@pome-sh/cli 0.23.41 → 0.23.43

package/dist/build-info.json

@@ -1,6 +1,6 @@
 {
   "package": "pome-sh",
-  "version": "0.23.41",
-  "git_sha": "f60a1f05eb4991a7bda87742ea75a1832a9b269b",
-  "build_time": "2026-08-13T02:40:36.333Z"
+  "version": "0.23.43",
+  "git_sha": "299810b816d73cf13826991a602af497b264c09e",
+  "build_time": "2026-08-13T13:52:24.164Z"
 }

package/dist/{checks-34HBZTRP.js → checks-YI7MUJIE.js}

@@ -183,7 +183,7 @@ async function checkTwinReachable(_configDir) {
   });
   let harness;
   try {
-    const { bootTwin } = await import('./twinHarness-CKDJQ6TF.js');
+    const { bootTwin } = await import('./twinHarness-HQL3WCWU.js');
     harness = await bootTwin({
       twin: "github",
       seedState: void 0,

package/dist/{chunk-KIUIKAVU.js → chunk-B22TYIEM.js}

@@ -19,7 +19,52 @@ var seedSchema = z.object({
       color: z.string().default("ededed"),
       description: z.string().default("")
     })).default([]),
-    files: z.array(z.object({ path: z.string().min(1), content: z.string(), branch: z.string().optional() })).default([]),
+    // F-1500 — `renamed_from` is how a seed expresses a MOVE, and with it the
+    // `status: "renamed"` the row type has always declared and no world could
+    // reach. A seeded branch is created from the default branch and inherits
+    // every path, and a plain `files[]` entry can only add or overwrite, so
+    // before this there was no way to make a path ABSENT from the head branch
+    // — and `previous_filename` was therefore unreachable from any seed, not
+    // merely unemitted.
+    //
+    // `content` is refused alongside `renamed_from` rather than merged with
+    // it: the diff detects a move by pairing identical blobs (see
+    // `calculatePullFiles`), so a seed naming a source AND different content
+    // would be asking for a rename the diff would report as an add plus a
+    // remove. Refusing it keeps "the seed asked for a rename" and "the twin
+    // serves a rename" the same statement. The content comes from the source
+    // path, which the domain resolves on the branch the move happens on.
+    files: z.array(z.object({
+      path: z.string().min(1),
+      content: z.string().optional(),
+      branch: z.string().optional(),
+      renamed_from: z.string().min(1).optional()
+    }).superRefine((file, ctx) => {
+      if (file.renamed_from === void 0) {
+        if (file.content === void 0) {
+          ctx.addIssue({
+            code: "custom",
+            path: ["content"],
+            message: "content is required on a file entry that declares no renamed_from"
+          });
+        }
+        return;
+      }
+      if (file.content !== void 0) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["content"],
+          message: `renamed_from carries the source file's content, so content must be omitted (${file.path})`
+        });
+      }
+      if (file.renamed_from === file.path) {
+        ctx.addIssue({
+          code: "custom",
+          path: ["renamed_from"],
+          message: `renamed_from must name a different path than the file it moves to (${file.path})`
+        });
+      }
+    })).default([]),
     // F-1421 — milestones, tags and releases are repository-level entities the
     // twin already SERVES (`GET /milestones`, `/tags`, `/releases`,
     // `/releases/latest`, `/releases/tags/:tag`) and the seed could not

package/dist/{chunk-DBVHA3LI.js → chunk-GHRZRQW5.js}

@@ -1,7 +1,7 @@
 import { getAvailablePort } from './chunk-XDU6TD4O.js';
 import { buildEgressAllowlist, readBlockedEgress } from './chunk-CBFKZZBR.js';
-import { parseTaskFile, seedStateForTwin, runAgentCommand, writeRunArtifactsCore } from './chunk-S3XYJUD6.js';
-import { createRecorder, bootTwin } from './chunk-IA2EYQ3Q.js';
+import { parseTaskFile, seedStateForTwin, runAgentCommand, writeRunArtifactsCore } from './chunk-NAQHX4KD.js';
+import { createRecorder, bootTwin } from './chunk-JGZFB6ZZ.js';
 import { eventSchema } from './chunk-VBATFCWR.js';
 import { redactSecrets, redactEvent } from './chunk-SG6ZTIMT.js';
 import { serve } from '@hono/node-server';

package/dist/{chunk-IA2EYQ3Q.js → chunk-JGZFB6ZZ.js}

@@ -1,4 +1,4 @@
-import { TWIN_NAMES, isTwinName, TWIN_REGISTRY } from './chunk-PRK5EFUZ.js';
+import { TWIN_NAMES, isTwinName, TWIN_REGISTRY } from './chunk-LA52VCI4.js';
 import { createFileBackedRecorderStore, createRecorderStore } from './chunk-OW7VVW6X.js';
 
