dexto 1.5.5 → 1.5.7

package/dist/cli/utils/dexto-auth-check.js

@@ -0,0 +1,104 @@
+// packages/cli/src/cli/utils/dexto-auth-check.ts
+/**
+ * Dexto Authentication Check
+ *
+ * Validates that users configured to use Dexto credits are properly authenticated.
+ * This prevents the confusing state where user is logged out but still has
+ * Dexto credits configured (which would fail at runtime).
+ *
+ * ## When This Check Runs
+ *
+ * - On CLI startup, after loading preferences
+ * - Before attempting to use the LLM
+ *
+ * ## Why This Exists
+ *
+ * When a user runs `dexto logout` while configured with `provider: dexto`,
+ * their preferences.yml still points to Dexto. Without this check, the CLI
+ * would attempt to use Dexto credits and fail with "Invalid API key" errors.
+ *
+ * Instead, we catch this state early and offer clear options:
+ * - Log back in to continue using Dexto credits
+ * - Run setup to configure a different provider (BYOK)
+ *
+ * @module dexto-auth-check
+ */
+import chalk from 'chalk';
+import * as p from '@clack/prompts';
+import { isAuthenticated } from '../auth/index.js';
+import { getEffectiveLLMConfig } from '../../config/effective-llm.js';
+/**
+ * Check if user is configured to use Dexto credits but is not authenticated.
+ * This can happen if user logged out after setting up with Dexto credits.
+ *
+ * Uses getEffectiveLLMConfig() to determine the actual LLM that will be used,
+ * considering all config layers (local, preferences, bundled).
+ *
+ * @param interactive Whether to show interactive prompts
+ * @param agentId Agent to check config for (default: 'coding-agent')
+ * @returns Whether to continue startup and what action was taken
+ *
+ * @example
+ * ```typescript
+ * const result = await checkDextoAuthState(true, 'coding-agent');
+ * if (!result.shouldContinue) {
+ *   if (result.action === 'login') {
+ *     await handleLoginCommand();
+ *   } else if (result.action === 'setup') {
+ *     await handleSetupCommand();
+ *   }
+ * }
+ * ```
+ */
+export async function checkDextoAuthState(interactive = true, agentId = 'coding-agent') {
+    // Get the effective LLM config considering all layers
+    const effectiveLLM = await getEffectiveLLMConfig({ agentId });
+    // Not using dexto provider - nothing to check
+    if (!effectiveLLM || effectiveLLM.provider !== 'dexto') {
+        return { shouldContinue: true };
+    }
+    // Using dexto provider - check if authenticated
+    const authenticated = await isAuthenticated();
+    if (authenticated) {
+        return { shouldContinue: true };
+    }
+    // User is configured for Dexto credits but not logged in
+    if (!interactive) {
+        // Non-interactive mode - just show error and exit
+        console.log(chalk.red('\n❌ You are configured to use Dexto credits but not logged in.\n'));
+        console.log(chalk.dim('Your preferences have provider: dexto, but no active session.\n'));
+        console.log(chalk.bold('To fix this:'));
+        console.log(chalk.cyan('  • dexto login') + chalk.dim('  - Log back in to use Dexto credits'));
+        console.log(chalk.cyan('  • dexto setup') + chalk.dim('  - Configure a different provider (BYOK)'));
+        console.log();
+        return { shouldContinue: false, action: 'cancel' };
+    }
+    // Interactive mode - prompt user
+    console.log(chalk.yellow('\n⚠️  Dexto Authentication Required\n'));
+    console.log(chalk.dim('You are configured to use Dexto credits (provider: dexto)'));
+    console.log(chalk.dim('but you are not currently logged in.\n'));
+    const action = await p.select({
+        message: 'How would you like to proceed?',
+        options: [
+            {
+                value: 'login',
+                label: 'Log in to Dexto',
+                hint: 'Authenticate to use Dexto credits',
+            },
+            {
+                value: 'setup',
+                label: 'Configure a different provider',
+                hint: 'Set up your own API key (BYOK)',
+            },
+            {
+                value: 'cancel',
+                label: 'Exit',
+                hint: 'Cancel and exit',
+            },
+        ],
+    });
+    if (p.isCancel(action) || action === 'cancel') {
+        return { shouldContinue: false, action: 'cancel' };
+    }
+    return { shouldContinue: false, action };
+}

