@aexhq/sdk 0.40.16 → 0.41.0

package/dist/_contracts/{run-unit.js → session-unit.js}

@@ -1,13 +1,13 @@
 /**
- * RunUnit — the self-contained read shape of a run.
+ * SessionUnit — the self-contained read shape of a session.
  *
  * One canonical struct that captures every non-secret artifact persisted
- * for a single run: parsed submission inputs, status/lifecycle, attempts,
- * indexed events, raw-event Storage manifest, outputs, and capture failures.
+ * for a single session: parsed submission inputs, status/lifecycle, attempts,
+ * indexed events, raw-event Storage manifest, session files, and capture failures.
  *
- * Wire contract for `GET /api/runs/:runId`, the per-run archive's
- * `run.json`/`submission.json`/`caps.json`, and the SDK/CLI
- * `client.runs.get(runId)` return type.
+ * Wire contract for `GET /api/sessions/:sessionId`, the per-session archive's
+ * `session.json`/`submission.json`/`caps.json`, and the SDK/CLI
+ * `client.sessions.get(sessionId)` return type.
  *
  * Immutability: every field here is read-only. Edit endpoints do not
  * exist by design.
@@ -17,15 +17,15 @@
  * `rawEventPages` (manifest only; bytes downloaded out-of-band so the
  * detail response stays bounded). The archive zip carries the bytes.
  */
-import { parseMcpServerRef } from "./run-config.js";
+import { parseMcpServerRef } from "./session-config.js";
 import { CLEANUP_STATUSES } from "./status.js";
-import { Models, parseRunModel } from "./models.js";
+import { Models, parseModelName } from "./models.js";
 import { PLATFORM_PACKAGE_ECOSYSTEMS } from "./submission.js";
 // ---------------------------------------------------------------------------
 // Submission parser
 // ---------------------------------------------------------------------------
 /**
- * Parse a legacy run snapshot jsonb payload into the typed flat
+ * Parse a legacy session snapshot jsonb payload into the typed flat
  * submission. Never throws on minor unknown keys so we can
  * forward-compat with hosted API enrichment.
  *
@@ -34,7 +34,7 @@ import { PLATFORM_PACKAGE_ECOSYSTEMS } from "./submission.js";
  * must still render *something* for a buggy historical row rather than 500ing
  * the whole detail page.
  */
-export function parseRunUnitSubmission(input, fallbackModel) {
+export function parseSessionUnitSubmission(input, fallbackModel) {
     if (!input || typeof input !== "object" || Array.isArray(input)) {
         return fallbackFlat(fallbackModel);
     }
@@ -48,15 +48,15 @@ export function parseRunUnitSubmission(input, fallbackModel) {
 }
 function parseFlatProjection(value, fallbackModel) {
     const submissionRaw = isRecord(value.submission) ? value.submission : {};
-    const outputsRaw = isRecord(submissionRaw.outputs) ? submissionRaw.outputs : {};
-    const allowedDirs = toOptionalStringArray(outputsRaw.allowedDirs);
-    const deniedDirs = toOptionalStringArray(outputsRaw.deniedDirs);
-    const captureTimeoutMs = toOptionalPositiveInteger(outputsRaw.captureTimeoutMs);
-    const maxFileBytes = toOptionalPositiveInteger(outputsRaw.maxFileBytes);
-    const maxTotalBytes = toOptionalPositiveInteger(outputsRaw.maxTotalBytes);
-    const maxFiles = toOptionalPositiveInteger(outputsRaw.maxFiles);
+    const fileCaptureRaw = isRecord(submissionRaw.fileCapture) ? submissionRaw.fileCapture : {};
+    const allowedDirs = toOptionalStringArray(fileCaptureRaw.allowedDirs);
+    const deniedDirs = toOptionalStringArray(fileCaptureRaw.deniedDirs);
+    const captureTimeoutMs = toOptionalPositiveInteger(fileCaptureRaw.captureTimeoutMs);
+    const maxFileBytes = toOptionalPositiveInteger(fileCaptureRaw.maxFileBytes);
+    const maxTotalBytes = toOptionalPositiveInteger(fileCaptureRaw.maxTotalBytes);
+    const maxFiles = toOptionalPositiveInteger(fileCaptureRaw.maxFiles);
     const submission = {
-        model: coerceRunUnitModel(submissionRaw.model ?? fallbackModel),
+        model: coerceSessionUnitModel(submissionRaw.model ?? fallbackModel),
         ...(typeof submissionRaw.system === "string" ? { system: submissionRaw.system } : {}),
         prompt: toStringArray(submissionRaw.prompt),
         agentsMd: [],
@@ -77,7 +77,7 @@ function parseFlatProjection(value, fallbackModel) {
             maxTotalBytes !== undefined ||
             maxFiles !== undefined
             ? {
-                outputs: {
+                fileCapture: {
                     ...(allowedDirs ? { allowedDirs } : {}),
                     ...(deniedDirs ? { deniedDirs } : {}),
                     ...(captureTimeoutMs !== undefined ? { captureTimeoutMs } : {}),
@@ -103,7 +103,7 @@ function fallbackFlat(fallbackModel) {
     return {
         kind: "submission",
         submission: {
-            model: coerceRunUnitModel(fallbackModel),
+            model: coerceSessionUnitModel(fallbackModel),
             prompt: [],
             agentsMd: [],
             files: [],
@@ -121,17 +121,17 @@ function isRecord(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 /**
- * Normalize a `GET /api/runs/:runId` payload into a RunUnit whose type contract
+ * Normalize a `GET /api/sessions/:sessionId` payload into a SessionUnit whose type contract
  * holds AT RUNTIME. The managed (AWS) plane returns a LEAN record (scalars +
- * costTelemetry only) and omits the aggregate collections; the RunUnit type
- * declares those non-optional, so a naive cast leaves `unit.outputs` /
+ * costTelemetry only) and omits the aggregate collections; the SessionUnit type
+ * declares those non-optional, so a naive cast leaves `unit.sessionFiles` /
  * `unit.events.totalCount` `undefined` and a typed consumer crashes on
  * `.map()` / `.totalCount` (pre-launch edge-sweep F25). We fill the aggregates
  * with their empty defaults so array/page access is always safe. NOTE: on the
- * managed plane these summaries are best-effort — read `outputs()` / `events()`
- * / `messages()` for the authoritative per-run data.
+ * managed plane these summaries are best-effort — read `files()` / `events()`
+ * / `messages()` for the authoritative per-session data.
  */
-export function normalizeRunUnit(raw) {
+export function normalizeSessionUnit(raw) {
     const r = isRecord(raw) ? raw : {};
     const eventsRaw = isRecord(r.events) ? r.events : {};
     const str = (v) => (typeof v === "string" ? v : undefined);
@@ -155,9 +155,9 @@ export function normalizeRunUnit(raw) {
                 ? r.attempts.length
                 : 0,
         // Plane responses that project a flat record (no `submission` snapshot)
-        // still carry the run's `model` at the top level — prefer it over the
-        // static fallback so `unit()` never claims a model the run did not use.
-        submission: parseRunUnitSubmission(r.submission, r.model),
+        // still carry the session's `model` at the top level — prefer it over the
+        // static fallback so `unit()` never claims a model the session did not use.
+        submission: parseSessionUnitSubmission(r.submission, r.model),
         ...(isRecord(r.capsSnapshot) ? { capsSnapshot: r.capsSnapshot } : {}),
         attempts: arr(r.attempts),
         events: {
@@ -167,8 +167,8 @@ export function normalizeRunUnit(raw) {
             ...(str(eventsRaw.nextCursor) ? { nextCursor: eventsRaw.nextCursor } : {})
         },
         rawEventPages: arr(r.rawEventPages),
-        outputs: arr(r.outputs),
-        outputCaptureFailures: arr(r.outputCaptureFailures),
+        sessionFiles: arr(r.sessionFiles),
+        fileCaptureFailures: arr(r.fileCaptureFailures),
         ...(isRecord(r.costTelemetry)
             ? { costTelemetry: r.costTelemetry }
             : {}),
@@ -177,11 +177,11 @@ export function normalizeRunUnit(raw) {
             : {})
     };
 }
-function coerceRunUnitModel(value) {
+function coerceSessionUnitModel(value) {
     if (typeof value !== "string")
         return Models.CLAUDE_HAIKU_4_5;
     try {
-        return parseRunModel(value, "run unit submission.model");
+        return parseModelName(value, "session unit submission.model");
     }
     catch {
         return Models.CLAUDE_HAIKU_4_5;

