@aexhq/sdk 0.24.0 → 0.25.1

package/dist/_contracts/run-custody.js

@@ -1,8 +1,6 @@
 export const CUSTODY_MANIFEST_SCHEMA_VERSION = 1;
-export const CUSTODY_TOMBSTONE_SCHEMA_VERSION = 1;
 export const CUSTODY_REDACTION_SCANNER_VERSION = 1;
 export const CUSTODY_MANIFEST_KIND = "aex.custody_manifest.v1";
-export const CUSTODY_TOMBSTONE_KIND = "aex.custody_tombstone.v1";
 export const CUSTODY_MANIFEST_CONTENT_TYPE = "application/json; charset=utf-8";
 export const CUSTODY_MANIFEST_RUN_REL_PATH = "metadata/custody.json";
 export const CUSTODY_SECRET_CLASSES = [
@@ -88,17 +86,6 @@ export const CUSTODY_MANIFEST_EXCLUDED_VALUE_CLASSES = [
     "vault_ids",
     "private_resource_handles"
 ];
-export const CUSTODY_TOMBSTONE_MANIFEST_STATUSES = [
-    "written",
-    "not_written",
-    "write_failed",
-    "purged"
-];
-export const CUSTODY_TOMBSTONE_DELETION_STATUSES = [
-    "not_deleted",
-    "pending_delete",
-    "deleted"
-];
 export class CustodyManifestRedactionError extends Error {
     code = "custody_manifest_not_public_safe";
     findings;
@@ -176,40 +163,6 @@ export function buildCustodyManifest(input) {
     assertPublicSafeCustodyPayload(manifest);
     return manifest;
 }
-export function buildCustodyTombstone(input) {
-    const tombstone = Object.freeze({
-        schemaVersion: CUSTODY_TOMBSTONE_SCHEMA_VERSION,
-        kind: CUSTODY_TOMBSTONE_KIND,
-        run: normalizeTombstoneRun(input.run),
-        manifest: normalizeTombstoneManifest(input.manifest),
-        summary: normalizeSummary(input.summary),
-        deletion: normalizeTombstoneDeletion(input.deletion ?? { status: "not_deleted" }),
-        retention: Object.freeze({
-            defaultPolicy: "retain_indefinitely",
-            userAction: "purge_or_anonymize_later"
-        })
-    });
-    assertPublicSafeCustodyPayload(tombstone);
-    return tombstone;
-}
-export function buildCustodyTombstoneFromManifest(manifest, input) {
-    return buildCustodyTombstone({
-        run: {
-            runId: manifest.run.runId,
-            workspaceId: manifest.run.workspaceId,
-            terminalStatus: manifest.run.terminalStatus,
-            ...(manifest.run.terminalAt ? { terminalAt: manifest.run.terminalAt } : {})
-        },
-        manifest: {
-            status: input.manifestStatus ?? "written",
-            generatedAt: manifest.generatedAt,
-            ...(manifest.finalizedAt ? { finalizedAt: manifest.finalizedAt } : {}),
-            tombstonedAt: input.tombstonedAt
-        },
-        summary: manifest.summary,
-        ...(input.deletion ? { deletion: input.deletion } : {})
-    });
-}
 export function scanCustodyPayloadForSensitiveValues(input) {
     const findings = [];
     visitCustodyValue(input, "$", findings);
@@ -351,30 +304,6 @@ function normalizeSummary(input) {
         ])))
     });
 }
-function normalizeTombstoneRun(input) {
-    return Object.freeze({
-        runId: assertSafeIdentifier(input.runId, "tombstone.run.runId"),
-        workspaceId: assertSafeIdentifier(input.workspaceId, "tombstone.run.workspaceId"),
-        terminalStatus: assertSafeMetadataString(input.terminalStatus, "tombstone.run.terminalStatus"),
