@aexhq/sdk 0.52.0 → 0.53.1

package/README.md

@@ -1,72 +1,130 @@
 # @aexhq/sdk
 
-The zero-dependency TypeScript SDK for AEX sessions.
+The zero-dependency TypeScript SDK for the session-centered AEX public API.
 
 ```bash
-npm i @aexhq/sdk
+npm install @aexhq/sdk
 ```
 
-```ts
-import { Aex, assertId, newId } from "@aexhq/sdk";
+## Quickstart
 
-const aex = new Aex(process.env.AEX_WORKSPACE_API_KEY!);
+```ts
+import { Aex, newId } from "@aexhq/sdk";
 
+const aex = new Aex({ apiKey: process.env.AEX_WORKSPACE_API_KEY! });
 const session = await aex.sessions.sessionCreate({
   body: {
     provider: "openai",
     model: process.env.AEX_MODEL!,
-    providerCredentialId: assertId(
-      "provider_credential",
-      process.env.AEX_PROVIDER_CREDENTIAL_ID,
-    ),
+    providerApiKey: process.env.AEX_PROVIDER_API_KEY!,
   },
   idempotencyKey: crypto.randomUUID(),
 });
 
+const committed = (async () => {
+  for await (const frame of aex.sessions.sessionMessagesStream({
+    sessionId: session.id,
+  })) {
+    if (frame.kind === "committed" && frame.message?.role === "assistant") {
+      return frame.message;
+    }
+  }
+  throw new Error("message stream ended before the assistant committed");
+})();
+
 await aex.sessions.sessionMessageSend({
   sessionId: session.id,
   body: { text: "Inspect the tests and summarize the failures." },
   idempotencyKey: crypto.randomUUID(),
 });
+console.log(await committed);
 
-await aex.sessions.sessionSuspend({
+await aex.sessions.sessionTerminate({
   sessionId: session.id,
   body: {},
   operationId: newId("operation"),
 });
 ```
 
-The session is the customer-facing execution unit. It accepts one text message
-at a time and can accept another after the current activity finishes or is
-cancelled. There is no public run resource. One exact provider generation lasts
-at most eight hours from launch, suspends automatically after 180 idle seconds,
-and resumes for the next message or live-file request. Suspension never extends
-the lifetime, and runtime loss terminates the session instead of restoring an
-ambiguous partial activity.
-
-The SDK exposes generated resource clients for bootstrap, organizations,
-workspaces, API keys, billing, dedicated BYOK provider credentials, registered
-workspace files, sessions and messages, live files, observations, telemetry
-exports, operations, and usage. Every resource method is generated from the
-published contract. `ROUTES` and `aex.execute(...)` expose that same current
-route set without maintaining a second handwritten table.
-
-Registered workspace files are durable opaque inputs. A session pins selected
-file revisions at creation and materializes them into its MicroVM. Files created
-inside the session are generation-local: termination or runtime loss destroys
-them. The `@aexhq/sdk/node/session-files` entry provides bounded, resumable,
-digest-verified upload and download helpers for those live files.
-
-Launch has no generic secret vault, typed skill/tool/instruction/MCP registries,
-interactive tool approvals, session snapshots, persistence, clone/fork, trash,
-or restore surface. Provider keys use the dedicated write-only BYOK authority.
-The built-in model tools are exactly `read_file`, `edit_file`, `write_file`, and
-Bash; guidance and configuration can be supplied as opaque workspace files.
-
-Telemetry and telemetry exports are durable even though live session files and
-execution state are not.
-
-The native `aex` command is distributed as a signed platform archive.
+Session creation takes an exact provider/model pair and a write-only
+`providerApiKey`. The key is encrypted for that session, never returned, and
+never reused by another session. Supported provider families are OpenAI,
+Anthropic, DeepSeek, xAI, Meta, Moonshot AI, and Alibaba.
+
+## Client surface
+
+Regional session and file calls use a workspace `apiKey`. Central bootstrap,
+API-key, and billing calls use a GitHub `dashboardSession`. A client may hold
+both; the SDK sends each credential only to its owning API plane.
