@pome-sh/cli 0.43.1 → 0.45.0

package/dist/src/cli/main.js

@@ -1,30 +1,32 @@
 #!/usr/bin/env node
-import { DEFAULT_CONTROL_PLANE_URL, DEFAULT_DASHBOARD_URL, clearLocalCredentials, friendlyHostedError, SESSION_TWIN_NAMES, runSessionCreate, runSessionList, runSessionStop, resolveCredentials, parseTaskFile, runTaskHosted, scoreStatus, runScoreLine, narratorReadingLines, readLatestRun, readMetaSummary, discoverRunSet, outcomeOf, persistCredentialsAfterLogin, DEFAULT_DOCS_SITE_ORIGIN, resolveSeams, readConfigTwins, resolveCachedAgentId, readLinkCache, seedStateForTwin, runAgentCommand, scoreCountsSummary, criterionRowLine, readCodeCriteria, postAgentResolver, writeLinkCache, ensurePomeGitignored, writeRunArtifactsCore, createHostedClient, redactJsonl, scoreFromFinalizeResponse, parseGitHubSeedState, uploadRunBlobs, isPreSatisfied } from '../../chunk-A6AM6KS4.js';
-import '../../chunk-GQSNU3YP.js';
+import { getAvailablePort } from '../../chunk-XDU6TD4O.js';
+import { DEFAULT_CONTROL_PLANE_URL, DEFAULT_DASHBOARD_URL, clearLocalCredentials, friendlyHostedError, SESSION_TWIN_NAMES, runSessionCreate, runSessionList, runSessionStop, resolveCredentials, parseTaskFile, runTaskHosted, scoreStatus, runScoreLine, narratorReadingLines, readLatestRun, readMetaSummary, discoverRunSet, outcomeOf, persistCredentialsAfterLogin, DEFAULT_DOCS_SITE_ORIGIN, resolveSeams, readConfigTwins, resolveCachedAgentId, readLinkCache, seedStateForTwin, runAgentCommand, scoreCountsSummary, criterionRowLine, readCodeCriteria, postAgentResolver, writeLinkCache, ensurePomeGitignored, writeRunArtifactsCore, createHostedClient, redactJsonl, scoreFromFinalizeResponse, parseGitHubSeedState, uploadRunBlobs, isPreSatisfied } from '../../chunk-HEEFOMSZ.js';
+import '../../chunk-4LQ4IJOC.js';
+import { readManifest, writeManifest, MANIFEST_JSON, exitCodeFor, readRequiredManifest, HostedUsageError, HostedOrchError, normalizeManifestTwins } from '../../chunk-26UAPLHK.js';
+import { MOUNTED_TWINS, deriveAgentSlug } from '../../chunk-M7ATJ423.js';
 import '../../chunk-NW7HGA2K.js';
 import { GMAIL_CHECKS } from '../../chunk-JM6VS62R.js';
 import '../../chunk-PASFBRK4.js';
 import { LINEAR_CHECKS } from '../../chunk-TSOSDKXP.js';
 import '../../chunk-3FZY376K.js';
-import { createRecorder, bootTwin } from '../../chunk-64AWQJ7R.js';
-import { TWIN_NAME_LIST, TWIN_REGISTRY, createGitHubSmokeApp } from '../../chunk-4DXTT3RV.js';
-import { getAvailablePort } from '../../chunk-XDU6TD4O.js';
-import { MOUNTED_TWINS, readManifest, deriveAgentSlug, writeManifest, MANIFEST_JSON, exitCodeFor, readRequiredManifest, HostedUsageError, HostedOrchError, normalizeManifestTwins } from '../../chunk-CS7O2ZXB.js';
 import { buildEgressAllowlist, readBlockedEgress } from '../../chunk-CBFKZZBR.js';
+import '../../chunk-DX2KCFJM.js';
+import { createRecorder, bootTwin } from '../../chunk-EZYVICDB.js';
+import { TWIN_NAME_LIST, TWIN_REGISTRY, createGitHubSmokeApp } from '../../chunk-BXYPNEJY.js';
 import { TAPE_ASSERTABLE_TOOLS } from '../../chunk-C4BVTUA3.js';
 import { seedSchema } from '../../chunk-NBOQN5VX.js';
 import { SLACK_CHECKS } from '../../chunk-2ZGVDTJC.js';
 import { oneOf, defineCheck, repoRef, VACUITY_SENTINEL_NUMBER, childStatePath, VACUITY_SENTINEL, statePath, templateSlots, renderCheck, checksDigest, checkPattern, checkNearMissPattern } from '../../chunk-JWJYNAWI.js';
 import '../../chunk-YBWG5JK2.js';
 import '../../chunk-TWURH7YM.js';
-import { eventSchema, isLegacyEventRow } from '../../chunk-5KFDRR53.js';
+import { eventSchema, isLegacyEventRow } from '../../chunk-7VZBAHQ2.js';
 import { redactSecrets, redactEvent } from '../../chunk-SG6ZTIMT.js';
 import '../../chunk-2K6BJ3PI.js';
 import '../../chunk-FBSA5L36.js';
 import { Command } from 'commander';
 import { existsSync, readFileSync, realpathSync, statSync, constants } from 'node:fs';
