@zitadel/cli 0.0.0

package/dist/commands/doctor.mjs

@@ -0,0 +1,302 @@
+import { a as readZitadelConfig, i as readRendererId, o as readZitadelSecret, p as ZitadelError, r as readDevelopmentIssuer, s as BaseCommand, u as isObject } from "../project-C3pSfbao.mjs";
+import { r as issuerFromPort, t as createOrca } from "../orca-COsUnVoz.mjs";
+import { Flags } from "@oclif/core";
+import consola from "consola";
+import { chmod, readFile, stat, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import "@zitadel/api/generated/endpoints/zitadelNextGen.zod";
+//#region src/commands/doctor/checks/types.ts
+/**
+* Base class for checks: subclasses declare `name`, `path`, and a success
+* `summary`, and implement the single {@link verify} method that throws on
+* failure. {@link run} wraps it so a thrown error becomes a `fail` outcome
+* carrying the error message, and success becomes a `pass` with `summary`.
+*
+* {@link fix} defaults to a no-op: checks whose failure has no safe automatic
+* remedy (a missing secret, an invalid user schema) simply do not override it.
+*/
+var AbstractSanityCheck = class {
+	async run(ctx) {
+		try {
+			await this.verify(ctx);
+			return {
+				name: this.name,
+				status: "pass",
+				message: this.summary,
+				path: this.path
+			};
+		} catch (error) {
+			return {
+				name: this.name,
+				status: "fail",
+				message: error instanceof Error ? error.message : String(error),
+				path: this.path
+			};
+		}
+	}
+	async fix(_ctx) {}
+};
+//#endregion
+//#region src/commands/doctor/checks/config.ts
+/** Verifies `zitadel.json` exists and parses. */
+var ConfigCheck = class extends AbstractSanityCheck {
+	name = "config";
+	path = "zitadel.json";
+	summary = "zitadel.json parses";
+	async verify(ctx) {
+		await readZitadelConfig(ctx.cwd);
+	}
+};
+//#endregion
+//#region src/commands/doctor/checks/secret.ts
+/** Verifies `.zitadel/secret` exists and parses. */
+var SecretCheck = class extends AbstractSanityCheck {
+	name = "secret";
+	path = ".zitadel/secret";
+	summary = ".zitadel/secret parses";
+	async verify(ctx) {
+		await readZitadelSecret(ctx.cwd);
+	}
+};
+//#endregion
+//#region src/commands/doctor/checks/secret-permissions.ts
+/** Verifies `.zitadel/secret` is locked down to `0600`, and re-locks it on fix. */
+var SecretPermissionsCheck = class extends AbstractSanityCheck {
+	name = "secret-permissions";
+	path = ".zitadel/secret";
+	summary = ".zitadel/secret has 0600 permissions";
+	async verify(ctx) {
+		const mode = (await stat(join(ctx.cwd, ".zitadel/secret"))).mode & 511;
+		if (mode !== 384) throw new Error(`expected 0600, got ${mode.toString(8)}`);
+	}
+	async fix(ctx) {
+		if (ctx.dryRun) return;
+		await chmod(join(ctx.cwd, ".zitadel/secret"), 384);
+	}
+};
+//#endregion
+//#region src/commands/doctor/checks/gitignore.ts
+/** The entries `.gitignore` must carry to keep secrets and env files untracked. */
+const REQUIRED_ENTRIES = [
+	".zitadel/secret",
+	".env*",
+	"!.env.example"
+];
+/** Verifies `.gitignore` excludes the local secret and env files; appends any missing. */
+var GitignoreCheck = class extends AbstractSanityCheck {
+	name = "gitignore";
+	path = ".gitignore";
+	summary = ".gitignore protects local secret/env files";
+	async verify(ctx) {
+		const lines = (await readFile(join(ctx.cwd, ".gitignore"), "utf8")).split(/\r?\n/g);
+		for (const entry of REQUIRED_ENTRIES) if (!lines.includes(entry)) throw new Error(`missing ${entry}`);
+	}
+	async fix(ctx) {
+		const path = join(ctx.cwd, ".gitignore");
+		const existing = await readFile(path, "utf8").catch(() => "");
+		const lines = existing.split(/\r?\n/g);
+		const missing = REQUIRED_ENTRIES.filter((entry) => !lines.includes(entry));
+		if (missing.length === 0 || ctx.dryRun) return;
+		await writeFile(path, `${existing}${existing.length > 0 && !existing.endsWith("\n") ? "\n" : ""}${missing.join("\n")}\n`);
+	}
+};
+//#endregion
+//#region src/commands/doctor/checks/env-example.ts
+/** The keys `.env.example` must document for a Zitadel-managed project. */
+const REQUIRED_KEYS = [
+	"ZITADEL_PROJECT_ID",
+	"ZITADEL_ENVIRONMENT",
+	"ZITADEL_ISSUER"
+];
+/** Verifies `.env.example` documents the required Zitadel keys; appends any missing. */
+var EnvExampleCheck = class extends AbstractSanityCheck {
+	name = "env-example";
+	path = ".env.example";
+	summary = ".env.example references required keys";
+	async verify(ctx) {
+		const contents = await readFile(join(ctx.cwd, ".env.example"), "utf8");
+		for (const key of REQUIRED_KEYS) if (!contents.includes(`${key}=`)) throw new Error(`missing ${key}`);
+	}
+	async fix(ctx) {
+		const path = join(ctx.cwd, ".env.example");
+		const existing = await readFile(path, "utf8").catch(() => "");
+		const missing = REQUIRED_KEYS.filter((key) => !existing.includes(`${key}=`));
+		if (missing.length === 0 || ctx.dryRun) return;
+		await writeFile(path, `${existing}${existing.length > 0 && !existing.endsWith("\n") ? "\n" : ""}${missing.map((key) => `${key}=`).join("\n")}\n`);
+	}
+};
+//#endregion
+//#region src/commands/doctor/checks/framework.ts
+/** Verifies the framework detected on disk matches the one recorded in config. */
+var FrameworkCheck = class extends AbstractSanityCheck {
+	name = "framework";
+	path = "zitadel.json";
+	summary = "Detected framework matches recorded framework";
+	async verify(ctx) {
+		const config = await readZitadelConfig(ctx.cwd);
+		const detected = await ctx.orca.detect(ctx.cwd);
+		const recorded = isObject(config.framework) ? config.framework.id : void 0;
+		if (recorded !== detected.id) throw new Error(`expected ${String(recorded)}, detected ${detected.id}`);
+	}
+};
+//#endregion
+//#region src/commands/doctor/patch-context.ts
+/**
+* Reconstructs a {@link PatchContext} from the on-disk project (config, secret)
+* plus fresh framework detection, so a patcher repair can rebuild its plan.
+* Used by the dependency check's `fix`, which reclaims the framework-specific
+* SDK package via `patcher.repair`. The user schema and flow definition are
+* server-owned and no longer scaffolded locally, so nothing here reads them.
+*/
+async function loadPatchContext(cwd, orca) {
+	const config = await readZitadelConfig(cwd);
+	const secret = await readZitadelSecret(cwd);
+	const framework = await orca.detect(cwd);
+	return {
+		framework,
+		rendererId: readRendererId(config),
+		issuer: await resolveIssuer(cwd, config, framework),
+		server: typeof config.server === "string" ? config.server : "",
+		project: {
+			id: secret.project_id,
+			projectSecret: secret.project_secret,
+			previewSecret: secret.preview_secret,
+			previewOrigins: secret.preview_origins,
+			createdAt: secret.created_at
+		}
+	};
+}
+async function resolveIssuer(cwd, config, facts) {
+	const fromConfig = readDevelopmentIssuer(config);
+	if (fromConfig && fromConfig.length > 0) return fromConfig;
+	const state = await readState(cwd);
+	if (typeof state?.dev_port === "number") return issuerFromPort(state.dev_port);
+	return facts.url;
+}
+async function readState(cwd) {
+	try {
+		const contents = await readFile(join(cwd, ".zitadel/state.json"), "utf8");
+		return JSON.parse(contents);
+	} catch {
+		return;
+	}
+}
+//#endregion
+//#region src/commands/doctor/checks/dependency.ts
+/**
+* Verifies the project still declares a Zitadel SDK dependency in
+* `package.json`. The patcher adds a scoped package (e.g.
+* `@zitadel/sdk-next`); the check is generic over the `@zitadel*`
+* scope so any framework renderer's dependency satisfies it.
