workos 0.18.0 → 0.20.1

package/dist/doctor/checks/mcp.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../../src/doctor/checks/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGxD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,OAAO,GAAG,MAAM,gBAAgB,EAAE,CAAC;IACzC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAA8B,EAAE;QACvD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAsB,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC5F,uEAAuE;QACvE,wEAAwE;QACxE,0DAA0D;QAC1D,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,SAAS,EAAE,CAAC;YACzC,MAAM,GAAG,GAAG,MAAM,sBAAsB,EAAE,CAAC;YAC3C,MAAM,CAAC,aAAa,GAAG,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,cAAc,CAAC;QAChE,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CACH,CAAC;IAEF,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;AAC/C,CAAC","sourcesContent":["import { detectMcpClients, getCursorConfiguredUrl } from '../../lib/mcp-clients.js';\nimport { MCP_SERVER_URL } from '../../lib/constants.js';\nimport type { McpInfo, McpAgentMcpStatus } from '../types.js';\n\n/**\n * Report the WorkOS MCP server status across detected coding agents.\n *\n * Mirrors checkSkills: per-detected-agent loop, typed `*Info` return, null when\n * no agents are detected (so doctor renders no MCP section for users with no\n * coding agent installed). Report-only — never mutates config (`--fix` does not\n * touch MCP in this phase).\n *\n * Absent MCP is deliberately NOT an issue: the user may have declined the\n * offer. Only Cursor exposes a readable config, so URL drift (\"misconfigured\")\n * is detected for Cursor alone; issues.ts derives a warning from it. Per-agent\n * shell-outs carry the 10s timeout from the client library, keeping doctor fast.\n */\nexport async function checkMcp(): Promise<McpInfo | null> {\n  const clients = await detectMcpClients();\n  if (clients.length === 0) return null;\n\n  const agents = await Promise.all(\n    clients.map(async (client): Promise<McpAgentMcpStatus> => {\n      const installed = await client.isInstalled();\n      const status: McpAgentMcpStatus = { agent: client.displayName, available: true, installed };\n      // Cursor is the only client whose config we can read, so it's the only\n      // one we can flag for URL drift. A missing/unreadable URL (null) is not\n      // \"unexpected\" — only a present-but-different URL counts.\n      if (client.key === 'cursor' && installed) {\n        const url = await getCursorConfiguredUrl();\n        status.misconfigured = url !== null && url !== MCP_SERVER_URL;\n      }\n      return status;\n    }),\n  );\n\n  return { serverUrl: MCP_SERVER_URL, agents };\n}\n"]}

package/dist/doctor/checks/runtime.d.ts

@@ -1,2 +0,0 @@
-import type { DoctorOptions, RuntimeInfo } from '../types.js';
-export declare function checkRuntime(options: DoctorOptions): Promise<RuntimeInfo>;

package/dist/doctor/checks/runtime.js

@@ -1,20 +0,0 @@
-import { detectAllPackageManagers } from '../../utils/package-manager.js';
-import { execFileNoThrow } from '../../utils/exec-file.js';
-export async function checkRuntime(options) {
-    const nodeVersion = process.version;
-    const managers = detectAllPackageManagers(options);
-    const primaryManager = managers[0] ?? null;
-    let packageManagerVersion = null;
-    if (primaryManager) {
-        const result = await execFileNoThrow(primaryManager.name, ['--version']);
-        if (result.status === 0) {
-            packageManagerVersion = result.stdout.trim();
-        }
-    }
-    return {
-        nodeVersion,
-        packageManager: primaryManager?.label ?? null,
-        packageManagerVersion,
-    };
-}
-//# sourceMappingURL=runtime.js.map

package/dist/doctor/checks/runtime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../src/doctor/checks/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAG3D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAsB;IACvD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAEpC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAE3C,IAAI,qBAAqB,GAAkB,IAAI,CAAC;IAChD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,cAAc,EAAE,cAAc,EAAE,KAAK,IAAI,IAAI;QAC7C,qBAAqB;KACtB,CAAC;AACJ,CAAC","sourcesContent":["import { detectAllPackageManagers } from '../../utils/package-manager.js';\nimport { execFileNoThrow } from '../../utils/exec-file.js';\nimport type { DoctorOptions, RuntimeInfo } from '../types.js';\n\nexport async function checkRuntime(options: DoctorOptions): Promise<RuntimeInfo> {\n  const nodeVersion = process.version;\n\n  const managers = detectAllPackageManagers(options);\n  const primaryManager = managers[0] ?? null;\n\n  let packageManagerVersion: string | null = null;\n  if (primaryManager) {\n    const result = await execFileNoThrow(primaryManager.name, ['--version']);\n    if (result.status === 0) {\n      packageManagerVersion = result.stdout.trim();\n    }\n  }\n\n  return {\n    nodeVersion,\n    packageManager: primaryManager?.label ?? null,\n    packageManagerVersion,\n  };\n}\n"]}

package/dist/doctor/checks/sdk.d.ts

@@ -1,2 +0,0 @@
-import type { DoctorOptions, SdkInfo } from '../types.js';
-export declare function checkSdk(options: DoctorOptions): Promise<SdkInfo>;

