workos 0.17.1 → 0.19.0

package/dist/lib/preferences.js.map

@@ -1 +1 @@
-{"version":3,"file":"preferences.js","sourceRoot":"","sources":["../../src/lib/preferences.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAczB,IAAI,MAAkC,CAAC;AACvC,IAAI,OAA4C,CAAC;AAEjD,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,2EAA2E;QAC3E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,OAAO,KAAuB,CAAC;QACjC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,+CAA+C;IACjD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,MAAM;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAE5B,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;YACzD,MAAM,GAAG,EAAE,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,EAAE,CAAC;IAEL,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,MAAM,GAAG,EAAE,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAoB;IAClD,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IAEtC,8EAA8E;IAC9E,4DAA4D;IAC5D,IAAI,OAAO,GAAmB,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,GAAG,gBAAgB,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IAED,MAAM,MAAM,GAAmB;QAC7B,GAAG,OAAO;QACV,GAAG,IAAI;QACP,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3G,CAAC;IAEF,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,MAAM,GAAG,MAAM,CAAC;AAClB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB;IACjC,OAAO,cAAc,EAAE,CAAC,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;AACvD,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,eAAe,CAAC,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa;IAC3B,OAAO,CAAC,CAAC,cAAc,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,eAAe,CAAC,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC3C,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,CAAC,mBAAmB,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,oBAAoB,EAAE,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,mBAAmB,EAAE;QAAE,OAAO,YAAY,CAAC;IAC/C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB;IAC9B,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,GAAG,EAAE,CAAC;IACZ,OAAO,GAAG,SAAS,CAAC;AACtB,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,uBAAuB;IACrC,MAAM,GAAG,SAAS,CAAC;IACnB,OAAO,GAAG,SAAS,CAAC;AACtB,CAAC","sourcesContent":["/**\n * Plain CLI preferences store.\n *\n * Stored at ~/.workos/preferences.json as plain JSON. These are NOT secrets —\n * knowing that someone opted out of telemetry leaks nothing — so this\n * deliberately avoids the keyring abstraction (config-store.ts) to prevent a\n * non-secret write from ever triggering the insecure-fallback security warning.\n *\n * Mirrors the structural pattern of device-id.ts: a synchronous accessor backed\n * by a cache, an async prewarm that populates that cache off the blocking-fs\n * path, and a never-throws contract on every read/parse so a corrupt file can\n * never break a command.\n */\n\nimport fs from 'node:fs';\nimport { readFile } from 'node:fs/promises';\nimport path from 'node:path';\nimport os from 'node:os';\n\nexport interface CliPreferences {\n  telemetry?: {\n    /** true => the user explicitly opted out of telemetry. */\n    optedOut?: boolean;\n    /** ISO timestamp the first-run notice was shown — written in Phase 2 only. */\n    noticeShownAt?: string;\n  };\n}\n\n/** Effective source of the resolved telemetry-enabled decision. */\nexport type TelemetrySource = 'env' | 'preference' | 'default';\n\nlet cached: CliPreferences | undefined;\nlet pending: Promise<CliPreferences> | undefined;\n\nexport function getPreferencesPath(): string {\n  return path.join(os.homedir(), '.workos', 'preferences.json');\n}\n\nfunction parsePreferences(raw: string): CliPreferences {\n  try {\n    const value = JSON.parse(raw);\n    // Defend against a file that parses to a non-object (e.g. `\"true\"`, `42`).\n    if (value && typeof value === 'object' && !Array.isArray(value)) {\n      return value as CliPreferences;\n    }\n  } catch {\n    // Corrupt JSON — fall through to empty preferences. A later savePreferences\n    // overwrites it cleanly; we never auto-delete.\n  }\n  return {};\n}\n\n/**\n * Asynchronously load preferences and warm the cache the synchronous\n * getPreferences() reads. Memoized: the first call performs the IO, concurrent\n * and later callers await the same promise. Prewarming this at startup keeps\n * the synchronous telemetry path off blocking fs IO. Never rejects.\n */\nexport function loadPreferences(): Promise<CliPreferences> {\n  if (cached) return Promise.resolve(cached);\n  if (pending) return pending;\n\n  pending = (async () => {\n    try {\n      const raw = await readFile(getPreferencesPath(), 'utf8');\n      cached = parsePreferences(raw);\n    } catch {\n      // Missing/unreadable file — treat as no preferences set.\n      cached = {};\n    } finally {\n      pending = undefined;\n    }\n    return cached;\n  })();\n\n  return pending;\n}\n\n/**\n * Synchronous accessor. Returns the prewarmed value when loadPreferences() has\n * run; otherwise performs a one-time synchronous read of the same file. On any\n * IO/parse failure returns {} (telemetry stays at its default-on state). Never\n * throws.\n */\nexport function getPreferences(): CliPreferences {\n  if (cached) return cached;\n\n  try {\n    const raw = fs.readFileSync(getPreferencesPath(), 'utf8');\n    cached = parsePreferences(raw);\n  } catch {\n    // Missing/unreadable/corrupt — telemetry stays at its default-on state.\n    cached = {};\n  }\n  return cached;\n}\n\n/**\n * Read-modify-write the on-disk preferences, merging `next` over the current\n * persisted value so future fields are never clobbered, then update the cache.\n * Throws on write failure so callers on the command path (opt-out/opt-in) can\n * surface a clear error — the read path swallows, the write path does not.\n */\nexport function savePreferences(next: CliPreferences): void {\n  const filePath = getPreferencesPath();\n\n  // Read-modify-write over the CURRENT on-disk value (not the cache) so a field\n  // written by another process / a future phase is preserved.\n  let current: CliPreferences = {};\n  try {\n    current = parsePreferences(fs.readFileSync(filePath, 'utf8'));\n  } catch {\n    // No existing file (or unreadable) — start from empty.\n  }\n\n  const merged: CliPreferences = {\n    ...current,\n    ...next,\n    ...(current.telemetry || next.telemetry ? { telemetry: { ...current.telemetry, ...next.telemetry } } : {}),\n  };\n\n  fs.mkdirSync(path.dirname(filePath), { recursive: true, mode: 0o700 });\n  fs.writeFileSync(filePath, JSON.stringify(merged), { encoding: 'utf8', mode: 0o600 });\n  cached = merged;\n}\n\n/** Whether the user has explicitly opted out via the saved preference. */\nexport function isTelemetryOptedOut(): boolean {\n  return getPreferences().telemetry?.optedOut === true;\n}\n\n/** Persist the opt-out flag. Throws on write failure (see savePreferences). */\nexport function setTelemetryOptedOut(value: boolean): void {\n  savePreferences({ telemetry: { optedOut: value } });\n}\n\n/** Whether the first-run telemetry notice has already been shown (ever). */\nexport function isNoticeShown(): boolean {\n  return !!getPreferences().telemetry?.noticeShownAt;\n}\n\n/**\n * Persist the first-run notice as shown, stamping the current time. Uses the\n * read-modify-write savePreferences so it never clobbers the optedOut flag.\n * Throws on write failure (see savePreferences) — the caller in\n * telemetry-notice.ts swallows it so a read-only FS never blocks a command.\n */\nexport function markNoticeShown(): void {\n  savePreferences({ telemetry: { noticeShownAt: new Date().toISOString() } });\n}\n\n/**\n * Tri-state env override for telemetry.\n *\n * Only the explicit strings 'true' / 'false' count as an override. Any other\n * value — including unset or garbage like '1' — returns undefined and falls\n * through to the saved preference.\n *\n * This is a deliberate, documented change from the old `WORKOS_TELEMETRY !==\n * 'false'` behaviour: previously `WORKOS_TELEMETRY=1` forced telemetry on even\n * for opted-out users; now an opt-out is respected unless the env var\n * explicitly says 'true'.\n */\nexport function envTelemetryOverride(): boolean | undefined {\n  const value = process.env.WORKOS_TELEMETRY;\n  if (value === 'true') return true;\n  if (value === 'false') return false;\n  return undefined;\n}\n\n/**\n * Effective telemetry-enabled decision.\n *\n * Resolution order:\n *   1. envTelemetryOverride() if defined — env wins in BOTH directions.\n *   2. otherwise !isTelemetryOptedOut() — default-on unless explicitly opted out.\n */\nexport function isTelemetryEnabled(): boolean {\n  const override = envTelemetryOverride();\n  if (override !== undefined) return override;\n  return !isTelemetryOptedOut();\n}\n\n/**\n * Which signal produced the effective telemetry decision. Mirrors the\n * precedence in isTelemetryEnabled() so the `telemetry status` command and the\n * resolver can never drift.\n *\n * Note: an explicit opt-in (optedOut === false) reads as 'default', not\n * 'preference' — its outcome is identical to a fresh install, and the resolver\n * only treats optedOut === true as a non-default signal, so reporting\n * 'preference' here would imply a behavioral difference that does not exist.\n */\nexport function getTelemetrySource(): TelemetrySource {\n  if (envTelemetryOverride() !== undefined) return 'env';\n  if (isTelemetryOptedOut()) return 'preference';\n  return 'default';\n}\n\n/**\n * Delete the preferences file, returning telemetry to its fresh-install state\n * (opted-in, first-run notice unseen). Used by `debug reset` to wipe stored CLI\n * state alongside credentials and config. No-op if the file does not exist;\n * throws on a real delete failure (e.g. permission denied) so the caller can\n * surface it, mirroring clearConfig/clearCredentials. Resets the in-memory\n * cache so subsequent reads in this process reflect the cleared state.\n */\nexport function clearPreferences(): void {\n  fs.rmSync(getPreferencesPath(), { force: true });\n  cached = {};\n  pending = undefined;\n}\n\n/** Test seam — resets the in-memory cache between test cases. */\nexport function __resetPreferencesCache(): void {\n  cached = undefined;\n  pending = undefined;\n}\n"]}
+{"version":3,"file":"preferences.js","sourceRoot":"","sources":["../../src/lib/preferences.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AA0CzB,IAAI,MAAkC,CAAC;AACvC,IAAI,OAA4C,CAAC;AAEjD,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,2EAA2E;QAC3E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,OAAO,KAAuB,CAAC;QACjC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,+CAA+C;IACjD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,MAAM;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAE5B,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;YACzD,MAAM,GAAG,EAAE,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,EAAE,CAAC;IAEL,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,MAAM,GAAG,EAAE,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAoB;IAClD,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IAEtC,8EAA8E;IAC9E,4DAA4D;IAC5D,IAAI,OAAO,GAAmB,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,GAAG,gBAAgB,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IAED,yEAAyE;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,MAAM,GAAmB,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IACvD,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,OAAO,CAAU,EAAE,CAAC;QACzD,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,MAAM,GAAG,MAAM,CAAC;AAClB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB;IACjC,OAAO,cAAc,EAAE,CAAC,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;AACvD,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,eAAe,CAAC,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa;IAC3B,OAAO,CAAC,CAAC,cAAc,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,eAAe,CAAC,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,OAAO,KAAK,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,EAAE,cAAc,KAAK,IAAI,CAAC;AAC9E,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,gBAAgB;IAC9B,OAAO,CAAC,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC;AAC/C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,mBAAmB;IACjC,eAAe,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,oBAAoB;IAClC,eAAe,CAAC,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,iBAAiB;IAC/B,eAAe,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AAClF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC3C,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,CAAC,mBAAmB,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,oBAAoB,EAAE,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,mBAAmB,EAAE;QAAE,OAAO,YAAY,CAAC;IAC/C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB;IAC9B,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,GAAG,EAAE,CAAC;IACZ,OAAO,GAAG,SAAS,CAAC;AACtB,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,uBAAuB;IACrC,MAAM,GAAG,SAAS,CAAC;IACnB,OAAO,GAAG,SAAS,CAAC;AACtB,CAAC","sourcesContent":["/**\n * Plain CLI preferences store.\n *\n * Stored at ~/.workos/preferences.json as plain JSON. These are NOT secrets —\n * knowing that someone opted out of telemetry leaks nothing — so this\n * deliberately avoids the keyring abstraction (config-store.ts) to prevent a\n * non-secret write from ever triggering the insecure-fallback security warning.\n *\n * Mirrors the structural pattern of device-id.ts: a synchronous accessor backed\n * by a cache, an async prewarm that populates that cache off the blocking-fs\n * path, and a never-throws contract on every read/parse so a corrupt file can\n * never break a command.\n */\n\nimport fs from 'node:fs';\nimport { readFile } from 'node:fs/promises';\nimport path from 'node:path';\nimport os from 'node:os';\n\nexport interface CliPreferences {\n  telemetry?: {\n    /** true => the user explicitly opted out of telemetry. */\n    optedOut?: boolean;\n    /** ISO timestamp the first-run notice was shown — written in Phase 2 only. */\n    noticeShownAt?: string;\n  };\n  /**\n   * Legacy MCP-install onboarding state. The MCP offer folded into `setup` (see\n   * commands/setup.ts); these fields are retained for back-compat so a user who\n   * declined the old standalone MCP offer is still treated as setup-declined\n   * (see isSetupDeclined). Kept in this plain-JSON store alongside telemetry.\n   */\n  mcp?: {\n    /**\n     * true => the user explicitly declined an automatic MCP install offer. The\n     * decline is absolute: no automatic surface (prompt or banner) asks again;\n     * `workos mcp install` stays available manually.\n     */\n    promptDeclined?: boolean;\n    /** ISO timestamp the one-time MCP banner was shown. */\n    bannerShownAt?: string;\n  };\n  /**\n   * Consolidated agent-setup onboarding state (skills + MCP). Owned by\n   * commands/setup.ts. `declined` is absolute for the automatic surfaces\n   * (post-login / post-install); `workos setup` stays available manually.\n   * Legacy `mcp.promptDeclined` is treated as an implicit setup-decline on read\n   * (see isSetupDeclined) so users who already declined MCP are never re-asked.\n   */\n  setup?: {\n    declined?: boolean;\n    /** ISO timestamp the user completed a setup run. */\n    completedAt?: string;\n  };\n}\n\n/** Effective source of the resolved telemetry-enabled decision. */\nexport type TelemetrySource = 'env' | 'preference' | 'default';\n\nlet cached: CliPreferences | undefined;\nlet pending: Promise<CliPreferences> | undefined;\n\nexport function getPreferencesPath(): string {\n  return path.join(os.homedir(), '.workos', 'preferences.json');\n}\n\nfunction parsePreferences(raw: string): CliPreferences {\n  try {\n    const value = JSON.parse(raw);\n    // Defend against a file that parses to a non-object (e.g. `\"true\"`, `42`).\n    if (value && typeof value === 'object' && !Array.isArray(value)) {\n      return value as CliPreferences;\n    }\n  } catch {\n    // Corrupt JSON — fall through to empty preferences. A later savePreferences\n    // overwrites it cleanly; we never auto-delete.\n  }\n  return {};\n}\n\n/**\n * Asynchronously load preferences and warm the cache the synchronous\n * getPreferences() reads. Memoized: the first call performs the IO, concurrent\n * and later callers await the same promise. Prewarming this at startup keeps\n * the synchronous telemetry path off blocking fs IO. Never rejects.\n */\nexport function loadPreferences(): Promise<CliPreferences> {\n  if (cached) return Promise.resolve(cached);\n  if (pending) return pending;\n\n  pending = (async () => {\n    try {\n      const raw = await readFile(getPreferencesPath(), 'utf8');\n      cached = parsePreferences(raw);\n    } catch {\n      // Missing/unreadable file — treat as no preferences set.\n      cached = {};\n    } finally {\n      pending = undefined;\n    }\n    return cached;\n  })();\n\n  return pending;\n}\n\n/**\n * Synchronous accessor. Returns the prewarmed value when loadPreferences() has\n * run; otherwise performs a one-time synchronous read of the same file. On any\n * IO/parse failure returns {} (telemetry stays at its default-on state). Never\n * throws.\n */\nexport function getPreferences(): CliPreferences {\n  if (cached) return cached;\n\n  try {\n    const raw = fs.readFileSync(getPreferencesPath(), 'utf8');\n    cached = parsePreferences(raw);\n  } catch {\n    // Missing/unreadable/corrupt — telemetry stays at its default-on state.\n    cached = {};\n  }\n  return cached;\n}\n\n/**\n * Read-modify-write the on-disk preferences, merging `next` over the current\n * persisted value so future fields are never clobbered, then update the cache.\n * Throws on write failure so callers on the command path (opt-out/opt-in) can\n * surface a clear error — the read path swallows, the write path does not.\n */\nexport function savePreferences(next: CliPreferences): void {\n  const filePath = getPreferencesPath();\n\n  // Read-modify-write over the CURRENT on-disk value (not the cache) so a field\n  // written by another process / a future phase is preserved.\n  let current: CliPreferences = {};\n  try {\n    current = parsePreferences(fs.readFileSync(filePath, 'utf8'));\n  } catch {\n    // No existing file (or unreadable) — start from empty.\n  }\n\n  // Shallow-merge each known nested group (one level) so writing one field\n  // (e.g. setup.completedAt) never clobbers a sibling written at a different\n  // time (e.g. setup.declined). A new nested group is one entry in this list.\n  const merged: CliPreferences = { ...current, ...next };\n  for (const key of ['telemetry', 'mcp', 'setup'] as const) {\n    if (current[key] || next[key]) {\n      Object.assign(merged, { [key]: { ...current[key], ...next[key] } });\n    }\n  }\n\n  fs.mkdirSync(path.dirname(filePath), { recursive: true, mode: 0o700 });\n  fs.writeFileSync(filePath, JSON.stringify(merged), { encoding: 'utf8', mode: 0o600 });\n  cached = merged;\n}\n\n/** Whether the user has explicitly opted out via the saved preference. */\nexport function isTelemetryOptedOut(): boolean {\n  return getPreferences().telemetry?.optedOut === true;\n}\n\n/** Persist the opt-out flag. Throws on write failure (see savePreferences). */\nexport function setTelemetryOptedOut(value: boolean): void {\n  savePreferences({ telemetry: { optedOut: value } });\n}\n\n/** Whether the first-run telemetry notice has already been shown (ever). */\nexport function isNoticeShown(): boolean {\n  return !!getPreferences().telemetry?.noticeShownAt;\n}\n\n/**\n * Persist the first-run notice as shown, stamping the current time. Uses the\n * read-modify-write savePreferences so it never clobbers the optedOut flag.\n * Throws on write failure (see savePreferences) — the caller in\n * telemetry-notice.ts swallows it so a read-only FS never blocks a command.\n */\nexport function markNoticeShown(): void {\n  savePreferences({ telemetry: { noticeShownAt: new Date().toISOString() } });\n}\n\n/**\n * Whether an automatic setup offer should be suppressed. Absolute once the user\n * declines. Treats the legacy `mcp.promptDeclined` flag as an implicit decline\n * so anyone who declined the old MCP offer is never re-prompted by the new flow.\n */\nexport function isSetupDeclined(): boolean {\n  const prefs = getPreferences();\n  return prefs.setup?.declined === true || prefs.mcp?.promptDeclined === true;\n}\n\n/** Whether the user has completed a setup run (ever). */\nexport function isSetupCompleted(): boolean {\n  return !!getPreferences().setup?.completedAt;\n}\n\n/** Persist an explicit setup decline. Throws on write failure (see savePreferences). */\nexport function recordSetupDeclined(): void {\n  savePreferences({ setup: { declined: true } });\n}\n\n/** Persist a completed setup run, stamping the current time. */\nexport function recordSetupCompleted(): void {\n  savePreferences({ setup: { completedAt: new Date().toISOString() } });\n}\n\n/** Clear the setup decline (new + legacy) so automatic offers resume. For `workos setup --reset`. */\nexport function clearSetupDecline(): void {\n  savePreferences({ setup: { declined: false }, mcp: { promptDeclined: false } });\n}\n\n/**\n * Tri-state env override for telemetry.\n *\n * Only the explicit strings 'true' / 'false' count as an override. Any other\n * value — including unset or garbage like '1' — returns undefined and falls\n * through to the saved preference.\n *\n * This is a deliberate, documented change from the old `WORKOS_TELEMETRY !==\n * 'false'` behaviour: previously `WORKOS_TELEMETRY=1` forced telemetry on even\n * for opted-out users; now an opt-out is respected unless the env var\n * explicitly says 'true'.\n */\nexport function envTelemetryOverride(): boolean | undefined {\n  const value = process.env.WORKOS_TELEMETRY;\n  if (value === 'true') return true;\n  if (value === 'false') return false;\n  return undefined;\n}\n\n/**\n * Effective telemetry-enabled decision.\n *\n * Resolution order:\n *   1. envTelemetryOverride() if defined — env wins in BOTH directions.\n *   2. otherwise !isTelemetryOptedOut() — default-on unless explicitly opted out.\n */\nexport function isTelemetryEnabled(): boolean {\n  const override = envTelemetryOverride();\n  if (override !== undefined) return override;\n  return !isTelemetryOptedOut();\n}\n\n/**\n * Which signal produced the effective telemetry decision. Mirrors the\n * precedence in isTelemetryEnabled() so the `telemetry status` command and the\n * resolver can never drift.\n *\n * Note: an explicit opt-in (optedOut === false) reads as 'default', not\n * 'preference' — its outcome is identical to a fresh install, and the resolver\n * only treats optedOut === true as a non-default signal, so reporting\n * 'preference' here would imply a behavioral difference that does not exist.\n */\nexport function getTelemetrySource(): TelemetrySource {\n  if (envTelemetryOverride() !== undefined) return 'env';\n  if (isTelemetryOptedOut()) return 'preference';\n  return 'default';\n}\n\n/**\n * Delete the preferences file, returning telemetry to its fresh-install state\n * (opted-in, first-run notice unseen). Used by `debug reset` to wipe stored CLI\n * state alongside credentials and config. No-op if the file does not exist;\n * throws on a real delete failure (e.g. permission denied) so the caller can\n * surface it, mirroring clearConfig/clearCredentials. Resets the in-memory\n * cache so subsequent reads in this process reflect the cleared state.\n */\nexport function clearPreferences(): void {\n  fs.rmSync(getPreferencesPath(), { force: true });\n  cached = {};\n  pending = undefined;\n}\n\n/** Test seam — resets the in-memory cache between test cases. */\nexport function __resetPreferencesCache(): void {\n  cached = undefined;\n  pending = undefined;\n}\n"]}

