@runtypelabs/cli 2.22.8 → 2.22.10

package/dist/index.js

@@ -15181,7 +15181,7 @@ var edgeContextPayloadSchema = external_exports.object({
   exp: external_exports.number().int().positive()
 });
 
-// ../shared/dist/chunk-KR4LFVFE.mjs
+// ../shared/dist/chunk-3FPSMWBQ.mjs
 function getNestedValue(obj, path18) {
   let normalizedPath = path18;
   normalizedPath = normalizedPath.replace(/^\$\.?/, "");
@@ -15566,7 +15566,7 @@ function resolveFallback(parsed, context, tracking) {
 }
 var templateEngine = new SimpleTemplateEngine();
 
-// ../shared/dist/chunk-6RCUU75J.mjs
+// ../shared/dist/chunk-MMDRPM6Q.mjs
 var tokensSchema = external_exports.object({ input: external_exports.number(), output: external_exports.number() });
 var wireStopReasonSchema = external_exports.enum([
   "end_turn",
@@ -15865,6 +15865,10 @@ var unifiedToolCompleteEventSchema = external_exports.object({
   iteration: external_exports.number().optional(),
   stepId: external_exports.string().optional()
 });
+var unifiedSubagentAttributionSchema = external_exports.object({
+  toolName: external_exports.string(),
+  agentName: external_exports.string().optional()
+});
 var unifiedApprovalStartEventSchema = external_exports.object({
   ...unifiedBase,
   type: external_exports.literal("approval_start"),
@@ -15878,7 +15882,10 @@ var unifiedApprovalStartEventSchema = external_exports.object({
   parameters: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
   timeout: external_exports.number().optional(),
   startedAt: external_exports.string().optional(),
-  iteration: external_exports.number().optional()
+  iteration: external_exports.number().optional(),
+  // Present when the approval originated inside a subagent's execution.
+  // Attribution only — never a control signal.
+  subagent: unifiedSubagentAttributionSchema.optional()
 });
 var unifiedApprovalCompleteEventSchema = external_exports.object({
   ...unifiedBase,
@@ -16015,6 +16022,10 @@ var externalAgentContextSchema = external_exports.object({
   contextId: external_exports.string().optional(),
   taskId: external_exports.string().optional()
 });
+var subagentAttributionSchema = external_exports.object({
+  toolName: external_exports.string(),
+  agentName: external_exports.string().optional()
+});
 var tokensSchema2 = external_exports.object({ input: external_exports.number(), output: external_exports.number() });
 var wireStopReasonSchema2 = external_exports.enum([
   "end_turn",
@@ -16166,7 +16177,11 @@ var agentApprovalStartEventSchema = external_exports.object({
   parameters: external_exports.record(external_exports.string(), external_exports.unknown()).optional(),
   timeout: external_exports.number(),
   startedAt: external_exports.string(),
-  externalAgent: externalAgentContextSchema.optional()
+  externalAgent: externalAgentContextSchema.optional(),
+  // Present when the approval originated inside a subagent's execution (a
+  // child agent's tool required approval). Attribution only — see
+  // {@link subagentAttributionSchema}.
+  subagent: subagentAttributionSchema.optional()
 });
 var agentApprovalCompleteEventSchema = external_exports.object({
   ...baseAgentEvent,
@@ -16677,7 +16692,8 @@ var AGENT_CONTENT_CONFIG_KEYS = {
   artifacts: true,
   loggingPolicy: true,
   temporal: true,
-  memory: true
+  memory: true,
+  sandbox: true
 };
 var AGENT_CONTENT_CONFIG_KEY_LIST = Object.keys(AGENT_CONTENT_CONFIG_KEYS).sort();
 var configurationStatusSchema = external_exports.enum([
@@ -17068,7 +17084,13 @@ var setVariableConfigSchema = external_exports.object({
   // rejecting it. Required so nested set-variable steps validate when the
   // recursive conditional union lands (see
   // `docs/features/planning/2026-06-04-conditional-nested-step-strict-validation.md`).
