@dexto/tui 1.15.0-beta.0 → 1.15.0

package/dist/host/index.cjs

@@ -22,18 +22,21 @@ __export(host_exports, {
   buildDextoBillingUrl: () => buildDextoBillingUrl,
   canUseDextoProvider: () => canUseDextoProvider,
   captureAnalytics: () => captureAnalytics,
-  currentSignIn: () => currentSignIn,
-  dextoCreditBalance: () => dextoCreditBalance,
+  ensureDextoApiKeyForAuthToken: () => ensureDextoApiKeyForAuthToken,
   getProviderDisplayName: () => getProviderDisplayName,
   getProviderInstructions: () => getProviderInstructions,
   getTuiRuntimeServices: () => getTuiRuntimeServices,
   isUsingDextoCredits: () => isUsingDextoCredits,
   isValidApiKeyFormat: () => isValidApiKeyFormat,
+  loadAuth: () => loadAuth,
   openDextoBillingPage: () => openDextoBillingPage,
+  performDeviceCodeLogin: () => performDeviceCodeLogin,
+  persistDeviceApiKeyLoginResult: () => persistDeviceApiKeyLoginResult,
   registerGracefulShutdown: () => registerGracefulShutdown,
+  removeAuth: () => removeAuth,
+  removeDextoApiKeyFromEnv: () => removeDextoApiKeyFromEnv,
   setTuiRuntimeServices: () => setTuiRuntimeServices,
-  signIn: () => signIn,
-  signOut: () => signOut
+  storeAuth: () => storeAuth
 });
 module.exports = __toCommonJS(host_exports);
 let runtimeServices = {};
@@ -66,26 +69,47 @@ function isValidApiKeyFormat(apiKey, provider) {
 function getProviderInstructions(provider) {
   return runtimeServices.getProviderInstructions?.(provider) ?? null;
 }
-async function currentSignIn() {
-  if (!runtimeServices.currentSignIn) {
-    throw missingHostMethod("currentSignIn");
+async function performDeviceCodeLogin(options) {
+  if (!runtimeServices.performDeviceCodeLogin) {
+    throw missingHostMethod("performDeviceCodeLogin");
   }
-  return runtimeServices.currentSignIn();
+  return runtimeServices.performDeviceCodeLogin(options);
 }
-async function signIn(options) {
-  if (!runtimeServices.signIn) {
-    throw missingHostMethod("signIn");
+async function persistDeviceApiKeyLoginResult(result) {
+  if (!runtimeServices.persistDeviceApiKeyLoginResult) {
+    throw missingHostMethod("persistDeviceApiKeyLoginResult");
   }
-  return runtimeServices.signIn(options);
+  return runtimeServices.persistDeviceApiKeyLoginResult(result);
 }
-async function dextoCreditBalance() {
-  return await runtimeServices.dextoCreditBalance?.() ?? null;
+async function ensureDextoApiKeyForAuthToken(authToken, options) {
+  if (!runtimeServices.ensureDextoApiKeyForAuthToken) {
+    throw missingHostMethod("ensureDextoApiKeyForAuthToken");
+  }
+  return runtimeServices.ensureDextoApiKeyForAuthToken(authToken, options);
+}
+async function loadAuth() {
+  if (!runtimeServices.loadAuth) {
+    throw missingHostMethod("loadAuth");
+  }
+  return runtimeServices.loadAuth();
+}
+async function storeAuth(config) {
+  if (!runtimeServices.storeAuth) {
+    throw missingHostMethod("storeAuth");
+  }
+  await runtimeServices.storeAuth(config);
+}
+async function removeAuth() {
+  if (!runtimeServices.removeAuth) {
+    throw missingHostMethod("removeAuth");
+  }
+  await runtimeServices.removeAuth();
 }
-async function signOut() {
-  if (!runtimeServices.signOut) {
-    throw missingHostMethod("signOut");
+async function removeDextoApiKeyFromEnv(options) {
+  if (!runtimeServices.removeDextoApiKeyFromEnv) {
+    throw missingHostMethod("removeDextoApiKeyFromEnv");
   }
-  return runtimeServices.signOut();
+  return runtimeServices.removeDextoApiKeyFromEnv(options);
 }
 async function isUsingDextoCredits() {
   if (!runtimeServices.isUsingDextoCredits) {
@@ -117,16 +141,19 @@ async function openDextoBillingPage(options) {
   buildDextoBillingUrl,
   canUseDextoProvider,
   captureAnalytics,
-  currentSignIn,
-  dextoCreditBalance,
+  ensureDextoApiKeyForAuthToken,
   getProviderDisplayName,
   getProviderInstructions,
   getTuiRuntimeServices,
   isUsingDextoCredits,
   isValidApiKeyFormat,
+  loadAuth,
   openDextoBillingPage,
+  performDeviceCodeLogin,
+  persistDeviceApiKeyLoginResult,
   registerGracefulShutdown,
+  removeAuth,
+  removeDextoApiKeyFromEnv,
   setTuiRuntimeServices,
-  signIn,
-  signOut
+  storeAuth
 });

