@pome-sh/cli 0.9.0 → 0.10.0

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/auth.d.ts

@@ -0,0 +1,100 @@
+import type { Context, MiddlewareHandler } from "hono";
+/** `team_id` stamped on sessions authenticated by a provider-shaped token. */
+export declare const PROVIDER_SHAPED_TEAM_ID = "provider-shaped";
+export interface SessionClaims {
+    sid: string;
+    team_id: string;
+    exp: number;
+    [claim: string]: unknown;
+}
+/** Minimum session value; twins extend it via hooks (login, account_id, …). */
+export type SessionValue = {
+    sid: string;
+} & Record<string, unknown>;
+export declare function resolveAuthSecret(): string;
+export interface ProviderTokenSpec {
+    /** HMAC domain separator ("github" | "slack" | "stripe" | …). */
+    provider: string;
+    /** Declared token prefixes, e.g. ["xoxb-pome-", "xoxp-pome-"]. */
+    prefixes: readonly string[];
+}
+export interface MintProviderTokenOptions {
+    sid: string;
+    /** Unix-seconds expiry. Omit for the legacy non-expiring shape. */
+    exp?: number;
+    /** Defaults to the spec's first declared prefix. */
+    prefix?: string;
+    secret?: string;
+}
+/**
+ * Mint a provider-shaped token (F-712 row 10: minting lives in the engine;
+ * CLI + cloud mint through it, parameterized by the twin's declared shape).
+ */
+export declare function mintProviderToken(spec: ProviderTokenSpec, options: MintProviderTokenOptions): string;
+/**
+ * Verify a provider-shaped token; returns the sid on success.
+ *
+ * The parse is right-anchored — the signature is always the trailing 22
+ * base64url chars, the optional exp is a trailing all-digit segment of the
+ * remainder — and the HMAC disambiguates the exp-vs-sid split. This fixes
+ * the F-712 appendix bug once: the old per-twin `([^_]+)` regexes broke for
+ * any sid whose base64url encoding contains `_` (the alphabet includes it).
+ */
+export declare function verifyProviderToken(spec: ProviderTokenSpec, token: string, secret?: string): string | undefined;
+/** Why a request failed auth; rendered by the twin's `unauthorized` hook. */
+export type UnauthorizedKind = "no_token" | "invalid" | "expired";
+export interface AuthEnvelope {
+    status: number;
+    body: unknown;
+}
+/** Extra token location (F-712 row 3). Returns the token or undefined. */
+export type TokenResolver = (c: Context) => string | undefined | Promise<string | undefined>;
+/** Accept `?<param>=<token>` in the query string (real Slack behavior). */
+export declare function queryTokenResolver(param?: string): TokenResolver;
+/**
+ * Accept `<param>=<token>` in a form-encoded POST body (real Slack
+ * behavior). Only parses when the content type is form-encoded, so JSON
+ * streaming reads downstream are never consumed here; `parseBody()` caches
+ * on the Hono context, so downstream handlers see the same object.
+ */
+export declare function formTokenResolver(param?: string): TokenResolver;
+export interface BearerAuthOptions {
+    /** Row 1: the twin's provider-shaped token declaration. */
+    providerToken?: ProviderTokenSpec;
+    /** Row 7: extra session fields for provider-shaped sessions. */
+    providerSession?: (sid: string) => Record<string, unknown>;
+    /** Row 3: extra token locations tried after the Authorization header. */
+    tokenResolvers?: readonly TokenResolver[];
+    /**
+     * Row 4 pin: accept a prefix-less bearer and case-insensitive "bearer".
+     * Default false (github/slack); stripe pins true. Flipping a twin is a
+     * contract change (CONTRACT.md + suite, then a cloud consumer PR).
+     */
+    allowRawBearer?: boolean;
+    /**
+     * Row 9: when false, a request with no `:sid` path segment trusts the
+     * bearer alone (stripe's root `/v1/*` SDK-compat mount). Default true.
+     */
+    requirePathSid?: boolean;
+    /** Row 8: DB-backed credential lookup, consulted before provider/JWT. */
+    resolveCredential?: (token: string, c: Context) => SessionValue | undefined | Promise<SessionValue | undefined>;
+    /**
+     * Rows 2 + 6: the twin's 401 envelope, keyed by failure classification.
+     * `info.token` carries the presented credential so a twin can render
+     * shape-dependent messages (stripe: api-key-shaped tokens answer
+     * "Invalid API Key provided.", JWTs answer "Bad credentials").
+     */
+    unauthorized?: (kind: UnauthorizedKind, info?: {
+        token?: string;
+    }) => AuthEnvelope;
+    /** Row 5 pin: the twin's sid-mismatch envelope (github/slack 401, stripe 403). */
+    sidMismatch?: () => AuthEnvelope;
+    /** Row 7: extra session fields derived from verified JWT claims. */
+    sessionExtras?: (claims: SessionClaims) => Record<string, unknown>;
+}
+export declare function bearerAuth(options?: BearerAuthOptions): MiddlewareHandler;
+/**
+ * Admin endpoint protection. Thin wrapper over the shared admin-gate module
+ * (FDRS-587 / FDRS-616) using the default error envelope.
+ */
+export declare function requireAdminAuth(): MiddlewareHandler;

