@aexhq/sdk 0.29.0 → 0.31.0

package/dist/_contracts/status.js

@@ -32,7 +32,7 @@ export function isTerminalRunStatus(status) {
  * `markRunTerminal` (and that a `run/terminal` event carries). This is a
  * STRICT SUBSET of {@link TERMINAL_RUN_STATUSES}: the read-terminal set also
  * includes `cleanup_failed`, which the funnel never writes as an outcome.
- * The worker's `TerminalRunStatus` and the workflow `TerminalOutcome` both
+ * The platform lifecycle `TerminalRunStatus` and the workflow `TerminalOutcome` both
  * derive from this so the four call sites can't drift.
  */
 export const RUN_TERMINAL_OUTCOMES = [

package/dist/_contracts/submission.d.ts

@@ -11,7 +11,7 @@ export type JsonValue = JsonPrimitive | JsonValue[] | {
 };
 /**
  * Networking + runtime-package snapshot carried inside a flat submission
- * so the worker can deep-clone and mutate it per run (e.g. injecting the
+ * so the hosted API can deep-clone and mutate it per run (e.g. injecting the
  * proxy hostname into `allowed_hosts`) without sharing state across
  * concurrent runs.
  *
@@ -58,7 +58,7 @@ export declare const ENV_VARS_MAX_VALUE_BYTES = 4096;
 export declare const ENV_VARS_MAX_TOTAL_BYTES = 65536;
 export interface PlatformNetworking {
     readonly mode: "limited" | "open";
-    /** Lowercase host names. The worker always appends the proxy host. */
+    /** Lowercase host names. The hosted API always appends the proxy host. */
     readonly allowedHosts?: readonly string[];
 }
 /**
@@ -137,60 +137,6 @@ export declare const Providers: {
     /** Doubao (ByteDance) via the official China Volcengine Ark gateway. */
     readonly DOUBAO_CN: "doubao-cn";
 };
-/**
- * Product placement regions accepted on run submission. These are
- * product-level tokens, not exact city guarantees: the hosted platform maps
- * each region to co-located managed Postgres, object storage, run-state
- * placement, and sandbox backing.
- *
- *   eu-west       → London        (Western Europe; hard EU data residency)
- *   us-west       → N. California (Western North America)
- *   ap-northeast  → Seoul         (Northeast Asia)
- *
- * Prefer the {@link Regions} accessors over raw strings so a typo is a compile
- * error, not a runtime 400.
- */
-export declare const REGIONS: readonly ["eu-west", "us-west", "ap-northeast"];
-export type Region = (typeof REGIONS)[number];
-/** Symbol-style accessors for the closed region set — e.g. `Regions.EU_WEST`. */
-export declare const Regions: {
-    /** Western Europe — London. Hard EU data residency. */
-    readonly EU_WEST: "eu-west";
-    /** Western North America — N. California. */
-    readonly US_WEST: "us-west";
-    /** Northeast Asia — Seoul. */
-    readonly AP_NORTHEAST: "ap-northeast";
-};
-/**
- * Customer-facing runtime selector. Optional on the wire; absent resolves
- * to the same managed runtime as `"managed"`. `"native"` is no longer an
- * accepted submission value and fails schema validation.
- */
-export declare const RUNTIME_KINDS: readonly ["managed"];
-export type RuntimeKind = (typeof RUNTIME_KINDS)[number];
-/**
- * Credential source for upstream provider access. Launch accepts only BYOK:
- * callers may omit `credentialMode` or pass `"byok"`. Other strings, including
- * `"managed"`, are invalid submission values rather than reserved product
- * promises.
- */
-export declare const CREDENTIAL_MODES: readonly ["byok"];
-export type CredentialMode = (typeof CREDENTIAL_MODES)[number];
-export declare const DEFAULT_CREDENTIAL_MODE: CredentialMode;
-export declare function parseCredentialMode(input: unknown): CredentialMode;
-export declare function credentialModeOrDefault(input: CredentialMode | undefined): CredentialMode;
-/** Outcome of the centralized runtime-support check. */
-export interface RuntimeSupportCheck {
-    readonly ok: boolean;
-    readonly message?: string;
-}
-/**
- * Centralized runtime-support validator. Native is removed from the public
- * runtime enum, so an absent runtime and `"managed"` are the only supported
- * inputs. Schema parsing rejects other runtime strings before this helper is
