@pome-sh/cli 0.26.0 → 0.26.2

package/README.md

@@ -131,7 +131,7 @@ there, rewriting that heading and the manifest in one commit, and
 `.github/workflows/release.yml` compares the local version against npm and
 publishes when they differ. `pome --version` reports the allocated value from a
 build-time constant, so a user can always tell whether their install carries a
-given fix. See [`RELEASING.md`](../RELEASING.md).
+given fix.
 
 ## License
 

package/dist/build-info.json

@@ -1,6 +1,6 @@
 {
   "package": "pome-sh",
-  "version": "0.26.0",
-  "git_sha": "7114944d7733b92bba51e8f1cef0e0f262d7af09",
-  "build_time": "2026-08-21T09:42:44.027Z"
+  "version": "0.26.2",
+  "git_sha": "bb4a96bd8c5d6f644624e5379c7843b0ec02d7a0",
+  "build_time": "2026-08-21T22:24:23.233Z"
 }

package/dist/{checks-NCNSHMND.js → checks-Z5MTHXAR.js}

@@ -183,7 +183,7 @@ async function checkTwinReachable(_configDir) {
   });
   let harness;
   try {
-    const { bootTwin } = await import('./twinHarness-H6SY773Z.js');
+    const { bootTwin } = await import('./twinHarness-DYAP5HKG.js');
     harness = await bootTwin({
       twin: "github",
       seedState: void 0,

package/dist/{chunk-UWMDE7LX.js → chunk-JGYNRD5T.js}

@@ -1,7 +1,7 @@
 import { getAvailablePort } from './chunk-XDU6TD4O.js';
 import { buildEgressAllowlist, readBlockedEgress } from './chunk-CBFKZZBR.js';
-import { parseTaskFile, seedStateForTwin, runAgentCommand, writeRunArtifactsCore } from './chunk-YUQWG57T.js';
-import { createRecorder, bootTwin } from './chunk-TJPGONWC.js';
+import { parseTaskFile, seedStateForTwin, runAgentCommand, writeRunArtifactsCore } from './chunk-T5CSXPYC.js';
+import { createRecorder, bootTwin } from './chunk-UXVJK7PY.js';
 import { eventSchema } from './chunk-VBATFCWR.js';
 import { redactSecrets, redactEvent } from './chunk-SG6ZTIMT.js';
 import { serve } from '@hono/node-server';

package/dist/{chunk-XXSZLN7I.js → chunk-K3GCCNF2.js}

@@ -39,7 +39,7 @@ var TWIN_REGISTRY = {
         defaultSeedState,
         GitHubDomain,
         openGitHubCloneDatabase
-      } = await import('./src-5OWSOCET.js');
+      } = await import('./src-MXILWGJE.js');
       const db = openGitHubCloneDatabase();
       const domain = new GitHubDomain(db);
       domain.seed(seedState === void 0 ? defaultSeedState() : seedState);
@@ -59,9 +59,9 @@ var TWIN_REGISTRY = {
     envName: "SLACK",
     defaultPort: 3333,
     version: package_default2.version,
-    defaultSeed: async () => (await import('./src-FZPIGBIO.js')).defaultSeedState(),
+    defaultSeed: async () => (await import('./src-57JSCWLJ.js')).defaultSeedState(),
     async boot({ seedState, runId, recorder }) {
-      const { createSlackTwinApp, openSlackTwinDatabase, SlackDomain } = await import('./src-FZPIGBIO.js');
+      const { createSlackTwinApp, openSlackTwinDatabase, SlackDomain } = await import('./src-57JSCWLJ.js');
       const db = openSlackTwinDatabase(":memory:");
       const domain = new SlackDomain(db);
       domain.applySeed(seedState);
@@ -84,10 +84,10 @@ var TWIN_REGISTRY = {
     envName: "STRIPE",
     defaultPort: 3333,
     version: package_default3.version,
-    defaultSeed: async () => (await import('./src-J3LKERPK.js')).defaultSeed(),
+    defaultSeed: async () => (await import('./src-RPI7XNUX.js')).defaultSeed(),
     async boot({ seedState, runId, recorder, twinBaseUrl }) {
-      const stripeTwin = await import('./src-J3LKERPK.js');
-      const { createApp } = await import('./server-AJUCP5KS.js');
+      const stripeTwin = await import('./src-RPI7XNUX.js');
+      const { createApp } = await import('./server-MDLVVVEM.js');
       const {
         applySeed: applyStripeSeed,
         createTwinStripeApp,
@@ -128,9 +128,9 @@ var TWIN_REGISTRY = {
     portEnvName: "GMAIL_TWIN_PORT",
     tokenEnvName: "POME_GMAIL_TOKEN",
     version: package_default4.version,
-    defaultSeed: async () => (await import('./src-NKGQXT7H.js')).defaultSeedState(),
+    defaultSeed: async () => (await import('./src-7D2PU4R4.js')).defaultSeedState(),
     async boot({ seedState, runId, recorder }) {
-      const { createGmailTwinApp, GmailDomain, openGmailTwinDatabase, parseSeed } = await import('./src-NKGQXT7H.js');
+      const { createGmailTwinApp, GmailDomain, openGmailTwinDatabase, parseSeed } = await import('./src-7D2PU4R4.js');
       const db = openGmailTwinDatabase(":memory:");
       const seed = parseSeed(seedState);
       const domain = new GmailDomain(db);
@@ -149,7 +149,7 @@ var TWIN_REGISTRY = {
     portEnvName: "LINEAR_TWIN_PORT",
     tokenEnvName: "POME_LINEAR_TOKEN",
     version: package_default5.version,
-    defaultSeed: async () => (await import('./src-LE3GXOQL.js')).defaultSeedState(),
+    defaultSeed: async () => (await import('./src-EIBJVLC4.js')).defaultSeedState(),
     async boot({ seedState, runId, recorder }) {
       const {
         createLinearTwinApp,
@@ -157,7 +157,7 @@ var TWIN_REGISTRY = {
         LinearDomain,
         openLinearTwinDatabase,
         parseSeed
-      } = await import('./src-LE3GXOQL.js');
+      } = await import('./src-EIBJVLC4.js');
       const db = openLinearTwinDatabase(":memory:");
       const seed = parseSeed(seedState);
       const domain = new LinearDomain(db);
@@ -173,7 +173,7 @@ var TWIN_REGISTRY = {
   }
 };
 async function createGitHubSmokeApp() {
-  const { createGitHubCloneApp } = await import('./src-5OWSOCET.js');
+  const { createGitHubCloneApp } = await import('./src-MXILWGJE.js');
   return createGitHubCloneApp();
 }
 function defaultPortFor(twin, env = process.env) {

