@aexhq/sdk 0.30.0 → 0.31.0

package/dist/_contracts/run-config.js

@@ -5,9 +5,7 @@
  *
  *   - `SkillRef` is the wire-level reference to a skill. Public run
  *     configs use storage-neutral `kind:"asset"` refs produced by the SDK
- *     upload path or by workspace catalog records. Provider skill refs remain
- *     in the parser for wire compatibility, but the managed runtime rejects
- *     them at submission time.
+ *     upload path or by workspace catalog records.
  *
  *   - `McpServerRef` is the non-secret part of an MCP server declaration:
  *     `name` and `url`. Bearer / cookie / per-request headers travel in
@@ -30,7 +28,6 @@
  * Keep this as the public source of truth for the SDK/CLI composition
  * boundary.
  */
-import { parseRegion, } from "./submission.js";
 import { parseRunModel } from "./models.js";
 import { parsePostHook } from "./post-hook.js";
 // ---------------------------------------------------------------------------
@@ -89,9 +86,6 @@ export const SKILL_BUNDLE_LIMITS = {
 };
 /** Content-hash format: `sha256:<64 lowercase hex>`. */
 export const INLINE_CONTENT_HASH_PATTERN = /^sha256:[0-9a-f]{64}$/;
-export function isProviderSkillRef(ref) {
-    return ref.kind === "provider";
-}
 export function isAssetRef(ref) {
     return ref.kind === "asset";
 }
@@ -146,10 +140,8 @@ export function assertValidMountPath(value, field) {
     }
 }
 /**
- * Parse a `SkillRef` from untrusted input. Used by the BFF run parser
- * and by the operations module when deserialising API responses. Only
- * `kind: "asset"` and `kind: "provider"` are valid; all other historical
- * wire shapes (including storage-specific refs) are rejected.
+ * Parse a `SkillRef` from untrusted input. Only asset-backed skill refs are
+ * accepted on the public surface.
  */
 export function parseSkillRef(input, path) {
     if (input === null || typeof input !== "object" || Array.isArray(input)) {
@@ -157,35 +149,10 @@ export function parseSkillRef(input, path) {
     }
     const record = input;
     const kind = record.kind;
-    if (kind === "provider") {
-        for (const key of Object.keys(record)) {
-            if (key !== "kind" && key !== "vendor" && key !== "skillId" && key !== "version") {
-                throw new Error(`${path} contains unexpected field for provider SkillRef: ${key}`);
-            }
-        }
-        const vendor = record.vendor;
-        if (vendor !== "anthropic" && vendor !== "custom") {
-            throw new Error(`${path}.vendor must be 'anthropic' or 'custom'`);
-        }
-        const skillId = record.skillId;
-        if (typeof skillId !== "string" || skillId.length === 0 || skillId.length > 256) {
-            throw new Error(`${path}.skillId must be a non-empty string (<= 256 chars)`);
-        }
-        const version = record.version;
-        if (version !== undefined && (typeof version !== "string" || version.length === 0 || version.length > 64)) {
-            throw new Error(`${path}.version, when provided, must be a non-empty string (<= 64 chars)`);
-        }
-        return {
-            kind: "provider",
-            vendor,
-            skillId,
-            ...(version !== undefined ? { version } : {})
-        };
-    }
     if (kind === "asset") {
         return parseAssetRefFields(record, path);
     }
-    throw new Error(`${path}.kind must be 'provider' or 'asset'`);
+    throw new Error(`${path}.kind must be 'asset'`);
 }
 /**
  * Common parser for any `kind: "asset"` ref (skill / agentsMd / file).
@@ -434,11 +401,9 @@ export function parseMcpServerRef(input, path) {
         if (parsed.username !== "" || parsed.password !== "") {
             throw new Error(`${path}.url must not contain userinfo (username/password); use secrets.mcpServers[].headers for auth`);
         }
-        // SSRF guard at the parser boundary (C4) — the Worker MCP proxy
-        // relies on this validation; CF's outbound fetch refuses RFC1918 but
-        // does NOT block loopback names, link-local IPv6, 169.254.x, or
-        // arbitrary non-443 ports on https. Each branch below maps to a
-        // c4-worker-ssrf.regression test case.
+        // SSRF guard at the parser boundary (C4) — the platform MCP proxy
+        // relies on this validation. Each branch below maps to an
+        // SSRF regression test case.
         const ssrfDenial = denyReasonForMcpHost(parsed);
         if (ssrfDenial !== null) {
             throw new Error(`${path}.url ${ssrfDenial}`);
@@ -559,7 +524,7 @@ function denyReasonForV4(host) {
  * when the URL is acceptable. Hostnames are lowercased; numeric ranges
  * are checked literally so the catch covers both names ("localhost") and
  * IP literals ("127.0.0.1") symmetrically. The numeric-range checks
- * delegate to {@link denyReasonForHostIp} (shared with the Worker proxy).
+ * delegate to {@link denyReasonForHostIp} (shared with the platform proxy).
  *
  * Surface tracked by server-side SSRF regression coverage.
  */
@@ -651,7 +616,6 @@ export function parseRunRequestConfig(input) {
         "mcpServers",
         "environment",
         "runtimeSize",
-        "region",
         "timeout",
         "postHook",
         "proxyEndpoints",
@@ -670,7 +634,6 @@ export function parseRunRequestConfig(input) {
     const prompt = parseRunRequestConfigPrompt(record.prompt);
     const skills = parseRunRequestConfigSkills(record.skills);
     const mcpServers = parseRunRequestConfigMcpServers(record.mcpServers);
-    const region = parseRegion(record.region);
     const postHook = parsePostHook(record.postHook, "run request config postHook");
     return {
         model,
@@ -688,7 +651,6 @@ export function parseRunRequestConfig(input) {
         ...(record.runtimeSize !== undefined
             ? { runtimeSize: record.runtimeSize }
             : {}),
-        ...(region !== undefined ? { region } : {}),
         ...(record.timeout !== undefined
             ? { timeout: record.timeout }
             : {}),

