@aexhq/sdk 0.16.0 → 0.17.0

package/dist/_contracts/run-unit.js

@@ -20,6 +20,7 @@
  * detail response stays bounded). The archive zip carries the bytes.
  */
 import { parseMcpServerRef, parseSkillRef } from "./run-config.js";
+import { RunModels, parseRunModel } from "./models.js";
 import { PLATFORM_PACKAGE_ECOSYSTEMS } from "./submission.js";
 // ---------------------------------------------------------------------------
 // Submission parser
@@ -29,10 +30,10 @@ import { PLATFORM_PACKAGE_ECOSYSTEMS } from "./submission.js";
  * submission. Never throws on minor unknown keys so we can
  * forward-compat with worker-side enrichment.
  *
- * Returns a typed shape even for malformed snapshots — the worst case
- * is `{kind: "submission", submission: {model: "", ...}}` with empty
- * defaults — because the dashboard must still render *something* for a
- * buggy historical row rather than 500ing the whole detail page.
+ * Returns a typed shape even for malformed snapshots by falling back to the
+ * default public model and empty collection defaults, because the dashboard
+ * must still render *something* for a buggy historical row rather than 500ing
+ * the whole detail page.
  */
 export function parseRunUnitSubmission(input) {
     if (!input || typeof input !== "object" || Array.isArray(input)) {
@@ -52,7 +53,7 @@ function parseFlatProjection(value) {
     const allowedDirs = toOptionalStringArray(outputsRaw.allowedDirs);
     const deniedDirs = toOptionalStringArray(outputsRaw.deniedDirs);
     const submission = {
-        model: typeof submissionRaw.model === "string" ? submissionRaw.model : "",
+        model: coerceRunUnitModel(submissionRaw.model),
         ...(typeof submissionRaw.system === "string" ? { system: submissionRaw.system } : {}),
         prompt: toStringArray(submissionRaw.prompt),
         skills: toSkillRefArray(submissionRaw.skills),
@@ -87,7 +88,7 @@ function fallbackFlat() {
     return {
         kind: "submission",
         submission: {
-            model: "",
+            model: RunModels.CLAUDE_HAIKU_4_5,
             prompt: [],
             skills: [],
             agentsMd: [],
@@ -104,6 +105,16 @@ function fallbackFlat() {
 function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+function coerceRunUnitModel(value) {
+    if (typeof value !== "string")
+        return RunModels.CLAUDE_HAIKU_4_5;
+    try {
+        return parseRunModel(value, "run unit submission.model");
+    }
+    catch {
+        return RunModels.CLAUDE_HAIKU_4_5;
+    }
+}
 function isJsonRecord(value) {
     return isRecord(value);
 }

package/dist/_contracts/submission.d.ts

@@ -2,6 +2,8 @@ import { PROXY_ENDPOINT_DEFAULTS, type ProxyAuthShape, type ProxyMethod, type Pr
 export { PROXY_ENDPOINT_DEFAULTS };
 import type { AgentsMdRef, FileRef, McpServerRef, SkillRef } from "./run-config.js";
 import { type RuntimeSize } from "./runtime-sizes.js";
+import { type PlatformPostHook, type PlatformPostHookInput } from "./post-hook.js";
+import { type RunModel } from "./models.js";
 import { type RuntimeSecurityProfileName } from "./runtime-security-profile.js";
 import { type CredentialMode, type ManagedKeyPolicyV1 } from "./managed-key.js";
 export type JsonPrimitive = string | number | boolean | null;
@@ -226,7 +228,7 @@ export declare function optionalPositiveInt(input: unknown, field: string): numb
  * into `run_skill_snapshots`), provider refs pass through unchanged.
  */
 export interface PlatformSubmission {
-    readonly model: string;
+    readonly model: RunModel;
     readonly system?: string;
     readonly prompt: readonly string[];
     readonly skills: readonly SkillRef[];
@@ -244,23 +246,22 @@ export interface PlatformSubmission {
     readonly outputs?: PlatformOutputCaptureConfig;
     /**
      * Optional override for the managed-runtime builtin extensions enabled
-     * inside the runner container. Each entry is the bare extension name
-     * accepted by the selected runtime. The platform
-     * default is `["developer"]` which gives the agent shell + write +
-     * edit + tree tools (bash, grep via shell, file read via shell or
-     * editor, file edit). To opt in to more tools (e.g. web search via
-     * the `computercontroller` extension), pass the full list. To opt
-     * out of all builtins (pure-MCP setup), pass an empty array.
