@pome-sh/cli 0.26.9 → 0.26.11

package/dist/{src-AAF7TZMO.js → src-FXRQSKBK.js}

@@ -1,6 +1,6 @@
-import { routeInputDeclarer, bracketedQuery, integerInput, booleanInput, mountDeclaredRoute, UndeclaredInputError } from './chunk-2Q3P45LK.js';
-import { failureInjectionRuleSchema, loadMcpToolFixture, openTwinDatabase, createFailureInjectionStore, defineTwin, twinBuildInfo, deriveMcpToolTable, failureInjectionMiddleware, createApp, FAILURE_INJECTION_OVERRIDE_KEY, recordedRequestHeaders, UnknownToolError } from './chunk-WEKJIGUD.js';
-import './chunk-JUESW6G4.js';
+import { routeInputDeclarer, bracketedQuery, integerInput, booleanInput, mountDeclaredRoute, UndeclaredInputError } from './chunk-IZFM7W2V.js';
+import { failureInjectionRuleSchema, loadMcpToolFixture, openTwinDatabase, createFailureInjectionStore, defineTwin, twinBuildInfo, deriveMcpToolTable, failureInjectionMiddleware, createApp, FAILURE_INJECTION_OVERRIDE_KEY, recordedRequestHeaders, UnknownToolError } from './chunk-CFXEETE3.js';
+import './chunk-6KJC4BTO.js';
 import './chunk-SG6ZTIMT.js';
 import { z, ZodError } from 'zod';
 import { createHash, randomUUID, randomBytes } from 'node:crypto';
@@ -235,7 +235,7 @@ CREATE INDEX IF NOT EXISTS idx_payment_methods_customer ON payment_methods(custo
 CREATE INDEX IF NOT EXISTS idx_payment_methods_created ON payment_methods(created);
 CREATE INDEX IF NOT EXISTS idx_payment_methods_account_id ON payment_methods(account_id);
 
--- F-734 billing tables (warm surfaces, shape tier): plain stored rows served
+-- Billing tables (warm surfaces, shape tier): plain stored rows served
 -- back in Stripe shape. No invoices table \u2014 invoices are reads-only and
 -- nothing in the twin mints one (loud shape divergence, see FIDELITY.md).
 
@@ -709,7 +709,7 @@ var PaymentIntentsDomain = class {
       last_payment_error_json: lastPaymentErrorJson
     });
   }
-  // ---------- update (POST /v1/payment_intents/:id, F-731) ----------
+  // ---------- update (POST /v1/payment_intents/:id) ----------
   /**
    * Update a non-terminal PI. Metadata merges per-key (empty/null unsets,
    * Stripe's metadata contract). `payment_method` / `customer` are only
@@ -1555,7 +1555,7 @@ function paymentIntentJson(row) {
     cancellation_reason: null,
     // Twin row columns carry the literal Stripe values; the row type is a free
     // `string`. Narrow to the upstream literal union for the type anchor only
-    // (FDRS-454: the twin faithfully emits a real upstream value), runtime unchanged.
+    // (the twin faithfully emits a real upstream value), runtime unchanged.
     capture_method: row.capture_method,
     client_secret: row.client_secret,
     confirmation_method: row.confirmation_method,
@@ -1563,9 +1563,9 @@ function paymentIntentJson(row) {
     currency: row.currency,
     customer: row.customer_id,
     description: null,
-    // Card declines (F-731): the last failed attempt, parsed from the row.
+    // Card declines: the last failed attempt, parsed from the row.
     // The stored blob is Stripe's LastPaymentError shape; narrow for the
-    // type anchor only (FDRS-454), runtime unchanged.
+    // type anchor only, runtime unchanged.
     last_payment_error: parseJson(row.last_payment_error_json, null),
     latest_charge: row.latest_charge_id,
     livemode: false,
@@ -1596,8 +1596,7 @@ function chargeJson(row) {
     crypto: {
       // Upstream `Charge.PaymentMethodDetails.Crypto.{buyer_address,transaction_hash}`
       // are `string | undefined`; the twin surfaces `null` pre-settlement (no
-      // on-chain tx yet). Narrow the pre-resolution null for the type anchor only
-      // (FDRS-454), runtime value (null) unchanged.
