@aexhq/sdk 0.33.0 → 0.34.0

package/README.md

@@ -10,8 +10,8 @@ The package ships:
 
 - `Aex` / `AgentExecutor` for sessions, one-shot runs, inspect, download, cancel, and delete.
 - `sessions` / `openSession()` for durable, resumable agent sessions.
-- Typed run primitives: `Models`, `Providers`, `RuntimeSizes`, `Skill`, `AgentsMd`, `File`, `McpServer`, `ProxyEndpoint`, and `Secret`.
-- A bundled `aex` CLI with the same run, status, events, outputs, download, cancel, delete, whoami, and skills operations.
+- Typed run primitives: `Models`, `Providers`, `Sizes`, `Tool` / `Tools` (skill-tools), `AgentsMd`, `File`, `McpServer`, `ProxyEndpoint`, and `Secret`.
+- A bundled `aex` CLI with the same run, status, events, outputs, download, cancel, delete, and whoami operations.
 
 ## Install
 
@@ -109,40 +109,32 @@ by default, machine JSON under `--json`):
 ```bash
 aex models list           # canonical models + their default provider
 aex providers list        # providers + the models each serves
-aex tools list            # builtin tools (default vs opt-in, e.g. notebook_edit)
+aex tools list            # complete builtin tool set
 aex runtime-sizes list    # managed runtime presets (cpus / memory / default)
 ```
 
-Errors are typed and actionable. Every `submit()` config-validation failure throws
-a `RunConfigValidationError` (`err.code === "RUN_CONFIG_INVALID"`) you can `catch`
-by code; CLI failures print a JSON envelope carrying the HTTP `status`, a one-line
-`remedy`, and the `runId` where known, and a wrong `--model`, `--provider`, or
-`--runtime-size` gets a "did you mean?" suggestion.
+Errors are typed and actionable. Every `openSession()` / `run()` config-validation
+failure throws a `RunConfigValidationError` (`err.code === "RUN_CONFIG_INVALID"`)
+you can `catch` by code; CLI failures print a JSON envelope carrying the HTTP
+`status`, a one-line `remedy`, and the `runId` where known, and a wrong `--model`,
+`--provider`, or `--runtime-size` gets a "did you mean?" suggestion.
 
-## Chat over a corpus of runs
+## Chat over a corpus of sessions
 
-Turn a selected set of runs into a read-only chat. `createCorpusTools(client, { runIds })`
-returns vendor-neutral, corpus-scoped read tools (`list_runs` / `get_run` /
-`list_outputs` / `read_output` / `search_outputs`) — every tool refuses a run
-outside the corpus. Drive them with any LLM; `examples/chat-corpus.ts` shows the
-direct-Claude loop (`@anthropic-ai/sdk`), and the CLI ships it as a one-shot
-command (BYOK; the importable SDK stays LLM-vendor-free):
+Turn a selected set of sessions into a read-only chat.
+`createCorpusTools(client, { sessionIds })` returns vendor-neutral, corpus-scoped
+read tools (`list_sessions` / `get_session` / `list_outputs` / `read_output` /
+`search_outputs`) — every tool refuses a session outside the corpus. Drive them
+with any LLM; `examples/chat-corpus.ts` shows the direct-Claude loop
+(`@anthropic-ai/sdk`) on top of the LLM-vendor-free SDK.
 
-```bash
-aex chat --run run_<A> --run run_<B> \
-  --anthropic-api-key "$ANTHROPIC_API_KEY" \
-  --model claude-opus-4-8 \
-  --prompt "Across these runs, which produced a report.md and what's its headline finding?" \
-  --api-token "$AEX_API_TOKEN"
-```
-
-`AgentExecutor.searchOutputs({ runIds, filename, extension, contentType, limit })`
-finds output files across runs and returns references (no bytes) you then
-`readOutputText`.
+`aex.sessions.searchOutputs({ runIds, filename, extension, contentType, limit })`
+finds output files across sessions (scope with the `runIds` session-id allow-list)
+and returns references (no bytes) you then read with `aex.sessions.outputs(id).read(...)`.
 
