antpath 0.10.15 → 0.11.0

package/dist/skill.js

@@ -1,110 +1,58 @@
 import { SKILL_NAME_PATTERN } from "./_shared/index.js";
 import { bundleSkillFiles, hashSkillBundle } from "./bundle.js";
 import { readDirectoryAsFiles } from "./node-fs.js";
-import { chooseUploadStrategy, uploadChunked } from "./asset-upload.js";
 /**
- * One `Skill` class, one mental model, three usage modes:
- *
- *   - **Workspace** — uploaded to the antpath platform and reused across
- *     runs.
- *     ```ts
- *     const persisted = await Skill.fromFiles({ name, files }).upload(client);
- *     // or
- *     const ref = Skill.fromId("skl_abc123");
- *     ```
+ * One `Skill` class, two usage modes:
  *
  *   - **Provider built-in** — references a provider-side skill (e.g.
  *     Anthropic's `pdf` / `xlsx` / `docx` / `pptx` prebuilt Agent
- *     Skills). Not uploaded to your workspace.
+ *     Skills). Not uploaded.
  *     ```ts
  *     const pdf = Skill.provider({ vendor: "anthropic", skillId: "pdf" });
  *     ```
- *     Note: Anthropic web search is a Messages-API *tool*
- *     (`{ type: "web_search_…" }`), not an Agent Skill — `Skill.provider`
- *     does not enable it.
  *
- *   - **Transient (per-run)** — built from local files, never persisted.
- *     The bytes ride alongside `submitRun` as a multipart part and the
- *     BFF tears them down at run terminal.
+ *   - **Local bytes** — built from local files. `client.submitRun`
+ *     materializes the bytes to R2 (content-addressable, workspace-
+ *     scoped) before the run lands; the wire ref becomes `kind:"r2"`.
  *     ```ts
  *     const rules = await Skill.fromFiles({ name: "rules", files: {...} });
  *     await client.submitRun({ skills: [rules], ... });
  *     ```
  *
- * ## Lifecycle of an unstaged transient Skill
- *
- * After `Skill.fromFiles(...)` returns, the Skill is "unstaged transient":
- *
- *   1. Passing it to `submitRun` uploads the bytes for that one run only
- *      and assigns a positional slot id (`transient-0`, `transient-1`, …).
- *      The same instance may be passed to multiple `submitRun` calls
- *      until it is consumed by `.upload(...)`.
- *
- *   2. Calling `await skill.upload(client)` persists the bundle to the
- *      workspace skill store and returns a **new** `Skill` instance
- *      whose `.ref.kind === "workspace"`. The **original** is marked
- *      **consumed**:
- *      - any further use in `submitRun` throws a clear validation error,
- *      - `.upload(...)` on the consumed instance throws,
- *      - `JSON.stringify` / `toJSON()` on the consumed instance throws.
- *
- *      Use the returned (workspace) Skill from then on. The consumed
- *      reference exists only to surface the mistake loudly the first
- *      time the user re-uses it; it never silently re-uploads as
- *      transient.
- *
- * Unstaged transient Skills do NOT round-trip through JSON (the bytes
- * cannot be serialised back). `toJSON()` throws in that state too —
- * persist via `.upload(client)` first, or pass the unstaged Skill
- * directly to `submitRun`.
- *
- * The Skill class is the only public way to build a transient bundle;
- * the SDK never accepts a raw `TransientSkillRef` object from user code.
+ * The workspace pre-upload concept is gone — R2's content-addressable
+ * dedup at submit time makes the same bytes a no-op upload on subsequent
+ * runs. There is no `Skill.fromId(...)` and no `.upload(client)`.
  */
 export class Skill {
-    /** Workspace skill record returned by the BFF (only set for workspace-uploaded skills). */
-    record;
     #ref;
-    #transientBytes;
+    #inlineBytes;
     #consumed = false;
     /**
-     * Internal constructor. Use `Skill.fromId`, `Skill.provider`,
-     * `Skill.fromFiles`, or `Skill.fromPath` to create instances.
+     * Internal constructor. Use `Skill.provider`, `Skill.fromFiles`, or
+     * `Skill.fromPath` to create instances.
      */
-    constructor(ref, record, transientBytes) {
+    constructor(ref, inlineBytes) {
         this.#ref = ref;
-        this.record = record;
-        this.#transientBytes = transientBytes;
+        this.#inlineBytes = inlineBytes;
     }
     /**
-     * The wire-level reference. For workspace and provider skills this is
-     * stable. For unstaged transient skills it carries the placeholder
-     * `slot: "(unstaged)"` — `submitRun` rewrites the slot to a real
-     * positional id (`transient-0`, …) before sending.
-     *
