@runtypelabs/cli 2.33.10 → 2.33.12

package/dist/index.js

@@ -15130,7 +15130,7 @@ function date4(params) {
 // ../../node_modules/.pnpm/zod@4.4.3/node_modules/zod/v4/classic/external.js
 config(en_default());
 
-// ../shared/dist/chunk-2I6N7MAS.mjs
+// ../shared/dist/chunk-4A6WJ3NY.mjs
 var AGENT_EXECUTION_STATUSES = [
   "queued",
   "running",
@@ -15148,7 +15148,20 @@ var RUNTYPE_LEGACY_ATTRIBUTE_ALIASES = {
   [RUNTYPE_TURN_INDEX]: ["runtype.agent.turnIndex"]
 };
 
-// ../shared/dist/chunk-ZVLLZDS7.mjs
+// ../shared/dist/chunk-UVKHP6H3.mjs
+var CANONICAL_LOG_COLUMN_SET = {
+  // @snake-case-ok-start: R2 SQL / Iceberg column naming convention
+  event_id: true,
+  retention_class: true,
+  retention_key: true,
+  canonicalized_at: true,
+  source_ingest_id: true,
+  source_ingest_ts: true
+  // @snake-case-ok-end
+};
+var CANONICAL_LOG_COLUMNS = Object.keys(CANONICAL_LOG_COLUMN_SET);
+
+// ../shared/dist/chunk-BB6EPGHC.mjs
 var DEFAULT_BEDROCK_REGION = "us-east-1";
 var DEFAULT_VERTEX_LOCATION = "us-central1";
 var PROVIDER_SECRET_SPECS = [
@@ -16534,6 +16547,29 @@ var MANUAL_PROVIDER_MAP_OVERRIDES = {
     "mixlayer": "z-ai/glm-5.2",
     "vercel": "zai/glm-5.2"
   },
+  // DeepSeek V4 Pro: Cloudflare only publishes the date-pinned build, so every
+  // id form's Workers AI id carries the `-0813` suffix.
+  //
+  // The two bare families merge over a generated map that already supplies their
+  // `vercel` id, so only the Workers AI id needs declaring. The two SLASH forms
+  // have no generated entry at all, so their `vercel` id must be declared
+  // explicitly: `getDefaultProviderMapping` would otherwise synthesize
+  // `deepseek/deepseek/deepseek-v4-pro` (it prepends the inferred creator to the
+  // whole id), sending the fallback rung to a listing that does not exist.
+  "deepseek-v4-pro": {
+    "workers-ai": "@cf/deepseek-ai/deepseek-v4-pro-0813"
+  },
+  "deepseek-v4-pro-0813": {
+    "workers-ai": "@cf/deepseek-ai/deepseek-v4-pro-0813"
+  },
+  "deepseek/deepseek-v4-pro": {
+    "workers-ai": "@cf/deepseek-ai/deepseek-v4-pro-0813",
+    "vercel": "deepseek/deepseek-v4-pro"
+  },
+  "deepseek/deepseek-v4-pro-0813": {
+    "workers-ai": "@cf/deepseek-ai/deepseek-v4-pro-0813",
+    "vercel": "deepseek/deepseek-v4-pro-0813"
+  },
   // MiniMax M2.7: Vercel's gateway-form id.
   "minimax-m2.7": {
     "vercel": "minimax/minimax-m2.7"
@@ -35366,7 +35402,7 @@ function resolveFallback(parsed, context, tracking, options = {}) {
 }
 var templateEngine = new SimpleTemplateEngine();
 
-// ../shared/dist/chunk-XKOLWBNC.mjs
+// ../shared/dist/chunk-K74FEBL5.mjs
 var jsonPatchOperationSchema = external_exports.object({
   op: external_exports.enum(["add", "remove", "replace", "move", "copy", "test"]),
   /** JSON Pointer (RFC 6901) into the state document. `''` addresses the root. */
@@ -35627,7 +35663,9 @@ var unifiedMediaCompleteEventSchema = external_exports.object({
 });
 var unifiedArtifactStartEventSchema = external_exports.object({
   type: external_exports.literal("artifact_start"),
-  id: external_exports.string(),
+  // Non-empty by contract: an id-less artifact frame cannot be correlated
+  // or closed by a consumer (parity finding H24).
