@pome-sh/cli 0.19.0 → 0.21.0

package/node_modules/@pome-sh/sdk/dist/admin-gate.js

@@ -1,103 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// Shared admin-endpoint gate (FDRS-587 / FDRS-616). First-party twins import
-// this through `@pome-sh/sdk/server`; do not copy this file into a twin package.
-//
-// Tiered policy (semantics unchanged from the per-twin copies it replaces):
-//   1. TWIN_ADMIN_TOKEN set → require X-Admin-Token to match (timing-safe).
-//   2. TWIN_ADMIN_TOKEN unset + client IP known → allow only loopback.
-//   3. TWIN_ADMIN_TOKEN unset + client IP unknown → deny in production,
-//      allow otherwise (accepted fail-open for in-process test harnesses).
-import { timingSafeEqual } from "node:crypto";
-/** Context variable consulted first by getClientIp(). */
-export const CLIENT_IP_VAR = "pomeClientIp";
-let nodeGetConnInfo;
-// Lazily import the node bridge's official ConnInfo helper. Dynamic because
-// @pome-sh/sdk declares @hono/node-server as an *optional* peer dependency —
-// a static import would crash consumers that never bind a Node socket.
-// Works with both @hono/node-server v1 and v2 (same subpath + signature).
-function loadNodeGetConnInfo() {
-    nodeGetConnInfo ??= import("@hono/node-server/conninfo").then((mod) => mod.getConnInfo, () => undefined);
-    return nodeGetConnInfo;
-}
-/**
- * Explicitly record the peer address for this request. Alternate serving
- * bridges (or tests) call this from an upstream middleware so the gate never
- * reaches into runtime-private internals.
- *
- * SECURITY: the value passed here MUST be the transport-level peer address
- * (the socket's remote address as reported by the serving bridge). It takes
- * precedence over getConnInfo, so deriving it from any request-controlled
- * input — X-Forwarded-For or any other client-supplied header — would make
- * the loopback-only admin gate spoofable by whoever sets that header. If you
- * are behind a reverse proxy, use TWIN_ADMIN_TOKEN instead of trying to
- * recover the "real" client IP.
- */
-export function setClientIp(c, ip) {
-    c.set(CLIENT_IP_VAR, ip);
-}
-/**
- * Runtime-neutral client-IP accessor (FDRS-587). Resolution order:
- *   1. Explicit override set via setClientIp() (alternate bridges / tests).
- *   2. The node serving bridge's official getConnInfo helper.
- *   3. undefined — no live socket (e.g. app.request() in-process tests).
- */
-export async function getClientIp(c) {
-    const override = c.get(CLIENT_IP_VAR);
-    if (typeof override === "string" && override.length > 0)
-        return override;
-    const getConnInfo = await loadNodeGetConnInfo();
-    if (!getConnInfo)
-        return undefined;
-    try {
-        const address = getConnInfo(c).remote?.address;
-        return typeof address === "string" && address.length > 0 ? address : undefined;
-    }
-    catch {
-        // The helper throws when the context has no node socket behind it.
-        return undefined;
-    }
-}
-export function isLoopbackAddress(remote) {
-    return (remote === "127.0.0.1" ||
-        remote === "::1" ||
-        remote === "::ffff:127.0.0.1" ||
-        remote === "localhost");
-}
-function defaultForbidden() {
-    return Response.json({ message: "Forbidden", documentation_url: "" }, { status: 403 });
-}
-/**
- * Admin endpoint protection shared by every twin (FDRS-616). Each twin's
- * auth.ts wraps this with its own `forbidden` envelope. Semantics are
- * identical to the per-twin requireAdminAuth() copies this replaces.
- */
-export function createAdminGate(options = {}) {
-    const forbidden = options.forbidden ?? defaultForbidden;
-    return async (c, next) => {
-        const adminToken = process.env.TWIN_ADMIN_TOKEN;
-        if (adminToken && adminToken.length > 0) {
-            // Web Headers lookups are case-insensitive, so one lookup covers every
-            // casing a client might send.
-            const provided = c.req.header("X-Admin-Token");
-            if (!provided)
-                return forbidden();
-            const a = Buffer.from(provided);
-            const b = Buffer.from(adminToken);
-            if (a.length !== b.length || !timingSafeEqual(a, b))
-                return forbidden();
-            await next();
-            return;
-        }
-        const remote = await getClientIp(c);
-        if (!remote) {
-            if (process.env.NODE_ENV === "production")
-                return forbidden();
-            await next();
-            return;
-        }
-        if (!isLoopbackAddress(remote))
-            return forbidden();
-        await next();
-    };
-}
-//# sourceMappingURL=admin-gate.js.map

