@pome-sh/cli 0.2.0 → 0.3.0

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/shared-types/dist/github-access-control.js

@@ -0,0 +1,182 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * GitHub twin access-control catalog — cross-repo contract between
+ * `packages/twin-github` (runtime) and `pome-cloud` (dashboard toggles).
+ *
+ * Display labels follow the hosted Twins Manage UI: `{METHOD} {operation}`
+ * where `operation` is camelCase (with a few legacy aliases like `addComment`).
+ *
+ * Endpoints are grouped by functional cluster (Issues, Branches & files, …),
+ * aligned with the FDRS-300 hot-path expansion table — not reversible/irreversible.
+ */
+import { z } from "zod";
+export const githubAccessControlCategorySchema = z.enum([
+    "issues",
+    "issue_comments",
+    "pull_requests",
+    "branches_files",
+    "commits_diffs",
+    "milestones",
+    "status_checks",
+    "tags_releases",
+    "labels",
+    "collaborators",
+]);
+/** Human-readable section headers for the hosted Manage UI. */
+export const GITHUB_ACCESS_CONTROL_CATEGORY_LABELS = {
+    issues: "Issues",
+    issue_comments: "Issue comments",
+    pull_requests: "Pull requests",
+    branches_files: "Branches & files",
+    commits_diffs: "Commits & diffs",
+    milestones: "Milestones",
+    status_checks: "Status & checks",
+    tags_releases: "Tags & releases",
+    labels: "Labels",
+    collaborators: "Collaborators & identity",
+};
+/** Stable render order for dashboard sections. */
+export const GITHUB_ACCESS_CONTROL_CATEGORY_ORDER = [
+    "issues",
+    "issue_comments",
+    "pull_requests",
+    "branches_files",
+    "commits_diffs",
+    "milestones",
+    "status_checks",
+    "tags_releases",
+    "labels",
+    "collaborators",
+];
+export const githubAccessControlEndpointSchema = z.object({
+    /** MCP tool name (snake_case). Stable id for policy storage. */
+    tool: z.string().min(1),
+    /** Dashboard label operation segment, e.g. `listIssues`. */
+    operation: z.string().min(1),
+    method: z.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]),
+    category: githubAccessControlCategorySchema,
+    /** Default allow/deny when a session has no explicit override. */
+    default_allowed: z.boolean(),
+    /** FDRS-300 v2 hot-path; false for the original 25-endpoint surface. */
+    v2: z.boolean().default(false),
+});
+export const githubAccessControlCategoryGroupSchema = z.object({
+    category: githubAccessControlCategorySchema,
+    label: z.string().min(1),
+    endpoints: z.array(githubAccessControlEndpointSchema),
+});
+export const githubAccessControlCatalogSchema = z.object({
+    version: z.literal(2),
+    twin: z.literal("github"),
+    endpoints: z.array(githubAccessControlEndpointSchema).min(1),
+    categories: z.array(githubAccessControlCategoryGroupSchema).min(1),
+});
+function entry(tool, operation, method, category, defaultAllowed, v2 = false) {
+    return { tool, operation, method, category, default_allowed: defaultAllowed, v2 };
+}
+const ENDPOINTS = [
+    // Issues
+    entry("list_issues", "listIssues", "GET", "issues", true),
+    entry("get_issue", "getIssue", "GET", "issues", true),
+    entry("create_issue", "createIssue", "POST", "issues", true),
+    entry("update_issue", "updateIssue", "PATCH", "issues", true),
+    entry("add_assignees", "addAssignees", "POST", "issues", false),
+    // Issue comments
+    entry("add_issue_comment", "addComment", "POST", "issue_comments", true),
+    entry("update_issue_comment", "updateIssueComment", "PATCH", "issue_comments", true, true),
+    entry("delete_issue_comment", "deleteIssueComment", "DELETE", "issue_comments", false, true),
+    // Pull requests
+    entry("list_pull_requests", "listPullRequests", "GET", "pull_requests", true),
+    entry("get_pull_request", "getPullRequest", "GET", "pull_requests", true),
+    entry("create_pull_request", "createPullRequest", "POST", "pull_requests", true),
+    entry("update_pull_request", "updatePullRequest", "PATCH", "pull_requests", true, true),
+    entry("merge_pull_request", "mergePullRequest", "POST", "pull_requests", false),
+    entry("create_pull_request_review", "createReview", "POST", "pull_requests", false),
+    entry("get_pull_request_reviews", "getPullRequestReviews", "GET", "pull_requests", true),
+    entry("get_pull_request_comments", "getPullRequestComments", "GET", "pull_requests", true),
+    entry("get_pull_request_files", "getPullRequestFiles", "GET", "pull_requests", true),
+    entry("get_pull_request_status", "getPullRequestStatus", "GET", "pull_requests", true),
+    entry("update_pull_request_branch", "updatePullRequestBranch", "POST", "pull_requests", false),
