workos 0.18.0 → 0.20.1

package/dist/utils/redact.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/utils/redact.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,YAAY,CAAC;IAEvD,gEAAgE;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAEnD,OAAO,GAAG,MAAM,MAAM,MAAM,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAQ;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAExD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;IAE5D,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE5B,kBAAkB;QAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,QAAQ,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;QACD,oCAAoC;aAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACrD,QAAQ,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["/**\n * Redact sensitive values from logs\n */\n\nexport function redactApiKey(apiKey: string): string {\n  if (!apiKey || apiKey.length < 12) return '[REDACTED]';\n\n  // Show format: sk_test_xxx...xxx (first 8 chars + last 3 chars)\n  const prefix = apiKey.substring(0, 8);\n  const suffix = apiKey.substring(apiKey.length - 3);\n\n  return `${prefix}...${suffix}`;\n}\n\nexport function redactCredentials(obj: any): any {\n  if (typeof obj !== 'object' || obj === null) return obj;\n\n  const redacted = Array.isArray(obj) ? [...obj] : { ...obj };\n\n  for (const key in redacted) {\n    const value = redacted[key];\n\n    // Redact API keys\n    if (typeof value === 'string' && value.startsWith('sk_')) {\n      redacted[key] = redactApiKey(value);\n    }\n    // Recursively redact nested objects\n    else if (typeof value === 'object' && value !== null) {\n      redacted[key] = redactCredentials(value);\n    }\n  }\n\n  return redacted;\n}\n"]}

package/dist/utils/register-subcommand.d.ts

@@ -1,10 +0,0 @@
-import type { Argv } from 'yargs';
-/**
- * Register a subcommand with auto-enriched description.
- * Replays the builder on a probe yargs instance to discover demandOption fields,
- * then appends required flag names to the description so parent help shows them.
- *
- * Note: enrichment targets the description, not the command string, because yargs
- * interprets `<...>` in command strings as required positional arguments.
- */
-export declare function registerSubcommand<T>(parentYargs: Argv<T>, usage: string, description: string, builder: (y: Argv) => Argv, handler: (argv: any) => Promise<void>): Argv<T>;

package/dist/utils/register-subcommand.js

@@ -1,33 +0,0 @@
-import yargs from 'yargs';
-/**
- * Register a subcommand with auto-enriched description.
- * Replays the builder on a probe yargs instance to discover demandOption fields,
- * then appends required flag names to the description so parent help shows them.
- *
- * Note: enrichment targets the description, not the command string, because yargs
- * interprets `<...>` in command strings as required positional arguments.
- */
-export function registerSubcommand(parentYargs, usage, description, builder, handler) {
-    let enrichedDescription = description;
-    try {
-        const probe = yargs([]);
-        builder(probe);
-        // getOptions() exists at runtime but is not in yargs' public type definitions
-        const opts = probe.getOptions();
-        const demanded = Object.keys(opts.demandedOptions || {}).filter((k) => !['help', 'version'].includes(k));
-        // Exclude flags that correspond to positionals already visible in the usage string
-        const positionalNames = new Set([...usage.matchAll(/<([^>]+?)(?:\.\.\.)?>/g)].map((m) => m[1]));
-        const namedOnly = demanded.filter((k) => !positionalNames.has(k));
-        // Skip enrichment when the description already mentions every flag
-        const newFlags = namedOnly.filter((k) => !description.includes(`--${k}`));
-        if (newFlags.length > 0) {
-            const flagList = newFlags.map((k) => `--${k}`).join(', ');
-            enrichedDescription = `${description} (requires ${flagList})`;
-        }
-    }
-    catch {
-        // Builder threw during probe — fall back to unenriched description
-    }
-    return parentYargs.command(usage, enrichedDescription, builder, handler);
-}
-//# sourceMappingURL=register-subcommand.js.map

package/dist/utils/register-subcommand.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"register-subcommand.js","sourceRoot":"","sources":["../../src/utils/register-subcommand.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAO1B;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAoB,EACpB,KAAa,EACb,WAAmB,EACnB,OAA0B,EAC1B,OAAqC;IAErC,IAAI,mBAAmB,GAAG,WAAW,CAAC;IAEtC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,CAAC;QACf,8EAA8E;QAC9E,MAAM,IAAI,GAAI,KAAmD,CAAC,UAAU,EAAE,CAAC;QAC/E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAEzG,mFAAmF;QACnF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAElE,mEAAmE;QACnE,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1D,mBAAmB,GAAG,GAAG,WAAW,cAAc,QAAQ,GAAG,CAAC;QAChE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;IACrE,CAAC;IAED,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC3E,CAAC","sourcesContent":["import yargs from 'yargs';\nimport type { Argv } from 'yargs';\n\ninterface YargsOptions {\n  demandedOptions: Record<string, unknown>;\n}\n\n/**\n * Register a subcommand with auto-enriched description.\n * Replays the builder on a probe yargs instance to discover demandOption fields,\n * then appends required flag names to the description so parent help shows them.\n *\n * Note: enrichment targets the description, not the command string, because yargs\n * interprets `<...>` in command strings as required positional arguments.\n */\nexport function registerSubcommand<T>(\n  parentYargs: Argv<T>,\n  usage: string,\n  description: string,\n  builder: (y: Argv) => Argv,\n  handler: (argv: any) => Promise<void>,\n): Argv<T> {\n  let enrichedDescription = description;\n\n  try {\n    const probe = yargs([]);\n    builder(probe);\n    // getOptions() exists at runtime but is not in yargs' public type definitions\n    const opts = (probe as unknown as { getOptions(): YargsOptions }).getOptions();\n    const demanded = Object.keys(opts.demandedOptions || {}).filter((k) => !['help', 'version'].includes(k));\n\n    // Exclude flags that correspond to positionals already visible in the usage string\n    const positionalNames = new Set([...usage.matchAll(/<([^>]+?)(?:\\.\\.\\.)?>/g)].map((m) => m[1]));\n    const namedOnly = demanded.filter((k) => !positionalNames.has(k));\n\n    // Skip enrichment when the description already mentions every flag\n    const newFlags = namedOnly.filter((k) => !description.includes(`--${k}`));\n    if (newFlags.length > 0) {\n      const flagList = newFlags.map((k) => `--${k}`).join(', ');\n      enrichedDescription = `${description} (requires ${flagList})`;\n    }\n  } catch {\n    // Builder threw during probe — fall back to unenriched description\n  }\n\n  return parentYargs.command(usage, enrichedDescription, builder, handler);\n}\n"]}

