workos 0.19.0 → 0.20.2

package/dist/lib/unclaimed-env-api.js

@@ -1,139 +0,0 @@
-/**
- * Unclaimed Environment Provisioning API Client
- *
- * Provisions unauthenticated unclaimed environments and generates claim nonces.
- * No authentication required for provisioning — claim tokens are used for
- * subsequent claim operations.
- */
-import { logInfo, logError } from '../utils/debug.js';
-import { resolveApiBaseUrl } from './api-key.js';
-export class UnclaimedEnvApiError extends Error {
-    statusCode;
-    constructor(message, statusCode) {
-        super(message);
-        this.statusCode = statusCode;
-        this.name = 'UnclaimedEnvApiError';
-    }
-}
-const REQUEST_TIMEOUT_MS = 30_000;
-/**
- * Provision a new unclaimed environment. No authentication required.
- *
- * @returns UnclaimedEnvProvisionResult containing clientId, apiKey, claimToken, and authkitDomain
- * @throws UnclaimedEnvApiError on rate limit, network failure, timeout, or server error
- */
-export async function provisionUnclaimedEnvironment() {
-    const url = `${resolveApiBaseUrl()}/x/one-shot-environments`;
-    const controller = new AbortController();
-    const timeoutId = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
-    logInfo('[unclaimed-env-api] Provisioning unclaimed environment:', url);
-    try {
-        const res = await fetch(url, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            signal: controller.signal,
-        });
-        logInfo('[unclaimed-env-api] Response status:', res.status);
-        if (!res.ok) {
-            const text = await res.text().catch(() => '');
-            logError('[unclaimed-env-api] Error response:', res.status, text);
-            if (res.status === 429) {
-                throw new UnclaimedEnvApiError('Rate limited. Please wait a moment and try again.', 429);
-            }
-            throw new UnclaimedEnvApiError(`Server error: ${res.status}`, res.status);
-        }
-        const data = (await res.json());
-        // Handle both camelCase and snake_case responses (API may respond in either format)
-        const clientId = data.clientId ?? data.client_id;
-        const apiKey = data.apiKey ?? data.api_key;
-        const claimToken = data.claimToken ?? data.claim_token;
-        const authkitDomain = data.authkitDomain ?? data.authkit_domain;
-        if (!clientId || !apiKey || !claimToken || !authkitDomain) {
-            logError('[unclaimed-env-api] Invalid response: missing required fields');
-            throw new UnclaimedEnvApiError('Invalid response: missing required fields');
-        }
-        logInfo('[unclaimed-env-api] Unclaimed environment provisioned successfully');
-        return { clientId, apiKey, claimToken, authkitDomain };
-    }
-    catch (error) {
-        if (error instanceof UnclaimedEnvApiError)
-            throw error;
-        if (error instanceof Error && error.name === 'AbortError') {
-            logError('[unclaimed-env-api] Request timed out');
-            throw new UnclaimedEnvApiError('Request timed out.');
-        }
-        logError('[unclaimed-env-api] Network error:', error instanceof Error ? error.message : 'Unknown');
-        throw new UnclaimedEnvApiError(`Network error: ${error instanceof Error ? error.message : 'Unknown error'}`);
-    }
-    finally {
-        clearTimeout(timeoutId);
-    }
-}
-/**
- * Generate a claim nonce from a claim token + client ID.
- * Returns { alreadyClaimed: true } if environment was already claimed.
- *
- * @param clientId - The client ID of the unclaimed environment
- * @param claimToken - The claim token from provisioning
- * @returns ClaimNonceResponse — either a nonce or already-claimed indicator
- * @throws UnclaimedEnvApiError on invalid token, not found, or server error
- */
-export async function createClaimNonce(clientId, claimToken) {
-    const url = `${resolveApiBaseUrl()}/x/one-shot-environments/claim-nonces`;
-    const controller = new AbortController();
-    const timeoutId = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
-    logInfo('[unclaimed-env-api] Creating claim nonce:', url);
-    try {
-        const res = await fetch(url, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ client_id: clientId, claim_token: claimToken }),
-            signal: controller.signal,
-        });
-        logInfo('[unclaimed-env-api] Response status:', res.status);
-        if (!res.ok) {
-            const text = await res.text().catch(() => '');
-            logError('[unclaimed-env-api] Error response:', res.status, text);
-            if (res.status === 401) {
-                throw new UnclaimedEnvApiError('Invalid claim token.', 401);
-            }
-            if (res.status === 404) {
-                throw new UnclaimedEnvApiError('Environment not found.', 404);
-            }
-            if (res.status === 409) {
-                logInfo('[unclaimed-env-api] Environment already claimed (409)');
-                return { alreadyClaimed: true };
-            }
-            if (res.status === 429) {
-                throw new UnclaimedEnvApiError('Rate limited. Please wait a moment and try again.', 429);
-            }
-            throw new UnclaimedEnvApiError(`Server error: ${res.status}`, res.status);
-        }
-        const data = (await res.json());
-        const alreadyClaimed = data.alreadyClaimed ?? data.already_claimed;
-        if (alreadyClaimed) {
-            logInfo('[unclaimed-env-api] Environment already claimed');
-            return { alreadyClaimed: true };
-        }
-        if (!data.nonce) {
-            logError('[unclaimed-env-api] Invalid response: missing nonce');
-            throw new UnclaimedEnvApiError('Invalid response: missing nonce');
-        }
-        logInfo('[unclaimed-env-api] Claim nonce created successfully');
-        return { nonce: data.nonce, alreadyClaimed: false };
-    }
-    catch (error) {
-        if (error instanceof UnclaimedEnvApiError)
-            throw error;
-        if (error instanceof Error && error.name === 'AbortError') {
-            logError('[unclaimed-env-api] Request timed out');
-            throw new UnclaimedEnvApiError('Request timed out.');
-        }
-        logError('[unclaimed-env-api] Network error:', error instanceof Error ? error.message : 'Unknown');
-        throw new UnclaimedEnvApiError(`Network error: ${error instanceof Error ? error.message : 'Unknown error'}`);
-    }
-    finally {
-        clearTimeout(timeoutId);
-    }
-}
-//# sourceMappingURL=unclaimed-env-api.js.map

