dexto 1.14.6 → 2.0.0-beta.1

package/dist/cli/auth/api-client.js

@@ -1,585 +0,0 @@
-// packages/cli/src/cli/auth/api-client.ts
-// Dexto API client for auth/key/account APIs
-// TODO: Migrate to typed client for type safety and better DX
-// Options:
-// 1. Migrate dexto-web APIs to Hono and use @hono/client (like packages/server)
-// 2. Use openapi-fetch with generated types from OpenAPI spec
-// 3. Use tRPC if we want full-stack type safety
-// Currently using plain fetch() with runtime response validation.
-import { logger } from '@dexto/core';
-import { DEXTO_PLATFORM_URL, DEXTO_PUBLIC_API_URL, SUPABASE_ANON_KEY, SUPABASE_URL, } from './constants.js';
-function parseString(value) {
-    return typeof value === 'string' && value.trim().length > 0 ? value : null;
-}
-function parseNumber(value) {
-    if (typeof value === 'number' && Number.isFinite(value)) {
-        return value;
-    }
-    if (typeof value === 'string') {
-        const parsed = Number.parseFloat(value);
-        if (Number.isFinite(parsed)) {
-            return parsed;
-        }
-    }
-    return null;
-}
-function parseDeviceCodeStartResponse(payload) {
-    if (typeof payload !== 'object' || payload === null) {
-        throw new Error('Invalid device start response');
-    }
-    const deviceCode = parseString(Reflect.get(payload, 'deviceCode'));
-    const userCode = parseString(Reflect.get(payload, 'userCode'));
-    const verificationUrl = parseString(Reflect.get(payload, 'verificationUri'));
-    const verificationUrlComplete = parseString(Reflect.get(payload, 'verificationUriComplete'));
-    const expiresIn = parseNumber(Reflect.get(payload, 'expiresIn'));
-    const interval = parseNumber(Reflect.get(payload, 'interval'));
-    if (!deviceCode || !userCode || !verificationUrl || !expiresIn || !interval) {
-        throw new Error('Device start response missing required fields');
-    }
-    return {
-        deviceCode,
-        userCode,
-        verificationUrl,
-        verificationUrlComplete,
-        expiresIn,
-        interval,
-    };
-}
-function parseStringArray(value) {
-    if (!Array.isArray(value)) {
-        return null;
-    }
-    const strings = value.filter((item) => typeof item === 'string');
-    return strings.length === value.length ? strings : null;
-}
-function parseDeviceCodeApiKeyResponse(payload) {
-    if (typeof payload !== 'object' || payload === null) {
-        return null;
-    }
-    const status = parseString(Reflect.get(payload, 'status'));
-    if (status !== 'approved') {
-        return null;
-    }
-    const fullKey = parseString(Reflect.get(payload, 'fullKey'));
-    const apiKey = Reflect.get(payload, 'apiKey');
-    if (!fullKey || typeof apiKey !== 'object' || apiKey === null) {
-        throw new Error('Device login approved response missing API key fields');
-    }
-    const id = parseString(Reflect.get(apiKey, 'id'));
-    const keyDisplay = parseString(Reflect.get(apiKey, 'keyDisplay'));
-    const name = parseString(Reflect.get(apiKey, 'name'));
-    const scopes = parseStringArray(Reflect.get(apiKey, 'scopes'));
-    const keyStatus = parseString(Reflect.get(apiKey, 'status'));
-    if (!id || !keyDisplay || !name || !scopes || !keyStatus) {
-        throw new Error('Device login approved response missing API key fields');
-    }
-    return {
-        id,
-        keyDisplay,
-        name,
-        scopes,
-        status: keyStatus,
-        fullKey,
-    };
-}
-function parseDeviceErrorCode(payload) {
-    if (typeof payload !== 'object' || payload === null) {
-        return null;
-    }
-    return parseString(Reflect.get(payload, 'error'));
-}
-function parseSupabaseUser(payload) {
