dexto 1.7.1 → 1.8.0

package/README.md

@@ -116,7 +116,7 @@ Upgrade/uninstall and migration troubleshooting live in docs:
 ### Run
 
 ```bash
-# Start Dexto
+# Start Dexto (launches setup wizard on first run)
 dexto
 ```
 
@@ -132,8 +132,6 @@ dexto --help                                       # Explore all options
 
 **Inside the interactive CLI**, type `/` to explore commands—switch models, manage sessions, configure tools, and more.
 
-If Dexto has not been set up yet, the first interactive launch opens the generic `dexto setup` flow before starting. Existing provider keys in your environment are detected there, so you can keep startup simple without inheriting the wrong bundled provider by accident.
-
 ### Manage Settings
 
 ```bash
@@ -194,8 +192,6 @@ permissions:
     alwaysAllow:
       - mcp--filesystem--read_file
       - mcp--filesystem--list_directory
-    alwaysDeny:
-      - mcp--filesystem--delete_file
 ```
 
 Agents remember which tools you've approved per session.
@@ -597,8 +593,9 @@ Test tools before deploying:
 Usage: dexto [options] [command] [prompt...]
 
 Basic Usage:
-  dexto or dexto --mode cli  Start interactive CLI (default)
-  dexto "query"              Run one-shot query
+  dexto                    Start web UI (default)
+  dexto "query"            Run one-shot query
+  dexto --mode cli         Interactive CLI
 
 Session Management:
   dexto -c                 Continue last conversation

package/dist/agents/coding-agent/coding-agent.yml

@@ -130,11 +130,6 @@ permissions:
       - wait_for       # Wait for background tasks without approval
       - check_task     # Check background tasks without approval
 
-    # Tools that are always denied (dangerous operations)
-    # Uncomment to restrict certain operations
-    # alwaysDeny:
-    #   - bash_exec  # Require approval for all shell commands
-
 # Compaction configuration - automatically summarizes conversation when context is full
 compaction:
   type: reactive-overflow

package/dist/agents/default-agent.yml

@@ -97,12 +97,6 @@ permissions:
       - mcp--list_directory
       - mcp--list_allowed_directories
 
-    # Tools that are always denied (high-risk, destructive operations)
-    # Deny list takes precedence over allow list
-    # alwaysDeny:
-    #   - mcp--filesystem--delete_file
-    #   - mcp--playwright--execute_script
-
 # Elicitation configuration - separate from tool confirmation
 # Allows auto-approve for tools while still supporting user input requests
 elicitation:

package/dist/cli/auth/api-client.d.ts

@@ -7,11 +7,13 @@ export interface DeviceCodeStartResponse {
     expiresIn: number;
     interval: number;
 }
-export interface DeviceCodeTokenResponse {
-    accessToken: string;
-    refreshToken?: string | null;
-    expiresIn?: number | null;
-    expiresAt?: number | null;
+export interface DeviceCodeApiKeyResponse {
+    id: string;
+    keyDisplay: string;
+    name: string;
+    scopes: string[];
+    status: string;
+    fullKey: string;
 }
 export type DeviceCodePollResponse = {
     status: 'pending';
@@ -24,8 +26,8 @@ export type DeviceCodePollResponse = {
 } | {
     status: 'transientError';
 } | {
-    status: 'success';
-    token: DeviceCodeTokenResponse;
+    status: 'approved';
+    apiKey: DeviceCodeApiKeyResponse;
 };
 export interface UsageSummaryResponse {
     credits_usd: number;

