@runtypelabs/cli 2.36.4 → 2.37.0

package/dist/index.js

@@ -610,7 +610,7 @@ var OAuthManager = class {
 // src/auth/api-key-manager.ts
 import { RuntypeApiError } from "@runtypelabs/sdk";
 
-// ../shared/dist/chunk-NQDOLEMM.mjs
+// ../shared/dist/chunk-WSSJEVIH.mjs
 var MODEL_FAMILY_PROVIDER_IDS = {
   "claude-fable-5": {
     "anthropic": "claude-fable-5",
@@ -903,11 +903,18 @@ var MODEL_FAMILY_PROVIDER_IDS = {
     "vercel": "zai/glm-5.2-fast"
   },
   "glm-5-3": {
+    "mixlayer": "z-ai/glm-5.3",
     "vercel": "zai/glm-5.3"
   },
+  "glm-5-3-fast": {
+    "vercel": "zai/glm-5.3-fast"
+  },
   "glm-5-3-flash": {
     "vercel": "zai/glm-5.3-flash"
   },
+  "glm-5-3-promo-50": {
+    "vercel": "zai/glm-5.3-promo-50"
+  },
   "glm-5.2": {
     "mixlayer": "z-ai/glm-5.2",
     "vercel": "zai/glm-5.2"
@@ -916,11 +923,18 @@ var MODEL_FAMILY_PROVIDER_IDS = {
     "vercel": "zai/glm-5.2-fast"
   },
   "glm-5.3": {
+    "mixlayer": "z-ai/glm-5.3",
     "vercel": "zai/glm-5.3"
   },
+  "glm-5.3-fast": {
+    "vercel": "zai/glm-5.3-fast"
+  },
   "glm-5.3-flash": {
     "vercel": "zai/glm-5.3-flash"
   },
+  "glm-5.3-promo-50": {
+    "vercel": "zai/glm-5.3-promo-50"
+  },
   "gpt-4-1": {
     "openai": "gpt-4.1",
     "vercel": "openai/gpt-4.1"
@@ -1194,6 +1208,13 @@ var MODEL_FAMILY_PROVIDER_IDS = {
   "gpt-5.6-terra-fast": {
     "vercel": "openai/gpt-5.6-terra-fast"
   },
+  "gpt-6-astra": {
+    "openai": "gpt-6-astra",
+    "vercel": "openai/gpt-6-astra"
+  },
+  "gpt-6-astra-fast": {
+    "vercel": "openai/gpt-6-astra-fast"
+  },
   "gpt-image-1-5": {
     "openai": "gpt-image-1.5"
   },
@@ -1379,9 +1400,21 @@ var MODEL_FAMILY_PROVIDER_IDS = {
   "ling-3-0-flash": {
     "vercel": "inclusionai/ling-3.0-flash"
   },
+  "ling-3-0-flash-sante": {
+    "vercel": "inclusionai/ling-3.0-flash-sante"
+  },
+  "ling-3-0-flash-sante-free": {
+    "vercel": "inclusionai/ling-3.0-flash-sante-free"
+  },
   "ling-3.0-flash": {
     "vercel": "inclusionai/ling-3.0-flash"
   },
+  "ling-3.0-flash-sante": {
+    "vercel": "inclusionai/ling-3.0-flash-sante"
+  },
+  "ling-3.0-flash-sante-free": {
+    "vercel": "inclusionai/ling-3.0-flash-sante-free"
+  },
   "llama-3.1-70b": {
     "vercel": "meta/llama-3.1-70b"
   },
@@ -1499,6 +1532,12 @@ var MODEL_FAMILY_PROVIDER_IDS = {
   "muse-spark-1-2-contributor": {
     "vercel": "meta/muse-spark-1.2-contributor"
   },
+  "muse-spark-1-3": {
+    "vercel": "meta/muse-spark-1.3"
+  },
+  "muse-spark-1-3-contributor": {
+    "vercel": "meta/muse-spark-1.3-contributor"
+  },
   "muse-spark-1.1": {
     "vercel": "meta/muse-spark-1.1"
   },
@@ -1508,6 +1547,12 @@ var MODEL_FAMILY_PROVIDER_IDS = {
   "muse-spark-1.2-contributor": {
     "vercel": "meta/muse-spark-1.2-contributor"
   },
+  "muse-spark-1.3": {
+    "vercel": "meta/muse-spark-1.3"
+  },
+  "muse-spark-1.3-contributor": {
+    "vercel": "meta/muse-spark-1.3-contributor"
+  },
   "namazu": {
     "vercel": "sakana/namazu"
   },
@@ -5638,18 +5683,18 @@ var $ZodArray = /* @__PURE__ */ $constructor("$ZodArray", (inst, def) => {
   };
 });
 function handlePropertyResult(result, final, key, input2, optin, optout) {
-  const isPresent = key in input2;
+  const isPresent2 = key in input2;
   const isOptionalOut = optout === "optional";
-  if (!isPresent && isOptionalOut && optin === "optional") {
+  if (!isPresent2 && isOptionalOut && optin === "optional") {
     return;
   }
   if (result.issues.length) {
-    if (optin !== void 0 && isOptionalOut && !isPresent) {
+    if (optin !== void 0 && isOptionalOut && !isPresent2) {
       return;
     }
     final.issues.push(...prefixIssues(key, result.issues));
   }
-  if (!isPresent && optin === void 0) {
+  if (!isPresent2 && optin === void 0) {
     if (!result.issues.length) {
       final.issues.push({
         code: "invalid_type",
@@ -5661,7 +5706,7 @@ function handlePropertyResult(result, final, key, input2, optin, optout) {
     return;
   }
   if (result.value === void 0) {
