dexto 1.14.4 → 2.0.0-beta.0

package/dist/cli/auth/dexto-api-key.d.ts

@@ -1,34 +0,0 @@
-export type DextoApiKeyProvisionStatusLevel = 'info' | 'success' | 'warning' | 'error';
-export interface DextoApiKeyProvisionStatus {
-    level: DextoApiKeyProvisionStatusLevel;
-    message: string;
-}
-export interface EnsureDextoApiKeyOptions {
-    onStatus?: ((status: DextoApiKeyProvisionStatus) => void) | undefined;
-}
-/**
- * Save DEXTO_API_KEY to the resolved dexto .env path and populate the current
- * process environment immediately.
- */
-export declare function saveDextoApiKeyToEnv(apiKey: string): Promise<void>;
-export declare function removeDextoApiKeyFromEnv(options?: {
-    expectedValue?: string;
-}): Promise<{
-    removed: boolean;
-    targetEnvPath: string;
-}>;
-/**
- * Ensure a Dexto API key exists locally for the current auth session.
- *
- * - If a local key exists and validates, it is re-saved to .env (sync) and returned.
- * - If a local key exists but is invalid, it is rotated (regenerated) and returned.
- * - If no local key exists, a managed key is provisioned. If a same-name managed key
- *   already exists server-side, provisioning rotates it to obtain a fresh secret value.
- *
- * Returns `null` if provisioning fails (OAuth login can still succeed without it).
- */
-export declare function ensureDextoApiKeyForAuthToken(authToken: string, options?: EnsureDextoApiKeyOptions): Promise<{
-    dextoApiKey: string;
-    keyId: string | null;
-} | null>;
-//# sourceMappingURL=dexto-api-key.d.ts.map

package/dist/cli/auth/dexto-api-key.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"dexto-api-key.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/dexto-api-key.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,+BAA+B,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAEvF,MAAM,WAAW,0BAA0B;IACvC,KAAK,EAAE,+BAA+B,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACrC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,0BAA0B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CACzE;AAaD;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BxE;AAED,wBAAsB,wBAAwB,CAAC,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC;IAC9F,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACzB,CAAC,CAsDD;AAED;;;;;;;;;GASG;AACH,wBAAsB,6BAA6B,CAC/C,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,wBAA6B,GACvC,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAAC,CA+D/D"}