package/dist/cli/auth/api-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/api-client.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAwBpD,MAAM,WAAW,uBAAuB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,MAAM,sBAAsB,GAC5B;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GACtB;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,gBAAgB,CAAA;CAAE,GAC5B;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,uBAAuB,CAAA;CAAE,CAAC;AAE5D,MAAM,WAAW,oBAAoB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE;QACP,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,MAAM,CACZ,MAAM,EACN;YACI,QAAQ,EAAE,MAAM,CAAC;YACjB,QAAQ,EAAE,MAAM,CAAC;YACjB,MAAM,EAAE,MAAM,CAAC;SAClB,CACJ,CAAC;KACL,CAAC;IACF,MAAM,EAAE,KAAK,CAAC;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;KACzB,CAAC,CAAC;CACN;AAED,MAAM,WAAW,sBAAsB;IACnC,UAAU,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,8BAA8B;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;CAC7B;AAED,UAAU,cAAc;IACpB,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACpC;AAuWD;;GAEG;AACH,qBAAa,cAAc;IACvB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;gBAGhC,OAAO,GACD,MAAM,GACN;QACI,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACnC;IAehB,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,cAAc;YAIR,mBAAmB;YAoBnB,oBAAoB;YAkCpB,oBAAoB;IAoBlC;;OAEG;IACG,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwB3D;;;OAGG;IACG,oBAAoB,CACtB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,MAAwB,EAC9B,UAAU,GAAE,OAAe,GAC5B,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAiClD;;OAEG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA2BpE;;OAEG;IACG,iBAAiB,CACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,GACxB,OAAO,CAAC,sBAAsB,CAAC;IA6BlC;;OAEG;IACG,4BAA4B,CAC9B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;KACpC,GACF,OAAO,CAAC,8BAA8B,CAAC;IAyC1C;;OAEG;IACG,oBAAoB,CACtB,MAAM,GAAE,MAAoB,EAC5B,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,uBAAuB,CAAC;IAyBnC;;OAEG;IACG,mBAAmB,CACrB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IAuFlC;;OAEG;IACG,iBAAiB,CACnB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAyBzC;;OAEG;IACG,2BAA2B,CAC7B,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,OAAO,CAAC;CAItB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,CAElD"}
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/api-client.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAwBpD,MAAM,WAAW,uBAAuB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,wBAAwB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,sBAAsB,GAC5B;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,UAAU,CAAA;CAAE,GACtB;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,QAAQ,CAAA;CAAE,GACpB;IAAE,MAAM,EAAE,gBAAgB,CAAA;CAAE,GAC5B;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,wBAAwB,CAAA;CAAE,CAAC;AAE/D,MAAM,WAAW,oBAAoB;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE;QACP,cAAc,EAAE,MAAM,CAAC;QACvB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,MAAM,CACZ,MAAM,EACN;YACI,QAAQ,EAAE,MAAM,CAAC;YACjB,QAAQ,EAAE,MAAM,CAAC;YACjB,MAAM,EAAE,MAAM,CAAC;SAClB,CACJ,CAAC;KACL,CAAC;IACF,MAAM,EAAE,KAAK,CAAC;QACV,SAAS,EAAE,MAAM,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;KACzB,CAAC,CAAC;CACN;AAED,MAAM,WAAW,sBAAsB;IACnC,UAAU,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,8BAA8B;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;CAC7B;AAED,UAAU,cAAc;IACpB,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CACpC;AAoWD;;GAEG;AACH,qBAAa,cAAc;IACvB,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAU;gBAGhC,OAAO,GACD,MAAM,GACN;QACI,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACpC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;KACnC;IAehB,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,cAAc;YAIR,mBAAmB;YAoBnB,oBAAoB;YAkCpB,oBAAoB;IAoBlC;;OAEG;IACG,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAwB3D;;;OAGG;IACG,oBAAoB,CACtB,SAAS,EAAE,MAAM,EACjB,IAAI,GAAE,MAAwB,EAC9B,UAAU,GAAE,OAAe,GAC5B,OAAO,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAiClD;;OAEG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA2BpE;;OAEG;IACG,iBAAiB,CACnB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,cAAc,GACxB,OAAO,CAAC,sBAAsB,CAAC;IA6BlC;;OAEG;IACG,4BAA4B,CAC9B,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC/B,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;KACpC,GACF,OAAO,CAAC,8BAA8B,CAAC;IAyC1C;;OAEG;IACG,oBAAoB,CACtB,MAAM,GAAE,MAAoB,EAC5B,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,uBAAuB,CAAC;IAyBnC;;OAEG;IACG,mBAAmB,CACrB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,sBAAsB,CAAC;IA6DlC;;OAEG;IACG,iBAAiB,CACnB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;IAyBzC;;OAEG;IACG,2BAA2B,CAC7B,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,cAAmB,GAC7B,OAAO,CAAC,OAAO,CAAC;CAItB;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,cAAc,CAElD"}