-    if (isPresent) {
+    if (isPresent2) {
       final.value[key] = void 0;
     }
   } else {
@@ -5835,7 +5880,7 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
         continue;
       const id = ids[key];
       const k2 = typeof key === "symbol" ? `syms[${syms.indexOf(key)}]` : esc(key);
-      const isPresent = `${k2} in input`;
+      const isPresent2 = `${k2} in input`;
       const schema = shape[key];
       const optin = schema?._zod?.optin;
       const isOptionalIn = optin !== void 0;
@@ -5844,7 +5889,7 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
       if (isOptionalIn && isOptionalOut) {
         const assign = optin === "optional" ? `${id}_present` : `${id}.value !== undefined || ${id}_present`;
         doc.write(`
-        const ${id}_present = ${isPresent};
+        const ${id}_present = ${isPresent2};
         if (!${id}.issues.length || ${id}_present) {
           if (${id}.issues.length) {${prefixStr(id, k2)}
           }
@@ -5857,7 +5902,7 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
       `);
       } else if (!isOptionalIn) {
         doc.write(`
-        const ${id}_present = ${isPresent};
+        const ${id}_present = ${isPresent2};
         if (${id}.issues.length) {${prefixStr(id, k2)}
         }
         if (!${id}_present && !${id}.issues.length) {
@@ -5880,7 +5925,7 @@ var $ZodObjectJIT = /* @__PURE__ */ $constructor("$ZodObjectJIT", (inst, def) =>
         }
         
         if (${id}.value === undefined) {
-          if (${isPresent}) {
+          if (${isPresent2}) {
             newResult[${k2}] = undefined;
           }
         } else {
@@ -6340,13 +6385,13 @@ function handleTupleResult(result, final, index) {
 function handleTupleResults(itemResults, final, items, input2, optoutStart) {
   for (let i = 0; i < items.length; i++) {
     const r = itemResults[i];
-    const isPresent = i < input2.length;
-    if (!isPresent && i >= optoutStart && items[i]._zod.optin === "optional") {
+    const isPresent2 = i < input2.length;
+    if (!isPresent2 && i >= optoutStart && items[i]._zod.optin === "optional") {
       final.value.length = i;
       break;
     }
     if (r.issues.length) {
-      if (!isPresent && i >= optoutStart) {
+      if (!isPresent2 && i >= optoutStart) {
         final.value.length = i;
         break;
       }
@@ -21471,7 +21516,7 @@ var BuiltInToolIdPrefix = {
   PLATFORM: "platform"
 };
 
-// ../shared/dist/chunk-3ZIQ5OHT.mjs
+// ../shared/dist/chunk-3XRATUCG.mjs
 function sanitizeToolNameForAiSdk(name) {
   return name.replace(/[^a-zA-Z0-9_]/g, "_").toLowerCase().replace(/_+/g, "_").replace(/^_|_$/g, "");
 }
@@ -21626,6 +21671,12 @@ function resolveModelOptionalSettings(model) {
   return [];
 }
 
+// ../shared/dist/chunk-HIIORCZ5.mjs
+var REPLAY_FROM_START = Object.freeze({
+  row: 0,
+  sub: Number.POSITIVE_INFINITY
+});
+
 // ../shared/dist/chunk-HD3SKN3O.mjs
 var edgeAuthSnapshotSchema = external_exports.object({
   /**
@@ -21701,17 +21752,10 @@ var resolvedEdgeAuthSnapshotSchema = edgeAuthSnapshotSchema.extend({
   resolvedAt: external_exports.number().int().positive()
 });
 
-// ../shared/dist/chunk-7VT27J7L.mjs
-var AGENT_EXECUTION_STATUSES = [
-  "queued",
-  "running",
-  "paused",
-  "completed",
-  "failed",
-  "cancelled",
-  "interrupted"
-];
-var agentExecutionStatusSchema = external_exports.enum(AGENT_EXECUTION_STATUSES);
+// ../shared/dist/chunk-4VLXOKEV.mjs
+var CONTAINER_SANDBOX_INSTANCE_TYPE = "standard-4";
+
+// ../shared/dist/chunk-PDK72EP7.mjs
 var RUNTYPE_ITERATION = "runtype.iteration";
 var RUNTYPE_TURN_INDEX = "runtype.turn.index";
 var RUNTYPE_LEGACY_ATTRIBUTE_ALIASES = {
@@ -21754,17 +21798,34 @@ var OPENINFERENCE_CONTENT_PREFIXES = [
 ];
 var AI_SDK_CONTENT_PREFIXES = ["ai.response.toolCalls"];
 var MASTRA_CONTENT_PREFIXES = ["mastra.metadata.body"];
+var CLOUDFLARE_AGENTS_CONTENT_PREFIXES = [
+  "cloudflare.agents.metadata.",
+  "cloudflare.agents.runtime_context."