+    entry("get_pull_request_diff", "getPullRequestDiff", "GET", "pull_requests", true, true),
+    entry("get_pull_request_commits", "getPullRequestCommits", "GET", "pull_requests", true, true),
+    entry("create_pull_request_review_comment", "createPullRequestReviewComment", "POST", "pull_requests", true, true),
+    entry("add_reply_to_pull_request_comment", "addReplyToPullRequestComment", "POST", "pull_requests", true, true),
+    // Branches & files
+    entry("create_branch", "createBranch", "POST", "branches_files", true),
+    entry("list_branches", "listBranches", "GET", "branches_files", true, true),
+    entry("get_branch", "getBranch", "GET", "branches_files", true, true),
+    entry("delete_branch", "deleteBranch", "DELETE", "branches_files", false, true),
+    entry("get_file_contents", "getContent", "GET", "branches_files", true),
+    entry("create_or_update_file", "createOrUpdateFile", "PUT", "branches_files", true),
+    entry("delete_file", "deleteFile", "DELETE", "branches_files", false, true),
+    entry("push_files", "pushFiles", "POST", "branches_files", false),
+    // Commits & diffs
+    entry("list_commits", "listCommits", "GET", "commits_diffs", true),
+    entry("get_commit", "getCommit", "GET", "commits_diffs", true, true),
+    entry("compare_commits", "compareCommits", "GET", "commits_diffs", true, true),
+    // Milestones
+    entry("list_milestones", "listMilestones", "GET", "milestones", true, true),
+    entry("create_milestone", "createMilestone", "POST", "milestones", true, true),
+    entry("update_milestone", "updateMilestone", "PATCH", "milestones", true, true),
+    entry("delete_milestone", "deleteMilestone", "DELETE", "milestones", false, true),
+    // Status & checks
+    entry("create_commit_status", "createCommitStatus", "POST", "status_checks", true, true),
+    entry("get_combined_status_for_ref", "getCombinedStatusForRef", "GET", "status_checks", true, true),
+    entry("create_check_run", "createCheckRun", "POST", "status_checks", true, true),
+    entry("list_check_runs_for_ref", "listCheckRunsForRef", "GET", "status_checks", true, true),
+    // Tags & releases
+    entry("list_tags", "listTags", "GET", "tags_releases", true, true),
+    entry("list_releases", "listReleases", "GET", "tags_releases", true, true),
+    entry("get_latest_release", "getLatestRelease", "GET", "tags_releases", true, true),
+    entry("create_release", "createRelease", "POST", "tags_releases", false, true),
+    // Labels
+    entry("create_label", "createLabel", "POST", "labels", false),
+    entry("add_issue_labels", "addIssueLabels", "POST", "labels", false),
+    entry("remove_issue_label", "removeIssueLabel", "DELETE", "labels", false),
+    // Collaborators & identity
+    entry("list_collaborators", "listCollaborators", "GET", "collaborators", true),
+    entry("get_me", "getMe", "GET", "collaborators", true, true),
+    entry("add_collaborator", "addCollaborator", "PUT", "collaborators", false, true),
+];
+export function groupGitHubAccessControlByCategory(endpoints = ENDPOINTS) {
+    const byCategory = new Map();
+    for (const category of GITHUB_ACCESS_CONTROL_CATEGORY_ORDER) {
+        byCategory.set(category, []);
+    }
+    for (const endpoint of endpoints) {
+        byCategory.get(endpoint.category).push(endpoint);
+    }
+    return GITHUB_ACCESS_CONTROL_CATEGORY_ORDER
+        .map((category) => ({
+        category,
+        label: GITHUB_ACCESS_CONTROL_CATEGORY_LABELS[category],
+        endpoints: byCategory.get(category),
+    }))
+        .filter((group) => group.endpoints.length > 0);
+}
+/** Canonical 52-endpoint sandbox catalog (25 v1 + 27 v2). */
+export const GITHUB_ACCESS_CONTROL_CATALOG = {
+    version: 2,
+    twin: "github",
+    endpoints: ENDPOINTS,
+    categories: groupGitHubAccessControlByCategory(ENDPOINTS),
+};
+export function formatGitHubAccessControlLabel(endpoint) {
+    return `${endpoint.method} ${endpoint.operation}`;
+}
+export function summarizeGitHubAccessControlCatalog(catalog = GITHUB_ACCESS_CONTROL_CATALOG, allowedOverrides) {
+    let allowed = 0;
+    let denied = 0;
+    for (const endpoint of catalog.endpoints) {
+        const isAllowed = allowedOverrides?.has(endpoint.tool) ?? endpoint.default_allowed;
+        if (isAllowed)
+            allowed += 1;
+        else
+            denied += 1;
+    }
+    return { total: catalog.endpoints.length, allowed, denied };
+}
+export function githubAccessControlToolNames(catalog = GITHUB_ACCESS_CONTROL_CATALOG) {
+    return catalog.endpoints.map((endpoint) => endpoint.tool);
+}
+//# sourceMappingURL=github-access-control.js.map

