@zitadel/cli 0.1.0-alpha.18 → 0.1.0-alpha.19

package/dist/commands/schemas/list.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"list.mjs","names":[],"sources":["../../../src/commands/schemas/list.ts"],"sourcesContent":["import { cancel, isCancel, select, spinner } from \"@clack/prompts\";\nimport { Flags } from \"@oclif/core\";\nimport { consola } from \"consola\";\n\nimport { createZitadelClient, type ZitadelClient } from \"@zitadel/api/client\";\nimport type { ListSchemas200Item } from \"@zitadel/api/generated/model\";\n\nimport { BaseCommand, type JsonEnvelope } from \"../../lib/oclif\";\nimport { environmentSchema } from \"../../lib/environment\";\nimport { readZitadelSecret } from \"../../lib/project\";\n\n/**\n * The `schemas list` topic command — inspect the revision history of a\n * user-schema, filtered by `objectType`.\n *\n * Non-interactive: prints one row per revision (newest first) as a JSON payload\n * or a plain-text table. Interactive: renders a `@clack/prompts` `select` menu\n * of the same rows; on selection, fetches the full schema body via\n * `getSchemaById` and pretty-prints it to stdout.\n */\nexport default class SchemasList extends BaseCommand {\n  static override description = \"List revisions of a user-schema by objectType.\";\n  static override flags = {\n    \"object-type\": Flags.string({\n      char: \"t\",\n      required: true,\n      description: \"Filter revisions by objectType (e.g. human-user).\",\n    }),\n    environment: Flags.string({\n      char: \"e\",\n      description: \"Target environment (default: development).\",\n      options: [...environmentSchema.options],\n    }),\n  };\n\n  async run(): Promise<JsonEnvelope> {\n    const { flags } = await this.parse(SchemasList);\n    await this.toMeta(flags);\n    const { cwd, source, nonInteractive } = this.meta;\n\n    const secret = await readZitadelSecret(cwd);\n    consola.info(`Project   ${secret.project_id}`);\n    consola.info(`Server    ${source}`);\n    const client = createZitadelClient({\n      baseUrl: source,\n      token: secret.project_secret,\n    });\n\n    const objectType = flags[\"object-type\"];\n    const revisions = await client.listSchemas({\n      project_id: secret.project_id,\n      object_type: objectType,\n    });\n\n    // The envelope's row shape is a contract; project it explicitly so a field\n    // added to the API later cannot leak into stdout.\n    const revisionRows = revisions.map((r) => ({ id: r.id, created_at: r.created_at }));\n\n    if (revisions.length === 0) {\n      const message = `No revisions found for objectType \"${objectType}\".`;\n      consola.warn(message);\n      return this.emit({\n        status: \"ok\",\n        data: { object_type: objectType, revisions: [], count: 0 },\n        pretty: message,\n      });\n    }\n\n    // Server orders newest-first; the interactive picker inherits that order.\n    if (nonInteractive) {\n      return this.emit({\n        status: \"ok\",\n        data: {\n          object_type: objectType,\n          revisions: revisionRows,\n          count: revisions.length,\n        },\n        pretty: renderTable(objectType, revisions),\n      });\n    }\n\n    const picked = await select({\n      message: `Revisions of objectType \"${objectType}\" (newest first)`,\n      options: revisions.map((r, idx) => ({\n        value: r.id,\n        label: `${r.created_at}   ${r.id}${idx === 0 ? \"   (latest)\" : \"\"}`,\n      })),\n    });\n    if (isCancel(picked)) {\n      cancel(\"No revision selected.\");\n      return this.emit({\n        status: \"ok\",\n        data: { object_type: objectType, revisions: revisionRows, count: revisions.length },\n        pretty: \"\",\n      });\n    }\n\n    const s = spinner();\n    s.start(`Loading ${String(picked)}…`);\n    const body = await fetchSchemaRevision(client, String(picked), secret.project_id);\n    s.stop(`Loaded ${String(picked)}`);\n\n    const pretty = JSON.stringify(body, null, 2);\n\n    return this.emit({\n      status: \"ok\",\n      data: {\n        object_type: objectType,\n        revisions: revisionRows,\n        selected: { id: picked, body },\n        count: revisions.length,\n      },\n      pretty,\n    });\n  }\n}\n\n/**\n * Fetch one schema revision body. The id is URL-encoded before it lands in\n * the path: server-allocated ids are opaque today (`sch_…`), but ids can be\n * full URLs when a schema carried an `$id` (the server-seeded defaults do),\n * and an unencoded URL would break the `/schemas/:id` path. Mirrors the\n * encoding the sync engine's schema syncer applies.