@aexhq/sdk 0.35.0 → 0.36.0

package/dist/client.d.ts

@@ -1,16 +1,17 @@
-import { HttpClient, SecretString, type AexEvent, type AgentsMdRecord, type AssistantTextEntry, type DebugSink, type FetchLike, type FileRecord, type Output, type OutputFileType, type OutputLink, type OutputLinkOptions, type OutputQuery, type OutputText, type OutputMode, type ReadOutputTextOptions, type OutputSearchQuery, type OutputSearchPage, type Session, type SessionCreateRequest, type SessionEvent, type SessionListPage, type SessionListQuery, type SessionStateChangeAccepted, type SessionTurn, type PlatformEnvironmentInput, type PlatformSubmission, type PlatformProxyEndpoint, type PlatformProxyEndpointAuth, type Run, type RunModel, type RunEvent, type RunTrace, type UsageSummary, type RunWebhookDelivery, type RunProvider, type SecretRecord, type RunUnit, type BuiltinToolName, type RuntimeSize, type WebSocketFactory, type WhoAmI } from "./_contracts/index.js";
+import { HttpClient, SecretString, type AexEvent, type AgentsMdRecord, type DebugSink, type FetchLike, type FileRecord, type Output, type OutputFileType, type OutputLink, type OutputLinkOptions, type OutputQuery, type OutputText, type OutputMode, type ReadOutputTextOptions, type OutputSearchQuery, type OutputSearchPage, type Session, type SessionCreateRequest, type SessionEvent, type SessionListPage, type SessionListQuery, type SessionMessage, type SessionStateChangeAccepted, type SessionTurn, type PlatformEnvironmentInput, type PlatformSubmission, type Run, type RunModel, type RunEvent, type RunTrace, type UsageSummary, type RunWebhookDelivery, type RunProvider, type SecretRecord, type RunUnit, type BuiltinToolName, type RuntimeSize, type WebSocketFactory, type WhoAmI } from "./_contracts/index.js";
 import { AgentsMd } from "./agents-md.js";
 import { type UploadedAsset } from "./asset-upload.js";
 import { File } from "./file.js";
 import { McpServer } from "./mcp-server.js";
-import { ProxyEndpoint } from "./proxy-endpoint.js";
 import { type RetryOptions } from "./retry.js";
 import { Secret } from "./secret.js";
 import { SkillTool } from "./skill-tool.js";
 import { Tool } from "./tool.js";
-export interface AgentExecutorOptions {
+export interface AexOptions {
     /** Workspace-scoped SDK API token. */
-    readonly apiToken: string;
+    readonly apiKey?: string;
+    /** @deprecated Use `apiKey`; kept as a source-compatible alias during launch. */
+    readonly apiToken?: string;
     /**
      * API plane root, e.g. `https://aex.example.com`. Optional —
      * defaults to the canonical hosted URL (`https://api.aex.dev`).
@@ -37,7 +38,7 @@ export interface AgentExecutorOptions {
     readonly retry?: RetryOptions | false;
 }
 /**
- * The settle-consistent result of {@link AgentExecutor.run}:
+ * The settle-consistent result of {@link Aex.run}:
  * the one-shot session record plus its events, decoded trace, assistant text,
  * and captured outputs — everything a "do it and give me the result" caller
  * needs without hand-rolling a session/message/stream loop.
@@ -57,6 +58,8 @@ export interface RunResult {
     readonly ok: boolean;
     /** The assistant's final text. */
     readonly text: string;
+    /** Assistant messages projected from the settled event stream. */
+    readonly messages: readonly Message[];
     /** The session turn event stream. */
     readonly events: readonly RunEvent[];
     /** Decoded view of the events: tool calls + usage + assistant text. */
@@ -70,7 +73,7 @@ export interface RunResult {
     /** The run's error message when `!ok`. */
     readonly error?: string;
 }
-/** Options for {@link AgentExecutor.run}. */
+/** Options for {@link Aex.run}. */
 export interface RunCollectOptions {
     /** Overall wait budget (ms) for the one-shot session turn to park. */
     readonly timeoutMs?: number;
@@ -102,9 +105,8 @@ export interface SessionOverrides {
  *   - `agentsMd` / `files` — local composition instances
  *     (`AgentsMd.fromContent` / `File.fromBytes`, …), materialized to the
  *     hosted asset store before the session lands.