+*/
+var DependencyCheck = class extends AbstractSanityCheck {
+	name = "dependency";
+	path = "package.json";
+	summary = "package.json depends on a Zitadel SDK package";
+	async verify(ctx) {
+		const pkg = JSON.parse(await readFile(join(ctx.cwd, "package.json"), "utf8"));
+		if (![...Object.keys(pkg.dependencies ?? {}), ...Object.keys(pkg.devDependencies ?? {})].some((name) => name.startsWith("@zitadel"))) throw new Error("no @zitadel* dependency found in package.json");
+	}
+	/**
+	* Repairs by reclaiming the patcher's managed artifacts: rebuilds the
+	* `PatchContext` from disk and calls `patcher.repair`, which re-adds the
+	* SDK dependency via its `add-dep` op. The exact package name is framework
+	* + renderer specific and known only to the patcher (which deliberately
+	* hides its file-op plan behind the family-neutral `Patcher` interface),
+	* so going through `repair` is the only sanctioned path.
+	*/
+	async fix(ctx) {
+		const patchCtx = await loadPatchContext(ctx.cwd, ctx.orca);
+		await ctx.orca.patcherFor(patchCtx.framework.id).repair(patchCtx, {
+			cwd: ctx.cwd,
+			dryRun: ctx.dryRun,
+			force: true
+		});
+	}
+};
+//#endregion
+//#region src/commands/doctor/checks/project-match.ts
+/** Verifies `.zitadel/secret`'s project_id matches `zitadel.json`'s project. */
+var ProjectMatchCheck = class extends AbstractSanityCheck {
+	name = "project-match";
+	path = ".zitadel/secret";
+	summary = ".zitadel/secret project_id matches zitadel.json project";
+	async verify(ctx) {
+		const config = await readZitadelConfig(ctx.cwd);
+		const secret = await readZitadelSecret(ctx.cwd);
+		const configProject = typeof config.project === "string" ? config.project : void 0;
+		if (secret.project_id !== configProject) throw new Error(".zitadel/secret project_id does not match zitadel.json project");
+	}
+};
+//#endregion
+//#region src/commands/doctor/checks/index.ts
+/** Every diagnostic the `doctor` command runs, in display order. */
+const SANITY_CHECKS = [
+	new ConfigCheck(),
+	new SecretCheck(),
+	new SecretPermissionsCheck(),
+	new GitignoreCheck(),
+	new EnvExampleCheck(),
+	new FrameworkCheck(),
+	new DependencyCheck(),
+	new ProjectMatchCheck()
+];
+//#endregion
+//#region src/commands/doctor/index.ts
+/**
+* `zitadel doctor` — verify generated files and local state.
+*
+* Runs every registered {@link SANITY_CHECKS} entry and emits the aggregate
+* result; if any check fails it throws `E_VALIDATION` carrying the full check
+* details. With `--fix`, each failing check first attempts its own repair (a
+* no-op for checks with no safe automatic remedy), then the battery re-runs.
+*
+* The `--fix` loop is best-effort: a repair that throws (e.g. a missing
+* prerequisite file the check itself would also flag) is logged at debug
+* level and skipped, not propagated — the post-fix re-verify still reports
+* whatever remains broken.
+*/
+var Doctor = class Doctor extends BaseCommand {
+	static description = "Verify generated files and local state.";
+	static flags = { fix: Flags.boolean({ description: "Re-apply missing managed files." }) };
+	async run() {
+		const { flags } = await this.parse(Doctor);
+		await this.toMeta(flags);
+		const { cwd, dryRun } = this.meta;
+		const ctx = {
+			cwd,
+			orca: createOrca(),
+			dryRun
+		};
+		if (flags.fix) {
+			const before = await Promise.all(SANITY_CHECKS.map((check) => check.run(ctx)));
+			for (const [index, check] of SANITY_CHECKS.entries()) {
+				if (before[index]?.status !== "fail") continue;
+				try {
+					await check.fix(ctx);
+				} catch (error) {
+					consola.debug(`doctor --fix: ${check.name} repair failed`, error);
+				}
+			}
+		}
+		const checks = await Promise.all(SANITY_CHECKS.map((check) => check.run(ctx)));
+		const failed = checks.filter((check) => check.status === "fail");
+		const data = {
+			title: failed.length === 0 ? "Zitadel doctor passed." : "Zitadel doctor found issues.",
+			ok: failed.length === 0,
+			checks
+		};
+		if (failed.length > 0) throw new ZitadelError("E_VALIDATION", "Zitadel doctor found issues", {
+			hint: "Run `npx @zitadel/cli@latest doctor --fix` to re-apply missing managed files.",
+			details: data
+		});
+		return this.emit({
+			status: "ok",
+			data
+		});
+	}
+};
+//#endregion
+export { Doctor as default };
+
+//# sourceMappingURL=doctor.mjs.map

package/dist/commands/doctor.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.mjs","names":[],"sources":["../../src/commands/doctor/checks/types.ts","../../src/commands/doctor/checks/config.ts","../../src/commands/doctor/checks/secret.ts","../../src/commands/doctor/checks/secret-permissions.ts","../../src/commands/doctor/checks/gitignore.ts","../../src/commands/doctor/checks/env-example.ts","../../src/commands/doctor/checks/framework.ts","../../src/commands/doctor/patch-context.ts","../../src/commands/doctor/checks/dependency.ts","../../src/commands/doctor/checks/project-match.ts","../../src/commands/doctor/checks/index.ts","../../src/commands/doctor/index.ts"],"sourcesContent":["import type { Orca } from \"../../../lib/orca\";\n\n/** Pass/fail outcome of a single {@link SanityCheck}. */\nexport type CheckOutcome = {\n  name: string;\n  status: \"pass\" | \"fail\";\n  message: string;\n  path?: string;\n};\n\n/** Everything a check needs to inspect or repair a project. */\nexport type CheckContext = {\n  readonly cwd: string;\n  readonly orca: Orca;\n  /** When true, {@link SanityCheck.fix} must preview without writing. */\n  readonly dryRun: boolean;\n};\n\n/**\n * One diagnostic the `doctor` command runs. Each concrete check is a small\n * standalone class that both verifies its concern ({@link run}) and knows how\n * to repair it ({@link fix}); the command executes every registered check,\n * aggregates the {@link CheckOutcome}s, and (under `--fix`) repairs the ones\n * that failed.\n */\nexport interface SanityCheck {\n  /** Stable identifier surfaced in logs and the JSON envelope. */\n  readonly name: string;\n  run(ctx: CheckContext): Promise<CheckOutcome>;\n  /** Repair what this check verifies. A no-op when there is no safe auto-fix. */\n  fix(ctx: CheckContext): Promise<void>;\n}\n\n/**\n * Base class for checks: subclasses declare `name`, `path`, and a success\n * `summary`, and implement the single {@link verify} method that throws on\n * failure. {@link run} wraps it so a thrown error becomes a `fail` outcome\n * carrying the error message, and success becomes a `pass` with `summary`.\n *\n * {@link fix} defaults to a no-op: checks whose failure has no safe automatic\n * remedy (a missing secret, an invalid user schema) simply do not override it.