package/dist/_contracts/run-cost.d.ts

@@ -1,4 +1,4 @@
-import type { CredentialMode, RunProvider, RuntimeKind } from "./submission.js";
+import type { RunProvider } from "./submission.js";
 export declare const RUN_COST_TELEMETRY_SCHEMA_VERSION = 1;
 export declare const RUN_USAGE_SAMPLE_SCHEMA_VERSION = 1;
 export declare const RUN_COST_SUMMARY_STATUSES: readonly ["pending", "partial", "complete", "unavailable", "not_applicable"];
@@ -23,9 +23,7 @@ export interface RunUsageSample {
     readonly quantity: number;
     readonly source: RunUsageSampleSource;
     readonly provider?: RunProvider | string;
-    readonly runtime?: RuntimeKind | string;
     readonly model?: string;
-    readonly credentialMode?: CredentialMode;
     readonly recordedAt?: string;
 }
 export type RunUsageSampleInput = Omit<RunUsageSample, "schemaVersion" | "unit"> & {
@@ -104,7 +102,6 @@ export interface RunCostTelemetry {
     readonly schemaVersion: typeof RUN_COST_TELEMETRY_SCHEMA_VERSION;
     readonly runId?: string;
     readonly provider?: RunProvider | string;
-    readonly runtime?: RuntimeKind | string;
     readonly recordedAt?: string;
     readonly status?: RunCostSummaryStatus;
     readonly sourceSummary?: RunCostSourceSummary;
@@ -132,7 +129,6 @@ export type RunCostTelemetryInput = Omit<RunCostTelemetry, "schemaVersion">;
 export interface RunCostTelemetryFromUsageSamplesInput {
     readonly runId?: string;
     readonly provider?: RunProvider | string;
-    readonly runtime?: RuntimeKind | string;
     readonly recordedAt?: string;
     readonly status?: RunCostSummaryStatus;
     readonly samples: readonly RunUsageSampleInput[];

