workos 0.19.0 → 0.20.2

package/dist/doctor/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/doctor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAU,CAAC;AAEpE;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAmC,EACnC,MAA8B;IAK9B,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAE/C,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC;IACvF,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAErC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC;QACxC,8DAA8D;QAC9D,sDAAsD;QACtD,MAAM,EAAE,CAAC,GAAG,cAAc,CAAC;KAC5B,CAAC,CAAC;IACH,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAEhC,OAAO;QACL,aAAa,EAAE;YACb,MAAM,EAAE,OAAO,CAAC,cAAc;YAC9B,KAAK,EAAE,OAAO,CAAC,aAAa;YAC5B,eAAe,EAAE,OAAO,CAAC,MAAM;SAChC;QACD,MAAM,EAAE,CAAC,MAAM,WAAW,EAAE,CAAC,IAAI,SAAS;KAC3C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,MAAM,eAAe,GAAG,kBAAkB,EAAE,CAAC;IAE7C,kEAAkE;IAClE,qEAAqE;IACrE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAErE,oCAAoC;IACpC,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpG,QAAQ,CAAC,OAAO,CAAC;QACjB,cAAc,CAAC,OAAO,CAAC;QACvB,YAAY,CAAC,OAAO,CAAC;QACrB,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,IAAI,wBAAwB,CAAC;QAC3E,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC;QACjC,kBAAkB,EAAE;QACpB,QAAQ,EAAE;KACX,CAAC,CAAC;IACH,+EAA+E;IAC/E,MAAM,GAAG,GAAG,SAAS,IAAI,SAAS,CAAC;IAEnC,IAAI,MAAM,GAAG,CAAC,MAAM,WAAW,EAAE,CAAC,IAAI,SAAS,CAAC;IAEhD,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,0BAA0B;IAC1B,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACjE,MAAM,aAAa,GAAG,cAAc,CAAC,aAAa,CAAC;IACnD,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;IAE/B,8FAA8F;IAC9F,yEAAyE;IACzE,MAAM,WAAW,GAAG,YAAY,CAAC;QAC/B,OAAO,EAAE,cAAc;QACvB,SAAS,EAAE,EAAE;QACb,eAAe;QACf,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE;QAC7E,GAAG;QACH,QAAQ;QACR,OAAO;QACP,SAAS;QACT,WAAW;QACX,aAAa;QACb,YAAY;QACZ,MAAM;QACN,GAAG;KACJ,CAAC,CAAC;IAEH,MAAM,CAAC,eAAe,EAAE,YAAY,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpE,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC;QAC/D,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,CAAC;QACvD,eAAe,CACb,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,EACtG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAC3B;KACF,CAAC,CAAC;IAEH,2EAA2E;IAC3E,MAAM,iBAAiB,GAAuB,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;IAC3F,MAAM,mBAAmB,GACvB,WAAW,CAAC,WAAW;QACvB,CAAC,SAAS,CAAC,oBAAoB,IAAI,SAAS,CAAC,YAAY;YACvD,CAAC,CAAC,oBAAoB,SAAS,CAAC,YAAY,GAAG,SAAS,CAAC,oBAAoB,EAAE;YAC/E,CAAC,CAAC,IAAI,CAAC,CAAC;IAEZ,kDAAkD;IAClD,MAAM,YAAY,GAAG,eAAe,CAAC,QAAQ;QAC3C,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,eAAe,CAAC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;QACpG,CAAC,CAAC,SAAS,CAAC;IAEd,uBAAuB;IACvB,MAAM,aAAa,GAAG;QACpB,OAAO,EAAE,cAAc;QACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,eAAe;QACf,OAAO,EAAE;YACP,IAAI,EAAE,OAAO,CAAC,UAAU;YACxB,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC;QACD,GAAG;QACH,QAAQ;QACR,OAAO;QACP,SAAS;QACT,WAAW;QACX,aAAa;QACb,YAAY;QACZ,oBAAoB,EAAE,eAAe,CAAC,oBAAoB;QAC1D,iBAAiB,EAAE,eAAe,CAAC,QAAQ,IAAI,SAAS;QACxD,cAAc,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK;QAC5E,YAAY;QACZ,YAAY;QACZ,UAAU;QACV,MAAM;QACN,aAAa;QACb,GAAG;KACJ,CAAC;IAEF,8CAA8C;IAC9C,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IAE3C,oBAAoB;IACpB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAEvE,MAAM,MAAM,GAAiB;QAC3B,GAAG,aAAa;QAChB,MAAM;QACN,OAAO,EAAE;YACP,MAAM;YACN,QAAQ;YACR,OAAO,EAAE,MAAM,KAAK,CAAC;SACtB;KACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAoB,EAAE,OAAsB;IAC7E,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAElB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAEnD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC","sourcesContent":["import { checkSdk } from './checks/sdk.js';\nimport { checkFramework } from './checks/framework.js';\nimport { checkRuntime } from './checks/runtime.js';\nimport { checkLanguage } from './checks/language.js';\nimport { checkEnvironment } from './checks/environment.js';\nimport { checkConnectivity } from './checks/connectivity.js';\nimport { checkHostExecution } from './checks/host-execution.js';\nimport { checkDashboardSettings, compareRedirectUris } from './checks/dashboard.js';\nimport { checkAuthPatterns } from './checks/auth-patterns.js';\nimport { checkAiAnalysis } from './checks/ai-analysis.js';\nimport { checkSkills } from './checks/skills.js';\nimport { checkMcp } from './checks/mcp.js';\nimport { refreshWorkOSSkills } from '../commands/install-skill.js';\nimport { detectIssues } from './issues.js';\nimport { formatReport } from './output.js';\nimport { formatReportAsJson } from './json-output.js';\nimport { copyToClipboard } from './clipboard.js';\nimport { getInteractionMode } from '../utils/interaction-mode.js';\nimport Chalk from 'chalk';\nimport type { DoctorOptions, DoctorReport, SkillsRefreshResult } from './types.js';\n\nconst DOCTOR_VERSION = '1.0.0';\n\n/**\n * Skills `--fix` is allowed to refresh. Hardcoded — NOT derived from\n * discoverSkills — so future bundled skills require an explicit opt-in here\n * before doctor will write to their target directory. This is the contract's\n * promise that `--fix` only ever touches `workos/` and `workos-widgets/`.\n */\nexport const FIXABLE_SKILLS = ['workos', 'workos-widgets'] as const;\n\n/**\n * Refresh stale WorkOS skills if `--fix` is set and at least one agent is\n * stale or has no marker. Always re-reads `checkSkills()` after a successful\n * refresh so detectIssues sees the post-refresh state and we don't ship a\n * doctor report that simultaneously claims \"fixed\" and \"still stale\".\n *\n * Extracted from runDoctor for unit testability — runDoctor itself depends on\n * eight upstream checks that are expensive to mock.