workos 0.16.0 → 0.17.1

package/dist/doctor/checks/auth-patterns.js

@@ -116,7 +116,7 @@ function checkSignoutGetHandler(ctx) {
                 message: 'Signout/logout route uses GET handler — vulnerable to CSRF and prefetch-triggered logouts',
                 filePath: relative(ctx.installDir, route),
                 remediation: 'Convert to a POST server action. GET routes with side effects are vulnerable to CSRF and will be triggered by Next.js link prefetching.',
-                docsUrl: 'https://workos.com/docs/authkit/sign-out',
+                docsUrl: 'https://workos.com/docs/authkit/nextjs#ending-the-session',
             });
         }
     }

package/dist/doctor/checks/auth-patterns.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-patterns.js","sourceRoot":"","sources":["../../../src/doctor/checks/auth-patterns.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAU3C,kBAAkB;AAElB,iDAAiD;AACjD,SAAS,QAAQ,CAAC,KAAe;IAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yDAAyD;AACzD,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,SAAS,YAAY,CAAC,QAAgB,EAAE,OAAe;IACrD,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAE3F;;;GAGG;AACH,SAAS,gBAAgB,CAAC,GAAW,EAAE,WAAmB,EAAE,QAAQ,GAAG,CAAC;IACtE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAErC,SAAS,IAAI,CAAC,UAAkB,EAAE,KAAa;QAC7C,IAAI,KAAK,GAAG,QAAQ;YAAE,OAAO;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACjE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC/C,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;oBACzB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;wBAChC,IAAI,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;qBAAM,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC5D,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACb,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACzE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACrG,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uDAAuD;AACvD,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;QACrD,IAAI,OAAO;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAWD,4BAA4B;AAE5B,oEAAoE;AACpE,SAAS,aAAa,CAAC,UAAkB;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAiB;IAC/C,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvF,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,yDAAyD,CAAC;IAE7E,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,2FAA2F;gBACpG,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC;gBACzC,WAAW,EACT,yIAAyI;gBAC3I,OAAO,EAAE,0CAA0C;aACpD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAiB;IACjD,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC1D,oDAAoD;IACpD,MAAM,YAAY,GAAG,gEAAgE,CAAC;IAEtF,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,QAAQ,EAAE,SAAS;gBACnB,OAAO,EACL,oHAAoH;gBACtH,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC;gBACxC,WAAW,EACT,mGAAmG;aACtG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAiB;IAC/C,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAEhD,MAAM,eAAe,GAAG;QACtB,eAAe;QACf,eAAe;QACf,UAAU;QACV,UAAU;QACV,mBAAmB;QACnB,mBAAmB;QACnB,cAAc;QACd,cAAc;KACf,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IAEtC,IAAI,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzC,OAAO;QACL;YACE,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,mFAAmF;YAC5F,WAAW,EAAE,oGAAoG;YACjH,OAAO,EAAE,mDAAmD;SAC7D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,GAAiB;IACrD,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAEhD,MAAM,UAAU,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,uBAAuB,CAAC,CAAC,GAAG,CACjH,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAC/B,CAAC;IAEF,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAEtB,OAAO;QACL;YACE,IAAI,EAAE,2BAA2B;YACjC,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,6EAA6E;YACtF,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC;YACzC,WAAW,EAAE,2EAA2E;YACxF,OAAO,EAAE,mDAAmD;SAC7D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAiB;IACpD,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACrC,WAAW,CAAC,IAAI,CACd,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,CAAC,EACzC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,CAAC,EACzC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,EAChD,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CACjD,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;QAC5F,WAAW,CAAC,IAAI,CACd,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,EACtC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,EACtC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,EACvC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,CACxC,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC,CAAC,sCAAsC;IAElE,IAAI,YAAY,CAAC,UAAU,EAAE,iBAAiB,CAAC;QAAE,OAAO,EAAE,CAAC;IAE3D,OAAO;QACL;YACE,IAAI,EAAE,0BAA0B;YAChC,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,oFAAoF;YAC7F,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC;YAC9C,WAAW,EAAE,0DAA0D;YACvE,OAAO,EAAE,8CAA8C;SACxD;KACF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,SAAS,mBAAmB,CAAC,GAAiB;IAC5C,0EAA0E;IAC1E,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,WAAW,GACf,UAAU,CAAC,mBAAmB,IAAI,UAAU,CAAC,+BAA+B,IAAI,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC;IAE9G,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC,SAAS,CAAC,oBAAoB,IAAI,IAAI,CAAC;AACpD,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAiB;IAClD,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAE7B,qDAAqD;IACrD,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACrC,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB;QACpE,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;YACxC,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC7C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACjD,2EAA2E;QAC3E,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YAC7C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;YAC5E,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;SAAM,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACnD,2EAA2E;QAC3E,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YACpC,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC7C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC7E,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,IAAI,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,OAAO;QACL;YACE,IAAI,EAAE,wBAAwB;YAC9B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,4CAA4C,YAAY,EAAE;YACnE,WAAW,EAAE,kFAAkF;YAC/F,OAAO,EAAE,8CAA8C;SACxD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;AAEpF,SAAS,yBAAyB,CAAC,GAAiB;IAClD,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,MAAM,eAAe,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,eAAe;YAAE,SAAS;QAE/B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAChD,MAAM,aAAa,GAAG,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;QAErF,IAAI,QAAQ,IAAI,aAAa,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,0BAA0B;gBAChC,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,wDAAwD,GAAG,EAAE;gBACtE,WAAW,EAAE,4HAA4H;aAC1I,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAiB;IACjD,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,YAAY,GAAG,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC;IACxD,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAE7B,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAElC,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAC7C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QAC5E,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC7C,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC,CAAC,6BAA6B;IAE3D,sEAAsE;IACtE,IAAI,YAAY,CAAC,YAAY,EAAE,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;QAC7F,OAAO;YACL;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,yDAAyD;gBAClE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC;gBAChD,WAAW,EACT,wHAAwH;aAC3H;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAiB;IACnD,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,EAAE,CAAC;IAErD,MAAM,SAAS,GAAG,CAAC,cAAc,EAAE,cAAc,EAAE,uBAAuB,EAAE,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7G,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CACxB,CAAC;IAEF,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzB,IAAI,YAAY,CAAC,QAAQ,EAAE,eAAe,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvD,OAAO;QACL;YACE,IAAI,EAAE,0BAA0B;YAChC,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,iFAAiF;YAC1F,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC;YAC5C,WAAW,EAAE,6EAA6E;SAC3F;KACF,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,GAAiB;IACtD,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,EAAE,CAAC;IAEvD,MAAM,UAAU,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9F,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CACxB,CAAC;IAEF,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC,CAAC,0CAA0C;IAErE,IAAI,YAAY,CAAC,SAAS,EAAE,mBAAmB,CAAC;QAAE,OAAO,EAAE,CAAC;IAE5D,OAAO;QACL;YACE,IAAI,EAAE,4BAA4B;YAClC,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,sFAAsF;YAC/F,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC;YAC7C,WAAW,EACT,+DAA+D;gBAC/D,+EAA+E;gBAC/E,6EAA6E;SAChF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAiB;IACpD,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,EAAE,CAAC;IAEhG,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,sBAAsB,CAAC;IAEnD,qFAAqF;IACrF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAElD,OAAO;QACL;YACE,IAAI,EAAE,2BAA2B;YACjC,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,6BAA6B,QAAQ,CAAC,MAAM,yDAAyD;YAC9G,WAAW,EAAE,0EAA0E;SACxF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAE9D,SAAS,uBAAuB,CAAC,GAAiB;IAChD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAElE,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;IAC9E,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACpF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE1C,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IACjF,IAAI,cAAc;QAAE,OAAO,EAAE,CAAC;IAE9B,OAAO;QACL;YACE,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,qGAAqG;YAC9G,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;YACpD,WAAW,EACT,uJAAuJ;YACzJ,OAAO,EAAE,wCAAwC;SAClD;KACF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAE5E,MAAM,iBAAiB,GAAG,uDAAuD,CAAC;AAClF,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEpH,SAAS,yBAAyB,CAAC,YAAoB;IACrD,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,8BAA8B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,OAAO,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAiB;IAC5C,MAAM,eAAe,GAAG,iCAAiC,CAAC;IAC1D,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAE1C,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,yBAAyB,CAAC,YAAY,CAAC;YAAE,SAAS;QACtD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,yCAAyC;gBAClD,QAAQ,EAAE,YAAY;gBACtB,WAAW,EACT,4GAA4G;aAC/G,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAiB;IAClD,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IAE9C,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,SAAS,GACb,SAAS,KAAK,IAAI;YAClB,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;gBACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,EAAE;oBAAE,OAAO,KAAK,CAAC;gBAC5D,OAAO,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,MAAM,CAAC;YAClG,CAAC,CAAC,CAAC;QAEL,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,yBAAyB;gBAC/B,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,GAAG,OAAO,qEAAqE;gBACxF,QAAQ,EAAE,OAAO;gBACjB,WAAW,EAAE,OAAO,OAAO,2BAA2B;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,gCAAgC,CAAC,GAAiB;IACzD,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,UAAU,CAAC,cAAc,CAAC;IACzC,MAAM,WAAW,GAAG,UAAU,CAAC,mBAAmB,IAAI,UAAU,CAAC,+BAA+B,CAAC;IAEjG,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAEhD,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,eAAe,GAAG,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,SAAS,IAAI,eAAe,EAAE,CAAC;QACjC,OAAO;YACL;gBACE,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,gEAAgE;gBACzE,WAAW,EACT,yGAAyG;aAC5G;SACF,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,IAAI,CAAC,eAAe,EAAE,CAAC;QAClC,OAAO;YACL;gBACE,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,kEAAkE;gBAC3E,WAAW,EACT,uGAAuG;aAC1G;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAMD,MAAM,sBAAsB,GAAc;IACxC,yBAAyB;IACzB,mBAAmB;IACnB,yBAAyB;IACzB,gCAAgC;IAChC,uBAAuB;CACxB,CAAC;AAEF,MAAM,aAAa,GAAc;IAC/B,sBAAsB;IACtB,wBAAwB;IACxB,sBAAsB;IACtB,4BAA4B;IAC5B,2BAA2B;IAC3B,yBAAyB;CAC1B,CAAC;AAEF,MAAM,mBAAmB,GAAc;IACrC,wBAAwB;IACxB,0BAA0B;IAC1B,2BAA2B;IAC3B,yBAAyB;IACzB,2BAA2B;CAC5B,CAAC;AAEF,MAAM,eAAe,GAAc;IACjC,6BAA6B;IAC7B,yBAAyB;IACzB,2BAA2B;CAC5B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAsB,EACtB,SAAwB,EACxB,WAA4B,EAC5B,GAAY;IAEZ,MAAM,GAAG,GAAiB;QACxB,SAAS;QACT,WAAW;QACX,GAAG;QACH,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC;IAEF,MAAM,MAAM,GAAc,CAAC,GAAG,sBAAsB,CAAC,CAAC;IAEtD,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,SAAS;YACZ,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;YAC9B,MAAM;QACR,KAAK,cAAc;YACjB,MAAM,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,CAAC;YACpC,MAAM;QACR,KAAK,gBAAgB;YACnB,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;YAChC,MAAM;IACV,CAAC;IAED,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,MAAM;QACxB,QAAQ;KACT,CAAC;AACJ,CAAC","sourcesContent":["import { existsSync, readFileSync, readdirSync } from 'node:fs';\nimport { join, relative } from 'node:path';\nimport type {\n  AuthPatternFinding,\n  AuthPatternInfo,\n  FrameworkInfo,\n  EnvironmentInfo,\n  SdkInfo,\n  DoctorOptions,\n} from '../types.js';\n\n// --- Helpers ---\n\n/** Return the first path that exists, or null */\nfunction findFile(paths: string[]): string | null {\n  for (const p of paths) {\n    if (existsSync(p)) return p;\n  }\n  return null;\n}\n\n/** Read file content safely, return null on any error */\nfunction readFileSafe(filePath: string): string | null {\n  try {\n    return readFileSync(filePath, 'utf-8');\n  } catch {\n    return null;\n  }\n}\n\n/** Test if a file exists and its content matches a regex */\nfunction fileContains(filePath: string, pattern: RegExp): boolean {\n  const content = readFileSafe(filePath);\n  if (!content) return false;\n  return pattern.test(content);\n}\n\nconst SKIP_DIRS = new Set(['node_modules', '.next', '.turbo', 'dist', '.git', 'coverage']);\n\n/**\n * Find files matching a name pattern in a directory tree, limited to maxDepth levels.\n * Skips node_modules, .next, dist, etc.\n */\nfunction findFilesShallow(dir: string, namePattern: RegExp, maxDepth = 3): string[] {\n  const results: string[] = [];\n  if (!existsSync(dir)) return results;\n\n  function walk(currentDir: string, depth: number) {\n    if (depth > maxDepth) return;\n    try {\n      const dirents = readdirSync(currentDir, { withFileTypes: true });\n      for (const dirent of dirents) {\n        const fullPath = join(currentDir, dirent.name);\n        if (dirent.isDirectory()) {\n          if (!SKIP_DIRS.has(dirent.name)) {\n            walk(fullPath, depth + 1);\n          }\n        } else if (dirent.isFile() && namePattern.test(dirent.name)) {\n          results.push(fullPath);\n        }\n      }\n    } catch {\n      // Directory unreadable\n    }\n  }\n\n  walk(dir, 0);\n  return results;\n}\n\nfunction parseEnvFile(content: string): Record<string, string> {\n  const result: Record<string, string> = {};\n  for (const line of content.split(/\\r?\\n/)) {\n    const trimmed = line.trim();\n    if (!trimmed || trimmed.startsWith('#')) continue;\n    const entry = trimmed.startsWith('export ') ? trimmed.slice(7) : trimmed;\n    const eqIndex = entry.indexOf('=');\n    if (eqIndex === -1) continue;\n    const key = entry.slice(0, eqIndex).trim();\n    let value = entry.slice(eqIndex + 1).trim();\n    if ((value.startsWith('\"') && value.endsWith('\"')) || (value.startsWith(\"'\") && value.endsWith(\"'\"))) {\n      value = value.slice(1, -1);\n    }\n    result[key] = value;\n  }\n  return result;\n}\n\n/** Load all env vars from .env and .env.local files */\nfunction loadProjectEnvRaw(installDir: string): Record<string, string> {\n  const env: Record<string, string> = {};\n  for (const file of ['.env', '.env.local']) {\n    const content = readFileSafe(join(installDir, file));\n    if (content) Object.assign(env, parseEnvFile(content));\n  }\n  return env;\n}\n\n// --- Check Context ---\n\ninterface CheckContext {\n  framework: FrameworkInfo;\n  environment: EnvironmentInfo;\n  sdk: SdkInfo;\n  installDir: string;\n}\n\n// --- Individual Checks ---\n\n/** Resolve the app directory root (app/ or src/app/) for Next.js */\nfunction resolveAppDir(installDir: string): string | null {\n  const srcApp = join(installDir, 'src', 'app');\n  if (existsSync(srcApp)) return srcApp;\n  const app = join(installDir, 'app');\n  if (existsSync(app)) return app;\n  return null;\n}\n\nfunction checkSignoutGetHandler(ctx: CheckContext): AuthPatternFinding[] {\n  if (ctx.framework.name !== 'Next.js') return [];\n  const appDir = resolveAppDir(ctx.installDir);\n  if (!appDir) return [];\n\n  const routeFiles = findFilesShallow(appDir, /^route\\.(ts|tsx|js|jsx)$/);\n  const signoutRoutes = routeFiles.filter((f) => /[/\\\\](sign-?out|logout)[/\\\\]/.test(f));\n\n  const findings: AuthPatternFinding[] = [];\n  const GET_EXPORT = /export\\s+(async\\s+)?function\\s+GET|export\\s+const\\s+GET/;\n\n  for (const route of signoutRoutes) {\n    if (fileContains(route, GET_EXPORT)) {\n      findings.push({\n        code: 'SIGNOUT_GET_HANDLER',\n        severity: 'error',\n        message: 'Signout/logout route uses GET handler — vulnerable to CSRF and prefetch-triggered logouts',\n        filePath: relative(ctx.installDir, route),\n        remediation:\n          'Convert to a POST server action. GET routes with side effects are vulnerable to CSRF and will be triggered by Next.js link prefetching.',\n        docsUrl: 'https://workos.com/docs/authkit/sign-out',\n      });\n    }\n  }\n  return findings;\n}\n\nfunction checkSignoutLinkPrefetch(ctx: CheckContext): AuthPatternFinding[] {\n  if (ctx.framework.name !== 'Next.js') return [];\n  const appDir = resolveAppDir(ctx.installDir);\n  if (!appDir) return [];\n\n  const tsxFiles = findFilesShallow(appDir, /\\.