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/auth.js

@@ -0,0 +1,262 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { verify } from "hono/jwt";
+import { createAdminGate } from "./admin-gate.js";
+/** `team_id` stamped on sessions authenticated by a provider-shaped token. */
+export const PROVIDER_SHAPED_TEAM_ID = "provider-shaped";
+export function resolveAuthSecret() {
+    const secret = process.env.TWIN_AUTH_SECRET;
+    if (!secret && process.env.NODE_ENV === "production") {
+        throw new Error("TWIN_AUTH_SECRET required in production");
+    }
+    return secret ?? "dev-only-insecure-secret";
+}
+const SIG_LENGTH = 22;
+/**
+ * Mint a provider-shaped token (F-712 row 10: minting lives in the engine;
+ * CLI + cloud mint through it, parameterized by the twin's declared shape).
+ */
+export function mintProviderToken(spec, options) {
+    const prefix = options.prefix ?? spec.prefixes[0];
+    if (!prefix || !spec.prefixes.includes(prefix)) {
+        throw new Error(`mintProviderToken: prefix "${options.prefix ?? "<none>"}" is not declared by provider "${spec.provider}"`);
+    }
+    const secret = options.secret ?? resolveAuthSecret();
+    const encoded = Buffer.from(options.sid, "utf8").toString("base64url");
+    if (options.exp !== undefined) {
+        // Mint/verify symmetry: a non-integer exp used to silently mint the
+        // NEVER-expiring legacy shape, and a millisecond-scale exp minted a
+        // token verifyProviderToken can never accept. Both are caller bugs —
+        // fail at mint time.
+        if (!Number.isSafeInteger(options.exp) || options.exp <= 0) {
+            throw new Error(`mintProviderToken: exp must be a positive integer unix timestamp in seconds (got ${String(options.exp)})`);
+        }
+        if (options.exp >= 1e12) {
+            throw new Error(`mintProviderToken: exp ${options.exp} looks like milliseconds — pass a unix timestamp in SECONDS`);
+        }
+        return `${prefix}${encoded}_${options.exp}_${signProviderExp(spec.provider, options.sid, options.exp, secret)}`;
+    }
+    return `${prefix}${encoded}_${signProvider(spec.provider, options.sid, secret)}`;
+}
+/**
+ * Verify a provider-shaped token; returns the sid on success.
+ *
+ * The parse is right-anchored — the signature is always the trailing 22
+ * base64url chars, the optional exp is a trailing all-digit segment of the
+ * remainder — and the HMAC disambiguates the exp-vs-sid split. This fixes
+ * the F-712 appendix bug once: the old per-twin `([^_]+)` regexes broke for
+ * any sid whose base64url encoding contains `_` (the alphabet includes it).
+ */
+export function verifyProviderToken(spec, token, secret = resolveAuthSecret()) {
+    const prefix = spec.prefixes.find((p) => token.startsWith(p));
+    if (!prefix)
+        return undefined;
+    const rest = token.slice(prefix.length);
+    // Shortest valid form: 1-char encoded sid + "_" + 22-char sig.
+    if (rest.length < SIG_LENGTH + 2)
+        return undefined;
+    if (rest[rest.length - SIG_LENGTH - 1] !== "_")
+        return undefined;
+    const sig = rest.slice(-SIG_LENGTH);
+    const head = rest.slice(0, -(SIG_LENGTH + 1));
+    // Candidate 1: expiring shape — head = <encodedSid>_<exp>.
+    const expMatch = head.match(/^(.+)_(\d{1,12})$/);
+    if (expMatch) {
+        const sid = decodeBase64Url(expMatch[1]);
+        const exp = Number(expMatch[2]);
+        if (sid !== undefined && Number.isSafeInteger(exp)) {
+            if (safeEqual(sig, signProviderExp(spec.provider, sid, exp, secret))) {
+                return exp >= Math.floor(Date.now() / 1000) ? sid : undefined;
+            }
+        }
+    }
+    // Candidate 2: legacy shape — head = <encodedSid>.
+    const sid = decodeBase64Url(head);
+    if (sid === undefined)
+        return undefined;
+    if (safeEqual(sig, signProvider(spec.provider, sid, secret)))
+        return sid;
+    return undefined;
+}
+function signProvider(provider, sid, secret) {
+    return createHmac("sha256", secret)
+        .update(`${provider}:${sid}`)
+        .digest("base64url")
+        .slice(0, SIG_LENGTH);
+}
+function signProviderExp(provider, sid, exp, secret) {
+    return createHmac("sha256", secret)
+        .update(`${provider}:${sid}:${exp}`)
+        .digest("base64url")
+        .slice(0, SIG_LENGTH);
+}
+function decodeBase64Url(value) {
+    try {
+        return Buffer.from(value, "base64url").toString("utf8");
+    }
+    catch {
+        return undefined;
+    }
+}
+function safeEqual(a, b) {
+    const ab = Buffer.from(a);
+    const bb = Buffer.from(b);
+    return ab.length === bb.length && timingSafeEqual(ab, bb);
+}
+/** Accept `?<param>=<token>` in the query string (real Slack behavior). */
+export function queryTokenResolver(param = "token") {
+    return (c) => {
+        const token = c.req.query(param);
+        return token && token.length > 0 ? token : undefined;
+    };
+}
+/**
+ * Accept `<param>=<token>` in a form-encoded POST body (real Slack
+ * behavior). Only parses when the content type is form-encoded, so JSON
+ * streaming reads downstream are never consumed here; `parseBody()` caches
+ * on the Hono context, so downstream handlers see the same object.
+ */
+export function formTokenResolver(param = "token") {
+    return async (c) => {
+        if (c.req.method !== "POST")