- * reached, but the result type remains for SDK preflight checks.
- */
-export declare function checkRuntimeSupported(provider: RunProvider, runtime: RuntimeKind | undefined): RuntimeSupportCheck;
 export interface PlatformMcpServerSecret {
     readonly name: string;
     readonly url: string;
@@ -230,13 +176,6 @@ export type PlatformProxyAuthValue = {
  * driving the MCP client).
  */
 export interface PlatformInlineSecrets {
-    /**
-     * Deprecated compatibility field: the BYOK key for the run's selected
-     * provider. New multi-provider callers should use `apiKeys`, but the parser
-     * still accepts and preserves this flat field so existing SDK/CLI callers
-     * continue to work.
-     */
-    readonly apiKey?: string;
     readonly apiKeys?: Partial<Record<RunProvider, string>>;
     readonly mcpServers?: readonly PlatformMcpServerSecret[];
     readonly proxyEndpointAuth?: readonly PlatformProxyEndpointAuth[];
@@ -324,9 +263,14 @@ export declare function requireString(input: unknown, field: string): string;
 export declare function optionalString(input: unknown, field: string): string | undefined;
 export declare function optionalEnum<const T extends readonly string[]>(input: unknown, field: string, allowed: T): T[number] | undefined;
 export declare function optionalPositiveInt(input: unknown, field: string): number | undefined;
+/**
+ * A finite positive NUMBER (fractional allowed — e.g. a USD amount like `2.5`), or
+ * undefined when absent. Rejects non-numbers, NaN/Infinity, and `<= 0`.
+ */
+export declare function optionalPositiveNumber(input: unknown, field: string): number | undefined;
 /**
  * Wire-level submission posted to /api/runs in the flat surface. The
- * `prompt` is always an array internally so the worker, the audit log,
+ * `prompt` is always an array internally so the hosted API, the audit log,
  * and the BFF idempotency hash all see one shape. `mcpServers` carries
  * only the non-secret half; bearer headers travel in
  * `secrets.mcpServers` keyed by `name`.
@@ -430,30 +374,12 @@ export interface PlatformInjectionConfig {
 export interface PlatformRunSubmissionRequest {
     readonly workspaceId: string;
     readonly idempotencyKey: string;
-    /**
-     * Credential source for upstream provider access. Omitted means
-     * `"byok"`; launch does not accept managed provider credentials.
-     */
-    readonly credentialMode: CredentialMode;
     /**
      * Provider selector. Always populated after parsing — absent on the
      * wire means {@link DEFAULT_RUN_PROVIDER}. All providers are dispatched
      * through the managed runtime.
      */
     readonly provider: RunProvider;
-    /**
-     * Customer's explicit runtime choice. `undefined` and `"managed"` both
-     * resolve to the managed runtime. Other runtime values are rejected by
-     * `parseRunSubmissionRequest`.
-     */
-    readonly runtime?: RuntimeKind;
-    /**
-     * Optional product placement token requested by the caller. Omitted means
-     * the hosted platform infers a configured region from request geography and
-     * falls back to its default region. Accepted tokens do not promise exact
-     * city-level placement.
-     */
-    readonly region?: Region;
     readonly submission: PlatformSubmission;
     readonly secrets: PlatformInlineSecrets;
     readonly proxyEndpoints?: readonly PlatformProxyEndpoint[];
@@ -517,6 +443,15 @@ export interface RunWebhookSpec {
 export interface RunLimits {
     readonly maxConcurrentChildRuns?: number;
     readonly maxSubagentDepth?: number;
+    /**
+     * Per-run spend cap in USD (defense-in-depth). The platform converts it to a
+     * wall-clock budget (priced compute is wall-time; BYOK provider tokens cost the
+     * platform nothing) and kills the run once it would out-spend the cap. A
+     * positive number; omitted ⇒ unbounded per-run (only the run's wall-clock
+     * `timeout` + the per-workspace spend cap apply). Only shape/positivity are
+     * validated here.
+     */
+    readonly maxSpendUsd?: number;
 }
 /**
