workos 0.18.0 → 0.20.1

package/dist/lib/post-install.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"post-install.js","sourceRoot":"","sources":["../../src/lib/post-install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE9E,MAAM,UAAU,aAAa;IAC3B,MAAM,KAAK,GAAG,mBAAmB,EAAE,CAAC;IACpC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,GAAW;IACzD,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC7D,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAa,EAAE,IAAY,EAAE,GAAW;IACxE,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3D,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAEtC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE;YAC1G,GAAG;YACH,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC;aACC,QAAQ,EAAE;aACV,IAAI,EAAE,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,UAAU,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;IACtC,OAAO;;;;wBAIe,MAAM;;;+CAGiB,UAAU,MAAM,MAAM;;;;CAIpE,CAAC,IAAI,EAAE,CAAC;AACT,CAAC","sourcesContent":["import { execFileSync } from 'node:child_process';\nimport { writeFileSync, unlinkSync } from 'node:fs';\nimport { tmpdir } from 'node:os';\nimport { join } from 'node:path';\nimport { getDefaultBranch, getUncommittedFiles } from '../utils/git-utils.js';\n\nexport function detectChanges(): { hasChanges: boolean; files: string[] } {\n  const files = getUncommittedFiles();\n  return { hasChanges: files.length > 0, files };\n}\n\nexport function stageAndCommit(message: string, cwd: string): void {\n  execFileSync('git', ['add', '-A'], { cwd, stdio: 'ignore' });\n  execFileSync('git', ['commit', '-m', message], { cwd, stdio: 'ignore' });\n}\n\nexport function pushBranch(cwd: string): void {\n  execFileSync('git', ['push', '-u', 'origin', 'HEAD'], { cwd, stdio: 'pipe' });\n}\n\nexport function createPullRequest(title: string, body: string, cwd: string): string {\n  const baseBranch = getDefaultBranch();\n  const tmpFile = join(tmpdir(), `pr-body-${Date.now()}.md`);\n  writeFileSync(tmpFile, body, 'utf-8');\n\n  try {\n    return execFileSync('gh', ['pr', 'create', '--title', title, '--body-file', tmpFile, '--base', baseBranch], {\n      cwd,\n      stdio: ['ignore', 'pipe', 'pipe'],\n    })\n      .toString()\n      .trim();\n  } finally {\n    try {\n      unlinkSync(tmpFile);\n    } catch {}\n  }\n}\n\nexport function getManualPrInstructions(branch: string): string {\n  const baseBranch = getDefaultBranch();\n  return `\nTo create a PR manually:\n\n1. Push your branch:\n   git push -u origin ${branch}\n\n2. Create PR via GitHub:\n   https://github.com/<owner>/<repo>/compare/${baseBranch}...${branch}\n\nOr install the GitHub CLI:\n   https://cli.github.com/\n`.trim();\n}\n"]}

package/dist/lib/preferences.d.ts

@@ -1,115 +0,0 @@
-/**
- * Plain CLI preferences store.
- *
- * Stored at ~/.workos/preferences.json as plain JSON. These are NOT secrets —
- * knowing that someone opted out of telemetry leaks nothing — so this
- * deliberately avoids the keyring abstraction (config-store.ts) to prevent a
- * non-secret write from ever triggering the insecure-fallback security warning.
- *
- * Mirrors the structural pattern of device-id.ts: a synchronous accessor backed
- * by a cache, an async prewarm that populates that cache off the blocking-fs
- * path, and a never-throws contract on every read/parse so a corrupt file can
- * never break a command.
- */
-export interface CliPreferences {
-    telemetry?: {
-        /** true => the user explicitly opted out of telemetry. */
-        optedOut?: boolean;
-        /** ISO timestamp the first-run notice was shown — written in Phase 2 only. */
-        noticeShownAt?: string;
-    };
-    /**
-     * MCP-install onboarding state. Owned semantically by lib/mcp-notice.ts; the
-     * shape lives here so it rides the same plain-JSON prefs store as telemetry.
-     */
-    mcp?: {
-        /**
-         * true => the user explicitly declined an automatic MCP install offer. The
-         * decline is absolute: no automatic surface (prompt or banner) asks again;
-         * `workos mcp install` stays available manually.
-         */
-        promptDeclined?: boolean;
-        /** ISO timestamp the one-time MCP banner was shown. */
-        bannerShownAt?: string;
-    };
-}
-/** Effective source of the resolved telemetry-enabled decision. */
-export type TelemetrySource = 'env' | 'preference' | 'default';
-export declare function getPreferencesPath(): string;
-/**
- * Asynchronously load preferences and warm the cache the synchronous
- * getPreferences() reads. Memoized: the first call performs the IO, concurrent
- * and later callers await the same promise. Prewarming this at startup keeps
- * the synchronous telemetry path off blocking fs IO. Never rejects.
- */
-export declare function loadPreferences(): Promise<CliPreferences>;
-/**
- * Synchronous accessor. Returns the prewarmed value when loadPreferences() has
- * run; otherwise performs a one-time synchronous read of the same file. On any
- * IO/parse failure returns {} (telemetry stays at its default-on state). Never
- * throws.
- */
-export declare function getPreferences(): CliPreferences;
-/**
- * Read-modify-write the on-disk preferences, merging `next` over the current
- * persisted value so future fields are never clobbered, then update the cache.
- * Throws on write failure so callers on the command path (opt-out/opt-in) can
- * surface a clear error — the read path swallows, the write path does not.
- */
-export declare function savePreferences(next: CliPreferences): void;
-/** Whether the user has explicitly opted out via the saved preference. */
-export declare function isTelemetryOptedOut(): boolean;
-/** Persist the opt-out flag. Throws on write failure (see savePreferences). */
-export declare function setTelemetryOptedOut(value: boolean): void;
-/** Whether the first-run telemetry notice has already been shown (ever). */
-export declare function isNoticeShown(): boolean;
-/**
- * Persist the first-run notice as shown, stamping the current time. Uses the
- * read-modify-write savePreferences so it never clobbers the optedOut flag.
- * Throws on write failure (see savePreferences) — the caller in
- * telemetry-notice.ts swallows it so a read-only FS never blocks a command.
- */
-export declare function markNoticeShown(): void;
-/**
- * Tri-state env override for telemetry.
- *
- * Only the explicit strings 'true' / 'false' count as an override. Any other
- * value — including unset or garbage like '1' — returns undefined and falls
- * through to the saved preference.
- *
- * This is a deliberate, documented change from the old `WORKOS_TELEMETRY !==
- * 'false'` behaviour: previously `WORKOS_TELEMETRY=1` forced telemetry on even
- * for opted-out users; now an opt-out is respected unless the env var
- * explicitly says 'true'.
- */
-export declare function envTelemetryOverride(): boolean | undefined;
-/**
- * Effective telemetry-enabled decision.
- *
- * Resolution order:
- *   1. envTelemetryOverride() if defined — env wins in BOTH directions.
- *   2. otherwise !isTelemetryOptedOut() — default-on unless explicitly opted out.
- */
-export declare function isTelemetryEnabled(): boolean;
-/**
- * Which signal produced the effective telemetry decision. Mirrors the
- * precedence in isTelemetryEnabled() so the `telemetry status` command and the
- * resolver can never drift.
- *
- * Note: an explicit opt-in (optedOut === false) reads as 'default', not
- * 'preference' — its outcome is identical to a fresh install, and the resolver
- * only treats optedOut === true as a non-default signal, so reporting
- * 'preference' here would imply a behavioral difference that does not exist.
- */
-export declare function getTelemetrySource(): TelemetrySource;
-/**
- * Delete the preferences file, returning telemetry to its fresh-install state
- * (opted-in, first-run notice unseen). Used by `debug reset` to wipe stored CLI
- * state alongside credentials and config. No-op if the file does not exist;
- * throws on a real delete failure (e.g. permission denied) so the caller can
- * surface it, mirroring clearConfig/clearCredentials. Resets the in-memory
- * cache so subsequent reads in this process reflect the cleared state.
- */
-export declare function clearPreferences(): void;
-/** Test seam — resets the in-memory cache between test cases. */
-export declare function __resetPreferencesCache(): void;

