@dench.com/cli 3.8.0-staging.389 → 3.8.2-staging.391

package/chat.ts

@@ -112,7 +112,11 @@ function out(ctx: ChatCliContext, value: unknown): void {
 }
 
 function chatHelp(): void {
-  console.log(`Usage: dench chat <subcommand>
+  console.log(chatHelpText());
+}
+
+export function chatHelpText(): string {
+  return `Usage: dench chat <subcommand>
 
 List past chat threads (own + shared in this workspace):
   dench chat list [--query <substr>] [--limit N] [--include-archived] [--include-automated] [--json]
@@ -155,10 +159,8 @@ Spawn a new chat-turn workflow (same agent loop as the web UI):
   thread hierarchy from a root thread.
 
 Approval policy:
-  Without --yolo the workflow uses the workspace policy from
-  /<slug>/settings -> Approvals (master YOLO + per-rule toggles).
-  --yolo overrides for this single chat turn — every approval gate is
-  off, equivalent to flipping the org to YOLO mode for this run.
+  Workspace agent runs use Full access by default.
+  --yolo remains accepted for compatibility.
 
 Auth:
   Inside a sandbox, this just works — DENCH_API_KEY + DENCH_RUN_ID are
@@ -167,7 +169,7 @@ Auth:
 Global flags:
   --json    Output raw JSON instead of pretty-printed text.
   --follow  After spawning, stream the chat response to stdout.
-`);
+`;
 }
 
 export async function runChatCommand(opts: {

package/cron.ts

@@ -871,7 +871,11 @@ async function runHistory(ctx: CronCliContext): Promise<void> {
 // ─── Help ─────────────────────────────────────────────────────────────────
 
 function cronHelp(): void {
-  console.log(`Usage: dench cron <subcommand>
+  console.log(cronHelpText());
+}
+
+export function cronHelpText(): string {
+  return `Usage: dench cron <subcommand>
        dench routine <subcommand>     (alias)
        dench routines <subcommand>    (alias)
 
@@ -902,7 +906,7 @@ Create / update:
   dench cron create "Inbound lead triage" --prompt "Triage the lead…" --type webhook [--signed]
 
   # App-event automation (fires when something happens in a connected app).
-  #   1. dench apps --json                    → connectedAccountId + toolkit
+  #   1. dench integrations --json            → connectedAccountId + toolkit
   #   2. dench cron events <toolkit>          → event slug
   dench cron create "New GitHub star" --prompt "Thank the new stargazer" \\
       --type app --connection <connectedAccountId> --event <triggerSlug> \\
@@ -955,7 +959,7 @@ Examples:
 Auth: prefers DENCH_API_KEY (sandbox envVar). Falls back to a session token from
 \`dench login\` for local terminals. The Bearer token must carry either
 \`crons:read\` (queries) or \`crons:write\` (mutations) scope, or the wildcard \`*\`.
-`);
+`;
 }
 
 // ─── Entry point ──────────────────────────────────────────────────────────

package/dench.ts

@@ -18,7 +18,6 @@ import { makeFunctionReference } from "convex/server";
 import { agentKindLabel, normalizeAgentKind } from "./agentKind";
 import {
   apiHostForDenchHost,
-  DEFAULT_HOST,
   isLocalHost,
   LOCAL_HOST,
   normalizeHost,
@@ -281,6 +280,11 @@ const BOOLEAN_FLAGS = new Set([
 ]);
 
 function positionalArgs() {
+  const fileArgs = stripRuntimeFlags(filteredArgs);
+  if (fileArgs[0] === "files") {
+    const switches = new Set(["--recursive", "-r", "--url"]);
+    return fileArgs.filter((value, index) => index < 2 || !switches.has(value));
+  }
   const positionals: string[] = [];
   for (let i = 0; i < filteredArgs.length; i++) {
     if (filteredArgs[i].startsWith("--")) {
@@ -467,8 +471,8 @@ function logHuman(message: string) {
   }
 }
 
-function help() {
-  console.log(`Dench CLI
+function rootUsageText() {
+  return `Dench CLI
 
 Usage:
   dench signin [--kind <kind>] [--name "AI Agent - Project"] [--no-open] [--json]
@@ -479,7 +483,9 @@ Usage:
   dench sessions [--host <host>] [--json]
   dench use <session-key-or-workspace-slug> [--host <host>] [--json]
   dench logout [session-key-or-workspace-slug] [--session <key-or-scope>] [--host <host>] [--all] [--json]
-  dench backend [show|set|clear] [<production|staging|local|<url>>] [--json]
+  dench backend show [--json]
+  dench backend set <production|staging|local|url> [--json]
+  dench backend clear [--json]
   dench context [--instructions] [--json]
   dench context --sections organisation,user,memory [--json]
   dench instructions [--json]
@@ -686,62 +692,17 @@ Standing context and memory:
   dench context --sections identity,organisation,user,memory,rules,tools [--json]
   dench context set <identity|organisation|user|tools|rules> --stdin
   dench memory search "<query>" | save <key> "<fact>"
-  dench model default <id|clear> | thread <threadId> <id|clear>
+  dench model default <id|clear>
+  dench model thread <threadId> <id|clear>
   Context describes preferences and instructions. Environments store setup;
   secrets store credentials. A memory note does not install or save either.
 
