@runtypelabs/cli 2.32.0 → 2.32.2

package/dist/index.js

@@ -15395,7 +15395,7 @@ function renderDefaultModelStrengthsGuide() {
   ).join("\n");
 }
 
-// ../shared/dist/chunk-UIQ7MVBO.mjs
+// ../shared/dist/chunk-UB6BK3TZ.mjs
 function getNestedValue(obj, path20) {
   let normalizedPath = path20;
   normalizedPath = normalizedPath.replace(/^\$\.?/, "");
@@ -17017,6 +17017,353 @@ var artifactSSEEventSchema = external_exports.discriminatedUnion("type", [
 ]);
 var UNIFIED_SSE_EVENT_TYPE_SET = new Set(UNIFIED_SSE_EVENT_TYPES);
 
+// ../shared/dist/chunk-REUID6D4.mjs
+function parseHTMLWithRegex(html) {
+  if (typeof html !== "string") {
+    throw new Error("parseHTML: input must be a string");
+  }
+  try {
+    const parser = {
+      stripTags(value) {
+        return value.replace(/<[^>]*>/g, " ").replace(/\s+/g, " ").trim();
+      },
+      querySelector(selector) {
+        try {
+          const tag = selector.replace(/[^a-zA-Z0-9-]/g, "");
+          const match = html.match(new RegExp("<" + tag + "[^>]*>(.*?)<\\/" + tag + ">", "is"));
+          return match ? parser.stripTags(match[1]).trim() || null : null;
+        } catch {
+          return null;
+        }
+      },
+      querySelectorAll(selector) {
+        try {
+          const tag = selector.replace(/[^a-zA-Z0-9-]/g, "");
+          const regex = new RegExp("<" + tag + "[^>]*>(.*?)<\\/" + tag + ">", "gis");
+          const results = [];
+          let match;
+          while ((match = regex.exec(html)) !== null) {
+            const value = parser.stripTags(match[1]).trim();
+            if (value) results.push(value);
+          }
+          return results;
+        } catch {
+          return [];
+        }
+      }
+    };
+    const titleMatch = html.match(/<title[^>]*>(.*?)<\/title>/is);
+    const title = titleMatch ? parser.stripTags(titleMatch[1]).trim() || void 0 : void 0;
+    const headingRegex = /<h[1-6][^>]*>(.*?)<\/h[1-6]>/gis;
+    const headings = [];
+    let headingMatch;
+    while ((headingMatch = headingRegex.exec(html)) !== null) {
+      const text2 = parser.stripTags(headingMatch[1]).trim();
+      if (text2) headings.push(text2);
+    }
+    const linkRegex = /<a\s[^>]*href=["']([^"']*)["'][^>]*>(.*?)<\/a>/gis;
+    const links = [];
+    let linkMatch;
+    while ((linkMatch = linkRegex.exec(html)) !== null) {
+      const href = linkMatch[1];
+      const text2 = parser.stripTags(linkMatch[2]).trim();
+      if (href) links.push({ href, text: text2 });
+    }
+    const text = parser.stripTags(html);
+    return {
+      title,
+      headings,
+      links,
+      text,
+      querySelector: parser.querySelector,
+      querySelectorAll: parser.querySelectorAll
+    };
+  } catch (error51) {
+    throw new Error(
+      `parseHTML failed: ${error51 instanceof Error ? error51.message : "Unknown error"}`,
+      {
+        cause: error51
+      }
+    );
+  }
+}
+function createPortableHelpers(parseHTML) {
+  return {
+    parseHTML,
+    /**
+     * Extract email addresses from text
+     * @param text Text to search for emails
+     * @returns Array of found email addresses
+     */
+    extractEmails(text) {
+      if (typeof text !== "string") {
+        return [];
+      }
+      const emailRegex = /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/g;
+      const matches = text.match(emailRegex);
+      return matches ? [...new Set(matches)] : [];
+    },
+    /**
+     * Extract URLs from text
+     * @param text Text to search for URLs
+     * @returns Array of found URLs
+     */
+    extractURLs(text) {
+      if (typeof text !== "string") {
+        return [];
+      }
+      const urlRegex = /https?:\/\/(www\.)?[-a-zA-Z0-9@:%._+~#=]{1,256}\.[a-zA-Z0-9()]{1,6}\b([-a-zA-Z0-9()@:%_+.~#?&/=]*)/g;
+      const matches = text.match(urlRegex);
+      return matches ? [...new Set(matches)] : [];
+    },
+    /**
+     * Extract phone numbers from text
+     * @param text Text to search for phone numbers
+     * @returns Array of found phone numbers
