@aexhq/sdk 0.46.5-canary → 0.51.0

package/dist/cli.mjs.sha256

@@ -1 +0,0 @@
-a57352fbb791f3941e71e1c75b56cbe77a1c7616be763c021fe5b37e316a9928  cli.mjs

package/dist/client-types.d.ts

@@ -1,192 +0,0 @@
-import type { ApprovalGate, AexEventView, BuiltinToolName, ModelName, OutputMode, PlatformEnvironmentInput, PlatformSubmission, ResponseFormat, Session, SessionCheckpointRevision, SessionFile, SessionMessage, SessionRun, SessionRuntime, SubmissionAssets, TurnOutcome, TurnResult, TurnTrace, WebSocketFactory } from "./_contracts/index.js";
-import type { McpServer } from "./mcp-server.js";
-import type { Secret } from "./secret.js";
-/**
- * A transcript message as the SDK hands it to a caller.
- *
- * Deliberately NOT an alias of {@link SessionMessage}, which is the WIRE shape
- * returned by `GET /api/sessions/{id}/messages` and always carries `timestamp`,
- * `sequence` and `content`. A `Message` may also be PROJECTED from the event
- * stream by `projectAssistantMessages`, which is building one as the tokens
- * arrive and legitimately has no sequence or timestamp yet, and never has the
- * wire's `content` array.
- *
- * Same distinction as `Session` against `SessionWire`: one shape is what the
- * server sent, the other is what the client assembled. Conflating them made the
- * wire type's guarantees look optional and the projection's gaps look like
- * server behaviour.
- */
-export interface Message {
-    readonly id: string;
-    readonly sender: SessionMessage["sender"];
-    readonly text: string;
-    readonly timestamp?: string;
-    readonly turnSeq?: number;
-    readonly sequence?: number;
-}
-export type SessionInput = string | readonly string[];
-export interface SessionEnvironmentOptions extends Omit<PlatformEnvironmentInput, "envVars"> {
-    readonly variables?: Readonly<Record<string, string>>;
-    readonly secrets?: Readonly<Record<string, Secret>>;
-}
-export interface SessionOverrides {
-    readonly idleTtl?: string;
-    readonly timeout?: string;
-    readonly maxSpendUsd?: number;
-    /**
-     * Per-session iteration cap (agent loop turns). Defaults + ceiling are enforced
-     * server-side; omit to accept the platform default. A positive integer.
-     */
-    readonly maxTurns?: number;
-}
-/** Stable mutation identity used for server-side deduplication and safe transport retries. */
-export interface IdempotencyOptions {
-    readonly idempotencyKey?: string;
-}
-/**
- * Options for creating a resumable session or starting a one-shot run.
- * Reusable bytes are published first through `aex.workspace`, then pinned in
- * `assets` by resource id and immutable version.
- */
-export interface SessionCreateOptions extends IdempotencyOptions {
-    /**
-     * The model to run, as a Vercel AI Gateway `creator/model` slug string
-     * (e.g. `"anthropic/claude-haiku-4-5"`, `"deepseek/deepseek-v4-flash"`).
-     * The managed gateway routes it — no provider selection and no API key.
-     */
-    readonly model: ModelName;
-    readonly system?: string;
-    /** Immutable workspace resources to materialize for the session. */
-    readonly assets?: Partial<SubmissionAssets>;
-    readonly mcpServers?: readonly McpServer[];
-    /**
-     * File capture policy for the session's captured files. Omit `allowedDirs`
-     * to expose regular workspace files from the latest complete checkpoint;
-     * listed roots narrow capture, and `deniedDirs` subtracts noise.
-     */
-    readonly fileCapture?: {
-        readonly allowedDirs?: readonly string[];
-        readonly deniedDirs?: readonly string[];
-        readonly captureTimeoutMs?: number;
-        readonly maxFileBytes?: number;
-        readonly maxTotalBytes?: number;
-        readonly maxFiles?: number;
-    };
-    /** Builtin capabilities, kept separate from uploaded custom-tool assets. */
-    readonly builtinTools?: "default" | "none" | readonly BuiltinToolName[];
-    /**
-     * Assistant-output granularity. `"buffered"` (default) delivers ONE coalesced
-     * `TEXT_MESSAGE_CONTENT` per assistant message. `"stream"` delivers provisional,
-     * non-replayable per-token `TEXT_MESSAGE_CONTENT` deltas (`replayable:false`,
-     * `liveSequence`, and no durable `sequence`) as they arrive. Every model
-     * streams through the managed gateway, so `"stream"` is honored for ALL models.