package/dist/cli/auth/api-client.js

@@ -30,16 +30,11 @@ function parseDeviceCodeStartResponse(payload) {
     if (typeof payload !== 'object' || payload === null) {
         throw new Error('Invalid device start response');
     }
-    const deviceCode = parseString(Reflect.get(payload, 'device_code')) ??
-        parseString(Reflect.get(payload, 'deviceCode'));
-    const userCode = parseString(Reflect.get(payload, 'user_code')) ??
-        parseString(Reflect.get(payload, 'userCode'));
-    const verificationUrl = parseString(Reflect.get(payload, 'verification_uri')) ??
-        parseString(Reflect.get(payload, 'verificationUrl'));
-    const verificationUrlComplete = parseString(Reflect.get(payload, 'verification_uri_complete')) ??
-        parseString(Reflect.get(payload, 'verificationUrlComplete'));
-    const expiresIn = parseNumber(Reflect.get(payload, 'expires_in')) ??
-        parseNumber(Reflect.get(payload, 'expiresIn'));
+    const deviceCode = parseString(Reflect.get(payload, 'deviceCode'));
+    const userCode = parseString(Reflect.get(payload, 'userCode'));
+    const verificationUrl = parseString(Reflect.get(payload, 'verificationUri'));
+    const verificationUrlComplete = parseString(Reflect.get(payload, 'verificationUriComplete'));
+    const expiresIn = parseNumber(Reflect.get(payload, 'expiresIn'));
     const interval = parseNumber(Reflect.get(payload, 'interval'));
     if (!deviceCode || !userCode || !verificationUrl || !expiresIn || !interval) {
         throw new Error('Device start response missing required fields');
@@ -53,26 +48,41 @@ function parseDeviceCodeStartResponse(payload) {
         interval,
     };
 }
-function parseDeviceCodeTokenResponse(payload) {
+function parseStringArray(value) {
+    if (!Array.isArray(value)) {
+        return null;
+    }
+    const strings = value.filter((item) => typeof item === 'string');
+    return strings.length === value.length ? strings : null;
+}
+function parseDeviceCodeApiKeyResponse(payload) {
     if (typeof payload !== 'object' || payload === null) {
         return null;
     }
-    const accessToken = parseString(Reflect.get(payload, 'accessToken')) ??
-        parseString(Reflect.get(payload, 'access_token'));
-    if (!accessToken) {
+    const status = parseString(Reflect.get(payload, 'status'));
+    if (status !== 'approved') {
         return null;
     }
-    const refreshToken = parseString(Reflect.get(payload, 'refreshToken')) ??
-        parseString(Reflect.get(payload, 'refresh_token'));
-    const expiresIn = parseNumber(Reflect.get(payload, 'expiresIn')) ??
-        parseNumber(Reflect.get(payload, 'expires_in'));
-    const expiresAt = parseNumber(Reflect.get(payload, 'expiresAt')) ??
-        parseNumber(Reflect.get(payload, 'expires_at'));
+    const fullKey = parseString(Reflect.get(payload, 'fullKey'));
+    const apiKey = Reflect.get(payload, 'apiKey');
+    if (!fullKey || typeof apiKey !== 'object' || apiKey === null) {
+        throw new Error('Device login approved response missing API key fields');
+    }
+    const id = parseString(Reflect.get(apiKey, 'id'));
+    const keyDisplay = parseString(Reflect.get(apiKey, 'keyDisplay'));
+    const name = parseString(Reflect.get(apiKey, 'name'));
+    const scopes = parseStringArray(Reflect.get(apiKey, 'scopes'));
+    const keyStatus = parseString(Reflect.get(apiKey, 'status'));
+    if (!id || !keyDisplay || !name || !scopes || !keyStatus) {
+        throw new Error('Device login approved response missing API key fields');
+    }
     return {
-        accessToken,
-        refreshToken,
-        expiresIn,
-        expiresAt,
+        id,
+        keyDisplay,
+        name,
+        scopes,
+        status: keyStatus,
+        fullKey,
     };
 }
 function parseDeviceErrorCode(payload) {
@@ -81,11 +91,6 @@ function parseDeviceErrorCode(payload) {
     }
     return parseString(Reflect.get(payload, 'error'));
 }
-function isTransientDevicePollErrorCode(errorCode) {
-    return (errorCode === 'server_error' ||
-        errorCode === 'temporary_unavailable' ||
-        errorCode === 'temporarily_unavailable');
-}
 function parseSupabaseUser(payload) {
     if (typeof payload !== 'object' || payload === null) {
         return null;
@@ -533,7 +538,7 @@ export class DextoApiClient {
                 headers: {
                     'Content-Type': 'application/json',
                 },
-                body: JSON.stringify({ device_code: deviceCode }),
+                body: JSON.stringify({ deviceCode }),
                 signal: this.createRequestSignal(options.signal),
             });
         }
@@ -554,52 +559,25 @@ export class DextoApiClient {
             if (response.status === 429) {
                 return { status: 'slowDown' };
             }
-            const errorCode = parseDeviceErrorCode(payload);
-            if (errorCode === 'authorization_pending') {
-                return { status: 'pending' };
-            }
-            if (errorCode === 'slow_down') {
-                return { status: 'slowDown' };
-            }
-            if (errorCode === 'expired_token') {
-                return { status: 'expired' };
-            }
-            if (errorCode === 'access_denied') {
-                return { status: 'denied' };
-            }
-            if (errorCode && isTransientDevicePollErrorCode(errorCode)) {
-                return { status: 'transientError' };
-            }
             if (response.status >= 500) {
                 return { status: 'transientError' };
             }
+            const errorCode = parseDeviceErrorCode(payload);
             if (errorCode) {
                 throw new Error(`Device login failed: ${errorCode}`);
             }
             throw new Error(`Device login polling failed with status ${response.status}`);
         }
-        const token = parseDeviceCodeTokenResponse(payload);
-        if (token) {
+        const apiKey = parseDeviceCodeApiKeyResponse(payload);
+        if (apiKey) {
             return {
-                status: 'success',
-                token,
+                status: 'approved',
+                apiKey,
             };
         }
         const errorCode = parseDeviceErrorCode(payload);
-        if (errorCode === 'authorization_pending') {
-            return { status: 'pending' };
-        }
-        if (errorCode === 'slow_down') {
-            return { status: 'slowDown' };
-        }
-        if (errorCode === 'expired_token') {
-            return { status: 'expired' };
-        }
-        if (errorCode === 'access_denied') {
-            return { status: 'denied' };
-        }
-        if (errorCode && isTransientDevicePollErrorCode(errorCode)) {
-            return { status: 'transientError' };
+        if (errorCode) {
+            throw new Error(`Device login failed: ${errorCode}`);
         }
         return { status: 'pending' };
     }

