@pome-sh/cli 0.43.0 → 0.44.0

package/dist/{chunk-HRAD7MRX.js → chunk-TWURH7YM.js}

@@ -445,6 +445,7 @@ function defineTwin(spec) {
 }
 var RESERVED_SESSION_PREFIXES = ["/_pome", "/mcp"];
 var CLIENT_IP_VAR = "pomeClientIp";
+var ADMIN_NO_PEER_OPT_IN = "TWIN_ADMIN_ALLOW_NO_PEER";
 var nodeGetConnInfo;
 function loadNodeGetConnInfo() {
   nodeGetConnInfo ??= import('@hono/node-server/conninfo').then((mod) => mod.getConnInfo, () => void 0);
@@ -490,10 +491,11 @@ function createAdminGate(options = {}) {
     }
     const remote = await getClientIp(c);
     if (!remote) {
-      if (process.env.NODE_ENV === "production")
-        return forbidden();
-      await next();
-      return;
+      if (process.env[ADMIN_NO_PEER_OPT_IN] === "1") {
+        await next();
+        return;
+      }
+      return forbidden();
     }
     if (!isLoopbackAddress(remote))
       return forbidden();
@@ -503,13 +505,22 @@ function createAdminGate(options = {}) {
 
 // ../packages/sdk/dist/auth.js
 var PROVIDER_SHAPED_TEAM_ID = "provider-shaped";
+var DEV_ONLY_INSECURE_SECRET = "dev-only-insecure-secret";
+var DEV_SECRETS_OPT_IN = "POME_ALLOW_DEV_SECRETS";
 function resolveAuthSecret() {
   const secret = process.env.TWIN_AUTH_SECRET;
-  if (!secret && process.env.NODE_ENV === "production") {
-    throw new Error("TWIN_AUTH_SECRET required in production");
-  }
-  return secret ?? "dev-only-insecure-secret";
+  if (secret)
+    return secret;
+  if (process.env[DEV_SECRETS_OPT_IN] === "1")
+    return DEV_ONLY_INSECURE_SECRET;
+  throw new MissingAuthSecretError();
 }
+var MissingAuthSecretError = class extends Error {
+  constructor() {
+    super(`TWIN_AUTH_SECRET is not set. Set it, or set ${DEV_SECRETS_OPT_IN}=1 to serve the public dev secret on a twin nothing but this machine can reach.`);
+    this.name = "MissingAuthSecretError";
+  }
+};
 var SIG_LENGTH = 22;
 function mintProviderToken(spec, options) {
   const prefix = options.prefix ?? spec.prefixes[0];
@@ -674,7 +685,14 @@ function bearerAuth(options = {}) {
       }
     }
     if (options.providerToken) {
-      const providerSid = verifyProviderToken(options.providerToken, token);
+      let providerSid;
+      try {
+        providerSid = verifyProviderToken(options.providerToken, token);
+      } catch (err) {
+        if (err instanceof MissingAuthSecretError)
+          return respond(unauthorized("invalid", { token }));
+        throw err;
+      }
       if (providerSid) {
         const mismatch2 = checkSid(providerSid);
         if (mismatch2)
@@ -1281,8 +1299,14 @@ function isLoopbackHost(value) {
 function ensureTwinAuthSecret(twin, host) {
   if (process.env.TWIN_AUTH_SECRET)
     return;
-  if (isLoopbackHost(host))
+  if (isLoopbackHost(host)) {
+    if (process.env[DEV_SECRETS_OPT_IN] === "1")
+      return;
+    const secret = randomBytes(32).toString("hex");
+    process.env.TWIN_AUTH_SECRET = secret;
+    console.log(`[twin-${twin}] TWIN_AUTH_SECRET not set \u2014 generated ${secret} for this loopback boot (not persisted; set TWIN_AUTH_SECRET to choose one, or ${DEV_SECRETS_OPT_IN}=1 for the public dev secret)`);
     return;
+  }
   const dataDir = process.env.POME_TWIN_DATA_DIR || join(".pome-data", twin);
   const secretPath = join(dataDir, "secret");
   try {

package/dist/{chunk-3YCX3KUL.js → chunk-ZVKPZHFQ.js}

@@ -1,4 +1,4 @@
-import { isTwinName, TWIN_REGISTRY, TWIN_NAMES } from './chunk-ELIEDNF3.js';
+import { isTwinName, TWIN_REGISTRY, TWIN_NAMES } from './chunk-RYAQ2ZYA.js';
 import { readFileSync } from 'node:fs';
 import { parse } from 'yaml';
 

