@pome-sh/cli 0.35.3 → 0.36.0

package/dist/build-info.json

@@ -1,6 +1,6 @@
 {
   "package": "pome-sh",
-  "version": "0.35.3",
-  "git_sha": "76f126bc15b2467859785d59555570627963259e",
-  "build_time": "2026-08-29T21:46:38.757Z"
+  "version": "0.36.0",
+  "git_sha": "81d35ce632f8cd4a8009cad184514b5e688d3c17",
+  "build_time": "2026-08-29T23:53:46.865Z"
 }

package/dist/{checks-TC6O2HZE.js → checks-BKMTBJSO.js}

@@ -1,9 +1,13 @@
-import { findManifestPath, readManifest } from './chunk-L7XARKMM.js';
+import { findManifestPath, readManifest } from './chunk-DFOQGAKS.js';
 import { getAvailablePort } from './chunk-XDU6TD4O.js';
-import './chunk-533VIN3J.js';
+import './chunk-NNXVR46L.js';
 import { buildEgressAllowlist } from './chunk-CBFKZZBR.js';
+import './chunk-NBOQN5VX.js';
+import './chunk-YBWG5JK2.js';
 import './chunk-6KJC4BTO.js';
 import './chunk-SG6ZTIMT.js';
+import './chunk-2K6BJ3PI.js';
+import './chunk-FBSA5L36.js';
 import { serve } from '@hono/node-server';
 import { randomUUID, randomBytes } from 'node:crypto';
 import { basename, dirname, relative, join } from 'node:path';
@@ -183,7 +187,7 @@ async function checkTwinReachable(_configDir) {
   });
   let harness;
   try {
-    const { bootTwin } = await import('./twinHarness-2OFWSVPK.js');
+    const { bootTwin } = await import('./twinHarness-ATYQTDA5.js');
     harness = await bootTwin({
       twin: "github",
       seedState: void 0,

