workos 0.17.1 → 0.19.0

package/dist/utils/analytics.js.map

@@ -1 +1 @@
-{"version":3,"file":"analytics.js","sourceRoot":"","sources":["../../src/utils/analytics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAaxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAErE,MAAM,OAAO,SAAS;IACZ,IAAI,GAAiE,EAAE,CAAC;IACxE,SAAS,CAAS;IAClB,gBAAgB,CAAO;IACvB,UAAU,CAAU;IACpB,IAAI,CAA8B;IAClC,QAAQ,GAAa,MAAM,CAAC;IAEpC,yBAAyB;IACjB,gBAAgB,GAAG,CAAC,CAAC;IACrB,iBAAiB,GAAG,CAAC,CAAC;IACtB,eAAe,GAAG,CAAC,CAAC;IAE5B;QACE,IAAI,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjD,CAAC;IAED,aAAa,CAAC,UAAkB;QAC9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,cAAc,CAAC,KAAa;QAC1B,eAAe,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAED,aAAa,CAAC,MAAc;QAC1B,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,iBAAiB,CAAC,QAAgB,EAAE,UAAkB;QACpD,eAAe,CAAC,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1D,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,IAAc;QACxB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,aAAa,CAAC,GAAW;QACvB,eAAe,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAEO,SAAS;QACf,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,iCAAiC;QAC/B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QAE5C,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC;QACvB,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;QAC/B,uEAAuE;QACvE,yEAAyE;QACzE,qEAAqE;QACrE,IAAI,KAAK,EAAE,WAAW,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,eAAe,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAClD,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;QACD,oDAAoD;QACpD,IAAI,KAAK,EAAE,MAAM,EAAE,CAAC;YAClB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;QACjC,CAAC;QAED,kEAAkE;QAClE,2DAA2D;QAC3D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;YACnC,IAAI,GAAG,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvC,eAAe,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;gBAChE,qEAAqE;gBACrE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,aAAa,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACjE,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM;oBAAE,IAAI,CAAC,QAAQ,GAAG,aAAa,CAAC;YAC9D,CAAC;iBAAM,IAAI,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACnD,eAAe,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,GAAG,CAAC,QAAQ;oBAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAC7E,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;YAC5B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;QAED,sEAAsE;QACtE,gEAAgE;QAChE,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YAC3D,eAAe,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC1D,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC5B,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,mBAAmB;QACjB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,eAAe,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,iCAAiC,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,GAAW,EAAE,KAAmD;QACrE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,OAAO,CAAC,SAAiB,EAAE,UAAoC;QAC7D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,KAAK,CAAC,wBAAwB,SAAS,EAAE,EAAE,UAAU,CAAC,CAAC;QAEvD,gEAAgE;QAChE,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;oBAC3D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAkC,CAAC;gBACtD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,gBAAgB,CAAC,KAAY,EAAE,aAAsC,EAAE;QACrE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,wEAAwE;QACxE,uEAAuE;QACvE,wBAAwB;QACxB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACzD,KAAK,CAAC,+BAA+B,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,oCAAoC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,0EAA0E;IAClE,kBAAkB,CAAC,KAAY;QACrC,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;SACxC,CAAC;IACJ,CAAC;IAEO,gBAAgB;QACtB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;YAAE,OAAO,gBAAgB,CAAC;QACxD,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC;QAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ;YAAE,OAAO,UAAU,CAAC;QAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC;QAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QAC9C,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,iBAAiB;QACvB,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,SAAS,CAAC;QACxB,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE3C,OAAO;YACL,WAAW,EAAE,WAAW,EAAE;YAC1B,WAAW,EAAE,IAAI,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,gBAAgB,EAAE,SAAS;YAC3B,kBAAkB,EAAE,OAAO,CAAC,OAAO;YACnC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;YAC5E,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;YACxF,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,IAAgC,EAAE,OAAe;QAC5D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAEjB,MAAM,KAAK,GAAsB;YAC/B,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;YAC9C,UAAU,EAAE;gBACV,mBAAmB,EAAE,OAAO;gBAC5B,gBAAgB,EAAE,IAAI;gBACtB,gBAAgB,EAAE,IAAI,CAAC,UAAU;gBACjC,GAAG,IAAI,CAAC,iBAAiB,EAAE;aAC5B;SACF,CAAC;QAEF,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,aAAa,CAAC,IAAY,EAAE,UAAkB,EAAE,OAAgB,EAAE,KAAa;QAC7E,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,MAAM,KAAK,GAAc;YACvB,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI;YACJ,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE;YAC/D,UAAU;YACV,OAAO;YACP,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;SAC1D,CAAC;QAEF,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,UAAU,CAAC,QAAgB,EAAE,UAAkB,EAAE,OAAgB;QAC/D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,MAAM,KAAK,GAAmB;YAC5B,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,QAAQ;YACR,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE;YAC/D,UAAU;YACV,OAAO;SACR,CAAC;QAEF,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,UAAU,CAAC,KAAa,EAAE,WAAmB,EAAE,YAAoB;QACjE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,IAAI,CAAC,gBAAgB,IAAI,WAAW,CAAC;QACrC,IAAI,CAAC,iBAAiB,IAAI,YAAY,CAAC;QAEvC,MAAM,KAAK,GAAkB;YAC3B,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK;YACL,WAAW;YACX,YAAY;SACb,CAAC;QAEF,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,wBAAwB;QACtB,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAED,gBAAgB,CACd,IAAY,EACZ,UAAkB,EAClB,OAAgB,EAChB,OAMC;QAED,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,MAAM,WAAW,GAAG,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAExF,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,SAAS;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU,EAAE;gBACV,cAAc,EAAE,IAAI;gBACpB,qBAAqB,EAAE,UAAU;gBACjC,iBAAiB,EAAE,OAAO;gBAC1B,aAAa,EAAE,UAAU,EAAE;gBAC3B,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,WAAW;oBACb,CAAC,CAAC;wBACE,oBAAoB,EAAE,WAAW,CAAC,IAAI;wBACtC,uBAAuB,EAAE,WAAW,CAAC,OAAO;qBAC7C;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/E,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjG,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzF,GAAG,IAAI,CAAC,iBAAiB,EAAE;aAC5B;SACF,CAAC;QAEF,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,qBAAqB,CAAC,KAAY,EAAE,OAAgD;QAClF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAEzD,MAAM,KAAK,GAAe;YACxB,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU,EAAE;gBACV,kBAAkB,EAAE,IAAI;gBACxB,qBAAqB,EAAE,OAAO;gBAC9B,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;gBACzC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,aAAa,EAAE,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE;gBAC/C,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,IAAI,CAAC,iBAAiB,EAAE;aAC5B;SACF,CAAC;QAEF,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAyC;QACtD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAE9D,iCAAiC;QACjC,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAGhG,CAAC;QAEF,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEhD,MAAM,KAAK,GAAoB;YAC7B,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU,EAAE;gBACV,mBAAmB,EAAE,MAAM;gBAC3B,uBAAuB,EAAE,QAAQ;gBACjC,4BAA4B,EAAE,IAAI,CAAC,eAAe;gBAClD,8BAA8B,EAAE,IAAI,CAAC,gBAAgB;gBACrD,+BAA+B,EAAE,IAAI,CAAC,iBAAiB;gBACvD,GAAG,cAAc;gBACjB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,GAAG,eAAe;aACnB;SACF,CAAC;QAEF,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;CACF;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC","sourcesContent":["import os from 'node:os';\nimport { basename } from 'node:path';\nimport { v4 as uuidv4 } from 'uuid';\nimport { debug } from './debug.js';\nimport { telemetryClient } from './telemetry-client.js';\nimport type {\n  AuthMode,\n  SessionStartEvent,\n  SessionEndEvent,\n  StepEvent,\n  AgentToolEvent,\n  AgentLLMEvent,\n  CommandEvent,\n  CrashEvent,\n  TerminationReason,\n  EnvFingerprint,\n} from './telemetry-types.js';\nimport { isTelemetryEnabled } from '../lib/preferences.js';\nimport { getTelemetryUrl, getVersion } from '../lib/settings.js';\nimport { getCredentials, isTokenExpired } from '../lib/credentials.js';\nimport { getActiveEnvironment, isUnclaimedEnvironment } from '../lib/config-store.js';\nimport { getDeviceId } from '../lib/device-id.js';\nimport { sanitizeMessage, sanitizeStack } from './crash-reporter.js';\n\nexport class Analytics {\n  private tags: Record<string, string | boolean | number | null | undefined> = {};\n  private sessionId: string;\n  private sessionStartTime: Date;\n  private distinctId?: string;\n  private mode?: 'cli' | 'tui' | 'headless';\n  private authMode: AuthMode = 'none';\n\n  // Agent metrics tracking\n  private totalInputTokens = 0;\n  private totalOutputTokens = 0;\n  private agentIterations = 0;\n\n  constructor() {\n    this.sessionId = uuidv4();\n    this.sessionStartTime = new Date();\n    this.tags = { $app_name: 'authkit-installer' };\n  }\n\n  setDistinctId(distinctId: string) {\n    this.distinctId = distinctId;\n  }\n\n  setAccessToken(token: string) {\n    telemetryClient.setAccessToken(token);\n  }\n\n  setApiKeyAuth(apiKey: string) {\n    telemetryClient.setApiKeyAuth(apiKey);\n  }\n\n  setClaimTokenAuth(clientId: string, claimToken: string) {\n    telemetryClient.setClaimTokenAuth(clientId, claimToken);\n  }\n\n  /**\n   * Set the auth mode explicitly for special cases. Normal CLI flows should use\n   * `configureAuthFromAvailableSources()` so transport and auth.mode stay aligned.\n   */\n  setAuthMode(mode: AuthMode) {\n    this.authMode = mode;\n  }\n\n  setGatewayUrl(url: string) {\n    telemetryClient.setGatewayUrl(url);\n  }\n\n  private isEnabled(): boolean {\n    return isTelemetryEnabled();\n  }\n\n  /**\n   * Configure telemetry transport and auth.mode from all available CLI auth\n   * sources. Priority: stored JWT, unclaimed-environment claim token, active\n   * environment API key, then WORKOS_API_KEY.\n   */\n  configureAuthFromAvailableSources(): AuthMode {\n    if (!this.isEnabled()) return this.authMode;\n\n    this.authMode = 'none';\n    const creds = getCredentials();\n    // Only treat the JWT as usable auth when it is still valid. An expired\n    // access token would 401 against the telemetry guard and the event would\n    // be dropped, so fall through to claim-token / api-key auth instead.\n    if (creds?.accessToken && !isTokenExpired(creds)) {\n      telemetryClient.setAccessToken(creds.accessToken);\n      this.authMode = 'jwt';\n    }\n    // Preserve identity even when the token is expired.\n    if (creds?.userId) {\n      this.distinctId = creds.userId;\n    }\n\n    // Check for unclaimed environment — fall back to claim-token auth\n    // so unclaimed users' telemetry still reaches the backend.\n    try {\n      const env = getActiveEnvironment();\n      if (env && isUnclaimedEnvironment(env)) {\n        telemetryClient.setClaimTokenAuth(env.clientId, env.claimToken);\n        // Tag distinctId so unclaimed sessions are identifiable in analytics\n        this.distinctId = this.distinctId ?? `unclaimed:${env.clientId}`;\n        if (this.authMode === 'none') this.authMode = 'claim_token';\n      } else if (env?.apiKey && this.authMode === 'none') {\n        telemetryClient.setApiKeyAuth(env.apiKey);\n        if (env.clientId) this.distinctId = this.distinctId ?? `env:${env.clientId}`;\n        this.authMode = 'api_key';\n      }\n    } catch {\n      // Config-store failure is non-fatal for telemetry\n    }\n\n    // WORKOS_API_KEY covers API-key-only users. Lowest priority — JWT and\n    // claim-token auth have richer identity context when available.\n    if (this.authMode === 'none' && process.env.WORKOS_API_KEY) {\n      telemetryClient.setApiKeyAuth(process.env.WORKOS_API_KEY);\n      this.authMode = 'api_key';\n    }\n\n    return this.authMode;\n  }\n\n  /**\n   * Initialize telemetry for non-installer commands.\n   * Sets telemetry URL from default config and loads auth credentials.\n   */\n  initForNonInstaller(): void {\n    if (!this.isEnabled()) return;\n\n    telemetryClient.setGatewayUrl(getTelemetryUrl());\n    this.configureAuthFromAvailableSources();\n  }\n\n  setTag(key: string, value: string | boolean | number | null | undefined) {\n    this.tags[key] = value;\n  }\n\n  capture(eventName: string, properties?: Record<string, unknown>) {\n    if (!this.isEnabled()) return;\n\n    debug(`[Analytics] capture: ${eventName}`, properties);\n\n    // Accumulate primitive values as tags for the session.end event\n    if (properties) {\n      for (const [key, value] of Object.entries(properties)) {\n        if (['string', 'number', 'boolean'].includes(typeof value)) {\n          this.tags[key] = value as string | number | boolean;\n        }\n      }\n    }\n  }\n\n  captureException(error: Error, properties: Record<string, unknown> = {}) {\n    if (!this.isEnabled()) return;\n\n    // Sanitize BEFORE logging — raw error.message can carry Bearer tokens /\n    // sk_ keys / JWTs on auth-failure paths, which would surface in stdout\n    // under WORKOS_DEBUG=1.