package/dist/doctor/checks/sdk.js

@@ -1,192 +0,0 @@
-import { readFile, readdir } from 'node:fs/promises';
-import { join } from 'node:path';
-import { readPackageJson, hasPackageInstalled, getPackageVersion } from '../../utils/package-json.js';
-// AuthKit SDKs - check @workos/* scope first, then @workos-inc/*
-const SDK_PACKAGES = [
-    // @workos/* scope
-    '@workos/authkit-tanstack-react-start',
-    '@workos/authkit-sveltekit',
-    // @workos-inc/* scope
-    '@workos-inc/authkit-nextjs',
-    '@workos-inc/authkit-remix',
-    '@workos-inc/authkit-react-router',
-    '@workos-inc/authkit-react',
-    '@workos-inc/authkit-js',
-    '@workos-inc/node',
-    'workos', // very old legacy
-];
-const AUTHKIT_PACKAGES = new Set([
-    '@workos/authkit-tanstack-react-start',
-    '@workos/authkit-sveltekit',
-    '@workos-inc/authkit-nextjs',
-    '@workos-inc/authkit-remix',
-    '@workos-inc/authkit-react-router',
-    '@workos-inc/authkit-react',
-    '@workos-inc/authkit-js',
-]);
-const NO_SDK = {
-    name: null,
-    version: null,
-    latest: null,
-    outdated: false,
-    isAuthKit: false,
-    language: 'javascript',
-};
-export async function checkSdk(options) {
-    const packageJson = readPackageJson(options.installDir);
-    if (!packageJson) {
-        return (await checkNonJsSdk(options.installDir)) ?? NO_SDK;
-    }
-    const installedSdk = SDK_PACKAGES.find((pkg) => hasPackageInstalled(pkg, packageJson));
-    if (!installedSdk) {
-        return (await checkNonJsSdk(options.installDir)) ?? NO_SDK;
-    }
-    const version = getPackageVersion(installedSdk, packageJson) ?? null;
-    const latest = await fetchLatestVersion(installedSdk);
-    return {
-        name: installedSdk,
-        version,
-        latest,
-        outdated: version && latest ? isVersionOutdated(version, latest) : false,
-        isAuthKit: AUTHKIT_PACKAGES.has(installedSdk),
-        language: 'javascript',
-    };
-}
-async function fetchLatestVersion(packageName) {
-    try {
-        const controller = new AbortController();
-        const timeoutId = setTimeout(() => controller.abort(), 5000);
-        const response = await fetch(`https://registry.npmjs.org/${packageName}/latest`, {
-            signal: controller.signal,
-        });
-        clearTimeout(timeoutId);
-        if (!response.ok)
-            return null;
-        const data = (await response.json());
-        return data.version ?? null;
-    }
-    catch {
-        return null;
-    }
-}
-const NON_JS_DETECTORS = [
-    {
-        language: 'python',
-        file: 'requirements.txt',
-        pattern: /^workos(?:-python)?(?:==|>=|~=|!=)?([\d.]*)/m,
-        nameExtract: 'workos-python',
-        versionGroup: 1,
-    },
-    {
-        language: 'python',
-        file: 'pyproject.toml',
-        pattern: /workos(?:-python)?/m,
-        nameExtract: 'workos-python',
-    },
-    {
-        language: 'ruby',
-        file: 'Gemfile',
-        pattern: /gem\s+['"]workos(?:-ruby)?['"]/m,
-        nameExtract: 'workos-ruby',
-    },
-    {
-        language: 'go',
-        file: 'go.mod',
-        pattern: /github\.com\/workos\/workos-go(?:\/v\d+)?\s+(v[\d.]+)/m,
-        nameExtract: 'workos-go',
-        versionGroup: 1,
-    },
-    {
-        language: 'java',
-        file: 'pom.xml',
-        pattern: /<groupId>com\.workos<\/groupId>/m,
-        nameExtract: 'workos-java',
-    },
-    {
-        language: 'java',
-        file: 'build.gradle',
-        pattern: /com\.workos/m,
-        nameExtract: 'workos-java',
-    },
-    {
-        language: 'php',
-        file: 'composer.json',
-        pattern: /"workos\/workos-php"/m,
-        nameExtract: 'workos-php',
-    },
-];
-async function readFileSafe(path) {
-    try {
-        return await readFile(path, 'utf-8');
-    }
-    catch {
-        return null;
-    }
-}
-async function checkNonJsSdk(installDir) {
-    for (const detector of NON_JS_DETECTORS) {
-        const content = await readFileSafe(join(installDir, detector.file));
-        if (!content)
-            continue;
-        const match = content.match(detector.pattern);
-        if (match) {
-            const version = detector.versionGroup ? match[detector.versionGroup] || null : null;
-            return {
-                name: detector.nameExtract ?? null,
-                version,
-                latest: null, // No registry checks for non-JS in this phase
-                outdated: false,
-                isAuthKit: false,
-                language: detector.language,
-            };
-        }
-    }
-    // Check .csproj files for .NET (requires directory listing)
-    try {
-        const entries = await readdir(installDir);
-        for (const entry of entries) {
-            if (entry.endsWith('.csproj')) {
-                const content = await readFileSafe(join(installDir, entry));
-                if (content && /PackageReference.*Include="WorkOS\.net"/i.test(content)) {
-                    const versionMatch = content.match(/Include="WorkOS\.net".*?Version="([\d.]+)"/i);
-                    return {
-                        name: 'WorkOS.net',
-                        version: versionMatch?.[1] ?? null,
-                        latest: null,
-                        outdated: false,
-                        isAuthKit: false,
-                        language: 'dotnet',
-                    };
-                }
-            }
-        }
-    }
-    catch {
-        // directory not readable
-    }
-    return null;
-}
-function isVersionOutdated(current, latest) {
-    // Strip semver range prefixes (^, ~, etc.) and workspace protocol
-    const cleanCurrent = current.replace(/^[\^~>=<]+/, '').replace(/^workspace:\*?/, '');
-    const cleanLatest = latest.replace(/^[\^~>=<]+/, '');
-    // Handle prerelease: "1.0.0-beta.1" → "1.0.0", "-beta.1"
-    const [currBase] = cleanCurrent.split('-');
-    const [latBase] = cleanLatest.split('-');
-    const currParts = currBase.split('.').map(Number);
-    const latParts = latBase.split('.').map(Number);
-    // If we got NaN values, we can't reliably compare - assume not outdated
-    if (currParts.some(isNaN) || latParts.some(isNaN)) {
-        return false;
-    }
-    const [currMajor = 0, currMinor = 0, currPatch = 0] = currParts;
-    const [latMajor = 0, latMinor = 0, latPatch = 0] = latParts;
-    if (latMajor > currMajor)
-        return true;
-    if (latMajor === currMajor && latMinor > currMinor)
-        return true;
-    if (latMajor === currMajor && latMinor === currMinor && latPatch > currPatch)
-        return true;
-    return false;
-}
-//# sourceMappingURL=sdk.js.map