package/dist/lib/run-with-core.js

@@ -4,6 +4,9 @@ import { existsSync, readFileSync } from 'fs';
 import { join } from 'path';
 import { installerMachine } from './installer-core.js';
 import { createInstallerEventEmitter } from './events.js';
+import { buildCompletionData } from './completion-data.js';
+import { resolveDevCommand } from './dev-command.js';
+import { getConfig as getInstallerSettings } from './settings.js';
 import { CLIAdapter } from './adapters/cli-adapter.js';
 import { DashboardAdapter } from './adapters/dashboard-adapter.js';
 import { getInteractionMode, isAgentMode, isCiMode } from '../utils/interaction-mode.js';
@@ -16,10 +19,11 @@ import { getConfig, saveConfig, getActiveEnvironment, isUnclaimedEnvironment } f
 import { checkForEnvFiles, discoverCredentials } from './credential-discovery.js';
 import { requestDeviceCode, pollForToken } from './device-auth.js';
 import { fetchStagingCredentials as fetchStagingCredentialsApi } from './staging-api.js';
-import { getCliAuthClientId, getAuthkitDomain, getTelemetryUrl } from './settings.js';
+import { getCliAuthClientId, getAuthkitDomain } from './settings.js';
+import { getTelemetryUrl } from '../utils/urls.js';
 import { analytics } from '../utils/analytics.js';
 import { getVersion } from './settings.js';
-import { isInGitRepo, getUncommittedOrUntrackedFiles } from '../utils/clack-utils.js';
+import { isInGitRepo, getUncommittedOrUntrackedFiles } from '../utils/ui-utils.js';
 import { getCurrentBranch, isProtectedBranch, createBranch as createGitBranch, branchExists, } from '../utils/git-utils.js';
 import { detectChanges, stageAndCommit, pushBranch as pushGitBranch, createPullRequest } from './post-install.js';
 import { generateCommitMessage as generateCommitMessageAi, generatePrDescription as generatePrDescriptionAi, } from './ai-content.js';
@@ -72,7 +76,7 @@ async function detectIntegrationFn(options) {
  * Uses package.json detection for JS integrations, manifest files for others.
  */
 export async function detectSingleIntegration(integration, options) {
-    const { getPackageDotJson } = await import('../utils/clack-utils.js');
+    const { getPackageDotJson } = await import('../utils/ui-utils.js');
     const { hasPackageInstalled } = await import('../utils/package-json.js');
     const { existsSync } = await import('node:fs');
     const { join } = await import('node:path');
@@ -167,7 +171,16 @@ export async function runWithCore(options) {
     if (nonHumanMode && !isJsonMode()) {
         setOutputMode(resolveEffectiveOutputMode(getOutputMode(), getInteractionMode()));
     }
-    const headlessMode = nonHumanMode && isJsonMode();
+    // Headless (no prompts, structured output) is for MACHINE output only: JSON.
+    // A prompt cannot render into a JSON stream, so any JSON run must be headless.
+    // We deliberately do NOT route a human session with non-TTY stdin here:
+    // headless auto-approves branch/commit/scaffold, and applying those unattended
+    // to a session the user never opted into would violate the "nothing is written
+    // until you confirm" contract. Those sessions keep the CLIAdapter, which now
+    // fails fast with a clear `prompt_unavailable` error on the first prompt
+    // (see CLIAdapter's handler-error catch) instead of hanging or auto-writing.
+    // --dashboard keeps its own adapter even under --json.
+    const headlessMode = isJsonMode() && !options.dashboard;
     let adapter;
     if (headlessMode) {
         const { HeadlessAdapter } = await import('./adapters/headless-adapter.js');
@@ -182,6 +195,7 @@ export async function runWithCore(options) {
                 noCommit: augmentedOptions.noCommit,
                 createPr: augmentedOptions.createPr,
                 noGitCheck: augmentedOptions.noGitCheck,
+                ci: augmentedOptions.ci,
             },
         });
     }
@@ -278,6 +292,7 @@ export async function runWithCore(options) {
                         ...installerOptions,
                         apiKey: credentials?.apiKey,
                         clientId: credentials?.clientId,
+                        credentialSource: context.credentialSource,
                         emitter: context.emitter,
                     };
                     const summary = await runIntegrationInstallerFn(integration, agentOptions);
@@ -293,6 +308,29 @@ export async function runWithCore(options) {
                     };
                 }
             }),
+            buildCompletion: fromPromise(async ({ input }) => {
+                const { integration, changedFiles, options: installerOptions } = input.context;
+                if (!integration)
+                    return undefined;
+                try {
+                    const registry = await getRegistry();
+                    const mod = registry.get(integration);
+                    const cfg = mod?.config;
+                    const settings = getInstallerSettings();
+                    return await buildCompletionData({ integration, changedFiles, installDir: installerOptions.installDir }, {
+                        resolveDevCommand,
+                        detectPort,
+                        docsUrl: cfg?.metadata.docsUrl ?? settings.documentation.workosDocsUrl,
+                        dashboardUrl: settings.documentation.dashboardUrl,
+                        frameworkNextSteps: cfg?.ui.getOutroNextSteps?.({}) ?? [],
+                        signInSnippet: cfg?.ui.getSignInSnippet?.({}),
+                    });
+                }
+                catch {
+                    // Degrade to the static fallback box rather than blocking completion.
+                    return undefined;
+                }
+            }),
             // Credential discovery actors
             detectEnvFiles: fromPromise(async ({ input }) => {
                 return checkForEnvFiles(input.installDir);

