workos 0.18.0 → 0.20.1

package/dist/commands/debug-sso.js

@@ -1,78 +0,0 @@
-import chalk from 'chalk';
-import { createWorkOSClient } from '../lib/workos-client.js';
-import { outputJson, isJsonMode } from '../utils/output.js';
-import { createApiErrorHandler } from '../lib/api-error-handler.js';
-const handleApiError = createApiErrorHandler('Connection');
-export async function runDebugSso(connectionId, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        // 1. Get connection details
-        const connection = await client.sdk.sso.getConnection(connectionId);
-        const issues = [];
-        // 2. Check for common issues
-        if (connection.state !== 'active') {
-            issues.push(`Connection is ${connection.state} (not active)`);
-        }
-        // 3. List recent authentication events
-        let recentEvents = [];
-        try {
-            const events = await client.sdk.events.listEvents({
-                events: [
-                    'authentication.email_verification_succeeded',
-                    'authentication.magic_auth_succeeded',
-                    'authentication.sso_succeeded',
-                ],
-                ...(connection.organizationId && { organizationId: connection.organizationId }),
-                limit: 5,
-            });
-            recentEvents = events.data.map((e) => ({ id: e.id, event: e.event, createdAt: e.createdAt }));
-        }
-        catch {
-            // Events may not be available
-        }
-        if (isJsonMode()) {
-            outputJson({
-                connection: {
-                    id: connection.id,
-                    name: connection.name,
-                    type: connection.type,
-                    state: connection.state,
-                    organizationId: connection.organizationId,
-                    createdAt: connection.createdAt,
-                },
-                recentEvents,
-                issues,
-            });
-            return;
-        }
-        // 4. Human-readable diagnosis
-        console.log(chalk.bold(`SSO Connection: ${connection.name}`));
-        console.log(`  ID: ${connection.id}`);
-        console.log(`  Type: ${connection.type}`);
-        console.log(`  State: ${connection.state === 'active' ? chalk.green('active') : chalk.yellow(connection.state)}`);
-        console.log(`  Organization: ${connection.organizationId || chalk.dim('none')}`);
-        console.log(`  Created: ${connection.createdAt}`);
-        if (recentEvents.length > 0) {
-            console.log(chalk.bold('\nRecent auth events:'));
-            for (const event of recentEvents) {
-                console.log(`  ${event.event} (${event.createdAt})`);
-            }
-        }
-        else {
-            console.log(chalk.dim('\nNo recent authentication events found.'));
-        }
-        if (issues.length > 0) {
-            console.log(chalk.bold('\nIssues found:'));
-            for (const issue of issues) {
-                console.log(chalk.yellow(`  ⚠ ${issue}`));
-            }
-        }
-        else {
-            console.log(chalk.green('\nNo issues detected.'));
-        }
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-//# sourceMappingURL=debug-sso.js.map

package/dist/commands/debug-sso.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"debug-sso.js","sourceRoot":"","sources":["../../src/commands/debug-sso.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;AAE3D,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,YAAoB,EAAE,MAAc,EAAE,OAAgB;IACtF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,4BAA4B;QAC5B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAEpE,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,6BAA6B;QAC7B,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,iBAAiB,UAAU,CAAC,KAAK,eAAe,CAAC,CAAC;QAChE,CAAC;QAED,uCAAuC;QACvC,IAAI,YAAY,GAA4D,EAAE,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;gBAChD,MAAM,EAAE;oBACN,6CAA6C;oBAC7C,qCAAqC;oBACrC,8BAA8B;iBAChB;gBAChB,GAAG,CAAC,UAAU,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,UAAU,CAAC,cAAc,EAAE,CAAC;gBAC/E,KAAK,EAAE,CAAC;aACT,CAAC,CAAC;YACH,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;QAED,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC;gBACT,UAAU,EAAE;oBACV,EAAE,EAAE,UAAU,CAAC,EAAE;oBACjB,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,cAAc,EAAE,UAAU,CAAC,cAAc;oBACzC,SAAS,EAAE,UAAU,CAAC,SAAS;iBAChC;gBACD,YAAY;gBACZ,MAAM;aACP,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,SAAS,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,YAAY,UAAU,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClH,OAAO,CAAC,GAAG,CAAC,mBAAmB,UAAU,CAAC,cAAc,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC;QAElD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACjD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC","sourcesContent":["import chalk from 'chalk';\nimport type { EventName } from '@workos-inc/node';\nimport { createWorkOSClient } from '../lib/workos-client.js';\nimport { outputJson, isJsonMode } from '../utils/output.js';\nimport { createApiErrorHandler } from '../lib/api-error-handler.js';\n\nconst handleApiError = createApiErrorHandler('Connection');\n\nexport async function runDebugSso(connectionId: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    // 1. Get connection details\n    const connection = await client.sdk.sso.getConnection(connectionId);\n\n    const issues: string[] = [];\n\n    // 2. Check for common issues\n    if (connection.state !