antpath 0.10.14 → 0.11.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for describing the origin of the Work and
+      reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 antpath contributors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+   implied. See the License for the specific language governing
+   permissions and limitations under the License.

package/README.md

@@ -4,11 +4,11 @@ title: antpath
 
 # antpath
 
-antpath is a TypeScript-first SDK + CLI for running autonomous Claude Managed Agents sessions through a managed antpath dashboard. Everything an agent or human needs is reachable through **one** import and **one** binary.
+antpath is a TypeScript-first SDK + CLI for running autonomous Claude Managed Agents sessions through the managed antpath service. Everything an agent or human needs is reachable through **one** import and **one** binary.
 
 ```ts
 import {
-  AntpathClient,        // the only client class — submits durable runs to a dashboard
+  AntpathClient,        // the only client class — submits durable runs to antpath
   Skill,                // workspace / provider / inline skill bundles
   McpServer,            // MCP server declarations (headers split into secrets server-side)
   ProxyEndpoint,        // per-run managed HTTP proxy endpoint
@@ -34,12 +34,20 @@ antpath skills  <upload|list|get|delete> [flags] --api-token …
 
 The SDK class and the CLI are backed by the same `@antpath/shared` operations module — any read or write you can do through one, you can do through the other, against the same durable run records. The same npm package also ships the in-container `antpath` CLI as its `bin` entry; the worker mounts that CLI inside every run at `/mnt/session/uploads/antpath/antpath` (Anthropic Managed Agents rebases every session-resource mount under `/mnt/session/uploads/`, and mounted files have no execute permission so they are invoked through `node`), so skills can call `node /mnt/session/uploads/antpath/antpath proxy …` against the per-run manifest. See [Agent-first surface design](../../references/development-principles.md#agent-first-surface-design).
 
-The dashboard URL defaults to `https://www.antpath.ai`. Self-hosted deployments override with `--dashboard-url` on the CLI or `baseUrl` on `AntpathClient`. The workspace is derived server-side from your API token (1:1 binding), so there is no `--workspace` flag and no `workspaceId` option.
+The antpath URL defaults to `https://api.antpath.ai`. Self-hosted deployments override with `--antpath-url` on the CLI or `baseUrl` on `AntpathClient`. The workspace is derived server-side from your API token (1:1 binding), so there is no `--workspace` flag and no `workspaceId` option.
 
-## MVP boundaries
+## Product boundaries
 
-- Claude Managed Agents only.
-- BYO Anthropic key + MCP credentials + skill references — passed inline on every submission, vaulted for the lifetime of a single run, destroyed at cleanup.
+- Multi-provider via the 2026 dual-runtime architecture. The published surface is the same regardless of provider:
+  - `provider: "anthropic"` — defaults to the Anthropic Native runtime
+    (direct `/v1/messages` from the edge). Opt into the multi-provider
+    runner with `runtime: "managed"`.
+  - `provider: "deepseek" | "openai" | "gemini" | "mistral"` — Goose
+    Managed runtime, per-run Fly Machine spawning the `runner-image/`
+    container. BYOK provider-proxy on `api.antpath.ai` injects the
+    customer's key on the edge (the SDK never sees an upstream key).
+  - See `references/platform-rebuild-2026.md` for the full split.
+- BYO provider key + MCP credentials + skill references — passed inline on every submission, vaulted for the lifetime of a single run, destroyed at cleanup. Cross-provider keys are rejected loudly at submission time.
 - Workspace is the tenant boundary. Workspace identity is derived server-side from the API token (1:1 binding); the SDK / CLI never name it.
 - No SDK-side storage of provider keys, MCP credentials, or output file contents.
 - Cleanup runs by default; opt into retention with `cleanup.session: "retain"`.
@@ -51,7 +59,7 @@ import { AntpathClient } from "antpath";
 
 const client = new AntpathClient({
   apiToken: process.env.ANTPATH_API_TOKEN!
-  // baseUrl defaults to https://www.antpath.ai — set it for self-hosted deployments.
+  // baseUrl defaults to https://api.antpath.ai — set it for self-hosted deployments.
 });
 
 const ref = await client.submitRun({
@@ -120,7 +128,7 @@ antpath run \
 
 ```text
 pnpm test                # unit (deterministic; uses fakes/snapshots)
-pnpm test:e2e:live       # full top-to-bottom against a real dashboard + Anthropic
+pnpm test:e2e:live       # full top-to-bottom against a real antpath stack + Anthropic
 pnpm test:user           # offline; exercises the published package via npm install
 pnpm test:user:live      # live; same but hits the real platform
 ```

package/dist/_shared/blueprint.d.ts

@@ -40,7 +40,7 @@
  * Skill custody) and `references/development-principles.md` (Agent-first
  * surface design) for the rationale.
