@pome-sh/cli 0.44.0 → 0.45.1

package/README.md

@@ -142,6 +142,7 @@ Global hosted configuration:
 | `POME_API_KEY` | Authenticate hosted commands. This value takes precedence over stored credentials. |
 | `POME_API_URL` | Set the control-plane URL. `--api-url` takes precedence. |
 | `POME_DASHBOARD_URL` | Set the dashboard URL for login and result links. |
+| `POME_TELEMETRY=0` | Turn off the anonymous daily usage event (one per day at most: CLI version, OS, Node major, command name; never arguments, paths or repo names). `DO_NOT_TRACK=1` is honoured too, and nothing is sent when `CI` is set. |
 
 Agent process configuration:
 

package/dist/build-info.json

@@ -1,6 +1,6 @@
 {
   "package": "pome-sh",
-  "version": "0.44.0",
-  "git_sha": "a80259dcddd5ec6f1a16dba3a6f252539996ebb7",
-  "build_time": "2026-09-16T12:52:26.327Z"
+  "version": "0.45.1",
+  "git_sha": "f9ed48177ccfffac7020d1987e6ec9b810d7a4de",
+  "build_time": "2026-09-16T19:49:02.473Z"
 }

package/dist/{checks-BOOQNOGJ.js → checks-RDU56OGI.js}

@@ -183,7 +183,7 @@ async function checkTwinReachable(_configDir) {
   });
   let harness;
   try {
-    const { bootTwin } = await import('./twinHarness-YDGIGB4P.js');
+    const { bootTwin } = await import('./twinHarness-I2JGKQYD.js');
     harness = await bootTwin({
       twin: "github",
       seedState: void 0,

package/dist/{chunk-7ULGZG7X.js → chunk-AGZOWSLG.js}

@@ -1,5 +1,5 @@
 import { mkdir, writeFile, rename, chmod, readFile, unlink, open, stat } from 'node:fs/promises';
-import { dirname, join } from 'node:path';
+import { dirname, join, basename } from 'node:path';
 
 // src/twin/twinStatusFile.ts
 var STANDALONE_STATUS_PATH = ".pome/twin-status.json";
@@ -10,6 +10,15 @@ async function writeStandaloneStatusFile(status, path = STANDALONE_STATUS_PATH)
   await rename(tmp, path);
   await chmod(path, 384);
 }
+async function ensureSelfIgnoring(dir) {
+  if (basename(dir) !== ".pome") return;
+  const path = join(dir, ".gitignore");
+  try {
+    await writeFile(path, "*\n", { flag: "wx", mode: 384 });
+  } catch (err) {
+    if (err.code !== "EEXIST") throw err;
+  }
+}
 var STALE_LOCK_MS = 1e4;
 async function withStatusLock(path, fn) {
   const lockPath = `${path}.lock`;
@@ -46,6 +55,7 @@ async function withStatusLock(path, fn) {
 }
 async function updateStandaloneStatusFile(entries, path = STANDALONE_STATUS_PATH) {
   await mkdir(dirname(path), { recursive: true, mode: 448 });
+  await ensureSelfIgnoring(dirname(path));
   return await withStatusLock(path, async () => {
     const merged = mergeStandaloneStatus(await readStandaloneStatusFile(path), entries);
     await writeStandaloneStatusFile(merged, path);

package/dist/{chunk-RYAQ2ZYA.js → chunk-BXYPNEJY.js}

@@ -39,7 +39,7 @@ var TWIN_REGISTRY = {
         defaultSeedState,
         GitHubDomain,
         openGitHubCloneDatabase
-      } = await import('./src-252X4AEZ.js');
+      } = await import('./src-46YGR2WY.js');
       const db = openGitHubCloneDatabase();
       const domain = new GitHubDomain(db);
       domain.seed(seedState === void 0 ? defaultSeedState() : seedState);
@@ -90,7 +90,7 @@ var TWIN_REGISTRY = {
     parseSeed: async (input) => (await import('./seed-E6SA4NKZ.js')).parseSeed(input),
     seedFields: async () => Object.keys((await import('./seed-E6SA4NKZ.js')).seedSchema.shape),
     async boot({ seedState, runId, recorder, twinBaseUrl }) {
-      const stripeTwin = await import('./src-P5MEPJY4.js');
+      const stripeTwin = await import('./src-STAXYPD3.js');
       const { createApp } = await import('./server-GECKG2H6.js');
       const {
         applySeed: applyStripeSeed,
@@ -181,7 +181,7 @@ var TWIN_REGISTRY = {
   }
 };
 async function createGitHubSmokeApp() {
-  const { createGitHubCloneApp } = await import('./src-252X4AEZ.js');
+  const { createGitHubCloneApp } = await import('./src-46YGR2WY.js');
   return createGitHubCloneApp();
 }
 function defaultPortFor(twin, env = process.env) {

package/dist/{chunk-ZVKPZHFQ.js → chunk-DX2KCFJM.js}

@@ -1,4 +1,4 @@
-import { isTwinName, TWIN_REGISTRY, TWIN_NAMES } from './chunk-RYAQ2ZYA.js';
+import { isTwinName, TWIN_REGISTRY, TWIN_NAMES } from './chunk-BXYPNEJY.js';
 import { readFileSync } from 'node:fs';
 import { parse } from 'yaml';
 

package/dist/{chunk-3T4FUF43.js → chunk-EZYVICDB.js}

@@ -1,4 +1,4 @@
-import { TWIN_NAMES, isTwinName, TWIN_REGISTRY } from './chunk-RYAQ2ZYA.js';
+import { TWIN_NAMES, isTwinName, TWIN_REGISTRY } from './chunk-BXYPNEJY.js';
 import { createFileBackedRecorderStore, createRecorderStore } from './chunk-TWURH7YM.js';
 