 ## Feature Areas
 
-- **Agent runtime:** managed autonomous runs with filesystem read/edit, grep/glob/head/tail, open web fetch/search defaults, and optional notebook tools.
+- **Agent runtime:** managed autonomous runs with filesystem read/edit, grep/glob/head/tail, open web fetch/search, background commands, code execution, git, and subagents.
 - **Durable infrastructure:** run records, status, wait/cancel/delete, idempotency, typed events, output capture, downloads, timeouts, and runtime sizes.
 - **Agent composition:** skills, files, AGENTS.md, remote MCP servers, proxy endpoints, environment variables, packages, and networking controls.
 - **Subagents:** typed parent/child lineage for async child runs, output handoff, and bounded agent delegation.

package/dist/_contracts/operations.d.ts

@@ -1,6 +1,6 @@
 import type { HttpClient } from "./http.js";
 import type { RunUnit } from "./run-unit.js";
-import type { AgentsMdRecord, FileRecord, Output, OutputLink, OutputLinkOptions, OutputFileDownload, OutputFileSelector, OutputFileType, OutputQuery, OutputText, ReadOutputTextOptions, Run, RunEvent, RunListPage, RunListQuery, Session, SessionCreateRequest, SessionEvent, SessionListPage, SessionListQuery, SessionMessageAccepted, SessionMessageRequest, SessionStateChangeAccepted, RunWebhookDelivery, SecretRecord, SecretReveal, Skill, WhoAmI } from "./runtime-types.js";
+import type { AgentsMdRecord, FileRecord, Output, OutputLink, OutputLinkOptions, OutputFileDownload, OutputFileSelector, OutputFileType, OutputQuery, OutputText, ReadOutputTextOptions, Run, RunEvent, RunListPage, RunListQuery, Session, SessionCreateRequest, SessionEvent, SessionListPage, SessionListQuery, SessionMessageAccepted, SessionMessageRequest, SessionStateChangeAccepted, RunWebhookDelivery, SecretRecord, SecretReveal, WhoAmI } from "./runtime-types.js";
 import type { PlatformRunSubmissionInput } from "./submission.js";
 /**
  * The single source of truth for SDK<->BFF transport. The SDK class
@@ -18,8 +18,7 @@ export declare function getRun(http: HttpClient, runId: string): Promise<Run>;
  * Strongly-typed accessor for the full self-contained run unit:
  * parsed submission inputs, attempts, indexed events (with
  * pagination cursor for large runs), raw-event Storage manifest,
- * outputs, capture failures, proxy-call audit, pinned skills,
- * provider skills, inline skills.
+ * outputs, capture failures, and the proxy-call audit.
  *
  * Backed by the same `GET /api/runs/:runId` endpoint that
  * `getRun` calls; this variant just narrows the return type to
@@ -146,57 +145,6 @@ export declare function downloadEvents(http: HttpClient, runId: string): Promise
  */
 export declare function downloadMetadata(http: HttpClient, runId: string): Promise<Uint8Array>;