-  value: external_exports.union([external_exports.string(), external_exports.number(), external_exports.boolean(), external_exports.null(), external_exports.record(external_exports.string(), external_exports.unknown())]),
+  value: external_exports.union([
+    external_exports.string(),
+    external_exports.number(),
+    external_exports.boolean(),
+    external_exports.null(),
+    external_exports.record(external_exports.string(), external_exports.unknown())
+  ]),
   valueTemplate: external_exports.string().optional()
 });
 var sendStreamConfigSchema = external_exports.object({
@@ -17704,10 +17726,63 @@ var promptConfigSchema = external_exports.object({
   mode: external_exports.string().optional()
   // UI mode (task, agent, etc.)
 });
+var conditionalBranchSchema = external_exports.object({
+  /** Stable identifier (unique within the conditional). */
+  id: external_exports.string().min(1, "Branch id is required"),
+  /** Display name ("High priority", "POST", ...). */
+  name: external_exports.string().optional(),
+  /** JS expression; template `{{var}}` references resolve first. */
+  condition: external_exports.string().min(1, "Branch condition is required"),
+  steps: external_exports.array(external_exports.lazy(() => contextStepSchema))
+});
 var conditionalConfigSchema = external_exports.object({
-  condition: external_exports.string().min(1, "Condition is required"),
-  trueSteps: external_exports.array(external_exports.lazy(() => contextStepSchema)),
-  falseSteps: external_exports.array(external_exports.lazy(() => contextStepSchema)).optional()
+  /** Legacy binary shape. Required unless `branches` is provided. */
+  condition: external_exports.string().min(1, "Condition is required").optional(),
+  trueSteps: external_exports.array(external_exports.lazy(() => contextStepSchema)).optional(),
+  falseSteps: external_exports.array(external_exports.lazy(() => contextStepSchema)).optional(),
+  /**
+   * N-way named branches, evaluated in order with first-match-wins. When
+   * present (non-empty), this takes precedence over the legacy
+   * `condition`/`trueSteps`/`falseSteps` shape.
+   */
+  branches: external_exports.array(conditionalBranchSchema).optional(),
+  /** Steps to run when no branch condition matches (the pinned "Otherwise"). */
+  otherwiseSteps: external_exports.array(external_exports.lazy(() => contextStepSchema)).optional(),
+  /**
+   * Optional unified branch output. After the taken branch runs, this variable
+   * is bound to the value of the branch's LAST enabled, explicitly-named,
+   * value-producing step (walking back past disabled / unnamed / `when`-skipped
+   * steps). Left absent if the taken branch produced no named output. Lets
+   * divergent branches surface a single result under one name.
+   * (This is an SSA φ-node — it merges the value out of whichever branch ran.)
+   */
+  outputVariable: external_exports.string().optional()
+}).superRefine((config3, ctx) => {
+  const hasBranches = Array.isArray(config3.branches) && config3.branches.length > 0;
+  if (!hasBranches) {
+    if (typeof config3.condition !== "string" || config3.condition.length === 0) {
+      ctx.addIssue({ code: "custom", path: ["condition"], message: "Condition is required" });
+    }
+    if (!Array.isArray(config3.trueSteps)) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["trueSteps"],
+        message: "trueSteps is required unless branches is provided"
+      });
+    }
+    return;
+  }
+  const seen = /* @__PURE__ */ new Set();
+  config3.branches.forEach((branch, index) => {
+    if (seen.has(branch.id)) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["branches", index, "id"],
+        message: `Duplicate branch id "${branch.id}"`
+      });
+    }
+    seen.add(branch.id);
+  });
 });
 var saveMemoryConfigSchema = external_exports.object({
   profileTemplate: external_exports.string().min(1, "Profile template is required"),
@@ -18362,7 +18437,8 @@ function normalizeCrawlConfig(config3) {
   if (maxAgeRaw !== void 0 && maxAgeRaw !== null) validateNumber(maxAgeRaw, "maxAge", "crawl");
   if (modifiedSince !== void 0) validateString(modifiedSince, "modifiedSince", "crawl");
   if (config3.options !== void 0) validateObject(config3.options, "options", "crawl");
-  if (config3.authenticate !== void 0) validateObject(config3.authenticate, "authenticate", "crawl");
