workos 0.18.0 → 0.20.1

package/dist/commands/audit-log.js

@@ -1,155 +0,0 @@
-import chalk from 'chalk';
-import { readFile } from 'node:fs/promises';
-import { createWorkOSClient } from '../lib/workos-client.js';
-import { formatTable } from '../utils/table.js';
-import { outputJson, outputSuccess, isJsonMode } from '../utils/output.js';
-import { createApiErrorHandler } from '../lib/api-error-handler.js';
-const handleApiError = createApiErrorHandler('AuditLog');
-export async function runAuditLogCreateEvent(orgId, flags, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        let event;
-        if (flags.file) {
-            const raw = await readFile(flags.file, 'utf-8');
-            event = JSON.parse(raw);
-        }
-        else {
-            if (!flags.action || !flags.actorType || !flags.actorId) {
-                throw new Error('--action, --actor-type, and --actor-id are required (or use --file)');
-            }
-            event = {
-                action: flags.action,
-                occurredAt: flags.occurredAt ? new Date(flags.occurredAt) : new Date(),
-                actor: {
-                    id: flags.actorId,
-                    type: flags.actorType,
-                    ...(flags.actorName && { name: flags.actorName }),
-                },
-                targets: flags.targets ? JSON.parse(flags.targets) : [],
-                context: flags.context ? JSON.parse(flags.context) : { location: '0.0.0.0' },
-                ...(flags.metadata && { metadata: JSON.parse(flags.metadata) }),
-            };
-        }
-        await client.sdk.auditLogs.createEvent(orgId, event);
-        outputSuccess('Created audit log event', { organization_id: orgId, action: event.action });
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-const POLL_MAX_ATTEMPTS = 60;
-const POLL_INITIAL_DELAY_MS = 1000;
-const POLL_MAX_DELAY_MS = 30000;
-export async function runAuditLogExport(options, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        const exportResult = await client.sdk.auditLogs.createExport({
-            organizationId: options.organizationId,
-            rangeStart: new Date(options.rangeStart),
-            rangeEnd: new Date(options.rangeEnd),
-            ...(options.actions && { actions: options.actions }),
-            ...(options.actorNames && { actorNames: options.actorNames }),
-            ...(options.actorIds && { actorIds: options.actorIds }),
-            ...(options.targets && { targets: options.targets }),
-        });
-        let current = exportResult;
-        let delay = POLL_INITIAL_DELAY_MS;
-        for (let attempt = 0; attempt < POLL_MAX_ATTEMPTS && current.state === 'pending'; attempt++) {
-            if (!isJsonMode()) {
-                process.stderr.write('.');
-            }
-            await new Promise((resolve) => setTimeout(resolve, delay));
-            delay = Math.min(delay * 2, POLL_MAX_DELAY_MS);
-            current = await client.sdk.auditLogs.getExport(current.id);
-        }
-        if (!isJsonMode() && current.state !== 'pending') {
-            process.stderr.write('\n');
-        }
-        if (current.state === 'error') {
-            throw new Error(`Export failed (id: ${current.id})`);
-        }
-        if (current.state === 'pending') {
-            throw new Error(`Export timed out (id: ${current.id}). Check status later.`);
-        }
-        if (isJsonMode()) {
-            outputJson(current);
-            return;
-        }
-        console.log(chalk.green('Export ready'));
-        console.log(`  ID:  ${current.id}`);
-        if (current.url) {
-            console.log(`  URL: ${current.url}`);
-        }
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-// ── list-actions ──────────────────────────────────────────────────────
-export async function runAuditLogListActions(apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        const result = await client.auditLogs.listActions();
-        if (isJsonMode()) {
-            outputJson(result);
-            return;
-        }
-        if (result.data.length === 0) {
-            console.log('No audit log actions found.');
-            return;
-        }
-        const rows = result.data.map((item) => [item.action]);
-        console.log(formatTable([{ header: 'Action Name' }], rows));
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-// ── get-schema ────────────────────────────────────────────────────────
-export async function runAuditLogGetSchema(action, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        const result = await client.auditLogs.getSchema(action);
-        if (isJsonMode()) {
-            outputJson(result);
-            return;
-        }
-        console.log(chalk.bold(`Schema for ${action}`));
-        console.log(JSON.stringify(result, null, 2));
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-// ── create-schema ─────────────────────────────────────────────────────
-export async function runAuditLogCreateSchema(action, filePath, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        const raw = await readFile(filePath, 'utf-8');
-        const schema = JSON.parse(raw);
-        const result = await client.sdk.auditLogs.createSchema({
-            action,
-            ...schema,
-        });
-        outputSuccess('Created audit log schema', result);
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-// ── get-retention ─────────────────────────────────────────────────────
-export async function runAuditLogGetRetention(orgId, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        const result = await client.auditLogs.getRetention(orgId);
-        if (isJsonMode()) {
-            outputJson(result);
-            return;
-        }
-        console.log(`Retention period: ${chalk.bold(String(result.retention_period_in_days))} days`);
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-//# sourceMappingURL=audit-log.js.map