package/dist/cli/auth/device.d.ts

@@ -1,4 +1,4 @@
-import type { AuthLoginResult } from './types.js';
+import type { DeviceApiKeyLoginResult } from './types.js';
 export interface DeviceLoginPrompt {
     userCode: string;
     verificationUrl: string;
@@ -10,5 +10,5 @@ export interface DeviceLoginOptionsInput {
     signal?: AbortSignal | undefined;
     onPrompt?: ((prompt: DeviceLoginPrompt) => void | Promise<void>) | undefined;
 }
-export declare function performDeviceCodeLogin(optionsInput?: DeviceLoginOptionsInput): Promise<AuthLoginResult>;
+export declare function performDeviceCodeLogin(optionsInput?: DeviceLoginOptionsInput): Promise<DeviceApiKeyLoginResult>;
 //# sourceMappingURL=device.d.ts.map

package/dist/cli/auth/device.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"device.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/device.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAKlD,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CAChF;AAoDD,wBAAsB,sBAAsB,CACxC,YAAY,GAAE,uBAA4B,GAC3C,OAAO,CAAC,eAAe,CAAC,CAqE1B"}
+{"version":3,"file":"device.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/device.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAI1D,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CAChF;AAoDD,wBAAsB,sBAAsB,CACxC,YAAY,GAAE,uBAA4B,GAC3C,OAAO,CAAC,uBAAuB,CAAC,CA0DlC"}

package/dist/cli/auth/device.js

@@ -74,19 +74,10 @@ export async function performDeviceCodeLogin(optionsInput = {}) {
         if (pollResult.status === 'denied') {
             throw new Error('Device login was denied.');
         }
-        const tokenResponse = pollResult.token;
-        const computedExpiresIn = tokenResponse.expiresIn ??
-            (tokenResponse.expiresAt
-                ? Math.max(0, tokenResponse.expiresAt - Date.now() / 1000)
-                : undefined);
-        const user = await authClient.fetchSupabaseUser(tokenResponse.accessToken, {
-            signal: options.signal ?? undefined,
-        });
         return {
-            accessToken: tokenResponse.accessToken,
-            refreshToken: tokenResponse.refreshToken ?? undefined,
-            expiresIn: computedExpiresIn,
-            user,
+            dextoApiKey: pollResult.apiKey.fullKey,
+            dextoKeyId: pollResult.apiKey.id,
+            dextoKeyDisplay: pollResult.apiKey.keyDisplay,
         };
     }
     throw new Error('Device login timed out. Please restart login.');

package/dist/cli/auth/index.d.ts

@@ -1,7 +1,8 @@
 export { type AuthConfig, storeAuth, loadAuth, removeAuth, isAuthenticated, getAuthToken, getAuthTokenQuietly, getDextoApiKey, getAuthFilePath, } from './service.js';
 export { type OAuthResult } from './oauth.js';
+export { type DeviceApiKeyLoginResult } from './types.js';
 export { type DeviceLoginPrompt, performDeviceCodeLogin } from './device.js';
-export { type PersistOAuthLoginOptions, type PersistedLoginResult, persistOAuthLoginResult, } from './login-persistence.js';
+export { type PersistOAuthLoginOptions, type PersistedLoginResult, persistDeviceApiKeyLoginResult, persistOAuthLoginResult, } from './login-persistence.js';
 export { type UsageSummaryResponse, DextoApiClient, getDextoApiClient } from './api-client.js';
 export { SUPABASE_URL, SUPABASE_ANON_KEY, DEXTO_API_URL, DEXTO_PLATFORM_URL } from './constants.js';
 export { buildDextoBillingUrl, getBillingBalanceForCurrentLogin, createBillingCheckoutForCurrentLogin, openDextoBillingPage, } from './billing.js';