- *   - `mcpServers` / `proxyEndpoints` — instances whose secrets are split into
- *     the vaulted secrets channel server-side; the public submission carries
- *     only the declarations.
+ *   - `mcpServers` — instances whose secrets are split into the vaulted secrets
+ *     channel server-side; the public submission carries only the declarations.
  *   - `apiKeys` — the BYOK provider key(s), keyed by provider. A key for the
  *     selected provider is REQUIRED. The platform never holds a long-lived
  *     provider key on your behalf.
@@ -158,7 +160,6 @@ export interface SessionCreateOptions {
     readonly outputMode?: OutputMode;
     readonly metadata?: PlatformSubmission["metadata"];
     readonly idempotencyKey?: string;
-    readonly proxyEndpoints?: readonly ProxyEndpoint[];
     /** BYOK provider key(s), keyed by provider. */
     readonly apiKeys?: Partial<Record<RunProvider, string>>;
     readonly environment?: SessionEnvironmentOptions;
@@ -199,6 +200,7 @@ export interface SessionTurnResult {
     readonly text: string;
     readonly events: readonly SessionEvent[];
     readonly outputs: readonly Output[];
+    readonly messages: readonly Message[];
 }
 export interface SessionRunResult extends SessionTurnResult {
 }
@@ -208,14 +210,18 @@ export declare class SessionTurnStream implements AsyncIterable<SessionEvent> {
     [Symbol.asyncIterator](): AsyncIterator<SessionEvent>;
     done(): Promise<SessionTurnResult>;
 }
+type CallableSessionMessages = SessionMessages & (() => SessionMessages);
+export type Message = SessionMessage;
 /**
- * Accessor over the session's decoded assistant messages. `session.messages()`
- * returns this synchronously; each method fetches on call.
+ * Accessor over the session's assistant messages. `session.messages` returns
+ * this synchronously; each method fetches on call.
  */
 export interface SessionMessages {
-    list(): Promise<readonly AssistantTextEntry[]>;
-    last(): Promise<AssistantTextEntry | undefined>;
-    first(): Promise<AssistantTextEntry | undefined>;
+    all(): Promise<readonly Message[]>;
+    /** Compatibility alias for {@link SessionMessages.all}. */
+    list(): Promise<readonly Message[]>;
+    last(): Promise<Message | undefined>;
+    first(): Promise<Message | undefined>;
 }
 /**
  * Accessor over the session's event stream (`session.events()`): the buffered
@@ -274,11 +280,12 @@ export declare class SessionHandle {
     resume(options?: Pick<SessionSendOptions, "idempotencyKey">): Promise<SessionStateChangeAccepted>;
     delete(options?: Pick<SessionSendOptions, "idempotencyKey">): Promise<void>;
     /**
-     * Accessor for the session's decoded assistant messages (buffered output
-     * mode: one entry per assistant message). `list()` returns them oldest-first;
-     * `last()`/`first()` return a single entry or `undefined` when empty.
+     * Accessor for the session's assistant messages. `all()` returns them
+     * oldest-first; `last()`/`first()` return a single entry or `undefined` when
+     * empty. The accessor is callable as a compatibility shim for older
+     * `session.messages().list()` callers.
      */
-    messages(): SessionMessages;
+    get messages(): CallableSessionMessages;
     /**
      * Accessor for the session's event stream: the buffered `SessionEvent`
      * snapshots (`list`/`last`/`first`), the polling `RunEvent` iterator
@@ -473,13 +480,14 @@ export declare class SecretsClient {
  * `client.whoami()` if you want to introspect which workspace the
  * token resolves to.