 // src/recorder/recorder.ts

package/dist/{chunk-G3YRDMBE.js → chunk-HEEFOMSZ.js}

@@ -1,9 +1,9 @@
-import { readSeedFileText, parseSeedFileText, soleTwinOf, twinsNamedBy, seedsForTwins } from './chunk-ZVKPZHFQ.js';
-import { gmailSeedSchema, defaultSeedState } from './chunk-PASFBRK4.js';
-import { linearSeedSchema, defaultSeedState as defaultSeedState$1 } from './chunk-3FZY376K.js';
-import { isTwinName, TWIN_REGISTRY } from './chunk-RYAQ2ZYA.js';
 import { HostedDiscardRefusedError, HostedOrchError, HostedAuthError, readManifest, normalizeManifestTwins, HostedQuotaError, HostedTrialError } from './chunk-26UAPLHK.js';
 import { criterionSchema, normalizeTaskConfigKeys, finalizeResponseSchema, MOUNTED_TWINS, submitResultResponseSchema, createEvalSessionResponseSchema, createSessionResponseSchema, agentResponseSchema, isMultiTwinSeedEnvelope, sessionPublicSchema } from './chunk-M7ATJ423.js';
+import { gmailSeedSchema, defaultSeedState } from './chunk-PASFBRK4.js';
+import { linearSeedSchema, defaultSeedState as defaultSeedState$1 } from './chunk-3FZY376K.js';
+import { readSeedFileText, parseSeedFileText, soleTwinOf, twinsNamedBy, seedsForTwins } from './chunk-DX2KCFJM.js';
+import { isTwinName, TWIN_REGISTRY } from './chunk-BXYPNEJY.js';
 import { seedSchema as seedSchema$1, parseSeed, defaultSeedState as defaultSeedState$2 } from './chunk-NBOQN5VX.js';
 import { seedSchema } from './chunk-YBWG5JK2.js';
 import { toTwinHttpEventRow } from './chunk-TWURH7YM.js';

package/dist/{runTrialGroup-I3PC2AST.js → runTrialGroup-MMTTTDWY.js}

@@ -1,12 +1,12 @@
-import { runTaskHosted, createHostedClient, parseTaskFile, resolveRunAgentIdentity, outcomeOf, isNarrated, criterionPhrase, narratorReadingLines } from './chunk-G3YRDMBE.js';
-import './chunk-ZVKPZHFQ.js';
+import { runTaskHosted, createHostedClient, parseTaskFile, resolveRunAgentIdentity, outcomeOf, isNarrated, criterionPhrase, narratorReadingLines } from './chunk-HEEFOMSZ.js';
 import './chunk-4LQ4IJOC.js';
+import { HostedQuotaError, HostedTrialError } from './chunk-26UAPLHK.js';
+import './chunk-M7ATJ423.js';
 import './chunk-NW7HGA2K.js';
 import './chunk-PASFBRK4.js';
 import './chunk-3FZY376K.js';
-import './chunk-RYAQ2ZYA.js';
-import { HostedQuotaError, HostedTrialError } from './chunk-26UAPLHK.js';
-import './chunk-M7ATJ423.js';
+import './chunk-DX2KCFJM.js';
+import './chunk-BXYPNEJY.js';
 import './chunk-NBOQN5VX.js';
 import './chunk-YBWG5JK2.js';
 import './chunk-TWURH7YM.js';