== 'active') {\n      issues.push(`Connection is ${connection.state} (not active)`);\n    }\n\n    // 3. List recent authentication events\n    let recentEvents: Array<{ id: string; event: string; createdAt: string }> = [];\n    try {\n      const events = await client.sdk.events.listEvents({\n        events: [\n          'authentication.email_verification_succeeded',\n          'authentication.magic_auth_succeeded',\n          'authentication.sso_succeeded',\n        ] as EventName[],\n        ...(connection.organizationId && { organizationId: connection.organizationId }),\n        limit: 5,\n      });\n      recentEvents = events.data.map((e) => ({ id: e.id, event: e.event, createdAt: e.createdAt }));\n    } catch {\n      // Events may not be available\n    }\n\n    if (isJsonMode()) {\n      outputJson({\n        connection: {\n          id: connection.id,\n          name: connection.name,\n          type: connection.type,\n          state: connection.state,\n          organizationId: connection.organizationId,\n          createdAt: connection.createdAt,\n        },\n        recentEvents,\n        issues,\n      });\n      return;\n    }\n\n    // 4. Human-readable diagnosis\n    console.log(chalk.bold(`SSO Connection: ${connection.name}`));\n    console.log(`  ID: ${connection.id}`);\n    console.log(`  Type: ${connection.type}`);\n    console.log(`  State: ${connection.state === 'active' ? chalk.green('active') : chalk.yellow(connection.state)}`);\n    console.log(`  Organization: ${connection.organizationId || chalk.dim('none')}`);\n    console.log(`  Created: ${connection.createdAt}`);\n\n    if (recentEvents.length > 0) {\n      console.log(chalk.bold('\\nRecent auth events:'));\n      for (const event of recentEvents) {\n        console.log(`  ${event.event} (${event.createdAt})`);\n      }\n    } else {\n      console.log(chalk.dim('\\nNo recent authentication events found.'));\n    }\n\n    if (issues.length > 0) {\n      console.log(chalk.bold('\\nIssues found:'));\n      for (const issue of issues) {\n        console.log(chalk.yellow(`  ⚠ ${issue}`));\n      }\n    } else {\n      console.log(chalk.green('\\nNo issues detected.'));\n    }\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n"]}

package/dist/commands/debug-sync.d.ts

@@ -1 +0,0 @@
-export declare function runDebugSync(directoryId: string, apiKey: string, baseUrl?: string): Promise<void>;

package/dist/commands/debug-sync.js

@@ -1,102 +0,0 @@
-import chalk from 'chalk';
-import { createWorkOSClient } from '../lib/workos-client.js';
-import { outputJson, isJsonMode } from '../utils/output.js';
-import { createApiErrorHandler } from '../lib/api-error-handler.js';
-const handleApiError = createApiErrorHandler('Directory');
-export async function runDebugSync(directoryId, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        // 1. Get directory details
-        const directory = await client.sdk.directorySync.getDirectory(directoryId);
-        const issues = [];
-        // 2. Check state
-        if (String(directory.state) !== 'linked') {
-            issues.push(`Directory is ${directory.state} (not linked)`);
-        }
-        // 3. Count users and groups
-        let userCount = 0;
-        let groupCount = 0;
-        try {
-            const users = await client.sdk.directorySync.listUsers({ directory: directoryId, limit: 1 });
-            userCount = users.data.length;
-            // If there's pagination, there are more
-            if (users.listMetadata.after)
-                userCount = -1; // indicates "more than 1"
-        }
-        catch {
-            // May not have access
-        }
-        try {
-            const groups = await client.sdk.directorySync.listGroups({ directory: directoryId, limit: 1 });
-            groupCount = groups.data.length;
-            if (groups.listMetadata.after)
-                groupCount = -1;
-        }
-        catch {
-            // May not have access
-        }
-        // 4. List recent sync events
-        let recentEvents = [];
-        try {