package/dist/cli/auth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACH,KAAK,UAAU,EACf,SAAS,EACT,QAAQ,EACR,UAAU,EACV,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,eAAe,GAClB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAE,KAAK,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE7E,OAAO,EACH,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,uBAAuB,GAC1B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,KAAK,oBAAoB,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE/F,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpG,OAAO,EACH,oBAAoB,EACpB,gCAAgC,EAChC,oCAAoC,EACpC,oBAAoB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACH,KAAK,0BAA0B,EAC/B,KAAK,+BAA+B,EACpC,KAAK,wBAAwB,EAC7B,6BAA6B,EAC7B,oBAAoB,EACpB,wBAAwB,GAC3B,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACH,KAAK,UAAU,EACf,SAAS,EACT,QAAQ,EACR,UAAU,EACV,eAAe,EACf,YAAY,EACZ,mBAAmB,EACnB,cAAc,EACd,eAAe,GAClB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,EAAE,KAAK,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAAE,KAAK,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE7E,OAAO,EACH,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,EACzB,8BAA8B,EAC9B,uBAAuB,GAC1B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,KAAK,oBAAoB,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAE/F,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpG,OAAO,EACH,oBAAoB,EACpB,gCAAgC,EAChC,oCAAoC,EACpC,oBAAoB,GACvB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACH,KAAK,0BAA0B,EAC/B,KAAK,+BAA+B,EACpC,KAAK,wBAAwB,EAC7B,6BAA6B,EAC7B,oBAAoB,EACpB,wBAAwB,GAC3B,MAAM,oBAAoB,CAAC"}

package/dist/cli/auth/index.js

@@ -2,7 +2,7 @@
 // Public exports for auth module
 export { storeAuth, loadAuth, removeAuth, isAuthenticated, getAuthToken, getAuthTokenQuietly, getDextoApiKey, getAuthFilePath, } from './service.js';
 export { performDeviceCodeLogin } from './device.js';
-export { persistOAuthLoginResult, } from './login-persistence.js';
+export { persistDeviceApiKeyLoginResult, persistOAuthLoginResult, } from './login-persistence.js';
 export { DextoApiClient, getDextoApiClient } from './api-client.js';
 export { SUPABASE_URL, SUPABASE_ANON_KEY, DEXTO_API_URL, DEXTO_PLATFORM_URL } from './constants.js';
 export { buildDextoBillingUrl, getBillingBalanceForCurrentLogin, createBillingCheckoutForCurrentLogin, openDextoBillingPage, } from './billing.js';

package/dist/cli/auth/login-persistence.d.ts

@@ -1,5 +1,6 @@
 import { type DextoApiKeyProvisionStatus } from './dexto-api-key.js';
 import type { OAuthResult } from './oauth.js';
+import type { DeviceApiKeyLoginResult } from './types.js';
 export interface PersistOAuthLoginOptions {
     onProvisionStatus?: ((status: DextoApiKeyProvisionStatus) => void) | undefined;
 }
@@ -10,4 +11,5 @@ export interface PersistedLoginResult {
     hasDextoApiKey: boolean;
 }
 export declare function persistOAuthLoginResult(result: OAuthResult, options?: PersistOAuthLoginOptions): Promise<PersistedLoginResult>;
+export declare function persistDeviceApiKeyLoginResult(result: DeviceApiKeyLoginResult): Promise<PersistedLoginResult>;
 //# sourceMappingURL=login-persistence.d.ts.map

package/dist/cli/auth/login-persistence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login-persistence.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/login-persistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,0BAA0B,EAAiC,MAAM,oBAAoB,CAAC;AACpG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG9C,MAAM,WAAW,wBAAwB;IACrC,iBAAiB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,0BAA0B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAClF;AAED,MAAM,WAAW,oBAAoB;IACjC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;CAC3B;AA4CD,wBAAsB,uBAAuB,CACzC,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,wBAA6B,GACvC,OAAO,CAAC,oBAAoB,CAAC,CAyB/B"}
+{"version":3,"file":"login-persistence.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/login-persistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,0BAA0B,EAAiC,MAAM,oBAAoB,CAAC;AACpG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAE1D,MAAM,WAAW,wBAAwB;IACrC,iBAAiB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,0BAA0B,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAClF;AAED,MAAM,WAAW,oBAAoB;IACjC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,cAAc,EAAE,OAAO,CAAC;CAC3B;AA4CD,wBAAsB,uBAAuB,CACzC,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE,wBAA6B,GACvC,OAAO,CAAC,oBAAoB,CAAC,CAyB/B;AAED,wBAAsB,8BAA8B,CAChD,MAAM,EAAE,uBAAuB,GAChC,OAAO,CAAC,oBAAoB,CAAC,CAY/B"}