package/dist/lib/run-with-core.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-with-core.js","sourceRoot":"","sources":["../../src/lib/run-with-core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGnE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,0BAA0B,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAS1G,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEtG,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAEpF,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAClH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACxG,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,uBAAuB,IAAI,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACtF,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,IAAI,eAAe,EAC/B,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,IAAI,aAAa,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAClH,OAAO,EACL,qBAAqB,IAAI,uBAAuB,EAChD,qBAAqB,IAAI,uBAAuB,GACjD,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE,KAAK,UAAU,yBAAyB,CAAC,WAAwB,EAAE,OAAyB;IAC1F,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,cAAc,IAAI,SAAS;YAC3C,QAAQ,EAAE,OAAO,CAAC,gBAAgB,IAAI,SAAS;SAChD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,OAA6C;IAC9E,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;IAE1C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,oFAAoF;QACpF,iEAAiE;QACjE,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACrF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,OAA6C;IAE7C,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACtE,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACzE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAE3C,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAEvB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAE1B,0CAA0C;IAC1C,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9C,wEAAwE;QACxE,0EAA0E;QAC1E,0DAA0D;QAC1D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAErD,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,QAAQ;gBACX,OAAO,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAClD,KAAK,gBAAgB;gBACnB,OAAO,mBAAmB,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC;YACnE,KAAK,cAAc;gBACjB,OAAO,mBAAmB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YAC1D,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;gBAC3D,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBACzD,MAAM,cAAc,GAAG,mBAAmB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;gBACxE,MAAM,WAAW,GAAG,mBAAmB,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC;gBAC9E,MAAM,YAAY,GAAG,mBAAmB,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;gBACvE,OAAO,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC;YAClF,CAAC;YACD,KAAK,WAAW;gBACd,OAAO,mBAAmB,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;YAC3D,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBAC/D,MAAM,WAAW,GACf,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC;oBACxC,mBAAmB,CAAC,eAAe,EAAE,WAAW,CAAC;oBACjD,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC;oBACzC,mBAAmB,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC;gBAC5D,OAAO,UAAU,IAAI,CAAC,WAAW,CAAC;YACpC,CAAC;YACD,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,CAAC,WAAW;YAC1B;gBACE,sDAAsD;gBACtD,OAAO,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,wEAAwE;IACxE,kDAAkD;IAClD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3B,OAAO,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QACjC,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAyB;IACzD,4DAA4D;IAC5D,WAAW,EAAE,CAAC;IACd,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,eAAe,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,CAAC,+BAA+B,EAAE;QACvC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IAEH,sEAAsE;IACtE,MAAM,UAAU,GAAG,eAAe,EAAE,CAAC;IACrC,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAEpC,MAAM,aAAa,GAAG,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAqB;QACzC,GAAG,OAAO;QACV,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM;QAC9C,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC,QAAQ;KACrD,CAAC;IAEF,MAAM,OAAO,GAAG,2BAA2B,EAAE,CAAC;IAC9C,IAAI,KAAK,GAAmE,IAAI,CAAC;IAEjF,MAAM,SAAS,GAAG,CAAC,KAA+C,EAAE,EAAE;QACpE,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,KAAyC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,WAAW,EAAE,IAAI,QAAQ,EAAE,CAAC;IACjD,IAAI,YAAY,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClC,aAAa,CAAC,0BAA0B,CAAC,aAAa,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,YAAY,GAAG,YAAY,IAAI,UAAU,EAAE,CAAC;IAElD,IAAI,OAAyB,CAAC;IAC9B,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;QAC3E,OAAO,GAAG,IAAI,eAAe,CAAC;YAC5B,OAAO;YACP,SAAS;YACT,KAAK,EAAE,gBAAgB,CAAC,KAAK;YAC7B,OAAO,EAAE;gBACP,MAAM,EAAE,gBAAgB,CAAC,MAAM;gBAC/B,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;gBACnC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;gBACnC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;gBACnC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;gBACnC,UAAU,EAAE,gBAAgB,CAAC,UAAU;aACxC;SACF,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QAC7B,OAAO,GAAG,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,OAAO,CAAC;QACjD,MAAM,EAAE;YACN,mBAAmB,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;gBAC1C,iFAAiF;gBACjF,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;gBACzC,IAAI,SAAS,EAAE,MAAM,EAAE,CAAC;oBACtB,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,4DAA4D;oBAC5D,gDAAgD;oBAChD,MAAM,IAAI,KAAK,CAAC,4BAA4B,mBAAmB,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;gBAC5F,CAAC;gBAED,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;YAEF,cAAc,EAAE,WAAW,CAAsD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACnG,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC5E,MAAM,cAAc,GAAG,qBAAqB,CAAC;oBAC3C,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;oBACpB,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;iBAC7C,CAAC,CAAC;gBACH,8EAA8E;gBAC9E,MAAM,YAAY,GAAG,YAAY,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAChF,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;YACxD,CAAC,CAAC;YAEF,WAAW,EAAE,WAAW,CAA6C,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACvF,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;gBACzF,MAAM,gBAAgB,CAAC;oBACrB,UAAU,EAAE,gBAAgB,CAAC,UAAU;oBACvC,cAAc,EAAE,cAAc,IAAI,KAAK;oBACvC,OAAO,EAAE,UAAU;iBACpB,CAAC,CAAC;YACL,CAAC,CAAC;YAEF,iBAAiB,EAAE,WAAW,CAAiD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACjG,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;gBACxF,OAAO,EAAE,WAAW,EAAE,CAAC;YACzB,CAAC,CAAC;YAEF,cAAc,EAAE,WAAW,CAAyC,KAAK,IAAI,EAAE;gBAC7E,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;gBACtC,CAAC;gBACD,MAAM,KAAK,GAAG,8BAA8B,EAAE,CAAC;gBAC/C,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;YAChD,CAAC,CAAC;YAEF,oBAAoB,EAAE,WAAW,CAA6C,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAChG,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;gBAC1B,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;gBAExE,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACxD,CAAC;gBAED,qEAAqE;gBACrE,sEAAsE;gBACtE,uEAAuE;gBACvE,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;gBACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACtC,IAAI,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;oBACnD,OAAO;gBACT,CAAC;gBAED,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBAClE,MAAM,YAAY,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;gBAClD,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,IAAI,oBAAoB,IAAI,GAAG,YAAY,EAAE,CAAC;gBAE9F,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAC1F,IAAI,WAAW,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC;oBACzC,MAAM,8BAA8B,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE;wBAC1E,WAAW,EAAE,gBAAgB,CAAC,WAAW;wBACzC,WAAW,EAAE,gBAAgB,CAAC,WAAW;qBAC1C,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,cAAc,GAAG,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,qBAAqB,CAAC;gBAE5G,aAAa,CAAC,gBAAgB,CAAC,UAAU,EAAE;oBACzC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrE,gBAAgB,EAAE,WAAW,CAAC,QAAQ;oBACtC,CAAC,cAAc,CAAC,EAAE,WAAW;iBAC9B,CAAC,CAAC;YACL,CAAC,CAAC;YAEF,QAAQ,EAAE,WAAW,CAAoD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC3F,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;gBAC1B,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;gBAExE,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC;gBAC1E,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,YAAY,GAAqB;wBACrC,GAAG,gBAAgB;wBACnB,MAAM,EAAE,WAAW,EAAE,MAAM;wBAC3B,QAAQ,EAAE,WAAW,EAAE,QAAQ;wBAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;qBACzB,CAAC;oBACF,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;oBAC3E,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,OAAO,IAAI,6CAA6C,WAAW,GAAG;qBAChF,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;qBACjE,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC;YAEF,8BAA8B;YAC9B,cAAc,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC9C,OAAO,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC5C,CAAC,CAAC;YAEF,YAAY,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC5C,OAAO,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/C,CAAC,CAAC;YAEF,eAAe,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;gBACtC,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;gBACzC,IAAI,SAAS,EAAE,MAAM,IAAI,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC3D,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC/B,OAAO,KAAK,KAAK,IAAI,CAAC;YACxB,CAAC,CAAC;YAEF,aAAa,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC7C,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;gBACtC,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;gBAEzC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC;oBACzC,QAAQ;oBACR,aAAa;iBACd,CAAC,CAAC;gBAEH,mDAAmD;gBACnD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE;oBACnC,eAAe,EAAE,UAAU,CAAC,gBAAgB;oBAC5C,uBAAuB,EAAE,UAAU,CAAC,yBAAyB;oBAC7D,QAAQ,EAAE,UAAU,CAAC,SAAS;iBAC/B,CAAC,CAAC;gBAEH,eAAe;gBACf,IAAI,CAAC;oBACH,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;oBACjD,MAAM,MAAM,CAAC,UAAU,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACtE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,kBAAkB,CAAC,gBAAgB,EAAE,KAAK,EAAE;wBAC1C,SAAS,EAAE,MAAM;wBACjB,MAAM,EAAE,UAAU,CAAC,yBAAyB;wBAC5C,KAAK,EAAE,+BAA+B;qBACvC,CAAC,CAAC;oBACH,yBAAyB;gBAC3B,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,WAAW,EAAE;oBACxD,QAAQ;oBACR,aAAa;oBACb,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;iBACvD,CAAC,CAAC;gBAEH,sBAAsB;gBACtB,eAAe,CAAC;oBACd,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CAAC,CAAC;gBAEH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAChC,CAAC,CAAC;YAEF,uBAAuB,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;gBAC9C,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;gBACzC,IAAI,SAAS,EAAE,QAAQ,IAAI,SAAS,EAAE,MAAM,EAAE,CAAC;oBAC7C,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;gBACpE,CAAC;gBAED,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;gBACvC,IAAI,MAAM;oBAAE,OAAO,MAAM,CAAC;gBAE1B,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC/B,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAEzD,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;gBACxD,sBAAsB,CAAC,OAAO,CAAC,CAAC;gBAEhC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;oBACnD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;wBACpC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG;4BAC/B,IAAI,EAAE,SAAS;4BACf,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;4BACtE,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;yBAC3B,CAAC;wBACF,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;4BAC9B,MAAM,CAAC,iBAAiB,GAAG,SAAS,CAAC;wBACvC,CAAC;wBACD,UAAU,CAAC,MAAM,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,kDAAkD;gBACpD,CAAC;gBAED,OAAO,OAAO,CAAC;YACjB,CAAC,CAAC;YAEF,sBAAsB;YACtB,WAAW,EAAE,WAAW,CAA0B,KAAK,IAAI,EAAE;gBAC3D,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBAClC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;gBAC9C,CAAC;gBACD,OAAO;oBACL,MAAM;oBACN,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC;iBACvC,CAAC;YACJ,CAAC,CAAC;YAEF,YAAY,EAAE,WAAW,CAA6D,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACxG,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;gBACrC,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC9D,eAAe,CAAC,YAAY,CAAC,CAAC;gBAC9B,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YAClC,CAAC,CAAC;YAEF,sBAAsB;YACtB,aAAa,EAAE,WAAW,CAAiD,KAAK,IAAI,EAAE;gBACpF,OAAO,aAAa,EAAE,CAAC;YACzB,CAAC,CAAC;YAEF,qBAAqB,EAAE,WAAW,CAChC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAClB,OAAO,uBAAuB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3F,CAAC,CACF;YAED,aAAa,EAAE,WAAW,CAAyC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACrF,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3C,CAAC,CAAC;YAEF,qBAAqB,EAAE,WAAW,CAGhC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACpB,OAAO,uBAAuB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAChH,CAAC,CAAC;YAEF,UAAU,EAAE,WAAW,CAAwB,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACjE,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC,CAAC;YAEF,QAAQ,EAAE,WAAW,CAAuD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC9F,OAAO,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/D,CAAC,CAAC;SACH;KACF,CAAC,CAAC;IAEH,8DAA8D;IAC9D,IAAI,SAAuC,CAAC;IAC5C,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;QAChC,IAAI,UAA8B,CAAC;QAEnC,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAAE,CAAC;gBAC7E,UAAU,GAAG,GAAG,CAAC;gBACjB,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,6BAA6B,UAAU,EAAE,CAAC,CAAC;gBACvD,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBAC7C,kBAAkB,CAAC,gBAAgB,EAAE,KAAK,EAAE;wBAC1C,SAAS,EAAE,MAAM;wBACjB,MAAM,EAAE,UAAU;wBAClB,KAAK,EAAE,0BAA0B;qBAClC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACnC,CAAC;QACH,CAAC,CAAC;QAEF,yDAAyD;QACzD,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAClE,SAAS,GAAG,kBAAkB,EAAE,CAAC;QACjC,UAAU,CAAC,GAAG,EAAE;YACd,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;QAC5B,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,GAAG,WAAW,CAAC,iBAAiB,EAAE;QACrC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE;QAC7C,OAAO,EAAE,SAAS,EAAE,OAAO;KAC5B,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IAEtB,SAAS,CAAC,iCAAiC,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACpF,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAE3C,IAAI,eAAe,GAAsC,SAAS,CAAC;IAEnE,yEAAyE;IACzE,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,eAAe,GAAG,WAAW,CAAC;QAC9B,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,KAAM,CAAC,SAAS,CAAC;gBACf,QAAQ,EAAE,GAAG,EAAE;oBACb,MAAM,QAAQ,GAAG,KAAM,CAAC,WAAW,EAAE,CAAC;oBACtC,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;wBAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;wBACnC,eAAe,GAAG,OAAO,CAAC;wBAC1B,MAAM,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;oBAC5C,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;wBAC1C,eAAe,GAAG,WAAW,CAAC;wBAC9B,OAAO,EAAE,CAAC;oBACZ,CAAC;yBAAM,CAAC;wBACN,OAAO,EAAE,CAAC;oBACZ,CAAC;gBACH,CAAC;gBACD,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;oBACb,eAAe,GAAG,OAAO,CAAC;oBAC1B,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC;aACF,CAAC,CAAC;YAEH,KAAM,CAAC,KAAK,EAAE,CAAC;YACf,KAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAe,GAAG,OAAO,CAAC;QAC1B,QAAQ,CAAC,2BAA2B,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7G,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACpC,2EAA2E;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,4BAA4B;QAC5B,MAAM,YAAY,GAAG,KAAK,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC;QAClD,MAAM,mBAAmB,GAAG,YAAY,EAAE,WAAW,CAAC;QACtD,IAAI,mBAAmB,EAAE,CAAC;YACxB,SAAS,CAAC,MAAM,CAAC,uBAAuB,EAAE,mBAAmB,CAAC,CAAC;QACjE,CAAC;QACD,yEAAyE;QACzE,uDAAuD;QACvD,IAAI,YAAY,EAAE,UAAU,EAAE,CAAC;YAC7B,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC1C,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;AACH,CAAC","sourcesContent":["import { createActor, fromPromise } from 'xstate';\nimport open from 'open';\nimport { existsSync, readFileSync } from 'fs';\nimport { join } from 'path';\nimport { installerMachine } from './installer-core.js';\nimport { createInstallerEventEmitter } from './events.js';\nimport { CLIAdapter } from './adapters/cli-adapter.js';\nimport { DashboardAdapter } from './adapters/dashboard-adapter.js';\nimport type { InstallerAdapter } from './adapters/types.js';\nimport type { InstallerOptions } from '../utils/types.js';\nimport { getInteractionMode, isAgentMode, isCiMode } from '../utils/interaction-mode.js';\nimport { getOutputMode, isJsonMode, resolveEffectiveOutputMode, setOutputMode } from '../utils/output.js';\nimport type {\n  InstallerMachineContext,\n  DetectionOutput,\n  GitCheckOutput,\n  AgentOutput,\n  BranchCheckOutput,\n  WorkspaceCheckOutput,\n} from './installer-core.types.js';\nimport { isScaffoldableEmptyDir, resolvePackageManager, runCreateNextApp } from './scaffold/index.js';\nimport type { Integration } from './constants.js';\nimport { parseEnvFile } from '../utils/env-parser.js';\nimport { enableDebugLogs, initLogFile, logInfo, logError } from '../utils/debug.js';\n\nimport { getAccessToken, saveCredentials, getStagingCredentials, saveStagingCredentials } from './credentials.js';\nimport { getConfig, saveConfig, getActiveEnvironment, isUnclaimedEnvironment } from './config-store.js';\nimport { checkForEnvFiles, discoverCredentials } from './credential-discovery.js';\nimport { requestDeviceCode, pollForToken } from './device-auth.js';\nimport { fetchStagingCredentials as fetchStagingCredentialsApi } from './staging-api.js';\nimport { getCliAuthClientId, getAuthkitDomain, getTelemetryUrl } from './settings.js';\nimport { analytics } from '../utils/analytics.js';\nimport { getVersion } from './settings.js';\nimport { isInGitRepo, getUncommittedOrUntrackedFiles } from '../utils/clack-utils.js';\nimport {\n  getCurrentBranch,\n  isProtectedBranch,\n  createBranch as createGitBranch,\n  branchExists,\n} from '../utils/git-utils.js';\nimport { detectChanges, stageAndCommit, pushBranch as pushGitBranch, createPullRequest } from './post-install.js';\nimport {\n  generateCommitMessage as generateCommitMessageAi,\n  generatePrDescription as generatePrDescriptionAi,\n} from './ai-content.js';\nimport { autoConfigureWorkOSEnvironment } from './workos-management.js';\nimport { detectPort, getCallbackPath } from './port-detection.js';\nimport { writeEnvLocal } from './env-writer.js';\nimport { getRegistry } from './registry.js';\nimport { observeHostFailure } from './host-probe.js';\nimport { formatWorkOSCommand } from '../utils/command-invocation.js';\n\nasync function runIntegrationInstallerFn(integration: Integration, options: InstallerOptions): Promise<string> {\n  const registry = await getRegistry();\n  const mod = registry.get(integration);\n  if (!mod) {\n    throw new Error(`Unknown integration: ${integration}`);\n  }\n  return mod.run(options);\n}\n\nfunction readExistingCredentials(installDir: string): { apiKey?: string; clientId?: string } {\n  const envPath = join(installDir, '.env.local');\n  if (!existsSync(envPath)) {\n    return {};\n  }\n\n  try {\n    const content = readFileSync(envPath, 'utf-8');\n    const envVars = parseEnvFile(content);\n    return {\n      apiKey: envVars.WORKOS_API_KEY || undefined,\n      clientId: envVars.WORKOS_CLIENT_ID || undefined,\n    };\n  } catch {\n    return {};\n  }\n}\n\nasync function detectIntegrationFn(options: Pick<InstallerOptions, 'installDir'>): Promise<Integration | undefined> {\n  const registry = await getRegistry();\n  const configs = registry.detectionOrder();\n\n  for (const config of configs) {\n    // Use the detect function from INTEGRATION_CONFIG in config.ts for JS integrations,\n    // or fall back to checking if the framework package is installed\n    const detected = await detectSingleIntegration(config.metadata.integration, options);\n    if (detected) {\n      return config.metadata.integration;\n    }\n  }\n  return undefined;\n}\n\n/**\n * Detect if a single integration matches the project.\n * Uses package.json detection for JS integrations, manifest files for others.\n */\nexport async function detectSingleIntegration(\n  integration: string,\n  options: Pick<InstallerOptions, 'installDir'>,\n): Promise<boolean> {\n  const { getPackageDotJson } = await import('../utils/clack-utils.js');\n  const { hasPackageInstalled } = await import('../utils/package-json.js');\n  const { existsSync } = await import('node:fs');\n  const { join } = await import('node:path');\n\n  const registry = await getRegistry();\n  const mod = registry.get(integration);\n  if (!mod) return false;\n\n  const config = mod.config;\n\n  // For JS integrations, check package.json\n  if (config.metadata.language === 'javascript') {\n    // Without a package.json, no JS integration can match. Skip silently so\n    // non-JS integrations (Python/Django, Ruby, Go, ...) still get a chance —\n    // getPackageDotJson would otherwise call process.exit(1).\n    if (!existsSync(join(options.installDir, 'package.json'))) {\n      return false;\n    }\n    const packageJson = await getPackageDotJson(options);\n\n    switch (integration) {\n      case 'nextjs':\n        return hasPackageInstalled('next', packageJson);\n      case 'tanstack-start':\n        return hasPackageInstalled('@tanstack/react-start', packageJson);\n      case 'react-router':\n        return hasPackageInstalled('react-router', packageJson);\n      case 'react': {\n        const hasReact = hasPackageInstalled('react', packageJson);\n        const hasNext = hasPackageInstalled('next', packageJson);\n        const hasReactRouter = hasPackageInstalled('react-router', packageJson);\n        const hasTanstack = hasPackageInstalled('@tanstack/react-start', packageJson);\n        const hasSvelteKit = hasPackageInstalled('@sveltejs/kit', packageJson);\n        return hasReact && !hasNext && !hasReactRouter && !hasTanstack && !hasSvelteKit;\n      }\n      case 'sveltekit':\n        return hasPackageInstalled('@sveltejs/kit', packageJson);\n      case 'node': {\n        const hasExpress = hasPackageInstalled('express', packageJson);\n        const hasFrontend =\n          hasPackageInstalled('next', packageJson) ||\n          hasPackageInstalled('@sveltejs/kit', packageJson) ||\n          hasPackageInstalled('react', packageJson) ||\n          hasPackageInstalled('@tanstack/react-start', packageJson);\n        return hasExpress && !hasFrontend;\n      }\n      case 'vanilla-js':\n        return true; // Fallback\n      default:\n        // Unknown JS integration — try package name detection\n        return hasPackageInstalled(config.detection.packageName, packageJson);\n    }\n  }\n\n  // For non-JS integrations, prefer a custom detect() if provided\n  // (e.g., Django matches manage.py | pyproject.toml | requirements.txt),\n  // otherwise fall back to manifest file existence.\n  if (config.metadata.detect) {\n    return await config.metadata.detect(options);\n  }\n  if (config.metadata.manifestFile) {\n    return existsSync(join(options.installDir, config.metadata.manifestFile));\n  }\n\n  return false;\n}\n\nexport async function runWithCore(options: InstallerOptions): Promise<void> {\n  // Initialize debug/logging early so we capture all failures\n  initLogFile();\n  if (options.debug) {\n    enableDebugLogs();\n  }\n  logInfo('Wizard starting with options:', {\n    debug: options.debug,\n    dashboard: options.dashboard,\n    local: options.local,\n    ci: options.ci,\n    skipAuth: options.skipAuth,\n    installDir: options.installDir,\n  });\n\n  // Configure telemetry endpoint separately from the LLM gateway proxy.\n  const gatewayUrl = getTelemetryUrl();\n  analytics.setGatewayUrl(gatewayUrl);\n\n  const existingCreds = readExistingCredentials(options.installDir);\n  const augmentedOptions: InstallerOptions = {\n    ...options,\n    apiKey: options.apiKey || existingCreds.apiKey,\n    clientId: options.clientId || existingCreds.clientId,\n  };\n\n  const emitter = createInstallerEventEmitter();\n  let actor: ReturnType<typeof createActor<typeof installerMachine>> | null = null;\n\n  const sendEvent = (event: { type: string; [key: string]: unknown }) => {\n    if (actor) {\n      actor.send(event as Parameters<typeof actor.send>[0]);\n    }\n  };\n\n  const nonHumanMode = isAgentMode() || isCiMode();\n  if (nonHumanMode && !isJsonMode()) {\n    setOutputMode(resolveEffectiveOutputMode(getOutputMode(), getInteractionMode()));\n  }\n  const headlessMode = nonHumanMode && isJsonMode();\n\n  let adapter: InstallerAdapter;\n  if (headlessMode) {\n    const { HeadlessAdapter } = await import('./adapters/headless-adapter.js');\n    adapter = new HeadlessAdapter({\n      emitter,\n      sendEvent,\n      debug: augmentedOptions.debug,\n      options: {\n        apiKey: augmentedOptions.apiKey,\n        clientId: augmentedOptions.clientId,\n        noBranch: augmentedOptions.noBranch,\n        noCommit: augmentedOptions.noCommit,\n        createPr: augmentedOptions.createPr,\n        noGitCheck: augmentedOptions.noGitCheck,\n      },\n    });\n  } else if (options.dashboard) {\n    adapter = new DashboardAdapter({ emitter, sendEvent, debug: augmentedOptions.debug });\n  } else {\n    adapter = new CLIAdapter({ emitter, sendEvent, debug: augmentedOptions.debug });\n  }\n\n  const machineWithActors = installerMachine.provide({\n    actors: {\n      checkAuthentication: fromPromise(async () => {\n        // Check for active environment with credentials (covers unclaimed environments).\n        const activeEnv = getActiveEnvironment();\n        if (activeEnv?.apiKey) {\n          return true;\n        }\n\n        const token = getAccessToken();\n        if (!token) {\n          // This should rarely happen since bin.ts handles auth first\n          // But keep as safety net for programmatic usage\n          throw new Error(`Not authenticated. Run \\`${formatWorkOSCommand('auth login')}\\` first.`);\n        }\n\n        return true;\n      }),\n\n      checkWorkspace: fromPromise<WorkspaceCheckOutput, { options: InstallerOptions }>(async ({ input }) => {\n        const scaffoldable = await isScaffoldableEmptyDir(input.options.installDir);\n        const packageManager = resolvePackageManager({\n          pm: input.options.pm,\n          userAgent: process.env.npm_config_user_agent,\n        });\n        // headlessMode is computed above; --scaffold opts in during interactive runs.\n        const autoScaffold = scaffoldable && (headlessMode || !!input.options.scaffold);\n        return { scaffoldable, packageManager, autoScaffold };\n      }),\n\n      runScaffold: fromPromise<void, { context: InstallerMachineContext }>(async ({ input }) => {\n        const { options: installerOptions, packageManager, emitter: ctxEmitter } = input.context;\n        await runCreateNextApp({\n          installDir: installerOptions.installDir,\n          packageManager: packageManager ?? 'npm',\n          emitter: ctxEmitter,\n        });\n      }),\n\n      detectIntegration: fromPromise<DetectionOutput, { options: InstallerOptions }>(async ({ input }) => {\n        const integration = await detectIntegrationFn({ installDir: input.options.installDir });\n        return { integration };\n      }),\n\n      checkGitStatus: fromPromise<GitCheckOutput, { installDir: string }>(async () => {\n        if (!isInGitRepo()) {\n          return { isClean: true, files: [] };\n        }\n        const files = getUncommittedOrUntrackedFiles();\n        return { isClean: files.length === 0, files };\n      }),\n\n      configureEnvironment: fromPromise<void, { context: InstallerMachineContext }>(async ({ input }) => {\n        const { context } = input;\n        const { options: installerOptions, integration, credentials } = context;\n\n        if (!integration || !credentials) {\n          throw new Error('Missing integration or credentials');\n        }\n\n        // Non-JS integrations own their env file writing (e.g. Python writes\n        // .env inside its own run()). Skip here so we don't leak a .env.local\n        // with JS-flavored vars (WORKOS_COOKIE_PASSWORD, wrong redirect port).\n        const registry = await getRegistry();\n        const mod = registry.get(integration);\n        if (mod?.config.metadata.language !== 'javascript') {\n          return;\n        }\n\n        const port = detectPort(integration, installerOptions.installDir);\n        const callbackPath = getCallbackPath(integration);\n        const redirectUri = installerOptions.redirectUri || `http://localhost:${port}${callbackPath}`;\n\n        const requiresApiKey = ['nextjs', 'tanstack-start', 'react-router'].includes(integration);\n        if (credentials.apiKey && requiresApiKey) {\n          await autoConfigureWorkOSEnvironment(credentials.apiKey, integration, port, {\n            homepageUrl: installerOptions.homepageUrl,\n            redirectUri: installerOptions.redirectUri,\n          });\n        }\n\n        const redirectUriKey = integration === 'nextjs' ? 'NEXT_PUBLIC_WORKOS_REDIRECT_URI' : 'WORKOS_REDIRECT_URI';\n\n        writeEnvLocal(installerOptions.installDir, {\n          ...(credentials.apiKey ? { WORKOS_API_KEY: credentials.apiKey } : {}),\n          WORKOS_CLIENT_ID: credentials.clientId,\n          [redirectUriKey]: redirectUri,\n        });\n      }),\n\n      runAgent: fromPromise<AgentOutput, { context: InstallerMachineContext }>(async ({ input }) => {\n        const { context } = input;\n        const { options: installerOptions, integration, credentials } = context;\n\n        if (!integration) {\n          return { success: false, error: new Error('No integration specified') };\n        }\n\n        try {\n          const agentOptions: InstallerOptions = {\n            ...installerOptions,\n            apiKey: credentials?.apiKey,\n            clientId: credentials?.clientId,\n            emitter: context.emitter,\n          };\n          const summary = await runIntegrationInstallerFn(integration, agentOptions);\n          return {\n            success: true,\n            summary: summary || `Successfully installed WorkOS AuthKit for ${integration}!`,\n          };\n        } catch (error) {\n          return {\n            success: false,\n            error: error instanceof Error ? error : new Error(String(error)),\n          };\n        }\n      }),\n\n      // Credential discovery actors\n      detectEnvFiles: fromPromise(async ({ input }) => {\n        return checkForEnvFiles(input.installDir);\n      }),\n\n      scanEnvFiles: fromPromise(async ({ input }) => {\n        return discoverCredentials(input.installDir);\n      }),\n\n      checkStoredAuth: fromPromise(async () => {\n        const activeEnv = getActiveEnvironment();\n        if (activeEnv?.apiKey && isUnclaimedEnvironment(activeEnv)) {\n          return true;\n        }\n\n        const token = getAccessToken();\n        return token !== null;\n      }),\n\n      runDeviceAuth: fromPromise(async ({ input }) => {\n        const clientId = getCliAuthClientId();\n        const authkitDomain = getAuthkitDomain();\n\n        const deviceAuth = await requestDeviceCode({\n          clientId,\n          authkitDomain,\n        });\n\n        // Emit device started event with verification info\n        input.emitter.emit('device:started', {\n          verificationUri: deviceAuth.verification_uri,\n          verificationUriComplete: deviceAuth.verification_uri_complete,\n          userCode: deviceAuth.user_code,\n        });\n\n        // Open browser\n        try {\n          const { default: openFn } = await import('open');\n          await openFn(deviceAuth.verification_uri_complete, { wait: false });\n        } catch (error) {\n          observeHostFailure('browser-launch', error, {\n            operation: 'open',\n            target: deviceAuth.verification_uri_complete,\n            label: 'installer device auth browser',\n          });\n          // User can open manually\n        }\n\n        const result = await pollForToken(deviceAuth.device_code, {\n          clientId,\n          authkitDomain,\n          interval: deviceAuth.interval,\n          onPoll: () => input.emitter.emit('device:polling', {}),\n        });\n\n        // Save the auth token\n        saveCredentials({\n          accessToken: result.accessToken,\n          expiresAt: result.expiresAt,\n          userId: result.userId,\n          email: result.email,\n          refreshToken: result.refreshToken,\n        });\n\n        return { result, deviceAuth };\n      }),\n\n      fetchStagingCredentials: fromPromise(async () => {\n        const activeEnv = getActiveEnvironment();\n        if (activeEnv?.clientId && activeEnv?.apiKey) {\n          return { clientId: activeEnv.clientId, apiKey: activeEnv.apiKey };\n        }\n\n        const cached = getStagingCredentials();\n        if (cached) return cached;\n\n        const token = getAccessToken();\n        if (!token) throw new Error('No access token available');\n\n        const staging = await fetchStagingCredentialsApi(token);\n        saveStagingCredentials(staging);\n\n        try {\n          const config = getConfig() ?? { environments: {} };\n          if (!config.environments['default']) {\n            config.environments['default'] = {\n              name: 'default',\n              type: staging.apiKey.startsWith('sk_test_') ? 