dexto 2.0.0-beta.0 → 2.0.0-beta.1

package/dist/agents/coding-agent/coding-agent.yml

@@ -127,8 +127,6 @@ permissions:
       - plan_create    # Create plan without approval
       - plan_read      # Read plan without approval
       - plan_update    # Update plan without approval
-      - wait_for       # Wait for background tasks without approval
-      - check_task     # Check background tasks without approval
 
 # Compaction configuration - automatically summarizes conversation when context is full
 compaction:

package/dist/cli/agent-audit.d.ts

@@ -0,0 +1,12 @@
+import type { Command } from 'commander';
+export interface AuditRow {
+    command: string;
+    json: boolean;
+    dryRun: boolean;
+    nonInteractiveFlag: boolean;
+    examples: boolean;
+}
+export declare function auditCommander(program: Command): AuditRow[];
+export declare function auditCloud(commands: readonly import('./cloud/command.js').Command[]): AuditRow[];
+export declare function auditProgram(program: Command, commands: readonly import('./cloud/command.js').Command[]): AuditRow[];
+//# sourceMappingURL=agent-audit.d.ts.map

package/dist/cli/agent-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-audit.d.ts","sourceRoot":"","sources":["../../src/cli/agent-audit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,WAAW,QAAQ;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,QAAQ,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,EAAE,CAiC3D;AAGD,wBAAgB,UAAU,CAAC,QAAQ,EAAE,SAAS,OAAO,oBAAoB,EAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,CAQhG;AAED,wBAAgB,YAAY,CACxB,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,SAAS,OAAO,oBAAoB,EAAE,OAAO,EAAE,GAC1D,QAAQ,EAAE,CAUZ"}

package/dist/cli/agent-audit.js

@@ -0,0 +1,52 @@
+export function auditCommander(program) {
+    const rows = [];
+    function visit(command, path) {
+        const words = [...path, command.name()];
+        if (typeof Reflect.get(command, '_actionHandler') === 'function') {
+            const options = command.options.map((option) => option.long);
+            let help = '';
+            const output = { ...command.configureOutput() };
+            command.configureOutput({
+                writeOut: (text) => {
+                    help += text;
+                },
+            });
+            try {
+                command.outputHelp();
+            }
+            finally {
+                command.configureOutput(output);
+            }
+            rows.push({
+                command: words.join(' '),
+                json: options.includes('--json'),
+                dryRun: options.includes('--dry-run'),
+                nonInteractiveFlag: options.includes('--no-interactive') ||
+                    options.includes('--non-interactive') ||
+                    options.includes('--yes'),
+                examples: /^\s*examples:\s*$/imu.test(help),
+            });
+        }
+        for (const child of command.commands)
+            visit(child, words);
+    }
+    for (const command of program.commands)
+        visit(command, []);
+    return rows;
+}
+// JSON is an engine-wide option; cloud help currently has no examples. These are not per-command behavioral checks.
+export function auditCloud(commands) {
+    return commands.map((command) => ({
+        command: command.path.join(' '),
+        json: true,
+        dryRun: 'dry-run' in (command.options ?? {}),
+        nonInteractiveFlag: 'yes' in (command.options ?? {}),
+        examples: false,
+    }));
+}
+export function auditProgram(program, commands) {
+    const cloud = auditCloud(commands);
+    const cloudNames = cloud.map((row) => row.command);
+    const local = auditCommander(program).filter((row) => !cloudNames.some((name) => name === row.command || name.startsWith(`${row.command} `)));
+    return [...local, ...cloud].sort((a, b) => a.command < b.command ? -1 : a.command > b.command ? 1 : 0);
+}

