workos 0.18.0 → 0.20.1

package/dist/utils/clack.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"clack.js","sourceRoot":"","sources":["../../src/utils/clack.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAC;AAExC,2DAA2D;AAC3D,IAAI,aAAa,GAAG,KAAK,CAAC;AAE1B,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,aAAa,GAAG,OAAO,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE;IAClC,GAAG,CAAC,MAAM,EAAE,IAAI;QACd,MAAM,KAAK,GAAG,MAAM,CAAC,IAA0B,CAAC,CAAC;QAEjD,yCAAyC;QACzC,IAAI,IAAI,KAAK,KAAK,IAAI,aAAa,EAAE,CAAC;YACpC,OAAO;gBACL,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;gBACd,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;gBACjB,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;gBACd,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;gBACjB,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;gBACf,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;gBACd,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;aAClB,CAAC;QACJ,CAAC;QAED,yCAAyC;QACzC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI,aAAa,EAAE,CAAC;YAC5D,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAC,CAAC;AAEH,eAAe,UAAU,CAAC","sourcesContent":["import * as clack from '@clack/prompts';\n\n// Dashboard mode flag - when true, suppress console output\nlet dashboardMode = false;\n\nexport function setDashboardMode(enabled: boolean): void {\n  dashboardMode = enabled;\n}\n\nexport function isDashboardMode(): boolean {\n  return dashboardMode;\n}\n\n// Create a proxy that suppresses log output in dashboard mode\nconst clackProxy = new Proxy(clack, {\n  get(target, prop) {\n    const value = target[prop as keyof typeof clack];\n\n    // Suppress log methods in dashboard mode\n    if (prop === 'log' && dashboardMode) {\n      return {\n        info: () => {},\n        success: () => {},\n        warn: () => {},\n        warning: () => {},\n        error: () => {},\n        step: () => {},\n        message: () => {},\n      };\n    }\n\n    // Suppress intro/outro in dashboard mode\n    if ((prop === 'intro' || prop === 'outro') && dashboardMode) {\n      return () => {};\n    }\n\n    return value;\n  },\n});\n\nexport default clackProxy;\n"]}

package/dist/utils/cli-exit.d.ts

@@ -1,15 +0,0 @@
-import type { TerminationReason } from './telemetry-types.js';
-export interface CliExitContext {
-    reason: TerminationReason;
-    errorCode?: string;
-    apiContext?: {
-        status?: number;
-        code?: string;
-        resource?: string;
-    };
-}
-export declare class CliExit extends Error {
-    readonly exitCode: number;
-    readonly context?: CliExitContext | undefined;
-    constructor(exitCode: number, context?: CliExitContext | undefined);
-}

package/dist/utils/cli-exit.js

@@ -1,11 +0,0 @@
-export class CliExit extends Error {
-    exitCode;
-    context;
-    constructor(exitCode, context) {
-        super(`CLI exit: code ${exitCode}`);
-        this.exitCode = exitCode;
-        this.context = context;
-        this.name = 'CliExit';
-    }
-}
-//# sourceMappingURL=cli-exit.js.map

package/dist/utils/cli-exit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli-exit.js","sourceRoot":"","sources":["../../src/utils/cli-exit.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,OAAQ,SAAQ,KAAK;IAErB;IACA;IAFX,YACW,QAAgB,EAChB,OAAwB;QAEjC,KAAK,CAAC,kBAAkB,QAAQ,EAAE,CAAC,CAAC;QAH3B,aAAQ,GAAR,QAAQ,CAAQ;QAChB,YAAO,GAAP,OAAO,CAAiB;QAGjC,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;IACxB,CAAC;CACF","sourcesContent":["import type { TerminationReason } from './telemetry-types.js';\n\nexport interface CliExitContext {\n  reason: TerminationReason;\n  errorCode?: string;\n  apiContext?: { status?: number; code?: string; resource?: string };\n}\n\nexport class CliExit extends Error {\n  constructor(\n    readonly exitCode: number,\n    readonly context?: CliExitContext,\n  ) {\n    super(`CLI exit: code ${exitCode}`);\n    this.name = 'CliExit';\n  }\n}\n"]}

package/dist/utils/cli-symbols.d.ts

@@ -1,32 +0,0 @@
-export declare const symbols: {
-    readonly success: "✓" | "+";
-    readonly error: "✗" | "x";
-    readonly warning: "!";
-    readonly info: "ℹ" | "i";
-    readonly arrow: "→" | "->";
-    readonly bullet: "*" | "•";
-    readonly progressFilled: "#" | "▓";
-    readonly progressEmpty: "-" | "░";
-};
-/**
- * Pre-styled output functions for consistent CLI formatting.
- * Uses chalk for coloring with appropriate symbols.
- */
-export declare const styled: {
-    /** Green checkmark with message */
-    readonly success: (text: string) => string;
-    /** Red X with message */
-    readonly error: (text: string) => string;
-    /** Yellow warning with message */
-    readonly warning: (text: string) => string;
-    /** Dim info text */
-    readonly info: (text: string) => string;
-    /** Cyan arrow for actions */
-    readonly action: (text: string) => string;
-    /** Label with value, label is dimmed */
-    readonly label: (label: string, value: string) => string;
-    /** Phase indicator with visual progress bar */
-    readonly phase: (num: number, total: number, name: string) => string;
-    /** Bullet point for lists */
-    readonly bullet: (text: string) => string;
-};