package/dist/commands/audit-log.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit-log.js","sourceRoot":"","sources":["../../src/commands/audit-log.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;AAgBzD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAa,EACb,KAA+B,EAC/B,MAAc,EACd,OAAgB;IAEhB,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,IAAI,KAAiC,CAAC;QAEtC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAChD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;YACzF,CAAC;YACD,KAAK,GAAG;gBACN,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE;gBACtE,KAAK,EAAE;oBACL,EAAE,EAAE,KAAK,CAAC,OAAO;oBACjB,IAAI,EAAE,KAAK,CAAC,SAAS;oBACrB,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;iBAClD;gBACD,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;gBACvD,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE;gBAC5E,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;aAChE,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACrD,aAAa,CAAC,yBAAyB,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAcD,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAA8B,EAC9B,MAAc,EACd,OAAgB;IAEhB,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC;YAC3D,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,UAAU,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,QAAQ,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YACpC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;YACpD,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;YAC7D,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvD,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;SACrD,CAAC,CAAC;QAEH,IAAI,OAAO,GAAG,YAAY,CAAC;QAC3B,IAAI,KAAK,GAAG,qBAAqB,CAAC;QAElC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;YAC5F,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;gBAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YAC3D,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;YAC/C,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAAc,EAAE,OAAgB;IAC3E,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QAEpD,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAc,EAAE,MAAc,EAAE,OAAgB;IACzF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAExD,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAc,EACd,QAAgB,EAChB,MAAc,EACd,OAAgB;IAEhB,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC;YACrD,MAAM;YACN,GAAG,MAAM;SACV,CAAC,CAAC;QAEH,aAAa,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAAa,EAAE,MAAc,EAAE,OAAgB;IAC3F,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAE1D,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,CAAC;IAC/F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC","sourcesContent":["import chalk from 'chalk';\nimport { readFile } from 'node:fs/promises';\nimport type { CreateAuditLogEventOptions } from '@workos-inc/node';\nimport { createWorkOSClient } from '../lib/workos-client.js';\nimport { formatTable } from '../utils/table.js';\nimport { outputJson, outputSuccess, isJsonMode } from '../utils/output.js';\nimport { createApiErrorHandler } from '../lib/api-error-handler.js';\n\nconst handleApiError = createApiErrorHandler('AuditLog');\n\n// ── create-event ──────────────────────────────────────────────────────\n\nexport interface AuditLogCreateEventFlags {\n  action?: string;\n  actorType?: string;\n  actorId?: string;\n  actorName?: string;\n  targets?: string;\n  context?: string;\n  metadata?: string;\n  occurredAt?: string;\n  file?: string;\n}\n\nexport async function runAuditLogCreateEvent(\n  orgId: string,\n  flags: AuditLogCreateEventFlags,\n  apiKey: string,\n  baseUrl?: string,\n): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    let event: CreateAuditLogEventOptions;\n\n    if (flags.file) {\n      const raw = await readFile(flags.file, 'utf-8');\n      event = JSON.parse(raw);\n    } else {\n      if (!flags.action || !flags.actorType || !flags.actorId) {\n        throw new Error('--action, --actor-type, and --actor-id are required (or use --file)');\n      }\n      event = {\n        action: flags.action,\n        occurredAt: flags.occurredAt ? new Date(flags.occurredAt) : new Date(),\n        actor: {\n          id: flags.actorId,\n          type: flags.actorType,\n          ...(flags.actorName && { name: flags.actorName }),\n        },\n        targets: flags.targets ? JSON.parse(flags.targets) : [],\n        context: flags.context ? JSON.parse(flags.context) : { location: '0.0.0.0' },\n        ...(flags.metadata && { metadata: JSON.parse(flags.metadata) }),\n      };\n    }\n\n    await client.sdk.auditLogs.createEvent(orgId, event);\n    outputSuccess('Created audit log event', { organization_id: orgId, action: event.action });\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\n// ── export ────────────────────────────────────────────────────────────\n\nexport interface AuditLogExportOptions {\n  organizationId: string;\n  rangeStart: string;\n  rangeEnd: string;\n  actions?: string[];\n  actorNames?: string[];\n  actorIds?: string[];\n  targets?: string[];\n}\n\nconst POLL_MAX_ATTEMPTS = 60;\nconst POLL_INITIAL_DELAY_MS = 1000;\nconst POLL_MAX_DELAY_MS = 30000;\n\nexport async function runAuditLogExport(\n  options: AuditLogExportOptions,\n  apiKey: string,\n  baseUrl?: string,\n): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const exportResult = await client.sdk.auditLogs.createExport({\n      organizationId: options.organizationId,\n      rangeStart: new Date(options.rangeStart),\n      rangeEnd: new Date(options.rangeEnd),\n      ...(options.actions && { actions: options.actions }),\n      ...(options.actorNames && { actorNames: options.actorNames }),\n      ...(options.actorIds && { actorIds: options.actorIds }),\n      ...(options.targets && { targets: options.targets }),\n    });\n\n    let current = exportResult;\n    let delay = POLL_INITIAL_DELAY_MS;\n\n    for (let attempt = 0; attempt < POLL_MAX_ATTEMPTS && current.state === 'pending'; attempt++) {\n      if (!isJsonMode()) {\n        process.stderr.write('.');\n      }\n      await new Promise((resolve) => setTimeout(resolve, delay));\n      delay = Math.min(delay * 2, POLL_MAX_DELAY_MS);\n      current = await client.sdk.auditLogs.getExport(current.id);\n    }\n\n    if (!isJsonMode() && current.state !== 'pending') {\n      process.stderr.write('\\n');\n    }\n\n    if (current.state === 'error') {\n      throw new Error(`Export failed (id: ${current.id})`);\n    }\n\n    if (current.state === 'pending') {\n      throw new Error(`Export timed out (id: ${current.id}). Check status later.`);\n    }\n\n    if (isJsonMode()) {\n      outputJson(current);\n      return;\n    }\n\n    console.log(chalk.green('Export ready'));\n    console.log(`  ID:  ${current.id}`);\n    if (current.url) {\n      console.log(`  URL: ${current.url}`);\n    }\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\n// ── list-actions ──────────────────────────────────────────────────────\n\nexport async function runAuditLogListActions(apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const result = await client.auditLogs.listActions();\n\n    if (isJsonMode()) {\n      outputJson(result);\n      return;\n    }\n\n    if (result.data.length === 0) {\n      console.log('No audit log actions found.');\n      return;\n    }\n\n    const rows = result.data.map((item) => [item.action]);\n    console.log(formatTable([{ header: 'Action Name' }], rows));\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\n// ── get-schema ────────────────────────────────────────────────────────\n\nexport async function runAuditLogGetSchema(action: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const result = await client.auditLogs.getSchema(action);\n\n    if (isJsonMode()) {\n      outputJson(result);\n      return;\n    }\n\n    console.log(chalk.bold(`Schema for ${action}`));\n    console.log(JSON.stringify(result, null, 2));\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\n// ── create-schema ─────────────────────────────────────────────────────\n\nexport async function runAuditLogCreateSchema(\n  action: string,\n  filePath: string,\n  apiKey: string,\n  baseUrl?: string,\n): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const raw = await readFile(filePath, 'utf-8');\n    const schema = JSON.parse(raw);\n\n    const result = await client.sdk.auditLogs.createSchema({\n      action,\n      ...schema,\n    });\n\n    outputSuccess('Created audit log schema', result);\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\n// ── get-retention ─────────────────────────────────────────────────────\n\nexport async function runAuditLogGetRetention(orgId: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const result = await client.auditLogs.getRetention(orgId);\n\n    if (isJsonMode()) {\n      outputJson(result);\n      return;\n    }\n\n    console.log(`Retention period: ${chalk.bold(String(result.retention_period_in_days))} days`);\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n"]}

