@pome-sh/cli 0.26.13 → 0.28.0

package/dist/build-info.json

@@ -1,6 +1,6 @@
 {
   "package": "pome-sh",
-  "version": "0.26.13",
-  "git_sha": "74c1f2f7f0c5e290bf94cae208a6f88e1c0b9ed2",
-  "build_time": "2026-08-25T12:39:52.951Z"
+  "version": "0.28.0",
+  "git_sha": "fe45f413881e8c19ab370dd63e03fbf118ac8edb",
+  "build_time": "2026-08-26T19:10:23.010Z"
 }

package/dist/{checks-3LVRPHOK.js → checks-XPLJ2MKP.js}

@@ -1,7 +1,7 @@
-import { findManifestPath, readManifest } from './chunk-CXGMLUZ4.js';
+import { findManifestPath, readManifest } from './chunk-QOMNBXMQ.js';
 import { getAvailablePort } from './chunk-XDU6TD4O.js';
+import './chunk-D5PXUPG4.js';
 import { buildEgressAllowlist } from './chunk-CBFKZZBR.js';
-import './chunk-BZO3YCJS.js';
 import './chunk-6KJC4BTO.js';
 import './chunk-SG6ZTIMT.js';
 import { serve } from '@hono/node-server';
@@ -183,7 +183,7 @@ async function checkTwinReachable(_configDir) {
   });
   let harness;
   try {
-    const { bootTwin } = await import('./twinHarness-6NVAKIOB.js');
+    const { bootTwin } = await import('./twinHarness-YOVJR72F.js');
     harness = await bootTwin({
       twin: "github",
       seedState: void 0,

package/dist/{chunk-NJ246QPJ.js → chunk-3T5XN64P.js}

@@ -1,6 +1,6 @@
 import { z, ZodError } from 'zod';
 
-// ../packages/twin-gmail/dist/src/errors.js
+// ../packages/twin-gmail/dist/src/seed.js
 var GmailError = class extends Error {
   status;
   reason;
@@ -111,6 +111,40 @@ function googleStatus(status) {
   return "INTERNAL";
 }
 
+// ../packages/twin-gmail/dist/src/faults.js
+var KNOWN_FAULT_NAMES = ["rate-limited"];
+var gmailFaultSchema = z.object({
+  name: z.enum(KNOWN_FAULT_NAMES),
+  target: z.string().min(1).max(128).default("messages.send"),
+  succeedFirst: z.number().int().nonnegative().max(1e3).default(2),
+  throttleFor: z.number().int().positive().max(1e3).default(3),
+  retryAfterSeconds: z.number().int().positive().max(3600).default(1)
+}).strict();
+function checkFault(db, operation) {
+  const fault = readFaults(db).find((f) => f.target === operation);
+  if (!fault)
+    return;
+  const calls = bumpFaultCounter(db, operation);
+  if (calls > fault.succeedFirst && calls <= fault.succeedFirst + fault.throttleFor) {
+    throw new GmailError(429, "rateLimitExceeded", `Rate limit exceeded for ${operation}. Retry after ${fault.retryAfterSeconds}s.`);
+  }
+}
+function readFaults(db) {
+  const row = db.prepare("SELECT value FROM gmail_config WHERE key = 'faults'").get();
+  if (!row)
+    return [];
+  try {
+    return JSON.parse(row.value);
+  } catch {
+    return [];
+  }
+}
+function bumpFaultCounter(db, operation) {
+  db.prepare("INSERT INTO fault_counters(operation, calls) VALUES (?, 1) ON CONFLICT(operation) DO UPDATE SET calls = calls + 1").run(operation);
+  const row = db.prepare("SELECT calls FROM fault_counters WHERE operation = ?").get(operation);
+  return row.calls;
+}
+
 // ../packages/twin-gmail/dist/src/search-parse.js
 var MAX_QUERY_BYTES = 4096;
 var MAX_TOKENS = 256;
@@ -415,38 +449,6 @@ function tokenize(query) {
 function makeImplicitOr(node) {
   return node.type === "and" ? { type: "or", children: node.children } : node;
 }
-var KNOWN_FAULT_NAMES = ["rate-limited"];
-var gmailFaultSchema = z.object({
-  name: z.enum(KNOWN_FAULT_NAMES),
-  target: z.string().min(1).max(128).default("messages.send"),
-  succeedFirst: z.number().int().nonnegative().max(1e3).default(2),
-  throttleFor: z.number().int().positive().max(1e3).default(3),
-  retryAfterSeconds: z.number().int().positive().max(3600).default(1)
-}).strict();
-function checkFault(db, operation) {
-  const fault = readFaults(db).find((f) => f.target === operation);
-  if (!fault)
-    return;
-  const calls = bumpFaultCounter(db, operation);
-  if (calls > fault.succeedFirst && calls <= fault.succeedFirst + fault.throttleFor) {
-    throw new GmailError(429, "rateLimitExceeded", `Rate limit exceeded for ${operation}. Retry after ${fault.retryAfterSeconds}s.`);
-  }
-}
-function readFaults(db) {
-  const row = db.prepare("SELECT value FROM gmail_config WHERE key = 'faults'").get();
-  if (!row)
-    return [];
-  try {
-    return JSON.parse(row.value);
-  } catch {
-    return [];
-  }
-}
-function bumpFaultCounter(db, operation) {
-  db.prepare("INSERT INTO fault_counters(operation, calls) VALUES (?, 1) ON CONFLICT(operation) DO UPDATE SET calls = calls + 1").run(operation);
-  const row = db.prepare("SELECT calls FROM fault_counters WHERE operation = ?").get(operation);
-  return row.calls;
-}
 
