@runtypelabs/cli 2.21.2 → 2.21.3

package/dist/index.js

@@ -15904,6 +15904,9 @@ var flowCompleteEventSchema = external_exports.object({
   // emitter/runtime send success+duration; api raw-writes send the step counts instead.
   success: external_exports.boolean().optional(),
   duration: external_exports.number().optional(),
+  // The claude-managed ephemeral-create dispatch surfaces the minted (and
+  // reusable) Anthropic agent id here so a later run can `connect` to it.
+  claudeManagedAgentId: external_exports.string().optional(),
   executionTime: external_exports.number().optional(),
   completedAt: external_exports.string().optional(),
   totalSteps: external_exports.number().optional(),
@@ -16407,7 +16410,20 @@ var approvalConfigSchema = external_exports.object({
    *  tools by injecting a reserved optional `_approvalReason` string into the
    *  model-visible parameters schema. The value is stripped before the tool
    *  executes and surfaced to the approver. Default: true (opt out with false). */
-  requestReason: external_exports.boolean().optional()
+  requestReason: external_exports.boolean().optional(),
+  /** Persistent "always" choices offered at the human approval prompt — the
+   *  user-facing options the owner offers, NOT auto-behavior. When a choice is
+   *  enabled the approval UI renders its button; the end-user's per-approval pick
+   *  (Persona's wire `remember`) is what writes a durable cross-session grant.
+   *  Keys mirror the grant `decision` enum (`alwaysAllow` → 'allow',
+   *  `alwaysDeny` → 'deny'). v1 honors `alwaysAllow`; `alwaysDeny` is the
+   *  symmetric mirror landed later with no migration. Default: both off — this is
+   *  the sole control for persisted approval grants (no Flagship flag). See
+   *  docs/features/planning/2026-06-13-cross-session-always-allow-approval-grants.md */
+  choices: external_exports.object({
+    alwaysAllow: external_exports.boolean().optional(),
+    alwaysDeny: external_exports.boolean().optional()
+  }).optional()
 });
 var toolSearchConfigSchema = external_exports.object({
   /** Explicit opt-in/out. When omitted, auto-activates if tool count >= threshold. */
@@ -16565,13 +16581,10 @@ var contextFallbackSchema = external_exports.union([
     delay: external_exports.number().optional()
   })
 ]);
-var contextErrorHandlingConfigSchema = external_exports.union([
-  external_exports.enum(["fail", "continue", "default"]),
-  external_exports.object({
-    onError: external_exports.enum(["fail", "continue", "fallback", "default"]),
-    fallbacks: external_exports.array(contextFallbackSchema).optional()
-  })
-]);
+var contextErrorHandlingConfigSchema = external_exports.object({
+  onError: external_exports.enum(["fail", "continue", "fallback"]),
+  fallbacks: external_exports.array(contextFallbackSchema).optional()
+});
 var httpConfigSchema = external_exports.object({
   url: external_exports.string().min(1, "URL is required"),
   method: external_exports.enum(["GET", "POST", "PUT", "DELETE", "PATCH"]).optional(),
@@ -36687,6 +36700,67 @@ var INTEGRATIONS_REGISTRY = [
 function getAllIntegrations() {
   return INTEGRATIONS_REGISTRY;
 }
+var BUILT_IN_GRADER_IDS = [
+  "answersQuestion",
+  "matchesExpected",
+  "followsInstructions",
+  "grounded",
+  "rightTone",
+  "safeToSend"
+];
+var checkGraderSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({
+    kind: external_exports.literal("contains"),
+    value: external_exports.string(),
+    caseSensitive: external_exports.boolean().optional()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("not_contains"),
+    value: external_exports.string(),
+    caseSensitive: external_exports.boolean().optional()
+  }),
+  // Exact/normalized match against `case.expected.text`.
+  external_exports.object({ kind: external_exports.literal("matches_expected") }),
+  external_exports.object({
+    kind: external_exports.literal("regex"),
+    pattern: external_exports.string(),
+    flags: external_exports.string().optional()
+  }),
+  external_exports.object({ kind: external_exports.literal("valid_json") }),
+  external_exports.object({
+    kind: external_exports.literal("json_field"),
+    path: external_exports.string(),
+    equals: external_exports.unknown().optional(),
+    exists: external_exports.boolean().optional()
+  }),
+  external_exports.object({
+    kind: external_exports.literal("length"),
+    minChars: external_exports.number().int().nonnegative().optional(),
+    maxChars: external_exports.number().int().nonnegative().optional()
+  }),
+  external_exports.object({ kind: external_exports.literal("latency"), maxMs: external_exports.number().int().positive() }),
+  // Today's implicit "success" made explicit: the case produced output without erroring.