\n    const { type, message } = this.extractErrorFields(error);\n    debug('[Analytics] captureException:', message, properties);\n    this.tags['error.type'] = type;\n    this.tags['error.message'] = message;\n  }\n\n  async getFeatureFlag(_flagKey: string): Promise<string | boolean | undefined> {\n    // Feature flags not implemented yet\n    return undefined;\n  }\n\n  /** All capture methods that record error details MUST go through this. */\n  private extractErrorFields(error: Error): { type: string; message: string } {\n    return {\n      type: error.name,\n      message: sanitizeMessage(error.message),\n    };\n  }\n\n  private detectCiProvider(): string | undefined {\n    if (process.env.GITHUB_ACTIONS) return 'github-actions';\n    if (process.env.BUILDKITE) return 'buildkite';\n    if (process.env.CIRCLECI) return 'circleci';\n    if (process.env.GITLAB_CI) return 'gitlab-ci';\n    if (process.env.JENKINS_URL) return 'jenkins';\n    return undefined;\n  }\n\n  private getEnvFingerprint(): EnvFingerprint {\n    let osVersion: string;\n    try {\n      osVersion = os.release();\n    } catch {\n      osVersion = 'unknown';\n    }\n\n    const ciProvider = this.detectCiProvider();\n\n    return {\n      'device.id': getDeviceId(),\n      'auth.mode': this.authMode,\n      'env.os': process.platform,\n      'env.os_version': osVersion,\n      'env.node_version': process.version,\n      'env.shell': basename(process.env.SHELL ?? process.env.COMSPEC ?? 'unknown'),\n      'env.ci': Boolean(process.env.CI || process.env.GITHUB_ACTIONS || process.env.BUILDKITE),\n      ...(ciProvider ? { 'env.ci_provider': ciProvider } : {}),\n    };\n  }\n\n  sessionStart(mode: 'cli' | 'tui' | 'headless', version: string) {\n    if (!this.isEnabled()) return;\n\n    this.mode = mode;\n\n    const event: SessionStartEvent = {\n      type: 'session.start',\n      sessionId: this.sessionId,\n      timestamp: this.sessionStartTime.toISOString(),\n      attributes: {\n        'installer.version': version,\n        'installer.mode': mode,\n        'workos.user_id': this.distinctId,\n        ...this.getEnvFingerprint(),\n      },\n    };\n\n    telemetryClient.queueEvent(event);\n  }\n\n  stepCompleted(name: string, durationMs: number, success: boolean, error?: Error) {\n    if (!this.isEnabled()) return;\n\n    const event: StepEvent = {\n      type: 'step',\n      sessionId: this.sessionId,\n      timestamp: new Date().toISOString(),\n      name,\n      startTimestamp: new Date(Date.now() - durationMs).toISOString(),\n      durationMs,\n      success,\n      error: error ? this.extractErrorFields(error) : undefined,\n    };\n\n    telemetryClient.queueEvent(event);\n  }\n\n  toolCalled(toolName: string, durationMs: number, success: boolean) {\n    if (!this.isEnabled()) return;\n\n    const event: AgentToolEvent = {\n      type: 'agent.tool',\n      sessionId: this.sessionId,\n      timestamp: new Date().toISOString(),\n      toolName,\n      startTimestamp: new Date(Date.now() - durationMs).toISOString(),\n      durationMs,\n      success,\n    };\n\n    telemetryClient.queueEvent(event);\n  }\n\n  llmRequest(model: string, inputTokens: number, outputTokens: number) {\n    if (!this.isEnabled()) return;\n\n    this.totalInputTokens += inputTokens;\n    this.totalOutputTokens += outputTokens;\n\n    const event: AgentLLMEvent = {\n      type: 'agent.llm',\n      sessionId: this.sessionId,\n      timestamp: new Date().toISOString(),\n      model,\n      inputTokens,\n      outputTokens,\n    };\n\n    telemetryClient.queueEvent(event);\n  }\n\n  incrementAgentIterations() {\n    this.agentIterations++;\n  }\n\n  emitCommandEvent(\n    name: string,\n    durationMs: number,\n    success: boolean,\n    options?: {\n      error?: Error;\n      flags?: string[];\n      reason?: TerminationReason;\n      errorCode?: string;\n      apiContext?: { status?: number; code?: string; resource?: string };\n    },\n  ) {\n    if (!this.isEnabled()) return;\n\n    const errorFields = options?.error ? this.extractErrorFields(options.error) : undefined;\n\n    const event: CommandEvent = {\n      type: 'command',\n      sessionId: this.sessionId,\n      timestamp: new Date().toISOString(),\n      attributes: {\n        'command.name': name,\n        'command.duration_ms': durationMs,\n        'command.success': success,\n        'cli.version': getVersion(),\n        ...(this.distinctId ? { 'workos.user_id': this.distinctId } : {}),\n        ...(errorFields\n          ? {\n              'command.error_type': errorFields.type,\n              'command.error_message': errorFields.message,\n            }\n          : {}),\n        ...(options?.flags?.length ? { 'command.flags': options.flags.join(',') } : {}),\n        ...(options?.reason ? { 'termination.reason': options.reason } : {}),\n        ...(options?.errorCode ? { 'error.code': options.errorCode } : {}),\n        ...(options?.apiContext?.status !== undefined ? { 'api.status': options.apiContext.status } : {}),\n        ...(options?.apiContext?.code ? { 'api.code': options.apiContext.code } : {}),\n        ...(options?.apiContext?.resource ? { 'api.resource': options.apiContext.resource } : {}),\n        ...this.getEnvFingerprint(),\n      },\n    };\n\n    telemetryClient.queueEvent(event);\n  }\n\n  captureUnhandledCrash(error: Error, options?: { command?: string; version?: string }) {\n    if (!this.isEnabled()) return;\n\n    const { type, message } = this.extractErrorFields(error);\n\n    const event: CrashEvent = {\n      type: 'crash',\n      sessionId: this.sessionId,\n      timestamp: new Date().toISOString(),\n      attributes: {\n        'crash.error_type': type,\n        'crash.error_message': message,\n        'crash.stack': sanitizeStack(error.stack),\n        ...(options?.command ? { 'crash.command': options.command } : {}),\n        'cli.version': options?.version ?? getVersion(),\n        ...(this.distinctId ? { 'workos.user_id': this.distinctId } : {}),\n        ...this.getEnvFingerprint(),\n      },\n    };\n\n    telemetryClient.queueEvent(event);\n  }\n\n  async shutdown(status: 'success' | 'error' | 'cancelled') {\n    if (!this.isEnabled()) return;\n\n    const duration = Date.now() - this.sessionStartTime.getTime();\n\n    // Filter out null/undefined tags\n    const extraAttributes = Object.fromEntries(Object.entries(this.tags).filter(([, v]) => v != null)) as Record<\n      string,\n      string | number | boolean\n    >;\n\n    const envFingerprint = this.getEnvFingerprint();\n\n    const event: SessionEndEvent = {\n      type: 'session.end',\n      sessionId: this.sessionId,\n      timestamp: new Date().toISOString(),\n      attributes: {\n        'installer.outcome': status,\n        'installer.duration_ms': duration,\n        'installer.agent.iterations': this.agentIterations,\n        'installer.agent.tokens.input': this.totalInputTokens,\n        'installer.agent.tokens.output': this.totalOutputTokens,\n        ...envFingerprint,\n        ...(this.mode ? { 'installer.mode': this.mode } : {}),\n        ...extraAttributes,\n      },\n    };\n\n    telemetryClient.queueEvent(event);\n    await telemetryClient.flush();\n  }\n}\n\nexport const analytics = new Analytics();\n"]}
+{"version":3,"file":"analytics.js","sourceRoot":"","sources":["../../src/utils/analytics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAaxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAErE,MAAM,OAAO,SAAS;IACZ,IAAI,GAAiE,EAAE,CAAC;IACxE,SAAS,CAAS;IAClB,gBAAgB,CAAO;IACvB,UAAU,CAAU;IACpB,IAAI,CAA8B;IAClC,QAAQ,GAAa,MAAM,CAAC;IAEpC,yBAAyB;IACjB,gBAAgB,GAAG,CAAC,CAAC;IACrB,iBAAiB,GAAG,CAAC,CAAC;IACtB,eAAe,GAAG,CAAC,CAAC;IAE5B;QACE,IAAI,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjD,CAAC;IAED,aAAa,CAAC,UAAkB;QAC9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,cAAc,CAAC,KAAa;QAC1B,eAAe,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAED,aAAa,CAAC,MAAc;QAC1B,eAAe,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,iBAAiB,CAAC,QAAgB,EAAE,UAAkB;QACpD,eAAe,CAAC,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC1D,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,IAAc;QACxB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,aAAa,CAAC,GAAW;QACvB,eAAe,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;IACrC,CAAC;IAEO,SAAS;QACf,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,iCAAiC;QAC/B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QAE5C,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC;QACvB,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;QAC/B,uEAAuE;QACvE,yEAAyE;QACzE,qEAAqE;QACrE,IAAI,KAAK,EAAE,WAAW,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,eAAe,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAClD,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;QACD,oDAAoD;QACpD,IAAI,KAAK,EAAE,MAAM,EAAE,CAAC;YAClB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;QACjC,CAAC;QAED,kEAAkE;QAClE,2DAA2D;QAC3D,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;YACnC,IAAI,GAAG,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvC,eAAe,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;gBAChE,qEAAqE;gBACrE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,aAAa,GAAG,CAAC,QAAQ,EAAE,CAAC;gBACjE,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM;oBAAE,IAAI,CAAC,QAAQ,GAAG,aAAa,CAAC;YAC9D,CAAC;iBAAM,IAAI,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACnD,eAAe,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,GAAG,CAAC,QAAQ;oBAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAC7E,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;YAC5B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,kDAAkD;QACpD,CAAC;QAED,sEAAsE;QACtE,gEAAgE;QAChE,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;YAC3D,eAAe,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC1D,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC5B,CAAC;QAED,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,mBAAmB;QACjB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,eAAe,CAAC,aAAa,CAAC,eAAe,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,iCAAiC,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,GAAW,EAAE,KAAmD;QACrE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,OAAO,CAAC,SAAiB,EAAE,UAAoC;QAC7D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,KAAK,CAAC,wBAAwB,SAAS,EAAE,EAAE,UAAU,CAAC,CAAC;QAEvD,gEAAgE;QAChE,IAAI,UAAU,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;oBAC3D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAkC,CAAC;gBACtD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,gBAAgB,CAAC,KAAY,EAAE,aAAsC,EAAE;QACrE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,wEAAwE;QACxE,uEAAuE;QACvE,wBAAwB;QACxB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACzD,KAAK,CAAC,+BAA+B,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;QAC/B,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,OAAO,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,oCAAoC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,0EAA0E;IAClE,kBAAkB,CAAC,KAAY;QACrC,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC;SACxC,CAAC;IACJ,CAAC;IAEO,gBAAgB;QACtB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;YAAE,OAAO,gBAAgB,CAAC;QACxD,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC;QAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ;YAAE,OAAO,UAAU,CAAC;QAC5C,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS;YAAE,OAAO,WAAW,CAAC;QAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QAC9C,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,iBAAiB;QACvB,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,GAAG,SAAS,CAAC;QACxB,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAE3C,OAAO;YACL,WAAW,EAAE,WAAW,EAAE;YAC1B,WAAW,EAAE,IAAI,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,gBAAgB,EAAE,SAAS;YAC3B,kBAAkB,EAAE,OAAO,CAAC,OAAO;YACnC,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,SAAS,CAAC;YAC5E,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;YACxF,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,IAAgC,EAAE,OAAe;QAC5D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QAEjB,MAAM,KAAK,GAAsB;YAC/B,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE;YAC9C,UAAU,EAAE;gBACV,mBAAmB,EAAE,OAAO;gBAC5B,gBAAgB,EAAE,IAAI;gBACtB,gBAAgB,EAAE,IAAI,CAAC,UAAU;gBACjC,GAAG,IAAI,CAAC,iBAAiB,EAAE;aAC5B;SACF,CAAC;QAEF,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,aAAa,CAAC,IAAY,EAAE,UAAkB,EAAE,OAAgB,EAAE,KAAa;QAC7E,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,MAAM,KAAK,GAAc;YACvB,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI;YACJ,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE;YAC/D,UAAU;YACV,OAAO;YACP,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;SAC1D,CAAC;QAEF,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,UAAU,CAAC,QAAgB,EAAE,UAAkB,EAAE,OAAgB;QAC/D,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,MAAM,KAAK,GAAmB;YAC5B,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,QAAQ;YACR,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE;YAC/D,UAAU;YACV,OAAO;SACR,CAAC;QAEF,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,UAAU,CAAC,KAAa,EAAE,WAAmB,EAAE,YAAoB;QACjE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,IAAI,CAAC,gBAAgB,IAAI,WAAW,CAAC;QACrC,IAAI,CAAC,iBAAiB,IAAI,YAAY,CAAC;QAEvC,MAAM,KAAK,GAAkB;YAC3B,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK;YACL,WAAW;YACX,YAAY;SACb,CAAC;QAEF,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,wBAAwB;QACtB,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC;IAED,gBAAgB,CACd,IAAY,EACZ,UAAkB,EAClB,OAAgB,EAChB,OAOC;QAED,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,MAAM,WAAW,GAAG,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAExF,MAAM,KAAK,GAAiB;YAC1B,IAAI,EAAE,SAAS;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU,EAAE;gBACV,uEAAuE;gBACvE,qEAAqE;gBACrE,GAAG,OAAO,EAAE,eAAe;gBAC3B,cAAc,EAAE,IAAI;gBACpB,qBAAqB,EAAE,UAAU;gBACjC,iBAAiB,EAAE,OAAO;gBAC1B,aAAa,EAAE,UAAU,EAAE;gBAC3B,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,WAAW;oBACb,CAAC,CAAC;wBACE,oBAAoB,EAAE,WAAW,CAAC,IAAI;wBACtC,uBAAuB,EAAE,WAAW,CAAC,OAAO;qBAC7C;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/E,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpE,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjG,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzF,GAAG,IAAI,CAAC,iBAAiB,EAAE;aAC5B;SACF,CAAC;QAEF,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,qBAAqB,CAAC,KAAY,EAAE,OAAgD;QAClF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAEzD,MAAM,KAAK,GAAe;YACxB,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU,EAAE;gBACV,kBAAkB,EAAE,IAAI;gBACxB,qBAAqB,EAAE,OAAO;gBAC9B,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC;gBACzC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,aAAa,EAAE,OAAO,EAAE,OAAO,IAAI,UAAU,EAAE;gBAC/C,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,IAAI,CAAC,iBAAiB,EAAE;aAC5B;SACF,CAAC;QAEF,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAyC;QACtD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO;QAE9B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAE9D,iCAAiC;QACjC,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAGhG,CAAC;QAEF,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEhD,MAAM,KAAK,GAAoB;YAC7B,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,UAAU,EAAE;gBACV,mBAAmB,EAAE,MAAM;gBAC3B,uBAAuB,EAAE,QAAQ;gBACjC,4BAA4B,EAAE,IAAI,CAAC,eAAe;gBAClD,8BAA8B,EAAE,IAAI,CAAC,gBAAgB;gBACrD,+BAA+B,EAAE,IAAI,CAAC,iBAAiB;gBACvD,GAAG,cAAc;gBACjB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,GAAG,eAAe;aACnB;SACF,CAAC;QAEF,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;CACF;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC","sourcesContent":["import