package/dist/{chunk-YUQWG57T.js → chunk-T5CSXPYC.js}

@@ -2,8 +2,8 @@ import { criterionSchema, finalizeResponseSchema, HostedDiscardRefusedError, Hos
 import { seedSchema, parseSeed, defaultSeedState as defaultSeedState$2 } from './chunk-B22TYIEM.js';
 import { gmailSeedSchema, defaultSeedState } from './chunk-NJ246QPJ.js';
 import { linearSeedSchema, defaultSeedState as defaultSeedState$1 } from './chunk-IZIZC7ZW.js';
-import { isTwinName, TWIN_REGISTRY } from './chunk-XXSZLN7I.js';
-import { toTwinHttpEventRow } from './chunk-5EGHN6H4.js';
+import { isTwinName, TWIN_REGISTRY } from './chunk-K3GCCNF2.js';
+import { toTwinHttpEventRow } from './chunk-WEKJIGUD.js';
 import { redactEvent, redactSecrets } from './chunk-SG6ZTIMT.js';
 import { mkdir, appendFile, writeFile, readFile } from 'node:fs/promises';
 import { existsSync } from 'node:fs';

package/dist/{chunk-TJPGONWC.js → chunk-UXVJK7PY.js}

@@ -1,5 +1,5 @@
-import { TWIN_NAMES, isTwinName, TWIN_REGISTRY } from './chunk-XXSZLN7I.js';
-import { createFileBackedRecorderStore, createRecorderStore } from './chunk-5EGHN6H4.js';
+import { TWIN_NAMES, isTwinName, TWIN_REGISTRY } from './chunk-K3GCCNF2.js';
+import { createFileBackedRecorderStore, createRecorderStore } from './chunk-WEKJIGUD.js';
 
 // src/recorder/recorder.ts
 function createRecorder(options = {}) {

package/dist/{chunk-5EGHN6H4.js → chunk-WEKJIGUD.js}

@@ -325,6 +325,33 @@ function deriveMcpToolTable(fixture, implementations, options = {}) {
 function issues(error) {
   return error.issues.map((issue) => `${issue.path.join(".") || "<root>"}: ${issue.message}`).join("; ");
 }
+function describeSchemaType(spec) {
+  if (!spec || typeof spec !== "object")
+    return void 0;
+  const schema = spec;
+  const name = (raw) => typeof raw !== "string" ? void 0 : raw === "integer" ? "number" : raw;
+  const type = name(schema.type);
+  if (!type)
+    return void 0;
+  if (type !== "array")
+    return type;
+  const items = schema.items && typeof schema.items === "object" ? schema.items : void 0;
+  const element = name(items?.type);
+  return element ? `array<${element}>` : "array";
+}
+function typeDisagreements(toolName, vendor, upstreamProperties, projectedProperties) {
+  const problems = [];
+  for (const key of Object.keys(projectedProperties)) {
+    if (!(key in upstreamProperties))
+      continue;
+    const theirs = describeSchemaType(upstreamProperties[key]);
+    const ours = describeSchemaType(projectedProperties[key]);
+    if (theirs && ours && theirs !== ours) {
+      problems.push(`'${toolName}' validates '${key}' as ${ours}, and ${vendor} declares it as ${theirs}`);
+    }
+  }
+  return problems;
+}
 
 // ../packages/sdk/dist/index.js
 var fidelityTierSchema = z.enum(["semantic", "shape", "unsupported"]);
@@ -1744,4 +1771,4 @@ function unregisterServeShutdown(close) {
   serveShutdownHooks.delete(close);
 }
 