-        ...(input.terminalAt ? { terminalAt: assertTimestamp(input.terminalAt, "tombstone.run.terminalAt") } : {})
-    });
-}
-function normalizeTombstoneManifest(input) {
-    return Object.freeze({
-        schemaVersion: CUSTODY_MANIFEST_SCHEMA_VERSION,
-        status: input.status,
-        ...(input.generatedAt ? { generatedAt: assertTimestamp(input.generatedAt, "tombstone.manifest.generatedAt") } : {}),
-        ...(input.finalizedAt ? { finalizedAt: assertTimestamp(input.finalizedAt, "tombstone.manifest.finalizedAt") } : {}),
-        tombstonedAt: assertTimestamp(input.tombstonedAt, "tombstone.manifest.tombstonedAt")
-    });
-}
-function normalizeTombstoneDeletion(input) {
-    return Object.freeze({
-        status: input.status,
-        ...(input.pendingAt ? { pendingAt: assertTimestamp(input.pendingAt, "tombstone.deletion.pendingAt") } : {}),
-        ...(input.deletedAt ? { deletedAt: assertTimestamp(input.deletedAt, "tombstone.deletion.deletedAt") } : {})
-    });
-}
 function visitCustodyValue(input, path, findings) {
     if (typeof input === "string") {
         scanStringValue(input, path, findings);
@@ -446,13 +375,9 @@ const forbiddenStringPatterns = Object.freeze([
     {
         reason: "private_resource_handle",
         // `<keyword><sep><id>` opaque handles (`session_a1B2c3D4e5`, `file_9f8e7d…`).
-        // The keyword set overlaps ordinary English (agent/file/skill/resource/…), so
-        // the bare shape also matched documentation prose that simply chains those
-        // words with `_`/`-` (`agent_decision_failure`, `file_grounded`,
-        // `session_handoff_contract`, `agent-judgment` — read straight out of a
-        // skill-pack doc in tool-result text). The `accept` predicate keeps the shape
-        // but requires the id segment to look minted rather than spelled — i.e. carry
-        // a digit — so genuine handles stay flagged while dictionary-word prose does not.
+        // The keyword set overlaps ordinary prose, so require the id segment to
+        // carry a digit. That keeps genuine minted handles flagged while avoiding
+        // dictionary-word chains such as `agent_decision_failure`.
         regex: /\b(?:machine|session|agent|file|skill|env|resource|handle|token_hash|bearer_hash)[_:-][A-Za-z0-9][A-Za-z0-9_-]{7,}\b/i,
         accept: isMintedResourceHandle
     },
@@ -496,15 +421,6 @@ function isHighEntropySecretRun(run) {
     }
     return highEntropyShannonBits(run) >= 3.0;
 }
-/**
- * Decide whether a `<keyword><sep><id>` shape-match is a genuinely minted private
- * handle rather than dictionary-word prose. The id segment (everything after the
- * first `_`/`-`/`:`) must carry a digit — the property that separates a minted
- * opaque handle (`session_a1B2c3D4e5`, `file_9f8e7d6c5b4a`, `machine_1234567890`)
- * from a chain of English words (`agent_decision_failure`, `file_grounded`). This
- * mirrors `isHighEntropySecretRun`'s letter+digit requirement: a prefixless secret
- * blob and a minted handle both carry digits; prose does not.
- */
 function isMintedResourceHandle(match) {
     const separatorIndex = match.search(/[_:-]/);
     const id = match.slice(separatorIndex + 1);