package/dist/cli/utils/dexto-setup.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Check if user can use Dexto provider.
+ * Requires BOTH:
+ * 1. User is authenticated (valid auth token from dexto login)
+ * 2. Has DEXTO_API_KEY (from auth config or environment)
+ */
+export declare function canUseDextoProvider(): Promise<boolean>;
+//# sourceMappingURL=dexto-setup.d.ts.map

package/dist/cli/utils/dexto-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dexto-setup.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/dexto-setup.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,OAAO,CAAC,CAQ5D"}

package/dist/cli/utils/dexto-setup.js

@@ -0,0 +1,17 @@
+// packages/cli/src/cli/utils/dexto-setup.ts
+import { getDextoApiKey, isAuthenticated } from '../auth/index.js';
+/**
+ * Check if user can use Dexto provider.
+ * Requires BOTH:
+ * 1. User is authenticated (valid auth token from dexto login)
+ * 2. Has DEXTO_API_KEY (from auth config or environment)
+ */
+export async function canUseDextoProvider() {
+    const authenticated = await isAuthenticated();
+    if (!authenticated)
+        return false;
+    const apiKey = await getDextoApiKey();
+    if (!apiKey)
+        return false;
+    return true;
+}

package/dist/cli/utils/options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/options.ts"],"names":[],"mappings":"AAIA;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,CAiGlD;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAoB3D"}
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/options.ts"],"names":[],"mappings":"AAKA;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,CAoGlD;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,CAoB3D"}

package/dist/cli/utils/options.js

@@ -1,5 +1,6 @@
 import { z } from 'zod';
 import { getSupportedProviders } from '@dexto/core';
+import { isDextoAuthEnabled } from '@dexto/agent-management';
 import chalk from 'chalk';
 /**
  * Validates the command-line options.
@@ -7,7 +8,10 @@ import chalk from 'chalk';
  * @throws {z.ZodError} If validation fails.
  */
 export function validateCliOptions(opts) {
-    const supportedProviders = getSupportedProviders().map((p) => p.toLowerCase());
+    const allProviders = getSupportedProviders();
+    const supportedProviders = allProviders
+        .filter((p) => p !== 'dexto' || isDextoAuthEnabled())
+        .map((p) => p.toLowerCase());
     // Base schema for primitive shape
     const cliOptionShape = z
         .object({

package/dist/cli/utils/provider-setup.d.ts

@@ -21,6 +21,10 @@ interface ProviderOption {
 /**
  * Provider configuration registry
  * Organized by category for better UX
+ *
+ * Note: dexto is NOT included here - it's a transparent routing layer,
+ * not a user-selectable provider. When logged into Dexto, requests are
+ * automatically routed through the Dexto gateway.
  */
 export declare const PROVIDER_REGISTRY: Partial<Record<LLMProvider, ProviderOption>>;
 /**