+  if (config3.authenticate !== void 0)
+    validateObject(config3.authenticate, "authenticate", "crawl");
   if (config3.cookies !== void 0) validateArray(config3.cookies, "cookies", "crawl");
   if (setExtraHTTPHeaders !== void 0) {
     validateObject(setExtraHTTPHeaders, "setExtraHTTPHeaders", "crawl");
@@ -18385,7 +18461,8 @@ function normalizeCrawlConfig(config3) {
   }
   if (userAgent !== void 0) validateString(userAgent, "userAgent", "crawl");
   if (jsonOptions !== void 0) validateObject(jsonOptions, "jsonOptions", "crawl");
-  if (config3.streamOutput !== void 0) validateBoolean(config3.streamOutput, "streamOutput", "crawl");
+  if (config3.streamOutput !== void 0)
+    validateBoolean(config3.streamOutput, "streamOutput", "crawl");
   if (pollIntervalMsRaw !== void 0 && pollIntervalMsRaw !== null) {
     validateNumber(pollIntervalMsRaw, "pollIntervalMs", "crawl");
   }
@@ -18745,11 +18822,19 @@ function normalizeTemplateConfig(config3) {
     validateArray(config3.sampleData, "sampleData", "template");
     for (const [i, scenario] of config3.sampleData.entries()) {
       if (typeof scenario !== "object" || scenario === null || Array.isArray(scenario)) {
-        throw new NormalizationError(`sampleData[${i}] must be an object`, "template", `sampleData[${i}]`);
+        throw new NormalizationError(
+          `sampleData[${i}] must be an object`,
+          "template",
+          `sampleData[${i}]`
+        );
       }
       validateString(scenario.name, `sampleData[${i}].name`, "template", true);
       if (typeof scenario.data !== "object" || scenario.data === null || Array.isArray(scenario.data)) {
-        throw new NormalizationError(`sampleData[${i}].data must be an object`, "template", `sampleData[${i}].data`);
+        throw new NormalizationError(
+          `sampleData[${i}].data must be an object`,
+          "template",
+          `sampleData[${i}].data`
+        );
       }
     }
   }
@@ -18774,7 +18859,9 @@ function normalizeTemplateConfig(config3) {
 }
 function normalizeConditionalConfig(config3) {
   validateConfig(config3, "conditional");
-  validateString(config3.condition, "condition", "conditional", true);
+  const rawBranches = config3.branches;
+  const hasBranches = Array.isArray(rawBranches) && rawBranches.length > 0;
+  validateString(config3.condition, "condition", "conditional", !hasBranches);
   const trueSteps = config3.trueSteps ?? config3.true_steps;
   const falseSteps = config3.falseSteps ?? config3.false_steps;
   if (trueSteps) {
@@ -18796,10 +18883,37 @@ function normalizeConditionalConfig(config3) {
       return normalizeContextStep(stepWithDefaults);
     });
   };
+  let branches;
+  if (hasBranches) {
+    validateArray(rawBranches, "branches", "conditional");
+    branches = rawBranches.map((branch, index) => {
+      if (!branch || typeof branch !== "object") {
+        throw new NormalizationError(
+          `branches[${index}] must be an object`,
+          "conditional",
+          "branches"
+        );
+      }
+      validateString(branch.condition, `branches[${index}].condition`, "conditional", true);
+      const branchSteps = Array.isArray(branch.steps) ? branch.steps : [];
+      return {
+        id: typeof branch.id === "string" && branch.id.length > 0 ? branch.id : `branch-${index}`,
+        ...typeof branch.name === "string" && branch.name.length > 0 ? { name: branch.name } : {},
+        condition: branch.condition,
+        steps: normalizeNestedSteps(branchSteps, `conditional-branch-${index}`)
+      };
+    });
+  }
+  const otherwiseSteps = Array.isArray(config3.otherwiseSteps) ? normalizeNestedSteps(config3.otherwiseSteps, "conditional-otherwise") : void 0;
   return {
-    condition: config3.condition,
+    ...typeof config3.condition === "string" && config3.condition.length > 0 ? { condition: config3.condition } : {},
     trueSteps: trueSteps ? normalizeNestedSteps(trueSteps, "conditional-true") : [],
-    falseSteps: falseSteps ? normalizeNestedSteps(falseSteps, "conditional-false") : void 0
+    falseSteps: falseSteps ? normalizeNestedSteps(falseSteps, "conditional-false") : void 0,
+    ...branches ? { branches } : {},
+    ...otherwiseSteps ? { otherwiseSteps } : {},
+    // Preserve the optional unified branch-output binding through normalization —
+    // the manual rebuild above would otherwise drop it (not condition/branches).
