dexto 1.13.5 → 1.14.1

package/dist/cli/approval/headless-approval-handler.d.ts

@@ -0,0 +1,4 @@
+import { type ApprovalRequest, type AgentEventBus, type ApprovalResponse } from '@dexto/core';
+export declare const HEADLESS_APPROVAL_MESSAGE = "This operation requires interactive approval. Run the task in the Dexto TUI to review it.";
+export declare function handleHeadlessApproval(request: ApprovalRequest, eventBus: Pick<AgentEventBus, 'emit'>, runSessionId: string | undefined): Promise<ApprovalResponse>;
+//# sourceMappingURL=headless-approval-handler.d.ts.map

package/dist/cli/approval/headless-approval-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headless-approval-handler.d.ts","sourceRoot":"","sources":["../../../src/cli/approval/headless-approval-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAGH,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACxB,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,yBAAyB,8FACyD,CAAC;AAEhG,wBAAsB,sBAAsB,CACxC,OAAO,EAAE,eAAe,EACxB,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,EACrC,YAAY,EAAE,MAAM,GAAG,SAAS,GACjC,OAAO,CAAC,gBAAgB,CAAC,CAiB3B"}

package/dist/cli/approval/headless-approval-handler.js

@@ -0,0 +1,19 @@
+import { ApprovalStatus, DenialReason, } from '@dexto/core';
+export const HEADLESS_APPROVAL_MESSAGE = 'This operation requires interactive approval. Run the task in the Dexto TUI to review it.';
+export async function handleHeadlessApproval(request, eventBus, runSessionId) {
+    // Attribute legacy unscoped requests to this headless run without changing the denial envelope.
+    const eventScope = request.sessionId === undefined && runSessionId !== undefined
+        ? { sessionId: runSessionId }
+        : {};
+    eventBus.emit('approval:request', { ...request, ...eventScope });
+    const response = {
+        approvalId: request.approvalId,
+        status: ApprovalStatus.DENIED,
+        reason: DenialReason.SYSTEM_DENIED,
+        message: HEADLESS_APPROVAL_MESSAGE,
+        ...(request.sessionId !== undefined ? { sessionId: request.sessionId } : {}),
+        ...(request.hostRuntime !== undefined ? { hostRuntime: request.hostRuntime } : {}),
+    };
+    eventBus.emit('approval:response', { ...response, ...eventScope });
+    return response;
+}

package/dist/cli/auth/api-client.js

@@ -478,7 +478,7 @@ export class DextoApiClient {
             headers: {
                 'Content-Type': 'application/json',
             },
-            body: JSON.stringify({ client }),
+            body: JSON.stringify({ clientId: client }),
             signal: this.createRequestSignal(options.signal),
         });
         if (!response.ok) {

package/dist/cli/auth/constants.d.ts

@@ -25,6 +25,7 @@ export declare const DEXTO_API_URL: string;
 /**
  * Dexto app URL for auth/key/account control-plane endpoints.
  */
+export declare const DEFAULT_DEXTO_PLATFORM_URL = "https://app.dexto.ai";
 export declare const DEXTO_PLATFORM_URL: string;
 export declare const DEXTO_PUBLIC_API_URL: string;
 /**

package/dist/cli/auth/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/constants.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,YAAY,QAAyE,CAAC;AACnG,eAAO,MAAM,iBAAiB,QAEwL,CAAC;AAEvN;;GAEG;AACH,eAAO,MAAM,aAAa,QAAsD,CAAC;AAEjF;;GAEG;AACH,eAAO,MAAM,kBAAkB,QAA2D,CAAC;AAE3F,eAAO,MAAM,oBAAoB,QAA6D,CAAC;AAE/F;;GAEG;AACH,eAAO,MAAM,iBAAiB,QACwD,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/constants.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,YAAY,QAAyE,CAAC;AACnG,eAAO,MAAM,iBAAiB,QAEwL,CAAC;AAEvN;;GAEG;AACH,eAAO,MAAM,aAAa,QAAsD,CAAC;AAEjF;;GAEG;AACH,eAAO,MAAM,0BAA0B,yBAAyB,CAAC;AACjE,eAAO,MAAM,kBAAkB,QAA+D,CAAC;AAE/F,eAAO,MAAM,oBAAoB,QAA6D,CAAC;AAE/F;;GAEG;AACH,eAAO,MAAM,iBAAiB,QACwD,CAAC"}