package/dist/cli/cloud/command.d.ts

@@ -1,4 +1,5 @@
 import type { CloudClient } from '@dexto/cloud-client';
+import { CommandFailure } from '../failure.js';
 import type { Connection, ConnectionOverrides } from './connection.js';
 import type { Output } from './output.js';
 import type { CloudRuntime } from './runtime.js';
@@ -37,34 +38,6 @@ export interface CommandContext {
 export declare class UsageError extends Error {
     constructor(message: string);
 }
-/** What kind of thing went wrong; each kind has an exit code an agent can branch on. */
-export type FailureKind = 'failed' | 'invalid_input' | 'needs_confirmation' | 'needs_permission' | 'needs_sign_in' | 'not_found' | 'waiting_on_person';
-export declare const EXIT_CODES: {
-    readonly failed: 1;
-    readonly invalid_input: 2;
-    readonly needs_confirmation: 4;
-    readonly needs_permission: 3;
-    readonly needs_sign_in: 3;
-    readonly not_found: 5;
-    readonly waiting_on_person: 6;
-    readonly usage: 2;
-};
-/** What each exit code means; frozen in 2.0 and shown in help. */
-export declare const EXIT_CODE_MEANINGS: {
-    readonly '0': "done";
-    readonly '1': "failed";
-    readonly '2': "usage or invalid input";
-    readonly '3': "needs sign-in or permission";
-    readonly '4': "needs confirmation: pass --yes once your person has agreed";
-    readonly '5': "not found";
-    readonly '6': "waiting on a person, such as an approval";
-};
-/** A failure that says what kind it is and, where there is one, the command that fixes it. */
-export declare class CommandFailure extends Error {
-    readonly fix: string | null;
-    readonly kind: FailureKind;
-    constructor(kind: FailureKind, message: string, fix: string | null);
-}
 /** A permission the sign-in lacks: signing in again for `scope` (one, or several comma-separated) fixes it. */
 export declare class MissingScopeFailure extends CommandFailure {
     readonly scope: string;
@@ -75,6 +48,8 @@ export declare function requiredOption(input: CommandInput, name: string): strin
 export declare function listOption(input: CommandInput, name: string): string[];
 export declare function flag(input: CommandInput, name: string): boolean;
 export declare function integerOption(input: CommandInput, name: string): number | undefined;
+/** A string option that must be one of `values`, checked before anything is sent. */
+export declare function choiceOption<const T extends string>(input: CommandInput, name: string, values: readonly T[]): T | undefined;
 export declare function argument(input: CommandInput, index: number, name: string): string;
 /** `--limit` and `--after`, which every list takes. */
 export declare const PAGE_OPTIONS: {
@@ -111,21 +86,12 @@ export declare function readJsonBody(context: CommandContext, input: CommandInpu
 export declare function isJsonObject(value: unknown): value is Record<string, unknown>;
 /** A value the person types, hidden when secret, or piped on stdin. */
 export declare function readValue(context: CommandContext, question: string, secret: boolean): Promise<string>;
-/** Asks yes or no at a terminal; without one, only `--yes` agrees. */
-export declare function confirm(context: CommandContext, question: string): Promise<boolean>;
 export declare const YES_OPTION: {
     readonly yes: {
         readonly description: "Go ahead without being asked. Pass it only once your person has agreed.";
         readonly type: "boolean";
     };
 };
-/**
- * Goes ahead with something that asks first: at once with `--yes`, after a yes at a terminal, and
- * otherwise not at all, failing with the command that goes ahead.
- */
-export declare function requireConsent(context: CommandContext, yes: boolean, what: string): Promise<void>;
-/** The command as it was run plus more words, quoted to paste into a shell. */
-export declare function rerunWith(context: CommandContext, ...extra: string[]): string;
 /**
  * Whether a sign-in here should use a device code: no one is at this terminal, or it is an SSH
  * session, whose loopback redirect a browser on the person's own device can't reach.
@@ -138,6 +104,4 @@ export type SignInContext = Pick<CommandContext, 'overrides' | 'runtime'>;
  * finish it.
  */
 export declare function signInCommand(context: SignInContext, scope: string | null): string;
-/** A word as a shell reads it: quoted unless it is plain. */
-export declare function shellWord(word: string): string;
 //# sourceMappingURL=command.d.ts.map