  * Wire shape posted by the SDK and CLI. `workspaceId` is **omitted by
@@ -531,21 +466,9 @@ export interface RunLimits {
  * {@link DEFAULT_RUN_PROVIDER} (`anthropic`). The parser fills it in
  * before the value enters the run snapshot.
  */
-export type PlatformRunSubmissionInput = Omit<PlatformRunSubmissionRequest, "workspaceId" | "credentialMode" | "provider" | "runtime" | "region" | "timeoutMs" | "postHook"> & {
+export type PlatformRunSubmissionInput = Omit<PlatformRunSubmissionRequest, "workspaceId" | "provider" | "timeoutMs" | "postHook"> & {
     readonly workspaceId?: string;
-    readonly credentialMode?: CredentialMode;
     readonly provider?: RunProvider;
-    /**
-     * Optional runtime selector. Set `"managed"` explicitly or omit the
-     * field; both resolve to the managed runtime. `"native"` is no longer
-     * accepted.
-     */
-    readonly runtime?: RuntimeKind;
-    /**
-     * Optional product placement region. Invalid explicit values are rejected;
-     * omission lets the platform infer/fallback.
-     */
-    readonly region?: Region;
     /**
      * Run deadline as a human duration string (`"1h"`, `"90m"`, `"30s"`).
      * Parsed + bounded to [1m, 6h] server-side into
@@ -578,8 +501,6 @@ export declare function parseRunWebhook(input: unknown): RunWebhookSpec | undefi
  * collapses to `undefined` so it carries no signal onto the request.
  */
 export declare function parseRunLimits(input: unknown): RunLimits | undefined;
-export declare function parseRegion(input: unknown): Region | undefined;
-export declare function parseRuntimeKind(input: unknown): RuntimeKind | undefined;
 export declare function parseRunProvider(input: unknown): RunProvider;
 /**
  * Cross-check the supplied secrets bundle against the credential mode. BYOK
@@ -593,7 +514,7 @@ export declare function parseRunProvider(input: unknown): RunProvider;
  * it need not carry any of its own. The server still verifies, at admission,
  * that the parent actually holds a key for the child's provider.
  */
-export declare function enforceCredentialSecretPolicy(credentialMode: CredentialMode, secrets: PlatformInlineSecrets, provider: RunProvider, opts?: {
+export declare function enforceCredentialSecretPolicy(secrets: PlatformInlineSecrets, provider: RunProvider, opts?: {
     readonly inheritsFromParent?: boolean;
 }): void;
 export declare function parseSubmission(input: unknown): PlatformSubmission;
@@ -665,31 +586,3 @@ export declare const DEFAULT_BUILTIN_TOOLS: readonly BuiltinToolName[];
  * union is validated ⊆ the closed set so an invalid name can never leak through.
  */
 export declare function resolveBuiltinToolNames(includeBuiltinTools: boolean | undefined, toolRefs?: readonly string[]): readonly BuiltinToolName[];
-/**
- * Codes emitted when a submission contains features the active runtime cannot
- * serve. Code values are stable so dashboard / SDK error rendering can branch
- * on them.
- */
-export declare const RUNTIME_VALIDATION_CODES: readonly ["feature_runtime_mismatch"];
-export type RuntimeValidationCode = (typeof RUNTIME_VALIDATION_CODES)[number];
-/**
- * Thrown by `parseRunSubmissionRequest` and `selectRuntime` when the submitted
- * run cannot be served by the active managed runtime. The `code` field is part
- * of the public contract; keep it stable when phrasing changes.
- */
-export declare class RuntimeValidationError extends Error {
-    readonly code: RuntimeValidationCode;
-    constructor(code: RuntimeValidationCode, message: string);
-}
-/**
- * Walk the parsed submission and collect features that the active managed
- * runtime cannot serve. Provider-hosted skill refs (`kind:"provider"`) are
- * rejected now that new submissions only dispatch through managed runs.
- */
-export declare function collectManagedUnsupportedFeatures(req: PlatformRunSubmissionRequest): string[];
-/**
- * Backward-incompatible replacement for the old dual-runtime dispatcher. It is
- * kept as a pure helper so SDK, CLI, and tests can resolve the runtime without
- * I/O.
- */
-export declare function selectRuntime(req: PlatformRunSubmissionRequest): RuntimeKind;