package/dist/host/index.d.ts

@@ -3,11 +3,38 @@ import type { TuiAgentBackend } from '../agent-backend.js';
 export interface TuiShutdownHandle {
     stop?: (() => Promise<void>) | undefined;
 }
-export interface TuiSignInOptions {
-    /** Aborts the sign-in, such as when the person presses Esc. */
-    signal: AbortSignal;
-    /** What to show while signing in: the link, or the code to check. */
-    onNote: (text: string) => void;
+export interface TuiAuthConfig {
+    token?: string | undefined;
+    refreshToken?: string | undefined;
+    userId?: string | undefined;
+    email?: string | undefined;
+    expiresAt?: number | undefined;
+    createdAt: number;
+    dextoApiKey?: string | undefined;
+    dextoKeyId?: string | undefined;
+    dextoApiKeySource?: 'provisioned' | 'user-supplied' | undefined;
+}
+export interface TuiDeviceApiKeyLoginResult {
+    dextoApiKey: string;
+    dextoKeyId: string;
+    dextoKeyDisplay: string;
+}
+export interface TuiDeviceLoginPrompt {
+    userCode: string;
+    verificationUrl: string;
+    verificationUrlComplete: string | null;
+    expiresIn: number;
+}
+export type TuiDextoApiKeyProvisionStatusLevel = 'info' | 'success' | 'warning' | 'error';
+export interface TuiDextoApiKeyProvisionStatus {
+    level: TuiDextoApiKeyProvisionStatusLevel;
+    message: string;
+}
+export interface TuiPersistedLoginResult {
+    email?: string | undefined;
+    userId?: string | undefined;
+    keyId?: string | undefined;
+    hasDextoApiKey: boolean;
 }
 export interface TuiRuntimeServices {
     registerGracefulShutdown?: (getAgent: () => TuiShutdownHandle, options: {
@@ -22,14 +49,26 @@ export interface TuiRuntimeServices {
         content: string;
         url?: string | undefined;
     } | null;
-    /** Who the current profile acts as, in a few words, or null when signed out. */
-    currentSignIn?: () => Promise<string | null>;
-    /** Signs the current profile in to Dexto, resolving with what to say once signed in. */
-    signIn?: (options: TuiSignInOptions) => Promise<string>;
-    /** Ends the current profile's sign-in, resolving with what to say. */
-    signOut?: () => Promise<string>;
-    /** The organization's Dexto credit balance in USD; null when signed out. */
-    dextoCreditBalance?: () => Promise<number | null>;
+    performDeviceCodeLogin?: (options?: {
+        signal?: AbortSignal | undefined;
+        onPrompt?: ((prompt: TuiDeviceLoginPrompt) => void) | undefined;
+    }) => Promise<TuiDeviceApiKeyLoginResult>;
+    persistDeviceApiKeyLoginResult?: (result: TuiDeviceApiKeyLoginResult) => Promise<TuiPersistedLoginResult>;
+    ensureDextoApiKeyForAuthToken?: (authToken: string, options?: {
+        onStatus?: ((status: TuiDextoApiKeyProvisionStatus) => void) | undefined;
+    }) => Promise<{
+        dextoApiKey: string;
+        keyId: string | null;
+    } | null>;
+    loadAuth?: () => Promise<TuiAuthConfig | null>;
+    storeAuth?: (config: TuiAuthConfig) => Promise<void>;
+    removeAuth?: () => Promise<void>;
+    removeDextoApiKeyFromEnv?: (options?: {
+        expectedValue?: string;
+    }) => Promise<{
+        removed: boolean;
+        targetEnvPath: string;
+    }>;
     isUsingDextoCredits?: () => Promise<boolean>;
     canUseDextoProvider?: () => Promise<boolean>;
     buildDextoBillingUrl?: (options: {
@@ -53,11 +92,26 @@ export declare function getProviderInstructions(provider: LLMProvider): {
     content: string;
     url?: string | undefined;
 } | null;
-export declare function currentSignIn(): Promise<string | null>;
-export declare function signIn(options: TuiSignInOptions): Promise<string>;
-/** The Dexto credit balance, or null when the host can't say. */
-export declare function dextoCreditBalance(): Promise<number | null>;
-export declare function signOut(): Promise<string>;
+export declare function performDeviceCodeLogin(options?: {
+    signal?: AbortSignal | undefined;
+    onPrompt?: ((prompt: TuiDeviceLoginPrompt) => void) | undefined;
+}): Promise<TuiDeviceApiKeyLoginResult>;
+export declare function persistDeviceApiKeyLoginResult(result: TuiDeviceApiKeyLoginResult): Promise<TuiPersistedLoginResult>;
+export declare function ensureDextoApiKeyForAuthToken(authToken: string, options?: {
+    onStatus?: ((status: TuiDextoApiKeyProvisionStatus) => void) | undefined;
+}): Promise<{
+    dextoApiKey: string;
+    keyId: string | null;
+} | null>;
+export declare function loadAuth(): Promise<TuiAuthConfig | null>;
+export declare function storeAuth(config: TuiAuthConfig): Promise<void>;
+export declare function removeAuth(): Promise<void>;
+export declare function removeDextoApiKeyFromEnv(options?: {
+    expectedValue?: string;
+}): Promise<{
+    removed: boolean;
+    targetEnvPath: string;
+}>;
 export declare function isUsingDextoCredits(): Promise<boolean>;
 export declare function canUseDextoProvider(): Promise<boolean>;
 export declare function buildDextoBillingUrl(options: {