-    if (typeof payload !== 'object' || payload === null) {
-        return null;
-    }
-    const id = parseString(Reflect.get(payload, 'id'));
-    const email = parseString(Reflect.get(payload, 'email'));
-    if (!id || !email) {
-        return null;
-    }
-    const userMetadata = Reflect.get(payload, 'user_metadata');
-    const fullName = typeof userMetadata === 'object' && userMetadata !== null
-        ? parseString(Reflect.get(userMetadata, 'full_name'))
-        : null;
-    return {
-        id,
-        email,
-        name: fullName ?? email,
-    };
-}
-function parseRecentUsage(payload) {
-    if (!Array.isArray(payload)) {
-        throw new Error('Invalid response from API');
-    }
-    const entries = [];
-    for (const entry of payload) {
-        if (typeof entry !== 'object' || entry === null) {
-            throw new Error('Invalid response from API');
-        }
-        const timestamp = parseString(Reflect.get(entry, 'timestamp'));
-        const model = parseString(Reflect.get(entry, 'model'));
-        const costUsd = parseNumber(Reflect.get(entry, 'cost_usd'));
-        const inputTokens = parseNumber(Reflect.get(entry, 'input_tokens'));
-        const outputTokens = parseNumber(Reflect.get(entry, 'output_tokens'));
-        if (!timestamp ||
-            !model ||
-            costUsd === null ||
-            inputTokens === null ||
-            outputTokens === null) {
-            throw new Error('Invalid response from API');
-        }
-        entries.push({
-            timestamp,
-            model,
-            cost_usd: costUsd,
-            input_tokens: inputTokens,
-            output_tokens: outputTokens,
-        });
-    }
-    return entries;
-}
-function parseUsageSummaryResponse(payload) {
-    if (typeof payload !== 'object' || payload === null) {
-        throw new Error('Invalid response from API');
-    }
-    const balanceUsd = parseNumber(Reflect.get(payload, 'balance_usd'));
-    const last30Days = Reflect.get(payload, 'last_30_days');
-    if (balanceUsd === null || typeof last30Days !== 'object' || last30Days === null) {
-        throw new Error('Invalid response from API');
-    }
-    const since = parseString(Reflect.get(last30Days, 'since'));
-    const totalCostUsd = parseNumber(Reflect.get(last30Days, 'total_cost_usd'));
-    const totalUsageEvents = parseNumber(Reflect.get(last30Days, 'total_usage_events'));
-    if (!since || totalCostUsd === null || totalUsageEvents === null) {
-        throw new Error('Invalid response from API');
-    }
-    const recent = parseRecentUsage(Reflect.get(payload, 'recent_model_usage'));
-    return {
-        balance_usd: balanceUsd,
-        last_30_days: {
-            since,
-            total_cost_usd: totalCostUsd,
-            total_usage_events: totalUsageEvents,
-        },
-        recent_model_usage: recent,
-    };
-}
-function parseBillingBalanceResponse(payload) {
-    if (typeof payload !== 'object' || payload === null) {
-        throw new Error('Invalid response from API');
-    }
-    const creditsUsd = parseNumber(Reflect.get(payload, 'credits_usd')) ??
-        parseNumber(Reflect.get(payload, 'creditsUsd'));
-    if (creditsUsd === null) {
-        throw new Error('Invalid response from API');
-    }
-    return { creditsUsd };
-}
-function parseBillingCheckoutSessionResponse(payload) {
-    if (typeof payload !== 'object' || payload === null) {
-        throw new Error('Invalid response from API');
-    }
-    const checkoutUrl = parseString(Reflect.get(payload, 'checkout_url')) ??
-        parseString(Reflect.get(payload, 'checkoutUrl'));
-    const checkoutSessionId = parseString(Reflect.get(payload, 'checkout_session_id')) ??