os from 'node:os';\nimport { basename } from 'node:path';\nimport { v4 as uuidv4 } from 'uuid';\nimport { debug } from './debug.js';\nimport { telemetryClient } from './telemetry-client.js';\nimport type {\n  AuthMode,\n  SessionStartEvent,\n  SessionEndEvent,\n  StepEvent,\n  AgentToolEvent,\n  AgentLLMEvent,\n  CommandEvent,\n  CrashEvent,\n  TerminationReason,\n  EnvFingerprint,\n} from './telemetry-types.js';\nimport { isTelemetryEnabled } from '../lib/preferences.js';\nimport { getVersion } from '../lib/settings.js';\nimport { getTelemetryUrl } from './urls.js';\nimport { getCredentials, isTokenExpired } from '../lib/credentials.js';\nimport { getActiveEnvironment, isUnclaimedEnvironment } from '../lib/config-store.js';\nimport { getDeviceId } from '../lib/device-id.js';\nimport { sanitizeMessage, sanitizeStack } from './crash-reporter.js';\n\nexport class Analytics {\n  private tags: Record<string, string | boolean | number | null | undefined> = {};\n  private sessionId: string;\n  private sessionStartTime: Date;\n  private distinctId?: string;\n  private mode?: 'cli' | 'tui' | 'headless';\n  private authMode: AuthMode = 'none';\n\n  // Agent metrics tracking\n  private totalInputTokens = 0;\n  private totalOutputTokens = 0;\n  private agentIterations = 0;\n\n  constructor() {\n    this.sessionId = uuidv4();\n    this.sessionStartTime = new Date();\n    this.tags = { $app_name: 'authkit-installer' };\n  }\n\n  setDistinctId(distinctId: string) {\n    this.distinctId = distinctId;\n  }\n\n  setAccessToken(token: string) {\n    telemetryClient.setAccessToken(token);\n  }\n\n  setApiKeyAuth(apiKey: string) {\n    telemetryClient.setApiKeyAuth(apiKey);\n  }\n\n  setClaimTokenAuth(clientId: string, claimToken: string) {\n    telemetryClient.setClaimTokenAuth(clientId, claimToken);\n  }\n\n  /**\n   * Set the auth mode explicitly for special cases. Normal CLI flows should use\n   * `configureAuthFromAvailableSources()` so transport and auth.mode stay aligned.\n   */\n  setAuthMode(mode: AuthMode) {\n    this.authMode = mode;\n  }\n\n  setGatewayUrl(url: string) {\n    telemetryClient.setGatewayUrl(url);\n  }\n\n  private isEnabled(): boolean {\n    return isTelemetryEnabled();\n  }\n\n  /**\n   * Configure telemetry transport and auth.mode from all available CLI auth\n   * sources. Priority: stored JWT, unclaimed-environment claim token, active\n   * environment API key, then WORKOS_API_KEY.\n   */\n  configureAuthFromAvailableSources(): AuthMode {\n    if (!this.isEnabled()) return this.authMode;\n\n    this.authMode = 'none';\n    const creds = getCredentials();\n    // Only treat the JWT as usable auth when it is still valid. An expired\n    // access token would 401 against the telemetry guard and the event would\n    // be dropped, so fall through to claim-token / api-key auth instead.\n    if (creds?.accessToken && !isTokenExpired(creds)) {\n      telemetryClient.setAccessToken(creds.accessToken);\n      this.authMode = 'jwt';\n    }\n    // Preserve identity even when the token is expired.\n    if (creds?.userId) {\n      this.distinctId = creds.userId;\n    }\n\n    // Check for unclaimed environment — fall back to claim-token auth\n    // so unclaimed users' telemetry still reaches the backend.\n    try {\n      const env = getActiveEnvironment();\n      if (env && isUnclaimedEnvironment(env)) {\n        telemetryClient.setClaimTokenAuth(env.clientId, env.claimToken);\n        // Tag distinctId so unclaimed sessions are identifiable in analytics\n        this.distinctId = this.distinctId ?? `unclaimed:${env.clientId}`;\n        if (this.authMode === 'none') this.authMode = 'claim_token';\n      } else if (env?.apiKey && this.authMode === 'none') {\n        telemetryClient.setApiKeyAuth(env.apiKey);\n        if (env.clientId) this.distinctId = this.distinctId ?? `env:${env.clientId}`;\n        this.authMode = 'api_key';\n      }\n    } catch {\n      // Config-store failure is non-fatal for telemetry\n    }\n\n    // WORKOS_API_KEY covers API-key-only users. Lowest priority — JWT and\n    // claim-token auth have richer identity context when available.\n    if (this.authMode === 'none' && process.env.WORKOS_API_KEY) {\n      telemetryClient.setApiKeyAuth(process.env.WORKOS_API_KEY);\n      this.authMode = 'api_key';\n    }\n\n    return this.authMode;\n  }\n\n  /**\n   * Initialize telemetry for non-installer commands.\n   * Sets telemetry URL from default config and loads auth credentials.\n   */\n  initForNonInstaller(): void {\n    if (!this.isEnabled()) return;\n\n    telemetryClient.setGatewayUrl(getTelemetryUrl());\n    this.configureAuthFromAvailableSources();\n  }\n\n  setTag(key: string, value: string | boolean | number | null | undefined) {\n    this.tags[key] = value;\n  }\n\n  capture(eventName: string, properties?: Record<string, unknown>) {\n    if (!this.isEnabled()) return;\n\n    debug(`[Analytics] capture: ${eventName}`, properties);\n\n    // Accumulate primitive values as tags for the session.end event\n    if (properties) {\n      for (const [key, value] of Object.entries(properties)) {\n        if (['string', 'number', 'boolean'].includes(typeof value)) {\n          this.tags[key] = value as string | number | boolean;\n        }\n      }\n    }\n  }\n\n  captureException(error: Error, properties: Record<string, unknown> = {}) {\n    if (!this.isEnabled()) return;\n\n    // Sanitize BEFORE logging — raw error.message can carry Bearer tokens /\n    // sk_ keys / JWTs on auth-failure paths, which would surface in stdout\n    // under WORKOS_DEBUG=1.\n    const { type, message } = this.extractErrorFields(error);\n    debug('[Analytics] captureException:', message, properties);\n    this.tags['error.type'] = type;\n    this.tags['error.message'] = message;\n  }\n\n  async getFeatureFlag(_flagKey: string): Promise<string | boolean | undefined> {\n    // Feature flags not implemented yet\n    return undefined;\n  }\n\n  /** All capture methods that record error details MUST go through this. */\n  private extractErrorFields(error: Error): { type: string; message: string } {\n    return {\n      type: error.name,\n      message: sanitizeMessage(error.message),\n    };\n  }\n\n  private detectCiProvider(): string | undefined {\n    if (process.env.GITHUB_ACTIONS) return 'github-actions';\n    if (process.env.BUILDKITE) return 'buildkite';\n    if (process.env.CIRCLECI) return 'circleci';\n    if (process.env.GITLAB_CI) return 'gitlab-ci';\n    if (process.env.JENKINS_URL) return 'jenkins';\n    return undefined;\n  }\n\n  private getEnvFingerprint(): EnvFingerprint {\n    let osVersion: string;\n    try {\n      osVersion = os.release();\n    } catch {\n      osVersion = 'unknown';\n    }\n\n    const ciProvider = this.detectCiProvider();\n\n    return {\n      'device.id': getDeviceId(),\n      'auth.mode': this.authMode,\n      'env.os': process.platform,\n      'env.os_version': osVersion,\n      'env.node_version': process.version,\n      'env.shell': basename(process.env.SHELL ?? process.env.COMSPEC ?? 'unknown'),\n      'env.ci': Boolean(process.env.CI || process.env.GITHUB_ACTIONS || process.env.BUILDKITE),\n      ...(ciProvider ? { 'env.ci_provider': ciProvider } : {}),\n    };\n  }\n\n  sessionStart(mode: 'cli' | 'tui' | 'headless', version: string) {\n    if (!this.isEnabled()) return;\n\n    this.mode = mode;\n\n    const event: SessionStartEvent = {\n      type: 'session.start',\n      sessionId: this.sessionId,\n      timestamp: this.sessionStartTime.toISOString(),\n      attributes: {\n        'installer.version': version,\n        'installer.mode': mode,\n        'workos.user_id': this.distinctId,\n        ...this.getEnvFingerprint(),\n      },\n    };\n\n    telemetryClient.queueEvent(event);\n  }\n\n  stepCompleted(name: string, durationMs: number, success: boolean, error?: Error) {\n    if (!this.isEnabled()) return;\n\n    const event: StepEvent = {\n      type: 'step',\n      sessionId: this.sessionId,\n      timestamp: new Date().toISOString(),\n      name,\n      startTimestamp: new Date(Date.now() - durationMs).toISOString(),\n      durationMs,\n      success,\n      error: error ? this.extractErrorFields(error) : undefined,\n    };\n\n    telemetryClient.queueEvent(event);\n  }\n\n  toolCalled(toolName: string, durationMs: number, success: boolean) {\n    if (!this.isEnabled()) return;\n\n    const event: AgentToolEvent = {\n      type: 'agent.tool',\n      sessionId: this.sessionId,\n      timestamp: new Date().toISOString(),\n      toolName,\n      startTimestamp: new Date(Date.now() - durationMs).toISOString(),\n      durationMs,\n      success,\n    };\n\n    telemetryClient.queueEvent(event);\n  }\n\n  llmRequest(model: string, inputTokens: number, outputTokens: number) {\n    if (!this.isEnabled()) return;\n\n    this.totalInputTokens += inputTokens;\n    this.totalOutputTokens += outputTokens;\n\n    const event: AgentLLMEvent = {\n      type: 'agent.llm',\n      sessionId: this.sessionId,\n      timestamp: new Date().toISOString(),\n      model,\n      inputTokens,\n      outputTokens,\n    };\n\n    telemetryClient.queueEvent(event);\n  }\n\n  incrementAgentIterations() {\n    this.agentIterations++;\n  }\n\n  emitCommandEvent(\n    name: string,\n    durationMs: number,\n    success: boolean,\n    options?: {\n      error?: Error;\n      flags?: string[];\n      reason?: TerminationReason;\n      errorCode?: string;\n      apiContext?: { status?: number; code?: string; resource?: string };\n      extraAttributes?: Record<string, string | number | boolean>;\n    },\n  ) {\n    if (!this.isEnabled()) return;\n\n    const errorFields = options?.error ? this.extractErrorFields(options.error) : undefined;\n\n    const event: CommandEvent = {\n      type: 'command',\n      sessionId: this.sessionId,\n      timestamp: new Date().toISOString(),\n      attributes: {\n        // Extras first: standard fields below win on key collision, so callers\n        // can never override command.name, error fields, or the fingerprint.\n        ...options?.extraAttributes,\n        'command.name': name,\n        'command.duration_ms': durationMs,\n        'command.success': success,\n        'cli.version': getVersion(),\n        ...(this.distinctId ? { 'workos.user_id': this.distinctId } : {}),\n        ...(errorFields\n          ? {\n              'command.error_type': errorFields.type,\n              'command.error_message': errorFields.message,\n            }\n          : {}),\n        ...(options?.flags?.length ? { 'command.flags': options.flags.join(',') } : {}),\n        ...(options?.reason ? { 'termination.reason': options.reason } : {}),\n        ...(options?.errorCode ? { 'error.code': options.errorCode } : {}),\n        ...(options?.apiContext?.status !== undefined ? { 'api.status': options.apiContext.status } : {}),\n        ...(options?.apiContext?.code ? { 'api.code': options.apiContext.code } : {}),\n        ...(options?.apiContext?.resource ? { 'api.resource': options.apiContext.resource } : {}),\n        ...this.getEnvFingerprint(),\n      },\n    };\n\n    telemetryClient.queueEvent(event);\n  }\n\n  captureUnhandledCrash(error: Error, options?: { command?: string; version?: string }) {\n    if (!this.isEnabled()) return;\n\n    const { type, message } = this.extractErrorFields(error);\n\n    const event: CrashEvent = {\n      type: 'crash',\n      sessionId: this.sessionId,\n      timestamp: new Date().toISOString(),\n      attributes: {\n        'crash.error_type': type,\n        'crash.error_message': message,\n        'crash.stack': sanitizeStack(error.stack),\n        ...(options?.command ? { 'crash.command': options.command } : {}),\n        'cli.version': options?.version ?? getVersion(),\n        ...(this.distinctId ? { 'workos.user_id': this.distinctId } : {}),\n        ...this.getEnvFingerprint(),\n      },\n    };\n\n    telemetryClient.queueEvent(event);\n  }\n\n  async shutdown(status: 'success' | 'error' | 'cancelled') {\n    if (!this.isEnabled()) return;\n\n    const duration = Date.now() - this.sessionStartTime.getTime();\n\n    // Filter out null/undefined tags\n    const extraAttributes = Object.fromEntries(Object.entries(this.tags).filter(([, v]) => v != null)) as Record<\n      string,\n      string | number | boolean\n    >;\n\n    const envFingerprint = this.getEnvFingerprint();\n\n    const event: SessionEndEvent = {\n      type: 'session.end',\n      sessionId: this.sessionId,\n      timestamp: new Date().toISOString(),\n      attributes: {\n        'installer.outcome': status,\n        'installer.duration_ms': duration,\n        'installer.agent.iterations': this.agentIterations,\n        'installer.agent.tokens.input': this.totalInputTokens,\n        'installer.agent.tokens.output': this.totalOutputTokens,\n        ...envFingerprint,\n        ...(this.mode ? { 'installer.mode': this.mode } : {}),\n        ...extraAttributes,\n      },\n    };\n\n    telemetryClient.queueEvent(event);\n    await telemetryClient.flush();\n  }\n}\n\nexport const analytics = new Analytics();\n"]}

