raw captured trace — and prints it so the developer can paste
-// it into THEIR own coding assistant (Cursor / Claude Code). The former BYOK
-// local-judge call that generated the handoff CLI-side was removed under
-// FDRS-657 (no local LLM/judge anywhere in the OSS CLI). This module was also
-// relocated out of the deleted `src/evaluator/` tree.
-import { readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-import { redactEvent, redactSecrets } from "../recorder/redaction.js";
-import { outcomeOf } from "../hosted/evalResultView.js";
-export const FIX_PROMPT_TEMPLATE_VERSION = "v1";
-const MAX_EVENTS = 50;
-const BODY_CHAR_LIMIT = 800;
-function loadSystemPrompt() {
-    const here = dirname(fileURLToPath(import.meta.url));
-    // Source layout:   src/fix-prompt/prompts/fix-prompt-v1.md
-    // Compiled layout: dist/src/fix-prompt/prompts/fix-prompt-v1.md
-    // tsconfig.build.json (via scripts/copy-prompts.mjs) copies the prompts/
-    // folder; assert presence here.
-    const path = join(here, "prompts", `fix-prompt-${FIX_PROMPT_TEMPLATE_VERSION}.md`);
-    return readFileSync(path, "utf8");
-}
-export const FIX_PROMPT_SYSTEM_PROMPT = loadSystemPrompt();
-export function escapeTagContent(text) {
-    return text.replace(/[&<>]/g, (char) => {
-        switch (char) {
-            case "&":
-                return "&amp;";
-            case "<":
-                return "&lt;";
-            case ">":
-                return "&gt;";
-            default:
-                return char;
-        }
-    });
-}
-function truncateBody(body) {
-    if (body === undefined || body === null)
-        return body;
-    let serialized;
-    try {
-        serialized = JSON.stringify(body);
-    }
-    catch {
-        return "[unserializable]";
-    }
-    if (serialized.length <= BODY_CHAR_LIMIT)
-        return body;
-    return `${serialized.slice(0, BODY_CHAR_LIMIT)}…`;
-}
-function renderEvent(e) {
-    return JSON.stringify({
-        twin: e.twin,
-        method: e.method,
-        path: e.path,
-        status: e.status,
-        latency_ms: e.latency_ms,
-        step_id: e.step_id,
-        request_body: truncateBody(e.request_body),
-        response_body: truncateBody(e.response_body),
-        state_delta: e.state_delta,
-    });
-}
-function renderEvents(events) {
-    const kept = events.slice(0, MAX_EVENTS);
-    const lines = kept.map(renderEvent);
-    if (events.length > MAX_EVENTS) {
-        lines.push(`(${events.length - MAX_EVENTS} more omitted — kept first ${MAX_EVENTS})`);
-    }
-    return lines.join("\n");
-}
-// The OSS CLI holds NO local verdict (evaluation is cloud-only), so the prompt
-// lists every criterion the run had to satisfy and lets the developer's own
-// assistant diagnose against the trace. No pass/fail is claimed here.
-function renderCriteria(criteria) {
-    if (criteria.length === 0)
-        return "(no criteria declared)";
-    return criteria
-        .map((c, idx) => `${idx + 1}. [${c.type}] ${c.text}`)
-        .join("\n");
-}
-export function buildFixUserPrompt(ctx) {
-    const criteria = redactSecrets(renderCriteria(ctx.task.criteria));
-    const trace = renderEvents(ctx.events.map((event) => redactEvent(event)));
-    const taskTitle = redactSecrets(ctx.task.title);
-    const taskPrompt = redactSecrets(ctx.task.prompt);
-    return `## Task
-${taskTitle}
-
-## Task prompt (what the agent was told to do)
-${taskPrompt}
-
-## Criteria the run had to satisfy
-${escapeTagContent(criteria)}
-
-## Trace (HTTP calls the agent made)
-<agent-trace>
-${escapeTagContent(trace)}
-</agent-trace>`;
-}
-function criterionMarker(c) {
-    return `[${c.type}]`;
-}
-function failedResults(verdict) {
-    return verdict.criteria_results.filter((r) => outcomeOf(r) === "failed");
-}
-/** Judge reasons and criterion text are DATA rendered into prompt prose —
- *  flatten to one line so a crafted (or just verbose) string can never open
- *  a new markdown heading/section inside the prompt structure. */
-function flattenLine(text, max = 300) {
-    const flat = text.replace(/\s+/g, " ").trim();
-    return flat.length > max ? `${flat.slice(0, max - 1)}…` : flat;
-}
-/** Per-criterion failure signatures across the run set: criterion text →
- *  which trials failed it and what the judge said, failing-first. Criteria
- *  that never failed split honestly: "passed everywhere" requires every
- *  outcome to actually be `passed` — skipped/errored are named as such,
- *  never counted as passes. */
-function renderGroupedSignatures(trials) {
-    const byCriterion = new Map();
-    // Criterion text → the set of non-failed outcomes seen for it.
