@pome-sh/cli 0.26.8 → 0.26.10

package/dist/src/cli/main.js

@@ -1,24 +1,24 @@
 #!/usr/bin/env node
-import { DEFAULT_CONTROL_PLANE_URL, DEFAULT_DASHBOARD_URL, clearLocalCredentials, friendlyHostedError, runSessionCreate, runSessionList, runSessionStop, resolveCredentials, runTaskHosted, discoverRunSet, VERDICT_ARTIFACT_VERSION, persistCredentialsAfterLogin, DEFAULT_DOCS_SITE_ORIGIN, resolveSeams, resolveCachedAgentId, readLinkCache, postAgentResolver, writeLinkCache, ensurePomeGitignored } from '../../chunk-OFA4E6RJ.js';
-import { readManifest, writeManifest, MANIFEST_JSON, readRequiredManifest, normalizeManifestTwins } from '../../chunk-U6MQ5KBT.js';
-import { assetPath, runTask, resolvePackageRoot, DEMO_TASK_NAME, demoTaskPath } from '../../chunk-NUXVJ4E6.js';
+import { DEFAULT_CONTROL_PLANE_URL, DEFAULT_DASHBOARD_URL, clearLocalCredentials, friendlyHostedError, runSessionCreate, runSessionList, runSessionStop, resolveCredentials, runTaskHosted, discoverRunSet, VERDICT_ARTIFACT_VERSION, persistCredentialsAfterLogin, DEFAULT_DOCS_SITE_ORIGIN, resolveSeams, resolveCachedAgentId, readLinkCache, postAgentResolver, writeLinkCache, ensurePomeGitignored } from '../../chunk-6IVXTU67.js';
+import { readManifest, writeManifest, MANIFEST_JSON, readRequiredManifest, normalizeManifestTwins } from '../../chunk-CXGMLUZ4.js';
+import { assetPath, runTask, resolvePackageRoot, DEMO_TASK_NAME, demoTaskPath } from '../../chunk-FQGR7KDT.js';
 import '../../chunk-XDU6TD4O.js';
 import '../../chunk-CBFKZZBR.js';
-import { parseTaskFile, scoreStatus, runScoreLine, readLatestRun, readMetaSummary, outcomeOf, readConfigTwins, scoreCountsSummary, markerFor, criterionMarkerLabel, twinSkipSuffix, readCodeCriteria, createHostedClient, toTwinHttpEvent, redactJsonl, scoreFromFinalizeResponse, parseGitHubSeedState, uploadRunBlobs, isPreSatisfied } from '../../chunk-7WPD3DTO.js';
+import { parseTaskFile, scoreStatus, runScoreLine, readLatestRun, readMetaSummary, outcomeOf, readConfigTwins, scoreCountsSummary, markerFor, criterionMarkerLabel, twinSkipSuffix, readCodeCriteria, createHostedClient, toTwinHttpEvent, redactJsonl, scoreFromFinalizeResponse, parseGitHubSeedState, uploadRunBlobs, isPreSatisfied } from '../../chunk-ANKO3RCB.js';
 import '../../chunk-NW7HGA2K.js';
-import { MOUNTED_TWINS, deriveAgentSlug, exitCodeFor, HostedUsageError, HostedOrchError, HostedAuthError, HostedQuotaError } from '../../chunk-KSX2PAEI.js';
+import { MOUNTED_TWINS, deriveAgentSlug, exitCodeFor, HostedUsageError, HostedOrchError, HostedAuthError, HostedQuotaError } from '../../chunk-BZO3YCJS.js';
 import { TAPE_ASSERTABLE_TOOLS } from '../../chunk-C4BVTUA3.js';
-import { seedSchema } from '../../chunk-B22TYIEM.js';
-import { SLACK_CHECKS } from '../../chunk-IDNSKKEC.js';
+import { seedSchema } from '../../chunk-QXQAVKTE.js';
+import { SLACK_CHECKS } from '../../chunk-2ZGVDTJC.js';
 import { GMAIL_CHECKS } from '../../chunk-JM6VS62R.js';
 import '../../chunk-NJ246QPJ.js';
 import { LINEAR_CHECKS } from '../../chunk-XBT6ZLBG.js';
 import '../../chunk-IZIZC7ZW.js';
 import { oneOf, defineCheck, repoRef, VACUITY_SENTINEL_NUMBER, childStatePath, VACUITY_SENTINEL, statePath, templateSlots, renderCheck, checksDigest, checkPattern, checkNearMissPattern } from '../../chunk-JWJYNAWI.js';
-import '../../chunk-5EE7YWA3.js';
-import { TWIN_NAME_LIST, isTwinName, createGitHubSmokeApp } from '../../chunk-CKN743FJ.js';
-import '../../chunk-WEKJIGUD.js';
-import { isLegacyEventRow, eventSchema } from '../../chunk-JUESW6G4.js';
+import '../../chunk-KIXYRPVY.js';
+import { TWIN_NAME_LIST, isTwinName, createGitHubSmokeApp } from '../../chunk-EIUCTFQV.js';
+import '../../chunk-CFXEETE3.js';
+import { isLegacyEventRow, eventSchema } from '../../chunk-6KJC4BTO.js';
 import { redactEvent, redactSecrets } from '../../chunk-SG6ZTIMT.js';
 import { Command } from 'commander';
 import { existsSync, readFileSync, realpathSync, statSync, constants } from 'node:fs';
@@ -422,7 +422,7 @@ var DOCS_TOPICS = [
       "register",
       "pome.json",
       "connect",
-      // Migrated from the retired skills-setup topic (F-893): wiring your own
+      // Migrated from the retired skills-setup topic: wiring your own
       // agent is now the "bring your own agent" path. ("pome-setup" / "setup"
       // already resolve to getting-started via its "setup" keyword.)