package/dist/_contracts/run-retention.d.ts

@@ -10,7 +10,7 @@ export declare const RUN_DELETION_MANIFEST_MODES: readonly ["dry_run", "final"];
 export type RunDeletionManifestMode = (typeof RUN_DELETION_MANIFEST_MODES)[number];
 export declare const RUN_DELETION_CANDIDATE_STATUSES: readonly ["selected", "blocked"];
 export type RunDeletionCandidateStatus = (typeof RUN_DELETION_CANDIDATE_STATUSES)[number];
-export declare const RUN_DELETION_BLOCKERS: readonly ["non_terminal", "already_deleted", "concurrent_delete", "retention_policy_disabled", "unexpired", "held", "retention_exempt", "unresolved_cleanup", "unresolved_custody"];
+export declare const RUN_DELETION_BLOCKERS: readonly ["non_terminal", "retention_policy_disabled", "unexpired", "held", "retention_exempt", "unresolved_cleanup", "unresolved_custody"];
 export type RunDeletionBlocker = (typeof RUN_DELETION_BLOCKERS)[number];
 export declare const RUN_DELETION_COUNT_CLASSES: readonly ["object_store_objects", "outputs", "logs", "events", "assets", "db_event_rows", "db_output_rows", "capture_failures", "storage_samples", "custody_manifests"];
 export type RunDeletionCountClass = (typeof RUN_DELETION_COUNT_CLASSES)[number];
@@ -40,8 +40,6 @@ export interface RunDeletionCandidateRunV1 {
     readonly status: RunStatus | string;
     readonly createdAt?: string;
     readonly terminalAt?: string;
-    readonly pendingDeleteAt?: string;
-    readonly deletedAt?: string;
     readonly held?: boolean;
     readonly retentionExempt?: boolean;
     readonly unresolvedCleanup?: boolean;
@@ -78,8 +76,6 @@ export interface RunDeletionManifestRunV1 {
     readonly createdAt?: string;
     readonly terminalAt?: string;
     readonly eligibleAt?: string;
-    readonly pendingDeleteAt?: string;
-    readonly deletedAt?: string;
 }
 export interface RunDeletionManifestRequestV1 {
     readonly reason: RunDeletionReason;