 export declare function submitRun(http: HttpClient, request: PlatformRunSubmissionInput): Promise<Run>;
-/**
- * Upload a workspace skill bundle DIRECTLY to object storage via the presign
- * flow, so the bytes never transit the hosted API (bundle size bounded by the
- * object store, not API memory). Presign errors are terminal.
- *
- *   1. POST /api/skills/presign     { name, hash, sizeBytes } → { uploadUrl, requiredHeaders, skillId }
- *   2. PUT bytes → uploadUrl        (signed checksum; the store rejects a mismatch)
- *   3. POST /api/skills/:id/finalize { manifest } → finalized Skill
- *
- * `manifest` is the client-computed bundle manifest (the caller already
- * validated the zip shape before hashing); the hosted API records it on finalize
- * without re-buffering the object.
- */
-export declare function createSkillBundleDirect(http: HttpClient, fetchImpl: (input: string, init?: RequestInit) => Promise<{
-    ok: boolean;
-    status: number;
-    text(): Promise<string>;
-}>, args: {
-    readonly name: string;
-    readonly body: Uint8Array;
-    readonly contentHash: string;
-    readonly manifest: ReadonlyArray<{
-        readonly path: string;
-        readonly size: number;
-        readonly mode?: number;
-    }>;
-    readonly contentType?: string;
-}): Promise<Skill>;
-export declare function listSkills(http: HttpClient): Promise<readonly Skill[]>;
-export declare function getSkill(http: HttpClient, skillId: string): Promise<Skill>;
-export declare function deleteSkill(http: HttpClient, skillId: string): Promise<void>;
-/**
- * Lookup a live workspace skill by `(name, contentHash)`. Returns the
- * matching `Skill` record or null when no live row carries that hash.
- *
- * `contentHash` is the wire format `sha256:<hex>` as returned by
- * `hashSkillBundle`. This powers `Skill.uploadIfChanged` — the SDK
- * computes the hash locally and calls this function to skip the upload
- * when the bytes already exist.
- */
-export declare function findSkillByHash(http: HttpClient, args: {
-    readonly name: string;
-    readonly contentHash: string;
-}): Promise<Skill | null>;
-/**
- * Lookup a live workspace skill by `name`. Returns the matching `Skill`
- * record or null when no live row carries that name. Implemented as a
- * list-and-filter on the existing `/api/skills` endpoint — the
- * indexed by-hash route is reserved for `uploadIfChanged`.
- */
-export declare function findSkillByName(http: HttpClient, name: string): Promise<Skill | null>;
 export declare function listAgentsMd(http: HttpClient): Promise<readonly AgentsMdRecord[]>;
 export declare function getAgentsMd(http: HttpClient, agentsMdId: string): Promise<AgentsMdRecord>;
 export declare function deleteAgentsMd(http: HttpClient, agentsMdId: string): Promise<void>;