       "wire"
@@ -434,8 +434,8 @@ var DOCS_TOPICS = [
     path: "/docs/how-pome-works",
     keywords: ["twins", "scenarios", "runs", "scoring", "artifacts", "loop"]
   },
-  // F-889 dropped the Gen-1 /setup and /test-with-pome skill pages from the
-  // docs nav; F-893 retired the CLI commands that pointed at them. The two
+  // The Gen-1 /setup and /test-with-pome skill pages were dropped from the docs
+  // nav, and the CLI commands that pointed at them are gone. The two
   // topic entries are gone, but their still-live keywords are MIGRATED onto the
   // surviving replacement topics so `pome docs <kw>` keeps routing:
   //   wire → existing-agent;  test-with-pome / pome-test → cli-run;
@@ -482,7 +482,7 @@ var DOCS_TOPICS = [
     id: "cli",
     title: "Command Line Interface",
     path: "/docs/cli",
-    // "eval" migrated from the retired skills-test topic (F-893): there is no
+    // "eval" migrated from the retired skills-test topic: there is no
     // dedicated `pome eval` docs page, and it is a distinct workflow from
     // `pome inspect`, so it routes to the CLI reference index that documents
     // every command rather than to a sibling command's page.
@@ -501,7 +501,7 @@ var DOCS_TOPICS = [
       "default",
       "demo task",
       "run yours",
-      // Migrated from the retired skills-test topic (F-893): running tasks is
+      // Migrated from the retired skills-test topic: running tasks is
       // how you test an agent with pome.
       "test-with-pome",
       "pome-test"
@@ -516,7 +516,7 @@ var DOCS_TOPICS = [
   {
     id: "cli-tasks",
     title: "pome tasks",
-    // F-912 — the M4 docs door renamed the docs.pome.sh page from
+    // The M4 docs door renamed the docs.pome.sh page from
     // /docs/cli/scenarios to /docs/cli/tasks (a redirect keeps the old URL
     // alive), so `path` now points at the new route. The "scenarios" keyword
     // stays so `pome docs scenarios` still resolves to this topic.
@@ -850,7 +850,7 @@ async function throwForStatus(res) {
 
 // src/task/seed-verifier.ts
 async function verifySeedWithTwin(seed) {
-  const { GitHubDomain, openGitHubCloneDatabase } = await import('../../src-UEO2KIBJ.js');
+  const { GitHubDomain, openGitHubCloneDatabase } = await import('../../src-JJNS46T6.js');
   const db = openGitHubCloneDatabase(":memory:");
   try {
     new GitHubDomain(db).seed(seed);
@@ -2213,7 +2213,7 @@ var toolWasCalled = defineCheck({
   params: { tool: toolActionName },
   substrate: "tape",
   // Nothing in the seed can satisfy it and only the examinee acting can, which
-  // is the whole property: declared, never inferred from the English (F-1070).
+  // is the whole property: declared, never inferred from the English.
   polarity: () => "positive",
   // The action name IS a caller-supplied literal hunted for in a substrate, so
   // it is declared — and the engine's door-side skip matters MORE here than on
@@ -2292,7 +2292,7 @@ var GITHUB_CHECKS = [
   // that assert about the RUN rather than the world it left behind.
   noUnsupportedEndpoint,
   toolNeverCalled,
-  // F-1338. Adjacent to its prohibition for the reason the two repo-scoped
+  // Adjacent to its prohibition for the reason the two repo-scoped
   // deltas sit together above: an author reaching for one usually wants to see
   // the other, and these two are the same predicate read in opposite
   // directions off one closed set of actions. It is appended rather than
@@ -3887,7 +3887,7 @@ async function runEval(options) {
       agentModel: "unknown",
       agentSdk: projectIdentity?.framework ?? null,
       // Eval sessions carry no client-side criteria — the cloud eval judge
-      // owns them (FDRS-655). Cloud's finalize schema defaults all scenario
+      // owns them. Cloud's finalize schema defaults all scenario
       // fields, so empty strings are accepted.
       criteria: [],
       taskName,
@@ -3993,7 +3993,7 @@ async function runEvalCommand(runDirArg, opts) {
       );
     } else if (err instanceof HostedOrchError && (err.status === 404 || err.status === 405)) {
       console.error(
-        "Tip: this control plane does not serve `POST /v1/eval-sessions` yet \u2014 the Pome cloud eval path (FDRS-655) is not deployed. Upgrade the control plane (or wait for the deploy). In the meantime, a hosted `pome run` still returns a cloud verdict."