package/dist/commands/auth-status.d.ts

@@ -1 +0,0 @@
-export declare function runAuthStatus(): Promise<void>;

package/dist/commands/auth-status.js

@@ -1,57 +0,0 @@
-import chalk from 'chalk';
-import { getCredentials, isTokenExpired } from '../lib/credentials.js';
-import { getActiveEnvironment } from '../lib/config-store.js';
-import { isJsonMode, outputJson } from '../utils/output.js';
-import { formatWorkOSCommand } from '../utils/command-invocation.js';
-function formatTimeRemaining(ms) {
-    if (ms <= 0)
-        return 'expired';
-    const seconds = Math.floor(ms / 1000);
-    const minutes = Math.floor(seconds / 60);
-    const hours = Math.floor(minutes / 60);
-    if (hours > 0)
-        return `${hours}h ${minutes % 60}m`;
-    if (minutes > 0)
-        return `${minutes}m ${seconds % 60}s`;
-    return `${seconds}s`;
-}
-export async function runAuthStatus() {
-    const creds = getCredentials();
-    const activeEnv = getActiveEnvironment();
-    if (!creds) {
-        if (isJsonMode()) {
-            outputJson({ authenticated: false });
-            return;
-        }
-        console.log(chalk.yellow('Not logged in'));
-        console.log(chalk.dim(`Run \`${formatWorkOSCommand('auth login')}\` to authenticate`));
-        return;
-    }
-    const expired = isTokenExpired(creds);
-    const timeRemaining = creds.expiresAt - Date.now();
-    if (isJsonMode()) {
-        outputJson({
-            authenticated: true,
-            email: creds.email ?? null,
-            userId: creds.userId,
-            tokenExpired: expired,
-            tokenExpiresAt: new Date(creds.expiresAt).toISOString(),
-            tokenExpiresIn: expired ? null : formatTimeRemaining(timeRemaining),
-            hasRefreshToken: !!creds.refreshToken,
-            activeEnvironment: activeEnv ? { name: activeEnv.name, type: activeEnv.type } : null,
-        });
-        return;
-    }
-    console.log(chalk.green(`Logged in as ${creds.email ?? creds.userId}`));
-    if (expired) {
-        console.log(chalk.yellow(`Token expired ${formatTimeRemaining(-timeRemaining)} ago`));
-    }
-    else {
-        console.log(chalk.dim(`Token expires in ${formatTimeRemaining(timeRemaining)}`));
-    }
-    console.log(chalk.dim(`Refresh token: ${creds.refreshToken ? 'present' : 'absent'}`));
-    if (activeEnv) {
-        console.log(chalk.dim(`Environment: ${activeEnv.name} (${activeEnv.type})`));
-    }
-}
-//# sourceMappingURL=auth-status.js.map

package/dist/commands/auth-status.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-status.js","sourceRoot":"","sources":["../../src/commands/auth-status.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE,SAAS,mBAAmB,CAAC,EAAU;IACrC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACvC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,GAAG,KAAK,KAAK,OAAO,GAAG,EAAE,GAAG,CAAC;IACnD,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,GAAG,OAAO,KAAK,OAAO,GAAG,EAAE,GAAG,CAAC;IACvD,OAAO,GAAG,OAAO,GAAG,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;IAEzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,mBAAmB,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACvF,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEnD,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC;YACT,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,YAAY,EAAE,OAAO;YACrB,cAAc,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YACvD,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,aAAa,CAAC;YACnE,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY;YACrC,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;SACrF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAExE,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,mBAAmB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,mBAAmB,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAEtF,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC","sourcesContent":["import chalk from 'chalk';\nimport { getCredentials, isTokenExpired } from '../lib/credentials.js';\nimport { getActiveEnvironment } from '../lib/config-store.js';\nimport { isJsonMode, outputJson } from '../utils/output.js';\nimport { formatWorkOSCommand } from '../utils/command-invocation.js';\n\nfunction formatTimeRemaining(ms: number): string {\n  if (ms <= 0) return 'expired';\n  const seconds = Math.floor(ms / 1000);\n  const minutes = Math.floor(seconds / 60);\n  const hours = Math.floor(minutes / 60);\n  if (hours > 0) return `${hours}h ${minutes % 60}m`;\n  if (minutes > 0) return `${minutes}m ${seconds % 60}s`;\n  return `${seconds}s`;\n}\n\nexport async function runAuthStatus(): Promise<void> {\n  const creds = getCredentials();\n  const activeEnv = getActiveEnvironment();\n\n  if (!creds) {\n    if (isJsonMode()) {\n      outputJson({ authenticated: false });\n      return;\n    }\n    console.log(chalk.yellow('Not logged in'));\n    console.log(chalk.dim(`Run \\`${formatWorkOSCommand('auth login')}\\` to authenticate`));\n    return;\n  }\n\n  const expired = isTokenExpired(creds);\n  const timeRemaining = creds.expiresAt - Date.now();\n\n  if (isJsonMode()) {\n    outputJson({\n      authenticated: true,\n      email: creds.email ?? null,\n      userId: creds.userId,\n      tokenExpired: expired,\n      tokenExpiresAt: new Date(creds.expiresAt).toISOString(),\n      tokenExpiresIn: expired ? null : formatTimeRemaining(timeRemaining),\n      hasRefreshToken: !!creds.refreshToken,\n      activeEnvironment: activeEnv ? { name: activeEnv.name, type: activeEnv.type } : null,\n    });\n    return;\n  }\n\n  console.log(chalk.green(`Logged in as ${creds.email ?? creds.userId}`));\n\n  if (expired) {\n    console.log(chalk.yellow(`Token expired ${formatTimeRemaining(-timeRemaining)} ago`));\n  } else {\n    console.log(chalk.dim(`Token expires in ${formatTimeRemaining(timeRemaining)}`));\n  }\n\n  console.log(chalk.dim(`Refresh token: ${creds.refreshToken ? 'present' : 'absent'}`));\n\n  if (activeEnv) {\n    console.log(chalk.dim(`Environment: ${activeEnv.name} (${activeEnv.type})`));\n  }\n}\n"]}

