workos 0.11.2 → 0.12.0

package/dist/check-coverage.ts

@@ -0,0 +1,237 @@
+#!/usr/bin/env tsx
+/**
+ * Coverage checker: compares the WorkOS OpenAPI spec against the emulator's
+ * registered routes to find missing or extra endpoints.
+ *
+ * Usage:
+ *   pnpm check:coverage path/to/openapi.yaml
+ *   pnpm check:coverage ~/Developer/workos/packages/api/open-api-spec.yaml
+ *
+ * Reports:
+ *   - Spec endpoints missing from the emulator
+ *   - Emulator endpoints not in the spec (custom/internal)
+ *   - Coverage percentage
+ */
+
+import { readFileSync, existsSync, readdirSync } from 'node:fs';
+import { resolve, extname, join } from 'node:path';
+import YAML from 'yaml';
+
+// ---------------------------------------------------------------------------
+// Parse OpenAPI spec endpoints
+// ---------------------------------------------------------------------------
+
+interface SpecEndpoint {
+  method: string;
+  path: string;
+  operationId?: string;
+  summary?: string;
+  tags: string[];
+}
+
+function parseOpenApiEndpoints(specPath: string): SpecEndpoint[] {
+  const raw = readFileSync(specPath, 'utf-8');
+  const ext = extname(specPath).toLowerCase();
+  const spec = ext === '.yaml' || ext === '.yml' ? YAML.parse(raw) : JSON.parse(raw);
+
+  const endpoints: SpecEndpoint[] = [];
+  const methods = ['get', 'post', 'put', 'patch', 'delete'] as const;
+
+  for (const [path, item] of Object.entries(spec.paths ?? {}) as [string, any][]) {
+    for (const method of methods) {
+      const op = item[method];
+      if (!op) continue;
+
+      // Normalize OpenAPI path params {id} → :id
+      const normalizedPath = path.replace(/\{([^}]+)\}/g, ':$1');
+
+      endpoints.push({
+        method: method.toUpperCase(),
+        path: normalizedPath,
+        operationId: op.operationId,
+        summary: op.summary,
+        tags: op.tags ?? [],
+      });
+    }
+  }
+
+  return endpoints;
+}
+
+// ---------------------------------------------------------------------------
+// Parse emulator registered routes from source files
+// ---------------------------------------------------------------------------
+
+interface EmulatorEndpoint {
+  method: string;
+  path: string;
+  file: string;
+  line: number;
+}
+
+function parseEmulatorEndpoints(): EmulatorEndpoint[] {
+  const routesDir = resolve('src/emulate/workos/routes');
+  const serverFile = resolve('src/emulate/core/server.ts');
+  const endpoints: EmulatorEndpoint[] = [];
+
+  const routePattern = /app\.(get|post|put|patch|delete)\('([^']+)'/g;
+
+  const filesToScan: string[] = [];
+
+  // Collect route files
+  if (existsSync(routesDir)) {
+    for (const file of readdirSync(routesDir)) {
+      if (file.endsWith('.ts') && !file.endsWith('.spec.ts')) {
+        filesToScan.push(join(routesDir, file));
+      }
+    }
+  }
+
+  // Also scan server.ts for JWKS and other direct routes
+  if (existsSync(serverFile)) {
+    filesToScan.push(serverFile);
+  }
+
+  for (const filePath of filesToScan) {
+    const content = readFileSync(filePath, 'utf-8');
+    const lines = content.split('\n');
+
+    for (let i = 0; i < lines.length; i++) {
+      routePattern.lastIndex = 0;
+      let match;
+      while ((match = routePattern.exec(lines[i])) !== null) {
+        endpoints.push({
+          method: match[1].toUpperCase(),
+          path: match[2],
+          file: filePath.replace(resolve('.') + '/', ''),
+          line: i + 1,
+        });
+      }
+    }
+  }
+
+  return endpoints;
+}
+
+// ---------------------------------------------------------------------------
+// Normalize paths for comparison
+// ---------------------------------------------------------------------------
+
+/** Normalize path params to a canonical form for matching.
+ *  e.g., :id, :orgId, :organization_id all become :param in the same position */
+function normalizePath(path: string): string {
+  return path
+    .replace(/:[a-zA-Z_]+/g, ':param')
+    .replace(/\/+$/, '')
+    .toLowerCase();
+}
+
+function routeKey(method: string, path: string): string {
+  return `${method} ${normalizePath(path)}`;
+}
+
+// ---------------------------------------------------------------------------
+// Main
+// ---------------------------------------------------------------------------
+
+function main(): void {
+  const specPath = process.argv[2];
+  if (!specPath) {
+    console.error('Usage: check-coverage <openapi-spec-path>');
+    console.error('  e.g.: pnpm check:coverage ~/Developer/workos/packages/api/open-api-spec.yaml');
+    process.exit(1);
+  }
+
+  const resolvedSpec = resolve(specPath);
+  if (!existsSync(resolvedSpec)) {
+    console.error(`Spec file not found: ${resolvedSpec}`);
+    process.exit(1);
+  }
+
+  const specEndpoints = parseOpenApiEndpoints(resolvedSpec);
+  const emulatorEndpoints = parseEmulatorEndpoints();
+
+  // Build lookup maps
+  const specMap = new Map<string, SpecEndpoint>();
+  for (const ep of specEndpoints) {
+    specMap.set(routeKey(ep.method, ep.path), ep);
+  }
+
+  const emulatorMap = new Map<string, EmulatorEndpoint>();
+  for (const ep of emulatorEndpoints) {
+    emulatorMap.set(routeKey(ep.method, ep.path), ep);
+  }
+
+  // Find gaps
+  const missing: SpecEndpoint[] = [];
+  const covered: SpecEndpoint[] = [];
+  for (const [key, ep] of specMap) {
+    if (emulatorMap.has(key)) {
+      covered.push(ep);
+    } else {
+      missing.push(ep);
+    }
+  }
+
+  const extra: EmulatorEndpoint[] = [];
+  for (const [key, ep] of emulatorMap) {
+    if (!specMap.has(key)) {
+      extra.push(ep);
+    }
+  }
+
+  // Group missing by tag
+  const missingByTag = new Map<string, SpecEndpoint[]>();
+  for (const ep of missing) {
+    const tag = ep.tags[0] ?? 'untagged';
+    if (!missingByTag.has(tag)) missingByTag.set(tag, []);
+    missingByTag.get(tag)!.push(ep);
+  }
+
+  // Report
+  const total = specEndpoints.length;
+  const coveredCount = covered.length;
+  const pct = total > 0 ? ((coveredCount / total) * 100).toFixed(1) : '0';
+
+  console.log('');
+  console.log('=== Emulator API Coverage Report ===');
+  console.log('');
+  console.log(`  Spec endpoints:     ${total}`);
+  console.log(`  Emulator endpoints: ${emulatorEndpoints.length}`);
+  console.log(`  Covered:            ${coveredCount}/${total} (${pct}%)`);
+  console.log(`  Missing:            ${missing.length}`);
+  console.log(`  Extra (emulator-only): ${extra.length}`);
+  console.log('');
+
+  if (missing.length > 0) {
+    console.log('--- Missing from emulator ---');
+    console.log('');
+    for (const [tag, eps] of [...missingByTag.entries()].sort((a, b) => a[0].localeCompare(b[0]))) {
+      console.log(`  [${tag}]`);
+      for (const ep of eps) {
+        const desc = ep.summary ? ` — ${ep.summary}` : '';
+        console.log(`    ${ep.method.padEnd(6)} ${ep.path}${desc}`);
+      }
+      console.log('');
+    }
+  }
+
+  if (extra.length > 0) {
+    console.log('--- Emulator-only (not in spec) ---');
+    console.log('');
+    for (const ep of extra.sort((a, b) => a.path.localeCompare(b.path))) {
+      console.log(`    ${ep.method.padEnd(6)} ${ep.path}  (${ep.file}:${ep.line})`);
+    }
+    console.log('');
+  }
+
+  if (missing.length === 0) {
+    console.log('Full coverage — all spec endpoints are implemented.');
+    console.log('');
+  }
+
+  // Exit 1 if there are missing endpoints (useful for CI later)
+  process.exit(missing.length > 0 ? 1 : 0);
+}
+
+main();

package/dist/commands/debug.js

@@ -255,7 +255,6 @@ export async function runDebugSimulate({ expiredToken, noKeyring, unclaimed, noA
 }
 const ENV_VAR_CATALOG = [
     { name: 'WORKOS_API_KEY', effect: 'Bypasses credential resolution — used directly for API calls' },
-    { name: 'WORKOS_CLIENT_ID', effect: 'Overrides client ID from settings' },
     { name: 'WORKOS_FORCE_TTY', effect: 'Forces human (non-JSON) output mode, even when piped' },
     { name: 'WORKOS_NO_PROMPT', effect: 'Forces non-interactive/JSON mode' },
     { name: 'WORKOS_TELEMETRY', effect: 'Set to "false" to disable telemetry' },

