dexto 1.6.22 → 1.6.25

package/dist/cli/auth/api-client.d.ts

@@ -46,6 +46,13 @@ export interface UsageSummaryResponse {
         output_tokens: number;
     }>;
 }
+export interface BillingBalanceResponse {
+    creditsUsd: number;
+}
+export interface BillingCheckoutSessionResponse {
+    checkoutUrl: string;
+    checkoutSessionId: string;
+}
 interface RequestOptions {
     signal?: AbortSignal | undefined;
 }
@@ -75,12 +82,23 @@ export declare class DextoApiClient {
     provisionDextoApiKey(authToken: string, name?: string, regenerate?: boolean): Promise<{
         dextoApiKey: string;
         keyId: string;
-        isNewKey: boolean;
     }>;
     /**
      * Get usage summary (balance + MTD usage + recent history)
      */
     getUsageSummary(apiKey: string): Promise<UsageSummaryResponse>;
+    /**
+     * Get the current Dexto billing balance for the authenticated user.
+     */
+    getBillingBalance(authToken: string, options: RequestOptions): Promise<BillingBalanceResponse>;
+    /**
+     * Create a hosted top-up checkout session for the authenticated user.
+     */
+    createBillingCheckoutSession(authToken: string, options: {
+        creditsUsd: number;
+        returnUrl?: string | undefined;
+        signal?: AbortSignal | undefined;
+    }): Promise<BillingCheckoutSessionResponse>;
     /**
      * Start device code login at the platform.
      */

package/dist/cli/auth/api-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/api-client.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAwBpD,MAAM,WAAW,uBAAuB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,MAAM,sBAAsB,GAC5B;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GACtB;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,gBAAgB,CAAA;CAAE,GAC5B;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,uBAAuB,CAAA;CAAE,CAAC;AAE5D,MAAM,WAAW,oBAAoB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE;QACP,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,MAAM,CACZ,MAAM,EACN;YACI,QAAQ,EAAE,MAAM,CAAC;YACjB,QAAQ,EAAE,MAAM,CAAC;YACjB,MAAM,EAAE,MAAM,CAAC;SAClB,CACJ,CAAC;KACL,CAAC;IACF,MAAM,EAAE,KAAK,CAAC;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;KACzB,CAAC,CAAC;CACN;AAED,UAAU,cAAc;IACpB,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACpC;AAiUD;;GAEG;AACH,qBAAa,cAAc;IACvB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;gBAGhC,OAAO,GACD,MAAM,GACN;QACI,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACnC;IAehB,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,cAAc;YAIR,mBAAmB;YAoBnB,oBAAoB;YAkCpB,oBAAoB;IAoBlC;;OAEG;IACG,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwB3D;;;OAGG;IACG,oBAAoB,CACtB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,MAAwB,EAC9B,UAAU,GAAE,OAAe,GAC5B,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;IAkCrE;;OAEG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA2BpE;;OAEG;IACG,oBAAoB,CACtB,MAAM,GAAE,MAAoB,EAC5B,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,uBAAuB,CAAC;IAyBnC;;OAEG;IACG,mBAAmB,CACrB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IAuFlC;;OAEG;IACG,iBAAiB,CACnB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAyBzC;;OAEG;IACG,2BAA2B,CAC7B,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,OAAO,CAAC;CAItB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,CAElD"}
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/api-client.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAwBpD,MAAM,WAAW,uBAAuB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,MAAM,sBAAsB,GAC5B;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GACtB;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,gBAAgB,CAAA;CAAE,GAC5B;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,uBAAuB,CAAA;CAAE,CAAC;AAE5D,MAAM,WAAW,oBAAoB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE;QACP,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,MAAM,CACZ,MAAM,EACN;YACI,QAAQ,EAAE,MAAM,CAAC;YACjB,QAAQ,EAAE,MAAM,CAAC;YACjB,MAAM,EAAE,MAAM,CAAC;SAClB,CACJ,CAAC;KACL,CAAC;IACF,MAAM,EAAE,KAAK,CAAC;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;KACzB,CAAC,CAAC;CACN;AAED,MAAM,WAAW,sBAAsB;IACnC,UAAU,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,8BAA8B;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;CAC7B;AAED,UAAU,cAAc;IACpB,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACpC;AAuWD;;GAEG;AACH,qBAAa,cAAc;IACvB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;gBAGhC,OAAO,GACD,MAAM,GACN;QACI,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACnC;IAehB,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,cAAc;YAIR,mBAAmB;YAoBnB,oBAAoB;YAkCpB,oBAAoB;IAoBlC;;OAEG;IACG,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwB3D;;;OAGG;IACG,oBAAoB,CACtB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,MAAwB,EAC9B,UAAU,GAAE,OAAe,GAC5B,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAiClD;;OAEG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA2BpE;;OAEG;IACG,iBAAiB,CACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,GACxB,OAAO,CAAC,sBAAsB,CAAC;IA6BlC;;OAEG;IACG,4BAA4B,CAC9B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;KACpC,GACF,OAAO,CAAC,8BAA8B,CAAC;IAyC1C;;OAEG;IACG,oBAAoB,CACtB,MAAM,GAAE,MAAoB,EAC5B,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,uBAAuB,CAAC;IAyBnC;;OAEG;IACG,mBAAmB,CACrB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IAuFlC;;OAEG;IACG,iBAAiB,CACnB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAyBzC;;OAEG;IACG,2BAA2B,CAC7B,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,OAAO,CAAC;CAItB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,CAElD"}