package/dist/_contracts/run-cost.js

@@ -113,9 +113,7 @@ export function buildRunUsageSample(input) {
         quantity: nonNegativeFinite(input.quantity, "quantity"),
         source: normalizeUsageSampleSource(input.source),
         ...(input.provider ? { provider: input.provider } : {}),
-        ...(input.runtime ? { runtime: input.runtime } : {}),
         ...(input.model ? { model: input.model } : {}),
-        ...(input.credentialMode ? { credentialMode: input.credentialMode } : {}),
         ...(input.recordedAt ? { recordedAt: input.recordedAt } : {})
     });
 }
@@ -124,7 +122,6 @@ export function buildRunCostTelemetry(input) {
         schemaVersion: RUN_COST_TELEMETRY_SCHEMA_VERSION,
         ...(input.runId ? { runId: input.runId } : {}),
         ...(input.provider ? { provider: input.provider } : {}),
-        ...(input.runtime ? { runtime: input.runtime } : {}),
         ...(input.recordedAt ? { recordedAt: input.recordedAt } : {}),
         ...(input.status ? { status: normalizeSummaryStatus(input.status) } : {}),
         ...(input.sourceSummary ? { sourceSummary: normalizeSourceSummary(input.sourceSummary) } : {}),
@@ -148,8 +145,6 @@ export function buildRunCostTelemetryFromUsageSamples(input) {
         telemetry.runId = input.runId;
     if (input.provider)
         telemetry.provider = input.provider;
-    if (input.runtime)
-        telemetry.runtime = input.runtime;
     if (input.recordedAt)
         telemetry.recordedAt = input.recordedAt;
     if (input.status)
@@ -288,7 +283,6 @@ export function mergeRunCostTelemetry(base, next) {
     const merged = {};
     const runId = patch.runId ?? base.runId;
     const provider = patch.provider ?? base.provider;
-    const runtime = patch.runtime ?? base.runtime;
     const recordedAt = patch.recordedAt ?? base.recordedAt;
     const status = patch.status ?? base.status;
     const sourceSummary = mergeSourceSummary(base.sourceSummary, patch.sourceSummary);
@@ -308,8 +302,6 @@ export function mergeRunCostTelemetry(base, next) {
         merged.runId = runId;
     if (provider)
         merged.provider = provider;
-    if (runtime)
-        merged.runtime = runtime;
     if (recordedAt)
         merged.recordedAt = recordedAt;
     if (status)

package/dist/_contracts/run-custody.d.ts

@@ -1,5 +1,5 @@
 import type { RunStatus } from "./status.js";
-import type { CredentialMode, RunProvider, RuntimeKind } from "./submission.js";
+import type { RunProvider } from "./submission.js";
 export declare const CUSTODY_MANIFEST_SCHEMA_VERSION = 1;
 export declare const CUSTODY_REDACTION_SCANNER_VERSION = 1;
 export declare const CUSTODY_MANIFEST_KIND = "aex.custody_manifest.v1";
@@ -7,15 +7,15 @@ export declare const CUSTODY_MANIFEST_CONTENT_TYPE = "application/json; charset=
 export declare const CUSTODY_MANIFEST_RUN_REL_PATH = "metadata/custody.json";
 export declare const CUSTODY_SECRET_CLASSES: readonly ["provider_api_key", "mcp_credential", "proxy_endpoint_auth", "runner_bearer", "managed_system_credential"];
 export type CustodySecretClass = (typeof CUSTODY_SECRET_CLASSES)[number];
-export declare const CUSTODY_RESOURCE_CLASSES: readonly ["runtime_machine", "native_provider_session", "native_provider_resource", "provider_asset", "proxy_token", "execution_secret", "event_archive", "run_output", "run_log", "run_asset"];
+export declare const CUSTODY_RESOURCE_CLASSES: readonly ["runtime_machine", "proxy_token", "execution_secret", "event_archive", "run_output", "run_log", "run_asset"];
 export type CustodyResourceClass = (typeof CUSTODY_RESOURCE_CLASSES)[number];
-export declare const CUSTODY_EXPOSURE_SURFACES: readonly ["aex_vault", "aex_kv", "host_env", "host_file", "provider_vault", "provider_session", "dashboard_proxy", "api_provider_proxy", "api_mcp_proxy", "run_artifact_store", "coordinator_event_archive"];
+export declare const CUSTODY_EXPOSURE_SURFACES: readonly ["aex_vault", "aex_kv", "host_env", "host_file", "dashboard_proxy", "api_provider_proxy", "api_mcp_proxy", "run_artifact_store", "coordinator_event_archive"];
 export type CustodyExposureSurface = (typeof CUSTODY_EXPOSURE_SURFACES)[number];
 export declare const CUSTODY_EXPOSURE_ACCESS_KINDS: readonly ["stored", "injected", "proxied", "replicated", "observed", "unknown"];
 export type CustodyExposureAccessKind = (typeof CUSTODY_EXPOSURE_ACCESS_KINDS)[number];
 export declare const CUSTODY_EXPOSURE_STATUSES: readonly ["exposed", "revoked", "retained", "failed", "not_applicable"];
 export type CustodyExposureStatus = (typeof CUSTODY_EXPOSURE_STATUSES)[number];
-export declare const CUSTODY_DISPOSITION_STATUSES: readonly ["destroyed", "revoked", "not_found", "provider_delete_confirmed", "retained_by_policy", "cleanup_failed", "parked_for_operator", "pending", "not_applicable"];
+export declare const CUSTODY_DISPOSITION_STATUSES: readonly ["destroyed", "revoked", "not_found", "retained_by_policy", "cleanup_failed", "parked_for_operator", "pending", "not_applicable"];
 export type CustodyDispositionStatus = (typeof CUSTODY_DISPOSITION_STATUSES)[number];
 export declare const CUSTODY_CLEANUP_STATUSES: readonly ["succeeded", "partial", "failed", "retained", "pending"];
 export type CustodyCleanupStatus = (typeof CUSTODY_CLEANUP_STATUSES)[number];
@@ -27,9 +27,7 @@ export interface CustodyManifestRunV1 {
     readonly runId: string;
     readonly workspaceId: string;
     readonly provider: RunProvider | string;
-    readonly runtime: RuntimeKind | string;
     readonly terminalStatus: RunStatus | string;
-    readonly credentialMode?: CredentialMode;
     readonly createdAt?: string;
     readonly terminalAt?: string;
 }