package/dist/_contracts/operations.js

@@ -20,8 +20,7 @@ export async function getRun(http, runId) {
  * Strongly-typed accessor for the full self-contained run unit:
  * parsed submission inputs, attempts, indexed events (with
  * pagination cursor for large runs), raw-event Storage manifest,
- * outputs, capture failures, proxy-call audit, pinned skills,
- * provider skills, inline skills.
+ * outputs, capture failures, and the proxy-call audit.
  *
  * Backed by the same `GET /api/runs/:runId` endpoint that
  * `getRun` calls; this variant just narrows the return type to
@@ -693,7 +692,7 @@ function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 // ===========================================================================
-// Run submission operations (Skill / McpServer / run config composition)
+// Run submission operations (McpServer / run config composition)
 // ===========================================================================
 export async function submitRun(http, request) {
     return http.request("/api/runs", {
@@ -701,84 +700,6 @@ export async function submitRun(http, request) {
         body: JSON.stringify(request)
     });
 }
-/**
- * Upload a workspace skill bundle DIRECTLY to object storage via the presign
- * flow, so the bytes never transit the hosted API (bundle size bounded by the
- * object store, not API memory). Presign errors are terminal.
- *
- *   1. POST /api/skills/presign     { name, hash, sizeBytes } → { uploadUrl, requiredHeaders, skillId }
- *   2. PUT bytes → uploadUrl        (signed checksum; the store rejects a mismatch)
- *   3. POST /api/skills/:id/finalize { manifest } → finalized Skill
- *
- * `manifest` is the client-computed bundle manifest (the caller already
- * validated the zip shape before hashing); the hosted API records it on finalize
- * without re-buffering the object.
- */
-export async function createSkillBundleDirect(http, fetchImpl, args) {
-    const presign = await http.request("/api/skills/presign", {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ name: args.name, hash: args.contentHash, sizeBytes: args.body.byteLength })
-    });
-    const putRes = await fetchImpl(presign.uploadUrl, {
-        method: "PUT",
-        headers: { "content-type": args.contentType ?? "application/zip", ...(presign.requiredHeaders ?? {}) },
-        body: args.body
-    });
-    if (!putRes.ok) {
-        const detail = await putRes.text().catch(() => "");
-        throw new Error(`createSkillBundleDirect: direct upload PUT failed (status ${putRes.status})${detail ? `: ${detail.slice(0, 500)}` : ""}`);
-    }
-    const result = await http.request(`/api/skills/${encodeURIComponent(presign.skillId)}/finalize`, {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ manifest: args.manifest })
-    });
-    return unwrapSkill(result);
-}
-export async function listSkills(http) {
-    const result = await http.request("/api/skills");
-    if (Array.isArray(result)) {
-        return result;
-    }
-    return result.skills;
-}
-export async function getSkill(http, skillId) {
-    const result = await http.request(`/api/skills/${encodeURIComponent(skillId)}`);
-    return unwrapSkill(result);
-}
-export async function deleteSkill(http, skillId) {
-    await http.request(`/api/skills/${encodeURIComponent(skillId)}`, {
-        method: "DELETE"
-    });
-}
-/**
- * Lookup a live workspace skill by `(name, contentHash)`. Returns the
- * matching `Skill` record or null when no live row carries that hash.
- *
- * `contentHash` is the wire format `sha256:<hex>` as returned by
- * `hashSkillBundle`. This powers `Skill.uploadIfChanged` — the SDK
- * computes the hash locally and calls this function to skip the upload
- * when the bytes already exist.
- */
-export async function findSkillByHash(http, args) {
-    const params = new URLSearchParams({
-        name: args.name,
-        content_hash: args.contentHash
-    });
-    const result = await http.request(`/api/skills/by-hash?${params.toString()}`);
-    return result.skill ?? null;
-}
-/**
- * Lookup a live workspace skill by `name`. Returns the matching `Skill`
- * record or null when no live row carries that name. Implemented as a
- * list-and-filter on the existing `/api/skills` endpoint — the
- * indexed by-hash route is reserved for `uploadIfChanged`.
- */
-export async function findSkillByName(http, name) {
-    const skills = await listSkills(http);
-    return skills.find((skill) => skill.name === name) ?? null;
-}
 // ===========================================================================
 // AgentsMd read/delete helpers. Launch submissions use content-addressed asset refs.
 // ===========================================================================
@@ -879,12 +800,6 @@ function unwrapSecret(result) {
     }
     return result;
 }
-function unwrapSkill(result) {
-    if (result && typeof result === "object" && "skill" in result) {
-        return result.skill;
-    }
-    return result;
-}
 function hasRun(value) {
     return Boolean(value && typeof value === "object" && "run" in value);
 }