+        "Tip: this control plane does not serve `POST /v1/eval-sessions` yet \u2014 the Pome cloud eval path is not deployed. Upgrade the control plane (or wait for the deploy). In the meantime, a hosted `pome run` still returns a cloud verdict."
       );
     }
     process.exitCode = code;
@@ -4651,7 +4651,7 @@ var DEFAULT_AGENT_COMMAND = `node ${DEFAULT_AGENT_FILE}`;
 var MANIFEST_SCHEMA_URL = "https://pome.sh/schemas/v1/pome.json";
 var MAX_UNREADABLE_PATHS_SHOWN = 5;
 function readPackageVersion() {
-  if ("0.26.8".length > 0) return "0.26.8";
+  if ("0.26.10".length > 0) return "0.26.10";
   try {
     const here = dirname(fileURLToPath(import.meta.url));
     const candidates = [
@@ -4750,7 +4750,7 @@ function createProgram() {
     console.error(postInitMessage);
   });
   program.command("install").allowUnknownOption().allowExcessArguments().description(
-    "Retired (F-893). Prints the Gen-2 wiring path: `claude mcp add \u2026 pome` + `npx skills add pome-sh/digital-twins --skill '*'`, then the pome-intake / REST-launch preflight."
+    "Retired. Prints the Gen-2 wiring path: `claude mcp add \u2026 pome` + `npx skills add pome-sh/digital-twins --skill '*'`, then the pome-intake / REST-launch preflight."
   ).action(async () => {
     const { runInstall } = await import('../../install-4OATBKG3.js');
     runInstall();
@@ -4975,7 +4975,7 @@ function createProgram() {
     process.env.POME_API_URL ?? DEFAULT_CONTROL_PLANE_URL
   ).option(
     "--discard",
-    "Confirm destroying a session whose run has not been graded (F-983)",
+    "Confirm destroying a session whose run has not been graded",
     false
   ).action(
     async (sessionId, opts) => {
@@ -4997,7 +4997,7 @@ function createProgram() {
     'Task markdown file or directory. Omit to run the demo task ("that was ours, run yours"): tasks/first-run-demo.md is dropped into your project on first use with runs: 5 pinned.'
   ).option("--agent <command>", "Agent command to run").option(
     "-n, --trials <count>",
-    "FDRS-636: run <count> isolated trials of the task as ONE trial group (integer 1-20; hosted only). Default is the task config's `runs` field (capped at 20). k>1 mints sessions with a shared group id up to your plan's concurrent-twin quota (FDRS-663: remaining trials reuse slots as earlier trials finish), runs trials at that concurrency, prints the per-trial verdict table (numeric cloud-judge scores), and exits 0 iff at least one trial completed and every completed trial passed (1: a completed trial failed; 2: nothing completed). k=1 keeps today's single-run behavior exactly."
+    "Run <count> isolated trials of the task as ONE trial group (integer 1-20; hosted only). Default is the task config's `runs` field (capped at 20). k>1 mints sessions with a shared group id up to your plan's concurrent-twin quota (remaining trials reuse slots as earlier trials finish), runs trials at that concurrency, prints the per-trial verdict table (numeric cloud-judge scores), and exits 0 iff at least one trial completed and every completed trial passed (1: a completed trial failed; 2: nothing completed). k=1 keeps today's single-run behavior exactly."
   ).option("--artifacts-dir <dir>", "Directory for run artifacts", "runs").option("--hosted", "Deprecated: hosted is now the default. Flag is a no-op.").option(
     "--api-url <url>",
     "Control-plane base URL.",
@@ -5007,7 +5007,7 @@ function createProgram() {
     "Override the manifest's agent.version for this run (stamped on the session/run)."
   ).option(
     "--no-capture",
-    "Self-host only: skip spawning the capture-server child and don't inject HTTP_PROXY/HTTPS_PROXY into the agent. Used by the CI overhead gate (FDRS-405) to baseline proxy-on-vs-off latency. No-op on hosted runs."
+    "Self-host only: skip spawning the capture-server child and don't inject HTTP_PROXY/HTTPS_PROXY into the agent. Used by the CI overhead gate to baseline proxy-on-vs-off latency. No-op on hosted runs."
   ).option(
     "--local",
     "Self-host: run against an in-process twin and CAPTURE a raw trace only (an audit log \u2014 no score, no verdict, no judge). A verdict comes from the cloud: run `pome eval <run-dir>` on the captured trace, or `pome login` and run against Pome cloud."