package/dist/_contracts/run-custody.js

@@ -12,9 +12,6 @@ export const CUSTODY_SECRET_CLASSES = [
 ];
 export const CUSTODY_RESOURCE_CLASSES = [
     "runtime_machine",
-    "native_provider_session",
-    "native_provider_resource",
-    "provider_asset",
     "proxy_token",
     "execution_secret",
     "event_archive",
@@ -27,8 +24,6 @@ export const CUSTODY_EXPOSURE_SURFACES = [
     "aex_kv",
     "host_env",
     "host_file",
-    "provider_vault",
-    "provider_session",
     "dashboard_proxy",
     "api_provider_proxy",
     "api_mcp_proxy",
@@ -54,7 +49,6 @@ export const CUSTODY_DISPOSITION_STATUSES = [
     "destroyed",
     "revoked",
     "not_found",
-    "provider_delete_confirmed",
     "retained_by_policy",
     "cleanup_failed",
     "parked_for_operator",
@@ -179,9 +173,7 @@ function normalizeRun(input) {
         runId: assertSafeIdentifier(input.runId, "run.runId"),
         workspaceId: assertSafeIdentifier(input.workspaceId, "run.workspaceId"),
         provider: assertSafeMetadataString(input.provider, "run.provider"),
-        runtime: assertSafeMetadataString(input.runtime, "run.runtime"),
         terminalStatus: assertSafeMetadataString(input.terminalStatus, "run.terminalStatus"),
-        ...(input.credentialMode ? { credentialMode: input.credentialMode } : {}),
         ...(input.createdAt ? { createdAt: assertTimestamp(input.createdAt, "run.createdAt") } : {}),
         ...(input.terminalAt ? { terminalAt: assertTimestamp(input.terminalAt, "run.terminalAt") } : {})
     });

package/dist/_contracts/run-unit.d.ts

@@ -183,7 +183,7 @@ export interface RunUnit {
 /**
  * Parse a legacy run snapshot jsonb payload into the typed flat
  * submission. Never throws on minor unknown keys so we can
- * forward-compat with worker-side enrichment.
+ * forward-compat with hosted API enrichment.
  *
  * Returns a typed shape even for malformed snapshots by falling back to the
  * default public model and empty collection defaults, because the dashboard