+];
 var GEN_AI_CONTENT_ATTRIBUTE_PREFIXES = [
   ...OPENINFERENCE_CONTENT_PREFIXES,
   ...AI_SDK_CONTENT_PREFIXES,
-  ...MASTRA_CONTENT_PREFIXES
+  ...MASTRA_CONTENT_PREFIXES,
+  ...CLOUDFLARE_AGENTS_CONTENT_PREFIXES
 ];
 var GEN_AI_CONTENT_ATTRIBUTE_NAMES = /* @__PURE__ */ new Set([
   ...Object.values(GEN_AI_CONTENT_ATTRIBUTES),
   ...Object.values(GEN_AI_CONTENT_ATTRIBUTE_ALIASES).flat()
 ]);
 
-// ../shared/dist/chunk-RLFQFNGX.mjs
+// ../shared/dist/chunk-ZDRWUYBY.mjs
+var AGENT_EXECUTION_STATUSES = [
+  "queued",
+  "running",
+  "paused",
+  "completed",
+  "failed",
+  "cancelled",
+  "interrupted"
+];
+var agentExecutionStatusSchema = external_exports.enum(AGENT_EXECUTION_STATUSES);
+
+// ../shared/dist/chunk-6UABSJMP.mjs
 var CANONICAL_LOG_COLUMN_SET = {
   // @snake-case-ok-start: R2 SQL / Iceberg column naming convention
   event_id: true,
@@ -26794,10 +26855,6 @@ function speechProfilesSemanticallyEqual(legacy, canonical) {
   const resolved = resolveVoiceSpeechProfile({ speech: canonical });
   return JSON.stringify(legacy) === JSON.stringify(resolved);
 }
-var REPLAY_FROM_START = Object.freeze({
-  row: 0,
-  sub: Number.POSITIVE_INFINITY
-});
 var agUiEventBase = {
   // INVARIANT: Metadata is absent or an object; an explicit null fails the spec parse.
   metadata: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
@@ -27058,6 +27115,89 @@ function stripTrailingChars(value, char) {
   }
   return end === value.length ? value : value.slice(0, end);
 }
+var AGENT_ALIAS_MAX_LENGTH = 63;
+var AGENT_INLINE_DEFINITION_FIELDS = [
+  "claudeManagedConfig",
+  "model",
+  "systemPrompt",
+  "temperature",
+  "topP",
+  "topK",
+  "frequencyPenalty",
+  "presencePenalty",
+  "seed",
+  "maxTokens",
+  "tools",
+  "artifacts",
+  "loopConfig",
+  "advisor",
+  "reasoning",
+  "voice",
+  "errorHandling",
+  "loggingPolicy",
+  "piiRedaction",
+  "temporal",
+  "memory",
+  "sandbox",
+  "tenancyStrategy"
+];
+function isPresent(value) {
+  return value !== void 0 && value !== null;
+}
+function hasAgentSelector(agent) {
+  if (!agent) return false;
+  return isPresent(agent.alias) || isPresent(agent.versionId);
+}
+function agentSelectorViolation(agent) {
+  if (!agent) return null;
+  const hasAlias = isPresent(agent.alias);
+  const hasVersionId = isPresent(agent.versionId);
+  if (!hasAlias && !hasVersionId) return null;
+  if (hasAlias && hasVersionId) {
+    return {
+      code: "selector_conflict",
+      path: "agent.versionId",
+      message: "An agent selects at most one version: supply agent.alias or agent.versionId, not both."
+    };
+  }
+  if (!isPresent(agent.agentId) && !isPresent(agent.name)) {
+    return {
+      code: "selector_requires_identity",
+      path: "agent.agentId",
+      message: "A version selector needs an agent identity: supply agent.agentId or agent.name alongside it."
+    };
+  }
+  for (const field of AGENT_INLINE_DEFINITION_FIELDS) {
+    if (isPresent(agent[field])) {
+      return {
+        code: "inline_definition_with_selector",
+        path: `agent.${field}`,
+        message: `agent.${field} is an inline definition and cannot be combined with a version selector; the selected version supplies the definition.`
+      };
+    }
+  }
+  if (hasAlias) {
+    const alias = agent.alias;
+    if (typeof alias !== "string" || alias.length === 0 || alias.length > AGENT_ALIAS_MAX_LENGTH) {
+      return {
+        code: "selector_conflict",
+        path: "agent.alias",
+        message: `agent.alias must be a string of at most ${AGENT_ALIAS_MAX_LENGTH} characters.`
+      };
+    }
+  }
+  if (hasVersionId) {
+    const versionId = agent.versionId;
+    if (typeof versionId !== "string" || versionId.length === 0) {
+      return {
+        code: "selector_conflict",
+        path: "agent.versionId",
+        message: "agent.versionId must be a non-empty string."
+      };
+    }
+  }
+  return null;
+}
 var CLIENT_EXECUTED_TOOL_TYPES = /* @__PURE__ */ new Set(["local", "webmcp"]);
 function isClientExecutedToolType(toolType) {
   return typeof toolType === "string" && CLIENT_EXECUTED_TOOL_TYPES.has(toolType);
@@ -27722,12 +27862,12 @@ var sandboxNetworkAccessSchema = external_exports.union([
 ]);
 var sandboxConfigSchema = external_exports.object({
   enabled: external_exports.boolean(),
-  // WORKAROUND(docs/why/packages/shared/src.md#provider-is-inert-except-runtype-sandbox-daytona): provider is INERT except 'runtype-sandbox'; 'daytona' is kept parseable but rejected at runtime
-  provider: external_exports.enum(["runtype-sandbox", "daytona"]).optional(),
-  // WORKAROUND(docs/why/packages/shared/src.md#named-persistence-is-parseable-but-not-implement): 'named' persistence is parseable but not implemented; runtime silently degrades it to 'ephemeral'
-  persistence: external_exports.enum(["ephemeral", "conversation", "named"]).optional(),
-  // WORKAROUND(docs/why/packages/shared/src.md#instancetype-is-inert-on-the-agent-sandbox-path): instanceType is INERT on the agent sandbox path; it always provisions standard-4 regardless
-  instanceType: external_exports.enum(["standard-1", "standard-2", "standard-3", "standard-4"]).optional(),
+  // INVARIANT: Parsing preserves stored providers; capability validation rejects unsupported enabled values.