package/dist/utils/cli-symbols.js

@@ -1,46 +0,0 @@
-/**
- * Centralized symbol and color definitions for CLI output.
- *
- * Provides consistent visual vocabulary across all CLI handlers.
- * Supports both Unicode and ASCII fallback for terminal compatibility.
- */
-import chalk from 'chalk';
-import { isUnicodeSupported } from './vendor/is-unicorn-supported.js';
-const unicode = isUnicodeSupported();
-export const symbols = {
-    success: unicode ? '✓' : '+',
-    error: unicode ? '✗' : 'x',
-    warning: '!',
-    info: unicode ? 'ℹ' : 'i',
-    arrow: unicode ? '→' : '->',
-    bullet: unicode ? '•' : '*',
-    progressFilled: unicode ? '▓' : '#',
-    progressEmpty: unicode ? '░' : '-',
-};
-/**
- * Pre-styled output functions for consistent CLI formatting.
- * Uses chalk for coloring with appropriate symbols.
- */
-export const styled = {
-    /** Green checkmark with message */
-    success: (text) => chalk.green(`${symbols.success} ${text}`),
-    /** Red X with message */
-    error: (text) => chalk.red(`${symbols.error} ${text}`),
-    /** Yellow warning with message */
-    warning: (text) => chalk.yellow(`${symbols.warning} ${text}`),
-    /** Dim info text */
-    info: (text) => chalk.dim(`${symbols.info} ${text}`),
-    /** Cyan arrow for actions */
-    action: (text) => chalk.cyan(`${symbols.arrow} ${text}`),
-    /** Label with value, label is dimmed */
-    label: (label, value) => `${chalk.dim(label)} ${value}`,
-    /** Phase indicator with visual progress bar */
-    phase: (num, total, name) => {
-        const filled = symbols.progressFilled.repeat(num);
-        const empty = symbols.progressEmpty.repeat(total - num);
-        return `${chalk.cyan(filled)}${chalk.dim(empty)} ${name}`;
-    },
-    /** Bullet point for lists */
-    bullet: (text) => `  ${symbols.bullet} ${text}`,
-};
-//# sourceMappingURL=cli-symbols.js.map

package/dist/utils/cli-symbols.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli-symbols.js","sourceRoot":"","sources":["../../src/utils/cli-symbols.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAEtE,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;AAErC,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;IAC5B,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;IAC1B,OAAO,EAAE,GAAG;IACZ,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;IACzB,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;IAC3B,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;IAC3B,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;IACnC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;CAC1B,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,mCAAmC;IACnC,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;IAEpE,yBAAyB;IACzB,KAAK,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;IAE9D,kCAAkC;IAClC,OAAO,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,EAAE,CAAC;IAErE,oBAAoB;IACpB,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;IAE5D,6BAA6B;IAC7B,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;IAEhE,wCAAwC;IACxC,KAAK,EAAE,CAAC,KAAa,EAAE,KAAa,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,EAAE;IAEvE,+CAA+C;IAC/C,KAAK,EAAE,CAAC,GAAW,EAAE,KAAa,EAAE,IAAY,EAAE,EAAE;QAClD,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;QACxD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IAC5D,CAAC;IAED,6BAA6B;IAC7B,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,IAAI,IAAI,EAAE;CAC/C,CAAC","sourcesContent":["/**\n * Centralized symbol and color definitions for CLI output.\n *\n * Provides consistent visual vocabulary across all CLI handlers.\n * Supports both Unicode and ASCII fallback for terminal compatibility.\n */\nimport chalk from 'chalk';\nimport { isUnicodeSupported } from './vendor/is-unicorn-supported.js';\n\nconst unicode = isUnicodeSupported();\n\nexport const symbols = {\n  success: unicode ? '✓' : '+',\n  error: unicode ? '✗' : 'x',\n  warning: '!',\n  info: unicode ? 'ℹ' : 'i',\n  arrow: unicode ? '→' : '->',\n  bullet: unicode ? '•' : '*',\n  progressFilled: unicode ? '▓' : '#',\n  progressEmpty: unicode ? '░' : '-',\n} as const;\n\n/**\n * Pre-styled output functions for consistent CLI formatting.\n * Uses chalk for coloring with appropriate symbols.\n */\nexport const styled = {\n  /** Green checkmark with message */\n  success: (text: string) => chalk.green(`${symbols.success} ${text}`),\n\n  /** Red X with message */\n  error: (text: string) => chalk.red(`${symbols.error} ${text}`),\n\n  /** Yellow warning with message */\n  warning: (text: string) => chalk.yellow(`${symbols.warning} ${text}`),\n\n  /** Dim info text */\n  info: (text: string) => chalk.dim(`${symbols.info} ${text}`),\n\n  /** Cyan arrow for actions */\n  action: (text: string) => chalk.cyan(`${symbols.arrow} ${text}`),\n\n  /** Label with value, label is dimmed */\n  label: (label: string, value: string) => `${chalk.dim(label)} ${value}`,\n\n  /** Phase indicator with visual progress bar */\n  phase: (num: number, total: number, name: string) => {\n    const filled = symbols.progressFilled.repeat(num);\n    const empty = symbols.progressEmpty.repeat(total - num);\n    return `${chalk.cyan(filled)}${chalk.dim(empty)} ${name}`;\n  },\n\n  /** Bullet point for lists */\n  bullet: (text: string) => `  ${symbols.bullet} ${text}`,\n} as const;\n"]}

package/dist/utils/command-invocation.d.ts

@@ -1,10 +0,0 @@
-/**
- * Return the safest user-facing way to invoke this CLI.
- *
- * When the package is run through npm exec/npx, `workos ...` may resolve to an
- * older global binary in the user's shell. Recovery hints should keep using npx.
- */
-export declare function getWorkOSCommand(env?: NodeJS.ProcessEnv): string;
-export declare function formatWorkOSCommand(args: string, env?: NodeJS.ProcessEnv): string;
-export declare function shellQuoteArg(arg: string): string;
-export declare function formatWorkOSCommandArgs(args: string[], env?: NodeJS.ProcessEnv): string;