package/dist/commands/debug.js.map

@@ -1 +1 @@
-{"version":3,"file":"debug.js","sourceRoot":"","sources":["../../src/commands/debug.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,MAAM,mBAAmB,CAAC;AACtC,OAAO,EACL,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,SAAS,EACT,UAAU,EACV,WAAW,EACX,aAAa,EACb,wBAAwB,EACxB,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAEtE,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAU;IACrC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACvC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,GAAG,KAAK,KAAK,OAAO,GAAG,EAAE,GAAG,CAAC;IACnD,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,GAAG,OAAO,KAAK,OAAO,GAAG,EAAE,GAAG,CAAC;IACvD,OAAO,GAAG,OAAO,GAAG,CAAC;AACvB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,WAAqB;IACtD,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAE/E,IAAI,UAAU;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,UAAU;QAAE,OAAO,SAAS,CAAC;IACjC,IAAI,OAAO;QAAE,OAAO,MAAM,CAAC;IAC3B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sBAAsB;AAEtB,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAE,WAAW,EAA4B;IAC3E,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAE5E,MAAM,iBAAiB,GAA4B,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAE5F,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE;YAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC;YAC3C,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YACvD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,OAAO;gBAChB,CAAC,CAAC,WAAW,mBAAmB,CAAC,CAAC,aAAa,CAAC,MAAM;gBACtD,CAAC,CAAC,MAAM,mBAAmB,CAAC,aAAa,CAAC,EAAE;YAC9C,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,iBAAiB,CAAC,OAAO,GAAG;gBAC1B,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;gBAChC,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACzC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;aACnC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAA4B,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAEpE,IAAI,MAAM,EAAE,CAAC;QACX,YAAY,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,IAAI,CAAC;QAClE,YAAY,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,CAC5C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;YACtD,GAAG;YACH;gBACE,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC/B,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;gBAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;gBAC9B,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;aAC7E;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,cAAc,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;IAClE,YAAY,CAAC,MAAM,GAAG,YAAY,CAAC;IAEnC,MAAM,MAAM,GAAG;QACb,WAAW,EAAE,iBAAiB;QAC9B,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE;YACP,eAAe,EAAE,kBAAkB,EAAE;YACrC,UAAU,EAAE,aAAa,EAAE;YAC3B,qBAAqB,EAAE,WAAW;YAClC,iBAAiB;SAClB;KACF,CAAC;IAEF,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,EAAE,CAAC,CAAC;IACxC,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,cAAc,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CACT,cAAc,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,mBAAmB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,mBAAmB,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CACpJ,CAAC;QACF,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,CAAC,OAAO,CAAC,QAAQ,WAAW,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,CAAC,cAAc,YAAY,EAAE,CAAC,CAAC;IAC1C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,iBAAiB,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,WAAW,GAAG,CAAC,IAAI,WAAW,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjF,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,WAAW,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,WAAW,aAAa,EAAE,EAAE,CAAC,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,sBAAsB;AAEtB,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAClC,KAAK,EACL,eAAe,EACf,UAAU,GAKX;IACC,4CAA4C;IAC5C,MAAM,UAAU,GAAG,CAAC,UAAU,IAAI,eAAe,CAAC;IAClD,MAAM,SAAS,GAAG,CAAC,eAAe,IAAI,UAAU,CAAC;IAEjD,MAAM,OAAO,GAAG,CAAC,UAAU,IAAI,aAAa,EAAE,SAAS,IAAI,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEnG,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,2BAA2B,EAAE,EAAE,CAAC;YAClC,aAAa,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,8CAA8C;aACxD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,aAAa,OAAO,0BAA0B;SACxD,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5C,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACpC,CAAC;YACD,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,UAAU;QAAE,gBAAgB,EAAE,CAAC;IACnC,IAAI,SAAS;QAAE,WAAW,EAAE,CAAC;IAE7B,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5E,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,yBAAyB;AAEzB,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,YAAY,EACZ,SAAS,EACT,SAAS,EACT,MAAM,GAMP;IACC,8BAA8B;IAC9B,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;QACzD,aAAa,CAAC;YACZ,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,6FAA6F;SACvG,CAAC,CAAC;IACL,CAAC;IAED,0BAA0B;IAC1B,IAAI,YAAY,IAAI,MAAM,EAAE,CAAC;QAC3B,aAAa,CAAC;YACZ,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,6EAA6E;SACvF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,uFAAuF;IAEvF,IAAI,SAAS,EAAE,CAAC;QACd,wCAAwC;QACxC,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAE3B,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACzB,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAE/B,IAAI,KAAK;YAAE,eAAe,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,MAAM;YAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAE/B,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,aAAa,CAAC;gBACZ,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,qEAAqE;aAC/E,CAAC,CAAC;QACL,CAAC;QACD,eAAe,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,gBAAgB,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,qBAAqB,CAAC;QACtC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG;YAC7B,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,0CAA0C;YAClD,QAAQ,EAAE,kBAAkB;YAC5B,UAAU,EAAE,oCAAoC;SACjD,CAAC;QACF,MAAM,CAAC,iBAAiB,GAAG,OAAO,CAAC;QACnC,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,kCAAkC,OAAO,qBAAqB,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;AACH,CAAC;AAUD,MAAM,eAAe,GAAuC;IAC1D,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,8DAA8D,EAAE;IAClG,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,mCAAmC,EAAE;IACzE,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,sDAAsD,EAAE;IAC5F,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,kCAAkC,EAAE;IACxE,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,qCAAqC,EAAE;IAC3E,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,0DAA0D,EAAE;IAC9F,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,iEAAiE,EAAE;IAC3G,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,wCAAwC,EAAE;IACnF,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,yCAAyC,EAAE;IACrF,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,gDAAgD,EAAE;IACnF,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,gDAAgD,EAAE;CAC9F,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,IAAI,GAAiB,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACpE,IAAI;QACJ,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QACxB,MAAM;KACP,CAAC,CAAC,CAAC;IAEJ,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAE5D,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC;YACT,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACtG,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/B,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACpC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAC9E,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,sBAAsB;AAEtB,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAE/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEnD,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC;YACT,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;YACjC,OAAO;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,OAAO;gBAChB,CAAC,CAAC,WAAW,mBAAmB,CAAC,CAAC,aAAa,CAAC,MAAM;gBACtD,CAAC,CAAC,MAAM,mBAAmB,CAAC,aAAa,CAAC,EAAE;YAC9C,MAAM,EAAE,MAAM,IAAI,IAAI;YACtB,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE;SAChD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CACT,cAAc,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,mBAAmB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,mBAAmB,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CACpJ,CAAC;QACF,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBACpD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAE,KAAgB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,KAAK,KAAK,KAAK,IAAI,GAAG,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CACT,cAAc,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,mBAAmB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,mBAAmB,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CACpJ,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC1G,CAAC","sourcesContent":["import chalk from 'chalk';\nimport clack from '../utils/clack.js';\nimport {\n  getCredentials,\n  saveCredentials,\n  clearCredentials,\n  isTokenExpired,\n  diagnoseCredentials,\n  getCredentialsPath,\n  setInsecureStorage,\n} from '../lib/credentials.js';\nimport {\n  getConfig,\n  saveConfig,\n  clearConfig,\n  getConfigPath,\n  setInsecureConfigStorage,\n  diagnoseConfig,\n} from '../lib/config-store.js';\nimport { isJsonMode, outputJson, exitWithError } from '../utils/output.js';\nimport { isNonInteractiveEnvironment } from '../utils/environment.js';\n\nfunction maskSecret(value: string | undefined): string | undefined {\n  if (!value) return undefined;\n  if (value.length <= 8) return '****';\n  return value.slice(0, 4) + '****' + value.slice(-4);\n}\n\nfunction formatTimeRemaining(ms: number): string {\n  if (ms <= 0) return 'expired';\n  const seconds = Math.floor(ms / 1000);\n  const minutes = Math.floor(seconds / 60);\n  const hours = Math.floor(minutes / 60);\n  if (hours > 0) return `${hours}h ${minutes % 60}m`;\n  if (minutes > 0) return `${minutes}m ${seconds % 60}s`;\n  return `${seconds}s`;\n}\n\nfunction parseJwt(token: string): Record<string, unknown> | null {\n  try {\n    const parts = token.split('.');\n    if (parts.length !