@aexhq/sdk 0.18.1 → 0.20.0

package/README.md

@@ -63,7 +63,7 @@ const aex = new AgentExecutor({
   // baseUrl defaults to https://api.aex.dev - set it for local or staging planes.
 });
 
-const runId = await aex.submitRun({
+const runId = await aex.submit({
   model: RunModels.CLAUDE_HAIKU_4_5,
   system: "You are a concise automation agent.",
   prompt: "Write a short answer about agent-first SDK design.",
@@ -94,7 +94,7 @@ function summarise(topic: string) {
   };
 }
 
-const runId = await aex.submitRun({
+const runId = await aex.submit({
   ...summarise("agent-first SDK design"),
   secrets: { apiKey: process.env.ANTHROPIC_API_KEY! }
 });

package/dist/_contracts/models.d.ts

@@ -1,20 +1,90 @@
 import type { RunProvider } from "./submission.js";
 /**
- * Closed set of model ids accepted by the public run-submission schema.
+ * Source of truth for the closed model set: each canonical model id maps to the
+ * upstream providers that can serve it and the **provider-native** model string
+ * each one expects.
  *
- * The provider-proxy still sends the model id through to the selected upstream
- * provider, but callers cannot submit arbitrary strings. Additions belong here
- * first so SDK types, CLI validation, docs examples, and platform parsing move
- * together.
+ * `Models.*` / `RUN_MODELS` are aex's own **canonical, provider-neutral**
+ * identifiers — they are NOT the strings sent to a provider. The platform
+ * translates a `(canonical model, provider)` pair to the native id via
+ * {@link resolveProviderModelId} when it builds the run's session manifest. The
+ * same canonical model can therefore be served by more than one provider (e.g.
+ * `gpt-4o-mini` via `openai` *or* `openrouter`), with a different native string
+ * per provider.
+ *
+ * Ordering matters: the **first** provider listed for a model is its default
+ * (see {@link providerForModel}) — list the native vendor before `openrouter`.
+ * Additions belong here first so SDK types, CLI validation, docs examples, and
+ * platform parsing all move together.
  */
-export declare const RUN_MODELS: readonly ["claude-haiku-4-5", "claude-3-5-haiku-latest", "claude-3-5-sonnet-latest", "deepseek-v4-flash", "deepseek-v4-pro", "deepseek-chat", "deepseek-reasoner", "gpt-4.1", "gpt-4o-mini", "gemini-2.0-flash", "gemini-2.5-flash", "mistral-large-latest", "mistral-small-latest", "openai/gpt-4o-mini", "openai/gpt-4o", "google/gemini-2.0-flash-001"];
-export type RunModel = (typeof RUN_MODELS)[number];
+export declare const MODEL_PROVIDER_IDS: {
+    readonly "claude-haiku-4-5": {
+        readonly anthropic: "claude-haiku-4-5";
+    };
+    readonly "claude-3-5-haiku-latest": {
+        readonly anthropic: "claude-3-5-haiku-latest";
+    };
+    readonly "claude-3-5-sonnet-latest": {
+        readonly anthropic: "claude-3-5-sonnet-latest";
+    };
+    readonly "deepseek-v4-flash": {
+        readonly deepseek: "deepseek-v4-flash";
+    };
+    readonly "deepseek-v4-pro": {
+        readonly deepseek: "deepseek-v4-pro";
+    };
+    readonly "deepseek-chat": {
+        readonly deepseek: "deepseek-chat";
+    };
+    readonly "deepseek-reasoner": {
+        readonly deepseek: "deepseek-reasoner";
+    };
+    readonly "gpt-4.1": {
+        readonly openai: "gpt-4.1";
+    };
+    readonly "gpt-4o-mini": {
+        readonly openai: "gpt-4o-mini";
+        readonly openrouter: "openai/gpt-4o-mini";
+    };
+    readonly "gpt-4o": {
+        readonly openrouter: "openai/gpt-4o";
+    };
+    readonly "gemini-2.0-flash": {
+        readonly gemini: "gemini-2.0-flash";
+        readonly openrouter: "google/gemini-2.0-flash-001";
+    };
+    readonly "gemini-2.5-flash": {
+        readonly gemini: "gemini-2.5-flash";
+    };
+    readonly "mistral-large-latest": {
+        readonly mistral: "mistral-large-latest";
+    };
+    readonly "mistral-small-latest": {
+        readonly mistral: "mistral-small-latest";
+    };
+    readonly "doubao-seed-pro": {
+        readonly doubao: "doubao-seed-1-8-251228";
+        readonly "doubao-cn": "doubao-seed-1-8-251228";
+    };
+    readonly "doubao-seed-flash": {
+        readonly doubao: "doubao-seed-1-6-flash-250828";
+        readonly "doubao-cn": "doubao-seed-1-6-flash-250828";
+    };
+};
+/**
+ * Closed set of canonical model ids accepted by the public run-submission
+ * schema. Derived from {@link MODEL_PROVIDER_IDS} so the two never drift.