package/dist/cli/auth/api-client.js

@@ -185,6 +185,33 @@ function parseUsageSummaryResponse(payload) {
         recent,
     };
 }
+function parseBillingBalanceResponse(payload) {
+    if (typeof payload !== 'object' || payload === null) {
+        throw new Error('Invalid response from API');
+    }
+    const creditsUsd = parseNumber(Reflect.get(payload, 'credits_usd')) ??
+        parseNumber(Reflect.get(payload, 'creditsUsd'));
+    if (creditsUsd === null) {
+        throw new Error('Invalid response from API');
+    }
+    return { creditsUsd };
+}
+function parseBillingCheckoutSessionResponse(payload) {
+    if (typeof payload !== 'object' || payload === null) {
+        throw new Error('Invalid response from API');
+    }
+    const checkoutUrl = parseString(Reflect.get(payload, 'checkout_url')) ??
+        parseString(Reflect.get(payload, 'checkoutUrl'));
+    const checkoutSessionId = parseString(Reflect.get(payload, 'checkout_session_id')) ??
+        parseString(Reflect.get(payload, 'checkoutSessionId'));
+    if (!checkoutUrl || !checkoutSessionId) {
+        throw new Error('Invalid response from API');
+    }
+    return {
+        checkoutUrl,
+        checkoutSessionId,
+    };
+}
 function parseValidateResponse(payload) {
     if (typeof payload !== 'object' || payload === null) {
         return false;
@@ -376,7 +403,6 @@ export class DextoApiClient {
             return {
                 dextoApiKey: createdKey.dextoApiKey,
                 keyId: createdKey.keyId,
-                isNewKey: true,
             };
         }
         catch (error) {
@@ -409,6 +435,71 @@ export class DextoApiClient {
             throw error;
         }
     }
+    /**
+     * Get the current Dexto billing balance for the authenticated user.
+     */
+    async getBillingBalance(authToken, options) {
+        try {
+            logger.debug('Fetching billing balance');
+            const response = await fetch(this.getPlatformUrl('/api/billing/balance'), {
+                method: 'GET',
+                headers: {
+                    Authorization: `Bearer ${authToken}`,
+                },
+                signal: this.createRequestSignal(options.signal),
+            });
+            if (!response.ok) {
+                const rawText = await response.text();
+                throw new Error(`API request failed: ${formatHttpFailure(response.status, null, rawText)}`);
+            }
+            const payload = await response.json();
+            return parseBillingBalanceResponse(payload);
+        }
+        catch (error) {
+            logger.error('Error fetching billing balance', {
+                error: error instanceof Error ? error.message : String(error),
+            });
+            throw error;
+        }
+    }
+    /**
+     * Create a hosted top-up checkout session for the authenticated user.
+     */
+    async createBillingCheckoutSession(authToken, options) {
+        try {
+            if (!Number.isFinite(options.creditsUsd) || options.creditsUsd <= 0) {
+                throw new Error('creditsUsd must be a positive number');
+            }
+            logger.debug('Creating billing checkout session', {
+                creditsUsd: options.creditsUsd,
+            });
+            const response = await fetch(this.getPlatformUrl('/api/billing/checkout-session'), {
+                method: 'POST',
+                headers: {
+                    Authorization: `Bearer ${authToken}`,
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify({
+                    credits_usd: options.creditsUsd,
+                    ...(options.returnUrl ? { return_url: options.returnUrl } : {}),
+                }),
+                signal: this.createRequestSignal(options.signal),
+            });
+            if (!response.ok) {
+                const rawText = await response.text();
+                throw new Error(`API request failed: ${formatHttpFailure(response.status, null, rawText)}`);
+            }
+            const payload = await response.json();
+            return parseBillingCheckoutSessionResponse(payload);
+        }
+        catch (error) {
+            logger.error('Error creating billing checkout session', {
+                error: error instanceof Error ? error.message : String(error),
+                creditsUsd: options.creditsUsd,
+            });
+            throw error;
+        }
+    }
     /**
      * Start device code login at the platform.
      */