\n */\nexport async function maybeRefreshSkills(\n  options: Pick<DoctorOptions, 'fix'>,\n  skills: DoctorReport['skills'],\n): Promise<{\n  skillsRefresh?: SkillsRefreshResult;\n  skills: DoctorReport['skills'];\n}> {\n  if (!options.fix || !skills) return { skills };\n\n  const stalePresent = skills.agents.some((a) => a.stale || a.installedVersion === null);\n  if (!stalePresent) return { skills };\n\n  const refresh = await refreshWorkOSSkills({\n    // Explicit allowlist — NOT discoverSkills — so the contract's\n    // workos/+workos-widgets-only constraint can't drift.\n    skills: [...FIXABLE_SKILLS],\n  });\n  if (!refresh) return { skills };\n\n  return {\n    skillsRefresh: {\n      before: refresh.perAgentBefore,\n      after: refresh.perAgentAfter,\n      skillsInstalled: refresh.skills,\n    },\n    skills: (await checkSkills()) ?? undefined,\n  };\n}\n\nexport async function runDoctor(options: DoctorOptions): Promise<DoctorReport> {\n  const interactionMode = getInteractionMode();\n\n  // Environment check first - loads project's .env/.env.local files\n  // Must run before connectivity so the resolved base URL is available\n  const { info: environment, raw: envRaw } = checkEnvironment(options);\n\n  // Run remaining checks concurrently\n  const [sdk, framework, runtime, connectivity, language, hostExecution, mcpResult] = await Promise.all([\n    checkSdk(options),\n    checkFramework(options),\n    checkRuntime(options),\n    checkConnectivity(options, environment.baseUrl ?? 'https://api.workos.com'),\n    checkLanguage(options.installDir),\n    checkHostExecution(),\n    checkMcp(),\n  ]);\n  // Normalize the check's null (no agents detected) to undefined for the report.\n  const mcp = mcpResult ?? undefined;\n\n  let skills = (await checkSkills()) ?? undefined;\n\n  // `--fix`: refresh stale WorkOS skills BEFORE earlyIssues + AI analysis so\n  // every downstream consumer (issue detection, AI prompt context) sees the\n  // post-refresh skill state and doesn't reference a SKILLS_OUTDATED warning\n  // that was just resolved.\n  const refreshOutcome = await maybeRefreshSkills(options, skills);\n  const skillsRefresh = refreshOutcome.skillsRefresh;\n  skills = refreshOutcome.skills;\n\n  // Dashboard settings + auth patterns + AI analysis (parallel, all need sdk/framework results)\n  // AI analysis also receives early issues as context to avoid duplication\n  const earlyIssues = detectIssues({\n    version: DOCTOR_VERSION,\n    timestamp: '',\n    interactionMode,\n    project: { path: options.installDir, packageManager: runtime.packageManager },\n    sdk,\n    language,\n    runtime,\n    framework,\n    environment,\n    hostExecution,\n    connectivity,\n    skills,\n    mcp,\n  });\n\n  const [dashboardResult, authPatterns, aiAnalysis] = await Promise.all([\n    checkDashboardSettings(options, environment.apiKeyType, envRaw),\n    checkAuthPatterns(options, framework, environment, sdk),\n    checkAiAnalysis(\n      { installDir: options.installDir, language, framework, sdk, environment, existingIssues: earlyIssues },\n      { skipAi: options.skipAi },\n    ),\n  ]);\n\n  // Compute expected redirect URI from framework detection if not set in env\n  const redirectUriSource: 'env' | 'inferred' = environment.redirectUri ? 'env' : 'inferred';\n  const expectedRedirectUri =\n    environment.redirectUri ??\n    (framework.expectedCallbackPath && framework.detectedPort\n      ? `http://localhost:${framework.detectedPort}${framework.expectedCallbackPath}`\n      : null);\n\n  // Compare redirect URIs if we have dashboard data\n  const redirectUris = dashboardResult.settings\n    ? compareRedirectUris(expectedRedirectUri, dashboardResult.settings.redirectUris, redirectUriSource)\n    : undefined;\n\n  // Build partial report\n  const partialReport = {\n    version: DOCTOR_VERSION,\n    timestamp: new Date().toISOString(),\n    interactionMode,\n    project: {\n      path: options.installDir,\n      packageManager: runtime.packageManager,\n    },\n    sdk,\n    language,\n    runtime,\n    framework,\n    environment,\n    hostExecution,\n    connectivity,\n    credentialValidation: dashboardResult.credentialValidation,\n    dashboardSettings: dashboardResult.settings ?? undefined,\n    dashboardError: dashboardResult.settings ? undefined : dashboardResult.error,\n    redirectUris,\n    authPatterns,\n    aiAnalysis,\n    skills,\n    skillsRefresh,\n    mcp,\n  };\n\n  // Detect issues based on (post-refresh) data.\n  const issues = detectIssues(partialReport);\n\n  // Calculate summary\n  const errors = issues.filter((i) => i.severity === 'error').length;\n  const warnings = issues.filter((i) => i.severity === 'warning').length;\n\n  const report: DoctorReport = {\n    ...partialReport,\n    issues,\n    summary: {\n      errors,\n      warnings,\n      healthy: errors === 0,\n    },\n  };\n\n  return report;\n}\n\nexport async function outputReport(report: DoctorReport, options: DoctorOptions): Promise<void> {\n  if (options.json) {\n    const json = formatReportAsJson(report);\n    console.log(json);\n\n    if (options.copy) {\n      const success = await copyToClipboard(json);\n      if (success) {\n        console.error('(Copied to clipboard)');\n      }\n    }\n  } else {\n    formatReport(report, { verbose: options.verbose });\n\n    if (options.copy) {\n      const json = formatReportAsJson(report);\n      const success = await copyToClipboard(json);\n      if (success) {\n        console.log(Chalk.dim('Report copied to clipboard'));\n      }\n    }\n  }\n}\n\nexport { formatReport } from './output.js';\nexport { formatReportAsJson } from './json-output.js';\nexport type { DoctorReport, DoctorOptions } from './types.js';\n"]}

