@aexhq/cli 0.13.6 → 0.13.8

package/dist/cli.mjs

@@ -10,8 +10,14 @@ import { readFile as readFile2, writeFile, readdir as readdir2, stat as stat2 }
 import { resolve as resolvePath4 } from "node:path";
 
 // ../contracts/dist/proxy-protocol.js
-var PROXY_PROTOCOL_VERSION = "1";
+var PROXY_PROTOCOL_VERSION_V2 = "2";
 var PROXY_PROTOCOL_HEADER = "x-aex-proxy-protocol";
+var PROXY_RESP_STATUS_HEADER = "x-aex-proxy-status";
+var PROXY_RESP_MODE_HEADER = "x-aex-proxy-effective-mode";
+var PROXY_RESP_TRUNCATED_HEADER = "x-aex-proxy-truncated";
+var PROXY_RESP_REMAINING_CALLS_HEADER = "x-aex-proxy-remaining-calls";
+var PROXY_RESP_REMAINING_BYTES_HEADER = "x-aex-proxy-remaining-bytes";
+var PROXY_RESP_UPSTREAM_HEADERS_HEADER = "x-aex-proxy-upstream-headers";
 var PROXY_METHOD_HEADER = "x-aex-method";
 var PROXY_PATH_HEADER = "x-aex-path";
 var PROXY_QUERY_HEADER = "x-aex-query";
@@ -114,6 +120,13 @@ var terminalRunStatuses = new Set(TERMINAL_RUN_STATUSES);
 var SKILL_BUNDLE_LIMITS = {
   /** Compressed (.zip) ceiling. */
   maxCompressedBytes: 10 * 1024 * 1024,
+  /**
+   * Hard ceiling for the direct-to-storage (presigned PUT) upload path, where
+   * bytes never transit the hosted API so its memory/request-payload limits no
+   * longer cap the bundle. Kept well under the object store's 5 GiB single-PUT
+   * limit; objects above this would need S3 multipart, which is out of scope.
+   */
+  maxBytes: 2 * 1024 * 1024 * 1024,
   /** Sum of uncompressed file sizes. */
   maxDecompressedBytes: 50 * 1024 * 1024,
   /** Number of regular file entries (directories don't count). */
@@ -302,32 +315,63 @@ function rejectStdioMcpShape(record) {
     }
   }
 }
-function denyReasonForMcpHost(parsed) {
-  const host = parsed.hostname.toLowerCase().replace(/^\[|\]$/g, "");
-  if (host === "localhost" || host.endsWith(".localhost")) {
-    return "must not target a loopback hostname";
+function denyReasonForHostIp(host) {
+  const mappedDotted = /^::(?:ffff:)?(\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3})$/.exec(host);
+  if (mappedDotted) {
+    return denyReasonForV4(mappedDotted[1]);
   }
-  if (/^127(?:\.[0-9]+){3}$/.test(host)) {
-    return "must not target loopback IPv4 (127.0.0.0/8)";
+  const mappedHex = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/.exec(host);
+  if (mappedHex) {
+    const hi = Number.parseInt(mappedHex[1], 16);
+    const lo = Number.parseInt(mappedHex[2], 16);
+    const dotted = `${hi >> 8}.${hi & 255}.${lo >> 8}.${lo & 255}`;
+    return denyReasonForV4(dotted);
   }
+  const v4 = denyReasonForV4(host);
+  if (v4)
+    return v4;
   if (host === "::1" || host === "0:0:0:0:0:0:0:1") {
     return "must not target loopback IPv6 (::1)";
   }
   if (/^fe[89ab][0-9a-f]?:/.test(host)) {
     return "must not target link-local IPv6 (fe80::/10)";
   }
-  if (/^169\.254\.[0-9]+\.[0-9]+$/.test(host)) {
+  if (/^f[cd][0-9a-f]{0,2}:/.test(host)) {
+    return "must not target unique-local IPv6 (fc00::/7)";
+  }
+  return null;
+}
+function denyReasonForV4(host) {
+  if (!/^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(host))
+    return null;
+  const octets = host.split(".").map((o) => Number.parseInt(o, 10));
+  if (octets.some((o) => o > 255))
+    return null;
+  const [a, b] = octets;
+  if (a === 127)
+    return "must not target loopback IPv4 (127.0.0.0/8)";
+  if (a === 169 && b === 254) {
     return "must not target link-local IPv4 (169.254.0.0/16) \u2014 cloud metadata range";
   }
-  if (/^10\.[0-9]+\.[0-9]+\.[0-9]+$/.test(host)) {
-    return "must not target RFC1918 IPv4 (10.0.0.0/8)";
+  if (a === 100 && b >= 64 && b <= 127) {
+    return "must not target CGNAT IPv4 (100.64.0.0/10)";
   }
-  if (/^172\.(1[6-9]|2[0-9]|3[01])\.[0-9]+\.[0-9]+$/.test(host)) {
+  if (a === 10)
+    return "must not target RFC1918 IPv4 (10.0.0.0/8)";
+  if (a === 172 && b >= 16 && b <= 31)
     return "must not target RFC1918 IPv4 (172.16.0.0/12)";
-  }
-  if (/^192\.168\.[0-9]+\.[0-9]+$/.test(host)) {
+  if (a === 192 && b === 168)
     return "must not target RFC1918 IPv4 (192.168.0.0/16)";
+  return null;
+}
+function denyReasonForMcpHost(parsed) {
+  const host = parsed.hostname.toLowerCase().replace(/^\[|\]$/g, "");
+  if (host === "localhost" || host.endsWith(".localhost")) {
+    return "must not target a loopback hostname";
   }
+  const ipDenial = denyReasonForHostIp(host);
+  if (ipDenial)
+    return ipDenial;
   if (parsed.protocol === "https:" && parsed.port !== "" && parsed.port !== "443") {
     return `must use port 443 for https (got ${parsed.port})`;
   }
@@ -544,7 +588,7 @@ var BLOCKED_MANAGED_KEY_POLICY_V1 = Object.freeze({
   schemaVersion: MANAGED_KEY_POLICY_SCHEMA_VERSION,
   credentialMode: "managed",
   launchStage: "blocked",
-  serviceAvailable: false,
+  privateImplementationAvailable: false,
   billingRequired: true,
   providers: Object.freeze([]),
   runtimes: Object.freeze([]),
@@ -624,7 +668,7 @@ var forbiddenStringPatterns = Object.freeze([
     regex: /\b(?:sk-(?:ant|proj|live|test|deepseek|openai)|xox[baprs]-|AIza)[A-Za-z0-9_-]{8,}/i
   },
   { reason: "signed_url", regex: /[?&](?:X-Amz-Signature|X-Amz-Credential|X-Amz-Algorithm|AWSAccessKeyId)=/i },
-  { reason: "r2_object_key", regex: /(^|[\s"'`])(?:runs|assets)\/[^?<#\s"'`]+/i },
+  { reason: "object_store_key", regex: /(^|[\s"'`])(?:runs|assets)\/[^?<#\s"'`]+/i },
   { reason: "vault_id", regex: /\b(?:vault|vlt|secret)[_:-][A-Za-z0-9][A-Za-z0-9_-]{7,}\b/i },
   {
     reason: "private_resource_handle",
@@ -633,7 +677,7 @@ var forbiddenStringPatterns = Object.freeze([
   { reason: "high_entropy_token", regex: /\b(?=[A-Za-z0-9_-]{40,}\b)(?=.*[A-Za-z])(?=.*\d)[A-Za-z0-9_-]{40,}\b/ }
 ]);
 function isForbiddenCustodyFieldName(key) {
-  return /^(apiKey|secretValue|bearerHash|signedUrl|r2Key|objectKey|vaultId|providerResponseBody|responseBody|privateResourceHandle|resourceHandle|rawBody)$/i.test(key);
+  return /^(apiKey|secretValue|bearerHash|signedUrl|objectStoreKey|objectKey|vaultId|providerResponseBody|responseBody|privateResourceHandle|resourceHandle|rawBody)$/i.test(key);
 }
 
