workos 0.19.0 → 0.20.2

package/dist/lib/validation/validator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../src/lib/validation/validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,WAAW,CAAC;AAE3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAOlD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,UAAkB,EAClB,UAA2B,EAAE;IAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,mDAAmD;IACnD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,SAAS;YACT,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC;IACJ,CAAC;IAED,kBAAkB;IAClB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,eAAe,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAEzD,2CAA2C;IAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,yBAAyB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAEzE,kCAAkC;IAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QACjE,SAAS;QACT,MAAM;QACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACnC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,OAAgB;IAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,SAAS,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;QAErD,mCAAmC;QACnC,IAAI,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7C,OAAO;gBACL,GAAG,KAAK;gBACR,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBACtD,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;gBAC/D,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;aAC7D,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,kCAAkC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAsB,EAAE,UAAkB;IAC/E,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IAExC,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;QACnD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAA2B,CAAC;IAChE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAA2B,CAAC;IACtE,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;QACxC,MAAM,QAAQ,GAAG,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QAE7F,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;gBACxC,IAAI,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAsB,EAAE,UAAkB;IAC9E,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAU,GAAG,EAAE,CAAC;IAEpB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,yBAAyB;gBAClC,IAAI,EAAE,uDAAuD;aAC9D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACjC,wCAAwC;QACxC,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACzC,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,KAAK,EAAE,GAAG,CAAC,CAAC;YAClD,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU;gBAC1B,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;gBAC7E,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,2BAA2B,CAAC;YAEhD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;gBACvD,OAAO,EAAE,iCAAiC,IAAI,CAAC,IAAI,EAAE;gBACrD,IAAI;aACL,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAsB,EAAE,UAAkB;IAC5E,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;YAC9B,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,iBAAiB,IAAI,CAAC,IAAI,EAAE;gBACrC,IAAI,EAAE,UAAU,IAAI,CAAC,IAAI,EAAE;aAC5B,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,yBAAyB;QACzB,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,wCAAwC;gBACxC,SAAS;YACX,CAAC;YAED,sBAAsB;YACtB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACvC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC/B,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,SAAS;4BACf,QAAQ,EAAE,SAAS;4BACnB,OAAO,EAAE,QAAQ,OAAO,CAAC,CAAC,CAAC,+BAA+B,OAAO,GAAG;4BACpE,IAAI,EAAE,UAAU,OAAO,CAAC,CAAC,CAAC,cAAc,OAAO,EAAE;yBAClD,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,+BAA+B;YAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,SAAS;wBACnB,OAAO,EAAE,QAAQ,OAAO,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBAC/E,IAAI,EAAE,UAAU,OAAO,CAAC,CAAC,CAAC,iCAAiC;qBAC5D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,SAAiB,EAAE,UAAkB;IACnF,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,8BAA8B;IAC9B,MAAM,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,wBAAwB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAEnD,iCAAiC;IACjC,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,QAAQ;YACX,MAAM,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACpD,MAAM,iCAAiC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC5D,MAAM,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;YACjF,MAAM;QACR,KAAK,OAAO;YACV,MAAM,6BAA6B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACxD,MAAM;QACR,KAAK,cAAc;YACjB,MAAM,8BAA8B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;YACjF,MAAM;QACR,KAAK,gBAAgB;YACnB,MAAM,gCAAgC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;YACjF,MAAM;IACV,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAAC,GAAQ,EAAE,SAAiB,EAAE,UAAkB,EAAE,MAAyB;IACzG,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO;IAE1C,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAEnD,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sBAAsB,aAAa,iDAAiD,QAAQ,EAAE;YACvG,IAAI,EACF,wCAAwC,QAAQ,0CAA0C;gBAC1F,uFAAuF,aAAa,GAAG;SAC1G,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,yBAAyB,CAAC,UAAkB,EAAE,MAAyB;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,+CAA+C;IACzD,CAAC;IAED,6BAA6B;IAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,iDAAiD;IAC3D,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,YAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC5B,uBAAuB,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,yBAAyB,WAAW,EAAE;YAC/C,IAAI,EAAE,qDAAqD;SAC5D,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,yCAAyC;IACzC,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAElD,uEAAuE;IACvE,MAAM,aAAa,GAAG;QACpB,OAAO,SAAS,WAAW;QAC3B,OAAO,SAAS,YAAY;QAC5B,OAAO,SAAS,WAAW;QAC3B,OAAO,SAAS,YAAY;QAC5B,WAAW,SAAS,WAAW;QAC/B,WAAW,SAAS,YAAY;QAChC,WAAW,SAAS,WAAW;QAC/B,WAAW,SAAS,YAAY;KACjC,CAAC;IAEF,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,mDAAmD;QACnD,MAAM,cAAc,GAAG,MAAM,EAAE,CAC7B,CAAC,0CAA0C,EAAE,8CAA8C,CAAC,EAC5F;YACE,GAAG,EAAE,UAAU;SAChB,CACF,CAAC;QAEF,IAAI,IAAI,GAAG,iCAAiC,SAAS,WAAW,CAAC;QACjE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,0DAA0D;YAC1D,MAAM,UAAU,GAAG,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;YAClH,IAAI;gBACF,2BAA2B,cAAc,CAAC,CAAC,CAAC,+BAA+B,YAAY,aAAa;oBACpG,kDAAkD,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,UAAU,IAAI;oBAC9F,8BAA8B,SAAS,WAAW,CAAC;QACvD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sBAAsB,YAAY,8BAA8B;YACzE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,8BAA8B,CAAC,UAAkB,EAAE,MAAyB;IACzF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,YAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC5B,uBAAuB,CAAC,GAAG,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,yBAAyB,WAAW,EAAE;YAC/C,IAAI,EAAE,yCAAyC;SAChD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,iEAAiE;IACjE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE9C,sCAAsC;IACtC,MAAM,aAAa,GAAG;QACpB,oDAAoD;QACpD,cAAc,OAAO,MAAM;QAC3B,cAAc,OAAO,KAAK;QAC1B,cAAc,OAAO,MAAM;QAC3B,cAAc,OAAO,KAAK;QAC1B,sDAAsD;QACtD,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,kEAAkE;QAClE,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,kEAAkE;QAClE,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;KACnC,CAAC;IAEF,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,CAAC,0CAA0C,CAAC,EAAE;YAC5E,GAAG,EAAE,UAAU;SAChB,CAAC,CAAC;QAEH,IAAI,IAAI,GAAG,gCAAgC,OAAO,MAAM,CAAC;QACzD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YACrC,qCAAqC;YACrC,MAAM,UAAU,GACd,GAAG;gBACH,UAAU;qBACP,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;qBAC/B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACzB,IAAI;gBACF,2BAA2B,UAAU,+BAA+B,YAAY,aAAa;oBAC7F,sCAAsC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,UAAU,IAAI;oBAClF,qCAAqC,OAAO,MAAM,CAAC;QACvD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sBAAsB,YAAY,8BAA8B;YACzE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gCAAgC,CAAC,UAAkB,EAAE,MAAyB;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,YAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;QAC5B,uBAAuB,CAAC,GAAG,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,yBAAyB,WAAW,EAAE;YAC/C,IAAI,EAAE,yCAAyC;SAChD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAElD,gCAAgC;IAChC,MAAM,aAAa,GAAG;QACpB,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;KACnC,CAAC;IAEF,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,CAAC,0CAA0C,CAAC,EAAE;YAC5E,GAAG,EAAE,UAAU;SAChB,CAAC,CAAC;QAEH,IAAI,IAAI,GAAG,gCAAgC,SAAS,MAAM,CAAC;QAC3D,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,UAAU,GACd,GAAG;gBACH,UAAU;qBACP,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAC7B,IAAI;gBACF,2BAA2B,UAAU,+BAA+B,YAAY,aAAa;oBAC7F,sCAAsC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,GAAG,UAAU,IAAI;oBAClF,qCAAqC,SAAS,MAAM,CAAC;QACzD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sBAAsB,YAAY,8BAA8B;YACzE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,4BAA4B,CACzC,UAAkB,EAClB,MAAyB,EACzB,UAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,+CAA+C;IACzD,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,UAAU,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,iDAAiD;IAC3D,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,GAAG,UAAU,8CAA8C,QAAQ,CAAC,MAAM,GAAG;YACtF,IAAI,EAAE,qDAAqD;SAC5D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,yBAAyB,CAAC,UAAkB,EAAE,MAAyB;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,8CAA8C;IAC9C,MAAM,cAAc,GAAG,CAAC,wBAAwB,EAAE,oCAAoC,CAAC,CAAC;IAExF,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,4BAA4B,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;oBACjE,IAAI,EAAE,oFAAoF;iBAC3F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