@pome-sh/cli 0.26.9 → 0.26.10

package/dist/build-info.json

@@ -1,6 +1,6 @@
 {
   "package": "pome-sh",
-  "version": "0.26.9",
-  "git_sha": "67b8f65f860de730a4a9136d74c91f89b2110542",
-  "build_time": "2026-08-23T08:11:22.683Z"
+  "version": "0.26.10",
+  "git_sha": "dc130eecd4b26498dee164b4ba3ad4750b4c9f39",
+  "build_time": "2026-08-23T18:53:01.788Z"
 }

package/dist/{checks-NSHCXA6N.js → checks-3LVRPHOK.js}

@@ -1,8 +1,8 @@
-import { findManifestPath, readManifest } from './chunk-O5MCNQY4.js';
+import { findManifestPath, readManifest } from './chunk-CXGMLUZ4.js';
 import { getAvailablePort } from './chunk-XDU6TD4O.js';
 import { buildEgressAllowlist } from './chunk-CBFKZZBR.js';
-import './chunk-64NZFX4Z.js';
-import './chunk-JUESW6G4.js';
+import './chunk-BZO3YCJS.js';
+import './chunk-6KJC4BTO.js';
 import './chunk-SG6ZTIMT.js';
 import { serve } from '@hono/node-server';
 import { randomUUID, randomBytes } from 'node:crypto';
@@ -183,7 +183,7 @@ async function checkTwinReachable(_configDir) {
   });
   let harness;
   try {
-    const { bootTwin } = await import('./twinHarness-OC6VQRXO.js');
+    const { bootTwin } = await import('./twinHarness-6NVAKIOB.js');
     harness = await bootTwin({
       twin: "github",
       seedState: void 0,

package/dist/{chunk-IDNSKKEC.js → chunk-2ZGVDTJC.js}

@@ -179,7 +179,7 @@ var noReactionAdded = defineCheck({
   polarity: () => "negative",
   // The reaction name, because that is the literal this predicate compares
   // against `reactions[].name` — the line below has said so since the check
-  // shipped, and this field said `null` anyway (F-1157).
+  // shipped, and this field said `null` anyway.
   //
   // It is the sharpest case in the vocabulary for why that mattered. A NEGATIVE
   // criterion asserting a scanned literal is absent reads a redactor's work as

package/dist/{chunk-RG32W733.js → chunk-6IVXTU67.js}

@@ -1,6 +1,6 @@
-import { readManifest, normalizeManifestTwins } from './chunk-O5MCNQY4.js';
-import { createHostedClient, perTwinReturnedByCloud, parseTaskFile, runAgentCommand, writeRunArtifactsCore, toTwinHttpEvent, redactJsonl, uploadRunBlobs, scoreFromFinalizeResponse, scoreStatus, evaluationCounts } from './chunk-X7V5DMA7.js';
-import { MOUNTED_TWINS, HostedAuthError, HostedDiscardRefusedError, HostedQuotaError, HostedOrchError, HostedTrialError, agentResponseSchema } from './chunk-64NZFX4Z.js';
+import { readManifest, normalizeManifestTwins } from './chunk-CXGMLUZ4.js';
+import { createHostedClient, perTwinReturnedByCloud, parseTaskFile, runAgentCommand, writeRunArtifactsCore, toTwinHttpEvent, redactJsonl, uploadRunBlobs, scoreFromFinalizeResponse, scoreStatus, evaluationCounts } from './chunk-ANKO3RCB.js';
+import { MOUNTED_TWINS, HostedAuthError, HostedDiscardRefusedError, HostedQuotaError, HostedOrchError, HostedTrialError, agentResponseSchema } from './chunk-BZO3YCJS.js';
 import { redactSecrets, redactEvent } from './chunk-SG6ZTIMT.js';
 import { randomUUID, createHash } from 'node:crypto';
 import { rm, readFile, stat, mkdir, writeFile, chmod, mkdtemp, readdir, rename } from 'node:fs/promises';