+    ...typeof config3.outputVariable === "string" && config3.outputVariable.length > 0 ? { outputVariable: config3.outputVariable } : {}
   };
 }
 function normalizeSetVariableConfig(config3) {
@@ -19915,8 +20029,18 @@ function conditionalNestingDepth(config3) {
     if (depth > MAX_CONDITIONAL_NESTING_DEPTH) break;
     if (!node || typeof node !== "object") continue;
     const cfg = node;
-    for (const key of ["trueSteps", "falseSteps", "true_steps", "false_steps"]) {
-      const branch = cfg[key];
+    const branchArrays = [];
+    for (const key of ["trueSteps", "falseSteps", "true_steps", "false_steps", "otherwiseSteps"]) {
+      branchArrays.push(cfg[key]);
+    }
+    if (Array.isArray(cfg.branches)) {
+      for (const branch of cfg.branches) {
+        if (branch && typeof branch === "object") {
+          branchArrays.push(branch.steps);
+        }
+      }
+    }
+    for (const branch of branchArrays) {
       if (!Array.isArray(branch)) continue;
       for (const s of branch) {
         if (s && typeof s === "object" && s.type === "conditional") {
@@ -20040,6 +20164,15 @@ function collectCodeModeToolNameCheck(toolsConfig, stepIndex, stepRef, pendingCh
 }
 var SINGLE_BRACE_VARIABLE_PATTERN = /(?<!\{)\{([a-zA-Z_][a-zA-Z0-9_.]*)\}(?!\})/g;
 var DOUBLE_BRACE_VARIABLE_PATTERN = TEMPLATE_EXPRESSION_PATTERN;
+var STRING_LITERAL_OPERAND = /(?:'[^']*'|"[^"]*"|`[^`]*`)/.source;
+var EQUALITY_OPERATOR = /(?:===|!==|==|!=)/.source;
+var UNQUOTED_TEMPLATE = /(?<!['"`])\{\{[^{}]+\}\}(?!['"`])/.source;
+var UNQUOTED_TEMPLATE_BEFORE_OP = new RegExp(
+  `${UNQUOTED_TEMPLATE}\\s*${EQUALITY_OPERATOR}\\s*${STRING_LITERAL_OPERAND}`
+);
+var UNQUOTED_TEMPLATE_AFTER_OP = new RegExp(
+  `${STRING_LITERAL_OPERAND}\\s*${EQUALITY_OPERATOR}\\s*${UNQUOTED_TEMPLATE}`
+);
 var TEMPLATE_STRING_FIELDS = /* @__PURE__ */ new Set([
   "text",
   "userPrompt",
@@ -20270,6 +20403,82 @@ function validateUpsertRecordSourceShape(flowSteps, buckets) {
     }
   }
 }
+function checkConditionExpression(expr, path18, stepRef, buckets) {
+  if (typeof expr !== "string" || !expr.includes("{{")) return;
+  const match = UNQUOTED_TEMPLATE_BEFORE_OP.exec(expr) || UNQUOTED_TEMPLATE_AFTER_OP.exec(expr);
+  if (!match) return;
+  const snippet = match[0].trim();
+  addIssue(
+    "warning",
+    {
+      code: "CONDITION_UNQUOTED_TEMPLATE_COMPARISON",
+      message: `Expression compares an unquoted {{...}} placeholder against a string literal (\`${snippet}\`). \`condition\` / \`when\` predicates are JavaScript evaluated after template substitution, so a non-numeric value substitutes in as a bare identifier (e.g. \`healthy === 'watch'\`) and throws "ReferenceError: <value> is not defined" at runtime. Quote the placeholder \u2014 e.g. '{{var}}' === '...' \u2014 or compare numerically.`,
+      path: path18,
+      step: stepRef,
+      details: { snippet }
+    },
+    buckets
+  );
+}
+var CONDITIONAL_BRANCH_STEP_KEYS = [
+  "trueSteps",
+  "falseSteps",
+  "true_steps",
+  "false_steps",
+  "otherwiseSteps"
+];
+function walkStepConditionExpressions(node, basePath, stepRef, buckets, depth) {
+  if (!isObjectRecord(node)) return;
+  if (node.enabled === false) return;
+  checkConditionExpression(node.when, `${basePath}.when`, stepRef, buckets);
+  if (node.type !== "conditional" || !isObjectRecord(node.config)) return;
+  const config3 = node.config;
+  checkConditionExpression(config3.condition, `${basePath}.config.condition`, stepRef, buckets);