-    const outcomesSeen = new Map();
-    for (const trial of trials) {
-        for (const result of trial.verdict.criteria_results) {
-            const key = result.criterion.text;
-            const outcome = outcomeOf(result);
-            if (outcome === "failed") {
-                const entry = byCriterion.get(key) ?? {
-                    marker: criterionMarker(result.criterion),
-                    hits: [],
-                };
-                entry.hits.push({ label: trial.label, reason: result.reason });
-                byCriterion.set(key, entry);
-            }
-            const seen = outcomesSeen.get(key) ?? new Set();
-            seen.add(outcome);
-            outcomesSeen.set(key, seen);
-        }
-    }
-    const passedEverywhere = [];
-    const notUniformlyEvaluated = [];
-    for (const [key, seen] of outcomesSeen) {
-        if (byCriterion.has(key))
-            continue;
-        if (seen.size === 1 && seen.has("passed"))
-            passedEverywhere.push(key);
-        else
-            notUniformlyEvaluated.push(key);
-    }
-    const completed = trials.length;
-    const blocks = [...byCriterion.entries()]
-        .sort((a, b) => b[1].hits.length - a[1].hits.length)
-        .map(([text, { marker, hits }], idx) => {
-        const lines = hits.map((h) => `   - ${h.label}: ${flattenLine(h.reason)}`);
-        return `${idx + 1}. ${marker} ${flattenLine(text)} — failed in ${hits.length} of ${completed} completed trials\n${lines.join("\n")}`;
-    });
-    if (blocks.length === 0 && passedEverywhere.length === 0 && notUniformlyEvaluated.length === 0) {
-        return "(no criteria recorded)";
-    }
-    const notes = [];
-    if (blocks.length === 0) {
-        notes.push("(no criterion failed in any completed trial)");
-    }
-    if (passedEverywhere.length > 0) {
-        notes.push(`passed in every completed trial: ${passedEverywhere.map((t) => `"${flattenLine(t)}"`).join(" · ")}`);
-    }
-    if (notUniformlyEvaluated.length > 0) {
-        notes.push(`not uniformly evaluated (skipped or errored in some trials — no pass is claimed for these): ${notUniformlyEvaluated.map((t) => `"${flattenLine(t)}"`).join(" · ")}`);
-    }
-    return [...blocks, ...notes].join("\n");
-}
-/** The failing trial with the most failed criteria — the representative
- *  whose full trace anchors the prompt. */
-export function representativeFailingTrial(trials) {
-    const failing = trials.filter((t) => !t.verdict.passed);
-    if (failing.length === 0)
-        return null;
-    return failing.reduce((worst, t) => failedResults(t.verdict).length > failedResults(worst.verdict).length
-        ? t
-        : worst);
-}
-export function buildGroupFixUserPrompt(ctx) {
-    const completed = ctx.trials.length;
-    const passed = ctx.trials.filter((t) => t.verdict.passed).length;
-    const representative = representativeFailingTrial(ctx.trials);
-    const otherFailing = ctx.trials.filter((t) => !t.verdict.passed && t !== representative);
-    const signatures = redactSecrets(renderGroupedSignatures(ctx.trials));
-    const criteriaBlock = ctx.task
-        ? redactSecrets(renderCriteria(ctx.task.criteria))
-        : redactSecrets(renderCriteria((ctx.trials[0]?.verdict.criteria_results ?? []).map((r) => ({
-            type: r.criterion.type,
-            text: r.criterion.text,
-        }))));
-    const promptBlock = ctx.task
-        ? redactSecrets(ctx.task.prompt)
-        : `(task file not found at ${ctx.trials[0]?.verdict.task_path ?? "?"} — criteria above come from the cloud verdicts)`;
-    const sections = [];
-    sections.push(`## Run set (cloud-judged)
-task ${redactSecrets(ctx.taskName)} · ${ctx.groupId ? `group ${ctx.groupId}` : "single run"} · ${passed} of ${completed} completed trials passed`);
-    sections.push(`## Grouped failure signatures (from the cloud judge)
-${escapeTagContent(signatures)}`);
-    sections.push(`## Task prompt (what the agent was told to do)
-${promptBlock}`);
-    sections.push(`## Criteria the run had to satisfy
-${escapeTagContent(criteriaBlock)}`);
-    if (representative) {
-        const trace = renderEvents(representative.events.map((event) => redactEvent(event)));