package/dist/_contracts/run-config.d.ts

@@ -3,9 +3,11 @@
  *
  * Public composition concepts:
  *
- *   - `SkillRef` is the wire-level reference to a skill. Public run
- *     configs use storage-neutral `kind:"asset"` refs produced by the SDK
- *     upload path or by workspace catalog records.
+ *   - `SkillToolRef` is the wire-level reference to a skill, re-expressed as a
+ *     synthetic no-arg "load-tool" the model calls to pull in the skill's
+ *     `SKILL.md` body. It carries the uploaded bundle's `assetId` (produced by
+ *     the SDK upload path) plus the tool `name` + `description`, and travels in
+ *     `submission.tools`.
  *
  *   - `McpServerRef` is the non-secret part of an MCP server declaration:
  *     `name` and `url`. Bearer / cookie / per-request headers travel in
@@ -79,7 +81,18 @@ export declare const SKILL_BUNDLE_LIMITS: {
     /** Stored directory mode. */
     readonly defaultDirMode: 493;
 };
-export type SkillRef = AssetRef;
+/**
+ * A skill re-expressed as a TOOL. The model calls this no-arg load-tool to pull
+ * the skill's `SKILL.md` body into context; the bundle's files are eagerly
+ * staged to `/workspace/skills/<name>/`. It travels in `submission.tools`
+ * alongside builtin names and custom {@link ToolRef}s.
+ */
+export interface SkillToolRef {
+    readonly kind: "skill";
+    readonly assetId: string;
+    readonly name: string;
+    readonly description: string;
+}
 /**
  * Storage-neutral uploaded asset reference. Runtime materialization resolves
  * `assetId` privately; public callers never name object-store paths.
@@ -109,7 +122,7 @@ export interface ToolRef extends AssetRef {
 }
 /** Content-hash format: `sha256:<64 lowercase hex>`. */
 export declare const INLINE_CONTENT_HASH_PATTERN: RegExp;
-export declare function isAssetRef(ref: SkillRef | AgentsMdRef | FileRef): ref is AssetRef;
+export declare function isAssetRef(ref: AgentsMdRef | FileRef): ref is AssetRef;
 /**
  * Asset ids are storage-neutral product ids. Current uploads derive the id from
  * the content digest (`asset_<sha256hex>`), but callers must treat it as opaque.
@@ -143,12 +156,7 @@ export declare const MOUNT_PATH_MAX_LENGTH = 512;
  */
 export declare function assertValidMountPath(value: string, field: string): void;
 /**
- * Parse a `SkillRef` from untrusted input. Only asset-backed skill refs are
- * accepted on the public surface.
- */
-export declare function parseSkillRef(input: unknown, path: string): SkillRef;
-/**
- * Common parser for any `kind: "asset"` ref (skill / agentsMd / file).
+ * Common parser for any `kind: "asset"` ref (agentsMd / file / tool bundle).
  */
 export declare function parseAssetRefFields(record: Record<string, unknown>, path: string): AssetRef;
 /**
@@ -291,7 +299,6 @@ export interface RunRequestConfig {
     readonly model: RunModel;
     readonly system?: string;
     readonly prompt: string | readonly string[];
-    readonly skills?: readonly SkillRef[];
     readonly mcpServers?: readonly RunConfigMcpServer[];
     readonly environment?: PlatformEnvironment;
     /** Managed runtime size preset (see {@link RuntimeSize}). */
@@ -322,7 +329,6 @@ export interface NormalisedRunRequestConfig {
     readonly model: RunModel;
     readonly system?: string;
     readonly prompt: readonly string[];
-    readonly skills: readonly SkillRef[];
     readonly mcpServers: readonly McpServerRef[];
     readonly environment?: PlatformEnvironment;
     readonly proxyEndpoints?: readonly PlatformProxyEndpoint[];

