pome-sh 0.6.6

package/node_modules/@pome-sh/twin-slack/node_modules/@hono/node-server/package.json

@@ -0,0 +1,103 @@
+{
+  "name": "@hono/node-server",
+  "version": "1.19.14",
+  "description": "Node.js Adapter for Hono",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "require": "./dist/index.js",
+      "import": "./dist/index.mjs"
+    },
+    "./serve-static": {
+      "types": "./dist/serve-static.d.ts",
+      "require": "./dist/serve-static.js",
+      "import": "./dist/serve-static.mjs"
+    },
+    "./vercel": {
+      "types": "./dist/vercel.d.ts",
+      "require": "./dist/vercel.js",
+      "import": "./dist/vercel.mjs"
+    },
+    "./utils/*": {
+      "types": "./dist/utils/*.d.ts",
+      "require": "./dist/utils/*.js",
+      "import": "./dist/utils/*.mjs"
+    },
+    "./conninfo": {
+      "types": "./dist/conninfo.d.ts",
+      "require": "./dist/conninfo.js",
+      "import": "./dist/conninfo.mjs"
+    }
+  },
+  "typesVersions": {
+    "*": {
+      ".": [
+        "./dist/index.d.ts"
+      ],
+      "serve-static": [
+        "./dist/serve-static.d.ts"
+      ],
+      "vercel": [
+        "./dist/vercel.d.ts"
+      ],
+      "utils/*": [
+        "./dist/utils/*.d.ts"
+      ],
+      "conninfo": [
+        "./dist/conninfo.d.ts"
+      ]
+    }
+  },
+  "scripts": {
+    "test": "node --expose-gc node_modules/jest/bin/jest.js",
+    "build": "tsup --external hono",
+    "watch": "tsup --watch",
+    "postbuild": "publint",
+    "prerelease": "bun run build && bun run test",
+    "release": "np",
+    "lint": "eslint src test",
+    "lint:fix": "eslint src test --fix",
+    "format": "prettier --check \"src/**/*.{js,ts}\" \"test/**/*.{js,ts}\"",
+    "format:fix": "prettier --write \"src/**/*.{js,ts}\" \"test/**/*.{js,ts}\""
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/honojs/node-server.git"
+  },
+  "homepage": "https://github.com/honojs/node-server",
+  "author": "Yusuke Wada <yusuke@kamawada.com> (https://github.com/yusukebe)",
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=18.14.1"
+  },
+  "devDependencies": {
+    "@hono/eslint-config": "^1.0.1",
+    "@types/jest": "^29.5.3",
+    "@types/node": "^20.10.0",
+    "@types/supertest": "^2.0.12",
+    "@whatwg-node/fetch": "^0.9.14",
+    "eslint": "^9.10.0",
+    "hono": "^4.4.10",
+    "jest": "^29.6.1",
+    "np": "^7.7.0",
+    "prettier": "^3.2.4",
+    "publint": "^0.1.16",
+    "supertest": "^6.3.3",
+    "ts-jest": "^29.1.1",
+    "tsup": "^7.2.0",
+    "typescript": "^5.3.2"
+  },
+  "peerDependencies": {
+    "hono": "^4"
+  },
+  "packageManager": "bun@1.2.20"
+}

package/node_modules/@pome-sh/twin-slack/package.json

@@ -0,0 +1,80 @@
+{
+  "name": "@pome-sh/twin-slack",
+  "version": "0.1.0",
+  "description": "Deterministic Slack Web API twin for agent testing — REST + MCP, SQLite-backed state.",
+  "private": true,
+  "type": "module",
+  "main": "./dist/src/index.js",
+  "types": "./dist/src/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/src/index.d.ts",
+      "default": "./dist/src/index.js"
+    },
+    "./server": {
+      "types": "./dist/src/server.d.ts",
+      "default": "./dist/src/server.js"
+    },