package/dist/{runTrialGroup-4QL6S7QO.js → runTrialGroup-I3PC2AST.js}

@@ -1,14 +1,16 @@
-import { runTaskHosted, createHostedClient, parseTaskFile, resolveRunAgentIdentity, outcomeOf, isNarrated, criterionPhrase, narratorReadingLines } from './chunk-OBFHOACQ.js';
-import './chunk-3YCX3KUL.js';
+import { runTaskHosted, createHostedClient, parseTaskFile, resolveRunAgentIdentity, outcomeOf, isNarrated, criterionPhrase, narratorReadingLines } from './chunk-G3YRDMBE.js';
+import './chunk-ZVKPZHFQ.js';
+import './chunk-4LQ4IJOC.js';
 import './chunk-NW7HGA2K.js';
 import './chunk-PASFBRK4.js';
 import './chunk-3FZY376K.js';
-import './chunk-ELIEDNF3.js';
-import { HostedQuotaError, HostedTrialError } from './chunk-CS7O2ZXB.js';
+import './chunk-RYAQ2ZYA.js';
+import { HostedQuotaError, HostedTrialError } from './chunk-26UAPLHK.js';
+import './chunk-M7ATJ423.js';
 import './chunk-NBOQN5VX.js';
 import './chunk-YBWG5JK2.js';
-import './chunk-HRAD7MRX.js';
-import './chunk-5KFDRR53.js';
+import './chunk-TWURH7YM.js';
+import './chunk-7VZBAHQ2.js';
 import './chunk-SG6ZTIMT.js';
 import './chunk-2K6BJ3PI.js';
 import './chunk-FBSA5L36.js';

package/dist/{server-KC57K5AC.js → server-GECKG2H6.js}

@@ -1,4 +1,4 @@
-export { POME_RECORDER_EVENTS_PATH, PROVIDER_SHAPED_TEAM_ID, TwinBootError, TwinError, UnknownToolError, bearerAuth, createAdminGate, createApp, createFileBackedRecorderStore, createRecorderHandle, createRecorderStore, created, ensureTwinAuthSecret, failureInjectionMiddleware, formTokenResolver, isLoopbackHost, mintProviderToken, ok, queryTokenResolver, recordedRequestHeaders, requireAdminAuth, resolveAuthSecret, resolveRecorderStore, serve, setClientIp, setRecordedTool, toTwinHttpEventRow, twinBuildInfo, verifyProviderToken } from './chunk-HRAD7MRX.js';
-import './chunk-5KFDRR53.js';
+export { POME_RECORDER_EVENTS_PATH, PROVIDER_SHAPED_TEAM_ID, TwinBootError, TwinError, UnknownToolError, bearerAuth, createAdminGate, createApp, createFileBackedRecorderStore, createRecorderHandle, createRecorderStore, created, ensureTwinAuthSecret, failureInjectionMiddleware, formTokenResolver, isLoopbackHost, mintProviderToken, ok, queryTokenResolver, recordedRequestHeaders, requireAdminAuth, resolveAuthSecret, resolveRecorderStore, serve, setClientIp, setRecordedTool, toTwinHttpEventRow, twinBuildInfo, verifyProviderToken } from './chunk-TWURH7YM.js';
+import './chunk-7VZBAHQ2.js';
 export { redactEvent, redactSecrets } from './chunk-SG6ZTIMT.js';
 export { FAILURE_INJECTION_OVERRIDE_KEY, createFailureInjectionStore, failureInjectionRuleSchema } from './chunk-FBSA5L36.js';

