@dexto/tui 1.15.0-beta.0 → 1.15.0

package/dist/components/overlays/LoginOverlay.js

@@ -8,12 +8,17 @@ import {
   useState
 } from "react";
 import { Box, Text } from "ink";
-import { currentSignIn, signIn } from "../../host/index.js";
+import {
+  loadAuth,
+  performDeviceCodeLogin,
+  persistDeviceApiKeyLoginResult
+} from "../../host/index.js";
 const LoginOverlay = forwardRef(function LoginOverlay2({ isVisible, onDone }, ref) {
   const [step, setStep] = useState("checking");
   const [existingUser, setExistingUser] = useState(null);
-  const [signInNote, setSignInNote] = useState(null);
-  const [status, setStatus] = useState("Preparing sign-in...");
+  const [authUrl, setAuthUrl] = useState(null);
+  const [devicePrompt, setDevicePrompt] = useState(null);
+  const [status, setStatus] = useState("Preparing login...");
   const [error, setError] = useState(null);
   const abortControllerRef = useRef(null);
   const isActiveRef = useRef(false);
@@ -25,24 +30,47 @@ const LoginOverlay = forwardRef(function LoginOverlay2({ isVisible, onDone }, re
     abortControllerRef.current?.abort(new Error("Authentication cancelled"));
     abortControllerRef.current = null;
   }, []);
+  const runDeviceLogin = useCallback(
+    async (abortController) => {
+      setStep("starting");
+      safeSetStatus("Starting device code login...");
+      setAuthUrl(null);
+      setDevicePrompt(null);
+      return performDeviceCodeLogin({
+        signal: abortController.signal,
+        onPrompt: (prompt) => {
+          if (!isActiveRef.current || abortController.signal.aborted) {
+            return;
+          }
+          setDevicePrompt(prompt);
+          setAuthUrl(prompt.verificationUrlComplete ?? prompt.verificationUrl);
+          setStep("waiting");
+          safeSetStatus("Open the URL below and approve login.");
+        }
+      });
+    },
+    [safeSetStatus]
+  );
   const startLogin = useCallback(async () => {
     cancelInFlight();
     setError(null);
-    setSignInNote(null);
-    setStep("signing-in");
-    safeSetStatus("Signing in...");
+    setAuthUrl(null);
+    setDevicePrompt(null);
     const abortController = new AbortController();
     abortControllerRef.current = abortController;
     try {
-      const summary = await signIn({
-        signal: abortController.signal,
-        onNote: (text) => {
-          if (!isActiveRef.current || abortController.signal.aborted) return;
-          setSignInNote(text);
-        }
-      });
+      const result = await runDeviceLogin(abortController);
+      if (!result || !isActiveRef.current || abortController.signal.aborted) return;
+      setStep("finalizing");
+      safeSetStatus("Finalizing login...");
+      const persisted = await persistDeviceApiKeyLoginResult(result);
       if (!isActiveRef.current || abortController.signal.aborted) return;
-      onDone({ outcome: "success", summary });
+      onDone({
+        outcome: "success",
+        email: persisted.email,
+        keyId: persisted.keyId,
+        hasDextoApiKey: persisted.hasDextoApiKey
+      });
     } catch (err) {
       if (abortController.signal.aborted) {
         return;
@@ -50,27 +78,28 @@ const LoginOverlay = forwardRef(function LoginOverlay2({ isVisible, onDone }, re
       setStep("error");
       const errorMessage = err instanceof Error ? err.message : String(err);
       setError(errorMessage);
-      safeSetStatus("Sign-in failed");
+      safeSetStatus("Login failed");
     } finally {
       abortControllerRef.current = null;
     }
-  }, [cancelInFlight, onDone, safeSetStatus]);
+  }, [cancelInFlight, onDone, runDeviceLogin, safeSetStatus]);