  */
-export declare class AgentExecutor {
+export declare class Aex {
     #private;
     readonly agentsMd: AgentsMdClient;
     readonly files: FilesClient;
     readonly secrets: SecretsClient;
     readonly sessions: SessionClient;
-    constructor(options: AgentExecutorOptions);
+    constructor(apiKey: string, options?: Omit<AexOptions, "apiKey" | "apiToken">);
+    constructor(options: AexOptions);
     /**
      * Internal: satisfies the `SecretUploader` surface so a
      * `Secret.value(...).upload(client, { name })` promotes an ephemeral secret
@@ -522,7 +530,4 @@ export declare class AgentExecutor {
     deleteWorkspaceAsset(hash: string): Promise<void>;
     whoami(): Promise<WhoAmI>;
 }
-/** Canonical SDK client name. `AgentExecutor` remains as a compatibility alias. */
-export declare class Aex extends AgentExecutor {
-}
-export type { OutputFileType, OutputLink, OutputLinkOptions, OutputQuery, PlatformProxyEndpoint, PlatformProxyEndpointAuth };
+export type { OutputFileType, OutputLink, OutputLinkOptions, OutputQuery };

package/dist/client.js

@@ -1,9 +1,8 @@
-import { AexError, DEFAULT_RUN_PROVIDER, HttpClient, RunConfigValidationError, RunStateError, SecretString, customName, isRunSettled, operations, providersForModel, streamCoordinatorEvents, decodeAssistantText, summarizeRunTrace, textOf, parseRunLimits, BUILTIN_TOOL_NAMES, TERMINAL_RUN_STATUSES } from "./_contracts/index.js";
+import { AexApiError, AexError, DEFAULT_RUN_PROVIDER, HttpClient, RunConfigValidationError, RunStateError, SecretString, customName, isRunSettled, operations, providersForModel, streamCoordinatorEvents, parseRunLimits, BUILTIN_TOOL_NAMES, TERMINAL_RUN_STATUSES } from "./_contracts/index.js";
 import { AgentsMd } from "./agents-md.js";
 import { uploadAsset } from "./asset-upload.js";
 import { File } from "./file.js";
 import { McpServer } from "./mcp-server.js";
-import { splitProxyEndpoints } from "./proxy-endpoint.js";
 import { AexRateLimitError, isThrottleFault, parseProviderFault, withRetry } from "./retry.js";
 import { splitSecretEnv } from "./secret.js";
 import { SkillTool } from "./skill-tool.js";
@@ -95,14 +94,16 @@ export class SessionHandle {
         const readSession = await operations.getSession(this.#http, this.id).catch(() => this.#session);
         this.#session = withTerminalSessionStatus(readSession, terminalStatus);
         const outputs = await operations.listSessionOutputs(this.#http, this.id).catch(() => []);
+        const messages = projectAssistantMessages(events);
         return {
             sessionId: this.id,
             session: this.#session,
             turn,
             status: this.#session.status,
-            text: textOf(events),
+            text: assistantTextFromEvents(events),
             events,
-            outputs
+            outputs,
+            messages
         };
     }
     async suspend(options = {}) {
@@ -127,19 +128,39 @@ export class SessionHandle {
         }
     }
     /**
-     * Accessor for the session's decoded assistant messages (buffered output
-     * mode: one entry per assistant message). `list()` returns them oldest-first;
-     * `last()`/`first()` return a single entry or `undefined` when empty.
+     * Accessor for the session's assistant messages. `all()` returns them
+     * oldest-first; `last()`/`first()` return a single entry or `undefined` when
+     * empty. The accessor is callable as a compatibility shim for older
+     * `session.messages().list()` callers.