@@ -5096,7 +5096,7 @@ function createProgram() {
         return;
       }
       {
-        const { runDoctorChecks } = await import('../../checks-UOJUUVZB.js');
+        const { runDoctorChecks } = await import('../../checks-3LVRPHOK.js');
         const { renderDoctorReport } = await import('../../render-ZQQ4UMNO.js');
         const doctorReport = await runDoctorChecks({ mode: useLocal ? "full" : "hosted" });
         if (!doctorReport.ok) {
@@ -5134,7 +5134,7 @@ function createProgram() {
               taskForRuns.config.runs
             );
             if (k > 1) {
-              const { runTrialGroup } = await import('../../runTrialGroup-INW4QLSL.js');
+              const { runTrialGroup } = await import('../../runTrialGroup-CLJJOO4J.js');
               const fileForRerun = relative(process.cwd(), file);
               const rerunCommand = defaultTask ? options.trials !== void 0 ? `pome run -n ${k}` : "pome run" : `pome run ${fileForRerun && !fileForRerun.startsWith("..") ? fileForRerun : file} -n ${k}`;
               const groupResult = await runTrialGroup({
@@ -5228,7 +5228,7 @@ function createProgram() {
         process.exitCode = 5;
         return;
       }
-      const { runDemo } = await import('../../runDemo-MZPIXV6R.js');
+      const { runDemo } = await import('../../runDemo-XO5R5QTM.js');
       const result = await runDemo({
         apiBase: opts.apiUrl.replace(/\/$/, ""),
         dashboardBase: process.env.POME_DASHBOARD_URL ?? DEFAULT_DASHBOARD_URL,
@@ -5246,7 +5246,7 @@ function createProgram() {
   program.command("doctor").description(
     "Check the agent\u2194twin wiring: pome.json (or pome.yaml) present + valid, the local twin boots + serves, requests routed to the twin (not a hardcoded production host), egress floor active. On failure prints one named cause (file:line where knowable) + one concrete fix and exits non-zero."
   ).action(async () => {
-    const { runDoctorChecks } = await import('../../checks-UOJUUVZB.js');
+    const { runDoctorChecks } = await import('../../checks-3LVRPHOK.js');
     const { renderDoctorReport } = await import('../../render-ZQQ4UMNO.js');
     const report = await runDoctorChecks();
     for (const line of renderDoctorReport(report, { passNote: true })) console.error(line);
@@ -5422,7 +5422,7 @@ function createProgram() {
   ).description(
     "Start a standalone twin as a long-lived foreground server (Ctrl-C to stop)"
   ).action(async (name, options) => {
-    const { runTwinStartCommand } = await import('../../twinStart-2VP545N6.js');
+    const { runTwinStartCommand } = await import('../../twinStart-WIT4UVAC.js');
     await runTwinStartCommand(name, options);
   });
   twin.command("reset").argument("[name]", "Twin name (default: github)", "github").description("Reset standalone twin state").action(async (name) => {
@@ -5461,7 +5461,7 @@ function createProgram() {
     "Path to events.jsonl. Created if missing; appended to otherwise."
   ).option(
     "--allow <hosts>",
-    "FDRS-635: comma-separated egress allowlist patterns (exact host or *.suffix). The floor is deny-by-default: only these hosts + loopback are tunnelled; everything else gets 403."
+    "Comma-separated egress allowlist patterns (exact host or *.suffix). The floor is deny-by-default: only these hosts + loopback are tunnelled; everything else gets 403."
   ).option(
     "--egress-out <path>",
     "Path to egress.jsonl, the sidecar recording refused CONNECTs. Optional; the floor enforces regardless."

package/dist/{src-AAF7TZMO.js → src-FXRQSKBK.js}

@@ -1,6 +1,6 @@
-import { routeInputDeclarer, bracketedQuery, integerInput, booleanInput, mountDeclaredRoute, UndeclaredInputError } from './chunk-2Q3P45LK.js';
-import { failureInjectionRuleSchema, loadMcpToolFixture, openTwinDatabase, createFailureInjectionStore, defineTwin, twinBuildInfo, deriveMcpToolTable, failureInjectionMiddleware, createApp, FAILURE_INJECTION_OVERRIDE_KEY, recordedRequestHeaders, UnknownToolError } from './chunk-WEKJIGUD.js';
-import './chunk-JUESW6G4.js';
+import { routeInputDeclarer, bracketedQuery, integerInput, booleanInput, mountDeclaredRoute, UndeclaredInputError } from './chunk-IZFM7W2V.js';
+import { failureInjectionRuleSchema, loadMcpToolFixture, openTwinDatabase, createFailureInjectionStore, defineTwin, twinBuildInfo, deriveMcpToolTable, failureInjectionMiddleware, createApp, FAILURE_INJECTION_OVERRIDE_KEY, recordedRequestHeaders, UnknownToolError } from './chunk-CFXEETE3.js';
+import './chunk-6KJC4BTO.js';
 import './chunk-SG6ZTIMT.js';
 import { z, ZodError } from 'zod';
 import { createHash, randomUUID, randomBytes } from 'node:crypto';
@@ -235,7 +235,7 @@ CREATE INDEX IF NOT EXISTS idx_payment_methods_customer ON payment_methods(custo
 CREATE INDEX IF NOT EXISTS idx_payment_methods_created ON payment_methods(created);
 CREATE INDEX IF NOT EXISTS idx_payment_methods_account_id ON payment_methods(account_id);
 
--- F-734 billing tables (warm surfaces, shape tier): plain stored rows served
+-- Billing tables (warm surfaces, shape tier): plain stored rows served
 -- back in Stripe shape. No invoices table \u2014 invoices are reads-only and
 -- nothing in the twin mints one (loud shape divergence, see FIDELITY.md).