package/dist/cli/auth/billing.d.ts

@@ -0,0 +1,14 @@
+import type { BillingCheckoutSessionResponse } from './api-client.js';
+export declare function buildDextoBillingUrl(options: {
+    creditsUsd?: number | undefined;
+    baseUrl?: string | undefined;
+}): string;
+export declare function getBillingBalanceForCurrentLogin(): Promise<number | null>;
+export declare function createBillingCheckoutForCurrentLogin(options: {
+    creditsUsd: number;
+    returnUrl?: string | undefined;
+}): Promise<BillingCheckoutSessionResponse>;
+export declare function openDextoBillingPage(options: {
+    url?: string | undefined;
+}): Promise<void>;
+//# sourceMappingURL=billing.d.ts.map

package/dist/cli/auth/billing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/billing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,iBAAiB,CAAC;AAUtE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE;IAC1C,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAChC,GAAG,MAAM,CAQT;AAED,wBAAsB,gCAAgC,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQ/E;AAED,wBAAsB,oCAAoC,CAAC,OAAO,EAAE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAU1C;AAED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAE/F"}

package/dist/cli/auth/billing.js

@@ -0,0 +1,35 @@
+import { getDextoApiClient } from './api-client.js';
+import { openBrowserUrl } from './browser-launch.js';
+import { DEXTO_CREDITS_URL } from './constants.js';
+import { getAuthTokenQuietly } from './service.js';
+function notLoggedInError() {
+    return new Error('Not logged in to Dexto');
+}
+export function buildDextoBillingUrl(options) {
+    const url = new URL(options.baseUrl ?? DEXTO_CREDITS_URL);
+    if (typeof options.creditsUsd === 'number' && Number.isFinite(options.creditsUsd)) {
+        url.searchParams.set('credits_usd', String(options.creditsUsd));
+    }
+    return url.toString();
+}
+export async function getBillingBalanceForCurrentLogin() {
+    const authToken = await getAuthTokenQuietly();
+    if (!authToken) {
+        return null;
+    }
+    const response = await getDextoApiClient().getBillingBalance(authToken, {});
+    return response.creditsUsd;
+}
+export async function createBillingCheckoutForCurrentLogin(options) {
+    const authToken = await getAuthTokenQuietly();
+    if (!authToken) {
+        throw notLoggedInError();
+    }
+    return getDextoApiClient().createBillingCheckoutSession(authToken, {
+        ...options,
+        returnUrl: options.returnUrl ?? DEXTO_CREDITS_URL,
+    });
+}
+export async function openDextoBillingPage(options) {
+    await openBrowserUrl(options.url ?? DEXTO_CREDITS_URL);
+}

package/dist/cli/auth/browser-launch.d.ts

@@ -3,4 +3,5 @@ export interface BrowserLaunchContext {
     platform: NodeJS.Platform;
 }
 export declare function shouldAttemptBrowserLaunch(context?: BrowserLaunchContext): boolean;
+export declare function openBrowserUrl(url: string, context?: BrowserLaunchContext): Promise<void>;
 //# sourceMappingURL=browser-launch.d.ts.map

package/dist/cli/auth/browser-launch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browser-launch.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/browser-launch.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,oBAAoB;IACjC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC7B;AAKD,wBAAgB,0BAA0B,CACtC,OAAO,GAAE,oBAAuE,GACjF,OAAO,CAwBT"}
+{"version":3,"file":"browser-launch.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/browser-launch.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,oBAAoB;IACjC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC;CAC7B;AAKD,wBAAgB,0BAA0B,CACtC,OAAO,GAAE,oBAAuE,GACjF,OAAO,CAwBT;AAED,wBAAsB,cAAc,CAChC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,oBAAuE,GACjF,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/cli/auth/browser-launch.js

@@ -1,5 +1,6 @@
 // packages/cli/src/cli/auth/browser-launch.ts
 // Environment checks for deciding whether automatic browser launch is likely to work.
+import open from 'open';
 const BROWSER_BLOCKLIST = new Set(['www-browser', 'none', 'false', '0']);
 const DISPLAY_ENV_VARS = ['DISPLAY', 'WAYLAND_DISPLAY', 'MIR_SOCKET'];
 export function shouldAttemptBrowserLaunch(context = { env: process.env, platform: process.platform }) {
@@ -22,3 +23,9 @@ export function shouldAttemptBrowserLaunch(context = { env: process.env, platfor
     }
     return true;
 }
+export async function openBrowserUrl(url, context = { env: process.env, platform: process.platform }) {
+    if (!shouldAttemptBrowserLaunch(context)) {
+        throw new Error('Automatic browser launch is unavailable in this environment');
+    }
+    await open(url, { wait: false });
+}

package/dist/cli/auth/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/constants.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,YAAY,QAAyE,CAAC;AACnG,eAAO,MAAM,iBAAiB,QAEwL,CAAC;AAEvN;;GAEG;AACH,eAAO,MAAM,aAAa,QAAsD,CAAC;AAEjF;;GAEG;AACH,eAAO,MAAM,kBAAkB,QAAgE,CAAC;AAEhG;;GAEG;AACH,eAAO,MAAM,iBAAiB,QAC+C,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/constants.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,YAAY,QAAyE,CAAC;AACnG,eAAO,MAAM,iBAAiB,QAEwL,CAAC;AAEvN;;GAEG;AACH,eAAO,MAAM,aAAa,QAAsD,CAAC;AAEjF;;GAEG;AACH,eAAO,MAAM,kBAAkB,QAAgE,CAAC;AAEhG;;GAEG;AACH,eAAO,MAAM,iBAAiB,QACwD,CAAC"}