+ */
+export type RunModel = keyof typeof MODEL_PROVIDER_IDS;
+export declare const RUN_MODELS: readonly RunModel[];
 /**
  * Symbol-style accessors for the closed model set. Prefer these over raw
  * strings so an invalid token is a compile error, not a runtime 400 — e.g.
- * `Models.CLAUDE_HAIKU_4_5`. The upstream provider is a pure function of the
- * model ({@link providerForModel}), so picking a model fully determines
- * routing; callers never pass `provider` separately.
+ * `Models.CLAUDE_HAIKU_4_5`. These are aex's **canonical** ids, not the native
+ * strings sent upstream; the platform translates them per provider (see
+ * {@link MODEL_PROVIDER_IDS} / {@link resolveProviderModelId}). When a model is
+ * served by more than one provider, pair it with an explicit {@link Providers}
+ * value; otherwise the single (default) provider is used.
  */
 export declare const Models: {
     /** Claude Haiku 4.5 — Anthropic. */
@@ -42,9 +112,11 @@ export declare const Models: {
     readonly DEEPSEEK_REASONER: "deepseek-reasoner";
     /** GPT-4.1 — OpenAI. */
     readonly GPT_4_1: "gpt-4.1";
-    /** GPT-4o mini — OpenAI. */
+    /** GPT-4o mini — OpenAI, or via OpenRouter (`provider: Providers.OPENROUTER`). */
     readonly GPT_4O_MINI: "gpt-4o-mini";
-    /** Gemini 2.0 Flash — Gemini. */
+    /** GPT-4o — via OpenRouter (`provider: Providers.OPENROUTER`). */
+    readonly GPT_4O: "gpt-4o";
+    /** Gemini 2.0 Flash — Gemini, or via OpenRouter (`provider: Providers.OPENROUTER`). */
     readonly GEMINI_2_0_FLASH: "gemini-2.0-flash";
     /** Gemini 2.5 Flash — Gemini. */
     readonly GEMINI_2_5_FLASH: "gemini-2.5-flash";
@@ -52,12 +124,18 @@ export declare const Models: {
     readonly MISTRAL_LARGE_LATEST: "mistral-large-latest";
     /** Mistral Small (latest) — Mistral. */
     readonly MISTRAL_SMALL_LATEST: "mistral-small-latest";
-    /** GPT-4o mini via OpenRouter (provider-prefixed) — cheap, tool-obedient. */
-    readonly OPENROUTER_GPT_4O_MINI: "openai/gpt-4o-mini";
-    /** GPT-4o via OpenRouter (provider-prefixed) — stronger, tool-obedient. */
-    readonly OPENROUTER_GPT_4O: "openai/gpt-4o";
-    /** Gemini 2.0 Flash via OpenRouter (provider-prefixed) — cheap, tool-obedient. */
-    readonly OPENROUTER_GEMINI_2_0_FLASH: "google/gemini-2.0-flash-001";
+    /**
+     * Doubao Seed 1.8 — ByteDance, via the official Ark API. Default routes
+     * through the international BytePlus gateway (`Providers.DOUBAO`); pair with
+     * `Providers.DOUBAO_CN` for the China Volcengine gateway.
+     */
+    readonly DOUBAO_SEED_PRO: "doubao-seed-pro";
+    /**
+     * Doubao Seed 1.6 Flash — ByteDance, via the official Ark API (fast/cheap).