-     * For consumed Skills, the getter still returns the original
-     * transient ref so error messages can be precise — but using a
-     * consumed Skill in any submit/serialise path throws.
+     * The wire-level reference. Returns the SDK-private draft shape for
+     * un-materialized skills (kind:"draft", with name + contentHash).
+     * `client.submitRun` walks these and uploads to R2 before the run
+     * lands.
      */
     get ref() {
         return this.#ref;
     }
-    /**
-     * Reference an existing workspace skill by its id (e.g. `skl_abc123`).
-     * Does NOT validate the skill exists — that check happens on the next
-     * `submitRun`, where the BFF rejects unknown / soft-deleted ids before
-     * inserting the run row.
-     */
-    static fromId(id) {
-        if (typeof id !== "string" || !id) {
-            throw new Error("Skill.fromId: id is required");
-        }
-        return new Skill({ kind: "workspace", id });
+    /** True for local-bytes Skills that haven't been uploaded yet. */
+    get isDraft() {
+        return this.#ref.kind === "draft" && !this.#consumed;
+    }
+    get isConsumed() {
+        return this.#consumed;
     }
     /**
-     * Reference a provider built-in skill. The vendor decides what the
-     * `skillId` and `version` mean; the SDK only forwards the values
-     * verbatim to the platform.
+     * Reference a provider built-in skill (e.g. Anthropic Skills).
      */
     static provider(args) {
         if (!args || typeof args !== "object") {
@@ -122,14 +70,11 @@ export class Skill {
         return new Skill(ref);
     }
     /**
-     * Build an unstaged transient Skill from an inline files map. The SDK
-     * validates basic safety (no path traversal, size caps, has
-     * `SKILL.md`), deterministically zips the bundle, and computes the
-     * `sha256:<hex>` content hash that travels in the wire ref.
-     *
-     * The returned Skill carries the bytes privately. Pass it to
-     * `submitRun` for transient (per-run) use, or call `.upload(client)`
-     * to persist it as a workspace skill.
+     * Build a draft Skill from an inline files map. The SDK validates
+     * basic safety (no path traversal, size caps, has `SKILL.md`),
+     * deterministically zips the bundle, and computes the
+     * `sha256:<hex>` content hash. `client.submitRun` materializes
+     * these to R2 before the run lands.
      */
     static async fromFiles(args) {
         if (!args || typeof args !== "object") {
@@ -141,230 +86,51 @@ export class Skill {
         const bundled = bundleSkillFiles(args.files);
         const contentHash = await hashSkillBundle(bundled.zip);
         const ref = {
-            kind: "transient",
-            slot: UNSTAGED_SLOT,
+            kind: "draft",
             name: args.name,
             contentHash
         };
-        return new Skill(ref, undefined, bundled.zip);
+        return new Skill(ref, bundled.zip);
     }
     /**
-     * Read a local directory and build an unstaged transient Skill.
-     * Symlinks and non-regular files are skipped. Node-only.
-     *
-     * The returned Skill behaves identically to one built via
-     * `Skill.fromFiles` — pass it to `submitRun` for transient use, or
-     * call `.upload(client)` to persist as a workspace skill.
+     * Read a local directory and build a draft Skill. Symlinks and
+     * non-regular files are skipped. Node-only.
      */
     static async fromPath(rootDir, args) {
         const files = await readDirectoryAsFiles(rootDir);
         return Skill.fromFiles({ name: args.name, files });
     }
     /**
-     * Persist this unstaged transient Skill as a workspace skill and
-     * return a new `Skill` instance backed by the resulting `skl_*`
-     * record. After `upload` resolves successfully, the original
-     * instance is marked **consumed** — any further use throws a clear
-     * validation error.
-     *
-     * Only unstaged transient Skills can be uploaded. Calling this on a
-     * workspace-ref Skill, a provider-ref Skill, or a previously
-     * consumed Skill throws.
-     *
-     * Accepts either an `AntpathClient` (preferred) or its
-     * `SkillsClient` if the caller already has a handle to it.
-     */
-    async upload(client) {
-        if (this.#consumed) {
-            throw new Error(consumedMessage());
-        }
-        if (this.#ref.kind !== "transient" || !this.#transientBytes) {