(tsx|jsx)$/);\n  // Match <Link>, <NextLink>, or other common aliases\n  const LINK_PATTERN = /<(?:Next)?Link\\s[^>]*href\\s*=\\s*[\"'{`/]*(\\/sign-?out|\\/logout)/;\n\n  const findings: AuthPatternFinding[] = [];\n  for (const file of tsxFiles) {\n    if (fileContains(file, LINK_PATTERN)) {\n      findings.push({\n        code: 'SIGNOUT_LINK_PREFETCH',\n        severity: 'warning',\n        message:\n          'Link component points to signout/logout — Next.js will prefetch this in production, potentially triggering logouts',\n        filePath: relative(ctx.installDir, file),\n        remediation:\n          'Use a <form> with a server action or <button> with onClick handler instead of <Link> for signout.',\n      });\n    }\n  }\n  return findings;\n}\n\nfunction checkMissingMiddleware(ctx: CheckContext): AuthPatternFinding[] {\n  if (ctx.framework.name !== 'Next.js') return [];\n\n  const middlewarePaths = [\n    'middleware.ts',\n    'middleware.js',\n    'proxy.ts',\n    'proxy.js',\n    'src/middleware.ts',\n    'src/middleware.js',\n    'src/proxy.ts',\n    'src/proxy.js',\n  ].map((p) => join(ctx.installDir, p));\n\n  if (findFile(middlewarePaths)) return [];\n\n  return [\n    {\n      code: 'MISSING_MIDDLEWARE',\n      severity: 'error',\n      message: 'No middleware.ts or proxy.ts found — AuthKit session handling requires middleware',\n      remediation: 'Create middleware.ts at the project root with authkitMiddleware() from @workos-inc/authkit-nextjs.',\n      docsUrl: 'https://workos.com/docs/authkit/nextjs/middleware',\n    },\n  ];\n}\n\nfunction checkMiddlewareWrongLocation(ctx: CheckContext): AuthPatternFinding[] {\n  if (ctx.framework.name !== 'Next.js') return [];\n\n  const wrongPaths = ['app/middleware.ts', 'app/middleware.js', 'src/app/middleware.ts', 'src/app/middleware.js'].map(\n    (p) => join(ctx.installDir, p),\n  );\n\n  const found = findFile(wrongPaths);\n  if (!found) return [];\n\n  return [\n    {\n      code: 'MIDDLEWARE_WRONG_LOCATION',\n      severity: 'warning',\n      message: 'middleware.ts found inside app/ directory — must be at project root or src/',\n      filePath: relative(ctx.installDir, found),\n      remediation: 'Move middleware.ts to the project root (or src/ if using src/ directory).',\n      docsUrl: 'https://workos.com/docs/authkit/nextjs/middleware',\n    },\n  ];\n}\n\nfunction checkMissingAuthKitProvider(ctx: CheckContext): AuthPatternFinding[] {\n  const layoutPaths: string[] = [];\n\n  if (ctx.framework.name === 'Next.js') {\n    layoutPaths.push(\n      join(ctx.installDir, 'app', 'layout.tsx'),\n      join(ctx.installDir, 'app', 'layout.jsx'),\n      join(ctx.installDir, 'src', 'app', 'layout.tsx'),\n      join(ctx.installDir, 'src', 'app', 'layout.jsx'),\n    );\n  } else if (ctx.framework.name === 'React Router' && ctx.framework.variant === 'declarative') {\n    layoutPaths.push(\n      join(ctx.installDir, 'src', 'App.tsx'),\n      join(ctx.installDir, 'src', 'App.jsx'),\n      join(ctx.installDir, 'app', 'root.tsx'),\n      join(ctx.installDir, 'app', 'root.jsx'),\n    );\n  } else {\n    return [];\n  }\n\n  const layoutFile = findFile(layoutPaths);\n  if (!layoutFile) return []; // Can't check if layout doesn't exist\n\n  if (fileContains(layoutFile, /AuthKitProvider/)) return [];\n\n  return [\n    {\n      code: 'MISSING_AUTHKIT_PROVIDER',\n      severity: 'warning',\n      message: 'AuthKitProvider not found in root layout — required for AuthKit session management',\n      filePath: relative(ctx.installDir, layoutFile),\n      remediation: 'Wrap your app with <AuthKitProvider> in the root layout.',\n      docsUrl: 'https://workos.com/docs/authkit/nextjs/setup',\n    },\n  ];\n}\n\n/** Extract callback path from redirect URI env vars or framework default */\nfunction resolveCallbackPath(ctx: CheckContext): string | null {\n  // Check env vars for actual redirect URI (including NEXT_PUBLIC_ variant)\n  const projectEnv = loadProjectEnvRaw(ctx.installDir);\n  const redirectUri =\n    projectEnv.WORKOS_REDIRECT_URI ?? projectEnv.NEXT_PUBLIC_WORKOS_REDIRECT_URI ?? ctx.environment.redirectUri;\n\n  if (redirectUri) {\n    try {\n      return new URL(redirectUri).pathname;\n    } catch {\n      // Invalid URL, fall through to framework default\n    }\n  }\n\n  return ctx.framework.expectedCallbackPath ?? null;\n}\n\nfunction checkCallbackRouteMissing(ctx: CheckContext): AuthPatternFinding[] {\n  const callbackPath = resolveCallbackPath(ctx);\n  if (!callbackPath) return [];\n\n  // Build expected route file paths based on framework\n  const possiblePaths: string[] = [];\n\n  if (ctx.framework.name === 'Next.js') {\n    // app/auth/callback/route.ts (or src/app/)\n    const routeDir = callbackPath.replace(/^\\//, ''); // 'auth/callback'\n    for (const prefix of ['app', 'src/app']) {\n      for (const ext of ['ts', 'tsx', 'js', 'jsx']) {\n        possiblePaths.push(join(ctx.installDir, prefix, routeDir, `route.${ext}`));\n      }\n    }\n  } else if (ctx.framework.name === 'React Router') {\n    // Flat: app/routes/auth.callback.tsx  Nested: app/routes/auth/callback.tsx\n    const segments = callbackPath.replace(/^\\//, '').split('/');\n    const flat = segments.join('.');\n    const nested = segments.join('/');\n    for (const ext of ['tsx', 'jsx', 'ts', 'js']) {\n      possiblePaths.push(join(ctx.installDir, 'app', 'routes', `${flat}.${ext}`));\n      possiblePaths.push(join(ctx.installDir, 'app', 'routes', nested + `.${ext}`));\n    }\n  } else if (ctx.framework.name === 'TanStack Start') {\n    // Flat: routes/api.auth.callback.tsx  Nested: routes/api/auth/callback.tsx\n    // Both conventions work in both src/ and app/ directories\n    const segments = callbackPath.replace(/^\\//, '').split('/');\n    const flat = segments.join('.');\n    const nested = segments.join('/');\n    for (const prefix of ['src', 'app']) {\n      for (const ext of ['tsx', 'jsx', 'ts', 'js']) {\n        possiblePaths.push(join(ctx.installDir, prefix, 'routes', `${flat}.${ext}`));\n        possiblePaths.push(join(ctx.installDir, prefix, 'routes', nested + `.${ext}`));\n      }\n    }\n  }\n\n  if (possiblePaths.length === 0) return [];\n  if (findFile(possiblePaths)) return [];\n\n  return [\n    {\n      code: 'CALLBACK_ROUTE_MISSING',\n      severity: 'error',\n      message: `No callback route found at expected path ${callbackPath}`,\n      remediation: `Create the callback route handler at the path matching your WORKOS_REDIRECT_URI.`,\n      docsUrl: 'https://workos.com/docs/authkit/redirect-uri',\n    },\n  ];\n}\n\nconst CLIENT_ENV_PREFIXES = ['NEXT_PUBLIC_', 'VITE_', 'REACT_APP_', 'EXPO_PUBLIC_'];\n\nfunction checkApiKeyLeakedToClient(ctx: CheckContext): AuthPatternFinding[] {\n  const projectEnv = loadProjectEnvRaw(ctx.installDir);\n  const findings: AuthPatternFinding[] = [];\n\n  for (const [key, value] of Object.entries(projectEnv)) {\n    const hasClientPrefix = CLIENT_ENV_PREFIXES.some((prefix) => key.startsWith(prefix));\n    if (!hasClientPrefix) continue;\n\n    const isApiKey = key.includes('WORKOS_API_KEY');\n    const isSecretValue = value?.startsWith('sk_test_') || value?.startsWith('sk_live_');\n\n    if (isApiKey || isSecretValue) {\n      findings.push({\n        code: 'API_KEY_LEAKED_TO_CLIENT',\n        severity: 'error',\n        message: `Secret API key exposed via client-accessible env var ${key}`,\n        remediation: `Remove the client prefix. WORKOS_API_KEY must be server-only (no NEXT_PUBLIC_, VITE_, REACT_APP_, or EXPO_PUBLIC_ prefix).`,\n      });\n    }\n  }\n  return findings;\n}\n\nfunction checkWrongCallbackLoader(ctx: CheckContext): AuthPatternFinding[] {\n  if (ctx.framework.name !== 'React Router') return [];\n  const callbackPath = ctx.framework.expectedCallbackPath;\n  if (!callbackPath) return [];\n\n  const segments = callbackPath.replace(/^\\//, '').split('/');\n  const flat = segments.join('.');\n  const nested = segments.join('/');\n\n  const possiblePaths: string[] = [];\n  for (const ext of ['tsx', 'jsx', 'ts', 'js']) {\n    possiblePaths.push(join(ctx.installDir, 'app', 'routes', `${flat}.${ext}`));\n    possiblePaths.push(join(ctx.installDir, 'app', 'routes', nested + `.${ext}`));\n  }\n\n  const callbackFile = findFile(possiblePaths);\n  if (!callbackFile) return []; // No callback route to check\n\n  // authkitLoader is for regular routes; authLoader is for the callback\n  if (fileContains(callbackFile, /authkitLoader/) && !fileContains(callbackFile, /authLoader/)) {\n    return [\n      {\n        code: 'WRONG_CALLBACK_LOADER',\n        severity: 'warning',\n        message: 'Callback route uses authkitLoader instead of authLoader',\n        filePath: relative(ctx.installDir, callbackFile),\n        remediation:\n          'Use authLoader (not authkitLoader) for the callback route. authkitLoader is for regular routes that need auth context.',\n      },\n    ];\n  }\n  return [];\n}\n\nfunction checkMissingRootAuthLoader(ctx: CheckContext): AuthPatternFinding[] {\n  if (ctx.framework.name !== 'React Router') return [];\n\n  const rootPaths = ['app/root.tsx', 'app/root.jsx', 'app/routes/_index.tsx', 'app/routes/_index.jsx'].map((p) =>\n    join(ctx.installDir, p),\n  );\n\n  const rootFile = findFile(rootPaths);\n  if (!rootFile) return [];\n\n  if (fileContains(rootFile, /authkitLoader/)) return [];\n\n  return [\n    {\n      code: 'MISSING_ROOT_AUTH_LOADER',\n      severity: 'warning',\n      message: 'Root route does not use authkitLoader — child routes will not have auth context',\n      filePath: relative(ctx.installDir, rootFile),\n      remediation: 'Add authkitLoader to your root route so child routes can access auth state.',\n    },\n  ];\n}\n\nfunction checkMissingAuthkitMiddleware(ctx: CheckContext): AuthPatternFinding[] {\n  if (ctx.framework.name !== 'TanStack Start') return [];\n\n  const startPaths = ['src/start.ts', 'src/start.tsx', 'app/start.ts', 'app/start.tsx'].map((p) =>\n    join(ctx.installDir, p),\n  );\n\n  const startFile = findFile(startPaths);\n  if (!startFile) return []; // Can't check if start file doesn't exist\n\n  if (fileContains(startFile, /authkitMiddleware/)) return [];\n\n  return [\n    {\n      code: 'MISSING_AUTHKIT_MIDDLEWARE',\n      severity: 'warning',\n      message: 'start.ts does not reference authkitMiddleware — AuthKit session handling requires it',\n      filePath: relative(ctx.installDir, startFile),\n      remediation:\n        'Add authkitMiddleware to requestMiddleware in src/start.ts:\\n' +\n        '  import { authkitMiddleware } from \"@workos/authkit-tanstack-react-start\";\\n' +\n        '  export default createStart({ requestMiddleware: [authkitMiddleware()] });',\n    },\n  ];\n}\n\nfunction checkCookiePasswordTooShort(ctx: CheckContext): AuthPatternFinding[] {\n  if (ctx.framework.name !== 'React Router' && ctx.framework.name !== 'TanStack Start') return [];\n\n  const projectEnv = loadProjectEnvRaw(ctx.installDir);\n  const password = projectEnv.WORKOS_COOKIE_PASSWORD;\n\n  // Only warn if password is set but too short; missing password is a separate concern\n  if (!password || password.length >= 32) return [];\n\n  return [\n    {\n      code: 'COOKIE_PASSWORD_TOO_SHORT',\n      severity: 'warning',\n      message: `WORKOS_COOKIE_PASSWORD is ${password.length} characters — minimum 32 required for secure encryption`,\n      remediation: 'Set WORKOS_COOKIE_PASSWORD to a random string of at least 32 characters.',\n    },\n  ];\n}\n\nconst REACT_SPA_SDKS = new Set(['@workos-inc/authkit-react']);\n\nfunction checkMissingApiHostname(ctx: CheckContext): AuthPatternFinding[] {\n  if (!ctx.sdk.name || !REACT_SPA_SDKS.has(ctx.sdk.name)) return [];\n\n  const sourceFiles = findFilesShallow(ctx.installDir, /\\.(tsx|jsx|ts|js)$/, 4);\n  const providerFiles = sourceFiles.filter((f) => fileContains(f, /AuthKitProvider/));\n  if (providerFiles.length === 0) return [];\n\n  const hasApiHostname = providerFiles.some((f) => fileContains(f, /apiHostname/));\n  if (hasApiHostname) return [];\n\n  return [\n    {\n      code: 'MISSING_API_HOSTNAME',\n      severity: 'warning',\n      message: 'AuthKitProvider does not specify apiHostname — authorize requests will route through api.workos.com',\n      filePath: relative(ctx.installDir, providerFiles[0]),\n      remediation:\n        'Set the apiHostname prop on AuthKitProvider to your custom Authentication API domain (e.g. auth.example.com) to avoid routing through api.workos.com.',\n      docsUrl: 'https://workos.com/docs/custom-domains',\n    },\n  ];\n}\n\n// --- Cross-language checks (run for ALL projects, not just JS/AuthKit) ---\n\nconst SOURCE_EXTENSIONS = /\\.(ts|tsx|js|jsx|py|rb|go|java|kt|php|cs|swift|dart)$/;\nconst SECRET_SOURCE_IGNORED_SEGMENTS = new Set(['__fixtures__', '__tests__', 'evals', 'fixtures', 'test', 'tests']);\n\nfunction isIgnoredSecretSourcePath(relativePath: string): boolean {\n  const normalized = relativePath.replace(/\\\\/g, '/');\n  const parts = normalized.split('/');\n  if (parts.some((part) => SECRET_SOURCE_IGNORED_SEGMENTS.has(part))) return true;\n  return /\\.(spec|test)\\.[^.]+$/.test(normalized);\n}\n\nfunction checkApiKeyInSource(ctx: CheckContext): AuthPatternFinding[] {\n  const API_KEY_PATTERN = /sk_(test|live)_[A-Za-z0-9]{10,}/;\n  const sourceFiles = findFilesShallow(ctx.installDir, SOURCE_EXTENSIONS, 4);\n  const findings: AuthPatternFinding[] = [];\n\n  for (const file of sourceFiles) {\n    const relativePath = relative(ctx.installDir, file);\n    if (isIgnoredSecretSourcePath(relativePath)) continue;\n    const content = readFileSafe(file);\n    if (!content) continue;\n    if (API_KEY_PATTERN.test(content)) {\n      findings.push({\n        code: 'API_KEY_IN_SOURCE',\n        severity: 'error',\n        message: `WorkOS API key hardcoded in source file`,\n        filePath: relativePath,\n        remediation:\n          'Move the API key to an environment variable (WORKOS_API_KEY) and load it from .env or your secret manager.',\n      });\n    }\n  }\n  return findings;\n}\n\nfunction checkEnvFileNotGitignored(ctx: CheckContext): AuthPatternFinding[] {\n  const envFiles = ['.env', '.env.local'].filter((f) => existsSync(join(ctx.installDir, f)));\n  if (envFiles.length === 0) return [];\n\n  const gitignorePath = join(ctx.installDir, '.gitignore');\n  const gitignore = readFileSafe(gitignorePath);\n\n  const findings: AuthPatternFinding[] = [];\n  for (const envFile of envFiles) {\n    const isIgnored =\n      gitignore !== null &&\n      gitignore.split(/\\r?\\n/).some((line) => {\n        const trimmed = line.trim();\n        if (trimmed.startsWith('#') || trimmed === '') return false;\n        return trimmed === envFile || trimmed === '.env*' || trimmed === '.env.*' || trimmed === '.env';\n      });\n\n    if (!isIgnored) {\n      findings.push({\n        code: 'ENV_FILE_NOT_GITIGNORED',\n        severity: 'warning',\n        message: `${envFile} is not in .gitignore — secrets may be committed to version control`,\n        filePath: envFile,\n        remediation: `Add ${envFile} to your .gitignore file.`,\n      });\n    }\n  }\n  return findings;\n}\n\nfunction checkMixedEnvironmentCredentials(ctx: CheckContext): AuthPatternFinding[] {\n  const projectEnv = loadProjectEnvRaw(ctx.installDir);\n  const apiKey = projectEnv.WORKOS_API_KEY;\n  const redirectUri = projectEnv.WORKOS_REDIRECT_URI ?? projectEnv.NEXT_PUBLIC_WORKOS_REDIRECT_URI;\n\n  if (!apiKey || !redirectUri) return [];\n\n  const isTestKey = apiKey.startsWith('sk_test_');\n  const isLiveKey = apiKey.startsWith('sk_live_');\n\n  let isProductionUri = false;\n  try {\n    const url = new URL(redirectUri);\n    isProductionUri = url.hostname !== 'localhost' && !url.hostname.startsWith('127.0.0.');\n  } catch {\n    return [];\n  }\n\n  if (isTestKey && isProductionUri) {\n    return [\n      {\n        code: 'MIXED_ENVIRONMENT',\n        severity: 'warning',\n        message: 'Staging API key (sk_test_) used with a production redirect URI',\n        remediation:\n          'Use sk_live_ API key for production redirect URIs, or change the redirect URI to localhost for staging.',\n      },\n    ];\n  }\n\n  if (isLiveKey && !isProductionUri) {\n    return [\n      {\n        code: 'MIXED_ENVIRONMENT',\n        severity: 'warning',\n        message: 'Production API key (sk_live_) used with a localhost redirect URI',\n        remediation:\n          'Use sk_test_ API key for localhost development, or update the redirect URI to your production domain.',\n      },\n    ];\n  }\n\n  return [];\n}\n\n// --- Main Entry Point ---\n\ntype CheckFn = (ctx: CheckContext) => AuthPatternFinding[];\n\nconst CROSS_FRAMEWORK_CHECKS: CheckFn[] = [\n  checkApiKeyLeakedToClient,\n  checkApiKeyInSource,\n  checkEnvFileNotGitignored,\n  checkMixedEnvironmentCredentials,\n  checkMissingApiHostname,\n];\n\nconst NEXTJS_CHECKS: CheckFn[] = [\n  checkSignoutGetHandler,\n  checkSignoutLinkPrefetch,\n  checkMissingMiddleware,\n  checkMiddlewareWrongLocation,\n  checkMissingAuthKitProvider,\n  checkCallbackRouteMissing,\n];\n\nconst REACT_ROUTER_CHECKS: CheckFn[] = [\n  checkWrongCallbackLoader,\n  checkMissingRootAuthLoader,\n  checkMissingAuthKitProvider,\n  checkCallbackRouteMissing,\n  checkCookiePasswordTooShort,\n];\n\nconst TANSTACK_CHECKS: CheckFn[] = [\n  checkMissingAuthkitMiddleware,\n  checkCallbackRouteMissing,\n  checkCookiePasswordTooShort,\n];\n\nexport async function checkAuthPatterns(\n  options: DoctorOptions,\n  framework: FrameworkInfo,\n  environment: EnvironmentInfo,\n  sdk: SdkInfo,\n): Promise<AuthPatternInfo> {\n  const ctx: CheckContext = {\n    framework,\n    environment,\n    sdk,\n    installDir: options.installDir,\n  };\n\n  const checks: CheckFn[] = [...CROSS_FRAMEWORK_CHECKS];\n\n  switch (framework.name) {\n    case 'Next.js':\n      checks.push(...NEXTJS_CHECKS);\n      break;\n    case 'React Router':\n      checks.push(...REACT_ROUTER_CHECKS);\n      break;\n    case 'TanStack Start':\n      checks.push(...TANSTACK_CHECKS);\n      break;\n  }\n\n  const findings: AuthPatternFinding[] = [];\n  for (const check of checks) {\n    findings.push(...check(ctx));\n  }\n\n  return {\n    checksRun: checks.length,\n    findings,\n  };\n}\n"]}