'sandbox' : 'production',\n              apiKey: staging.apiKey,\n              clientId: staging.clientId,\n            };\n            if (!config.activeEnvironment) {\n              config.activeEnvironment = 'default';\n            }\n            saveConfig(config);\n          }\n        } catch {\n          // Don't block install if config-store write fails\n        }\n\n        return staging;\n      }),\n\n      // Branch check actors\n      checkBranch: fromPromise<BranchCheckOutput, void>(async () => {\n        const branch = getCurrentBranch();\n        if (!branch) {\n          return { branch: null, isProtected: false };\n        }\n        return {\n          branch,\n          isProtected: isProtectedBranch(branch),\n        };\n      }),\n\n      createBranch: fromPromise<{ branch: string }, { name: string; fallbackName: string }>(async ({ input }) => {\n        const { name, fallbackName } = input;\n        const targetBranch = branchExists(name) ? fallbackName : name;\n        createGitBranch(targetBranch);\n        return { branch: targetBranch };\n      }),\n\n      // Post-install actors\n      detectChanges: fromPromise<{ hasChanges: boolean; files: string[] }, void>(async () => {\n        return detectChanges();\n      }),\n\n      generateCommitMessage: fromPromise<string, { integration: string; files: string[]; direct?: boolean }>(\n        async ({ input }) => {\n          return generateCommitMessageAi(input.integration, input.files, { direct: input.direct });\n        },\n      ),\n\n      commitChanges: fromPromise<void, { message: string; cwd: string }>(async ({ input }) => {\n        stageAndCommit(input.message, input.cwd);\n      }),\n\n      generatePrDescription: fromPromise<\n        string,\n        { integration: string; files: string[]; commitMessage: string; direct?: boolean }\n      >(async ({ input }) => {\n        return generatePrDescriptionAi(input.integration, input.files, input.commitMessage, { direct: input.direct });\n      }),\n\n      pushBranch: fromPromise<void, { cwd: string }>(async ({ input }) => {\n        pushGitBranch(input.cwd);\n      }),\n\n      createPr: fromPromise<string, { title: string; body: string; cwd: string }>(async ({ input }) => {\n        return createPullRequest(input.title, input.body, input.cwd);\n      }),\n    },\n  });\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  let inspector: { inspect: any } | undefined;\n  if (augmentedOptions.inspect) {\n    const originalLog = console.log;\n    let inspectUrl: string | undefined;\n\n    console.log = (...args: unknown[]) => {\n      const msg = args.join(' ');\n      if (typeof msg === 'string' && msg.startsWith('https://stately.ai/inspect/')) {\n        inspectUrl = msg;\n        console.log = originalLog;\n        console.log(`Opening XState inspector: ${inspectUrl}`);\n        void open(inspectUrl).catch((error: unknown) => {\n          observeHostFailure('browser-launch', error, {\n            operation: 'open',\n            target: inspectUrl,\n            label: 'XState inspector browser',\n          });\n        });\n      } else {\n        originalLog.apply(console, args);\n      }\n    };\n\n    // Dynamic import - @statelyai/inspect is a devDependency\n    const { createSkyInspector } = await import('@statelyai/inspect');\n    inspector = createSkyInspector();\n    setTimeout(() => {\n      console.log = originalLog;\n    }, 5000).unref();\n  }\n\n  actor = createActor(machineWithActors, {\n    input: { emitter, options: augmentedOptions },\n    inspect: inspector?.inspect,\n  });\n\n  await adapter.start();\n\n  analytics.configureAuthFromAvailableSources();\n  const mode = headlessMode ? 'headless' : augmentedOptions.dashboard ? 'tui' : 'cli';\n  analytics.sessionStart(mode, getVersion());\n\n  let installerStatus: 'success' | 'error' | 'cancelled' = 'success';\n\n  // Handle ctrl+c by sending CANCEL to state machine for graceful shutdown\n  const handleSigint = () => {\n    installerStatus = 'cancelled';\n    actor?.send({ type: 'CANCEL' });\n  };\n  process.on('SIGINT', handleSigint);\n\n  try {\n    await new Promise<void>((resolve, reject) => {\n      actor!.subscribe({\n        complete: () => {\n          const snapshot = actor!.getSnapshot();\n          if (snapshot.value === 'error') {\n            const err = snapshot.context.error;\n            installerStatus = 'error';\n            reject(err ?? new Error('Wizard failed'));\n          } else if (snapshot.value === 'cancelled') {\n            installerStatus = 'cancelled';\n            resolve();\n          } else {\n            resolve();\n          }\n        },\n        error: (err) => {\n          installerStatus = 'error';\n          reject(err);\n        },\n      });\n\n      actor!.start();\n      actor!.send({ type: 'START' });\n    });\n  } catch (error) {\n    installerStatus = 'error';\n    logError('Wizard failed with error:', error instanceof Error ? error.stack || error.message : String(error));\n    throw error;\n  } finally {\n    process.off('SIGINT', handleSigint);\n    // Record the detected framework so session.end carries it (and the API can\n    // tag install metrics by integration). Known only after detection runs, so\n    // it's read from the final machine snapshot here; absent if the session\n    // aborted before detection.\n    const finalContext = actor?.getSnapshot().context;\n    const detectedIntegration = finalContext?.integration;\n    if (detectedIntegration) {\n      analytics.setTag('installer.integration', detectedIntegration);\n    }\n    // Record whether the empty-dir flow scaffolded a new app, so session.end\n    // carries it for adoption + scaffold-failure tracking.\n    if (finalContext?.scaffolded) {\n      analytics.setTag('scaffolded', true);\n    }\n    await analytics.shutdown(installerStatus);\n    await adapter.stop();\n  }\n}\n"]}
+{"version":3,"file":"run-with-core.js","sourceRoot":"","sources":["../../src/lib/run-with-core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,SAAS,IAAI,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGnE,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,0BAA0B,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAS1G,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEtG,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAEpF,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAClH,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACxG,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,uBAAuB,IAAI,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,IAAI,eAAe,EAC/B,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,IAAI,aAAa,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAClH,OAAO,EACL,qBAAqB,IAAI,uBAAuB,EAChD,qBAAqB,IAAI,uBAAuB,GACjD,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE,KAAK,UAAU,yBAAyB,CAAC,WAAwB,EAAE,OAAyB;IAC1F,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,cAAc,IAAI,SAAS;YAC3C,QAAQ,EAAE,OAAO,CAAC,gBAAgB,IAAI,SAAS;SAChD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,OAA6C;IAC9E,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;IAE1C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,oFAAoF;QACpF,iEAAiE;QACjE,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACrF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,WAAmB,EACnB,OAA6C;IAE7C,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACnE,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACzE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAE3C,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAEvB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAE1B,0CAA0C;IAC1C,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9C,wEAAwE;QACxE,0EAA0E;QAC1E,0DAA0D;QAC1D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAErD,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,QAAQ;gBACX,OAAO,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAClD,KAAK,gBAAgB;gBACnB,OAAO,mBAAmB,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC;YACnE,KAAK,cAAc;gBACjB,OAAO,mBAAmB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YAC1D,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;gBAC3D,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBACzD,MAAM,cAAc,GAAG,mBAAmB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;gBACxE,MAAM,WAAW,GAAG,mBAAmB,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC;gBAC9E,MAAM,YAAY,GAAG,mBAAmB,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;gBACvE,OAAO,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC;YAClF,CAAC;YACD,KAAK,WAAW;gBACd,OAAO,mBAAmB,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;YAC3D,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBAC/D,MAAM,WAAW,GACf,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC;oBACxC,mBAAmB,CAAC,eAAe,EAAE,WAAW,CAAC;oBACjD,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC;oBACzC,mBAAmB,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC;gBAC5D,OAAO,UAAU,IAAI,CAAC,WAAW,CAAC;YACpC,CAAC;YACD,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,CAAC,WAAW;YAC1B;gBACE,sDAAsD;gBACtD,OAAO,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,wEAAwE;IACxE,kDAAkD;IAClD,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC3B,OAAO,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QACjC,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAyB;IACzD,4DAA4D;IAC5D,WAAW,EAAE,CAAC;IACd,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,eAAe,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,CAAC,+BAA+B,EAAE;QACvC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IAEH,sEAAsE;IACtE,MAAM,UAAU,GAAG,eAAe,EAAE,CAAC;IACrC,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAEpC,MAAM,aAAa,GAAG,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAqB;QACzC,GAAG,OAAO;QACV,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM;QAC9C,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC,QAAQ;KACrD,CAAC;IAEF,MAAM,OAAO,GAAG,2BAA2B,EAAE,CAAC;IAC9C,IAAI,KAAK,GAAmE,IAAI,CAAC;IAEjF,MAAM,SAAS,GAAG,CAAC,KAA+C,EAAE,EAAE;QACpE,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,KAAyC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,WAAW,EAAE,IAAI,QAAQ,EAAE,CAAC;IACjD,IAAI,YAAY,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClC,aAAa,CAAC,0BAA0B,CAAC,aAAa,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC;IACD,6EAA6E;IAC7E,+EAA+E;IAC/E,wEAAwE;IACxE,+EAA+E;IAC/E,+EAA+E;IAC/E,6EAA6E;IAC7E,yEAAyE;IACzE,6EAA6E;IAC7E,uDAAuD;IACvD,MAAM,YAAY,GAAG,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;IAExD,IAAI,OAAyB,CAAC;IAC9B,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;QAC3E,OAAO,GAAG,IAAI,eAAe,CAAC;YAC5B,OAAO;YACP,SAAS;YACT,KAAK,EAAE,gBAAgB,CAAC,KAAK;YAC7B,OAAO,EAAE;gBACP,MAAM,EAAE,gBAAgB,CAAC,MAAM;gBAC/B,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;gBACnC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;gBACnC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;gBACnC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;gBACnC,UAAU,EAAE,gBAAgB,CAAC,UAAU;gBACvC,EAAE,EAAE,gBAAgB,CAAC,EAAE;aACxB;SACF,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QAC7B,OAAO,GAAG,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,OAAO,CAAC;QACjD,MAAM,EAAE;YACN,mBAAmB,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;gBAC1C,iFAAiF;gBACjF,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;gBACzC,IAAI,SAAS,EAAE,MAAM,EAAE,CAAC;oBACtB,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,4DAA4D;oBAC5D,gDAAgD;oBAChD,MAAM,IAAI,KAAK,CAAC,4BAA4B,mBAAmB,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;gBAC5F,CAAC;gBAED,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;YAEF,cAAc,EAAE,WAAW,CAAsD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACnG,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC5E,MAAM,cAAc,GAAG,qBAAqB,CAAC;oBAC3C,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;oBACpB,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;iBAC7C,CAAC,CAAC;gBACH,8EAA8E;gBAC9E,MAAM,YAAY,GAAG,YAAY,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAChF,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;YACxD,CAAC,CAAC;YAEF,WAAW,EAAE,WAAW,CAA6C,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACvF,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;gBACzF,MAAM,gBAAgB,CAAC;oBACrB,UAAU,EAAE,gBAAgB,CAAC,UAAU;oBACvC,cAAc,EAAE,cAAc,IAAI,KAAK;oBACvC,OAAO,EAAE,UAAU;iBACpB,CAAC,CAAC;YACL,CAAC,CAAC;YAEF,iBAAiB,EAAE,WAAW,CAAiD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACjG,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;gBACxF,OAAO,EAAE,WAAW,EAAE,CAAC;YACzB,CAAC,CAAC;YAEF,cAAc,EAAE,WAAW,CAAyC,KAAK,IAAI,EAAE;gBAC7E,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;gBACtC,CAAC;gBACD,MAAM,KAAK,GAAG,8BAA8B,EAAE,CAAC;gBAC/C,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;YAChD,CAAC,CAAC;YAEF,oBAAoB,EAAE,WAAW,CAA6C,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAChG,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;gBAC1B,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;gBAExE,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACxD,CAAC;gBAED,qEAAqE;gBACrE,sEAAsE;gBACtE,uEAAuE;gBACvE,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;gBACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;gBACtC,IAAI,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;oBACnD,OAAO;gBACT,CAAC;gBAED,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBAClE,MAAM,YAAY,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;gBAClD,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,IAAI,oBAAoB,IAAI,GAAG,YAAY,EAAE,CAAC;gBAE9F,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAC1F,IAAI,WAAW,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC;oBACzC,MAAM,8BAA8B,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE;wBAC1E,WAAW,EAAE,gBAAgB,CAAC,WAAW;wBACzC,WAAW,EAAE,gBAAgB,CAAC,WAAW;qBAC1C,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,cAAc,GAAG,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,qBAAqB,CAAC;gBAE5G,aAAa,CAAC,gBAAgB,CAAC,UAAU,EAAE;oBACzC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrE,gBAAgB,EAAE,WAAW,CAAC,QAAQ;oBACtC,CAAC,cAAc,CAAC,EAAE,WAAW;iBAC9B,CAAC,CAAC;YACL,CAAC,CAAC;YAEF,QAAQ,EAAE,WAAW,CAAoD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC3F,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;gBAC1B,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;gBAExE,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC;gBAC1E,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,YAAY,GAAqB;wBACrC,GAAG,gBAAgB;wBACnB,MAAM,EAAE,WAAW,EAAE,MAAM;wBAC3B,QAAQ,EAAE,WAAW,EAAE,QAAQ;wBAC/B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;wBAC1C,OAAO,EAAE,OAAO,CAAC,OAAO;qBACzB,CAAC;oBACF,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;oBAC3E,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,OAAO,IAAI,6CAA6C,WAAW,GAAG;qBAChF,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;qBACjE,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC;YAEF,eAAe,EAAE,WAAW,CAC1B,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAClB,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;gBAC/E,IAAI,CAAC,WAAW;oBAAE,OAAO,SAAS,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;oBACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;oBACtC,MAAM,GAAG,GAAG,GAAG,EAAE,MAAM,CAAC;oBACxB,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;oBACxC,OAAO,MAAM,mBAAmB,CAC9B,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,gBAAgB,CAAC,UAAU,EAAE,EACtE;wBACE,iBAAiB;wBACjB,UAAU;wBACV,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,aAAa,CAAC,aAAa;wBACtE,YAAY,EAAE,QAAQ,CAAC,aAAa,CAAC,YAAY;wBACjD,kBAAkB,EAAE,GAAG,EAAE,EAAE,CAAC,iBAAiB,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE;wBACzD,aAAa,EAAE,GAAG,EAAE,EAAE,CAAC,gBAAgB,EAAE,CAAC,EAAE,CAAC;qBAC9C,CACF,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,sEAAsE;oBACtE,OAAO,SAAS,CAAC;gBACnB,CAAC;YACH,CAAC,CACF;YAED,8BAA8B;YAC9B,cAAc,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC9C,OAAO,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC5C,CAAC,CAAC;YAEF,YAAY,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC5C,OAAO,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/C,CAAC,CAAC;YAEF,eAAe,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;gBACtC,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;gBACzC,IAAI,SAAS,EAAE,MAAM,IAAI,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;oBAC3D,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC/B,OAAO,KAAK,KAAK,IAAI,CAAC;YACxB,CAAC,CAAC;YAEF,aAAa,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC7C,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;gBACtC,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;gBAEzC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC;oBACzC,QAAQ;oBACR,aAAa;iBACd,CAAC,CAAC;gBAEH,mDAAmD;gBACnD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE;oBACnC,eAAe,EAAE,UAAU,CAAC,gBAAgB;oBAC5C,uBAAuB,EAAE,UAAU,CAAC,yBAAyB;oBAC7D,QAAQ,EAAE,UAAU,CAAC,SAAS;iBAC/B,CAAC,CAAC;gBAEH,eAAe;gBACf,IAAI,CAAC;oBACH,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;oBACjD,MAAM,MAAM,CAAC,UAAU,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACtE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,kBAAkB,CAAC,gBAAgB,EAAE,KAAK,EAAE;wBAC1C,SAAS,EAAE,MAAM;wBACjB,MAAM,EAAE,UAAU,CAAC,yBAAyB;wBAC5C,KAAK,EAAE,+BAA+B;qBACvC,CAAC,CAAC;oBACH,yBAAyB;gBAC3B,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,WAAW,EAAE;oBACxD,QAAQ;oBACR,aAAa;oBACb,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;iBACvD,CAAC,CAAC;gBAEH,sBAAsB;gBACtB,eAAe,CAAC;oBACd,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CAAC,CAAC;gBAEH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAChC,CAAC,CAAC;YAEF,uBAAuB,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;gBAC9C,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;gBACzC,IAAI,SAAS,EAAE,QAAQ,IAAI,SAAS,EAAE,MAAM,EAAE,CAAC;oBAC7C,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;gBACpE,CAAC;gBAED,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;gBACvC,IAAI,MAAM;oBAAE,OAAO,MAAM,CAAC;gBAE1B,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC/B,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAEzD,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;gBACxD,sBAAsB,CAAC,OAAO,CAAC,CAAC;gBAEhC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;oBACnD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;wBACpC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG;4BAC/B,IAAI,EAAE,SAAS;4BACf,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;4BACtE,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;yBAC3B,CAAC;wBACF,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;4BAC9B,MAAM,CAAC,iBAAiB,GAAG,SAAS,CAAC;wBACvC,CAAC;wBACD,UAAU,CAAC,MAAM,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,kDAAkD;gBACpD,CAAC;gBAED,OAAO,OAAO,CAAC;YACjB,CAAC,CAAC;YAEF,sBAAsB;YACtB,WAAW,EAAE,WAAW,CAA0B,KAAK,IAAI,EAAE;gBAC3D,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBAClC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;gBAC9C,CAAC;gBACD,OAAO;oBACL,MAAM;oBACN,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC;iBACvC,CAAC;YACJ,CAAC,CAAC;YAEF,YAAY,EAAE,WAAW,CAA6D,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACxG,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;gBACrC,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC9D,eAAe,CAAC,YAAY,CAAC,CAAC;gBAC9B,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YAClC,CAAC,CAAC;YAEF,sBAAsB;YACtB,aAAa,EAAE,WAAW,CAAiD,KAAK,IAAI,EAAE;gBACpF,OAAO,aAAa,EAAE,CAAC;YACzB,CAAC,CAAC;YAEF,qBAAqB,EAAE,WAAW,CAChC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAClB,OAAO,uBAAuB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3F,CAAC,CACF;YAED,aAAa,EAAE,WAAW,CAAyC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACrF,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3C,CAAC,CAAC;YAEF,qBAAqB,EAAE,WAAW,CAGhC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACpB,OAAO,uBAAuB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAChH,CAAC,CAAC;YAEF,UAAU,EAAE,WAAW,CAAwB,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACjE,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC,CAAC;YAEF,QAAQ,EAAE,WAAW,CAAuD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC9F,OAAO,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/D,CAAC,CAAC;SACH;KACF,CAAC,CAAC;IAEH,8DAA8D;IAC9D,IAAI,SAAuC,CAAC;IAC5C,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;QAChC,IAAI,UAA8B,CAAC;QAEnC,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAAE,CAAC;gBAC7E,UAAU,GAAG,GAAG,CAAC;gBACjB,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,6BAA6B,UAAU,EAAE,CAAC,CAAC;gBACvD,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;oBAC7C,kBAAkB,CAAC,gBAAgB,EAAE,KAAK,EAAE;wBAC1C,SAAS,EAAE,MAAM;wBACjB,MAAM,EAAE,UAAU;wBAClB,KAAK,EAAE,0BAA0B;qBAClC,CAAC,CAAC;gBACL,CAAC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACnC,CAAC;QACH,CAAC,CAAC;QAEF,yDAAyD;QACzD,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAClE,SAAS,GAAG,kBAAkB,EAAE,CAAC;QACjC,UAAU,CAAC,GAAG,EAAE;YACd,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;QAC5B,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,GAAG,WAAW,CAAC,iBAAiB,EAAE;QACrC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE;QAC7C,OAAO,EAAE,SAAS,EAAE,OAAO;KAC5B,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IAEtB,SAAS,CAAC,iCAAiC,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACpF,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAE3C,IAAI,eAAe,GAAsC,SAAS,CAAC;IAEnE,yEAAyE;IACzE,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,eAAe,GAAG,WAAW,CAAC;QAC9B,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,KAAM,CAAC,SAAS,CAAC;gBACf,QAAQ,EAAE,GAAG,EAAE;oBACb,MAAM,QAAQ,GAAG,KAAM,CAAC,WAAW,EAAE,CAAC;oBACtC,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;wBAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;wBACnC,eAAe,GAAG,OAAO,CAAC;wBAC1B,MAAM,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;oBAC5C,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;wBAC1C,eAAe,GAAG,WAAW,CAAC;wBAC9B,OAAO,EAAE,CAAC;oBACZ,CAAC;yBAAM,CAAC;wBACN,OAAO,EAAE,CAAC;oBACZ,CAAC;gBACH,CAAC;gBACD,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;oBACb,eAAe,GAAG,OAAO,CAAC;oBAC1B,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC;aACF,CAAC,CAAC;YAEH,KAAM,CAAC,KAAK,EAAE,CAAC;YACf,KAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAe,GAAG,OAAO,CAAC;QAC1B,QAAQ,CAAC,2BAA2B,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7G,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACpC,2EAA2E;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,4BAA4B;QAC5B,MAAM,YAAY,GAAG,KAAK,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC;QAClD,MAAM,mBAAmB,GAAG,YAAY,EAAE,WAAW,CAAC;QACtD,IAAI,mBAAmB,EAAE,CAAC;YACxB,SAAS,CAAC,MAAM,CAAC,uBAAuB,EAAE,mBAAmB,CAAC,CAAC;QACjE,CAAC;QACD,yEAAyE;QACzE,uDAAuD;QACvD,IAAI,YAAY,EAAE,UAAU,EAAE,CAAC;YAC7B,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC1C,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;AACH,CAAC","sourcesContent":["import { createActor, fromPromise } from 'xstate';\nimport open from 'open';\nimport { existsSync, readFileSync } from 'fs';\nimport { join } from 'path';\nimport { installerMachine } from './installer-core.js';\nimport { createInstallerEventEmitter } from './events.js';\nimport type { CompletionData } from './events.js';\nimport { buildCompletionData } from './completion-data.js';\nimport { resolveDevCommand } from './dev-command.js';\nimport { getConfig as getInstallerSettings } from './settings.js';\nimport { CLIAdapter } from './adapters/cli-adapter.js';\nimport { DashboardAdapter } from './adapters/dashboard-adapter.js';\nimport type { InstallerAdapter } from './adapters/types.js';\nimport type { InstallerOptions } from '../utils/types.js';\nimport { getInteractionMode, isAgentMode, isCiMode } from '../utils/interaction-mode.js';\nimport { getOutputMode, isJsonMode, resolveEffectiveOutputMode, setOutputMode } from '../utils/output.js';\nimport type {\n  InstallerMachineContext,\n  DetectionOutput,\n  GitCheckOutput,\n  AgentOutput,\n  BranchCheckOutput,\n  WorkspaceCheckOutput,\n} from './installer-core.types.js';\nimport { isScaffoldableEmptyDir, resolvePackageManager, runCreateNextApp } from './scaffold/index.js';\nimport type { Integration } from './constants.js';\nimport { parseEnvFile } from '../utils/env-parser.js';\nimport { enableDebugLogs, initLogFile, logInfo, logError } from '../utils/debug.js';\n\nimport { getAccessToken, saveCredentials, getStagingCredentials, saveStagingCredentials } from './credentials.js';\nimport { getConfig, saveConfig, getActiveEnvironment, isUnclaimedEnvironment } from './config-store.js';\nimport { checkForEnvFiles, discoverCredentials } from './credential-discovery.js';\nimport { requestDeviceCode, pollForToken } from './device-auth.js';\nimport { fetchStagingCredentials as fetchStagingCredentialsApi } from './staging-api.js';\nimport { getCliAuthClientId, getAuthkitDomain } from './settings.js';\nimport { getTelemetryUrl } from '../utils/urls.js';\nimport { analytics } from '../utils/analytics.js';\nimport { getVersion } from './settings.js';\nimport { isInGitRepo, getUncommittedOrUntrackedFiles } from '../utils/ui-utils.js';\nimport {\n  getCurrentBranch,\n  isProtectedBranch,\n  createBranch as createGitBranch,\n  branchExists,\n} from '../utils/git-utils.js';\nimport { detectChanges, stageAndCommit, pushBranch as pushGitBranch, createPullRequest } from './post-install.js';\nimport {\n  generateCommitMessage as generateCommitMessageAi,\n  generatePrDescription as generatePrDescriptionAi,\n} from './ai-content.js';\nimport { autoConfigureWorkOSEnvironment } from './workos-management.js';\nimport { detectPort, getCallbackPath } from './port-detection.js';\nimport { writeEnvLocal } from './env-writer.js';\nimport { getRegistry } from './registry.js';\nimport { observeHostFailure } from './host-probe.js';\nimport { formatWorkOSCommand } from '../utils/command-invocation.js';\n\nasync function runIntegrationInstallerFn(integration: Integration, options: InstallerOptions): Promise<string> {\n  const registry = await getRegistry();\n  const mod = registry.get(integration);\n  if (!mod) {\n    throw new Error(`Unknown integration: ${integration}`);\n  }\n  return mod.run(options);\n}\n\nfunction readExistingCredentials(installDir: string): { apiKey?: string; clientId?: string } {\n  const envPath = join(installDir, '.env.local');\n  if (!existsSync(envPath)) {\n    return {};\n  }\n\n  try {\n    const content = readFileSync(envPath, 'utf-8');\n    const envVars = parseEnvFile(content);\n    return {\n      apiKey: envVars.WORKOS_API_KEY || undefined,\n      clientId: envVars.WORKOS_CLIENT_ID || undefined,\n    };\n  } catch {\n    return {};\n  }\n}\n\nasync function detectIntegrationFn(options: Pick<InstallerOptions, 'installDir'>): Promise<Integration | undefined> {\n  const registry = await getRegistry();\n  const configs = registry.detectionOrder();\n\n  for (const config of configs) {\n    // Use the detect function from INTEGRATION_CONFIG in config.ts for JS integrations,\n    // or fall back to checking if the framework package is installed\n    const detected = await detectSingleIntegration(config.metadata.integration, options);\n    if (detected) {\n      return config.metadata.integration;\n    }\n  }\n  return undefined;\n}\n\n/**\n * Detect if a single integration matches the project.\n * Uses package.json detection for JS integrations, manifest files for others.\n */\nexport async function detectSingleIntegration(\n  integration: string,\n  options: Pick<InstallerOptions, 'installDir'>,\n): Promise<boolean> {\n  const { getPackageDotJson } = await import('../utils/ui-utils.js');\n  const { hasPackageInstalled } = await import('../utils/package-json.js');\n  const { existsSync } = await import('node:fs');\n  const { join } = await import('node:path');\n\n  const registry = await getRegistry();\n  const mod = registry.get(integration);\n  if (!mod) return false;\n\n  const config = mod.config;\n\n  // For JS integrations, check package.json\n  if (config.metadata.language === 'javascript') {\n    // Without a package.json, no JS integration can match. Skip silently so\n    // non-JS integrations (Python/Django, Ruby, Go, ...) still get a chance —\n    // getPackageDotJson would otherwise call process.exit(1).\n    if (!existsSync(join(options.installDir, 'package.json'))) {\n      return false;\n    }\n    const packageJson = await getPackageDotJson(options);\n\n    switch (integration) {\n      case 'nextjs':\n        return hasPackageInstalled('next', packageJson);\n      case 'tanstack-start':\n        return hasPackageInstalled('@tanstack/react-start', packageJson);\n      case 'react-router':\n        return hasPackageInstalled('react-router', packageJson);\n      case 'react': {\n        const hasReact = hasPackageInstalled('react', packageJson);\n        const hasNext = hasPackageInstalled('next', packageJson);\n        const hasReactRouter = hasPackageInstalled('react-router', packageJson);\n        const hasTanstack = hasPackageInstalled('@tanstack/react-start', packageJson);\n        const hasSvelteKit = hasPackageInstalled('@sveltejs/kit', packageJson);\n        return hasReact && !hasNext && !hasReactRouter && !hasTanstack && !hasSvelteKit;\n      }\n      case 'sveltekit':\n        return hasPackageInstalled('@sveltejs/kit', packageJson);\n      case 'node': {\n        const hasExpress = hasPackageInstalled('express', packageJson);\n        const hasFrontend =\n          hasPackageInstalled('next', packageJson) ||\n          hasPackageInstalled('@sveltejs/kit', packageJson) ||\n          hasPackageInstalled('react', packageJson) ||\n          hasPackageInstalled('@tanstack/react-start', packageJson);\n        return hasExpress && !hasFrontend;\n      }\n      case 'vanilla-js':\n        return true; // Fallback\n      default:\n        // Unknown JS integration — try package name detection\n        return hasPackageInstalled(config.detection.packageName, packageJson);\n    }\n  }\n\n  // For non-JS integrations, prefer a custom detect() if provided\n  // (e.g., Django matches manage.py | pyproject.toml | requirements.txt),\n  // otherwise fall back to manifest file existence.\n  if (config.metadata.detect) {\n    return await config.metadata.detect(options);\n  }\n  if (config.metadata.manifestFile) {\n    return existsSync(join(options.installDir, config.metadata.manifestFile));\n  }\n\n  return false;\n}\n\nexport async function runWithCore(options: InstallerOptions): Promise<void> {\n  // Initialize debug/logging early so we capture all failures\n  initLogFile();\n  if (options.debug) {\n    enableDebugLogs();\n  }\n  logInfo('Wizard starting with options:', {\n    debug: options.debug,\n    dashboard: options.dashboard,\n    local: options.local,\n    ci: options.ci,\n    skipAuth: options.skipAuth,\n    installDir: options.installDir,\n  });\n\n  // Configure telemetry endpoint separately from the LLM gateway proxy.\n  const gatewayUrl = getTelemetryUrl();\n  analytics.setGatewayUrl(gatewayUrl);\n\n  const existingCreds = readExistingCredentials(options.installDir);\n  const augmentedOptions: InstallerOptions = {\n    ...options,\n    apiKey: options.apiKey || existingCreds.apiKey,\n    clientId: options.clientId || existingCreds.clientId,\n  };\n\n  const emitter = createInstallerEventEmitter();\n  let actor: ReturnType<typeof createActor<typeof installerMachine>> | null = null;\n\n  const sendEvent = (event: { type: string; [key: string]: unknown }) => {\n    if (actor) {\n      actor.send(event as Parameters<typeof actor.send>[0]);\n    }\n  };\n\n  const nonHumanMode = isAgentMode() || isCiMode();\n  if (nonHumanMode && !isJsonMode()) {\n    setOutputMode(resolveEffectiveOutputMode(getOutputMode(), getInteractionMode()));\n  }\n  // Headless (no prompts, structured output) is for MACHINE output only: JSON.\n  // A prompt cannot render into a JSON stream, so any JSON run must be headless.\n  // We deliberately do NOT route a human session with non-TTY stdin here:\n  // headless auto-approves branch/commit/scaffold, and applying those unattended\n  // to a session the user never opted into would violate the \"nothing is written\n  // until you confirm\" contract. Those sessions keep the CLIAdapter, which now\n  // fails fast with a clear `prompt_unavailable` error on the first prompt\n  // (see CLIAdapter's handler-error catch) instead of hanging or auto-writing.