package/dist/commands/claim.d.ts

@@ -1,11 +0,0 @@
-/**
- * `workos env claim` — claim an unclaimed environment.
- *
- * Reads claim token from active environment, generates a nonce via
- * createClaimNonce(), opens browser to dashboard claim URL, and polls
- * until the environment is claimed.
- */
-/**
- * Run the claim flow.
- */
-export declare function runClaim(): Promise<void>;

package/dist/commands/claim.js

@@ -1,131 +0,0 @@
-/**
- * `workos env claim` — claim an unclaimed environment.
- *
- * Reads claim token from active environment, generates a nonce via
- * createClaimNonce(), opens browser to dashboard claim URL, and polls
- * until the environment is claimed.
- */
-import open from 'open';
-import clack from '../utils/clack.js';
-import { getActiveEnvironment, isUnclaimedEnvironment, markEnvironmentClaimed } from '../lib/config-store.js';
-import { createClaimNonce, UnclaimedEnvApiError } from '../lib/unclaimed-env-api.js';
-import { observeHostFailure } from '../lib/host-probe.js';
-import { logInfo, logError } from '../utils/debug.js';
-import { isJsonMode, outputJson, exitWithError } from '../utils/output.js';
-import { isAgentMode, isCiMode } from '../utils/interaction-mode.js';
-import { sleep } from '../lib/helper-functions.js';
-import { formatWorkOSCommand } from '../utils/command-invocation.js';
-const POLL_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes
-const POLL_INTERVAL_MS = 5_000; // 5 seconds
-const MAX_CONSECUTIVE_FAILURES = 10;
-/**
- * Run the claim flow.
- */
-export async function runClaim() {
-    const activeEnv = getActiveEnvironment();
-    if (!activeEnv || !isUnclaimedEnvironment(activeEnv)) {
-        if (isJsonMode()) {
-            outputJson({ status: 'no_unclaimed_environment', message: 'No unclaimed environment found. Nothing to claim.' });
-        }
-        else {
-            clack.log.info('No unclaimed environment found. Nothing to claim.');
-        }
-        return;
-    }
-    // claimToken and clientId guaranteed present by UnclaimedEnvironmentConfig
-    logInfo('[claim] Starting claim flow for environment:', activeEnv.name);
-    try {
-        clack.log.step('Generating claim link...');
-        const result = await createClaimNonce(activeEnv.clientId, activeEnv.claimToken);
-        if (result.alreadyClaimed) {
-            markEnvironmentClaimed();
-            if (isJsonMode()) {
-                outputJson({ status: 'already_claimed', message: 'Environment already claimed!' });
-            }
-            else {
-                clack.log.success('Environment already claimed!');
-                clack.log.info(`Run \`${formatWorkOSCommand('auth login')}\` to connect your account.`);
-            }
-            return;
-        }
-        const claimUrl = `https://dashboard.workos.com/claim?nonce=${result.nonce}`;
-        if (isJsonMode()) {
-            outputJson({ status: 'claim_url', claimUrl, nonce: result.nonce });
-            return;
-        }
-        if (isCiMode()) {
-            exitWithError({
-                code: 'unsupported_in_ci',
-                message: 'Environment claim requires opening the claim URL outside CI.',
-                details: { claimUrl, nonce: result.nonce },
-            });
-        }
-        clack.log.info(`Open this URL to claim your environment:\n\n  ${claimUrl}`);
-        try {
-            await open(claimUrl, { wait: false });
-            if (isAgentMode()) {
-                clack.log.info('Browser launch attempted. If it did not open on the host, use the URL above.');
-            }
-            else {
-                clack.log.info('Browser opened automatically');
-            }
-        }
-        catch (openError) {
-            observeHostFailure('browser-launch', openError, {
-                operation: 'open',
-                target: claimUrl,
-                label: 'environment claim browser',
-            });
-            logError('[claim] Failed to open browser:', openError instanceof Error ? openError.message : String(openError));
-            clack.log.info('Could not open browser — open the URL above manually.');
-        }
-        // Poll for claim completion
-        const spinner = clack.spinner();
-        spinner.start('Waiting for claim...');
-        const startTime = Date.now();
-        let consecutiveFailures = 0;
-        while (Date.now() - startTime < POLL_TIMEOUT_MS) {
-            await sleep(POLL_INTERVAL_MS);
-            try {
-                const check = await createClaimNonce(activeEnv.clientId, activeEnv.claimToken);
-                if (check.alreadyClaimed) {
-                    spinner.stop('Environment claimed!');
-                    markEnvironmentClaimed();
-                    clack.log.info(`Run \`${formatWorkOSCommand('auth login')}\` to connect your account.`);
-                    return;
-                }
-                consecutiveFailures = 0;
-            }
-            catch (pollError) {
-                const statusCode = pollError instanceof UnclaimedEnvApiError ? pollError.statusCode : undefined;
-                if (statusCode === 401) {
-                    // 401 means the server invalidated the claim token — this happens
-                    // when the environment is claimed. Safe to promote to sandbox.
-                    spinner.stop('Claim token is invalid or expired.');
-                    markEnvironmentClaimed();
-                    clack.log.warn(`Run \`${formatWorkOSCommand('auth login')}\` to set up your environment.`);
-                    return;
-                }
-                consecutiveFailures++;
-                logError('[claim] Poll error:', pollError instanceof Error ? pollError.message : 'Unknown');
-                if (consecutiveFailures >= MAX_CONSECUTIVE_FAILURES) {
-                    spinner.stop('Too many connection failures');
-                    clack.log.error(`Polling failed ${consecutiveFailures} times in a row. Check your network and try again.\n` +
-                        `You can also complete the claim at: ${claimUrl}`);
-                    return;
-                }
-                if (consecutiveFailures >= 3) {
-                    spinner.message('Still waiting... (connection issues detected)');
-                }
-            }
-        }
-        spinner.stop('Claim timed out');
-        clack.log.info('Complete the claim in your browser, then run `workos env list` to verify.');
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : 'Unknown error';
-        logError('[claim] Error:', message);
-        exitWithError({ code: 'claim_failed', message: `Claim failed: ${message}` });
-    }
-}
-//# sourceMappingURL=claim.js.map

