@aexhq/sdk 0.25.0 → 0.25.2

package/dist/_contracts/status.d.ts

@@ -1,14 +1,13 @@
-export declare const RUN_STATUSES: readonly ["queued", "claiming", "provisioning", "session_created", "dispatched", "provider_running", "provider_idle", "provider_rescheduled", "cancelling", "capturing_outputs", "cleaning_up", "succeeded", "failed", "timed_out", "cancelled", "cleanup_failed", "pending_delete", "deleted"];
+export declare const RUN_STATUSES: readonly ["queued", "claiming", "provisioning", "session_created", "dispatched", "provider_running", "provider_idle", "provider_rescheduled", "cancelling", "capturing_outputs", "cleaning_up", "succeeded", "failed", "timed_out", "cancelled", "cleanup_failed"];
 export type RunStatus = typeof RUN_STATUSES[number];
 export type RunStatusKind = "active" | "terminal";
-export declare const TERMINAL_RUN_STATUSES: readonly ["succeeded", "failed", "timed_out", "cancelled", "cleanup_failed", "pending_delete", "deleted"];
+export declare const TERMINAL_RUN_STATUSES: readonly ["succeeded", "failed", "timed_out", "cancelled", "cleanup_failed"];
 export declare function isTerminalRunStatus(status: RunStatus): boolean;
 /**
  * The closed set of terminal OUTCOMES the run-lifecycle funnel writes via
  * `markRunTerminal` (and that a `run/terminal` event carries). This is a
  * STRICT SUBSET of {@link TERMINAL_RUN_STATUSES}: the read-terminal set also
- * includes the post-terminal housekeeping states (`cleanup_failed`,
- * `pending_delete`, `deleted`) which the funnel never writes as an outcome.
+ * includes `cleanup_failed`, which the funnel never writes as an outcome.
  * The worker's `TerminalRunStatus` and the workflow `TerminalOutcome` both
  * derive from this so the four call sites can't drift.
  */

package/dist/_contracts/status.js

@@ -14,18 +14,14 @@ export const RUN_STATUSES = [
     "failed",
     "timed_out",
     "cancelled",
-    "cleanup_failed",
-    "pending_delete",
-    "deleted"
+    "cleanup_failed"
 ];
 export const TERMINAL_RUN_STATUSES = [
     "succeeded",
     "failed",
     "timed_out",
     "cancelled",
-    "cleanup_failed",
-    "pending_delete",
-    "deleted"
+    "cleanup_failed"
 ];
 const terminalRunStatuses = new Set(TERMINAL_RUN_STATUSES);
 export function isTerminalRunStatus(status) {
@@ -35,8 +31,7 @@ export function isTerminalRunStatus(status) {
  * The closed set of terminal OUTCOMES the run-lifecycle funnel writes via
  * `markRunTerminal` (and that a `run/terminal` event carries). This is a
  * STRICT SUBSET of {@link TERMINAL_RUN_STATUSES}: the read-terminal set also
- * includes the post-terminal housekeeping states (`cleanup_failed`,
- * `pending_delete`, `deleted`) which the funnel never writes as an outcome.
+ * includes `cleanup_failed`, which the funnel never writes as an outcome.
  * The worker's `TerminalRunStatus` and the workflow `TerminalOutcome` both
  * derive from this so the four call sites can't drift.
  */

package/dist/_contracts/submission.d.ts

@@ -5,7 +5,6 @@ import { type RuntimeSize } from "./runtime-sizes.js";
 import { type PlatformPostHook, type PlatformPostHookInput } from "./post-hook.js";
 import { type RunModel } from "./models.js";
 import { type RuntimeSecurityProfileName } from "./runtime-security-profile.js";
-import { type CredentialMode, type ManagedKeyPolicyV1 } from "./managed-key.js";
 export type JsonPrimitive = string | number | boolean | null;
 export type JsonValue = JsonPrimitive | JsonValue[] | {
     readonly [key: string]: JsonValue;
@@ -138,6 +137,21 @@ export declare const Providers: {
     /** Doubao (ByteDance) via the official China Volcengine Ark gateway. */
     readonly DOUBAO_CN: "doubao-cn";
 };
+/**
+ * Product placement tokens accepted on run submission. These are not exact
+ * city guarantees: the hosted platform maps each token to the configured
+ * database, object store, Durable Object, and sandbox backing available for
+ * that product region.
