@aexhq/sdk 0.46.5-canary → 0.50.0

package/dist/_contracts/ids.js

@@ -1,119 +0,0 @@
-/**
- * The identifier authority for every aex entity.
- *
- * One module declares the format, mints the value, and exports the parser.
- * Every other site — database CHECK constraint, HTTP handler, dashboard URL,
- * log line, span attribute, test fixture — imports from here.
- *
- * An identifier has exactly ONE string form: `<prefix>_<32 lowercase hex>`. It
- * is the same bytes in Aurora, in the API response, in the dashboard URL, in
- * the log line, and in the telemetry attribute. There is deliberately no
- * normalizer and no coercer: a value that must be reshaped to be compared has
- * already drifted, so `assertId` throws instead.
- *
- * This module is isomorphic — `crypto.getRandomValues` only, no `node:crypto`,
- * no `Buffer` — because `@aexhq/contracts` ships to browser and edge runtimes and
- * declares no runtime dependency beyond `fflate`. The token pepper and its HMAC
- * stay private in `@aexhq/contract-core`; nothing secret lives here.
- */
-/**
- * Every identifier kind and its wire prefix. A new entity kind is a new entry
- * here, never a new generator.
- */
-export const ID_PREFIXES = {
-    workspace: "wsp",
-    session: "ses",
-    resource: "wres",
-    mcp: "mcp",
-    secret: "sec",
-    org: "org",
-    team: "team",
-    user: "usr",
-    apiKey: "key",
-    idempotency: "idem"
-};
-export const ID_KINDS = Object.keys(ID_PREFIXES);
-/**
- * The ONE shape source. Every regex, every SQL CHECK, and every JSON-Schema
- * `pattern` in this workspace is derived from this string — see
- * `idPatternSource` and `platform/scripts/validate/id-format-parity.test.ts`,
- * which fails the build on any hand-written `^<prefix>_` literal elsewhere.
- */
-const ID_BODY_PATTERN = "[0-9a-f]{32}";
-/** 16 random bytes rendered as 32 lowercase hex characters. */
-const ID_BYTES = 16;
-const PATTERN_CACHE = new Map();
-/** The regex source for one kind, e.g. `^wsp_[0-9a-f]{32}$`. */
-export function idPatternSource(kind) {
-    return `^${ID_PREFIXES[kind]}_${ID_BODY_PATTERN}$`;
-}
-/** The compiled anchored pattern for one kind. Case-sensitive by design. */
-export function idPattern(kind) {
-    const cached = PATTERN_CACHE.get(kind);
-    if (cached)
-        return cached;
-    const compiled = new RegExp(idPatternSource(kind));
-    PATTERN_CACHE.set(kind, compiled);
-    return compiled;
-}
-const HEX_DIGITS = "0123456789abcdef";
-function toHex(bytes) {
-    let out = "";
-    for (const byte of bytes) {
-        out += HEX_DIGITS[byte >> 4] + HEX_DIGITS[byte & 0x0f];
-    }
-    return out;
-}
-/**
- * Mint a fresh identifier of `kind`.
- *
- * Fails loudly when no CSPRNG is reachable rather than degrading to
- * `Math.random`: a guessable workspace or session id is a tenancy boundary
- * failure, not a portability inconvenience.
- */
-export function newId(kind) {
-    const prefix = ID_PREFIXES[kind];
-    if (prefix === undefined) {
-        throw new Error(`newId: unknown id kind "${String(kind)}" (add it to ID_PREFIXES)`);
-    }
-    const source = globalThis.crypto;
-    if (typeof source?.getRandomValues !== "function") {
-        throw new Error("newId: crypto.getRandomValues is unavailable; cannot mint an identifier");
-    }
-    return `${prefix}_${toHex(source.getRandomValues(new Uint8Array(ID_BYTES)))}`;
-}
-/** True when `value` is a well-formed identifier of exactly `kind`. */
-export function isId(kind, value) {
-    return typeof value === "string" && idPattern(kind).test(value);
-}
-/**
- * Narrow `value` to an identifier of `kind`, or throw.
- *
- * The message names the kind, the expected shape, and the value it got, because
- * the caller's next action is to find whichever layer produced the wrong form.
- */
-export function assertId(kind, value, label) {
-    if (isId(kind, value))
-        return value;
-    const what = label ?? `${kind} id`;
-    const got = typeof value === "string" ? JSON.stringify(value) : `<${typeof value}>`;
-    throw new Error(`${what} must match ${idPatternSource(kind)}, got ${got}`);
-}
-/**
- * The kind `value` belongs to, or `undefined`. Used by generic surfaces (audit
- * rows, error messages) that accept several kinds; a call site that knows the
- * kind must use {@link assertId} instead.
- */
-export function idKindOf(value) {
-    if (typeof value !== "string")
-        return undefined;
-    const underscore = value.indexOf("_");
-    if (underscore <= 0)
-        return undefined;
-    const prefix = value.slice(0, underscore);
-    for (const kind of ID_KINDS) {
-        if (ID_PREFIXES[kind] === prefix)
-            return isId(kind, value) ? kind : undefined;
-    }
-    return undefined;
-}