package/dist/_contracts/run-retention.js

@@ -9,8 +9,6 @@ export const RUN_DELETION_MANIFEST_MODES = ["dry_run", "final"];
 export const RUN_DELETION_CANDIDATE_STATUSES = ["selected", "blocked"];
 export const RUN_DELETION_BLOCKERS = [
     "non_terminal",
-    "already_deleted",
-    "concurrent_delete",
     "retention_policy_disabled",
     "unexpired",
     "held",
@@ -266,8 +264,6 @@ function normalizeCandidateRun(input) {
         status: assertSafeMetadataString(input.status, "run.status"),
         ...(input.createdAt ? { createdAt: assertTimestamp(input.createdAt, "run.createdAt") } : {}),
         ...(input.terminalAt ? { terminalAt: assertTimestamp(input.terminalAt, "run.terminalAt") } : {}),
-        ...(input.pendingDeleteAt ? { pendingDeleteAt: assertTimestamp(input.pendingDeleteAt, "run.pendingDeleteAt") } : {}),
-        ...(input.deletedAt ? { deletedAt: assertTimestamp(input.deletedAt, "run.deletedAt") } : {}),
         ...(input.held !== undefined ? { held: input.held } : {}),
         ...(input.retentionExempt !== undefined ? { retentionExempt: input.retentionExempt } : {}),
         ...(input.unresolvedCleanup !== undefined ? { unresolvedCleanup: input.unresolvedCleanup } : {}),
@@ -282,9 +278,7 @@ function normalizeManifestRun(input, eligibleAt) {
         status: run.status,
         ...(run.createdAt ? { createdAt: run.createdAt } : {}),
         ...(run.terminalAt ? { terminalAt: run.terminalAt } : {}),
-        ...(eligibleAt ? { eligibleAt: assertTimestamp(eligibleAt, "run.eligibleAt") } : {}),
-        ...(run.pendingDeleteAt ? { pendingDeleteAt: run.pendingDeleteAt } : {}),
-        ...(run.deletedAt ? { deletedAt: run.deletedAt } : {})
+        ...(eligibleAt ? { eligibleAt: assertTimestamp(eligibleAt, "run.eligibleAt") } : {})
     });
 }
 function normalizeRequest(input) {
@@ -360,13 +354,7 @@ function normalizePurgeProof(input) {
     });
 }
 function addRunBlockers(blockers, run, observedAt) {
-    if (run.status === "deleted") {
-        blockers.push(blocker("already_deleted", observedAt));
-    }
-    else if (run.status === "pending_delete" || run.pendingDeleteAt) {
-        blockers.push(blocker("concurrent_delete", observedAt));
-    }
-    else if (!isTerminalStatusLike(run.status)) {
+    if (!isTerminalStatusLike(run.status)) {
         blockers.push(blocker("non_terminal", observedAt));
     }
     if (run.held) {

package/dist/_contracts/run-unit.d.ts

@@ -120,8 +120,8 @@ export interface RunUnitProxyCallPage {
 }
 /**
  * Workspace skill bundle pinned at submission. `liveSkillId` is `null`
- * when the corresponding `skill_bundles` row has been soft-deleted —
- * the UI uses that to render a tombstoned link.
+ * when the corresponding `skill_bundles` row no longer exists after a
+ * hard delete; run snapshots keep the submitted metadata.
  */
 export interface RunUnitSkillSnapshot {
     readonly skillId: string;

