@aexhq/sdk 0.25.0 → 0.25.2

package/dist/_contracts/run-cost.d.ts

@@ -1,14 +1,13 @@
-import type { CredentialMode } from "./managed-key.js";
-import type { RunProvider, RuntimeKind } from "./submission.js";
+import type { CredentialMode, RunProvider, RuntimeKind } from "./submission.js";
 export declare const RUN_COST_TELEMETRY_SCHEMA_VERSION = 1;
 export declare const RUN_USAGE_SAMPLE_SCHEMA_VERSION = 1;
 export declare const RUN_COST_SUMMARY_STATUSES: readonly ["pending", "partial", "complete", "unavailable", "not_applicable"];
 export type RunCostSummaryStatus = (typeof RUN_COST_SUMMARY_STATUSES)[number];
 export declare const RUN_USAGE_SAMPLE_UNITS: readonly ["token", "millisecond", "byte", "byte_millisecond", "count", "file", "credit_unit"];
 export type RunUsageSampleUnit = (typeof RUN_USAGE_SAMPLE_UNITS)[number];
-export declare const RUN_USAGE_SAMPLE_SOURCE_TYPES: readonly ["coordinator-event", "run-event", "usage-ledger", "output-object", "proxy-call", "runtime-job", "provider-session", "storage-accrual", "billing-reservation", "billing-settlement", "billing-release", "manual-adjustment"];
+export declare const RUN_USAGE_SAMPLE_SOURCE_TYPES: readonly ["coordinator-event", "run-event", "usage-ledger", "output-object", "proxy-call", "runtime-job", "provider-session", "storage-accrual", "manual-adjustment"];
 export type RunUsageSampleSourceType = (typeof RUN_USAGE_SAMPLE_SOURCE_TYPES)[number];
-export declare const RUN_USAGE_SAMPLE_METRICS: readonly ["provider.input_tokens", "provider.output_tokens", "provider.cache_read_input_tokens", "provider.cache_creation_input_tokens", "provider.total_tokens", "runtime.queued_ms", "runtime.active_ms", "runtime.output_capture_ms", "runtime.cleanup_ms", "run.total_ms", "output.discovered_files", "output.captured_files", "output.failed_files", "output.captured_bytes", "retry.runtime_attempts", "retry.provider_poll", "retry.output_capture", "retry.output_upload", "capture.uploaded_files", "capture.failed_files", "capture.total_bytes", "storage.current_bytes", "storage.byte_milliseconds", "proxy.call_count", "proxy.failed_call_count", "proxy.request_bytes", "proxy.response_bytes", "proxy.duration_ms", "managed_key.reserved_credit_units", "managed_key.charged_credit_units", "managed_key.released_credit_units"];
+export declare const RUN_USAGE_SAMPLE_METRICS: readonly ["provider.input_tokens", "provider.output_tokens", "provider.cache_read_input_tokens", "provider.cache_creation_input_tokens", "provider.total_tokens", "runtime.queued_ms", "runtime.active_ms", "runtime.output_capture_ms", "runtime.cleanup_ms", "run.total_ms", "output.discovered_files", "output.captured_files", "output.failed_files", "output.captured_bytes", "retry.runtime_attempts", "retry.provider_poll", "retry.output_capture", "retry.output_upload", "capture.uploaded_files", "capture.failed_files", "capture.total_bytes", "storage.current_bytes", "storage.byte_milliseconds", "proxy.call_count", "proxy.failed_call_count", "proxy.request_bytes", "proxy.response_bytes", "proxy.duration_ms"];
 export type RunUsageSampleMetric = (typeof RUN_USAGE_SAMPLE_METRICS)[number];
 export interface RunUsageSampleSource {
     readonly type: RunUsageSampleSourceType;
@@ -86,12 +85,6 @@ export interface RunCostProxyTelemetry {
     readonly responseBytes?: number;
     readonly durationMs?: number;
 }
-export interface RunCostManagedKeyBudgetTelemetry {
-    readonly credentialMode?: CredentialMode;
-    readonly reservedCreditUnits?: number;
-    readonly chargedCreditUnits?: number;
-    readonly releasedCreditUnits?: number;
-}
 /**
  * The basis for a {@link RunCostTelemetry.billedCostUsd}: an honest marker of
  * whether the figure is a settle-time ESTIMATE or has been RECONCILED against
@@ -122,7 +115,6 @@ export interface RunCostTelemetry {
     readonly providerUsage?: readonly RunCostProviderUsage[];
     readonly storage?: RunCostStorageTelemetry;
     readonly proxy?: RunCostProxyTelemetry;
-    readonly managedKey?: RunCostManagedKeyBudgetTelemetry;
     /**
      * Customer-facing AEX cost of serving this run, USD — a REPORTED ESTIMATE,
      * not a charge (telemetry/showback only; no invoicing or credit deduction).