 // src/recorder/recorder.ts

package/dist/{chunk-PRK5EFUZ.js → chunk-LA52VCI4.js}

@@ -39,7 +39,7 @@ var TWIN_REGISTRY = {
         defaultSeedState,
         GitHubDomain,
         openGitHubCloneDatabase
-      } = await import('./src-XBWNIRBG.js');
+      } = await import('./src-VKYIOI2P.js');
       const db = openGitHubCloneDatabase();
       const domain = new GitHubDomain(db);
       domain.seed(seedState === void 0 ? defaultSeedState() : seedState);
@@ -173,7 +173,7 @@ var TWIN_REGISTRY = {
   }
 };
 async function createGitHubSmokeApp() {
-  const { createGitHubCloneApp } = await import('./src-XBWNIRBG.js');
+  const { createGitHubCloneApp } = await import('./src-VKYIOI2P.js');
   return createGitHubCloneApp();
 }
 function defaultPortFor(twin, env = process.env) {

package/dist/{chunk-S3XYJUD6.js → chunk-NAQHX4KD.js}

@@ -1,8 +1,8 @@
 import { criterionSchema, finalizeResponseSchema, HostedDiscardRefusedError, HostedOrchError, HostedAuthError, HostedQuotaError, submitResultResponseSchema, createEvalSessionResponseSchema, createSessionResponseSchema, sessionPublicSchema } from './chunk-X66JOOO7.js';
-import { seedSchema, parseSeed, defaultSeedState as defaultSeedState$2 } from './chunk-KIUIKAVU.js';
+import { seedSchema, parseSeed, defaultSeedState as defaultSeedState$2 } from './chunk-B22TYIEM.js';
 import { gmailSeedSchema, defaultSeedState } from './chunk-NJ246QPJ.js';
 import { linearSeedSchema, defaultSeedState as defaultSeedState$1 } from './chunk-ZKID2HS3.js';
-import { isTwinName, TWIN_REGISTRY } from './chunk-PRK5EFUZ.js';
+import { isTwinName, TWIN_REGISTRY } from './chunk-LA52VCI4.js';
 import { toTwinHttpEventRow } from './chunk-OW7VVW6X.js';
 import { redactEvent, redactSecrets } from './chunk-SG6ZTIMT.js';
 import { mkdir, appendFile, writeFile, readFile } from 'node:fs/promises';

package/dist/{chunk-E2HQ7WRL.js → chunk-NCHH5LIC.js}

@@ -1,5 +1,5 @@
 import { readManifest, normalizeManifestTwins } from './chunk-ABM3CMQB.js';
-import { createHostedClient, perTwinReturnedByCloud, parseTaskFile, runAgentCommand, writeRunArtifactsCore, toTwinHttpEvent, redactJsonl, uploadRunBlobs, scoreFromFinalizeResponse, scoreStatus, evaluationCounts } from './chunk-S3XYJUD6.js';
+import { createHostedClient, perTwinReturnedByCloud, parseTaskFile, runAgentCommand, writeRunArtifactsCore, toTwinHttpEvent, redactJsonl, uploadRunBlobs, scoreFromFinalizeResponse, scoreStatus, evaluationCounts } from './chunk-NAQHX4KD.js';
 import { MOUNTED_TWINS, HostedAuthError, HostedDiscardRefusedError, HostedQuotaError, HostedOrchError, HostedTrialError, agentResponseSchema } from './chunk-X66JOOO7.js';
 import { redactSecrets, redactEvent } from './chunk-SG6ZTIMT.js';
 import { randomUUID, createHash } from 'node:crypto';

