@aexhq/sdk 0.15.2 → 0.16.1

package/dist/_contracts/run-unit.js

@@ -20,6 +20,7 @@
  * detail response stays bounded). The archive zip carries the bytes.
  */
 import { parseMcpServerRef, parseSkillRef } from "./run-config.js";
+import { RunModels, parseRunModel } from "./models.js";
 import { PLATFORM_PACKAGE_ECOSYSTEMS } from "./submission.js";
 // ---------------------------------------------------------------------------
 // Submission parser
@@ -29,10 +30,10 @@ import { PLATFORM_PACKAGE_ECOSYSTEMS } from "./submission.js";
  * submission. Never throws on minor unknown keys so we can
  * forward-compat with worker-side enrichment.
  *
- * Returns a typed shape even for malformed snapshots — the worst case
- * is `{kind: "submission", submission: {model: "", ...}}` with empty
- * defaults — because the dashboard must still render *something* for a
- * buggy historical row rather than 500ing the whole detail page.
+ * Returns a typed shape even for malformed snapshots by falling back to the
+ * default public model and empty collection defaults, because the dashboard
+ * must still render *something* for a buggy historical row rather than 500ing
+ * the whole detail page.
  */
 export function parseRunUnitSubmission(input) {
     if (!input || typeof input !== "object" || Array.isArray(input)) {
@@ -52,7 +53,7 @@ function parseFlatProjection(value) {
     const allowedDirs = toOptionalStringArray(outputsRaw.allowedDirs);
     const deniedDirs = toOptionalStringArray(outputsRaw.deniedDirs);
     const submission = {
-        model: typeof submissionRaw.model === "string" ? submissionRaw.model : "",
+        model: coerceRunUnitModel(submissionRaw.model),
         ...(typeof submissionRaw.system === "string" ? { system: submissionRaw.system } : {}),
         prompt: toStringArray(submissionRaw.prompt),
         skills: toSkillRefArray(submissionRaw.skills),
@@ -87,7 +88,7 @@ function fallbackFlat() {
     return {
         kind: "submission",
         submission: {
-            model: "",
+            model: RunModels.CLAUDE_HAIKU_4_5,
             prompt: [],
             skills: [],
             agentsMd: [],
@@ -104,6 +105,16 @@ function fallbackFlat() {
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+function coerceRunUnitModel(value) {
+    if (typeof value !== "string")
+        return RunModels.CLAUDE_HAIKU_4_5;
+    try {
+        return parseRunModel(value, "run unit submission.model");
+    }
+    catch {
+        return RunModels.CLAUDE_HAIKU_4_5;
+    }
+}
 function isJsonRecord(value) {
     return isRecord(value);
 }

