@pome-sh/cli 0.2.0 → 0.4.0

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/shared-types/dist/task.js

@@ -0,0 +1,60 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// shared-types §3 — TASKS. Task config, the parsed task markdown shape, and the
+// persisted task row, plus their deprecated `scenario*` aliases. The provider
+// seed-state schemas consumed by `taskSchema.seedState` live in `./seed-state.ts`.
+// Re-exported through the `@pome-sh/shared-types` barrel (index.ts).
+import { z } from "zod";
+import { criterionSchema, judgeModelSchema } from "./run.js";
+import { seedStateSchema } from "./seed-state.js";
+// ─────────────────────────────────────────────────────────────────────────────
+// 3. TASKS (formerly "scenarios") — originally adopted verbatim from
+//    oslo/pome/src/scenario/scenarioSchema.ts
+//
+// W3 vocab (FDRS-653): "task" is the canonical name; the `scenario*` exports
+// below are deprecated aliases kept for the 0.3.0 window (FDRS-654 swaps the
+// consumers).
+//
+// `criterionSchema` and `judgeModelSchema` were moved to `./run.ts` (2026-05-11
+// split) because CriterionResult depends on them; imported here from `./run.js`
+// and re-exported to consumers via the index.ts barrel.
+// ─────────────────────────────────────────────────────────────────────────────
+export const taskConfigSchema = z.object({
+    twins: z.array(z.string()).default(["github"]),
+    timeout: z.number().int().positive().default(60), // seconds
+    runs: z.number().int().positive().default(1),
+    passThreshold: z.number().min(0).max(100).default(100),
+    judge: judgeModelSchema.default("claude-haiku-4-5"), // CLI's BYOK config decides which endpoint serves this
+});
+/** @deprecated FDRS-653 — use `taskConfigSchema`. Removed after the 0.3.0 window. */
+export const scenarioConfigSchema = taskConfigSchema;
+// The parsed task (formerly "scenario") markdown shape. Criterion kinds inside
+// `criteria` normalize D→code, P→model (tolerant reader, FDRS-653).
+export const taskSchema = z.object({
+    slug: z.string().min(1),
+    title: z.string().min(1),
+    setup: z.string().default(""), // human-readable prose; ignored at runtime
+    prompt: z.string().min(1),
+    expectedBehavior: z.string().default(""), // evaluator-only, NEVER sent to agent
+    criteria: z.array(criterionSchema).min(1),
+    config: taskConfigSchema,
+    seedState: seedStateSchema,
+});
+/** @deprecated FDRS-653 — use `taskSchema`. Removed after the 0.3.0 window. */
+export const scenarioSchema = taskSchema;
+// Persisted Task row (dashboard upload path; cloud DB `tasks` table). Per
+// 04-data-model.md. Row ids keep the historical `scn_` prefix (persisted data;
+// renaming ids is a data migration, deliberately NOT part of FDRS-653).
+export const persistedTaskSchema = z.object({
+    id: z.string(), // scn_<nanoid>
+    team_id: z.string(),
+    name: z.string(),
+    source: z.string(), // raw markdown
+    source_hash: z.string(), // sha256(source)
+    uploaded_by: z.string(), // user_id
+    created_at: z.string().datetime(),
+    archived_at: z.string().datetime().nullable(),
+});
+/** @deprecated FDRS-653 — use `persistedTaskSchema`. Removed after the 0.3.0 window. */
+export const persistedScenarioSchema = persistedTaskSchema;
+//# sourceMappingURL=task.js.map

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/shared-types/dist/task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task.js","sourceRoot":"","sources":["../src/task.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,gFAAgF;AAChF,8EAA8E;AAC9E,mFAAmF;AACnF,qEAAqE;AAErE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,gFAAgF;AAChF,qEAAqE;AACrE,8CAA8C;AAC9C,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,cAAc;AACd,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,wDAAwD;AACxD,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAU,UAAU;IACpE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACtD,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAQ,uDAAuD;CACnH,CAAC,CAAC;AAGH,qFAAqF;AACrF,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAIrD,+EAA+E;AAC/E,oEAAoE;AACpE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAgB,2CAA2C;IACxF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAK,sCAAsC;IACnF,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,MAAM,EAAE,gBAAgB;IACxB,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAGH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC;AAIzC,0EAA0E;AAC1E,+EAA+E;AAC/E,wEAAwE;AACxE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAA+B,eAAe;IAC5D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAA2B,eAAe;IAC5D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAsB,iBAAiB;IAC9D,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAsB,UAAU;IACvD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC;AAGH,wFAAwF;AACxF,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC"}