+  if (depth >= MAX_CONDITIONAL_NESTING_DEPTH) return;
+  if (Array.isArray(config3.branches)) {
+    config3.branches.forEach((branch, branchIndex) => {
+      if (!isObjectRecord(branch)) return;
+      checkConditionExpression(
+        branch.condition,
+        `${basePath}.config.branches[${branchIndex}].condition`,
+        stepRef,
+        buckets
+      );
+      if (Array.isArray(branch.steps)) {
+        branch.steps.forEach(
+          (nested, nestedIndex) => walkStepConditionExpressions(
+            nested,
+            `${basePath}.config.branches[${branchIndex}].steps[${nestedIndex}]`,
+            stepRef,
+            buckets,
+            depth + 1
+          )
+        );
+      }
+    });
+  }
+  for (const key of CONDITIONAL_BRANCH_STEP_KEYS) {
+    const arr = config3[key];
+    if (!Array.isArray(arr)) continue;
+    arr.forEach(
+      (nested, nestedIndex) => walkStepConditionExpressions(
+        nested,
+        `${basePath}.config.${key}[${nestedIndex}]`,
+        stepRef,
+        buckets,
+        depth + 1
+      )
+    );
+  }
+}
+function validateConditionExpressions(flowSteps, buckets, conditionalStepsExceedingDepth) {
+  for (const [stepIndex, step] of flowSteps.entries()) {
+    if (step.enabled === false) continue;
+    if (conditionalStepsExceedingDepth.has(stepIndex)) continue;
+    const stepRef = { index: stepIndex, name: step.name, type: step.type };
+    walkStepConditionExpressions(step, `flowSteps[${stepIndex}]`, stepRef, buckets, 1);
+  }
+}
 function collectAccountScopedReferences(step, stepIndex, pendingChecks) {
   const stepRef = {
     index: stepIndex,
@@ -20851,6 +21060,7 @@ function collectFlowStructureIssues(flowData, deps, buckets) {
     deps.declaredFlowInputs
   );
   validateUpsertRecordSourceShape(flowData.flowSteps, buckets);
+  validateConditionExpressions(flowData.flowSteps, buckets, conditionalStepsExceedingDepth);
   return { pendingChecks };
 }
 function validateFlowStructure(flowData, deps = {}) {
@@ -20965,7 +21175,7 @@ const helpers = (function createHelpers() {
 
     extractURLs: (text) => {
       if (typeof text !== 'string') return []
-      const urlRegex = /https?:\\/\\/(www\\.)?[-a-zA-Z0-9@:%._\\+~#=]{1,256}\\.[a-zA-Z0-9()]{1,6}\\b([-a-zA-Z0-9()@:%_\\+.~#?&//=]*)/g
+      const urlRegex = /https?:\\/\\/(www\\.)?[-a-zA-Z0-9@:%._\\+~#=]{1,256}\\.[a-zA-Z0-9()]{1,6}\\b([-a-zA-Z0-9()@:%_\\+.~#?&/=]*)/g
       const matches = text.match(urlRegex)
       return matches ? [...new Set(matches)] : []
     },
@@ -21152,6 +21362,13 @@ const helpers = (function createHelpers() {
         return str
       }
     },
+
+    coalesce: (...values) => {
+      for (const value of values) {
+        if (value !== null && value !== undefined) return value
+      }
+      return null
+    },
   }
 })()
 `.trim();
@@ -32423,6 +32640,7 @@ var BuiltInToolGroup = {
   UCP_COMMERCE: "ucp_commerce",
   SANDBOX_USE: "sandbox_use",
   SANDBOX_SESSION: "sandbox_session",
+  SANDBOX_AGENT: "sandbox_agent",
   TEMPORAL: "temporal"
 };
 var BROWSER_RUN_DOCUMENTATION_URL = "https://developers.cloudflare.com/browser-run/quick-actions/";
@@ -35521,6 +35739,150 @@ var CORE_BUILTIN_TOOLS_REGISTRY = [
     requiresApiKey: false,
     platformKeySupport: true
   },
+  // -----------------------------------------------------------------------
+  // Agent Sandbox tools — the implicit-computer surface.