package/dist/_contracts/submission.d.ts

@@ -2,6 +2,8 @@ import { PROXY_ENDPOINT_DEFAULTS, type ProxyAuthShape, type ProxyMethod, type Pr
 export { PROXY_ENDPOINT_DEFAULTS };
 import type { AgentsMdRef, FileRef, McpServerRef, SkillRef } from "./run-config.js";
 import { type RuntimeSize } from "./runtime-sizes.js";
+import { type PlatformPostHook, type PlatformPostHookInput } from "./post-hook.js";
+import { type RunModel } from "./models.js";
 import { type RuntimeSecurityProfileName } from "./runtime-security-profile.js";
 import { type CredentialMode, type ManagedKeyPolicyV1 } from "./managed-key.js";
 export type JsonPrimitive = string | number | boolean | null;
@@ -188,8 +190,6 @@ export interface PlatformProxyEndpoint {
     readonly maxRequestBytes?: number;
     readonly maxResponseBytes?: number;
     readonly timeoutMs?: number;
-    readonly perCallBudget?: number;
-    readonly responseByteBudget?: number;
 }
 export declare const SECRETS_KEY = "secrets";
 export declare const PROXY_ENDPOINT_NAME_PATTERN: RegExp;
@@ -228,7 +228,7 @@ export declare function optionalPositiveInt(input: unknown, field: string): numb
  * into `run_skill_snapshots`), provider refs pass through unchanged.
  */
 export interface PlatformSubmission {
-    readonly model: string;
+    readonly model: RunModel;
     readonly system?: string;
     readonly prompt: readonly string[];
     readonly skills: readonly SkillRef[];
@@ -335,6 +335,13 @@ export interface PlatformRunSubmissionRequest {
      * terminal wait window and self-kill deadline.
      */
     readonly timeoutMs?: number;
+    /**
+     * Optional post-agent-run verifier. Parsed from the public `postHook`
+     * duration/string shape into fixed runner budgets. The runner executes it
+     * after a successful agent process and sends failures back through the model
+     * for repair until this budget is exhausted.
+     */
+    readonly postHook?: PlatformPostHook;
 }
 /**
  * Wire shape posted by the SDK and CLI. `workspaceId` is **omitted by
@@ -349,7 +356,7 @@ export interface PlatformRunSubmissionRequest {
  * {@link DEFAULT_RUN_PROVIDER} (`anthropic`). The parser fills it in
  * before the value enters the run snapshot.
  */
-export type PlatformRunSubmissionInput = Omit<PlatformRunSubmissionRequest, "workspaceId" | "credentialMode" | "provider" | "runtime" | "timeoutMs"> & {
+export type PlatformRunSubmissionInput = Omit<PlatformRunSubmissionRequest, "workspaceId" | "credentialMode" | "provider" | "runtime" | "timeoutMs" | "postHook"> & {
     readonly workspaceId?: string;
     readonly credentialMode?: CredentialMode;
     readonly provider?: RunProvider;
@@ -365,6 +372,7 @@ export type PlatformRunSubmissionInput = Omit<PlatformRunSubmissionRequest, "wor
      * {@link PlatformRunSubmissionRequest.timeoutMs}. Absent ⇒ 1h default.
      */
     readonly timeout?: string;
+    readonly postHook?: PlatformPostHookInput;
 };
 export interface ParseRunSubmissionOptions {
     readonly managedKeyPolicy?: ManagedKeyPolicyV1;