package/dist/cli/auth/login-persistence.js

@@ -50,3 +50,15 @@ export async function persistOAuthLoginResult(result, options = {}) {
         hasDextoApiKey: Boolean(ensured?.dextoApiKey ?? preservedDextoApiKey?.dextoApiKey),
     };
 }
+export async function persistDeviceApiKeyLoginResult(result) {
+    await storeAuth({
+        dextoApiKey: result.dextoApiKey,
+        dextoKeyId: result.dextoKeyId,
+        dextoApiKeySource: 'provisioned',
+        createdAt: Date.now(),
+    });
+    return {
+        keyId: result.dextoKeyId,
+        hasDextoApiKey: true,
+    };
+}

package/dist/cli/auth/types.d.ts

@@ -3,10 +3,9 @@ export interface AuthenticatedUser {
     email: string;
     name?: string | undefined;
 }
-export interface AuthLoginResult {
-    accessToken: string;
-    refreshToken?: string | undefined;
-    expiresIn?: number | undefined;
-    user?: AuthenticatedUser | undefined;
+export interface DeviceApiKeyLoginResult {
+    dextoApiKey: string;
+    dextoKeyId: string;
+    dextoKeyDisplay: string;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/cli/auth/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,IAAI,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;CACxC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/cli/auth/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;CAC3B"}

package/dist/cli/cloud-chat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloud-chat.d.ts","sourceRoot":"","sources":["../../src/cli/cloud-chat.ts"],"names":[],"mappings":"AAAA,OAAO,EAIH,KAAK,aAAa,EASrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAGjE,MAAM,WAAW,wBAAwB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,KAAK,YAAY,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAK1D,KAAK,qBAAqB,GAAG,UAAU,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AASrF,KAAK,gBAAgB,GAAG,eAAe,CAAC;AAkNxC,wBAAgB,0BAA0B,CACtC,QAAQ,EAAE,aAAa,CAAC,mBAAmB,CAAC,GAC7C,qBAAqB,GAAG,IAAI,CA8B9B;AA4CD,wBAAgB,uBAAuB,CACnC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,MAAM,GACrB,gBAAgB,CAuhBlB;AAED,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBxF"}
+{"version":3,"file":"cloud-chat.d.ts","sourceRoot":"","sources":["../../src/cli/cloud-chat.ts"],"names":[],"mappings":"AAAA,OAAO,EAIH,KAAK,aAAa,EASrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAGjE,MAAM,WAAW,wBAAwB;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,KAAK,YAAY,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAK1D,KAAK,qBAAqB,GAAG,UAAU,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AASrF,KAAK,gBAAgB,GAAG,eAAe,CAAC;AAkNxC,wBAAgB,0BAA0B,CACtC,QAAQ,EAAE,aAAa,CAAC,mBAAmB,CAAC,GAC7C,qBAAqB,GAAG,IAAI,CA8B9B;AA4CD,wBAAgB,uBAAuB,CACnC,MAAM,EAAE,YAAY,EACpB,YAAY,EAAE,MAAM,GACrB,gBAAgB,CAimBlB;AAED,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBxF"}