\n */\nexport async function fetchSchemaRevision(\n  client: ZitadelClient,\n  id: string,\n  projectId: string,\n): Promise<unknown> {\n  return client.getSchemaById(encodeURIComponent(id), { project_id: projectId });\n}\n\nfunction renderTable(objectType: string, revisions: ReadonlyArray<ListSchemas200Item>): string {\n  const header = `Revisions of objectType \"${objectType}\" (${revisions.length}, newest first)`;\n  const idCol = Math.max(\"id\".length, ...revisions.map((r) => r.id.length));\n  const createdCol = Math.max(\"created_at\".length, ...revisions.map((r) => r.created_at.length));\n  const rows = revisions.map(\n    (r) => `${r.created_at.padEnd(createdCol)}  ${r.id.padEnd(idCol)}`,\n  );\n  return [\n    header,\n    `${\"created_at\".padEnd(createdCol)}  ${\"id\".padEnd(idCol)}`,\n    `${\"-\".repeat(createdCol)}  ${\"-\".repeat(idCol)}`,\n    ...rows,\n  ].join(\"\\n\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAoBA,IAAqB,cAArB,MAAqB,oBAAoB,YAAY;CACnD,OAAgB,cAAc;CAC9B,OAAgB,QAAQ;EACtB,eAAe,MAAM,OAAO;GAC1B,MAAM;GACN,UAAU;GACV,aAAa;GACd,CAAC;EACF,aAAa,MAAM,OAAO;GACxB,MAAM;GACN,aAAa;GACb,SAAS,CAAC,GAAG,kBAAkB,QAAQ;GACxC,CAAC;EACH;CAED,MAAM,MAA6B;EACjC,MAAM,EAAE,UAAU,MAAM,KAAK,MAAM,YAAY;AAC/C,QAAM,KAAK,OAAO,MAAM;EACxB,MAAM,EAAE,KAAK,QAAQ,mBAAmB,KAAK;EAE7C,MAAM,SAAS,MAAM,kBAAkB,IAAI;AAC3C,YAAQ,KAAK,aAAa,OAAO,aAAa;AAC9C,YAAQ,KAAK,aAAa,SAAS;EACnC,MAAM,SAAS,oBAAoB;GACjC,SAAS;GACT,OAAO,OAAO;GACf,CAAC;EAEF,MAAM,aAAa,MAAM;EACzB,MAAM,YAAY,MAAM,OAAO,YAAY;GACzC,YAAY,OAAO;GACnB,aAAa;GACd,CAAC;EAIF,MAAM,eAAe,UAAU,KAAK,OAAO;GAAE,IAAI,EAAE;GAAI,YAAY,EAAE;GAAY,EAAE;AAEnF,MAAI,UAAU,WAAW,GAAG;GAC1B,MAAM,UAAU,sCAAsC,WAAW;AACjE,aAAQ,KAAK,QAAQ;AACrB,UAAO,KAAK,KAAK;IACf,QAAQ;IACR,MAAM;KAAE,aAAa;KAAY,WAAW,EAAE;KAAE,OAAO;KAAG;IAC1D,QAAQ;IACT,CAAC;;AAIJ,MAAI,eACF,QAAO,KAAK,KAAK;GACf,QAAQ;GACR,MAAM;IACJ,aAAa;IACb,WAAW;IACX,OAAO,UAAU;IAClB;GACD,QAAQ,YAAY,YAAY,UAAU;GAC3C,CAAC;EAGJ,MAAM,SAAS,MAAM,OAAO;GAC1B,SAAS,4BAA4B,WAAW;GAChD,SAAS,UAAU,KAAK,GAAG,SAAS;IAClC,OAAO,EAAE;IACT,OAAO,GAAG,EAAE,WAAW,KAAK,EAAE,KAAK,QAAQ,IAAI,gBAAgB;IAChE,EAAE;GACJ,CAAC;AACF,MAAI,SAAS,OAAO,EAAE;AACpB,UAAO,wBAAwB;AAC/B,UAAO,KAAK,KAAK;IACf,QAAQ;IACR,MAAM;KAAE,aAAa;KAAY,WAAW;KAAc,OAAO,UAAU;KAAQ;IACnF,QAAQ;IACT,CAAC;;EAGJ,MAAM,IAAI,SAAS;AACnB,IAAE,MAAM,WAAW,OAAO,OAAO,CAAC,GAAG;EACrC,MAAM,OAAO,MAAM,oBAAoB,QAAQ,OAAO,OAAO,EAAE,OAAO,WAAW;AACjF,IAAE,KAAK,UAAU,OAAO,OAAO,GAAG;EAElC,MAAM,SAAS,KAAK,UAAU,MAAM,MAAM,EAAE;AAE5C,SAAO,KAAK,KAAK;GACf,QAAQ;GACR,MAAM;IACJ,aAAa;IACb,WAAW;IACX,UAAU;KAAE,IAAI;KAAQ;KAAM;IAC9B,OAAO,UAAU;IAClB;GACD;GACD,CAAC;;;;;;;;;;AAWN,eAAsB,oBACpB,QACA,IACA,WACkB;AAClB,QAAO,OAAO,cAAc,mBAAmB,GAAG,EAAE,EAAE,YAAY,WAAW,CAAC;;AAGhF,SAAS,YAAY,YAAoB,WAAsD;CAC7F,MAAM,SAAS,4BAA4B,WAAW,KAAK,UAAU,OAAO;CAC5E,MAAM,QAAQ,KAAK,IAAI,GAAa,GAAG,UAAU,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC;CACzE,MAAM,aAAa,KAAK,IAAI,IAAqB,GAAG,UAAU,KAAK,MAAM,EAAE,WAAW,OAAO,CAAC;CAC9F,MAAM,OAAO,UAAU,KACpB,MAAM,GAAG,EAAE,WAAW,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,OAAO,MAAM,GACjE;AACD,QAAO;EACL;EACA,GAAG,aAAa,OAAO,WAAW,CAAC,IAAI,KAAK,OAAO,MAAM;EACzD,GAAG,IAAI,OAAO,WAAW,CAAC,IAAI,IAAI,OAAO,MAAM;EAC/C,GAAG;EACJ,CAAC,KAAK,KAAK"}
+{"version":3,"file":"list.mjs","names":[],"sources":["../../../src/commands/schemas/list.ts"],"sourcesContent":["import { cancel, isCancel, select, spinner } from \"@clack/prompts\";\nimport { Flags } from \"@oclif/core\";\nimport { consola } from \"consola\";\n\nimport { createZitadelClient, type ZitadelClient } from \"@zitadel/api/client\";\nimport type { ListSchemas200Item } from \"@zitadel/api/generated/model\";\n\nimport { BaseCommand, type JsonEnvelope } from \"../../lib/oclif\";\nimport { environmentSchema } from \"../../lib/environment\";\nimport { readZitadelSecret } from \"../../lib/project\";\n\n/**\n * The `schemas list` topic command — inspect the revision history of a\n * user-schema, filtered by `objectType`.