+{"version":3,"file":"auth-patterns.js","sourceRoot":"","sources":["../../../src/doctor/checks/auth-patterns.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAU3C,kBAAkB;AAElB,iDAAiD;AACjD,SAAS,QAAQ,CAAC,KAAe;IAC/B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yDAAyD;AACzD,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,SAAS,YAAY,CAAC,QAAgB,EAAE,OAAe;IACrD,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAE3F;;;GAGG;AACH,SAAS,gBAAgB,CAAC,GAAW,EAAE,WAAmB,EAAE,QAAQ,GAAG,CAAC;IACtE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IAErC,SAAS,IAAI,CAAC,UAAkB,EAAE,KAAa;QAC7C,IAAI,KAAK,GAAG,QAAQ;YAAE,OAAO;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YACjE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC/C,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;oBACzB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;wBAChC,IAAI,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;oBAC5B,CAAC;gBACH,CAAC;qBAAM,IAAI,MAAM,CAAC,MAAM,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC5D,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uBAAuB;QACzB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACb,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACzE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAC7B,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACrG,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uDAAuD;AACvD,SAAS,iBAAiB,CAAC,UAAkB;IAC3C,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;QACrD,IAAI,OAAO;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAWD,4BAA4B;AAE5B,oEAAoE;AACpE,SAAS,aAAa,CAAC,UAAkB;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9C,IAAI,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACpC,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAChC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAiB;IAC/C,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,MAAM,UAAU,GAAG,gBAAgB,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvF,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,yDAAyD,CAAC;IAE7E,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,qBAAqB;gBAC3B,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,2FAA2F;gBACpG,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC;gBACzC,WAAW,EACT,yIAAyI;gBAC3I,OAAO,EAAE,2DAA2D;aACrE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAiB;IACjD,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC1D,oDAAoD;IACpD,MAAM,YAAY,GAAG,gEAAgE,CAAC;IAEtF,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,YAAY,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,QAAQ,EAAE,SAAS;gBACnB,OAAO,EACL,oHAAoH;gBACtH,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC;gBACxC,WAAW,EACT,mGAAmG;aACtG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAiB;IAC/C,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAEhD,MAAM,eAAe,GAAG;QACtB,eAAe;QACf,eAAe;QACf,UAAU;QACV,UAAU;QACV,mBAAmB;QACnB,mBAAmB;QACnB,cAAc;QACd,cAAc;KACf,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IAEtC,IAAI,QAAQ,CAAC,eAAe,CAAC;QAAE,OAAO,EAAE,CAAC;IAEzC,OAAO;QACL;YACE,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,mFAAmF;YAC5F,WAAW,EAAE,oGAAoG;YACjH,OAAO,EAAE,mDAAmD;SAC7D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,GAAiB;IACrD,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAEhD,MAAM,UAAU,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,uBAAuB,CAAC,CAAC,GAAG,CACjH,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAC/B,CAAC;IAEF,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAEtB,OAAO;QACL;YACE,IAAI,EAAE,2BAA2B;YACjC,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,6EAA6E;YACtF,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC;YACzC,WAAW,EAAE,2EAA2E;YACxF,OAAO,EAAE,mDAAmD;SAC7D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAiB;IACpD,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACrC,WAAW,CAAC,IAAI,CACd,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,CAAC,EACzC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,CAAC,EACzC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,EAChD,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,CACjD,CAAC;IACJ,CAAC;SAAM,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;QAC5F,WAAW,CAAC,IAAI,CACd,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,EACtC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,CAAC,EACtC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,EACvC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,CACxC,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC,CAAC,sCAAsC;IAElE,IAAI,YAAY,CAAC,UAAU,EAAE,iBAAiB,CAAC;QAAE,OAAO,EAAE,CAAC;IAE3D,OAAO;QACL;YACE,IAAI,EAAE,0BAA0B;YAChC,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,oFAAoF;YAC7F,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC;YAC9C,WAAW,EAAE,0DAA0D;YACvE,OAAO,EAAE,8CAA8C;SACxD;KACF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,SAAS,mBAAmB,CAAC,GAAiB;IAC5C,0EAA0E;IAC1E,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,WAAW,GACf,UAAU,CAAC,mBAAmB,IAAI,UAAU,CAAC,+BAA+B,IAAI,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC;IAE9G,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,CAAC;YACH,OAAO,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,iDAAiD;QACnD,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC,SAAS,CAAC,oBAAoB,IAAI,IAAI,CAAC;AACpD,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAiB;IAClD,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAE7B,qDAAqD;IACrD,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACrC,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB;QACpE,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;YACxC,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC7C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QACjD,2EAA2E;QAC3E,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YAC7C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;YAC5E,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;SAAM,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACnD,2EAA2E;QAC3E,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;YACpC,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC7C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC7E,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,IAAI,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvC,OAAO;QACL;YACE,IAAI,EAAE,wBAAwB;YAC9B,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,4CAA4C,YAAY,EAAE;YACnE,WAAW,EAAE,kFAAkF;YAC/F,OAAO,EAAE,8CAA8C;SACxD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;AAEpF,SAAS,yBAAyB,CAAC,GAAiB;IAClD,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,MAAM,eAAe,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC,eAAe;YAAE,SAAS;QAE/B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAChD,MAAM,aAAa,GAAG,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,IAAI,KAAK,EAAE,UAAU,CAAC,UAAU,CAAC,CAAC;QAErF,IAAI,QAAQ,IAAI,aAAa,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,0BAA0B;gBAChC,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,wDAAwD,GAAG,EAAE;gBACtE,WAAW,EAAE,4HAA4H;aAC1I,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAiB;IACjD,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,YAAY,GAAG,GAAG,CAAC,SAAS,CAAC,oBAAoB,CAAC;IACxD,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAE7B,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAElC,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAC7C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;QAC5E,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,YAAY,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC7C,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC,CAAC,6BAA6B;IAE3D,sEAAsE;IACtE,IAAI,YAAY,CAAC,YAAY,EAAE,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;QAC7F,OAAO;YACL;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,yDAAyD;gBAClE,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC;gBAChD,WAAW,EACT,wHAAwH;aAC3H;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAiB;IACnD,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,EAAE,CAAC;IAErD,MAAM,SAAS,GAAG,CAAC,cAAc,EAAE,cAAc,EAAE,uBAAuB,EAAE,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7G,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CACxB,CAAC;IAEF,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzB,IAAI,YAAY,CAAC,QAAQ,EAAE,eAAe,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvD,OAAO;QACL;YACE,IAAI,EAAE,0BAA0B;YAChC,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,iFAAiF;YAC1F,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC;YAC5C,WAAW,EAAE,6EAA6E;SAC3F;KACF,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,GAAiB;IACtD,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,EAAE,CAAC;IAEvD,MAAM,UAAU,GAAG,CAAC,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9F,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CACxB,CAAC;IAEF,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,CAAC,CAAC,0CAA0C;IAErE,IAAI,YAAY,CAAC,SAAS,EAAE,mBAAmB,CAAC;QAAE,OAAO,EAAE,CAAC;IAE5D,OAAO;QACL;YACE,IAAI,EAAE,4BAA4B;YAClC,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,sFAAsF;YAC/F,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC;YAC7C,WAAW,EACT,+DAA+D;gBAC/D,+EAA+E;gBAC/E,6EAA6E;SAChF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAiB;IACpD,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,gBAAgB;QAAE,OAAO,EAAE,CAAC;IAEhG,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,UAAU,CAAC,sBAAsB,CAAC;IAEnD,qFAAqF;IACrF,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAElD,OAAO;QACL;YACE,IAAI,EAAE,2BAA2B;YACjC,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,6BAA6B,QAAQ,CAAC,MAAM,yDAAyD;YAC9G,WAAW,EAAE,0EAA0E;SACxF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAE9D,SAAS,uBAAuB,CAAC,GAAiB;IAChD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAElE,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC;IAC9E,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACpF,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE1C,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC;IACjF,IAAI,cAAc;QAAE,OAAO,EAAE,CAAC;IAE9B,OAAO;QACL;YACE,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,qGAAqG;YAC9G,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC;YACpD,WAAW,EACT,uJAAuJ;YACzJ,OAAO,EAAE,wCAAwC;SAClD;KACF,CAAC;AACJ,CAAC;AAED,4EAA4E;AAE5E,MAAM,iBAAiB,GAAG,uDAAuD,CAAC;AAClF,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEpH,SAAS,yBAAyB,CAAC,YAAoB;IACrD,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,8BAA8B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,OAAO,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAiB;IAC5C,MAAM,eAAe,GAAG,iCAAiC,CAAC;IAC1D,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAE1C,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,yBAAyB,CAAC,YAAY,CAAC;YAAE,SAAS;QACtD,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,yCAAyC;gBAClD,QAAQ,EAAE,YAAY;gBACtB,WAAW,EACT,4GAA4G;aAC/G,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAiB;IAClD,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IAE9C,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,SAAS,GACb,SAAS,KAAK,IAAI;YAClB,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;gBACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,EAAE;oBAAE,OAAO,KAAK,CAAC;gBAC5D,OAAO,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,MAAM,CAAC;YAClG,CAAC,CAAC,CAAC;QAEL,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,yBAAyB;gBAC/B,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,GAAG,OAAO,qEAAqE;gBACxF,QAAQ,EAAE,OAAO;gBACjB,WAAW,EAAE,OAAO,OAAO,2BAA2B;aACvD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,gCAAgC,CAAC,GAAiB;IACzD,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,UAAU,CAAC,cAAc,CAAC;IACzC,MAAM,WAAW,GAAG,UAAU,CAAC,mBAAmB,IAAI,UAAU,CAAC,+BAA+B,CAAC;IAEjG,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAEvC,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAEhD,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,eAAe,GAAG,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,SAAS,IAAI,eAAe,EAAE,CAAC;QACjC,OAAO;YACL;gBACE,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,gEAAgE;gBACzE,WAAW,EACT,yGAAyG;aAC5G;SACF,CAAC;IACJ,CAAC;IAED,IAAI,SAAS,IAAI,CAAC,eAAe,EAAE,CAAC;QAClC,OAAO;YACL;gBACE,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,kEAAkE;gBAC3E,WAAW,EACT,uGAAuG;aAC1G;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAMD,MAAM,sBAAsB,GAAc;IACxC,yBAAyB;IACzB,mBAAmB;IACnB,yBAAyB;IACzB,gCAAgC;IAChC,uBAAuB;CACxB,CAAC;AAEF,MAAM,aAAa,GAAc;IAC/B,sBAAsB;IACtB,wBAAwB;IACxB,sBAAsB;IACtB,4BAA4B;IAC5B,2BAA2B;IAC3B,yBAAyB;CAC1B,CAAC;AAEF,MAAM,mBAAmB,GAAc;IACrC,wBAAwB;IACxB,0BAA0B;IAC1B,2BAA2B;IAC3B,yBAAyB;IACzB,2BAA2B;CAC5B,CAAC;AAEF,MAAM,eAAe,GAAc;IACjC,6BAA6B;IAC7B,yBAAyB;IACzB,2BAA2B;CAC5B,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAsB,EACtB,SAAwB,EACxB,WAA4B,EAC5B,GAAY;IAEZ,MAAM,GAAG,GAAiB;QACxB,SAAS;QACT,WAAW;QACX,GAAG;QACH,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC;IAEF,MAAM,MAAM,GAAc,CAAC,GAAG,sBAAsB,CAAC,CAAC;IAEtD,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,SAAS;YACZ,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC;YAC9B,MAAM;QACR,KAAK,cAAc;YACjB,MAAM,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,CAAC;YACpC,MAAM;QACR,KAAK,gBAAgB;YACnB,MAAM,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC;YAChC,MAAM;IACV,CAAC;IAED,MAAM,QAAQ,GAAyB,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,MAAM;QACxB,QAAQ;KACT,CAAC;AACJ,CAAC","sourcesContent":["import { existsSync, readFileSync, readdirSync } from 'node:fs';\nimport { join, relative } from 'node:path';\nimport type {\n  AuthPatternFinding,\n  AuthPatternInfo,\n  FrameworkInfo,\n  EnvironmentInfo,\n  SdkInfo,\n  DoctorOptions,\n} from '../types.js';\n\n// --- Helpers ---\n\n/** Return the first path that exists, or null */\nfunction findFile(paths: string[]): string | null {\n  for (const p of paths) {\n    if (existsSync(p)) return p;\n  }\n  return null;\n}\n\n/** Read file content safely, return null on any error */\nfunction readFileSafe(filePath: string): string | null {\n  try {\n    return readFileSync(filePath, 'utf-8');\n  } catch {\n    return null;\n  }\n}\n\n/** Test if a file exists and its content matches a regex */\nfunction fileContains(filePath: string, pattern: RegExp): boolean {\n  const content = readFileSafe(filePath);\n  if (!content) return false;\n  return pattern.test(content);\n}\n\nconst SKIP_DIRS = new Set(['node_modules', '.next', '.turbo', 'dist', '.git', 'coverage']);\n\n/**\n * Find files matching a name pattern in a directory tree, limited to maxDepth levels.\n * Skips node_modules, .next, dist, etc.\n */\nfunction findFilesShallow(dir: string, namePattern: RegExp, maxDepth = 3): string[] {\n  const results: string[] = [];\n  if (!existsSync(dir)) return results;\n\n  function walk(currentDir: string, depth: number) {\n    if (depth > maxDepth) return;\n    try {\n      const dirents = readdirSync(currentDir, { withFileTypes: true });\n      for (const dirent of dirents) {\n        const fullPath = join(currentDir, dirent.name);\n        if (dirent.isDirectory()) {\n          if (!SKIP_DIRS.has(dirent.name)) {\n            walk(fullPath, depth + 1);\n          }\n        } else if (dirent.isFile() && namePattern.test(dirent.name)) {\n          results.push(fullPath);\n        }\n      }\n    } catch {\n      // Directory unreadable\n    }\n  }\n\n  walk(dir, 0);\n  return results;\n}\n\nfunction parseEnvFile(content: string): Record<string, string> {\n  const result: Record<string, string> = {};\n  for (const line of content.split(/\\r?\\n/)) {\n    const trimmed = line.trim();\n    if (!trimmed || trimmed.startsWith('#')) continue;\n    const entry = trimmed.startsWith('export ') ? trimmed.slice(7) : trimmed;\n    const eqIndex = entry.indexOf('=');\n    if (eqIndex === -1) continue;\n    const key = entry.slice(0, eqIndex).trim();\n    let value = entry.slice(eqIndex + 1).trim();\n    if ((value.startsWith('\"') && value.endsWith('\"')) || (value.startsWith(\"'\") && value.endsWith(\"'\"))) {\n      value = value.slice(1, -1);\n    }\n    result[key] = value;\n  }\n  return result;\n}\n\n/** Load all env vars from .env and .env.local files */\nfunction loadProjectEnvRaw(installDir: string): Record<string, string> {\n  const env: Record<string, string> = {};\n  for (const file of ['.env', '.env.local']) {\n    const content = readFileSafe(join(installDir, file));\n    if (content) Object.assign(env, parseEnvFile(content));\n  }\n  return env;\n}\n\n// --- Check Context ---\n\ninterface CheckContext {\n  framework: FrameworkInfo;\n  environment: EnvironmentInfo;\n  sdk: SdkInfo;\n  installDir: string;\n}\n\n// --- Individual Checks ---\n\n/** Resolve the app directory root (app/ or src/app/) for Next.js */\nfunction resolveAppDir(installDir: string): string | null {\n  const srcApp = join(installDir, 'src', 'app');\n  if (existsSync(srcApp)) return srcApp;\n  const app = join(installDir, 'app');\n  if (existsSync(app)) return app;\n  return null;\n}\n\nfunction checkSignoutGetHandler(ctx: CheckContext): AuthPatternFinding[] {\n  if (ctx.framework.name !== 'Next.js') return [];\n  const appDir = resolveAppDir(ctx.installDir);\n  if (!appDir) return [];\n\n  const routeFiles = findFilesShallow(appDir, /^route\\.(ts|tsx|js|jsx)$/);\n  const signoutRoutes = routeFiles.filter((f) => /[/\\\\](sign-?out|logout)[/\\\\]/.test(f));\n\n  const findings: AuthPatternFinding[] = [];\n  const GET_EXPORT = /export\\s+(async\\s+)?function\\s+GET|export\\s+const\\s+GET/;\n\n  for (const route of signoutRoutes) {\n    if (fileContains(route, GET_EXPORT)) {\n      findings.push({\n        code: 'SIGNOUT_GET_HANDLER',\n        severity: 'error',\n        message: 'Signout/logout route uses GET handler — vulnerable to CSRF and prefetch-triggered logouts',\n        filePath: relative(ctx.installDir, route),\n        remediation:\n          'Convert to a POST server action. GET routes with side effects are vulnerable to CSRF and will be triggered by Next.js link prefetching.',\n        docsUrl: 'https://workos.com/docs/authkit/nextjs#ending-the-session',\n      });\n    }\n  }\n  return findings;\n}\n\nfunction checkSignoutLinkPrefetch(ctx: CheckContext): AuthPatternFinding[] {\n  if (ctx.framework.name !== 'Next.js') return [];\n  const appDir = resolveAppDir(ctx.installDir);\n  if (!appDir) return [];\n\n  const tsxFiles = findFilesShallow(appDir, /\\.(tsx|jsx)$/);\n  // Match <Link>, <NextLink>, or other common aliases\n  const LINK_PATTERN = /<(?:Next)?Link\\s[^>]*href\\s*=\\s*[\"'{`/]*(\\/sign-?out|\\/logout)/;\n\n  const findings: AuthPatternFinding[] = [];\n  for (const file of tsxFiles) {\n    if (fileContains(file, LINK_PATTERN)) {\n      findings.push({\n        code: 'SIGNOUT_LINK_PREFETCH',\n        severity: 'warning',\n        message:\n          'Link component points to signout/logout — Next.js will prefetch this in production, potentially triggering logouts',\n        filePath: relative(ctx.installDir, file),\n        remediation:\n          'Use a <form> with a server action or <button> with onClick handler instead of <Link> for signout.',\n      });\n    }\n  }\n  return findings;\n}\n\nfunction checkMissingMiddleware(ctx: CheckContext): AuthPatternFinding[] {\n  if (ctx.framework.name !