package/dist/cli/cloud-chat.js

@@ -240,7 +240,8 @@ export function createCloudAgentBackend(client, cloudAgentId) {
     const sessionMetadataCache = new Map();
     const sessionTitleCache = new Map();
     const sessionModelCache = new Map();
-    const queueBySession = new Map();
+    const steerQueueBySession = new Map();
+    const followUpQueueBySession = new Map();
     const globalDisabledTools = [];
     const sessionDisabledTools = new Map();
     const sessionAutoApproveTools = new Map();
@@ -293,17 +294,46 @@ export function createCloudAgentBackend(client, cloudAgentId) {
         }
         return history;
     };
-    const dequeueQueuedMessages = (sessionId) => {
+    const dequeueQueuedMessages = (queueBySession, sessionId) => {
         const queued = queueBySession.get(sessionId) ?? [];
         queueBySession.delete(sessionId);
         return queued;
     };
-    const appendQueuedMessage = (sessionId, message) => {
+    const appendQueuedMessage = (queueBySession, sessionId, message) => {
         const current = queueBySession.get(sessionId) ?? [];
         const next = [...current, message];
         queueBySession.set(sessionId, next);
         return next.length;
     };
+    const removeQueuedMessage = (queueBySession, queueKind, sessionId, messageId) => {
+        const current = queueBySession.get(sessionId) ?? [];
+        const next = current.filter((message) => message.id !== messageId);
+        if (next.length === current.length) {
+            return false;
+        }
+        queueBySession.set(sessionId, next);
+        eventBus.emit('message:removed', {
+            id: messageId,
+            queue: queueKind,
+            sessionId,
+        });
+        return true;
+    };
+    const clearQueuedMessages = (queueBySession, sessionId) => {
+        const clearedCount = (queueBySession.get(sessionId) ?? []).length;
+        queueBySession.delete(sessionId);
+        return clearedCount;
+    };
+    const dequeueNextSessionMessages = (sessionId) => {
+        const steerMessages = dequeueQueuedMessages(steerQueueBySession, sessionId);
+        if (steerMessages.length > 0) {
+            return steerMessages;
+        }
+        return dequeueQueuedMessages(followUpQueueBySession, sessionId);
+    };
+    const getNextSessionQueueKind = (sessionId) => {
+        return (steerQueueBySession.get(sessionId) ?? []).length > 0 ? 'steer' : 'follow-up';
+    };
     const currentLLMConfig = (sessionId) => {
         const cachedModel = sessionId ? sessionModelCache.get(sessionId) : undefined;
         return {
@@ -414,7 +444,8 @@ export function createCloudAgentBackend(client, cloudAgentId) {
                         emitStreamingEvent(eventBus, event);
                         yield event;
                     }
-                    const queuedMessages = dequeueQueuedMessages(sessionId);
+                    const queueKind = getNextSessionQueueKind(sessionId);
+                    const queuedMessages = dequeueNextSessionMessages(sessionId);
                     if (queuedMessages.length === 0) {
                         if (pendingRunComplete) {
                             emitStreamingEvent(eventBus, pendingRunComplete);
@@ -428,6 +459,7 @@ export function createCloudAgentBackend(client, cloudAgentId) {
                         sessionId,
                         count: queuedMessages.length,
                         ids: queuedMessages.map((message) => message.id),
+                        queue: queueKind,
                         coalesced: queuedMessages.length > 1,
                         content: combinedContent,
                         messages: queuedMessages,
@@ -515,19 +547,22 @@ export function createCloudAgentBackend(client, cloudAgentId) {
         }),
         clearContext: (async (sessionId) => {
             await client.clearCloudAgentSessionContext(cloudAgentId, sessionId);
-            queueBySession.delete(sessionId);
+            steerQueueBySession.delete(sessionId);
+            followUpQueueBySession.delete(sessionId);
             eventBus.emit('context:cleared', { sessionId });
         }),
         compactContext: (async () => {
             throw unsupportedCloudFeature('Context compaction');
         }),
-        queueMessage: (async (sessionId, input) => {
+        steer: (async (sessionId, input) => {
+            contentPartsToCloudText(input.content);
             const messageId = `queued-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
             const message = buildQueuedMessage(messageId, [...input.content]);
-            const position = appendQueuedMessage(sessionId, message);
+            const position = appendQueuedMessage(steerQueueBySession, sessionId, message);
             eventBus.emit('message:queued', {
                 id: message.id,
                 position,
+                queue: 'steer',
                 sessionId,
             });
             return {
@@ -536,26 +571,32 @@ export function createCloudAgentBackend(client, cloudAgentId) {
                 id: message.id,
             };
         }),
-        getQueuedMessages: (async (sessionId) => queueBySession.get(sessionId) ?? []),
-        removeQueuedMessage: (async (sessionId, messageId) => {
-            const current = queueBySession.get(sessionId) ?? [];
-            const next = current.filter((message) => message.id !== messageId);
-            queueBySession.set(sessionId, next);
-            eventBus.emit('message:removed', {
-                id: messageId,
+        followUp: (async (sessionId, input) => {
+            contentPartsToCloudText(input.content);
+            const messageId = `queued-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+            const message = buildQueuedMessage(messageId, [...input.content]);
+            const position = appendQueuedMessage(followUpQueueBySession, sessionId, message);
+            eventBus.emit('message:queued', {
+                id: message.id,
+                position,
+                queue: 'follow-up',
                 sessionId,
             });
-            return true;
+            return {
+                queued: true,
+                position,
+                id: message.id,
+            };
         }),
-        clearMessageQueue: (async (sessionId) => {
-            if (typeof sessionId === 'string') {
-                const clearedCount = (queueBySession.get(sessionId) ?? []).length;
-                queueBySession.delete(sessionId);
-                return clearedCount;
-            }
-            const clearedCount = Array.from(queueBySession.values()).reduce((total, queuedMessages) => total + queuedMessages.length, 0);
-            queueBySession.clear();
-            return clearedCount;
+        getSteerMessages: (async (sessionId) => steerQueueBySession.get(sessionId) ?? []),
+        getFollowUpMessages: (async (sessionId) => followUpQueueBySession.get(sessionId) ?? []),
+        removeSteerMessage: (async (sessionId, messageId) => removeQueuedMessage(steerQueueBySession, 'steer', sessionId, messageId)),
+        removeFollowUpMessage: (async (sessionId, messageId) => removeQueuedMessage(followUpQueueBySession, 'follow-up', sessionId, messageId)),
+        clearSteerQueue: (async (sessionId) => {
+            return clearQueuedMessages(steerQueueBySession, sessionId);
+        }),
+        clearFollowUpQueue: (async (sessionId) => {
+            return clearQueuedMessages(followUpQueueBySession, sessionId);
         }),
         cancel: (async (sessionId) => {
             await client.cancelCloudAgentSessionRun(cloudAgentId, sessionId);