\n *\n * Non-interactive: prints one row per revision (newest first) as a JSON payload\n * or a plain-text table. Interactive: renders a `@clack/prompts` `select` menu\n * of the same rows; on selection, fetches the full schema body via\n * `getSchemaById` and pretty-prints it to stdout.\n */\nexport default class SchemasList extends BaseCommand {\n  static override description = \"List revisions of a user-schema by objectType.\";\n  static override flags = {\n    \"object-type\": Flags.string({\n      char: \"t\",\n      required: true,\n      description: \"Filter revisions by objectType (e.g. human-user).\",\n    }),\n    environment: Flags.string({\n      char: \"e\",\n      description: \"Target environment (default: development).\",\n      options: [...environmentSchema.options],\n    }),\n  };\n\n  async run(): Promise<JsonEnvelope> {\n    const { flags } = await this.parse(SchemasList);\n    await this.toMeta(flags);\n    const { cwd, source, nonInteractive } = this.meta;\n\n    const secret = await readZitadelSecret(cwd);\n    consola.info(`Project   ${secret.project_id}`);\n    consola.info(`Server    ${source}`);\n    const client = createZitadelClient({\n      baseUrl: source,\n      token: secret.project_secret,\n    });\n\n    const objectType = flags[\"object-type\"];\n    const revisions = await client.listSchemas({\n      project_id: secret.project_id,\n      object_type: objectType,\n    });\n\n    // The envelope's row shape is a contract; project it explicitly so a field\n    // added to the API later cannot leak into stdout.\n    const revisionRows = revisions.map((r) => ({ id: r.id, created_at: r.created_at }));\n\n    if (revisions.length === 0) {\n      const message = `No revisions found for objectType \"${objectType}\".`;\n      consola.warn(message);\n      return this.emit({\n        status: \"ok\",\n        data: { object_type: objectType, revisions: [], count: 0 },\n        pretty: message,\n      });\n    }\n\n    // Server orders newest-first; the interactive picker inherits that order.\n    if (nonInteractive) {\n      return this.emit({\n        status: \"ok\",\n        data: {\n          object_type: objectType,\n          revisions: revisionRows,\n          count: revisions.length,\n        },\n        pretty: renderTable(objectType, revisions),\n      });\n    }\n\n    const picked = await select({\n      message: `Revisions of objectType \"${objectType}\" (newest first)`,\n      options: revisions.map((r, idx) => ({\n        value: r.id,\n        label: `${r.created_at}   ${r.id}${idx === 0 ? \"   (latest)\" : \"\"}`,\n      })),\n    });\n    if (isCancel(picked)) {\n      cancel(\"No revision selected.\");\n      return this.emit({\n        status: \"ok\",\n        data: { object_type: objectType, revisions: revisionRows, count: revisions.length },\n        pretty: \"\",\n      });\n    }\n\n    const s = spinner();\n    s.start(`Loading ${String(picked)}…`);\n    const body = await fetchSchemaRevision(client, String(picked));\n    s.stop(`Loaded ${String(picked)}`);\n\n    const pretty = JSON.stringify(body, null, 2);\n\n    return this.emit({\n      status: \"ok\",\n      data: {\n        object_type: objectType,\n        revisions: revisionRows,\n        selected: { id: picked, body },\n        count: revisions.length,\n      },\n      pretty,\n    });\n  }\n}\n\n/**\n * Fetch one schema revision body. The id is URL-encoded before it lands in\n * the path: server-allocated ids are opaque today (`sch_…`), but ids can be\n * full URLs when a schema carried an `$id` (the server-seeded defaults do),\n * and an unencoded URL would break the `/schemas/:id` path. Mirrors the\n * encoding the sync engine's schema syncer applies.\n */\nexport async function fetchSchemaRevision(client: ZitadelClient, id: string): Promise<unknown> {\n  // Flat-by-id: authz resolves the project from RSI; no project_id query.