-     * A coalesced final `TEXT_MESSAGE_CONTENT` ALWAYS follows the deltas, so a
-     * buffered consumer sees the same final text either way; deltas are
-     * provisional until that coalesced block.
-     */
-    readonly outputMode?: OutputMode;
-    /**
-     * Structured-output policy. `{ kind:'text' }` (default) is free-form;
-     * `{ kind:'json_schema', schema, strict?, name? }` requests provider-native
-     * constrained decode against `schema`. The typed outcome is read from
-     * `start<T>()`'s `result.outcome` (`{ kind:'decoded', value }` or
-     * `{ kind:'refused', reason }`) — never an untyped hallucinated object.
-     */
-    readonly responseFormat?: ResponseFormat;
-    /**
-     * Declarative HITL write-gate: the platform puts the session
-     * `awaiting_approval` BEFORE dispatching any tool in `tools`, independent of
-     * model prose. Resume with `session.approve()` or reject with
-     * `session.deny()`.
-     */
-    readonly approvalGate?: ApprovalGate;
-    readonly metadata?: PlatformSubmission["metadata"];
-    readonly environment?: SessionEnvironmentOptions;
-    /**
-     * The execution runtime for the session — grouped as `{ kind, size }`.
-     *
-     *   - `kind` — which backend runs it: `spot_container` (default; cheapest
-     *     capacity that executes every tool, but a reclaim can replay an
-     *     interrupted step, so side-effecting tools run AT LEAST ONCE),
-     *     `container` (the same host on on-demand capacity, exactly-once), or
-     *     `lambda` (serverless: zero idle billing and seconds-not-minutes cold
-     *     start, availability-gated and currently unable to execute a tool call).
-     *     Prefer the {@link RuntimeKinds} symbol const.
-     *   - `size` — the managed box preset ({@link RuntimeSize}); prefer {@link Sizes}.
-     *
-     * Both optional; the platform applies defaults (`spot_container`, the 1 GB tier).
-     * e.g. `runtime: { kind: "container", size: Sizes.CPU_2_8GB }`.
-     *
-     * Runtimes differ in capability, not only in price. Read what a runtime will
-     * actually do from `whoami().runtimeCapabilities.profilesByRuntimeKind` before
-     * naming one; a submission that exceeds the selected profile is refused before
-     * execution rather than degraded.
-     */
-    readonly runtime?: SessionRuntime;
-    readonly overrides?: SessionOverrides;
-    /**
-     * Optional callback URL registered on the session. The platform delivers a
-     * run-scoped `run.finished` or `run.error` event after every run finalizes,
-     * signed Standard-Webhooks style (verify with {@link verifyAexWebhook}). The
-     * URL must be https.
-     */
-    readonly webhook?: {
-        readonly url: string;
-    };
-}
-export interface SessionSendOptions extends IdempotencyOptions {
-    readonly webSocketFactory?: WebSocketFactory;
-    readonly idleTimeoutMs?: number;
-    readonly pingIntervalMs?: number;
-}
-export interface SessionStartOptions extends SessionCreateOptions {
-    readonly message: SessionInput;
-    readonly deleteAfter?: boolean;
-    readonly messageIdempotencyKey?: string;
-    readonly stream?: Omit<SessionSendOptions, "idempotencyKey">;
-}
-/** Options for {@link Aex.start}. */
-export interface StartSessionOptions {
-    /** Overall wait budget (ms) for the one-shot run to finish. */
-    readonly timeoutMs?: number;
-    readonly webSocketFactory?: WebSocketFactory;
-    readonly idleTimeoutMs?: number;
-    readonly pingIntervalMs?: number;
-    /** Throw a {@link SessionStateError} when the session does not succeed. Default false. */
-    readonly throwOnFailure?: boolean;
-}
-/**
- * The unified finished result of one run (`session.messages.send(...).finished()`). Extends
- * the contracts {@link TurnResult}, so `finished()` returns the SAME shape as
- * `start()`: the terminal `status` (a {@link SessionTerminalOutcome}), `ok`,
- * `costUsd`, and `usage` come from that run's terminal event and are always present.