package/dist/_contracts/index.d.ts

@@ -1,42 +0,0 @@
-export * from "./provider-fault.js";
-export * from "./models.js";
-export { SESSION_LIFECYCLE_STATUSES, SESSION_STATUSES, SESSION_TERMINAL_OUTCOMES, isTerminalSessionStatus } from "./status.js";
-export type { SessionLifecycleStatus, SessionStatus, SessionTerminalOutcome } from "./status.js";
-export { AEX_RESERVED_ENV_PREFIX, BUILTIN_TOOL_NAMES, BuiltinTools, DEFAULT_BUILTIN_TOOLS, DEFAULT_OUTPUT_MODE, ENV_VARS_MAX_ENTRIES, ENV_VARS_MAX_TOTAL_BYTES, ENV_VARS_MAX_VALUE_BYTES, OUTPUT_MODES, PLATFORM_PACKAGE_ECOSYSTEMS, RESPONSE_FORMAT_KINDS, SECRETS_KEY, SECRET_ENV_NAME_PATTERN, SECRET_HANDLE_PATTERN, SKILLS_TOOL_DEFINITION, SKILLS_TOOL_NAME, crossValidateSecretEnvAndValues, packageInstallString, parseApprovalGate, parseInlineSecrets, parseResponseFormat, parseSessionLimits, parseSessionWebhook, parseSubmission, resolveBuiltinToolNames } from "./submission.js";
-export type { ApprovalGate, BuiltinToolName, JsonPrimitive, JsonValue, OutputMode, PlatformEnvironment, PlatformEnvironmentInput, PlatformInlineSecrets, PlatformInjectionConfig, PlatformMcpServerSecret, PlatformNetworking, PlatformFileCaptureConfig, PlatformPackage, PlatformPackageEcosystem, PlatformPackageInput, PlatformSecretEnvEntry, PlatformSubmission, ResponseFormat, ResponseFormatKind, SessionLimits, ProviderName, SessionWebhookSpec } from "./submission.js";
-export * from "./runtime-sizes.js";
-export * from "./runtime-kind.js";
-export * from "./runner-event.js";
-export * from "./failure-class.js";
-export * from "./event-envelope.js";
-export * from "./otlp-projection.js";
-export * from "./event-view.js";
-export { filterStream, mapStream, streamCoordinatorEvents } from "./event-stream-client.js";
-export type { CoordinatorStreamOptions, TimerPort, WebSocketFactory, WebSocketLike } from "./event-stream-client.js";
-export type { AssistantTextEntry, TurnTrace, ToolCallResult, ToolCallTrace } from "./turn-trace.js";
-export * from "./runtime-manifest.js";
-export * from "./session-record.js";
-export * from "./session-cost.js";
-export { AEX_DEFAULT_BASE_URL, AEX_DEV_BASE_URL, PLANE_BASE_URLS } from "./stable.js";
-export { SecretString, containsSecretLikeValue, createRedactingStream, redactSecrets, redactString } from "./sdk-secrets.js";
-export * from "./sdk-errors.js";
-export * from "./canonical-sha256.js";
-export * from "./session-config.js";
-export * from "./bundle-manifest.js";
-export * from "./billing-admission.js";
-export * from "./runtime-types.js";
-export * from "./account-types.js";
-export * from "./webhook-verify.js";
-export * from "./http.js";
-export * from "./session-artifacts.js";
-export * from "./workspace-resources.js";
-export * from "./sse.js";
-export * from "./error-codes.js";
-export * from "./error-factory.js";
-export * from "./suggest.js";
-export * from "./ids.js";
-export * from "./api-key.js";
-export { CONTRACT_PARSE_ERROR, isContractParseError } from "./contract-parse-error.js";
-export type { ContractParseError } from "./contract-parse-error.js";
-export * from "./schemas/index.js";
-export * from "./api-routes.js";

