workos 0.15.1 → 0.16.0

package/dist/utils/clack-utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"clack-utils.js","sourceRoot":"","sources":["../../src/utils/clack-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAuB,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAuB,wBAAwB,EAAE,eAAe,EAAE,GAAG,IAAI,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAClH,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAoB,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAEtD;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,wDAAwD;IACxD,OAAO,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,0BAA0B,EAAE,YAAY,CAAC,CAAC;AACrG,CAAC;AAwBD,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,OAAgB,EAAE,MAAe;IAC3D,MAAM,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAEtC,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,4BAA4B,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAqB,EACrB,WAAyB;IAEzB,MAAM,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC;IAElC,IACE,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC7B,CAAC,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,WAAW,KAAK,cAAc,CAAC,EACnF,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,yCAAyC,CAAC;QAElH,KAAK,CAAC,MAAM,CACV,iEACE,WAAW,IAAI,gBACjB,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,uCAAuC,CAClE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,OAAO,KAA2B,CAAC;IACrC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAiD;IAC5E,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IAEtD,MAAM,WAAW,GACf,OAAO,CAAC,OAAO;QACf,OAAO,OAAO,CAAC,UAAU,mGAAmG,CAAC;IAE/H,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,OAAqC;IAC3F,OAAO,SAAS,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;QAC9C,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACnB,qCAAqC;YACrC,MAAM,kBAAkB,GAAG,OAAO,CAAC,EAAE;gBACnC,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,MAAM,gBAAgB,CACpB,KAAK,CAAC,OAAO,CAAC;oBACZ,OAAO,EACL,kHAAkH;iBACrH,CAAC,CACH,CAAC;YAEN,SAAS,CAAC,MAAM,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAAC;YAE7D,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACxB,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAC5B,CAAC;YACD,uDAAuD;YACvD,OAAO;QACT,CAAC;QAED,MAAM,2BAA2B,GAAG,8BAA8B,EAAE,CAAC;QACrE,IAAI,2BAA2B,CAAC,MAAM,EAAE,CAAC;YACvC,yCAAyC;YACzC,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;gBACf,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;gBAC/E,SAAS,CAAC,MAAM,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,KAAK,CAAC,GAAG,CAAC,IAAI,CACZ;;EAEN,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;;4CAEI,CACrC,CAAC;YACF,MAAM,qBAAqB,GAAG,MAAM,gBAAgB,CAClD,KAAK,CAAC,OAAO,CAAC;gBACZ,OAAO,EAAE,iCAAiC;aAC3C,CAAC,CACH,CAAC;YAEF,SAAS,CAAC,MAAM,CAAC,0BAA0B,EAAE,qBAAqB,CAAC,CAAC;YAEpE,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBAC3B,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,YAAY,CAAC,QAAQ,CAAC,qCAAqC,EAAE;YAC3D,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC5C,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,YAAY;aAC3B,QAAQ,CAAC,2BAA2B,EAAE;YACrC,4BAA4B;YAC5B,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC;aACD,QAAQ,EAAE,CAAC;QAEd,MAAM,KAAK,GAAG,SAAS;aACpB,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC;aACb,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAExC,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAe,EAAE,OAAe;IACxE,MAAM,SAAS,GAAG,MAAM,gBAAgB,CACtC,KAAK,CAAC,MAAM,CAAC;QACX,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACjC,OAAO;gBACL,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE;gBACpC,KAAK,EAAE,IAAI;aACZ,CAAC;QACJ,CAAC,CAAC;KACH,CAAC,CACH,CAAC;IAEF,OAAO,SAA6C,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2CAA2C,CAAC,EAChE,SAAS,EACT,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,IAAI,GAOL;IACC,OAAO,SAAS,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACnD,SAAS,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;QACzE,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;YAC9C,kBAAkB;YAClB,OAAO,EAAE,cAAc;YACvB,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,IAAI,kBAAkB,EAAE,CAAC;YACvB,SAAS,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,IAAI,CACZ,sCAAsC,WAAW;;IAEnD,SAAS,IAAI,cAAc,EAAE,CAC5B,CAAC;QAEF,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,qBAAqB,kBAAkB,mDAAmD,CAAC,CAAC;QAC/G,MAAM,8BAA8B,GAAG,MAAM,gBAAgB,CAC3D,KAAK,CAAC,OAAO,CAAC;YACZ,OAAO,EAAE,iCAAiC;SAC3C,CAAC,CACH,CAAC;QACF,SAAS,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,WAAW,EAAE,oCAAoC,EAAE,8BAA8B,CAAC,CAAC;QAEnH,IAAI,CAAC,8BAA8B,EAAE,CAAC;YACpC,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAE,UAAU,EAAwC;IAC3F,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAE7D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,oBAAoB,CAAC;YAC1B,OAAO,EAAE,YAAY;YACrB,kBAAkB,EAAE,UAAU;YAC9B,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,WAAW,EACX,gBAAgB,EAChB,iBAAiB,GAAG,IAAI,EACxB,uBAAuB,EACvB,cAAc,EACd,YAAY,GAAG,KAAK,EACpB,WAAW,EACX,UAAU,GAeX;IACC,OAAO,SAAS,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QAC7C,IAAI,gBAAgB,IAAI,iBAAiB,EAAE,CAAC;YAC1C,MAAM,mBAAmB,GAAG,MAAM,gBAAgB,CAChD,KAAK,CAAC,OAAO,CAAC;gBACZ,OAAO,EAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAC7B,uBAAuB,IAAI,WAAW,CACvC,gFAAgF;aAClF,CAAC,CACH,CAAC;YAEF,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAE1C,MAAM,UAAU,GAAG,cAAc,IAAI,CAAC,MAAM,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAE/E,mGAAmG;QACnG,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3D,MAAM,kBAAkB,GAAG,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9F,iBAAiB,CAAC,KAAK,CACrB,GAAG,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAChE,uBAAuB,IAAI,WAAW,CACvC,SAAS,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAC1C,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,YAAY,CAAC,IAAI,CACf,GAAG,UAAU,CAAC,cAAc,IAAI,WAAW,IAAI,UAAU,CAAC,KAAK,IAC7D,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAC/C,IAAI,kBAAkB,EAAE,CAAC,IAAI,EAAE,EAC/B,EAAE,GAAG,EAAE,UAAU,EAAE,EACnB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;oBACtB,IAAI,GAAG,EAAE,CAAC;wBACR,wDAAwD;wBACxD,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,6BAA6B,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAClE,IAAI,CAAC,SAAS,CAAC;4BACb,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC;4BACnC,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC;yBACpC,CAAC,EACF,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC;wBAEF,MAAM,CAAC,GAAG,CAAC,CAAC;oBACd,CAAC;yBAAM,CAAC;wBACN,OAAO,EAAE,CAAC;oBACZ,CAAC;gBACH,CAAC,CACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,iBAAiB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YAC/C,KAAK,CAAC,GAAG,CAAC,KAAK,CACb,GAAG,KAAK,CAAC,GAAG,CACV,sDAAsD,CAEvD,OAAO,CAAC,OAAO,KAAK,CAAC,GAAG,CACvB,4MAA4M,UAAU,EAAE,CACzN,EAAE,CACJ,CAAC;YACF,MAAM,KAAK,EAAE,CAAC;QAChB,CAAC;QAED,iBAAiB,CAAC,IAAI,CACpB,GAAG,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAC9D,uBAAuB,IAAI,WAAW,CACvC,SAAS,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAC1C,CAAC;QAEF,SAAS,CAAC,OAAO,CAAC,uBAAuB,EAAE;YACzC,MAAM,EAAE,mBAAmB;YAC3B,YAAY,EAAE,WAAW;YACzB,eAAe,EAAE,UAAU,CAAC,IAAI;YAChC,WAAW;SACZ,CAAC,CAAC;QAEH,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,WAA2B,EAC3B,SAAiB,EACjB,WAAmB,EACnB,OAA6C;IAE7C,OAAO,SAAS,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAE9D,SAAS,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QAEtE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,sEAAsE;YACtE,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,MAAM,sBAAsB,GAAG,MAAM,gBAAgB,CACnD,KAAK,CAAC,OAAO,CAAC;gBACZ,OAAO,EAAE,GAAG,WAAW,gEAAgE;gBACvF,YAAY,EAAE,KAAK;aACpB,CAAC,CACH,CAAC;YAEF,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBAC5B,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAE,UAAU,EAAwC;IAC1F,MAAM,uBAAuB,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QAC9G,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,sFAAsF,CAAC,CAAC;QACxG,OAAO,KAAK,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,IAAI,WAAW,GAA+B,SAAS,CAAC;IAExD,IAAI,CAAC;QACH,mEAAmE;QACnE,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,wBAAwB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,oCAAoC,CAAC,CAAC;QAExG,MAAM,KAAK,EAAE,CAAC;IAChB,CAAC;IAED,OAAO,WAAW,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,cAA8B,EAC9B,EAAE,UAAU,EAAwC;IAEpD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CACzB,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC;QAChC,kDAAkD;QAClD,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,EACvC;YACE,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,GAAG;SACV,CACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,yBAAyB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAExE,MAAM,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgE;IAEhE,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;QACvD,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IAEH,gEAAgE;IAChE,IAAI,uBAAuB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,sBAAsB,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC;QAC1D,SAAS,CAAC,MAAM,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACjE,OAAO,sBAAsB,CAAC;IAChC,CAAC;IAED,6CAA6C;IAC7C,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,sBAAsB,GAAG,uBAAuB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACrG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,2CAA2C,sBAAsB,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1F,SAAS,CAAC,MAAM,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACjE,OAAO,sBAAsB,CAAC;IAChC,CAAC;IAED,qEAAqE;IACrE,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,eAAe,CAAC;IAElG,MAAM,OAAO,GACX,uBAAuB,CAAC,MAAM,GAAG,CAAC;QAChC,CAAC,CAAC,wDAAwD;QAC1D,CAAC,CAAC,qCAAqC,CAAC;IAE5C,MAAM,sBAAsB,GAAG,MAAM,gBAAgB,CACnD,KAAK,CAAC,MAAM,CAAC;QACX,OAAO;QACP,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAC3C,KAAK,EAAE,cAAc;YACrB,KAAK,EAAE,cAAc,CAAC,KAAK;SAC5B,CAAC,CAAC;KACJ,CAAC,CACH,CAAC;IAEF,SAAS,CAAC,MAAM,CAAC,iBAAiB,EAAG,sBAAyC,CAAC,IAAI,CAAC,CAAC;IACrF,OAAO,sBAAwC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAE,UAAU,EAAwC;IACpF,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,QAA2F,EAC3F,gBAAyB,IAAI;IAK7B,IAAI,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC7B,IAAI,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAEjC,8EAA8E;IAC9E,IAAI,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC3C,iCAAiC;QACjC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YACxB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC;IAC5C,CAAC;IAED,mDAAmD;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACxD,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YAEzC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;YAC9C,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAElD,yEAAyE;YACzE,IAAI,gBAAgB,IAAI,CAAC,CAAC,aAAa,IAAI,cAAc,CAAC,EAAE,CAAC;gBAC3D,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;oBACxB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC;gBACvE,CAAC;gBACD,OAAO;oBACL,MAAM,EAAE,cAAc,IAAI,EAAE;oBAC5B,QAAQ,EAAE,gBAAgB;iBAC3B,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6DAA6D;YAC7D,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;IAE1F,IAAI,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,qEAAqE,CAAC,EAAE,CAAC,CAAC;QACtG,MAAM,GAAG,CAAC,MAAM,gBAAgB,CAC9B,KAAK,CAAC,QAAQ,CAAC;YACb,OAAO,EAAE,2BAA2B;YACpC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClB,IAAI,CAAC,KAAK;oBAAE,OAAO,qBAAqB,CAAC;gBACzC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC7B,OAAO,+BAA+B,CAAC;gBACzC,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;SACF,CAAC,CACH,CAAW,CAAC;IACf,CAAC;SAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC1B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,2CAA2C,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,CAAC,MAAM,gBAAgB,CAChC,KAAK,CAAC,IAAI,CAAC;YACT,OAAO,EAAE,6BAA6B;YACtC,WAAW,EAAE,YAAY;YACzB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClB,IAAI,CAAC,KAAK;oBAAE,OAAO,uBAAuB,CAAC;gBAC3C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBACjC,OAAO,qCAAqC,CAAC;gBAC/C,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;SACF,CAAC,CACH,CAAW,CAAC;IACf,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC;AAC5C,CAAC;AAED;;GAEG","sourcesContent":["import * as childProcess from 'node:child_process';\nimport * as fs from 'node:fs';\nimport * as os from 'node:os';\nimport { join } from 'node:path';\n\nimport chalk from 'chalk';\nimport { traceStep } from '../telemetry.js';\nimport { debug } from './debug.js';\nimport { parseEnvFile } from './env-parser.js';\nimport { type PackageDotJson, hasPackageInstalled } from './package-json.js';\nimport { type PackageManager, detectAllPackageManagers, packageManagers, NPM as npm } from './package-manager.js';\nimport { fulfillsVersionRange } from './semver.js';\nimport type { InstallerOptions } from './types.js';\nimport { getPackageVersion } from './package-json.js';\nimport { ISSUES_URL, type Integration } from '../lib/constants.js';\nimport { analytics } from './analytics.js';\nimport clack from './clack.js';\nimport { INTEGRATION_CONFIG } from '../lib/config.js';\n\n/**\n * Redact sensitive info (API keys, client secrets) from a string.