+     */
+    extractPhoneNumbers(text) {
+      if (typeof text !== "string") {
+        return [];
+      }
+      const phoneRegex = /(?:\+?1[-.\s]?)?(?:\([0-9]{3}\)|[0-9]{3})[-.\s]?[0-9]{3}[-.\s]?[0-9]{4}/g;
+      const matches = text.match(phoneRegex);
+      return matches ? [...new Set(matches)] : [];
+    },
+    /**
+     * Truncate text to specified length with ellipsis
+     * @param text Text to truncate
+     * @param length Maximum length
+     * @returns Truncated text
+     */
+    truncate(text, length) {
+      if (typeof text !== "string" || typeof length !== "number") {
+        return text || "";
+      }
+      if (text.length <= length) {
+        return text;
+      }
+      return text.substring(0, length).trim() + "...";
+    },
+    /**
+     * Create URL-friendly slug from text
+     * @param text Text to slugify
+     * @returns URL-friendly slug
+     */
+    slugify(text) {
+      if (typeof text !== "string") {
+        return "";
+      }
+      return text.toLowerCase().trim().replace(/[^\w\s-]/g, "").replace(/[\s_-]+/g, "-").replace(/^-+|-+$/g, "");
+    },
+    /**
+     * Convert Markdown to HTML (basic conversion)
+     * @param markdown Markdown text
+     * @returns HTML string
+     */
+    markdown2html(markdown) {
+      if (typeof markdown !== "string") {
+        return "";
+      }
+      return markdown.replace(/^### (.*$)/gim, "<h3>$1</h3>").replace(/^## (.*$)/gim, "<h2>$1</h2>").replace(/^# (.*$)/gim, "<h1>$1</h1>").replace(/\*\*(.*?)\*\*/gim, "<strong>$1</strong>").replace(/__(.*?)__/gim, "<strong>$1</strong>").replace(/\*(.*?)\*/gim, "<em>$1</em>").replace(/_(.*?)_/gim, "<em>$1</em>").replace(/`(.*?)`/gim, "<code>$1</code>").replace(/\[([^\]]+)\]\(([^)]+)\)/gim, '<a href="$2">$1</a>').replace(/\n\n/gim, "</p><p>").replace(/\n/gim, "<br>").replace(/^(?!<[h|u|o|l])/gim, "<p>").replace(/$/gim, "</p>").replace(/<p><\/p>/gim, "").replace(/<p>(<h[1-6]>.*<\/h[1-6]>)<\/p>/gim, "$1");
+    },
+    /**
+     * Convert HTML to Markdown (basic conversion)
+     * @param html HTML string
+     * @returns Markdown text
+     */
+    html2markdown(html) {
+      if (typeof html !== "string") {
+        return "";
+      }
+      return html.replace(/<h1[^>]*>(.*?)<\/h1>/gim, "# $1\n\n").replace(/<h2[^>]*>(.*?)<\/h2>/gim, "## $1\n\n").replace(/<h3[^>]*>(.*?)<\/h3>/gim, "### $1\n\n").replace(/<h4[^>]*>(.*?)<\/h4>/gim, "#### $1\n\n").replace(/<h5[^>]*>(.*?)<\/h5>/gim, "##### $1\n\n").replace(/<h6[^>]*>(.*?)<\/h6>/gim, "###### $1\n\n").replace(/<strong[^>]*>(.*?)<\/strong>/gim, "**$1**").replace(/<b[^>]*>(.*?)<\/b>/gim, "**$1**").replace(/<em[^>]*>(.*?)<\/em>/gim, "*$1*").replace(/<i[^>]*>(.*?)<\/i>/gim, "*$1*").replace(/<code[^>]*>(.*?)<\/code>/gim, "`$1`").replace(/<a[^>]*href="([^"]*)"[^>]*>(.*?)<\/a>/gim, "[$2]($1)").replace(/<br[^>]*>/gim, "\n").replace(/<\/p>/gim, "\n\n").replace(/<p[^>]*>/gim, "").replace(/<li[^>]*>(.*?)<\/li>/gim, "- $1\n").replace(/<ul[^>]*>/gim, "\n").replace(/<\/ul>/gim, "\n").replace(/<ol[^>]*>/gim, "\n").replace(/<\/ol>/gim, "\n").replace(/<[^>]+>/gim, "").replace(/\n\s*\n\s*\n/gim, "\n\n").trim();
+    },
+    /**
+     * Parse date from various string formats
+     * @param dateStr Date string to parse
+     * @returns Date object or null if invalid
+     */
+    parseDate(dateStr) {
+      if (typeof dateStr !== "string") {
+        return null;
+      }
+      try {
+        const date5 = new Date(dateStr);
+        return isNaN(date5.getTime()) ? null : date5;
+      } catch {
+        return null;
+      }
+    },
+    /**
+     * Format date according to specified format
+     * @param date Date object or string
+     * @param format Format string (simple patterns)
+     * @returns Formatted date string
+     */
+    formatDate(date5, format) {
+      const defaultFormat = format || "YYYY-MM-DD";
+      let dateObj;
+      if (typeof date5 === "string") {
+        dateObj = new Date(date5);
+      } else if (date5 instanceof Date) {