 
@@ -709,7 +709,7 @@ var PaymentIntentsDomain = class {
       last_payment_error_json: lastPaymentErrorJson
     });
   }
-  // ---------- update (POST /v1/payment_intents/:id, F-731) ----------
+  // ---------- update (POST /v1/payment_intents/:id) ----------
   /**
    * Update a non-terminal PI. Metadata merges per-key (empty/null unsets,
    * Stripe's metadata contract). `payment_method` / `customer` are only
@@ -1555,7 +1555,7 @@ function paymentIntentJson(row) {
     cancellation_reason: null,
     // Twin row columns carry the literal Stripe values; the row type is a free
     // `string`. Narrow to the upstream literal union for the type anchor only
-    // (FDRS-454: the twin faithfully emits a real upstream value), runtime unchanged.
+    // (the twin faithfully emits a real upstream value), runtime unchanged.
     capture_method: row.capture_method,
     client_secret: row.client_secret,
     confirmation_method: row.confirmation_method,
@@ -1563,9 +1563,9 @@ function paymentIntentJson(row) {
     currency: row.currency,
     customer: row.customer_id,
     description: null,
-    // Card declines (F-731): the last failed attempt, parsed from the row.
+    // Card declines: the last failed attempt, parsed from the row.
     // The stored blob is Stripe's LastPaymentError shape; narrow for the
-    // type anchor only (FDRS-454), runtime unchanged.
+    // type anchor only, runtime unchanged.
     last_payment_error: parseJson(row.last_payment_error_json, null),
     latest_charge: row.latest_charge_id,
     livemode: false,
@@ -1596,8 +1596,7 @@ function chargeJson(row) {
     crypto: {
       // Upstream `Charge.PaymentMethodDetails.Crypto.{buyer_address,transaction_hash}`
       // are `string | undefined`; the twin surfaces `null` pre-settlement (no
-      // on-chain tx yet). Narrow the pre-resolution null for the type anchor only
-      // (FDRS-454), runtime value (null) unchanged.
+      // on-chain tx yet). Narrow the pre-resolution null for the type anchor only, runtime value (null) unchanged.
       buyer_address: null,
       network: "base",
       token_currency: "usdc",
@@ -1629,7 +1628,7 @@ function chargeJson(row) {
     disputed: false,
     failure_balance_transaction: null,
     // Twin failure columns carry Stripe's literal decline codes; the row
-    // type is a free `string`. Narrow for the type anchor only (FDRS-454).
+    // type is a free `string`. Narrow for the type anchor only.
     failure_code: row.failure_code,
     failure_message: row.failure_message,
     fraud_details: {},
@@ -1653,7 +1652,7 @@ function chargeJson(row) {
     payment_intent: row.payment_intent_id,
     payment_method: row.payment_method_id,
     // Stored blob is spec-faithful (built from the PM row at mint time);
-    // narrow for the type anchor only (FDRS-454).
+    // narrow for the type anchor only.
     payment_method_details: paymentMethodDetails,
     receipt_email: null,
     receipt_number: null,
@@ -1684,7 +1683,7 @@ function refundJson(row) {
     metadata: {},
     payment_intent: row.payment_intent_id,
     // Twin row `reason` is a free `string`; upstream `Refund.Reason` is a literal
-    // union. Narrow for the type anchor only (FDRS-454), runtime unchanged.
+    // union. Narrow for the type anchor only, runtime unchanged.
     reason: row.reason,
     receipt_number: null,
     source_transfer_reversal: null,
@@ -1754,7 +1753,7 @@ function paymentMethodJson(row) {
     livemode: false,
     metadata: {},
     // Twin row `type` is a free `string`; upstream `PaymentMethod.type` is a
-    // literal union. Narrow for the type anchor only (FDRS-454), runtime
+    // literal union. Narrow for the type anchor only, runtime
     // value ("card") unchanged.
     type: row.type
   };
@@ -1777,7 +1776,7 @@ function balanceTransactionJson(row) {
     status: row.status,
     // Upstream `BalanceTransaction.Type` is a literal union; the twin's ledger
     // `type` column is a free `string` (carries the x402 deposit categories).
-    // Narrow for the type anchor only (FDRS-454), runtime value unchanged.
+    // Narrow for the type anchor only, runtime value unchanged.
     type: row.type
   };
 }
@@ -1790,7 +1789,7 @@ function eventJson(row) {
     created: row.created,
     // LIFT (ST-DIV-014): the twin stores the event payload as an opaque parsed
     // JSON blob (`data.object: unknown`); upstream `Event.Data.object` is a typed
-    // resource union. Narrow for the type anchor only (FDRS-454), runtime unchanged.