-export { FAILURE_INJECTION_OVERRIDE_KEY, POME_RECORDER_EVENTS_PATH, PROVIDER_SHAPED_TEAM_ID, TwinBootError, TwinError, UnknownToolError, bearerAuth, createAdminGate, createApp, createFailureInjectionStore, createFileBackedRecorderStore, createRecorderHandle, createRecorderStore, created, defineTwin, deriveMcpToolTable, ensureTwinAuthSecret, failureInjectionMiddleware, failureInjectionRuleSchema, formTokenResolver, isLoopbackHost, loadMcpToolFixture, mintProviderToken, ok, openTwinDatabase, queryTokenResolver, recordedRequestHeaders, requireAdminAuth, resolveAuthSecret, resolveRecorderStore, serve, setClientIp, setRecordedTool, toTwinHttpEventRow, twinBuildInfo, verifyProviderToken };
+export { FAILURE_INJECTION_OVERRIDE_KEY, POME_RECORDER_EVENTS_PATH, PROVIDER_SHAPED_TEAM_ID, TwinBootError, TwinError, UnknownToolError, bearerAuth, createAdminGate, createApp, createFailureInjectionStore, createFileBackedRecorderStore, createRecorderHandle, createRecorderStore, created, defineTwin, deriveMcpToolTable, ensureTwinAuthSecret, failureInjectionMiddleware, failureInjectionRuleSchema, formTokenResolver, isLoopbackHost, loadMcpToolFixture, mintProviderToken, ok, openTwinDatabase, queryTokenResolver, recordedRequestHeaders, requireAdminAuth, resolveAuthSecret, resolveRecorderStore, serve, setClientIp, setRecordedTool, toTwinHttpEventRow, twinBuildInfo, typeDisagreements, verifyProviderToken };

package/dist/{chunk-IZ2GFNAJ.js → chunk-XKHPVCY2.js}

@@ -1,5 +1,5 @@
 import { readManifest, normalizeManifestTwins } from './chunk-LA6BHJ5H.js';
-import { createHostedClient, perTwinReturnedByCloud, parseTaskFile, runAgentCommand, writeRunArtifactsCore, toTwinHttpEvent, redactJsonl, uploadRunBlobs, scoreFromFinalizeResponse, scoreStatus, evaluationCounts } from './chunk-YUQWG57T.js';
+import { createHostedClient, perTwinReturnedByCloud, parseTaskFile, runAgentCommand, writeRunArtifactsCore, toTwinHttpEvent, redactJsonl, uploadRunBlobs, scoreFromFinalizeResponse, scoreStatus, evaluationCounts } from './chunk-T5CSXPYC.js';
 import { MOUNTED_TWINS, HostedAuthError, HostedDiscardRefusedError, HostedQuotaError, HostedOrchError, HostedTrialError, agentResponseSchema } from './chunk-QYCUNR2V.js';
 import { redactSecrets, redactEvent } from './chunk-SG6ZTIMT.js';
 import { randomUUID, createHash } from 'node:crypto';

package/dist/{runDemo-UST3X3OB.js → runDemo-VGD564FP.js}

@@ -1,17 +1,17 @@
 import { newGroupId, reassuranceBox, twinReadyLine, trialsHeaderLine, trialLine, summaryLines, evaluatingLine, criterionPhrase } from './chunk-RGZBC7NF.js';
 import { DemoCapacityError, capacityLabel, parseCapacityMarker, capacityKindFrom } from './chunk-ZX4WNSZ5.js';
-import { runTask, demoTaskPath, DEMO_TASK_NAME, DEMO_REPO } from './chunk-UWMDE7LX.js';
+import { runTask, demoTaskPath, DEMO_TASK_NAME, DEMO_REPO } from './chunk-JGYNRD5T.js';
 import { getAvailablePort } from './chunk-XDU6TD4O.js';
 import './chunk-CBFKZZBR.js';
-import { createHostedClient, parseTaskFile, uploadRunBlobs, scoreFromFinalizeResponse, scoreStatus, outcomeOf } from './chunk-YUQWG57T.js';
+import { createHostedClient, parseTaskFile, uploadRunBlobs, scoreFromFinalizeResponse, scoreStatus, outcomeOf } from './chunk-T5CSXPYC.js';
 import './chunk-NW7HGA2K.js';
 import { HostedQuotaError, HostedOrchError } from './chunk-QYCUNR2V.js';
 import './chunk-B22TYIEM.js';
 import './chunk-NJ246QPJ.js';
 import './chunk-IZIZC7ZW.js';
-import { bootTwin } from './chunk-TJPGONWC.js';
-import './chunk-XXSZLN7I.js';
-import './chunk-5EGHN6H4.js';
+import { bootTwin } from './chunk-UXVJK7PY.js';
+import './chunk-K3GCCNF2.js';
+import './chunk-WEKJIGUD.js';
 import './chunk-VBATFCWR.js';
 import './chunk-SG6ZTIMT.js';
 import { readFile } from 'node:fs/promises';

package/dist/{runTrialGroup-FOO6F3A7.js → runTrialGroup-M3UUDGPI.js}

@@ -1,14 +1,14 @@
 import { newGroupId, criterionPhrase } from './chunk-RGZBC7NF.js';
-import { runTaskHosted, resolveRunAgentIdentity } from './chunk-IZ2GFNAJ.js';
+import { runTaskHosted, resolveRunAgentIdentity } from './chunk-XKHPVCY2.js';
 import './chunk-LA6BHJ5H.js';
-import { createHostedClient, parseTaskFile, outcomeOf } from './chunk-YUQWG57T.js';
+import { createHostedClient, parseTaskFile, outcomeOf } from './chunk-T5CSXPYC.js';
 import './chunk-NW7HGA2K.js';
 import { HostedQuotaError, HostedTrialError } from './chunk-QYCUNR2V.js';
 import './chunk-B22TYIEM.js';
 import './chunk-NJ246QPJ.js';
 import './chunk-IZIZC7ZW.js';
-import './chunk-XXSZLN7I.js';
-import './chunk-5EGHN6H4.js';
+import './chunk-K3GCCNF2.js';
+import './chunk-WEKJIGUD.js';
 import './chunk-VBATFCWR.js';
 import './chunk-SG6ZTIMT.js';
 import { randomUUID } from 'node:crypto';