== 3) return null;\n    return JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf-8'));\n  } catch {\n    return null;\n  }\n}\n\nfunction determineCredentialSource(diagnostics: string[]): 'keyring' | 'file' | 'none' {\n  const hasKeyring = diagnostics.some((l) => l.startsWith('keyring: found'));\n  const hasFile = diagnostics.some((l) => l.includes('exists=true'));\n  const isInsecure = diagnostics.some((l) => l.includes('insecureStorage=true'));\n\n  if (isInsecure) return hasFile ? 'file' : 'none';\n  if (hasKeyring) return 'keyring';\n  if (hasFile) return 'file';\n  return 'none';\n}\n\n// --- debug state ---\n\nexport async function runDebugState({ showSecrets }: { showSecrets: boolean }): Promise<void> {\n  const creds = getCredentials();\n  const config = getConfig();\n  const diagnostics = diagnoseCredentials();\n  const credSource = determineCredentialSource(diagnostics);\n  const maybeRedact = showSecrets ? (v: string | undefined) => v : maskSecret;\n\n  const credentialsOutput: Record<string, unknown> = { present: !!creds, source: credSource };\n\n  if (creds) {\n    const timeRemaining = creds.expiresAt - Date.now();\n    const expired = isTokenExpired(creds);\n    Object.assign(credentialsOutput, {\n      userId: creds.userId,\n      email: creds.email ?? null,\n      accessToken: maybeRedact(creds.accessToken),\n      refreshToken: creds.refreshToken ? 'present' : 'absent',\n      expiresAt: creds.expiresAt,\n      expiresIn: expired\n        ? `expired ${formatTimeRemaining(-timeRemaining)} ago`\n        : `in ${formatTimeRemaining(timeRemaining)}`,\n      isExpired: expired,\n    });\n    if (creds.staging) {\n      credentialsOutput.staging = {\n        clientId: creds.staging.clientId,\n        apiKey: maybeRedact(creds.staging.apiKey),\n        fetchedAt: creds.staging.fetchedAt,\n      };\n    }\n  }\n\n  const configOutput: Record<string, unknown> = { present: !!config };\n\n  if (config) {\n    configOutput.activeEnvironment = config.activeEnvironment ?? null;\n    configOutput.environments = Object.fromEntries(\n      Object.entries(config.environments).map(([key, env]) => [\n        key,\n        {\n          name: env.name,\n          type: env.type,\n          apiKey: maybeRedact(env.apiKey),\n          clientId: env.clientId ?? null,\n          endpoint: env.endpoint ?? null,\n          ...(env.type === 'unclaimed' && { claimToken: maybeRedact(env.claimToken) }),\n        },\n      ]),\n    );\n  }\n\n  const configDiagnostics = diagnoseConfig();\n  const configSource = determineCredentialSource(configDiagnostics);\n  configOutput.source = configSource;\n\n  const result = {\n    credentials: credentialsOutput,\n    config: configOutput,\n    storage: {\n      credentialsPath: getCredentialsPath(),\n      configPath: getConfigPath(),\n      credentialDiagnostics: diagnostics,\n      configDiagnostics,\n    },\n  };\n\n  if (isJsonMode()) {\n    outputJson(result);\n    return;\n  }\n\n  console.log(chalk.bold('Credentials'));\n  console.log(`  present: ${creds ? chalk.green('true') : chalk.yellow('false')}`);\n  console.log(`  source:  ${credSource}`);\n  if (creds) {\n    console.log(`  userId:  ${creds.userId}`);\n    console.log(`  email:   ${creds.email ?? chalk.dim('none')}`);\n    console.log(`  token:   ${maybeRedact(creds.accessToken)}`);\n    console.log(`  refresh: ${creds.refreshToken ? 'present' : 'absent'}`);\n    const expired = isTokenExpired(creds);\n    const timeRemaining = creds.expiresAt - Date.now();\n    console.log(\n      `  expires: ${expired ? chalk.red(`expired ${formatTimeRemaining(-timeRemaining)} ago`) : chalk.green(`in ${formatTimeRemaining(timeRemaining)}`)}`,\n    );\n    if (creds.staging) {\n      console.log(`  staging: clientId=${creds.staging.clientId} apiKey=${maybeRedact(creds.staging.apiKey)}`);\n    }\n  }\n\n  console.log();\n  console.log(chalk.bold('Config'));\n  console.log(`  present: ${config ? chalk.green('true') : chalk.yellow('false')}`);\n  console.log(`  source:  ${configSource}`);\n  if (config) {\n    console.log(`  active:  ${config.activeEnvironment ?? chalk.dim('none')}`);\n    for (const [key, env] of Object.entries(config.environments)) {\n      console.log(`  env[${key}]: type=${env.type} apiKey=${maybeRedact(env.apiKey)}`);\n      if (env.type === 'unclaimed') console.log(`    claimToken=${maybeRedact(env.claimToken)}`);\n    }\n  }\n\n  console.log();\n  console.log(chalk.bold('Storage — Credentials'));\n  console.log(`  path: ${getCredentialsPath()}`);\n  for (const line of diagnostics) {\n    console.log(`  ${chalk.dim(line)}`);\n  }\n\n  console.log();\n  console.log(chalk.bold('Storage — Config'));\n  console.log(`  path: ${getConfigPath()}`);\n  for (const line of configDiagnostics) {\n    console.log(`  ${chalk.dim(line)}`);\n  }\n}\n\n// --- debug reset ---\n\nexport async function runDebugReset({\n  force,\n  credentialsOnly,\n  configOnly,\n}: {\n  force: boolean;\n  credentialsOnly: boolean;\n  configOnly: boolean;\n}): Promise<void> {\n  // Both flags = clear both (same as neither)\n  const clearCreds = !configOnly || credentialsOnly;\n  const clearConf = !credentialsOnly || configOnly;\n\n  const targets = [clearCreds && 'credentials', clearConf && 'config'].filter(Boolean).join(' and ');\n\n  if (!force) {\n    if (isNonInteractiveEnvironment()) {\n      exitWithError({\n        code: 'non_interactive_reset',\n        message: 'Use --force to reset in non-interactive mode',\n      });\n    }\n\n    const confirmed = await clack.confirm({\n      message: `Clear all ${targets}? This cannot be undone.`,\n    });\n\n    if (clack.isCancel(confirmed) || !confirmed) {\n      if (isJsonMode()) {\n        outputJson({ cleared: false, cancelled: true });\n      } else {\n        clack.log.info('Reset cancelled');\n      }\n      return;\n    }\n  }\n\n  if (clearCreds) clearCredentials();\n  if (clearConf) clearConfig();\n\n  if (isJsonMode()) {\n    outputJson({ cleared: true, credentials: clearCreds, config: clearConf });\n  } else {\n    clack.log.success(`Cleared ${targets}`);\n  }\n}\n\n// --- debug simulate ---\n\nexport async function runDebugSimulate({\n  expiredToken,\n  noKeyring,\n  unclaimed,\n  noAuth,\n}: {\n  expiredToken: boolean;\n  noKeyring: boolean;\n  unclaimed: boolean;\n  noAuth: boolean;\n}): Promise<void> {\n  // Validate: at least one flag\n  if (!expiredToken && !noKeyring && !unclaimed && !noAuth) {\n    exitWithError({\n      code: 'no_simulation_flags',\n      message: 'Specify at least one simulation flag: --expired-token, --no-keyring, --unclaimed, --no-auth',\n    });\n  }\n\n  // Validate: contradictory\n  if (expiredToken && noAuth) {\n    exitWithError({\n      code: 'contradictory_flags',\n      message: \"Cannot combine --expired-token and --no-auth (can't expire a cleared token)\",\n    });\n  }\n\n  const actions: string[] = [];\n\n  // Apply in order: storage tier first, then credential mutations, then config mutations\n\n  if (noKeyring) {\n    // Migrate current state to file storage\n    const creds = getCredentials();\n    const config = getConfig();\n\n    setInsecureStorage(true);\n    setInsecureConfigStorage(true);\n\n    if (creds) saveCredentials(creds);\n    if (config) saveConfig(config);\n\n    actions.push('Forced file-only storage (keyring bypassed)');\n  }\n\n  if (expiredToken) {\n    const creds = getCredentials();\n    if (!creds) {\n      exitWithError({\n        code: 'no_credentials',\n        message: 'Cannot simulate expired token — no credentials found. Log in first.',\n      });\n    }\n    saveCredentials({ ...creds, expiresAt: Date.now() - 60_000 });\n    actions.push('Set token expiresAt to 1 minute ago');\n  }\n\n  if (noAuth) {\n    clearCredentials();\n    actions.push('Cleared credentials (config preserved)');\n  }\n\n  if (unclaimed) {\n    const config = getConfig() ?? { environments: {} };\n    const envName = 'simulated-unclaimed';\n    config.environments[envName] = {\n      name: envName,\n      type: 'unclaimed',\n      apiKey: 