+    // resource union. Narrow for the type anchor only, runtime unchanged.
     data: parsedData,
     livemode: Boolean(row.livemode),
     pending_webhooks: 0,
@@ -1799,7 +1798,7 @@ function eventJson(row) {
       idempotency_key: row.request_idempotency_key
     },
     // LIFT (ST-DIV-014): twin emits a free `string`; official `EventBase.type`
-    // is the `Event.Type` literal union. Narrow for the anchor only (FDRS-454).
+    // is the `Event.Type` literal union. Narrow for the anchor only.
     type: row.type
   };
 }
@@ -1829,7 +1828,7 @@ function priceJson(row) {
   const recurring = row.recurring_interval ? {
     // Twin row `recurring_interval` is a free `string`; upstream
     // `Price.Recurring.interval` is a literal union. Narrow for the type
-    // anchor only (FDRS-454), runtime unchanged.
+    // anchor only, runtime unchanged.
     interval: row.recurring_interval,
     interval_count: row.recurring_interval_count ?? 1,
     meter: null,
@@ -2104,7 +2103,7 @@ var StripeDomain = class {
     };
   }
   /**
-   * POST /v1/payment_intents/:id (F-731). The ruled retry-with-new-PM step:
+   * POST /v1/payment_intents/:id. The ruled retry-with-new-PM step:
    * metadata merges per-key, and attaching a PM moves the card PI back to
    * requires_confirmation. PM/customer resolution happens here so unknown
    * ids 404 with Stripe's resource_missing before any state gate fires.
@@ -2206,7 +2205,7 @@ var StripeDomain = class {
    * Create a refund. Returns the serialized API shape plus a canonical
    * `state_delta` so the route can hand both to `respond()`.
    *
-   * F-733: the whole flow — refund INSERT + charges.amount_refunded UPDATE
+   * The whole flow — refund INSERT + charges.amount_refunded UPDATE
    * (inside `refunds.create()`, nested as a savepoint), the negative
    * refund-type balance transaction, the ledger link backfill, and the
    * charge.refunded / refund.created events — commits in one better-sqlite3
@@ -2352,9 +2351,9 @@ var StripeDomain = class {
     const { rows, hasMore, limit } = this.events.list(accountId2, input);
     return serializedList(rows.map(eventJson), hasMore, limit, "/v1/events");
   }
-  // ---------- Billing (F-734, shape tier) ----------
+  // ---------- Billing (shape tier) ----------
   //
-  // Warm surfaces per the F-729 ruling: stored rows served in Stripe shape,
+  // Warm surfaces per the ruling: stored rows served in Stripe shape,
   // deliberately WITHOUT the semantic billing machine — creating a product,
   // price, or subscription emits no events and mints no invoices; the
   // recorder deltas stay truthful to the single-row writes.
@@ -2423,7 +2422,7 @@ var StripeDomain = class {
     }
     return subscriptionJson(row, prices);
   }
-  // Invoices are reads-only (F-729 ruling point 2: create/finalize/pay stay
+  // Invoices are reads-only (create/finalize/pay stay
   // unlisted-cold) and nothing in the twin mints one, so the list is always
   // empty and retrieve always 404s — loud, Stripe-shaped, documented.
   retrieveInvoice(accountId2, id) {
@@ -2441,7 +2440,7 @@ var StripeDomain = class {
    *
    * Ordering is `created DESC, rowid DESC`: `created` has unix-second
    * resolution, so rows minted within the same second tied and flipped
-   * order run-to-run (the F-683 export-race class). The insertion-order
+   * order run-to-run (the export-race class). The insertion-order
    * tiebreak keeps the export deterministic — same seed + same ops =>
    * same state (test/state-export.test.ts).
    */
@@ -2632,7 +2631,7 @@ function recordDedupeEvent(c, recorder, runId, startedAt, rawBody, cached) {
     method: c.req.method,
     path: new URL(c.req.url).pathname,
     request_body: rawBody === "" ? null : rawBody,
-    // F-1125 — the replay's own headers, which is where `Idempotency-Key`
+    // The replay's own headers, which is where `Idempotency-Key`
     // lives. Recording the dedupe outcome while hiding the key that caused it
     // would leave the reason unreadable on the one row that is about it.
     request_headers: recordedRequestHeaders(c),
@@ -2717,7 +2716,7 @@ function respond(c, recorder, runId, started, requestBody, status, responseBody,
     method: c.req.method,
     path: new URL(c.req.url).pathname,
     request_body: requestBody,
-    // F-1125 — one shared implementation with the engine's own emit(), so
+    // One shared implementation with the engine's own emit(), so
     // "which headers get recorded" has a single answer across every site.