+ */
+export declare const RUN_REGIONS: readonly ["lhr", "iad", "sfo", "bom"];
+export type RunRegion = (typeof RUN_REGIONS)[number];
+/** Symbol-style accessors for the closed run-region set. */
+export declare const RunRegions: {
+    readonly LHR: "lhr";
+    readonly IAD: "iad";
+    readonly SFO: "sfo";
+    readonly BOM: "bom";
+};
 /**
  * Customer-facing runtime selector. Optional on the wire; absent resolves
  * to the same managed runtime as `"managed"`. `"native"` is no longer an
@@ -145,6 +159,17 @@ export declare const Providers: {
  */
 export declare const RUNTIME_KINDS: readonly ["managed"];
 export type RuntimeKind = (typeof RUNTIME_KINDS)[number];
+/**
+ * Credential source for upstream provider access. Launch accepts only BYOK:
+ * callers may omit `credentialMode` or pass `"byok"`. Other strings, including
+ * `"managed"`, are invalid submission values rather than reserved product
+ * promises.
+ */
+export declare const CREDENTIAL_MODES: readonly ["byok"];
+export type CredentialMode = (typeof CREDENTIAL_MODES)[number];
+export declare const DEFAULT_CREDENTIAL_MODE: CredentialMode;
+export declare function parseCredentialMode(input: unknown): CredentialMode;
+export declare function credentialModeOrDefault(input: CredentialMode | undefined): CredentialMode;
 /** Outcome of the centralized runtime-support check. */
 export interface RuntimeSupportCheck {
     readonly ok: boolean;
@@ -188,11 +213,10 @@ export type PlatformProxyAuthValue = {
 };
 /**
  * Per-run inline secrets bundle. `apiKey` is the BYOK provider key for the
- * run's selected `provider` (required in `"byok"` credential mode, rejected
- * in `"managed"` mode). A run targets exactly one provider, so the key is a
- * single flat field rather than a per-provider block. `mcpServers` and
- * `proxyEndpointAuth` are cross-provider (an MCP credential is the same
- * secret whichever model is driving the MCP client).
+ * run's selected `provider`. A run targets exactly one provider, so the key is
+ * a single flat field rather than a per-provider block. `mcpServers` and
+ * `proxyEndpointAuth` are cross-provider (an MCP credential is the same secret
+ * whichever model is driving the MCP client).
  */
 export interface PlatformInlineSecrets {
     readonly apiKey?: string;
@@ -289,9 +313,9 @@ export declare function optionalPositiveInt(input: unknown, field: string): numb
  * only the non-secret half; bearer headers travel in
  * `secrets.mcpServers` keyed by `name`.
  *
- * `skills` is a list of `SkillRef`s — workspace refs point at
- * `skill_bundles.id` (validated by the BFF before acceptance and pinned
- * into `run_skill_snapshots`), provider refs pass through unchanged.
+ * `skills` is a list of `SkillRef`s. Launch workspace skills use
+ * content-addressed asset refs; run submission snapshots the bytes into the
+ * run-owned prefix before dispatch.
  */
 export interface PlatformSubmission {
     readonly model: RunModel;
@@ -321,14 +345,14 @@ export interface PlatformSubmission {
      */
     readonly outputs?: PlatformOutputCaptureConfig;
     /**
-     * Optional override for the managed-runtime builtin extensions enabled
-     * inside the runner container. Each entry is one of the closed
-     * {@link BUILTINS} set (prefer the {@link Builtins} symbol
-     * const). The platform default is `["developer"]` which gives the agent
-     * shell + write + edit + tree tools (bash, grep via shell, file read via
-     * shell or editor, file edit). To opt in to more tools (e.g. web fetch via
-     * the `computercontroller` extension), pass the full list. To opt out of
-     * all builtins (pure-MCP setup), pass an empty array.
+     * Optional override for the managed-runtime builtins enabled inside the
+     * runner container. Each entry is one of the closed {@link BUILTINS} set
+     * (prefer the {@link Builtins} symbol const).
+     *
+     * Omit the field for {@link DEFAULT_BUILTINS}: web search, web fetch,
+     * file read/edit, glob, grep, head, and tail. Pass an empty array to opt out
+     * of all builtins for pure-MCP runs. Pass a custom list to narrow or extend
+     * the tool surface, for example `[Builtins.WEB_SEARCH, Builtins.NOTEBOOK]`.
      *
      * Validation:
      *   - Each entry must be a member of {@link BUILTINS}.