package/dist/cli/cloud/command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../src/cli/cloud/command.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,WAAW,UAAU;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;IACpC,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,OAAO;IACpB,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IACxD,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC7E;AAED,MAAM,WAAW,YAAY;IACzB,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;CAClG;AAED,MAAM,WAAW,cAAc;IAC3B,gGAAgG;IAChG,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/B,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAClC,gGAAgG;IAChG,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAClC;AAED,iFAAiF;AACjF,qBAAa,UAAW,SAAQ,KAAK;gBACrB,OAAO,EAAE,MAAM;CAI9B;AAED,wFAAwF;AACxF,MAAM,MAAM,WAAW,GACjB,QAAQ,GACR,eAAe,GACf,oBAAoB,GACpB,kBAAkB,GAClB,eAAe,GACf,WAAW,GACX,mBAAmB,CAAC;AAE1B,eAAO,MAAM,UAAU;;;;;;;;;CASmC,CAAC;AAE3D,kEAAkE;AAClE,eAAO,MAAM,kBAAkB;;;;;;;;CAQrB,CAAC;AAEX,8FAA8F;AAC9F,qBAAa,cAAe,SAAQ,KAAK;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;gBAEf,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;CAMrE;AAED,+GAA+G;AAC/G,qBAAa,mBAAoB,SAAQ,cAAc;IACnD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBAEX,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAKrE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGlF;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAIxE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAKtE;AAED,wBAAgB,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMnF;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAIjF;AAED,uDAAuD;AACvD,eAAO,MAAM,YAAY;;;;;;;;;;;CAOsB,CAAC;AAEhD,wBAAgB,SAAS,CAAC,KAAK,EAAE,YAAY,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAOjF;AAED,oFAAoF;AACpF,eAAO,MAAM,YAAY;;;;;;;;;;;CAOsB,CAAC;AAEhD,wEAAwE;AACxE,wBAAsB,YAAY,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAkBjG;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE7E;AAED,uEAAuE;AACvE,wBAAsB,SAAS,CAC3B,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,GAChB,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED,sEAAsE;AACtE,wBAAsB,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAIzF;AAED,eAAO,MAAM,UAAU;;;;;CAKwB,CAAC;AAEhD;;;GAGG;AACH,wBAAsB,cAAc,CAChC,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,+EAA+E;AAC/E,wBAAgB,SAAS,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAE7E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAMhE;AAED,8FAA8F;AAC9F,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,SAAS,CAAC,CAAC;AAE1E;;;GAGG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAWlF;AAED,6DAA6D;AAC7D,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9C"}
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../src/cli/cloud/command.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAG/C,OAAO,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACvE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,WAAW,UAAU;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;IACpC,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,OAAO;IACpB,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IACxD,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC7E;AAED,MAAM,WAAW,YAAY;IACzB,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;CAClG;AAED,MAAM,WAAW,cAAc;IAC3B,gGAAgG;IAChG,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/B,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAClC,gGAAgG;IAChG,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAClC;AAED,iFAAiF;AACjF,qBAAa,UAAW,SAAQ,KAAK;gBACrB,OAAO,EAAE,MAAM;CAI9B;AAED,+GAA+G;AAC/G,qBAAa,mBAAoB,SAAQ,cAAc;IACnD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;gBAEX,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAKrE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGlF;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAIxE;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAKtE;AAED,wBAAgB,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAMnF;AAED,qFAAqF;AACrF,wBAAgB,YAAY,CAAC,KAAK,CAAC,CAAC,SAAS,MAAM,EAC/C,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,SAAS,CAAC,EAAE,GACrB,CAAC,GAAG,SAAS,CAOf;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAIjF;AAED,uDAAuD;AACvD,eAAO,MAAM,YAAY;;;;;;;;;;;CAOsB,CAAC;AAEhD,wBAAgB,SAAS,CAAC,KAAK,EAAE,YAAY,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAOjF;AAED,oFAAoF;AACpF,eAAO,MAAM,YAAY;;;;;;;;;;;CAOsB,CAAC;AAEhD,wEAAwE;AACxE,wBAAsB,YAAY,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAkBjG;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE7E;AAED,uEAAuE;AACvE,wBAAsB,SAAS,CAC3B,OAAO,EAAE,cAAc,EACvB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,GAChB,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED,eAAO,MAAM,UAAU;;;;;CAKwB,CAAC;AAEhD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAMhE;AAED,8FAA8F;AAC9F,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,SAAS,CAAC,CAAC;AAE1E;;;GAGG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAWlF"}

