workos 0.18.0 → 0.20.1

package/dist/lib/safe-tools.js

@@ -1,212 +0,0 @@
-export const LINTING_TOOLS = [
-    // All (general purpose)
-    'codespell',
-    'cspell',
-    'git-diff-check',
-    'gitleaks',
-    'trufflehog',
-    // Amazon States Language
-    'asl-validator',
-    // Ansible
-    'ansible-lint',
-    // Apex, Java
-    'pmd',
-    // Astro, CSS, GraphQL, GritQL, HTML, JavaScript, JSON, JSONC, JSON5, JSX, TSX, Svelte, TypeScript, Vue
-    'biome',
-    // AWS CloudFormation templates
-    'cfn-lint',
-    'cfnlint',
-    // AWS CloudFormation, Azure ARM, Dockerfile, Helm, Kubernetes, Security, Terraform
-    'checkov',
-    // AWS CloudFormation, Azure ARM, Dockerfile, Kubernetes, Secrets, Security, Terraform, Vulnerabilities
-    'trivy',
-    // Azure Resource Manager (ARM)
-    'test-aztemplate',
-    // Bash / Shell
-    'shellcheck',
-    'shfmt',
-    // Bazel, Starlark
-    'buildifier',
-    // C, C++
-    'cpplint',
-    'clang-format',
-    'clang-tidy',
-    'cmake-format',
-    'iwyu',
-    'pragma-once',
-    // C#, Dotnet (.NET)
-    'dotnet-format',
-    // CircleCI Config
-    'circleci',
-    // Clojure
-    'clj-kondo',
-    // CoffeeScript
-    'coffeelint',
-    // Commit messages
-    'commitlint',
-    // Copy/paste detection
-    'jscpd',
-    // CSS, SCSS, Sass
-    'stylelint',
-    // CSS, GraphQL, HTML, JavaScript, JSON, JSONC, JSON5, JSX, TSX, Markdown, TypeScript, Vue, YAML
-    'prettier',
-    // Cue
-    'cue-fmt',
-    // Dart
-    'dart',
-    // Dockerfile / Docker
-    'hadolint',
-    // Dotenv
-    'dotenv-linter',
-    // EditorConfig
-    'editorconfig-checker',
-    // GitHub Actions
-    'actionlint',
-    'zizmor',
-    // Go
-    'gofmt',
-    'gofumpt',
-    'goimports',
-    'gokart',
-    'golangci-lint',
-    'golines',
-    // Go, Java, JavaScript, JSON, Python, Ruby, TypeScript, YAML
-    'semgrep',
-    // GoReleaser
-    'goreleaser',
-    // GraphQL
-    'graphql-schema-linter',
-    // Groovy
-    'npm-groovy-lint',
-    // HAML
-    'haml-lint',
-    // HTML
-    'htmlhint',
-    // HTML Templates
-    'djlint',
-    // Java
-    'checkstyle',
-    'google-java-format',
-    // JavaScript, JSON, TypeScript
-    'eslint',
-    // Next.js
-    'next lint',
-    // JavaScript, JSON, Markdown, TypeScript
-    'deno',
-    // JavaScript, TypeScript
-    'rome',
-    // JSON, JSONC, JSON5
-    'eslint-plugin-jsonc',
-    'eslint-plugin-json',
-    // JSX, TSX
-    'eslint-plugin-jsx-a11y',
-    'eslint-plugin-react',
-    // Jupyter Notebook
-    'nbqa',
-    // Kotlin
-    'detekt',
-    'ktlint',
-    // Kubernetes
-    'kubeconform',
-    'kube-linter',
-    // LaTeX
-    'chktex',
-    // Lua
-    'luacheck',
-    'stylua',
-    // Markdown
-    'markdownlint',
-    'markdownlint-cli2',
-    'markdown-link-check',
-    'markdown-table-prettify',
-    'remark-lint',
-    // Natural language / Prose
-    'textlint',
-    'vale',
-    // Nix
-    'nixpkgs-fmt',
-    // OpenAPI
-    'spectral',
-    // package.json
-    'sort-package-json',
-    // Perl
-    'perlcritic',
-    'perltidy',
-    // PHP
-    'php-cs-fixer',
-    'phpcs',
-    'phpstan',
-    'psalm',
-    // PNG
-    'oxipng',
-    // PowerShell
-    'psscriptanalyzer',
-    // Prisma
-    'prisma',
-    // Protocol Buffers (Protobuf)
-    'protolint',
-    'buf',
-    // Python
-    'pylint',
-    'flake8',
-    'isort',
-    'ruff',
-    'black',
-    'autopep8',
-    'bandit',
-    'mypy',
-    'pyright',
-    'sourcery',
-    'yapf',
-    // R
-    'lintr',
-    // Rego
-    'opa',
-    'regal',
-    // Ruby
-    'rubocop',
-    'brakeman',
-    'rufo',
-    'standardrb',
-    // Rust
-    'clippy',
-    'rustfmt',
-    // Scala
-    'scalafmt',
-    // Security, Vulnerabilities
-    'osv-scanner',
-    // Security, Terraform
-    'terrascan',
-    'tfsec',
-    // Snakemake
-    'snakemake --lint',
-    'snakefmt',
-    // SQL
-    'sqlfluff',
-    'sql-formatter',
-    'sqlfmt',
-    'squawk',
-    // SVG
-    'svgo',
-    // Swift
-    'stringslint',
-    'swiftformat',
-    'swiftlint',
-    // Terraform
-    'tflint',
-    'terraform',
-    'tofu',
-    // Terragrunt
-    'terragrunt',
-    // Textproto
-    'txtpbfmt',
-    // TOML
-    'taplo',
-    // Vue
-    'eslint-plugin-vue',
-    // XML
-    'xmllint',
-    // YAML
-    'yamllint',
-];
-//# sourceMappingURL=safe-tools.js.map