 // ../packages/twin-gmail/dist/src/seed.js
 var email = z.string().trim().email().transform((value) => value.toLowerCase());

package/dist/chunk-CF6EIU2U.js

@@ -0,0 +1,51 @@
+import { z } from 'zod';
+
+// ../packages/sdk/dist/failure-injection-rules.js
+var FAILURE_INJECTION_OVERRIDE_KEY = "failureInjectionOverride";
+var failureInjectionRuleSchema = z.object({
+  method: z.string().min(1).transform((s) => s.toUpperCase()),
+  path: z.string().min(1),
+  attempt: z.number().int().positive(),
+  mode: z.enum(["before_handler", "after_handler"]).default("after_handler"),
+  status: z.number().int().min(100).max(599),
+  body: z.unknown()
+});
+function createFailureInjectionStore() {
+  let rules = [];
+  const counters = /* @__PURE__ */ new Map();
+  const tuplesWithRules = /* @__PURE__ */ new Set();
+  function tupleKey(method, path) {
+    return `${method.toUpperCase()}\0${path}`;
+  }
+  function counterKey(accountId, method, path) {
+    return `${accountId}\0${method.toUpperCase()}\0${path}`;
+  }
+  function rebuildIndex() {
+    tuplesWithRules.clear();
+    for (const r of rules)
+      tuplesWithRules.add(tupleKey(r.method, r.path));
+  }
+  return {
+    setRules(next) {
+      rules = next.slice();
+      counters.clear();
+      rebuildIndex();
+    },
+    clear() {
+      rules = [];
+      counters.clear();
+      tuplesWithRules.clear();
+    },
+    matchAndConsume(accountId, method, path) {
+      const tk = tupleKey(method, path);
+      if (!tuplesWithRules.has(tk))
+        return null;
+      const ck = counterKey(accountId, method, path);
+      const count = (counters.get(ck) ?? 0) + 1;
+      counters.set(ck, count);
+      return rules.find((r) => r.method.toUpperCase() === method.toUpperCase() && r.path === path && r.attempt === count) ?? null;
+    }
+  };
+}
+
+export { FAILURE_INJECTION_OVERRIDE_KEY, createFailureInjectionStore, failureInjectionRuleSchema };

