@aexhq/sdk 0.25.0 → 0.25.1

package/dist/_contracts/status.js

@@ -14,18 +14,14 @@ export const RUN_STATUSES = [
     "failed",
     "timed_out",
     "cancelled",
-    "cleanup_failed",
-    "pending_delete",
-    "deleted"
+    "cleanup_failed"
 ];
 export const TERMINAL_RUN_STATUSES = [
     "succeeded",
     "failed",
     "timed_out",
     "cancelled",
-    "cleanup_failed",
-    "pending_delete",
-    "deleted"
+    "cleanup_failed"
 ];
 const terminalRunStatuses = new Set(TERMINAL_RUN_STATUSES);
 export function isTerminalRunStatus(status) {
@@ -35,8 +31,7 @@ export function isTerminalRunStatus(status) {
  * The closed set of terminal OUTCOMES the run-lifecycle funnel writes via
  * `markRunTerminal` (and that a `run/terminal` event carries). This is a
  * STRICT SUBSET of {@link TERMINAL_RUN_STATUSES}: the read-terminal set also
- * includes the post-terminal housekeeping states (`cleanup_failed`,
- * `pending_delete`, `deleted`) which the funnel never writes as an outcome.
+ * includes `cleanup_failed`, which the funnel never writes as an outcome.
  * The worker's `TerminalRunStatus` and the workflow `TerminalOutcome` both
  * derive from this so the four call sites can't drift.
  */

package/dist/_contracts/submission.d.ts

@@ -5,7 +5,6 @@ import { type RuntimeSize } from "./runtime-sizes.js";
 import { type PlatformPostHook, type PlatformPostHookInput } from "./post-hook.js";
 import { type RunModel } from "./models.js";
 import { type RuntimeSecurityProfileName } from "./runtime-security-profile.js";
-import { type CredentialMode, type ManagedKeyPolicyV1 } from "./managed-key.js";
 export type JsonPrimitive = string | number | boolean | null;
 export type JsonValue = JsonPrimitive | JsonValue[] | {
     readonly [key: string]: JsonValue;
@@ -145,6 +144,17 @@ export declare const Providers: {
  */
 export declare const RUNTIME_KINDS: readonly ["managed"];
 export type RuntimeKind = (typeof RUNTIME_KINDS)[number];
+/**
+ * Credential source for upstream provider access. Launch accepts only BYOK:
+ * callers may omit `credentialMode` or pass `"byok"`. Other strings, including
+ * `"managed"`, are invalid submission values rather than reserved product
+ * promises.
+ */
+export declare const CREDENTIAL_MODES: readonly ["byok"];
+export type CredentialMode = (typeof CREDENTIAL_MODES)[number];
+export declare const DEFAULT_CREDENTIAL_MODE: CredentialMode;
+export declare function parseCredentialMode(input: unknown): CredentialMode;
+export declare function credentialModeOrDefault(input: CredentialMode | undefined): CredentialMode;
 /** Outcome of the centralized runtime-support check. */
 export interface RuntimeSupportCheck {
     readonly ok: boolean;
@@ -188,11 +198,10 @@ export type PlatformProxyAuthValue = {
 };
 /**
  * Per-run inline secrets bundle. `apiKey` is the BYOK provider key for the
- * run's selected `provider` (required in `"byok"` credential mode, rejected
- * in `"managed"` mode). A run targets exactly one provider, so the key is a
- * single flat field rather than a per-provider block. `mcpServers` and
- * `proxyEndpointAuth` are cross-provider (an MCP credential is the same
- * secret whichever model is driving the MCP client).
+ * run's selected `provider`. A run targets exactly one provider, so the key is
+ * a single flat field rather than a per-provider block. `mcpServers` and
+ * `proxyEndpointAuth` are cross-provider (an MCP credential is the same secret
+ * whichever model is driving the MCP client).
  */
 export interface PlatformInlineSecrets {
     readonly apiKey?: string;
@@ -289,9 +298,9 @@ export declare function optionalPositiveInt(input: unknown, field: string): numb
  * only the non-secret half; bearer headers travel in
  * `secrets.mcpServers` keyed by `name`.
  *
- * `skills` is a list of `SkillRef`s — workspace refs point at
- * `skill_bundles.id` (validated by the BFF before acceptance and pinned
- * into `run_skill_snapshots`), provider refs pass through unchanged.
+ * `skills` is a list of `SkillRef`s. Launch workspace skills use
+ * content-addressed asset refs; run submission snapshots the bytes into the
+ * run-owned prefix before dispatch.