-            const events = await client.sdk.events.listEvents({
-                events: ['dsync.user.created', 'dsync.user.updated', 'dsync.group.created'],
-                ...(directory.organizationId && { organizationId: directory.organizationId }),
-                limit: 5,
-            });
-            recentEvents = events.data.map((e) => ({ id: e.id, event: e.event, createdAt: e.createdAt }));
-        }
-        catch {
-            // Events may not be available
-        }
-        if (recentEvents.length === 0) {
-            issues.push('No recent sync events found — sync may be stalled');
-        }
-        if (isJsonMode()) {
-            outputJson({
-                directory: {
-                    id: directory.id,
-                    name: directory.name,
-                    type: directory.type,
-                    state: directory.state,
-                    organizationId: directory.organizationId,
-                    createdAt: directory.createdAt,
-                },
-                userCount: userCount === -1 ? '1+' : userCount,
-                groupCount: groupCount === -1 ? '1+' : groupCount,
-                recentEvents,
-                issues,
-            });
-            return;
-        }
-        // 5. Human-readable diagnosis
-        console.log(chalk.bold(`Directory Sync: ${directory.name}`));
-        console.log(`  ID: ${directory.id}`);
-        console.log(`  Type: ${directory.type}`);
-        console.log(`  State: ${String(directory.state) === 'linked' ? chalk.green('linked') : chalk.yellow(directory.state)}`);
-        console.log(`  Organization: ${directory.organizationId || chalk.dim('none')}`);
-        console.log(`  Users: ${userCount === -1 ? '1+' : userCount}`);
-        console.log(`  Groups: ${groupCount === -1 ? '1+' : groupCount}`);
-        if (recentEvents.length > 0) {
-            console.log(chalk.bold('\nRecent sync events:'));
-            for (const event of recentEvents) {
-                console.log(`  ${event.event} (${event.createdAt})`);
-            }
-        }
-        else {
-            console.log(chalk.dim('\nNo recent sync events found.'));
-        }
-        if (issues.length > 0) {
-            console.log(chalk.bold('\nIssues found:'));
-            for (const issue of issues) {
-                console.log(chalk.yellow(`  ⚠ ${issue}`));
-            }
-        }
-        else {
-            console.log(chalk.green('\nNo issues detected.'));
-        }
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-//# sourceMappingURL=debug-sync.js.map

package/dist/commands/debug-sync.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"debug-sync.js","sourceRoot":"","sources":["../../src/commands/debug-sync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,WAAmB,EAAE,MAAc,EAAE,OAAgB;IACtF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,2BAA2B;QAC3B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAE3E,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,iBAAiB;QACjB,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,gBAAgB,SAAS,CAAC,KAAK,eAAe,CAAC,CAAC;QAC9D,CAAC;QAED,4BAA4B;QAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAC7F,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YAC9B,wCAAwC;YACxC,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK;gBAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,0BAA0B;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/F,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAChC,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK;gBAAE,UAAU,GAAG,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;QAED,6BAA6B;QAC7B,IAAI,YAAY,GAA4D,EAAE,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;gBAChD,MAAM,EAAE,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,qBAAqB,CAAgB;gBAC1F,GAAG,CAAC,SAAS,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC;gBAC7E,KAAK,EAAE,CAAC;aACT,CAAC,CAAC;YACH,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC;gBACT,SAAS,EAAE;oBACT,EAAE,EAAE,SAAS,CAAC,EAAE;oBAChB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,KAAK,EAAE,SAAS,CAAC,KAAK;oBACtB,cAAc,EAAE,SAAS,CAAC,cAAc;oBACxC,SAAS,EAAE,SAAS,CAAC,SAAS;iBAC/B;gBACD,SAAS,EAAE,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;gBAC9C,UAAU,EAAE,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;gBACjD,YAAY;gBACZ,MAAM;aACP,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,SAAS,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,WAAW,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CACT,YAAY,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAC3G,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,mBAAmB,SAAS,CAAC,cAAc,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,GAAG,CAAC,YAAY,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,aAAa,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAElE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACjD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC","sourcesContent":["import