@pome-sh/cli 0.26.9 → 0.26.10

package/dist/{src-UEO2KIBJ.js → src-JJNS46T6.js}

@@ -1,9 +1,9 @@
 import './chunk-C4BVTUA3.js';
-import { defaultSeedState, parseSeed } from './chunk-B22TYIEM.js';
-export { defaultSeedState, parseSeed, seedSchema } from './chunk-B22TYIEM.js';
-import { routeInputDeclarer, integerInput, mountDeclaredRoute, UndeclaredInputError, MalformedBodyError } from './chunk-2Q3P45LK.js';
-import { loadMcpToolFixture, defineTwin, twinBuildInfo, deriveMcpToolTable, UnknownToolError, openTwinDatabase, createApp, typeDisagreements } from './chunk-WEKJIGUD.js';
-import './chunk-JUESW6G4.js';
+import { defaultSeedState, parseSeed } from './chunk-QXQAVKTE.js';
+export { defaultSeedState, parseSeed, seedSchema } from './chunk-QXQAVKTE.js';
+import { routeInputDeclarer, integerInput, mountDeclaredRoute, UndeclaredInputError, MalformedBodyError } from './chunk-IZFM7W2V.js';
+import { loadMcpToolFixture, defineTwin, twinBuildInfo, deriveMcpToolTable, UnknownToolError, openTwinDatabase, createApp, typeDisagreements } from './chunk-CFXEETE3.js';
+import './chunk-6KJC4BTO.js';
 import './chunk-SG6ZTIMT.js';
 import { z, ZodError } from 'zod';
 import { createHash, randomUUID } from 'node:crypto';
@@ -26,7 +26,7 @@ var commentBody = { body: z.string().min(1) };
 var GITHUB_ROUTES = {
   // ----- search -----
   //
-  // GH-DECL-IN-001 / GH-DECL-IN-002 (F-1389) — all five take `q` and nothing but
+  // GH-DECL-IN-001 / GH-DECL-IN-002 — all five take `q` and nothing but
   // `q`. GitHub's search API has ONE scoping input and encodes every filter as a
   // qualifier inside it (`repo:octocat/hello-world`, `state:open`); its OpenAPI
   // declares `q, sort, order, per_page, page`. `/search/code`,
@@ -76,7 +76,7 @@ var GITHUB_ROUTES = {
     method: "POST",
     path: "/user/repos",
     bodyEncoding: "json",
-    // F-1389 (GH-DECL-IN-003) — no `owner`. This surface creates a repository
+    // GH-DECL-IN — no `owner`. This surface creates a repository
     // for the AUTHENTICATED USER, which is its whole meaning;
     // `repos/create-for-authenticated-user` declares 23 body properties and
     // `owner` is not one. `routes.ts` passed the body straight to
@@ -129,12 +129,12 @@ var GITHUB_ROUTES = {
       content: z.string(),
       branch: z.string().optional(),
       sha: z.string().optional()
-      // F-1389 (GH-DECL-IN-005) — no `encoding`. GitHub declares `content` as
+      // GH-DECL-IN — no `encoding`. GitHub declares `content` as
       // "the new file content, using Base64 encoding" and takes no `encoding`
       // parameter: base64 is the only encoding this surface has. Undeclared
       // now, so github's measured disposition (`ignore`) discards it.
       //
-      // F-1460 closed the behavioural half too: `routes.ts` base64-decodes this
+      // The behavioural half is closed too: `routes.ts` base64-decodes this
       // field via `rest-content.ts`, and invalid base64 gets GitHub's own 422.
       // ⚠️ ON THIS DOOR ONLY — the MCP write tools take plain text, because
       // GitHub's MCP server does. Divergence 24 is retired; see FIDELITY.md
@@ -1488,10 +1488,10 @@ var toolArgumentSchemas = [
   },
   {
     name: "create_or_update_file",
-    // F-1460 — no `encoding`. GitHub's MCP server declares none and needs none:
+    // No `encoding`. GitHub's MCP server declares none and needs none:
     // it takes `content` as PLAIN TEXT and base64-encodes it itself before
     // calling the REST API, which its own tool description says outright. The
-    // switch survived F-1389 because that ticket removed it from the REST
+    // switch survived the declaration cut because that only removed it from the REST
     // DECLARATION, and the served table (a capture) and these validators are two
     // different objects. Undeclared now, so `ignore` discards it if sent.
     schema: z.object({ ...ownerRepo, path: z.string().min(1), message: z.string().min(1), content: z.string(), branch: z.string().min(1), sha: z.string().optional() })
@@ -1506,7 +1506,7 @@ var toolArgumentSchemas = [
     // file's `content` straight to a Git tree entry, which takes plain UTF-8.
     schema: z.object({ ...ownerRepo, branch: z.string().optional(), message: z.string().min(1), files: z.array(z.object({ path: z.string().min(1), content: z.string() })).min(1) })
   },
-  // GitHub's consolidated issue pair (F-1376). `issue_read` and `issue_write`
+  // GitHub's consolidated issue pair. `issue_read` and `issue_write`
   // replace the seven single-purpose tools this twin used to serve — `get_issue`,
   // `update_issue`, `list_issue_comments`, `list_issue_labels`,
   // `add_issue_labels`, `remove_issue_label`, `add_assignees` — none of which
@@ -1556,7 +1556,7 @@ var toolArgumentSchemas = [
     name: "add_issue_comment",
     schema: z.object({ ...ownerRepo, issue_number: z.coerce.number().int().positive().optional(), issueNumber: z.coerce.number().int().positive().optional(), body: z.string().min(1) }).refine((value) => value.issue_number ?? value.issueNumber, "issue_number is required")