package/dist/_contracts/run-cost.js

@@ -25,9 +25,6 @@ export const RUN_USAGE_SAMPLE_SOURCE_TYPES = [
     "runtime-job",
     "provider-session",
     "storage-accrual",
-    "billing-reservation",
-    "billing-settlement",
-    "billing-release",
     "manual-adjustment"
 ];
 export const RUN_USAGE_SAMPLE_METRICS = [
@@ -58,10 +55,7 @@ export const RUN_USAGE_SAMPLE_METRICS = [
     "proxy.failed_call_count",
     "proxy.request_bytes",
     "proxy.response_bytes",
-    "proxy.duration_ms",
-    "managed_key.reserved_credit_units",
-    "managed_key.charged_credit_units",
-    "managed_key.released_credit_units"
+    "proxy.duration_ms"
 ];
 const RUN_USAGE_SAMPLE_METRIC_UNITS = {
     "provider.input_tokens": "token",
@@ -91,10 +85,7 @@ const RUN_USAGE_SAMPLE_METRIC_UNITS = {
     "proxy.failed_call_count": "count",
     "proxy.request_bytes": "byte",
     "proxy.response_bytes": "byte",
-    "proxy.duration_ms": "millisecond",
-    "managed_key.reserved_credit_units": "credit_unit",
-    "managed_key.charged_credit_units": "credit_unit",
-    "managed_key.released_credit_units": "credit_unit"
+    "proxy.duration_ms": "millisecond"
 };
 /**
  * The basis for a {@link RunCostTelemetry.billedCostUsd}: an honest marker of
@@ -144,7 +135,6 @@ export function buildRunCostTelemetry(input) {
         ...(input.providerUsage ? { providerUsage: input.providerUsage.map(normalizeProviderUsage) } : {}),
         ...(input.storage ? { storage: normalizeStorage(input.storage) } : {}),
         ...(input.proxy ? { proxy: normalizeProxy(input.proxy) } : {}),
-        ...(input.managedKey ? { managedKey: normalizeManagedKey(input.managedKey) } : {}),
         ...(input.billedCostUsd !== undefined ? { billedCostUsd: nonNegativeFinite(input.billedCostUsd, "billedCostUsd") } : {}),
         ...(input.costBasis ? { costBasis: normalizeCostBasis(input.costBasis) } : {})
     });
@@ -170,10 +160,8 @@ export function buildRunCostTelemetryFromUsageSamples(input) {
     const capture = {};
     const storage = {};
     const proxy = {};
-    const managedKey = {};
     const providerUsage = new Map();
     let captureAttempted = false;
-    let managedKeyCredentialMode;
     for (const sample of samples) {
         switch (sample.metric) {
             case "provider.input_tokens":
@@ -263,18 +251,6 @@ export function buildRunCostTelemetryFromUsageSamples(input) {
             case "proxy.duration_ms":
                 addDraftNumber(proxy, "durationMs", sample.quantity);
                 break;
-            case "managed_key.reserved_credit_units":
-                managedKeyCredentialMode = sample.credentialMode ?? managedKeyCredentialMode;
-                addDraftNumber(managedKey, "reservedCreditUnits", sample.quantity);
-                break;
-            case "managed_key.charged_credit_units":
-                managedKeyCredentialMode = sample.credentialMode ?? managedKeyCredentialMode;
-                addDraftNumber(managedKey, "chargedCreditUnits", sample.quantity);
-                break;
-            case "managed_key.released_credit_units":
-                managedKeyCredentialMode = sample.credentialMode ?? managedKeyCredentialMode;
-                addDraftNumber(managedKey, "releasedCreditUnits", sample.quantity);
-                break;
         }
     }
     if (Object.keys(durations).length > 0)
@@ -293,12 +269,6 @@ export function buildRunCostTelemetryFromUsageSamples(input) {
         telemetry.storage = storage;
     if (Object.keys(proxy).length > 0)
         telemetry.proxy = proxy;
-    if (Object.keys(managedKey).length > 0 || managedKeyCredentialMode) {
-        telemetry.managedKey = {
-            ...(managedKeyCredentialMode ? { credentialMode: managedKeyCredentialMode } : {}),
-            ...managedKey
-        };
-    }
     return buildRunCostTelemetry(telemetry);
 }
 export function summarizeUsageSamples(samples) {
@@ -329,7 +299,6 @@ export function mergeRunCostTelemetry(base, next) {
     const providerUsage = [...(base.providerUsage ?? []), ...(patch.providerUsage ?? [])];
     const storage = sumStorage(base.storage, patch.storage);
     const proxy = sumProxy(base.proxy, patch.proxy);
-    const managedKey = mergeManagedKey(base.managedKey, patch.managedKey);
     // Derived cost fields are LAST-WRITER-WINS (a re-derivation supersedes the
     // prior estimate), not summed — they are projections of the whole sample set,
     // not additive metrics.
@@ -361,8 +330,6 @@ export function mergeRunCostTelemetry(base, next) {
         merged.storage = storage;
     if (proxy)
         merged.proxy = proxy;
-    if (managedKey)
-        merged.managedKey = managedKey;
     if (billedCostUsd !== undefined)
         merged.billedCostUsd = billedCostUsd;
     if (costBasis)
@@ -435,16 +402,6 @@ function normalizeProxy(input) {
         durationMs: input.durationMs
     });
 }
-function normalizeManagedKey(input) {
-    return Object.freeze({
-        ...(input.credentialMode ? { credentialMode: input.credentialMode } : {}),
-        ...freezeOptionalNumbers({
-            reservedCreditUnits: input.reservedCreditUnits,
-            chargedCreditUnits: input.chargedCreditUnits,
-            releasedCreditUnits: input.releasedCreditUnits
-        })
-    });
-}
 function normalizeSourceSummary(input) {
     return Object.freeze({
         sampleCount: nonNegativeFinite(input.sampleCount, "sourceSummary.sampleCount"),
@@ -599,18 +556,6 @@ function mergeCapture(base, next) {
         ...(failureReasons.length > 0 ? { failureReasons } : {})
     });
 }
-function mergeManagedKey(base, next) {
-    if (!base && !next) {
-        return undefined;
-    }
-    const credentialMode = next?.credentialMode ?? base?.credentialMode;
-    return normalizeManagedKey({
-        ...(credentialMode ? { credentialMode } : {}),
-        reservedCreditUnits: (base?.reservedCreditUnits ?? 0) + (next?.reservedCreditUnits ?? 0),
-        chargedCreditUnits: (base?.chargedCreditUnits ?? 0) + (next?.chargedCreditUnits ?? 0),
-        releasedCreditUnits: (base?.releasedCreditUnits ?? 0) + (next?.releasedCreditUnits ?? 0)
-    });
-}
 function mergeSourceSummary(base, next) {
     if (!base && !next) {
         return undefined;