package/dist/_contracts/submission.js

@@ -114,65 +114,6 @@ export const Providers = {
     /** Doubao (ByteDance) via the official China Volcengine Ark gateway. */
     DOUBAO_CN: "doubao-cn"
 };
-/**
- * Product placement regions accepted on run submission. These are
- * product-level tokens, not exact city guarantees: the hosted platform maps
- * each region to co-located managed Postgres, object storage, run-state
- * placement, and sandbox backing.
- *
- *   eu-west       → London        (Western Europe; hard EU data residency)
- *   us-west       → N. California (Western North America)
- *   ap-northeast  → Seoul         (Northeast Asia)
- *
- * Prefer the {@link Regions} accessors over raw strings so a typo is a compile
- * error, not a runtime 400.
- */
-export const REGIONS = ["eu-west", "us-west", "ap-northeast"];
-/** Symbol-style accessors for the closed region set — e.g. `Regions.EU_WEST`. */
-export const Regions = {
-    /** Western Europe — London. Hard EU data residency. */
-    EU_WEST: "eu-west",
-    /** Western North America — N. California. */
-    US_WEST: "us-west",
-    /** Northeast Asia — Seoul. */
-    AP_NORTHEAST: "ap-northeast"
-};
-/**
- * Customer-facing runtime selector. Optional on the wire; absent resolves
- * to the same managed runtime as `"managed"`. `"native"` is no longer an
- * accepted submission value and fails schema validation.
- */
-export const RUNTIME_KINDS = ["managed"];
-/**
- * Credential source for upstream provider access. Launch accepts only BYOK:
- * callers may omit `credentialMode` or pass `"byok"`. Other strings, including
- * `"managed"`, are invalid submission values rather than reserved product
- * promises.
- */
-export const CREDENTIAL_MODES = ["byok"];
-export const DEFAULT_CREDENTIAL_MODE = "byok";
-export function parseCredentialMode(input) {
-    if (input === undefined) {
-        return DEFAULT_CREDENTIAL_MODE;
-    }
-    if (typeof input !== "string" || !CREDENTIAL_MODES.includes(input)) {
-        throw new Error(`credentialMode must be one of: ${CREDENTIAL_MODES.join(", ")} (got ${JSON.stringify(input)})`);
-    }
-    return input;
-}
-export function credentialModeOrDefault(input) {
-    return input ?? DEFAULT_CREDENTIAL_MODE;
-}
-/**
- * Centralized runtime-support validator. Native is removed from the public
- * runtime enum, so an absent runtime and `"managed"` are the only supported
- * inputs. Schema parsing rejects other runtime strings before this helper is
- * reached, but the result type remains for SDK preflight checks.
- */
-export function checkRuntimeSupported(provider, runtime) {
-    void provider;
-    return { ok: true };
-}
 export const SECRETS_KEY = "secrets";
 /** POSIX-style env var name a `secretEnv` entry binds to (e.g. `SERPER_API_KEY`). */
 export const SECRET_ENV_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_]{0,127}$/;
@@ -239,7 +180,7 @@ function parseEnvironment(input) {
  * Validate a customer-supplied `environment.envVars` map. Returns a
  * frozen copy with keys in insertion order, or `undefined` when the
  * input is absent / an empty object (treated as not supplied so the
- * worker can omit the field from the parsed snapshot).
+ * hosted API can omit the field from the parsed snapshot).
  *
  * Rules:
  *   - Must be a JSON object whose values are all strings.
@@ -723,7 +664,7 @@ export function parseInlineSecrets(input) {
     if (input === undefined || input === null)
         return {};
     const value = requireRecord(input, "secrets");
-    const allowedTopLevel = new Set(["apiKey", "apiKeys", "mcpServers", "proxyEndpointAuth", "envSecrets"]);
+    const allowedTopLevel = new Set(["apiKeys", "mcpServers", "proxyEndpointAuth", "envSecrets"]);
     for (const key of Object.keys(value)) {
         if (key.startsWith("__aex_")) {
             // Platform-internal namespace (e.g. __aex_proxy_token). The BFF
@@ -736,13 +677,11 @@ export function parseInlineSecrets(input) {
             throw new Error(`secrets.${key} is not an allowed field; permitted: ${[...allowedTopLevel].join(", ")}`);
         }
     }
-    const apiKey = value.apiKey !== undefined ? requireString(value.apiKey, "secrets.apiKey") : undefined;
     const apiKeys = parseApiKeys(value.apiKeys);
     const mcpServers = parseMcpServerSecrets(value.mcpServers);
     const proxyEndpointAuth = parseProxyEndpointAuth(value.proxyEndpointAuth);
     const envSecrets = parseEnvSecrets(value.envSecrets);
     return {
-        ...(apiKey !== undefined ? { apiKey } : {}),
         ...(apiKeys ? { apiKeys } : {}),
         ...(mcpServers ? { mcpServers } : {}),
         ...(proxyEndpointAuth ? { proxyEndpointAuth } : {}),
@@ -997,6 +936,19 @@ export function optionalPositiveInt(input, field) {
     }
     return input;
 }
+/**
+ * A finite positive NUMBER (fractional allowed — e.g. a USD amount like `2.5`), or
+ * undefined when absent. Rejects non-numbers, NaN/Infinity, and `<= 0`.
+ */
+export function optionalPositiveNumber(input, field) {
+    if (input === undefined) {
+        return undefined;
+    }
+    if (typeof input !== "number" || !Number.isFinite(input) || input <= 0) {
+        throw new Error(`${field} must be a positive finite number`);