+     * inside the runner container. Each entry is one of the closed
+     * {@link BUILTINS} set (prefer the {@link Builtins} symbol
+     * const). The platform default is `["developer"]` which gives the agent
+     * shell + write + edit + tree tools (bash, grep via shell, file read via
+     * shell or editor, file edit). To opt in to more tools (e.g. web fetch via
+     * the `computercontroller` extension), pass the full list. To opt out of
+     * all builtins (pure-MCP setup), pass an empty array.
      *
      * Validation:
-     *   - Each entry matches /^[a-z][a-z0-9_-]{0,63}$/ (managed-runtime
-     *     builtin naming convention).
+     *   - Each entry must be a member of {@link BUILTINS}.
      *   - Max 16 entries.
      *   - Deduplicated.
      *
      * The dispatcher accepts and persists it for snapshot fidelity.
      */
-    readonly builtins?: readonly string[];
+    readonly builtins?: readonly Builtin[];
     /**
      * Assistant-output granularity. `buffered` (the default) emits one event per
      * assistant message; `stream` emits the agent's per-token text deltas as they
@@ -333,6 +334,13 @@ export interface PlatformRunSubmissionRequest {
      * terminal wait window and self-kill deadline.
      */
     readonly timeoutMs?: number;
+    /**
+     * Optional post-agent-run verifier. Parsed from the public `postHook`
+     * duration/string shape into fixed runner budgets. The runner executes it
+     * after a successful agent process and sends failures back through the model
+     * for repair until this budget is exhausted.
+     */
+    readonly postHook?: PlatformPostHook;
 }
 /**
  * Wire shape posted by the SDK and CLI. `workspaceId` is **omitted by
@@ -347,7 +355,7 @@ export interface PlatformRunSubmissionRequest {
  * {@link DEFAULT_RUN_PROVIDER} (`anthropic`). The parser fills it in
  * before the value enters the run snapshot.
  */
-export type PlatformRunSubmissionInput = Omit<PlatformRunSubmissionRequest, "workspaceId" | "credentialMode" | "provider" | "runtime" | "timeoutMs"> & {
+export type PlatformRunSubmissionInput = Omit<PlatformRunSubmissionRequest, "workspaceId" | "credentialMode" | "provider" | "runtime" | "timeoutMs" | "postHook"> & {
     readonly workspaceId?: string;
     readonly credentialMode?: CredentialMode;
     readonly provider?: RunProvider;
@@ -363,6 +371,7 @@ export type PlatformRunSubmissionInput = Omit<PlatformRunSubmissionRequest, "wor
      * {@link PlatformRunSubmissionRequest.timeoutMs}. Absent ⇒ 1h default.
      */
     readonly timeout?: string;
+    readonly postHook?: PlatformPostHookInput;
 };
 export interface ParseRunSubmissionOptions {
     readonly managedKeyPolicy?: ManagedKeyPolicyV1;
@@ -386,6 +395,31 @@ export declare function parseSubmission(input: unknown): PlatformSubmission;
 export declare const OUTPUT_MODES: readonly ["buffered", "stream"];
 export type OutputMode = (typeof OUTPUT_MODES)[number];
 export declare const DEFAULT_OUTPUT_MODE: OutputMode;
+/**
+ * Managed-runtime builtin extensions — the closed set the managed runtime
+ * accepts. Closed so an invalid name is a compile error via {@link Builtins},
+ * not a silent runtime no-op. `developer` is the platform default when
+ * `builtins` is omitted; pass an empty array to disable all builtins
+ * (pure-MCP setup).
+ */
+export declare const BUILTINS: readonly ["developer", "computercontroller", "memory", "autovisualiser", "tutorial"];
+export type Builtin = (typeof BUILTINS)[number];
+/**
+ * Symbol-style accessors for the closed builtin set, e.g.
+ * `Builtins.COMPUTER_CONTROLLER`.