-        sections.push(`## Trace of the most-failing trial (${representative.label})
-<agent-trace>
-${escapeTagContent(trace)}
-</agent-trace>`);
-    }
-    if (otherFailing.length > 0) {
-        const lines = otherFailing.map((t) => {
-            const failed = failedResults(t.verdict)
-                .map((r) => criterionPhraseSafe(r.criterion.text))
-                .join(" · ");
-            return `- ${t.label} — failed: ${failed || "(see verdict)"} — trace at ${join(t.runDir, "events.jsonl")}`;
-        });
-        sections.push(`## Other failing trials (traces on disk)
-${escapeTagContent(redactSecrets(lines.join("\n")))}`);
-    }
-    if (passed > 0 && passed < completed) {
-        sections.push(`## Variance note
-${passed} of ${completed} completed trials passed the same criteria — the failure is variance, not a hard wall. Prefer fixes that remove the variance source (ambiguous instructions, missing determinism) over pattern-matching to one trace.`);
-    }
-    return sections.join("\n\n");
-}
-/** Short criterion phrase without pulling in the demo renderer's styling. */
-function criterionPhraseSafe(text) {
-    const flat = text.replace(/\s+/g, " ").trim();
-    return flat.length > 60 ? `${flat.slice(0, 57)}…` : flat;
-}

package/dist/src/hosted/client.d.ts

@@ -1,209 +0,0 @@
-import { type CreateEvalSessionResponse, type CreateSessionResponse, criterionDefSchema, type FinalizeResponse, type SessionPublic, type SubmitResultResponse, type CriterionResult, type Lane, type PerTwinStateKeys, type Step } from "../types/shared.js";
-import { z } from "zod";
-export type CriterionDefWire = z.input<typeof criterionDefSchema>;
-/** True when the cloud's create-session body actually returned a `per_twin`
- *  key (empty `{}` counts) — i.e. `per_twin` was NOT synthesized by the schema
- *  from a legacy `twin_url`-only response. Consumers use this to decide whether
- *  `per_twin[twin].mcp_url` is trustworthy. */
-export declare function perTwinReturnedByCloud(session: CreateSessionResponse): boolean;
-/** Whether a raw create-session wire body carried a usable `per_twin` map
- *  (before schema synthesis). A `per_twin: null` counts as absent — the schema
- *  would synthesize entries for it, and synthesized URLs must not be trusted.
- *  Exported so the runner's env unit test can model the exact provenance the
- *  client stamps. */
-export declare function rawBodyHadPerTwin(raw: unknown): boolean;
-export interface HostedClientConfig {
-    baseUrl: string;
-    /** Team API key (`pme_…`) — or, with `authScheme: "bearer"`, a
-     *  session-scoped JWT (demo_token / agent_token). */
-    apiKey: string;
-    /** Per-request timeout. Defaults to 30s; the cloud's own twin spawn is
-     *  ~2s cold but we leave headroom for GHCR pulls.  */
-    timeoutMs?: number;
-    /** Overall time allowed for finalize request + asynchronous polling to
-     * reach a terminal state. Defaults to five minutes. */
-    finalizeTimeoutMs?: number;
-    /** Initial async-finalize polling delay. Defaults to 500ms. */
-    finalizePollInitialDelayMs?: number;
-    /** Maximum async-finalize polling delay. Defaults to 5s. */
-    finalizePollMaxDelayMs?: number;
-    /** FDRS-643 — how the credential travels. "x-api-key" (default) is the
-     *  team-key contract. "bearer" sends `Authorization: Bearer <apiKey>` for
-     *  the session-token surface (upload-url/finalize accept a sid-scoped JWT
-     *  via requireApiKeyOrSessionToken; `pome demo` authenticates each trial's
-     *  uploads with its demo_token this way). */
-    authScheme?: "x-api-key" | "bearer";
-}
-export interface CreateSessionInput {
-    taskSource: string;
-    twins: string[];
-    /** Omit for one-off sessions; reuse only when intentionally replaying a create after network uncertainty. */
-    idempotencyKey?: string;
-    /** Agents-as-first-class-entity (ADR-013). Resolved by callers from the
-     *  manifest slug via `.pome/link.json` / the `POST /v1/agents` resolver
-     *  (F-819). Server validates `agent.team_id === apiKey.team_id` and
-     *  `requested_twins ⊆ agent_enabled_services`. Optional during rollout;
-     *  will become required once the dashboard / control-plane catch up. */
-    agentId?: string;