package/dist/lib/preferences.js

@@ -1,201 +0,0 @@
-/**
- * Plain CLI preferences store.
- *
- * Stored at ~/.workos/preferences.json as plain JSON. These are NOT secrets —
- * knowing that someone opted out of telemetry leaks nothing — so this
- * deliberately avoids the keyring abstraction (config-store.ts) to prevent a
- * non-secret write from ever triggering the insecure-fallback security warning.
- *
- * Mirrors the structural pattern of device-id.ts: a synchronous accessor backed
- * by a cache, an async prewarm that populates that cache off the blocking-fs
- * path, and a never-throws contract on every read/parse so a corrupt file can
- * never break a command.
- */
-import fs from 'node:fs';
-import { readFile } from 'node:fs/promises';
-import path from 'node:path';
-import os from 'node:os';
-let cached;
-let pending;
-export function getPreferencesPath() {
-    return path.join(os.homedir(), '.workos', 'preferences.json');
-}
-function parsePreferences(raw) {
-    try {
-        const value = JSON.parse(raw);
-        // Defend against a file that parses to a non-object (e.g. `"true"`, `42`).
-        if (value && typeof value === 'object' && !Array.isArray(value)) {
-            return value;
-        }
-    }
-    catch {
-        // Corrupt JSON — fall through to empty preferences. A later savePreferences
-        // overwrites it cleanly; we never auto-delete.
-    }
-    return {};
-}
-/**
- * Asynchronously load preferences and warm the cache the synchronous
- * getPreferences() reads. Memoized: the first call performs the IO, concurrent
- * and later callers await the same promise. Prewarming this at startup keeps
- * the synchronous telemetry path off blocking fs IO. Never rejects.
- */
-export function loadPreferences() {
-    if (cached)
-        return Promise.resolve(cached);
-    if (pending)
-        return pending;
-    pending = (async () => {
-        try {
-            const raw = await readFile(getPreferencesPath(), 'utf8');
-            cached = parsePreferences(raw);
-        }
-        catch {
-            // Missing/unreadable file — treat as no preferences set.
-            cached = {};
-        }
-        finally {
-            pending = undefined;
-        }
-        return cached;
-    })();
-    return pending;
-}
-/**
- * Synchronous accessor. Returns the prewarmed value when loadPreferences() has
- * run; otherwise performs a one-time synchronous read of the same file. On any
- * IO/parse failure returns {} (telemetry stays at its default-on state). Never
- * throws.
- */
-export function getPreferences() {
-    if (cached)
-        return cached;
-    try {
-        const raw = fs.readFileSync(getPreferencesPath(), 'utf8');
-        cached = parsePreferences(raw);
-    }
-    catch {
-        // Missing/unreadable/corrupt — telemetry stays at its default-on state.
-        cached = {};
-    }
-    return cached;
-}
-/**
- * Read-modify-write the on-disk preferences, merging `next` over the current
- * persisted value so future fields are never clobbered, then update the cache.
- * Throws on write failure so callers on the command path (opt-out/opt-in) can
- * surface a clear error — the read path swallows, the write path does not.
- */
-export function savePreferences(next) {
-    const filePath = getPreferencesPath();
-    // Read-modify-write over the CURRENT on-disk value (not the cache) so a field
-    // written by another process / a future phase is preserved.
-    let current = {};
-    try {
-        current = parsePreferences(fs.readFileSync(filePath, 'utf8'));
-    }
-    catch {
-        // No existing file (or unreadable) — start from empty.
-    }
-    const merged = {
-        ...current,
-        ...next,
-        ...(current.telemetry || next.telemetry ? { telemetry: { ...current.telemetry, ...next.telemetry } } : {}),
-        // Deep-merge mcp too so writing one marker (e.g. bannerShownAt) never
-        // clobbers the other (promptDeclined), which are written at different times.
-        ...(current.mcp || next.mcp ? { mcp: { ...current.mcp, ...next.mcp } } : {}),
-    };
-    fs.mkdirSync(path.dirname(filePath), { recursive: true, mode: 0o700 });
-    fs.writeFileSync(filePath, JSON.stringify(merged), { encoding: 'utf8', mode: 0o600 });
-    cached = merged;
-}
-/** Whether the user has explicitly opted out via the saved preference. */
-export function isTelemetryOptedOut() {
-    return getPreferences().telemetry?.optedOut === true;
-}
-/** Persist the opt-out flag. Throws on write failure (see savePreferences). */
-export function setTelemetryOptedOut(value) {
-    savePreferences({ telemetry: { optedOut: value } });
-}
-/** Whether the first-run telemetry notice has already been shown (ever). */
-export function isNoticeShown() {
-    return !!getPreferences().telemetry?.noticeShownAt;
-}
-/**
- * Persist the first-run notice as shown, stamping the current time. Uses the
- * read-modify-write savePreferences so it never clobbers the optedOut flag.
- * Throws on write failure (see savePreferences) — the caller in
- * telemetry-notice.ts swallows it so a read-only FS never blocks a command.
- */
-export function markNoticeShown() {
-    savePreferences({ telemetry: { noticeShownAt: new Date().toISOString() } });
-}
-/**
- * Tri-state env override for telemetry.
- *
- * Only the explicit strings 'true' / 'false' count as an override. Any other
- * value — including unset or garbage like '1' — returns undefined and falls
- * through to the saved preference.
- *
- * This is a deliberate, documented change from the old `WORKOS_TELEMETRY !==
- * 'false'` behaviour: previously `WORKOS_TELEMETRY=1` forced telemetry on even
- * for opted-out users; now an opt-out is respected unless the env var
- * explicitly says 'true'.
- */
-export function envTelemetryOverride() {
-    const value = process.env.WORKOS_TELEMETRY;
-    if (value === 'true')
-        return true;
-    if (value === 'false')
-        return false;
-    return undefined;
-}
-/**
- * Effective telemetry-enabled decision.
- *
- * Resolution order:
- *   1. envTelemetryOverride() if defined — env wins in BOTH directions.
- *   2. otherwise !isTelemetryOptedOut() — default-on unless explicitly opted out.
- */
-export function isTelemetryEnabled() {
-    const override = envTelemetryOverride();
-    if (override !== undefined)
-        return override;
-    return !isTelemetryOptedOut();
-}
-/**
- * Which signal produced the effective telemetry decision. Mirrors the
- * precedence in isTelemetryEnabled() so the `telemetry status` command and the
- * resolver can never drift.
- *
- * Note: an explicit opt-in (optedOut === false) reads as 'default', not
- * 'preference' — its outcome is identical to a fresh install, and the resolver
- * only treats optedOut === true as a non-default signal, so reporting
- * 'preference' here would imply a behavioral difference that does not exist.
- */
-export function getTelemetrySource() {
-    if (envTelemetryOverride() !== undefined)
-        return 'env';
-    if (isTelemetryOptedOut())
-        return 'preference';
-    return 'default';
-}
-/**
- * Delete the preferences file, returning telemetry to its fresh-install state
- * (opted-in, first-run notice unseen). Used by `debug reset` to wipe stored CLI
- * state alongside credentials and config. No-op if the file does not exist;
- * throws on a real delete failure (e.g. permission denied) so the caller can
- * surface it, mirroring clearConfig/clearCredentials. Resets the in-memory
- * cache so subsequent reads in this process reflect the cleared state.
- */
-export function clearPreferences() {
-    fs.rmSync(getPreferencesPath(), { force: true });
-    cached = {};
-    pending = undefined;
-}
-/** Test seam — resets the in-memory cache between test cases. */
-export function __resetPreferencesCache() {
-    cached = undefined;
-    pending = undefined;
-}
-//# sourceMappingURL=preferences.js.map