package/dist/_contracts/run-unit.js

@@ -28,7 +28,7 @@ import { PLATFORM_PACKAGE_ECOSYSTEMS } from "./submission.js";
 /**
  * Parse a legacy run snapshot jsonb payload into the typed flat
  * submission. Never throws on minor unknown keys so we can
- * forward-compat with worker-side enrichment.
+ * forward-compat with hosted API enrichment.
  *
  * Returns a typed shape even for malformed snapshots by falling back to the
  * default public model and empty collection defaults, because the dashboard
@@ -160,7 +160,7 @@ function toSkillRefArray(value) {
         }
         catch {
             // Skip malformed entries rather than failing the whole detail
-            // read. Worker-side enrichment may add fields we don't recognise.
+            // read. Hosted API enrichment may add fields we don't recognise.
         }
     }
     return out;

package/dist/_contracts/runner-event.d.ts

@@ -74,7 +74,7 @@ export interface RunnerEventBatch {
 }
 /**
  * Maximum number of events per batch. Bounds the size of the body
- * api.aex.dev accepts and the size of the downstream Postgres / KV
+ * api.aex.dev accepts and the size of the downstream Postgres / metadata-store
  * write. Larger streams are split into multiple batches; the runner is
  * responsible for chunking.
  */

package/dist/_contracts/runner-event.js

@@ -55,7 +55,7 @@ export const RUNNER_EVENT_KINDS = [
 ];
 /**
  * Maximum number of events per batch. Bounds the size of the body
- * api.aex.dev accepts and the size of the downstream Postgres / KV
+ * api.aex.dev accepts and the size of the downstream Postgres / metadata-store
  * write. Larger streams are split into multiple batches; the runner is
  * responsible for chunking.
  */

package/dist/_contracts/runtime-manifest.d.ts

@@ -1,30 +1,23 @@
+import type { RunProvider } from "./submission.js";
 /**
- * Runtime manifest: the per-run, per-provider description of where
+ * Runtime manifest: the per-run description of where
  * aex places things inside the agent container, plus the merged
  * env-var bag delivered via `RUNTIME.env` / `RUNTIME.json`.
  *
  * The hosted API computes a manifest at submitRun-response time
- * (from the validated submission + the chosen provider) via
- * {@link buildRuntimeManifest} and echoes it on the wire as
+ * from the validated submission via {@link buildRuntimeManifest} and
+ * echoes it on the wire as
  * `Run.runtimeManifest`, so caller code (anyone rendering catalog markdown
  * pre-submission, or resolving aex's in-container path strings) doesn't
  * have to guess.
  * The managed runtime materialises the actual `RUNTIME.env` / `RUNTIME.json`
- * files in-container from the same provider + envVars inputs, so the
+ * files in-container from the same envVars inputs, so the
  * SDK-side view and the in-container view describe the same layout.
  *
  * Manifest values are derived, never persisted separately — the source
  * of truth for the customer half remains `submission.environment.envVars`
- * on the run row; the aex half is constant for a given
- * provider+SDK-version pair.
+ * on the run row; the aex half is constant for a given SDK version.
  */
-/**
- * Set of providers whose runtime contract aex models. Today only
- * `"anthropic"` ships; the field is on the manifest so forward-compat
- * consumers can branch on it without us having to silently change
- * what `runtimeManifest` means when we add a second provider.
- */
-export type RuntimeProvider = "anthropic";
 /**
  * The in-container paths the agent and skill code reference at
  * runtime. All fields are absolute, all reflect Anthropic Managed
@@ -37,8 +30,8 @@ export type RuntimeProvider = "anthropic";
  * under `/mnt/session/uploads/`.
  */
 export interface RuntimeManifest {
-    readonly provider: RuntimeProvider;
-    /** Where Skills-API-registered bundles auto-discover (Anthropic). */
+    readonly provider: RunProvider | string;
+    /** Where skill bundles auto-discover in the managed runner. */
     readonly skillsRoot: string;
     /** Parent dir of File mounts: `<filesRoot>/<f_id>/<rel-path>`. */
     readonly filesRoot: string;
@@ -79,12 +72,12 @@ export interface MountedFileManifest {
     readonly mountPath: string;
 }
 /**
- * Managed-runner container paths. Kept here so the BFF, worker, and
+ * Managed-runner container paths. Kept here so the BFF, hosted API, and
  * in-container bridge render identical values; runtime bootstrap constants are
  * validated against these by a regression test
  * (`packages/contracts/test/runtime-manifest.test.ts`).
  */
-declare const ANTHROPIC_PATHS: Readonly<{
+declare const RUNTIME_PATHS: Readonly<{
     readonly skillsRoot: "/workspace/skills";
     readonly filesRoot: "/mnt/session/uploads/aex/files";
     readonly assetsRoot: "/mnt/session/uploads/aex/assets";
@@ -94,15 +87,9 @@ declare const ANTHROPIC_PATHS: Readonly<{
     readonly runtimeJson: "/mnt/session/uploads/aex/RUNTIME.json";
     readonly runtimeEnv: "/mnt/session/uploads/aex/RUNTIME.env";
 }>;
-/**
- * Container paths exposed for a given provider. Today only
- * `"anthropic"` is recognised; calling with anything else throws so
- * forward-compat surfaces the missing provider entry instead of
- * silently emitting Anthropic paths.
- */
-export declare function runtimePathsFor(provider: RuntimeProvider): typeof ANTHROPIC_PATHS;
+export declare function runtimePaths(): typeof RUNTIME_PATHS;
 export interface BuildRuntimeManifestInput {
-    readonly provider: RuntimeProvider;
+    readonly provider: RunProvider | string;
     /**
      * Customer-supplied `environment.envVars` from the validated
      * submission. Keys with the reserved `AEX_` prefix are
@@ -124,7 +111,7 @@ export interface BuildRuntimeManifestInput {
 /**
  * Build the runtime manifest for a single submission. Pure function:
  * same input → same output → safe to call from the BFF response path
- * and from the worker bootstrap path with identical results.
+ * and from the hosted bootstrap path with identical results.
  */
 export declare function buildRuntimeManifest(input: BuildRuntimeManifestInput): RuntimeManifest;
 export {};

