@aexhq/sdk 0.37.3 → 0.38.0

package/docs/secrets.md

@@ -8,7 +8,7 @@ aex supports BYOK provider keys, per-run credentials, and reusable workspace
 secrets. Secret values are excluded from the idempotency fingerprint and do not
 belong in run config.
 
-Runnable examples need both `AEX_API_TOKEN` for aex and the matching BYOK
+Runnable examples need both `AEX_API_KEY` for aex and the matching BYOK
 provider key, such as `ANTHROPIC_API_KEY` for Claude.
 
 ## Use A Provider Key For One Run
@@ -18,7 +18,7 @@ provider key, such as `ANTHROPIC_API_KEY` for Claude.
 ```ts
 import { Aex, Models } from "@aexhq/sdk";
 
-const aex = new Aex({ apiToken: process.env.AEX_API_TOKEN! });
+const aex = new Aex({ apiKey: process.env.AEX_API_KEY! });
 
 await aex.run({
   model: Models.CLAUDE_HAIKU_4_5,
@@ -31,7 +31,7 @@ await aex.run({
 
 ```bash
 aex run \
-  --api-token "$AEX_API_TOKEN" \
+  --api-key "$AEX_API_KEY" \
   --anthropic-api-key "$ANTHROPIC_API_KEY" \
   --model claude-haiku-4-5 \
   --prompt "Write a short report and save it as a file."
@@ -45,7 +45,7 @@ want to persist it as a named workspace secret for later runs.
 ```ts
 import { Aex, Models, Providers, Secret } from "@aexhq/sdk";
 
-const aex = new Aex({ apiToken: process.env.AEX_API_TOKEN! });
+const aex = new Aex({ apiKey: process.env.AEX_API_KEY! });
 
 const githubToken = await Secret.value(process.env.GITHUB_TOKEN!).upload(aex, {
   name: "github-token"

package/docs/skills.md

@@ -24,7 +24,7 @@ zips + hashes the bytes, and returns a `SkillTool`:
 ```ts
 import { Aex, Models, Tools } from "@aexhq/sdk";
 
-const aex = new Aex({ apiToken });
+const aex = new Aex({ apiKey });
 
 await aex.run({
   model: Models.CLAUDE_HAIKU_4_5,

package/docs/testing.md

@@ -31,5 +31,5 @@ that artifact. CI or release validation can pin an explicit artifact with
 exactly one of `AEX_USER_TEST_TARBALL` or `AEX_USER_TEST_VERSION`.
 
 Live user tests run against a hosted aex API and fail loudly when required env
-is missing: `AEX_API_URL`, `AEX_API_TOKEN`, `ANTHROPIC_API_KEY`, and
+is missing: `AEX_API_URL`, `AEX_API_KEY`, `ANTHROPIC_API_KEY`, and
 `DEEPSEEK_API_KEY`.

package/docs/vision-skills.md

@@ -18,7 +18,7 @@ per-noun "does the frame depict X?" verdict.
 ```ts
 import { Aex, Models, Secret, Tools } from "@aexhq/sdk";
 
-const aex = new Aex({ apiToken: process.env.AEX_API_TOKEN! });
+const aex = new Aex({ apiKey: process.env.AEX_API_KEY! });
 
 const result = await aex.run({
   model: Models.CLAUDE_HAIKU_4_5,

package/docs/webhooks.md

@@ -17,7 +17,7 @@ pass a callback URL with the submission, and the platform delivers exactly one
 ```ts
 import { Aex, Models } from "@aexhq/sdk";
 
-const aex = new Aex(process.env.AEX_API_TOKEN!);
+const aex = new Aex(process.env.AEX_API_KEY!);
 
 const session = await aex.openSession({
   model: Models.CLAUDE_HAIKU_4_5,
@@ -28,7 +28,7 @@ const session = await aex.openSession({
 
 ```bash
 aex run \
-  --api-token "$AEX_API_TOKEN" \
+  --api-key "$AEX_API_KEY" \
   --anthropic-api-key "$ANTHROPIC_API_KEY" \
   --model claude-haiku-4-5 \
   --prompt "Write the report." \
@@ -80,7 +80,7 @@ The signing key is a per-workspace secret. Reveal it (it is created on first
 use) with either surface:
 
 ```bash
-aex webhooks secret --api-token "$AEX_API_TOKEN"   # prints whsec_...
+aex webhooks secret --api-key "$AEX_API_KEY"   # prints whsec_...
 ```
 
 ```ts
@@ -120,7 +120,7 @@ await session.webhooks().redeliver(deliveries[0]!.id);
 ```
 
 ```bash
-aex deliveries <session-id> --api-token "$AEX_API_TOKEN"
+aex deliveries <session-id> --api-key "$AEX_API_KEY"
 ```
 
 Redelivery re-sends the frozen payload with the **same** `webhook-id`, so a

package/examples/feature-tour.ts

@@ -6,7 +6,7 @@
  *
  * Run from the repository root after building the workspace package:
  *
- *   AEX_API_TOKEN=... DEEPSEEK_API_KEY=... bun packages/sdk/examples/feature-tour.ts
+ *   AEX_API_KEY=... DEEPSEEK_API_KEY=... bun packages/sdk/examples/feature-tour.ts
  *
  * Optional:
  *
@@ -34,7 +34,7 @@ import {
 process.on("uncaughtException", handleFatal);
 process.on("unhandledRejection", handleFatal);
 
-const apiToken = required("AEX_API_TOKEN");
+const apiKey = required("AEX_API_KEY");
 const deepseekKey = required("DEEPSEEK_API_KEY");
 const apiUrl = process.env.AEX_API_URL;
 const demoMcpUrl = process.env.AEX_DEMO_MCP_URL;
@@ -44,7 +44,7 @@ const downloadPath = process.env.AEX_FEATURE_TOUR_DOWNLOAD;
 const textEncoder = new TextEncoder();
 
 const aex = new Aex({
-  apiToken,
+  apiKey,
   ...(apiUrl ? { baseUrl: apiUrl } : {}),
   retry: {
     maxAttempts: 4,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aexhq/sdk",
-  "version": "0.37.3",
+  "version": "0.38.0",
   "description": "TypeScript SDK for running autonomous agent sessions across providers (Anthropic, OpenAI, DeepSeek, Gemini, Mistral) behind one interface.",
   "license": "Apache-2.0",
   "repository": {
@@ -35,7 +35,7 @@
     "test:unit:unlocked": "vitest run test/unit",
     "test:security": "bun ../../scripts/with-generated-dist-lock.mjs bun run test:security:unlocked",
     "test:security:unlocked": "vitest run test/security",
-    "test:property": "vitest run --passWithNoTests property",
+    "test:property": "vitest run property",
     "test:coverage": "vitest run --coverage test/unit",
     "prepack": "bun run build",
     "pack:dry-run": "bun ../../scripts/with-generated-dist-lock.mjs bun pm pack --dry-run --ignore-scripts"