package/dist/lib/preferences.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"preferences.js","sourceRoot":"","sources":["../../src/lib/preferences.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AA4BzB,IAAI,MAAkC,CAAC;AACvC,IAAI,OAA4C,CAAC;AAEjD,MAAM,UAAU,kBAAkB;IAChC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,2EAA2E;QAC3E,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,OAAO,KAAuB,CAAC;QACjC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,+CAA+C;IACjD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,IAAI,MAAM;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAE5B,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;YACzD,MAAM,GAAG,EAAE,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,EAAE,CAAC;IAEL,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;QACxE,MAAM,GAAG,EAAE,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAoB;IAClD,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;IAEtC,8EAA8E;IAC9E,4DAA4D;IAC5D,IAAI,OAAO,GAAmB,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,GAAG,gBAAgB,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IAED,MAAM,MAAM,GAAmB;QAC7B,GAAG,OAAO;QACV,GAAG,IAAI;QACP,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,sEAAsE;QACtE,6EAA6E;QAC7E,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7E,CAAC;IAEF,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,MAAM,GAAG,MAAM,CAAC;AAClB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB;IACjC,OAAO,cAAc,EAAE,CAAC,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;AACvD,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,eAAe,CAAC,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa;IAC3B,OAAO,CAAC,CAAC,cAAc,EAAE,CAAC,SAAS,EAAE,aAAa,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe;IAC7B,eAAe,CAAC,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAC3C,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IACxC,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,CAAC,mBAAmB,EAAE,CAAC;AAChC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,oBAAoB,EAAE,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,mBAAmB,EAAE;QAAE,OAAO,YAAY,CAAC;IAC/C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB;IAC9B,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,GAAG,EAAE,CAAC;IACZ,OAAO,GAAG,SAAS,CAAC;AACtB,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,uBAAuB;IACrC,MAAM,GAAG,SAAS,CAAC;IACnB,OAAO,GAAG,SAAS,CAAC;AACtB,CAAC","sourcesContent":["/**\n * Plain CLI preferences store.\n *\n * Stored at ~/.workos/preferences.json as plain JSON. These are NOT secrets —\n * knowing that someone opted out of telemetry leaks nothing — so this\n * deliberately avoids the keyring abstraction (config-store.ts) to prevent a\n * non-secret write from ever triggering the insecure-fallback security warning.\n *\n * Mirrors the structural pattern of device-id.ts: a synchronous accessor backed\n * by a cache, an async prewarm that populates that cache off the blocking-fs\n * path, and a never-throws contract on every read/parse so a corrupt file can\n * never break a command.\n */\n\nimport fs from 'node:fs';\nimport { readFile } from 'node:fs/promises';\nimport path from 'node:path';\nimport os from 'node:os';\n\nexport interface CliPreferences {\n  telemetry?: {\n    /** true => the user explicitly opted out of telemetry. */\n    optedOut?: boolean;\n    /** ISO timestamp the first-run notice was shown — written in Phase 2 only. */\n    noticeShownAt?: string;\n  };\n  /**\n   * MCP-install onboarding state. Owned semantically by lib/mcp-notice.ts; the\n   * shape lives here so it rides the same plain-JSON prefs store as telemetry.\n   */\n  mcp?: {\n    /**\n     * true => the user explicitly declined an automatic MCP install offer. The\n     * decline is absolute: no automatic surface (prompt or banner) asks again;\n     * `workos mcp install` stays available manually.\n     */\n    promptDeclined?: boolean;\n    /** ISO timestamp the one-time MCP banner was shown. */\n    bannerShownAt?: string;\n  };\n}\n\n/** Effective source of the resolved telemetry-enabled decision. */\nexport type TelemetrySource = 'env' | 'preference' | 'default';\n\nlet cached: CliPreferences | undefined;\nlet pending: Promise<CliPreferences> | undefined;\n\nexport function getPreferencesPath(): string {\n  return path.join(os.homedir(), '.workos', 'preferences.json');\n}\n\nfunction parsePreferences(raw: string): CliPreferences {\n  try {\n    const value = JSON.parse(raw);\n    // Defend against a file that parses to a non-object (e.g. `\"true\"`, `42`).\n    if (value && typeof value === 'object' && !Array.isArray(value)) {\n      return value as CliPreferences;\n    }\n  } catch {\n    // Corrupt JSON — fall through to empty preferences. A later savePreferences\n    // overwrites it cleanly; we never auto-delete.\n  }\n  return {};\n}\n\n/**\n * Asynchronously load preferences and warm the cache the synchronous\n * getPreferences() reads. Memoized: the first call performs the IO, concurrent\n * and later callers await the same promise. Prewarming this at startup keeps\n * the synchronous telemetry path off blocking fs IO. Never rejects.\n */\nexport function loadPreferences(): Promise<CliPreferences> {\n  if (cached) return Promise.resolve(cached);\n  if (pending) return pending;\n\n  pending = (async () => {\n    try {\n      const raw = await readFile(getPreferencesPath(), 'utf8');\n      cached = parsePreferences(raw);\n    } catch {\n      // Missing/unreadable file — treat as no preferences set.