package/dist/cli/commands/auth/login.d.ts

@@ -1,9 +1,12 @@
 export interface LoginCommandOptions {
     apiKey?: string;
     token?: string;
+    platformUrl?: string | undefined;
     interactive?: boolean;
 }
 export declare function handleLoginCommand(options?: LoginCommandOptions): Promise<void>;
 export declare function handleAutoLogin(): Promise<void>;
-export declare function handleDeviceLogin(): Promise<void>;
+export declare function handleDeviceLogin(options?: {
+    platformUrl?: string;
+}): Promise<void>;
 //# sourceMappingURL=login.d.ts.map

package/dist/cli/commands/auth/login.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/auth/login.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,mBAAmB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAgBD,wBAAsB,kBAAkB,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiEzF;AAGD,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAErD;AAED,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CA6BvD"}
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/auth/login.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,mBAAmB;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,WAAW,CAAC,EAAE,OAAO,CAAC;CACzB;AAgBD,wBAAsB,kBAAkB,CAAC,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmEzF;AAGD,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAErD;AAED,wBAAsB,iBAAiB,CAAC,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CA4B7F"}

package/dist/cli/commands/auth/login.js

@@ -1,7 +1,7 @@
 // packages/cli/src/cli/commands/auth/login.ts
 import chalk from 'chalk';
 import * as p from '@clack/prompts';
-import { getDextoApiClient, isAuthenticated, loadAuth, performDeviceCodeLogin, persistOAuthLoginResult, storeAuth, } from '../../auth/index.js';
+import { getDextoApiClient, isAuthenticated, loadAuth, performDeviceCodeLogin, persistDeviceApiKeyLoginResult, persistOAuthLoginResult, storeAuth, } from '../../auth/index.js';
 function isCancellationError(errorMessage) {
     const lower = errorMessage.toLowerCase();
     return (lower.includes('canceled') ||
@@ -58,12 +58,12 @@ export async function handleLoginCommand(options = {}) {
             return;
         }
         if (options.interactive === false) {
-            await handleDeviceLogin();
+            await handleDeviceLogin(options.platformUrl ? { platformUrl: options.platformUrl } : {});
             console.log(chalk.green('🎉 Login successful!'));
             return;
         }
         p.intro(chalk.inverse(' Login to Dexto '));
-        await handleDeviceLogin();
+        await handleDeviceLogin(options.platformUrl ? { platformUrl: options.platformUrl } : {});
         p.outro(chalk.green('🎉 Login successful!'));
     }
     catch (error) {
@@ -76,9 +76,10 @@ export async function handleLoginCommand(options = {}) {
 export async function handleAutoLogin() {
     await handleDeviceLogin();
 }
-export async function handleDeviceLogin() {
+export async function handleDeviceLogin(options = {}) {
     try {
         const result = await performDeviceCodeLogin({
+            ...(options.platformUrl ? { apiUrl: options.platformUrl } : {}),
             onPrompt: (prompt) => {
                 console.log(chalk.cyan('\nUse any browser to complete login:'));
                 if (prompt.verificationUrlComplete) {
@@ -92,10 +93,8 @@ export async function handleDeviceLogin() {
                 console.log(chalk.dim(`  • Code expires in ~${Math.ceil(prompt.expiresIn / 60)} min`));
             },
         });
-        const persisted = await persistOAuthLoginResult(result);
-        if (persisted.email) {
-            console.log(chalk.dim(`\nWelcome back, ${persisted.email}`));
-        }
+        const persisted = await persistDeviceApiKeyLoginResult(result);
+        console.log(chalk.dim(`\nSaved Dexto API key ${persisted.keyId ?? ''}`.trim()));
     }
     catch (error) {
         const errorMessage = error instanceof Error ? error.message : String(error);

package/dist/cli/commands/auth/register.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/auth/register.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAE5E,wBAAgB,mBAAmB,CAAC,EAAE,OAAO,EAAE,EAAE,6BAA6B,GAAG,IAAI,CA0GpF"}
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/auth/register.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC;AAE5E,wBAAgB,mBAAmB,CAAC,EAAE,OAAO,EAAE,EAAE,6BAA6B,GAAG,IAAI,CAsHpF"}