package/dist/lib/unclaimed-env-api.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"unclaimed-env-api.js","sourceRoot":"","sources":["../../src/lib/unclaimed-env-api.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAoBjD,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAG3B;IAFlB,YACE,OAAe,EACC,UAAmB;QAEnC,KAAK,CAAC,OAAO,CAAC,CAAC;QAFC,eAAU,GAAV,UAAU,CAAS;QAGnC,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B;IACjD,MAAM,GAAG,GAAG,GAAG,iBAAiB,EAAE,0BAA0B,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAE3E,OAAO,CAAC,yDAAyD,EAAE,GAAG,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,OAAO,CAAC,sCAAsC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,QAAQ,CAAC,qCAAqC,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAElE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,oBAAoB,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC;YAC3F,CAAC;YAED,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAS7B,CAAC;QAEF,oFAAoF;QACpF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC;QACjD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC;QAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,WAAW,CAAC;QACvD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,cAAc,CAAC;QAEhE,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1D,QAAQ,CAAC,+DAA+D,CAAC,CAAC;YAC1E,MAAM,IAAI,oBAAoB,CAAC,2CAA2C,CAAC,CAAC;QAC9E,CAAC;QAED,OAAO,CAAC,oEAAoE,CAAC,CAAC;QAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,oBAAoB;YAAE,MAAM,KAAK,CAAC;QACvD,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1D,QAAQ,CAAC,uCAAuC,CAAC,CAAC;YAClD,MAAM,IAAI,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;QACvD,CAAC;QACD,QAAQ,CAAC,oCAAoC,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnG,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;IAC/G,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgB,EAAE,UAAkB;IACzE,MAAM,GAAG,GAAG,GAAG,iBAAiB,EAAE,uCAAuC,CAAC;IAC1E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAE3E,OAAO,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;YACtE,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,OAAO,CAAC,sCAAsC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,QAAQ,CAAC,qCAAqC,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAElE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,oBAAoB,CAAC,sBAAsB,EAAE,GAAG,CAAC,CAAC;YAC9D,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,oBAAoB,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,OAAO,CAAC,uDAAuD,CAAC,CAAC;gBACjE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;YAClC,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,oBAAoB,CAAC,mDAAmD,EAAE,GAAG,CAAC,CAAC;YAC3F,CAAC;YAED,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAC;QAEF,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,eAAe,CAAC;QACnE,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,CAAC,iDAAiD,CAAC,CAAC;YAC3D,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QAClC,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,QAAQ,CAAC,qDAAqD,CAAC,CAAC;YAChE,MAAM,IAAI,oBAAoB,CAAC,iCAAiC,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,CAAC,sDAAsD,CAAC,CAAC;QAChE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,oBAAoB;YAAE,MAAM,KAAK,CAAC;QACvD,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1D,QAAQ,CAAC,uCAAuC,CAAC,CAAC;YAClD,MAAM,IAAI,oBAAoB,CAAC,oBAAoB,CAAC,CAAC;QACvD,CAAC;QACD,QAAQ,CAAC,oCAAoC,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnG,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;IAC/G,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC","sourcesContent":["/**\n * Unclaimed Environment Provisioning API Client\n *\n * Provisions unauthenticated unclaimed environments and generates claim nonces.\n * No authentication required for provisioning — claim tokens are used for\n * subsequent claim operations.\n */\n\nimport { logInfo, logError } from '../utils/debug.js';\nimport { resolveApiBaseUrl } from './api-key.js';\n\nexport interface UnclaimedEnvProvisionResult {\n  clientId: string;\n  apiKey: string;\n  claimToken: string;\n  authkitDomain: string;\n}\n\nexport interface ClaimNonceResult {\n  nonce: string;\n  alreadyClaimed: false;\n}\n\nexport interface AlreadyClaimedResult {\n  alreadyClaimed: true;\n}\n\nexport type ClaimNonceResponse = ClaimNonceResult | AlreadyClaimedResult;\n\nexport class UnclaimedEnvApiError extends Error {\n  constructor(\n    message: string,\n    public readonly statusCode?: number,\n  ) {\n    super(message);\n    this.name = 'UnclaimedEnvApiError';\n  }\n}\n\nconst REQUEST_TIMEOUT_MS = 30_000;\n\n/**\n * Provision a new unclaimed environment. No authentication required.\n *\n * @returns UnclaimedEnvProvisionResult containing clientId, apiKey, claimToken, and authkitDomain\n * @throws UnclaimedEnvApiError on rate limit, network failure, timeout, or server error\n */\nexport async function provisionUnclaimedEnvironment(): Promise<UnclaimedEnvProvisionResult> {\n  const url = `${resolveApiBaseUrl()}/x/one-shot-environments`;\n  const controller = new AbortController();\n  const timeoutId = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);\n\n  logInfo('[unclaimed-env-api] Provisioning unclaimed environment:', url);\n  try {\n    const res = await fetch(url, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      signal: controller.signal,\n    });\n\n    logInfo('[unclaimed-env-api] Response status:', res.status);\n    if (!res.ok) {\n      const text = await res.text().catch(() => '');\n      logError('[unclaimed-env-api] Error response:', res.status, text);\n\n      if (res.status === 429) {\n        throw new UnclaimedEnvApiError('Rate limited. Please wait a moment and try again.', 429);\n      }\n\n      throw new UnclaimedEnvApiError(`Server error: ${res.status}`, res.status);\n    }\n\n    const data = (await res.json()) as {\n      clientId?: string;\n      apiKey?: string;\n      claimToken?: string;\n      authkitDomain?: string;\n      client_id?: string;\n      api_key?: string;\n      claim_token?: string;\n      authkit_domain?: string;\n    };\n\n    // Handle both camelCase and snake_case responses (API may respond in either format)\n    const clientId = data.clientId ?? data.client_id;\n    const apiKey = data.apiKey ?? data.api_key;\n    const claimToken = data.claimToken ?? data.claim_token;\n    const authkitDomain = data.authkitDomain ?? data.authkit_domain;\n\n    if (!clientId || !apiKey || !claimToken || !authkitDomain) {\n      logError('[unclaimed-env-api] Invalid response: missing required fields');\n      throw new UnclaimedEnvApiError('Invalid response: missing required fields');\n    }\n\n    logInfo('[unclaimed-env-api] Unclaimed environment provisioned successfully');\n    return { clientId, apiKey, claimToken, authkitDomain };\n  } catch (error) {\n    if (error instanceof UnclaimedEnvApiError) throw error;\n    if (error instanceof Error && error.name === 'AbortError') {\n      logError('[unclaimed-env-api] Request timed out');\n      throw new UnclaimedEnvApiError('Request timed out.');\n    }\n    logError('[unclaimed-env-api] Network error:', error instanceof Error ? error.message : 'Unknown');\n    throw new UnclaimedEnvApiError(`Network error: ${error instanceof Error ? error.message : 'Unknown error'}`);\n  } finally {\n    clearTimeout(timeoutId);\n  }\n}\n\n/**\n * Generate a claim nonce from a claim token + client ID.\n * Returns { alreadyClaimed: true } if environment was already claimed.\n *\n * @param clientId - The client ID of the unclaimed environment\n * @param claimToken - The claim token from provisioning\n * @returns ClaimNonceResponse — either a nonce or already-claimed indicator\n * @throws UnclaimedEnvApiError on invalid token, not found, or server error\n */\nexport async function createClaimNonce(clientId: string, claimToken: string): Promise<ClaimNonceResponse> {\n  const url = `${resolveApiBaseUrl()}/x/one-shot-environments/claim-nonces`;\n  const controller = new AbortController();\n  const timeoutId = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);\n\n  logInfo('[unclaimed-env-api] Creating claim nonce:', url);\n  try {\n    const res = await fetch(url, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json' },\n      body: JSON.stringify({ client_id: clientId, claim_token: claimToken }),\n      signal: controller.signal,\n    });\n\n    logInfo('[unclaimed-env-api] Response status:', res.status);\n    if (!res.ok) {\n      const text = await res.text().catch(() => '');\n      logError('[unclaimed-env-api] Error response:', res.status, text);\n\n      if (res.status === 401) {\n        throw new UnclaimedEnvApiError('Invalid claim token.', 401);\n      }\n      if (res.status === 404) {\n        throw new UnclaimedEnvApiError('Environment not found.', 404);\n      }\n      if (res.status === 409) {\n        logInfo('[unclaimed-env-api] Environment already claimed (409)');\n        return { alreadyClaimed: true };\n      }\n      if (res.status === 429) {\n        throw new UnclaimedEnvApiError('Rate limited. Please wait a moment and try again.', 429);\n      }\n\n      throw new UnclaimedEnvApiError(`Server error: ${res.status}`, res.status);\n    }\n\n    const data = (await res.json()) as {\n      nonce?: string;\n      alreadyClaimed?: boolean;\n      already_claimed?: boolean;\n    };\n\n    const alreadyClaimed = data.alreadyClaimed ?? data.already_claimed;\n    if (alreadyClaimed) {\n      logInfo('[unclaimed-env-api] Environment already claimed');\n      return { alreadyClaimed: true };\n    }\n\n    if (!data.nonce) {\n      logError('[unclaimed-env-api] Invalid response: missing nonce');\n      throw new UnclaimedEnvApiError('Invalid response: missing nonce');\n    }\n\n    logInfo('[unclaimed-env-api] Claim nonce created successfully');\n    return { nonce: data.nonce, alreadyClaimed: false };\n  } catch (error) {\n    if (error instanceof UnclaimedEnvApiError) throw error;\n    if (error instanceof Error && error.name === 'AbortError') {\n      logError('[unclaimed-env-api] Request timed out');\n      throw new UnclaimedEnvApiError('Request timed out.');\n    }\n    logError('[unclaimed-env-api] Network error:', error instanceof Error ? error.message : 'Unknown');\n    throw new UnclaimedEnvApiError(`Network error: ${error instanceof Error ? error.message : 'Unknown error'}`);\n  } finally {\n    clearTimeout(timeoutId);\n  }\n}\n"]}