package/dist/utils/semver.d.ts

@@ -1,10 +0,0 @@
-export declare function fulfillsVersionRange({ version, acceptableVersions, canBeLatest, }: {
-    version: string;
-    acceptableVersions: string;
-    canBeLatest: boolean;
-}): boolean;
-/**
- * Get a version bucket string for analytics.
- * Returns format like "15.x" for versions >= minimumMajor, or "<{minimumMajor}.0.0" otherwise.
- */
-export declare function getVersionBucket(version: string | undefined, minimumMajor: number): string;

package/dist/utils/semver.js

@@ -1,43 +0,0 @@
-import { major, minVersion, satisfies, subset, valid, validRange } from 'semver';
-export function fulfillsVersionRange({ version, acceptableVersions, canBeLatest, }) {
-    if (version === 'latest') {
-        return canBeLatest;
-    }
-    let cleanedUserVersion, isRange;
-    if (valid(version)) {
-        cleanedUserVersion = valid(version);
-        isRange = false;
-    }
-    else if (validRange(version)) {
-        cleanedUserVersion = validRange(version);
-        isRange = true;
-    }
-    return (
-    // If the given version is a bogus format, this will still be undefined and we'll automatically reject it
-    !!cleanedUserVersion &&
-        (isRange ? subset(cleanedUserVersion, acceptableVersions) : satisfies(cleanedUserVersion, acceptableVersions)));
-}
-/**
- * Get a version bucket string for analytics.
- * Returns format like "15.x" for versions >= minimumMajor, or "<{minimumMajor}.0.0" otherwise.
- */
-export function getVersionBucket(version, minimumMajor) {
-    if (!version) {
-        return 'none';
-    }
-    try {
-        const minVer = minVersion(version);
-        if (!minVer) {
-            return 'invalid';
-        }
-        const majorVersion = major(minVer);
-        if (majorVersion >= minimumMajor) {
-            return `${majorVersion}.x`;
-        }
-        return `<${minimumMajor}.0.0`;
-    }
-    catch {
-        return 'unknown';
-    }
-}
-//# sourceMappingURL=semver.js.map

package/dist/utils/semver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"semver.js","sourceRoot":"","sources":["../../src/utils/semver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEjF,MAAM,UAAU,oBAAoB,CAAC,EACnC,OAAO,EACP,kBAAkB,EAClB,WAAW,GAKZ;IACC,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,kBAAkB,EAAE,OAAO,CAAC;IAEhC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACnB,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QACpC,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;SAAM,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,kBAAkB,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,OAAO;IACL,yGAAyG;IACzG,CAAC,CAAC,kBAAkB;QACpB,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC,CAC/G,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA2B,EAAE,YAAoB;IAChF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,YAAY,IAAI,YAAY,EAAE,CAAC;YACjC,OAAO,GAAG,YAAY,IAAI,CAAC;QAC7B,CAAC;QACD,OAAO,IAAI,YAAY,MAAM,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC","sourcesContent":["import { major, minVersion, satisfies, subset, valid, validRange } from 'semver';\n\nexport function fulfillsVersionRange({\n  version,\n  acceptableVersions,\n  canBeLatest,\n}: {\n  version: string;\n  acceptableVersions: string;\n  canBeLatest: boolean;\n}): boolean {\n  if (version === 'latest') {\n    return canBeLatest;\n  }\n\n  let cleanedUserVersion, isRange;\n\n  if (valid(version)) {\n    cleanedUserVersion = valid(version);\n    isRange = false;\n  } else if (validRange(version)) {\n    cleanedUserVersion = validRange(version);\n    isRange = true;\n  }\n\n  return (\n    // If the given version is a bogus format, this will still be undefined and we'll automatically reject it\n    !!cleanedUserVersion &&\n    (isRange ? subset(cleanedUserVersion, acceptableVersions) : satisfies(cleanedUserVersion, acceptableVersions))\n  );\n}\n\n/**\n * Get a version bucket string for analytics.\n * Returns format like \"15.x\" for versions >= minimumMajor, or \"<{minimumMajor}.0.0\" otherwise.\n */\nexport function getVersionBucket(version: string | undefined, minimumMajor: number): string {\n  if (!version) {\n    return 'none';\n  }\n\n  try {\n    const minVer = minVersion(version);\n    if (!minVer) {\n      return 'invalid';\n    }\n    const majorVersion = major(minVer);\n    if (majorVersion >= minimumMajor) {\n      return `${majorVersion}.x`;\n    }\n    return `<${minimumMajor}.0.0`;\n  } catch {\n    return 'unknown';\n  }\n}\n"]}

package/dist/utils/string.d.ts

@@ -1 +0,0 @@
-export declare function stripAnsii(str: string): string;

package/dist/utils/string.js

@@ -1,6 +0,0 @@
-export function stripAnsii(str) {
-    return str.replace(
-    // eslint-disable-next-line no-control-regex
-    /[\u001b\u009b][[()#;?]*(?:[0-9]{1,4}(?:;[0-9]{0,4})*)?[0-9A-ORZcf-nqry=><]/g, '');
-}
-//# sourceMappingURL=string.js.map

package/dist/utils/string.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"string.js","sourceRoot":"","sources":["../../src/utils/string.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,OAAO;IAChB,4CAA4C;IAC5C,6EAA6E,EAC7E,EAAE,CACH,CAAC;AACJ,CAAC","sourcesContent":["export function stripAnsii(str: string): string {\n  return str.replace(\n    // eslint-disable-next-line no-control-regex\n    /[\\u001b\\u009b][[()#;?]*(?:[0-9]{1,4}(?:;[0-9]{0,4})*)?[0-9A-ORZcf-nqry=><]/g,\n    '',\n  );\n}\n"]}

package/dist/utils/summary-box.d.ts

@@ -1,18 +0,0 @@
-import { type LockExpression } from './lock-art.js';
-/** Pre-built completion summaries shared by CLI and Dashboard adapters. */
-export declare function renderCompletionSummary(success: boolean, summary?: string): string;
-export interface SummaryBoxItem {
-    type: 'done' | 'pending' | 'error';
-    text: string;
-}
-export interface SummaryBoxOptions {
-    expression: LockExpression;
-    title: string;
-    items?: SummaryBoxItem[];
-    footer?: string;
-}
-/**
- * Render a branded summary box with the WorkOS lock character,
- * a title, optional checklist items, and an optional footer.
- */
-export declare function renderSummaryBox(options: SummaryBoxOptions): string;