+
+```ts
+const aex = new Aex({
+  apiKey: process.env.AEX_WORKSPACE_API_KEY!,
+  dashboardSession: process.env.AEX_DASHBOARD_SESSION!,
+});
+```
+
+Generated namespaces are `apiKeys`, `auth`, `billing`, `bootstrap`, `registry`,
+`sessions`, and `uploads`. `aex.workspaceFiles` adds verified convenience
+helpers for the latest-only file API. `ROUTES` and `aex.execute(...)` expose the
+same generated contract without a second handwritten route table.
+
+## Sessions and sandboxes
+
+A session is the only public execution resource. It owns committed messages,
+one active root message, durable tool effects, native subagents, frozen file
+mounts, sandbox state, and telemetry. There is no public run resource.
+
+The default sandbox starts preparing in the background when session creation
+commits, then suspends when no tool call is waiting. A sandbox tool call waits
+for the exact generation to become ready and resumes it when required. Set
+`sandbox.enabled` to `false` to allocate no sandbox; sandbox-only tools then
+return a structured error the model can handle.
+
+Cancel stops active work and returns the session to idle. Terminate destroys
+sandbox compute while retaining messages and telemetry. Delete irreversibly
+removes session-owned content; independent workspace files remain.
+
+## Files, tools, and MCP
+
+`aex.workspaceFiles` provides `put`, `upload`, `get`, `list`, `download`, and
+`delete`. Each logical name has only one current value. Inputs may be inline
+text or bytes, an HTTPS URL, or a direct multipart upload. Session creation
+freezes selected names and mount paths, so later overwrites do not change an
+existing session.
+
+Messages are text-only. Upload arbitrary images, PDFs, video, archives, or
+source and tell the model which path under `/workspace` to inspect.
+
+The built-in tool surface is Bash, file read/edit/write, MCP,
+`storage.persist`, and native create/wait/stop subagent tools. Configure remote
+Streamable HTTP or sandbox-process MCP per session. Large tool results keep a
+bounded preview and the full bytes at a sandbox path; `storage.persist`
+publishes a chosen sandbox file as the latest workspace value. Native
+subagents are bounded to 12 child identities per session lifetime and depth 3.
+
+`sessionMessageSend` accepts optional native JSON Schema output through
+`responseFormat`. Strict structured output is admitted only for a qualified
+provider/model capability; AEX does not present prompt emulation as strict.
+
+## Streaming, telemetry, and billing
+
+`sessionMessagesStream` emits bounded preview, gap, committed, reconcile, and
+heartbeat frames. Committed messages preserve provider-neutral text, tool-call,
+and tool-result parts.
+
+Session telemetry is available as a live stream, retained replay, and verified
+compressed download. Billing resources expose prepaid balance, saved-card
+display metadata, hosted card setup and top-up, immutable transactions, and
+usage. Billing methods require `dashboardSession`; session and file methods
+require `apiKey`.
+
+See the [AEX documentation](https://aex.dev/docs) for complete examples.
+
+## Status
+
+AEX is in active prelaunch development. Expect breaking changes and do not rely
+on the hosted service for production workloads yet.
 
 ## License
 

package/dist/client/aex.d.ts

@@ -1,8 +1,10 @@
 import { type AexTransport } from "../transport/transport.js";
 import { type RouteId } from "../generated/routes.js";
 import { GeneratedResources, type ExecuteOptions } from "../generated/resources.js";
+import { WorkspaceFiles } from "../files/workspace-files.js";
 export interface AexOptions {
-    readonly apiKey: string;
+    readonly apiKey?: string;
+    readonly dashboardSession?: string;
     readonly centralBaseUrl?: string;
     readonly regionalBaseUrl?: string;
     readonly workspaceId?: string;
@@ -22,9 +24,12 @@ export interface AexOptions {
 export declare class Aex extends GeneratedResources {
     #private;
     readonly transport: AexTransport;
+    /** Latest-only workspace files, including verified direct upload/download helpers. */
+    readonly workspaceFiles: WorkspaceFiles;
     constructor(apiKey: string, options?: Omit<AexOptions, "apiKey">);
     constructor(options: AexOptions);
     execute<T>(routeId: RouteId, bindings?: Readonly<Record<string, string>>, options?: ExecuteOptions): Promise<T>;
+    stream<T>(routeId: RouteId, bindings?: Readonly<Record<string, string>>, options?: ExecuteOptions): AsyncIterable<T>;
     static buildInfo(): Readonly<{
         packageVersion: string;
         contractDigest: string;

package/dist/client/aex.js

@@ -1,9 +1,11 @@
-import { parseCredential } from "./credentials.js";
+import { DashboardSession, WorkspaceApiKey } from "./credentials.js";
 import { resolveCentralBaseUrl, resolveRegionalBaseUrl } from "./routing.js";
 import { FetchTransport } from "../transport/transport.js";
 import { CONTRACT_DIGEST, ROUTES } from "../generated/routes.js";
 import { GeneratedResources } from "../generated/resources.js";
-const SDK_VERSION = "0.52.0";
+import { WorkspaceFiles } from "../files/workspace-files.js";
+import { apiErrorFromResponse } from "../transport/errors.js";
+const SDK_VERSION = "0.53.1";
 /**
  * The client.