package/dist/cli/auth/dexto-api-key.js

@@ -1,160 +0,0 @@
-import fs from 'node:fs/promises';
-import path from 'node:path';
-import { ensureDextoGlobalDirectory, getDextoEnvPath, logger } from '@dexto/core';
-import { getDextoApiClient } from './api-client.js';
-import { loadAuth, storeAuth } from './service.js';
-import { DEXTO_PLATFORM_URL } from './constants.js';
-async function ensureOwnerOnlyPermissions(filePath) {
-    try {
-        await fs.chmod(filePath, 0o600);
-    }
-    catch (error) {
-        logger.warn('Failed to set permissions on env file', {
-            filePath,
-            error: error instanceof Error ? error.message : String(error),
-        });
-    }
-}
-/**
- * Save DEXTO_API_KEY to the resolved dexto .env path and populate the current
- * process environment immediately.
- */
-export async function saveDextoApiKeyToEnv(apiKey) {
-    const envVar = 'DEXTO_API_KEY';
-    const targetEnvPath = getDextoEnvPath();
-    await ensureDextoGlobalDirectory();
-    await fs.mkdir(path.dirname(targetEnvPath), { recursive: true });
-    let envContent = '';
-    try {
-        envContent = await fs.readFile(targetEnvPath, 'utf-8');
-    }
-    catch {
-        // File doesn't exist, start fresh
-    }
-    const lines = envContent.split('\n');
-    const keyPattern = new RegExp(`^${envVar}=`);
-    const keyIndex = lines.findIndex((line) => keyPattern.test(line));
-    if (keyIndex >= 0) {
-        lines[keyIndex] = `${envVar}=${apiKey}`;
-    }
-    else {
-        lines.push(`${envVar}=${apiKey}`);
-    }
-    const nextContent = lines.filter(Boolean).join('\n') + '\n';
-    await fs.writeFile(targetEnvPath, nextContent, { encoding: 'utf-8', mode: 0o600 });
-    await ensureOwnerOnlyPermissions(targetEnvPath);
-    process.env[envVar] = apiKey;
-}
-export async function removeDextoApiKeyFromEnv(options = {}) {
-    const envVar = 'DEXTO_API_KEY';
-    const targetEnvPath = getDextoEnvPath();
-    const clearProcessEnv = () => {
-        const currentValue = process.env[envVar];
-        if (!currentValue)
-            return;
-        if (!options.expectedValue || currentValue === options.expectedValue) {
-            delete process.env[envVar];
-        }
-    };
-    let envContent = '';
-    try {
-        envContent = await fs.readFile(targetEnvPath, 'utf-8');
-    }
-    catch {
-        clearProcessEnv();
-        return { removed: false, targetEnvPath };
-    }
-    const lines = envContent.split('\n');
-    const keyPattern = new RegExp(`^${envVar}=(.*)$`);
-    const keyLineIndex = lines.findIndex((line) => keyPattern.test(line));
-    if (keyLineIndex < 0) {
-        clearProcessEnv();
-        return { removed: false, targetEnvPath };
-    }
-    if (options.expectedValue) {
-        const match = lines[keyLineIndex]?.match(keyPattern);
-        const currentValue = match?.[1] ?? '';
-        if (currentValue !== options.expectedValue) {
-            clearProcessEnv();
-            return { removed: false, targetEnvPath };
-        }
-    }
-    lines.splice(keyLineIndex, 1);
-    const nextLines = lines.filter(Boolean);
-    const nextContent = nextLines.length ? nextLines.join('\n') + '\n' : '';
-    try {
-        await fs.writeFile(targetEnvPath, nextContent, { encoding: 'utf-8', mode: 0o600 });
-        await ensureOwnerOnlyPermissions(targetEnvPath);
-    }
-    catch (error) {
-        clearProcessEnv();
-        throw new Error(`Failed to remove ${envVar} from ${targetEnvPath}: ${error instanceof Error ? error.message : String(error)}`);
-    }
-    clearProcessEnv();
-    return { removed: true, targetEnvPath };
-}
-/**
- * Ensure a Dexto API key exists locally for the current auth session.
- *
- * - If a local key exists and validates, it is re-saved to .env (sync) and returned.
- * - If a local key exists but is invalid, it is rotated (regenerated) and returned.
- * - If no local key exists, a managed key is provisioned. If a same-name managed key
- *   already exists server-side, provisioning rotates it to obtain a fresh secret value.
- *
- * Returns `null` if provisioning fails (OAuth login can still succeed without it).
- */
-export async function ensureDextoApiKeyForAuthToken(authToken, options = {}) {
-    const status = (level, message) => options.onStatus?.({ level, message });
-    try {
-        const apiClient = getDextoApiClient();
-        const auth = await loadAuth();
-        if (!auth) {
-            throw new Error('Authentication state not found');
-        }
-        if (auth.dextoApiKey) {
-            status('info', 'Validating existing API key...');
-            const isValid = await apiClient.validateDextoApiKey(auth.dextoApiKey);
-            if (isValid) {
-                status('success', 'Existing key is valid');
-                if (!auth.dextoApiKeySource && auth.dextoKeyId) {
-                    await storeAuth({
-                        ...auth,
-                        dextoApiKeySource: 'provisioned',
-                    });
-                }
-                await saveDextoApiKeyToEnv(auth.dextoApiKey);
-                return { dextoApiKey: auth.dextoApiKey, keyId: auth.dextoKeyId ?? null };
-            }
-            status('warning', 'Existing key is invalid, rotating...');
-            const rotated = await apiClient.provisionDextoApiKey(authToken, 'Dexto CLI Key', true);
-            await storeAuth({
-                ...auth,
-                dextoApiKey: rotated.dextoApiKey,
-                dextoKeyId: rotated.keyId,
-                dextoApiKeySource: 'provisioned',
-                dextoPlatformUrl: new URL(DEXTO_PLATFORM_URL).origin,
-            });
-            await saveDextoApiKeyToEnv(rotated.dextoApiKey);
-            status('success', 'New key provisioned');
-            return { dextoApiKey: rotated.dextoApiKey, keyId: rotated.keyId };
-        }
-        status('info', 'Provisioning Dexto API key...');
-        const provisioned = await apiClient.provisionDextoApiKey(authToken);
-        await storeAuth({
-            ...auth,
-            dextoApiKey: provisioned.dextoApiKey,
-            dextoKeyId: provisioned.keyId,
-            dextoApiKeySource: 'provisioned',
-            dextoPlatformUrl: new URL(DEXTO_PLATFORM_URL).origin,
-        });
-        await saveDextoApiKeyToEnv(provisioned.dextoApiKey);
-        status('success', 'Dexto API key provisioned');
-        return { dextoApiKey: provisioned.dextoApiKey, keyId: provisioned.keyId };
-    }
-    catch (error) {
-        const errorMessage = error instanceof Error ? error.message : String(error);
-        logger.warn('Failed to ensure DEXTO_API_KEY', { error: errorMessage });
-        status('error', `Failed to provision Dexto API key: ${errorMessage}`);
-        return null;
-    }
-}