+            return undefined;
+        const contentType = (c.req.header("content-type") ?? "").toLowerCase();
+        if (!contentType.includes("application/x-www-form-urlencoded") &&
+            !contentType.includes("multipart/form-data")) {
+            return undefined;
+        }
+        try {
+            const body = (await c.req.parseBody());
+            const token = body[param];
+            return typeof token === "string" && token.length > 0 ? token : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    };
+}
+const defaultUnauthorized = () => ({
+    status: 401,
+    body: { message: "Bad credentials", documentation_url: "" },
+});
+const defaultSidMismatch = () => ({
+    status: 401,
+    body: { message: "Forbidden", documentation_url: "" },
+});
+function respond(envelope) {
+    return Response.json(envelope.body, { status: envelope.status });
+}
+function extractSidFromUrl(rawUrl) {
+    try {
+        const path = new URL(rawUrl).pathname;
+        const match = path.match(/^\/s\/([^/]+)/);
+        return match?.[1] ? decodeURIComponent(match[1]) : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function bearerHeaderToken(c, allowRaw) {
+    const header = c.req.header("Authorization") ?? c.req.header("authorization");
+    if (!header)
+        return undefined;
+    const trimmed = header.trim();
+    if (allowRaw) {
+        if (trimmed.toLowerCase().startsWith("bearer ")) {
+            const token = trimmed.slice("bearer ".length).trim();
+            return token.length > 0 ? token : undefined;
+        }
+        return trimmed.length > 0 ? trimmed : undefined;
+    }
+    if (!trimmed.startsWith("Bearer "))
+        return undefined;
+    const token = trimmed.slice("Bearer ".length).trim();
+    return token.length > 0 ? token : undefined;
+}
+function classifyJwtError(err) {
+    const name = err.name ?? "";
+    const message = err instanceof Error ? err.message : "";
+    return name === "JwtTokenExpired" || /expired/i.test(message) ? "expired" : "invalid";
+}
+export function bearerAuth(options = {}) {
+    const unauthorized = options.unauthorized ?? defaultUnauthorized;
+    const sidMismatch = options.sidMismatch ?? defaultSidMismatch;
+    const requirePathSid = options.requirePathSid ?? true;
+    const allowRawBearer = options.allowRawBearer === true;
+    return async (c, next) => {
+        let token = bearerHeaderToken(c, allowRawBearer);
+        if (!token && options.tokenResolvers) {
+            for (const resolveToken of options.tokenResolvers) {
+                token = (await resolveToken(c)) || undefined;
+                if (token)
+                    break;
+            }
+        }
+        if (!token)
+            return respond(unauthorized("no_token"));
+        const pathSid = c.req.param("sid") ?? extractSidFromUrl(c.req.url);
+        const checkSid = (sid) => {
+            if (pathSid)
+                return sid === pathSid ? undefined : respond(sidMismatch());
+            return requirePathSid ? respond(sidMismatch()) : undefined;
+        };
+        // Row 8: DB-backed credential lookup (stripe api_keys).
+        if (options.resolveCredential) {
+            const resolved = await options.resolveCredential(token, c);
+            if (resolved) {
+                const mismatch = checkSid(resolved.sid);
+                if (mismatch)
+                    return mismatch;
+                c.set("session", resolved);
+                await next();
+                return;
+            }
+        }
+        // Row 1: provider-shaped tokens.
+        if (options.providerToken) {
+            const providerSid = verifyProviderToken(options.providerToken, token);
+            if (providerSid) {
+                const mismatch = checkSid(providerSid);
+                if (mismatch)
+                    return mismatch;
+                c.set("session", {
+                    sid: providerSid,
+                    team_id: PROVIDER_SHAPED_TEAM_ID,
+                    ...(options.providerSession?.(providerSid) ?? {}),
+                });
+                await next();
+                return;
+            }
+        }
+        // Session JWT, with engine-side expired-vs-invalid classification
+        // (row 6). The envelope hook decides how each kind renders on the wire.
+        let claims;
+        try {
+            claims = (await verify(token, resolveAuthSecret(), "HS256"));
+        }
+        catch (err) {
+            return respond(unauthorized(classifyJwtError(err), { token }));
+        }
+        if (typeof claims.exp === "number" && claims.exp < Math.floor(Date.now() / 1000)) {
+            return respond(unauthorized("expired", { token }));
+        }
+        if (!claims.sid)
+            return respond(unauthorized("invalid", { token }));
+        const mismatch = checkSid(claims.sid);
+        if (mismatch)
+            return mismatch;
+        c.set("session", {
+            sid: claims.sid,
+            team_id: claims.team_id,
+            ...(options.sessionExtras?.(claims) ?? {}),
+        });
+        await next();
+    };
+}
+/**
+ * Admin endpoint protection. Thin wrapper over the shared admin-gate module
+ * (FDRS-587 / FDRS-616) using the default error envelope.
+ */
+export function requireAdminAuth() {
+    return createAdminGate();
+}
+//# sourceMappingURL=auth.js.map