+ */
+export declare const Builtins: {
+    /** Shell (bash + UNIX tools incl. grep), write, edit, tree. The default. */
+    readonly DEVELOPER: "developer";
+    /** Web fetch/scrape, scripting, general computer-control tools. */
+    readonly COMPUTER_CONTROLLER: "computercontroller";
+    /** Cross-session preference memory. */
+    readonly MEMORY: "memory";
+    /** Inline data-visualisation rendering. */
+    readonly AUTOVISUALISER: "autovisualiser";
+    /** Interactive guided tutorials. */
+    readonly TUTORIAL: "tutorial";
+};
 /**
  * Codes emitted when a submission contains features the active runtime cannot
  * serve. Code values are stable so dashboard / SDK error rendering can branch

package/dist/_contracts/submission.js

@@ -6,6 +6,8 @@ import { authShapeHeaderName, PROXY_ALLOWED_METHODS, PROXY_ENDPOINT_DEFAULTS, PR
 export { PROXY_ENDPOINT_DEFAULTS };
 import { parseAssetRefFields, parseMcpServerRef, parseSkillRef } from "./run-config.js";
 import { parseRunTimeout, parseRuntimeSize } from "./runtime-sizes.js";
+import { parsePostHook } from "./post-hook.js";
+import { assertRunModelMatchesProvider, parseRunModel } from "./models.js";
 import { parseRuntimeSecurityProfile } from "./runtime-security-profile.js";
 import { assertManagedKeyAdmissionAllowed, parseCredentialMode } from "./managed-key.js";
 /**
@@ -782,6 +784,7 @@ export function parseRunSubmissionRequest(input, options = {}) {
         "submission",
         "runtimeSize",
         "timeout",
+        "postHook",
         "proxyEndpoints",
         SECRETS_KEY
     ]);
@@ -815,11 +818,13 @@ export function parseRunSubmissionRequest(input, options = {}) {
     }
     const runtimeSize = parseRuntimeSize(value.runtimeSize);
     const timeoutMs = parseRunTimeout(value.timeout);
+    const postHook = parsePostHook(value.postHook, "submission.postHook");
     const proxyEndpoints = parseProxyEndpoints(value.proxyEndpoints);
     const secrets = parseInlineSecrets(value.secrets);
     enforceCredentialSecretPolicy(credentialMode, secrets);
     crossValidateProxyEndpointsAndAuth(proxyEndpoints, secrets.proxyEndpointAuth);
     const submission = parseSubmission(value.submission);
+    assertRunModelMatchesProvider(provider, submission.model);
     // mcpServers names must agree across the submission half and the
     // secrets half — every secrets.mcpServers[i].name MUST resolve to a
     // submission.mcpServers entry (no orphan secrets) AND the URL must
@@ -861,6 +866,7 @@ export function parseRunSubmissionRequest(input, options = {}) {
         submission,
         ...(runtimeSize ? { runtimeSize } : {}),
         ...(timeoutMs !== undefined ? { timeoutMs } : {}),
+        ...(postHook !== undefined ? { postHook } : {}),
         ...(proxyEndpoints ? { proxyEndpoints } : {}),
         secrets
     };
@@ -927,7 +933,7 @@ export function parseSubmission(input) {
             throw new Error(`submission.${key} is not an allowed field; permitted: ${[...allowed].join(", ")}`);
         }
     }
-    const model = requireString(value.model, "submission.model");
+    const model = parseRunModel(value.model, "submission.model");
     const system = optionalString(value.system, "submission.system");
     const prompt = parsePrompt(value.prompt);
     const skills = parseSkills(value.skills);
@@ -985,7 +991,36 @@ function parseOutputMode(input) {
     }
     return input;
 }
-const BUILTIN_NAME_PATTERN = /^[a-z][a-z0-9_-]{0,63}$/;
+/**
+ * Managed-runtime builtin extensions — the closed set the managed runtime
+ * accepts. Closed so an invalid name is a compile error via {@link Builtins},
+ * not a silent runtime no-op. `developer` is the platform default when
+ * `builtins` is omitted; pass an empty array to disable all builtins
+ * (pure-MCP setup).
+ */
+export const BUILTINS = [
+    "developer",
+    "computercontroller",
+    "memory",
+    "autovisualiser",
+    "tutorial"
+];
+/**
+ * Symbol-style accessors for the closed builtin set, e.g.
+ * `Builtins.COMPUTER_CONTROLLER`.