package/dist/lib/unclaimed-env-provision.d.ts

@@ -1,24 +0,0 @@
-/**
- * Unclaimed environment provisioning helper.
- *
- * Calls the unclaimed env API, saves credentials to config store as type 'unclaimed',
- * and returns whether provisioning succeeded. Non-fatal — wraps everything in
- * try/catch so install flow can fall back to login.
- */
-export interface UnclaimedEnvProvisionOptions {
-    installDir: string;
-    /** Redirect URI key name varies by framework */
-    redirectUriKey?: string;
-    /** Redirect URI value */
-    redirectUri?: string;
-}
-/**
- * Try to provision an unclaimed environment. Non-fatal — returns true on success,
- * false on any failure.
- *
- * On success:
- * - Saves environment to config store as type 'unclaimed'
- * - Sets it as active environment
- * - Writes credentials (including cookie password and claim token) to .env.local
- */
-export declare function tryProvisionUnclaimedEnv(options: UnclaimedEnvProvisionOptions): Promise<boolean>;

package/dist/lib/unclaimed-env-provision.js

@@ -1,80 +0,0 @@
-/**
- * Unclaimed environment provisioning helper.
- *
- * Calls the unclaimed env API, saves credentials to config store as type 'unclaimed',
- * and returns whether provisioning succeeded. Non-fatal — wraps everything in
- * try/catch so install flow can fall back to login.
- */
-import chalk from 'chalk';
-import { provisionUnclaimedEnvironment, UnclaimedEnvApiError } from './unclaimed-env-api.js';
-import { getConfig, saveConfig, getActiveEnvironment, freshEnvKey } from './config-store.js';
-import { writeCredentialsEnv } from './env-writer.js';
-import { logInfo, logError } from '../utils/debug.js';
-import { renderStderrNotice } from '../utils/box.js';
-import ui from '../utils/ui.js';
-import { formatWorkOSCommand } from '../utils/command-invocation.js';
-/**
- * Try to provision an unclaimed environment. Non-fatal — returns true on success,
- * false on any failure.
- *
- * On success:
- * - Saves environment to config store as type 'unclaimed'
- * - Sets it as active environment
- * - Writes credentials (including cookie password and claim token) to .env.local
- */
-export async function tryProvisionUnclaimedEnv(options) {
-    try {
-        logInfo('[unclaimed-env-provision] Attempting unclaimed environment provisioning');
-        const result = await provisionUnclaimedEnvironment();
-        // Write .env.local first — if this fails, config stays clean (no orphan entries)
-        const envVars = {
-            WORKOS_API_KEY: result.apiKey,
-            WORKOS_CLIENT_ID: result.clientId,
-            WORKOS_CLAIM_TOKEN: result.claimToken,
-        };
-        if (options.redirectUri) {
-            const key = options.redirectUriKey ?? 'WORKOS_REDIRECT_URI';
-            envVars[key] = options.redirectUri;
-        }
-        writeCredentialsEnv(options.installDir, envVars);
-        // Save to config store (after .env.local succeeds). A fresh key so a repeated
-        // provision never clobbers an earlier env's claim token (unrecoverable — it
-        // lives only in this config).
-        const config = getConfig() ?? { environments: {} };
-        const key = freshEnvKey(config, 'unclaimed');
-        config.environments[key] = {
-            name: key,
-            type: 'unclaimed',
-            apiKey: result.apiKey,
-            clientId: result.clientId,
-            claimToken: result.claimToken,
-        };
-        config.activeEnvironment = key;
-        saveConfig(config);
-        // Verify config persisted — critical for `workos env claim` in a later process
-        const readBack = getActiveEnvironment();
-        if (!readBack || readBack.type !== 'unclaimed') {
-            logError('[unclaimed-env-provision] Config read-back failed after save — claim token may not persist');
-            ui.log.warn('Environment provisioned but config storage may be unreliable. Falling back to login...');
-            return false;
-        }
-        logInfo('[unclaimed-env-provision] Unclaimed environment provisioned and saved');
-        renderStderrNotice(`${chalk.green('✓')} ${chalk.bold('Environment provisioned')} ${chalk.dim('— credentials saved to your project')}`, `${chalk.dim('Run')} ${chalk.bold.cyan(formatWorkOSCommand('env claim'))} ${chalk.dim('to link it to your account.')}`);
-        return true;
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : 'Unknown error';
-        logError('[unclaimed-env-provision] Failed:', message);
-        if (error instanceof UnclaimedEnvApiError) {
-            if (error.statusCode === 429) {
-                ui.log.warn('WorkOS is busy, falling back to login...');
-            }
-        }
-        else {
-            // Non-API errors (filesystem, keyring) are unexpected — surface to user
-            ui.log.warn(`Could not set up environment: ${message}. Falling back to login...`);
-        }
-        return false;
-    }
-}
-//# sourceMappingURL=unclaimed-env-provision.js.map