+  //
+  // Injected (not catalog-selected) when an agent has `config.sandbox.enabled`,
+  // so they are `hidden` from tool discovery. The agent believes it is already
+  // inside a Linux machine: it runs `bash`, reads/edits files, and exposes
+  // ports — it never provisions, names, or tears down infrastructure. The
+  // machine is created lazily on the first call. See ADR 0010 and
+  // `.planning/agent-sandbox-bash/PLAN.md`.
+  // -----------------------------------------------------------------------
+  {
+    id: "bash",
+    name: "Bash",
+    description: "Run a shell command on your Linux computer (Node 22, Python 3.12, git, pnpm, uv preinstalled). Commands run in /workspace; files you write there stay available to later commands while you work on this task, but system-level changes outside /workspace may not. Combined stdout/stderr is returned. Long output is truncated (head + tail) with the full output spilled to a file. Pass slow_ok=true for commands that take a while (installs, builds, test suites).",
+    category: BuiltInToolCategory.SANDBOX,
+    toolGroup: BuiltInToolGroup.SANDBOX_AGENT,
+    providers: [BuiltInToolProvider.MULTI],
+    parametersSchema: {
+      type: "object",
+      properties: {
+        command: {
+          type: "string",
+          description: "Shell command to execute (runs in bash, cwd is /workspace).",
+          minLength: 1
+        },
+        slow_ok: {
+          type: "boolean",
+          description: "Allow a longer timeout for commands expected to take a while (installs, builds, tests). Defaults to false (short timeout)."
+        }
+      },
+      required: ["command"]
+    },
+    executionHint: "platform",
+    requiresApiKey: false,
+    platformKeySupport: true,
+    hidden: true
+  },
+  {
+    id: "read_file",
+    name: "Read File",
+    description: "Read a file from your computer. Returns the file contents as a string.",
+    category: BuiltInToolCategory.SANDBOX,
+    toolGroup: BuiltInToolGroup.SANDBOX_AGENT,
+    providers: [BuiltInToolProvider.MULTI],
+    parametersSchema: {
+      type: "object",
+      properties: {
+        path: {
+          type: "string",
+          description: "File path to read (relative paths resolve against /workspace).",
+          minLength: 1
+        }
+      },
+      required: ["path"]
+    },
+    executionHint: "platform",
+    requiresApiKey: false,
+    platformKeySupport: true,
+    hidden: true
+  },
+  {
+    id: "write_file",
+    name: "Write File",
+    description: "Write a file on your computer, creating parent directories as needed. Overwrites any existing file at the path. More reliable than shell heredocs for multi-line content.",
+    category: BuiltInToolCategory.SANDBOX,
+    toolGroup: BuiltInToolGroup.SANDBOX_AGENT,
+    providers: [BuiltInToolProvider.MULTI],
+    parametersSchema: {
+      type: "object",
+      properties: {
+        path: {
+          type: "string",
+          description: "File path to write (relative paths resolve against /workspace).",
+          minLength: 1
+        },
+        contents: {
+          type: "string",
+          description: "Full file contents to write."
+        }
+      },
+      required: ["path", "contents"]
+    },
+    executionHint: "platform",
+    requiresApiKey: false,
+    platformKeySupport: true,
+    hidden: true
+  },
+  {
+    id: "edit_file",
+    name: "Edit File",
+    description: 'Replace an exact substring in a file with new text. The "old" text must appear exactly once in the file. Use this for surgical edits instead of rewriting the whole file.',
+    category: BuiltInToolCategory.SANDBOX,
+    toolGroup: BuiltInToolGroup.SANDBOX_AGENT,
+    providers: [BuiltInToolProvider.MULTI],
+    parametersSchema: {
+      type: "object",
+      properties: {
+        path: {
+          type: "string",
+          description: "File path to edit (relative paths resolve against /workspace).",
+          minLength: 1
+        },
+        old: {
+          type: "string",
+          description: "The exact text to find. Must occur exactly once in the file."