-        parseString(Reflect.get(payload, 'checkoutSessionId'));
-    if (!checkoutUrl || !checkoutSessionId) {
-        throw new Error('Invalid response from API');
-    }
-    return {
-        checkoutUrl,
-        checkoutSessionId,
-    };
-}
-function parsePlatformKeyListResponse(payload) {
-    if (typeof payload !== 'object' || payload === null) {
-        throw new Error('Invalid response from API');
-    }
-    const data = Reflect.get(payload, 'apiKeys');
-    if (!Array.isArray(data)) {
-        throw new Error('Invalid response from API');
-    }
-    const keys = [];
-    for (const entry of data) {
-        if (typeof entry !== 'object' || entry === null) {
-            continue;
-        }
-        const id = parseString(Reflect.get(entry, 'id'));
-        const name = parseString(Reflect.get(entry, 'name'));
-        const status = parseString(Reflect.get(entry, 'status'));
-        if (!id || !name || !status) {
-            continue;
-        }
-        keys.push({ id, name, status });
-    }
-    return { apiKeys: keys };
-}
-function parsePlatformCreateKeyResponse(payload) {
-    if (typeof payload !== 'object' || payload === null) {
-        throw new Error('Invalid response from API');
-    }
-    const data = Reflect.get(payload, 'apiKey');
-    if (typeof data !== 'object' || data === null) {
-        throw new Error('Invalid response from API');
-    }
-    const id = parseString(Reflect.get(data, 'id'));
-    const fullKey = parseString(Reflect.get(payload, 'fullKey'));
-    if (!id || !fullKey) {
-        throw new Error('Invalid response from API');
-    }
-    return {
-        apiKey: { id },
-        fullKey,
-    };
-}
-function formatHttpFailure(status, payload, rawText) {
-    if (rawText.trim().length > 0) {
-        return `${status} ${rawText}`;
-    }
-    if (payload != null) {
-        return `${status} ${JSON.stringify(payload)}`;
-    }
-    return `${status}`;
-}
-function normalizePublicApiBaseUrl(value) {
-    const normalized = value.replace(/\/+$/, '');
-    const url = new URL(normalized);
-    const isLoopback = ['localhost', '127.0.0.1', '[::1]'].includes(url.hostname);
-    if (url.protocol !== 'https:' && !(url.protocol === 'http:' && isLoopback)) {
-        throw new Error('publicApiBaseUrl must use HTTPS unless it targets a loopback host');
-    }
-    return normalized;
-}
-/**
- * Dexto API client for key management
- */
-export class DextoApiClient {
-    platformBaseUrl;
-    publicApiBaseUrl;
-    timeoutMs = 10_000;
-    constructor(baseUrl = {}) {
-        if (typeof baseUrl === 'string') {
-            const normalized = baseUrl.replace(/\/+$/, '');
-            this.platformBaseUrl = normalized;
-            this.publicApiBaseUrl = normalizePublicApiBaseUrl(normalized);
-            return;
-        }
-        this.platformBaseUrl = (baseUrl.platformBaseUrl ??
-            baseUrl.gatewayBaseUrl ??
-            DEXTO_PLATFORM_URL).replace(/\/+$/, '');
-        this.publicApiBaseUrl = normalizePublicApiBaseUrl(baseUrl.publicApiBaseUrl ?? DEXTO_PUBLIC_API_URL);
-    }
-    createRequestSignal(signal) {
-        const timeoutSignal = AbortSignal.timeout(this.timeoutMs);
-        if (!signal) {
-            return timeoutSignal;
-        }
-        return AbortSignal.any([signal, timeoutSignal]);
-    }
-    getPlatformUrl(path) {
-        return `${this.platformBaseUrl}${path}`;
-    }
-    getPublicApiUrl(path) {
-        return `${this.publicApiBaseUrl}${path}`;
-    }
-    async listPlatformApiKeys(authToken) {
-        const response = await fetch(this.getPlatformUrl('/api/api-keys'), {
-            method: 'GET',
-            headers: {
-                Authorization: `Bearer ${authToken}`,
-            },
-            signal: this.createRequestSignal(undefined),
-        });
-        if (!response.ok) {
-            const rawText = await response.text();
-            throw new Error(`API request failed: ${formatHttpFailure(response.status, null, rawText)}`);
-        }
-        const payload = await response.json();
-        return parsePlatformKeyListResponse(payload).apiKeys;
-    }
-    async createPlatformApiKey(authToken, name) {
-        const response = await fetch(this.getPlatformUrl('/api/api-keys'), {
-            method: 'POST',
-            headers: {
-                Authorization: `Bearer ${authToken}`,
-                'Content-Type': 'application/json',
-            },
-            body: JSON.stringify({ name }),
-            signal: this.createRequestSignal(undefined),
-        });
-        if (!response.ok) {
-            const rawText = await response.text();
-            throw new Error(`API request failed: ${formatHttpFailure(response.status, null, rawText)}`);
-        }
-        const payload = await response.json();
-        const result = parsePlatformCreateKeyResponse(payload);
-        return {
-            dextoApiKey: result.fullKey,
-            keyId: result.apiKey.id,
-        };
-    }
-    async deletePlatformApiKey(authToken, keyId) {
-        const response = await fetch(this.getPlatformUrl(`/api/api-keys/${encodeURIComponent(keyId)}`), {
-            method: 'DELETE',
-            headers: {
-                Authorization: `Bearer ${authToken}`,
-            },
-            signal: this.createRequestSignal(undefined),
-        });
-        if (!response.ok) {
-            const rawText = await response.text();
-            throw new Error(`API request failed: ${formatHttpFailure(response.status, null, rawText)}`);
-        }
-    }
-    /**
-     * Validate if a Dexto API key is valid
-     */
-    async validateDextoApiKey(apiKey) {
-        logger.debug('Validating DEXTO_API_KEY');
-        const response = await fetch(this.getPublicApiUrl('/v1/models'), {
-            method: 'GET',
-            headers: {
-                Authorization: `Bearer ${apiKey}`,
-            },
-            signal: this.createRequestSignal(undefined),
-        });
-        if (response.status === 401) {
-            return false;
-        }
-        if (!response.ok) {
-            throw new Error(`Unable to validate Dexto API key: HTTP ${response.status}`);
-        }
-        return true;
-    }
-    /**
-     * Provision Dexto API key and always return a usable secret key value.