+    }
+    return input;
+}
 function parseOptionalBoundedInt(input, field, min, max) {
     if (input === undefined) {
         return undefined;
@@ -1038,10 +990,7 @@ export function parseRunSubmissionRequest(input, options = {}) {
     const allowedTopLevelFields = new Set([
         "workspaceId",
         "idempotencyKey",
-        "credentialMode",
         "provider",
-        "runtime",
-        "region",
         "submission",
         "runtimeSize",
         "timeout",
@@ -1070,15 +1019,7 @@ export function parseRunSubmissionRequest(input, options = {}) {
         assertNoSecretBearingFields(fieldValue, [key]);
     }
     const provider = parseRunProvider(value.provider);
-    const runtime = parseRuntimeKind(value.runtime);
-    const region = parseRegion(value.region);
-    const credentialMode = parseCredentialMode(value.credentialMode);
     void options;
-    // Cross-field validation via the centralized runtime-support validator.
-    const runtimeSupport = checkRuntimeSupported(provider, runtime);
-    if (!runtimeSupport.ok) {
-        throw new Error(runtimeSupport.message ?? "unsupported runtime");
-    }
     const runtimeSize = parseRuntimeSize(value.runtimeSize);
     const timeoutMs = parseRunTimeout(value.timeout);
     // Lineage parent only. `depth` is NEVER accepted from the wire — the server
@@ -1089,7 +1030,7 @@ export function parseRunSubmissionRequest(input, options = {}) {
     const postHook = parsePostHook(value.postHook, "submission.postHook");
     const proxyEndpoints = parseProxyEndpoints(value.proxyEndpoints);
     const secrets = parseInlineSecrets(value.secrets);
-    enforceCredentialSecretPolicy(credentialMode, secrets, provider, {
+    enforceCredentialSecretPolicy(secrets, provider, {
         inheritsFromParent: parentRunId !== undefined
     });
     crossValidateProxyEndpointsAndAuth(proxyEndpoints, secrets.proxyEndpointAuth);
@@ -1114,28 +1055,10 @@ export function parseRunSubmissionRequest(input, options = {}) {
             }
         }
     }
-    const candidate = {
-        workspaceId: "",
-        idempotencyKey: "",
-        credentialMode,
-        provider,
-        ...(runtime ? { runtime } : {}),
-        ...(region ? { region } : {}),
-        submission,
-        secrets
-    };
-    const unsupportedManagedFeatures = collectManagedUnsupportedFeatures(candidate);
-    if (unsupportedManagedFeatures.length > 0) {
-        throw new RuntimeValidationError("feature_runtime_mismatch", `The managed runtime does not support these submission features: ` +
-            `${unsupportedManagedFeatures.join(", ")}. Remove them or use inline aex skills.`);
-    }
     return {
         workspaceId: requireString(value.workspaceId, "workspaceId"),
         idempotencyKey: requireString(value.idempotencyKey, "idempotencyKey"),
-        credentialMode,
         provider,
-        ...(runtime ? { runtime } : {}),
-        ...(region ? { region } : {}),
         submission,
         ...(runtimeSize ? { runtimeSize } : {}),
         ...(timeoutMs !== undefined ? { timeoutMs } : {}),
@@ -1198,7 +1121,7 @@ export function parseRunLimits(input) {
         return undefined;
     }
     const value = requireRecord(input, "limits");
-    const allowed = new Set(["maxConcurrentChildRuns", "maxSubagentDepth"]);
+    const allowed = new Set(["maxConcurrentChildRuns", "maxSubagentDepth", "maxSpendUsd"]);
     for (const key of Object.keys(value)) {
         if (!allowed.has(key)) {
             throw new Error(`limits.${key} is not an allowed field; permitted: ${[...allowed].join(", ")}`);
@@ -1206,35 +1129,22 @@ export function parseRunLimits(input) {
     }
     const maxConcurrentChildRuns = optionalPositiveInt(value.maxConcurrentChildRuns, "limits.maxConcurrentChildRuns");
     const maxSubagentDepth = optionalPositiveInt(value.maxSubagentDepth, "limits.maxSubagentDepth");
+    // maxSpendUsd is a USD amount (may be fractional, e.g. $2.50) so it is a positive
+    // NUMBER, not a positive int. Clamping to the workspace/platform ceiling is the
+    // resolver's job; here we only enforce shape + positivity.
+    const maxSpendUsd = optionalPositiveNumber(value.maxSpendUsd, "limits.maxSpendUsd");
     // Collapse an all-absent override (e.g. `limits: {}`) to `undefined` so it never
     // lands an empty object on the request — matches sibling parsers (parseRunWebhook,
     // parseEnvironment). The resolver supplies platform defaults for absent fields.
-    if (maxConcurrentChildRuns === undefined && maxSubagentDepth === undefined) {
+    if (maxConcurrentChildRuns === undefined && maxSubagentDepth === undefined && maxSpendUsd === undefined) {
         return undefined;
     }
     return {
         ...(maxConcurrentChildRuns !== undefined ? { maxConcurrentChildRuns } : {}),
-        ...(maxSubagentDepth !== undefined ? { maxSubagentDepth } : {})
+        ...(maxSubagentDepth !== undefined ? { maxSubagentDepth } : {}),
+        ...(maxSpendUsd !== undefined ? { maxSpendUsd } : {})
     };
 }
-export function parseRegion(input) {
-    if (input === undefined) {
-        return undefined;
-    }
-    if (typeof input !== "string" || !REGIONS.includes(input)) {
