workos 0.19.0 → 0.20.2

package/dist/commands/setup-org.js

@@ -1,99 +0,0 @@
-import chalk from 'chalk';
-import { createWorkOSClient } from '../lib/workos-client.js';
-import { outputJson, isJsonMode } from '../utils/output.js';
-import { createApiErrorHandler } from '../lib/api-error-handler.js';
-const handleApiError = createApiErrorHandler('SetupOrg');
-export async function runSetupOrg(options, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    const summary = {};
-    try {
-        // 1. Create organization
-        if (!isJsonMode())
-            console.log(chalk.bold(`Setting up organization: ${options.name}`));
-        const org = await client.sdk.organizations.createOrganization({
-            name: options.name,
-        });
-        summary.organizationId = org.id;
-        if (!isJsonMode())
-            console.log(chalk.green(`  Created org: ${org.name} (${org.id})`));
-        // 2. Add domain
-        if (options.domain) {
-            const domainResult = await client.sdk.organizationDomains.create({
-                domain: options.domain,
-                organizationId: org.id,
-            });
-            summary.domainId = domainResult.id;
-            if (!isJsonMode())
-                console.log(chalk.green(`  Added domain: ${options.domain}`));
-            // 3. Verify domain
-            try {
-                await client.sdk.organizationDomains.verify(domainResult.id);
-                summary.domainVerified = true;
-                if (!isJsonMode())
-                    console.log(chalk.green(`  Verified domain: ${options.domain}`));
-            }
-            catch {
-                summary.domainVerified = false;
-                if (!isJsonMode())
-                    console.log(chalk.yellow(`  Domain verification pending: ${options.domain}`));
-            }
-        }
-        // 4. Create org-scoped roles (copy from env role names)
-        if (options.roles?.length) {
-            summary.roles = [];
-            for (const roleSlug of options.roles) {
-                try {
-                    const role = await client.sdk.authorization.createOrganizationRole(org.id, {
-                        slug: roleSlug,
-                        name: roleSlug,
-                    });
-                    summary.roles.push(role.slug);
-                    if (!isJsonMode())
-                        console.log(chalk.green(`  Created org role: ${roleSlug}`));
-                }
-                catch (error) {
-                    if (error instanceof Error && error.message.toLowerCase().includes('already exists')) {
-                        if (!isJsonMode())
-                            console.log(chalk.dim(`  Role exists: ${roleSlug} (skipped)`));
-                    }
-                    else {
-                        if (!isJsonMode())
-                            console.log(chalk.yellow(`  Warning: Could not create role ${roleSlug}`));
-                    }
-                }
-            }
-        }
-        // 5. Generate Admin Portal link
-        try {
-            const portal = await client.sdk.portal.generateLink({
-                intent: 'sso',
-                organization: org.id,
-            });
-            summary.portalLink = portal.link;
-            if (!isJsonMode()) {
-                console.log(chalk.green(`  Portal link: ${portal.link}`));
-                console.log(chalk.dim('  Note: Portal links expire after 5 minutes.'));
-            }
-        }
-        catch {
-            if (!isJsonMode())
-                console.log(chalk.dim('  Portal link: skipped (may require plan upgrade)'));
-        }
-        // 6. Print summary
-        if (isJsonMode()) {
-            outputJson({ status: 'ok', ...summary });
-        }
-        else {
-            console.log(chalk.bold('\nSetup complete:'));
-            console.log(`  Organization: ${org.id}`);
-            if (options.domain)
-                console.log(`  Domain: ${options.domain} (${summary.domainVerified ? 'verified' : 'pending'})`);
-            if (summary.portalLink)
-                console.log(`  Portal: ${summary.portalLink}`);
-        }
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-//# sourceMappingURL=setup-org.js.map