chalk from 'chalk';\nimport type { EventName } from '@workos-inc/node';\nimport { createWorkOSClient } from '../lib/workos-client.js';\nimport { outputJson, isJsonMode } from '../utils/output.js';\nimport { createApiErrorHandler } from '../lib/api-error-handler.js';\n\nconst handleApiError = createApiErrorHandler('Directory');\n\nexport async function runDebugSync(directoryId: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    // 1. Get directory details\n    const directory = await client.sdk.directorySync.getDirectory(directoryId);\n\n    const issues: string[] = [];\n\n    // 2. Check state\n    if (String(directory.state) !== 'linked') {\n      issues.push(`Directory is ${directory.state} (not linked)`);\n    }\n\n    // 3. Count users and groups\n    let userCount = 0;\n    let groupCount = 0;\n    try {\n      const users = await client.sdk.directorySync.listUsers({ directory: directoryId, limit: 1 });\n      userCount = users.data.length;\n      // If there's pagination, there are more\n      if (users.listMetadata.after) userCount = -1; // indicates \"more than 1\"\n    } catch {\n      // May not have access\n    }\n\n    try {\n      const groups = await client.sdk.directorySync.listGroups({ directory: directoryId, limit: 1 });\n      groupCount = groups.data.length;\n      if (groups.listMetadata.after) groupCount = -1;\n    } catch {\n      // May not have access\n    }\n\n    // 4. List recent sync events\n    let recentEvents: Array<{ id: string; event: string; createdAt: string }> = [];\n    try {\n      const events = await client.sdk.events.listEvents({\n        events: ['dsync.user.created', 'dsync.user.updated', 'dsync.group.created'] as EventName[],\n        ...(directory.organizationId && { organizationId: directory.organizationId }),\n        limit: 5,\n      });\n      recentEvents = events.data.map((e) => ({ id: e.id, event: e.event, createdAt: e.createdAt }));\n    } catch {\n      // Events may not be available\n    }\n\n    if (recentEvents.length === 0) {\n      issues.push('No recent sync events found — sync may be stalled');\n    }\n\n    if (isJsonMode()) {\n      outputJson({\n        directory: {\n          id: directory.id,\n          name: directory.name,\n          type: directory.type,\n          state: directory.state,\n          organizationId: directory.organizationId,\n          createdAt: directory.createdAt,\n        },\n        userCount: userCount === -1 ? '1+' : userCount,\n        groupCount: groupCount === -1 ? '1+' : groupCount,\n        recentEvents,\n        issues,\n      });\n      return;\n    }\n\n    // 5. Human-readable diagnosis\n    console.log(chalk.bold(`Directory Sync: ${directory.name}`));\n    console.log(`  ID: ${directory.id}`);\n    console.log(`  Type: ${directory.type}`);\n    console.log(\n      `  State: ${String(directory.state) === 'linked' ? chalk.green('linked') : chalk.yellow(directory.state)}`,\n    );\n    console.log(`  Organization: ${directory.organizationId || chalk.dim('none')}`);\n    console.log(`  Users: ${userCount === -1 ? '1+' : userCount}`);\n    console.log(`  Groups: ${groupCount === -1 ? '1+' : groupCount}`);\n\n    if (recentEvents.length > 0) {\n      console.log(chalk.bold('\\nRecent sync events:'));\n      for (const event of recentEvents) {\n        console.log(`  ${event.event} (${event.createdAt})`);\n      }\n    } else {\n      console.log(chalk.dim('\\nNo recent sync events found.'));\n    }\n\n    if (issues.length > 0) {\n      console.log(chalk.bold('\\nIssues found:'));\n      for (const issue of issues) {\n        console.log(chalk.yellow(`  ⚠ ${issue}`));\n      }\n    } else {\n      console.log(chalk.green('\\nNo issues detected.'));\n    }\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n"]}

package/dist/commands/debug.d.ts

@@ -1,28 +0,0 @@
-export declare function runDebugState({ showSecrets }: {
-    showSecrets: boolean;
-}): Promise<void>;
-export declare function runDebugReset({ force, credentialsOnly, configOnly, }: {
-    force: boolean;
-    credentialsOnly: boolean;
-    configOnly: boolean;
-}): Promise<void>;
-export declare function runDebugSimulate({ expiredToken, noKeyring, unclaimed, noAuth, crash, }: {
-    expiredToken: boolean;
-    noKeyring: boolean;
-    unclaimed: boolean;
-    noAuth: boolean;
-    crash?: boolean;
-}): Promise<void>;
-/**
- * Catalog of WORKOS_-prefixed environment variables the CLI reads.
- *
- * This is the single source of truth for `workos debug env`. A unit test
- * (env-var-catalog.spec.ts) scans the source for `process.env.WORKOS_*` reads
- * and fails if any are missing here, so this list can't silently drift.