package/dist/_contracts/side-effect-audit.d.ts

@@ -1,8 +1,8 @@
-import type { RunProvider } from "./submission.js";
+import type { ProviderName } from "./submission.js";
 export declare const SIDE_EFFECT_AUDIT_SCHEMA_VERSION = 1;
 export declare const SIDE_EFFECT_AUDIT_REDACTION_SCANNER_VERSION = 1;
 export declare const SIDE_EFFECT_AUDIT_KIND = "aex.side_effect_audit.v1";
-export declare const SIDE_EFFECT_AUDIT_ACTIONS: readonly ["run.submit.accepted", "run.submit.rejected", "run.cancel.requested", "run.delete.requested", "run.delete.completed", "run.delete.failed", "run.download.requested", "run.output.downloaded", "run.log.downloaded", "run.event.downloaded", "workspace.asset.uploaded", "workspace.asset.deleted", "proxy.endpoint.called", "mcp.credential.accessed", "mcp.proxy.called", "provider.proxy.called", "custody.manifest.written", "custody.transition.recorded", "runtime.cleanup.completed", "runtime.cleanup.failed", "terminal_redrive.attempted", "terminal_redrive.completed", "api_key.created", "api_key.deleted", "api_key.used"];
+export declare const SIDE_EFFECT_AUDIT_ACTIONS: readonly ["session.submit.accepted", "session.submit.rejected", "session.cancel.requested", "session.delete.requested", "session.delete.completed", "session.delete.failed", "session.download.requested", "session.file.downloaded", "session.log.downloaded", "session.event.downloaded", "workspace.asset.uploaded", "workspace.asset.deleted", "proxy.endpoint.called", "mcp.credential.accessed", "mcp.proxy.called", "provider.proxy.called", "custody.manifest.written", "custody.transition.recorded", "runtime.cleanup.completed", "runtime.cleanup.failed", "terminal_redrive.attempted", "terminal_redrive.completed", "api_key.created", "api_key.deleted", "api_key.used"];
 export type SideEffectAuditAction = (typeof SIDE_EFFECT_AUDIT_ACTIONS)[number];
 export declare const SIDE_EFFECT_AUDIT_ACTOR_PRINCIPAL_TYPES: readonly ["user", "api_key", "system", "runtime"];
 export type SideEffectAuditActorPrincipalType = (typeof SIDE_EFFECT_AUDIT_ACTOR_PRINCIPAL_TYPES)[number];
@@ -10,11 +10,11 @@ export declare const SIDE_EFFECT_AUDIT_SOURCE_PLANES: readonly ["dashboard", "ap
 export type SideEffectAuditSourcePlane = (typeof SIDE_EFFECT_AUDIT_SOURCE_PLANES)[number];
 export declare const SIDE_EFFECT_AUDIT_AUTHENTICATION_KINDS: readonly ["dashboard_auth", "api_key", "runner_token", "system"];
 export type SideEffectAuditAuthenticationKind = (typeof SIDE_EFFECT_AUDIT_AUTHENTICATION_KINDS)[number];
-export declare const SIDE_EFFECT_AUDIT_TARGET_TYPES: readonly ["workspace", "run", "proxy_endpoint", "mcp_credential", "mcp_proxy", "provider_proxy", "output_archive", "run_output", "run_log", "run_event_stream", "workspace_asset", "custody_manifest", "custody_transition", "cleanup", "deletion", "terminal_redrive", "api_key"];
+export declare const SIDE_EFFECT_AUDIT_TARGET_TYPES: readonly ["workspace", "session", "proxy_endpoint", "mcp_credential", "mcp_proxy", "provider_proxy", "file_archive", "session_file", "session_log", "session_event_stream", "workspace_asset", "custody_manifest", "custody_transition", "cleanup", "deletion", "terminal_redrive", "api_key"];
 export type SideEffectAuditTargetType = (typeof SIDE_EFFECT_AUDIT_TARGET_TYPES)[number];
 export declare const SIDE_EFFECT_AUDIT_OUTCOMES: readonly ["accepted", "rejected", "succeeded", "failed", "denied", "canceled", "pending"];
 export type SideEffectAuditOutcome = (typeof SIDE_EFFECT_AUDIT_OUTCOMES)[number];
-export declare const SIDE_EFFECT_AUDIT_COUNT_NAMES: readonly ["requestBytes", "responseBytes", "durationMs", "attemptCount", "retryCount", "outputCount", "logCount", "eventCount", "assetCount", "proxyCallCount", "mcpCallCount", "providerProxyCallCount", "secretClassCount", "resourceClassCount", "deletedObjectCount", "retainedObjectCount", "failedObjectCount", "quotaRequestedUnits", "quotaRemainingUnits", "reservationCount"];