package/dist/utils/command-invocation.js

@@ -1,26 +0,0 @@
-/**
- * Return the safest user-facing way to invoke this CLI.
- *
- * When the package is run through npm exec/npx, `workos ...` may resolve to an
- * older global binary in the user's shell. Recovery hints should keep using npx.
- */
-export function getWorkOSCommand(env = process.env) {
-    const npmCommand = env.npm_command;
-    const npmExecPath = env.npm_execpath ?? '';
-    const npmUserAgent = env.npm_config_user_agent ?? '';
-    const launchedByNpmExec = npmCommand === 'exec' || npmExecPath.includes('npx-cli') || /\bnpx\//.test(npmUserAgent);
-    return launchedByNpmExec ? 'npx workos@latest' : 'workos';
-}
-export function formatWorkOSCommand(args, env = process.env) {
-    return `${getWorkOSCommand(env)} ${args}`;
-}
-export function shellQuoteArg(arg) {
-    if (/^[A-Za-z0-9_./:=@+-]+$/.test(arg)) {
-        return arg;
-    }
-    return `'${arg.replace(/'/g, `'\\''`)}'`;
-}
-export function formatWorkOSCommandArgs(args, env = process.env) {
-    return [getWorkOSCommand(env), ...args.map(shellQuoteArg)].join(' ');
-}
-//# sourceMappingURL=command-invocation.js.map

package/dist/utils/command-invocation.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"command-invocation.js","sourceRoot":"","sources":["../../src/utils/command-invocation.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACnE,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,CAAC;IACnC,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,GAAG,CAAC,qBAAqB,IAAI,EAAE,CAAC;IAErD,MAAM,iBAAiB,GAAG,UAAU,KAAK,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAEnH,OAAO,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,MAAyB,OAAO,CAAC,GAAG;IACpF,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,IAAc,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC1F,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvE,CAAC","sourcesContent":["/**\n * Return the safest user-facing way to invoke this CLI.\n *\n * When the package is run through npm exec/npx, `workos ...` may resolve to an\n * older global binary in the user's shell. Recovery hints should keep using npx.\n */\nexport function getWorkOSCommand(env: NodeJS.ProcessEnv = process.env): string {\n  const npmCommand = env.npm_command;\n  const npmExecPath = env.npm_execpath ?? '';\n  const npmUserAgent = env.npm_config_user_agent ?? '';\n\n  const launchedByNpmExec = npmCommand === 'exec' || npmExecPath.includes('npx-cli') || /\\bnpx\\//.test(npmUserAgent);\n\n  return launchedByNpmExec ? 'npx workos@latest' : 'workos';\n}\n\nexport function formatWorkOSCommand(args: string, env: NodeJS.ProcessEnv = process.env): string {\n  return `${getWorkOSCommand(env)} ${args}`;\n}\n\nexport function shellQuoteArg(arg: string): string {\n  if (/^[A-Za-z0-9_./:=@+-]+$/.test(arg)) {\n    return arg;\n  }\n  return `'${arg.replace(/'/g, `'\\\\''`)}'`;\n}\n\nexport function formatWorkOSCommandArgs(args: string[], env: NodeJS.ProcessEnv = process.env): string {\n  return [getWorkOSCommand(env), ...args.map(shellQuoteArg)].join(' ');\n}\n"]}

package/dist/utils/command-telemetry.d.ts

@@ -1,17 +0,0 @@
-export declare const SKIP_TELEMETRY_COMMANDS: Set<string>;
-export declare function resolveCanonicalName(parts: string[]): string;
-/**
- * Resolve the command name from raw argv for paths where yargs validation
- * fails before middleware runs (e.g. a missing required argument).
- *
- * Returns the first token that resolves to a KNOWN top-level command. Tokens
- * are matched against the command registry rather than trusting position, so
- * an option value preceding the command (e.g. `--api-key sk_live_… org` or
- * `--mode ci org`) can never be recorded as the command name — that would leak
- * secrets/values into telemetry and explode cardinality. Anything that isn't a
- * known command (typos, stray values, `--help`) returns 'root', which is
- * skipped. Only the top-level command is recorded; later positionals can be
- * user values (org names, emails, IDs), so they are never included.
- */
-export declare function resolveCommandNameFromRawArgs(rawArgs: string[]): string;
-export declare function extractUserFlags(rawArgs: string[]): string[];

package/dist/utils/command-telemetry.js

@@ -1,67 +0,0 @@
-import { COMMAND_ALIASES } from '../lib/command-aliases.js';
-import { getTopLevelCommandNames } from './help-json.js';
-let knownTopLevelCommands = null;
-/** Canonical top-level command heads (registry + alias targets), memoized. */
-function topLevelCommands() {
-    if (!knownTopLevelCommands) {
-        const names = new Set(getTopLevelCommandNames());
-        // Alias targets resolve to a canonical head (e.g. claim -> env.claim -> env).
-        for (const target of Object.values(COMMAND_ALIASES)) {
-            names.add(target.split('.')[0]);
-        }
-        knownTopLevelCommands = names;
-    }
-    return knownTopLevelCommands;
-}
-export const SKIP_TELEMETRY_COMMANDS = new Set(['install', 'dashboard', 'root', 'telemetry']);
-export function resolveCanonicalName(parts) {
-    if (parts.length === 0)
-        return 'root';
-    const resolved = [...parts];
-    resolved[0] = COMMAND_ALIASES[resolved[0]] ?? resolved[0];
-    return resolved.join('.');
-}
-/**
- * Resolve the command name from raw argv for paths where yargs validation
- * fails before middleware runs (e.g. a missing required argument).
- *
- * Returns the first token that resolves to a KNOWN top-level command. Tokens
- * are matched against the command registry rather than trusting position, so
- * an option value preceding the command (e.g. `--api-key sk_live_… org` or
- * `--mode ci org`) can never be recorded as the command name — that would leak
- * secrets/values into telemetry and explode cardinality. Anything that isn't a
- * known command (typos, stray values, `--help`) returns 'root', which is
- * skipped. Only the top-level command is recorded; later positionals can be
- * user values (org names, emails, IDs), so they are never included.
- */
-export function resolveCommandNameFromRawArgs(rawArgs) {
-    const known = topLevelCommands();
-    for (const token of rawArgs) {
-        if (token.startsWith('-'))
-            continue;
-        const canonical = resolveCanonicalName([token]);
-        if (known.has(canonical.split('.')[0]))
-            return canonical;
-    }
-    return 'root';
-}
-export function extractUserFlags(rawArgs) {
-    const passedFlags = rawArgs
-        .filter((arg) => {
-        // `--` is the positional separator, not a flag.
-        if (arg === '--')
-            return false;
-        // Long flags: --name or --name=value (must start with a letter, so
-        // negative numbers like -1 / --1 are not mistaken for flags).
-        if (/^--[A-Za-z][\w-]*(=.*)?$/.test(arg))
-            return true;
-        // Short flags: a single letter, e.g. -v.
-        if (/^-[A-Za-z]$/.test(arg))
-            return true;
-        return false;
-    })
-        .map((arg) => arg.replace(/^-+/, '').split('=')[0])
-        .filter(Boolean);
-    return [...new Set(passedFlags)];
-}
-//# sourceMappingURL=command-telemetry.js.map