package/dist/_contracts/run-custody.d.ts

@@ -1,11 +1,8 @@
-import type { CredentialMode } from "./managed-key.js";
 import type { RunStatus } from "./status.js";
-import type { RunProvider, RuntimeKind } from "./submission.js";
+import type { CredentialMode, RunProvider, RuntimeKind } from "./submission.js";
 export declare const CUSTODY_MANIFEST_SCHEMA_VERSION = 1;
-export declare const CUSTODY_TOMBSTONE_SCHEMA_VERSION = 1;
 export declare const CUSTODY_REDACTION_SCANNER_VERSION = 1;
 export declare const CUSTODY_MANIFEST_KIND = "aex.custody_manifest.v1";
-export declare const CUSTODY_TOMBSTONE_KIND = "aex.custody_tombstone.v1";
 export declare const CUSTODY_MANIFEST_CONTENT_TYPE = "application/json; charset=utf-8";
 export declare const CUSTODY_MANIFEST_RUN_REL_PATH = "metadata/custody.json";
 export declare const CUSTODY_SECRET_CLASSES: readonly ["provider_api_key", "mcp_credential", "proxy_endpoint_auth", "runner_bearer", "managed_system_credential"];
@@ -26,10 +23,6 @@ export declare const CUSTODY_EVIDENCE_SOURCES: readonly ["run_row", "runtime_man
 export type CustodyEvidenceSource = (typeof CUSTODY_EVIDENCE_SOURCES)[number];
 export declare const CUSTODY_MANIFEST_EXCLUDED_VALUE_CLASSES: readonly ["raw_secret_values", "bearer_hashes", "provider_response_bodies", "signed_urls", "object_store_keys", "vault_ids", "private_resource_handles"];
 export type CustodyManifestExcludedValueClass = (typeof CUSTODY_MANIFEST_EXCLUDED_VALUE_CLASSES)[number];
-export declare const CUSTODY_TOMBSTONE_MANIFEST_STATUSES: readonly ["written", "not_written", "write_failed", "purged"];
-export type CustodyTombstoneManifestStatus = (typeof CUSTODY_TOMBSTONE_MANIFEST_STATUSES)[number];
-export declare const CUSTODY_TOMBSTONE_DELETION_STATUSES: readonly ["not_deleted", "pending_delete", "deleted"];
-export type CustodyTombstoneDeletionStatus = (typeof CUSTODY_TOMBSTONE_DELETION_STATUSES)[number];
 export interface CustodyManifestRunV1 {
     readonly runId: string;
     readonly workspaceId: string;
@@ -137,48 +130,6 @@ export interface CustodyManifestInput {
     readonly resources?: readonly CustodyManifestResourceClassInput[];
     readonly cleanup?: CustodyManifestCleanupInput;
 }
-export interface CustodyTombstoneRunV1 {
-    readonly runId: string;
-    readonly workspaceId: string;
-    readonly terminalStatus: RunStatus | string;
-    readonly terminalAt?: string;
-}
-export interface CustodyTombstoneManifestV1 {
-    readonly schemaVersion: typeof CUSTODY_MANIFEST_SCHEMA_VERSION;
-    readonly status: CustodyTombstoneManifestStatus;
-    readonly generatedAt?: string;
-    readonly finalizedAt?: string;
-    readonly tombstonedAt: string;
-}
-export interface CustodyTombstoneDeletionV1 {
-    readonly status: CustodyTombstoneDeletionStatus;
-    readonly pendingAt?: string;
-    readonly deletedAt?: string;
-}
-export interface CustodyTombstoneRetentionV1 {
-    readonly defaultPolicy: "retain_indefinitely";
-    readonly userAction: "purge_or_anonymize_later";
-}
-export interface CustodyTombstoneV1 {
-    readonly schemaVersion: typeof CUSTODY_TOMBSTONE_SCHEMA_VERSION;
-    readonly kind: typeof CUSTODY_TOMBSTONE_KIND;
-    readonly run: CustodyTombstoneRunV1;
-    readonly manifest: CustodyTombstoneManifestV1;
-    readonly summary: CustodyManifestSummaryV1;
-    readonly deletion: CustodyTombstoneDeletionV1;
-    readonly retention: CustodyTombstoneRetentionV1;
-}
-export interface CustodyTombstoneInput {
-    readonly run: CustodyTombstoneRunV1;
-    readonly manifest: Omit<CustodyTombstoneManifestV1, "schemaVersion">;
-    readonly summary: CustodyManifestSummaryV1;
-    readonly deletion?: CustodyTombstoneDeletionV1;
-}
-export interface CustodyTombstoneFromManifestInput {
-    readonly manifestStatus?: CustodyTombstoneManifestStatus;
-    readonly tombstonedAt: string;
-    readonly deletion?: CustodyTombstoneDeletionV1;
-}
 export interface CustodyManifestWriteObject {
     readonly key: string;
     readonly contentType: typeof CUSTODY_MANIFEST_CONTENT_TYPE;
@@ -220,7 +171,5 @@ export declare function custodyManifestObjectKey(runId: string): string;
 export declare function createCustodyManifestWriter(store: CustodyManifestObjectStore): CustodyManifestWriter;
 export declare function writeCustodyManifest(store: CustodyManifestObjectStore, input: CustodyManifestInput): Promise<CustodyManifestWriteResult>;
 export declare function buildCustodyManifest(input: CustodyManifestInput): CustodyManifestV1;
-export declare function buildCustodyTombstone(input: CustodyTombstoneInput): CustodyTombstoneV1;
-export declare function buildCustodyTombstoneFromManifest(manifest: CustodyManifestV1, input: CustodyTombstoneFromManifestInput): CustodyTombstoneV1;
 export declare function scanCustodyPayloadForSensitiveValues(input: unknown): readonly CustodyRedactionFinding[];
 export declare function assertPublicSafeCustodyPayload(input: unknown): void;