package/dist/{runDemo-V3LQQJCT.js → runDemo-5P3FBTOI.js}

@@ -1,16 +1,16 @@
 import { newGroupId, reassuranceBox, twinReadyLine, trialsHeaderLine, trialLine, summaryLines, evaluatingLine, criterionPhrase } from './chunk-RGZBC7NF.js';
 import { DemoCapacityError, capacityLabel, parseCapacityMarker, capacityKindFrom } from './chunk-ZX4WNSZ5.js';
-import { runTask, demoTaskPath, DEMO_TASK_NAME, DEMO_REPO } from './chunk-DBVHA3LI.js';
+import { runTask, demoTaskPath, DEMO_TASK_NAME, DEMO_REPO } from './chunk-GHRZRQW5.js';
 import { getAvailablePort } from './chunk-XDU6TD4O.js';
 import './chunk-CBFKZZBR.js';
-import { createHostedClient, parseTaskFile, uploadRunBlobs, scoreFromFinalizeResponse, scoreStatus, outcomeOf } from './chunk-S3XYJUD6.js';
+import { createHostedClient, parseTaskFile, uploadRunBlobs, scoreFromFinalizeResponse, scoreStatus, outcomeOf } from './chunk-NAQHX4KD.js';
 import './chunk-NW7HGA2K.js';
 import { HostedQuotaError, HostedOrchError } from './chunk-X66JOOO7.js';
-import './chunk-KIUIKAVU.js';
+import './chunk-B22TYIEM.js';
 import './chunk-NJ246QPJ.js';
 import './chunk-ZKID2HS3.js';
-import { bootTwin } from './chunk-IA2EYQ3Q.js';
-import './chunk-PRK5EFUZ.js';
+import { bootTwin } from './chunk-JGZFB6ZZ.js';
+import './chunk-LA52VCI4.js';
 import './chunk-OW7VVW6X.js';
 import './chunk-VBATFCWR.js';
 import './chunk-SG6ZTIMT.js';

package/dist/{runTrialGroup-A6XUGJAD.js → runTrialGroup-KDVWTFDR.js}

@@ -1,13 +1,13 @@
 import { newGroupId, criterionPhrase } from './chunk-RGZBC7NF.js';
-import { runTaskHosted, resolveRunAgentIdentity } from './chunk-E2HQ7WRL.js';
+import { runTaskHosted, resolveRunAgentIdentity } from './chunk-NCHH5LIC.js';
 import './chunk-ABM3CMQB.js';
-import { createHostedClient, parseTaskFile, outcomeOf } from './chunk-S3XYJUD6.js';
+import { createHostedClient, parseTaskFile, outcomeOf } from './chunk-NAQHX4KD.js';
 import './chunk-NW7HGA2K.js';
 import { HostedQuotaError, HostedTrialError } from './chunk-X66JOOO7.js';
-import './chunk-KIUIKAVU.js';
+import './chunk-B22TYIEM.js';
 import './chunk-NJ246QPJ.js';
 import './chunk-ZKID2HS3.js';
-import './chunk-PRK5EFUZ.js';
+import './chunk-LA52VCI4.js';
 import './chunk-OW7VVW6X.js';
 import './chunk-VBATFCWR.js';
 import './chunk-SG6ZTIMT.js';