+  id: external_exports.string().min(1),
   artifactType: external_exports.enum(["markdown", "component"]),
   title: external_exports.string().optional(),
   component: external_exports.string().optional(),
@@ -35643,14 +35681,18 @@ var unifiedArtifactStartEventSchema = external_exports.object({
 });
 var unifiedArtifactDeltaEventSchema = external_exports.object({
   type: external_exports.literal("artifact_delta"),
-  id: external_exports.string(),
+  // Non-empty by contract: an id-less artifact frame cannot be correlated
+  // or closed by a consumer (parity finding H24).
+  id: external_exports.string().min(1),
   delta: external_exports.string(),
   executionId: external_exports.string().optional(),
   seq: external_exports.number().optional()
 });
 var unifiedArtifactUpdateEventSchema = external_exports.object({
   type: external_exports.literal("artifact_update"),
-  id: external_exports.string(),
+  // Non-empty by contract: an id-less artifact frame cannot be correlated
+  // or closed by a consumer (parity finding H24).
+  id: external_exports.string().min(1),
   component: external_exports.string(),
   props: external_exports.record(external_exports.string(), external_exports.unknown()),
   executionId: external_exports.string().optional(),
@@ -35658,7 +35700,9 @@ var unifiedArtifactUpdateEventSchema = external_exports.object({
 });
 var unifiedArtifactCompleteEventSchema = external_exports.object({
   type: external_exports.literal("artifact_complete"),
-  id: external_exports.string(),
+  // Non-empty by contract: an id-less artifact frame cannot be correlated
+  // or closed by a consumer (parity finding H24).
+  id: external_exports.string().min(1),
   executionId: external_exports.string().optional(),
   seq: external_exports.number().optional()
 });
@@ -35942,7 +35986,7 @@ var UNIFIED_SSE_EVENT_TYPES = _unifiedTuple([
   "custom"
 ]);
 
-// ../shared/dist/chunk-H7KYB7QQ.mjs
+// ../shared/dist/chunk-P77RRB4I.mjs
 var mediaAnnotationsSchema = external_exports.object({
   audience: external_exports.array(external_exports.enum(["user", "assistant"])).optional()
 });
@@ -41703,11 +41747,37 @@ function collectFlowStructureIssues(flowData, deps, buckets) {
     );
   }
   const idToStepIndexes = /* @__PURE__ */ new Map();
+  const collectStepId = (id, topLevelIndex) => {
+    if (typeof id !== "string" || id.length === 0) return;
+    const existing = idToStepIndexes.get(id) || [];
+    existing.push(topLevelIndex);
+    idToStepIndexes.set(id, existing);
+  };
+  const walkNestedStepIds = (node, topLevelIndex, depth) => {
+    if (!isObjectRecord(node)) return;
+    if (node.type !== "conditional" || !isObjectRecord(node.config)) return;
+    if (depth >= MAX_CONDITIONAL_NESTING_DEPTH) return;
+    const config3 = node.config;
+    const visit = (nested) => {
+      if (!isObjectRecord(nested)) return;
+      collectStepId(nested.id, topLevelIndex);
+      walkNestedStepIds(nested, topLevelIndex, depth + 1);
+    };
+    if (Array.isArray(config3.branches)) {
+      for (const branch of config3.branches) {
+        if (!isObjectRecord(branch) || !Array.isArray(branch.steps)) continue;
+        for (const nested of branch.steps) visit(nested);
+      }
+    }
+    for (const key of CONDITIONAL_BRANCH_STEP_KEYS) {
+      const arr = config3[key];
+      if (!Array.isArray(arr)) continue;
+      for (const nested of arr) visit(nested);
+    }
+  };
   for (const [index, step] of flowData.flowSteps.entries()) {
-    if (typeof step.id !== "string" || step.id.length === 0) continue;
-    const existing = idToStepIndexes.get(step.id) || [];
-    existing.push(index);
-    idToStepIndexes.set(step.id, existing);
+    collectStepId(step.id, index);
+    walkNestedStepIds(step, index, 0);
   }
   for (const [id, indexes] of idToStepIndexes.entries()) {
     if (indexes.length <= 1) continue;
@@ -42196,11 +42266,42 @@ var API_INPROCESS_CAPABILITY_MATRIX = {
   // `vendored-export` (it rides the same host `CodeModeExecutor` seam as
   // `transformDataCodeModeTools`) — see {@link VENDORED_EXPORT_REFOLDS}.