package/dist/host/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,WAAW,iBAAiB;IAC9B,IAAI,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,gBAAgB;IAC7B,+DAA+D;IAC/D,MAAM,EAAE,WAAW,CAAC;IACpB,qEAAqE;IACrE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,kBAAkB;IAC/B,wBAAwB,CAAC,EAAE,CACvB,QAAQ,EAAE,MAAM,iBAAiB,EACjC,OAAO,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,KAC5B,IAAI,CAAC;IACV,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACxE,8BAA8B,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,sBAAsB,CAAC,EAAE,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,KAAK,MAAM,CAAC;IACpE,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,KAAK,OAAO,CAAC;IACzE,uBAAuB,CAAC,EAAE,CACtB,QAAQ,EAAE,WAAW,KACpB;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,IAAI,CAAC;IACzE,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7C,wFAAwF;IACxF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAClD,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,CAAC;IACnE,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACnF;AAID,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAEvE;AAED,wBAAgB,qBAAqB,IAAI,kBAAkB,CAE1D;AAMD,wBAAgB,wBAAwB,CACpC,QAAQ,EAAE,MAAM,eAAe,EAC/B,OAAO,EAAE;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GAC9B,IAAI,CAEN;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAE1F;AAED,wBAAsB,8BAA8B,IAAI,OAAO,CAAC,IAAI,CAAC,CAIpE;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,MAAM,CAE7E;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,CAElF;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,WAAW,GAAG;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,GAAG,IAAI,CAEP;AAED,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAK5D;AAED,wBAAsB,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAKvE;AAED,iEAAiE;AACjE,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAEjE;AAED,wBAAsB,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAK/C;AAED,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAK5D;AAED,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAK5D;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAK5E;AAED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAK/F"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,MAAM,WAAW,iBAAiB;IAC9B,IAAI,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CAC5C;AAED,MAAM,WAAW,aAAa;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,iBAAiB,CAAC,EAAE,aAAa,GAAG,eAAe,GAAG,SAAS,CAAC;CACnE;AAED,MAAM,WAAW,0BAA0B;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,kCAAkC,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAE1F,MAAM,WAAW,6BAA6B;IAC1C,KAAK,EAAE,kCAAkC,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,uBAAuB;IACpC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IAC/B,wBAAwB,CAAC,EAAE,CACvB,QAAQ,EAAE,MAAM,iBAAiB,EACjC,OAAO,EAAE;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,KAC5B,IAAI,CAAC;IACV,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACxE,8BAA8B,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,sBAAsB,CAAC,EAAE,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,KAAK,MAAM,CAAC;IACpE,mBAAmB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,KAAK,OAAO,CAAC;IACzE,uBAAuB,CAAC,EAAE,CACtB,QAAQ,EAAE,WAAW,KACpB;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,IAAI,CAAC;IACzE,sBAAsB,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE;QAChC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;QACjC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;KACnE,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC1C,8BAA8B,CAAC,EAAE,CAC7B,MAAM,EAAE,0BAA0B,KACjC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACtC,6BAA6B,CAAC,EAAE,CAC5B,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QACN,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,6BAA6B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;KAC5E,KACA,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACnE,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAC/C,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,wBAAwB,CAAC,EAAE,CAAC,OAAO,CAAC,EAAE;QAClC,aAAa,CAAC,EAAE,MAAM,CAAC;KAC1B,KAAK,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,mBAAmB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,CAAC;IACnE,oBAAoB,CAAC,EAAE,CAAC,OAAO,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACnF;AAID,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAEvE;AAED,wBAAgB,qBAAqB,IAAI,kBAAkB,CAE1D;AAMD,wBAAgB,wBAAwB,CACpC,QAAQ,EAAE,MAAM,eAAe,EAC/B,OAAO,EAAE;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,GAC9B,IAAI,CAEN;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAE1F;AAED,wBAAsB,8BAA8B,IAAI,OAAO,CAAC,IAAI,CAAC,CAIpE;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,MAAM,CAE7E;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,CAElF;AAED,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,WAAW,GAAG;IAC5D,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,GAAG,IAAI,CAEP;AAED,wBAAsB,sBAAsB,CAAC,OAAO,CAAC,EAAE;IACnD,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CACnE,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAKtC;AAED,wBAAsB,8BAA8B,CAChD,MAAM,EAAE,0BAA0B,GACnC,OAAO,CAAC,uBAAuB,CAAC,CAKlC;AAED,wBAAsB,6BAA6B,CAC/C,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,6BAA6B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAA;CAAE,GACvF,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAAC,CAK/D;AAED,wBAAsB,QAAQ,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAK9D;AAED,wBAAsB,SAAS,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAKpE;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAKhD;AAED,wBAAsB,wBAAwB,CAAC,OAAO,CAAC,EAAE;IACrD,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAAC,CAKvD;AAED,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAK5D;AAED,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAK5D;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAK5E;AAED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAK/F"}