   },
-  // Kept, and registered as a divergence rather than removed (F-1376): GitHub
+  // Kept, and registered as a divergence rather than removed: GitHub
   // serves this exact name from the `issues` toolset when the client sets
   // `X-MCP-Features: issues_granular`, so an examinee can legitimately call it.
   // The divergence is that this twin serves it unconditionally.
@@ -1573,7 +1573,7 @@ var toolArgumentSchemas = [
       perPage: z.coerce.number().int().positive().optional()
     })
   },
-  // GitHub's consolidated pull-request reader (F-1376), replacing the seven
+  // GitHub's consolidated pull-request reader, replacing the seven
   // `get_pull_request*` tools GitHub no longer declares.
   {
     name: "pull_request_read",
@@ -1628,7 +1628,7 @@ var toolArgumentSchemas = [
     name: "create_pull_request",
     schema: z.object({ ...ownerRepo, title: z.string().min(1), body: z.string().optional(), head: z.string().min(1), base: z.string().optional() })
   },
-  // ===== v2 hot paths (FDRS-300) ==========================================
+  // ===== v2 hot paths ==========================================
   // Cluster A — branches & files
   {
     name: "list_branches",
@@ -1656,7 +1656,7 @@ var toolArgumentSchemas = [
   // fourteen tools GitHub's MCP server does not register under any toolset or
   // feature flag. They were GitHub REST operations that were never MCP tools,
   // so an examinee could only ever have reached them the way it still can —
-  // over this twin's REST door, which is unchanged (F-1376, group D).
+  // over this twin's REST door, which is unchanged (group D).
   // Cluster G — tags & releases
   {
     name: "list_tags",
@@ -1675,7 +1675,7 @@ var toolArgumentSchemas = [
     name: "get_me",
     schema: z.object({})
   },
-  // M5 hot gaps (F-735)
+  // M5 hot gaps
   {
     name: "search_commits",
     schema: z.object({ query: z.string().optional(), q: z.string().optional(), owner: z.string().optional(), repo: z.string().optional(), ...pageShape }).refine((value) => value.query !== void 0 || value.q !== void 0, "query is required")
@@ -1706,7 +1706,7 @@ var MUTATING_TOOL_NAMES = /* @__PURE__ */ new Set([
   "merge_pull_request",
   "update_pull_request_branch",
   "create_pull_request",
-  // v2 hot paths (FDRS-300)
+  // v2 hot paths
   "delete_file",
   "update_pull_request",
   "add_reply_to_pull_request_comment"
@@ -1797,12 +1797,12 @@ function dispatchTool(domain, name, parsed, onDelta, options = {}) {
         // GitHub distinguishes the issue-level `get_comments` from the
         // diff-level `get_review_comments`, and so does this twin: a PR's
         // CONVERSATION lives in `issue_comments`, keyed on the PR's own number
-        // because GitHub models a pull request as an issue (F-1151), while the
+        // because GitHub models a pull request as an issue, while the
         // comments anchored to a file and line live in
         // `pull_request_review_comments`. Both halves of the justification that
         // stood here — one thread per PR, a split the twin does not model —
-        // stopped being true at F-1151, and F-1421 then gave the seed both
-        // vocabularies as separate fields (F-1423).
+        // stopped being true, and the seed then gained both
+        // vocabularies as separate fields.
         case "get_comments":
           return domain.getPullRequestConversation(pull);
         case "get_review_comments":
@@ -1836,7 +1836,7 @@ function dispatchTool(domain, name, parsed, onDelta, options = {}) {
       return domain.updatePullRequestBranch(normalizePullNumber(parsed), onDelta);
     case "create_pull_request":
       return domain.createPullRequest({ ...parsed, actor: parsed.actor ?? options.actor }, onDelta);
-    // ===== v2 hot paths (FDRS-300) ========================================
+    // ===== v2 hot paths ========================================
     case "list_branches":
       return domain.listBranchesForRepo(parsed);
     case "delete_file":
@@ -1855,7 +1855,7 @@ function dispatchTool(domain, name, parsed, onDelta, options = {}) {
       return domain.getLatestRelease(parsed);
     case "get_me":
       return domain.getMe({ actor: options.actor });
-    // M5 hot gaps (F-735)
+    // M5 hot gaps
     case "search_commits":
       return domain.searchCommits(parsed);
     case "get_release_by_tag":
@@ -1911,7 +1911,7 @@ var githubAccessControlEndpointSchema = z.object({
   category: githubAccessControlCategorySchema,
   /** Default allow/deny when a session has no explicit override. */
   default_allowed: z.boolean(),
-  /** FDRS-300 v2 hot-path; false for the original 25-endpoint surface. */
+  /** v2 hot-path; false for the original 25-endpoint surface. */
   v2: z.boolean().default(false)
 });
 var githubAccessControlCategoryGroupSchema = z.object({
@@ -2222,7 +2222,7 @@ CREATE TABLE IF NOT EXISTS issue_labels (
 );
 