-     * @param regenerate - If true, delete existing key(s) and create a new one
-     */
-    async provisionDextoApiKey(authToken, name = 'Dexto CLI Key', regenerate = false) {
-        try {
-            logger.debug(`Provisioning DEXTO_API_KEY with name: ${name}, regenerate: ${regenerate}`);
-            const matchingKeys = (await this.listPlatformApiKeys(authToken)).filter((key) => key.status === 'active' && key.name === name);
-            if (matchingKeys.length > 0) {
-                if (!regenerate) {
-                    logger.debug(`Active key exists (${matchingKeys[0]?.id ?? 'unknown'}); rotating to obtain key value`);
-                }
-                for (const key of matchingKeys) {
-                    await this.deletePlatformApiKey(authToken, key.id);
-                }
-            }
-            const createdKey = await this.createPlatformApiKey(authToken, name);
-            logger.debug(`Successfully provisioned DEXTO_API_KEY: ${createdKey.keyId}`);
-            return {
-                dextoApiKey: createdKey.dextoApiKey,
-                keyId: createdKey.keyId,
-            };
-        }
-        catch (error) {
-            logger.error(`Error provisioning Dexto API key: ${error}`);
-            throw error;
-        }
-    }
-    /**
-     * Get usage summary (balance + last 30 days + recent model activity)
-     */
-    async getUsageSummary(apiKey) {
-        try {
-            logger.debug('Fetching usage summary');
-            const response = await fetch(this.getPublicApiUrl('/v1/billing/summary'), {
-                method: 'GET',
-                headers: {
-                    Authorization: `Bearer ${apiKey}`,
-                },
-                signal: this.createRequestSignal(undefined),
-            });
-            if (!response.ok) {
-                const rawText = await response.text();
-                throw new Error(`API request failed: ${formatHttpFailure(response.status, null, rawText)}`);
-            }
-            const payload = await response.json();
-            return parseUsageSummaryResponse(payload);
-        }
-        catch (error) {
-            logger.error(`Error fetching usage summary: ${error}`);
-            throw error;
-        }
-    }
-    /**
-     * Get the current Dexto billing balance for the authenticated user.
-     */
-    async getBillingBalance(authToken, options) {
-        try {
-            logger.debug('Fetching billing balance');
-            const response = await fetch(this.getPlatformUrl('/api/billing/balance'), {
-                method: 'GET',
-                headers: {
-                    Authorization: `Bearer ${authToken}`,
-                },
-                signal: this.createRequestSignal(options.signal),
-            });
-            if (!response.ok) {
-                const rawText = await response.text();
-                throw new Error(`API request failed: ${formatHttpFailure(response.status, null, rawText)}`);
-            }
-            const payload = await response.json();
-            return parseBillingBalanceResponse(payload);
-        }
-        catch (error) {
-            logger.error('Error fetching billing balance', {
-                error: error instanceof Error ? error.message : String(error),
-            });
-            throw error;
-        }
-    }
-    /**
-     * Create a hosted top-up checkout session for the authenticated user.
-     */
-    async createBillingCheckoutSession(authToken, options) {
-        try {
-            if (!Number.isFinite(options.creditsUsd) || options.creditsUsd <= 0) {
-                throw new Error('creditsUsd must be a positive number');
-            }
-            logger.debug('Creating billing checkout session', {
-                creditsUsd: options.creditsUsd,
-            });
-            const response = await fetch(this.getPlatformUrl('/api/billing/checkout-session'), {
-                method: 'POST',
-                headers: {
-                    Authorization: `Bearer ${authToken}`,
-                    'Content-Type': 'application/json',
-                },
-                body: JSON.stringify({
-                    credits_usd: options.creditsUsd,
-                    ...(options.returnUrl ? { return_url: options.returnUrl } : {}),
-                }),
-                signal: this.createRequestSignal(options.signal),
-            });
-            if (!response.ok) {
-                const rawText = await response.text();
-                throw new Error(`API request failed: ${formatHttpFailure(response.status, null, rawText)}`);
-            }
-            const payload = await response.json();
-            return parseBillingCheckoutSessionResponse(payload);
-        }
-        catch (error) {
-            logger.error('Error creating billing checkout session', {
-                error: error instanceof Error ? error.message : String(error),
-                creditsUsd: options.creditsUsd,
-            });
-            throw error;
-        }
-    }
-    /**
-     * Start device code login at the platform.