package/dist/cli/utils/provider-setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-setup.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/provider-setup.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,KAAK,WAAW,EAInB,MAAM,aAAa,CAAC;AAGrB;;GAEG;AACH,KAAK,gBAAgB,GAAG,aAAa,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,YAAY,CAAC;AAErF;;GAEG;AACH,UAAU,cAAc;IACpB,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,CA8H1E,CAAC;AA0FF;;;GAGG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,WAAW,GAAG,OAAO,GAAG,IAAI,CAAC,CAoB5E;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,CAEpE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,WAAW,GAAG,cAAc,GAAG,SAAS,CAEjF;AAED;;GAEG;AACH,eAAO,MAAM,gBAAgB;WA1GmB,WAAW;WAAS,MAAM;UAAQ,MAAM;GA0GlC,CAAC;AAEvD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAIxE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAChC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,WAAW,GACtB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA0BpC;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,CAElF;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACnC,QAAQ,EAAE,WAAW,GACtB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG,IAAI,CAwBrE;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAU3E;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO,CAEtE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,CAY7D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,CAE/D"}
+{"version":3,"file":"provider-setup.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/provider-setup.ts"],"names":[],"mappings":"AAKA,OAAO,EACH,KAAK,WAAW,EAInB,MAAM,aAAa,CAAC;AAGrB;;GAEG;AACH,KAAK,gBAAgB,GAAG,aAAa,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,YAAY,CAAC;AAErF;;GAEG;AACH,UAAU,cAAc;IACpB,KAAK,EAAE,WAAW,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,iBAAiB,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,CA8I1E,CAAC;AA0FF;;;GAGG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,WAAW,GAAG,OAAO,GAAG,IAAI,CAAC,CAoB5E;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,CAEpE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,WAAW,GAAG,cAAc,GAAG,SAAS,CAEjF;AAED;;GAEG;AACH,eAAO,MAAM,gBAAgB;WA1GmB,WAAW;WAAS,MAAM;UAAQ,MAAM;GA0GlC,CAAC;AAEvD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,CAIxE;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAChC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,WAAW,GACtB;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA0BpC;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,GAAG,OAAO,CAElF;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACnC,QAAQ,EAAE,WAAW,GACtB;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG,IAAI,CAwBrE;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAU3E;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO,CAEtE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,CAY7D;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,CAE/D"}

package/dist/cli/utils/provider-setup.js

@@ -7,6 +7,10 @@ import { getPrimaryApiKeyEnvVar } from '@dexto/agent-management';
 /**
  * Provider configuration registry
  * Organized by category for better UX
+ *
+ * Note: dexto is NOT included here - it's a transparent routing layer,
+ * not a user-selectable provider. When logged into Dexto, requests are
+ * automatically routed through the Dexto gateway.
  */
 export const PROVIDER_REGISTRY = {
     google: {
@@ -84,6 +88,22 @@ export const PROVIDER_REGISTRY = {
         apiKeyUrl: 'https://dashboard.cohere.com/api-keys',
         envVar: 'COHERE_API_KEY',
     },
+    minimax: {
+        value: 'minimax',
+        label: 'MiniMax',
+        hint: 'M2.1 coding-focused models',
+        category: 'cloud',
+        apiKeyUrl: 'https://platform.minimax.io/docs/faq/about-apis',
+        envVar: 'MINIMAX_API_KEY',
+    },
+    glm: {
+        value: 'glm',
+        label: 'GLM (Zhipu)',
+        hint: 'GLM-4.7 series models',
+        category: 'cloud',
+        apiKeyUrl: 'https://open.bigmodel.cn/',
+        envVar: 'ZHIPU_API_KEY',
+    },
     openrouter: {
         value: 'openrouter',
         label: 'OpenRouter',

package/dist/cli/utils/version-check.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Update info returned when a newer version is available
+ */
+export interface UpdateInfo {
+    current: string;
+    latest: string;
+    updateCommand: string;
+}
+/**
+ * Check for updates (non-blocking, cached)
+ *
+ * @param currentVersion The current installed version
+ * @returns UpdateInfo if a newer version is available, null otherwise
+ *
+ * This function is designed to be called at CLI startup. It:
+ * - Respects DEXTO_NO_UPDATE_CHECK=true to disable checks
+ * - Uses a 24-hour cache to avoid hammering npm
+ * - Fails silently on network errors
+ * - Never blocks startup for more than 5 seconds
+ *
+ * @example
+ * ```typescript
+ * const updateInfo = await checkForUpdates('1.5.4');
+ * if (updateInfo) {
+ *   displayUpdateNotification(updateInfo);
+ * }
+ * ```
+ */
+export declare function checkForUpdates(currentVersion: string): Promise<UpdateInfo | null>;
+/**
+ * Display update notification in a styled box
+ *
+ * @param updateInfo Update information to display
+ *
+ * @example
+ * ```typescript
+ * displayUpdateNotification({
+ *   current: '1.5.4',
+ *   latest: '1.6.0',
+ *   updateCommand: 'npm i -g dexto'
+ * });
+ * ```
+ */
+export declare function displayUpdateNotification(updateInfo: UpdateInfo): void;
+//# sourceMappingURL=version-check.d.ts.map