package/dist/utils/summary-box.js

@@ -1,148 +0,0 @@
-import chalk from 'chalk';
-import { isUnicodeSupported } from './vendor/is-unicorn-supported.js';
-import { getLockArt, LOCK_WIDTH } from './lock-art.js';
-import { symbols } from './cli-symbols.js';
-/** Pre-built completion summaries shared by CLI and Dashboard adapters. */
-export function renderCompletionSummary(success, summary) {
-    if (success) {
-        return renderSummaryBox({
-            expression: 'success',
-            title: 'WorkOS AuthKit Installed',
-            items: [
-                { type: 'pending', text: 'Start dev server to test authentication' },
-                { type: 'pending', text: 'Visit WorkOS Dashboard to manage users' },
-            ],
-            footer: 'https://workos.com/docs/authkit',
-        });
-    }
-    return renderSummaryBox({
-        expression: 'error',
-        title: 'Installation Failed',
-        items: summary ? [{ type: 'error', text: summary }] : [],
-        footer: 'https://github.com/workos/cli/issues',
-    });
-}
-const unicode = isUnicodeSupported();
-const BOX = unicode
-    ? { tl: '┌', tr: '┐', bl: '└', br: '┘', h: '─', v: '│', ml: '├', mr: '┤' }
-    : { tl: '+', tr: '+', bl: '+', br: '+', h: '-', v: '|', ml: '+', mr: '+' };
-const ITEM_ICONS = {
-    done: chalk.green(symbols.success),
-    pending: chalk.cyan(symbols.arrow),
-    error: chalk.red(symbols.error),
-};
-const MIN_WIDTH = 42;
-// Item prefix "  X " = 4 visible chars before text
-const ITEM_PREFIX_LEN = 4;
-// Footer prefix "  " = 2 visible chars before text
-const FOOTER_PREFIX_LEN = 2;
-function hLine(left, right, width) {
-    return `${left}${BOX.h.repeat(width - 2)}${right}`;
-}
-function padRight(text, visibleLen, targetLen) {
-    const padding = Math.max(0, targetLen - visibleLen);
-    return text + ' '.repeat(padding);
-}
-/** Word-wrap text to fit within maxLen, returning multiple lines. */
-function wrapText(text, maxLen) {
-    if (text.length <= maxLen)
-        return [text];
-    const words = text.split(' ');
-    const wrapped = [];
-    let current = '';
-    for (const word of words) {
-        const candidate = current ? `${current} ${word}` : word;
-        if (candidate.length > maxLen && current) {
-            wrapped.push(current);
-            current = word;
-        }
-        else {
-            current = candidate;
-        }
-    }
-    if (current)
-        wrapped.push(current);
-    return wrapped;
-}
-function getTerminalWidth() {
-    return process.stdout.columns || 80;
-}
-/**
- * Render a branded summary box with the WorkOS lock character,
- * a title, optional checklist items, and an optional footer.
- */
-export function renderSummaryBox(options) {
-    const { expression, title, items = [], footer } = options;
-    const lockColored = getLockArt(expression, true);
-    const lockRaw = getLockArt(expression, false);
-    const lockLines = lockColored.length;
-    // " " + lock + "  " = lock column width
-    const lockColWidth = LOCK_WIDTH + 3;
-    // Cap box width to terminal width
-    const termWidth = getTerminalWidth();
-    // innerWidth must fit: lock+title, items, footer — but capped to terminal
-    const maxInner = Math.max(MIN_WIDTH - 2, termWidth - 2);
-    // Compute ideal inner width from content
-    const titleRowWidth = lockColWidth + title.length;
-    const itemWidths = items.map((item) => ITEM_PREFIX_LEN + item.text.length);
-    const footerWidth = footer ? FOOTER_PREFIX_LEN + footer.length : 0;
-    const idealInner = Math.max(titleRowWidth, ...itemWidths, footerWidth) + 1;
-    const innerWidth = Math.min(Math.max(MIN_WIDTH - 2, idealInner), maxInner);
-    const boxWidth = innerWidth + 2;
-    // Available text width for items and footer (after prefix, before right padding + border)
-    const itemTextMax = innerWidth - ITEM_PREFIX_LEN - 1;
-    const footerTextMax = innerWidth - FOOTER_PREFIX_LEN - 1;
-    const lines = [];
-    // Top border
-    lines.push(hLine(BOX.tl, BOX.tr, boxWidth));
-    // Lock + title rows
-    const titleLineIndex = 3;
-    for (let i = 0; i < lockLines; i++) {
-        const lockPart = ` ${lockColored[i]}  `;
-        const lockPartRaw = ` ${lockRaw[i]}  `;
-        let rightPart;
-        let rightPartLen;
-        if (i === titleLineIndex) {
-            rightPart = chalk.bold(title);
-            rightPartLen = title.length;
-        }
-        else {
-            rightPart = '';
-            rightPartLen = 0;
-        }
-        const row = BOX.v + padRight(lockPart + rightPart, lockPartRaw.length + rightPartLen, innerWidth) + BOX.v;
-        lines.push(row);
-    }
-    // Items
-    if (items.length > 0) {
-        lines.push(`${BOX.v}${' '.repeat(innerWidth)}${BOX.v}`);
-        for (const item of items) {
-            const icon = ITEM_ICONS[item.type];
-            const wrappedLines = wrapText(item.text, itemTextMax);
-            // First line gets the icon
-            const first = `  ${icon} ${wrappedLines[0]}`;
-            const firstLen = ITEM_PREFIX_LEN + wrappedLines[0].length;
-            lines.push(`${BOX.v}${padRight(first, firstLen, innerWidth)}${BOX.v}`);
-            // Continuation lines are indented to align with text after icon
-            for (let j = 1; j < wrappedLines.length; j++) {
-                const cont = `    ${wrappedLines[j]}`;
-                const contLen = 4 + wrappedLines[j].length;
-                lines.push(`${BOX.v}${padRight(cont, contLen, innerWidth)}${BOX.v}`);
-            }
-        }
-    }
-    // Footer
-    if (footer) {
-        lines.push(hLine(BOX.ml, BOX.mr, boxWidth));
-        const wrappedFooter = wrapText(footer, footerTextMax);
-        for (const fLine of wrappedFooter) {
-            const content = `  ${chalk.dim(fLine)}`;
-            const visibleLen = FOOTER_PREFIX_LEN + fLine.length;
-            lines.push(`${BOX.v}${padRight(content, visibleLen, innerWidth)}${BOX.v}`);
-        }
-    }
-    // Bottom border
-    lines.push(hLine(BOX.bl, BOX.br, boxWidth));
-    return lines.join('\n');
-}
-//# sourceMappingURL=summary-box.js.map

