@salesforce/plugin-auth 3.5.1 → 3.5.3

package/README.md

@@ -108,7 +108,7 @@ EXAMPLES
     $ sf org list auth
 ```
 
-_See code: [src/commands/org/list/auth.ts](https://github.com/salesforcecli/plugin-auth/blob/3.5.1/src/commands/org/list/auth.ts)_
+_See code: [src/commands/org/list/auth.ts](https://github.com/salesforcecli/plugin-auth/blob/3.5.3/src/commands/org/list/auth.ts)_
 
 ## `sf org login access-token`
 
@@ -162,7 +162,7 @@ FLAG DESCRIPTIONS
     To specify a sandbox, set --instance-url to "https://<MyDomainName>--<SandboxName>.sandbox.my.salesforce.com".
 ```
 
-_See code: [src/commands/org/login/access-token.ts](https://github.com/salesforcecli/plugin-auth/blob/3.5.1/src/commands/org/login/access-token.ts)_
+_See code: [src/commands/org/login/access-token.ts](https://github.com/salesforcecli/plugin-auth/blob/3.5.3/src/commands/org/login/access-token.ts)_
 
 ## `sf org login device`
 
@@ -222,7 +222,7 @@ FLAG DESCRIPTIONS
     To specify a sandbox, set --instance-url to "https://<MyDomainName>--<SandboxName>.sandbox.my.salesforce.com".
 ```
 
-_See code: [src/commands/org/login/device.ts](https://github.com/salesforcecli/plugin-auth/blob/3.5.1/src/commands/org/login/device.ts)_
+_See code: [src/commands/org/login/device.ts](https://github.com/salesforcecli/plugin-auth/blob/3.5.3/src/commands/org/login/device.ts)_
 
 ## `sf org login jwt`
 
@@ -313,7 +313,7 @@ FLAG DESCRIPTIONS
     To specify a sandbox, set --instance-url to "https://<MyDomainName>--<SandboxName>.sandbox.my.salesforce.com".
 ```
 
-_See code: [src/commands/org/login/jwt.ts](https://github.com/salesforcecli/plugin-auth/blob/3.5.1/src/commands/org/login/jwt.ts)_
+_See code: [src/commands/org/login/jwt.ts](https://github.com/salesforcecli/plugin-auth/blob/3.5.3/src/commands/org/login/jwt.ts)_
 
 ## `sf org login sfdx-url`
 
@@ -379,7 +379,7 @@ EXAMPLES
    $ echo url | sf org login sfdx-url --sfdx-url-stdin
 ```
 
-_See code: [src/commands/org/login/sfdx-url.ts](https://github.com/salesforcecli/plugin-auth/blob/3.5.1/src/commands/org/login/sfdx-url.ts)_
+_See code: [src/commands/org/login/sfdx-url.ts](https://github.com/salesforcecli/plugin-auth/blob/3.5.3/src/commands/org/login/sfdx-url.ts)_
 
 ## `sf org login web`
 
@@ -466,7 +466,7 @@ FLAG DESCRIPTIONS
     To specify a sandbox, set --instance-url to "https://<MyDomainName>--<SandboxName>.sandbox.my.salesforce.com".
 ```
 
-_See code: [src/commands/org/login/web.ts](https://github.com/salesforcecli/plugin-auth/blob/3.5.1/src/commands/org/login/web.ts)_
+_See code: [src/commands/org/login/web.ts](https://github.com/salesforcecli/plugin-auth/blob/3.5.3/src/commands/org/login/web.ts)_
 