package/dist/doctor/checks/sdk.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sdk.js","sourceRoot":"","sources":["../../../src/doctor/checks/sdk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAGtG,iEAAiE;AACjE,MAAM,YAAY,GAAG;IACnB,kBAAkB;IAClB,sCAAsC;IACtC,2BAA2B;IAC3B,sBAAsB;IACtB,4BAA4B;IAC5B,2BAA2B;IAC3B,kCAAkC;IAClC,2BAA2B;IAC3B,wBAAwB;IACxB,kBAAkB;IAClB,QAAQ,EAAE,kBAAkB;CACpB,CAAC;AAEX,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,sCAAsC;IACtC,2BAA2B;IAC3B,4BAA4B;IAC5B,2BAA2B;IAC3B,kCAAkC;IAClC,2BAA2B;IAC3B,wBAAwB;CACzB,CAAC,CAAC;AAEH,MAAM,MAAM,GAAY;IACtB,IAAI,EAAE,IAAI;IACV,OAAO,EAAE,IAAI;IACb,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,KAAK;IACf,SAAS,EAAE,KAAK;IAChB,QAAQ,EAAE,YAAY;CACvB,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAsB;IACnD,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACxD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,MAAM,CAAC;IAC7D,CAAC;IAED,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;IACvF,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,MAAM,CAAC;IAC7D,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAEtD,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,OAAO;QACP,MAAM;QACN,QAAQ,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK;QACxE,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC;QAC7C,QAAQ,EAAE,YAAY;KACvB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,WAAmB;IACnD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAE7D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,8BAA8B,WAAW,SAAS,EAAE;YAC/E,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,YAAY,CAAC,SAAS,CAAC,CAAC;QAExB,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;QAC7D,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAUD,MAAM,gBAAgB,GAAoB;IACxC;QACE,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,8CAA8C;QACvD,WAAW,EAAE,eAAe;QAC5B,YAAY,EAAE,CAAC;KAChB;IACD;QACE,QAAQ,EAAE,QAAQ;QAClB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,qBAAqB;QAC9B,WAAW,EAAE,eAAe;KAC7B;IACD;QACE,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EAAE,aAAa;KAC3B;IACD;QACE,QAAQ,EAAE,IAAI;QACd,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,wDAAwD;QACjE,WAAW,EAAE,WAAW;QACxB,YAAY,EAAE,CAAC;KAChB;IACD;QACE,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EAAE,aAAa;KAC3B;IACD;QACE,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,cAAc;QACvB,WAAW,EAAE,aAAa;KAC3B;IACD;QACE,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,uBAAuB;QAChC,WAAW,EAAE,YAAY;KAC1B;CACF,CAAC;AAEF,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,UAAkB;IAC7C,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACpF,OAAO;gBACL,IAAI,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI;gBAClC,OAAO;gBACP,MAAM,EAAE,IAAI,EAAE,8CAA8C;gBAC5D,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,KAAK;gBAChB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;gBAC5D,IAAI,OAAO,IAAI,0CAA0C,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBACxE,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;oBAClF,OAAO;wBACL,IAAI,EAAE,YAAY;wBAClB,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI;wBAClC,MAAM,EAAE,IAAI;wBACZ,QAAQ,EAAE,KAAK;wBACf,SAAS,EAAE,KAAK;wBAChB,QAAQ,EAAE,QAAQ;qBACnB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,MAAc;IACxD,kEAAkE;IAClE,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAErD,yDAAyD;IACzD,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,CAAC,OAAO,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEzC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEhD,wEAAwE;IACxE,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC;IAChE,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC;IAE5D,IAAI,QAAQ,GAAG,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,SAAS;QAAE,OAAO,IAAI,CAAC;IAChE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1F,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { readFile, readdir } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { readPackageJson, hasPackageInstalled, getPackageVersion } from '../../utils/package-json.js';\nimport type { DoctorOptions, SdkInfo } from '../types.js';\n\n// AuthKit SDKs - check @workos/* scope first, then @workos-inc/*\nconst SDK_PACKAGES = [\n  // @workos/* scope\n  '@workos/authkit-tanstack-react-start',\n  '@workos/authkit-sveltekit',\n  // @workos-inc/* scope\n  '@workos-inc/authkit-nextjs',\n  '@workos-inc/authkit-remix',\n  '@workos-inc/authkit-react-router',\n  '@workos-inc/authkit-react',\n  '@workos-inc/authkit-js',\n  '@workos-inc/node',\n  'workos', // very old legacy\n] as const;\n\nconst AUTHKIT_PACKAGES = new Set([\n  '@workos/authkit-tanstack-react-start',\n  '@workos/authkit-sveltekit',\n  '@workos-inc/authkit-nextjs',\n  '@workos-inc/authkit-remix',\n  '@workos-inc/authkit-react-router',\n  '@workos-inc/authkit-react',\n  '@workos-inc/authkit-js',\n]);\n\nconst NO_SDK: SdkInfo = {\n  name: null,\n  version: null,\n  latest: null,\n  outdated: false,\n  isAuthKit: false,\n  language: 'javascript',\n};\n\nexport async function checkSdk(options: DoctorOptions): Promise<SdkInfo> {\n  const packageJson = readPackageJson(options.installDir);\n  if (!packageJson) {\n    return (await checkNonJsSdk(options.installDir)) ?? NO_SDK;\n  }\n\n  const installedSdk = SDK_PACKAGES.find((pkg) => hasPackageInstalled(pkg, packageJson));\n  if (!installedSdk) {\n    return (await checkNonJsSdk(options.installDir)) ?? NO_SDK;\n  }\n\n  const version = getPackageVersion(installedSdk, packageJson) ?? null;\n  const latest = await fetchLatestVersion(installedSdk);\n\n  return {\n    name: installedSdk,\n    version,\n    latest,\n    outdated: version && latest ? isVersionOutdated(version, latest) : false,\n    isAuthKit: AUTHKIT_PACKAGES.has(installedSdk),\n    language: 'javascript',\n  };\n}\n\nasync function fetchLatestVersion(packageName: string): Promise<string | null> {\n  try {\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), 5000);\n\n    const response = await fetch(`https://registry.npmjs.org/${packageName}/latest`, {\n      signal: controller.signal,\n    });\n\n    clearTimeout(timeoutId);\n\n    if (!response.ok) return null;\n    const data = (await response.json()) as { version?: string };\n    return data.version ?? null;\n  } catch {\n    return null;\n  }\n}\n\ninterface NonJsDetector {\n  language: string;\n  file: string;\n  pattern: RegExp;\n  nameExtract?: string; // Static SDK name when pattern matches\n  versionGroup?: number; // Capture group index for version\n}\n\nconst NON_JS_DETECTORS: NonJsDetector[] = [\n  {\n    language: 'python',\n    file: 'requirements.txt',\n    pattern: /^workos(?:-python)?(?:==|>=|~=|!=)?([\\d.]*)/m,\n    nameExtract: 'workos-python',\n    versionGroup: 1,\n  },\n  {\n    language: 'python',\n    file: 'pyproject.toml',\n    pattern: /workos(?:-python)?/m,\n    nameExtract: 'workos-python',\n  },\n  {\n    language: 'ruby',\n    file: 'Gemfile',\n    pattern: /gem\\s+['\"]workos(?:-ruby)?['\"]/m,\n    nameExtract: 'workos-ruby',\n  },\n  {\n    language: 'go',\n    file: 'go.mod',\n    pattern: /github\\.com\\/workos\\/workos-go(?:\\/v\\d+)?\\s+(v[\\d.]+)/m,\n    nameExtract: 'workos-go',\n    versionGroup: 1,\n  },\n  {\n    language: 'java',\n    file: 'pom.xml',\n    pattern: /<groupId>com\\.workos<\\/groupId>/m,\n    nameExtract: 'workos-java',\n  },\n  {\n    language: 'java',\n    file: 'build.gradle',\n    pattern: /com\\.workos/m,\n    nameExtract: 'workos-java',\n  },\n  {\n    language: 'php',\n    file: 'composer.json',\n    pattern: /\"workos\\/workos-php\"/m,\n    nameExtract: 'workos-php',\n  },\n];\n\nasync function readFileSafe(path: string): Promise<string | null> {\n  try {\n    return await readFile(path, 'utf-8');\n  } catch {\n    return null;\n  }\n}\n\nasync function checkNonJsSdk(installDir: string): Promise<SdkInfo | null> {\n  for (const detector of NON_JS_DETECTORS) {\n    const content = await readFileSafe(join(installDir, detector.file));\n    if (!content) continue;\n\n    const match = content.match(detector.pattern);\n    if (match) {\n      const version = detector.versionGroup ? match[detector.versionGroup] || null : null;\n      return {\n        name: detector.nameExtract ?? null,\n        version,\n        latest: null, // No registry checks for non-JS in this phase\n        outdated: false,\n        isAuthKit: false,\n        language: detector.language,\n      };\n    }\n  }\n\n  // Check .csproj files for .NET (requires directory listing)\n  try {\n    const entries = await readdir(installDir);\n    for (const entry of entries) {\n      if (entry.endsWith('.csproj')) {\n        const content = await readFileSafe(join(installDir, entry));\n        if (content && /PackageReference.*Include=\"WorkOS\\.net\"/i.test(content)) {\n          const versionMatch = content.match(/Include=\"WorkOS\\.net\".*?Version=\"([\\d.]+)\"/i);\n          return {\n            name: 'WorkOS.net',\n            version: versionMatch?.[1] ?? null,\n            latest: null,\n            outdated: false,\n            isAuthKit: false,\n            language: 'dotnet',\n          };\n        }\n      }\n    }\n  } catch {\n    // directory not readable\n  }\n\n  return null;\n}\n\nfunction isVersionOutdated(current: string, latest: string): boolean {\n  // Strip semver range prefixes (^, ~, etc.) and workspace protocol\n  const cleanCurrent = current.replace(/^[\\^~>=<]+/, '').replace(/^workspace:\\*?/, '');\n  const cleanLatest = latest.replace(/^[\\^~>=<]+/, '');\n\n  // Handle prerelease: \"1.0.0-beta.1\" → \"1.0.0\", \"-beta.1\"\n  const [currBase] = cleanCurrent.split('-');\n  const [latBase] = cleanLatest.split('-');\n\n  const currParts = currBase.split('.').map(Number);\n  const latParts = latBase.split('.').map(Number);\n\n  // If we got NaN values, we can't reliably compare - assume not outdated\n  if (currParts.some(isNaN) || latParts.some(isNaN)) {\n    return false;\n  }\n\n  const [currMajor = 0, currMinor = 0, currPatch = 0] = currParts;\n  const [latMajor = 0, latMinor = 0, latPatch = 0] = latParts;\n\n  if (latMajor > currMajor) return true;\n  if (latMajor === currMajor && latMinor > currMinor) return true;\n  if (latMajor === currMajor && latMinor === currMinor && latPatch > currPatch) return true;\n  return false;\n}\n"]}