+  provider: external_exports.enum(["runtype-sandbox", "daytona"]).optional().describe("Only runtype-sandbox is currently supported. Daytona is retained for stored-config parsing but rejected at authoring/execution."),
+  // INVARIANT: Named persistence remains readable but fails capability validation when enabled.
+  persistence: external_exports.enum(["ephemeral", "conversation", "named"]).optional().describe("Supported: ephemeral or conversation. Named remains parseable for stored configs but cannot be enabled."),
+  // INVARIANT: The hosted provider only provisions standard-4; other enabled sizes fail capability validation.
+  instanceType: external_exports.enum(["standard-1", "standard-2", "standard-3", "standard-4"]).optional().describe("Only standard-4 is supported on the hosted Agent Sandbox path; other sizes cannot be enabled."),
   networkAccess: sandboxNetworkAccessSchema.optional(),
   ttl: external_exports.enum(["5m", "1h", "24h", "unlimited"]).optional(),
   sleepAfter: external_exports.enum(["5m", "15m", "30m", "1h"]).optional(),
@@ -27749,6 +27889,7 @@ var agentDurabilityConfigSchema = external_exports.object({
   maxBudgetMs: external_exports.number().int().min(1e3).max(864e5).nullable().optional(),
   forced: external_exports.enum(["durable", "in_process"]).optional()
 });
+var turnDurabilityOverrideSchema = agentDurabilityConfigSchema.pick({ forced: true, watchLeaseMs: true }).extend({ watchLeaseMs: external_exports.number().int().min(1e4).max(18e5).optional() }).strict();
 var DEFAULT_TURN_MAX_BUDGET_MS = 30 * 60 * 1e3;
 var agentRuntimeConfigSchema = external_exports.object({
   model: external_exports.string().optional(),
@@ -33362,6 +33503,147 @@ var endUserUsageResponseSchema = external_exports.object({
     executions: external_exports.number().int().nonnegative()
   }).merge(endUserUsageMoneySchema)
 });
+var PRODUCTION_HEALTH_MAX_DAYS = 90;
+var PRODUCTION_HEALTH_DEFAULT_DAYS = 7;
+var INSIGHT_SEVERITIES = ["critical", "warning", "info"];
+var metricDeltaSchema = external_exports.object({
+  value: external_exports.number().nullable(),
+  previous: external_exports.number().nullable()
+});
+var executionCountsSchema = external_exports.object({
+  /** Runs that started inside the current period. */
+  current: external_exports.number().int(),
+  /** Runs that started inside the preceding period of equal length. */
+  previous: external_exports.number().int(),
+  /** Current-period runs that finished successfully. */
+  successes: external_exports.number().int(),
+  /** Current-period runs that ended in an error or lost their stream. */
+  failures: external_exports.number().int(),
+  /** Current-period runs with no verdict: still running, paused mid-run, or cancelled. */
+  unsettled: external_exports.number().int()
+});
+var productionHealthQuerySchema = external_exports.object({
+  days: external_exports.coerce.number().int().min(1).max(PRODUCTION_HEALTH_MAX_DAYS).optional().default(PRODUCTION_HEALTH_DEFAULT_DAYS)
+});
+var healthInsightSchema = external_exports.object({
+  id: external_exports.string(),
+  severity: external_exports.enum(INSIGHT_SEVERITIES),
+  title: external_exports.string(),
+  detail: external_exports.string(),
+  href: external_exports.string().optional()
+});
+var surfaceUsageSchema = external_exports.object({
+  /** Surface the agent executions were attributed to; rows with no surface type are grouped as `unknown`. */
+  surfaceType: external_exports.string(),
+  /** Agent executions on this surface in the current period. Counts agent runs only, not flow runs. */
+  executions: external_exports.number().int(),
+  /** Share of those agent executions that completed. */
+  successRate: external_exports.number().nullable()
+});
+var executionCostMetricSchema = metricDeltaSchema.extend({
+  knownValue: external_exports.number(),
+  knownPrevious: external_exports.number(),
+  incompleteRuns: external_exports.number().int(),
+  previousIncompleteRuns: external_exports.number().int()
+});
+var productionHealthResponseSchema = external_exports.object({
+  period: external_exports.object({
+    days: external_exports.number().int(),
+    start: external_exports.string(),
+    end: external_exports.string(),
+    previousStart: external_exports.string()
+  }),
+  /**
+   * Run totals across BOTH populations, read from the run ledgers: one row per
+   * run, whatever it did. `agents` is broken out first because an agent turn
+   * drives a flow internally and used to be counted on both lines at once.
+   * Every field is agents plus flows plus historical runs of unknown population.
