@pome-sh/cli 0.20.0 → 0.21.0

package/dist/src/demo/gateway.d.ts

@@ -1,66 +0,0 @@
-import { z } from "zod";
-export type DemoTextPart = {
-    type: "text";
-    text: string;
-};
-export type DemoToolCallPart = {
-    type: "tool-call";
-    toolCallId: string;
-    toolName: string;
-    input: unknown;
-};
-export type DemoToolResultPart = {
-    type: "tool-result";
-    toolCallId: string;
-    toolName: string;
-    output: unknown;
-};
-export type DemoMessage = {
-    role: "user";
-    content: string;
-} | {
-    role: "assistant";
-    content: string | Array<DemoTextPart | DemoToolCallPart>;
-} | {
-    role: "tool";
-    content: DemoToolResultPart[];
-};
-export interface DemoToolDef {
-    name: string;
-    description?: string;
-    input_schema: Record<string, unknown>;
-}
-declare const gatewayResponseSchema: z.ZodObject<{
-    text: z.ZodString;
-    tool_calls: z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        name: z.ZodString;
-        input: z.ZodUnknown;
-    }, z.core.$strip>>;
-    finish_reason: z.ZodString;
-    usage: z.ZodOptional<z.ZodObject<{
-        input_tokens: z.ZodNumber;
-        output_tokens: z.ZodNumber;
-    }, z.core.$strip>>;
-}, z.core.$strip>;
-export type GatewayResponse = z.infer<typeof gatewayResponseSchema>;
-export interface CallDemoGatewayOptions {
-    /** Full gateway URL: {apiBase}/v1/demo/sessions/{sid}/llm. */
-    gatewayUrl: string;
-    demoToken: string;
-    taskName: string;
-    messages: DemoMessage[];
-    tools?: DemoToolDef[];
-    /** Proxy coordinates (HTTPS_PROXY / NO_PROXY from the runner). */
-    proxyUrl?: string;
-    noProxy?: string;
-    timeoutMs?: number;
-    /** Test seam — force the CONNECT path for loopback targets. */
-    forceProxyForTest?: boolean;
-}
-export declare class DemoGatewayError extends Error {
-    readonly status?: number | undefined;
-    constructor(message: string, status?: number | undefined);
-}
-export declare function callDemoGateway(options: CallDemoGatewayOptions): Promise<GatewayResponse>;
-export {};

package/dist/src/demo/gateway.js

@@ -1,76 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// FDRS-643 — client for the anonymous demo model-call gateway (FDRS-637):
-// POST {POME_API_BASE}/v1/demo/sessions/:id/llm, Authorization: Bearer
-// <demo_token>.
-//
-// The wire shape is a STRICT ModelMessage subset (pome-cloud
-// routes/demo-llm.ts): user text, assistant text/tool-call parts, tool
-// results — NO `system` role (server-owned prompt), NO `model` field
-// (server-pinned). Unknown fields are a 422 BY DESIGN; that strictness IS the
-// scenario lock, so this client never spreads extra keys into messages.
-// Requests travel through the runner-injected capture proxy
-// (proxyRequest.ts) so each gateway call lands in events.jsonl as a genuine
-// LlmCallEvent and stays inside the egress floor.
-import { z } from "zod";
-import { DemoCapacityError, capacityKindFrom, capacityLabel } from "./capacity.js";
-import { postJsonMaybeViaProxy } from "./proxyRequest.js";
-const gatewayResponseSchema = z.object({
-    text: z.string(),
-    tool_calls: z.array(z.object({
-        id: z.string(),
-        name: z.string(),
-        input: z.unknown(),
-    })),
-    finish_reason: z.string(),
-    usage: z
-        .object({
-        input_tokens: z.number(),
-        output_tokens: z.number(),
-    })
-        .optional(),
-});
-export class DemoGatewayError extends Error {
-    status;
-    constructor(message, status) {
-        super(message);
-        this.status = status;
-        this.name = "DemoGatewayError";
-    }
-}
-export async function callDemoGateway(options) {
-    const { status, bodyText } = await postJsonMaybeViaProxy({
-        url: options.gatewayUrl,
-        headers: { authorization: `Bearer ${options.demoToken}` },
-        body: {
-            task_name: options.taskName,
-            messages: options.messages,
-            ...(options.tools && options.tools.length > 0
-                ? { tools: options.tools }
-                : {}),
-        },
-        proxyUrl: options.proxyUrl,
-        noProxy: options.noProxy,
-        timeoutMs: options.timeoutMs ?? 120_000,
-        forceProxy: options.forceProxyForTest,
-    });
-    let json = {};
-    try {
-        json = bodyText.length ? JSON.parse(bodyText) : {};
-    }
-    catch {
-        throw new DemoGatewayError(`demo gateway returned non-JSON (status ${status})`, status);
-    }
-    if (status < 200 || status >= 300) {
-        const envelope = json.error;
-        const kind = capacityKindFrom(status, envelope?.details?.kind);
-        if (kind) {
-            throw new DemoCapacityError(kind, envelope?.message ?? capacityLabel(kind));
-        }
-        throw new DemoGatewayError(envelope?.message ?? `demo gateway → HTTP ${status}`, status);
-    }
-    const parsed = gatewayResponseSchema.safeParse(json);
-    if (!parsed.success) {
-        throw new DemoGatewayError(`demo gateway returned an unexpected shape: ${parsed.error.message}`, status);
-    }
-    return parsed.data;
-}