 -- issue_number names an issue OR a pull request, so no FK to issues \u2014 see
--- ensureCommentsAllowPullRequests below (F-1151).
+-- ensureCommentsAllowPullRequests below.
 CREATE TABLE IF NOT EXISTS issue_comments (
   id INTEGER PRIMARY KEY AUTOINCREMENT,
   repo_id INTEGER NOT NULL,
@@ -2271,7 +2271,7 @@ CREATE TABLE IF NOT EXISTS pull_request_files (
   raw_url TEXT NOT NULL DEFAULT '',
   contents_url TEXT NOT NULL DEFAULT '',
   patch TEXT NOT NULL DEFAULT '',
-  -- F-1500 \u2014 the pre-rename path, NULL on every status but 'renamed'. Nullable
+  -- The pre-rename path, NULL on every status but 'renamed'. Nullable
   -- rather than DEFAULT '': the serializer reads presence off the status, and
   -- an empty string here would be indistinguishable from a rename whose source
   -- path the diff failed to resolve. (No backticks in this literal: it is a
@@ -2458,7 +2458,7 @@ SET
   head_sha = COALESCE(head_sha, (SELECT head_sha FROM branches WHERE branches.repo_id = pull_requests.head_repo_id AND branches.name = pull_requests.head_ref)),
   base_sha = COALESCE(base_sha, (SELECT head_sha FROM branches WHERE branches.repo_id = pull_requests.base_repo_id AND branches.name = pull_requests.base_ref));
 