-    /** F-818 (spec F-804): per-run agent version. The manifest's `agent.version`,
-     *  or the `--agent-version` override. Opaque, user-declared; stamped onto the
-     *  session/run rows (F-820). An older cloud strips it, so sending is safe. */
-    agentVersion?: string;
-    /** Pre-resolved seed JSON. When supplied, cloud uses it directly and skips
-     *  extracting JSON from the scenario markdown — required for the post-2026-05-22
-     *  prose `## Seed State` shape, where the markdown has no fenced JSON block. */
-    seed?: unknown;
-    /** FDRS-636 — trial-group identity (`grp_` + nanoid21). `pome run -n k`
-     *  (k>1) stamps ONE shared id on every mint of the invocation; the cloud
-     *  copies it onto `sessions.group_id` at mint and `runs.group_id` at
-     *  finalize, and the reliability page reads the group by it.
-     *  shared-types 0.6.0 adds the field server-side; an older cloud silently
-     *  strips it, so sending it is always safe. NEVER set for k=1 — a group
-     *  of 1 would flip the reliability page off its implicit latest-k
-     *  fallback. */
-    groupId?: string;
-}
-/** FDRS-636 — POST /v1/sessions/:id/abandon response. `abandoned: false`
- *  means the session was already terminal and nothing was rewritten (the
- *  idempotent no-op branch); `state` echoes the row's current state. */
-export interface AbandonSessionResponse {
-    session_id: string;
-    state: string;
-    error_code: string | null;
-    abandoned: boolean;
-}
-export interface CreateEvalSessionInput {
-    /** Agent identity — the slug written by `pome register agent` (or the
-     *  agt_ id / `--agent` override). Server resolves it under the API key's
-     *  team. */
-    agent: string;
-    /** Human-meaningful task label, e.g. the run's scenario slug. */
-    taskName: string;
-}
-export interface FetchOnTwinInput {
-    twinUrl: string;
-    agentToken: string;
-}
-export interface SubmitResultInput {
-    taskName: string;
-    taskHash: string;
-    durationMs: number;
-    agentModel: string;
-    satisfactionScore: number;
-    criteriaResults: CriterionResult[];
-    judgeModel: string;
-    judgeTokensIn: number | null;
-    judgeTokensOut: number | null;
-    agentSdk?: string | null;
-    lanes: Lane[];
-    steps: Step[];
-    fixPrompt: string | null;
-    eventsJsonlUrl: string | null;
-    traceJsonl: string;
-    stateInitialJson: string;
-    stateFinalJson: string;
-}
-export interface EventsUploadUrlResponse {
-    url: string;
-    key: string;
-}
-export interface StateUploadUrlEntry {
-    url: string;
-    key: string;
-}
-export interface StateUploadUrlPair {
-    state_initial: StateUploadUrlEntry;
-    state_final: StateUploadUrlEntry;
-}
-export interface StateUploadUrlResponse {
-    state_initial: StateUploadUrlEntry;
-    state_final: StateUploadUrlEntry;
-    /** Multi-twin (M3): one initial/final URL+key pair per twin, keyed by twin
-     *  id. Absent on single-twin sessions and on an older cloud, where the
-     *  top-level pair (= primary twin) is authoritative. */
-    per_twin?: Record<string, StateUploadUrlPair>;
-}
-export interface SignalsUploadUrlResponse {
-    url: string;
-    key: string;
-}
-export interface MetaUploadUrlResponse {
-    url: string;
-    key: string;
-}
-export interface FinalizeInput {
-    /** "completed" | "timeout" | "preflight_failed" — free-form for now. */
-    stopReason: string;
-    exitCode: number;
-    durationMs: number;
-    agentModel: string;
-    agentSdk?: string | null;
-    criteria: CriterionDefWire[];
-    taskName: string;
-    taskHash: string;
-    taskPrompt: string;
-    expectedBehavior: string;
-    traceStorageKey?: string;
-    stateInitialStorageKey?: string;
-    stateFinalStorageKey?: string;
-    signalsStorageKey?: string;
-    perTwinStateKeys?: PerTwinStateKeys;
-}
-export interface FinalizeOptions {
-    /** Cancels the finalize POST, any status request, or a pending poll delay. */
-    signal?: AbortSignal;
-}
-export interface HostedClient {
-    createSession(input: CreateSessionInput): Promise<CreateSessionResponse>;
-    /** FDRS-655/656 — POST /v1/eval-sessions. Mints a twin-less session for
-     *  uploading + finalizing an EXISTING raw trace directory (`pome eval`).