-import { mkdir, readFile, writeFile, readdir, copyFile, stat, cp } from 'node:fs/promises';
-import { dirname, resolve, join, basename, relative, sep, extname } from 'node:path';
+import { readFile, mkdir, writeFile, readdir, copyFile, stat, open, unlink, chmod, cp } from 'node:fs/promises';
+import { dirname, resolve, join, basename, relative, extname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { serve } from '@hono/node-server';
 import { randomBytes, randomUUID, createHash } from 'node:crypto';
@@ -35,6 +37,7 @@ import { createInterface } from 'node:readline';
 import { z } from 'zod';
 import Anthropic from '@anthropic-ai/sdk';
 import { createRequire } from 'node:module';
+import { homedir } from 'node:os';
 
 async function readEventsJsonl(runDir) {
   const file = resolve(runDir, "events.jsonl");
@@ -322,78 +325,6 @@ function makeShutdown(child, graceMs) {
     return done;
   };
 }
-function resolveTwinHttpParents(rows) {
-  const eventIdByToolUseId = /* @__PURE__ */ new Map();
-  for (const row of rows) {
-    if (row.kind === "ToolUseEvent") eventIdByToolUseId.set(row.tool_use_id, row.event_id);
-  }
-  if (eventIdByToolUseId.size === 0) return rows;
-  return rows.map((row) => {
-    if (row.kind !== "TwinHttpEvent") return row;
-    if (row.parent_event_id != null) return row;
-    const causingToolUseId = row.tool_call_id ?? row.correlation_id ?? null;
-    if (causingToolUseId === null) return row;
-    const parentEventId = eventIdByToolUseId.get(causingToolUseId);
-    return parentEventId === void 0 ? row : { ...row, parent_event_id: parentEventId };
-  });
-}
-async function mergeAdapterSignalsIntoEvents(signalsPath, eventsJsonlPath) {
-  let rawSignals;
-  try {
-    rawSignals = await readFile(signalsPath, "utf8");
-  } catch {
-    return { appended: 0, dropped: 0 };
-  }
-  let dropped = 0;
-  const signalRows = [];
-  for (const line of rawSignals.split("\n")) {
-    if (line.length === 0) continue;
-    let parsed;
-    try {
-      parsed = JSON.parse(line);
-    } catch {
-      dropped += 1;
-      continue;
-    }
-    const result = eventSchema.safeParse(parsed);
-    if (!result.success) {
-      dropped += 1;
-      continue;
-    }
-    signalRows.push(redactEvent(result.data));
-  }
-  if (signalRows.length === 0) return { appended: 0, dropped };
-  let rawEvents;
-  try {
-    rawEvents = await readFile(eventsJsonlPath, "utf8");
-  } catch {
-    rawEvents = "";
-  }
-  const eventRows = [];
-  const unparseablePassthrough = [];
-  for (const line of rawEvents.split("\n")) {
-    if (line.length === 0) continue;
-    let parsed;
-    try {
-      parsed = JSON.parse(line);
-    } catch {
-      unparseablePassthrough.push(line);
-      continue;
-    }
-    const result = eventSchema.safeParse(parsed);
-    if (result.success) {
-      eventRows.push(redactEvent(result.data));
-    } else {
-      unparseablePassthrough.push(line);
-    }
-  }
-  const merged = resolveTwinHttpParents(eventRows.concat(signalRows));
-  merged.sort((a, b) => a.ts < b.ts ? -1 : a.ts > b.ts ? 1 : 0);
-  const sortedJsonl = merged.map((r) => JSON.stringify(r)).join("\n");
-  const head = unparseablePassthrough.length > 0 ? unparseablePassthrough.join("\n") + "\n" : "";
-  await writeFile(eventsJsonlPath, head + sortedJsonl + "\n");
-  return { appended: signalRows.length, dropped };
-}
 
 // src/runner/runTaskCore.ts
 async function writeRunNoScore(input) {
@@ -428,9 +359,6 @@ async function runTask(options) {
   const writeRun = writeRunNoScore;
   const runDir = join(artifactsDir, scenario.slug, runId);
   await mkdir(runDir, { recursive: true });
-  const signalsPath = join(runDir, "signals.jsonl");
-  await writeFile(signalsPath, "");
-  const signalsPathForEnv = sep === "\\" ? signalsPath.replace(/\\/g, "/") : signalsPath;
   const eventsJsonlPath = join(runDir, "events.jsonl");
   await writeFile(eventsJsonlPath, "");