--- F-1459. \`updated_at\` arrived after \`releases\` existed, so a database written
+-- \`updated_at\` arrived after \`releases\` existed, so a database written
 -- by an earlier build has it at the column default (''). A release this twin
 -- serves has never been edited \u2014 there is no release-update route \u2014 so its
 -- update instant IS its creation instant, and backfilling is exact rather than
@@ -2718,7 +2718,7 @@ function branchJson(branch, repo) {
       // Upstream `commit.url` is a required non-null string; the twin surfaces
       // null in the pre-resolution state (no commit seeded yet). Intentional
       // twin behavior — narrow the null away for the type anchor only
-      // (FDRS-454: a faithful twin may surface a pre-resolution null), runtime
+      // (a faithful twin may surface a pre-resolution null), runtime
       // value unchanged.
       url: branch.head_sha ? `https://api.github.com/repos/${repo.full_name}/commits/${branch.head_sha}` : null
     },
@@ -2789,13 +2789,13 @@ function contentDirectoryEntryJson(path, repo, branch, file) {
     // entry the twin has no git blob to point at; rather than emit `git_url: null`
     // (a string→null type-changed against real GitHub's blob URL on files), omit the
     // key entirely on directories so the field-removed direction is covered by the
-    // categorical hypermedia exemption (FDRS-451) — a faithful twin returning a
-    // SUBSET of GitHub's link relations, not drift (FDRS-454).
+    // categorical hypermedia exemption — a faithful twin returning a
+    // SUBSET of GitHub's link relations, not drift.
     ...isFile ? { git_url: `https://api.github.com/repos/${repo.full_name}/git/blobs/${file.sha}` } : {},
     html_url: `https://github.com/${repo.full_name}/${isFile ? "blob" : "tree"}/${branch}/${path}`,
     download_url: isFile ? `https://raw.githubusercontent.com/${repo.full_name}/${branch}/${path}` : null
     // `_links` is intentionally omitted — the categorical hypermedia subset
-    // exemption (FDRS-451); DeepPartial makes it optional so omission is legal.
+    // exemption; DeepPartial makes it optional so omission is legal.
     // The upstream `content-directory` schema is an ARRAY of entries; this
     // serializer emits one entry, so it anchors against the element type.
   };
@@ -2869,7 +2869,7 @@ function pullRequestSimpleJson(pr, baseRepo, headRepo, headSha = null, baseSha =
       ref: pr.head_ref,
       // Upstream merge-base `sha` is a non-null string; the twin emits null when
       // the head SHA is unresolved (no commits seeded yet). Intentional twin
-      // behavior — narrow the null away for the type anchor only (FDRS-454:
+      // behavior — narrow the null away for the type anchor only (
       // faithful twin may surface a pre-resolution null), runtime value unchanged.
       sha: headSha,
       repo: repoJson(headRepo),
@@ -2918,7 +2918,7 @@ function pullRequestFileJson(file) {
     raw_url: file.raw_url,
     contents_url: file.contents_url,
     patch: file.patch,
-    // F-1500 — GitHub sends `previous_filename` exactly when `status` is
+    // GitHub sends `previous_filename` exactly when `status` is
     // `"renamed"` and omits the KEY otherwise, so this is a conditional spread
     // rather than a `null`: emitting `previous_filename: null` on an added file
     // would trade a missing-field divergence for a type-changed one and have
@@ -3024,7 +3024,7 @@ function releaseJson(release, repo) {
     prerelease: Boolean(release.prerelease),
     author: userJson(release.author_login),
     created_at: release.created_at,
-    // F-1459 — real GitHub returns this on every release; the twin used to omit
+    // Real GitHub returns this on every release; the twin used to omit
     // the key, which read as `field-removed` on all three release surfaces.
     // Falls back to `created_at` for a row written before the column existed.
     updated_at: release.updated_at || release.created_at,
@@ -3036,8 +3036,8 @@ function releaseJson(release, repo) {
     tarball_url: `https://api.github.com/repos/${repo.full_name}/tarball/${release.tag_name}`,
     zipball_url: `https://api.github.com/repos/${repo.full_name}/zipball/${release.tag_name}`,
     assets: [],
-    // F-1533 — the last leaf real GitHub sends on all three release surfaces
-    // that this twin did not. Same shape of fix as `updated_at` above (F-1459),
+    // The last leaf real GitHub sends on all three release surfaces
+    // that this twin did not. Same shape of fix as `updated_at` above,
     // and the same reason it went unnoticed: `satisfies DeepPartial<Release>`
     // encodes "faithful SUBSET", so it cannot see an omission.
     //
@@ -3045,7 +3045,7 @@ function releaseJson(release, repo) {
     // immutable-release feature and has no route that could enable one — no
     // `PUT /repos/:o/:r/immutable-releases`, nothing on the seed — so every
     // release in every reachable twin state IS mutable. That is what separates
-    // this from the nine sibling fields F-1504 registered rather than fixed:
+    // this from the nine sibling fields registered rather than fixed:
     // stating `false` invents no model.
     //
     // Not a column. A stored value would be a second source of truth for a
@@ -3084,7 +3084,7 @@ function checkRunJson(run, repo) {
     // conclusion vocabulary including `"stale"`, but the pinned
     // @octokit/openapi-types version's `check-run.conclusion` enum predates
     // `"stale"`. The twin faithfully emits a real upstream value; narrow it to
-    // the schema's declared union for the type anchor only (FDRS-454: twin
+    // the schema's declared union for the type anchor only (twin
     // tracks live GitHub, not a lagging spec snapshot), runtime value unchanged.
     conclusion: run.conclusion,
     started_at: run.started_at,
@@ -3129,12 +3129,12 @@ function pullRequestReviewCommentJson(comment, repo) {
     // nullable (`number | null`); all the sibling line/position fields below
     // are non-null in the schema. The twin's row column is `number | null`, so
     // for the non-null schema fields we narrow the row's pre-resolution null
-    // away for the type anchor only (FDRS-454: a faithful twin may surface a
+    // away for the type anchor only (a faithful twin may surface a
     // pre-resolution null on a not-yet-positioned comment), runtime unchanged.
     position: comment.line,
     original_position: comment.line,
     // `commit_sha` row column is `string | null`; schema commit ids are
-    // non-null strings (FDRS-454 pre-resolution null narrow).
+    // non-null strings (pre-resolution null narrow).
     commit_id: comment.commit_sha,
     original_commit_id: comment.commit_sha,
     in_reply_to_id: comment.in_reply_to_id,
@@ -4087,7 +4087,7 @@ function createRelease(domain, input, options = {}, onDelta) {
       prerelease,
       options.actor ?? "pome-agent",
       now,
-      // F-1459 — `updated_at` on creation IS `created_at`. There is no release
+      // `updated_at` on creation IS `created_at`. There is no release
       // update route on this twin, so nothing can ever move it apart; when one
       // is added it must set this column, which is why it is a real column and
       // not `created_at` aliased in the serializer.
@@ -4559,7 +4559,7 @@ var GitHubDomain = class {
     });
   }
   /**
-   * F-1500 — expand a branch's seeded file entries into the commit that produces
+   * Expand a branch's seeded file entries into the commit that produces