\n */\nexport function redactSensitiveInfo(str: string): string {\n  // Redact WorkOS API keys (sk_...), client secrets, etc.\n  return str.replace(/sk_[a-zA-Z0-9]+/g, 'sk_***').replace(/client_[a-zA-Z0-9]{20,}/g, 'client_***');\n}\n\nexport interface CliSetupConfig {\n  filename: string;\n  name: string;\n  gitignore: boolean;\n\n  likelyAlreadyHasAuthToken(contents: string): boolean;\n  tokenContent(authToken: string): string;\n\n  likelyAlreadyHasOrgAndProject(contents: string): boolean;\n  orgAndProjContent(org: string, project: string): string;\n\n  likelyAlreadyHasUrl?(contents: string): boolean;\n  urlContent?(url: string): string;\n}\n\nexport interface CliSetupConfigContent {\n  authToken: string;\n  org?: string;\n  project?: string;\n  url?: string;\n}\n\nexport async function abort(message?: string, status?: number): Promise<never> {\n  await analytics.shutdown('cancelled');\n\n  clack.outro(message ?? 'Installer setup cancelled.');\n  return process.exit(status ?? 1);\n}\n\nexport async function abortIfCancelled<T>(\n  input: T | Promise<T>,\n  integration?: Integration,\n): Promise<Exclude<T, symbol>> {\n  await analytics.shutdown('cancelled');\n  const resolvedInput = await input;\n\n  if (\n    clack.isCancel(resolvedInput) ||\n    (typeof resolvedInput === 'symbol' && resolvedInput.description === 'clack:cancel')\n  ) {\n    const docsUrl = integration ? INTEGRATION_CONFIG[integration].docsUrl : 'https://workos.com/docs/user-management';\n\n    clack.cancel(\n      `Installer setup cancelled. You can read the documentation for ${\n        integration ?? 'WorkOS AuthKit'\n      } at ${chalk.cyan(docsUrl)} to continue with the setup manually.`,\n    );\n    process.exit(0);\n  } else {\n    return input as Exclude<T, symbol>;\n  }\n}\n\nexport function printWelcome(options: { wizardName: string; message?: string }): void {\n  // eslint-disable-next-line no-console\n  console.log('');\n  clack.intro(chalk.inverse(` ${options.wizardName} `));\n\n  const welcomeText =\n    options.message ||\n    `The ${options.wizardName} will help you set up WorkOS AuthKit for your application.\\nThank you for using WorkOS AuthKit :)`;\n\n  clack.note(welcomeText);\n}\n\nexport async function confirmContinueIfNoOrDirtyGitRepo(options: Pick<InstallerOptions, 'ci'>): Promise<void> {\n  return traceStep('check-git-status', async () => {\n    if (!isInGitRepo()) {\n      // CI mode: auto-continue without git\n      const continueWithoutGit = options.ci\n        ? true\n        : await abortIfCancelled(\n            clack.confirm({\n              message:\n                'You are not inside a git repository. The installer will create and update files. Do you want to continue anyway?',\n            }),\n          );\n\n      analytics.setTag('continue-without-git', continueWithoutGit);\n\n      if (!continueWithoutGit) {\n        await abort(undefined, 0);\n      }\n      // return early to avoid checking for uncommitted files\n      return;\n    }\n\n    const uncommittedOrUntrackedFiles = getUncommittedOrUntrackedFiles();\n    if (uncommittedOrUntrackedFiles.length) {\n      // CI mode: auto-continue with dirty repo\n      if (options.ci) {\n        clack.log.info(`CI mode: continuing with uncommitted/untracked files in repo`);\n        analytics.setTag('continue-with-dirty-repo', true);\n        return;\n      }\n\n      clack.log.warn(\n        `You have uncommitted or untracked files in your repo:\n\n${uncommittedOrUntrackedFiles.join('\\n')}\n\nThe installer will create and update files.`,\n      );\n      const continueWithDirtyRepo = await abortIfCancelled(\n        clack.confirm({\n          message: 'Do you want to continue anyway?',\n        }),\n      );\n\n      analytics.setTag('continue-with-dirty-repo', continueWithDirtyRepo);\n\n      if (!continueWithDirtyRepo) {\n        await abort(undefined, 0);\n      }\n    }\n  });\n}\n\nexport function isInGitRepo() {\n  try {\n    childProcess.execSync('git rev-parse --is-inside-work-tree', {\n      stdio: 'ignore',\n    });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport function getUncommittedOrUntrackedFiles(): string[] {\n  try {\n    const gitStatus = childProcess\n      .execSync('git status --porcelain=v1', {\n        // we only care about stdout\n        stdio: ['ignore', 'pipe', 'ignore'],\n      })\n      .toString();\n\n    const files = gitStatus\n      .split(os.EOL)\n      .map((line) => line.trim())\n      .filter(Boolean)\n      .map((f) => `- ${f.split(/\\s+/)[1]}`);\n\n    return files;\n  } catch {\n    return [];\n  }\n}\n\nexport async function askForItemSelection(items: string[], message: string): Promise<{ value: string; index: number }> {\n  const selection = await abortIfCancelled<{ value: string; index: number } | symbol>(\n    clack.select({\n      maxItems: 12,\n      message: message,\n      options: items.map((item, index) => {\n        return {\n          value: { value: item, index: index },\n          label: item,\n        };\n      }),\n    }),\n  );\n\n  return selection as { value: string; index: number };\n}\n\nexport async function confirmContinueIfPackageVersionNotSupported({\n  packageId,\n  packageName,\n  packageVersion,\n  acceptableVersions,\n  note,\n}: {\n  packageId: string;\n  packageName: string;\n  packageVersion: string;\n  acceptableVersions: string;\n  note?: string;\n}): Promise<void> {\n  return traceStep(`check-package-version`, async () => {\n    analytics.setTag(`${packageName.toLowerCase()}-version`, packageVersion);\n    const isSupportedVersion = fulfillsVersionRange({\n      acceptableVersions,\n      version: packageVersion,\n      canBeLatest: true,\n    });\n\n    if (isSupportedVersion) {\n      analytics.setTag(`${packageName.toLowerCase()}-supported`, true);\n      return;\n    }\n\n    clack.log.warn(\n      `You have an unsupported version of ${packageName} installed:\n\n  ${packageId}@${packageVersion}`,\n    );\n\n    clack.note(note ?? `Please upgrade to ${acceptableVersions} if you wish to use the WorkOS AuthKit installer.`);\n    const continueWithUnsupportedVersion = await abortIfCancelled(\n      clack.confirm({\n        message: 'Do you want to continue anyway?',\n      }),\n    );\n    analytics.setTag(`${packageName.toLowerCase()}-continue-with-unsupported-version`, continueWithUnsupportedVersion);\n\n    if (!continueWithUnsupportedVersion) {\n      await abort(undefined, 0);\n    }\n  });\n}\n\nexport async function isReact19Installed({ installDir }: Pick<InstallerOptions, 'installDir'>): Promise<boolean> {\n  try {\n    const packageJson = await getPackageDotJson({ installDir });\n    const reactVersion = getPackageVersion('react', packageJson);\n\n    if (!reactVersion) {\n      return false;\n    }\n\n    return fulfillsVersionRange({\n      version: reactVersion,\n      acceptableVersions: '>=19.0.0',\n      canBeLatest: true,\n    });\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Installs or updates a package with the user's package manager.\n *\n * IMPORTANT: This function modifies the `package.json`! Be sure to re-read\n * it if you make additional modifications to it after calling this function!\n */\nexport async function installPackage({\n  packageName,\n  alreadyInstalled,\n  askBeforeUpdating = true,\n  packageNameDisplayLabel,\n  packageManager,\n  forceInstall = false,\n  integration,\n  installDir,\n}: {\n  /** The string that is passed to the package manager CLI as identifier to install (e.g. `@workos-inc/authkit-nextjs`, or `@workos-inc/authkit-nextjs@^2.0.0`) */\n  packageName: string;\n  alreadyInstalled: boolean;\n  askBeforeUpdating?: boolean;\n  /** Overrides what is shown in the installation logs in place of the `packageName` option. Useful if the `packageName` is ugly */\n  packageNameDisplayLabel?: string;\n  packageManager?: PackageManager;\n  /** Add force install flag to command to skip install precondition fails */\n  forceInstall?: boolean;\n  /** The integration that is being used */\n  integration?: string;\n  /** The directory to install the package in */\n  installDir: string;\n}): Promise<{ packageManager?: PackageManager }> {\n  return traceStep('install-package', async () => {\n    if (alreadyInstalled && askBeforeUpdating) {\n      const shouldUpdatePackage = await abortIfCancelled(\n        clack.confirm({\n          message: `The ${chalk.bold.cyan(\n            packageNameDisplayLabel ?? packageName,\n          )} package is already installed. Do you want to update it to the latest version?`,\n        }),\n      );\n\n      if (!shouldUpdatePackage) {\n        return {};\n      }\n    }\n\n    const sdkInstallSpinner = clack.spinner();\n\n    const pkgManager = packageManager || (await getPackageManager({ installDir }));\n\n    // Most packages aren't compatible with React 19 yet, skip strict peer dependency checks if needed.\n    const isReact19 = await isReact19Installed({ installDir });\n    const legacyPeerDepsFlag = isReact19 && pkgManager.name === 'npm' ? '--legacy-peer-deps' : '';\n\n    sdkInstallSpinner.start(\n      `${alreadyInstalled ? 'Updating' : 'Installing'} ${chalk.bold.cyan(\n        packageNameDisplayLabel ?? packageName,\n      )} with ${chalk.bold(pkgManager.label)}.`,\n    );\n\n    try {\n      await new Promise<void>((resolve, reject) => {\n        childProcess.exec(\n          `${pkgManager.installCommand} ${packageName} ${pkgManager.flags} ${\n            forceInstall ? pkgManager.forceInstallFlag : ''\n          } ${legacyPeerDepsFlag}`.trim(),\n          { cwd: installDir },\n          (err, stdout, stderr) => {\n            if (err) {\n              // Write a log file so we can better troubleshoot issues\n              fs.writeFileSync(\n                join(process.cwd(), `workos-installation-error-${Date.now()}.log`),\n                JSON.stringify({\n                  stdout: redactSensitiveInfo(stdout),\n                  stderr: redactSensitiveInfo(stderr),\n                }),\n                { encoding: 'utf8' },\n              );\n\n              reject(err);\n            } else {\n              resolve();\n            }\n          },\n        );\n      });\n    } catch (e) {\n      sdkInstallSpinner.stop('Installation failed.');\n      clack.log.error(\n        `${chalk.red(\n          'Encountered the following error during installation:',\n          // eslint-disable-next-line @typescript-eslint/restrict-template-expressions\n        )}\\n\\n${e}\\n\\n${chalk.dim(\n          `The installer has created an \\`workos-installation-error-*.log\\` file. If you think this issue is caused by the WorkOS AuthKit installer, create an issue on GitHub and include the log file's content:\\n${ISSUES_URL}`,\n        )}`,\n      );\n      await abort();\n    }\n\n    sdkInstallSpinner.stop(\n      `${alreadyInstalled ? 'Updated' : 'Installed'} ${chalk.bold.cyan(\n        packageNameDisplayLabel ?? packageName,\n      )} with ${chalk.bold(pkgManager.label)}.`,\n    );\n\n    analytics.capture('installer interaction', {\n      action: 'package installed',\n      package_name: packageName,\n      package_manager: pkgManager.name,\n      integration,\n    });\n\n    return { packageManager: pkgManager };\n  });\n}\n\n/**\n * Checks if @param packageId is listed as a dependency in @param packageJson.\n * If not, it will ask users if they want to continue without the package.\n *\n * Use this function to check if e.g. a the framework of the SDK is installed\n *\n * @param packageJson the package.json object\n * @param packageId the npm name of the package\n * @param packageName a human readable name of the package\n */\nexport async function ensurePackageIsInstalled(\n  packageJson: PackageDotJson,\n  packageId: string,\n  packageName: string,\n  options?: Pick<InstallerOptions, 'dashboard'>,\n): Promise<void> {\n  return traceStep('ensure-package-installed', async () => {\n    const installed = hasPackageInstalled(packageId, packageJson);\n\n    analytics.setTag(`${packageName.toLowerCase()}-installed`, installed);\n\n    if (!installed) {\n      // In dashboard mode, auto-continue (integration was already detected)\n      if (options?.dashboard) {\n        return;\n      }\n\n      const continueWithoutPackage = await abortIfCancelled(\n        clack.confirm({\n          message: `${packageName} does not seem to be installed. Do you still want to continue?`,\n          initialValue: false,\n        }),\n      );\n\n      if (!continueWithoutPackage) {\n        await abort(undefined, 0);\n      }\n    }\n  });\n}\n\nexport async function getPackageDotJson({ installDir }: Pick<InstallerOptions, 'installDir'>): Promise<PackageDotJson> {\n  const packageJsonFileContents = await fs.promises.readFile(join(installDir, 'package.json'), 'utf8').catch(() => {\n    clack.log.error('Could not find package.json. Make sure to run the installer in the root of your app!');\n    return abort();\n  });\n\n  let packageJson: PackageDotJson | undefined = undefined;\n\n  try {\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment\n    packageJson = JSON.parse(packageJsonFileContents);\n  } catch {\n    clack.log.error(`Unable to parse your ${chalk.cyan('package.json')}. Make sure it has a valid format!