package/dist/_contracts/runtime-manifest.js

@@ -1,30 +1,10 @@
 /**
- * Runtime manifest: the per-run, per-provider description of where
- * aex places things inside the agent container, plus the merged
- * env-var bag delivered via `RUNTIME.env` / `RUNTIME.json`.
- *
- * The hosted API computes a manifest at submitRun-response time
- * (from the validated submission + the chosen provider) via
- * {@link buildRuntimeManifest} and echoes it on the wire as
- * `Run.runtimeManifest`, so caller code (anyone rendering catalog markdown
- * pre-submission, or resolving aex's in-container path strings) doesn't
- * have to guess.
- * The managed runtime materialises the actual `RUNTIME.env` / `RUNTIME.json`
- * files in-container from the same provider + envVars inputs, so the
- * SDK-side view and the in-container view describe the same layout.
- *
- * Manifest values are derived, never persisted separately — the source
- * of truth for the customer half remains `submission.environment.envVars`
- * on the run row; the aex half is constant for a given
- * provider+SDK-version pair.
- */
-/**
- * Managed-runner container paths. Kept here so the BFF, worker, and
+ * Managed-runner container paths. Kept here so the BFF, hosted API, and
  * in-container bridge render identical values; runtime bootstrap constants are
  * validated against these by a regression test
  * (`packages/contracts/test/runtime-manifest.test.ts`).
  */
-const ANTHROPIC_PATHS = Object.freeze({
+const RUNTIME_PATHS = Object.freeze({
     skillsRoot: "/workspace/skills",
     filesRoot: "/mnt/session/uploads/aex/files",
     assetsRoot: "/mnt/session/uploads/aex/assets",
@@ -34,17 +14,8 @@ const ANTHROPIC_PATHS = Object.freeze({
     runtimeJson: "/mnt/session/uploads/aex/RUNTIME.json",
     runtimeEnv: "/mnt/session/uploads/aex/RUNTIME.env"
 });
-/**
- * Container paths exposed for a given provider. Today only
- * `"anthropic"` is recognised; calling with anything else throws so
- * forward-compat surfaces the missing provider entry instead of
- * silently emitting Anthropic paths.
- */
-export function runtimePathsFor(provider) {
-    if (provider === "anthropic") {
-        return ANTHROPIC_PATHS;
-    }
-    throw new Error(`Unknown runtime provider: ${provider}`);
+export function runtimePaths() {
+    return RUNTIME_PATHS;
 }
 /**
  * Reserved env-var prefix for aex-set runtime keys. Mirrors the
@@ -63,10 +34,10 @@ const DEFAULT_FILE_MOUNT_PATH = "/workspace";
 /**
  * Build the runtime manifest for a single submission. Pure function:
  * same input → same output → safe to call from the BFF response path
- * and from the worker bootstrap path with identical results.
+ * and from the hosted bootstrap path with identical results.
  */
 export function buildRuntimeManifest(input) {
-    const paths = runtimePathsFor(input.provider);
+    const paths = runtimePaths();
     const aexEnvVars = {
         AEX_PROVIDER: input.provider,
         AEX_CLI: paths.aexCli,