+ */
+export const Builtins = {
+    /** Shell (bash + UNIX tools incl. grep), write, edit, tree. The default. */
+    DEVELOPER: "developer",
+    /** Web fetch/scrape, scripting, general computer-control tools. */
+    COMPUTER_CONTROLLER: "computercontroller",
+    /** Cross-session preference memory. */
+    MEMORY: "memory",
+    /** Inline data-visualisation rendering. */
+    AUTOVISUALISER: "autovisualiser",
+    /** Interactive guided tutorials. */
+    TUTORIAL: "tutorial"
+};
 const MAX_BUILTINS = 16;
 function parseBuiltins(input) {
     if (input === undefined || input === null)
@@ -1003,8 +1038,9 @@ function parseBuiltins(input) {
         if (typeof v !== "string") {
             throw new Error(`submission.builtins[${i}] must be a string`);
         }
-        if (!BUILTIN_NAME_PATTERN.test(v)) {
-            throw new Error(`submission.builtins[${i}] (${JSON.stringify(v)}) is not a valid managed-runtime builtin name; expected /^[a-z][a-z0-9_-]{0,63}$/`);
+        if (!BUILTINS.includes(v)) {
+            throw new Error(`submission.builtins[${i}] (${JSON.stringify(v)}) is not a managed-runtime builtin; ` +
+                `expected one of: ${BUILTINS.join(", ")}`);
         }
         if (seen.has(v))
             continue; // dedupe silently

package/dist/cli.mjs

@@ -119,6 +119,94 @@ var PROVIDER_PUBLIC_SUPPORT = {
   }
 };
 
+// ../contracts/dist/models.js
+var RUN_MODELS = [
+  "claude-haiku-4-5",
+  "claude-3-5-haiku-latest",
+  "claude-3-5-sonnet-latest",
+  "deepseek-v4-flash",
+  "deepseek-v4-pro",
+  "deepseek-chat",
+  "deepseek-reasoner",
+  "gpt-4.1",
+  "gpt-4o-mini",
+  "gemini-2.0-flash",
+  "gemini-2.5-flash",
+  "mistral-large-latest",
+  "mistral-small-latest"
+];
+var Models = {
+  /** Claude Haiku 4.5 — Anthropic. */
+  CLAUDE_HAIKU_4_5: "claude-haiku-4-5",
+  /** Claude 3.5 Haiku (latest) — Anthropic. */
+  CLAUDE_3_5_HAIKU_LATEST: "claude-3-5-haiku-latest",
+  /** Claude 3.5 Sonnet (latest) — Anthropic. */
+  CLAUDE_3_5_SONNET_LATEST: "claude-3-5-sonnet-latest",
+  /** DeepSeek V4 Flash — DeepSeek (non-thinking, fast). */
+  DEEPSEEK_V4_FLASH: "deepseek-v4-flash",
+  /** DeepSeek V4 Pro — DeepSeek (reasoning-heavy). */
+  DEEPSEEK_V4_PRO: "deepseek-v4-pro",
+  /**
+   * @deprecated Legacy alias DeepSeek routes to `deepseek-v4-flash` (non-thinking).
+   * DeepSeek removes this name on 2026-07-24 15:59 UTC — migrate to
+   * {@link Models.DEEPSEEK_V4_FLASH}.
+   */
+  DEEPSEEK_CHAT: "deepseek-chat",
+  /**
+   * @deprecated Legacy alias DeepSeek routes to `deepseek-v4-flash` (thinking).
+   * DeepSeek removes this name on 2026-07-24 15:59 UTC — migrate to
+   * {@link Models.DEEPSEEK_V4_FLASH} (or {@link Models.DEEPSEEK_V4_PRO} for
+   * heavier reasoning).
+   */
+  DEEPSEEK_REASONER: "deepseek-reasoner",
+  /** GPT-4.1 — OpenAI. */
+  GPT_4_1: "gpt-4.1",
+  /** GPT-4o mini — OpenAI. */
+  GPT_4O_MINI: "gpt-4o-mini",
+  /** Gemini 2.0 Flash — Gemini. */
+  GEMINI_2_0_FLASH: "gemini-2.0-flash",
+  /** Gemini 2.5 Flash — Gemini. */
+  GEMINI_2_5_FLASH: "gemini-2.5-flash",
+  /** Mistral Large (latest) — Mistral. */
+  MISTRAL_LARGE_LATEST: "mistral-large-latest",
+  /** Mistral Small (latest) — Mistral. */
+  MISTRAL_SMALL_LATEST: "mistral-small-latest"
+};
+var RUN_MODELS_BY_PROVIDER = {
+  anthropic: [
+    Models.CLAUDE_HAIKU_4_5,
+    Models.CLAUDE_3_5_HAIKU_LATEST,
+    Models.CLAUDE_3_5_SONNET_LATEST
+  ],
+  deepseek: [
+    Models.DEEPSEEK_V4_FLASH,
+    Models.DEEPSEEK_V4_PRO,
+    Models.DEEPSEEK_CHAT,
+    Models.DEEPSEEK_REASONER
+  ],
+  openai: [Models.GPT_4_1, Models.GPT_4O_MINI],
+  gemini: [Models.GEMINI_2_0_FLASH, Models.GEMINI_2_5_FLASH],
+  mistral: [Models.MISTRAL_LARGE_LATEST, Models.MISTRAL_SMALL_LATEST]
+};
+var PROVIDER_BY_MODEL = (() => {
+  const map = {};
+  for (const [provider, models] of Object.entries(RUN_MODELS_BY_PROVIDER)) {
+    for (const model of models) {