package/dist/chunk-2K6BJ3PI.js

@@ -0,0 +1,140 @@
+import { failureInjectionRuleSchema } from './chunk-FBSA5L36.js';
+import { z } from 'zod';
+
+var DEFAULT_SID = "default";
+var DEFAULT_API_KEY = "sk_test_pome_default";
+var PI_STATUSES = [
+  "requires_payment_method",
+  "requires_confirmation",
+  "requires_action",
+  "processing",
+  "requires_capture",
+  "canceled",
+  "succeeded"
+];
+var CHARGE_STATUSES = ["pending", "succeeded", "failed"];
+var REFUND_STATUSES = ["succeeded", "pending", "failed", "canceled"];
+var BALANCE_TX_STATUSES = ["pending", "available"];
+var paymentIntentSeedSchema = z.strictObject({
+  id: z.string().min(1),
+  account_id: z.string().min(1),
+  amount: z.number().int(),
+  currency: z.string().min(1),
+  status: z.enum(PI_STATUSES),
+  payment_method_types: z.array(z.string()).default(["crypto"]),
+  next_action: z.unknown().nullable().optional(),
+  latest_charge_id: z.string().nullable().optional(),
+  capture_method: z.string().default("automatic"),
+  confirmation_method: z.string().default("automatic"),
+  idempotency_key: z.string().nullable().optional(),
+  metadata: z.record(z.string(), z.string()).default({}),
+  crypto_deposit: z.unknown().nullable().optional(),
+  client_secret: z.string().min(1),
+  created: z.number().int(),
+  updated: z.number().int(),
+  canceled_at: z.number().int().nullable().optional(),
+  captured_at: z.number().int().nullable().optional()
+});
+var chargeSeedSchema = z.strictObject({
+  id: z.string().min(1),
+  account_id: z.string().min(1),
+  payment_intent_id: z.string().min(1),
+  amount: z.number().int(),
+  amount_captured: z.number().int().default(0),
+  amount_refunded: z.number().int().default(0),
+  status: z.enum(CHARGE_STATUSES),
+  balance_transaction_id: z.string().nullable().optional(),
+  captured: z.boolean().default(true),
+  currency: z.string().min(1),
+  created: z.number().int()
+});
+var refundSeedSchema = z.strictObject({
+  id: z.string().min(1),
+  account_id: z.string().min(1),
+  charge_id: z.string().min(1),
+  payment_intent_id: z.string().min(1),
+  amount: z.number().int(),
+  currency: z.string().min(1),
+  status: z.enum(REFUND_STATUSES),
+  reason: z.string().nullable().optional(),
+  balance_transaction_id: z.string().nullable().optional(),
+  idempotency_key: z.string().nullable().optional(),
+  created: z.number().int()
+});
+var balanceTransactionSeedSchema = z.strictObject({
+  id: z.string().min(1),
+  account_id: z.string().min(1),
+  type: z.string().min(1),
+  amount: z.number().int(),
+  fee: z.number().int().default(0),
+  net: z.number().int(),
+  currency: z.string().min(1),
+  source_id: z.string().nullable().optional(),
+  source_type: z.string().nullable().optional(),
+  available_on: z.number().int(),
+  status: z.enum(BALANCE_TX_STATUSES).default("available"),
+  created: z.number().int()
+});
+var seedSchema = z.strictObject({
+  api_keys: z.array(z.strictObject({
+    key: z.string().min(1),
+    sid: z.string().min(1),
+    account_id: z.string().min(1).optional()
+  })).default([]),
+  failure_injection: z.array(failureInjectionRuleSchema).default([]),
+  payment_intents: z.array(paymentIntentSeedSchema).default([]),
+  charges: z.array(chargeSeedSchema).default([]),
+  refunds: z.array(refundSeedSchema).default([]),
+  balance_transactions: z.array(balanceTransactionSeedSchema).default([])
+});
+function withoutSidecarMeta(input) {
+  if (!input || typeof input !== "object" || Array.isArray(input))
+    return input;
+  if (!("_meta" in input))
+    return input;
+  const { _meta, ...rest } = input;
+  return rest;
+}
+function parseSeed(input) {
+  return seedSchema.parse(withoutSidecarMeta(input));
+}
+function loadSeedFromEnv(env = process.env) {
+  const raw = env.POME_SEED_JSON;
+  if (raw === void 0 || raw === "") {
+    return defaultSeed();
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch (err) {
+    throw new Error(`POME_SEED_JSON is not valid JSON: ${err.message}`);
+  }
+  const unwrapped = unwrapStripeSeed(parsed);
+  return parseSeed(unwrapped);
+}
+function unwrapStripeSeed(value) {
+  if (value && typeof value === "object" && !Array.isArray(value)) {
+    const stripeKey = value.stripe;
+    if (stripeKey && typeof stripeKey === "object" && !Array.isArray(stripeKey)) {
+      const inner = stripeKey.seed;
+      if (inner !== void 0) {
+        return inner;
+      }
+    }
+  }
+  return value;
+}
+function defaultSeed() {
+  return {
+    api_keys: [
+      { key: DEFAULT_API_KEY, sid: DEFAULT_SID, account_id: `acct_${DEFAULT_SID}` }
+    ],
+    failure_injection: [],
+    payment_intents: [],
+    charges: [],
+    refunds: [],
+    balance_transactions: []
+  };
+}
+
+export { DEFAULT_API_KEY, DEFAULT_SID, defaultSeed, loadSeedFromEnv, parseSeed, seedSchema };

package/dist/{chunk-Q5NBPR57.js → chunk-3FZY376K.js}

@@ -422,8 +422,16 @@ var linearSeedSchema = z.object({
     }
   }
 });
+function withoutSidecarMeta(input) {
+  if (!input || typeof input !== "object" || Array.isArray(input))
+    return input;
+  if (!("_meta" in input))
+    return input;
+  const { _meta, ...rest } = input;
+  return rest;
+}
 function parseSeed(input) {
-  return linearSeedSchema.parse(input);
+  return linearSeedSchema.parse(withoutSidecarMeta(input));
 }
 function loadSeedFromEnv(env = process.env) {
   const raw = env.POME_SEED_JSON;

package/dist/{chunk-T73VMABH.js → chunk-5NPGY73F.js}

@@ -1,5 +1,5 @@
-import { TWIN_NAMES, isTwinName, TWIN_REGISTRY } from './chunk-CNG6DQWX.js';
-import { createFileBackedRecorderStore, createRecorderStore } from './chunk-VOHTQV4J.js';
+import { TWIN_NAMES, isTwinName, TWIN_REGISTRY } from './chunk-RPPF2KDQ.js';
+import { createFileBackedRecorderStore, createRecorderStore } from './chunk-HRAD7MRX.js';
 