@@ -389,9 +413,7 @@ export interface PlatformRunSubmissionRequest {
     readonly idempotencyKey: string;
     /**
      * Credential source for upstream provider access. Omitted means
-     * `"byok"` for compatibility with the current production path.
-     * `"managed"` is a public contract value but remains fail-closed until
-     * credential resolution and billing admission are available.
+     * `"byok"`; launch does not accept managed provider credentials.
      */
     readonly credentialMode: CredentialMode;
     /**
@@ -406,6 +428,13 @@ export interface PlatformRunSubmissionRequest {
      * `parseRunSubmissionRequest`.
      */
     readonly runtime?: RuntimeKind;
+    /**
+     * Optional product placement token requested by the caller. Omitted means
+     * the hosted platform infers a configured region from request geography and
+     * falls back to its default region. Accepted tokens do not promise exact
+     * city-level placement.
+     */
+    readonly region?: RunRegion;
     readonly submission: PlatformSubmission;
     readonly secrets: PlatformInlineSecrets;
     readonly proxyEndpoints?: readonly PlatformProxyEndpoint[];
@@ -451,7 +480,7 @@ export interface PlatformRunSubmissionRequest {
  * {@link DEFAULT_RUN_PROVIDER} (`anthropic`). The parser fills it in
  * before the value enters the run snapshot.
  */
-export type PlatformRunSubmissionInput = Omit<PlatformRunSubmissionRequest, "workspaceId" | "credentialMode" | "provider" | "runtime" | "timeoutMs" | "postHook"> & {
+export type PlatformRunSubmissionInput = Omit<PlatformRunSubmissionRequest, "workspaceId" | "credentialMode" | "provider" | "runtime" | "region" | "timeoutMs" | "postHook"> & {
     readonly workspaceId?: string;
     readonly credentialMode?: CredentialMode;
     readonly provider?: RunProvider;
@@ -461,6 +490,11 @@ export type PlatformRunSubmissionInput = Omit<PlatformRunSubmissionRequest, "wor
      * accepted.
      */
     readonly runtime?: RuntimeKind;
+    /**
+     * Optional product placement token. Invalid explicit values are rejected;
+     * omission lets the platform infer/fallback.
+     */
+    readonly region?: RunRegion;
     /**
      * Run deadline as a human duration string (`"1h"`, `"90m"`, `"30s"`).
      * Parsed + bounded to [1m, 6h] server-side into
@@ -470,20 +504,15 @@ export type PlatformRunSubmissionInput = Omit<PlatformRunSubmissionRequest, "wor
     readonly postHook?: PlatformPostHookInput;
 };
 export interface ParseRunSubmissionOptions {
-    readonly managedKeyPolicy?: ManagedKeyPolicyV1;
 }
 export declare function parseRunSubmissionRequest(input: unknown, options?: ParseRunSubmissionOptions): PlatformRunSubmissionRequest;
+export declare function parseRunRegion(input: unknown): RunRegion | undefined;
 export declare function parseRuntimeKind(input: unknown): RuntimeKind | undefined;
 export declare function parseRunProvider(input: unknown): RunProvider;
 /**
- * Cross-check the supplied secrets bundle against the credential mode.
- *
- *  - `"byok"`: `secrets.apiKey` (the provider key for the run's `provider`)
- *    MUST be present.
- *  - `"managed"`: `secrets.apiKey` MUST be absent — provider access is
- *    resolved by the managed-key policy, not a caller-supplied key.
- *  - MCP / proxy endpoint auth carry across providers and are not
- *    checked here.
+ * Cross-check the supplied secrets bundle against the credential mode. BYOK
+ * requires `secrets.apiKey` (the provider key for the run's `provider`). MCP /
+ * proxy endpoint auth carry across providers and are not checked here.
  */
 export declare function enforceCredentialSecretPolicy(credentialMode: CredentialMode, secrets: PlatformInlineSecrets): void;
 export declare function parseSubmission(input: unknown): PlatformSubmission;
@@ -492,28 +521,54 @@ export declare const OUTPUT_MODES: readonly ["buffered", "stream"];
 export type OutputMode = (typeof OUTPUT_MODES)[number];
 export declare const DEFAULT_OUTPUT_MODE: OutputMode;
 /**
- * Managed-runtime builtin extensions — the closed set the managed runtime
- * accepts. Closed so an invalid name is a compile error via {@link Builtins},
- * not a silent runtime no-op. `developer` is the platform default when
- * `builtins` is omitted; pass an empty array to disable all builtins
- * (pure-MCP setup).