+      // on-chain tx yet). Narrow the pre-resolution null for the type anchor only, runtime value (null) unchanged.
       buyer_address: null,
       network: "base",
       token_currency: "usdc",
@@ -1629,7 +1628,7 @@ function chargeJson(row) {
     disputed: false,
     failure_balance_transaction: null,
     // Twin failure columns carry Stripe's literal decline codes; the row
-    // type is a free `string`. Narrow for the type anchor only (FDRS-454).
+    // type is a free `string`. Narrow for the type anchor only.
     failure_code: row.failure_code,
     failure_message: row.failure_message,
     fraud_details: {},
@@ -1653,7 +1652,7 @@ function chargeJson(row) {
     payment_intent: row.payment_intent_id,
     payment_method: row.payment_method_id,
     // Stored blob is spec-faithful (built from the PM row at mint time);
-    // narrow for the type anchor only (FDRS-454).
+    // narrow for the type anchor only.
     payment_method_details: paymentMethodDetails,
     receipt_email: null,
     receipt_number: null,
@@ -1684,7 +1683,7 @@ function refundJson(row) {
     metadata: {},
     payment_intent: row.payment_intent_id,
     // Twin row `reason` is a free `string`; upstream `Refund.Reason` is a literal
-    // union. Narrow for the type anchor only (FDRS-454), runtime unchanged.
+    // union. Narrow for the type anchor only, runtime unchanged.
     reason: row.reason,
     receipt_number: null,
     source_transfer_reversal: null,
@@ -1754,7 +1753,7 @@ function paymentMethodJson(row) {
     livemode: false,
     metadata: {},
     // Twin row `type` is a free `string`; upstream `PaymentMethod.type` is a
-    // literal union. Narrow for the type anchor only (FDRS-454), runtime
+    // literal union. Narrow for the type anchor only, runtime
     // value ("card") unchanged.
     type: row.type
   };
@@ -1777,7 +1776,7 @@ function balanceTransactionJson(row) {
     status: row.status,
     // Upstream `BalanceTransaction.Type` is a literal union; the twin's ledger
     // `type` column is a free `string` (carries the x402 deposit categories).
-    // Narrow for the type anchor only (FDRS-454), runtime value unchanged.
+    // Narrow for the type anchor only, runtime value unchanged.
     type: row.type
   };
 }
@@ -1790,7 +1789,7 @@ function eventJson(row) {
     created: row.created,
     // LIFT (ST-DIV-014): the twin stores the event payload as an opaque parsed
     // JSON blob (`data.object: unknown`); upstream `Event.Data.object` is a typed
-    // resource union. Narrow for the type anchor only (FDRS-454), runtime unchanged.
+    // resource union. Narrow for the type anchor only, runtime unchanged.
     data: parsedData,
     livemode: Boolean(row.livemode),
     pending_webhooks: 0,
@@ -1799,7 +1798,7 @@ function eventJson(row) {
       idempotency_key: row.request_idempotency_key
     },
     // LIFT (ST-DIV-014): twin emits a free `string`; official `EventBase.type`
-    // is the `Event.Type` literal union. Narrow for the anchor only (FDRS-454).
+    // is the `Event.Type` literal union. Narrow for the anchor only.
     type: row.type
   };
 }
@@ -1829,7 +1828,7 @@ function priceJson(row) {
   const recurring = row.recurring_interval ? {
     // Twin row `recurring_interval` is a free `string`; upstream
     // `Price.Recurring.interval` is a literal union. Narrow for the type
-    // anchor only (FDRS-454), runtime unchanged.
+    // anchor only, runtime unchanged.
     interval: row.recurring_interval,
     interval_count: row.recurring_interval_count ?? 1,
     meter: null,
@@ -2104,7 +2103,7 @@ var StripeDomain = class {
     };
   }
   /**
-   * POST /v1/payment_intents/:id (F-731). The ruled retry-with-new-PM step:
+   * POST /v1/payment_intents/:id. The ruled retry-with-new-PM step:
    * metadata merges per-key, and attaching a PM moves the card PI back to
    * requires_confirmation. PM/customer resolution happens here so unknown
    * ids 404 with Stripe's resource_missing before any state gate fires.
@@ -2206,7 +2205,7 @@ var StripeDomain = class {
    * Create a refund. Returns the serialized API shape plus a canonical
    * `state_delta` so the route can hand both to `respond()`.