package/dist/src/cli/main.js

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
-import { DEFAULT_CONTROL_PLANE_URL, DEFAULT_DASHBOARD_URL, clearLocalCredentials, friendlyHostedError, SESSION_TWIN_NAMES, runSessionCreate, runSessionList, runSessionStop, resolveCredentials, parseTaskFile, runTaskHosted, scoreStatus, runScoreLine, narratorReadingLines, readLatestRun, readMetaSummary, discoverRunSet, outcomeOf, persistCredentialsAfterLogin, DEFAULT_DOCS_SITE_ORIGIN, resolveSeams, readConfigTwins, resolveCachedAgentId, readLinkCache, seedStateForTwin, runAgentCommand, scoreCountsSummary, criterionRowLine, readCodeCriteria, postAgentResolver, writeLinkCache, ensurePomeGitignored, writeRunArtifactsCore, createHostedClient, redactJsonl, scoreFromFinalizeResponse, parseGitHubSeedState, uploadRunBlobs, isPreSatisfied } from '../../chunk-G3YRDMBE.js';
-import '../../chunk-ZVKPZHFQ.js';
+import { getAvailablePort } from '../../chunk-XDU6TD4O.js';
+import { DEFAULT_CONTROL_PLANE_URL, DEFAULT_DASHBOARD_URL, clearLocalCredentials, friendlyHostedError, SESSION_TWIN_NAMES, runSessionCreate, runSessionList, runSessionStop, resolveCredentials, parseTaskFile, runTaskHosted, scoreStatus, runScoreLine, narratorReadingLines, readLatestRun, readMetaSummary, discoverRunSet, outcomeOf, persistCredentialsAfterLogin, DEFAULT_DOCS_SITE_ORIGIN, resolveSeams, readConfigTwins, resolveCachedAgentId, readLinkCache, seedStateForTwin, runAgentCommand, scoreCountsSummary, criterionRowLine, readCodeCriteria, postAgentResolver, writeLinkCache, ensurePomeGitignored, writeRunArtifactsCore, createHostedClient, redactJsonl, scoreFromFinalizeResponse, parseGitHubSeedState, uploadRunBlobs, isPreSatisfied } from '../../chunk-HEEFOMSZ.js';
 import '../../chunk-4LQ4IJOC.js';
+import { readManifest, writeManifest, MANIFEST_JSON, exitCodeFor, readRequiredManifest, HostedUsageError, HostedOrchError, normalizeManifestTwins } from '../../chunk-26UAPLHK.js';
+import { MOUNTED_TWINS, deriveAgentSlug } from '../../chunk-M7ATJ423.js';
 import '../../chunk-NW7HGA2K.js';
 import { GMAIL_CHECKS } from '../../chunk-JM6VS62R.js';
 import '../../chunk-PASFBRK4.js';
 import { LINEAR_CHECKS } from '../../chunk-TSOSDKXP.js';
 import '../../chunk-3FZY376K.js';
-import { createRecorder, bootTwin } from '../../chunk-3T4FUF43.js';
-import { TWIN_NAME_LIST, TWIN_REGISTRY, createGitHubSmokeApp } from '../../chunk-RYAQ2ZYA.js';
-import { getAvailablePort } from '../../chunk-XDU6TD4O.js';
-import { readManifest, writeManifest, MANIFEST_JSON, exitCodeFor, readRequiredManifest, HostedUsageError, HostedOrchError, normalizeManifestTwins } from '../../chunk-26UAPLHK.js';
-import { MOUNTED_TWINS, deriveAgentSlug } from '../../chunk-M7ATJ423.js';
 import { buildEgressAllowlist, readBlockedEgress } from '../../chunk-CBFKZZBR.js';
+import '../../chunk-DX2KCFJM.js';
+import { createRecorder, bootTwin } from '../../chunk-EZYVICDB.js';
+import { TWIN_NAME_LIST, TWIN_REGISTRY, createGitHubSmokeApp } from '../../chunk-BXYPNEJY.js';
 import { TAPE_ASSERTABLE_TOOLS } from '../../chunk-C4BVTUA3.js';
 import { seedSchema } from '../../chunk-NBOQN5VX.js';
 import { SLACK_CHECKS } from '../../chunk-2ZGVDTJC.js';
@@ -25,7 +25,7 @@ import '../../chunk-2K6BJ3PI.js';
 import '../../chunk-FBSA5L36.js';
 import { Command } from 'commander';
 import { existsSync, readFileSync, realpathSync, statSync, constants } from 'node:fs';
-import { mkdir, readFile, writeFile, readdir, copyFile, stat, cp } from 'node:fs/promises';
+import { readFile, mkdir, writeFile, readdir, copyFile, stat, open, unlink, chmod, cp } from 'node:fs/promises';
 import { dirname, resolve, join, basename, relative, extname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { serve } from '@hono/node-server';
@@ -37,6 +37,7 @@ import { createInterface } from 'node:readline';
 import { z } from 'zod';
 import Anthropic from '@anthropic-ai/sdk';
 import { createRequire } from 'node:module';
+import { homedir } from 'node:os';
 
 async function readEventsJsonl(runDir) {
   const file = resolve(runDir, "events.jsonl");
@@ -1111,7 +1112,7 @@ function extractJsonPayload(text) {
 