+export declare const SIDE_EFFECT_AUDIT_COUNT_NAMES: readonly ["requestBytes", "responseBytes", "durationMs", "attemptCount", "retryCount", "fileCount", "logCount", "eventCount", "assetCount", "proxyCallCount", "mcpCallCount", "providerProxyCallCount", "secretClassCount", "resourceClassCount", "deletedObjectCount", "retainedObjectCount", "failedObjectCount", "quotaRequestedUnits", "quotaRemainingUnits", "reservationCount"];
 export type SideEffectAuditCountName = (typeof SIDE_EFFECT_AUDIT_COUNT_NAMES)[number];
 export declare const SIDE_EFFECT_AUDIT_TIMESTAMP_NAMES: readonly ["startedAt", "finishedAt", "observedAt", "decidedAt", "deletedAt", "terminalAt", "expiresAt"];
 export type SideEffectAuditTimestampName = (typeof SIDE_EFFECT_AUDIT_TIMESTAMP_NAMES)[number];
@@ -55,8 +55,8 @@ export interface SideEffectAuditStatusMetadataV1 {
     readonly followUpRequired?: boolean;
 }
 export interface SideEffectAuditDimensionsMetadataV1 {
-    readonly provider?: RunProvider | string;
-    readonly namespace?: "metadata" | "events" | "logs" | "outputs" | "archive";
+    readonly provider?: ProviderName | string;
+    readonly namespace?: "metadata" | "events" | "logs" | "files" | "archive";
     readonly method?: "GET" | "POST" | "PUT" | "PATCH" | "DELETE";
     readonly surface?: string;
 }
@@ -77,7 +77,7 @@ export interface SideEffectAuditEventV1 {
     readonly kind: typeof SIDE_EFFECT_AUDIT_KIND;
     readonly auditId?: string;
     readonly workspaceId: string;
-    readonly runId?: string;
+    readonly sessionId?: string;
     readonly action: SideEffectAuditAction;
     readonly outcome: SideEffectAuditOutcome;
     readonly observedAt: string;
@@ -96,9 +96,9 @@ export type SideEffectAuditMetadataInput = Omit<SideEffectAuditMetadataV1, "reda
 export type SideEffectAuditEventInput = Omit<SideEffectAuditEventV1, "schemaVersion" | "kind" | "metadata"> & {
     readonly metadata?: SideEffectAuditMetadataInput;
 };
-export interface SideEffectAuditRunScopedInput {
+export interface SideEffectAuditSessionScopedInput {
     readonly workspaceId: string;
-    readonly runId: string;
+    readonly sessionId: string;
     readonly observedAt: string;
     readonly actor: SideEffectAuditActorInput;
     readonly correlation?: SideEffectAuditCorrelationInput;
@@ -116,11 +116,11 @@ export declare class SideEffectAuditRedactionError extends Error {
     constructor(findings: readonly SideEffectAuditRedactionFinding[]);
 }
 export declare function buildSideEffectAuditEvent(input: SideEffectAuditEventInput): SideEffectAuditEventV1;
-export declare function buildRunDeletionRequestedAuditEvent(input: SideEffectAuditRunScopedInput): SideEffectAuditEventV1;
-export declare function buildRunDeletionCompletedAuditEvent(input: SideEffectAuditRunScopedInput): SideEffectAuditEventV1;
-export declare function buildRunDeletionFailedAuditEvent(input: SideEffectAuditRunScopedInput): SideEffectAuditEventV1;
-export declare function buildRunDownloadRequestedAuditEvent(input: SideEffectAuditRunScopedInput): SideEffectAuditEventV1;
-export declare function buildCustodyManifestWrittenAuditEvent(input: SideEffectAuditRunScopedInput): SideEffectAuditEventV1;
+export declare function buildSessionDeletionRequestedAuditEvent(input: SideEffectAuditSessionScopedInput): SideEffectAuditEventV1;
+export declare function buildSessionDeletionCompletedAuditEvent(input: SideEffectAuditSessionScopedInput): SideEffectAuditEventV1;
+export declare function buildSessionDeletionFailedAuditEvent(input: SideEffectAuditSessionScopedInput): SideEffectAuditEventV1;
+export declare function buildSessionDownloadRequestedAuditEvent(input: SideEffectAuditSessionScopedInput): SideEffectAuditEventV1;
+export declare function buildCustodyManifestWrittenAuditEvent(input: SideEffectAuditSessionScopedInput): SideEffectAuditEventV1;
 export declare function redactSideEffectAuditMetadata(input: SideEffectAuditMetadataInput, action?: SideEffectAuditAction): SideEffectAuditMetadataV1;
 export declare function scanSideEffectAuditPayloadForSensitiveValues(input: unknown): readonly SideEffectAuditRedactionFinding[];
 export declare function assertPublicSafeSideEffectAuditPayload(input: unknown): void;