package/dist/src/demo/ids.d.ts

@@ -1,4 +0,0 @@
-/** nanoid-shaped random string over the url-safe 64-char alphabet. */
-export declare function nanoid(size?: number): string;
-/** Mint one trial-group id: `grp_` + nanoid21. */
-export declare function newGroupId(): string;

package/dist/src/demo/ids.js

@@ -1,28 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// FDRS-643 — trial-group identity for `pome demo`.
-//
-// One `grp_` + nanoid21 id per demo invocation, shared by all k=5 demo
-// sessions (mint body `group_id`), copied by the cloud onto
-// `sessions.group_id` at mint and `runs.group_id` at finalize, and forming
-// the no-login preview URL `app.pome.sh/demo/<group_id>`.
-//
-// Format contract: the cloud validates `^[A-Za-z0-9_-]{6,64}$`
-// (isValidGroupId in pome-cloud lib/demo.ts). "grp_" + 21 url-safe chars =
-// 25 chars, comfortably inside.
-import { randomBytes } from "node:crypto";
-const NANOID_ALPHABET = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
-/** nanoid-shaped random string over the url-safe 64-char alphabet. */
-export function nanoid(size = 21) {
-    const bytes = randomBytes(size);
-    let id = "";
-    for (let i = 0; i < size; i += 1) {
-        // 64-char alphabet ⇒ 6 bits per char; masking keeps the distribution
-        // uniform (no modulo bias).
-        id += NANOID_ALPHABET[bytes[i] & 63];
-    }
-    return id;
-}
-/** Mint one trial-group id: `grp_` + nanoid21. */
-export function newGroupId() {
-    return `grp_${nanoid(21)}`;
-}

package/dist/src/demo/mint.d.ts

@@ -1,17 +0,0 @@
-import { z } from "zod";
-export declare const demoSessionSchema: z.ZodObject<{
-    session_id: z.ZodString;
-    demo_token: z.ZodString;
-    expires_at: z.ZodString;
-}, z.core.$strip>;
-export type DemoSession = z.infer<typeof demoSessionSchema>;
-export interface MintDemoSessionsOptions {
-    apiBase: string;
-    taskName: string;
-    groupId: string;
-    count: number;
-    /** Injectable for tests. Defaults to global fetch. */
-    fetchImpl?: typeof fetch;
-    timeoutMs?: number;
-}
-export declare function mintDemoSessions(options: MintDemoSessionsOptions): Promise<DemoSession[]>;

