@aexhq/sdk 0.35.0 → 0.37.0

package/dist/_contracts/submission.d.ts

@@ -1,5 +1,3 @@
-import { PROXY_ENDPOINT_DEFAULTS, type ProxyAuthShape, type ProxyMethod, type ProxyRetryPolicy, type ProxyResponseMode } from "./proxy-protocol.js";
-export { PROXY_ENDPOINT_DEFAULTS };
 import type { AgentsMdRef, FileRef, McpServerRef, SkillToolRef, ToolRef } from "./run-config.js";
 import { type RuntimeSize } from "./runtime-sizes.js";
 import { type RunModel } from "./models.js";
@@ -141,43 +139,18 @@ export interface PlatformMcpServerSecret {
     readonly url: string;
     readonly headers?: Record<string, string>;
 }
-/**
- * Per-run auth value for a declared proxy endpoint. The `name` must
- * match a `proxyEndpoints[i].name` in the same submission, and `value`'s
- * shape must match that endpoint's `authShape.type`. The cross-validation
- * lives in `parseRunSubmissionRequest`.
- */
-export interface PlatformProxyEndpointAuth {
-    readonly name: string;
-    readonly value: PlatformProxyAuthValue;
-}
-export type PlatformProxyAuthValue = {
-    readonly type: "bearer";
-    readonly token: string;
-} | {
-    readonly type: "basic";
-    readonly username: string;
-    readonly password: string;
-} | {
-    readonly type: "header";
-    readonly value: string;
-} | {
-    readonly type: "query";
-    readonly value: string;
-};
 /**
  * Per-run inline secrets bundle. `apiKeys` holds the BYOK provider keys, keyed
  * by {@link RunProvider}. A run REQUIRES a key for its own `provider`; it MAY
  * carry keys for additional providers so a subagent spawned with a
  * different-family model inherits them server-side from the vault (the keys
- * never transit the container). `mcpServers` and `proxyEndpointAuth` are
- * cross-provider (an MCP credential is the same secret whichever model is
- * driving the MCP client).
+ * never transit the container). `mcpServers` credentials are cross-provider
+ * (an MCP credential is the same secret whichever model is driving the MCP
+ * client).
  */
 export interface PlatformInlineSecrets {
     readonly apiKeys?: Partial<Record<RunProvider, string>>;
     readonly mcpServers?: readonly PlatformMcpServerSecret[];
-    readonly proxyEndpointAuth?: readonly PlatformProxyEndpointAuth[];
     /**
      * Per-run env-var secret VALUES, keyed by env name. Each entry pairs with a
      * `submission.secretEnv[<envName>] = { ephemeral: true }` declaration. Lives
@@ -188,29 +161,6 @@ export interface PlatformInlineSecrets {
      */
     readonly envSecrets?: Readonly<Record<string, string>>;
 }
-/**
- * Per-run named HTTP proxy endpoint. The `authShape` describes how the
- * upstream expects auth; the actual value is supplied separately via
- * `secrets.proxyEndpointAuth`. The auth value never enters the
- * container — the BFF proxy injects it on outbound calls.
- *
- * Caps and allow-lists below are intentionally pessimistic by default
- * so a misconfigured endpoint can't accidentally permit a wide attack
- * surface; raise per endpoint if needed.