package/dist/doctor/checks/skills.d.ts

@@ -1,9 +0,0 @@
-import type { SkillsInfo } from '../types.js';
-/**
- * Check the freshness of auto-installed WorkOS skills across detected coding
- * agents. Compares each agent's version marker (written by autoInstallSkills)
- * against the bundled @workos/skills version the CLI ships with. Returns null
- * when no agents have a WorkOS skill installed at all — no noise for users who
- * never installed through the CLI.
- */
-export declare function checkSkills(home?: string): Promise<SkillsInfo | null>;

package/dist/doctor/checks/skills.js

@@ -1,84 +0,0 @@
-import { homedir } from 'node:os';
-import { access, readFile } from 'node:fs/promises';
-import { join } from 'node:path';
-import semver from 'semver';
-import { createAgents, getBundledSkillsVersion, SKILL_VERSION_MARKER_FILENAME } from '../../commands/install-skill.js';
-async function pathExists(p) {
-    try {
-        await access(p);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Stale = installed version is strictly older than the bundled version.
- * String inequality would also fire when installed > bundled (user installed
- * via a newer CLI then downgraded), and the SKILLS_OUTDATED remediation would
- * silently downgrade their agent's skills. Use semver ordering so we only
- * recommend an update when the bundled set is actually ahead.
- *
- * Falls back to string inequality when either version can't be parsed as
- * semver — better to flag a possibly-stale skill than to ignore drift entirely.
- */
-function isStale(installed, bundled) {
-    const installedValid = semver.valid(installed);
-    const bundledValid = semver.valid(bundled);
-    if (installedValid && bundledValid) {
-        return semver.lt(installedValid, bundledValid);
-    }
-    return installed !== bundled;
-}
-/**
- * Check the freshness of auto-installed WorkOS skills across detected coding
- * agents. Compares each agent's version marker (written by autoInstallSkills)
- * against the bundled @workos/skills version the CLI ships with. Returns null
- * when no agents have a WorkOS skill installed at all — no noise for users who
- * never installed through the CLI.
- */
-export async function checkSkills(home = homedir()) {
-    const bundledVersion = await getBundledSkillsVersion();
-    const agents = createAgents(home);
-    const statuses = [];
-    for (const [, agent] of Object.entries(agents)) {
-        // Only report on agents that actually have a WorkOS skill installed.
-        // An agent's `skills/` dir existing (e.g. for unrelated user-installed
-        // skills) doesn't mean WE installed — and `doctor --fix` would otherwise
-        // happily write `workos/` and `workos-widgets/` onto an agent that never
-        // opted in. The marker OR a workos/ / workos-widgets/ subdir is the signal
-        // (either is enough — older explicit installs of just `workos-widgets`
-        // shouldn't be invisible to doctor).
-        const markerPath = join(agent.globalSkillsDir, SKILL_VERSION_MARKER_FILENAME);
-        const workosSkillDir = join(agent.globalSkillsDir, 'workos');
-        const widgetsSkillDir = join(agent.globalSkillsDir, 'workos-widgets');
-        const [hasMarker, hasWorkos, hasWidgets] = await Promise.all([
-            pathExists(markerPath),
-            pathExists(workosSkillDir),
-            pathExists(widgetsSkillDir),
-        ]);
-        if (!hasMarker && !hasWorkos && !hasWidgets)
-            continue;
-        let installedVersion = null;
-        if (hasMarker) {
-            try {
-                installedVersion = (await readFile(markerPath, 'utf8')).trim() || null;
-            }
-            catch {
-                installedVersion = null;
-            }
-        }
-        statuses.push({
-            agent: agent.displayName,
-            installedVersion,
-            stale: Boolean(bundledVersion && installedVersion && isStale(installedVersion, bundledVersion)),
-        });
-    }
-    if (statuses.length === 0)
-        return null;
-    return {
-        bundledVersion,
-        agents: statuses,
-    };
-}
-//# sourceMappingURL=skills.js.map

