Public Delete Runs

Delete finished runs with everything they own (inputs and outputs, logs, progress, traces, files no other run references). Select by run_ids or by filters — filters.to_date deletes runs created before it. Runs still queued, running or awaiting a human are listed under errors and left alone. Usage analytics survive: billing is unaffected. Needs a key carrying resource:delete_history.