@aexhq/sdk 0.18.1 → 0.20.0

package/dist/cli.mjs

@@ -126,97 +126,81 @@ var PROVIDER_PUBLIC_SUPPORT = {
     runtimeEvidence: {
       managed: COMMON_EVIDENCE
     }
+  },
+  // Doubao (ByteDance) via the official Ark API — international BytePlus gateway.
+  // Wired + parser/routing-verified but not yet proven against a live BytePlus
+  // account, so `live-unverified`. Promote to `supported` (and swap COMMON_EVIDENCE
+  // for a DOUBAO_MANAGED_EVIDENCE pointer to live-sdk-doubao.test.ts) once the
+  // live run passes.
+  doubao: {
+    displayName: "Doubao",
+    status: "live-unverified",
+    docsAnchor: "doubao",
+    docs: COMMON_DOCS,
+    evidence: COMMON_EVIDENCE,
+    runtimeEvidence: {
+      managed: COMMON_EVIDENCE
+    }
+  },
+  // Doubao (ByteDance) via the official Ark API — China Volcengine gateway.
+  // Same wiring as `doubao`; additionally gated on CF Worker egress reaching the
+  // Beijing host (see apps/egress-probe). `live-unverified` until proven live.
+  "doubao-cn": {
+    displayName: "Doubao (China)",
+    status: "live-unverified",
+    docsAnchor: "doubao-cn",
+    docs: COMMON_DOCS,
+    evidence: COMMON_EVIDENCE,
+    runtimeEvidence: {
+      managed: COMMON_EVIDENCE
+    }
   }
 };
 
 // ../contracts/dist/models.js
-var RUN_MODELS = [
-  "claude-haiku-4-5",
-  "claude-3-5-haiku-latest",
-  "claude-3-5-sonnet-latest",
-  "deepseek-v4-flash",
-  "deepseek-v4-pro",
-  "deepseek-chat",
-  "deepseek-reasoner",
-  "gpt-4.1",
-  "gpt-4o-mini",
-  "gemini-2.0-flash",
-  "gemini-2.5-flash",
-  "mistral-large-latest",
-  "mistral-small-latest",
-  "openai/gpt-4o-mini",
-  "openai/gpt-4o",
-  "google/gemini-2.0-flash-001"
-];
-var Models = {
-  /** Claude Haiku 4.5 — Anthropic. */
-  CLAUDE_HAIKU_4_5: "claude-haiku-4-5",
-  /** Claude 3.5 Haiku (latest) — Anthropic. */
-  CLAUDE_3_5_HAIKU_LATEST: "claude-3-5-haiku-latest",
-  /** Claude 3.5 Sonnet (latest) — Anthropic. */
-  CLAUDE_3_5_SONNET_LATEST: "claude-3-5-sonnet-latest",
-  /** DeepSeek V4 Flash — DeepSeek (non-thinking, fast). */
-  DEEPSEEK_V4_FLASH: "deepseek-v4-flash",
-  /** DeepSeek V4 Pro — DeepSeek (reasoning-heavy). */
-  DEEPSEEK_V4_PRO: "deepseek-v4-pro",
-  /**
-   * @deprecated Legacy alias DeepSeek routes to `deepseek-v4-flash` (non-thinking).
-   * DeepSeek removes this name on 2026-07-24 15:59 UTC — migrate to
-   * {@link Models.DEEPSEEK_V4_FLASH}.
-   */
-  DEEPSEEK_CHAT: "deepseek-chat",
-  /**
-   * @deprecated Legacy alias DeepSeek routes to `deepseek-v4-flash` (thinking).
-   * DeepSeek removes this name on 2026-07-24 15:59 UTC — migrate to
-   * {@link Models.DEEPSEEK_V4_FLASH} (or {@link Models.DEEPSEEK_V4_PRO} for
-   * heavier reasoning).