package/dist/_contracts/side-effect-audit.js

@@ -2,16 +2,16 @@ export const SIDE_EFFECT_AUDIT_SCHEMA_VERSION = 1;
 export const SIDE_EFFECT_AUDIT_REDACTION_SCANNER_VERSION = 1;
 export const SIDE_EFFECT_AUDIT_KIND = "aex.side_effect_audit.v1";
 export const SIDE_EFFECT_AUDIT_ACTIONS = [
-    "run.submit.accepted",
-    "run.submit.rejected",
-    "run.cancel.requested",
-    "run.delete.requested",
-    "run.delete.completed",
-    "run.delete.failed",
-    "run.download.requested",
-    "run.output.downloaded",
-    "run.log.downloaded",
-    "run.event.downloaded",
+    "session.submit.accepted",
+    "session.submit.rejected",
+    "session.cancel.requested",
+    "session.delete.requested",
+    "session.delete.completed",
+    "session.delete.failed",
+    "session.download.requested",
+    "session.file.downloaded",
+    "session.log.downloaded",
+    "session.event.downloaded",
     "workspace.asset.uploaded",
     "workspace.asset.deleted",
     "proxy.endpoint.called",
@@ -48,15 +48,15 @@ export const SIDE_EFFECT_AUDIT_AUTHENTICATION_KINDS = [
 ];
 export const SIDE_EFFECT_AUDIT_TARGET_TYPES = [
     "workspace",
-    "run",
+    "session",
     "proxy_endpoint",
     "mcp_credential",
     "mcp_proxy",
     "provider_proxy",
-    "output_archive",
-    "run_output",
-    "run_log",
-    "run_event_stream",
+    "file_archive",
+    "session_file",
+    "session_log",
+    "session_event_stream",
     "workspace_asset",
     "custody_manifest",
     "custody_transition",
@@ -80,7 +80,7 @@ export const SIDE_EFFECT_AUDIT_COUNT_NAMES = [
     "durationMs",
     "attemptCount",
     "retryCount",
-    "outputCount",
+    "fileCount",
     "logCount",
     "eventCount",
     "assetCount",
@@ -137,7 +137,7 @@ export function buildSideEffectAuditEvent(input) {
         kind: SIDE_EFFECT_AUDIT_KIND,
         ...(input.auditId ? { auditId: assertSafeIdentifier(input.auditId, "auditId") } : {}),
         workspaceId: assertSafeIdentifier(input.workspaceId, "workspaceId"),
-        ...(input.runId ? { runId: assertSafeIdentifier(input.runId, "runId") } : {}),
+        ...(input.sessionId ? { sessionId: assertSafeIdentifier(input.sessionId, "sessionId") } : {}),
         action,
         outcome: normalizeOutcome(input.outcome),
         observedAt: assertTimestamp(input.observedAt, "observedAt"),
@@ -149,36 +149,36 @@ export function buildSideEffectAuditEvent(input) {
     assertPublicSafeSideEffectAuditPayload(event);
     return event;
 }
-export function buildRunDeletionRequestedAuditEvent(input) {
-    return buildRunScopedAuditEvent(input, {
-        action: "run.delete.requested",
+export function buildSessionDeletionRequestedAuditEvent(input) {
+    return buildSessionScopedAuditEvent(input, {
+        action: "session.delete.requested",
         outcome: "accepted",
         targetType: "deletion"
     });
 }
-export function buildRunDeletionCompletedAuditEvent(input) {
-    return buildRunScopedAuditEvent(input, {
-        action: "run.delete.completed",
+export function buildSessionDeletionCompletedAuditEvent(input) {
+    return buildSessionScopedAuditEvent(input, {
+        action: "session.delete.completed",
         outcome: "succeeded",
         targetType: "deletion"
     });
 }
-export function buildRunDeletionFailedAuditEvent(input) {
-    return buildRunScopedAuditEvent(input, {
-        action: "run.delete.failed",
+export function buildSessionDeletionFailedAuditEvent(input) {
+    return buildSessionScopedAuditEvent(input, {
+        action: "session.delete.failed",
         outcome: "failed",
         targetType: "deletion"
     });
 }
-export function buildRunDownloadRequestedAuditEvent(input) {
-    return buildRunScopedAuditEvent(input, {
-        action: "run.download.requested",
+export function buildSessionDownloadRequestedAuditEvent(input) {
+    return buildSessionScopedAuditEvent(input, {
+        action: "session.download.requested",