package/dist/utils/summary-box.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"summary-box.js","sourceRoot":"","sources":["../../src/utils/summary-box.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AACtE,OAAO,EAAuB,UAAU,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE3C,2EAA2E;AAC3E,MAAM,UAAU,uBAAuB,CAAC,OAAgB,EAAE,OAAgB;IACxE,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,gBAAgB,CAAC;YACtB,UAAU,EAAE,SAAS;YACrB,KAAK,EAAE,0BAA0B;YACjC,KAAK,EAAE;gBACL,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,yCAAyC,EAAE;gBACpE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,wCAAwC,EAAE;aACpE;YACD,MAAM,EAAE,iCAAiC;SAC1C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,gBAAgB,CAAC;QACtB,UAAU,EAAE,OAAO;QACnB,KAAK,EAAE,qBAAqB;QAC5B,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;QACxD,MAAM,EAAE,sCAAsC;KAC/C,CAAC,CAAC;AACL,CAAC;AAcD,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;AAErC,MAAM,GAAG,GAAG,OAAO;IACjB,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE;IAC1E,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;AAE7E,MAAM,UAAU,GAA2C;IACzD,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;IAClC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;IAClC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;CAChC,CAAC;AAEF,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,mDAAmD;AACnD,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,mDAAmD;AACnD,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAE5B,SAAS,KAAK,CAAC,IAAY,EAAE,KAAa,EAAE,KAAa;IACvD,OAAO,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,UAAkB,EAAE,SAAiB;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,UAAU,CAAC,CAAC;IACpD,OAAO,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,qEAAqE;AACrE,SAAS,QAAQ,CAAC,IAAY,EAAE,MAAc;IAC5C,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,IAAI,SAAS,CAAC,MAAM,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,SAAS,CAAC;QACtB,CAAC;IACH,CAAC;IACD,IAAI,OAAO;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA0B;IACzD,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAE1D,MAAM,WAAW,GAAG,UAAU,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC;IAErC,wCAAwC;IACxC,MAAM,YAAY,GAAG,UAAU,GAAG,CAAC,CAAC;IAEpC,kCAAkC;IAClC,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IACrC,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;IAExD,yCAAyC;IACzC,MAAM,aAAa,GAAG,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC;IAClD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,MAAM,CAAC,CAAC,CAAC,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC;IAE3E,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,UAAU,GAAG,CAAC,CAAC;IAEhC,0FAA0F;IAC1F,MAAM,WAAW,GAAG,UAAU,GAAG,eAAe,GAAG,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,UAAU,GAAG,iBAAiB,GAAG,CAAC,CAAC;IAEzD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,aAAa;IACb,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE5C,oBAAoB;IACpB,MAAM,cAAc,GAAG,CAAC,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QACxC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;QACvC,IAAI,SAAiB,CAAC;QACtB,IAAI,YAAoB,CAAC;QACzB,IAAI,CAAC,KAAK,cAAc,EAAE,CAAC;YACzB,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9B,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,EAAE,CAAC;YACf,YAAY,GAAG,CAAC,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,QAAQ,GAAG,SAAS,EAAE,WAAW,CAAC,MAAM,GAAG,YAAY,EAAE,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC1G,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,QAAQ;IACR,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QAExD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnC,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YACtD,2BAA2B;YAC3B,MAAM,KAAK,GAAG,KAAK,IAAI,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAG,eAAe,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC1D,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YACvE,gEAAgE;YAChE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC7C,MAAM,IAAI,GAAG,OAAO,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtC,MAAM,OAAO,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC3C,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS;IACT,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACtD,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,UAAU,GAAG,iBAAiB,GAAG,KAAK,CAAC,MAAM,CAAC;YACpD,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAE5C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC","sourcesContent":["import chalk from 'chalk';\nimport { isUnicodeSupported } from './vendor/is-unicorn-supported.js';\nimport { type LockExpression, getLockArt, LOCK_WIDTH } from './lock-art.js';\nimport { symbols } from './cli-symbols.js';\n\n/** Pre-built completion summaries shared by CLI and Dashboard adapters. */\nexport function renderCompletionSummary(success: boolean, summary?: string): string {\n  if (success) {\n    return renderSummaryBox({\n      expression: 'success',\n      title: 'WorkOS AuthKit Installed',\n      items: [\n        { type: 'pending', text: 'Start dev server to test authentication' },\n        { type: 'pending', text: 'Visit WorkOS Dashboard to manage users' },\n      ],\n      footer: 'https://workos.com/docs/authkit',\n    });\n  }\n  return renderSummaryBox({\n    expression: 'error',\n    title: 'Installation Failed',\n    items: summary ? [{ type: 'error', text: summary }] : [],\n    footer: 'https://github.com/workos/cli/issues',\n  });\n}\n\nexport interface SummaryBoxItem {\n  type: 'done' | 'pending' | 'error';\n  text: string;\n}\n\nexport interface SummaryBoxOptions {\n  expression: LockExpression;\n  title: string;\n  items?: SummaryBoxItem[];\n  footer?: string;\n}\n\nconst unicode = isUnicodeSupported();\n\nconst BOX = unicode\n  ? { tl: '┌', tr: '┐', bl: '└', br: '┘', h: '─', v: '│', ml: '├', mr: '┤' }\n  : { tl: '+', tr: '+', bl: '+', br: '+', h: '-', v: '|', ml: '+', mr: '+' };\n\nconst ITEM_ICONS: Record<SummaryBoxItem['type'], string> = {\n  done: chalk.green(symbols.success),\n  pending: chalk.cyan(symbols.arrow),\n  error: chalk.red(symbols.error),\n};\n\nconst MIN_WIDTH = 42;\n// Item prefix \"  X \" = 4 visible chars before text\nconst ITEM_PREFIX_LEN = 4;\n// Footer prefix \"  \" = 2 visible chars before text\nconst FOOTER_PREFIX_LEN = 2;\n\nfunction hLine(left: string, right: string, width: number): string {\n  return `${left}${BOX.h.repeat(width - 2)}${right}`;\n}\n\nfunction padRight(text: string, visibleLen: number, targetLen: number): string {\n  const padding = Math.max(0, targetLen - visibleLen);\n  return text + ' '.repeat(padding);\n}\n\n/** Word-wrap text to fit within maxLen, returning multiple lines. */\nfunction wrapText(text: string, maxLen: number): string[] {\n  if (text.length <= maxLen) return [text];\n  const words = text.split(' ');\n  const wrapped: string[] = [];\n  let current = '';\n  for (const word of words) {\n    const candidate = current ? `${current} ${word}` : word;\n    if (candidate.length > maxLen && current) {\n      wrapped.push(current);\n      current = word;\n    } else {\n      current = candidate;\n    }\n  }\n  if (current) wrapped.push(current);\n  return wrapped;\n}\n\nfunction getTerminalWidth(): number {\n  return process.stdout.columns || 80;\n}\n\n/**\n * Render a branded summary box with the WorkOS lock character,\n * a title, optional checklist items, and an optional footer.\n */\nexport function renderSummaryBox(options: SummaryBoxOptions): string {\n  const { expression, title, items = [], footer } = options;\n\n  const lockColored = getLockArt(expression, true);\n  const lockRaw = getLockArt(expression, false);\n  const lockLines = lockColored.length;\n\n  // \" \" + lock + \"  \" = lock column width\n  const lockColWidth = LOCK_WIDTH + 3;\n\n  // Cap box width to terminal width\n  const termWidth = getTerminalWidth();\n  // innerWidth must fit: lock+title, items, footer — but capped to terminal\n  const maxInner = Math.max(MIN_WIDTH - 2, termWidth - 2);\n\n  // Compute ideal inner width from content\n  const titleRowWidth = lockColWidth + title.length;\n  const itemWidths = items.map((item) => ITEM_PREFIX_LEN + item.text.length);\n  const footerWidth = footer ? FOOTER_PREFIX_LEN + footer.length : 0;\n  const idealInner = Math.max(titleRowWidth, ...itemWidths, footerWidth) + 1;\n\n  const innerWidth = Math.min(Math.max(MIN_WIDTH - 2, idealInner), maxInner);\n  const boxWidth = innerWidth + 2;\n\n  // Available text width for items and footer (after prefix, before right padding + border)\n  const itemTextMax = innerWidth - ITEM_PREFIX_LEN - 1;\n  const footerTextMax = innerWidth - FOOTER_PREFIX_LEN - 1;\n\n  const lines: string[] = [];\n\n  // Top border\n  lines.push(hLine(BOX.tl, BOX.tr, boxWidth));\n\n  // Lock + title rows\n  const titleLineIndex = 3;\n  for (let i = 0; i < lockLines; i++) {\n    const lockPart = ` ${lockColored[i]}  `;\n    const lockPartRaw = ` ${lockRaw[i]}  `;\n    let rightPart: string;\n    let rightPartLen: number;\n    if (i === titleLineIndex) {\n      rightPart = chalk.bold(title);\n      rightPartLen = title.length;\n    } else {\n      rightPart = '';\n      rightPartLen = 0;\n    }\n    const row = BOX.v + padRight(lockPart + rightPart, lockPartRaw.length + rightPartLen, innerWidth) + BOX.v;\n    lines.push(row);\n  }\n\n  // Items\n  if (items.length > 0) {\n    lines.push(`${BOX.v}${' '.repeat(innerWidth)}${BOX.v}`);\n\n    for (const item of items) {\n      const icon = ITEM_ICONS[item.type];\n      const wrappedLines = wrapText(item.text, itemTextMax);\n      // First line gets the icon\n      const first = `  ${icon} ${wrappedLines[0]}`;\n      const firstLen = ITEM_PREFIX_LEN + wrappedLines[0].length;\n      lines.push(`${BOX.v}${padRight(first, firstLen, innerWidth)}${BOX.v}`);\n      // Continuation lines are indented to align with text after icon\n      for (let j = 1; j < wrappedLines.length; j++) {\n        const cont = `    ${wrappedLines[j]}`;\n        const contLen = 4 + wrappedLines[j].length;\n        lines.push(`${BOX.v}${padRight(cont, contLen, innerWidth)}${BOX.v}`);\n      }\n    }\n  }\n\n  // Footer\n  if (footer) {\n    lines.push(hLine(BOX.ml, BOX.mr, boxWidth));\n    const wrappedFooter = wrapText(footer, footerTextMax);\n    for (const fLine of wrappedFooter) {\n      const content = `  ${chalk.dim(fLine)}`;\n      const visibleLen = FOOTER_PREFIX_LEN + fLine.length;\n      lines.push(`${BOX.v}${padRight(content, visibleLen, innerWidth)}${BOX.v}`);\n    }\n  }\n\n  // Bottom border\n  lines.push(hLine(BOX.bl, BOX.br, boxWidth));\n\n  return lines.join('\\n');\n}\n"]}