package/dist/doctor/checks/skills.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../../src/doctor/checks/skills.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAGvH,KAAK,UAAU,UAAU,CAAC,CAAS;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,OAAO,CAAC,SAAiB,EAAE,OAAe;IACjD,MAAM,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,cAAc,IAAI,YAAY,EAAE,CAAC;QACnC,OAAO,MAAM,CAAC,EAAE,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,KAAK,OAAO,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe,OAAO,EAAE;IACxD,MAAM,cAAc,GAAG,MAAM,uBAAuB,EAAE,CAAC;IACvD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAElC,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,qEAAqE;QACrE,uEAAuE;QACvE,yEAAyE;QACzE,yEAAyE;QACzE,2EAA2E;QAC3E,uEAAuE;QACvE,qCAAqC;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,6BAA6B,CAAC,CAAC;QAC9E,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QAC7D,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;QACtE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3D,UAAU,CAAC,UAAU,CAAC;YACtB,UAAU,CAAC,cAAc,CAAC;YAC1B,UAAU,CAAC,eAAe,CAAC;SAC5B,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU;YAAE,SAAS;QAEtD,IAAI,gBAAgB,GAAkB,IAAI,CAAC;QAC3C,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,gBAAgB,GAAG,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;YACzE,CAAC;YAAC,MAAM,CAAC;gBACP,gBAAgB,GAAG,IAAI,CAAC;YAC1B,CAAC;QACH,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,KAAK,CAAC,WAAW;YACxB,gBAAgB;YAChB,KAAK,EAAE,OAAO,CAAC,cAAc,IAAI,gBAAgB,IAAI,OAAO,CAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC;SAChG,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,OAAO;QACL,cAAc;QACd,MAAM,EAAE,QAAQ;KACjB,CAAC;AACJ,CAAC","sourcesContent":["import { homedir } from 'node:os';\nimport { access, readFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport semver from 'semver';\nimport { createAgents, getBundledSkillsVersion, SKILL_VERSION_MARKER_FILENAME } from '../../commands/install-skill.js';\nimport type { SkillsInfo, SkillAgentStatus } from '../types.js';\n\nasync function pathExists(p: string): Promise<boolean> {\n  try {\n    await access(p);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Stale = installed version is strictly older than the bundled version.\n * String inequality would also fire when installed > bundled (user installed\n * via a newer CLI then downgraded), and the SKILLS_OUTDATED remediation would\n * silently downgrade their agent's skills. Use semver ordering so we only\n * recommend an update when the bundled set is actually ahead.\n *\n * Falls back to string inequality when either version can't be parsed as\n * semver — better to flag a possibly-stale skill than to ignore drift entirely.\n */\nfunction isStale(installed: string, bundled: string): boolean {\n  const installedValid = semver.valid(installed);\n  const bundledValid = semver.valid(bundled);\n  if (installedValid && bundledValid) {\n    return semver.lt(installedValid, bundledValid);\n  }\n  return installed !== bundled;\n}\n\n/**\n * Check the freshness of auto-installed WorkOS skills across detected coding\n * agents. Compares each agent's version marker (written by autoInstallSkills)\n * against the bundled @workos/skills version the CLI ships with. Returns null\n * when no agents have a WorkOS skill installed at all — no noise for users who\n * never installed through the CLI.\n */\nexport async function checkSkills(home: string = homedir()): Promise<SkillsInfo | null> {\n  const bundledVersion = await getBundledSkillsVersion();\n  const agents = createAgents(home);\n\n  const statuses: SkillAgentStatus[] = [];\n\n  for (const [, agent] of Object.entries(agents)) {\n    // Only report on agents that actually have a WorkOS skill installed.\n    // An agent's `skills/` dir existing (e.g. for unrelated user-installed\n    // skills) doesn't mean WE installed — and `doctor --fix` would otherwise\n    // happily write `workos/` and `workos-widgets/` onto an agent that never\n    // opted in. The marker OR a workos/ / workos-widgets/ subdir is the signal\n    // (either is enough — older explicit installs of just `workos-widgets`\n    // shouldn't be invisible to doctor).\n    const markerPath = join(agent.globalSkillsDir, SKILL_VERSION_MARKER_FILENAME);\n    const workosSkillDir = join(agent.globalSkillsDir, 'workos');\n    const widgetsSkillDir = join(agent.globalSkillsDir, 'workos-widgets');\n    const [hasMarker, hasWorkos, hasWidgets] = await Promise.all([\n      pathExists(markerPath),\n      pathExists(workosSkillDir),\n      pathExists(widgetsSkillDir),\n    ]);\n    if (!hasMarker && !hasWorkos && !hasWidgets) continue;\n\n    let installedVersion: string | null = null;\n    if (hasMarker) {\n      try {\n        installedVersion = (await readFile(markerPath, 'utf8')).trim() || null;\n      } catch {\n        installedVersion = null;\n      }\n    }\n\n    statuses.push({\n      agent: agent.displayName,\n      installedVersion,\n      stale: Boolean(bundledVersion && installedVersion && isStale(installedVersion, bundledVersion)),\n    });\n  }\n\n  if (statuses.length === 0) return null;\n\n  return {\n    bundledVersion,\n    agents: statuses,\n  };\n}\n"]}

package/dist/doctor/clipboard.d.ts

@@ -1 +0,0 @@
-export declare function copyToClipboard(text: string): Promise<boolean>;

package/dist/doctor/clipboard.js

@@ -1,43 +0,0 @@
-import { spawn } from 'node:child_process';
-import { platform } from 'node:os';
-/**
- * Execute a command with stdin input.
- * Returns true if the command succeeded (exit code 0).
- */
-function execWithStdin(command, args, input) {
-    return new Promise((resolve) => {
-        const child = spawn(command, args, {
-            shell: false,
-            stdio: ['pipe', 'ignore', 'ignore'],
-        });
-        child.on('error', () => resolve(false));
-        child.on('close', (code) => resolve(code === 0));
-        child.stdin?.write(input);
-        child.stdin?.end();
-    });
-}
-export async function copyToClipboard(text) {
-    const os = platform();
-    try {
-        if (os === 'darwin') {
-            // macOS: use pbcopy
-            return await execWithStdin('pbcopy', [], text);
-        }
-        else if (os === 'linux') {
-            // Linux: try xclip first, then xsel
-            const xclipResult = await execWithStdin('xclip', ['-selection', 'clipboard'], text);
-            if (xclipResult)
-                return true;
-            return await execWithStdin('xsel', ['--clipboard', '--input'], text);
-        }
-        else if (os === 'win32') {
-            // Windows: use clip.exe
-            return await execWithStdin('clip', [], text);
-        }
-        return false;
-    }
-    catch {
-        return false;
-    }
-}
-//# sourceMappingURL=clipboard.js.map