 // ../contracts/dist/run-record.js
@@ -650,7 +694,6 @@ var RunRecordArchiveRedactionError = class extends Error {
 };
 function buildRunRecordDownloadManifestV1(input) {
   const outputs = input.outputs.map((file2) => normalizeArtifactSummary(file2));
-  const logs = input.logs.map((file2) => normalizeArtifactSummary(file2));
   const errors = (input.errors ?? []).map((error) => Object.freeze({ ...error }));
   return Object.freeze({
     schemaVersion: RUN_RECORD_MANIFEST_SCHEMA_VERSION,
@@ -658,9 +701,8 @@ function buildRunRecordDownloadManifestV1(input) {
     runId: input.runId,
     namespaces: Object.freeze([
       namespace("metadata", "Run metadata, submission snapshot, custody, and cost files."),
-      namespace("events", "Typed event-channel exports and optional full-stream/log-channel exports."),
-      namespace("outputs", "Captured deliverables produced by the run."),
-      namespace("logs", "Platform diagnostics and runtime log artifacts.")
+      namespace("events", "Typed event-channel exports."),
+      namespace("outputs", "Captured deliverables produced by the run.")
     ]),
     files: Object.freeze([
       file("metadata", "metadata/run.json", "run_metadata", "present"),
@@ -670,14 +712,10 @@ function buildRunRecordDownloadManifestV1(input) {
       file("events", "events/events.jsonl", "typed_events", "present", {
         recordCount: input.typedEventCount ?? 0
       }),
-      file("events", "events/logs.jsonl", "log_events", input.logEvents?.status ?? "unavailable", recordCountExtra(input.logEvents)),
-      file("events", "events/all.jsonl", "all_events", input.allEvents?.status ?? "unavailable", recordCountExtra(input.allEvents)),
       file("events", "events/manifest.json", "coordinator_events_manifest", input.coordinatorEventsManifest?.status ?? "unavailable"),
-      ...outputs.map((output) => artifactFile("outputs", "output", "outputs/", output)),
-      ...logs.map((log) => artifactFile("logs", "log", "logs/", log))
+      ...outputs.map((output) => artifactFile("outputs", "output", "outputs/", output))
     ]),
     outputs: Object.freeze(outputs),
-    logs: Object.freeze(logs),
     errors: Object.freeze(errors)
   });
 }
@@ -698,9 +736,6 @@ function file(namespaceName, path, role, status, extra) {
     ...extra?.recordCount !== void 0 ? { recordCount: extra.recordCount } : {}
   });
 }
-function recordCountExtra(input) {
-  return input?.status === "present" && input.recordCount !== void 0 ? { recordCount: input.recordCount } : void 0;
-}
 function artifactFile(namespaceName, role, prefix, artifact) {
   return Object.freeze({
     namespace: namespaceName,
@@ -767,7 +802,7 @@ function isAllowedArchiveHighEntropyField(entryPath, finding) {
   if (finding.reason !== "high_entropy_token" || !entryPath.endsWith("manifest.json")) {
     return false;
   }
-  return /^\$(?:\.files\[\d+\]|\.outputs\[\d+\]|\.logs\[\d+\])\.id$/.test(finding.path);
+  return /^\$(?:\.files\[\d+\]|\.outputs\[\d+\])\.id$/.test(finding.path);
 }
 function parseArchiveTextValues(path, text) {
   if (/\.json$/i.test(path)) {
@@ -806,7 +841,7 @@ function formatArchiveFindingPaths(findings) {
 // ../contracts/dist/run-retention.js
 var forbiddenStringPatterns2 = Object.freeze([
   { reason: "signed_url", regex: /[?&](?:X-Amz-Signature|X-Amz-Credential|X-Amz-Algorithm|AWSAccessKeyId)=/i },
-  { reason: "r2_object_key", regex: /(^|[\s"'`])(?:runs|assets)\/[^?<#\s"'`]+/i },
+  { reason: "object_store_key", regex: /(^|[\s"'`])(?:runs|assets)\/[^?<#\s"'`]+/i },
   { reason: "vault_id", regex: /\b(?:vault|vlt|secret)[_:-][A-Za-z0-9][A-Za-z0-9_-]{7,}\b/i },
   {
     reason: "private_resource_handle",
@@ -823,7 +858,7 @@ var forbiddenStringPatterns3 = Object.freeze([
     regex: /\b(?:sk-(?:ant|proj|live|test|deepseek|openai)|xox[baprs]-|AIza)[A-Za-z0-9_-]{8,}/i
   },
   { reason: "signed_url", regex: /[?&](?:X-Amz-Signature|X-Amz-Credential|X-Amz-Algorithm|AWSAccessKeyId)=/i },
-  { reason: "r2_object_key", regex: /(^|[\s"'`])(?:runs|assets)\/[^?<#\s"'`]+/i },
+  { reason: "object_store_key", regex: /(^|[\s"'`])(?:runs|assets)\/[^?<#\s"'`]+/i },
   { reason: "vault_id", regex: /\b(?:vault|vlt|secret)[_:-][A-Za-z0-9][A-Za-z0-9_-]{7,}\b/i },
   {
     reason: "private_resource_handle",
@@ -1062,39 +1097,6 @@ function extractErrorMessage(body) {
   return "aex API request failed";
 }
 