package/dist/{server-AJUCP5KS.js → server-MDLVVVEM.js}

@@ -1,3 +1,3 @@
-export { FAILURE_INJECTION_OVERRIDE_KEY, POME_RECORDER_EVENTS_PATH, PROVIDER_SHAPED_TEAM_ID, TwinBootError, TwinError, UnknownToolError, bearerAuth, createAdminGate, createApp, createFailureInjectionStore, createFileBackedRecorderStore, createRecorderHandle, createRecorderStore, created, ensureTwinAuthSecret, failureInjectionMiddleware, failureInjectionRuleSchema, formTokenResolver, isLoopbackHost, mintProviderToken, ok, queryTokenResolver, recordedRequestHeaders, requireAdminAuth, resolveAuthSecret, resolveRecorderStore, serve, setClientIp, setRecordedTool, toTwinHttpEventRow, twinBuildInfo, verifyProviderToken } from './chunk-5EGHN6H4.js';
+export { FAILURE_INJECTION_OVERRIDE_KEY, POME_RECORDER_EVENTS_PATH, PROVIDER_SHAPED_TEAM_ID, TwinBootError, TwinError, UnknownToolError, bearerAuth, createAdminGate, createApp, createFailureInjectionStore, createFileBackedRecorderStore, createRecorderHandle, createRecorderStore, created, ensureTwinAuthSecret, failureInjectionMiddleware, failureInjectionRuleSchema, formTokenResolver, isLoopbackHost, mintProviderToken, ok, queryTokenResolver, recordedRequestHeaders, requireAdminAuth, resolveAuthSecret, resolveRecorderStore, serve, setClientIp, setRecordedTool, toTwinHttpEventRow, twinBuildInfo, verifyProviderToken } from './chunk-WEKJIGUD.js';
 import './chunk-VBATFCWR.js';
 export { redactEvent, redactSecrets } from './chunk-SG6ZTIMT.js';

package/dist/src/cli/main.js

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
-import { DEFAULT_CONTROL_PLANE_URL, DEFAULT_DASHBOARD_URL, clearLocalCredentials, friendlyHostedError, runSessionCreate, runSessionList, runSessionStop, resolveCredentials, runTaskHosted, discoverRunSet, VERDICT_ARTIFACT_VERSION, persistCredentialsAfterLogin, DEFAULT_DOCS_SITE_ORIGIN, resolveSeams, resolveCachedAgentId, readLinkCache, postAgentResolver, writeLinkCache, ensurePomeGitignored } from '../../chunk-IZ2GFNAJ.js';
+import { DEFAULT_CONTROL_PLANE_URL, DEFAULT_DASHBOARD_URL, clearLocalCredentials, friendlyHostedError, runSessionCreate, runSessionList, runSessionStop, resolveCredentials, runTaskHosted, discoverRunSet, VERDICT_ARTIFACT_VERSION, persistCredentialsAfterLogin, DEFAULT_DOCS_SITE_ORIGIN, resolveSeams, resolveCachedAgentId, readLinkCache, postAgentResolver, writeLinkCache, ensurePomeGitignored } from '../../chunk-XKHPVCY2.js';
 import { readManifest, writeManifest, MANIFEST_JSON, readRequiredManifest, normalizeManifestTwins } from '../../chunk-LA6BHJ5H.js';
-import { assetPath, runTask, resolvePackageRoot, DEMO_TASK_NAME, demoTaskPath } from '../../chunk-UWMDE7LX.js';
+import { assetPath, runTask, resolvePackageRoot, DEMO_TASK_NAME, demoTaskPath } from '../../chunk-JGYNRD5T.js';
 import '../../chunk-XDU6TD4O.js';
 import '../../chunk-CBFKZZBR.js';
-import { parseTaskFile, scoreStatus, runScoreLine, readLatestRun, readMetaSummary, outcomeOf, readConfigTwins, scoreCountsSummary, markerFor, criterionMarkerLabel, twinSkipSuffix, readCodeCriteria, createHostedClient, toTwinHttpEvent, redactJsonl, scoreFromFinalizeResponse, parseGitHubSeedState, uploadRunBlobs, isPreSatisfied } from '../../chunk-YUQWG57T.js';
+import { parseTaskFile, scoreStatus, runScoreLine, readLatestRun, readMetaSummary, outcomeOf, readConfigTwins, scoreCountsSummary, markerFor, criterionMarkerLabel, twinSkipSuffix, readCodeCriteria, createHostedClient, toTwinHttpEvent, redactJsonl, scoreFromFinalizeResponse, parseGitHubSeedState, uploadRunBlobs, isPreSatisfied } from '../../chunk-T5CSXPYC.js';
 import '../../chunk-NW7HGA2K.js';
 import { MOUNTED_TWINS, deriveAgentSlug, exitCodeFor, HostedUsageError, HostedOrchError, HostedAuthError, HostedQuotaError } from '../../chunk-QYCUNR2V.js';
 import { TAPE_ASSERTABLE_TOOLS } from '../../chunk-C4BVTUA3.js';
@@ -15,9 +15,9 @@ import '../../chunk-NJ246QPJ.js';
 import { LINEAR_CHECKS } from '../../chunk-XBT6ZLBG.js';
 import '../../chunk-IZIZC7ZW.js';
 import { oneOf, defineCheck, repoRef, VACUITY_SENTINEL_NUMBER, childStatePath, VACUITY_SENTINEL, statePath, templateSlots, renderCheck, checksDigest, checkPattern, checkNearMissPattern } from '../../chunk-JWJYNAWI.js';
-import '../../chunk-TJPGONWC.js';
-import { TWIN_NAME_LIST, isTwinName, createGitHubSmokeApp } from '../../chunk-XXSZLN7I.js';
-import '../../chunk-5EGHN6H4.js';
+import '../../chunk-UXVJK7PY.js';
+import { TWIN_NAME_LIST, isTwinName, createGitHubSmokeApp } from '../../chunk-K3GCCNF2.js';
+import '../../chunk-WEKJIGUD.js';
 import { isLegacyEventRow, eventSchema } from '../../chunk-VBATFCWR.js';
 import { redactEvent, redactSecrets } from '../../chunk-SG6ZTIMT.js';
 import { Command } from 'commander';
@@ -850,7 +850,7 @@ async function throwForStatus(res) {
 