 // src/recorder/recorder.ts
 function createRecorder(options = {}) {

package/dist/{chunk-4EPOCS3X.js → chunk-77EGSHLT.js}

@@ -1,7 +1,7 @@
-import { createHostedClient, perTwinReturnedByCloud, parseTaskFile, runAgentCommand, writeRunArtifactsCore, toTwinHttpEvent, redactJsonl, uploadRunBlobs, scoreFromFinalizeResponse, scoreStatus, evaluationCounts } from './chunk-D3NCOYBV.js';
-import { readSeedFileText, parseSeedFileText, soleTwinOf, seedsForTwins } from './chunk-DWOCTCSE.js';
-import { readManifest, normalizeManifestTwins } from './chunk-L7XARKMM.js';
-import { MOUNTED_TWINS, HostedAuthError, HostedDiscardRefusedError, HostedQuotaError, HostedOrchError, HostedTrialError, agentResponseSchema, isMultiTwinSeedEnvelope } from './chunk-533VIN3J.js';
+import { createHostedClient, perTwinReturnedByCloud, parseTaskFile, runAgentCommand, writeRunArtifactsCore, toTwinHttpEvent, redactJsonl, uploadRunBlobs, scoreFromFinalizeResponse, scoreStatus, evaluationCounts } from './chunk-BS47AE55.js';
+import { readSeedFileText, parseSeedFileText, soleTwinOf, seedsForTwins } from './chunk-VPXIGCZW.js';
+import { readManifest, normalizeManifestTwins } from './chunk-DFOQGAKS.js';
+import { MOUNTED_TWINS, HostedAuthError, HostedDiscardRefusedError, HostedQuotaError, HostedOrchError, HostedTrialError, agentResponseSchema, isMultiTwinSeedEnvelope } from './chunk-NNXVR46L.js';
 import { redactSecrets, redactEvent } from './chunk-SG6ZTIMT.js';
 import { randomUUID, createHash } from 'node:crypto';
 import { rm, readFile, stat, mkdir, writeFile, chmod, mkdtemp, readdir, rename } from 'node:fs/promises';

package/dist/{chunk-NAU4UZOE.js → chunk-AEFXTGW3.js}

@@ -1,5 +1,5 @@
-import { parseTaskFile, seedStateForTwin, runAgentCommand, writeRunArtifactsCore } from './chunk-D3NCOYBV.js';
-import { createRecorder, bootTwin } from './chunk-T73VMABH.js';
+import { parseTaskFile, seedStateForTwin, runAgentCommand, writeRunArtifactsCore } from './chunk-BS47AE55.js';
+import { createRecorder, bootTwin } from './chunk-5NPGY73F.js';
 import { getAvailablePort } from './chunk-XDU6TD4O.js';
 import { buildEgressAllowlist, readBlockedEgress } from './chunk-CBFKZZBR.js';
 import { eventSchema } from './chunk-6KJC4BTO.js';