package/dist/utils/box.d.ts

@@ -1,33 +1,9 @@
-import type chalk from 'chalk';
 /**
- * Word-wrap a string to a maximum visible width, preserving ANSI color.
+ * Flat, gutterless notice to stderr — the de-boxed startup/notice output.
  *
- * chalk emits self-closing color spans (e.g. `\x1b[36m…\x1b[39m`), so each
- * colored fragment is atomic: we tokenize the input into whole colored spans
- * and plain words, then greedily pack tokens into lines measured by their
- * VISIBLE width. Because every token carries its own open+close codes, color
- * never bleeds across a line break onto the border or padding.
- *
- * A single token wider than `maxWidth` (rare — only a very narrow terminal vs.
- * a long unbroken word) overflows its own line rather than being split mid-span.
- * Such an overflow can push the rendered box border past the terminal width;
- * acceptable at standard widths. Note that a colored command produced by
- * `formatWorkOSCommand` can be long (e.g. `npx workos@latest telemetry opt-out`)
- * and stays a single unbreakable token by design.
- *
- * Limitation: a colored span is grouped atomically only when it is a single SGR
- * layer (one open code + one close code, as `chalk.cyan('…')` emits). Stacked
- * styles such as bold+color (`\x1b[1m\x1b[36m…\x1b[39m\x1b[22m`) or two adjacent
- * spans with no separating space are not guaranteed to stay on one line and may
- * leave a reset code mid-line. All current callers use single-color spans only.
- */
-export declare function wrapAnsiAware(input: string, maxWidth: number): string[];
-/**
- * Render a bordered box to stderr, wrapping to the terminal width.
- *
- * When the content fits on one line it renders exactly as a single-line box
- * (the historical behavior). When it would overflow the terminal, the content
- * is word-wrapped (ANSI-aware) and the box grows to multiple lines so the
- * border never breaks on a narrow terminal.
+ * Callers pass already-styled lines; this indents them two spaces and frames
+ * them with a single blank line above and below so the notice reads as its own
+ * beat without a border. This is the only notice primitive: the CLI no longer
+ * draws bordered boxes for startup notices (telemetry, unclaimed env, provision).
  */
-export declare function renderStderrBox(inner: string, color: typeof chalk.yellow | typeof chalk.green): void;
+export declare function renderStderrNotice(...lines: string[]): void;