+      map[model] = provider;
+    }
+  }
+  return map;
+})();
+function isRunModel(input) {
+  return typeof input === "string" && RUN_MODELS.includes(input);
+}
+function parseRunModel(input, field = "submission.model") {
+  if (!isRunModel(input)) {
+    throw new Error(`${field} must be one of: ${RUN_MODELS.join(", ")}`);
+  }
+  return input;
+}
+
 // ../contracts/dist/status.js
 var TERMINAL_RUN_STATUSES = [
   "succeeded",
@@ -131,15 +219,113 @@ var TERMINAL_RUN_STATUSES = [
 ];
 var terminalRunStatuses = new Set(TERMINAL_RUN_STATUSES);
 
+// ../contracts/dist/runtime-sizes.js
+var RUNTIME_SIZE_PRESETS = {
+  "shared-1x-256mb": { cpus: 1, memoryMb: 256 },
+  "shared-1x-512mb": { cpus: 1, memoryMb: 512 },
+  "shared-1x-1gb": { cpus: 1, memoryMb: 1024 },
+  "shared-1x-2gb": { cpus: 1, memoryMb: 2048 },
+  "shared-2x-512mb": { cpus: 2, memoryMb: 512 },
+  "shared-2x-1gb": { cpus: 2, memoryMb: 1024 },
+  "shared-2x-2gb": { cpus: 2, memoryMb: 2048 },
+  "shared-2x-4gb": { cpus: 2, memoryMb: 4096 },
+  "shared-4x-1gb": { cpus: 4, memoryMb: 1024 },
+  "shared-4x-2gb": { cpus: 4, memoryMb: 2048 },
+  "shared-4x-4gb": { cpus: 4, memoryMb: 4096 },
+  "shared-4x-8gb": { cpus: 4, memoryMb: 8192 },
+  "shared-8x-2gb": { cpus: 8, memoryMb: 2048 },
+  "shared-8x-4gb": { cpus: 8, memoryMb: 4096 },
+  "shared-8x-8gb": { cpus: 8, memoryMb: 8192 },
+  "shared-8x-16gb": { cpus: 8, memoryMb: 16384 }
+};
+var RUNTIME_SIZES = Object.keys(RUNTIME_SIZE_PRESETS);
+var DEFAULT_RUN_TIMEOUT_MS = 60 * 60 * 1e3;
+var MAX_RUN_TIMEOUT_MS = 6 * 60 * 60 * 1e3;
+var MIN_RUN_TIMEOUT_MS = 60 * 1e3;
+var DURATION_PATTERN = /^(\d+(?:\.\d+)?)(ms|s|m|h)?$/;
+function parseDurationToMs(input) {
+  const match = DURATION_PATTERN.exec(input.trim());
+  if (!match) {
+    throw new Error(`invalid duration ${JSON.stringify(input)} (expected e.g. "1h", "90m", "30s", "500ms", or a bare ms integer)`);
+  }
+  const value = Number(match[1]);
+  if (!Number.isFinite(value) || value < 0) {
+    throw new Error(`invalid duration ${JSON.stringify(input)} (must be a non-negative number)`);
+  }
+  const unit = match[2] ?? "ms";
+  const factor = unit === "h" ? 36e5 : unit === "m" ? 6e4 : unit === "s" ? 1e3 : 1;
+  return Math.round(value * factor);
+}
+var RUN_PROCESS_KILL_GRACE_MS = 60 * 1e3;
+var RUN_TERMINAL_GRACE_MS = 90 * 1e3;
+
+// ../contracts/dist/post-hook.js
+var DEFAULT_POST_HOOK_TIMEOUT_MS = 5 * 60 * 1e3;
+var DEFAULT_POST_HOOK_MAX_TURNS = 10;
+function parsePostHook(input, path = "postHook") {
+  if (input === void 0 || input === null) {
+    return void 0;
+  }
+  const value = requirePostHookRecord(input, path);
+  const allowed = /* @__PURE__ */ new Set(["command", "timeout", "maxTurns", "maxChars"]);
+  for (const key of Object.keys(value)) {
+    if (!allowed.has(key)) {
+      throw new Error(`${path}.${key} is not an allowed field; permitted: command, timeout, maxTurns, maxChars`);
+    }
+  }
+  if (typeof value.command !== "string") {
+    throw new Error(`${path}.command must be a string`);
+  }
+  if (value.command.trim().length === 0) {
+    return void 0;
+  }
+  const timeoutMs = parsePostHookTimeout(value.timeout, `${path}.timeout`);
+  const maxTurns = parseNonNegativeInteger(value.maxTurns, `${path}.maxTurns`, DEFAULT_POST_HOOK_MAX_TURNS);
+  const maxChars = value.maxChars === null ? null : parseNonNegativeInteger(value.maxChars, `${path}.maxChars`, null);
+  return {
+    command: value.command,
+    timeoutMs,
+    maxTurns,
+    maxChars
+  };
+}
+function parsePostHookTimeout(input, path) {
+  if (input === void 0) {
+    return DEFAULT_POST_HOOK_TIMEOUT_MS;
+  }
+  if (typeof input !== "string") {
+    throw new Error(`${path} must be a duration string (e.g. "5m", "30s"); got ${JSON.stringify(input)}`);
+  }
+  const ms = parseDurationToMs(input);
+  if (ms <= 0) {
+    throw new Error(`${path} must be greater than 0ms; got ${ms}ms`);