package/dist/host/index.js

@@ -28,26 +28,47 @@ function isValidApiKeyFormat(apiKey, provider) {
 function getProviderInstructions(provider) {
   return runtimeServices.getProviderInstructions?.(provider) ?? null;
 }
-async function currentSignIn() {
-  if (!runtimeServices.currentSignIn) {
-    throw missingHostMethod("currentSignIn");
+async function performDeviceCodeLogin(options) {
+  if (!runtimeServices.performDeviceCodeLogin) {
+    throw missingHostMethod("performDeviceCodeLogin");
   }
-  return runtimeServices.currentSignIn();
+  return runtimeServices.performDeviceCodeLogin(options);
 }
-async function signIn(options) {
-  if (!runtimeServices.signIn) {
-    throw missingHostMethod("signIn");
+async function persistDeviceApiKeyLoginResult(result) {
+  if (!runtimeServices.persistDeviceApiKeyLoginResult) {
+    throw missingHostMethod("persistDeviceApiKeyLoginResult");
   }
-  return runtimeServices.signIn(options);
+  return runtimeServices.persistDeviceApiKeyLoginResult(result);
 }
-async function dextoCreditBalance() {
-  return await runtimeServices.dextoCreditBalance?.() ?? null;
+async function ensureDextoApiKeyForAuthToken(authToken, options) {
+  if (!runtimeServices.ensureDextoApiKeyForAuthToken) {
+    throw missingHostMethod("ensureDextoApiKeyForAuthToken");
+  }
+  return runtimeServices.ensureDextoApiKeyForAuthToken(authToken, options);
+}
+async function loadAuth() {
+  if (!runtimeServices.loadAuth) {
+    throw missingHostMethod("loadAuth");
+  }
+  return runtimeServices.loadAuth();
+}
+async function storeAuth(config) {
+  if (!runtimeServices.storeAuth) {
+    throw missingHostMethod("storeAuth");
+  }
+  await runtimeServices.storeAuth(config);
+}
+async function removeAuth() {
+  if (!runtimeServices.removeAuth) {
+    throw missingHostMethod("removeAuth");
+  }
+  await runtimeServices.removeAuth();
 }
-async function signOut() {
-  if (!runtimeServices.signOut) {
-    throw missingHostMethod("signOut");
+async function removeDextoApiKeyFromEnv(options) {
+  if (!runtimeServices.removeDextoApiKeyFromEnv) {
+    throw missingHostMethod("removeDextoApiKeyFromEnv");
   }
-  return runtimeServices.signOut();
+  return runtimeServices.removeDextoApiKeyFromEnv(options);
 }
 async function isUsingDextoCredits() {
   if (!runtimeServices.isUsingDextoCredits) {
@@ -78,16 +99,19 @@ export {
   buildDextoBillingUrl,
   canUseDextoProvider,
   captureAnalytics,
-  currentSignIn,
-  dextoCreditBalance,
+  ensureDextoApiKeyForAuthToken,
   getProviderDisplayName,
   getProviderInstructions,
   getTuiRuntimeServices,
   isUsingDextoCredits,
   isValidApiKeyFormat,
+  loadAuth,
   openDextoBillingPage,
+  performDeviceCodeLogin,
+  persistDeviceApiKeyLoginResult,
   registerGracefulShutdown,
+  removeAuth,
+  removeDextoApiKeyFromEnv,
   setTuiRuntimeServices,
-  signIn,
-  signOut
+  storeAuth
 };

package/dist/host/index.test.cjs

@@ -1,33 +1,47 @@
 "use strict";
 var import_vitest = require("vitest");
 var import_index = require("./index.js");
-(0, import_vitest.describe)("TUI sign-in runtime services", () => {
+(0, import_vitest.describe)("TUI auth runtime services", () => {