package/dist/_contracts/run-unit.js

@@ -64,6 +64,7 @@ function parseFlatProjection(value) {
         agentsMd: [],
         files: [],
         mcpServers: toMcpServerRefArray(submissionRaw.mcpServers),
+        tools: [],
         ...(parseEnvironment(submissionRaw.environment)
             ? { environment: parseEnvironment(submissionRaw.environment) }
             : {}),
@@ -109,7 +110,8 @@ function fallbackFlat() {
             skills: [],
             agentsMd: [],
             files: [],
-            mcpServers: []
+            mcpServers: [],
+            tools: []
         }
     };
 }

package/dist/_contracts/runtime-security-profile.js

@@ -11,7 +11,7 @@ export const RUNTIME_SECURITY_PROFILE_CONFIG = Object.freeze({
     }),
     standard: Object.freeze({
         name: "standard",
-        defaultNetworkingMode: "limited",
+        defaultNetworkingMode: "open",
         allowOpenNetworking: true,
         allowRuntimePackages: true,
         allowCustomerEnvVars: true,

package/dist/_contracts/runtime-types.d.ts

@@ -90,7 +90,7 @@ export interface ProviderEvent {
 }
 /**
  * One captured output file as the dashboard reports it. Use
- * `createOutputLink` to get a short-lived signed URL for download.
+ * `outputLink` / `createOutputLink` to get a temporary direct URL for download.
  */
 export interface Output {
     readonly id: string;
@@ -101,6 +101,25 @@ export interface Output {
     readonly [key: string]: unknown;
 }
 export type OutputFilePathMatch = "exact" | "suffix";
+export type OutputFileType = "text" | "json" | "image" | "audio" | "video" | "pdf" | "archive" | "binary" | "unknown";
+export interface OutputQuery {
+    /** Exact normalized output path. Leading `/` and `outputs/` are ignored. */
+    readonly path?: string;
+    /** Basename match. A RegExp is tested against the basename only. */
+    readonly filename?: string | RegExp;
+    /**
+     * Directory prefix. Leading `/` and `outputs/` are ignored.
+     * `recursive` defaults to true.
+     */
+    readonly dir?: string;
+    readonly recursive?: boolean;
+    /** File extension, with or without a leading dot. Case-insensitive. */
+    readonly extension?: string;
+    /** Exact content type or a prefix wildcard such as `image/*`. */
+    readonly contentType?: string;
+    /** High-level type inferred from content type first, then extension. */
+    readonly type?: OutputFileType;
+}
 export interface OutputFilePathSelector {
     readonly path: string;
     readonly match?: OutputFilePathMatch;
@@ -113,11 +132,20 @@ export interface OutputFileDownload {
     readonly output: Output;
     readonly bytes: Uint8Array;
 }
-export interface SignedOutputLink {
+export type OutputLinkExpiresIn = number | "15m" | "1h" | "1d";
+export interface OutputLinkOptions {
+    /** Seconds or one of the documented presets. Defaults to `"1h"`. */
+    readonly expiresIn?: OutputLinkExpiresIn;
+}
+export interface OutputLink {
     readonly url: string;
     readonly expiresAt?: string;
+    readonly expiresInSeconds?: number;
+    readonly output?: Output;
     readonly [key: string]: unknown;
 }
+/** @deprecated Renamed to {@link OutputLink}. */
+export type SignedOutputLink = OutputLink;
 export interface WhoAmI {
     readonly principalType: "api_token" | "user";
     readonly workspaceId?: string;
@@ -129,15 +157,16 @@ export interface WhoAmI {
      * Surfaced so consumers (e.g. broll's app-side admission gate) can
      * decide whether to keep their own gate or rely on platform headers.
      * All fields optional — older BFFs may omit. Numbers are concrete
-     * snapshots at the time of the `whoami` call.
+     * snapshots at the time of the `whoami` call; `null` means no app-visible
+     * cap is applied for that field.
      */
     readonly caps?: {
         /** Token-bucket cap on POST /api/runs per minute, per workspace. */
         readonly runSubmitPerMinute?: number;
         /** Hard cap on concurrent non-terminal runs the workspace may hold. */
         readonly maxConcurrentRuns?: number;
-        /** Storage cap (bytes) on captured output objects, workspace-wide. */
-        readonly storageCapBytes?: number;
+        /** Storage cap (bytes) on captured output objects, workspace-wide. `null` means unlimited. */
+        readonly storageCapBytes?: number | null;
         /** Current captured-output usage in bytes. */
         readonly storageUsedBytes?: number;
         /**
@@ -154,8 +183,8 @@ export interface WhoAmI {
  * Workspace skill bundle as the dashboard BFF returns it. Mirrors a row
  * of `skill_bundles` joined with its computed manifest. `state` is the
  * upload lifecycle (`pending` -> `ready`); only `ready` rows are
- * referenceable from a run. `deletedAt` is the soft-delete tombstone
- * (`null` for live bundles).
+ * referenceable from a run. Delete is hard; historical runs keep their
+ * submit-time snapshots rather than depending on this row.
  *
  * See the public architecture notes and server-side persistence schema for
  * the authoritative shape.
@@ -176,7 +205,6 @@ export interface Skill {
     readonly createdAt?: string;
     readonly updatedAt?: string;
     readonly finalizedAt?: string | null;
-    readonly deletedAt?: string | null;
     readonly [key: string]: unknown;
 }
 /**
@@ -199,7 +227,6 @@ export interface AgentsMdRecord {
     readonly createdAt?: string;
     readonly updatedAt?: string;
     readonly finalizedAt?: string | null;
-    readonly deletedAt?: string | null;
     readonly [key: string]: unknown;
 }
 /**
@@ -223,7 +250,6 @@ export interface FileRecord {
     readonly createdAt?: string;
     readonly updatedAt?: string;
     readonly finalizedAt?: string | null;
-    readonly deletedAt?: string | null;
     readonly [key: string]: unknown;
 }
 /**
@@ -250,8 +276,8 @@ export interface SecretRecord {
     readonly [key: string]: unknown;
 }
 /**
- * Value-bearing result of an audited `aex.secrets.reveal`. The ONLY wire shape
- * that carries a workspace secret value back to the caller. Reveal is a logged
+ * Value-bearing result of an audited `aex.secrets.get_value`. The ONLY wire shape
+ * that carries a workspace secret value back to the caller. Value read is a logged
  * action (POST, not GET) so a value read is always attributable.
  */
 export interface SecretReveal {