 // src/task/seed-verifier.ts
 async function verifySeedWithTwin(seed) {
-  const { GitHubDomain, openGitHubCloneDatabase } = await import('../../src-5OWSOCET.js');
+  const { GitHubDomain, openGitHubCloneDatabase } = await import('../../src-MXILWGJE.js');
   const db = openGitHubCloneDatabase(":memory:");
   try {
     new GitHubDomain(db).seed(seed);
@@ -4651,7 +4651,7 @@ var DEFAULT_AGENT_COMMAND = `node ${DEFAULT_AGENT_FILE}`;
 var MANIFEST_SCHEMA_URL = "https://pome.sh/schemas/v1/pome.json";
 var MAX_UNREADABLE_PATHS_SHOWN = 5;
 function readPackageVersion() {
-  if ("0.26.0".length > 0) return "0.26.0";
+  if ("0.26.2".length > 0) return "0.26.2";
   try {
     const here = dirname(fileURLToPath(import.meta.url));
     const candidates = [
@@ -5096,7 +5096,7 @@ function createProgram() {
         return;
       }
       {
-        const { runDoctorChecks } = await import('../../checks-NCNSHMND.js');
+        const { runDoctorChecks } = await import('../../checks-Z5MTHXAR.js');
         const { renderDoctorReport } = await import('../../render-ZQQ4UMNO.js');
         const doctorReport = await runDoctorChecks({ mode: useLocal ? "full" : "hosted" });
         if (!doctorReport.ok) {
@@ -5134,7 +5134,7 @@ function createProgram() {
               taskForRuns.config.runs
             );
             if (k > 1) {
-              const { runTrialGroup } = await import('../../runTrialGroup-FOO6F3A7.js');
+              const { runTrialGroup } = await import('../../runTrialGroup-M3UUDGPI.js');
               const fileForRerun = relative(process.cwd(), file);
               const rerunCommand = defaultTask ? options.trials !== void 0 ? `pome run -n ${k}` : "pome run" : `pome run ${fileForRerun && !fileForRerun.startsWith("..") ? fileForRerun : file} -n ${k}`;
               const groupResult = await runTrialGroup({
@@ -5228,7 +5228,7 @@ function createProgram() {
         process.exitCode = 5;
         return;
       }
-      const { runDemo } = await import('../../runDemo-UST3X3OB.js');
+      const { runDemo } = await import('../../runDemo-VGD564FP.js');
       const result = await runDemo({
         apiBase: opts.apiUrl.replace(/\/$/, ""),
         dashboardBase: process.env.POME_DASHBOARD_URL ?? DEFAULT_DASHBOARD_URL,
@@ -5246,7 +5246,7 @@ function createProgram() {
   program.command("doctor").description(
     "Check the agent\u2194twin wiring: pome.json (or pome.yaml) present + valid, the local twin boots + serves, requests routed to the twin (not a hardcoded production host), egress floor active. On failure prints one named cause (file:line where knowable) + one concrete fix and exits non-zero."
   ).action(async () => {
-    const { runDoctorChecks } = await import('../../checks-NCNSHMND.js');
+    const { runDoctorChecks } = await import('../../checks-Z5MTHXAR.js');
     const { renderDoctorReport } = await import('../../render-ZQQ4UMNO.js');
     const report = await runDoctorChecks();
     for (const line of renderDoctorReport(report, { passNote: true })) console.error(line);
@@ -5422,7 +5422,7 @@ function createProgram() {
   ).description(
     "Start a standalone twin as a long-lived foreground server (Ctrl-C to stop)"
   ).action(async (name, options) => {
-    const { runTwinStartCommand } = await import('../../twinStart-IGPEXS7E.js');
+    const { runTwinStartCommand } = await import('../../twinStart-BYWIDQLI.js');
     await runTwinStartCommand(name, options);
   });
   twin.command("reset").argument("[name]", "Twin name (default: github)", "github").description("Reset standalone twin state").action(async (name) => {