package/dist/cli/auth/login-persistence.d.ts

@@ -1,15 +0,0 @@
-import { type DextoApiKeyProvisionStatus } from './dexto-api-key.js';
-import type { OAuthResult } from './oauth.js';
-import type { DeviceApiKeyLoginResult } from './types.js';
-export interface PersistOAuthLoginOptions {
-    onProvisionStatus?: ((status: DextoApiKeyProvisionStatus) => void) | undefined;
-}
-export interface PersistedLoginResult {
-    email?: string | undefined;
-    userId?: string | undefined;
-    keyId?: string | undefined;
-    hasDextoApiKey: boolean;
-}
-export declare function persistOAuthLoginResult(result: OAuthResult, options?: PersistOAuthLoginOptions): Promise<PersistedLoginResult>;
-export declare function persistDeviceApiKeyLoginResult(result: DeviceApiKeyLoginResult, platformUrl?: string): Promise<PersistedLoginResult>;
-//# sourceMappingURL=login-persistence.d.ts.map

package/dist/cli/auth/login-persistence.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"login-persistence.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/login-persistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,0BAA0B,EAAiC,MAAM,oBAAoB,CAAC;AACpG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAG1D,MAAM,WAAW,wBAAwB;IACrC,iBAAiB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,0BAA0B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAClF;AAED,MAAM,WAAW,oBAAoB;IACjC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;CAC3B;AAoDD,wBAAsB,uBAAuB,CACzC,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,wBAA6B,GACvC,OAAO,CAAC,oBAAoB,CAAC,CAyB/B;AAED,wBAAsB,8BAA8B,CAChD,MAAM,EAAE,uBAAuB,EAC/B,WAAW,GAAE,MAA2B,GACzC,OAAO,CAAC,oBAAoB,CAAC,CAa/B"}