package/node_modules/@pome-sh/sdk/dist/admin-gate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-gate.js","sourceRoot":"","sources":["../src/admin-gate.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,6EAA6E;AAC7E,iFAAiF;AACjF,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,uEAAuE;AACvE,wEAAwE;AACxE,2EAA2E;AAG3E,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,yDAAyD;AACzD,MAAM,CAAC,MAAM,aAAa,GAAG,cAAc,CAAC;AAO5C,IAAI,eAA+D,CAAC;AAEpE,4EAA4E;AAC5E,6EAA6E;AAC7E,uEAAuE;AACvE,0EAA0E;AAC1E,SAAS,mBAAmB;IAC1B,eAAe,KAAK,MAAM,CAAC,4BAA4B,CAAC,CAAC,IAAI,CAC3D,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAuC,EACpD,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;IACF,OAAO,eAAe,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CAAC,CAAU,EAAE,EAAU;IAC/C,CAA0B,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,CAAU;IAC1C,MAAM,QAAQ,GAAI,CAA0B,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAChE,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IACzE,MAAM,WAAW,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAChD,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC;QAC/C,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,CACL,MAAM,KAAK,WAAW;QACtB,MAAM,KAAK,KAAK;QAChB,MAAM,KAAK,kBAAkB;QAC7B,MAAM,KAAK,WAAW,CACvB,CAAC;AACJ,CAAC;AAOD,SAAS,gBAAgB;IACvB,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACzF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,UAA4B,EAAE;IAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC;IACxD,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAChD,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,uEAAuE;YACvE,8BAA8B;YAC9B,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAC/C,IAAI,CAAC,QAAQ;gBAAE,OAAO,SAAS,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC;gBAAE,OAAO,SAAS,EAAE,CAAC;YACxE,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;gBAAE,OAAO,SAAS,EAAE,CAAC;YAC9D,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QACD,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;YAAE,OAAO,SAAS,EAAE,CAAC;QACnD,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC"}