== 'Next.js') return [];\n\n  const middlewarePaths = [\n    'middleware.ts',\n    'middleware.js',\n    'proxy.ts',\n    'proxy.js',\n    'src/middleware.ts',\n    'src/middleware.js',\n    'src/proxy.ts',\n    'src/proxy.js',\n  ].map((p) => join(ctx.installDir, p));\n\n  if (findFile(middlewarePaths)) return [];\n\n  return [\n    {\n      code: 'MISSING_MIDDLEWARE',\n      severity: 'error',\n      message: 'No middleware.ts or proxy.ts found — AuthKit session handling requires middleware',\n      remediation: 'Create middleware.ts at the project root with authkitMiddleware() from @workos-inc/authkit-nextjs.',\n      docsUrl: 'https://workos.com/docs/authkit/nextjs/middleware',\n    },\n  ];\n}\n\nfunction checkMiddlewareWrongLocation(ctx: CheckContext): AuthPatternFinding[] {\n  if (ctx.framework.name !== 'Next.js') return [];\n\n  const wrongPaths = ['app/middleware.ts', 'app/middleware.js', 'src/app/middleware.ts', 'src/app/middleware.js'].map(\n    (p) => join(ctx.installDir, p),\n  );\n\n  const found = findFile(wrongPaths);\n  if (!found) return [];\n\n  return [\n    {\n      code: 'MIDDLEWARE_WRONG_LOCATION',\n      severity: 'warning',\n      message: 'middleware.ts found inside app/ directory — must be at project root or src/',\n      filePath: relative(ctx.installDir, found),\n      remediation: 'Move middleware.ts to the project root (or src/ if using src/ directory).',\n      docsUrl: 'https://workos.com/docs/authkit/nextjs/middleware',\n    },\n  ];\n}\n\nfunction checkMissingAuthKitProvider(ctx: CheckContext): AuthPatternFinding[] {\n  const layoutPaths: string[] = [];\n\n  if (ctx.framework.name === 'Next.js') {\n    layoutPaths.push(\n      join(ctx.installDir, 'app', 'layout.tsx'),\n      join(ctx.installDir, 'app', 'layout.jsx'),\n      join(ctx.installDir, 'src', 'app', 'layout.tsx'),\n      join(ctx.installDir, 'src', 'app', 'layout.jsx'),\n    );\n  } else if (ctx.framework.name === 'React Router' && ctx.framework.variant === 'declarative') {\n    layoutPaths.push(\n      join(ctx.installDir, 'src', 'App.tsx'),\n      join(ctx.installDir, 'src', 'App.jsx'),\n      join(ctx.installDir, 'app', 'root.tsx'),\n      join(ctx.installDir, 'app', 'root.jsx'),\n    );\n  } else {\n    return [];\n  }\n\n  const layoutFile = findFile(layoutPaths);\n  if (!layoutFile) return []; // Can't check if layout doesn't exist\n\n  if (fileContains(layoutFile, /AuthKitProvider/)) return [];\n\n  return [\n    {\n      code: 'MISSING_AUTHKIT_PROVIDER',\n      severity: 'warning',\n      message: 'AuthKitProvider not found in root layout — required for AuthKit session management',\n      filePath: relative(ctx.installDir, layoutFile),\n      remediation: 'Wrap your app with <AuthKitProvider> in the root layout.',\n      docsUrl: 'https://workos.com/docs/authkit/nextjs/setup',\n    },\n  ];\n}\n\n/** Extract callback path from redirect URI env vars or framework default */\nfunction resolveCallbackPath(ctx: CheckContext): string | null {\n  // Check env vars for actual redirect URI (including NEXT_PUBLIC_ variant)\n  const projectEnv = loadProjectEnvRaw(ctx.installDir);\n  const redirectUri =\n    projectEnv.WORKOS_REDIRECT_URI ?? projectEnv.NEXT_PUBLIC_WORKOS_REDIRECT_URI ?? ctx.environment.redirectUri;\n\n  if (redirectUri) {\n    try {\n      return new URL(redirectUri).pathname;\n    } catch {\n      // Invalid URL, fall through to framework default\n    }\n  }\n\n  return ctx.framework.expectedCallbackPath ?? null;\n}\n\nfunction checkCallbackRouteMissing(ctx: CheckContext): AuthPatternFinding[] {\n  const callbackPath = resolveCallbackPath(ctx);\n  if (!callbackPath) return [];\n\n  // Build expected route file paths based on framework\n  const possiblePaths: string[] = [];\n\n  if (ctx.framework.name === 'Next.js') {\n    // app/auth/callback/route.ts (or src/app/)\n    const routeDir = callbackPath.replace(/^\\//, ''); // 'auth/callback'\n    for (const prefix of ['app', 'src/app']) {\n      for (const ext of ['ts', 'tsx', 'js', 'jsx']) {\n        possiblePaths.push(join(ctx.installDir, prefix, routeDir, `route.${ext}`));\n      }\n    }\n  } else if (ctx.framework.name === 'React Router') {\n    // Flat: app/routes/auth.callback.tsx  Nested: app/routes/auth/callback.tsx\n    const segments = callbackPath.replace(/^\\//, '').split('/');\n    const flat = segments.join('.');\n    const nested = segments.join('/');\n    for (const ext of ['tsx', 'jsx', 'ts', 'js']) {\n      possiblePaths.push(join(ctx.installDir, 'app', 'routes', `${flat}.${ext}`));\n      possiblePaths.push(join(ctx.installDir, 'app', 'routes', nested + `.${ext}`));\n    }\n  } else if (ctx.framework.name === 'TanStack Start') {\n    // Flat: routes/api.auth.callback.tsx  Nested: routes/api/auth/callback.tsx\n    // Both conventions work in both src/ and app/ directories\n    const segments = callbackPath.replace(/^\\//, '').split('/');\n    const flat = segments.join('.');\n    const nested = segments.join('/');\n    for (const prefix of ['src', 'app']) {\n      for (const ext of ['tsx', 'jsx', 'ts', 'js']) {\n        possiblePaths.push(join(ctx.installDir, prefix, 'routes', `${flat}.${ext}`));\n        possiblePaths.push(join(ctx.installDir, prefix, 'routes', nested + `.${ext}`));\n      }\n    }\n  }\n\n  if (possiblePaths.length === 0) return [];\n  if (findFile(possiblePaths)) return [];\n\n  return [\n    {\n      code: 'CALLBACK_ROUTE_MISSING',\n      severity: 'error',\n      message: `No callback route found at expected path ${callbackPath}`,\n      remediation: `Create the callback route handler at the path matching your WORKOS_REDIRECT_URI.`,\n      docsUrl: 'https://workos.com/docs/authkit/redirect-uri',\n    },\n  ];\n}\n\nconst CLIENT_ENV_PREFIXES = ['NEXT_PUBLIC_', 'VITE_', 'REACT_APP_', 'EXPO_PUBLIC_'];\n\nfunction checkApiKeyLeakedToClient(ctx: CheckContext): AuthPatternFinding[] {\n  const projectEnv = loadProjectEnvRaw(ctx.installDir);\n  const findings: AuthPatternFinding[] = [];\n\n  for (const [key, value] of Object.entries(projectEnv)) {\n    const hasClientPrefix = CLIENT_ENV_PREFIXES.some((prefix) => key.startsWith(prefix));\n    if (!hasClientPrefix) continue;\n\n    const isApiKey = key.includes('WORKOS_API_KEY');\n    const isSecretValue = value?.startsWith('sk_test_') || value?.startsWith('sk_live_');\n\n    if (isApiKey || isSecretValue) {\n      findings.push({\n        code: 'API_KEY_LEAKED_TO_CLIENT',\n        severity: 'error',\n        message: `Secret API key exposed via client-accessible env var ${key}`,\n        remediation: `Remove the client prefix. WORKOS_API_KEY must be server-only (no NEXT_PUBLIC_, VITE_, REACT_APP_, or EXPO_PUBLIC_ prefix).`,\n      });\n    }\n  }\n  return findings;\n}\n\nfunction checkWrongCallbackLoader(ctx: CheckContext): AuthPatternFinding[] {\n  if (ctx.framework.name !== 'React Router') return [];\n  const callbackPath = ctx.framework.expectedCallbackPath;\n  if (!callbackPath) return [];\n\n  const segments = callbackPath.replace(/^\\//, '').split('/');\n  const flat = segments.join('.');\n  const nested = segments.join('/');\n\n  const possiblePaths: string[] = [];\n  for (const ext of ['tsx', 'jsx', 'ts', 'js']) {\n    possiblePaths.push(join(ctx.installDir, 'app', 'routes', `${flat}.${ext}`));\n    possiblePaths.push(join(ctx.installDir, 'app', 'routes', nested + `.${ext}`));\n  }\n\n  const callbackFile = findFile(possiblePaths);\n  if (!callbackFile) return []; // No callback route to check\n\n  // authkitLoader is for regular routes; authLoader is for the callback\n  if (fileContains(callbackFile, /authkitLoader/) && !fileContains(callbackFile, /authLoader/)) {\n    return [\n      {\n        code: 'WRONG_CALLBACK_LOADER',\n        severity: 'warning',\n        message: 'Callback route uses authkitLoader instead of authLoader',\n        filePath: relative(ctx.installDir, callbackFile),\n        remediation:\n          'Use authLoader (not authkitLoader) for the callback route. authkitLoader is for regular routes that need auth context.',\n      },\n    ];\n  }\n  return [];\n}\n\nfunction checkMissingRootAuthLoader(ctx: CheckContext): AuthPatternFinding[] {\n  if (ctx.framework.name !== 'React Router') return [];\n\n  const rootPaths = ['app/root.tsx', 'app/root.jsx', 'app/routes/_index.tsx', 'app/routes/_index.jsx'].map((p) =>\n    join(ctx.installDir, p),\n  );\n\n  const rootFile = findFile(rootPaths);\n  if (!rootFile) return [];\n\n  if (fileContains(rootFile, /authkitLoader/)) return [];\n\n  return [\n    {\n      code: 'MISSING_ROOT_AUTH_LOADER',\n      severity: 'warning',\n      message: 'Root route does not use authkitLoader — child routes will not have auth context',\n      filePath: relative(ctx.installDir, rootFile),\n      remediation: 'Add authkitLoader to your root route so child routes can access auth state.',\n    },\n  ];\n}\n\nfunction checkMissingAuthkitMiddleware(ctx: CheckContext): AuthPatternFinding[] {\n  if (ctx.framework.name !== 'TanStack Start') return [];\n\n  const startPaths = ['src/start.ts', 'src/start.tsx', 'app/start.ts', 'app/start.tsx'].map((p) =>\n    join(ctx.installDir, p),\n  );\n\n  const startFile = findFile(startPaths);\n  if (!startFile) return []; // Can't check if start file doesn't exist\n\n  if (fileContains(startFile, /authkitMiddleware/)) return [];\n\n  return [\n    {\n      code: 'MISSING_AUTHKIT_MIDDLEWARE',\n      severity: 'warning',\n      message: 'start.ts does not reference authkitMiddleware — AuthKit session handling requires it',\n      filePath: relative(ctx.installDir, startFile),\n      remediation:\n        'Add authkitMiddleware to requestMiddleware in src/start.ts:\\n' +\n        '  import { authkitMiddleware } from \"@workos/authkit-tanstack-react-start\";\\n' +\n        '  export default createStart({ requestMiddleware: [authkitMiddleware()] });',\n    },\n  ];\n}\n\nfunction checkCookiePasswordTooShort(ctx: CheckContext): AuthPatternFinding[] {\n  if (ctx.framework.name !== 'React Router' && ctx.framework.name !== 'TanStack Start') return [];\n\n  const projectEnv = loadProjectEnvRaw(ctx.installDir);\n  const password = projectEnv.WORKOS_COOKIE_PASSWORD;\n\n  // Only warn if password is set but too short; missing password is a separate concern\n  if (!password || password.length >= 32) return [];\n\n  return [\n    {\n      code: 'COOKIE_PASSWORD_TOO_SHORT',\n      severity: 'warning',\n      message: `WORKOS_COOKIE_PASSWORD is ${password.length} characters — minimum 32 required for secure encryption`,\n      remediation: 'Set WORKOS_COOKIE_PASSWORD to a random string of at least 32 characters.',\n    },\n  ];\n}\n\nconst REACT_SPA_SDKS = new Set(['@workos-inc/authkit-react']);\n\nfunction checkMissingApiHostname(ctx: CheckContext): AuthPatternFinding[] {\n  if (!ctx.sdk.name || !REACT_SPA_SDKS.has(ctx.sdk.name)) return [];\n\n  const sourceFiles = findFilesShallow(ctx.installDir, /\\.(tsx|jsx|ts|js)$/, 4);\n  const providerFiles = sourceFiles.filter((f) => fileContains(f, /AuthKitProvider/));\n  if (providerFiles.length === 0) return [];\n\n  const hasApiHostname = providerFiles.some((f) => fileContains(f, /apiHostname/));\n  if (hasApiHostname) return [];\n\n  return [\n    {\n      code: 'MISSING_API_HOSTNAME',\n      severity: 'warning',\n      message: 'AuthKitProvider does not specify apiHostname — authorize requests will route through api.workos.com',\n      filePath: relative(ctx.installDir, providerFiles[0]),\n      remediation:\n        'Set the apiHostname prop on AuthKitProvider to your custom Authentication API domain (e.g. auth.example.com) to avoid routing through api.workos.com.',\n      docsUrl: 'https://workos.com/docs/custom-domains',\n    },\n  ];\n}\n\n// --- Cross-language checks (run for ALL projects, not just JS/AuthKit) ---\n\nconst SOURCE_EXTENSIONS = /\\.(ts|tsx|js|jsx|py|rb|go|java|kt|php|cs|swift|dart)$/;\nconst SECRET_SOURCE_IGNORED_SEGMENTS = new Set(['__fixtures__', '__tests__', 'evals', 'fixtures', 'test', 'tests']);\n\nfunction isIgnoredSecretSourcePath(relativePath: string): boolean {\n  const normalized = relativePath.replace(/\\\\/g, '/');\n  const parts = normalized.split('/');\n  if (parts.some((part) => SECRET_SOURCE_IGNORED_SEGMENTS.has(part))) return true;\n  return /\\.(spec|test)\\.[^.]+$/.test(normalized);\n}\n\nfunction checkApiKeyInSource(ctx: CheckContext): AuthPatternFinding[] {\n  const API_KEY_PATTERN = /sk_(test|live)_[A-Za-z0-9]{10,}/;\n  const sourceFiles = findFilesShallow(ctx.installDir, SOURCE_EXTENSIONS, 4);\n  const findings: AuthPatternFinding[] = [];\n\n  for (const file of sourceFiles) {\n    const relativePath = relative(ctx.installDir, file);\n    if (isIgnoredSecretSourcePath(relativePath)) continue;\n    const content = readFileSafe(file);\n    if (!content) continue;\n    if (API_KEY_PATTERN.test(content)) {\n      findings.push({\n        code: 'API_KEY_IN_SOURCE',\n        severity: 'error',\n        message: `WorkOS API key hardcoded in source file`,\n        filePath: relativePath,\n        remediation:\n          'Move the API key to an environment variable (WORKOS_API_KEY) and load it from .env or your secret manager.',\n      });\n    }\n  }\n  return findings;\n}\n\nfunction checkEnvFileNotGitignored(ctx: CheckContext): AuthPatternFinding[] {\n  const envFiles = ['.env', '.env.local'].filter((f) => existsSync(join(ctx.installDir, f)));\n  if (envFiles.length === 0) return [];\n\n  const gitignorePath = join(ctx.installDir, '.gitignore');\n  const gitignore = readFileSafe(gitignorePath);\n\n  const findings: AuthPatternFinding[] = [];\n  for (const envFile of envFiles) {\n    const isIgnored =\n      gitignore !== null &&\n      gitignore.split(/\\r?\\n/).some((line) => {\n        const trimmed = line.trim();\n        if (trimmed.startsWith('#') || trimmed === '') return false;\n        return trimmed === envFile || trimmed === '.env*' || trimmed === '.env.*' || trimmed === '.env';\n      });\n\n    if (!isIgnored) {\n      findings.push({\n        code: 'ENV_FILE_NOT_GITIGNORED',\n        severity: 'warning',\n        message: `${envFile} is not in .gitignore — secrets may be committed to version control`,\n        filePath: envFile,\n        remediation: `Add ${envFile} to your .gitignore file.`,\n      });\n    }\n  }\n  return findings;\n}\n\nfunction checkMixedEnvironmentCredentials(ctx: CheckContext): AuthPatternFinding[] {\n  const projectEnv = loadProjectEnvRaw(ctx.installDir);\n  const apiKey = projectEnv.WORKOS_API_KEY;\n  const redirectUri = projectEnv.WORKOS_REDIRECT_URI ?? projectEnv.NEXT_PUBLIC_WORKOS_REDIRECT_URI;\n\n  if (!apiKey || !redirectUri) return [];\n\n  const isTestKey = apiKey.startsWith('sk_test_');\n  const isLiveKey = apiKey.startsWith('sk_live_');\n\n  let isProductionUri = false;\n  try {\n    const url = new URL(redirectUri);\n    isProductionUri = url.hostname !== 'localhost' && !url.hostname.startsWith('127.0.0.');\n  } catch {\n    return [];\n  }\n\n  if (isTestKey && isProductionUri) {\n    return [\n      {\n        code: 'MIXED_ENVIRONMENT',\n        severity: 'warning',\n        message: 'Staging API key (sk_test_) used with a production redirect URI',\n        remediation:\n          'Use sk_live_ API key for production redirect URIs, or change the redirect URI to localhost for staging.',\n      },\n    ];\n  }\n\n  if (isLiveKey && !isProductionUri) {\n    return [\n      {\n        code: 'MIXED_ENVIRONMENT',\n        severity: 'warning',\n        message: 'Production API key (sk_live_) used with a localhost redirect URI',\n        remediation:\n          'Use sk_test_ API key for localhost development, or update the redirect URI to your production domain.',\n      },\n    ];\n  }\n\n  return [];\n}\n\n// --- Main Entry Point ---\n\ntype CheckFn = (ctx: CheckContext) => AuthPatternFinding[];\n\nconst CROSS_FRAMEWORK_CHECKS: CheckFn[] = [\n  checkApiKeyLeakedToClient,\n  checkApiKeyInSource,\n  checkEnvFileNotGitignored,\n  checkMixedEnvironmentCredentials,\n  checkMissingApiHostname,\n];\n\nconst NEXTJS_CHECKS: CheckFn[] = [\n  checkSignoutGetHandler,\n  checkSignoutLinkPrefetch,\n  checkMissingMiddleware,\n  checkMiddlewareWrongLocation,\n  checkMissingAuthKitProvider,\n  checkCallbackRouteMissing,\n];\n\nconst REACT_ROUTER_CHECKS: CheckFn[] = [\n  checkWrongCallbackLoader,\n  checkMissingRootAuthLoader,\n  checkMissingAuthKitProvider,\n  checkCallbackRouteMissing,\n  checkCookiePasswordTooShort,\n];\n\nconst TANSTACK_CHECKS: CheckFn[] = [\n  checkMissingAuthkitMiddleware,\n  checkCallbackRouteMissing,\n  checkCookiePasswordTooShort,\n];\n\nexport async function checkAuthPatterns(\n  options: DoctorOptions,\n  framework: FrameworkInfo,\n  environment: EnvironmentInfo,\n  sdk: SdkInfo,\n): Promise<AuthPatternInfo> {\n  const ctx: CheckContext = {\n    framework,\n    environment,\n    sdk,\n    installDir: options.installDir,\n  };\n\n  const checks: CheckFn[] = [...CROSS_FRAMEWORK_CHECKS];\n\n  switch (framework.name) {\n    case 'Next.js':\n      checks.push(...NEXTJS_CHECKS);\n      break;\n    case 'React Router':\n      checks.push(...REACT_ROUTER_CHECKS);\n      break;\n    case 'TanStack Start':\n      checks.push(...TANSTACK_CHECKS);\n      break;\n  }\n\n  const findings: AuthPatternFinding[] = [];\n  for (const check of checks) {\n    findings.push(...check(ctx));\n  }\n\n  return {\n    checksRun: checks.length,\n    findings,\n  };\n}\n"]}

package/dist/lib/adapters/cli-adapter.d.ts

@@ -13,6 +13,8 @@ export declare class CLIAdapter implements InstallerAdapter {
     private spinner;
     private isStarted;
     private progress;
+    private scaffolded;
+    private scaffoldPackageManager;
     private handlers;
     private isPromptActive;
     private pendingLogs;
@@ -60,6 +62,11 @@ export declare class CLIAdapter implements InstallerAdapter {
     private handleValidationComplete;
     private handleComplete;
     private handleError;
+    private handleScaffoldPrompt;
+    private handleScaffoldStart;
+    private handleScaffoldProgress;
+    private handleScaffoldComplete;
+    private handleScaffoldFailed;
     private handleBranchPrompt;
     private handleBranchCreated;
     private handlePostInstallChanges;

package/dist/lib/adapters/cli-adapter.js

@@ -17,6 +17,9 @@ export class CLIAdapter {
     spinner = null;
     isStarted = false;
     progress = new ProgressTracker();
+    // Scaffold (empty-dir) state, used to print a "next steps" hint on completion.