package/dist/doctor/clipboard.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"clipboard.js","sourceRoot":"","sources":["../../src/doctor/clipboard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC;;;GAGG;AACH,SAAS,aAAa,CAAC,OAAe,EAAE,IAAc,EAAE,KAAa;IACnE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAEjD,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IAEtB,IAAI,CAAC;QACH,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YACpB,oBAAoB;YACpB,OAAO,MAAM,aAAa,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YAC1B,oCAAoC;YACpC,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;YACpF,IAAI,WAAW;gBAAE,OAAO,IAAI,CAAC;YAC7B,OAAO,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QACvE,CAAC;aAAM,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YAC1B,wBAAwB;YACxB,OAAO,MAAM,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["import { spawn } from 'node:child_process';\nimport { platform } from 'node:os';\n\n/**\n * Execute a command with stdin input.\n * Returns true if the command succeeded (exit code 0).\n */\nfunction execWithStdin(command: string, args: string[], input: string): Promise<boolean> {\n  return new Promise((resolve) => {\n    const child = spawn(command, args, {\n      shell: false,\n      stdio: ['pipe', 'ignore', 'ignore'],\n    });\n\n    child.on('error', () => resolve(false));\n    child.on('close', (code) => resolve(code === 0));\n\n    child.stdin?.write(input);\n    child.stdin?.end();\n  });\n}\n\nexport async function copyToClipboard(text: string): Promise<boolean> {\n  const os = platform();\n\n  try {\n    if (os === 'darwin') {\n      // macOS: use pbcopy\n      return await execWithStdin('pbcopy', [], text);\n    } else if (os === 'linux') {\n      // Linux: try xclip first, then xsel\n      const xclipResult = await execWithStdin('xclip', ['-selection', 'clipboard'], text);\n      if (xclipResult) return true;\n      return await execWithStdin('xsel', ['--clipboard', '--input'], text);\n    } else if (os === 'win32') {\n      // Windows: use clip.exe\n      return await execWithStdin('clip', [], text);\n    }\n    return false;\n  } catch {\n    return false;\n  }\n}\n"]}

package/dist/doctor/index.d.ts

@@ -1,26 +0,0 @@
-import type { DoctorOptions, DoctorReport, SkillsRefreshResult } from './types.js';
-/**
- * Skills `--fix` is allowed to refresh. Hardcoded — NOT derived from
- * discoverSkills — so future bundled skills require an explicit opt-in here
- * before doctor will write to their target directory. This is the contract's
- * promise that `--fix` only ever touches `workos/` and `workos-widgets/`.
- */
-export declare const FIXABLE_SKILLS: readonly ["workos", "workos-widgets"];
-/**
- * Refresh stale WorkOS skills if `--fix` is set and at least one agent is
- * stale or has no marker. Always re-reads `checkSkills()` after a successful
- * refresh so detectIssues sees the post-refresh state and we don't ship a
- * doctor report that simultaneously claims "fixed" and "still stale".
- *
- * Extracted from runDoctor for unit testability — runDoctor itself depends on
- * eight upstream checks that are expensive to mock.
- */
-export declare function maybeRefreshSkills(options: Pick<DoctorOptions, 'fix'>, skills: DoctorReport['skills']): Promise<{
-    skillsRefresh?: SkillsRefreshResult;
-    skills: DoctorReport['skills'];
-}>;
-export declare function runDoctor(options: DoctorOptions): Promise<DoctorReport>;
-export declare function outputReport(report: DoctorReport, options: DoctorOptions): Promise<void>;
-export { formatReport } from './output.js';
-export { formatReportAsJson } from './json-output.js';
-export type { DoctorReport, DoctorOptions } from './types.js';