  *
@@ -15,26 +17,55 @@ const SDK_VERSION = "0.52.0";
  */
 export class Aex extends GeneratedResources {
     transport;
-    #credential;
+    /** Latest-only workspace files, including verified direct upload/download helpers. */
+    workspaceFiles;
+    #apiKey;
+    #dashboardSession;
     #signal;
     constructor(apiKeyOrOptions, rest = {}) {
         super();
         const options = typeof apiKeyOrOptions === "string"
             ? { ...rest, apiKey: apiKeyOrOptions }
             : apiKeyOrOptions;
-        this.#credential = parseCredential(options.apiKey);
+        this.#apiKey = options.apiKey ? WorkspaceApiKey.parse(options.apiKey) : undefined;
+        this.#dashboardSession = options.dashboardSession
+            ? DashboardSession.parse(options.dashboardSession)
+            : undefined;
+        if (!this.#apiKey && !this.#dashboardSession) {
+            throw new TypeError("Aex requires apiKey or dashboardSession");
+        }
         this.#signal = options.signal;
         if (options.transport) {
             this.transport = options.transport;
         }
         else {
+            const regional = resolveRegionalBaseUrl(this.#apiKey ?? this.#dashboardSession, options);
             this.transport = new FetchTransport({
                 central: resolveCentralBaseUrl(options.centralBaseUrl),
-                regional: resolveRegionalBaseUrl(this.#credential, options),
+                ...(regional ? { regional } : {}),
             }, options.fetch);
         }
+        this.workspaceFiles = new WorkspaceFiles(this, options.fetch);
     }
     async execute(routeId, bindings = {}, options = {}) {
+        const request = this.#request(routeId, bindings, options);
+        const response = await this.transport.execute(request);
+        if (response.status < 200 || response.status >= 300) {
+            throw apiErrorFromResponse(routeId, response.status, response.body, response.headers);
+        }
+        return response.body;
+    }
+    async *stream(routeId, bindings = {}, options = {}) {
+        const request = this.#request(routeId, bindings, options);
+        const response = await this.transport.stream(request);
+        if (response.status < 200 || response.status >= 300) {
+            throw apiErrorFromResponse(routeId, response.status, response.error, response.headers);
+        }
+        if (!response.frames)
+            throw new TypeError(`stream route ${routeId} returned no frame body`);
+        yield* response.frames;
+    }
+    #request(routeId, bindings, options) {
         const route = ROUTES[routeId];
         let path = route.path;
         for (const [name, value] of Object.entries(bindings)) {
@@ -43,11 +74,23 @@ export class Aex extends GeneratedResources {
         const query = new URLSearchParams(options.query ?? {}).toString();
         if (query)
             path = `${path}?${query}`;
+        const transport = route.transport;
+        const credential = route.plane === "regional" ? this.#apiKey : this.#dashboardSession;
+        if (!credential && routeId !== "dashboard_session_create") {
+            throw new TypeError(route.plane === "regional"
+                ? "a workspace API key is required for regional routes"
+                : "a dashboard session is required for central routes");
+        }
         const headers = new Headers({
-            authorization: this.#credential.authorizationHeader(),
-            accept: route.transport === "binary" ? "application/octet-stream" : "application/json",
+            accept: transport === "binary"
+                ? "application/octet-stream"
+                : transport === "ndjson"
+                    ? "application/x-ndjson"
+                    : "application/json",
             "Aex-Client": `aex-sdk/${SDK_VERSION}`,
         });
+        if (credential)
+            headers.set("authorization", credential.authorizationHeader());
         if (options.idempotencyKey)