         outcome: "accepted",
-        targetType: "output_archive"
+        targetType: "file_archive"
     });
 }
 export function buildCustodyManifestWrittenAuditEvent(input) {
-    return buildRunScopedAuditEvent(input, {
+    return buildSessionScopedAuditEvent(input, {
         action: "custody.manifest.written",
         outcome: "succeeded",
         targetType: "custody_manifest"
@@ -327,15 +327,15 @@ function assertSupportedNestedKeys(input, allowed, field) {
         }
     }
 }
-function buildRunScopedAuditEvent(input, spec) {
+function buildSessionScopedAuditEvent(input, spec) {
     return buildSideEffectAuditEvent({
         workspaceId: input.workspaceId,
-        runId: input.runId,
+        sessionId: input.sessionId,
         action: spec.action,
         outcome: spec.outcome,
         observedAt: input.observedAt,
         actor: input.actor,
-        target: { type: spec.targetType, id: input.runId },
+        target: { type: spec.targetType, id: input.sessionId },
         ...(input.correlation ? { correlation: input.correlation } : {}),
         ...(input.metadata ? { metadata: input.metadata } : {})
     });
@@ -377,7 +377,7 @@ function normalizeTargetType(input) {
     return input;
 }
 function isDeletionAction(action) {
-    return action === "run.delete.requested" || action === "run.delete.completed" || action === "run.delete.failed";
+    return action === "session.delete.requested" || action === "session.delete.completed" || action === "session.delete.failed";
 }
 function visitAuditValue(input, path, findings) {
     if (typeof input === "string") {
@@ -417,18 +417,18 @@ const forbiddenStringPatterns = Object.freeze([
         regex: /\b(?:sk-(?:ant|proj|live|test|deepseek|openai)|xox[baprs]-|AIza)[A-Za-z0-9_-]{8,}/i
     },
     { reason: "signed_url", regex: /[?&](?:X-Amz-Signature|X-Amz-Credential|X-Amz-Algorithm|AWSAccessKeyId)=/i },
-    { reason: "object_store_key", regex: /(^|[\s"'`])(?:runs|assets)\/[^?<#\s"'`]+/i },
+    { reason: "object_store_key", regex: /(^|[\s"'`])(?:sessions|assets)\/[^?<#\s"'`]+/i },
     { reason: "vault_id", regex: /\b(?:vault|vlt|secret)[_:-][A-Za-z0-9][A-Za-z0-9_-]{7,}\b/i },
     {
         reason: "private_resource_handle",
-        regex: /\b(?:machine|session|agent|file|skill|env|resource|handle|token_hash|bearer_hash)[_:-][A-Za-z0-9][A-Za-z0-9_-]{7,}\b/i
+        regex: /\b(?:machine|agent|resource|handle|token_hash|bearer_hash)[_:-][A-Za-z0-9][A-Za-z0-9_-]{7,}\b/i
     },
     { reason: "raw_url", regex: /\bhttps?:\/\/\S+/i },
     { reason: "raw_path", regex: /(^|[\s"'`])\/[A-Za-z0-9._~!$&'()*+,;=:@%-]+(?:[/?#][^\s"'`]*)?/ },
     { reason: "high_entropy_token", regex: /\b(?=[A-Za-z0-9_-]{40,}\b)(?=.*[A-Za-z])(?=.*\d)[A-Za-z0-9_-]{40,}\b/ }
 ]);
 function isForbiddenAuditFieldName(key) {
-    return /^(authorization|headers?|requestHeaders?|responseHeaders?|body|requestBody|responseBody|rawBody|prompt|url|rawUrl|href|query|queryString|path|rawPath|signedUrl|objectStoreKey|objectKey|vaultId|providerResponseBody|providerAccountId|providerDeployment|rateCard|rateCardVersion|margin|discount|calculator|reconciliation|resourceHandle|privateResourceHandle|bearerHash|tokenHash|apiKey|apiKeys|secretValue|sessionId|providerSessionId|agentId|customerId|endUserId|identity|email)$/i.test(key);
+    return /^(authorization|headers?|requestHeaders?|responseHeaders?|body|requestBody|responseBody|rawBody|prompt|url|rawUrl|href|query|queryString|path|rawPath|signedUrl|objectStoreKey|objectKey|vaultId|providerResponseBody|providerAccountId|providerDeployment|rateCard|rateCardVersion|margin|discount|calculator|reconciliation|resourceHandle|privateResourceHandle|bearerHash|tokenHash|apiKey|apiKeys|secretValue|providerSessionId|agentId|customerId|endUserId|identity|email)$/i.test(key);
 }
 function assertSafeIdentifier(value, field) {
     assertNonEmptyString(value, field);