+ * Managed-runtime builtins — the closed set the managed runtime accepts.
+ * Closed so an invalid name is a compile error via {@link Builtins}, not a
+ * silent runtime no-op.
+ *
+ * The first entries are the recommended concrete builtins. The legacy aggregate
+ * extension names remain accepted for existing callers, but are not the default.
  */
-export declare const BUILTINS: readonly ["developer", "computercontroller", "memory", "autovisualiser", "tutorial"];
+export declare const BUILTINS: readonly ["web_search", "web_fetch", "read", "edit", "glob", "grep", "head", "tail", "bash", "notebook", "developer", "computercontroller", "memory", "autovisualiser", "tutorial"];
 export type Builtin = (typeof BUILTINS)[number];
+/**
+ * DX-first managed-runtime defaults. Omitted `builtins` resolves to this list.
+ * Notebook support remains opt-in through {@link Builtins.NOTEBOOK}.
+ */
+export declare const DEFAULT_BUILTINS: readonly ["web_search", "web_fetch", "read", "edit", "glob", "grep", "head", "tail", "bash"];
 /**
  * Symbol-style accessors for the closed builtin set, e.g.
- * `Builtins.COMPUTER_CONTROLLER`.
+ * `Builtins.WEB_SEARCH`.
  */
 export declare const Builtins: {
-    /** Shell (bash + UNIX tools incl. grep), write, edit, tree. The default. */
+    /** Managed web search. Included in {@link DEFAULT_BUILTINS}. */
+    readonly WEB_SEARCH: "web_search";
+    /** Fetch a URL and return readable text. Included in {@link DEFAULT_BUILTINS}. */
+    readonly WEB_FETCH: "web_fetch";
+    /** Read files. Included in {@link DEFAULT_BUILTINS}. */
+    readonly READ: "read";
+    /** Create/modify files. Included in {@link DEFAULT_BUILTINS}. */
+    readonly EDIT: "edit";
+    /** Search paths by glob. Included in {@link DEFAULT_BUILTINS}. */
+    readonly GLOB: "glob";
+    /** Search file contents. Included in {@link DEFAULT_BUILTINS}. */
+    readonly GREP: "grep";
+    /** Read the first lines of a file. Included in {@link DEFAULT_BUILTINS}. */
+    readonly HEAD: "head";
+    /** Read the last lines of a file. Included in {@link DEFAULT_BUILTINS}. */
+    readonly TAIL: "tail";
+    /** Shell command execution. Included in {@link DEFAULT_BUILTINS}. */
+    readonly BASH: "bash";
+    /** Jupyter notebook editing. Optional; not in {@link DEFAULT_BUILTINS}. */
+    readonly NOTEBOOK: "notebook";
+    /** Legacy aggregate: shell/filesystem/navigation/web/notebook tools. */
     readonly DEVELOPER: "developer";
-    /** Web fetch/scrape, scripting, general computer-control tools. */
+    /** Legacy aggregate alias retained for existing callers. */
     readonly COMPUTER_CONTROLLER: "computercontroller";
-    /** Cross-session preference memory. */
+    /** Legacy aggregate alias retained for existing callers. */
     readonly MEMORY: "memory";
-    /** Inline data-visualisation rendering. */
+    /** Legacy aggregate alias retained for existing callers. */
     readonly AUTOVISUALISER: "autovisualiser";
-    /** Interactive guided tutorials. */
+    /** Legacy aggregate alias retained for existing callers. */
     readonly TUTORIAL: "tutorial";
 };
 /**

package/dist/_contracts/submission.js

@@ -9,7 +9,6 @@ import { parseRunTimeout, parseRuntimeSize } from "./runtime-sizes.js";
 import { parsePostHook } from "./post-hook.js";
 import { assertRunModelMatchesProvider, parseRunModel } from "./models.js";
 import { parseRuntimeSecurityProfile } from "./runtime-security-profile.js";
-import { assertManagedKeyAdmissionAllowed, parseCredentialMode } from "./managed-key.js";
 /**
  * Reserved prefix for aex-set runtime env vars (`AEX_CLI`,
  * `AEX_RUNTIME_JSON`, …). Customer `environment.envVars` keys carrying this
@@ -115,12 +114,46 @@ export const Providers = {
     /** Doubao (ByteDance) via the official China Volcengine Ark gateway. */
     DOUBAO_CN: "doubao-cn"
 };
+/**
+ * Product placement tokens accepted on run submission. These are not exact
+ * city guarantees: the hosted platform maps each token to the configured
+ * database, object store, Durable Object, and sandbox backing available for
+ * that product region.