 // src/task/seed-verifier.ts
 async function verifySeedWithTwin(seed) {
-  const { GitHubDomain, openGitHubCloneDatabase } = await import('../../src-252X4AEZ.js');
+  const { GitHubDomain, openGitHubCloneDatabase } = await import('../../src-46YGR2WY.js');
   const db = openGitHubCloneDatabase(":memory:");
   try {
     new GitHubDomain(db).seed(seed);
@@ -3319,7 +3320,7 @@ function localDigest(twin) {
 }
 function bakedVersions() {
   try {
-    return JSON.parse('{"@pome-sh/sdk":"0.11.6","@pome-sh/wire":"0.4.2","@pome-sh/twin-github":"0.12.0","@pome-sh/twin-gmail":"0.4.0","@pome-sh/twin-linear":"0.4.1","@pome-sh/twin-slack":"0.4.1","@pome-sh/twin-stripe":"0.4.7"}');
+    return JSON.parse('{"@pome-sh/sdk":"0.11.6","@pome-sh/wire":"0.4.3","@pome-sh/twin-github":"0.12.0","@pome-sh/twin-gmail":"0.4.0","@pome-sh/twin-linear":"0.4.1","@pome-sh/twin-slack":"0.4.1","@pome-sh/twin-stripe":"0.4.7"}');
   } catch {
     return {};
   }
@@ -4871,7 +4872,7 @@ function firstSentence(description) {
 function resolveExampleRef(env = process.env) {
   const override = env.POME_EXAMPLE_REF?.trim();
   if (override) return override;
-  const baked = "a80259dcddd5ec6f1a16dba3a6f252539996ebb7".trim() ;
+  const baked = "f9ed48177ccfffac7020d1987e6ec9b810d7a4de".trim() ;
   return FULL_SHA.test(baked) ? baked : "main";
 }
 function rawUrlFor(example, file, ref) {
@@ -5226,6 +5227,143 @@ async function loadTrialEvents(runDir) {
   }
   return events;
 }
+var USAGE_EVENT = "cli_usage";
+var USAGE_DOCS_URL = "https://github.com/pome-sh/digital-twins#telemetry";
+var DEFAULT_HOST = "https://us.i.posthog.com";
+var REQUEST_TIMEOUT_MS = 1500;
+function bakedIn(name) {
+  const value = name === "key" ? "phc_AzLfRtYcvZimDUSYfLjBjmCiT9AunyAY9RLkxeVHaBDZ"  : "https://eu.i.posthog.com" ;
+  return value !== void 0 && value.length > 0 ? value : void 0;
+}
+function telemetryDestination(env = process.env) {
+  const key = env.POME_TELEMETRY_KEY || bakedIn("key");
+  if (!key) return void 0;
+  const host = (env.POME_TELEMETRY_HOST || bakedIn("host") || DEFAULT_HOST).replace(/\/+$/, "");
+  return { key, host };
+}
+function telemetryOptOut(env = process.env) {
+  const off = (value) => value !== void 0 && /^(0|false|off|no)$/i.test(value.trim());
+  const set = (value) => value !== void 0 && value.trim() !== "" && value.trim() !== "0";
+  if (off(env.POME_TELEMETRY)) return "POME_TELEMETRY";
+  if (set(env.DO_NOT_TRACK)) return "DO_NOT_TRACK";
+  if (set(env.CI)) return "CI";
+  return void 0;
+}
+function usageStatePath() {
+  return join(homedir(), ".pome", "telemetry.json");
+}
+function usageProperties(input) {
+  const nodeVersion = input.nodeVersion ?? process.version;
+  return {
+    command: input.command,
+    cli_version: input.version,
+    os: input.platform ?? process.platform,
+    node_major: Number(nodeVersion.replace(/^v/, "").split(".")[0]),
+    // Anonymous events: no person profile is created or updated in PostHog.
+    $process_person_profile: false
+  };
+}
+function commandName(command) {
+  const names = [];
+  let current = command;
+  while (current && current.parent) {
+    names.unshift(current.name());
+    current = current.parent;
+  }
+  return names.join(" ");
+}
+var FIRST_RUN_NOTICE = `pome sends one anonymous usage event per day (CLI version, OS, Node major, command name; no arguments, paths or repo names). Turn it off with POME_TELEMETRY=0. ${USAGE_DOCS_URL}`;
+async function readState(path) {
+  try {
+    const parsed = JSON.parse(await readFile(path, "utf8"));
+    if (typeof parsed.id === "string" && parsed.id.length > 0) {
+      return {
+        id: parsed.id,
+        ...typeof parsed.last_sent === "string" ? { last_sent: parsed.last_sent } : {},
+        ...parsed.notice_shown === true ? { notice_shown: true } : {}
+      };
+    }
+  } catch {
+  }
+  return { id: randomUUID() };
+}
+async function writeState(path, state) {
+  await mkdir(dirname(path), { recursive: true, mode: 448 });
+  await writeFile(path, `${JSON.stringify(state, null, 2)}
+`, { mode: 384 });
+  await chmod(path, 384);
+}
+var STALE_LOCK_MS = 3e4;
+async function withStateLock(path, fn) {
+  const lockPath = `${path}.lock`;
+  await mkdir(dirname(path), { recursive: true, mode: 448 });
+  try {
+    const handle = await open(lockPath, "wx", 384);
+    await handle.close();
+  } catch (err) {
+    if (err.code !== "EEXIST") throw err;
+    const age = await stat(lockPath).then((s) => Date.now() - s.mtimeMs, () => 0);
+    if (age <= STALE_LOCK_MS) return "locked";
+    await unlink(lockPath).catch(() => void 0);
+    try {
+      const handle = await open(lockPath, "wx", 384);
+      await handle.close();
+    } catch {
+      return "locked";
+    }
+  }
+  try {
+    return await fn();
+  } finally {
+    await unlink(lockPath).catch(() => void 0);
+  }
+}
+async function maybeSendUsageTick(input) {
+  const env = input.env ?? process.env;
+  const optOut = telemetryOptOut(env);
+  if (optOut) return { sent: false, reason: "opt-out", detail: optOut };
+  const destination = telemetryDestination(env);
+  if (!destination) return { sent: false, reason: "no-key" };
+  const statePath2 = input.statePath ?? usageStatePath();
+  const today = (input.now ?? /* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+  let state;
+  try {
+    const claimed = await withStateLock(statePath2, async () => {
+      const current = await readState(statePath2);
+      if (current.last_sent === today) return void 0;
+      if (!current.notice_shown) {
+        (input.notify ?? ((line) => console.error(line)))(FIRST_RUN_NOTICE);
+        current.notice_shown = true;
+      }
+      current.last_sent = today;
+      await writeState(statePath2, current);
+      return current;
+    });
+    if (claimed === "locked" || claimed === void 0) return { sent: false, reason: "already-today" };
+    state = claimed;
+  } catch (err) {
+    return { sent: false, reason: "request-failed", detail: `state: ${err.message}` };
+  }
+  const body = {
+    api_key: destination.key,
+    event: USAGE_EVENT,
+    distinct_id: state.id,
+    properties: usageProperties({ command: input.command, version: input.version }),
+    timestamp: (input.now ?? /* @__PURE__ */ new Date()).toISOString()
+  };
+  try {
+    const res = await (input.fetchImpl ?? fetch)(`${destination.host}/capture/`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify(body),
+      signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
+    });
+    if (!res.ok) return { sent: false, reason: "request-failed", detail: `HTTP ${res.status}` };
+    return { sent: true };
+  } catch (err) {
+    return { sent: false, reason: "request-failed", detail: err.message };
+  }
+}
 