package/dist/lib/unclaimed-env-provision.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"unclaimed-env-provision.js","sourceRoot":"","sources":["../../src/lib/unclaimed-env-provision.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,6BAA6B,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC7F,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAUrE;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAAqC;IAClF,IAAI,CAAC;QACH,OAAO,CAAC,yEAAyE,CAAC,CAAC;QAEnF,MAAM,MAAM,GAAG,MAAM,6BAA6B,EAAE,CAAC;QAErD,iFAAiF;QACjF,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,MAAM,CAAC,MAAM;YAC7B,gBAAgB,EAAE,MAAM,CAAC,QAAQ;YACjC,kBAAkB,EAAE,MAAM,CAAC,UAAU;SACtC,CAAC;QAEF,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,OAAO,CAAC,cAAc,IAAI,qBAAqB,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;QACrC,CAAC;QAED,mBAAmB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAEjD,8EAA8E;QAC9E,4EAA4E;QAC5E,8BAA8B;QAC9B,MAAM,MAAM,GAAc,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC7C,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG;YACzB,IAAI,EAAE,GAAG;YACT,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,UAAU;SAC9B,CAAC;QACF,MAAM,CAAC,iBAAiB,GAAG,GAAG,CAAC;QAC/B,UAAU,CAAC,MAAM,CAAC,CAAC;QAEnB,+EAA+E;QAC/E,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/C,QAAQ,CAAC,4FAA4F,CAAC,CAAC;YACvG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;YACtG,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,CAAC,uEAAuE,CAAC,CAAC;QACjF,kBAAkB,CAChB,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,qCAAqC,CAAC,EAAE,EAClH,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,CACvH,CAAC;QAEF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACzE,QAAQ,CAAC,mCAAmC,EAAE,OAAO,CAAC,CAAC;QAEvD,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;YAC1C,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAC7B,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,wEAAwE;YACxE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,iCAAiC,OAAO,4BAA4B,CAAC,CAAC;QACpF,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["/**\n * Unclaimed environment provisioning helper.\n *\n * Calls the unclaimed env API, saves credentials to config store as type 'unclaimed',\n * and returns whether provisioning succeeded. Non-fatal — wraps everything in\n * try/catch so install flow can fall back to login.\n */\n\nimport chalk from 'chalk';\nimport { provisionUnclaimedEnvironment, UnclaimedEnvApiError } from './unclaimed-env-api.js';\nimport { getConfig, saveConfig, getActiveEnvironment, freshEnvKey } from './config-store.js';\nimport type { CliConfig } from './config-store.js';\nimport { writeCredentialsEnv } from './env-writer.js';\nimport { logInfo, logError } from '../utils/debug.js';\nimport { renderStderrNotice } from '../utils/box.js';\nimport ui from '../utils/ui.js';\nimport { formatWorkOSCommand } from '../utils/command-invocation.js';\n\nexport interface UnclaimedEnvProvisionOptions {\n  installDir: string;\n  /** Redirect URI key name varies by framework */\n  redirectUriKey?: string;\n  /** Redirect URI value */\n  redirectUri?: string;\n}\n\n/**\n * Try to provision an unclaimed environment. Non-fatal — returns true on success,\n * false on any failure.\n *\n * On success:\n * - Saves environment to config store as type 'unclaimed'\n * - Sets it as active environment\n * - Writes credentials (including cookie password and claim token) to .env.local\n */\nexport async function tryProvisionUnclaimedEnv(options: UnclaimedEnvProvisionOptions): Promise<boolean> {\n  try {\n    logInfo('[unclaimed-env-provision] Attempting unclaimed environment provisioning');\n\n    const result = await provisionUnclaimedEnvironment();\n\n    // Write .env.local first — if this fails, config stays clean (no orphan entries)\n    const envVars: Record<string, string> = {\n      WORKOS_API_KEY: result.apiKey,\n      WORKOS_CLIENT_ID: result.clientId,\n      WORKOS_CLAIM_TOKEN: result.claimToken,\n    };\n\n    if (options.redirectUri) {\n      const key = options.redirectUriKey ?? 'WORKOS_REDIRECT_URI';\n      envVars[key] = options.redirectUri;\n    }\n\n    writeCredentialsEnv(options.installDir, envVars);\n\n    // Save to config store (after .env.local succeeds). A fresh key so a repeated\n    // provision never clobbers an earlier env's claim token (unrecoverable — it\n    // lives only in this config).\n    const config: CliConfig = getConfig() ?? { environments: {} };\n    const key = freshEnvKey(config, 'unclaimed');\n    config.environments[key] = {\n      name: key,\n      type: 'unclaimed',\n      apiKey: result.apiKey,\n      clientId: result.clientId,\n      claimToken: result.claimToken,\n    };\n    config.activeEnvironment = key;\n    saveConfig(config);\n\n    // Verify config persisted — critical for `workos env claim` in a later process\n    const readBack = getActiveEnvironment();\n    if (!readBack || readBack.type !== 'unclaimed') {\n      logError('[unclaimed-env-provision] Config read-back failed after save — claim token may not persist');\n      ui.log.warn('Environment provisioned but config storage may be unreliable. Falling back to login...');\n      return false;\n    }\n\n    logInfo('[unclaimed-env-provision] Unclaimed environment provisioned and saved');\n    renderStderrNotice(\n      `${chalk.green('✓')} ${chalk.bold('Environment provisioned')} ${chalk.dim('— credentials saved to your project')}`,\n      `${chalk.dim('Run')} ${chalk.bold.cyan(formatWorkOSCommand('env claim'))} ${chalk.dim('to link it to your account.')}`,\n    );\n\n    return true;\n  } catch (error) {\n    const message = error instanceof Error ? error.message : 'Unknown error';\n    logError('[unclaimed-env-provision] Failed:', message);\n\n    if (error instanceof UnclaimedEnvApiError) {\n      if (error.statusCode === 429) {\n        ui.log.warn('WorkOS is busy, falling back to login...');\n      }\n    } else {\n      // Non-API errors (filesystem, keyring) are unexpected — surface to user\n      ui.log.warn(`Could not set up environment: ${message}. Falling back to login...`);\n    }\n\n    return false;\n  }\n}\n"]}