             headers.set("Idempotency-Key", options.idempotencyKey);
         if (options.operationId)
@@ -66,7 +109,7 @@ export class Aex extends GeneratedResources {
                 bytes = encodeCanonicalJson(options.body);
             }
         }
-        const request = {
+        return {
             routeId,
             method: route.method,
             path,
@@ -74,8 +117,6 @@ export class Aex extends GeneratedResources {
             ...(bytes ? { body: bytes } : {}),
             ...(this.#signal ? { signal: this.#signal } : {}),
         };
-        const response = await this.transport.execute(request);
-        return response.body;
     }
     static buildInfo() {
         return Object.freeze({ packageVersion: SDK_VERSION, contractDigest: CONTRACT_DIGEST, sourceSha: "development" });

package/dist/client/aex.js.map

@@ -1 +1 @@
-{"version":3,"file":"aex.js","sourceRoot":"","sources":["../../src/client/aex.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAyB,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAuC,MAAM,2BAA2B,CAAC;AAChG,OAAO,EAAE,eAAe,EAAE,MAAM,EAAgB,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAuB,MAAM,2BAA2B,CAAC;AAEpF,MAAM,WAAW,GAAG,QAAQ,CAAC;AAY7B;;;;;;;;GAQG;AACH,MAAM,OAAO,GAAI,SAAQ,kBAAkB;IAChC,SAAS,CAAe;IACxB,WAAW,CAAmB;IAC9B,OAAO,CAA0B;IAI1C,YAAY,eAAoC,EAAE,OAAmC,EAAE;QACrF,KAAK,EAAE,CAAC;QACR,MAAM,OAAO,GAAG,OAAO,eAAe,KAAK,QAAQ;YACjD,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE;YACtC,CAAC,CAAC,eAAe,CAAC;QACpB,IAAI,CAAC,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,GAAG,IAAI,cAAc,CAAC;gBAClC,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC,cAAc,CAAC;gBACtD,QAAQ,EAAE,sBAAsB,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;aAC5D,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,OAAgB,EAAE,WAA6C,EAAE,EAChF,UAA0B,EAAE;QAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACtB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClE,IAAI,KAAK;YAAE,IAAI,GAAG,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;YAC1B,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,mBAAmB,EAAE;YACrD,MAAM,EAAE,KAAK,CAAC,SAAmB,KAAK,QAAQ,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,kBAAkB;YAChG,YAAY,EAAE,WAAW,WAAW,EAAE;SACvC,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,cAAc;YAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QACnF,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAC9E,IAAI,KAA6B,CAAC;QAClC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,KAAK,CAAC,SAAmB,KAAK,QAAQ,EAAE,CAAC;gBAC3C,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,YAAY,UAAU,CAAC,EAAE,CAAC;oBAC1C,MAAM,IAAI,SAAS,CAAC,gBAAgB,OAAO,6BAA6B,CAAC,CAAC;gBAC5E,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;gBACxD,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBAChD,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAgB;YAC3B,OAAO;YACP,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI;YACJ,OAAO;YACP,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAI,OAAO,CAAC,CAAC;QAC1D,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,SAAS;QACd,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;IACnH,CAAC;CACF;AAED;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAC,IAAa;IACxC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACvE,MAAM,MAAM,GAAI,KAAiC,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"aex.js","sourceRoot":"","sources":["../../src/client/aex.