package/dist/utils/command-telemetry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"command-telemetry.js","sourceRoot":"","sources":["../../src/utils/command-telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,IAAI,qBAAqB,GAAuB,IAAI,CAAC;AAErD,8EAA8E;AAC9E,SAAS,gBAAgB;IACvB,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,uBAAuB,EAAE,CAAC,CAAC;QACjD,8EAA8E;QAC9E,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;YACpD,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,qBAAqB,GAAG,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;AAE9F,MAAM,UAAU,oBAAoB,CAAC,KAAe;IAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACtC,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC5B,QAAQ,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1D,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,6BAA6B,CAAC,OAAiB;IAC7D,MAAM,KAAK,GAAG,gBAAgB,EAAE,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,MAAM,SAAS,GAAG,oBAAoB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAiB;IAChD,MAAM,WAAW,GAAG,OAAO;SACxB,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QACd,gDAAgD;QAChD,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC/B,mEAAmE;QACnE,8DAA8D;QAC9D,IAAI,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACtD,yCAAyC;QACzC,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;SACD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;SAClD,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;AACnC,CAAC","sourcesContent":["import { COMMAND_ALIASES } from '../lib/command-aliases.js';\nimport { getTopLevelCommandNames } from './help-json.js';\n\nlet knownTopLevelCommands: Set<string> | null = null;\n\n/** Canonical top-level command heads (registry + alias targets), memoized. */\nfunction topLevelCommands(): Set<string> {\n  if (!knownTopLevelCommands) {\n    const names = new Set(getTopLevelCommandNames());\n    // Alias targets resolve to a canonical head (e.g. claim -> env.claim -> env).\n    for (const target of Object.values(COMMAND_ALIASES)) {\n      names.add(target.split('.')[0]);\n    }\n    knownTopLevelCommands = names;\n  }\n  return knownTopLevelCommands;\n}\n\nexport const SKIP_TELEMETRY_COMMANDS = new Set(['install', 'dashboard', 'root', 'telemetry']);\n\nexport function resolveCanonicalName(parts: string[]): string {\n  if (parts.length === 0) return 'root';\n  const resolved = [...parts];\n  resolved[0] = COMMAND_ALIASES[resolved[0]] ?? resolved[0];\n  return resolved.join('.');\n}\n\n/**\n * Resolve the command name from raw argv for paths where yargs validation\n * fails before middleware runs (e.g. a missing required argument).\n *\n * Returns the first token that resolves to a KNOWN top-level command. Tokens\n * are matched against the command registry rather than trusting position, so\n * an option value preceding the command (e.g. `--api-key sk_live_… org` or\n * `--mode ci org`) can never be recorded as the command name — that would leak\n * secrets/values into telemetry and explode cardinality. Anything that isn't a\n * known command (typos, stray values, `--help`) returns 'root', which is\n * skipped. Only the top-level command is recorded; later positionals can be\n * user values (org names, emails, IDs), so they are never included.\n */\nexport function resolveCommandNameFromRawArgs(rawArgs: string[]): string {\n  const known = topLevelCommands();\n  for (const token of rawArgs) {\n    if (token.startsWith('-')) continue;\n    const canonical = resolveCanonicalName([token]);\n    if (known.has(canonical.split('.')[0])) return canonical;\n  }\n  return 'root';\n}\n\nexport function extractUserFlags(rawArgs: string[]): string[] {\n  const passedFlags = rawArgs\n    .filter((arg) => {\n      // `--` is the positional separator, not a flag.\n      if (arg === '--') return false;\n      // Long flags: --name or --name=value (must start with a letter, so\n      // negative numbers like -1 / --1 are not mistaken for flags).\n      if (/^--[A-Za-z][\\w-]*(=.*)?$/.test(arg)) return true;\n      // Short flags: a single letter, e.g. -v.\n      if (/^-[A-Za-z]$/.test(arg)) return true;\n      return false;\n    })\n    .map((arg) => arg.replace(/^-+/, '').split('=')[0])\n    .filter(Boolean);\n  return [...new Set(passedFlags)];\n}\n"]}

package/dist/utils/crash-reporter.d.ts

@@ -1,13 +0,0 @@
-/** Sanitize stack trace for telemetry: homedir, absolute-path collapse, secrets, truncation. */
-export declare function sanitizeStack(stack: string | undefined): string;
-/** Sanitize an error message for telemetry (homedir, secrets, truncation). */
-export declare function sanitizeMessage(msg: string | undefined): string;
-/**
- * Register global handlers for uncaughtException and unhandledRejection
- * that capture crash details before the process exits.
- *
- * Handlers are SYNCHRONOUS. Node does NOT await async uncaughtException handlers.
- * We queue the event synchronously; store-forward's process.on('exit') handler
- * persists it to disk. The next CLI invocation recovers and sends.
- */
-export declare function installCrashReporter(): void;