package/dist/cli/cloud/command.js

@@ -1,5 +1,7 @@
 // The shape every cloud command shares: its path, arguments, options and handler.
 import { readFile } from 'node:fs/promises';
+import { CommandFailure } from '../failure.js';
+import { shellWord } from '../interaction.js';
 /** A mistake in how the command was called: printed with the command's usage. */
 export class UsageError extends Error {
     constructor(message) {
@@ -7,37 +9,6 @@ export class UsageError extends Error {
         this.name = 'UsageError';
     }
 }
-export const EXIT_CODES = {
-    failed: 1,
-    invalid_input: 2,
-    needs_confirmation: 4,
-    needs_permission: 3,
-    needs_sign_in: 3,
-    not_found: 5,
-    waiting_on_person: 6,
-    usage: 2,
-};
-/** What each exit code means; frozen in 2.0 and shown in help. */
-export const EXIT_CODE_MEANINGS = {
-    '0': 'done',
-    '1': 'failed',
-    '2': 'usage or invalid input',
-    '3': 'needs sign-in or permission',
-    '4': 'needs confirmation: pass --yes once your person has agreed',
-    '5': 'not found',
-    '6': 'waiting on a person, such as an approval',
-};
-/** A failure that says what kind it is and, where there is one, the command that fixes it. */
-export class CommandFailure extends Error {
-    fix;
-    kind;
-    constructor(kind, message, fix) {
-        super(message);
-        this.name = 'CommandFailure';
-        this.fix = fix;
-        this.kind = kind;
-    }
-}
 /** A permission the sign-in lacks: signing in again for `scope` (one, or several comma-separated) fixes it. */
 export class MissingScopeFailure extends CommandFailure {
     scope;
@@ -75,6 +46,16 @@ export function integerOption(input, name) {
         throw new UsageError(`--${name} must be a whole number.`);
     return parsed;
 }
+/** A string option that must be one of `values`, checked before anything is sent. */
+export function choiceOption(input, name, values) {
+    const value = stringOption(input, name);
+    if (value === undefined)
+        return undefined;
+    const found = values.find((each) => each === value);
+    if (found === undefined)
+        throw new UsageError(`--${name} must be one of: ${values.join(', ')}.`);
+    return found;
+}
 export function argument(input, index, name) {
     const value = input.positionals[index];
     if (value === undefined)
@@ -140,37 +121,12 @@ export async function readValue(context, question, secret) {
         throw new UsageError('No value was given.');
     return value;
 }
-/** Asks yes or no at a terminal; without one, only `--yes` agrees. */
-export async function confirm(context, question) {
-    if (context.runtime.prompt === null)
-        return false;
-    const answer = await context.runtime.prompt(`${question} [y/N] `, { secret: false });
-    return /^y(es)?$/iu.test(answer.trim());
-}
 export const YES_OPTION = {
     yes: {
         description: 'Go ahead without being asked. Pass it only once your person has agreed.',
         type: 'boolean',
     },
 };
-/**
- * Goes ahead with something that asks first: at once with `--yes`, after a yes at a terminal, and
- * otherwise not at all, failing with the command that goes ahead.
- */
-export async function requireConsent(context, yes, what) {
-    if (yes)
-        return;
-    if (context.runtime.prompt !== null) {
-        if (await confirm(context, `${what} Go ahead?`))
-            return;
-        throw new CommandFailure('needs_confirmation', 'Not done.', null);
-    }
-    throw new CommandFailure('needs_confirmation', `${what} Run it again with --yes once your person has agreed.`, rerunWith(context, '--yes'));
-}
-/** The command as it was run plus more words, quoted to paste into a shell. */
-export function rerunWith(context, ...extra) {
-    return ['dexto', ...context.invocation, ...extra].map(shellWord).join(' ');
-}
 /**
  * Whether a sign-in here should use a device code: no one is at this terminal, or it is an SSH
  * session, whose loopback redirect a browser on the person's own device can't reach.
@@ -196,7 +152,3 @@ export function signInCommand(context, scope) {
         .map(shellWord)
         .join(' ');
 }
-/** A word as a shell reads it: quoted unless it is plain. */
-export function shellWord(word) {
-    return /^[\w@%+=:,./-]+$/u.test(word) ? word : `'${word.replaceAll("'", "'\\''")}'`;
-}

package/dist/cli/cloud/commands/account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../../../src/cli/cloud/commands/account.ts"],"names":[],"mappings":"AAIA,OAAO,EAOH,KAAK,OAAO,EAEf,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAE7E,uFAAuF;AACvF,MAAM,MAAM,SAAS,GAAG,CAAC,EAAE,EAAE;IACzB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAChC,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAW7B,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,OAAO,EAAE,CAoJzF"}
+{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../../../src/cli/cloud/commands/account.ts"],"names":[],"mappings":"AAMA,OAAO,EAMH,KAAK,OAAO,EAEf,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yCAAyC,CAAC;AAE7E,uFAAuF;AACvF,MAAM,MAAM,SAAS,GAAG,CAAC,EAAE,EAAE;IACzB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAChC,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;AAW7B,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,OAAO,EAAE,CAoJzF"}