\n */\nexport abstract class AbstractSanityCheck implements SanityCheck {\n  abstract readonly name: string;\n  abstract readonly path: string;\n  protected abstract readonly summary: string;\n\n  /** Throw to signal failure; the thrown message is surfaced to the user. */\n  protected abstract verify(ctx: CheckContext): Promise<void>;\n\n  async run(ctx: CheckContext): Promise<CheckOutcome> {\n    try {\n      await this.verify(ctx);\n      return { name: this.name, status: \"pass\", message: this.summary, path: this.path };\n    } catch (error) {\n      return {\n        name: this.name,\n        status: \"fail\",\n        message: error instanceof Error ? error.message : String(error),\n        path: this.path,\n      };\n    }\n  }\n\n  async fix(_ctx: CheckContext): Promise<void> {\n    return;\n  }\n}\n","import { readZitadelConfig } from \"../../../lib/project\";\nimport { AbstractSanityCheck, type CheckContext } from \"./types\";\n\n/** Verifies `zitadel.json` exists and parses. */\nexport class ConfigCheck extends AbstractSanityCheck {\n  readonly name = \"config\";\n  readonly path = \"zitadel.json\";\n  protected readonly summary = \"zitadel.json parses\";\n\n  protected async verify(ctx: CheckContext): Promise<void> {\n    await readZitadelConfig(ctx.cwd);\n  }\n}\n","import { readZitadelSecret } from \"../../../lib/project\";\nimport { AbstractSanityCheck, type CheckContext } from \"./types\";\n\n/** Verifies `.zitadel/secret` exists and parses. */\nexport class SecretCheck extends AbstractSanityCheck {\n  readonly name = \"secret\";\n  readonly path = \".zitadel/secret\";\n  protected readonly summary = \".zitadel/secret parses\";\n\n  protected async verify(ctx: CheckContext): Promise<void> {\n    await readZitadelSecret(ctx.cwd);\n  }\n}\n","import { chmod, stat } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { AbstractSanityCheck, type CheckContext } from \"./types\";\n\n/** Verifies `.zitadel/secret` is locked down to `0600`, and re-locks it on fix. */\nexport class SecretPermissionsCheck extends AbstractSanityCheck {\n  readonly name = \"secret-permissions\";\n  readonly path = \".zitadel/secret\";\n  protected readonly summary = \".zitadel/secret has 0600 permissions\";\n\n  protected async verify(ctx: CheckContext): Promise<void> {\n    const mode = (await stat(join(ctx.cwd, \".zitadel/secret\"))).mode & 0o777;\n    if (mode !== 0o600) {\n      throw new Error(`expected 0600, got ${mode.toString(8)}`);\n    }\n  }\n\n  override async fix(ctx: CheckContext): Promise<void> {\n    if (ctx.dryRun) {\n      return;\n    }\n    await chmod(join(ctx.cwd, \".zitadel/secret\"), 0o600);\n  }\n}\n","import { readFile, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { AbstractSanityCheck, type CheckContext } from \"./types\";\n\n/** The entries `.gitignore` must carry to keep secrets and env files untracked. */\nconst REQUIRED_ENTRIES = [\".zitadel/secret\", \".env*\", \"!.env.example\"];\n\n/** Verifies `.gitignore` excludes the local secret and env files; appends any missing. */\nexport class GitignoreCheck extends AbstractSanityCheck {\n  readonly name = \"gitignore\";\n  readonly path = \".gitignore\";\n  protected readonly summary = \".gitignore protects local secret/env files\";\n\n  protected async verify(ctx: CheckContext): Promise<void> {\n    const lines = (await readFile(join(ctx.cwd, \".gitignore\"), \"utf8\")).split(/\\r?\\n/g);\n    for (const entry of REQUIRED_ENTRIES) {\n      if (!lines.includes(entry)) {\n        throw new Error(`missing ${entry}`);\n      }\n    }\n  }\n\n  override async fix(ctx: CheckContext): Promise<void> {\n    const path = join(ctx.cwd, \".gitignore\");\n    const existing = await readFile(path, \"utf8\").catch(() => \"\");\n    const lines = existing.split(/\\r?\\n/g);\n    const missing = REQUIRED_ENTRIES.filter((entry) => !lines.includes(entry));\n    if (missing.length === 0 || ctx.dryRun) {\n      return;\n    }\n    const prefix = existing.length > 0 && !existing.endsWith(\"\\n\") ? \"\\n\" : \"\";\n    await writeFile(path, `${existing}${prefix}${missing.join(\"\\n\")}\\n`);\n  }\n}\n","import { readFile, writeFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { AbstractSanityCheck, type CheckContext } from \"./types\";\n\n/** The keys `.env.example` must document for a Zitadel-managed project. */\nconst REQUIRED_KEYS = [\"ZITADEL_PROJECT_ID\", \"ZITADEL_ENVIRONMENT\", \"ZITADEL_ISSUER\"];\n\n/** Verifies `.env.example` documents the required Zitadel keys; appends any missing. */\nexport class EnvExampleCheck extends AbstractSanityCheck {\n  readonly name = \"env-example\";\n  readonly path = \".env.example\";\n  protected readonly summary = \".env.example references required keys\";\n\n  protected async verify(ctx: CheckContext): Promise<void> {\n    const contents = await readFile(join(ctx.cwd, \".env.example\"), \"utf8\");\n    for (const key of REQUIRED_KEYS) {\n      if (!contents.includes(`${key}=`)) {\n        throw new Error(`missing ${key}`);\n      }\n    }\n  }\n\n  override async fix(ctx: CheckContext): Promise<void> {\n    const path = join(ctx.cwd, \".env.example\");\n    const existing = await readFile(path, \"utf8\").catch(() => \"\");\n    const missing = REQUIRED_KEYS.filter((key) => !existing.includes(`${key}=`));\n    if (missing.length === 0 || ctx.dryRun) {\n      return;\n    }\n    const prefix = existing.length > 0 && !existing.endsWith(\"\\n\") ? \"\\n\" : \"\";\n    await writeFile(path, `${existing}${prefix}${missing.map((key) => `${key}=`).join(\"\\n\")}\\n`);\n  }\n}\n","import { isObject } from \"../../../lib/json\";\nimport { readZitadelConfig } from \"../../../lib/project\";\nimport { AbstractSanityCheck, type CheckContext } from \"./types\";\n\n/** Verifies the framework detected on disk matches the one recorded in config. */\nexport class FrameworkCheck extends AbstractSanityCheck {\n  readonly name = \"framework\";\n  readonly path = \"zitadel.json\";\n  protected readonly summary = \"Detected framework matches recorded framework\";\n\n  protected async verify(ctx: CheckContext): Promise<void> {\n    const config = await readZitadelConfig(ctx.cwd);\n    const detected = await ctx.orca.detect(ctx.cwd);\n    const recorded = isObject(config.framework) ? config.framework.id : undefined;\n    if (recorded !== detected.id) {\n      throw new Error(`expected ${String(recorded)}, detected ${detected.id}`);\n    }\n  }\n}\n","import { readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { issuerFromPort, type FrameworkFacts, type Orca } from \"../../lib/orca\";\nimport type { PatchContext } from \"../../lib/orca/patchers/types\";\nimport { readDevelopmentIssuer, readRendererId, readZitadelConfig, readZitadelSecret } from \"../../lib/project\";\n\n/**\n * Reconstructs a {@link PatchContext} from the on-disk project (config, secret)\n * plus fresh framework detection, so a patcher repair can rebuild its plan.\n * Used by the dependency check's `fix`, which reclaims the framework-specific\n * SDK package via `patcher.repair`. The user schema and flow definition are\n * server-owned and no longer scaffolded locally, so nothing here reads them.