package/dist/cli/auth/constants.js

@@ -30,4 +30,4 @@ export const DEXTO_PLATFORM_URL = process.env.DEXTO_PLATFORM_URL || 'https://pla
 /**
  * Dexto Nova credits purchase URL
  */
-export const DEXTO_CREDITS_URL = process.env.DEXTO_CREDITS_URL || 'https://app.dexto.ai/dashboard/billing';
+export const DEXTO_CREDITS_URL = process.env.DEXTO_CREDITS_URL || 'https://app.dexto.ai/dashboard/settings/billing';

package/dist/cli/auth/dexto-api-key.d.ts

@@ -22,8 +22,8 @@ export declare function removeDextoApiKeyFromEnv(options?: {
  *
  * - If a local key exists and validates, it is re-saved to .env (sync) and returned.
  * - If a local key exists but is invalid, it is rotated (regenerated) and returned.
- * - If no local key exists, a key is provisioned. If one exists server-side but can't
- *   be returned, it is regenerated to obtain the value.
+ * - If no local key exists, a managed key is provisioned. If a same-name managed key
+ *   already exists server-side, provisioning rotates it to obtain a fresh secret value.
  *
  * Returns `null` if provisioning fails (OAuth login can still succeed without it).
  */

package/dist/cli/auth/dexto-api-key.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dexto-api-key.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/dexto-api-key.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,+BAA+B,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAEvF,MAAM,WAAW,0BAA0B;IACvC,KAAK,EAAE,+BAA+B,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACrC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,0BAA0B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CACzE;AAaD;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BxE;AAED,wBAAsB,wBAAwB,CAAC,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC;IAC9F,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACzB,CAAC,CAsDD;AAED;;;;;;;;;GASG;AACH,wBAAsB,6BAA6B,CAC/C,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,wBAA6B,GACvC,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAAC,CAkE/D"}
+{"version":3,"file":"dexto-api-key.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/dexto-api-key.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,+BAA+B,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,CAAC;AAEvF,MAAM,WAAW,0BAA0B;IACvC,KAAK,EAAE,+BAA+B,CAAC;IACvC,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACrC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,0BAA0B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CACzE;AAaD;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA4BxE;AAED,wBAAsB,wBAAwB,CAAC,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC;IAC9F,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACzB,CAAC,CAsDD;AAED;;;;;;;;;GASG;AACH,wBAAsB,6BAA6B,CAC/C,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,wBAA6B,GACvC,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,CAAC,CA6D/D"}

package/dist/cli/auth/dexto-api-key.js

@@ -97,8 +97,8 @@ export async function removeDextoApiKeyFromEnv(options = {}) {
  *
  * - If a local key exists and validates, it is re-saved to .env (sync) and returned.
  * - If a local key exists but is invalid, it is rotated (regenerated) and returned.
- * - If no local key exists, a key is provisioned. If one exists server-side but can't
- *   be returned, it is regenerated to obtain the value.
+ * - If no local key exists, a managed key is provisioned. If a same-name managed key
+ *   already exists server-side, provisioning rotates it to obtain a fresh secret value.
  *
  * Returns `null` if provisioning fails (OAuth login can still succeed without it).
  */
@@ -137,11 +137,7 @@ export async function ensureDextoApiKeyForAuthToken(authToken, options = {}) {
             return { dextoApiKey: rotated.dextoApiKey, keyId: rotated.keyId };
         }
         status('info', 'Provisioning Dexto API key...');
-        let provisioned = await apiClient.provisionDextoApiKey(authToken);
-        if (!provisioned.isNewKey) {
-            status('warning', 'Key exists on server, regenerating...');
-            provisioned = await apiClient.provisionDextoApiKey(authToken, 'Dexto CLI Key', true);
-        }
+        const provisioned = await apiClient.provisionDextoApiKey(authToken);
         await storeAuth({
             ...auth,
             dextoApiKey: provisioned.dextoApiKey,