   (0, import_vitest.afterEach)(() => {
     (0, import_index.setTuiRuntimeServices)({});
   });
-  (0, import_vitest.it)("signs in, says who, and signs out through the host", async () => {
-    const signal = new AbortController().signal;
-    const onNote = import_vitest.vi.fn();
-    const hostSignIn = import_vitest.vi.fn().mockResolvedValue("Signed in as ada@example.com in Acme.");
+  (0, import_vitest.it)("uses host-provided API-key device login and persistence services", async () => {
+    const prompt = import_vitest.vi.fn();
+    const perform = import_vitest.vi.fn().mockResolvedValue({
+      dextoApiKey: "dxt_full_key",
+      dextoKeyDisplay: "dxt_abc...",
+      dextoKeyId: "key-id"
+    });
+    const persist = import_vitest.vi.fn().mockResolvedValue({
+      keyId: "key-id",
+      hasDextoApiKey: true
+    });
     (0, import_index.setTuiRuntimeServices)({
-      currentSignIn: async () => "ada@example.com in Acme",
-      signIn: hostSignIn,
-      signOut: async () => "Logged out."
+      performDeviceCodeLogin: perform,
+      persistDeviceApiKeyLoginResult: persist
+    });
+    const loginResult = await (0, import_index.performDeviceCodeLogin)({
+      onPrompt: prompt
+    });
+    const persisted = await (0, import_index.persistDeviceApiKeyLoginResult)(loginResult);
+    (0, import_vitest.expect)(perform).toHaveBeenCalledWith({ onPrompt: prompt });
+    (0, import_vitest.expect)(persist).toHaveBeenCalledWith({
+      dextoApiKey: "dxt_full_key",
+      dextoKeyDisplay: "dxt_abc...",
+      dextoKeyId: "key-id"
+    });
+    (0, import_vitest.expect)(persisted).toEqual({
+      keyId: "key-id",
+      hasDextoApiKey: true
     });
-    (0, import_vitest.expect)(await (0, import_index.currentSignIn)()).toBe("ada@example.com in Acme");
-    (0, import_vitest.expect)(await (0, import_index.signIn)({ signal, onNote })).toBe("Signed in as ada@example.com in Acme.");
-    (0, import_vitest.expect)(hostSignIn).toHaveBeenCalledWith({ signal, onNote });
-    (0, import_vitest.expect)(await (0, import_index.signOut)()).toBe("Logged out.");
   });
-  (0, import_vitest.it)("fails fast when the host provides no sign-in", async () => {
-    await (0, import_vitest.expect)((0, import_index.currentSignIn)()).rejects.toThrow(
-      "TUI runtime services missing required method: currentSignIn"
-    );
+  (0, import_vitest.it)("fails fast when API-key device login persistence is not provided by the host", async () => {
     await (0, import_vitest.expect)(
-      (0, import_index.signIn)({ signal: new AbortController().signal, onNote: () => void 0 })
-    ).rejects.toThrow("TUI runtime services missing required method: signIn");
-    await (0, import_vitest.expect)((0, import_index.signOut)()).rejects.toThrow(
-      "TUI runtime services missing required method: signOut"
-    );
+      (0, import_index.persistDeviceApiKeyLoginResult)({
+        dextoApiKey: "dxt_full_key",
+        dextoKeyDisplay: "dxt_abc...",
+        dextoKeyId: "key-id"
+      })
+    ).rejects.toThrow("TUI runtime services missing required method");
   });
 });