package/dist/{chunk-ANKO3RCB.js → chunk-CWNRE2OU.js}

@@ -1,9 +1,9 @@
-import { criterionSchema, finalizeResponseSchema, HostedDiscardRefusedError, HostedOrchError, HostedAuthError, HostedQuotaError, submitResultResponseSchema, createEvalSessionResponseSchema, createSessionResponseSchema, sessionPublicSchema } from './chunk-BZO3YCJS.js';
-import { seedSchema, parseSeed, defaultSeedState as defaultSeedState$2 } from './chunk-QXQAVKTE.js';
-import { gmailSeedSchema, defaultSeedState } from './chunk-NJ246QPJ.js';
-import { linearSeedSchema, defaultSeedState as defaultSeedState$1 } from './chunk-IZIZC7ZW.js';
-import { isTwinName, TWIN_REGISTRY } from './chunk-EIUCTFQV.js';
-import { toTwinHttpEventRow } from './chunk-CFXEETE3.js';
+import { gmailSeedSchema, defaultSeedState } from './chunk-3T5XN64P.js';
+import { linearSeedSchema, defaultSeedState as defaultSeedState$1 } from './chunk-G6GOCYIT.js';
+import { isTwinName, TWIN_REGISTRY } from './chunk-JE4H5ODK.js';
+import { criterionSchema, finalizeResponseSchema, HostedDiscardRefusedError, HostedOrchError, HostedAuthError, HostedQuotaError, submitResultResponseSchema, createEvalSessionResponseSchema, createSessionResponseSchema, sessionPublicSchema } from './chunk-D5PXUPG4.js';
+import { seedSchema, parseSeed, defaultSeedState as defaultSeedState$2 } from './chunk-HJX25USP.js';
+import { toTwinHttpEventRow } from './chunk-E665XWYU.js';
 import { redactEvent, redactSecrets } from './chunk-SG6ZTIMT.js';
 import { mkdir, appendFile, writeFile, readFile } from 'node:fs/promises';
 import { existsSync } from 'node:fs';
@@ -1255,6 +1255,8 @@ function normalizeAgentSdk(value) {
 
 // ../packages/wire/dist/run-completeness.js
 var PRE_SATISFIED_REASON = "already_true_in_seed";
+var ADVISORY_SCORE_STATE = "advisory";
+var ABSTAINED_SCORE_STATE = "abstained";
 
 // src/hosted/evalResultView.ts
 function outcomeOf(result) {
@@ -1265,6 +1267,9 @@ function outcomeOf(result) {
 function isPreSatisfied(result) {
   return result.skipped && result.reason === PRE_SATISFIED_REASON;
 }
+function isNarrated(result) {
+  return result.skipped && (result.score_state === ADVISORY_SCORE_STATE || result.score_state === ABSTAINED_SCORE_STATE);
+}
 function scoreStatus(score, passThreshold) {
   if (!score.evaluated || !score.can_pass) return "incomplete";
   return score.satisfaction >= passThreshold ? "pass" : "fail";
@@ -1296,12 +1301,16 @@ function criteriaWord(n) {
 }
 function evaluationCounts(score) {
   const evaluated = score.total_required;
-  const notEvaluated = score.skipped + score.errored - score.preSatisfied;
+  const exempt = score.preSatisfied + score.advisory + score.abstained;
+  const notEvaluated = score.skipped + score.errored - exempt;
   return {
     evaluated,
     notEvaluated,
     preSatisfied: score.preSatisfied,
-    total: evaluated + notEvaluated + score.preSatisfied
+    // `total` counts every exemption, not just `preSatisfied`, so it still
+    // names every criterion the run recorded — the reason `outcomeOf` keeps
+    // narrator rows inside `skipped` rather than returning their state raw.
+    total: evaluated + notEvaluated + exempt
   };
 }
 function scoreCountsSummary(score) {
@@ -1486,8 +1495,14 @@ function scoreFromFinalizeResponse(finalized) {
   const preSatisfied = results.filter(
     (r) => outcomeOf(r) === "skipped" && isPreSatisfied(r)
   ).length;
+  const advisory = results.filter(
+    (r) => isNarrated(r) && !isPreSatisfied(r) && r.score_state === ADVISORY_SCORE_STATE
+  ).length;
+  const abstained = results.filter(
+    (r) => isNarrated(r) && !isPreSatisfied(r) && r.score_state === ABSTAINED_SCORE_STATE
+  ).length;
   const totalRequired = passed + failed;
-  const unresolvedAbstentions = skipped - preSatisfied + errored;
+  const unresolvedAbstentions = skipped - preSatisfied - advisory - abstained + errored;
   return {
     satisfaction: finalized.score,
     passed,
@@ -1495,6 +1510,8 @@ function scoreFromFinalizeResponse(finalized) {
     skipped,
     errored,
     preSatisfied,
+    advisory,
+    abstained,
     total_required: totalRequired,
     evaluated: hasCriteriaResults ? totalRequired > 0 : true,
     can_pass: hasCriteriaResults ? totalRequired > 0 && unresolvedAbstentions === 0 : true,