package/dist/cli/cloud/commands/account.js

@@ -1,7 +1,8 @@
 // `login`, `logout`, `whoami`, `accounts`, `models list` and `billing`: who commands act as, and
 // the models and credits that sign-in reaches, under the CLI's one output contract.
+import { confirm } from '../../interaction.js';
 import { unwrap } from '@dexto/cloud-client';
-import { argument, confirm, flag, listOption, stringOption, YES_OPTION, } from '../command.js';
+import { argument, flag, listOption, stringOption, YES_OPTION, } from '../command.js';
 function signInIo(context) {
     return {
         result: (value, text) => context.output.result(value, text),

package/dist/cli/cloud/commands/agents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../../../src/cli/cloud/commands/agents.ts"],"names":[],"mappings":"AAKA,OAAO,EAgBH,KAAK,OAAO,EAIf,MAAM,eAAe,CAAC;AA8oBvB,eAAO,MAAM,aAAa,EAAE,SAAS,OAAO,EAiB3C,CAAC"}
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../../../src/cli/cloud/commands/agents.ts"],"names":[],"mappings":"AAQA,OAAO,EAaH,KAAK,OAAO,EAIf,MAAM,eAAe,CAAC;AA8oBvB,eAAO,MAAM,aAAa,EAAE,SAAS,OAAO,EAiB3C,CAAC"}

package/dist/cli/cloud/commands/agents.js

@@ -1,7 +1,9 @@
 // `cloud agents`: define agents, chat with them, and read their sessions, messages and runs.
+import { EXIT_CODES } from '../../failure.js';
+import { confirm, requireConsent } from '../../interaction.js';
 import chalk from 'chalk';
 import { unwrap } from '@dexto/cloud-client';
-import { argument, BODY_OPTIONS, confirm, EXIT_CODES, flag, integerOption, isJsonObject, listOption, PAGE_OPTIONS, pageQuery, readJsonBody, requireConsent, stringOption, UsageError, YES_OPTION, } from '../command.js';
+import { argument, BODY_OPTIONS, flag, integerOption, isJsonObject, listOption, PAGE_OPTIONS, pageQuery, readJsonBody, stringOption, UsageError, YES_OPTION, } from '../command.js';
 import { sessionEvents } from '../events.js';
 function agentPath(agentId) {
     return { params: { path: { agent_id: agentId } } };

package/dist/cli/cloud/commands/artifacts.d.ts

@@ -0,0 +1,3 @@
+import { type Command } from '../command.js';
+export declare const artifactCommands: readonly Command[];
+//# sourceMappingURL=artifacts.d.ts.map

package/dist/cli/cloud/commands/artifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.d.ts","sourceRoot":"","sources":["../../../../src/cli/cloud/commands/artifacts.ts"],"names":[],"mappings":"AASA,OAAO,EAWH,KAAK,OAAO,EAIf,MAAM,eAAe,CAAC;AAyUvB,eAAO,MAAM,gBAAgB,EAAE,SAAS,OAAO,EAAwC,CAAC"}