package/dist/{src-FZPIGBIO.js → src-57JSCWLJ.js}

@@ -1,7 +1,7 @@
 export { SLACK_CHECKS } from './chunk-IDNSKKEC.js';
 import './chunk-JWJYNAWI.js';
 import { routeInputDeclarer, booleanInput, integerInput, mountDeclaredRoute, UndeclaredInputError } from './chunk-2Q3P45LK.js';
-import { loadMcpToolFixture, defineTwin, queryTokenResolver, formTokenResolver, deriveMcpToolTable, UnknownToolError, openTwinDatabase, createApp } from './chunk-5EGHN6H4.js';
+import { loadMcpToolFixture, defineTwin, queryTokenResolver, formTokenResolver, deriveMcpToolTable, UnknownToolError, openTwinDatabase, createApp, typeDisagreements } from './chunk-WEKJIGUD.js';
 import './chunk-VBATFCWR.js';
 import './chunk-SG6ZTIMT.js';
 import { z, ZodError } from 'zod';
@@ -3324,6 +3324,7 @@ function toolSchemaConformance() {
         problems.push(`'${tool.name}' does not model Slack's parameter '${key}'`);
       }
     }
+    problems.push(...typeDisagreements(tool.name, "Slack", upstream.properties ?? {}, projected.properties ?? {}));
     const upstreamRequired = [...upstream.required ?? []].sort().join(",");
     const ourRequired = [...projected.required ?? []].sort().join(",");
     if (upstreamRequired !== ourRequired) {

package/dist/{src-NKGQXT7H.js → src-7D2PU4R4.js}

@@ -3,7 +3,7 @@ import { gmailErrorEnvelope, gmailSeedSchema, parseSeed, defaultSeedState, notFo
 export { DEFAULT_GMAIL_AGENT_EMAIL, GmailError, SEARCH_MAILBOX_MESSAGE_BUDGET, agentPathInboxMailbox, defaultSeedState, gmailErrorEnvelope, gmailSeedSchema, loadSeedFromEnv, parseSearchQuery, parseSeed, validateSearchQuery } from './chunk-NJ246QPJ.js';
 import './chunk-JWJYNAWI.js';
 import { routeInputDeclarer, integerInput, booleanInput, repeatedInput, mountDeclaredRoute, UndeclaredInputError, MalformedBodyError } from './chunk-2Q3P45LK.js';
-import { loadMcpToolFixture, deriveMcpToolTable, defineTwin, openTwinDatabase, createApp } from './chunk-5EGHN6H4.js';
+import { loadMcpToolFixture, deriveMcpToolTable, defineTwin, openTwinDatabase, createApp } from './chunk-WEKJIGUD.js';
 import './chunk-VBATFCWR.js';
 import './chunk-SG6ZTIMT.js';
 import { createHash, createHmac, timingSafeEqual, randomBytes } from 'node:crypto';

package/dist/{src-LE3GXOQL.js → src-EIBJVLC4.js}

@@ -3,7 +3,7 @@ import { MCP_PAGE_MAX, defaultSeedState, linearSeedSchema, notFound, badUserInpu
 export { DEFAULT_LINEAR_CLOCK, DEFAULT_LINEAR_EMAIL, DEFAULT_LINEAR_PORT, DEFAULT_LINEAR_SID, DEFAULT_LINEAR_TOKEN, LINEAR_PROVIDER_TOKEN_PREFIX, LinearTwinError, STATE_EXPORT_CAP, assertWebhookUrl, defaultSeedState, linearErrorEnvelope, linearSeedSchema, loadSeedFromEnv, parseSeed, unauthorizedEnvelope, unsupportedEnvelope, webhookUrlError } from './chunk-IZIZC7ZW.js';
 import './chunk-JWJYNAWI.js';
 import { routeInputDeclarer, mountDeclaredRoute, UndeclaredInputError } from './chunk-2Q3P45LK.js';
-import { loadMcpToolFixture, deriveMcpToolTable, openTwinDatabase, defineTwin, createApp } from './chunk-5EGHN6H4.js';
+import { loadMcpToolFixture, deriveMcpToolTable, openTwinDatabase, defineTwin, createApp } from './chunk-WEKJIGUD.js';
 import './chunk-VBATFCWR.js';
 import './chunk-SG6ZTIMT.js';
 import { createHmac, timingSafeEqual, createHash, randomBytes } from 'node:crypto';