\n  return client.getSchemaById(encodeURIComponent(id));\n}\n\nfunction renderTable(objectType: string, revisions: ReadonlyArray<ListSchemas200Item>): string {\n  const header = `Revisions of objectType \"${objectType}\" (${revisions.length}, newest first)`;\n  const idCol = Math.max(\"id\".length, ...revisions.map((r) => r.id.length));\n  const createdCol = Math.max(\"created_at\".length, ...revisions.map((r) => r.created_at.length));\n  const rows = revisions.map(\n    (r) => `${r.created_at.padEnd(createdCol)}  ${r.id.padEnd(idCol)}`,\n  );\n  return [\n    header,\n    `${\"created_at\".padEnd(createdCol)}  ${\"id\".padEnd(idCol)}`,\n    `${\"-\".repeat(createdCol)}  ${\"-\".repeat(idCol)}`,\n    ...rows,\n  ].join(\"\\n\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAoBA,IAAqB,cAArB,MAAqB,oBAAoB,YAAY;CACnD,OAAgB,cAAc;CAC9B,OAAgB,QAAQ;EACtB,eAAe,MAAM,OAAO;GAC1B,MAAM;GACN,UAAU;GACV,aAAa;GACd,CAAC;EACF,aAAa,MAAM,OAAO;GACxB,MAAM;GACN,aAAa;GACb,SAAS,CAAC,GAAG,kBAAkB,QAAQ;GACxC,CAAC;EACH;CAED,MAAM,MAA6B;EACjC,MAAM,EAAE,UAAU,MAAM,KAAK,MAAM,YAAY;AAC/C,QAAM,KAAK,OAAO,MAAM;EACxB,MAAM,EAAE,KAAK,QAAQ,mBAAmB,KAAK;EAE7C,MAAM,SAAS,MAAM,kBAAkB,IAAI;AAC3C,YAAQ,KAAK,aAAa,OAAO,aAAa;AAC9C,YAAQ,KAAK,aAAa,SAAS;EACnC,MAAM,SAAS,oBAAoB;GACjC,SAAS;GACT,OAAO,OAAO;GACf,CAAC;EAEF,MAAM,aAAa,MAAM;EACzB,MAAM,YAAY,MAAM,OAAO,YAAY;GACzC,YAAY,OAAO;GACnB,aAAa;GACd,CAAC;EAIF,MAAM,eAAe,UAAU,KAAK,OAAO;GAAE,IAAI,EAAE;GAAI,YAAY,EAAE;GAAY,EAAE;AAEnF,MAAI,UAAU,WAAW,GAAG;GAC1B,MAAM,UAAU,sCAAsC,WAAW;AACjE,aAAQ,KAAK,QAAQ;AACrB,UAAO,KAAK,KAAK;IACf,QAAQ;IACR,MAAM;KAAE,aAAa;KAAY,WAAW,EAAE;KAAE,OAAO;KAAG;IAC1D,QAAQ;IACT,CAAC;;AAIJ,MAAI,eACF,QAAO,KAAK,KAAK;GACf,QAAQ;GACR,MAAM;IACJ,aAAa;IACb,WAAW;IACX,OAAO,UAAU;IAClB;GACD,QAAQ,YAAY,YAAY,UAAU;GAC3C,CAAC;EAGJ,MAAM,SAAS,MAAM,OAAO;GAC1B,SAAS,4BAA4B,WAAW;GAChD,SAAS,UAAU,KAAK,GAAG,SAAS;IAClC,OAAO,EAAE;IACT,OAAO,GAAG,EAAE,WAAW,KAAK,EAAE,KAAK,QAAQ,IAAI,gBAAgB;IAChE,EAAE;GACJ,CAAC;AACF,MAAI,SAAS,OAAO,EAAE;AACpB,UAAO,wBAAwB;AAC/B,UAAO,KAAK,KAAK;IACf,QAAQ;IACR,MAAM;KAAE,aAAa;KAAY,WAAW;KAAc,OAAO,UAAU;KAAQ;IACnF,QAAQ;IACT,CAAC;;EAGJ,MAAM,IAAI,SAAS;AACnB,IAAE,MAAM,WAAW,OAAO,OAAO,CAAC,GAAG;EACrC,MAAM,OAAO,MAAM,oBAAoB,QAAQ,OAAO,OAAO,CAAC;AAC9D,IAAE,KAAK,UAAU,OAAO,OAAO,GAAG;EAElC,MAAM,SAAS,KAAK,UAAU,MAAM,MAAM,EAAE;AAE5C,SAAO,KAAK,KAAK;GACf,QAAQ;GACR,MAAM;IACJ,aAAa;IACb,WAAW;IACX,UAAU;KAAE,IAAI;KAAQ;KAAM;IAC9B,OAAO,UAAU;IAClB;GACD;GACD,CAAC;;;;;;;;;;AAWN,eAAsB,oBAAoB,QAAuB,IAA8B;AAE7F,QAAO,OAAO,cAAc,mBAAmB,GAAG,CAAC;;AAGrD,SAAS,YAAY,YAAoB,WAAsD;CAC7F,MAAM,SAAS,4BAA4B,WAAW,KAAK,UAAU,OAAO;CAC5E,MAAM,QAAQ,KAAK,IAAI,GAAa,GAAG,UAAU,KAAK,MAAM,EAAE,GAAG,OAAO,CAAC;CACzE,MAAM,aAAa,KAAK,IAAI,IAAqB,GAAG,UAAU,KAAK,MAAM,EAAE,WAAW,OAAO,CAAC;CAC9F,MAAM,OAAO,UAAU,KACpB,MAAM,GAAG,EAAE,WAAW,OAAO,WAAW,CAAC,IAAI,EAAE,GAAG,OAAO,MAAM,GACjE;AACD,QAAO;EACL;EACA,GAAG,aAAa,OAAO,WAAW,CAAC,IAAI,KAAK,OAAO,MAAM;EACzD,GAAG,IAAI,OAAO,WAAW,CAAC,IAAI,IAAI,OAAO,MAAM;EAC/C,GAAG;EACJ,CAAC,KAAK,KAAK"}

package/dist/commands/setup.mjs

@@ -1,12 +1,13 @@
-import { D as toZitadelError, E as ZitadelError, T as stableStringify, k as publicCliCommand, n as DEFAULT_SERVER, t as BaseCommand, u as detectHealthyLocalServer } from "../oclif-CL6-M13m.mjs";
-import { n as claimCommand, r as claimState, t as claimAction } from "../claim-state-BTGInAaN.mjs";
-import { n as customizeAndPublishActions, r as verifyLoginAction, t as brandingGuidanceAction } from "../journey-guidance-CtQUfWar.mjs";
-import { i as RENDERER_IDS, n as inspectScaffoldTarget, r as AVAILABLE_RENDERER_IDS, s as issuerFromPort, t as createOrca } from "../orca-BWB4zOdw.mjs";
-import { n as hasZitadelSecret, t as hasZitadelConfig } from "../project-yejJSfdJ.mjs";
-import { a as updateState, t as SCHEMAS_DIR } from "../user-schema-W1OsXdpc.mjs";
-import { r as writeScaffoldManifest } from "../scaffold-manifest-CKNFLX9T.mjs";
-import { i as toBrandingWireBody, t as BRANDING_DIR } from "../branding-BXj028-W.mjs";
-import { c as writeBackResource, o as hashForState, u as FLOWS_DIR } from "../sync-Cx2_4rXW.mjs";
+import { n as brandingDesignLabel, t as BRANDING_DESIGN_INFO } from "../designs-Ckz18Dpo.mjs";
+import { D as toZitadelError, E as ZitadelError, T as stableStringify, j as publicCliCommand, k as normalizePublicCliProse, n as DEFAULT_SERVER, t as BaseCommand, u as detectHealthyLocalServer } from "../oclif-CanO3zdt.mjs";
+import { n as claimCommand, r as claimState, t as claimAction } from "../claim-state-DlfD6Res.mjs";