+        dateObj = date5;
+      } else {
+        return "";
+      }
+      if (isNaN(dateObj.getTime())) {
+        return "";
+      }
+      const year = dateObj.getFullYear();
+      const month = String(dateObj.getMonth() + 1).padStart(2, "0");
+      const day = String(dateObj.getDate()).padStart(2, "0");
+      const hours = String(dateObj.getHours()).padStart(2, "0");
+      const minutes = String(dateObj.getMinutes()).padStart(2, "0");
+      const seconds = String(dateObj.getSeconds()).padStart(2, "0");
+      return defaultFormat.replace(/YYYY/g, String(year)).replace(/MM/g, month).replace(/DD/g, day).replace(/HH/g, hours).replace(/mm/g, minutes).replace(/ss/g, seconds);
+    },
+    /**
+     * Add days to a date
+     * @param date Date object or string
+     * @param days Number of days to add (can be negative)
+     * @returns New Date object
+     */
+    addDays(date5, days) {
+      let dateObj;
+      if (typeof date5 === "string") {
+        dateObj = new Date(date5);
+      } else if (date5 instanceof Date) {
+        dateObj = new Date(date5.getTime());
+      } else {
+        return null;
+      }
+      if (isNaN(dateObj.getTime()) || typeof days !== "number") {
+        return null;
+      }
+      dateObj.setDate(dateObj.getDate() + days);
+      return dateObj;
+    },
+    /**
+     * Validate email address format
+     * @param email Email address to validate
+     * @returns True if valid email format
+     */
+    isValidEmail(email3) {
+      if (typeof email3 !== "string") {
+        return false;
+      }
+      const emailRegex = /^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$/;
+      return emailRegex.test(email3);
+    },
+    /**
+     * Validate URL format
+     * @param url URL to validate
+     * @returns True if valid URL format
+     */
+    isValidURL(url2) {
+      if (typeof url2 !== "string") {
+        return false;
+      }
+      try {
+        new URL(url2);
+        return true;
+      } catch {
+        return false;
+      }
+    },
+    /**
+     * Validate JSON string
+     * @param str String to validate as JSON
+     * @returns True if valid JSON
+     */
+    isValidJSON(str) {
+      if (typeof str !== "string") {
+        return false;
+      }
+      try {
+        JSON.parse(str);
+        return true;
+      } catch {
+        return false;
+      }
+    },
+    /**
+     * Encode string to base64
+     * @param str String to encode
+     * @returns Base64 encoded string
+     */
+    base64Encode(str) {
+      if (typeof str !== "string") {
+        return "";
+      }
+      try {
+        return btoa(str);
+      } catch {
+        return btoa(unescape(encodeURIComponent(str)));
+      }
+    },
+    /**
+     * Decode base64 string
+     * @param str Base64 string to decode
+     * @returns Decoded string
+     */
+    base64Decode(str) {
+      if (typeof str !== "string") {
+        return "";
+      }
+      try {
+        return atob(str);
+      } catch {
+        try {
+          return decodeURIComponent(escape(atob(str)));
+        } catch {
+          return "";
+        }
+      }
+    },
+    /**
+     * URL encode string
+     * @param str String to encode
+     * @returns URL encoded string
+     */
+    urlEncode(str) {
+      if (typeof str !== "string") {
+        return "";
+      }
+      return encodeURIComponent(str);
+    },
+    /**
+     * URL decode string
+     * @param str URL encoded string to decode
+     * @returns Decoded string
+     */
+    urlDecode(str) {
+      if (typeof str !== "string") {
+        return "";
+      }
+      try {
+        return decodeURIComponent(str);
+      } catch {
+        return str;
+      }
+    },
+    /**
+     * Return the first argument that is neither null nor undefined (a named
+     * first-non-null / nullish coalesce). The script-side counterpart of the
+     * `{{a ?? b}}` template operator — in templates prefer `{{a ?? b}}`; use
+     * `helpers.coalesce(a, b)` inside transform-data scripts.