+     * Default `Providers.DOUBAO` (international); pair with `Providers.DOUBAO_CN`
+     * for China.
+     */
+    readonly DOUBAO_SEED_FLASH: "doubao-seed-flash";
 };
 /**
  * Back-compat alias for {@link Models}. Existing imports of `RunModels`
@@ -89,9 +167,11 @@ export declare const RunModels: {
     readonly DEEPSEEK_REASONER: "deepseek-reasoner";
     /** GPT-4.1 — OpenAI. */
     readonly GPT_4_1: "gpt-4.1";
-    /** GPT-4o mini — OpenAI. */
+    /** GPT-4o mini — OpenAI, or via OpenRouter (`provider: Providers.OPENROUTER`). */
     readonly GPT_4O_MINI: "gpt-4o-mini";
-    /** Gemini 2.0 Flash — Gemini. */
+    /** GPT-4o — via OpenRouter (`provider: Providers.OPENROUTER`). */
+    readonly GPT_4O: "gpt-4o";
+    /** Gemini 2.0 Flash — Gemini, or via OpenRouter (`provider: Providers.OPENROUTER`). */
     readonly GEMINI_2_0_FLASH: "gemini-2.0-flash";
     /** Gemini 2.5 Flash — Gemini. */
     readonly GEMINI_2_5_FLASH: "gemini-2.5-flash";
@@ -99,28 +179,43 @@ export declare const RunModels: {
     readonly MISTRAL_LARGE_LATEST: "mistral-large-latest";
     /** Mistral Small (latest) — Mistral. */
     readonly MISTRAL_SMALL_LATEST: "mistral-small-latest";
-    /** GPT-4o mini via OpenRouter (provider-prefixed) — cheap, tool-obedient. */
-    readonly OPENROUTER_GPT_4O_MINI: "openai/gpt-4o-mini";
-    /** GPT-4o via OpenRouter (provider-prefixed) — stronger, tool-obedient. */
-    readonly OPENROUTER_GPT_4O: "openai/gpt-4o";
-    /** Gemini 2.0 Flash via OpenRouter (provider-prefixed) — cheap, tool-obedient. */
-    readonly OPENROUTER_GEMINI_2_0_FLASH: "google/gemini-2.0-flash-001";
-};
-export declare const RUN_MODELS_BY_PROVIDER: {
-    readonly anthropic: readonly ["claude-haiku-4-5", "claude-3-5-haiku-latest", "claude-3-5-sonnet-latest"];
-    readonly deepseek: readonly ["deepseek-v4-flash", "deepseek-v4-pro", "deepseek-chat", "deepseek-reasoner"];
-    readonly openai: readonly ["gpt-4.1", "gpt-4o-mini"];
-    readonly gemini: readonly ["gemini-2.0-flash", "gemini-2.5-flash"];
-    readonly mistral: readonly ["mistral-large-latest", "mistral-small-latest"];
-    readonly openrouter: readonly ["openai/gpt-4o-mini", "openai/gpt-4o", "google/gemini-2.0-flash-001"];
+    /**
+     * Doubao Seed 1.8 — ByteDance, via the official Ark API. Default routes
+     * through the international BytePlus gateway (`Providers.DOUBAO`); pair with
+     * `Providers.DOUBAO_CN` for the China Volcengine gateway.
+     */
+    readonly DOUBAO_SEED_PRO: "doubao-seed-pro";
+    /**
+     * Doubao Seed 1.6 Flash — ByteDance, via the official Ark API (fast/cheap).
+     * Default `Providers.DOUBAO` (international); pair with `Providers.DOUBAO_CN`
+     * for China.
+     */
+    readonly DOUBAO_SEED_FLASH: "doubao-seed-flash";
 };
 /**
- * Resolve the upstream provider for a model id. Returns `undefined` when the
- * input is not a known {@link RunModel} (so the SDK can fall back to the
- * default and let the server reject the model). Total over the closed model
- * set, so any `RunModel` resolves.
+ * Provider → canonical models that provider can serve. Derived from
+ * {@link MODEL_PROVIDER_IDS}; every provider currently serves at least one
+ * model, so all {@link RunProvider} keys are present.