\n  // --dashboard keeps its own adapter even under --json.\n  const headlessMode = isJsonMode() && !options.dashboard;\n\n  let adapter: InstallerAdapter;\n  if (headlessMode) {\n    const { HeadlessAdapter } = await import('./adapters/headless-adapter.js');\n    adapter = new HeadlessAdapter({\n      emitter,\n      sendEvent,\n      debug: augmentedOptions.debug,\n      options: {\n        apiKey: augmentedOptions.apiKey,\n        clientId: augmentedOptions.clientId,\n        noBranch: augmentedOptions.noBranch,\n        noCommit: augmentedOptions.noCommit,\n        createPr: augmentedOptions.createPr,\n        noGitCheck: augmentedOptions.noGitCheck,\n        ci: augmentedOptions.ci,\n      },\n    });\n  } else if (options.dashboard) {\n    adapter = new DashboardAdapter({ emitter, sendEvent, debug: augmentedOptions.debug });\n  } else {\n    adapter = new CLIAdapter({ emitter, sendEvent, debug: augmentedOptions.debug });\n  }\n\n  const machineWithActors = installerMachine.provide({\n    actors: {\n      checkAuthentication: fromPromise(async () => {\n        // Check for active environment with credentials (covers unclaimed environments).\n        const activeEnv = getActiveEnvironment();\n        if (activeEnv?.apiKey) {\n          return true;\n        }\n\n        const token = getAccessToken();\n        if (!token) {\n          // This should rarely happen since bin.ts handles auth first\n          // But keep as safety net for programmatic usage\n          throw new Error(`Not authenticated. Run \\`${formatWorkOSCommand('auth login')}\\` first.`);\n        }\n\n        return true;\n      }),\n\n      checkWorkspace: fromPromise<WorkspaceCheckOutput, { options: InstallerOptions }>(async ({ input }) => {\n        const scaffoldable = await isScaffoldableEmptyDir(input.options.installDir);\n        const packageManager = resolvePackageManager({\n          pm: input.options.pm,\n          userAgent: process.env.npm_config_user_agent,\n        });\n        // headlessMode is computed above; --scaffold opts in during interactive runs.\n        const autoScaffold = scaffoldable && (headlessMode || !!input.options.scaffold);\n        return { scaffoldable, packageManager, autoScaffold };\n      }),\n\n      runScaffold: fromPromise<void, { context: InstallerMachineContext }>(async ({ input }) => {\n        const { options: installerOptions, packageManager, emitter: ctxEmitter } = input.context;\n        await runCreateNextApp({\n          installDir: installerOptions.installDir,\n          packageManager: packageManager ?? 'npm',\n          emitter: ctxEmitter,\n        });\n      }),\n\n      detectIntegration: fromPromise<DetectionOutput, { options: InstallerOptions }>(async ({ input }) => {\n        const integration = await detectIntegrationFn({ installDir: input.options.installDir });\n        return { integration };\n      }),\n\n      checkGitStatus: fromPromise<GitCheckOutput, { installDir: string }>(async () => {\n        if (!isInGitRepo()) {\n          return { isClean: true, files: [] };\n        }\n        const files = getUncommittedOrUntrackedFiles();\n        return { isClean: files.length === 0, files };\n      }),\n\n      configureEnvironment: fromPromise<void, { context: InstallerMachineContext }>(async ({ input }) => {\n        const { context } = input;\n        const { options: installerOptions, integration, credentials } = context;\n\n        if (!integration || !credentials) {\n          throw new Error('Missing integration or credentials');\n        }\n\n        // Non-JS integrations own their env file writing (e.g. Python writes\n        // .env inside its own run()). Skip here so we don't leak a .env.local\n        // with JS-flavored vars (WORKOS_COOKIE_PASSWORD, wrong redirect port).\n        const registry = await getRegistry();\n        const mod = registry.get(integration);\n        if (mod?.config.metadata.language !== 'javascript') {\n          return;\n        }\n\n        const port = detectPort(integration, installerOptions.installDir);\n        const callbackPath = getCallbackPath(integration);\n        const redirectUri = installerOptions.redirectUri || `http://localhost:${port}${callbackPath}`;\n\n        const requiresApiKey = ['nextjs', 'tanstack-start', 'react-router'].includes(integration);\n        if (credentials.apiKey && requiresApiKey) {\n          await autoConfigureWorkOSEnvironment(credentials.apiKey, integration, port, {\n            homepageUrl: installerOptions.homepageUrl,\n            redirectUri: installerOptions.redirectUri,\n          });\n        }\n\n        const redirectUriKey = integration === 'nextjs' ? 'NEXT_PUBLIC_WORKOS_REDIRECT_URI' : 'WORKOS_REDIRECT_URI';\n\n        writeEnvLocal(installerOptions.installDir, {\n          ...(credentials.apiKey ? { WORKOS_API_KEY: credentials.apiKey } : {}),\n          WORKOS_CLIENT_ID: credentials.clientId,\n          [redirectUriKey]: redirectUri,\n        });\n      }),\n\n      runAgent: fromPromise<AgentOutput, { context: InstallerMachineContext }>(async ({ input }) => {\n        const { context } = input;\n        const { options: installerOptions, integration, credentials } = context;\n\n        if (!integration) {\n          return { success: false, error: new Error('No integration specified') };\n        }\n\n        try {\n          const agentOptions: InstallerOptions = {\n            ...installerOptions,\n            apiKey: credentials?.apiKey,\n            clientId: credentials?.clientId,\n            credentialSource: context.credentialSource,\n            emitter: context.emitter,\n          };\n          const summary = await runIntegrationInstallerFn(integration, agentOptions);\n          return {\n            success: true,\n            summary: summary || `Successfully installed WorkOS AuthKit for ${integration}!`,\n          };\n        } catch (error) {\n          return {\n            success: false,\n            error: error instanceof Error ? error : new Error(String(error)),\n          };\n        }\n      }),\n\n      buildCompletion: fromPromise<CompletionData | undefined, { context: InstallerMachineContext }>(\n        async ({ input }) => {\n          const { integration, changedFiles, options: installerOptions } = input.context;\n          if (!integration) return undefined;\n          try {\n            const registry = await getRegistry();\n            const mod = registry.get(integration);\n            const cfg = mod?.config;\n            const settings = getInstallerSettings();\n            return await buildCompletionData(\n              { integration, changedFiles, installDir: installerOptions.installDir },\n              {\n                resolveDevCommand,\n                detectPort,\n                docsUrl: cfg?.metadata.docsUrl ?? settings.documentation.workosDocsUrl,\n                dashboardUrl: settings.documentation.dashboardUrl,\n                frameworkNextSteps: cfg?.ui.getOutroNextSteps?.({}) ?? [],\n                signInSnippet: cfg?.ui.getSignInSnippet?.({}),\n              },\n            );\n          } catch {\n            // Degrade to the static fallback box rather than blocking completion.\n            return undefined;\n          }\n        },\n      ),\n\n      // Credential discovery actors\n      detectEnvFiles: fromPromise(async ({ input }) => {\n        return checkForEnvFiles(input.installDir);\n      }),\n\n      scanEnvFiles: fromPromise(async ({ input }) => {\n        return discoverCredentials(input.installDir);\n      }),\n\n      checkStoredAuth: fromPromise(async () => {\n        const activeEnv = getActiveEnvironment();\n        if (activeEnv?.apiKey && isUnclaimedEnvironment(activeEnv)) {\n          return true;\n        }\n\n        const token = getAccessToken();\n        return token !== null;\n      }),\n\n      runDeviceAuth: fromPromise(async ({ input }) => {\n        const clientId = getCliAuthClientId();\n        const authkitDomain = getAuthkitDomain();\n\n        const deviceAuth = await requestDeviceCode({\n          clientId,\n          authkitDomain,\n        });\n\n        // Emit device started event with verification info\n        input.emitter.emit('device:started', {\n          verificationUri: deviceAuth.verification_uri,\n          verificationUriComplete: deviceAuth.verification_uri_complete,\n          userCode: deviceAuth.user_code,\n        });\n\n        // Open browser\n        try {\n          const { default: openFn } = await import('open');\n          await openFn(deviceAuth.verification_uri_complete, { wait: false });\n        } catch (error) {\n          observeHostFailure('browser-launch', error, {\n            operation: 'open',\n            target: deviceAuth.verification_uri_complete,\n            label: 'installer device auth browser',\n          });\n          // User can open manually\n        }\n\n        const result = await pollForToken(deviceAuth.device_code, {\n          clientId,\n          authkitDomain,\n          interval: deviceAuth.interval,\n          onPoll: () => input.emitter.emit('device:polling', {}),\n        });\n\n        // Save the auth token\n        saveCredentials({\n          accessToken: result.accessToken,\n          expiresAt: result.expiresAt,\n          userId: result.userId,\n          email: result.email,\n          refreshToken: result.refreshToken,\n        });\n\n        return { result, deviceAuth };\n      }),\n\n      fetchStagingCredentials: fromPromise(async () => {\n        const activeEnv = getActiveEnvironment();\n        if (activeEnv?.clientId && activeEnv?.apiKey) {\n          return { clientId: activeEnv.clientId, apiKey: activeEnv.apiKey };\n        }\n\n        const cached = getStagingCredentials();\n        if (cached) return cached;\n\n        const token = getAccessToken();\n        if (!token) throw new Error('No access token available');\n\n        const staging = await fetchStagingCredentialsApi(token);\n        saveStagingCredentials(staging);\n\n        try {\n          const config = getConfig() ?? { environments: {} };\n          if (!config.environments['default']) {\n            config.environments['default'] = {\n              name: 'default',\n              type: staging.apiKey.startsWith('sk_test_') ? 'sandbox' : 'production',\n              apiKey: staging.apiKey,\n              clientId: staging.clientId,\n            };\n            if (!config.activeEnvironment) {\n              config.activeEnvironment = 'default';\n            }\n            saveConfig(config);\n          }\n        } catch {\n          // Don't block install if config-store write fails\n        }\n\n        return staging;\n      }),\n\n      // Branch check actors\n      checkBranch: fromPromise<BranchCheckOutput, void>(async () => {\n        const branch = getCurrentBranch();\n        if (!branch) {\n          return { branch: null, isProtected: false };\n        }\n        return {\n          branch,\n          isProtected: isProtectedBranch(branch),\n        };\n      }),\n\n      createBranch: fromPromise<{ branch: string }, { name: string; fallbackName: string }>(async ({ input }) => {\n        const { name, fallbackName } = input;\n        const targetBranch = branchExists(name) ? fallbackName : name;\n        createGitBranch(targetBranch);\n        return { branch: targetBranch };\n      }),\n\n      // Post-install actors\n      detectChanges: fromPromise<{ hasChanges: boolean; files: string[] }, void>(async () => {\n        return detectChanges();\n      }),\n\n      generateCommitMessage: fromPromise<string, { integration: string; files: string[]; direct?: boolean }>(\n        async ({ input }) => {\n          return generateCommitMessageAi(input.integration, input.files, { direct: input.direct });\n        },\n      ),\n\n      commitChanges: fromPromise<void, { message: string; cwd: string }>(async ({ input }) => {\n        stageAndCommit(input.message, input.cwd);\n      }),\n\n      generatePrDescription: fromPromise<\n        string,\n        { integration: string; files: string[]; commitMessage: string; direct?: boolean }\n      >(async ({ input }) => {\n        return generatePrDescriptionAi(input.integration, input.files, input.commitMessage, { direct: input.direct });\n      }),\n\n      pushBranch: fromPromise<void, { cwd: string }>(async ({ input }) => {\n        pushGitBranch(input.cwd);\n      }),\n\n      createPr: fromPromise<string, { title: string; body: string; cwd: string }>(async ({ input }) => {\n        return createPullRequest(input.title, input.body, input.cwd);\n      }),\n    },\n  });\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  let inspector: { inspect: any } | undefined;\n  if (augmentedOptions.inspect) {\n    const originalLog = console.log;\n    let inspectUrl: string | undefined;\n\n    console.log = (...args: unknown[]) => {\n      const msg = args.join(' ');\n      if (typeof msg === 'string' && msg.startsWith('https://stately.ai/inspect/')) {\n        inspectUrl = msg;\n        console.log = originalLog;\n        console.log(`Opening XState inspector: ${inspectUrl}`);\n        void open(inspectUrl).catch((error: unknown) => {\n          observeHostFailure('browser-launch', error, {\n            operation: 'open',\n            target: inspectUrl,\n            label: 'XState inspector browser',\n          });\n        });\n      } else {\n        originalLog.apply(console, args);\n      }\n    };\n\n    // Dynamic import - @statelyai/inspect is a devDependency\n    const { createSkyInspector } = await import('@statelyai/inspect');\n    inspector = createSkyInspector();\n    setTimeout(() => {\n      console.log = originalLog;\n    }, 5000).unref();\n  }\n\n  actor = createActor(machineWithActors, {\n    input: { emitter, options: augmentedOptions },\n    inspect: inspector?.inspect,\n  });\n\n  await adapter.start();\n\n  analytics.configureAuthFromAvailableSources();\n  const mode = headlessMode ? 'headless' : augmentedOptions.dashboard ? 'tui' : 'cli';\n  analytics.sessionStart(mode, getVersion());\n\n  let installerStatus: 'success' | 'error' | 'cancelled' = 'success';\n\n  // Handle ctrl+c by sending CANCEL to state machine for graceful shutdown\n  const handleSigint = () => {\n    installerStatus = 'cancelled';\n    actor?.send({ type: 'CANCEL' });\n  };\n  process.on('SIGINT', handleSigint);\n\n  try {\n    await new Promise<void>((resolve, reject) => {\n      actor!.subscribe({\n        complete: () => {\n          const snapshot = actor!.getSnapshot();\n          if (snapshot.value === 'error') {\n            const err = snapshot.context.error;\n            installerStatus = 'error';\n            reject(err ?? new Error('Wizard failed'));\n          } else if (snapshot.value === 'cancelled') {\n            installerStatus = 'cancelled';\n            resolve();\n          } else {\n            resolve();\n          }\n        },\n        error: (err) => {\n          installerStatus = 'error';\n          reject(err);\n        },\n      });\n\n      actor!.start();\n      actor!.send({ type: 'START' });\n    });\n  } catch (error) {\n    installerStatus = 'error';\n    logError('Wizard failed with error:', error instanceof Error ? error.stack || error.message : String(error));\n    throw error;\n  } finally {\n    process.off('SIGINT', handleSigint);\n    // Record the detected framework so session.end carries it (and the API can\n    // tag install metrics by integration). Known only after detection runs, so\n    // it's read from the final machine snapshot here; absent if the session\n    // aborted before detection.\n    const finalContext = actor?.getSnapshot().context;\n    const detectedIntegration = finalContext?.integration;\n    if (detectedIntegration) {\n      analytics.setTag('installer.integration', detectedIntegration);\n    }\n    // Record whether the empty-dir flow scaffolded a new app, so session.end\n    // carries it for adoption + scaffold-failure tracking.\n    if (finalContext?.scaffolded) {\n      analytics.setTag('scaffolded', true);\n    }\n    await analytics.shutdown(installerStatus);\n    await adapter.stop();\n  }\n}\n"]}