-External tools:
-  dench integrations is an alias for dench tool status -- it lists connected apps.
-  dench apps is the App Store (create / install / publish / list), not connected apps.
-  dench tool with no subcommand prints tool help.
-  Read-only FETCH, GET, LIST, SEARCH, READ, and FIND tools do not need manual approval.
-
-Billing:
-  dench billing status shows current AI credits.
-  dench billing topup --amount 5 creates a Stripe Checkout link for the human to pay.
-
-Agent setup:
-  dench signin is the only auth surface. Two transports (browser link
-  by default, OTP paste-back with --email <addr>) cover both intents:
-  signing in to an existing workspace or creating a new free CRM-only
-  workspace (--new-workspace --org-name "<name>"). New workspaces have
-  full CRM access; run \`dench upgrade\` to unlock chat, file sync,
-  enrichment, and image generation.
-  --kind accepts any string. Suggested values: claude_code, codex, cursor,
-  hermes, openclaw, or any custom kind (e.g. aider, goose, internal_orchestrator).
-  Defaults to "other" when omitted. Values are normalized to lowercase
-  snake_case before send (e.g. "Claude Code" -> claude_code).
-  After sign-in, run dench context --json and dench crm objects list --json
-  to verify the workspace + CRM are wired up. Tasks live as CRM \`task\`
-  entries — there is no separate \`dench tasks\` / \`dench task\` /
-  \`dench claim\` / \`dench log\` command.
-
-Backends and hosts:
-  Default backend: ${DEFAULT_HOST} (overridden by \`dench backend set\`)
-  Show / change the persistent default:
-    dench backend show
-    dench backend set production | staging | local | <url>
-    dench backend clear
-  One-shot overrides for a single command:
-    dench --prod <cmd>
-    dench --staging <cmd>
-    dench --backend local <cmd>
-    dench --host https://example.com <cmd>
-    DENCH_HOST=https://example.com dench <cmd>
-
-Dev fallback (run against a local dev deployment with a dev key):
-  DENCH_DEV_AGENT_KEY=... DENCH_WORKSPACE=... dench status --dev
-  Inside the dench.com repo, --dev also auto-loads .env / .env.local,
-  which carry the dev backend URL and GATEWAY_URL etc. Use --use-dev-env (or
-  DENCH_USE_DEV_ENV=1) when you want that auto-load without switching
-  the runtime to the dev workspace mode.
-
-Advanced:
-  For long-lived agents or when the human asks:
-    DENCH_SESSION_KEY=stable-agent-id dench signin
-    DENCH_SESSION_KEY=stable-agent-id dench logout
-    DENCH_SESSION_KEY=stable-agent-id dench status
-`);
+`;
+}
+
+async function help() {
+  const { commandHelp } = await import("./lib/command-help");
+  console.log(commandHelp([], rootUsageText()));
 }
 
 function contextHelp() {
@@ -3780,7 +3741,7 @@ async function runFilesCat() {
       code: "files_cat_not_found",
       nextActions: [
         "Run `dench files ls` on the parent directory to confirm.",
-        "If the file only exists on the sandbox FS, run `dench fs sync --initial` first.",
+        "If the file exists only on local disk, upload it with `dench stage <local-path> <workspace-path>`.",
       ],
     });
   }
@@ -3850,11 +3811,11 @@ async function runFilesWrite() {
   )) as { path: string; contentHash: string };
 
   if (json) {
-    print({ ok: true, ...result, bytes: content.length });
+    print({ ok: true, ...result, bytes: Buffer.byteLength(content, "utf8") });
     return;
   }
   process.stdout.write(
-    `dench files write: ${result.path} (${content.length}B)\n`,
+    `dench files write: ${result.path} (${Buffer.byteLength(content, "utf8")}B)\n`,
   );
 }
 