package/dist/src/cli/main.js

@@ -1,30 +1,32 @@
 #!/usr/bin/env node
-import { DEFAULT_CONTROL_PLANE_URL, DEFAULT_DASHBOARD_URL, clearLocalCredentials, friendlyHostedError, SESSION_TWIN_NAMES, runSessionCreate, runSessionList, runSessionStop, resolveCredentials, parseTaskFile, runTaskHosted, scoreStatus, runScoreLine, narratorReadingLines, readLatestRun, readMetaSummary, discoverRunSet, outcomeOf, persistCredentialsAfterLogin, DEFAULT_DOCS_SITE_ORIGIN, resolveSeams, readConfigTwins, resolveCachedAgentId, readLinkCache, seedStateForTwin, runAgentCommand, scoreCountsSummary, criterionRowLine, readCodeCriteria, postAgentResolver, writeLinkCache, ensurePomeGitignored, writeRunArtifactsCore, createHostedClient, redactJsonl, scoreFromFinalizeResponse, parseGitHubSeedState, uploadRunBlobs, isPreSatisfied } from '../../chunk-OBFHOACQ.js';
-import '../../chunk-3YCX3KUL.js';
+import { DEFAULT_CONTROL_PLANE_URL, DEFAULT_DASHBOARD_URL, clearLocalCredentials, friendlyHostedError, SESSION_TWIN_NAMES, runSessionCreate, runSessionList, runSessionStop, resolveCredentials, parseTaskFile, runTaskHosted, scoreStatus, runScoreLine, narratorReadingLines, readLatestRun, readMetaSummary, discoverRunSet, outcomeOf, persistCredentialsAfterLogin, DEFAULT_DOCS_SITE_ORIGIN, resolveSeams, readConfigTwins, resolveCachedAgentId, readLinkCache, seedStateForTwin, runAgentCommand, scoreCountsSummary, criterionRowLine, readCodeCriteria, postAgentResolver, writeLinkCache, ensurePomeGitignored, writeRunArtifactsCore, createHostedClient, redactJsonl, scoreFromFinalizeResponse, parseGitHubSeedState, uploadRunBlobs, isPreSatisfied } from '../../chunk-G3YRDMBE.js';
+import '../../chunk-ZVKPZHFQ.js';
+import '../../chunk-4LQ4IJOC.js';
 import '../../chunk-NW7HGA2K.js';
 import { GMAIL_CHECKS } from '../../chunk-JM6VS62R.js';
 import '../../chunk-PASFBRK4.js';
 import { LINEAR_CHECKS } from '../../chunk-TSOSDKXP.js';
 import '../../chunk-3FZY376K.js';
-import { createRecorder, bootTwin } from '../../chunk-5A6HHA54.js';
-import { TWIN_NAME_LIST, TWIN_REGISTRY, createGitHubSmokeApp } from '../../chunk-ELIEDNF3.js';
+import { createRecorder, bootTwin } from '../../chunk-3T4FUF43.js';
+import { TWIN_NAME_LIST, TWIN_REGISTRY, createGitHubSmokeApp } from '../../chunk-RYAQ2ZYA.js';
 import { getAvailablePort } from '../../chunk-XDU6TD4O.js';
-import { MOUNTED_TWINS, readManifest, deriveAgentSlug, writeManifest, MANIFEST_JSON, exitCodeFor, readRequiredManifest, HostedUsageError, HostedOrchError, normalizeManifestTwins } from '../../chunk-CS7O2ZXB.js';
+import { readManifest, writeManifest, MANIFEST_JSON, exitCodeFor, readRequiredManifest, HostedUsageError, HostedOrchError, normalizeManifestTwins } from '../../chunk-26UAPLHK.js';
+import { MOUNTED_TWINS, deriveAgentSlug } from '../../chunk-M7ATJ423.js';
 import { buildEgressAllowlist, readBlockedEgress } from '../../chunk-CBFKZZBR.js';
 import { TAPE_ASSERTABLE_TOOLS } from '../../chunk-C4BVTUA3.js';
 import { seedSchema } from '../../chunk-NBOQN5VX.js';
 import { SLACK_CHECKS } from '../../chunk-2ZGVDTJC.js';
 import { oneOf, defineCheck, repoRef, VACUITY_SENTINEL_NUMBER, childStatePath, VACUITY_SENTINEL, statePath, templateSlots, renderCheck, checksDigest, checkPattern, checkNearMissPattern } from '../../chunk-JWJYNAWI.js';
 import '../../chunk-YBWG5JK2.js';
-import '../../chunk-HRAD7MRX.js';
-import { eventSchema, isLegacyEventRow } from '../../chunk-5KFDRR53.js';
+import '../../chunk-TWURH7YM.js';
+import { eventSchema, isLegacyEventRow } from '../../chunk-7VZBAHQ2.js';
 import { redactSecrets, redactEvent } from '../../chunk-SG6ZTIMT.js';
 import '../../chunk-2K6BJ3PI.js';
 import '../../chunk-FBSA5L36.js';
 import { Command } from 'commander';
 import { existsSync, readFileSync, realpathSync, statSync, constants } from 'node:fs';
 import { mkdir, readFile, writeFile, readdir, copyFile, stat, cp } from 'node:fs/promises';
-import { dirname, resolve, join, basename, relative, sep, extname } from 'node:path';
+import { dirname, resolve, join, basename, relative, extname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { serve } from '@hono/node-server';
 import { randomBytes, randomUUID, createHash } from 'node:crypto';
@@ -322,78 +324,6 @@ function makeShutdown(child, graceMs) {
     return done;
   };
 }
-function resolveTwinHttpParents(rows) {
-  const eventIdByToolUseId = /* @__PURE__ */ new Map();
-  for (const row of rows) {
-    if (row.kind === "ToolUseEvent") eventIdByToolUseId.set(row.tool_use_id, row.event_id);
-  }
-  if (eventIdByToolUseId.size === 0) return rows;
-  return rows.map((row) => {
-    if (row.kind !== "TwinHttpEvent") return row;
-    if (row.parent_event_id != null) return row;
-    const causingToolUseId = row.tool_call_id ?? row.correlation_id ?? null;
-    if (causingToolUseId === null) return row;
-    const parentEventId = eventIdByToolUseId.get(causingToolUseId);
-    return parentEventId === void 0 ? row : { ...row, parent_event_id: parentEventId };
-  });
-}
-async function mergeAdapterSignalsIntoEvents(signalsPath, eventsJsonlPath) {
-  let rawSignals;
-  try {
-    rawSignals = await readFile(signalsPath, "utf8");
-  } catch {
-    return { appended: 0, dropped: 0 };
-  }
-  let dropped = 0;
-  const signalRows = [];
-  for (const line of rawSignals.split("\n")) {
-    if (line.length === 0) continue;
-    let parsed;
-    try {
-      parsed = JSON.parse(line);
-    } catch {
-      dropped += 1;
-      continue;
-    }
-    const result = eventSchema.safeParse(parsed);
-    if (!result.success) {
-      dropped += 1;
-      continue;
-    }
-    signalRows.push(redactEvent(result.data));
-  }
-  if (signalRows.length === 0) return { appended: 0, dropped };
-  let rawEvents;
-  try {
-    rawEvents = await readFile(eventsJsonlPath, "utf8");
-  } catch {
-    rawEvents = "";
-  }
-  const eventRows = [];
-  const unparseablePassthrough = [];
-  for (const line of rawEvents.split("\n")) {
-    if (line.length === 0) continue;
-    let parsed;
-    try {
-      parsed = JSON.parse(line);
-    } catch {
-      unparseablePassthrough.push(line);
-      continue;
-    }
-    const result = eventSchema.safeParse(parsed);
-    if (result.success) {
-      eventRows.push(redactEvent(result.data));
-    } else {
-      unparseablePassthrough.push(line);
-    }
-  }
-  const merged = resolveTwinHttpParents(eventRows.concat(signalRows));
-  merged.sort((a, b) => a.ts < b.ts ? -1 : a.ts > b.ts ? 1 : 0);
-  const sortedJsonl = merged.map((r) => JSON.stringify(r)).join("\n");
-  const head = unparseablePassthrough.length > 0 ? unparseablePassthrough.join("\n") + "\n" : "";
-  await writeFile(eventsJsonlPath, head + sortedJsonl + "\n");
-  return { appended: signalRows.length, dropped };
-}
 