 ## `sf org logout`
 
@@ -527,6 +527,6 @@ FLAG DESCRIPTIONS
     All orgs includes Dev Hubs, sandboxes, DE orgs, and expired, deleted, and unknown-status scratch orgs.
 ```
 
-_See code: [src/commands/org/logout.ts](https://github.com/salesforcecli/plugin-auth/blob/3.5.1/src/commands/org/logout.ts)_
+_See code: [src/commands/org/logout.ts](https://github.com/salesforcecli/plugin-auth/blob/3.5.3/src/commands/org/logout.ts)_
 
 <!-- commandsstop -->

package/lib/hooks/diagnostics.d.ts

@@ -0,0 +1,6 @@
+import { SfDoctor } from '@salesforce/plugin-info';
+type HookFunction = (options: {
+    doctor: SfDoctor;
+}) => Promise<[void]>;
+export declare const hook: HookFunction;
+export {};

package/lib/hooks/diagnostics.js

@@ -0,0 +1,166 @@
+/*
+ * Copyright (c) 2022, salesforce.com, inc.
+ * All rights reserved.
+ * Licensed under the BSD 3-Clause license.
+ * For full license text, see LICENSE.txt file in the repo root or https://opensource.org/licenses/BSD-3-Clause
+ */
+import childProcess from 'node:child_process';
+import util from 'node:util';
+import { join } from 'node:path';
+import fs from 'node:fs';
+import { Global, Lifecycle, Logger, Messages } from '@salesforce/core';
+import { asString, isString } from '@salesforce/ts-types';
+import { parseJsonMap } from '@salesforce/kit';
+let logger;
+const getLogger = () => {
+    if (!logger) {
+        logger = Logger.childFromRoot('plugin-auth-diagnostics');
+    }
+    return logger;
+};
+const pluginName = '@salesforce/plugin-auth';
+Messages.importMessagesDirectoryFromMetaUrl(import.meta.url);
+const messages = Messages.loadMessages(pluginName, 'diagnostics');
+let exec;
+export const hook = async (options) => {
+    getLogger().debug(`Running SfDoctor diagnostics for ${pluginName}`);
+    exec = util.promisify(childProcess.exec);
+    try {
+        await exec('npm -v');
+        return await Promise.all([cryptoVersionTest(options.doctor)]);
+    }
+    catch (e) {
+        const errMsg = e instanceof Error ? e.message : isString(e) ? e : 'unknown';
+        getLogger().warn(`Unable to run SfDoctor diagnostics for ${pluginName} due to: ${errMsg}`);
+        return Promise.resolve([undefined]);
+    }
+};
+// ============================
+// ***   DIAGNOSTIC TESTS   ***
+// ============================
+// Detects if the auth key used is crypto v1 or v2
+// Detects if the SF_CRYPTO_V2 env var is set and if it matches the key crypto version
+const cryptoVersionTest = async (doctor) => {
+    getLogger().debug('Running Crypto Version tests');
+    const sfCryptoV2Support = await supportsCliV2Crypto(doctor);
+    let cryptoVersion = 'unknown';
+    const sfCryptoV2 = process.env.SF_CRYPTO_V2;
+    const isUsingGenericKeychain = process.platform === 'win32' ||
+        process.env.SF_USE_GENERIC_UNIX_KEYCHAIN?.toLowerCase() === 'true' ||
+        process.env.USE_GENERIC_UNIX_KEYCHAIN?.toLowerCase() === 'true';
+    // If the CLI is using key.json, we can read the file and get the key length
+    // to discover the crypto version being used. If not, then we can't detect it.
+    if (isUsingGenericKeychain) {
+        try {
+            const keyFile = join(Global.DIR, 'key.json');
+            const key = asString(parseJsonMap(fs.readFileSync(keyFile, 'utf8'))?.key);
+            cryptoVersion = key?.length === 64 ? 'v2' : key?.length === 32 ? 'v1' : 'unknown';
+        }
+        catch (e) {
+            const errMsg = e instanceof Error ? e.message : isString(e) ? e : 'unknown';
+            getLogger().debug(`Could not detect key size due to:\n${errMsg}`);
+        }
+    }
+    doctor.addPluginData(pluginName, {
+        sfCryptoV2,
+        isUsingGenericKeychain,
+        sfCryptoV2Support,
+        cryptoVersion,
+    });
+    const testName1 = `[${pluginName}] CLI supports v2 crypto`;
+    let status1 = 'pass';
+    if (!sfCryptoV2Support) {
+        status1 = 'warn';
+        doctor.addSuggestion(messages.getMessage('sfCryptoV2Support'));
+    }
+    void Lifecycle.getInstance().emit('Doctor:diagnostic', { testName: testName1, status: status1 });
+    // Only do this test if we know they are using v2 crypto
+    if (cryptoVersion === 'v2') {
+        const testName2 = `[${pluginName}] CLI using stable v2 crypto`;
+        let status2 = 'pass';
+        if (!sfCryptoV2Support) {
+            status2 = 'fail';
+            doctor.addSuggestion(messages.getMessage('sfCryptoV2Unstable'));
+        }
+        void Lifecycle.getInstance().emit('Doctor:diagnostic', { testName: testName2, status: status2 });
+    }
+    // Only do this test if we know they are using v1 crypto
+    if (cryptoVersion === 'v1') {
+        const testName3 = `[${pluginName}] CLI using stable v1 crypto`;