package/dist/_contracts/run-config.js

@@ -3,9 +3,11 @@
  *
  * Public composition concepts:
  *
- *   - `SkillRef` is the wire-level reference to a skill. Public run
- *     configs use storage-neutral `kind:"asset"` refs produced by the SDK
- *     upload path or by workspace catalog records.
+ *   - `SkillToolRef` is the wire-level reference to a skill, re-expressed as a
+ *     synthetic no-arg "load-tool" the model calls to pull in the skill's
+ *     `SKILL.md` body. It carries the uploaded bundle's `assetId` (produced by
+ *     the SDK upload path) plus the tool `name` + `description`, and travels in
+ *     `submission.tools`.
  *
  *   - `McpServerRef` is the non-secret part of an MCP server declaration:
  *     `name` and `url`. Bearer / cookie / per-request headers travel in
@@ -139,22 +141,7 @@ export function assertValidMountPath(value, field) {
     }
 }
 /**
- * Parse a `SkillRef` from untrusted input. Only asset-backed skill refs are
- * accepted on the public surface.
- */
-export function parseSkillRef(input, path) {
-    if (input === null || typeof input !== "object" || Array.isArray(input)) {
-        throw new Error(`${path} must be a SkillRef object`);
-    }
-    const record = input;
-    const kind = record.kind;
-    if (kind === "asset") {
-        return parseAssetRefFields(record, path);
-    }
-    throw new Error(`${path}.kind must be 'asset'`);
-}
-/**
- * Common parser for any `kind: "asset"` ref (skill / agentsMd / file).
+ * Common parser for any `kind: "asset"` ref (agentsMd / file / tool bundle).
  */
 export function parseAssetRefFields(record, path) {
     for (const key of Object.keys(record)) {
@@ -611,7 +598,6 @@ export function parseRunRequestConfig(input) {
         "model",
         "system",
         "prompt",
-        "skills",
         "mcpServers",
         "environment",
         "runtimeSize",
@@ -630,13 +616,11 @@ export function parseRunRequestConfig(input) {
         throw new Error("run request config system, when provided, must be a string");
     }
     const prompt = parseRunRequestConfigPrompt(record.prompt);
-    const skills = parseRunRequestConfigSkills(record.skills);
     const mcpServers = parseRunRequestConfigMcpServers(record.mcpServers);
     return {
         model,
         ...(system !== undefined ? { system } : {}),
         prompt,
-        ...(skills !== undefined ? { skills } : {}),
         ...(mcpServers !== undefined ? { mcpServers } : {}),
         // environment / proxyEndpoints / metadata: passed through
         // as-is — the BFF revalidates them via `parseRunSubmissionRequest`,
@@ -682,15 +666,6 @@ function parseRunRequestConfigPrompt(value) {
     }
     throw new Error("run request config prompt must be a string or array of strings");
 }
-function parseRunRequestConfigSkills(value) {
-    if (value === undefined) {
-        return undefined;
-    }
-    if (!Array.isArray(value)) {
-        throw new Error("run request config skills must be an array");
-    }
-    return value.map((item, index) => parseSkillRef(item, `run request config skills[${index}]`));
-}
 function parseRunRequestConfigMcpServers(value) {
     if (value === undefined) {
         return undefined;
@@ -710,7 +685,6 @@ function parseRunRequestConfigMcpServers(value) {
 }
 export function normaliseRunRequestConfig(config) {
     const prompt = typeof config.prompt === "string" ? [config.prompt] : config.prompt;
-    const skills = config.skills ?? [];
     const mcpServers = [];
     const mcpServerSecrets = [];
     for (const entry of config.mcpServers ?? []) {
@@ -723,7 +697,6 @@ export function normaliseRunRequestConfig(config) {
         model: config.model,
         ...(config.system !== undefined ? { system: config.system } : {}),
         prompt,
-        skills,
         mcpServers,
         ...(config.environment !== undefined ? { environment: config.environment } : {}),
         ...(config.proxyEndpoints !== undefined ? { proxyEndpoints: config.proxyEndpoints } : {}),