- */
-export interface SessionRunResult<T = unknown> extends TurnResult {
-    readonly sessionId: string;
-    readonly session: Session;
-    readonly run: SessionRun;
-    readonly text: string;
-    readonly events: readonly AexEventView[];
-    readonly files: readonly SessionFile[];
-    /** Committed checkpoint for a finished run; absent when a run errors before one exists. */
-    readonly checkpoint?: SessionCheckpointRevision;
-    readonly messages: readonly Message[];
-    /** The typed schema-decode outcome when a `json_schema` `responseFormat` was set. */
-    readonly outcome?: TurnOutcome<T>;
-}
-/**
- * The unified finished result of {@link Aex.start}. Extends the contracts
- * {@link TurnResult} (the one shape `start()` and `finished()` share), so
- * the terminal `status` (a {@link SessionTerminalOutcome}), `ok`, `costUsd`
- * (`number`, `>= 0`), and `usage` are always present. RUN_FINISHED is emitted
- * only after the checkpoint commit. It is the same result returned by
- * `session.messages.send(...).finished()`, plus the decoded event trace.
- *
- * `T` is the `responseFormat` decode type: when the session was submitted with a
- * `json_schema` `responseFormat`, {@link outcome} carries the typed decoded
- * value or a typed refusal.
- */
-export interface SessionResult<T = unknown> extends SessionRunResult<T> {
-    /** Decoded view of the events: tool calls, usage, and assistant text. */
-    readonly trace: TurnTrace;
-}

package/dist/client-types.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=client-types.js.map

package/dist/client-types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"client-types.js","sourceRoot":"","sources":["../src/client-types.ts"],"names":[],"mappings":""}

package/dist/client.d.ts

@@ -1,464 +0,0 @@
-import { HttpClient, SecretString, type AexEventView, type AexStreamEventView, type BillingAutoTopupRequest, type BillingAutoTopupUpdate, type BillingHostedSession, type BillingLedgerPage, type BillingLedgerQuery, type BillingPortalRequest, type BillingSummary, type BillingTopupCheckoutRequest, type ChildSessionRef, type DebugSink, type FetchLike, type OtlpExportLogsServiceRequest, type OtlpExportTraceServiceRequest, type SessionFile, type SessionFileType, type SessionFileLink, type SessionFileLinkOptions, type SessionFileQuery, type SessionFilesQuery, type SessionFilesSnapshot, type SessionFileText, type ReadSessionFileTextOptions, type Session, type SessionCreateRequest, type SessionListPage, type SessionListQuery, type SessionStateChangeAccepted, type SessionWebhookDelivery, type SecretRecord, type OrgRecord, type CreateOrgRequest, type WorkspaceRecord, type CreateWorkspaceRequest, type ApiKeyRecord, type CreateApiKeyRequest, type OrgMemberRecord, type CreateOrgInviteRequest, type OrgInvite, type WorkspaceFileRecord, type WorkspaceInstructionRecord, type WorkspaceResourceListQuery, type WorkspaceResourcePage, type WorkspaceSkillRecord, type WorkspaceToolRecord, type WebhookSigningSecret, type WhoAmI } from "./_contracts/index.js";
-import { Instructions } from "./instructions.js";
-import { type UploadedAsset } from "./asset-upload.js";
-import { File, type ZipStreamDriver } from "./file.js";
-import { type RetryOptions } from "./retry.js";
-import { Skill } from "./skill.js";
-import { Tool } from "./tool.js";
-import type { IdempotencyOptions, Message, SessionCreateOptions, SessionInput, SessionResult, SessionRunResult, SessionSendOptions, SessionStartOptions, StartSessionOptions } from "./client-types.js";
-export type { IdempotencyOptions, Message, SessionCreateOptions, SessionEnvironmentOptions, SessionInput, SessionOverrides, SessionResult, SessionRunResult, SessionSendOptions, SessionStartOptions, StartSessionOptions } from "./client-types.js";
-export interface AexOptions {
-    /** Workspace-scoped SDK API key. */
-    readonly apiKey?: string;
-    /**
-     * API root, e.g. `https://aex.example.com`. Optional — defaults to the
-     * canonical prd URL (`https://api.aex.dev`). Dev keys select
-     * `https://dev-api.aex.dev`; override this for a localhost development stack
-     * or another hosted aex API endpoint.
-     */
-    readonly baseUrl?: string;
-    /** Optional `fetch` override for testing. */
-    readonly fetch?: FetchLike;
-    /**
-     * Local debug output. `true` prints a redacted one-line trace per HTTP
-     * request to stderr (method, path, status, elapsed); pass a function to
-     * route the traces elsewhere. Purely local — nothing is uploaded.