+ */
+export declare const RUN_MODELS_BY_PROVIDER: Readonly<Record<RunProvider, readonly RunModel[]>>;
+/**
+ * All upstream providers that can serve a model id, in declaration order.
+ * Returns `[]` for an unknown model.
+ */
+export declare function providersForModel(model: string): readonly RunProvider[];
+/**
+ * The default upstream provider for a model id — the first provider declared
+ * for it in {@link MODEL_PROVIDER_IDS}. Returns `undefined` when the input is
+ * not a known {@link RunModel} (so the SDK can fall back to the default and let
+ * the server reject the model).
  */
 export declare function providerForModel(model: string): RunProvider | undefined;
+/**
+ * Translate a canonical model id + provider into the provider-native model
+ * string the upstream API expects (e.g. `("gpt-4o-mini", "openrouter")` →
+ * `"openai/gpt-4o-mini"`). Throws when the provider does not serve the model.
+ */
+export declare function resolveProviderModelId(model: string, provider: RunProvider): string;
 export declare function isRunModel(input: unknown): input is RunModel;
 export declare function parseRunModel(input: unknown, field?: string): RunModel;
 export declare function assertRunModelMatchesProvider(provider: RunProvider, model: RunModel, field?: string): void;

package/dist/_contracts/models.js

@@ -1,35 +1,60 @@
 /**
- * Closed set of model ids accepted by the public run-submission schema.
+ * Source of truth for the closed model set: each canonical model id maps to the
+ * upstream providers that can serve it and the **provider-native** model string
+ * each one expects.
  *
- * The provider-proxy still sends the model id through to the selected upstream
- * provider, but callers cannot submit arbitrary strings. Additions belong here
- * first so SDK types, CLI validation, docs examples, and platform parsing move
- * together.
+ * `Models.*` / `RUN_MODELS` are aex's own **canonical, provider-neutral**
+ * identifiers — they are NOT the strings sent to a provider. The platform
+ * translates a `(canonical model, provider)` pair to the native id via
+ * {@link resolveProviderModelId} when it builds the run's session manifest. The
+ * same canonical model can therefore be served by more than one provider (e.g.
+ * `gpt-4o-mini` via `openai` *or* `openrouter`), with a different native string
+ * per provider.
+ *
+ * Ordering matters: the **first** provider listed for a model is its default
+ * (see {@link providerForModel}) — list the native vendor before `openrouter`.
+ * Additions belong here first so SDK types, CLI validation, docs examples, and
+ * platform parsing all move together.
  */
-export const RUN_MODELS = [
-    "claude-haiku-4-5",
-    "claude-3-5-haiku-latest",
-    "claude-3-5-sonnet-latest",
-    "deepseek-v4-flash",
-    "deepseek-v4-pro",
-    "deepseek-chat",
-    "deepseek-reasoner",
-    "gpt-4.1",
-    "gpt-4o-mini",
-    "gemini-2.0-flash",
-    "gemini-2.5-flash",
-    "mistral-large-latest",
-    "mistral-small-latest",
-    "openai/gpt-4o-mini",
-    "openai/gpt-4o",
-    "google/gemini-2.0-flash-001"
-];
+export const MODEL_PROVIDER_IDS = {
+    "claude-haiku-4-5": { anthropic: "claude-haiku-4-5" },
+    "claude-3-5-haiku-latest": { anthropic: "claude-3-5-haiku-latest" },
+    "claude-3-5-sonnet-latest": { anthropic: "claude-3-5-sonnet-latest" },
+    "deepseek-v4-flash": { deepseek: "deepseek-v4-flash" },
+    "deepseek-v4-pro": { deepseek: "deepseek-v4-pro" },
+    "deepseek-chat": { deepseek: "deepseek-chat" },
+    "deepseek-reasoner": { deepseek: "deepseek-reasoner" },
+    "gpt-4.1": { openai: "gpt-4.1" },
+    "gpt-4o-mini": { openai: "gpt-4o-mini", openrouter: "openai/gpt-4o-mini" },
+    "gpt-4o": { openrouter: "openai/gpt-4o" },
+    "gemini-2.0-flash": { gemini: "gemini-2.0-flash", openrouter: "google/gemini-2.0-flash-001" },
+    "gemini-2.5-flash": { gemini: "gemini-2.5-flash" },
+    "mistral-large-latest": { mistral: "mistral-large-latest" },
+    "mistral-small-latest": { mistral: "mistral-small-latest" },
+    // Doubao (ByteDance) via the official Ark API. Served by both the
+    // international BytePlus ModelArk gateway (`doubao`, the default) and the
+    // China Volcengine Ark gateway (`doubao-cn`). Ark accepts the API-format
+    // model NAME directly in the chat-completions `model` field (no `ep-…`
+    // inference-endpoint id). The native strings are the same Ark catalog ids on
+    // both gateways; BytePlus per-account availability is confirmed at live-verify
+    // (both providers ship `live-unverified` until then — provider-support.ts).