`);\n\n    await abort();\n  }\n\n  return packageJson || {};\n}\n\nexport async function updatePackageDotJson(\n  packageDotJson: PackageDotJson,\n  { installDir }: Pick<InstallerOptions, 'installDir'>,\n): Promise<void> {\n  try {\n    await fs.promises.writeFile(\n      join(installDir, 'package.json'),\n      // TODO: maybe figure out the original indentation\n      JSON.stringify(packageDotJson, null, 2),\n      {\n        encoding: 'utf8',\n        flag: 'w',\n      },\n    );\n  } catch {\n    clack.log.error(`Unable to update your ${chalk.cyan('package.json')}.`);\n\n    await abort();\n  }\n}\n\nexport async function getPackageManager(\n  options: Pick<InstallerOptions, 'installDir'> & { ci?: boolean },\n): Promise<PackageManager> {\n  const detectedPackageManagers = detectAllPackageManagers({\n    installDir: options.installDir,\n  });\n\n  // If exactly one package manager detected, use it automatically\n  if (detectedPackageManagers.length === 1) {\n    const detectedPackageManager = detectedPackageManagers[0];\n    analytics.setTag('package-manager', detectedPackageManager.name);\n    return detectedPackageManager;\n  }\n\n  // CI mode: auto-select first detected or npm\n  if (options.ci) {\n    const selectedPackageManager = detectedPackageManagers.length > 0 ? detectedPackageManagers[0] : npm;\n    clack.log.info(`CI mode: auto-selected package manager: ${selectedPackageManager.label}`);\n    analytics.setTag('package-manager', selectedPackageManager.name);\n    return selectedPackageManager;\n  }\n\n  // If multiple or no package managers detected, prompt user to select\n  const pkgOptions = detectedPackageManagers.length > 0 ? detectedPackageManagers : packageManagers;\n\n  const message =\n    detectedPackageManagers.length > 1\n      ? 'Multiple package managers detected. Please select one:'\n      : 'Please select your package manager.';\n\n  const selectedPackageManager = await abortIfCancelled<PackageManager | symbol>(\n    clack.select({\n      message,\n      options: pkgOptions.map((packageManager) => ({\n        value: packageManager,\n        label: packageManager.label,\n      })),\n    }),\n  );\n\n  analytics.setTag('package-manager', (selectedPackageManager as PackageManager).name);\n  return selectedPackageManager as PackageManager;\n}\n\nexport function isUsingTypeScript({ installDir }: Pick<InstallerOptions, 'installDir'>) {\n  try {\n    return fs.existsSync(join(installDir, 'tsconfig.json'));\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Get WorkOS credentials (API Key and Client ID) from user or CLI options\n * @param requireApiKey - Whether API key is needed (false for client-only SDKs like React, Vanilla JS)\n */\nexport async function getOrAskForWorkOSCredentials(\n  _options: Pick<InstallerOptions, 'ci' | 'apiKey' | 'clientId' | 'installDir' | 'dashboard'>,\n  requireApiKey: boolean = true,\n): Promise<{\n  apiKey: string;\n  clientId: string;\n}> {\n  let apiKey = _options.apiKey;\n  let clientId = _options.clientId;\n\n  // If credentials provided via CLI (e.g., CI mode or dashboard mode), use them\n  if ((!requireApiKey || apiKey) && clientId) {\n    // Only log in non-dashboard mode\n    if (!_options.dashboard) {\n      clack.log.info('Using provided WorkOS credentials');\n    }\n    return { apiKey: apiKey || '', clientId };\n  }\n\n  // Check if credentials already exist in .env.local\n  const envPath = join(_options.installDir, '.env.local');\n  if (fs.existsSync(envPath)) {\n    try {\n      const envContent = fs.readFileSync(envPath, 'utf-8');\n      const envVars = parseEnvFile(envContent);\n\n      const existingApiKey = envVars.WORKOS_API_KEY;\n      const existingClientId = envVars.WORKOS_CLIENT_ID;\n\n      // Use existing credentials if both are present (or API key not required)\n      if (existingClientId && (!requireApiKey || existingApiKey)) {\n        if (!_options.dashboard) {\n          clack.log.success(`Found existing WorkOS credentials in .env.local`);\n        }\n        return {\n          apiKey: existingApiKey || '',\n          clientId: existingClientId,\n        };\n      }\n    } catch (error) {\n      // If we can't read/parse .env.local, just continue to prompt\n      debug('Failed to read .env.local:', error);\n    }\n  }\n\n  // Otherwise, prompt user for credentials\n  clack.log.step(`Get your credentials from ${chalk.cyan('https://dashboard.workos.com')}`);\n\n  if (requireApiKey && !apiKey) {\n    clack.log.info(`${chalk.dim('ℹ️ Your API key will be hidden for security and saved to .env.local')}`);\n    apiKey = (await abortIfCancelled(\n      clack.password({\n        message: 'Enter your WorkOS API Key',\n        validate: (value) => {\n          if (!value) return 'API Key is required';\n          if (!value.startsWith('sk_')) {\n            return 'API Key should start with sk_';\n          }\n          return undefined;\n        },\n      }),\n    )) as string;\n  } else if (!requireApiKey) {\n    clack.log.info(`${chalk.dim('ℹ️ Client-only SDK - API key not required')}`);\n  }\n\n  if (!clientId) {\n    clientId = (await abortIfCancelled(\n      clack.text({\n        message: 'Enter your WorkOS Client ID',\n        placeholder: 'client_...',\n        validate: (value) => {\n          if (!value) return 'Client ID is required';\n          if (!value.startsWith('client_')) {\n            return 'Client ID should start with client_';\n          }\n          return undefined;\n        },\n      }),\n    )) as string;\n  }\n\n  return { apiKey: apiKey || '', clientId };\n}\n\n/**\n * Fetch project data using a personal API key (for CI mode)\n */\n"]}
+{"version":3,"file":"clack-utils.js","sourceRoot":"","sources":["../../src/utils/clack-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAuB,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,OAAO,EAAuB,wBAAwB,EAAE,eAAe,EAAE,GAAG,IAAI,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAClH,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAoB,MAAM,qBAAqB,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,wDAAwD;IACxD,OAAO,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,0BAA0B,EAAE,YAAY,CAAC,CAAC;AACrG,CAAC;AAwBD,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,OAAgB,EAAE,MAAe;IAC3D,MAAM,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAEtC,KAAK,CAAC,KAAK,CAAC,OAAO,IAAI,4BAA4B,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAqB,EACrB,WAAyB;IAEzB,MAAM,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC;IAElC,IACE,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC7B,CAAC,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,WAAW,KAAK,cAAc,CAAC,EACnF,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,yCAAyC,CAAC;QAElH,KAAK,CAAC,MAAM,CACV,iEACE,WAAW,IAAI,gBACjB,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,uCAAuC,CAClE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;SAAM,CAAC;QACN,OAAO,KAA2B,CAAC;IACrC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,OAAiD;IAC5E,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IAEtD,MAAM,WAAW,GACf,OAAO,CAAC,OAAO;QACf,OAAO,OAAO,CAAC,UAAU,mGAAmG,CAAC;IAE/H,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,OAAqC;IAC3F,OAAO,SAAS,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;QAC9C,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACnB,qCAAqC;YACrC,MAAM,kBAAkB,GAAG,OAAO,CAAC,EAAE;gBACnC,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,MAAM,gBAAgB,CACpB,KAAK,CAAC,OAAO,CAAC;oBACZ,OAAO,EACL,kHAAkH;iBACrH,CAAC,CACH,CAAC;YAEN,SAAS,CAAC,MAAM,CAAC,sBAAsB,EAAE,kBAAkB,CAAC,CAAC;YAE7D,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACxB,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAC5B,CAAC;YACD,uDAAuD;YACvD,OAAO;QACT,CAAC;QAED,MAAM,2BAA2B,GAAG,8BAA8B,EAAE,CAAC;QACrE,IAAI,2BAA2B,CAAC,MAAM,EAAE,CAAC;YACvC,yCAAyC;YACzC,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;gBACf,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;gBAC/E,SAAS,CAAC,MAAM,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YAED,KAAK,CAAC,GAAG,CAAC,IAAI,CACZ;;EAEN,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC;;4CAEI,CACrC,CAAC;YACF,MAAM,qBAAqB,GAAG,MAAM,gBAAgB,CAClD,KAAK,CAAC,OAAO,CAAC;gBACZ,OAAO,EAAE,iCAAiC;aAC3C,CAAC,CACH,CAAC;YAEF,SAAS,CAAC,MAAM,CAAC,0BAA0B,EAAE,qBAAqB,CAAC,CAAC;YAEpE,IAAI,CAAC,qBAAqB,EAAE,CAAC;gBAC3B,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,YAAY,CAAC,QAAQ,CAAC,qCAAqC,EAAE;YAC3D,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC5C,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,YAAY;aAC3B,QAAQ,CAAC,2BAA2B,EAAE;YACrC,4BAA4B;YAC5B,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC;aACD,QAAQ,EAAE,CAAC;QAEd,MAAM,KAAK,GAAG,SAAS;aACpB,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC;aACb,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAExC,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAe,EAAE,OAAe;IACxE,MAAM,SAAS,GAAG,MAAM,gBAAgB,CACtC,KAAK,CAAC,MAAM,CAAC;QACX,QAAQ,EAAE,EAAE;QACZ,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YACjC,OAAO;gBACL,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE;gBACpC,KAAK,EAAE,IAAI;aACZ,CAAC;QACJ,CAAC,CAAC;KACH,CAAC,CACH,CAAC;IAEF,OAAO,SAA6C,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2CAA2C,CAAC,EAChE,SAAS,EACT,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,IAAI,GAOL;IACC,OAAO,SAAS,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACnD,SAAS,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;QACzE,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;YAC9C,kBAAkB;YAClB,OAAO,EAAE,cAAc;YACvB,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QAEH,IAAI,kBAAkB,EAAE,CAAC;YACvB,SAAS,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,WAAW,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,IAAI,CACZ,sCAAsC,WAAW;;IAEnD,SAAS,IAAI,cAAc,EAAE,CAC5B,CAAC;QAEF,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,qBAAqB,kBAAkB,mDAAmD,CAAC,CAAC;QAC/G,MAAM,8BAA8B,GAAG,MAAM,gBAAgB,CAC3D,KAAK,CAAC,OAAO,CAAC;YACZ,OAAO,EAAE,iCAAiC;SAC3C,CAAC,CACH,CAAC;QACF,SAAS,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,WAAW,EAAE,oCAAoC,EAAE,8BAA8B,CAAC,CAAC;QAEnH,IAAI,CAAC,8BAA8B,EAAE,CAAC;YACpC,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAE,UAAU,EAAwC;IAC3F,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAE7D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,oBAAoB,CAAC;YAC1B,OAAO,EAAE,YAAY;YACrB,kBAAkB,EAAE,UAAU;YAC9B,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,WAAW,EACX,gBAAgB,EAChB,iBAAiB,GAAG,IAAI,EACxB,uBAAuB,EACvB,cAAc,EACd,YAAY,GAAG,KAAK,EACpB,WAAW,EACX,UAAU,GAeX;IACC,OAAO,SAAS,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QAC7C,IAAI,gBAAgB,IAAI,iBAAiB,EAAE,CAAC;YAC1C,MAAM,mBAAmB,GAAG,MAAM,gBAAgB,CAChD,KAAK,CAAC,OAAO,CAAC;gBACZ,OAAO,EAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAC7B,uBAAuB,IAAI,WAAW,CACvC,gFAAgF;aAClF,CAAC,CACH,CAAC;YAEF,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACzB,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAED,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAE1C,MAAM,UAAU,GAAG,cAAc,IAAI,CAAC,MAAM,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAE/E,mGAAmG;QACnG,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3D,MAAM,kBAAkB,GAAG,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;QAE9F,iBAAiB,CAAC,KAAK,CACrB,GAAG,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAChE,uBAAuB,IAAI,WAAW,CACvC,SAAS,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAC1C,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC1C,MAAM,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAChE,MAAM,IAAI,GAAG;oBACX,GAAG,QAAQ;oBACX,WAAW;oBACX,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBAChD,GAAG,CAAC,YAAY,IAAI,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChG,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpD,CAAC;gBACF,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;gBAC/E,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;oBACpC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACzB,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;oBACpC,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACzB,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;oBACxB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;wBACf,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,6BAA6B,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAClE,IAAI,CAAC,SAAS,CAAC;4BACb,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC;4BACnC,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC;yBACpC,CAAC,EACF,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC;wBACF,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,GAAG,qBAAqB,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC;oBAClE,CAAC;yBAAM,CAAC;wBACN,OAAO,EAAE,CAAC;oBACZ,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC3B,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,iBAAiB