package/dist/doctor/issues.d.ts

@@ -1,63 +0,0 @@
-import type { Issue, DoctorReport } from './types.js';
-export declare const ISSUE_DEFINITIONS: {
-    MISSING_API_KEY: {
-        severity: "error";
-        message: string;
-        remediation: string;
-        docsUrl: string;
-    };
-    MISSING_CLIENT_ID: {
-        severity: "error";
-        message: string;
-        remediation: string;
-        docsUrl: string;
-    };
-    SDK_OUTDATED: {
-        severity: "warning";
-        message: string;
-    };
-    COOKIE_DOMAIN_NOT_SET: {
-        severity: "warning";
-        message: string;
-        remediation: string;
-        docsUrl: string;
-    };
-    NO_SDK_FOUND: {
-        severity: "error";
-        message: string;
-        remediation: string;
-        docsUrl: string;
-    };
-    API_UNREACHABLE: {
-        severity: "warning";
-        message: string;
-    };
-    REDIRECT_URI_MISMATCH: {
-        severity: "warning";
-        message: string;
-        docsUrl: string;
-    };
-    PROD_API_CALL_BLOCKED: {
-        severity: "warning";
-        message: string;
-        remediation: string;
-    };
-    INVALID_API_KEY: {
-        severity: "error";
-        message: string;
-        remediation: string;
-        docsUrl: string;
-    };
-    CLIENT_ID_MISMATCH: {
-        severity: "error";
-        message: string;
-        remediation: string;
-        docsUrl: string;
-    };
-    HOST_EXECUTION_UNTRUSTED: {
-        severity: "warning";
-        message: string;
-        remediation: string;
-    };
-};
-export declare function detectIssues(report: Omit<DoctorReport, 'issues' | 'summary'>): Issue[];

package/dist/doctor/issues.js

@@ -1,199 +0,0 @@
-import { getInstallHint, languageToSdkLanguage } from './checks/language.js';
-import { formatWorkOSCommand } from '../utils/command-invocation.js';
-export const ISSUE_DEFINITIONS = {
-    MISSING_API_KEY: {
-        severity: 'error',
-        message: 'WORKOS_API_KEY environment variable not set',
-        remediation: 'Set WORKOS_API_KEY in your .env.local file',
-        docsUrl: 'https://dashboard.workos.com/api-keys',
-    },
-    MISSING_CLIENT_ID: {
-        severity: 'error',
-        message: 'WORKOS_CLIENT_ID environment variable not set',
-        remediation: 'Set WORKOS_CLIENT_ID in your .env.local file',
-        docsUrl: 'https://dashboard.workos.com/configuration',
-    },
-    SDK_OUTDATED: {
-        severity: 'warning',
-        message: 'SDK version is outdated',
-        // remediation generated dynamically
-    },
-    COOKIE_DOMAIN_NOT_SET: {
-        severity: 'warning',
-        message: 'Cookie domain not explicitly set',
-        remediation: 'Consider setting WORKOS_COOKIE_DOMAIN for cross-subdomain auth',
-        docsUrl: 'https://workos.com/docs/authkit/cookie-domain',
-    },
-    NO_SDK_FOUND: {
-        severity: 'error',
-        message: 'No WorkOS SDK found in dependencies',
-        remediation: 'Install a WorkOS SDK: npm install @workos-inc/authkit-nextjs',
-        docsUrl: 'https://workos.com/docs',
-    },
-    API_UNREACHABLE: {
-        severity: 'warning',
-        message: 'Cannot reach WorkOS API',
-        // remediation generated dynamically based on error
-    },
-    REDIRECT_URI_MISMATCH: {
-        severity: 'warning',
-        message: 'Redirect URI not found in dashboard configuration',
-        docsUrl: 'https://workos.com/docs/authkit/redirect-uri',
-    },
-    PROD_API_CALL_BLOCKED: {
-        severity: 'warning',
-        message: 'Dashboard settings not fetched (production API key)',
-        remediation: 'Use a staging API key to fetch dashboard settings',
-    },
-    INVALID_API_KEY: {
-        severity: 'error',
-        message: 'API key is invalid or expired',
-        remediation: 'Check your WORKOS_API_KEY in the WorkOS dashboard',
-        docsUrl: 'https://dashboard.workos.com/api-keys',
-    },
-    CLIENT_ID_MISMATCH: {
-        severity: 'error',
-        message: 'Client ID does not match the API key environment',
-        remediation: 'Ensure WORKOS_CLIENT_ID matches the environment for your API key',
-        docsUrl: 'https://dashboard.workos.com/configuration',
-    },
-    HOST_EXECUTION_UNTRUSTED: {
-        severity: 'warning',
-        message: 'Host-only WorkOS state may be unavailable in this shell',
-        remediation: 'Agent/CI host execution is untrusted. Re-run this command on the host shell before trusting auth, config, or API failures.',
-    },
-};
-export function detectIssues(report) {
-    const issues = [];
-    // SDK issues
-    if (!report.sdk.name) {
-        const lang = languageToSdkLanguage(report.language.name);
-        const hint = getInstallHint(lang);
-        issues.push({
-            code: 'NO_SDK_FOUND',
-            severity: 'error',
-            message: 'No WorkOS SDK found in dependencies',
-            remediation: `Install a WorkOS SDK: ${hint}`,
-            docsUrl: 'https://workos.com/docs',
-        });
-    }
-    else if (report.sdk.outdated && report.sdk.version && report.sdk.latest) {
-        issues.push({
-            code: 'SDK_OUTDATED',
-            severity: 'warning',