-     *  Requires a control plane that ships the FDRS-655 route. */
-    createEvalSession(input: CreateEvalSessionInput): Promise<CreateEvalSessionResponse>;
-    listSessions(opts?: {
-        limit?: number;
-    }): Promise<SessionPublic[]>;
-    getSession(sessionId: string): Promise<SessionPublic>;
-    fetchState(input: FetchOnTwinInput): Promise<unknown>;
-    fetchEvents(input: FetchOnTwinInput): Promise<unknown[]>;
-    /** ADR-013 — authoritative run finalize. Cloud judges and returns the score. */
-    finalize(sessionId: string, input: FinalizeInput, options?: FinalizeOptions): Promise<FinalizeResponse>;
-    /**
-     * @deprecated Use `finalize` instead. `/v1/sessions/:id/result` is a shim
-     * kept for ≥1 OSS CLI release per ADR-013; cloud ignores the CLI-supplied
-     * score and re-judges. Will be removed in the V1.1 CLI cut.
-     */
-    submitResult(sessionId: string, input: SubmitResultInput): Promise<SubmitResultResponse>;
-    /** FDRS-636 — mark an errored trial's session failed NOW with a short
-     *  machine `error_code` (e.g. "agent_timeout"), instead of letting it sit
-     *  open until the expiry sweeper reaps it. Contract: pome-cloud
-     *  routes/abandon.ts — auth is the same surface as /finalize; an
-     *  already-terminal session is an idempotent no-op (`abandoned: false`);
-     *  a finalized run's session is never clobbered. */
-    abandonSession(sessionId: string, input?: {
-        errorCode?: string;
-    }): Promise<AbandonSessionResponse>;
-    requestEventsUploadUrl(sessionId: string): Promise<EventsUploadUrlResponse>;
-    /** Multi-twin (M3): pass `twins` (>1) to receive a per-twin URL+key pair
-     *  under `per_twin` in addition to the top-level primary-twin pair. Omit for
-     *  single-twin sessions. An older cloud ignores the body and returns only
-     *  the top-level pair. */
-    requestStateUploadUrl(sessionId: string, twins?: string[]): Promise<StateUploadUrlResponse>;
-    /** F0-4 / L7 — mint a signed PUT for `signals.jsonl` (adapter-emitted
-     *  HookEvent / ToolUseEvent / ToolResultEvent / SubagentSpawnEvent /
-     *  LlmTurnEvent rows). The returned `key` flows into
-     *  `FinalizeInput.signalsStorageKey`. */
-    requestSignalsUploadUrl(sessionId: string): Promise<SignalsUploadUrlResponse>;
-    /** D18.1 — mint a signed PUT for meta.json. See `MetaUploadUrlResponse`
-     *  for the feature-detection contract (a 404 here means an older control
-     *  plane; callers must tolerate it silently). */
-    requestMetaUploadUrl(sessionId: string): Promise<MetaUploadUrlResponse>;
-    /** @param bestEffort default true — hosted runner swallows network errors on teardown
-     *  @param opts.discard F-983 — set true to confirm discarding an ungraded
-     *  session after catching {@link HostedDiscardRefusedError}. Never implied
-     *  by `bestEffort`: a refusal is a deliberate server decision, not
-     *  transport noise. */
-    deleteSession(sessionId: string, bestEffort?: boolean, opts?: {
-        discard?: boolean;
-    }): Promise<void>;
-}
-export declare function createHostedClient(config: HostedClientConfig): HostedClient;