- */
-export declare const ENV_VAR_CATALOG: {
-    name: string;
-    effect: string;
-}[];
-export declare function runDebugEnv(): Promise<void>;
-export declare function runDebugToken(): Promise<void>;

package/dist/commands/debug.js

@@ -1,406 +0,0 @@
-import chalk from 'chalk';
-import clack from '../utils/clack.js';
-import { getCredentials, saveCredentials, clearCredentials, isTokenExpired, diagnoseCredentials, getCredentialsPath, setInsecureStorage, } from '../lib/credentials.js';
-import { getConfig, saveConfig, clearConfig, getConfigPath, setInsecureConfigStorage, diagnoseConfig, } from '../lib/config-store.js';
-import { clearPreferences, getPreferencesPath, getTelemetrySource, isNoticeShown, isTelemetryEnabled, isTelemetryOptedOut, } from '../lib/preferences.js';
-import { isJsonMode, outputJson, exitWithError } from '../utils/output.js';
-import { isPromptAllowed } from '../utils/interaction-mode.js';
-function maskSecret(value) {
-    if (!value)
-        return undefined;
-    if (value.length <= 8)
-        return '****';
-    return value.slice(0, 4) + '****' + value.slice(-4);
-}
-function formatTimeRemaining(ms) {
-    if (ms <= 0)
-        return 'expired';
-    const seconds = Math.floor(ms / 1000);
-    const minutes = Math.floor(seconds / 60);
-    const hours = Math.floor(minutes / 60);
-    if (hours > 0)
-        return `${hours}h ${minutes % 60}m`;
-    if (minutes > 0)
-        return `${minutes}m ${seconds % 60}s`;
-    return `${seconds}s`;
-}
-function parseJwt(token) {
-    try {
-        const parts = token.split('.');
-        if (parts.length !== 3)
-            return null;
-        return JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf-8'));
-    }
-    catch {
-        return null;
-    }
-}
-function determineCredentialSource(diagnostics) {
-    const hasKeyring = diagnostics.some((l) => l.startsWith('keyring: found'));
-    const hasFile = diagnostics.some((l) => l.includes('exists=true'));
-    const isInsecure = diagnostics.some((l) => l.includes('insecureStorage=true'));
-    if (isInsecure)
-        return hasFile ? 'file' : 'none';
-    if (hasKeyring)
-        return 'keyring';
-    if (hasFile)
-        return 'file';
-    return 'none';
-}
-// --- debug state ---
-export async function runDebugState({ showSecrets }) {
-    const creds = getCredentials();
-    const config = getConfig();
-    const diagnostics = diagnoseCredentials();
-    const credSource = determineCredentialSource(diagnostics);
-    const maybeRedact = showSecrets ? (v) => v : maskSecret;
-    const credentialsOutput = { present: !!creds, source: credSource };
-    if (creds) {
-        const timeRemaining = creds.expiresAt - Date.now();
-        const expired = isTokenExpired(creds);
-        Object.assign(credentialsOutput, {
-            userId: creds.userId,
-            email: creds.email ?? null,
-            accessToken: maybeRedact(creds.accessToken),
-            refreshToken: creds.refreshToken ? 'present' : 'absent',
-            expiresAt: creds.expiresAt,
-            expiresIn: expired
-                ? `expired ${formatTimeRemaining(-timeRemaining)} ago`
-                : `in ${formatTimeRemaining(timeRemaining)}`,
-            isExpired: expired,
-        });
-        if (creds.staging) {
-            credentialsOutput.staging = {
-                clientId: creds.staging.clientId,
-                apiKey: maybeRedact(creds.staging.apiKey),
-                fetchedAt: creds.staging.fetchedAt,
-            };
-        }
-    }
-    const configOutput = { present: !!config };
-    if (config) {
-        configOutput.activeEnvironment = config.activeEnvironment ?? null;
-        configOutput.environments = Object.fromEntries(Object.entries(config.environments).map(([key, env]) => [
-            key,
-            {
-                name: env.name,
-                type: env.type,
-                apiKey: maybeRedact(env.apiKey),
-                clientId: env.clientId ?? null,
-                endpoint: env.endpoint ?? null,
-                ...(env.type === 'unclaimed' && { claimToken: maybeRedact(env.claimToken) }),
-            },
-        ]));
-    }