+     * @param values Candidate values in priority order
+     * @returns The first non-null/undefined value, or null if all are null/undefined
+     */
+    coalesce(...values) {
+      for (const value of values) {
+        if (value !== null && value !== void 0) {
+          return value;
+        }
+      }
+      return null;
+    }
+  };
+}
+
 // ../shared/dist/index.mjs
 var FORMULA_TRIGGER = /^[=+\-@\t\r\n]/;
 var STRICT_NUMBER = /^[+-]?(\d+(\.\d*)?|\.\d+)([eE][+-]?\d+)?$/;
@@ -17164,6 +17511,14 @@ var AGENT_CONTENT_CONFIG_KEYS = {
   tenancyStrategy: true
 };
 var AGENT_CONTENT_CONFIG_KEY_LIST = Object.keys(AGENT_CONTENT_CONFIG_KEYS).sort();
+function stripTrailingChars(value, char) {
+  const code = char.charCodeAt(0);
+  let end = value.length;
+  while (end > 0 && value.charCodeAt(end - 1) === code) {
+    end--;
+  }
+  return end === value.length ? value : value.slice(0, end);
+}
 var configurationStatusSchema = external_exports.enum(["configured", "needs_configuration", "invalid"]);
 var secretDocsUrlSchema = external_exports.url({ protocol: /^https$/ }).max(2048);
 var secretRequirementSourceSchema = external_exports.object({
@@ -22005,280 +22360,8 @@ function parseCreateFlowValidationInput(payload) {
   };
 }
 var SERIALIZED_HELPERS_SOURCE = `
-// Transform helper functions (from packages/shared/src/transform-helpers.ts)
-const helpers = (function createHelpers() {
-  // Regex-based HTML tag stripper for extracting text content
-  const stripTags = (html) => html.replace(/<[^>]*>/g, ' ').replace(/\\s+/g, ' ').trim()
-
-  return {
-    parseHTML: (html) => {
-      if (typeof html !== 'string') throw new Error('parseHTML: input must be a string')
-      try {
-        // Extract title
-        const titleMatch = html.match(/<title[^>]*>(.*?)<\\/title>/is)
-        const title = titleMatch ? stripTags(titleMatch[1]).trim() || undefined : undefined
-
-        // Extract headings (h1-h6)
-        const headingRegex = /<h[1-6][^>]*>(.*?)<\\/h[1-6]>/gis
-        const headings = []
-        let hMatch
-        while ((hMatch = headingRegex.exec(html)) !== null) {
-          const text = stripTags(hMatch[1]).trim()
-          if (text) headings.push(text)
-        }
-
-        // Extract links
-        const linkRegex = /<a\\s[^>]*href=["']([^"']*)["'][^>]*>(.*?)<\\/a>/gis
-        const links = []
-        let lMatch
-        while ((lMatch = linkRegex.exec(html)) !== null) {
-          const href = lMatch[1]
-          const text = stripTags(lMatch[2]).trim()
-          if (href) links.push({ href, text })
-        }
-
-        // Extract all text content
-        const text = stripTags(html)
-
-        // Simple querySelector (CSS element selectors only)
-        const querySelector = (selector) => {
-          try {
-            const tag = selector.replace(/[^a-zA-Z0-9-]/g, '')
-            const match = html.match(new RegExp('<' + tag + '[^>]*>(.*?)<\\\\/' + tag + '>', 'is'))
-            return match ? stripTags(match[1]).trim() || null : null
-          } catch (error) {
-            return null
-          }
-        }
-
-        // Simple querySelectorAll (CSS element selectors only)
-        const querySelectorAll = (selector) => {
-          try {
-            const tag = selector.replace(/[^a-zA-Z0-9-]/g, '')
-            const regex = new RegExp('<' + tag + '[^>]*>(.*?)<\\\\/' + tag + '>', 'gis')
-            const results = []
-            let m
-            while ((m = regex.exec(html)) !== null) {
-              const t = stripTags(m[1]).trim()
-              if (t) results.push(t)
-            }
-            return results
-          } catch (error) {
-            return []
-          }
-        }
-
-        return { title, headings, links, text, querySelector, querySelectorAll }
-      } catch (error) {
-        throw new Error('parseHTML failed: ' + (error instanceof Error ? error.message : 'Unknown error'))
-      }
-    },
-
-    extractEmails: (text) => {
-      if (typeof text !== 'string') return []
-      const emailRegex = /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}/g
-      const matches = text.match(emailRegex)
-      return matches ? [...new Set(matches)] : []
-    },
-
-    extractURLs: (text) => {
-      if (typeof text !== 'string') return []
-      const urlRegex = /https?:\\/\\/(www\\.)?[-a-zA-Z0-9@:%._\\+~#=]{1,256}\\.[a-zA-Z0-9()]{1,6}\\b([-a-zA-Z0-9()@:%_\\+.~#?&/=]*)/g
-      const matches = text.match(urlRegex)
-      return matches ? [...new Set(matches)] : []
-    },
-
-    extractPhoneNumbers: (text) => {
-      if (typeof text !== 'string') return []
-      const phoneRegex = /(?:\\+?1[-.\\s]?)?(?:\\([0-9]{3}\\)|[0-9]{3})[-.\\s]?[0-9]{3}[-.\\s]?[0-9]{4}/g
-      const matches = text.match(phoneRegex)
-      return matches ? [...new Set(matches)] : []
-    },
-
-    truncate: (text, length) => {
-      if (typeof text !== 'string' || typeof length !== 'number') return text || ''
-      if (text.length <= length) return text
-      return text.substring(0, length).trim() + '...'