package/dist/commands/setup-org.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"setup-org.js","sourceRoot":"","sources":["../../src/commands/setup-org.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;AAQzD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAwB,EAAE,MAAc,EAAE,OAAgB;IAC1F,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,OAAO,GAA4B,EAAE,CAAC;IAE5C,IAAI,CAAC;QACH,yBAAyB;QACzB,IAAI,CAAC,UAAU,EAAE;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,4BAA4B,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAEvF,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,kBAAkB,CAAC;YAC5D,IAAI,EAAE,OAAO,CAAC,IAAI;SACnB,CAAC,CAAC;QACH,OAAO,CAAC,cAAc,GAAG,GAAG,CAAC,EAAE,CAAC;QAChC,IAAI,CAAC,UAAU,EAAE;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAEtF,gBAAgB;QAChB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC;gBAC/D,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,cAAc,EAAE,GAAG,CAAC,EAAE;aACvB,CAAC,CAAC;YACH,OAAO,CAAC,QAAQ,GAAG,YAAY,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,UAAU,EAAE;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,mBAAmB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAEjF,mBAAmB;YACnB,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;gBAC7D,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC9B,IAAI,CAAC,UAAU,EAAE;oBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,sBAAsB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACtF,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,cAAc,GAAG,KAAK,CAAC;gBAC/B,IAAI,CAAC,UAAU,EAAE;oBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,kCAAkC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACnG,CAAC;QACH,CAAC;QAED,wDAAwD;QACxD,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YAC1B,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC;YACnB,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,EAAE;wBACzE,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,QAAQ;qBACf,CAAC,CAAC;oBACF,OAAO,CAAC,KAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC5C,IAAI,CAAC,UAAU,EAAE;wBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,QAAQ,EAAE,CAAC,CAAC,CAAC;gBACjF,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;wBACrF,IAAI,CAAC,UAAU,EAAE;4BAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,QAAQ,YAAY,CAAC,CAAC,CAAC;oBACpF,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,UAAU,EAAE;4BAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC,CAAC;oBAC/F,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC;gBAClD,MAAM,EAAE,KAAuE;gBAC/E,YAAY,EAAE,GAAG,CAAC,EAAE;aACrB,CAAC,CAAC;YACH,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;YACjC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;gBAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,UAAU,EAAE;gBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC,CAAC;QACjG,CAAC;QAED,mBAAmB;QACnB,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,IAAI,OAAO,CAAC,MAAM;gBAChB,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;YAClG,IAAI,OAAO,CAAC,UAAU;gBAAE,OAAO,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC","sourcesContent":["import chalk from 'chalk';\nimport { createWorkOSClient } from '../lib/workos-client.js';\nimport { outputJson, isJsonMode } from '../utils/output.js';\nimport { createApiErrorHandler } from '../lib/api-error-handler.js';\n\nconst handleApiError = createApiErrorHandler('SetupOrg');\n\nexport interface SetupOrgOptions {\n  name: string;\n  domain?: string;\n  roles?: string[];\n}\n\nexport async function runSetupOrg(options: SetupOrgOptions, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n  const summary: Record<string, unknown> = {};\n\n  try {\n    // 1. Create organization\n    if (!isJsonMode()) console.log(chalk.bold(`Setting up organization: ${options.name}`));\n\n    const org = await client.sdk.organizations.createOrganization({\n      name: options.name,\n    });\n    summary.organizationId = org.id;\n    if (!isJsonMode()) console.log(chalk.green(`  Created org: ${org.name} (${org.id})`));\n\n    // 2. Add domain\n    if (options.domain) {\n      const domainResult = await client.sdk.organizationDomains.create({\n        domain: options.domain,\n        organizationId: org.id,\n      });\n      summary.domainId = domainResult.id;\n      if (!isJsonMode()) console.log(chalk.green(`  Added domain: ${options.domain}`));\n\n      // 3. Verify domain\n      try {\n        await client.sdk.organizationDomains.verify(domainResult.id);\n        summary.domainVerified = true;\n        if (!isJsonMode()) console.log(chalk.green(`  Verified domain: ${options.domain}`));\n      } catch {\n        summary.domainVerified = false;\n        if (!isJsonMode()) console.log(chalk.yellow(`  Domain verification pending: ${options.domain}`));\n      }\n    }\n\n    // 4. Create org-scoped roles (copy from env role names)\n    if (options.roles?.length) {\n      summary.roles = [];\n      for (const roleSlug of options.roles) {\n        try {\n          const role = await client.sdk.authorization.createOrganizationRole(org.id, {\n            slug: roleSlug,\n            name: roleSlug,\n          });\n          (summary.roles as string[]).push(role.slug);\n          if (!isJsonMode()) console.log(chalk.green(`  Created org role: ${roleSlug}`));\n        } catch (error: unknown) {\n          if (error instanceof Error && error.message.toLowerCase().includes('already exists')) {\n            if (!isJsonMode()) console.log(chalk.dim(`  Role exists: ${roleSlug} (skipped)`));\n          } else {\n            if (!isJsonMode()) console.log(chalk.yellow(`  Warning: Could not create role ${roleSlug}`));\n          }\n        }\n      }\n    }\n\n    // 5. Generate Admin Portal link\n    try {\n      const portal = await client.sdk.portal.generateLink({\n        intent: 'sso' as Parameters<typeof client.sdk.portal.generateLink>[0]['intent'],\n        organization: org.id,\n      });\n      summary.portalLink = portal.link;\n      if (!isJsonMode()) {\n        console.log(chalk.green(`  Portal link: ${portal.link}`));\n        console.log(chalk.dim('  Note: Portal links expire after 5 minutes.'));\n      }\n    } catch {\n      if (!isJsonMode()) console.log(chalk.dim('  Portal link: skipped (may require plan upgrade)'));\n    }\n\n    // 6. Print summary\n    if (isJsonMode()) {\n      outputJson({ status: 'ok', ...summary });\n    } else {\n      console.log(chalk.bold('\\nSetup complete:'));\n      console.log(`  Organization: ${org.id}`);\n      if (options.domain)\n        console.log(`  Domain: ${options.domain} (${summary.domainVerified ? 'verified' : 'pending'})`);\n      if (summary.portalLink) console.log(`  Portal: ${summary.portalLink}`);\n    }\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n"]}

package/dist/commands/setup.d.ts

@@ -1,50 +0,0 @@
-/**
- * `workos setup` — the consolidated, consented agent-setup moment.
- *
- * Owns BOTH surfaces that used to nag independently:
- *   - skills auto-install (previously silent + unconditional on login/install)
- *   - the MCP server offer (previously a separate prompt at end of `install`)
- *
- * One prompt, one place. It is called three ways:
- *   - trigger 'login' / 'install' → `maybeRunSetupAfter`, a best-effort hook that
- *     can never block or fail the parent flow, gated so it stays silent in
- *     agent/CI/non-TTY/JSON and never re-asks after a decline or completion.
- *   - trigger 'command' → the top-level `workos setup`, always runnable, with
- *     flags for granular / non-interactive use.
- *
- * The consent contract is the whole point: nothing is written to a coding agent
- * unless the user says yes (or passes --yes). This replaces the auto-install
- * that a customer called "prompt injection malware".
- */
-export type SetupTrigger = 'login' | 'install' | 'command';
-export interface RunSetupOptions {
-    trigger: SetupTrigger;
-    /** Restrict to specific agent keys (e.g. claude-code, cursor). */
-    agents?: string[];
-    skillsOnly?: boolean;
-    mcpOnly?: boolean;
-    /** Skip the confirm and install directly (for non-interactive `workos setup --yes`). */
-    assumeYes?: boolean;
-    /** Clear a prior decline so automatic offers resume, then return. */
-    reset?: boolean;
-}
-/**
- * Run the consolidated setup flow. Behavior branches on `trigger`:
- *   - automatic (login/install): self-gates on mode + decline/complete, prompts,
- *     records an absolute decline on "no".
- *   - command: always runs; a "no" does NOT record a permanent decline.
- */
-export declare function runSetup(opts: RunSetupOptions): Promise<void>;
-/**
- * Best-effort setup offer after a successful `login` / `install`.
- *
- * Never throws into, wedges, or fails the parent flow — a try/catch swallows any
- * error. The offer is only ever shown to a present human in an interactive TTY
- * (runSetup early-returns in every machine/non-interactive context), so the
- * confirm is NOT time-bounded: a question that auto-dismisses while the user is
- * reading it is exactly the "it asked but moved on" bug. @inquirer already
- * handles ctrl-c, and detection/install are internally time-bounded, so there is
- * nothing left to race. The parent flow has already succeeded by the time this
- * runs. Any failure is reported to telemetry before being swallowed.
- */
-export declare function maybeRunSetupAfter(trigger: 'login' | 'install'): Promise<void>;