,gBAAgB,GAAG,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;IAE9F,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1C,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,8BAA8B,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;oBACnE,IAAI,EAAE,yFAAyF;iBAChG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iCAAiC,CAAC,UAAkB,EAAE,MAAyB;IAC5F,sEAAsE;IACtE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3C,MAAM,YAAY,GAAG;QACnB,GAAG,WAAW,eAAe;QAC7B,GAAG,WAAW,eAAe;QAC7B,GAAG,WAAW,UAAU;QACxB,GAAG,WAAW,UAAU;KACzB,CAAC;IAEF,MAAM,mBAAmB,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,mBAAmB,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IAED,gDAAgD;IAChD,MAAM,WAAW,GAAG;QAClB,eAAe;QACf,eAAe;QACf,mBAAmB;QACnB,mBAAmB;QACnB,UAAU;QACV,UAAU;QACV,cAAc;QACd,cAAc;KACf,CAAC;IACF,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzG,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,GAAG,UAAU,uCAAuC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE;YACzF,IAAI,EAAE,cAAc,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,0GAA0G;SAC7K,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,wCAAwC;IACxC,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,CAAC,+BAA+B,CAAC,EAAE;QAC5D,GAAG,EAAE,UAAU;QACf,MAAM,EAAE,CAAC,iBAAiB,CAAC;KAC5B,CAAC,CAAC;IAEH,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,6CAA6C,SAAS,CAAC,CAAC,CAAC,EAAE;YACpE,IAAI,EAAE,cAAc,WAAW,oBAAoB,WAAW,sCAAsC;SACrG,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,6BAA6B,CAAC,UAAkB,EAAE,MAAyB;IACxF,qCAAqC;IACrC,MAAM,aAAa,GAAG;QACpB,cAAc;QACd,cAAc;QACd,eAAe;QACf,eAAe;QACf,aAAa;QACb,aAAa;QACb,gBAAgB;QAChB,gBAAgB;KACjB,CAAC;IAEF,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACxC,aAAa,GAAG,IAAI,CAAC;gBACrB,MAAM;YACR,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,qEAAqE;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBACzD,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;gBAC7D,IAAI,IAAI,CAAC,2BAA2B,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,SAAS;wBACnB,OAAO,EAAE,kDAAkD;wBAC3D,IAAI,EAAE,yHAAyH;qBAChI,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,wBAAwB,CAAC,UAAkB,EAAE,MAAyB;IACnF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAEpD,IAAI,UAAkB,CAAC;IACvB,IAAI,eAAuB,CAAC;IAE5B,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,sCAAsC;IAChD,CAAC;IAED,IAAI,CAAC;QACH,eAAe,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,uCAAuC;IACjD,CAAC;IAED,sCAAsC;IACtC,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAuB,EAAE;QACxD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACtD,IAAI,KAAK,EAAE,CAAC;gBACV,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;IAE/C,4CAA4C;IAC5C,MAAM,UAAU,GAAG;QACjB,gBAAgB;QAChB,kBAAkB;QAClB,qBAAqB;QACrB,wBAAwB;QACxB,8BAA8B;QAC9B,iCAAiC;KAClC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE7C,IAAI,QAAQ,IAAI,UAAU,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,GAAG,OAAO,8CAA8C;gBACjE,IAAI,EAAE,yFAAyF;aAChG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import { readFile } from 'fs/promises';\nimport { existsSync } from 'fs';\nimport { join } from 'path';\nimport fg from 'fast-glob';\nimport type { ValidationResult, ValidationRules, ValidationIssue } from './types.js';\nimport { runBuildValidation } from './build-validator.js';\nimport { detectPort } from '../port-detection.js';\n\nexport interface ValidateOptions {\n  variant?: string;\n  runBuild?: boolean;\n}\n\nexport async function validateInstallation(\n  framework: string,\n  projectDir: string,\n  options: ValidateOptions = {},\n): Promise<ValidationResult> {\n  const startTime = Date.now();\n  const issues: ValidationIssue[] = [];\n\n  // Load rules for framework (with optional variant)\n  const rules = await loadRules(framework, options.variant);\n  if (!rules) {\n    return {\n      passed: true,\n      framework,\n      issues: [],\n      durationMs: Date.now() - startTime,\n    };\n  }\n\n  // Run validations\n  issues.push(...(await validatePackages(rules, projectDir)));\n  issues.push(...(await validateEnvVars(rules, projectDir)));\n  issues.push(...(await validateFiles(rules, projectDir)));\n\n  // Run framework-specific cross-validations\n  issues.push(...(await validateFrameworkSpecific(framework, projectDir)));\n\n  // Run build validation if enabled\n  if (options.runBuild !== false) {\n    const buildResult = await runBuildValidation(projectDir);\n    issues.push(...buildResult.issues);\n  }\n\n  return {\n    passed: issues.filter((i) => i.severity === 'error').length === 0,\n    framework,\n    issues,\n    durationMs: Date.now() - startTime,\n  };\n}\n\nasync function loadRules(framework: string, variant?: string): Promise<ValidationRules | null> {\n  const rulesPath = new URL(`./rules/${framework}.json`, import.meta.url);\n  try {\n    const content = await readFile(rulesPath, 'utf-8');\n    const rules = JSON.parse(content) as ValidationRules;\n\n    // Merge variant rules if specified\n    if (variant && rules.variants?.[variant]) {\n      const variantRules = rules.variants[variant];\n      return {\n        ...rules,\n        files: [...rules.files, ...(variantRules.files || [])],\n        packages: [...rules.packages, ...(variantRules.packages || [])],\n        envVars: [...rules.envVars, ...(variantRules.envVars || [])],\n      };\n    }\n\n    return rules;\n  } catch {\n    return null; // No rules for this framework yet\n  }\n}\n\nexport async function validatePackages(rules: ValidationRules, projectDir: string): Promise<ValidationIssue[]> {\n  const issues: ValidationIssue[] = [];\n  const pkgPath = join(projectDir, 'package.json');\n  if (!existsSync(pkgPath)) return issues;\n\n  let pkg: Record<string, unknown>;\n  try {\n    pkg = JSON.parse(await readFile(pkgPath, 'utf-8'));\n  } catch {\n    // Malformed package.json - skip package validation\n    return issues;\n  }\n\n  const deps = (pkg.dependencies || {}) as Record<string, string>;\n  const devDeps = (pkg.devDependencies || {}) as Record<string, string>;\n  const allDeps = { ...devDeps, ...deps };\n\n  for (const rule of rules.packages) {\n    const location = rule.location || 'any';\n    const searchIn = location === 'any' ? allDeps : location === 'dependencies' ? deps : devDeps;\n\n    if (!searchIn[rule.name]) {\n      issues.push({\n        type: 'package',\n        severity: 'error',\n        message: `Missing package: ${rule.name}`,\n        hint: `Run: npm install ${rule.name}`,\n      });\n    }\n  }\n\n  return issues;\n}\n\nexport async function validateEnvVars(rules: ValidationRules, projectDir: string): Promise<ValidationIssue[]> {\n  const issues: ValidationIssue[] = [];\n  const envPath = join(projectDir, '.env.local');\n  let envContent = '';\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    if (rules.envVars.length > 0) {\n      issues.push({\n        type: 'env',\n        severity: 'error',\n        message: 'Missing .env.local file',\n        hint: 'Create .env.local with required environment variables',\n      });\n    }\n    return issues;\n  }\n\n  for (const rule of rules.envVars) {\n    // Check primary name and any alternates\n    const varsToCheck = [rule.name, ...(rule.alternates || [])];\n    const found = varsToCheck.some((varName) => {\n      const pattern = new RegExp(`^${varName}=.+`, 'm');\n      return pattern.test(envContent);\n    });\n\n    if (!found) {\n      const hint = rule.alternates\n        ? `Add ${rule.name} (or one of: ${rule.alternates.join(', ')}) to .env.local`\n        : `Add ${rule.name}=your_value to .env.local`;\n\n      issues.push({\n        type: 'env',\n        severity: rule.required === false ? 'warning' : 'error',\n        message: `Missing environment variable: ${rule.name}`,\n        hint,\n      });\n    }\n  }\n\n  return issues;\n}\n\nexport async function validateFiles(rules: ValidationRules, projectDir: string): Promise<ValidationIssue[]> {\n  const issues: ValidationIssue[] = [];\n\n  for (const rule of rules.files) {\n    let matches: string[];\n    try {\n      matches = await fg(rule.path, { cwd: projectDir });\n    } catch {\n      // Invalid glob pattern - skip\n      continue;\n    }\n\n    if (matches.length === 0) {\n      issues.push({\n        type: 'file',\n        severity: 'error',\n        message: `Missing file: ${rule.path}`,\n        hint: `Create ${rule.path}`,\n      });\n      continue;\n    }\n\n    // Check content patterns\n    if (rule.mustContain || rule.mustContainAny) {\n      const filePath = join(projectDir, matches[0]);\n      let content: string;\n      try {\n        content = await readFile(filePath, 'utf-8');\n      } catch {\n        // File read error - skip content checks\n        continue;\n      }\n\n      // All must be present\n      if (rule.mustContain) {\n        for (const pattern of rule.mustContain) {\n          if (!content.includes(pattern)) {\n            issues.push({\n              type: 'pattern',\n              severity: 'warning',\n              message: `File ${matches[0]} missing expected pattern: \"${pattern}\"`,\n              hint: `Ensure ${matches[0]} contains: ${pattern}`,\n            });\n          }\n        }\n      }\n\n      // At least one must be present\n      if (rule.mustContainAny) {\n        const hasAny = rule.mustContainAny.some((p) => content.includes(p));\n        if (!hasAny) {\n          issues.push({\n            type: 'pattern',\n            severity: 'warning',\n            message: `File ${matches[0]} missing one of: ${rule.mustContainAny.join(', ')}`,\n            hint: `Ensure ${matches[0]} contains one of these patterns`,\n          });\n        }\n      }\n    }\n  }\n\n  return issues;\n}\n\n/**\n * Framework-specific cross-validations that require reading multiple sources.