@@ -3916,7 +3877,7 @@ async function runFilesDownload() {
         code: "files_download_not_found",
         nextActions: [
           "Run `dench files ls` on the parent directory to confirm.",
-          "If the file only exists on the sandbox FS, run `dench fs sync --initial` first.",
+          "If the file exists only on local disk, upload it with `dench stage <local-path> <workspace-path>`.",
         ],
       });
     }
@@ -3990,25 +3951,8 @@ async function runFilesDownload() {
 async function runFilesCommand() {
   const sub = positional(1);
   if (!sub || sub === "help" || hasFlag("--help")) {
-    process.stdout.write(
-      [
-        "dench files <ls|cat|write|mv|rm|download> — workspace file ops that update the UI tree",
-        "",
-        "  dench files ls [<path>] [--recursive] [--json]",
-        "  dench files cat <path> [--json]",
-        "  dench files write <path> < file.md   (content on stdin)",
-        "  dench files mv <src> <dst> [--json]",
-        "  dench files rm <path> [--recursive] [--json]",
-        "  dench files download <path> [<local-dest>] [--url] [--json]",
-        "",
-        "Paths are POSIX paths under /workspace; you can pass either form.",
-        "These change workspace storage directly (and the daemon syncs to the volume).",
-        "cat prints inline text and is the only way to read the magic files",
-        "(IDENTITY.md, ORGANISATION.md, …), which have no stored bytes.",
-        "download fetches the canonical bytes from workspace storage (dirs recurse);",
-        "--url prints a short-lived signed URL instead of saving.",
-      ].join("\n"),
-    );
+    const { commandHelp } = await import("./lib/command-help");
+    process.stdout.write(`${commandHelp(["files"], rootUsageText())}\n`);
     return;
   }
   if (sub === "ls") return await runFilesLs();
@@ -4328,7 +4272,7 @@ async function main() {
     );
     if (helpArgs[0] === "help") helpArgs.shift();
     if (!helpArgs.length) {
-      help();
+      await help();
       return;
     }
     const path = helpArgs.filter(
@@ -4402,24 +4346,38 @@ async function main() {
       });
       return;
     }
-    const { commandHelp } = await import("./lib/command-help");
-    const usage =
-      helpArgs[0] === "email"
-        ? (await import("./email")).emailHelpText()
-        : helpArgs[0] === "crm"
-          ? (await import("./crm")).crmHelpText()
-          : helpArgs[0] === "env"
-            ? (await import("./environments")).environmentHelpText()
-            : helpArgs[0] === "secrets"
-              ? (await import("./workspace-secrets")).workspaceSecretsHelpText()
-              : "";
+    const { commandHelp, normalizeHelpCommand } = await import(
+      "./lib/command-help"
+    );
+    const family = normalizeHelpCommand(helpArgs)[0];
+    const helpText: Record<string, () => Promise<string>> = {
+      tool: async () => (await import("./tools")).toolHelpText(),
+      email: async () => (await import("./email")).emailHelpText(),
+      crm: async () => (await import("./crm")).crmHelpText(),
+      env: async () => (await import("./environments")).environmentHelpText(),
+      secrets: async () =>
+        (await import("./workspace-secrets")).workspaceSecretsHelpText(),
+      chat: async () => (await import("./chat")).chatHelpText(),
+      cron: async () => (await import("./cron")).cronHelpText(),
+      apps: async () => (await import("./apps")).appsHelpText(),
+      members: async () => (await import("./members")).membersHelpText(),
+      web: async () => (await import("./web")).webHelpText(),
+      meetings: async () => (await import("./meetings")).meetingsHelpText(),
+      lists: async () => (await import("./leads")).listsHelpText(),
+      browser: async () => (await import("./browser")).browserHelpText(),
+      search: async () => (await import("./search")).searchHelpText(),
+      image: async () => (await import("./image")).imageHelpText(),
+      ads: async () => (await import("./ads")).adsHelpText(),
+      campaign: async () => (await import("./campaign")).campaignHelpText(),
+    };
+    const usage = helpText[family] ? await helpText[family]() : rootUsageText();
     console.log(commandHelp(helpArgs, usage));
     return;
   }
   const command = positional(0);
   const subcommand = positional(1);
 
-  assertDeclaredCommandFlags(stripRuntimeFlags(runtimeArgs));
+  assertDeclaredCommandFlags(stripRuntimeFlags(args));
 
   // New setup commands validate before authentication and never consume child flags.
   if (command === "env" || command === "secrets") {
@@ -4555,7 +4513,7 @@ async function main() {
   }
 
   if (!command || command === "help") {
-    help();
+    await help();
     return;
   }
 

package/image.ts

@@ -384,7 +384,11 @@ async function runEditSubcommand(ctx: ImageCliContext): Promise<void> {
 }
 
 function imageHelp(): void {
-  console.log(`Usage: dench image <subcommand>
+  console.log(imageHelpText());
+}
+
+export function imageHelpText(): string {
+  return `Usage: dench image <subcommand>
 
 Generate or edit images via the Dench Cloud Gateway. Auths
 with DENCH_API_KEY or the active \`dench signin\` agent session. Agent
@@ -415,7 +419,7 @@ Environment variables:
   DENCH_ORG_ID         Forwarded so wildcard keys can target an org.
   DENCH_RUN_ID         Forwarded for telemetry correlation.
 
-Exit codes: 0 success, non-zero on gateway / network errors.`);
+Exit codes: 0 success, non-zero on gateway / network errors.`;
 }
 
 // ────────────────────────────────────────────────────────────────────────────

package/leads.ts

@@ -646,7 +646,11 @@ Rename/delete saved searches with \`dench lists rename|delete\`.
 }
 
 export function listsHelp(): void {
-  console.log(`Dench lists
+  console.log(listsHelpText());
+}
+
+export function listsHelpText(): string {
+  return `Dench lists
 
 Usage:
   dench lists [--search "September"] [--limit 25] [--cursor <cursor>] [--json]
@@ -680,7 +684,7 @@ Use \`--preview\` first to review the selection without importing or enrolling a
 Delete removes the list, its exported CSV/JSONL files, and any linked watch.
 CRM lists (saved views on Leads/Companies/Job Postings) are managed with
 \`dench crm views list|get|create|rename|delete\`.
-`);
+`;
 }
 
 /**