+    scaffolded = false;
+    scaffoldPackageManager = 'npm';
     // Store bound handlers for cleanup
     handlers = new Map();
     // Queue for logs while prompt is active (parallel state issue)
@@ -101,6 +104,12 @@ export class CLIAdapter {
         this.subscribe('validation:complete', this.handleValidationComplete);
         this.subscribe('complete', this.handleComplete);
         this.subscribe('error', this.handleError);
+        // Scaffold events (empty-directory app scaffolding)
+        this.subscribe('scaffold:prompt', this.handleScaffoldPrompt);
+        this.subscribe('scaffold:start', this.handleScaffoldStart);
+        this.subscribe('scaffold:progress', this.handleScaffoldProgress);
+        this.subscribe('scaffold:complete', this.handleScaffoldComplete);
+        this.subscribe('scaffold:failed', this.handleScaffoldFailed);
         // Branch check events
         this.subscribe('branch:prompt', this.handleBranchPrompt);
         this.subscribe('branch:created', this.handleBranchCreated);
@@ -339,6 +348,11 @@ export class CLIAdapter {
         console.log('');
         console.log(renderCompletionSummary(success, summary));
         console.log('');
+        // When we scaffolded a fresh app, the install ran in the current dir, so
+        // point the user straight at the dev server.
+        if (success && this.scaffolded) {
+            clack.log.info(`Start your app:  ${chalk.cyan(`${this.scaffoldPackageManager} run dev`)}`);
+        }
     };
     handleError = ({ message, stack }) => {
         this.stopSpinner('Error');
@@ -378,6 +392,41 @@ export class CLIAdapter {
             this.debugLog(stack);
         }
     };
+    // ===== Scaffold Event Handlers =====
+    handleScaffoldPrompt = async ({ packageManager }) => {
+        this.scaffoldPackageManager = packageManager;
+        this.isPromptActive = true;
+        const confirmed = await clack.confirm({
+            message: 'This directory is empty. Scaffold a new Next.js app with AuthKit here?',
+            initialValue: true,
+        });
+        this.isPromptActive = false;
+        this.flushPendingLogs();
+        this.sendEvent({
+            type: clack.isCancel(confirmed) || !confirmed ? 'SCAFFOLD_CANCELLED' : 'SCAFFOLD_CONFIRMED',
+        });
+    };
+    handleScaffoldStart = ({ packageManager }) => {
+        this.scaffoldPackageManager = packageManager;
+        this.spinner = clack.spinner();
+        this.spinner.start(`Scaffolding a new Next.js app with ${packageManager} (this can take a minute)...`);
+    };
+    // create-next-app output is verbose; surface it only under --debug and keep
+    // the spinner message stable so the CLI stays readable.
+    handleScaffoldProgress = ({ text }) => {
+        const line = text.trim();
+        if (line) {
+            this.debugLog(line);
+        }
+    };
+    handleScaffoldComplete = () => {
+        this.scaffolded = true;
+        this.stopSpinner('Next.js app created');
+    };
+    handleScaffoldFailed = ({ error }) => {
+        this.stopSpinner('Scaffold failed');
+        clack.log.error(`Could not scaffold the app: ${error}`);
+    };
     handleBranchPrompt = async ({ branch }) => {
         this.isPromptActive = true;
         const choice = await clack.select({

package/dist/lib/adapters/cli-adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-adapter.js","sourceRoot":"","sources":["../../../src/lib/adapters/cli-adapter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,sBAAsB,CAAC;AACzC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAExE;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IACZ,OAAO,CAAwB;IAChC,SAAS,CAA6B;IACtC,KAAK,CAAU;IACf,OAAO,GAA4C,IAAI,CAAC;IACxD,SAAS,GAAG,KAAK,CAAC;IAClB,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IAEzC,mCAAmC;IAC3B,QAAQ,GAAG,IAAI,GAAG,EAAwC,CAAC;IAEnE,+DAA+D;IACvD,cAAc,GAAG,KAAK,CAAC;IACvB,WAAW,GAAsB,EAAE,CAAC;IAE5C,6BAA6B;IACrB,aAAa,GAAwB,IAAI,CAAC;IAElD,qCAAqC;IAC7B,mBAAmB,GAA0B,IAAI,CAAC;IAE1D,YAAY,MAAqB;QAC/B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,KAAiB;QACpC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAEtB,aAAa;QACb,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACpG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7B,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;QAED,2BAA2B;QAC3B,MAAM,YAAY,GAAG,GAAG,EAAE;YACxB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC/B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACtB,CAAC;YACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACtC,KAAK,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;QAElC,kDAAkD;QAClD,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAEnD,gDAAgD;QAChD,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACnE,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,CAAC,wBAAwB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACnE,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1C,sBAAsB;QACtB,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAE3D,sBAAsB;QACtB,IAAI,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,CAAC,2BAA2B,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,CAAC,+BAA+B,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC7E,IAAI,CAAC,SAAS,CAAC,4BAA4B,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACvE,IAAI,CAAC,SAAS,CAAC,2BAA2B,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,2BAA2B,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,CAAC,wBAAwB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,CAAC,wBAAwB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,yBAAyB,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAE5B,wBAAwB;QACxB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YAC1C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,8BAA8B;QAC9B,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAA8B,EAAE,OAAgB,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEtB,0BAA0B;QAC1B,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;IAEO,gBAAgB,GAAG,GAAS,EAAE;QACpC,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,aAAa,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACxC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;QAClC,CAAC;IACH,CAAC,CAAC;IAEM,WAAW,CAAC,OAAe;QACjC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IAED,8DAA8D;IACtD,QAAQ,GAAG,CAAC,OAAe,EAAQ,EAAE;QAC3C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC;IAEF;;OAEG;IACK,SAAS,CACf,KAAQ,EACR,OAA8D;QAE9D,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,YAA4C,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACvC,CAAC;IAED,6BAA6B;IAErB,gBAAgB,GAAG,CAAC,EAAE,KAAK,EAAkC,EAAQ,EAAE;QAC7E,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC;IAEM,eAAe,GAAG,CAAC,EAAE,KAAK,EAAiC,EAAQ,EAAE;QAC3E,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC;IAEM,iBAAiB,GAAG,GAAS,EAAE;QACrC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC,CAAC;IAEM,iBAAiB,GAAG,CAAC,EAAE,OAAO,EAAmC,EAAQ,EAAE;QACjF,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC;QAC3C,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IAC9E,CAAC,CAAC;IAEM,uBAAuB,GAAG,CAAC,EAAE,WAAW,EAAyC,EAAQ,EAAE;QACjG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC;IAEM,mBAAmB,GAAG,GAAS,EAAE;QACvC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC,CAAC;IACtF,CAAC,CAAC;IAEM,sBAAsB,GAAG,GAAS,EAAE;QAC1C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC,CAAC;IAEM,mBAAmB,GAAG,KAAK,EAAE,EAAE,KAAK,EAA6C,EAAiB,EAAE;QAC1G,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,SAAS,QAAQ,0CAA0C;YACpE,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB;SAC1F,CAAC,CAAC;IACL,CAAC,CAAC;IAEM,mBAAmB,GAAG,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAqC,EAAQ,EAAE;QACvG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEvD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACtD,CAAC,CAAC;IAEM,mBAAmB,GAAG,GAAS,EAAE;QACvC,mDAAmD;IACrD,CAAC,CAAC;IAEM,qBAAqB,GAAG,GAAS,EAAE;QACzC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC5D,CAAC,CAAC;IAEM,oBAAoB,GAAG,GAAS,EAAE;QACxC,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;QACxC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;IAClE,CAAC,CAAC;IAEM,yBAAyB,GAAG,CAAC,EAAE,UAAU,EAA4C,EAAQ,EAAE;QACrG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,wCAAwC,UAAU,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC;IAEM,cAAc,GAAG,KAAK,EAAE,EAAE,KAAK,EAAgC,EAAiB,EAAE;QACxF,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAC3D,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,kBAAkB;YAC3B,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;SAClF,CAAC,CAAC;IACL,CAAC,CAAC;IAEM,wBAAwB,GAAG,KAAK,EAAE,EACxC,cAAc,GACyB,EAAiB,EAAE;QAC1D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;QAE1F,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC;YAChC,OAAO,EAAE,8BAA8B;YACvC,WAAW,EAAE,YAAY;YACzB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACxC,OAAO,uBAAuB,CAAC;gBACjC,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBACjC,OAAO,uCAAuC,CAAC;gBACjD,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QAED,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,cAAc,EAAE,CAAC;YACnB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC,CAAC;YACjG,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC;gBACxC,OAAO,EAAE,4BAA4B;gBACrC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;oBAClB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACxC,OAAO,qBAAqB,CAAC;oBAC/B,CAAC;oBACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC7B,OAAO,iCAAiC,CAAC;oBAC3C,CAAC;oBACD,OAAO,SAAS,CAAC;gBACnB,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACnC,OAAO;YACT,CAAC;YACD,MAAM,GAAG,YAAsB,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,uBAAuB;YAC7B,MAAM;YACN,QAAQ,EAAE,QAAkB;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC;IAEM,oBAAoB,GAAG,GAAS,EAAE;QACxC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC9C,CAAC,CAAC;IAEM,gBAAgB,GAAG,GAAS,EAAE;QACpC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAE1C,sDAAsD;QACtD,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,CAAC,mBAAmB,GAAG,WAAW,CAAC,GAAG,EAAE;YAC1C,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YACtB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YACpC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC,EAAE,IAAI,CAAC,CAAC;IACX,CAAC,CAAC;IAEM,mBAAmB,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAqC,EAAQ,EAAE;QAC1F,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC,CAAC;IAEM,qBAAqB,GAAG,GAAS,EAAE;QACzC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IACtC,CAAC,CAAC;IAEM,sBAAsB,GAAG,CAAC,EAAE,MAAM,EAAwC,EAAQ,EAAE;QAC1F,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC/B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEM,wBAAwB,GAAG,CAAC,EAAE,MAAM,EAAE,UAAU,EAA0C,EAAQ,EAAE;QAC1G,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,UAAU,WAAW,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC;IAEM,cAAc,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,EAA+B,EAAQ,EAAE;QACnF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAE9C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC,CAAC;IAEM,WAAW,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAA4B,EAAQ,EAAE;QAC3E,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,yDAAyD;QACzD,MAAM,cAAc,GAClB,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,8DAA8D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9G,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3E,MAAM,cAAc,GAAG,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtF,MAAM,aAAa,GAAG,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEhE,IAAI,cAAc,EAAE,CAAC;YACnB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC9D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;QAC7F,CAAC;aAAM,IAAI,WAAW,EAAE,CAAC;YACvB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC7D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QACxD,CAAC;aAAM,IAAI,cAAc,EAAE,CAAC;YAC1B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACxD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAClE,CAAC;aAAM,IAAI,aAAa,EAAE,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC7D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QACvF,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAED,yCAAyC;QACzC,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,mBAAmB,CAAC,aAAa,CAAC,OAAO,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC;IAEM,kBAAkB,GAAG,KAAK,EAAE,EAAE,MAAM,EAAoC,EAAiB,EAAE;QACjG,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;YAChC,OAAO,EAAE,cAAc,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,4BAA4B;YACrE,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,gCAAgC,EAAE;gBAC5D,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,4BAA4B,EAAE;gBAC1D,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;aACrC;SACF,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClD,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QAC5C,CAAC;aAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC;IAEM,mBAAmB,GAAG,CAAC,EAAE,MAAM,EAAqC,EAAQ,EAAE;QACpF,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC;IAEF,0CAA0C;IAElC,wBAAwB,GAAG,CAAC,EAAE,KAAK,EAA0C,EAAQ,EAAE;QAC7F,IAAI,CAAC,QAAQ,CAAC,iBAAiB,KAAK,CAAC,MAAM,yBAAyB,CAAC,CAAC;IACxE,CAAC,CAAC;IAEM,kBAAkB,GAAG,KAAK,IAAmB,EAAE;QACrD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,qBAAqB;YAC9B,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB;SACtF,CAAC,CAAC;IACL,CAAC,CAAC;IAEM,sBAAsB,GAAG,GAAS,EAAE;QAC1C,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrD,CAAC,CAAC;IAEM,mBAAmB,GAAG,CAAC,EAAE,OAAO,EAAiD,EAAQ,EAAE;QACjG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC9B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC;IAEM,kBAAkB,GAAG,CAAC,EAAE,KAAK,EAAgD,EAAQ,EAAE;QAC7F,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QAClC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEM,cAAc,GAAG,KAAK,IAAmB,EAAE;QACjD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,wBAAwB;YACjC,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa;SAC9E,CAAC,CAAC;IACL,CAAC,CAAC;IAEM,kBAAkB,GAAG,GAAS,EAAE;QACtC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrD,CAAC,CAAC;IAEM,eAAe,GAAG,GAAS,EAAE;QACnC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC;IAEM,eAAe,GAAG,CAAC,EAAE,GAAG,EAA6C,EAAQ,EAAE;QACrF,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAC/B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,yBAAyB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC;IAEM,cAAc,GAAG,CAAC,EAAE,KAAK,EAA4C,EAAQ,EAAE;QACrF,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;QACvC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC;IAEM,gBAAgB,GAAG,CAAC,EAAE,KAAK,EAA8C,EAAQ,EAAE;QACzF,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAChC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEM,wBAAwB,GAAG,CAAC,EAAE,YAAY,EAAyC,EAAQ,EAAE;QACnG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC;CACH","sourcesContent":["import type { InstallerAdapter, AdapterConfig } from './types.js';\nimport type { InstallerEventEmitter, InstallerEvents } from '../events.js';\nimport clack from '../../utils/clack.js';\nimport chalk from 'chalk';\nimport { getConfig } from '../settings.js';\nimport { ProgressTracker } from '../progress-tracker.js';\nimport { renderCompletionSummary } from '../../utils/summary-box.js';\nimport { formatWorkOSCommand } from '../../utils/command-invocation.js';\n\n/**\n * CLI adapter that renders wizard events via clack.\n *\n * Subscribes to InstallerEventEmitter and translates events into\n * clack UI operations (logs, spinners, prompts).\n */\nexport class CLIAdapter implements InstallerAdapter {\n  readonly emitter: InstallerEventEmitter;\n  private sendEvent: AdapterConfig['sendEvent'];\n  private debug: boolean;\n  private spinner: ReturnType<typeof clack.spinner> | null = null;\n  private isStarted = false;\n  private progress = new ProgressTracker();\n\n  // Store bound handlers for cleanup\n  private handlers = new Map<string, (...args: unknown[]) => void>();\n\n  // Queue for logs while prompt is active (parallel state issue)\n  private isPromptActive = false;\n  private pendingLogs: Array<() => void> = [];\n\n  // SIGINT handler for cleanup\n  private sigIntHandler: (() => void) | null = null;\n\n  // Long-running agent update interval\n  private agentUpdateInterval: NodeJS.Timeout | null = null;\n\n  constructor(config: AdapterConfig) {\n    this.emitter = config.emitter;\n    this.sendEvent = config.sendEvent;\n    this.debug = config.debug ?? false;\n  }\n\n  /**\n   * Queue a log call if a prompt is active, otherwise execute immediately.\n   */\n  private queueableLog(logFn: () => void): void {\n    if (this.isPromptActive) {\n      this.pendingLogs.push(logFn);\n    } else {\n      logFn();\n    }\n  }\n\n  /**\n   * Flush any queued logs after prompt completes.