\n */\nexport async function validateFrameworkSpecific(framework: string, projectDir: string): Promise<ValidationIssue[]> {\n  const issues: ValidationIssue[] = [];\n\n  // Universal cross-validations\n  await validateCredentialFormats(projectDir, issues);\n  await validateDuplicateEnvVars(projectDir, issues);\n\n  // Framework-specific validations\n  switch (framework) {\n    case 'nextjs':\n      await validateNextjsRedirectUri(projectDir, issues);\n      await validateNextjsMiddlewarePlacement(projectDir, issues);\n      await validateCookiePasswordLength(projectDir, issues, 'WORKOS_COOKIE_PASSWORD');\n      break;\n    case 'react':\n      await validateReactProviderWrapping(projectDir, issues);\n      break;\n    case 'react-router':\n      await validateReactRouterRedirectUri(projectDir, issues);\n      await validateCookiePasswordLength(projectDir, issues, 'WORKOS_COOKIE_PASSWORD');\n      break;\n    case 'tanstack-start':\n      await validateTanstackStartRedirectUri(projectDir, issues);\n      await validateCookiePasswordLength(projectDir, issues, 'WORKOS_COOKIE_PASSWORD');\n      break;\n  }\n\n  return issues;\n}\n\n/**\n * Compares the redirect URI's effective port to the detected dev server port,\n * for local dev hosts only, and records an error-severity issue on mismatch.\n * Skips production URIs and placeholder hosts like http://test.\n */\nfunction validateRedirectUriPort(url: URL, framework: string, projectDir: string, issues: ValidationIssue[]): void {\n  // Only enforce for local dev hosts; skip production URIs and placeholder\n  // hosts like http://test. Node parses IPv6 hostnames with brackets: [::1].\n  const localHosts = new Set(['localhost', '127.0.0.1', '[::1]', '::1']);\n  if (!localHosts.has(url.hostname)) return;\n\n  const effectivePort = url.port || (url.protocol === 'https:' ? '443' : '80');\n  const detected = detectPort(framework, projectDir);\n\n  if (Number(effectivePort) !== detected) {\n    issues.push({\n      type: 'env',\n      severity: 'error',\n      message: `Redirect URI port :${effectivePort} does not match the detected dev server port :${detected}`,\n      hint:\n        `Update the redirect URI to use port :${detected} in .env.local and the WorkOS dashboard ` +\n        `(redirect URI, CORS origin, homepage URL), or change your dev server to run on port ${effectivePort}.`,\n    });\n  }\n}\n\n/**\n * Validates that the Next.js redirect URI matches an existing callback route.\n *\n * Common failure: .env.local has /auth/callback but route is at /api/auth/callback\n */\nasync function validateNextjsRedirectUri(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  const envPath = join(projectDir, '.env.local');\n  let envContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return; // No .env.local - other validators handle this\n  }\n\n  // Extract redirect URI value\n  const match = envContent.match(/^NEXT_PUBLIC_WORKOS_REDIRECT_URI=(.+)$/m);\n  if (!match) {\n    return; // Missing env var - other validators handle this\n  }\n\n  const redirectUri = match[1].trim();\n  let callbackPath: string;\n\n  try {\n    const url = new URL(redirectUri);\n    callbackPath = url.pathname;\n    validateRedirectUriPort(url, 'nextjs', projectDir, issues);\n  } catch {\n    issues.push({\n      type: 'env',\n      severity: 'error',\n      message: `Invalid redirect URI: ${redirectUri}`,\n      hint: 'NEXT_PUBLIC_WORKOS_REDIRECT_URI must be a valid URL',\n    });\n    return;\n  }\n\n  // Remove leading slash for path matching\n  const routePath = callbackPath.replace(/^\\//, '');\n\n  // Check if route file exists at expected location (Next.js App Router)\n  const routePatterns = [\n    `app/${routePath}/route.ts`,\n    `app/${routePath}/route.tsx`,\n    `app/${routePath}/route.js`,\n    `app/${routePath}/route.jsx`,\n    `src/app/${routePath}/route.ts`,\n    `src/app/${routePath}/route.tsx`,\n    `src/app/${routePath}/route.js`,\n    `src/app/${routePath}/route.jsx`,\n  ];\n\n  const routeExists = routePatterns.some((pattern) => existsSync(join(projectDir, pattern)));\n\n  if (!routeExists) {\n    // Check what routes DO exist to give a better hint\n    const existingRoutes = await fg(\n      ['app/**/callback/**/route.{ts,tsx,js,jsx}', 'src/app/**/callback/**/route.{ts,tsx,js,jsx}'],\n      {\n        cwd: projectDir,\n      },\n    );\n\n    let hint = `Create a route handler at app/${routePath}/route.ts`;\n    if (existingRoutes.length > 0) {\n      // Found a route at a different path - likely the mismatch\n      const actualPath = '/' + existingRoutes[0].replace(/^(src\\/)?app\\//, '').replace(/\\/route\\.(ts|tsx|js|jsx)$/, '');\n      hint =\n        `Found callback route at ${existingRoutes[0]} but redirect URI points to ${callbackPath}. Either:\\n` +\n        `  1. Change NEXT_PUBLIC_WORKOS_REDIRECT_URI to ${new URL(redirectUri).origin}${actualPath}\\n` +\n        `  2. Move the route to app/${routePath}/route.ts`;\n    }\n\n    issues.push({\n      type: 'file',\n      severity: 'error',\n      message: `Redirect URI path \"${callbackPath}\" has no matching route file`,\n      hint,\n    });\n  }\n}\n\n/**\n * Validates that the React Router redirect URI matches an existing callback route.\n *\n * React Router v7 framework mode uses file-based routing:\n * - /auth/callback → app/routes/auth.callback.tsx (dot notation)\n * - /auth/callback → app/routes/auth/callback.tsx (nested folders)\n */\nasync function validateReactRouterRedirectUri(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  const envPath = join(projectDir, '.env.local');\n  let envContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return;\n  }\n\n  const match = envContent.match(/^WORKOS_REDIRECT_URI=(.+)$/m);\n  if (!match) {\n    return;\n  }\n\n  const redirectUri = match[1].trim();\n  let callbackPath: string;\n\n  try {\n    const url = new URL(redirectUri);\n    callbackPath = url.pathname;\n    validateRedirectUriPort(url, 'react-router', projectDir, issues);\n  } catch {\n    issues.push({\n      type: 'env',\n      severity: 'error',\n      message: `Invalid redirect URI: ${redirectUri}`,\n      hint: 'WORKOS_REDIRECT_URI must be a valid URL',\n    });\n    return;\n  }\n\n  const routePath = callbackPath.replace(/^\\//, '');\n  // React Router uses dot notation: /auth/callback → auth.callback\n  const dotPath = routePath.replace(/\\//g, '.');\n\n  // Check possible route file locations\n  const routePatterns = [\n    // Dot notation (e.g., app/routes/auth.callback.tsx)\n    `app/routes/${dotPath}.tsx`,\n    `app/routes/${dotPath}.ts`,\n    `app/routes/${dotPath}.jsx`,\n    `app/routes/${dotPath}.js`,\n    // Nested folders (e.g., app/routes/auth/callback.tsx)\n    `app/routes/${routePath}.tsx`,\n    `app/routes/${routePath}.ts`,\n    `app/routes/${routePath}.jsx`,\n    `app/routes/${routePath}.js`,\n    // Index file in folder (e.g., app/routes/auth/callback/index.tsx)\n    `app/routes/${routePath}/index.tsx`,\n    `app/routes/${routePath}/index.ts`,\n    `app/routes/${routePath}/index.jsx`,\n    `app/routes/${routePath}/index.js`,\n    // Route file in folder (e.g., app/routes/auth/callback/route.tsx)\n    `app/routes/${routePath}/route.tsx`,\n    `app/routes/${routePath}/route.ts`,\n    `app/routes/${routePath}/route.jsx`,\n    `app/routes/${routePath}/route.js`,\n  ];\n\n  const routeExists = routePatterns.some((pattern) => existsSync(join(projectDir, pattern)));\n\n  if (!routeExists) {\n    const existingRoutes = await fg(['app/routes/**/*callback*.{ts,tsx,js,jsx}'], {\n      cwd: projectDir,\n    });\n\n    let hint = `Create a route at app/routes/${dotPath}.tsx`;\n    if (existingRoutes.length > 0) {\n      const actualFile = existingRoutes[0];\n      // Convert file path back to URL path\n      const actualPath =\n        '/' +\n        actualFile\n          .replace(/^app\\/routes\\//, '')\n          .replace(/\\.(tsx?|jsx?)$/, '')\n          .replace(/\\/(index|route)$/, '')\n          .replace(/\\./g, '/');\n      hint =\n        `Found callback route at ${actualFile} but redirect URI points to ${callbackPath}. Either:\\n` +\n        `  1. Change WORKOS_REDIRECT_URI to ${new URL(redirectUri).origin}${actualPath}\\n` +\n        `  2. Move the route to app/routes/${dotPath}.tsx`;\n    }\n\n    issues.push({\n      type: 'file',\n      severity: 'error',\n      message: `Redirect URI path \"${callbackPath}\" has no matching route file`,\n      hint,\n    });\n  }\n}\n\n/**\n * Validates that the TanStack Start redirect URI matches an existing callback route.\n *\n * TanStack Start uses file-based routing:\n * - /auth/callback → app/routes/auth/callback.tsx\n */\nasync function validateTanstackStartRedirectUri(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  const envPath = join(projectDir, '.env.local');\n  let envContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return;\n  }\n\n  const match = envContent.match(/^WORKOS_REDIRECT_URI=(.