+import { n as customizeAndPublishActions, r as verifyLoginAction, t as brandingGuidanceAction } from "../journey-guidance-BGrOX_gT.mjs";
+import { i as RENDERER_IDS, n as inspectScaffoldTarget, r as AVAILABLE_RENDERER_IDS, s as issuerFromPort, t as createOrca } from "../orca-Cu0iW1mv.mjs";
+import { n as hasZitadelSecret, t as hasZitadelConfig } from "../project-CHhot85s.mjs";
+import { a as updateState, t as SCHEMAS_DIR } from "../user-schema-DTuOsdKE.mjs";
+import { a as runPackageCommand, c as writeScaffoldManifest, i as installCommandFor, n as detectPackageManager, r as devCommandFor } from "../package-manager-DFdLcDx1.mjs";
+import { i as toBrandingWireBody, t as BRANDING_DIR } from "../branding-cygSBPkV.mjs";
+import { c as writeBackResource, o as hashForState, u as FLOWS_DIR } from "../sync-Bd6vASgg.mjs";
 import { mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
 import { basename, dirname, join } from "node:path";
 import { cancel, confirm, intro, isCancel, outro, select, spinner, text } from "@clack/prompts";
@@ -15,7 +16,6 @@ import { createZitadelClient } from "@zitadel/api/client";
 import { BRANDING_DESIGNS, DEFAULT_BRANDING_CONFIG_PATH, DEFAULT_BRANDING_TEMPLATE_PATH, DEFAULT_FLOW_CONFIG_PATH, DEFAULT_FLOW_SCHEMA_URI, DEFAULT_SCHEMA_CONFIG_PATH, DEFAULT_SETUP_PRESET, DEFAULT_SETUP_USE_CASE, SETUP_PRESETS, SETUP_USE_CASES, brandingReadmeContent, flowsReadmeContent, getDefaultBrandingConfig, getDefaultHumanUserSchema, getDefaultLoginFlow, schemasReadmeContent } from "@zitadel/config/defaults";
 import { consola as consola$1 } from "consola";
 import { BRANDING_FILE_SCHEMA_REF } from "@zitadel/config/meta-schemas";
-import { spawn } from "node:child_process";
 import { normalizeFlowBody, normalizeSchemaBody } from "@zitadel/config/normalize";
 import pc from "picocolors";
 //#region src/lib/orca/patchers/posture.ts
@@ -72,7 +72,7 @@ async function materializeSetupResources(opts) {
 	const schemaId = requiredString((await opts.client.createSchema(schemaBody, { project_id: opts.projectId })).id, "created schema id");
 	let schemaHash = hashForState({ normalize: normalizeSchemaBody }, schemaBody);
 	try {
-		const canonical = await opts.client.getSchemaById(encodeURIComponent(schemaId), { project_id: opts.projectId });
+		const canonical = await opts.client.getSchemaById(encodeURIComponent(schemaId));
 		schemaHash = (await writeBackResource(opts.cwd, DEFAULT_SCHEMA_CONFIG_PATH, { normalize: normalizeSchemaBody }, canonical)).hash;
 	} catch (err) {
 		consola$1.debug(`fetch created schema ${schemaId} during setup failed:`, err);
@@ -119,12 +119,12 @@ async function materializeSetupResources(opts) {
 			hash: hashForState({ normalize: brandingNormalize }, descriptor)
 		});
 		const brandingReadme = join(BRANDING_DIR, "README.md");
-		if (await writeReadmeFile(opts.cwd, brandingReadme, brandingReadmeContent())) filesWritten.push(join(opts.cwd, brandingReadme));
+		if (await writeReadmeFile(opts.cwd, brandingReadme, normalizePublicCliProse(brandingReadmeContent(), opts.cliVersion))) filesWritten.push(join(opts.cwd, brandingReadme));
 	}
 	const schemasReadme = join(SCHEMAS_DIR, "README.md");
 	const flowsReadme = join(FLOWS_DIR, "README.md");
-	if (await writeReadmeFile(opts.cwd, schemasReadme, schemasReadmeContent())) filesWritten.push(join(opts.cwd, schemasReadme));
-	if (await writeReadmeFile(opts.cwd, flowsReadme, flowsReadmeContent())) filesWritten.push(join(opts.cwd, flowsReadme));
+	if (await writeReadmeFile(opts.cwd, schemasReadme, normalizePublicCliProse(schemasReadmeContent(), opts.cliVersion))) filesWritten.push(join(opts.cwd, schemasReadme));
+	if (await writeReadmeFile(opts.cwd, flowsReadme, normalizePublicCliProse(flowsReadmeContent(), opts.cliVersion))) filesWritten.push(join(opts.cwd, flowsReadme));
 	return { filesWritten };
 }
 /**
@@ -177,88 +177,6 @@ function isErrno(error, code) {
 	return typeof error === "object" && error !== null && "code" in error && error.code === code;
 }
 //#endregion
-//#region src/lib/package-manager.ts
-async function detectPackageManager(cwd) {
-	const declared = await packageManagerFromManifest(cwd);
-	if (declared) return declared;
-	if (await exists(join(cwd, "pnpm-lock.yaml"))) return "pnpm";