package/dist/host/index.test.js

@@ -1,32 +1,50 @@
 import { afterEach, describe, expect, it, vi } from "vitest";
-import { currentSignIn, setTuiRuntimeServices, signIn, signOut } from "./index.js";
-describe("TUI sign-in runtime services", () => {
+import {
+  performDeviceCodeLogin,
+  persistDeviceApiKeyLoginResult,
+  setTuiRuntimeServices
+} from "./index.js";
+describe("TUI auth runtime services", () => {
   afterEach(() => {
     setTuiRuntimeServices({});
   });
-  it("signs in, says who, and signs out through the host", async () => {
-    const signal = new AbortController().signal;
-    const onNote = vi.fn();
-    const hostSignIn = vi.fn().mockResolvedValue("Signed in as ada@example.com in Acme.");
+  it("uses host-provided API-key device login and persistence services", async () => {
+    const prompt = vi.fn();
+    const perform = vi.fn().mockResolvedValue({
+      dextoApiKey: "dxt_full_key",
+      dextoKeyDisplay: "dxt_abc...",
+      dextoKeyId: "key-id"
+    });
+    const persist = vi.fn().mockResolvedValue({
+      keyId: "key-id",
+      hasDextoApiKey: true
+    });
     setTuiRuntimeServices({
-      currentSignIn: async () => "ada@example.com in Acme",
-      signIn: hostSignIn,
-      signOut: async () => "Logged out."
+      performDeviceCodeLogin: perform,
+      persistDeviceApiKeyLoginResult: persist
+    });
+    const loginResult = await performDeviceCodeLogin({
+      onPrompt: prompt
+    });
+    const persisted = await persistDeviceApiKeyLoginResult(loginResult);
+    expect(perform).toHaveBeenCalledWith({ onPrompt: prompt });
+    expect(persist).toHaveBeenCalledWith({
+      dextoApiKey: "dxt_full_key",
+      dextoKeyDisplay: "dxt_abc...",
+      dextoKeyId: "key-id"
+    });
+    expect(persisted).toEqual({
+      keyId: "key-id",
+      hasDextoApiKey: true
     });
-    expect(await currentSignIn()).toBe("ada@example.com in Acme");
-    expect(await signIn({ signal, onNote })).toBe("Signed in as ada@example.com in Acme.");
-    expect(hostSignIn).toHaveBeenCalledWith({ signal, onNote });
-    expect(await signOut()).toBe("Logged out.");
   });
-  it("fails fast when the host provides no sign-in", async () => {
-    await expect(currentSignIn()).rejects.toThrow(
-      "TUI runtime services missing required method: currentSignIn"
-    );
+  it("fails fast when API-key device login persistence is not provided by the host", async () => {
     await expect(
-      signIn({ signal: new AbortController().signal, onNote: () => void 0 })
-    ).rejects.toThrow("TUI runtime services missing required method: signIn");
-    await expect(signOut()).rejects.toThrow(
-      "TUI runtime services missing required method: signOut"
-    );
+      persistDeviceApiKeyLoginResult({
+        dextoApiKey: "dxt_full_key",
+        dextoKeyDisplay: "dxt_abc...",
+        dextoKeyId: "key-id"
+      })
+    ).rejects.toThrow("TUI runtime services missing required method");
   });
 });