package/dist/{src-5OWSOCET.js → src-MXILWGJE.js}

@@ -2,7 +2,7 @@ import './chunk-C4BVTUA3.js';
 import { defaultSeedState, parseSeed } from './chunk-B22TYIEM.js';
 export { defaultSeedState, parseSeed, seedSchema } from './chunk-B22TYIEM.js';
 import { routeInputDeclarer, integerInput, mountDeclaredRoute, UndeclaredInputError, MalformedBodyError } from './chunk-2Q3P45LK.js';
-import { loadMcpToolFixture, defineTwin, twinBuildInfo, deriveMcpToolTable, UnknownToolError, openTwinDatabase, createApp } from './chunk-5EGHN6H4.js';
+import { loadMcpToolFixture, defineTwin, twinBuildInfo, deriveMcpToolTable, UnknownToolError, openTwinDatabase, createApp, typeDisagreements } from './chunk-WEKJIGUD.js';
 import './chunk-VBATFCWR.js';
 import './chunk-SG6ZTIMT.js';
 import { z, ZodError } from 'zod';
@@ -1453,6 +1453,10 @@ function normalizeIssueState(input) {
 function normalizeCommentId(input) {
   return { ...input, comment_id: input.comment_id ?? input.commentId };
 }
+function normalizeIssueLabels(input) {
+  const names = input.labels;
+  return { ...input, labels: names === void 0 ? void 0 : { names, match: "any" } };
+}
 var toolArgumentSchemas = [
   {
     name: "search_repositories",
@@ -1539,7 +1543,14 @@ var toolArgumentSchemas = [
   },
   {
     name: "list_issues",
-    schema: z.object({ ...ownerRepo, state: z.enum(["OPEN", "CLOSED"]).optional(), labels: z.string().optional(), assignee: z.string().optional(), ...pageShape })
+    // `labels` is an ARRAY here and a CSV string on the REST door, and that is
+    // the vendor's own split rather than an inconsistency — see `LabelFilter` in
+    // `domain/issues.ts`. The string spelling is REFUSED on purpose: GitHub's MCP
+    // server answers `parameter labels could not be coerced to []string, is
+    // string` (`pkg/github/params.go`'s `OptionalStringArrayParam`, confirmed
+    // against the deployed server), so accepting it here would score a call the
+    // vendor rejects.
+    schema: z.object({ ...ownerRepo, state: z.enum(["OPEN", "CLOSED"]).optional(), labels: z.array(z.string()).optional(), assignee: z.string().optional(), ...pageShape })
   },
   {
     name: "add_issue_comment",
@@ -1761,7 +1772,7 @@ function dispatchTool(domain, name, parsed, onDelta, options = {}) {
     case "search_issues":
       return domain.searchIssues(parsed);
     case "list_issues":
-      return domain.listIssues(normalizeIssueState(parsed));
+      return domain.listIssues(normalizeIssueLabels(normalizeIssueState(parsed)));
     case "add_issue_comment":
       return domain.addIssueComment(normalizeIssueNumber(parsed), onDelta);
     case "create_issue":
@@ -3519,17 +3530,24 @@ function createIssue(domain, input, onDelta) {
   onDelta?.({ before: null, after: issueState(issue, repo, labels, assignees) });
   return issueJson(issue, repo, domain.listIssueLabels(repo.id, issue.number), domain.listIssueAssignees(repo.id, issue.number), domain.issueCommentCount(repo.id, issue.number));
 }
+function labelFilter(labels) {
+  if (labels === void 0)
+    return void 0;
+  const raw = typeof labels === "string" ? { names: labels.split(","), match: "all" } : labels;
+  const names = raw.names.map((name) => name.trim().toLowerCase()).filter(Boolean);
+  return names.length ? { names, match: raw.match } : void 0;
+}
 function listIssues(domain, input) {
   const repo = domain.requireRepo(input.owner, input.repo);
   let rows = domain.listIssuesRows(repo.id);
   const state = input.state ?? "open";
   if (state !== "all")
     rows = rows.filter((issue) => issue.state === state);
-  if (input.labels) {
-    const wanted = input.labels.split(",").map((label) => label.trim()).filter(Boolean);
+  const wanted = labelFilter(input.labels);
+  if (wanted) {
     rows = rows.filter((issue) => {
-      const names = domain.listIssueLabels(repo.id, issue.number).map((label) => label.name);
-      return wanted.every((label) => names.includes(label));
+      const names = domain.listIssueLabels(repo.id, issue.number).map((label) => label.name.toLowerCase());
+      return wanted.match === "all" ? wanted.names.every((label) => names.includes(label)) : wanted.names.some((label) => names.includes(label));
     });
   }
   if (input.assignee)
@@ -4212,11 +4230,22 @@ function addCollaboratorAction(domain, input, onDelta) {
 }
 