package/dist/commands/claim.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"claim.js","sourceRoot":"","sources":["../../src/commands/claim.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,KAAK,MAAM,mBAAmB,CAAC;AACtC,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAC9G,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AACnD,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,YAAY;AAC5C,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;IAEzC,IAAI,CAAC,SAAS,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC,CAAC;QACnH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACtE,CAAC;QACD,OAAO;IACT,CAAC;IAED,2EAA2E;IAE3E,OAAO,CAAC,8CAA8C,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAExE,IAAI,CAAC;QACH,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;QAEhF,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,sBAAsB,EAAE,CAAC;YACzB,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,UAAU,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;YACrF,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;gBAClD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,mBAAmB,CAAC,YAAY,CAAC,6BAA6B,CAAC,CAAC;YAC1F,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,4CAA4C,MAAM,CAAC,KAAK,EAAE,CAAC;QAE5E,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,EAAE,EAAE,CAAC;YACf,aAAa,CAAC;gBACZ,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,8DAA8D;gBACvE,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,iDAAiD,QAAQ,EAAE,CAAC,CAAC;QAE5E,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtC,IAAI,WAAW,EAAE,EAAE,CAAC;gBAClB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;YACjG,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,kBAAkB,CAAC,gBAAgB,EAAE,SAAS,EAAE;gBAC9C,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,2BAA2B;aACnC,CAAC,CAAC;YACH,QAAQ,CAAC,iCAAiC,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAChH,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QAC1E,CAAC;QAED,4BAA4B;QAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAEtC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,mBAAmB,GAAG,CAAC,CAAC;QAE5B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,eAAe,EAAE,CAAC;YAChD,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;gBAC/E,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;oBACzB,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;oBACrC,sBAAsB,EAAE,CAAC;oBACzB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,mBAAmB,CAAC,YAAY,CAAC,6BAA6B,CAAC,CAAC;oBACxF,OAAO;gBACT,CAAC;gBACD,mBAAmB,GAAG,CAAC,CAAC;YAC1B,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,MAAM,UAAU,GAAG,SAAS,YAAY,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;gBAChG,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;oBACvB,kEAAkE;oBAClE,+DAA+D;oBAC/D,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;oBACnD,sBAAsB,EAAE,CAAC;oBACzB,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,mBAAmB,CAAC,YAAY,CAAC,gCAAgC,CAAC,CAAC;oBAC3F,OAAO;gBACT,CAAC;gBACD,mBAAmB,EAAE,CAAC;gBACtB,QAAQ,CAAC,qBAAqB,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC5F,IAAI,mBAAmB,IAAI,wBAAwB,EAAE,CAAC;oBACpD,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;oBAC7C,KAAK,CAAC,GAAG,CAAC,KAAK,CACb,kBAAkB,mBAAmB,sDAAsD;wBACzF,uCAAuC,QAAQ,EAAE,CACpD,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,IAAI,mBAAmB,IAAI,CAAC,EAAE,CAAC;oBAC7B,OAAO,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IAC9F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACzE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACpC,aAAa,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,iBAAiB,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC","sourcesContent":["/**\n * `workos env claim` — claim an unclaimed environment.\n *\n * Reads claim token from active environment, generates a nonce via\n * createClaimNonce(), opens browser to dashboard claim URL, and polls\n * until the environment is claimed.\n */\n\nimport open from 'open';\nimport clack from '../utils/clack.js';\nimport { getActiveEnvironment, isUnclaimedEnvironment, markEnvironmentClaimed } from '../lib/config-store.js';\nimport { createClaimNonce, UnclaimedEnvApiError } from '../lib/unclaimed-env-api.js';\nimport { observeHostFailure } from '../lib/host-probe.js';\nimport { logInfo, logError } from '../utils/debug.js';\nimport { isJsonMode, outputJson, exitWithError } from '../utils/output.js';\nimport { isAgentMode, isCiMode } from '../utils/interaction-mode.js';\nimport { sleep } from '../lib/helper-functions.js';\nimport { formatWorkOSCommand } from '../utils/command-invocation.js';\n\nconst POLL_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes\nconst POLL_INTERVAL_MS = 5_000; // 5 seconds\nconst MAX_CONSECUTIVE_FAILURES = 10;\n\n/**\n * Run the claim flow.