package/dist/cli/auth/index.d.ts

@@ -1,8 +1,9 @@
-export { type AuthConfig, storeAuth, loadAuth, removeAuth, isAuthenticated, getAuthToken, getDextoApiKey, getAuthFilePath, } from './service.js';
+export { type AuthConfig, storeAuth, loadAuth, removeAuth, isAuthenticated, getAuthToken, getAuthTokenQuietly, getDextoApiKey, getAuthFilePath, } from './service.js';
 export { type OAuthResult } from './oauth.js';
 export { type DeviceLoginPrompt, performDeviceCodeLogin } from './device.js';
 export { type PersistOAuthLoginOptions, type PersistedLoginResult, persistOAuthLoginResult, } from './login-persistence.js';
 export { type UsageSummaryResponse, DextoApiClient, getDextoApiClient } from './api-client.js';
 export { SUPABASE_URL, SUPABASE_ANON_KEY, DEXTO_API_URL, DEXTO_PLATFORM_URL } from './constants.js';
+export { buildDextoBillingUrl, getBillingBalanceForCurrentLogin, createBillingCheckoutForCurrentLogin, openDextoBillingPage, } from './billing.js';
 export { type DextoApiKeyProvisionStatus, type DextoApiKeyProvisionStatusLevel, type EnsureDextoApiKeyOptions, ensureDextoApiKeyForAuthToken, saveDextoApiKeyToEnv, removeDextoApiKeyFromEnv, } from './dexto-api-key.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/cli/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACH,KAAK,UAAU,EACf,SAAS,EACT,QAAQ,EACR,UAAU,EACV,eAAe,EACf,YAAY,EACZ,cAAc,EACd,eAAe,GAClB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAE,KAAK,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE7E,OAAO,EACH,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,uBAAuB,GAC1B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,KAAK,oBAAoB,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE/F,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpG,OAAO,EACH,KAAK,0BAA0B,EAC/B,KAAK,+BAA+B,EACpC,KAAK,wBAAwB,EAC7B,6BAA6B,EAC7B,oBAAoB,EACpB,wBAAwB,GAC3B,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACH,KAAK,UAAU,EACf,SAAS,EACT,QAAQ,EACR,UAAU,EACV,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,eAAe,GAClB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAE,KAAK,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE7E,OAAO,EACH,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,uBAAuB,GAC1B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,KAAK,oBAAoB,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE/F,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpG,OAAO,EACH,oBAAoB,EACpB,gCAAgC,EAChC,oCAAoC,EACpC,oBAAoB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACH,KAAK,0BAA0B,EAC/B,KAAK,+BAA+B,EACpC,KAAK,wBAAwB,EAC7B,6BAA6B,EAC7B,oBAAoB,EACpB,wBAAwB,GAC3B,MAAM,oBAAoB,CAAC"}

package/dist/cli/auth/index.js

@@ -1,8 +1,9 @@
 // packages/cli/src/cli/auth/index.ts
 // Public exports for auth module
-export { storeAuth, loadAuth, removeAuth, isAuthenticated, getAuthToken, getDextoApiKey, getAuthFilePath, } from './service.js';
+export { storeAuth, loadAuth, removeAuth, isAuthenticated, getAuthToken, getAuthTokenQuietly, getDextoApiKey, getAuthFilePath, } from './service.js';
 export { performDeviceCodeLogin } from './device.js';
 export { persistOAuthLoginResult, } from './login-persistence.js';
 export { DextoApiClient, getDextoApiClient } from './api-client.js';
 export { SUPABASE_URL, SUPABASE_ANON_KEY, DEXTO_API_URL, DEXTO_PLATFORM_URL } from './constants.js';
+export { buildDextoBillingUrl, getBillingBalanceForCurrentLogin, createBillingCheckoutForCurrentLogin, openDextoBillingPage, } from './billing.js';
 export { ensureDextoApiKeyForAuthToken, saveDextoApiKeyToEnv, removeDextoApiKeyFromEnv, } from './dexto-api-key.js';

package/dist/cli/auth/login-persistence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login-persistence.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/login-persistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,0BAA0B,EAAiC,MAAM,oBAAoB,CAAC;AACpG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG9C,MAAM,WAAW,wBAAwB;IACrC,iBAAiB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,0BAA0B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAClF;AAED,MAAM,WAAW,oBAAoB;IACjC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAsB,uBAAuB,CACzC,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,wBAA6B,GACvC,OAAO,CAAC,oBAAoB,CAAC,CAsB/B"}
+{"version":3,"file":"login-persistence.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/login-persistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,0BAA0B,EAAiC,MAAM,oBAAoB,CAAC;AACpG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG9C,MAAM,WAAW,wBAAwB;IACrC,iBAAiB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,0BAA0B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAClF;AAED,MAAM,WAAW,oBAAoB;IACjC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;CAC3B;AA4CD,wBAAsB,uBAAuB,CACzC,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,wBAA6B,GACvC,OAAO,CAAC,oBAAoB,CAAC,CAyB/B"}