   const egressAllowHosts = buildEgressAllowlist(process.env, {
@@ -525,7 +453,6 @@ async function runTask(options) {
     POME_AUTH_TOKEN: token,
     POME_RUN_ID: runId,
     POME_ARTIFACTS_DIR: runDir,
-    POME_ADAPTER_SIGNALS_PATH: signalsPathForEnv,
     ...options.extraAgentEnv ?? {},
     ...proxyEnv
   };
@@ -575,7 +502,6 @@ async function runTask(options) {
         stateInitial,
         stateFinal: stateFinal2
       });
-      await mergeAdapterSignalsIntoEvents(signalsPath, eventsJsonlPath);
       void exitCode2;
       const blockedEgress2 = await collectBlockedEgress();
       return { scenario, runId, artifacts: artifacts2, agent: preflight, exitCode: 3, blockedEgress: blockedEgress2 };
@@ -601,7 +527,6 @@ async function runTask(options) {
       stateInitial,
       stateFinal
     });
-    await mergeAdapterSignalsIntoEvents(signalsPath, eventsJsonlPath);
     const blockedEgress = await collectBlockedEgress();
     return { scenario, runId, artifacts, agent, exitCode, blockedEgress };
   } finally {
@@ -1187,7 +1112,7 @@ function extractJsonPayload(text) {
 
 // src/task/seed-verifier.ts
 async function verifySeedWithTwin(seed) {
-  const { GitHubDomain, openGitHubCloneDatabase } = await import('../../src-G6CMFUR6.js');
+  const { GitHubDomain, openGitHubCloneDatabase } = await import('../../src-46YGR2WY.js');
   const db = openGitHubCloneDatabase(":memory:");
   try {
     new GitHubDomain(db).seed(seed);
@@ -3395,7 +3320,7 @@ function localDigest(twin) {
 }
 function bakedVersions() {
   try {
-    return JSON.parse('{"@pome-sh/sdk":"0.11.6","@pome-sh/wire":"0.4.2","@pome-sh/twin-github":"0.12.0","@pome-sh/twin-gmail":"0.4.0","@pome-sh/twin-linear":"0.4.1","@pome-sh/twin-slack":"0.4.1","@pome-sh/twin-stripe":"0.4.7"}');
+    return JSON.parse('{"@pome-sh/sdk":"0.11.6","@pome-sh/wire":"0.4.3","@pome-sh/twin-github":"0.12.0","@pome-sh/twin-gmail":"0.4.0","@pome-sh/twin-linear":"0.4.1","@pome-sh/twin-slack":"0.4.1","@pome-sh/twin-stripe":"0.4.7"}');
   } catch {
     return {};
   }
@@ -4093,13 +4018,13 @@ function validateJsonl(name, raw) {
         `pome eval: ${name} is corrupt \u2014 line ${i + 1} is not valid JSON.`
       );
     }
-    if (name === "events.jsonl" && isLegacyEventRow(parsed)) {
+    if (isLegacyEventRow(parsed)) {
       throw new HostedUsageError(
         `pome eval: events.jsonl line ${i + 1} has no "kind" \u2014 it was recorded before the unified event shape, and the control plane refuses it. Re-run the task to record the trace again.`
       );
     }
   }
-  if (name === "events.jsonl" && nonEmpty === 0) {
+  if (nonEmpty === 0) {
     throw new HostedUsageError(
       "pome eval: events.jsonl is empty \u2014 the run captured no trace to evaluate."
     );
@@ -4120,24 +4045,12 @@ async function readRunDirArtifacts(runDir) {
   parseJsonFile("state_initial.json", stateInitialJson);
   const stateFinalJson = await readRequiredFile(runDir, "state_final.json");
   parseJsonFile("state_final.json", stateFinalJson);
-  let signalsJsonl = null;
-  try {
-    signalsJsonl = await readFile(join(runDir, "signals.jsonl"), "utf8");
-  } catch (err) {
-    if (err.code !== "ENOENT") {
-      throw new HostedUsageError(
-        `pome eval: signals.jsonl could not be read: ${err instanceof Error ? err.message : String(err)}`
-      );
-    }
-  }
-  if (signalsJsonl !== null) validateJsonl("signals.jsonl", signalsJsonl);
   return {
     runDir,
     meta,
     eventsJsonl,
     stateInitialJson,
     stateFinalJson,
-    signalsJsonl,
     metaJson: metaRaw
   };
 }
@@ -4239,7 +4152,6 @@ async function runEval(options) {
     stateFinalJson: JSON.stringify(
       redactSecrets(JSON.parse(artifacts.stateFinalJson))
     ),
-    signalsJsonl: redactJsonl(artifacts.signalsJsonl ?? ""),
     // D18.1 — already validated as parseable JSON in readRunDirArtifacts.