+)$/m);\n  if (!match) {\n    return;\n  }\n\n  const redirectUri = match[1].trim();\n  let callbackPath: string;\n\n  try {\n    const url = new URL(redirectUri);\n    callbackPath = url.pathname;\n    validateRedirectUriPort(url, 'tanstack-start', projectDir, issues);\n  } catch {\n    issues.push({\n      type: 'env',\n      severity: 'error',\n      message: `Invalid redirect URI: ${redirectUri}`,\n      hint: 'WORKOS_REDIRECT_URI must be a valid URL',\n    });\n    return;\n  }\n\n  const routePath = callbackPath.replace(/^\\//, '');\n\n  // TanStack Start route patterns\n  const routePatterns = [\n    `app/routes/${routePath}.tsx`,\n    `app/routes/${routePath}.ts`,\n    `app/routes/${routePath}.jsx`,\n    `app/routes/${routePath}.js`,\n    `app/routes/${routePath}/index.tsx`,\n    `app/routes/${routePath}/index.ts`,\n    `app/routes/${routePath}/index.jsx`,\n    `app/routes/${routePath}/index.js`,\n  ];\n\n  const routeExists = routePatterns.some((pattern) => existsSync(join(projectDir, pattern)));\n\n  if (!routeExists) {\n    const existingRoutes = await fg(['app/routes/**/*callback*.{ts,tsx,js,jsx}'], {\n      cwd: projectDir,\n    });\n\n    let hint = `Create a route at app/routes/${routePath}.tsx`;\n    if (existingRoutes.length > 0) {\n      const actualFile = existingRoutes[0];\n      const actualPath =\n        '/' +\n        actualFile\n          .replace(/^app\\/routes\\//, '')\n          .replace(/\\.(tsx?|jsx?)$/, '')\n          .replace(/\\/index$/, '');\n      hint =\n        `Found callback route at ${actualFile} but redirect URI points to ${callbackPath}. Either:\\n` +\n        `  1. Change WORKOS_REDIRECT_URI to ${new URL(redirectUri).origin}${actualPath}\\n` +\n        `  2. Move the route to app/routes/${routePath}.tsx`;\n    }\n\n    issues.push({\n      type: 'file',\n      severity: 'error',\n      message: `Redirect URI path \"${callbackPath}\" has no matching route file`,\n      hint,\n    });\n  }\n}\n\n/**\n * Validates cookie password is at least 32 characters.\n * WorkOS requires this for secure session encryption.\n */\nasync function validateCookiePasswordLength(\n  projectDir: string,\n  issues: ValidationIssue[],\n  envVarName: string,\n): Promise<void> {\n  const envPath = join(projectDir, '.env.local');\n  let envContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return; // No .env.local - other validators handle this\n  }\n\n  const match = envContent.match(new RegExp(`^${envVarName}=(.*)$`, 'm'));\n  if (!match) {\n    return; // Missing env var - other validators handle this\n  }\n\n  const password = match[1].trim();\n  if (password.length < 32) {\n    issues.push({\n      type: 'env',\n      severity: 'error',\n      message: `${envVarName} must be at least 32 characters (currently ${password.length})`,\n      hint: `Generate a secure password: openssl rand -base64 32`,\n    });\n  }\n}\n\n/**\n * Validates credential formats:\n * - API key should start with sk_\n * - Client ID should start with client_\n */\nasync function validateCredentialFormats(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  const envPath = join(projectDir, '.env.local');\n  let envContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return;\n  }\n\n  // Check API key format (any common variation)\n  const apiKeyPatterns = [/^WORKOS_API_KEY=(.*)$/m, /^NEXT_PUBLIC_WORKOS_API_KEY=(.*)$/m];\n\n  for (const pattern of apiKeyPatterns) {\n    const match = envContent.match(pattern);\n    if (match) {\n      const value = match[1].trim();\n      if (value && !value.startsWith('sk_')) {\n        issues.push({\n          type: 'env',\n          severity: 'error',\n          message: `Invalid API key format: \"${value.substring(0, 10)}...\"`,\n          hint: 'WorkOS API keys start with \"sk_\". Check your WorkOS Dashboard for the correct key.',\n        });\n      }\n    }\n  }\n\n  // Check Client ID format\n  const clientIdPatterns = [/^WORKOS_CLIENT_ID=(.*)$/m, /^NEXT_PUBLIC_WORKOS_CLIENT_ID=(.*)$/m];\n\n  for (const pattern of clientIdPatterns) {\n    const match = envContent.match(pattern);\n    if (match) {\n      const value = match[1].trim();\n      if (value && !value.startsWith('client_')) {\n        issues.push({\n          type: 'env',\n          severity: 'error',\n          message: `Invalid Client ID format: \"${value.substring(0, 15)}...\"`,\n          hint: 'WorkOS Client IDs start with \"client_\". Check your WorkOS Dashboard for the correct ID.',\n        });\n      }\n    }\n  }\n}\n\n/**\n * Validates Next.js middleware/proxy is at the correct location.\n * Must be alongside the app/ directory — Next.js only watches for these files\n * in the parent directory of app/.\n */\nasync function validateNextjsMiddlewarePlacement(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  // Determine where app/ lives to know where middleware/proxy should be\n  const appInSrc = existsSync(join(projectDir, 'src', 'app'));\n  const expectedDir = appInSrc ? 'src/' : '';\n\n  const correctPaths = [\n    `${expectedDir}middleware.ts`,\n    `${expectedDir}middleware.js`,\n    `${expectedDir}proxy.ts`,\n    `${expectedDir}proxy.js`,\n  ];\n\n  const hasCorrectPlacement = correctPaths.some((p) => existsSync(join(projectDir, p)));\n  if (hasCorrectPlacement) {\n    return;\n  }\n\n  // Check for middleware/proxy at the wrong level\n  const allPossible = [\n    'middleware.ts',\n    'middleware.js',\n    'src/middleware.ts',\n    'src/middleware.js',\n    'proxy.ts',\n    'proxy.js',\n    'src/proxy.ts',\n    'src/proxy.js',\n  ];\n  const wrongLevel = allPossible.find((p) => existsSync(join(projectDir, p)) && !correctPaths.includes(p));\n\n  if (wrongLevel) {\n    issues.push({\n      type: 'file',\n      severity: 'error',\n      message: `${wrongLevel} is at the wrong level — app/ is in ${appInSrc ? 'src/' : 'root'}`,\n      hint: `Move it to ${expectedDir}${wrongLevel.replace(/^src\\//, '')} (must be alongside app/ directory). Next.js silently ignores middleware/proxy files at the wrong level.`,\n    });\n    return;\n  }\n\n  // Check for deeply misplaced middleware\n  const misplaced = await fg(['**/{middleware,proxy}.{ts,js}'], {\n    cwd: projectDir,\n    ignore: ['node_modules/**'],\n  });\n\n  if (misplaced.length > 0) {\n    issues.push({\n      type: 'file',\n      severity: 'error',\n      message: `middleware/proxy found at wrong location: ${misplaced[0]}`,\n      hint: `Must be at ${expectedDir}middleware.ts or ${expectedDir}proxy.ts (alongside app/ directory).`,\n    });\n  }\n}\n\n/**\n * Validates React SPA has AuthKitProvider wrapping the app.\n */\nasync function validateReactProviderWrapping(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  // Common entry points for React apps\n  const entryPatterns = [\n    'src/main.tsx',\n    'src/main.jsx',\n    'src/index.tsx',\n    'src/index.jsx',\n    'src/App.tsx',\n    'src/App.jsx',\n    'app/layout.tsx',\n    'app/layout.jsx',\n  ];\n\n  let foundProvider = false;\n\n  for (const pattern of entryPatterns) {\n    const filePath = join(projectDir, pattern);\n    if (!existsSync(filePath)) continue;\n\n    try {\n      const content = await readFile(filePath, 'utf-8');\n      if (content.includes('AuthKitProvider')) {\n        foundProvider = true;\n        break;\n      }\n    } catch {\n      continue;\n    }\n  }\n\n  if (!foundProvider) {\n    // Check if package is installed (if not, other validators handle it)\n    const pkgPath = join(projectDir, 'package.json');\n    if (existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(await readFile(pkgPath, 'utf-8'));\n        const deps = { ...pkg.dependencies, ...pkg.devDependencies };\n        if (deps['@workos-inc/authkit-react']) {\n          issues.push({\n            type: 'pattern',\n            severity: 'warning',\n            message: 'AuthKitProvider not found in common entry points',\n            hint: 'Wrap your app with <AuthKitProvider> in main.tsx or App.tsx. See: https://workos.com/docs/user-management/react/authkit',\n          });\n        }\n      } catch {\n        // Malformed package.json - skip\n      }\n    }\n  }\n}\n\n/**\n * Detects duplicate env vars between .env and .env.local with different values.\n * This can cause confusing behavior where wrong values are used.\n */\nasync function validateDuplicateEnvVars(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  const envPath = join(projectDir, '.env');\n  const envLocalPath = join(projectDir, '.env.local');\n\n  let envContent: string;\n  let envLocalContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return; // No .env file - no conflict possible\n  }\n\n  try {\n    envLocalContent = await readFile(envLocalPath, 'utf-8');\n  } catch {\n    return; // No .env.local - no conflict possible\n  }\n\n  // Parse env files into key-value maps\n  const parseEnv = (content: string): Map<string, string> => {\n    const map = new Map<string, string>();\n    for (const line of content.split(/\\r?\\n/)) {\n      const match = line.match(/^([A-Z_][A-Z0-9_]*)=(.*)$/);\n      if (match) {\n        map.set(match[1], match[2].trim());\n      }\n    }\n    return map;\n  };\n\n  const envVars = parseEnv(envContent);\n  const envLocalVars = parseEnv(envLocalContent);\n\n  // Check for WorkOS-related vars that differ\n  const workosVars = [\n    'WORKOS_API_KEY',\n    'WORKOS_CLIENT_ID',\n    'WORKOS_REDIRECT_URI',\n    'WORKOS_COOKIE_PASSWORD',\n    'NEXT_PUBLIC_WORKOS_CLIENT_ID',\n    'NEXT_PUBLIC_WORKOS_REDIRECT_URI',\n  ];\n\n  for (const varName of workosVars) {\n    const envValue = envVars.get(varName);\n    const localValue = envLocalVars.get(varName);\n\n    if (envValue && localValue && envValue !== localValue) {\n      issues.push({\n        type: 'env',\n        severity: 'warning',\n        message: `${varName} has different values in .env and .env.local`,\n        hint: `.env.local takes precedence. Remove from .env to avoid confusion, or ensure they match.`,\n      });\n    }\n  }\n}\n"]}