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/shared-types/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@pome-sh/shared-types",
+  "version": "0.11.0",
+  "description": "Shared wire-format contract for Pome — Zod schemas for traces, recorder events, runs, OTel mapping, and secret redaction.",
+  "private": false,
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./recorder-events": {
+      "types": "./dist/recorder-events.d.ts",
+      "default": "./dist/recorder-events.js"
+    },
+    "./run": {
+      "types": "./dist/run.d.ts",
+      "default": "./dist/run.js"
+    },
+    "./otel": {
+      "types": "./dist/otel/index.d.ts",
+      "default": "./dist/otel/index.js"
+    },
+    "./otel/fixtures": {
+      "types": "./dist/otel/fixtures/index.d.ts",
+      "default": "./dist/otel/fixtures/index.js"
+    },
+    "./redaction": {
+      "types": "./dist/redaction.d.ts",
+      "default": "./dist/redaction.js"
+    }
+  },
+  "files": [
+    "dist",
+    "trace-contract.json"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/pome-sh/digital-twins.git",
+    "directory": "packages/shared-types"
+  },
+  "homepage": "https://github.com/pome-sh/digital-twins/tree/main/packages/shared-types",
+  "bugs": {
+    "url": "https://github.com/pome-sh/digital-twins/issues"
+  },
+  "peerDependencies": {
+    "zod": "^4.1.13"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/node_modules/@pome-sh/twin-stripe/node_modules/@pome-sh/shared-types/trace-contract.json

@@ -0,0 +1,41 @@
+{
+  "package": "@pome-sh/shared-types",
+  "version": "0.11.0",
+  "zod": {
+    "range": "^4.1.13",
+    "major": 4
+  },
+  "exports": {
+    "root": "@pome-sh/shared-types",
+    "recorderEvents": "@pome-sh/shared-types/recorder-events",
+    "run": "@pome-sh/shared-types/run",
+    "otel": "@pome-sh/shared-types/otel",
+    "redaction": "@pome-sh/shared-types/redaction"
+  },
+  "canonicalSchemas": [
+    "recorderEventSchema",
+    "eventSchema",
+    "otelEventSchema",
+    "runSchema"
+  ],
+  "fixtures": [
+    "test/fixtures/v1/createSessionRequest/multi-twin-permissive-seed-idempotency.json",
+    "test/fixtures/v1/createSessionRequest/scenario-source-github.json",
+    "test/fixtures/v1/createSessionRequest/stored-scenario.json",
+    "test/fixtures/v1/createSessionRequestTaskVocab/stored-task.json",
+    "test/fixtures/v1/createSessionRequestTaskVocab/task-source-github.json",
+    "test/fixtures/v1/createSessionResponse/full-multi-twin.json",
+    "test/fixtures/v1/createSessionResponse/legacy-single-twin.json",
+    "test/fixtures/v1/planTier/enterprise.json",
+    "test/fixtures/v1/planTier/free.json",
+    "test/fixtures/v1/planTier/hobby.json",
+    "test/fixtures/v1/planTier/pro.json",
+    "test/fixtures/v1/planTier/self_host_annual.json",
+    "test/fixtures/v1/planTier/team.json",
+    "test/fixtures/v1/run/full-production.json",
+    "test/fixtures/v1/run/legacy-minimal.json",
+    "test/fixtures/v1/runTaskVocab/full-production-task-vocab.json",
+    "test/fixtures/v1/usage/free-tier.json",
+    "test/fixtures/v1/usage/team-tier-exhausted.json"
+  ]
+}

package/node_modules/@pome-sh/twin-stripe/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pome-sh/twin-stripe",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "description": "Deterministic test double for Stripe x402 machine payments — stateful clone agents can drive without burning sandbox quota or real chain gas.",
   "private": false,
   "type": "module",
@@ -43,18 +43,18 @@
   ],
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/pome-sh/pome-twins.git",
+    "url": "git+https://github.com/pome-sh/digital-twins.git",
     "directory": "packages/twin-stripe"
   },
-  "homepage": "https://github.com/pome-sh/pome-twins/tree/main/packages/twin-stripe",
+  "homepage": "https://github.com/pome-sh/digital-twins/tree/main/packages/twin-stripe",
   "bugs": {
-    "url": "https://github.com/pome-sh/pome-twins/issues"
+    "url": "https://github.com/pome-sh/digital-twins/issues"
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@hono/node-server": "^2.0.8",
-    "@pome-sh/sdk": "0.4.0",
-    "@pome-sh/shared-types": "0.9.0",
+    "@hono/node-server": "^2.0.10",
+    "@pome-sh/sdk": "0.5.0",
+    "@pome-sh/shared-types": "0.11.0",
     "hono": "^4.12.27",
     "zod": "^4.1.13"
   },

package/node_modules/graphql/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) GraphQL Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/node_modules/graphql/NotSupportedTSVersion.d.ts