package/dist/utils/box.js

@@ -1,102 +1,15 @@
-import { stripAnsii } from './string.js';
-/** Visible (printable) width of a string, ignoring ANSI escape sequences. */
-function visibleWidth(str) {
-    return stripAnsii(str).length;
-}
-/** Terminal width for stderr output, falling back to stdout then 80 columns. */
-function terminalWidth() {
-    return process.stderr.columns || process.stdout.columns || 80;
-}
-/**
- * Word-wrap a string to a maximum visible width, preserving ANSI color.
- *
- * chalk emits self-closing color spans (e.g. `\x1b[36m…\x1b[39m`), so each
- * colored fragment is atomic: we tokenize the input into whole colored spans
- * and plain words, then greedily pack tokens into lines measured by their
- * VISIBLE width. Because every token carries its own open+close codes, color
- * never bleeds across a line break onto the border or padding.
- *
- * A single token wider than `maxWidth` (rare — only a very narrow terminal vs.
- * a long unbroken word) overflows its own line rather than being split mid-span.
- * Such an overflow can push the rendered box border past the terminal width;
- * acceptable at standard widths. Note that a colored command produced by
- * `formatWorkOSCommand` can be long (e.g. `npx workos@latest telemetry opt-out`)
- * and stays a single unbreakable token by design.
- *
- * Limitation: a colored span is grouped atomically only when it is a single SGR
- * layer (one open code + one close code, as `chalk.cyan('…')` emits). Stacked
- * styles such as bold+color (`\x1b[1m\x1b[36m…\x1b[39m\x1b[22m`) or two adjacent
- * spans with no separating space are not guaranteed to stay on one line and may
- * leave a reset code mid-line. All current callers use single-color spans only.
- */
-export function wrapAnsiAware(input, maxWidth) {
-    // A token is either: a full SGR-wrapped span (open code, content that may
-    // contain spaces, close code), a run of non-space/non-escape characters
-    // (a plain word), or a lone escape. Whitespace between tokens is dropped and
-    // re-inserted as single separating spaces.
-    const tokenRe = /\x1b\[[0-9;]*m[^\x1b]*?\x1b\[[0-9;]*m|[^\s\x1b]+|\x1b\[[0-9;]*m/g;
-    const tokens = input.match(tokenRe) ?? [];
-    const lines = [];
-    let line = '';
-    let lineWidth = 0;
-    for (const token of tokens) {
-        const tokenWidth = visibleWidth(token);
-        if (lineWidth === 0) {
-            line = token;
-            lineWidth = tokenWidth;
-        }
-        else if (lineWidth + 1 + tokenWidth <= maxWidth) {
-            line += ` ${token}`;
-            lineWidth += 1 + tokenWidth;
-        }
-        else {
-            lines.push(line);
-            line = token;
-            lineWidth = tokenWidth;
-        }
-    }
-    if (line)
-        lines.push(line);
-    return lines.length > 0 ? lines : [''];
-}
 /**
- * Render a bordered box to stderr, wrapping to the terminal width.
+ * Flat, gutterless notice to stderr — the de-boxed startup/notice output.
  *
- * When the content fits on one line it renders exactly as a single-line box
- * (the historical behavior). When it would overflow the terminal, the content
- * is word-wrapped (ANSI-aware) and the box grows to multiple lines so the
- * border never breaks on a narrow terminal.
+ * Callers pass already-styled lines; this indents them two spaces and frames
+ * them with a single blank line above and below so the notice reads as its own
+ * beat without a border. This is the only notice primitive: the CLI no longer
+ * draws bordered boxes for startup notices (telemetry, unclaimed env, provision).
  */
-export function renderStderrBox(inner, color) {
-    const cols = terminalWidth();
-    const plainLen = visibleWidth(inner);
-    // Fast path: content (including its own padding spaces) fits within the
-    // terminal. Render the single-line box byte-for-byte as before.
-    if (plainLen <= cols - 4) {
-        const border = '─'.repeat(plainLen);
-        console.error('');
-        console.error(color(`  ┌${border}┐`));
-        console.error(color('  │') + inner + color('│'));
-        console.error(color(`  └${border}┘`));
-        console.error('');
-        return;
-    }
-    // Wrap path: trim the caller's outer padding, wrap to the available width,
-    // then re-pad each line to a uniform inner width with one space of padding
-    // on each side. Layout per line: "  │ " + text + " │" = text + 6 columns.
-    const content = inner.replace(/^[ \t]+/, '').replace(/[ \t]+$/, '');
-    const maxTextWidth = Math.max(1, cols - 6);
-    const wrapped = wrapAnsiAware(content, maxTextWidth);
-    // Snug the box to the longest wrapped line rather than the full terminal.
-    const textWidth = Math.max(...wrapped.map(visibleWidth));
-    const border = '─'.repeat(textWidth + 2);
+export function renderStderrNotice(...lines) {
     console.error('');
-    console.error(color(`  ┌${border}┐`));
-    for (const ln of wrapped) {
-        const pad = ' '.repeat(Math.max(0, textWidth - visibleWidth(ln)));
-        console.error(`${color('  │')} ${ln}${pad} ${color('│')}`);
-    }
-    console.error(color(`  └${border}┘`));
+    for (const ln of lines)
+        console.error(`  ${ln}`);
     console.error('');
 }
 //# sourceMappingURL=box.js.map

package/dist/utils/box.js.map

@@ -1 +1 @@
-{"version":3,"file":"box.js","sourceRoot":"","sources":["../../src/utils/box.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,6EAA6E;AAC7E,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;AAChC,CAAC;AAED,gFAAgF;AAChF,SAAS,aAAa;IACpB,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa,EAAE,QAAgB;IAC3D,0EAA0E;IAC1E,wEAAwE;IACxE,6EAA6E;IAC7E,2CAA2C;IAC3C,MAAM,OAAO,GAAG,kEAAkE,CAAC;IACnF,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IAE1C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;YACpB,IAAI,GAAG,KAAK,CAAC;YACb,SAAS,GAAG,UAAU,CAAC;QACzB,CAAC;aAAM,IAAI,SAAS,GAAG,CAAC,GAAG,UAAU,IAAI,QAAQ,EAAE,CAAC;YAClD,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;YACpB,SAAS,IAAI,CAAC,GAAG,UAAU,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,IAAI,GAAG,KAAK,CAAC;YACb,SAAS,GAAG,UAAU,CAAC;QACzB,CAAC;IACH,CAAC;IACD,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,KAA+C;IAC5F,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAErC,wEAAwE;IACxE,gEAAgE;IAChE,IAAI,QAAQ,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC;QACtC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACjD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC;QACtC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO;IACT,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACpE,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAErD,0EAA0E;IAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAEzC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC;IACtC,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAClE,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC;IACtC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC","sourcesContent":["import type chalk from 'chalk';\nimport { stripAnsii } from './string.js';\n\n/** Visible (printable) width of a string, ignoring ANSI escape sequences. */\nfunction visibleWidth(str: string): number {\n  return stripAnsii(str).length;\n}\n\n/** Terminal width for stderr output, falling back to stdout then 80 columns. */\nfunction terminalWidth(): number {\n  return process.stderr.columns || process.stdout.columns || 80;\n}\n\n/**\n * Word-wrap a string to a maximum visible width, preserving ANSI color.\n *\n * chalk emits self-closing color spans (e.g. `\\x1b[36m…\\x1b[39m`), so each\n * colored fragment is atomic: we tokenize the input into whole colored spans\n * and plain words, then greedily pack tokens into lines measured by their\n * VISIBLE width. Because every token carries its own open+close codes, color\n * never bleeds across a line break onto the border or padding.\n *\n * A single token wider than `maxWidth` (rare — only a very narrow terminal vs.\n * a long unbroken word) overflows its own line rather than being split mid-span.\n * Such an overflow can push the rendered box border past the terminal width;\n * acceptable at standard widths. Note that a colored command produced by\n * `formatWorkOSCommand` can be long (e.g. `npx workos@latest telemetry opt-out`)\n * and stays a single unbreakable token by design.\n *\n * Limitation: a colored span is grouped atomically only when it is a single SGR\n * layer (one open code + one close code, as `chalk.cyan('…')` emits). Stacked\n * styles such as bold+color (`\\x1b[1m\\x1b[36m…\\x1b[39m\\x1b[22m`) or two adjacent\n * spans with no separating space are not guaranteed to stay on one line and may\n * leave a reset code mid-line. All current callers use single-color spans only.\n */\nexport function wrapAnsiAware(input: string, maxWidth: number): string[] {\n  // A token is either: a full SGR-wrapped span (open code, content that may\n  // contain spaces, close code), a run of non-space/non-escape characters\n  // (a plain word), or a lone escape. Whitespace between tokens is dropped and\n  // re-inserted as single separating spaces.\n  const tokenRe = /\\x1b\\[[0-9;]*m[^\\x1b]*?\\x1b\\[[0-9;]*m|[^\\s\\x1b]+|\\x1b\\[[0-9;]*m/g;\n  const tokens = input.match(tokenRe) ?? [];\n\n  const lines: string[] = [];\n  let line = '';\n  let lineWidth = 0;\n\n  for (const token of tokens) {\n    const tokenWidth = visibleWidth(token);\n    if (lineWidth === 0) {\n      line = token;\n      lineWidth = tokenWidth;\n    } else if (lineWidth + 1 + tokenWidth <= maxWidth) {\n      line += ` ${token}`;\n      lineWidth += 1 + tokenWidth;\n    } else {\n      lines.push(line);\n      line = token;\n      lineWidth = tokenWidth;\n    }\n  }\n  if (line) lines.push(line);\n  return lines.length > 0 ? lines : [''];\n}\n\n/**\n * Render a bordered box to stderr, wrapping to the terminal width.\n *\n * When the content fits on one line it renders exactly as a single-line box\n * (the historical behavior). When it would overflow the terminal, the content\n * is word-wrapped (ANSI-aware) and the box grows to multiple lines so the\n * border never breaks on a narrow terminal.\n */\nexport function renderStderrBox(inner: string, color: typeof chalk.yellow | typeof chalk.green): void {\n  const cols = terminalWidth();\n  const plainLen = visibleWidth(inner);\n\n  // Fast path: content (including its own padding spaces) fits within the\n  // terminal. Render the single-line box byte-for-byte as before.\n  if (plainLen <= cols - 4) {\n    const border = '─'.repeat(plainLen);\n    console.error('');\n    console.error(color(`  ┌${border}┐`));\n    console.error(color('  │') + inner + color('│'));\n    console.error(color(`  └${border}┘`));\n    console.error('');\n    return;\n  }\n\n  // Wrap path: trim the caller's outer padding, wrap to the available width,\n  // then re-pad each line to a uniform inner width with one space of padding\n  // on each side. Layout per line: \"  │ \" + text + \" │\" = text + 6 columns.\n  const content = inner.replace(/^[ \\t]+/, '').replace(/[ \\t]+$/, '');\n  const maxTextWidth = Math.max(1, cols - 6);\n  const wrapped = wrapAnsiAware(content, maxTextWidth);\n\n  // Snug the box to the longest wrapped line rather than the full terminal.\n  const textWidth = Math.max(...wrapped.map(visibleWidth));\n  const border = '─'.repeat(textWidth + 2);\n\n  console.error('');\n  console.error(color(`  ┌${border}┐`));\n  for (const ln of wrapped) {\n    const pad = ' '.repeat(Math.max(0, textWidth - visibleWidth(ln)));\n    console.error(`${color('  │')} ${ln}${pad} ${color('│')}`);\n  }\n  console.error(color(`  └${border}┘`));\n  console.error('');\n}\n"]}
+{"version":3,"file":"box.js","sourceRoot":"","sources":["../../src/utils/box.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAG,KAAe;IACnD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClB,KAAK,MAAM,EAAE,IAAI,KAAK;QAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC","sourcesContent":["/**\n * Flat, gutterless notice to stderr — the de-boxed startup/notice output.\n *\n * Callers pass already-styled lines; this indents them two spaces and frames\n * them with a single blank line above and below so the notice reads as its own\n * beat without a border. This is the only notice primitive: the CLI no longer\n * draws bordered boxes for startup notices (telemetry, unclaimed env, provision).\n */\nexport function renderStderrNotice(...lines: string[]): void {\n  console.error('');\n  for (const ln of lines) console.error(`  ${ln}`);\n  console.error('');\n}\n"]}