  */
 export interface PlatformSubmission {
     readonly model: RunModel;
@@ -321,14 +330,14 @@ export interface PlatformSubmission {
      */
     readonly outputs?: PlatformOutputCaptureConfig;
     /**
-     * Optional override for the managed-runtime builtin extensions enabled
-     * inside the runner container. Each entry is one of the closed
-     * {@link BUILTINS} set (prefer the {@link Builtins} symbol
-     * const). The platform default is `["developer"]` which gives the agent
-     * shell + write + edit + tree tools (bash, grep via shell, file read via
-     * shell or editor, file edit). To opt in to more tools (e.g. web fetch via
-     * the `computercontroller` extension), pass the full list. To opt out of
-     * all builtins (pure-MCP setup), pass an empty array.
+     * Optional override for the managed-runtime builtins enabled inside the
+     * runner container. Each entry is one of the closed {@link BUILTINS} set
+     * (prefer the {@link Builtins} symbol const).
+     *
+     * Omit the field for {@link DEFAULT_BUILTINS}: web search, web fetch,
+     * file read/edit, glob, grep, head, and tail. Pass an empty array to opt out
+     * of all builtins for pure-MCP runs. Pass a custom list to narrow or extend
+     * the tool surface, for example `[Builtins.WEB_SEARCH, Builtins.NOTEBOOK]`.
      *
      * Validation:
      *   - Each entry must be a member of {@link BUILTINS}.
@@ -389,9 +398,7 @@ export interface PlatformRunSubmissionRequest {
     readonly idempotencyKey: string;
     /**
      * Credential source for upstream provider access. Omitted means
-     * `"byok"` for compatibility with the current production path.
-     * `"managed"` is a public contract value but remains fail-closed until
-     * credential resolution and billing admission are available.
+     * `"byok"`; launch does not accept managed provider credentials.
      */
     readonly credentialMode: CredentialMode;
     /**
@@ -470,20 +477,14 @@ export type PlatformRunSubmissionInput = Omit<PlatformRunSubmissionRequest, "wor
     readonly postHook?: PlatformPostHookInput;
 };
 export interface ParseRunSubmissionOptions {
-    readonly managedKeyPolicy?: ManagedKeyPolicyV1;
 }
 export declare function parseRunSubmissionRequest(input: unknown, options?: ParseRunSubmissionOptions): PlatformRunSubmissionRequest;
 export declare function parseRuntimeKind(input: unknown): RuntimeKind | undefined;
 export declare function parseRunProvider(input: unknown): RunProvider;
 /**
- * Cross-check the supplied secrets bundle against the credential mode.
- *
- *  - `"byok"`: `secrets.apiKey` (the provider key for the run's `provider`)
- *    MUST be present.
- *  - `"managed"`: `secrets.apiKey` MUST be absent — provider access is
- *    resolved by the managed-key policy, not a caller-supplied key.
- *  - MCP / proxy endpoint auth carry across providers and are not
- *    checked here.
+ * Cross-check the supplied secrets bundle against the credential mode. BYOK
+ * requires `secrets.apiKey` (the provider key for the run's `provider`). MCP /
+ * proxy endpoint auth carry across providers and are not checked here.
  */
 export declare function enforceCredentialSecretPolicy(credentialMode: CredentialMode, secrets: PlatformInlineSecrets): void;
 export declare function parseSubmission(input: unknown): PlatformSubmission;
@@ -492,28 +493,52 @@ export declare const OUTPUT_MODES: readonly ["buffered", "stream"];
 export type OutputMode = (typeof OUTPUT_MODES)[number];
 export declare const DEFAULT_OUTPUT_MODE: OutputMode;
 /**
- * Managed-runtime builtin extensions — the closed set the managed runtime
- * accepts. Closed so an invalid name is a compile error via {@link Builtins},
- * not a silent runtime no-op. `developer` is the platform default when
- * `builtins` is omitted; pass an empty array to disable all builtins
- * (pure-MCP setup).
+ * Managed-runtime builtins — the closed set the managed runtime accepts.
+ * Closed so an invalid name is a compile error via {@link Builtins}, not a
+ * silent runtime no-op.
+ *
+ * The first entries are the recommended concrete builtins. The legacy aggregate
+ * extension names remain accepted for existing callers, but are not the default.
  */
-export declare const BUILTINS: readonly ["developer", "computercontroller", "memory", "autovisualiser", "tutorial"];
+export declare const BUILTINS: readonly ["web_search", "web_fetch", "read", "edit", "glob", "grep", "head", "tail", "notebook", "developer", "computercontroller", "memory", "autovisualiser", "tutorial"];
 export type Builtin = (typeof BUILTINS)[number];
+/**
+ * DX-first managed-runtime defaults. Omitted `builtins` resolves to this list.
+ * Notebook support remains opt-in through {@link Builtins.NOTEBOOK}.
+ */
+export declare const DEFAULT_BUILTINS: readonly ["web_search", "web_fetch", "read", "edit", "glob", "grep", "head", "tail"];
 /**
  * Symbol-style accessors for the closed builtin set, e.g.