+        },
+        new: {
+          type: "string",
+          description: "The replacement text."
+        }
+      },
+      required: ["path", "old", "new"]
+    },
+    executionHint: "platform",
+    requiresApiKey: false,
+    platformKeySupport: true,
+    hidden: true
+  },
+  {
+    id: "expose_port",
+    name: "Expose Port",
+    description: 'Get a public preview URL for a server you started on your computer. Start the server first (e.g. bash("node server.js &")), then expose its port.',
+    category: BuiltInToolCategory.SANDBOX,
+    toolGroup: BuiltInToolGroup.SANDBOX_AGENT,
+    providers: [BuiltInToolProvider.MULTI],
+    parametersSchema: {
+      type: "object",
+      properties: {
+        port: {
+          type: "number",
+          description: "Port your server listens on (must not be 3000, which is reserved)."
+        },
+        name: {
+          type: "string",
+          description: "Optional label for the preview URL."
+        }
+      },
+      required: ["port"]
+    },
+    executionHint: "platform",
+    requiresApiKey: false,
+    platformKeySupport: true,
+    hidden: true
+  },
   // Send email via Resend. Mirrors the send-email context step so agents can
   // dispatch transactional email without wrapping it in a flow.
   {
@@ -39849,6 +40211,25 @@ var memoryConfigSchema = external_exports.object({
   // Resolved via `shouldInjectMemorySummary` so the default lives in one place.
   injectSummary: external_exports.boolean().optional()
 });
+var sandboxNetworkAccessSchema = external_exports.union([
+  external_exports.enum(["none", "essentials"]),
+  external_exports.object({
+    profile: external_exports.enum(["none", "essentials"]).optional(),
+    allow: external_exports.array(external_exports.string()).optional()
+  })
+]);
+var sandboxConfigSchema = external_exports.object({
+  enabled: external_exports.boolean(),
+  provider: external_exports.enum(["runtype-sandbox", "daytona"]).optional(),
+  persistence: external_exports.enum(["ephemeral", "conversation", "named"]).optional(),
+  instanceType: external_exports.enum(["standard-1", "standard-2", "standard-3", "standard-4"]).optional(),
+  networkAccess: sandboxNetworkAccessSchema.optional(),
+  ttl: external_exports.enum(["5m", "1h", "24h", "unlimited"]).optional(),
+  sleepAfter: external_exports.enum(["5m", "15m", "30m", "1h"]).optional(),
+  // Opt-in approval gate on `bash`. Default false; wiring lands in Phase 3. The
+  // approval decision is on tool name + params only — never the agent's reason.
+  requireApprovalForBash: external_exports.boolean().optional()
+});
 var agentRuntimeConfigSchema = external_exports.object({
   model: external_exports.string().optional(),
   systemPrompt: external_exports.string().optional(),
@@ -39987,7 +40368,12 @@ var agentRuntimeConfigSchema = external_exports.object({
   // `memoryConfigSchema` (below) and reused by the update-agent, dispatch
   // inline-agent, and FPO agent schemas so the four surfaces never drift —
   // mirroring how `temporalConfigSchema` is shared.
-  memory: memoryConfigSchema.optional()
+  memory: memoryConfigSchema.optional(),
+  // Agent Sandbox (Linux computer). When enabled, the agent gets the sandbox
+  // builtin tools + system-prompt frame at dispatch. Single-sourced as
+  // `sandboxConfigSchema` (above), mirroring `memory`. The live machine is agent
+  // state; this block is the operator Definition that enables it.