package/dist/_contracts/submission.js

@@ -6,6 +6,8 @@ import { authShapeHeaderName, PROXY_ALLOWED_METHODS, PROXY_ENDPOINT_DEFAULTS, PR
 export { PROXY_ENDPOINT_DEFAULTS };
 import { parseAssetRefFields, parseMcpServerRef, parseSkillRef } from "./run-config.js";
 import { parseRunTimeout, parseRuntimeSize } from "./runtime-sizes.js";
+import { parsePostHook } from "./post-hook.js";
+import { assertRunModelMatchesProvider, parseRunModel } from "./models.js";
 import { parseRuntimeSecurityProfile } from "./runtime-security-profile.js";
 import { assertManagedKeyAdmissionAllowed, parseCredentialMode } from "./managed-key.js";
 /**
@@ -323,9 +325,7 @@ function parseProxyEndpoint(input, path) {
         "responseMode",
         "maxRequestBytes",
         "maxResponseBytes",
-        "timeoutMs",
-        "perCallBudget",
-        "responseByteBudget"
+        "timeoutMs"
     ]);
     for (const key of Object.keys(value)) {
         if (!allowed.has(key)) {
@@ -348,8 +348,6 @@ function parseProxyEndpoint(input, path) {
     const maxRequestBytes = optionalPositiveInt(value.maxRequestBytes, `${path}.maxRequestBytes`);
     const maxResponseBytes = optionalPositiveInt(value.maxResponseBytes, `${path}.maxResponseBytes`);
     const timeoutMs = optionalPositiveInt(value.timeoutMs, `${path}.timeoutMs`);
-    const perCallBudget = optionalPositiveInt(value.perCallBudget, `${path}.perCallBudget`);
-    const responseByteBudget = optionalPositiveInt(value.responseByteBudget, `${path}.responseByteBudget`);
     return {
         name,
         baseUrl,
@@ -360,9 +358,7 @@ function parseProxyEndpoint(input, path) {
         ...(responseMode ? { responseMode } : {}),
         ...(maxRequestBytes !== undefined ? { maxRequestBytes } : {}),
         ...(maxResponseBytes !== undefined ? { maxResponseBytes } : {}),
-        ...(timeoutMs !== undefined ? { timeoutMs } : {}),
-        ...(perCallBudget !== undefined ? { perCallBudget } : {}),
-        ...(responseByteBudget !== undefined ? { responseByteBudget } : {})
+        ...(timeoutMs !== undefined ? { timeoutMs } : {})
     };
 }
 function parseProxyBaseUrl(input, field) {
@@ -788,6 +784,7 @@ export function parseRunSubmissionRequest(input, options = {}) {
         "submission",
         "runtimeSize",
         "timeout",
+        "postHook",
         "proxyEndpoints",
         SECRETS_KEY
     ]);
@@ -821,11 +818,13 @@ export function parseRunSubmissionRequest(input, options = {}) {
     }
     const runtimeSize = parseRuntimeSize(value.runtimeSize);
     const timeoutMs = parseRunTimeout(value.timeout);
+    const postHook = parsePostHook(value.postHook, "submission.postHook");
     const proxyEndpoints = parseProxyEndpoints(value.proxyEndpoints);
     const secrets = parseInlineSecrets(value.secrets);
     enforceCredentialSecretPolicy(credentialMode, secrets);
     crossValidateProxyEndpointsAndAuth(proxyEndpoints, secrets.proxyEndpointAuth);
     const submission = parseSubmission(value.submission);
+    assertRunModelMatchesProvider(provider, submission.model);
     // mcpServers names must agree across the submission half and the
     // secrets half — every secrets.mcpServers[i].name MUST resolve to a
     // submission.mcpServers entry (no orphan secrets) AND the URL must
@@ -867,6 +866,7 @@ export function parseRunSubmissionRequest(input, options = {}) {
         submission,
         ...(runtimeSize ? { runtimeSize } : {}),
         ...(timeoutMs !== undefined ? { timeoutMs } : {}),
+        ...(postHook !== undefined ? { postHook } : {}),
         ...(proxyEndpoints ? { proxyEndpoints } : {}),
         secrets
     };
@@ -933,7 +933,7 @@ export function parseSubmission(input) {
             throw new Error(`submission.${key} is not an allowed field; permitted: ${[...allowed].join(", ")}`);
         }
     }
-    const model = requireString(value.model, "submission.model");
+    const model = parseRunModel(value.model, "submission.model");
     const system = optionalString(value.system, "submission.system");
     const prompt = parsePrompt(value.prompt);
     const skills = parseSkills(value.skills);

package/dist/cli.mjs

@@ -15,8 +15,6 @@ var PROXY_PROTOCOL_HEADER = "x-aex-proxy-protocol";
 var PROXY_RESP_STATUS_HEADER = "x-aex-proxy-status";
 var PROXY_RESP_MODE_HEADER = "x-aex-proxy-effective-mode";
 var PROXY_RESP_TRUNCATED_HEADER = "x-aex-proxy-truncated";
-var PROXY_RESP_REMAINING_CALLS_HEADER = "x-aex-proxy-remaining-calls";
-var PROXY_RESP_REMAINING_BYTES_HEADER = "x-aex-proxy-remaining-bytes";
 var PROXY_RESP_UPSTREAM_HEADERS_HEADER = "x-aex-proxy-upstream-headers";
 var PROXY_METHOD_HEADER = "x-aex-method";
 var PROXY_PATH_HEADER = "x-aex-path";
@@ -28,10 +26,10 @@ var PROXY_ENDPOINT_DEFAULTS = {
   allowHeaders: [],
   responseMode: "headers_only",
   maxRequestBytes: 64 * 1024,
-  maxResponseBytes: 1024 * 1024,
-  timeoutMs: 1e4,
-  perCallBudget: 60,
-  responseByteBudget: 1024 * 1024
+  // Unlimited (0). The request body is buffered to enforce its cap, so that
+  // stays finite; the response is streamed, so it does not need one.
+  maxResponseBytes: 0,
+  timeoutMs: 1e4
 };
 
 // ../contracts/dist/provider-support.js
@@ -121,6 +119,52 @@ var PROVIDER_PUBLIC_SUPPORT = {
   }
 };
 