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YAC/C,KAAK,CAAC,GAAG,CAAC,KAAK,CACb,GAAG,KAAK,CAAC,GAAG,CACV,sDAAsD,CAEvD,OAAO,CAAC,OAAO,KAAK,CAAC,GAAG,CACvB,4MAA4M,UAAU,EAAE,CACzN,EAAE,CACJ,CAAC;YACF,MAAM,KAAK,EAAE,CAAC;QAChB,CAAC;QAED,iBAAiB,CAAC,IAAI,CACpB,GAAG,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAC9D,uBAAuB,IAAI,WAAW,CACvC,SAAS,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAC1C,CAAC;QAEF,SAAS,CAAC,OAAO,CAAC,uBAAuB,EAAE;YACzC,MAAM,EAAE,mBAAmB;YAC3B,YAAY,EAAE,WAAW;YACzB,eAAe,EAAE,UAAU,CAAC,IAAI;YAChC,WAAW;SACZ,CAAC,CAAC;QAEH,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,WAA2B,EAC3B,SAAiB,EACjB,WAAmB,EACnB,OAA6C;IAE7C,OAAO,SAAS,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,SAAS,GAAG,mBAAmB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAE9D,SAAS,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QAEtE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,sEAAsE;YACtE,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;gBACvB,OAAO;YACT,CAAC;YAED,MAAM,sBAAsB,GAAG,MAAM,gBAAgB,CACnD,KAAK,CAAC,OAAO,CAAC;gBACZ,OAAO,EAAE,GAAG,WAAW,gEAAgE;gBACvF,YAAY,EAAE,KAAK;aACpB,CAAC,CACH,CAAC;YAEF,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBAC5B,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAE,UAAU,EAAwC;IAC1F,MAAM,uBAAuB,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QAC9G,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,sFAAsF,CAAC,CAAC;QACxG,OAAO,KAAK,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,IAAI,WAAW,GAA+B,SAAS,CAAC;IAExD,IAAI,CAAC;QACH,mEAAmE;QACnE,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,wBAAwB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,oCAAoC,CAAC,CAAC;QAExG,MAAM,KAAK,EAAE,CAAC;IAChB,CAAC;IAED,OAAO,WAAW,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,cAA8B,EAC9B,EAAE,UAAU,EAAwC;IAEpD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CACzB,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC;QAChC,kDAAkD;QAClD,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,EACvC;YACE,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,GAAG;SACV,CACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,yBAAyB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAExE,MAAM,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAgE;IAEhE,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;QACvD,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IAEH,gEAAgE;IAChE,IAAI,uBAAuB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,MAAM,sBAAsB,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC;QAC1D,SAAS,CAAC,MAAM,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACjE,OAAO,sBAAsB,CAAC;IAChC,CAAC;IAED,6CAA6C;IAC7C,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,sBAAsB,GAAG,uBAAuB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACrG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,2CAA2C,sBAAsB,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1F,SAAS,CAAC,MAAM,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACjE,OAAO,sBAAsB,CAAC;IAChC,CAAC;IAED,qEAAqE;IACrE,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,eAAe,CAAC;IAElG,MAAM,OAAO,GACX,uBAAuB,CAAC,MAAM,GAAG,CAAC;QAChC,CAAC,CAAC,wDAAwD;QAC1D,CAAC,CAAC,qCAAqC,CAAC;IAE5C,MAAM,sBAAsB,GAAG,MAAM,gBAAgB,CACnD,KAAK,CAAC,MAAM,CAAC;QACX,OAAO;QACP,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;YAC3C,KAAK,EAAE,cAAc;YACrB,KAAK,EAAE,cAAc,CAAC,KAAK;SAC5B,CAAC,CAAC;KACJ,CAAC,CACH,CAAC;IAEF,SAAS,CAAC,MAAM,CAAC,iBAAiB,EAAG,sBAAyC,CAAC,IAAI,CAAC,CAAC;IACrF,OAAO,sBAAwC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAE,UAAU,EAAwC;IACpF,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,QAA2F,EAC3F,gBAAyB,IAAI;IAK7B,IAAI,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC7B,IAAI,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;IAEjC,8EAA8E;IAC9E,IAAI,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC3C,iCAAiC;QACjC,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YACxB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC;IAC5C,CAAC;IAED,mDAAmD;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACxD,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;YAEzC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;YAC9C,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAElD,yEAAyE;YACzE,IAAI,gBAAgB,IAAI,CAAC,CAAC,aAAa,IAAI,cAAc,CAAC,EAAE,CAAC;gBAC3D,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;oBACxB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC;gBACvE,CAAC;gBACD,OAAO;oBACL,MAAM,EAAE,cAAc,IAAI,EAAE;oBAC5B,QAAQ,EAAE,gBAAgB;iBAC3B,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,6DAA6D;YAC7D,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,yCAAyC;IACzC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;IAE1F,IAAI,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,qEAAqE,CAAC,EAAE,CAAC,CAAC;QACtG,MAAM,GAAG,CAAC,MAAM,gBAAgB,CAC9B,KAAK,CAAC,QAAQ,CAAC;YACb,OAAO,EAAE,2BAA2B;YACpC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClB,IAAI,CAAC,KAAK;oBAAE,OAAO,qBAAqB,CAAC;gBACzC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC7B,OAAO,+BAA+B,CAAC;gBACzC,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;SACF,CAAC,CACH,CAAW,CAAC;IACf,CAAC;SAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAC1B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,2CAA2C,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,QAAQ,GAAG,CAAC,MAAM,gBAAgB,CAChC,KAAK,CAAC,IAAI,CAAC;YACT,OAAO,EAAE,6BAA6B;YACtC,WAAW,EAAE,YAAY;YACzB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClB,IAAI,CAAC,KAAK;oBAAE,OAAO,uBAAuB,CAAC;gBAC3C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBACjC,OAAO,qCAAqC,CAAC;gBAC/C,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;SACF,CAAC,CACH,CAAW,CAAC;IACf,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC;AAC5C,CAAC;AAED;;GAEG","sourcesContent":["import * as childProcess from 'node:child_process';\nimport * as fs from 'node:fs';\nimport * as os from 'node:os';\nimport { join } from 'node:path';\n\nimport chalk from 'chalk';\nimport { traceStep } from '../telemetry.js';\nimport { debug } from './debug.js';\nimport { parseEnvFile } from './env-parser.js';\nimport { type PackageDotJson, hasPackageInstalled } from './package-json.js';\nimport { type PackageManager, detectAllPackageManagers, packageManagers, NPM as npm } from './package-manager.js';\nimport { fulfillsVersionRange } from './semver.js';\nimport type { InstallerOptions } from './types.js';\nimport { getPackageVersion } from './package-json.js';\nimport { ISSUES_URL, type Integration } from '../lib/constants.js';\nimport { analytics } from './analytics.js';\nimport clack from './clack.js';\nimport { INTEGRATION_CONFIG } from '../lib/config.js';\nimport { SPAWN_OPTS } from './platform.js';\n\n/**\n * Redact sensitive info (API keys, client secrets) from a string.\n */\nexport function redactSensitiveInfo(str: string): string {\n  // Redact WorkOS API keys (sk_...), client secrets, etc.\n  return str.replace(/sk_[a-zA-Z0-9]+/g, 'sk_***').replace(/client_[a-zA-Z0-9]{20,}/g, 'client_***');\n}\n\nexport interface CliSetupConfig {\n  filename: string;\n  name: string;\n  gitignore: boolean;\n\n  likelyAlreadyHasAuthToken(contents: string): boolean;\n  tokenContent(authToken: string): string;\n\n  likelyAlreadyHasOrgAndProject(contents: string): boolean;\n  orgAndProjContent(org: string, project: string): string;\n\n  likelyAlreadyHasUrl?(contents: string): boolean;\n  urlContent?(url: string): string;\n}\n\nexport interface CliSetupConfigContent {\n  authToken: string;\n  org?: string;\n  project?: string;\n  url?: string;\n}\n\nexport async function abort(message?: string, status?: number): Promise<never> {\n  await analytics.shutdown('cancelled');\n\n  clack.outro(message ?? 'Installer setup cancelled.');\n  return process.exit(status ?? 1);\n}\n\nexport async function abortIfCancelled<T>(\n  input: T | Promise<T>,\n  integration?: Integration,\n): Promise<Exclude<T, symbol>> {\n  await analytics.shutdown('cancelled');\n  const resolvedInput = await input;\n\n  if (\n    clack.isCancel(resolvedInput) ||\n    (typeof resolvedInput === 'symbol' && resolvedInput.description === 'clack:cancel')\n  ) {\n    const docsUrl = integration ? INTEGRATION_CONFIG[integration].docsUrl : 'https://workos.com/docs/user-management';\n\n    clack.cancel(\n      `Installer setup cancelled. You can read the documentation for ${\n        integration ?? 'WorkOS AuthKit'\n      } at ${chalk.cyan(docsUrl)} to continue with the setup manually.`,\n    );\n    process.exit(0);\n  } else {\n    return input as Exclude<T, symbol>;\n  }\n}\n\nexport function printWelcome(options: { wizardName: string; message?: string }): void {\n  // eslint-disable-next-line no-console\n  console.log('');\n  clack.intro(chalk.inverse(` ${options.wizardName} `));\n\n  const welcomeText =\n    options.message ||\n    `The ${options.wizardName} will help you set up WorkOS AuthKit for your application.\\nThank you for using WorkOS AuthKit :)`;\n\n  clack.note(welcomeText);\n}\n\nexport async function confirmContinueIfNoOrDirtyGitRepo(options: Pick<InstallerOptions, 'ci'>): Promise<void> {\n  return traceStep('check-git-status', async () => {\n    if (!isInGitRepo()) {\n      // CI mode: auto-continue without git\n      const continueWithoutGit = options.ci\n        ? true\n        : await abortIfCancelled(\n            clack.confirm({\n              message:\n                'You are not inside a git repository. The installer will create and update files. Do you want to continue anyway?',\n            }),\n          );\n\n      analytics.setTag('continue-without-git', continueWithoutGit);\n\n      if (!continueWithoutGit) {\n        await abort(undefined, 0);\n      }\n      // return early to avoid checking for uncommitted files\n      return;\n    }\n\n    const uncommittedOrUntrackedFiles = getUncommittedOrUntrackedFiles();\n    if (uncommittedOrUntrackedFiles.length) {\n      // CI mode: auto-continue with dirty repo\n      if (options.ci) {\n        clack.log.info(`CI mode: continuing with uncommitted/untracked files in repo`);\n        analytics.setTag('continue-with-dirty-repo', true);\n        return;\n      }\n\n      clack.log.warn(\n        `You have uncommitted or untracked files in your repo:\n\n${uncommittedOrUntrackedFiles.join('\\n')}\n\nThe installer will create and update files.`,\n      );\n      const continueWithDirtyRepo = await abortIfCancelled(\n        clack.confirm({\n          message: 'Do you want to continue anyway?',\n        }),\n      );\n\n      analytics.setTag('continue-with-dirty-repo', continueWithDirtyRepo);\n\n      if (!continueWithDirtyRepo) {\n        await abort(undefined, 0);\n      }\n    }\n  });\n}\n\nexport function isInGitRepo() {\n  try {\n    childProcess.execSync('git rev-parse --is-inside-work-tree', {\n      stdio: 'ignore',\n    });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport function getUncommittedOrUntrackedFiles(): string[] {\n  try {\n    const gitStatus = childProcess\n      .execSync('git status --porcelain=v1', {\n        // we only care about stdout\n        stdio: ['ignore', 'pipe', 'ignore'],\n      })\n      .toString();\n\n    const files = gitStatus\n      .split(os.EOL)\n      .map((line) => line.trim())\n      .filter(Boolean)\n      .map((f) => `- ${f.split(/\\s+/)[1]}`);\n\n    return files;\n  } catch {\n    return [];\n  }\n}\n\nexport async function askForItemSelection(items: string[], message: string): Promise<{ value: string; index: number }> {\n  const selection = await abortIfCancelled<{ value: string; index: number } | symbol>(\n    clack.select({\n      maxItems: 12,\n      message: message,\n      options: items.map((item, index) => {\n        return {\n          value: { value: item, index: index },\n          label: item,\n        };\n      }),\n    }),\n  );\n\n  return selection as { value: string; index: number };\n}\n\nexport async function confirmContinueIfPackageVersionNotSupported({\n  packageId,\n  packageName,\n  packageVersion,\n  acceptableVersions,\n  note,\n}: {\n  packageId: string;\n  packageName: string;\n  packageVersion: string;\n  acceptableVersions: string;\n  note?: string;\n}): Promise<void> {\n  return traceStep(`check-package-version`, async () => {\n    analytics.setTag(`${packageName.toLowerCase()}-version`, packageVersion);\n    const isSupportedVersion = fulfillsVersionRange({\n      acceptableVersions,\n      version: packageVersion,\n      canBeLatest: true,\n    });\n\n    if (isSupportedVersion) {\n      analytics.setTag(`${packageName.toLowerCase()}-supported`, true);\n      return;\n    }\n\n    clack.log.warn(\n      `You have an unsupported version of ${packageName} installed:\n\n  ${packageId}@${packageVersion}`,\n    );\n\n    clack.note(note ?? `Please upgrade to ${acceptableVersions} if you wish to use the WorkOS AuthKit installer.