-    const configDiagnostics = diagnoseConfig();
-    const configSource = determineCredentialSource(configDiagnostics);
-    configOutput.source = configSource;
-    const telemetryOutput = {
-        enabled: isTelemetryEnabled(),
-        optedOut: isTelemetryOptedOut(),
-        source: getTelemetrySource(),
-        noticeShown: isNoticeShown(),
-    };
-    const result = {
-        credentials: credentialsOutput,
-        config: configOutput,
-        telemetry: telemetryOutput,
-        storage: {
-            credentialsPath: getCredentialsPath(),
-            configPath: getConfigPath(),
-            preferencesPath: getPreferencesPath(),
-            credentialDiagnostics: diagnostics,
-            configDiagnostics,
-        },
-    };
-    if (isJsonMode()) {
-        outputJson(result);
-        return;
-    }
-    console.log(chalk.bold('Credentials'));
-    console.log(`  present: ${creds ? chalk.green('true') : chalk.yellow('false')}`);
-    console.log(`  source:  ${credSource}`);
-    if (creds) {
-        console.log(`  userId:  ${creds.userId}`);
-        console.log(`  email:   ${creds.email ?? chalk.dim('none')}`);
-        console.log(`  token:   ${maybeRedact(creds.accessToken)}`);
-        console.log(`  refresh: ${creds.refreshToken ? 'present' : 'absent'}`);
-        const expired = isTokenExpired(creds);
-        const timeRemaining = creds.expiresAt - Date.now();
-        console.log(`  expires: ${expired ? chalk.red(`expired ${formatTimeRemaining(-timeRemaining)} ago`) : chalk.green(`in ${formatTimeRemaining(timeRemaining)}`)}`);
-        if (creds.staging) {
-            console.log(`  staging: clientId=${creds.staging.clientId} apiKey=${maybeRedact(creds.staging.apiKey)}`);
-        }
-    }
-    console.log();
-    console.log(chalk.bold('Config'));
-    console.log(`  present: ${config ? chalk.green('true') : chalk.yellow('false')}`);
-    console.log(`  source:  ${configSource}`);
-    if (config) {
-        console.log(`  active:  ${config.activeEnvironment ?? chalk.dim('none')}`);
-        for (const [key, env] of Object.entries(config.environments)) {
-            console.log(`  env[${key}]: type=${env.type} apiKey=${maybeRedact(env.apiKey)}`);
-            if (env.type === 'unclaimed')
-                console.log(`    claimToken=${maybeRedact(env.claimToken)}`);
-        }
-    }
-    console.log();
-    console.log(chalk.bold('Telemetry'));
-    console.log(`  enabled:  ${telemetryOutput.enabled ? chalk.green('true') : chalk.yellow('false')}`);
-    console.log(`  optedOut: ${telemetryOutput.optedOut ? chalk.yellow('true') : 'false'}`);
-    console.log(`  source:   ${telemetryOutput.source}`);
-    console.log(`  notice:   ${telemetryOutput.noticeShown ? 'shown' : chalk.dim('not shown')}`);
-    console.log();
-    console.log(chalk.bold('Storage — Credentials'));
-    console.log(`  path: ${getCredentialsPath()}`);
-    for (const line of diagnostics) {
-        console.log(`  ${chalk.dim(line)}`);
-    }
-    console.log();
-    console.log(chalk.bold('Storage — Config'));
-    console.log(`  path: ${getConfigPath()}`);
-    for (const line of configDiagnostics) {
-        console.log(`  ${chalk.dim(line)}`);
-    }
-    console.log();
-    console.log(chalk.bold('Storage — Preferences'));
-    console.log(`  path: ${getPreferencesPath()}`);
-}
-// --- debug reset ---
-/** Join names with an Oxford comma: ["a","b","c"] => "a, b, and c". */
-function formatList(items) {
-    if (items.length <= 1)
-        return items.join('');
-    if (items.length === 2)
-        return `${items[0]} and ${items[1]}`;
-    return `${items.slice(0, -1).join(', ')}, and ${items[items.length - 1]}`;
-}
-export async function runDebugReset({ force, credentialsOnly, configOnly, }) {
-    // Both flags = clear both (same as neither)
-    const clearCreds = !configOnly || credentialsOnly;
-    const clearConf = !credentialsOnly || configOnly;
-    // Preferences (~/.workos/preferences.json) are non-secret local CLI state, so
-    // they ride with the config target. Clearing config returns the CLI to a
-    // fresh-install state, which includes resetting the telemetry preference.