 // src/runner/runTaskCore.ts
 async function writeRunNoScore(input) {
@@ -428,9 +358,6 @@ async function runTask(options) {
   const writeRun = writeRunNoScore;
   const runDir = join(artifactsDir, scenario.slug, runId);
   await mkdir(runDir, { recursive: true });
-  const signalsPath = join(runDir, "signals.jsonl");
-  await writeFile(signalsPath, "");
-  const signalsPathForEnv = sep === "\\" ? signalsPath.replace(/\\/g, "/") : signalsPath;
   const eventsJsonlPath = join(runDir, "events.jsonl");
   await writeFile(eventsJsonlPath, "");
   const egressAllowHosts = buildEgressAllowlist(process.env, {
@@ -525,7 +452,6 @@ async function runTask(options) {
     POME_AUTH_TOKEN: token,
     POME_RUN_ID: runId,
     POME_ARTIFACTS_DIR: runDir,
-    POME_ADAPTER_SIGNALS_PATH: signalsPathForEnv,
     ...options.extraAgentEnv ?? {},
     ...proxyEnv
   };
@@ -575,7 +501,6 @@ async function runTask(options) {
         stateInitial,
         stateFinal: stateFinal2
       });
-      await mergeAdapterSignalsIntoEvents(signalsPath, eventsJsonlPath);
       void exitCode2;
       const blockedEgress2 = await collectBlockedEgress();
       return { scenario, runId, artifacts: artifacts2, agent: preflight, exitCode: 3, blockedEgress: blockedEgress2 };
@@ -601,7 +526,6 @@ async function runTask(options) {
       stateInitial,
       stateFinal
     });
-    await mergeAdapterSignalsIntoEvents(signalsPath, eventsJsonlPath);
     const blockedEgress = await collectBlockedEgress();
     return { scenario, runId, artifacts, agent, exitCode, blockedEgress };
   } finally {
@@ -1187,7 +1111,7 @@ function extractJsonPayload(text) {
 