`);\n    const continueWithUnsupportedVersion = await abortIfCancelled(\n      clack.confirm({\n        message: 'Do you want to continue anyway?',\n      }),\n    );\n    analytics.setTag(`${packageName.toLowerCase()}-continue-with-unsupported-version`, continueWithUnsupportedVersion);\n\n    if (!continueWithUnsupportedVersion) {\n      await abort(undefined, 0);\n    }\n  });\n}\n\nexport async function isReact19Installed({ installDir }: Pick<InstallerOptions, 'installDir'>): Promise<boolean> {\n  try {\n    const packageJson = await getPackageDotJson({ installDir });\n    const reactVersion = getPackageVersion('react', packageJson);\n\n    if (!reactVersion) {\n      return false;\n    }\n\n    return fulfillsVersionRange({\n      version: reactVersion,\n      acceptableVersions: '>=19.0.0',\n      canBeLatest: true,\n    });\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Installs or updates a package with the user's package manager.\n *\n * IMPORTANT: This function modifies the `package.json`! Be sure to re-read\n * it if you make additional modifications to it after calling this function!\n */\nexport async function installPackage({\n  packageName,\n  alreadyInstalled,\n  askBeforeUpdating = true,\n  packageNameDisplayLabel,\n  packageManager,\n  forceInstall = false,\n  integration,\n  installDir,\n}: {\n  /** The string that is passed to the package manager CLI as identifier to install (e.g. `@workos-inc/authkit-nextjs`, or `@workos-inc/authkit-nextjs@^2.0.0`) */\n  packageName: string;\n  alreadyInstalled: boolean;\n  askBeforeUpdating?: boolean;\n  /** Overrides what is shown in the installation logs in place of the `packageName` option. Useful if the `packageName` is ugly */\n  packageNameDisplayLabel?: string;\n  packageManager?: PackageManager;\n  /** Add force install flag to command to skip install precondition fails */\n  forceInstall?: boolean;\n  /** The integration that is being used */\n  integration?: string;\n  /** The directory to install the package in */\n  installDir: string;\n}): Promise<{ packageManager?: PackageManager }> {\n  return traceStep('install-package', async () => {\n    if (alreadyInstalled && askBeforeUpdating) {\n      const shouldUpdatePackage = await abortIfCancelled(\n        clack.confirm({\n          message: `The ${chalk.bold.cyan(\n            packageNameDisplayLabel ?? packageName,\n          )} package is already installed. Do you want to update it to the latest version?`,\n        }),\n      );\n\n      if (!shouldUpdatePackage) {\n        return {};\n      }\n    }\n\n    const sdkInstallSpinner = clack.spinner();\n\n    const pkgManager = packageManager || (await getPackageManager({ installDir }));\n\n    // Most packages aren't compatible with React 19 yet, skip strict peer dependency checks if needed.\n    const isReact19 = await isReact19Installed({ installDir });\n    const legacyPeerDepsFlag = isReact19 && pkgManager.name === 'npm' ? '--legacy-peer-deps' : '';\n\n    sdkInstallSpinner.start(\n      `${alreadyInstalled ? 'Updating' : 'Installing'} ${chalk.bold.cyan(\n        packageNameDisplayLabel ?? packageName,\n      )} with ${chalk.bold(pkgManager.label)}.`,\n    );\n\n    try {\n      await new Promise<void>((resolve, reject) => {\n        const [cmd, ...baseArgs] = pkgManager.installCommand.split(' ');\n        const args = [\n          ...baseArgs,\n          packageName,\n          ...pkgManager.flags.split(/\\s+/).filter(Boolean),\n          ...(forceInstall && pkgManager.forceInstallFlag ? pkgManager.forceInstallFlag.split(/\\s+/) : []),\n          ...(legacyPeerDepsFlag ? [legacyPeerDepsFlag] : []),\n        ];\n        const proc = childProcess.spawn(cmd, args, { cwd: installDir, ...SPAWN_OPTS });\n        let stdout = '';\n        let stderr = '';\n        proc.stdout?.on('data', (d: Buffer) => {\n          stdout += d.toString();\n        });\n        proc.stderr?.on('data', (d: Buffer) => {\n          stderr += d.toString();\n        });\n        proc.on('close', (code) => {\n          if (code !== 0) {\n            fs.writeFileSync(\n              join(process.cwd(), `workos-installation-error-${Date.now()}.log`),\n              JSON.stringify({\n                stdout: redactSensitiveInfo(stdout),\n                stderr: redactSensitiveInfo(stderr),\n              }),\n              { encoding: 'utf8' },\n            );\n            reject(new Error(`${cmd} exited with code ${code}\\n${stderr}`));\n          } else {\n            resolve();\n          }\n        });\n        proc.on('error', reject);\n      });\n    } catch (e) {\n      sdkInstallSpinner.stop('Installation failed.');\n      clack.log.error(\n        `${chalk.red(\n          'Encountered the following error during installation:',\n          // eslint-disable-next-line @typescript-eslint/restrict-template-expressions\n        )}\\n\\n${e}\\n\\n${chalk.dim(\n          `The installer has created an \\`workos-installation-error-*.log\\` file. If you think this issue is caused by the WorkOS AuthKit installer, create an issue on GitHub and include the log file's content:\\n${ISSUES_URL}`,\n        )}`,\n      );\n      await abort();\n    }\n\n    sdkInstallSpinner.stop(\n      `${alreadyInstalled ? 'Updated' : 'Installed'} ${chalk.bold.cyan(\n        packageNameDisplayLabel ?? packageName,\n      )} with ${chalk.bold(pkgManager.label)}.`,\n    );\n\n    analytics.capture('installer interaction', {\n      action: 'package installed',\n      package_name: packageName,\n      package_manager: pkgManager.name,\n      integration,\n    });\n\n    return { packageManager: pkgManager };\n  });\n}\n\n/**\n * Checks if @param packageId is listed as a dependency in @param packageJson.\n * If not, it will ask users if they want to continue without the package.\n *\n * Use this function to check if e.g. a the framework of the SDK is installed\n *\n * @param packageJson the package.json object\n * @param packageId the npm name of the package\n * @param packageName a human readable name of the package\n */\nexport async function ensurePackageIsInstalled(\n  packageJson: PackageDotJson,\n  packageId: string,\n  packageName: string,\n  options?: Pick<InstallerOptions, 'dashboard'>,\n): Promise<void> {\n  return traceStep('ensure-package-installed', async () => {\n    const installed = hasPackageInstalled(packageId, packageJson);\n\n    analytics.setTag(`${packageName.toLowerCase()}-installed`, installed);\n\n    if (!installed) {\n      // In dashboard mode, auto-continue (integration was already detected)\n      if (options?.dashboard) {\n        return;\n      }\n\n      const continueWithoutPackage = await abortIfCancelled(\n        clack.confirm({\n          message: `${packageName} does not seem to be installed. Do you still want to continue?`,\n          initialValue: false,\n        }),\n      );\n\n      if (!continueWithoutPackage) {\n        await abort(undefined, 0);\n      }\n    }\n  });\n}\n\nexport async function getPackageDotJson({ installDir }: Pick<InstallerOptions, 'installDir'>): Promise<PackageDotJson> {\n  const packageJsonFileContents = await fs.promises.readFile(join(installDir, 'package.json'), 'utf8').catch(() => {\n    clack.log.error('Could not find package.json. Make sure to run the installer in the root of your app!');\n    return abort();\n  });\n\n  let packageJson: PackageDotJson | undefined = undefined;\n\n  try {\n    // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment\n    packageJson = JSON.parse(packageJsonFileContents);\n  } catch {\n    clack.log.error(`Unable to parse your ${chalk.cyan('package.json')}. Make sure it has a valid format!`);\n\n    await abort();\n  }\n\n  return packageJson || {};\n}\n\nexport async function updatePackageDotJson(\n  packageDotJson: PackageDotJson,\n  { installDir }: Pick<InstallerOptions, 'installDir'>,\n): Promise<void> {\n  try {\n    await fs.promises.writeFile(\n      join(installDir, 'package.json'),\n      // TODO: maybe figure out the original indentation\n      JSON.stringify(packageDotJson, null, 2),\n      {\n        encoding: 'utf8',\n        flag: 'w',\n      },\n    );\n  } catch {\n    clack.log.error(`Unable to update your ${chalk.cyan('package.json')}.`);\n\n    await abort();\n  }\n}\n\nexport async function getPackageManager(\n  options: Pick<InstallerOptions, 'installDir'> & { ci?: boolean },\n): Promise<PackageManager> {\n  const detectedPackageManagers = detectAllPackageManagers({\n    installDir: options.installDir,\n  });\n\n  // If exactly one package manager detected, use it automatically\n  if (detectedPackageManagers.length === 1) {\n    const detectedPackageManager = detectedPackageManagers[0];\n    analytics.setTag('package-manager', detectedPackageManager.name);\n    return detectedPackageManager;\n  }\n\n  // CI mode: auto-select first detected or npm\n  if (options.ci) {\n    const selectedPackageManager = detectedPackageManagers.length > 0 ? detectedPackageManagers[0] : npm;\n    clack.log.info(`CI mode: auto-selected package manager: ${selectedPackageManager.label}`);\n    analytics.setTag('package-manager', selectedPackageManager.name);\n    return selectedPackageManager;\n  }\n\n  // If multiple or no package managers detected, prompt user to select\n  const pkgOptions = detectedPackageManagers.length > 0 ? detectedPackageManagers : packageManagers;\n\n  const message =\n    detectedPackageManagers.length > 1\n      ? 'Multiple package managers detected. Please select one:'\n      : 'Please select your package manager.';\n\n  const selectedPackageManager = await abortIfCancelled<PackageManager | symbol>(\n    clack.select({\n      message,\n      options: pkgOptions.map((packageManager) => ({\n        value: packageManager,\n        label: packageManager.label,\n      })),\n    }),\n  );\n\n  analytics.setTag('package-manager', (selectedPackageManager as PackageManager).name);\n  return selectedPackageManager as PackageManager;\n}\n\nexport function isUsingTypeScript({ installDir }: Pick<InstallerOptions, 'installDir'>) {\n  try {\n    return fs.existsSync(join(installDir, 'tsconfig.json'));\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Get WorkOS credentials (API Key and Client ID) from user or CLI options\n * @param requireApiKey - Whether API key is needed (false for client-only SDKs like React, Vanilla JS)\n */\nexport async function getOrAskForWorkOSCredentials(\n  _options: Pick<InstallerOptions, 'ci' | 'apiKey' | 'clientId' | 'installDir' | 'dashboard'>,\n  requireApiKey: boolean = true,\n): Promise<{\n  apiKey: string;\n  clientId: string;\n}> {\n  let apiKey = _options.apiKey;\n  let clientId = _options.clientId;\n\n  // If credentials provided via CLI (e.g., CI mode or dashboard mode), use them\n  if ((!requireApiKey || apiKey) && clientId) {\n    // Only log in non-dashboard mode\n    if (!_options.dashboard) {\n      clack.log.info('Using provided WorkOS credentials');\n    }\n    return { apiKey: apiKey || '', clientId };\n  }\n\n  // Check if credentials already exist in .env.local\n  const envPath = join(_options.installDir, '.env.local');\n  if (fs.existsSync(envPath)) {\n    try {\n      const envContent = fs.readFileSync(envPath, 'utf-8');\n      const envVars = parseEnvFile(envContent);\n\n      const existingApiKey = envVars.WORKOS_API_KEY;\n      const existingClientId = envVars.WORKOS_CLIENT_ID;\n\n      // Use existing credentials if both are present (or API key not required)\n      if (existingClientId && (!requireApiKey || existingApiKey)) {\n        if (!_options.dashboard) {\n          clack.log.success(`Found existing WorkOS credentials in .env.local`);\n        }\n        return {\n          apiKey: existingApiKey || '',\n          clientId: existingClientId,\n        };\n      }\n    } catch (error) {\n      // If we can't read/parse .env.local, just continue to prompt\n      debug('Failed to read .env.local:', error);\n    }\n  }\n\n  // Otherwise, prompt user for credentials\n  clack.log.step(`Get your credentials from ${chalk.cyan('https://dashboard.workos.com')}`);\n\n  if (requireApiKey && !apiKey) {\n    clack.log.info(`${chalk.dim('ℹ️ Your API key will be hidden for security and saved to .env.local')}`);\n    apiKey = (await abortIfCancelled(\n      clack.password({\n        message: 'Enter your WorkOS API Key',\n        validate: (value) => {\n          if (!value) return 'API Key is required';\n          if (!value.startsWith('sk_')) {\n            return 'API Key should start with sk_';\n          }\n          return undefined;\n        },\n      }),\n    )) as string;\n  } else if (!requireApiKey) {\n    clack.log.info(`${chalk.dim('ℹ️ Client-only SDK - API key not required')}`);\n  }\n\n  if (!clientId) {\n    clientId = (await abortIfCancelled(\n      clack.text({\n        message: 'Enter your WorkOS Client ID',\n        placeholder: 'client_...',\n        validate: (value) => {\n          if (!value) return 'Client ID is required';\n          if (!value.startsWith('client_')) {\n            return 'Client ID should start with client_';\n          }\n          return undefined;\n        },\n      }),\n    )) as string;\n  }\n\n  return { apiKey: apiKey || '', clientId };\n}\n\n/**\n * Fetch project data using a personal API key (for CI mode)\n */\n"]}