     request_headers: recordedRequestHeaders(c),
     // Stripe's REST routes are not declared as twin actions: no criterion asks
@@ -2952,7 +2951,7 @@ var STRIPE_ROUTES = {
     bodyEncoding: "form",
     body: CUSTOMER_FIELDS_BODY
   }),
-  // F-1389 (ST-DECL-IN-001) — NOT `LIST_QUERY`. This is the one list surface
+  // ST-DECL-IN — NOT `LIST_QUERY`. This is the one list surface
   // that does not take `created`: `GetCustomersCustomerPaymentMethods` declares
   // `allow_redisplay, ending_before, expand, limit, starting_after, type` and
   // nothing else, and Stripe's measured disposition is `refuse` — it publishes
@@ -4113,7 +4112,7 @@ var toolArgumentSchemas = [
     schema: z.object({
       charge: z.string().min(1),
       amount: z.coerce.number().int().positive().optional(),
-      // F-1484 — Stripe's closed set, not a free string. `.optional()` is kept:
+      // Stripe's closed set, not a free string. `.optional()` is kept:
       // the vendor does not require the field, and narrowing the arity as well
       // as the value would refuse every refund the corpus actually makes.
       reason: z.enum(STRIPE_REFUND_REASONS).optional()
@@ -4409,7 +4408,7 @@ function createStripeTwinDefinition(opts) {
     // Session-wide middleware (the pre-port `session.use("*")` position):
     // mounted by the engine BEFORE its MCP routes, so failure injection and
     // idempotency cover /mcp, /mcp/call, /mcp/tools/:name exactly as the
-    // pre-port chassis did (F-684 review pin: an Idempotency-Key'd MCP
+    // pre-port chassis did (review pin: an Idempotency-Key'd MCP
     // create must replay, and injected rules on MCP paths must fire).
     middleware: (app, ctx) => {
       app.use("*", failureInjectionMiddleware(failureInjection, {
@@ -4419,7 +4418,7 @@ function createStripeTwinDefinition(opts) {
       }));
       app.use("*", idempotencyMiddleware(db, ctx.recorder, ctx.runId));
     },
-    // Frozen pre-port body parsing on the engine-owned surfaces (F-684
+    // Frozen pre-port body parsing on the engine-owned surfaces (review
     // review pin). Two pre-port readers existed: /admin/seed was strict
     // JSON with a null fallback (null → default seed via the schema
     // preprocess below), while the MCP dispatch surfaces used
@@ -4476,7 +4475,7 @@ function createStripeTwinDefinition(opts) {
         };
       },
       // Frozen tape shape: stripe's pre-port recorder never saw admin
-      // traffic — /admin/reset|seed emit no events (F-684 review pin).
+      // traffic — /admin/reset|seed emit no events (review pin).
       recorded: false,
       // Frozen stripe admin-gate 403 body.
       forbidden: () => forbidden("Forbidden")
@@ -4502,7 +4501,7 @@ function createStripeTwinDefinition(opts) {
     unsupported: () => unsupported(),
     errorEnvelope: stripeErrorEnvelope,
     auth: {
-      // F-712 pins: liberal bearer parsing ON (raw token + case-insensitive
+      // Frozen pins: liberal bearer parsing ON (raw token + case-insensitive
       // "bearer"); sid mismatch → 403; api_keys table lookup ahead of
       // provider-shaped verify + JWT; no path sid required (root mount);
       // expired-vs-invalid classified by the engine and rendered through

package/dist/{src-2M54EY2P.js → src-GWA7QVQS.js}

@@ -2,9 +2,9 @@ export { GMAIL_CHECKS } from './chunk-JM6VS62R.js';
 import { gmailErrorEnvelope, gmailSeedSchema, parseSeed, defaultSeedState, notFound, invalidArgument, checkFault, unsupported, validateSearchQuery, SEARCH_MAILBOX_MESSAGE_BUDGET, GmailError, parseSearchQuery, CATEGORY_LABELS, parseDate, parseSize, KNOWN_FIELDS, parseDuration, assertHasOperator } from './chunk-NJ246QPJ.js';
 export { DEFAULT_GMAIL_AGENT_EMAIL, GmailError, SEARCH_MAILBOX_MESSAGE_BUDGET, agentPathInboxMailbox, defaultSeedState, gmailErrorEnvelope, gmailSeedSchema, loadSeedFromEnv, parseSearchQuery, parseSeed, validateSearchQuery } from './chunk-NJ246QPJ.js';
 import './chunk-JWJYNAWI.js';
-import { routeInputDeclarer, integerInput, booleanInput, repeatedInput, mountDeclaredRoute, UndeclaredInputError, MalformedBodyError } from './chunk-2Q3P45LK.js';
-import { loadMcpToolFixture, deriveMcpToolTable, defineTwin, openTwinDatabase, createApp } from './chunk-WEKJIGUD.js';
-import './chunk-JUESW6G4.js';
+import { routeInputDeclarer, integerInput, booleanInput, repeatedInput, mountDeclaredRoute, UndeclaredInputError, MalformedBodyError } from './chunk-IZFM7W2V.js';
+import { loadMcpToolFixture, deriveMcpToolTable, defineTwin, openTwinDatabase, createApp } from './chunk-CFXEETE3.js';
+import './chunk-6KJC4BTO.js';
 import './chunk-SG6ZTIMT.js';
 import { createHash, createHmac, timingSafeEqual, randomBytes } from 'node:crypto';
 import { z } from 'zod';
@@ -2234,14 +2234,14 @@ var mcp_tools_list_meta_default = {
     derivation: "the upstream golden in full \u2014 all 13 tools, no subtraction. Produced by scripts/adopt-upstream-mcp-fixture.ts from fixtures/mcp-tools-list/gmail.raw.json at rawFileSha256 fd2b12868289aee89798c218a7ea2307fc475935d3d912c2a3c35b5d75ae21ee, whose bytes this file copies verbatim."