package/dist/utils/crash-reporter.js

@@ -1,91 +0,0 @@
-import { analytics } from './analytics.js';
-import { CliExit } from './cli-exit.js';
-import { homedir } from 'node:os';
-// Hard ceiling the telemetry API enforces on every attribute value
-// (z.string().max(4096) in llm-gateway/types/telemetry-event.ts). The final
-// sanitized string — truncation marker included — MUST stay within this, or
-// the whole crash event fails Zod validation server-side and is silently
-// dropped. Reserve room for the marker so a truncated stack lands at exactly
-// MAX_STACK_LENGTH rather than overshooting it.
-const MAX_STACK_LENGTH = 4096;
-const STACK_TRUNCATION_MARKER = '\n...[truncated]';
-const MAX_MESSAGE_LENGTH = 1024;
-const HOME = homedir();
-let isCrashing = false;
-/**
- * Redact known credential patterns (Bearer tokens, sk_test_/sk_live_ keys,
- * raw JWTs). Shared by sanitizeStack and sanitizeMessage because Node echoes
- * `.message` into the leading `Error.stack` line, so secrets in messages also
- * surface in stacks.
- */
-function redactSecrets(s) {
-    return s
-        .replace(/Bearer\s+[A-Za-z0-9._-]+/g, 'Bearer <redacted>')
-        .replace(/\bsk_(test|live)_[A-Za-z0-9]+/g, 'sk_<redacted>')
-        .replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g, '<jwt-redacted>');
-}
-/** Sanitize stack trace for telemetry: homedir, absolute-path collapse, secrets, truncation. */
-export function sanitizeStack(stack) {
-    if (!stack)
-        return '';
-    let sanitized = stack.replaceAll(HOME, '~');
-    // Collapse absolute paths to their leaf segment. POSIX and Windows separately —
-    // Windows paths (C:\...\node_modules\) bypass the POSIX regex and would
-    // otherwise leak full local filesystem paths into telemetry.
-    sanitized = sanitized
-        .replace(/\/[^\s:]+\/(node_modules|dist|src)\//g, '$1/')
-        .replace(/[A-Za-z]:\\[^\s:]+\\(node_modules|dist|src)\\/g, '$1\\');
-    sanitized = redactSecrets(sanitized);
-    return sanitized.length > MAX_STACK_LENGTH
-        ? sanitized.slice(0, MAX_STACK_LENGTH - STACK_TRUNCATION_MARKER.length) + STACK_TRUNCATION_MARKER
-        : sanitized;
-}
-/** Sanitize an error message for telemetry (homedir, secrets, truncation). */
-export function sanitizeMessage(msg) {
-    if (!msg)
-        return '';
-    const sanitized = redactSecrets(msg.replaceAll(HOME, '~'));
-    return sanitized.length > MAX_MESSAGE_LENGTH ? sanitized.slice(0, MAX_MESSAGE_LENGTH) + '...[truncated]' : sanitized;
-}
-/**
- * Register global handlers for uncaughtException and unhandledRejection
- * that capture crash details before the process exits.
- *
- * Handlers are SYNCHRONOUS. Node does NOT await async uncaughtException handlers.
- * We queue the event synchronously; store-forward's process.on('exit') handler
- * persists it to disk. The next CLI invocation recovers and sends.
- */
-export function installCrashReporter() {
-    process.on('uncaughtException', (error) => {
-        // A CliExit that reaches here escaped the normal lifecycle (e.g. thrown
-        // from a fire-and-forget async event listener like `child.on('error')` in
-        // dev.ts). It is an intentional exit, NOT a crash — record no crash event,
-        // just honor the requested code.
-        if (error instanceof CliExit) {
-            process.exit(error.exitCode);
-        }
-        reportCrashSync(error);
-        process.exit(1);
-    });
-    process.on('unhandledRejection', (reason) => {
-        if (reason instanceof CliExit) {
-            process.exit(reason.exitCode);
-        }
-        const error = reason instanceof Error ? reason : new Error(String(reason));
-        reportCrashSync(error);
-        process.exit(1);
-    });
-}
-function reportCrashSync(error) {
-    if (isCrashing)
-        return;
-    isCrashing = true;
-    try {
-        // captureUnhandledCrash sanitizes both message and stack at the analytics boundary.
-        analytics.captureUnhandledCrash(error);
-    }
-    catch {
-        // Telemetry must never prevent exit
-    }
-}
-//# sourceMappingURL=crash-reporter.js.map