+  external_exports.object({ kind: external_exports.literal("no_error") })
+]);
+var aiGraderSchema = external_exports.object({
+  kind: external_exports.literal("ai"),
+  preset: external_exports.enum(BUILT_IN_GRADER_IDS).optional(),
+  /** Plain language: "what does a good answer look like?" */
+  criteria: external_exports.string().min(1),
+  /** Reference-guided when the case has `expected`. */
+  useExpected: external_exports.boolean().default(false),
+  /** Defaults to a cheap routed model (e.g. claude-haiku-4-5) at execution time. */
+  model: external_exports.string().optional(),
+  /** Pass cutoff for the 1-5 scale. */
+  threshold: external_exports.number().min(1).max(5).optional()
+});
+var graderConfigSchema = external_exports.union([checkGraderSchema, aiGraderSchema]);
+var gradersSchema = external_exports.array(graderConfigSchema);
+var caseExpectedSchema = external_exports.object({
+  text: external_exports.string().optional(),
+  json: external_exports.unknown().optional(),
+  facts: external_exports.array(external_exports.string()).optional()
+});
 var DEFAULT_MODELS_FOR_NEW_ACCOUNTS = [
   // Mixlayer models
   { provider: "runtype", modelId: "qwen/qwen3.5-9b", isDefault: true },
@@ -36737,7 +36811,12 @@ var userProfileFeaturesSchema = external_exports.object({
   // Gates the Runtype Apps nav entry + routes in the dashboard. Driven by the
   // `enable-runtype-apps` boolean flag (fail-closed in production until the
   // prod ops set lands). The whole /v1/apps surface 404s when this is off.
-  enableRuntypeApps: external_exports.boolean()
+  enableRuntypeApps: external_exports.boolean(),
+  // Gates the dashboard skill "Security scan" affordance (the
+  // `POST /v1/skills/scan` verdict UI). Driven by the `enable-skill-scanner`
+  // boolean flag (fail-closed until a rule enables it). The scan ROUTE stays
+  // reachable; this only hides the UI while the scanner rollout completes.
+  enableSkillScanner: external_exports.boolean()
 });
 var MODEL_FAMILY_PROVIDER_IDS = {
   "claude-fable-5": {
@@ -39321,7 +39400,13 @@ var agentRuntimeConfigSchema = external_exports.object({
       /** Opt out of agent-supplied approval reasons (`_approvalReason`
        *  schema injection). Default: true. Mirrors approvalConfigSchema
        *  in tool-types.ts. */
-      requestReason: external_exports.boolean().optional()
+      requestReason: external_exports.boolean().optional(),
+      /** Persistent "always" choices offered at the approval prompt.
+       *  Mirrors approvalConfigSchema.choices in tool-types.ts. */
+      choices: external_exports.object({
+        alwaysAllow: external_exports.boolean().optional(),
+        alwaysDeny: external_exports.boolean().optional()
+      }).optional()
     }).optional(),
     perToolLimits: external_exports.record(
       external_exports.string(),
@@ -39536,7 +39621,13 @@ var agentToolsConfigSchema2 = external_exports.object({
     timeout: external_exports.number().positive().optional(),
     /** Opt out of agent-supplied approval reasons (`_approvalReason` schema
      *  injection). Default: true. Mirrors approvalConfigSchema in tool-types.ts. */
-    requestReason: external_exports.boolean().optional()
+    requestReason: external_exports.boolean().optional(),
+    /** Persistent "always" choices offered at the approval prompt.
+     *  Mirrors approvalConfigSchema.choices in tool-types.ts. */
+    choices: external_exports.object({
+      alwaysAllow: external_exports.boolean().optional(),
+      alwaysDeny: external_exports.boolean().optional()
+    }).optional()
   }).optional(),
   perToolLimits: external_exports.record(
     external_exports.string(),
@@ -42509,10 +42600,32 @@ var VirtualAgentSubagentConfigSchema = external_exports.object({
   allowNesting: external_exports.boolean().optional(),
   defaultTimeoutMs: external_exports.number().int().min(1e3).max(6e5).optional()
 });
+var DispatchClaudeManagedConfigSchema = external_exports.object({
+  setupMode: external_exports.enum(["create", "connect"]).optional(),
+  anthropicAgentId: external_exports.string().optional(),
+  anthropicAgentVersion: external_exports.number().int().optional(),
+  anthropicEnvironmentId: external_exports.string().optional(),
+  model: external_exports.string().optional(),
+  systemPrompt: external_exports.string().optional(),
+  /**
+   * `create` mode only: archive the minted Anthropic agent after the run.
+   * Defaults to `true` (ephemeral). Set `false` to retain it for reuse — the
+   * returned `claudeManagedAgentId` can then be used in a later `connect` run.