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,uBAAuB,GAAG,iBAAiB,CAAC;AAYzD,MAAM,UAAU,iBAAiB;IAC/B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC5C,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,MAAM,IAAI,0BAA0B,CAAC;AAC9C,CAAC;AAiBD,MAAM,UAAU,GAAG,EAAE,CAAC;AAWtB;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAuB,EACvB,OAAiC;IAEjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,8BAA8B,OAAO,CAAC,MAAM,IAAI,QAAQ,kCAAkC,IAAI,CAAC,QAAQ,GAAG,CAC3G,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,oEAAoE;QACpE,oEAAoE;QACpE,qEAAqE;QACrE,qBAAqB;QACrB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CACb,oFAAoF,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAC3G,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,0BAA0B,OAAO,CAAC,GAAG,6DAA6D,CACnG,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,MAAM,GAAG,OAAO,IAAI,OAAO,CAAC,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;IAClH,CAAC;IACD,OAAO,GAAG,MAAM,GAAG,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;AACnF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CACjC,IAAuB,EACvB,KAAa,EACb,MAAM,GAAG,iBAAiB,EAAE;IAE5B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxC,+DAA+D;IAC/D,IAAI,IAAI,CAAC,MAAM,GAAG,UAAU,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,UAAU,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC;IAE9C,2DAA2D;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACjD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC;QACjC,IAAI,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,IAAI,SAAS,CAAC,GAAG,EAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBACrE,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,SAAS,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IACzE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB,EAAE,GAAW,EAAE,MAAc;IACjE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAChC,MAAM,CAAC,GAAG,QAAQ,IAAI,GAAG,EAAE,CAAC;SAC5B,MAAM,CAAC,WAAW,CAAC;SACnB,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB,EAAE,GAAW,EAAE,GAAW,EAAE,MAAc;IACjF,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC;SAChC,MAAM,CAAC,GAAG,QAAQ,IAAI,GAAG,IAAI,GAAG,EAAE,CAAC;SACnC,MAAM,CAAC,WAAW,CAAC;SACnB,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACrC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM,IAAI,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAC5D,CAAC;AAiBD,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,KAAK,GAAG,OAAO;IAChD,OAAO,CAAC,CAAC,EAAE,EAAE;QACX,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAK,GAAG,OAAO;IAC/C,OAAO,KAAK,EAAE,CAAC,EAAE,EAAE;QACjB,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACvE,IACE,CAAC,WAAW,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YAC1D,CAAC,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAC5C,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAA4B,CAAC;YAClE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAsCD,MAAM,mBAAmB,GAAG,GAAiB,EAAE,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,EAAE,EAAE;CAC5D,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,GAAiB,EAAE,CAAC,CAAC;IAC9C,MAAM,EAAE,GAAG;IACX,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,EAAE,EAAE;CACtD,CAAC,CAAC;AAEH,SAAS,OAAO,CAAC,QAAsB;IACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc;IACvC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC1C,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAU,EAAE,QAAiB;IACtD,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9E,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9C,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAY;IACpC,MAAM,IAAI,GAAI,GAAyB,CAAC,IAAI,IAAI,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,OAAO,IAAI,KAAK,iBAAiB,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,UAA6B,EAAE;IACxD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,mBAAmB,CAAC;IACjE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC9D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC;IACtD,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC;IAEvD,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,KAAK,GAAG,iBAAiB,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;QACjD,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YACrC,KAAK,MAAM,YAAY,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;gBAClD,KAAK,GAAG,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC;gBAC7C,IAAI,KAAK;oBAAE,MAAM;YACnB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,OAAO,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QAErD,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAwB,EAAE;YACrD,IAAI,OAAO;gBAAE,OAAO,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACzE,OAAO,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,CAAC,CAAC;QAEF,wDAAwD;QACxD,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC3D,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACxC,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAC;gBAC9B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;gBAC3B,MAAM,IAAI,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1B,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YACtE,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,QAAQ,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACvC,IAAI,QAAQ;oBAAE,OAAO,QAAQ,CAAC;gBAC9B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE;oBACf,GAAG,EAAE,WAAW;oBAChB,OAAO,EAAE,uBAAuB;oBAChC,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;iBAClD,CAAC,CAAC;gBACH,MAAM,IAAI,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;QACH,CAAC;QAED,kEAAkE;QAClE,wEAAwE;QACxE,IAAI,MAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE,OAAO,CAAC,CAA6B,CAAC;QAC3F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,OAAO,CAAC,YAAY,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YACjF,OAAO,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,OAAO,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;SAC3C,CAAC,CAAC;QACH,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,eAAe,EAAE,CAAC;AAC3B,CAAC"}