package/dist/_contracts/runtime-types.d.ts

@@ -130,7 +130,7 @@ export interface RunEvent {
     readonly recordedAt?: string;
     /** Which sub-stream this record rides — `"event"` (typed) or `"log"`. Absent ⇒ `"event"`. */
     readonly channel?: import("./event-envelope.js").AexEventChannel;
-    /** Coarse origin classifier (agent/worker/runtime/mcp/aex/workflow/machine). */
+    /** Coarse origin classifier. See {@link AexEventSource}. */
     readonly source?: import("./event-envelope.js").AexEventSource;
     /** Per-source monotonic counter assigned at the source (carried, not re-ordered). */
     readonly sourceSeq?: number;

package/dist/_contracts/sdk-secrets.js

@@ -3,8 +3,8 @@ import { Transform } from "node:stream";
  * Value-AGNOSTIC secret patterns: each matches a SHAPE, not a known value.
  * Correctness must not depend on seeding the redactor with the literal
  * secret — the two real leaks this project hit were a database password that
- * survived a naive `sed` mask (as a substring) and an Anthropic key emitted by
- * `wrangler workflows describe` that the harness NEVER loaded. A value-seeded
+ * survived a naive `sed` mask (as a substring) and an Anthropic key surfaced in
+ * a deploy CLI's describe output that the harness NEVER loaded. A value-seeded
  * redactor is blind to both; these patterns catch them by form.
  *
  * Ordering matters: structured shapes (connection strings, auth headers, JWT)
@@ -42,7 +42,7 @@ const REDACTED = "[REDACTED]";
  * The candidate run deliberately EXCLUDES `_`: secrets are contiguous opaque
  * runs, whereas `SCREAMING_SNAKE_CASE` env names and `snake_case` identifiers
  * are `_`-separated words — excluding `_` breaks those into sub-24 fragments so
- * they are never eaten (the `CF_CONFORMANCE_PROBE_URL` false positive). The
+ * they are never eaten. The
  * class-diversity gate (≥2 of lower/upper/digit) then keeps the remaining
  * single-class runs (all-lowercase module paths like `internal/modules/esm`)
  * while still catching mixed-case/alnum secret blobs. Entropy alone cannot
@@ -55,7 +55,7 @@ const MIN_CHAR_CLASSES = 2;
  * A mixed-case run with no digit and < this length is treated as a benign
  * identifier, not a secret. Real opaque secrets are alnum-mixed (carry a
  * digit) or very long; digit-free camelCase identifiers like
- * `asyncRunEntryPointWithESMLoader` / `createDurableObjectNamespace` (which
+ * `asyncRunEntryPointWithESMLoader` / `getReadableStreamController` (which
  * appear in stack traces the diagnostic bundle captures) are 24–39 chars and
  * digit-free — eating them would gut debuggability. The length escape hatch
  * still catches the rare long digit-free secret.