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/shared-types/dist/github-access-control.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-access-control.js","sourceRoot":"","sources":["../src/github-access-control.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;;;GASG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,IAAI,CAAC;IACtD,QAAQ;IACR,gBAAgB;IAChB,eAAe;IACf,gBAAgB;IAChB,eAAe;IACf,YAAY;IACZ,eAAe;IACf,eAAe;IACf,QAAQ;IACR,eAAe;CAChB,CAAC,CAAC;AAGH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,qCAAqC,GAAgD;IAChG,MAAM,EAAE,QAAQ;IAChB,cAAc,EAAE,gBAAgB;IAChC,aAAa,EAAE,eAAe;IAC9B,cAAc,EAAE,kBAAkB;IAClC,aAAa,EAAE,iBAAiB;IAChC,UAAU,EAAE,YAAY;IACxB,aAAa,EAAE,iBAAiB;IAChC,aAAa,EAAE,iBAAiB;IAChC,MAAM,EAAE,QAAQ;IAChB,aAAa,EAAE,0BAA0B;CAC1C,CAAC;AAEF,kDAAkD;AAClD,MAAM,CAAC,MAAM,oCAAoC,GAAkC;IACjF,QAAQ;IACR,gBAAgB;IAChB,eAAe;IACf,gBAAgB;IAChB,eAAe;IACf,YAAY;IACZ,eAAe;IACf,eAAe;IACf,QAAQ;IACR,eAAe;CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,gEAAgE;IAChE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,4DAA4D;IAC5D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzD,QAAQ,EAAE,iCAAiC;IAC3C,kEAAkE;IAClE,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,wEAAwE;IACxE,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC/B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,QAAQ,EAAE,iCAAiC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC;CACtD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5D,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACnE,CAAC,CAAC;AAGH,SAAS,KAAK,CACZ,IAAY,EACZ,SAAiB,EACjB,MAA6C,EAC7C,QAAqC,EACrC,cAAuB,EACvB,EAAE,GAAG,KAAK;IAEV,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,SAAS,GAAkC;IAC/C,SAAS;IACT,KAAK,CAAC,aAAa,EAAE,YAAY,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC;IACzD,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC;IACrD,KAAK,CAAC,cAAc,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC;IAC5D,KAAK,CAAC,cAAc,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC;IAC7D,KAAK,CAAC,eAAe,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;IAE/D,iBAAiB;IACjB,KAAK,CAAC,mBAAmB,EAAE,YAAY,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC;IACxE,KAAK,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,CAAC;IAC1F,KAAK,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,CAAC;IAE5F,gBAAgB;IAChB,KAAK,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC;IAC7E,KAAK,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC;IACzE,KAAK,CAAC,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC;IAChF,KAAK,CAAC,qBAAqB,EAAE,mBAAmB,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC;IACvF,KAAK,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC;IAC/E,KAAK,CAAC,4BAA4B,EAAE,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC;IACnF,KAAK,CAAC,0BAA0B,EAAE,uBAAuB,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC;IACxF,KAAK,CAAC,2BAA2B,EAAE,wBAAwB,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC;IAC1F,KAAK,CAAC,wBAAwB,EAAE,qBAAqB,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC;IACpF,KAAK,CAAC,yBAAyB,EAAE,sBAAsB,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC;IACtF,KAAK,CAAC,4BAA4B,EAAE,yBAAyB,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC;IAC9F,KAAK,CAAC,uBAAuB,EAAE,oBAAoB,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC;IACxF,KAAK,CAAC,0BAA0B,EAAE,uBAAuB,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC;IAC9F,KAAK,CAAC,oCAAoC,EAAE,gCAAgC,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC;IAClH,KAAK,CAAC,mCAAmC,EAAE,8BAA8B,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC;IAE/G,mBAAmB;IACnB,KAAK,CAAC,eAAe,EAAE,cAAc,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC;IACtE,KAAK,CAAC,eAAe,EAAE,cAAc,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,CAAC;IAC3E,KAAK,CAAC,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,IAAI,CAAC;IACrE,KAAK,CAAC,eAAe,EAAE,cAAc,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,CAAC;IAC/E,KAAK,CAAC,mBAAmB,EAAE,YAAY,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC;IACvE,KAAK,CAAC,uBAAuB,EAAE,oBAAoB,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,CAAC;IACnF,KAAK,CAAC,aAAa,EAAE,YAAY,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,CAAC;IAC3E,KAAK,CAAC,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,CAAC;IAEjE,kBAAkB;IAClB,KAAK,CAAC,cAAc,EAAE,aAAa,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC;IAClE,KAAK,CAAC,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC;IACpE,KAAK,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC;IAE9E,aAAa;IACb,KAAK,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;IAC3E,KAAK,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;IAC9E,KAAK,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,CAAC;IAC/E,KAAK,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC;IAEjF,kBAAkB;IAClB,KAAK,CAAC,sBAAsB,EAAE,oBAAoB,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC;IACxF,KAAK,CAAC,6BAA6B,EAAE,yBAAyB,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC;IACnG,KAAK,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC;IAChF,KAAK,CAAC,yBAAyB,EAAE,qBAAqB,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC;IAE3F,kBAAkB;IAClB,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC;IAClE,KAAK,CAAC,eAAe,EAAE,cAAc,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC;IAC1E,KAAK,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC;IACnF,KAAK,CAAC,gBAAgB,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,CAAC;IAE9E,SAAS;IACT,KAAK,CAAC,cAAc,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;IAC7D,KAAK,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC;IACpE,KAAK,CAAC,oBAAoB,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC;IAE1E,2BAA2B;IAC3B,KAAK,CAAC,oBAAoB,EAAE,mBAAmB,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC;IAC9E,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,CAAC;IAC5D,KAAK,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,IAAI,CAAC;CAClF,CAAC;AAEF,MAAM,UAAU,kCAAkC,CAChD,YAA2C,SAAS;IAEpD,MAAM,UAAU,GAAG,IAAI,GAAG,EAA8D,CAAC;IACzF,KAAK,MAAM,QAAQ,IAAI,oCAAoC,EAAE,CAAC;QAC5D,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,oCAAoC;SACxC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClB,QAAQ;QACR,KAAK,EAAE,qCAAqC,CAAC,QAAQ,CAAC;QACtD,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAE;KACrC,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,MAAM,6BAA6B,GAA+B;IACvE,OAAO,EAAE,CAAC;IACV,IAAI,EAAE,QAAQ;IACd,SAAS,EAAE,SAAS;IACpB,UAAU,EAAE,kCAAkC,CAAC,SAAS,CAAC;CAC1D,CAAC;AAEF,MAAM,UAAU,8BAA8B,CAAC,QAAqC;IAClF,OAAO,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,UAAsC,6BAA6B,EACnE,gBAAsC;IAEtC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,gBAAgB,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,eAAe,CAAC;QACnF,IAAI,SAAS;YAAE,OAAO,IAAI,CAAC,CAAC;;YACvB,MAAM,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,UAAsC,6BAA6B;IAEnE,OAAO,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC5D,CAAC"}