-    const clearPrefs = clearConf;
-    const targets = formatList([clearCreds && 'credentials', clearConf && 'config', clearPrefs && 'preferences'].filter(Boolean));
-    if (!force) {
-        if (!isPromptAllowed()) {
-            exitWithError({
-                code: 'non_interactive_reset',
-                message: 'Use --force to reset in agent or CI mode',
-            });
-        }
-        const confirmed = await clack.confirm({
-            message: `Clear all ${targets}? This cannot be undone.`,
-        });
-        if (clack.isCancel(confirmed) || !confirmed) {
-            if (isJsonMode()) {
-                outputJson({ cleared: false, cancelled: true });
-            }
-            else {
-                clack.log.info('Reset cancelled');
-            }
-            return;
-        }
-    }
-    if (clearCreds)
-        clearCredentials();
-    if (clearConf)
-        clearConfig();
-    if (clearPrefs)
-        clearPreferences();
-    if (isJsonMode()) {
-        outputJson({ cleared: true, credentials: clearCreds, config: clearConf, preferences: clearPrefs });
-    }
-    else {
-        clack.log.success(`Cleared ${targets}`);
-    }
-}
-// --- debug simulate ---
-export async function runDebugSimulate({ expiredToken, noKeyring, unclaimed, noAuth, crash = false, }) {
-    // Simulate an unexpected crash to exercise the crash-telemetry pipeline
-    // end-to-end. Throws a plain Error (not CliExit) so the bin.ts lifecycle
-    // records a `crash` event with a sanitized stack rather than a handled exit.
-    if (crash) {
-        throw new Error('Simulated crash for telemetry verification');
-    }
-    // Validate: at least one flag
-    if (!expiredToken && !noKeyring && !unclaimed && !noAuth) {
-        exitWithError({
-            code: 'no_simulation_flags',
-            message: 'Specify at least one simulation flag: --expired-token, --no-keyring, --unclaimed, --no-auth',
-        });
-    }
-    // Validate: contradictory
-    if (expiredToken && noAuth) {
-        exitWithError({
-            code: 'contradictory_flags',
-            message: "Cannot combine --expired-token and --no-auth (can't expire a cleared token)",
-        });
-    }
-    const actions = [];
-    // Apply in order: storage tier first, then credential mutations, then config mutations
-    if (noKeyring) {
-        // Migrate current state to file storage
-        const creds = getCredentials();
-        const config = getConfig();
-        setInsecureStorage(true);
-        setInsecureConfigStorage(true);
-        if (creds)
-            saveCredentials(creds);
-        if (config)
-            saveConfig(config);
-        actions.push('Forced file-only storage (keyring bypassed)');
-    }
-    if (expiredToken) {
-        const creds = getCredentials();
-        if (!creds) {
-            exitWithError({
-                code: 'no_credentials',
-                message: 'Cannot simulate expired token — no credentials found. Log in first.',
-            });
-        }
-        saveCredentials({ ...creds, expiresAt: Date.now() - 60_000 });
-        actions.push('Set token expiresAt to 1 minute ago');
-    }
-    if (noAuth) {
-        clearCredentials();
-        actions.push('Cleared credentials (config preserved)');
-    }
-    if (unclaimed) {
-        const config = getConfig() ?? { environments: {} };
-        const envName = 'simulated-unclaimed';
-        config.environments[envName] = {
-            name: envName,
-            type: 'unclaimed',
-            apiKey: 'sk_test_simulated_unclaimed_000000000000',
-            clientId: 'client_simulated',
-            claimToken: 'claim_simulated_token_000000000000',
-        };
-        config.activeEnvironment = envName;
-        saveConfig(config);
-        actions.push(`Created unclaimed environment "${envName}" and set as active`);
-    }
-    if (isJsonMode()) {
-        outputJson({ simulated: true, actions });
-    }
-    else {
-        for (const action of actions) {
-            clack.log.success(action);
-        }
-    }
-}
-/**
- * Catalog of WORKOS_-prefixed environment variables the CLI reads.
- *
- * This is the single source of truth for `workos debug env`. A unit test
- * (env-var-catalog.spec.ts) scans the source for `process.env.WORKOS_*` reads
- * and fails if any are missing here, so this list can't silently drift.