package/dist/cli/auth/constants.js

@@ -27,7 +27,8 @@ export const DEXTO_API_URL = process.env.DEXTO_API_URL || 'https://app.dexto.ai'
 /**
  * Dexto app URL for auth/key/account control-plane endpoints.
  */
-export const DEXTO_PLATFORM_URL = process.env.DEXTO_PLATFORM_URL || 'https://app.dexto.ai';
+export const DEFAULT_DEXTO_PLATFORM_URL = 'https://app.dexto.ai';
+export const DEXTO_PLATFORM_URL = process.env.DEXTO_PLATFORM_URL || DEFAULT_DEXTO_PLATFORM_URL;
 export const DEXTO_PUBLIC_API_URL = process.env.DEXTO_PUBLIC_API_URL || 'https://api.dexto.ai';
 /**
  * Dexto Nova credits purchase URL

package/dist/cli/auth/dexto-api-key.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dexto-api-key.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/dexto-api-key.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,+BAA+B,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAEvF,MAAM,WAAW,0BAA0B;IACvC,KAAK,EAAE,+BAA+B,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACrC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,0BAA0B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CACzE;AAaD;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BxE;AAED,wBAAsB,wBAAwB,CAAC,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC;IAC9F,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACzB,CAAC,CAsDD;AAED;;;;;;;;;GASG;AACH,wBAAsB,6BAA6B,CAC/C,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,wBAA6B,GACvC,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAAC,CA6D/D"}
+{"version":3,"file":"dexto-api-key.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/dexto-api-key.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,+BAA+B,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAEvF,MAAM,WAAW,0BAA0B;IACvC,KAAK,EAAE,+BAA+B,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACrC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,0BAA0B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CACzE;AAaD;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BxE;AAED,wBAAsB,wBAAwB,CAAC,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC;IAC9F,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACzB,CAAC,CAsDD;AAED;;;;;;;;;GASG;AACH,wBAAsB,6BAA6B,CAC/C,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,wBAA6B,GACvC,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAAC,CA+D/D"}

package/dist/cli/auth/dexto-api-key.js

@@ -3,6 +3,7 @@ import path from 'node:path';
 import { ensureDextoGlobalDirectory, getDextoEnvPath, logger } from '@dexto/core';
 import { getDextoApiClient } from './api-client.js';
 import { loadAuth, storeAuth } from './service.js';
+import { DEXTO_PLATFORM_URL } from './constants.js';
 async function ensureOwnerOnlyPermissions(filePath) {
     try {
         await fs.chmod(filePath, 0o600);
@@ -131,6 +132,7 @@ export async function ensureDextoApiKeyForAuthToken(authToken, options = {}) {
                 dextoApiKey: rotated.dextoApiKey,
                 dextoKeyId: rotated.keyId,
                 dextoApiKeySource: 'provisioned',
+                dextoPlatformUrl: new URL(DEXTO_PLATFORM_URL).origin,
             });
             await saveDextoApiKeyToEnv(rotated.dextoApiKey);
             status('success', 'New key provisioned');
@@ -143,6 +145,7 @@ export async function ensureDextoApiKeyForAuthToken(authToken, options = {}) {
             dextoApiKey: provisioned.dextoApiKey,
             dextoKeyId: provisioned.keyId,
             dextoApiKeySource: 'provisioned',
+            dextoPlatformUrl: new URL(DEXTO_PLATFORM_URL).origin,
         });
         await saveDextoApiKeyToEnv(provisioned.dextoApiKey);
         status('success', 'Dexto API key provisioned');

package/dist/cli/auth/login-persistence.d.ts

@@ -11,5 +11,5 @@ export interface PersistedLoginResult {
     hasDextoApiKey: boolean;
 }
 export declare function persistOAuthLoginResult(result: OAuthResult, options?: PersistOAuthLoginOptions): Promise<PersistedLoginResult>;
-export declare function persistDeviceApiKeyLoginResult(result: DeviceApiKeyLoginResult): Promise<PersistedLoginResult>;
+export declare function persistDeviceApiKeyLoginResult(result: DeviceApiKeyLoginResult, platformUrl?: string): Promise<PersistedLoginResult>;
 //# sourceMappingURL=login-persistence.d.ts.map