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,cAAc,EAAuC,MAAM,2BAA2B,CAAC;AAChG,OAAO,EAAE,eAAe,EAAE,MAAM,EAAgB,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,kBAAkB,EAAuB,MAAM,2BAA2B,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,WAAW,GAAG,QAAQ,CAAC;AAa7B;;;;;;;;GAQG;AACH,MAAM,OAAO,GAAI,SAAQ,kBAAkB;IAChC,SAAS,CAAe;IACjC,sFAAsF;IAC7E,cAAc,CAAiB;IAC/B,OAAO,CAA8B;IACrC,iBAAiB,CAA+B;IAChD,OAAO,CAA0B;IAI1C,YAAY,eAAoC,EAAE,OAAmC,EAAE;QACrF,KAAK,EAAE,CAAC;QACR,MAAM,OAAO,GAAG,OAAO,eAAe,KAAK,QAAQ;YACjD,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE;YACtC,CAAC,CAAC,eAAe,CAAC;QACpB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,gBAAgB;YAC/C,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAClD,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC7C,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,iBAAkB,EAAE,OAAO,CAAC,CAAC;YAC1F,IAAI,CAAC,SAAS,GAAG,IAAI,cAAc,CAAC;gBAClC,OAAO,EAAE,qBAAqB,CAAC,OAAO,CAAC,cAAc,CAAC;gBACtD,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QACD,IAAI,CAAC,cAAc,GAAG,IAAI,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,OAAgB,EAAE,WAA6C,EAAE,EAChF,UAA0B,EAAE;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAI,OAAO,CAAC,CAAC;QAC1D,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACpD,MAAM,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CAAI,OAAgB,EAAE,WAA6C,EAAE,EAChF,UAA0B,EAAE;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAI,OAAO,CAAC,CAAC;QACzD,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACpD,MAAM,oBAAoB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,MAAM,IAAI,SAAS,CAAC,gBAAgB,OAAO,yBAAyB,CAAC,CAAC;QAC5F,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;IAED,QAAQ,CACN,OAAgB,EAChB,QAA0C,EAC1C,OAAuB;QAEvB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACtB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClE,IAAI,KAAK;YAAE,IAAI,GAAG,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAmB,CAAC;QAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;QACtF,IAAI,CAAC,UAAU,IAAI,OAAO,KAAK,0BAA0B,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CACjB,KAAK,CAAC,KAAK,KAAK,UAAU;gBACxB,CAAC,CAAC,qDAAqD;gBACvD,CAAC,CAAC,oDAAoD,CACzD,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;YAC1B,MAAM,EAAE,SAAS,KAAK,QAAQ;gBAC5B,CAAC,CAAC,0BAA0B;gBAC5B,CAAC,CAAC,SAAS,KAAK,QAAQ;oBACtB,CAAC,CAAC,sBAAsB;oBACxB,CAAC,CAAC,kBAAkB;YACxB,YAAY,EAAE,WAAW,WAAW,EAAE;SACvC,CAAC,CAAC;QACH,IAAI,UAAU;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC,mBAAmB,EAAE,CAAC,CAAC;QAC/E,IAAI,OAAO,CAAC,cAAc;YAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;QACnF,IAAI,OAAO,CAAC,WAAW;YAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAC9E,IAAI,KAA6B,CAAC;QAClC,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,KAAK,CAAC,SAAmB,KAAK,QAAQ,EAAE,CAAC;gBAC3C,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,YAAY,UAAU,CAAC,EAAE,CAAC;oBAC1C,MAAM,IAAI,SAAS,CAAC,gBAAgB,OAAO,6BAA6B,CAAC,CAAC;gBAC5E,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,0BAA0B,CAAC,CAAC;gBACxD,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;YACvB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;gBAChD,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,OAAO;YACL,OAAO;YACP,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI;YACJ,OAAO;YACP,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,SAAS;QACd,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;IACnH,CAAC;CACF;AAED;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAAC,IAAa;IACxC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACvE,MAAM,MAAM,GAAI,KAAiC,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/client/credentials.d.ts

@@ -15,11 +15,11 @@ export declare class WorkspaceApiKey extends Credential {
     workspaceId(): string;
     regionalBaseUrl(): string;
 }
-export declare class AccountToken extends Credential {
+export declare class DashboardSession extends Credential {
     private constructor();
-    static parse(value: string): AccountToken;
+    static parse(value: string): DashboardSession;
 }
-export type ParsedCredential = WorkspaceApiKey | AccountToken;
+export type ParsedCredential = WorkspaceApiKey | DashboardSession;
 export declare function parseCredential(value: string): ParsedCredential;
 export declare function regionalHost(region: RegionCode): string;
 export {};

package/dist/client/credentials.js

@@ -5,7 +5,7 @@ const SECRET = "([A-Za-z0-9_-]{42}[AEIMQUYcgkosw048])";
 // region that serves it and the workspace it authorizes, so a regional endpoint
 // can address every row it must read without a central round trip first.
