@runtypelabs/cli 2.22.14 → 2.22.16

package/dist/index.js

@@ -16693,7 +16693,8 @@ var AGENT_CONTENT_CONFIG_KEYS = {
   loggingPolicy: true,
   temporal: true,
   memory: true,
-  sandbox: true
+  sandbox: true,
+  tenancyStrategy: true
 };
 var AGENT_CONTENT_CONFIG_KEY_LIST = Object.keys(AGENT_CONTENT_CONFIG_KEYS).sort();
 var configurationStatusSchema = external_exports.enum([
@@ -40129,6 +40130,20 @@ var SLACK_MANIFEST_BOT_SCOPES = [
   ...SLACK_REQUIRED_BOT_SCOPES,
   ...SLACK_OPTIONAL_BOT_SCOPES
 ];
+var tenancyAssuranceLevelSchema = external_exports.enum(["anonymous", "asserted", "verified"]);
+var tenancyStrategyPresetSchema = external_exports.enum([
+  "internal",
+  "tenant-isolated",
+  "end-user-isolated"
+]);
+var tenancyAssuranceFloorSchema = external_exports.enum(["asserted", "verified"]);
+var tenancyStrategySchema = external_exports.object({
+  preset: tenancyStrategyPresetSchema,
+  assuranceFloor: external_exports.object({
+    tenant: tenancyAssuranceFloorSchema.optional(),
+    endUser: tenancyAssuranceFloorSchema.optional()
+  }).strict().optional()
+}).strict();
 var reasoningConfigSchema = external_exports.union([
   external_exports.boolean(),
   external_exports.object({
@@ -40360,7 +40375,14 @@ var agentRuntimeConfigSchema = external_exports.object({
   // builtin tools + system-prompt frame at dispatch. Single-sourced as
   // `sandboxConfigSchema` (above), mirroring `memory`. The live machine is agent
   // state; this block is the operator Definition that enables it.
-  sandbox: sandboxConfigSchema.optional()
+  sandbox: sandboxConfigSchema.optional(),
+  // Tenancy Strategy (ADR 0012) — per-resource opt-in to tenant/end-user
+  // isolation. Part of the Definition (validated + persisted + content-hashed
+  // here so `ensure` tracks it). Absent → platform-global default (no behavior
+  // change); present → the execution pipeline expands it and enforces the
+  // lock-down gate pre-engine. Single-sourced as `tenancyStrategySchema` in
+  // `./tenancy-strategy`; the expansion + gate logic lives in apps/api.
+  tenancyStrategy: tenancyStrategySchema.optional()
 });
 function extractSecretReferences(template) {
   const keys = /* @__PURE__ */ new Set();
@@ -43719,6 +43741,16 @@ var DispatchRequestSchema = external_exports.object({
     id: external_exports.string().min(1),
     email: external_exports.string().optional()
   }).passthrough().optional(),
+  // Product Tenant identity — the builder's customer/account/workspace *inside*
+  // a Product (the customer's customer), nested under the Builder Org and above
+  // the End User. Exposed as `_tenant.*` in template variables. Distinct from
+  // `_user` (the Runtype account holder / Builder Org) and `_endUser` (the
+  // individual human). V1: caller-asserted transport only — trust-boundary
+  // enforcement, projection, and scoped data key off it in later increments.
+  // See `CONTEXT.md` → "Product Tenant" / "Resolved Tenancy Context".
+  tenant: external_exports.object({
+    id: external_exports.string().min(1)
+  }).passthrough().optional(),
   options: external_exports.object({
     streamResponse: external_exports.boolean().optional().default(true),
     modelOverride: external_exports.string().optional(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runtypelabs/cli",
-  "version": "2.22.14",
+  "version": "2.22.16",
   "description": "Command-line interface for Runtype AI platform",
   "type": "module",
   "main": "dist/index.js",
@@ -23,9 +23,9 @@
     "react": "^19.2.4",
     "rosie-skills": "0.8.1",
     "yaml": "^2.9.0",
-    "@runtypelabs/ink-components": "0.3.3",
-    "@runtypelabs/terminal-animations": "0.2.1",
-    "@runtypelabs/sdk": "5.2.2"
+    "@runtypelabs/ink-components": "0.3.4",
+    "@runtypelabs/sdk": "5.3.0",
+    "@runtypelabs/terminal-animations": "0.2.1"
   },
   "devDependencies": {
     "@runtypelabs/persona": "4.3.1",
@@ -74,9 +74,9 @@
     "dev": "tsx watch src/index.ts",
     "dev:run": "tsx src/index.ts",
     "build": "tsup",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "tsgo --noEmit",
     "start": "node dist/index.js",
-    "type-check": "pnpm --filter @runtypelabs/sdk build && pnpm --filter @runtypelabs/ink-components build && tsc --noEmit",
+    "type-check": "pnpm --filter @runtypelabs/sdk build && pnpm --filter @runtypelabs/ink-components build && tsgo --noEmit",
     "test": "vitest",
     "test:watch": "vitest watch",
     "test:coverage": "vitest run --coverage",