     // Re-serialize with the SAME formatting writeRunArtifactsCore's writeJson
     // uses (2-space indent + trailing newline) so the bytes `pome eval`
@@ -4284,8 +4196,7 @@ async function runEval(options) {
       expectedBehavior: "",
       traceStorageKey: keys.eventsKey ?? void 0,
       stateInitialStorageKey: keys.stateInitialKey ?? void 0,
-      stateFinalStorageKey: keys.stateFinalKey ?? void 0,
-      signalsStorageKey: keys.signalsKey ?? void 0
+      stateFinalStorageKey: keys.stateFinalKey ?? void 0
     });
   }
   let finalized;
@@ -4961,7 +4872,7 @@ function firstSentence(description) {
 function resolveExampleRef(env = process.env) {
   const override = env.POME_EXAMPLE_REF?.trim();
   if (override) return override;
-  const baked = "aa6e8ff0d76f2bfbdd8c01e72239431644cb849a".trim() ;
+  const baked = "16bd8bf4255ab4a22c0d466529abcab652301773".trim() ;
   return FULL_SHA.test(baked) ? baked : "main";
 }
 function rawUrlFor(example, file, ref) {
@@ -5316,6 +5227,143 @@ async function loadTrialEvents(runDir) {
   }
   return events;
 }
+var USAGE_EVENT = "cli_usage";
+var USAGE_DOCS_URL = "https://github.com/pome-sh/digital-twins#telemetry";
+var DEFAULT_HOST = "https://us.i.posthog.com";
+var REQUEST_TIMEOUT_MS = 1500;
+function bakedIn(name) {
+  const value = name === "key" ? ""  : "" ;
+  return value !== void 0 && value.length > 0 ? value : void 0;
+}
+function telemetryDestination(env = process.env) {
+  const key = env.POME_TELEMETRY_KEY || bakedIn("key");
+  if (!key) return void 0;
+  const host = (env.POME_TELEMETRY_HOST || bakedIn("host") || DEFAULT_HOST).replace(/\/+$/, "");
+  return { key, host };
+}
+function telemetryOptOut(env = process.env) {
+  const off = (value) => value !== void 0 && /^(0|false|off|no)$/i.test(value.trim());
+  const set = (value) => value !== void 0 && value.trim() !== "" && value.trim() !== "0";
+  if (off(env.POME_TELEMETRY)) return "POME_TELEMETRY";
+  if (set(env.DO_NOT_TRACK)) return "DO_NOT_TRACK";
+  if (set(env.CI)) return "CI";
+  return void 0;
+}
+function usageStatePath() {
+  return join(homedir(), ".pome", "telemetry.json");
+}
+function usageProperties(input) {
+  const nodeVersion = input.nodeVersion ?? process.version;
+  return {
+    command: input.command,
+    cli_version: input.version,
+    os: input.platform ?? process.platform,
+    node_major: Number(nodeVersion.replace(/^v/, "").split(".")[0]),
+    // Anonymous events: no person profile is created or updated in PostHog.
+    $process_person_profile: false
+  };
+}
+function commandName(command) {
+  const names = [];
+  let current = command;
+  while (current && current.parent) {
+    names.unshift(current.name());
+    current = current.parent;
+  }
+  return names.join(" ");
+}
+var FIRST_RUN_NOTICE = `pome sends one anonymous usage event per day (CLI version, OS, Node major, command name; no arguments, paths or repo names). Turn it off with POME_TELEMETRY=0. ${USAGE_DOCS_URL}`;
+async function readState(path) {
+  try {
+    const parsed = JSON.parse(await readFile(path, "utf8"));
+    if (typeof parsed.id === "string" && parsed.id.length > 0) {
+      return {
+        id: parsed.id,
+        ...typeof parsed.last_sent === "string" ? { last_sent: parsed.last_sent } : {},
+        ...parsed.notice_shown === true ? { notice_shown: true } : {}
+      };
+    }
+  } catch {
+  }
+  return { id: randomUUID() };
+}
+async function writeState(path, state) {
+  await mkdir(dirname(path), { recursive: true, mode: 448 });
+  await writeFile(path, `${JSON.stringify(state, null, 2)}
+`, { mode: 384 });
+  await chmod(path, 384);
+}
+var STALE_LOCK_MS = 3e4;
+async function withStateLock(path, fn) {
+  const lockPath = `${path}.lock`;
+  await mkdir(dirname(path), { recursive: true, mode: 448 });
+  try {
+    const handle = await open(lockPath, "wx", 384);
+    await handle.close();
+  } catch (err) {
+    if (err.code !== "EEXIST") throw err;
+    const age = await stat(lockPath).then((s) => Date.now() - s.mtimeMs, () => 0);
+    if (age <= STALE_LOCK_MS) return "locked";
+    await unlink(lockPath).catch(() => void 0);
+    try {
+      const handle = await open(lockPath, "wx", 384);
+      await handle.close();
+    } catch {
+      return "locked";
+    }
+  }
+  try {
+    return await fn();
+  } finally {
+    await unlink(lockPath).catch(() => void 0);
+  }
+}
+async function maybeSendUsageTick(input) {