package/dist/{chunk-BZO3YCJS.js → chunk-D5PXUPG4.js}

@@ -91,8 +91,40 @@ var baseCriterionResultSchema = z.object({
   passed: z.boolean(),
   skipped: z.boolean(),
   // true if [code] fell back to [model] but the judge was unreachable, etc.
-  reason: z.string()
+  reason: z.string(),
   // human-readable evidence
+  // Why this row is out of the denominator, when `skipped` alone is too coarse.
+  // The two values that carry meaning here are `ADVISORY_SCORE_STATE` and
+  // `ABSTAINED_SCORE_STATE` (`@pome-sh/wire/run-completeness`), which the
+  // narrator stamps on a `[model]` row it read but had no authority to score.
+  //
+  // NOT NAMED `outcome`: `hosted/evalResultView.ts`'s display model has
+  // reserved that key on this same object for a disjoint vocabulary
+  // (`passed | failed | skipped | errored`) since long before the narrator, and
+  // reserved it for the CLOUD to fill. A cloud writing `advisory` into it would
+  // hand `outcomeOf` a value outside its own union and render an advisory row
+  // with the skipped glyph.
+  //
+  // ON THE BASE AND NOT ON ONE ARM, for the mirror image of the reason the arm
+  // order below is what it is: an advisory row carries no `confidence` /
+  // `judge_model`, so it fails the probabilistic arm and lands on the
+  // DETERMINISTIC one — whose `.extend({})` is a plain `z.object` and would
+  // strip an unknown key. Declared on one arm, the state would be discarded
+  // before any consumer could read it, and the run would keep reading
+  // INCOMPLETE with the exemption sitting there correct and dead.
+  //
+  // `z.string()` AND NOT THE CLOSED ENUM pome-cloud declares for the same
+  // field, because the two sides of it have opposite jobs. pome-cloud PRODUCES
+  // it and validates what it serves; the CLI CONSUMES it, and
+  // `finalizeResponseSchema` is deliberately a tolerant reader (its own comment
+  // says so: cloud may emit additive keys "that older/newer CLIs strip rather
+  // than reject"). A closed enum here would turn a cloud that adds a third
+  // score state into a hard parse failure of the ENTIRE /finalize response —
+  // an unreadable run instead of an unrecognised field. The closed vocabulary
+  // is applied by the PREDICATE that reads it (`isNarrated`), exactly as
+  // `reason` is a plain string and `PRE_SATISFIED_REASON` is a comparison, so
+  // an unrecognised spelling is not exempted from anything.
+  score_state: z.string().optional()
 });
 var deterministicCriterionResultSchema = baseCriterionResultSchema.extend({
   // [code] adds nothing further; criterion.type === "code" identifies it.

package/dist/{chunk-CFXEETE3.js → chunk-E665XWYU.js}

@@ -1,4 +1,5 @@
 import { redactSecrets, redactEvent } from './chunk-SG6ZTIMT.js';
+import { FAILURE_INJECTION_OVERRIDE_KEY } from './chunk-CF6EIU2U.js';
 import { Hono } from 'hono';
 import { z } from 'zod';
 import { mkdirSync, openSync, createWriteStream, closeSync, writeFileSync, rmSync, readFileSync, fsync } from 'node:fs';
@@ -1391,54 +1392,6 @@ function ok(body, mutation = false) {
 function created(body) {
   return { status: 201, body, mutation: true };
 }
-var FAILURE_INJECTION_OVERRIDE_KEY = "failureInjectionOverride";
-var failureInjectionRuleSchema = z.object({
-  method: z.string().min(1).transform((s) => s.toUpperCase()),
-  path: z.string().min(1),
-  attempt: z.number().int().positive(),
-  mode: z.enum(["before_handler", "after_handler"]).default("after_handler"),
-  status: z.number().int().min(100).max(599),
-  body: z.unknown()
-});
-function createFailureInjectionStore() {
-  let rules = [];
-  const counters = /* @__PURE__ */ new Map();
-  const tuplesWithRules = /* @__PURE__ */ new Set();
-  function tupleKey(method, path) {
-    return `${method.toUpperCase()}\0${path}`;
-  }
-  function counterKey(accountId, method, path) {
-    return `${accountId}\0${method.toUpperCase()}\0${path}`;
-  }
-  function rebuildIndex() {
-    tuplesWithRules.clear();
-    for (const r of rules)
-      tuplesWithRules.add(tupleKey(r.method, r.path));
-  }
-  return {
-    setRules(next) {
-      rules = next.slice();
-      counters.clear();
-      rebuildIndex();
-    },
-    clear() {
-      rules = [];
-      counters.clear();
-      tuplesWithRules.clear();
-    },
-    matchAndConsume(accountId, method, path) {
-      const tk = tupleKey(method, path);
-      if (!tuplesWithRules.has(tk))
-        return null;
-      const ck = counterKey(accountId, method, path);
-      const count = (counters.get(ck) ?? 0) + 1;
-      counters.set(ck, count);
-      return rules.find((r) => r.method.toUpperCase() === method.toUpperCase() && r.path === path && r.attempt === count) ?? null;
-    }
-  };
-}
-
-// ../packages/sdk/dist/failure-injection.js
 function failureInjectionMiddleware(store, options) {
   return async (c, next) => {
     const session = c.get("session");
@@ -1771,4 +1724,4 @@ function unregisterServeShutdown(close) {
   serveShutdownHooks.delete(close);
 }
 