\n */\nexport async function loadPatchContext(cwd: string, orca: Orca): Promise<PatchContext> {\n  const config = await readZitadelConfig(cwd);\n  const secret = await readZitadelSecret(cwd);\n  const framework = await orca.detect(cwd);\n  return {\n    framework,\n    rendererId: readRendererId(config),\n    issuer: await resolveIssuer(cwd, config, framework),\n    server: typeof config.server === \"string\" ? config.server : \"\",\n    project: {\n      id: secret.project_id,\n      projectSecret: secret.project_secret,\n      previewSecret: secret.preview_secret,\n      previewOrigins: secret.preview_origins,\n      createdAt: secret.created_at,\n    },\n  };\n}\n\nasync function resolveIssuer(\n  cwd: string,\n  config: Record<string, unknown>,\n  facts: FrameworkFacts,\n): Promise<string> {\n  const fromConfig = readDevelopmentIssuer(config);\n  if (fromConfig && fromConfig.length > 0) {\n    return fromConfig;\n  }\n  const state = await readState(cwd);\n  if (typeof state?.dev_port === \"number\") {\n    return issuerFromPort(state.dev_port);\n  }\n  return facts.url;\n}\n\nasync function readState(cwd: string): Promise<{ dev_port?: number } | undefined> {\n  try {\n    const contents = await readFile(join(cwd, \".zitadel/state.json\"), \"utf8\");\n    return JSON.parse(contents) as { dev_port?: number };\n  } catch {\n    return undefined;\n  }\n}\n","import { readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { loadPatchContext } from \"../patch-context\";\nimport { AbstractSanityCheck, type CheckContext } from \"./types\";\n\n/**\n * Verifies the project still declares a Zitadel SDK dependency in\n * `package.json`. The patcher adds a scoped package (e.g.\n * `@zitadel/sdk-next`); the check is generic over the `@zitadel*`\n * scope so any framework renderer's dependency satisfies it.\n */\nexport class DependencyCheck extends AbstractSanityCheck {\n  readonly name = \"dependency\";\n  readonly path = \"package.json\";\n  protected readonly summary = \"package.json depends on a Zitadel SDK package\";\n\n  protected async verify(ctx: CheckContext): Promise<void> {\n    const pkg = JSON.parse(await readFile(join(ctx.cwd, \"package.json\"), \"utf8\")) as {\n      dependencies?: Record<string, string>;\n      devDependencies?: Record<string, string>;\n    };\n    const names = [\n      ...Object.keys(pkg.dependencies ?? {}),\n      ...Object.keys(pkg.devDependencies ?? {}),\n    ];\n    if (!names.some((name) => name.startsWith(\"@zitadel\"))) {\n      throw new Error(\"no @zitadel* dependency found in package.json\");\n    }\n  }\n\n  /**\n   * Repairs by reclaiming the patcher's managed artifacts: rebuilds the\n   * `PatchContext` from disk and calls `patcher.repair`, which re-adds the\n   * SDK dependency via its `add-dep` op. The exact package name is framework\n   * + renderer specific and known only to the patcher (which deliberately\n   * hides its file-op plan behind the family-neutral `Patcher` interface),\n   * so going through `repair` is the only sanctioned path.\n   */\n  override async fix(ctx: CheckContext): Promise<void> {\n    const patchCtx = await loadPatchContext(ctx.cwd, ctx.orca);\n    await ctx.orca.patcherFor(patchCtx.framework.id).repair(patchCtx, {\n      cwd: ctx.cwd,\n      dryRun: ctx.dryRun,\n      force: true,\n    });\n  }\n}\n","import { readZitadelConfig, readZitadelSecret } from \"../../../lib/project\";\nimport { AbstractSanityCheck, type CheckContext } from \"./types\";\n\n/** Verifies `.zitadel/secret`'s project_id matches `zitadel.json`'s project. */\nexport class ProjectMatchCheck extends AbstractSanityCheck {\n  readonly name = \"project-match\";\n  readonly path = \".zitadel/secret\";\n  protected readonly summary = \".zitadel/secret project_id matches zitadel.json project\";\n\n  protected async verify(ctx: CheckContext): Promise<void> {\n    const config = await readZitadelConfig(ctx.cwd);\n    const secret = await readZitadelSecret(ctx.cwd);\n    const configProject = typeof config.project === \"string\" ? config.project : undefined;\n    if (secret.project_id !== configProject) {\n      throw new Error(\".zitadel/secret project_id does not match zitadel.json project\");\n    }\n  }\n}\n","/**\n * Public surface for the doctor sanity checks. The `doctor` command imports\n * {@link SANITY_CHECKS} and runs every entry, aggregating the outcomes. Each\n * check is a small standalone class (see its own file); add a new diagnostic\n * by writing a class and appending an instance to the registry below.\n */\nimport type { SanityCheck } from \"./types\";\nimport { ConfigCheck } from \"./config\";\nimport { SecretCheck } from \"./secret\";\nimport { SecretPermissionsCheck } from \"./secret-permissions\";\nimport { GitignoreCheck } from \"./gitignore\";\nimport { EnvExampleCheck } from \"./env-example\";\nimport { FrameworkCheck } from \"./framework\";\nimport { DependencyCheck } from \"./dependency\";\nimport { ProjectMatchCheck } from \"./project-match\";\n\nexport type { SanityCheck, CheckContext, CheckOutcome } from \"./types\";\nexport { AbstractSanityCheck } from \"./types\";\nexport { ConfigCheck } from \"./config\";\nexport { SecretCheck } from \"./secret\";\nexport { SecretPermissionsCheck } from \"./secret-permissions\";\nexport { GitignoreCheck } from \"./gitignore\";\nexport { EnvExampleCheck } from \"./env-example\";\nexport { FrameworkCheck } from \"./framework\";\nexport { SchemaCheck } from \"./schema\";\nexport { DependencyCheck } from \"./dependency\";\nexport { ProjectMatchCheck } from \"./project-match\";\n\n/** Every diagnostic the `doctor` command runs, in display order. */\nexport const SANITY_CHECKS: ReadonlyArray<SanityCheck> = [\n  new ConfigCheck(),\n  new SecretCheck(),\n  new SecretPermissionsCheck(),\n  new GitignoreCheck(),\n  new EnvExampleCheck(),\n  new FrameworkCheck(),\n  // SchemaCheck is disabled: the user schema is now provisioned server-side\n  // and no longer scaffolded into `.zitadel/schemas/user.json`, so there is\n  // no local file to verify. The check is kept (imported/exported below) for\n  // the future pull-based workflow that will re-introduce local resources.\n  // new SchemaCheck(),\n  new DependencyCheck(),\n  new ProjectMatchCheck(),\n];\n","import { Flags } from \"@oclif/core\";\nimport consola from \"consola\";\n\nimport { BaseCommand, type JsonEnvelope } from \"../../lib/oclif\";\nimport { ZitadelError } from \"../../lib/errors\";\nimport { createOrca } from \"../../lib/orca\";\nimport { SANITY_CHECKS, type CheckContext } from \"./checks\";\n\n/**\n * `zitadel doctor` — verify generated files and local state.\n *\n * Runs every registered {@link SANITY_CHECKS} entry and emits the aggregate\n * result; if any check fails it throws `E_VALIDATION` carrying the full check\n * details. With `--fix`, each failing check first attempts its own repair (a\n * no-op for checks with no safe automatic remedy), then the battery re-runs.\n *\n * The `--fix` loop is best-effort: a repair that throws (e.g. a missing\n * prerequisite file the check itself would also flag) is logged at debug\n * level and skipped, not propagated — the post-fix re-verify still reports\n * whatever remains broken.\n */\nexport default class Doctor extends BaseCommand {\n  static override description = \"Verify generated files and local state.