package/dist/{chunk-JUESW6G4.js → chunk-6KJC4BTO.js}

@@ -18,7 +18,7 @@ var recorderEventObjectSchema = z.object({
   // the correlator (dynamic grouping: "this event landed in Step stp_xyz").
   // 90% of events use only one; both can coexist.
   //
-  // W3 vocab (FDRS-653): `task_step_id` is canonical; `scenario_step_id` is
+  // Task vocab: `task_step_id` is canonical; `scenario_step_id` is
   // the 0.3.0-era spelling. BOTH stay in the schema for the tolerant-reader
   // window — this row shape is the frozen v1 trace format and its emitters
   // (twin runtimes, shipped CLIs on vendored 0.3.0) still write the old key.
@@ -34,7 +34,7 @@ var recorderEventObjectSchema = z.object({
   method: z.string().min(1),
   path: z.string(),
   request_body: z.unknown(),
-  // F-1125 — the request headers as received, keys lowercased by the runtime.
+  // The request headers as received, keys lowercased by the runtime.
   //
   // Recorded WHOLESALE rather than through an allowlist. An allowlist is a
   // narrowing no downstream consumer can lift and no task author can extend,
@@ -46,14 +46,14 @@ var recorderEventObjectSchema = z.object({
   // by key. Asserted both ways in `packages/sdk/test/redaction.test.ts`: the
   // bearer must not survive, and `x-payment` must.
   //
-  // Optional, not nullable: ABSENT means this row predates F-1125, and a
+  // Optional, not nullable: ABSENT means this row predates the field, and a
   // present-but-empty map would erase that distinction. A required field here
   // would be far worse than a missing one — `twinHttpEventSchema` is the only
   // gate into the cloud's tape and a row that fails it is dropped SILENTLY, so
   // every recording an older CLI wrote would arrive as an empty tape, which for
   // a negative criterion is a free pass.
   request_headers: z.record(z.string(), z.string()).optional(),
-  // F-1125 — the twin ACTION this call invoked, when the twin declares one for
+  // The twin ACTION this call invoked, when the twin declares one for
   // the surface that served it. This is the field that stops a tape check from
   // reverse-engineering a tool name out of an MCP transport path.
   //
@@ -335,7 +335,7 @@ var otelSpanEventObjectSchema = z.object({
   // ── shared event-union base (mirrors `eventBaseShape` in recorder-events.ts) ─
   ts: z.string().datetime(),
   event_id: canonicalSpanIdSchema,
-  // F-1200 — `parent_event_id` replaces `parent_id`. For THIS kind the field is
+  // `parent_event_id` replaces `parent_id`. For THIS kind the field is
   // fully redundant with `parent_span_id` (the invariant below pins them
   // equal), so the tolerant read needs no `parent_id` lookup at all: a row
   // written under either spelling normalizes to the same value, derived from

package/dist/{chunk-X7V5DMA7.js → chunk-ANKO3RCB.js}

@@ -1,9 +1,9 @@
-import { criterionSchema, finalizeResponseSchema, HostedDiscardRefusedError, HostedOrchError, HostedAuthError, HostedQuotaError, submitResultResponseSchema, createEvalSessionResponseSchema, createSessionResponseSchema, sessionPublicSchema } from './chunk-64NZFX4Z.js';
-import { seedSchema, parseSeed, defaultSeedState as defaultSeedState$2 } from './chunk-B22TYIEM.js';
+import { criterionSchema, finalizeResponseSchema, HostedDiscardRefusedError, HostedOrchError, HostedAuthError, HostedQuotaError, submitResultResponseSchema, createEvalSessionResponseSchema, createSessionResponseSchema, sessionPublicSchema } from './chunk-BZO3YCJS.js';
+import { seedSchema, parseSeed, defaultSeedState as defaultSeedState$2 } from './chunk-QXQAVKTE.js';
 import { gmailSeedSchema, defaultSeedState } from './chunk-NJ246QPJ.js';
 import { linearSeedSchema, defaultSeedState as defaultSeedState$1 } from './chunk-IZIZC7ZW.js';
-import { isTwinName, TWIN_REGISTRY } from './chunk-CKN743FJ.js';
-import { toTwinHttpEventRow } from './chunk-WEKJIGUD.js';
+import { isTwinName, TWIN_REGISTRY } from './chunk-EIUCTFQV.js';
+import { toTwinHttpEventRow } from './chunk-CFXEETE3.js';
 import { redactEvent, redactSecrets } from './chunk-SG6ZTIMT.js';
 import { mkdir, appendFile, writeFile, readFile } from 'node:fs/promises';
 import { existsSync } from 'node:fs';

package/dist/{chunk-64NZFX4Z.js → chunk-BZO3YCJS.js}

@@ -1,4 +1,4 @@
-import { twinIdSchema } from './chunk-JUESW6G4.js';
+import { twinIdSchema } from './chunk-6KJC4BTO.js';
 import { z } from 'zod';
 
 var SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;