package/dist/utils/cli-symbols.d.ts

@@ -4,10 +4,22 @@ export declare const symbols: {
     readonly warning: "!";
     readonly info: "ℹ" | "i";
     readonly arrow: "→" | "->";
-    readonly bullet: "*" | "•";
-    readonly progressFilled: "#" | "▓";
+    readonly bullet: "•" | "*";
+    readonly progressFilled: "▓" | "#";
     readonly progressEmpty: "-" | "░";
 };
+/**
+ * WorkOS brand palette (hex). Single source shared by the `ui` facade and the
+ * install summary box so the flat CLI output and the summary render identical
+ * brand colors. chalk auto-disables color when `chalk.level === 0` (JSON mode).
+ */
+export declare const palette: {
+    readonly accent: import("chalk").ChalkInstance;
+    readonly green: import("chalk").ChalkInstance;
+    readonly red: import("chalk").ChalkInstance;
+    readonly yellow: import("chalk").ChalkInstance;
+    readonly cyan: import("chalk").ChalkInstance;
+};
 /**
  * Pre-styled output functions for consistent CLI formatting.
  * Uses chalk for coloring with appropriate symbols.

package/dist/utils/cli-symbols.js

@@ -17,6 +17,18 @@ export const symbols = {
     progressFilled: unicode ? '▓' : '#',
     progressEmpty: unicode ? '░' : '-',
 };
+/**
+ * WorkOS brand palette (hex). Single source shared by the `ui` facade and the
+ * install summary box so the flat CLI output and the summary render identical
+ * brand colors. chalk auto-disables color when `chalk.level === 0` (JSON mode).
+ */
+export const palette = {
+    accent: chalk.hex('#6363f1'), // WorkOS indigo
+    green: chalk.hex('#34d399'),
+    red: chalk.hex('#f87171'),
+    yellow: chalk.hex('#fbbf24'),
+    cyan: chalk.hex('#7dd3fc'), // values, paths, URLs
+};
 /**
  * Pre-styled output functions for consistent CLI formatting.
  * Uses chalk for coloring with appropriate symbols.

package/dist/utils/cli-symbols.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-symbols.js","sourceRoot":"","sources":["../../src/utils/cli-symbols.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;AAErC,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;IAC5B,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;IAC1B,OAAO,EAAE,GAAG;IACZ,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;IACzB,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;IAC3B,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;IAC3B,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;IACnC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;CAC1B,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,mCAAmC;IACnC,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;IAEpE,yBAAyB;IACzB,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;IAE9D,kCAAkC;IAClC,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;IAErE,oBAAoB;IACpB,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;IAE5D,6BAA6B;IAC7B,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;IAEhE,wCAAwC;IACxC,KAAK,EAAE,CAAC,KAAa,EAAE,KAAa,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,EAAE;IAEvE,+CAA+C;IAC/C,KAAK,EAAE,CAAC,GAAW,EAAE,KAAa,EAAE,IAAY,EAAE,EAAE;QAClD,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;QACxD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IAC5D,CAAC;IAED,6BAA6B;IAC7B,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE;CAC/C,CAAC","sourcesContent":["/**\n * Centralized symbol and color definitions for CLI output.\n *\n * Provides consistent visual vocabulary across all CLI handlers.\n * Supports both Unicode and ASCII fallback for terminal compatibility.\n */\nimport chalk from 'chalk';\nimport { isUnicodeSupported } from './vendor/is-unicorn-supported.js';\n\nconst unicode = isUnicodeSupported();\n\nexport const symbols = {\n  success: unicode ? '✓' : '+',\n  error: unicode ? '✗' : 'x',\n  warning: '!',\n  info: unicode ? 'ℹ' : 'i',\n  arrow: unicode ? '→' : '->',\n  bullet: unicode ? '•' : '*',\n  progressFilled: unicode ? '▓' : '#',\n  progressEmpty: unicode ? '░' : '-',\n} as const;\n\n/**\n * Pre-styled output functions for consistent CLI formatting.\n * Uses chalk for coloring with appropriate symbols.\n */\nexport const styled = {\n  /** Green checkmark with message */\n  success: (text: string) => chalk.green(`${symbols.success} ${text}`),\n\n  /** Red X with message */\n  error: (text: string) => chalk.red(`${symbols.error} ${text}`),\n\n  /** Yellow warning with message */\n  warning: (text: string) => chalk.yellow(`${symbols.warning} ${text}`),\n\n  /** Dim info text */\n  info: (text: string) => chalk.dim(`${symbols.info} ${text}`),\n\n  /** Cyan arrow for actions */\n  action: (text: string) => chalk.cyan(`${symbols.arrow} ${text}`),\n\n  /** Label with value, label is dimmed */\n  label: (label: string, value: string) => `${chalk.dim(label)} ${value}`,\n\n  /** Phase indicator with visual progress bar */\n  phase: (num: number, total: number, name: string) => {\n    const filled = symbols.progressFilled.repeat(num);\n    const empty = symbols.progressEmpty.repeat(total - num);\n    return `${chalk.cyan(filled)}${chalk.dim(empty)} ${name}`;\n  },\n\n  /** Bullet point for lists */\n  bullet: (text: string) => `  ${symbols.bullet} ${text}`,\n} as const;\n"]}
+{"version":3,"file":"cli-symbols.js","sourceRoot":"","sources":["../../src/utils/cli-symbols.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;AAErC,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;IAC5B,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;IAC1B,OAAO,EAAE,GAAG;IACZ,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;IACzB,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;IAC3B,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;IAC3B,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;IACnC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;CAC1B,CAAC;AAEX;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,gBAAgB;IAC9C,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;IAC3B,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;IACzB,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;IAC5B,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,sBAAsB;CAC1C,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,mCAAmC;IACnC,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;IAEpE,yBAAyB;IACzB,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;IAE9D,kCAAkC;IAClC,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;IAErE,oBAAoB;IACpB,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;IAE5D,6BAA6B;IAC7B,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;IAEhE,wCAAwC;IACxC,KAAK,EAAE,CAAC,KAAa,EAAE,KAAa,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,EAAE;IAEvE,+CAA+C;IAC/C,KAAK,EAAE,CAAC,GAAW,EAAE,KAAa,EAAE,IAAY,EAAE,EAAE;QAClD,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;QACxD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IAC5D,CAAC;IAED,6BAA6B;IAC7B,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE;CAC/C,CAAC","sourcesContent":["/**\n * Centralized symbol and color definitions for CLI output.\n *\n * Provides consistent visual vocabulary across all CLI handlers.\n * Supports both Unicode and ASCII fallback for terminal compatibility.\n */\nimport chalk from 'chalk';\nimport { isUnicodeSupported } from './vendor/is-unicorn-supported.js';\n\nconst unicode = isUnicodeSupported();\n\nexport const symbols = {\n  success: unicode ? '✓' : '+',\n  error: unicode ? '✗' : 'x',\n  warning: '!',\n  info: unicode ? 'ℹ' : 'i',\n  arrow: unicode ? '→' : '->',\n  bullet: unicode ? '•' : '*',\n  progressFilled: unicode ? '▓' : '#',\n  progressEmpty: unicode ? '░' : '-',\n} as const;\n\n/**\n * WorkOS brand palette (hex). Single source shared by the `ui` facade and the\n * install summary box so the flat CLI output and the summary render identical\n * brand colors. chalk auto-disables color when `chalk.level === 0` (JSON mode).\n */\nexport const palette = {\n  accent: chalk.hex('#6363f1'), // WorkOS indigo\n  green: chalk.hex('#34d399'),\n  red: chalk.hex('#f87171'),\n  yellow: chalk.hex('#fbbf24'),\n  cyan: chalk.hex('#7dd3fc'), // values, paths, URLs\n} as const;\n\n/**\n * Pre-styled output functions for consistent CLI formatting.\n * Uses chalk for coloring with appropriate symbols.\n */\nexport const styled = {\n  /** Green checkmark with message */\n  success: (text: string) => chalk.green(`${symbols.success} ${text}`),\n\n  /** Red X with message */\n  error: (text: string) => chalk.red(`${symbols.error} ${text}`),\n\n  /** Yellow warning with message */\n  warning: (text: string) => chalk.yellow(`${symbols.warning} ${text}`),\n\n  /** Dim info text */\n  info: (text: string) => chalk.dim(`${symbols.info} ${text}`),\n\n  /** Cyan arrow for actions */\n  action: (text: string) => chalk.cyan(`${symbols.arrow} ${text}`),\n\n  /** Label with value, label is dimmed */\n  label: (label: string, value: string) => `${chalk.dim(label)} ${value}`,\n\n  /** Phase indicator with visual progress bar */\n  phase: (num: number, total: number, name: string) => {\n    const filled = symbols.progressFilled.repeat(num);\n    const empty = symbols.progressEmpty.repeat(total - num);\n    return `${chalk.cyan(filled)}${chalk.dim(empty)} ${name}`;\n  },\n\n  /** Bullet point for lists */\n  bullet: (text: string) => `  ${symbols.bullet} ${text}`,\n} as const;\n"]}