package/dist/commands/setup.js

@@ -1,237 +0,0 @@
-/**
- * `workos setup` — the consolidated, consented agent-setup moment.
- *
- * Owns BOTH surfaces that used to nag independently:
- *   - skills auto-install (previously silent + unconditional on login/install)
- *   - the MCP server offer (previously a separate prompt at end of `install`)
- *
- * One prompt, one place. It is called three ways:
- *   - trigger 'login' / 'install' → `maybeRunSetupAfter`, a best-effort hook that
- *     can never block or fail the parent flow, gated so it stays silent in
- *     agent/CI/non-TTY/JSON and never re-asks after a decline or completion.
- *   - trigger 'command' → the top-level `workos setup`, always runnable, with
- *     flags for granular / non-interactive use.
- *
- * The consent contract is the whole point: nothing is written to a coding agent
- * unless the user says yes (or passes --yes). This replaces the auto-install
- * that a customer called "prompt injection malware".
- */
-import { homedir } from 'node:os';
-import ui, { isCancel } from '../utils/ui.js';
-import { outputSuccess, exitWithError, isJsonMode } from '../utils/output.js';
-import { ExitCode, exitWithCode } from '../utils/exit-codes.js';
-import { CliExit } from '../utils/cli-exit.js';
-import { isPromptAllowed } from '../utils/interaction-mode.js';
-import { isSetupDeclined, isSetupCompleted, recordSetupDeclined, recordSetupCompleted, clearSetupDecline, } from '../lib/preferences.js';
-import { createAgents, detectAgents, refreshWorkOSSkills } from './install-skill.js';
-import { detectMcpClients, MCP_AGENT_KEYS, MCP_OUTCOME_LABELS, } from '../lib/mcp-clients.js';
-import { analytics } from '../utils/analytics.js';
-import { formatWorkOSCommand } from '../utils/command-invocation.js';
-/** Validate an --agents filter against the known keys; exit with a structured error on unknown. */
-function validateAgentFilter(agents, known) {
-    if (!agents || agents.length === 0)
-        return undefined;
-    const unknown = agents.filter((a) => !known.includes(a));
-    if (unknown.length > 0) {
-        exitWithError({
-            code: 'unknown_agent',
-            message: `Unknown agent(s): ${unknown.join(', ')}. Supported: ${known.join(', ')}.`,
-        });
-    }
-    return agents;
-}
-/** Distinct display names across skill agents + MCP targets, for the offer copy. */
-function detectedNames(skillAgents, mcpTargets) {
-    return Array.from(new Set([...skillAgents.map((a) => a.displayName), ...mcpTargets.map((t) => t.displayName)]));
-}
-/**
- * Run the consolidated setup flow. Behavior branches on `trigger`:
- *   - automatic (login/install): self-gates on mode + decline/complete, prompts,
- *     records an absolute decline on "no".
- *   - command: always runs; a "no" does NOT record a permanent decline.
- */
-export async function runSetup(opts) {
-    if (opts.reset) {
-        clearSetupDecline();
-        if (isJsonMode()) {
-            outputSuccess('Setup offers re-enabled', { reset: true });
-        }
-        else {
-            ui.log.success(`Setup offers re-enabled. Run \`${formatWorkOSCommand('setup')}\` to configure your agents.`);
-        }
-        return;
-    }
-    const isCommand = opts.trigger === 'command';
-    const agents = createAgents(homedir()); // cheap (path construction, no IO); built once
-    const agentFilter = isCommand
-        ? validateAgentFilter(opts.agents, [...Object.keys(agents), ...MCP_AGENT_KEYS])
-        : opts.agents;
-    // Gate BEFORE any agent detection — detectMcpClients shells out to `claude mcp
-    // list` etc., so a machine / declined / completed run must pay nothing.
-    if (!isCommand) {
-        // Automatic (login/install): silent in machine/non-interactive contexts, and
-        // never after a decline or a prior completion.
-        if (isJsonMode() || !isPromptAllowed())
-            return;
-        if (isSetupDeclined() || isSetupCompleted())
-            return;
-    }
-    else if ((!isPromptAllowed() || isJsonMode()) && !opts.assumeYes) {
-        // Explicit `workos setup` can't prompt in a non-interactive context, nor
-        // under --json — output mode is JSON while interaction mode stays human, so
-        // isPromptAllowed() is still true and a confirm would pollute the
-        // machine-readable stdout stream. Require --yes in both cases.
-        exitWithError({
-            code: 'confirmation_required',
-            message: `Setup can't prompt here (non-interactive or --json). Re-run \`${formatWorkOSCommand('setup --yes')}\` to install without a prompt.`,
-        });
-    }
-    const wantSkills = !opts.mcpOnly;
-    const wantMcp = !opts.skillsOnly;
-    const skillAgents = wantSkills ? detectAgents(agents, agentFilter) : [];
-    const mcpTargets = wantMcp ? await detectMcpClients(agentFilter) : [];
-    const names = detectedNames(skillAgents, mcpTargets);
-    // Nothing to install to. Surface it only for an explicit invocation.
-    if (names.length === 0) {
-        if (isCommand) {
-            if (isJsonMode()) {
-                outputSuccess('No supported coding agents detected', { agents: [] });
-            }
-            else {
-                ui.log.info('No supported coding agents detected (looked for Claude Code, Codex, Cursor, Goose).');
-            }
-        }
-        return;
-    }
-    const startedAt = Date.now();
-    // The offer.
-    if (!opts.assumeYes) {
-        ui.heading('Set up your coding agent');
-        const what = wantSkills && wantMcp ? 'WorkOS skills and the MCP server' : wantMcp ? 'the WorkOS MCP server' : 'WorkOS skills';
-        ui.note(`Add ${what} to ${names.join(', ')} so your coding agent can\n` +
-            `scaffold auth and manage WorkOS resources. Nothing is written until you confirm.`);
-        const answer = await ui.confirm({ message: 'Set up now?', initialValue: true });
-        // Cancel (ctrl-c) is not a decline — skip silently and ask again next time,
-        // but record it so the cut-off is observable in telemetry.
-        if (isCancel(answer)) {
-            emitSetupEvent(opts.trigger, startedAt, 'cancelled', { skills: [], mcpInstalled: [], mcpFailed: [] });
-            return;
-        }
-        if (!answer) {
-            if (!isCommand)
-                recordSetupDeclined();
-            emitSetupEvent(opts.trigger, startedAt, 'declined', { skills: [], mcpInstalled: [], mcpFailed: [] });
-            ui.log.hint(`No problem. Run \`${formatWorkOSCommand('setup')}\` anytime.`);
-            return;
-        }
-    }
-    // Install.
-    await installAndReport(opts, skillAgents, mcpTargets, startedAt);
-}
-async function installAndReport(opts, skillAgents, mcpTargets, startedAt) {
-    // Skills (local fs) and MCP (shell-outs to `claude mcp add` etc., which can
-    // each block toward a 10s timeout) are independent — run them concurrently,
-    // and run the per-agent MCP adds in parallel too. Empty inputs (skillsOnly /
-    // mcpOnly) resolve to null / [] without work. `target.add()` never rejects.
-    const [skillResult, mcpResults] = await Promise.all([
-        skillAgents.length > 0 ? refreshWorkOSSkills({ agents: skillAgents }) : Promise.resolve(null),
-        Promise.all(mcpTargets.map((target) => target.add())),
-    ]);
-    const skillAgentNames = skillResult?.agents.map((a) => a.displayName) ?? [];
-    const mcpInstalled = mcpResults
-        .filter((r) => r.outcome === 'installed' || r.outcome === 'already-installed')
-        .map((r) => r.agent);
-    const failedResults = mcpResults.filter((r) => r.outcome === 'failed');
-    const mcpFailed = failedResults.map((r) => r.agent);
-    // Carry a bounded, agent-tagged reason so the MCP-install failure CAUSE (not
-    // just the count) is observable in telemetry. Already user-safe — the same
-    // text is shown via ui.log.error.
-    const mcpFailedReasons = failedResults.map((r) => `${r.agent}:${(r.error ?? '').slice(0, 120)}`).join('; ');
-    // Only mark setup complete when something actually landed. A run where every
-    // attempted install failed (e.g. transient `claude mcp add` timeouts, with no
-    // skills to fall back on) must NOT be treated as done: isSetupCompleted()
-    // suppresses every future automatic offer, so persisting completion here would
-    // strand the user after a transient failure. Leave the pref unset so the next
-    // login/install re-offers.
-    if (skillAgentNames.length > 0 || mcpInstalled.length > 0) {
-        recordSetupCompleted();
-    }
-    emitSetupEvent(opts.trigger, startedAt, 'accepted', {
-        skills: skillResult?.agents.map((a) => a.name) ?? [],
-        mcpInstalled,
-        mcpFailed,
-        mcpFailedReasons,
-    });
-    reportResults(skillResult ? { agents: skillAgentNames, count: skillResult.skills.length } : null, mcpResults);
-}
-/** Emit the outcome in both output modes; exit non-zero if any MCP install failed. */
-function reportResults(skills, mcp) {
-    if (isJsonMode()) {
-        outputSuccess('Setup complete', { skills, mcp });
-    }
-    else {
-        if (skills && skills.agents.length > 0) {
-            const word = skills.count === 1 ? 'skill' : 'skills';
-            ui.log.success(`${skills.count} ${word} installed for ${skills.agents.join(', ')}`);
-        }
-        for (const r of mcp) {
-            const line = `MCP server: ${r.displayName} — ${MCP_OUTCOME_LABELS[r.outcome]}`;
-            if (r.outcome === 'failed') {
-                ui.log.error(r.error ? `${line} (${r.error})` : line);
-            }
-            else {
-                ui.log.success(line);
-            }
-        }
-        if (mcp.some((r) => r.outcome === 'installed' || r.outcome === 'already-installed')) {
-            ui.log.hint('Your agent will authorize WorkOS via OAuth on first MCP use.');
-        }
-    }
-    if (mcp.some((r) => r.outcome === 'failed')) {
-        exitWithCode(ExitCode.GENERAL_ERROR);
-    }
-}
-function emitSetupEvent(trigger, startedAt, outcome, agents) {
-    analytics.emitCommandEvent('setup offer', Date.now() - startedAt, agents.mcpFailed.length === 0, {
-        extraAttributes: {
-            'setup.trigger': trigger,
-            // `accepted` kept for back-compat dashboards; `outcome` distinguishes a
-            // deliberate "no" (declined) from a walk-away/ctrl-c (cancelled).
-            'setup.accepted': outcome === 'accepted',
-            'setup.outcome': outcome,
-            'setup.skills_agents': agents.skills.join(','),
-            'setup.mcp_installed': agents.mcpInstalled.join(','),
-            'setup.mcp_failed': agents.mcpFailed.join(','),
-            ...(agents.mcpFailedReasons ? { 'setup.mcp_failed_reasons': agents.mcpFailedReasons } : {}),
-        },
-    });
-}
-/**
- * Best-effort setup offer after a successful `login` / `install`.
- *
- * Never throws into, wedges, or fails the parent flow — a try/catch swallows any
- * error. The offer is only ever shown to a present human in an interactive TTY
- * (runSetup early-returns in every machine/non-interactive context), so the
- * confirm is NOT time-bounded: a question that auto-dismisses while the user is
- * reading it is exactly the "it asked but moved on" bug. @inquirer already
- * handles ctrl-c, and detection/install are internally time-bounded, so there is
- * nothing left to race. The parent flow has already succeeded by the time this
- * runs. Any failure is reported to telemetry before being swallowed.
- */
-export async function maybeRunSetupAfter(trigger) {
-    try {
-        await runSetup({ trigger });
-    }
-    catch (error) {
-        // reportResults exits non-zero via CliExit on a failed MCP add — that's an
-        // intentional exit for the standalone command, not an exception to report
-        // (and it stays swallowed here so it never fails the parent login/install).
-        if (error instanceof CliExit)
-            return;
-        // Setup must never fail or block login / install — but don't drop the signal.
-        analytics.captureException(error instanceof Error ? error : new Error(String(error)), {
-            'setup.trigger': trigger,
-        });
-    }
-}
-//# sourceMappingURL=setup.js.map