 // src/cli/main.ts
 var PACKAGE_VERSION = readPackageVersion();
@@ -5234,7 +5372,7 @@ var DEFAULT_AGENT_COMMAND = `node ${DEFAULT_AGENT_FILE}`;
 var MANIFEST_SCHEMA_URL = "https://pome.sh/schemas/v1/pome.json";
 var MAX_UNREADABLE_PATHS_SHOWN = 5;
 function readPackageVersion() {
-  if ("0.44.0".length > 0) return "0.44.0";
+  if ("0.45.1".length > 0) return "0.45.1";
   try {
     const here = dirname(fileURLToPath(import.meta.url));
     const candidates = [
@@ -5263,8 +5401,91 @@ function createProgram() {
     process.env.POME_API_URL ?? DEFAULT_CONTROL_PLANE_URL
   ).option("--artifacts-dir <dir>", "Directory for run artifacts", "runs");
   program.name("pome").description(
-    "Test AI agents against digital twins of real SaaS APIs. Runs are recorded to app.pome.sh. Start with `pome init`."
-  ).version(PACKAGE_VERSION).showHelpAfterError("(add --help for usage)");
+    "Stateful local twins of GitHub, Slack, Stripe, Gmail and Linear that your agent calls as if they were the real API. Start with `pome twin start <twin>`."
+  ).version(PACKAGE_VERSION).showHelpAfterError("(add --help for usage)").hook("preAction", (_root, actionCommand) => {
+    void maybeSendUsageTick({ command: commandName(actionCommand), version: PACKAGE_VERSION });
+  });
+  const twin = program.command("twin").summary("Run a twin on this machine").description(
+    "Start a twin on this machine, print its status, show its tape, or write a starter seed file"
+  );
+  twin.command("start").argument(
+    "[names...]",
+    `Twin names (${TWIN_NAME_LIST.join(" | ")}). One, or several to boot together (each on its own port). Optional when --seed names exactly one twin.`
+  ).option(
+    "--port <port>",
+    // Built from the registry rather than restated: the per-twin overrides
+    // are the registry's to add, and this text went stale when linear's did.
+    `Port to bind (default: $PORT, else ${TWIN_NAME_LIST.filter(
+      (twin2) => TWIN_REGISTRY[twin2].portEnvName
+    ).map((twin2) => `${TWIN_REGISTRY[twin2].portEnvName}/${TWIN_REGISTRY[twin2].defaultPort} for ${twin2}`).join(", ")}, otherwise 3333). With several twins: the first twin's port; the rest take the next free ports above it. Without it, each twin takes its default port, else the next free one.`
+  ).option(
+    "--seed <path>",
+    "Boot from a JSON or YAML seed file instead of the default. A seed REPLACES the default; it does not merge. Takes the per-twin envelope { <twin>: { \u2026 } } or one twin's flat seed (several twins need the envelope, one entry per named twin). Overrides POME_SEED_JSON."
+  ).description(
+    "Start one or more standalone twins as a long-lived foreground server (Ctrl-C to stop)"
+  ).action(async (names, options) => {
+    const { runTwinStartCommand } = await import('../../twinStart-XN3BYOUF.js');
+    await runTwinStartCommand(names, options);
+  });
+  twin.command("new-seed").argument("<name...>", `Twin name (${TWIN_NAME_LIST.join(" | ")}). Repeat for one file covering several.`).option("--out <path>", "Write to this file instead of stdout. Refuses to overwrite.").summary("Print a new starter seed file for a twin").description(
+    "Print a new starter seed file for a twin, generated from the twin's own starting state. One twin is flat, several are the per-twin envelope. Boot it with `twin start <twin> --seed`, seed a sandbox with `sandbox create --twin <twin> --seed`, or drop it beside a task as <task>.seed.json"
+  ).action(async (names, options) => {
+    const { runTwinSeedCommand } = await import('../../twinSeed-ZFZO7BL7.js');
+    await runTwinSeedCommand(names, options);
+  });
+  twin.command("status").summary("Say whether the local twins are running").description(
+    "Say whether each twin `pome twin start` booted here is still running, and print its paste-able env lines"
+  ).action(async () => {
+    const statusPath = ".pome/twin-status.json";
+    if (!existsSync(statusPath)) {
+      console.log("No standalone twin status found.");
+      return;
+    }
+    const { standaloneStatusEntries } = await import('../../twinStart-XN3BYOUF.js');
+    let entries;
+    try {
+      entries = standaloneStatusEntries(JSON.parse(await readFile(statusPath, "utf8"))).map(
+        (status) => ({ ...status, origin: new URL(status.rest_url).origin })
+      );
+      if (entries.length === 0 || entries.some((status) => status.name === "")) {
+        throw new Error("no twins");
+      }
+    } catch {
+      throw new Error(
+        `pome twin status: ${statusPath} is unreadable \u2014 start a twin with \`pome twin start <${TWIN_NAME_LIST.join("|")}>\`.`
+      );
+    }
+    for (const [index, status] of entries.entries()) {
+      const running = await fetch(`${status.origin}/healthz`, {
+        signal: AbortSignal.timeout(1e3)
+      }).then(
+        async (res) => res.ok && (await res.json().catch(() => ({}))).twin === status.name,
+        () => false
+      );
+      if (index > 0) console.log("");
+      console.log(
+        running ? `${status.name} twin \u2014 running` : `${status.name} twin \u2014 not running (stale ${statusPath})`
+      );
+      const envName = TWIN_REGISTRY[status.name]?.envName ?? status.name.toUpperCase();
+      console.log(`POME_${envName}_REST_URL=${status.rest_url}`);
+      console.log(`POME_${envName}_MCP_URL=${status.mcp_url}`);
+      console.log(`POME_AUTH_TOKEN=${status.auth_token}`);
+    }
+  });
+  twin.command("tape").argument(
+    "[name]",
+    `Twin name (${TWIN_NAME_LIST.join(" | ")}). Optional when one twin is recorded in .pome/twin-status.json.`
+  ).option(
+    "--diff",
+    "Also print the state diff since the twin booted \u2014 its seed, default or --seed \u2014 per collection: added, changed, removed.",
+    false
+  ).option("--json", "Print the tape (and the diff, with --diff) as one JSON envelope.", false).summary("Show what the agent did on a local twin").description(
+    "Print the running twin's tape: one line per request with status, fidelity and whether state changed, so a call that claimed success but landed nothing stands out. Reads the twin's address and token from .pome/twin-status.json; no account, no hosted call."
+  ).action(async (name, options) => {
+    const { runTwinTapeCommand } = await import('../../twinTape-5P3HQ27N.js');
+    await runTwinTapeCommand(name, options);
+  });
+  program.commandsGroup("Going further:");
   program.command("init").summary("Set up Pome in this project").description(
     "Create pome.json, plus starter files in a new project \u2014 or, with --example <id>, fetch a complete runnable example into ./<id>"
   ).option(
@@ -5638,7 +5859,7 @@ function createProgram() {
         return;
       }
       {
-        const { runDoctorChecks } = await import('../../checks-BOOQNOGJ.js');
+        const { runDoctorChecks } = await import('../../checks-RDU56OGI.js');
         const { renderDoctorReport } = await import('../../render-ZQQ4UMNO.js');
         const doctorReport = await runDoctorChecks({ mode: useLocal ? "full" : "hosted" });
         if (!doctorReport.ok) {
@@ -5676,7 +5897,7 @@ function createProgram() {
               taskForRuns.config.runs
             );
             if (k > 1) {
-              const { runTrialGroup } = await import('../../runTrialGroup-I3PC2AST.js');