package/dist/_contracts/side-effect-audit.d.ts

@@ -1,4 +1,4 @@
-import type { CredentialMode, RunProvider, RuntimeKind } from "./submission.js";
+import type { RunProvider } from "./submission.js";
 export declare const SIDE_EFFECT_AUDIT_SCHEMA_VERSION = 1;
 export declare const SIDE_EFFECT_AUDIT_REDACTION_SCANNER_VERSION = 1;
 export declare const SIDE_EFFECT_AUDIT_KIND = "aex.side_effect_audit.v1";
@@ -6,7 +6,7 @@ export declare const SIDE_EFFECT_AUDIT_ACTIONS: readonly ["run.submit.accepted",
 export type SideEffectAuditAction = (typeof SIDE_EFFECT_AUDIT_ACTIONS)[number];
 export declare const SIDE_EFFECT_AUDIT_ACTOR_PRINCIPAL_TYPES: readonly ["user", "api_token", "system", "runtime"];
 export type SideEffectAuditActorPrincipalType = (typeof SIDE_EFFECT_AUDIT_ACTOR_PRINCIPAL_TYPES)[number];
-export declare const SIDE_EFFECT_AUDIT_SOURCE_PLANES: readonly ["dashboard", "worker", "runtime", "system"];
+export declare const SIDE_EFFECT_AUDIT_SOURCE_PLANES: readonly ["dashboard", "api", "runtime", "system"];
 export type SideEffectAuditSourcePlane = (typeof SIDE_EFFECT_AUDIT_SOURCE_PLANES)[number];
 export declare const SIDE_EFFECT_AUDIT_AUTHENTICATION_KINDS: readonly ["dashboard_auth", "api_token", "runner_token", "system"];
 export type SideEffectAuditAuthenticationKind = (typeof SIDE_EFFECT_AUDIT_AUTHENTICATION_KINDS)[number];
@@ -56,8 +56,6 @@ export interface SideEffectAuditStatusMetadataV1 {
 }
 export interface SideEffectAuditDimensionsMetadataV1 {
     readonly provider?: RunProvider | string;
-    readonly runtime?: RuntimeKind | string;
-    readonly credentialMode?: CredentialMode;
     readonly namespace?: "metadata" | "events" | "logs" | "outputs" | "archive";
     readonly method?: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
     readonly surface?: string;

package/dist/_contracts/side-effect-audit.js

@@ -36,7 +36,7 @@ export const SIDE_EFFECT_AUDIT_ACTOR_PRINCIPAL_TYPES = [
 ];
 export const SIDE_EFFECT_AUDIT_SOURCE_PLANES = [
     "dashboard",
-    "worker",
+    "api",
     "runtime",
     "system"
 ];
@@ -306,11 +306,9 @@ function normalizeTimestamps(input) {
     return Object.freeze(out);
 }
 function normalizeDimensions(input) {
-    assertSupportedNestedKeys(input, ["provider", "runtime", "credentialMode", "namespace", "method", "surface"], "metadata.dimensions");
+    assertSupportedNestedKeys(input, ["provider", "namespace", "method", "surface"], "metadata.dimensions");
     return Object.freeze({
         ...(input.provider ? { provider: assertSafeMetadataString(input.provider, "metadata.dimensions.provider") } : {}),
-        ...(input.runtime ? { runtime: assertSafeMetadataString(input.runtime, "metadata.dimensions.runtime") } : {}),
-        ...(input.credentialMode ? { credentialMode: input.credentialMode } : {}),
         ...(input.namespace ? { namespace: input.namespace } : {}),
         ...(input.method ? { method: input.method } : {}),
         ...(input.surface ? { surface: assertSafeMetadataString(input.surface, "metadata.dimensions.surface") } : {})

package/dist/_contracts/status.d.ts

@@ -8,7 +8,7 @@ export declare function isTerminalRunStatus(status: RunStatus): boolean;
  * `markRunTerminal` (and that a `run/terminal` event carries). This is a
  * STRICT SUBSET of {@link TERMINAL_RUN_STATUSES}: the read-terminal set also
  * includes `cleanup_failed`, which the funnel never writes as an outcome.
- * The worker's `TerminalRunStatus` and the workflow `TerminalOutcome` both
+ * The platform lifecycle `TerminalRunStatus` and the workflow `TerminalOutcome` both
  * derive from this so the four call sites can't drift.
  */
 export declare const RUN_TERMINAL_OUTCOMES: readonly ["succeeded", "failed", "timed_out", "cancelled"];

package/dist/_contracts/status.js

@@ -32,7 +32,7 @@ export function isTerminalRunStatus(status) {
  * `markRunTerminal` (and that a `run/terminal` event carries). This is a
  * STRICT SUBSET of {@link TERMINAL_RUN_STATUSES}: the read-terminal set also
  * includes `cleanup_failed`, which the funnel never writes as an outcome.
- * The worker's `TerminalRunStatus` and the workflow `TerminalOutcome` both
+ * The platform lifecycle `TerminalRunStatus` and the workflow `TerminalOutcome` both
  * derive from this so the four call sites can't drift.
  */
 export const RUN_TERMINAL_OUTCOMES = [