package/dist/lib/safe-tools.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"safe-tools.js","sourceRoot":"","sources":["../../src/lib/safe-tools.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAa;IACrC,wBAAwB;IACxB,WAAW;IACX,QAAQ;IACR,gBAAgB;IAChB,UAAU;IACV,YAAY;IAEZ,yBAAyB;IACzB,eAAe;IAEf,UAAU;IACV,cAAc;IAEd,aAAa;IACb,KAAK;IAEL,uGAAuG;IACvG,OAAO;IAEP,+BAA+B;IAC/B,UAAU;IACV,SAAS;IAET,mFAAmF;IACnF,SAAS;IAET,uGAAuG;IACvG,OAAO;IAEP,+BAA+B;IAC/B,iBAAiB;IAEjB,eAAe;IACf,YAAY;IACZ,OAAO;IAEP,kBAAkB;IAClB,YAAY;IAEZ,SAAS;IACT,SAAS;IACT,cAAc;IACd,YAAY;IACZ,cAAc;IACd,MAAM;IACN,aAAa;IAEb,oBAAoB;IACpB,eAAe;IAEf,kBAAkB;IAClB,UAAU;IAEV,UAAU;IACV,WAAW;IAEX,eAAe;IACf,YAAY;IAEZ,kBAAkB;IAClB,YAAY;IAEZ,uBAAuB;IACvB,OAAO;IAEP,kBAAkB;IAClB,WAAW;IAEX,gGAAgG;IAChG,UAAU;IAEV,MAAM;IACN,SAAS;IAET,OAAO;IACP,MAAM;IAEN,sBAAsB;IACtB,UAAU;IAEV,SAAS;IACT,eAAe;IAEf,eAAe;IACf,sBAAsB;IAEtB,iBAAiB;IACjB,YAAY;IACZ,QAAQ;IAER,KAAK;IACL,OAAO;IACP,SAAS;IACT,WAAW;IACX,QAAQ;IACR,eAAe;IACf,SAAS;IAET,6DAA6D;IAC7D,SAAS;IAET,aAAa;IACb,YAAY;IAEZ,UAAU;IACV,uBAAuB;IAEvB,SAAS;IACT,iBAAiB;IAEjB,OAAO;IACP,WAAW;IAEX,OAAO;IACP,UAAU;IAEV,iBAAiB;IACjB,QAAQ;IAER,OAAO;IACP,YAAY;IACZ,oBAAoB;IAEpB,+BAA+B;IAC/B,QAAQ;IAER,UAAU;IACV,WAAW;IAEX,yCAAyC;IACzC,MAAM;IAEN,yBAAyB;IACzB,MAAM;IAEN,qBAAqB;IACrB,qBAAqB;IACrB,oBAAoB;IAEpB,WAAW;IACX,wBAAwB;IACxB,qBAAqB;IAErB,mBAAmB;IACnB,MAAM;IAEN,SAAS;IACT,QAAQ;IACR,QAAQ;IAER,aAAa;IACb,aAAa;IACb,aAAa;IAEb,QAAQ;IACR,QAAQ;IAER,MAAM;IACN,UAAU;IACV,QAAQ;IAER,WAAW;IACX,cAAc;IACd,mBAAmB;IACnB,qBAAqB;IACrB,yBAAyB;IACzB,aAAa;IAEb,2BAA2B;IAC3B,UAAU;IACV,MAAM;IAEN,MAAM;IACN,aAAa;IAEb,UAAU;IACV,UAAU;IAEV,eAAe;IACf,mBAAmB;IAEnB,OAAO;IACP,YAAY;IACZ,UAAU;IAEV,MAAM;IACN,cAAc;IACd,OAAO;IACP,SAAS;IACT,OAAO;IAEP,MAAM;IACN,QAAQ;IAER,aAAa;IACb,kBAAkB;IAElB,SAAS;IACT,QAAQ;IAER,8BAA8B;IAC9B,WAAW;IACX,KAAK;IAEL,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,MAAM;IACN,OAAO;IACP,UAAU;IACV,QAAQ;IACR,MAAM;IACN,SAAS;IACT,UAAU;IACV,MAAM;IAEN,IAAI;IACJ,OAAO;IAEP,OAAO;IACP,KAAK;IACL,OAAO;IAEP,OAAO;IACP,SAAS;IACT,UAAU;IACV,MAAM;IACN,YAAY;IAEZ,OAAO;IACP,QAAQ;IACR,SAAS;IAET,QAAQ;IACR,UAAU;IAEV,4BAA4B;IAC5B,aAAa;IAEb,sBAAsB;IACtB,WAAW;IACX,OAAO;IAEP,YAAY;IACZ,kBAAkB;IAClB,UAAU;IAEV,MAAM;IACN,UAAU;IACV,eAAe;IACf,QAAQ;IACR,QAAQ;IAER,MAAM;IACN,MAAM;IAEN,QAAQ;IACR,aAAa;IACb,aAAa;IACb,WAAW;IAEX,YAAY;IACZ,QAAQ;IACR,WAAW;IACX,MAAM;IAEN,aAAa;IACb,YAAY;IAEZ,YAAY;IACZ,UAAU;IAEV,OAAO;IACP,OAAO;IAEP,MAAM;IACN,mBAAmB;IAEnB,MAAM;IACN,SAAS;IAET,OAAO;IACP,UAAU;CACF,CAAC","sourcesContent":["export const LINTING_TOOLS: string[] = [\n  // All (general purpose)\n  'codespell',\n  'cspell',\n  'git-diff-check',\n  'gitleaks',\n  'trufflehog',\n\n  // Amazon States Language\n  'asl-validator',\n\n  // Ansible\n  'ansible-lint',\n\n  // Apex, Java\n  'pmd',\n\n  // Astro, CSS, GraphQL, GritQL, HTML, JavaScript, JSON, JSONC, JSON5, JSX, TSX, Svelte, TypeScript, Vue\n  'biome',\n\n  // AWS CloudFormation templates\n  'cfn-lint',\n  'cfnlint',\n\n  // AWS CloudFormation, Azure ARM, Dockerfile, Helm, Kubernetes, Security, Terraform\n  'checkov',\n\n  // AWS CloudFormation, Azure ARM, Dockerfile, Kubernetes, Secrets, Security, Terraform, Vulnerabilities\n  'trivy',\n\n  // Azure Resource Manager (ARM)\n  'test-aztemplate',\n\n  // Bash / Shell\n  'shellcheck',\n  'shfmt',\n\n  // Bazel, Starlark\n  