-   */
-  DEEPSEEK_REASONER: "deepseek-reasoner",
-  /** GPT-4.1 — OpenAI. */
-  GPT_4_1: "gpt-4.1",
-  /** GPT-4o mini — OpenAI. */
-  GPT_4O_MINI: "gpt-4o-mini",
-  /** Gemini 2.0 Flash — Gemini. */
-  GEMINI_2_0_FLASH: "gemini-2.0-flash",
-  /** Gemini 2.5 Flash — Gemini. */
-  GEMINI_2_5_FLASH: "gemini-2.5-flash",
-  /** Mistral Large (latest) — Mistral. */
-  MISTRAL_LARGE_LATEST: "mistral-large-latest",
-  /** Mistral Small (latest) — Mistral. */
-  MISTRAL_SMALL_LATEST: "mistral-small-latest",
-  /** GPT-4o mini via OpenRouter (provider-prefixed) — cheap, tool-obedient. */
-  OPENROUTER_GPT_4O_MINI: "openai/gpt-4o-mini",
-  /** GPT-4o via OpenRouter (provider-prefixed) — stronger, tool-obedient. */
-  OPENROUTER_GPT_4O: "openai/gpt-4o",
-  /** Gemini 2.0 Flash via OpenRouter (provider-prefixed) — cheap, tool-obedient. */
-  OPENROUTER_GEMINI_2_0_FLASH: "google/gemini-2.0-flash-001"
-};
-var RUN_MODELS_BY_PROVIDER = {
-  anthropic: [
-    Models.CLAUDE_HAIKU_4_5,
-    Models.CLAUDE_3_5_HAIKU_LATEST,
-    Models.CLAUDE_3_5_SONNET_LATEST
-  ],
-  deepseek: [
-    Models.DEEPSEEK_V4_FLASH,
-    Models.DEEPSEEK_V4_PRO,
-    Models.DEEPSEEK_CHAT,
-    Models.DEEPSEEK_REASONER
-  ],
-  openai: [Models.GPT_4_1, Models.GPT_4O_MINI],
-  gemini: [Models.GEMINI_2_0_FLASH, Models.GEMINI_2_5_FLASH],
-  mistral: [Models.MISTRAL_LARGE_LATEST, Models.MISTRAL_SMALL_LATEST],
-  openrouter: [
-    Models.OPENROUTER_GPT_4O_MINI,
-    Models.OPENROUTER_GPT_4O,
-    Models.OPENROUTER_GEMINI_2_0_FLASH
-  ]
+var MODEL_PROVIDER_IDS = {
+  "claude-haiku-4-5": { anthropic: "claude-haiku-4-5" },
+  "claude-3-5-haiku-latest": { anthropic: "claude-3-5-haiku-latest" },
+  "claude-3-5-sonnet-latest": { anthropic: "claude-3-5-sonnet-latest" },
+  "deepseek-v4-flash": { deepseek: "deepseek-v4-flash" },
+  "deepseek-v4-pro": { deepseek: "deepseek-v4-pro" },
+  "deepseek-chat": { deepseek: "deepseek-chat" },
+  "deepseek-reasoner": { deepseek: "deepseek-reasoner" },
+  "gpt-4.1": { openai: "gpt-4.1" },
+  "gpt-4o-mini": { openai: "gpt-4o-mini", openrouter: "openai/gpt-4o-mini" },
+  "gpt-4o": { openrouter: "openai/gpt-4o" },
+  "gemini-2.0-flash": { gemini: "gemini-2.0-flash", openrouter: "google/gemini-2.0-flash-001" },
+  "gemini-2.5-flash": { gemini: "gemini-2.5-flash" },
+  "mistral-large-latest": { mistral: "mistral-large-latest" },
+  "mistral-small-latest": { mistral: "mistral-small-latest" },
+  // Doubao (ByteDance) via the official Ark API. Served by both the
+  // international BytePlus ModelArk gateway (`doubao`, the default) and the
+  // China Volcengine Ark gateway (`doubao-cn`). Ark accepts the API-format
+  // model NAME directly in the chat-completions `model` field (no `ep-…`
+  // inference-endpoint id). The native strings are the same Ark catalog ids on
+  // both gateways; BytePlus per-account availability is confirmed at live-verify
+  // (both providers ship `live-unverified` until then — provider-support.ts).