+// ../contracts/dist/models.js
+var RUN_MODELS = [
+  "claude-haiku-4-5",
+  "claude-3-5-haiku-latest",
+  "claude-3-5-sonnet-latest",
+  "deepseek-chat",
+  "gpt-4.1",
+  "gpt-4o-mini",
+  "gemini-2.0-flash",
+  "gemini-2.5-flash",
+  "mistral-large-latest",
+  "mistral-small-latest"
+];
+var RunModels = {
+  CLAUDE_HAIKU_4_5: "claude-haiku-4-5",
+  CLAUDE_3_5_HAIKU_LATEST: "claude-3-5-haiku-latest",
+  CLAUDE_3_5_SONNET_LATEST: "claude-3-5-sonnet-latest",
+  DEEPSEEK_CHAT: "deepseek-chat",
+  GPT_4_1: "gpt-4.1",
+  GPT_4O_MINI: "gpt-4o-mini",
+  GEMINI_2_0_FLASH: "gemini-2.0-flash",
+  GEMINI_2_5_FLASH: "gemini-2.5-flash",
+  MISTRAL_LARGE_LATEST: "mistral-large-latest",
+  MISTRAL_SMALL_LATEST: "mistral-small-latest"
+};
+var RUN_MODELS_BY_PROVIDER = {
+  anthropic: [
+    RunModels.CLAUDE_HAIKU_4_5,
+    RunModels.CLAUDE_3_5_HAIKU_LATEST,
+    RunModels.CLAUDE_3_5_SONNET_LATEST
+  ],
+  deepseek: [RunModels.DEEPSEEK_CHAT],
+  openai: [RunModels.GPT_4_1, RunModels.GPT_4O_MINI],
+  gemini: [RunModels.GEMINI_2_0_FLASH, RunModels.GEMINI_2_5_FLASH],
+  mistral: [RunModels.MISTRAL_LARGE_LATEST, RunModels.MISTRAL_SMALL_LATEST]
+};
+function isRunModel(input) {
+  return typeof input === "string" && RUN_MODELS.includes(input);
+}
+function parseRunModel(input, field = "submission.model") {
+  if (!isRunModel(input)) {
+    throw new Error(`${field} must be one of: ${RUN_MODELS.join(", ")}`);
+  }
+  return input;
+}
+
 // ../contracts/dist/status.js
 var TERMINAL_RUN_STATUSES = [
   "succeeded",
@@ -133,15 +177,113 @@ var TERMINAL_RUN_STATUSES = [
 ];
 var terminalRunStatuses = new Set(TERMINAL_RUN_STATUSES);
 