+  }
+  return ms;
+}
+function parseNonNegativeInteger(input, path, defaultValue) {
+  if (input === void 0) {
+    return defaultValue;
+  }
+  if (typeof input !== "number" || !Number.isSafeInteger(input) || input < 0) {
+    throw new Error(`${path} must be a non-negative integer`);
+  }
+  return input;
+}
+function requirePostHookRecord(input, path) {
+  if (input === null || typeof input !== "object" || Array.isArray(input)) {
+    throw new Error(`${path} must be an object`);
+  }
+  return input;
+}
+
 // ../contracts/dist/run-config.js
 var SKILL_BUNDLE_LIMITS = {
   /** Compressed (.zip) ceiling. */
   maxCompressedBytes: 10 * 1024 * 1024,
   /**
-   * Hard ceiling for the direct-to-storage (presigned PUT) upload path, where
-   * bytes never transit the hosted API so its memory/request-payload limits no
-   * longer cap the bundle. Kept well under the object store's 5 GiB single-PUT
-   * limit; objects above this would need S3 multipart, which is out of scope.
+   * Hard ceiling for the direct-to-storage upload path. Bytes never transit the
+   * hosted API, so its memory/request-payload limits do not cap accepted
+   * bundles; objects above this product cap are rejected before upload.
    */
   maxBytes: 2 * 1024 * 1024 * 1024,
   /** Sum of uncompressed file sizes. */
@@ -446,6 +632,7 @@ function parseRunRequestConfig(input) {
     "environment",
     "runtimeSize",
     "timeout",
+    "postHook",
     "proxyEndpoints",
     "metadata"
   ]);
@@ -454,10 +641,7 @@ function parseRunRequestConfig(input) {
       throw new Error(`run request config contains unexpected field: ${key}`);
     }
   }
-  const model = record.model;
-  if (typeof model !== "string" || model.length === 0) {
-    throw new Error("run request config model must be a non-empty string");
-  }
+  const model = parseRunModel(record.model, "run request config model");
   const system = record.system;
   if (system !== void 0 && typeof system !== "string") {
     throw new Error("run request config system, when provided, must be a string");
@@ -465,6 +649,7 @@ function parseRunRequestConfig(input) {
   const prompt = parseRunRequestConfigPrompt(record.prompt);
   const skills = parseRunRequestConfigSkills(record.skills);
   const mcpServers = parseRunRequestConfigMcpServers(record.mcpServers);
+  const postHook = parsePostHook(record.postHook, "run request config postHook");
   return {
     model,
     ...system !== void 0 ? { system } : {},
@@ -478,6 +663,7 @@ function parseRunRequestConfig(input) {
     ...record.environment !== void 0 ? { environment: record.environment } : {},
     ...record.runtimeSize !== void 0 ? { runtimeSize: record.runtimeSize } : {},
     ...record.timeout !== void 0 ? { timeout: record.timeout } : {},
+    ...postHook !== void 0 ? { postHook: record.postHook } : {},
     ...record.proxyEndpoints !== void 0 ? { proxyEndpoints: record.proxyEndpoints } : {},
     ...record.metadata !== void 0 ? { metadata: record.metadata } : {}
   };
@@ -532,32 +718,6 @@ function parseRunRequestConfigMcpServers(value) {
   });
 }
 
-// ../contracts/dist/runtime-sizes.js
-var RUNTIME_SIZE_PRESETS = {
-  "shared-1x-256mb": { cpus: 1, memoryMb: 256 },
-  "shared-1x-512mb": { cpus: 1, memoryMb: 512 },
-  "shared-1x-1gb": { cpus: 1, memoryMb: 1024 },
-  "shared-1x-2gb": { cpus: 1, memoryMb: 2048 },
-  "shared-2x-512mb": { cpus: 2, memoryMb: 512 },
-  "shared-2x-1gb": { cpus: 2, memoryMb: 1024 },
-  "shared-2x-2gb": { cpus: 2, memoryMb: 2048 },
-  "shared-2x-4gb": { cpus: 2, memoryMb: 4096 },
-  "shared-4x-1gb": { cpus: 4, memoryMb: 1024 },
-  "shared-4x-2gb": { cpus: 4, memoryMb: 2048 },
-  "shared-4x-4gb": { cpus: 4, memoryMb: 4096 },
-  "shared-4x-8gb": { cpus: 4, memoryMb: 8192 },
-  "shared-8x-2gb": { cpus: 8, memoryMb: 2048 },
-  "shared-8x-4gb": { cpus: 8, memoryMb: 4096 },
-  "shared-8x-8gb": { cpus: 8, memoryMb: 8192 },