package/dist/cli/cloud/commands/artifacts.js

@@ -0,0 +1,267 @@
+// `workspace artifacts`: the person's saved HTML Artifacts, over Dexto's typed Artifacts tools.
+import { CommandFailure } from '../../failure.js';
+import { readFile, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { z } from 'zod';
+import { argument, choiceOption, flag, integerOption, listOption, PAGE_OPTIONS, requiredOption, stringOption, UsageError, YES_OPTION, } from '../command.js';
+import { requireLoginScopes } from './deploys.js';
+import { agreeToCall, listWorkspaceTools, queryWorkspaceTool, toolCallLevel } from './workspace.js';
+/** What Dexto keeps of one Artifact's HTML. */
+const MAX_HTML_BYTES = 524_288;
+const KINDS = [
+    'document',
+    'plan',
+    'mockup',
+    'prototype',
+    'slide-deck',
+    'visualization',
+    'interactive',
+    'other',
+];
+const SURFACES = ['inline', 'panel', 'fullscreen'];
+const RENDERERS = ['html', 'reveal'];
+const VISIBILITIES = ['private', 'org-shared', 'link-shared'];
+const SummarySchema = z.object({
+    artifactId: z.string(),
+    kind: z.string(),
+    preferredSurface: z.string(),
+    summary: z.string(),
+    title: z.string(),
+    updatedAt: z.string(),
+});
+const ListSchema = z.object({ artifacts: z.array(SummarySchema), next: z.string().nullable() });
+const ArtifactSchema = SummarySchema.extend({
+    html: z.string(),
+    renderer: z.string().nullable(),
+});
+const GetSchema = z.object({ artifact: ArtifactSchema.nullable() });
+const SavedSchema = z.object({
+    artifact: z.object({ artifactId: z.string(), title: z.string() }),
+});
+const SharedSchema = z.object({ url: z.string().nullable(), visibility: z.string() });
+const COLUMNS = [
+    { header: 'id', value: (artifact) => artifact.artifactId },
+    { header: 'title', value: (artifact) => artifact.title },
+    { header: 'kind', value: (artifact) => artifact.kind },
+    { header: 'updated', value: (artifact) => artifact.updatedAt },
+];
+const CONTENT_OPTIONS = {
+    kind: { description: `What it is: ${KINDS.join(', ')}.`, type: 'string' },
+    renderer: {
+        description: 'html, or reveal for a slide-deck written for reveal.js.',
+        type: 'string',
+    },
+    summary: { description: 'One or two lines on what it is.', type: 'string' },
+    surface: {
+        description: `Where it opens: ${SURFACES.join(', ')}.`,
+        type: 'string',
+    },
+    tag: { description: 'A tag; repeat for more.', multiple: true, type: 'string' },
+    title: { description: "The Artifact's title.", type: 'string' },
+};
+const DRY_RUN_OPTION = {
+    'dry-run': {
+        description: 'Check the input and show the call, without making it.',
+        type: 'boolean',
+    },
+};
+const list = {
+    options: PAGE_OPTIONS,
+    path: ['workspace', 'artifacts', 'list'],
+    summary: 'List your saved Artifacts, newest first.',
+    async run(context, input) {
+        await requireLoginScopes(context, ['apps:read']);
+        const after = stringOption(input, 'after');
+        const limit = integerOption(input, 'limit');
+        const page = ListSchema.parse(await queryWorkspaceTool(context, 'dexto_artifacts_list', {
+            ...(after === undefined ? {} : { cursor: after }),
+            ...(limit === undefined ? {} : { limit }),
+        }));
+        context.output.list({ data: page.artifacts, has_more: page.next !== null, next_after: page.next }, COLUMNS);
+    },
+};
+const get = {
+    arguments: '<artifact_id>',
+    options: {
+        out: {
+            description: 'Write the HTML to this file, and show the rest without it.',
+            type: 'string',
+            valueName: 'PATH',
+        },
+    },
+    path: ['workspace', 'artifacts', 'get'],
+    summary: 'Show one Artifact, with its HTML or with --out writing the HTML to a file.',
+    async run(context, input) {
+        await requireLoginScopes(context, ['apps:read']);
+        const artifact = await readArtifact(context, argument(input, 0, 'artifact_id'));
+        const out = stringOption(input, 'out');
+        if (out === undefined)
+            return context.output.record(artifact);
+        await writeFile(out, artifact.html, 'utf8');
+        const { html: _html, ...rest } = artifact;
+        context.output.record({ ...rest, htmlPath: path.resolve(out) });
+    },
+};
+const create = {
+    arguments: '<file>',
+    options: {
+        ...CONTENT_OPTIONS,
+        collection: {
+            description: 'A collection to put it in, by id; repeat for more.',
+            multiple: true,
+            type: 'string',
+        },
+        'idempotency-key': {
+            description: 'Any string unique to this Artifact: running again with the same key returns the first one instead of a copy.',
+            type: 'string',
+            valueName: 'KEY',
+        },
+        ...DRY_RUN_OPTION,
+        ...YES_OPTION,
+    },
+    path: ['workspace', 'artifacts', 'create'],
+    summary: "Save an HTML file (or - for stdin) as an Artifact in your library. Its title defaults to the file's name.",
+    async run(context, input) {
+        await requireLoginScopes(context, ['apps:execute']);
+        const file = argument(input, 0, 'file');
+        const title = stringOption(input, 'title') ??
+            (file === '-' ? requiredOption(input, 'title') : path.parse(file).name);
+        const key = stringOption(input, 'idempotency-key');
+        const collections = listOption(input, 'collection');
+        const call = {
+            ...contentFields(input, {
+                kind: 'document',
+                preferredSurface: 'panel',
+                renderer: 'html',
+                summary: '',
+                title,
+            }),
+            html: await readHtml(context, file),
+            ...(collections.length === 0 ? {} : { collectionIds: collections }),
+            ...(key === undefined ? {} : { idempotencyKey: key }),
+        };
+        const saved = await save(context, input, 'dexto_artifacts_create', call, `Save ${title}`);
+        if (saved === null)
+            return;