- * `Builtins.COMPUTER_CONTROLLER`.
+ * `Builtins.WEB_SEARCH`.
  */
 export declare const Builtins: {
-    /** Shell (bash + UNIX tools incl. grep), write, edit, tree. The default. */
+    /** Managed web search. Included in {@link DEFAULT_BUILTINS}. */
+    readonly WEB_SEARCH: "web_search";
+    /** Fetch a URL and return readable text. Included in {@link DEFAULT_BUILTINS}. */
+    readonly WEB_FETCH: "web_fetch";
+    /** Read files. Included in {@link DEFAULT_BUILTINS}. */
+    readonly READ: "read";
+    /** Create/modify files. Included in {@link DEFAULT_BUILTINS}. */
+    readonly EDIT: "edit";
+    /** Search paths by glob. Included in {@link DEFAULT_BUILTINS}. */
+    readonly GLOB: "glob";
+    /** Search file contents. Included in {@link DEFAULT_BUILTINS}. */
+    readonly GREP: "grep";
+    /** Read the first lines of a file. Included in {@link DEFAULT_BUILTINS}. */
+    readonly HEAD: "head";
+    /** Read the last lines of a file. Included in {@link DEFAULT_BUILTINS}. */
+    readonly TAIL: "tail";
+    /** Jupyter notebook editing. Optional; not in {@link DEFAULT_BUILTINS}. */
+    readonly NOTEBOOK: "notebook";
+    /** Legacy aggregate: shell/filesystem/navigation/web/notebook tools. */
     readonly DEVELOPER: "developer";
-    /** Web fetch/scrape, scripting, general computer-control tools. */
+    /** Legacy aggregate alias retained for existing callers. */
     readonly COMPUTER_CONTROLLER: "computercontroller";
-    /** Cross-session preference memory. */
+    /** Legacy aggregate alias retained for existing callers. */
     readonly MEMORY: "memory";
-    /** Inline data-visualisation rendering. */
+    /** Legacy aggregate alias retained for existing callers. */
     readonly AUTOVISUALISER: "autovisualiser";
-    /** Interactive guided tutorials. */
+    /** Legacy aggregate alias retained for existing callers. */
     readonly TUTORIAL: "tutorial";
 };
 /**

package/dist/_contracts/submission.js

@@ -9,7 +9,6 @@ import { parseRunTimeout, parseRuntimeSize } from "./runtime-sizes.js";
 import { parsePostHook } from "./post-hook.js";
 import { assertRunModelMatchesProvider, parseRunModel } from "./models.js";
 import { parseRuntimeSecurityProfile } from "./runtime-security-profile.js";
-import { assertManagedKeyAdmissionAllowed, parseCredentialMode } from "./managed-key.js";
 /**
  * Reserved prefix for aex-set runtime env vars (`AEX_CLI`,
  * `AEX_RUNTIME_JSON`, …). Customer `environment.envVars` keys carrying this
@@ -121,6 +120,26 @@ export const Providers = {
  * accepted submission value and fails schema validation.
  */
 export const RUNTIME_KINDS = ["managed"];
+/**
+ * Credential source for upstream provider access. Launch accepts only BYOK:
+ * callers may omit `credentialMode` or pass `"byok"`. Other strings, including
+ * `"managed"`, are invalid submission values rather than reserved product
+ * promises.
+ */
+export const CREDENTIAL_MODES = ["byok"];
+export const DEFAULT_CREDENTIAL_MODE = "byok";
+export function parseCredentialMode(input) {
+    if (input === undefined) {
+        return DEFAULT_CREDENTIAL_MODE;
+    }
+    if (typeof input !== "string" || !CREDENTIAL_MODES.includes(input)) {
+        throw new Error(`credentialMode must be one of: ${CREDENTIAL_MODES.join(", ")} (got ${JSON.stringify(input)})`);
+    }
+    return input;
+}
+export function credentialModeOrDefault(input) {
+    return input ?? DEFAULT_CREDENTIAL_MODE;
+}
 /**
  * Centralized runtime-support validator. Native is removed from the public
  * runtime enum, so an absent runtime and `"managed"` are the only supported
@@ -999,9 +1018,7 @@ export function parseRunSubmissionRequest(input, options = {}) {
     const provider = parseRunProvider(value.provider);
     const runtime = parseRuntimeKind(value.runtime);
     const credentialMode = parseCredentialMode(value.credentialMode);
-    if (credentialMode === "managed") {
-        assertManagedKeyAdmissionAllowed(options.managedKeyPolicy);
-    }
+    void options;
     // Cross-field validation via the centralized runtime-support validator.
     const runtimeSupport = checkRuntimeSupported(provider, runtime);
     if (!runtimeSupport.ok) {
@@ -1086,22 +1103,12 @@ export function parseRunProvider(input) {
     return input;
 }
 /**
- * Cross-check the supplied secrets bundle against the credential mode.