package/node_modules/@pome-sh/sdk/dist/auth.d.ts

@@ -1,100 +0,0 @@
-import type { Context, MiddlewareHandler } from "hono";
-/** `team_id` stamped on sessions authenticated by a provider-shaped token. */
-export declare const PROVIDER_SHAPED_TEAM_ID = "provider-shaped";
-export interface SessionClaims {
-    sid: string;
-    team_id: string;
-    exp: number;
-    [claim: string]: unknown;
-}
-/** Minimum session value; twins extend it via hooks (login, account_id, …). */
-export type SessionValue = {
-    sid: string;
-} & Record<string, unknown>;
-export declare function resolveAuthSecret(): string;
-export interface ProviderTokenSpec {
-    /** HMAC domain separator ("github" | "slack" | "stripe" | …). */
-    provider: string;
-    /** Declared token prefixes, e.g. ["xoxb-pome-", "xoxp-pome-"]. */
-    prefixes: readonly string[];
-}
-export interface MintProviderTokenOptions {
-    sid: string;
-    /** Unix-seconds expiry. Omit for the legacy non-expiring shape. */
-    exp?: number;
-    /** Defaults to the spec's first declared prefix. */
-    prefix?: string;
-    secret?: string;
-}
-/**
- * Mint a provider-shaped token (F-712 row 10: minting lives in the engine;
- * CLI + cloud mint through it, parameterized by the twin's declared shape).
- */
-export declare function mintProviderToken(spec: ProviderTokenSpec, options: MintProviderTokenOptions): string;
-/**
- * Verify a provider-shaped token; returns the sid on success.
- *
- * The parse is right-anchored — the signature is always the trailing 22
- * base64url chars, the optional exp is a trailing all-digit segment of the
- * remainder — and the HMAC disambiguates the exp-vs-sid split. This fixes
- * the F-712 appendix bug once: the old per-twin `([^_]+)` regexes broke for
- * any sid whose base64url encoding contains `_` (the alphabet includes it).
- */
-export declare function verifyProviderToken(spec: ProviderTokenSpec, token: string, secret?: string): string | undefined;
-/** Why a request failed auth; rendered by the twin's `unauthorized` hook. */
-export type UnauthorizedKind = "no_token" | "invalid" | "expired";
-export interface AuthEnvelope {
-    status: number;
-    body: unknown;
-}
-/** Extra token location (F-712 row 3). Returns the token or undefined. */
-export type TokenResolver = (c: Context) => string | undefined | Promise<string | undefined>;
-/** Accept `?<param>=<token>` in the query string (real Slack behavior). */
-export declare function queryTokenResolver(param?: string): TokenResolver;
-/**
- * Accept `<param>=<token>` in a form-encoded POST body (real Slack
- * behavior). Only parses when the content type is form-encoded, so JSON
- * streaming reads downstream are never consumed here; `parseBody()` caches
- * on the Hono context, so downstream handlers see the same object.
- */
-export declare function formTokenResolver(param?: string): TokenResolver;
-export interface BearerAuthOptions {
-    /** Row 1: the twin's provider-shaped token declaration. */
-    providerToken?: ProviderTokenSpec;
-    /** Row 7: extra session fields for provider-shaped sessions. */
-    providerSession?: (sid: string) => Record<string, unknown>;
-    /** Row 3: extra token locations tried after the Authorization header. */
-    tokenResolvers?: readonly TokenResolver[];
-    /**
-     * Row 4 pin: accept a prefix-less bearer and case-insensitive "bearer".
-     * Default false (github/slack); stripe pins true. Flipping a twin is a
-     * contract change (CONTRACT.md + suite, then a cloud consumer PR).
-     */
-    allowRawBearer?: boolean;
-    /**
-     * Row 9: when false, a request with no `:sid` path segment trusts the
-     * bearer alone (stripe's root `/v1/*` SDK-compat mount). Default true.
-     */
-    requirePathSid?: boolean;
-    /** Row 8: DB-backed credential lookup, consulted before provider/JWT. */
-    resolveCredential?: (token: string, c: Context) => SessionValue | undefined | Promise<SessionValue | undefined>;
-    /**
-     * Rows 2 + 6: the twin's 401 envelope, keyed by failure classification.
-     * `info.token` carries the presented credential so a twin can render
-     * shape-dependent messages (stripe: api-key-shaped tokens answer
-     * "Invalid API Key provided.", JWTs answer "Bad credentials").
-     */
-    unauthorized?: (kind: UnauthorizedKind, info?: {
-        token?: string;
-    }) => AuthEnvelope;
-    /** Row 5 pin: the twin's sid-mismatch envelope (github/slack 401, stripe 403). */
-    sidMismatch?: () => AuthEnvelope;
-    /** Row 7: extra session fields derived from verified JWT claims. */
-    sessionExtras?: (claims: SessionClaims) => Record<string, unknown>;
-}
-export declare function bearerAuth(options?: BearerAuthOptions): MiddlewareHandler;
-/**
- * Admin endpoint protection. Thin wrapper over the shared admin-gate module
- * (FDRS-587 / FDRS-616) using the default error envelope.
- */
-export declare function requireAdminAuth(): MiddlewareHandler;