-     */
-    readonly debug?: boolean | DebugSink;
-    /**
-     * Built-in transport retry policy for hosted API requests and direct asset
-     * uploads. Reads, idempotent HTTP methods, and mutations carrying a stable
-     * Idempotency-Key are retried on transient failures with bounded exponential
-     * backoff + jitter. Unsafe mutations are attempted once.
-     *
-     * Omit for sensible defaults (4 attempts, ~2 min budget); pass an object to
-     * tune `maxAttempts` / delays / `maxElapsedMs`; pass `false` to disable.
-     */
-    readonly retry?: RetryOptions | false;
-}
-export declare class SessionRunStream implements AsyncIterable<AexStreamEventView> {
-    #private;
-    constructor(stream: () => AsyncGenerator<AexStreamEventView, SessionRunResult, void>);
-    [Symbol.asyncIterator](): AsyncIterator<AexStreamEventView>;
-    finished(): Promise<SessionRunResult>;
-}
-/**
- * Accessor over the session's assistant messages. `session.messages` returns
- * this synchronously; each method fetches on call.
- */
-export interface SessionMessages {
-    send(input: SessionInput, options?: SessionSendOptions): SessionRunStream;
-    replayLast(options?: SessionSendOptions): SessionRunStream;
-    /** Return the full transcript, transparently following bounded API pages. */
-    list(): Promise<readonly Message[]>;
-    last(): Promise<Message | undefined>;
-    first(): Promise<Message | undefined>;
-}
-/**
- * Accessor over the session's events. Snapshot/polling reads yield durable
- * {@link AexEventView}s with a replay cursor. The live coordinator may also
- * yield provisional {@link AexStreamEventView}s with `replayable:false` and a
- * per-run `liveSequence` instead of a durable `sequence`.
- */
-export interface SessionEvents {
-    /** Lazily traverse durable history one bounded API page at a time. */
-    iterate(options?: IterateEventsOptions): AsyncIterable<AexEventView>;
-    list(): Promise<readonly AexEventView[]>;
-    last(): Promise<AexEventView | undefined>;
-    first(): Promise<AexEventView | undefined>;
-    stream(options?: StreamEventsOptions): AsyncIterable<AexEventView>;
-    streamEnvelopes(options?: StreamEnvelopesOptions): AsyncIterable<AexStreamEventView>;
-    archiveLink(options?: SessionFileLinkOptions): Promise<SessionFileLink>;
-    /** Download the events-namespace archive as a zip. */
-    download(options?: DownloadOptions): Promise<Uint8Array>;
-}
-/** Standards-pure OTLP/HTTP JSON pages derived from a session's journal. */
-export interface SessionOtel {
-    traces(): AsyncIterable<OtlpExportTraceServiceRequest>;
-    logs(): AsyncIterable<OtlpExportLogsServiceRequest>;
-}
-/**
- * Accessor over the session's captured files (`session.files`):
- * enumerate, read one as capped text, locate/resolve, and download.
- */
-export interface SessionFiles {
-    list(query?: SessionFilesQuery): Promise<SessionFilesSnapshot>;
-    last(): Promise<SessionFile | undefined>;
-    first(): Promise<SessionFile | undefined>;
-    read(selector: SessionFileSelector, options?: ReadSessionFileTextOptions): Promise<SessionFileText>;
-    find(query: SessionFilesQuery): Promise<readonly SessionFile[]>;
-    findOne(query: SessionFilesQuery): Promise<SessionFile | null>;
-    link(selectorOrQuery: SessionFileLinkSelector, options?: SessionFileLinkOptions): Promise<SessionFileLink>;
-    fetch(selectorOrQuery: SessionFileLinkSelector, options?: SessionFileLinkOptions): Promise<Response>;
-    /** No selector = files-namespace zip; with selector = one file's raw bytes. */
-    download(selector?: SessionFileSelector, options?: DownloadOptions): Promise<Uint8Array>;
-}
-/**
- * Accessor over the session's run-scoped webhook ledger (`session.webhooks`).