-            message: `SDK version outdated (${report.sdk.version} → ${report.sdk.latest})`,
-            remediation: `Run: ${getUpdateCommand(report.runtime.packageManager, report.sdk.name)}`,
-            details: { installed: report.sdk.version, latest: report.sdk.latest },
-        });
-    }
-    // Environment issues
-    if (!report.environment.apiKeyConfigured) {
-        issues.push({ code: 'MISSING_API_KEY', ...ISSUE_DEFINITIONS.MISSING_API_KEY });
-    }
-    if (!report.environment.clientId) {
-        issues.push({ code: 'MISSING_CLIENT_ID', ...ISSUE_DEFINITIONS.MISSING_CLIENT_ID });
-    }
-    if (report.sdk.isAuthKit && !report.environment.cookieDomain) {
-        issues.push({ code: 'COOKIE_DOMAIN_NOT_SET', ...ISSUE_DEFINITIONS.COOKIE_DOMAIN_NOT_SET });
-    }
-    if (!report.hostExecution.ok) {
-        issues.push({
-            code: 'HOST_EXECUTION_UNTRUSTED',
-            ...ISSUE_DEFINITIONS.HOST_EXECUTION_UNTRUSTED,
-            details: { failures: report.hostExecution.failures },
-        });
-    }
-    // Connectivity issues
-    if (!report.connectivity.apiReachable && !report.connectivity.error?.includes('Skipped')) {
-        issues.push({
-            code: 'API_UNREACHABLE',
-            severity: 'warning',
-            message: `Cannot reach WorkOS API: ${report.connectivity.error}`,
-            remediation: 'Check your network connection and firewall settings',
-        });
-    }
-    // Note: Redirect URI mismatch detection disabled - WorkOS API doesn't expose
-    // a public endpoint to list configured redirect URIs for verification
-    // Production key warning (no dashboard data)
-    if (report.environment.apiKeyType === 'production' && !report.dashboardSettings) {
-        issues.push({
-            code: 'PROD_API_CALL_BLOCKED',
-            ...ISSUE_DEFINITIONS.PROD_API_CALL_BLOCKED,
-        });
-    }
-    // Credential validation issues
-    if (report.credentialValidation) {
-        if (!report.credentialValidation.valid) {
-            issues.push({
-                code: 'INVALID_API_KEY',
-                ...ISSUE_DEFINITIONS.INVALID_API_KEY,
-                details: { error: report.credentialValidation.error },
-            });
-        }
-        else if (!report.credentialValidation.clientIdMatch) {
-            issues.push({
-                code: 'CLIENT_ID_MISMATCH',
-                ...ISSUE_DEFINITIONS.CLIENT_ID_MISMATCH,
-                details: { error: report.credentialValidation.error },
-            });
-        }
-    }
-    // Auth pattern findings — map directly to issues
-    if (report.authPatterns) {
-        for (const finding of report.authPatterns.findings) {
-            issues.push({
-                code: finding.code,
-                severity: finding.severity,
-                message: finding.message,
-                remediation: finding.remediation,
-                docsUrl: finding.docsUrl,
-            });
-        }
-    }
-    // Skill freshness — warn when agent-installed skills trail the bundled version.
-    // Surfaced so users know their coding agent is using older WorkOS guidance.
-    if (report.skills?.bundledVersion) {
-        const stale = report.skills.agents.filter((a) => a.stale);
-        if (stale.length > 0) {
-            const agentList = stale.map((a) => `${a.agent} (${a.installedVersion ?? 'unknown'})`).join(', ');
-            issues.push({
-                code: 'SKILLS_OUTDATED',
-                severity: 'warning',
-                message: `WorkOS skills outdated for ${agentList} — bundled: ${report.skills.bundledVersion}`,
-                remediation: `Run: ${formatWorkOSCommand('skills install')}`,
-                details: { bundledVersion: report.skills.bundledVersion, stale: stale.map((a) => a.agent) },
-            });
-        }
-    }
-    // MCP server URL drift — warn ONLY when a configured entry points at an
-    // unexpected URL. Absent MCP is never an issue: the user may have declined
-    // the offer, and doctor reports state without judging.
-    if (report.mcp) {
-        const misconfigured = report.mcp.agents.filter((a) => a.misconfigured);
-        if (misconfigured.length > 0) {
-            const agentList = misconfigured.map((a) => a.agent).join(', ');
-            issues.push({
-                code: 'MCP_MISCONFIGURED',
-                severity: 'warning',
-                message: `WorkOS MCP server configured with an unexpected URL for ${agentList} — expected ${report.mcp.serverUrl}`,
-                remediation: `Run: ${formatWorkOSCommand('mcp install')}`,
-                details: { agents: misconfigured.map((a) => a.agent), expectedUrl: report.mcp.serverUrl },
-            });
-        }
-    }
-    return issues;
-}
-function getUpdateCommand(packageManager, sdkName) {
-    switch (packageManager) {
-        case 'pnpm':
-            return `pnpm update ${sdkName}`;
-        case 'Yarn V1':
-        case 'Yarn V2/3/4':
-            return `yarn upgrade ${sdkName}`;
-        case 'Bun':
-            return `bun update ${sdkName}`;
-        default:
-            return `npm update ${sdkName}`;
-    }
-}
-//# sourceMappingURL=issues.js.map