package/dist/_contracts/index.js

@@ -1,52 +0,0 @@
-export * from "./provider-fault.js";
-export * from "./models.js";
-export { SESSION_LIFECYCLE_STATUSES, SESSION_STATUSES, SESSION_TERMINAL_OUTCOMES, isTerminalSessionStatus } from "./status.js";
-export { AEX_RESERVED_ENV_PREFIX, BUILTIN_TOOL_NAMES, BuiltinTools, DEFAULT_BUILTIN_TOOLS, DEFAULT_OUTPUT_MODE, ENV_VARS_MAX_ENTRIES, ENV_VARS_MAX_TOTAL_BYTES, ENV_VARS_MAX_VALUE_BYTES, OUTPUT_MODES, PLATFORM_PACKAGE_ECOSYSTEMS, RESPONSE_FORMAT_KINDS, SECRETS_KEY, SECRET_ENV_NAME_PATTERN, SECRET_HANDLE_PATTERN, SKILLS_TOOL_DEFINITION, SKILLS_TOOL_NAME, crossValidateSecretEnvAndValues, packageInstallString, parseApprovalGate, parseInlineSecrets, parseResponseFormat, parseSessionLimits, parseSessionWebhook, parseSubmission, resolveBuiltinToolNames } from "./submission.js";
-export * from "./runtime-sizes.js";
-export * from "./runtime-kind.js";
-export * from "./runner-event.js";
-export * from "./failure-class.js";
-export * from "./event-envelope.js";
-export * from "./otlp-projection.js";
-export * from "./event-view.js";
-export { filterStream, mapStream, streamCoordinatorEvents } from "./event-stream-client.js";
-export * from "./runtime-manifest.js";
-export * from "./session-record.js";
-export * from "./session-cost.js";
-export { AEX_DEFAULT_BASE_URL, AEX_DEV_BASE_URL, PLANE_BASE_URLS } from "./stable.js";
-export { SecretString, containsSecretLikeValue, createRedactingStream, redactSecrets, redactString } from "./sdk-secrets.js";
-export * from "./sdk-errors.js";
-export * from "./canonical-sha256.js";
-export * from "./session-config.js";
-export * from "./bundle-manifest.js";
-// The admission vocabulary is a LEAF: `runtime-types` (whoami), `account-types`
-// (the billing summary) and both response schemas read it, so none of them owns
-// it. Same shape as `runtime-kind` / `runtime-sizes`.
-export * from "./billing-admission.js";
-export * from "./runtime-types.js";
-// Split out of `runtime-types.js` and re-exported here so the account /
-// workspace-management record types keep the exact root-barrel surface they had
-// when the two families shared one file.
-export * from "./account-types.js";
-export * from "./webhook-verify.js";
-export * from "./http.js";
-export * from "./session-artifacts.js";
-export * from "./workspace-resources.js";
-export * from "./sse.js";
-// The single canonical event surface: the `is*` guards live on `AexEvent`
-// (`event-envelope.js`) and as METHODS on `AexEventView` (`event-view.js`).
-// The loose `TurnEvent` type and its free-function guard mirror (`event-guards.js`)
-// are RETIRED — there is exactly one event shape.
-export * from "./error-codes.js";
-export * from "./error-factory.js";
-export * from "./suggest.js";
-export * from "./ids.js";
-export * from "./api-key.js";
-export { CONTRACT_PARSE_ERROR, isContractParseError } from "./contract-parse-error.js";
-export * from "./schemas/index.js";
-// The data-plane route table. Declared here rather than in the platform so the
-// spec generator, the platform dispatcher and any future non-TypeScript SDK all
-// read one statement of the HTTP surface. A subpath export is not available:
-// public-contracts-snapshot.mjs pins the code entrypoints to a fixed set, and
-// this is not one of them.
-export * from "./api-routes.js";