package/dist/{chunk-WEKJIGUD.js → chunk-CFXEETE3.js}

@@ -970,13 +970,13 @@ function buildEventCore(c, deps, fields) {
     task_step_id: stepId,
     scenario_step_id: stepId,
     step_id: null,
-    // FDRS-402 adapter-rich path — per-twin pin, see recorder.ts (F-682).
+    // adapter-rich path — per-twin pin, see recorder.ts.
     tool_call_id: deps.definition.stampToolCallId ? correlationHeader : null,
     method: c.req.method,
     path: new URL(c.req.url).pathname,
     request_body: fields.requestBody,
     request_headers: recordedRequestHeaders(c),
-    // F-1125 — the whole reason the field exists. This surface is where the
+    // The whole reason the field exists. This surface is where the
     // tool name used to be reachable only by digging it out of `request_body`
     // on a `/mcp` path; a check that had to do that was reverse-engineering
     // transport, and getting it wrong false-passes a negative criterion.
@@ -1176,7 +1176,7 @@ function createRecorderHandle(options) {
       task_step_id: stepId,
       scenario_step_id: stepId,
       step_id: null,
-      // FDRS-402 adapter-rich path: only twins that pin `stampToolCallId`
+      // adapter-rich path: only twins that pin `stampToolCallId`
       // persist the header here (github); the default tape stamps null.
       tool_call_id: options.stampToolCallId ? correlationHeader : null,
       method: c.req.method,
@@ -1478,7 +1478,7 @@ function failureInjectionMiddleware(store, options) {
         method,
         path: rawPath,
         request_body: requestBody,
-        // F-1125 — same capture policy as the engine's emit(); an injected
+        // Same capture policy as the engine's emit(); an injected
         // fault must not be the one row a header-reading check cannot see.
         request_headers: recordedRequestHeaders(c),
         // Injection is transport-level: it intercepts a (method, path) tuple,

package/dist/{chunk-O5MCNQY4.js → chunk-CXGMLUZ4.js}

@@ -1,4 +1,4 @@
-import { HostedOrchError, manifestSchema, deriveAgentSlug, SLUG_RE } from './chunk-64NZFX4Z.js';
+import { HostedOrchError, manifestSchema, deriveAgentSlug, SLUG_RE } from './chunk-BZO3YCJS.js';
 import { readFile, writeFile } from 'node:fs/promises';
 import { resolve, join, dirname } from 'node:path';
 import { stringify, parse } from 'yaml';

package/dist/{chunk-CKN743FJ.js → chunk-EIUCTFQV.js}

@@ -39,7 +39,7 @@ var TWIN_REGISTRY = {
         defaultSeedState,
         GitHubDomain,
         openGitHubCloneDatabase
-      } = await import('./src-UEO2KIBJ.js');
+      } = await import('./src-JJNS46T6.js');
       const db = openGitHubCloneDatabase();
       const domain = new GitHubDomain(db);
       domain.seed(seedState === void 0 ? defaultSeedState() : seedState);
@@ -59,9 +59,9 @@ var TWIN_REGISTRY = {
     envName: "SLACK",
     defaultPort: 3333,
     version: package_default2.version,
-    defaultSeed: async () => (await import('./src-4E5WAGNJ.js')).defaultSeedState(),
+    defaultSeed: async () => (await import('./src-L6F5YXSP.js')).defaultSeedState(),
     async boot({ seedState, runId, recorder }) {
-      const { createSlackTwinApp, openSlackTwinDatabase, SlackDomain } = await import('./src-4E5WAGNJ.js');
+      const { createSlackTwinApp, openSlackTwinDatabase, SlackDomain } = await import('./src-L6F5YXSP.js');
       const db = openSlackTwinDatabase(":memory:");
       const domain = new SlackDomain(db);
       domain.applySeed(seedState);
@@ -84,10 +84,10 @@ var TWIN_REGISTRY = {
     envName: "STRIPE",
     defaultPort: 3333,
     version: package_default3.version,
-    defaultSeed: async () => (await import('./src-AAF7TZMO.js')).defaultSeed(),
+    defaultSeed: async () => (await import('./src-FXRQSKBK.js')).defaultSeed(),
     async boot({ seedState, runId, recorder, twinBaseUrl }) {
-      const stripeTwin = await import('./src-AAF7TZMO.js');
-      const { createApp } = await import('./server-TPAFPKLC.js');
+      const stripeTwin = await import('./src-FXRQSKBK.js');
+      const { createApp } = await import('./server-TK5YBK6E.js');
       const {
         applySeed: applyStripeSeed,
         createTwinStripeApp,
@@ -128,9 +128,9 @@ var TWIN_REGISTRY = {
     portEnvName: "GMAIL_TWIN_PORT",
     tokenEnvName: "POME_GMAIL_TOKEN",
     version: package_default4.version,
-    defaultSeed: async () => (await import('./src-2M54EY2P.js')).defaultSeedState(),
+    defaultSeed: async () => (await import('./src-GWA7QVQS.js')).defaultSeedState(),
     async boot({ seedState, runId, recorder }) {
-      const { createGmailTwinApp, GmailDomain, openGmailTwinDatabase, parseSeed } = await import('./src-2M54EY2P.js');
+      const { createGmailTwinApp, GmailDomain, openGmailTwinDatabase, parseSeed } = await import('./src-GWA7QVQS.js');
       const db = openGmailTwinDatabase(":memory:");
       const seed = parseSeed(seedState);
       const domain = new GmailDomain(db);
@@ -149,7 +149,7 @@ var TWIN_REGISTRY = {
     portEnvName: "LINEAR_TWIN_PORT",
     tokenEnvName: "POME_LINEAR_TOKEN",
     version: package_default5.version,
-    defaultSeed: async () => (await import('./src-Q4MBHYC5.js')).defaultSeedState(),
+    defaultSeed: async () => (await import('./src-Q4JNJE5S.js')).defaultSeedState(),
     async boot({ seedState, runId, recorder }) {
       const {
         createLinearTwinApp,
@@ -157,7 +157,7 @@ var TWIN_REGISTRY = {
         LinearDomain,
         openLinearTwinDatabase,
         parseSeed
-      } = await import('./src-Q4MBHYC5.js');
+      } = await import('./src-Q4JNJE5S.js');
       const db = openLinearTwinDatabase(":memory:");
       const seed = parseSeed(seedState);
       const domain = new LinearDomain(db);
@@ -173,7 +173,7 @@ var TWIN_REGISTRY = {
   }
 };
 async function createGitHubSmokeApp() {
-  const { createGitHubCloneApp } = await import('./src-UEO2KIBJ.js');
+  const { createGitHubCloneApp } = await import('./src-JJNS46T6.js');
   return createGitHubCloneApp();
 }
 function defaultPortFor(twin, env = process.env) {