-// ../contracts/dist/run-artifacts.js
-function runArtifactRel(rel) {
-  if (rel.startsWith(".runtime-logs/"))
-    return `runtime/${rel.slice(".runtime-logs/".length)}`;
-  if (rel.startsWith("runtime/"))
-    return rel;
-  if (rel.startsWith(".host-logs/"))
-    return `host/${rel.slice(".host-logs/".length)}`;
-  if (rel.startsWith("host/"))
-    return rel;
-  if (rel.startsWith(".provider-proxy/"))
-    return `provider-proxy/${rel.slice(".provider-proxy/".length)}`;
-  if (rel.startsWith("provider-proxy/"))
-    return rel;
-  if (rel.startsWith(".control-plane/"))
-    return `control-plane/${rel.slice(".control-plane/".length)}`;
-  if (rel.startsWith("control-plane/"))
-    return rel;
-  if (rel.startsWith(".goose-logs/"))
-    return `runtime/${rel.slice(".goose-logs/".length)}`;
-  if (rel.startsWith("goose-logs/"))
-    return `runtime/${rel.slice("goose-logs/".length)}`;
-  if (rel.startsWith(".fly-logs/"))
-    return `host/${rel.slice(".fly-logs/".length)}`;
-  if (rel.startsWith("fly-logs/"))
-    return `host/${rel.slice("fly-logs/".length)}`;
-  if (rel.startsWith(".anthropic-debug/"))
-    return `provider-proxy/${rel.slice(".anthropic-debug/".length)}`;
-  if (rel.startsWith("anthropic-debug/"))
-    return `provider-proxy/${rel.slice("anthropic-debug/".length)}`;
-  return rel;
-}
-
 // ../contracts/dist/operations.js
 var operations_exports = {};
 __export(operations_exports, {
@@ -1111,7 +1113,6 @@ __export(operations_exports, {
   deleteWorkspaceAsset: () => deleteWorkspaceAsset,
   download: () => download,
   downloadEvents: () => downloadEvents,
-  downloadLogs: () => downloadLogs,
   downloadMetadata: () => downloadMetadata,
   downloadOutput: () => downloadOutput,
   downloadOutputs: () => downloadOutputs,
@@ -1125,7 +1126,6 @@ __export(operations_exports, {
   getSkill: () => getSkill,
   listAgentsMd: () => listAgentsMd,
   listFiles: () => listFiles,
-  listLogs: () => listLogs,
   listOutputs: () => listOutputs,
   listRunEvents: () => listRunEvents,
   listSkills: () => listSkills,
@@ -1860,10 +1860,20 @@ async function getRun(http, runId) {
 async function getRunUnit(http, runId) {
   return http.request(`/api/runs/${encodeURIComponent(runId)}`);
 }
-async function listRunEvents(http, runId, options = {}) {
-  const query = options.channel && options.channel !== "event" ? { channel: options.channel } : {};
-  const result = await http.request(`/api/runs/${encodeURIComponent(runId)}/events`, {}, query);
-  return result.events;
+var LIST_EVENTS_PAGE_BUDGET = 1e3;
+async function listRunEvents(http, runId) {
+  const path = `/api/runs/${encodeURIComponent(runId)}/events`;
+  const all = [];
+  let cursor;
+  for (let page = 0; page < LIST_EVENTS_PAGE_BUDGET; page++) {
+    const query = cursor !== void 0 ? { cursor: String(cursor) } : {};
+    const result = await http.request(path, {}, query);
+    all.push(...result.events);
+    if (typeof result.nextCursor !== "number")
+      break;
+    cursor = result.nextCursor;
+  }
+  return all;
 }
 async function getCoordinatorTicket(http, runId) {
   return http.request(`/api/runs/${encodeURIComponent(runId)}/events/ticket`, { method: "POST" });
@@ -1872,10 +1882,6 @@ async function listOutputs(http, runId) {
   const result = await http.request(`/api/runs/${encodeURIComponent(runId)}/outputs`);
   return result.outputs;
 }
-async function listLogs(http, runId) {
-  const result = await http.request(`/api/runs/${encodeURIComponent(runId)}/logs`);
-  return result.logs.map((log) => typeof log.filename === "string" ? { ...log, filename: runArtifactRel(log.filename) } : log);
-}
 async function createOutputLink(http, runId, outputId) {
   return http.request(`/api/runs/${encodeURIComponent(runId)}/outputs/${encodeURIComponent(outputId)}/link`, { method: "POST" });
 }
@@ -1939,7 +1945,7 @@ async function collectArtifactBytes(http, runId, items, zipPrefix, namespace2) {
         path: `${zipPrefix}${rel}`,
         bytes: new Uint8Array(await response.arrayBuffer()),
         ...item.contentType !== void 0 ? { contentType: item.contentType } : {},
-        ...namespace2 === "outputs" ? { customerContent: true } : {}
+        customerContent: true
       });
       captured.push({
         id: item.id,
@@ -1956,23 +1962,6 @@ async function collectArtifactBytes(http, runId, items, zipPrefix, namespace2) {
 function eventsJsonl(events) {
   return strToU8(events.map((event) => JSON.stringify(event)).join("\n"));
 }
-async function tryListOptionalRunEvents(http, runId, channel) {
-  try {
-    const events = await listRunEvents(http, runId, { channel });
-    if (channel === "log") {
-      return events.length > 0 && events.every(isLogChannelEvent) ? { status: "present", events } : { status: "unavailable", events: [] };
-    }
-    return hasUnifiedStreamEvidence(events) ? { status: "present", events } : { status: "unavailable", events: [] };
-  } catch {
-    return { status: "unavailable", events: [] };
-  }
-}
-function isLogChannelEvent(event) {
-  return event.channel === "log";
-}
-function hasUnifiedStreamEvidence(events) {
-  return events.some((event) => event.channel === "log" || event.channel === "event");
-}
 function isPathSelector(selector) {
   return Boolean(selector && typeof selector === "object" && "path" in selector);
 }
@@ -1980,38 +1969,28 @@ function normalizeOutputLookupPath(path) {
   return path.replace(/\\/g, "/").replace(/^\/+/, "");
 }
 async function download(http, runId) {
-  const [run, events, logEvents, allEvents, outputs, logItems] = await Promise.all([
+  const [run, events, outputs] = await Promise.all([
     getRun(http, runId),
     listRunEvents(http, runId),
-    tryListOptionalRunEvents(http, runId, "log"),
-    tryListOptionalRunEvents(http, runId, "all"),
-    listOutputs(http, runId),
-    listLogs(http, runId)
+    listOutputs(http, runId)
   ]);
   const out = await collectArtifactBytes(http, runId, outputs, "outputs/", "outputs");
-  const logs = await collectArtifactBytes(http, runId, logItems, "logs/", "logs");
   const submissionSnapshot = extractSubmissionSnapshot(run);
   const costTelemetry = extractCostTelemetry(run);
   const manifest = buildRunRecordDownloadManifestV1({
     runId,
     outputs: out.captured,
-    logs: logs.captured,
-    errors: [...out.errors, ...logs.errors],
+    errors: out.errors,
     typedEventCount: events.length,
     ...submissionSnapshot ? { submission: { status: "present" } } : {},
-    ...costTelemetry ? { cost: { status: "present" } } : {},
-    logEvents: { status: logEvents.status, recordCount: logEvents.events.length },
-    allEvents: { status: allEvents.status, recordCount: allEvents.events.length }
+    ...costTelemetry ? { cost: { status: "present" } } : {}
   });
   return zipEntries([
     jsonEntry("metadata/run.json", run),
     ...submissionSnapshot ? [jsonEntry("metadata/submission.json", submissionSnapshot)] : [],
     ...costTelemetry ? [jsonEntry("metadata/cost.json", costTelemetry)] : [],
     jsonlEntry("events/events.jsonl", events),
-    ...logEvents.status === "present" ? [jsonlEntry("events/logs.jsonl", logEvents.events)] : [],
-    ...allEvents.status === "present" ? [jsonlEntry("events/all.jsonl", allEvents.events)] : [],
     ...out.entries,
-    ...logs.entries,
     jsonEntry("manifest.json", manifest)
   ]);
 }
@@ -2023,25 +2002,9 @@ async function downloadOutputs(http, runId) {
     jsonEntry("manifest.json", { runId, namespace: "outputs", outputs: captured, errors })
   ]);
 }
-async function downloadLogs(http, runId) {
-  const logItems = await listLogs(http, runId);
-  const { entries, captured, errors } = await collectArtifactBytes(http, runId, logItems, "", "logs");
-  return zipEntries([
-    ...entries,
-    jsonEntry("manifest.json", { runId, namespace: "logs", logs: captured, errors })
-  ]);
-}
 async function downloadEvents(http, runId) {
-  const [events, logEvents, allEvents] = await Promise.all([
-    listRunEvents(http, runId),
-    tryListOptionalRunEvents(http, runId, "log"),
-    tryListOptionalRunEvents(http, runId, "all")
-  ]);
-  return zipEntries([
-    jsonlEntry("events.jsonl", events),
-    ...logEvents.status === "present" ? [jsonlEntry("logs.jsonl", logEvents.events)] : [],
-    ...allEvents.status === "present" ? [jsonlEntry("all.jsonl", allEvents.events)] : []
-  ]);
+  const events = await listRunEvents(http, runId);
+  return zipEntries([jsonlEntry("events.jsonl", events)]);
 }
 async function downloadMetadata(http, runId) {
   const run = await getRun(http, runId);
@@ -2742,7 +2705,7 @@ async function runProxy(io2, rest) {
   const url = `${manifest.proxyBaseUrl.replace(/\/+$/, "")}/${encodeURIComponent(f.endpointName)}`;
   const requestHeaders = new Headers();
   requestHeaders.set("authorization", `Bearer ${token}`);
-  requestHeaders.set(PROXY_PROTOCOL_HEADER, PROXY_PROTOCOL_VERSION);
+  requestHeaders.set(PROXY_PROTOCOL_HEADER, PROXY_PROTOCOL_VERSION_V2);
   requestHeaders.set(PROXY_METHOD_HEADER, f.method.toUpperCase());
   requestHeaders.set(PROXY_PATH_HEADER, f.path);
   if (f.query) {
@@ -2776,6 +2739,11 @@ async function runProxy(io2, rest) {
     });
     return RUNTIME_ERR;
   }
+  if (response.headers.get(PROXY_RESP_STATUS_HEADER) !== null) {
+    const envelope = await readStreamedEnvelope(response, f.endpointName);
+    io2.stdout(JSON.stringify(envelope) + "\n");
+    return SUCCESS;
+  }
   const text = await response.text();
   let parsedBody;
   try {
@@ -2813,6 +2781,39 @@ async function resolveBody(io2, spec) {
 function emitError(io2, body) {
   io2.stderr(JSON.stringify(body) + "\n");
 }
+async function readStreamedEnvelope(response, endpointName) {
+  const effectiveResponseMode = response.headers.get(PROXY_RESP_MODE_HEADER) ?? "headers_only";
+  const upstreamStatus = Number.parseInt(response.headers.get(PROXY_RESP_STATUS_HEADER) ?? "0", 10);
+  const remainingCalls = Number.parseInt(response.headers.get(PROXY_RESP_REMAINING_CALLS_HEADER) ?? "0", 10);
+  const remainingResponseBytes = Number.parseInt(response.headers.get(PROXY_RESP_REMAINING_BYTES_HEADER) ?? "0", 10);
+  let upstreamHeaders = {};
+  const rawHeaders = response.headers.get(PROXY_RESP_UPSTREAM_HEADERS_HEADER);
+  if (rawHeaders) {
+    try {
+      const parsed = JSON.parse(rawHeaders);
+      if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+        upstreamHeaders = parsed;
+      }
+    } catch {
+    }
+  }
+  const truncatedRaw = response.headers.get(PROXY_RESP_TRUNCATED_HEADER);
+  const bytes = new Uint8Array(await response.arrayBuffer());
+  return {
+    endpointName,
+    upstreamStatus,
+    upstreamHeaders,
+    effectiveResponseMode,
+    // The streamed path can't echo the request-side clamp decision (it
+    // isn't carried back); the effective mode is authoritative for the
+    // agent and matches what v1 surfaced for an un-clamped call.
+    modeClamped: false,
+    remainingCalls,
+    remainingResponseBytes,
+    ...effectiveResponseMode === "full" && bytes.byteLength > 0 ? { upstreamBodyBase64: Buffer.from(bytes).toString("base64") } : {},
+    ...truncatedRaw === "true" ? { truncated: true } : {}
+  };
+}
 async function tryReadManifest(io2) {
   try {
     const raw = await io2.readFile(AEX_INDEX_PATH);
@@ -3814,7 +3815,6 @@ async function runOutputsCmd(io2, argv) {
 import { resolve as resolvePath3 } from "node:path";
 var NAMESPACE_DOWNLOADERS = {
   outputs: operations_exports.downloadOutputs,
-  logs: operations_exports.downloadLogs,
   events: operations_exports.downloadEvents,
   metadata: operations_exports.downloadMetadata
 };
@@ -3847,7 +3847,7 @@ async function runDownloadCmd(io2, argv) {
   const namespace2 = onlyFlag.value;
   const positional = onlyFlag.remaining.filter((arg) => !arg.startsWith("--"));
   if (positional.length !== 1) {
-    io2.stderr("usage: aex download <run-id> [--only outputs|logs|events|metadata] [--out path] [common flags]\n");
+    io2.stderr("usage: aex download <run-id> [--only outputs|events|metadata] [--out path] [common flags]\n");
     return USAGE_ERR;
   }
   const runId = positional[0];