package/dist/index.d.cts

@@ -362,11 +362,38 @@ declare function startInkCliRefactored(agent: TuiAgentBackend, initialSessionId:
 interface TuiShutdownHandle {
     stop?: (() => Promise<void>) | undefined;
 }
-interface TuiSignInOptions {
-    /** Aborts the sign-in, such as when the person presses Esc. */
-    signal: AbortSignal;
-    /** What to show while signing in: the link, or the code to check. */
-    onNote: (text: string) => void;
+interface TuiAuthConfig {
+    token?: string | undefined;
+    refreshToken?: string | undefined;
+    userId?: string | undefined;
+    email?: string | undefined;
+    expiresAt?: number | undefined;
+    createdAt: number;
+    dextoApiKey?: string | undefined;
+    dextoKeyId?: string | undefined;
+    dextoApiKeySource?: 'provisioned' | 'user-supplied' | undefined;
+}
+interface TuiDeviceApiKeyLoginResult {
+    dextoApiKey: string;
+    dextoKeyId: string;
+    dextoKeyDisplay: string;
+}
+interface TuiDeviceLoginPrompt {
+    userCode: string;
+    verificationUrl: string;
+    verificationUrlComplete: string | null;
+    expiresIn: number;
+}
+type TuiDextoApiKeyProvisionStatusLevel = 'info' | 'success' | 'warning' | 'error';
+interface TuiDextoApiKeyProvisionStatus {
+    level: TuiDextoApiKeyProvisionStatusLevel;
+    message: string;
+}
+interface TuiPersistedLoginResult {
+    email?: string | undefined;
+    userId?: string | undefined;
+    keyId?: string | undefined;
+    hasDextoApiKey: boolean;
 }
 interface TuiRuntimeServices {
     registerGracefulShutdown?: (getAgent: () => TuiShutdownHandle, options: {
@@ -381,14 +408,26 @@ interface TuiRuntimeServices {
         content: string;
         url?: string | undefined;
     } | null;
-    /** Who the current profile acts as, in a few words, or null when signed out. */
-    currentSignIn?: () => Promise<string | null>;
-    /** Signs the current profile in to Dexto, resolving with what to say once signed in. */
-    signIn?: (options: TuiSignInOptions) => Promise<string>;
-    /** Ends the current profile's sign-in, resolving with what to say. */
-    signOut?: () => Promise<string>;
-    /** The organization's Dexto credit balance in USD; null when signed out. */
-    dextoCreditBalance?: () => Promise<number | null>;
+    performDeviceCodeLogin?: (options?: {
+        signal?: AbortSignal | undefined;
+        onPrompt?: ((prompt: TuiDeviceLoginPrompt) => void) | undefined;
+    }) => Promise<TuiDeviceApiKeyLoginResult>;
+    persistDeviceApiKeyLoginResult?: (result: TuiDeviceApiKeyLoginResult) => Promise<TuiPersistedLoginResult>;
+    ensureDextoApiKeyForAuthToken?: (authToken: string, options?: {
+        onStatus?: ((status: TuiDextoApiKeyProvisionStatus) => void) | undefined;
+    }) => Promise<{
+        dextoApiKey: string;
+        keyId: string | null;
+    } | null>;
+    loadAuth?: () => Promise<TuiAuthConfig | null>;
+    storeAuth?: (config: TuiAuthConfig) => Promise<void>;
+    removeAuth?: () => Promise<void>;
+    removeDextoApiKeyFromEnv?: (options?: {
+        expectedValue?: string;
+    }) => Promise<{
+        removed: boolean;
+        targetEnvPath: string;
+    }>;
     isUsingDextoCredits?: () => Promise<boolean>;
     canUseDextoProvider?: () => Promise<boolean>;
     buildDextoBillingUrl?: (options: {