+  const env = input.env ?? process.env;
+  const optOut = telemetryOptOut(env);
+  if (optOut) return { sent: false, reason: "opt-out", detail: optOut };
+  const destination = telemetryDestination(env);
+  if (!destination) return { sent: false, reason: "no-key" };
+  const statePath2 = input.statePath ?? usageStatePath();
+  const today = (input.now ?? /* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+  let state;
+  try {
+    const claimed = await withStateLock(statePath2, async () => {
+      const current = await readState(statePath2);
+      if (current.last_sent === today) return void 0;
+      if (!current.notice_shown) {
+        (input.notify ?? ((line) => console.error(line)))(FIRST_RUN_NOTICE);
+        current.notice_shown = true;
+      }
+      current.last_sent = today;
+      await writeState(statePath2, current);
+      return current;
+    });
+    if (claimed === "locked" || claimed === void 0) return { sent: false, reason: "already-today" };
+    state = claimed;
+  } catch (err) {
+    return { sent: false, reason: "request-failed", detail: `state: ${err.message}` };
+  }
+  const body = {
+    api_key: destination.key,
+    event: USAGE_EVENT,
+    distinct_id: state.id,
+    properties: usageProperties({ command: input.command, version: input.version }),
+    timestamp: (input.now ?? /* @__PURE__ */ new Date()).toISOString()
+  };
+  try {
+    const res = await (input.fetchImpl ?? fetch)(`${destination.host}/capture/`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify(body),
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+    });
+    if (!res.ok) return { sent: false, reason: "request-failed", detail: `HTTP ${res.status}` };
+    return { sent: true };
+  } catch (err) {
+    return { sent: false, reason: "request-failed", detail: err.message };
+  }
+}
 
 // src/cli/main.ts
 var PACKAGE_VERSION = readPackageVersion();
@@ -5324,7 +5372,7 @@ var DEFAULT_AGENT_COMMAND = `node ${DEFAULT_AGENT_FILE}`;
 var MANIFEST_SCHEMA_URL = "https://pome.sh/schemas/v1/pome.json";
 var MAX_UNREADABLE_PATHS_SHOWN = 5;
 function readPackageVersion() {
-  if ("0.43.1".length > 0) return "0.43.1";
+  if ("0.45.0".length > 0) return "0.45.0";
   try {
     const here = dirname(fileURLToPath(import.meta.url));
     const candidates = [
@@ -5353,8 +5401,91 @@ function createProgram() {
     process.env.POME_API_URL ?? DEFAULT_CONTROL_PLANE_URL
   ).option("--artifacts-dir <dir>", "Directory for run artifacts", "runs");
   program.name("pome").description(
-    "Test AI agents against digital twins of real SaaS APIs. Runs are recorded to app.pome.sh. Start with `pome init`."
-  ).version(PACKAGE_VERSION).showHelpAfterError("(add --help for usage)");
+    "Stateful local twins of GitHub, Slack, Stripe, Gmail and Linear that your agent calls as if they were the real API. Start with `pome twin start <twin>`."
+  ).version(PACKAGE_VERSION).showHelpAfterError("(add --help for usage)").hook("preAction", (_root, actionCommand) => {
+    void maybeSendUsageTick({ command: commandName(actionCommand), version: PACKAGE_VERSION });
+  });
+  const twin = program.command("twin").summary("Run a twin on this machine").description(
+    "Start a twin on this machine, print its status, show its tape, or write a starter seed file"
+  );
+  twin.command("start").argument(
+    "[names...]",
+    `Twin names (${TWIN_NAME_LIST.join(" | ")}). One, or several to boot together (each on its own port). Optional when --seed names exactly one twin.`
+  ).option(
+    "--port <port>",
+    // Built from the registry rather than restated: the per-twin overrides
+    // are the registry's to add, and this text went stale when linear's did.
+    `Port to bind (default: $PORT, else ${TWIN_NAME_LIST.filter(
+      (twin2) => TWIN_REGISTRY[twin2].portEnvName
+    ).map((twin2) => `${TWIN_REGISTRY[twin2].portEnvName}/${TWIN_REGISTRY[twin2].defaultPort} for ${twin2}`).join(", ")}, otherwise 3333). With several twins: the first twin's port; the rest take the next free ports above it. Without it, each twin takes its default port, else the next free one.`
+  ).option(
+    "--seed <path>",
+    "Boot from a JSON or YAML seed file instead of the default. A seed REPLACES the default; it does not merge. Takes the per-twin envelope { <twin>: { \u2026 } } or one twin's flat seed (several twins need the envelope, one entry per named twin). Overrides POME_SEED_JSON."