-export { FAILURE_INJECTION_OVERRIDE_KEY, POME_RECORDER_EVENTS_PATH, PROVIDER_SHAPED_TEAM_ID, TwinBootError, TwinError, UnknownToolError, bearerAuth, createAdminGate, createApp, createFailureInjectionStore, createFileBackedRecorderStore, createRecorderHandle, createRecorderStore, created, defineTwin, deriveMcpToolTable, ensureTwinAuthSecret, failureInjectionMiddleware, failureInjectionRuleSchema, formTokenResolver, isLoopbackHost, loadMcpToolFixture, mintProviderToken, ok, openTwinDatabase, queryTokenResolver, recordedRequestHeaders, requireAdminAuth, resolveAuthSecret, resolveRecorderStore, serve, setClientIp, setRecordedTool, toTwinHttpEventRow, twinBuildInfo, typeDisagreements, verifyProviderToken };
+export { POME_RECORDER_EVENTS_PATH, PROVIDER_SHAPED_TEAM_ID, TwinBootError, TwinError, UnknownToolError, bearerAuth, createAdminGate, createApp, createFileBackedRecorderStore, createRecorderHandle, createRecorderStore, created, defineTwin, deriveMcpToolTable, ensureTwinAuthSecret, failureInjectionMiddleware, formTokenResolver, isLoopbackHost, loadMcpToolFixture, mintProviderToken, ok, openTwinDatabase, queryTokenResolver, recordedRequestHeaders, requireAdminAuth, resolveAuthSecret, resolveRecorderStore, serve, setClientIp, setRecordedTool, toTwinHttpEventRow, twinBuildInfo, typeDisagreements, verifyProviderToken };

package/dist/{chunk-IZIZC7ZW.js → chunk-G6GOCYIT.js}

@@ -1,6 +1,26 @@
 import { z, ZodError } from 'zod';
 
-// ../packages/twin-linear/dist/src/errors.js
+// ../packages/twin-linear/dist/src/seed.js
+
+// ../packages/twin-linear/dist/src/types.js
+var DEFAULT_LINEAR_CLOCK = "2026-07-21T00:00:00.000Z";
+var DEFAULT_LINEAR_EMAIL = "admin@pome-twin.test";
+var DEFAULT_LINEAR_TOKEN = "lin_test_admin";
+var LINEAR_PROVIDER_TOKEN_PREFIX = "lin_pome_";
+var DEFAULT_LINEAR_SID = "standalone";
+var DEFAULT_LINEAR_PORT = 3337;
+var DEFAULT_SCOPES = ["read", "write", "issues:create", "comments:create", "admin"];
+var TITLE_MAX_BYTES = 512;
+var BODY_MAX_BYTES = 65536;
+var GRAPHQL_QUERY_MAX_BYTES = 1e5;
+var GRAPHQL_SELECTION_DEPTH_MAX = 20;
+var MCP_PAGE_DEFAULT = 50;
+var MCP_PAGE_MAX = 250;
+var RELAY_PAGE_DEFAULT = 50;
+var RELAY_PAGE_MAX = 250;
+var STATE_EXPORT_CAP = 2e3;
+var OAUTH_CODE_TTL_SECONDS = 600;
+var ACCESS_TOKEN_TTL_SECONDS = 3600;
 var LinearTwinError = class extends Error {
   status;
   code;
@@ -130,26 +150,6 @@ function notFound(message) {
   throw new LinearTwinError(404, "NOT_FOUND", message);
 }
 