package/node_modules/@pome-sh/sdk/dist/auth.js

@@ -1,262 +0,0 @@
-import { createHmac, timingSafeEqual } from "node:crypto";
-import { verify } from "hono/jwt";
-import { createAdminGate } from "./admin-gate.js";
-/** `team_id` stamped on sessions authenticated by a provider-shaped token. */
-export const PROVIDER_SHAPED_TEAM_ID = "provider-shaped";
-export function resolveAuthSecret() {
-    const secret = process.env.TWIN_AUTH_SECRET;
-    if (!secret && process.env.NODE_ENV === "production") {
-        throw new Error("TWIN_AUTH_SECRET required in production");
-    }
-    return secret ?? "dev-only-insecure-secret";
-}
-const SIG_LENGTH = 22;
-/**
- * Mint a provider-shaped token (F-712 row 10: minting lives in the engine;
- * CLI + cloud mint through it, parameterized by the twin's declared shape).
- */
-export function mintProviderToken(spec, options) {
-    const prefix = options.prefix ?? spec.prefixes[0];
-    if (!prefix || !spec.prefixes.includes(prefix)) {
-        throw new Error(`mintProviderToken: prefix "${options.prefix ?? "<none>"}" is not declared by provider "${spec.provider}"`);
-    }
-    const secret = options.secret ?? resolveAuthSecret();
-    const encoded = Buffer.from(options.sid, "utf8").toString("base64url");
-    if (options.exp !== undefined) {
-        // Mint/verify symmetry: a non-integer exp used to silently mint the
-        // NEVER-expiring legacy shape, and a millisecond-scale exp minted a
-        // token verifyProviderToken can never accept. Both are caller bugs —
-        // fail at mint time.
-        if (!Number.isSafeInteger(options.exp) || options.exp <= 0) {
-            throw new Error(`mintProviderToken: exp must be a positive integer unix timestamp in seconds (got ${String(options.exp)})`);
-        }
-        if (options.exp >= 1e12) {
-            throw new Error(`mintProviderToken: exp ${options.exp} looks like milliseconds — pass a unix timestamp in SECONDS`);
-        }
-        return `${prefix}${encoded}_${options.exp}_${signProviderExp(spec.provider, options.sid, options.exp, secret)}`;
-    }
-    return `${prefix}${encoded}_${signProvider(spec.provider, options.sid, secret)}`;
-}
-/**
- * Verify a provider-shaped token; returns the sid on success.
- *
- * The parse is right-anchored — the signature is always the trailing 22
- * base64url chars, the optional exp is a trailing all-digit segment of the
- * remainder — and the HMAC disambiguates the exp-vs-sid split. This fixes
- * the F-712 appendix bug once: the old per-twin `([^_]+)` regexes broke for
- * any sid whose base64url encoding contains `_` (the alphabet includes it).
- */
-export function verifyProviderToken(spec, token, secret = resolveAuthSecret()) {
-    const prefix = spec.prefixes.find((p) => token.startsWith(p));
-    if (!prefix)
-        return undefined;
-    const rest = token.slice(prefix.length);
-    // Shortest valid form: 1-char encoded sid + "_" + 22-char sig.
-    if (rest.length < SIG_LENGTH + 2)
-        return undefined;
-    if (rest[rest.length - SIG_LENGTH - 1] !== "_")
-        return undefined;
-    const sig = rest.slice(-SIG_LENGTH);
-    const head = rest.slice(0, -(SIG_LENGTH + 1));
-    // Candidate 1: expiring shape — head = <encodedSid>_<exp>.
-    const expMatch = head.match(/^(.+)_(\d{1,12})$/);
-    if (expMatch) {
-        const sid = decodeBase64Url(expMatch[1]);
-        const exp = Number(expMatch[2]);
-        if (sid !== undefined && Number.isSafeInteger(exp)) {
-            if (safeEqual(sig, signProviderExp(spec.provider, sid, exp, secret))) {
-                return exp >= Math.floor(Date.now() / 1000) ? sid : undefined;
-            }
-        }
-    }
-    // Candidate 2: legacy shape — head = <encodedSid>.
-    const sid = decodeBase64Url(head);
-    if (sid === undefined)
-        return undefined;
-    if (safeEqual(sig, signProvider(spec.provider, sid, secret)))
-        return sid;
-    return undefined;
-}
-function signProvider(provider, sid, secret) {
-    return createHmac("sha256", secret)
-        .update(`${provider}:${sid}`)
-        .digest("base64url")
-        .slice(0, SIG_LENGTH);
-}
-function signProviderExp(provider, sid, exp, secret) {
-    return createHmac("sha256", secret)
-        .update(`${provider}:${sid}:${exp}`)
-        .digest("base64url")
-        .slice(0, SIG_LENGTH);
-}
-function decodeBase64Url(value) {
-    try {
-        return Buffer.from(value, "base64url").toString("utf8");
-    }
-    catch {
-        return undefined;
-    }
-}
-function safeEqual(a, b) {
-    const ab = Buffer.from(a);
-    const bb = Buffer.from(b);
-    return ab.length === bb.length && timingSafeEqual(ab, bb);
-}
-/** Accept `?<param>=<token>` in the query string (real Slack behavior). */
-export function queryTokenResolver(param = "token") {
-    return (c) => {
-        const token = c.req.query(param);
-        return token && token.length > 0 ? token : undefined;
-    };
-}
-/**
- * Accept `<param>=<token>` in a form-encoded POST body (real Slack
- * behavior). Only parses when the content type is form-encoded, so JSON
- * streaming reads downstream are never consumed here; `parseBody()` caches
- * on the Hono context, so downstream handlers see the same object.
- */
-export function formTokenResolver(param = "token") {
-    return async (c) => {
-        if (c.req.method !== "POST")
-            return undefined;