-	if (await exists(join(cwd, "yarn.lock"))) return "yarn";
-	if (await exists(join(cwd, "bun.lock"))) return "bun";
-	if (await exists(join(cwd, "bun.lockb"))) return "bun";
-	if (await exists(join(cwd, "package-lock.json"))) return "npm";
-	return "npm";
-}
-function installCommandFor(packageManager) {
-	return command(packageManager, ["install"]);
-}
-function devCommandFor(packageManager) {
-	switch (packageManager) {
-		case "npm": return command("npm", ["run", "dev"]);
-		case "pnpm": return command("pnpm", ["dev"]);
-		case "yarn": return command("yarn", ["dev"]);
-		case "bun": return command("bun", ["run", "dev"]);
-	}
-}
-async function runPackageCommand(packageCommand, options) {
-	await new Promise((resolve, reject) => {
-		const child = spawn(packageCommand.command, packageCommand.args, {
-			cwd: options.cwd,
-			env: options.env ?? process.env,
-			stdio: options.redirectStdoutToStderr ? [
-				"ignore",
-				"pipe",
-				"pipe"
-			] : "inherit"
-		});
-		if (options.redirectStdoutToStderr) {
-			child.stdout?.on("data", (chunk) => process.stderr.write(chunk));
-			child.stderr?.on("data", (chunk) => process.stderr.write(chunk));
-		}
-		child.on("error", reject);
-		child.on("close", (code, signal) => {
-			if (code === 0) {
-				resolve();
-				return;
-			}
-			const detail = signal ? `signal ${signal}` : `exit ${String(code ?? 1)}`;
-			const error = /* @__PURE__ */ new Error(`${packageCommand.display} failed with ${detail}`);
-			Object.assign(error, {
-				code: code ?? 1,
-				signal
-			});
-			reject(error);
-		});
-	});
-}
-function command(packageManager, args) {
-	return {
-		command: packageManager,
-		args,
-		display: [packageManager, ...args].join(" ")
-	};
-}
-async function packageManagerFromManifest(cwd) {
-	try {
-		const raw = await readFile(join(cwd, "package.json"), "utf8");
-		const parsed = JSON.parse(raw);
-		return typeof parsed.packageManager === "string" ? packageManagerFromString(parsed.packageManager) : void 0;
-	} catch {
-		return;
-	}
-}
-function packageManagerFromString(value) {
-	const name = value.split("@")[0];
-	return name === "npm" || name === "pnpm" || name === "yarn" || name === "bun" ? name : void 0;
-}
-async function exists(path) {
-	try {
-		await stat(path);
-		return true;
-	} catch {
-		return false;
-	}
-}
-//#endregion
 //#region src/commands/setup/install.ts
 async function installDependenciesForSetup(input) {
 	const packageManager = await detectPackageManager(input.cwd);
@@ -391,38 +309,15 @@ var DesignPrompt = class {
 		const value = await select({
 			message: "How should the login look? A starter design adds its editable template to .zitadel/branding/.",
 			initialValue: answers.design ?? BUILT_IN,
-			options: [
-				{
-					value: BUILT_IN,
-					label: "Built-in",
-					hint: "no files added; pick a design anytime later with `branding eject`"
-				},
-				{
-					value: "centered",
-					label: "Centered",
-					hint: "card centred on the page"
-				},
-				{
-					value: "split",
-					label: "Split",
-					hint: "brand panel left, form right"
-				},
-				{
-					value: "split-right",
-					label: "Split (reversed)",
-					hint: "form left, brand panel right"
-				},
-				{
-					value: "hero",
-					label: "Hero",
-					hint: "landing-style brand pane left, form right"
-				},
-				{
-					value: "minimal",
-					label: "Minimal",
-					hint: "no card chrome, fields straight on the page"
-				}
-			]
+			options: [{
+				value: BUILT_IN,
+				label: "Built-in",
+				hint: "no files added; pick a design anytime later with `branding eject`"
+			}, ...BRANDING_DESIGNS.map((design) => ({
+				value: design,
+				label: BRANDING_DESIGN_INFO[design].label,
+				hint: BRANDING_DESIGN_INFO[design].hint
+			}))]
 		});
 		bail(value);
 		if (value === BUILT_IN) return {
@@ -675,6 +570,16 @@ const SETUP_PROMPTS = [
 //#endregion
 //#region src/commands/setup/summary.ts
 /**
+* Renders a path under `cwd` with stable POSIX separators. Setup's summary
+* matches generated artifacts against repository-style suffixes such as
+* `.zitadel/schemas/default-human-user.json`; normalizing here keeps those
+* matches working when Node returns Windows paths with backslashes.