\";\n  static override flags = {\n    fix: Flags.boolean({ description: \"Re-apply missing managed files.\" }),\n  };\n\n  async run(): Promise<JsonEnvelope> {\n    const { flags } = await this.parse(Doctor);\n    await this.toMeta(flags);\n    const { cwd, dryRun } = this.meta;\n    const ctx: CheckContext = { cwd, orca: createOrca(), dryRun };\n\n    if (flags.fix) {\n      const before = await Promise.all(SANITY_CHECKS.map((check) => check.run(ctx)));\n      for (const [index, check] of SANITY_CHECKS.entries()) {\n        if (before[index]?.status !== \"fail\") {\n          continue;\n        }\n        try {\n          await check.fix(ctx);\n        } catch (error) {\n          consola.debug(`doctor --fix: ${check.name} repair failed`, error);\n        }\n      }\n    }\n\n    const checks = await Promise.all(SANITY_CHECKS.map((check) => check.run(ctx)));\n    const failed = checks.filter((check) => check.status === \"fail\");\n    const data = {\n      title: failed.length === 0 ? \"Zitadel doctor passed.\" : \"Zitadel doctor found issues.\",\n      ok: failed.length === 0,\n      checks,\n    };\n\n    if (failed.length > 0) {\n      throw new ZitadelError(\"E_VALIDATION\", \"Zitadel doctor found issues\", {\n        hint: \"Run `npx @zitadel/cli@latest doctor --fix` to re-apply missing managed files.\",\n        details: data,\n      });\n    }\n\n    return this.emit({ status: \"ok\", data });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AA0CA,IAAsB,sBAAtB,MAAiE;CAQ/D,MAAM,IAAI,KAA0C;AAClD,MAAI;AACF,SAAM,KAAK,OAAO,IAAI;AACtB,UAAO;IAAE,MAAM,KAAK;IAAM,QAAQ;IAAQ,SAAS,KAAK;IAAS,MAAM,KAAK;IAAM;WAC3E,OAAO;AACd,UAAO;IACL,MAAM,KAAK;IACX,QAAQ;IACR,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAC/D,MAAM,KAAK;IACZ;;;CAIL,MAAM,IAAI,MAAmC;;;;;AC5D/C,IAAa,cAAb,cAAiC,oBAAoB;CACnD,OAAgB;CAChB,OAAgB;CAChB,UAA6B;CAE7B,MAAgB,OAAO,KAAkC;AACvD,QAAM,kBAAkB,IAAI,IAAI;;;;;;ACNpC,IAAa,cAAb,cAAiC,oBAAoB;CACnD,OAAgB;CAChB,OAAgB;CAChB,UAA6B;CAE7B,MAAgB,OAAO,KAAkC;AACvD,QAAM,kBAAkB,IAAI,IAAI;;;;;;ACJpC,IAAa,yBAAb,cAA4C,oBAAoB;CAC9D,OAAgB;CAChB,OAAgB;CAChB,UAA6B;CAE7B,MAAgB,OAAO,KAAkC;EACvD,MAAM,QAAQ,MAAM,KAAK,KAAK,IAAI,KAAK,kBAAkB,CAAC,EAAE,OAAO;AACnE,MAAI,SAAS,IACX,OAAM,IAAI,MAAM,sBAAsB,KAAK,SAAS,EAAE,GAAG;;CAI7D,MAAe,IAAI,KAAkC;AACnD,MAAI,IAAI,OACN;AAEF,QAAM,MAAM,KAAK,IAAI,KAAK,kBAAkB,EAAE,IAAM;;;;;;AChBxD,MAAM,mBAAmB;CAAC;CAAmB;CAAS;CAAgB;;AAGtE,IAAa,iBAAb,cAAoC,oBAAoB;CACtD,OAAgB;CAChB,OAAgB;CAChB,UAA6B;CAE7B,MAAgB,OAAO,KAAkC;EACvD,MAAM,SAAS,MAAM,SAAS,KAAK,IAAI,KAAK,aAAa,EAAE,OAAO,EAAE,MAAM,SAAS;AACnF,OAAK,MAAM,SAAS,iBAClB,KAAI,CAAC,MAAM,SAAS,MAAM,CACxB,OAAM,IAAI,MAAM,WAAW,QAAQ;;CAKzC,MAAe,IAAI,KAAkC;EACnD,MAAM,OAAO,KAAK,IAAI,KAAK,aAAa;EACxC,MAAM,WAAW,MAAM,SAAS,MAAM,OAAO,CAAC,YAAY,GAAG;EAC7D,MAAM,QAAQ,SAAS,MAAM,SAAS;EACtC,MAAM,UAAU,iBAAiB,QAAQ,UAAU,CAAC,MAAM,SAAS,MAAM,CAAC;AAC1E,MAAI,QAAQ,WAAW,KAAK,IAAI,OAC9B;AAGF,QAAM,UAAU,MAAM,GAAG,WADV,SAAS,SAAS,KAAK,CAAC,SAAS,SAAS,KAAK,GAAG,OAAO,KAC3B,QAAQ,KAAK,KAAK,CAAC,IAAI;;;;;;AC1BxE,MAAM,gBAAgB;CAAC;CAAsB;CAAuB;CAAiB;;AAGrF,IAAa,kBAAb,cAAqC,oBAAoB;CACvD,OAAgB;CAChB,OAAgB;CAChB,UAA6B;CAE7B,MAAgB,OAAO,KAAkC;EACvD,MAAM,WAAW,MAAM,SAAS,KAAK,IAAI,KAAK,eAAe,EAAE,OAAO;AACtE,OAAK,MAAM,OAAO,cAChB,KAAI,CAAC,SAAS,SAAS,GAAG,IAAI,GAAG,CAC/B,OAAM,IAAI,MAAM,WAAW,MAAM;;CAKvC,MAAe,IAAI,KAAkC;EACnD,MAAM,OAAO,KAAK,IAAI,KAAK,eAAe;EAC1C,MAAM,WAAW,MAAM,SAAS,MAAM,OAAO,CAAC,YAAY,GAAG;EAC7D,MAAM,UAAU,cAAc,QAAQ,QAAQ,CAAC,SAAS,SAAS,GAAG,IAAI,GAAG,CAAC;AAC5E,MAAI,QAAQ,WAAW,KAAK,IAAI,OAC9B;AAGF,QAAM,UAAU,MAAM,GAAG,WADV,SAAS,SAAS,KAAK,CAAC,SAAS,SAAS,KAAK,GAAG,OAAO,KAC3B,QAAQ,KAAK,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI;;;;;;AC1BhG,IAAa,iBAAb,cAAoC,oBAAoB;CACtD,OAAgB;CAChB,OAAgB;CAChB,UAA6B;CAE7B,MAAgB,OAAO,KAAkC;EACvD,MAAM,SAAS,MAAM,kBAAkB,IAAI,IAAI;EAC/C,MAAM,WAAW,MAAM,IAAI,KAAK,OAAO,IAAI,IAAI;EAC/C,MAAM,WAAW,SAAS,OAAO,UAAU,GAAG,OAAO,UAAU,KAAK,KAAA;AACpE,MAAI,aAAa,SAAS,GACxB,OAAM,IAAI,MAAM,YAAY,OAAO,SAAS,CAAC,aAAa,SAAS,KAAK;;;;;;;;;;;;ACD9E,eAAsB,iBAAiB,KAAa,MAAmC;CACrF,MAAM,SAAS,MAAM,kBAAkB,IAAI;CAC3C,MAAM,SAAS,MAAM,kBAAkB,IAAI;CAC3C,MAAM,YAAY,MAAM,KAAK,OAAO,IAAI;AACxC,QAAO;EACL;EACA,YAAY,eAAe,OAAO;EAClC,QAAQ,MAAM,cAAc,KAAK,QAAQ,UAAU;EACnD,QAAQ,OAAO,OAAO,WAAW,WAAW,OAAO,SAAS;EAC5D,SAAS;GACP,IAAI,OAAO;GACX,eAAe,OAAO;GACtB,eAAe,OAAO;GACtB,gBAAgB,OAAO;GACvB,WAAW,OAAO;GACnB;EACF;;AAGH,eAAe,cACb,KACA,QACA,OACiB;CACjB,MAAM,aAAa,sBAAsB,OAAO;AAChD,KAAI,cAAc,WAAW,SAAS,EACpC,QAAO;CAET,MAAM,QAAQ,MAAM,UAAU,IAAI;AAClC,KAAI,OAAO,OAAO,aAAa,SAC7B,QAAO,eAAe,MAAM,SAAS;AAEvC,QAAO,MAAM;;AAGf,eAAe,UAAU,KAAyD;AAChF,KAAI;EACF,MAAM,WAAW,MAAM,SAAS,KAAK,KAAK,sBAAsB,EAAE,OAAO;AACzE,SAAO,KAAK,MAAM,SAAS;SACrB;AACN;;;;;;;;;;;AC1CJ,IAAa,kBAAb,cAAqC,oBAAoB;CACvD,OAAgB;CAChB,OAAgB;CAChB,UAA6B;CAE7B,MAAgB,OAAO,KAAkC;EACvD,MAAM,MAAM,KAAK,MAAM,MAAM,SAAS,KAAK,IAAI,KAAK,eAAe,EAAE,OAAO,CAAC;AAQ7E,MAAI,CAAC,CAHH,GAAG,OAAO,KAAK,IAAI,gBAAgB,EAAE,CAAC,EACtC,GAAG,OAAO,KAAK,IAAI,mBAAmB,EAAE,CAAC,CAEjC,CAAC,MAAM,SAAS,KAAK,WAAW,WAAW,CAAC,CACpD,OAAM,IAAI,MAAM,gDAAgD;;;;;;;;;;CAYpE,MAAe,IAAI,KAAkC;EACnD,MAAM,WAAW,MAAM,iBAAiB,IAAI,KAAK,IAAI,KAAK;AAC1D,QAAM,IAAI,KAAK,WAAW,SAAS,UAAU,GAAG,CAAC,OAAO,UAAU;GAChE,KAAK,IAAI;GACT,QAAQ,IAAI;GACZ,OAAO;GACR,CAAC;;;;;;ACzCN,IAAa,oBAAb,cAAuC,oBAAoB;CACzD,OAAgB;CAChB,OAAgB;CAChB,UAA6B;CAE7B,MAAgB,OAAO,KAAkC;EACvD,MAAM,SAAS,MAAM,kBAAkB,IAAI,IAAI;EAC/C,MAAM,SAAS,MAAM,kBAAkB,IAAI,IAAI;EAC/C,MAAM,gBAAgB,OAAO,OAAO,YAAY,WAAW,OAAO,UAAU,KAAA;AAC5E,MAAI,OAAO,eAAe,cACxB,OAAM,IAAI,MAAM,iEAAiE;;;;;;ACevF,MAAa,gBAA4C;CACvD,IAAI,aAAa;CACjB,IAAI,aAAa;CACjB,IAAI,wBAAwB;CAC5B,IAAI,gBAAgB;CACpB,IAAI,iBAAiB;CACrB,IAAI,gBAAgB;CAMpB,IAAI,iBAAiB;CACrB,IAAI,mBAAmB;CACxB;;;;;;;;;;;;;;;;ACtBD,IAAqB,SAArB,MAAqB,eAAe,YAAY;CAC9C,OAAgB,cAAc;CAC9B,OAAgB,QAAQ,EACtB,KAAK,MAAM,QAAQ,EAAE,aAAa,mCAAmC,CAAC,EACvE;CAED,MAAM,MAA6B;EACjC,MAAM,EAAE,UAAU,MAAM,KAAK,MAAM,OAAO;AAC1C,QAAM,KAAK,OAAO,MAAM;EACxB,MAAM,EAAE,KAAK,WAAW,KAAK;EAC7B,MAAM,MAAoB;GAAE;GAAK,MAAM,YAAY;GAAE;GAAQ;AAE7D,MAAI,MAAM,KAAK;GACb,MAAM,SAAS,MAAM,QAAQ,IAAI,cAAc,KAAK,UAAU,MAAM,IAAI,IAAI,CAAC,CAAC;AAC9E,QAAK,MAAM,CAAC,OAAO,UAAU,cAAc,SAAS,EAAE;AACpD,QAAI,OAAO,QAAQ,WAAW,OAC5B;AAEF,QAAI;AACF,WAAM,MAAM,IAAI,IAAI;aACb,OAAO;AACd,aAAQ,MAAM,iBAAiB,MAAM,KAAK,iBAAiB,MAAM;;;;EAKvE,MAAM,SAAS,MAAM,QAAQ,IAAI,cAAc,KAAK,UAAU,MAAM,IAAI,IAAI,CAAC,CAAC;EAC9E,MAAM,SAAS,OAAO,QAAQ,UAAU,MAAM,WAAW,OAAO;EAChE,MAAM,OAAO;GACX,OAAO,OAAO,WAAW,IAAI,2BAA2B;GACxD,IAAI,OAAO,WAAW;GACtB;GACD;AAED,MAAI,OAAO,SAAS,EAClB,OAAM,IAAI,aAAa,gBAAgB,+BAA+B;GACpE,MAAM;GACN,SAAS;GACV,CAAC;AAGJ,SAAO,KAAK,KAAK;GAAE,QAAQ;GAAM;GAAM,CAAC"}

package/dist/commands/eject.mjs

@@ -0,0 +1,137 @@
+import { a as readZitadelConfig, i as readRendererId, p as ZitadelError, s as BaseCommand } from "../project-C3pSfbao.mjs";
+import { t as createOrca } from "../orca-COsUnVoz.mjs";
+import { readFile, rename, rm, stat } from "node:fs/promises";
+import { join } from "node:path";
+//#region src/commands/eject.ts
+/**
+* Asks the framework patcher which artifacts it owns. Falls back to the
+* framework-agnostic set (`zitadel.json`, `.zitadel/`, `.env.local`) when the
+* framework or its patcher cannot be resolved, so an orphaned/partial project
+* can still be cleaned up.