   // Rollback lever: revert the bit to `true` (plus its test).
-  version: "2026-08-11.1",
+  // Bumped 2026-08-14.1: graduates `approvalSteps` (the `fold-approval-steps`
+  // item). The runtime flow lane now ARMS a prompt step's own
+  // `config.tools.approval` (`stepAuthoredApprovalPolicy` +
+  // `resolveSeamApprovalConfig` in `packages/runtime/src/engine/flow-engine.ts`)
+  // and PAUSES on it (`flow-stream.ts` -> `approval_start` + an
+  // `approval-paused` outcome -> `saveRuntimeApprovalPauseState` ->
+  // `runRuntimeFlowContinuation`). The `hasApprovalSteps` FACT is still computed
+  // for decision attribution AND for the SURFACE gate that replaced this bit: a
+  // host that cannot answer an approval prompt does not declare
+  // `approvalPauseHosting` and folds with `ineligible:surface-approval-pause`
+  // (`playground-flow-dispatch.ts`). Rollback lever: revert this bit to `true`
+  // (plus its tests) — the surface gate is independent and can stay.
+  // Bumped 2026-08-16.1: graduates `batchInputMode` (the `fold-batch-input-mode`
+  // item, D-095). The fold rested on a mis-stated premise: its comment described
+  // batch EXECUTION (#6091 — the record-batch surface, which has no cross-record
+  // conversational context and routes through its own eligibility probe), but the
+  // FACT fires on STEP-level `config.inputMode === 'batch'`, a field that exists
+  // on exactly three step schemas (`generate-embedding`, `store-vector`,
+  // `upsert-record`) and never on a prompt step. All three runtime executors
+  // already implement the batch branch
+  // (`packages/runtime/src/engine/context-steps/{generate-embedding,store-vector,
+  // upsert-record}.ts`), and `apps/api/src/lib/flow-execution/` has ZERO
+  // `inputMode` references — so the bit folded a capability the runtime lane
+  // already had. The `hasBatchInputMode` FACT stays computed for decision
+  // attribution. Rollback lever: revert this bit to `true` (plus its tests).
+  version: "2026-08-16.1",
   unsupportedStepTypes: ["wait-until", "crawl"],
   unsupportedFeatures: {
-    approvalSteps: true,
-    batchInputMode: true,
+    approvalSteps: false,
+    // SUPPORTED as of 2026-08-16.1 (D-095): step-level `inputMode: 'batch'` on
+    // `generate-embedding` / `store-vector` / `upsert-record` runs on the
+    // runtime flow lane through each executor's own batch branch — the same
+    // per-item fan-out, chunking, and summary shape the api executors produce.
+    // `hasBatchInputMode` stays computed for decision attribution.
+    // Rollback lever: revert this bit to `true` (plus its tests).
+    batchInputMode: false,
     claudeManagedAgent: true,
     inexpressibleVectorStep: true,
     unresolvableAgentRef: true,
@@ -42376,7 +42477,18 @@ var VENDORED_EXPORT_CAPABILITY_MATRIX = {
   // Bumped 2026-08-08.1: `transformDataMcpServers` graduated on the base and
   // becomes the fourth documented re-fold here — the discovered tools still
   // need the host `CodeModeExecutor` to be bound as sandbox callables.
-  version: "2026-08-11.1",
+  // Bumped 2026-08-14.1: `approvalSteps` graduated on the base and becomes a
+  // documented re-fold here — the ENGINE half is portable, the api-owned
+  // approval-resume PLANE is not.
+  // Bumped 2026-08-16.1: `batchInputMode` graduated on the base and is INHERITED
+  // here rather than re-folded — the batch branches are pure engine (per-item
+  // fan-out over the SAME `RecordStore` / `VectorStore` / `EmbeddingProvider`
+  // seams single mode already uses; no host executor is involved), so a
+  // container that runs the step at all runs its batch branch. The bit is also
+  // inert on this matrix by construction: `inputMode` exists on exactly
+  // `generate-embedding` / `store-vector` / `upsert-record`, and all three are
+  // already in `unsupportedStepTypes` below, so the step-type fold fires first.