package/dist/{chunk-5EV4SG3F.js → chunk-FQGR7KDT.js}

@@ -1,8 +1,8 @@
 import { getAvailablePort } from './chunk-XDU6TD4O.js';
 import { buildEgressAllowlist, readBlockedEgress } from './chunk-CBFKZZBR.js';
-import { parseTaskFile, seedStateForTwin, runAgentCommand, writeRunArtifactsCore } from './chunk-X7V5DMA7.js';
-import { createRecorder, bootTwin } from './chunk-5EE7YWA3.js';
-import { eventSchema } from './chunk-JUESW6G4.js';
+import { parseTaskFile, seedStateForTwin, runAgentCommand, writeRunArtifactsCore } from './chunk-ANKO3RCB.js';
+import { createRecorder, bootTwin } from './chunk-KIXYRPVY.js';
+import { eventSchema } from './chunk-6KJC4BTO.js';
 import { redactSecrets, redactEvent } from './chunk-SG6ZTIMT.js';
 import { serve } from '@hono/node-server';
 import { randomUUID, randomBytes } from 'node:crypto';

package/dist/{chunk-2Q3P45LK.js → chunk-IZFM7W2V.js}

@@ -132,7 +132,7 @@ function declareRouteInputs(spec) {
 function routeInputDeclarer(undeclared) {
   return (spec) => {
     if (spec.undeclared !== void 0) {
-      throw new Error(`route-inputs: ${spec.method} ${spec.path} sets undeclared: '${spec.undeclared}' on its own spec, but its twin already rules '${undeclared}' for every route \u2014 the disposition is one ruling per twin (F-1372)`);
+      throw new Error(`route-inputs: ${spec.method} ${spec.path} sets undeclared: '${spec.undeclared}' on its own spec, but its twin already rules '${undeclared}' for every route \u2014 the disposition is one ruling per twin`);
     }
     return declareRouteInputs({ ...spec, undeclared });
   };

package/dist/{chunk-5EE7YWA3.js → chunk-KIXYRPVY.js}

@@ -1,5 +1,5 @@
-import { TWIN_NAMES, isTwinName, TWIN_REGISTRY } from './chunk-CKN743FJ.js';
-import { createFileBackedRecorderStore, createRecorderStore } from './chunk-WEKJIGUD.js';
+import { TWIN_NAMES, isTwinName, TWIN_REGISTRY } from './chunk-EIUCTFQV.js';
+import { createFileBackedRecorderStore, createRecorderStore } from './chunk-CFXEETE3.js';
 