+  //   pro   — Doubao Seed 1.8 (flagship, 256K context).
+  //   flash — Doubao Seed 1.6 Flash (fast/cheap, 256K context).
+  "doubao-seed-pro": { doubao: "doubao-seed-1-8-251228", "doubao-cn": "doubao-seed-1-8-251228" },
+  "doubao-seed-flash": {
+    doubao: "doubao-seed-1-6-flash-250828",
+    "doubao-cn": "doubao-seed-1-6-flash-250828"
+  }
 };
-var PROVIDER_BY_MODEL = (() => {
+var RUN_MODELS = Object.keys(MODEL_PROVIDER_IDS);
+var PROVIDERS_BY_MODEL = (() => {
   const map = {};
-  for (const [provider, models] of Object.entries(RUN_MODELS_BY_PROVIDER)) {
-    for (const model of models) {
-      map[model] = provider;
+  for (const [model, providers] of Object.entries(MODEL_PROVIDER_IDS)) {
+    map[model] = Object.keys(providers);
+  }
+  return map;
+})();
+var RUN_MODELS_BY_PROVIDER = (() => {
+  const map = {};
+  for (const [model, providers] of Object.entries(MODEL_PROVIDER_IDS)) {
+    for (const provider of Object.keys(providers)) {
+      (map[provider] ??= []).push(model);
     }
   }
   return map;
@@ -801,7 +785,9 @@ var RUN_PROVIDERS = [
   "openai",
   "gemini",
   "mistral",
-  "openrouter"
+  "openrouter",
+  "doubao",
+  "doubao-cn"
 ];
 var DEFAULT_RUN_PROVIDER = "anthropic";
 var RUNTIME_KINDS = ["managed"];
@@ -1304,11 +1290,13 @@ __export(operations_exports, {
   createAgentsMd: () => createAgentsMd,
   createFile: () => createFile,
   createOutputLink: () => createOutputLink,
+  createSecret: () => createSecret,
   createSkillBundle: () => createSkillBundle,
   createSkillBundleDirect: () => createSkillBundleDirect,
   deleteAgentsMd: () => deleteAgentsMd,
   deleteFile: () => deleteFile,
   deleteRun: () => deleteRun,
+  deleteSecret: () => deleteSecret,
   deleteSkill: () => deleteSkill,
   deleteWorkspaceAsset: () => deleteWorkspaceAsset,
   download: () => download,
@@ -1323,13 +1311,17 @@ __export(operations_exports, {
   getFile: () => getFile,
   getRun: () => getRun,
   getRunUnit: () => getRunUnit,
+  getSecret: () => getSecret,
   getSkill: () => getSkill,
   listAgentsMd: () => listAgentsMd,
   listFiles: () => listFiles,
   listOutputs: () => listOutputs,
   listRunEvents: () => listRunEvents,
+  listSecrets: () => listSecrets,
   listSkills: () => listSkills,
   resolveOutputFileSelector: () => resolveOutputFileSelector,
+  revealSecret: () => revealSecret,
+  rotateSecret: () => rotateSecret,
   submitRun: () => submitRun,
   submitRunMultipart: () => submitRunMultipart,
   uploadWorkspaceAsset: () => uploadWorkspaceAsset,
@@ -2438,6 +2430,44 @@ function unwrapFile(result) {
   }
   return result;
 }
+async function createSecret(http, args) {
+  const result = await http.request("/api/secrets", {
+    method: "POST",
+    body: JSON.stringify({ name: args.name, value: args.value })
+  });
+  return unwrapSecret(result);
+}
+async function listSecrets(http) {
+  const result = await http.request("/api/secrets");
+  if (Array.isArray(result)) {
+    return result;
+  }
+  return result.secrets;
+}
+async function getSecret(http, name) {
+  const result = await http.request(`/api/secrets/${encodeURIComponent(name)}`);
+  return unwrapSecret(result);
+}
+async function revealSecret(http, name) {
+  return http.request(`/api/secrets/${encodeURIComponent(name)}/reveal`, {
+    method: "POST"
+  });
+}
+async function rotateSecret(http, args) {
+  const result = await http.request(`/api/secrets/${encodeURIComponent(args.name)}/rotate`, { method: "POST", body: JSON.stringify({ value: args.value }) });
+  return unwrapSecret(result);
+}
+async function deleteSecret(http, name) {
+  await http.request(`/api/secrets/${encodeURIComponent(name)}`, {
+    method: "DELETE"