-            throw new Error("Skill.upload: only unstaged transient Skills (built via Skill.fromFiles / Skill.fromPath) can be uploaded; " +
-                "use Skill.fromId(record.id) to reference an already-persisted skill");
-        }
-        const bytes = this.#transientBytes;
-        const strategy = chooseUploadStrategy(bytes.byteLength);
-        if (strategy === "chunked") {
-            // Large bundle: three-step TUS upload.
-            const chunkedClient = resolveChunkedUploader(client);
-            if (!chunkedClient) {
-                throw new Error("Skill.upload: bundle exceeds 6 MiB but the client does not support chunked uploads. " +
-                    "Pass an AntpathClient instance to enable chunked (TUS) upload.");
-            }
-            const { init, finalize } = chunkedClient;
-            const session = await init({
-                kind: "skill",
-                name: this.#ref.name,
-                sizeBytes: bytes.byteLength,
-                hash: this.#ref.contentHash
-            });
-            await uploadChunked({
-                bundle: bytes,
-                tusUrl: session.tusUrl,
-                tusToken: session.tusToken,
-                uploadHeaders: session.uploadHeaders,
-                hash: this.#ref.contentHash
-            });
-            await finalize({
-                assetId: session.assetId,
-                kind: "skill",
-                hash: this.#ref.contentHash,
-                storagePath: session.storagePath
-            });
-            this.#consumed = true;
-            return new Skill({ kind: "workspace", id: session.assetId });
-        }
-        // Small bundle: existing single-request multipart POST.
-        const uploader = resolveUploader(client);
-        const record = await uploader({ name: this.#ref.name, body: bytes });
-        // Only mark consumed AFTER a successful upload — a failed upload
-        // leaves the original instance reusable so the caller can retry.
-        this.#consumed = true;
-        return new Skill({ kind: "workspace", id: record.id }, record);
-    }
-    /**
-     * Persist this unstaged transient Skill as a workspace skill **only
-     * if** an existing skill with the same `(name, contentHash)` is not
-     * already live.
+     * Internal: yield the draft's bytes + metadata so `client.submitRun`
+     * can upload to R2. After this returns, the Skill is marked consumed
+     * so a second submitRun call against the same instance throws
+     * (avoid silently re-uploading; explicit re-construction is the
+     * supported retry pattern).
      *
-     * Flow:
-     *
-     *   1. Hash is already known from `Skill.fromFiles` / `fromPath`.
-     *   2. Call `client.skills.findByHash({ name, contentHash })`. If a
-     *      live row exists, mark this instance consumed and return a
-     *      new `Skill` backed by that record.
-     *   3. Otherwise call `upload(client)`.
-     *
-     * Returns either the existing or newly-created workspace Skill;
-     * callers do not need to branch.
-     *
-     * Only unstaged transient Skills can be `uploadIfChanged`. Calling
-     * this on a workspace-ref Skill, a provider-ref Skill, or a
-     * previously consumed Skill throws.
+     * Returns undefined for non-draft (provider / already-materialized)
+     * Skills.
      */
-    async uploadIfChanged(client) {
+    _takeDraftBundle() {
         if (this.#consumed) {
-            throw new Error(consumedMessage());
-        }
-        if (this.#ref.kind !== "transient" || !this.#transientBytes) {
-            throw new Error("Skill.uploadIfChanged: only unstaged transient Skills (built via Skill.fromFiles / Skill.fromPath) can be checked; " +
-                "use Skill.fromId(record.id) to reference an already-persisted skill");
+            throw new Error("Skill: cannot reuse a consumed Skill in submitRun. Build a fresh Skill via " +
+                "Skill.fromPath(...) / Skill.fromFiles(...) per submitRun call.");
         }
-        const lookup = resolveLookup(client);
-        if (lookup) {
-            const existing = await lookup({
-                name: this.#ref.name,
-                contentHash: this.#ref.contentHash
-            });
-            if (existing) {
-                this.#consumed = true;
-                return new Skill({ kind: "workspace", id: existing.id }, existing);
-            }
-        }
-        return this.upload(client);
-    }