\n */\nexport async function runClaim(): Promise<void> {\n  const activeEnv = getActiveEnvironment();\n\n  if (!activeEnv || !isUnclaimedEnvironment(activeEnv)) {\n    if (isJsonMode()) {\n      outputJson({ status: 'no_unclaimed_environment', message: 'No unclaimed environment found. Nothing to claim.' });\n    } else {\n      clack.log.info('No unclaimed environment found. Nothing to claim.');\n    }\n    return;\n  }\n\n  // claimToken and clientId guaranteed present by UnclaimedEnvironmentConfig\n\n  logInfo('[claim] Starting claim flow for environment:', activeEnv.name);\n\n  try {\n    clack.log.step('Generating claim link...');\n\n    const result = await createClaimNonce(activeEnv.clientId, activeEnv.claimToken);\n\n    if (result.alreadyClaimed) {\n      markEnvironmentClaimed();\n      if (isJsonMode()) {\n        outputJson({ status: 'already_claimed', message: 'Environment already claimed!' });\n      } else {\n        clack.log.success('Environment already claimed!');\n        clack.log.info(`Run \\`${formatWorkOSCommand('auth login')}\\` to connect your account.`);\n      }\n      return;\n    }\n\n    const claimUrl = `https://dashboard.workos.com/claim?nonce=${result.nonce}`;\n\n    if (isJsonMode()) {\n      outputJson({ status: 'claim_url', claimUrl, nonce: result.nonce });\n      return;\n    }\n\n    if (isCiMode()) {\n      exitWithError({\n        code: 'unsupported_in_ci',\n        message: 'Environment claim requires opening the claim URL outside CI.',\n        details: { claimUrl, nonce: result.nonce },\n      });\n    }\n\n    clack.log.info(`Open this URL to claim your environment:\\n\\n  ${claimUrl}`);\n\n    try {\n      await open(claimUrl, { wait: false });\n      if (isAgentMode()) {\n        clack.log.info('Browser launch attempted. If it did not open on the host, use the URL above.');\n      } else {\n        clack.log.info('Browser opened automatically');\n      }\n    } catch (openError) {\n      observeHostFailure('browser-launch', openError, {\n        operation: 'open',\n        target: claimUrl,\n        label: 'environment claim browser',\n      });\n      logError('[claim] Failed to open browser:', openError instanceof Error ? openError.message : String(openError));\n      clack.log.info('Could not open browser — open the URL above manually.');\n    }\n\n    // Poll for claim completion\n    const spinner = clack.spinner();\n    spinner.start('Waiting for claim...');\n\n    const startTime = Date.now();\n    let consecutiveFailures = 0;\n\n    while (Date.now() - startTime < POLL_TIMEOUT_MS) {\n      await sleep(POLL_INTERVAL_MS);\n      try {\n        const check = await createClaimNonce(activeEnv.clientId, activeEnv.claimToken);\n        if (check.alreadyClaimed) {\n          spinner.stop('Environment claimed!');\n          markEnvironmentClaimed();\n          clack.log.info(`Run \\`${formatWorkOSCommand('auth login')}\\` to connect your account.`);\n          return;\n        }\n        consecutiveFailures = 0;\n      } catch (pollError) {\n        const statusCode = pollError instanceof UnclaimedEnvApiError ? pollError.statusCode : undefined;\n        if (statusCode === 401) {\n          // 401 means the server invalidated the claim token — this happens\n          // when the environment is claimed. Safe to promote to sandbox.\n          spinner.stop('Claim token is invalid or expired.');\n          markEnvironmentClaimed();\n          clack.log.warn(`Run \\`${formatWorkOSCommand('auth login')}\\` to set up your environment.`);\n          return;\n        }\n        consecutiveFailures++;\n        logError('[claim] Poll error:', pollError instanceof Error ? pollError.message : 'Unknown');\n        if (consecutiveFailures >= MAX_CONSECUTIVE_FAILURES) {\n          spinner.stop('Too many connection failures');\n          clack.log.error(\n            `Polling failed ${consecutiveFailures} times in a row. Check your network and try again.\\n` +\n              `You can also complete the claim at: ${claimUrl}`,\n          );\n          return;\n        }\n        if (consecutiveFailures >= 3) {\n          spinner.message('Still waiting... (connection issues detected)');\n        }\n      }\n    }\n\n    spinner.stop('Claim timed out');\n    clack.log.info('Complete the claim in your browser, then run `workos env list` to verify.');\n  } catch (error) {\n    const message = error instanceof Error ? error.message : 'Unknown error';\n    logError('[claim] Error:', message);\n    exitWithError({ code: 'claim_failed', message: `Claim failed: ${message}` });\n  }\n}\n"]}