+  });
+}
+function unwrapSecret(result) {
+  if (result && typeof result === "object" && "secret" in result) {
+    return result.secret;
+  }
+  return result;
+}
 function unwrapSkill(result) {
   if (result && typeof result === "object" && "skill" in result) {
     return result.skill;

package/dist/cli.mjs.sha256

@@ -1 +1 @@
-6b7daebf5f92a017a95c00574d40df47dcac2dece0c2098a60bacd5970b98fa7  cli.mjs
+cbf31722f64f1ca909287456236e1e689291516e227dcdd69935300bbc0994c9  cli.mjs

package/dist/client.d.ts

@@ -1,9 +1,10 @@
-import { HttpClient, type AexEvent, type AgentsMdRecord, type CredentialMode, type DebugSink, type FetchLike, type FileRecord, type Output, type OutputMode, type PlatformEnvironmentInput, type PlatformSubmission, type PlatformInlineSecrets, type PlatformProxyEndpoint, type PlatformProxyEndpointAuth, type PlatformPostHookInput, type Run, type RunModel, type RunEvent, type RunProvider, type RunUnit, type Builtin, type RuntimeSize, type RuntimeKind, type SignedOutputLink, type Skill as SkillRecord, type WhoAmI } from "./_contracts/index.js";
+import { HttpClient, SecretString, type AexEvent, type AgentsMdRecord, type CredentialMode, type DebugSink, type FetchLike, type FileRecord, type Output, type OutputMode, type PlatformEnvironmentInput, type PlatformSubmission, type PlatformInlineSecrets, type PlatformProxyEndpoint, type PlatformProxyEndpointAuth, type PlatformPostHookInput, type Run, type RunModel, type RunEvent, type RunProvider, type SecretRecord, type SecretReveal, type RunUnit, type Builtin, type RuntimeSize, type RuntimeKind, type SignedOutputLink, type Skill as SkillRecord, type WhoAmI } from "./_contracts/index.js";
 import { AgentsMd } from "./agents-md.js";
 import { type UploadedAsset } from "./asset-upload.js";
 import { File } from "./file.js";
 import { McpServer } from "./mcp-server.js";
 import { ProxyEndpoint } from "./proxy-endpoint.js";
+import { Secret } from "./secret.js";
 import { Skill } from "./skill.js";
 export interface AgentExecutorOptions {
     /** Workspace-scoped SDK API token. */
@@ -45,7 +46,7 @@ export interface AgentExecutorOptions {
  * `idempotencyKey` is auto-generated when omitted; pass one explicitly
  * if you want client-driven retry safety across process restarts.
  */
-export interface SubmitRunOptions {
+export interface SubmitOptions {
     /**
      * Credential source for upstream provider access. Omitted defaults to
      * `"byok"`, which requires `secrets.apiKey`.
@@ -63,7 +64,7 @@ export interface SubmitRunOptions {
      *
      * Optional today: when omitted it is derived from `model` (each currently
      * supported model maps to a single provider), so existing call sites keep
-     * working. If supplied it MUST match the model's provider or `submitRun`
+     * working. If supplied it MUST match the model's provider or `submit`
      * throws.
      */
     readonly provider?: RunProvider;
@@ -85,6 +86,16 @@ export interface SubmitRunOptions {
     readonly agentsMd?: readonly AgentsMd[];
     readonly files?: readonly File[];
     readonly mcpServers?: readonly McpServer[];
+    /**
+     * Env-var secrets, keyed by env name. Each value is a {@link Secret}:
+     * `Secret.value(v)` (ephemeral per-run — vaulted at submit, deleted at the
+     * run's terminal) or `Secret.ref(handle)` (a persisted workspace secret,
+     * resolved server-side). The SDK splits these into value-free declarations on
+     * the hashed submission and ephemeral values into the vaulted secrets channel,
+     * so a value never enters the run snapshot or the idempotency hash. The
+     * runtime injects each as the named env var.