-        const contentType = (c.req.header("content-type") ?? "").toLowerCase();
-        if (!contentType.includes("application/x-www-form-urlencoded") &&
-            !contentType.includes("multipart/form-data")) {
-            return undefined;
-        }
-        try {
-            const body = (await c.req.parseBody());
-            const token = body[param];
-            return typeof token === "string" && token.length > 0 ? token : undefined;
-        }
-        catch {
-            return undefined;
-        }
-    };
-}
-const defaultUnauthorized = () => ({
-    status: 401,
-    body: { message: "Bad credentials", documentation_url: "" },
-});
-const defaultSidMismatch = () => ({
-    status: 401,
-    body: { message: "Forbidden", documentation_url: "" },
-});
-function respond(envelope) {
-    return Response.json(envelope.body, { status: envelope.status });
-}
-function extractSidFromUrl(rawUrl) {
-    try {
-        const path = new URL(rawUrl).pathname;
-        const match = path.match(/^\/s\/([^/]+)/);
-        return match?.[1] ? decodeURIComponent(match[1]) : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-function bearerHeaderToken(c, allowRaw) {
-    const header = c.req.header("Authorization") ?? c.req.header("authorization");
-    if (!header)
-        return undefined;
-    const trimmed = header.trim();
-    if (allowRaw) {
-        if (trimmed.toLowerCase().startsWith("bearer ")) {
-            const token = trimmed.slice("bearer ".length).trim();
-            return token.length > 0 ? token : undefined;
-        }
-        return trimmed.length > 0 ? trimmed : undefined;
-    }
-    if (!trimmed.startsWith("Bearer "))
-        return undefined;
-    const token = trimmed.slice("Bearer ".length).trim();
-    return token.length > 0 ? token : undefined;
-}
-function classifyJwtError(err) {
-    const name = err.name ?? "";
-    const message = err instanceof Error ? err.message : "";
-    return name === "JwtTokenExpired" || /expired/i.test(message) ? "expired" : "invalid";
-}
-export function bearerAuth(options = {}) {
-    const unauthorized = options.unauthorized ?? defaultUnauthorized;
-    const sidMismatch = options.sidMismatch ?? defaultSidMismatch;
-    const requirePathSid = options.requirePathSid ?? true;
-    const allowRawBearer = options.allowRawBearer === true;
-    return async (c, next) => {
-        let token = bearerHeaderToken(c, allowRawBearer);
-        if (!token && options.tokenResolvers) {
-            for (const resolveToken of options.tokenResolvers) {
-                token = (await resolveToken(c)) || undefined;
-                if (token)
-                    break;
-            }
-        }
-        if (!token)
-            return respond(unauthorized("no_token"));
-        const pathSid = c.req.param("sid") ?? extractSidFromUrl(c.req.url);
-        const checkSid = (sid) => {
-            if (pathSid)
-                return sid === pathSid ? undefined : respond(sidMismatch());
-            return requirePathSid ? respond(sidMismatch()) : undefined;
-        };
-        // Row 8: DB-backed credential lookup (stripe api_keys).
-        if (options.resolveCredential) {
-            const resolved = await options.resolveCredential(token, c);
-            if (resolved) {
-                const mismatch = checkSid(resolved.sid);
-                if (mismatch)
-                    return mismatch;
-                c.set("session", resolved);
-                await next();
-                return;
-            }
-        }
-        // Row 1: provider-shaped tokens.
-        if (options.providerToken) {
-            const providerSid = verifyProviderToken(options.providerToken, token);
-            if (providerSid) {
-                const mismatch = checkSid(providerSid);
-                if (mismatch)
-                    return mismatch;
-                c.set("session", {
-                    sid: providerSid,
-                    team_id: PROVIDER_SHAPED_TEAM_ID,
-                    ...(options.providerSession?.(providerSid) ?? {}),
-                });
-                await next();
-                return;
-            }
-        }
-        // Session JWT, with engine-side expired-vs-invalid classification
-        // (row 6). The envelope hook decides how each kind renders on the wire.
-        let claims;
-        try {
-            claims = (await verify(token, resolveAuthSecret(), "HS256"));
-        }
-        catch (err) {
-            return respond(unauthorized(classifyJwtError(err), { token }));
-        }
-        if (typeof claims.exp === "number" && claims.exp < Math.floor(Date.now() / 1000)) {
-            return respond(unauthorized("expired", { token }));
-        }
-        if (!claims.sid)
-            return respond(unauthorized("invalid", { token }));
-        const mismatch = checkSid(claims.sid);
-        if (mismatch)
-            return mismatch;
-        c.set("session", {
-            sid: claims.sid,
-            team_id: claims.team_id,
-            ...(options.sessionExtras?.(claims) ?? {}),
-        });
-        await next();
-    };
-}
-/**
- * Admin endpoint protection. Thin wrapper over the shared admin-gate module
- * (FDRS-587 / FDRS-616) using the default error envelope.
- */
-export function requireAdminAuth() {
-    return createAdminGate();
-}
-//# sourceMappingURL=auth.js.map