package/dist/_contracts/run-custody.js

@@ -1,8 +1,6 @@
 export const CUSTODY_MANIFEST_SCHEMA_VERSION = 1;
-export const CUSTODY_TOMBSTONE_SCHEMA_VERSION = 1;
 export const CUSTODY_REDACTION_SCANNER_VERSION = 1;
 export const CUSTODY_MANIFEST_KIND = "aex.custody_manifest.v1";
-export const CUSTODY_TOMBSTONE_KIND = "aex.custody_tombstone.v1";
 export const CUSTODY_MANIFEST_CONTENT_TYPE = "application/json; charset=utf-8";
 export const CUSTODY_MANIFEST_RUN_REL_PATH = "metadata/custody.json";
 export const CUSTODY_SECRET_CLASSES = [
@@ -88,17 +86,6 @@ export const CUSTODY_MANIFEST_EXCLUDED_VALUE_CLASSES = [
     "vault_ids",
     "private_resource_handles"
 ];
-export const CUSTODY_TOMBSTONE_MANIFEST_STATUSES = [
-    "written",
-    "not_written",
-    "write_failed",
-    "purged"
-];
-export const CUSTODY_TOMBSTONE_DELETION_STATUSES = [
-    "not_deleted",
-    "pending_delete",
-    "deleted"
-];
 export class CustodyManifestRedactionError extends Error {
     code = "custody_manifest_not_public_safe";
     findings;
@@ -176,40 +163,6 @@ export function buildCustodyManifest(input) {
     assertPublicSafeCustodyPayload(manifest);
     return manifest;
 }
-export function buildCustodyTombstone(input) {
-    const tombstone = Object.freeze({
-        schemaVersion: CUSTODY_TOMBSTONE_SCHEMA_VERSION,
-        kind: CUSTODY_TOMBSTONE_KIND,
-        run: normalizeTombstoneRun(input.run),
-        manifest: normalizeTombstoneManifest(input.manifest),
-        summary: normalizeSummary(input.summary),
-        deletion: normalizeTombstoneDeletion(input.deletion ?? { status: "not_deleted" }),
-        retention: Object.freeze({
-            defaultPolicy: "retain_indefinitely",
-            userAction: "purge_or_anonymize_later"
-        })
-    });
-    assertPublicSafeCustodyPayload(tombstone);
-    return tombstone;
-}
-export function buildCustodyTombstoneFromManifest(manifest, input) {
-    return buildCustodyTombstone({
-        run: {
-            runId: manifest.run.runId,
-            workspaceId: manifest.run.workspaceId,
-            terminalStatus: manifest.run.terminalStatus,
-            ...(manifest.run.terminalAt ? { terminalAt: manifest.run.terminalAt } : {})
-        },
-        manifest: {
-            status: input.manifestStatus ?? "written",
-            generatedAt: manifest.generatedAt,
-            ...(manifest.finalizedAt ? { finalizedAt: manifest.finalizedAt } : {}),
-            tombstonedAt: input.tombstonedAt
-        },
-        summary: manifest.summary,
-        ...(input.deletion ? { deletion: input.deletion } : {})
-    });
-}
 export function scanCustodyPayloadForSensitiveValues(input) {
     const findings = [];
     visitCustodyValue(input, "$", findings);
@@ -351,30 +304,6 @@ function normalizeSummary(input) {
         ])))
     });
 }
-function normalizeTombstoneRun(input) {
-    return Object.freeze({
-        runId: assertSafeIdentifier(input.runId, "tombstone.run.runId"),
-        workspaceId: assertSafeIdentifier(input.workspaceId, "tombstone.run.workspaceId"),
-        terminalStatus: assertSafeMetadataString(input.terminalStatus, "tombstone.run.terminalStatus"),
-        ...(input.terminalAt ? { terminalAt: assertTimestamp(input.terminalAt, "tombstone.run.terminalAt") } : {})
-    });
-}
-function normalizeTombstoneManifest(input) {
-    return Object.freeze({
-        schemaVersion: CUSTODY_MANIFEST_SCHEMA_VERSION,
-        status: input.status,
-        ...(input.generatedAt ? { generatedAt: assertTimestamp(input.generatedAt, "tombstone.manifest.generatedAt") } : {}),
-        ...(input.finalizedAt ? { finalizedAt: assertTimestamp(input.finalizedAt, "tombstone.manifest.finalizedAt") } : {}),
-        tombstonedAt: assertTimestamp(input.tombstonedAt, "tombstone.manifest.tombstonedAt")
-    });
-}
-function normalizeTombstoneDeletion(input) {
-    return Object.freeze({
-        status: input.status,
-        ...(input.pendingAt ? { pendingAt: assertTimestamp(input.pendingAt, "tombstone.deletion.pendingAt") } : {}),
-        ...(input.deletedAt ? { deletedAt: assertTimestamp(input.deletedAt, "tombstone.deletion.deletedAt") } : {})
-    });
-}
 function visitCustodyValue(input, path, findings) {
     if (typeof input === "string") {
         scanStringValue(input, path, findings);
@@ -446,13 +375,9 @@ const forbiddenStringPatterns = Object.freeze([
     {
         reason: "private_resource_handle",
         // `<keyword><sep><id>` opaque handles (`session_a1B2c3D4e5`, `file_9f8e7d…`).
-        // The keyword set overlaps ordinary English (agent/file/skill/resource/…), so
-        // the bare shape also matched documentation prose that simply chains those
-        // words with `_`/`-` (`agent_decision_failure`, `file_grounded`,
-        // `session_handoff_contract`, `agent-judgment` — read straight out of a
-        // skill-pack doc in tool-result text). The `accept` predicate keeps the shape
-        // but requires the id segment to look minted rather than spelled — i.e. carry
-        // a digit — so genuine handles stay flagged while dictionary-word prose does not.
+        // The keyword set overlaps ordinary prose, so require the id segment to
+        // carry a digit. That keeps genuine minted handles flagged while avoiding
+        // dictionary-word chains such as `agent_decision_failure`.
         regex: /\b(?:machine|session|agent|file|skill|env|resource|handle|token_hash|bearer_hash)[_:-][A-Za-z0-9][A-Za-z0-9_-]{7,}\b/i,
         accept: isMintedResourceHandle
     },
@@ -496,15 +421,6 @@ function isHighEntropySecretRun(run) {
     }
     return highEntropyShannonBits(run) >= 3.0;
 }
-/**
- * Decide whether a `<keyword><sep><id>` shape-match is a genuinely minted private
- * handle rather than dictionary-word prose. The id segment (everything after the
- * first `_`/`-`/`:`) must carry a digit — the property that separates a minted
- * opaque handle (`session_a1B2c3D4e5`, `file_9f8e7d6c5b4a`, `machine_1234567890`)
- * from a chain of English words (`agent_decision_failure`, `file_grounded`). This
- * mirrors `isHighEntropySecretRun`'s letter+digit requirement: a prefixless secret
- * blob and a minted handle both carry digits; prose does not.
- */
 function isMintedResourceHandle(match) {
     const separatorIndex = match.search(/[_:-]/);
     const id = match.slice(separatorIndex + 1);