\n      cached = {};\n    } finally {\n      pending = undefined;\n    }\n    return cached;\n  })();\n\n  return pending;\n}\n\n/**\n * Synchronous accessor. Returns the prewarmed value when loadPreferences() has\n * run; otherwise performs a one-time synchronous read of the same file. On any\n * IO/parse failure returns {} (telemetry stays at its default-on state). Never\n * throws.\n */\nexport function getPreferences(): CliPreferences {\n  if (cached) return cached;\n\n  try {\n    const raw = fs.readFileSync(getPreferencesPath(), 'utf8');\n    cached = parsePreferences(raw);\n  } catch {\n    // Missing/unreadable/corrupt — telemetry stays at its default-on state.\n    cached = {};\n  }\n  return cached;\n}\n\n/**\n * Read-modify-write the on-disk preferences, merging `next` over the current\n * persisted value so future fields are never clobbered, then update the cache.\n * Throws on write failure so callers on the command path (opt-out/opt-in) can\n * surface a clear error — the read path swallows, the write path does not.\n */\nexport function savePreferences(next: CliPreferences): void {\n  const filePath = getPreferencesPath();\n\n  // Read-modify-write over the CURRENT on-disk value (not the cache) so a field\n  // written by another process / a future phase is preserved.\n  let current: CliPreferences = {};\n  try {\n    current = parsePreferences(fs.readFileSync(filePath, 'utf8'));\n  } catch {\n    // No existing file (or unreadable) — start from empty.\n  }\n\n  const merged: CliPreferences = {\n    ...current,\n    ...next,\n    ...(current.telemetry || next.telemetry ? { telemetry: { ...current.telemetry, ...next.telemetry } } : {}),\n    // Deep-merge mcp too so writing one marker (e.g. bannerShownAt) never\n    // clobbers the other (promptDeclined), which are written at different times.\n    ...(current.mcp || next.mcp ? { mcp: { ...current.mcp, ...next.mcp } } : {}),\n  };\n\n  fs.mkdirSync(path.dirname(filePath), { recursive: true, mode: 0o700 });\n  fs.writeFileSync(filePath, JSON.stringify(merged), { encoding: 'utf8', mode: 0o600 });\n  cached = merged;\n}\n\n/** Whether the user has explicitly opted out via the saved preference. */\nexport function isTelemetryOptedOut(): boolean {\n  return getPreferences().telemetry?.optedOut === true;\n}\n\n/** Persist the opt-out flag. Throws on write failure (see savePreferences). */\nexport function setTelemetryOptedOut(value: boolean): void {\n  savePreferences({ telemetry: { optedOut: value } });\n}\n\n/** Whether the first-run telemetry notice has already been shown (ever). */\nexport function isNoticeShown(): boolean {\n  return !!getPreferences().telemetry?.noticeShownAt;\n}\n\n/**\n * Persist the first-run notice as shown, stamping the current time. Uses the\n * read-modify-write savePreferences so it never clobbers the optedOut flag.\n * Throws on write failure (see savePreferences) — the caller in\n * telemetry-notice.ts swallows it so a read-only FS never blocks a command.\n */\nexport function markNoticeShown(): void {\n  savePreferences({ telemetry: { noticeShownAt: new Date().toISOString() } });\n}\n\n/**\n * Tri-state env override for telemetry.\n *\n * Only the explicit strings 'true' / 'false' count as an override. Any other\n * value — including unset or garbage like '1' — returns undefined and falls\n * through to the saved preference.\n *\n * This is a deliberate, documented change from the old `WORKOS_TELEMETRY !==\n * 'false'` behaviour: previously `WORKOS_TELEMETRY=1` forced telemetry on even\n * for opted-out users; now an opt-out is respected unless the env var\n * explicitly says 'true'.\n */\nexport function envTelemetryOverride(): boolean | undefined {\n  const value = process.env.WORKOS_TELEMETRY;\n  if (value === 'true') return true;\n  if (value === 'false') return false;\n  return undefined;\n}\n\n/**\n * Effective telemetry-enabled decision.\n *\n * Resolution order:\n *   1. envTelemetryOverride() if defined — env wins in BOTH directions.\n *   2. otherwise !isTelemetryOptedOut() — default-on unless explicitly opted out.\n */\nexport function isTelemetryEnabled(): boolean {\n  const override = envTelemetryOverride();\n  if (override !== undefined) return override;\n  return !isTelemetryOptedOut();\n}\n\n/**\n * Which signal produced the effective telemetry decision. Mirrors the\n * precedence in isTelemetryEnabled() so the `telemetry status` command and the\n * resolver can never drift.\n *\n * Note: an explicit opt-in (optedOut === false) reads as 'default', not\n * 'preference' — its outcome is identical to a fresh install, and the resolver\n * only treats optedOut === true as a non-default signal, so reporting\n * 'preference' here would imply a behavioral difference that does not exist.\n */\nexport function getTelemetrySource(): TelemetrySource {\n  if (envTelemetryOverride() !== undefined) return 'env';\n  if (isTelemetryOptedOut()) return 'preference';\n  return 'default';\n}\n\n/**\n * Delete the preferences file, returning telemetry to its fresh-install state\n * (opted-in, first-run notice unseen). Used by `debug reset` to wipe stored CLI\n * state alongside credentials and config. No-op if the file does not exist;\n * throws on a real delete failure (e.g. permission denied) so the caller can\n * surface it, mirroring clearConfig/clearCredentials. Resets the in-memory\n * cache so subsequent reads in this process reflect the cleared state.\n */\nexport function clearPreferences(): void {\n  fs.rmSync(getPreferencesPath(), { force: true });\n  cached = {};\n  pending = undefined;\n}\n\n/** Test seam — resets the in-memory cache between test cases. */\nexport function __resetPreferencesCache(): void {\n  cached = undefined;\n  pending = undefined;\n}\n"]}