package/dist/{chunk-D3NCOYBV.js → chunk-BS47AE55.js}

@@ -1,10 +1,12 @@
-import { gmailSeedSchema, defaultSeedState } from './chunk-3T5XN64P.js';
-import { linearSeedSchema, defaultSeedState as defaultSeedState$1 } from './chunk-Q5NBPR57.js';
-import { isTwinName, TWIN_REGISTRY } from './chunk-CNG6DQWX.js';
-import { criterionSchema, normalizeTaskConfigKeys, finalizeResponseSchema, HostedDiscardRefusedError, HostedOrchError, HostedAuthError, HostedQuotaError, submitResultResponseSchema, createEvalSessionResponseSchema, createSessionResponseSchema, sessionPublicSchema } from './chunk-533VIN3J.js';
-import { seedSchema, parseSeed, defaultSeedState as defaultSeedState$2 } from './chunk-HJX25USP.js';
-import { toTwinHttpEventRow } from './chunk-VOHTQV4J.js';
+import { gmailSeedSchema, defaultSeedState } from './chunk-PASFBRK4.js';
+import { linearSeedSchema, defaultSeedState as defaultSeedState$1 } from './chunk-3FZY376K.js';
+import { isTwinName, TWIN_REGISTRY } from './chunk-RPPF2KDQ.js';
+import { criterionSchema, normalizeTaskConfigKeys, finalizeResponseSchema, HostedDiscardRefusedError, HostedOrchError, HostedAuthError, HostedQuotaError, submitResultResponseSchema, createEvalSessionResponseSchema, createSessionResponseSchema, sessionPublicSchema } from './chunk-NNXVR46L.js';
+import { seedSchema as seedSchema$1, parseSeed, defaultSeedState as defaultSeedState$2 } from './chunk-NBOQN5VX.js';
+import { seedSchema } from './chunk-YBWG5JK2.js';
+import { toTwinHttpEventRow } from './chunk-HRAD7MRX.js';
 import { redactEvent, redactSecrets } from './chunk-SG6ZTIMT.js';
+import { seedSchema as seedSchema$2 } from './chunk-2K6BJ3PI.js';
 import { mkdir, appendFile, writeFile, readFile } from 'node:fs/promises';
 import { existsSync } from 'node:fs';
 import { join, basename, extname } from 'node:path';
@@ -145,7 +147,7 @@ function normalizeLegacyIssueAssignee(issue) {
   return issue;
 }
 function parseGitHubSeedState(input) {
-  const seed = seedSchema.parse(parseSeed(normalizeLegacyGitHubSeed(input)));
+  const seed = seedSchema$1.parse(parseSeed(normalizeLegacyGitHubSeed(input)));
   if (seed.repositories.length === 0) {
     throw new Error("GitHub seed must contain at least one repository");
   }
@@ -165,41 +167,12 @@ var taskConfigSchema = z.preprocess(
     passThreshold: z.number().min(0).max(100).default(100)
   })
 );
-var stripeFailureInjectionRuleSchema = z.object({
-  method: z.string().min(1),
-  path: z.string().min(1),
-  attempt: z.number().int().positive(),
-  mode: z.enum(["before_handler", "after_handler"]).default("after_handler"),
-  status: z.number().int().min(100).max(599),
-  body: z.unknown()
-});
-var stripeSeedStateSchema = z.object({
-  api_keys: z.array(
-    z.object({
-      key: z.string().min(1).default("sk_test_pome_default"),
-      sid: z.string().min(1).default("default"),
-      account_id: z.string().min(1).optional()
-    })
-  ).default([]),
-  failure_injection: z.array(stripeFailureInjectionRuleSchema).default([]),
-  payment_intents: z.array(z.record(z.string(), z.unknown())).default([]),
-  charges: z.array(z.record(z.string(), z.unknown())).default([]),
-  refunds: z.array(z.record(z.string(), z.unknown())).default([]),
-  balance_transactions: z.array(z.record(z.string(), z.unknown())).default([])
-}).strict();
-var slackSeedStateSchema = z.object({
-  team: z.record(z.string(), z.unknown()).optional(),