-    },
-
-    slugify: (text) => {
-      if (typeof text !== 'string') return ''
-      return text
-        .toLowerCase()
-        .trim()
-        .replace(/[^\\w\\s-]/g, '')
-        .replace(/[\\s_-]+/g, '-')
-        .replace(/^-+|-+$/g, '')
-    },
-
-    markdown2html: (markdown) => {
-      if (typeof markdown !== 'string') return ''
-      return markdown
-        .replace(/^### (.*$)/gim, '<h3>$1</h3>')
-        .replace(/^## (.*$)/gim, '<h2>$1</h2>')
-        .replace(/^# (.*$)/gim, '<h1>$1</h1>')
-        .replace(/\\*\\*(.*?)\\*\\*/gim, '<strong>$1</strong>')
-        .replace(/__(.*?)__/gim, '<strong>$1</strong>')
-        .replace(/\\*(.*?)\\*/gim, '<em>$1</em>')
-        .replace(/_(.*?)_/gim, '<em>$1</em>')
-        .replace(/\`(.*?)\`/gim, '<code>$1</code>')
-        .replace(/\\[([^\\]]+)\\]\\(([^)]+)\\)/gim, '<a href="$2">$1</a>')
-        .replace(/\\n\\n/gim, '</p><p>')
-        .replace(/\\n/gim, '<br>')
-        .replace(/^(?!<[h|u|o|l])/gim, '<p>')
-        .replace(/$/gim, '</p>')
-        .replace(/<p><\\/p>/gim, '')
-        .replace(/<p>(<h[1-6]>.*<\\/h[1-6]>)<\\/p>/gim, '$1')
-    },
-
-    html2markdown: (html) => {
-      if (typeof html !== 'string') return ''
-      return html
-        .replace(/<h1[^>]*>(.*?)<\\/h1>/gim, '# $1\\n\\n')
-        .replace(/<h2[^>]*>(.*?)<\\/h2>/gim, '## $1\\n\\n')
-        .replace(/<h3[^>]*>(.*?)<\\/h3>/gim, '### $1\\n\\n')
-        .replace(/<h4[^>]*>(.*?)<\\/h4>/gim, '#### $1\\n\\n')
-        .replace(/<h5[^>]*>(.*?)<\\/h5>/gim, '##### $1\\n\\n')
-        .replace(/<h6[^>]*>(.*?)<\\/h6>/gim, '###### $1\\n\\n')
-        .replace(/<strong[^>]*>(.*?)<\\/strong>/gim, '**$1**')
-        .replace(/<b[^>]*>(.*?)<\\/b>/gim, '**$1**')
-        .replace(/<em[^>]*>(.*?)<\\/em>/gim, '*$1*')
-        .replace(/<i[^>]*>(.*?)<\\/i>/gim, '*$1*')
-        .replace(/<code[^>]*>(.*?)<\\/code>/gim, '\`$1\`')
-        .replace(/<a[^>]*href="([^"]*)"[^>]*>(.*?)<\\/a>/gim, '[$2]($1)')
-        .replace(/<br[^>]*>/gim, '\\n')
-        .replace(/<\\/p>/gim, '\\n\\n')
-        .replace(/<p[^>]*>/gim, '')
-        .replace(/<li[^>]*>(.*?)<\\/li>/gim, '- $1\\n')
-        .replace(/<ul[^>]*>/gim, '\\n')
-        .replace(/<\\/ul>/gim, '\\n')
-        .replace(/<ol[^>]*>/gim, '\\n')
-        .replace(/<\\/ol>/gim, '\\n')
-        .replace(/<[^>]+>/gim, '')
-        .replace(/\\n\\s*\\n\\s*\\n/gim, '\\n\\n')
-        .trim()
-    },
-
-    parseDate: (dateStr) => {
-      if (typeof dateStr !== 'string') return null
-      try {
-        const date = new Date(dateStr)
-        return isNaN(date.getTime()) ? null : date
-      } catch {
-        return null
-      }
-    },
-
-    formatDate: (date, format) => {
-      const defaultFormat = format || 'YYYY-MM-DD'
-      let dateObj
-      if (typeof date === 'string') {
-        dateObj = new Date(date)
-      } else if (date instanceof Date) {
-        dateObj = date
-      } else {
-        return ''
-      }
-      if (isNaN(dateObj.getTime())) return ''
-      const year = dateObj.getFullYear()
-      const month = String(dateObj.getMonth() + 1).padStart(2, '0')
-      const day = String(dateObj.getDate()).padStart(2, '0')
-      const hours = String(dateObj.getHours()).padStart(2, '0')
-      const minutes = String(dateObj.getMinutes()).padStart(2, '0')
-      const seconds = String(dateObj.getSeconds()).padStart(2, '0')
-      return defaultFormat
-        .replace(/YYYY/g, String(year))
-        .replace(/MM/g, month)
-        .replace(/DD/g, day)
-        .replace(/HH/g, hours)
-        .replace(/mm/g, minutes)
-        .replace(/ss/g, seconds)
-    },
-
-    addDays: (date, days) => {
-      let dateObj
-      if (typeof date === 'string') {
-        dateObj = new Date(date)
-      } else if (date instanceof Date) {
-        dateObj = new Date(date.getTime())
-      } else {
-        return null
-      }
-      if (isNaN(dateObj.getTime()) || typeof days !== 'number') return null
-      dateObj.setDate(dateObj.getDate() + days)
-      return dateObj
-    },
-
-    isValidEmail: (email) => {
-      if (typeof email !== 'string') return false
-      const emailRegex = /^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}$/
-      return emailRegex.test(email)
-    },
-
-    isValidURL: (url) => {
-      if (typeof url !== 'string') return false
-      try {
-        new URL(url)
-        return true
-      } catch {
-        return false
-      }
-    },
-
-    isValidJSON: (str) => {
-      if (typeof str !== 'string') return false
-      try {
-        JSON.parse(str)
-        return true
-      } catch {
-        return false
-      }
-    },
-
-    base64Encode: (str) => {
-      if (typeof str !== 'string') return ''
-      try {
-        return btoa(str)
-      } catch {
-        return btoa(unescape(encodeURIComponent(str)))
-      }
-    },
-
-    base64Decode: (str) => {
-      if (typeof str !== 'string') return ''
-      try {
-        return atob(str)
-      } catch {
-        try {
-          return decodeURIComponent(escape(atob(str)))
-        } catch {
-          return ''
-        }
-      }
-    },
-
-    urlEncode: (str) => {
-      if (typeof str !== 'string') return ''
-      return encodeURIComponent(str)
-    },
-
-    urlDecode: (str) => {
-      if (typeof str !== 'string') return ''
-      try {
-        return decodeURIComponent(str)
-      } catch {
-        return str
-      }
-    },
-
-    coalesce: (...values) => {
-      for (const value of values) {
-        if (value !== null && value !== undefined) return value
-      }
-      return null
-    },
-  }
-})()
+// Transform helper functions generated from the canonical portable factory.