+// ../contracts/dist/runtime-sizes.js
+var RUNTIME_SIZE_PRESETS = {
+  "shared-1x-256mb": { cpus: 1, memoryMb: 256 },
+  "shared-1x-512mb": { cpus: 1, memoryMb: 512 },
+  "shared-1x-1gb": { cpus: 1, memoryMb: 1024 },
+  "shared-1x-2gb": { cpus: 1, memoryMb: 2048 },
+  "shared-2x-512mb": { cpus: 2, memoryMb: 512 },
+  "shared-2x-1gb": { cpus: 2, memoryMb: 1024 },
+  "shared-2x-2gb": { cpus: 2, memoryMb: 2048 },
+  "shared-2x-4gb": { cpus: 2, memoryMb: 4096 },
+  "shared-4x-1gb": { cpus: 4, memoryMb: 1024 },
+  "shared-4x-2gb": { cpus: 4, memoryMb: 2048 },
+  "shared-4x-4gb": { cpus: 4, memoryMb: 4096 },
+  "shared-4x-8gb": { cpus: 4, memoryMb: 8192 },
+  "shared-8x-2gb": { cpus: 8, memoryMb: 2048 },
+  "shared-8x-4gb": { cpus: 8, memoryMb: 4096 },
+  "shared-8x-8gb": { cpus: 8, memoryMb: 8192 },
+  "shared-8x-16gb": { cpus: 8, memoryMb: 16384 }
+};
+var RUNTIME_SIZES = Object.keys(RUNTIME_SIZE_PRESETS);
+var DEFAULT_RUN_TIMEOUT_MS = 60 * 60 * 1e3;
+var MAX_RUN_TIMEOUT_MS = 6 * 60 * 60 * 1e3;
+var MIN_RUN_TIMEOUT_MS = 60 * 1e3;
+var DURATION_PATTERN = /^(\d+(?:\.\d+)?)(ms|s|m|h)?$/;
+function parseDurationToMs(input) {
+  const match = DURATION_PATTERN.exec(input.trim());
+  if (!match) {
+    throw new Error(`invalid duration ${JSON.stringify(input)} (expected e.g. "1h", "90m", "30s", "500ms", or a bare ms integer)`);
+  }
+  const value = Number(match[1]);
+  if (!Number.isFinite(value) || value < 0) {
+    throw new Error(`invalid duration ${JSON.stringify(input)} (must be a non-negative number)`);
+  }
+  const unit = match[2] ?? "ms";
+  const factor = unit === "h" ? 36e5 : unit === "m" ? 6e4 : unit === "s" ? 1e3 : 1;
+  return Math.round(value * factor);
+}
+var RUN_PROCESS_KILL_GRACE_MS = 60 * 1e3;
+var RUN_TERMINAL_GRACE_MS = 90 * 1e3;
+
+// ../contracts/dist/post-hook.js
+var DEFAULT_POST_HOOK_TIMEOUT_MS = 5 * 60 * 1e3;
+var DEFAULT_POST_HOOK_MAX_TURNS = 10;
+function parsePostHook(input, path = "postHook") {
+  if (input === void 0 || input === null) {
+    return void 0;
+  }
+  const value = requirePostHookRecord(input, path);
+  const allowed = /* @__PURE__ */ new Set(["command", "timeout", "maxTurns", "maxChars"]);
+  for (const key of Object.keys(value)) {
+    if (!allowed.has(key)) {
+      throw new Error(`${path}.${key} is not an allowed field; permitted: command, timeout, maxTurns, maxChars`);
+    }
+  }
+  if (typeof value.command !== "string") {
+    throw new Error(`${path}.command must be a string`);
+  }
+  if (value.command.trim().length === 0) {
+    return void 0;
+  }
+  const timeoutMs = parsePostHookTimeout(value.timeout, `${path}.timeout`);
+  const maxTurns = parseNonNegativeInteger(value.maxTurns, `${path}.maxTurns`, DEFAULT_POST_HOOK_MAX_TURNS);
+  const maxChars = value.maxChars === null ? null : parseNonNegativeInteger(value.maxChars, `${path}.maxChars`, null);
+  return {
+    command: value.command,
+    timeoutMs,
+    maxTurns,
+    maxChars
+  };
+}
+function parsePostHookTimeout(input, path) {
+  if (input === void 0) {
+    return DEFAULT_POST_HOOK_TIMEOUT_MS;
+  }
+  if (typeof input !== "string") {
+    throw new Error(`${path} must be a duration string (e.g. "5m", "30s"); got ${JSON.stringify(input)}`);