-  users: z.array(z.record(z.string(), z.unknown())).default([]),
-  channels: z.array(z.record(z.string(), z.unknown())).default([]),
-  files: z.array(z.record(z.string(), z.unknown())).default([]),
-  emoji: z.array(z.record(z.string(), z.unknown())).default([])
-}).strict();
 var seedStateSchema = z.union([
   gmailSeedSchema,
-  slackSeedStateSchema,
-  linearSeedSchema,
   seedSchema,
-  stripeSeedStateSchema
+  linearSeedSchema,
+  seedSchema$1,
+  seedSchema$2
 ]);
 var seedEnvelopeSchema = z.record(z.string(), seedStateSchema);
 var taskSchema = z.object({
@@ -346,21 +319,22 @@ function buildSeedEnvelope(raw, twins) {
   }
   return envelope;
 }
-function parseSeedForTwin(twin, input) {
-  if (twin === "stripe") return stripeSeedStateSchema.parse(input);
-  if (twin === "slack") return slackSeedStateSchema.parse(input);
+function parseSeedForTwin(twin, raw) {
+  const input = stripSidecarMeta(raw);
+  if (twin === "stripe") return seedSchema$2.parse(input);
+  if (twin === "slack") return seedSchema.parse(input);
   if (twin === "gmail") return gmailSeedSchema.parse(input);
   if (twin === "linear") return linearSeedSchema.parse(input);
   return parseGitHubSeedState(input);
 }
 function defaultSeedForTwin(twin) {
   if (twin === "stripe") {
-    return stripeSeedStateSchema.parse({
+    return seedSchema$2.parse({
       api_keys: [{ key: "sk_test_pome_default", sid: "default", account_id: "acct_default" }]
     });
   }
   if (twin === "slack") {
-    return slackSeedStateSchema.parse({});
+    return seedSchema.parse({});
   }
   if (twin === "gmail") {
     return gmailSeedSchema.parse(defaultSeedState());
@@ -368,7 +342,7 @@ function defaultSeedForTwin(twin) {
   if (twin === "linear") {
     return linearSeedSchema.parse(defaultSeedState$1());
   }
-  return seedSchema.parse(defaultSeedState$2());
+  return seedSchema$1.parse(defaultSeedState$2());
 }
 function missingSidecarMessage(taskPath) {
   const pathLabel = taskPath ?? "<task>.md";
@@ -481,20 +455,20 @@ function parseFencedYaml(input) {
   return parse(stripFence(input));
 }
 function parseSeedStateForTask(input, config) {
-  if (isStripeOnly(config.twins)) return stripeSeedStateSchema.parse(input);
-  if (isSlackOnly(config.twins)) return slackSeedStateSchema.parse(input);
+  if (isStripeOnly(config.twins)) return seedSchema$2.parse(input);
+  if (isSlackOnly(config.twins)) return seedSchema.parse(input);
   if (isGmailOnly(config.twins)) return gmailSeedSchema.parse(input);
   if (isLinearOnly(config.twins)) return linearSeedSchema.parse(input);
   return parseGitHubSeedState(input);
 }
 function defaultSeedStateForConfig(twins) {
   if (isStripeOnly(twins)) {
-    return stripeSeedStateSchema.parse({
+    return seedSchema$2.parse({
       api_keys: [{ key: "sk_test_pome_default", sid: "default", account_id: "acct_default" }]
     });
   }
   if (isSlackOnly(twins)) {
-    return slackSeedStateSchema.parse({});
+    return seedSchema.parse({});
   }
   if (isGmailOnly(twins)) {
     return gmailSeedSchema.parse(defaultSeedState());
@@ -502,7 +476,7 @@ function defaultSeedStateForConfig(twins) {
   if (isLinearOnly(twins)) {
     return linearSeedSchema.parse(defaultSeedState$1());
   }
-  return seedSchema.parse(defaultSeedState$2());
+  return seedSchema$1.parse(defaultSeedState$2());
 }
 function isStripeOnly(twins) {
   return twins.length === 1 && twins[0] === "stripe";