package/dist/cli/auth/login-persistence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login-persistence.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/login-persistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,0BAA0B,EAAiC,MAAM,oBAAoB,CAAC;AACpG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAE1D,MAAM,WAAW,wBAAwB;IACrC,iBAAiB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,0BAA0B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAClF;AAED,MAAM,WAAW,oBAAoB;IACjC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;CAC3B;AA4CD,wBAAsB,uBAAuB,CACzC,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,wBAA6B,GACvC,OAAO,CAAC,oBAAoB,CAAC,CAyB/B;AAED,wBAAsB,8BAA8B,CAChD,MAAM,EAAE,uBAAuB,GAChC,OAAO,CAAC,oBAAoB,CAAC,CAY/B"}
+{"version":3,"file":"login-persistence.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/login-persistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,0BAA0B,EAAiC,MAAM,oBAAoB,CAAC;AACpG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAG1D,MAAM,WAAW,wBAAwB;IACrC,iBAAiB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,0BAA0B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAClF;AAED,MAAM,WAAW,oBAAoB;IACjC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;CAC3B;AAoDD,wBAAsB,uBAAuB,CACzC,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,wBAA6B,GACvC,OAAO,CAAC,oBAAoB,CAAC,CAyB/B;AAED,wBAAsB,8BAA8B,CAChD,MAAM,EAAE,uBAAuB,EAC/B,WAAW,GAAE,MAA2B,GACzC,OAAO,CAAC,oBAAoB,CAAC,CAa/B"}

package/dist/cli/auth/login-persistence.js

@@ -1,5 +1,6 @@
 import { ensureDextoApiKeyForAuthToken } from './dexto-api-key.js';
 import { loadAuth, storeAuth } from './service.js';
+import { DEXTO_PLATFORM_URL } from './constants.js';
 function isSameAuthenticatedUser(existingAuth, user) {
     if (!existingAuth || !user) {
         return false;
@@ -16,6 +17,9 @@ function getPreservedDextoApiKey(existingAuth, user) {
     if (!existingAuth?.dextoApiKey || !isSameAuthenticatedUser(existingAuth, user)) {
         return null;
     }
+    const keyOrigin = existingAuth.dextoPlatformUrl ?? 'https://app.dexto.ai';
+    if (new URL(keyOrigin).origin !== new URL(DEXTO_PLATFORM_URL).origin)
+        return null;
     const isProvisionedKey = existingAuth.dextoApiKeySource === 'provisioned' ||
         (existingAuth.dextoApiKeySource === undefined && Boolean(existingAuth.dextoKeyId));
     if (!isProvisionedKey) {
@@ -25,6 +29,9 @@ function getPreservedDextoApiKey(existingAuth, user) {
         dextoApiKey: existingAuth.dextoApiKey,
         ...(existingAuth.dextoKeyId ? { dextoKeyId: existingAuth.dextoKeyId } : {}),
         dextoApiKeySource: 'provisioned',
+        ...(existingAuth.dextoPlatformUrl
+            ? { dextoPlatformUrl: existingAuth.dextoPlatformUrl }
+            : {}),
     };
 }
 export async function persistOAuthLoginResult(result, options = {}) {
@@ -50,11 +57,12 @@ export async function persistOAuthLoginResult(result, options = {}) {
         hasDextoApiKey: Boolean(ensured?.dextoApiKey ?? preservedDextoApiKey?.dextoApiKey),
     };
 }
-export async function persistDeviceApiKeyLoginResult(result) {
+export async function persistDeviceApiKeyLoginResult(result, platformUrl = DEXTO_PLATFORM_URL) {
     await storeAuth({
         dextoApiKey: result.dextoApiKey,
         dextoKeyId: result.dextoKeyId,
         dextoApiKeySource: 'provisioned',
+        dextoPlatformUrl: new URL(platformUrl).origin,
         createdAt: Date.now(),
     });
     return {

package/dist/cli/auth/service.d.ts

@@ -9,6 +9,8 @@ export interface AuthConfig {
     /** Dexto API key for gateway access (from --api-key or provisioned after OAuth) */
     dextoApiKey?: string | undefined;
     dextoKeyId?: string | undefined;
+    /** Application origin that issued the saved API key; absent for legacy credentials. */
+    dextoPlatformUrl?: string | undefined;
     dextoApiKeySource?: 'provisioned' | 'user-supplied' | undefined;
 }
 export declare function storeAuth(config: AuthConfig): Promise<void>;