package/dist/commands/setup.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../src/commands/setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAoB,MAAM,oBAAoB,CAAC;AACvG,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,kBAAkB,GAGnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAgBrE,mGAAmG;AACnG,SAAS,mBAAmB,CAAC,MAA4B,EAAE,KAAe;IACxE,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,aAAa,CAAC;YACZ,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SACpF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,oFAAoF;AACpF,SAAS,aAAa,CAAC,WAA0B,EAAE,UAA6B;IAC9E,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;AAClH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAqB;IAClD,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,iBAAiB,EAAE,CAAC;QACpB,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,aAAa,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,kCAAkC,mBAAmB,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;QAC/G,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC;IAC7C,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,+CAA+C;IACvF,MAAM,WAAW,GAAG,SAAS;QAC3B,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,cAAc,CAAC,CAAC;QAC/E,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAEhB,+EAA+E;IAC/E,wEAAwE;IACxE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,6EAA6E;QAC7E,+CAA+C;QAC/C,IAAI,UAAU,EAAE,IAAI,CAAC,eAAe,EAAE;YAAE,OAAO;QAC/C,IAAI,eAAe,EAAE,IAAI,gBAAgB,EAAE;YAAE,OAAO;IACtD,CAAC;SAAM,IAAI,CAAC,CAAC,eAAe,EAAE,IAAI,UAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACnE,yEAAyE;QACzE,4EAA4E;QAC5E,kEAAkE;QAClE,+DAA+D;QAC/D,aAAa,CAAC;YACZ,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,iEAAiE,mBAAmB,CAAC,aAAa,CAAC,iCAAiC;SAC9I,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;IACjC,MAAM,WAAW,GAAkB,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,MAAM,UAAU,GAAsB,OAAO,CAAC,CAAC,CAAC,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAErD,qEAAqE;IACrE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,aAAa,CAAC,qCAAqC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YACvE,CAAC;iBAAM,CAAC;gBACN,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;YACrG,CAAC;QACH,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,aAAa;IACb,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACpB,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QACvC,MAAM,IAAI,GACR,UAAU,IAAI,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,eAAe,CAAC;QACnH,EAAE,CAAC,IAAI,CACL,OAAO,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B;YAC7D,kFAAkF,CACrF,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,4EAA4E;QAC5E,2DAA2D;QAC3D,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACrB,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,SAAS;gBAAE,mBAAmB,EAAE,CAAC;YACtC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;YACrG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,qBAAqB,mBAAmB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAC5E,OAAO;QACT,CAAC;IACH,CAAC;IAED,WAAW;IACX,MAAM,gBAAgB,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,IAAqB,EACrB,WAA0B,EAC1B,UAA6B,EAC7B,SAAiB;IAEjB,4EAA4E;IAC5E,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAClD,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;QAC7F,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;KACtD,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAE5E,MAAM,YAAY,GAAG,UAAU;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,IAAI,CAAC,CAAC,OAAO,KAAK,mBAAmB,CAAC;SAC7E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvB,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC;IACvE,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACpD,6EAA6E;IAC7E,2EAA2E;IAC3E,kCAAkC;IAClC,MAAM,gBAAgB,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAE5G,6EAA6E;IAC7E,8EAA8E;IAC9E,0EAA0E;IAC1E,+EAA+E;IAC/E,8EAA8E;IAC9E,2BAA2B;IAC3B,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1D,oBAAoB,EAAE,CAAC;IACzB,CAAC;IAED,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE;QAClD,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;QACpD,YAAY;QACZ,SAAS;QACT,gBAAgB;KACjB,CAAC,CAAC;IAEH,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AAChH,CAAC;AAOD,sFAAsF;AACtF,SAAS,aAAa,CAAC,MAA2B,EAAE,GAAsB;IACxE,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,aAAa,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;YACrD,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,IAAI,kBAAkB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,WAAW,MAAM,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/E,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC3B,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACN,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QACD,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,IAAI,CAAC,CAAC,OAAO,KAAK,mBAAmB,CAAC,EAAE,CAAC;YACpF,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC5C,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAUD,SAAS,cAAc,CACrB,OAAqB,EACrB,SAAiB,EACjB,OAAqB,EACrB,MAAoG;IAEpG,SAAS,CAAC,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE;QAC/F,eAAe,EAAE;YACf,eAAe,EAAE,OAAO;YACxB,wEAAwE;YACxE,kEAAkE;YAClE,gBAAgB,EAAE,OAAO,KAAK,UAAU;YACxC,eAAe,EAAE,OAAO;YACxB,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAC9C,qBAAqB,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC;YACpD,kBAAkB,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;YAC9C,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,0BAA0B,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5F;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA4B;IACnE,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,2EAA2E;QAC3E,0EAA0E;QAC1E,4EAA4E;QAC5E,IAAI,KAAK,YAAY,OAAO;YAAE,OAAO;QACrC,8EAA8E;QAC9E,SAAS,CAAC,gBAAgB,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE;YACpF,eAAe,EAAE,OAAO;SACzB,CAAC,CAAC;IACL,CAAC;AACH,CAAC","sourcesContent":["/**\n * `workos setup` — the consolidated, consented agent-setup moment.\n *\n * Owns BOTH surfaces that used to nag independently:\n *   - skills auto-install (previously silent + unconditional on login/install)\n *   - the MCP server offer (previously a separate prompt at end of `install`)\n *\n * One prompt, one place. It is called three ways:\n *   - trigger 'login' / 'install' → `maybeRunSetupAfter`, a best-effort hook that\n *     can never block or fail the parent flow, gated so it stays silent in\n *     agent/CI/non-TTY/JSON and never re-asks after a decline or completion.