package/dist/_contracts/run-retention.d.ts

@@ -10,7 +10,7 @@ export declare const RUN_DELETION_MANIFEST_MODES: readonly ["dry_run", "final"];
 export type RunDeletionManifestMode = (typeof RUN_DELETION_MANIFEST_MODES)[number];
 export declare const RUN_DELETION_CANDIDATE_STATUSES: readonly ["selected", "blocked"];
 export type RunDeletionCandidateStatus = (typeof RUN_DELETION_CANDIDATE_STATUSES)[number];
-export declare const RUN_DELETION_BLOCKERS: readonly ["non_terminal", "already_deleted", "concurrent_delete", "retention_policy_disabled", "unexpired", "held", "retention_exempt", "unresolved_cleanup", "unresolved_custody"];
+export declare const RUN_DELETION_BLOCKERS: readonly ["non_terminal", "retention_policy_disabled", "unexpired", "held", "retention_exempt", "unresolved_cleanup", "unresolved_custody"];
 export type RunDeletionBlocker = (typeof RUN_DELETION_BLOCKERS)[number];
 export declare const RUN_DELETION_COUNT_CLASSES: readonly ["object_store_objects", "outputs", "logs", "events", "assets", "db_event_rows", "db_output_rows", "capture_failures", "storage_samples", "custody_manifests"];
 export type RunDeletionCountClass = (typeof RUN_DELETION_COUNT_CLASSES)[number];
@@ -40,8 +40,6 @@ export interface RunDeletionCandidateRunV1 {
     readonly status: RunStatus | string;
     readonly createdAt?: string;
     readonly terminalAt?: string;
-    readonly pendingDeleteAt?: string;
-    readonly deletedAt?: string;
     readonly held?: boolean;
     readonly retentionExempt?: boolean;
     readonly unresolvedCleanup?: boolean;
@@ -78,8 +76,6 @@ export interface RunDeletionManifestRunV1 {
     readonly createdAt?: string;
     readonly terminalAt?: string;
     readonly eligibleAt?: string;
-    readonly pendingDeleteAt?: string;
-    readonly deletedAt?: string;
 }
 export interface RunDeletionManifestRequestV1 {
     readonly reason: RunDeletionReason;