+*/
+async function resolveEjectActions(cwd) {
+	const fallback = {
+		markedFiles: [],
+		rootConfigFiles: ["zitadel.json"],
+		directories: [".zitadel"],
+		envBackups: [".env.local"],
+		dependencies: []
+	};
+	const orca = createOrca();
+	const framework = await orca.tryDetect(cwd);
+	if (!framework) return fallback;
+	try {
+		const config = await readZitadelConfig(cwd).catch(() => ({}));
+		return orca.patcherFor(framework.id).artifacts({
+			framework,
+			rendererId: readRendererId(config)
+		});
+	} catch {
+		return fallback;
+	}
+}
+/**
+* Builds the `next_commands` envelope field — manual follow-ups `eject` can't
+* safely run itself: deleting the `.env.local.ejected-*` backups it created
+* (only when some were made), and uninstalling the SDK packages the patcher
+* added (the CLI never modifies the user's `package.json` + lockfile +
+* `node_modules` directly; it just suggests the command).
+*/
+function assembleNextCommands(backedUp, dependencies) {
+	const commands = [];
+	if (backedUp.length > 0) commands.push("rm -f .env.local.ejected-*");
+	for (const dep of dependencies) commands.push(`npm uninstall ${dep}`);
+	return commands;
+}
+async function pathExists(path) {
+	try {
+		await stat(path);
+		return true;
+	} catch {
+		return false;
+	}
+}
+/**
+* `zitadel eject` — remove managed files and local Zitadel state.
+*
+* Removes Zitadel-managed files from the project, leaving the remote project
+* untouched. The set of files comes from the framework patcher's
+* {@link import("../lib/orca/patchers/types").Patcher.artifacts}, so the patcher
+* is the single source of truth for what its integration owns.
+*
+* Marked code files are removed only when they still carry the managed marker
+* (user-replaced files are preserved); `zitadel.json` is removed; `.env.local`
+* is renamed to a timestamped backup; and `.zitadel/` is removed wholesale.
+* `--dry-run` reports without touching the filesystem; non-interactive runs
+* require `--force`.
+*/
+var Eject = class Eject extends BaseCommand {
+	static description = "Remove managed files and local Zitadel state.";
+	static aliases = ["uninstall"];
+	async run() {
+		const { flags } = await this.parse(Eject);
+		await this.toMeta(flags);
+		const { cwd, force, nonInteractive, dryRun } = this.meta;
+		if (!force && nonInteractive) throw new ZitadelError("E_VALIDATION", "Eject requires --force in non-interactive mode", { hint: "Re-run with --force to confirm deletion of managed files." });
+		const actions = await resolveEjectActions(cwd);
+		const removed = [];
+		const preserved = [];
+		const backedUp = [];
+		for (const rel of actions.markedFiles) {
+			const abs = join(cwd, rel);
+			if (!await pathExists(abs)) continue;
+			if (!(await readFile(abs, "utf8").catch(() => "")).includes("// zitadel-cli: managed-file v1")) {
+				preserved.push(rel);
+				continue;
+			}
+			if (!dryRun) await rm(abs, { force: true });
+			removed.push(rel);
+		}
+		for (const rel of actions.rootConfigFiles) {
+			const abs = join(cwd, rel);
+			if (!await pathExists(abs)) continue;
+			if (!dryRun) await rm(abs, { force: true });
+			removed.push(rel);
+		}
+		for (const rel of actions.envBackups) {
+			const abs = join(cwd, rel);
+			if (!await pathExists(abs)) continue;
+			if (dryRun) {
+				backedUp.push(`${rel} -> ${rel}.ejected-<timestamp>`);
+				continue;
+			}
+			const backup = `${abs}.ejected-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}`;
+			await rename(abs, backup);
+			backedUp.push(`${rel} -> ${backup.slice(cwd.length + 1)}`);
+		}
+		for (const rel of actions.directories) {
+			const abs = join(cwd, rel);
+			if (!await pathExists(abs)) continue;
+			if (!dryRun) await rm(abs, {
+				recursive: true,
+				force: true
+			});
+			removed.push(rel);
+		}
+		if (removed.length === 0 && backedUp.length === 0) return this.emit({
+			status: "skipped",
+			reason: "nothing-to-eject",
+			data: { cwd }
+		});
+		const nextCommands = assembleNextCommands(backedUp, actions.dependencies);
+		return this.emit({
+			status: "ok",
+			data: {
+				title: "Zitadel ejected. Remote project is untouched.",
+				files_removed: removed,
+				files_preserved: preserved,
+				backed_up: backedUp,
+				next_commands: nextCommands
+			}
+		});
+	}
+};
+//#endregion
+export { Eject as default };
+
+//# sourceMappingURL=eject.mjs.map

package/dist/commands/eject.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"eject.mjs","names":[],"sources":["../../src/commands/eject.ts"],"sourcesContent":["import { readFile, rename, rm, stat } from \"node:fs/promises\";\nimport { join } from \"node:path\";\n\nimport { BaseCommand, type JsonEnvelope } from \"../lib/oclif\";\nimport { ZitadelError } from \"../lib/errors\";\nimport { createOrca } from \"../lib/orca\";\nimport type { EjectActions } from \"../lib/orca/patchers/types\";\nimport { MANAGED_MARKER } from \"../lib/paths\";\nimport { readRendererId, readZitadelConfig } from \"../lib/project\";\n\n/**\n * Asks the framework patcher which artifacts it owns. Falls back to the\n * framework-agnostic set (`zitadel.json`, `.zitadel/`, `.env.local`) when the\n * framework or its patcher cannot be resolved, so an orphaned/partial project\n * can still be cleaned up.\n */\nasync function resolveEjectActions(cwd: string): Promise<EjectActions> {\n  const fallback: EjectActions = {\n    markedFiles: [],\n    rootConfigFiles: [\"zitadel.json\"],\n    directories: [\".zitadel\"],\n    envBackups: [\".env.local\"],\n    dependencies: [],\n  };\n  const orca = createOrca();\n  const framework = await orca.tryDetect(cwd);\n  if (!framework) {\n    return fallback;\n  }\n  try {\n    const config = await readZitadelConfig(cwd).catch(() => ({}) as Record<string, unknown>);\n    return orca.patcherFor(framework.id).artifacts({\n      framework,\n      rendererId: readRendererId(config),\n    });\n  } catch {\n    return fallback;\n  }\n}\n\n/**\n * Builds the `next_commands` envelope field — manual follow-ups `eject` can't\n * safely run itself: deleting the `.env.local.ejected-*` backups it created\n * (only when some were made), and uninstalling the SDK packages the patcher\n * added (the CLI never modifies the user's `package.json` + lockfile +\n * `node_modules` directly; it just suggests the command).