package/dist/_contracts/sse.d.ts

@@ -1,6 +1,6 @@
 /**
  * Tiny SSE (text/event-stream) parser used by the SDK / CLI to consume
- * the dashboard's `/api/runs/:id/events/stream` endpoint without
+ * the dashboard's `/api/sessions/:id/events/stream` endpoint without
  * pulling in a DOM `EventSource` dependency. Node's `fetch` returns a
  * web `ReadableStream<Uint8Array>` body; this parser turns that into
  * an async iterable of `SseFrame`s.

package/dist/_contracts/stable.d.ts

@@ -5,7 +5,7 @@
  *
  * Pinned to `api.aex.dev` on purpose: the dashboard at
  * `aex.dev` is the human UX surface, while `api.aex.dev`
- * owns the runtime/API plane (run submission, provider proxy, MCP
+ * owns the runtime/API plane (session submission, provider proxy, MCP
  * proxy, runner callbacks). Both the apex `aex.dev` and `www.` host
  * may issue redirects, and HTTP clients strip the `Authorization`
  * header on cross-origin redirects (WHATWG Fetch §5.5) — hitting them

package/dist/_contracts/stable.js

@@ -6,7 +6,7 @@ import { createHash } from "node:crypto";
  *
  * Pinned to `api.aex.dev` on purpose: the dashboard at
  * `aex.dev` is the human UX surface, while `api.aex.dev`
- * owns the runtime/API plane (run submission, provider proxy, MCP
+ * owns the runtime/API plane (session submission, provider proxy, MCP
  * proxy, runner callbacks). Both the apex `aex.dev` and `www.` host
  * may issue redirects, and HTTP clients strip the `Authorization`
  * header on cross-origin redirects (WHATWG Fetch §5.5) — hitting them