   useEffect(() => {
     if (!isVisible) return;
     isActiveRef.current = true;
     setStep("checking");
     setExistingUser(null);
-    setSignInNote(null);
-    setStatus("Preparing sign-in...");
+    setAuthUrl(null);
+    setDevicePrompt(null);
+    setStatus("Preparing login...");
     setError(null);
     void (async () => {
       try {
-        const signedInAs = await currentSignIn();
+        const auth = await loadAuth();
         if (!isActiveRef.current) return;
-        if (signedInAs !== null) {
-          setExistingUser(signedInAs);
+        if (auth) {
+          setExistingUser(auth.email || auth.userId || "user");
           setStep("already-authenticated");
-          setStatus("You are already signed in");
+          setStatus("You are already logged in");
           return;
         }
         await startLogin();
@@ -110,7 +139,7 @@ const LoginOverlay = forwardRef(function LoginOverlay2({ isVisible, onDone }, re
     [cancelInFlight, isVisible, onDone, startLogin, step]
   );
   if (!isVisible) return null;
-  const hint = step === "already-authenticated" ? "Enter to sign in again \u2022 Esc to close" : step === "error" ? "Enter to retry \u2022 Esc to close" : "Esc to cancel";
+  const hint = step === "already-authenticated" ? "Enter to login again \u2022 Esc to close" : step === "error" ? "Enter to retry \u2022 Esc to close" : "Esc to cancel";
   return /* @__PURE__ */ jsxs(
     Box,
     {
@@ -120,16 +149,27 @@ const LoginOverlay = forwardRef(function LoginOverlay2({ isVisible, onDone }, re
       paddingX: 1,
       marginTop: 1,
       children: [
-        /* @__PURE__ */ jsx(Box, { marginBottom: 1, children: /* @__PURE__ */ jsx(Text, { bold: true, color: "cyan", children: "Sign in to Dexto" }) }),
+        /* @__PURE__ */ jsx(Box, { marginBottom: 1, children: /* @__PURE__ */ jsx(Text, { bold: true, color: "cyan", children: "Login to Dexto" }) }),
         existingUser && step === "already-authenticated" && /* @__PURE__ */ jsx(Box, { marginBottom: 1, children: /* @__PURE__ */ jsxs(Text, { color: "green", children: [
-          "Signed in as ",
+          "\u2705 Already logged in as: ",
           existingUser
         ] }) }),
         /* @__PURE__ */ jsxs(Box, { marginBottom: 1, children: [
           /* @__PURE__ */ jsx(Text, { color: "gray", children: "Status: " }),
           /* @__PURE__ */ jsx(Text, { children: status })
         ] }),
-        signInNote && /* @__PURE__ */ jsx(Box, { flexDirection: "column", marginBottom: 1, children: /* @__PURE__ */ jsx(Text, { children: signInNote }) }),
+        devicePrompt && /* @__PURE__ */ jsxs(Box, { flexDirection: "column", marginBottom: 1, children: [
+          /* @__PURE__ */ jsx(Text, { color: "gray", children: "Open this URL on any device:" }),
+          /* @__PURE__ */ jsx(Text, { color: "yellowBright", children: devicePrompt.verificationUrlComplete ?? devicePrompt.verificationUrl }),
+          /* @__PURE__ */ jsxs(Text, { color: "gray", children: [
+            "Code: ",
+            devicePrompt.userCode
+          ] })
+        ] }),
+        authUrl && !devicePrompt && /* @__PURE__ */ jsxs(Box, { flexDirection: "column", marginBottom: 1, children: [
+          /* @__PURE__ */ jsx(Text, { color: "gray", children: "If your browser didn't open, use this URL:" }),
+          /* @__PURE__ */ jsx(Text, { color: "yellowBright", children: authUrl })
+        ] }),
         error && /* @__PURE__ */ jsx(Box, { flexDirection: "column", marginBottom: 1, children: /* @__PURE__ */ jsxs(Text, { color: "red", children: [
           "Error: ",
           error