+   */
+  // WHY(docs/why/apps/api/src/services.md#the-run-ledger-cannot-count-agent-runs): two tables, disjoint by construction
+  executions: executionCountsSchema.extend({
+    /** Agent runs, from `agent_executions` — the only table that holds an externally hosted agent's runs. */
+    agents: executionCountsSchema,
+    /** Flow runs, from `flow_executions` rows that no agent drove. */
+    flows: executionCountsSchema,
+    /** Historical runs whose agent/flow identity cannot safely be recovered. */
+    unclassified: executionCountsSchema
+  }),
+  /** Daily UTC intervals anchored to period.start, counting the same root runs as executions. */
+  activity: external_exports.array(
+    external_exports.object({
+      date: external_exports.string(),
+      agents: external_exports.number().int(),
+      flows: external_exports.number().int(),
+      unclassified: external_exports.number().int()
+    })
+  ).optional(),
+  /**
+   * Successful runs over SETTLED runs. Runs still open, paused, or cancelled
+   * are outside both halves of this division. Null when nothing settled.
+   */
+  successRate: metricDeltaSchema,
+  /**
+   * 95th percentile of a run's wall clock, end to end: context steps, tool
+   * steps and queueing included. Measured over settled runs only. A run that
+   * paused for an approval or a client tool and then resumed carries the wait
+   * inside its wall clock. Null when no settled run recorded a duration.
+   */
+  p95LatencyMs: metricDeltaSchema,
+  /**
+   * Estimated model cost of EVERY run in the period, divided by the successful
+   * ones, so failed runs load the average. Cost includes all observed model invocations,
+   * including retries, fallback, compaction, and descendants. Null when any
+   * run has incomplete model accounting.
+   */
+  // WHY(docs/why/apps/api/src/services.md#production-health-cost-is-model-cost-not-billed-spend): not billed spend, never reconciles
+  modelCostPerSuccess: metricDeltaSchema,
+  /** Estimated model cost across every run in the window, failed runs included. */
+  totalModelCost: metricDeltaSchema,
+  costs: external_exports.object({
+    model: executionCostMetricSchema,
+    tool: executionCostMetricSchema,
+    total: executionCostMetricSchema
+  }),
+  /**
+   * Share of runs where at least one attempt routed to a fallback model instead
+   * of the configured one, over every run in the period. Null while any run has incomplete
+   * model accounting.
+   */
+  fallbackShare: metricDeltaSchema,
+  /**
+   * Eval pass rates. `value` and `previous` are the latest scored run and the previous scored run in
+   * the same suite, compared run over run rather than period over
+   * period, so either may predate the window.
+   */
+  evals: metricDeltaSchema.extend({
+    suiteId: external_exports.string().nullable(),
+    suiteName: external_exports.string().nullable(),
+    /** When the most recent eval run of any kind was created; null if none has ever run. */
+    lastRunAt: external_exports.string().nullable(),
+    /**
+     * When the run behind `value` was created; null while nothing has ever
+     * scored. Older than `lastRunAt` whenever the newest run is still
+     * processing, failed, cancelled, or graded nothing, so this is the only
+     * timestamp a pass rate may be shown beside.
+     */
+    // INVARIANT: value belongs to this run, never to lastRunAt
+    lastScoredRunAt: external_exports.string().nullable(),
+    /**
+     * Whether `lastRunAt` falls inside the current period. Any eval run counts,
+     * including one still processing, cancelled, failed, or with no graders, so
+     * this can be true while `value` is null, and false while `value` is set.
+     */
+    // INVARIANT: recency is asked of every eval run; pass rates come only from runs that scored
+    ranInPeriod: external_exports.boolean()
+  }),
+  agents: external_exports.object({
+    /** Share of agent runs that stopped because they hit the turn ceiling. Counts are in `executions.agents`. */
+    maxTurnsShare: metricDeltaSchema
+  }),
+  surfaces: external_exports.array(surfaceUsageSchema),
+  insights: external_exports.array(healthInsightSchema),
+  generatedAt: external_exports.string()
+});
 var RUNTIME_ARTIFACT_MANIFEST_VERSION = "2026-06-08";
 var runtimeArtifactResourceTypeSchema = external_exports.enum(["flow", "agent"]);
 var runtimeArtifactEntrypointSchema = external_exports.enum(["flow", "agent"]);
@@ -35131,6 +35413,29 @@ function finalize2(r) {
   r.valid = r.errors.length === 0;
   return r;
 }
+function getAgentSandboxCapabilityIssues(config3) {
+  if (!config3 || typeof config3 !== "object" || !("enabled" in config3) || config3.enabled !== true)
+    return [];
+  const sandbox = config3;
+  const capabilities = {
+    provider: ["runtype-sandbox"],
+    persistence: ["ephemeral", "conversation"],
+    instanceType: [CONTAINER_SANDBOX_INSTANCE_TYPE]
+  };
+  const issues = [];
+  for (const [field, supported] of Object.entries(capabilities)) {
+    const requested = sandbox[field];
+    if (typeof requested !== "string" || supported.includes(requested)) continue;
+    issues.push({
+      code: "unsupported_sandbox_capability",
+      path: `config.sandbox.${field}`,
+      requested,
+      supported,
+      message: `Agent Sandbox ${field} '${requested}' is unavailable; supported: ${supported.join(", ")}`
+    });
+  }
+  return issues;
+}
 function reservedToolNameIssue(name, path21) {
   return createIssue(
     "error",
@@ -35164,6 +35469,12 @@ function validateAgentDefinition(agent, capIndex) {
     );
   }
   if (isNestedFpoAgent(agent)) {
+    for (const issue2 of getAgentSandboxCapabilityIssues(agent.config?.sandbox)) {
+      result.errors.push(createIssue("error", issue2.code, issue2.message, `${base}.${issue2.path}`, void 0, {
+        requested: issue2.requested,
+        supported: issue2.supported
+      }));
+    }
     validateNestedAgent(agent, base, result);
   } else {
     validateFlatAgent(agent, base, result);
@@ -36768,6 +37079,14 @@ var AgentInputSchema = external_exports.object({
    */
   agentType: external_exports.enum(["runtype", "claude_managed"]).optional(),
   claudeManagedConfig: DispatchClaudeManagedConfigSchema.optional(),
+  /**
+   * Release alias selecting which stored version runs (ADR 0025). Mutually
+   * exclusive with `versionId`. With a selector present and `agentId` absent,
+   * `name` becomes a lookup key rather than an inline agent's name.