package/dist/commands/config.d.ts

@@ -1,3 +0,0 @@
-export declare function runConfigRedirectAdd(uri: string, apiKey: string, baseUrl?: string): Promise<void>;
-export declare function runConfigCorsAdd(origin: string, apiKey: string, baseUrl?: string): Promise<void>;
-export declare function runConfigHomepageUrlSet(url: string, apiKey: string, baseUrl?: string): Promise<void>;

package/dist/commands/config.js

@@ -1,54 +0,0 @@
-import chalk from 'chalk';
-import { createWorkOSClient } from '../lib/workos-client.js';
-import { outputSuccess, isJsonMode } from '../utils/output.js';
-import { createApiErrorHandler } from '../lib/api-error-handler.js';
-const handleApiError = createApiErrorHandler('Config');
-export async function runConfigRedirectAdd(uri, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        const result = await client.redirectUris.add(uri);
-        if (result.alreadyExists) {
-            if (isJsonMode()) {
-                outputSuccess('Redirect URI already exists', { uri, alreadyExists: true });
-            }
-            else {
-                console.log(chalk.yellow('Redirect URI already exists (no change)'));
-            }
-            return;
-        }
-        outputSuccess('Added redirect URI', { uri });
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-export async function runConfigCorsAdd(origin, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        const result = await client.corsOrigins.add(origin);
-        if (result.alreadyExists) {
-            if (isJsonMode()) {
-                outputSuccess('CORS origin already exists', { origin, alreadyExists: true });
-            }
-            else {
-                console.log(chalk.yellow('CORS origin already exists (no change)'));
-            }
-            return;
-        }
-        outputSuccess('Added CORS origin', { origin });
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-export async function runConfigHomepageUrlSet(url, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        await client.homepageUrl.set(url);
-        outputSuccess('Set homepage URL', { url });
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-//# sourceMappingURL=config.js.map

package/dist/commands/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;AAEvD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAW,EAAE,MAAc,EAAE,OAAgB;IACtF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,aAAa,CAAC,6BAA6B,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAC;YACvE,CAAC;YACD,OAAO;QACT,CAAC;QAED,aAAa,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAc,EAAE,OAAgB;IACrF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEpD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,aAAa,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAAC,CAAC;YACtE,CAAC;YACD,OAAO;QACT,CAAC;QAED,aAAa,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAW,EAAE,MAAc,EAAE,OAAgB;IACzF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,aAAa,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC","sourcesContent":["import chalk from 'chalk';\nimport { createWorkOSClient } from '../lib/workos-client.js';\nimport { outputSuccess, isJsonMode } from '../utils/output.js';\nimport { createApiErrorHandler } from '../lib/api-error-handler.js';\n\nconst handleApiError = createApiErrorHandler('Config');\n\nexport async function runConfigRedirectAdd(uri: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const result = await client.redirectUris.add(uri);\n\n    if (result.alreadyExists) {\n      if (isJsonMode()) {\n        outputSuccess('Redirect URI already exists', { uri, alreadyExists: true });\n      } else {\n        console.log(chalk.yellow('Redirect URI already exists (no change)'));\n      }\n      return;\n    }\n\n    outputSuccess('Added redirect URI', { uri });\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\nexport async function runConfigCorsAdd(origin: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const result = await client.corsOrigins.add(origin);\n\n    if (result.alreadyExists) {\n      if (isJsonMode()) {\n        outputSuccess('CORS origin already exists', { origin, alreadyExists: true });\n      } else {\n        console.log(chalk.yellow('CORS origin already exists (no change)'));\n      }\n      return;\n    }\n\n    outputSuccess('Added CORS origin', { origin });\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\nexport async function runConfigHomepageUrlSet(url: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    await client.homepageUrl.set(url);\n    outputSuccess('Set homepage URL', { url });\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n"]}

package/dist/commands/connection.d.ts

@@ -1,13 +0,0 @@
-export interface ConnectionListOptions {
-    organizationId?: string;
-    connectionType?: string;
-    limit?: number;
-    before?: string;
-    after?: string;
-    order?: string;
-}
-export declare function runConnectionList(options: ConnectionListOptions, apiKey: string, baseUrl?: string): Promise<void>;
-export declare function runConnectionGet(id: string, apiKey: string, baseUrl?: string): Promise<void>;
-export declare function runConnectionDelete(id: string, options: {
-    force?: boolean;
-}, apiKey: string, baseUrl?: string): Promise<void>;

package/dist/commands/connection.js

@@ -1,96 +0,0 @@
-import chalk from 'chalk';
-import { createWorkOSClient } from '../lib/workos-client.js';
-import { formatTable } from '../utils/table.js';
-import { outputSuccess, outputJson, isJsonMode, exitWithError } from '../utils/output.js';
-import { createApiErrorHandler } from '../lib/api-error-handler.js';
-import { isCiMode, isPromptAllowed } from '../utils/interaction-mode.js';
-import clack from '../utils/clack.js';
-const handleApiError = createApiErrorHandler('Connection');
-export async function runConnectionList(options, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        const result = await client.sdk.sso.listConnections({
-            ...(options.organizationId && { organizationId: options.organizationId }),
-            ...(options.connectionType && { connectionType: options.connectionType }),
-            limit: options.limit,
-            before: options.before,
-            after: options.after,
-            order: options.order,
-        });
-        if (isJsonMode()) {
-            outputJson({ data: result.data, listMetadata: result.listMetadata });
-            return;
-        }
-        if (result.data.length === 0) {
-            console.log('No connections found.');
-            return;
-        }
-        const rows = result.data.map((conn) => [
-            conn.id,
-            conn.name,
-            conn.type,
-            conn.organizationId || chalk.dim('-'),
-            conn.state,
-            conn.createdAt,
-        ]);
-        console.log(formatTable([
-            { header: 'ID' },
-            { header: 'Name' },
-            { header: 'Type' },
-            { header: 'Org ID' },
-            { header: 'State' },
-            { header: 'Created' },
-        ], rows));
-        const { before, after } = result.listMetadata;
-        if (before && after) {
-            console.log(chalk.dim(`Before: ${before}  After: ${after}`));
-        }
-        else if (before) {
-            console.log(chalk.dim(`Before: ${before}`));
-        }
-        else if (after) {
-            console.log(chalk.dim(`After: ${after}`));
-        }
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-export async function runConnectionGet(id, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        const connection = await client.sdk.sso.getConnection(id);
-        outputJson(connection);
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-export async function runConnectionDelete(id, options, apiKey, baseUrl) {
-    if (!options.force) {
-        if (!isPromptAllowed()) {
-            exitWithError({
-                code: 'confirmation_required',
-                message: isCiMode()
-                    ? 'Destructive operation requires --force flag in CI mode.'
-                    : 'Destructive operation requires --force flag in agent mode.',
-            });
-        }
-        const confirmed = await clack.confirm({
-            message: `Delete connection ${id}? This cannot be undone.`,
-        });
-        if (clack.isCancel(confirmed) || !confirmed) {
-            console.log('Delete cancelled.');
-            return;
-        }
-    }
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        await client.sdk.sso.deleteConnection(id);
-        outputSuccess('Deleted connection', { id });
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-//# sourceMappingURL=connection.js.map