package/dist/lib/unclaimed-warning.d.ts

@@ -1,15 +0,0 @@
-/**
- * Unclaimed environment warning module.
- *
- * Shows a one-line stderr warning when the active environment is unclaimed.
- * On first run, checks if the environment was claimed externally (e.g. via
- * browser) and updates the local config if so.
- * Never throws — all errors are caught to avoid blocking management commands.
- */
-/**
- * Show a warning if the active environment is unclaimed.
- * Non-blocking — never throws.
- */
-export declare function warnIfUnclaimed(): Promise<void>;
-/** Reset session state (for testing) */
-export declare function resetUnclaimedWarningState(): void;

package/dist/lib/unclaimed-warning.js

@@ -1,78 +0,0 @@
-/**
- * Unclaimed environment warning module.
- *
- * Shows a one-line stderr warning when the active environment is unclaimed.
- * On first run, checks if the environment was claimed externally (e.g. via
- * browser) and updates the local config if so.
- * Never throws — all errors are caught to avoid blocking management commands.
- */
-import chalk from 'chalk';
-import { getActiveEnvironment, isUnclaimedEnvironment, markEnvironmentClaimed } from './config-store.js';
-import { createClaimNonce, UnclaimedEnvApiError } from './unclaimed-env-api.js';
-import { logError, logInfo } from '../utils/debug.js';
-import { isJsonMode } from '../utils/output.js';
-import { renderStderrNotice } from '../utils/box.js';
-import { pill } from '../utils/ui.js';
-import { markStartupNoticeShown } from './startup-notice-gate.js';
-import { formatWorkOSCommand } from '../utils/command-invocation.js';
-let warningShownThisSession = false;
-let claimCheckDoneThisSession = false;
-/**
- * Show a warning if the active environment is unclaimed.
- * Non-blocking — never throws.
- */
-export async function warnIfUnclaimed() {
-    try {
-        const env = getActiveEnvironment();
-        if (!env || !isUnclaimedEnvironment(env))
-            return;
-        // Check once per session if the env was claimed externally
-        // claimToken and clientId guaranteed present by UnclaimedEnvironmentConfig
-        if (!claimCheckDoneThisSession) {
-            claimCheckDoneThisSession = true;
-            try {
-                const result = await createClaimNonce(env.clientId, env.claimToken);
-                if (result.alreadyClaimed) {
-                    markEnvironmentClaimed();
-                    logInfo('[unclaimed-warning] Environment was claimed externally, config updated');
-                    return;
-                }
-            }
-            catch (error) {
-                if (error instanceof UnclaimedEnvApiError && error.statusCode === 401) {
-                    // 401 likely means the claim token was invalidated after the environment
-                    // was claimed. We assume claimed and promote to sandbox.
-                    markEnvironmentClaimed();
-                    logInfo('[unclaimed-warning] Claim token invalid/expired, removed');
-                    return;
-                }
-                // Log non-401 errors for diagnostics, then fall through to show warning
-                if (error instanceof UnclaimedEnvApiError) {
-                    logError('[unclaimed-warning] Claim check failed:', error.statusCode, error.message);
-                }
-                else {
-                    logError('[unclaimed-warning] Claim check failed:', error instanceof Error ? error.message : String(error));
-                }
-            }
-        }
-        // Show warning once per session
-        if (warningShownThisSession)
-            return;
-        warningShownThisSession = true;
-        if (!isJsonMode()) {
-            renderStderrNotice(`${pill('WARN', 'warn')}  ${chalk.bold('Unclaimed environment')} ${chalk.dim('— not linked to your account')}`, `${chalk.dim('Run')} ${chalk.bold.cyan(formatWorkOSCommand('env claim'))} ${chalk.dim('to save it — its credentials live only on this machine.')}`);
-            // Claim the one-notice-per-run slot so the lower-priority MCP banner defers.
-            markStartupNoticeShown();
-        }
-    }
-    catch (error) {
-        // Never block command execution, but log for diagnostics
-        logError('[unclaimed-warning] Unexpected error:', error instanceof Error ? error.message : String(error));
-    }
-}
-/** Reset session state (for testing) */
-export function resetUnclaimedWarningState() {
-    warningShownThisSession = false;
-    claimCheckDoneThisSession = false;
-}
-//# sourceMappingURL=unclaimed-warning.js.map

package/dist/lib/unclaimed-warning.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"unclaimed-warning.js","sourceRoot":"","sources":["../../src/lib/unclaimed-warning.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAChF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE,IAAI,uBAAuB,GAAG,KAAK,CAAC;AACpC,IAAI,yBAAyB,GAAG,KAAK,CAAC;AAEtC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,oBAAoB,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,OAAO;QAEjD,2DAA2D;QAC3D,2EAA2E;QAC3E,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAC/B,yBAAyB,GAAG,IAAI,CAAC;YACjC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;gBACpE,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC1B,sBAAsB,EAAE,CAAC;oBACzB,OAAO,CAAC,wEAAwE,CAAC,CAAC;oBAClF,OAAO;gBACT,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,oBAAoB,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;oBACtE,yEAAyE;oBACzE,yDAAyD;oBACzD,sBAAsB,EAAE,CAAC;oBACzB,OAAO,CAAC,0DAA0D,CAAC,CAAC;oBACpE,OAAO;gBACT,CAAC;gBACD,wEAAwE;gBACxE,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;oBAC1C,QAAQ,CAAC,yCAAyC,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBACvF,CAAC;qBAAM,CAAC;oBACN,QAAQ,CAAC,yCAAyC,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9G,CAAC;YACH,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,IAAI,uBAAuB;YAAE,OAAO;QACpC,uBAAuB,GAAG,IAAI,CAAC;QAE/B,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;YAClB,kBAAkB,CAChB,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,EAC9G,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,yDAAyD,CAAC,EAAE,CACnJ,CAAC;YACF,6EAA6E;YAC7E,sBAAsB,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yDAAyD;QACzD,QAAQ,CAAC,uCAAuC,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,0BAA0B;IACxC,uBAAuB,GAAG,KAAK,CAAC;IAChC,yBAAyB,GAAG,KAAK,CAAC;AACpC,CAAC","sourcesContent":["/**\n * Unclaimed environment warning module.\n *\n * Shows a one-line stderr warning when the active environment is unclaimed.\n * On first run, checks if the environment was claimed externally (e.g. via\n * browser) and updates the local config if so.\n * Never throws — all errors are caught to avoid blocking management commands.\n */\n\nimport chalk from 'chalk';\nimport { getActiveEnvironment, isUnclaimedEnvironment, markEnvironmentClaimed } from './config-store.js';\nimport { createClaimNonce, UnclaimedEnvApiError } from './unclaimed-env-api.js';\nimport { logError, logInfo } from '../utils/debug.js';\nimport { isJsonMode } from '../utils/output.js';\nimport { renderStderrNotice } from '../utils/box.js';\nimport { pill } from '../utils/ui.js';\nimport { markStartupNoticeShown } from './startup-notice-gate.js';\nimport { formatWorkOSCommand } from '../utils/command-invocation.js';\n\nlet warningShownThisSession = false;\nlet claimCheckDoneThisSession = false;\n\n/**\n * Show a warning if the active environment is unclaimed.\n * Non-blocking — never throws.\n */\nexport async function warnIfUnclaimed(): Promise<void> {\n  try {\n    const env = getActiveEnvironment();\n    if (!env || !isUnclaimedEnvironment(env)) return;\n\n    // Check once per session if the env was claimed externally\n    // claimToken and clientId guaranteed present by UnclaimedEnvironmentConfig\n    if (!claimCheckDoneThisSession) {\n      claimCheckDoneThisSession = true;\n      try {\n        const result = await createClaimNonce(env.clientId, env.claimToken);\n        if (result.alreadyClaimed) {\n          markEnvironmentClaimed();\n          logInfo('[unclaimed-warning] Environment was claimed externally, config updated');\n          return;\n        }\n      } catch (error) {\n        if (error instanceof UnclaimedEnvApiError && error.statusCode === 401) {\n          // 401 likely means the claim token was invalidated after the environment\n          // was claimed. We assume claimed and promote to sandbox.\n          markEnvironmentClaimed();\n          logInfo('[unclaimed-warning] Claim token invalid/expired, removed');\n          return;\n        }\n        // Log non-401 errors for diagnostics, then fall through to show warning\n        if (error instanceof UnclaimedEnvApiError) {\n          logError('[unclaimed-warning] Claim check failed:', error.statusCode, error.message);\n        } else {\n          logError('[unclaimed-warning] Claim check failed:', error instanceof Error ? error.message : String(error));\n        }\n      }\n    }\n\n    // Show warning once per session\n    if (warningShownThisSession) return;\n    warningShownThisSession = true;\n\n    if (!isJsonMode()) {\n      renderStderrNotice(\n        `${pill('WARN', 'warn')}  ${chalk.bold('Unclaimed environment')} ${chalk.dim('— not linked to your account')}`,\n        `${chalk.dim('Run')} ${chalk.bold.cyan(formatWorkOSCommand('env claim'))} ${chalk.dim('to save it — its credentials live only on this machine.')}`,\n      );\n      // Claim the one-notice-per-run slot so the lower-priority MCP banner defers.\n      markStartupNoticeShown();\n    }\n  } catch (error) {\n    // Never block command execution, but log for diagnostics\n    logError('[unclaimed-warning] Unexpected error:', error instanceof Error ? error.message : String(error));\n  }\n}\n\n/** Reset session state (for testing) */\nexport function resetUnclaimedWarningState(): void {\n  warningShownThisSession = false;\n  claimCheckDoneThisSession = false;\n}\n"]}