package/node_modules/@pome-sh/sdk/dist/auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,iBAAiB,CAAC;AAYzD,MAAM,UAAU,iBAAiB;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC5C,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAM,IAAI,0BAA0B,CAAC;AAC9C,CAAC;AAiBD,MAAM,UAAU,GAAG,EAAE,CAAC;AAWtB;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAuB,EACvB,OAAiC;IAEjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,8BAA8B,OAAO,CAAC,MAAM,IAAI,QAAQ,kCAAkC,IAAI,CAAC,QAAQ,GAAG,CAC3G,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,oEAAoE;QACpE,oEAAoE;QACpE,qEAAqE;QACrE,qBAAqB;QACrB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACb,oFAAoF,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAC3G,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,0BAA0B,OAAO,CAAC,GAAG,6DAA6D,CACnG,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,MAAM,GAAG,OAAO,IAAI,OAAO,CAAC,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;IAClH,CAAC;IACD,OAAO,GAAG,MAAM,GAAG,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;AACnF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAuB,EACvB,KAAa,EACb,MAAM,GAAG,iBAAiB,EAAE;IAE5B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,+DAA+D;IAC/D,IAAI,IAAI,CAAC,MAAM,GAAG,UAAU,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,UAAU,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC;IAE9C,2DAA2D;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACjD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;QACjC,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBACrE,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,SAAS,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IACzE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,GAAW,EAAE,MAAc;IACjE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAChC,MAAM,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC;SAC5B,MAAM,CAAC,WAAW,CAAC;SACnB,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,GAAW,EAAE,GAAW,EAAE,MAAc;IACjF,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAChC,MAAM,CAAC,GAAG,QAAQ,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;SACnC,MAAM,CAAC,WAAW,CAAC;SACnB,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACrC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,IAAI,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAC5D,CAAC;AAiBD,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,KAAK,GAAG,OAAO;IAChD,OAAO,CAAC,CAAC,EAAE,EAAE;QACX,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAK,GAAG,OAAO;IAC/C,OAAO,KAAK,EAAE,CAAC,EAAE,EAAE;QACjB,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACvE,IACE,CAAC,WAAW,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YAC1D,CAAC,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAC5C,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAA4B,CAAC;YAClE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAsCD,MAAM,mBAAmB,GAAG,GAAiB,EAAE,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,EAAE,EAAE;CAC5D,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,GAAiB,EAAE,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,EAAE,EAAE;CACtD,CAAC,CAAC;AAEH,SAAS,OAAO,CAAC,QAAsB;IACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC1C,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAU,EAAE,QAAiB;IACtD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9E,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAY;IACpC,MAAM,IAAI,GAAI,GAAyB,CAAC,IAAI,IAAI,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,OAAO,IAAI,KAAK,iBAAiB,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,UAA6B,EAAE;IACxD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,mBAAmB,CAAC;IACjE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC9D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;IACtD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC;IAEvD,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,KAAK,GAAG,iBAAiB,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YACrC,KAAK,MAAM,YAAY,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;gBAClD,KAAK,GAAG,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;gBAC7C,IAAI,KAAK;oBAAE,MAAM;YACnB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,OAAO,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QAErD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAwB,EAAE;YACrD,IAAI,OAAO;gBAAE,OAAO,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACzE,OAAO,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,CAAC,CAAC;QAEF,wDAAwD;QACxD,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC3D,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACxC,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAC;gBAC9B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAC3B,MAAM,IAAI,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1B,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YACtE,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACvC,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAC;gBAC9B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE;oBACf,GAAG,EAAE,WAAW;oBAChB,OAAO,EAAE,uBAAuB;oBAChC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;iBAClD,CAAC,CAAC;gBACH,MAAM,IAAI,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;QACH,CAAC;QAED,kEAAkE;QAClE,wEAAwE;QACxE,IAAI,MAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE,OAAO,CAAC,CAA6B,CAAC;QAC3F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YACjF,OAAO,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,OAAO,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;SAC3C,CAAC,CAAC;QACH,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,eAAe,EAAE,CAAC;AAC3B,CAAC"}