package/dist/src/demo/mint.js

@@ -1,78 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// FDRS-643 — anonymous demo session minting.
-//
-// POST {POME_API_BASE}/v1/demo/sessions with
-//   { task_name: "first-run-demo", task_hash: "", group_id: "grp_…" }
-// → { session_id, demo_token, expires_at }. No auth: the response's
-// demo_token (a sid-scoped JWT) is the credential for everything that
-// follows (gateway calls, blob uploads, finalize).
-//
-// All k sessions are minted UPFRONT (one shared group_id per invocation);
-// each session's 15-minute TTL comfortably covers the whole k=5 run, so mint
-// order is irrelevant. 402/429/503 map to DemoCapacityError so the CLI
-// renders an honest labeled state.
-import { z } from "zod";
-import { HostedOrchError } from "../hosted/errors.js";
-import { DemoCapacityError, capacityKindFrom, capacityLabel } from "./capacity.js";
-export const demoSessionSchema = z.object({
-    session_id: z.string().min(1),
-    demo_token: z.string().min(1),
-    expires_at: z.string(),
-});
-export async function mintDemoSessions(options) {
-    const sessions = [];
-    for (let i = 0; i < options.count; i += 1) {
-        sessions.push(await mintOne(options));
-    }
-    return sessions;
-}
-async function mintOne(options) {
-    const doFetch = options.fetchImpl ?? fetch;
-    const ctrl = new AbortController();
-    const timer = setTimeout(() => ctrl.abort(), options.timeoutMs ?? 30_000);
-    let res;
-    try {
-        res = await doFetch(`${options.apiBase}/v1/demo/sessions`, {
-            method: "POST",
-            headers: { "content-type": "application/json" },
-            body: JSON.stringify({
-                task_name: options.taskName,
-                task_hash: "",
-                group_id: options.groupId,
-            }),
-            signal: ctrl.signal,
-        });
-    }
-    catch (err) {
-        throw new HostedOrchError(err instanceof Error ? err.message : "network error");
-    }
-    finally {
-        clearTimeout(timer);
-    }
-    const text = await res.text();
-    let json = {};
-    try {
-        json = text.length ? JSON.parse(text) : {};
-    }
-    catch {
-        throw new HostedOrchError(`POST /v1/demo/sessions returned non-JSON (status ${res.status})`);
-    }
-    if (!res.ok) {
-        const envelope = json.error;
-        // Mint 429 = per-IP daily session cap, 402 = house-team session quota
-        // (neither carries a `kind` in details today — map by status).
-        let kind = capacityKindFrom(res.status, envelope?.details?.kind);
-        if (kind === "unknown_capacity") {
-            kind = res.status === 429 ? "demo_ip_mint_cap" : "demo_mint_quota";
-        }
-        if (kind) {
-            throw new DemoCapacityError(kind, envelope?.message ?? capacityLabel(kind));
-        }
-        throw new HostedOrchError(envelope?.message ?? `POST /v1/demo/sessions → HTTP ${res.status}`, undefined, res.status);
-    }
-    const parsed = demoSessionSchema.safeParse(json);
-    if (!parsed.success) {
-        throw new HostedOrchError(`POST /v1/demo/sessions returned an unexpected shape: ${parsed.error.message}`);
-    }
-    return parsed.data;
-}

package/dist/src/demo/proxyRequest.d.ts

@@ -1,21 +0,0 @@
-export interface ProxyJsonResponse {
-    status: number;
-    bodyText: string;
-}
-export interface PostJsonOptions {
-    url: string;
-    headers: Record<string, string>;
-    body: unknown;
-    /** e.g. process.env.HTTPS_PROXY. Absent → direct fetch. */
-    proxyUrl?: string;
-    /** e.g. process.env.NO_PROXY ("127.0.0.1,localhost"). */
-    noProxy?: string;
-    timeoutMs?: number;
-    /** Test seam: force the CONNECT-proxy path even for loopback targets
-     *  (unit tests run every server on 127.0.0.1, which the production
-     *  bypass would otherwise route around). */
-    forceProxy?: boolean;
-}
-export declare function isLoopbackHost(host: string): boolean;
-export declare function matchesNoProxy(host: string, noProxy: string | undefined): boolean;
-export declare function postJsonMaybeViaProxy(options: PostJsonOptions): Promise<ProxyJsonResponse>;