+     */
+    readonly secretEnv?: Readonly<Record<string, Secret>>;
     readonly environment?: PlatformEnvironmentInput;
     readonly metadata?: PlatformSubmission["metadata"];
     /**
@@ -148,8 +159,18 @@ export interface SubmitRunOptions {
     readonly outputMode?: OutputMode;
     readonly secrets: PlatformInlineSecrets;
     readonly idempotencyKey?: string;
+    /**
+     * Lineage parent (agent-session §9). When set, the server admits this run as
+     * a CHILD of `parentRunId` (same workspace required), enforcing the
+     * max-subagent-depth + per-root concurrency caps and persisting the lineage.
+     * The depth is always derived server-side from the parent row — clients name
+     * the parent, never the depth.
+     */
+    readonly parentRunId?: string;
     readonly signal?: AbortSignal;
 }
+/** @deprecated Renamed to {@link SubmitOptions}. Kept for one release. */
+export type SubmitRunOptions = SubmitOptions;
 export interface StreamEventsOptions {
     /** Poll interval in ms for the `RunEvent` snapshot loop. Default 1000. */
     readonly intervalMs?: number;
@@ -193,7 +214,7 @@ export interface OutputDownloadOptions {
  * Workspace skill admin operations exposed under `client.skills`.
  *
  * New run submissions usually use `Skill.fromFiles(...)` or
- * `Skill.fromPath(...)` directly inside `submitRun`; the SDK materializes
+ * `Skill.fromPath(...)` directly inside `submit`; the SDK materializes
  * those bytes to the hosted asset store before the run lands. This namespace is the read/delete
  * surface for workspace skill records and the internal transport used by the
  * legacy CLI upload command.
@@ -241,7 +262,7 @@ export declare class SkillsClient {
  * Workspace AgentsMd admin operations exposed under `client.agentsMd`.
  *
  * New run submissions usually use `AgentsMd.fromContent(...)` or
- * `AgentsMd.fromPath(...)` directly inside `submitRun`; the SDK
+ * `AgentsMd.fromPath(...)` directly inside `submit`; the SDK
  * materializes those bytes to the hosted asset store before the run lands. This namespace is
  * the read/delete surface for persisted AgentsMd records plus an internal
  * upload transport retained for legacy callers.
@@ -265,7 +286,7 @@ export declare class AgentsMdClient {
  * Workspace File admin operations exposed under `client.files`.
  *
  * New run submissions usually use `File.fromPath(...)` or
- * `File.fromBytes(...)` directly inside `submitRun`; the SDK materializes
+ * `File.fromBytes(...)` directly inside `submit`; the SDK materializes
  * those bytes to the hosted asset store before the run lands. This namespace is the read/delete
  * surface for persisted file records plus an internal upload transport
  * retained for legacy callers.
@@ -285,6 +306,52 @@ export declare class FilesClient {
         readonly bytes: Uint8Array;
     }): Promise<FileRecord>;
 }
+/**
+ * Workspace secret management exposed under `client.secrets`, mirroring
+ * `client.skills` / `client.files`.
+ *
+ * Lifecycle parity with assets/skills: a `Secret.value(...)` is per-run and
+ * gone at terminal; `set` (or promoting an ephemeral via `secret.upload`)
+ * persists a named, searchable workspace secret you can `get` (metadata),
+ * `reveal` (audited value), `rotate`, `list`, and `delete`. The identity is the
+ * `name`; the value rotates under that stable name.
+ *
+ * Values are write-only: `set`/`rotate` send the value in the request BODY (never
+ * the URL); `get`/`list` return metadata only; `reveal` is the explicit audited
+ * value read.