-// ../packages/twin-linear/dist/src/types.js
-var DEFAULT_LINEAR_CLOCK = "2026-07-21T00:00:00.000Z";
-var DEFAULT_LINEAR_EMAIL = "admin@pome-twin.test";
-var DEFAULT_LINEAR_TOKEN = "lin_test_admin";
-var LINEAR_PROVIDER_TOKEN_PREFIX = "lin_pome_";
-var DEFAULT_LINEAR_SID = "standalone";
-var DEFAULT_LINEAR_PORT = 3337;
-var DEFAULT_SCOPES = ["read", "write", "issues:create", "comments:create", "admin"];
-var TITLE_MAX_BYTES = 512;
-var BODY_MAX_BYTES = 65536;
-var GRAPHQL_QUERY_MAX_BYTES = 1e5;
-var GRAPHQL_SELECTION_DEPTH_MAX = 20;
-var MCP_PAGE_DEFAULT = 50;
-var MCP_PAGE_MAX = 250;
-var RELAY_PAGE_DEFAULT = 50;
-var RELAY_PAGE_MAX = 250;
-var STATE_EXPORT_CAP = 2e3;
-var OAUTH_CODE_TTL_SECONDS = 600;
-var ACCESS_TOKEN_TTL_SECONDS = 3600;
-
 // ../packages/twin-linear/dist/src/webhook-url.js
 function webhookUrlError(url) {
   let parsed;
@@ -172,6 +172,8 @@ function assertWebhookUrl(url) {
     badUserInput(error);
   return url;
 }
+
+// ../packages/twin-linear/dist/src/seed.js
 var datetime = z.string().datetime({ offset: true });
 var email = z.string().trim().email().transform((v) => v.toLowerCase());
 var id = z.string().min(1).max(128);

package/dist/{chunk-QXQAVKTE.js → chunk-HJX25USP.js}

@@ -214,6 +214,19 @@ function normalizeLegacyIssueAssignee(issue) {
   }
   return issue;
 }
+function loadSeedFromEnv(env = process.env) {
+  const raw = env.POME_SEED_JSON;
+  if (raw === void 0 || raw === "") {
+    return parseSeed(defaultSeedState());
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (err) {
+    throw new Error(`POME_SEED_JSON is not valid JSON: ${err.message}`);
+  }
+  return parseSeed(parsed);
+}
 function defaultSeedState() {
   return {
     users: [
@@ -252,4 +265,4 @@ function defaultSeedState() {
   };
 }
 
-export { defaultSeedState, parseSeed, seedSchema };
+export { defaultSeedState, loadSeedFromEnv, parseSeed, seedSchema };

package/dist/{chunk-KIXYRPVY.js → chunk-IK2F7ZA3.js}

@@ -1,5 +1,5 @@
-import { TWIN_NAMES, isTwinName, TWIN_REGISTRY } from './chunk-EIUCTFQV.js';
-import { createFileBackedRecorderStore, createRecorderStore } from './chunk-CFXEETE3.js';
+import { TWIN_NAMES, isTwinName, TWIN_REGISTRY } from './chunk-JE4H5ODK.js';
+import { createFileBackedRecorderStore, createRecorderStore } from './chunk-E665XWYU.js';
 