+              const { runTrialGroup } = await import('../../runTrialGroup-MMTTTDWY.js');
               const fileForRerun = relative(process.cwd(), file);
               const rerunCommand = defaultTask ? options.trials !== void 0 ? `pome run -n ${k}` : "pome run" : `pome run ${fileForRerun && !fileForRerun.startsWith("..") ? fileForRerun : file} -n ${k}`;
               const groupResult = await runTrialGroup({
@@ -5758,7 +5979,7 @@ function createProgram() {
   program.command("doctor").summary("Check the agent and twin wiring").description(
     "Check the agent\u2194twin wiring: pome.json (or pome.yaml) present + valid, the local twin boots + serves, requests routed to the twin (not a hardcoded production host), egress floor active. On failure prints one named cause (file:line where knowable) + one concrete fix and exits non-zero."
   ).action(async () => {
-    const { runDoctorChecks } = await import('../../checks-BOOQNOGJ.js');
+    const { runDoctorChecks } = await import('../../checks-RDU56OGI.js');
     const { renderDoctorReport } = await import('../../render-ZQQ4UMNO.js');
     const report = await runDoctorChecks();
     for (const line of renderDoctorReport(report, { passNote: true })) console.error(line);
@@ -5909,86 +6130,6 @@ function createProgram() {
       })
     );
   });
-  const twin = program.command("twin").summary("Run a twin on this machine").description(
-    "Start a twin on this machine, print its status, show its tape, or write a starter seed file"
-  );
-  twin.command("start").argument(
-    "[names...]",
-    `Twin names (${TWIN_NAME_LIST.join(" | ")}). One, or several to boot together (each on its own port). Optional when --seed names exactly one twin.`
-  ).option(
-    "--port <port>",
-    // Built from the registry rather than restated: the per-twin overrides
-    // are the registry's to add, and this text went stale when linear's did.
-    `Port to bind (default: $PORT, else ${TWIN_NAME_LIST.filter(
-      (twin2) => TWIN_REGISTRY[twin2].portEnvName
-    ).map((twin2) => `${TWIN_REGISTRY[twin2].portEnvName}/${TWIN_REGISTRY[twin2].defaultPort} for ${twin2}`).join(", ")}, otherwise 3333). With several twins: the first twin's port; the rest take the next free ports above it. Without it, each twin takes its default port, else the next free one.`
-  ).option(
-    "--seed <path>",
-    "Boot from a JSON or YAML seed file instead of the default. A seed REPLACES the default; it does not merge. Takes the per-twin envelope { <twin>: { \u2026 } } or one twin's flat seed (several twins need the envelope, one entry per named twin). Overrides POME_SEED_JSON."
-  ).description(
-    "Start one or more standalone twins as a long-lived foreground server (Ctrl-C to stop)"
-  ).action(async (names, options) => {
-    const { runTwinStartCommand } = await import('../../twinStart-E5R26SF4.js');
-    await runTwinStartCommand(names, options);
-  });
-  twin.command("new-seed").argument("<name...>", `Twin name (${TWIN_NAME_LIST.join(" | ")}). Repeat for one file covering several.`).option("--out <path>", "Write to this file instead of stdout. Refuses to overwrite.").summary("Print a new starter seed file for a twin").description(
-    "Print a new starter seed file for a twin, generated from the twin's own starting state. One twin is flat, several are the per-twin envelope. Boot it with `twin start <twin> --seed`, seed a sandbox with `sandbox create --twin <twin> --seed`, or drop it beside a task as <task>.seed.json"
-  ).action(async (names, options) => {
-    const { runTwinSeedCommand } = await import('../../twinSeed-ADWQ62CA.js');
-    await runTwinSeedCommand(names, options);
-  });
-  twin.command("status").summary("Say whether the local twins are running").description(
-    "Say whether each twin `pome twin start` booted here is still running, and print its paste-able env lines"
-  ).action(async () => {
-    const statusPath = ".pome/twin-status.json";
-    if (!existsSync(statusPath)) {
-      console.log("No standalone twin status found.");
-      return;
-    }
-    const { standaloneStatusEntries } = await import('../../twinStart-E5R26SF4.js');
-    let entries;
-    try {
-      entries = standaloneStatusEntries(JSON.parse(await readFile(statusPath, "utf8"))).map(
-        (status) => ({ ...status, origin: new URL(status.rest_url).origin })
-      );
-      if (entries.length === 0 || entries.some((status) => status.name === "")) {
-        throw new Error("no twins");
-      }
-    } catch {
-      throw new Error(
-        `pome twin status: ${statusPath} is unreadable \u2014 start a twin with \`pome twin start <${TWIN_NAME_LIST.join("|")}>\`.`
-      );
-    }
-    for (const [index, status] of entries.entries()) {
-      const running = await fetch(`${status.origin}/healthz`, {
-        signal: AbortSignal.timeout(1e3)
-      }).then(
-        async (res) => res.ok && (await res.json().catch(() => ({}))).twin === status.name,
-        () => false
-      );
-      if (index > 0) console.log("");
-      console.log(
-        running ? `${status.name} twin \u2014 running` : `${status.name} twin \u2014 not running (stale ${statusPath})`
-      );
-      const envName = TWIN_REGISTRY[status.name]?.envName ?? status.name.toUpperCase();
-      console.log(`POME_${envName}_REST_URL=${status.rest_url}`);
-      console.log(`POME_${envName}_MCP_URL=${status.mcp_url}`);
-      console.log(`POME_AUTH_TOKEN=${status.auth_token}`);
-    }
-  });
-  twin.command("tape").argument(
-    "[name]",
-    `Twin name (${TWIN_NAME_LIST.join(" | ")}). Optional when one twin is recorded in .pome/twin-status.json.`
-  ).option(
-    "--diff",
-    "Also print the state diff since the twin booted \u2014 its seed, default or --seed \u2014 per collection: added, changed, removed.",
-    false
-  ).option("--json", "Print the tape (and the diff, with --diff) as one JSON envelope.", false).summary("Show what the agent did on a local twin").description(
-    "Print the running twin's tape: one line per request with status, fidelity and whether state changed, so a call that claimed success but landed nothing stands out. Reads the twin's address and token from .pome/twin-status.json; no account, no hosted call."
-  ).action(async (name, options) => {
-    const { runTwinTapeCommand } = await import('../../twinTape-3XNU3GRW.js');
-    await runTwinTapeCommand(name, options);
-  });
   program.command("capture-server").summary("Record the agent's model calls").description(
     "Boot an HTTP CONNECT-tunnel proxy that appends one LlmCallEvent per tunnel to events.jsonl. Spawned by `pome run`; agent traffic flows via HTTPS_PROXY."
   ).option("--port <port>", "TCP port to listen on (0 = ephemeral).", "8910").option(
@@ -6033,8 +6174,8 @@ async function taskFiles(target) {
   if (!existsSync(resolved)) {
     throw new HostedUsageError(`Task path not found: ${target}`);
   }
-  const stat3 = await import('node:fs/promises').then((fs) => fs.stat(resolved));
-  if (stat3.isFile()) return [resolved];
+  const stat4 = await import('node:fs/promises').then((fs) => fs.stat(resolved));
+  if (stat4.isFile()) return [resolved];
   const entries = await readdir(resolved);
   return entries.filter((entry) => entry.endsWith(".md")).sort().map((entry) => join(resolved, entry));
 }