+    //   pro   — Doubao Seed 1.8 (flagship, 256K context).
+    //   flash — Doubao Seed 1.6 Flash (fast/cheap, 256K context).
+    "doubao-seed-pro": { doubao: "doubao-seed-1-8-251228", "doubao-cn": "doubao-seed-1-8-251228" },
+    "doubao-seed-flash": {
+        doubao: "doubao-seed-1-6-flash-250828",
+        "doubao-cn": "doubao-seed-1-6-flash-250828"
+    }
+};
+export const RUN_MODELS = Object.keys(MODEL_PROVIDER_IDS);
 /**
  * Symbol-style accessors for the closed model set. Prefer these over raw
  * strings so an invalid token is a compile error, not a runtime 400 — e.g.
- * `Models.CLAUDE_HAIKU_4_5`. The upstream provider is a pure function of the
- * model ({@link providerForModel}), so picking a model fully determines
- * routing; callers never pass `provider` separately.
+ * `Models.CLAUDE_HAIKU_4_5`. These are aex's **canonical** ids, not the native
+ * strings sent upstream; the platform translates them per provider (see
+ * {@link MODEL_PROVIDER_IDS} / {@link resolveProviderModelId}). When a model is
+ * served by more than one provider, pair it with an explicit {@link Providers}
+ * value; otherwise the single (default) provider is used.
  */
 export const Models = {
     /** Claude Haiku 4.5 — Anthropic. */
@@ -57,9 +82,11 @@ export const Models = {
     DEEPSEEK_REASONER: "deepseek-reasoner",
     /** GPT-4.1 — OpenAI. */
     GPT_4_1: "gpt-4.1",
-    /** GPT-4o mini — OpenAI. */
+    /** GPT-4o mini — OpenAI, or via OpenRouter (`provider: Providers.OPENROUTER`). */
     GPT_4O_MINI: "gpt-4o-mini",
-    /** Gemini 2.0 Flash — Gemini. */
+    /** GPT-4o — via OpenRouter (`provider: Providers.OPENROUTER`). */
+    GPT_4O: "gpt-4o",
+    /** Gemini 2.0 Flash — Gemini, or via OpenRouter (`provider: Providers.OPENROUTER`). */
     GEMINI_2_0_FLASH: "gemini-2.0-flash",
     /** Gemini 2.5 Flash — Gemini. */
     GEMINI_2_5_FLASH: "gemini-2.5-flash",
@@ -67,61 +94,78 @@ export const Models = {
     MISTRAL_LARGE_LATEST: "mistral-large-latest",
     /** Mistral Small (latest) — Mistral. */
     MISTRAL_SMALL_LATEST: "mistral-small-latest",
-    /** GPT-4o mini via OpenRouter (provider-prefixed) — cheap, tool-obedient. */
-    OPENROUTER_GPT_4O_MINI: "openai/gpt-4o-mini",
-    /** GPT-4o via OpenRouter (provider-prefixed) — stronger, tool-obedient. */
-    OPENROUTER_GPT_4O: "openai/gpt-4o",
-    /** Gemini 2.0 Flash via OpenRouter (provider-prefixed) — cheap, tool-obedient. */
-    OPENROUTER_GEMINI_2_0_FLASH: "google/gemini-2.0-flash-001"
+    /**
+     * Doubao Seed 1.8 — ByteDance, via the official Ark API. Default routes
+     * through the international BytePlus gateway (`Providers.DOUBAO`); pair with
+     * `Providers.DOUBAO_CN` for the China Volcengine gateway.