package/dist/cli/utils/version-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version-check.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/version-check.ts"],"names":[],"mappings":"AAkBA;;GAEG;AACH,MAAM,WAAW,UAAU;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;CACzB;AAqGD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA+DxF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI,CAatE"}

package/dist/cli/utils/version-check.js

@@ -0,0 +1,195 @@
+// packages/cli/src/cli/utils/version-check.ts
+import { promises as fs } from 'fs';
+import path from 'path';
+import chalk from 'chalk';
+import boxen from 'boxen';
+import { logger } from '@dexto/core';
+import { getDextoGlobalPath } from '@dexto/agent-management';
+const CACHE_TTL_MS = 24 * 60 * 60 * 1000; // 24 hours
+const NPM_REGISTRY_URL = 'https://registry.npmjs.org/dexto/latest';
+const CACHE_FILE_PATH = getDextoGlobalPath('cache', 'version-check.json');
+/**
+ * Compare two semver versions.
+ * Returns:
+ *  - negative if v1 < v2
+ *  - 0 if v1 === v2
+ *  - positive if v1 > v2
+ *
+ * Note: Pre-release versions (e.g., 1.0.0-beta.1) are not fully supported.
+ * The comparison strips pre-release suffixes, so 1.0.0 and 1.0.0-beta.1
+ * would be considered equal. This is acceptable for update notifications
+ * since we don't publish pre-release versions to npm's latest tag.
+ */
+function compareSemver(v1, v2) {
+    const parse = (v) => {
+        // Strip leading 'v' if present and split on '.'
+        const cleaned = v.replace(/^v/, '');
+        const parts = cleaned.split('.').map((p) => parseInt(p, 10) || 0);
+        // Pad to 3 parts
+        while (parts.length < 3)
+            parts.push(0);
+        return parts;
+    };
+    const p1 = parse(v1);
+    const p2 = parse(v2);
+    for (let i = 0; i < 3; i++) {
+        const v1Part = p1[i] ?? 0;
+        const v2Part = p2[i] ?? 0;
+        if (v1Part !== v2Part) {
+            return v1Part - v2Part;
+        }
+    }
+    return 0;
+}
+/**
+ * Load cached version info from disk
+ */
+async function loadCache() {
+    try {
+        const content = await fs.readFile(CACHE_FILE_PATH, 'utf-8');
+        return JSON.parse(content);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Save version cache to disk
+ */
+async function saveCache(cache) {
+    try {
+        await fs.mkdir(path.dirname(CACHE_FILE_PATH), { recursive: true });
+        await fs.writeFile(CACHE_FILE_PATH, JSON.stringify(cache, null, 2));
+    }
+    catch (error) {
+        // Non-critical - just log and continue
+        logger.debug(`Failed to save version cache: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+/**
+ * Fetch latest version from npm registry
+ */
+async function fetchLatestVersion() {
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), 5000); // 5 second timeout
+    try {
+        const response = await fetch(NPM_REGISTRY_URL, {
+            signal: controller.signal,
+            headers: {
+                Accept: 'application/json',
+            },
+        });
+        if (!response.ok) {
+            logger.debug(`npm registry returned status ${response.status}`);
+            return null;
+        }
+        const data = (await response.json());
+        return data.version || null;
+    }
+    catch (error) {
+        // Network errors, timeouts, etc. - silent fail
+        logger.debug(`Failed to fetch latest version: ${error instanceof Error ? error.message : String(error)}`);