package/dist/components/overlays/LogoutOverlay.cjs

@@ -30,12 +30,20 @@ const LogoutOverlay = (0, import_react.forwardRef)(function LogoutOverlay2({ isV
   const [userLabel, setUserLabel] = (0, import_react.useState)(null);
   const [usingDextoCredits, setUsingDextoCredits] = (0, import_react.useState)(false);
   const [error, setError] = (0, import_react.useState)(null);
+  const provisionedApiKeyRef = (0, import_react.useRef)(null);
   const performLogout = (0, import_react.useCallback)(async () => {
     setError(null);
     setStep("logging-out");
     try {
-      const summary = await (0, import_host.signOut)();
-      onDone({ outcome: "success", summary, wasUsingDextoCredits: usingDextoCredits });
+      const auth = await (0, import_host.loadAuth)();
+      if (auth?.dextoApiKey && auth.dextoApiKeySource === "provisioned") {
+        provisionedApiKeyRef.current = auth.dextoApiKey;
+      }
+      await (0, import_host.removeAuth)();
+      if (provisionedApiKeyRef.current) {
+        await (0, import_host.removeDextoApiKeyFromEnv)({ expectedValue: provisionedApiKeyRef.current });
+      }
+      onDone({ outcome: "success", wasUsingDextoCredits: usingDextoCredits });
     } catch (err) {
       setStep("error");
       setError(err instanceof Error ? err.message : String(err));
@@ -44,23 +52,24 @@ const LogoutOverlay = (0, import_react.forwardRef)(function LogoutOverlay2({ isV
   (0, import_react.useEffect)(() => {
     if (!isVisible) return;
     let cancelled = false;
+    provisionedApiKeyRef.current = null;
     setStep("checking");
     setUserLabel(null);
     setUsingDextoCredits(false);
     setError(null);
     void (async () => {
       try {
-        const signedInAs = await (0, import_host.currentSignIn)();
+        const auth = await (0, import_host.loadAuth)();
         if (cancelled) return;
-        if (signedInAs === null) {
+        if (!auth) {
           setStep("not-authenticated");
           return;
         }
-        setUserLabel(signedInAs);
+        setUserLabel(auth.email || auth.userId || "user");
       } catch {
         if (!cancelled) {
           setStep("error");
-          setError("Failed to read the sign-in");
+          setError("Failed to load authentication state");
         }
         return;
       }
@@ -108,12 +117,12 @@ const LogoutOverlay = (0, import_react.forwardRef)(function LogoutOverlay2({ isV
       marginTop: 1,
       children: [
         /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_ink.Box, { marginBottom: 1, children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_ink.Text, { bold: true, color: "cyan", children: "Logout" }) }),
-        step === "not-authenticated" ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_ink.Box, { marginBottom: 1, children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_ink.Text, { color: "yellow", children: "Not signed in" }) }) : /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_ink.Box, { marginBottom: 1, children: [
+        step === "not-authenticated" ? /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_ink.Box, { marginBottom: 1, children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_ink.Text, { color: "yellow", children: "\u2139\uFE0F Not currently logged in" }) }) : /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_ink.Box, { marginBottom: 1, children: [
           /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_ink.Text, { color: "gray", children: "Account: " }),
           /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_ink.Text, { children: userLabel ?? "..." })
         ] }),
         usingDextoCredits && step !== "not-authenticated" && /* @__PURE__ */ (0, import_jsx_runtime.jsxs)(import_ink.Box, { flexDirection: "column", marginBottom: 1, children: [
-          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_ink.Text, { color: "yellow", children: "\u26A0\uFE0F You are configured to use Dexto models, which run on this sign-in." }),
+          /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_ink.Text, { color: "yellow", children: "\u26A0\uFE0F You are configured to use Dexto Nova credits (provider: Dexto Nova)." }),
           /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_ink.Text, { color: "gray", dimColor: true, children: "After logout, you will need to run `/login` to authenticate again, or `dexto setup` to configure a different provider." })
         ] }),
         step === "logging-out" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_ink.Box, { marginBottom: 1, children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_ink.Text, { color: "gray", children: "Logging out..." }) }),

package/dist/components/overlays/LogoutOverlay.d.ts

@@ -2,7 +2,6 @@ import React from 'react';
 import type { Key } from '../../hooks/useInputOrchestrator.js';
 export type LogoutOverlayOutcome = {
     outcome: 'success';
-    summary: string;
     wasUsingDextoCredits: boolean;
 } | {
     outcome: 'cancelled';