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/shared-types/dist/identity.d.ts

@@ -0,0 +1,90 @@
+import { z } from "zod";
+export declare const userSchema: z.ZodObject<{
+    id: z.ZodString;
+    clerk_user_id: z.ZodString;
+    email: z.ZodString;
+    display_name: z.ZodNullable<z.ZodString>;
+    created_at: z.ZodString;
+    updated_at: z.ZodString;
+}, z.core.$strip>;
+export type User = z.infer<typeof userSchema>;
+export declare const planTierSchema: z.ZodEnum<{
+    free: "free";
+    hobby: "hobby";
+    pro: "pro";
+    team: "team";
+    self_host_annual: "self_host_annual";
+    enterprise: "enterprise";
+}>;
+export type PlanTier = z.infer<typeof planTierSchema>;
+export declare const teamSchema: z.ZodObject<{
+    id: z.ZodString;
+    slug: z.ZodString;
+    name: z.ZodString;
+    plan_tier: z.ZodEnum<{
+        free: "free";
+        hobby: "hobby";
+        pro: "pro";
+        team: "team";
+        self_host_annual: "self_host_annual";
+        enterprise: "enterprise";
+    }>;
+    stripe_customer_id: z.ZodNullable<z.ZodString>;
+    created_at: z.ZodString;
+    updated_at: z.ZodString;
+}, z.core.$strip>;
+export type Team = z.infer<typeof teamSchema>;
+export declare const teamRoleSchema: z.ZodEnum<{
+    owner: "owner";
+    admin: "admin";
+    member: "member";
+}>;
+export type TeamRole = z.infer<typeof teamRoleSchema>;
+export declare const teamMemberSchema: z.ZodObject<{
+    team_id: z.ZodString;
+    user_id: z.ZodString;
+    role: z.ZodEnum<{
+        owner: "owner";
+        admin: "admin";
+        member: "member";
+    }>;
+    invited_at: z.ZodString;
+    accepted_at: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type TeamMember = z.infer<typeof teamMemberSchema>;
+export declare const teamInviteSchema: z.ZodObject<{
+    id: z.ZodString;
+    team_id: z.ZodString;
+    email: z.ZodString;
+    role: z.ZodEnum<{
+        owner: "owner";
+        admin: "admin";
+        member: "member";
+    }>;
+    invited_by: z.ZodString;
+    expires_at: z.ZodString;
+    accepted_at: z.ZodNullable<z.ZodString>;
+    created_at: z.ZodString;
+}, z.core.$strip>;
+export type TeamInvite = z.infer<typeof teamInviteSchema>;
+export declare const apiKeySchema: z.ZodObject<{
+    id: z.ZodString;
+    team_id: z.ZodString;
+    name: z.ZodString;
+    created_by: z.ZodString;
+    last_used_at: z.ZodNullable<z.ZodString>;
+    created_at: z.ZodString;
+    revoked_at: z.ZodNullable<z.ZodString>;
+}, z.core.$strip>;
+export type ApiKey = z.infer<typeof apiKeySchema>;
+export declare const apiKeyCreatedSchema: z.ZodObject<{
+    id: z.ZodString;
+    team_id: z.ZodString;
+    name: z.ZodString;
+    created_by: z.ZodString;
+    last_used_at: z.ZodNullable<z.ZodString>;
+    created_at: z.ZodString;
+    revoked_at: z.ZodNullable<z.ZodString>;
+    full_key: z.ZodString;
+}, z.core.$strip>;
+export type ApiKeyCreated = z.infer<typeof apiKeyCreatedSchema>;

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/shared-types/dist/identity.js