+   */
+  alias: external_exports.string().min(1).max(AGENT_ALIAS_MAX_LENGTH).optional(),
+  /** Immutable `agent_versions` id to run. Mutually exclusive with `alias`. */
+  versionId: external_exports.string().min(1).optional(),
   name: external_exports.string().min(1).optional(),
   model: external_exports.string().min(1).optional(),
   systemPrompt: external_exports.string().optional(),
@@ -36829,6 +37148,8 @@ var AgentInputSchema = external_exports.object({
   memory: memoryConfigSchema.optional(),
   // WHY(docs/why/packages/shared/src/api-schemas.md#sandbox-mirrors-the-saved-agent-execute-route-so): sandbox mirrors the saved-agent execute route so both hosted-agent entry points stay in lockstep.
   sandbox: sandboxConfigSchema.optional(),
+  // WHY(ADR-0020): durability mirrors the SAVED agent config, like sandbox above, so a round-tripped config still validates.
+  durability: agentDurabilityConfigSchema.optional(),
   tenancyStrategy: agentRuntimeConfigSchema.shape.tenancyStrategy
 }).superRefine((val, ctx) => {
   const unsupported = val.tenancyStrategy !== void 0 ? [["tenancyStrategy"], "tenancyStrategy is server-authored; save it on an agent"] : val.voice !== void 0 ? [["voice"], "voice is unsupported by agent dispatch"] : val.tools?.toolSearch !== void 0 ? [["tools", "toolSearch"], "toolSearch is unsupported by quick-agent dispatch"] : Object.keys(val.temporal ?? {}).some((key) => key !== "timezone") ? [["temporal"], "Only temporal.timezone is supported by agent dispatch"] : void 0;
@@ -36840,9 +37161,21 @@ var AgentInputSchema = external_exports.object({
       message
     });
   }
+  const selectorViolation = agentSelectorViolation(val);
+  if (selectorViolation) {
+    ctx.addIssue({
+      code: "custom",
+      path: selectorViolation.path.replace(/^agent\./, "").split("."),
+      message: selectorViolation.message
+    });
+    return;
+  }
   if (val.agentId) {
     return;
   }
+  if (hasAgentSelector(val)) {
+    return;
+  }
   if (val.agentType !== "claude_managed") {
     if (!val.name) {
       ctx.addIssue({ code: "custom", path: ["name"], message: "name is required" });
@@ -37531,6 +37864,40 @@ var SANDBOX_TTL_OPTIONS = [
   { label: "2 hours", value: 2 * 60 * 60 },
   { label: "Unlimited", value: null }
 ];
+var sandboxDeployRetentionSchema = external_exports.enum(["10m", "1h", "24h", "unlimited"]);
+var sandboxDeploySleepPolicySchema = external_exports.discriminatedUnion("mode", [
+  external_exports.object({ mode: external_exports.literal("never") }).strict(),
+  external_exports.object({ mode: external_exports.literal("idle"), after: external_exports.enum(["5m", "15m", "30m", "1h"]) }).strict()
+]);
+var explicitSandboxDeployRequestSchema = external_exports.object({
+  code: external_exports.string().min(1),
+  packageJson: external_exports.string().optional(),
+  language: external_exports.enum(["javascript", "typescript", "python"]).optional(),
+  port: external_exports.number().int().min(1).max(65535).optional(),
+  sandboxId: external_exports.string().min(1).optional(),
+  startCommand: external_exports.string().optional(),
+  files: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  retention: sandboxDeployRetentionSchema.optional(),
+  sleepPolicy: sandboxDeploySleepPolicySchema.optional(),
+  managed: external_exports.literal(false).optional()
+}).passthrough();
+var daytonaSandboxDeployRequestSchema = explicitSandboxDeployRequestSchema.extend({
+  labels: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  autoStopInterval: external_exports.number().int().nonnegative().optional(),
+  autoDeleteInterval: external_exports.number().int().min(-1).optional()
+}).refine((value) => value.sleepPolicy === void 0 || value.autoStopInterval === void 0, {
+  path: ["sleepPolicy"],
+  message: "Specify sleepPolicy or autoStopInterval, not both"
+});
+var sandboxDeployEffectivePolicySchema = external_exports.object({
+  retention: sandboxDeployRetentionSchema,
+  origin: external_exports.enum(["explicit", "legacy-default"]),
+  expiresAt: external_exports.string().nullable(),
+  metering: external_exports.enum(["active", "legacy-untracked"]),
+  sleepPolicy: sandboxDeploySleepPolicySchema.optional(),
+  autoStopInterval: external_exports.number().optional(),
+  autoDeleteInterval: external_exports.number().optional()
+});
 var SANDBOX_RETENTION_DEFAULT_SECONDS = 60 * 60;
 var SANDBOX_BACKUP_UNLIMITED_TTL_SECONDS = 365 * 24 * 60 * 60;
 var APP_MANIFEST_LIMITS = {
@@ -47932,13 +48299,44 @@ function getActiveDeploySandboxPreviewUrl() {
 function setActiveDeploySandboxPreviewUrl(url2) {
   activeDeploySandboxPreviewUrl = url2;
 }
+var deployLifecycleParameters = {
+  retention: {
+    type: "string",
+    enum: ["10m", "1h", "24h", "unlimited"],
+    description: "Runtype destruction backstop. Omitted: Daytona 10m, Runtype Sandbox unlimited. Provider sleep/loss can end availability earlier."