\n *   - trigger 'command' → the top-level `workos setup`, always runnable, with\n *     flags for granular / non-interactive use.\n *\n * The consent contract is the whole point: nothing is written to a coding agent\n * unless the user says yes (or passes --yes). This replaces the auto-install\n * that a customer called \"prompt injection malware\".\n */\n\nimport { homedir } from 'node:os';\nimport ui, { isCancel } from '../utils/ui.js';\nimport { outputSuccess, exitWithError, isJsonMode } from '../utils/output.js';\nimport { ExitCode, exitWithCode } from '../utils/exit-codes.js';\nimport { CliExit } from '../utils/cli-exit.js';\nimport { isPromptAllowed } from '../utils/interaction-mode.js';\nimport {\n  isSetupDeclined,\n  isSetupCompleted,\n  recordSetupDeclined,\n  recordSetupCompleted,\n  clearSetupDecline,\n} from '../lib/preferences.js';\nimport { createAgents, detectAgents, refreshWorkOSSkills, type AgentConfig } from './install-skill.js';\nimport {\n  detectMcpClients,\n  MCP_AGENT_KEYS,\n  MCP_OUTCOME_LABELS,\n  type McpClientResult,\n  type McpClientTarget,\n} from '../lib/mcp-clients.js';\nimport { analytics } from '../utils/analytics.js';\nimport { formatWorkOSCommand } from '../utils/command-invocation.js';\n\nexport type SetupTrigger = 'login' | 'install' | 'command';\n\nexport interface RunSetupOptions {\n  trigger: SetupTrigger;\n  /** Restrict to specific agent keys (e.g. claude-code, cursor). */\n  agents?: string[];\n  skillsOnly?: boolean;\n  mcpOnly?: boolean;\n  /** Skip the confirm and install directly (for non-interactive `workos setup --yes`). */\n  assumeYes?: boolean;\n  /** Clear a prior decline so automatic offers resume, then return. */\n  reset?: boolean;\n}\n\n/** Validate an --agents filter against the known keys; exit with a structured error on unknown. */\nfunction validateAgentFilter(agents: string[] | undefined, known: string[]): string[] | undefined {\n  if (!agents || agents.length === 0) return undefined;\n  const unknown = agents.filter((a) => !known.includes(a));\n  if (unknown.length > 0) {\n    exitWithError({\n      code: 'unknown_agent',\n      message: `Unknown agent(s): ${unknown.join(', ')}. Supported: ${known.join(', ')}.`,\n    });\n  }\n  return agents;\n}\n\n/** Distinct display names across skill agents + MCP targets, for the offer copy. */\nfunction detectedNames(skillAgents: AgentConfig[], mcpTargets: McpClientTarget[]): string[] {\n  return Array.from(new Set([...skillAgents.map((a) => a.displayName), ...mcpTargets.map((t) => t.displayName)]));\n}\n\n/**\n * Run the consolidated setup flow. Behavior branches on `trigger`:\n *   - automatic (login/install): self-gates on mode + decline/complete, prompts,\n *     records an absolute decline on \"no\".\n *   - command: always runs; a \"no\" does NOT record a permanent decline.\n */\nexport async function runSetup(opts: RunSetupOptions): Promise<void> {\n  if (opts.reset) {\n    clearSetupDecline();\n    if (isJsonMode()) {\n      outputSuccess('Setup offers re-enabled', { reset: true });\n    } else {\n      ui.log.success(`Setup offers re-enabled. Run \\`${formatWorkOSCommand('setup')}\\` to configure your agents.`);\n    }\n    return;\n  }\n\n  const isCommand = opts.trigger === 'command';\n  const agents = createAgents(homedir()); // cheap (path construction, no IO); built once\n  const agentFilter = isCommand\n    ? validateAgentFilter(opts.agents, [...Object.keys(agents), ...MCP_AGENT_KEYS])\n    : opts.agents;\n\n  // Gate BEFORE any agent detection — detectMcpClients shells out to `claude mcp\n  // list` etc., so a machine / declined / completed run must pay nothing.\n  if (!isCommand) {\n    // Automatic (login/install): silent in machine/non-interactive contexts, and\n    // never after a decline or a prior completion.\n    if (isJsonMode() || !isPromptAllowed()) return;\n    if (isSetupDeclined() || isSetupCompleted()) return;\n  } else if ((!isPromptAllowed() || isJsonMode()) && !opts.assumeYes) {\n    // Explicit `workos setup` can't prompt in a non-interactive context, nor\n    // under --json — output mode is JSON while interaction mode stays human, so\n    // isPromptAllowed() is still true and a confirm would pollute the\n    // machine-readable stdout stream. Require --yes in both cases.\n    exitWithError({\n      code: 'confirmation_required',\n      message: `Setup can't prompt here (non-interactive or --json). Re-run \\`${formatWorkOSCommand('setup --yes')}\\` to install without a prompt.`,\n    });\n  }\n\n  const wantSkills = !opts.mcpOnly;\n  const wantMcp = !opts.skillsOnly;\n  const skillAgents: AgentConfig[] = wantSkills ? detectAgents(agents, agentFilter) : [];\n  const mcpTargets: McpClientTarget[] = wantMcp ? await detectMcpClients(agentFilter) : [];\n  const names = detectedNames(skillAgents, mcpTargets);\n\n  // Nothing to install to. Surface it only for an explicit invocation.\n  if (names.length === 0) {\n    if (isCommand) {\n      if (isJsonMode()) {\n        outputSuccess('No supported coding agents detected', { agents: [] });\n      } else {\n        ui.log.info('No supported coding agents detected (looked for Claude Code, Codex, Cursor, Goose).');\n      }\n    }\n    return;\n  }\n\n  const startedAt = Date.now();\n\n  // The offer.\n  if (!opts.assumeYes) {\n    ui.heading('Set up your coding agent');\n    const what =\n      wantSkills && wantMcp ? 'WorkOS skills and the MCP server' : wantMcp ? 'the WorkOS MCP server' : 'WorkOS skills';\n    ui.note(\n      `Add ${what} to ${names.join(', ')} so your coding agent can\\n` +\n        `scaffold auth and manage WorkOS resources. Nothing is written until you confirm.`,\n    );\n\n    const answer = await ui.confirm({ message: 'Set up now?', initialValue: true });\n    // Cancel (ctrl-c) is not a decline — skip silently and ask again next time,\n    // but record it so the cut-off is observable in telemetry.\n    if (isCancel(answer)) {\n      emitSetupEvent(opts.trigger, startedAt, 'cancelled', { skills: [], mcpInstalled: [], mcpFailed: [] });\n      return;\n    }\n    if (!answer) {\n      if (!isCommand) recordSetupDeclined();\n      emitSetupEvent(opts.trigger, startedAt, 'declined', { skills: [], mcpInstalled: [], mcpFailed: [] });\n      ui.log.hint(`No problem. Run \\`${formatWorkOSCommand('setup')}\\` anytime.