package/dist/cli/auth/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/service.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,UAAU;IACvB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,iBAAiB,CAAC,EAAE,aAAa,GAAG,eAAe,GAAG,SAAS,CAAC;CACnE;AAkBD,wBAAsB,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAQjE;AAED,wBAAsB,QAAQ,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA4B3D;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAOhD;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAGxD;AAsDD,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAE3D;AAED,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAElE;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQ7D;AA8CD,wBAAgB,eAAe,IAAI,MAAM,CAExC"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/service.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,UAAU;IACvB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,uFAAuF;IACvF,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,iBAAiB,CAAC,EAAE,aAAa,GAAG,eAAe,GAAG,SAAS,CAAC;CACnE;AAmBD,wBAAsB,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAQjE;AAED,wBAAsB,QAAQ,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA4B3D;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAOhD;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAGxD;AAsDD,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAE3D;AAED,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAElE;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQ7D;AA8CD,wBAAgB,eAAe,IAAI,MAAM,CAExC"}

package/dist/cli/auth/service.js

@@ -16,6 +16,7 @@ const AuthConfigSchema = z
     createdAt: z.number(),
     dextoApiKey: z.string().optional(),
     dextoKeyId: z.string().optional(),
+    dextoPlatformUrl: z.string().url().optional(),
     dextoApiKeySource: z.enum(['provisioned', 'user-supplied']).optional(),
 })
     .refine((data) => data.token || data.dextoApiKey, {

package/dist/cli/commands/agents/register.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/agents/register.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOzC,MAAM,WAAW,4BAA4B;IACzC,OAAO,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,qBAAqB,CAAC,EAAE,OAAO,EAAE,EAAE,4BAA4B,GAAG,IAAI,CAmGrF"}
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/agents/register.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOzC,MAAM,WAAW,4BAA4B;IACzC,OAAO,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,qBAAqB,CAAC,EAAE,OAAO,EAAE,EAAE,4BAA4B,GAAG,IAAI,CA+FrF"}

package/dist/cli/commands/agents/register.js

@@ -5,7 +5,6 @@ export function registerAgentsCommand({ program }) {
         .command('install [agents...]')
         .description('Install agents from registry or custom YAML files/directories')
         .option('--all', 'Install all available agents from registry')
-        .option('--no-inject-preferences', 'Skip injecting global preferences into installed agents')
         .option('--force', 'Force reinstall even if agent is already installed')
         .addHelpText('after', `
 Examples:

package/dist/cli/commands/auth/login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/auth/login.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,mBAAmB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAgBD,wBAAsB,kBAAkB,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmEzF;AAGD,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAErD;AAED,wBAAsB,iBAAiB,CAAC,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA4B7F"}
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/auth/login.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,mBAAmB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAgBD,wBAAsB,kBAAkB,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsEzF;AAGD,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAErD;AAED,wBAAsB,iBAAiB,CAAC,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA6B7F"}

package/dist/cli/commands/auth/login.js

@@ -1,7 +1,8 @@
 // packages/cli/src/cli/commands/auth/login.ts
 import chalk from 'chalk';
 import * as p from '@clack/prompts';
-import { getDextoApiClient, isAuthenticated, loadAuth, performDeviceCodeLogin, persistDeviceApiKeyLoginResult, persistOAuthLoginResult, storeAuth, } from '../../auth/index.js';
+import { DEXTO_PLATFORM_URL } from '../../auth/constants.js';
+import { DextoApiClient, getDextoApiClient, isAuthenticated, loadAuth, performDeviceCodeLogin, persistDeviceApiKeyLoginResult, persistOAuthLoginResult, storeAuth, } from '../../auth/index.js';
 function isCancellationError(errorMessage) {
     const lower = errorMessage.toLowerCase();
     return (lower.includes('canceled') ||
@@ -36,7 +37,9 @@ export async function handleLoginCommand(options = {}) {
             }
         }
         if (options.apiKey) {
-            const client = getDextoApiClient();
+            const client = options.platformUrl
+                ? new DextoApiClient(options.platformUrl)
+                : getDextoApiClient();
             const isValid = await client.validateDextoApiKey(options.apiKey);
             if (!isValid) {
                 throw new Error('Invalid API key provided - validation failed');
@@ -44,6 +47,7 @@ export async function handleLoginCommand(options = {}) {
             await storeAuth({
                 dextoApiKey: options.apiKey,
                 dextoApiKeySource: 'user-supplied',
+                dextoPlatformUrl: new URL(options.platformUrl ?? DEXTO_PLATFORM_URL).origin,
                 createdAt: Date.now(),
             });
             console.log(chalk.green('✅ Dexto API key saved'));
@@ -78,8 +82,9 @@ export async function handleAutoLogin() {
 }
 export async function handleDeviceLogin(options = {}) {
     try {
+        const platformUrl = options.platformUrl ?? DEXTO_PLATFORM_URL;
         const result = await performDeviceCodeLogin({
-            ...(options.platformUrl ? { apiUrl: options.platformUrl } : {}),
+            apiUrl: platformUrl,
             onPrompt: (prompt) => {
                 console.log(chalk.cyan('\nUse any browser to complete login:'));
                 if (prompt.verificationUrlComplete) {
@@ -93,7 +98,7 @@ export async function handleDeviceLogin(options = {}) {
                 console.log(chalk.dim(`  • Code expires in ~${Math.ceil(prompt.expiresIn / 60)} min`));
             },
         });
-        const persisted = await persistDeviceApiKeyLoginResult(result);
+        const persisted = await persistDeviceApiKeyLoginResult(result, platformUrl);
         console.log(chalk.dim(`\nSaved Dexto API key ${persisted.keyId ?? ''}`.trim()));
     }
     catch (error) {