package/dist/lib/version-check.d.ts

@@ -1,6 +0,0 @@
-/**
- * Check npm registry for latest version and warn if outdated.
- * Runs asynchronously, fails silently on any error.
- * Safe to call without awaiting (fire-and-forget).
- */
-export declare function checkForUpdates(): Promise<void>;

package/dist/lib/version-check.js

@@ -1,46 +0,0 @@
-import { lt, valid } from 'semver';
-import { yellow, dim } from '../utils/logging.js';
-import { getVersion } from './settings.js';
-const NPM_REGISTRY_URL = 'https://registry.npmjs.org/workos/latest';
-const TIMEOUT_MS = 500;
-let hasWarned = false;
-/**
- * Check npm registry for latest version and warn if outdated.
- * Runs asynchronously, fails silently on any error.
- * Safe to call without awaiting (fire-and-forget).
- */
-export async function checkForUpdates() {
-    if (hasWarned)
-        return;
-    try {
-        const response = await fetch(NPM_REGISTRY_URL, {
-            signal: AbortSignal.timeout(TIMEOUT_MS),
-        });
-        if (!response.ok)
-            return;
-        const data = (await response.json());
-        const latestVersion = data.version;
-        const currentVersion = getVersion();
-        // Validate both versions are valid semver
-        if (!valid(latestVersion) || !valid(currentVersion))
-            return;
-        // Only warn if current < latest
-        if (lt(currentVersion, latestVersion)) {
-            hasWarned = true;
-            yellow(`Update available: ${currentVersion} → ${latestVersion}`);
-            dim('Run: npx workos@latest');
-            console.log();
-        }
-    }
-    catch {
-        // Silently ignore all errors (timeout, network, parse, etc.)
-    }
-}
-/**
- * Reset warning state (for testing).
- * @internal
- */
-export function _resetWarningState() {
-    hasWarned = false;
-}
-//# sourceMappingURL=version-check.js.map

package/dist/lib/version-check.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"version-check.js","sourceRoot":"","sources":["../../src/lib/version-check.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,MAAM,gBAAgB,GAAG,0CAA0C,CAAC;AACpE,MAAM,UAAU,GAAG,GAAG,CAAC;AAEvB,IAAI,SAAS,GAAG,KAAK,CAAC;AAMtB;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,IAAI,SAAS;QAAE,OAAO;IAEtB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,gBAAgB,EAAE;YAC7C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC;SACxC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO;QAEzB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmB,CAAC;QACvD,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC;QACnC,MAAM,cAAc,GAAG,UAAU,EAAE,CAAC;QAEpC,0CAA0C;QAC1C,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;YAAE,OAAO;QAE5D,gCAAgC;QAChC,IAAI,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC,EAAE,CAAC;YACtC,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,CAAC,qBAAqB,cAAc,MAAM,aAAa,EAAE,CAAC,CAAC;YACjE,GAAG,CAAC,wBAAwB,CAAC,CAAC;YAC9B,OAAO,CAAC,GAAG,EAAE,CAAC;QAChB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6DAA6D;IAC/D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,SAAS,GAAG,KAAK,CAAC;AACpB,CAAC","sourcesContent":["import { lt, valid } from 'semver';\nimport { yellow, dim } from '../utils/logging.js';\nimport { getVersion } from './settings.js';\n\nconst NPM_REGISTRY_URL = 'https://registry.npmjs.org/workos/latest';\nconst TIMEOUT_MS = 500;\n\nlet hasWarned = false;\n\ninterface NpmPackageInfo {\n  version: string;\n}\n\n/**\n * Check npm registry for latest version and warn if outdated.\n * Runs asynchronously, fails silently on any error.\n * Safe to call without awaiting (fire-and-forget).\n */\nexport async function checkForUpdates(): Promise<void> {\n  if (hasWarned) return;\n\n  try {\n    const response = await fetch(NPM_REGISTRY_URL, {\n      signal: AbortSignal.timeout(TIMEOUT_MS),\n    });\n\n    if (!response.ok) return;\n\n    const data = (await response.json()) as NpmPackageInfo;\n    const latestVersion = data.version;\n    const currentVersion = getVersion();\n\n    // Validate both versions are valid semver\n    if (!valid(latestVersion) || !valid(currentVersion)) return;\n\n    // Only warn if current < latest\n    if (lt(currentVersion, latestVersion)) {\n      hasWarned = true;\n      yellow(`Update available: ${currentVersion} → ${latestVersion}`);\n      dim('Run: npx workos@latest');\n      console.log();\n    }\n  } catch {\n    // Silently ignore all errors (timeout, network, parse, etc.)\n  }\n}\n\n/**\n * Reset warning state (for testing).\n * @internal\n */\nexport function _resetWarningState(): void {\n  hasWarned = false;\n}\n"]}