package/dist/cli.mjs.sha256

@@ -1 +1 @@
-bbc00f3784013aefc17bd7b5253652f3290d1fcdef98a2302d32befb4f6bf2ec  cli.mjs
+2e7ad715af0e691bcc91e7f403c611f03d6e9a1e0566889dd32fd4b956b71779  cli.mjs

package/dist/host/download.js

@@ -3,14 +3,11 @@
  * a run's content as a zip, assembled client-side from the public read
  * endpoints (no per-output id required).
  *
- * Without `--only`, downloads EVERYTHING — organised into the four
- * namespace folders `metadata/run.json`, typed `events/events.jsonl`,
- * optional `events/logs.jsonl` / `events/all.jsonl` when the event API
- * serves channel opt-ins, `outputs/<rel>` (deliverables), `logs/<rel>`
- * (the `.anthropic-debug/` / `.goose-logs/` / `.fly-logs/` diagnostics)
- * — plus `manifest.json`.
+ * Without `--only`, downloads everything public — organised into
+ * `metadata/run.json`, typed `events/events.jsonl`, `outputs/<rel>`
+ * (deliverables), plus `manifest.json`.
  *
- * `--only outputs|logs|events|metadata` downloads just that one
+ * `--only outputs|events|metadata` downloads just that one
  * namespace (files at the zip root).
  *
  * `--out` resolves relative to the host CWD; if omitted the file is
@@ -22,7 +19,6 @@ import { operations } from "@aexhq/contracts";
 import { SUCCESS, USAGE_ERR, emitJsonError, makeHttpClient, parseCommonHostFlags, refuseInsideManagedRun, takeFlagValue } from "./common.js";
 const NAMESPACE_DOWNLOADERS = {
     outputs: operations.downloadOutputs,
-    logs: operations.downloadLogs,
     events: operations.downloadEvents,
     metadata: operations.downloadMetadata
 };
@@ -51,7 +47,7 @@ export async function runDownloadCmd(io, argv) {
     const namespace = onlyFlag.value;
     const positional = onlyFlag.remaining.filter((arg) => !arg.startsWith("--"));
     if (positional.length !== 1) {
-        io.stderr("usage: aex download <run-id> [--only outputs|logs|events|metadata] [--out path] [common flags]\n");
+        io.stderr("usage: aex download <run-id> [--only outputs|events|metadata] [--out path] [common flags]\n");
         return USAGE_ERR;
     }
     const runId = positional[0];

package/dist/host/download.js.map

@@ -1 +1 @@
-{"version":3,"file":"download.js","sourceRoot":"","sources":["../../src/host/download.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAEL,OAAO,EACP,SAAS,EACT,aAAa,EACb,cAAc,EACd,oBAAoB,EACpB,sBAAsB,EACtB,aAAa,EACd,MAAM,aAAa,CAAC;AAIrB,MAAM,qBAAqB,GAAG;IAC5B,OAAO,EAAE,UAAU,CAAC,eAAe;IACnC,IAAI,EAAE,UAAU,CAAC,YAAY;IAC7B,MAAM,EAAE,UAAU,CAAC,cAAc;IACjC,QAAQ,EAAE,UAAU,CAAC,gBAAgB;CACkB,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAS,EAAE,IAAuB;IACrE,IAAI,MAAM,sBAAsB,CAAC,EAAE,EAAE,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IAEnE,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,EAAE,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,EAAE,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,EAAE,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;QACjC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,qBAAqB,CAAC,EAAE,CAAC;QAC1E,EAAE,CAAC,MAAM,CAAC,0BAA0B,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAyB,CAAC;IAErD,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,MAAM,CAAC,kGAAkG,CAAC,CAAC;QAC9G,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;IAE7B,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;IAEtF,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,EAAE,EAAE,iBAAiB,EAAG,GAAa,CAAC,OAAO,IAAI,iBAAiB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,EAAE,EAAE,cAAc,EAAE,4BAA6B,GAAa,CAAC,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAClH,CAAC;IAED,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,IAAI,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACvH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,EAAS,EAAE,GAAkB,EAAE,KAAa,EAAE,SAA2B;IACnG,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,OAAO,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,WAAW,KAAK,GAAG,MAAM,MAAM,CAAC,CAAC;AAChE,CAAC"}
+{"version":3,"file":"download.js","sourceRoot":"","sources":["../../src/host/download.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAEL,OAAO,EACP,SAAS,EACT,aAAa,EACb,cAAc,EACd,oBAAoB,EACpB,sBAAsB,EACtB,aAAa,EACd,MAAM,aAAa,CAAC;AAIrB,MAAM,qBAAqB,GAAG;IAC5B,OAAO,EAAE,UAAU,CAAC,eAAe;IACnC,MAAM,EAAE,UAAU,CAAC,cAAc;IACjC,QAAQ,EAAE,UAAU,CAAC,gBAAgB;CACkB,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAS,EAAE,IAAuB;IACrE,IAAI,MAAM,sBAAsB,CAAC,EAAE,EAAE,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IAEnE,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,EAAE,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,EAAE,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QACnB,EAAE,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC;QACjC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,qBAAqB,CAAC,EAAE,CAAC;QAC1E,EAAE,CAAC,MAAM,CAAC,0BAA0B,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAyB,CAAC;IAErD,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,MAAM,CAAC,6FAA6F,CAAC,CAAC;QACzG,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;IAE7B,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC;IAEtF,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,EAAE,EAAE,iBAAiB,EAAG,GAAa,CAAC,OAAO,IAAI,iBAAiB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACtG,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC5E,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,EAAE,EAAE,cAAc,EAAE,4BAA6B,GAAa,CAAC,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAClH,CAAC;IAED,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,IAAI,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACvH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,kBAAkB,CAAC,EAAS,EAAE,GAAkB,EAAE,KAAa,EAAE,SAA2B;IACnG,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,OAAO,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,WAAW,KAAK,GAAG,MAAM,MAAM,CAAC,CAAC;AAChE,CAAC"}