package/dist/src/demo/proxyRequest.js

@@ -1,156 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// FDRS-643 — proxy-aware JSON POST for the bundled demo agent.
-//
-// The demo agent is spawned through the real capture path (FDRS-399): the
-// runner injects HTTP(S)_PROXY pointing at the capture-server, whose CONNECT
-// tunnels become the LlmCallEvent rows in events.jsonl and whose
-// deny-by-default egress floor (FDRS-635) is the prod-safety control. Node's
-// global fetch does NOT honor proxy env vars, so an agent that used bare
-// fetch for its gateway calls would silently bypass both — no trace row, no
-// floor. This helper restores the contract without adding a dependency:
-//   - target in NO_PROXY / loopback, or no proxy configured → plain fetch;
-//   - otherwise: CONNECT through the proxy, TLS-wrap for https targets, then
-//     a plain node:http request over the established socket.
-import { request as httpRequest } from "node:http";
-import { connect as netConnect } from "node:net";
-import { connect as tlsConnect } from "node:tls";
-export function isLoopbackHost(host) {
-    const value = host.trim().toLowerCase();
-    if (value === "localhost" || value.endsWith(".localhost"))
-        return true;
-    if (value === "::1" || value === "[::1]")
-        return true;
-    return /^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(value);
-}
-export function matchesNoProxy(host, noProxy) {
-    if (!noProxy)
-        return false;
-    const candidate = host.trim().toLowerCase();
-    return noProxy
-        .split(",")
-        .map((entry) => entry.trim().toLowerCase())
-        .filter((entry) => entry.length > 0)
-        .some((entry) => entry === "*" ||
-        candidate === entry ||
-        candidate.endsWith(entry.startsWith(".") ? entry : `.${entry}`));
-}
-export async function postJsonMaybeViaProxy(options) {
-    const target = new URL(options.url);
-    const useProxy = Boolean(options.proxyUrl) &&
-        (options.forceProxy === true ||
-            (!isLoopbackHost(target.hostname) &&
-                !matchesNoProxy(target.hostname, options.noProxy)));
-    if (!useProxy) {
-        const ctrl = new AbortController();
-        const timer = setTimeout(() => ctrl.abort(), options.timeoutMs ?? 60_000);
-        try {
-            const res = await fetch(options.url, {
-                method: "POST",
-                headers: { ...options.headers, "content-type": "application/json" },
-                body: JSON.stringify(options.body),
-                signal: ctrl.signal,
-            });
-            return { status: res.status, bodyText: await res.text() };
-        }
-        finally {
-            clearTimeout(timer);
-        }
-    }
-    return postJsonThroughConnectProxy(target, options);
-}
-async function postJsonThroughConnectProxy(target, options) {
-    const proxy = new URL(options.proxyUrl);
-    const targetPort = Number(target.port || (target.protocol === "https:" ? 443 : 80));
-    const timeoutMs = options.timeoutMs ?? 60_000;
-    const rawSocket = await connectTunnel(proxy.hostname, Number(proxy.port || 80), target.hostname, targetPort, timeoutMs);
-    const socket = target.protocol === "https:"
-        ? await new Promise((resolve, reject) => {
-            const tlsSocket = tlsConnect({ socket: rawSocket, servername: target.hostname }, () => resolve(tlsSocket));
-            tlsSocket.once("error", reject);
-        })
-        : rawSocket;
-    return new Promise((resolve, reject) => {
-        const payload = JSON.stringify(options.body);
-        const req = httpRequest({
-            createConnection: () => socket,
-            method: "POST",
-            host: target.hostname,
-            port: targetPort,
-            path: `${target.pathname}${target.search}`,
-            headers: {
-                ...options.headers,
-                host: target.host,
-                "content-type": "application/json",
-                "content-length": Buffer.byteLength(payload),
-                connection: "close",
-            },
-            timeout: timeoutMs,
-        }, (res) => {
-            let bodyText = "";
-            res.setEncoding("utf8");
-            res.on("data", (chunk) => {
-                bodyText += chunk;
-            });
-            res.on("end", () => {
-                resolve({ status: res.statusCode ?? 0, bodyText });
-            });
-            res.on("error", reject);
-        });
-        req.on("timeout", () => {
-            req.destroy(new Error(`request to ${target.host} timed out after ${timeoutMs}ms`));
-        });
-        req.on("error", (err) => {
-            socket.destroy();
-            reject(err);
-        });
-        req.end(payload);
-    });
-}
-function connectTunnel(proxyHost, proxyPort, targetHost, targetPort, timeoutMs) {
-    return new Promise((resolve, reject) => {
-        const sock = netConnect({ host: proxyHost, port: proxyPort });
-        let buf = "";
-        let settled = false;
-        const timer = setTimeout(() => {
-            if (settled)
-                return;
-            settled = true;
-            sock.destroy();
-            reject(new Error(`CONNECT to ${targetHost}:${targetPort} timed out after ${timeoutMs}ms`));
-        }, timeoutMs);
-        const fail = (err) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timer);
-            sock.destroy();
-            reject(err);
-        };
-        sock.once("error", fail);
-        const onData = (chunk) => {
-            buf += chunk.toString("utf8");
-            const headerEnd = buf.indexOf("\r\n\r\n");
-            if (headerEnd === -1)
-                return;
-            sock.off("data", onData);
-            if (!/^HTTP\/1\.[01] 200/.test(buf)) {
-                // FDRS-635 — a refused CONNECT (egress floor) surfaces as its 403
-                // status line, so the caller can say WHY the call failed.
-                fail(new Error(`CONNECT ${targetHost}:${targetPort} refused: ${buf.split("\r\n")[0]}`));
-                return;
-            }
-            settled = true;
-            clearTimeout(timer);
-            sock.pause();
-            // Bytes past the header (rare for CONNECT) belong to the tunneled
-            // stream; push them back so the TLS/http layer sees them.
-            const rest = Buffer.from(buf.slice(headerEnd + 4), "utf8");
-            if (rest.length > 0)
-                sock.unshift(rest);
-            sock.resume();
-            resolve(sock);
-        };
-        sock.on("data", onData);
-        sock.write(`CONNECT ${targetHost}:${targetPort} HTTP/1.1\r\nHost: ${targetHost}:${targetPort}\r\n\r\n`);
-    });
-}