package/dist/utils/cli-exit.d.ts

@@ -0,0 +1,15 @@
+import type { TerminationReason } from './telemetry-types.js';
+export interface CliExitContext {
+    reason: TerminationReason;
+    errorCode?: string;
+    apiContext?: {
+        status?: number;
+        code?: string;
+        resource?: string;
+    };
+}
+export declare class CliExit extends Error {
+    readonly exitCode: number;
+    readonly context?: CliExitContext | undefined;
+    constructor(exitCode: number, context?: CliExitContext | undefined);
+}

package/dist/utils/cli-exit.js

@@ -0,0 +1,11 @@
+export class CliExit extends Error {
+    exitCode;
+    context;
+    constructor(exitCode, context) {
+        super(`CLI exit: code ${exitCode}`);
+        this.exitCode = exitCode;
+        this.context = context;
+        this.name = 'CliExit';
+    }
+}
+//# sourceMappingURL=cli-exit.js.map

package/dist/utils/cli-exit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-exit.js","sourceRoot":"","sources":["../../src/utils/cli-exit.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,OAAQ,SAAQ,KAAK;IAErB;IACA;IAFX,YACW,QAAgB,EAChB,OAAwB;QAEjC,KAAK,CAAC,kBAAkB,QAAQ,EAAE,CAAC,CAAC;QAH3B,aAAQ,GAAR,QAAQ,CAAQ;QAChB,YAAO,GAAP,OAAO,CAAiB;QAGjC,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;IACxB,CAAC;CACF","sourcesContent":["import type { TerminationReason } from './telemetry-types.js';\n\nexport interface CliExitContext {\n  reason: TerminationReason;\n  errorCode?: string;\n  apiContext?: { status?: number; code?: string; resource?: string };\n}\n\nexport class CliExit extends Error {\n  constructor(\n    readonly exitCode: number,\n    readonly context?: CliExitContext,\n  ) {\n    super(`CLI exit: code ${exitCode}`);\n    this.name = 'CliExit';\n  }\n}\n"]}

package/dist/utils/cli-symbols.d.ts

@@ -2,7 +2,7 @@ export declare const symbols: {
     readonly success: "✓" | "+";
     readonly error: "✗" | "x";
     readonly warning: "!";
-    readonly info: "i" | "ℹ";
+    readonly info: "ℹ" | "i";
     readonly arrow: "→" | "->";
     readonly bullet: "*" | "•";
     readonly progressFilled: "#" | "▓";

package/dist/utils/command-telemetry.d.ts

@@ -0,0 +1,17 @@
+export declare const SKIP_TELEMETRY_COMMANDS: Set<string>;
+export declare function resolveCanonicalName(parts: string[]): string;
+/**
+ * Resolve the command name from raw argv for paths where yargs validation
+ * fails before middleware runs (e.g. a missing required argument).
+ *
+ * Returns the first token that resolves to a KNOWN top-level command. Tokens
+ * are matched against the command registry rather than trusting position, so
+ * an option value preceding the command (e.g. `--api-key sk_live_… org` or
+ * `--mode ci org`) can never be recorded as the command name — that would leak
+ * secrets/values into telemetry and explode cardinality. Anything that isn't a
+ * known command (typos, stray values, `--help`) returns 'root', which is
+ * skipped. Only the top-level command is recorded; later positionals can be
+ * user values (org names, emails, IDs), so they are never included.
+ */
+export declare function resolveCommandNameFromRawArgs(rawArgs: string[]): string;
+export declare function extractUserFlags(rawArgs: string[]): string[];

package/dist/utils/command-telemetry.js

@@ -0,0 +1,67 @@
+import { COMMAND_ALIASES } from '../lib/command-aliases.js';
+import { getTopLevelCommandNames } from './help-json.js';
+let knownTopLevelCommands = null;
+/** Canonical top-level command heads (registry + alias targets), memoized. */
+function topLevelCommands() {
+    if (!knownTopLevelCommands) {
+        const names = new Set(getTopLevelCommandNames());
+        // Alias targets resolve to a canonical head (e.g. claim -> env.claim -> env).
+        for (const target of Object.values(COMMAND_ALIASES)) {
+            names.add(target.split('.')[0]);
+        }
+        knownTopLevelCommands = names;
+    }
+    return knownTopLevelCommands;
+}
+export const SKIP_TELEMETRY_COMMANDS = new Set(['install', 'dashboard', 'root', 'telemetry']);
+export function resolveCanonicalName(parts) {
+    if (parts.length === 0)
+        return 'root';
+    const resolved = [...parts];
+    resolved[0] = COMMAND_ALIASES[resolved[0]] ?? resolved[0];
+    return resolved.join('.');
+}
+/**
+ * Resolve the command name from raw argv for paths where yargs validation
+ * fails before middleware runs (e.g. a missing required argument).
+ *
+ * Returns the first token that resolves to a KNOWN top-level command. Tokens
+ * are matched against the command registry rather than trusting position, so
+ * an option value preceding the command (e.g. `--api-key sk_live_… org` or
+ * `--mode ci org`) can never be recorded as the command name — that would leak
+ * secrets/values into telemetry and explode cardinality. Anything that isn't a
+ * known command (typos, stray values, `--help`) returns 'root', which is
+ * skipped. Only the top-level command is recorded; later positionals can be
+ * user values (org names, emails, IDs), so they are never included.
+ */
+export function resolveCommandNameFromRawArgs(rawArgs) {
+    const known = topLevelCommands();
+    for (const token of rawArgs) {
+        if (token.startsWith('-'))
+            continue;
+        const canonical = resolveCanonicalName([token]);
+        if (known.has(canonical.split('.')[0]))
+            return canonical;
+    }
+    return 'root';
+}
+export function extractUserFlags(rawArgs) {
+    const passedFlags = rawArgs
+        .filter((arg) => {
+        // `--` is the positional separator, not a flag.
+        if (arg === '--')
+            return false;
+        // Long flags: --name or --name=value (must start with a letter, so
+        // negative numbers like -1 / --1 are not mistaken for flags).
+        if (/^--[A-Za-z][\w-]*(=.*)?$/.test(arg))
+            return true;
+        // Short flags: a single letter, e.g. -v.
+        if (/^-[A-Za-z]$/.test(arg))
+            return true;
+        return false;
+    })
+        .map((arg) => arg.replace(/^-+/, '').split('=')[0])
+        .filter(Boolean);
+    return [...new Set(passedFlags)];
+}
+//# sourceMappingURL=command-telemetry.js.map

package/dist/utils/command-telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-telemetry.js","sourceRoot":"","sources":["../../src/utils/command-telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,IAAI,qBAAqB,GAAuB,IAAI,CAAC;AAErD,8EAA8E;AAC9E,SAAS,gBAAgB;IACvB,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,uBAAuB,EAAE,CAAC,CAAC;QACjD,8EAA8E;QAC9E,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;YACpD,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,qBAAqB,GAAG,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAE9F,MAAM,UAAU,oBAAoB,CAAC,KAAe;IAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC5B,QAAQ,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1D,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAAiB;IAC7D,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,MAAM,SAAS,GAAG,oBAAoB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAiB;IAChD,MAAM,WAAW,GAAG,OAAO;SACxB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QACd,gDAAgD;QAChD,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC/B,mEAAmE;QACnE,8DAA8D;QAC9D,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACtD,yCAAyC;QACzC,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;SAClD,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;AACnC,CAAC","sourcesContent":["import { COMMAND_ALIASES } from '../lib/command-aliases.js';\nimport { getTopLevelCommandNames } from './help-json.js';\n\nlet knownTopLevelCommands: Set<string> | null = null;\n\n/** Canonical top-level command heads (registry + alias targets), memoized. */\nfunction topLevelCommands(): Set<string> {\n  if (!knownTopLevelCommands) {\n    const names = new Set(getTopLevelCommandNames());\n    // Alias targets resolve to a canonical head (e.g. claim -> env.claim -> env).\n    for (const target of Object.values(COMMAND_ALIASES)) {\n      names.add(target.split('.')[0]);\n    }\n    knownTopLevelCommands = names;\n  }\n  return knownTopLevelCommands;\n}\n\nexport const SKIP_TELEMETRY_COMMANDS = new Set(['install', 'dashboard', 'root', 'telemetry']);\n\nexport function resolveCanonicalName(parts: string[]): string {\n  if (parts.length === 0) return 'root';\n  const resolved = [...parts];\n  resolved[0] = COMMAND_ALIASES[resolved[0]] ?? resolved[0];\n  return resolved.join('.');\n}\n\n/**\n * Resolve the command name from raw argv for paths where yargs validation\n * fails before middleware runs (e.g. a missing required argument).\n *\n * Returns the first token that resolves to a KNOWN top-level command. Tokens\n * are matched against the command registry rather than trusting position, so\n * an option value preceding the command (e.g. `--api-key sk_live_… org` or\n * `--mode ci org`) can never be recorded as the command name — that would leak\n * secrets/values into telemetry and explode cardinality. Anything that isn't a\n * known command (typos, stray values, `--help`) returns 'root', which is\n * skipped. Only the top-level command is recorded; later positionals can be\n * user values (org names, emails, IDs), so they are never included.\n */\nexport function resolveCommandNameFromRawArgs(rawArgs: string[]): string {\n  const known = topLevelCommands();\n  for (const token of rawArgs) {\n    if (token.startsWith('-')) continue;\n    const canonical = resolveCanonicalName([token]);\n    if (known.has(canonical.split('.')[0])) return canonical;\n  }\n  return 'root';\n}\n\nexport function extractUserFlags(rawArgs: string[]): string[] {\n  const passedFlags = rawArgs\n    .filter((arg) => {\n      // `--` is the positional separator, not a flag.\n      if (arg === '--') return false;\n      // Long flags: --name or --name=value (must start with a letter, so\n      // negative numbers like -1 / --1 are not mistaken for flags).\n      if (/^--[A-Za-z][\\w-]*(=.*)?$/.test(arg)) return true;\n      // Short flags: a single letter, e.g. -v.\n      if (/^-[A-Za-z]$/.test(arg)) return true;\n      return false;\n    })\n    .map((arg) => arg.replace(/^-+/, '').split('=')[0])\n    .filter(Boolean);\n  return [...new Set(passedFlags)];\n}\n"]}

package/dist/utils/crash-reporter.d.ts

@@ -0,0 +1,13 @@
+/** Sanitize stack trace for telemetry: homedir, absolute-path collapse, secrets, truncation. */
+export declare function sanitizeStack(stack: string | undefined): string;
+/** Sanitize an error message for telemetry (homedir, secrets, truncation). */
+export declare function sanitizeMessage(msg: string | undefined): string;
+/**
+ * Register global handlers for uncaughtException and unhandledRejection
+ * that capture crash details before the process exits.
+ *
+ * Handlers are SYNCHRONOUS. Node does NOT await async uncaughtException handlers.
+ * We queue the event synchronously; store-forward's process.on('exit') handler
+ * persists it to disk. The next CLI invocation recovers and sends.
+ */
+export declare function installCrashReporter(): void;

package/dist/utils/crash-reporter.js

@@ -0,0 +1,91 @@
+import { analytics } from './analytics.js';
+import { CliExit } from './cli-exit.js';
+import { homedir } from 'node:os';
+// Hard ceiling the telemetry API enforces on every attribute value
+// (z.string().max(4096) in llm-gateway/types/telemetry-event.ts). The final
+// sanitized string — truncation marker included — MUST stay within this, or
+// the whole crash event fails Zod validation server-side and is silently
+// dropped. Reserve room for the marker so a truncated stack lands at exactly
+// MAX_STACK_LENGTH rather than overshooting it.
+const MAX_STACK_LENGTH = 4096;
+const STACK_TRUNCATION_MARKER = '\n...[truncated]';
+const MAX_MESSAGE_LENGTH = 1024;
+const HOME = homedir();
+let isCrashing = false;
+/**
+ * Redact known credential patterns (Bearer tokens, sk_test_/sk_live_ keys,
+ * raw JWTs). Shared by sanitizeStack and sanitizeMessage because Node echoes
+ * `.message` into the leading `Error.stack` line, so secrets in messages also
+ * surface in stacks.
+ */
+function redactSecrets(s) {
+    return s
+        .replace(/Bearer\s+[A-Za-z0-9._-]+/g, 'Bearer <redacted>')
+        .replace(/\bsk_(test|live)_[A-Za-z0-9]+/g, 'sk_<redacted>')
+        .replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g, '<jwt-redacted>');
+}
+/** Sanitize stack trace for telemetry: homedir, absolute-path collapse, secrets, truncation. */
+export function sanitizeStack(stack) {
+    if (!stack)
+        return '';
+    let sanitized = stack.replaceAll(HOME, '~');
+    // Collapse absolute paths to their leaf segment. POSIX and Windows separately —
+    // Windows paths (C:\...\node_modules\) bypass the POSIX regex and would
+    // otherwise leak full local filesystem paths into telemetry.
+    sanitized = sanitized
+        .replace(/\/[^\s:]+\/(node_modules|dist|src)\//g, '$1/')
+        .replace(/[A-Za-z]:\\[^\s:]+\\(node_modules|dist|src)\\/g, '$1\\');
+    sanitized = redactSecrets(sanitized);
+    return sanitized.length > MAX_STACK_LENGTH
+        ? sanitized.slice(0, MAX_STACK_LENGTH - STACK_TRUNCATION_MARKER.length) + STACK_TRUNCATION_MARKER
+        : sanitized;
+}
+/** Sanitize an error message for telemetry (homedir, secrets, truncation). */
+export function sanitizeMessage(msg) {
+    if (!msg)
+        return '';
+    const sanitized = redactSecrets(msg.replaceAll(HOME, '~'));
+    return sanitized.length > MAX_MESSAGE_LENGTH ? sanitized.slice(0, MAX_MESSAGE_LENGTH) + '...[truncated]' : sanitized;
+}
+/**
+ * Register global handlers for uncaughtException and unhandledRejection
+ * that capture crash details before the process exits.
+ *
+ * Handlers are SYNCHRONOUS. Node does NOT await async uncaughtException handlers.
+ * We queue the event synchronously; store-forward's process.on('exit') handler
+ * persists it to disk. The next CLI invocation recovers and sends.
+ */
+export function installCrashReporter() {
+    process.on('uncaughtException', (error) => {
+        // A CliExit that reaches here escaped the normal lifecycle (e.g. thrown
+        // from a fire-and-forget async event listener like `child.on('error')` in
+        // dev.ts). It is an intentional exit, NOT a crash — record no crash event,
+        // just honor the requested code.
+        if (error instanceof CliExit) {
+            process.exit(error.exitCode);
+        }
+        reportCrashSync(error);
+        process.exit(1);
+    });
+    process.on('unhandledRejection', (reason) => {
+        if (reason instanceof CliExit) {
+            process.exit(reason.exitCode);
+        }
+        const error = reason instanceof Error ? reason : new Error(String(reason));
+        reportCrashSync(error);
+        process.exit(1);
+    });
+}
+function reportCrashSync(error) {
+    if (isCrashing)
+        return;
+    isCrashing = true;
+    try {
+        // captureUnhandledCrash sanitizes both message and stack at the analytics boundary.
+        analytics.captureUnhandledCrash(error);
+    }
+    catch {
+        // Telemetry must never prevent exit
+    }
+}
+//# sourceMappingURL=crash-reporter.js.map