+  version: "2026-08-16.1",
   unsupportedStepTypes: [
     // ── Carried over from api-inprocess: durable-host-only step types. A
     // self-contained container has no durable host (BYOC §3.3 / S0 — the
@@ -42408,6 +42520,23 @@ var VENDORED_EXPORT_CAPABILITY_MATRIX = {
     // customer-wired VectorStore / EmbeddingProvider can host these; the
     // container ships neither. Graduation lever: bundle a pgvector
     // VectorStore + a provider-backed EmbeddingProvider in the export.
+    //
+    // TRIPWIRE for whoever pulls that lever (D-095 item 3, 2026-08-16): the
+    // `inexpressibleVectorStepIds` FACT is target-SHARED, and it narrowed to
+    // admit record-coupled `vector-search` onto the api lane. That narrowing is
+    // inert HERE only because the step type is folded on this line — remove the
+    // line and a record/pgvector search becomes eligible for a container that
+    // has no `records` table. A bundled generic pgvector index is NOT that
+    // fulfilment. Graduating `vector-search` therefore also owes either a
+    // vendored re-fold bit (the {@link VENDORED_EXPORT_REFOLDS} pattern) or a
+    // container-side `records` fulfilment.
+    //
+    // This tripwire is EXECUTABLE, not just prose: the "folds a record-coupled
+    // vector-search even though api-inprocess now admits it" case in
+    // `runtime-eligibility.test.ts` fails if this entry is removed. The
+    // full-surface test below cannot catch it — it iterates
+    // `unsupportedStepTypes` itself, so a deleted entry simply stops being
+    // asserted.
     "generate-embedding",
     "vector-search",
     "store-vector",
@@ -42442,14 +42571,37 @@ var VENDORED_EXPORT_CAPABILITY_MATRIX = {
   // which are strictly stricter.
   unsupportedFeatures: {
     ...API_INPROCESS_CAPABILITY_MATRIX.unsupportedFeatures,
+    // VENDORED RE-FOLD (2026-08-14.1, no longer carried over): api-inprocess
+    // graduated `approvalSteps` because the API host owns the approval-resume
+    // plane (`ApprovalResumeStore` + KV `ResumeState` + the `/approve`
+    // continuation leg). A self-contained container wires none of it and the
+    // runtime's default `ApprovalResumeStore` is the fail-closed NoOp, so an
+    // armed gate pauses into a prompt nobody can answer. See
+    // {@link VENDORED_EXPORT_REFOLDS} for the graduation lever.
     approvalSteps: true,
-    // api-inprocess fold; the runtime flow engine derives no approval config. Graduation: port the approval rail.
-    batchInputMode: true,
-    // api-inprocess fold; batch has no conversational context (BYOC §3.2).
+    // `batchInputMode` INHERITS the base SUPPORTED (`false`) as of 2026-08-16.1
+    // (D-095) and is deliberately NOT restated as a literal — the 2026-08-06.3
+    // re-decision pass exists because a restated literal went stale when its
+    // base graduated. Two independent reasons it is not a re-fold: (1) the batch
+    // branches are ENGINE-owned — a per-item loop over the same `RecordStore` /
+    // `VectorStore` / `EmbeddingProvider` seams single mode uses, with no host
+    // executor seam of the `CodeModeExecutor` / `ManagedFetchExecutor` /
+    // `TransformSandboxRouter` kind {@link VENDORED_EXPORT_REFOLDS} exists for;
+    // (2) it cannot change a decision here anyway, since `inputMode` exists only
+    // on `generate-embedding` / `store-vector` / `upsert-record` and all three
+    // are folded by `unsupportedStepTypes` above.
     claudeManagedAgent: true,
     // api-inprocess fold; exported execute-agent rejects claude_managed/external (BYOC §3.6, D-030/D-031).
+    // api-inprocess fold; no vector seam in a self-contained container. The BIT
+    // is unchanged by D-095 item 3, but the FACT feeding it narrowed on
+    // 2026-08-16 to admit record-coupled `vector-search`. Re-fold check
+    // performed and recorded rather than assumed: no re-fold entry is added,
+    // because `vector-search` / `store-vector` are already in
+    // `unsupportedStepTypes` above, so the step-type fold fires first and the
+    // narrowing cannot change a decision on this target. Same reasoning
+    // `batchInputMode` carries. The tripwire guarding that argument sits on the
+    // step-type entries themselves.
     inexpressibleVectorStep: true,
-    // api-inprocess fold; no vector seam in a self-contained container.
     unresolvableAgentRef: true,
     // api-inprocess fold; execute-agent resolves only against the embedded registry (ADR 0014).