'buildifier',\n\n  // C, C++\n  'cpplint',\n  'clang-format',\n  'clang-tidy',\n  'cmake-format',\n  'iwyu',\n  'pragma-once',\n\n  // C#, Dotnet (.NET)\n  'dotnet-format',\n\n  // CircleCI Config\n  'circleci',\n\n  // Clojure\n  'clj-kondo',\n\n  // CoffeeScript\n  'coffeelint',\n\n  // Commit messages\n  'commitlint',\n\n  // Copy/paste detection\n  'jscpd',\n\n  // CSS, SCSS, Sass\n  'stylelint',\n\n  // CSS, GraphQL, HTML, JavaScript, JSON, JSONC, JSON5, JSX, TSX, Markdown, TypeScript, Vue, YAML\n  'prettier',\n\n  // Cue\n  'cue-fmt',\n\n  // Dart\n  'dart',\n\n  // Dockerfile / Docker\n  'hadolint',\n\n  // Dotenv\n  'dotenv-linter',\n\n  // EditorConfig\n  'editorconfig-checker',\n\n  // GitHub Actions\n  'actionlint',\n  'zizmor',\n\n  // Go\n  'gofmt',\n  'gofumpt',\n  'goimports',\n  'gokart',\n  'golangci-lint',\n  'golines',\n\n  // Go, Java, JavaScript, JSON, Python, Ruby, TypeScript, YAML\n  'semgrep',\n\n  // GoReleaser\n  'goreleaser',\n\n  // GraphQL\n  'graphql-schema-linter',\n\n  // Groovy\n  'npm-groovy-lint',\n\n  // HAML\n  'haml-lint',\n\n  // HTML\n  'htmlhint',\n\n  // HTML Templates\n  'djlint',\n\n  // Java\n  'checkstyle',\n  'google-java-format',\n\n  // JavaScript, JSON, TypeScript\n  'eslint',\n\n  // Next.js\n  'next lint',\n\n  // JavaScript, JSON, Markdown, TypeScript\n  'deno',\n\n  // JavaScript, TypeScript\n  'rome',\n\n  // JSON, JSONC, JSON5\n  'eslint-plugin-jsonc',\n  'eslint-plugin-json',\n\n  // JSX, TSX\n  'eslint-plugin-jsx-a11y',\n  'eslint-plugin-react',\n\n  // Jupyter Notebook\n  'nbqa',\n\n  // Kotlin\n  'detekt',\n  'ktlint',\n\n  // Kubernetes\n  'kubeconform',\n  'kube-linter',\n\n  // LaTeX\n  'chktex',\n\n  // Lua\n  'luacheck',\n  'stylua',\n\n  // Markdown\n  'markdownlint',\n  'markdownlint-cli2',\n  'markdown-link-check',\n  'markdown-table-prettify',\n  'remark-lint',\n\n  // Natural language / Prose\n  'textlint',\n  'vale',\n\n  // Nix\n  'nixpkgs-fmt',\n\n  // OpenAPI\n  'spectral',\n\n  // package.json\n  'sort-package-json',\n\n  // Perl\n  'perlcritic',\n  'perltidy',\n\n  // PHP\n  'php-cs-fixer',\n  'phpcs',\n  'phpstan',\n  'psalm',\n\n  // PNG\n  'oxipng',\n\n  // PowerShell\n  'psscriptanalyzer',\n\n  // Prisma\n  'prisma',\n\n  // Protocol Buffers (Protobuf)\n  'protolint',\n  'buf',\n\n  // Python\n  'pylint',\n  'flake8',\n  'isort',\n  'ruff',\n  'black',\n  'autopep8',\n  'bandit',\n  'mypy',\n  'pyright',\n  'sourcery',\n  'yapf',\n\n  // R\n  'lintr',\n\n  // Rego\n  'opa',\n  'regal',\n\n  // Ruby\n  'rubocop',\n  'brakeman',\n  'rufo',\n  'standardrb',\n\n  // Rust\n  'clippy',\n  'rustfmt',\n\n  // Scala\n  'scalafmt',\n\n  // Security, Vulnerabilities\n  'osv-scanner',\n\n  // Security, Terraform\n  'terrascan',\n  'tfsec',\n\n  // Snakemake\n  'snakemake --lint',\n  'snakefmt',\n\n  // SQL\n  'sqlfluff',\n  'sql-formatter',\n  'sqlfmt',\n  'squawk',\n\n  // SVG\n  'svgo',\n\n  // Swift\n  'stringslint',\n  'swiftformat',\n  'swiftlint',\n\n  // Terraform\n  'tflint',\n  'terraform',\n  'tofu',\n\n  // Terragrunt\n  'terragrunt',\n\n  // Textproto\n  'txtpbfmt',\n\n  // TOML\n  'taplo',\n\n  // Vue\n  'eslint-plugin-vue',\n\n  // XML\n  'xmllint',\n\n  // YAML\n  'yamllint',\n] as const;\n\nexport type LintingTool = (typeof LINTING_TOOLS)[number];\n"]}