    *
-   * F-733: the whole flow — refund INSERT + charges.amount_refunded UPDATE
+   * The whole flow — refund INSERT + charges.amount_refunded UPDATE
    * (inside `refunds.create()`, nested as a savepoint), the negative
    * refund-type balance transaction, the ledger link backfill, and the
    * charge.refunded / refund.created events — commits in one better-sqlite3
@@ -2352,9 +2351,9 @@ var StripeDomain = class {
     const { rows, hasMore, limit } = this.events.list(accountId2, input);
     return serializedList(rows.map(eventJson), hasMore, limit, "/v1/events");
   }
-  // ---------- Billing (F-734, shape tier) ----------
+  // ---------- Billing (shape tier) ----------
   //
-  // Warm surfaces per the F-729 ruling: stored rows served in Stripe shape,
+  // Warm surfaces per the ruling: stored rows served in Stripe shape,
   // deliberately WITHOUT the semantic billing machine — creating a product,
   // price, or subscription emits no events and mints no invoices; the
   // recorder deltas stay truthful to the single-row writes.
@@ -2423,7 +2422,7 @@ var StripeDomain = class {
     }
     return subscriptionJson(row, prices);
   }
-  // Invoices are reads-only (F-729 ruling point 2: create/finalize/pay stay
+  // Invoices are reads-only (create/finalize/pay stay
   // unlisted-cold) and nothing in the twin mints one, so the list is always
   // empty and retrieve always 404s — loud, Stripe-shaped, documented.
   retrieveInvoice(accountId2, id) {
@@ -2441,7 +2440,7 @@ var StripeDomain = class {
    *
    * Ordering is `created DESC, rowid DESC`: `created` has unix-second
    * resolution, so rows minted within the same second tied and flipped
-   * order run-to-run (the F-683 export-race class). The insertion-order
+   * order run-to-run (the export-race class). The insertion-order
    * tiebreak keeps the export deterministic — same seed + same ops =>
    * same state (test/state-export.test.ts).
    */
@@ -2632,7 +2631,7 @@ function recordDedupeEvent(c, recorder, runId, startedAt, rawBody, cached) {
     method: c.req.method,
     path: new URL(c.req.url).pathname,
     request_body: rawBody === "" ? null : rawBody,
-    // F-1125 — the replay's own headers, which is where `Idempotency-Key`
+    // The replay's own headers, which is where `Idempotency-Key`
     // lives. Recording the dedupe outcome while hiding the key that caused it
     // would leave the reason unreadable on the one row that is about it.
     request_headers: recordedRequestHeaders(c),
@@ -2717,7 +2716,7 @@ function respond(c, recorder, runId, started, requestBody, status, responseBody,
     method: c.req.method,
     path: new URL(c.req.url).pathname,
     request_body: requestBody,
-    // F-1125 — one shared implementation with the engine's own emit(), so
+    // One shared implementation with the engine's own emit(), so
     // "which headers get recorded" has a single answer across every site.
     request_headers: recordedRequestHeaders(c),
     // Stripe's REST routes are not declared as twin actions: no criterion asks
@@ -2952,7 +2951,7 @@ var STRIPE_ROUTES = {
     bodyEncoding: "form",
     body: CUSTOMER_FIELDS_BODY
   }),
-  // F-1389 (ST-DECL-IN-001) — NOT `LIST_QUERY`. This is the one list surface
+  // ST-DECL-IN — NOT `LIST_QUERY`. This is the one list surface
   // that does not take `created`: `GetCustomersCustomerPaymentMethods` declares
   // `allow_redisplay, ending_before, expand, limit, starting_after, type` and
   // nothing else, and Stripe's measured disposition is `refuse` — it publishes
@@ -4113,7 +4112,7 @@ var toolArgumentSchemas = [
     schema: z.object({
       charge: z.string().min(1),
       amount: z.coerce.number().int().positive().optional(),
-      // F-1484 — Stripe's closed set, not a free string. `.optional()` is kept:
+      // Stripe's closed set, not a free string. `.optional()` is kept:
       // the vendor does not require the field, and narrowing the arity as well
       // as the value would refuse every refund the corpus actually makes.
       reason: z.enum(STRIPE_REFUND_REASONS).optional()
@@ -4409,7 +4408,7 @@ function createStripeTwinDefinition(opts) {
     // Session-wide middleware (the pre-port `session.use("*")` position):
     // mounted by the engine BEFORE its MCP routes, so failure injection and
     // idempotency cover /mcp, /mcp/call, /mcp/tools/:name exactly as the
-    // pre-port chassis did (F-684 review pin: an Idempotency-Key'd MCP
+    // pre-port chassis did (review pin: an Idempotency-Key'd MCP
     // create must replay, and injected rules on MCP paths must fire).