 // src/recorder/recorder.ts
 function createRecorder(options = {}) {

package/dist/{chunk-B22TYIEM.js → chunk-QXQAVKTE.js}

@@ -19,7 +19,7 @@ var seedSchema = z.object({
       color: z.string().default("ededed"),
       description: z.string().default("")
     })).default([]),
-    // F-1500 — `renamed_from` is how a seed expresses a MOVE, and with it the
+    // `renamed_from` is how a seed expresses a MOVE, and with it the
     // `status: "renamed"` the row type has always declared and no world could
     // reach. A seeded branch is created from the default branch and inherits
     // every path, and a plain `files[]` entry can only add or overwrite, so
@@ -65,7 +65,7 @@ var seedSchema = z.object({
         });
       }
     })).default([]),
-    // F-1421 — milestones, tags and releases are repository-level entities the
+    // Milestones, tags and releases are repository-level entities the
     // twin already SERVES (`GET /milestones`, `/tags`, `/releases`,
     // `/releases/latest`, `/releases/tags/:tag`) and the seed could not
     // express. Zod strips unknown keys, so a seed naming one reached the
@@ -111,7 +111,7 @@ var seedSchema = z.object({
       labels: z.array(z.string().min(1)).default([]),
       assignees: z.array(z.string().min(1)).default([]),
       // The issue's conversation timeline, served at
-      // `GET /repos/:o/:r/issues/:n/comments` (F-1421). `author` is
+      // `GET /repos/:o/:r/issues/:n/comments`. `author` is
       // seeded honestly rather than taken from the write path, which
       // stamps every comment `pome-agent`: a world in which the agent
       // under test wrote every comment on the issue it is being asked to
@@ -144,9 +144,9 @@ var seedSchema = z.object({
         state: z.enum(["error", "failure", "pending", "success"]).default("success"),
         description: z.string().default("")
       })).default([]),
-      // F-1421 — the PR's CONVERSATION timeline. Same table, same route
+      // The PR's CONVERSATION timeline. Same table, same route
       // and same number space as an issue's comments, because GitHub
-      // models a pull request as an issue (F-1151). This is the third
+      // models a pull request as an issue. This is the third
       // thing a reader could call "a comment on the PR" and the seed
       // keeps all three apart: `reviews[].body` is the prose on a review
       // verdict, `review_comments[]` below is anchored to a file and
@@ -155,7 +155,7 @@ var seedSchema = z.object({
         body: z.string().min(1),
         author: z.string().min(1).optional()
       })).default([]),
-      // F-1421 — inline review comments, served at
+      // Inline review comments, served at
       // `GET /repos/:o/:r/pulls/:n/comments`. Seeded through the domain's
       // own write path, so `path` must name a file the PR changes and
       // `line` must exist in it: a seeded review comment is one

package/dist/{runDemo-SA55CMWG.js → runDemo-XO5R5QTM.js}

@@ -1,18 +1,18 @@
 import { newGroupId, reassuranceBox, twinReadyLine, trialsHeaderLine, trialLine, summaryLines, evaluatingLine, criterionPhrase } from './chunk-RGZBC7NF.js';
 import { DemoCapacityError, capacityLabel, parseCapacityMarker, capacityKindFrom } from './chunk-ZX4WNSZ5.js';
-import { runTask, demoTaskPath, DEMO_TASK_NAME, DEMO_REPO } from './chunk-5EV4SG3F.js';
+import { runTask, demoTaskPath, DEMO_TASK_NAME, DEMO_REPO } from './chunk-FQGR7KDT.js';
 import { getAvailablePort } from './chunk-XDU6TD4O.js';
 import './chunk-CBFKZZBR.js';
-import { createHostedClient, parseTaskFile, uploadRunBlobs, scoreFromFinalizeResponse, scoreStatus, outcomeOf } from './chunk-X7V5DMA7.js';
+import { createHostedClient, parseTaskFile, uploadRunBlobs, scoreFromFinalizeResponse, scoreStatus, outcomeOf } from './chunk-ANKO3RCB.js';
 import './chunk-NW7HGA2K.js';
-import { HostedQuotaError, HostedOrchError } from './chunk-64NZFX4Z.js';
-import './chunk-B22TYIEM.js';
+import { HostedQuotaError, HostedOrchError } from './chunk-BZO3YCJS.js';
+import './chunk-QXQAVKTE.js';
 import './chunk-NJ246QPJ.js';
 import './chunk-IZIZC7ZW.js';
-import { bootTwin } from './chunk-5EE7YWA3.js';
-import './chunk-CKN743FJ.js';
-import './chunk-WEKJIGUD.js';
-import './chunk-JUESW6G4.js';
+import { bootTwin } from './chunk-KIXYRPVY.js';
+import './chunk-EIUCTFQV.js';
+import './chunk-CFXEETE3.js';
+import './chunk-6KJC4BTO.js';
 import './chunk-SG6ZTIMT.js';
 import { readFile } from 'node:fs/promises';
 import { join } from 'node:path';