package/dist/{src-252X4AEZ.js → src-46YGR2WY.js}

@@ -3081,12 +3081,6 @@ function checkRunJson(run, repo) {
     html_url: `https://github.com/${repo.full_name}/runs/${run.id}`,
     details_url: run.details_url,
     status: run.status,
-    // The twin's `conclusion` column carries the full GitHub check-run
-    // conclusion vocabulary including `"stale"`, but the pinned
-    // @octokit/openapi-types version's `check-run.conclusion` enum predates
-    // `"stale"`. The twin faithfully emits a real upstream value; narrow it to
-    // the schema's declared union for the type anchor only (twin
-    // tracks live GitHub, not a lagging spec snapshot), runtime value unchanged.
     conclusion: run.conclusion,
     started_at: run.started_at,
     completed_at: run.completed_at,

package/dist/{src-P5MEPJY4.js → src-STAXYPD3.js}

@@ -4205,13 +4205,29 @@ function stripeToolInputSchema(schema) {
   const candidate = z.toJSONSchema;
   if (typeof candidate === "function") {
     try {
-      return candidate(schema);
+      return rewriteNullableTypeArray(candidate(schema));
     } catch {
       return {};
     }
   }
   return {};
 }
+function rewriteNullableTypeArray(value) {
+  if (Array.isArray(value))
+    return value.map(rewriteNullableTypeArray);
+  if (!value || typeof value !== "object")
+    return value;
+  const rec = value;
+  const next = {};
+  for (const [key, child] of Object.entries(rec)) {
+    if (key === "type" && Array.isArray(child) && child.length === 2 && child.includes("string") && child.includes("null")) {
+      next.anyOf = [{ type: "string" }, { type: "null" }];
+      continue;
+    }
+    next[key] = rewriteNullableTypeArray(child);
+  }
+  return next;
+}
 
 // ../packages/twin-stripe/dist/src/twin.js
 var NO_API_KEY_MESSAGE = "You did not provide an API key. You need to provide your API key in the Authorization header, using Bearer auth (e.g. 'Authorization: Bearer YOUR_SECRET_KEY'). See https://stripe.com/docs/api#authentication for details, or we can help at https://support.stripe.com/.";

package/dist/twinHarness-I2JGKQYD.js

@@ -0,0 +1,6 @@
+export { UnsupportedTwinError, bootTwin } from './chunk-EZYVICDB.js';
+export { STRIPE_LOCAL_ACCOUNT_ID } from './chunk-BXYPNEJY.js';
+import './chunk-TWURH7YM.js';
+import './chunk-7VZBAHQ2.js';
+import './chunk-SG6ZTIMT.js';
+import './chunk-FBSA5L36.js';

package/dist/{twinSeed-ADWQ62CA.js → twinSeed-ZFZO7BL7.js}

@@ -1,4 +1,4 @@
-import { TWIN_NAMES, isTwinName, TWIN_REGISTRY } from './chunk-RYAQ2ZYA.js';
+import { TWIN_NAMES, isTwinName, TWIN_REGISTRY } from './chunk-BXYPNEJY.js';
 import { writeFile } from 'node:fs/promises';
 