package/dist/doctor/issues.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"issues.js","sourceRoot":"","sources":["../../src/doctor/issues.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,eAAe,EAAE;QACf,QAAQ,EAAE,OAAgB;QAC1B,OAAO,EAAE,6CAA6C;QACtD,WAAW,EAAE,4CAA4C;QACzD,OAAO,EAAE,uCAAuC;KACjD;IACD,iBAAiB,EAAE;QACjB,QAAQ,EAAE,OAAgB;QAC1B,OAAO,EAAE,+CAA+C;QACxD,WAAW,EAAE,8CAA8C;QAC3D,OAAO,EAAE,4CAA4C;KACtD;IACD,YAAY,EAAE;QACZ,QAAQ,EAAE,SAAkB;QAC5B,OAAO,EAAE,yBAAyB;QAClC,oCAAoC;KACrC;IACD,qBAAqB,EAAE;QACrB,QAAQ,EAAE,SAAkB;QAC5B,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EAAE,gEAAgE;QAC7E,OAAO,EAAE,+CAA+C;KACzD;IACD,YAAY,EAAE;QACZ,QAAQ,EAAE,OAAgB;QAC1B,OAAO,EAAE,qCAAqC;QAC9C,WAAW,EAAE,8DAA8D;QAC3E,OAAO,EAAE,yBAAyB;KACnC;IACD,eAAe,EAAE;QACf,QAAQ,EAAE,SAAkB;QAC5B,OAAO,EAAE,yBAAyB;QAClC,mDAAmD;KACpD;IACD,qBAAqB,EAAE;QACrB,QAAQ,EAAE,SAAkB;QAC5B,OAAO,EAAE,mDAAmD;QAC5D,OAAO,EAAE,8CAA8C;KACxD;IACD,qBAAqB,EAAE;QACrB,QAAQ,EAAE,SAAkB;QAC5B,OAAO,EAAE,qDAAqD;QAC9D,WAAW,EAAE,mDAAmD;KACjE;IACD,eAAe,EAAE;QACf,QAAQ,EAAE,OAAgB;QAC1B,OAAO,EAAE,+BAA+B;QACxC,WAAW,EAAE,mDAAmD;QAChE,OAAO,EAAE,uCAAuC;KACjD;IACD,kBAAkB,EAAE;QAClB,QAAQ,EAAE,OAAgB;QAC1B,OAAO,EAAE,kDAAkD;QAC3D,WAAW,EAAE,kEAAkE;QAC/E,OAAO,EAAE,4CAA4C;KACtD;IACD,wBAAwB,EAAE;QACxB,QAAQ,EAAE,SAAkB;QAC5B,OAAO,EAAE,yDAAyD;QAClE,WAAW,EACT,4HAA4H;KAC/H;CACF,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,MAAgD;IAC3E,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,aAAa;IACb,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,qCAAqC;YAC9C,WAAW,EAAE,yBAAyB,IAAI,EAAE;YAC5C,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1E,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,yBAAyB,MAAM,CAAC,GAAG,CAAC,OAAO,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG;YAC9E,WAAW,EAAE,QAAQ,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YACvF,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE;SACtE,CAAC,CAAC;IACL,CAAC;IAED,qBAAqB;IACrB,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,iBAAiB,CAAC,eAAe,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,iBAAiB,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,iBAAiB,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,0BAA0B;YAChC,GAAG,iBAAiB,CAAC,wBAAwB;YAC7C,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE;SACrD,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB;IACtB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACzF,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,4BAA4B,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE;YAChE,WAAW,EAAE,qDAAqD;SACnE,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,sEAAsE;IAEtE,6CAA6C;IAC7C,IAAI,MAAM,CAAC,WAAW,CAAC,UAAU,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAChF,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,uBAAuB;YAC7B,GAAG,iBAAiB,CAAC,qBAAqB;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,+BAA+B;IAC/B,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,iBAAiB;gBACvB,GAAG,iBAAiB,CAAC,eAAe;gBACpC,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,oBAAoB,CAAC,KAAK,EAAE;aACtD,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,aAAa,EAAE,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,oBAAoB;gBAC1B,GAAG,iBAAiB,CAAC,kBAAkB;gBACvC,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,oBAAoB,CAAC,KAAK,EAAE;aACtD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,OAAO,EAAE,OAAO,CAAC,OAAO;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,4EAA4E;IAC5E,IAAI,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,gBAAgB,IAAI,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjG,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,8BAA8B,SAAS,eAAe,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE;gBAC7F,WAAW,EAAE,QAAQ,mBAAmB,CAAC,gBAAgB,CAAC,EAAE;gBAC5D,OAAO,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE;aAC5F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,uDAAuD;IACvD,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;QACvE,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/D,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,2DAA2D,SAAS,eAAe,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE;gBAClH,WAAW,EAAE,QAAQ,mBAAmB,CAAC,aAAa,CAAC,EAAE;gBACzD,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE;aAC1F,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,cAA6B,EAAE,OAAe;IACtE,QAAQ,cAAc,EAAE,CAAC;QACvB,KAAK,MAAM;YACT,OAAO,eAAe,OAAO,EAAE,CAAC;QAClC,KAAK,SAAS,CAAC;QACf,KAAK,aAAa;YAChB,OAAO,gBAAgB,OAAO,EAAE,CAAC;QACnC,KAAK,KAAK;YACR,OAAO,cAAc,OAAO,EAAE,CAAC;QACjC;YACE,OAAO,cAAc,OAAO,EAAE,CAAC;IACnC,CAAC;AACH,CAAC","sourcesContent":["import type { Issue, DoctorReport } from './types.js';\nimport { getInstallHint, languageToSdkLanguage } from './checks/language.js';\nimport { formatWorkOSCommand } from '../utils/command-invocation.js';\n\nexport const ISSUE_DEFINITIONS = {\n  MISSING_API_KEY: {\n    severity: 'error' as const,\n    message: 'WORKOS_API_KEY environment variable not set',\n    remediation: 'Set WORKOS_API_KEY in your .env.local file',\n    docsUrl: 'https://dashboard.workos.com/api-keys',\n  },\n  MISSING_CLIENT_ID: {\n    severity: 'error' as const,\n    message: 'WORKOS_CLIENT_ID environment variable not set',\n    remediation: 'Set WORKOS_CLIENT_ID in your .env.local file',\n    docsUrl: 'https://dashboard.workos.com/configuration',\n  },\n  SDK_OUTDATED: {\n    severity: 'warning' as const,\n    message: 'SDK version is outdated',\n    // remediation generated dynamically\n  },\n  COOKIE_DOMAIN_NOT_SET: {\n    severity: 'warning' as const,\n    message: 'Cookie domain not explicitly set',\n    remediation: 'Consider setting WORKOS_COOKIE_DOMAIN for cross-subdomain auth',\n    docsUrl: 'https://workos.com/docs/authkit/cookie-domain',\n  },\n  NO_SDK_FOUND: {\n    severity: 'error' as const,\n    message: 'No WorkOS SDK found in dependencies',\n    remediation: 'Install a WorkOS SDK: npm install @workos-inc/authkit-nextjs',\n    docsUrl: 'https://workos.com/docs',\n  },\n  API_UNREACHABLE: {\n    severity: 'warning' as const,\n    message: 'Cannot reach WorkOS API',\n    // remediation generated dynamically based on error\n  },\n  REDIRECT_URI_MISMATCH: {\n    severity: 'warning' as const,\n    message: 'Redirect URI not found in dashboard configuration',\n    docsUrl: 'https://workos.com/docs/authkit/redirect-uri',\n  },\n  PROD_API_CALL_BLOCKED: {\n    