package/dist/utils/table.d.ts

@@ -1,5 +0,0 @@
-export interface TableColumn {
-    header: string;
-    width?: number;
-}
-export declare function formatTable(columns: TableColumn[], rows: string[][]): string;

package/dist/utils/table.js

@@ -1,18 +0,0 @@
-import chalk from 'chalk';
-export function formatTable(columns, rows) {
-    const widths = columns.map((col, i) => {
-        const contentMax = rows.reduce((max, row) => Math.max(max, (row[i] || '').length), 0);
-        return col.width ?? Math.max(col.header.length, contentMax);
-    });
-    const lines = [];
-    const header = columns.map((col, i) => chalk.yellow(col.header.padEnd(widths[i]))).join('  ');
-    lines.push(header);
-    const totalWidth = widths.reduce((sum, w) => sum + w, 0) + (widths.length - 1) * 2;
-    lines.push(chalk.dim('─'.repeat(totalWidth)));
-    for (const row of rows) {
-        const line = row.map((cell, i) => (cell || '').padEnd(widths[i])).join('  ');
-        lines.push(line);
-    }
-    return lines.join('\n');
-}
-//# sourceMappingURL=table.js.map

package/dist/utils/table.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"table.js","sourceRoot":"","sources":["../../src/utils/table.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAO1B,MAAM,UAAU,WAAW,CAAC,OAAsB,EAAE,IAAgB;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACpC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACtF,OAAO,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9F,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEnB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACnF,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAE9C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC","sourcesContent":["import chalk from 'chalk';\n\nexport interface TableColumn {\n  header: string;\n  width?: number;\n}\n\nexport function formatTable(columns: TableColumn[], rows: string[][]): string {\n  const widths = columns.map((col, i) => {\n    const contentMax = rows.reduce((max, row) => Math.max(max, (row[i] || '').length), 0);\n    return col.width ?? Math.max(col.header.length, contentMax);\n  });\n\n  const lines: string[] = [];\n\n  const header = columns.map((col, i) => chalk.yellow(col.header.padEnd(widths[i]))).join('  ');\n  lines.push(header);\n\n  const totalWidth = widths.reduce((sum, w) => sum + w, 0) + (widths.length - 1) * 2;\n  lines.push(chalk.dim('─'.repeat(totalWidth)));\n\n  for (const row of rows) {\n    const line = row.map((cell, i) => (cell || '').padEnd(widths[i])).join('  ');\n    lines.push(line);\n  }\n\n  return lines.join('\\n');\n}\n"]}