 // src/recorder/recorder.ts
 function createRecorder(options = {}) {

package/dist/{chunk-EIUCTFQV.js → chunk-JE4H5ODK.js}

@@ -33,13 +33,14 @@ var TWIN_REGISTRY = {
     // The github twin's own `defaultSeedState()` is applied by `boot` below
     // when no seed is supplied — the pre-existing standalone behavior.
     defaultSeed: async () => void 0,
+    parseSeed: async (input) => (await import('./seed-BG5HMSBM.js')).parseSeed(input),
     async boot({ seedState, runId, recorder }) {
       const {
         createGitHubCloneApp,
         defaultSeedState,
         GitHubDomain,
         openGitHubCloneDatabase
-      } = await import('./src-JJNS46T6.js');
+      } = await import('./src-56Y2R7ZQ.js');
       const db = openGitHubCloneDatabase();
       const domain = new GitHubDomain(db);
       domain.seed(seedState === void 0 ? defaultSeedState() : seedState);
@@ -59,9 +60,10 @@ var TWIN_REGISTRY = {
     envName: "SLACK",
     defaultPort: 3333,
     version: package_default2.version,
-    defaultSeed: async () => (await import('./src-L6F5YXSP.js')).defaultSeedState(),
+    defaultSeed: async () => (await import('./src-SKCWAMVQ.js')).defaultSeedState(),
+    parseSeed: async (input) => (await import('./seed-IIMBJHAJ.js')).parseSeed(input),
     async boot({ seedState, runId, recorder }) {
-      const { createSlackTwinApp, openSlackTwinDatabase, SlackDomain } = await import('./src-L6F5YXSP.js');
+      const { createSlackTwinApp, openSlackTwinDatabase, SlackDomain } = await import('./src-SKCWAMVQ.js');
       const db = openSlackTwinDatabase(":memory:");
       const domain = new SlackDomain(db);
       domain.applySeed(seedState);
@@ -84,10 +86,11 @@ var TWIN_REGISTRY = {
     envName: "STRIPE",
     defaultPort: 3333,
     version: package_default3.version,
-    defaultSeed: async () => (await import('./src-FXRQSKBK.js')).defaultSeed(),
+    defaultSeed: async () => (await import('./src-PW7U25ZX.js')).defaultSeed(),
+    parseSeed: async (input) => (await import('./seed-YWDTT2WL.js')).parseSeed(input),
     async boot({ seedState, runId, recorder, twinBaseUrl }) {
-      const stripeTwin = await import('./src-FXRQSKBK.js');
-      const { createApp } = await import('./server-TK5YBK6E.js');
+      const stripeTwin = await import('./src-PW7U25ZX.js');
+      const { createApp } = await import('./server-DMLORMOV.js');
       const {
         applySeed: applyStripeSeed,
         createTwinStripeApp,
@@ -128,9 +131,10 @@ var TWIN_REGISTRY = {
     portEnvName: "GMAIL_TWIN_PORT",
     tokenEnvName: "POME_GMAIL_TOKEN",
     version: package_default4.version,
-    defaultSeed: async () => (await import('./src-GWA7QVQS.js')).defaultSeedState(),
+    defaultSeed: async () => (await import('./src-KSLAF3I4.js')).defaultSeedState(),
+    parseSeed: async (input) => (await import('./seed-NR6RUKXV.js')).parseSeed(input),
     async boot({ seedState, runId, recorder }) {
-      const { createGmailTwinApp, GmailDomain, openGmailTwinDatabase, parseSeed } = await import('./src-GWA7QVQS.js');
+      const { createGmailTwinApp, GmailDomain, openGmailTwinDatabase, parseSeed } = await import('./src-KSLAF3I4.js');
       const db = openGmailTwinDatabase(":memory:");
       const seed = parseSeed(seedState);
       const domain = new GmailDomain(db);
@@ -149,7 +153,8 @@ var TWIN_REGISTRY = {
     portEnvName: "LINEAR_TWIN_PORT",
     tokenEnvName: "POME_LINEAR_TOKEN",
     version: package_default5.version,
-    defaultSeed: async () => (await import('./src-Q4JNJE5S.js')).defaultSeedState(),
+    defaultSeed: async () => (await import('./src-JRBHNT4Y.js')).defaultSeedState(),
+    parseSeed: async (input) => (await import('./seed-3ZTWKLBE.js')).parseSeed(input),
     async boot({ seedState, runId, recorder }) {
       const {
         createLinearTwinApp,
@@ -157,7 +162,7 @@ var TWIN_REGISTRY = {
         LinearDomain,
         openLinearTwinDatabase,
         parseSeed
-      } = await import('./src-Q4JNJE5S.js');
+      } = await import('./src-JRBHNT4Y.js');
       const db = openLinearTwinDatabase(":memory:");
       const seed = parseSeed(seedState);
       const domain = new LinearDomain(db);
@@ -173,7 +178,7 @@ var TWIN_REGISTRY = {
   }
 };
 async function createGitHubSmokeApp() {
-  const { createGitHubCloneApp } = await import('./src-JJNS46T6.js');
+  const { createGitHubCloneApp } = await import('./src-56Y2R7ZQ.js');
   return createGitHubCloneApp();
 }
 function defaultPortFor(twin, env = process.env) {