severity: 'warning' as const,\n    message: 'Dashboard settings not fetched (production API key)',\n    remediation: 'Use a staging API key to fetch dashboard settings',\n  },\n  INVALID_API_KEY: {\n    severity: 'error' as const,\n    message: 'API key is invalid or expired',\n    remediation: 'Check your WORKOS_API_KEY in the WorkOS dashboard',\n    docsUrl: 'https://dashboard.workos.com/api-keys',\n  },\n  CLIENT_ID_MISMATCH: {\n    severity: 'error' as const,\n    message: 'Client ID does not match the API key environment',\n    remediation: 'Ensure WORKOS_CLIENT_ID matches the environment for your API key',\n    docsUrl: 'https://dashboard.workos.com/configuration',\n  },\n  HOST_EXECUTION_UNTRUSTED: {\n    severity: 'warning' as const,\n    message: 'Host-only WorkOS state may be unavailable in this shell',\n    remediation:\n      'Agent/CI host execution is untrusted. Re-run this command on the host shell before trusting auth, config, or API failures.',\n  },\n};\n\nexport function detectIssues(report: Omit<DoctorReport, 'issues' | 'summary'>): Issue[] {\n  const issues: Issue[] = [];\n\n  // SDK issues\n  if (!report.sdk.name) {\n    const lang = languageToSdkLanguage(report.language.name);\n    const hint = getInstallHint(lang);\n    issues.push({\n      code: 'NO_SDK_FOUND',\n      severity: 'error',\n      message: 'No WorkOS SDK found in dependencies',\n      remediation: `Install a WorkOS SDK: ${hint}`,\n      docsUrl: 'https://workos.com/docs',\n    });\n  } else if (report.sdk.outdated && report.sdk.version && report.sdk.latest) {\n    issues.push({\n      code: 'SDK_OUTDATED',\n      severity: 'warning',\n      message: `SDK version outdated (${report.sdk.version} → ${report.sdk.latest})`,\n      remediation: `Run: ${getUpdateCommand(report.runtime.packageManager, report.sdk.name)}`,\n      details: { installed: report.sdk.version, latest: report.sdk.latest },\n    });\n  }\n\n  // Environment issues\n  if (!report.environment.apiKeyConfigured) {\n    issues.push({ code: 'MISSING_API_KEY', ...ISSUE_DEFINITIONS.MISSING_API_KEY });\n  }\n\n  if (!report.environment.clientId) {\n    issues.push({ code: 'MISSING_CLIENT_ID', ...ISSUE_DEFINITIONS.MISSING_CLIENT_ID });\n  }\n\n  if (report.sdk.isAuthKit && !report.environment.cookieDomain) {\n    issues.push({ code: 'COOKIE_DOMAIN_NOT_SET', ...ISSUE_DEFINITIONS.COOKIE_DOMAIN_NOT_SET });\n  }\n\n  if (!report.hostExecution.ok) {\n    issues.push({\n      code: 'HOST_EXECUTION_UNTRUSTED',\n      ...ISSUE_DEFINITIONS.HOST_EXECUTION_UNTRUSTED,\n      details: { failures: report.hostExecution.failures },\n    });\n  }\n\n  // Connectivity issues\n  if (!report.connectivity.apiReachable && !report.connectivity.error?.includes('Skipped')) {\n    issues.push({\n      code: 'API_UNREACHABLE',\n      severity: 'warning',\n      message: `Cannot reach WorkOS API: ${report.connectivity.error}`,\n      remediation: 'Check your network connection and firewall settings',\n    });\n  }\n\n  // Note: Redirect URI mismatch detection disabled - WorkOS API doesn't expose\n  // a public endpoint to list configured redirect URIs for verification\n\n  // Production key warning (no dashboard data)\n  if (report.environment.apiKeyType === 'production' && !report.dashboardSettings) {\n    issues.push({\n      code: 'PROD_API_CALL_BLOCKED',\n      ...ISSUE_DEFINITIONS.PROD_API_CALL_BLOCKED,\n    });\n  }\n\n  // Credential validation issues\n  if (report.credentialValidation) {\n    if (!report.credentialValidation.valid) {\n      issues.push({\n        code: 'INVALID_API_KEY',\n        ...ISSUE_DEFINITIONS.INVALID_API_KEY,\n        details: { error: report.credentialValidation.error },\n      });\n    } else if (!report.credentialValidation.clientIdMatch) {\n      issues.push({\n        code: 'CLIENT_ID_MISMATCH',\n        ...ISSUE_DEFINITIONS.CLIENT_ID_MISMATCH,\n        details: { error: report.credentialValidation.error },\n      });\n    }\n  }\n\n  // Auth pattern findings — map directly to issues\n  if (report.authPatterns) {\n    for (const finding of report.authPatterns.findings) {\n      issues.push({\n        code: finding.code,\n        severity: finding.severity,\n        message: finding.message,\n        remediation: finding.remediation,\n        docsUrl: finding.docsUrl,\n      });\n    }\n  }\n\n  // Skill freshness — warn when agent-installed skills trail the bundled version.\n  // Surfaced so users know their coding agent is using older WorkOS guidance.\n  if (report.skills?.bundledVersion) {\n    const stale = report.skills.agents.filter((a) => a.stale);\n    if (stale.length > 0) {\n      const agentList = stale.map((a) => `${a.agent} (${a.installedVersion ?? 'unknown'})`).join(', ');\n      issues.push({\n        code: 'SKILLS_OUTDATED',\n        severity: 'warning',\n        message: `WorkOS skills outdated for ${agentList} — bundled: ${report.skills.bundledVersion}`,\n        remediation: `Run: ${formatWorkOSCommand('skills install')}`,\n        details: { bundledVersion: report.skills.bundledVersion, stale: stale.map((a) => a.agent) },\n      });\n    }\n  }\n\n  // MCP server URL drift — warn ONLY when a configured entry points at an\n  // unexpected URL. Absent MCP is never an issue: the user may have declined\n  // the offer, and doctor reports state without judging.\n  if (report.mcp) {\n    const misconfigured = report.mcp.agents.filter((a) => a.misconfigured);\n    if (misconfigured.length > 0) {\n      const agentList = misconfigured.map((a) => a.agent).join(', ');\n      issues.push({\n        code: 'MCP_MISCONFIGURED',\n        severity: 'warning',\n        message: `WorkOS MCP server configured with an unexpected URL for ${agentList} — expected ${report.mcp.serverUrl}`,\n        remediation: `Run: ${formatWorkOSCommand('mcp install')}`,\n        details: { agents: misconfigured.map((a) => a.agent), expectedUrl: report.mcp.serverUrl },\n      });\n    }\n  }\n\n  return issues;\n}\n\nfunction getUpdateCommand(packageManager: string | null, sdkName: string): string {\n  switch (packageManager) {\n    case 'pnpm':\n      return `pnpm update ${sdkName}`;\n    case 'Yarn V1':\n    case 'Yarn V2/3/4':\n      return `yarn upgrade ${sdkName}`;\n    case 'Bun':\n      return `bun update ${sdkName}`;\n    default:\n      return `npm update ${sdkName}`;\n  }\n}\n"]}