package/dist/utils/crash-reporter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"crash-reporter.js","sourceRoot":"","sources":["../../src/utils/crash-reporter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,mEAAmE;AACnE,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,gDAAgD;AAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AACnD,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;AACvB,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB;;;;;GAKG;AACH,SAAS,aAAa,CAAC,CAAS;IAC9B,OAAO,CAAC;SACL,OAAO,CAAC,2BAA2B,EAAE,mBAAmB,CAAC;SACzD,OAAO,CAAC,gCAAgC,EAAE,eAAe,CAAC;SAC1D,OAAO,CAAC,sDAAsD,EAAE,gBAAgB,CAAC,CAAC;AACvF,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,IAAI,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5C,gFAAgF;IAChF,wEAAwE;IACxE,6DAA6D;IAC7D,SAAS,GAAG,SAAS;SAClB,OAAO,CAAC,uCAAuC,EAAE,KAAK,CAAC;SACvD,OAAO,CAAC,gDAAgD,EAAE,MAAM,CAAC,CAAC;IACrE,SAAS,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACrC,OAAO,SAAS,CAAC,MAAM,GAAG,gBAAgB;QACxC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,GAAG,uBAAuB,CAAC,MAAM,CAAC,GAAG,uBAAuB;QACjG,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,eAAe,CAAC,GAAuB;IACrD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAC3D,OAAO,SAAS,CAAC,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,GAAG,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;AACvH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE;QACxC,wEAAwE;QACxE,0EAA0E;QAC1E,2EAA2E;QAC3E,iCAAiC;QACjC,IAAI,KAAK,YAAY,OAAO,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QACD,eAAe,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1C,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3E,eAAe,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,KAAY;IACnC,IAAI,UAAU;QAAE,OAAO;IACvB,UAAU,GAAG,IAAI,CAAC;IAClB,IAAI,CAAC;QACH,oFAAoF;QACpF,SAAS,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;AACH,CAAC","sourcesContent":["import { analytics } from './analytics.js';\nimport { CliExit } from './cli-exit.js';\nimport { homedir } from 'node:os';\n\n// Hard ceiling the telemetry API enforces on every attribute value\n// (z.string().max(4096) in llm-gateway/types/telemetry-event.ts). The final\n// sanitized string — truncation marker included — MUST stay within this, or\n// the whole crash event fails Zod validation server-side and is silently\n// dropped. Reserve room for the marker so a truncated stack lands at exactly\n// MAX_STACK_LENGTH rather than overshooting it.\nconst MAX_STACK_LENGTH = 4096;\nconst STACK_TRUNCATION_MARKER = '\\n...[truncated]';\nconst MAX_MESSAGE_LENGTH = 1024;\nconst HOME = homedir();\nlet isCrashing = false;\n\n/**\n * Redact known credential patterns (Bearer tokens, sk_test_/sk_live_ keys,\n * raw JWTs). Shared by sanitizeStack and sanitizeMessage because Node echoes\n * `.message` into the leading `Error.stack` line, so secrets in messages also\n * surface in stacks.\n */\nfunction redactSecrets(s: string): string {\n  return s\n    .replace(/Bearer\\s+[A-Za-z0-9._-]+/g, 'Bearer <redacted>')\n    .replace(/\\bsk_(test|live)_[A-Za-z0-9]+/g, 'sk_<redacted>')\n    .replace(/\\beyJ[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+\\.[A-Za-z0-9_-]+/g, '<jwt-redacted>');\n}\n\n/** Sanitize stack trace for telemetry: homedir, absolute-path collapse, secrets, truncation. */\nexport function sanitizeStack(stack: string | undefined): string {\n  if (!stack) return '';\n  let sanitized = stack.replaceAll(HOME, '~');\n  // Collapse absolute paths to their leaf segment. POSIX and Windows separately —\n  // Windows paths (C:\\...\\node_modules\\) bypass the POSIX regex and would\n  // otherwise leak full local filesystem paths into telemetry.\n  sanitized = sanitized\n    .replace(/\\/[^\\s:]+\\/(node_modules|dist|src)\\//g, '$1/')\n    .replace(/[A-Za-z]:\\\\[^\\s:]+\\\\(node_modules|dist|src)\\\\/g, '$1\\\\');\n  sanitized = redactSecrets(sanitized);\n  return sanitized.length > MAX_STACK_LENGTH\n    ? sanitized.slice(0, MAX_STACK_LENGTH - STACK_TRUNCATION_MARKER.length) + STACK_TRUNCATION_MARKER\n    : sanitized;\n}\n\n/** Sanitize an error message for telemetry (homedir, secrets, truncation). */\nexport function sanitizeMessage(msg: string | undefined): string {\n  if (!msg) return '';\n  const sanitized = redactSecrets(msg.replaceAll(HOME, '~'));\n  return sanitized.length > MAX_MESSAGE_LENGTH ? sanitized.slice(0, MAX_MESSAGE_LENGTH) + '...[truncated]' : sanitized;\n}\n\n/**\n * Register global handlers for uncaughtException and unhandledRejection\n * that capture crash details before the process exits.\n *\n * Handlers are SYNCHRONOUS. Node does NOT await async uncaughtException handlers.\n * We queue the event synchronously; store-forward's process.on('exit') handler\n * persists it to disk. The next CLI invocation recovers and sends.\n */\nexport function installCrashReporter(): void {\n  process.on('uncaughtException', (error) => {\n    // A CliExit that reaches here escaped the normal lifecycle (e.g. thrown\n    // from a fire-and-forget async event listener like `child.on('error')` in\n    // dev.ts). It is an intentional exit, NOT a crash — record no crash event,\n    // just honor the requested code.\n    if (error instanceof CliExit) {\n      process.exit(error.exitCode);\n    }\n    reportCrashSync(error);\n    process.exit(1);\n  });\n\n  process.on('unhandledRejection', (reason) => {\n    if (reason instanceof CliExit) {\n      process.exit(reason.exitCode);\n    }\n    const error = reason instanceof Error ? reason : new Error(String(reason));\n    reportCrashSync(error);\n    process.exit(1);\n  });\n}\n\nfunction reportCrashSync(error: Error): void {\n  if (isCrashing) return;\n  isCrashing = true;\n  try {\n    // captureUnhandledCrash sanitizes both message and stack at the analytics boundary.\n    analytics.captureUnhandledCrash(error);\n  } catch {\n    // Telemetry must never prevent exit\n  }\n}\n"]}

package/dist/utils/debug.d.ts

@@ -1,9 +0,0 @@
-export declare function initLogFile(): void;
-export declare function getLogFilePath(): string | null;
-export declare function logInfo(...args: unknown[]): void;
-export declare function logWarn(...args: unknown[]): void;
-export declare function logVisibleWarn(...args: unknown[]): void;
-export declare function logError(...args: unknown[]): void;
-export declare function debug(...args: unknown[]): void;
-export declare function isDebugEnabled(): boolean;
-export declare function enableDebugLogs(): void;