+     */
+    DOUBAO_SEED_PRO: "doubao-seed-pro",
+    /**
+     * Doubao Seed 1.6 Flash — ByteDance, via the official Ark API (fast/cheap).
+     * Default `Providers.DOUBAO` (international); pair with `Providers.DOUBAO_CN`
+     * for China.
+     */
+    DOUBAO_SEED_FLASH: "doubao-seed-flash"
 };
 /**
  * Back-compat alias for {@link Models}. Existing imports of `RunModels`
  * keep working; new code should prefer `Models`.
  */
 export const RunModels = Models;
-export const RUN_MODELS_BY_PROVIDER = {
-    anthropic: [
-        Models.CLAUDE_HAIKU_4_5,
-        Models.CLAUDE_3_5_HAIKU_LATEST,
-        Models.CLAUDE_3_5_SONNET_LATEST
-    ],
-    deepseek: [
-        Models.DEEPSEEK_V4_FLASH,
-        Models.DEEPSEEK_V4_PRO,
-        Models.DEEPSEEK_CHAT,
-        Models.DEEPSEEK_REASONER
-    ],
-    openai: [Models.GPT_4_1, Models.GPT_4O_MINI],
-    gemini: [Models.GEMINI_2_0_FLASH, Models.GEMINI_2_5_FLASH],
-    mistral: [Models.MISTRAL_LARGE_LATEST, Models.MISTRAL_SMALL_LATEST],
-    openrouter: [
-        Models.OPENROUTER_GPT_4O_MINI,
-        Models.OPENROUTER_GPT_4O,
-        Models.OPENROUTER_GEMINI_2_0_FLASH
-    ]
-};
 /**
- * Reverse index: every model id → its single upstream provider. Derived from
- * {@link RUN_MODELS_BY_PROVIDER} so the two never drift; each model appears
- * under exactly one provider.
+ * Per-model provider lists, in declaration order. Derived from
+ * {@link MODEL_PROVIDER_IDS} so the two never drift.
  */
-const PROVIDER_BY_MODEL = (() => {
+const PROVIDERS_BY_MODEL = (() => {
     const map = {};
-    for (const [provider, models] of Object.entries(RUN_MODELS_BY_PROVIDER)) {
-        for (const model of models) {
-            map[model] = provider;
+    for (const [model, providers] of Object.entries(MODEL_PROVIDER_IDS)) {
+        map[model] = Object.keys(providers);
+    }
+    return map;
+})();
+/**
+ * Provider → canonical models that provider can serve. Derived from
+ * {@link MODEL_PROVIDER_IDS}; every provider currently serves at least one
+ * model, so all {@link RunProvider} keys are present.
+ */
+export const RUN_MODELS_BY_PROVIDER = (() => {
+    const map = {};
+    for (const [model, providers] of Object.entries(MODEL_PROVIDER_IDS)) {
+        for (const provider of Object.keys(providers)) {
+            (map[provider] ??= []).push(model);
         }
     }
     return map;
 })();
 /**
- * Resolve the upstream provider for a model id. Returns `undefined` when the
- * input is not a known {@link RunModel} (so the SDK can fall back to the
- * default and let the server reject the model). Total over the closed model
- * set, so any `RunModel` resolves.
+ * All upstream providers that can serve a model id, in declaration order.
+ * Returns `[]` for an unknown model.
+ */
+export function providersForModel(model) {
+    return PROVIDERS_BY_MODEL[model] ?? [];
+}
+/**
+ * The default upstream provider for a model id — the first provider declared
+ * for it in {@link MODEL_PROVIDER_IDS}. Returns `undefined` when the input is
+ * not a known {@link RunModel} (so the SDK can fall back to the default and let
+ * the server reject the model).
  */
 export function providerForModel(model) {
-    return PROVIDER_BY_MODEL[model];
+    return providersForModel(model)[0];
+}
+/**
+ * Translate a canonical model id + provider into the provider-native model
+ * string the upstream API expects (e.g. `("gpt-4o-mini", "openrouter")` →
+ * `"openai/gpt-4o-mini"`). Throws when the provider does not serve the model.