package/dist/doctor/json-output.d.ts

@@ -1,2 +0,0 @@
-import type { DoctorReport } from './types.js';
-export declare function formatReportAsJson(report: DoctorReport): string;

package/dist/doctor/json-output.js

@@ -1,4 +0,0 @@
-export function formatReportAsJson(report) {
-    return JSON.stringify(report, null, 2);
-}
-//# sourceMappingURL=json-output.js.map

package/dist/doctor/json-output.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"json-output.js","sourceRoot":"","sources":["../../src/doctor/json-output.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC","sourcesContent":["import type { DoctorReport } from './types.js';\n\nexport function formatReportAsJson(report: DoctorReport): string {\n  return JSON.stringify(report, null, 2);\n}\n"]}

package/dist/doctor/output.d.ts

@@ -1,7 +0,0 @@
-import type { InteractionModeSource } from '../utils/interaction-mode.js';
-import type { DoctorReport } from './types.js';
-export interface FormatOptions {
-    verbose?: boolean;
-}
-export declare function formatReport(report: DoctorReport, options?: FormatOptions): void;
-export declare function formatInteractionModeSource(source: InteractionModeSource): string;

package/dist/doctor/output.js

@@ -1,289 +0,0 @@
-import Chalk from 'chalk';
-import { homedir } from 'os';
-import { createAgents } from '../commands/install-skill.js';
-import { renderSummaryBox } from '../utils/summary-box.js';
-import { formatWorkOSCommand } from '../utils/command-invocation.js';
-export function formatReport(report, options) {
-    console.log('');
-    console.log(Chalk.cyan('WorkOS Doctor'));
-    console.log(Chalk.dim('━'.repeat(70)));
-    // SDK & Project
-    console.log('');
-    console.log('SDK & Project Information');
-    if (report.sdk.name) {
-        console.log(`   SDK:              ${report.sdk.name}${report.sdk.version ? ` v${report.sdk.version}` : ''}`);
-    }
-    else {
-        console.log(`   SDK:              ${Chalk.red('Not found')}`);
-    }
-    if (report.language.name !== 'Unknown') {
-        console.log(`   Language:         ${report.language.name}`);
-    }
-    if (report.language.name === 'JavaScript/TypeScript' || report.language.name === 'Unknown') {
-        console.log(`   Runtime:          Node.js ${report.runtime.nodeVersion}`);
-    }
-    if (report.framework.name) {
-        const variant = report.framework.variant ? ` (${report.framework.variant})` : '';
-        console.log(`   Framework:        ${report.framework.name} ${report.framework.version ?? ''}${variant}`);
-    }
-    if (report.language.packageManager) {
-        console.log(`   Package Manager:  ${report.language.packageManager}`);
-    }
-    else if (report.runtime.packageManager) {
-        console.log(`   Package Manager:  ${report.runtime.packageManager} ${report.runtime.packageManagerVersion ?? ''}`);
-    }
-    // Environment
-    console.log('');
-    console.log('Environment Configuration');
-    const envType = report.environment.apiKeyType
-        ? report.environment.apiKeyType.charAt(0).toUpperCase() + report.environment.apiKeyType.slice(1)
-        : 'Unable to determine';
-    console.log(`   Environment:      ${envType}`);
-    console.log(`   Client ID:        ${report.environment.clientId ?? Chalk.red('Not set')}`);
-    console.log(`   API Key:          ${report.environment.apiKeyConfigured ? Chalk.green('configured') : Chalk.red('not set')}`);
-    console.log(`   Base URL:         ${report.environment.baseUrl} ${Chalk.green('✓')}`);
-    // Interaction Mode
-    console.log('');
-    console.log('Interaction Mode');
-    console.log(`   Mode:             ${report.interactionMode.mode} (${formatInteractionModeSource(report.interactionMode.source)})`);
-    // Host Execution
-    console.log('');
-    console.log('Host Execution');
-    if (report.hostExecution.mode === 'interactive') {
-        console.log(`   Shell:            ${Chalk.green('✓')} Interactive host shell`);
-    }
-    else if (report.hostExecution.ok) {
-        console.log(`   Shell:            ${Chalk.green('✓')} Agent/CI context, host state reachable`);
-    }
-    else {
-        console.log(`   Shell:            ${Chalk.yellow('!')} Agent/CI context, host state may be unavailable`);
-        for (const failure of report.hostExecution.failures) {
-            const label = failure.label ?? failure.capability;
-            const target = failure.target ? ` (${failure.target})` : '';
-            console.log(`   ${Chalk.yellow('!')} ${label}${target}`);
-            if (options?.verbose) {
-                console.log(`     ${Chalk.dim(failure.detail)}`);
-            }
-        }
-    }
-    // Connectivity & Credential Validation
-    console.log('');
-    console.log('Connectivity');
-    if (report.connectivity.apiReachable) {
-        console.log(`   API:              ${Chalk.green('✓')} Reachable (${report.connectivity.latencyMs}ms)`);
-    }
-    else if (report.connectivity.error?.includes('Skipped')) {
-        console.log(`   API:              ${Chalk.dim('Skipped (--skip-api)')}`);
-    }
-    else {
-        console.log(`   API:              ${Chalk.red('✗')} ${report.connectivity.error}`);
-    }
-    // Credential validation
-    if (report.credentialValidation) {
-        if (report.credentialValidation.valid && report.credentialValidation.clientIdMatch) {
-            console.log(`   Credentials:      ${Chalk.green('✓')} Valid and matching`);
-        }
-        else if (!report.credentialValidation.valid) {
-            console.log(`   Credentials:      ${Chalk.red('✗')} ${report.credentialValidation.error ?? 'Invalid'}`);
-        }
-        else if (!report.credentialValidation.clientIdMatch) {
-            console.log(`   Credentials:      ${Chalk.red('✗')} Client ID mismatch`);
-        }
-    }
-    // Dashboard Settings (if available)
-    if (report.dashboardSettings) {
-        console.log('');
-        console.log('Dashboard Settings (Staging)');
-        console.log(`   Auth Methods:     ${report.dashboardSettings.authMethods.length > 0 ? report.dashboardSettings.authMethods.join(', ') : 'None configured'}`);
-        console.log(`   Session Timeout:  ${report.dashboardSettings.sessionTimeout ?? 'Default'}`);
-        console.log(`   MFA:              ${formatMfa(report.dashboardSettings.mfa)}`);
-        console.log(`   Organizations:    ${report.dashboardSettings.organizationCount} configured`);
-    }
-    else if (report.dashboardError) {
-        console.log('');
-        console.log('Dashboard Settings');
-        console.log(`   Status:           ${Chalk.dim(report.dashboardError)}`);
-    }
-    // Redirect URI (can't verify against dashboard - no list API)
-    if (report.redirectUris?.codeUri) {
-        console.log('');
-        const source = report.redirectUris.source === 'inferred' ? 'Inferred' : 'Configured';
-        console.log(`Redirect URI (${source})`);
-        console.log(`   ${report.redirectUris.codeUri}`);