 // src/task/seed-verifier.ts
 async function verifySeedWithTwin(seed) {
-  const { GitHubDomain, openGitHubCloneDatabase } = await import('../../src-E7NTZL2F.js');
+  const { GitHubDomain, openGitHubCloneDatabase } = await import('../../src-252X4AEZ.js');
   const db = openGitHubCloneDatabase(":memory:");
   try {
     new GitHubDomain(db).seed(seed);
@@ -3395,7 +3319,7 @@ function localDigest(twin) {
 }
 function bakedVersions() {
   try {
-    return JSON.parse('{"@pome-sh/sdk":"0.11.6","@pome-sh/wire":"0.4.1","@pome-sh/twin-github":"0.12.0","@pome-sh/twin-gmail":"0.4.0","@pome-sh/twin-linear":"0.4.1","@pome-sh/twin-slack":"0.4.1","@pome-sh/twin-stripe":"0.4.7"}');
+    return JSON.parse('{"@pome-sh/sdk":"0.11.6","@pome-sh/wire":"0.4.2","@pome-sh/twin-github":"0.12.0","@pome-sh/twin-gmail":"0.4.0","@pome-sh/twin-linear":"0.4.1","@pome-sh/twin-slack":"0.4.1","@pome-sh/twin-stripe":"0.4.7"}');
   } catch {
     return {};
   }
@@ -4093,13 +4017,13 @@ function validateJsonl(name, raw) {
         `pome eval: ${name} is corrupt \u2014 line ${i + 1} is not valid JSON.`
       );
     }
-    if (name === "events.jsonl" && isLegacyEventRow(parsed)) {
+    if (isLegacyEventRow(parsed)) {
       throw new HostedUsageError(
         `pome eval: events.jsonl line ${i + 1} has no "kind" \u2014 it was recorded before the unified event shape, and the control plane refuses it. Re-run the task to record the trace again.`
       );
     }
   }
-  if (name === "events.jsonl" && nonEmpty === 0) {
+  if (nonEmpty === 0) {
     throw new HostedUsageError(
       "pome eval: events.jsonl is empty \u2014 the run captured no trace to evaluate."
     );
@@ -4120,24 +4044,12 @@ async function readRunDirArtifacts(runDir) {
   parseJsonFile("state_initial.json", stateInitialJson);
   const stateFinalJson = await readRequiredFile(runDir, "state_final.json");
   parseJsonFile("state_final.json", stateFinalJson);
-  let signalsJsonl = null;
-  try {
-    signalsJsonl = await readFile(join(runDir, "signals.jsonl"), "utf8");
-  } catch (err) {
-    if (err.code !== "ENOENT") {
-      throw new HostedUsageError(
-        `pome eval: signals.jsonl could not be read: ${err instanceof Error ? err.message : String(err)}`
-      );
-    }
-  }
-  if (signalsJsonl !== null) validateJsonl("signals.jsonl", signalsJsonl);
   return {
     runDir,
     meta,
     eventsJsonl,
     stateInitialJson,
     stateFinalJson,
-    signalsJsonl,
     metaJson: metaRaw
   };
 }
@@ -4239,7 +4151,6 @@ async function runEval(options) {
     stateFinalJson: JSON.stringify(
       redactSecrets(JSON.parse(artifacts.stateFinalJson))
     ),
-    signalsJsonl: redactJsonl(artifacts.signalsJsonl ?? ""),
     // D18.1 — already validated as parseable JSON in readRunDirArtifacts.
     // Re-serialize with the SAME formatting writeRunArtifactsCore's writeJson
     // uses (2-space indent + trailing newline) so the bytes `pome eval`
@@ -4284,8 +4195,7 @@ async function runEval(options) {
       expectedBehavior: "",
       traceStorageKey: keys.eventsKey ?? void 0,
       stateInitialStorageKey: keys.stateInitialKey ?? void 0,
-      stateFinalStorageKey: keys.stateFinalKey ?? void 0,
-      signalsStorageKey: keys.signalsKey ?? void 0
+      stateFinalStorageKey: keys.stateFinalKey ?? void 0
     });
   }
   let finalized;
@@ -4961,7 +4871,7 @@ function firstSentence(description) {
 function resolveExampleRef(env = process.env) {
   const override = env.POME_EXAMPLE_REF?.trim();
   if (override) return override;
-  const baked = "589885b59adab9a5fded977620a6adc25125da85".trim() ;
+  const baked = "a80259dcddd5ec6f1a16dba3a6f252539996ebb7".trim() ;
   return FULL_SHA.test(baked) ? baked : "main";
 }
 function rawUrlFor(example, file, ref) {
@@ -5324,7 +5234,7 @@ var DEFAULT_AGENT_COMMAND = `node ${DEFAULT_AGENT_FILE}`;
 var MANIFEST_SCHEMA_URL = "https://pome.sh/schemas/v1/pome.json";
 var MAX_UNREADABLE_PATHS_SHOWN = 5;
 function readPackageVersion() {
-  if ("0.43.0".length > 0) return "0.43.0";
+  if ("0.44.0".length > 0) return "0.44.0";
   try {
     const here = dirname(fileURLToPath(import.meta.url));
     const candidates = [
@@ -5728,7 +5638,7 @@ function createProgram() {
         return;
       }
       {
-        const { runDoctorChecks } = await import('../../checks-QYUPKBPT.js');
+        const { runDoctorChecks } = await import('../../checks-BOOQNOGJ.js');
         const { renderDoctorReport } = await import('../../render-ZQQ4UMNO.js');
         const doctorReport = await runDoctorChecks({ mode: useLocal ? "full" : "hosted" });
         if (!doctorReport.ok) {
@@ -5766,7 +5676,7 @@ function createProgram() {
               taskForRuns.config.runs
             );
             if (k > 1) {
-              const { runTrialGroup } = await import('../../runTrialGroup-4QL6S7QO.js');
+              const { runTrialGroup } = await import('../../runTrialGroup-I3PC2AST.js');
               const fileForRerun = relative(process.cwd(), file);
               const rerunCommand = defaultTask ? options.trials !== void 0 ? `pome run -n ${k}` : "pome run" : `pome run ${fileForRerun && !fileForRerun.startsWith("..") ? fileForRerun : file} -n ${k}`;
               const groupResult = await runTrialGroup({
@@ -5848,7 +5758,7 @@ function createProgram() {
   program.command("doctor").summary("Check the agent and twin wiring").description(
     "Check the agent\u2194twin wiring: pome.json (or pome.yaml) present + valid, the local twin boots + serves, requests routed to the twin (not a hardcoded production host), egress floor active. On failure prints one named cause (file:line where knowable) + one concrete fix and exits non-zero."
   ).action(async () => {
-    const { runDoctorChecks } = await import('../../checks-QYUPKBPT.js');
+    const { runDoctorChecks } = await import('../../checks-BOOQNOGJ.js');
     const { renderDoctorReport } = await import('../../render-ZQQ4UMNO.js');
     const report = await runDoctorChecks();
     for (const line of renderDoctorReport(report, { passNote: true })) console.error(line);
@@ -5999,64 +5909,85 @@ function createProgram() {
       })
     );
   });
-  const twin = program.command("twin").summary("Run a twin on this machine").description("Start a twin on this machine, print its status or a starter seed file");
+  const twin = program.command("twin").summary("Run a twin on this machine").description(
+    "Start a twin on this machine, print its status, show its tape, or write a starter seed file"
+  );
   twin.command("start").argument(
-    "[name]",
-    `Twin name (${TWIN_NAME_LIST.join(" | ")}). Optional when --seed names exactly one twin.`
+    "[names...]",
+    `Twin names (${TWIN_NAME_LIST.join(" | ")}). One, or several to boot together (each on its own port). Optional when --seed names exactly one twin.`