      */
-    messages() {
+    get messages() {
         const http = this.#http;
         const id = this.id;
-        const list = async () => decodeAssistantText((await operations.listSessionEvents(http, id)));
-        return {
-            list,
-            last: async () => (await list()).at(-1),
-            first: async () => (await list())[0]
+        const fromEvents = async () => projectAssistantMessages(await operations.listSessionEvents(http, id));
+        const all = async () => {
+            try {
+                const page = await operations.listSessionMessages(http, id);
+                if (!Array.isArray(page.messages)) {
+                    return fromEvents();
+                }
+                return page.messages.map(messageFromWire);
+            }
+            catch (err) {
+                if (!isMissingMessagesEndpoint(err)) {
+                    throw err;
+                }
+                return fromEvents();
+            }
         };
+        let accessor;
+        accessor = (() => accessor);
+        Object.assign(accessor, {
+            all,
+            list: all,
+            last: async () => (await all()).at(-1),
+            first: async () => (await all())[0]
+        });
+        return accessor;
     }
     /**
      * Accessor for the session's event stream: the buffered `SessionEvent`
@@ -447,6 +468,199 @@ function sessionOutputs(http, id, fetchLike) {
         download: (selector, options) => downloadSessionOutput(http, id, selector, options)
     };
 }
+function messageFromWire(message) {
+    return {
+        id: message.id,
+        sender: message.sender,
+        text: message.text,
+        ...(message.timestamp !== undefined ? { timestamp: message.timestamp } : {}),
+        ...(message.turnSeq !== undefined ? { turnSeq: message.turnSeq } : {}),
+        ...(message.sequence !== undefined ? { sequence: message.sequence } : {})
+    };
+}
+function isMissingMessagesEndpoint(err) {
+    return err instanceof AexApiError && (err.status === 404 || err.status === 405 || err.status === 501);
+}
+function projectAssistantMessages(events) {
+    const out = [];
+    const byMessageId = new Map();
+    for (let i = 0; i < events.length; i++) {
+        const event = events[i];
+        if (event.type !== "TEXT_MESSAGE_CONTENT")
+            continue;
+        const data = asRecord(event.data);
+        const text = typeof data.text === "string" ? data.text : undefined;
+        if (text === undefined)
+            continue;
+        const messageId = typeof data.messageId === "string" && data.messageId ? data.messageId : undefined;
+        const sequence = event.sequence ?? event.seq;
+        const timestamp = event.time ?? event.recordedAt ?? timestampFromEpochMs(event.receivedAt);
+        const turnSeq = typeof data.turnSeq === "number" ? data.turnSeq : undefined;
+        if (messageId !== undefined) {
+            const existing = byMessageId.get(messageId);
+            if (existing !== undefined) {
+                const current = out[existing];
+                out[existing] = {
+                    ...current,
+                    text: `${current.text}${text}`,
+                    ...(timestamp !== undefined ? { timestamp } : {}),
+                    ...(sequence !== undefined ? { sequence } : {}),
+                    ...(turnSeq !== undefined ? { turnSeq } : {})
+                };
+                continue;
+            }
+            byMessageId.set(messageId, out.length);
+        }
+        out.push({
+            id: messageId ?? (typeof event.id === "string" && event.id ? event.id : `message-${i}`),
+            sender: "assistant",
+            text,
+            ...(timestamp !== undefined ? { timestamp } : {}),
+            ...(sequence !== undefined ? { sequence } : {}),
+            ...(turnSeq !== undefined ? { turnSeq } : {})
+        });
+    }
+    return out;
+}
+function assistantTextFromEvents(events) {
+    return assistantTextEntriesFromEvents(events).map((entry) => entry.text).join("");
+}
+function runTraceFromEvents(events) {
+    return {
+        toolCalls: toolCallsFromEvents(events),
+        usage: usageFromEvents(events),
+        text: assistantTextEntriesFromEvents(events)
+    };
+}
+function assistantTextEntriesFromEvents(events) {
+    const out = [];
+    for (const raw of events) {
+        const event = raw;
+        if (event.type !== "TEXT_MESSAGE_CONTENT")
+            continue;
+        const data = asRecord(event.data);
+        const text = typeof data.text === "string" ? data.text : undefined;
+        if (text === undefined)
+            continue;
+        const entry = { text };
+        const messageId = typeof data.messageId === "string" ? data.messageId : undefined;
+        if (messageId !== undefined)
+            entry.messageId = messageId;
+        if (typeof event.seq === "number")
+            entry.seq = event.seq;
+        const recordedAt = typeof event.recordedAt === "string" ? event.recordedAt : undefined;
+        if (recordedAt !== undefined)
+            entry.recordedAt = recordedAt;
+        out.push(entry);
+    }
+    return out;
+}
+function toolCallsFromEvents(events) {
+    const order = [];