- */
-export const ENV_VAR_CATALOG = [
-    // Credentials
-    { name: 'WORKOS_API_KEY', effect: 'Bypasses credential resolution — used directly for API calls' },
-    { name: 'WORKOS_CLIENT_ID', effect: 'WorkOS client ID used during credential resolution' },
-    // Interaction & output
-    { name: 'WORKOS_MODE', effect: 'Controls interaction behavior: human, agent, or CI' },
-    { name: 'WORKOS_AGENT', effect: 'Set to "1" to force agent interaction mode' },
-    { name: 'WORKOS_FORCE_TTY', effect: 'Forces human (non-JSON) output mode, even when piped' },
-    { name: 'WORKOS_DEBUG', effect: 'Set to "1" to enable verbose debug logging for all commands' },
-    { name: 'WORKOS_TELEMETRY', effect: 'Set to "false" to disable telemetry' },
-    // URLs (WORKOS_API_URL is the single base; gateway + telemetry derive from it)
-    {
-        name: 'WORKOS_API_URL',
-        effect: 'Overrides API base URL; also reroutes the LLM gateway and CLI telemetry endpoints',
-    },
-    { name: 'WORKOS_DASHBOARD_URL', effect: 'Overrides dashboard URL (default: https://dashboard.workos.com)' },
-    { name: 'WORKOS_AUTHKIT_DOMAIN', effect: 'Overrides AuthKit domain from settings' },
-    { name: 'WORKOS_BASE_URL', effect: 'AuthKit base URL, read during doctor environment checks' },
-    { name: 'WORKOS_REDIRECT_URI', effect: 'OAuth redirect URI, read during doctor environment checks' },
-    { name: 'WORKOS_COOKIE_DOMAIN', effect: 'Session cookie domain, read during doctor environment checks' },
-    // Development
-    { name: 'WORKOS_DEV', effect: 'Enables dev mode — loads .env.local at startup' },
-    { name: 'WORKOS_DISABLE_PROXY', effect: 'Disables the credential proxy for gateway auth' },
-];
-export async function runDebugEnv() {
-    const vars = ENV_VAR_CATALOG.map(({ name, effect }) => ({
-        name,
-        value: process.env[name],
-        effect,
-    }));
-    const setVars = vars.filter((v) => v.value !== undefined);
-    const unsetVars = vars.filter((v) => v.value === undefined);
-    if (isJsonMode()) {
-        outputJson({
-            variables: Object.fromEntries(vars.map((v) => [v.name, { value: v.value ?? null, effect: v.effect }])),
-            set: setVars.map((v) => v.name),
-            unset: unsetVars.map((v) => v.name),
-        });
-        return;
-    }
-    if (setVars.length > 0) {
-        console.log(chalk.bold('Set'));
-        for (const v of setVars) {
-            console.log(`  ${chalk.green(v.name)}=${v.value}`);
-            console.log(`    ${chalk.dim(v.effect)}`);
-        }
-        console.log();
-    }
-    console.log(chalk.bold(`Unset${setVars.length > 0 ? '' : ' (none active)'}`));
-    for (const v of unsetVars) {
-        console.log(`  ${chalk.dim(v.name)} — ${chalk.dim(v.effect)}`);
-    }
-}
-// --- debug token ---
-export async function runDebugToken() {
-    const creds = getCredentials();
-    if (!creds) {
-        if (isJsonMode()) {
-            outputJson({ present: false });
-        }
-        else {
-            console.log(chalk.yellow('No credentials found'));
-        }
-        return;
-    }
-    const claims = parseJwt(creds.accessToken);
-    const expired = isTokenExpired(creds);
-    const timeRemaining = creds.expiresAt - Date.now();
-    if (isJsonMode()) {
-        outputJson({
-            present: true,
-            format: claims ? 'jwt' : 'opaque',
-            expired,
-            expiresAt: creds.expiresAt,
-            expiresIn: expired
-                ? `expired ${formatTimeRemaining(-timeRemaining)} ago`
-                : `in ${formatTimeRemaining(timeRemaining)}`,
-            claims: claims ?? null,
-            refreshToken: { present: !!creds.refreshToken },
-        });
-        return;
-    }
-    if (claims) {
-        console.log(chalk.bold('JWT Token'));
-        console.log(`  expires: ${expired ? chalk.red(`expired ${formatTimeRemaining(-timeRemaining)} ago`) : chalk.green(`in ${formatTimeRemaining(timeRemaining)}`)}`);
-        console.log();
-        console.log(chalk.bold('Claims'));
-        for (const [key, value] of Object.entries(claims)) {
-            if (key === 'exp' || key === 'iat' || key === 'nbf') {
-                const date = new Date(value * 1000).toISOString();
-                console.log(`  ${key}: ${value} (${date})`);
-            }
-            else {
-                console.log(`  ${key}: ${JSON.stringify(value)}`);
-            }
-        }
-    }
-    else {
-        console.log(chalk.bold('Opaque Token'));
-        console.log(chalk.dim('  Token is not a JWT — cannot decode claims'));
-        console.log(`  expires: ${expired ? chalk.red(`expired ${formatTimeRemaining(-timeRemaining)} ago`) : chalk.green(`in ${formatTimeRemaining(timeRemaining)}`)}`);
-    }
-    console.log();
-    console.log(`  refresh token: ${creds.refreshToken ? chalk.green('present') : chalk.yellow('absent')}`);
-}
-//# sourceMappingURL=debug.js.map