+    "./*": "./dist/src/*.js"
+  },
+  "bin": {
+    "twin-slack": "./dist/src/server.js"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "FIDELITY.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "dev": "tsx src/server.ts",
+    "seed": "tsx scripts/seed.ts",
+    "smoke": "tsx scripts/smoke.ts",
+    "validate:mcp": "tsx scripts/validate-mcp.ts",
+    "verify:cloud-token": "tsx scripts/verify-cloud-token.ts",
+    "agent:claude": "tsx examples/claude-slack-agent.ts",
+    "start": "node dist/src/server.js",
+    "prepack": "bun run build",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  },
+  "dependencies": {
+    "@hono/node-server": "^1.19.6",
+    "@pome-sh/shared-types": "workspace:*",
+    "better-sqlite3": "^12.5.0",
+    "hono": "^4.12.27",
+    "zod": "^4.1.13"
+  },
+  "devDependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@slack/web-api": "^7.16.0",
+    "@types/better-sqlite3": "^7.6.13",
+    "@types/node": "^25.0.3",
+    "@vitest/coverage-v8": "4.1.9",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.15"
+  },
+  "keywords": [
+    "slack",
+    "twin",
+    "test-double",
+    "agent-testing",
+    "mcp",
+    "pome"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/pome-sh/pome.git",
+    "directory": "packages/twin-slack"
+  },
+  "homepage": "https://github.com/pome-sh/pome/tree/main/packages/twin-slack",
+  "bugs": {
+    "url": "https://github.com/pome-sh/pome/issues"
+  },
+  "license": "Apache-2.0",
+  "engines": {
+    "node": ">=20"
+  }
+}

package/node_modules/@pome-sh/twin-stripe/FIDELITY.md

@@ -0,0 +1,271 @@
+# Stripe Twin Fidelity
+
+`@pome-sh/twin-stripe` is a high-fidelity test double of Stripe's
+**x402 machine payments** surface — not a universal Stripe clone. This
+page documents exactly which surfaces are faithful to real Stripe today,
+at what tier, and how fidelity is verified.
+
+Last verified: 2026-05-09.
+Stripe API version pinned: `2026-03-04.preview`.
+
+## What "fidelity" means here
+
+Each REST route and MCP tool is classified into one of three tiers:
+
+- **`semantic`** — the stateful behavior is implemented locally and
+  covered by tests. PaymentIntent state-machine transitions, balance
+  arithmetic, idempotency-key dedupe, and the rest behave the way agents
+  expect when they call real Stripe.
+- **`shape`** — the response shape is checked against captured real
+  Stripe fixtures, but the underlying behavior is not fully semantic.
+  v1 has no shape-tier routes.
+- **`unsupported`** — not implemented. The clone returns a loud 501
+  envelope (see below) so an agent never silently succeeds against a
+  missing route.
+
+The bar Pome aims for: **agents written against real Stripe x402 run
+unchanged against this twin**, and trip a loud failure for anything
+outside the documented surface.
+
+For the build / runtime / cross-repo invariants the hosted snapshot
+build depends on (port `:3333`, `/healthz`, `STRIPE_CLONE_HOST`,
+`npm install`-able package, `node dist/src/server.js`), see
+[Runtime contract](./README.md#runtime-contract-for-snapshot-consumers)
+in the package README. Changing any of those is a breaking change for
+`pome-cloud` and goes via a cross-repo PR.