package/dist/_contracts/status.d.ts

@@ -1,19 +1,19 @@
-export declare const RUN_STATUSES: readonly ["queued", "claiming", "provisioning", "session_created", "dispatched", "provider_running", "provider_idle", "provider_rescheduled", "idle", "suspending", "suspended", "deleting", "deleted", "expired", "cancelling", "capturing_outputs", "cleaning_up", "succeeded", "failed", "timed_out", "cancelled", "cleanup_failed"];
-export type RunStatus = typeof RUN_STATUSES[number];
+export declare const SESSION_CONTROL_STATUSES: readonly ["queued", "claiming", "provisioning", "session_created", "dispatched", "provider_running", "provider_idle", "provider_rescheduled", "idle", "suspending", "suspended", "deleting", "deleted", "expired", "cancelling", "capturing_files", "cleaning_up", "succeeded", "failed", "timed_out", "cancelled", "cleanup_failed"];
+export type SessionControlStatus = typeof SESSION_CONTROL_STATUSES[number];
 /**
  * The RESUMABLE / in-flight lifecycle half of a session's status. A session
  * whose status is one of these is either transitioning or parked resumable
  * (`idle`/`suspended`) — it is NOT a terminal outcome. The terminal outcome
- * half is {@link SESSION_TERMINAL_OUTCOMES}, derived from the run outcome SSoT.
+ * half is {@link SESSION_TERMINAL_OUTCOMES}, derived from the session outcome SSoT.
  */
 export declare const SESSION_LIFECYCLE_STATUSES: readonly ["creating", "running", "idle", "suspending", "suspended", "cancelling", "deleting", "deleted", "expired"];
 export type SessionLifecycleStatus = typeof SESSION_LIFECYCLE_STATUSES[number];
 /**
- * The terminal OUTCOME half of a session's status — DERIVED from the run
- * outcome SSoT via `satisfies readonly RunTerminalOutcome[]`, so a new run
+ * The terminal OUTCOME half of a session's status — DERIVED from the session
+ * outcome SSoT via `satisfies readonly SessionTurnTerminalOutcome[]`, so a new run
  * outcome fails to compile until it is accounted for here (and therefore in
  * {@link SESSION_STATUSES}). This is the compile-time binding that stops the
- * session and run terminal vocabularies from drifting: the bare session
+ * session and session terminal vocabularies from drifting: the bare session
  * `error` is gone — a failed turn is `failed`, a wall-clock kill `timed_out`,
  * a cancel `cancelled`, a clean finish `succeeded`.
  */
@@ -21,27 +21,27 @@ export declare const SESSION_TERMINAL_OUTCOMES: readonly ["succeeded", "failed",
 export type SessionTerminalOutcome = typeof SESSION_TERMINAL_OUTCOMES[number];
 /**
  * The full closed set of session statuses: the resumable lifecycle half, the
- * terminal-outcome half (bound to {@link RUN_TERMINAL_OUTCOMES}), and the
+ * terminal-outcome half (bound to {@link SESSION_TURN_TERMINAL_OUTCOMES}), and the
  * first-class HITL write-gate `awaiting_approval`. Composed — never
- * hand-listed — so the outcome vocabulary can only be extended at the run SSoT.
+ * hand-listed — so the outcome vocabulary can only be extended at the session SSoT.
  */
 export declare const SESSION_STATUSES: readonly ["creating", "running", "idle", "suspending", "suspended", "cancelling", "deleting", "deleted", "expired", "succeeded", "failed", "timed_out", "cancelled", "awaiting_approval"];
 export type SessionStatus = typeof SESSION_STATUSES[number];
 /** True when a session status is terminal (an outcome, or deleted/expired). */
 export declare function isTerminalSessionStatus(status: SessionStatus): boolean;
-export type RunStatusKind = "active" | "terminal";
-export declare const TERMINAL_RUN_STATUSES: readonly ["succeeded", "failed", "timed_out", "cancelled", "deleted", "expired", "cleanup_failed"];
-export declare function isTerminalRunStatus(status: RunStatus): boolean;
+export type SessionControlStatusKind = "active" | "terminal";
+export declare const TERMINAL_SESSION_CONTROL_STATUSES: readonly ["succeeded", "failed", "timed_out", "cancelled", "deleted", "expired", "cleanup_failed"];
+export declare function isTerminalSessionControlStatus(status: SessionControlStatus): boolean;
 /**
- * The closed set of terminal OUTCOMES the run-lifecycle funnel writes via
- * `markRunTerminal` (and that a `run/terminal` event carries). This is a
- * STRICT SUBSET of {@link TERMINAL_RUN_STATUSES}: the read-terminal set also
+ * The closed set of terminal OUTCOMES the session-lifecycle funnel writes via
+ * `markTurnTerminal` (and that a `session/terminal` event carries). This is a
+ * STRICT SUBSET of {@link TERMINAL_SESSION_CONTROL_STATUSES}: the read-terminal set also
  * includes `cleanup_failed`, which the funnel never writes as an outcome.
- * The platform lifecycle `TerminalRunStatus` and the workflow `TerminalOutcome` both
+ * The platform lifecycle `TerminalSessionControlStatus` and the workflow `TerminalOutcome` both
  * derive from this so the four call sites can't drift.
  */
-export declare const RUN_TERMINAL_OUTCOMES: readonly ["succeeded", "failed", "timed_out", "cancelled"];
-export type RunTerminalOutcome = typeof RUN_TERMINAL_OUTCOMES[number];
-export declare function getRunStatusKind(status: RunStatus): RunStatusKind;
+export declare const SESSION_TURN_TERMINAL_OUTCOMES: readonly ["succeeded", "failed", "timed_out", "cancelled"];
+export type SessionTurnTerminalOutcome = typeof SESSION_TURN_TERMINAL_OUTCOMES[number];
+export declare function getSessionControlStatusKind(status: SessionControlStatus): SessionControlStatusKind;
 export declare const CLEANUP_STATUSES: readonly ["not_started", "pending", "running", "succeeded", "failed_retryable", "failed_terminal", "skipped"];
 export type CleanupStatus = typeof CLEANUP_STATUSES[number];