+const helpers = (${createPortableHelpers.toString()})(${parseHTMLWithRegex.toString()})
 `.trim();
 var AGENT_EXECUTION_STATUSES = [
   "queued",
@@ -22641,6 +22724,24 @@ var EMIT_ARTIFACT_MARKDOWN_TOOL_ID = "emit_artifact_markdown";
 var EMIT_ARTIFACT_COMPONENT_TOOL_ID = "emit_artifact_component";
 var EMIT_ARTIFACT_MARKDOWN_FULL_ID = `builtin:${EMIT_ARTIFACT_MARKDOWN_TOOL_ID}`;
 var EMIT_ARTIFACT_COMPONENT_FULL_ID = `builtin:${EMIT_ARTIFACT_COMPONENT_TOOL_ID}`;
+var IMPLICIT_ARTIFACT_TOOLS = [
+  {
+    artifactType: "component",
+    toolIds: [
+      "browser:request_handoff",
+      "builtin:browser:request_handoff",
+      "browser-request-handoff",
+      "builtin:browser-request-handoff",
+      "browser:handoff",
+      "builtin:browser:handoff"
+    ]
+  }
+];
+var IMPLICIT_ARTIFACT_TYPE_BY_TOOL_ID = new Map(
+  IMPLICIT_ARTIFACT_TOOLS.flatMap(
+    ({ artifactType, toolIds }) => toolIds.map((id) => [id, artifactType])
+  )
+);
 var ORTHOGONAL_PLATFORM_TOOLS = [
   {
     "id": "orthogonal:agentmail:create_draft",
@@ -34953,6 +35054,106 @@ var CORE_BUILTIN_TOOLS_REGISTRY = [
     executionHint: "platform",
     platformKeySupport: true
   },
+  // -----------------------------------------------------------------------
+  // Live View + human-in-the-loop handoff.
+  // A Live View URL lets a person watch and drive the same browser session the
+  // agent is using; a handoff formally parks the agent until they are done.
+  // -----------------------------------------------------------------------
+  {
+    id: "browser:get_live_view",
+    aliases: ["browser-get-live-view", "browser:live-view"],
+    name: "Browser Live View",
+    description: 'Get a shareable Live View URL for a browser session: a link a person can open to watch the live page and interact with it directly. Use it to show someone what the browser is doing. Anyone holding the link can control the session, so share it only with the person you are helping. Defaults to "tab" mode, the only mode that supports handoff. If you need a human to actually DO something (sign in, solve a CAPTCHA, complete MFA), use browser:request_handoff instead \u2014 it returns the same kind of URL and also tracks when they finish.',
+    category: BuiltInToolCategory.BROWSER,
+    toolGroup: BuiltInToolGroup.BROWSER_USE,
+    providers: [BuiltInToolProvider.MULTI],
+    parametersSchema: {
+      type: "object",
+      properties: {
+        sessionId: {
+          type: "string",
+          description: "The session ID returned by browser:open"
+        },
+        mode: {
+          type: "string",
+          description: 'Live View layout. "tab" shows just the page and is the only mode that supports handoff. "full" and "devtools" expose the DevTools frontend.',
+          enum: ["tab", "full", "devtools"],
+          default: "tab"
+        },
+        expiresInMs: {
+          type: "number",
+          description: "How long the URL stays valid, in milliseconds (min 60000, max 3600000). Defaults to 600000 (10 minutes).",
+          minimum: 6e4,
+          maximum: 36e5,
+          default: 6e5
+        }
+      },
+      required: ["sessionId"]
+    },
+    documentationUrl: BROWSER_SESSION_DOCUMENTATION_URL,
+    requiresApiKey: false,
+    executionHint: "platform",
+    platformKeySupport: true
+  },
+  {
+    id: "browser:request_handoff",
+    aliases: ["browser-request-handoff", "browser:handoff"],
+    name: "Browser Handoff to Human",
+    description: 'Hand control of a browser session to a human, then continue once they are done. Use this the moment the page needs something you cannot or should not do yourself: a login form, an MFA or 2FA prompt, a CAPTCHA, a payment step, or any decision that needs a person. Never guess at credentials \u2014 hand off instead.\n\nWrite "instructions" as a specific, actionable request that names exactly what to do and what should be true when they finish, for example: "Sign in with the team Google account, approve the 2FA prompt on your phone, and stop once the billing dashboard is visible." The human reads this text next to the live page.\n\nThis tool returns IMMEDIATELY and does not wait for the human \u2014 a handoff can take many minutes while a single tool call is capped at 30 seconds. It normally returns "status": "active" plus a Live View URL the person opens to drive the page; they click "Done" or "Failed" in the Live View UI when finished. If the person happens to finish before this call returns it comes back with "status": "completed" and no URL: the work is already done, so do not poll and do not share a link, just carry on. After calling it: share the Live View URL with the user, then poll browser:get_handoff_state until its "status" is "completed" before doing anything else with the session. Only one handoff can be active per session, and a session allows a limited number of handoffs in total, so do not re-request one while polling.\n\nIf a client tool named "wait_for_human_handoff" is present in your tool list, call it immediately after this tool with { liveViewUrl, handoffId, instructions } from this result; it renders the live page inline for the person. Skip it if no such tool is listed.',