 const WORKSPACE_KEY = new RegExp(`^aex_wk_(use1|use2|usw2|apne1|euw1)_${BODY}_${BODY}_${SECRET}$`);
-const ACCOUNT_TOKEN = new RegExp(`^aex_at_${BODY}_${SECRET}$`);
+const DASHBOARD_SESSION = new RegExp(`^aex_ds_${BODY}_${SECRET}$`);
 const CROCKFORD = "0123456789abcdefghjkmnpqrstvwxyz";
 const HOSTS = Object.freeze({
     use1: "https://us-east-1.api.aex.dev",
@@ -55,24 +55,24 @@ export class WorkspaceApiKey extends Credential {
         return HOSTS[this.#region];
     }
 }
-export class AccountToken extends Credential {
+export class DashboardSession extends Credential {
     constructor(value) {
         super(value);
     }
     static parse(value) {
-        const match = ACCOUNT_TOKEN.exec(value);
+        const match = DASHBOARD_SESSION.exec(value);
         if (!match || !isUuid7Body(match[1] ?? "")) {
-            throw new AexConfigError("invalid credential: expected an aex_at_ account token");
+            throw new AexConfigError("invalid credential: expected an aex_ds_ dashboard session");
         }
-        return new AccountToken(value);
+        return new DashboardSession(value);
     }
 }
 export function parseCredential(value) {
     if (value.startsWith("aex_wk_"))
         return WorkspaceApiKey.parse(value);
-    if (value.startsWith("aex_at_"))
-        return AccountToken.parse(value);
-    throw new AexConfigError("invalid credential: expected prefix aex_wk_ or aex_at_");
+    if (value.startsWith("aex_ds_"))
+        return DashboardSession.parse(value);
+    throw new AexConfigError("invalid credential: expected prefix aex_wk_ or aex_ds_");
 }
 export function regionalHost(region) {
     return HOSTS[region];

package/dist/client/credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/client/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,MAAM,IAAI,GAAG,0BAA0B,CAAC;AACxC,MAAM,MAAM,GAAG,uCAAuC,CAAC;AACvD,+EAA+E;AAC/E,gFAAgF;AAChF,yEAAyE;AACzE,MAAM,aAAa,GAAG,IAAI,MAAM,CAC9B,uCAAuC,IAAI,IAAI,IAAI,IAAI,MAAM,GAAG,CACjE,CAAC;AACF,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,WAAW,IAAI,IAAI,MAAM,GAAG,CAAC,CAAC;AAC/D,MAAM,SAAS,GAAG,kCAAkC,CAAC;AAIrD,MAAM,KAAK,GAAyC,MAAM,CAAC,MAAM,CAAC;IAChE,IAAI,EAAE,+BAA+B;IACrC,IAAI,EAAE,+BAA+B;IACrC,IAAI,EAAE,+BAA+B;IACrC,KAAK,EAAE,oCAAoC;IAC3C,IAAI,EAAE,+BAA+B;CACtC,CAAC,CAAC;AAEH,MAAe,UAAU;IACd,MAAM,CAAS;IAExB,YAAsB,KAAa;QACjC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,mBAAmB;QACjB,OAAO,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC;IACjC,CAAC;IAED,QAAQ;QACN,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC9E,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,UAAU;IACpC,OAAO,CAAa;IACpB,YAAY,CAAS;IAE9B,YAAoB,KAAa,EAAE,MAAkB,EAAE,WAAmB;QACxE,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;IAClC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,KAAa;QACxB,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,cAAc,CACtB,yFAAyF,CAC1F,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAe,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,2EAA2E;IAC3E,WAAW;QACT,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,eAAe;QACb,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,YAAa,SAAQ,UAAU;IAC1C,YAAoB,KAAa;QAC/B,KAAK,CAAC,KAAK,CAAC,CAAC;IACf,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,KAAa;QACxB,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,cAAc,CAAC,uDAAuD,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;CACF;AAID,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClE,MAAM,IAAI,cAAc,CAAC,wDAAwD,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAkB;IAC7C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5B,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,KAAK,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1D,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;QACrC,KAAK,KAAK,EAAE,CAAC;IACf,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC;AACpE,CAAC"}