+    const byId = new Map();
+    for (const event of events) {
+        const data = asRecord(event.data);
+        if (event.type === "TOOL_CALL_START") {
+            const id = typeof data.id === "string" ? data.id : undefined;
+            if (id === undefined)
+                continue;
+            const trace = {
+                id,
+                name: typeof data.name === "string" ? data.name : "",
+                args: asRecord(data.arguments)
+            };
+            const messageId = typeof data.messageId === "string" ? data.messageId : undefined;
+            if (messageId !== undefined)
+                trace.messageId = messageId;
+            if (typeof event.seq === "number")
+                trace.startSeq = event.seq;
+            if (typeof event.recordedAt === "string")
+                trace.startedAt = event.recordedAt;
+            if (!byId.has(id))
+                order.push(id);
+            byId.set(id, trace);
+            continue;
+        }
+        if (event.type === "TOOL_CALL_RESULT") {
+            const id = typeof data.id === "string" ? data.id : undefined;
+            if (id === undefined)
+                continue;
+            const result = {
+                isError: data.isError === true,
+                content: data.content ?? null
+            };
+            if (typeof event.seq === "number")
+                result.seq = event.seq;
+            if (typeof event.recordedAt === "string")
+                result.recordedAt = event.recordedAt;
+            let trace = byId.get(id);
+            if (trace === undefined) {
+                trace = { id, name: "", args: {} };
+                order.push(id);
+                byId.set(id, trace);
+            }
+            trace.result = result;
+            const duration = durationMs(trace.startedAt, result.recordedAt);
+            if (duration !== undefined)
+                trace.durationMs = duration;
+        }
+    }
+    return order.map((id) => byId.get(id));
+}
+function usageFromEvents(events) {
+    const totals = { inputTokens: 0, outputTokens: 0, cacheReadInputTokens: 0, cacheCreationInputTokens: 0 };
+    let seen = false;
+    for (const event of events) {
+        if (event.type !== "CUSTOM")
+            continue;
+        const data = asRecord(event.data);
+        if (data.name !== "aex.usage")
+            continue;
+        const value = asRecord(data.value);
+        const fields = [
+            ["input_tokens", "inputTokens"],
+            ["output_tokens", "outputTokens"],
+            ["cache_read_input_tokens", "cacheReadInputTokens"],
+            ["cache_creation_input_tokens", "cacheCreationInputTokens"]
+        ];
+        for (const [wireName, apiName] of fields) {
+            const n = value[wireName];
+            if (typeof n === "number" && Number.isFinite(n)) {
+                totals[apiName] += n;
+                seen = true;
+            }
+        }
+    }
+    if (!seen)
+        return {};
+    return {
+        inputTokens: totals.inputTokens,
+        outputTokens: totals.outputTokens,
+        cacheReadInputTokens: totals.cacheReadInputTokens,
+        cacheCreationInputTokens: totals.cacheCreationInputTokens,
+        totalTokens: totals.inputTokens + totals.outputTokens
+    };
+}
+function asRecord(value) {
+    return value && typeof value === "object" && !Array.isArray(value)
+        ? value
+        : {};
+}
+function timestampFromEpochMs(value) {
+    return typeof value === "number" && Number.isFinite(value)
+        ? new Date(value).toISOString()
+        : undefined;
+}
+function durationMs(start, end) {
+    if (start === undefined || end === undefined)
+        return undefined;
+    const a = Date.parse(start);
+    const b = Date.parse(end);
+    if (!Number.isFinite(a) || !Number.isFinite(b))
+        return undefined;
+    const delta = b - a;
+    return delta >= 0 ? delta : undefined;
+}
 function isSessionTurnTerminalEvent(event, turnSeq) {
     const name = customName(event);
     if (name !== "aex.session.idle" &&
@@ -599,7 +813,7 @@ function unwrapSecretValue(value) {
  * `client.whoami()` if you want to introspect which workspace the
  * token resolves to.
  */
-export class AgentExecutor {
+export class Aex {
     #http;
     /** The same fetch the HttpClient uses, threaded into `_uploadAsset`. */
     #fetch;
@@ -607,28 +821,30 @@ export class AgentExecutor {
     files;
     secrets;
     sessions;
-    constructor(options) {
-        if (!options.apiToken) {
-            throw new Error("AgentExecutor: apiToken is required");
+    constructor(options, overrides = {}) {
+        const resolved = typeof options === "string" ? { ...overrides, apiKey: options } : options;
+        const apiKey = resolved.apiKey ?? resolved.apiToken;
+        if (!apiKey) {
+            throw new Error("Aex: apiKey is required");
         }
         // Wrap the transport fetch (the caller's override, or global `fetch`) with
         // the bounded-retry layer so every BFF request gets default resilience.
         // The raw `#fetch` below stays unwrapped for the direct-to-storage asset PUT
         // and presigned output GETs, which target object storage, not the API plane.