package/dist/cli/auth/login-persistence.js

@@ -1,7 +1,36 @@
 import { ensureDextoApiKeyForAuthToken } from './dexto-api-key.js';
-import { storeAuth } from './service.js';
+import { loadAuth, storeAuth } from './service.js';
+function isSameAuthenticatedUser(existingAuth, user) {
+    if (!existingAuth || !user) {
+        return false;
+    }
+    if (existingAuth.userId && user.id) {
+        return existingAuth.userId === user.id;
+    }
+    if (existingAuth.email && user.email) {
+        return existingAuth.email.toLowerCase() === user.email.toLowerCase();
+    }
+    return false;
+}
+function getPreservedDextoApiKey(existingAuth, user) {
+    if (!existingAuth?.dextoApiKey || !isSameAuthenticatedUser(existingAuth, user)) {
+        return null;
+    }
+    const isProvisionedKey = existingAuth.dextoApiKeySource === 'provisioned' ||
+        (existingAuth.dextoApiKeySource === undefined && Boolean(existingAuth.dextoKeyId));
+    if (!isProvisionedKey) {
+        return null;
+    }
+    return {
+        dextoApiKey: existingAuth.dextoApiKey,
+        ...(existingAuth.dextoKeyId ? { dextoKeyId: existingAuth.dextoKeyId } : {}),
+        dextoApiKeySource: 'provisioned',
+    };
+}
 export async function persistOAuthLoginResult(result, options = {}) {
+    const existingAuth = await loadAuth();
     const expiresAt = result.expiresIn ? Date.now() + result.expiresIn * 1000 : undefined;
+    const preservedDextoApiKey = getPreservedDextoApiKey(existingAuth, result.user);
     await storeAuth({
         token: result.accessToken,
         refreshToken: result.refreshToken,
@@ -9,6 +38,7 @@ export async function persistOAuthLoginResult(result, options = {}) {
         email: result.user?.email,
         createdAt: Date.now(),
         expiresAt,
+        ...(preservedDextoApiKey ?? {}),
     });
     const ensured = await ensureDextoApiKeyForAuthToken(result.accessToken, {
         onStatus: options.onProvisionStatus,
@@ -16,7 +46,7 @@ export async function persistOAuthLoginResult(result, options = {}) {
     return {
         email: result.user?.email,
         userId: result.user?.id,
-        keyId: ensured?.keyId ?? undefined,
-        hasDextoApiKey: Boolean(ensured?.dextoApiKey),
+        keyId: ensured?.keyId ?? preservedDextoApiKey?.dextoKeyId ?? undefined,
+        hasDextoApiKey: Boolean(ensured?.dextoApiKey ?? preservedDextoApiKey?.dextoApiKey),
     };
 }

package/dist/cli/auth/service.d.ts

@@ -16,6 +16,7 @@ export declare function loadAuth(): Promise<AuthConfig | null>;
 export declare function removeAuth(): Promise<void>;
 export declare function isAuthenticated(): Promise<boolean>;
 export declare function getAuthToken(): Promise<string | null>;
+export declare function getAuthTokenQuietly(): Promise<string | null>;
 export declare function getDextoApiKey(): Promise<string | null>;
 export declare function getAuthFilePath(): string;
 //# sourceMappingURL=service.d.ts.map

package/dist/cli/auth/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/service.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,UAAU;IACvB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,iBAAiB,CAAC,EAAE,aAAa,GAAG,eAAe,GAAG,SAAS,CAAC;CACnE;AAkBD,wBAAsB,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAQjE;AAED,wBAAsB,QAAQ,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA4B3D;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAOhD;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAGxD;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CA4C3D;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQ7D;AA8CD,wBAAgB,eAAe,IAAI,MAAM,CAExC"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/service.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,UAAU;IACvB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,iBAAiB,CAAC,EAAE,aAAa,GAAG,eAAe,GAAG,SAAS,CAAC;CACnE;AAkBD,wBAAsB,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAQjE;AAED,wBAAsB,QAAQ,IAAI,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA4B3D;AAED,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAOhD;AAED,wBAAsB,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC,CAGxD;AAsDD,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAE3D;AAED,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAElE;AAED,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQ7D;AA8CD,wBAAgB,eAAe,IAAI,MAAM,CAExC"}

package/dist/cli/auth/service.js

@@ -64,7 +64,7 @@ export async function isAuthenticated() {
     const auth = await loadAuth();
     return auth !== null;
 }
-export async function getAuthToken() {
+async function resolveAuthToken(options) {
     const auth = await loadAuth();
     if (!auth) {
         return null;
@@ -81,11 +81,15 @@ export async function getAuthToken() {
         return null;
     }
     logger.debug('Access token expired or expiring soon, refreshing...');
-    console.log(chalk.cyan('🔄 Access token expiring soon, refreshing...'));
+    if (!options.quiet) {
+        console.log(chalk.cyan('🔄 Access token expiring soon, refreshing...'));
+    }
     const refreshResult = await refreshAccessToken(auth.refreshToken);
     if (!refreshResult) {
         logger.debug('Token refresh failed, removing auth');
-        console.log(chalk.red('❌ Token refresh failed. Please login again.'));
+        if (!options.quiet) {
+            console.log(chalk.red('❌ Token refresh failed. Please login again.'));
+        }
         await removeAuth();
         return null;
     }
@@ -97,9 +101,17 @@ export async function getAuthToken() {
         expiresAt: newExpiresAt,
     });
     logger.debug('Token refreshed successfully');
-    console.log(chalk.green('✅ Access token refreshed successfully'));
+    if (!options.quiet) {
+        console.log(chalk.green('✅ Access token refreshed successfully'));
+    }
     return refreshResult.accessToken;
 }
+export async function getAuthToken() {
+    return resolveAuthToken({ quiet: false });
+}
+export async function getAuthTokenQuietly() {
+    return resolveAuthToken({ quiet: true });
+}
 export async function getDextoApiKey() {
     // Explicit env var takes priority (for CI, testing, account override)
     if (process.env.DEXTO_API_KEY?.trim()) {