'sk_test_simulated_unclaimed_000000000000',\n      clientId: 'client_simulated',\n      claimToken: 'claim_simulated_token_000000000000',\n    };\n    config.activeEnvironment = envName;\n    saveConfig(config);\n    actions.push(`Created unclaimed environment \"${envName}\" and set as active`);\n  }\n\n  if (isJsonMode()) {\n    outputJson({ simulated: true, actions });\n  } else {\n    for (const action of actions) {\n      clack.log.success(action);\n    }\n  }\n}\n\n// --- debug env ---\n\ninterface EnvVarInfo {\n  name: string;\n  value: string | undefined;\n  effect: string;\n}\n\nconst ENV_VAR_CATALOG: { name: string; effect: string }[] = [\n  { name: 'WORKOS_API_KEY', effect: 'Bypasses credential resolution — used directly for API calls' },\n  { name: 'WORKOS_CLIENT_ID', effect: 'Overrides client ID from settings' },\n  { name: 'WORKOS_FORCE_TTY', effect: 'Forces human (non-JSON) output mode, even when piped' },\n  { name: 'WORKOS_NO_PROMPT', effect: 'Forces non-interactive/JSON mode' },\n  { name: 'WORKOS_TELEMETRY', effect: 'Set to \"false\" to disable telemetry' },\n  { name: 'WORKOS_API_URL', effect: 'Overrides API base URL (default: https://api.workos.com)' },\n  { name: 'WORKOS_DASHBOARD_URL', effect: 'Overrides dashboard URL (default: https://dashboard.workos.com)' },\n  { name: 'WORKOS_AUTHKIT_DOMAIN', effect: 'Overrides AuthKit domain from settings' },\n  { name: 'WORKOS_LLM_GATEWAY_URL', effect: 'Overrides LLM gateway URL from settings' },\n  { name: 'INSTALLER_DEV', effect: 'Enables dev mode — loads .env.local at startup' },\n  { name: 'INSTALLER_DISABLE_PROXY', effect: 'Disables the credential proxy for gateway auth' },\n];\n\nexport async function runDebugEnv(): Promise<void> {\n  const vars: EnvVarInfo[] = ENV_VAR_CATALOG.map(({ name, effect }) => ({\n    name,\n    value: process.env[name],\n    effect,\n  }));\n\n  const setVars = vars.filter((v) => v.value !== undefined);\n  const unsetVars = vars.filter((v) => v.value === undefined);\n\n  if (isJsonMode()) {\n    outputJson({\n      variables: Object.fromEntries(vars.map((v) => [v.name, { value: v.value ?? null, effect: v.effect }])),\n      set: setVars.map((v) => v.name),\n      unset: unsetVars.map((v) => v.name),\n    });\n    return;\n  }\n\n  if (setVars.length > 0) {\n    console.log(chalk.bold('Set'));\n    for (const v of setVars) {\n      console.log(`  ${chalk.green(v.name)}=${v.value}`);\n      console.log(`    ${chalk.dim(v.effect)}`);\n    }\n    console.log();\n  }\n\n  console.log(chalk.bold(`Unset${setVars.length > 0 ? '' : ' (none active)'}`));\n  for (const v of unsetVars) {\n    console.log(`  ${chalk.dim(v.name)} — ${chalk.dim(v.effect)}`);\n  }\n}\n\n// --- debug token ---\n\nexport async function runDebugToken(): Promise<void> {\n  const creds = getCredentials();\n\n  if (!creds) {\n    if (isJsonMode()) {\n      outputJson({ present: false });\n    } else {\n      console.log(chalk.yellow('No credentials found'));\n    }\n    return;\n  }\n\n  const claims = parseJwt(creds.accessToken);\n  const expired = isTokenExpired(creds);\n  const timeRemaining = creds.expiresAt - Date.now();\n\n  if (isJsonMode()) {\n    outputJson({\n      present: true,\n      format: claims ? 'jwt' : 'opaque',\n      expired,\n      expiresAt: creds.expiresAt,\n      expiresIn: expired\n        ? `expired ${formatTimeRemaining(-timeRemaining)} ago`\n        : `in ${formatTimeRemaining(timeRemaining)}`,\n      claims: claims ?? null,\n      refreshToken: { present: !!creds.refreshToken },\n    });\n    return;\n  }\n\n  if (claims) {\n    console.log(chalk.bold('JWT Token'));\n    console.log(\n      `  expires: ${expired ? chalk.red(`expired ${formatTimeRemaining(-timeRemaining)} ago`) : chalk.green(`in ${formatTimeRemaining(timeRemaining)}`)}`,\n    );\n    console.log();\n    console.log(chalk.bold('Claims'));\n    for (const [key, value] of Object.entries(claims)) {\n      if (key === 'exp' || key === 'iat' || key === 'nbf') {\n        const date = new Date((value as number) * 1000).toISOString();\n        console.log(`  ${key}: ${value} (${date})`);\n      } else {\n        console.log(`  ${key}: ${JSON.stringify(value)}`);\n      }\n    }\n  } else {\n    console.log(chalk.bold('Opaque Token'));\n    console.log(chalk.dim('  Token is not a JWT — cannot decode claims'));\n    console.log(\n      `  expires: ${expired ? chalk.red(`expired ${formatTimeRemaining(-timeRemaining)} ago`) : chalk.green(`in ${formatTimeRemaining(timeRemaining)}`)}`,\n    );\n  }\n\n  console.log();\n  console.log(`  refresh token: ${creds.refreshToken ? chalk.green('present') : chalk.yellow('absent')}`);\n}\n"]}
+{"version":3,"file":"debug.js","sourceRoot":"","sources":["../../src/commands/debug.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,MAAM,mBAAmB,CAAC;AACtC,OAAO,EACL,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,SAAS,EACT,UAAU,EACV,WAAW,EACX,aAAa,EACb,wBAAwB,EACxB,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAEtE,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAU;IACrC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACvC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,GAAG,KAAK,KAAK,OAAO,GAAG,EAAE,GAAG,CAAC;IACnD,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,GAAG,OAAO,KAAK,OAAO,GAAG,EAAE,GAAG,CAAC;IACvD,OAAO,GAAG,OAAO,GAAG,CAAC;AACvB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,WAAqB;IACtD,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAE/E,IAAI,UAAU;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,UAAU;QAAE,OAAO,SAAS,CAAC;IACjC,IAAI,OAAO;QAAE,OAAO,MAAM,CAAC;IAC3B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sBAAsB;AAEtB,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAE,WAAW,EAA4B;IAC3E,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAE5E,MAAM,iBAAiB,GAA4B,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAE5F,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE;YAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC;YAC3C,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YACvD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,OAAO;gBAChB,CAAC,CAAC,WAAW,mBAAmB,CAAC,CAAC,aAAa,CAAC,MAAM;gBACtD,CAAC,CAAC,MAAM,mBAAmB,CAAC,aAAa,CAAC,EAAE;YAC9C,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,iBAAiB,CAAC,OAAO,GAAG;gBAC1B,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;gBAChC,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACzC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;aACnC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAA4B,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAEpE,IAAI,MAAM,EAAE,CAAC;QACX,YAAY,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,IAAI,CAAC;QAClE,YAAY,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,CAC5C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;YACtD,GAAG;YACH;gBACE,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC/B,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;gBAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;gBAC9B,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;aAC7E;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,cAAc,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;IAClE,YAAY,CAAC,MAAM,GAAG,YAAY,CAAC;IAEnC,MAAM,MAAM,GAAG;QACb,WAAW,EAAE,iBAAiB;QAC9B,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE;YACP,eAAe,EAAE,kBAAkB,EAAE;YACrC,UAAU,EAAE,aAAa,EAAE;YAC3B,qBAAqB,EAAE,WAAW;YAClC,iBAAiB;SAClB;KACF,CAAC;IAEF,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,EAAE,CAAC,CAAC;IACxC,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,cAAc,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CACT,cAAc,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,mBAAmB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,mBAAmB,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CACpJ,CAAC;QACF,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,CAAC,OAAO,CAAC,QAAQ,WAAW,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,CAAC,cAAc,YAAY,EAAE,CAAC,CAAC;IAC1C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,iBAAiB,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,WAAW,GAAG,CAAC,IAAI,WAAW,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjF,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,WAAW,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,WAAW,aAAa,EAAE,EAAE,CAAC,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,sBAAsB;AAEtB,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAClC,KAAK,EACL,eAAe,EACf,UAAU,GAKX;IACC,4CAA4C;IAC5C,MAAM,UAAU,GAAG,CAAC,UAAU,IAAI,eAAe,CAAC;IAClD,MAAM,SAAS,GAAG,CAAC,eAAe,IAAI,UAAU,CAAC;IAEjD,MAAM,OAAO,GAAG,CAAC,UAAU,IAAI,aAAa,EAAE,SAAS,IAAI,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAEnG,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,2BAA2B,EAAE,EAAE,CAAC;YAClC,aAAa,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,8CAA8C;aACxD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,aAAa,OAAO,0BAA0B;SACxD,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5C,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACpC,CAAC;YACD,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,UAAU;QAAE,