package/dist/lib/progress-tracker.d.ts

@@ -1,22 +0,0 @@
-/**
- * Progress tracking for wizard phases.
- * Maps xstate machine states to user-friendly phase names.
- */
-export interface Phase {
-    id: string;
-    name: string;
-    number: number;
-}
-export declare const PHASES: Phase[];
-export declare class ProgressTracker {
-    private currentPhase;
-    private completedPhases;
-    private readonly totalPhases;
-    enterPhase(stateId: string): void;
-    exitPhase(stateId: string): void;
-    getCurrentPhase(): Phase | null;
-    getCurrentIndicator(): string;
-    getCompletedSummary(): string[];
-    isComplete(): boolean;
-    reset(): void;
-}

package/dist/lib/progress-tracker.js

@@ -1,47 +0,0 @@
-/**
- * Progress tracking for wizard phases.
- * Maps xstate machine states to user-friendly phase names.
- */
-export const PHASES = [
-    { id: 'authenticating', name: 'Authentication', number: 1 },
-    { id: 'preparing', name: 'Detection', number: 2 },
-    { id: 'gatheringCredentials', name: 'Credentials', number: 3 },
-    { id: 'configuring', name: 'Configuration', number: 4 },
-    { id: 'runningAgent', name: 'Installation', number: 5 },
-];
-export class ProgressTracker {
-    currentPhase = null;
-    completedPhases = [];
-    totalPhases = PHASES.length;
-    enterPhase(stateId) {
-        const phase = PHASES.find((p) => p.id === stateId);
-        if (phase) {
-            this.currentPhase = phase;
-        }
-    }
-    exitPhase(stateId) {
-        const phase = PHASES.find((p) => p.id === stateId);
-        if (phase && !this.completedPhases.some((p) => p.id === phase.id)) {
-            this.completedPhases.push(phase);
-        }
-    }
-    getCurrentPhase() {
-        return this.currentPhase;
-    }
-    getCurrentIndicator() {
-        if (!this.currentPhase)
-            return '';
-        return `[${this.currentPhase.number}/${this.totalPhases}] ${this.currentPhase.name}`;
-    }
-    getCompletedSummary() {
-        return this.completedPhases.map((p) => `✓ ${p.name}`);
-    }
-    isComplete() {
-        return this.completedPhases.length === this.totalPhases;
-    }
-    reset() {
-        this.currentPhase = null;
-        this.completedPhases = [];
-    }
-}
-//# sourceMappingURL=progress-tracker.js.map