package/dist/doctor/index.js

@@ -1,182 +0,0 @@
-import { checkSdk } from './checks/sdk.js';
-import { checkFramework } from './checks/framework.js';
-import { checkRuntime } from './checks/runtime.js';
-import { checkLanguage } from './checks/language.js';
-import { checkEnvironment } from './checks/environment.js';
-import { checkConnectivity } from './checks/connectivity.js';
-import { checkHostExecution } from './checks/host-execution.js';
-import { checkDashboardSettings, compareRedirectUris } from './checks/dashboard.js';
-import { checkAuthPatterns } from './checks/auth-patterns.js';
-import { checkAiAnalysis } from './checks/ai-analysis.js';
-import { checkSkills } from './checks/skills.js';
-import { checkMcp } from './checks/mcp.js';
-import { refreshWorkOSSkills } from '../commands/install-skill.js';
-import { detectIssues } from './issues.js';
-import { formatReport } from './output.js';
-import { formatReportAsJson } from './json-output.js';
-import { copyToClipboard } from './clipboard.js';
-import { getInteractionMode } from '../utils/interaction-mode.js';
-import Chalk from 'chalk';
-const DOCTOR_VERSION = '1.0.0';
-/**
- * Skills `--fix` is allowed to refresh. Hardcoded — NOT derived from
- * discoverSkills — so future bundled skills require an explicit opt-in here
- * before doctor will write to their target directory. This is the contract's
- * promise that `--fix` only ever touches `workos/` and `workos-widgets/`.
- */
-export const FIXABLE_SKILLS = ['workos', 'workos-widgets'];
-/**
- * Refresh stale WorkOS skills if `--fix` is set and at least one agent is
- * stale or has no marker. Always re-reads `checkSkills()` after a successful
- * refresh so detectIssues sees the post-refresh state and we don't ship a
- * doctor report that simultaneously claims "fixed" and "still stale".
- *
- * Extracted from runDoctor for unit testability — runDoctor itself depends on
- * eight upstream checks that are expensive to mock.
- */
-export async function maybeRefreshSkills(options, skills) {
-    if (!options.fix || !skills)
-        return { skills };
-    const stalePresent = skills.agents.some((a) => a.stale || a.installedVersion === null);
-    if (!stalePresent)
-        return { skills };
-    const refresh = await refreshWorkOSSkills({
-        // Explicit allowlist — NOT discoverSkills — so the contract's
-        // workos/+workos-widgets-only constraint can't drift.
-        skills: [...FIXABLE_SKILLS],
-    });
-    if (!refresh)
-        return { skills };
-    return {
-        skillsRefresh: {
-            before: refresh.perAgentBefore,
-            after: refresh.perAgentAfter,
-            skillsInstalled: refresh.skills,
-        },
-        skills: (await checkSkills()) ?? undefined,
-    };
-}
-export async function runDoctor(options) {
-    const interactionMode = getInteractionMode();
-    // Environment check first - loads project's .env/.env.local files
-    // Must run before connectivity so the resolved base URL is available
-    const { info: environment, raw: envRaw } = checkEnvironment(options);
-    // Run remaining checks concurrently
-    const [sdk, framework, runtime, connectivity, language, hostExecution, mcpResult] = await Promise.all([
-        checkSdk(options),
-        checkFramework(options),
-        checkRuntime(options),
-        checkConnectivity(options, environment.baseUrl ?? 'https://api.workos.com'),
-        checkLanguage(options.installDir),
-        checkHostExecution(),
-        checkMcp(),
-    ]);
-    // Normalize the check's null (no agents detected) to undefined for the report.
-    const mcp = mcpResult ?? undefined;
-    let skills = (await checkSkills()) ?? undefined;
-    // `--fix`: refresh stale WorkOS skills BEFORE earlyIssues + AI analysis so
-    // every downstream consumer (issue detection, AI prompt context) sees the
-    // post-refresh skill state and doesn't reference a SKILLS_OUTDATED warning
-    // that was just resolved.
-    const refreshOutcome = await maybeRefreshSkills(options, skills);
-    const skillsRefresh = refreshOutcome.skillsRefresh;
-    skills = refreshOutcome.skills;
-    // Dashboard settings + auth patterns + AI analysis (parallel, all need sdk/framework results)
-    // AI analysis also receives early issues as context to avoid duplication
-    const earlyIssues = detectIssues({
-        version: DOCTOR_VERSION,
-        timestamp: '',
-        interactionMode,
-        project: { path: options.installDir, packageManager: runtime.packageManager },
-        sdk,
-        language,
-        runtime,
-        framework,
-        environment,
-        hostExecution,
-        connectivity,
-        skills,
-        mcp,
-    });
-    const [dashboardResult, authPatterns, aiAnalysis] = await Promise.all([
-        checkDashboardSettings(options, environment.apiKeyType, envRaw),
-        checkAuthPatterns(options, framework, environment, sdk),
-        checkAiAnalysis({ installDir: options.installDir, language, framework, sdk, environment, existingIssues: earlyIssues }, { skipAi: options.skipAi }),
-    ]);
-    // Compute expected redirect URI from framework detection if not set in env
-    const redirectUriSource = environment.redirectUri ? 'env' : 'inferred';
-    const expectedRedirectUri = environment.redirectUri ??
-        (framework.expectedCallbackPath && framework.detectedPort
-            ? `http://localhost:${framework.detectedPort}${framework.expectedCallbackPath}`
-            : null);
-    // Compare redirect URIs if we have dashboard data
-    const redirectUris = dashboardResult.settings
-        ? compareRedirectUris(expectedRedirectUri, dashboardResult.settings.redirectUris, redirectUriSource)
-        : undefined;
-    // Build partial report
-    const partialReport = {
-        version: DOCTOR_VERSION,
-        timestamp: new Date().toISOString(),
-        interactionMode,
-        project: {
-            path: options.installDir,
-            packageManager: runtime.packageManager,
-        },
-        sdk,
-        language,
-        runtime,
-        framework,
-        environment,
-        hostExecution,
-        connectivity,
-        credentialValidation: dashboardResult.credentialValidation,
-        dashboardSettings: dashboardResult.settings ?? undefined,
-        dashboardError: dashboardResult.settings ? undefined : dashboardResult.error,
-        redirectUris,
-        authPatterns,
-        aiAnalysis,
-        skills,
-        skillsRefresh,
-        mcp,
-    };
-    // Detect issues based on (post-refresh) data.
-    const issues = detectIssues(partialReport);
-    // Calculate summary
-    const errors = issues.filter((i) => i.severity === 'error').length;
-    const warnings = issues.filter((i) => i.severity === 'warning').length;
-    const report = {
-        ...partialReport,
-        issues,
-        summary: {
-            errors,
-            warnings,
-            healthy: errors === 0,
-        },
-    };
-    return report;
-}
-export async function outputReport(report, options) {
-    if (options.json) {
-        const json = formatReportAsJson(report);
-        console.log(json);
-        if (options.copy) {
-            const success = await copyToClipboard(json);
-            if (success) {
-                console.error('(Copied to clipboard)');
-            }
-        }
-    }
-    else {
-        formatReport(report, { verbose: options.verbose });
-        if (options.copy) {
-            const json = formatReportAsJson(report);
-            const success = await copyToClipboard(json);
-            if (success) {
-                console.log(Chalk.dim('Report copied to clipboard'));
-            }
-        }
-    }
-}
-export { formatReport } from './output.js';
-export { formatReportAsJson } from './json-output.js';
-//# sourceMappingURL=index.js.map