gBAAgB,EAAE,CAAC;IACnC,IAAI,SAAS;QAAE,WAAW,EAAE,CAAC;IAE7B,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC5E,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,yBAAyB;AAEzB,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,YAAY,EACZ,SAAS,EACT,SAAS,EACT,MAAM,GAMP;IACC,8BAA8B;IAC9B,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;QACzD,aAAa,CAAC;YACZ,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,6FAA6F;SACvG,CAAC,CAAC;IACL,CAAC;IAED,0BAA0B;IAC1B,IAAI,YAAY,IAAI,MAAM,EAAE,CAAC;QAC3B,aAAa,CAAC;YACZ,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,6EAA6E;SACvF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,uFAAuF;IAEvF,IAAI,SAAS,EAAE,CAAC;QACd,wCAAwC;QACxC,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAE3B,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACzB,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAE/B,IAAI,KAAK;YAAE,eAAe,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,MAAM;YAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAE/B,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,aAAa,CAAC;gBACZ,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,qEAAqE;aAC/E,CAAC,CAAC;QACL,CAAC;QACD,eAAe,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,gBAAgB,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,qBAAqB,CAAC;QACtC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG;YAC7B,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,0CAA0C;YAClD,QAAQ,EAAE,kBAAkB;YAC5B,UAAU,EAAE,oCAAoC;SACjD,CAAC;QACF,MAAM,CAAC,iBAAiB,GAAG,OAAO,CAAC;QACnC,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,kCAAkC,OAAO,qBAAqB,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;AACH,CAAC;AAUD,MAAM,eAAe,GAAuC;IAC1D,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,8DAA8D,EAAE;IAClG,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,sDAAsD,EAAE;IAC5F,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,kCAAkC,EAAE;IACxE,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,qCAAqC,EAAE;IAC3E,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,0DAA0D,EAAE;IAC9F,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,iEAAiE,EAAE;IAC3G,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,wCAAwC,EAAE;IACnF,EAAE,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,yCAAyC,EAAE;IACrF,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,gDAAgD,EAAE;IACnF,EAAE,IAAI,EAAE,yBAAyB,EAAE,MAAM,EAAE,gDAAgD,EAAE;CAC9F,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,IAAI,GAAiB,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACpE,IAAI;QACJ,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QACxB,MAAM;KACP,CAAC,CAAC,CAAC;IAEJ,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAE5D,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC;YACT,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACtG,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/B,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACpC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAC9E,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,sBAAsB;AAEtB,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAE/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEnD,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC;YACT,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;YACjC,OAAO;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,OAAO;gBAChB,CAAC,CAAC,WAAW,mBAAmB,CAAC,CAAC,aAAa,CAAC,MAAM;gBACtD,CAAC,CAAC,MAAM,mBAAmB,CAAC,aAAa,CAAC,EAAE;YAC9C,MAAM,EAAE,MAAM,IAAI,IAAI;YACtB,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE;SAChD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CACT,cAAc,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,mBAAmB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,mBAAmB,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CACpJ,CAAC;QACF,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBACpD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAE,KAAgB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,KAAK,KAAK,KAAK,IAAI,GAAG,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CACT,cAAc,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,mBAAmB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,mBAAmB,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CACpJ,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC1G,CAAC","sourcesContent":["import chalk from 'chalk';\nimport clack from '../utils/clack.js';\nimport {\n  getCredentials,\n  saveCredentials,\n  clearCredentials,\n  isTokenExpired,\n  diagnoseCredentials,\n  getCredentialsPath,\n  setInsecureStorage,\n} from '../lib/credentials.js';\nimport {\n  getConfig,\n  saveConfig,\n  clearConfig,\n  getConfigPath,\n  setInsecureConfigStorage,\n  diagnoseConfig,\n} from '../lib/config-store.js';\nimport { isJsonMode, outputJson, exitWithError } from '../utils/output.js';\nimport { isNonInteractiveEnvironment } from '../utils/environment.js';\n\nfunction maskSecret(value: string | undefined): string | undefined {\n  if (!value) return undefined;\n  if (value.length <= 8) return '****';\n  return value.slice(0, 4) + '****' + value.slice(-4);\n}\n\nfunction formatTimeRemaining(ms: number): string {\n  if (ms <= 0) return 'expired';\n  const seconds = Math.floor(ms / 1000);\n  const minutes = Math.floor(seconds / 60);\n  const hours = Math.floor(minutes / 60);\n  if (hours > 0) return `${hours}h ${minutes % 60}m`;\n  if (minutes > 0) return `${minutes}m ${seconds % 60}s`;\n  return `${seconds}s`;\n}\n\nfunction parseJwt(token: string): Record<string, unknown> | null {\n  try {\n    const parts = token.split('.');\n    if (parts.length !== 3) return null;\n    return JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf-8'));\n  } catch {\n    return null;\n  }\n}\n\nfunction determineCredentialSource(diagnostics: string[]): 'keyring' | 'file' | 'none' {\n  const hasKeyring = diagnostics.some((l) => l.startsWith('keyring: found'));\n  const hasFile = diagnostics.some((l) => l.includes('exists=true'));\n  const isInsecure = diagnostics.some((l) => l.includes('insecureStorage=true'));\n\n  if (isInsecure) return hasFile ? 'file' : 'none';\n  if (hasKeyring) return 'keyring';\n  if (hasFile) return 'file';\n  return 'none';\n}\n\n// --- debug state ---\n\nexport async function runDebugState({ showSecrets }: { showSecrets: boolean }): Promise<void> {\n  const creds = getCredentials();\n  const config = getConfig();\n  const diagnostics = diagnoseCredentials();\n  const credSource = determineCredentialSource(diagnostics);\n  const maybeRedact = showSecrets ? (v: string | undefined) => v : maskSecret;\n\n  const credentialsOutput: Record<string, unknown> = { present: !!creds, source: credSource };\n\n  if (creds) {\n    const timeRemaining = creds.expiresAt - Date.now();\n    const expired = isTokenExpired(creds);\n    Object.assign(credentialsOutput, {\n      userId: creds.userId,\n      email: creds.email ?? null,\n      accessToken: maybeRedact(creds.accessToken),\n      refreshToken: creds.refreshToken ? 'present' : 'absent',\n      expiresAt: creds.expiresAt,\n      expiresIn: expired\n        ? `expired ${formatTimeRemaining(-timeRemaining)} ago`\n        : `in ${formatTimeRemaining(timeRemaining)}`,\n      isExpired: expired,\n    });\n    if (creds.staging) {\n      credentialsOutput.staging = {\n        clientId: creds.staging.clientId,\n        apiKey: maybeRedact(creds.staging.apiKey),\n        fetchedAt: creds.staging.fetchedAt,\n      };\n    }\n  }\n\n  const configOutput: Record<string, unknown> = { present: !!config };\n\n  if (config) {\n    configOutput.activeEnvironment = config.activeEnvironment ?? null;\n    configOutput.environments = Object.fromEntries(\n      Object.entries(config.environments).map(([key, env]) => [\n        key,\n        {\n          name: env.name,\n          type: env.type,\n          apiKey: maybeRedact(env.apiKey),\n          clientId: env.clientId ?? null,\n          endpoint: env.endpoint ?? null,\n          ...(env.type === 'unclaimed' && { claimToken: maybeRedact(env.claimToken) }),\n        },\n      ]),\n    );\n  }\n\n  const configDiagnostics = diagnoseConfig();\n  const configSource = determineCredentialSource(configDiagnostics);\n  configOutput.source = configSource;\n\n  const result = {\n    credentials: credentialsOutput,\n    config: configOutput,\n    storage: {\n      credentialsPath: getCredentialsPath(),\n      configPath: getConfigPath(),\n      credentialDiagnostics: diagnostics,\n      configDiagnostics,\n    },\n  };\n\n  if (isJsonMode()) {\n    outputJson(result);\n    return;\n  }\n\n  console.log(chalk.bold('Credentials'));\n  console.log(`  present: ${creds ? chalk.green('true') : chalk.yellow('false')}`);\n  console.log(`  source:  ${credSource}`);\n  if (creds) {\n    console.log(`  userId:  ${creds.userId}`);\n    console.log(`  email:   ${creds.email ?? chalk.dim('none')}`);\n    console.log(`  token:   ${maybeRedact(creds.accessToken)}`);\n    console.log(`  refresh: ${creds.refreshToken ? 