package/dist/src/cli/main.js

@@ -1,22 +1,22 @@
 #!/usr/bin/env node
-import { DEFAULT_CONTROL_PLANE_URL, DEFAULT_DASHBOARD_URL, clearLocalCredentials, friendlyHostedError, runSessionCreate, runSessionList, runSessionStop, resolveCredentials, runTaskHosted, discoverRunSet, VERDICT_ARTIFACT_VERSION, persistCredentialsAfterLogin, DEFAULT_DOCS_SITE_ORIGIN, resolveSeams, resolveCachedAgentId, readLinkCache, postAgentResolver, writeLinkCache, ensurePomeGitignored } from '../../chunk-E2HQ7WRL.js';
+import { DEFAULT_CONTROL_PLANE_URL, DEFAULT_DASHBOARD_URL, clearLocalCredentials, friendlyHostedError, runSessionCreate, runSessionList, runSessionStop, resolveCredentials, runTaskHosted, discoverRunSet, VERDICT_ARTIFACT_VERSION, persistCredentialsAfterLogin, DEFAULT_DOCS_SITE_ORIGIN, resolveSeams, resolveCachedAgentId, readLinkCache, postAgentResolver, writeLinkCache, ensurePomeGitignored } from '../../chunk-NCHH5LIC.js';
 import { readManifest, writeManifest, MANIFEST_JSON, readRequiredManifest, normalizeManifestTwins } from '../../chunk-ABM3CMQB.js';
-import { assetPath, runTask, resolvePackageRoot, DEMO_TASK_NAME, demoTaskPath } from '../../chunk-DBVHA3LI.js';
+import { assetPath, runTask, resolvePackageRoot, DEMO_TASK_NAME, demoTaskPath } from '../../chunk-GHRZRQW5.js';
 import '../../chunk-XDU6TD4O.js';
 import '../../chunk-CBFKZZBR.js';
-import { parseTaskFile, scoreStatus, runScoreLine, readLatestRun, readMetaSummary, outcomeOf, readConfigTwins, scoreCountsSummary, markerFor, criterionMarkerLabel, twinSkipSuffix, readCodeCriteria, createHostedClient, toTwinHttpEvent, redactJsonl, scoreFromFinalizeResponse, parseGitHubSeedState, uploadRunBlobs, isPreSatisfied } from '../../chunk-S3XYJUD6.js';
+import { parseTaskFile, scoreStatus, runScoreLine, readLatestRun, readMetaSummary, outcomeOf, readConfigTwins, scoreCountsSummary, markerFor, criterionMarkerLabel, twinSkipSuffix, readCodeCriteria, createHostedClient, toTwinHttpEvent, redactJsonl, scoreFromFinalizeResponse, parseGitHubSeedState, uploadRunBlobs, isPreSatisfied } from '../../chunk-NAQHX4KD.js';
 import '../../chunk-NW7HGA2K.js';
 import { MOUNTED_TWINS, deriveAgentSlug, exitCodeFor, HostedUsageError, HostedOrchError, HostedAuthError, HostedQuotaError } from '../../chunk-X66JOOO7.js';
 import { TAPE_ASSERTABLE_TOOLS } from '../../chunk-FKZZWWYC.js';
-import { seedSchema } from '../../chunk-KIUIKAVU.js';
+import { seedSchema } from '../../chunk-B22TYIEM.js';
 import { SLACK_CHECKS } from '../../chunk-IDNSKKEC.js';
 import { GMAIL_CHECKS } from '../../chunk-JM6VS62R.js';
 import '../../chunk-NJ246QPJ.js';
 import { LINEAR_CHECKS } from '../../chunk-XBT6ZLBG.js';
 import '../../chunk-ZKID2HS3.js';
 import { oneOf, defineCheck, repoRef, VACUITY_SENTINEL_NUMBER, childStatePath, VACUITY_SENTINEL, statePath, templateSlots, renderCheck, checksDigest, checkPattern, checkNearMissPattern } from '../../chunk-JWJYNAWI.js';
-import '../../chunk-IA2EYQ3Q.js';
-import { TWIN_NAME_LIST, isTwinName, createGitHubSmokeApp } from '../../chunk-PRK5EFUZ.js';
+import '../../chunk-JGZFB6ZZ.js';
+import { TWIN_NAME_LIST, isTwinName, createGitHubSmokeApp } from '../../chunk-LA52VCI4.js';
 import '../../chunk-OW7VVW6X.js';
 import { isLegacyEventRow, eventSchema } from '../../chunk-VBATFCWR.js';
 import { redactEvent, redactSecrets } from '../../chunk-SG6ZTIMT.js';
@@ -850,7 +850,7 @@ async function throwForStatus(res) {
 