+    category: BuiltInToolCategory.BROWSER,
+    toolGroup: BuiltInToolGroup.BROWSER_USE,
+    providers: [BuiltInToolProvider.MULTI],
+    parametersSchema: {
+      type: "object",
+      properties: {
+        sessionId: {
+          type: "string",
+          description: "The session ID returned by browser:open"
+        },
+        instructions: {
+          type: "string",
+          description: "What the human should do, in specific and actionable terms. Shown to them alongside the live page.",
+          minLength: 1,
+          maxLength: 4e3
+        },
+        timeoutMs: {
+          type: "number",
+          description: "How long to wait for the human, in milliseconds (min 30000, max 1800000). Defaults to 600000 (10 minutes). When it elapses the handoff completes with success=false.",
+          minimum: 3e4,
+          maximum: 18e5,
+          default: 6e5
+        }
+      },
+      required: ["sessionId", "instructions"]
+    },
+    documentationUrl: BROWSER_SESSION_DOCUMENTATION_URL,
+    requiresApiKey: false,
+    executionHint: "platform",
+    platformKeySupport: true
+  },
+  {
+    id: "browser:get_handoff_state",
+    aliases: ["browser-get-handoff-state", "browser:handoff-state"],
+    name: "Browser Handoff State",
+    description: 'Check whether a browser session is still waiting on a human or the handoff has finished. Returns "status": "active" while the person is working, "completed" once they clicked Done or Failed (or the handoff timed out), and "none" if no handoff was ever requested. A completed result also carries the "success" verdict and any reason they gave. Poll this after browser:request_handoff rather than blocking; it returns fast. Keep polling while status is "active"; once it is "completed", resume the task. If "success" is false or absent, take a screenshot with browser:session-screenshot to confirm the real page state before you continue. A result with "reconciled": false means the browser could not be consulted and the status is a best guess, so poll again before acting on it.',
+    category: BuiltInToolCategory.BROWSER,
+    toolGroup: BuiltInToolGroup.BROWSER_USE,
+    providers: [BuiltInToolProvider.MULTI],
+    parametersSchema: {
+      type: "object",
+      properties: {
+        sessionId: {
+          type: "string",
+          description: "The session ID returned by browser:open"
+        }
+      },
+      required: ["sessionId"]
+    },
+    documentationUrl: BROWSER_SESSION_DOCUMENTATION_URL,
+    requiresApiKey: false,
+    executionHint: "platform",
+    platformKeySupport: true
+  },
   {
     id: "browser:agent",
     aliases: ["browser-agent", "browser:task", "browser-task"],
@@ -41541,10 +41742,7 @@ function extractSecretReferencesFromAnyValue(value, maxDepth = 10) {
 }
 var ACCOUNT_QUERY_PARAM = "account";
 function buildDashboardUrl(opts) {
-  let base = opts.baseUrl;
-  while (base.endsWith("/")) {
-    base = base.slice(0, -1);
-  }
+  const base = stripTrailingChars(opts.baseUrl, "/");
   const path20 = opts.path.startsWith("/") ? opts.path : `/${opts.path}`;
   const params = new URLSearchParams();
   if (isValidAccountId(opts.account)) {
@@ -44372,6 +44570,7 @@ ${orthogonalLines.join("\n")}
 - **Rendered web pages, screenshots, structured extraction, or link harvesting** \u2192 \`builtin:browser:markdown\`, \`builtin:browser:snapshot\`, \`builtin:browser:json\`, \`builtin:browser:scrape\`, \`builtin:browser:links\` (stateless, one-shot \u2014 cheap, no session overhead)
 - **Autonomous browsing (just want the outcome \u2014 extract data, complete a form, find info on a page)** \u2192 \`builtin:browser:agent\` with a natural-language \`goal\` plus \`startUrl\` (fresh browser) or \`sessionId\` (continue an existing session). Stagehand handles observe/act/extract; you get back text or, with an \`outputSchema\`, structured JSON. Try this BEFORE reaching for the manual session tools below.