+ */
+export function resolveProviderModelId(model, provider) {
+    const entry = MODEL_PROVIDER_IDS[model];
+    const native = entry?.[provider];
+    if (native === undefined) {
+        throw new Error(`resolveProviderModelId: model ${JSON.stringify(model)} is not available for provider ${JSON.stringify(provider)}; ` +
+            `available: ${providersForModel(model).join(", ") || "(none)"}`);
+    }
+    return native;
 }
 export function isRunModel(input) {
     return typeof input === "string" && RUN_MODELS.includes(input);
@@ -133,9 +177,10 @@ export function parseRunModel(input, field = "submission.model") {
     return input;
 }
 export function assertRunModelMatchesProvider(provider, model, field = "submission.model") {
-    if (!RUN_MODELS_BY_PROVIDER[provider].includes(model)) {
+    const providers = providersForModel(model);
+    if (!providers.includes(provider)) {
         throw new Error(`${field} ${JSON.stringify(model)} is not supported for provider ${provider}; ` +
-            `expected one of: ${RUN_MODELS_BY_PROVIDER[provider].join(", ")}`);
+            `expected one of: ${providers.join(", ")}`);
     }
 }
 //# sourceMappingURL=models.js.map

package/dist/_contracts/operations.d.ts

@@ -1,6 +1,6 @@
 import type { HttpClient } from "./http.js";
 import type { RunUnit } from "./run-unit.js";
-import type { AgentsMdRecord, FileRecord, Output, OutputFileDownload, OutputFileSelector, Run, RunEvent, SignedOutputLink, Skill, WhoAmI } from "./runtime-types.js";
+import type { AgentsMdRecord, FileRecord, Output, OutputFileDownload, OutputFileSelector, Run, RunEvent, SecretRecord, SecretReveal, SignedOutputLink, Skill, WhoAmI } from "./runtime-types.js";
 import type { PlatformRunSubmissionInput } from "./submission.js";
 /**
  * The single source of truth for SDK<->BFF transport. The SDK class
@@ -207,6 +207,22 @@ export declare function createFile(http: HttpClient, args: {
 export declare function listFiles(http: HttpClient): Promise<readonly FileRecord[]>;
 export declare function getFile(http: HttpClient, fileId: string): Promise<FileRecord>;
 export declare function deleteFile(http: HttpClient, fileId: string): Promise<void>;
+/** Create a named workspace secret. The value travels in the body. */
+export declare function createSecret(http: HttpClient, args: {
+    readonly name: string;
+    readonly value: string;
+}): Promise<SecretRecord>;
+export declare function listSecrets(http: HttpClient): Promise<readonly SecretRecord[]>;
+/** Metadata for one workspace secret by name. Never returns the value. */
+export declare function getSecret(http: HttpClient, name: string): Promise<SecretRecord>;
+/** Audited value read — the only path that returns a workspace secret value. */
+export declare function revealSecret(http: HttpClient, name: string): Promise<SecretReveal>;
+/** Replace the value of an existing workspace secret; bumps its version. */
+export declare function rotateSecret(http: HttpClient, args: {
+    readonly name: string;
+    readonly value: string;
+}): Promise<SecretRecord>;
+export declare function deleteSecret(http: HttpClient, name: string): Promise<void>;
 export interface AssetUploadResult {
     readonly assetId: string;
     readonly contentHash: string;

package/dist/_contracts/operations.js

@@ -541,6 +541,56 @@ function unwrapFile(result) {
     }
     return result;
 }
+// ===========================================================================
+// Workspace secret operations
+//
+// Value-bearing requests (create/rotate) carry the value in the JSON BODY,
+// never the URL/query, so it never lands in logs or the request line. Reads
+// split by sensitivity: `getSecret`/`listSecrets` return METADATA only;
+// `revealSecret` is the audited value read (POST so it's a logged action).