     // Nested-prompt dispatch is ENGINE-owned and works identically in a
@@ -43047,11 +43199,6 @@ var userProfileFeaturesSchema = external_exports.object({
   // this staging-only experiment in production. The command hands off to the
   // standalone Runtown app rather than mounting it inside the dashboard.
   enableRuntown: external_exports.boolean(),
-  // Gates the dashboard skill "Security scan" affordance (the
-  // `POST /v1/skills/scan` verdict UI). Driven by the `enable-skill-scanner`
-  // boolean flag (fail-closed until a rule enables it). The scan ROUTE stays
-  // reachable; this only hides the UI while the scanner rollout completes.
-  enableSkillScanner: external_exports.boolean(),
   // Gates the Massive Web Render surfaces in the dashboard (Settings
   // integration card + the fetch-url step's Massive mode option). Driven by
   // the `enable-massive-web-render` boolean flag (fail-closed in production
@@ -46888,17 +47035,6 @@ var appRoutingDocSchema = external_exports.object({
   }).optional(),
   updatedAt: external_exports.string()
 });
-var SKILL_SCAN_HARD_BLOCK_CATEGORIES = [
-  "credential_exfiltration",
-  "prompt_injection",
-  "mcp_tool_poisoning",
-  "data_exfiltration",
-  "privilege_escalation"
-];
-function normalizeCategoryToken(value) {
-  return value.toLowerCase().replace(/[^a-z0-9]/g, "");
-}
-var HARD_BLOCK_NEEDLES = SKILL_SCAN_HARD_BLOCK_CATEGORIES.map(normalizeCategoryToken);
 var DEFAULT_STEP_TIMEOUT_MS = 5 * 60 * 1e3;
 var DEFAULT_FLOW_TIMEOUT_MS = 15 * 60 * 1e3;
 
@@ -69169,8 +69305,8 @@ import { execFileSync } from "child_process";
 // src/lib/persona-init.ts
 init_credential_store();
 
-// ../../node_modules/.pnpm/@runtypelabs+persona@4.17.0/node_modules/@runtypelabs/persona/dist/codegen.js
-var S = "4.17.0";
+// ../../node_modules/.pnpm/@runtypelabs+persona@4.17.1/node_modules/@runtypelabs/persona/dist/codegen.js
+var S = "4.17.1";
 var x = S;
 function $(e) {
   return e?.cdnBase?.trim().replace(/\/+$/, "").replace(/[\\'"<>`]/g, (r) => `%${r.charCodeAt(0).toString(16).toUpperCase().padStart(2, "0")}`) || `https://cdn.jsdelivr.net/npm/@runtypelabs/persona@${x}/dist`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runtypelabs/cli",
-  "version": "2.33.10",
+  "version": "2.33.12",
   "description": "Command-line interface for Runtype AI platform",
   "type": "module",
   "main": "dist/index.js",
@@ -27,12 +27,12 @@
     "rosie-skills": "0.8.1",
     "yaml": "^2.9.0",
     "@runtypelabs/ink-components": "0.3.6",
-    "@runtypelabs/sdk": "7.3.1",
-    "@runtypelabs/terminal-animations": "0.2.3"
+    "@runtypelabs/terminal-animations": "0.2.3",
+    "@runtypelabs/sdk": "8.0.0"
   },
   "devDependencies": {
     "@modelcontextprotocol/server": "2.0.0",
-    "@runtypelabs/persona": "4.17.0",
+    "@runtypelabs/persona": "4.17.1",
     "@types/express": "^5.0.6",
     "@types/micromatch": "^4.0.9",
     "@types/node": "^25.3.3",
@@ -43,7 +43,7 @@
     "tsx": "^4.7.1",
     "typescript": "^6.0.3",
     "vitest": "^4.1.0",
-    "@runtypelabs/shared": "3.24.0"
+    "@runtypelabs/shared": "3.26.0"
   },
   "engines": {
     "node": ">=22.12.0"