package/dist/lib/workos-api.d.ts

@@ -1,30 +0,0 @@
-/**
- * Generic WorkOS API client.
- * Thin fetch wrapper with auth, error parsing, and query param support.
- */
-export interface WorkOSRequestOptions {
-    method: 'GET' | 'POST' | 'PUT' | 'DELETE';
-    path: string;
-    apiKey: string;
-    baseUrl?: string;
-    body?: Record<string, unknown>;
-    params?: Record<string, string | number | undefined>;
-}
-export interface WorkOSListResponse<T> {
-    data: T[];
-    list_metadata: {
-        before: string | null;
-        after: string | null;
-    };
-}
-export declare class WorkOSApiError extends Error {
-    readonly statusCode: number;
-    readonly code?: string | undefined;
-    readonly errors?: Array<{
-        message: string;
-    }> | undefined;
-    constructor(message: string, statusCode: number, code?: string | undefined, errors?: Array<{
-        message: string;
-    }> | undefined);
-}
-export declare function workosRequest<T>(options: WorkOSRequestOptions): Promise<T>;

package/dist/lib/workos-api.js

@@ -1,69 +0,0 @@
-/**
- * Generic WorkOS API client.
- * Thin fetch wrapper with auth, error parsing, and query param support.
- */
-const DEFAULT_BASE_URL = 'https://api.workos.com';
-export class WorkOSApiError extends Error {
-    statusCode;
-    code;
-    errors;
-    constructor(message, statusCode, code, errors) {
-        super(message);
-        this.statusCode = statusCode;
-        this.code = code;
-        this.errors = errors;
-        this.name = 'WorkOSApiError';
-    }
-}
-export async function workosRequest(options) {
-    const { method, path, apiKey, baseUrl = DEFAULT_BASE_URL, body, params } = options;
-    let url = `${baseUrl}${path}`;
-    if (params) {
-        const searchParams = new URLSearchParams();
-        for (const [key, value] of Object.entries(params)) {
-            if (value !== undefined && value !== '') {
-                searchParams.set(key, String(value));
-            }
-        }
-        const qs = searchParams.toString();
-        if (qs)
-            url += `?${qs}`;
-    }
-    const headers = {
-        Authorization: `Bearer ${apiKey}`,
-    };
-    const fetchOptions = { method, headers };
-    if (body && (method === 'POST' || method === 'PUT')) {
-        headers['Content-Type'] = 'application/json';
-        fetchOptions.body = JSON.stringify(body);
-    }
-    let response;
-    try {
-        response = await fetch(url, fetchOptions);
-    }
-    catch {
-        throw new WorkOSApiError('Failed to connect to WorkOS API. Check your internet connection.', 0);
-    }
-    if (response.status === 204 || response.status === 202) {
-        return null;
-    }
-    const text = await response.text();
-    let data;
-    try {
-        data = JSON.parse(text);
-    }
-    catch {
-        // Non-JSON response — if ok, return null; otherwise throw
-        if (response.ok)
-            return null;
-        throw new WorkOSApiError(text || `HTTP ${response.status}`, response.status);
-    }
-    if (!response.ok) {
-        const message = data.message || `HTTP ${response.status}`;
-        const code = data.code;
-        const errors = data.errors;
-        throw new WorkOSApiError(message, response.status, code, errors);
-    }
-    return data;
-}
-//# sourceMappingURL=workos-api.js.map

package/dist/lib/workos-api.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"workos-api.js","sourceRoot":"","sources":["../../src/lib/workos-api.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAmBlD,MAAM,OAAO,cAAe,SAAQ,KAAK;IAGrB;IACA;IACA;IAJlB,YACE,OAAe,EACC,UAAkB,EAClB,IAAa,EACb,MAAmC;QAEnD,KAAK,CAAC,OAAO,CAAC,CAAC;QAJC,eAAU,GAAV,UAAU,CAAQ;QAClB,SAAI,GAAJ,IAAI,CAAS;QACb,WAAM,GAAN,MAAM,CAA6B;QAGnD,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAI,OAA6B;IAClE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAG,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAEnF,IAAI,GAAG,GAAG,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC;IAC9B,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBACxC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QACD,MAAM,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,EAAE;YAAE,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;IAC1B,CAAC;IAED,MAAM,OAAO,GAA2B;QACtC,aAAa,EAAE,UAAU,MAAM,EAAE;KAClC,CAAC;IAEF,MAAM,YAAY,GAAgB,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAEtD,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC7C,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,kEAAkE,EAAE,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvD,OAAO,IAAS,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;QAC1D,IAAI,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAS,CAAC;QAClC,MAAM,IAAI,cAAc,CAAC,IAAI,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAI,IAA6B,CAAC,OAAO,IAAI,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QACpF,MAAM,IAAI,GAAI,IAA0B,CAAC,IAAI,CAAC;QAC9C,MAAM,MAAM,GAAI,IAAgD,CAAC,MAAM,CAAC;QACxE,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,IAAS,CAAC;AACnB,CAAC","sourcesContent":["/**\n * Generic WorkOS API client.\n * Thin fetch wrapper with auth, error parsing, and query param support.\n */\n\nconst DEFAULT_BASE_URL = 'https://api.workos.com';\n\nexport interface WorkOSRequestOptions {\n  method: 'GET' | 'POST' | 'PUT' | 'DELETE';\n  path: string;\n  apiKey: string;\n  baseUrl?: string;\n  body?: Record<string, unknown>;\n  params?: Record<string, string | number | undefined>;\n}\n\nexport interface WorkOSListResponse<T> {\n  data: T[];\n  list_metadata: {\n    before: string | null;\n    after: string | null;\n  };\n}\n\nexport class WorkOSApiError extends Error {\n  constructor(\n    message: string,\n    public readonly statusCode: number,\n    public readonly code?: string,\n    public readonly errors?: Array<{ message: string }>,\n  ) {\n    super(message);\n    this.name = 'WorkOSApiError';\n  }\n}\n\nexport async function workosRequest<T>(options: WorkOSRequestOptions): Promise<T> {\n  const { method, path, apiKey, baseUrl = DEFAULT_BASE_URL, body, params } = options;\n\n  let url = `${baseUrl}${path}`;\n  if (params) {\n    const searchParams = new URLSearchParams();\n    for (const [key, value] of Object.entries(params)) {\n      if (value !== undefined && value !== '') {\n        searchParams.set(key, String(value));\n      }\n    }\n    const qs = searchParams.toString();\n    if (qs) url += `?${qs}`;\n  }\n\n  const headers: Record<string, string> = {\n    Authorization: `Bearer ${apiKey}`,\n  };\n\n  const fetchOptions: RequestInit = { method, headers };\n\n  if (body && (method === 'POST' || method === 'PUT')) {\n    headers['Content-Type'] = 'application/json';\n    fetchOptions.body = JSON.stringify(body);\n  }\n\n  let response: Response;\n  try {\n    response = await fetch(url, fetchOptions);\n  } catch {\n    throw new WorkOSApiError('Failed to connect to WorkOS API. Check your internet connection.', 0);\n  }\n\n  if (response.status === 204 || response.status === 202) {\n    return null as T;\n  }\n\n  const text = await response.text();\n  let data: unknown;\n  try {\n    data = JSON.parse(text);\n  } catch {\n    // Non-JSON response — if ok, return null; otherwise throw\n    if (response.ok) return null as T;\n    throw new WorkOSApiError(text || `HTTP ${response.status}`, response.status);\n  }\n\n  if (!response.ok) {\n    const message = (data as { message?: string }).message || `HTTP ${response.status}`;\n    const code = (data as { code?: string }).code;\n    const errors = (data as { errors?: Array<{ message: string }> }).errors;\n    throw new WorkOSApiError(message, response.status, code, errors);\n  }\n\n  return data as T;\n}\n"]}