 // src/task/seed-verifier.ts
 async function verifySeedWithTwin(seed) {
-  const { GitHubDomain, openGitHubCloneDatabase } = await import('../../src-XBWNIRBG.js');
+  const { GitHubDomain, openGitHubCloneDatabase } = await import('../../src-VKYIOI2P.js');
   const db = openGitHubCloneDatabase(":memory:");
   try {
     new GitHubDomain(db).seed(seed);
@@ -4580,7 +4580,7 @@ var DEFAULT_AGENT_COMMAND = `node ${DEFAULT_AGENT_FILE}`;
 var MANIFEST_SCHEMA_URL = "https://pome.sh/schemas/v1/pome.json";
 var MAX_UNREADABLE_PATHS_SHOWN = 5;
 function readPackageVersion() {
-  if ("0.23.41".length > 0) return "0.23.41";
+  if ("0.23.43".length > 0) return "0.23.43";
   try {
     const here = dirname(fileURLToPath(import.meta.url));
     const candidates = [
@@ -5035,7 +5035,7 @@ function createProgram() {
         return;
       }
       {
-        const { runDoctorChecks } = await import('../../checks-34HBZTRP.js');
+        const { runDoctorChecks } = await import('../../checks-YI7MUJIE.js');
         const { renderDoctorReport } = await import('../../render-ZQQ4UMNO.js');
         const doctorReport = await runDoctorChecks({ mode: useLocal ? "full" : "hosted" });
         if (!doctorReport.ok) {
@@ -5073,7 +5073,7 @@ function createProgram() {
               taskForRuns.config.runs
             );
             if (k > 1) {
-              const { runTrialGroup } = await import('../../runTrialGroup-A6XUGJAD.js');
+              const { runTrialGroup } = await import('../../runTrialGroup-KDVWTFDR.js');
               const fileForRerun = relative(process.cwd(), file);
               const rerunCommand = defaultTask ? options.trials !== void 0 ? `pome run -n ${k}` : "pome run" : `pome run ${fileForRerun && !fileForRerun.startsWith("..") ? fileForRerun : file} -n ${k}`;
               const groupResult = await runTrialGroup({
@@ -5167,7 +5167,7 @@ function createProgram() {
         process.exitCode = 5;
         return;
       }
-      const { runDemo } = await import('../../runDemo-V3LQQJCT.js');
+      const { runDemo } = await import('../../runDemo-5P3FBTOI.js');
       const result = await runDemo({
         apiBase: opts.apiUrl.replace(/\/$/, ""),
         dashboardBase: process.env.POME_DASHBOARD_URL ?? DEFAULT_DASHBOARD_URL,
@@ -5185,7 +5185,7 @@ function createProgram() {
   program.command("doctor").description(
     "Check the agent\u2194twin wiring: pome.json (or pome.yaml) present + valid, the local twin boots + serves, requests routed to the twin (not a hardcoded production host), egress floor active. On failure prints one named cause (file:line where knowable) + one concrete fix and exits non-zero."
   ).action(async () => {
-    const { runDoctorChecks } = await import('../../checks-34HBZTRP.js');
+    const { runDoctorChecks } = await import('../../checks-YI7MUJIE.js');
     const { renderDoctorReport } = await import('../../render-ZQQ4UMNO.js');
     const report = await runDoctorChecks();
     for (const line of renderDoctorReport(report, { passNote: true })) console.error(line);
@@ -5361,7 +5361,7 @@ function createProgram() {
   ).description(
     "Start a standalone twin as a long-lived foreground server (Ctrl-C to stop)"
   ).action(async (name, options) => {
-    const { runTwinStartCommand } = await import('../../twinStart-2N5WGHH4.js');
+    const { runTwinStartCommand } = await import('../../twinStart-DR3NHOYR.js');
     await runTwinStartCommand(name, options);
   });
   twin.command("reset").argument("[name]", "Twin name (default: github)", "github").description("Reset standalone twin state").action(async (name) => {