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/build-info.d.ts

@@ -0,0 +1,7 @@
+export interface TwinBuildInfo {
+    package: string;
+    version: string;
+    git_sha: string;
+    build_time: string;
+}
+export declare function twinBuildInfo(packageName: string): TwinBuildInfo;

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/build-info.js

@@ -0,0 +1,14 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// The `/healthz` `runtime` block required by the runtime contract. Values
+// come from the POME_TWIN_* env surface the cloud injects at image build /
+// snapshot time; everything defaults to dev markers locally.
+export function twinBuildInfo(packageName) {
+    return {
+        package: packageName,
+        version: process.env.POME_TWIN_VERSION ?? "0.1.0",
+        git_sha: process.env.POME_TWIN_GIT_SHA ?? process.env.VERCEL_GIT_COMMIT_SHA ?? "dev",
+        build_time: process.env.POME_TWIN_BUILD_TIME ?? "dev",
+    };
+}
+//# sourceMappingURL=build-info.js.map

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/build-info.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-info.js","sourceRoot":"","sources":["../src/build-info.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,6DAA6D;AAS7D,MAAM,UAAU,aAAa,CAAC,WAAmB;IAC/C,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO;QACjD,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,KAAK;QACpF,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,KAAK;KACtD,CAAC;AACJ,CAAC"}

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/db.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Mutation outcome — the shape both better-sqlite3's `RunResult` and
+ * node:sqlite's `StatementResultingChanges` return; `changes` is coerced to
+ * number, `lastInsertRowid` may be a bigint for rowids beyond safe-integer
+ * range.
+ */
+export interface TwinRunResult {
+    changes: number;
+    lastInsertRowid: number | bigint;
+}
+export interface TwinStatement {
+    run(...params: unknown[]): TwinRunResult;
+    get(...params: unknown[]): unknown;
+    all(...params: unknown[]): unknown[];
+}
+/**
+ * A wrapped transaction function (better-sqlite3's shape). The `.immediate`
+ * variant takes the write lock up front (BEGIN IMMEDIATE) — github's domain
+ * runs its mutations under it.
+ */
+export type TwinTransaction<F extends (...args: never[]) => unknown> = F & {
+    immediate: F;
+};
+export interface TwinDatabase {
+    prepare(sql: string): TwinStatement;
+    exec(sql: string): void;
+    pragma(statement: string, options?: {
+        simple?: boolean;
+    }): unknown;
+    /** Same shape as better-sqlite3: wraps `fn` so calling it runs atomically. */
+    transaction<F extends (...args: never[]) => unknown>(fn: F): TwinTransaction<F>;
+    close(): void;
+}
+export interface OpenTwinDatabaseOptions {
+    /** Schema migration hook, run once right after the pragmas are applied. */
+    migrate?: (db: TwinDatabase) => void;
+}
+/**
+ * Open a twin database with the pome pragma set applied:
+ * `busy_timeout = 5000`, `journal_mode = WAL` (file-backed), and
+ * `foreign_keys = ON` — the exact pragmas every twin's hand-rolled db.ts
+ * applied before F-681 centralized them.
+ */
+export declare function openTwinDatabase(path?: string, options?: OpenTwinDatabaseOptions): TwinDatabase;