-        const baseFetch = options.fetch ?? ((input, init) => fetch(input, init));
-        const retryingFetch = withRetry(baseFetch, options.retry);
+        const baseFetch = resolved.fetch ?? ((input, init) => fetch(input, init));
+        const retryingFetch = withRetry(baseFetch, resolved.retry);
         this.#http = new HttpClient({
-            ...(options.baseUrl ? { baseUrl: options.baseUrl } : {}),
-            apiToken: options.apiToken,
+            ...(resolved.baseUrl ? { baseUrl: resolved.baseUrl } : {}),
+            apiToken: apiKey,
             fetch: retryingFetch,
             // Opt-in local diagnostics: emit a redacted per-request trace to
             // stderr. Uploads nothing. A caller wanting a custom sink can pass
             // a function instead of `true`.
-            ...(options.debug
-                ? { debug: typeof options.debug === "function" ? options.debug : (line) => console.error(line) }
+            ...(resolved.debug
+                ? { debug: typeof resolved.debug === "function" ? resolved.debug : (line) => console.error(line) }
                 : {})
         });
-        this.#fetch = options.fetch;
+        this.#fetch = resolved.fetch;
         this.agentsMd = new AgentsMdClient(this.#http);
         this.files = new FilesClient(this.#http);
         this.secrets = new SecretsClient(this.#http);
@@ -709,8 +925,9 @@ export class AgentExecutor {
                 status: turnResult.status,
                 ok,
                 text: turnResult.text,
+                messages: turnResult.messages,
                 events,
-                trace: summarizeRunTrace(events),
+                trace: runTraceFromEvents(events),
                 outputs,
                 ...(turnResult.session.usage ? { usage: turnResult.session.usage } : {}),
                 ...(typeof costUsd === "number" ? { costUsd } : {}),
@@ -730,7 +947,7 @@ export class AgentExecutor {
                         ...(throttle.retryAfterMs !== undefined ? { retryAfterMs: throttle.retryAfterMs } : {})
                     });
                 }
-                throw new RunStateError(`AgentExecutor.run: session ${runId} ended ${turnResult.status}${errorMessage ? `: ${errorMessage}` : ""}`, { runId, status: turnResult.status });
+                throw new RunStateError(`Aex.run: session ${runId} ended ${turnResult.status}${errorMessage ? `: ${errorMessage}` : ""}`, { runId, status: turnResult.status });
             }
             return result;
         }
@@ -760,8 +977,6 @@ export class AgentExecutor {
         if (typeof options.model !== "string" || !options.model) {
             throw new RunConfigValidationError("Aex.openSession: model is required");
         }
-        const { endpoints: proxyEndpointDeclarations, auth: proxyEndpointAuthFromInstances } = splitProxyEndpoints(options.proxyEndpoints ?? []);
-        const mergedProxyAuth = mergeProxyEndpointAuth(proxyEndpointAuthFromInstances, []);
         const { declarations: secretEnvDeclarations, values: envSecretValues } = splitSecretEnv(options.environment?.secrets);
         let limits;
         try {
@@ -804,7 +1019,6 @@ export class AgentExecutor {
         const secrets = {
             ...(options.apiKeys ? { apiKeys: options.apiKeys } : {}),
             ...(mergedMcpSecrets.length > 0 ? { mcpServers: mergedMcpSecrets } : {}),
-            ...(mergedProxyAuth.length > 0 ? { proxyEndpointAuth: mergedProxyAuth } : {}),
             ...(Object.keys(envSecretValues).length > 0 ? { envSecrets: envSecretValues } : {})
         };
         const retention = sessionRetentionForWire(options);
@@ -818,10 +1032,7 @@ export class AgentExecutor {
             // Operational/delivery concern — sibling of secrets, NOT part of the
             // hashed submission. Delivered at the settle-consistent barrier.
             ...(options.webhook ? { webhook: options.webhook } : {}),
-            secrets,
-            ...(proxyEndpointDeclarations.length > 0
-                ? { proxyEndpoints: proxyEndpointDeclarations }
-                : {})
+            secrets
         };
     }
     /**
@@ -836,9 +1047,6 @@ export class AgentExecutor {
         return operations.whoami(this.#http);
     }
 }
-/** Canonical SDK client name. `AgentExecutor` remains as a compatibility alias. */
-export class Aex extends AgentExecutor {
-}
 // `Run.status` is a loose `string` on the wire shape, so we membership-test
 // against the canonical terminal set rather than re-deriving one (which is how
 // `timed_out` got dropped from the old hardcoded list).