package/dist/{runTrialGroup-IXIVA2R3.js → runTrialGroup-CLJJOO4J.js}

@@ -1,15 +1,15 @@
 import { newGroupId, criterionPhrase } from './chunk-RGZBC7NF.js';
-import { runTaskHosted, resolveRunAgentIdentity } from './chunk-RG32W733.js';
-import './chunk-O5MCNQY4.js';
-import { createHostedClient, parseTaskFile, outcomeOf } from './chunk-X7V5DMA7.js';
+import { runTaskHosted, resolveRunAgentIdentity } from './chunk-6IVXTU67.js';
+import './chunk-CXGMLUZ4.js';
+import { createHostedClient, parseTaskFile, outcomeOf } from './chunk-ANKO3RCB.js';
 import './chunk-NW7HGA2K.js';
-import { HostedQuotaError, HostedTrialError } from './chunk-64NZFX4Z.js';
-import './chunk-B22TYIEM.js';
+import { HostedQuotaError, HostedTrialError } from './chunk-BZO3YCJS.js';
+import './chunk-QXQAVKTE.js';
 import './chunk-NJ246QPJ.js';
 import './chunk-IZIZC7ZW.js';
-import './chunk-CKN743FJ.js';
-import './chunk-WEKJIGUD.js';
-import './chunk-JUESW6G4.js';
+import './chunk-EIUCTFQV.js';
+import './chunk-CFXEETE3.js';
+import './chunk-6KJC4BTO.js';
 import './chunk-SG6ZTIMT.js';
 import { randomUUID } from 'node:crypto';
 import { readFile } from 'node:fs/promises';

package/dist/{server-TPAFPKLC.js → server-TK5YBK6E.js}

@@ -1,3 +1,3 @@
-export { FAILURE_INJECTION_OVERRIDE_KEY, POME_RECORDER_EVENTS_PATH, PROVIDER_SHAPED_TEAM_ID, TwinBootError, TwinError, UnknownToolError, bearerAuth, createAdminGate, createApp, createFailureInjectionStore, createFileBackedRecorderStore, createRecorderHandle, createRecorderStore, created, ensureTwinAuthSecret, failureInjectionMiddleware, failureInjectionRuleSchema, formTokenResolver, isLoopbackHost, mintProviderToken, ok, queryTokenResolver, recordedRequestHeaders, requireAdminAuth, resolveAuthSecret, resolveRecorderStore, serve, setClientIp, setRecordedTool, toTwinHttpEventRow, twinBuildInfo, verifyProviderToken } from './chunk-WEKJIGUD.js';
-import './chunk-JUESW6G4.js';
+export { FAILURE_INJECTION_OVERRIDE_KEY, POME_RECORDER_EVENTS_PATH, PROVIDER_SHAPED_TEAM_ID, TwinBootError, TwinError, UnknownToolError, bearerAuth, createAdminGate, createApp, createFailureInjectionStore, createFileBackedRecorderStore, createRecorderHandle, createRecorderStore, created, ensureTwinAuthSecret, failureInjectionMiddleware, failureInjectionRuleSchema, formTokenResolver, isLoopbackHost, mintProviderToken, ok, queryTokenResolver, recordedRequestHeaders, requireAdminAuth, resolveAuthSecret, resolveRecorderStore, serve, setClientIp, setRecordedTool, toTwinHttpEventRow, twinBuildInfo, verifyProviderToken } from './chunk-CFXEETE3.js';
+import './chunk-6KJC4BTO.js';
 export { redactEvent, redactSecrets } from './chunk-SG6ZTIMT.js';