- */
-export interface SessionWebhooks {
-    list(): Promise<readonly SessionWebhookDelivery[]>;
-    redeliver(deliveryId: string): Promise<void>;
-}
-export declare class SessionHandle {
-    #private;
-    readonly messages: SessionMessages;
-    readonly events: SessionEvents;
-    readonly otel: SessionOtel;
-    readonly files: SessionFiles;
-    readonly webhooks: SessionWebhooks;
-    constructor(http: HttpClient, session: Session, fetch?: FetchLike);
-    get id(): string;
-    get record(): Session;
-    suspend(): Promise<SessionStateChangeAccepted>;
-    cancel(): Promise<SessionStateChangeAccepted>;
-    resume(): Promise<SessionStateChangeAccepted>;
-    delete(): Promise<void>;
-    /**
-     * Request the HITL write-gate: park this session `awaiting_approval` before
-     * its next gated action. Imperative counterpart to the declarative
-     * `approvalGate` submission option. Resume with {@link approve} / reject with
-     * {@link deny}.
-     */
-    requestApproval(): Promise<SessionStateChangeAccepted>;
-    /** Approve an `awaiting_approval` session so the held turn resumes (→ running). */
-    approve(): Promise<SessionStateChangeAccepted>;
-    /** Deny an `awaiting_approval` session; its run is cancelled and the session returns to `idle`. */
-    deny(): Promise<SessionStateChangeAccepted>;
-    /**
-     * Enumerate this session's subagent CHILD sessions (`GET /api/sessions/:id/children`). Each is
-     * a read-only {@link ChildSessionHandle} with observable events, checkpointed
-     * files, descendants, lineage, and lifecycle state.
-     */
-    children(): Promise<readonly ChildSessionHandle[]>;
-    /** Re-read the session record from the server and store it as the current record. */
-    refresh(): Promise<Session>;
-    /**
-     * Download EVERYTHING public about this session as one zip, assembled
-     * client-side from the public read endpoints. Organised into `metadata/`,
-     * `events/`, and `files/` folders, plus a `manifest.json`. Pass `to` to
-     * also write the bytes to a file path while still returning them.
-     */
-    download(options?: DownloadOptions): Promise<Uint8Array>;
-    /** Download only the session record (the `metadata` namespace) as a zip. */
-    downloadMetadata(options?: DownloadOptions): Promise<Uint8Array>;
-}
-export declare class SessionClient {
-    #private;
-    constructor(http: HttpClient, buildCreateRequest: (options: SessionCreateOptions) => Promise<SessionCreateRequest>, fetch?: FetchLike);
-    create(options: SessionCreateOptions): Promise<SessionHandle>;
-    open(sessionId: string): Promise<SessionHandle>;
-    get(sessionId: string): Promise<Session>;
-    delete(sessionId: string): Promise<void>;
-    list(query?: SessionListQuery): Promise<SessionListPage>;
-}
-/** Child-session events accessor (list + polling stream) keyed on a session id. */
-export interface ChildSessionEvents {
-    iterate(options?: IterateEventsOptions): AsyncIterable<AexEventView>;
-    list(): Promise<readonly AexEventView[]>;
-    stream(options?: StreamEventsOptions): AsyncIterable<AexEventView>;
-}
-/**
- * Read-only observation handle for a lineage-discoverable subagent child.
- * Child ids address events, checkpointed files, and descendants. They are not
- * top-level resumable sessions, so this handle deliberately has no get, send,
- * cancel, suspend, resume, or delete controls.
- */
-export declare class ChildSessionHandle {
-    #private;
-    readonly events: ChildSessionEvents;
-    readonly files: SessionFiles;
-    constructor(http: HttpClient, ref: ChildSessionRef, fetch?: FetchLike);
-    get id(): string;
-    get parentSessionId(): string;
-    get depth(): number | undefined;
-    /** The lifecycle status captured by the parent lineage read. */
-    get status(): ChildSessionRef["status"];
-    get ref(): ChildSessionRef;
-    /** This child's own subagent children (recursive lineage). */
-    children(): Promise<readonly ChildSessionHandle[]>;
-}
-export interface StreamEventsOptions {
-    /** Starting cursor; only events with `sequence >= from` are considered. Default 0. */
-    readonly from?: number;
-    /** Poll interval in ms for the event snapshot loop. Default 1000. */
-    readonly intervalMs?: number;
-    readonly signal?: AbortSignal;
-}
-export interface IterateEventsOptions {
-    /** Number of durable events requested per API page. Default and maximum: 1000. */
-    readonly pageSize?: number;
-    /** Stop before requesting another page, or abort the active page request. */
-    readonly signal?: AbortSignal;
-}
-export interface StreamEnvelopesOptions {
-    /** Starting cursor — events with `sequence >= from` are delivered. Default 0. */
-    readonly from?: number;
-    readonly signal?: AbortSignal;
-    /**
-     * Half-open watchdog window passed to the coordinator stream. If no frame
-     * arrives within this many ms, the SDK reconnects and resumes from the
-     * current cursor. Default 45s. Set 0 to disable.