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/db.js

@@ -0,0 +1,113 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// Engine SQLite driver wrapper (F-681), backed by node:sqlite since F-703 —
+// zero native deps, no compiler toolchain at install. Twins never import a
+// sqlite driver directly — they call `openTwinDatabase()` and consume the
+// `TwinDatabase` interface below. The interface keeps better-sqlite3's shape
+// (prepare/exec/pragma/transaction/close) because twin domain code has dozens
+// of call sites relying on it; node:sqlite ships no pragma()/transaction()
+// equivalents, so this file emulates them: `pragma()` prepares a `PRAGMA …`
+// statement, `transaction(fn)` (+ `.immediate`) wraps fn in explicit
+// BEGIN [IMMEDIATE]/COMMIT/ROLLBACK at the outermost level and in a SAVEPOINT
+// when called inside an open transaction — better-sqlite3's nesting semantics,
+// which twin-github's seed() relies on (it wraps createIssue et al., each of
+// which opens its own transaction).
+import { mkdirSync } from "node:fs";
+import { dirname } from "node:path";
+import { DatabaseSync } from "node:sqlite";
+class NodeSqliteTwinDatabase {
+    #db;
+    #savepointId = 0;
+    constructor(path) {
+        this.#db = new DatabaseSync(path);
+    }
+    prepare(sql) {
+        const statement = this.#db.prepare(sql);
+        return {
+            run: (...params) => {
+                const result = statement.run(...params);
+                return { changes: Number(result.changes), lastInsertRowid: result.lastInsertRowid };
+            },
+            get: (...params) => statement.get(...params),
+            all: (...params) => statement.all(...params),
+        };
+    }
+    exec(sql) {
+        this.#db.exec(sql);
+    }
+    pragma(statement, options = {}) {
+        const rows = this.#db.prepare(`PRAGMA ${statement}`).all();
+        if (!options.simple)
+            return rows;
+        const row = rows[0];
+        if (row === undefined)
+            return undefined;
+        return row[Object.keys(row)[0]];
+    }
+    transaction(fn) {
+        const wrap = (begin) => ((...args) => {
+            if (this.#db.isTransaction)
+                return this.#nested(fn, args);
+            this.#db.exec(begin);
+            try {
+                const out = fn(...args);
+                this.#db.exec("COMMIT");
+                return out;
+            }
+            catch (error) {
+                // Certain failures (e.g. ON CONFLICT ROLLBACK) end the transaction
+                // themselves — only roll back when one is still open.
+                if (this.#db.isTransaction)
+                    this.#db.exec("ROLLBACK");
+                throw error;
+            }
+        });
+        const tx = wrap("BEGIN");
+        tx.immediate = wrap("BEGIN IMMEDIATE");
+        return tx;
+    }
+    /**
+     * A transaction function called inside an open transaction joins it under a
+     * SAVEPOINT (better-sqlite3's semantics): success releases the savepoint,
+     * failure rolls back only the inner work. The BEGIN variant is irrelevant
+     * here — the outermost transaction already holds the lock mode.
+     */
+    #nested(fn, args) {
+        const name = `_pome_tx_${this.#savepointId++}`;
+        this.#db.exec(`SAVEPOINT ${name}`);
+        try {
+            const out = fn(...args);
+            this.#db.exec(`RELEASE ${name}`);
+            return out;
+        }
+        catch (error) {
+            if (this.#db.isTransaction) {
+                this.#db.exec(`ROLLBACK TO ${name}`);
+                this.#db.exec(`RELEASE ${name}`);
+            }
+            throw error;