package/dist/utils/crash-reporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crash-reporter.js","sourceRoot":"","sources":["../../src/utils/crash-reporter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,mEAAmE;AACnE,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,gDAAgD;AAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AACnD,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;AACvB,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB;;;;;GAKG;AACH,SAAS,aAAa,CAAC,CAAS;IAC9B,OAAO,CAAC;SACL,OAAO,CAAC,2BAA2B,EAAE,mBAAmB,CAAC;SACzD,OAAO,CAAC,gCAAgC,EAAE,eAAe,CAAC;SAC1D,OAAO,CAAC,sDAAsD,EAAE,gBAAgB,CAAC,CAAC;AACvF,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,IAAI,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5C,gFAAgF;IAChF,wEAAwE;IACxE,6DAA6D;IAC7D,SAAS,GAAG,SAAS;SAClB,OAAO,CAAC,uCAAuC,EAAE,KAAK,CAAC;SACvD,OAAO,CAAC,gDAAgD,EAAE,MAAM,CAAC,CAAC;IACrE,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACrC,OAAO,SAAS,CAAC,MAAM,GAAG,gBAAgB;QACxC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,GAAG,uBAAuB,CAAC,MAAM,CAAC,GAAG,uBAAuB;QACjG,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,GAAuB;IACrD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,OAAO,SAAS,CAAC,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;AACvH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE;QACxC,wEAAwE;QACxE,0EAA0E;QAC1E,2EAA2E;QAC3E,iCAAiC;QACjC,IAAI,KAAK,YAAY,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QACD,eAAe,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1C,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3E,eAAe,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,KAAY;IACnC,IAAI,UAAU;QAAE,OAAO;IACvB,UAAU,GAAG,IAAI,CAAC;IAClB,IAAI,CAAC;QACH,oFAAoF;QACpF,SAAS,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;AACH,CAAC","sourcesContent":["import { analytics } from './analytics.js';\nimport { CliExit } from './cli-exit.js';\nimport { homedir } from 'node:os';\n\n// Hard ceiling the telemetry API enforces on every attribute value\n// (z.string().max(4096) in llm-gateway/types/telemetry-event.ts). The final\n// sanitized string — truncation marker included — MUST stay within this, or\n// the whole crash event fails Zod validation server-side and is silently\n// dropped. Reserve room for the marker so a truncated stack lands at exactly\n// MAX_STACK_LENGTH rather than overshooting it.\nconst MAX_STACK_LENGTH = 4096;\nconst STACK_TRUNCATION_MARKER = '\\n...[truncated]';\nconst MAX_MESSAGE_LENGTH = 1024;\nconst HOME = homedir();\nlet isCrashing = false;\n\n/**\n * Redact known credential patterns (Bearer tokens, sk_test_/sk_live_ keys,\n * raw JWTs). Shared by sanitizeStack and sanitizeMessage because Node echoes\n * `.message` into the leading `Error.stack` line, so secrets in messages also\n * surface in stacks.\n */\nfunction redactSecrets(s: string): string {\n  return s\n    .replace(/Bearer\\s+[A-Za-z0-9._-]+/g, 'Bearer <redacted>')\n    .replace(/\\bsk_(test|live)_[A-Za-z0-9]+/g, 'sk_<redacted>')\n    .replace(/\\beyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+/g, '<jwt-redacted>');\n}\n\n/** Sanitize stack trace for telemetry: homedir, absolute-path collapse, secrets, truncation. */\nexport function sanitizeStack(stack: string | undefined): string {\n  if (!stack) return '';\n  let sanitized = stack.replaceAll(HOME, '~');\n  // Collapse absolute paths to their leaf segment. POSIX and Windows separately —\n  // Windows paths (C:\\...\\node_modules\\) bypass the POSIX regex and would\n  // otherwise leak full local filesystem paths into telemetry.\n  sanitized = sanitized\n    .replace(/\\/[^\\s:]+\\/(node_modules|dist|src)\\//g, '$1/')\n    .replace(/[A-Za-z]:\\\\[^\\s:]+\\\\(node_modules|dist|src)\\\\/g, '$1\\\\');\n  sanitized = redactSecrets(sanitized);\n  return sanitized.length > MAX_STACK_LENGTH\n    ? sanitized.slice(0, MAX_STACK_LENGTH - STACK_TRUNCATION_MARKER.length) + STACK_TRUNCATION_MARKER\n    : sanitized;\n}\n\n/** Sanitize an error message for telemetry (homedir, secrets, truncation). */\nexport function sanitizeMessage(msg: string | undefined): string {\n  if (!msg) return '';\n  const sanitized = redactSecrets(msg.replaceAll(HOME, '~'));\n  return sanitized.length > MAX_MESSAGE_LENGTH ? sanitized.slice(0, MAX_MESSAGE_LENGTH) + '...[truncated]' : sanitized;\n}\n\n/**\n * Register global handlers for uncaughtException and unhandledRejection\n * that capture crash details before the process exits.\n *\n * Handlers are SYNCHRONOUS. Node does NOT await async uncaughtException handlers.\n * We queue the event synchronously; store-forward's process.on('exit') handler\n * persists it to disk. The next CLI invocation recovers and sends.\n */\nexport function installCrashReporter(): void {\n  process.on('uncaughtException', (error) => {\n    // A CliExit that reaches here escaped the normal lifecycle (e.g. thrown\n    // from a fire-and-forget async event listener like `child.on('error')` in\n    // dev.ts). It is an intentional exit, NOT a crash — record no crash event,\n    // just honor the requested code.\n    if (error instanceof CliExit) {\n      process.exit(error.exitCode);\n    }\n    reportCrashSync(error);\n    process.exit(1);\n  });\n\n  process.on('unhandledRejection', (reason) => {\n    if (reason instanceof CliExit) {\n      process.exit(reason.exitCode);\n    }\n    const error = reason instanceof Error ? reason : new Error(String(reason));\n    reportCrashSync(error);\n    process.exit(1);\n  });\n}\n\nfunction reportCrashSync(error: Error): void {\n  if (isCrashing) return;\n  isCrashing = true;\n  try {\n    // captureUnhandledCrash sanitizes both message and stack at the analytics boundary.\n    analytics.captureUnhandledCrash(error);\n  } catch {\n    // Telemetry must never prevent exit\n  }\n}\n"]}

package/dist/utils/debug.d.ts

@@ -5,4 +5,5 @@ export declare function logWarn(...args: unknown[]): void;
 export declare function logVisibleWarn(...args: unknown[]): void;
 export declare function logError(...args: unknown[]): void;
 export declare function debug(...args: unknown[]): void;
+export declare function isDebugEnabled(): boolean;
 export declare function enableDebugLogs(): void;

package/dist/utils/debug.js

@@ -91,11 +91,14 @@ export function logError(...args) {
     writeLog('ERROR', '❌', args);
 }
 export function debug(...args) {
-    if (!debugEnabled || isJsonMode())
+    if (!isDebugEnabled())
         return;
     const msg = args.map((a) => prepareMessage(a)).join(' ');
     clack.log.info(chalk.dim(msg));
 }
+export function isDebugEnabled() {
+    return debugEnabled && !isJsonMode();
+}
 export function enableDebugLogs() {
     debugEnabled = true;
 }

package/dist/utils/debug.js.map

@@ -1 +1 @@
-{"version":3,"file":"debug.js","sourceRoot":"","sources":["../../src/utils/debug.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACpF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,IAAI,YAAY,GAAG,KAAK,CAAC;AACzB,IAAI,cAAc,GAAkB,IAAI,CAAC;AAEzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AACnD,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,SAAS,YAAY;IACnB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC;aAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aAC5D,IAAI,EAAE,CAAC;QAEV,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,cAAc,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;QACrC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,SAAS,MAAM,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mCAAmC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;QACnH,cAAc,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAgC,EAAE,KAAa,EAAE,IAAe;IAChF,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvG,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEjE,oCAAoC;IACpC,IAAI,YAAY,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QAC1F,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,oBAAoB;IACpB,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,cAAc,CAAC,cAAc,EAAE,IAAI,SAAS,KAAK,KAAK,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAG,IAAe;IACxC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAG,IAAe;IACxC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAG,IAAe;IAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAG,IAAe;IACzC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,GAAG,IAAe;IACtC,IAAI,CAAC,YAAY,IAAI,UAAU,EAAE;QAAE,OAAO;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC","sourcesContent":["import { appendFileSync, existsSync, mkdirSync, readdirSync, unlinkSync } from 'fs';\nimport { join } from 'path';\nimport { homedir } from 'os';\nimport chalk from 'chalk';\nimport { prepareMessage } from './logging.js';\nimport { redactCredentials } from './redact.js';\nimport clack from './clack.js';\nimport { isJsonMode } from './output.js';\n\nlet debugEnabled = false;\nlet sessionLogPath: string | null = null;\n\nconst LOG_DIR = join(homedir(), '.workos', 'logs');\nconst MAX_LOG_FILES = 10;\n\nfunction ensureLogDir(): string {\n  if (!existsSync(LOG_DIR)) {\n    mkdirSync(LOG_DIR, { recursive: true });\n  }\n  return LOG_DIR;\n}\n\nfunction getSafeTimestamp(): string {\n  return new Date().toISOString().replace(/:/g, '-');\n}\n\nfunction rotateLogFiles(): void {\n  try {\n    const dir = ensureLogDir();\n    const files = readdirSync(dir)\n      .filter((f) => f.startsWith('workos-') && f.endsWith('.log'))\n      .sort();\n\n    const toDelete = files.slice(0, Math.max(0, files.length - MAX_LOG_FILES + 1));\n    for (const file of toDelete) {\n      try {\n        unlinkSync(join(dir, file));\n      } catch {\n        // Ignore deletion failures\n      }\n    }\n  } catch {\n    // Ignore rotation failures\n  }\n}\n\nexport function initLogFile(): void {\n  try {\n    rotateLogFiles();\n    const dir = ensureLogDir();\n    const timestamp = getSafeTimestamp();\n    sessionLogPath = join(dir, `workos-${timestamp}.log`);\n\n    const header = `${'='.repeat(60)}\\nWorkOS AuthKit Installer Run: ${new Date().toISOString()}\\n${'='.repeat(60)}\\n`;\n    appendFileSync(sessionLogPath, header);\n  } catch {\n    sessionLogPath = null;\n  }\n}\n\nexport function getLogFilePath(): string | null {\n  return sessionLogPath;\n}\n\nfunction writeLog(level: 'INFO' | 'WARN' | 'ERROR', emoji: string, args: unknown[]): string {\n  const redactedArgs = args.map((a) => (typeof a === 'object' && a !== null ? redactCredentials(a) : a));\n  const msg = redactedArgs.map((a) => prepareMessage(a)).join(' ');\n\n  // Write to console if debug enabled\n  if (debugEnabled && !isJsonMode()) {\n    const color = level === 'ERROR' ? chalk.red : level === 'WARN' ? chalk.yellow : chalk.dim;\n    clack.log.info(color(`${emoji} ${msg}`));\n  }\n\n  // Write to log file\n  if (sessionLogPath) {\n    try {\n      const timestamp = new Date().toISOString();\n      appendFileSync(sessionLogPath, `[${timestamp}] ${emoji} ${level}: ${msg}\\n`);\n    } catch {\n      // Ignore write failures\n    }\n  }\n\n  return msg;\n}\n\nexport function logInfo(...args: unknown[]): void {\n  writeLog('INFO', 'ℹ️ ', args);\n}\n\nexport function logWarn(...args: unknown[]): void {\n  writeLog('WARN', '⚠️ ', args);\n}\n\nexport function logVisibleWarn(...args: unknown[]): void {\n  const msg = writeLog('WARN', '⚠️ ', args);\n  if (!debugEnabled && !isJsonMode()) {\n    console.error(chalk.yellow(`⚠️  ${msg}`));\n  }\n}\n\nexport function logError(...args: unknown[]): void {\n  writeLog('ERROR', '❌', args);\n}\n\nexport function debug(...args: unknown[]): void {\n  if (!debugEnabled || isJsonMode()) return;\n  const msg = args.map((a) => prepareMessage(a)).join(' ');\n  clack.log.info(chalk.dim(msg));\n}\n\nexport function enableDebugLogs(): void {\n  debugEnabled = true;\n}\n"]}
+{"version":3,"file":"debug.js","sourceRoot":"","sources":["../../src/utils/debug.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACpF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,IAAI,YAAY,GAAG,KAAK,CAAC;AACzB,IAAI,cAAc,GAAkB,IAAI,CAAC;AAEzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AACnD,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,SAAS,YAAY;IACnB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC;aAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aAC5D,IAAI,EAAE,CAAC;QAEV,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,cAAc,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;QACrC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,SAAS,MAAM,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mCAAmC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;QACnH,cAAc,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAgC,EAAE,KAAa,EAAE,IAAe;IAChF,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvG,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEjE,oCAAoC;IACpC,IAAI,YAAY,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QAC1F,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,oBAAoB;IACpB,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,cAAc,CAAC,cAAc,EAAE,IAAI,SAAS,KAAK,KAAK,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAG,IAAe;IACxC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAG,IAAe;IACxC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAG,IAAe;IAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAG,IAAe;IACzC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,GAAG,IAAe;IACtC,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,YAAY,IAAI,CAAC,UAAU,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC","sourcesContent":["import { appendFileSync, existsSync, mkdirSync, readdirSync, unlinkSync } from 'fs';\nimport { join } from 'path';\nimport { homedir } from 'os';\nimport chalk from 'chalk';\nimport { prepareMessage } from './logging.js';\nimport { redactCredentials } from './redact.js';\nimport clack from './clack.js';\nimport { isJsonMode } from './output.js';\n\nlet debugEnabled = false;\nlet sessionLogPath: string | null = null;\n\nconst LOG_DIR = join(homedir(), '.workos', 'logs');\nconst MAX_LOG_FILES = 10;\n\nfunction ensureLogDir(): string {\n  if (!existsSync(LOG_DIR)) {\n    mkdirSync(LOG_DIR, { recursive: true });\n  }\n  return LOG_DIR;\n}\n\nfunction getSafeTimestamp(): string {\n  return new Date().toISOString().replace(/:/g, '-');\n}\n\nfunction rotateLogFiles(): void {\n  try {\n    const dir = ensureLogDir();\n    const files = readdirSync(dir)\n      .filter((f) => f.startsWith('workos-') && f.endsWith('.log'))\n      .sort();\n\n    const toDelete = files.slice(0, Math.max(0, files.length - MAX_LOG_FILES + 1));\n    for (const file of toDelete) {\n      try {\n        unlinkSync(join(dir, file));\n      } catch {\n        // Ignore deletion failures\n      }\n    }\n  } catch {\n    // Ignore rotation failures\n  }\n}\n\nexport function initLogFile(): void {\n  try {\n    rotateLogFiles();\n    const dir = ensureLogDir();\n    const timestamp = getSafeTimestamp();\n    sessionLogPath = join(dir, `workos-${timestamp}.log`);\n\n    const header = `${'='.repeat(60)}\\nWorkOS AuthKit Installer Run: ${new Date().toISOString()}\\n${'='.repeat(60)}\\n`;\n    appendFileSync(sessionLogPath, header);\n  } catch {\n    sessionLogPath = null;\n  }\n}\n\nexport function getLogFilePath(): string | null {\n  return sessionLogPath;\n}\n\nfunction writeLog(level: 'INFO' | 'WARN' | 'ERROR', emoji: string, args: unknown[]): string {\n  const redactedArgs = args.map((a) => (typeof a === 'object' && a !== null ? redactCredentials(a) : a));\n  const msg = redactedArgs.map((a) => prepareMessage(a)).join(' ');\n\n  // Write to console if debug enabled\n  if (debugEnabled && !isJsonMode()) {\n    const color = level === 'ERROR' ? chalk.red : level === 'WARN' ? chalk.yellow : chalk.dim;\n    clack.log.info(color(`${emoji} ${msg}`));\n  }\n\n  // Write to log file\n  if (sessionLogPath) {\n    try {\n      const timestamp = new Date().toISOString();\n      appendFileSync(sessionLogPath, `[${timestamp}] ${emoji} ${level}: ${msg}\\n`);\n    } catch {\n      // Ignore write failures\n    }\n  }\n\n  return msg;\n}\n\nexport function logInfo(...args: unknown[]): void {\n  writeLog('INFO', 'ℹ️ ', args);\n}\n\nexport function logWarn(...args: unknown[]): void {\n  writeLog('WARN', '⚠️ ', args);\n}\n\nexport function logVisibleWarn(...args: unknown[]): void {\n  const msg = writeLog('WARN', '⚠️ ', args);\n  if (!debugEnabled && !isJsonMode()) {\n    console.error(chalk.yellow(`⚠️  ${msg}`));\n  }\n}\n\nexport function logError(...args: unknown[]): void {\n  writeLog('ERROR', '❌', args);\n}\n\nexport function debug(...args: unknown[]): void {\n  if (!isDebugEnabled()) return;\n  const msg = args.map((a) => prepareMessage(a)).join(' ');\n  clack.log.info(chalk.dim(msg));\n}\n\nexport function isDebugEnabled(): boolean {\n  return debugEnabled && !isJsonMode();\n}\n\nexport function enableDebugLogs(): void {\n  debugEnabled = true;\n}\n"]}