package/dist/utils/debug.js

@@ -4,7 +4,7 @@ import { homedir } from 'os';
 import chalk from 'chalk';
 import { prepareMessage } from './logging.js';
 import { redactCredentials } from './redact.js';
-import clack from './clack.js';
+import ui from './ui.js';
 import { isJsonMode } from './output.js';
 let debugEnabled = false;
 let sessionLogPath = null;
@@ -61,7 +61,7 @@ function writeLog(level, emoji, args) {
     // Write to console if debug enabled
     if (debugEnabled && !isJsonMode()) {
         const color = level === 'ERROR' ? chalk.red : level === 'WARN' ? chalk.yellow : chalk.dim;
-        clack.log.info(color(`${emoji} ${msg}`));
+        ui.log.info(color(`${emoji} ${msg}`));
     }
     // Write to log file
     if (sessionLogPath) {
@@ -94,7 +94,7 @@ export function debug(...args) {
     if (!isDebugEnabled())
         return;
     const msg = args.map((a) => prepareMessage(a)).join(' ');
-    clack.log.info(chalk.dim(msg));
+    ui.log.info(chalk.dim(msg));
 }
 export function isDebugEnabled() {
     return debugEnabled && !isJsonMode();

package/dist/utils/debug.js.map

@@ -1 +1 @@
-{"version":3,"file":"debug.js","sourceRoot":"","sources":["../../src/utils/debug.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACpF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,IAAI,YAAY,GAAG,KAAK,CAAC;AACzB,IAAI,cAAc,GAAkB,IAAI,CAAC;AAEzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AACnD,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,SAAS,YAAY;IACnB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC;aAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aAC5D,IAAI,EAAE,CAAC;QAEV,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,cAAc,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;QACrC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,SAAS,MAAM,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mCAAmC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;QACnH,cAAc,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAgC,EAAE,KAAa,EAAE,IAAe;IAChF,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvG,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEjE,oCAAoC;IACpC,IAAI,YAAY,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QAC1F,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,oBAAoB;IACpB,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,cAAc,CAAC,cAAc,EAAE,IAAI,SAAS,KAAK,KAAK,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAG,IAAe;IACxC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAG,IAAe;IACxC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAG,IAAe;IAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAG,IAAe;IACzC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,GAAG,IAAe;IACtC,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,YAAY,IAAI,CAAC,UAAU,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC","sourcesContent":["import { appendFileSync, existsSync, mkdirSync, readdirSync, unlinkSync } from 'fs';\nimport { join } from 'path';\nimport { homedir } from 'os';\nimport chalk from 'chalk';\nimport { prepareMessage } from './logging.js';\nimport { redactCredentials } from './redact.js';\nimport clack from './clack.js';\nimport { isJsonMode } from './output.js';\n\nlet debugEnabled = false;\nlet sessionLogPath: string | null = null;\n\nconst LOG_DIR = join(homedir(), '.workos', 'logs');\nconst MAX_LOG_FILES = 10;\n\nfunction ensureLogDir(): string {\n  if (!existsSync(LOG_DIR)) {\n    mkdirSync(LOG_DIR, { recursive: true });\n  }\n  return LOG_DIR;\n}\n\nfunction getSafeTimestamp(): string {\n  return new Date().toISOString().replace(/:/g, '-');\n}\n\nfunction rotateLogFiles(): void {\n  try {\n    const dir = ensureLogDir();\n    const files = readdirSync(dir)\n      .filter((f) => f.startsWith('workos-') && f.endsWith('.log'))\n      .sort();\n\n    const toDelete = files.slice(0, Math.max(0, files.length - MAX_LOG_FILES + 1));\n    for (const file of toDelete) {\n      try {\n        unlinkSync(join(dir, file));\n      } catch {\n        // Ignore deletion failures\n      }\n    }\n  } catch {\n    // Ignore rotation failures\n  }\n}\n\nexport function initLogFile(): void {\n  try {\n    rotateLogFiles();\n    const dir = ensureLogDir();\n    const timestamp = getSafeTimestamp();\n    sessionLogPath = join(dir, `workos-${timestamp}.log`);\n\n    const header = `${'='.repeat(60)}\\nWorkOS AuthKit Installer Run: ${new Date().toISOString()}\\n${'='.repeat(60)}\\n`;\n    appendFileSync(sessionLogPath, header);\n  } catch {\n    sessionLogPath = null;\n  }\n}\n\nexport function getLogFilePath(): string | null {\n  return sessionLogPath;\n}\n\nfunction writeLog(level: 'INFO' | 'WARN' | 'ERROR', emoji: string, args: unknown[]): string {\n  const redactedArgs = args.map((a) => (typeof a === 'object' && a !== null ? redactCredentials(a) : a));\n  const msg = redactedArgs.map((a) => prepareMessage(a)).join(' ');\n\n  // Write to console if debug enabled\n  if (debugEnabled && !isJsonMode()) {\n    const color = level === 'ERROR' ? chalk.red : level === 'WARN' ? chalk.yellow : chalk.dim;\n    clack.log.info(color(`${emoji} ${msg}`));\n  }\n\n  // Write to log file\n  if (sessionLogPath) {\n    try {\n      const timestamp = new Date().toISOString();\n      appendFileSync(sessionLogPath, `[${timestamp}] ${emoji} ${level}: ${msg}\\n`);\n    } catch {\n      // Ignore write failures\n    }\n  }\n\n  return msg;\n}\n\nexport function logInfo(...args: unknown[]): void {\n  writeLog('INFO', 'ℹ️ ', args);\n}\n\nexport function logWarn(...args: unknown[]): void {\n  writeLog('WARN', '⚠️ ', args);\n}\n\nexport function logVisibleWarn(...args: unknown[]): void {\n  const msg = writeLog('WARN', '⚠️ ', args);\n  if (!debugEnabled && !isJsonMode()) {\n    console.error(chalk.yellow(`⚠️  ${msg}`));\n  }\n}\n\nexport function logError(...args: unknown[]): void {\n  writeLog('ERROR', '❌', args);\n}\n\nexport function debug(...args: unknown[]): void {\n  if (!isDebugEnabled()) return;\n  const msg = args.map((a) => prepareMessage(a)).join(' ');\n  clack.log.info(chalk.dim(msg));\n}\n\nexport function isDebugEnabled(): boolean {\n  return debugEnabled && !isJsonMode();\n}\n\nexport function enableDebugLogs(): void {\n  debugEnabled = true;\n}\n"]}
+{"version":3,"file":"debug.js","sourceRoot":"","sources":["../../src/utils/debug.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACpF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,IAAI,YAAY,GAAG,KAAK,CAAC;AACzB,IAAI,cAAc,GAAkB,IAAI,CAAC;AAEzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AACnD,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,SAAS,YAAY;IACnB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC;aAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aAC5D,IAAI,EAAE,CAAC;QAEV,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,cAAc,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;QACrC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,SAAS,MAAM,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mCAAmC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;QACnH,cAAc,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAgC,EAAE,KAAa,EAAE,IAAe;IAChF,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvG,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEjE,oCAAoC;IACpC,IAAI,YAAY,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QAC1F,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,oBAAoB;IACpB,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,cAAc,CAAC,cAAc,EAAE,IAAI,SAAS,KAAK,KAAK,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAG,IAAe;IACxC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAG,IAAe;IACxC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAG,IAAe;IAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAG,IAAe;IACzC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,GAAG,IAAe;IACtC,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,YAAY,IAAI,CAAC,UAAU,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC","sourcesContent":["import { appendFileSync, existsSync, mkdirSync, readdirSync, unlinkSync } from 'fs';\nimport { join } from 'path';\nimport { homedir } from 'os';\nimport chalk from 'chalk';\nimport { prepareMessage } from './logging.js';\nimport { redactCredentials } from './redact.js';\nimport ui from './ui.js';\nimport { isJsonMode } from './output.js';\n\nlet debugEnabled = false;\nlet sessionLogPath: string | null = null;\n\nconst LOG_DIR = join(homedir(), '.workos', 'logs');\nconst MAX_LOG_FILES = 10;\n\nfunction ensureLogDir(): string {\n  if (!existsSync(LOG_DIR)) {\n    mkdirSync(LOG_DIR, { recursive: true });\n  }\n  return LOG_DIR;\n}\n\nfunction getSafeTimestamp(): string {\n  return new Date().toISOString().replace(/:/g, '-');\n}\n\nfunction rotateLogFiles(): void {\n  try {\n    const dir = ensureLogDir();\n    const files = readdirSync(dir)\n      .filter((f) => f.startsWith('workos-') && f.endsWith('.log'))\n      .sort();\n\n    const toDelete = files.slice(0, Math.max(0, files.length - MAX_LOG_FILES + 1));\n    for (const file of toDelete) {\n      try {\n        unlinkSync(join(dir, file));\n      } catch {\n        // Ignore deletion failures\n      }\n    }\n  } catch {\n    // Ignore rotation failures\n  }\n}\n\nexport function initLogFile(): void {\n  try {\n    rotateLogFiles();\n    const dir = ensureLogDir();\n    const timestamp = getSafeTimestamp();\n    sessionLogPath = join(dir, `workos-${timestamp}.log`);\n\n    const header = `${'='.repeat(60)}\\nWorkOS AuthKit Installer Run: ${new Date().toISOString()}\\n${'='.repeat(60)}\\n`;\n    appendFileSync(sessionLogPath, header);\n  } catch {\n    sessionLogPath = null;\n  }\n}\n\nexport function getLogFilePath(): string | null {\n  return sessionLogPath;\n}\n\nfunction writeLog(level: 'INFO' | 'WARN' | 'ERROR', emoji: string, args: unknown[]): string {\n  const redactedArgs = args.map((a) => (typeof a === 'object' && a !== null ? redactCredentials(a) : a));\n  const msg = redactedArgs.map((a) => prepareMessage(a)).join(' ');\n\n  // Write to console if debug enabled\n  if (debugEnabled && !isJsonMode()) {\n    const color = level === 'ERROR' ? chalk.red : level === 'WARN' ? chalk.yellow : chalk.dim;\n    ui.log.info(color(`${emoji} ${msg}`));\n  }\n\n  // Write to log file\n  if (sessionLogPath) {\n    try {\n      const timestamp = new Date().toISOString();\n      appendFileSync(sessionLogPath, `[${timestamp}] ${emoji} ${level}: ${msg}\\n`);\n    } catch {\n      // Ignore write failures\n    }\n  }\n\n  return msg;\n}\n\nexport function logInfo(...args: unknown[]): void {\n  writeLog('INFO', 'ℹ️ ', args);\n}\n\nexport function logWarn(...args: unknown[]): void {\n  writeLog('WARN', '⚠️ ', args);\n}\n\nexport function logVisibleWarn(...args: unknown[]): void {\n  const msg = writeLog('WARN', '⚠️ ', args);\n  if (!debugEnabled && !isJsonMode()) {\n    console.error(chalk.yellow(`⚠️  ${msg}`));\n  }\n}\n\nexport function logError(...args: unknown[]): void {\n  writeLog('ERROR', '❌', args);\n}\n\nexport function debug(...args: unknown[]): void {\n  if (!isDebugEnabled()) return;\n  const msg = args.map((a) => prepareMessage(a)).join(' ');\n  ui.log.info(chalk.dim(msg));\n}\n\nexport function isDebugEnabled(): boolean {\n  return debugEnabled && !isJsonMode();\n}\n\nexport function enableDebugLogs(): void {\n  debugEnabled = true;\n}\n"]}