package/dist/cli/commands/cloud/discovery.d.ts

@@ -0,0 +1,17 @@
+export type CloudDiscoveryCommand = {
+    command: 'sources';
+} | {
+    command: 'search';
+    query: string;
+} | {
+    command: 'describe';
+    path: string;
+};
+export interface CloudDiscoveryOptions {
+    json?: boolean;
+    limit?: string;
+    offset?: string;
+    platformUrl?: string;
+}
+export declare function runCloudDiscovery(command: CloudDiscoveryCommand, options: CloudDiscoveryOptions): Promise<number>;
+//# sourceMappingURL=discovery.d.ts.map

package/dist/cli/commands/cloud/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/cloud/discovery.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,qBAAqB,GAC3B;IAAE,OAAO,EAAE,SAAS,CAAA;CAAE,GACtB;IAAE,OAAO,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC5C,MAAM,WAAW,qBAAqB;IAClC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAsB,iBAAiB,CACnC,OAAO,EAAE,qBAAqB,EAC9B,OAAO,EAAE,qBAAqB,GAC/B,OAAO,CAAC,MAAM,CAAC,CAyGjB"}

package/dist/cli/commands/cloud/discovery.js

@@ -0,0 +1,88 @@
+import { CloudClientError, createDextoCloudClient } from '@dexto/client-sdk/cloud';
+import { ZodError } from 'zod';
+import { DEFAULT_DEXTO_PLATFORM_URL } from '../../auth/constants.js';
+import { getIncomingEnvironmentVariable } from '../../../utils/env.js';
+import { loadAuth } from '../../auth/service.js';
+export async function runCloudDiscovery(command, options) {
+    try {
+        const environmentToken = getIncomingEnvironmentVariable('DEXTO_API_KEY')?.trim();
+        const environmentOrigin = getIncomingEnvironmentVariable('DEXTO_PLATFORM_URL') || undefined;
+        const requestedOrigin = options.platformUrl ?? environmentOrigin ?? DEFAULT_DEXTO_PLATFORM_URL;
+        const hasOriginOverride = options.platformUrl !== undefined || environmentOrigin !== undefined;
+        const auth = await loadAuth();
+        const savedToken = auth?.dextoApiKey?.trim();
+        const token = environmentToken || savedToken;
+        if (!token)
+            throw new CloudClientError('configuration_error', 'Run dexto login or supply DEXTO_API_KEY to discover Cloud capabilities.');
+        let origin = requestedOrigin;
+        if (savedToken === token) {
+            const credentialOrigin = auth?.dextoPlatformUrl;
+            if (!credentialOrigin) {
+                throw new CloudClientError('configuration_error', 'Saved credential has no platform origin. Run dexto login --platform-url <application-origin> again before discovering Cloud capabilities.');
+            }
+            if (hasOriginOverride && new URL(origin).origin !== new URL(credentialOrigin).origin) {
+                throw new CloudClientError('configuration_error', 'Saved credential belongs to a different platform origin. Login to the requested platform or supply a different DEXTO_API_KEY issued by it.');
+            }
+            origin = credentialOrigin;
+        }
+        const client = createDextoCloudClient({ origin, token, fetch: globalThis.fetch });
+        const pagination = {
+            ...(options.limit === undefined ? {} : { limit: Number(options.limit) }),
+            ...(options.offset === undefined ? {} : { offset: Number(options.offset) }),
+        };
+        switch (command.command) {
+            case 'sources': {
+                const result = await client.sources(pagination);
+                console.log(options.json
+                    ? JSON.stringify(result)
+                    : result.sources
+                        .map((source) => `${source.id}\t${source.title}\t${source.kind}${source.toolCount === undefined ? '' : `\t${source.toolCount} tools`}`)
+                        .join('\n') || 'No capability sources available.');
+                break;
+            }
+            case 'search': {
+                const result = await client.search({ ...pagination, query: command.query });
+                const rows = result.items.map((tool) => `${tool.aliases.join(', ') || tool.name}\t${tool.description}\t${tool.invocable.mode}`);
+                console.log(options.json
+                    ? JSON.stringify(result)
+                    : [
+                        ...rows,
+                        `${result.total} matches${result.nextOffset === null ? '' : `; next page: --offset ${result.nextOffset}`}`,
+                    ].join('\n'));
+                break;
+            }
+            case 'describe': {
+                const result = await client.describe(command.path);
+                console.log(options.json
+                    ? JSON.stringify(result)
+                    : result.found
+                        ? JSON.stringify(result.tool, null, 2)
+                        : `Capability ${result.path} was not found.`);
+                break;
+            }
+        }
+        return 0;
+    }
+    catch (error) {
+        const failure = error instanceof CloudClientError
+            ? {
+                code: error.code,
+                message: error.message,
+                ...(error.status === undefined ? {} : { status: error.status }),
+            }
+            : error instanceof ZodError
+                ? {
+                    code: 'invalid_input',
+                    message: 'Check the query, capability path, and pagination (limit 1–100; offset 0 or greater).',
+                }
+                : {
+                    code: 'cloud_discovery_error',
+                    message: 'Cloud discovery failed. Check the platform origin and credential configuration.',
+                };
+        if (options.json)
+            console.log(JSON.stringify({ error: failure }));
+        else
+            console.error(failure.message);
+        return 1;
+    }
+}