package/dist/lib/validation/build-validator.d.ts

@@ -1,21 +0,0 @@
-import type { ValidationIssue } from './types.js';
-export interface BuildResult {
-    success: boolean;
-    issues: ValidationIssue[];
-    durationMs: number;
-    stdout: string;
-    stderr: string;
-}
-export declare function runBuildValidation(projectDir: string, timeoutMs?: number): Promise<BuildResult>;
-export declare function detectPackageManager(projectDir: string): 'pnpm' | 'yarn' | 'npm';
-export declare function hasBuildScriptInPackageJson(projectDir: string): Promise<boolean>;
-export interface BuildCommand {
-    command: string;
-    args: string[];
-}
-/**
- * Detect the build command for a project by checking ecosystem markers.
- * Returns null if no build system detected — caller should skip build validation.
- */
-export declare function detectBuildCommand(projectDir: string): Promise<BuildCommand | null>;
-export declare function parseBuildErrors(output: string): string[];

package/dist/lib/validation/build-validator.js

@@ -1,153 +0,0 @@
-import { spawn } from 'child_process';
-import { existsSync, readdirSync } from 'fs';
-import { readFile } from 'fs/promises';
-import { join } from 'path';
-import { IS_WINDOWS, SPAWN_OPTS } from '../../utils/platform.js';
-export async function runBuildValidation(projectDir, timeoutMs = 60000) {
-    const startTime = Date.now();
-    const pm = detectPackageManager(projectDir);
-    const hasBuildScript = await hasBuildScriptInPackageJson(projectDir);
-    if (!hasBuildScript) {
-        return {
-            success: true,
-            issues: [],
-            durationMs: Date.now() - startTime,
-            stdout: '',
-            stderr: '',
-        };
-    }
-    return new Promise((resolve) => {
-        const args = pm === 'npm' ? ['run', 'build'] : ['build'];
-        const proc = spawn(pm, args, {
-            cwd: projectDir,
-            timeout: timeoutMs,
-            ...SPAWN_OPTS,
-        });
-        let stdout = '';
-        let stderr = '';
-        proc.stdout?.on('data', (data) => {
-            stdout += data.toString();
-        });
-        proc.stderr?.on('data', (data) => {
-            stderr += data.toString();
-        });
-        proc.on('close', (code) => {
-            const issues = [];
-            if (code !== 0) {
-                // Parse errors from output
-                const errors = parseBuildErrors(stdout + stderr);
-                for (const error of errors) {
-                    issues.push({
-                        type: 'file',
-                        severity: 'error',
-                        message: `Build error: ${error}`,
-                        hint: 'Fix the error and run build again',
-                    });
-                }
-                // Fallback if no specific errors parsed
-                if (issues.length === 0) {
-                    issues.push({
-                        type: 'file',
-                        severity: 'error',
-                        message: 'Build failed',
-                        hint: `Run \`${pm} ${args.join(' ')}\` to see full output`,
-                    });
-                }
-            }
-            resolve({
-                success: code === 0,
-                issues,
-                durationMs: Date.now() - startTime,
-                stdout,
-                stderr,
-            });
-        });
-        proc.on('error', (err) => {
-            resolve({
-                success: false,
-                issues: [
-                    {
-                        type: 'file',
-                        severity: 'warning',
-                        message: `Could not run build: ${err.message}`,
-                        hint: 'Build validation skipped',
-                    },
-                ],
-                durationMs: Date.now() - startTime,
-                stdout: '',
-                stderr: '',
-            });
-        });
-    });
-}
-export function detectPackageManager(projectDir) {
-    if (existsSync(join(projectDir, 'pnpm-lock.yaml')))
-        return 'pnpm';
-    if (existsSync(join(projectDir, 'yarn.lock')))
-        return 'yarn';
-    return 'npm';
-}
-export async function hasBuildScriptInPackageJson(projectDir) {
-    try {
-        const content = await readFile(join(projectDir, 'package.json'), 'utf-8');
-        const pkg = JSON.parse(content);
-        return !!pkg.scripts?.build;
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Detect the build command for a project by checking ecosystem markers.
- * Returns null if no build system detected — caller should skip build validation.
- */
-export async function detectBuildCommand(projectDir) {
-    const pm = detectPackageManager(projectDir);
-    if (await hasBuildScriptInPackageJson(projectDir)) {
-        const args = pm === 'npm' ? ['run', 'build'] : ['build'];
-        return { command: pm, args };
-    }
-    if (existsSync(join(projectDir, 'go.mod'))) {
-        return { command: 'go', args: ['build', './...'] };
-    }
-    if (existsSync(join(projectDir, 'mix.exs'))) {
-        return { command: 'mix', args: ['compile'] };
-    }
-    try {
-        const files = readdirSync(projectDir);
-        if (files.some((f) => f.endsWith('.csproj'))) {
-            return { command: 'dotnet', args: ['build'] };
-        }
-    }
-    catch {
-        // Can't read directory
-    }
-    if (existsSync(join(projectDir, 'build.gradle.kts')) || existsSync(join(projectDir, 'build.gradle'))) {
-        const hasWrapper = IS_WINDOWS
-            ? existsSync(join(projectDir, 'gradlew.bat'))
-            : existsSync(join(projectDir, 'gradlew'));
-        const gradlew = hasWrapper ? (IS_WINDOWS ? '.\\gradlew.bat' : './gradlew') : 'gradle';
-        return { command: gradlew, args: ['build'] };
-    }
-    return null;
-}
-export function parseBuildErrors(output) {
-    const errors = [];
-    // TypeScript errors: "file.ts(line,col): error TS..."
-    const tsErrors = output.match(/[\w./]+\.\w+\(\d+,\d+\):\s*error\s+TS\d+:.+/g);
-    if (tsErrors) {
-        errors.push(...tsErrors.slice(0, 5)); // Limit to first 5
-    }
-    // Next.js errors: "Error: ..."
-    const nextErrors = output.match(/Error:\s+.+/g);
-    if (nextErrors) {
-        errors.push(...nextErrors.slice(0, 5));
-    }
-    // ESLint errors: "file.ts line:col error ..."
-    const eslintErrors = output.match(/[\w./]+:\d+:\d+\s+error\s+.+/g);
-    if (eslintErrors) {
-        errors.push(...eslintErrors.slice(0, 5));
-    }
-    return errors;
-}
-//# sourceMappingURL=build-validator.js.map