package/dist/lib/scaffold/index.d.ts

@@ -1 +0,0 @@
-export { CREATE_NEXT_APP_VERSION, SAFE_EMPTY_FILES, buildCreateNextAppArgs, isScaffoldableEmptyDir, resolvePackageManager, runCreateNextApp, type PackageManager, } from './scaffold.js';

package/dist/lib/scaffold/index.js

@@ -1,2 +0,0 @@
-export { CREATE_NEXT_APP_VERSION, SAFE_EMPTY_FILES, buildCreateNextAppArgs, isScaffoldableEmptyDir, resolvePackageManager, runCreateNextApp, } from './scaffold.js';
-//# sourceMappingURL=index.js.map

package/dist/lib/scaffold/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/scaffold/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,GAEjB,MAAM,eAAe,CAAC","sourcesContent":["export {\n  CREATE_NEXT_APP_VERSION,\n  SAFE_EMPTY_FILES,\n  buildCreateNextAppArgs,\n  isScaffoldableEmptyDir,\n  resolvePackageManager,\n  runCreateNextApp,\n  type PackageManager,\n} from './scaffold.js';\n"]}

package/dist/lib/scaffold/scaffold.d.ts

@@ -1,66 +0,0 @@
-import type { InstallerEventEmitter } from '../events.js';
-export type PackageManager = 'npm' | 'pnpm' | 'yarn' | 'bun';
-/**
- * The `create-next-app` major we pin to. Matches `authkit-nextjs/examples/next`
- * (Next 16). A major float (`@16`) keeps the pinned flag set stable while still
- * receiving patch/minor updates. Re-pin when AuthKit bumps its supported Next major.
- * `@latest` is intentionally avoided — it would reintroduce the flag-drift
- * non-determinism this deterministic step exists to prevent.
- */
-export declare const CREATE_NEXT_APP_VERSION = "16";
-/**
- * Files that may be present in a directory we still consider "scaffoldable empty".
- *
- * INVARIANT: this MUST stay a subset of create-next-app's own `validFiles`
- * (verified against the v{@link CREATE_NEXT_APP_VERSION} tag). If ours is
- * stricter, we simply scaffold less often (safe). If ours were looser,
- * create-next-app would accept our offer and then refuse mid-run.
- *
- * We omit `docs` and `mkdocs.yml` from the upstream list on purpose — their
- * presence usually signals real project content, so we err toward NOT scaffolding.
- * We also omit `README.md`/`.vscode`: they are NOT in create-next-app's list, so a
- * directory containing them is left to the normal (non-scaffold) install path.
- */
-export declare const SAFE_EMPTY_FILES: ReadonlySet<string>;
-/**
- * True iff `dir` is empty or contains only {@link SAFE_EMPTY_FILES} entries.
- *
- * Because no project manifest (`package.json`, `go.mod`, `Gemfile`, etc.) appears
- * in {@link SAFE_EMPTY_FILES}, the presence of any manifest makes this return
- * false — i.e. an existing project always takes the normal install path.
- */
-export declare function isScaffoldableEmptyDir(dir: string): Promise<boolean>;
-/**
- * Resolve the package manager for the scaffolded app.
- *
- * Precedence: validated `--pm` override > `npm_config_user_agent` parse > `npm`.
- * An empty directory has no lockfile, so lockfile-based detection does not apply;
- * we read the runner from the user agent instead (e.g. `pnpm dlx` → `pnpm`).
- */
-export declare function resolvePackageManager(opts: {
-    pm?: string;
-    userAgent?: string;
-}): PackageManager;
-/**
- * The pinned `create-next-app` flag set. Kept pure so a unit test can assert the
- * exact array — flag drift across a pinned major is the primary failure mode.
- *
- * v1 scaffolds Next.js only. Multi-framework scaffolding (e.g. a Vite React app
- * via its own `create-*` tool) is a tracked follow-up, not implemented.
- *
- * App Router + TypeScript + ESLint + Tailwind + `src/` + `@/*` alias, installed
- * with the resolved package manager. `--yes` accepts all remaining defaults
- * (including the major's Turbopack default) and prevents interactive hangs.
- */
-export declare function buildCreateNextAppArgs(pm: PackageManager): string[];
-/**
- * Spawn `create-next-app@<pinned> .` in `installDir` via the resolved package
- * manager's runner, streaming output as `scaffold:progress` events. Resolves on
- * exit 0; rejects on non-zero exit or spawn error so the state machine can route
- * to its error state.
- */
-export declare function runCreateNextApp(opts: {
-    installDir: string;
-    packageManager: PackageManager;
-    emitter: InstallerEventEmitter;
-}): Promise<void>;