package/dist/lib/settings.d.ts

@@ -8,8 +8,6 @@ export interface InstallerConfig {
     workos: {
         clientId: string;
         authkitDomain: string;
-        llmGatewayUrl: string;
-        telemetryUrl: string;
     };
     telemetry: {
         enabled: boolean;
@@ -48,22 +46,15 @@ export interface InstallerConfig {
  */
 export declare function getConfig(): InstallerConfig;
 /**
- * Get the CLI auth client ID.
- * Env var overrides config default.
+ * Get the CLI auth client ID (from config; not env-overridable).
  */
 export declare function getCliAuthClientId(): string;
 /**
  * Get the AuthKit domain.
  * Env var overrides config default.
+ *
+ * Note: WorkOS service endpoints (API, dashboard, LLM gateway, telemetry)
+ * live in utils/urls.ts. AuthKit's domain stays here because it's config-
+ * backed rather than derived from the API host.
  */
 export declare function getAuthkitDomain(): string;
-/**
- * Get the LLM gateway URL.
- * Env var overrides config default.
- */
-export declare function getLlmGatewayUrl(): string;
-/**
- * Get the CLI telemetry URL.
- * Env var overrides config default.
- */
-export declare function getTelemetryUrl(): string;

package/dist/lib/settings.js

@@ -12,8 +12,7 @@ export function getConfig() {
     return config;
 }
 /**
- * Get the CLI auth client ID.
- * Env var overrides config default.
+ * Get the CLI auth client ID (from config; not env-overridable).
  */
 export function getCliAuthClientId() {
     return config.workos.clientId;
@@ -21,22 +20,12 @@ export function getCliAuthClientId() {
 /**
  * Get the AuthKit domain.
  * Env var overrides config default.
+ *
+ * Note: WorkOS service endpoints (API, dashboard, LLM gateway, telemetry)
+ * live in utils/urls.ts. AuthKit's domain stays here because it's config-
+ * backed rather than derived from the API host.
  */
 export function getAuthkitDomain() {
     return process.env.WORKOS_AUTHKIT_DOMAIN || config.workos.authkitDomain;
 }
-/**
- * Get the LLM gateway URL.
- * Env var overrides config default.
- */
-export function getLlmGatewayUrl() {
-    return process.env.WORKOS_LLM_GATEWAY_URL || config.workos.llmGatewayUrl;
-}
-/**
- * Get the CLI telemetry URL.
- * Env var overrides config default.
- */
-export function getTelemetryUrl() {
-    return process.env.WORKOS_TELEMETRY_URL || config.workos.telemetryUrl;
-}
 //# sourceMappingURL=settings.js.map

package/dist/lib/settings.js.map

@@ -1 +1 @@
-{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/lib/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEnD;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,OAAO,CAAC;AACjB,CAAC;AA4CD;;GAEG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;AACxE,CAAC","sourcesContent":["import { config, version } from '../cli.config.js';\n\n/**\n * Get version from package.json\n */\nexport function getVersion(): string {\n  return version;\n}\n\nexport interface InstallerConfig {\n  model: string;\n  doctorModel: string;\n  workos: {\n    clientId: string;\n    authkitDomain: string;\n    llmGatewayUrl: string;\n    telemetryUrl: string;\n  };\n  telemetry: {\n    enabled: boolean;\n    eventName: string;\n  };\n  proxy: {\n    refreshThresholdMs: number;\n  };\n  nodeVersion: string;\n  logging: {\n    debugMode: boolean;\n  };\n  documentation: {\n    workosDocsUrl: string;\n    dashboardUrl: string;\n    issuesUrl: string;\n  };\n  frameworks: {\n    [key: string]: {\n      port: number;\n      callbackPath: string;\n    };\n  };\n  legacy: {\n    oauthPort: number;\n  };\n  branding: {\n    showAsciiArt: boolean;\n    asciiArt: string;\n    compactAsciiArt: string;\n    useCompact: boolean;\n  };\n}\n\n/**\n * Get config\n */\nexport function getConfig(): InstallerConfig {\n  return config;\n}\n\n/**\n * Get the CLI auth client ID.\n * Env var overrides config default.\n */\nexport function getCliAuthClientId(): string {\n  return config.workos.clientId;\n}\n\n/**\n * Get the AuthKit domain.\n * Env var overrides config default.\n */\nexport function getAuthkitDomain(): string {\n  return process.env.WORKOS_AUTHKIT_DOMAIN || config.workos.authkitDomain;\n}\n\n/**\n * Get the LLM gateway URL.\n * Env var overrides config default.\n */\nexport function getLlmGatewayUrl(): string {\n  return process.env.WORKOS_LLM_GATEWAY_URL || config.workos.llmGatewayUrl;\n}\n\n/**\n * Get the CLI telemetry URL.\n * Env var overrides config default.\n */\nexport function getTelemetryUrl(): string {\n  return process.env.WORKOS_TELEMETRY_URL || config.workos.telemetryUrl;\n}\n"]}
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/lib/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEnD;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,OAAO,CAAC;AACjB,CAAC;AA0CD;;GAEG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;AAChC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;AAC1E,CAAC","sourcesContent":["import { config, version } from '../cli.config.js';\n\n/**\n * Get version from package.json\n */\nexport function getVersion(): string {\n  return version;\n}\n\nexport interface InstallerConfig {\n  model: string;\n  doctorModel: string;\n  workos: {\n    clientId: string;\n    authkitDomain: string;\n  };\n  telemetry: {\n    enabled: boolean;\n    eventName: string;\n  };\n  proxy: {\n    refreshThresholdMs: number;\n  };\n  nodeVersion: string;\n  logging: {\n    debugMode: boolean;\n  };\n  documentation: {\n    workosDocsUrl: string;\n    dashboardUrl: string;\n    issuesUrl: string;\n  };\n  frameworks: {\n    [key: string]: {\n      port: number;\n      callbackPath: string;\n    };\n  };\n  legacy: {\n    oauthPort: number;\n  };\n  branding: {\n    showAsciiArt: boolean;\n    asciiArt: string;\n    compactAsciiArt: string;\n    useCompact: boolean;\n  };\n}\n\n/**\n * Get config\n */\nexport function getConfig(): InstallerConfig {\n  return config;\n}\n\n/**\n * Get the CLI auth client ID (from config; not env-overridable).\n */\nexport function getCliAuthClientId(): string {\n  return config.workos.clientId;\n}\n\n/**\n * Get the AuthKit domain.\n * Env var overrides config default.\n *\n * Note: WorkOS service endpoints (API, dashboard, LLM gateway, telemetry)\n * live in utils/urls.ts. AuthKit's domain stays here because it's config-\n * backed rather than derived from the API host.\n */\nexport function getAuthkitDomain(): string {\n  return process.env.WORKOS_AUTHKIT_DOMAIN || config.workos.authkitDomain;\n}\n"]}

package/dist/lib/startup-notice-gate.d.ts

@@ -0,0 +1,21 @@
+/**
+ * One-notice-per-run coordinator for the startup stderr notices.
+ *
+ * Three middlewares can each want to print a one-line stderr notice at startup:
+ * the first-run telemetry notice, the unclaimed-environment warning, and the
+ * MCP banner. Stacking two or three boxes on a single command is noise, so this
+ * module is the shared latch — whichever fires first calls
+ * markStartupNoticeShown(), and the lower-priority MCP banner checks
+ * hasStartupNoticeShown() and defers.
+ *
+ * Ordering IS priority: bin.ts runs the telemetry + unclaimed middlewares before
+ * the MCP banner middleware, so those two always win a contested run. In-memory
+ * only (a run is a single CLI process); the per-machine "already shown" state is
+ * persisted separately by each notice.
+ */
+/** Record that a startup notice has displayed this run. */
+export declare function markStartupNoticeShown(): void;
+/** Whether any startup notice has already displayed this run. */
+export declare function hasStartupNoticeShown(): boolean;
+/** Reset the latch (for testing). */
+export declare function resetStartupNoticeGate(): void;

package/dist/lib/startup-notice-gate.js

@@ -0,0 +1,29 @@
+/**
+ * One-notice-per-run coordinator for the startup stderr notices.
+ *
+ * Three middlewares can each want to print a one-line stderr notice at startup:
+ * the first-run telemetry notice, the unclaimed-environment warning, and the
+ * MCP banner. Stacking two or three boxes on a single command is noise, so this
+ * module is the shared latch — whichever fires first calls
+ * markStartupNoticeShown(), and the lower-priority MCP banner checks
+ * hasStartupNoticeShown() and defers.
+ *
+ * Ordering IS priority: bin.ts runs the telemetry + unclaimed middlewares before
+ * the MCP banner middleware, so those two always win a contested run. In-memory
+ * only (a run is a single CLI process); the per-machine "already shown" state is
+ * persisted separately by each notice.
+ */
+let shown = false;
+/** Record that a startup notice has displayed this run. */
+export function markStartupNoticeShown() {
+    shown = true;
+}
+/** Whether any startup notice has already displayed this run. */
+export function hasStartupNoticeShown() {
+    return shown;
+}
+/** Reset the latch (for testing). */
+export function resetStartupNoticeGate() {
+    shown = false;
+}
+//# sourceMappingURL=startup-notice-gate.js.map

package/dist/lib/startup-notice-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"startup-notice-gate.js","sourceRoot":"","sources":["../../src/lib/startup-notice-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,IAAI,KAAK,GAAG,KAAK,CAAC;AAElB,2DAA2D;AAC3D,MAAM,UAAU,sBAAsB;IACpC,KAAK,GAAG,IAAI,CAAC;AACf,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,qBAAqB;IACnC,OAAO,KAAK,CAAC;AACf,CAAC;AAED,qCAAqC;AACrC,MAAM,UAAU,sBAAsB;IACpC,KAAK,GAAG,KAAK,CAAC;AAChB,CAAC","sourcesContent":["/**\n * One-notice-per-run coordinator for the startup stderr notices.\n *\n * Three middlewares can each want to print a one-line stderr notice at startup:\n * the first-run telemetry notice, the unclaimed-environment warning, and the\n * MCP banner. Stacking two or three boxes on a single command is noise, so this\n * module is the shared latch — whichever fires first calls\n * markStartupNoticeShown(), and the lower-priority MCP banner checks\n * hasStartupNoticeShown() and defers.\n *\n * Ordering IS priority: bin.ts runs the telemetry + unclaimed middlewares before\n * the MCP banner middleware, so those two always win a contested run. In-memory\n * only (a run is a single CLI process); the per-machine \"already shown\" state is\n * persisted separately by each notice.\n */\n\nlet shown = false;\n\n/** Record that a startup notice has displayed this run. */\nexport function markStartupNoticeShown(): void {\n  shown = true;\n}\n\n/** Whether any startup notice has already displayed this run. */\nexport function hasStartupNoticeShown(): boolean {\n  return shown;\n}\n\n/** Reset the latch (for testing). */\nexport function resetStartupNoticeGate(): void {\n  shown = false;\n}\n"]}

package/dist/lib/telemetry-notice.d.ts

@@ -1,13 +1,13 @@
 /**
  * First-run telemetry notice.
  *
- * Prints a one-time, stderr-only box telling the user that anonymous CLI usage
- * telemetry is being collected and how to turn it off. Shown at most once ever
- * (backed by the persisted `noticeShownAt` timestamp in preferences.json), only
- * in interactive human mode, and never on the machine-readable path.
+ * Prints a one-time, stderr-only notice telling the user that anonymous CLI
+ * usage telemetry is being collected and how to turn it off. Shown at most once
+ * ever (backed by the persisted `noticeShownAt` timestamp in preferences.json),
+ * only in interactive human mode, and never on the machine-readable path.
  *
  * Mirrors the structural pattern of unclaimed-warning.ts: a per-session guard,
- * a `!isJsonMode()` gate, the shared renderStderrBox helper, and a never-throws
+ * a `!isJsonMode()` gate, the shared renderStderrNotice helper, and a never-throws
  * contract so it can never block command execution. The one structural
  * difference is persistence — this notice writes `noticeShownAt` the first time
  * it actually displays so it never re-shows across runs.

package/dist/lib/telemetry-notice.js

@@ -1,22 +1,23 @@
 /**
  * First-run telemetry notice.
  *
- * Prints a one-time, stderr-only box telling the user that anonymous CLI usage
- * telemetry is being collected and how to turn it off. Shown at most once ever
- * (backed by the persisted `noticeShownAt` timestamp in preferences.json), only
- * in interactive human mode, and never on the machine-readable path.
+ * Prints a one-time, stderr-only notice telling the user that anonymous CLI
+ * usage telemetry is being collected and how to turn it off. Shown at most once
+ * ever (backed by the persisted `noticeShownAt` timestamp in preferences.json),
+ * only in interactive human mode, and never on the machine-readable path.
  *
  * Mirrors the structural pattern of unclaimed-warning.ts: a per-session guard,
- * a `!isJsonMode()` gate, the shared renderStderrBox helper, and a never-throws
+ * a `!isJsonMode()` gate, the shared renderStderrNotice helper, and a never-throws
  * contract so it can never block command execution. The one structural
  * difference is persistence — this notice writes `noticeShownAt` the first time
  * it actually displays so it never re-shows across runs.
  */
 import chalk from 'chalk';
 import { isJsonMode } from '../utils/output.js';
-import { renderStderrBox } from '../utils/box.js';
+import { renderStderrNotice } from '../utils/box.js';
 import { formatWorkOSCommand } from '../utils/command-invocation.js';
 import { isNoticeShown, markNoticeShown, isTelemetryOptedOut } from './preferences.js';
+import { markStartupNoticeShown } from './startup-notice-gate.js';
 let shownThisSession = false;
 /**
  * Show the first-run telemetry notice if it has never been displayed.
@@ -37,13 +38,14 @@ export function maybeShowTelemetryNotice() {
         if (isNoticeShown())
             return; // already shown once, ever
         const optOut = chalk.cyan(formatWorkOSCommand('telemetry opt-out'));
-        const inner = ` ${chalk.cyan('ℹ')} WorkOS collects anonymous CLI usage telemetry. Run ${optOut} to disable it. `;
-        renderStderrBox(inner, chalk.cyan);
+        renderStderrNotice(`${chalk.cyan('ℹ')} ${chalk.dim('Anonymous CLI usage telemetry is on.')} ${chalk.dim('Disable:')} ${optOut}`);
         // Set the per-session guard and persist ONLY after a successful render, so a
         // render failure (caught below) lets a later command in this process retry
         // rather than silently suppressing the notice for the rest of the session.
         shownThisSession = true;
         markNoticeShown();
+        // Claim the one-notice-per-run slot so the lower-priority MCP banner defers.
+        markStartupNoticeShown();
     }
     catch {
         // Never block command execution.