   ).option(
     "--port <port>",
     // Built from the registry rather than restated: the per-twin overrides
     // are the registry's to add, and this text went stale when linear's did.
     `Port to bind (default: $PORT, else ${TWIN_NAME_LIST.filter(
       (twin2) => TWIN_REGISTRY[twin2].portEnvName
-    ).map((twin2) => `${TWIN_REGISTRY[twin2].portEnvName}/${TWIN_REGISTRY[twin2].defaultPort} for ${twin2}`).join(", ")}, otherwise 3333)`
+    ).map((twin2) => `${TWIN_REGISTRY[twin2].portEnvName}/${TWIN_REGISTRY[twin2].defaultPort} for ${twin2}`).join(", ")}, otherwise 3333). With several twins: the first twin's port; the rest take the next free ports above it. Without it, each twin takes its default port, else the next free one.`
   ).option(
     "--seed <path>",
-    "Boot this twin from a JSON or YAML seed file instead of its default. A seed REPLACES the default; it does not merge. Takes the per-twin envelope { <twin>: { \u2026 } } or one twin's flat seed. Overrides POME_SEED_JSON."
+    "Boot from a JSON or YAML seed file instead of the default. A seed REPLACES the default; it does not merge. Takes the per-twin envelope { <twin>: { \u2026 } } or one twin's flat seed (several twins need the envelope, one entry per named twin). Overrides POME_SEED_JSON."
   ).description(
-    "Start a standalone twin as a long-lived foreground server (Ctrl-C to stop)"
-  ).action(async (name, options) => {
-    const { runTwinStartCommand } = await import('../../twinStart-QQ64EV3P.js');
-    await runTwinStartCommand(name, options);
+    "Start one or more standalone twins as a long-lived foreground server (Ctrl-C to stop)"
+  ).action(async (names, options) => {
+    const { runTwinStartCommand } = await import('../../twinStart-E5R26SF4.js');
+    await runTwinStartCommand(names, options);
   });
   twin.command("new-seed").argument("<name...>", `Twin name (${TWIN_NAME_LIST.join(" | ")}). Repeat for one file covering several.`).option("--out <path>", "Write to this file instead of stdout. Refuses to overwrite.").summary("Print a new starter seed file for a twin").description(
     "Print a new starter seed file for a twin, generated from the twin's own starting state. One twin is flat, several are the per-twin envelope. Boot it with `twin start <twin> --seed`, seed a sandbox with `sandbox create --twin <twin> --seed`, or drop it beside a task as <task>.seed.json"
   ).action(async (names, options) => {
-    const { runTwinSeedCommand } = await import('../../twinSeed-4VQ7RRCL.js');
+    const { runTwinSeedCommand } = await import('../../twinSeed-ADWQ62CA.js');
     await runTwinSeedCommand(names, options);
   });
-  twin.command("status").summary("Say whether the local twin is running").description(
-    "Say whether the twin `pome twin start` last booted here is still running, and print its paste-able env lines"
+  twin.command("status").summary("Say whether the local twins are running").description(
+    "Say whether each twin `pome twin start` booted here is still running, and print its paste-able env lines"
   ).action(async () => {
     const statusPath = ".pome/twin-status.json";
     if (!existsSync(statusPath)) {
       console.log("No standalone twin status found.");
       return;
     }
-    let status;
-    let origin;
+    const { standaloneStatusEntries } = await import('../../twinStart-E5R26SF4.js');
+    let entries;
     try {
-      status = JSON.parse(await readFile(statusPath, "utf8"));
-      if (typeof status.name !== "string" || status.name === "") throw new Error("no name");
-      origin = new URL(status.rest_url).origin;
+      entries = standaloneStatusEntries(JSON.parse(await readFile(statusPath, "utf8"))).map(
+        (status) => ({ ...status, origin: new URL(status.rest_url).origin })
+      );
+      if (entries.length === 0 || entries.some((status) => status.name === "")) {
+        throw new Error("no twins");
+      }
     } catch {
       throw new Error(
         `pome twin status: ${statusPath} is unreadable \u2014 start a twin with \`pome twin start <${TWIN_NAME_LIST.join("|")}>\`.`
       );
     }
-    const running = await fetch(`${origin}/healthz`, {
-      signal: AbortSignal.timeout(1e3)
-    }).then(
-      async (res) => res.ok && (await res.json().catch(() => ({}))).twin === status.name,
-      () => false
-    );
-    console.log(
-      running ? `${status.name} twin \u2014 running` : `${status.name} twin \u2014 not running (stale ${statusPath})`
-    );
-    const envName = TWIN_REGISTRY[status.name]?.envName ?? status.name.toUpperCase();
-    console.log(`POME_${envName}_REST_URL=${status.rest_url}`);
-    console.log(`POME_${envName}_MCP_URL=${status.mcp_url}`);
-    console.log(`POME_AUTH_TOKEN=${status.auth_token}`);
+    for (const [index, status] of entries.entries()) {
+      const running = await fetch(`${status.origin}/healthz`, {
+        signal: AbortSignal.timeout(1e3)
+      }).then(
+        async (res) => res.ok && (await res.json().catch(() => ({}))).twin === status.name,
+        () => false
+      );
+      if (index > 0) console.log("");
+      console.log(
+        running ? `${status.name} twin \u2014 running` : `${status.name} twin \u2014 not running (stale ${statusPath})`
+      );
+      const envName = TWIN_REGISTRY[status.name]?.envName ?? status.name.toUpperCase();
+      console.log(`POME_${envName}_REST_URL=${status.rest_url}`);
+      console.log(`POME_${envName}_MCP_URL=${status.mcp_url}`);
+      console.log(`POME_AUTH_TOKEN=${status.auth_token}`);
+    }
+  });
+  twin.command("tape").argument(
+    "[name]",
+    `Twin name (${TWIN_NAME_LIST.join(" | ")}). Optional when one twin is recorded in .pome/twin-status.json.`
+  ).option(
+    "--diff",
+    "Also print the state diff since the twin booted \u2014 its seed, default or --seed \u2014 per collection: added, changed, removed.",
+    false
+  ).option("--json", "Print the tape (and the diff, with --diff) as one JSON envelope.", false).summary("Show what the agent did on a local twin").description(
+    "Print the running twin's tape: one line per request with status, fidelity and whether state changed, so a call that claimed success but landed nothing stands out. Reads the twin's address and token from .pome/twin-status.json; no account, no hosted call."
+  ).action(async (name, options) => {
+    const { runTwinTapeCommand } = await import('../../twinTape-3XNU3GRW.js');
+    await runTwinTapeCommand(name, options);
   });
   program.command("capture-server").summary("Record the agent's model calls").description(
     "Boot an HTTP CONNECT-tunnel proxy that appends one LlmCallEvent per tunnel to events.jsonl. Spawned by `pome run`; agent traffic flows via HTTPS_PROXY."

