@aexhq/sdk 0.69.0 → 0.70.0

package/README.md

@@ -21,3 +21,24 @@ on the initial deployment. Supply your model key per session.
 `account.get()` and `account.usage()` accept a workload API key. `keys` management requires
 an authenticated account session and is normally performed in the dashboard. API keys do
 not grant authority to create more credentials. New key secrets are returned once.
+
+## Account management
+
+Use an account session obtained through browser login for account management. Workload
+API keys remain scoped to runtime operations and read-only account/usage access.
+
+```ts
+const account = new Aex({ accountToken: process.env.AEX_ACCOUNT_TOKEN! });
+await account.keys.list();
+const issued = await account.keys.create({ name: "My app" });
+await account.keys.update(issued.key.id, { name: "Renamed app" });
+await account.keys.delete(issued.key.id);
+await account.account.get(); // includes billing status and limits
+await account.account.usage();
+await account.account.logout();
+```
+
+`account.account.authorizeLogin({code_challenge, redirect_uri})` and
+`Aex.exchangeLogin({code, code_verifier, redirect_uri})` expose the shared HTTP login
+contract for clients. The `@aexhq/cli` package handles opening the browser, PKCE,
+loopback callback and local credential storage.

package/dist/generated.d.ts

@@ -78,3 +78,36 @@ export interface IssuedKey {
 export interface KeyInput {
     name: string;
 }
+/**
+ * This interface was referenced by `AexContracts`'s JSON-Schema
+ * via the `definition` "LoginGrantInput".
+ */
+export interface LoginGrantInput {
+    code_challenge: string;
+    redirect_uri: string;
+}
+/**
+ * This interface was referenced by `AexContracts`'s JSON-Schema
+ * via the `definition` "LoginGrant".
+ */
+export interface LoginGrant {
+    code: string;
+    expires: number;
+}
+/**
+ * This interface was referenced by `AexContracts`'s JSON-Schema
+ * via the `definition` "LoginExchange".
+ */
+export interface LoginExchange {
+    code: string;
+    code_verifier: string;
+    redirect_uri: string;
+}
+/**
+ * This interface was referenced by `AexContracts`'s JSON-Schema
+ * via the `definition` "AccountSession".
+ */
+export interface AccountSession {
+    expires: number;
+    token: string;
+}

package/dist/index.d.ts

@@ -1,16 +1,25 @@
 export * from "@aexhq/brain";
 export type * from "./generated.js";
 import { Brain, type BrainOptions } from "@aexhq/brain";
-import type { Account, Usage, ApiKey, IssuedKey, KeyInput } from "./generated.js";
-export type AexOptions = Omit<BrainOptions, "token" | "baseUrl"> & {
-    apiKey: string;
+import type { Account, Usage, ApiKey, IssuedKey, KeyInput, LoginGrantInput, LoginGrant, LoginExchange, AccountSession } from "./generated.js";
+export type AexConnection = Omit<BrainOptions, "token" | "baseUrl"> & {
     baseUrl?: string;
 };
+export type AexOptions = AexConnection & ({
+    apiKey: string;
+    accountToken?: never;
+} | {
+    accountToken: string;
+    apiKey?: never;
+});
 export declare class Aex extends Brain {
-    constructor({ apiKey, ...options }: AexOptions);
+    constructor({ apiKey, accountToken, ...options }: AexOptions);
+    static exchangeLogin(input: LoginExchange, options?: AexConnection): Promise<AccountSession>;
     readonly account: {
         get: () => Promise<Account>;
         usage: () => Promise<Usage>;
+        logout: () => Promise<void>;
+        authorizeLogin: (input: LoginGrantInput) => Promise<LoginGrant>;
     };
     /** Key management requires an account session; workload API keys cannot create credentials. */
     readonly keys: {

package/dist/index.js

@@ -1,14 +1,19 @@
 export * from "@aexhq/brain";
 import { Brain } from "@aexhq/brain";
 export class Aex extends Brain {
-    constructor({ apiKey, ...options }) {
-        if (!apiKey)
-            throw new TypeError("apiKey is required");
-        super({ baseUrl: "https://api.aex.dev", ...options, token: apiKey });
+    constructor({ apiKey, accountToken, ...options }) {
+        if (!(apiKey || accountToken) || (apiKey && accountToken))
+            throw new TypeError("one apiKey or accountToken is required");
+        super({ baseUrl: "https://api.aex.dev", ...options, token: apiKey ?? accountToken });
+    }
+    static exchangeLogin(input, options = {}) {
+        return new Brain({ baseUrl: "https://api.aex.dev", ...options }).request("POST", "/v1/auth/exchange", input);
     }
     account = {
         get: () => this.request("GET", "/v1/account"),
         usage: () => this.request("GET", "/v1/usage"),
+        logout: () => this.request("DELETE", "/v1/account/session"),
+        authorizeLogin: (input) => this.request("POST", "/v1/auth/grants", input),
     };
     /** Key management requires an account session; workload API keys cannot create credentials. */
     keys = {

package/package.json

@@ -1,16 +1,35 @@
 {
   "name": "@aexhq/sdk",
-  "version": "0.69.0",
+  "version": "0.70.0",
   "description": "Aex accounts and hosted sessions using the Brain SDK",
   "license": "MIT",
   "type": "module",
   "sideEffects": false,
-  "engines": { "node": ">=22" },
-  "repository": { "type": "git", "url": "git+https://github.com/aexhq/aex.git", "directory": "packages/sdk" },
-  "exports": { ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" } },
-  "files": ["dist", "README.md"],
-  "publishConfig": { "access": "public", "tag": "next" },
-  "dependencies": { "@aexhq/brain": "0.19.0" },
+  "engines": {
+    "node": ">=22"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/aexhq/aex.git",
+    "directory": "packages/sdk"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "tag": "next"
+  },
+  "dependencies": {
+    "@aexhq/brain": "0.19.0"
+  },
   "scripts": {
     "gen": "node ../../tools/sdk-contracts.mjs",
     "build": "tsc -p tsconfig.json",