+  },
+  sleepPolicy: {
+    description: "Idle compute policy, independent of retention. Legacy Runtype Sandbox supports idle only.",
+    oneOf: [
+      { type: "object", properties: { mode: { const: "never" } }, required: ["mode"], additionalProperties: false },
+      { type: "object", properties: { mode: { const: "idle" }, after: { enum: ["5m", "15m", "30m", "1h"] } }, required: ["mode", "after"], additionalProperties: false }
+    ]
+  }
+};
+function deployLifecycleOptions(args) {
+  return {
+    ...args.retention !== void 0 ? { retention: args.retention } : {},
+    ...args.sleepPolicy !== void 0 ? { sleepPolicy: args.sleepPolicy } : {}
+  };
+}
 function createDeploySandboxLocalTool(client, debugMode) {
   return {
-    description: "Deploy code to a persistent Daytona sandbox and get a live preview URL. Use this to run web servers, APIs, or UIs that the user can visit in their browser.",
+    description: "Deploy a live Daytona server preview. Retention defaults to ten minutes; provider autostop is independent. The preview URL is not durable hosting.",
     parametersSchema: {
       type: "object",
       properties: {
         code: { type: "string", description: "Code to deploy (written to main file)" },
+        ...deployLifecycleParameters,
+        autoStopInterval: {
+          type: "integer",
+          minimum: 0,
+          description: "Daytona SDK inactivity in minutes; default 120, zero disables. Cannot be combined with sleepPolicy."
+        },
+        autoDeleteInterval: {
+          type: "integer",
+          minimum: -1,
+          description: "Minutes continuously stopped before Daytona deletes: -1 disables, zero deletes on stop. May end availability before Runtype retention."
+        },
         packageJson: {
           type: "object",
           description: 'package.json content as a JSON object, e.g. { "dependencies": { "express": "^4.18.2" } }'
@@ -47971,6 +48369,9 @@ function createDeploySandboxLocalTool(client, debugMode) {
       }
       const request = {
         code,
+        ...deployLifecycleOptions(args),
+        ...typeof args.autoStopInterval === "number" ? { autoStopInterval: args.autoStopInterval } : {},
+        ...typeof args.autoDeleteInterval === "number" ? { autoDeleteInterval: args.autoDeleteInterval } : {},
         ...args.packageJson && typeof args.packageJson === "object" ? { packageJson: JSON.stringify(args.packageJson) } : typeof args.packageJson === "string" ? { packageJson: args.packageJson } : {},
         ...typeof args.language === "string" ? { language: args.language } : {},
         ...typeof args.port === "number" ? { port: args.port } : {},
@@ -47999,6 +48400,7 @@ function createDeploySandboxLocalTool(client, debugMode) {
           sandboxId: result.sandboxId,
           previewUrl: result.previewUrl,
           output: result.output,
+          effectivePolicy: result.effectivePolicy,
           ...result.error ? { error: result.error } : {}
         };
       } catch (error61) {
@@ -48017,11 +48419,12 @@ function createDeploySandboxLocalTool(client, debugMode) {
 var activeCfSandboxId;
 function createDeployCfSandboxLocalTool(client, debugMode) {
   return {
-    description: "Deploy code to a persistent Runtype Sandbox container and get a live preview URL. Use this to run web servers, APIs, or UIs that the user can visit in their browser. Supports JavaScript, TypeScript, and Python with npm/pip dependencies.",
+    description: "Deploy a live Runtype Sandbox server preview. Omitted retention preserves the unlimited legacy backstop; explicit lifecycle policy requires rollout enablement. Provider sleep/loss can end availability earlier; the URL is not durable hosting.",
     parametersSchema: {
       type: "object",
       properties: {
         code: { type: "string", description: "Code to deploy (main entry point file)" },
+        ...deployLifecycleParameters,
         packageJson: {
           type: "object",
           description: 'package.json content as a JSON object, e.g. { "dependencies": { "hono": "^4.0.0" } }'
@@ -48054,6 +48457,7 @@ function createDeployCfSandboxLocalTool(client, debugMode) {
       }
       const request = {
         code,
+        ...deployLifecycleOptions(args),
         ...args.packageJson && typeof args.packageJson === "object" ? { packageJson: JSON.stringify(args.packageJson) } : typeof args.packageJson === "string" ? { packageJson: args.packageJson } : {},
         ...typeof args.language === "string" ? { language: args.language } : {},
         ...typeof args.port === "number" ? { port: args.port } : {},