package/dist/{src-E7NTZL2F.js → src-252X4AEZ.js}

@@ -2,8 +2,8 @@ import './chunk-C4BVTUA3.js';
 import { defaultSeedState, parseSeed } from './chunk-NBOQN5VX.js';
 export { defaultSeedState, parseSeed, seedSchema } from './chunk-NBOQN5VX.js';
 import { routeInputDeclarer, integerInput, mountDeclaredRoute, UndeclaredInputError, MalformedBodyError } from './chunk-IZFM7W2V.js';
-import { loadMcpToolFixture, defineTwin, twinBuildInfo, deriveMcpToolTable, UnknownToolError, openTwinDatabase, createApp, typeDisagreements } from './chunk-HRAD7MRX.js';
-import './chunk-5KFDRR53.js';
+import { loadMcpToolFixture, defineTwin, twinBuildInfo, deriveMcpToolTable, UnknownToolError, openTwinDatabase, createApp, typeDisagreements } from './chunk-TWURH7YM.js';
+import './chunk-7VZBAHQ2.js';
 import './chunk-SG6ZTIMT.js';
 import './chunk-FBSA5L36.js';
 import { z, ZodError } from 'zod';

package/dist/{src-Z63IOSCJ.js → src-CV7QDV5E.js}

@@ -3,8 +3,8 @@ import { gmailErrorEnvelope, gmailSeedSchema, parseSeed, defaultSeedState, notFo
 export { DEFAULT_GMAIL_AGENT_EMAIL, GmailError, SEARCH_MAILBOX_MESSAGE_BUDGET, agentPathInboxMailbox, defaultSeedState, gmailErrorEnvelope, gmailSeedSchema, loadSeedFromEnv, parseSearchQuery, parseSeed, validateSearchQuery } from './chunk-PASFBRK4.js';
 import './chunk-JWJYNAWI.js';
 import { routeInputDeclarer, integerInput, booleanInput, repeatedInput, mountDeclaredRoute, UndeclaredInputError, MalformedBodyError } from './chunk-IZFM7W2V.js';
-import { loadMcpToolFixture, deriveMcpToolTable, defineTwin, openTwinDatabase, createApp } from './chunk-HRAD7MRX.js';
-import './chunk-5KFDRR53.js';
+import { loadMcpToolFixture, deriveMcpToolTable, defineTwin, openTwinDatabase, createApp } from './chunk-TWURH7YM.js';
+import './chunk-7VZBAHQ2.js';
 import './chunk-SG6ZTIMT.js';
 import './chunk-FBSA5L36.js';
 import { createHash, createHmac, timingSafeEqual, randomBytes } from 'node:crypto';