package/dist/{chunk-L7XARKMM.js → chunk-DFOQGAKS.js}

@@ -1,4 +1,4 @@
-import { HostedOrchError, manifestSchema, deriveAgentSlug, SLUG_RE } from './chunk-533VIN3J.js';
+import { HostedOrchError, manifestSchema, deriveAgentSlug, SLUG_RE } from './chunk-NNXVR46L.js';
 import { readFile, writeFile } from 'node:fs/promises';
 import { resolve, join, dirname } from 'node:path';
 import { stringify, parse } from 'yaml';

package/dist/{chunk-CF6EIU2U.js → chunk-FBSA5L36.js}

@@ -2,7 +2,7 @@ import { z } from 'zod';
 
 // ../packages/sdk/dist/failure-injection-rules.js
 var FAILURE_INJECTION_OVERRIDE_KEY = "failureInjectionOverride";
-var failureInjectionRuleSchema = z.object({
+var failureInjectionRuleSchema = z.strictObject({
   method: z.string().min(1).transform((s) => s.toUpperCase()),
   path: z.string().min(1),
   attempt: z.number().int().positive(),

package/dist/{chunk-VOHTQV4J.js → chunk-HRAD7MRX.js}

@@ -1,5 +1,5 @@
 import { redactSecrets, redactEvent } from './chunk-SG6ZTIMT.js';
-import { FAILURE_INJECTION_OVERRIDE_KEY } from './chunk-CF6EIU2U.js';
+import { FAILURE_INJECTION_OVERRIDE_KEY } from './chunk-FBSA5L36.js';
 import { Hono } from 'hono';
 import { z } from 'zod';
 import { mkdirSync, openSync, createWriteStream, closeSync, writeFileSync, rmSync, readFileSync, fsync } from 'node:fs';

package/dist/{chunk-HJX25USP.js → chunk-NBOQN5VX.js}

@@ -1,20 +1,20 @@
 import { z } from 'zod';
 