`);\n      return;\n    }\n  }\n\n  // Install.\n  await installAndReport(opts, skillAgents, mcpTargets, startedAt);\n}\n\nasync function installAndReport(\n  opts: RunSetupOptions,\n  skillAgents: AgentConfig[],\n  mcpTargets: McpClientTarget[],\n  startedAt: number,\n): Promise<void> {\n  // Skills (local fs) and MCP (shell-outs to `claude mcp add` etc., which can\n  // each block toward a 10s timeout) are independent — run them concurrently,\n  // and run the per-agent MCP adds in parallel too. Empty inputs (skillsOnly /\n  // mcpOnly) resolve to null / [] without work. `target.add()` never rejects.\n  const [skillResult, mcpResults] = await Promise.all([\n    skillAgents.length > 0 ? refreshWorkOSSkills({ agents: skillAgents }) : Promise.resolve(null),\n    Promise.all(mcpTargets.map((target) => target.add())),\n  ]);\n  const skillAgentNames = skillResult?.agents.map((a) => a.displayName) ?? [];\n\n  const mcpInstalled = mcpResults\n    .filter((r) => r.outcome === 'installed' || r.outcome === 'already-installed')\n    .map((r) => r.agent);\n  const failedResults = mcpResults.filter((r) => r.outcome === 'failed');\n  const mcpFailed = failedResults.map((r) => r.agent);\n  // Carry a bounded, agent-tagged reason so the MCP-install failure CAUSE (not\n  // just the count) is observable in telemetry. Already user-safe — the same\n  // text is shown via ui.log.error.\n  const mcpFailedReasons = failedResults.map((r) => `${r.agent}:${(r.error ?? '').slice(0, 120)}`).join('; ');\n\n  // Only mark setup complete when something actually landed. A run where every\n  // attempted install failed (e.g. transient `claude mcp add` timeouts, with no\n  // skills to fall back on) must NOT be treated as done: isSetupCompleted()\n  // suppresses every future automatic offer, so persisting completion here would\n  // strand the user after a transient failure. Leave the pref unset so the next\n  // login/install re-offers.\n  if (skillAgentNames.length > 0 || mcpInstalled.length > 0) {\n    recordSetupCompleted();\n  }\n\n  emitSetupEvent(opts.trigger, startedAt, 'accepted', {\n    skills: skillResult?.agents.map((a) => a.name) ?? [],\n    mcpInstalled,\n    mcpFailed,\n    mcpFailedReasons,\n  });\n\n  reportResults(skillResult ? { agents: skillAgentNames, count: skillResult.skills.length } : null, mcpResults);\n}\n\ninterface SkillSummary {\n  agents: string[];\n  count: number;\n}\n\n/** Emit the outcome in both output modes; exit non-zero if any MCP install failed. */\nfunction reportResults(skills: SkillSummary | null, mcp: McpClientResult[]): void {\n  if (isJsonMode()) {\n    outputSuccess('Setup complete', { skills, mcp });\n  } else {\n    if (skills && skills.agents.length > 0) {\n      const word = skills.count === 1 ? 'skill' : 'skills';\n      ui.log.success(`${skills.count} ${word} installed for ${skills.agents.join(', ')}`);\n    }\n    for (const r of mcp) {\n      const line = `MCP server: ${r.displayName} — ${MCP_OUTCOME_LABELS[r.outcome]}`;\n      if (r.outcome === 'failed') {\n        ui.log.error(r.error ? `${line} (${r.error})` : line);\n      } else {\n        ui.log.success(line);\n      }\n    }\n    if (mcp.some((r) => r.outcome === 'installed' || r.outcome === 'already-installed')) {\n      ui.log.hint('Your agent will authorize WorkOS via OAuth on first MCP use.');\n    }\n  }\n\n  if (mcp.some((r) => r.outcome === 'failed')) {\n    exitWithCode(ExitCode.GENERAL_ERROR);\n  }\n}\n\n/**\n * Queued adoption event (NOT capture()): setup runs as a sub-step after the\n * installer session has ended, so folded session tags would never ship. A queued\n * command event rides the CLI's final flush (the same pattern the old\n * standalone MCP offer used).\n */\ntype SetupOutcome = 'accepted' | 'declined' | 'cancelled';\n\nfunction emitSetupEvent(\n  trigger: SetupTrigger,\n  startedAt: number,\n  outcome: SetupOutcome,\n  agents: { skills: string[]; mcpInstalled: string[]; mcpFailed: string[]; mcpFailedReasons?: string },\n): void {\n  analytics.emitCommandEvent('setup offer', Date.now() - startedAt, agents.mcpFailed.length === 0, {\n    extraAttributes: {\n      'setup.trigger': trigger,\n      // `accepted` kept for back-compat dashboards; `outcome` distinguishes a\n      // deliberate \"no\" (declined) from a walk-away/ctrl-c (cancelled).\n      'setup.accepted': outcome === 'accepted',\n      'setup.outcome': outcome,\n      'setup.skills_agents': agents.skills.join(','),\n      'setup.mcp_installed': agents.mcpInstalled.join(','),\n      'setup.mcp_failed': agents.mcpFailed.join(','),\n      ...(agents.mcpFailedReasons ? { 'setup.mcp_failed_reasons': agents.mcpFailedReasons } : {}),\n    },\n  });\n}\n\n/**\n * Best-effort setup offer after a successful `login` / `install`.\n *\n * Never throws into, wedges, or fails the parent flow — a try/catch swallows any\n * error. The offer is only ever shown to a present human in an interactive TTY\n * (runSetup early-returns in every machine/non-interactive context), so the\n * confirm is NOT time-bounded: a question that auto-dismisses while the user is\n * reading it is exactly the \"it asked but moved on\" bug. @inquirer already\n * handles ctrl-c, and detection/install are internally time-bounded, so there is\n * nothing left to race. The parent flow has already succeeded by the time this\n * runs. Any failure is reported to telemetry before being swallowed.\n */\nexport async function maybeRunSetupAfter(trigger: 'login' | 'install'): Promise<void> {\n  try {\n    await runSetup({ trigger });\n  } catch (error) {\n    // reportResults exits non-zero via CliExit on a failed MCP add — that's an\n    // intentional exit for the standalone command, not an exception to report\n    // (and it stays swallowed here so it never fails the parent login/install).\n    if (error instanceof CliExit) return;\n    // Setup must never fail or block login / install — but don't drop the signal.\n    analytics.captureException(error instanceof Error ? error : new Error(String(error)), {\n      'setup.trigger': trigger,\n    });\n  }\n}\n"]}