    * them, turning each `renamed_from` into what a move actually is: the source
    * path deleted and its content written at the new path, in ONE commit.
    *
@@ -4587,14 +4587,14 @@ var GitHubDomain = class {
     return changes;
   }
   /**
-   * F-1421 — plant one conversation comment on an issue or a pull request.
+   * Plant one conversation comment on an issue or a pull request.
    *
    * A direct INSERT, for the same reason the seeded reviews above bypass
    * `createPullRequestReview`: `addIssueComment` stamps `user_login =
    * "pome-agent"` unconditionally, and a seeded world where the agent under
    * test wrote every comment it is being asked to read has nothing to read.
    * The one check the write path does that matters here is kept — the comment
-   * must hang off an issue or a pull request that exists (F-1151).
+   * must hang off an issue or a pull request that exists.
    */
   seedComment(repo, number, comment) {
     this.requireCommentTarget(repo.id, number);
@@ -4626,7 +4626,7 @@ var GitHubDomain = class {
           files: this.listPullRequestFileRows(repo.id, pull.number),
           reviews: this.listPullRequestReviewRows(repo.id, pull.number),
           review_comments: this.listPullRequestReviewCommentRows(repo.id, pull.number),
-          // F-1151. THREE distinct comment surfaces reach a pull request and this
+          // THREE distinct comment surfaces reach a pull request and this
           // is the third, so the export keeps them apart rather than merging them
           // into one count a predicate could not attribute:
           //   `reviews[].body`     — the prose attached to a review verdict
@@ -4985,7 +4985,7 @@ var GitHubDomain = class {
         raw_url: `https://raw.githubusercontent.com/${repo.full_name}/${commit.sha}/${version.path}`,
         contents_url: `https://api.github.com/repos/${repo.full_name}/contents/${version.path}?ref=${commit.sha}`,
         patch: `@@ ${version.path} @@`,
-        // F-1513 moved the COMPARE surface onto the shared `diffFileRows`; this
+        // The COMPARE surface moved onto the shared `diffFileRows`; this
         // one is still outside it, and for a reason that is not scope. A single
         // commit's change set is read straight out of `file_versions`, whose
         // `status` column has no `renamed` member, so there is no pair of trees
@@ -5114,7 +5114,7 @@ var GitHubDomain = class {
       this.db.prepare("INSERT INTO pull_request_files (repo_id, pull_number, filename, status, additions, deletions, changes, blob_url, raw_url, contents_url, patch, previous_filename) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)").run(repoId, pullNumber, file.filename, file.status, file.additions, file.deletions, file.changes, file.blob_url, file.raw_url, file.contents_url, file.patch, file.previous_filename);
     }
   }
-  // F-1178 — the `stack` member of GitHub's `pull-request` / `pull-request-simple`
+  // The `stack` member of GitHub's `pull-request` / `pull-request-simple`
   // schemas. GitHub models a stack as its own entity with its own id and number;
   // the twin has no stack table, so it reads a stack off the state that DOES
   // encode one — pull requests linked `base_ref` -> `head_ref`, i.e. a PR whose
@@ -5272,7 +5272,7 @@ var GitHubDomain = class {
   requireIssue(repoId, number) {
     return this.db.prepare("SELECT * FROM issues WHERE repo_id = ? AND number = ?").get(repoId, number) ?? notFound("Issue not found");
   }
-  // F-1151 — what the ISSUE COMMENT endpoints may address.
+  // What the ISSUE COMMENT endpoints may address.
   //
   // Real GitHub models every pull request as an issue and documents
   // `/repos/:o/:r/issues/:number/comments` as the way to comment on a PR's
@@ -5332,7 +5332,7 @@ var GitHubDomain = class {
   listPullRequestReviewRows(repoId, pullNumber) {
     return this.db.prepare("SELECT * FROM pull_request_reviews WHERE repo_id = ? AND pull_number = ? ORDER BY submitted_at ASC").all(repoId, pullNumber);
   }
-  // F-1422 — `PullRequestReviewCommentRow`, not a six-key structural subset of
+  // `PullRequestReviewCommentRow`, not a six-key structural subset of
   // it. The query is `SELECT *` and always was, so the narrow cast described
   // less than the reader was handed and every caller inherited that description
   // as its ceiling: `getPullRequestComments` served exactly the six keys named
@@ -5730,13 +5730,13 @@ var githubTwinDefinition = defineTwin({
       domain.seed(seed, reportDelta);
       return { ok: true, repositories: seed.repositories.length };
     },
-    // F-1497: the admin-gate 403 body is BUILT HERE now, not defaulted in
+    // The admin-gate 403 body is BUILT HERE now, not defaulted in
     // `@pome-sh/sdk`. The gate is shared by all five twins, so its default
     // cannot carry GitHub's `documentation_url`/`status` leaves — and while
     // it defaulted, this twin's 403 said `documentation_url: ""`.
     //
     // The url is the GENERIC one on purpose. Real GitHub's measured 403s
-    // name the operation (3 of 3, F-1490), but `/admin/*` is a twin-only
+    // name the operation (3 of 3), but `/admin/*` is a twin-only
     // route with no GitHub operation behind it, which is the same reason
     // `/pulls/:n/diff` and `/pulls/:n/status` stay generic (divergence 32).
     forbidden: () => ({ status: 403, body: githubError("Forbidden", 403) })
@@ -5759,7 +5759,7 @@ var githubTwinDefinition = defineTwin({
   pomeRoutes: {
     "access-control": () => githubAccessControlPayload()
   },
-  // FDRS-402 adapter-rich tape pin: x-pome-correlation-id persists as
+  // adapter-rich tape pin: x-pome-correlation-id persists as
   // tool_call_id on every recorded event (github's frozen tape shape).
   stampToolCallId: true,
   // Frozen JSON-RPC unknown-tool result text (the legacy /mcp/call surface
@@ -5768,7 +5768,7 @@ var githubTwinDefinition = defineTwin({
   unsupported: () => unsupportedEnvelope,
   errorEnvelope: githubErrorEnvelope,
   auth: {
-    // F-712 pins (wire-frozen): Bearer-header only (no extra token
+    // Frozen pins (wire-frozen): Bearer-header only (no extra token
     // resolvers), raw bearer rejected (allowRawBearer=false), sid mismatch
     // → 401 {message:"Forbidden"}, and an expired JWT rendering as
     // "Bad credentials". The pre-port explicit "Token expired" branch was
@@ -5776,7 +5776,7 @@ var githubTwinDefinition = defineTwin({
     // was ever reached, so the wire always said "Bad credentials"
     // (pre-ruled: deleting it is zero wire diff).
     //
-    // ── F-1497 changed two things about these bodies ────────────────────
+    // ── Two things changed about these bodies ──────────────────────────
     //
     // 1. They are built by `githubError` now instead of by hand, which is
     //    what gives them the `documentation_url` and `status` leaves real
@@ -5784,7 +5784,7 @@ var githubTwinDefinition = defineTwin({
     //    `{"message":…,"documentation_url":"https://docs.github.com/rest","status":"401"}`.
     //    The url is GitHub's GENERIC one and MUST STAY generic — GitHub
     //    names no operation on a 401 because authentication fails before
-    //    dispatch (8 of 8 measured, F-1490), which is the half of
+    //    dispatch (8 of 8 measured), which is the half of
     //    divergence 32 that is a requirement rather than a gap. `githubError`
     //    defaults to exactly that url and this call passes no override.
     //