  */
-import type { JsonValue, PlatformCleanupPolicy, PlatformProxyEndpoint, PlatformTemplateEnvironment } from "./submission.js";
+import type { JsonValue, PlatformCleanupPolicy, PlatformProxyEndpoint, PlatformEnvironment } from "./submission.js";
 /**
  * Mirrors the CHECK constraint
  * `skill_bundles_id_format_chk = check (id ~ '^skl_[A-Za-z0-9_-]{8,128}$')`
@@ -78,10 +78,22 @@ export declare const SKILL_BUNDLE_LIMITS: {
     /** Stored directory mode. */
     readonly defaultDirMode: 493;
 };
-export type SkillRef = WorkspaceSkillRef | ProviderSkillRef | TransientSkillRef;
-export interface WorkspaceSkillRef {
-    readonly kind: "workspace";
-    readonly id: string;
+export type SkillRef = ProviderSkillRef | R2SkillRef;
+/**
+ * R2-anchored skill ref. Every non-provider skill goes through R2:
+ * the SDK uploads to `assets/<workspaceId>/<sha256-hex>` BEFORE
+ * submitting the run, so the Worker only ever sees content-addressable
+ * references. Validation: R2.head(path), size + workspace-prefix check.
+ *
+ * `path` is the full R2 key. `hash` is `sha256:<64-hex>`. `name` is
+ * the workspace-visible label the agent sees on disk.
+ */
+export interface R2SkillRef {
+    readonly kind: "r2";
+    readonly path: string;
+    readonly hash: string;
+    readonly sizeBytes: number;
+    readonly name: string;
 }
 export interface ProviderSkillRef {
     readonly kind: "provider";
@@ -89,119 +101,63 @@ export interface ProviderSkillRef {
     readonly skillId: string;
     readonly version?: string;
 }
-/**
- * Per-run, non-persistent skill. The bytes ride alongside the JSON
- * submission as a `name="skill:<slot>"` multipart body part and are
- * uploaded by the BFF directly to the provider's per-run file storage.
- * No `skill_bundles` row, no `run_skill_snapshots` entry, no platform
- * storage stop — the BFF tears the file down at run terminal.
- *
- * `slot` is an SDK-assigned local id that pairs this ref with its
- * multipart part within a single `submitRun` call. The BFF rejects any
- * submission where the set of `kind:"transient"` refs doesn't have a
- * strict 1:1 match against `name="skill:<slot>"` body parts.
- *
- * `contentHash` is a client-side advisory hash of the canonicalised zip
- * (`sha256:<64 hex>`). The BFF recomputes server-side and rejects on
- * mismatch; the value is also used by the janitor for orphan
- * reconciliation. It MUST be deterministic across retries so the
- * idempotency hash converges.
- *
- * Transient refs DO NOT round-trip safely through JSON — the bytes are
- * not in the JSON and cannot be reconstructed. `parseBlueprint` rejects
- * them (Blueprints are JSON-persistable and bytes are gone by the time
- * `run.json` is loaded). `parseFlatSkills` accepts them (the BFF
- * multipart parser is the only place that carries the matching bytes).
- */
-export interface TransientSkillRef {
-    readonly kind: "transient";
-    readonly slot: string;
-    readonly name: string;
-    readonly contentHash: string;
-}
-/**
- * Slot id format: `^[a-z][a-z0-9_-]{0,63}$`. The SDK generates these
- * positionally as `transient-0`, `transient-1`, … but any client may
- * supply an explicit slot as long as it matches the pattern and is
- * unique within the submission.
- */
-export declare const TRANSIENT_SLOT_PATTERN: RegExp;
-/**
- * Content-hash format: `^sha256:[0-9a-f]{64}$` (lowercase hex). The
- * BFF accepts only this exact prefix; uppercase, base64, or any other
- * digest is rejected so the wire form has one stable representation.
- */
-export declare const TRANSIENT_CONTENT_HASH_PATTERN: RegExp;
-export declare function isWorkspaceSkillRef(ref: SkillRef): ref is WorkspaceSkillRef;
+/** Content-hash format: `sha256:<64 lowercase hex>`. */
+export declare const INLINE_CONTENT_HASH_PATTERN: RegExp;
 export declare function isProviderSkillRef(ref: SkillRef): ref is ProviderSkillRef;
-export declare function isTransientSkillRef(ref: SkillRef): ref is TransientSkillRef;
-export type AgentsMdRef = WorkspaceAgentsMdRef | TransientAgentsMdRef;
-export interface WorkspaceAgentsMdRef {
-    readonly kind: "workspace_agentsmd";
-    readonly id: string;
-}
+export declare function isR2SkillRef(ref: SkillRef): ref is R2SkillRef;
 /**
- * Inline-supplied AgentsMd content that arrives as the
- * `agentsmd:<slot>` part of a multipart `submitRun` body. The BFF
- * ingests the bytes into `workspace_files` (kind='agentsmd') at
- * submission time and rewrites the ref to `WorkspaceAgentsMdRef`
- * before the rest of the run-submission pipeline runs.