@@ -0,0 +1,72 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// shared-types §1 — IDENTITY. Users, teams, memberships, invites, API keys.
+// Re-exported through the `@pome-sh/shared-types` barrel (index.ts).
+import { z } from "zod";
+// ─────────────────────────────────────────────────────────────────────────────
+// 1. IDENTITY
+// ─────────────────────────────────────────────────────────────────────────────
+export const userSchema = z.object({
+    id: z.string(), // usr_<nanoid> (text, not uuid; per /plan-eng-review L7)
+    clerk_user_id: z.string(), // Clerk user ID (`user_*`)
+    email: z.string().email(),
+    display_name: z.string().nullable(),
+    created_at: z.string().datetime(),
+    updated_at: z.string().datetime(),
+});
+// FDRS-613: reconciled to pome-cloud /v1 wire truth — `hobby` and `team` were
+// added cloud-side for the launch pricing tiers; adopted here so a cloud-issued
+// MeResponse / UsageResponse (plan_tier) parses under the twins schema.
+export const planTierSchema = z.enum([
+    "free",
+    "hobby",
+    "pro",
+    "team",
+    "self_host_annual",
+    "enterprise",
+]);
+export const teamSchema = z.object({
+    id: z.string(), // tm_<nanoid>
+    slug: z.string(), // /dashboard/[teamSlug]/...
+    name: z.string(),
+    plan_tier: planTierSchema,
+    stripe_customer_id: z.string().nullable(),
+    created_at: z.string().datetime(),
+    updated_at: z.string().datetime(),
+});
+export const teamRoleSchema = z.enum(["owner", "admin", "member"]);
+export const teamMemberSchema = z.object({
+    team_id: z.string(),
+    user_id: z.string(),
+    role: teamRoleSchema,
+    invited_at: z.string().datetime(),
+    accepted_at: z.string().datetime().nullable(),
+});
+// Public invite shape — token is NEVER returned in API responses. The plaintext
+// token is delivered exactly once via `createInviteResponseSchema.invite_url`
+// (which embeds it as a path segment). Server stores only sha256(token) in
+// `team_invites.token_hash`.
+export const teamInviteSchema = z.object({
+    id: z.string(), // inv_<nanoid>
+    team_id: z.string(),
+    email: z.string().email(),
+    role: teamRoleSchema,
+    invited_by: z.string(), // user_id
+    expires_at: z.string().datetime(),
+    accepted_at: z.string().datetime().nullable(),
+    created_at: z.string().datetime(),
+});
+export const apiKeySchema = z.object({
+    id: z.string(), // pme_<short> public prefix; hashed_key NEVER appears in API responses (kept server-side only)
+    team_id: z.string(),
+    name: z.string(),
+    created_by: z.string(), // user_id
+    last_used_at: z.string().datetime().nullable(),
+    created_at: z.string().datetime(),
+    revoked_at: z.string().datetime().nullable(),
+});
+// One-time response shape — full key string is only in the create-response, never persisted.
+export const apiKeyCreatedSchema = apiKeySchema.extend({
+    full_key: z.string(), // pme_<full> — show once, then redact
+});
+//# sourceMappingURL=identity.js.map

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/shared-types/dist/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,4EAA4E;AAC5E,qEAAqE;AAErE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,gFAAgF;AAChF,cAAc;AACd,gFAAgF;AAEhF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAA+B,yDAAyD;IACtG,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,EAAoB,2BAA2B;IACxE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,8EAA8E;AAC9E,gFAAgF;AAChF,wEAAwE;AACxE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC;IACnC,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,kBAAkB;IAClB,YAAY;CACb,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAA+B,cAAc;IAC3D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAA6B,4BAA4B;IACzE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,SAAS,EAAE,cAAc;IACzB,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAGnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,cAAc;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAGH,gFAAgF;AAChF,8EAA8E;AAC9E,2EAA2E;AAC3E,6BAA6B;AAC7B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAA+B,eAAe;IAC5D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,IAAI,EAAE,cAAc;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAuB,UAAU;IACvD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAA+B,+FAA+F;IAC5I,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,EAAuB,UAAU;IACvD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAGH,6FAA6F;AAC7F,MAAM,CAAC,MAAM,mBAAmB,GAAG,YAAY,CAAC,MAAM,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAyB,sCAAsC;CACpF,CAAC,CAAC"}

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/shared-types/dist/index.d.ts