-        throw new Error(`region must be one of: ${REGIONS.join(", ")} (got ${JSON.stringify(input)})`);
-    }
-    return input;
-}
-export function parseRuntimeKind(input) {
-    if (input === undefined) {
-        return undefined;
-    }
-    if (typeof input !== "string" || !RUNTIME_KINDS.includes(input)) {
-        throw new Error(`runtime must be one of: ${RUNTIME_KINDS.join(", ")} (got ${JSON.stringify(input)})`);
-    }
-    return input;
-}
 export function parseRunProvider(input) {
     if (input === undefined) {
         return DEFAULT_RUN_PROVIDER;
@@ -1256,12 +1166,11 @@ export function parseRunProvider(input) {
  * it need not carry any of its own. The server still verifies, at admission,
  * that the parent actually holds a key for the child's provider.
  */
-export function enforceCredentialSecretPolicy(credentialMode, secrets, provider, opts) {
-    void credentialMode;
+export function enforceCredentialSecretPolicy(secrets, provider, opts) {
     if (opts?.inheritsFromParent)
         return;
-    if (!(secrets.apiKeys?.[provider] ?? secrets.apiKey)) {
-        throw new Error(`secrets.apiKey is required when credentialMode is byok (or secrets.apiKeys["${provider}"])`);
+    if (!secrets.apiKeys?.[provider]) {
+        throw new Error(`secrets.apiKeys["${provider}"] is required`);
     }
 }
 export function parseSubmission(input) {
@@ -1491,7 +1400,7 @@ function parseIncludeBuiltinTools(input) {
  * plus a generous margin for legitimate multi-root use cases (per-tool
  * output directory + scratch state + logs, repeated across a few
  * subdirectories), without inviting abuse of the synthetic-turn path
- * the worker drives at session terminal.
+ * the platform capture path drives at session terminal.
  */
 const MAX_OUTPUT_DIRS = 32;
 /**
@@ -1690,23 +1599,13 @@ function parseSkills(input) {
     if (!Array.isArray(input)) {
         throw new Error("submission.skills must be an array of SkillRef objects");
     }
-    const seenProvider = new Set();
     const seenAssetId = new Set();
     return input.map((item, index) => {
         const ref = parseSkillRef(item, `submission.skills[${index}]`);
-        if (ref.kind === "provider") {
-            const key = `${ref.vendor}:${ref.skillId}:${ref.version ?? ""}`;
-            if (seenProvider.has(key)) {
-                throw new Error(`submission.skills duplicate provider skill: ${ref.vendor}:${ref.skillId}${ref.version ? `:${ref.version}` : ""}`);
-            }
-            seenProvider.add(key);
-        }
-        else if (ref.kind === "asset") {
-            if (seenAssetId.has(ref.assetId)) {
-                throw new Error(`submission.skills duplicate assetId: ${ref.assetId}`);
-            }
-            seenAssetId.add(ref.assetId);
+        if (seenAssetId.has(ref.assetId)) {
+            throw new Error(`submission.skills duplicate assetId: ${ref.assetId}`);
         }
+        seenAssetId.add(ref.assetId);
         return ref;
     });
 }
@@ -1861,57 +1760,4 @@ function parseMcpServers(input) {
         return ref;
     });
 }
-// ===========================================================================
-// Runtime dispatcher
-// ===========================================================================
-/**
- * Codes emitted when a submission contains features the active runtime cannot
- * serve. Code values are stable so dashboard / SDK error rendering can branch
- * on them.
- */
-export const RUNTIME_VALIDATION_CODES = [
-    "feature_runtime_mismatch"
-];
-/**
- * Thrown by `parseRunSubmissionRequest` and `selectRuntime` when the submitted
- * run cannot be served by the active managed runtime. The `code` field is part
- * of the public contract; keep it stable when phrasing changes.
- */
-export class RuntimeValidationError extends Error {
-    code;
-    constructor(code, message) {
-        super(message);
-        this.name = "RuntimeValidationError";
-        this.code = code;
-    }
-}
-/**
- * Walk the parsed submission and collect features that the active managed
- * runtime cannot serve. Provider-hosted skill refs (`kind:"provider"`) are
- * rejected now that new submissions only dispatch through managed runs.
- */
-export function collectManagedUnsupportedFeatures(req) {
-    const features = [];
-    for (const skill of req.submission.skills) {
-        if (skill.kind === "provider") {
-            const versionSuffix = skill.version ? `@${skill.version}` : "";
-            features.push(`provider skill "${skill.vendor}/${skill.skillId}${versionSuffix}" (kind:"provider")`);
-        }
-    }
-    return features;
-}
-/**
- * Backward-incompatible replacement for the old dual-runtime dispatcher. It is
- * kept as a pure helper so SDK, CLI, and tests can resolve the runtime without
- * I/O.
- */
-export function selectRuntime(req) {
-    const unsupported = collectManagedUnsupportedFeatures(req);
-    if (unsupported.length > 0) {
-        throw new RuntimeValidationError("feature_runtime_mismatch", `The managed runtime does not support these submission features: ` +
-            `${unsupported.join(", ")}. Remove them or use inline aex skills.`);
-    }
-    void req;
-    return "managed";
-}
 //# sourceMappingURL=submission.js.map