     middleware: (app, ctx) => {
       app.use("*", failureInjectionMiddleware(failureInjection, {
@@ -4419,7 +4418,7 @@ function createStripeTwinDefinition(opts) {
       }));
       app.use("*", idempotencyMiddleware(db, ctx.recorder, ctx.runId));
     },
-    // Frozen pre-port body parsing on the engine-owned surfaces (F-684
+    // Frozen pre-port body parsing on the engine-owned surfaces (review
     // review pin). Two pre-port readers existed: /admin/seed was strict
     // JSON with a null fallback (null → default seed via the schema
     // preprocess below), while the MCP dispatch surfaces used
@@ -4476,7 +4475,7 @@ function createStripeTwinDefinition(opts) {
         };
       },
       // Frozen tape shape: stripe's pre-port recorder never saw admin
-      // traffic — /admin/reset|seed emit no events (F-684 review pin).
+      // traffic — /admin/reset|seed emit no events (review pin).
       recorded: false,
       // Frozen stripe admin-gate 403 body.
       forbidden: () => forbidden("Forbidden")
@@ -4502,7 +4501,7 @@ function createStripeTwinDefinition(opts) {
     unsupported: () => unsupported(),
     errorEnvelope: stripeErrorEnvelope,
     auth: {
-      // F-712 pins: liberal bearer parsing ON (raw token + case-insensitive
+      // Frozen pins: liberal bearer parsing ON (raw token + case-insensitive
       // "bearer"); sid mismatch → 403; api_keys table lookup ahead of
       // provider-shaped verify + JWT; no path sid required (root mount);
       // expired-vs-invalid classified by the engine and rendered through

package/dist/{src-2M54EY2P.js → src-GWA7QVQS.js}

@@ -2,9 +2,9 @@ export { GMAIL_CHECKS } from './chunk-JM6VS62R.js';
 import { gmailErrorEnvelope, gmailSeedSchema, parseSeed, defaultSeedState, notFound, invalidArgument, checkFault, unsupported, validateSearchQuery, SEARCH_MAILBOX_MESSAGE_BUDGET, GmailError, parseSearchQuery, CATEGORY_LABELS, parseDate, parseSize, KNOWN_FIELDS, parseDuration, assertHasOperator } from './chunk-NJ246QPJ.js';
 export { DEFAULT_GMAIL_AGENT_EMAIL, GmailError, SEARCH_MAILBOX_MESSAGE_BUDGET, agentPathInboxMailbox, defaultSeedState, gmailErrorEnvelope, gmailSeedSchema, loadSeedFromEnv, parseSearchQuery, parseSeed, validateSearchQuery } from './chunk-NJ246QPJ.js';
 import './chunk-JWJYNAWI.js';
-import { routeInputDeclarer, integerInput, booleanInput, repeatedInput, mountDeclaredRoute, UndeclaredInputError, MalformedBodyError } from './chunk-2Q3P45LK.js';
-import { loadMcpToolFixture, deriveMcpToolTable, defineTwin, openTwinDatabase, createApp } from './chunk-WEKJIGUD.js';
-import './chunk-JUESW6G4.js';
+import { routeInputDeclarer, integerInput, booleanInput, repeatedInput, mountDeclaredRoute, UndeclaredInputError, MalformedBodyError } from './chunk-IZFM7W2V.js';
+import { loadMcpToolFixture, deriveMcpToolTable, defineTwin, openTwinDatabase, createApp } from './chunk-CFXEETE3.js';
+import './chunk-6KJC4BTO.js';
 import './chunk-SG6ZTIMT.js';
 import { createHash, createHmac, timingSafeEqual, randomBytes } from 'node:crypto';
 import { z } from 'zod';
@@ -2234,14 +2234,14 @@ var mcp_tools_list_meta_default = {
     derivation: "the upstream golden in full \u2014 all 13 tools, no subtraction. Produced by scripts/adopt-upstream-mcp-fixture.ts from fixtures/mcp-tools-list/gmail.raw.json at rawFileSha256 fd2b12868289aee89798c218a7ea2307fc475935d3d912c2a3c35b5d75ae21ee, whose bytes this file copies verbatim."