package/dist/proxy.js

@@ -7,7 +7,7 @@
  * This file was extracted from run.ts when the host-side subcommands
  * (run/status/events/outputs/download/cancel/whoami) were added.
  */
-import { PROXY_PROTOCOL_HEADER, PROXY_PROTOCOL_VERSION, PROXY_METHOD_HEADER, PROXY_PATH_HEADER, PROXY_QUERY_HEADER, PROXY_HEADERS_HEADER, PROXY_RESPONSE_MODE_HEADER, PROXY_RESPONSE_MODES } from "@aexhq/contracts";
+import { PROXY_PROTOCOL_HEADER, PROXY_PROTOCOL_VERSION_V2, PROXY_METHOD_HEADER, PROXY_PATH_HEADER, PROXY_QUERY_HEADER, PROXY_HEADERS_HEADER, PROXY_RESPONSE_MODE_HEADER, PROXY_RESPONSE_MODES, PROXY_RESP_MODE_HEADER, PROXY_RESP_REMAINING_BYTES_HEADER, PROXY_RESP_REMAINING_CALLS_HEADER, PROXY_RESP_STATUS_HEADER, PROXY_RESP_TRUNCATED_HEADER, PROXY_RESP_UPSTREAM_HEADERS_HEADER } from "@aexhq/contracts";
 import { AEX_INDEX_PATH, AEX_RUN_TOKEN_PATH } from "./internal.js";
 import { SUCCESS, USAGE_ERR, RUNTIME_ERR } from "./host/common.js";
 function parseProxyFlags(rest) {
@@ -167,7 +167,7 @@ export async function runProxy(io, rest) {
     const url = `${manifest.proxyBaseUrl.replace(/\/+$/, "")}/${encodeURIComponent(f.endpointName)}`;
     const requestHeaders = new Headers();
     requestHeaders.set("authorization", `Bearer ${token}`);
-    requestHeaders.set(PROXY_PROTOCOL_HEADER, PROXY_PROTOCOL_VERSION);
+    requestHeaders.set(PROXY_PROTOCOL_HEADER, PROXY_PROTOCOL_VERSION_V2);
     requestHeaders.set(PROXY_METHOD_HEADER, f.method.toUpperCase());
     requestHeaders.set(PROXY_PATH_HEADER, f.path);
     if (f.query) {
@@ -202,6 +202,17 @@ export async function runProxy(io, rest) {
         });
         return RUNTIME_ERR;
     }
+    // v2 streamed success: the Worker carries the envelope metadata in the
+    // x-aex-proxy-* response headers and streams the (already byte-capped)
+    // body. Reconstruct the same ProxyResponseEnvelope JSON the agent saw
+    // under v1 so the stdout contract is unchanged. A BFF-level error (e.g.
+    // unsupported_protocol, policy_denied) still returns a JSON error body
+    // with no status header, so it falls through to the JSON path below.
+    if (response.headers.get(PROXY_RESP_STATUS_HEADER) !== null) {
+        const envelope = await readStreamedEnvelope(response, f.endpointName);
+        io.stdout(JSON.stringify(envelope) + "\n");
+        return SUCCESS;
+    }
     const text = await response.text();
     let parsedBody;
     try {
@@ -244,6 +255,51 @@ async function resolveBody(io, spec) {
 function emitError(io, body) {
     io.stderr(JSON.stringify(body) + "\n");
 }
+/**
+ * Reassemble a {@link ProxyResponseEnvelope} from a v2 streamed response.
+ * The Worker has already enforced the byte-cap, so reading the body to the
+ * end here is bounded by `maxResponseBytes` — the OOM risk lived on the
+ * Worker isolate, not in this per-call container process.
+ */
+async function readStreamedEnvelope(response, endpointName) {
+    const effectiveResponseMode = (response.headers.get(PROXY_RESP_MODE_HEADER) ??
+        "headers_only");
+    const upstreamStatus = Number.parseInt(response.headers.get(PROXY_RESP_STATUS_HEADER) ?? "0", 10);
+    const remainingCalls = Number.parseInt(response.headers.get(PROXY_RESP_REMAINING_CALLS_HEADER) ?? "0", 10);
+    const remainingResponseBytes = Number.parseInt(response.headers.get(PROXY_RESP_REMAINING_BYTES_HEADER) ?? "0", 10);
+    let upstreamHeaders = {};
+    const rawHeaders = response.headers.get(PROXY_RESP_UPSTREAM_HEADERS_HEADER);
+    if (rawHeaders) {
+        try {
+            const parsed = JSON.parse(rawHeaders);
+            if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+                upstreamHeaders = parsed;
+            }
+        }
+        catch {
+            // The metadata header is Worker-controlled; a malformed value is a
+            // protocol bug, not agent input. Degrade to empty rather than crash.
+        }
+    }
+    const truncatedRaw = response.headers.get(PROXY_RESP_TRUNCATED_HEADER);
+    const bytes = new Uint8Array(await response.arrayBuffer());
+    return {
+        endpointName,
+        upstreamStatus,
+        upstreamHeaders,
+        effectiveResponseMode,
+        // The streamed path can't echo the request-side clamp decision (it
+        // isn't carried back); the effective mode is authoritative for the
+        // agent and matches what v1 surfaced for an un-clamped call.
+        modeClamped: false,
+        remainingCalls,
+        remainingResponseBytes,
+        ...(effectiveResponseMode === "full" && bytes.byteLength > 0
+            ? { upstreamBodyBase64: Buffer.from(bytes).toString("base64") }
+            : {}),
+        ...(truncatedRaw === "true" ? { truncated: true } : {})
+    };
+}
 export async function tryReadManifest(io) {
     try {
         const raw = await io.readFile(AEX_INDEX_PATH);