package/dist/_contracts/run-retention.js

@@ -9,8 +9,6 @@ export const RUN_DELETION_MANIFEST_MODES = ["dry_run", "final"];
 export const RUN_DELETION_CANDIDATE_STATUSES = ["selected", "blocked"];
 export const RUN_DELETION_BLOCKERS = [
     "non_terminal",
-    "already_deleted",
-    "concurrent_delete",
     "retention_policy_disabled",
     "unexpired",
     "held",
@@ -266,8 +264,6 @@ function normalizeCandidateRun(input) {
         status: assertSafeMetadataString(input.status, "run.status"),
         ...(input.createdAt ? { createdAt: assertTimestamp(input.createdAt, "run.createdAt") } : {}),
         ...(input.terminalAt ? { terminalAt: assertTimestamp(input.terminalAt, "run.terminalAt") } : {}),
-        ...(input.pendingDeleteAt ? { pendingDeleteAt: assertTimestamp(input.pendingDeleteAt, "run.pendingDeleteAt") } : {}),
-        ...(input.deletedAt ? { deletedAt: assertTimestamp(input.deletedAt, "run.deletedAt") } : {}),
         ...(input.held !== undefined ? { held: input.held } : {}),
         ...(input.retentionExempt !== undefined ? { retentionExempt: input.retentionExempt } : {}),
         ...(input.unresolvedCleanup !== undefined ? { unresolvedCleanup: input.unresolvedCleanup } : {}),
@@ -282,9 +278,7 @@ function normalizeManifestRun(input, eligibleAt) {
         status: run.status,
         ...(run.createdAt ? { createdAt: run.createdAt } : {}),
         ...(run.terminalAt ? { terminalAt: run.terminalAt } : {}),
-        ...(eligibleAt ? { eligibleAt: assertTimestamp(eligibleAt, "run.eligibleAt") } : {}),
-        ...(run.pendingDeleteAt ? { pendingDeleteAt: run.pendingDeleteAt } : {}),
-        ...(run.deletedAt ? { deletedAt: run.deletedAt } : {})
+        ...(eligibleAt ? { eligibleAt: assertTimestamp(eligibleAt, "run.eligibleAt") } : {})
     });
 }
 function normalizeRequest(input) {
@@ -360,13 +354,7 @@ function normalizePurgeProof(input) {
     });
 }
 function addRunBlockers(blockers, run, observedAt) {
-    if (run.status === "deleted") {
-        blockers.push(blocker("already_deleted", observedAt));
-    }
-    else if (run.status === "pending_delete" || run.pendingDeleteAt) {
-        blockers.push(blocker("concurrent_delete", observedAt));
-    }
-    else if (!isTerminalStatusLike(run.status)) {
+    if (!isTerminalStatusLike(run.status)) {
         blockers.push(blocker("non_terminal", observedAt));
     }
     if (run.held) {

package/dist/_contracts/run-unit.d.ts

@@ -120,8 +120,8 @@ export interface RunUnitProxyCallPage {
 }
 /**
  * Workspace skill bundle pinned at submission. `liveSkillId` is `null`
- * when the corresponding `skill_bundles` row has been soft-deleted —
- * the UI uses that to render a tombstoned link.
+ * when the corresponding `skill_bundles` row no longer exists after a
+ * hard delete; run snapshots keep the submitted metadata.
  */
 export interface RunUnitSkillSnapshot {
     readonly skillId: string;

package/dist/_contracts/runtime-security-profile.js

@@ -11,7 +11,7 @@ export const RUNTIME_SECURITY_PROFILE_CONFIG = Object.freeze({
     }),
     standard: Object.freeze({
         name: "standard",
-        defaultNetworkingMode: "limited",
+        defaultNetworkingMode: "open",
         allowOpenNetworking: true,
         allowRuntimePackages: true,
         allowCustomerEnvVars: true,