package/dist/_contracts/internal.d.ts

@@ -1,55 +0,0 @@
-import { type AssetFetch, type AssetUploadRetryOptions } from "./asset-upload-helper.js";
-export * from "./connection-ticket.js";
-export * from "./continuation-event.js";
-export { CONTRACT_PARSE_ERROR, isContractParseError } from "./contract-parse-error.js";
-export type { ContractParseError } from "./contract-parse-error.js";
-export * from "./archive-limits.js";
-export * from "./asset-authoring.js";
-export * from "./asset-bundle.js";
-export * from "./models.js";
-export * as operations from "./operations.js";
-export * from "./post-hook.js";
-export * from "./retry-core.js";
-export * from "./runtime-security-profile.js";
-export * from "./sdk-secrets.js";
-export * from "./session-custody.js";
-export * from "./session-retention.js";
-export * from "./side-effect-audit.js";
-export * from "./stable.js";
-export * from "./status.js";
-export * from "./submission.js";
-export * from "./unknown-field-error.js";
-export * from "./workflow-status.js";
-export { hasRunTerminalType } from "./event-stream-client.js";
-export type { RunTerminalTypeEvent } from "./event-stream-client.js";
-export { directUploadNetworkError, directUploadResponseError, isRetryableUploadError, isRetryableUploadStatus, putDirectUploadWithRetry, sanitizeUploadText } from "./asset-upload-helper.js";
-export type { AssetFetch, AssetUploadResponse, AssetUploadRetryOptions, AssetUploadSleep } from "./asset-upload-helper.js";
-/**
- * Subset of `HttpClient` needed by the asset uploader. Defined structurally so
- * SDK and CLI tests can supply thin stubs without dragging in the full client.
- */
-export interface AssetsHttpClient {
-    request<T>(path: string, init?: RequestInit, query?: Record<string, string>): Promise<T>;
-}
-export interface UploadAssetArgs {
-    readonly http: AssetsHttpClient;
-    readonly bytes: Uint8Array;
-    /** `sha256:<hex>` - the canonical content hash declared on the wire. */
-    readonly hash: string;
-    readonly contentType?: string;
-    readonly fetch?: AssetFetch;
-    readonly retry?: AssetUploadRetryOptions;
-}
-export interface UploadedAsset {
-    readonly assetId: string;
-    readonly contentHash: string;
-    readonly sizeBytes: number;
-    readonly contentType: string;
-    /** true if identical bytes were already present (dedup hit). */
-    readonly exists: boolean;
-}
-/**
- * Upload `bytes` to the hosted API's content-addressable asset store via the
- * direct-to-storage presign flow shared by SDK and CLI callers.
- */
-export declare function uploadAsset(args: UploadAssetArgs): Promise<UploadedAsset>;