package/dist/lib/progress-tracker.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"progress-tracker.js","sourceRoot":"","sources":["../../src/lib/progress-tracker.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAQH,MAAM,CAAC,MAAM,MAAM,GAAY;IAC7B,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,CAAC,EAAE;IAC3D,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE;IACjD,EAAE,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,EAAE;IAC9D,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,EAAE;IACvD,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,EAAE;CACxD,CAAC;AAEF,MAAM,OAAO,eAAe;IAClB,YAAY,GAAiB,IAAI,CAAC;IAClC,eAAe,GAAY,EAAE,CAAC;IACrB,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;IAE7C,UAAU,CAAC,OAAe;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;QACnD,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,SAAS,CAAC,OAAe;QACvB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;QACnD,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,mBAAmB;QACjB,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,CAAC;QAClC,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IACvF,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,KAAK,IAAI,CAAC,WAAW,CAAC;IAC1D,CAAC;IAED,KAAK;QACH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,eAAe,GAAG,EAAE,CAAC;IAC5B,CAAC;CACF","sourcesContent":["/**\n * Progress tracking for wizard phases.\n * Maps xstate machine states to user-friendly phase names.\n */\n\nexport interface Phase {\n  id: string;\n  name: string;\n  number: number;\n}\n\nexport const PHASES: Phase[] = [\n  { id: 'authenticating', name: 'Authentication', number: 1 },\n  { id: 'preparing', name: 'Detection', number: 2 },\n  { id: 'gatheringCredentials', name: 'Credentials', number: 3 },\n  { id: 'configuring', name: 'Configuration', number: 4 },\n  { id: 'runningAgent', name: 'Installation', number: 5 },\n];\n\nexport class ProgressTracker {\n  private currentPhase: Phase | null = null;\n  private completedPhases: Phase[] = [];\n  private readonly totalPhases = PHASES.length;\n\n  enterPhase(stateId: string): void {\n    const phase = PHASES.find((p) => p.id === stateId);\n    if (phase) {\n      this.currentPhase = phase;\n    }\n  }\n\n  exitPhase(stateId: string): void {\n    const phase = PHASES.find((p) => p.id === stateId);\n    if (phase && !this.completedPhases.some((p) => p.id === phase.id)) {\n      this.completedPhases.push(phase);\n    }\n  }\n\n  getCurrentPhase(): Phase | null {\n    return this.currentPhase;\n  }\n\n  getCurrentIndicator(): string {\n    if (!this.currentPhase) return '';\n    return `[${this.currentPhase.number}/${this.totalPhases}] ${this.currentPhase.name}`;\n  }\n\n  getCompletedSummary(): string[] {\n    return this.completedPhases.map((p) => `✓ ${p.name}`);\n  }\n\n  isComplete(): boolean {\n    return this.completedPhases.length === this.totalPhases;\n  }\n\n  reset(): void {\n    this.currentPhase = null;\n    this.completedPhases = [];\n  }\n}\n"]}

package/dist/lib/registry.d.ts

@@ -1,42 +0,0 @@
-import type { FrameworkConfig, Language } from './framework-config.js';
-import type { InstallerOptions } from '../utils/types.js';
-/**
- * Standard exports from an integration module.
- * Each `src/integrations/{name}/index.ts` must export these.
- */
-export interface IntegrationModule {
-    config: FrameworkConfig;
-    run: (options: InstallerOptions) => Promise<string>;
-}
-/**
- * Registry that provides lookup, detection, and enumeration of integrations.
- */
-export interface IntegrationRegistry {
-    /** All registered integrations */
-    all(): FrameworkConfig[];
-    /** Get config by integration name */
-    get(name: string): IntegrationModule | undefined;
-    /** Get integrations for a specific language, ordered by priority */
-    forLanguage(language: Language): FrameworkConfig[];
-    /** Get integration names for CLI choices */
-    choices(): Array<{
-        name: string;
-        value: string;
-    }>;
-    /** Detection order: all integrations sorted by priority (higher = checked first) */
-    detectionOrder(): FrameworkConfig[];
-}
-/**
- * Build the integration registry by discovering all integration modules.
- * Scans `src/integrations/` (or `dist/integrations/` at runtime) for directories
- * with an index.js/index.ts file and dynamically imports them.
- */
-export declare function buildRegistry(): Promise<IntegrationRegistry>;
-/**
- * Get the integration registry (builds once, caches thereafter).
- */
-export declare function getRegistry(): Promise<IntegrationRegistry>;
-/**
- * Reset the registry cache. Used in tests.
- */
-export declare function resetRegistry(): void;