package/dist/components/overlays/LogoutOverlay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LogoutOverlay.d.ts","sourceRoot":"","sources":["../../../src/components/overlays/LogoutOverlay.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA4E,MAAM,OAAO,CAAC;AAEjG,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,qCAAqC,CAAC;AAG/D,MAAM,MAAM,oBAAoB,GAC1B;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,oBAAoB,EAAE,OAAO,CAAA;CAAE,GACtE;IAAE,OAAO,EAAE,WAAW,CAAA;CAAE,GACxB;IAAE,OAAO,EAAE,QAAQ,CAAA;CAAE,CAAC;AAE5B,MAAM,WAAW,kBAAkB;IAC/B,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,IAAI,CAAC;CACnD;AAED,MAAM,WAAW,mBAAmB;IAChC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC;CACrD;AAID,QAAA,MAAM,aAAa,gGA4JjB,CAAC;AAEH,eAAe,aAAa,CAAC"}
+{"version":3,"file":"LogoutOverlay.d.ts","sourceRoot":"","sources":["../../../src/components/overlays/LogoutOverlay.tsx"],"names":[],"mappings":"AAAA,OAAO,KAON,MAAM,OAAO,CAAC;AAEf,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,qCAAqC,CAAC;AAQ/D,MAAM,MAAM,oBAAoB,GAC1B;IAAE,OAAO,EAAE,SAAS,CAAC;IAAC,oBAAoB,EAAE,OAAO,CAAA;CAAE,GACrD;IAAE,OAAO,EAAE,WAAW,CAAA;CAAE,GACxB;IAAE,OAAO,EAAE,QAAQ,CAAA;CAAE,CAAC;AAE5B,MAAM,WAAW,kBAAkB;IAC/B,SAAS,EAAE,OAAO,CAAC;IACnB,MAAM,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,IAAI,CAAC;CACnD;AAED,MAAM,WAAW,mBAAmB;IAChC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC;CACrD;AAID,QAAA,MAAM,aAAa,gGAwKjB,CAAC;AAEH,eAAe,aAAa,CAAC"}

package/dist/components/overlays/LogoutOverlay.js

@@ -1,18 +1,38 @@
 import { jsx, jsxs } from "react/jsx-runtime";
-import { forwardRef, useCallback, useEffect, useImperativeHandle, useState } from "react";
+import {
+  forwardRef,
+  useCallback,
+  useEffect,
+  useImperativeHandle,
+  useRef,
+  useState
+} from "react";
 import { Box, Text } from "ink";
-import { currentSignIn, isUsingDextoCredits, signOut } from "../../host/index.js";
+import {
+  loadAuth,
+  removeAuth,
+  removeDextoApiKeyFromEnv,
+  isUsingDextoCredits
+} from "../../host/index.js";
 const LogoutOverlay = forwardRef(function LogoutOverlay2({ isVisible, onDone }, ref) {
   const [step, setStep] = useState("checking");
   const [userLabel, setUserLabel] = useState(null);
   const [usingDextoCredits, setUsingDextoCredits] = useState(false);
   const [error, setError] = useState(null);
+  const provisionedApiKeyRef = useRef(null);
   const performLogout = useCallback(async () => {
     setError(null);
     setStep("logging-out");
     try {
-      const summary = await signOut();
-      onDone({ outcome: "success", summary, wasUsingDextoCredits: usingDextoCredits });
+      const auth = await loadAuth();
+      if (auth?.dextoApiKey && auth.dextoApiKeySource === "provisioned") {
+        provisionedApiKeyRef.current = auth.dextoApiKey;
+      }
+      await removeAuth();
+      if (provisionedApiKeyRef.current) {
+        await removeDextoApiKeyFromEnv({ expectedValue: provisionedApiKeyRef.current });
+      }
+      onDone({ outcome: "success", wasUsingDextoCredits: usingDextoCredits });
     } catch (err) {
       setStep("error");
       setError(err instanceof Error ? err.message : String(err));
@@ -21,23 +41,24 @@ const LogoutOverlay = forwardRef(function LogoutOverlay2({ isVisible, onDone },
   useEffect(() => {
     if (!isVisible) return;
     let cancelled = false;
+    provisionedApiKeyRef.current = null;
     setStep("checking");
     setUserLabel(null);
     setUsingDextoCredits(false);
     setError(null);
     void (async () => {
       try {
-        const signedInAs = await currentSignIn();
+        const auth = await loadAuth();
         if (cancelled) return;
-        if (signedInAs === null) {
+        if (!auth) {
           setStep("not-authenticated");
           return;
         }
-        setUserLabel(signedInAs);
+        setUserLabel(auth.email || auth.userId || "user");
       } catch {
         if (!cancelled) {
           setStep("error");
-          setError("Failed to read the sign-in");
+          setError("Failed to load authentication state");
         }
         return;
       }
@@ -85,12 +106,12 @@ const LogoutOverlay = forwardRef(function LogoutOverlay2({ isVisible, onDone },
       marginTop: 1,
       children: [
         /* @__PURE__ */ jsx(Box, { marginBottom: 1, children: /* @__PURE__ */ jsx(Text, { bold: true, color: "cyan", children: "Logout" }) }),
-        step === "not-authenticated" ? /* @__PURE__ */ jsx(Box, { marginBottom: 1, children: /* @__PURE__ */ jsx(Text, { color: "yellow", children: "Not signed in" }) }) : /* @__PURE__ */ jsxs(Box, { marginBottom: 1, children: [
+        step === "not-authenticated" ? /* @__PURE__ */ jsx(Box, { marginBottom: 1, children: /* @__PURE__ */ jsx(Text, { color: "yellow", children: "\u2139\uFE0F Not currently logged in" }) }) : /* @__PURE__ */ jsxs(Box, { marginBottom: 1, children: [
           /* @__PURE__ */ jsx(Text, { color: "gray", children: "Account: " }),
           /* @__PURE__ */ jsx(Text, { children: userLabel ?? "..." })
         ] }),
         usingDextoCredits && step !== "not-authenticated" && /* @__PURE__ */ jsxs(Box, { flexDirection: "column", marginBottom: 1, children: [
-          /* @__PURE__ */ jsx(Text, { color: "yellow", children: "\u26A0\uFE0F You are configured to use Dexto models, which run on this sign-in." }),
+          /* @__PURE__ */ jsx(Text, { color: "yellow", children: "\u26A0\uFE0F You are configured to use Dexto Nova credits (provider: Dexto Nova)." }),
           /* @__PURE__ */ jsx(Text, { color: "gray", dimColor: true, children: "After logout, you will need to run `/login` to authenticate again, or `dexto setup` to configure a different provider." })
         ] }),
         step === "logging-out" && /* @__PURE__ */ jsx(Box, { marginBottom: 1, children: /* @__PURE__ */ jsx(Text, { color: "gray", children: "Logging out..." }) }),