package/dist/lib/scaffold/scaffold.js

@@ -1,156 +0,0 @@
-import { spawn } from 'node:child_process';
-import { readdir } from 'node:fs/promises';
-import { SPAWN_OPTS } from '../../utils/platform.js';
-/**
- * The `create-next-app` major we pin to. Matches `authkit-nextjs/examples/next`
- * (Next 16). A major float (`@16`) keeps the pinned flag set stable while still
- * receiving patch/minor updates. Re-pin when AuthKit bumps its supported Next major.
- * `@latest` is intentionally avoided — it would reintroduce the flag-drift
- * non-determinism this deterministic step exists to prevent.
- */
-export const CREATE_NEXT_APP_VERSION = '16';
-const VALID_PACKAGE_MANAGERS = new Set(['npm', 'pnpm', 'yarn', 'bun']);
-/**
- * Files that may be present in a directory we still consider "scaffoldable empty".
- *
- * INVARIANT: this MUST stay a subset of create-next-app's own `validFiles`
- * (verified against the v{@link CREATE_NEXT_APP_VERSION} tag). If ours is
- * stricter, we simply scaffold less often (safe). If ours were looser,
- * create-next-app would accept our offer and then refuse mid-run.
- *
- * We omit `docs` and `mkdocs.yml` from the upstream list on purpose — their
- * presence usually signals real project content, so we err toward NOT scaffolding.
- * We also omit `README.md`/`.vscode`: they are NOT in create-next-app's list, so a
- * directory containing them is left to the normal (non-scaffold) install path.
- */
-export const SAFE_EMPTY_FILES = new Set([
-    '.DS_Store',
-    '.git',
-    '.gitattributes',
-    '.gitignore',
-    '.gitlab-ci.yml',
-    '.hg',
-    '.hgcheck',
-    '.hgignore',
-    '.idea',
-    '.npmignore',
-    '.travis.yml',
-    'LICENSE',
-    'Thumbs.db',
-    'npm-debug.log',
-    'yarn-debug.log',
-    'yarn-error.log',
-    'yarnrc.yml',
-    '.yarn',
-]);
-/**
- * True iff `dir` is empty or contains only {@link SAFE_EMPTY_FILES} entries.
- *
- * Because no project manifest (`package.json`, `go.mod`, `Gemfile`, etc.) appears
- * in {@link SAFE_EMPTY_FILES}, the presence of any manifest makes this return
- * false — i.e. an existing project always takes the normal install path.
- */
-export async function isScaffoldableEmptyDir(dir) {
-    const entries = await readdir(dir);
-    return entries.every((entry) => SAFE_EMPTY_FILES.has(entry));
-}
-/**
- * Resolve the package manager for the scaffolded app.
- *
- * Precedence: validated `--pm` override > `npm_config_user_agent` parse > `npm`.
- * An empty directory has no lockfile, so lockfile-based detection does not apply;
- * we read the runner from the user agent instead (e.g. `pnpm dlx` → `pnpm`).
- */
-export function resolvePackageManager(opts) {
-    const { pm, userAgent } = opts;
-    // `--pm` is validated by yargs `choices` upstream; guard again defensively and
-    // fall through on anything unexpected rather than throwing here.
-    if (pm && VALID_PACKAGE_MANAGERS.has(pm)) {
-        return pm;
-    }
-    if (userAgent) {
-        // e.g. "pnpm/8.6.0 npm/? node/v20.0.0 darwin arm64" → "pnpm"
-        const name = userAgent.split(/\s+/)[0]?.split('/')[0];
-        if (name && VALID_PACKAGE_MANAGERS.has(name)) {
-            return name;
-        }
-    }
-    return 'npm';
-}
-/**
- * The pinned `create-next-app` flag set. Kept pure so a unit test can assert the
- * exact array — flag drift across a pinned major is the primary failure mode.
- *
- * v1 scaffolds Next.js only. Multi-framework scaffolding (e.g. a Vite React app
- * via its own `create-*` tool) is a tracked follow-up, not implemented.
- *
- * App Router + TypeScript + ESLint + Tailwind + `src/` + `@/*` alias, installed
- * with the resolved package manager. `--yes` accepts all remaining defaults
- * (including the major's Turbopack default) and prevents interactive hangs.
- */
-export function buildCreateNextAppArgs(pm) {
-    return ['.', '--ts', '--app', '--eslint', '--tailwind', '--src-dir', '--import-alias', '@/*', `--use-${pm}`, '--yes'];
-}
-/**
- * Each package manager's own package runner. Running create-next-app through the
- * resolved PM's runner (instead of always `npx`) means we don't require npm/npx
- * to be on PATH — e.g. a bun-only machine has no `npx`. `yarn dlx` assumes
- * Yarn >= 2 (Berry); a Yarn 1 user would need `--pm npm`.
- */
-const PM_RUNNER = {
-    npm: { bin: 'npx', args: ['--yes'] },
-    pnpm: { bin: 'pnpm', args: ['dlx'] },
-    yarn: { bin: 'yarn', args: ['dlx'] },
-    bun: { bin: 'bunx', args: [] },
-};
-/**
- * Spawn `create-next-app@<pinned> .` in `installDir` via the resolved package
- * manager's runner, streaming output as `scaffold:progress` events. Resolves on
- * exit 0; rejects on non-zero exit or spawn error so the state machine can route
- * to its error state.
- */
-export function runCreateNextApp(opts) {
-    const { installDir, packageManager, emitter } = opts;
-    const runner = PM_RUNNER[packageManager];
-    const args = [
-        ...runner.args,
-        `create-next-app@${CREATE_NEXT_APP_VERSION}`,
-        ...buildCreateNextAppArgs(packageManager),
-    ];
-    return new Promise((resolve, reject) => {
-        const child = spawn(runner.bin, args, {
-            cwd: installDir,
-            env: process.env,
-            ...SPAWN_OPTS,
-        });
-        let stderr = '';
-        const stream = (data) => {
-            emitter.emit('scaffold:progress', { text: data.toString() });
-        };
-        child.stdout?.on('data', stream);
-        child.stderr?.on('data', (data) => {
-            // Bound the buffer at collection time so a pathological failure (e.g. a full
-            // npm resolution trace) can't accumulate hundreds of KB. Progress still streams.
-            if (stderr.length < 2000) {
-                stderr += data.toString();
-            }
-            stream(data);
-        });
-        child.on('close', (code, signal) => {
-            if (code === 0) {
-                resolve();
-            }
-            else {
-                const detail = stderr ? `: ${stderr.trim().slice(0, 2000)}` : '';
-                // code is null when the process was killed by a signal (e.g. SIGTERM from a
-                // timeout layer); surface that instead of masking it as "exited with code 1".
-                const exitInfo = code !== null ? `exited with code ${code}` : `was killed by signal ${signal ?? 'unknown'}`;
-                reject(new Error(`create-next-app ${exitInfo}${detail}`));
-            }
-        });
-        child.on('error', (err) => {
-            reject(err);
-        });
-    });
-}
-//# sourceMappingURL=scaffold.js.map