 - **Interactive browsing (precise control over individual actions)** \u2192 \`builtin:browser:open\` to start a session, then \`builtin:browser:click\`, \`builtin:browser:type\`, \`builtin:browser:scroll\`, \`builtin:browser:session-screenshot\`, \`builtin:browser:evaluate\`, \`builtin:browser:navigate\`, and \`builtin:browser:close\` when done. Session tools maintain cookies and page state across calls but cost more than stateless tools \u2014 prefer stateless tools when a single page read suffices.
+- **A browser session hits a login, MFA, CAPTCHA, or payment wall** \u2192 \`builtin:browser:request_handoff\` hands the live page to a human via a shareable Live View URL and returns immediately; poll \`builtin:browser:get_handoff_state\` until they finish. \`builtin:browser:get_live_view\` alone just mints a watch/drive URL without parking the agent. Add these to any agent that browses sites requiring authentication.
 - **Multi-page rendered crawling** \u2192 use the flow \`crawl\` step instead of repeated \`browser:*\` tool calls
 - **Find people / company enrichment** \u2192 \`platform:orthogonal:apollo:people_match\`, \`platform:orthogonal:apollo:organization_enrich\`
 - **Send Slack message** \u2192 \`builtin:slack:send_message\`
@@ -44438,6 +44637,7 @@ Tools are added to prompt steps via \`tools: { toolIds: ["<id>"] }\`. The AI mod
 - **Rendered web pages, screenshots, structured extraction, or link harvesting** \u2192 \`builtin:browser:markdown\`, \`builtin:browser:snapshot\`, \`builtin:browser:json\`, \`builtin:browser:scrape\`, \`builtin:browser:links\` (stateless, one-shot)
 - **Autonomous browsing (just want the outcome)** \u2192 \`builtin:browser:agent\` with a natural-language \`goal\` plus \`startUrl\` or \`sessionId\` \u2014 try this BEFORE the manual session tools
 - **Interactive browsing (precise control)** \u2192 \`builtin:browser:open\`, then \`builtin:browser:click\` / \`type\` / \`scroll\` / \`session-screenshot\` / \`evaluate\` / \`navigate\`, and \`builtin:browser:close\` when done
+- **Login / MFA / CAPTCHA wall in a browser session** \u2192 \`builtin:browser:request_handoff\` (hands the live page to a human, returns immediately) + \`builtin:browser:get_handoff_state\` to poll for completion
 - **Multi-page rendered crawling** \u2192 use the flow \`crawl\` step instead of repeated \`browser:*\` calls
 - **Find people / company enrichment** \u2192 \`platform:orthogonal:apollo:people_match\`, \`platform:orthogonal:apollo:organization_enrich\`
 - **Send Slack message** \u2192 \`builtin:slack:send_message\`
@@ -68362,8 +68562,8 @@ import { execFileSync } from "child_process";
 // src/lib/persona-init.ts
 init_credential_store();
 
-// ../../node_modules/.pnpm/@runtypelabs+persona@4.12.0/node_modules/@runtypelabs/persona/dist/codegen.js
-var w = "4.12.0";
+// ../../node_modules/.pnpm/@runtypelabs+persona@4.13.0/node_modules/@runtypelabs/persona/dist/codegen.js
+var w = "4.13.0";
 var S = w;
 function b(e) {
   return e?.cdnBase?.trim().replace(/\/+$/, "").replace(/[\\'"<>`]/g, (r) => `%${r.charCodeAt(0).toString(16).toUpperCase().padStart(2, "0")}`) || `https://cdn.jsdelivr.net/npm/@runtypelabs/persona@${S}/dist`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runtypelabs/cli",
-  "version": "2.32.0",
+  "version": "2.32.2",
   "description": "Command-line interface for Runtype AI platform",
   "type": "module",
   "main": "dist/index.js",
@@ -27,12 +27,12 @@
     "rosie-skills": "0.8.1",
     "yaml": "^2.9.0",
     "@runtypelabs/ink-components": "0.3.5",
-    "@runtypelabs/sdk": "6.3.4",
+    "@runtypelabs/sdk": "6.3.6",
     "@runtypelabs/terminal-animations": "0.2.2"
   },
   "devDependencies": {
     "@modelcontextprotocol/server": "2.0.0",
-    "@runtypelabs/persona": "4.12.0",
+    "@runtypelabs/persona": "4.13.0",
     "@types/express": "^5.0.6",
     "@types/micromatch": "^4.0.9",
     "@types/node": "^25.3.3",
@@ -43,7 +43,7 @@
     "tsx": "^4.7.1",
     "typescript": "^6.0.3",
     "vitest": "^4.1.0",
-    "@runtypelabs/shared": "3.9.0"
+    "@runtypelabs/shared": "3.9.2"
   },
   "engines": {
     "node": ">=22.12.0"