 // ../packages/twin-github/dist/src/seed.js
-var seedSchema = z.object({
-  users: z.array(z.object({
+var seedSchema = z.strictObject({
+  users: z.array(z.strictObject({
     login: z.string().min(1),
     type: z.enum(["User", "Organization"]).default("User"),
     name: z.string().default("")
   })).default([]),
-  repositories: z.array(z.object({
+  repositories: z.array(z.strictObject({
     owner: z.string().min(1),
     name: z.string().min(1),
     description: z.string().default(""),
     private: z.boolean().default(false),
     default_branch: z.string().min(1).default("main"),
     collaborators: z.array(z.string().min(1)).default([]),
-    labels: z.array(z.object({
+    labels: z.array(z.strictObject({
       name: z.string().min(1),
       color: z.string().default("ededed"),
       description: z.string().default("")
@@ -34,7 +34,7 @@ var seedSchema = z.object({
     // remove. Refusing it keeps "the seed asked for a rename" and "the twin
     // serves a rename" the same statement. The content comes from the source
     // path, which the domain resolves on the branch the move happens on.
-    files: z.array(z.object({
+    files: z.array(z.strictObject({
       path: z.string().min(1),
       content: z.string().optional(),
       branch: z.string().optional(),
@@ -68,11 +68,13 @@ var seedSchema = z.object({
     // Milestones, tags and releases are repository-level entities the
     // twin already SERVES (`GET /milestones`, `/tags`, `/releases`,
     // `/releases/latest`, `/releases/tags/:tag`) and the seed could not
-    // express. Zod strips unknown keys, so a seed naming one reached the
+    // express. Zod stripped unknown keys, so a seed naming one reached the
     // domain as nothing at all and those routes could only ever answer `[]`
     // — a shape of infidelity no shape-diff can see, because an empty array
-    // on both sides compares zero elements.
-    milestones: z.array(z.object({
+    // on both sides compares zero elements. That silence is what `strictObject`
+    // closes for the general case (F-1689); this entry is the instance that
+    // was found first.
+    milestones: z.array(z.strictObject({
       // Assigned sequentially from 1 in seed order when omitted, the way
       // `nextMilestoneNumber` hands them out. Honored when given, so a
       // seed that pins `PATCH /milestones/2` addresses the milestone it
@@ -89,11 +91,11 @@ var seedSchema = z.object({
     // name or a SHA — and defaults to the repository's default-branch head. A
     // release whose `tag_name` matches an entry here reuses that tag rather
     // than minting a second one: `createRelease` looks the tag up first.
-    tags: z.array(z.object({
+    tags: z.array(z.strictObject({
       name: z.string().min(1),
       target: z.string().min(1).optional()
     })).default([]),
-    releases: z.array(z.object({
+    releases: z.array(z.strictObject({
       tag_name: z.string().min(1),
       // Nullable upstream, so an absent `name` means `null` — not `""`.
       name: z.string().optional(),
@@ -103,7 +105,7 @@ var seedSchema = z.object({
       prerelease: z.boolean().default(false),
       author: z.string().min(1).optional()
     })).default([]),
-    issues: z.array(z.object({
+    issues: z.array(z.strictObject({
       number: z.number().int().positive().optional(),
       title: z.string().min(1),
       body: z.string().default(""),
@@ -116,12 +118,12 @@ var seedSchema = z.object({
       // stamps every comment `pome-agent`: a world in which the agent
       // under test wrote every comment on the issue it is being asked to
       // read is not one worth testing against.
-      comments: z.array(z.object({
+      comments: z.array(z.strictObject({
         body: z.string().min(1),
         author: z.string().min(1).optional()
       })).default([])
     })).default([]),
-    pull_requests: z.array(z.object({
+    pull_requests: z.array(z.strictObject({
       number: z.number().int().positive().optional(),
       title: z.string().min(1),
       body: z.string().default(""),
@@ -131,7 +133,7 @@ var seedSchema = z.object({
       author: z.string().min(1).optional(),
       // Reviews seeded on this PR. `state` mirrors GitHub's review
       // state enum; `author` must exist in the user/collaborator set.
-      reviews: z.array(z.object({
+      reviews: z.array(z.strictObject({
         author: z.string().min(1),
         state: z.enum(["APPROVED", "CHANGES_REQUESTED", "COMMENTED"]).default("APPROVED"),
         body: z.string().default("")
@@ -139,7 +141,7 @@ var seedSchema = z.object({
       // Commit statuses applied to this PR's head SHA. Wired into the
       // commit_statuses table so get_pull_request_status and the merge
       // path see them without needing a separate setup call.
-      statuses: z.array(z.object({
+      statuses: z.array(z.strictObject({
         context: z.string().min(1).default("ci/build"),
         state: z.enum(["error", "failure", "pending", "success"]).default("success"),
         description: z.string().default("")
@@ -151,7 +153,7 @@ var seedSchema = z.object({
       // keeps all three apart: `reviews[].body` is the prose on a review
       // verdict, `review_comments[]` below is anchored to a file and
       // line, and THIS one is the timeline.
-      comments: z.array(z.object({
+      comments: z.array(z.strictObject({
         body: z.string().min(1),
         author: z.string().min(1).optional()
       })).default([]),
@@ -161,7 +163,7 @@ var seedSchema = z.object({
       // `line` must exist in it: a seeded review comment is one
       // `POST /pulls/:n/comments` could have produced, not a row only the
       // seeder can make.
-      review_comments: z.array(z.object({
+      review_comments: z.array(z.strictObject({
         body: z.string().min(1),
         path: z.string().min(1),
         line: z.number().int().positive().default(1),
@@ -169,10 +171,41 @@ var seedSchema = z.object({
         author: z.string().min(1).optional()
       })).default([])
     })).default([])
+  }).superRefine((repo, ctx) => {
+    const claimed = /* @__PURE__ */ new Map();
+    const entries = [
+      ["issues", repo.issues ?? []],
+      ["pull_requests", repo.pull_requests ?? []]
+    ];
+    for (const [field, rows] of entries) {
+      for (const [index, row] of rows.entries()) {
+        if (row.number === void 0)
+          continue;
+        const where = `${field}[${index}]`;
+        const first = claimed.get(row.number);
+        if (first === void 0) {
+          claimed.set(row.number, where);
+          continue;
+        }
+        ctx.addIssue({
+          code: "custom",
+          path: [field, index, "number"],
+          message: `number ${row.number} is claimed by both ${first} and ${where} in ${repo.owner}/${repo.name}. Issues and pull requests share one per-repo counter, so a number names one entity or the other.`
+        });
+      }
+    }
   }))
 });
+function withoutSidecarMeta(input) {
+  if (!input || typeof input !== "object" || Array.isArray(input))
+    return input;
+  if (!("_meta" in input))
+    return input;
+  const { _meta, ...rest } = input;
+  return rest;
+}
 function parseSeed(input) {
-  const seed = seedSchema.parse(normalizeLegacyGitHubSeed(input));
+  const seed = seedSchema.parse(normalizeLegacyGitHubSeed(withoutSidecarMeta(input)));
   if (seed.repositories.length === 0) {
     throw new Error("GitHub seed must contain at least one repository");
   }