package/dist/components/overlays/custom-model-wizard/provider-config.cjs

@@ -446,7 +446,7 @@ const PROVIDER_CONFIGS = {
     }
   },
   "dexto-nova": {
-    displayName: "Dexto",
+    displayName: "Dexto Nova",
     description: "Access 100+ models with Nova credits",
     steps: [
       {
@@ -493,14 +493,14 @@ const PROVIDER_CONFIGS = {
           }
         }
         if (status === "invalid") {
-          return `Model '${modelId}' not found. Dexto uses OpenRouter model IDs - check https://openrouter.ai/models`;
+          return `Model '${modelId}' not found. Dexto Nova uses OpenRouter model IDs - check https://openrouter.ai/models`;
         }
         return null;
       }
     },
     setupInfo: {
-      title: "Dexto Models",
-      description: "Add OpenRouter-format models that use your Dexto credits. Requires a sign-in: run dexto login --scope cloud:write first.",
+      title: "Dexto Nova Setup",
+      description: "Add OpenRouter-format models that use your Dexto Nova credits. Requires login: run `/login` first.",
       docsUrl: "https://openrouter.ai/models"
     }
   }

package/dist/components/overlays/custom-model-wizard/provider-config.js

@@ -411,7 +411,7 @@ const PROVIDER_CONFIGS = {
     }
   },
   "dexto-nova": {
-    displayName: "Dexto",
+    displayName: "Dexto Nova",
     description: "Access 100+ models with Nova credits",
     steps: [
       {
@@ -458,14 +458,14 @@ const PROVIDER_CONFIGS = {
           }
         }
         if (status === "invalid") {
-          return `Model '${modelId}' not found. Dexto uses OpenRouter model IDs - check https://openrouter.ai/models`;
+          return `Model '${modelId}' not found. Dexto Nova uses OpenRouter model IDs - check https://openrouter.ai/models`;
         }
         return null;
       }
     },
     setupInfo: {
-      title: "Dexto Models",
-      description: "Add OpenRouter-format models that use your Dexto credits. Requires a sign-in: run dexto login --scope cloud:write first.",
+      title: "Dexto Nova Setup",
+      description: "Add OpenRouter-format models that use your Dexto Nova credits. Requires login: run `/login` first.",
       docsUrl: "https://openrouter.ai/models"
     }
   }