package/dist/lib/validation/build-validator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"build-validator.js","sourceRoot":"","sources":["../../../src/lib/validation/build-validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAUjE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAAkB,EAAE,YAAoB,KAAK;IACpF,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,EAAE,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,cAAc,GAAG,MAAM,2BAA2B,CAAC,UAAU,CAAC,CAAC;IAErE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO;YACL,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YAClC,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,IAAI,GAAG,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE;YAC3B,GAAG,EAAE,UAAU;YACf,OAAO,EAAE,SAAS;YAClB,GAAG,UAAU;SACd,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACvC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE;YACvC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,MAAM,MAAM,GAAsB,EAAE,CAAC;YAErC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,2BAA2B;gBAC3B,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;gBACjD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;oBAC3B,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,MAAM;wBACZ,QAAQ,EAAE,OAAO;wBACjB,OAAO,EAAE,gBAAgB,KAAK,EAAE;wBAChC,IAAI,EAAE,mCAAmC;qBAC1C,CAAC,CAAC;gBACL,CAAC;gBAED,wCAAwC;gBACxC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACxB,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,MAAM;wBACZ,QAAQ,EAAE,OAAO;wBACjB,OAAO,EAAE,cAAc;wBACvB,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB;qBAC3D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,OAAO,CAAC;gBACN,OAAO,EAAE,IAAI,KAAK,CAAC;gBACnB,MAAM;gBACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,MAAM;gBACN,MAAM;aACP,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,OAAO,CAAC;gBACN,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE;oBACN;wBACE,IAAI,EAAE,MAAM;wBACZ,QAAQ,EAAE,SAAS;wBACnB,OAAO,EAAE,wBAAwB,GAAG,CAAC,OAAO,EAAE;wBAC9C,IAAI,EAAE,0BAA0B;qBACjC;iBACF;gBACD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;gBAClC,MAAM,EAAE,EAAE;gBACV,MAAM,EAAE,EAAE;aACX,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACrD,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAClE,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,UAAkB;IAClE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAqC,CAAC;QACpE,OAAO,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAOD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,UAAkB;IACzD,MAAM,EAAE,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAC5C,IAAI,MAAM,2BAA2B,CAAC,UAAU,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACzD,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAChD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,uBAAuB;IACzB,CAAC;IAED,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;QACrG,MAAM,UAAU,GAAG,UAAU;YAC3B,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YAC7C,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,sDAAsD;IACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC9E,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB;IAC3D,CAAC;IAED,+BAA+B;IAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAChD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,8CAA8C;IAC9C,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnE,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["import { spawn } from 'child_process';\nimport { existsSync, readdirSync } from 'fs';\nimport { readFile } from 'fs/promises';\nimport { join } from 'path';\nimport type { ValidationIssue } from './types.js';\nimport { IS_WINDOWS, SPAWN_OPTS } from '../../utils/platform.js';\n\nexport interface BuildResult {\n  success: boolean;\n  issues: ValidationIssue[];\n  durationMs: number;\n  stdout: string;\n  stderr: string;\n}\n\nexport async function runBuildValidation(projectDir: string, timeoutMs: number = 60000): Promise<BuildResult> {\n  const startTime = Date.now();\n  const pm = detectPackageManager(projectDir);\n  const hasBuildScript = await hasBuildScriptInPackageJson(projectDir);\n\n  if (!hasBuildScript) {\n    return {\n      success: true,\n      issues: [],\n      durationMs: Date.now() - startTime,\n      stdout: '',\n      stderr: '',\n    };\n  }\n\n  return new Promise((resolve) => {\n    const args = pm === 'npm' ? ['run', 'build'] : ['build'];\n    const proc = spawn(pm, args, {\n      cwd: projectDir,\n      timeout: timeoutMs,\n      ...SPAWN_OPTS,\n    });\n\n    let stdout = '';\n    let stderr = '';\n\n    proc.stdout?.on('data', (data: Buffer) => {\n      stdout += data.toString();\n    });\n    proc.stderr?.on('data', (data: Buffer) => {\n      stderr += data.toString();\n    });\n\n    proc.on('close', (code) => {\n      const issues: ValidationIssue[] = [];\n\n      if (code !== 0) {\n        // Parse errors from output\n        const errors = parseBuildErrors(stdout + stderr);\n        for (const error of errors) {\n          issues.push({\n            type: 'file',\n            severity: 'error',\n            message: `Build error: ${error}`,\n            hint: 'Fix the error and run build again',\n          });\n        }\n\n        // Fallback if no specific errors parsed\n        if (issues.length === 0) {\n          issues.push({\n            type: 'file',\n            severity: 'error',\n            message: 'Build failed',\n            hint: `Run \\`${pm} ${args.join(' ')}\\` to see full output`,\n          });\n        }\n      }\n\n      resolve({\n        success: code === 0,\n        issues,\n        durationMs: Date.now() - startTime,\n        stdout,\n        stderr,\n      });\n    });\n\n    proc.on('error', (err) => {\n      resolve({\n        success: false,\n        issues: [\n          {\n            type: 'file',\n            severity: 'warning',\n            message: `Could not run build: ${err.message}`,\n            hint: 'Build validation skipped',\n          },\n        ],\n        durationMs: Date.now() - startTime,\n        stdout: '',\n        stderr: '',\n      });\n    });\n  });\n}\n\nexport function detectPackageManager(projectDir: string): 'pnpm' | 'yarn' | 'npm' {\n  if (existsSync(join(projectDir, 'pnpm-lock.yaml'))) return 'pnpm';\n  if (existsSync(join(projectDir, 'yarn.lock'))) return 'yarn';\n  return 'npm';\n}\n\nexport async function hasBuildScriptInPackageJson(projectDir: string): Promise<boolean> {\n  try {\n    const content = await readFile(join(projectDir, 'package.json'), 'utf-8');\n    const pkg = JSON.parse(content) as { scripts?: { build?: string } };\n    return !!pkg.scripts?.build;\n  } catch {\n    return false;\n  }\n}\n\nexport interface BuildCommand {\n  command: string;\n  args: string[];\n}\n\n/**\n * Detect the build command for a project by checking ecosystem markers.\n * Returns null if no build system detected — caller should skip build validation.\n */\nexport async function detectBuildCommand(projectDir: string): Promise<BuildCommand | null> {\n  const pm = detectPackageManager(projectDir);\n  if (await hasBuildScriptInPackageJson(projectDir)) {\n    const args = pm === 'npm' ? ['run', 'build'] : ['build'];\n    return { command: pm, args };\n  }\n\n  if (existsSync(join(projectDir, 'go.mod'))) {\n    return { command: 'go', args: ['build', './...'] };\n  }\n\n  if (existsSync(join(projectDir, 'mix.exs'))) {\n    return { command: 'mix', args: ['compile'] };\n  }\n\n  try {\n    const files = readdirSync(projectDir);\n    if (files.some((f) => f.endsWith('.csproj'))) {\n      return { command: 'dotnet', args: ['build'] };\n    }\n  } catch {\n    // Can't read directory\n  }\n\n  if (existsSync(join(projectDir, 'build.gradle.kts')) || existsSync(join(projectDir, 'build.gradle'))) {\n    const hasWrapper = IS_WINDOWS\n      ? existsSync(join(projectDir, 'gradlew.bat'))\n      : existsSync(join(projectDir, 'gradlew'));\n    const gradlew = hasWrapper ? (IS_WINDOWS ? '.\\\\gradlew.bat' : './gradlew') : 'gradle';\n    return { command: gradlew, args: ['build'] };\n  }\n\n  return null;\n}\n\nexport function parseBuildErrors(output: string): string[] {\n  const errors: string[] = [];\n\n  // TypeScript errors: \"file.ts(line,col): error TS...\"\n  const tsErrors = output.match(/[\\w./]+\\.\\w+\\(\\d+,\\d+\\):\\s*error\\s+TS\\d+:.+/g);\n  if (tsErrors) {\n    errors.push(...tsErrors.slice(0, 5)); // Limit to first 5\n  }\n\n  // Next.js errors: \"Error: ...\"\n  const nextErrors = output.match(/Error:\\s+.+/g);\n  if (nextErrors) {\n    errors.push(...nextErrors.slice(0, 5));\n  }\n\n  // ESLint errors: \"file.ts line:col error ...\"\n  const eslintErrors = output.match(/[\\w./]+:\\d+:\\d+\\s+error\\s+.+/g);\n  if (eslintErrors) {\n    errors.push(...eslintErrors.slice(0, 5));\n  }\n\n  return errors;\n}\n"]}