+*/
+function relativeDisplayPath(cwd, absolute) {
+	const boundary = absolute[cwd.length];
+	return (absolute.startsWith(cwd) && (boundary === "/" || boundary === "\\") ? absolute.slice(cwd.length + 1) : absolute).replaceAll("\\", "/");
+}
+/**
 * Renders the section list as a single multi-line string. Labels are
 * padded to a common width per section so the `✓ label  value` columns
 * line up, the title prints in dim gray, and `✓` is green. Values come
@@ -765,6 +670,29 @@ function stripRange(range) {
 function fileNameOf(p) {
 	return basename(p);
 }
+/**
+* Layout caveats for the chosen login design, shown to humans after the
+* summary box and carried in the JSON envelope's `warnings`.
+*
+* The split family's brand pane is keyed to the **login's own container**
+* width — a `@container (max-width: 48rem)` query on the widget's mount, not
+* a viewport media query. Above that the pane renders; below it the pane is
+* `display: none` and the compact brand mark takes its place — and the split
+* template only emits that mark when `branding.json` names `logo_url` or
+* `hero_url`, so without one the narrow layout loses the branding entirely.
+*
+* Independent of posture, because the container query is: a full-page login
+* hits the same collapse on a phone that an embedded card hits in a sidebar.
+* Gating on `widget` would have been a guess about the container, and a wrong
+* one in both directions — the wrapper setup scaffolds for a widget is
+* full-width (the pane renders there), and a page-posture login on a phone is
+* exactly the narrow case the advice is for. `hero` stays quiet: its compact
+* fallback is editable text, so a narrow container never leaves it blank.
+*/
+function designWarnings(design) {
+	if (design !== "split" && design !== "split-right") return [];
+	return [`The ${design} design shows its brand pane only when the login's container is wide; a narrow container — a card-width embed, or any phone-width viewport — collapses it to the compact brand mark. Set logo_url (or hero_url) in .zitadel/branding/branding.json so that mark isn't empty.`];
+}
 //#endregion
 //#region src/commands/setup/index.ts
 /**
@@ -819,7 +747,7 @@ var Setup = class Setup extends BaseCommand {
 			options: [...SETUP_USE_CASES]
 		}),
 		design: Flags.string({
-			description: "Login design to eject into .zitadel/branding/ and publish as branding revision 1. Skips the wizard's design question. When omitted in non-interactive runs, the login uses the built-in template; run the `branding eject` command later to customize.",
+			description: "Login design to eject into .zitadel/branding/ and publish as branding revision 1. Skips the wizard's design question. When omitted in non-interactive runs, the login uses the built-in template; run the `branding eject` command later to customize. Split-family designs (split, split-right, hero) collapse their brand pane by container width: narrow containers — including widget-posture embeds at card width — render the compact brand mark instead (logo_url, else hero_url, from .zitadel/branding/branding.json; hero falls back to editable text).",
 			options: [...BRANDING_DESIGNS]
 		})
 	};
@@ -938,10 +866,10 @@ var Setup = class Setup extends BaseCommand {
 			force
 		});
 		for (const file of result.filesWritten) {
-			const sentence = describeWrittenFile(relativeDisplay(cwd, file), dryRun);
+			const sentence = describeWrittenFile(relativeDisplayPath(cwd, file), dryRun);
 			if (sentence) consola$1.info(sentence);
 		}
-		for (const file of result.filesSkipped) consola$1.info(`Left ${relativeDisplay(cwd, file)} unchanged (already matches target)`);
+		for (const file of result.filesSkipped) consola$1.info(`Left ${relativeDisplayPath(cwd, file)} unchanged (already matches target)`);
 		let resourceResult;
 		try {
 			resourceResult = dryRun ? { filesWritten: [] } : await materializeSetupResources({
@@ -954,7 +882,8 @@ var Setup = class Setup extends BaseCommand {
 				force,
 				preset: answers.preset,
 				useCase: answers.useCase,
-				design: answers.design
+				design: answers.design,
+				cliVersion: this.meta.cliVersion
 			});
 		} catch (error) {
 			await rm(join(cwd, "zitadel.json"), { force: true });
@@ -967,7 +896,7 @@ var Setup = class Setup extends BaseCommand {
 			});
 		}
 		for (const file of resourceResult.filesWritten) {
-			const sentence = describeWrittenFile(relativeDisplay(cwd, file), dryRun);