-  "shared-8x-16gb": { cpus: 8, memoryMb: 16384 }
-};
-var RUNTIME_SIZES = Object.keys(RUNTIME_SIZE_PRESETS);
-var DEFAULT_RUN_TIMEOUT_MS = 60 * 60 * 1e3;
-var MAX_RUN_TIMEOUT_MS = 6 * 60 * 60 * 1e3;
-var MIN_RUN_TIMEOUT_MS = 60 * 1e3;
-var RUN_PROCESS_KILL_GRACE_MS = 60 * 1e3;
-var RUN_TERMINAL_GRACE_MS = 90 * 1e3;
-
 // ../contracts/dist/runtime-security-profile.js
 var RUNTIME_SECURITY_PROFILE_CONFIG = Object.freeze({
   strict: Object.freeze({
@@ -3052,6 +3212,11 @@ async function runRunCmd(io2, argv) {
       io2.stderr("--model is required when --config is not provided\n");
       return USAGE_ERR;
     }
+    if (!RUN_MODELS.includes(modelFlag.value)) {
+      io2.stderr(`--model must be one of: ${RUN_MODELS.join(", ")} (got: ${modelFlag.value})
+`);
+      return USAGE_ERR;
+    }
     if (promptFlags.values.length === 0) {
       io2.stderr("--prompt is required (repeatable)\n");
       return USAGE_ERR;
@@ -3180,6 +3345,7 @@ async function runRunCmd(io2, argv) {
     secrets,
     ...runtimeSizeFlag.value ? { runtimeSize: runtimeSizeFlag.value } : runConfig.runtimeSize ? { runtimeSize: runConfig.runtimeSize } : {},
     ...runTimeoutFlag.value ? { timeout: runTimeoutFlag.value } : runConfig.timeout ? { timeout: runConfig.timeout } : {},
+    ...runConfig.postHook ? { postHook: runConfig.postHook } : {},
     ...proxyEndpoints.length > 0 ? { proxyEndpoints } : {}
   };
   const http = makeHttpClient(io2, common.flags);
@@ -4074,7 +4240,7 @@ Protocol version: ${manifest.protocolVersion}
   io2.stdout("  aex wait <run-id> [--timeout 8m] [--interval 2s] --api-token T\n");
   io2.stdout("  aex events <run-id> [--follow] [--timeout 8m] --api-token T\n");
   io2.stdout("  aex outputs <run-id> --api-token T\n");
-  io2.stdout("  aex download <run-id> [--out path] --api-token T\n");
+  io2.stdout("  aex download <run-id> [--only outputs|events|metadata] [--out path] --api-token T\n");
   io2.stdout("  aex cancel <run-id> --api-token T\n");
   io2.stdout("  aex delete <run-id> --api-token T\n");
   io2.stdout("  aex delete-asset <assetId|hash> --api-token T\n");

package/dist/cli.mjs.sha256

@@ -1 +1 @@
-8fc0f76c60d859e98d5f41fc2d6f2195fbb10b1ece6de8275ab3d3f27518c202  cli.mjs
+8bfa8cd36b90d39d27799f8919e6d19de682c6e6fe5153bd1116bc80a228c7cc  cli.mjs

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-import { HttpClient, type AexEvent, type AgentsMdRecord, type CredentialMode, type DebugSink, type FetchLike, type FileRecord, type Output, type OutputMode, type PlatformEnvironmentInput, type PlatformSubmission, type PlatformInlineSecrets, type PlatformProxyEndpoint, type PlatformProxyEndpointAuth, type Run, type RunEvent, type RunProvider, type RunUnit, type RuntimeSize, type RuntimeKind, type SignedOutputLink, type Skill as SkillRecord, type WhoAmI } from "./_contracts/index.js";
+import { HttpClient, type AexEvent, type AgentsMdRecord, type CredentialMode, type DebugSink, type FetchLike, type FileRecord, type Output, type OutputMode, type PlatformEnvironmentInput, type PlatformSubmission, type PlatformInlineSecrets, type PlatformProxyEndpoint, type PlatformProxyEndpointAuth, type PlatformPostHookInput, type Run, type RunModel, type RunEvent, type RunProvider, type RunUnit, type Builtin, type RuntimeSize, type RuntimeKind, type SignedOutputLink, type Skill as SkillRecord, type WhoAmI } from "./_contracts/index.js";
 import { AgentsMd } from "./agents-md.js";
 import { type UploadedAsset } from "./asset-upload.js";
 import { File } from "./file.js";
@@ -54,10 +54,11 @@ export interface SubmitRunOptions {
      */
     readonly credentialMode?: CredentialMode;
     /**
-     * Provider selector. Optional — defaults to
-     * {@link DEFAULT_RUN_PROVIDER} (`"anthropic"`). Selects which upstream
-     * model route the managed provider-proxy uses; the BYOK key for it is
-     * supplied as `secrets.apiKey`.