+  ).description(
+    "Start one or more standalone twins as a long-lived foreground server (Ctrl-C to stop)"
+  ).action(async (names, options) => {
+    const { runTwinStartCommand } = await import('../../twinStart-XN3BYOUF.js');
+    await runTwinStartCommand(names, options);
+  });
+  twin.command("new-seed").argument("<name...>", `Twin name (${TWIN_NAME_LIST.join(" | ")}). Repeat for one file covering several.`).option("--out <path>", "Write to this file instead of stdout. Refuses to overwrite.").summary("Print a new starter seed file for a twin").description(
+    "Print a new starter seed file for a twin, generated from the twin's own starting state. One twin is flat, several are the per-twin envelope. Boot it with `twin start <twin> --seed`, seed a sandbox with `sandbox create --twin <twin> --seed`, or drop it beside a task as <task>.seed.json"
+  ).action(async (names, options) => {
+    const { runTwinSeedCommand } = await import('../../twinSeed-ZFZO7BL7.js');
+    await runTwinSeedCommand(names, options);
+  });
+  twin.command("status").summary("Say whether the local twins are running").description(
+    "Say whether each twin `pome twin start` booted here is still running, and print its paste-able env lines"
+  ).action(async () => {
+    const statusPath = ".pome/twin-status.json";
+    if (!existsSync(statusPath)) {
+      console.log("No standalone twin status found.");
+      return;
+    }
+    const { standaloneStatusEntries } = await import('../../twinStart-XN3BYOUF.js');
+    let entries;
+    try {
+      entries = standaloneStatusEntries(JSON.parse(await readFile(statusPath, "utf8"))).map(
+        (status) => ({ ...status, origin: new URL(status.rest_url).origin })
+      );
+      if (entries.length === 0 || entries.some((status) => status.name === "")) {
+        throw new Error("no twins");
+      }
+    } catch {
+      throw new Error(
+        `pome twin status: ${statusPath} is unreadable \u2014 start a twin with \`pome twin start <${TWIN_NAME_LIST.join("|")}>\`.`
+      );
+    }
+    for (const [index, status] of entries.entries()) {
+      const running = await fetch(`${status.origin}/healthz`, {
+        signal: AbortSignal.timeout(1e3)
+      }).then(
+        async (res) => res.ok && (await res.json().catch(() => ({}))).twin === status.name,
+        () => false
+      );
+      if (index > 0) console.log("");
+      console.log(
+        running ? `${status.name} twin \u2014 running` : `${status.name} twin \u2014 not running (stale ${statusPath})`
+      );
+      const envName = TWIN_REGISTRY[status.name]?.envName ?? status.name.toUpperCase();
+      console.log(`POME_${envName}_REST_URL=${status.rest_url}`);
+      console.log(`POME_${envName}_MCP_URL=${status.mcp_url}`);
+      console.log(`POME_AUTH_TOKEN=${status.auth_token}`);
+    }
+  });
+  twin.command("tape").argument(
+    "[name]",
+    `Twin name (${TWIN_NAME_LIST.join(" | ")}). Optional when one twin is recorded in .pome/twin-status.json.`
+  ).option(
+    "--diff",
+    "Also print the state diff since the twin booted \u2014 its seed, default or --seed \u2014 per collection: added, changed, removed.",
+    false
+  ).option("--json", "Print the tape (and the diff, with --diff) as one JSON envelope.", false).summary("Show what the agent did on a local twin").description(
+    "Print the running twin's tape: one line per request with status, fidelity and whether state changed, so a call that claimed success but landed nothing stands out. Reads the twin's address and token from .pome/twin-status.json; no account, no hosted call."
+  ).action(async (name, options) => {
+    const { runTwinTapeCommand } = await import('../../twinTape-5P3HQ27N.js');
+    await runTwinTapeCommand(name, options);
+  });
+  program.commandsGroup("Going further:");
   program.command("init").summary("Set up Pome in this project").description(
     "Create pome.json, plus starter files in a new project \u2014 or, with --example <id>, fetch a complete runnable example into ./<id>"
   ).option(
@@ -5728,7 +5859,7 @@ function createProgram() {
         return;
       }
       {
-        const { runDoctorChecks } = await import('../../checks-V442KL5O.js');
+        const { runDoctorChecks } = await import('../../checks-RDU56OGI.js');
         const { renderDoctorReport } = await import('../../render-ZQQ4UMNO.js');
         const doctorReport = await runDoctorChecks({ mode: useLocal ? "full" : "hosted" });
         if (!doctorReport.ok) {
@@ -5766,7 +5897,7 @@ function createProgram() {
               taskForRuns.config.runs
             );
             if (k > 1) {
-              const { runTrialGroup } = await import('../../runTrialGroup-HYGGBLMM.js');
+              const { runTrialGroup } = await import('../../runTrialGroup-MMTTTDWY.js');
               const fileForRerun = relative(process.cwd(), file);
               const rerunCommand = defaultTask ? options.trials !== void 0 ? `pome run -n ${k}` : "pome run" : `pome run ${fileForRerun && !fileForRerun.startsWith("..") ? fileForRerun : file} -n ${k}`;
               const groupResult = await runTrialGroup({
@@ -5848,7 +5979,7 @@ function createProgram() {
   program.command("doctor").summary("Check the agent and twin wiring").description(
     "Check the agent\u2194twin wiring: pome.json (or pome.yaml) present + valid, the local twin boots + serves, requests routed to the twin (not a hardcoded production host), egress floor active. On failure prints one named cause (file:line where knowable) + one concrete fix and exits non-zero."