+  }
+  const ms = parseDurationToMs(input);
+  if (ms <= 0) {
+    throw new Error(`${path} must be greater than 0ms; got ${ms}ms`);
+  }
+  return ms;
+}
+function parseNonNegativeInteger(input, path, defaultValue) {
+  if (input === void 0) {
+    return defaultValue;
+  }
+  if (typeof input !== "number" || !Number.isSafeInteger(input) || input < 0) {
+    throw new Error(`${path} must be a non-negative integer`);
+  }
+  return input;
+}
+function requirePostHookRecord(input, path) {
+  if (input === null || typeof input !== "object" || Array.isArray(input)) {
+    throw new Error(`${path} must be an object`);
+  }
+  return input;
+}
+
 // ../contracts/dist/run-config.js
 var SKILL_BUNDLE_LIMITS = {
   /** Compressed (.zip) ceiling. */
   maxCompressedBytes: 10 * 1024 * 1024,
   /**
-   * Hard ceiling for the direct-to-storage (presigned PUT) upload path, where
-   * bytes never transit the hosted API so its memory/request-payload limits no
-   * longer cap the bundle. Kept well under the object store's 5 GiB single-PUT
-   * limit; objects above this would need S3 multipart, which is out of scope.
+   * Hard ceiling for the direct-to-storage upload path. Bytes never transit the
+   * hosted API, so its memory/request-payload limits do not cap accepted
+   * bundles; objects above this product cap are rejected before upload.
    */
   maxBytes: 2 * 1024 * 1024 * 1024,
   /** Sum of uncompressed file sizes. */
@@ -448,6 +590,7 @@ function parseRunRequestConfig(input) {
     "environment",
     "runtimeSize",
     "timeout",
+    "postHook",
     "proxyEndpoints",
     "metadata"
   ]);
@@ -456,10 +599,7 @@ function parseRunRequestConfig(input) {
       throw new Error(`run request config contains unexpected field: ${key}`);
     }
   }
-  const model = record.model;
-  if (typeof model !== "string" || model.length === 0) {
-    throw new Error("run request config model must be a non-empty string");
-  }
+  const model = parseRunModel(record.model, "run request config model");
   const system = record.system;
   if (system !== void 0 && typeof system !== "string") {
     throw new Error("run request config system, when provided, must be a string");
@@ -467,6 +607,7 @@ function parseRunRequestConfig(input) {
   const prompt = parseRunRequestConfigPrompt(record.prompt);
   const skills = parseRunRequestConfigSkills(record.skills);
   const mcpServers = parseRunRequestConfigMcpServers(record.mcpServers);
+  const postHook = parsePostHook(record.postHook, "run request config postHook");
   return {
     model,
     ...system !== void 0 ? { system } : {},
@@ -480,6 +621,7 @@ function parseRunRequestConfig(input) {
     ...record.environment !== void 0 ? { environment: record.environment } : {},
     ...record.runtimeSize !== void 0 ? { runtimeSize: record.runtimeSize } : {},
     ...record.timeout !== void 0 ? { timeout: record.timeout } : {},
+    ...postHook !== void 0 ? { postHook: record.postHook } : {},
     ...record.proxyEndpoints !== void 0 ? { proxyEndpoints: record.proxyEndpoints } : {},
     ...record.metadata !== void 0 ? { metadata: record.metadata } : {}
   };
@@ -534,32 +676,6 @@ function parseRunRequestConfigMcpServers(value) {
   });
 }
 