+
+## REST routes (v1 = 12 semantic + everything else loud 501)
+
+| Route | Tier | Tests | Notes |
+| --- | --- | --- | --- |
+| `POST /s/:sid/v1/payment_intents` | semantic | `pi.test.ts`, `tools.test.ts` | Crypto deposit mode only. Generates deterministic Base USDC deposit address. PI status starts at `requires_action`. |
+| `GET /s/:sid/v1/payment_intents/:id` | semantic | `pi.test.ts` | |
+| `GET /s/:sid/v1/payment_intents` | semantic | `pi.test.ts` | Cursor pagination on `(created, id)` via `starting_after` / `ending_before` (matches Stripe's cursor model). |
+| `POST /s/:sid/v1/payment_intents/:id/confirm` | semantic | `pi.test.ts` | For crypto-only PIs, confirm is mostly a no-op (state already `requires_action` after create). Idempotent return. |
+| `POST /s/:sid/v1/payment_intents/:id/cancel` | semantic | `pi.test.ts` | CAS-on-status; refused once `succeeded`. |
+| `POST /s/:sid/v1/test_helpers/payment_intents/:id/simulate_crypto_deposit` | semantic | `pi.test.ts`, `pi-concurrency.test.ts`, `events.test.ts` | The x402 settlement entry point. CAS `requires_action → processing → succeeded`; mints charge + balance txn + 5 events synchronously. |
+| `GET /s/:sid/v1/charges/:id` | semantic | `charges.test.ts` | Latest charge of a settled PI. |
+| `GET /s/:sid/v1/charges` | semantic | `charges.test.ts` | Filter by `payment_intent`, `customer`. |
+| `GET /s/:sid/v1/balance` | semantic | `balance.test.ts` | Available + pending; updated as PIs settle. |
+| `GET /s/:sid/v1/balance_transactions` | semantic | `balance.test.ts` | Ledger entries. |
+| `GET /s/:sid/v1/events/:id` | semantic | `events.test.ts` | |
+| `GET /s/:sid/v1/events` | semantic | `events.test.ts` | Filter by `type`, `created`. **No webhook delivery in v1** — agents poll this. |
+
+Anything else under `/v1/*` (`/v1/customers`,
+`/v1/setup_intents`, `/v1/checkout/*`, `/v1/products`, `/v1/prices`,
+`/v1/webhook_endpoints`, `/v1/payment_methods`, `/v1/shared_payment/*`,
+`/v1/profiles`, etc.) returns:
+
+```json
+{
+  "error": {
+    "type": "invalid_request_error",
+    "code": "endpoint_not_supported",
+    "message": "This endpoint is not supported by this Stripe twin clone.",
+    "fidelity": "unsupported",
+    "supported_surfaces": [
+      "Stripe-shaped REST under /v1/* (see FIDELITY.md)",
+      "GET /s/:sid/mcp/tools",
+      "POST /s/:sid/mcp/call",
+      "POST /s/:sid/mcp/tools/:name"
+    ]
+  }
+}
+```
+
+HTTP status: 501.
+
+## MCP tools (12 — names match `stripe-node` method names)
+
+| Tool | Backing route | Tier |
+| --- | --- | --- |
+| `create_payment_intent` | POST /v1/payment_intents | semantic |
+| `retrieve_payment_intent` | GET /v1/payment_intents/:id | semantic |
+| `list_payment_intents` | GET /v1/payment_intents | semantic |
+| `confirm_payment_intent` | POST /v1/payment_intents/:id/confirm | semantic |
+| `cancel_payment_intent` | POST /v1/payment_intents/:id/cancel | semantic |
+| `simulate_crypto_deposit` | POST /v1/test_helpers/.../simulate_crypto_deposit | semantic |
+| `retrieve_charge` | GET /v1/charges/:id | semantic |
+| `list_charges` | GET /v1/charges | semantic |
+| `retrieve_balance` | GET /v1/balance | semantic |
+| `list_balance_transactions` | GET /v1/balance_transactions | semantic |
+| `retrieve_event` | GET /v1/events/:id | semantic |
+| `list_events` | GET /v1/events | semantic |
+
+Every MCP tool is callable via both `POST /s/:sid/mcp/call` (with
+`{tool, arguments}` body) and `POST /s/:sid/mcp/tools/:name` (with the
+arguments as the body). Coverage in `tools.test.ts`.
+
+## x402 middleware (`src/x402.ts`)
+
+`paymentMiddleware(routeMap, twinOptions)` is a Hono helper that:
+
+- Returns 402 with the canonical `accepts` body when the request lacks
+  an `X-PAYMENT` header.
+- Decodes the second-leg `X-PAYMENT` (base64 JSON), validates `to` ∈
+  cached payTo book, validates `value` matches priced amount, calls
+  `simulate_crypto_deposit` to settle the matching PI, then proxies the
+  wrapped handler.
+- Caches per-route challenges (5 min TTL) so replays don't mint
+  duplicate PIs.
+- Idempotent: same `X-PAYMENT` header twice returns the same response,
+  doesn't double-create state on the twin.
+
+**Known deviation**: v0 does NOT cryptographically verify EIP-3009
+signatures. Loud comment block at the top of `src/x402.ts`. We accept
+any well-formed `X-PAYMENT` payload that matches our payTo book +
+amount.
+
+Tests: `x402.test.ts` (6 cases), `x402-replay.test.ts` (2 cases),
+plus the `examples/buyer-agent/` end-to-end demo against a running twin.