package/dist/containers/OverlayContainer.cjs

@@ -85,6 +85,7 @@ var import_idGenerator = require("../utils/idGenerator.js");
 var import_host = require("../host/index.js");
 var import_FocusOverlayFrame = require("../components/shared/FocusOverlayFrame.js");
 var import_overlayPresentation = require("../utils/overlayPresentation.js");
+var import_dexto_auth_refresh = require("../utils/dexto-auth-refresh.js");
 function isLLMProvider(value) {
   if (typeof value !== "string") return false;
   for (const provider of import_llm.LLM_PROVIDERS) {
@@ -385,7 +386,7 @@ const OverlayContainer = (0, import_react.forwardRef)(
                 {
                   id: (0, import_idGenerator.generateMessageId)("system"),
                   role: "system",
-                  content: "Dexto models need a sign-in that may spend credits. Run dexto login --scope cloud:write, or pick another model.",
+                  content: "Cannot switch to Dexto Nova model - authentication required. Run /login to authenticate.",
                   timestamp: /* @__PURE__ */ new Date()
                 }
               ]);
@@ -397,7 +398,7 @@ const OverlayContainer = (0, import_react.forwardRef)(
               {
                 id: (0, import_idGenerator.generateMessageId)("error"),
                 role: "system",
-                content: `Failed to check the Dexto sign-in: ${error instanceof Error ? error.message : String(error)}`,
+                content: `Failed to verify Dexto Nova auth: ${error instanceof Error ? error.message : String(error)}`,
                 timestamp: /* @__PURE__ */ new Date()
               }
             ]);
@@ -660,13 +661,6 @@ const OverlayContainer = (0, import_react.forwardRef)(
         insufficientCredits: null
       }));
     }, [setUi]);
-    const handleInsufficientCreditsChooseOwnModel = (0, import_react.useCallback)(() => {
-      setUi((prev) => ({
-        ...prev,
-        activeOverlay: "model-selector",
-        insufficientCredits: null
-      }));
-    }, [setUi]);
     const handleInsufficientCreditsResolved = (0, import_react.useCallback)(() => {
       setUi((prev) => ({
         ...prev,
@@ -1136,33 +1130,50 @@ ${result.context}`,
     }, [setUi]);
     const handleLoginDone = (0, import_react.useCallback)(
       (outcome) => {
-        handleClose();
-        if (outcome.outcome === "closed") {
-          return;
-        }
-        if (outcome.outcome === "cancelled") {
+        void (async () => {
+          handleClose();
+          if (outcome.outcome === "closed") {
+            return;
+          }
+          if (outcome.outcome === "cancelled") {
+            setMessages((prev) => [
+              ...prev,
+              {
+                id: (0, import_idGenerator.generateMessageId)("system"),
+                role: "system",
+                content: "Login cancelled.",
+                timestamp: /* @__PURE__ */ new Date()
+              }
+            ]);
+            return;
+          }
+          let refreshWarning = null;
+          if (outcome.hasDextoApiKey) {
+            try {
+              await (0, import_dexto_auth_refresh.refreshDextoNovaAuthAfterLogin)(agent, session.id || void 0);
+            } catch (error) {
+              refreshWarning = `Logged in, but failed to refresh the active Dexto Nova session: ${error instanceof Error ? error.message : String(error)}`;
+            }
+          }
+          const userLabel = outcome.email ? ` as ${outcome.email}` : "";
+          const keyLine = outcome.hasDextoApiKey ? `\u{1F511} DEXTO_API_KEY ready${outcome.keyId ? ` (Key ID: ${outcome.keyId})` : ""}` : "\u26A0\uFE0F Failed to provision DEXTO_API_KEY (you can still use your own API keys)";
+          const content = [
+            `\u2705 Logged in${userLabel}`,
+            keyLine,
+            ...refreshWarning ? [`\u26A0\uFE0F ${refreshWarning}`] : []
+          ].join("\n");
           setMessages((prev) => [
             ...prev,
             {
               id: (0, import_idGenerator.generateMessageId)("system"),
               role: "system",
-              content: "Sign-in cancelled.",
+              content,
               timestamp: /* @__PURE__ */ new Date()
             }
           ]);
-          return;
-        }
-        setMessages((prev) => [
-          ...prev,
-          {
-            id: (0, import_idGenerator.generateMessageId)("system"),
-            role: "system",
-            content: outcome.summary,
-            timestamp: /* @__PURE__ */ new Date()
-          }
-        ]);
+        })();
       },
-      [handleClose, setMessages]
+      [agent, handleClose, session.id, setMessages]
     );
     const handleLogoutDone = (0, import_react.useCallback)(
       (outcome) => {
@@ -1188,7 +1199,7 @@ ${result.context}`,
           {
             id: (0, import_idGenerator.generateMessageId)("system"),
             role: "system",
-            content: `${outcome.summary}${warning}`,
+            content: `\u2705 Successfully logged out${warning}`,
             timestamp: /* @__PURE__ */ new Date()
           }
         ]);
@@ -2485,8 +2496,7 @@ Use /${data.name} to run it.`,
           isVisible: true,
           initialBalanceUsd: ui.insufficientCredits.balanceUsd,
           onResolved: handleInsufficientCreditsResolved,
-          onClose: handleInsufficientCreditsClose,
-          onChooseOwnModel: handleInsufficientCreditsChooseOwnModel
+          onClose: handleInsufficientCreditsClose
         }
       ) }),
       ui.activeOverlay === "login" && /* @__PURE__ */ (0, import_jsx_runtime.jsx)(import_ink.Box, { marginTop: 1, children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(