-// ../contracts/dist/runtime-sizes.js
-var RUNTIME_SIZE_PRESETS = {
-  "shared-1x-256mb": { cpus: 1, memoryMb: 256 },
-  "shared-1x-512mb": { cpus: 1, memoryMb: 512 },
-  "shared-1x-1gb": { cpus: 1, memoryMb: 1024 },
-  "shared-1x-2gb": { cpus: 1, memoryMb: 2048 },
-  "shared-2x-512mb": { cpus: 2, memoryMb: 512 },
-  "shared-2x-1gb": { cpus: 2, memoryMb: 1024 },
-  "shared-2x-2gb": { cpus: 2, memoryMb: 2048 },
-  "shared-2x-4gb": { cpus: 2, memoryMb: 4096 },
-  "shared-4x-1gb": { cpus: 4, memoryMb: 1024 },
-  "shared-4x-2gb": { cpus: 4, memoryMb: 2048 },
-  "shared-4x-4gb": { cpus: 4, memoryMb: 4096 },
-  "shared-4x-8gb": { cpus: 4, memoryMb: 8192 },
-  "shared-8x-2gb": { cpus: 8, memoryMb: 2048 },
-  "shared-8x-4gb": { cpus: 8, memoryMb: 4096 },
-  "shared-8x-8gb": { cpus: 8, memoryMb: 8192 },
-  "shared-8x-16gb": { cpus: 8, memoryMb: 16384 }
-};
-var RUNTIME_SIZES = Object.keys(RUNTIME_SIZE_PRESETS);
-var DEFAULT_RUN_TIMEOUT_MS = 60 * 60 * 1e3;
-var MAX_RUN_TIMEOUT_MS = 6 * 60 * 60 * 1e3;
-var MIN_RUN_TIMEOUT_MS = 60 * 1e3;
-var RUN_PROCESS_KILL_GRACE_MS = 60 * 1e3;
-var RUN_TERMINAL_GRACE_MS = 90 * 1e3;
-
 // ../contracts/dist/runtime-security-profile.js
 var RUNTIME_SECURITY_PROFILE_CONFIG = Object.freeze({
   strict: Object.freeze({
@@ -2642,7 +2758,7 @@ async function printProxyHelp(io2) {
   if (manifest && manifest.endpoints.length > 0) {
     io2.stdout("Declared endpoints:\n");
     for (const ep of manifest.endpoints) {
-      io2.stdout(`  \u2022 ${ep.name}: ${ep.allowMethods.join(",")} ${ep.allowPathPrefixes.join(",")} (mode=${ep.responseMode}, budget=${ep.perCallBudget}/run)
+      io2.stdout(`  \u2022 ${ep.name}: ${ep.allowMethods.join(",")} ${ep.allowPathPrefixes.join(",")} (mode=${ep.responseMode})
 `);
     }
   }
@@ -2801,8 +2917,6 @@ function emitError(io2, body) {
 async function readStreamedEnvelope(response, endpointName) {
   const effectiveResponseMode = response.headers.get(PROXY_RESP_MODE_HEADER) ?? "headers_only";
   const upstreamStatus = Number.parseInt(response.headers.get(PROXY_RESP_STATUS_HEADER) ?? "0", 10);
-  const remainingCalls = Number.parseInt(response.headers.get(PROXY_RESP_REMAINING_CALLS_HEADER) ?? "0", 10);
-  const remainingResponseBytes = Number.parseInt(response.headers.get(PROXY_RESP_REMAINING_BYTES_HEADER) ?? "0", 10);
   let upstreamHeaders = {};
   const rawHeaders = response.headers.get(PROXY_RESP_UPSTREAM_HEADERS_HEADER);
   if (rawHeaders) {
@@ -2825,8 +2939,6 @@ async function readStreamedEnvelope(response, endpointName) {
     // isn't carried back); the effective mode is authoritative for the
     // agent and matches what v1 surfaced for an un-clamped call.
     modeClamped: false,
-    remainingCalls,
-    remainingResponseBytes,
     ...effectiveResponseMode === "full" && bytes.byteLength > 0 ? { upstreamBodyBase64: Buffer.from(bytes).toString("base64") } : {},
     ...truncatedRaw === "true" ? { truncated: true } : {}
   };
@@ -3058,6 +3170,11 @@ async function runRunCmd(io2, argv) {
       io2.stderr("--model is required when --config is not provided\n");
       return USAGE_ERR;
     }
+    if (!RUN_MODELS.includes(modelFlag.value)) {
+      io2.stderr(`--model must be one of: ${RUN_MODELS.join(", ")} (got: ${modelFlag.value})
+`);
+      return USAGE_ERR;
+    }
     if (promptFlags.values.length === 0) {
       io2.stderr("--prompt is required (repeatable)\n");
       return USAGE_ERR;
@@ -3186,6 +3303,7 @@ async function runRunCmd(io2, argv) {
     secrets,
     ...runtimeSizeFlag.value ? { runtimeSize: runtimeSizeFlag.value } : runConfig.runtimeSize ? { runtimeSize: runConfig.runtimeSize } : {},
     ...runTimeoutFlag.value ? { timeout: runTimeoutFlag.value } : runConfig.timeout ? { timeout: runConfig.timeout } : {},
+    ...runConfig.postHook ? { postHook: runConfig.postHook } : {},
     ...proxyEndpoints.length > 0 ? { proxyEndpoints } : {}
   };
   const http = makeHttpClient(io2, common.flags);
@@ -4080,7 +4198,7 @@ Protocol version: ${manifest.protocolVersion}
   io2.stdout("  aex wait <run-id> [--timeout 8m] [--interval 2s] --api-token T\n");
   io2.stdout("  aex events <run-id> [--follow] [--timeout 8m] --api-token T\n");
   io2.stdout("  aex outputs <run-id> --api-token T\n");
-  io2.stdout("  aex download <run-id> [--out path] --api-token T\n");
+  io2.stdout("  aex download <run-id> [--only outputs|events|metadata] [--out path] --api-token T\n");
   io2.stdout("  aex cancel <run-id> --api-token T\n");
   io2.stdout("  aex delete <run-id> --api-token T\n");
   io2.stdout("  aex delete-asset <assetId|hash> --api-token T\n");