'present' : 'absent'}`);\n    const expired = isTokenExpired(creds);\n    const timeRemaining = creds.expiresAt - Date.now();\n    console.log(\n      `  expires: ${expired ? chalk.red(`expired ${formatTimeRemaining(-timeRemaining)} ago`) : chalk.green(`in ${formatTimeRemaining(timeRemaining)}`)}`,\n    );\n    if (creds.staging) {\n      console.log(`  staging: clientId=${creds.staging.clientId} apiKey=${maybeRedact(creds.staging.apiKey)}`);\n    }\n  }\n\n  console.log();\n  console.log(chalk.bold('Config'));\n  console.log(`  present: ${config ? chalk.green('true') : chalk.yellow('false')}`);\n  console.log(`  source:  ${configSource}`);\n  if (config) {\n    console.log(`  active:  ${config.activeEnvironment ?? chalk.dim('none')}`);\n    for (const [key, env] of Object.entries(config.environments)) {\n      console.log(`  env[${key}]: type=${env.type} apiKey=${maybeRedact(env.apiKey)}`);\n      if (env.type === 'unclaimed') console.log(`    claimToken=${maybeRedact(env.claimToken)}`);\n    }\n  }\n\n  console.log();\n  console.log(chalk.bold('Storage — Credentials'));\n  console.log(`  path: ${getCredentialsPath()}`);\n  for (const line of diagnostics) {\n    console.log(`  ${chalk.dim(line)}`);\n  }\n\n  console.log();\n  console.log(chalk.bold('Storage — Config'));\n  console.log(`  path: ${getConfigPath()}`);\n  for (const line of configDiagnostics) {\n    console.log(`  ${chalk.dim(line)}`);\n  }\n}\n\n// --- debug reset ---\n\nexport async function runDebugReset({\n  force,\n  credentialsOnly,\n  configOnly,\n}: {\n  force: boolean;\n  credentialsOnly: boolean;\n  configOnly: boolean;\n}): Promise<void> {\n  // Both flags = clear both (same as neither)\n  const clearCreds = !configOnly || credentialsOnly;\n  const clearConf = !credentialsOnly || configOnly;\n\n  const targets = [clearCreds && 'credentials', clearConf && 'config'].filter(Boolean).join(' and ');\n\n  if (!force) {\n    if (isNonInteractiveEnvironment()) {\n      exitWithError({\n        code: 'non_interactive_reset',\n        message: 'Use --force to reset in non-interactive mode',\n      });\n    }\n\n    const confirmed = await clack.confirm({\n      message: `Clear all ${targets}? This cannot be undone.`,\n    });\n\n    if (clack.isCancel(confirmed) || !confirmed) {\n      if (isJsonMode()) {\n        outputJson({ cleared: false, cancelled: true });\n      } else {\n        clack.log.info('Reset cancelled');\n      }\n      return;\n    }\n  }\n\n  if (clearCreds) clearCredentials();\n  if (clearConf) clearConfig();\n\n  if (isJsonMode()) {\n    outputJson({ cleared: true, credentials: clearCreds, config: clearConf });\n  } else {\n    clack.log.success(`Cleared ${targets}`);\n  }\n}\n\n// --- debug simulate ---\n\nexport async function runDebugSimulate({\n  expiredToken,\n  noKeyring,\n  unclaimed,\n  noAuth,\n}: {\n  expiredToken: boolean;\n  noKeyring: boolean;\n  unclaimed: boolean;\n  noAuth: boolean;\n}): Promise<void> {\n  // Validate: at least one flag\n  if (!expiredToken && !noKeyring && !unclaimed && !noAuth) {\n    exitWithError({\n      code: 'no_simulation_flags',\n      message: 'Specify at least one simulation flag: --expired-token, --no-keyring, --unclaimed, --no-auth',\n    });\n  }\n\n  // Validate: contradictory\n  if (expiredToken && noAuth) {\n    exitWithError({\n      code: 'contradictory_flags',\n      message: \"Cannot combine --expired-token and --no-auth (can't expire a cleared token)\",\n    });\n  }\n\n  const actions: string[] = [];\n\n  // Apply in order: storage tier first, then credential mutations, then config mutations\n\n  if (noKeyring) {\n    // Migrate current state to file storage\n    const creds = getCredentials();\n    const config = getConfig();\n\n    setInsecureStorage(true);\n    setInsecureConfigStorage(true);\n\n    if (creds) saveCredentials(creds);\n    if (config) saveConfig(config);\n\n    actions.push('Forced file-only storage (keyring bypassed)');\n  }\n\n  if (expiredToken) {\n    const creds = getCredentials();\n    if (!creds) {\n      exitWithError({\n        code: 'no_credentials',\n        message: 'Cannot simulate expired token — no credentials found. Log in first.',\n      });\n    }\n    saveCredentials({ ...creds, expiresAt: Date.now() - 60_000 });\n    actions.push('Set token expiresAt to 1 minute ago');\n  }\n\n  if (noAuth) {\n    clearCredentials();\n    actions.push('Cleared credentials (config preserved)');\n  }\n\n  if (unclaimed) {\n    const config = getConfig() ?? { environments: {} };\n    const envName = 'simulated-unclaimed';\n    config.environments[envName] = {\n      name: envName,\n      type: 'unclaimed',\n      apiKey: 'sk_test_simulated_unclaimed_000000000000',\n      clientId: 'client_simulated',\n      claimToken: 'claim_simulated_token_000000000000',\n    };\n    config.activeEnvironment = envName;\n    saveConfig(config);\n    actions.push(`Created unclaimed environment \"${envName}\" and set as active`);\n  }\n\n  if (isJsonMode()) {\n    outputJson({ simulated: true, actions });\n  } else {\n    for (const action of actions) {\n      clack.log.success(action);\n    }\n  }\n}\n\n// --- debug env ---\n\ninterface EnvVarInfo {\n  name: string;\n  value: string | undefined;\n  effect: string;\n}\n\nconst ENV_VAR_CATALOG: { name: string; effect: string }[] = [\n  { name: 'WORKOS_API_KEY', effect: 'Bypasses credential resolution — used directly for API calls' },\n  { name: 'WORKOS_FORCE_TTY', effect: 'Forces human (non-JSON) output mode, even when piped' },\n  { name: 'WORKOS_NO_PROMPT', effect: 'Forces non-interactive/JSON mode' },\n  { name: 'WORKOS_TELEMETRY', effect: 'Set to \"false\" to disable telemetry' },\n  { name: 'WORKOS_API_URL', effect: 'Overrides API base URL (default: https://api.workos.com)' },\n  { name: 'WORKOS_DASHBOARD_URL', effect: 'Overrides dashboard URL (default: https://dashboard.workos.com)' },\n  { name: 'WORKOS_AUTHKIT_DOMAIN', effect: 'Overrides AuthKit domain from settings' },\n  { name: 'WORKOS_LLM_GATEWAY_URL', effect: 'Overrides LLM gateway URL from settings' },\n  { name: 'INSTALLER_DEV', effect: 'Enables dev mode — loads .env.local at startup' },\n  { name: 'INSTALLER_DISABLE_PROXY', effect: 'Disables the credential proxy for gateway auth' },\n];\n\nexport async function runDebugEnv(): Promise<void> {\n  const vars: EnvVarInfo[] = ENV_VAR_CATALOG.map(({ name, effect }) => ({\n    name,\n    value: process.env[name],\n    effect,\n  }));\n\n  const setVars = vars.filter((v) => v.value !== undefined);\n  const unsetVars = vars.filter((v) => v.value === undefined);\n\n  if (isJsonMode()) {\n    outputJson({\n      variables: Object.fromEntries(vars.map((v) => [v.name, { value: v.value ?? null, effect: v.effect }])),\n      set: setVars.map((v) => v.name),\n      unset: unsetVars.map((v) => v.name),\n    });\n    return;\n  }\n\n  if (setVars.length > 0) {\n    console.log(chalk.bold('Set'));\n    for (const v of setVars) {\n      console.log(`  ${chalk.green(v.name)}=${v.value}`);\n      console.log(`    ${chalk.dim(v.effect)}`);\n    }\n    console.log();\n  }\n\n  console.log(chalk.bold(`Unset${setVars.length > 0 ? '' : ' (none active)'}`));\n  for (const v of unsetVars) {\n    console.log(`  ${chalk.dim(v.name)} — ${chalk.dim(v.effect)}`);\n  }\n}\n\n// --- debug token ---\n\nexport async function runDebugToken(): Promise<void> {\n  const creds = getCredentials();\n\n  if (!creds) {\n    if (isJsonMode()) {\n      outputJson({ present: false });\n    } else {\n      console.log(chalk.yellow('No credentials found'));\n    }\n    return;\n  }\n\n  const claims = parseJwt(creds.accessToken);\n  const expired = isTokenExpired(creds);\n  const timeRemaining = creds.expiresAt - Date.now();\n\n  if (isJsonMode()) {\n    outputJson({\n      present: true,\n      format: claims ? 'jwt' : 'opaque',\n      expired,\n      expiresAt: creds.expiresAt,\n      expiresIn: expired\n        ? `expired ${formatTimeRemaining(-timeRemaining)} ago`\n        : `in ${formatTimeRemaining(timeRemaining)}`,\n      claims: claims ?? null,\n      refreshToken: { present: !!creds.refreshToken },\n    });\n    return;\n  }\n\n  if (claims) {\n    console.log(chalk.bold('JWT Token'));\n    console.log(\n      `  expires: ${expired ? chalk.red(`expired ${formatTimeRemaining(-timeRemaining)} ago`) : chalk.green(`in ${formatTimeRemaining(timeRemaining)}`)}`,\n    );\n    console.log();\n    console.log(chalk.bold('Claims'));\n    for (const [key, value] of Object.entries(claims)) {\n      if (key === 'exp' || key === 'iat' || key === 'nbf') {\n        const date = new Date((value as number) * 1000).toISOString();\n        console.log(`  ${key}: ${value} (${date})`);\n      } else {\n        console.log(`  ${key}: ${JSON.stringify(value)}`);\n      }\n    }\n  } else {\n    console.log(chalk.bold('Opaque Token'));\n    console.log(chalk.dim('  Token is not a JWT — cannot decode claims'));\n    console.log(\n      `  expires: ${expired ? chalk.red(`expired ${formatTimeRemaining(-timeRemaining)} ago`) : chalk.green(`in ${formatTimeRemaining(timeRemaining)}`)}`,\n    );\n  }\n\n  console.log();\n  console.log(`  refresh token: ${creds.refreshToken ? chalk.green('present') : chalk.yellow('absent')}`);\n}\n"]}