+        }
+    }
+    close() {
+        if (this.#db.isOpen)
+            this.#db.close();
+    }
+}
+/**
+ * Open a twin database with the pome pragma set applied:
+ * `busy_timeout = 5000`, `journal_mode = WAL` (file-backed), and
+ * `foreign_keys = ON` — the exact pragmas every twin's hand-rolled db.ts
+ * applied before F-681 centralized them.
+ */
+export function openTwinDatabase(path = ":memory:", options = {}) {
+    if (path !== ":memory:") {
+        mkdirSync(dirname(path), { recursive: true });
+    }
+    const db = new NodeSqliteTwinDatabase(path);
+    db.exec("PRAGMA busy_timeout = 5000");
+    db.exec("PRAGMA journal_mode = WAL");
+    db.exec("PRAGMA foreign_keys = ON");
+    options.migrate?.(db);
+    return db;
+}
+//# sourceMappingURL=db.js.map

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,0EAA0E;AAC1E,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAC3E,4EAA4E;AAC5E,qEAAqE;AACrE,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,oCAAoC;AAEpC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAwC3C,MAAM,sBAAsB;IACjB,GAAG,CAAe;IAC3B,YAAY,GAAG,CAAC,CAAC;IAEjB,YAAY,IAAY;QACtB,IAAI,CAAC,GAAG,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,CAAC,GAAW;QACjB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAExC,OAAO;YACL,GAAG,EAAE,CAAC,GAAG,MAAiB,EAAiB,EAAE;gBAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,GAAI,MAAiB,CAAC,CAAC;gBACpD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC;YACtF,CAAC;YACD,GAAG,EAAE,CAAC,GAAG,MAAiB,EAAW,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAI,MAAiB,CAAC;YAC5E,GAAG,EAAE,CAAC,GAAG,MAAiB,EAAa,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAI,MAAiB,CAAC;SAC/E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,GAAW;QACd,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,SAAiB,EAAE,UAAgC,EAAE;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,SAAS,EAAE,CAAC,CAAC,GAAG,EAAoC,CAAC;QAC7F,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxC,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAW,CAAC,CAAC;IAC5C,CAAC;IAED,WAAW,CAA0C,EAAK;QACxD,MAAM,IAAI,GAAG,CAAC,KAAa,EAAK,EAAE,CAChC,CAAC,CAAC,GAAG,IAAa,EAAE,EAAE;YACpB,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC1D,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;gBACxB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACxB,OAAO,GAAG,CAAC;YACb,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,mEAAmE;gBACnE,sDAAsD;gBACtD,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa;oBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBACtD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAM,CAAC;QACV,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAuB,CAAC;QAC/C,EAAE,CAAC,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACvC,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAA0C,EAAK,EAAE,IAAa;QACnE,MAAM,IAAI,GAAG,YAAY,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YACxB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YACjC,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;gBAC3B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;gBACrC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;YACnC,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;IACxC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAI,GAAG,UAAU,EACjB,UAAmC,EAAE;IAErC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC5C,EAAE,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACtC,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACrC,EAAE,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACpC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACtB,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/errors.d.ts