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/client/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,MAAM,IAAI,GAAG,0BAA0B,CAAC;AACxC,MAAM,MAAM,GAAG,uCAAuC,CAAC;AACvD,+EAA+E;AAC/E,gFAAgF;AAChF,yEAAyE;AACzE,MAAM,aAAa,GAAG,IAAI,MAAM,CAC9B,uCAAuC,IAAI,IAAI,IAAI,IAAI,MAAM,GAAG,CACjE,CAAC;AACF,MAAM,iBAAiB,GAAG,IAAI,MAAM,CAAC,WAAW,IAAI,IAAI,MAAM,GAAG,CAAC,CAAC;AACnE,MAAM,SAAS,GAAG,kCAAkC,CAAC;AAIrD,MAAM,KAAK,GAAyC,MAAM,CAAC,MAAM,CAAC;IAChE,IAAI,EAAE,+BAA+B;IACrC,IAAI,EAAE,+BAA+B;IACrC,IAAI,EAAE,+BAA+B;IACrC,KAAK,EAAE,oCAAoC;IAC3C,IAAI,EAAE,+BAA+B;CACtC,CAAC,CAAC;AAEH,MAAe,UAAU;IACd,MAAM,CAAS;IAExB,YAAsB,KAAa;QACjC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,mBAAmB;QACjB,OAAO,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC;IACjC,CAAC;IAED,QAAQ;QACN,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC9E,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;CACF;AAED,MAAM,OAAO,eAAgB,SAAQ,UAAU;IACpC,OAAO,CAAa;IACpB,YAAY,CAAS;IAE9B,YAAoB,KAAa,EAAE,MAAkB,EAAE,WAAmB;QACxE,KAAK,CAAC,KAAK,CAAC,CAAC;QACb,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;IAClC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,KAAa;QACxB,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,cAAc,CACtB,yFAAyF,CAC1F,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAe,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,2EAA2E;IAC3E,WAAW;QACT,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,eAAe;QACb,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,UAAU;IAC9C,YAAoB,KAAa;QAC/B,KAAK,CAAC,KAAK,CAAC,CAAC;IACf,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,KAAa;QACxB,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,cAAc,CAAC,2DAA2D,CAAC,CAAC;QACxF,CAAC;QACD,OAAO,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;CACF;AAID,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACtE,MAAM,IAAI,cAAc,CAAC,wDAAwD,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAkB;IAC7C,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5B,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,KAAK,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,KAAK,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1D,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC;QACrC,KAAK,KAAK,EAAE,CAAC;IACf,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC;AACpE,CAAC"}

package/dist/client/routing.d.ts

@@ -3,5 +3,5 @@ export interface RegionalRoutingOptions {
     readonly regionalBaseUrl?: string;
     readonly workspaceId?: string;
 }
-export declare function resolveRegionalBaseUrl(credential: ParsedCredential, options: RegionalRoutingOptions): string;
+export declare function resolveRegionalBaseUrl(credential: ParsedCredential, options: RegionalRoutingOptions): string | undefined;
 export declare function resolveCentralBaseUrl(value?: string): string;

package/dist/client/routing.js

@@ -1,4 +1,4 @@
-import { AccountToken, WorkspaceApiKey } from "./credentials.js";
+import { WorkspaceApiKey } from "./credentials.js";
 import { AexConfigError } from "../transport/errors.js";
 function validateBaseUrl(value) {
     let url;
@@ -18,10 +18,7 @@ export function resolveRegionalBaseUrl(credential, options) {
         return validateBaseUrl(options.regionalBaseUrl);
     if (credential instanceof WorkspaceApiKey)
         return credential.regionalBaseUrl();
-    if (credential instanceof AccountToken && options.workspaceId) {
-        throw new AexConfigError("an account token with workspaceId must resolve placement through workspace_get before regional I/O");
-    }
-    throw new AexConfigError("an account token requires regionalBaseUrl or workspaceId for regional routes");
+    return undefined;
 }
 export function resolveCentralBaseUrl(value = "https://api.aex.dev") {
     return validateBaseUrl(value);