   ).action(async () => {
-    const { runDoctorChecks } = await import('../../checks-V442KL5O.js');
+    const { runDoctorChecks } = await import('../../checks-RDU56OGI.js');
     const { renderDoctorReport } = await import('../../render-ZQQ4UMNO.js');
     const report = await runDoctorChecks();
     for (const line of renderDoctorReport(report, { passNote: true })) console.error(line);
@@ -5999,65 +6130,6 @@ function createProgram() {
       })
     );
   });
-  const twin = program.command("twin").summary("Run a twin on this machine").description("Start a twin on this machine, print its status or a starter seed file");
-  twin.command("start").argument(
-    "[name]",
-    `Twin name (${TWIN_NAME_LIST.join(" | ")}). Optional when --seed names exactly one twin.`
-  ).option(
-    "--port <port>",
-    // Built from the registry rather than restated: the per-twin overrides
-    // are the registry's to add, and this text went stale when linear's did.
-    `Port to bind (default: $PORT, else ${TWIN_NAME_LIST.filter(
-      (twin2) => TWIN_REGISTRY[twin2].portEnvName
-    ).map((twin2) => `${TWIN_REGISTRY[twin2].portEnvName}/${TWIN_REGISTRY[twin2].defaultPort} for ${twin2}`).join(", ")}, otherwise 3333)`
-  ).option(
-    "--seed <path>",
-    "Boot this twin from a JSON or YAML seed file instead of its default. A seed REPLACES the default; it does not merge. Takes the per-twin envelope { <twin>: { \u2026 } } or one twin's flat seed. Overrides POME_SEED_JSON."
-  ).description(
-    "Start a standalone twin as a long-lived foreground server (Ctrl-C to stop)"
-  ).action(async (name, options) => {
-    const { runTwinStartCommand } = await import('../../twinStart-3Q74IURZ.js');
-    await runTwinStartCommand(name, options);
-  });
-  twin.command("new-seed").argument("<name...>", `Twin name (${TWIN_NAME_LIST.join(" | ")}). Repeat for one file covering several.`).option("--out <path>", "Write to this file instead of stdout. Refuses to overwrite.").summary("Print a new starter seed file for a twin").description(
-    "Print a new starter seed file for a twin, generated from the twin's own starting state. One twin is flat, several are the per-twin envelope. Boot it with `twin start <twin> --seed`, seed a sandbox with `sandbox create --twin <twin> --seed`, or drop it beside a task as <task>.seed.json"
-  ).action(async (names, options) => {
-    const { runTwinSeedCommand } = await import('../../twinSeed-J7UAY3GM.js');
-    await runTwinSeedCommand(names, options);
-  });
-  twin.command("status").summary("Say whether the local twin is running").description(
-    "Say whether the twin `pome twin start` last booted here is still running, and print its paste-able env lines"
-  ).action(async () => {
-    const statusPath = ".pome/twin-status.json";
-    if (!existsSync(statusPath)) {
-      console.log("No standalone twin status found.");
-      return;
-    }
-    let status;
-    let origin;
-    try {
-      status = JSON.parse(await readFile(statusPath, "utf8"));
-      if (typeof status.name !== "string" || status.name === "") throw new Error("no name");
-      origin = new URL(status.rest_url).origin;
-    } catch {
-      throw new Error(
-        `pome twin status: ${statusPath} is unreadable \u2014 start a twin with \`pome twin start <${TWIN_NAME_LIST.join("|")}>\`.`
-      );
-    }
-    const running = await fetch(`${origin}/healthz`, {
-      signal: AbortSignal.timeout(1e3)
-    }).then(
-      async (res) => res.ok && (await res.json().catch(() => ({}))).twin === status.name,
-      () => false
-    );
-    console.log(
-      running ? `${status.name} twin \u2014 running` : `${status.name} twin \u2014 not running (stale ${statusPath})`
-    );
-    const envName = TWIN_REGISTRY[status.name]?.envName ?? status.name.toUpperCase();
-    console.log(`POME_${envName}_REST_URL=${status.rest_url}`);
-    console.log(`POME_${envName}_MCP_URL=${status.mcp_url}`);
-    console.log(`POME_AUTH_TOKEN=${status.auth_token}`);
-  });
   program.command("capture-server").summary("Record the agent's model calls").description(
     "Boot an HTTP CONNECT-tunnel proxy that appends one LlmCallEvent per tunnel to events.jsonl. Spawned by `pome run`; agent traffic flows via HTTPS_PROXY."