-    /** True for `Skill.fromId(...)` and skills returned by `.upload(...)`. */
-    get isWorkspace() {
-        return this.#ref.kind === "workspace";
-    }
-    /** True for `Skill.provider(...)`. */
-    get isProvider() {
-        return this.#ref.kind === "provider";
-    }
-    /** True for any transient Skill (unstaged or consumed). */
-    get isTransient() {
-        return this.#ref.kind === "transient";
-    }
-    /**
-     * True only while the transient Skill still carries bytes and has
-     * not been consumed by `.upload(...)`. Unstaged Skills can be passed
-     * to `submitRun` or `.upload(client)`; consumed ones cannot.
-     */
-    get isUnstaged() {
-        return (this.#ref.kind === "transient" &&
-            this.#ref.slot === UNSTAGED_SLOT &&
-            !this.#consumed &&
-            this.#transientBytes !== undefined);
-    }
-    /** True after a successful `.upload(...)` — using this instance further throws. */
-    get isConsumed() {
-        return this.#consumed;
-    }
-    /**
-     * Internal: yield the unstaged transient bundle's payload so the
-     * client's `submitRun` can build a multipart part. Returns undefined
-     * for non-transient or consumed skills. Throws if the instance is
-     * marked consumed (a stronger signal than "no bytes").
-     *
-     * NOT part of the public API — the `_` prefix is a "do not call from
-     * user code" marker. Callers within the SDK pass the returned bytes
-     * into the multipart body once per `submitRun` invocation.
-     */
-    _takeUnstagedBundle() {
-        if (this.#consumed) {
-            throw new Error(consumedMessage());
-        }
-        if (!this.isUnstaged) {
-            return undefined;
-        }
-        if (this.#ref.kind !== "transient" || !this.#transientBytes) {
+        if (this.#ref.kind !== "draft" || !this.#inlineBytes) {
             return undefined;
         }
+        this.#consumed = true;
         return {
             name: this.#ref.name,
-            bytes: this.#transientBytes,
-            contentHash: this.#ref.contentHash
+            contentHash: this.#ref.contentHash,
+            bytes: this.#inlineBytes
         };
     }
-    /**
-     * JSON serialisation guard. Workspace and provider Skills serialise
-     * to their `ref`. Unstaged transient Skills throw — the bytes are not
-     * in the JSON, so a round-trip would silently drop them. Consumed
-     * Skills also throw, to surface the "you forgot to use the returned
-     * Skill from `.upload(...)`" mistake at the point it happens.
-     */
     toJSON() {
-        if (this.#consumed) {
-            throw new Error(consumedMessage());
-        }
-        if (this.isUnstaged) {
-            throw new Error("Cannot JSON-serialise an unstaged transient Skill — the bytes are not in the JSON. " +
-                "Persist via skill.upload(client) and serialise the returned (workspace) Skill, " +
-                "or pass the unstaged Skill directly to submitRun without serialising.");
+        if (this.#ref.kind === "draft") {
+            throw new Error("Skill: draft Skills cannot be JSON-serialised — they only become wire refs when " +
+                "client.submitRun uploads the bytes to R2.");
         }
         return this.#ref;
     }
 }
-/** Sentinel slot id used by unstaged transient Skills. */
-const UNSTAGED_SLOT = "(unstaged)";
-function resolveChunkedUploader(client) {
-    return client._chunkedUpload;
-}
-function resolveUploader(client) {
-    const direct = client._uploadSkillBundle;
-    if (typeof direct === "function") {
-        return direct.bind(client);
-    }
-    const nested = client.skills?._uploadSkillBundle;
-    if (typeof nested === "function") {
-        return nested.bind(client.skills);
-    }
-    throw new Error("Skill.upload: client argument does not expose an upload entry point — " +
-        "pass the AntpathClient instance or its `client.skills`");
-}
-function resolveLookup(client) {
-    const nested = client.skills?.findByHash;
-    if (typeof nested === "function") {
-        return nested.bind(client.skills);
-    }
-    const direct = client.findByHash;
-    if (typeof direct === "function") {
-        return direct.bind(client);
-    }
-    return undefined;
-}
-function consumedMessage() {
-    return ("this Skill was already uploaded via skill.upload(client); use the returned Skill or " +
-        "Skill.fromId(record.id) for subsequent runs");
-}
 //# sourceMappingURL=skill.js.map