+ */
+export const RUN_REGIONS = ["lhr", "iad", "sfo", "bom"];
+/** Symbol-style accessors for the closed run-region set. */
+export const RunRegions = {
+    LHR: "lhr",
+    IAD: "iad",
+    SFO: "sfo",
+    BOM: "bom"
+};
 /**
  * Customer-facing runtime selector. Optional on the wire; absent resolves
  * to the same managed runtime as `"managed"`. `"native"` is no longer an
  * accepted submission value and fails schema validation.
  */
 export const RUNTIME_KINDS = ["managed"];
+/**
+ * Credential source for upstream provider access. Launch accepts only BYOK:
+ * callers may omit `credentialMode` or pass `"byok"`. Other strings, including
+ * `"managed"`, are invalid submission values rather than reserved product
+ * promises.
+ */
+export const CREDENTIAL_MODES = ["byok"];
+export const DEFAULT_CREDENTIAL_MODE = "byok";
+export function parseCredentialMode(input) {
+    if (input === undefined) {
+        return DEFAULT_CREDENTIAL_MODE;
+    }
+    if (typeof input !== "string" || !CREDENTIAL_MODES.includes(input)) {
+        throw new Error(`credentialMode must be one of: ${CREDENTIAL_MODES.join(", ")} (got ${JSON.stringify(input)})`);
+    }
+    return input;
+}
+export function credentialModeOrDefault(input) {
+    return input ?? DEFAULT_CREDENTIAL_MODE;
+}
 /**
  * Centralized runtime-support validator. Native is removed from the public
  * runtime enum, so an absent runtime and `"managed"` are the only supported
@@ -971,6 +1004,7 @@ export function parseRunSubmissionRequest(input, options = {}) {
         "credentialMode",
         "provider",
         "runtime",
+        "region",
         "submission",
         "runtimeSize",
         "timeout",
@@ -998,10 +1032,9 @@ export function parseRunSubmissionRequest(input, options = {}) {
     }
     const provider = parseRunProvider(value.provider);
     const runtime = parseRuntimeKind(value.runtime);
+    const region = parseRunRegion(value.region);
     const credentialMode = parseCredentialMode(value.credentialMode);
-    if (credentialMode === "managed") {
-        assertManagedKeyAdmissionAllowed(options.managedKeyPolicy);
-    }
+    void options;
     // Cross-field validation via the centralized runtime-support validator.
     const runtimeSupport = checkRuntimeSupported(provider, runtime);
     if (!runtimeSupport.ok) {
@@ -1044,6 +1077,7 @@ export function parseRunSubmissionRequest(input, options = {}) {
         credentialMode,
         provider,
         ...(runtime ? { runtime } : {}),
+        ...(region ? { region } : {}),
         submission,
         secrets
     };
@@ -1058,6 +1092,7 @@ export function parseRunSubmissionRequest(input, options = {}) {
         credentialMode,
         provider,
         ...(runtime ? { runtime } : {}),
+        ...(region ? { region } : {}),
         submission,
         ...(runtimeSize ? { runtimeSize } : {}),
         ...(timeoutMs !== undefined ? { timeoutMs } : {}),
@@ -1067,6 +1102,15 @@ export function parseRunSubmissionRequest(input, options = {}) {
         secrets
     };
 }
+export function parseRunRegion(input) {
+    if (input === undefined) {
+        return undefined;
+    }
+    if (typeof input !== "string" || !RUN_REGIONS.includes(input)) {
+        throw new Error(`region must be one of: ${RUN_REGIONS.join(", ")} (got ${JSON.stringify(input)})`);
+    }
+    return input;
+}
 export function parseRuntimeKind(input) {
     if (input === undefined) {
         return undefined;
@@ -1086,22 +1130,12 @@ export function parseRunProvider(input) {
     return input;
 }
 /**
- * Cross-check the supplied secrets bundle against the credential mode.
- *
- *  - `"byok"`: `secrets.apiKey` (the provider key for the run's `provider`)
- *    MUST be present.
- *  - `"managed"`: `secrets.apiKey` MUST be absent — provider access is
- *    resolved by the managed-key policy, not a caller-supplied key.
- *  - MCP / proxy endpoint auth carry across providers and are not
- *    checked here.