package/dist/{chunk-6IVXTU67.js → chunk-JW3DHRNX.js}

@@ -1,6 +1,6 @@
-import { readManifest, normalizeManifestTwins } from './chunk-CXGMLUZ4.js';
-import { createHostedClient, perTwinReturnedByCloud, parseTaskFile, runAgentCommand, writeRunArtifactsCore, toTwinHttpEvent, redactJsonl, uploadRunBlobs, scoreFromFinalizeResponse, scoreStatus, evaluationCounts } from './chunk-ANKO3RCB.js';
-import { MOUNTED_TWINS, HostedAuthError, HostedDiscardRefusedError, HostedQuotaError, HostedOrchError, HostedTrialError, agentResponseSchema } from './chunk-BZO3YCJS.js';
+import { createHostedClient, perTwinReturnedByCloud, parseTaskFile, runAgentCommand, writeRunArtifactsCore, toTwinHttpEvent, redactJsonl, uploadRunBlobs, scoreFromFinalizeResponse, scoreStatus, evaluationCounts } from './chunk-CWNRE2OU.js';
+import { readManifest, normalizeManifestTwins } from './chunk-QOMNBXMQ.js';
+import { MOUNTED_TWINS, HostedAuthError, HostedDiscardRefusedError, HostedQuotaError, HostedOrchError, HostedTrialError, agentResponseSchema } from './chunk-D5PXUPG4.js';
 import { redactSecrets, redactEvent } from './chunk-SG6ZTIMT.js';
 import { randomUUID, createHash } from 'node:crypto';
 import { rm, readFile, stat, mkdir, writeFile, chmod, mkdtemp, readdir, rename } from 'node:fs/promises';
@@ -612,7 +612,8 @@ var DEFAULT_DOCS_SITE_ORIGIN = "https://docs.pome.sh";
 function ensureMcpSuffix(url) {
   return /\/mcp\/?$/.test(url) ? url : `${url.replace(/\/$/, "")}/mcp`;
 }
-var ALLOWED_TWINS = /* @__PURE__ */ new Set([...MOUNTED_TWINS, "gmail", "linear"]);
+var ALLOWED_TWINS = new Set(MOUNTED_TWINS);
+var SESSION_TWIN_NAMES = [...ALLOWED_TWINS];
 function redactSession(res) {
   const pcIn = res.provider_credentials;
   const pcOut = {};
@@ -1248,4 +1249,4 @@ async function abandonBestEffort(client, sessionId, errorCode) {
   }
 }
 
-export { DEFAULT_CONTROL_PLANE_URL, DEFAULT_DASHBOARD_URL, DEFAULT_DOCS_SITE_ORIGIN, VERDICT_ARTIFACT_VERSION, clearLocalCredentials, discoverRunSet, ensurePomeGitignored, friendlyHostedError, persistCredentialsAfterLogin, postAgentResolver, readLinkCache, resolveCachedAgentId, resolveCredentials, resolveRunAgentIdentity, resolveSeams, runSessionCreate, runSessionList, runSessionStop, runTaskHosted, writeLinkCache };
+export { DEFAULT_CONTROL_PLANE_URL, DEFAULT_DASHBOARD_URL, DEFAULT_DOCS_SITE_ORIGIN, SESSION_TWIN_NAMES, VERDICT_ARTIFACT_VERSION, clearLocalCredentials, discoverRunSet, ensurePomeGitignored, friendlyHostedError, persistCredentialsAfterLogin, postAgentResolver, readLinkCache, resolveCachedAgentId, resolveCredentials, resolveRunAgentIdentity, resolveSeams, runSessionCreate, runSessionList, runSessionStop, runTaskHosted, writeLinkCache };

package/dist/{chunk-FQGR7KDT.js → chunk-MOZU3NOM.js}

@@ -1,7 +1,7 @@
+import { parseTaskFile, seedStateForTwin, runAgentCommand, writeRunArtifactsCore } from './chunk-CWNRE2OU.js';
+import { createRecorder, bootTwin } from './chunk-IK2F7ZA3.js';
 import { getAvailablePort } from './chunk-XDU6TD4O.js';
 import { buildEgressAllowlist, readBlockedEgress } from './chunk-CBFKZZBR.js';
-import { parseTaskFile, seedStateForTwin, runAgentCommand, writeRunArtifactsCore } from './chunk-ANKO3RCB.js';
-import { createRecorder, bootTwin } from './chunk-KIXYRPVY.js';
 import { eventSchema } from './chunk-6KJC4BTO.js';
 import { redactSecrets, redactEvent } from './chunk-SG6ZTIMT.js';
 import { serve } from '@hono/node-server';

package/dist/{chunk-CXGMLUZ4.js → chunk-QOMNBXMQ.js}

@@ -1,4 +1,4 @@
-import { HostedOrchError, manifestSchema, deriveAgentSlug, SLUG_RE } from './chunk-BZO3YCJS.js';
+import { HostedOrchError, manifestSchema, deriveAgentSlug, SLUG_RE } from './chunk-D5PXUPG4.js';
 import { readFile, writeFile } from 'node:fs/promises';
 import { resolve, join, dirname } from 'node:path';
 import { stringify, parse } from 'yaml';