package/dist/skill.js.map

@@ -1 +1 @@
-{"version":3,"file":"skill.js","sourceRoot":"","sources":["../src/skill.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAKnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAmB,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAExE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0DG;AACH,MAAM,OAAO,KAAK;IAChB,2FAA2F;IAClF,MAAM,CAA0B;IAEhC,IAAI,CAAW;IACf,eAAe,CAAyB;IACjD,SAAS,GAAY,KAAK,CAAC;IAE3B;;;OAGG;IACH,YAAY,GAAa,EAAE,MAAoB,EAAE,cAA2B;QAC1E,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;IACxC,CAAC;IAED;;;;;;;;;OASG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,MAAM,CAAC,EAAU;QACtB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CAAC,IAIf;QACC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,GAAG,GAAqB,IAAI,CAAC,OAAO;YACxC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACzF,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACrE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAA2D;QAChF,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,oCAAoC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,GAAG,GAAsB;YAC7B,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW;SACZ,CAAC;QACF,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAe,EAAE,IAA+B;QACpE,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,KAAK,CAAC,MAAM,CAAC,MAAqB;QAChC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CACb,6GAA6G;gBAC3G,qEAAqE,CACxE,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,CAAC;QACnC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAExD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,uCAAuC;YACvC,MAAM,aAAa,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;YACrD,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CACb,sFAAsF;oBACpF,gEAAgE,CACnE,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC;YACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC;gBACzB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;gBACpB,SAAS,EAAE,KAAK,CAAC,UAAU;gBAC3B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;aAC5B,CAAC,CAAC;YACH,MAAM,aAAa,CAAC;gBAClB,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;aAC5B,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC;gBACb,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;gBAC3B,WAAW,EAAE,OAAO,CAAC,WAAW;aACjC,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,OAAO,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC;QAED,wDAAwD;QACxD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,iEAAiE;QACjE,iEAAiE;QACjE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,OAAO,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,eAAe,CAAC,MAAmC;QACvD,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CACb,qHAAqH;gBACnH,qEAAqE,CACxE,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC;gBAC5B,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;gBACpB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;aACnC,CAAC,CAAC;YACH,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;gBACtB,OAAO,IAAI,KAAK,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAED,0EAA0E;IAC1E,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC;IACxC,CAAC;IAED,sCAAsC;IACtC,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC;IACvC,CAAC;IAED,2DAA2D;IAC3D,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACH,IAAI,UAAU;QACZ,OAAO,CACL,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW;YAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa;YAChC,CAAC,IAAI,CAAC,SAAS;YACf,IAAI,CAAC,eAAe,KAAK,SAAS,CACnC,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;;;;;;;;OASG;IACH,mBAAmB;QACjB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YAC5D,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACpB,KAAK,EAAE,IAAI,CAAC,eAAe;YAC3B,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;SACnC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,MAAM;QACJ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,qFAAqF;gBACnF,iFAAiF;gBACjF,uEAAuE,CAC1E,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;CACF;AAED,0DAA0D;AAC1D,MAAM,aAAa,GAAG,YAAY,CAAC;AAkEnC,SAAS,sBAAsB,CAAC,MAAqB;IACnD,OAAO,MAAM,CAAC,cAAc,CAAC;AAC/B,CAAC;AAED,SAAS,eAAe,CAAC,MAAqB;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,kBAAkB,CAAC;IACzC,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACjD,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,IAAI,KAAK,CACb,wEAAwE;QACtE,wDAAwD,CAC3D,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAAmB;IAGxC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC;IACzC,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC;IACjC,IAAI,OAAO,MAAM,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,CACL,sFAAsF;QACpF,6CAA6C,CAChD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"skill.js","sourceRoot":"","sources":["../src/skill.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAGnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAmB,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,KAAK;IACP,IAAI,CAA2B;IAC/B,YAAY,CAAyB;IAC9C,SAAS,GAAG,KAAK,CAAC;IAElB;;;OAGG;IACH,YAAY,GAA6B,EAAE,WAAwB;QACjE,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;IAClC,CAAC;IAED;;;;;OAKG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,kEAAkE;IAClE,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;IACvD,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,QAAQ,CAAC,IAIf;QACC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,GAAG,GAAqB,IAAI,CAAC,OAAO;YACxC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACzF,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACrE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED;;;;;;OAMG;IACH,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAA2D;QAChF,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,oCAAoC,kBAAkB,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,GAAG,GAAkB;YACzB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,WAAW;SACZ,CAAC;QACF,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAe,EAAE,IAA+B;QACpE,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;;;;OASG;IACH,gBAAgB;QACd,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,6EAA6E;gBAC3E,gEAAgE,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACrD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACpB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;YAClC,KAAK,EAAE,IAAI,CAAC,YAAY;SACzB,CAAC;IACJ,CAAC;IAED,MAAM;QACJ,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CACb,kFAAkF;gBAChF,2CAA2C,CAC9C,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/version.d.ts