\n */\nfunction assembleNextCommands(\n  backedUp: ReadonlyArray<unknown>,\n  dependencies: ReadonlyArray<string>,\n): ReadonlyArray<string> {\n  const commands: string[] = [];\n  if (backedUp.length > 0) {\n    commands.push(\"rm -f .env.local.ejected-*\");\n  }\n  for (const dep of dependencies) {\n    commands.push(`npm uninstall ${dep}`);\n  }\n  return commands;\n}\n\nasync function pathExists(path: string): Promise<boolean> {\n  try {\n    await stat(path);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * `zitadel eject` — remove managed files and local Zitadel state.\n *\n * Removes Zitadel-managed files from the project, leaving the remote project\n * untouched. The set of files comes from the framework patcher's\n * {@link import(\"../lib/orca/patchers/types\").Patcher.artifacts}, so the patcher\n * is the single source of truth for what its integration owns.\n *\n * Marked code files are removed only when they still carry the managed marker\n * (user-replaced files are preserved); `zitadel.json` is removed; `.env.local`\n * is renamed to a timestamped backup; and `.zitadel/` is removed wholesale.\n * `--dry-run` reports without touching the filesystem; non-interactive runs\n * require `--force`.\n */\nexport default class Eject extends BaseCommand {\n  static override description = \"Remove managed files and local Zitadel state.\";\n  static override aliases = [\"uninstall\"];\n\n  async run(): Promise<JsonEnvelope> {\n    const { flags } = await this.parse(Eject);\n    await this.toMeta(flags);\n    const { cwd, force, nonInteractive, dryRun } = this.meta;\n\n    if (!force && nonInteractive) {\n      throw new ZitadelError(\"E_VALIDATION\", \"Eject requires --force in non-interactive mode\", {\n        hint: \"Re-run with --force to confirm deletion of managed files.\",\n      });\n    }\n\n    const actions = await resolveEjectActions(cwd);\n    const removed: string[] = [];\n    const preserved: string[] = [];\n    const backedUp: string[] = [];\n\n    for (const rel of actions.markedFiles) {\n      const abs = join(cwd, rel);\n      if (!(await pathExists(abs))) {\n        continue;\n      }\n      const contents = await readFile(abs, \"utf8\").catch(() => \"\");\n      if (!contents.includes(MANAGED_MARKER)) {\n        preserved.push(rel);\n        continue;\n      }\n      if (!dryRun) {\n        await rm(abs, { force: true });\n      }\n      removed.push(rel);\n    }\n\n    for (const rel of actions.rootConfigFiles) {\n      const abs = join(cwd, rel);\n      if (!(await pathExists(abs))) {\n        continue;\n      }\n      if (!dryRun) {\n        await rm(abs, { force: true });\n      }\n      removed.push(rel);\n    }\n\n    for (const rel of actions.envBackups) {\n      const abs = join(cwd, rel);\n      if (!(await pathExists(abs))) {\n        continue;\n      }\n      if (dryRun) {\n        backedUp.push(`${rel} -> ${rel}.ejected-<timestamp>`);\n        continue;\n      }\n      const stamp = new Date().toISOString().replace(/[:.]/g, \"-\");\n      const backup = `${abs}.ejected-${stamp}`;\n      await rename(abs, backup);\n      backedUp.push(`${rel} -> ${backup.slice(cwd.length + 1)}`);\n    }\n\n    for (const rel of actions.directories) {\n      const abs = join(cwd, rel);\n      if (!(await pathExists(abs))) {\n        continue;\n      }\n      if (!dryRun) {\n        await rm(abs, { recursive: true, force: true });\n      }\n      removed.push(rel);\n    }\n\n    if (removed.length === 0 && backedUp.length === 0) {\n      return this.emit({ status: \"skipped\", reason: \"nothing-to-eject\", data: { cwd } });\n    }\n\n    const nextCommands = assembleNextCommands(backedUp, actions.dependencies);\n\n    return this.emit({\n      status: \"ok\",\n      data: {\n        title: \"Zitadel ejected. Remote project is untouched.\",\n        files_removed: removed,\n        files_preserved: preserved,\n        backed_up: backedUp,\n        next_commands: nextCommands,\n      },\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;AAgBA,eAAe,oBAAoB,KAAoC;CACrE,MAAM,WAAyB;EAC7B,aAAa,EAAE;EACf,iBAAiB,CAAC,eAAe;EACjC,aAAa,CAAC,WAAW;EACzB,YAAY,CAAC,aAAa;EAC1B,cAAc,EAAE;EACjB;CACD,MAAM,OAAO,YAAY;CACzB,MAAM,YAAY,MAAM,KAAK,UAAU,IAAI;AAC3C,KAAI,CAAC,UACH,QAAO;AAET,KAAI;EACF,MAAM,SAAS,MAAM,kBAAkB,IAAI,CAAC,aAAa,EAAE,EAA6B;AACxF,SAAO,KAAK,WAAW,UAAU,GAAG,CAAC,UAAU;GAC7C;GACA,YAAY,eAAe,OAAO;GACnC,CAAC;SACI;AACN,SAAO;;;;;;;;;;AAWX,SAAS,qBACP,UACA,cACuB;CACvB,MAAM,WAAqB,EAAE;AAC7B,KAAI,SAAS,SAAS,EACpB,UAAS,KAAK,6BAA6B;AAE7C,MAAK,MAAM,OAAO,aAChB,UAAS,KAAK,iBAAiB,MAAM;AAEvC,QAAO;;AAGT,eAAe,WAAW,MAAgC;AACxD,KAAI;AACF,QAAM,KAAK,KAAK;AAChB,SAAO;SACD;AACN,SAAO;;;;;;;;;;;;;;;;;AAkBX,IAAqB,QAArB,MAAqB,cAAc,YAAY;CAC7C,OAAgB,cAAc;CAC9B,OAAgB,UAAU,CAAC,YAAY;CAEvC,MAAM,MAA6B;EACjC,MAAM,EAAE,UAAU,MAAM,KAAK,MAAM,MAAM;AACzC,QAAM,KAAK,OAAO,MAAM;EACxB,MAAM,EAAE,KAAK,OAAO,gBAAgB,WAAW,KAAK;AAEpD,MAAI,CAAC,SAAS,eACZ,OAAM,IAAI,aAAa,gBAAgB,kDAAkD,EACvF,MAAM,6DACP,CAAC;EAGJ,MAAM,UAAU,MAAM,oBAAoB,IAAI;EAC9C,MAAM,UAAoB,EAAE;EAC5B,MAAM,YAAsB,EAAE;EAC9B,MAAM,WAAqB,EAAE;AAE7B,OAAK,MAAM,OAAO,QAAQ,aAAa;GACrC,MAAM,MAAM,KAAK,KAAK,IAAI;AAC1B,OAAI,CAAE,MAAM,WAAW,IAAI,CACzB;AAGF,OAAI,EAAC,MADkB,SAAS,KAAK,OAAO,CAAC,YAAY,GAAG,EAC9C,SAAA,kCAAwB,EAAE;AACtC,cAAU,KAAK,IAAI;AACnB;;AAEF,OAAI,CAAC,OACH,OAAM,GAAG,KAAK,EAAE,OAAO,MAAM,CAAC;AAEhC,WAAQ,KAAK,IAAI;;AAGnB,OAAK,MAAM,OAAO,QAAQ,iBAAiB;GACzC,MAAM,MAAM,KAAK,KAAK,IAAI;AAC1B,OAAI,CAAE,MAAM,WAAW,IAAI,CACzB;AAEF,OAAI,CAAC,OACH,OAAM,GAAG,KAAK,EAAE,OAAO,MAAM,CAAC;AAEhC,WAAQ,KAAK,IAAI;;AAGnB,OAAK,MAAM,OAAO,QAAQ,YAAY;GACpC,MAAM,MAAM,KAAK,KAAK,IAAI;AAC1B,OAAI,CAAE,MAAM,WAAW,IAAI,CACzB;AAEF,OAAI,QAAQ;AACV,aAAS,KAAK,GAAG,IAAI,MAAM,IAAI,sBAAsB;AACrD;;GAGF,MAAM,SAAS,GAAG,IAAI,4BADR,IAAI,MAAM,EAAC,aAAa,CAAC,QAAQ,SAAS,IAClB;AACtC,SAAM,OAAO,KAAK,OAAO;AACzB,YAAS,KAAK,GAAG,IAAI,MAAM,OAAO,MAAM,IAAI,SAAS,EAAE,GAAG;;AAG5D,OAAK,MAAM,OAAO,QAAQ,aAAa;GACrC,MAAM,MAAM,KAAK,KAAK,IAAI;AAC1B,OAAI,CAAE,MAAM,WAAW,IAAI,CACzB;AAEF,OAAI,CAAC,OACH,OAAM,GAAG,KAAK;IAAE,WAAW;IAAM,OAAO;IAAM,CAAC;AAEjD,WAAQ,KAAK,IAAI;;AAGnB,MAAI,QAAQ,WAAW,KAAK,SAAS,WAAW,EAC9C,QAAO,KAAK,KAAK;GAAE,QAAQ;GAAW,QAAQ;GAAoB,MAAM,EAAE,KAAK;GAAE,CAAC;EAGpF,MAAM,eAAe,qBAAqB,UAAU,QAAQ,aAAa;AAEzE,SAAO,KAAK,KAAK;GACf,QAAQ;GACR,MAAM;IACJ,OAAO;IACP,eAAe;IACf,iBAAiB;IACjB,WAAW;IACX,eAAe;IAChB;GACF,CAAC"}

package/dist/commands/plan.mjs

@@ -0,0 +1,52 @@
+import { o as readZitadelSecret, s as BaseCommand } from "../project-C3pSfbao.mjs";
+import { a as makeSyncers, n as summarizePlan, o as environmentSchema, r as buildSyncPlan, t as renderPlan } from "../sync-Cuyh-X1J.mjs";
+import { Flags } from "@oclif/core";
+import { consola as consola$1 } from "consola";
+import { createZitadelClient } from "@zitadel/api/client";
+//#region src/commands/plan.ts
+/**
+* `zitadel plan` — validate config and preview the sync diff without mutating.