package/dist/client/routing.js.map

@@ -1 +1 @@
-{"version":3,"file":"routing.js","sourceRoot":"","sources":["../../src/client/routing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAyB,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAOxD,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,wCAAwC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACxF,MAAM,IAAI,cAAc,CAAC,gEAAgE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,UAA4B,EAC5B,OAA+B;IAE/B,IAAI,OAAO,CAAC,eAAe;QAAE,OAAO,eAAe,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7E,IAAI,UAAU,YAAY,eAAe;QAAE,OAAO,UAAU,CAAC,eAAe,EAAE,CAAC;IAC/E,IAAI,UAAU,YAAY,YAAY,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QAC9D,MAAM,IAAI,cAAc,CACtB,oGAAoG,CACrG,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,cAAc,CACtB,8EAA8E,CAC/E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAK,GAAG,qBAAqB;IACjE,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC"}
+{"version":3,"file":"routing.js","sourceRoot":"","sources":["../../src/client/routing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyB,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAOxD,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,wCAAwC,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACxF,MAAM,IAAI,cAAc,CAAC,gEAAgE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,UAA4B,EAC5B,OAA+B;IAE/B,IAAI,OAAO,CAAC,eAAe;QAAE,OAAO,eAAe,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7E,IAAI,UAAU,YAAY,eAAe;QAAE,OAAO,UAAU,CAAC,eAAe,EAAE,CAAC;IAC/E,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAK,GAAG,qBAAqB;IACjE,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC"}

package/dist/files/workspace-files.d.ts

@@ -0,0 +1,55 @@
+import type { ResourceExecutor } from "../generated/resources.js";
+/** Inline, URL and direct-upload inputs accepted by the latest-only file API. */
+export type WorkspaceFileInput = {
+    readonly type: "bytes";
+    readonly bytes: Uint8Array;
+} | {
+    readonly type: "text";
+    readonly text: string;
+} | {
+    readonly type: "url";
+    readonly url: string;
+};
+/** One current workspace-file response. No public version identity exists. */
+export interface CurrentWorkspaceFile {
+    readonly name: string;
+    readonly state: "pending" | "ready" | "failed";
+    readonly value?: {
+        readonly content: {
+            readonly sha256: string;
+            readonly sizeBytes: string;
+        };
+        readonly mediaType: string;
+        readonly mode: "0644" | "0755";
+    };
+}
+export interface WorkspaceFilePutOptions {
+    readonly mediaType?: string;
+    readonly mode?: "0644" | "0755";
+    readonly idempotencyKey?: string;
+}
+/**
+ * Convenience surface over the seven latest-only file/upload operations.
+ *
+ * Direct object-store transfers replay only the exact signed headers returned
+ * by Aex. The guest is never given AWS credentials; `storage.persist` uses the
+ * same private grant shape from inside Tool Mux.
+ */
+export declare class WorkspaceFiles {
+    #private;
+    constructor(executor: ResourceExecutor, fetchLike?: typeof fetch);
+    put(name: string, input: WorkspaceFileInput, options?: WorkspaceFilePutOptions): Promise<CurrentWorkspaceFile>;
+    /** Uploads arbitrary bytes and publishes them to the admitted logical name. */
+    upload(name: string, bytes: Uint8Array, options?: WorkspaceFilePutOptions): Promise<CurrentWorkspaceFile>;
+    get(name: string): Promise<CurrentWorkspaceFile>;
+    list(query?: {
+        readonly cursor?: string;
+        readonly limit?: number;
+    }): Promise<{
+        readonly items: ReadonlyArray<CurrentWorkspaceFile>;
+        readonly nextCursor?: string;
+    }>;
+    delete(name: string): Promise<void>;
+    /** Downloads and verifies the exact current ready bytes. */
+    download(name: string): Promise<Uint8Array>;
+}