package/dist/lib/workos-client.d.ts

@@ -1,58 +0,0 @@
-/**
- * Unified WorkOS client for CLI commands.
- *
- * Wraps @workos-inc/node SDK for documented endpoints and extends with
- * raw-fetch methods for undocumented/write-only endpoints (webhooks, redirect URIs, etc.).
- * Commands import one client; they don't care whether a method is SDK-backed or raw fetch.
- */
-import { WorkOS } from '@workos-inc/node';
-import { type WorkOSListResponse } from './workos-api.js';
-export interface WebhookEndpoint {
-    id: string;
-    endpoint_url: string;
-    events: string[];
-    secret?: string;
-    created_at: string;
-    updated_at: string;
-}
-export interface AuditLogAction {
-    action: string;
-}
-export interface AuditLogRetention {
-    retention_period_in_days: number;
-}
-export interface WorkOSCLIClient {
-    sdk: WorkOS;
-    webhooks: {
-        list(): Promise<WorkOSListResponse<WebhookEndpoint>>;
-        create(endpointUrl: string, events: string[]): Promise<WebhookEndpoint>;
-        delete(id: string): Promise<void>;
-    };
-    redirectUris: {
-        add(uri: string): Promise<{
-            success: boolean;
-            alreadyExists: boolean;
-        }>;
-    };
-    corsOrigins: {
-        add(origin: string): Promise<{
-            success: boolean;
-            alreadyExists: boolean;
-        }>;
-    };
-    homepageUrl: {
-        set(url: string): Promise<void>;
-    };
-    auditLogs: {
-        listActions(): Promise<WorkOSListResponse<AuditLogAction>>;
-        getSchema(action: string): Promise<unknown>;
-        getRetention(orgId: string): Promise<AuditLogRetention>;
-    };
-}
-/**
- * Create a unified WorkOS client.
- *
- * @param apiKey  - Explicit API key; falls back to resolveApiKey()
- * @param baseUrl - Explicit base URL; falls back to resolveApiBaseUrl()
- */
-export declare function createWorkOSClient(apiKey?: string, baseUrl?: string): WorkOSCLIClient;

package/dist/lib/workos-client.js

@@ -1,140 +0,0 @@
-/**
- * Unified WorkOS client for CLI commands.
- *
- * Wraps @workos-inc/node SDK for documented endpoints and extends with
- * raw-fetch methods for undocumented/write-only endpoints (webhooks, redirect URIs, etc.).
- * Commands import one client; they don't care whether a method is SDK-backed or raw fetch.
- */
-import { WorkOS } from '@workos-inc/node';
-import { workosRequest } from './workos-api.js';
-import { resolveApiKey, resolveApiBaseUrl } from './api-key.js';
-/**
- * Create a unified WorkOS client.
- *
- * @param apiKey  - Explicit API key; falls back to resolveApiKey()
- * @param baseUrl - Explicit base URL; falls back to resolveApiBaseUrl()
- */
-export function createWorkOSClient(apiKey, baseUrl) {
-    const key = apiKey ?? resolveApiKey();
-    const base = baseUrl ?? resolveApiBaseUrl();
-    const url = new URL(base);
-    const sdk = new WorkOS(key, {
-        apiHostname: url.hostname,
-        ...(url.port && { port: Number(url.port) }),
-        ...(url.protocol === 'http:' && { https: false }),
-    });
-    return {
-        sdk,
-        webhooks: {
-            async list() {
-                return workosRequest({
-                    method: 'GET',
-                    path: '/webhook_endpoints',
-                    apiKey: key,
-                    baseUrl: base,
-                });
-            },
-            async create(endpointUrl, events) {
-                return workosRequest({
-                    method: 'POST',
-                    path: '/webhook_endpoints',
-                    apiKey: key,
-                    baseUrl: base,
-                    body: { endpoint_url: endpointUrl, events },
-                });
-            },
-            async delete(id) {
-                await workosRequest({
-                    method: 'DELETE',
-                    path: `/webhook_endpoints/${id}`,
-                    apiKey: key,
-                    baseUrl: base,
-                });
-            },
-        },
-        redirectUris: {
-            async add(uri) {
-                try {
-                    await workosRequest({
-                        method: 'POST',
-                        path: '/user_management/redirect_uris',
-                        apiKey: key,
-                        baseUrl: base,
-                        body: { uri },
-                    });
-                    return { success: true, alreadyExists: false };
-                }
-                catch (error) {
-                    const { WorkOSApiError } = await import('./workos-api.js');
-                    if (error instanceof WorkOSApiError) {
-                        if (error.statusCode === 409 || (error.statusCode === 422 && error.message.includes('already exists'))) {
-                            return { success: true, alreadyExists: true };
-                        }
-                    }
-                    throw error;
-                }
-            },
-        },
-        corsOrigins: {
-            async add(origin) {
-                try {
-                    await workosRequest({
-                        method: 'POST',
-                        path: '/user_management/cors_origins',
-                        apiKey: key,
-                        baseUrl: base,
-                        body: { origin },
-                    });
-                    return { success: true, alreadyExists: false };
-                }
-                catch (error) {
-                    const { WorkOSApiError } = await import('./workos-api.js');
-                    if (error instanceof WorkOSApiError) {
-                        if (error.statusCode === 409 || (error.statusCode === 422 && error.message.includes('already exists'))) {
-                            return { success: true, alreadyExists: true };
-                        }
-                    }
-                    throw error;
-                }
-            },
-        },
-        homepageUrl: {
-            async set(url) {
-                await workosRequest({
-                    method: 'PUT',
-                    path: '/user_management/app_homepage_url',
-                    apiKey: key,
-                    baseUrl: base,
-                    body: { url },
-                });
-            },
-        },
-        auditLogs: {
-            async listActions() {
-                return workosRequest({
-                    method: 'GET',
-                    path: '/audit_logs/actions',
-                    apiKey: key,
-                    baseUrl: base,
-                });
-            },
-            async getSchema(action) {
-                return workosRequest({
-                    method: 'GET',
-                    path: `/audit_logs/actions/${encodeURIComponent(action)}/schemas`,
-                    apiKey: key,
-                    baseUrl: base,
-                });
-            },
-            async getRetention(orgId) {
-                return workosRequest({
-                    method: 'GET',
-                    path: `/organizations/${encodeURIComponent(orgId)}/audit_logs_retention`,
-                    apiKey: key,
-                    baseUrl: base,
-                });
-            },
-        },
-    };
-}
-//# sourceMappingURL=workos-client.js.map