package/dist/utils/telemetry-client.d.ts

@@ -1,43 +0,0 @@
-import type { TelemetryEvent } from './telemetry-types.js';
-/**
- * HTTP client that queues telemetry events and flushes them to the API.
- * Failures are silent—telemetry should never crash the wizard.
- */
-export declare class TelemetryClient {
-    private events;
-    private flushInFlight;
-    private accessToken;
-    private claimToken;
-    private clientId;
-    private apiKey;
-    private gatewayUrl;
-    setGatewayUrl(url: string): void;
-    setAccessToken(token: string): void;
-    setApiKeyAuth(apiKey: string): void;
-    /**
-     * Set claim-token auth for unclaimed environments.
-     * The API accepts either a JWT (Bearer), claim token
-     * (x-workos-claim-token + x-workos-client-id), or API key
-     * (x-workos-api-key).
-     */
-    setClaimTokenAuth(clientId: string, claimToken: string): void;
-    queueEvent(event: TelemetryEvent): void;
-    /**
-     * Queue multiple pre-formed events (used by store-forward recovery).
-     */
-    queueEvents(events: TelemetryEvent[]): void;
-    /**
-     * Flush queued events. Returns true if events were sent or intentionally
-     * dropped (4xx), false if they should be retried (5xx/network error).
-     * Uses splice to only remove the events that were in the snapshot,
-     * protecting any events queued concurrently during the fetch.
-     */
-    flush(): Promise<boolean>;
-    private flushInternal;
-    /**
-     * Synchronously write pending events to a file.
-     * Used as last resort in process.on('exit') handler.
-     */
-    persistToFile(filePath: string): void;
-}
-export declare const telemetryClient: TelemetryClient;

package/dist/utils/telemetry-client.js

@@ -1,171 +0,0 @@
-import { mkdirSync, writeFileSync } from 'node:fs';
-import { dirname } from 'node:path';
-import { debug, isDebugEnabled } from './debug.js';
-import { getCredentials, isTokenExpired } from '../lib/credentials.js';
-function summarizeEvent(event) {
-    switch (event.type) {
-        case 'session.start':
-            return `session.start(mode=${event.attributes['installer.mode']}, os=${event.attributes['env.os']})`;
-        case 'session.end':
-            return `session.end(outcome=${event.attributes['installer.outcome']}, duration=${event.attributes['installer.duration_ms']}ms)`;
-        case 'step':
-            return `step(${event.name}, ${event.durationMs}ms, success=${event.success})`;
-        case 'agent.tool':
-            return `agent.tool(${event.toolName}, ${event.durationMs}ms)`;
-        case 'agent.llm':
-            return `agent.llm(${event.model}, in=${event.inputTokens}, out=${event.outputTokens})`;
-        case 'command':
-            return `command(${event.attributes['command.name']}, ${event.attributes['command.duration_ms']}ms, success=${event.attributes['command.success']})`;
-        case 'crash':
-            return `crash(${event.attributes['crash.error_type']}: ${event.attributes['crash.error_message']})`;
-    }
-}
-/**
- * HTTP client that queues telemetry events and flushes them to the API.
- * Failures are silent—telemetry should never crash the wizard.
- */
-export class TelemetryClient {
-    events = [];
-    flushInFlight = null;
-    accessToken = null;
-    claimToken = null;
-    clientId = null;
-    apiKey = null;
-    gatewayUrl = null;
-    setGatewayUrl(url) {
-        this.gatewayUrl = url;
-    }
-    setAccessToken(token) {
-        this.accessToken = token;
-    }
-    setApiKeyAuth(apiKey) {
-        this.apiKey = apiKey;
-    }
-    /**
-     * Set claim-token auth for unclaimed environments.
-     * The API accepts either a JWT (Bearer), claim token
-     * (x-workos-claim-token + x-workos-client-id), or API key
-     * (x-workos-api-key).
-     */
-    setClaimTokenAuth(clientId, claimToken) {
-        this.clientId = clientId;
-        this.claimToken = claimToken;
-    }
-    queueEvent(event) {
-        this.events.push(event);
-    }
-    /**
-     * Queue multiple pre-formed events (used by store-forward recovery).
-     */
-    queueEvents(events) {
-        this.events.push(...events);
-    }
-    /**
-     * Flush queued events. Returns true if events were sent or intentionally
-     * dropped (4xx), false if they should be retried (5xx/network error).
-     * Uses splice to only remove the events that were in the snapshot,
-     * protecting any events queued concurrently during the fetch.
-     */
-    async flush() {
-        // Coalesce overlapping flushes: a second caller during an in-flight flush
-        // would otherwise snapshot and POST the same events again (duplicate send),
-        // and its splice() could drop events queued after the first flush started.
-        if (this.flushInFlight)
-            return this.flushInFlight;
-        this.flushInFlight = this.flushInternal();
-        try {
-            return await this.flushInFlight;
-        }
-        finally {
-            this.flushInFlight = null;
-        }
-    }
-    async flushInternal() {
-        if (this.events.length === 0)
-            return true;
-        if (!this.gatewayUrl) {
-            debug('[Telemetry] No telemetry URL configured, skipping flush');
-            return false;
-        }
-        const count = this.events.length;
-        const payload = { events: this.events.slice(0, count) };
-        const headers = {
-            'Content-Type': 'application/json',
-        };
-        // Read fresh credentials to handle token refresh mid-session. Skip an
-        // expired stored token — sending a dead Bearer 401s and the event is
-        // dropped, so fall through to claim-token / api-key auth instead.
-        const freshCreds = getCredentials();
-        const token = freshCreds?.accessToken
-            ? isTokenExpired(freshCreds)
-                ? null
-                : freshCreds.accessToken
-            : this.accessToken;
-        if (token) {
-            headers['Authorization'] = `Bearer ${token}`;
-        }
-        else if (this.claimToken && this.clientId) {
-            // Unclaimed environment auth path — guard accepts this instead of JWT
-            headers['x-workos-claim-token'] = this.claimToken;
-            headers['x-workos-client-id'] = this.clientId;
-        }
-        else if (this.apiKey) {
-            headers['x-workos-api-key'] = this.apiKey;
-        }
-        const controller = new AbortController();
-        const timeout = setTimeout(() => controller.abort(), 3000);
-        try {
-            if (isDebugEnabled()) {
-                const eventSummary = payload.events.map(summarizeEvent).join('\n  ');
-                debug(`[Telemetry] Sending ${payload.events.length} events to ${this.gatewayUrl}/telemetry:\n  ${eventSummary}`);
-            }
-            const response = await fetch(`${this.gatewayUrl}/telemetry`, {
-                method: 'POST',
-                headers,
-                body: JSON.stringify(payload),
-                signal: controller.signal,
-            });
-            if (response.ok) {
-                this.events.splice(0, count);
-                return true;
-            }
-            else {
-                debug(`[Telemetry] Failed to send: ${response.status}`);
-                // Drop on 4xx (permanent failures like 401/403 won't succeed on retry).
-                // Retain on 5xx (transient server errors) for store-forward.
-                if (response.status >= 400 && response.status < 500) {
-                    this.events.splice(0, count);
-                    return true; // intentionally dropped
-                }
-                return false;
-            }
-        }
-        catch (error) {
-            debug(`[Telemetry] Error sending events: ${error}`);
-            // Events remain in queue for store-forward to persist
-            return false;
-        }
-        finally {
-            clearTimeout(timeout);
-        }
-    }
-    /**
-     * Synchronously write pending events to a file.
-     * Used as last resort in process.on('exit') handler.
-     */
-    persistToFile(filePath) {
-        if (this.events.length === 0)
-            return;
-        try {
-            // Restrictive modes — the payload carries device/user identifiers.
-            mkdirSync(dirname(filePath), { recursive: true, mode: 0o700 });
-            writeFileSync(filePath, JSON.stringify(this.events), { encoding: 'utf-8', mode: 0o600 });
-            this.events = [];
-        }
-        catch {
-            // Silent failure — telemetry must never block exit
-        }
-    }
-}
-export const telemetryClient = new TelemetryClient();
-//# sourceMappingURL=telemetry-client.js.map