\n   */\n  private flushPendingLogs(): void {\n    const logs = this.pendingLogs.splice(0);\n    logs.forEach((fn) => fn());\n  }\n\n  async start(): Promise<void> {\n    if (this.isStarted) return;\n    this.isStarted = true;\n\n    // Show intro\n    const config = getConfig();\n    if (config.branding.showAsciiArt) {\n      const art = config.branding.useCompact ? config.branding.compactAsciiArt : config.branding.asciiArt;\n      console.log(chalk.cyan(art));\n      console.log();\n    } else {\n      clack.intro('Welcome to the WorkOS AuthKit installer');\n    }\n\n    // Handle Ctrl+C gracefully\n    const handleSigInt = () => {\n      if (this.spinner) {\n        this.spinner.stop('Cancelled');\n        this.spinner = null;\n      }\n      this.stopAgentUpdates();\n      clack.log.warn('Installer cancelled');\n      clack.outro('Your project was not modified');\n      process.exit(0);\n    };\n    process.on('SIGINT', handleSigInt);\n    this.sigIntHandler = handleSigInt;\n\n    // Subscribe to state events for progress tracking\n    this.subscribe('state:enter', this.handleStateEnter);\n    this.subscribe('state:exit', this.handleStateExit);\n\n    // Subscribe to events that require UI rendering\n    this.subscribe('auth:success', this.handleAuthSuccess);\n    this.subscribe('auth:failure', this.handleAuthFailure);\n    this.subscribe('detection:complete', this.handleDetectionComplete);\n    this.subscribe('detection:none', this.handleDetectionNone);\n    this.subscribe('git:dirty', this.handleGitDirty);\n    this.subscribe('credentials:found', this.handleCredentialsFound);\n    this.subscribe('credentials:request', this.handleCredentialsRequest);\n    this.subscribe('credentials:env:prompt', this.handleEnvScanPrompt);\n    this.subscribe('device:started', this.handleDeviceStarted);\n    this.subscribe('device:success', this.handleDeviceSuccess);\n    this.subscribe('staging:fetching', this.handleStagingFetching);\n    this.subscribe('staging:success', this.handleStagingSuccess);\n    this.subscribe('credentials:env:found', this.handleEnvCredentialsFound);\n    this.subscribe('config:complete', this.handleConfigComplete);\n    this.subscribe('agent:start', this.handleAgentStart);\n    this.subscribe('agent:progress', this.handleAgentProgress);\n    this.subscribe('validation:start', this.handleValidationStart);\n    this.subscribe('validation:issues', this.handleValidationIssues);\n    this.subscribe('validation:complete', this.handleValidationComplete);\n    this.subscribe('complete', this.handleComplete);\n    this.subscribe('error', this.handleError);\n    // Branch check events\n    this.subscribe('branch:prompt', this.handleBranchPrompt);\n    this.subscribe('branch:created', this.handleBranchCreated);\n\n    // Post-install events\n    this.subscribe('postinstall:changes', this.handlePostInstallChanges);\n    this.subscribe('postinstall:commit:prompt', this.handleCommitPrompt);\n    this.subscribe('postinstall:commit:generating', this.handleCommitGenerating);\n    this.subscribe('postinstall:commit:success', this.handleCommitSuccess);\n    this.subscribe('postinstall:commit:failed', this.handleCommitFailed);\n    this.subscribe('postinstall:pr:prompt', this.handlePrPrompt);\n    this.subscribe('postinstall:pr:generating', this.handlePrGenerating);\n    this.subscribe('postinstall:pr:pushing', this.handlePrPushing);\n    this.subscribe('postinstall:pr:success', this.handlePrSuccess);\n    this.subscribe('postinstall:pr:failed', this.handlePrFailed);\n    this.subscribe('postinstall:push:failed', this.handlePushFailed);\n    this.subscribe('postinstall:manual', this.handleManualInstructions);\n  }\n\n  async stop(): Promise<void> {\n    if (!this.isStarted) return;\n\n    // Remove SIGINT handler\n    if (this.sigIntHandler) {\n      process.off('SIGINT', this.sigIntHandler);\n      this.sigIntHandler = null;\n    }\n\n    // Stop agent updates\n    this.stopAgentUpdates();\n\n    // Unsubscribe from all events\n    for (const [event, handler] of this.handlers) {\n      this.emitter.off(event as keyof InstallerEvents, handler as never);\n    }\n    this.handlers.clear();\n\n    // Stop any active spinner\n    this.spinner?.stop();\n    this.spinner = null;\n\n    this.isStarted = false;\n  }\n\n  private stopAgentUpdates = (): void => {\n    if (this.agentUpdateInterval) {\n      clearInterval(this.agentUpdateInterval);\n      this.agentUpdateInterval = null;\n    }\n  };\n\n  private stopSpinner(message: string): void {\n    if (this.spinner) {\n      this.spinner.stop(message);\n      this.spinner = null;\n    }\n  }\n\n  /** Debug logging - only outputs when debug mode is enabled */\n  private debugLog = (message: string): void => {\n    if (this.debug) {\n      console.log(chalk.dim(`[debug] ${message}`));\n    }\n  };\n\n  /**\n   * Helper to subscribe and track handlers for cleanup.\n   */\n  private subscribe<K extends keyof InstallerEvents>(\n    event: K,\n    handler: (payload: InstallerEvents[K]) => void | Promise<void>,\n  ): void {\n    const boundHandler = handler.bind(this);\n    this.handlers.set(event, boundHandler as (...args: unknown[]) => void);\n    this.emitter.on(event, boundHandler);\n  }\n\n  // ===== Event Handlers =====\n\n  private handleStateEnter = ({ state }: InstallerEvents['state:enter']): void => {\n    this.progress.enterPhase(state);\n  };\n\n  private handleStateExit = ({ state }: InstallerEvents['state:exit']): void => {\n    this.progress.exitPhase(state);\n  };\n\n  private handleAuthSuccess = (): void => {\n    clack.log.success('Authenticated');\n  };\n\n  private handleAuthFailure = ({ message }: InstallerEvents['auth:failure']): void => {\n    clack.log.error(`Auth failed: ${message}`);\n    clack.log.info('Visit https://dashboard.workos.com to verify your account');\n  };\n\n  private handleDetectionComplete = ({ integration }: InstallerEvents['detection:complete']): void => {\n    this.queueableLog(() => clack.log.success(`Detected ${chalk.bold(integration)}`));\n  };\n\n  private handleDetectionNone = (): void => {\n    this.queueableLog(() => clack.log.warn('Could not detect framework automatically'));\n  };\n\n  private handleCredentialsFound = (): void => {\n    clack.log.success('Found existing WorkOS credentials in .env.local');\n  };\n\n  private handleEnvScanPrompt = async ({ files }: InstallerEvents['credentials:env:prompt']): Promise<void> => {\n    this.isPromptActive = true;\n    const fileList = files.length === 1 ? files[0] : files.slice(0, 2).join(', ');\n    const confirmed = await clack.confirm({\n      message: `Found ${fileList}. Check for existing WorkOS credentials?`,\n      initialValue: true,\n    });\n    this.isPromptActive = false;\n    this.flushPendingLogs();\n\n    this.sendEvent({\n      type: clack.isCancel(confirmed) || !confirmed ? 'ENV_SCAN_DECLINED' : 'ENV_SCAN_APPROVED',\n    });\n  };\n\n  private handleDeviceStarted = ({ verificationUri, userCode }: InstallerEvents['device:started']): void => {\n    clack.log.info(`\\nOpen this URL in your browser:\\n`);\n    console.log(`  ${chalk.cyan(verificationUri)}`);\n    console.log(`\\nEnter code: ${chalk.bold(userCode)}\\n`);\n\n    this.spinner = clack.spinner();\n    this.spinner.start('Waiting for authentication...');\n  };\n\n  private handleDeviceSuccess = (): void => {\n    // Spinner will be stopped by handleStagingFetching\n  };\n\n  private handleStagingFetching = (): void => {\n    if (this.spinner) {\n      this.spinner.stop('Authenticated');\n    }\n    this.spinner = clack.spinner();\n    this.spinner.start('Fetching your WorkOS credentials...');\n  };\n\n  private handleStagingSuccess = (): void => {\n    this.stopSpinner('Credentials fetched');\n    clack.log.success('WorkOS credentials retrieved automatically');\n  };\n\n  private handleEnvCredentialsFound = ({ sourcePath }: InstallerEvents['credentials:env:found']): void => {\n    clack.log.success(`Found existing WorkOS credentials in ${sourcePath}`);\n  };\n\n  private handleGitDirty = async ({ files }: InstallerEvents['git:dirty']): Promise<void> => {\n    clack.log.warn('You have uncommitted or untracked files:');\n    files.slice(0, 5).forEach((f) => clack.log.info(chalk.dim(`  ${f}`)));\n    if (files.length > 5) {\n      clack.log.info(chalk.dim(`  ... and ${files.length - 5} more`));\n    }\n\n    this.isPromptActive = true;\n    const confirmed = await clack.confirm({\n      message: 'Continue anyway?',\n      initialValue: false,\n    });\n    this.isPromptActive = false;\n    this.flushPendingLogs();\n\n    this.sendEvent({\n      type: clack.isCancel(confirmed) || !confirmed ? 'GIT_CANCELLED' : 'GIT_CONFIRMED',\n    });\n  };\n\n  private handleCredentialsRequest = async ({\n    requiresApiKey,\n  }: InstallerEvents['credentials:request']): Promise<void> => {\n    clack.log.step(`Get your credentials from ${chalk.cyan('https://dashboard.workos.com')}`);\n\n    const clientId = await clack.text({\n      message: 'Enter your WorkOS Client ID:',\n      placeholder: 'client_...',\n      validate: (value) => {\n        if (!value || value.trim().length === 0) {\n          return 'Client ID is required';\n        }\n        if (!value.startsWith('client_')) {\n          return 'Client ID should start with \"client_\"';\n        }\n        return undefined;\n      },\n    });\n\n    if (clack.isCancel(clientId)) {\n      this.sendEvent({ type: 'CANCEL' });\n      return;\n    }\n\n    let apiKey = '';\n    if (requiresApiKey) {\n      clack.log.info(chalk.dim('ℹ️ Your API key will be hidden for security and saved to .env.local'));\n      const apiKeyResult = await clack.password({\n        message: 'Enter your WorkOS API Key:',\n        validate: (value) => {\n          if (!value || value.trim().length === 0) {\n            return 'API Key is required';\n          }\n          if (!value.startsWith('sk_')) {\n            return 'API Key should start with \"sk_\"';\n          }\n          return undefined;\n        },\n      });\n\n      if (clack.isCancel(apiKeyResult)) {\n        this.sendEvent({ type: 'CANCEL' });\n        return;\n      }\n      apiKey = apiKeyResult as string;\n    } else {\n      clack.log.info(chalk.dim('ℹ️ Client-only SDK - API key not required'));\n    }\n\n    this.sendEvent({\n      type: 'CREDENTIALS_SUBMITTED',\n      apiKey,\n      clientId: clientId as string,\n    });\n  };\n\n  private handleConfigComplete = (): void => {\n    clack.log.success('Environment configured');\n  };\n\n  private handleAgentStart = (): void => {\n    this.spinner = clack.spinner();\n    this.spinner.start('Running AI agent...');\n\n    // Periodic status updates for long-running operations\n    let dots = 0;\n    this.agentUpdateInterval = setInterval(() => {\n      dots = (dots + 1) % 4;\n      const dotStr = '.'.repeat(dots + 1);\n      this.spinner?.message(`Running AI agent${dotStr}`);\n    }, 2000);\n  };\n\n  private handleAgentProgress = ({ step, detail }: InstallerEvents['agent:progress']): void => {\n    const message = detail ? `${step}: ${detail}` : step;\n    this.spinner?.message(message);\n  };\n\n  private handleValidationStart = (): void => {\n    this.stopAgentUpdates();\n    this.stopSpinner('Agent completed');\n  };\n\n  private handleValidationIssues = ({ issues }: InstallerEvents['validation:issues']): void => {\n    for (const issue of issues) {\n      if (issue.severity === 'error') {\n        clack.log.error(issue.message);\n      } else {\n        clack.log.warn(issue.message);\n      }\n      if (issue.hint) {\n        clack.log.info(`Hint: ${issue.hint}`);\n      }\n    }\n  };\n\n  private handleValidationComplete = ({ passed, issueCount }: InstallerEvents['validation:complete']): void => {\n    if (passed) {\n      clack.log.success('Validation passed');\n    } else {\n      clack.log.warn(`Validation found ${issueCount} issue(s)`);\n    }\n  };\n\n  private handleComplete = ({ success, summary }: InstallerEvents['complete']): void => {\n    this.stopAgentUpdates();\n    this.stopSpinner(success ? 'Done' : 'Failed');\n\n    console.log('');\n    console.log(renderCompletionSummary(success, summary));\n    console.log('');\n  };\n\n  private handleError = ({ message, stack }: InstallerEvents['error']): void => {\n    this.stopSpinner('Error');\n    this.stopAgentUpdates();\n\n    // Rewrite raw API/SDK errors into user-friendly messages\n    const isServiceError =\n      /\\b50[0-9]\\b/.test(message) || /server_error|internal_error|overloaded|service.*unavailable/i.test(message);\n    const isRateLimit = /\\b429\\b/.test(message) || /rate.limit/i.test(message);\n    const isNetworkError = /ECONNREFUSED|ETIMEDOUT|ENOTFOUND|fetch failed/i.test(message);\n    const isProcessExit = /process exited with code/i.test(message);\n\n    if (isServiceError) {\n      clack.log.error('The AI service is temporarily unavailable.');\n      clack.log.info('This is usually resolved within a few minutes. Please try again shortly.');\n    } else if (isRateLimit) {\n      clack.log.error('The AI service is currently rate-limited.');\n      clack.log.info('Please wait a minute and try again.');\n    } else if (isNetworkError) {\n      clack.log.error('Could not connect to the AI service.');\n      clack.log.info('Check your internet connection and try again.');\n    } else if (isProcessExit) {\n      clack.log.error('The AI agent process exited unexpectedly.');\n      clack.log.info('Try running again. If this persists, run with --debug for details.');\n    } else {\n      clack.log.error(message);\n    }\n\n    // Add actionable hints for common errors\n    if (message.includes('authentication') || message.includes('auth')) {\n      clack.log.info(`Try running: ${formatWorkOSCommand('auth logout')} && ${formatWorkOSCommand('install')}`);\n    }\n    if (message.includes('ENOENT') || message.includes('not found')) {\n      clack.log.info('Ensure you are in a project directory');\n    }\n\n    if (stack && this.debug) {\n      this.debugLog(stack);\n    }\n  };\n\n  private handleBranchPrompt = async ({ branch }: InstallerEvents['branch:prompt']): Promise<void> => {\n    this.isPromptActive = true;\n    const choice = await clack.select({\n      message: `You are on ${chalk.bold(branch)}. Create a feature branch?`,\n      options: [\n        { value: 'create', label: 'Create feat/add-workos-authkit' },\n        { value: 'continue', label: 'Continue on current branch' },\n        { value: 'cancel', label: 'Cancel' },\n      ],\n    });\n    this.isPromptActive = false;\n    this.flushPendingLogs();\n\n    if (clack.isCancel(choice) || choice === 'cancel') {\n      this.sendEvent({ type: 'BRANCH_CANCEL' });\n    } else if (choice === 'create') {\n      this.sendEvent({ type: 'BRANCH_CREATE' });\n    } else {\n      this.sendEvent({ type: 'BRANCH_CONTINUE' });\n    }\n  };\n\n  private handleBranchCreated = ({ branch }: InstallerEvents['branch:created']): void => {\n    this.queueableLog(() => clack.log.success(`Created branch ${chalk.bold(branch)}`));\n  };\n\n  // ===== Post-install Event Handlers =====\n\n  private handlePostInstallChanges = ({ files }: InstallerEvents['postinstall:changes']): void => {\n    this.debugLog(`Post-install: ${files.length} changed files detected`);\n  };\n\n  private handleCommitPrompt = async (): Promise<void> => {\n    this.isPromptActive = true;\n    const confirmed = await clack.confirm({\n      message: 'Commit the changes?',\n      initialValue: true,\n    });\n    this.isPromptActive = false;\n    this.flushPendingLogs();\n\n    this.sendEvent({\n      type: clack.isCancel(confirmed) || !confirmed ? 'COMMIT_DECLINED' : 'COMMIT_APPROVED',\n    });\n  };\n\n  private handleCommitGenerating = (): void => {\n    this.spinner = clack.spinner();\n    this.spinner.start('Generating commit message...');\n  };\n\n  private handleCommitSuccess = ({ message }: InstallerEvents['postinstall:commit:success']): void => {\n    this.stopSpinner('Committed');\n    clack.log.success(`Committed: ${chalk.dim(message)}`);\n  };\n\n  private handleCommitFailed = ({ error }: InstallerEvents['postinstall:commit:failed']): void => {\n    this.stopSpinner('Commit failed');\n    clack.log.error(`Commit failed: ${error}`);\n  };\n\n  private handlePrPrompt = async (): Promise<void> => {\n    this.isPromptActive = true;\n    const confirmed = await clack.confirm({\n      message: 'Create a pull request?',\n      initialValue: true,\n    });\n    this.isPromptActive = false;\n    this.flushPendingLogs();\n\n    this.sendEvent({\n      type: clack.isCancel(confirmed) || !confirmed ? 'PR_DECLINED' : 'PR_APPROVED',\n    });\n  };\n\n  private handlePrGenerating = (): void => {\n    this.spinner = clack.spinner();\n    this.spinner.start('Generating PR description...');\n  };\n\n  private handlePrPushing = (): void => {\n    if (this.spinner) {\n      this.spinner.message('Pushing to remote...');\n    } else {\n      this.spinner = clack.spinner();\n      this.spinner.start('Pushing to remote...');\n    }\n  };\n\n  private handlePrSuccess = ({ url }: InstallerEvents['postinstall:pr:success']): void => {\n    this.stopSpinner('PR created');\n    clack.log.success(`Pull request created: ${chalk.cyan(url)}`);\n  };\n\n  private handlePrFailed = ({ error }: InstallerEvents['postinstall:pr:failed']): void => {\n    this.stopSpinner('PR creation failed');\n    clack.log.error(`PR creation failed: ${error}`);\n  };\n\n  private handlePushFailed = ({ error }: InstallerEvents['postinstall:push:failed']): void => {\n    this.stopSpinner('Push failed');\n    clack.log.error(`Push failed: ${error}`);\n  };\n\n  private handleManualInstructions = ({ instructions }: InstallerEvents['postinstall:manual']): void => {\n    clack.log.info('GitHub CLI not found. Manual steps:');\n    console.log(chalk.dim(instructions));\n  };\n}\n"]}