package/dist/{src-4E5WAGNJ.js → src-L6F5YXSP.js}

@@ -1,8 +1,8 @@
-export { SLACK_CHECKS } from './chunk-IDNSKKEC.js';
+export { SLACK_CHECKS } from './chunk-2ZGVDTJC.js';
 import './chunk-JWJYNAWI.js';
-import { routeInputDeclarer, booleanInput, integerInput, mountDeclaredRoute, UndeclaredInputError } from './chunk-2Q3P45LK.js';
-import { loadMcpToolFixture, defineTwin, queryTokenResolver, formTokenResolver, deriveMcpToolTable, UnknownToolError, openTwinDatabase, createApp, typeDisagreements } from './chunk-WEKJIGUD.js';
-import './chunk-JUESW6G4.js';
+import { routeInputDeclarer, booleanInput, integerInput, mountDeclaredRoute, UndeclaredInputError } from './chunk-IZFM7W2V.js';
+import { loadMcpToolFixture, defineTwin, queryTokenResolver, formTokenResolver, deriveMcpToolTable, UnknownToolError, openTwinDatabase, createApp, typeDisagreements } from './chunk-CFXEETE3.js';
+import './chunk-6KJC4BTO.js';
 import './chunk-SG6ZTIMT.js';
 import { z, ZodError } from 'zod';
 
@@ -599,7 +599,7 @@ function serializeUser(row, opts = {}) {
     // The embedded profile carries `team` (both users.list and users.info) but
     // OMITS `email` on users.list — real Slack only returns the email on the
     // single-user reads (users.info / lookupByEmail), not in the list envelope
-    // (FDRS-473 Kind B). `omitProfileEmail` is set by the users.list caller.
+    // (Kind B). `omitProfileEmail` is set by the users.list caller.
     // serializeUserProfile returns Record<string, unknown> (its own `...profile`
     // spread is an open record); cast to the upstream Profile shape so the parent
     // `satisfies` stays exact without re-anchoring the nested record here.
@@ -923,7 +923,7 @@ var seedSchema = z.object({
       reactions: z.array(z.object({ name: z.string(), user: z.string() })).default([])
     })).default([])
   })).default([]),
-  // F-1509. Files present in the world before the agent runs. `user` and
+  // Files present in the world before the agent runs. `user` and
   // `channels` are seed HANDLES (a user/channel `name`) or ids — the same
   // currency `channels[].members` and `channels[].messages[].user` already use.
   files: z.array(z.object({
@@ -1454,7 +1454,7 @@ function conversationsHistory(domain, args, actor = {}) {
     // Real Slack OMITS `response_metadata` on conversations.history when there is
     // no next page (it only carries the pagination cursor when hasMore); it does
     // NOT return an empty-cursor envelope here the way conversations.list does
-    // (FDRS-473 Kind B — conditional pagination matched per endpoint).
+    // (Kind B — conditional pagination matched per endpoint).
     ...hasMore ? { response_metadata: { next_cursor: cursorEncode({ offset: offset + slice.length }) } } : {}
   };
 }
@@ -1493,7 +1493,7 @@ function conversationsReplies(domain, args, actor = {}) {
     }),
     has_more: hasMore,
     // Real Slack OMITS `response_metadata` on conversations.replies when there is
-    // no next page (cursor present only when hasMore) — FDRS-473 Kind B.
+    // no next page (cursor present only when hasMore) — Kind B.
     ...hasMore ? { response_metadata: { next_cursor: cursorEncode({ offset: offset + slice.length }) } } : {}
   };
 }
@@ -1605,7 +1605,7 @@ function filesList(domain, args) {
     // files.list paginates via `paging` (page/pages), not a cursor. Real Slack
     // does NOT return a `response_metadata.next_cursor` envelope on files.list,
     // so the twin omits it rather than emitting an empty-cursor stub that diffs
-    // as a twin-only field (FDRS-473 Kind B).
+    // as a twin-only field (Kind B).
   };
 }
 function filesDelete(domain, args, actor, onDelta = NOOP3) {
@@ -1801,7 +1801,7 @@ function usersList(domain, args) {
   const slice = rows.slice(0, limit);
   return {
     // users.list embeds each user's profile WITHOUT `email` — real Slack only
-    // returns the email on the single-user reads (FDRS-473 Kind B).
+    // returns the email on the single-user reads (Kind B).
     members: slice.map((row) => serializeUser(row, { include_locale: args.include_locale, omitProfileEmail: true })),
     cache_ts: nowUnix(),
     response_metadata: {
@@ -2409,7 +2409,7 @@ var SLACK_READS = {
   }),
   bookmarksList: slackRead("/bookmarks.list", { channel_id: emptyIfAbsent() }),
   teamInfo: slackRead("/team.info", { team: absentIfEmpty() }),
-  // `domain.emojiList` reads no argument at all, and the pre-F-1179 handler
+  // `domain.emojiList` reads no argument at all, and the legacy handler
   // forwarded the whole merged bag — the silent hole this ticket exists to
   // close. `include_categories` is what Slack's `emoji.list` declares beyond
   // `token`, so that is the surface, and an unnamed argument is now refused.
@@ -2504,7 +2504,7 @@ var SLACK_WRITES = {
     timestamp: emptyIfAbsent()
   }),
   filesUpload: slackWrite("/files.upload", {
-    // F-1389 (SLACK-DECL-IN-003) — `channels` (plural, comma-separated) only.
+    // SLACK-DECL-IN-003 — `channels` (plural, comma-separated) only.
     // Slack has never documented a singular `channel` here, and the vendored
     // `slack_web_openapi_v2` snapshot agrees: it declares `channels` and eight
     // other real arguments, so it is not thin on this method. An upload
@@ -3230,7 +3230,7 @@ var slackTwinDefinition = defineTwin({
     return domain;
   },
   routes: registerSlackRoutes,
-  // Frozen slack body parsing (F-683 review pin): form-or-JSON on every
+  // Frozen slack body parsing (review pin): form-or-JSON on every
   // engine-owned surface — official Slack SDKs default to
   // application/x-www-form-urlencoded — and malformed JSON collapses to {}.
   bodyReader: (c) => parseFormOrJson(c),
@@ -3274,7 +3274,7 @@ var slackTwinDefinition = defineTwin({
   unsupported: () => unsupportedEnvelope,
   errorEnvelope: slackErrorEnvelope,
   auth: {
-    // F-712 pins: Bearer header + ?token= + form-body token; raw bearer
+    // Frozen pins: Bearer header + ?token= + form-body token; raw bearer
     // rejected (allowRawBearer default false); sid mismatch → 401
     // invalid_auth; expired vs invalid classified by the engine and
     // rendered through the envelope hook.