package/dist/_contracts/run-unit.d.ts

@@ -4,8 +4,7 @@
  * One canonical struct that captures every non-secret artifact persisted
  * for a single run: parsed submission inputs, status/lifecycle, attempts,
  * indexed events, raw-event Storage manifest, outputs (+ capture
- * failures), proxy-call audit log, pinned workspace skills, provider
- * built-in skills, and transient (Anthropic Files) skill records.
+ * failures), and the proxy-call audit log.
  *
  * Wire contract for `GET /api/runs/:runId`, the per-run archive's
  * `run.json`/`submission.json`/`caps.json`, and the SDK/CLI
@@ -118,34 +117,6 @@ export interface RunUnitProxyCallPage {
     readonly truncated: boolean;
     readonly nextCursor?: string;
 }
-/**
- * Workspace skill bundle pinned at submission. `liveSkillId` is `null`
- * when the corresponding `skill_bundles` row no longer exists after a
- * hard delete; run snapshots keep the submitted metadata.
- */
-export interface RunUnitSkillSnapshot {
-    readonly skillId: string;
-    readonly name: string;
-    readonly hash: string;
-    readonly sizeBytes: number;
-    readonly fileCount: number;
-    readonly liveSkillId: string | null;
-}
-export interface RunUnitProviderSkill {
-    readonly vendor: string;
-    readonly skillId: string;
-    readonly version?: string;
-}
-export interface RunUnitInlineSkill {
-    readonly id: string;
-    readonly slotId: string;
-    readonly skillName: string;
-    readonly contentHash: string;
-    readonly anthropicFileId: string | null;
-    readonly status: string;
-    readonly createdAt: string;
-    readonly updatedAt: string;
-}
 export interface RunUnit {
     readonly id: string;
     readonly workspaceId: string;
@@ -168,9 +139,6 @@ export interface RunUnit {
     readonly outputCaptureFailures: readonly RunUnitOutputCaptureFailure[];
     readonly costTelemetry?: import("./run-cost.js").RunCostTelemetry;
     readonly proxyCalls: RunUnitProxyCallPage;
-    readonly skillSnapshots: readonly RunUnitSkillSnapshot[];
-    readonly providerSkills: readonly RunUnitProviderSkill[];
-    readonly inlineSkills: readonly RunUnitInlineSkill[];
     /**
      * Per-run, per-provider runtime manifest — derived from the validated
      * submission + the chosen provider (`buildRuntimeManifest`). Tells

package/dist/_contracts/run-unit.js

@@ -4,8 +4,7 @@
  * One canonical struct that captures every non-secret artifact persisted
  * for a single run: parsed submission inputs, status/lifecycle, attempts,
  * indexed events, raw-event Storage manifest, outputs (+ capture
- * failures), proxy-call audit log, pinned workspace skills, provider
- * built-in skills, and transient (Anthropic Files) skill records.
+ * failures), and the proxy-call audit log.
  *
  * Wire contract for `GET /api/runs/:runId`, the per-run archive's
  * `run.json`/`submission.json`/`caps.json`, and the SDK/CLI
@@ -19,7 +18,7 @@
  * `rawEventPages` (manifest only; bytes downloaded out-of-band so the
  * detail response stays bounded). The archive zip carries the bytes.
  */
-import { parseMcpServerRef, parseSkillRef } from "./run-config.js";
+import { parseMcpServerRef } from "./run-config.js";
 import { Models, parseRunModel } from "./models.js";
 import { PLATFORM_PACKAGE_ECOSYSTEMS } from "./submission.js";
 // ---------------------------------------------------------------------------
@@ -60,7 +59,6 @@ function parseFlatProjection(value) {
         model: coerceRunUnitModel(submissionRaw.model),
         ...(typeof submissionRaw.system === "string" ? { system: submissionRaw.system } : {}),
         prompt: toStringArray(submissionRaw.prompt),
-        skills: toSkillRefArray(submissionRaw.skills),
         agentsMd: [],
         files: [],
         mcpServers: toMcpServerRefArray(submissionRaw.mcpServers),
@@ -107,7 +105,6 @@ function fallbackFlat() {
         submission: {
             model: Models.CLAUDE_HAIKU_4_5,
             prompt: [],
-            skills: [],
             agentsMd: [],
             files: [],
             mcpServers: [],
@@ -149,22 +146,6 @@ function toOptionalStringArray(value) {
     const filtered = value.filter((item) => typeof item === "string");
     return filtered.length === 0 ? undefined : filtered;
 }
-function toSkillRefArray(value) {
-    if (!Array.isArray(value)) {
-        return [];
-    }
-    const out = [];
-    for (let i = 0; i < value.length; i++) {
-        try {
-            out.push(parseSkillRef(value[i], `submission.skills[${i}]`));
-        }
-        catch {
-            // Skip malformed entries rather than failing the whole detail
-            // read. Hosted API enrichment may add fields we don't recognise.
-        }
-    }
-    return out;
-}
 function toMcpServerRefArray(value) {
     if (!Array.isArray(value)) {
         return [];