   },
   notes: [
-    "F-1400: these bytes are Google's, adopted rather than transcribed. The fixture that shipped before this one was the same endpoint read on 2026-07-20 and was never refreshed, so the twin advertised a seventeen-day-old listing and pome-cloud's mcp_diff reported 34 findings across 11 tools \u2014 all of them the vendor moving, none of them a twin defect. Produced by scripts/adopt-upstream-mcp-fixture.ts; `npm run gate:mcp-fixture -w @pome-sh/twin-gmail` re-derives and diffs.",
+    "These bytes are Google's, adopted rather than transcribed. The fixture that shipped before this one was the same endpoint read on 2026-07-20 and was never refreshed, so the twin advertised a seventeen-day-old listing and pome-cloud's mcp_diff reported 34 findings across 11 tools \u2014 all of them the vendor moving, none of them a twin defect. Produced by scripts/adopt-upstream-mcp-fixture.ts; `npm run gate:mcp-fixture -w @pome-sh/twin-gmail` re-derives and diffs.",
     "13 tools, which is every tool the capture carries. Unlike twin-slack's adoption there is no suppression list: nothing here is withheld, so raw.json is byte-identical to fixtures/mcp-tools-list/gmail.raw.json and the two shas agree.",
     "Descriptions, schemas and annotations are the capture's verbatim. Three of its claims are behavioural and were implemented in the same change rather than merely served: Message.bccRecipients, Label.messagesTotal/messagesUnread, and a list_labels that answers with ALL labels \u2014 the July listing said 'all user-defined labels' and the twin returned exactly those.",
     "list_labels takes no arguments in this listing. The July capture declared pageSize/pageToken and the twin paginated; Google has since removed both, along with nextPageToken from the response, so the twin answers every label in one page. LIMITS.md's MCP page-size row no longer names this tool.",
     "Authenticated tools/call success envelopes were unavailable; the reconstructed shapes live in mcp-tools-call.representative.json and the live unauthenticated error envelope in mcp-tools-call-unauth-error.raw.json.",
     "initialize returned protocolVersion=2025-03-26 (mcp-initialize.raw.json)."
   ],
-  canonicalFileSha256: "91d290ddb244d0736df1a6b81901aabf754b8d474c9343b487b65d3485dfaa19",
+  canonicalFileSha256: "d9a7348833d43a964d541d57336f571f93f7c55d1b43b2b773e9307443b73bf9",
   files: {
     raw: "mcp-tools-list.raw.json",
     canonical: "mcp-tools-list.canonical.json"
@@ -2514,7 +2514,7 @@ var implementations = {
         // `threads` above is the PAGE; this is the whole match set, which is
         // why the count is exact rather than an estimate. Google documents the
         // field as a lower bound, so an exact count satisfies the contract —
-        // and the advertised type is int64-as-STRING, not a number (F-1417).
+        // and the advertised type is int64-as-STRING, not a number.
         // Unconditional: it is the answer to "how many matched", and 0 matches
         // is an answer. Emitting it only when non-zero would make an absent
         // field mean two different things.
@@ -2545,7 +2545,7 @@ var implementations = {
     // takes no page arguments and offers no nextPageToken back. The July
     // listing this twin used to serve said "all user-defined labels", which is
     // what `listUserLabels` returns and what this handler used to call; the
-    // widening is Google's and F-1400 is the twin following it.
+    // widening is Google's and the twin follows it.
     handler: (domain, _args, ctx) => ({
       labels: domain.labels(identityFromSession(ctx.session).email).map(labelResult)
     })
@@ -2658,7 +2658,7 @@ function messageResult(message, format) {
     sender: message.from,
     toRecipients: message.to,
     ccRecipients: message.cc,
-    // F-1400: the adopted listing declares it on Message, so it is served
+    // The adopted listing declares it on Message, so it is served
     // wherever the other two recipient lists are — `get_message`, `get_thread`
     // and the threads `search_threads` nests.
     bccRecipients: message.bcc
@@ -2688,7 +2688,7 @@ function labelResult(label2) {
     labelId: label2.id,
     name: label2.name,
     ...Object.keys(color).length > 0 ? { color } : {},
-    // F-1400: the August listing declares the message counters beside the
+    // The August listing declares the message counters beside the
     // thread ones. The domain has counted both all along — the REST
     // serializer already published all four — so this was a projection that
     // dropped two fields, not a measurement the twin could not make.