package/dist/utils/env-parser.js

@@ -4,7 +4,7 @@
  */
 export function parseEnvFile(content) {
     const result = {};
-    for (const line of content.split('\n')) {
+    for (const line of content.split(/\r?\n/)) {
         const trimmed = line.trim();
         if (trimmed && !trimmed.startsWith('#')) {
             const [key, ...valueParts] = trimmed.split('=');

package/dist/utils/env-parser.js.map

@@ -1 +1 @@
-{"version":3,"file":"env-parser.js","sourceRoot":"","sources":["../../src/utils/env-parser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/**\n * Parse a .env file into key-value pairs.\n * Handles comments, empty lines, and values containing '='.\n */\nexport function parseEnvFile(content: string): Record<string, string> {\n  const result: Record<string, string> = {};\n  for (const line of content.split('\\n')) {\n    const trimmed = line.trim();\n    if (trimmed && !trimmed.startsWith('#')) {\n      const [key, ...valueParts] = trimmed.split('=');\n      if (key) {\n        result[key] = valueParts.join('=');\n      }\n    }\n  }\n  return result;\n}\n"]}
+{"version":3,"file":"env-parser.js","sourceRoot":"","sources":["../../src/utils/env-parser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/**\n * Parse a .env file into key-value pairs.\n * Handles comments, empty lines, and values containing '='.\n */\nexport function parseEnvFile(content: string): Record<string, string> {\n  const result: Record<string, string> = {};\n  for (const line of content.split(/\\r?\\n/)) {\n    const trimmed = line.trim();\n    if (trimmed && !trimmed.startsWith('#')) {\n      const [key, ...valueParts] = trimmed.split('=');\n      if (key) {\n        result[key] = valueParts.join('=');\n      }\n    }\n  }\n  return result;\n}\n"]}

package/dist/utils/exec-file.js

@@ -1,4 +1,5 @@
 import { spawn } from 'node:child_process';
+import { SPAWN_OPTS } from './platform.js';
 /**
  * Execute a command without throwing on non-zero exit codes.
  * Returns { status, stdout, stderr } for all outcomes.
@@ -9,7 +10,7 @@ export function execFileNoThrow(command, args, options = {}) {
             cwd: options.cwd,
             env: options.env ?? process.env,
             timeout: options.timeout,
-            shell: false,
+            ...SPAWN_OPTS,
         });
         let stdout = '';
         let stderr = '';

package/dist/utils/exec-file.js.map

@@ -1 +1 @@
-{"version":3,"file":"exec-file.js","sourceRoot":"","sources":["../../src/utils/exec-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAc3C;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,IAAc,EAAE,UAAuB,EAAE;IACxF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;YAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAChC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAChC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,OAAO,CAAC;gBACN,MAAM,EAAE,IAAI,IAAI,CAAC;gBACjB,MAAM;gBACN,MAAM;aACP,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,OAAO,CAAC;gBACN,MAAM,EAAE,CAAC;gBACT,MAAM;gBACN,MAAM,EAAE,GAAG,CAAC,OAAO;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { spawn } from 'node:child_process';\n\nexport interface ExecResult {\n  status: number;\n  stdout: string;\n  stderr: string;\n}\n\nexport interface ExecOptions {\n  cwd?: string;\n  timeout?: number;\n  env?: NodeJS.ProcessEnv;\n}\n\n/**\n * Execute a command without throwing on non-zero exit codes.\n * Returns { status, stdout, stderr } for all outcomes.\n */\nexport function execFileNoThrow(command: string, args: string[], options: ExecOptions = {}): Promise<ExecResult> {\n  return new Promise((resolve) => {\n    const child = spawn(command, args, {\n      cwd: options.cwd,\n      env: options.env ?? process.env,\n      timeout: options.timeout,\n      shell: false,\n    });\n\n    let stdout = '';\n    let stderr = '';\n\n    child.stdout?.on('data', (data) => {\n      stdout += data.toString();\n    });\n\n    child.stderr?.on('data', (data) => {\n      stderr += data.toString();\n    });\n\n    child.on('close', (code) => {\n      resolve({\n        status: code ?? 1,\n        stdout,\n        stderr,\n      });\n    });\n\n    child.on('error', (err) => {\n      resolve({\n        status: 1,\n        stdout,\n        stderr: err.message,\n      });\n    });\n  });\n}\n"]}
+{"version":3,"file":"exec-file.js","sourceRoot":"","sources":["../../src/utils/exec-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAc3C;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,IAAc,EAAE,UAAuB,EAAE;IACxF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;YAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG,UAAU;SACd,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAChC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAChC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,OAAO,CAAC;gBACN,MAAM,EAAE,IAAI,IAAI,CAAC;gBACjB,MAAM;gBACN,MAAM;aACP,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,OAAO,CAAC;gBACN,MAAM,EAAE,CAAC;gBACT,MAAM;gBACN,MAAM,EAAE,GAAG,CAAC,OAAO;aACpB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { spawn } from 'node:child_process';\nimport { SPAWN_OPTS } from './platform.js';\n\nexport interface ExecResult {\n  status: number;\n  stdout: string;\n  stderr: string;\n}\n\nexport interface ExecOptions {\n  cwd?: string;\n  timeout?: number;\n  env?: NodeJS.ProcessEnv;\n}\n\n/**\n * Execute a command without throwing on non-zero exit codes.\n * Returns { status, stdout, stderr } for all outcomes.\n */\nexport function execFileNoThrow(command: string, args: string[], options: ExecOptions = {}): Promise<ExecResult> {\n  return new Promise((resolve) => {\n    const child = spawn(command, args, {\n      cwd: options.cwd,\n      env: options.env ?? process.env,\n      timeout: options.timeout,\n      ...SPAWN_OPTS,\n    });\n\n    let stdout = '';\n    let stderr = '';\n\n    child.stdout?.on('data', (data) => {\n      stdout += data.toString();\n    });\n\n    child.stderr?.on('data', (data) => {\n      stderr += data.toString();\n    });\n\n    child.on('close', (code) => {\n      resolve({\n        status: code ?? 1,\n        stdout,\n        stderr,\n      });\n    });\n\n    child.on('error', (err) => {\n      resolve({\n        status: 1,\n        stdout,\n        stderr: err.message,\n      });\n    });\n  });\n}\n"]}

package/dist/utils/exit-codes.d.ts

@@ -7,6 +7,7 @@
  * 4 = Authentication required
  */
 import { type StructuredError } from './output.js';
+import type { TerminationReason } from './telemetry-types.js';
 export declare const ExitCode: {
     readonly SUCCESS: 0;
     readonly GENERAL_ERROR: 1;
@@ -14,6 +15,10 @@ export declare const ExitCode: {
     readonly AUTH_REQUIRED: 4;
 };
 export type ExitCodeValue = (typeof ExitCode)[keyof typeof ExitCode];
+export declare function resolveErrorCode(code: string): {
+    reason: TerminationReason;
+    exit: ExitCodeValue;
+};
 /** Exit with a specific code, optionally writing a structured error first. */
 export declare function exitWithCode(code: ExitCodeValue, error?: StructuredError): never;
 /**

package/dist/utils/exit-codes.js

@@ -6,6 +6,7 @@
  * 2 = Cancelled (e.g., Ctrl+C, user cancelled prompt)
  * 4 = Authentication required
  */
+import { CliExit } from './cli-exit.js';
 import { outputError } from './output.js';
 import { formatWorkOSCommand } from './command-invocation.js';
 import { authLoginRecovery } from './recovery-hints.js';
@@ -16,12 +17,40 @@ export const ExitCode = {
     CANCELLED: 2,
     AUTH_REQUIRED: 4,
 };
+const ERROR_CODE_MAP = {
+    auth_required: { reason: 'auth_required', exit: ExitCode.AUTH_REQUIRED },
+    // resolveApiKey() emits `no_api_key` when no key is configured; semantically
+    // an auth failure, so it must not fall through to `validation_error`.
+    no_api_key: { reason: 'auth_required', exit: ExitCode.AUTH_REQUIRED },
+    cancelled: { reason: 'cancelled', exit: ExitCode.CANCELLED },
+};
+export function resolveErrorCode(code) {
+    const mapped = ERROR_CODE_MAP[code];
+    if (mapped)
+        return mapped;
+    if (code.startsWith('http_')) {
+        return { reason: 'api_error', exit: ExitCode.GENERAL_ERROR };
+    }
+    return { reason: 'validation_error', exit: ExitCode.GENERAL_ERROR };
+}
+function reasonForExitCode(code) {
+    if (code === ExitCode.AUTH_REQUIRED)
+        return 'auth_required';
+    if (code === ExitCode.CANCELLED)
+        return 'cancelled';
+    if (code === ExitCode.SUCCESS)
+        return 'success';
+    return 'validation_error';
+}
 /** Exit with a specific code, optionally writing a structured error first. */
 export function exitWithCode(code, error) {
     if (error) {
         outputError(error);
     }
-    process.exit(code);
+    throw new CliExit(code, {
+        reason: reasonForExitCode(code),
+        errorCode: error?.code,
+    });
 }
 /**
  * Convenience: exit with code 4 and auth-required error.