+        context.output.result(saved.value, `Saved ${saved.artifact.title} as Artifact ${saved.artifact.artifactId}.`);
+    },
+};
+const replace = {
+    arguments: '<artifact_id> <file>',
+    options: { ...CONTENT_OPTIONS, ...DRY_RUN_OPTION, ...YES_OPTION },
+    path: ['workspace', 'artifacts', 'replace'],
+    summary: 'Replace an Artifact with an HTML file (or - for stdin), keeping its id; it keeps its title, kind, summary, surface and renderer unless you give new ones.',
+    async run(context, input) {
+        await requireLoginScopes(context, ['apps:read', 'apps:execute']);
+        const artifactId = argument(input, 0, 'artifact_id');
+        const html = await readHtml(context, argument(input, 1, 'file'));
+        const current = await readArtifact(context, artifactId);
+        const call = {
+            artifactId,
+            ...contentFields(input, {
+                kind: current.kind,
+                preferredSurface: current.preferredSurface,
+                renderer: current.renderer ?? 'html',
+                summary: current.summary,
+                title: current.title,
+            }),
+            html,
+        };
+        const saved = await save(context, input, 'dexto_artifacts_replace', call, `Replace Artifact ${artifactId}`);
+        if (saved === null)
+            return;
+        context.output.result(saved.value, `Replaced Artifact ${artifactId}.`);
+    },
+};
+const share = {
+    arguments: '<artifact_id>',
+    options: {
+        visibility: {
+            description: 'private (only you), org-shared (your organization) or link-shared (anyone with the link).',
+            type: 'string',
+        },
+        ...DRY_RUN_OPTION,
+        ...YES_OPTION,
+    },
+    path: ['workspace', 'artifacts', 'share'],
+    summary: 'Change who can open an Artifact: only you, your organization, or anyone with its link.',
+    async run(context, input) {
+        await requireLoginScopes(context, ['apps:execute']);
+        const visibility = choiceOption(input, 'visibility', VISIBILITIES);
+        if (visibility === undefined)
+            throw new UsageError('--visibility is required.');
+        const artifactId = argument(input, 0, 'artifact_id');
+        const call = { artifactId, visibility };
+        const tool = await requireTool(context, 'dexto_artifacts_share');
+        if (flag(input, 'dry-run'))
+            return dryRun(context, 'dexto_artifacts_share', call);
+        const agreed = await agreeToCall(context, {
+            level: toolCallLevel(tool, call),
+            schema: tool.inputSchema,
+            title: `Make Artifact ${artifactId} ${visibility}`,
+        }, flag(input, 'yes'));
+        const value = await queryWorkspaceTool(context, 'dexto_artifacts_share', {
+            ...call,
+            ...agreed,
+        });
+        const shared = SharedSchema.parse(value);
+        context.output.result(value, shared.url === null
+            ? `Artifact ${artifactId} is now ${shared.visibility}.`
+            : `Artifact ${artifactId} is now ${shared.visibility}: ${shared.url}`);
+    },
+};
+async function readArtifact(context, artifactId) {
+    const { artifact } = GetSchema.parse(await queryWorkspaceTool(context, 'dexto_artifacts_get', { artifactId }));
+    if (artifact === null)
+        throw new CommandFailure('not_found', `There is no Artifact ${artifactId}.`, null);
+    return artifact;
+}
+/** The HTML of a file, or of stdin for -, checked against what an Artifact holds. */
+async function readHtml(context, file) {
+    const html = file === '-' ? await context.runtime.readStdin() : await readFile(file, 'utf8');
+    if (html.length === 0)
+        throw new UsageError(`${file === '-' ? 'stdin' : file} is empty.`);
+    const bytes = Buffer.byteLength(html, 'utf8');
+    if (bytes > MAX_HTML_BYTES)
+        throw new UsageError(`The HTML is ${bytes} bytes; an Artifact holds up to ${MAX_HTML_BYTES}.`);
+    return html;
+}
+/** The content flags given, each falling back to `defaults`. */
+function contentFields(input, defaults) {
+    const tags = listOption(input, 'tag');
+    const fields = {
+        kind: choiceOption(input, 'kind', KINDS) ?? defaults.kind,
+        preferredSurface: choiceOption(input, 'surface', SURFACES) ?? defaults.preferredSurface,
+        renderer: choiceOption(input, 'renderer', RENDERERS) ?? defaults.renderer,
+        summary: stringOption(input, 'summary') ?? defaults.summary,
+        title: stringOption(input, 'title') ?? defaults.title,
+        ...(tags.length === 0 ? {} : { tags }),
+    };
+    if (fields.renderer === 'reveal' && fields.kind !== 'slide-deck')
+        throw new UsageError('--renderer reveal needs --kind slide-deck.');
+    return fields;
+}
+async function requireTool(context, name) {
+    const tool = (await listWorkspaceTools(context)).find((each) => each.name === name);
+    if (tool === undefined)
+        throw new CommandFailure('failed', "This Dexto can't manage Artifacts yet.", null);
+    return tool;
+}
+/** Creates or replaces once agreed, or with --dry-run shows the call; null when it only showed it. */
+async function save(context, input, name, call, title) {
+    const tool = await requireTool(context, name);
+    if (flag(input, 'dry-run')) {
+        dryRun(context, name, call);
+        return null;
+    }
+    const agreed = await agreeToCall(context, { level: toolCallLevel(tool, call), schema: tool.inputSchema, title }, flag(input, 'yes'));
+    const value = await queryWorkspaceTool(context, name, { ...call, ...agreed });
+    return { artifact: SavedSchema.parse(value).artifact, value };
+}
+/** The call a write would make, its HTML shown by size. */
+function dryRun(context, tool, call) {
+    const { html, ...rest } = call;
+    const shown = typeof html === 'string' ? { ...rest, htmlBytes: Buffer.byteLength(html, 'utf8') } : rest;
+    context.output.result({ dryRun: true, tool, arguments: shown }, `Would call ${tool} with ${JSON.stringify(shown)}.`);
+}
+export const artifactCommands = [list, get, create, replace, share];