   },
   notes: [
-    "F-1400: these bytes are Google's, adopted rather than transcribed. The fixture that shipped before this one was the same endpoint read on 2026-07-20 and was never refreshed, so the twin advertised a seventeen-day-old listing and pome-cloud's mcp_diff reported 34 findings across 11 tools \u2014 all of them the vendor moving, none of them a twin defect. Produced by scripts/adopt-upstream-mcp-fixture.ts; `npm run gate:mcp-fixture -w @pome-sh/twin-gmail` re-derives and diffs.",
+    "These bytes are Google's, adopted rather than transcribed. The fixture that shipped before this one was the same endpoint read on 2026-07-20 and was never refreshed, so the twin advertised a seventeen-day-old listing and pome-cloud's mcp_diff reported 34 findings across 11 tools \u2014 all of them the vendor moving, none of them a twin defect. Produced by scripts/adopt-upstream-mcp-fixture.ts; `npm run gate:mcp-fixture -w @pome-sh/twin-gmail` re-derives and diffs.",
     "13 tools, which is every tool the capture carries. Unlike twin-slack's adoption there is no suppression list: nothing here is withheld, so raw.json is byte-identical to fixtures/mcp-tools-list/gmail.raw.json and the two shas agree.",
     "Descriptions, schemas and annotations are the capture's verbatim. Three of its claims are behavioural and were implemented in the same change rather than merely served: Message.bccRecipients, Label.messagesTotal/messagesUnread, and a list_labels that answers with ALL labels \u2014 the July listing said 'all user-defined labels' and the twin returned exactly those.",
     "list_labels takes no arguments in this listing. The July capture declared pageSize/pageToken and the twin paginated; Google has since removed both, along with nextPageToken from the response, so the twin answers every label in one page. LIMITS.md's MCP page-size row no longer names this tool.",
     "Authenticated tools/call success envelopes were unavailable; the reconstructed shapes live in mcp-tools-call.representative.json and the live unauthenticated error envelope in mcp-tools-call-unauth-error.raw.json.",
     "initialize returned protocolVersion=2025-03-26 (mcp-initialize.raw.json)."
   ],
-  canonicalFileSha256: "91d290ddb244d0736df1a6b81901aabf754b8d474c9343b487b65d3485dfaa19",
+  canonicalFileSha256: "d9a7348833d43a964d541d57336f571f93f7c55d1b43b2b773e9307443b73bf9",
   files: {
     raw: "mcp-tools-list.raw.json",
     canonical: "mcp-tools-list.canonical.json"
@@ -2514,7 +2514,7 @@ var implementations = {
         // `threads` above is the PAGE; this is the whole match set, which is
         // why the count is exact rather than an estimate. Google documents the
         // field as a lower bound, so an exact count satisfies the contract —
-        // and the advertised type is int64-as-STRING, not a number (F-1417).
+        // and the advertised type is int64-as-STRING, not a number.
         // Unconditional: it is the answer to "how many matched", and 0 matches
         // is an answer. Emitting it only when non-zero would make an absent
         // field mean two different things.
@@ -2545,7 +2545,7 @@ var implementations = {
     // takes no page arguments and offers no nextPageToken back. The July
     // listing this twin used to serve said "all user-defined labels", which is
     // what `listUserLabels` returns and what this handler used to call; the
-    // widening is Google's and F-1400 is the twin following it.
+    // widening is Google's and the twin follows it.
     handler: (domain, _args, ctx) => ({
       labels: domain.labels(identityFromSession(ctx.session).email).map(labelResult)
     })
@@ -2658,7 +2658,7 @@ function messageResult(message, format) {
     sender: message.from,
     toRecipients: message.to,
     ccRecipients: message.cc,
-    // F-1400: the adopted listing declares it on Message, so it is served
+    // The adopted listing declares it on Message, so it is served
     // wherever the other two recipient lists are — `get_message`, `get_thread`
     // and the threads `search_threads` nests.
     bccRecipients: message.bcc
@@ -2688,7 +2688,7 @@ function labelResult(label2) {
     labelId: label2.id,
     name: label2.name,
     ...Object.keys(color).length > 0 ? { color } : {},
-    // F-1400: the August listing declares the message counters beside the
+    // The August listing declares the message counters beside the
     // thread ones. The domain has counted both all along — the REST
     // serializer already published all four — so this was a projection that
     // dropped two fields, not a measurement the twin could not make.