-     */
-    readonly idleTimeoutMs?: number;
-    /**
-     * Client keep-alive ping cadence passed to the coordinator stream. Default
-     * 15s. Set 0 to disable.
-     */
-    readonly pingIntervalMs?: number;
-    /**
-     * Event-quiet replay self-heal window passed to the coordinator stream. If no
-     * real event frame arrives within this many ms, the SDK reconnects and replays
-     * from the current cursor. Default 90s. Set 0 to disable.
-     */
-    readonly eventQuietRecheckMs?: number;
-}
-export type SessionFilePathMatch = "exact" | "suffix";
-export interface SessionFilePathSelector {
-    readonly path: string;
-    readonly match?: SessionFilePathMatch;
-}
-export interface SessionFileIdSelector {
-    readonly id: string;
-    readonly checkpointId: string;
-}
-export type SessionFileSelector = SessionFile | SessionFileIdSelector | SessionFilePathSelector;
-export type SessionFileLinkSelector = SessionFileSelector | SessionFilesQuery;
-export interface DownloadOptions {
-    readonly to?: string;
-    /** Immutable checkpoint to read. */
-    readonly checkpointId?: string;
-    /**
-     * Per-attempt timeout for fetching and reading the selected file body.
-     * Defaults to 30_000ms; idempotent file downloads retry once on timeout.
-     */
-    readonly timeoutMs?: number;
-}
-/**
- * Workspace secret management exposed under `client.workspace.secrets`.
- *
- * Lifecycle parity with assets: a `Secret.value(...)` is per-session and
- * gone at terminal; `set` persists a named, searchable workspace secret you can `get` (metadata),
- * `rotate`, `list`, and `delete`. The identity is the `name`; the value rotates
- * under that stable name.
- *
- * Values are write-only through the public SDK: `set`/`rotate` send the value in
- * the request BODY (never the URL); `get`/`list` return metadata only.
- */
-export declare class SecretsClient {
-    #private;
-    constructor(http: HttpClient);
-    /** Create a named workspace secret. Accepts a raw string or a `SecretString`. */
-    set(args: {
-        readonly name: string;
-        readonly value: string | SecretString;
-    }): Promise<SecretRecord>;
-    /** List workspace secret metadata (searchable by name). Never returns values. */
-    list(): Promise<readonly SecretRecord[]>;
-    /** Metadata for one workspace secret by name. Never returns the value. */
-    get(name: string): Promise<SecretRecord>;
-    /** Replace the value of an existing workspace secret; bumps its version. */
-    rotate(args: {
-        readonly name: string;
-        readonly value: string | SecretString;
-    }): Promise<SecretRecord>;
-    delete(name: string): Promise<void>;
-}
-/**
- * The one-time reveal of a newly created workspace + its first workspace-scoped
- * API key. The key is shown exactly once at creation; it is wrapped in a
- * redacted {@link SecretString} so it never lands in a log via string coercion —
- * call `apiKey.unwrap()` to read the raw value (e.g. to construct a new `Aex`
- * client bound to the workspace).
- */
-export interface NewWorkspaceResult {
-    readonly workspaceId: string;
-    /** The workspace-scoped API key, revealed ONCE. Redacted on `toString`/JSON. */
-    readonly apiKey: SecretString;
-    readonly slug?: string;
-    readonly orgId?: string;
-}
-/** The one-time reveal of a newly minted API key (workspace key or account PAT). */
-export interface NewApiKeyResult {
-    readonly id: string;
-    /** The freshly minted key value, revealed ONCE. Redacted on `toString`/JSON. */
-    readonly apiKey: SecretString;
-    readonly name?: string;
-    readonly kind?: string;
-    readonly workspaceId?: string;
-    readonly scopes?: readonly string[];
-}
-/**
- * Control-plane management of the ORGS the account principal belongs to. Reached
- * with an account credential (PAT / device session), NOT a data-plane workspace
- * key. An org owns workspaces and is the billing / roles / cap boundary.