package/dist/{src-Q4MBHYC5.js → src-Q4JNJE5S.js}

@@ -2,9 +2,9 @@ export { LINEAR_CHECKS } from './chunk-XBT6ZLBG.js';
 import { MCP_PAGE_MAX, defaultSeedState, linearSeedSchema, notFound, badUserInput, MCP_PAGE_DEFAULT, DEFAULT_LINEAR_EMAIL, RELAY_PAGE_MAX, RELAY_PAGE_DEFAULT, STATE_EXPORT_CAP, parseSeed, DEFAULT_LINEAR_CLOCK, LINEAR_PROVIDER_TOKEN_PREFIX, DEFAULT_LINEAR_SID, DEFAULT_SCOPES, linearErrorEnvelope, unauthorizedEnvelope, unsupportedEnvelope, forbiddenEnvelope, assertWebhookUrl, ACCESS_TOKEN_TTL_SECONDS, OAUTH_CODE_TTL_SECONDS, TITLE_MAX_BYTES, BODY_MAX_BYTES, LinearTwinError, GRAPHQL_QUERY_MAX_BYTES, GRAPHQL_SELECTION_DEPTH_MAX } from './chunk-IZIZC7ZW.js';
 export { DEFAULT_LINEAR_CLOCK, DEFAULT_LINEAR_EMAIL, DEFAULT_LINEAR_PORT, DEFAULT_LINEAR_SID, DEFAULT_LINEAR_TOKEN, LINEAR_PROVIDER_TOKEN_PREFIX, LinearTwinError, STATE_EXPORT_CAP, assertWebhookUrl, defaultSeedState, linearErrorEnvelope, linearSeedSchema, loadSeedFromEnv, parseSeed, unauthorizedEnvelope, unsupportedEnvelope, webhookUrlError } from './chunk-IZIZC7ZW.js';
 import './chunk-JWJYNAWI.js';
-import { routeInputDeclarer, mountDeclaredRoute, UndeclaredInputError } from './chunk-2Q3P45LK.js';
-import { loadMcpToolFixture, deriveMcpToolTable, openTwinDatabase, defineTwin, createApp } from './chunk-WEKJIGUD.js';
-import './chunk-JUESW6G4.js';
+import { routeInputDeclarer, mountDeclaredRoute, UndeclaredInputError } from './chunk-IZFM7W2V.js';
+import { loadMcpToolFixture, deriveMcpToolTable, openTwinDatabase, defineTwin, createApp } from './chunk-CFXEETE3.js';
+import './chunk-6KJC4BTO.js';
 import './chunk-SG6ZTIMT.js';
 import { createHmac, timingSafeEqual, createHash, randomBytes } from 'node:crypto';
 import { z } from 'zod';
@@ -510,7 +510,7 @@ var AGENT_SESSION_STATUSES = [
 ];
 function readSessionStatus(value) {
   if (!AGENT_SESSION_STATUSES.includes(value)) {
-    throw new LinearTwinError(500, "INTERNAL_SERVER_ERROR", `Stored agent session status "${value}" is not one of Linear's AgentSessionStatus members (${AGENT_SESSION_STATUSES.join(", ")}). This database predates the F-1172 rename and was not migrated.`);
+    throw new LinearTwinError(500, "INTERNAL_SERVER_ERROR", `Stored agent session status "${value}" is not one of Linear's AgentSessionStatus members (${AGENT_SESSION_STATUSES.join(", ")}). This database predates the rename and was not migrated.`);
   }
   return value;
 }
@@ -4731,7 +4731,7 @@ function createRootValue(ctx) {
       return payload({ agentSession: formatAgentSession(session) });
     },
     // `id` is non-null on the schema, as it is upstream — there is no longer an
-    // `input.id` to fall back to (F-1176).
+    // No `input.id` to fall back to.
     agentSessionUpdate: ({ id, input }) => {
       const session = commands.updateAgentSession(id, parseAgentSessionUpdateInput(input), actor);
       return payload({ agentSession: formatAgentSession(session) });
@@ -5040,7 +5040,7 @@ var linearGraphQLSchema = buildSchema(`
     team: Team
   }
 