package/dist/utils/debug.js

@@ -1,105 +0,0 @@
-import { appendFileSync, existsSync, mkdirSync, readdirSync, unlinkSync } from 'fs';
-import { join } from 'path';
-import { homedir } from 'os';
-import chalk from 'chalk';
-import { prepareMessage } from './logging.js';
-import { redactCredentials } from './redact.js';
-import clack from './clack.js';
-import { isJsonMode } from './output.js';
-let debugEnabled = false;
-let sessionLogPath = null;
-const LOG_DIR = join(homedir(), '.workos', 'logs');
-const MAX_LOG_FILES = 10;
-function ensureLogDir() {
-    if (!existsSync(LOG_DIR)) {
-        mkdirSync(LOG_DIR, { recursive: true });
-    }
-    return LOG_DIR;
-}
-function getSafeTimestamp() {
-    return new Date().toISOString().replace(/:/g, '-');
-}
-function rotateLogFiles() {
-    try {
-        const dir = ensureLogDir();
-        const files = readdirSync(dir)
-            .filter((f) => f.startsWith('workos-') && f.endsWith('.log'))
-            .sort();
-        const toDelete = files.slice(0, Math.max(0, files.length - MAX_LOG_FILES + 1));
-        for (const file of toDelete) {
-            try {
-                unlinkSync(join(dir, file));
-            }
-            catch {
-                // Ignore deletion failures
-            }
-        }
-    }
-    catch {
-        // Ignore rotation failures
-    }
-}
-export function initLogFile() {
-    try {
-        rotateLogFiles();
-        const dir = ensureLogDir();
-        const timestamp = getSafeTimestamp();
-        sessionLogPath = join(dir, `workos-${timestamp}.log`);
-        const header = `${'='.repeat(60)}\nWorkOS AuthKit Installer Run: ${new Date().toISOString()}\n${'='.repeat(60)}\n`;
-        appendFileSync(sessionLogPath, header);
-    }
-    catch {
-        sessionLogPath = null;
-    }
-}
-export function getLogFilePath() {
-    return sessionLogPath;
-}
-function writeLog(level, emoji, args) {
-    const redactedArgs = args.map((a) => (typeof a === 'object' && a !== null ? redactCredentials(a) : a));
-    const msg = redactedArgs.map((a) => prepareMessage(a)).join(' ');
-    // Write to console if debug enabled
-    if (debugEnabled && !isJsonMode()) {
-        const color = level === 'ERROR' ? chalk.red : level === 'WARN' ? chalk.yellow : chalk.dim;
-        clack.log.info(color(`${emoji} ${msg}`));
-    }
-    // Write to log file
-    if (sessionLogPath) {
-        try {
-            const timestamp = new Date().toISOString();
-            appendFileSync(sessionLogPath, `[${timestamp}] ${emoji} ${level}: ${msg}\n`);
-        }
-        catch {
-            // Ignore write failures
-        }
-    }
-    return msg;
-}
-export function logInfo(...args) {
-    writeLog('INFO', 'ℹ️ ', args);
-}
-export function logWarn(...args) {
-    writeLog('WARN', '⚠️ ', args);
-}
-export function logVisibleWarn(...args) {
-    const msg = writeLog('WARN', '⚠️ ', args);
-    if (!debugEnabled && !isJsonMode()) {
-        console.error(chalk.yellow(`⚠️  ${msg}`));
-    }
-}
-export function logError(...args) {
-    writeLog('ERROR', '❌', args);
-}
-export function debug(...args) {
-    if (!isDebugEnabled())
-        return;
-    const msg = args.map((a) => prepareMessage(a)).join(' ');
-    clack.log.info(chalk.dim(msg));
-}
-export function isDebugEnabled() {
-    return debugEnabled && !isJsonMode();
-}
-export function enableDebugLogs() {
-    debugEnabled = true;
-}
-//# sourceMappingURL=debug.js.map