@@ -0,0 +1 @@
+"Package 'graphql' support only TS versions that are >=4.1.0".

package/node_modules/graphql/README.md

@@ -0,0 +1,203 @@
+[![GraphQLConf 2025 Banner: September 08-10, Amsterdam. Hosted by the GraphQL Foundation](./assets/graphql-conf-2025.png)](https://graphql.org/conf/2025/?utm_source=github&utm_medium=graphql_js&utm_campaign=readme)
+
+# GraphQL.js
+
+The JavaScript reference implementation for GraphQL, a query language for APIs created by Facebook.
+
+[![npm version](https://badge.fury.io/js/graphql.svg)](https://badge.fury.io/js/graphql)
+[![Build Status](https://github.com/graphql/graphql-js/workflows/CI/badge.svg?branch=main)](https://github.com/graphql/graphql-js/actions?query=branch%3Amain)
+[![Coverage Status](https://codecov.io/gh/graphql/graphql-js/branch/main/graph/badge.svg)](https://codecov.io/gh/graphql/graphql-js)
+
+See more complete documentation at https://graphql.org/ and
+https://graphql.org/graphql-js/.
+
+Looking for help? Find resources [from the community](https://graphql.org/community/).
+
+## Getting Started
+
+A general overview of GraphQL is available in the
+[README](https://github.com/graphql/graphql-spec/blob/main/README.md) for the
+[Specification for GraphQL](https://github.com/graphql/graphql-spec). That overview
+describes a simple set of GraphQL examples that exist as [tests](src/__tests__)
+in this repository. A good way to get started with this repository is to walk
+through that README and the corresponding tests in parallel.
+
+### Using GraphQL.js
+
+Install GraphQL.js from npm
+
+With npm:
+
+```sh
+npm install --save graphql
+```
+
+or using yarn:
+
+```sh
+yarn add graphql
+```
+
+GraphQL.js provides two important capabilities: building a type schema and
+serving queries against that type schema.
+
+First, build a GraphQL type schema which maps to your codebase.
+
+```js
+import {
+  graphql,
+  GraphQLSchema,
+  GraphQLObjectType,
+  GraphQLString,
+} from 'graphql';
+
+var schema = new GraphQLSchema({
+  query: new GraphQLObjectType({
+    name: 'RootQueryType',
+    fields: {
+      hello: {
+        type: GraphQLString,
+        resolve() {
+          return 'world';
+        },
+      },
+    },
+  }),
+});
+```
+
+This defines a simple schema, with one type and one field, that resolves
+to a fixed value. The `resolve` function can return a value, a promise,
+or an array of promises. A more complex example is included in the top-level [tests](src/__tests__) directory.
+
+Then, serve the result of a query against that type schema.
+
+```js
+var source = '{ hello }';
+
+graphql({ schema, source }).then((result) => {
+  // Prints
+  // {
+  //   data: { hello: "world" }
+  // }
+  console.log(result);
+});
+```
+
+This runs a query fetching the one field defined. The `graphql` function will
+first ensure the query is syntactically and semantically valid before executing
+it, reporting errors otherwise.
+
+```js
+var source = '{ BoyHowdy }';
+
+graphql({ schema, source }).then((result) => {
+  // Prints
+  // {
+  //   errors: [
+  //     { message: 'Cannot query field BoyHowdy on RootQueryType',
+  //       locations: [ { line: 1, column: 3 } ] }
+  //   ]
+  // }
+  console.log(result);
+});
+```
+
+**Note**: Please don't forget to set `NODE_ENV=production` if you are running a production server. It will disable some checks that can be useful during development but will significantly impact performance.
+
+## Want to ride the bleeding edge?
+
+The `npm` branch in this repository is automatically maintained to be the last
+commit to `main` to pass all tests, in the same form found on npm. It is
+recommended to use builds deployed to npm for many reasons, but if you want to use
+the latest not-yet-released version of graphql-js, you can do so by depending
+directly on this branch:
+
+```
+npm install graphql@git://github.com/graphql/graphql-js.git#npm
+```
+
+### Experimental features
+
+Each release of GraphQL.js will be accompanied by an experimental release containing support for the `@defer` and `@stream` directive proposal. We are hoping to get community feedback on these releases before the proposal is accepted into the GraphQL specification. You can use this experimental release of GraphQL.js by adding the following to your project's `package.json` file.
+
+```
+"graphql": "experimental-stream-defer"
+```
+