package/dist/containers/OverlayContainer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OverlayContainer.d.ts","sourceRoot":"","sources":["../../src/containers/OverlayContainer.tsx"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAyE,MAAM,OAAO,CAAC;AAI9F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kCAAkC,CAAC;AAE5D,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAGH,KAAK,eAAe,EACvB,MAAM,iCAAiC,CAAC;AAuGzC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAuC3D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAsC3D,MAAM,WAAW,sBAAsB;IACnC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC;CACrD;AAED,UAAU,qBAAqB;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,YAAY,CAAC;IACtB,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;IACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3D,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC;IAC/D,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7D,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1E,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IAC1E,KAAK,EAAE,eAAe,CAAC;IACvB,YAAY,EAAE,YAAY,CAAC;IAC3B,MAAM,EAAE,UAAU,CAAC;IACnB,mDAAmD;IACnD,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;IAC3B,4EAA4E;IAC5E,qBAAqB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAClE;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB,sGA++F5B,CAAC"}
+{"version":3,"file":"OverlayContainer.d.ts","sourceRoot":"","sources":["../../src/containers/OverlayContainer.tsx"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAyE,MAAM,OAAO,CAAC;AAI9F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kCAAkC,CAAC;AAE5D,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAGH,KAAK,eAAe,EACvB,MAAM,iCAAiC,CAAC;AAuGzC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAuC3D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAuC3D,MAAM,WAAW,sBAAsB;IACnC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC;CACrD;AAED,UAAU,qBAAqB;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,UAAU,CAAC;IAClB,OAAO,EAAE,YAAY,CAAC;IACtB,QAAQ,EAAE,eAAe,GAAG,IAAI,CAAC;IACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC;IAC3D,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC,CAAC;IAC/D,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7D,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1E,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;IAC1E,KAAK,EAAE,eAAe,CAAC;IACvB,YAAY,EAAE,YAAY,CAAC;IAC3B,MAAM,EAAE,UAAU,CAAC;IACnB,mDAAmD;IACnD,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,IAAI,CAAC;IAC3B,4EAA4E;IAC5E,qBAAqB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAClE;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB,sGA6/F5B,CAAC"}