package/dist/cli/cloud/commands/automations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"automations.d.ts","sourceRoot":"","sources":["../../../../src/cli/cloud/commands/automations.ts"],"names":[],"mappings":"AAIA,OAAO,EAYH,KAAK,OAAO,EAEf,MAAM,eAAe,CAAC;AAoSvB,eAAO,MAAM,kBAAkB,EAAE,SAAS,OAAO,EAWhD,CAAC"}
+{"version":3,"file":"automations.d.ts","sourceRoot":"","sources":["../../../../src/cli/cloud/commands/automations.ts"],"names":[],"mappings":"AAMA,OAAO,EAWH,KAAK,OAAO,EAEf,MAAM,eAAe,CAAC;AAoSvB,eAAO,MAAM,kBAAkB,EAAE,SAAS,OAAO,EAWhD,CAAC"}

package/dist/cli/cloud/commands/automations.js

@@ -1,6 +1,7 @@
 // `cloud automations`: run the project's agents on a schedule or on a signed webhook.
+import { requireConsent } from '../../interaction.js';
 import { unwrap } from '@dexto/cloud-client';
-import { argument, BODY_OPTIONS, PAGE_OPTIONS, pageQuery, readJsonBody, requireConsent, stringOption, UsageError, YES_OPTION, flag, isJsonObject, } from '../command.js';
+import { argument, BODY_OPTIONS, PAGE_OPTIONS, pageQuery, readJsonBody, stringOption, UsageError, YES_OPTION, flag, isJsonObject, } from '../command.js';
 function automationPath(id) {
     return { params: { path: { automation_id: id } } };
 }

package/dist/cli/cloud/commands/chats.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chats.d.ts","sourceRoot":"","sources":["../../../../src/cli/cloud/commands/chats.ts"],"names":[],"mappings":"AAIA,OAAO,EAOH,KAAK,OAAO,EAIf,MAAM,eAAe,CAAC;AAwPvB,eAAO,MAAM,YAAY,EAAE,SAAS,OAAO,EAAyB,CAAC"}
+{"version":3,"file":"chats.d.ts","sourceRoot":"","sources":["../../../../src/cli/cloud/commands/chats.ts"],"names":[],"mappings":"AAMA,OAAO,EAMH,KAAK,OAAO,EAIf,MAAM,eAAe,CAAC;AAwQvB,eAAO,MAAM,YAAY,EAAE,SAAS,OAAO,EAAyB,CAAC"}