+        return null;
+    }
+    finally {
+        clearTimeout(timeoutId);
+    }
+}
+/**
+ * Check for updates (non-blocking, cached)
+ *
+ * @param currentVersion The current installed version
+ * @returns UpdateInfo if a newer version is available, null otherwise
+ *
+ * This function is designed to be called at CLI startup. It:
+ * - Respects DEXTO_NO_UPDATE_CHECK=true to disable checks
+ * - Uses a 24-hour cache to avoid hammering npm
+ * - Fails silently on network errors
+ * - Never blocks startup for more than 5 seconds
+ *
+ * @example
+ * ```typescript
+ * const updateInfo = await checkForUpdates('1.5.4');
+ * if (updateInfo) {
+ *   displayUpdateNotification(updateInfo);
+ * }
+ * ```
+ */
+export async function checkForUpdates(currentVersion) {
+    // Check if update checks are disabled
+    if (process.env.DEXTO_NO_UPDATE_CHECK === 'true') {
+        logger.debug('Version check disabled via DEXTO_NO_UPDATE_CHECK');
+        return null;
+    }
+    try {
+        const now = Date.now();
+        const cache = await loadCache();
+        // Check if cache is valid
+        if (cache && cache.currentVersion === currentVersion) {
+            const cacheAge = now - cache.lastCheck;
+            if (cacheAge < CACHE_TTL_MS) {
+                logger.debug(`Using cached version info (age: ${Math.round(cacheAge / 1000 / 60)} minutes)`);
+                // Return cached result if newer version exists
+                if (compareSemver(cache.latestVersion, currentVersion) > 0) {
+                    return {
+                        current: currentVersion,
+                        latest: cache.latestVersion,
+                        updateCommand: 'npm i -g dexto',
+                    };
+                }
+                return null;
+            }
+        }
+        // Cache expired or invalid - fetch from npm
+        logger.debug('Fetching latest version from npm registry');
+        const latestVersion = await fetchLatestVersion();
+        if (!latestVersion) {
+            return null;
+        }
+        // Update cache
+        const newCache = {
+            lastCheck: now,
+            latestVersion,
+            currentVersion,
+        };
+        await saveCache(newCache);
+        // Check if update is available
+        if (compareSemver(latestVersion, currentVersion) > 0) {
+            return {
+                current: currentVersion,
+                latest: latestVersion,
+                updateCommand: 'npm i -g dexto',
+            };
+        }
+        return null;
+    }
+    catch (error) {
+        // Never fail the CLI startup due to version check errors
+        logger.debug(`Version check error: ${error instanceof Error ? error.message : String(error)}`);
+        return null;
+    }
+}
+/**
+ * Display update notification in a styled box
+ *
+ * @param updateInfo Update information to display
+ *
+ * @example
+ * ```typescript
+ * displayUpdateNotification({
+ *   current: '1.5.4',
+ *   latest: '1.6.0',
+ *   updateCommand: 'npm i -g dexto'
+ * });
+ * ```
+ */
+export function displayUpdateNotification(updateInfo) {
+    const message = `Update available: ${chalk.gray(updateInfo.current)} ${chalk.gray('→')} ${chalk.green(updateInfo.latest)}\n` +
+        `Run: ${chalk.cyan(updateInfo.updateCommand)}`;
+    console.log(boxen(message, {
+        padding: 1,
+        margin: { top: 1, bottom: 1, left: 0, right: 0 },
+        borderColor: 'yellow',
+        borderStyle: 'round',
+    }));
+}