package/dist/utils/debug.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"debug.js","sourceRoot":"","sources":["../../src/utils/debug.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AACpF,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,MAAM,YAAY,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,IAAI,YAAY,GAAG,KAAK,CAAC;AACzB,IAAI,cAAc,GAAkB,IAAI,CAAC;AAEzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AACnD,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,SAAS,YAAY;IACnB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC;aAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aAC5D,IAAI,EAAE,CAAC;QAEV,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/E,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2BAA2B;IAC7B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,cAAc,EAAE,CAAC;QACjB,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;QACrC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,SAAS,MAAM,CAAC,CAAC;QAEtD,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,mCAAmC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC;QACnH,cAAc,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAgC,EAAE,KAAa,EAAE,IAAe;IAChF,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvG,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEjE,oCAAoC;IACpC,IAAI,YAAY,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;QAC1F,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,oBAAoB;IACpB,IAAI,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,cAAc,CAAC,cAAc,EAAE,IAAI,SAAS,KAAK,KAAK,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,CAAC;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAG,IAAe;IACxC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,GAAG,IAAe;IACxC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAG,IAAe;IAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,YAAY,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QACnC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAG,IAAe;IACzC,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,GAAG,IAAe;IACtC,IAAI,CAAC,cAAc,EAAE;QAAE,OAAO;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,YAAY,IAAI,CAAC,UAAU,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC","sourcesContent":["import { appendFileSync, existsSync, mkdirSync, readdirSync, unlinkSync } from 'fs';\nimport { join } from 'path';\nimport { homedir } from 'os';\nimport chalk from 'chalk';\nimport { prepareMessage } from './logging.js';\nimport { redactCredentials } from './redact.js';\nimport clack from './clack.js';\nimport { isJsonMode } from './output.js';\n\nlet debugEnabled = false;\nlet sessionLogPath: string | null = null;\n\nconst LOG_DIR = join(homedir(), '.workos', 'logs');\nconst MAX_LOG_FILES = 10;\n\nfunction ensureLogDir(): string {\n  if (!existsSync(LOG_DIR)) {\n    mkdirSync(LOG_DIR, { recursive: true });\n  }\n  return LOG_DIR;\n}\n\nfunction getSafeTimestamp(): string {\n  return new Date().toISOString().replace(/:/g, '-');\n}\n\nfunction rotateLogFiles(): void {\n  try {\n    const dir = ensureLogDir();\n    const files = readdirSync(dir)\n      .filter((f) => f.startsWith('workos-') && f.endsWith('.log'))\n      .sort();\n\n    const toDelete = files.slice(0, Math.max(0, files.length - MAX_LOG_FILES + 1));\n    for (const file of toDelete) {\n      try {\n        unlinkSync(join(dir, file));\n      } catch {\n        // Ignore deletion failures\n      }\n    }\n  } catch {\n    // Ignore rotation failures\n  }\n}\n\nexport function initLogFile(): void {\n  try {\n    rotateLogFiles();\n    const dir = ensureLogDir();\n    const timestamp = getSafeTimestamp();\n    sessionLogPath = join(dir, `workos-${timestamp}.log`);\n\n    const header = `${'='.repeat(60)}\\nWorkOS AuthKit Installer Run: ${new Date().toISOString()}\\n${'='.repeat(60)}\\n`;\n    appendFileSync(sessionLogPath, header);\n  } catch {\n    sessionLogPath = null;\n  }\n}\n\nexport function getLogFilePath(): string | null {\n  return sessionLogPath;\n}\n\nfunction writeLog(level: 'INFO' | 'WARN' | 'ERROR', emoji: string, args: unknown[]): string {\n  const redactedArgs = args.map((a) => (typeof a === 'object' && a !== null ? redactCredentials(a) : a));\n  const msg = redactedArgs.map((a) => prepareMessage(a)).join(' ');\n\n  // Write to console if debug enabled\n  if (debugEnabled && !isJsonMode()) {\n    const color = level === 'ERROR' ? chalk.red : level === 'WARN' ? chalk.yellow : chalk.dim;\n    clack.log.info(color(`${emoji} ${msg}`));\n  }\n\n  // Write to log file\n  if (sessionLogPath) {\n    try {\n      const timestamp = new Date().toISOString();\n      appendFileSync(sessionLogPath, `[${timestamp}] ${emoji} ${level}: ${msg}\\n`);\n    } catch {\n      // Ignore write failures\n    }\n  }\n\n  return msg;\n}\n\nexport function logInfo(...args: unknown[]): void {\n  writeLog('INFO', 'ℹ️ ', args);\n}\n\nexport function logWarn(...args: unknown[]): void {\n  writeLog('WARN', '⚠️ ', args);\n}\n\nexport function logVisibleWarn(...args: unknown[]): void {\n  const msg = writeLog('WARN', '⚠️ ', args);\n  if (!debugEnabled && !isJsonMode()) {\n    console.error(chalk.yellow(`⚠️  ${msg}`));\n  }\n}\n\nexport function logError(...args: unknown[]): void {\n  writeLog('ERROR', '❌', args);\n}\n\nexport function debug(...args: unknown[]): void {\n  if (!isDebugEnabled()) return;\n  const msg = args.map((a) => prepareMessage(a)).join(' ');\n  clack.log.info(chalk.dim(msg));\n}\n\nexport function isDebugEnabled(): boolean {\n  return debugEnabled && !isJsonMode();\n}\n\nexport function enableDebugLogs(): void {\n  debugEnabled = true;\n}\n"]}

package/dist/utils/env-parser.d.ts

@@ -1,5 +0,0 @@
-/**
- * Parse a .env file into key-value pairs.
- * Handles comments, empty lines, and values containing '='.
- */
-export declare function parseEnvFile(content: string): Record<string, string>;

package/dist/utils/env-parser.js

@@ -1,18 +0,0 @@
-/**
- * Parse a .env file into key-value pairs.
- * Handles comments, empty lines, and values containing '='.
- */
-export function parseEnvFile(content) {
-    const result = {};
-    for (const line of content.split(/\r?\n/)) {
-        const trimmed = line.trim();
-        if (trimmed && !trimmed.startsWith('#')) {
-            const [key, ...valueParts] = trimmed.split('=');
-            if (key) {
-                result[key] = valueParts.join('=');
-            }
-        }
-    }
-    return result;
-}
-//# sourceMappingURL=env-parser.js.map

package/dist/utils/env-parser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"env-parser.js","sourceRoot":"","sources":["../../src/utils/env-parser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChD,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/**\n * Parse a .env file into key-value pairs.\n * Handles comments, empty lines, and values containing '='.\n */\nexport function parseEnvFile(content: string): Record<string, string> {\n  const result: Record<string, string> = {};\n  for (const line of content.split(/\\r?\\n/)) {\n    const trimmed = line.trim();\n    if (trimmed && !trimmed.startsWith('#')) {\n      const [key, ...valueParts] = trimmed.split('=');\n      if (key) {\n        result[key] = valueParts.join('=');\n      }\n    }\n  }\n  return result;\n}\n"]}

package/dist/utils/environment.d.ts

@@ -1,10 +0,0 @@
-import type { InstallerOptions } from './types.js';
-/**
- * Compatibility wrapper for legacy call sites.
- *
- * Interaction mode now owns prompt/browser behavior. Keep this helper while
- * call sites migrate, but do not reimplement env/TTY detection here.
- */
-export declare function isNonInteractiveEnvironment(): boolean;
-export declare function readEnvironment(): Record<string, unknown>;
-export declare function detectEnvVarPrefix(options: InstallerOptions): Promise<string>;