-  """Linear's AgentSessionStatus, member-for-member (F-1172)."""
+  """Linear's AgentSessionStatus, member-for-member."""
   enum AgentSessionStatus {
     pending
     active
@@ -5063,7 +5063,7 @@ var linearGraphQLSchema = buildSchema(`
     activities(first: Int, after: String, last: Int, before: String): AgentActivityConnection!
   }
 
-  """Linear's AgentActivitySignal, member-for-member (F-1176)."""
+  """Linear's AgentActivitySignal, member-for-member."""
   enum AgentActivitySignal {
     stop
     continue
@@ -5077,7 +5077,7 @@ var linearGraphQLSchema = buildSchema(`
     Linear's AgentActivityContent union, carried as an opaque payload: a
     {type, body} object for five of the six members, {type, action, parameter}
     for the action member. The union itself is a scalar-level divergence,
-    written up in REFERENCE-DIVERGENCES.md (F-1176).
+    written up in REFERENCE-DIVERGENCES.md.
     """
     content: JSON!
     signal: AgentActivitySignal
@@ -5239,13 +5239,13 @@ var linearGraphQLSchema = buildSchema(`
     enabled: Boolean
   }
 
-  """Linear's AgentSessionExternalUrlInput, field-for-field (F-1172)."""
+  """Linear's AgentSessionExternalUrlInput, field-for-field."""
   input AgentSessionExternalUrlInput {
     url: String!
     label: String!
   }
 
-  """Linear's AgentSessionCreateOnIssue, minus the fields the twin does not model (F-1176)."""
+  """Linear's AgentSessionCreateOnIssue, minus the fields the twin does not model."""
   input AgentSessionCreateOnIssue {
     issueId: String!
     externalUrls: [AgentSessionExternalUrlInput!]
@@ -5257,7 +5257,7 @@ var linearGraphQLSchema = buildSchema(`
   }
 
   """
-  Linear declares no status and no id field here (F-1176). Status follows the
+  Linear declares no status and no id field here. Status follows the
   agent's activities; id is the mutation's own non-null argument.
   """
   input AgentSessionUpdateInput {
@@ -5462,7 +5462,7 @@ function createLinearTwinDefinition(db) {
         reportDelta(linearStateDelta(before, domain.exportState()));
         return { ok: true };
       },
-      // F-1497 — declared, so the shared gate in `@pome-sh/sdk` stops
+      // Declared, so the shared gate in `@pome-sh/sdk` stops
       // answering a GraphQL twin with GitHub's `{message, documentation_url}`.
       forbidden: () => forbiddenEnvelope()
     },
@@ -5480,8 +5480,8 @@ function createLinearTwinDefinition(db) {
       allowRawBearer: true,
       resolveCredential: (token2) => resolveLinearCredential(db, token2),
       // Both take `unauthorizedEnvelope`'s default: Linear answers a bad
-      // bearer and a missing one with the SAME body (measured 2026-08-13,
-      // F-1497), and has no session-id concept to give the mismatch leg a
+      // bearer and a missing one with the SAME body (measured 2026-08-13),
+      // and has no session-id concept to give the mismatch leg a
       // third one. The messages that used to be here — "Bad credentials" and
       // "Session id mismatch" — were the twin's own inventions, and the first
       // was GitHub's.

package/dist/twinHarness-6NVAKIOB.js

@@ -0,0 +1,5 @@
+export { UnsupportedTwinError, bootTwin } from './chunk-KIXYRPVY.js';
+export { STRIPE_LOCAL_ACCOUNT_ID } from './chunk-EIUCTFQV.js';
+import './chunk-CFXEETE3.js';
+import './chunk-6KJC4BTO.js';
+import './chunk-SG6ZTIMT.js';

package/dist/{twinStart-2VP545N6.js → twinStart-WIT4UVAC.js}

@@ -1,7 +1,7 @@
-import { bootTwin } from './chunk-5EE7YWA3.js';
-import { isTwinName, TWIN_NAMES, defaultPortFor, TWIN_REGISTRY } from './chunk-CKN743FJ.js';
-import './chunk-WEKJIGUD.js';
-import './chunk-JUESW6G4.js';
+import { bootTwin } from './chunk-KIXYRPVY.js';
+import { isTwinName, TWIN_NAMES, defaultPortFor, TWIN_REGISTRY } from './chunk-EIUCTFQV.js';
+import './chunk-CFXEETE3.js';
+import './chunk-6KJC4BTO.js';
 import './chunk-SG6ZTIMT.js';
 import { randomBytes } from 'node:crypto';
 import { readFileSync } from 'node:fs';