package/dist/config/cli-overrides.d.ts

@@ -2,13 +2,21 @@
  * CLI-specific configuration types and utilities
  * This file handles CLI argument processing and config merging logic
  *
- * TODO: Future preference system enhancement
- * Currently, global preferences are only applied to the coding-agent at runtime.
- * Future improvements could include:
- * - Per-agent preference overrides (~/.dexto/agents/{id}/preferences.yml)
+ * Current behavior (Three-Layer LLM Resolution):
+ * Global preferences from preferences.yml are applied to ALL agents at runtime.
+ * See feature-plans/auto-update.md section 8.11 for the resolution order:
+ *   1. agent.local.yml llm section     → Agent-specific override (NOT YET IMPLEMENTED)
+ *   2. preferences.yml llm section     → User's global default (CURRENT)
+ *   3. agent.yml llm section           → Bundled fallback
+ *
+ * Note: Sub-agents spawned via RuntimeService have separate LLM resolution logic
+ * that tries to preserve the sub-agent's intended model when possible.
+ * See packages/agent-management/src/tool-provider/llm-resolution.ts
+ *
+ * TODO: Future enhancements
+ * - Per-agent local overrides (~/.dexto/agents/{id}/{id}.local.yml)
  * - Agent capability requirements (requires: { vision: true, toolUse: true })
- * - Merge strategy configuration (global > agent, agent > global, field-specific)
- * - User-controlled preference scopes via CLI flags (--prefer-global-llm)
+ * - Merge strategy configuration for non-LLM fields
  */
 import type { AgentConfig, LLMConfig, LLMProvider } from '@dexto/core';
 import type { GlobalPreferences } from '@dexto/agent-management';
@@ -33,15 +41,16 @@ export interface CLIConfigOverrides extends Partial<Pick<LLMConfig, 'provider' |
 export declare function applyCLIOverrides(baseConfig: AgentConfig, cliOverrides?: CLIConfigOverrides): AgentConfig;
 /**
  * Applies global user preferences to an agent configuration at runtime.
- * This is used for the coding-agent to ensure user's LLM preferences are applied.
+ * This is used to ensure user's LLM preferences are applied to all agents.
  *
  * Unlike writeLLMPreferences() which modifies files, this performs an in-memory merge.
+ * User preferences fully override agent defaults for provider, model, and apiKey.
  *
  * @param baseConfig The configuration loaded from agent file
  * @param preferences Global user preferences
  * @returns Merged configuration with user preferences applied
  */
-export declare function applyUserPreferences(baseConfig: AgentConfig, preferences: GlobalPreferences): AgentConfig;
+export declare function applyUserPreferences(baseConfig: AgentConfig, preferences: Partial<GlobalPreferences>): AgentConfig;
 /**
  * Result of agent compatibility check
  */

package/dist/config/cli-overrides.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-overrides.d.ts","sourceRoot":"","sources":["../../src/config/cli-overrides.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE;;;GAGG;AACH,MAAM,WAAW,kBACb,SAAQ,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC,CAAC;IACjE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,8DAA8D;IAC9D,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC7B,UAAU,EAAE,WAAW,EACvB,YAAY,CAAC,EAAE,kBAAkB,GAClC,WAAW,CAwCb;AAED;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAChC,UAAU,EAAE,WAAW,EACvB,WAAW,EAAE,iBAAiB,GAC/B,WAAW,CAwBb;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACrC,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,WAAW,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,WAAW,GAAG,SAAS,CAAC;IACtC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,aAAa,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACnC,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,iBAAiB,GAAG,IAAI,EACrC,cAAc,EAAE,MAAM,GAAG,SAAS,GACnC,wBAAwB,CAwC1B"}
+{"version":3,"file":"cli-overrides.d.ts","sourceRoot":"","sources":["../../src/config/cli-overrides.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE;;;GAGG;AACH,MAAM,WAAW,kBACb,SAAQ,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC,CAAC;IACjE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,8DAA8D;IAC9D,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC7B,UAAU,EAAE,WAAW,EACvB,YAAY,CAAC,EAAE,kBAAkB,GAClC,WAAW,CAwCb;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAChC,UAAU,EAAE,WAAW,EACvB,WAAW,EAAE,OAAO,CAAC,iBAAiB,CAAC,GACxC,WAAW,CAwBb;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACrC,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,WAAW,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,WAAW,GAAG,SAAS,CAAC;IACtC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,aAAa,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACnC,WAAW,EAAE,WAAW,EACxB,WAAW,EAAE,iBAAiB,GAAG,IAAI,EACrC,cAAc,EAAE,MAAM,GAAG,SAAS,GACnC,wBAAwB,CAwC1B"}