package/node_modules/@pome-sh/sdk/dist/build-info.d.ts

@@ -1,7 +0,0 @@
-export interface TwinBuildInfo {
-    package: string;
-    version: string;
-    git_sha: string;
-    build_time: string;
-}
-export declare function twinBuildInfo(packageName: string): TwinBuildInfo;

package/node_modules/@pome-sh/sdk/dist/build-info.js

@@ -1,14 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-//
-// The `/healthz` `runtime` block required by the runtime contract. Values
-// come from the POME_TWIN_* env surface the cloud injects at image build /
-// snapshot time; everything defaults to dev markers locally.
-export function twinBuildInfo(packageName) {
-    return {
-        package: packageName,
-        version: process.env.POME_TWIN_VERSION ?? "0.1.0",
-        git_sha: process.env.POME_TWIN_GIT_SHA ?? process.env.VERCEL_GIT_COMMIT_SHA ?? "dev",
-        build_time: process.env.POME_TWIN_BUILD_TIME ?? "dev",
-    };
-}
-//# sourceMappingURL=build-info.js.map

package/node_modules/@pome-sh/sdk/dist/build-info.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"build-info.js","sourceRoot":"","sources":["../src/build-info.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,6DAA6D;AAS7D,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO;QACjD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,KAAK;QACpF,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,KAAK;KACtD,CAAC;AACJ,CAAC"}

package/node_modules/@pome-sh/sdk/dist/check-discrimination.d.ts

@@ -1,7 +0,0 @@
-import type { CheckDefinition, DiscriminationVerdict } from "./checks.js";
-/**
- * Run a check against the worlds it names and say whether they actually
- * discriminate. Pure: no vitest, no ledger — each twin's contract test owns the
- * ledger half, so an empty ledger cannot silently excuse anything.
- */
-export declare function probeDiscrimination<TState, TArgs extends Record<string, string>>(def: CheckDefinition<TState, TArgs>, args: TArgs): DiscriminationVerdict;