+// ===========================================================================
+/** Create a named workspace secret. The value travels in the body. */
+export async function createSecret(http, args) {
+    const result = await http.request("/api/secrets", {
+        method: "POST",
+        body: JSON.stringify({ name: args.name, value: args.value })
+    });
+    return unwrapSecret(result);
+}
+export async function listSecrets(http) {
+    const result = await http.request("/api/secrets");
+    if (Array.isArray(result)) {
+        return result;
+    }
+    return result.secrets;
+}
+/** Metadata for one workspace secret by name. Never returns the value. */
+export async function getSecret(http, name) {
+    const result = await http.request(`/api/secrets/${encodeURIComponent(name)}`);
+    return unwrapSecret(result);
+}
+/** Audited value read — the only path that returns a workspace secret value. */
+export async function revealSecret(http, name) {
+    return http.request(`/api/secrets/${encodeURIComponent(name)}/reveal`, {
+        method: "POST"
+    });
+}
+/** Replace the value of an existing workspace secret; bumps its version. */
+export async function rotateSecret(http, args) {
+    const result = await http.request(`/api/secrets/${encodeURIComponent(args.name)}/rotate`, { method: "POST", body: JSON.stringify({ value: args.value }) });
+    return unwrapSecret(result);
+}
+export async function deleteSecret(http, name) {
+    await http.request(`/api/secrets/${encodeURIComponent(name)}`, {
+        method: "DELETE"
+    });
+}
+function unwrapSecret(result) {
+    if (result && typeof result === "object" && "secret" in result) {
+        return result.secret;
+    }
+    return result;
+}
 function unwrapSkill(result) {
     if (result && typeof result === "object" && "skill" in result) {
         return result.skill;

package/dist/_contracts/provider-support.d.ts

@@ -256,5 +256,73 @@ export declare const PROVIDER_PUBLIC_SUPPORT: {
             }];
         };
     };
+    readonly doubao: {
+        readonly displayName: "Doubao";
+        readonly status: "live-unverified";
+        readonly docsAnchor: "doubao";
+        readonly docs: readonly [{
+            readonly label: "Credentials";
+            readonly href: "credentials.md";
+        }, {
+            readonly label: "Events";
+            readonly href: "events.md";
+        }];
+        readonly evidence: readonly [{
+            readonly label: "Submission parser and routing parity";
+            readonly href: "../../contracts/test/submission.test.ts";
+        }, {
+            readonly label: "Runtime support validator";
+            readonly href: "../../contracts/test/runtime-support.test.ts";
+        }, {
+            readonly label: "Generated matrix freshness";
+            readonly href: "../../../scripts/validate/capability-matrix.test.ts";
+        }];
+        readonly runtimeEvidence: {
+            readonly managed: readonly [{
+                readonly label: "Submission parser and routing parity";
+                readonly href: "../../contracts/test/submission.test.ts";
+            }, {
+                readonly label: "Runtime support validator";
+                readonly href: "../../contracts/test/runtime-support.test.ts";
+            }, {
+                readonly label: "Generated matrix freshness";
+                readonly href: "../../../scripts/validate/capability-matrix.test.ts";
+            }];
+        };
+    };
+    readonly "doubao-cn": {
+        readonly displayName: "Doubao (China)";
+        readonly status: "live-unverified";
+        readonly docsAnchor: "doubao-cn";
+        readonly docs: readonly [{
+            readonly label: "Credentials";
+            readonly href: "credentials.md";
+        }, {
+            readonly label: "Events";
+            readonly href: "events.md";
+        }];
+        readonly evidence: readonly [{
+            readonly label: "Submission parser and routing parity";
+            readonly href: "../../contracts/test/submission.test.ts";
+        }, {
+            readonly label: "Runtime support validator";
+            readonly href: "../../contracts/test/runtime-support.test.ts";
+        }, {
+            readonly label: "Generated matrix freshness";
+            readonly href: "../../../scripts/validate/capability-matrix.test.ts";
+        }];
+        readonly runtimeEvidence: {
+            readonly managed: readonly [{
+                readonly label: "Submission parser and routing parity";
+                readonly href: "../../contracts/test/submission.test.ts";
+            }, {
+                readonly label: "Runtime support validator";
+                readonly href: "../../contracts/test/runtime-support.test.ts";
+            }, {
+                readonly label: "Generated matrix freshness";
+                readonly href: "../../../scripts/validate/capability-matrix.test.ts";
+            }];
+        };
+    };
 };
 export declare function providerPublicSupport(provider: RunProvider): ProviderPublicSupport;