package/dist/utils/telemetry-client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"telemetry-client.js","sourceRoot":"","sources":["../../src/utils/telemetry-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEnD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvE,SAAS,cAAc,CAAC,KAAqB;IAC3C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,eAAe;YAClB,OAAO,sBAAsB,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,QAAQ,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;QACvG,KAAK,aAAa;YAChB,OAAO,uBAAuB,KAAK,CAAC,UAAU,CAAC,mBAAmB,CAAC,cAAc,KAAK,CAAC,UAAU,CAAC,uBAAuB,CAAC,KAAK,CAAC;QAClI,KAAK,MAAM;YACT,OAAO,QAAQ,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,UAAU,eAAe,KAAK,CAAC,OAAO,GAAG,CAAC;QAChF,KAAK,YAAY;YACf,OAAO,cAAc,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,UAAU,KAAK,CAAC;QAChE,KAAK,WAAW;YACd,OAAO,aAAa,KAAK,CAAC,KAAK,QAAQ,KAAK,CAAC,WAAW,SAAS,KAAK,CAAC,YAAY,GAAG,CAAC;QACzF,KAAK,SAAS;YACZ,OAAO,WAAW,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC,UAAU,CAAC,qBAAqB,CAAC,eAAe,KAAK,CAAC,UAAU,CAAC,iBAAiB,CAAC,GAAG,CAAC;QACtJ,KAAK,OAAO;YACV,OAAO,SAAS,KAAK,CAAC,UAAU,CAAC,kBAAkB,CAAC,KAAK,KAAK,CAAC,UAAU,CAAC,qBAAqB,CAAC,GAAG,CAAC;IACxG,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,eAAe;IAClB,MAAM,GAAqB,EAAE,CAAC;IAC9B,aAAa,GAA4B,IAAI,CAAC;IAC9C,WAAW,GAAkB,IAAI,CAAC;IAClC,UAAU,GAAkB,IAAI,CAAC;IACjC,QAAQ,GAAkB,IAAI,CAAC;IAC/B,MAAM,GAAkB,IAAI,CAAC;IAC7B,UAAU,GAAkB,IAAI,CAAC;IAEzC,aAAa,CAAC,GAAW;QACvB,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;IACxB,CAAC;IAED,cAAc,CAAC,KAAa;QAC1B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,aAAa,CAAC,MAAc;QAC1B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,QAAgB,EAAE,UAAkB;QACpD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,UAAU,CAAC,KAAqB;QAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,MAAwB;QAClC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,KAAK;QACT,0EAA0E;QAC1E,4EAA4E;QAC5E,2EAA2E;QAC3E,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC;QAClD,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC;QAClC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa;QACzB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACjE,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACjC,MAAM,OAAO,GAAqB,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;QAE1E,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;SACnC,CAAC;QACF,sEAAsE;QACtE,qEAAqE;QACrE,kEAAkE;QAClE,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,UAAU,EAAE,WAAW;YACnC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC;gBAC1B,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,UAAU,CAAC,WAAW;YAC1B,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;QACrB,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/C,CAAC;aAAM,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5C,sEAAsE;YACtE,OAAO,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;YAClD,OAAO,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QAChD,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5C,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAE3D,IAAI,CAAC;YACH,IAAI,cAAc,EAAE,EAAE,CAAC;gBACrB,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrE,KAAK,CACH,uBAAuB,OAAO,CAAC,MAAM,CAAC,MAAM,cAAc,IAAI,CAAC,UAAU,kBAAkB,YAAY,EAAE,CAC1G,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,UAAU,YAAY,EAAE;gBAC3D,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBAC7B,OAAO,IAAI,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACxD,wEAAwE;gBACxE,6DAA6D;gBAC7D,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;oBACpD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;oBAC7B,OAAO,IAAI,CAAC,CAAC,wBAAwB;gBACvC,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,qCAAqC,KAAK,EAAE,CAAC,CAAC;YACpD,sDAAsD;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,QAAgB;QAC5B,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACrC,IAAI,CAAC;YACH,mEAAmE;YACnE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzF,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC","sourcesContent":["import { mkdirSync, writeFileSync } from 'node:fs';\nimport { dirname } from 'node:path';\nimport { debug, isDebugEnabled } from './debug.js';\nimport type { TelemetryEvent, TelemetryRequest } from './telemetry-types.js';\nimport { getCredentials, isTokenExpired } from '../lib/credentials.js';\n\nfunction summarizeEvent(event: TelemetryEvent): string {\n  switch (event.type) {\n    case 'session.start':\n      return `session.start(mode=${event.attributes['installer.mode']}, os=${event.attributes['env.os']})`;\n    case 'session.end':\n      return `session.end(outcome=${event.attributes['installer.outcome']}, duration=${event.attributes['installer.duration_ms']}ms)`;\n    case 'step':\n      return `step(${event.name}, ${event.durationMs}ms, success=${event.success})`;\n    case 'agent.tool':\n      return `agent.tool(${event.toolName}, ${event.durationMs}ms)`;\n    case 'agent.llm':\n      return `agent.llm(${event.model}, in=${event.inputTokens}, out=${event.outputTokens})`;\n    case 'command':\n      return `command(${event.attributes['command.name']}, ${event.attributes['command.duration_ms']}ms, success=${event.attributes['command.success']})`;\n    case 'crash':\n      return `crash(${event.attributes['crash.error_type']}: ${event.attributes['crash.error_message']})`;\n  }\n}\n\n/**\n * HTTP client that queues telemetry events and flushes them to the API.\n * Failures are silent—telemetry should never crash the wizard.