package/dist/src/demo/render.d.ts

@@ -1,32 +0,0 @@
-export type TrialVerdict = {
-    kind: "passed";
-    seconds: number;
-} | {
-    kind: "failed";
-    seconds: number;
-    note: string;
-} | {
-    kind: "errored";
-    reason: string;
-};
-/** Reassurance frame. "No signup. No API keys." is verbatim copy of record
- *  ([DECISION] #5); the third line names the three places honestly — local
- *  twin locally, model calls via the anonymous demo gateway, trace evaluated
- *  in pome cloud. */
-export declare function reassuranceBox(): string[];
-export declare function twinReadyLine(seconds: number): string;
-export declare function trialsHeaderLine(count: number, taskName: string): string;
-export declare function evaluatingLine(index: number): string;
-export declare function trialLine(index: number, verdict: TrialVerdict): string;
-export interface SummaryInput {
-    verdicts: TrialVerdict[];
-    /** Most-common failed-criterion phrase across evaluated trials, if any. */
-    failingCriterionPhrase?: string;
-    /** How many evaluated trials failed that criterion. */
-    failingCriterionCount?: number;
-    previewUrl: string;
-}
-export declare function summaryLines(input: SummaryInput): string[];
-/** Compress a criterion's text into the short "start there" phrase: first
- *  clause, lower-cased lead, ~60 chars. */
-export declare function criterionPhrase(text: string): string;