package/dist/_contracts/internal.js

@@ -1,113 +0,0 @@
-import { putDirectUploadWithRetry } from "./asset-upload-helper.js";
-import { assertArchiveCompressedSize } from "./archive-limits.js";
-// Workspace-internal entry point. Re-exports submission building blocks and
-// hosts small shared helpers so public packages can avoid hand-mirroring
-// behavior. NOT part of the public `@aexhq/contracts` surface; do NOT add this
-// to the package `index`. Consumers reach it via the explicit
-// `@aexhq/contracts/internal` subpath.
-export * from "./connection-ticket.js";
-export * from "./continuation-event.js";
-export { CONTRACT_PARSE_ERROR, isContractParseError } from "./contract-parse-error.js";
-export * from "./archive-limits.js";
-export * from "./asset-authoring.js";
-export * from "./asset-bundle.js";
-export * from "./models.js";
-export * as operations from "./operations.js";
-export * from "./post-hook.js";
-export * from "./retry-core.js";
-export * from "./runtime-security-profile.js";
-export * from "./sdk-secrets.js";
-export * from "./session-custody.js";
-export * from "./session-retention.js";
-export * from "./side-effect-audit.js";
-export * from "./stable.js";
-export * from "./status.js";
-export * from "./submission.js";
-export * from "./unknown-field-error.js";
-export * from "./workflow-status.js";
-export { hasRunTerminalType } from "./event-stream-client.js";
-export { directUploadNetworkError, directUploadResponseError, isRetryableUploadError, isRetryableUploadStatus, putDirectUploadWithRetry, sanitizeUploadText } from "./asset-upload-helper.js";
-/**
- * Upload `bytes` to the hosted API's content-addressable asset store via the
- * direct-to-storage presign flow shared by SDK and CLI callers.
- */
-export async function uploadAsset(args) {
-    assertArchiveCompressedSize(args.bytes.byteLength, "uploadAsset");
-    const expected = args.hash.startsWith("sha256:") ? args.hash.slice("sha256:".length) : args.hash;
-    const actual = await computeSha256Hex(args.bytes);
-    if (actual !== expected) {
-        throw new Error(`uploadAsset: client-side hash mismatch: computed sha256:${actual} ` +
-            `but caller declared ${args.hash}. Aborting to avoid uploading corrupted data.`);
-    }
-    const contentHashHeader = `sha256:${actual}`;
-    const contentType = args.contentType ?? "application/zip";
-    const presign = await args.http.request("/api/assets/presign", {
-        method: "POST",
-        headers: {
-            "content-type": "application/json",
-            "Idempotency-Key": `asset-presign:${actual}`
-        },
-        body: JSON.stringify({ hash: contentHashHeader, sizeBytes: args.bytes.byteLength, contentType })
-    });
-    if (presign.exists) {
-        const contentHash = presign.contentHash ?? contentHashHeader;
-        return {
-            assetId: presign.assetId ?? assetIdFromContentHash(contentHash),
-            contentHash,
-            sizeBytes: presign.sizeBytes ?? args.bytes.byteLength,
-            contentType: presign.contentType ?? contentType,
-            exists: true
-        };
-    }
-    if (!presign.uploadUrl) {
-        throw new Error("uploadAsset: presign returned no uploadUrl and exists:false");
-    }
-    const doFetch = args.fetch ?? globalThis.fetch;
-    const putHeaders = {
-        "content-type": contentType,
-        ...(presign.requiredHeaders ?? {})
-    };
-    await putDirectUploadWithRetry(doFetch, presign.uploadUrl, {
-        method: "PUT",
-        headers: putHeaders,
-        body: args.bytes
-    }, args.retry);
-    const fin = await args.http.request("/api/assets/finalize", {
-        method: "POST",
-        headers: {
-            "content-type": "application/json",
-            "Idempotency-Key": `asset-finalize:${actual}`
-        },
-        body: JSON.stringify({ hash: contentHashHeader, sizeBytes: args.bytes.byteLength })
-    });
-    const contentHash = fin.contentHash ?? presign.contentHash ?? contentHashHeader;
-    return {
-        assetId: fin.assetId ?? presign.assetId ?? assetIdFromContentHash(contentHash),
-        contentHash,
-        sizeBytes: fin.sizeBytes ?? args.bytes.byteLength,
-        contentType: fin.contentType ?? presign.contentType ?? contentType,
-        exists: false
-    };
-}
-async function computeSha256Hex(bytes) {
-    const subtle = globalThis.crypto?.subtle;
-    if (!subtle) {
-        throw new Error("uploadAsset: globalThis.crypto.subtle is not available; " +
-            "Bun, Node 18+, or a Web-Crypto-capable runtime is required");
-    }
-    const digest = await subtle.digest("SHA-256", bytes);
-    return bufferToHex(digest);
-}
-function assetIdFromContentHash(contentHash) {
-    const hex = contentHash.startsWith("sha256:") ? contentHash.slice("sha256:".length) : contentHash;
-    return `asset_${hex}`;
-}
-function bufferToHex(buffer) {
-    const view = new Uint8Array(buffer);
-    let out = "";
-    for (let i = 0; i < view.length; i++) {
-        const byte = view[i];
-        out += byte.toString(16).padStart(2, "0");
-    }
-    return out;
-}