package/dist/cli/auth/login-persistence.js

@@ -1,72 +0,0 @@
-import { ensureDextoApiKeyForAuthToken } from './dexto-api-key.js';
-import { loadAuth, storeAuth } from './service.js';
-import { DEXTO_PLATFORM_URL } from './constants.js';
-function isSameAuthenticatedUser(existingAuth, user) {
-    if (!existingAuth || !user) {
-        return false;
-    }
-    if (existingAuth.userId && user.id) {
-        return existingAuth.userId === user.id;
-    }
-    if (existingAuth.email && user.email) {
-        return existingAuth.email.toLowerCase() === user.email.toLowerCase();
-    }
-    return false;
-}
-function getPreservedDextoApiKey(existingAuth, user) {
-    if (!existingAuth?.dextoApiKey || !isSameAuthenticatedUser(existingAuth, user)) {
-        return null;
-    }
-    const keyOrigin = existingAuth.dextoPlatformUrl ?? 'https://app.dexto.ai';
-    if (new URL(keyOrigin).origin !== new URL(DEXTO_PLATFORM_URL).origin)
-        return null;
-    const isProvisionedKey = existingAuth.dextoApiKeySource === 'provisioned' ||
-        (existingAuth.dextoApiKeySource === undefined && Boolean(existingAuth.dextoKeyId));
-    if (!isProvisionedKey) {
-        return null;
-    }
-    return {
-        dextoApiKey: existingAuth.dextoApiKey,
-        ...(existingAuth.dextoKeyId ? { dextoKeyId: existingAuth.dextoKeyId } : {}),
-        dextoApiKeySource: 'provisioned',
-        ...(existingAuth.dextoPlatformUrl
-            ? { dextoPlatformUrl: existingAuth.dextoPlatformUrl }
-            : {}),
-    };
-}
-export async function persistOAuthLoginResult(result, options = {}) {
-    const existingAuth = await loadAuth();
-    const expiresAt = result.expiresIn ? Date.now() + result.expiresIn * 1000 : undefined;
-    const preservedDextoApiKey = getPreservedDextoApiKey(existingAuth, result.user);
-    await storeAuth({
-        token: result.accessToken,
-        refreshToken: result.refreshToken,
-        userId: result.user?.id,
-        email: result.user?.email,
-        createdAt: Date.now(),
-        expiresAt,
-        ...(preservedDextoApiKey ?? {}),
-    });
-    const ensured = await ensureDextoApiKeyForAuthToken(result.accessToken, {
-        onStatus: options.onProvisionStatus,
-    });
-    return {
-        email: result.user?.email,
-        userId: result.user?.id,
-        keyId: ensured?.keyId ?? preservedDextoApiKey?.dextoKeyId ?? undefined,
-        hasDextoApiKey: Boolean(ensured?.dextoApiKey ?? preservedDextoApiKey?.dextoApiKey),
-    };
-}
-export async function persistDeviceApiKeyLoginResult(result, platformUrl = DEXTO_PLATFORM_URL) {
-    await storeAuth({
-        dextoApiKey: result.dextoApiKey,
-        dextoKeyId: result.dextoKeyId,
-        dextoApiKeySource: 'provisioned',
-        dextoPlatformUrl: new URL(platformUrl).origin,
-        createdAt: Date.now(),
-    });
-    return {
-        keyId: result.dextoKeyId,
-        hasDextoApiKey: true,
-    };
-}

package/dist/cli/auth/oauth.d.ts

@@ -1,39 +0,0 @@
-interface OAuthConfig {
-    authUrl: string;
-    clientId: string;
-    provider?: string;
-    scopes?: string[];
-}
-export interface OAuthResult {
-    accessToken: string;
-    refreshToken?: string | undefined;
-    expiresIn?: number | undefined;
-    user?: {
-        id: string;
-        email: string;
-        name?: string | undefined;
-    } | undefined;
-}
-interface CallbackServerOptionsInput {
-    timeoutMs?: number | undefined;
-    signal?: AbortSignal | undefined;
-}
-export interface OAuthLoginSession {
-    authUrl: string;
-    result: Promise<OAuthResult>;
-    cancel: () => void;
-}
-export interface PerformOAuthLoginOptions {
-    failOnBrowserOpenError?: boolean | undefined;
-}
-export declare function beginOAuthLogin(config: OAuthConfig, options?: CallbackServerOptionsInput): Promise<OAuthLoginSession>;
-/**
- * Perform OAuth login flow with Supabase
- */
-export declare function performOAuthLogin(config: OAuthConfig, options?: PerformOAuthLoginOptions): Promise<OAuthResult>;
-/**
- * Default Supabase OAuth configuration for Dexto CLI
- */
-export declare const DEFAULT_OAUTH_CONFIG: OAuthConfig;
-export {};
-//# sourceMappingURL=oauth.d.ts.map

package/dist/cli/auth/oauth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/oauth.ts"],"names":[],"mappings":"AA8EA,UAAU,WAAW;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,IAAI,CAAC,EACC;QACI,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KAC7B,GACD,SAAS,CAAC;CACnB;AA4BD,UAAU,0BAA0B;IAChC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACpC;AAqSD,MAAM,WAAW,iBAAiB;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7B,MAAM,EAAE,MAAM,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACrC,sBAAsB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAChD;AAED,wBAAsB,eAAe,CACjC,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,0BAA+B,GACzC,OAAO,CAAC,iBAAiB,CAAC,CAyC5B;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACnC,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,wBAA6B,GACvC,OAAO,CAAC,WAAW,CAAC,CAoCtB;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAKlC,CAAC"}