package/dist/lib/scaffold/scaffold.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"scaffold.js","sourceRoot":"","sources":["../../../src/lib/scaffold/scaffold.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAKrD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAE5C,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAE5G;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IAC3D,WAAW;IACX,MAAM;IACN,gBAAgB;IAChB,YAAY;IACZ,gBAAgB;IAChB,KAAK;IACL,UAAU;IACV,WAAW;IACX,OAAO;IACP,YAAY;IACZ,aAAa;IACb,SAAS;IACT,WAAW;IACX,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,YAAY;IACZ,OAAO;CACR,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,GAAW;IACtD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAyC;IAC7E,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAE/B,+EAA+E;IAC/E,iEAAiE;IACjE,IAAI,EAAE,IAAI,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACzC,OAAO,EAAoB,CAAC;IAC9B,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,6DAA6D;QAC7D,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,IAAI,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAsB,CAAC;QAChC,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAkB;IACvD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AACxH,CAAC;AAED;;;;;GAKG;AACH,MAAM,SAAS,GAA4D;IACzE,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE;IACpC,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;IACpC,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;IACpC,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;CAC/B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAIhC;IACC,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC,cAAc,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG;QACX,GAAG,MAAM,CAAC,IAAI;QACd,mBAAmB,uBAAuB,EAAE;QAC5C,GAAG,sBAAsB,CAAC,cAAc,CAAC;KAC1C,CAAC;IAEF,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE;YACpC,GAAG,EAAE,UAAU;YACf,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,UAAU;SACd,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,MAAM,MAAM,GAAG,CAAC,IAAY,EAAQ,EAAE;YACpC,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC/D,CAAC,CAAC;QAEF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACxC,6EAA6E;YAC7E,iFAAiF;YACjF,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC;gBACzB,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACjC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,4EAA4E;gBAC5E,8EAA8E;gBAC9E,MAAM,QAAQ,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC,wBAAwB,MAAM,IAAI,SAAS,EAAE,CAAC;gBAC5G,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,QAAQ,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { spawn } from 'node:child_process';\nimport { readdir } from 'node:fs/promises';\nimport { SPAWN_OPTS } from '../../utils/platform.js';\nimport type { InstallerEventEmitter } from '../events.js';\n\nexport type PackageManager = 'npm' | 'pnpm' | 'yarn' | 'bun';\n\n/**\n * The `create-next-app` major we pin to. Matches `authkit-nextjs/examples/next`\n * (Next 16). A major float (`@16`) keeps the pinned flag set stable while still\n * receiving patch/minor updates. Re-pin when AuthKit bumps its supported Next major.\n * `@latest` is intentionally avoided — it would reintroduce the flag-drift\n * non-determinism this deterministic step exists to prevent.\n */\nexport const CREATE_NEXT_APP_VERSION = '16';\n\nconst VALID_PACKAGE_MANAGERS: ReadonlySet<string> = new Set<PackageManager>(['npm', 'pnpm', 'yarn', 'bun']);\n\n/**\n * Files that may be present in a directory we still consider \"scaffoldable empty\".\n *\n * INVARIANT: this MUST stay a subset of create-next-app's own `validFiles`\n * (verified against the v{@link CREATE_NEXT_APP_VERSION} tag). If ours is\n * stricter, we simply scaffold less often (safe). If ours were looser,\n * create-next-app would accept our offer and then refuse mid-run.\n *\n * We omit `docs` and `mkdocs.yml` from the upstream list on purpose — their\n * presence usually signals real project content, so we err toward NOT scaffolding.\n * We also omit `README.md`/`.vscode`: they are NOT in create-next-app's list, so a\n * directory containing them is left to the normal (non-scaffold) install path.\n */\nexport const SAFE_EMPTY_FILES: ReadonlySet<string> = new Set([\n  '.DS_Store',\n  '.git',\n  '.gitattributes',\n  '.gitignore',\n  '.gitlab-ci.yml',\n  '.hg',\n  '.hgcheck',\n  '.hgignore',\n  '.idea',\n  '.npmignore',\n  '.travis.yml',\n  'LICENSE',\n  'Thumbs.db',\n  'npm-debug.log',\n  'yarn-debug.log',\n  'yarn-error.log',\n  'yarnrc.yml',\n  '.yarn',\n]);\n\n/**\n * True iff `dir` is empty or contains only {@link SAFE_EMPTY_FILES} entries.