package/dist/config/cli-overrides.js

@@ -2,13 +2,21 @@
  * CLI-specific configuration types and utilities
  * This file handles CLI argument processing and config merging logic
  *
- * TODO: Future preference system enhancement
- * Currently, global preferences are only applied to the coding-agent at runtime.
- * Future improvements could include:
- * - Per-agent preference overrides (~/.dexto/agents/{id}/preferences.yml)
+ * Current behavior (Three-Layer LLM Resolution):
+ * Global preferences from preferences.yml are applied to ALL agents at runtime.
+ * See feature-plans/auto-update.md section 8.11 for the resolution order:
+ *   1. agent.local.yml llm section     → Agent-specific override (NOT YET IMPLEMENTED)
+ *   2. preferences.yml llm section     → User's global default (CURRENT)
+ *   3. agent.yml llm section           → Bundled fallback
+ *
+ * Note: Sub-agents spawned via RuntimeService have separate LLM resolution logic
+ * that tries to preserve the sub-agent's intended model when possible.
+ * See packages/agent-management/src/tool-provider/llm-resolution.ts
+ *
+ * TODO: Future enhancements
+ * - Per-agent local overrides (~/.dexto/agents/{id}/{id}.local.yml)
  * - Agent capability requirements (requires: { vision: true, toolUse: true })
- * - Merge strategy configuration (global > agent, agent > global, field-specific)
- * - User-controlled preference scopes via CLI flags (--prefer-global-llm)
+ * - Merge strategy configuration for non-LLM fields
  */
 /**
  * Applies CLI overrides to an agent configuration
@@ -59,9 +67,10 @@ export function applyCLIOverrides(baseConfig, cliOverrides) {
 }
 /**
  * Applies global user preferences to an agent configuration at runtime.
- * This is used for the coding-agent to ensure user's LLM preferences are applied.
+ * This is used to ensure user's LLM preferences are applied to all agents.
  *
  * Unlike writeLLMPreferences() which modifies files, this performs an in-memory merge.
+ * User preferences fully override agent defaults for provider, model, and apiKey.
  *
  * @param baseConfig The configuration loaded from agent file
  * @param preferences Global user preferences
@@ -70,21 +79,22 @@ export function applyCLIOverrides(baseConfig, cliOverrides) {
 export function applyUserPreferences(baseConfig, preferences) {
     // Create a deep copy to avoid mutating the original
     const mergedConfig = JSON.parse(JSON.stringify(baseConfig));
-    // Apply LLM preferences (user preferences override agent defaults)
-    if (preferences.llm) {
-        mergedConfig.llm = {
-            ...mergedConfig.llm,
-            provider: preferences.llm.provider,
-            model: preferences.llm.model,
-        };
-        // Only override apiKey if user has one configured
-        if (preferences.llm.apiKey) {
-            mergedConfig.llm.apiKey = preferences.llm.apiKey;
-        }
-        // Only override baseURL if user has one configured
-        if (preferences.llm.baseURL) {
-            mergedConfig.llm.baseURL = preferences.llm.baseURL;
-        }
+    // No LLM preferences to apply
+    if (!preferences.llm) {
+        return mergedConfig;
+    }
+    // Apply user preferences - only override if defined (preferences is Partial)
+    if (preferences.llm.provider) {
+        mergedConfig.llm.provider = preferences.llm.provider;
+    }
+    if (preferences.llm.model) {
+        mergedConfig.llm.model = preferences.llm.model;
+    }
+    if (preferences.llm.apiKey) {
+        mergedConfig.llm.apiKey = preferences.llm.apiKey;
+    }
+    if (preferences.llm.baseURL) {
+        mergedConfig.llm.baseURL = preferences.llm.baseURL;
     }
     return mergedConfig;
 }
@@ -140,6 +150,8 @@ function getEnvVarForProvider(provider) {
         groq: 'GROQ_API_KEY',
         xai: 'XAI_API_KEY',
         cohere: 'COHERE_API_KEY',
+        minimax: 'MINIMAX_API_KEY',
+        glm: 'ZHIPU_API_KEY',
         openrouter: 'OPENROUTER_API_KEY',
         litellm: 'LITELLM_API_KEY',
         glama: 'GLAMA_API_KEY',
@@ -148,6 +160,8 @@ function getEnvVarForProvider(provider) {
         // Local providers don't require API keys (empty string signals no key needed)
         local: '',
         ollama: '',
+        // Dexto gateway uses DEXTO_API_KEY from `dexto login`
+        dexto: 'DEXTO_API_KEY',
     };
     return envVarMap[provider];
 }