package/dist/lib/registry.js

@@ -1,96 +0,0 @@
-import { readdirSync, existsSync } from 'node:fs';
-import { join, dirname } from 'node:path';
-import { fileURLToPath, pathToFileURL } from 'node:url';
-/**
- * Build the integration registry by discovering all integration modules.
- * Scans `src/integrations/` (or `dist/integrations/` at runtime) for directories
- * with an index.js/index.ts file and dynamically imports them.
- */
-export async function buildRegistry() {
-    const modules = new Map();
-    // Resolve the integrations directory relative to this file
-    // In dev: src/lib/registry.ts -> src/integrations/
-    // In dist: dist/lib/registry.js -> dist/integrations/
-    const __filename = fileURLToPath(import.meta.url);
-    const __dirname = dirname(__filename);
-    const integrationsDir = join(__dirname, '..', 'integrations');
-    if (!existsSync(integrationsDir)) {
-        throw new Error(`No integrations directory found at ${integrationsDir}. Is the build corrupt?`);
-    }
-    const entries = readdirSync(integrationsDir, { withFileTypes: true });
-    const dirs = entries.filter((e) => e.isDirectory()).map((e) => e.name);
-    if (dirs.length === 0) {
-        throw new Error('No integrations found. Is the build corrupt?');
-    }
-    for (const dir of dirs) {
-        // Skip directories starting with _ (convention for internal files like _manifest.ts)
-        if (dir.startsWith('_'))
-            continue;
-        const indexPath = join(integrationsDir, dir, 'index.js');
-        const indexTsPath = join(integrationsDir, dir, 'index.ts');
-        if (!existsSync(indexPath) && !existsSync(indexTsPath)) {
-            // Skip directories without an index file (not an integration)
-            continue;
-        }
-        try {
-            const mod = (await import(pathToFileURL(join(integrationsDir, dir, 'index.js')).href));
-            if (!mod.config || !mod.run) {
-                console.warn(`Integration ${dir} missing 'config' or 'run' export, skipping`);
-                continue;
-            }
-            const name = mod.config.metadata.integration;
-            if (modules.has(name)) {
-                throw new Error(`Duplicate integration name: '${name}' (found in both existing and '${dir}/')`);
-            }
-            modules.set(name, mod);
-        }
-        catch (err) {
-            if (err instanceof Error && err.message.startsWith('Duplicate integration name')) {
-                throw err; // Re-throw duplicate name errors
-            }
-            console.warn(`Failed to load integration from ${dir}/: ${err}`);
-        }
-    }
-    // Build sorted config array (by priority, descending)
-    const sortedConfigs = Array.from(modules.values())
-        .map((m) => m.config)
-        .sort((a, b) => b.metadata.priority - a.metadata.priority);
-    return {
-        all() {
-            return sortedConfigs;
-        },
-        get(name) {
-            return modules.get(name);
-        },
-        forLanguage(language) {
-            return sortedConfigs.filter((c) => c.metadata.language === language);
-        },
-        choices() {
-            return sortedConfigs.map((c) => ({
-                name: c.metadata.name,
-                value: c.metadata.integration,
-            }));
-        },
-        detectionOrder() {
-            return sortedConfigs;
-        },
-    };
-}
-// Singleton cache
-let _registry = null;
-/**
- * Get the integration registry (builds once, caches thereafter).
- */
-export async function getRegistry() {
-    if (!_registry) {
-        _registry = await buildRegistry();
-    }
-    return _registry;
-}
-/**
- * Reset the registry cache. Used in tests.
- */
-export function resetRegistry() {
-    _registry = null;
-}
-//# sourceMappingURL=registry.js.map

package/dist/lib/registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/lib/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAiCxD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAC;IAErD,2DAA2D;IAC3D,mDAAmD;IACnD,sDAAsD;IACtD,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,eAAe,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAE9D,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,sCAAsC,eAAe,yBAAyB,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,eAAe,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEvE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,qFAAqF;QACrF,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAElC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QAE3D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACvD,8DAA8D;YAC9D,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAsB,CAAC;YAE5G,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,eAAe,GAAG,6CAA6C,CAAC,CAAC;gBAC9E,SAAS;YACX,CAAC;YAED,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YAE7C,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,kCAAkC,GAAG,KAAK,CAAC,CAAC;YAClG,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,4BAA4B,CAAC,EAAE,CAAC;gBACjF,MAAM,GAAG,CAAC,CAAC,iCAAiC;YAC9C,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,mCAAmC,GAAG,MAAM,GAAG,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,sDAAsD;IACtD,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;SAC/C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;SACpB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE7D,OAAO;QACL,GAAG;YACD,OAAO,aAAa,CAAC;QACvB,CAAC;QAED,GAAG,CAAC,IAAY;YACd,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAED,WAAW,CAAC,QAAkB;YAC5B,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;QACvE,CAAC;QAED,OAAO;YACL,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC/B,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI;gBACrB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW;aAC9B,CAAC,CAAC,CAAC;QACN,CAAC;QAED,cAAc;YACZ,OAAO,aAAa,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,kBAAkB;AAClB,IAAI,SAAS,GAA+B,IAAI,CAAC;AAEjD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,GAAG,MAAM,aAAa,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,SAAS,GAAG,IAAI,CAAC;AACnB,CAAC","sourcesContent":["import { readdirSync, existsSync } from 'node:fs';\nimport { join, dirname } from 'node:path';\nimport { fileURLToPath, pathToFileURL } from 'node:url';\nimport type { FrameworkConfig, Language } from './framework-config.js';\nimport type { InstallerOptions } from '../utils/types.js';\n\n/**\n * Standard exports from an integration module.\n * Each `src/integrations/{name}/index.ts` must export these.\n */\nexport interface IntegrationModule {\n  config: FrameworkConfig;\n  run: (options: InstallerOptions) => Promise<string>;\n}\n\n/**\n * Registry that provides lookup, detection, and enumeration of integrations.\n */\nexport interface IntegrationRegistry {\n  /** All registered integrations */\n  all(): FrameworkConfig[];\n\n  /** Get config by integration name */\n  get(name: string): IntegrationModule | undefined;\n\n  /** Get integrations for a specific language, ordered by priority */\n  forLanguage(language: Language): FrameworkConfig[];\n\n  /** Get integration names for CLI choices */\n  choices(): Array<{ name: string; value: string }>;\n\n  /** Detection order: all integrations sorted by priority (higher = checked first) */\n  detectionOrder(): FrameworkConfig[];\n}\n\n/**\n * Build the integration registry by discovering all integration modules.\n * Scans `src/integrations/` (or `dist/integrations/` at runtime) for directories\n * with an index.js/index.ts file and dynamically imports them.\n */\nexport async function buildRegistry(): Promise<IntegrationRegistry> {\n  const modules = new Map<string, IntegrationModule>();\n\n  // Resolve the integrations directory relative to this file\n  // In dev: src/lib/registry.ts -> src/integrations/\n  // In dist: dist/lib/registry.js -> dist/integrations/\n  const __filename = fileURLToPath(import.meta.url);\n  const __dirname = dirname(__filename);\n  const integrationsDir = join(__dirname, '..', 'integrations');\n\n  if (!existsSync(integrationsDir)) {\n    throw new Error(`No integrations directory found at ${integrationsDir}. Is the build corrupt?`);\n  }\n\n  const entries = readdirSync(integrationsDir, { withFileTypes: true });\n  const dirs = entries.filter((e) => e.isDirectory()).map((e) => e.name);\n\n  if (dirs.length === 0) {\n    throw new Error('No integrations found. Is the build corrupt?');\n  }\n\n  for (const dir of dirs) {\n    // Skip directories starting with _ (convention for internal files like _manifest.ts)\n    if (dir.startsWith('_')) continue;\n\n    const indexPath = join(integrationsDir, dir, 'index.js');\n    const indexTsPath = join(integrationsDir, dir, 'index.ts');\n\n    if (!existsSync(indexPath) && !existsSync(indexTsPath)) {\n      // Skip directories without an index file (not an integration)\n      continue;\n    }\n\n    try {\n      const mod = (await import(pathToFileURL(join(integrationsDir, dir, 'index.js')).href)) as IntegrationModule;\n\n      if (!mod.config || !mod.run) {\n        console.warn(`Integration ${dir} missing 'config' or 'run' export, skipping`);\n        continue;\n      }\n\n      const name = mod.config.metadata.integration;\n\n      if (modules.has(name)) {\n        throw new Error(`Duplicate integration name: '${name}' (found in both existing and '${dir}/')`);\n      }\n\n      modules.set(name, mod);\n    } catch (err) {\n      if (err instanceof Error && err.message.startsWith('Duplicate integration name')) {\n        throw err; // Re-throw duplicate name errors\n      }\n      console.warn(`Failed to load integration from ${dir}/: ${err}`);\n    }\n  }\n\n  // Build sorted config array (by priority, descending)\n  const sortedConfigs = Array.from(modules.values())\n    .map((m) => m.config)\n    .sort((a, b) => b.metadata.priority - a.metadata.priority);\n\n  return {\n    all() {\n      return sortedConfigs;\n    },\n\n    get(name: string) {\n      return modules.get(name);\n    },\n\n    forLanguage(language: Language) {\n      return sortedConfigs.filter((c) => c.metadata.language === language);\n    },\n\n    choices() {\n      return sortedConfigs.map((c) => ({\n        name: c.metadata.name,\n        value: c.metadata.integration,\n      }));\n    },\n\n    detectionOrder() {\n      return sortedConfigs;\n    },\n  };\n}\n\n// Singleton cache\nlet _registry: IntegrationRegistry | null = null;\n\n/**\n * Get the integration registry (builds once, caches thereafter).\n */\nexport async function getRegistry(): Promise<IntegrationRegistry> {\n  if (!_registry) {\n    _registry = await buildRegistry();\n  }\n  return _registry;\n}\n\n/**\n * Reset the registry cache. Used in tests.\n */\nexport function resetRegistry(): void {\n  _registry = null;\n}\n"]}