package/dist/lib/workos-client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"workos-client.js","sourceRoot":"","sources":["../../src/lib/workos-client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,aAAa,EAA2B,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AA0ChE;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAe,EAAE,OAAgB;IAClE,MAAM,GAAG,GAAG,MAAM,IAAI,aAAa,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,OAAO,IAAI,iBAAiB,EAAE,CAAC;IAE5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,GAAG,EAAE;QAC1B,WAAW,EAAE,GAAG,CAAC,QAAQ;QACzB,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;KAClD,CAAC,CAAC;IAEH,OAAO;QACL,GAAG;QAEH,QAAQ,EAAE;YACR,KAAK,CAAC,IAAI;gBACR,OAAO,aAAa,CAAsC;oBACxD,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,IAAI;iBACd,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,MAAgB;gBAChD,OAAO,aAAa,CAAkB;oBACpC,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE;iBAC5C,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,MAAM,CAAC,EAAU;gBACrB,MAAM,aAAa,CAAO;oBACxB,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,sBAAsB,EAAE,EAAE;oBAChC,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,IAAI;iBACd,CAAC,CAAC;YACL,CAAC;SACF;QAED,YAAY,EAAE;YACZ,KAAK,CAAC,GAAG,CAAC,GAAW;gBACnB,IAAI,CAAC;oBACH,MAAM,aAAa,CAAC;wBAClB,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,gCAAgC;wBACtC,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,EAAE,GAAG,EAAE;qBACd,CAAC,CAAC;oBACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;gBACjD,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;oBAC3D,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;wBACpC,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;4BACvG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;wBAChD,CAAC;oBACH,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;SACF;QAED,WAAW,EAAE;YACX,KAAK,CAAC,GAAG,CAAC,MAAc;gBACtB,IAAI,CAAC;oBACH,MAAM,aAAa,CAAC;wBAClB,MAAM,EAAE,MAAM;wBACd,IAAI,EAAE,+BAA+B;wBACrC,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,IAAI;wBACb,IAAI,EAAE,EAAE,MAAM,EAAE;qBACjB,CAAC,CAAC;oBACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;gBACjD,CAAC;gBAAC,OAAO,KAAc,EAAE,CAAC;oBACxB,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;oBAC3D,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;wBACpC,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;4BACvG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;wBAChD,CAAC;oBACH,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;SACF;QAED,WAAW,EAAE;YACX,KAAK,CAAC,GAAG,CAAC,GAAW;gBACnB,MAAM,aAAa,CAAC;oBAClB,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,mCAAmC;oBACzC,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,EAAE,GAAG,EAAE;iBACd,CAAC,CAAC;YACL,CAAC;SACF;QAED,SAAS,EAAE;YACT,KAAK,CAAC,WAAW;gBACf,OAAO,aAAa,CAAqC;oBACvD,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,qBAAqB;oBAC3B,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,IAAI;iBACd,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,SAAS,CAAC,MAAc;gBAC5B,OAAO,aAAa,CAAU;oBAC5B,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,uBAAuB,kBAAkB,CAAC,MAAM,CAAC,UAAU;oBACjE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,IAAI;iBACd,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,YAAY,CAAC,KAAa;gBAC9B,OAAO,aAAa,CAAoB;oBACtC,MAAM,EAAE,KAAK;oBACb,IAAI,EAAE,kBAAkB,kBAAkB,CAAC,KAAK,CAAC,uBAAuB;oBACxE,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,IAAI;iBACd,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Unified WorkOS client for CLI commands.\n *\n * Wraps @workos-inc/node SDK for documented endpoints and extends with\n * raw-fetch methods for undocumented/write-only endpoints (webhooks, redirect URIs, etc.).\n * Commands import one client; they don't care whether a method is SDK-backed or raw fetch.\n */\n\nimport { WorkOS } from '@workos-inc/node';\nimport { workosRequest, type WorkOSListResponse } from './workos-api.js';\nimport { resolveApiKey, resolveApiBaseUrl } from './api-key.js';\n\nexport interface WebhookEndpoint {\n  id: string;\n  endpoint_url: string;\n  events: string[];\n  secret?: string;\n  created_at: string;\n  updated_at: string;\n}\n\nexport interface AuditLogAction {\n  action: string;\n}\n\nexport interface AuditLogRetention {\n  retention_period_in_days: number;\n}\n\nexport interface WorkOSCLIClient {\n  sdk: WorkOS;\n  webhooks: {\n    list(): Promise<WorkOSListResponse<WebhookEndpoint>>;\n    create(endpointUrl: string, events: string[]): Promise<WebhookEndpoint>;\n    delete(id: string): Promise<void>;\n  };\n  redirectUris: {\n    add(uri: string): Promise<{ success: boolean; alreadyExists: boolean }>;\n  };\n  corsOrigins: {\n    add(origin: string): Promise<{ success: boolean; alreadyExists: boolean }>;\n  };\n  homepageUrl: {\n    set(url: string): Promise<void>;\n  };\n  auditLogs: {\n    listActions(): Promise<WorkOSListResponse<AuditLogAction>>;\n    getSchema(action: string): Promise<unknown>;\n    getRetention(orgId: string): Promise<AuditLogRetention>;\n  };\n}\n\n/**\n * Create a unified WorkOS client.\n *\n * @param apiKey  - Explicit API key; falls back to resolveApiKey()\n * @param baseUrl - Explicit base URL; falls back to resolveApiBaseUrl()\n */\nexport function createWorkOSClient(apiKey?: string, baseUrl?: string): WorkOSCLIClient {\n  const key = apiKey ?? resolveApiKey();\n  const base = baseUrl ?? resolveApiBaseUrl();\n\n  const url = new URL(base);\n  const sdk = new WorkOS(key, {\n    apiHostname: url.hostname,\n    ...(url.port && { port: Number(url.port) }),\n    ...(url.protocol === 'http:' && { https: false }),\n  });\n\n  return {\n    sdk,\n\n    webhooks: {\n      async list() {\n        return workosRequest<WorkOSListResponse<WebhookEndpoint>>({\n          method: 'GET',\n          path: '/webhook_endpoints',\n          apiKey: key,\n          baseUrl: base,\n        });\n      },\n      async create(endpointUrl: string, events: string[]) {\n        return workosRequest<WebhookEndpoint>({\n          method: 'POST',\n          path: '/webhook_endpoints',\n          apiKey: key,\n          baseUrl: base,\n          body: { endpoint_url: endpointUrl, events },\n        });\n      },\n      async delete(id: string) {\n        await workosRequest<null>({\n          method: 'DELETE',\n          path: `/webhook_endpoints/${id}`,\n          apiKey: key,\n          baseUrl: base,\n        });\n      },\n    },\n\n    redirectUris: {\n      async add(uri: string) {\n        try {\n          await workosRequest({\n            method: 'POST',\n            path: '/user_management/redirect_uris',\n            apiKey: key,\n            baseUrl: base,\n            body: { uri },\n          });\n          return { success: true, alreadyExists: false };\n        } catch (error: unknown) {\n          const { WorkOSApiError } = await import('./workos-api.js');\n          if (error instanceof WorkOSApiError) {\n            if (error.statusCode === 409 || (error.statusCode === 422 && error.message.includes('already exists'))) {\n              return { success: true, alreadyExists: true };\n            }\n          }\n          throw error;\n        }\n      },\n    },\n\n    corsOrigins: {\n      async add(origin: string) {\n        try {\n          await workosRequest({\n            method: 'POST',\n            path: '/user_management/cors_origins',\n            apiKey: key,\n            baseUrl: base,\n            body: { origin },\n          });\n          return { success: true, alreadyExists: false };\n        } catch (error: unknown) {\n          const { WorkOSApiError } = await import('./workos-api.js');\n          if (error instanceof WorkOSApiError) {\n            if (error.statusCode === 409 || (error.statusCode === 422 && error.message.includes('already exists'))) {\n              return { success: true, alreadyExists: true };\n            }\n          }\n          throw error;\n        }\n      },\n    },\n\n    homepageUrl: {\n      async set(url: string) {\n        await workosRequest({\n          method: 'PUT',\n          path: '/user_management/app_homepage_url',\n          apiKey: key,\n          baseUrl: base,\n          body: { url },\n        });\n      },\n    },\n\n    auditLogs: {\n      async listActions() {\n        return workosRequest<WorkOSListResponse<AuditLogAction>>({\n          method: 'GET',\n          path: '/audit_logs/actions',\n          apiKey: key,\n          baseUrl: base,\n        });\n      },\n      async getSchema(action: string) {\n        return workosRequest<unknown>({\n          method: 'GET',\n          path: `/audit_logs/actions/${encodeURIComponent(action)}/schemas`,\n          apiKey: key,\n          baseUrl: base,\n        });\n      },\n      async getRetention(orgId: string) {\n        return workosRequest<AuditLogRetention>({\n          method: 'GET',\n          path: `/organizations/${encodeURIComponent(orgId)}/audit_logs_retention`,\n          apiKey: key,\n          baseUrl: base,\n        });\n      },\n    },\n  };\n}\n"]}

package/dist/lib/workos-management.d.ts

@@ -1,32 +0,0 @@
-import type { Integration } from './constants.js';
-export interface AutoConfigResult {
-    redirectUri: {
-        success: boolean;
-        alreadyExists: boolean;
-    };
-    corsOrigin: {
-        success: boolean;
-        alreadyExists: boolean;
-    };
-    homepageUrl: {
-        success: boolean;
-    };
-}
-export interface AutoConfigOptions {
-    /** Custom homepage URL (defaults to http://localhost:{port}) */
-    homepageUrl?: string;
-    /** Custom redirect URI (defaults to framework convention) */
-    redirectUri?: string;
-}
-/**
- * Auto-configure WorkOS dashboard settings for local development.
- * Sets redirect URI, CORS origin, and homepage URL via the WorkOS API.
- *
- * @param apiKey - WorkOS API key (sk_xxx)
- * @param integration - Framework integration type
- * @param port - Detected or default dev server port
- * @param options - Optional overrides for homepage URL and redirect URI
- *
- * Non-blocking: failures are logged but don't stop the wizard.
- */
-export declare function autoConfigureWorkOSEnvironment(apiKey: string, integration: Integration, port: number, options?: AutoConfigOptions): Promise<AutoConfigResult | null>;