package/dist/lib/validation/index.d.ts

@@ -1,4 +0,0 @@
-export { validateInstallation, validatePackages, validateEnvVars, validateFiles, validateFrameworkSpecific, type ValidateOptions, } from './validator.js';
-export { runBuildValidation, type BuildResult } from './build-validator.js';
-export { runQuickChecks, runTypecheckValidation, quickCheckValidateAndFormat } from './quick-checks.js';
-export type { ValidationResult, ValidationRules, ValidationIssue, ValidationSeverity, ValidationIssueType, PackageRule, EnvVarRule, FileRule, VariantRules, QuickCheckResult, QuickChecksOutput, } from './types.js';

package/dist/lib/validation/index.js

@@ -1,4 +0,0 @@
-export { validateInstallation, validatePackages, validateEnvVars, validateFiles, validateFrameworkSpecific, } from './validator.js';
-export { runBuildValidation } from './build-validator.js';
-export { runQuickChecks, runTypecheckValidation, quickCheckValidateAndFormat } from './quick-checks.js';
-//# sourceMappingURL=index.js.map

package/dist/lib/validation/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/validation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,yBAAyB,GAE1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAoB,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC","sourcesContent":["export {\n  validateInstallation,\n  validatePackages,\n  validateEnvVars,\n  validateFiles,\n  validateFrameworkSpecific,\n  type ValidateOptions,\n} from './validator.js';\nexport { runBuildValidation, type BuildResult } from './build-validator.js';\nexport { runQuickChecks, runTypecheckValidation, quickCheckValidateAndFormat } from './quick-checks.js';\nexport type {\n  ValidationResult,\n  ValidationRules,\n  ValidationIssue,\n  ValidationSeverity,\n  ValidationIssueType,\n  PackageRule,\n  EnvVarRule,\n  FileRule,\n  VariantRules,\n  QuickCheckResult,\n  QuickChecksOutput,\n} from './types.js';\n"]}

package/dist/lib/validation/quick-checks.d.ts

@@ -1,19 +0,0 @@
-import type { QuickCheckResult, QuickChecksOutput } from './types.js';
-/**
- * Run fast deterministic checks: typecheck first, then build.
- * Short-circuits: if typecheck fails, skip build (build will fail too).
- */
-export declare function runQuickChecks(projectDir: string, options?: {
-    skipBuild?: boolean;
-    timeoutMs?: number;
-}): Promise<QuickChecksOutput>;
-/**
- * Run typecheck only (tsc --noEmit or framework equivalent).
- * Faster than full build — catches type errors in ~5s.
- */
-export declare function runTypecheckValidation(projectDir: string, timeoutMs?: number): Promise<QuickCheckResult>;
-/**
- * Validation callback suitable for RetryConfig.validateAndFormat.
- * Returns null if checks pass, or an agent-ready error prompt if they fail.
- */
-export declare function quickCheckValidateAndFormat(workingDirectory: string): Promise<string | null>;