package/dist/_contracts/webhook-verify.d.ts

@@ -12,7 +12,7 @@
  * the HMAC key is the raw bytes after the `whsec_` prefix. Verification accepts
  * the secret with or without the prefix.
  *
- * Pure Web Crypto — identical under Bun, Node, and workerd; this mirrors the
+ * Pure Web Crypto — identical under Bun and Node; this mirrors the
  * `standardwebhooks` library so a customer can verify with either.
  */
 export interface VerifyAexWebhookInput {

package/dist/_contracts/webhook-verify.js

@@ -12,7 +12,7 @@
  * the HMAC key is the raw bytes after the `whsec_` prefix. Verification accepts
  * the secret with or without the prefix.
  *
- * Pure Web Crypto — identical under Bun, Node, and workerd; this mirrors the
+ * Pure Web Crypto — identical under Bun and Node; this mirrors the
  * `standardwebhooks` library so a customer can verify with either.
  */
 const encoder = new TextEncoder();

package/dist/agents-md.d.ts

@@ -15,7 +15,10 @@ export declare class AgentsMd {
     constructor(ref: AgentsMdRef | DraftAgentsMdRef, zipBytes?: Uint8Array);
     get ref(): AgentsMdRef | DraftAgentsMdRef;
     get isDraft(): boolean;
-    get isConsumed(): boolean;
+    /** Internal: the asset id resolved on a prior submit, or undefined. */
+    get _cachedAssetId(): string | undefined;
+    /** Internal: remember the asset id resolved for this draft's bytes. */
+    _rememberAsset(assetId: string): void;
     /**
      * Build a draft AgentsMd from a markdown string. The SDK zips the
      * content under the canonical filename `AGENTS.md` so the hash is a