package/dist/services/processStream.cjs

@@ -81,9 +81,9 @@ function extractInsufficientCreditsBalance(error) {
 }
 function buildInsufficientCreditsContent(balance) {
   if (balance === null) {
-    return "Out of Dexto credits.\nUse the billing prompt to top up and retry your request.";
+    return "Out of Dexto Nova credits.\nUse the billing prompt to top up and retry your request.";
   }
-  return `Out of Dexto credits. Current balance: $${balance.toFixed(2)}.
+  return `Out of Dexto Nova credits. Current balance: $${balance.toFixed(2)}.
 Use the billing prompt to top up and retry your request.`;
 }
 function hasMeaningfulTokenUsageForAnalytics(tokenUsage, estimatedCost) {

package/dist/services/processStream.js

@@ -48,9 +48,9 @@ function extractInsufficientCreditsBalance(error) {
 }
 function buildInsufficientCreditsContent(balance) {
   if (balance === null) {
-    return "Out of Dexto credits.\nUse the billing prompt to top up and retry your request.";
+    return "Out of Dexto Nova credits.\nUse the billing prompt to top up and retry your request.";
   }
-  return `Out of Dexto credits. Current balance: $${balance.toFixed(2)}.
+  return `Out of Dexto Nova credits. Current balance: $${balance.toFixed(2)}.
 Use the billing prompt to top up and retry your request.`;
 }
 function hasMeaningfulTokenUsageForAnalytics(tokenUsage, estimatedCost) {

package/dist/services/processStream.test.cjs

@@ -504,7 +504,7 @@ function createSetters({
     (0, import_vitest.expect)(ui.insufficientCredits).toEqual({ balanceUsd: 0 });
     (0, import_vitest.expect)(ui.isProcessing).toBe(false);
     const latestMessage = getMessages().at(-1);
-    (0, import_vitest.expect)(latestMessage?.content).toContain("Out of Dexto credits");
+    (0, import_vitest.expect)(latestMessage?.content).toContain("Out of Dexto Nova credits");
     (0, import_vitest.expect)(latestMessage?.content).not.toContain("Error:");
   });
   (0, import_vitest.it)("captures analytics cost fields for priced llm responses", async () => {

package/dist/services/processStream.test.js

@@ -503,7 +503,7 @@ describe("processStream (reasoning)", () => {
     expect(ui.insufficientCredits).toEqual({ balanceUsd: 0 });
     expect(ui.isProcessing).toBe(false);
     const latestMessage = getMessages().at(-1);
-    expect(latestMessage?.content).toContain("Out of Dexto credits");
+    expect(latestMessage?.content).toContain("Out of Dexto Nova credits");
     expect(latestMessage?.content).not.toContain("Error:");
   });
   it("captures analytics cost fields for priced llm responses", async () => {

package/dist/utils/llm-provider-display.cjs

@@ -39,7 +39,7 @@ const LLM_PROVIDER_DISPLAY_NAMES = {
   bedrock: "Bedrock",
   local: "Local",
   ollama: "Ollama",
-  "dexto-nova": "Dexto"
+  "dexto-nova": "Dexto Nova"
 };
 function getLLMProviderDisplayName(provider, baseURL) {
   if (provider === "openai-compatible") {

package/dist/utils/llm-provider-display.js

@@ -16,7 +16,7 @@ const LLM_PROVIDER_DISPLAY_NAMES = {
   bedrock: "Bedrock",
   local: "Local",
   ollama: "Ollama",
-  "dexto-nova": "Dexto"
+  "dexto-nova": "Dexto Nova"
 };
 function getLLMProviderDisplayName(provider, baseURL) {
   if (provider === "openai-compatible") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dexto/tui",
-  "version": "1.15.0-beta.0",
+  "version": "1.15.0",
   "description": "Interactive terminal UI for Dexto CLI",
   "type": "module",
   "main": "./dist/index.js",
@@ -28,10 +28,10 @@
     "string-width": "^8.1.0",
     "strip-ansi": "^7.1.2",
     "wrap-ansi": "^9.0.2",
-    "@dexto/core": "1.14.4",
-    "@dexto/llm": "1.14.4",
-    "@dexto/registry": "1.14.4",
-    "@dexto/agent-management": "1.15.0-beta.0"
+    "@dexto/core": "1.15.0",
+    "@dexto/agent-management": "1.15.0",
+    "@dexto/registry": "1.15.0",
+    "@dexto/llm": "1.15.0"
   },
   "devDependencies": {
     "@types/react": "^19.0.0",