\n *\n * Because no project manifest (`package.json`, `go.mod`, `Gemfile`, etc.) appears\n * in {@link SAFE_EMPTY_FILES}, the presence of any manifest makes this return\n * false — i.e. an existing project always takes the normal install path.\n */\nexport async function isScaffoldableEmptyDir(dir: string): Promise<boolean> {\n  const entries = await readdir(dir);\n  return entries.every((entry) => SAFE_EMPTY_FILES.has(entry));\n}\n\n/**\n * Resolve the package manager for the scaffolded app.\n *\n * Precedence: validated `--pm` override > `npm_config_user_agent` parse > `npm`.\n * An empty directory has no lockfile, so lockfile-based detection does not apply;\n * we read the runner from the user agent instead (e.g. `pnpm dlx` → `pnpm`).\n */\nexport function resolvePackageManager(opts: { pm?: string; userAgent?: string }): PackageManager {\n  const { pm, userAgent } = opts;\n\n  // `--pm` is validated by yargs `choices` upstream; guard again defensively and\n  // fall through on anything unexpected rather than throwing here.\n  if (pm && VALID_PACKAGE_MANAGERS.has(pm)) {\n    return pm as PackageManager;\n  }\n\n  if (userAgent) {\n    // e.g. \"pnpm/8.6.0 npm/? node/v20.0.0 darwin arm64\" → \"pnpm\"\n    const name = userAgent.split(/\\s+/)[0]?.split('/')[0];\n    if (name && VALID_PACKAGE_MANAGERS.has(name)) {\n      return name as PackageManager;\n    }\n  }\n\n  return 'npm';\n}\n\n/**\n * The pinned `create-next-app` flag set. Kept pure so a unit test can assert the\n * exact array — flag drift across a pinned major is the primary failure mode.\n *\n * v1 scaffolds Next.js only. Multi-framework scaffolding (e.g. a Vite React app\n * via its own `create-*` tool) is a tracked follow-up, not implemented.\n *\n * App Router + TypeScript + ESLint + Tailwind + `src/` + `@/*` alias, installed\n * with the resolved package manager. `--yes` accepts all remaining defaults\n * (including the major's Turbopack default) and prevents interactive hangs.\n */\nexport function buildCreateNextAppArgs(pm: PackageManager): string[] {\n  return ['.', '--ts', '--app', '--eslint', '--tailwind', '--src-dir', '--import-alias', '@/*', `--use-${pm}`, '--yes'];\n}\n\n/**\n * Each package manager's own package runner. Running create-next-app through the\n * resolved PM's runner (instead of always `npx`) means we don't require npm/npx\n * to be on PATH — e.g. a bun-only machine has no `npx`. `yarn dlx` assumes\n * Yarn >= 2 (Berry); a Yarn 1 user would need `--pm npm`.\n */\nconst PM_RUNNER: Record<PackageManager, { bin: string; args: string[] }> = {\n  npm: { bin: 'npx', args: ['--yes'] },\n  pnpm: { bin: 'pnpm', args: ['dlx'] },\n  yarn: { bin: 'yarn', args: ['dlx'] },\n  bun: { bin: 'bunx', args: [] },\n};\n\n/**\n * Spawn `create-next-app@<pinned> .` in `installDir` via the resolved package\n * manager's runner, streaming output as `scaffold:progress` events. Resolves on\n * exit 0; rejects on non-zero exit or spawn error so the state machine can route\n * to its error state.\n */\nexport function runCreateNextApp(opts: {\n  installDir: string;\n  packageManager: PackageManager;\n  emitter: InstallerEventEmitter;\n}): Promise<void> {\n  const { installDir, packageManager, emitter } = opts;\n  const runner = PM_RUNNER[packageManager];\n  const args = [\n    ...runner.args,\n    `create-next-app@${CREATE_NEXT_APP_VERSION}`,\n    ...buildCreateNextAppArgs(packageManager),\n  ];\n\n  return new Promise<void>((resolve, reject) => {\n    const child = spawn(runner.bin, args, {\n      cwd: installDir,\n      env: process.env,\n      ...SPAWN_OPTS,\n    });\n\n    let stderr = '';\n\n    const stream = (data: Buffer): void => {\n      emitter.emit('scaffold:progress', { text: data.toString() });\n    };\n\n    child.stdout?.on('data', stream);\n    child.stderr?.on('data', (data: Buffer) => {\n      // Bound the buffer at collection time so a pathological failure (e.g. a full\n      // npm resolution trace) can't accumulate hundreds of KB. Progress still streams.\n      if (stderr.length < 2000) {\n        stderr += data.toString();\n      }\n      stream(data);\n    });\n\n    child.on('close', (code, signal) => {\n      if (code === 0) {\n        resolve();\n      } else {\n        const detail = stderr ? `: ${stderr.trim().slice(0, 2000)}` : '';\n        // code is null when the process was killed by a signal (e.g. SIGTERM from a\n        // timeout layer); surface that instead of masking it as \"exited with code 1\".\n        const exitInfo = code !== null ? `exited with code ${code}` : `was killed by signal ${signal ?? 'unknown'}`;\n        reject(new Error(`create-next-app ${exitInfo}${detail}`));\n      }\n    });\n\n    child.on('error', (err) => {\n      reject(err);\n    });\n  });\n}\n"]}