-     */
-    async startDeviceCodeLogin(client = 'dexto-cli', options = {}) {
-        const response = await fetch(this.getPlatformUrl('/api/auth/device/start'), {
-            method: 'POST',
-            headers: {
-                'Content-Type': 'application/json',
-            },
-            body: JSON.stringify({ clientId: client }),
-            signal: this.createRequestSignal(options.signal),
-        });
-        if (!response.ok) {
-            if (response.status === 404 || response.status === 403) {
-                throw new Error('Device code login is not enabled for this Dexto server');
-            }
-            const rawText = await response.text();
-            throw new Error(`Device code login failed to start: ${formatHttpFailure(response.status, null, rawText)}`);
-        }
-        const payload = await response.json();
-        return parseDeviceCodeStartResponse(payload);
-    }
-    /**
-     * Poll the platform for device-code login completion.
-     */
-    async pollDeviceCodeLogin(deviceCode, options = {}) {
-        let response;
-        try {
-            response = await fetch(this.getPlatformUrl('/api/auth/device/poll'), {
-                method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json',
-                },
-                body: JSON.stringify({ deviceCode }),
-                signal: this.createRequestSignal(options.signal),
-            });
-        }
-        catch (error) {
-            if (options.signal?.aborted) {
-                throw options.signal.reason instanceof Error
-                    ? options.signal.reason
-                    : new Error('Authentication cancelled');
-            }
-            logger.debug(`Device login poll request failed transiently: ${error instanceof Error ? error.message : String(error)}`);
-            return { status: 'transientError' };
-        }
-        const payload = await response.json().catch(() => null);
-        if (!response.ok) {
-            if (response.status === 404 || response.status === 403) {
-                throw new Error('Device code login is not enabled for this Dexto server');
-            }
-            if (response.status === 429) {
-                return { status: 'slowDown' };
-            }
-            if (response.status >= 500) {
-                return { status: 'transientError' };
-            }
-            const errorCode = parseDeviceErrorCode(payload);
-            if (errorCode) {
-                throw new Error(`Device login failed: ${errorCode}`);
-            }
-            throw new Error(`Device login polling failed with status ${response.status}`);
-        }
-        const apiKey = parseDeviceCodeApiKeyResponse(payload);
-        if (apiKey) {
-            return {
-                status: 'approved',
-                apiKey,
-            };
-        }
-        const errorCode = parseDeviceErrorCode(payload);
-        if (errorCode) {
-            throw new Error(`Device login failed: ${errorCode}`);
-        }
-        return { status: 'pending' };
-    }
-    /**
-     * Fetch Supabase user profile for a bearer token.
-     */
-    async fetchSupabaseUser(accessToken, options = {}) {
-        try {
-            const response = await fetch(`${SUPABASE_URL}/auth/v1/user`, {
-                headers: {
-                    Authorization: `Bearer ${accessToken}`,
-                    apikey: SUPABASE_ANON_KEY,
-                    'User-Agent': 'dexto-cli/1.0.0',
-                },
-                signal: this.createRequestSignal(options.signal),
-            });
-            if (!response.ok) {
-                return undefined;
-            }
-            const payload = await response.json();
-            return parseSupabaseUser(payload) ?? undefined;
-        }
-        catch (error) {
-            logger.debug(`Failed to fetch Supabase user profile: ${error instanceof Error ? error.message : String(error)}`);
-            return undefined;
-        }
-    }
-    /**
-     * Validate Supabase access token by checking if /auth/v1/user resolves.