 // ../packages/twin-github/dist/src/domain/search.js
-var QUALIFIER = /(^|\s)(repo|user|org|state):(\S+)/gi;
+var QUALIFIER = /(^|\s)(repo|user|org|state|is):(\S+)/gi;
+function tokenise(text) {
+  return text.toLowerCase().split(/[^a-z0-9_]+/).filter(Boolean);
+}
+function matchesTerms(terms, ...document) {
+  if (terms.length === 0)
+    return true;
+  const tokens = new Set(tokenise(document.join(" ")));
+  return terms.every((term) => tokens.has(term));
+}
 function parseSearchQuery(raw, options = {}) {
   const owners = [];
   const fullNames = [];
   let state;
+  let type;
+  let unhonourable = false;
   const text = raw.replace(QUALIFIER, (whole, lead, key, rawValue) => {
     const value = rawValue.toLowerCase();
     switch (key.toLowerCase()) {
@@ -4234,11 +4263,28 @@ function parseSearchQuery(raw, options = {}) {
           return whole;
         state = value;
         return lead;
+      case "is":
+        if (!options.is)
+          return whole;
+        switch (value) {
+          case "open":
+          case "closed":
+            state = value;
+            return lead;
+          case "issue":
+          case "pr":
+            type = value;
+            return lead;
+          default:
+            unhonourable = true;
+            return lead;
+        }
       default:
         return whole;
     }
   });
-  return { text: text.replace(/\s+/g, " ").trim().toLowerCase(), owners, fullNames, state };
+  const normalized = text.replace(/\s+/g, " ").trim().toLowerCase();
+  return { text: normalized, terms: tokenise(normalized), owners, fullNames, state, type, unhonourable };
 }
 function inScope(parsed, owner, fullName) {
   if (parsed.owners.length === 0 && parsed.fullNames.length === 0)
@@ -4305,9 +4351,9 @@ function searchCommits(domain, input) {
   };
 }
 function searchIssues(domain, input) {
-  const parsed = parseSearchQuery(input.query ?? input.q ?? "", { state: true });
+  const parsed = parseSearchQuery(input.query ?? input.q ?? "", { state: true, is: true });
   const rows = domain.db.prepare("SELECT issues.*, repositories.owner, repositories.name, repositories.full_name, repositories.description, repositories.private, repositories.default_branch, repositories.fork, repositories.parent_full_name, repositories.entity_counter, repositories.created_at AS repo_created_at, repositories.updated_at AS repo_updated_at FROM issues INNER JOIN repositories ON issues.repo_id = repositories.id ORDER BY issues.updated_at DESC").all();
-  let filtered = rows.filter((issue) => !parsed.text || issue.title.toLowerCase().includes(parsed.text) || issue.body.toLowerCase().includes(parsed.text) || issue.full_name.toLowerCase().includes(parsed.text));
+  let filtered = rows.filter((issue) => matchesTerms(parsed.terms, issue.title, issue.body));
   filtered = filtered.filter((issue) => inScope(parsed, issue.owner, issue.full_name));
   if (input.owner)
     filtered = filtered.filter((issue) => issue.owner === input.owner);
@@ -4316,6 +4362,8 @@ function searchIssues(domain, input) {
   const state = parsed.state ?? (input.state === "all" ? void 0 : input.state);
   if (state)
     filtered = filtered.filter((issue) => issue.state === state);
+  if (parsed.type === "pr" || parsed.unhonourable)
+    filtered = [];
   return {
     total_count: filtered.length,
     incomplete_results: false,
@@ -5785,6 +5833,7 @@ function toolSchemaConformance() {
         problems.push(`'${tool.name}' does not model GitHub's parameter '${key}'`);
       }
     }
+    problems.push(...typeDisagreements(tool.name, "GitHub", upstream.properties ?? {}, projected.properties ?? {}));
     const complete = knownKeyProbe(upstream);
     for (const key of upstream.required ?? []) {
       const { [key]: _omitted, ...missingOne } = complete;

package/dist/{src-J3LKERPK.js → src-RPI7XNUX.js}

@@ -1,5 +1,5 @@
 import { routeInputDeclarer, bracketedQuery, integerInput, booleanInput, mountDeclaredRoute, UndeclaredInputError } from './chunk-2Q3P45LK.js';
-import { failureInjectionRuleSchema, loadMcpToolFixture, openTwinDatabase, createFailureInjectionStore, defineTwin, twinBuildInfo, deriveMcpToolTable, failureInjectionMiddleware, createApp, FAILURE_INJECTION_OVERRIDE_KEY, recordedRequestHeaders, UnknownToolError } from './chunk-5EGHN6H4.js';
+import { failureInjectionRuleSchema, loadMcpToolFixture, openTwinDatabase, createFailureInjectionStore, defineTwin, twinBuildInfo, deriveMcpToolTable, failureInjectionMiddleware, createApp, FAILURE_INJECTION_OVERRIDE_KEY, recordedRequestHeaders, UnknownToolError } from './chunk-WEKJIGUD.js';
 import './chunk-VBATFCWR.js';
 import './chunk-SG6ZTIMT.js';
 import { z, ZodError } from 'zod';

package/dist/twinHarness-DYAP5HKG.js

@@ -0,0 +1,5 @@
+export { UnsupportedTwinError, bootTwin } from './chunk-UXVJK7PY.js';
+export { STRIPE_LOCAL_ACCOUNT_ID } from './chunk-K3GCCNF2.js';
+import './chunk-WEKJIGUD.js';
+import './chunk-VBATFCWR.js';
+import './chunk-SG6ZTIMT.js';

package/dist/{twinStart-IGPEXS7E.js → twinStart-BYWIDQLI.js}

@@ -1,6 +1,6 @@
-import { bootTwin } from './chunk-TJPGONWC.js';
-import { isTwinName, TWIN_NAMES, defaultPortFor, TWIN_REGISTRY } from './chunk-XXSZLN7I.js';
-import './chunk-5EGHN6H4.js';
+import { bootTwin } from './chunk-UXVJK7PY.js';
+import { isTwinName, TWIN_NAMES, defaultPortFor, TWIN_REGISTRY } from './chunk-K3GCCNF2.js';
+import './chunk-WEKJIGUD.js';
 import './chunk-VBATFCWR.js';
 import './chunk-SG6ZTIMT.js';
 import { randomBytes } from 'node:crypto';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pome-sh/cli",
-  "version": "0.26.0",
+  "version": "0.26.2",
   "description": "Digital-twin testing for AI agents \u2014 run tasks against resettable local or hosted twins and record tool-call traces for evaluation on pome.sh.",
   "keywords": [
     "ai",

package/dist/twinHarness-H6SY773Z.js

@@ -1,5 +0,0 @@
-export { UnsupportedTwinError, bootTwin } from './chunk-TJPGONWC.js';
-export { STRIPE_LOCAL_ACCOUNT_ID } from './chunk-XXSZLN7I.js';
-import './chunk-5EGHN6H4.js';
-import './chunk-VBATFCWR.js';
-import './chunk-SG6ZTIMT.js';