- *
- *  - `"byok"`: `secrets.apiKey` (the provider key for the run's `provider`)
- *    MUST be present.
- *  - `"managed"`: `secrets.apiKey` MUST be absent — provider access is
- *    resolved by the managed-key policy, not a caller-supplied key.
- *  - MCP / proxy endpoint auth carry across providers and are not
- *    checked here.
+ * Cross-check the supplied secrets bundle against the credential mode. BYOK
+ * requires `secrets.apiKey` (the provider key for the run's `provider`). MCP /
+ * proxy endpoint auth carry across providers and are not checked here.
  */
 export function enforceCredentialSecretPolicy(credentialMode, secrets) {
-    if (credentialMode === "managed") {
-        if (secrets.apiKey !== undefined) {
-            throw new Error(`secrets.apiKey is not allowed when credentialMode is managed; provider access is resolved by the managed-key policy`);
-        }
-        return;
-    }
+    void credentialMode;
     if (!secrets.apiKey) {
         throw new Error(`secrets.apiKey is required when credentialMode is byok`);
     }
@@ -1225,33 +1232,75 @@ function parseOutputMode(input) {
     return input;
 }
 /**
- * Managed-runtime builtin extensions — the closed set the managed runtime
- * accepts. Closed so an invalid name is a compile error via {@link Builtins},
- * not a silent runtime no-op. `developer` is the platform default when
- * `builtins` is omitted; pass an empty array to disable all builtins
- * (pure-MCP setup).
+ * Managed-runtime builtins — the closed set the managed runtime accepts.
+ * Closed so an invalid name is a compile error via {@link Builtins}, not a
+ * silent runtime no-op.
+ *
+ * The first entries are the recommended concrete builtins. The legacy aggregate
+ * extension names remain accepted for existing callers, but are not the default.
  */
 export const BUILTINS = [
+    "web_search",
+    "web_fetch",
+    "read",
+    "edit",
+    "glob",
+    "grep",
+    "head",
+    "tail",
+    "notebook",
     "developer",
     "computercontroller",
     "memory",
     "autovisualiser",
     "tutorial"
 ];
+/**
+ * DX-first managed-runtime defaults. Omitted `builtins` resolves to this list.
+ * Notebook support remains opt-in through {@link Builtins.NOTEBOOK}.
+ */
+export const DEFAULT_BUILTINS = [
+    "web_search",
+    "web_fetch",
+    "read",
+    "edit",
+    "glob",
+    "grep",
+    "head",
+    "tail"
+];
 /**
  * Symbol-style accessors for the closed builtin set, e.g.
- * `Builtins.COMPUTER_CONTROLLER`.
+ * `Builtins.WEB_SEARCH`.
  */
 export const Builtins = {
-    /** Shell (bash + UNIX tools incl. grep), write, edit, tree. The default. */
+    /** Managed web search. Included in {@link DEFAULT_BUILTINS}. */
+    WEB_SEARCH: "web_search",
+    /** Fetch a URL and return readable text. Included in {@link DEFAULT_BUILTINS}. */
+    WEB_FETCH: "web_fetch",
+    /** Read files. Included in {@link DEFAULT_BUILTINS}. */
+    READ: "read",
+    /** Create/modify files. Included in {@link DEFAULT_BUILTINS}. */
+    EDIT: "edit",
+    /** Search paths by glob. Included in {@link DEFAULT_BUILTINS}. */
+    GLOB: "glob",
+    /** Search file contents. Included in {@link DEFAULT_BUILTINS}. */
+    GREP: "grep",
+    /** Read the first lines of a file. Included in {@link DEFAULT_BUILTINS}. */
+    HEAD: "head",
+    /** Read the last lines of a file. Included in {@link DEFAULT_BUILTINS}. */
+    TAIL: "tail",
+    /** Jupyter notebook editing. Optional; not in {@link DEFAULT_BUILTINS}. */
+    NOTEBOOK: "notebook",
+    /** Legacy aggregate: shell/filesystem/navigation/web/notebook tools. */
     DEVELOPER: "developer",
-    /** Web fetch/scrape, scripting, general computer-control tools. */
+    /** Legacy aggregate alias retained for existing callers. */
     COMPUTER_CONTROLLER: "computercontroller",
-    /** Cross-session preference memory. */
+    /** Legacy aggregate alias retained for existing callers. */
     MEMORY: "memory",
-    /** Inline data-visualisation rendering. */
+    /** Legacy aggregate alias retained for existing callers. */
     AUTOVISUALISER: "autovisualiser",
-    /** Interactive guided tutorials. */
+    /** Legacy aggregate alias retained for existing callers. */
     TUTORIAL: "tutorial"
 };
 const MAX_BUILTINS = 16;