- *
- * `name` becomes the prefix of the auto-suffixed workspace name,
- * mirroring the `Skill` per-run-artifact model. `contentHash` is
- * the SDK's advisory `sha256:<hex>` for tamper detection.
+ * R2 asset path pattern. The Worker validates inbound paths against
+ * this so a hostile body can't reach into a foreign workspace or
+ * outside the `assets/` prefix.
+ *   workspaceId is a UUID v4
+ *   hash is 64 lowercase hex chars (the sha256 digest)
  */
-export interface TransientAgentsMdRef {
-    readonly kind: "transient_agentsmd";
-    readonly slot: string;
+export declare const R2_ASSET_PATH_PATTERN: RegExp;
+export type AgentsMdRef = R2AgentsMdRef;
+/** R2-anchored AgentsMd ref. Same materialization model as
+ * {@link R2SkillRef}: SDK uploads to `assets/<wsId>/<hash>` before
+ * submit; Worker validates + persists the path on the run. */
+export interface R2AgentsMdRef {
+    readonly kind: "r2";
+    readonly path: string;
+    readonly hash: string;
+    readonly sizeBytes: number;
     readonly name: string;
-    readonly contentHash: string;
-}
-export declare function isWorkspaceAgentsMdRef(ref: AgentsMdRef): ref is WorkspaceAgentsMdRef;
-export declare function isTransientAgentsMdRef(ref: AgentsMdRef): ref is TransientAgentsMdRef;
-export type FileRef = WorkspaceFileRef | TransientFileRef;
-export interface WorkspaceFileRef {
-    readonly kind: "workspace_file";
-    readonly id: string;
 }
-/**
- * Inline-supplied File content that arrives as the `file:<slot>`
- * part of a multipart `submitRun` body. Single file or a zipped
- * folder. The BFF ingests and rewrites the ref to
- * `WorkspaceFileRef` before run submission proceeds.
- *
- * `name` is the workspace-visible name prefix. `contentHash` is the
- * SDK's advisory `sha256:<hex>`. `mountPath` is optional — when
- * present it overrides the default `/antpath/files/<id>/<rel>`
- * `mount_path` we send to Anthropic (the agent sees the file at
- * `/mnt/session/uploads/antpath/files/<id>/<rel>` once Anthropic
- * rebases the mount).
- */
-export interface TransientFileRef {
-    readonly kind: "transient_file";
-    readonly slot: string;
+export declare function isR2AgentsMdRef(ref: AgentsMdRef): ref is R2AgentsMdRef;
+export type FileRef = R2FileRef;
+/** R2-anchored File ref. Same model as {@link R2SkillRef}; carries
+ * `mountPath` for the Anthropic Files mount remap. */
+export interface R2FileRef {
+    readonly kind: "r2";
+    readonly path: string;
+    readonly hash: string;
+    readonly sizeBytes: number;
     readonly name: string;
-    readonly contentHash: string;
     readonly mountPath?: string;
 }
-export declare function isWorkspaceFileRef(ref: FileRef): ref is WorkspaceFileRef;
-export declare function isTransientFileRef(ref: FileRef): ref is TransientFileRef;
+export declare function isR2FileRef(ref: FileRef): ref is R2FileRef;
 /**
- * Options accepted by `parseSkillRef`. The default (`allowTransient: true`)
- * is the BFF submission parser path. The Blueprint parser passes
- * `allowTransient: false` because Blueprints can be persisted to disk
- * (`antpath run --config run.json`) and the bytes carrying the
- * transient slot would already be gone.
+ * Parse a `SkillRef` from untrusted input. Used by the BFF run parser
+ * and by the operations module when deserialising API responses. Only
+ * `kind: "r2"` and `kind: "provider"` are valid; all other historical
+ * wire shapes (workspace, inline, transient) were retired when R2
+ * became the canonical asset store (Phase D, references/platform-rebuild-2026.md).
  */
-export interface ParseSkillRefOptions {
-    readonly allowTransient?: boolean;
-}
+export declare function parseSkillRef(input: unknown, path: string): SkillRef;
 /**
- * Parse a `SkillRef` from untrusted input. Used by the BFF run parser
- * and by the operations module when deserialising API responses. Throws
- * with a precise path so the caller can surface a usable error.