+
+## Concurrency contract
+
+- **PI confirm/settle race** (`pi-concurrency.test.ts`): 8 parallel
+  `simulate_crypto_deposit` calls on one PI deterministically produce
+  exactly one 200 (winner of the `requires_action → processing` CAS)
+  and seven 400s with `payment_intent_unexpected_state`. Single
+  `charges` row, single `balance_transactions` row, balance reflects
+  the PI amount once.
+- **Idempotency-Key** (`idempotency.test.ts`): same key + same body →
+  cached response. Same key + different body → 400
+  `idempotency_key_in_use`. Caches 2xx/3xx; skips 4xx and 5xx so a
+  client with a typo in its first request can retry under the same key
+  against a fresh handler invocation (matches real Stripe, which
+  re-executes on 4xx for client errors).
+
+## Pome introspection (`/_pome/*`)
+
+These are pome-internal observation routes, not part of Stripe's
+surface:
+
+- `GET /healthz` → `{ ok, twin, implementation, fidelity, tools, tthw_seconds }`.
+  Snapshot probe. tthw_seconds tracks time since process start (DX
+  measurement per plan §21).
+- `GET /s/:sid/_pome/health` → per-session liveness.
+- `GET /s/:sid/_pome/state` → full domain state export (PIs, charges,
+  balance txns, events). For test assertions.
+- `GET /s/:sid/_pome/events` → recorder events (HTTP request/response
+  log). For test assertions.
+
+Admin (localhost-only):
+
+- `POST /admin/reset` — reset to default seed.
+- `POST /admin/seed` — load custom seed JSON.
+
+## Auth shapes accepted
+
+- `Authorization: Bearer sk_test_pome_<sid>` — Stripe-SDK-compatible.
+  Default seed mints `sk_test_pome_default` mapped to sid=`default`.
+- `Authorization: Bearer <jwt>` where the JWT carries a `sid` claim
+  matching the URL — pome's twin-github-style auth.
+- `Authorization: <jwt>` (no `Bearer` prefix) — backwards-compat with
+  twin-github MCP clients.
+
+When the URL is path-prefixed (`/s/:sid/...`), the resolved sid must
+match the `:sid` param. 403 otherwise. When the URL has no `:sid`
+prefix (the SDK-compat root mount, see below), the bearer alone
+resolves the session.
+
+## SDK-compatibility mount
+
+`/v1/*` routes also work at the root path with the sid resolved from
+the bearer. This matches Stripe's URL shape so `stripe-node`,
+`stripe-python`, and friends can use `host`/`port` overrides without
+monkey-patching the path. Concretely:
+
+```
+POST /v1/payment_intents                → uses bearer's sid
+POST /s/:sid/v1/payment_intents         → uses path sid (must match bearer)
+```
+
+Both shapes hit the same handlers and produce identical responses. The
+account-scoping invariant (F1) holds for both: a key for sid=A hitting
+the root mount cannot see sid=B's data. `/_pome/*` and `/admin/*` are
+not exposed at the root mount — those remain at `/s/:sid/_pome/*` and
+`/admin/*` respectively. Tested in `sdk-compat.test.ts`.
+
+## Stripe-Version header
+
+- `Stripe-Version: 2026-03-04.preview` → served as-is.
+- Header omitted → served as `2026-03-04.preview` with a default warning.
+- Older GA version → 400 `api_version_unsupported` (no shape coercion;
+  fail loudly so SDKs that pin GA versions can't accidentally consume
+  preview shapes).
+
+## Known divergences from real Stripe (v1)
+
+1. **PI currency restricted to `usd`**. Non-USD returns
+   `currency_not_supported`. (Real Stripe accepts many currencies but
+   x402's USD-priced/USDC-paid model is the v1 wedge.)
+2. **`payment_method_types` restricted to crypto**. The value must be
+   `["crypto"]`; `["card"]` and others return
+   `payment_method_type_not_supported`.
+3. **Single deposit network and token**. One network (`base`), one token
+   (`usdc`). Tempo and Solana from Stripe's published matrix are deferred.
+4. **`available_on` equals `created`** for balance transactions (no
+   float window).