package/dist/lib/settings.d.ts

@@ -1,60 +0,0 @@
-/**
- * Get version from package.json
- */
-export declare function getVersion(): string;
-export interface InstallerConfig {
-    model: string;
-    doctorModel: string;
-    workos: {
-        clientId: string;
-        authkitDomain: string;
-    };
-    telemetry: {
-        enabled: boolean;
-        eventName: string;
-    };
-    proxy: {
-        refreshThresholdMs: number;
-    };
-    nodeVersion: string;
-    logging: {
-        debugMode: boolean;
-    };
-    documentation: {
-        workosDocsUrl: string;
-        dashboardUrl: string;
-        issuesUrl: string;
-    };
-    frameworks: {
-        [key: string]: {
-            port: number;
-            callbackPath: string;
-        };
-    };
-    legacy: {
-        oauthPort: number;
-    };
-    branding: {
-        showAsciiArt: boolean;
-        asciiArt: string;
-        compactAsciiArt: string;
-        useCompact: boolean;
-    };
-}
-/**
- * Get config
- */
-export declare function getConfig(): InstallerConfig;
-/**
- * Get the CLI auth client ID (from config; not env-overridable).
- */
-export declare function getCliAuthClientId(): string;
-/**
- * Get the AuthKit domain.
- * Env var overrides config default.
- *
- * Note: WorkOS service endpoints (API, dashboard, LLM gateway, telemetry)
- * live in utils/urls.ts. AuthKit's domain stays here because it's config-
- * backed rather than derived from the API host.
- */
-export declare function getAuthkitDomain(): string;

package/dist/lib/settings.js

@@ -1,31 +0,0 @@
-import { config, version } from '../cli.config.js';
-/**
- * Get version from package.json
- */
-export function getVersion() {
-    return version;
-}
-/**
- * Get config
- */
-export function getConfig() {
-    return config;
-}
-/**
- * Get the CLI auth client ID (from config; not env-overridable).
- */
-export function getCliAuthClientId() {
-    return config.workos.clientId;
-}
-/**
- * Get the AuthKit domain.
- * Env var overrides config default.
- *
- * Note: WorkOS service endpoints (API, dashboard, LLM gateway, telemetry)
- * live in utils/urls.ts. AuthKit's domain stays here because it's config-
- * backed rather than derived from the API host.
- */
-export function getAuthkitDomain() {
-    return process.env.WORKOS_AUTHKIT_DOMAIN || config.workos.authkitDomain;
-}
-//# sourceMappingURL=settings.js.map

package/dist/lib/settings.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../src/lib/settings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEnD;;GAEG;AACH,MAAM,UAAU,UAAU;IACxB,OAAO,OAAO,CAAC;AACjB,CAAC;AA0CD;;GAEG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;AAChC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;AAC1E,CAAC","sourcesContent":["import { config, version } from '../cli.config.js';\n\n/**\n * Get version from package.json\n */\nexport function getVersion(): string {\n  return version;\n}\n\nexport interface InstallerConfig {\n  model: string;\n  doctorModel: string;\n  workos: {\n    clientId: string;\n    authkitDomain: string;\n  };\n  telemetry: {\n    enabled: boolean;\n    eventName: string;\n  };\n  proxy: {\n    refreshThresholdMs: number;\n  };\n  nodeVersion: string;\n  logging: {\n    debugMode: boolean;\n  };\n  documentation: {\n    workosDocsUrl: string;\n    dashboardUrl: string;\n    issuesUrl: string;\n  };\n  frameworks: {\n    [key: string]: {\n      port: number;\n      callbackPath: string;\n    };\n  };\n  legacy: {\n    oauthPort: number;\n  };\n  branding: {\n    showAsciiArt: boolean;\n    asciiArt: string;\n    compactAsciiArt: string;\n    useCompact: boolean;\n  };\n}\n\n/**\n * Get config\n */\nexport function getConfig(): InstallerConfig {\n  return config;\n}\n\n/**\n * Get the CLI auth client ID (from config; not env-overridable).\n */\nexport function getCliAuthClientId(): string {\n  return config.workos.clientId;\n}\n\n/**\n * Get the AuthKit domain.\n * Env var overrides config default.\n *\n * Note: WorkOS service endpoints (API, dashboard, LLM gateway, telemetry)\n * live in utils/urls.ts. AuthKit's domain stays here because it's config-\n * backed rather than derived from the API host.\n */\nexport function getAuthkitDomain(): string {\n  return process.env.WORKOS_AUTHKIT_DOMAIN || config.workos.authkitDomain;\n}\n"]}

package/dist/lib/staging-api.d.ts

@@ -1,22 +0,0 @@
-/**
- * Staging Environment Credentials API Client
- *
- * Fetches WorkOS staging credentials (client_id, api_key) from the staging API.
- * Requires an access token with 'staging-environment:credentials:read' scope.
- */
-export interface StagingCredentials {
-    clientId: string;
-    apiKey: string;
-}
-export declare class StagingApiError extends Error {
-    readonly statusCode?: number | undefined;
-    constructor(message: string, statusCode?: number | undefined);
-}
-/**
- * Fetch staging environment credentials from the WorkOS API.
- *
- * @param accessToken - Bearer token with staging-environment:credentials:read scope
- * @returns StagingCredentials containing clientId and apiKey
- * @throws StagingApiError on auth failure, permission denied, or other HTTP errors
- */
-export declare function fetchStagingCredentials(accessToken: string): Promise<StagingCredentials>;