+ * Common parser for any `kind: "r2"` ref (skill / agentsMd / file).
+ * Skills and agentsMd ignore the optional `mountPath` field; file refs
+ * use it for the Anthropic Files mount remap.
  */
-export declare function parseSkillRef(input: unknown, path: string, options?: ParseSkillRefOptions): SkillRef;
+export declare function parseR2RefFields(record: Record<string, unknown>, path: string): {
+    kind: "r2";
+    path: string;
+    hash: string;
+    sizeBytes: number;
+    name: string;
+    mountPath?: string;
+};
 /**
  * Manifest entry persisted in `skill_bundles.manifest` and
  * `run_skill_snapshots.manifest`. `path` is forward-slash, relative,
@@ -286,14 +242,36 @@ export declare function validateSkillBundleManifest(input: ReadonlyArray<{
  * the attach layers can remain independent.
  */
 export declare function hasSkillMdAtRoot(manifest: SkillBundleManifest): boolean;
+/**
+ * Remote MCP transports Antpath accepts. Both are over HTTP — `http`
+ * is the streamable-HTTP transport, `sse` is the event-stream
+ * transport. `stdio` is explicitly NOT a value here: local-process
+ * MCP is not implemented (see `references/deepseek-runtime-mcp-plan.md`).
+ */
+export declare const REMOTE_MCP_TRANSPORTS: readonly ["http", "sse"];
+export type RemoteMcpTransport = (typeof REMOTE_MCP_TRANSPORTS)[number];
+/**
+ * Canonical error string for any attempt to declare a stdio-shaped MCP
+ * server (`transport: "stdio"`, or a stdio-only field like `command` /
+ * `args` / `env`). Pinned in source so every surface — shared parser,
+ * SDK builder, CLI flag parser, dashboard form — surfaces the same
+ * message and a user can find it via grep.
+ */
+export declare const REMOTE_MCP_STDIO_REJECTED_MESSAGE = "stdio MCP servers are not supported by Antpath. Antpath supports remote MCP servers over HTTP/SSE only.";
 /**
  * The non-secret half of an MCP server declaration. This is what enters
  * the hashed submission, the run snapshot, and any audit log. `name`
  * keys into `secrets.mcpServers` for the per-request headers.
+ *
+ * `transport` is optional on the wire — when omitted, the runtime is
+ * free to pick the default remote transport (`http`). When present, it
+ * MUST be one of {@link REMOTE_MCP_TRANSPORTS}; stdio is rejected at
+ * parse time.
  */
 export interface McpServerRef {
     readonly name: string;
     readonly url: string;
+    readonly transport?: RemoteMcpTransport;
 }
 export declare const MCP_SERVER_NAME_PATTERN: RegExp;
 /**
@@ -306,6 +284,13 @@ export interface BlueprintMcpServer extends McpServerRef {
     readonly headers?: Readonly<Record<string, string>>;
 }
 export declare function parseMcpServerRef(input: unknown, path: string): McpServerRef;
+/**
+ * Throw the canonical stdio-rejected error if the record carries any
+ * stdio-only marker (`transport: "stdio"`, `command`, `args`, `env`).
+ * Used by both the shared parser and the SDK `McpServer.remote`
+ * builder so every entry point surfaces the same message.
+ */
+export declare function rejectStdioMcpShape(record: Record<string, unknown>): void;
 /**
  * What the user authors and passes to `client.submitRun({...blueprint, secrets})`.
  *
@@ -323,7 +308,7 @@ export interface Blueprint {
     readonly prompt: string | readonly string[];
     readonly skills?: readonly SkillRef[];
     readonly mcpServers?: readonly BlueprintMcpServer[];
-    readonly environment?: PlatformTemplateEnvironment;
+    readonly environment?: PlatformEnvironment;
     readonly cleanup?: PlatformCleanupPolicy;
     readonly proxyEndpoints?: readonly PlatformProxyEndpoint[];
     readonly metadata?: Readonly<Record<string, JsonValue>>;
@@ -375,7 +360,7 @@ export interface NormalisedBlueprint {
     readonly prompt: readonly string[];
     readonly skills: readonly SkillRef[];
     readonly mcpServers: readonly McpServerRef[];
-    readonly environment?: PlatformTemplateEnvironment;
+    readonly environment?: PlatformEnvironment;
     readonly cleanup?: PlatformCleanupPolicy;
     readonly proxyEndpoints?: readonly PlatformProxyEndpoint[];
     readonly metadata?: Readonly<Record<string, JsonValue>>;