package/dist/src/cli/main.js

@@ -1,24 +1,24 @@
 #!/usr/bin/env node
-import { DEFAULT_CONTROL_PLANE_URL, DEFAULT_DASHBOARD_URL, clearLocalCredentials, friendlyHostedError, runSessionCreate, runSessionList, runSessionStop, resolveCredentials, runTaskHosted, discoverRunSet, VERDICT_ARTIFACT_VERSION, persistCredentialsAfterLogin, DEFAULT_DOCS_SITE_ORIGIN, resolveSeams, resolveCachedAgentId, readLinkCache, postAgentResolver, writeLinkCache, ensurePomeGitignored } from '../../chunk-RG32W733.js';
-import { readManifest, writeManifest, MANIFEST_JSON, readRequiredManifest, normalizeManifestTwins } from '../../chunk-O5MCNQY4.js';
-import { assetPath, runTask, resolvePackageRoot, DEMO_TASK_NAME, demoTaskPath } from '../../chunk-5EV4SG3F.js';
+import { DEFAULT_CONTROL_PLANE_URL, DEFAULT_DASHBOARD_URL, clearLocalCredentials, friendlyHostedError, runSessionCreate, runSessionList, runSessionStop, resolveCredentials, runTaskHosted, discoverRunSet, VERDICT_ARTIFACT_VERSION, persistCredentialsAfterLogin, DEFAULT_DOCS_SITE_ORIGIN, resolveSeams, resolveCachedAgentId, readLinkCache, postAgentResolver, writeLinkCache, ensurePomeGitignored } from '../../chunk-6IVXTU67.js';
+import { readManifest, writeManifest, MANIFEST_JSON, readRequiredManifest, normalizeManifestTwins } from '../../chunk-CXGMLUZ4.js';
+import { assetPath, runTask, resolvePackageRoot, DEMO_TASK_NAME, demoTaskPath } from '../../chunk-FQGR7KDT.js';
 import '../../chunk-XDU6TD4O.js';
 import '../../chunk-CBFKZZBR.js';
-import { parseTaskFile, scoreStatus, runScoreLine, readLatestRun, readMetaSummary, outcomeOf, readConfigTwins, scoreCountsSummary, markerFor, criterionMarkerLabel, twinSkipSuffix, readCodeCriteria, createHostedClient, toTwinHttpEvent, redactJsonl, scoreFromFinalizeResponse, parseGitHubSeedState, uploadRunBlobs, isPreSatisfied } from '../../chunk-X7V5DMA7.js';
+import { parseTaskFile, scoreStatus, runScoreLine, readLatestRun, readMetaSummary, outcomeOf, readConfigTwins, scoreCountsSummary, markerFor, criterionMarkerLabel, twinSkipSuffix, readCodeCriteria, createHostedClient, toTwinHttpEvent, redactJsonl, scoreFromFinalizeResponse, parseGitHubSeedState, uploadRunBlobs, isPreSatisfied } from '../../chunk-ANKO3RCB.js';
 import '../../chunk-NW7HGA2K.js';
-import { MOUNTED_TWINS, deriveAgentSlug, exitCodeFor, HostedUsageError, HostedOrchError, HostedAuthError, HostedQuotaError } from '../../chunk-64NZFX4Z.js';
+import { MOUNTED_TWINS, deriveAgentSlug, exitCodeFor, HostedUsageError, HostedOrchError, HostedAuthError, HostedQuotaError } from '../../chunk-BZO3YCJS.js';
 import { TAPE_ASSERTABLE_TOOLS } from '../../chunk-C4BVTUA3.js';
-import { seedSchema } from '../../chunk-B22TYIEM.js';
-import { SLACK_CHECKS } from '../../chunk-IDNSKKEC.js';
+import { seedSchema } from '../../chunk-QXQAVKTE.js';
+import { SLACK_CHECKS } from '../../chunk-2ZGVDTJC.js';
 import { GMAIL_CHECKS } from '../../chunk-JM6VS62R.js';
 import '../../chunk-NJ246QPJ.js';
 import { LINEAR_CHECKS } from '../../chunk-XBT6ZLBG.js';
 import '../../chunk-IZIZC7ZW.js';
 import { oneOf, defineCheck, repoRef, VACUITY_SENTINEL_NUMBER, childStatePath, VACUITY_SENTINEL, statePath, templateSlots, renderCheck, checksDigest, checkPattern, checkNearMissPattern } from '../../chunk-JWJYNAWI.js';
-import '../../chunk-5EE7YWA3.js';
-import { TWIN_NAME_LIST, isTwinName, createGitHubSmokeApp } from '../../chunk-CKN743FJ.js';
-import '../../chunk-WEKJIGUD.js';
-import { isLegacyEventRow, eventSchema } from '../../chunk-JUESW6G4.js';
+import '../../chunk-KIXYRPVY.js';
+import { TWIN_NAME_LIST, isTwinName, createGitHubSmokeApp } from '../../chunk-EIUCTFQV.js';
+import '../../chunk-CFXEETE3.js';
+import { isLegacyEventRow, eventSchema } from '../../chunk-6KJC4BTO.js';
 import { redactEvent, redactSecrets } from '../../chunk-SG6ZTIMT.js';
 import { Command } from 'commander';
 import { existsSync, readFileSync, realpathSync, statSync, constants } from 'node:fs';
@@ -850,7 +850,7 @@ async function throwForStatus(res) {
 