+Community feedback on this experimental release is much appreciated and can be provided on the [issue created for this purpose](https://github.com/graphql/graphql-js/issues/2848).
+
+## Using in a Browser
+
+GraphQL.js is a general-purpose library and can be used both in a Node server
+and in the browser. As an example, the [GraphiQL](https://github.com/graphql/graphiql/)
+tool is built with GraphQL.js!
+
+Building a project using GraphQL.js with [webpack](https://webpack.js.org) or
+[rollup](https://github.com/rollup/rollup) should just work and only include
+the portions of the library you use. This works because GraphQL.js is distributed
+with both CommonJS (`require()`) and ESModule (`import`) files. Ensure that any
+custom build configurations look for `.mjs` files!
+
+## Contributing
+
+We actively welcome pull requests. Learn how to [contribute](./.github/CONTRIBUTING.md).
+
+This repository is managed by EasyCLA. Project participants must sign the free ([GraphQL Specification Membership agreement](https://preview-spec-membership.graphql.org) before making a contribution. You only need to do this one time, and it can be signed by [individual contributors](http://individual-spec-membership.graphql.org/) or their [employers](http://corporate-spec-membership.graphql.org/).
+
+To initiate the signature process please open a PR against this repo. The EasyCLA bot will block the merge if we still need a membership agreement from you.
+
+You can find [detailed information here](https://github.com/graphql/graphql-wg/tree/main/membership). If you have issues, please email [operations@graphql.org](mailto:operations@graphql.org).
+
+If your company benefits from GraphQL and you would like to provide essential financial support for the systems and people that power our community, please also consider membership in the [GraphQL Foundation](https://foundation.graphql.org/join).
+
+## Changelog
+
+Changes are tracked as [GitHub releases](https://github.com/graphql/graphql-js/releases).
+
+## License
+
+GraphQL.js is [MIT-licensed](./LICENSE).
+
+## Version Support
+
+GraphQL.JS follows Semantic Versioning (SemVer) for its releases. Our version support policy is as follows:
+
+- Latest Major Version: We provide full support, including bug fixes and security updates, for the latest major version of GraphQL.JS.
+- Previous Major Version: We offer feature support for the previous major version for 12 months after the release of the newest major version.
+  This means that for 12 months we can backport features for specification changes _if_ they don't cause any breaking changes. We'll continue
+  supporting the previous major version with bug and security fixes.
+- Older Versions: Versions older than the previous major release are considered unsupported. While the code remains available,
+  we do not actively maintain or provide updates for these versions.
+  One exception to this rule is when the older version has been released < 1 year ago, in that case we
+  will treat it like the "Previous Major Version".
+
+### Long-Term Support (LTS)
+
+We do not currently offer a Long-Term Support version of GraphQL.JS. Users are encouraged to upgrade to the latest stable version
+to receive the most up-to-date features, performance improvements, and security updates.
+
+### End-of-Life (EOL) Schedule
+
+We will announce the EOL date for a major version at least 6 months in advance.
+After a version reaches its EOL, it will no longer receive updates, even for critical security issues.
+
+### Upgrade Assistance
+
+To assist users in upgrading to newer versions:
+
+- We maintain detailed release notes for each version, highlighting new features, breaking changes, and deprecations.
+- [Our documentation](https://www.graphql-js.org/) includes migration guides for moving between major versions.
+- The [community forum (Discord channel #graphql-js)](https://discord.graphql.org) is available for users who need additional assistance with upgrades.
+
+### Security Updates
+
+We prioritize the security of GraphQL.JS:
+
+- Critical security updates will be applied to both the current and previous major version.
+- For versions that have reached EOL, we strongly recommend upgrading to a supported version to receive security updates.
+
+### Community Contributions
+
+We welcome community contributions for all versions of GraphQL.JS. However, our maintainers will primarily focus on reviewing
+and merging contributions for supported versions.