@@ -9,4 +9,4 @@
  *    reports carry the exact build the failure came from.
  *  - Future User-Agent header on outbound SDK requests.
  */
-export declare const SDK_VERSION = "0.10.15";
+export declare const SDK_VERSION = "0.11.0";

package/dist/version.js

@@ -9,5 +9,5 @@
  *    reports carry the exact build the failure came from.
  *  - Future User-Agent header on outbound SDK requests.
  */
-export const SDK_VERSION = "0.10.15";
+export const SDK_VERSION = "0.11.0";
 //# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -1 +1 @@
-{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAC"}
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAC"}

package/docs/cleanup.md

@@ -15,4 +15,4 @@ const ref = await client.submitRun(template, {
 
 The corresponding CLI flag is `--cleanup retain` (default `delete`).
 
-A retained session remains visible to Anthropic until the workspace's retention policy reclaims it. The dashboard records `cleanupStatus` (`succeeded` for delete, `retained` for retain, `failed` for crash-stranded resources) and `provider_resources` rows so a future repair operation can recover orphaned resources when needed.
+A retained session remains visible to Anthropic until the workspace's retention policy reclaims it. antpath records `cleanupStatus` (`succeeded` for delete, `retained` for retain, `failed` for crash-stranded resources) and `provider_resources` rows so a future repair operation can recover orphaned resources when needed.

package/docs/credentials.md

@@ -6,7 +6,7 @@ title: Credentials
 
 antpath does not store provider keys or MCP credential values across runs.
 
-The caller passes a workspace-scoped SDK token and provider key inline on every `submitRun` call. The dashboard vaults the bundle for the lifetime of a single run and destroys it at cleanup. MCP credentials and skill references travel the same way.
+The caller passes a workspace-scoped SDK token and provider key inline on every `submitRun` call. antpath vaults the bundle for the lifetime of a single run and destroys it at cleanup. MCP credentials and skill references travel the same way.
 
 MVP credential types for MCP auth:
 
@@ -126,7 +126,7 @@ When a Template uses `limited` networking, the platform host must appear in `all
 
 ```ts
 const allowedHosts = buildPlatformAllowedHosts({
-  dashboardBaseUrl: "https://dashboard.antpath.dev",
+  baseUrl: "https://api.antpath.ai",
   extraHosts: ["api.stripe.com"]
 });
 ```

package/docs/events.md

@@ -4,7 +4,7 @@ title: Events
 
 # Events
 
-Claude Managed Agents sessions run autonomously on Anthropic's infrastructure. They are **non-blocking**: the worker polls the provider session while the agent thinks, calls tools, and emits messages on its own schedule, and persists every captured event to the dashboard. The SDK and CLI observe the durable event timeline from the dashboard — there is no in-process tool-approval hook (`permission_policy` is `always_allow`).
+Claude Managed Agents sessions run autonomously on Anthropic's infrastructure. They are **non-blocking**: the worker polls the provider session while the agent thinks, calls tools, and emits messages on its own schedule, and persists every captured event to antpath. The SDK and CLI observe the durable event timeline from antpath — there is no in-process tool-approval hook (`permission_policy` is `always_allow`).
 
 ## Two ways to consume events
 
@@ -15,7 +15,7 @@ const events = await ref.events();
 
 ```ts
 // Stream live: yields each event exactly once, stops when the run reaches
-// a terminal status. Backed by polling the dashboard events endpoint.
+// a terminal status. Backed by polling the antpath events endpoint.
 for await (const event of ref.stream({ intervalMs: 1000 })) {
   if (event.type === "agent.message") {
     // ...
@@ -25,24 +25,24 @@ for await (const event of ref.stream({ intervalMs: 1000 })) {
 
 > **Transport.** `stream()` polls under the hood — it issues `GET
 > /api/runs/:id/events?since=…` calls at `intervalMs` until the run
-> reaches a terminal status. The dashboard BFF also exposes an SSE
-> endpoint (`GET /api/runs/:id/events/stream`) that the dashboard UI
-> consumes; an SSE-backed SDK transport is on the public backlog. For
+> reaches a terminal status. antpath also exposes an SSE endpoint
+> (`GET /api/runs/:id/events/stream`) that the dashboard UI consumes;
+> an SSE-backed SDK transport is on the public backlog. For
 > latency-sensitive consumers the polling baseline is acceptable down
 > to about 500 ms.
 
 The CLI mirrors the same surface:
 
 ```bash
-antpath events <run-id> --api-token … [--dashboard-url …]            # snapshot
-antpath events <run-id> --follow --api-token … [--dashboard-url …]   # stream until terminal
+antpath events <run-id> --api-token … [--antpath-url …]            # snapshot
+antpath events <run-id> --follow --api-token … [--antpath-url …]   # stream until terminal
 ```
 
 Both surfaces observe the same events. A subscriber attached after `submitRun()` returns replays the events it missed, then continues live.
 
 ## Event shape
 
-Events are typed as the discriminated `RunEvent` union — agent messages, tool uses, tool results, session status transitions, sdk lifecycle events, span events. The dashboard records the raw provider payload **after** secret redaction and structural sanitization, so the bytes you see in `event.payload` never contain the Anthropic key, MCP credentials, or proxy bearer that were supplied to `submitRun`.
+Events are typed as the discriminated `RunEvent` union — agent messages, tool uses, tool results, session status transitions, sdk lifecycle events, span events. antpath records the raw provider payload **after** secret redaction and structural sanitization, so the bytes you see in `event.payload` never contain the Anthropic key, MCP credentials, or proxy bearer that were supplied to `submitRun`.
 
 ## Typed helpers
 

package/docs/outputs.md

@@ -6,6 +6,8 @@ title: Outputs
 
 Every run produces durable metadata (status, events, snapshots, cleanup state). File bytes are **opt-in** via the submission's `outputDirs` field. There is a single method, `RunRef.download()`, that returns the whole run — metadata plus opt-in file bytes — as a streaming zip.
 
+> Inside the container, the path `/mnt/session/outputs` is also exposed as `$ANTPATH_OUTPUTS` (sourceable from `RUNTIME.env`) and as `runtimeManifest.envVars.ANTPATH_OUTPUTS` on the SDK-side `RunRef`. See [runtime environment](../../../references/runtime-environment.md).
+
 ## Quickstart
 
 ```ts

package/docs/quickstart.md

@@ -13,7 +13,7 @@ import { AntpathClient } from "antpath";
 
 const client = new AntpathClient({
   apiToken: process.env.ANTPATH_API_TOKEN!
-  // baseUrl defaults to https://www.antpath.ai — set it for self-hosted deployments.
+  // baseUrl defaults to https://api.antpath.ai — set it for self-hosted deployments.
 });
 