+     * Provider selector. Normally OMITTED — the provider is a pure function of
+     * `model` and is derived automatically, so the model alone determines which
+     * upstream the managed provider-proxy routes to (the BYOK key for it is
+     * supplied as `secrets.apiKey`). Pass this only to be explicit; if supplied
+     * it MUST match the model's provider or `submitRun` throws.
      */
     readonly provider?: RunProvider;
     /**
@@ -66,7 +67,12 @@ export interface SubmitRunOptions {
      * is no longer accepted.
      */
     readonly runtime?: RuntimeKind;
-    readonly model: string;
+    /**
+     * Closed public model id. Prefer the {@link Models} symbol const, e.g.
+     * `Models.CLAUDE_HAIKU_4_5`. The model fully determines the upstream
+     * `provider`, so you never pass `provider` alongside it.
+     */
+    readonly model: RunModel;
     readonly system?: string;
     readonly prompt: string | readonly string[];
     readonly skills?: readonly Skill[];
@@ -86,6 +92,12 @@ export interface SubmitRunOptions {
      * [1m, 6h]; omit for the 1h default. Applies to both runtimes.
      */
     readonly timeout?: string;
+    /**
+     * Command to run after the agent process exits successfully. A non-zero exit
+     * or timeout is sent back to the model as a repair prompt until `maxTurns`
+     * is exhausted. Empty commands are treated as omitted.
+     */
+    readonly postHook?: PlatformPostHookInput;
     readonly proxyEndpoints?: readonly ProxyEndpoint[];
     /**
      * Output capture policy for the run's output files.
@@ -105,20 +117,23 @@ export interface SubmitRunOptions {
     };
     /**
      * Override the managed runtime builtin extensions enabled inside the runner.
+     * Each entry is one of the closed {@link Builtin} set — prefer the
+     * {@link Builtins} symbol const so a typo is a compile error.
      *
-     * - Omitted (default): the runner enables `["developer"]` which gives
-     *   the agent `shell`, `write`, `edit`, and `tree` tools (bash, grep
-     *   via shell, file read via shell or editor, file edit).
+     * - Omitted (default): the runner enables `[Builtins.DEVELOPER]`
+     *   which gives the agent `shell`, `write`, `edit`, and `tree` tools (bash,
+     *   grep via shell, file read via shell or editor, file edit).
      * - Empty array: the agent runs with zero builtin extensions —
      *   useful for pure-MCP setups where every tool comes from a
      *   submitted `mcpServers` entry.
-     * - Custom list: e.g. `["developer", "computercontroller"]` to add
-     *   web search alongside the default shell/edit toolkit.
+     * - Custom list: e.g.
+     *   `[Builtins.DEVELOPER, Builtins.COMPUTER_CONTROLLER]` to add
+     *   web fetch/scrape alongside the default shell/edit toolkit.
      *
-     * Validation: each entry matches `/^[a-z][a-z0-9_-]{0,63}$/`, max 16
+     * Validation: each entry must be a member of {@link Builtins}, max 16
      * entries, deduplicated server-side.
      */
-    readonly builtins?: readonly string[];
+    readonly builtins?: readonly Builtin[];
     /**
      * Assistant-output granularity. `"buffered"` (default) delivers one event per
      * assistant message; `"stream"` delivers per-token text deltas for live