package/dist/proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EAGrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAc,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAoB,MAAM,kBAAkB,CAAC;AAarF,SAAS,eAAe,CAAC,IAAuB;IAC9C,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACrB,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACvB,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YACnC,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YACrC,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;YACzC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,EAAE,IAAI,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;YACpF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,iBAAiB,EAAE,CAAC;YAC9B,YAAY,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,GAAG,EAAE,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,YAAY,GAAG,GAAG,CAAC;YACnB,SAAS;QACX,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,GAAG,EAAE,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,CAAC;AAC/G,CAAC;AAED,SAAS,MAAM,CAAC,GAAsB,EAAE,GAAW,EAAE,IAAY;IAC/D,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QACpB,MAAM,IAAI,aAAa,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,aAAc,SAAQ,KAAK;CAAG;AAEpC,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAS;IAC5C,EAAE,CAAC,MAAM,CAAC,uEAAuE,CAAC,CAAC;IACnF,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtB,EAAE,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC;IACrD,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtB,EAAE,CAAC,MAAM,CAAC,yDAAyD,CAAC,CAAC;IACrE,EAAE,CAAC,MAAM,CAAC,+EAA+E,CAAC,CAAC;IAC3F,EAAE,CAAC,MAAM,CAAC,mFAAmF,CAAC,CAAC;IAC/F,EAAE,CAAC,MAAM,CAAC,+DAA+D,CAAC,CAAC;IAC3E,EAAE,CAAC,MAAM,CAAC,0FAA0F,CAAC,CAAC;IACtG,EAAE,CAAC,MAAM,CAAC,yFAAyF,CAAC,CAAC;IACrG,EAAE,CAAC,MAAM,CAAC,kDAAkD,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACnC,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACpC,EAAE,CAAC,MAAM,CACP,OAAO,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,YAAY,YAAY,EAAE,CAAC,aAAa,SAAS,CAC7I,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,EAAS,EAAE,IAAuB;IAC/D,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;YACjC,EAAE,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,EAAE,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;IACvB,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,MAAM,cAAc,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;QACpB,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACrC,EAAE,CAAC,MAAM,CAAC,4CAA4C,CAAC,CAAC;QACxD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,CAAC,YAAY,IAAI,CAAE,oBAA0C,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5F,EAAE,CAAC,MAAM,CAAC,mCAAmC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,SAAS,CAAC,EAAE,EAAE;YACZ,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,mEAAmE;SAC7E,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC3B,SAAS,CAAC,EAAE,EAAE;YACZ,KAAK,EAAE,oBAAoB;YAC3B,OAAO,EAAE,0CAA0C;YACnD,YAAY,EAAE,CAAC,CAAC,YAAY;SAC7B,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,CAAC,EAAE,EAAE;YACZ,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACxE,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,IAA4B,CAAC;IACjC,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,EAAE,CAAC,MAAM,CAAC,gCAAiC,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;YACtE,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;IACjG,MAAM,cAAc,GAAG,IAAI,OAAO,EAAE,CAAC;IACrC,cAAc,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;IACvD,cAAc,CAAC,GAAG,CAAC,qBAAqB,EAAE,sBAAsB,CAAC,CAAC;IAClE,cAAc,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAChE,cAAc,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,cAAc,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACvB,cAAc,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;QACnB,cAAc,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,cAAc,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,IAAI,GAAgB;QACxB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,QAAQ;KACnB,CAAC;IACF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,SAAS,CAAC,EAAE,EAAE;YACZ,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,yBAA0B,GAAa,CAAC,OAAO,EAAE;YAC1D,YAAY,EAAE,CAAC,CAAC,YAAY;SAC7B,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,UAAmB,CAAC;IACxB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;QAC9D,kEAAkE;QAClE,+DAA+D;QAC/D,qDAAqD;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/D,SAAS,CAAC,EAAE,EAAE;YACZ,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,0CAA0C,QAAQ,CAAC,MAAM,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG;YACtG,YAAY,EAAE,CAAC,CAAC,YAAY;SAC7B,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,EAAS,EAAE,IAAY;IAChD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7C,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,SAAS,CAAC,EAAS,EAAE,IAAoB;IAChD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAS;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../src/proxy.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,sBAAsB,EACtB,iCAAiC,EACjC,iCAAiC,EACjC,wBAAwB,EACxB,2BAA2B,EAC3B,kCAAkC,EAKnC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAc,MAAM,eAAe,CAAC;AAC/E,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAoB,MAAM,kBAAkB,CAAC;AAarF,SAAS,eAAe,CAAC,IAAuB;IAC9C,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACrB,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACrC,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACvB,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YACnC,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YACrC,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACvB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;YACzC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,EAAE,IAAI,CAAC;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;YACpF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7D,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,QAAQ,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,iBAAiB,EAAE,CAAC;YAC9B,YAAY,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAC;YACpD,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,GAAG,EAAE,EAAE,CAAC;QACvD,CAAC;QACD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,YAAY,GAAG,GAAG,CAAC;YACnB,SAAS;QACX,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,GAAG,EAAE,EAAE,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,CAAC;AAC/G,CAAC;AAED,SAAS,MAAM,CAAC,GAAsB,EAAE,GAAW,EAAE,IAAY;IAC/D,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QACpB,MAAM,IAAI,aAAa,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,aAAc,SAAQ,KAAK;CAAG;AAEpC,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EAAS;IAC5C,EAAE,CAAC,MAAM,CAAC,uEAAuE,CAAC,CAAC;IACnF,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtB,EAAE,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC;IACrD,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtB,EAAE,CAAC,MAAM,CAAC,yDAAyD,CAAC,CAAC;IACrE,EAAE,CAAC,MAAM,CAAC,+EAA+E,CAAC,CAAC;IAC3F,EAAE,CAAC,MAAM,CAAC,mFAAmF,CAAC,CAAC;IAC/F,EAAE,CAAC,MAAM,CAAC,+DAA+D,CAAC,CAAC;IAC3E,EAAE,CAAC,MAAM,CAAC,0FAA0F,CAAC,CAAC;IACtG,EAAE,CAAC,MAAM,CAAC,yFAAyF,CAAC,CAAC;IACrG,EAAE,CAAC,MAAM,CAAC,kDAAkD,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,EAAE,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;QACnC,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACpC,EAAE,CAAC,MAAM,CACP,OAAO,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,YAAY,YAAY,EAAE,CAAC,aAAa,SAAS,CAC7I,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,EAAS,EAAE,IAAuB;IAC/D,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;YACjC,EAAE,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YAC9B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,EAAE,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC;IACvB,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,MAAM,cAAc,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC;QACpB,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACrC,EAAE,CAAC,MAAM,CAAC,4CAA4C,CAAC,CAAC;QACxD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,CAAC,YAAY,IAAI,CAAE,oBAA0C,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5F,EAAE,CAAC,MAAM,CAAC,mCAAmC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,SAAS,CAAC,EAAE,EAAE;YACZ,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,mEAAmE;SAC7E,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC3B,SAAS,CAAC,EAAE,EAAE;YACZ,KAAK,EAAE,oBAAoB;YAC3B,OAAO,EAAE,0CAA0C;YACnD,YAAY,EAAE,CAAC,CAAC,YAAY;SAC7B,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS,CAAC,EAAE,EAAE;YACZ,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACxE,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,IAA4B,CAAC;IACjC,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,EAAE,CAAC,MAAM,CAAC,gCAAiC,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;YACtE,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC;IACjG,MAAM,cAAc,GAAG,IAAI,OAAO,EAAE,CAAC;IACrC,cAAc,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;IACvD,cAAc,CAAC,GAAG,CAAC,qBAAqB,EAAE,yBAAyB,CAAC,CAAC;IACrE,cAAc,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAChE,cAAc,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,cAAc,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACvB,cAAc,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;QACnB,cAAc,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,cAAc,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,IAAI,GAAgB;QACxB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,QAAQ;KACnB,CAAC;IACF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,SAAS,CAAC,EAAE,EAAE;YACZ,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,yBAA0B,GAAa,CAAC,OAAO,EAAE;YAC1D,YAAY,EAAE,CAAC,CAAC,YAAY;SAC7B,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,uEAAuE;IACvE,uEAAuE;IACvE,sEAAsE;IACtE,wEAAwE;IACxE,uEAAuE;IACvE,qEAAqE;IACrE,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5D,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC;QACtE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3C,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,UAAmB,CAAC;IACxB,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;QAC9D,kEAAkE;QAClE,+DAA+D;QAC/D,qDAAqD;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/D,SAAS,CAAC,EAAE,EAAE;YACZ,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE,0CAA0C,QAAQ,CAAC,MAAM,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG;YACtG,YAAY,EAAE,CAAC,CAAC,YAAY;SAC7B,CAAC,CAAC;QACH,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,EAAS,EAAE,IAAY;IAChD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC7C,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,SAAS,CAAC,EAAS,EAAE,IAAoB;IAChD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CACjC,QAAkB,EAClB,YAAoB;IAEpB,MAAM,qBAAqB,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QACzE,cAAc,CAAsB,CAAC;IACvC,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IAClG,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CACpC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,IAAI,GAAG,EAC9D,EAAE,CACH,CAAC;IACF,MAAM,sBAAsB,GAAG,MAAM,CAAC,QAAQ,CAC5C,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,IAAI,GAAG,EAC9D,EAAE,CACH,CAAC;IACF,IAAI,eAAe,GAA2B,EAAE,CAAC;IACjD,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAC5E,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnE,eAAe,GAAG,MAAgC,CAAC;YACrD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,qEAAqE;QACvE,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAE3D,OAAO;QACL,YAAY;QACZ,cAAc;QACd,eAAe;QACf,qBAAqB;QACrB,mEAAmE;QACnE,mEAAmE;QACnE,6DAA6D;QAC7D,WAAW,EAAE,KAAK;QAClB,cAAc;QACd,sBAAsB;QACtB,GAAG,CAAC,qBAAqB,KAAK,MAAM,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC;YAC1D,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAC/D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAS;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aexhq/cli",
-  "version": "0.13.6",
+  "version": "0.13.8",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/aexhq/aex.git"
@@ -27,13 +27,13 @@
   },
   "dependencies": {
     "fflate": "^0.8.2",
-    "@aexhq/contracts": "0.13.6"
+    "@aexhq/contracts": "0.13.8"
   },
   "devDependencies": {
     "esbuild": "^0.28.0"
   },
   "scripts": {
-    "build": "tsc -p tsconfig.build.json && node ./scripts/finalize-bundle.mjs",
+    "build": "pnpm --filter @aexhq/contracts run build && tsc -p tsconfig.build.json && node ./scripts/finalize-bundle.mjs",
     "lint": "tsc --noEmit -p tsconfig.json",
     "pretest": "pnpm run build",
     "test": "pnpm test:unit",

package/src/host/download.ts

@@ -3,14 +3,11 @@
  * a run's content as a zip, assembled client-side from the public read
  * endpoints (no per-output id required).
  *
- * Without `--only`, downloads EVERYTHING — organised into the four
- * namespace folders `metadata/run.json`, typed `events/events.jsonl`,
- * optional `events/logs.jsonl` / `events/all.jsonl` when the event API
- * serves channel opt-ins, `outputs/<rel>` (deliverables), `logs/<rel>`
- * (the `.anthropic-debug/` / `.goose-logs/` / `.fly-logs/` diagnostics)
- * — plus `manifest.json`.
+ * Without `--only`, downloads everything public — organised into
+ * `metadata/run.json`, typed `events/events.jsonl`, `outputs/<rel>`
+ * (deliverables), plus `manifest.json`.
  *
- * `--only outputs|logs|events|metadata` downloads just that one
+ * `--only outputs|events|metadata` downloads just that one
  * namespace (files at the zip root).
  *
  * `--out` resolves relative to the host CWD; if omitted the file is
@@ -31,11 +28,10 @@ import {
   takeFlagValue
 } from "./common.js";
 