+        let status3 = 'pass';
+        if (sfCryptoV2?.toLowerCase() === 'true') {
+            // They have SF_CRYPTO_V2=true but are using v1 crypto. They might not know this
+            // or know how to generate a v2 key.
+            if (sfCryptoV2Support) {
+                status3 = 'warn';
+                doctor.addSuggestion(messages.getMessage('sfCryptoV2Desired'));
+            }
+        }
+        void Lifecycle.getInstance().emit('Doctor:diagnostic', { testName: testName3, status: status3 });
+    }
+};
+// Inspect CLI install and plugins to ensure all versions of `@salesforce/core` can support v2 crypto.
+// This uses `npm explain @salesforce/core` to ensure all versions are greater than 6.6.0.
+const supportsCliV2Crypto = async (doctor) => {
+    const diagnosis = doctor.getDiagnosis();
+    let coreSupportsV2 = false;
+    let pluginsSupportV2 = false;
+    let linksSupportsV2 = false;
+    const { root, dataDir } = diagnosis.cliConfig;
+    // check core CLI
+    if (root?.length) {
+        try {
+            const { stdout } = await exec('npm explain @salesforce/core --json', { cwd: root });
+            const coreExplanation = JSON.parse(stdout);
+            coreSupportsV2 = coreExplanation.every((exp) => exp?.version > '6.6.0');
+        }
+        catch (e) {
+            const errMsg = e instanceof Error ? e.message : isString(e) ? e : 'unknown';
+            getLogger().debug(`Cannot determine CLI v2 crypto core support due to: ${errMsg}`);
+        }
+    }
+    // check installed plugins
+    if (dataDir?.length) {
+        try {
+            const { stdout } = await exec('npm explain @salesforce/core --json', { cwd: dataDir });
+            const pluginsExplanation = JSON.parse(stdout);
+            pluginsSupportV2 = pluginsExplanation?.length ? pluginsExplanation.every((exp) => exp?.version > '6.6.0') : true;
+        }
+        catch (e) {
+            const errMsg = e instanceof Error ? e.message : isString(e) ? e : 'unknown';
+            if (errMsg.includes('No dependencies found matching @salesforce/core')) {
+                pluginsSupportV2 = true;
+            }
+            else {
+                getLogger().debug(`Cannot determine CLI v2 crypto installed plugins support due to: ${errMsg}`);
+            }
+        }
+    }
+    // check linked plugins
+    const pluginVersions = diagnosis?.versionDetail?.pluginVersions;
+    const linkedPlugins = pluginVersions.filter((pv) => pv.includes('(link)'));
+    if (linkedPlugins?.length) {
+        try {
+            const coreVersionChecks = await Promise.all(linkedPlugins.map(async (pluginEntry) => {
+                // last entry is the path. E.g., "auth 3.3.17 (link) /Users/me/dev/plugin-auth",
+                const pluginPath = pluginEntry.split(' ')?.pop();
+                if (pluginPath?.length) {
+                    const { stdout } = await exec('npm explain @salesforce/core --json', { cwd: pluginPath });
+                    const linksExplanation = JSON.parse(stdout);
+                    return linksExplanation?.every((exp) => exp?.version > '6.6.0');
+                }
+                return true;
+            }));
+            linksSupportsV2 = !coreVersionChecks.includes(false);
+        }
+        catch (e) {
+            const errMsg = e instanceof Error ? e.message : isString(e) ? e : 'unknown';
+            getLogger().debug(`Cannot determine CLI v2 crypto linked plugins support due to: ${errMsg}`);
+        }
+    }
+    else {
+        linksSupportsV2 = true;
+    }
+    return coreSupportsV2 && pluginsSupportV2 && linksSupportsV2;
+};
+//# sourceMappingURL=diagnostics.js.map

package/lib/hooks/diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../src/hooks/diagnostics.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,YAAY,MAAM,oBAAoB,CAAC;AAE9C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEvE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAK/C,IAAI,MAAc,CAAC;AACnB,MAAM,SAAS,GAAG,GAAW,EAAE;IAC7B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,yBAAyB,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAC7C,QAAQ,CAAC,kCAAkC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;AAElE,IAAI,IAAqB,CAAC;AAE1B,MAAM,CAAC,MAAM,IAAI,GAAiB,KAAK,EAAE,OAAO,EAAE,EAAE;IAClD,SAAS,EAAE,CAAC,KAAK,CAAC,oCAAoC,UAAU,EAAE,CAAC,CAAC;IACpE,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,SAAS,EAAE,CAAC,IAAI,CAAC,0CAA0C,UAAU,YAAY,MAAM,EAAE,CAAC,CAAC;QAC3F,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACtC,CAAC;AACH,CAAC,CAAC;AAgBF,+BAA+B;AAC/B,+BAA+B;AAC/B,+BAA+B;AAE/B,kDAAkD;AAClD,sFAAsF;AACtF,MAAM,iBAAiB,GAAG,KAAK,EAAE,MAAgB,EAAiB,EAAE;IAClE,SAAS,EAAE,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAElD,MAAM,iBAAiB,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,aAAa,GAA4B,SAAS,CAAC;IAEvD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAE5C,MAAM,sBAAsB,GAC1B,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC5B,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,WAAW,EAAE,KAAK,MAAM;QAClE,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,WAAW,EAAE,KAAK,MAAM,CAAC;IAElE,4EAA4E;IAC5E,8EAA8E;IAC9E,IAAI,sBAAsB,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1E,aAAa,GAAG,GAAG,EAAE,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACpF,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,SAAS,EAAE,CAAC,KAAK,CAAC,sCAAsC,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE;QAC/B,UAAU;QACV,sBAAsB;QACtB,iBAAiB;QACjB,aAAa;KACd,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,UAAU,0BAA0B,CAAC;IAC3D,IAAI,OAAO,GAAG,MAAM,CAAC;IACrB,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,GAAG,MAAM,CAAC;QACjB,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAEjG,wDAAwD;IACxD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,UAAU,8BAA8B,CAAC;QAC/D,IAAI,OAAO,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACvB,OAAO,GAAG,MAAM,CAAC;YACjB,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,wDAAwD;IACxD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,UAAU,8BAA8B,CAAC;QAC/D,IAAI,OAAO,GAAG,MAAM,CAAC;QACrB,IAAI,UAAU,EAAE,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YACzC,gFAAgF;YAChF,oCAAoC;YACpC,IAAI,iBAAiB,EAAE,CAAC;gBACtB,OAAO,GAAG,MAAM,CAAC;gBACjB,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QACD,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACnG,CAAC;AACH,CAAC,CAAC;AAEF,sGAAsG;AACtG,0FAA0F;AAC1F,MAAM,mBAAmB,GAAG,KAAK,EAAE,MAAgB,EAAoB,EAAE;IACvE,MAAM,SAAS,GAAsB,MAAM,CAAC,YAAY,EAAE,CAAC;IAC3D,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,eAAe,GAAG,KAAK,CAAC;IAE5B,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,SAAS,CAAC;IAC9C,iBAAiB;IACjB,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,qCAAqC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YACpF,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAqB,CAAC;YAC/D,cAAc,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,SAAS,EAAE,CAAC,KAAK,CAAC,uDAAuD,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,0BAA0B;IAC1B,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,qCAAqC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YACvF,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAqB,CAAC;YAClE,gBAAgB,GAAG,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnH,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,IAAI,MAAM,CAAC,QAAQ,CAAC,iDAAiD,CAAC,EAAE,CAAC;gBACvE,gBAAgB,GAAG,IAAI,CAAC;YAC1B,CAAC;iBAAM,CAAC;gBACN,SAAS,EAAE,CAAC,KAAK,CAAC,oEAAoE,MAAM,EAAE,CAAC,CAAC;YAClG,CAAC;QACH,CAAC;IACH,CAAC;IACD,uBAAuB;IACvB,MAAM,cAAc,GAAG,SAAS,EAAE,aAAa,EAAE,cAAc,CAAC;IAChE,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3E,IAAI,aAAa,EAAE,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,GAAG,CACzC,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;gBACtC,gFAAgF;gBAChF,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;gBACjD,IAAI,UAAU,EAAE,MAAM,EAAE,CAAC;oBACvB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,qCAAqC,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;oBAC1F,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAqB,CAAC;oBAChE,OAAO,gBAAgB,EAAE,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC;gBAClE,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CACH,CAAC;YACF,eAAe,GAAG,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,SAAS,EAAE,CAAC,KAAK,CAAC,iEAAiE,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;SAAM,CAAC;QACN,eAAe,GAAG,IAAI,CAAC;IACzB,CAAC;IAED,OAAO,cAAc,IAAI,gBAAgB,IAAI,eAAe,CAAC;AAC/D,CAAC,CAAC"}

package/messages/diagnostics.md

@@ -0,0 +1,11 @@
+# sfCryptoV2Support
+
+Your current installation of Salesforce CLI, including all the plugins you've linked and installed, doesn't yet support v2 crypto. All plugins and libraries must use at least version 6.7.0 of `@salesforce/core` to support v2 crypto. You're generally still able to successfully authenticate with your current CLI installation, but not if you generate a v2 crypto key.
+
+# sfCryptoV2Unstable
+
+Your current installation of Salesforce CLI, including all the plugins you've linked and installed, is using v2 crypto without proper library support, which can cause authentication failures. We recommend that you switch back to v1 crypto.
+
+# sfCryptoV2Desired
+
+SF_CRYPTO_V2=true is set in your environment, but you're actually using v1 crypto. Your Salesforce CLI installation supports using v2 crypto. If you desire this behavior, follow the instructions in the documentation (provide link).