package/dist/commands/dev.d.ts

@@ -0,0 +1,23 @@
+import { type EmulatorSeedConfig } from '../emulate/index.js';
+export interface DevArgs {
+    port: number;
+    seed?: string;
+    '--'?: string[];
+}
+/**
+ * Build the env vars object to inject into the child process.
+ *
+ * Sets both the base URL style (`WORKOS_API_BASE_URL`) and the decomposed
+ * style (`WORKOS_API_HOSTNAME` + `WORKOS_API_PORT` + `WORKOS_API_HTTPS`)
+ * so the emulator works with authkit SDKs (which read the decomposed vars)
+ * and direct SDK consumers (which may use the base URL).
+ */
+/**
+ * Default seed data for `workos dev` so the AuthKit login flow works
+ * out of the box. Provides a test user, an organization with a verified
+ * domain, and a membership linking the two. Skipped when the user
+ * provides `--seed` or a `workos-emulate.config.*` file is auto-detected.
+ */
+export declare const DEFAULT_DEV_SEED: EmulatorSeedConfig;
+export declare function buildDevEnv(emulatorUrl: string, apiKey?: string): Record<string, string>;
+export declare function runDev(argv: DevArgs): Promise<void>;

package/dist/commands/dev.js

@@ -0,0 +1,139 @@
+import { createEmulator } from '../emulate/index.js';
+import { resolveDevCommand } from '../lib/dev-command.js';
+import { spawn } from 'node:child_process';
+import { readFileSync, existsSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { parse as parseYaml } from 'yaml';
+import chalk from 'chalk';
+function loadSeedFile(filePath) {
+    const resolved = resolve(filePath);
+    if (!existsSync(resolved)) {
+        console.error(`Seed file not found: ${resolved}`);
+        process.exit(1);
+    }
+    const content = readFileSync(resolved, 'utf-8');
+    if (resolved.endsWith('.json')) {
+        return JSON.parse(content);
+    }
+    return parseYaml(content);
+}
+function autoDetectSeedFile() {
+    const candidates = ['workos-emulate.config.yaml', 'workos-emulate.config.yml', 'workos-emulate.config.json'];
+    for (const name of candidates) {
+        const filePath = resolve(name);
+        if (existsSync(filePath)) {
+            return loadSeedFile(filePath);
+        }
+    }
+    return null;
+}
+/**
+ * Build the env vars object to inject into the child process.
+ *
+ * Sets both the base URL style (`WORKOS_API_BASE_URL`) and the decomposed
+ * style (`WORKOS_API_HOSTNAME` + `WORKOS_API_PORT` + `WORKOS_API_HTTPS`)
+ * so the emulator works with authkit SDKs (which read the decomposed vars)
+ * and direct SDK consumers (which may use the base URL).
+ */
+/**
+ * Default seed data for `workos dev` so the AuthKit login flow works
+ * out of the box. Provides a test user, an organization with a verified
+ * domain, and a membership linking the two. Skipped when the user
+ * provides `--seed` or a `workos-emulate.config.*` file is auto-detected.
+ */
+export const DEFAULT_DEV_SEED = {
+    users: [
+        {
+            email: 'test@example.com',
+            first_name: 'Test',
+            last_name: 'User',
+            password: 'password',
+            email_verified: true,
+        },
+    ],
+    organizations: [
+        {
+            name: 'Test Organization',
+            domains: [{ domain: 'example.com', state: 'verified' }],
+        },
+    ],
+};
+export function buildDevEnv(emulatorUrl, apiKey = 'sk_test_default') {
+    const url = new URL(emulatorUrl);
+    return {
+        WORKOS_API_BASE_URL: emulatorUrl,
+        WORKOS_API_HOSTNAME: url.hostname,
+        WORKOS_API_PORT: url.port,
+        WORKOS_API_HTTPS: 'false',
+        WORKOS_API_KEY: apiKey,
+        WORKOS_CLIENT_ID: 'client_emulated',
+    };
+}
+export async function runDev(argv) {
+    const userSeed = argv.seed ? loadSeedFile(argv.seed) : autoDetectSeedFile();
+    const seedConfig = userSeed ?? DEFAULT_DEV_SEED;
+    // 1. Start emulator
+    const emulator = await createEmulator({
+        port: argv.port,
+        seed: seedConfig,
+    });
+    // 2. Resolve dev command
+    const explicit = argv['--'];
+    const devCmd = explicit && explicit.length > 0
+        ? { command: explicit[0], args: explicit.slice(1), framework: null }
+        : await resolveDevCommand(process.cwd());
+    // 3. Print status banner
+    console.log();
+    console.log(`${chalk.cyan('WorkOS Emulate')} ${chalk.dim(emulator.url)}`);
+    if (devCmd.framework) {
+        console.log(chalk.dim(`Detected ${devCmd.framework}`));
+    }
+    console.log(chalk.dim(`Running: ${devCmd.command} ${devCmd.args.join(' ')}`));
+    if (!userSeed) {
+        console.log();
+        console.log(`  ${chalk.dim('Email:')}    test@example.com`);
+        console.log(`  ${chalk.dim('Password:')} password`);
+    }
+    console.log();
+    // 4. Spawn child process with env vars
+    let child;
+    try {
+        child = spawn(devCmd.command, devCmd.args, {
+            stdio: 'inherit',
+            env: {
+                ...process.env,
+                ...buildDevEnv(emulator.url, emulator.apiKey),
+            },
+        });
+    }
+    catch {
+        console.error(chalk.red(`Failed to start: ${devCmd.command} ${devCmd.args.join(' ')}`));
+        console.error(chalk.dim('Try specifying the command explicitly: workos dev -- <your-command>'));
+        await emulator.close();
+        process.exit(1);
+    }
+    child.on('error', async (err) => {
+        console.error(chalk.red(`Failed to start: ${devCmd.command}`));
+        if (err.code === 'ENOENT') {
+            console.error(chalk.dim(`Command not found: ${devCmd.command}`));
+            console.error(chalk.dim('Try specifying the command explicitly: workos dev -- <your-command>'));
+        }
+        else {
+            console.error(chalk.dim(err.message));
+        }
+        await emulator.close();
+        process.exit(1);
+    });
+    // 5. Signal handling — forward to child, then close emulator
+    const shutdown = (signal) => {
+        child.kill(signal);
+        emulator.close().then(() => process.exit(0));
+    };
+    process.on('SIGINT', () => shutdown('SIGINT'));
+    process.on('SIGTERM', () => shutdown('SIGTERM'));
+    // 6. If child exits, close emulator and exit with same code
+    child.on('exit', (code) => {
+        emulator.close().then(() => process.exit(code ?? 0));
+    });
+}
+//# sourceMappingURL=dev.js.map

package/dist/commands/dev.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev.js","sourceRoot":"","sources":["../../src/commands/dev.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAA2B,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,MAAM,OAAO,CAAC;AAQ1B,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuB,CAAC;IACnD,CAAC;IACD,OAAO,SAAS,CAAC,OAAO,CAAuB,CAAC;AAClD,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,UAAU,GAAG,CAAC,4BAA4B,EAAE,2BAA2B,EAAE,4BAA4B,CAAC,CAAC;IAE7G,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAuB;IAClD,KAAK,EAAE;QACL;YACE,KAAK,EAAE,kBAAkB;YACzB,UAAU,EAAE,MAAM;YAClB,SAAS,EAAE,MAAM;YACjB,QAAQ,EAAE,UAAU;YACpB,cAAc,EAAE,IAAI;SACrB;KACF;IACD,aAAa,EAAE;QACb;YACE,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;SACxD;KACF;CACF,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,WAAmB,EAAE,MAAM,GAAG,iBAAiB;IACzE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACjC,OAAO;QACL,mBAAmB,EAAE,WAAW;QAChC,mBAAmB,EAAE,GAAG,CAAC,QAAQ;QACjC,eAAe,EAAE,GAAG,CAAC,IAAI;QACzB,gBAAgB,EAAE,OAAO;QACzB,cAAc,EAAE,MAAM;QACtB,gBAAgB,EAAE,iBAAiB;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAa;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAC5E,MAAM,UAAU,GAAG,QAAQ,IAAI,gBAAgB,CAAC;IAEhD,oBAAoB;IACpB,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC;QACpC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,UAAU;KACjB,CAAC,CAAC;IAEH,yBAAyB;IACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,MAAM,GACV,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAC7B,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAqB,EAAE;QACrF,CAAC,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAE7C,yBAAyB;IACzB,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,uCAAuC;IACvC,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;YACzC,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE;gBACH,GAAG,OAAO,CAAC,GAAG;gBACd,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC;aAC9C;SACF,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACxF,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC,CAAC;QAChG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/D,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACjE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC,CAAC;QAClG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAE,EAAE;QAC1C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnB,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAEjD,4DAA4D;IAC5D,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACxB,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { createEmulator, type EmulatorSeedConfig } from '../emulate/index.js';\nimport { resolveDevCommand } from '../lib/dev-command.js';\nimport { spawn, type ChildProcess } from 'node:child_process';\nimport { readFileSync, existsSync } from 'node:fs';\nimport { resolve } from 'node:path';\nimport { parse as parseYaml } from 'yaml';\nimport chalk from 'chalk';\n\nexport interface DevArgs {\n  port: number;\n  seed?: string;\n  '--'?: string[];\n}\n\nfunction loadSeedFile(filePath: string): EmulatorSeedConfig {\n  const resolved = resolve(filePath);\n  if (!existsSync(resolved)) {\n    console.error(`Seed file not found: ${resolved}`);\n    process.exit(1);\n  }\n\n  const content = readFileSync(resolved, 'utf-8');\n  if (resolved.endsWith('.json')) {\n    return JSON.parse(content) as EmulatorSeedConfig;\n  }\n  return parseYaml(content) as EmulatorSeedConfig;\n}\n\nfunction autoDetectSeedFile(): EmulatorSeedConfig | null {\n  const candidates = ['workos-emulate.config.yaml', 'workos-emulate.config.yml', 'workos-emulate.config.json'];\n\n  for (const name of candidates) {\n    const filePath = resolve(name);\n    if (existsSync(filePath)) {\n      return loadSeedFile(filePath);\n    }\n  }\n  return null;\n}\n\n/**\n * Build the env vars object to inject into the child process.\n *\n * Sets both the base URL style (`WORKOS_API_BASE_URL`) and the decomposed\n * style (`WORKOS_API_HOSTNAME` + `WORKOS_API_PORT` + `WORKOS_API_HTTPS`)\n * so the emulator works with authkit SDKs (which read the decomposed vars)\n * and direct SDK consumers (which may use the base URL).\n */\n/**\n * Default seed data for `workos dev` so the AuthKit login flow works\n * out of the box. Provides a test user, an organization with a verified\n * domain, and a membership linking the two. Skipped when the user\n * provides `--seed` or a `workos-emulate.config.*` file is auto-detected.\n */\nexport const DEFAULT_DEV_SEED: EmulatorSeedConfig = {\n  users: [\n    {\n      email: 'test@example.com',\n      first_name: 'Test',\n      last_name: 'User',\n      password: 'password',\n      email_verified: true,\n    },\n  ],\n  organizations: [\n    {\n      name: 'Test Organization',\n      domains: [{ domain: 'example.com', state: 'verified' }],\n    },\n  ],\n};\n\nexport function buildDevEnv(emulatorUrl: string, apiKey = 'sk_test_default'): Record<string, string> {\n  const url = new URL(emulatorUrl);\n  return {\n    WORKOS_API_BASE_URL: emulatorUrl,\n    WORKOS_API_HOSTNAME: url.hostname,\n    WORKOS_API_PORT: url.port,\n    WORKOS_API_HTTPS: 'false',\n    WORKOS_API_KEY: apiKey,\n    WORKOS_CLIENT_ID: 'client_emulated',\n  };\n}\n\nexport async function runDev(argv: DevArgs): Promise<void> {\n  const userSeed = argv.seed ? loadSeedFile(argv.seed) : autoDetectSeedFile();\n  const seedConfig = userSeed ?? DEFAULT_DEV_SEED;\n\n  // 1. Start emulator\n  const emulator = await createEmulator({\n    port: argv.port,\n    seed: seedConfig,\n  });\n\n  // 2. Resolve dev command\n  const explicit = argv['--'];\n  const devCmd =\n    explicit && explicit.length > 0\n      ? { command: explicit[0], args: explicit.slice(1), framework: null as string | null }\n      : await resolveDevCommand(process.cwd());\n\n  // 3. Print status banner\n  console.log();\n  console.log(`${chalk.cyan('WorkOS Emulate')} ${chalk.dim(emulator.url)}`);\n  if (devCmd.framework) {\n    console.log(chalk.dim(`Detected ${devCmd.framework}`));\n  }\n  console.log(chalk.dim(`Running: ${devCmd.command} ${devCmd.args.join(' ')}`));\n  if (!userSeed) {\n    console.log();\n    console.log(`  ${chalk.dim('Email:')}    test@example.com`);\n    console.log(`  ${chalk.dim('Password:')} password`);\n  }\n  console.log();\n\n  // 4. Spawn child process with env vars\n  let child: ChildProcess;\n  try {\n    child = spawn(devCmd.command, devCmd.args, {\n      stdio: 'inherit',\n      env: {\n        ...process.env,\n        ...buildDevEnv(emulator.url, emulator.apiKey),\n      },\n    });\n  } catch {\n    console.error(chalk.red(`Failed to start: ${devCmd.command} ${devCmd.args.join(' ')}`));\n    console.error(chalk.dim('Try specifying the command explicitly: workos dev -- <your-command>'));\n    await emulator.close();\n    process.exit(1);\n  }\n\n  child.on('error', async (err) => {\n    console.error(chalk.red(`Failed to start: ${devCmd.command}`));\n    if ((err as NodeJS.ErrnoException).code === 'ENOENT') {\n      console.error(chalk.dim(`Command not found: ${devCmd.command}`));\n      console.error(chalk.dim('Try specifying the command explicitly: workos dev -- <your-command>'));\n    } else {\n      console.error(chalk.dim(err.message));\n    }\n    await emulator.close();\n    process.exit(1);\n  });\n\n  // 5. Signal handling — forward to child, then close emulator\n  const shutdown = (signal: NodeJS.Signals) => {\n    child.kill(signal);\n    emulator.close().then(() => process.exit(0));\n  };\n  process.on('SIGINT', () => shutdown('SIGINT'));\n  process.on('SIGTERM', () => shutdown('SIGTERM'));\n\n  // 6. If child exits, close emulator and exit with same code\n  child.on('exit', (code) => {\n    emulator.close().then(() => process.exit(code ?? 0));\n  });\n}\n"]}