package/dist/_contracts/models.d.ts

@@ -1,30 +0,0 @@
-import { MODEL_SLUG_PATTERN } from "./schemas/models.js";
-/**
- * Public model ids are plain **Vercel AI Gateway `creator/model` slug strings**.
- *
- * There is no closed model set and no provider concept: a customer names any
- * slug the managed gateway catalog serves (e.g. `anthropic/claude-haiku-4-5`,
- * `deepseek/deepseek-v4-flash`) and the platform routes it through the single
- * managed gateway key. Adding a catalog model is a ZERO-code change — the slug
- * just works. The boundary validation is purely structural (see
- * {@link parseModelSlug}); an unknown-but-well-formed slug is allowed through so
- * a slightly-old client can still run a newly-launched model (the gateway
- * arbitrates at submit time).
- */
-export type ModelName = string;
-/**
- * Structural gateway model-slug shape: a lowercase `creator`, a `/`, then the
- * model segment. Matches Vercel AI Gateway `creator/model` slugs
- * (e.g. `anthropic/claude-sonnet-4-6`, `openai/gpt-4.1`, `x-ai/grok-2`).
- */
-export { MODEL_SLUG_PATTERN };
-/** True when `input` is a structurally valid `creator/model` gateway slug. */
-export declare function isModelSlug(input: unknown): input is string;
-/**
- * Validate a public model id as a gateway `creator/model` slug string. This is
- * a boundary shape gate ONLY — it does not consult a catalog, so a well-formed
- * slug the running client does not recognize is accepted (the gateway rejects a
- * truly-absent model at submit time). Throws a {@link import("./contract-parse-error.js").ContractParseError}
- * with `field` context on a malformed value.
- */
-export declare function parseModelSlug(input: unknown, field?: string): string;

package/dist/_contracts/models.js

@@ -1,28 +0,0 @@
-import { rethrowContractParseError } from "./contract-parse-error.js";
-import { MODEL_SLUG_PATTERN, modelSlugSchema } from "./schemas/models.js";
-import { parseWire } from "./schemas/wire.js";
-/**
- * Structural gateway model-slug shape: a lowercase `creator`, a `/`, then the
- * model segment. Matches Vercel AI Gateway `creator/model` slugs
- * (e.g. `anthropic/claude-sonnet-4-6`, `openai/gpt-4.1`, `x-ai/grok-2`).
- */
-export { MODEL_SLUG_PATTERN };
-/** True when `input` is a structurally valid `creator/model` gateway slug. */
-export function isModelSlug(input) {
-    return typeof input === "string" && MODEL_SLUG_PATTERN.test(input);
-}
-/**
- * Validate a public model id as a gateway `creator/model` slug string. This is
- * a boundary shape gate ONLY — it does not consult a catalog, so a well-formed
- * slug the running client does not recognize is accepted (the gateway rejects a
- * truly-absent model at submit time). Throws a {@link import("./contract-parse-error.js").ContractParseError}
- * with `field` context on a malformed value.
- */
-export function parseModelSlug(input, field = "submission.model") {
-    try {
-        return parseWire(modelSlugSchema(field), input);
-    }
-    catch (error) {
-        rethrowContractParseError(error, "parseModelSlug");
-    }
-}

package/dist/_contracts/operation-core.d.ts

@@ -1,36 +0,0 @@
-import { SessionConfigValidationError } from "./sdk-errors.js";
-export interface IdempotencyOptions {
-    readonly idempotencyKey?: string;
-}
-export declare const IDEMPOTENCY_KEY_MAX_LENGTH = 255;
-/**
- * The factory for every public client-side session config rejection.
- *
- * PACKAGE-private, not public: `operations.ts` and `account-operations.ts`
- * import it, and neither re-exports it, so it stays off the `operations`
- * namespace exactly as it was when it was a `function` local to `operations.ts`.
- */
-export declare function configError(field: string, message: string): SessionConfigValidationError;
-/**
- * Resolve a caller-supplied idempotency key to the value that ships on the
- * request. FAIL-FAST: an empty or whitespace-only key THROWS
- * {@link SessionConfigValidationError} — a footgun that silently disabled dedup
- * (`?? generate()` kept `''`, then a downstream truthy header-drop shipped no
- * `Idempotency-Key`). An absent key generates a fresh one; a real key is
- * returned verbatim. The single choke point every send/create/run entry uses.
- */
-export declare function resolveIdempotencyKey(key?: string): string;
-/**
- * Derive the first-message identity from a session-create identity without
- * crossing the hosted 255-character header limit. Short keys retain the
- * readable `<createKey>:message` form; long keys use a deterministic digest.
- */
-export declare function deriveMessageIdempotencyKey(createKey: string): string;
-/**
- * Fail-closed idempotency header builder. An EMPTY string throws (defense in
- * depth alongside {@link resolveIdempotencyKey}) rather than silently dropping
- * the header and proceeding non-idempotent; an absent key yields no header.
- *
- * Package-private on the same terms as {@link configError}.
- */
-export declare function idempotencyHeaders(options?: IdempotencyOptions): HeadersInit | undefined;