@@ -0,0 +1,24 @@
+export declare class TwinError extends Error {
+    readonly status: number;
+    readonly errors?: unknown[] | undefined;
+    constructor(message: string, status: number, errors?: unknown[] | undefined);
+}
+/**
+ * Thrown by the SDK's tool dispatch routes (`/mcp/call`,
+ * `/mcp/tools/:name`, JSON-RPC `tools/call`) when the named tool is not in
+ * the registry. A distinct class so a twin's `errorEnvelope` hook can shape
+ * the frozen per-twin wire format (slack 404 `unknown_tool`, stripe 400
+ * `tool_unknown`, …) without string-matching messages.
+ */
+export declare class UnknownToolError extends TwinError {
+    readonly tool: string;
+    constructor(tool: string, status?: number);
+}
+export interface ErrorEnvelope {
+    status: number;
+    body: {
+        message: string;
+        errors?: unknown[];
+    };
+}
+export declare function envelopeFor(error: unknown): ErrorEnvelope;

package/node_modules/@pome-sh/twin-slack/node_modules/@pome-sh/sdk/dist/errors.js

@@ -0,0 +1,61 @@
+// SPDX-License-Identifier: Apache-2.0
+//
+// Generic SDK error envelope. Twin authors can throw `TwinError` from
+// handlers to surface a non-200 response with a custom message; the
+// recorder middleware unwraps it into the standard envelope and records
+// the error string per recording-spec.md v1.0.
+import { z } from "zod";
+export class TwinError extends Error {
+    status;
+    errors;
+    constructor(message, status, errors) {
+        super(message);
+        this.status = status;
+        this.errors = errors;
+        this.name = "TwinError";
+    }
+}
+/**
+ * Thrown by the SDK's tool dispatch routes (`/mcp/call`,
+ * `/mcp/tools/:name`, JSON-RPC `tools/call`) when the named tool is not in
+ * the registry. A distinct class so a twin's `errorEnvelope` hook can shape
+ * the frozen per-twin wire format (slack 404 `unknown_tool`, stripe 400
+ * `tool_unknown`, …) without string-matching messages.
+ */
+export class UnknownToolError extends TwinError {
+    tool;
+    constructor(tool, status = 404) {
+        super(`Unknown tool: ${tool}`, status);
+        this.tool = tool;
+        this.name = "UnknownToolError";
+    }
+}
+export function envelopeFor(error) {
+    if (error instanceof TwinError) {
+        return {
+            status: error.status,
+            body: { message: error.message, ...(error.errors ? { errors: error.errors } : {}) },
+        };
+    }
+    if (error instanceof z.ZodError) {
+        return {
+            status: 422,
+            body: {
+                message: "Validation Failed",
+                errors: error.issues.map((issue) => ({
+                    field: issue.path.join("."),
+                    code: issue.code,
+                    message: issue.message,
+                })),
+            },
+        };
+    }
+    if (error instanceof SyntaxError) {
+        return { status: 400, body: { message: "Problems parsing JSON" } };
+    }
+    return {
+        status: 500,
+        body: { message: error instanceof Error ? error.message : "Internal Server Error" },
+    };
+}
+//# sourceMappingURL=errors.js.map