package/dist/containers/OverlayContainer.js

@@ -67,6 +67,7 @@ import { generateMessageId } from "../utils/idGenerator.js";
 import { canUseDextoProvider, captureAnalytics } from "../host/index.js";
 import { FocusOverlayFrame } from "../components/shared/FocusOverlayFrame.js";
 import { shouldHideCliChrome } from "../utils/overlayPresentation.js";
+import { refreshDextoNovaAuthAfterLogin } from "../utils/dexto-auth-refresh.js";
 function isLLMProvider(value) {
   if (typeof value !== "string") return false;
   for (const provider of LLM_PROVIDERS) {
@@ -367,7 +368,7 @@ const OverlayContainer = forwardRef(
                 {
                   id: generateMessageId("system"),
                   role: "system",
-                  content: "Dexto models need a sign-in that may spend credits. Run dexto login --scope cloud:write, or pick another model.",
+                  content: "Cannot switch to Dexto Nova model - authentication required. Run /login to authenticate.",
                   timestamp: /* @__PURE__ */ new Date()
                 }
               ]);
@@ -379,7 +380,7 @@ const OverlayContainer = forwardRef(
               {
                 id: generateMessageId("error"),
                 role: "system",
-                content: `Failed to check the Dexto sign-in: ${error instanceof Error ? error.message : String(error)}`,
+                content: `Failed to verify Dexto Nova auth: ${error instanceof Error ? error.message : String(error)}`,
                 timestamp: /* @__PURE__ */ new Date()
               }
             ]);
@@ -642,13 +643,6 @@ const OverlayContainer = forwardRef(
         insufficientCredits: null
       }));
     }, [setUi]);
-    const handleInsufficientCreditsChooseOwnModel = useCallback(() => {
-      setUi((prev) => ({
-        ...prev,
-        activeOverlay: "model-selector",
-        insufficientCredits: null
-      }));
-    }, [setUi]);
     const handleInsufficientCreditsResolved = useCallback(() => {
       setUi((prev) => ({
         ...prev,
@@ -1118,33 +1112,50 @@ ${result.context}`,
     }, [setUi]);
     const handleLoginDone = useCallback(
       (outcome) => {
-        handleClose();
-        if (outcome.outcome === "closed") {
-          return;
-        }
-        if (outcome.outcome === "cancelled") {
+        void (async () => {
+          handleClose();
+          if (outcome.outcome === "closed") {
+            return;
+          }
+          if (outcome.outcome === "cancelled") {
+            setMessages((prev) => [
+              ...prev,
+              {
+                id: generateMessageId("system"),
+                role: "system",
+                content: "Login cancelled.",
+                timestamp: /* @__PURE__ */ new Date()
+              }
+            ]);
+            return;
+          }
+          let refreshWarning = null;
+          if (outcome.hasDextoApiKey) {
+            try {
+              await refreshDextoNovaAuthAfterLogin(agent, session.id || void 0);
+            } catch (error) {
+              refreshWarning = `Logged in, but failed to refresh the active Dexto Nova session: ${error instanceof Error ? error.message : String(error)}`;
+            }
+          }
+          const userLabel = outcome.email ? ` as ${outcome.email}` : "";
+          const keyLine = outcome.hasDextoApiKey ? `\u{1F511} DEXTO_API_KEY ready${outcome.keyId ? ` (Key ID: ${outcome.keyId})` : ""}` : "\u26A0\uFE0F Failed to provision DEXTO_API_KEY (you can still use your own API keys)";
+          const content = [
+            `\u2705 Logged in${userLabel}`,
+            keyLine,
+            ...refreshWarning ? [`\u26A0\uFE0F ${refreshWarning}`] : []
+          ].join("\n");
           setMessages((prev) => [
             ...prev,
             {
               id: generateMessageId("system"),
               role: "system",
-              content: "Sign-in cancelled.",
+              content,
               timestamp: /* @__PURE__ */ new Date()
             }
           ]);
-          return;
-        }
-        setMessages((prev) => [
-          ...prev,
-          {
-            id: generateMessageId("system"),
-            role: "system",
-            content: outcome.summary,
-            timestamp: /* @__PURE__ */ new Date()
-          }
-        ]);
+        })();
       },
-      [handleClose, setMessages]
+      [agent, handleClose, session.id, setMessages]
     );
     const handleLogoutDone = useCallback(
       (outcome) => {
@@ -1170,7 +1181,7 @@ ${result.context}`,
           {
             id: generateMessageId("system"),
             role: "system",
-            content: `${outcome.summary}${warning}`,
+            content: `\u2705 Successfully logged out${warning}`,
             timestamp: /* @__PURE__ */ new Date()
           }
         ]);
@@ -2467,8 +2478,7 @@ Use /${data.name} to run it.`,
           isVisible: true,
           initialBalanceUsd: ui.insufficientCredits.balanceUsd,
           onResolved: handleInsufficientCreditsResolved,
-          onClose: handleInsufficientCreditsClose,
-          onChooseOwnModel: handleInsufficientCreditsChooseOwnModel
+          onClose: handleInsufficientCreditsClose
         }
       ) }),
       ui.activeOverlay === "login" && /* @__PURE__ */ jsx(Box, { marginTop: 1, children: /* @__PURE__ */ jsx(