+ */
+export declare class SecretsClient {
+    #private;
+    constructor(http: HttpClient);
+    /** Create a named workspace secret. Accepts a raw string or a `SecretString`. */
+    set(args: {
+        readonly name: string;
+        readonly value: string | SecretString;
+    }): Promise<SecretRecord>;
+    /** List workspace secret metadata (searchable by name). Never returns values. */
+    list(): Promise<readonly SecretRecord[]>;
+    /** Metadata for one workspace secret by name. Never returns the value. */
+    get(name: string): Promise<SecretRecord>;
+    /** Audited value read — the only path that returns a workspace secret value. */
+    reveal(name: string): Promise<SecretReveal>;
+    /** Replace the value of an existing workspace secret; bumps its version. */
+    rotate(args: {
+        readonly name: string;
+        readonly value: string | SecretString;
+    }): Promise<SecretRecord>;
+    delete(name: string): Promise<void>;
+    /**
+     * Internal: create a workspace secret from an ephemeral `Secret.value(...)`
+     * being promoted via `secret.upload(client, { name })`. NOT part of the
+     * public API — callers use `set`.
+     */
+    _createWorkspaceSecret(args: {
+        readonly name: string;
+        readonly value: string;
+    }): Promise<{
+        readonly name: string;
+    }>;
+}
 /**
  * Unified user-facing client for the aex platform. The same class
  * powers the published `@aexhq/sdk` SDK and (under the hood) every host-side
@@ -301,6 +368,7 @@ export declare class AgentExecutor {
     readonly skills: SkillsClient;
     readonly agentsMd: AgentsMdClient;
     readonly files: FilesClient;
+    readonly secrets: SecretsClient;
     constructor(options: AgentExecutorOptions);
     /**
      * Internal: forwards to `SkillsClient._uploadSkillBundle`. NOT part of
@@ -336,6 +404,18 @@ export declare class AgentExecutor {
         readonly name: string;
         readonly bytes: Uint8Array;
     }): Promise<FileRecord>;
+    /**
+     * Internal: satisfies the `SecretUploader` surface so a
+     * `Secret.value(...).upload(client, { name })` promotes an ephemeral secret
+     * into the workspace store. Forwarded to `SecretsClient._createWorkspaceSecret`.
+     * NOT part of the public API.
+     */
+    _createWorkspaceSecret(args: {
+        readonly name: string;
+        readonly value: string;
+    }): Promise<{
+        readonly name: string;
+    }>;
     /**
      * Internal: materialize raw bytes to the content-addressable asset store
      * (`/assets/presign` → PUT → `/assets/finalize`). Used by `Skill.upload(this)`
@@ -353,10 +433,10 @@ export declare class AgentExecutor {
      * resolve a subsequent `getRun`/`listOutputs` is guaranteed consistent (it
      * polls `getRun` via {@link waitForRun}, NOT the RUN_FINISHED event, which the
      * runner emits before the platform commits the record). For long-running flows
-     * that need live events, prefer `submitRun` + `streamEnvelopes(runId, {
-     * settleConsistent: true })`, or `submitRun` + `stream(runId)` + `wait(runId)`.
+     * that need live events, prefer `submit` + `streamEnvelopes(runId, {
+     * settleConsistent: true })`, or `submit` + `stream(runId)` + `wait(runId)`.
      */
-    run(options: SubmitRunOptions): Promise<Run>;
+    run(options: SubmitOptions): Promise<Run>;
     /**
      * Submit a run and return its run id immediately. Use that id with
      * `wait`, `stream`, `outputs`, `download`, `cancel`, or `delete`.
@@ -373,7 +453,7 @@ export declare class AgentExecutor {
      * deduped by content hash, and referenced in the submission as plain
      * `{ kind:"asset" }` refs — identical to a pre-staged `.upload(client)`.
      */
-    submitRun(options: SubmitRunOptions): Promise<string>;
+    submit(options: SubmitOptions): Promise<string>;
     getRun(runId: string): Promise<Run>;
     /** Short alias for `getRun`. */
     get(runId: string): Promise<Run>;