package/dist/_contracts/side-effect-audit.d.ts

@@ -1,9 +1,8 @@
-import type { CredentialMode } from "./managed-key.js";
-import type { RunProvider, RuntimeKind } from "./submission.js";
+import type { CredentialMode, RunProvider, RuntimeKind } from "./submission.js";
 export declare const SIDE_EFFECT_AUDIT_SCHEMA_VERSION = 1;
 export declare const SIDE_EFFECT_AUDIT_REDACTION_SCANNER_VERSION = 1;
 export declare const SIDE_EFFECT_AUDIT_KIND = "aex.side_effect_audit.v1";
-export declare const SIDE_EFFECT_AUDIT_ACTIONS: readonly ["run.submit.accepted", "run.submit.rejected", "run.cancel.requested", "run.delete.requested", "run.delete.completed", "run.delete.failed", "run.download.requested", "run.output.downloaded", "run.log.downloaded", "run.event.downloaded", "workspace.asset.uploaded", "workspace.asset.deleted", "proxy.endpoint.called", "mcp.credential.accessed", "mcp.proxy.called", "provider.proxy.called", "custody.manifest.written", "custody.transition.recorded", "runtime.cleanup.completed", "runtime.cleanup.failed", "managed_key.quota.denied", "terminal_redrive.attempted", "terminal_redrive.completed", "api_token.created", "api_token.revoked", "api_token.used"];
+export declare const SIDE_EFFECT_AUDIT_ACTIONS: readonly ["run.submit.accepted", "run.submit.rejected", "run.cancel.requested", "run.delete.requested", "run.delete.completed", "run.delete.failed", "run.download.requested", "run.output.downloaded", "run.log.downloaded", "run.event.downloaded", "workspace.asset.uploaded", "workspace.asset.deleted", "proxy.endpoint.called", "mcp.credential.accessed", "mcp.proxy.called", "provider.proxy.called", "custody.manifest.written", "custody.transition.recorded", "runtime.cleanup.completed", "runtime.cleanup.failed", "terminal_redrive.attempted", "terminal_redrive.completed", "api_token.created", "api_token.deleted", "api_token.used"];
 export type SideEffectAuditAction = (typeof SIDE_EFFECT_AUDIT_ACTIONS)[number];
 export declare const SIDE_EFFECT_AUDIT_ACTOR_PRINCIPAL_TYPES: readonly ["user", "api_token", "system", "runtime"];
 export type SideEffectAuditActorPrincipalType = (typeof SIDE_EFFECT_AUDIT_ACTOR_PRINCIPAL_TYPES)[number];
@@ -11,13 +10,13 @@ export declare const SIDE_EFFECT_AUDIT_SOURCE_PLANES: readonly ["dashboard", "wo
 export type SideEffectAuditSourcePlane = (typeof SIDE_EFFECT_AUDIT_SOURCE_PLANES)[number];
 export declare const SIDE_EFFECT_AUDIT_AUTHENTICATION_KINDS: readonly ["dashboard_auth", "api_token", "runner_token", "system"];
 export type SideEffectAuditAuthenticationKind = (typeof SIDE_EFFECT_AUDIT_AUTHENTICATION_KINDS)[number];
-export declare const SIDE_EFFECT_AUDIT_TARGET_TYPES: readonly ["workspace", "run", "proxy_endpoint", "mcp_credential", "mcp_proxy", "provider_proxy", "output_archive", "run_output", "run_log", "run_event_stream", "workspace_asset", "custody_manifest", "custody_transition", "cleanup", "deletion", "managed_key_gate", "terminal_redrive", "api_token"];
+export declare const SIDE_EFFECT_AUDIT_TARGET_TYPES: readonly ["workspace", "run", "proxy_endpoint", "mcp_credential", "mcp_proxy", "provider_proxy", "output_archive", "run_output", "run_log", "run_event_stream", "workspace_asset", "custody_manifest", "custody_transition", "cleanup", "deletion", "terminal_redrive", "api_token"];
 export type SideEffectAuditTargetType = (typeof SIDE_EFFECT_AUDIT_TARGET_TYPES)[number];
 export declare const SIDE_EFFECT_AUDIT_OUTCOMES: readonly ["accepted", "rejected", "succeeded", "failed", "denied", "canceled", "pending"];
 export type SideEffectAuditOutcome = (typeof SIDE_EFFECT_AUDIT_OUTCOMES)[number];
 export declare const SIDE_EFFECT_AUDIT_COUNT_NAMES: readonly ["requestBytes", "responseBytes", "durationMs", "attemptCount", "retryCount", "outputCount", "logCount", "eventCount", "assetCount", "proxyCallCount", "mcpCallCount", "providerProxyCallCount", "secretClassCount", "resourceClassCount", "deletedObjectCount", "retainedObjectCount", "failedObjectCount", "quotaRequestedUnits", "quotaRemainingUnits", "reservationCount"];
 export type SideEffectAuditCountName = (typeof SIDE_EFFECT_AUDIT_COUNT_NAMES)[number];
-export declare const SIDE_EFFECT_AUDIT_TIMESTAMP_NAMES: readonly ["startedAt", "finishedAt", "observedAt", "decidedAt", "deletedAt", "tombstonedAt", "terminalAt", "expiresAt"];
+export declare const SIDE_EFFECT_AUDIT_TIMESTAMP_NAMES: readonly ["startedAt", "finishedAt", "observedAt", "decidedAt", "deletedAt", "terminalAt", "expiresAt"];
 export type SideEffectAuditTimestampName = (typeof SIDE_EFFECT_AUDIT_TIMESTAMP_NAMES)[number];
 export declare const SIDE_EFFECT_AUDIT_METADATA_EXCLUDED_VALUE_CLASSES: readonly ["headers", "bodies", "raw_urls", "raw_paths", "query_strings", "provider_response_bodies", "signed_urls", "object_store_keys", "vault_ids", "resource_handles", "bearer_hashes", "secret_values", "customer_or_agent_identity", "private_pricing_or_provider_deployment"];
 export type SideEffectAuditMetadataExcludedValueClass = (typeof SIDE_EFFECT_AUDIT_METADATA_EXCLUDED_VALUE_CLASSES)[number];