 // src/task/seed-verifier.ts
 async function verifySeedWithTwin(seed) {
-  const { GitHubDomain, openGitHubCloneDatabase } = await import('../../src-UEO2KIBJ.js');
+  const { GitHubDomain, openGitHubCloneDatabase } = await import('../../src-JJNS46T6.js');
   const db = openGitHubCloneDatabase(":memory:");
   try {
     new GitHubDomain(db).seed(seed);
@@ -2213,7 +2213,7 @@ var toolWasCalled = defineCheck({
   params: { tool: toolActionName },
   substrate: "tape",
   // Nothing in the seed can satisfy it and only the examinee acting can, which
-  // is the whole property: declared, never inferred from the English (F-1070).
+  // is the whole property: declared, never inferred from the English.
   polarity: () => "positive",
   // The action name IS a caller-supplied literal hunted for in a substrate, so
   // it is declared — and the engine's door-side skip matters MORE here than on
@@ -2292,7 +2292,7 @@ var GITHUB_CHECKS = [
   // that assert about the RUN rather than the world it left behind.
   noUnsupportedEndpoint,
   toolNeverCalled,
-  // F-1338. Adjacent to its prohibition for the reason the two repo-scoped
+  // Adjacent to its prohibition for the reason the two repo-scoped
   // deltas sit together above: an author reaching for one usually wants to see
   // the other, and these two are the same predicate read in opposite
   // directions off one closed set of actions. It is appended rather than
@@ -4651,7 +4651,7 @@ var DEFAULT_AGENT_COMMAND = `node ${DEFAULT_AGENT_FILE}`;
 var MANIFEST_SCHEMA_URL = "https://pome.sh/schemas/v1/pome.json";
 var MAX_UNREADABLE_PATHS_SHOWN = 5;
 function readPackageVersion() {
-  if ("0.26.9".length > 0) return "0.26.9";
+  if ("0.26.10".length > 0) return "0.26.10";
   try {
     const here = dirname(fileURLToPath(import.meta.url));
     const candidates = [
@@ -5096,7 +5096,7 @@ function createProgram() {
         return;
       }
       {
-        const { runDoctorChecks } = await import('../../checks-NSHCXA6N.js');
+        const { runDoctorChecks } = await import('../../checks-3LVRPHOK.js');
         const { renderDoctorReport } = await import('../../render-ZQQ4UMNO.js');
         const doctorReport = await runDoctorChecks({ mode: useLocal ? "full" : "hosted" });
         if (!doctorReport.ok) {
@@ -5134,7 +5134,7 @@ function createProgram() {
               taskForRuns.config.runs
             );
             if (k > 1) {
-              const { runTrialGroup } = await import('../../runTrialGroup-IXIVA2R3.js');
+              const { runTrialGroup } = await import('../../runTrialGroup-CLJJOO4J.js');
               const fileForRerun = relative(process.cwd(), file);
               const rerunCommand = defaultTask ? options.trials !== void 0 ? `pome run -n ${k}` : "pome run" : `pome run ${fileForRerun && !fileForRerun.startsWith("..") ? fileForRerun : file} -n ${k}`;
               const groupResult = await runTrialGroup({
@@ -5228,7 +5228,7 @@ function createProgram() {
         process.exitCode = 5;
         return;
       }
-      const { runDemo } = await import('../../runDemo-SA55CMWG.js');
+      const { runDemo } = await import('../../runDemo-XO5R5QTM.js');
       const result = await runDemo({
         apiBase: opts.apiUrl.replace(/\/$/, ""),
         dashboardBase: process.env.POME_DASHBOARD_URL ?? DEFAULT_DASHBOARD_URL,
@@ -5246,7 +5246,7 @@ function createProgram() {
   program.command("doctor").description(
     "Check the agent\u2194twin wiring: pome.json (or pome.yaml) present + valid, the local twin boots + serves, requests routed to the twin (not a hardcoded production host), egress floor active. On failure prints one named cause (file:line where knowable) + one concrete fix and exits non-zero."
   ).action(async () => {
-    const { runDoctorChecks } = await import('../../checks-NSHCXA6N.js');
+    const { runDoctorChecks } = await import('../../checks-3LVRPHOK.js');
     const { renderDoctorReport } = await import('../../render-ZQQ4UMNO.js');
     const report = await runDoctorChecks();
     for (const line of renderDoctorReport(report, { passNote: true })) console.error(line);
@@ -5422,7 +5422,7 @@ function createProgram() {
   ).description(
     "Start a standalone twin as a long-lived foreground server (Ctrl-C to stop)"
   ).action(async (name, options) => {
-    const { runTwinStartCommand } = await import('../../twinStart-2VP545N6.js');
+    const { runTwinStartCommand } = await import('../../twinStart-WIT4UVAC.js');
     await runTwinStartCommand(name, options);
   });
   twin.command("reset").argument("[name]", "Twin name (default: github)", "github").description("Reset standalone twin state").action(async (name) => {