+  sandbox: sandboxConfigSchema.optional()
 });
 function extractSecretReferences(template) {
   const keys = /* @__PURE__ */ new Set();
@@ -41546,10 +41932,10 @@ var FLOW_STEP_TYPE_METADATA = {
     configHints: "template (Liquid body), outputFormat, outputVariable, optional inputs map, optional partials, optional pdfOptions, optional asArtifact, optional streamOutput, optional sampleData"
   },
   conditional: {
-    description: "Branch the flow based on a JavaScript expression. Routes to trueSteps or falseSteps.",
+    description: "Branch the flow on JavaScript expressions. Either the legacy binary shape (condition \u2192 trueSteps / falseSteps) or N-way named branches evaluated first-match-wins with an otherwise fallback. Set outputVariable to merge the taken branch into one named result.",
     category: "control-flow",
     isPrompt: false,
-    configHints: "condition (JS expression), trueSteps, falseSteps"
+    configHints: "either { condition, trueSteps, falseSteps } or { branches: [{ id, name, condition, steps }], otherwiseSteps }, optional outputVariable"
   },
   "fetch-url": {
     description: "Make an HTTP request and capture the response.",
@@ -42256,6 +42642,11 @@ var SURFACE_TYPE_METADATA = {
     behaviorTypeRef: "runtype://types/surface-configs"
   }
 };
+var EMAIL_HTML_CAPABILITY_HINT = [
+  "## Channel capabilities",
+  '- Formatting: author the reply as an HTML email body. Write well-formed HTML and put all styling in inline `style="..."` attributes (no `<style>` blocks, no external CSS). Use semantic tags freely: `<p>`, `<h1>`-`<h3>`, `<ul>`/`<ol>`/`<li>`, `<table>`, `<a>`, `<strong>`/`<em>`, `<blockquote>`, `<img>`. Do NOT emit `<script>`, `<iframe>`, `<head>`, `<body>`, or `<html>` wrappers: Runtype wraps your body in the email document and strips any active or unsafe content before sending.',
+  '- Images: embed an image with `<img src="https://..." alt="...">` and it renders inline in the email. (Some clients ask the recipient to load remote images.)'
+].join("\n");
 var SURFACE_TYPE_GUIDE = (() => {
   const lines = Object.entries(SURFACE_TYPE_METADATA).map(([type, info]) => {
     return `- **${type}**: ${info.description}`;
@@ -43213,7 +43604,12 @@ var AgentInputSchema = external_exports.object({
     model: external_exports.string(),
     systemPrompt: external_exports.string().optional()
   }).optional().nullable(),
-  memory: memoryConfigSchema.optional()
+  memory: memoryConfigSchema.optional(),
+  // Agent Sandbox (Linux computer). When enabled (and the enable-agent-sandbox
+  // flag is on), dispatch injects the sandbox builtin tools + system-prompt
+  // frame — mirroring the saved-agent execute route so the two hosted-agent
+  // entry points stay in lockstep.
+  sandbox: sandboxConfigSchema.optional()
 }).superRefine((val, ctx) => {
   if (val.agentType !== "claude_managed") {
     if (!val.name) {
@@ -64489,8 +64885,8 @@ import { execFileSync } from "child_process";
 // src/lib/persona-init.ts
 init_credential_store();
 
-// ../../node_modules/.pnpm/@runtypelabs+persona@3.37.0/node_modules/@runtypelabs/persona/dist/codegen.js
-var S = "3.37.0";
+// ../../node_modules/.pnpm/@runtypelabs+persona@4.0.0/node_modules/@runtypelabs/persona/dist/codegen.js
+var S = "4.0.0";
 var c = S;
 function u(e) {
   if (e !== void 0) return typeof e == "string" ? e : Array.isArray(e) ? `[${e.map((r) => r.toString()).join(", ")}]` : e.toString();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runtypelabs/cli",
-  "version": "2.22.8",
+  "version": "2.22.10",
   "description": "Command-line interface for Runtype AI platform",
   "type": "module",
   "main": "dist/index.js",
@@ -24,11 +24,11 @@
     "rosie-skills": "0.8.1",
     "yaml": "^2.9.0",
     "@runtypelabs/ink-components": "0.3.2",
-    "@runtypelabs/sdk": "5.2.0",
+    "@runtypelabs/sdk": "5.2.2",
     "@runtypelabs/terminal-animations": "0.2.1"
   },
   "devDependencies": {
-    "@runtypelabs/persona": "3.37.0",
+    "@runtypelabs/persona": "4.0.0",
     "@types/express": "^5.0.6",
     "@types/micromatch": "^4.0.9",
     "@types/node": "^25.3.3",
@@ -39,7 +39,7 @@
     "tsx": "^4.7.1",
     "typescript": "^5.3.3",
     "vitest": "^4.1.0",
-    "@runtypelabs/shared": "1.38.0"
+    "@runtypelabs/shared": "1.40.0"
   },
   "engines": {
     "node": ">=22.0.0"