+   */
+  autoDelete: external_exports.boolean().optional()
+});
 var AgentInputSchema = external_exports.object({
   agentId: external_exports.string().optional(),
-  name: external_exports.string().min(1),
-  model: external_exports.string().min(1),
+  /**
+   * Agent execution kind. Omit (or `runtype`) for the default virtual-agent
+   * loop. `claude_managed` routes the dispatch to the Anthropic-hosted Claude
+   * Managed runner — supply a saved `agentId` (its saved config wins) or, for an
+   * inline run, a connect-mode `claudeManagedConfig`.
+   */
+  agentType: external_exports.enum(["runtype", "claude_managed"]).optional(),
+  claudeManagedConfig: DispatchClaudeManagedConfigSchema.optional(),
+  name: external_exports.string().min(1).optional(),
+  model: external_exports.string().min(1).optional(),
   systemPrompt: external_exports.string().optional(),
   temperature: external_exports.number().min(0).max(2).optional(),
   topP: external_exports.number().min(0).max(1).optional(),
@@ -42540,7 +42653,13 @@ var AgentInputSchema = external_exports.object({
       /** Opt out of agent-supplied approval reasons (`_approvalReason`
        *  schema injection). Default: true. Mirrors approvalConfigSchema
        *  in tool-types.ts. */
-      requestReason: external_exports.boolean().optional()
+      requestReason: external_exports.boolean().optional(),
+      /** Persistent "always" choices offered at the approval prompt.
+       *  Mirrors approvalConfigSchema.choices in tool-types.ts. */
+      choices: external_exports.object({
+        alwaysAllow: external_exports.boolean().optional(),
+        alwaysDeny: external_exports.boolean().optional()
+      }).optional()
     }).optional(),
     subagentConfig: VirtualAgentSubagentConfigSchema.optional(),
     codeModeConfig: external_exports.object({
@@ -42556,6 +42675,28 @@ var AgentInputSchema = external_exports.object({
     systemPrompt: external_exports.string().optional()
   }).optional().nullable(),
   memory: memoryConfigSchema.optional()
+}).superRefine((val, ctx) => {
+  if (val.agentType !== "claude_managed") {
+    if (!val.name) {
+      ctx.addIssue({ code: "custom", path: ["name"], message: "name is required" });
+    }
+    if (!val.model) {
+      ctx.addIssue({ code: "custom", path: ["model"], message: "model is required" });
+    }
+    return;
+  }
+  if (!val.agentId) {
+    const cm = val.claudeManagedConfig;
+    const validConnect = cm?.setupMode === "connect" && !!cm.anthropicAgentId;
+    const validCreate = cm?.setupMode === "create" && !!cm.model;
+    if (!validConnect && !validCreate) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["claudeManagedConfig"],
+        message: 'Inline Claude Managed dispatch requires claudeManagedConfig: "connect" with anthropicAgentId, or "create" with a model. Or reference a saved agent via agentId.'
+      });
+    }
+  }
 });
 var TextContentPartSchema = external_exports.object({
   type: external_exports.literal("text"),
@@ -42809,6 +42950,17 @@ var appRoutingDocSchema = external_exports.object({
   }),
   updatedAt: external_exports.string()
 });
+var SKILL_SCAN_HARD_BLOCK_CATEGORIES = [
+  "credential_exfiltration",
+  "prompt_injection",
+  "mcp_tool_poisoning",
+  "data_exfiltration",
+  "privilege_escalation"
+];
+function normalizeCategoryToken(value) {
+  return value.toLowerCase().replace(/[^a-z0-9]/g, "");
+}
+var HARD_BLOCK_NEEDLES = SKILL_SCAN_HARD_BLOCK_CATEGORIES.map(normalizeCategoryToken);
 
 // src/config/env.ts
 function getApiUrl() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runtypelabs/cli",
-  "version": "2.21.2",
+  "version": "2.21.3",
   "description": "Command-line interface for Runtype AI platform",
   "type": "module",
   "main": "dist/index.js",
@@ -24,7 +24,7 @@
     "rosie-skills": "0.8.1",
     "yaml": "^2.9.0",
     "@runtypelabs/ink-components": "0.3.2",
-    "@runtypelabs/sdk": "4.15.0",
+    "@runtypelabs/sdk": "4.16.0",
     "@runtypelabs/terminal-animations": "0.2.1"
   },
   "devDependencies": {
@@ -39,7 +39,7 @@
     "tsx": "^4.7.1",
     "typescript": "^5.3.3",
     "vitest": "^4.1.0",
-    "@runtypelabs/shared": "1.31.0"
+    "@runtypelabs/shared": "1.32.0"
   },
   "engines": {
     "node": ">=22.0.0"