package/dist/_contracts/status.js

@@ -1,4 +1,4 @@
-export const RUN_STATUSES = [
+export const SESSION_CONTROL_STATUSES = [
     "queued",
     "claiming",
     "provisioning",
@@ -14,7 +14,7 @@ export const RUN_STATUSES = [
     "deleted",
     "expired",
     "cancelling",
-    "capturing_outputs",
+    "capturing_files",
     "cleaning_up",
     "succeeded",
     "failed",
@@ -26,7 +26,7 @@ export const RUN_STATUSES = [
  * The RESUMABLE / in-flight lifecycle half of a session's status. A session
  * whose status is one of these is either transitioning or parked resumable
  * (`idle`/`suspended`) — it is NOT a terminal outcome. The terminal outcome
- * half is {@link SESSION_TERMINAL_OUTCOMES}, derived from the run outcome SSoT.
+ * half is {@link SESSION_TERMINAL_OUTCOMES}, derived from the session outcome SSoT.
  */
 export const SESSION_LIFECYCLE_STATUSES = [
     "creating",
@@ -40,11 +40,11 @@ export const SESSION_LIFECYCLE_STATUSES = [
     "expired"
 ];
 /**
- * The terminal OUTCOME half of a session's status — DERIVED from the run
- * outcome SSoT via `satisfies readonly RunTerminalOutcome[]`, so a new run
+ * The terminal OUTCOME half of a session's status — DERIVED from the session
+ * outcome SSoT via `satisfies readonly SessionTurnTerminalOutcome[]`, so a new run
  * outcome fails to compile until it is accounted for here (and therefore in
  * {@link SESSION_STATUSES}). This is the compile-time binding that stops the
- * session and run terminal vocabularies from drifting: the bare session
+ * session and session terminal vocabularies from drifting: the bare session
  * `error` is gone — a failed turn is `failed`, a wall-clock kill `timed_out`,
  * a cancel `cancelled`, a clean finish `succeeded`.
  */
@@ -56,9 +56,9 @@ export const SESSION_TERMINAL_OUTCOMES = [
 ];
 /**
  * The full closed set of session statuses: the resumable lifecycle half, the
- * terminal-outcome half (bound to {@link RUN_TERMINAL_OUTCOMES}), and the
+ * terminal-outcome half (bound to {@link SESSION_TURN_TERMINAL_OUTCOMES}), and the
  * first-class HITL write-gate `awaiting_approval`. Composed — never
- * hand-listed — so the outcome vocabulary can only be extended at the run SSoT.
+ * hand-listed — so the outcome vocabulary can only be extended at the session SSoT.
  */
 export const SESSION_STATUSES = [
     ...SESSION_LIFECYCLE_STATUSES,
@@ -79,7 +79,7 @@ const SESSION_TERMINAL_STATUSES = new Set([
 export function isTerminalSessionStatus(status) {
     return SESSION_TERMINAL_STATUSES.has(status);
 }
-export const TERMINAL_RUN_STATUSES = [
+export const TERMINAL_SESSION_CONTROL_STATUSES = [
     "succeeded",
     "failed",
     "timed_out",
@@ -88,26 +88,26 @@ export const TERMINAL_RUN_STATUSES = [
     "expired",
     "cleanup_failed"
 ];
-const terminalRunStatuses = new Set(TERMINAL_RUN_STATUSES);
-export function isTerminalRunStatus(status) {
-    return terminalRunStatuses.has(status);
+const terminalSessionControlStatuses = new Set(TERMINAL_SESSION_CONTROL_STATUSES);
+export function isTerminalSessionControlStatus(status) {
+    return terminalSessionControlStatuses.has(status);
 }
 /**
- * The closed set of terminal OUTCOMES the run-lifecycle funnel writes via
- * `markRunTerminal` (and that a `run/terminal` event carries). This is a
- * STRICT SUBSET of {@link TERMINAL_RUN_STATUSES}: the read-terminal set also
+ * The closed set of terminal OUTCOMES the session-lifecycle funnel writes via
+ * `markTurnTerminal` (and that a `session/terminal` event carries). This is a
+ * STRICT SUBSET of {@link TERMINAL_SESSION_CONTROL_STATUSES}: the read-terminal set also
  * includes `cleanup_failed`, which the funnel never writes as an outcome.
- * The platform lifecycle `TerminalRunStatus` and the workflow `TerminalOutcome` both
+ * The platform lifecycle `TerminalSessionControlStatus` and the workflow `TerminalOutcome` both
  * derive from this so the four call sites can't drift.
  */
-export const RUN_TERMINAL_OUTCOMES = [
+export const SESSION_TURN_TERMINAL_OUTCOMES = [
     "succeeded",
     "failed",
     "timed_out",
     "cancelled"
 ];
-export function getRunStatusKind(status) {
-    return isTerminalRunStatus(status) ? "terminal" : "active";
+export function getSessionControlStatusKind(status) {
+    return isTerminalSessionControlStatus(status) ? "terminal" : "active";
 }
 export const CLEANUP_STATUSES = [
     "not_started",