package/node_modules/@pome-sh/sdk/dist/check-discrimination.js

@@ -1,81 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-//
-// Does a declared check actually discriminate? (F-1126)
-//
-// Split from `checks.ts` because it is the other half of the relationship: that
-// file DEFINES the grammar a declaration is written in, this one EXERCISES a
-// declaration against the worlds it named. Consumers still import
-// `probeDiscrimination` from `@pome-sh/sdk/checks`, which re-exports it.
-//
-// Pure — no vitest, no ledger. Each twin's contract test owns the admitted-null
-// half, so a twin cannot satisfy the gate by shipping an empty ledger.
-// A real verdict, not an abstention. A `skipped` outcome in either world would
-// let a check satisfy the gate by declining to answer twice.
-function isRealPass(outcome) {
-    return outcome.passed === true && (outcome.status === undefined || outcome.status === "passed");
-}
-function isRealFail(outcome) {
-    return outcome.passed === false && (outcome.status === undefined || outcome.status === "failed");
-}
-const describeOutcome = (outcome) => `passed=${outcome.passed} status=${outcome.status ?? "-"} reason=${JSON.stringify(outcome.reason)}`;
-/**
- * What this check says about a world with nothing in it, or null if it refuses
- * to say anything at all.
- *
- * Extracted so the catch RETURNS rather than falling through — D4's
- * no-catch-and-continue gate is right to forbid the assign-and-continue shape,
- * and the intent here really is "produce a value or none".
- */
-function reasonOnEmptyWorld(def, args) {
-    try {
-        return def.evaluate(args, { seed: {}, final: {}, tape: [] }).reason;
-    }
-    catch {
-        // A predicate that THROWS on an empty world cannot have its failing world
-        // confused with one, so arm 3 has nothing to compare against. It abstains
-        // rather than inventing a failure.
-        return null;
-    }
-}
-/**
- * Run a check against the worlds it names and say whether they actually
- * discriminate. Pure: no vitest, no ledger — each twin's contract test owns the
- * ledger half, so an empty ledger cannot silently excuse anything.
- */
-export function probeDiscrimination(def, args) {
-    const worlds = def.discriminatingWorlds(args);
-    if (worlds === null)
-        return { kind: "declined" };
-    const passing = def.evaluate(args, worlds.passing);
-    if (!isRealPass(passing)) {
-        return {
-            kind: "broken",
-            arm: "passing",
-            detail: `passing world did not pass — ${describeOutcome(passing)}`,
-        };
-    }
-    const failing = def.evaluate(args, worlds.failing);
-    if (!isRealFail(failing)) {
-        return {
-            kind: "broken",
-            arm: "failing",
-            detail: `failing world did not fail — ${describeOutcome(failing)}`,
-        };
-    }
-    // ARM 3, and the one the other two cannot cover. A failing world whose reason
-    // is the reason an EMPTY world already produces fails through the check's
-    // SELECTOR, not its assertion — measured on 11 of GitHub's 13 checks before
-    // this arm existed.
-    const degenerate = reasonOnEmptyWorld(def, args);
-    if (degenerate !== null && failing.reason === degenerate) {
-        return {
-            kind: "broken",
-            arm: "degenerate",
-            detail: `the failing world's reason is the one an EMPTY world produces ` +
-                `(${JSON.stringify(failing.reason)}), so it fails through its selector rather than ` +
-                `its assertion`,
-        };
-    }
-    return { kind: "discriminates" };
-}
-//# sourceMappingURL=check-discrimination.js.map

package/node_modules/@pome-sh/sdk/dist/check-discrimination.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"check-discrimination.js","sourceRoot":"","sources":["../src/check-discrimination.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,wDAAwD;AACxD,EAAE;AACF,gFAAgF;AAChF,6EAA6E;AAC7E,kEAAkE;AAClE,yEAAyE;AACzE,EAAE;AACF,gFAAgF;AAChF,uEAAuE;AAIvE,+EAA+E;AAC/E,6DAA6D;AAC7D,SAAS,UAAU,CAAC,OAAqB;IACvC,OAAO,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;AAClG,CAAC;AACD,SAAS,UAAU,CAAC,OAAqB;IACvC,OAAO,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,OAAqB,EAAU,EAAE,CACxD,UAAU,OAAO,CAAC,MAAM,WAAW,OAAO,CAAC,MAAM,IAAI,GAAG,WAAW,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;AAEtG;;;;;;;GAOG;AACH,SAAS,kBAAkB,CACzB,GAAmC,EACnC,IAAW;IAEX,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,EAAY,EAAE,KAAK,EAAE,EAAY,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC;IAC1F,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,0EAA0E;QAC1E,mCAAmC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,GAAmC,EACnC,IAAW;IAEX,MAAM,MAAM,GAAG,GAAG,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAEjD,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,SAAS;YACd,MAAM,EAAE,gCAAgC,eAAe,CAAC,OAAO,CAAC,EAAE;SACnE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,SAAS;YACd,MAAM,EAAE,gCAAgC,eAAe,CAAC,OAAO,CAAC,EAAE;SACnE,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,0EAA0E;IAC1E,4EAA4E;IAC5E,oBAAoB;IACpB,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACzD,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,YAAY;YACjB,MAAM,EACJ,gEAAgE;gBAChE,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,kDAAkD;gBACpF,eAAe;SAClB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AACnC,CAAC"}