+ * Cross-check the supplied secrets bundle against the credential mode. BYOK
+ * requires `secrets.apiKey` (the provider key for the run's `provider`). MCP /
+ * proxy endpoint auth carry across providers and are not checked here.
  */
 export function enforceCredentialSecretPolicy(credentialMode, secrets) {
-    if (credentialMode === "managed") {
-        if (secrets.apiKey !== undefined) {
-            throw new Error(`secrets.apiKey is not allowed when credentialMode is managed; provider access is resolved by the managed-key policy`);
-        }
-        return;
-    }
+    void credentialMode;
     if (!secrets.apiKey) {
         throw new Error(`secrets.apiKey is required when credentialMode is byok`);
     }
@@ -1225,33 +1259,79 @@ function parseOutputMode(input) {
     return input;
 }
 /**
- * Managed-runtime builtin extensions — the closed set the managed runtime
- * accepts. Closed so an invalid name is a compile error via {@link Builtins},
- * not a silent runtime no-op. `developer` is the platform default when
- * `builtins` is omitted; pass an empty array to disable all builtins
- * (pure-MCP setup).
+ * Managed-runtime builtins — the closed set the managed runtime accepts.
+ * Closed so an invalid name is a compile error via {@link Builtins}, not a
+ * silent runtime no-op.
+ *
+ * The first entries are the recommended concrete builtins. The legacy aggregate
+ * extension names remain accepted for existing callers, but are not the default.
  */
 export const BUILTINS = [
+    "web_search",
+    "web_fetch",
+    "read",
+    "edit",
+    "glob",
+    "grep",
+    "head",
+    "tail",
+    "bash",
+    "notebook",
     "developer",
     "computercontroller",
     "memory",
     "autovisualiser",
     "tutorial"
 ];
+/**
+ * DX-first managed-runtime defaults. Omitted `builtins` resolves to this list.
+ * Notebook support remains opt-in through {@link Builtins.NOTEBOOK}.
+ */
+export const DEFAULT_BUILTINS = [
+    "web_search",
+    "web_fetch",
+    "read",
+    "edit",
+    "glob",
+    "grep",
+    "head",
+    "tail",
+    "bash"
+];
 /**
  * Symbol-style accessors for the closed builtin set, e.g.
- * `Builtins.COMPUTER_CONTROLLER`.
+ * `Builtins.WEB_SEARCH`.
  */
 export const Builtins = {
-    /** Shell (bash + UNIX tools incl. grep), write, edit, tree. The default. */
+    /** Managed web search. Included in {@link DEFAULT_BUILTINS}. */
+    WEB_SEARCH: "web_search",
+    /** Fetch a URL and return readable text. Included in {@link DEFAULT_BUILTINS}. */
+    WEB_FETCH: "web_fetch",
+    /** Read files. Included in {@link DEFAULT_BUILTINS}. */
+    READ: "read",
+    /** Create/modify files. Included in {@link DEFAULT_BUILTINS}. */
+    EDIT: "edit",
+    /** Search paths by glob. Included in {@link DEFAULT_BUILTINS}. */
+    GLOB: "glob",
+    /** Search file contents. Included in {@link DEFAULT_BUILTINS}. */
+    GREP: "grep",
+    /** Read the first lines of a file. Included in {@link DEFAULT_BUILTINS}. */
+    HEAD: "head",
+    /** Read the last lines of a file. Included in {@link DEFAULT_BUILTINS}. */
+    TAIL: "tail",
+    /** Shell command execution. Included in {@link DEFAULT_BUILTINS}. */
+    BASH: "bash",
+    /** Jupyter notebook editing. Optional; not in {@link DEFAULT_BUILTINS}. */
+    NOTEBOOK: "notebook",
+    /** Legacy aggregate: shell/filesystem/navigation/web/notebook tools. */
     DEVELOPER: "developer",
-    /** Web fetch/scrape, scripting, general computer-control tools. */
+    /** Legacy aggregate alias retained for existing callers. */
     COMPUTER_CONTROLLER: "computercontroller",
-    /** Cross-session preference memory. */
+    /** Legacy aggregate alias retained for existing callers. */
     MEMORY: "memory",
-    /** Inline data-visualisation rendering. */
+    /** Legacy aggregate alias retained for existing callers. */
     AUTOVISUALISER: "autovisualiser",
-    /** Interactive guided tutorials. */
+    /** Legacy aggregate alias retained for existing callers. */
     TUTORIAL: "tutorial"
 };
 const MAX_BUILTINS = 16;