- */
-export interface PlatformProxyEndpoint {
-    readonly name: string;
-    readonly baseUrl: string;
-    readonly authShape: ProxyAuthShape;
-    readonly allowMethods: readonly ProxyMethod[];
-    readonly allowPathPrefixes: readonly string[];
-    readonly allowHeaders?: readonly string[];
-    readonly responseMode?: ProxyResponseMode;
-    readonly maxRequestBytes?: number;
-    readonly maxResponseBytes?: number;
-    readonly timeoutMs?: number;
-    readonly retry?: ProxyRetryPolicy;
-}
 export declare const SECRETS_KEY = "secrets";
 /** POSIX-style env var name a `secretEnv` entry binds to (e.g. `SERPER_API_KEY`). */
 export declare const SECRET_ENV_NAME_PATTERN: RegExp;
@@ -227,18 +177,10 @@ export type PlatformSecretEnvEntry = {
 } | {
     readonly ephemeral: true;
 };
-export declare const PROXY_ENDPOINT_NAME_PATTERN: RegExp;
-export declare const RESERVED_PROXY_ENDPOINT_NAMES: Set<string>;
 export declare const deniedSecretFields: Set<string>;
-export declare function parseProxyRetryPolicy(input: unknown, field: string): ProxyRetryPolicy | undefined;
-export declare function parseProxyAuthShape(input: unknown, field: string): ProxyAuthShape;
-export declare function parseProxyMethods(input: unknown, field: string): readonly ProxyMethod[];
-export declare function parseProxyPathPrefixes(input: unknown, field: string): readonly string[];
-export declare function parseProxyAllowedHeaders(input: unknown, field: string, authShape: ProxyAuthShape): readonly string[] | undefined;
-export declare function crossValidateProxyEndpointsAndAuth(endpoints: readonly PlatformProxyEndpoint[] | undefined, auth: readonly PlatformProxyEndpointAuth[] | undefined): void;
 /**
  * Cross-check `submission.secretEnv` declarations against `secrets.envSecrets`
- * values. Mirrors {@link crossValidateProxyEndpointsAndAuth}:
+ * values:
  *
  *  - `{ ephemeral: true }` MUST have a matching `secrets.envSecrets` value.
  *  - `{ ref }` MUST NOT supply a value (the value lives in the workspace store).
@@ -247,15 +189,6 @@ export declare function crossValidateProxyEndpointsAndAuth(endpoints: readonly P
  */
 export declare function crossValidateSecretEnvAndValues(secretEnv: Readonly<Record<string, PlatformSecretEnvEntry>> | undefined, envSecrets: Readonly<Record<string, string>> | undefined): void;
 export declare function parseInlineSecrets(input: unknown): PlatformInlineSecrets;
-/**
- * The proxy body-redactor refuses to mask any derived target string shorter
- * than this many bytes — masking a 1-byte literal would corrupt the response
- * body. This is the floor for the *derived* redaction targets (e.g.
- * `Bearer <token>`, base64 fragments), used by
- * the hosted proxy redactor, which imports this constant so the two sides can
- * never silently diverge.
- */
-export declare const MIN_REDACTION_TARGET_BYTES = 4;
 export declare function assertNoSecretBearingFields(input: unknown, path: readonly string[]): void;
 export declare function requireRecord(input: unknown, field: string): Record<string, unknown>;
 export declare function requireString(input: unknown, field: string): string;
@@ -389,7 +322,6 @@ export interface PlatformRunSubmissionRequest {
     readonly provider: RunProvider;
     readonly submission: PlatformSubmission;
     readonly secrets: PlatformInlineSecrets;
-    readonly proxyEndpoints?: readonly PlatformProxyEndpoint[];
     /**
      * Managed runtime size. One of the closed {@link RuntimeSize} preset tokens
      * or absent (downstream applies the default).
@@ -397,8 +329,8 @@ export interface PlatformRunSubmissionRequest {
     readonly runtimeSize?: RuntimeSize;
     /**
      * Run deadline in milliseconds, normalised by the parser from the wire
-     * `timeout` duration string (bounded to [1m, 6h]). Absent ⇒
-     * {@link DEFAULT_RUN_TIMEOUT_MS} (1h). Applies to the managed runner's
+     * `timeout` duration string (bounded to [1m, 8h]). Absent ⇒
+     * {@link DEFAULT_RUN_TIMEOUT_MS} (8h). Applies to the managed runner's
      * terminal wait window and self-kill deadline.
      */
     readonly timeoutMs?: number;
@@ -480,8 +412,8 @@ export type PlatformRunSubmissionInput = Omit<PlatformRunSubmissionRequest, "wor
     readonly provider?: RunProvider;
     /**
      * Run deadline as a human duration string (`"1h"`, `"90m"`, `"30s"`).
-     * Parsed + bounded to [1m, 6h] server-side into
-     * {@link PlatformRunSubmissionRequest.timeoutMs}. Absent ⇒ 1h default.
+     * Parsed + bounded to [1m, 8h] server-side into
+     * {@link PlatformRunSubmissionRequest.timeoutMs}. Absent ⇒ 8h default.
      */
     readonly timeout?: string;
 };