-     */
-    async validateSupabaseAccessToken(accessToken, options = {}) {
-        const user = await this.fetchSupabaseUser(accessToken, options);
-        return Boolean(user?.id);
-    }
-}
-/**
- * Get default Dexto API client
- */
-export function getDextoApiClient() {
-    return new DextoApiClient();
-}

package/dist/cli/auth/device.d.ts

@@ -1,14 +0,0 @@
-import type { DeviceApiKeyLoginResult } from './types.js';
-export interface DeviceLoginPrompt {
-    userCode: string;
-    verificationUrl: string;
-    verificationUrlComplete: string | null;
-    expiresIn: number;
-}
-export interface DeviceLoginOptionsInput {
-    apiUrl?: string;
-    signal?: AbortSignal | undefined;
-    onPrompt?: ((prompt: DeviceLoginPrompt) => void | Promise<void>) | undefined;
-}
-export declare function performDeviceCodeLogin(optionsInput?: DeviceLoginOptionsInput): Promise<DeviceApiKeyLoginResult>;
-//# sourceMappingURL=device.d.ts.map

package/dist/cli/auth/device.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"device.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/device.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAI1D,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CAChF;AAoDD,wBAAsB,sBAAsB,CACxC,YAAY,GAAE,uBAA4B,GAC3C,OAAO,CAAC,uBAAuB,CAAC,CA0DlC"}

package/dist/cli/auth/device.js

@@ -1,84 +0,0 @@
-// packages/cli/src/cli/auth/device.ts
-// Device code login flow for browserless environments.
-import { DextoApiClient, getDextoApiClient } from './api-client.js';
-const TRANSIENT_POLL_BACKOFF_MS = 2_000;
-const MAX_POLL_INTERVAL_MS = 30_000;
-function resolveDeviceLoginOptions(options) {
-    return {
-        apiUrl: options.apiUrl,
-        signal: options.signal ?? null,
-        onPrompt: options.onPrompt ?? (() => undefined),
-    };
-}
-function getAuthClient(apiUrl) {
-    return apiUrl ? new DextoApiClient(apiUrl) : getDextoApiClient();
-}
-async function sleepWithAbort(ms, signal) {
-    if (signal?.aborted) {
-        throw signal.reason instanceof Error
-            ? signal.reason
-            : new Error('Authentication cancelled');
-    }
-    if (!signal) {
-        await new Promise((resolve) => setTimeout(resolve, ms));
-        return;
-    }
-    await new Promise((resolve, reject) => {
-        const timer = setTimeout(() => {
-            signal.removeEventListener('abort', onAbort);
-            resolve();
-        }, ms);
-        const onAbort = () => {
-            clearTimeout(timer);
-            signal.removeEventListener('abort', onAbort);
-            reject(signal.reason instanceof Error
-                ? signal.reason
-                : new Error('Authentication cancelled'));
-        };
-        signal.addEventListener('abort', onAbort, { once: true });
-    });
-}
-export async function performDeviceCodeLogin(optionsInput = {}) {
-    const options = resolveDeviceLoginOptions(optionsInput);
-    const authClient = getAuthClient(options.apiUrl);
-    const start = await authClient.startDeviceCodeLogin('dexto-cli', {
-        signal: options.signal ?? undefined,
-    });
-    await options.onPrompt({
-        userCode: start.userCode,
-        verificationUrl: start.verificationUrl,
-        verificationUrlComplete: start.verificationUrlComplete,
-        expiresIn: start.expiresIn,
-    });
-    const deadline = Date.now() + start.expiresIn * 1000;
-    let pollIntervalMs = Math.max(1, Math.floor(start.interval)) * 1000;
-    while (Date.now() < deadline) {
-        await sleepWithAbort(pollIntervalMs, options.signal);
-        const pollResult = await authClient.pollDeviceCodeLogin(start.deviceCode, {
-            signal: options.signal ?? undefined,
-        });
-        if (pollResult.status === 'pending') {
-            continue;
-        }
-        if (pollResult.status === 'slowDown') {
-            pollIntervalMs = Math.min(pollIntervalMs + 5_000, MAX_POLL_INTERVAL_MS);
-            continue;
-        }
-        if (pollResult.status === 'transientError') {
-            pollIntervalMs = Math.min(pollIntervalMs + TRANSIENT_POLL_BACKOFF_MS, MAX_POLL_INTERVAL_MS);
-            continue;
-        }
-        if (pollResult.status === 'expired') {
-            throw new Error('Device login expired. Please restart login.');
-        }
-        if (pollResult.status === 'denied') {
-            throw new Error('Device login was denied.');
-        }
-        return {
-            dextoApiKey: pollResult.apiKey.fullKey,
-            dextoKeyId: pollResult.apiKey.id,
-            dextoKeyDisplay: pollResult.apiKey.keyDisplay,
-        };
-    }
-    throw new Error('Device login timed out. Please restart login.');
-}