+5. **No webhook delivery loop**. `event_deliveries` table not in v1.
+   Agents poll `GET /v1/events`.
+6. **EIP-3009 signature verification not enforced** (x402 deviation).
+7. **`simulate_crypto_deposit` settles synchronously**; no chain-delay
+   simulation.
+8. **`confirm_payment_intent` is a no-op for crypto-only PIs** (the
+   state machine doesn't need a separate confirm step in deposit mode).
+9. **`/v1/refunds` omits the legacy `count` field**. Real Stripe's
+   refunds list envelope still carries a top-level `count`; the twin (like
+   its other list surfaces, which match real Stripe exactly) omits this
+   deprecated field. The 3 other list surfaces — `payment_intents`,
+   `charges`, `balance_transactions` — are verified green against real
+   Stripe test mode.
+10. **`/v1/events` is not L1-auto-verified**. The empty fidelity world has
+    no event history while a real test account accrues events from every
+    action, and the live event body embeds account-identifying fields, so
+    this surface is left `unverified` (the event object shape is exercised
+    at L2 via `simulate_crypto_deposit` instead).
+11. **`/v1/balance` is not L1-auto-verified**. Real Stripe returns an
+    account-currency zero entry plus `source_types` /
+    `refund_and_dispute_prefunding`; the twin's empty `usd` world can't
+    reproduce an account-specific balance, so it is left `unverified`
+    (balance arithmetic is exercised semantically at L2).
+12. **PaymentIntent `payment_method_options.crypto` carries x402 `mode`/`deposit_options`**.
+    The twin emits the x402 deposit-mode rail (`mode: "deposit"`,
+    `deposit_options.networks: ["base"]`) on every PaymentIntent. The official
+    `stripe@22.2.0` `PaymentMethodOptions.Crypto` type has only `setup_future_usage`;
+    `mode` / `deposit_options` are x402 extension fields the twin adds. They are
+    lifted past the compile-time shape anchor (FDRS-478) via a named-variable spread
+    so the rest of the PaymentIntent stays strictly shape-checked.
+13. **PaymentIntent `next_action` carries the x402 crypto deposit instruction blob**.
+    A `requires_action` PaymentIntent surfaces `next_action` as the deterministic
+    Base/USDC deposit instruction (address + amount) the buyer-agent funds. The
+    official `PaymentIntent.next_action` union has no crypto-deposit member, so this
+    payload is an opaque blob the compile anchor cannot field-check — registered here
+    so the x402 extension shape is on the public record.
+14. **Event `type`/`data` are lifted past the `EventBase` envelope anchor**. The
+    event serializer is anchored against the shared `Stripe.EventBase` envelope
+    (id / object / api_version / created / livemode / pending_webhooks / request),
+    not the giant `Stripe.Event` discriminated union. `type` (twin emits a free
+    `string`; upstream is the `Event.Type` literal union) and `data` (twin stores an
+    opaque parsed JSON blob; upstream `Event.Data.object` is a typed resource union)
+    are narrowed for the type anchor only (FDRS-454); runtime values unchanged.
+15. **Compile anchor pins `stripe@22.2.0` (dahlia), decoupled from the `2026-03-04.preview` wire version**.
+    The compile-time shape anchor (FDRS-478) pins the official `stripe` library at
+    `22.2.0` (apiVersion 2026-05-27.dahlia), intentionally DECOUPLED from the wire
+    apiVersion the twin serves (`2026-03-04.preview`). The anchor guards SHAPE only;
+    the wire version is tracked by this page + live capture. Concretely, the dahlia
+    types dropped the top-level `invoice` field from PaymentIntent and Charge, which
+    the twin still emits faithfully to its preview wire version (lifted past the
+    anchor). Bumping `stripe` re-runs the anchor — the FDRS-476 bump → tsc →
+    cover-or-register loop — surfacing every upstream shape change by name.
+
+> Pagination is **not** a divergence: `GET /v1/payment_intents` (and the
+> other list surfaces) use real cursor pagination keyed on `(created, id)`
+> via `starting_after` / `ending_before`, matching Stripe's cursor model.
+
+## Verification commands
+
+```bash
+bun run test            # 14 files / 70 tests, all green
+bun run smoke           # full x402 flow against built server
+bun run typecheck
+```