package/dist/cli.mjs.sha256

@@ -1 +1 @@
-9219ad7c8ff381c3e9916e5f312e110d9546cedb035b5a2f65bbbd07f5e27d4f  cli.mjs
+0867878a9456f95c87fe93ca1aac5879b7c44ab5f3d1c7f110c8cab2259540a3  cli.mjs

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-import { HttpClient, type AexEvent, type AgentsMdRecord, type CredentialMode, type DebugSink, type FetchLike, type FileRecord, type Output, type OutputMode, type PlatformEnvironmentInput, type PlatformSubmission, type PlatformInlineSecrets, type PlatformProxyEndpoint, type PlatformProxyEndpointAuth, type Run, type RunEvent, type RunProvider, type RunUnit, type RuntimeSize, type RuntimeKind, type SignedOutputLink, type Skill as SkillRecord, type WhoAmI } from "./_contracts/index.js";
+import { HttpClient, type AexEvent, type AgentsMdRecord, type CredentialMode, type DebugSink, type FetchLike, type FileRecord, type Output, type OutputMode, type PlatformEnvironmentInput, type PlatformSubmission, type PlatformInlineSecrets, type PlatformProxyEndpoint, type PlatformProxyEndpointAuth, type PlatformPostHookInput, type Run, type RunModel, type RunEvent, type RunProvider, type RunUnit, type RuntimeSize, type RuntimeKind, type SignedOutputLink, type Skill as SkillRecord, type WhoAmI } from "./_contracts/index.js";
 import { AgentsMd } from "./agents-md.js";
 import { type UploadedAsset } from "./asset-upload.js";
 import { File } from "./file.js";
@@ -66,7 +66,11 @@ export interface SubmitRunOptions {
      * is no longer accepted.
      */
     readonly runtime?: RuntimeKind;
-    readonly model: string;
+    /**
+     * Closed public model id. Prefer {@link RunModels}, e.g.
+     * `RunModels.CLAUDE_HAIKU_4_5`.
+     */
+    readonly model: RunModel;
     readonly system?: string;
     readonly prompt: string | readonly string[];
     readonly skills?: readonly Skill[];
@@ -86,6 +90,12 @@ export interface SubmitRunOptions {
      * [1m, 6h]; omit for the 1h default. Applies to both runtimes.
      */
     readonly timeout?: string;
+    /**
+     * Command to run after the agent process exits successfully. A non-zero exit
+     * or timeout is sent back to the model as a repair prompt until `maxTurns`
+     * is exhausted. Empty commands are treated as omitted.
+     */
+    readonly postHook?: PlatformPostHookInput;
     readonly proxyEndpoints?: readonly ProxyEndpoint[];
     /**
      * Output capture policy for the run's output files.

package/dist/client.js

@@ -320,6 +320,7 @@ export class AgentExecutor {
             ...(mergedMcpSecrets.length > 0 ? { mcpServers: mergedMcpSecrets } : {}),
             ...(mergedProxyAuth.length > 0 ? { proxyEndpointAuth: mergedProxyAuth } : {})
         };
+        const postHook = postHookForWire(options.postHook);
         const request = {
             idempotencyKey: options.idempotencyKey ?? generateIdempotencyKey(),
             // Always include `provider` on the wire so dashboard / proxy
@@ -335,6 +336,7 @@ export class AgentExecutor {
             submission,
             ...(options.runtimeSize ? { runtimeSize: options.runtimeSize } : {}),
             ...(options.timeout ? { timeout: options.timeout } : {}),
+            ...(postHook ? { postHook } : {}),
             secrets,
             ...(proxyEndpointDeclarations.length > 0
                 ? { proxyEndpoints: proxyEndpointDeclarations }
@@ -633,6 +635,12 @@ function normalisePrompt(input) {
     }
     return [...input];
 }
+function postHookForWire(input) {
+    if (input === undefined || typeof input.command !== "string" || input.command.trim().length === 0) {
+        return undefined;
+    }
+    return input;
+}
 /** Walk Skill[], eagerly upload drafts as assets, and return plain asset refs. */
 async function prepareSkills(skills, uploader) {
     const refs = [];