package/dist/lib/resolve-install-credentials.d.ts

@@ -1,11 +0,0 @@
-/**
- * Resolve credentials for install flow.
- * Priority: existing creds (env var, --api-key, active env) -> unclaimed env provisioning -> login fallback.
- *
- * The installer needs both API credentials (for WorkOS API calls) AND gateway auth
- * (for the LLM agent). This function ensures both are available:
- * - Unclaimed env: API key + claim token (claim token proxy handles gateway)
- * - Logged-in user: API key + OAuth token (credential proxy handles gateway)
- * - Direct mode: not handled here (resolved in agent-interface.ts via ANTHROPIC_API_KEY)
- */
-export declare function resolveInstallCredentials(apiKey: string | undefined, installDir: string | undefined, skipAuth: boolean | undefined, authenticate: () => Promise<unknown>): Promise<void>;

package/dist/lib/resolve-install-credentials.js

@@ -1,53 +0,0 @@
-/**
- * Resolve credentials for install flow.
- * Priority: existing creds (env var, --api-key, active env) -> unclaimed env provisioning -> login fallback.
- *
- * The installer needs both API credentials (for WorkOS API calls) AND gateway auth
- * (for the LLM agent). This function ensures both are available:
- * - Unclaimed env: API key + claim token (claim token proxy handles gateway)
- * - Logged-in user: API key + OAuth token (credential proxy handles gateway)
- * - Direct mode: not handled here (resolved in agent-interface.ts via ANTHROPIC_API_KEY)
- */
-export async function resolveInstallCredentials(apiKey, installDir, skipAuth, authenticate) {
-    // Explicit API key from env var or flag — user handles gateway auth separately
-    const envApiKey = process.env.WORKOS_API_KEY;
-    if (envApiKey)
-        return;
-    if (apiKey)
-        return;
-    try {
-        const { getActiveEnvironment, isUnclaimedEnvironment } = await import('./config-store.js');
-        const { getAccessToken } = await import('./credentials.js');
-        const activeEnv = getActiveEnvironment();
-        if (activeEnv?.apiKey) {
-            // Has API key — but does it have gateway auth?
-            if (isUnclaimedEnvironment(activeEnv)) {
-                // Unclaimed with claim token — claim token proxy will handle gateway
-                return;
-            }
-            if (getAccessToken()) {
-                // Has a valid OAuth token — credential proxy will handle gateway.
-                return;
-            }
-            // Has API key but no valid gateway auth — refresh or log in.
-            if (!skipAuth)
-                await authenticate();
-            return;
-        }
-        // No existing credentials — try unclaimed env provisioning
-        const { tryProvisionUnclaimedEnv } = await import('./unclaimed-env-provision.js');
-        const dir = installDir ?? process.cwd();
-        const provisioned = await tryProvisionUnclaimedEnv({ installDir: dir });
-        if (!provisioned) {
-            // Unclaimed env provisioning failed — fall back to login
-            if (!skipAuth)
-                await authenticate();
-        }
-    }
-    catch (error) {
-        const { logError } = await import('../utils/debug.js');
-        logError('[resolve-install-credentials] Failed:', error instanceof Error ? error.message : String(error));
-        throw error;
-    }
-}
-//# sourceMappingURL=resolve-install-credentials.js.map