@@ -895,7 +1103,7 @@ function resolveOutputFileSelector(outputs, selector, runId) {
     if (isOutputPathSelector(selector)) {
         const target = normalizeOutputLookupPath(selector.path);
         if (!target) {
-            throw new RunStateError("AgentExecutor.downloadOutput: output path must be non-empty", {
+            throw new RunStateError("Aex.downloadOutput: output path must be non-empty", {
                 runId,
                 path: selector.path
             });
@@ -912,15 +1120,15 @@ function resolveOutputFileSelector(outputs, selector, runId) {
         if (matches.length === 1)
             return matches[0];
         if (matches.length > 1) {
-            throw new RunStateError(`AgentExecutor.downloadOutput: output path "${selector.path}" matched multiple files`, { runId, path: selector.path, matches: matches.map((output) => output.filename ?? output.id) });
+            throw new RunStateError(`Aex.downloadOutput: output path "${selector.path}" matched multiple files`, { runId, path: selector.path, matches: matches.map((output) => output.filename ?? output.id) });
         }
-        throw new RunStateError(`AgentExecutor.downloadOutput: output path "${selector.path}" was not found`, {
+        throw new RunStateError(`Aex.downloadOutput: output path "${selector.path}" was not found`, {
             runId,
             path: selector.path
         });
     }
     if (typeof selector.id !== "string" || selector.id.length === 0) {
-        throw new RunStateError("AgentExecutor.downloadOutput: selector must include an output id or path", { runId });
+        throw new RunStateError("Aex.downloadOutput: selector must include an output id or path", { runId });
     }
     return { ...selector, id: selector.id };
 }
@@ -1010,6 +1218,7 @@ function normaliseSessionInput(input, surface, field) {
 }
 function assertNoLegacySessionFields(options, surface) {
     const record = options;
+    const removedProxyField = "proxy" + "Endpoints";
     const messages = {
         input: "send user messages with session.send(...) or use run({ message }).",
         prompt: "use message for one-shot run input or session.send(...) for follow-up messages.",
@@ -1025,7 +1234,8 @@ function assertNoLegacySessionFields(options, surface) {
         limits: "use overrides.",
         timeout: "use overrides.timeout.",
         signal: "use session.cancel() / session.suspend() for remote control.",
-        postHook: "send a follow-up validation message when the session returns idle."
+        postHook: "send a follow-up validation message when the session returns idle.",
+        [removedProxyField]: "proxy endpoints are not part of the public SDK session API."
     };
     for (const [field, message] of Object.entries(messages)) {
         if (Object.prototype.hasOwnProperty.call(record, field)) {
@@ -1247,29 +1457,4 @@ function mergeMcpServers(inputs, explicitSecrets) {
         mergedMcpSecrets: Array.from(secretByName.values())
     };
 }
-/**
- * Merge `ProxyEndpoint`-derived auth entries with any
- * `secrets.proxyEndpointAuth` the caller passed explicitly. Per-instance
- * auth values win on the same `name`; a type mismatch (e.g. instance
- * declares `bearer` but secrets carry `header` for the same name) is a
- * call-site error and we throw at the SDK boundary instead of letting
- * the BFF reject the submission an HTTP request later.
- */
-function mergeProxyEndpointAuth(fromInstances, fromExplicitSecrets) {
-    if (fromInstances.length === 0 && fromExplicitSecrets.length === 0)
-        return [];
-    const byName = new Map();
-    for (const entry of fromExplicitSecrets) {
-        byName.set(entry.name, entry);
-    }
-    for (const entry of fromInstances) {
-        const existing = byName.get(entry.name);
-        if (existing && existing.value.type !== entry.value.type) {
-            throw new RunConfigValidationError(`aex: proxyEndpoint "${entry.name}" auth type conflicts ` +
-                `with secrets.proxyEndpointAuth (instance=${entry.value.type}, secrets=${existing.value.type})`);
-        }
-        byName.set(entry.name, entry);
-    }
-    return Array.from(byName.values());
-}
 //# sourceMappingURL=client.js.map