package/dist/_contracts/operation-core.js

@@ -1,70 +0,0 @@
-/**
- * The two primitives every client operation module needs, and the only two that
- * would otherwise have to be duplicated or imported across a cycle: the
- * client-side config-rejection factory, and the idempotency-key policy.
- *
- * A LEAF on purpose. It imports `ids.js` and `sdk-errors.js` and nothing else,
- * so `operations.ts` and `account-operations.ts` can each depend on it without
- * depending on each other. The public names below are re-exported from
- * `operations.ts`, which is where callers have always found them.
- */
-import { createHash } from "node:crypto";
-import { newId } from "./ids.js";
-import { SessionConfigValidationError } from "./sdk-errors.js";
-export const IDEMPOTENCY_KEY_MAX_LENGTH = 255;
-const MESSAGE_IDEMPOTENCY_SUFFIX = ":message";
-/**
- * The factory for every public client-side session config rejection.
- *
- * PACKAGE-private, not public: `operations.ts` and `account-operations.ts`
- * import it, and neither re-exports it, so it stays off the `operations`
- * namespace exactly as it was when it was a `function` local to `operations.ts`.
- */
-export function configError(field, message) {
-    return new SessionConfigValidationError(message, { field });
-}
-/**
- * Resolve a caller-supplied idempotency key to the value that ships on the
- * request. FAIL-FAST: an empty or whitespace-only key THROWS
- * {@link SessionConfigValidationError} — a footgun that silently disabled dedup
- * (`?? generate()` kept `''`, then a downstream truthy header-drop shipped no
- * `Idempotency-Key`). An absent key generates a fresh one; a real key is
- * returned verbatim. The single choke point every send/create/run entry uses.
- */
-export function resolveIdempotencyKey(key) {
-    if (key === undefined) {
-        return newId("idempotency");
-    }
-    if (typeof key !== "string" || key.trim().length === 0) {
-        throw configError("idempotencyKey", "idempotencyKey must be a non-empty, non-whitespace string");
-    }
-    if (key.length > IDEMPOTENCY_KEY_MAX_LENGTH) {
-        throw configError("idempotencyKey", `idempotencyKey must be at most ${IDEMPOTENCY_KEY_MAX_LENGTH} characters`);
-    }
-    return key;
-}
-/**
- * Derive the first-message identity from a session-create identity without
- * crossing the hosted 255-character header limit. Short keys retain the
- * readable `<createKey>:message` form; long keys use a deterministic digest.
- */
-export function deriveMessageIdempotencyKey(createKey) {
-    const validated = resolveIdempotencyKey(createKey);
-    const readable = `${validated}${MESSAGE_IDEMPOTENCY_SUFFIX}`;
-    if (readable.length <= IDEMPOTENCY_KEY_MAX_LENGTH)
-        return readable;
-    const digest = createHash("sha256").update(validated, "utf8").digest("hex");
-    return `aex-message-sha256-${digest}`;
-}
-/**
- * Fail-closed idempotency header builder. An EMPTY string throws (defense in
- * depth alongside {@link resolveIdempotencyKey}) rather than silently dropping
- * the header and proceeding non-idempotent; an absent key yields no header.
- *
- * Package-private on the same terms as {@link configError}.
- */
-export function idempotencyHeaders(options) {
-    if (options?.idempotencyKey === undefined)
-        return undefined;
-    return { "Idempotency-Key": resolveIdempotencyKey(options.idempotencyKey) };
-}