package/dist/cli/cloud-chat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloud-chat.d.ts","sourceRoot":"","sources":["../../src/cli/cloud-chat.ts"],"names":[],"mappings":"AAAA,OAAO,EAIH,KAAK,aAAa,EASrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAGjE,MAAM,WAAW,wBAAwB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,KAAK,YAAY,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAK1D,KAAK,qBAAqB,GAAG,UAAU,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AASrF,KAAK,gBAAgB,GAAG,eAAe,CAAC;AAkNxC,wBAAgB,0BAA0B,CACtC,QAAQ,EAAE,aAAa,CAAC,mBAAmB,CAAC,GAC7C,qBAAqB,GAAG,IAAI,CA8B9B;AA4CD,wBAAgB,uBAAuB,CACnC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,MAAM,GACrB,gBAAgB,CAqhBlB;AAED,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBxF"}
+{"version":3,"file":"cloud-chat.d.ts","sourceRoot":"","sources":["../../src/cli/cloud-chat.ts"],"names":[],"mappings":"AAAA,OAAO,EAIH,KAAK,aAAa,EASrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAGjE,MAAM,WAAW,wBAAwB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,KAAK,YAAY,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAK1D,KAAK,qBAAqB,GAAG,UAAU,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AASrF,KAAK,gBAAgB,GAAG,eAAe,CAAC;AAkNxC,wBAAgB,0BAA0B,CACtC,QAAQ,EAAE,aAAa,CAAC,mBAAmB,CAAC,GAC7C,qBAAqB,GAAG,IAAI,CA8B9B;AA4CD,wBAAgB,uBAAuB,CACnC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,MAAM,GACrB,gBAAgB,CAuhBlB;AAED,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBxF"}

package/dist/cli/cloud-chat.js

@@ -504,6 +504,7 @@ export function createCloudAgentBackend(client, cloudAgentId) {
             throw unsupportedCloudFeature('Session forking');
         }),
         getCurrentLLMConfig: ((sessionId) => currentLLMConfig(sessionId)),
+        hasSessionLLMOverride: (() => false),
         switchLLM: (async () => {
             throw unsupportedCloudFeature('Model switching');
         }),

package/dist/cli/commands/auth/login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/auth/login.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,mBAAmB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAgBD,wBAAsB,kBAAkB,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiEzF;AAGD,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAErD;AAED,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CA6BvD"}
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/auth/login.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,mBAAmB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAgBD,wBAAsB,kBAAkB,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiEzF;AAGD,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAErD;AAED,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CA6BvD"}

package/dist/cli/commands/auth/login.js

@@ -1,8 +1,7 @@
 // packages/cli/src/cli/commands/auth/login.ts
 import chalk from 'chalk';
 import * as p from '@clack/prompts';
-import { getDextoApiClient, isAuthenticated, loadAuth, performDeviceCodeLogin, persistOAuthLoginResult, storeAuth, ensureDextoApiKeyForAuthToken, } from '../../auth/index.js';
-import { logger } from '@dexto/core';
+import { getDextoApiClient, isAuthenticated, loadAuth, performDeviceCodeLogin, persistOAuthLoginResult, storeAuth, } from '../../auth/index.js';
 function isCancellationError(errorMessage) {
     const lower = errorMessage.toLowerCase();
     return (lower.includes('canceled') ||
@@ -130,17 +129,17 @@ async function handleTokenLogin(tokenInput) {
     const spinner = p.spinner();
     spinner.start('Verifying token...');
     try {
-        const isValid = await verifyToken(token);
-        if (!isValid) {
+        const apiClient = getDextoApiClient();
+        const user = await apiClient.fetchSupabaseUser(token);
+        if (!user) {
             spinner.stop('Invalid token');
             throw new Error('Token verification failed');
         }
         spinner.stop('Token verified!');
-        await storeAuth({
-            token,
-            createdAt: Date.now(),
+        await persistOAuthLoginResult({
+            accessToken: token,
+            user,
         });
-        await ensureDextoApiKeyForAuthToken(token);
         return true;
     }
     catch (error) {
@@ -148,13 +147,3 @@ async function handleTokenLogin(tokenInput) {
         throw error;
     }
 }
-async function verifyToken(token) {
-    try {
-        const apiClient = getDextoApiClient();
-        return apiClient.validateSupabaseAccessToken(token);
-    }
-    catch (error) {
-        logger.debug(`Token verification failed: ${error instanceof Error ? error.message : String(error)}`);
-        return false;
-    }
-}