-type Namespace = "outputs" | "logs" | "events" | "metadata";
+type Namespace = "outputs" | "events" | "metadata";
 
 const NAMESPACE_DOWNLOADERS = {
   outputs: operations.downloadOutputs,
-  logs: operations.downloadLogs,
   events: operations.downloadEvents,
   metadata: operations.downloadMetadata
 } satisfies Record<Namespace, typeof operations.download>;
@@ -66,7 +62,7 @@ export async function runDownloadCmd(io: CliIO, argv: readonly string[]): Promis
 
   const positional = onlyFlag.remaining.filter((arg) => !arg.startsWith("--"));
   if (positional.length !== 1) {
-    io.stderr("usage: aex download <run-id> [--only outputs|logs|events|metadata] [--out path] [common flags]\n");
+    io.stderr("usage: aex download <run-id> [--only outputs|events|metadata] [--out path] [common flags]\n");
     return USAGE_ERR;
   }
   const runId = positional[0]!;

package/src/proxy.ts

@@ -9,15 +9,23 @@
  */
 import {
   PROXY_PROTOCOL_HEADER,
-  PROXY_PROTOCOL_VERSION,
+  PROXY_PROTOCOL_VERSION_V2,
   PROXY_METHOD_HEADER,
   PROXY_PATH_HEADER,
   PROXY_QUERY_HEADER,
   PROXY_HEADERS_HEADER,
   PROXY_RESPONSE_MODE_HEADER,
   PROXY_RESPONSE_MODES,
+  PROXY_RESP_MODE_HEADER,
+  PROXY_RESP_REMAINING_BYTES_HEADER,
+  PROXY_RESP_REMAINING_CALLS_HEADER,
+  PROXY_RESP_STATUS_HEADER,
+  PROXY_RESP_TRUNCATED_HEADER,
+  PROXY_RESP_UPSTREAM_HEADERS_HEADER,
   type ProxyErrorBody,
-  type ProxyIndexFile
+  type ProxyIndexFile,
+  type ProxyResponseEnvelope,
+  type ProxyResponseMode
 } from "@aexhq/contracts";
 import { AEX_INDEX_PATH, AEX_RUN_TOKEN_PATH, type CliIO } from "./internal.js";
 import { SUCCESS, USAGE_ERR, RUNTIME_ERR, type CliExitCode } from "./host/common.js";
@@ -196,7 +204,7 @@ export async function runProxy(io: CliIO, rest: readonly string[]): Promise<CliE
   const url = `${manifest.proxyBaseUrl.replace(/\/+$/, "")}/${encodeURIComponent(f.endpointName)}`;
   const requestHeaders = new Headers();
   requestHeaders.set("authorization", `Bearer ${token}`);
-  requestHeaders.set(PROXY_PROTOCOL_HEADER, PROXY_PROTOCOL_VERSION);
+  requestHeaders.set(PROXY_PROTOCOL_HEADER, PROXY_PROTOCOL_VERSION_V2);
   requestHeaders.set(PROXY_METHOD_HEADER, f.method.toUpperCase());
   requestHeaders.set(PROXY_PATH_HEADER, f.path);
   if (f.query) {
@@ -233,6 +241,18 @@ export async function runProxy(io: CliIO, rest: readonly string[]): Promise<CliE
     return RUNTIME_ERR;
   }
 
+  // v2 streamed success: the Worker carries the envelope metadata in the
+  // x-aex-proxy-* response headers and streams the (already byte-capped)
+  // body. Reconstruct the same ProxyResponseEnvelope JSON the agent saw
+  // under v1 so the stdout contract is unchanged. A BFF-level error (e.g.
+  // unsupported_protocol, policy_denied) still returns a JSON error body
+  // with no status header, so it falls through to the JSON path below.
+  if (response.headers.get(PROXY_RESP_STATUS_HEADER) !== null) {
+    const envelope = await readStreamedEnvelope(response, f.endpointName);
+    io.stdout(JSON.stringify(envelope) + "\n");
+    return SUCCESS;
+  }
+
   const text = await response.text();
   let parsedBody: unknown;
   try {
@@ -278,6 +298,61 @@ function emitError(io: CliIO, body: ProxyErrorBody): void {
   io.stderr(JSON.stringify(body) + "\n");
 }
 
+/**
+ * Reassemble a {@link ProxyResponseEnvelope} from a v2 streamed response.
+ * The Worker has already enforced the byte-cap, so reading the body to the
+ * end here is bounded by `maxResponseBytes` — the OOM risk lived on the
+ * Worker isolate, not in this per-call container process.
+ */
+async function readStreamedEnvelope(
+  response: Response,
+  endpointName: string
+): Promise<ProxyResponseEnvelope> {
+  const effectiveResponseMode = (response.headers.get(PROXY_RESP_MODE_HEADER) ??
+    "headers_only") as ProxyResponseMode;
+  const upstreamStatus = Number.parseInt(response.headers.get(PROXY_RESP_STATUS_HEADER) ?? "0", 10);
+  const remainingCalls = Number.parseInt(
+    response.headers.get(PROXY_RESP_REMAINING_CALLS_HEADER) ?? "0",
+    10
+  );
+  const remainingResponseBytes = Number.parseInt(
+    response.headers.get(PROXY_RESP_REMAINING_BYTES_HEADER) ?? "0",
+    10
+  );
+  let upstreamHeaders: Record<string, string> = {};
+  const rawHeaders = response.headers.get(PROXY_RESP_UPSTREAM_HEADERS_HEADER);
+  if (rawHeaders) {
+    try {
+      const parsed = JSON.parse(rawHeaders);
+      if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
+        upstreamHeaders = parsed as Record<string, string>;
+      }
+    } catch {
+      // The metadata header is Worker-controlled; a malformed value is a
+      // protocol bug, not agent input. Degrade to empty rather than crash.
+    }
+  }
+  const truncatedRaw = response.headers.get(PROXY_RESP_TRUNCATED_HEADER);
+  const bytes = new Uint8Array(await response.arrayBuffer());
+
+  return {
+    endpointName,
+    upstreamStatus,
+    upstreamHeaders,
+    effectiveResponseMode,
+    // The streamed path can't echo the request-side clamp decision (it
+    // isn't carried back); the effective mode is authoritative for the
+    // agent and matches what v1 surfaced for an un-clamped call.
+    modeClamped: false,
+    remainingCalls,
+    remainingResponseBytes,
+    ...(effectiveResponseMode === "full" && bytes.byteLength > 0
+      ? { upstreamBodyBase64: Buffer.from(bytes).toString("base64") }
+      : {}),
+    ...(truncatedRaw === "true" ? { truncated: true } : {})
+  };
+}
+
 export async function tryReadManifest(io: CliIO): Promise<ProxyIndexFile | null> {
   try {
     const raw = await io.readFile(AEX_INDEX_PATH);

package/test/cli.test.ts

@@ -1,5 +1,5 @@
 import { describe, expect, it, vi } from "vitest";
-import { PROXY_PROTOCOL_VERSION } from "@aexhq/contracts";
+import { PROXY_PROTOCOL_VERSION, PROXY_PROTOCOL_VERSION_V2 } from "@aexhq/contracts";
 import { runCli } from "../src/run.js";
 import { AEX_INDEX_PATH, AEX_RUN_TOKEN_PATH, type CliIO } from "../src/internal.js";
 
@@ -228,13 +228,48 @@ describe("aex proxy — successful call", () => {
     expect(call.url).toBe("https://dash.example.com/api/runs/run-1/proxy/stripe");
     const headers = new Headers((call.init as RequestInit).headers);
     expect(headers.get("authorization")).toBe("Bearer bearer-xyz");
-    expect(headers.get("x-aex-proxy-protocol")).toBe(PROXY_PROTOCOL_VERSION);
+    expect(headers.get("x-aex-proxy-protocol")).toBe(PROXY_PROTOCOL_VERSION_V2);
     expect(headers.get("x-aex-method")).toBe("POST");
     expect(headers.get("x-aex-path")).toBe("/v1/refunds");
     const body = JSON.parse(cap.stdout.trim());
     expect(body.upstreamStatus).toBe(200);
   });
 