   ).option("--port <port>", "TCP port to listen on (0 = ephemeral).", "8910").option(
@@ -6102,8 +6174,8 @@ async function taskFiles(target) {
   if (!existsSync(resolved)) {
     throw new HostedUsageError(`Task path not found: ${target}`);
   }
-  const stat3 = await import('node:fs/promises').then((fs) => fs.stat(resolved));
-  if (stat3.isFile()) return [resolved];
+  const stat4 = await import('node:fs/promises').then((fs) => fs.stat(resolved));
+  if (stat4.isFile()) return [resolved];
   const entries = await readdir(resolved);
   return entries.filter((entry) => entry.endsWith(".md")).sort().map((entry) => join(resolved, entry));
 }

package/dist/{src-G6CMFUR6.js → src-46YGR2WY.js}

@@ -3,7 +3,7 @@ import { defaultSeedState, parseSeed } from './chunk-NBOQN5VX.js';
 export { defaultSeedState, parseSeed, seedSchema } from './chunk-NBOQN5VX.js';
 import { routeInputDeclarer, integerInput, mountDeclaredRoute, UndeclaredInputError, MalformedBodyError } from './chunk-IZFM7W2V.js';
 import { loadMcpToolFixture, defineTwin, twinBuildInfo, deriveMcpToolTable, UnknownToolError, openTwinDatabase, createApp, typeDisagreements } from './chunk-TWURH7YM.js';
-import './chunk-5KFDRR53.js';
+import './chunk-7VZBAHQ2.js';
 import './chunk-SG6ZTIMT.js';
 import './chunk-FBSA5L36.js';
 import { z, ZodError } from 'zod';
@@ -3081,12 +3081,6 @@ function checkRunJson(run, repo) {
     html_url: `https://github.com/${repo.full_name}/runs/${run.id}`,
     details_url: run.details_url,
     status: run.status,
-    // The twin's `conclusion` column carries the full GitHub check-run
-    // conclusion vocabulary including `"stale"`, but the pinned
-    // @octokit/openapi-types version's `check-run.conclusion` enum predates
-    // `"stale"`. The twin faithfully emits a real upstream value; narrow it to
-    // the schema's declared union for the type anchor only (twin
-    // tracks live GitHub, not a lagging spec snapshot), runtime value unchanged.
     conclusion: run.conclusion,
     started_at: run.started_at,
     completed_at: run.completed_at,

package/dist/{src-DBOHIQNB.js → src-CV7QDV5E.js}

@@ -4,7 +4,7 @@ export { DEFAULT_GMAIL_AGENT_EMAIL, GmailError, SEARCH_MAILBOX_MESSAGE_BUDGET, a
 import './chunk-JWJYNAWI.js';
 import { routeInputDeclarer, integerInput, booleanInput, repeatedInput, mountDeclaredRoute, UndeclaredInputError, MalformedBodyError } from './chunk-IZFM7W2V.js';
 import { loadMcpToolFixture, deriveMcpToolTable, defineTwin, openTwinDatabase, createApp } from './chunk-TWURH7YM.js';
-import './chunk-5KFDRR53.js';
+import './chunk-7VZBAHQ2.js';
 import './chunk-SG6ZTIMT.js';
 import './chunk-FBSA5L36.js';
 import { createHash, createHmac, timingSafeEqual, randomBytes } from 'node:crypto';

package/dist/{src-FRPUTB2H.js → src-D3PKLT54.js}

@@ -4,7 +4,7 @@ export { DEFAULT_LINEAR_CLOCK, DEFAULT_LINEAR_EMAIL, DEFAULT_LINEAR_PORT, DEFAUL
 import './chunk-JWJYNAWI.js';
 import { routeInputDeclarer, mountDeclaredRoute, UndeclaredInputError } from './chunk-IZFM7W2V.js';
 import { loadMcpToolFixture, deriveMcpToolTable, openTwinDatabase, defineTwin, createApp } from './chunk-TWURH7YM.js';
-import './chunk-5KFDRR53.js';
+import './chunk-7VZBAHQ2.js';
 import './chunk-SG6ZTIMT.js';
 import './chunk-FBSA5L36.js';
 import { createHmac, timingSafeEqual, createHash, randomBytes } from 'node:crypto';

package/dist/{src-SJDGRXC5.js → src-LPTWNBO5.js}

@@ -4,7 +4,7 @@ import { defaultSeedState, parseSeed } from './chunk-YBWG5JK2.js';
 export { defaultSeedState, loadSeedFromEnv, parseSeed, seedSchema } from './chunk-YBWG5JK2.js';
 import { routeInputDeclarer, booleanInput, integerInput, mountDeclaredRoute, UndeclaredInputError } from './chunk-IZFM7W2V.js';
 import { loadMcpToolFixture, defineTwin, queryTokenResolver, formTokenResolver, deriveMcpToolTable, UnknownToolError, openTwinDatabase, createApp, typeDisagreements } from './chunk-TWURH7YM.js';
-import './chunk-5KFDRR53.js';
+import './chunk-7VZBAHQ2.js';
 import './chunk-SG6ZTIMT.js';
 import './chunk-FBSA5L36.js';
 import { z, ZodError } from 'zod';