package/dist/_contracts/runtime-sizes.d.ts

@@ -47,8 +47,8 @@ export declare const RUNTIME_SIZES: readonly RuntimeSize[];
 /** Default when `runtimeSize` is omitted (the 1 GB tier). */
 export declare const DEFAULT_RUNTIME_SIZE: RuntimeSize;
 /**
- * Symbol-style accessors for TS callers. `RuntimeSizes.SHARED_2X_8GB`
- * resolves to the wire token `"shared-2x-8gb"`.
+ * Symbol-style accessors for TS callers: the `SHARED_2X_8GB` member resolves to
+ * the wire token `"shared-2x-8gb"`. Re-exported by the SDK as `Sizes`.
  */
 export declare const RuntimeSizes: {
     readonly SHARED_0_06X_256MB: "shared-0.06x-256mb";

package/dist/_contracts/runtime-sizes.js

@@ -23,8 +23,8 @@ export const RUNTIME_SIZES = Object.keys(RUNTIME_SIZE_PRESETS);
 /** Default when `runtimeSize` is omitted (the 1 GB tier). */
 export const DEFAULT_RUNTIME_SIZE = "shared-0.25x-1gb";
 /**
- * Symbol-style accessors for TS callers. `RuntimeSizes.SHARED_2X_8GB`
- * resolves to the wire token `"shared-2x-8gb"`.
+ * Symbol-style accessors for TS callers: the `SHARED_2X_8GB` member resolves to
+ * the wire token `"shared-2x-8gb"`. Re-exported by the SDK as `Sizes`.
  */
 export const RuntimeSizes = {
     SHARED_0_06X_256MB: "shared-0.06x-256mb",

package/dist/_contracts/status.d.ts

@@ -1,9 +1,9 @@
 export declare const RUN_STATUSES: readonly ["queued", "claiming", "provisioning", "session_created", "dispatched", "provider_running", "provider_idle", "provider_rescheduled", "idle", "suspending", "suspended", "deleting", "deleted", "expired", "cancelling", "capturing_outputs", "cleaning_up", "succeeded", "failed", "timed_out", "cancelled", "cleanup_failed"];
 export type RunStatus = typeof RUN_STATUSES[number];
-export declare const SESSION_STATUSES: readonly ["creating", "running", "idle", "suspending", "suspended", "cancelling", "deleting", "deleted", "error"];
+export declare const SESSION_STATUSES: readonly ["creating", "running", "idle", "suspending", "suspended", "cancelling", "deleting", "deleted", "expired", "error"];
 export type SessionStatus = typeof SESSION_STATUSES[number];
 export type RunStatusKind = "active" | "terminal";
-export declare const TERMINAL_RUN_STATUSES: readonly ["succeeded", "failed", "timed_out", "cancelled", "cleanup_failed"];
+export declare const TERMINAL_RUN_STATUSES: readonly ["succeeded", "failed", "timed_out", "cancelled", "deleted", "expired", "cleanup_failed"];
 export declare function isTerminalRunStatus(status: RunStatus): boolean;
 /**
  * The closed set of terminal OUTCOMES the run-lifecycle funnel writes via

package/dist/_contracts/status.js

@@ -31,6 +31,7 @@ export const SESSION_STATUSES = [
     "cancelling",
     "deleting",
     "deleted",
+    "expired",
     "error"
 ];
 export const TERMINAL_RUN_STATUSES = [
@@ -38,6 +39,8 @@ export const TERMINAL_RUN_STATUSES = [
     "failed",
     "timed_out",
     "cancelled",
+    "deleted",
+    "expired",
     "cleanup_failed"
 ];
 const terminalRunStatuses = new Set(TERMINAL_RUN_STATUSES);