 const ref = await client.submitRun({
@@ -54,7 +54,23 @@ antpath run \
   --follow
 ```
 
-For a config-file flow, pass `--config <path>` with a JSON file matching the `Blueprint` shape (`{ model, system?, prompt, skills?, mcpServers?, environment?, cleanup?, proxyEndpoints?, metadata? }`). Both surfaces hit the same dashboard BFF and operate on the same durable run records — pick whichever is most convenient.
+For a config-file flow, pass `--config <path>` with a JSON file matching the `Blueprint` shape (`{ model, system?, prompt, skills?, mcpServers?, environment?, cleanup?, proxyEndpoints?, metadata? }`). Both surfaces hit the same antpath backend and operate on the same durable run records — pick whichever is most convenient.
+
+## Where things go: customer → primitive mapping
+
+Every kind of thing you want to ship at run time has exactly one right primitive in the SDK. Reach for the right one rather than rolling your own wrapper.
+
+| What you have | Primitive | What it does |
+|---|---|---|
+| Non-secret paths or config (`BROLL_STORE`, mode flags) | `environment.envVars` | Mounted as `RUNTIME.env` / `RUNTIME.json`; `__KEY__` substitution in agent-facing markdown; echoed back as `ref.runtimeManifest.envVars` |
+| Upstream HTTPS API keys (TMDB, Brave, Tavily, …) | `ProxyEndpoint` | Credentials live server-side; antpath proxy injects them on outbound calls. The key never enters the container. |
+| MCP server credentials | `secrets.mcpServers` | Anthropic Vault, attached per session |
+| Anthropic API key | `secrets.anthropic.apiKey` | Required on every `submitRun`; per-run vault entry |
+| Non-secret reference data folders (transcripts, persona docs, PDFs) | `File.fromPath('./customer-folder/')` | Mounted under `/mnt/session/uploads/antpath/files/<f_id>/<rel>` and listed in the synthetic first user message |
+| Executable skill code (a `.pyz` wrapper, scripts, prompts) | `Skill.fromPath('./skills/my-skill/')` | Registered with Anthropic's Skills API; auto-discovered by the agent |
+| Agent instructions file | `AgentsMd.fromPath('./AGENTS.md')` | Prepended as the first user turn |
+
+For the full design behind `environment.envVars`, the `RUNTIME.{json,env}` mounts, and `__KEY__` substitution, see [`references/runtime-environment.md`](../../../references/runtime-environment.md). For `Skill` / `AgentsMd` / `File` semantics, see [`references/agent-context-uploads.md`](../../../references/agent-context-uploads.md).
 
 ## Safe retries with `idempotencyKey`
 

package/docs/skills.md

@@ -16,9 +16,7 @@ Skill inputs accepted by the platform:
 - workspace skill bundles (persistent, referenced by `skl_*` id);
 - inline-supplied bundles passed directly at `submitRun` — these
   persist on antpath as workspace skills with auto-suffixed names,
-  one row per submission (see "Inline supply" below);
-- inline skill content (markdown strings or local files) mounted as
-  session resources for legacy `local` / `inline` skill defs.
+  one row per submission (see "Inline supply" below).
 
 **Routing at session create:** bundles that contain `SKILL.md` at the
 bundle root are registered with Anthropic's Skills API

package/docs/templates.md

@@ -11,14 +11,15 @@ Allowed `Blueprint` fields:
 - `model` — required.
 - `prompt` — required (string or array of strings).
 - `system` — optional system message.
-- `skills` — array of `Skill` instances (workspace, provider, or inline).
-- `mcpServers` — array of `McpServer` instances (headers are split into `secrets.mcpServers` server-side).
-- `proxyEndpoints` — array of `ProxyEndpoint` instances.
-- `agentsMd` / `files` — array of `AgentsMd` / `File` instances.
-- `environment` — packages + networking + `outputDirs`.
+- `skills` — array of `SkillRef` (workspace, provider, or inline).
+- `mcpServers` — array of `McpServerRef` (headers are split into `secrets.mcpServers` server-side).
+- `proxyEndpoints` — array of `PlatformProxyEndpoint`.
+- `environment` — `{ networking?, packages?, envVars? }`. See [runtime environment](../../../references/runtime-environment.md) for the `envVars` surface and the merged `RUNTIME.env` / `RUNTIME.json` mounts.
 - `cleanup` — `{ session: "retain" | "delete" }`.
 - `metadata` — non-secret structured metadata.
 
+`agentsMd`, `files`, and `outputDirs` are top-level `submitRun` options, not `Blueprint` fields — they carry bytes / behaviour that don't belong in a reusable credential-free config.
+
 Secrets never live in a `Blueprint`. Pass credentials through `submitRun({ ...blueprint, secrets, proxyEndpointAuth })` (SDK) or the equivalent host-mode flags (`--anthropic-api-key`, `--mcp-auth`, `--proxy-auth`).
 
 ## `defineRun` — typed, reusable factory

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "antpath",
-  "version": "0.10.15",
+  "version": "0.11.0",
   "description": "TypeScript SDK for running autonomous Claude Managed Agents sessions.",
+  "license": "Apache-2.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/weilueluo/antpath.git"

package/dist/_shared/secrets.d.ts

@@ -1,7 +0,0 @@
-export interface RedactedSecret {
-    expose(): string;
-    toJSON(): string;
-    toString(): string;
-}
-export declare function redactedSecret(value: string): RedactedSecret;
-export declare function redactKnownSecrets(input: string, secrets: readonly RedactedSecret[]): string;