package/dist/{src-XBWNIRBG.js → src-VKYIOI2P.js}

@@ -1,6 +1,6 @@
 import './chunk-FKZZWWYC.js';
-import { defaultSeedState, parseSeed } from './chunk-KIUIKAVU.js';
-export { defaultSeedState, parseSeed, seedSchema } from './chunk-KIUIKAVU.js';
+import { defaultSeedState, parseSeed } from './chunk-B22TYIEM.js';
+export { defaultSeedState, parseSeed, seedSchema } from './chunk-B22TYIEM.js';
 import { routeInputDeclarer, integerInput, mountDeclaredRoute, UndeclaredInputError, MalformedBodyError } from './chunk-2Q3P45LK.js';
 import { loadMcpToolFixture, defineTwin, twinBuildInfo, deriveMcpToolTable, UnknownToolError, openTwinDatabase, createApp } from './chunk-OW7VVW6X.js';
 import './chunk-VBATFCWR.js';
@@ -2260,6 +2260,12 @@ CREATE TABLE IF NOT EXISTS pull_request_files (
   raw_url TEXT NOT NULL DEFAULT '',
   contents_url TEXT NOT NULL DEFAULT '',
   patch TEXT NOT NULL DEFAULT '',
+  -- F-1500 \u2014 the pre-rename path, NULL on every status but 'renamed'. Nullable
+  -- rather than DEFAULT '': the serializer reads presence off the status, and
+  -- an empty string here would be indistinguishable from a rename whose source
+  -- path the diff failed to resolve. (No backticks in this literal: it is a
+  -- template string, and one would close it.)
+  previous_filename TEXT,
   PRIMARY KEY (repo_id, pull_number, filename),
   FOREIGN KEY (repo_id, pull_number) REFERENCES pull_requests(repo_id, number) ON DELETE CASCADE
 );
@@ -2353,6 +2359,7 @@ function migrate(db) {
   ensureColumn(db, "pull_request_review_comments", "in_reply_to_id", "INTEGER");
   ensureColumn(db, "collaborators", "invitation_state", "TEXT NOT NULL DEFAULT 'accepted'");
   ensureColumn(db, "releases", "updated_at", "TEXT NOT NULL DEFAULT ''");
+  ensureColumn(db, "pull_request_files", "previous_filename", "TEXT");
   ensureIssueNumberCascade(db);
   ensureCommentsAllowPullRequests(db);
   hydrateDerivedColumns(db);
@@ -2478,6 +2485,23 @@ function paginate(items, page = 1, perPage = 30) {
   const start = (safePage - 1) * safePerPage;
   return items.slice(start, start + safePerPage);
 }
+function detectRenames(removed, added) {
+  const byContent = /* @__PURE__ */ new Map();
+  for (const file of [...removed].sort((a, b) => a.path.localeCompare(b.path))) {
+    const paths = byContent.get(file.sha);
+    if (paths)
+      paths.push(file.path);
+    else
+      byContent.set(file.sha, [file.path]);
+  }
+  const renames = /* @__PURE__ */ new Map();
+  for (const file of [...added].sort((a, b) => a.path.localeCompare(b.path))) {
+    const source = byContent.get(file.sha)?.shift();
+    if (source !== void 0)
+      renames.set(file.path, source);
+  }
+  return renames;
+}
 function linesChanged(before, after) {
   if (before === void 0) {
     return { additions: after.split("\n").filter(Boolean).length || 1, deletions: 0 };
@@ -2849,7 +2873,15 @@ function pullRequestFileJson(file) {
     blob_url: file.blob_url,
     raw_url: file.raw_url,
     contents_url: file.contents_url,
-    patch: file.patch
+    patch: file.patch,
+    // F-1500 — GitHub sends `previous_filename` exactly when `status` is
+    // `"renamed"` and omits the KEY otherwise, so this is a conditional spread
+    // rather than a `null`: emitting `previous_filename: null` on an added file
+    // would trade a missing-field divergence for a type-changed one and have
+    // every file claim to know where it came from. `status` is what gates it,
+    // not the column being set, so a row that somehow carried a source path on
+    // another status cannot leak it onto the wire.
+    ...file.status === "renamed" && file.previous_filename ? { previous_filename: file.previous_filename } : {}
   };
 }
 function reviewJson(review, repo) {
@@ -4302,12 +4334,16 @@ var GitHubDomain = class {
         }
         this.createBranchInternal(repo, repo.default_branch, null);
         const files = repoSeed.files?.filter((file) => (file.branch ?? repo.default_branch) === repo.default_branch) ?? [];
+        const rootRename = files.find((file) => file.renamed_from !== void 0);
+        if (rootRename) {
+          conflict(`Seed sets renamed_from on ${rootRename.path} with no branch: the default branch is the initial commit, so there is no earlier tree to move out of`);
+        }
         this.commitFiles(repo, repo.default_branch, "Initial seed commit", files, "pome-agent");
         const nonDefaultBranches = new Set((repoSeed.files ?? []).map((file) => file.branch ?? repo.default_branch).filter((branch) => branch !== repo.default_branch));
         for (const branch of nonDefaultBranches) {
           this.createBranch({ owner: repo.owner, repo: repo.name, branch, from_branch: repo.default_branch });
           const branchFiles = repoSeed.files?.filter((file) => (file.branch ?? repo.default_branch) === branch) ?? [];
-          this.commitFiles(repo, branch, `Seed ${branch}`, branchFiles, "pome-agent");
+          this.commitFiles(repo, branch, `Seed ${branch}`, this.seedFileChanges(repo, branch, branchFiles), "pome-agent");
         }
         for (const issue of repoSeed.issues ?? []) {
           const legacyAssignee = issue.assignee;
@@ -4412,6 +4448,34 @@ var GitHubDomain = class {
       after: { repositories: this.summarizeRepositories() }
     });
   }
+  /**
+   * F-1500 — expand a branch's seeded file entries into the commit that produces
+   * them, turning each `renamed_from` into what a move actually is: the source
+   * path deleted and its content written at the new path, in ONE commit.
+   *
+   * The source content is read off the branch rather than taken from the seed, so
+   * a seeded move is an exact one by construction — the two blobs cannot drift
+   * apart, which is the condition `calculatePullFiles` pairs on. (`seedSchema`
+   * refuses a `renamed_from` entry that also names `content` for the same
+   * reason.) The branch was created from the default branch a line earlier, so
+   * the source path is the copy it inherited.
+   */
+  seedFileChanges(repo, branch, entries) {