package/dist/commands/connection.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../src/commands/connection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,KAAK,MAAM,mBAAmB,CAAC;AAEtC,MAAM,cAAc,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;AAW3D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAA8B,EAC9B,MAAc,EACd,OAAgB;IAEhB,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC;YAClD,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;YACzE,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,cAAgC,EAAE,CAAC;YAC3F,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAmC;SACnD,CAAC,CAAC;QAEH,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,EAAE;YACP,IAAI,CAAC,IAAI;YACT,IAAI,CAAC,IAAI;YACT,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YACrC,IAAI,CAAC,KAAK;YACV,IAAI,CAAC,SAAS;SACf,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CACT,WAAW,CACT;YACE,EAAE,MAAM,EAAE,IAAI,EAAE;YAChB,EAAE,MAAM,EAAE,MAAM,EAAE;YAClB,EAAE,MAAM,EAAE,MAAM,EAAE;YAClB,EAAE,MAAM,EAAE,QAAQ,EAAE;YACpB,EAAE,MAAM,EAAE,OAAO,EAAE;YACnB,EAAE,MAAM,EAAE,SAAS,EAAE;SACtB,EACD,IAAI,CACL,CACF,CAAC;QAEF,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC;QAC9C,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,MAAM,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAU,EAAE,MAAc,EAAE,OAAgB;IACjF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC1D,UAAU,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,EAAU,EACV,OAA4B,EAC5B,MAAc,EACd,OAAgB;IAEhB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YACvB,aAAa,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,QAAQ,EAAE;oBACjB,CAAC,CAAC,yDAAyD;oBAC3D,CAAC,CAAC,4DAA4D;aACjE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,qBAAqB,EAAE,0BAA0B;SAC3D,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC1C,aAAa,CAAC,oBAAoB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC","sourcesContent":["import chalk from 'chalk';\nimport type { ConnectionType } from '@workos-inc/node';\nimport { createWorkOSClient } from '../lib/workos-client.js';\nimport { formatTable } from '../utils/table.js';\nimport { outputSuccess, outputJson, isJsonMode, exitWithError } from '../utils/output.js';\nimport { createApiErrorHandler } from '../lib/api-error-handler.js';\nimport { isCiMode, isPromptAllowed } from '../utils/interaction-mode.js';\nimport clack from '../utils/clack.js';\n\nconst handleApiError = createApiErrorHandler('Connection');\n\nexport interface ConnectionListOptions {\n  organizationId?: string;\n  connectionType?: string;\n  limit?: number;\n  before?: string;\n  after?: string;\n  order?: string;\n}\n\nexport async function runConnectionList(\n  options: ConnectionListOptions,\n  apiKey: string,\n  baseUrl?: string,\n): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const result = await client.sdk.sso.listConnections({\n      ...(options.organizationId && { organizationId: options.organizationId }),\n      ...(options.connectionType && { connectionType: options.connectionType as ConnectionType }),\n      limit: options.limit,\n      before: options.before,\n      after: options.after,\n      order: options.order as 'asc' | 'desc' | undefined,\n    });\n\n    if (isJsonMode()) {\n      outputJson({ data: result.data, listMetadata: result.listMetadata });\n      return;\n    }\n\n    if (result.data.length === 0) {\n      console.log('No connections found.');\n      return;\n    }\n\n    const rows = result.data.map((conn) => [\n      conn.id,\n      conn.name,\n      conn.type,\n      conn.organizationId || chalk.dim('-'),\n      conn.state,\n      conn.createdAt,\n    ]);\n\n    console.log(\n      formatTable(\n        [\n          { header: 'ID' },\n          { header: 'Name' },\n          { header: 'Type' },\n          { header: 'Org ID' },\n          { header: 'State' },\n          { header: 'Created' },\n        ],\n        rows,\n      ),\n    );\n\n    const { before, after } = result.listMetadata;\n    if (before && after) {\n      console.log(chalk.dim(`Before: ${before}  After: ${after}`));\n    } else if (before) {\n      console.log(chalk.dim(`Before: ${before}`));\n    } else if (after) {\n      console.log(chalk.dim(`After: ${after}`));\n    }\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\nexport async function runConnectionGet(id: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const connection = await client.sdk.sso.getConnection(id);\n    outputJson(connection);\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\nexport async function runConnectionDelete(\n  id: string,\n  options: { force?: boolean },\n  apiKey: string,\n  baseUrl?: string,\n): Promise<void> {\n  if (!options.force) {\n    if (!isPromptAllowed()) {\n      exitWithError({\n        code: 'confirmation_required',\n        message: isCiMode()\n          ? 'Destructive operation requires --force flag in CI mode.'\n          : 'Destructive operation requires --force flag in agent mode.',\n      });\n    }\n\n    const confirmed = await clack.confirm({\n      message: `Delete connection ${id}? This cannot be undone.`,\n    });\n\n    if (clack.isCancel(confirmed) || !confirmed) {\n      console.log('Delete cancelled.');\n      return;\n    }\n  }\n\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    await client.sdk.sso.deleteConnection(id);\n    outputSuccess('Deleted connection', { id });\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n"]}

package/dist/commands/debug-sso.d.ts

@@ -1 +0,0 @@
-export declare function runDebugSso(connectionId: string, apiKey: string, baseUrl?: string): Promise<void>;