@aexhq/sdk 0.69.0 → 0.71.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Aex contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -10,14 +10,39 @@ console.log(await aex.account.get());
 ```
 
 `Aex` extends the pinned Brain client. Its sessions, registration, Events, Components and
-extension builders are Brain's implementations. Existing Brain extension packages work with
-the same contracts. See https://aex.dev/docs for a complete session example.
+extension builders are Brain's implementations. SDK 0.71 uses Brain 0.20 and official
+extension packages 5.x. Rebuild custom Wasm Components against Brain 0.20's WIT; older
+Components and session configurations are not migrated automatically. See https://aex.dev/docs
+for a complete session example.
 
 Place uploaded Wasm Agentloops and Tools in `brainEnv` for hosted execution. `hostEnv`
 executes application functions in your process. Native hosted Components receive no server
 secrets, filesystem or network grants. Customer-selected HTTP Environments are not enabled
-on the initial deployment. Supply your model key per session.
+on the initial deployment. Hosted `brainEnv` configuration must be empty; resource access
+is configured by each Environment, not declared through extension `needs`. Prepare dependencies
+for `hostEnv` Tools in your application before registering them. Supply your model key per session.
 
 `account.get()` and `account.usage()` accept a workload API key. `keys` management requires
 an authenticated account session and is normally performed in the dashboard. API keys do
 not grant authority to create more credentials. New key secrets are returned once.
+
+## Account management
+
+Use an account session obtained through browser login for account management. Workload
+API keys remain scoped to runtime operations and read-only account/usage access.
+
+```ts
+const account = new Aex({ accountToken: process.env.AEX_ACCOUNT_TOKEN! });
+await account.keys.list();
+const issued = await account.keys.create({ name: "My app" });
+await account.keys.update(issued.key.id, { name: "Renamed app" });
+await account.keys.delete(issued.key.id);
+await account.account.get(); // includes billing status and limits
+await account.account.usage();
+await account.account.logout();
+```
+
+`account.account.authorizeLogin({code_challenge, redirect_uri})` and
+`Aex.exchangeLogin({code, code_verifier, redirect_uri})` expose the shared HTTP login
+contract for clients. The `@aexhq/cli` package handles opening the browser, PKCE,
+loopback callback and local credential storage.

package/dist/generated.d.ts

@@ -78,3 +78,36 @@ export interface IssuedKey {
 export interface KeyInput {
     name: string;
 }
+/**
+ * This interface was referenced by `AexContracts`'s JSON-Schema
+ * via the `definition` "LoginGrantInput".
+ */
+export interface LoginGrantInput {
+    code_challenge: string;
+    redirect_uri: string;
+}
+/**
+ * This interface was referenced by `AexContracts`'s JSON-Schema
+ * via the `definition` "LoginGrant".
+ */
+export interface LoginGrant {
+    code: string;
+    expires: number;
+}
+/**
+ * This interface was referenced by `AexContracts`'s JSON-Schema
+ * via the `definition` "LoginExchange".
+ */
+export interface LoginExchange {
+    code: string;
+    code_verifier: string;
+    redirect_uri: string;
+}
+/**
+ * This interface was referenced by `AexContracts`'s JSON-Schema
+ * via the `definition` "AccountSession".
+ */
+export interface AccountSession {
+    expires: number;
+    token: string;
+}

package/dist/index.d.ts

@@ -1,16 +1,25 @@
 export * from "@aexhq/brain";
 export type * from "./generated.js";
 import { Brain, type BrainOptions } from "@aexhq/brain";
-import type { Account, Usage, ApiKey, IssuedKey, KeyInput } from "./generated.js";
-export type AexOptions = Omit<BrainOptions, "token" | "baseUrl"> & {
-    apiKey: string;
+import type { Account, Usage, ApiKey, IssuedKey, KeyInput, LoginGrantInput, LoginGrant, LoginExchange, AccountSession } from "./generated.js";
+export type AexConnection = Omit<BrainOptions, "token" | "baseUrl"> & {
     baseUrl?: string;
 };
+export type AexOptions = AexConnection & ({
+    apiKey: string;
+    accountToken?: never;
+} | {
+    accountToken: string;
+    apiKey?: never;
+});
 export declare class Aex extends Brain {
-    constructor({ apiKey, ...options }: AexOptions);
+    constructor({ apiKey, accountToken, ...options }: AexOptions);
+    static exchangeLogin(input: LoginExchange, options?: AexConnection): Promise<AccountSession>;
     readonly account: {
         get: () => Promise<Account>;
         usage: () => Promise<Usage>;
+        logout: () => Promise<void>;
+        authorizeLogin: (input: LoginGrantInput) => Promise<LoginGrant>;
     };
     /** Key management requires an account session; workload API keys cannot create credentials. */
     readonly keys: {

package/dist/index.js

@@ -1,14 +1,19 @@
 export * from "@aexhq/brain";
 import { Brain } from "@aexhq/brain";
 export class Aex extends Brain {
-    constructor({ apiKey, ...options }) {
-        if (!apiKey)
-            throw new TypeError("apiKey is required");
-        super({ baseUrl: "https://api.aex.dev", ...options, token: apiKey });
+    constructor({ apiKey, accountToken, ...options }) {
+        if (!(apiKey || accountToken) || (apiKey && accountToken))
+            throw new TypeError("one apiKey or accountToken is required");
+        super({ baseUrl: "https://api.aex.dev", ...options, token: apiKey ?? accountToken });
+    }
+    static exchangeLogin(input, options = {}) {
+        return new Brain({ baseUrl: "https://api.aex.dev", ...options }).request("POST", "/v1/auth/exchange", input);
     }
     account = {
         get: () => this.request("GET", "/v1/account"),
         usage: () => this.request("GET", "/v1/usage"),
+        logout: () => this.request("DELETE", "/v1/account/session"),
+        authorizeLogin: (input) => this.request("POST", "/v1/auth/grants", input),
     };
     /** Key management requires an account session; workload API keys cannot create credentials. */
     keys = {

package/package.json

@@ -1,16 +1,35 @@
 {
   "name": "@aexhq/sdk",
-  "version": "0.69.0",
+  "version": "0.71.0",
   "description": "Aex accounts and hosted sessions using the Brain SDK",
   "license": "MIT",
   "type": "module",
   "sideEffects": false,
-  "engines": { "node": ">=22" },
-  "repository": { "type": "git", "url": "git+https://github.com/aexhq/aex.git", "directory": "packages/sdk" },
-  "exports": { ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" } },
-  "files": ["dist", "README.md"],
-  "publishConfig": { "access": "public", "tag": "next" },
-  "dependencies": { "@aexhq/brain": "0.19.0" },
+  "engines": {
+    "node": ">=22"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/aexhq/aex.git",
+    "directory": "packages/sdk"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "tag": "next"
+  },
+  "dependencies": {
+    "@aexhq/brain": "0.20.0"
+  },
   "scripts": {
     "gen": "node ../../tools/sdk-contracts.mjs",
     "build": "tsc -p tsconfig.json",