package/dist/_contracts/runtime-types.d.ts

@@ -90,7 +90,7 @@ export interface ProviderEvent {
 }
 /**
  * One captured output file as the dashboard reports it. Use
- * `createOutputLink` to get a short-lived signed URL for download.
+ * `outputLink` / `createOutputLink` to get a temporary direct URL for download.
  */
 export interface Output {
     readonly id: string;
@@ -101,6 +101,25 @@ export interface Output {
     readonly [key: string]: unknown;
 }
 export type OutputFilePathMatch = "exact" | "suffix";
+export type OutputFileType = "text" | "json" | "image" | "audio" | "video" | "pdf" | "archive" | "binary" | "unknown";
+export interface OutputQuery {
+    /** Exact normalized output path. Leading `/` and `outputs/` are ignored. */
+    readonly path?: string;
+    /** Basename match. A RegExp is tested against the basename only. */
+    readonly filename?: string | RegExp;
+    /**
+     * Directory prefix. Leading `/` and `outputs/` are ignored.
+     * `recursive` defaults to true.
+     */
+    readonly dir?: string;
+    readonly recursive?: boolean;
+    /** File extension, with or without a leading dot. Case-insensitive. */
+    readonly extension?: string;
+    /** Exact content type or a prefix wildcard such as `image/*`. */
+    readonly contentType?: string;
+    /** High-level type inferred from content type first, then extension. */
+    readonly type?: OutputFileType;
+}
 export interface OutputFilePathSelector {
     readonly path: string;
     readonly match?: OutputFilePathMatch;
@@ -113,11 +132,20 @@ export interface OutputFileDownload {
     readonly output: Output;
     readonly bytes: Uint8Array;
 }
-export interface SignedOutputLink {
+export type OutputLinkExpiresIn = number | "15m" | "1h" | "1d";
+export interface OutputLinkOptions {
+    /** Seconds or one of the documented presets. Defaults to `"1h"`. */
+    readonly expiresIn?: OutputLinkExpiresIn;
+}
+export interface OutputLink {
     readonly url: string;
     readonly expiresAt?: string;
+    readonly expiresInSeconds?: number;
+    readonly output?: Output;
     readonly [key: string]: unknown;
 }
+/** @deprecated Renamed to {@link OutputLink}. */
+export type SignedOutputLink = OutputLink;
 export interface WhoAmI {
     readonly principalType: "api_token" | "user";
     readonly workspaceId?: string;
@@ -129,15 +157,16 @@ export interface WhoAmI {
      * Surfaced so consumers (e.g. broll's app-side admission gate) can
      * decide whether to keep their own gate or rely on platform headers.
      * All fields optional — older BFFs may omit. Numbers are concrete
-     * snapshots at the time of the `whoami` call.
+     * snapshots at the time of the `whoami` call; `null` means no app-visible
+     * cap is applied for that field.
      */
     readonly caps?: {
         /** Token-bucket cap on POST /api/runs per minute, per workspace. */
         readonly runSubmitPerMinute?: number;
         /** Hard cap on concurrent non-terminal runs the workspace may hold. */
         readonly maxConcurrentRuns?: number;
-        /** Storage cap (bytes) on captured output objects, workspace-wide. */
-        readonly storageCapBytes?: number;
+        /** Storage cap (bytes) on captured output objects, workspace-wide. `null` means unlimited. */
+        readonly storageCapBytes?: number | null;
         /** Current captured-output usage in bytes. */
         readonly storageUsedBytes?: number;
         /**
@@ -154,8 +183,8 @@ export interface WhoAmI {
  * Workspace skill bundle as the dashboard BFF returns it. Mirrors a row
  * of `skill_bundles` joined with its computed manifest. `state` is the
  * upload lifecycle (`pending` -> `ready`); only `ready` rows are
- * referenceable from a run. `deletedAt` is the soft-delete tombstone
- * (`null` for live bundles).
+ * referenceable from a run. Delete is hard; historical runs keep their
+ * submit-time snapshots rather than depending on this row.
  *
  * See the public architecture notes and server-side persistence schema for
  * the authoritative shape.
@@ -176,7 +205,6 @@ export interface Skill {
     readonly createdAt?: string;
     readonly updatedAt?: string;
     readonly finalizedAt?: string | null;
-    readonly deletedAt?: string | null;
     readonly [key: string]: unknown;
 }
 /**
@@ -199,7 +227,6 @@ export interface AgentsMdRecord {
     readonly createdAt?: string;
     readonly updatedAt?: string;
     readonly finalizedAt?: string | null;
-    readonly deletedAt?: string | null;
     readonly [key: string]: unknown;
 }
 /**
@@ -223,7 +250,6 @@ export interface FileRecord {
     readonly createdAt?: string;
     readonly updatedAt?: string;
     readonly finalizedAt?: string | null;
-    readonly deletedAt?: string | null;
     readonly [key: string]: unknown;
 }
 /**