 async function generateSeedFile(twins) {

package/dist/{twinStart-E5R26SF4.js → twinStart-XN3BYOUF.js}

@@ -1,8 +1,8 @@
-import { snapshotStandaloneInitialState, updateStandaloneStatusFile } from './chunk-7ULGZG7X.js';
-export { STANDALONE_STATUS_PATH, mergeStandaloneStatus, readStandaloneStatusFile, standaloneStatusEntries, updateStandaloneStatusFile, writeStandaloneStatusFile } from './chunk-7ULGZG7X.js';
-import { readSeedFileText, seedForTwin, parseSeedFileText, soleTwinOf, twinsNamedBy } from './chunk-ZVKPZHFQ.js';
-import { bootTwin } from './chunk-3T4FUF43.js';
-import { defaultPortFor, TWIN_REGISTRY, isTwinName, TWIN_NAMES } from './chunk-RYAQ2ZYA.js';
+import { snapshotStandaloneInitialState, updateStandaloneStatusFile } from './chunk-AGZOWSLG.js';
+export { STANDALONE_STATUS_PATH, mergeStandaloneStatus, readStandaloneStatusFile, standaloneStatusEntries, updateStandaloneStatusFile, writeStandaloneStatusFile } from './chunk-AGZOWSLG.js';
+import { readSeedFileText, seedForTwin, parseSeedFileText, soleTwinOf, twinsNamedBy } from './chunk-DX2KCFJM.js';
+import { bootTwin } from './chunk-EZYVICDB.js';
+import { defaultPortFor, TWIN_REGISTRY, isTwinName, TWIN_NAMES } from './chunk-BXYPNEJY.js';
 import './chunk-TWURH7YM.js';
 import './chunk-7VZBAHQ2.js';
 import './chunk-SG6ZTIMT.js';

package/dist/{twinTape-3XNU3GRW.js → twinTape-5P3HQ27N.js}

@@ -1,7 +1,7 @@
-import { STANDALONE_STATUS_PATH, standaloneStatusEntries, readStandaloneStatusFile, readStandaloneInitialState, standaloneInitialStatePath } from './chunk-7ULGZG7X.js';
+import { STANDALONE_STATUS_PATH, standaloneStatusEntries, readStandaloneStatusFile, readStandaloneInitialState, standaloneInitialStatePath } from './chunk-AGZOWSLG.js';
 import './chunk-4LQ4IJOC.js';
-import { TWIN_NAMES } from './chunk-RYAQ2ZYA.js';
 import './chunk-M7ATJ423.js';
+import { TWIN_NAMES } from './chunk-BXYPNEJY.js';
 import './chunk-NBOQN5VX.js';
 import './chunk-YBWG5JK2.js';
 import { recorderEventSchema } from './chunk-7VZBAHQ2.js';

package/package.json

@@ -1,18 +1,24 @@
 {
   "name": "@pome-sh/cli",
-  "version": "0.44.0",
-  "description": "Test AI agents against digital twins of real SaaS APIs. Records tool-call traces and scores them on pome.sh.",
+  "version": "0.45.1",
+  "description": "Test mode for your integrations, built for the way agents build. Local, stateful twins of GitHub, Slack, Stripe, Gmail and Linear, over REST and MCP.",
   "keywords": [
-    "ai",
-    "agents",
-    "agent-testing",
+    "mcp",
+    "mcp-server",
+    "model-context-protocol",
+    "claude-code",
+    "codex",
+    "testing",
+    "test-mode",
+    "sandbox",
+    "api-mocking",
     "digital-twin",
-    "llm",
-    "evals",
-    "claude",
-    "anthropic",
+    "ai-agents",
     "github",
+    "slack",
     "stripe",
+    "gmail",
+    "linear",
     "cli"
   ],
   "homepage": "https://pome.sh",
@@ -54,19 +60,19 @@
     "check:manifest-schema": "node scripts/emit-manifest-schema.mjs --check"
   },
   "dependencies": {
-    "@ai-sdk/anthropic": "^4.0.29",
-    "@ai-sdk/gateway": "^4.0.40",
-    "@ai-sdk/google": "^4.0.33",
-    "@ai-sdk/openai": "^4.0.29",
-    "@anthropic-ai/sdk": "^0.115.0",
-    "@hono/node-server": "^2.1.0",
+    "@ai-sdk/anthropic": "^4.0.54",
+    "@ai-sdk/gateway": "^4.0.82",
+    "@ai-sdk/google": "^4.0.72",
+    "@ai-sdk/openai": "^4.0.67",
+    "@anthropic-ai/sdk": "^0.126.0",
+    "@hono/node-server": "^2.1.1",
     "@openrouter/ai-sdk-provider": "^3.0.0",
-    "ai": "^7.0.51",
+    "ai": "^7.0.102",
     "commander": "^15.0.0",
-    "graphql": "^16.11.0",
-    "hono": "^4.13.0",
-    "yaml": "^2.9.0",
-    "zod": "^4.4.3"
+    "graphql": "^16.14.2",
+    "hono": "^4.13.8",
+    "yaml": "^2.9.1",
+    "zod": "^4.6.5"
   },
   "devDependencies": {
     "@pome-sh/sdk": "*",
@@ -76,11 +82,11 @@
     "@pome-sh/twin-linear": "*",
     "@pome-sh/twin-slack": "*",
     "@pome-sh/twin-stripe": "*",
-    "@types/node": "^26.1.2",
-    "tsx": "^4.23.5",
+    "@types/node": "^26.6.1",
+    "tsx": "^4.23.13",
     "typescript": "^5.9.3",
-    "vitest": "^4.1.10",
-    "tsup": "^8.5.0"
+    "vitest": "^5.0.1",
+    "tsup": "^8.5.1"
   },
   "engines": {
     "node": ">=24"

package/dist/twinHarness-YDGIGB4P.js

@@ -1,6 +0,0 @@
-export { UnsupportedTwinError, bootTwin } from './chunk-3T4FUF43.js';
-export { STRIPE_LOCAL_ACCOUNT_ID } from './chunk-RYAQ2ZYA.js';
-import './chunk-TWURH7YM.js';
-import './chunk-7VZBAHQ2.js';
-import './chunk-SG6ZTIMT.js';
-import './chunk-FBSA5L36.js';