- *
- * Naming: `client.orgs` (plural) is a collection across the account, mirroring
- * `client.sessions` / `client.workspaces`.
- */
-export declare class OrgsClient {
-    #private;
-    constructor(http: HttpClient);
-    /** Create an org; the caller becomes its admin. */
-    create(args: CreateOrgRequest): Promise<OrgRecord>;
-    /** List the orgs the caller belongs to. */
-    list(): Promise<readonly OrgRecord[]>;
-    /** List an org's members (pending invites appear with `status: "pending"`). */
-    members(orgId: string): Promise<readonly OrgMemberRecord[]>;
-    /** Invite an email to the org at a role (`member` by default). */
-    invite(orgId: string, args: CreateOrgInviteRequest): Promise<OrgInvite>;
-}
-/**
- * Control-plane management of WORKSPACES across the account's orgs. This is the
- * PLURAL collection (`client.workspaces`) — distinct from the SINGULAR
- * `client.workspace`, which is the data-plane context bound to the current key
- * (its files/skills/tools/instructions/secrets). Creating a workspace returns
- * its first workspace-scoped key ONCE.
- */
-export declare class WorkspacesClient {
-    #private;
-    constructor(http: HttpClient);
-    /**
-     * Create a workspace under an org and reveal its first workspace-scoped API
-     * key ONCE (wrapped in a redacted {@link SecretString}). The free tier caps at
-     * 3 workspaces per org.
-     */
-    create(args: CreateWorkspaceRequest): Promise<NewWorkspaceResult>;
-    /** List the workspaces the caller can manage across their orgs. */
-    list(): Promise<readonly WorkspaceRecord[]>;
-    /** Delete a workspace by id. Idempotent. */
-    delete(workspaceId: string): Promise<void>;
-}
-/**
- * Control-plane management of API KEYS — both data-plane workspace keys and
- * account PATs. Creating a key reveals its value ONCE (wrapped in a redacted
- * {@link SecretString}); list/delete operate on metadata only.
- */
-export declare class KeysClient {
-    #private;
-    constructor(http: HttpClient);
-    /**
-     * Mint an API key and reveal its value ONCE. Pass `workspaceId` for a
-     * data-plane workspace key, or `account: true` for an account PAT. A PAT
-     * cannot mint another PAT (anti-escalation, enforced server-side).
-     */
-    create(args?: CreateApiKeyRequest): Promise<NewApiKeyResult>;
-    /** List API keys (metadata only; never values). */
-    list(): Promise<readonly ApiKeyRecord[]>;
-    /** Revoke/delete an API key by id. Idempotent. */
-    delete(keyId: string): Promise<void>;
-}
-/**
- * Unified user-facing client for aex. The same class powers the published
- * `@aexhq/sdk` SDK and, under the hood, the bundled `aex` CLI. All remote
- * operations use the hosted aex API and operate on durable session records.
- *
- * The SDK never asks the caller for a workspace id — workspace identity
- * is derived server-side from the API key on every request. Use
- * `client.whoami()` if you want to introspect which workspace the
- * token resolves to.
- */
-export declare class Aex {
-    #private;
-    /**
-     * The SINGULAR data-plane context bound to the current key: this workspace's
-     * files, skills, tools, instructions, and secrets. (Contrast {@link workspaces},
-     * the plural control-plane collection.)
-     */
-    readonly workspace: WorkspaceClient;
-    readonly sessions: SessionClient;
-    /** Control-plane: the orgs the account principal belongs to (roles/members/invites). */
-    readonly orgs: OrgsClient;
-    /**
-     * Control-plane: manage WORKSPACES across your orgs (create/list/delete). The
-     * PLURAL collection — not to be confused with {@link workspace} (singular), the
-     * data-plane context of the current key.
-     */
-    readonly workspaces: WorkspacesClient;
-    /** Control-plane: manage API keys — workspace keys and account PATs (create/list/delete). */
-    readonly keys: KeysClient;
-    constructor(apiKey: string, options?: Omit<AexOptions, "apiKey">);
-    constructor(options: AexOptions);
-    /**
-     * Convenience one-shot on top of the canonical session API:
-     * open a session, send `message` as the first run, stream through its durable
-     * terminal event, then return the collected text,
-     * events, files, and session record. The returned `sessionId` is the session id,
-     * so callers can resume later with `aex.sessions.open(sessionId)`.