package/dist/{src-5F5OTVYT.js → src-D3PKLT54.js}

@@ -3,8 +3,8 @@ import { MCP_PAGE_MAX, defaultSeedState, linearSeedSchema, notFound, badUserInpu
 export { DEFAULT_LINEAR_CLOCK, DEFAULT_LINEAR_EMAIL, DEFAULT_LINEAR_PORT, DEFAULT_LINEAR_SID, DEFAULT_LINEAR_TOKEN, LINEAR_PROVIDER_TOKEN_PREFIX, LinearTwinError, STATE_EXPORT_CAP, assertWebhookUrl, defaultSeedState, linearErrorEnvelope, linearSeedSchema, loadSeedFromEnv, parseSeed, unauthorizedEnvelope, unsupportedEnvelope, webhookUrlError } from './chunk-3FZY376K.js';
 import './chunk-JWJYNAWI.js';
 import { routeInputDeclarer, mountDeclaredRoute, UndeclaredInputError } from './chunk-IZFM7W2V.js';
-import { loadMcpToolFixture, deriveMcpToolTable, openTwinDatabase, defineTwin, createApp } from './chunk-HRAD7MRX.js';
-import './chunk-5KFDRR53.js';
+import { loadMcpToolFixture, deriveMcpToolTable, openTwinDatabase, defineTwin, createApp } from './chunk-TWURH7YM.js';
+import './chunk-7VZBAHQ2.js';
 import './chunk-SG6ZTIMT.js';
 import './chunk-FBSA5L36.js';
 import { createHmac, timingSafeEqual, createHash, randomBytes } from 'node:crypto';

package/dist/{src-7X62AGW7.js → src-LPTWNBO5.js}

@@ -3,8 +3,8 @@ import './chunk-JWJYNAWI.js';
 import { defaultSeedState, parseSeed } from './chunk-YBWG5JK2.js';
 export { defaultSeedState, loadSeedFromEnv, parseSeed, seedSchema } from './chunk-YBWG5JK2.js';
 import { routeInputDeclarer, booleanInput, integerInput, mountDeclaredRoute, UndeclaredInputError } from './chunk-IZFM7W2V.js';
-import { loadMcpToolFixture, defineTwin, queryTokenResolver, formTokenResolver, deriveMcpToolTable, UnknownToolError, openTwinDatabase, createApp, typeDisagreements } from './chunk-HRAD7MRX.js';
-import './chunk-5KFDRR53.js';
+import { loadMcpToolFixture, defineTwin, queryTokenResolver, formTokenResolver, deriveMcpToolTable, UnknownToolError, openTwinDatabase, createApp, typeDisagreements } from './chunk-TWURH7YM.js';
+import './chunk-7VZBAHQ2.js';
 import './chunk-SG6ZTIMT.js';
 import './chunk-FBSA5L36.js';
 import { z, ZodError } from 'zod';

package/dist/{src-ESRY2MC7.js → src-P5MEPJY4.js}

@@ -1,6 +1,6 @@
 import { routeInputDeclarer, bracketedQuery, integerInput, booleanInput, mountDeclaredRoute, UndeclaredInputError } from './chunk-IZFM7W2V.js';
-import { loadMcpToolFixture, openTwinDatabase, defineTwin, twinBuildInfo, deriveMcpToolTable, failureInjectionMiddleware, createApp, recordedRequestHeaders, UnknownToolError } from './chunk-HRAD7MRX.js';
-import './chunk-5KFDRR53.js';
+import { loadMcpToolFixture, openTwinDatabase, defineTwin, twinBuildInfo, deriveMcpToolTable, failureInjectionMiddleware, createApp, recordedRequestHeaders, UnknownToolError } from './chunk-TWURH7YM.js';
+import './chunk-7VZBAHQ2.js';
 import './chunk-SG6ZTIMT.js';
 import { defaultSeed, seedSchema } from './chunk-2K6BJ3PI.js';
 export { DEFAULT_API_KEY, DEFAULT_SID, defaultSeed, loadSeedFromEnv, parseSeed, seedSchema } from './chunk-2K6BJ3PI.js';

package/dist/twinHarness-YDGIGB4P.js

@@ -0,0 +1,6 @@
+export { UnsupportedTwinError, bootTwin } from './chunk-3T4FUF43.js';
+export { STRIPE_LOCAL_ACCOUNT_ID } from './chunk-RYAQ2ZYA.js';
+import './chunk-TWURH7YM.js';
+import './chunk-7VZBAHQ2.js';
+import './chunk-SG6ZTIMT.js';
+import './chunk-FBSA5L36.js';

package/dist/{twinSeed-4VQ7RRCL.js → twinSeed-ADWQ62CA.js}

@@ -1,4 +1,4 @@
-import { TWIN_NAMES, isTwinName, TWIN_REGISTRY } from './chunk-ELIEDNF3.js';
+import { TWIN_NAMES, isTwinName, TWIN_REGISTRY } from './chunk-RYAQ2ZYA.js';
 import { writeFile } from 'node:fs/promises';
 
 async function generateSeedFile(twins) {