+*
+* The read-only counterpart of `apply`: it builds and renders the diff instead
+* of running the sync loop. All validation (structural shape and env-ref
+* presence) happens in the sync engine, so an invalid file fails the same way
+* `apply` would.
+*/
+var Plan = class Plan extends BaseCommand {
+	static description = "Validate config without mutation and preview the sync diff.";
+	static hidden = true;
+	static flags = { environment: Flags.string({
+		char: "e",
+		description: "Target environment (default: development).",
+		options: [...environmentSchema.options]
+	}) };
+	async run() {
+		const { flags } = await this.parse(Plan);
+		await this.toMeta(flags);
+		const { cwd, source, env, isTTY } = this.meta;
+		const secret = await readZitadelSecret(cwd);
+		consola$1.info(`Project   ${secret.project_id}`);
+		consola$1.info(`Server    ${source}`);
+		const syncers = makeSyncers({
+			client: createZitadelClient({
+				baseUrl: source,
+				token: secret.project_secret
+			}),
+			projectId: secret.project_id,
+			env
+		});
+		consola$1.start("Building plan");
+		const plan = await buildSyncPlan(cwd, syncers, true);
+		const summary = summarizePlan(plan);
+		consola$1.success(`Plan: ${summary.creates} create${summary.creates === 1 ? "" : "s"}, ${summary.updates} update${summary.updates === 1 ? "" : "s"}, ${summary.deletes} delete${summary.deletes === 1 ? "" : "s"}, ${summary.total - summary.creates - summary.updates - summary.deletes} unchanged`);
+		return this.emit({
+			status: "ok",
+			data: summary,
+			pretty: renderPlan(plan, isTTY)
+		});
+	}
+};
+//#endregion
+export { Plan as default };
+
+//# sourceMappingURL=plan.mjs.map

package/dist/commands/plan.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.mjs","names":[],"sources":["../../src/commands/plan.ts"],"sourcesContent":["import { Flags } from \"@oclif/core\";\nimport { consola } from \"consola\";\n\nimport { createZitadelClient } from \"@zitadel/api/client\";\n\nimport { BaseCommand, type JsonEnvelope } from \"../lib/oclif\";\nimport { environmentSchema } from \"../lib/environment\";\nimport { buildSyncPlan, makeSyncers, renderPlan, summarizePlan } from \"../lib/sync\";\nimport { readZitadelSecret } from \"../lib/project\";\n\n/**\n * `zitadel plan` — validate config and preview the sync diff without mutating.\n *\n * The read-only counterpart of `apply`: it builds and renders the diff instead\n * of running the sync loop. All validation (structural shape and env-ref\n * presence) happens in the sync engine, so an invalid file fails the same way\n * `apply` would.\n */\nexport default class Plan extends BaseCommand {\n  static override description = \"Validate config without mutation and preview the sync diff.\";\n  // Temporarily hidden while we collapse the dev workflow around `setup`'s\n  // auto-apply. The logic stays wired up so re-exposing this command is a\n  // one-line flip when we settle on the surface area.\n  static override hidden = true;\n  static override flags = {\n    environment: Flags.string({\n      char: \"e\",\n      description: \"Target environment (default: development).\",\n      options: [...environmentSchema.options],\n    }),\n  };\n\n  async run(): Promise<JsonEnvelope> {\n    const { flags } = await this.parse(Plan);\n    await this.toMeta(flags);\n    const { cwd, source, env, isTTY } = this.meta;\n\n    const secret = await readZitadelSecret(cwd);\n    consola.info(`Project   ${secret.project_id}`);\n    consola.info(`Server    ${source}`);\n    const client = createZitadelClient({\n      baseUrl: source,\n      token: secret.project_secret,\n    });\n    const syncers = makeSyncers({ client, projectId: secret.project_id, env });\n\n    consola.start(\"Building plan\");\n    const plan = await buildSyncPlan(cwd, syncers, true);\n    const summary = summarizePlan(plan);\n    consola.success(\n      `Plan: ${summary.creates} create${summary.creates === 1 ? \"\" : \"s\"}, ` +\n        `${summary.updates} update${summary.updates === 1 ? \"\" : \"s\"}, ` +\n        `${summary.deletes} delete${summary.deletes === 1 ? \"\" : \"s\"}, ` +\n        `${summary.total - summary.creates - summary.updates - summary.deletes} unchanged`,\n    );\n    return this.emit({\n      status: \"ok\",\n      data: summary,\n      pretty: renderPlan(plan, isTTY),\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAkBA,IAAqB,OAArB,MAAqB,aAAa,YAAY;CAC5C,OAAgB,cAAc;CAI9B,OAAgB,SAAS;CACzB,OAAgB,QAAQ,EACtB,aAAa,MAAM,OAAO;EACxB,MAAM;EACN,aAAa;EACb,SAAS,CAAC,GAAG,kBAAkB,QAAQ;EACxC,CAAC,EACH;CAED,MAAM,MAA6B;EACjC,MAAM,EAAE,UAAU,MAAM,KAAK,MAAM,KAAK;AACxC,QAAM,KAAK,OAAO,MAAM;EACxB,MAAM,EAAE,KAAK,QAAQ,KAAK,UAAU,KAAK;EAEzC,MAAM,SAAS,MAAM,kBAAkB,IAAI;AAC3C,YAAQ,KAAK,aAAa,OAAO,aAAa;AAC9C,YAAQ,KAAK,aAAa,SAAS;EAKnC,MAAM,UAAU,YAAY;GAAE,QAJf,oBAAoB;IACjC,SAAS;IACT,OAAO,OAAO;IACf,CACmC;GAAE,WAAW,OAAO;GAAY;GAAK,CAAC;AAE1E,YAAQ,MAAM,gBAAgB;EAC9B,MAAM,OAAO,MAAM,cAAc,KAAK,SAAS,KAAK;EACpD,MAAM,UAAU,cAAc,KAAK;AACnC,YAAQ,QACN,SAAS,QAAQ,QAAQ,SAAS,QAAQ,YAAY,IAAI,KAAK,IAAI,IAC9D,QAAQ,QAAQ,SAAS,QAAQ,YAAY,IAAI,KAAK,IAAI,IAC1D,QAAQ,QAAQ,SAAS,QAAQ,YAAY,IAAI,KAAK,IAAI,IAC1D,QAAQ,QAAQ,QAAQ,UAAU,QAAQ,UAAU,QAAQ,QAAQ,YAC1E;AACD,SAAO,KAAK,KAAK;GACf,QAAQ;GACR,MAAM;GACN,QAAQ,WAAW,MAAM,MAAM;GAChC,CAAC"}