package/dist/commands/emulate.d.ts

@@ -0,0 +1,6 @@
+export interface EmulateArgs {
+    port: number;
+    seed?: string;
+    json?: boolean;
+}
+export declare function runEmulate(argv: EmulateArgs): Promise<void>;

package/dist/commands/emulate.js

@@ -0,0 +1,64 @@
+import { createEmulator } from '../emulate/index.js';
+import { readFileSync, existsSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { parse as parseYaml } from 'yaml';
+import chalk from 'chalk';
+function loadSeedFile(filePath) {
+    const resolved = resolve(filePath);
+    if (!existsSync(resolved)) {
+        console.error(`Seed file not found: ${resolved}`);
+        process.exit(1);
+    }
+    const content = readFileSync(resolved, 'utf-8');
+    if (resolved.endsWith('.json')) {
+        return JSON.parse(content);
+    }
+    return parseYaml(content);
+}
+function autoDetectSeedFile() {
+    const candidates = ['workos-emulate.config.yaml', 'workos-emulate.config.yml', 'workos-emulate.config.json'];
+    for (const name of candidates) {
+        const filePath = resolve(name);
+        if (existsSync(filePath)) {
+            return loadSeedFile(filePath);
+        }
+    }
+    return null;
+}
+function printBanner(emulator) {
+    console.log();
+    console.log(chalk.bold('  WorkOS Emulator'));
+    console.log();
+    console.log(`  ${chalk.dim('URL:')}      ${emulator.url}`);
+    console.log(`  ${chalk.dim('API Key:')}  ${emulator.apiKey}`);
+    console.log(`  ${chalk.dim('Health:')}   ${emulator.url}/health`);
+    console.log();
+    console.log(chalk.dim('  Press Ctrl+C to stop'));
+    console.log();
+}
+export async function runEmulate(argv) {
+    const seedConfig = argv.seed ? loadSeedFile(argv.seed) : autoDetectSeedFile();
+    const emulator = await createEmulator({
+        port: argv.port,
+        seed: seedConfig ?? undefined,
+    });
+    if (argv.json) {
+        console.log(JSON.stringify({
+            url: emulator.url,
+            port: emulator.port,
+            apiKey: emulator.apiKey,
+            health: `${emulator.url}/health`,
+        }));
+    }
+    else {
+        printBanner(emulator);
+    }
+    const shutdown = () => {
+        if (!argv.json)
+            console.log(`\n${chalk.dim('Shutting down...')}`);
+        emulator.close().then(() => process.exit(0));
+    };
+    process.once('SIGINT', shutdown);
+    process.once('SIGTERM', shutdown);
+}
+//# sourceMappingURL=emulate.js.map

package/dist/commands/emulate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emulate.js","sourceRoot":"","sources":["../../src/commands/emulate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAA2B,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,KAAK,MAAM,OAAO,CAAC;AAQ1B,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,wBAAwB,QAAQ,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuB,CAAC;IACnD,CAAC;IACD,OAAO,SAAS,CAAC,OAAO,CAAuB,CAAC;AAClD,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,UAAU,GAAG,CAAC,4BAA4B,EAAE,2BAA2B,EAAE,4BAA4B,CAAC,CAAC;IAE7G,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,QAAuD;IAC1E,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,GAAG,SAAS,CAAC,CAAC;IAClE,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAiB;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAE9E,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC;QACpC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,IAAI,EAAE,UAAU,IAAI,SAAS;KAC9B,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;YACb,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,SAAS;SACjC,CAAC,CACH,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,WAAW,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,EAAE;QACpB,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAClE,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;AACpC,CAAC","sourcesContent":["import { createEmulator, type EmulatorSeedConfig } from '../emulate/index.js';\nimport { readFileSync, existsSync } from 'node:fs';\nimport { resolve } from 'node:path';\nimport { parse as parseYaml } from 'yaml';\nimport chalk from 'chalk';\n\nexport interface EmulateArgs {\n  port: number;\n  seed?: string;\n  json?: boolean;\n}\n\nfunction loadSeedFile(filePath: string): EmulatorSeedConfig {\n  const resolved = resolve(filePath);\n  if (!existsSync(resolved)) {\n    console.error(`Seed file not found: ${resolved}`);\n    process.exit(1);\n  }\n\n  const content = readFileSync(resolved, 'utf-8');\n  if (resolved.endsWith('.json')) {\n    return JSON.parse(content) as EmulatorSeedConfig;\n  }\n  return parseYaml(content) as EmulatorSeedConfig;\n}\n\nfunction autoDetectSeedFile(): EmulatorSeedConfig | null {\n  const candidates = ['workos-emulate.config.yaml', 'workos-emulate.config.yml', 'workos-emulate.config.json'];\n\n  for (const name of candidates) {\n    const filePath = resolve(name);\n    if (existsSync(filePath)) {\n      return loadSeedFile(filePath);\n    }\n  }\n  return null;\n}\n\nfunction printBanner(emulator: { url: string; port: number; apiKey: string }): void {\n  console.log();\n  console.log(chalk.bold('  WorkOS Emulator'));\n  console.log();\n  console.log(`  ${chalk.dim('URL:')}      ${emulator.url}`);\n  console.log(`  ${chalk.dim('API Key:')}  ${emulator.apiKey}`);\n  console.log(`  ${chalk.dim('Health:')}   ${emulator.url}/health`);\n  console.log();\n  console.log(chalk.dim('  Press Ctrl+C to stop'));\n  console.log();\n}\n\nexport async function runEmulate(argv: EmulateArgs): Promise<void> {\n  const seedConfig = argv.seed ? loadSeedFile(argv.seed) : autoDetectSeedFile();\n\n  const emulator = await createEmulator({\n    port: argv.port,\n    seed: seedConfig ?? undefined,\n  });\n\n  if (argv.json) {\n    console.log(\n      JSON.stringify({\n        url: emulator.url,\n        port: emulator.port,\n        apiKey: emulator.apiKey,\n        health: `${emulator.url}/health`,\n      }),\n    );\n  } else {\n    printBanner(emulator);\n  }\n\n  const shutdown = () => {\n    if (!argv.json) console.log(`\\n${chalk.dim('Shutting down...')}`);\n    emulator.close().then(() => process.exit(0));\n  };\n  process.once('SIGINT', shutdown);\n  process.once('SIGTERM', shutdown);\n}\n"]}