package/dist/cli/commands/cloud/register.d.ts

@@ -0,0 +1,3 @@
+import type { Command } from 'commander';
+export declare function registerCloudCommand(program: Command): void;
+//# sourceMappingURL=register.d.ts.map

package/dist/cli/commands/cloud/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/cloud/register.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAazC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgC3D"}

package/dist/cli/commands/cloud/register.js

@@ -0,0 +1,27 @@
+import { withAnalytics, safeExit } from '../../../analytics/wrapper.js';
+async function discover(command, options) {
+    const { runCloudDiscovery } = await import('./discovery.js');
+    const exitCode = await runCloudDiscovery(command, options);
+    safeExit(`cloud ${command.command}`, exitCode);
+}
+export function registerCloudCommand(program) {
+    const cloud = program.command('cloud').description('Discover Dexto Cloud capabilities');
+    const sources = cloud.command('sources').description('List available capability sources');
+    const search = cloud.command('search <query>').description('Find capabilities by name or task');
+    const describe = cloud
+        .command('describe <path>')
+        .description('Show capability schemas and availability');
+    for (const command of [sources, search, describe]) {
+        command
+            .option('--json', 'Emit machine-readable JSON')
+            .option('--platform-url <origin>', 'Use a Cloud application origin');
+    }
+    for (const command of [sources, search]) {
+        command
+            .option('--limit <count>', 'Page size (1–100; default 20)')
+            .option('--offset <count>', 'Page offset (default 0)');
+    }
+    sources.action(withAnalytics('cloud sources', (options) => discover({ command: 'sources' }, options)));
+    search.action(withAnalytics('cloud search', (query, options) => discover({ command: 'search', query }, options)));
+    describe.action(withAnalytics('cloud describe', (path, options) => discover({ command: 'describe', path }, options)));
+}

package/dist/cli/commands/mcp/register.d.ts

@@ -1,4 +1,4 @@
-import type { Command } from 'commander';
+import { type Command } from 'commander';
 export interface McpCommandRegisterContext {
     program: Command;
 }

package/dist/cli/commands/mcp/register.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/mcp/register.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGzC,MAAM,WAAW,yBAAyB;IACtC,OAAO,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,kBAAkB,CAAC,EAAE,OAAO,EAAE,EAAE,yBAAyB,GAAG,IAAI,CA+G/E"}
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/mcp/register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,OAAO,EAAE,MAAM,WAAW,CAAC;AAOjD,MAAM,WAAW,yBAAyB;IACtC,OAAO,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,kBAAkB,CAAC,EAAE,OAAO,EAAE,EAAE,yBAAyB,GAAG,IAAI,CAmZ/E"}