package/dist/utils/environment.js

@@ -1,4 +1,4 @@
-import { getPackageDotJson } from './clack-utils.js';
+import { getPackageDotJson } from './ui-utils.js';
 import fg from 'fast-glob';
 import { isHumanMode } from './interaction-mode.js';
 /**

package/dist/utils/environment.js.map

@@ -1 +1 @@
-{"version":3,"file":"environment.js","sourceRoot":"","sources":["../../src/utils/environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,MAAM,WAAW,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B;IACzC,OAAO,CAAC,WAAW,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,MAAM,MAAM,GAAG,mBAAmB,CAAC;IACnC,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAyB;IAChE,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAErD,MAAM,IAAI,GAAG,EAAE,GAAG,WAAW,CAAC,YAAY,EAAE,GAAG,WAAW,CAAC,eAAe,EAAE,CAAC;IAC7E,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC;IAC3C,MAAM,UAAU,GAAG,KAAK,EAAE,QAAkB,EAAE,EAAE;QAC9C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,EAAE;YACjC,GAAG,EAAE,OAAO,CAAC,UAAU;YACvB,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,CAAC,oBAAoB,CAAC;SAC/B,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5B,CAAC,CAAC;IAEF,cAAc;IACd,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,uBAAuB;IACvB,IAAI,GAAG,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,CAAC;QACtG,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,4CAA4C;IAC5C,wHAAwH;IACxH,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,gBAAgB;IAChB,IAAI,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,iCAAiC;IACjC,IAAI,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,6BAA6B;IAC7B,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,YAAY;IACZ,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,iGAAiG;IACjG,OAAO,cAAc,CAAC;AACxB,CAAC","sourcesContent":["import { getPackageDotJson } from './clack-utils.js';\nimport type { InstallerOptions } from './types.js';\nimport fg from 'fast-glob';\nimport { isHumanMode } from './interaction-mode.js';\n\n/**\n * Compatibility wrapper for legacy call sites.\n *\n * Interaction mode now owns prompt/browser behavior. Keep this helper while\n * call sites migrate, but do not reimplement env/TTY detection here.\n */\nexport function isNonInteractiveEnvironment(): boolean {\n  return !isHumanMode();\n}\n\nexport function readEnvironment(): Record<string, unknown> {\n  const prefix = 'WORKOS_INSTALLER_';\n  const result: Record<string, unknown> = {};\n\n  for (const [key, value] of Object.entries(process.env)) {\n    if (key.startsWith(prefix)) {\n      const envKey = key.slice(prefix.length).toLowerCase();\n      result[envKey] = value;\n    }\n  }\n\n  return result;\n}\n\nexport async function detectEnvVarPrefix(options: InstallerOptions): Promise<string> {\n  const packageJson = await getPackageDotJson(options);\n\n  const deps = { ...packageJson.dependencies, ...packageJson.devDependencies };\n  const has = (name: string) => name in deps;\n  const hasAnyFile = async (patterns: string[]) => {\n    const matches = await fg(patterns, {\n      cwd: options.installDir,\n      absolute: false,\n      onlyFiles: true,\n      ignore: ['**/node_modules/**'],\n    });\n    return matches.length > 0;\n  };\n\n  // --- Next.js\n  if (has('next') || (await hasAnyFile(['**/next.config.{js,ts,mjs,cjs}']))) {\n    return 'NEXT_PUBLIC_';\n  }\n\n  // --- Create React App\n  if (has('react-scripts') || has('create-react-app') || (await hasAnyFile(['**/config-overrides.js']))) {\n    return 'REACT_APP_';\n  }\n\n  // --- Vite (vanilla, TanStack, Solid, etc.)\n  // Note: Vite does not need PUBLIC_ but we use it to follow the docs, to improve the chances of an LLM getting it right.\n  if (has('vite') || (await hasAnyFile(['**/vite.config.{js,ts,mjs,cjs}']))) {\n    return 'VITE_PUBLIC_';\n  }\n\n  // --- SvelteKit\n  if (has('@sveltejs/kit') || (await hasAnyFile(['**/svelte.config.{js,ts}']))) {\n    return 'PUBLIC_';\n  }\n\n  // --- TanStack Start (uses Vite)\n  if (has('@tanstack/start') || (await hasAnyFile(['**/tanstack.config.{js,ts}']))) {\n    return 'VITE_PUBLIC_';\n  }\n\n  // --- SolidStart (uses Vite)\n  if (has('solid-start') || (await hasAnyFile(['**/solid.config.{js,ts}']))) {\n    return 'VITE_PUBLIC_';\n  }\n\n  // --- Astro\n  if (has('astro') || (await hasAnyFile(['**/astro.config.{js,ts,mjs}']))) {\n    return 'PUBLIC_';\n  }\n\n  // We default to Vite if we can't detect a specific framework, since it's the most commonly used.\n  return 'VITE_PUBLIC_';\n}\n"]}
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../../src/utils/environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,EAAE,MAAM,WAAW,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B;IACzC,OAAO,CAAC,WAAW,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,MAAM,MAAM,GAAG,mBAAmB,CAAC;IACnC,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;YACtD,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAyB;IAChE,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAErD,MAAM,IAAI,GAAG,EAAE,GAAG,WAAW,CAAC,YAAY,EAAE,GAAG,WAAW,CAAC,eAAe,EAAE,CAAC;IAC7E,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,IAAI,IAAI,CAAC;IAC3C,MAAM,UAAU,GAAG,KAAK,EAAE,QAAkB,EAAE,EAAE;QAC9C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,EAAE;YACjC,GAAG,EAAE,OAAO,CAAC,UAAU;YACvB,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,CAAC,oBAAoB,CAAC;SAC/B,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5B,CAAC,CAAC;IAEF,cAAc;IACd,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,uBAAuB;IACvB,IAAI,GAAG,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,CAAC;QACtG,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,4CAA4C;IAC5C,wHAAwH;IACxH,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,gBAAgB;IAChB,IAAI,GAAG,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,iCAAiC;IACjC,IAAI,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,6BAA6B;IAC7B,IAAI,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,YAAY;IACZ,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,iGAAiG;IACjG,OAAO,cAAc,CAAC;AACxB,CAAC","sourcesContent":["import { getPackageDotJson } from './ui-utils.js';\nimport type { InstallerOptions } from './types.js';\nimport fg from 'fast-glob';\nimport { isHumanMode } from './interaction-mode.js';\n\n/**\n * Compatibility wrapper for legacy call sites.\n *\n * Interaction mode now owns prompt/browser behavior. Keep this helper while\n * call sites migrate, but do not reimplement env/TTY detection here.\n */\nexport function isNonInteractiveEnvironment(): boolean {\n  return !isHumanMode();\n}\n\nexport function readEnvironment(): Record<string, unknown> {\n  const prefix = 'WORKOS_INSTALLER_';\n  const result: Record<string, unknown> = {};\n\n  for (const [key, value] of Object.entries(process.env)) {\n    if (key.startsWith(prefix)) {\n      const envKey = key.slice(prefix.length).toLowerCase();\n      result[envKey] = value;\n    }\n  }\n\n  return result;\n}\n\nexport async function detectEnvVarPrefix(options: InstallerOptions): Promise<string> {\n  const packageJson = await getPackageDotJson(options);\n\n  const deps = { ...packageJson.dependencies, ...packageJson.devDependencies };\n  const has = (name: string) => name in deps;\n  const hasAnyFile = async (patterns: string[]) => {\n    const matches = await fg(patterns, {\n      cwd: options.installDir,\n      absolute: false,\n      onlyFiles: true,\n      ignore: ['**/node_modules/**'],\n    });\n    return matches.length > 0;\n  };\n\n  // --- Next.js\n  if (has('next') || (await hasAnyFile(['**/next.config.{js,ts,mjs,cjs}']))) {\n    return 'NEXT_PUBLIC_';\n  }\n\n  // --- Create React App\n  if (has('react-scripts') || has('create-react-app') || (await hasAnyFile(['**/config-overrides.js']))) {\n    return 'REACT_APP_';\n  }\n\n  // --- Vite (vanilla, TanStack, Solid, etc.)\n  // Note: Vite does not need PUBLIC_ but we use it to follow the docs, to improve the chances of an LLM getting it right.\n  if (has('vite') || (await hasAnyFile(['**/vite.config.{js,ts,mjs,cjs}']))) {\n    return 'VITE_PUBLIC_';\n  }\n\n  // --- SvelteKit\n  if (has('@sveltejs/kit') || (await hasAnyFile(['**/svelte.config.{js,ts}']))) {\n    return 'PUBLIC_';\n  }\n\n  // --- TanStack Start (uses Vite)\n  if (has('@tanstack/start') || (await hasAnyFile(['**/tanstack.config.{js,ts}']))) {\n    return 'VITE_PUBLIC_';\n  }\n\n  // --- SolidStart (uses Vite)\n  if (has('solid-start') || (await hasAnyFile(['**/solid.config.{js,ts}']))) {\n    return 'VITE_PUBLIC_';\n  }\n\n  // --- Astro\n  if (has('astro') || (await hasAnyFile(['**/astro.config.{js,ts,mjs}']))) {\n    return 'PUBLIC_';\n  }\n\n  // We default to Vite if we can't detect a specific framework, since it's the most commonly used.\n  return 'VITE_PUBLIC_';\n}\n"]}