package/dist/agents-md.js

@@ -15,7 +15,8 @@ import { strToU8, zipSync } from "fflate";
 export class AgentsMd {
     #ref;
     #zipBytes;
-    #consumed = false;
+    /** Asset id cached after the first submit, so reuse skips a re-upload. */
+    #assetId;
     constructor(ref, zipBytes) {
         this.#ref = ref;
         this.#zipBytes = zipBytes;
@@ -24,10 +25,15 @@ export class AgentsMd {
         return this.#ref;
     }
     get isDraft() {
-        return this.#ref.kind === "draft" && !this.#consumed;
+        return this.#ref.kind === "draft";
     }
-    get isConsumed() {
-        return this.#consumed;
+    /** Internal: the asset id resolved on a prior submit, or undefined. */
+    get _cachedAssetId() {
+        return this.#assetId;
+    }
+    /** Internal: remember the asset id resolved for this draft's bytes. */
+    _rememberAsset(assetId) {
+        this.#assetId = assetId;
     }
     /**
      * Build a draft AgentsMd from a markdown string. The SDK zips the
@@ -56,14 +62,9 @@ export class AgentsMd {
      * `client.submit` can upload it as an asset.
      */
     _takeDraftBundle() {
-        if (this.#consumed) {
-            throw new Error("AgentsMd: cannot reuse a consumed AgentsMd in submit. Build a fresh one " +
-                "via AgentsMd.fromContent(...) / AgentsMd.fromPath(...) per submit call.");
-        }
         if (this.#ref.kind !== "draft" || !this.#zipBytes) {
             return undefined;
         }
-        this.#consumed = true;
         return {
             name: this.#ref.name,
             contentHash: this.#ref.contentHash,

package/dist/agents-md.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents-md.js","sourceRoot":"","sources":["../src/agents-md.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAE1C;;;;;;;;;;GAUG;AACH,MAAM,OAAO,QAAQ;IACV,IAAI,CAAiC;IACrC,SAAS,CAAyB;IAC3C,SAAS,GAAG,KAAK,CAAC;IAElB,YAAY,GAAmC,EAAE,QAAqB;QACpE,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;IACvD,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,IAA+B;QACvE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,yCAAyC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7F,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAqB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC;QAC9E,OAAO,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,uEAAuE;IACvE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAA+B;QACjE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,OAAO,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,gBAAgB;QACd,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,0EAA0E;gBACxE,yEAAyE,CAC5E,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACpB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;YAClC,KAAK,EAAE,IAAI,CAAC,SAAS;SACtB,CAAC;IACJ,CAAC;IAED,MAAM;QACJ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,8EAA8E;gBAC5E,uDAAuD,CAC1D,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;CACF;AAQD,MAAM,iBAAiB,GAAG,mCAAmC,CAAC;AAC9D,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"agents-md.js","sourceRoot":"","sources":["../src/agents-md.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAE1C;;;;;;;;;;GAUG;AACH,MAAM,OAAO,QAAQ;IACV,IAAI,CAAiC;IACrC,SAAS,CAAyB;IAC3C,0EAA0E;IAC1E,QAAQ,CAAqB;IAE7B,YAAY,GAAmC,EAAE,QAAqB;QACpE,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;IACpC,CAAC;IAED,uEAAuE;IACvE,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,uEAAuE;IACvE,cAAc,CAAC,OAAe;QAC5B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,IAA+B;QACvE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,yCAAyC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC7F,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAqB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC;QAC9E,OAAO,IAAI,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;IAED,uEAAuE;IACvE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAA+B;QACjE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,OAAO,QAAQ,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,gBAAgB;QACd,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAClD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACpB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;YAClC,KAAK,EAAE,IAAI,CAAC,SAAS;SACtB,CAAC;IACJ,CAAC;IAED,MAAM;QACJ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,8EAA8E;gBAC5E,uDAAuD,CAC1D,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;CACF;AAQD,MAAM,iBAAiB,GAAG,mCAAmC,CAAC;AAC9D,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC"}