@@ -0,0 +1,27 @@
+/**
+ * shared-types — public V1 contract barrel.
+ *
+ * Owns identity/session/task REST contracts plus re-exports for the trace
+ * surface in `recorder-events.ts`, completed-run shape in `run.ts`, and the
+ * OpenTelemetry extension surface in `otel/`. Release history and migration
+ * notes live in CHANGELOG.md.
+ *
+ * This file is a THIN BARREL (F-754): it re-exports only. The contract clusters
+ * live in topical leaf modules — identity/sessions/seed-state/task/rest/
+ * finalize-shapes/errors — each re-exported here with identical names so
+ * `import { ... } from "@pome-sh/shared-types"` is unchanged.
+ */
+export * from "./recorder-events.js";
+export * from "./run.js";
+export * from "./task-vocab.js";
+export * from "./github-access-control.js";
+export * from "./redaction.js";
+export * from "./otel/index.js";
+export * from "./identity.js";
+export * from "./sessions.js";
+export * from "./seed-state.js";
+export * from "./seed-envelope.js";
+export * from "./task.js";
+export * from "./rest.js";
+export * from "./finalize-shapes.js";
+export * from "./errors.js";

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/shared-types/dist/index.js

@@ -0,0 +1,34 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * shared-types — public V1 contract barrel.
+ *
+ * Owns identity/session/task REST contracts plus re-exports for the trace
+ * surface in `recorder-events.ts`, completed-run shape in `run.ts`, and the
+ * OpenTelemetry extension surface in `otel/`. Release history and migration
+ * notes live in CHANGELOG.md.
+ *
+ * This file is a THIN BARREL (F-754): it re-exports only. The contract clusters
+ * live in topical leaf modules — identity/sessions/seed-state/task/rest/
+ * finalize-shapes/errors — each re-exported here with identical names so
+ * `import { ... } from "@pome-sh/shared-types"` is unchanged.
+ */
+// Barrel re-exports — consumers `import { ... } from "@pome-sh/shared-types"`
+// regardless of which leaf file owns the type.
+export * from "./recorder-events.js";
+export * from "./run.js";
+export * from "./task-vocab.js";
+export * from "./github-access-control.js";
+export * from "./redaction.js";
+// OpenTelemetry-native trace surface (M1 / FDRS-480-482): OtelSpanEvent schema,
+// GenAI/HTTP span mapper, legacy→span shim, pinned semconv, otelEventSchema.
+export * from "./otel/index.js";
+// V1 contract clusters (F-754 split out of this file, zero behavior change):
+export * from "./identity.js"; // §1 IDENTITY
+export * from "./sessions.js"; // §2 SESSIONS
+export * from "./seed-state.js"; // §3 TASKS — provider seed-state schemas
+export * from "./seed-envelope.js"; // §3 TASKS — multi-twin seed envelope (M3)
+export * from "./task.js"; // §3 TASKS — task config / task / persisted-task
+export * from "./rest.js"; // §4 PUBLIC REST API (minus finalize family)
+export * from "./finalize-shapes.js"; // §4 PUBLIC REST API — /finalize response family
+export * from "./errors.js"; // §5 ERROR ENVELOPE
+//# sourceMappingURL=index.js.map

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/shared-types/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC;;;;;;;;;;;;GAYG;AAEH,8EAA8E;AAC9E,+CAA+C;AAC/C,cAAc,sBAAsB,CAAC;AACrC,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gBAAgB,CAAC;AAC/B,gFAAgF;AAChF,6EAA6E;AAC7E,cAAc,iBAAiB,CAAC;AAEhC,6EAA6E;AAC7E,cAAc,eAAe,CAAC,CAAU,cAAc;AACtD,cAAc,eAAe,CAAC,CAAU,cAAc;AACtD,cAAc,iBAAiB,CAAC,CAAQ,yCAAyC;AACjF,cAAc,oBAAoB,CAAC,CAAK,2CAA2C;AACnF,cAAc,WAAW,CAAC,CAAc,iDAAiD;AACzF,cAAc,WAAW,CAAC,CAAc,6CAA6C;AACrF,cAAc,sBAAsB,CAAC,CAAG,iDAAiD;AACzF,cAAc,aAAa,CAAC,CAAY,oBAAoB"}