package/dist/src/demo/render.js

@@ -1,96 +0,0 @@
-// SPDX-License-Identifier: Apache-2.0
-// FDRS-643 — pure terminal rendering for `pome demo`, matching the
-// design-of-record (CLI moments.dc.html moment 01, task/code-model
-// vocabulary):
-//
-//   [bordered reassurance box]
-//   spinning up github twin … ready (1.2s)
-//   running 5 isolated trials of first-run-demo …
-//   trial 1  ✓  passed   14.3s
-//   trial 3  ✗  failed   15.9s  <criterion failure note>
-//   trial 5  ⚠  errored         <reason> — excluded
-//   ─────
-//   2 of 4 passed · 1 trial errored on <reason>, excluded from the fraction
-//   <failing-criterion phrase> in 2 of 4 — start there
-//   see the full breakdown — read-only, still no account:
-//   → https://app.pome.sh/demo/<group_id>
-//
-// Demo verdicts are WORDS (passed/failed), never scores; errored rows show
-// no duration and are EXCLUDED from the fraction's denominator.
-/** Reassurance frame. "No signup. No API keys." is verbatim copy of record
- *  ([DECISION] #5); the third line names the three places honestly — local
- *  twin locally, model calls via the anonymous demo gateway, trace evaluated
- *  in pome cloud. */
-export function reassuranceBox() {
-    const lines = [
-        "pome demo · running locally",
-        "No signup. No API keys.",
-        "The GitHub twin runs on your machine; model calls go through pome's",
-        "anonymous demo gateway; the trace is evaluated in pome cloud.",
-        "Your repo and your data are never touched.",
-    ];
-    const width = Math.max(...lines.map((line) => line.length));
-    const top = `┌${"─".repeat(width + 2)}┐`;
-    const bottom = `└${"─".repeat(width + 2)}┘`;
-    return [top, ...lines.map((line) => `│ ${line.padEnd(width)} │`), bottom];
-}
-export function twinReadyLine(seconds) {
-    return `spinning up github twin … ready (${seconds.toFixed(1)}s)`;
-}
-export function trialsHeaderLine(count, taskName) {
-    return `running ${count} isolated trials of ${taskName} …`;
-}
-export function evaluatingLine(index) {
-    return `trial ${index}  …  evaluating in the cloud …`;
-}
-export function trialLine(index, verdict) {
-    switch (verdict.kind) {
-        case "passed":
-            return `trial ${index}  ✓  passed   ${formatSeconds(verdict.seconds)}`;
-        case "failed":
-            return `trial ${index}  ✗  failed   ${formatSeconds(verdict.seconds)}  ${verdict.note}`;
-        case "errored":
-            return `trial ${index}  ⚠  errored         ${verdict.reason} — excluded`;
-    }
-}
-function formatSeconds(seconds) {
-    return `${seconds.toFixed(1)}s`;
-}
-export function summaryLines(input) {
-    const passed = input.verdicts.filter((v) => v.kind === "passed").length;
-    const failed = input.verdicts.filter((v) => v.kind === "failed").length;
-    const errored = input.verdicts.filter((v) => v.kind === "errored");
-    const denominator = passed + failed;
-    const lines = ["─────"];
-    let fraction;
-    if (denominator === 0) {
-        fraction = "no trials were evaluated";
-    }
-    else {
-        fraction = `${passed} of ${denominator} passed`;
-    }
-    if (errored.length > 0) {
-        const reason = errored[0].reason;
-        const noun = errored.length === 1 ? "trial" : "trials";
-        fraction += ` · ${errored.length} ${noun} errored on ${reason}, excluded from the fraction`;
-    }
-    lines.push(fraction);
-    if (input.failingCriterionPhrase &&
-        typeof input.failingCriterionCount === "number" &&
-        input.failingCriterionCount > 0 &&
-        denominator > 0) {
-        lines.push(`${input.failingCriterionPhrase} in ${input.failingCriterionCount} of ${denominator} — start there`);
-    }
-    if (denominator > 0) {
-        lines.push("see the full breakdown — read-only, still no account:");
-        lines.push(`→ ${input.previewUrl}`);
-    }
-    return lines;
-}
-/** Compress a criterion's text into the short "start there" phrase: first
- *  clause, lower-cased lead, ~60 chars. */
-export function criterionPhrase(text) {
-    const clause = text.split(/[.;]/)[0]?.trim() ?? text.trim();
-    const lowered = clause.length > 0 ? clause[0].toLowerCase() + clause.slice(1) : clause;
-    return lowered.length > 64 ? `${lowered.slice(0, 61).trimEnd()}…` : lowered;
-}

package/dist/src/demo/runDemo.d.ts

@@ -1,33 +0,0 @@
-import { runTask, type RunTaskOptions } from "../runner/runTask.js";
-import { type HostedClient } from "../hosted/client.js";
-import { mintDemoSessions, type DemoSession } from "./mint.js";
-import { type TrialVerdict } from "./render.js";
-export type DemoTrialClient = Pick<HostedClient, "requestEventsUploadUrl" | "requestStateUploadUrl" | "requestSignalsUploadUrl" | "requestMetaUploadUrl" | "finalize" | "abandonSession">;
-export interface RunDemoOptions {
-    /** Control-plane base URL (POME_API_BASE, default https://api.pome.sh). */
-    apiBase: string;
-    /** Dashboard base for the preview link (default https://app.pome.sh). */
-    dashboardBase: string;
-    trials?: number;
-    artifactsDir?: string;
-    out?: (line: string) => void;
-    /** Agent command override. Default re-invokes this binary: `<node> <main.js> demo-agent`. */
-    agentCommand?: string;
-    captureServerCommand?: RunTaskOptions["captureServerCommand"];
-    runTaskFn?: typeof runTask;
-    mintFn?: typeof mintDemoSessions;
-    /** Per-session upload/finalize client factory (bearer demo_token). */
-    trialClientFactory?: (session: DemoSession) => DemoTrialClient;
-    /** Skip the warm-up twin boot (tests). */
-    skipTwinWarmup?: boolean;
-}
-export interface RunDemoResult {
-    exitCode: number;
-    groupId: string;
-    verdicts: TrialVerdict[];
-}
-export declare function runDemo(options: RunDemoOptions): Promise<RunDemoResult>;
-/** Production default: re-invoke this same binary as `pome demo-agent`.
- *  Quotes both parts so paths with spaces survive runAgentCommand's
- *  shell-less split. */
-export declare function defaultDemoAgentCommand(execPath: string, scriptPath: string | undefined): string;