+{"version":3,"file":"cli-adapter.js","sourceRoot":"","sources":["../../../src/lib/adapters/cli-adapter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,MAAM,sBAAsB,CAAC;AACzC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAExE;;;;;GAKG;AACH,MAAM,OAAO,UAAU;IACZ,OAAO,CAAwB;IAChC,SAAS,CAA6B;IACtC,KAAK,CAAU;IACf,OAAO,GAA4C,IAAI,CAAC;IACxD,SAAS,GAAG,KAAK,CAAC;IAClB,QAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;IAEzC,+EAA+E;IACvE,UAAU,GAAG,KAAK,CAAC;IACnB,sBAAsB,GAAG,KAAK,CAAC;IAEvC,mCAAmC;IAC3B,QAAQ,GAAG,IAAI,GAAG,EAAwC,CAAC;IAEnE,+DAA+D;IACvD,cAAc,GAAG,KAAK,CAAC;IACvB,WAAW,GAAsB,EAAE,CAAC;IAE5C,6BAA6B;IACrB,aAAa,GAAwB,IAAI,CAAC;IAElD,qCAAqC;IAC7B,mBAAmB,GAA0B,IAAI,CAAC;IAE1D,YAAY,MAAqB;QAC/B,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC;IACrC,CAAC;IAED;;OAEG;IACK,YAAY,CAAC,KAAiB;QACpC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,KAAK,EAAE,CAAC;QACV,CAAC;IACH,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QAEtB,aAAa;QACb,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YACjC,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACpG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7B,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACzD,CAAC;QAED,2BAA2B;QAC3B,MAAM,YAAY,GAAG,GAAG,EAAE;YACxB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC/B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;YACtB,CAAC;YACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACtC,KAAK,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,CAAC;QACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;QAElC,kDAAkD;QAClD,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAEnD,gDAAgD;QAChD,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACnE,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,CAAC,wBAAwB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACnE,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACxE,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,kBAAkB,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1C,oDAAoD;QACpD,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC3D,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,CAAC,mBAAmB,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAE7D,sBAAsB;QACtB,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,CAAC,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAE3D,sBAAsB;QACtB,IAAI,CAAC,SAAS,CAAC,qBAAqB,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,CAAC,2BAA2B,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,CAAC,+BAA+B,EAAE,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC7E,IAAI,CAAC,SAAS,CAAC,4BAA4B,EAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACvE,IAAI,CAAC,SAAS,CAAC,2BAA2B,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,2BAA2B,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACrE,IAAI,CAAC,SAAS,CAAC,wBAAwB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,CAAC,wBAAwB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,CAAC,uBAAuB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,yBAAyB,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAE5B,wBAAwB;QACxB,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YAC1C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;QAED,qBAAqB;QACrB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,8BAA8B;QAC9B,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAA8B,EAAE,OAAgB,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEtB,0BAA0B;QAC1B,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpB,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;IAEO,gBAAgB,GAAG,GAAS,EAAE;QACpC,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,aAAa,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YACxC,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;QAClC,CAAC;IACH,CAAC,CAAC;IAEM,WAAW,CAAC,OAAe;QACjC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACtB,CAAC;IACH,CAAC;IAED,8DAA8D;IACtD,QAAQ,GAAG,CAAC,OAAe,EAAQ,EAAE;QAC3C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC,CAAC;IAEF;;OAEG;IACK,SAAS,CACf,KAAQ,EACR,OAA8D;QAE9D,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,YAA4C,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACvC,CAAC;IAED,6BAA6B;IAErB,gBAAgB,GAAG,CAAC,EAAE,KAAK,EAAkC,EAAQ,EAAE;QAC7E,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC;IAEM,eAAe,GAAG,CAAC,EAAE,KAAK,EAAiC,EAAQ,EAAE;QAC3E,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC;IAEM,iBAAiB,GAAG,GAAS,EAAE;QACrC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC,CAAC;IAEM,iBAAiB,GAAG,CAAC,EAAE,OAAO,EAAmC,EAAQ,EAAE;QACjF,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,OAAO,EAAE,CAAC,CAAC;QAC3C,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IAC9E,CAAC,CAAC;IAEM,uBAAuB,GAAG,CAAC,EAAE,WAAW,EAAyC,EAAQ,EAAE;QACjG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC;IAEM,mBAAmB,GAAG,GAAS,EAAE;QACvC,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC,CAAC;IACtF,CAAC,CAAC;IAEM,sBAAsB,GAAG,GAAS,EAAE;QAC1C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC,CAAC;IAEM,mBAAmB,GAAG,KAAK,EAAE,EAAE,KAAK,EAA6C,EAAiB,EAAE;QAC1G,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,SAAS,QAAQ,0CAA0C;YACpE,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB;SAC1F,CAAC,CAAC;IACL,CAAC,CAAC;IAEM,mBAAmB,GAAG,CAAC,EAAE,eAAe,EAAE,QAAQ,EAAqC,EAAQ,EAAE;QACvG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEvD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACtD,CAAC,CAAC;IAEM,mBAAmB,GAAG,GAAS,EAAE;QACvC,mDAAmD;IACrD,CAAC,CAAC;IAEM,qBAAqB,GAAG,GAAS,EAAE;QACzC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC5D,CAAC,CAAC;IAEM,oBAAoB,GAAG,GAAS,EAAE;QACxC,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;QACxC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;IAClE,CAAC,CAAC;IAEM,yBAAyB,GAAG,CAAC,EAAE,UAAU,EAA4C,EAAQ,EAAE;QACrG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,wCAAwC,UAAU,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC;IAEM,cAAc,GAAG,KAAK,EAAE,EAAE,KAAK,EAAgC,EAAiB,EAAE;QACxF,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QAC3D,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,kBAAkB;YAC3B,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;SAClF,CAAC,CAAC;IACL,CAAC,CAAC;IAEM,wBAAwB,GAAG,KAAK,EAAE,EACxC,cAAc,GACyB,EAAiB,EAAE;QAC1D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;QAE1F,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC;YAChC,OAAO,EAAE,8BAA8B;YACvC,WAAW,EAAE,YAAY;YACzB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;gBAClB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACxC,OAAO,uBAAuB,CAAC;gBACjC,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;oBACjC,OAAO,uCAAuC,CAAC;gBACjD,CAAC;gBACD,OAAO,SAAS,CAAC;YACnB,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;QAED,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,cAAc,EAAE,CAAC;YACnB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC,CAAC;YACjG,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC;gBACxC,OAAO,EAAE,4BAA4B;gBACrC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;oBAClB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACxC,OAAO,qBAAqB,CAAC;oBAC/B,CAAC;oBACD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;wBAC7B,OAAO,iCAAiC,CAAC;oBAC3C,CAAC;oBACD,OAAO,SAAS,CAAC;gBACnB,CAAC;aACF,CAAC,CAAC;YAEH,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBACjC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACnC,OAAO;YACT,CAAC;YACD,MAAM,GAAG,YAAsB,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,uBAAuB;YAC7B,MAAM;YACN,QAAQ,EAAE,QAAkB;SAC7B,CAAC,CAAC;IACL,CAAC,CAAC;IAEM,oBAAoB,GAAG,GAAS,EAAE;QACxC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC9C,CAAC,CAAC;IAEM,gBAAgB,GAAG,GAAS,EAAE;QACpC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAE1C,sDAAsD;QACtD,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,CAAC,mBAAmB,GAAG,WAAW,CAAC,GAAG,EAAE;YAC1C,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;YACtB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YACpC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC,EAAE,IAAI,CAAC,CAAC;IACX,CAAC,CAAC;IAEM,mBAAmB,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAqC,EAAQ,EAAE;QAC1F,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACrD,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC,CAAC;IAEM,qBAAqB,GAAG,GAAS,EAAE;QACzC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IACtC,CAAC,CAAC;IAEM,sBAAsB,GAAG,CAAC,EAAE,MAAM,EAAwC,EAAQ,EAAE;QAC1F,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC/B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;gBACf,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEM,wBAAwB,GAAG,CAAC,EAAE,MAAM,EAAE,UAAU,EAA0C,EAAQ,EAAE;QAC1G,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,UAAU,WAAW,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC,CAAC;IAEM,cAAc,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,EAA+B,EAAQ,EAAE;QACnF,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAE9C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,yEAAyE;QACzE,6CAA6C;QAC7C,IAAI,OAAO,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC/B,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,sBAAsB,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC,CAAC;IAEM,WAAW,GAAG,CAAC,EAAE,OAAO,EAAE,KAAK,EAA4B,EAAQ,EAAE;QAC3E,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,yDAAyD;QACzD,MAAM,cAAc,GAClB,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,8DAA8D,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9G,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3E,MAAM,cAAc,GAAG,gDAAgD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtF,MAAM,aAAa,GAAG,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAEhE,IAAI,cAAc,EAAE,CAAC;YACnB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC9D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;QAC7F,CAAC;aAAM,IAAI,WAAW,EAAE,CAAC;YACvB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC7D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QACxD,CAAC;aAAM,IAAI,cAAc,EAAE,CAAC;YAC1B,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACxD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;QAClE,CAAC;aAAM,IAAI,aAAa,EAAE,CAAC;YACzB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC7D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QACvF,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAED,yCAAyC;QACzC,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,mBAAmB,CAAC,aAAa,CAAC,OAAO,mBAAmB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5G,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC;IAEF,sCAAsC;IAE9B,oBAAoB,GAAG,KAAK,EAAE,EAAE,cAAc,EAAsC,EAAiB,EAAE;QAC7G,IAAI,CAAC,sBAAsB,GAAG,cAAc,CAAC;QAC7C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,wEAAwE;YACjF,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,oBAAoB;SAC5F,CAAC,CAAC;IACL,CAAC,CAAC;IAEM,mBAAmB,GAAG,CAAC,EAAE,cAAc,EAAqC,EAAQ,EAAE;QAC5F,IAAI,CAAC,sBAAsB,GAAG,cAAc,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,sCAAsC,cAAc,8BAA8B,CAAC,CAAC;IACzG,CAAC,CAAC;IAEF,4EAA4E;IAC5E,wDAAwD;IAChD,sBAAsB,GAAG,CAAC,EAAE,IAAI,EAAwC,EAAQ,EAAE;QACxF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IAEM,sBAAsB,GAAG,GAAS,EAAE;QAC1C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAAC,CAAC;IAC1C,CAAC,CAAC;IAEM,oBAAoB,GAAG,CAAC,EAAE,KAAK,EAAsC,EAAQ,EAAE;QACrF,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;QACpC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC;IAEM,kBAAkB,GAAG,KAAK,EAAE,EAAE,MAAM,EAAoC,EAAiB,EAAE;QACjG,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC;YAChC,OAAO,EAAE,cAAc,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,4BAA4B;YACrE,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,gCAAgC,EAAE;gBAC5D,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,4BAA4B,EAAE;gBAC1D,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;aACrC;SACF,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClD,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QAC5C,CAAC;aAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC;IAEM,mBAAmB,GAAG,CAAC,EAAE,MAAM,EAAqC,EAAQ,EAAE;QACpF,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC;IAEF,0CAA0C;IAElC,wBAAwB,GAAG,CAAC,EAAE,KAAK,EAA0C,EAAQ,EAAE;QAC7F,IAAI,CAAC,QAAQ,CAAC,iBAAiB,KAAK,CAAC,MAAM,yBAAyB,CAAC,CAAC;IACxE,CAAC,CAAC;IAEM,kBAAkB,GAAG,KAAK,IAAmB,EAAE;QACrD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,qBAAqB;YAC9B,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB;SACtF,CAAC,CAAC;IACL,CAAC,CAAC;IAEM,sBAAsB,GAAG,GAAS,EAAE;QAC1C,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrD,CAAC,CAAC;IAEM,mBAAmB,GAAG,CAAC,EAAE,OAAO,EAAiD,EAAQ,EAAE;QACjG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC9B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC;IAEM,kBAAkB,GAAG,CAAC,EAAE,KAAK,EAAgD,EAAQ,EAAE;QAC7F,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;QAClC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEM,cAAc,GAAG,KAAK,IAAmB,EAAE;QACjD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,wBAAwB;YACjC,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAExB,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa;SAC9E,CAAC,CAAC;IACL,CAAC,CAAC;IAEM,kBAAkB,GAAG,GAAS,EAAE;QACtC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrD,CAAC,CAAC;IAEM,eAAe,GAAG,GAAS,EAAE;QACnC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;YAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC;IAEM,eAAe,GAAG,CAAC,EAAE,GAAG,EAA6C,EAAQ,EAAE;QACrF,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAC/B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,yBAAyB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC;IAEM,cAAc,GAAG,CAAC,EAAE,KAAK,EAA4C,EAAQ,EAAE;QACrF,IAAI,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;QACvC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,uBAAuB,KAAK,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC;IAEM,gBAAgB,GAAG,CAAC,EAAE,KAAK,EAA8C,EAAQ,EAAE;QACzF,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAChC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEM,wBAAwB,GAAG,CAAC,EAAE,YAAY,EAAyC,EAAQ,EAAE;QACnG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC;CACH","sourcesContent":["import type { InstallerAdapter, AdapterConfig } from './types.js';\nimport type { InstallerEventEmitter, InstallerEvents } from '../events.js';\nimport clack from '../../utils/clack.js';\nimport chalk from 'chalk';\nimport { getConfig } from '../settings.js';\nimport { ProgressTracker } from '../progress-tracker.js';\nimport { renderCompletionSummary } from '../../utils/summary-box.js';\nimport { formatWorkOSCommand } from '../../utils/command-invocation.js';\n\n/**\n * CLI adapter that renders wizard events via clack.\n *\n * Subscribes to InstallerEventEmitter and translates events into\n * clack UI operations (logs, spinners, prompts).\n */\nexport class CLIAdapter implements InstallerAdapter {\n  readonly emitter: InstallerEventEmitter;\n  private sendEvent: AdapterConfig['sendEvent'];\n  private debug: boolean;\n  private spinner: ReturnType<typeof clack.spinner> | null = null;\n  private isStarted = false;\n  private progress = new ProgressTracker();\n\n  // Scaffold (empty-dir) state, used to print a \"next steps\" hint on completion.\n  private scaffolded = false;\n  private scaffoldPackageManager = 'npm';\n\n  // Store bound handlers for cleanup\n  private handlers = new Map<string, (...args: unknown[]) => void>();\n\n  // Queue for logs while prompt is active (parallel state issue)\n  private isPromptActive = false;\n  private pendingLogs: Array<() => void> = [];\n\n  // SIGINT handler for cleanup\n  private sigIntHandler: (() => void) | null = null;\n\n  // Long-running agent update interval\n  private agentUpdateInterval: NodeJS.Timeout | null = null;\n\n  constructor(config: AdapterConfig) {\n    this.emitter = config.emitter;\n    this.sendEvent = config.sendEvent;\n    this.debug = config.debug ?? false;\n  }\n\n  /**\n   * Queue a log call if a prompt is active, otherwise execute immediately.\n   */\n  private queueableLog(logFn: () => void): void {\n    if (this.isPromptActive) {\n      this.pendingLogs.push(logFn);\n    } else {\n      logFn();\n    }\n  }\n\n  /**\n   * Flush any queued logs after prompt completes.\n   */\n  private flushPendingLogs(): void {\n    const logs = this.pendingLogs.splice(0);\n    logs.forEach((fn) => fn());\n  }\n\n  async start(): Promise<void> {\n    if (this.isStarted) return;\n    this.isStarted = true;\n\n    // Show intro\n    const config = getConfig();\n    if (config.branding.showAsciiArt) {\n      const art = config.branding.useCompact ? config.branding.compactAsciiArt : config.branding.asciiArt;\n      console.log(chalk.cyan(art));\n      console.log();\n    } else {\n      clack.intro('Welcome to the WorkOS AuthKit installer');\n    }\n\n    // Handle Ctrl+C gracefully\n    const handleSigInt = () => {\n      if (this.spinner) {\n        this.spinner.stop('Cancelled');\n        this.spinner = null;\n      }\n      this.stopAgentUpdates();\n      clack.log.warn('Installer cancelled');\n      clack.outro('Your project was not modified');\n      process.exit(0);\n    };\n    process.on('SIGINT', handleSigInt);\n    this.sigIntHandler = handleSigInt;\n\n    // Subscribe to state events for progress tracking\n    this.subscribe('state:enter', this.handleStateEnter);\n    this.subscribe('state:exit', this.handleStateExit);\n\n    // Subscribe to events that require UI rendering\n    this.subscribe('auth:success', this.handleAuthSuccess);\n    this.subscribe('auth:failure', this.handleAuthFailure);\n    this.subscribe('detection:complete', this.handleDetectionComplete);\n    this.subscribe('detection:none', this.handleDetectionNone);\n    this.subscribe('git:dirty', this.handleGitDirty);\n    this.subscribe('credentials:found', this.handleCredentialsFound);\n    this.subscribe('credentials:request', this.handleCredentialsRequest);\n    this.subscribe('credentials:env:prompt', this.handleEnvScanPrompt);\n    this.subscribe('device:started', this.handleDeviceStarted);\n    this.subscribe('device:success', this.handleDeviceSuccess);\n    this.subscribe('staging:fetching', this.handleStagingFetching);\n    this.subscribe('staging:success', this.handleStagingSuccess);\n    this.subscribe('credentials:env:found', this.handleEnvCredentialsFound);\n    this.subscribe('config:complete', this.handleConfigComplete);\n    this.subscribe('agent:start', this.handleAgentStart);\n    this.subscribe('agent:progress', this.handleAgentProgress);\n    this.subscribe('validation:start', this.handleValidationStart);\n    this.subscribe('validation:issues', this.handleValidationIssues);\n    this.subscribe('validation:complete', this.handleValidationComplete);\n    this.subscribe('complete', this.handleComplete);\n    this.subscribe('error', this.handleError);\n    // Scaffold events (empty-directory app scaffolding)\n    this.subscribe('scaffold:prompt', this.handleScaffoldPrompt);\n    this.subscribe('scaffold:start', this.handleScaffoldStart);\n    this.subscribe('scaffold:progress', this.handleScaffoldProgress);\n    this.subscribe('scaffold:complete', this.handleScaffoldComplete);\n    this.subscribe('scaffold:failed', this.handleScaffoldFailed);\n\n    // Branch check events\n    this.subscribe('branch:prompt', this.handleBranchPrompt);\n    this.subscribe('branch:created', this.handleBranchCreated);\n\n    // Post-install events\n    this.subscribe('postinstall:changes', this.handlePostInstallChanges);\n    this.subscribe('postinstall:commit:prompt', this.handleCommitPrompt);\n    this.subscribe('postinstall:commit:generating', this.handleCommitGenerating);\n    this.subscribe('postinstall:commit:success', this.handleCommitSuccess);\n    this.subscribe('postinstall:commit:failed', this.handleCommitFailed);\n    this.subscribe('postinstall:pr:prompt', this.handlePrPrompt);\n    this.subscribe('postinstall:pr:generating', this.handlePrGenerating);\n    this.subscribe('postinstall:pr:pushing', this.handlePrPushing);\n    this.subscribe('postinstall:pr:success', this.handlePrSuccess);\n    this.subscribe('postinstall:pr:failed', this.handlePrFailed);\n    this.subscribe('postinstall:push:failed', this.handlePushFailed);\n    this.subscribe('postinstall:manual', this.handleManualInstructions);\n  }\n\n  async stop(): Promise<void> {\n    if (!this.isStarted) return;\n\n    // Remove SIGINT handler\n    if (this.sigIntHandler) {\n      process.off('SIGINT', this.sigIntHandler);\n      this.sigIntHandler = null;\n    }\n\n    // Stop agent updates\n    this.stopAgentUpdates();\n\n    // Unsubscribe from all events\n    for (const [event, handler] of this.handlers) {\n      this.emitter.off(event as keyof InstallerEvents, handler as never);\n    }\n    this.handlers.clear();\n\n    // Stop any active spinner\n    this.spinner?.stop();\n    this.spinner = null;\n\n    this.isStarted = false;\n  }\n\n  private stopAgentUpdates = (): void => {\n    if (this.agentUpdateInterval) {\n      clearInterval(this.agentUpdateInterval);\n      this.agentUpdateInterval = null;\n    }\n  };\n\n  private stopSpinner(message: string): void {\n    if (this.spinner) {\n      this.spinner.stop(message);\n      this.spinner = null;\n    }\n  }\n\n  /** Debug logging - only outputs when debug mode is enabled */\n  private debugLog = (message: string): void => {\n    if (this.debug) {\n      console.log(chalk.dim(`[debug] ${message}`));\n    }\n  };\n\n  /**\n   * Helper to subscribe and track handlers for cleanup.