-    }
-    // Auth Patterns
-    if (report.authPatterns) {
-        console.log('');
-        console.log('Auth Patterns');
-        if (report.authPatterns.findings.length === 0) {
-            console.log(`   ${Chalk.green('✓')} ${report.authPatterns.checksRun} checks passed`);
-        }
-        else {
-            console.log(`   ${report.authPatterns.checksRun} checked, ${Chalk.yellow(`${report.authPatterns.findings.length} finding(s)`)}`);
-            for (const finding of report.authPatterns.findings) {
-                const icon = finding.severity === 'error' ? Chalk.red('✗') : Chalk.yellow('!');
-                console.log(`   ${icon} ${finding.message}`);
-                if (finding.filePath) {
-                    console.log(`     ${Chalk.dim('File:')} ${finding.filePath}`);
-                }
-            }
-        }
-    }
-    // AI Analysis
-    if (report.aiAnalysis) {
-        console.log('');
-        if (report.aiAnalysis.skipped) {
-            console.log('AI Analysis');
-            console.log(`   ${Chalk.dim(report.aiAnalysis.skipReason ?? 'Skipped')}`);
-        }
-        else {
-            const duration = (report.aiAnalysis.durationMs / 1000).toFixed(1);
-            console.log(`AI Analysis ${Chalk.dim(`(${duration}s)`)}`);
-            if (report.aiAnalysis.summary) {
-                console.log(`   ${report.aiAnalysis.summary}`);
-            }
-            console.log('');
-            for (const finding of report.aiAnalysis.findings) {
-                const icon = finding.severity === 'error'
-                    ? Chalk.red('✗')
-                    : finding.severity === 'warning'
-                        ? Chalk.yellow('!')
-                        : Chalk.dim('ℹ');
-                const color = finding.severity === 'error' ? Chalk.red : finding.severity === 'warning' ? Chalk.yellow : Chalk.dim;
-                console.log(`   ${icon} ${color(finding.title)}`);
-                console.log(`     ${finding.detail}`);
-                if (finding.remediation) {
-                    console.log(`     ${Chalk.dim('→')} ${finding.remediation}`);
-                }
-                if (finding.filePath) {
-                    console.log(`     ${Chalk.dim('File:')} ${finding.filePath}`);
-                }
-                console.log('');
-            }
-        }
-    }
-    // Skills refresh (--fix path)
-    if (report.skillsRefresh) {
-        const agents = createAgents(homedir());
-        const displayName = (slug) => agents[slug]?.displayName ?? slug;
-        const formatVersion = (v) => v ?? '(none)';
-        console.log('');
-        console.log('Skills');
-        const slugs = Object.keys(report.skillsRefresh.before);
-        for (const slug of slugs) {
-            const before = formatVersion(report.skillsRefresh.before[slug] ?? null);
-            const after = formatVersion(report.skillsRefresh.after[slug] ?? null);
-            console.log(`   ${Chalk.green('✓')} Updated WorkOS skills for ${displayName(slug)}: ${before} → ${after}`);
-        }
-    }
-    // MCP Server (per detected coding agent)
-    if (report.mcp) {
-        console.log('');
-        console.log('MCP Server');
-        for (const agent of report.mcp.agents) {
-            if (agent.misconfigured) {
-                console.log(`   ${Chalk.yellow('!')} ${agent.agent}: configured with an unexpected URL`);
-            }
-            else if (agent.installed) {
-                console.log(`   ${Chalk.green('✓')} ${agent.agent}: installed`);
-            }
-            else {
-                console.log(`   ${agent.agent}: ${Chalk.dim('not installed')}`);
-            }
-        }
-    }
-    // Verbose mode additions
-    if (options?.verbose) {
-        console.log('');
-        console.log(Chalk.dim('Verbose Details'));
-        console.log(`   ${Chalk.dim('Project path:')}  ${report.project.path}`);
-        console.log(`   ${Chalk.dim('Timestamp:')}     ${report.timestamp}`);
-        console.log(`   ${Chalk.dim('Doctor version:')} ${report.version}`);
-    }
-    console.log('');
-    console.log(Chalk.dim('━'.repeat(70)));
-    // Issues
-    if (report.issues.length > 0) {
-        const errors = report.issues.filter((i) => i.severity === 'error');
-        const warnings = report.issues.filter((i) => i.severity === 'warning');
-        console.log('');
-        if (errors.length > 0) {
-            console.log(Chalk.red(`Critical Issues Found (${errors.length} errors)`));
-            console.log('');
-            for (const issue of errors) {
-                formatIssue(issue);
-            }
-        }
-        if (warnings.length > 0) {
-            console.log(Chalk.yellow(`Warnings (${warnings.length})`));
-            console.log('');
-            for (const issue of warnings) {
-                formatIssue(issue);
-            }
-        }
-    }
-    console.log('');
-    // Summary box with lock character
-    const expression = report.summary.healthy
-        ? 'success'
-        : report.summary.errors > 0
-            ? 'error'
-            : 'warning';
-    const title = report.summary.healthy
-        ? 'WorkOS Integration Healthy'
-        : report.summary.errors > 0
-            ? `${report.summary.errors} Issue(s) Found`
-            : `${report.summary.warnings} Warning(s) to Review`;
-    const items = report.issues.map((issue) => ({
-        type: issue.severity === 'error' ? 'error' : 'pending',
-        text: `${issue.code}: ${issue.message}`,
-    }));
-    console.log(renderSummaryBox({
-        expression,
-        title,
-        items,
-        footer: `${formatWorkOSCommand('doctor --copy')} | https://workos.com/docs`,
-    }));
-    console.log('');
-}
-export function formatInteractionModeSource(source) {
-    switch (source) {
-        case 'flag':
-            return '--mode';
-        case 'env':
-            return 'WORKOS_MODE';
-        case 'ci_env':
-            return 'CI environment';
-        case 'agent_env':
-            return 'agent environment';
-        case 'non_tty':
-            return 'non-TTY';
-        case 'default':
-            return 'default';
-    }
-}
-function formatIssue(issue) {
-    const icon = issue.severity === 'error' ? Chalk.red('✗') : Chalk.yellow('!');
-    const color = issue.severity === 'error' ? Chalk.red : Chalk.yellow;
-    console.log(`${icon} ${color(issue.code)}: ${issue.message}`);
-    if (issue.remediation) {
-        console.log(`   ${Chalk.dim('→')} ${issue.remediation}`);
-    }
-    if (issue.docsUrl) {
-        console.log(`   ${Chalk.dim('Docs:')} ${issue.docsUrl}`);
-    }
-    console.log('');
-}
-function formatMfa(mfa) {
-    switch (mfa) {
-        case 'required':
-            return 'Required';
-        case 'optional':
-            return 'Optional';
-        case 'disabled':
-            return 'Disabled';
-        default:
-            return 'Not configured';
-    }
-}
-//# sourceMappingURL=output.js.map