package/dist/_contracts/side-effect-audit.d.ts

@@ -1,9 +1,8 @@
-import type { CredentialMode } from "./managed-key.js";
-import type { RunProvider, RuntimeKind } from "./submission.js";
+import type { CredentialMode, RunProvider, RuntimeKind } from "./submission.js";
 export declare const SIDE_EFFECT_AUDIT_SCHEMA_VERSION = 1;
 export declare const SIDE_EFFECT_AUDIT_REDACTION_SCANNER_VERSION = 1;
 export declare const SIDE_EFFECT_AUDIT_KIND = "aex.side_effect_audit.v1";
-export declare const SIDE_EFFECT_AUDIT_ACTIONS: readonly ["run.submit.accepted", "run.submit.rejected", "run.cancel.requested", "run.delete.requested", "run.delete.completed", "run.delete.failed", "run.download.requested", "run.output.downloaded", "run.log.downloaded", "run.event.downloaded", "workspace.asset.uploaded", "workspace.asset.deleted", "proxy.endpoint.called", "mcp.credential.accessed", "mcp.proxy.called", "provider.proxy.called", "custody.manifest.written", "custody.transition.recorded", "runtime.cleanup.completed", "runtime.cleanup.failed", "managed_key.quota.denied", "terminal_redrive.attempted", "terminal_redrive.completed", "api_token.created", "api_token.revoked", "api_token.used"];
+export declare const SIDE_EFFECT_AUDIT_ACTIONS: readonly ["run.submit.accepted", "run.submit.rejected", "run.cancel.requested", "run.delete.requested", "run.delete.completed", "run.delete.failed", "run.download.requested", "run.output.downloaded", "run.log.downloaded", "run.event.downloaded", "workspace.asset.uploaded", "workspace.asset.deleted", "proxy.endpoint.called", "mcp.credential.accessed", "mcp.proxy.called", "provider.proxy.called", "custody.manifest.written", "custody.transition.recorded", "runtime.cleanup.completed", "runtime.cleanup.failed", "terminal_redrive.attempted", "terminal_redrive.completed", "api_token.created", "api_token.deleted", "api_token.used"];
 export type SideEffectAuditAction = (typeof SIDE_EFFECT_AUDIT_ACTIONS)[number];
 export declare const SIDE_EFFECT_AUDIT_ACTOR_PRINCIPAL_TYPES: readonly ["user", "api_token", "system", "runtime"];
 export type SideEffectAuditActorPrincipalType = (typeof SIDE_EFFECT_AUDIT_ACTOR_PRINCIPAL_TYPES)[number];
@@ -11,13 +10,13 @@ export declare const SIDE_EFFECT_AUDIT_SOURCE_PLANES: readonly ["dashboard", "wo
 export type SideEffectAuditSourcePlane = (typeof SIDE_EFFECT_AUDIT_SOURCE_PLANES)[number];
 export declare const SIDE_EFFECT_AUDIT_AUTHENTICATION_KINDS: readonly ["dashboard_auth", "api_token", "runner_token", "system"];
 export type SideEffectAuditAuthenticationKind = (typeof SIDE_EFFECT_AUDIT_AUTHENTICATION_KINDS)[number];
-export declare const SIDE_EFFECT_AUDIT_TARGET_TYPES: readonly ["workspace", "run", "proxy_endpoint", "mcp_credential", "mcp_proxy", "provider_proxy", "output_archive", "run_output", "run_log", "run_event_stream", "workspace_asset", "custody_manifest", "custody_transition", "cleanup", "deletion", "managed_key_gate", "terminal_redrive", "api_token"];
+export declare const SIDE_EFFECT_AUDIT_TARGET_TYPES: readonly ["workspace", "run", "proxy_endpoint", "mcp_credential", "mcp_proxy", "provider_proxy", "output_archive", "run_output", "run_log", "run_event_stream", "workspace_asset", "custody_manifest", "custody_transition", "cleanup", "deletion", "terminal_redrive", "api_token"];
 export type SideEffectAuditTargetType = (typeof SIDE_EFFECT_AUDIT_TARGET_TYPES)[number];
 export declare const SIDE_EFFECT_AUDIT_OUTCOMES: readonly ["accepted", "rejected", "succeeded", "failed", "denied", "canceled", "pending"];
 export type SideEffectAuditOutcome = (typeof SIDE_EFFECT_AUDIT_OUTCOMES)[number];
 export declare const SIDE_EFFECT_AUDIT_COUNT_NAMES: readonly ["requestBytes", "responseBytes", "durationMs", "attemptCount", "retryCount", "outputCount", "logCount", "eventCount", "assetCount", "proxyCallCount", "mcpCallCount", "providerProxyCallCount", "secretClassCount", "resourceClassCount", "deletedObjectCount", "retainedObjectCount", "failedObjectCount", "quotaRequestedUnits", "quotaRemainingUnits", "reservationCount"];
 export type SideEffectAuditCountName = (typeof SIDE_EFFECT_AUDIT_COUNT_NAMES)[number];
-export declare const SIDE_EFFECT_AUDIT_TIMESTAMP_NAMES: readonly ["startedAt", "finishedAt", "observedAt", "decidedAt", "deletedAt", "tombstonedAt", "terminalAt", "expiresAt"];
+export declare const SIDE_EFFECT_AUDIT_TIMESTAMP_NAMES: readonly ["startedAt", "finishedAt", "observedAt", "decidedAt", "deletedAt", "terminalAt", "expiresAt"];
 export type SideEffectAuditTimestampName = (typeof SIDE_EFFECT_AUDIT_TIMESTAMP_NAMES)[number];
 export declare const SIDE_EFFECT_AUDIT_METADATA_EXCLUDED_VALUE_CLASSES: readonly ["headers", "bodies", "raw_urls", "raw_paths", "query_strings", "provider_response_bodies", "signed_urls", "object_store_keys", "vault_ids", "resource_handles", "bearer_hashes", "secret_values", "customer_or_agent_identity", "private_pricing_or_provider_deployment"];
 export type SideEffectAuditMetadataExcludedValueClass = (typeof SIDE_EFFECT_AUDIT_METADATA_EXCLUDED_VALUE_CLASSES)[number];

package/dist/_contracts/side-effect-audit.js

@@ -22,11 +22,10 @@ export const SIDE_EFFECT_AUDIT_ACTIONS = [
     "custody.transition.recorded",
     "runtime.cleanup.completed",
     "runtime.cleanup.failed",
-    "managed_key.quota.denied",
     "terminal_redrive.attempted",
     "terminal_redrive.completed",
     "api_token.created",
-    "api_token.revoked",
+    "api_token.deleted",
     "api_token.used"
 ];
 export const SIDE_EFFECT_AUDIT_ACTOR_PRINCIPAL_TYPES = [
@@ -63,7 +62,6 @@ export const SIDE_EFFECT_AUDIT_TARGET_TYPES = [
     "custody_transition",
     "cleanup",
     "deletion",
-    "managed_key_gate",
     "terminal_redrive",
     "api_token"
 ];
@@ -104,7 +102,6 @@ export const SIDE_EFFECT_AUDIT_TIMESTAMP_NAMES = [
     "observedAt",
     "decidedAt",
     "deletedAt",
-    "tombstonedAt",
     "terminalAt",
     "expiresAt"
 ];