+  it("reconstructs the envelope from a v2 streamed response (headers + raw body)", async () => {
+    const upstreamPayload = JSON.stringify({ streamed: true });
+    const cap = makeIo({
+      argv: ["proxy", "stripe", "--method", "POST", "--path", "/v1/refunds", "--response-mode", "full"],
+      files: {
+        [AEX_INDEX_PATH]: manifestJson({ endpoints: [{ name: "stripe", allowMethods: ["POST"] }] }),
+        [AEX_RUN_TOKEN_PATH]: "bearer-xyz"
+      },
+      // Mirror the Worker v2 streamed response: raw upstream body + the
+      // x-aex-proxy-* metadata headers (no JSON envelope, no base64).
+      fetchHandler: async () =>
+        new Response(upstreamPayload, {
+          status: 200,
+          headers: {
+            "x-aex-proxy-status": "200",
+            "x-aex-proxy-effective-mode": "full",
+            "x-aex-proxy-truncated": "false",
+            "x-aex-proxy-remaining-calls": "59",
+            "x-aex-proxy-remaining-bytes": "999000",
+            "x-aex-proxy-upstream-headers": JSON.stringify({ "content-type": "application/json" }),
+            "content-type": "application/octet-stream"
+          }
+        })
+    });
+    await runCli(cap.io);
+    expect(cap.exitCode).toBe(0);
+    const body = JSON.parse(cap.stdout.trim());
+    expect(body.upstreamStatus).toBe(200);
+    expect(body.effectiveResponseMode).toBe("full");
+    expect(body.remainingCalls).toBe(59);
+    expect(body.upstreamHeaders["content-type"]).toBe("application/json");
+    // Body round-trips through the same base64 field v1 used.
+    expect(Buffer.from(body.upstreamBodyBase64, "base64").toString("utf8")).toBe(upstreamPayload);
+  });
+
   it("forwards --header K=V via the X-Aex-Headers JSON record", async () => {
     let captured: Headers | null = null;
     const cap = makeIo({

package/test/host.test.ts

@@ -446,9 +446,7 @@ describe("aex cancel + delete", () => {
 
 describe("aex download", () => {
   // Route the reads the download verbs fan out to: getRun + listEvents +
-  // listOutputs + listLogs + per-artifact /download. The run has one
-  // deliverable (report.txt in the outputs namespace) and one legacy-named
-  // diagnostic in the logs namespace.
+  // listOutputs + per-output /download.
   const json = (body: unknown) =>
     new Response(JSON.stringify(body), { status: 200, headers: { "content-type": "application/json" } });
   const wholeRunHandler =
@@ -458,19 +456,13 @@ describe("aex download", () => {
       if (url.endsWith(`/api/runs/${runId}/outputs`)) {
         return json({ outputs: [{ id: "o1", filename: "report.txt", sizeBytes: 5, contentType: "text/plain" }] });
       }
-      if (url.endsWith(`/api/runs/${runId}/logs`)) {
-        return json({ logs: [{ id: "o2", filename: "goose-logs/stderr.log", sizeBytes: 3, contentType: "text/plain" }] });
-      }
       if (url.endsWith(`/api/runs/${runId}/outputs/o1/download`)) {
         return new Response(strToU8("hello").buffer, { status: 200, headers: { "content-type": "text/plain" } });
       }
-      if (url.endsWith(`/api/runs/${runId}/logs/o2/download`)) {
-        return new Response(strToU8("err").buffer, { status: 200, headers: { "content-type": "text/plain" } });
-      }
       return json({ id: runId, status: "succeeded" });
     };
 
-  it("assembles the whole-run zip client-side (four namespace folders) and writes it to --out", async () => {
+  it("assembles the public whole-run zip client-side and writes it to --out", async () => {
     const writes = new Map<string, Uint8Array>();
     const cap = makeHostIo({
       argv: ["download", "run-1", "--out", "run-1.zip", ...COMMON],
@@ -479,16 +471,14 @@ describe("aex download", () => {
     });
     await runCli(cap.io);
     expect(cap.exitCode).toBe(0);
-    // getRun + events + optional log/all event reads + outputs + logs +
-    // two per-artifact downloads.
-    expect(cap.calls).toHaveLength(8);
+    // getRun + events + outputs + one per-output download.
+    expect(cap.calls).toHaveLength(4);
 
     const writtenKey = [...writes.keys()][0]!;
     expect(writtenKey).toMatch(/run-1\.zip$/);
     const entries = unzipSync(writes.get(writtenKey)!);
     expect(Object.keys(entries).sort()).toEqual([
       "events/events.jsonl",
-      "logs/runtime/stderr.log",
       "manifest.json",
       "metadata/run.json",
       "outputs/report.txt"
@@ -532,17 +522,15 @@ describe("aex download", () => {
     expect((JSON.parse(cap.stdout.trim()) as { namespace: string }).namespace).toBe("outputs");
   });
 
-  it("--only logs zips just the diagnostics", async () => {
-    const writes = new Map<string, Uint8Array>();
+  it("rejects --only logs with a usage error", async () => {
     const cap = makeHostIo({
       argv: ["download", "run-1", "--only", "logs", ...COMMON],
-      writes,
       fetchHandler: wholeRunHandler("run-1")
     });
     await runCli(cap.io);
-    expect(cap.exitCode).toBe(0);
-    const entries = unzipSync(writes.get([...writes.keys()][0]!)!);
-    expect(Object.keys(entries).sort()).toEqual(["manifest.json", "runtime/stderr.log"]);
+    expect(cap.exitCode).toBe(2);
+    expect(cap.stderr).toContain("--only must be one of");
+    expect(cap.calls).toHaveLength(0);
   });
 
   it("--only metadata reads only the run record", async () => {
@@ -1031,14 +1019,14 @@ describe("aex skills", () => {
             JSON.stringify({
               ok: true,
               skillId: "skl_cli_42",
-              uploadUrl: "https://acct.r2.cloudflarestorage.com/bucket/assets/ws/hash?X-Amz-Signature=sig",
+              uploadUrl: "https://object-storage.example.test/bucket/assets/ws/hash?X-Amz-Signature=sig",
               requiredHeaders: { "x-amz-checksum-sha256": "Y2hlY2tzdW0=" },
               expiresInSeconds: 300
             }),
             { status: 201, headers: { "content-type": "application/json" } }
           );
         }
-        if (call.url.includes("r2.cloudflarestorage.com")) {
+        if (call.url.includes("object-storage.example.test")) {
           return new Response("", { status: 200 }); // object storage accepts the direct PUT
         }
         if (call.url.endsWith("/api/skills/skl_cli_42/finalize")) {
@@ -1058,11 +1046,11 @@ describe("aex skills", () => {
       expect(cap.exitCode).toBe(0);
       const urls = cap.calls.map((c) => c.url);
       expect(urls).toContain("https://dash.example/api/skills/presign");
-      expect(urls.some((u) => u.includes("r2.cloudflarestorage.com"))).toBe(true);
+      expect(urls.some((u) => u.includes("object-storage.example.test"))).toBe(true);
       expect(urls).toContain("https://dash.example/api/skills/skl_cli_42/finalize");
-      const r2Put = cap.calls.find((c) => c.url.includes("r2.cloudflarestorage.com"))!;
-      expect(r2Put.init.method).toBe("PUT");
-      expect((r2Put.init.headers as Record<string, string>)["x-amz-checksum-sha256"]).toBe("Y2hlY2tzdW0=");
+      const storagePut = cap.calls.find((c) => c.url.includes("object-storage.example.test"))!;
+      expect(storagePut.init.method).toBe("PUT");
+      expect((storagePut.init.headers as Record<string, string>)["x-amz-checksum-sha256"]).toBe("Y2hlY2tzdW0=");
       const printed = JSON.parse(cap.stdout.trim()) as { id: string; name: string };
       expect(printed.id).toBe("skl_cli_42");
       expect(printed.name).toBe("rules-cli");
@@ -1099,7 +1087,7 @@ describe("aex skills", () => {
       const urls = cap.calls.map((c) => c.url);
       expect(urls).toContain("https://dash.example/api/skills/presign");
       expect(urls).toContain("https://dash.example/api/skills");
-      expect(urls.some((u) => u.includes("r2.cloudflarestorage.com"))).toBe(false);
+      expect(urls.some((u) => u.includes("object-storage.example.test"))).toBe(false);
       const printed = JSON.parse(cap.stdout.trim()) as { id: string };
       expect(printed.id).toBe("skl_fb");
     } finally {