+    const changes = [];
+    for (const entry2 of entries) {
+      if (entry2.renamed_from === void 0) {
+        changes.push({ path: entry2.path, content: entry2.content ?? "" });
+        continue;
+      }
+      const source = this.getFile(repo.id, branch, normalizePath(entry2.renamed_from));
+      if (!source) {
+        conflict(`Seed sets renamed_from to ${entry2.renamed_from} on branch ${branch}, which holds no such file: a move's source must exist on the branch it moves on`);
+      }
+      changes.push({ path: entry2.renamed_from, content: "", delete: true });
+      changes.push({ path: entry2.path, content: source.content });
+    }
+    return changes;
+  }
   /**
    * F-1421 — plant one conversation comment on an issue or a pull request.
    *
@@ -4810,7 +4874,14 @@ var GitHubDomain = class {
         blob_url: `https://github.com/${repo.full_name}/blob/${commit.sha}/${version.path}`,
         raw_url: `https://raw.githubusercontent.com/${repo.full_name}/${commit.sha}/${version.path}`,
         contents_url: `https://api.github.com/repos/${repo.full_name}/contents/${version.path}?ref=${commit.sha}`,
-        patch: `@@ ${version.path} @@`
+        patch: `@@ ${version.path} @@`,
+        // F-1500 detects moves on the PULL REQUEST's branch diff only. The
+        // commit and compare surfaces read `file_versions`, whose `status`
+        // column has no `renamed` member, so they report a move the way they
+        // always have — an add and a remove — and carry no pre-rename path.
+        // Widening them is a shape change on two more routes and belongs with
+        // whatever measures those routes, not here.
+        previous_filename: null
       };
     });
   }
@@ -4836,7 +4907,9 @@ var GitHubDomain = class {
         blob_url: `https://github.com/${repo.full_name}/blob/${head.sha}/${path}`,
         raw_url: `https://raw.githubusercontent.com/${repo.full_name}/${head.sha}/${path}`,
         contents_url: `https://api.github.com/repos/${repo.full_name}/contents/${path}?ref=${head.sha}`,
-        patch: `@@ ${path} @@`
+        patch: `@@ ${path} @@`,
+        // See `computeCommitFiles` — the compare surface is outside F-1500.
+        previous_filename: null
       });
     }
     return rows;
@@ -4936,25 +5009,35 @@ var GitHubDomain = class {
     const baseFiles = new Map(this.db.prepare("SELECT * FROM files WHERE repo_id = ? AND branch = ?").all(baseRepo.id, baseRef).map((file) => [file.path, file]));
     const headFiles = new Map(this.db.prepare("SELECT * FROM files WHERE repo_id = ? AND branch = ?").all(headRepo.id, headRef).map((file) => [file.path, file]));
     const paths = [.../* @__PURE__ */ new Set([...baseFiles.keys(), ...headFiles.keys()])].sort();
+    const renames = detectRenames(paths.filter((path) => baseFiles.has(path) && !headFiles.has(path)).map((path) => ({ path, sha: baseFiles.get(path).sha })), paths.filter((path) => headFiles.has(path) && !baseFiles.has(path)).map((path) => ({ path, sha: headFiles.get(path).sha })));
+    const movedFrom = new Set(renames.values());
     const rows = [];
     for (const path of paths) {
       const base = baseFiles.get(path);
       const head = headFiles.get(path);
       if (base?.sha === head?.sha)
         continue;
+      if (movedFrom.has(path))
+        continue;
+      const previousFilename = renames.get(path) ?? null;
       const diff = linesChanged(base?.content, head?.content ?? "");
       rows.push({
         repo_id: baseRepo.id,
         pull_number: 0,
         filename: path,
-        status: base && head ? "modified" : head ? "added" : "removed",
-        additions: diff.additions,
-        deletions: head ? diff.deletions : base?.content.split("\n").length ?? 0,
-        changes: diff.additions + diff.deletions,
+        status: previousFilename ? "renamed" : base && head ? "modified" : head ? "added" : "removed",
+        // A detected move is an EXACT one (identical blobs), so it touches no
+        // lines — which is what GitHub reports for it. `linesChanged` would call
+        // the whole file an addition, because from its path-by-path view the
+        // destination is a file that did not exist.
+        additions: previousFilename ? 0 : diff.additions,
+        deletions: previousFilename ? 0 : head ? diff.deletions : base?.content.split("\n").length ?? 0,
+        changes: previousFilename ? 0 : diff.additions + diff.deletions,
         blob_url: `https://github.com/${headRepo.full_name}/blob/${headRef}/${path}`,
         raw_url: `https://raw.githubusercontent.com/${headRepo.full_name}/${headRef}/${path}`,
         contents_url: `https://api.github.com/repos/${headRepo.full_name}/contents/${path}`,
-        patch: `@@ ${path} @@`
+        patch: `@@ ${path} @@`,
+        previous_filename: previousFilename
       });
     }
     return rows;
@@ -4962,7 +5045,7 @@ var GitHubDomain = class {
   replacePullFiles(repoId, pullNumber, files) {
     this.db.prepare("DELETE FROM pull_request_files WHERE repo_id = ? AND pull_number = ?").run(repoId, pullNumber);
     for (const file of files) {
-      this.db.prepare("INSERT INTO pull_request_files (repo_id, pull_number, filename, status, additions, deletions, changes, blob_url, raw_url, contents_url, patch) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)").run(repoId, pullNumber, file.filename, file.status, file.additions, file.deletions, file.changes, file.blob_url, file.raw_url, file.contents_url, file.patch);
+      this.db.prepare("INSERT INTO pull_request_files (repo_id, pull_number, filename, status, additions, deletions, changes, blob_url, raw_url, contents_url, patch, previous_filename) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)").run(repoId, pullNumber, file.filename, file.status, file.additions, file.deletions, file.changes, file.blob_url, file.raw_url, file.contents_url, file.patch, file.previous_filename);
     }
   }
   // F-1178 — the `stack` member of GitHub's `pull-request` / `pull-request-simple`