-     */
-    start<T = unknown>(options: SessionStartOptions, opts?: StartSessionOptions): Promise<SessionResult<T>>;
-    whoami(): Promise<WhoAmI>;
-    /** Read prepaid balance, current-period allowances, recharge settings, and card state. */
-    billing(): Promise<BillingSummary>;
-    /** Buy prepaid credit through hosted checkout; first use also saves the card. */
-    billingTopup(request: BillingTopupCheckoutRequest, options?: IdempotencyOptions): Promise<BillingHostedSession>;
-    /** Set the separately consented, off-by-default auto-recharge authority. */
-    billingAutoTopup(request: BillingAutoTopupRequest): Promise<BillingAutoTopupUpdate>;
-    /** Create a hosted billing-portal session. */
-    billingPortal(request?: BillingPortalRequest, options?: IdempotencyOptions): Promise<BillingHostedSession>;
-    /** Read recent signed credit-ledger rows, newest first. */
-    billingLedger(query?: BillingLedgerQuery): Promise<BillingLedgerPage>;
-    /**
-     * Reveal the workspace webhook signing secret (creating one on first use) —
-     * the `whsec_<base64>` value `verifyAexWebhook` takes as `secret`. Backed by
-     * `POST /api/webhook/signing-secret`; repeat calls return the SAME value (the
-     * hosted API does not rotate it). Treat the reveal as sensitive: never log it.
-     */
-    webhookSigningSecret(): Promise<WebhookSigningSecret>;
-}
-type WorkspaceAssetPublisher = {
-    upload(args: {
-        readonly bytes: Uint8Array;
-        readonly hash: string;
-        readonly contentType: string;
-    }): Promise<UploadedAsset>;
-    uploadStream(args: {
-        readonly drive: ZipStreamDriver;
-        readonly contentType: string;
-    }): Promise<UploadedAsset>;
-};
-export declare class WorkspaceFilesClient {
-    private readonly http;
-    private readonly publisher;
-    constructor(http: HttpClient, publisher: WorkspaceAssetPublisher);
-    publish(file: File): Promise<WorkspaceFileRecord>;
-    list(query?: WorkspaceResourceListQuery): Promise<WorkspaceResourcePage<WorkspaceFileRecord>>;
-    get(resourceId: string, version?: number): Promise<WorkspaceFileRecord>;
-    delete(resourceId: string): Promise<void>;
-}
-export declare class WorkspaceSkillsClient {
-    private readonly http;
-    private readonly publisher;
-    constructor(http: HttpClient, publisher: WorkspaceAssetPublisher);
-    publish(skill: Skill): Promise<WorkspaceSkillRecord>;
-    list(query?: WorkspaceResourceListQuery): Promise<WorkspaceResourcePage<WorkspaceSkillRecord>>;
-    get(resourceId: string, version?: number): Promise<WorkspaceSkillRecord>;
-    delete(resourceId: string): Promise<void>;
-}
-export declare class WorkspaceToolsClient {
-    private readonly http;
-    private readonly publisher;
-    constructor(http: HttpClient, publisher: WorkspaceAssetPublisher);
-    publish(tool: Tool): Promise<WorkspaceToolRecord>;
-    list(query?: WorkspaceResourceListQuery): Promise<WorkspaceResourcePage<WorkspaceToolRecord>>;
-    get(resourceId: string, version?: number): Promise<WorkspaceToolRecord>;
-    delete(resourceId: string): Promise<void>;
-}
-export declare class WorkspaceInstructionsClient {
-    private readonly http;
-    private readonly publisher;
-    constructor(http: HttpClient, publisher: WorkspaceAssetPublisher);
-    publish(instructions: Instructions): Promise<WorkspaceInstructionRecord>;
-    list(query?: WorkspaceResourceListQuery): Promise<WorkspaceResourcePage<WorkspaceInstructionRecord>>;
-    get(resourceId: string, version?: number): Promise<WorkspaceInstructionRecord>;
-    delete(resourceId: string): Promise<void>;
-}
-export declare class WorkspaceClient {
-    readonly files: WorkspaceFilesClient;
-    readonly skills: WorkspaceSkillsClient;
-    readonly tools: WorkspaceToolsClient;
-    readonly instructions: WorkspaceInstructionsClient;
-    readonly secrets: SecretsClient;
-    constructor(http: HttpClient, publisher: WorkspaceAssetPublisher);
-}
-export type { SessionFileType, SessionFileLink, SessionFileLinkOptions, SessionFileQuery };