+			const sentence = describeWrittenFile(relativeDisplayPath(cwd, file), dryRun);
 			if (sentence) consola$1.info(sentence);
 		}
 		const allFilesWritten = [...result.filesWritten, ...resourceResult.filesWritten];
@@ -1006,7 +935,7 @@ var Setup = class Setup extends BaseCommand {
 			step: "dependencies_installed",
 			package_manager: installOutcome.install.package_manager
 		});
-		const writtenRel = allFilesWritten.map((file) => relativeDisplay(cwd, file));
+		const writtenRel = allFilesWritten.map((file) => relativeDisplayPath(cwd, file));
 		const claimNudge = claimState({
 			secret: {},
 			server: answers.server
@@ -1017,6 +946,7 @@ var Setup = class Setup extends BaseCommand {
 			actions: [],
 			commands: []
 		};
+		const warnings = designWarnings(answers.design);
 		if (!this.jsonEnabled()) {
 			const sections = buildSummary({
 				projectFacts: await detectProjectFacts(cwd, framework.id),
@@ -1040,9 +970,11 @@ var Setup = class Setup extends BaseCommand {
 					borderColor: "green"
 				}
 			});
+			for (const warning of warnings) consola$1.warn(warning);
 		}
 		return this.emit({
 			status: "ok",
+			warnings,
 			pretty: "",
 			data: {
 				title: "Zitadel is ready.",
@@ -1052,13 +984,13 @@ var Setup = class Setup extends BaseCommand {
 				},
 				framework: framework.id,
 				server: answers.server,
-				files_written: allFilesWritten.map((file) => relativeDisplay(cwd, file)),
+				files_written: allFilesWritten.map((file) => relativeDisplayPath(cwd, file)),
 				files: result.files.map((file) => ({
-					path: relativeDisplay(cwd, file.path),
+					path: relativeDisplayPath(cwd, file.path),
 					kind: file.kind,
 					action: file.action
 				})),
-				files_skipped: result.filesSkipped.map((file) => relativeDisplay(cwd, file)),
+				files_skipped: result.filesSkipped.map((file) => relativeDisplayPath(cwd, file)),
 				install: installOutcome.install,
 				design: answers.design ?? null,
 				next_actions: [
@@ -1169,10 +1101,6 @@ function localSetupHint(error, retry, cliVersion) {
 		details: normalized.details
 	});
 }
-/** Renders an absolute path relative to `cwd` for human-readable output. */
-function relativeDisplay(cwd, path) {
-	return path.startsWith(cwd) ? path.slice(cwd.length + 1) : path;
-}
 /**
 * Replaces the user's `$HOME` with `~` in a path for compact terminal output.
 * Falls back to the raw path when `HOME` isn't set or doesn't match.
@@ -1225,6 +1153,10 @@ const SENTENCE_BY_PATH = {
 	".zitadel/meta/flow-definition.json": { subject: "the flow dialect spec (editor $schema)" },
 	".zitadel/meta/user-schema.json": { subject: "the user-schema dialect spec" },
 	".zitadel/meta/user-property.json": { subject: "the user-property dialect spec" },
+	".zitadel/meta/branding.json": { subject: "the branding dialect spec" },
+	".zitadel/branding/branding.json": { subject: "the branding descriptor (layout + asset URLs)" },
+	".zitadel/branding/login.liquid": { subject: "the editable login template" },
+	".zitadel/branding/README.md": { subject: "the branding folder README" },
 	"AGENTS.md": { subject: "the agent guidance (golden journey + config dialect)" },
 	"README.md": { subject: "the README's Zitadel section" },
 	"app/page.tsx": { subject: "the home page redirect" },
@@ -1270,6 +1202,28 @@ function buildSummary(opts) {
 			value: path(hit)
 		});
 	}
+	const customizeRows = [];
+	for (const [label, suffix, dir] of [
+		[
+			"User schema",
+			".zitadel/schemas/default-human-user.json",
+			".zitadel/schemas/"
+		],
+		[
+			"Login flow",
+			".zitadel/flows/default-login.json",
+			".zitadel/flows/"
+		],
+		[
+			"Login template",
+			".zitadel/branding/login.liquid",
+			".zitadel/branding/"
+		]
+	]) if (pickWrittenFile(writtenRel, suffix)) customizeRows.push({
+		label,
+		value: path(dir),
+		secondary: "see its README.md"
+	});
 	const projectRows = [
 		{
 			label: "Project id",
@@ -1285,8 +1239,8 @@ function buildSummary(opts) {
 		},
 		design ? {
 			label: "Login design",
-			value: design,
-			secondary: path(".zitadel/branding/")
+			value: brandingDesignLabel(design),
+			secondary: `${design} · ${path(".zitadel/branding/")}`
 		} : {
 			label: "Login design",
 			value: dim("built-in template")
@@ -1301,6 +1255,10 @@ function buildSummary(opts) {
 			title: "Installed",
 			rows: installedRows
 		},
+		{
+			title: "Customize",
+			rows: customizeRows
+		},
 		{
 			title: "Project",
 			rows: projectRows