package/dist/commands/telemetry.d.ts

@@ -1,3 +0,0 @@
-export declare function runTelemetryOptOut(): Promise<void>;
-export declare function runTelemetryOptIn(): Promise<void>;
-export declare function runTelemetryStatus(): Promise<void>;

package/dist/commands/telemetry.js

@@ -1,88 +0,0 @@
-import chalk from 'chalk';
-import { envTelemetryOverride, getTelemetrySource, isTelemetryEnabled, isTelemetryOptedOut, setTelemetryOptedOut, } from '../lib/preferences.js';
-import { isJsonMode, outputJson, exitWithError } from '../utils/output.js';
-import { formatWorkOSCommand } from '../utils/command-invocation.js';
-/**
- * Persist an opt-out/opt-in change, surfacing a clear error if the write fails
- * (read-only FS, permission denied). Unlike the read path, the command path
- * must NOT swallow a write failure — otherwise the user believes their
- * preference persisted when it did not.
- */
-function persistOptedOut(value) {
-    try {
-        setTelemetryOptedOut(value);
-    }
-    catch {
-        exitWithError({
-            code: 'internal_error',
-            message: `Could not save telemetry preference to disk. Your preference was NOT persisted.`,
-        });
-    }
-}
-export async function runTelemetryOptOut() {
-    const alreadyOptedOut = isTelemetryOptedOut();
-    persistOptedOut(true);
-    if (isJsonMode()) {
-        outputJson({ status: 'ok', optedOut: true, alreadyOptedOut });
-        return;
-    }
-    if (alreadyOptedOut) {
-        console.log(chalk.green('Telemetry collection is already opted out.'));
-    }
-    else {
-        console.log(chalk.green('Telemetry collection disabled. No further events will be sent.'));
-    }
-    console.log(chalk.dim(`Re-enable any time with \`${formatWorkOSCommand('telemetry opt-in')}\`.`));
-}
-export async function runTelemetryOptIn() {
-    const wasOptedOut = isTelemetryOptedOut();
-    persistOptedOut(false);
-    if (isJsonMode()) {
-        outputJson({ status: 'ok', optedOut: false, alreadyOptedIn: !wasOptedOut });
-        return;
-    }
-    if (wasOptedOut) {
-        console.log(chalk.green('Telemetry collection re-enabled.'));
-    }
-    else {
-        console.log(chalk.green('Telemetry collection is already enabled.'));
-    }
-    console.log(chalk.dim(`Opt out any time with \`${formatWorkOSCommand('telemetry opt-out')}\`.`));
-}
-function describeSource(source) {
-    switch (source) {
-        case 'env':
-            return 'WORKOS_TELEMETRY environment variable';
-        case 'preference':
-            return 'saved preference';
-        case 'default':
-            return 'default';
-    }
-}
-export async function runTelemetryStatus() {
-    const enabled = isTelemetryEnabled();
-    const optedOut = isTelemetryOptedOut();
-    const source = getTelemetrySource();
-    const override = envTelemetryOverride();
-    if (isJsonMode()) {
-        outputJson({
-            enabled,
-            optedOut,
-            source,
-            envOverride: override ?? null,
-        });
-        return;
-    }
-    const stateLine = enabled
-        ? chalk.green('Telemetry collection is enabled.')
-        : chalk.yellow('Telemetry collection is disabled.');
-    console.log(stateLine);
-    console.log(chalk.dim(`Source: ${describeSource(source)}.`));
-    if (enabled) {
-        console.log(chalk.dim(`Opt out with \`${formatWorkOSCommand('telemetry opt-out')}\`.`));
-    }
-    else {
-        console.log(chalk.dim(`Re-enable with \`${formatWorkOSCommand('telemetry opt-in')}\`.`));
-    }
-}
-//# sourceMappingURL=telemetry.js.map