package/dist/cli/commands/billing/status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/billing/status.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,wBAAsB,0BAA0B,CAAC,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA4E/F"}
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/billing/status.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,wBAAsB,0BAA0B,CAAC,OAAO,GAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA4E/F"}

package/dist/cli/commands/billing/status.js

@@ -1,7 +1,6 @@
 // packages/cli/src/cli/commands/billing/status.ts
 import chalk from 'chalk';
-import open from 'open';
-import { loadAuth, getDextoApiClient } from '../../auth/index.js';
+import { loadAuth, getDextoApiClient, openDextoBillingPage } from '../../auth/index.js';
 import { DEXTO_CREDITS_URL } from '../../auth/constants.js';
 /**
  * Handle the `dexto billing` command.
@@ -72,7 +71,7 @@ export async function handleBillingStatusCommand(options = {}) {
 }
 async function openCreditsPage() {
     try {
-        await open(DEXTO_CREDITS_URL);
+        await openDextoBillingPage({});
     }
     catch (error) {
         const errorMessage = error instanceof Error ? error.message : String(error);

package/dist/cli/commands/setup.js

@@ -13,7 +13,7 @@ import { executeCommand } from '../utils/self-management.js';
 import { requiresSetup } from '../utils/setup-utils.js';
 import { canUseDextoProvider } from '../utils/dexto-setup.js';
 import { handleAutoLogin } from './auth/login.js';
-import { loadAuth, getDextoApiClient } from '../auth/index.js';
+import { loadAuth, getBillingBalanceForCurrentLogin, openDextoBillingPage } from '../auth/index.js';
 import { DEXTO_CREDITS_URL } from '../auth/constants.js';
 import * as p from '@clack/prompts';
 import { capture } from '../../analytics/index.js';
@@ -918,7 +918,7 @@ async function handleDextoProviderSetup(options = {}) {
 }
 async function openCreditsPage() {
     try {
-        await open(DEXTO_CREDITS_URL);
+        await openDextoBillingPage({});
     }
     catch (error) {
         const errorMessage = error instanceof Error ? error.message : String(error);
@@ -928,12 +928,7 @@ async function openCreditsPage() {
 }
 async function getCreditsBalance() {
     try {
-        const auth = await loadAuth();
-        if (!auth?.dextoApiKey)
-            return null;
-        const apiClient = getDextoApiClient();
-        const usage = await apiClient.getUsageSummary(auth.dextoApiKey);
-        return usage.credits_usd;
+        return await getBillingBalanceForCurrentLogin();
     }
     catch {
         return null;

package/dist/cli/modes/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../src/cli/modes/cli.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAuBpD,wBAAsB,UAAU,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAuQxE"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../src/cli/modes/cli.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAuBpD,wBAAsB,UAAU,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA2QxE"}

package/dist/cli/modes/cli.js

@@ -166,7 +166,7 @@ export async function runCliMode(context) {
         console.info = noOp;
         let inkError = undefined;
         try {
-            const [{ startInkCliRefactored, setTuiRuntimeServices }, { registerGracefulShutdown }, { applyLayeredEnvironmentLoading }, { getProviderDisplayName, isValidApiKeyFormat, getProviderInstructions }, { performDeviceCodeLogin, persistOAuthLoginResult, ensureDextoApiKeyForAuthToken, loadAuth, storeAuth, removeAuth, removeDextoApiKeyFromEnv, }, { isUsingDextoCredits }, { canUseDextoProvider }, { capture },] = await Promise.all([
+            const [{ startInkCliRefactored, setTuiRuntimeServices }, { registerGracefulShutdown }, { applyLayeredEnvironmentLoading }, { getProviderDisplayName, isValidApiKeyFormat, getProviderInstructions }, { performDeviceCodeLogin, persistOAuthLoginResult, ensureDextoApiKeyForAuthToken, loadAuth, storeAuth, removeAuth, removeDextoApiKeyFromEnv, buildDextoBillingUrl, openDextoBillingPage, }, { isUsingDextoCredits }, { canUseDextoProvider }, { capture },] = await Promise.all([
                 import('@dexto/tui'),
                 import('../../utils/graceful-shutdown.js'),
                 import('../../utils/env.js'),
@@ -194,6 +194,8 @@ export async function runCliMode(context) {
                 removeDextoApiKeyFromEnv,
                 isUsingDextoCredits,
                 canUseDextoProvider,
+                buildDextoBillingUrl,
+                openDextoBillingPage,
             });
             await startInkCliRefactored(agent, cliSessionId, {
                 updateInfo: cliUpdateInfo ?? undefined,