package/dist/twinHarness-HQL3WCWU.js

@@ -0,0 +1,5 @@
+export { UnsupportedTwinError, bootTwin } from './chunk-JGZFB6ZZ.js';
+export { STRIPE_LOCAL_ACCOUNT_ID } from './chunk-LA52VCI4.js';
+import './chunk-OW7VVW6X.js';
+import './chunk-VBATFCWR.js';
+import './chunk-SG6ZTIMT.js';

package/dist/{twinStart-2N5WGHH4.js → twinStart-DR3NHOYR.js}

@@ -1,5 +1,5 @@
-import { bootTwin } from './chunk-IA2EYQ3Q.js';
-import { isTwinName, TWIN_NAMES, defaultPortFor, TWIN_REGISTRY } from './chunk-PRK5EFUZ.js';
+import { bootTwin } from './chunk-JGZFB6ZZ.js';
+import { isTwinName, TWIN_NAMES, defaultPortFor, TWIN_REGISTRY } from './chunk-LA52VCI4.js';
 import './chunk-OW7VVW6X.js';
 import './chunk-VBATFCWR.js';
 import './chunk-SG6ZTIMT.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pome-sh/cli",
-  "version": "0.23.41",
+  "version": "0.23.43",
   "description": "Digital-twin testing for AI agents \u2014 run tasks against resettable local or hosted twins and record tool-call traces for evaluation on pome.sh.",
   "keywords": [
     "ai",

package/dist/twinHarness-CKDJQ6TF.js

@@ -1,5 +0,0 @@
-export { UnsupportedTwinError, bootTwin } from './chunk-IA2EYQ3Q.js';
-export { STRIPE_LOCAL_ACCOUNT_ID } from './chunk-PRK5EFUZ.js';
-import './chunk-OW7VVW6X.js';
-import './chunk-VBATFCWR.js';
-import './chunk-SG6ZTIMT.js';