package/dist/commands/telemetry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/commands/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,oBAAoB,GAErB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,CAAC;QACH,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,aAAa,CAAC;YACZ,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,iFAAiF;SAC3F,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,eAAe,GAAG,mBAAmB,EAAE,CAAC;IAC9C,eAAe,CAAC,IAAI,CAAC,CAAC;IAEtB,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,6BAA6B,mBAAmB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAC;IAC1C,eAAe,CAAC,KAAK,CAAC,CAAC;IAEvB,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5E,OAAO;IACT,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,2BAA2B,mBAAmB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,cAAc,CAAC,MAAuB;IAC7C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,KAAK;YACR,OAAO,uCAAuC,CAAC;QACjD,KAAK,YAAY;YACf,OAAO,kBAAkB,CAAC;QAC5B,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;IAExC,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC;YACT,OAAO;YACP,QAAQ;YACR,MAAM;YACN,WAAW,EAAE,QAAQ,IAAI,IAAI;SAC9B,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,OAAO;QACvB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,kCAAkC,CAAC;QACjD,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAE7D,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,mBAAmB,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1F,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,mBAAmB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC","sourcesContent":["import chalk from 'chalk';\nimport {\n  envTelemetryOverride,\n  getTelemetrySource,\n  isTelemetryEnabled,\n  isTelemetryOptedOut,\n  setTelemetryOptedOut,\n  type TelemetrySource,\n} from '../lib/preferences.js';\nimport { isJsonMode, outputJson, exitWithError } from '../utils/output.js';\nimport { formatWorkOSCommand } from '../utils/command-invocation.js';\n\n/**\n * Persist an opt-out/opt-in change, surfacing a clear error if the write fails\n * (read-only FS, permission denied). Unlike the read path, the command path\n * must NOT swallow a write failure — otherwise the user believes their\n * preference persisted when it did not.\n */\nfunction persistOptedOut(value: boolean): void {\n  try {\n    setTelemetryOptedOut(value);\n  } catch {\n    exitWithError({\n      code: 'internal_error',\n      message: `Could not save telemetry preference to disk. Your preference was NOT persisted.`,\n    });\n  }\n}\n\nexport async function runTelemetryOptOut(): Promise<void> {\n  const alreadyOptedOut = isTelemetryOptedOut();\n  persistOptedOut(true);\n\n  if (isJsonMode()) {\n    outputJson({ status: 'ok', optedOut: true, alreadyOptedOut });\n    return;\n  }\n\n  if (alreadyOptedOut) {\n    console.log(chalk.green('Telemetry collection is already opted out.'));\n  } else {\n    console.log(chalk.green('Telemetry collection disabled. No further events will be sent.'));\n  }\n  console.log(chalk.dim(`Re-enable any time with \\`${formatWorkOSCommand('telemetry opt-in')}\\`.`));\n}\n\nexport async function runTelemetryOptIn(): Promise<void> {\n  const wasOptedOut = isTelemetryOptedOut();\n  persistOptedOut(false);\n\n  if (isJsonMode()) {\n    outputJson({ status: 'ok', optedOut: false, alreadyOptedIn: !wasOptedOut });\n    return;\n  }\n\n  if (wasOptedOut) {\n    console.log(chalk.green('Telemetry collection re-enabled.'));\n  } else {\n    console.log(chalk.green('Telemetry collection is already enabled.'));\n  }\n  console.log(chalk.dim(`Opt out any time with \\`${formatWorkOSCommand('telemetry opt-out')}\\`.`));\n}\n\nfunction describeSource(source: TelemetrySource): string {\n  switch (source) {\n    case 'env':\n      return 'WORKOS_TELEMETRY environment variable';\n    case 'preference':\n      return 'saved preference';\n    case 'default':\n      return 'default';\n  }\n}\n\nexport async function runTelemetryStatus(): Promise<void> {\n  const enabled = isTelemetryEnabled();\n  const optedOut = isTelemetryOptedOut();\n  const source = getTelemetrySource();\n  const override = envTelemetryOverride();\n\n  if (isJsonMode()) {\n    outputJson({\n      enabled,\n      optedOut,\n      source,\n      envOverride: override ?? null,\n    });\n    return;\n  }\n\n  const stateLine = enabled\n    ? chalk.green('Telemetry collection is enabled.')\n    : chalk.yellow('Telemetry collection is disabled.');\n  console.log(stateLine);\n  console.log(chalk.dim(`Source: ${describeSource(source)}.`));\n\n  if (enabled) {\n    console.log(chalk.dim(`Opt out with \\`${formatWorkOSCommand('telemetry opt-out')}\\`.`));\n  } else {\n    console.log(chalk.dim(`Re-enable with \\`${formatWorkOSCommand('telemetry opt-in')}\\`.`));\n  }\n}\n"]}

package/dist/commands/uninstall-skill.d.ts

@@ -1,11 +0,0 @@
-import { type AgentConfig } from './install-skill.js';
-export interface UninstallSkillOptions {
-    skill?: string[];
-    agent?: string[];
-}
-export declare function findInstalledSkills(knownSkills: string[], agent: AgentConfig): string[];
-export declare function uninstallSkill(skillName: string, agent: AgentConfig): Promise<{
-    success: boolean;
-    error?: string;
-}>;
-export declare function runUninstallSkill(options: UninstallSkillOptions): Promise<void>;