\n */\nexport class TelemetryClient {\n  private events: TelemetryEvent[] = [];\n  private flushInFlight: Promise<boolean> | null = null;\n  private accessToken: string | null = null;\n  private claimToken: string | null = null;\n  private clientId: string | null = null;\n  private apiKey: string | null = null;\n  private gatewayUrl: string | null = null;\n\n  setGatewayUrl(url: string) {\n    this.gatewayUrl = url;\n  }\n\n  setAccessToken(token: string) {\n    this.accessToken = token;\n  }\n\n  setApiKeyAuth(apiKey: string) {\n    this.apiKey = apiKey;\n  }\n\n  /**\n   * Set claim-token auth for unclaimed environments.\n   * The API accepts either a JWT (Bearer), claim token\n   * (x-workos-claim-token + x-workos-client-id), or API key\n   * (x-workos-api-key).\n   */\n  setClaimTokenAuth(clientId: string, claimToken: string) {\n    this.clientId = clientId;\n    this.claimToken = claimToken;\n  }\n\n  queueEvent(event: TelemetryEvent) {\n    this.events.push(event);\n  }\n\n  /**\n   * Queue multiple pre-formed events (used by store-forward recovery).\n   */\n  queueEvents(events: TelemetryEvent[]): void {\n    this.events.push(...events);\n  }\n\n  /**\n   * Flush queued events. Returns true if events were sent or intentionally\n   * dropped (4xx), false if they should be retried (5xx/network error).\n   * Uses splice to only remove the events that were in the snapshot,\n   * protecting any events queued concurrently during the fetch.\n   */\n  async flush(): Promise<boolean> {\n    // Coalesce overlapping flushes: a second caller during an in-flight flush\n    // would otherwise snapshot and POST the same events again (duplicate send),\n    // and its splice() could drop events queued after the first flush started.\n    if (this.flushInFlight) return this.flushInFlight;\n    this.flushInFlight = this.flushInternal();\n    try {\n      return await this.flushInFlight;\n    } finally {\n      this.flushInFlight = null;\n    }\n  }\n\n  private async flushInternal(): Promise<boolean> {\n    if (this.events.length === 0) return true;\n    if (!this.gatewayUrl) {\n      debug('[Telemetry] No telemetry URL configured, skipping flush');\n      return false;\n    }\n\n    const count = this.events.length;\n    const payload: TelemetryRequest = { events: this.events.slice(0, count) };\n\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n    };\n    // Read fresh credentials to handle token refresh mid-session. Skip an\n    // expired stored token — sending a dead Bearer 401s and the event is\n    // dropped, so fall through to claim-token / api-key auth instead.\n    const freshCreds = getCredentials();\n    const token = freshCreds?.accessToken\n      ? isTokenExpired(freshCreds)\n        ? null\n        : freshCreds.accessToken\n      : this.accessToken;\n    if (token) {\n      headers['Authorization'] = `Bearer ${token}`;\n    } else if (this.claimToken && this.clientId) {\n      // Unclaimed environment auth path — guard accepts this instead of JWT\n      headers['x-workos-claim-token'] = this.claimToken;\n      headers['x-workos-client-id'] = this.clientId;\n    } else if (this.apiKey) {\n      headers['x-workos-api-key'] = this.apiKey;\n    }\n\n    const controller = new AbortController();\n    const timeout = setTimeout(() => controller.abort(), 3000);\n\n    try {\n      if (isDebugEnabled()) {\n        const eventSummary = payload.events.map(summarizeEvent).join('\\n  ');\n        debug(\n          `[Telemetry] Sending ${payload.events.length} events to ${this.gatewayUrl}/telemetry:\\n  ${eventSummary}`,\n        );\n      }\n\n      const response = await fetch(`${this.gatewayUrl}/telemetry`, {\n        method: 'POST',\n        headers,\n        body: JSON.stringify(payload),\n        signal: controller.signal,\n      });\n\n      if (response.ok) {\n        this.events.splice(0, count);\n        return true;\n      } else {\n        debug(`[Telemetry] Failed to send: ${response.status}`);\n        // Drop on 4xx (permanent failures like 401/403 won't succeed on retry).\n        // Retain on 5xx (transient server errors) for store-forward.\n        if (response.status >= 400 && response.status < 500) {\n          this.events.splice(0, count);\n          return true; // intentionally dropped\n        }\n        return false;\n      }\n    } catch (error) {\n      debug(`[Telemetry] Error sending events: ${error}`);\n      // Events remain in queue for store-forward to persist\n      return false;\n    } finally {\n      clearTimeout(timeout);\n    }\n  }\n\n  /**\n   * Synchronously write pending events to a file.\n   * Used as last resort in process.on('exit') handler.\n   */\n  persistToFile(filePath: string): void {\n    if (this.events.length === 0) return;\n    try {\n      // Restrictive modes — the payload carries device/user identifiers.\n      mkdirSync(dirname(filePath), { recursive: true, mode: 0o700 });\n      writeFileSync(filePath, JSON.stringify(this.events), { encoding: 'utf-8', mode: 0o600 });\n      this.events = [];\n    } catch {\n      // Silent failure — telemetry must never block exit\n    }\n  }\n}\n\nexport const telemetryClient = new TelemetryClient();\n"]}

package/dist/utils/telemetry-store-forward.d.ts

@@ -1,11 +0,0 @@
-/**
- * Register a sync exit handler that persists unsent events to disk.
- * Called once at startup. Uses PID in filename to prevent concurrent
- * CLI invocations from colliding.
- */
-export declare function installStoreForward(): void;
-/**
- * On startup, check for ANY pending files from previous invocations
- * (could be from different PIDs) and send them. Non-blocking, fire-and-forget.
- */
-export declare function recoverPendingEvents(): Promise<void>;