\n   */\n  private subscribe<K extends keyof InstallerEvents>(\n    event: K,\n    handler: (payload: InstallerEvents[K]) => void | Promise<void>,\n  ): void {\n    const boundHandler = handler.bind(this);\n    this.handlers.set(event, boundHandler as (...args: unknown[]) => void);\n    this.emitter.on(event, boundHandler);\n  }\n\n  // ===== Event Handlers =====\n\n  private handleStateEnter = ({ state }: InstallerEvents['state:enter']): void => {\n    this.progress.enterPhase(state);\n  };\n\n  private handleStateExit = ({ state }: InstallerEvents['state:exit']): void => {\n    this.progress.exitPhase(state);\n  };\n\n  private handleAuthSuccess = (): void => {\n    clack.log.success('Authenticated');\n  };\n\n  private handleAuthFailure = ({ message }: InstallerEvents['auth:failure']): void => {\n    clack.log.error(`Auth failed: ${message}`);\n    clack.log.info('Visit https://dashboard.workos.com to verify your account');\n  };\n\n  private handleDetectionComplete = ({ integration }: InstallerEvents['detection:complete']): void => {\n    this.queueableLog(() => clack.log.success(`Detected ${chalk.bold(integration)}`));\n  };\n\n  private handleDetectionNone = (): void => {\n    this.queueableLog(() => clack.log.warn('Could not detect framework automatically'));\n  };\n\n  private handleCredentialsFound = (): void => {\n    clack.log.success('Found existing WorkOS credentials in .env.local');\n  };\n\n  private handleEnvScanPrompt = async ({ files }: InstallerEvents['credentials:env:prompt']): Promise<void> => {\n    this.isPromptActive = true;\n    const fileList = files.length === 1 ? files[0] : files.slice(0, 2).join(', ');\n    const confirmed = await clack.confirm({\n      message: `Found ${fileList}. Check for existing WorkOS credentials?`,\n      initialValue: true,\n    });\n    this.isPromptActive = false;\n    this.flushPendingLogs();\n\n    this.sendEvent({\n      type: clack.isCancel(confirmed) || !confirmed ? 'ENV_SCAN_DECLINED' : 'ENV_SCAN_APPROVED',\n    });\n  };\n\n  private handleDeviceStarted = ({ verificationUri, userCode }: InstallerEvents['device:started']): void => {\n    clack.log.info(`\\nOpen this URL in your browser:\\n`);\n    console.log(`  ${chalk.cyan(verificationUri)}`);\n    console.log(`\\nEnter code: ${chalk.bold(userCode)}\\n`);\n\n    this.spinner = clack.spinner();\n    this.spinner.start('Waiting for authentication...');\n  };\n\n  private handleDeviceSuccess = (): void => {\n    // Spinner will be stopped by handleStagingFetching\n  };\n\n  private handleStagingFetching = (): void => {\n    if (this.spinner) {\n      this.spinner.stop('Authenticated');\n    }\n    this.spinner = clack.spinner();\n    this.spinner.start('Fetching your WorkOS credentials...');\n  };\n\n  private handleStagingSuccess = (): void => {\n    this.stopSpinner('Credentials fetched');\n    clack.log.success('WorkOS credentials retrieved automatically');\n  };\n\n  private handleEnvCredentialsFound = ({ sourcePath }: InstallerEvents['credentials:env:found']): void => {\n    clack.log.success(`Found existing WorkOS credentials in ${sourcePath}`);\n  };\n\n  private handleGitDirty = async ({ files }: InstallerEvents['git:dirty']): Promise<void> => {\n    clack.log.warn('You have uncommitted or untracked files:');\n    files.slice(0, 5).forEach((f) => clack.log.info(chalk.dim(`  ${f}`)));\n    if (files.length > 5) {\n      clack.log.info(chalk.dim(`  ... and ${files.length - 5} more`));\n    }\n\n    this.isPromptActive = true;\n    const confirmed = await clack.confirm({\n      message: 'Continue anyway?',\n      initialValue: false,\n    });\n    this.isPromptActive = false;\n    this.flushPendingLogs();\n\n    this.sendEvent({\n      type: clack.isCancel(confirmed) || !confirmed ? 'GIT_CANCELLED' : 'GIT_CONFIRMED',\n    });\n  };\n\n  private handleCredentialsRequest = async ({\n    requiresApiKey,\n  }: InstallerEvents['credentials:request']): Promise<void> => {\n    clack.log.step(`Get your credentials from ${chalk.cyan('https://dashboard.workos.com')}`);\n\n    const clientId = await clack.text({\n      message: 'Enter your WorkOS Client ID:',\n      placeholder: 'client_...',\n      validate: (value) => {\n        if (!value || value.trim().length === 0) {\n          return 'Client ID is required';\n        }\n        if (!value.startsWith('client_')) {\n          return 'Client ID should start with \"client_\"';\n        }\n        return undefined;\n      },\n    });\n\n    if (clack.isCancel(clientId)) {\n      this.sendEvent({ type: 'CANCEL' });\n      return;\n    }\n\n    let apiKey = '';\n    if (requiresApiKey) {\n      clack.log.info(chalk.dim('ℹ️ Your API key will be hidden for security and saved to .env.local'));\n      const apiKeyResult = await clack.password({\n        message: 'Enter your WorkOS API Key:',\n        validate: (value) => {\n          if (!value || value.trim().length === 0) {\n            return 'API Key is required';\n          }\n          if (!value.startsWith('sk_')) {\n            return 'API Key should start with \"sk_\"';\n          }\n          return undefined;\n        },\n      });\n\n      if (clack.isCancel(apiKeyResult)) {\n        this.sendEvent({ type: 'CANCEL' });\n        return;\n      }\n      apiKey = apiKeyResult as string;\n    } else {\n      clack.log.info(chalk.dim('ℹ️ Client-only SDK - API key not required'));\n    }\n\n    this.sendEvent({\n      type: 'CREDENTIALS_SUBMITTED',\n      apiKey,\n      clientId: clientId as string,\n    });\n  };\n\n  private handleConfigComplete = (): void => {\n    clack.log.success('Environment configured');\n  };\n\n  private handleAgentStart = (): void => {\n    this.spinner = clack.spinner();\n    this.spinner.start('Running AI agent...');\n\n    // Periodic status updates for long-running operations\n    let dots = 0;\n    this.agentUpdateInterval = setInterval(() => {\n      dots = (dots + 1) % 4;\n      const dotStr = '.'.repeat(dots + 1);\n      this.spinner?.message(`Running AI agent${dotStr}`);\n    }, 2000);\n  };\n\n  private handleAgentProgress = ({ step, detail }: InstallerEvents['agent:progress']): void => {\n    const message = detail ? `${step}: ${detail}` : step;\n    this.spinner?.message(message);\n  };\n\n  private handleValidationStart = (): void => {\n    this.stopAgentUpdates();\n    this.stopSpinner('Agent completed');\n  };\n\n  private handleValidationIssues = ({ issues }: InstallerEvents['validation:issues']): void => {\n    for (const issue of issues) {\n      if (issue.severity === 'error') {\n        clack.log.error(issue.message);\n      } else {\n        clack.log.warn(issue.message);\n      }\n      if (issue.hint) {\n        clack.log.info(`Hint: ${issue.hint}`);\n      }\n    }\n  };\n\n  private handleValidationComplete = ({ passed, issueCount }: InstallerEvents['validation:complete']): void => {\n    if (passed) {\n      clack.log.success('Validation passed');\n    } else {\n      clack.log.warn(`Validation found ${issueCount} issue(s)`);\n    }\n  };\n\n  private handleComplete = ({ success, summary }: InstallerEvents['complete']): void => {\n    this.stopAgentUpdates();\n    this.stopSpinner(success ? 'Done' : 'Failed');\n\n    console.log('');\n    console.log(renderCompletionSummary(success, summary));\n    console.log('');\n\n    // When we scaffolded a fresh app, the install ran in the current dir, so\n    // point the user straight at the dev server.\n    if (success && this.scaffolded) {\n      clack.log.info(`Start your app:  ${chalk.cyan(`${this.scaffoldPackageManager} run dev`)}`);\n    }\n  };\n\n  private handleError = ({ message, stack }: InstallerEvents['error']): void => {\n    this.stopSpinner('Error');\n    this.stopAgentUpdates();\n\n    // Rewrite raw API/SDK errors into user-friendly messages\n    const isServiceError =\n      /\\b50[0-9]\\b/.test(message) || /server_error|internal_error|overloaded|service.*unavailable/i.test(message);\n    const isRateLimit = /\\b429\\b/.test(message) || /rate.limit/i.test(message);\n    const isNetworkError = /ECONNREFUSED|ETIMEDOUT|ENOTFOUND|fetch failed/i.test(message);\n    const isProcessExit = /process exited with code/i.test(message);\n\n    if (isServiceError) {\n      clack.log.error('The AI service is temporarily unavailable.');\n      clack.log.info('This is usually resolved within a few minutes. Please try again shortly.');\n    } else if (isRateLimit) {\n      clack.log.error('The AI service is currently rate-limited.');\n      clack.log.info('Please wait a minute and try again.');\n    } else if (isNetworkError) {\n      clack.log.error('Could not connect to the AI service.');\n      clack.log.info('Check your internet connection and try again.');\n    } else if (isProcessExit) {\n      clack.log.error('The AI agent process exited unexpectedly.');\n      clack.log.info('Try running again. If this persists, run with --debug for details.');\n    } else {\n      clack.log.error(message);\n    }\n\n    // Add actionable hints for common errors\n    if (message.includes('authentication') || message.includes('auth')) {\n      clack.log.info(`Try running: ${formatWorkOSCommand('auth logout')} && ${formatWorkOSCommand('install')}`);\n    }\n    if (message.includes('ENOENT') || message.includes('not found')) {\n      clack.log.info('Ensure you are in a project directory');\n    }\n\n    if (stack && this.debug) {\n      this.debugLog(stack);\n    }\n  };\n\n  // ===== Scaffold Event Handlers =====\n\n  private handleScaffoldPrompt = async ({ packageManager }: InstallerEvents['scaffold:prompt']): Promise<void> => {\n    this.scaffoldPackageManager = packageManager;\n    this.isPromptActive = true;\n    const confirmed = await clack.confirm({\n      message: 'This directory is empty. Scaffold a new Next.js app with AuthKit here?',\n      initialValue: true,\n    });\n    this.isPromptActive = false;\n    this.flushPendingLogs();\n\n    this.sendEvent({\n      type: clack.isCancel(confirmed) || !confirmed ? 'SCAFFOLD_CANCELLED' : 'SCAFFOLD_CONFIRMED',\n    });\n  };\n\n  private handleScaffoldStart = ({ packageManager }: InstallerEvents['scaffold:start']): void => {\n    this.scaffoldPackageManager = packageManager;\n    this.spinner = clack.spinner();\n    this.spinner.start(`Scaffolding a new Next.js app with ${packageManager} (this can take a minute)...`);\n  };\n\n  // create-next-app output is verbose; surface it only under --debug and keep\n  // the spinner message stable so the CLI stays readable.\n  private handleScaffoldProgress = ({ text }: InstallerEvents['scaffold:progress']): void => {\n    const line = text.trim();\n    if (line) {\n      this.debugLog(line);\n    }\n  };\n\n  private handleScaffoldComplete = (): void => {\n    this.scaffolded = true;\n    this.stopSpinner('Next.js app created');\n  };\n\n  private handleScaffoldFailed = ({ error }: InstallerEvents['scaffold:failed']): void => {\n    this.stopSpinner('Scaffold failed');\n    clack.log.error(`Could not scaffold the app: ${error}`);\n  };\n\n  private handleBranchPrompt = async ({ branch }: InstallerEvents['branch:prompt']): Promise<void> => {\n    this.isPromptActive = true;\n    const choice = await clack.select({\n      message: `You are on ${chalk.bold(branch)}. Create a feature branch?`,\n      options: [\n        { value: 'create', label: 'Create feat/add-workos-authkit' },\n        { value: 'continue', label: 'Continue on current branch' },\n        { value: 'cancel', label: 'Cancel' },\n      ],\n    });\n    this.isPromptActive = false;\n    this.flushPendingLogs();\n\n    if (clack.isCancel(choice) || choice === 'cancel') {\n      this.sendEvent({ type: 'BRANCH_CANCEL' });\n    } else if (choice === 'create') {\n      this.sendEvent({ type: 'BRANCH_CREATE' });\n    } else {\n      this.sendEvent({ type: 'BRANCH_CONTINUE' });\n    }\n  };\n\n  private handleBranchCreated = ({ branch }: InstallerEvents['branch:created']): void => {\n    this.queueableLog(() => clack.log.success(`Created branch ${chalk.bold(branch)}`));\n  };\n\n  // ===== Post-install Event Handlers =====\n\n  private handlePostInstallChanges = ({ files }: InstallerEvents['postinstall:changes']): void => {\n    this.debugLog(`Post-install: ${files.length} changed files detected`);\n  };\n\n  private handleCommitPrompt = async (): Promise<void> => {\n    this.isPromptActive = true;\n    const confirmed = await clack.confirm({\n      message: 'Commit the changes?',\n      initialValue: true,\n    });\n    this.isPromptActive = false;\n    this.flushPendingLogs();\n\n    this.sendEvent({\n      type: clack.isCancel(confirmed) || !confirmed ? 'COMMIT_DECLINED' : 'COMMIT_APPROVED',\n    });\n  };\n\n  private handleCommitGenerating = (): void => {\n    this.spinner = clack.spinner();\n    this.spinner.start('Generating commit message...');\n  };\n\n  private handleCommitSuccess = ({ message }: InstallerEvents['postinstall:commit:success']): void => {\n    this.stopSpinner('Committed');\n    clack.log.success(`Committed: ${chalk.dim(message)}`);\n  };\n\n  private handleCommitFailed = ({ error }: InstallerEvents['postinstall:commit:failed']): void => {\n    this.stopSpinner('Commit failed');\n    clack.log.error(`Commit failed: ${error}`);\n  };\n\n  private handlePrPrompt = async (): Promise<void> => {\n    this.isPromptActive = true;\n    const confirmed = await clack.confirm({\n      message: 'Create a pull request?',\n      initialValue: true,\n    });\n    this.isPromptActive = false;\n    this.flushPendingLogs();\n\n    this.sendEvent({\n      type: clack.isCancel(confirmed) || !confirmed ? 'PR_DECLINED' : 'PR_APPROVED',\n    });\n  };\n\n  private handlePrGenerating = (): void => {\n    this.spinner = clack.spinner();\n    this.spinner.start('Generating PR description...');\n  };\n\n  private handlePrPushing = (): void => {\n    if (this.spinner) {\n      this.spinner.message('Pushing to remote...');\n    } else {\n      this.spinner = clack.spinner();\n      this.spinner.start('Pushing to remote...');\n    }\n  };\n\n  private handlePrSuccess = ({ url }: InstallerEvents['postinstall:pr:success']): void => {\n    this.stopSpinner('PR created');\n    clack.log.success(`Pull request created: ${chalk.cyan(url)}`);\n  };\n\n  private handlePrFailed = ({ error }: InstallerEvents['postinstall:pr:failed']): void => {\n    this.stopSpinner('PR creation failed');\n    clack.log.error(`PR creation failed: ${error}`);\n  };\n\n  private handlePushFailed = ({ error }: InstallerEvents['postinstall:push:failed']): void => {\n    this.stopSpinner('Push failed');\n    clack.log.error(`Push failed: ${error}`);\n  };\n\n  private handleManualInstructions = ({ instructions }: InstallerEvents['postinstall:manual']): void => {\n    clack.log.info('GitHub CLI not found. Manual steps:');\n    console.log(chalk.dim(instructions));\n  };\n}\n"]}

package/dist/lib/adapters/dashboard-adapter.d.ts

@@ -27,4 +27,8 @@ export declare class DashboardAdapter implements InstallerAdapter {
      * Handle credentials form submission from Dashboard.
      */
     private handleCredentialsResponse;
+    private handleScaffoldPrompt;
+    private handleScaffoldStart;
+    private handleScaffoldComplete;
+    private handleScaffoldFailed;
 }

package/dist/lib/adapters/dashboard-adapter.js

@@ -40,6 +40,13 @@ export class DashboardAdapter {
         // The Dashboard component emits these when user interacts
         this.emitter.on('confirm:response', this.handleConfirmResponse);
         this.emitter.on('credentials:response', this.handleCredentialsResponse);
+        // Scaffold (empty-dir): the TUI has no dedicated scaffold prompt yet, so
+        // auto-proceed (the user ran the installer in an empty dir) and surface
+        // progress through the `status` event the Dashboard already renders.
+        this.emitter.on('scaffold:prompt', this.handleScaffoldPrompt);
+        this.emitter.on('scaffold:start', this.handleScaffoldStart);
+        this.emitter.on('scaffold:complete', this.handleScaffoldComplete);
+        this.emitter.on('scaffold:failed', this.handleScaffoldFailed);
         // Track completion for post-exit summary
         this.emitter.on('complete', this.handleComplete);
     }
@@ -55,6 +62,10 @@ export class DashboardAdapter {
         // Unsubscribe from events
         this.emitter.off('confirm:response', this.handleConfirmResponse);
         this.emitter.off('credentials:response', this.handleCredentialsResponse);
+        this.emitter.off('scaffold:prompt', this.handleScaffoldPrompt);
+        this.emitter.off('scaffold:start', this.handleScaffoldStart);
+        this.emitter.off('scaffold:complete', this.handleScaffoldComplete);
+        this.emitter.off('scaffold:failed', this.handleScaffoldFailed);
         this.emitter.off('complete', this.handleComplete);
         // Run cleanup (unmount Ink, exit fullscreen)
         this.cleanup?.();
@@ -93,5 +104,18 @@ export class DashboardAdapter {
     handleCredentialsResponse = ({ apiKey, clientId }) => {
         this.sendEvent({ type: 'CREDENTIALS_SUBMITTED', apiKey, clientId });
     };
+    // ===== Scaffold (empty-dir) handlers =====
+    handleScaffoldPrompt = () => {
+        this.sendEvent({ type: 'SCAFFOLD_CONFIRMED' });
+    };
+    handleScaffoldStart = ({ packageManager }) => {
+        this.emitter.emit('status', { message: `Scaffolding a new Next.js app with ${packageManager}...` });
+    };
+    handleScaffoldComplete = () => {
+        this.emitter.emit('status', { message: 'Next.js app created' });
+    };
+    handleScaffoldFailed = ({ error }) => {
+        this.emitter.emit('status', { message: `Scaffold failed: ${error}` });
+    };
 }
 //# sourceMappingURL=dashboard-adapter.js.map