@@ -48081,6 +48485,7 @@ function createDeployCfSandboxLocalTool(client, debugMode) {
           sandboxId: result.sandboxId,
           previewUrl: result.previewUrl,
           output: result.output,
+          effectivePolicy: result.effectivePolicy,
           ...result.error ? { error: result.error } : {}
         };
       } catch (error61) {
@@ -50887,19 +51292,19 @@ function upsertSessionSnapshots(snapshots, nextSnapshot) {
   return result;
 }
 function buildLiveSessionSnapshot(liveState, rawEvents, sessionIndex, model) {
-  const isError = liveState.phase === "error";
-  const hasLiveState = liveState.phase === "thinking" || isError || Boolean(liveState.content) || Boolean(liveState.reasoning) || liveState.tools.length > 0 || rawEvents.length > 0 || Boolean(liveState.contextCompaction?.active);
+  const isError2 = liveState.phase === "error";
+  const hasLiveState = liveState.phase === "thinking" || isError2 || Boolean(liveState.content) || Boolean(liveState.reasoning) || liveState.tools.length > 0 || rawEvents.length > 0 || Boolean(liveState.contextCompaction?.active);
   if (!hasLiveState) return void 0;
   return {
     sessionIndex,
-    status: isError ? "error" : "live",
+    status: isError2 ? "error" : "live",
     model,
     cost: liveState.totalCost,
     content: liveState.content,
     reasoning: liveState.reasoning,
     tools: liveState.tools,
     rawEvents,
-    ...isError && liveState.error ? { errorMessage: liveState.error.message } : {}
+    ...isError2 && liveState.error ? { errorMessage: liveState.error.message } : {}
   };
 }
 function copyToClipboard(text) {
@@ -65851,7 +66256,7 @@ async function configureWithFallbackWriter(agent, options) {
     return {
       configured: false,
       changed: false,
-      error: `Could not inspect ${MCP_AGENT_DEFINITIONS[agent].displayName}'s MCP configuration: ${getErrorMessage(error61)}`
+      error: `Could not inspect ${MCP_AGENT_DEFINITIONS[agent].displayName}'s MCP configuration: ${getErrorMessage2(error61)}`
     };
   }
   if (inspected.server?.identity === RUNTYPE_MCP_URL) {
@@ -65881,7 +66286,7 @@ async function configureWithFallbackWriter(agent, options) {
       changed: false,
       configPath: inspected.configPath,
       backupPath,
-      error: `Could not update ${MCP_AGENT_DEFINITIONS[agent].displayName}'s MCP configuration: ${getErrorMessage(error61)}`
+      error: `Could not update ${MCP_AGENT_DEFINITIONS[agent].displayName}'s MCP configuration: ${getErrorMessage2(error61)}`
     };
   }
   if (!installation.success) {
@@ -65904,7 +66309,7 @@ async function configureWithFallbackWriter(agent, options) {
       changed: false,
       configPath: installation.path,
       backupPath,
-      error: `The MCP config could not be verified, so the previous config was restored: ${getErrorMessage(error61)}`
+      error: `The MCP config could not be verified, so the previous config was restored: ${getErrorMessage2(error61)}`
     };
   }
   if (verified.server?.identity !== RUNTYPE_MCP_URL) {
@@ -65924,7 +66329,7 @@ async function configureWithFallbackWriter(agent, options) {
     backupPath
   };
 }
-function getErrorMessage(error61) {
+function getErrorMessage2(error61) {
   return error61 instanceof Error ? error61.message : String(error61);
 }
 function restoreFallbackConfig(configPath, backupPath) {
@@ -65949,7 +66354,7 @@ async function configureMcpAgent(agent, options = {}) {
     return {
       configured: false,
       changed: false,
-      error: `Could not configure ${MCP_AGENT_DEFINITIONS[agent].displayName}: ${getErrorMessage(error61)}`
+      error: `Could not configure ${MCP_AGENT_DEFINITIONS[agent].displayName}: ${getErrorMessage2(error61)}`
     };
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runtypelabs/cli",
-  "version": "2.36.4",
+  "version": "2.37.0",
   "description": "Command-line interface for Runtype AI platform",
   "type": "module",
   "main": "dist/index.js",
@@ -11,7 +11,7 @@
     "@modelcontextprotocol/client": "2.0.0",
     "@modelcontextprotocol/core": "2.0.0",
     "@runtypelabs/ink-components": "0.3.7",
-    "@runtypelabs/sdk": "9.9.1",
+    "@runtypelabs/sdk": "9.10.0",
     "@runtypelabs/terminal-animations": "0.2.4",
     "add-mcp": "2.0.0",
     "chalk": "^5.3.0",
@@ -33,7 +33,7 @@
   "devDependencies": {
     "@modelcontextprotocol/server": "2.0.0",
     "@runtypelabs/persona": "4.22.0",
-    "@runtypelabs/shared": "3.44.0",
+    "@runtypelabs/shared": "3.45.0",
     "@types/express": "^5.0.6",
     "@types/micromatch": "^4.0.9",
     "@types/node": "^25.3.3",