package/dist/_contracts/side-effect-audit.js

@@ -22,11 +22,10 @@ export const SIDE_EFFECT_AUDIT_ACTIONS = [
     "custody.transition.recorded",
     "runtime.cleanup.completed",
     "runtime.cleanup.failed",
-    "managed_key.quota.denied",
     "terminal_redrive.attempted",
     "terminal_redrive.completed",
     "api_token.created",
-    "api_token.revoked",
+    "api_token.deleted",
     "api_token.used"
 ];
 export const SIDE_EFFECT_AUDIT_ACTOR_PRINCIPAL_TYPES = [
@@ -63,7 +62,6 @@ export const SIDE_EFFECT_AUDIT_TARGET_TYPES = [
     "custody_transition",
     "cleanup",
     "deletion",
-    "managed_key_gate",
     "terminal_redrive",
     "api_token"
 ];
@@ -104,7 +102,6 @@ export const SIDE_EFFECT_AUDIT_TIMESTAMP_NAMES = [
     "observedAt",
     "decidedAt",
     "deletedAt",
-    "tombstonedAt",
     "terminalAt",
     "expiresAt"
 ];

package/dist/_contracts/status.d.ts

@@ -1,14 +1,13 @@
-export declare const RUN_STATUSES: readonly ["queued", "claiming", "provisioning", "session_created", "dispatched", "provider_running", "provider_idle", "provider_rescheduled", "cancelling", "capturing_outputs", "cleaning_up", "succeeded", "failed", "timed_out", "cancelled", "cleanup_failed", "pending_delete", "deleted"];
+export declare const RUN_STATUSES: readonly ["queued", "claiming", "provisioning", "session_created", "dispatched", "provider_running", "provider_idle", "provider_rescheduled", "cancelling", "capturing_outputs", "cleaning_up", "succeeded", "failed", "timed_out", "cancelled", "cleanup_failed"];
 export type RunStatus = typeof RUN_STATUSES[number];
 export type RunStatusKind = "active" | "terminal";
-export declare const TERMINAL_RUN_STATUSES: readonly ["succeeded", "failed", "timed_out", "cancelled", "cleanup_failed", "pending_delete", "deleted"];
+export declare const TERMINAL_RUN_STATUSES: readonly ["succeeded", "failed", "timed_out", "cancelled", "cleanup_failed"];
 export declare function isTerminalRunStatus(status: RunStatus): boolean;
 /**
  * The closed set of terminal OUTCOMES the run-lifecycle funnel writes via
  * `markRunTerminal` (and that a `run/terminal` event carries). This is a
  * STRICT SUBSET of {@link TERMINAL_RUN_STATUSES}: the read-terminal set also
- * includes the post-terminal housekeeping states (`cleanup_failed`,
- * `pending_delete`, `deleted`) which the funnel never writes as an outcome.
+ * includes `cleanup_failed`, which the funnel never writes as an outcome.
  * The worker's `TerminalRunStatus` and the workflow `TerminalOutcome` both
  * derive from this so the four call sites can't drift.
  */

package/dist/_contracts/status.js

@@ -14,18 +14,14 @@ export const RUN_STATUSES = [
     "failed",
     "timed_out",
     "cancelled",
-    "cleanup_failed",
-    "pending_delete",
-    "deleted"
+    "cleanup_failed"
 ];
 export const TERMINAL_RUN_STATUSES = [
     "succeeded",
     "failed",
     "timed_out",
     "cancelled",
-    "cleanup_failed",
-    "pending_delete",
-    "deleted"
+    "cleanup_failed"
 ];
 const terminalRunStatuses = new Set(TERMINAL_RUN_STATUSES);
 export function isTerminalRunStatus(status) {
@@ -35,8 +31,7 @@ export function isTerminalRunStatus(status) {
  * The closed set of terminal OUTCOMES the run-lifecycle funnel writes via
  * `markRunTerminal` (and that a `run/terminal` event carries). This is a
  * STRICT SUBSET of {@link TERMINAL_RUN_STATUSES}: the read-terminal set also
- * includes the post-terminal housekeeping states (`cleanup_failed`,
- * `pending_delete`, `deleted`) which the funnel never writes as an outcome.
+ * includes `cleanup_failed`, which the funnel never writes as an outcome.
  * The worker's `TerminalRunStatus` and the workflow `TerminalOutcome` both
  * derive from this so the four call sites can't drift.
  */