workos 0.19.0 → 0.20.2

package/dist/commands/claim.js

@@ -1,143 +0,0 @@
-/**
- * `workos env claim` — claim an unclaimed environment.
- *
- * Reads claim token from active environment, generates a nonce via
- * createClaimNonce(), opens browser to dashboard claim URL, and polls
- * until the environment is claimed.
- */
-import open from 'open';
-import ui from '../utils/ui.js';
-import { getActiveEnvironment, isUnclaimedEnvironment, markEnvironmentClaimed } from '../lib/config-store.js';
-import { createClaimNonce, UnclaimedEnvApiError } from '../lib/unclaimed-env-api.js';
-import { observeHostFailure } from '../lib/host-probe.js';
-import { logInfo, logError } from '../utils/debug.js';
-import { isJsonMode, outputJson, exitWithError } from '../utils/output.js';
-import { isAgentMode, isCiMode } from '../utils/interaction-mode.js';
-import { sleep } from '../lib/helper-functions.js';
-import { formatWorkOSCommand } from '../utils/command-invocation.js';
-import { networkRetryRecovery } from '../utils/recovery-hints.js';
-const POLL_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes
-const POLL_INTERVAL_MS = 5_000; // 5 seconds
-const MAX_CONSECUTIVE_FAILURES = 10;
-/**
- * Run the claim flow.
- */
-export async function runClaim() {
-    const activeEnv = getActiveEnvironment();
-    if (!activeEnv || !isUnclaimedEnvironment(activeEnv)) {
-        if (isJsonMode()) {
-            outputJson({ status: 'no_unclaimed_environment', message: 'No unclaimed environment found. Nothing to claim.' });
-        }
-        else {
-            ui.log.info('No unclaimed environment found. Nothing to claim.');
-        }
-        return;
-    }
-    // claimToken and clientId guaranteed present by UnclaimedEnvironmentConfig
-    logInfo('[claim] Starting claim flow for environment:', activeEnv.name);
-    try {
-        ui.log.step('Generating claim link...');
-        const result = await createClaimNonce(activeEnv.clientId, activeEnv.claimToken);
-        if (result.alreadyClaimed) {
-            markEnvironmentClaimed();
-            if (isJsonMode()) {
-                outputJson({ status: 'already_claimed', message: 'Environment already claimed!' });
-            }
-            else {
-                ui.log.success('Environment already claimed!');
-                ui.log.info(`Run \`${formatWorkOSCommand('auth login')}\` to connect your account.`);
-            }
-            return;
-        }
-        const claimUrl = `https://dashboard.workos.com/claim?nonce=${result.nonce}`;
-        if (isJsonMode()) {
-            outputJson({
-                status: 'claim_url',
-                claimUrl,
-                nonce: result.nonce,
-                permanent: true,
-                note: 'Claiming permanently links this environment to your account and cannot be undone.',
-            });
-            return;
-        }
-        if (isCiMode()) {
-            exitWithError({
-                code: 'unsupported_in_ci',
-                message: 'Environment claim requires opening the claim URL outside CI.',
-                details: { claimUrl, nonce: result.nonce },
-            });
-        }
-        ui.log.warn('Claiming permanently links this environment to your account and cannot be undone.');
-        ui.log.info(`Open this URL to claim your environment:\n\n  ${claimUrl}`);
-        try {
-            await open(claimUrl, { wait: false });
-            if (isAgentMode()) {
-                ui.log.info('Browser launch attempted. If it did not open on the host, use the URL above.');
-            }
-            else {
-                ui.log.info('Browser opened automatically');
-            }
-        }
-        catch (openError) {
-            observeHostFailure('browser-launch', openError, {
-                operation: 'open',
-                target: claimUrl,
-                label: 'environment claim browser',
-            });
-            logError('[claim] Failed to open browser:', openError instanceof Error ? openError.message : String(openError));
-            ui.log.info('Could not open browser — open the URL above manually.');
-        }
-        // Poll for claim completion
-        const spinner = ui.spinner();
-        spinner.start('Waiting for claim...');
-        const startTime = Date.now();
-        let consecutiveFailures = 0;
-        while (Date.now() - startTime < POLL_TIMEOUT_MS) {
-            await sleep(POLL_INTERVAL_MS);
-            try {
-                const check = await createClaimNonce(activeEnv.clientId, activeEnv.claimToken);
-                if (check.alreadyClaimed) {
-                    spinner.stop('Environment claimed!');
-                    markEnvironmentClaimed();
-                    ui.log.info(`Run \`${formatWorkOSCommand('auth login')}\` to connect your account.`);
-                    return;
-                }
-                consecutiveFailures = 0;
-            }
-            catch (pollError) {
-                const statusCode = pollError instanceof UnclaimedEnvApiError ? pollError.statusCode : undefined;
-                if (statusCode === 401) {
-                    // 401 means the server invalidated the claim token — this happens
-                    // when the environment is claimed. Safe to promote to sandbox.
-                    spinner.stop('Claim token is invalid or expired.');
-                    markEnvironmentClaimed();
-                    ui.log.warn(`Run \`${formatWorkOSCommand('auth login')}\` to set up your environment.`);
-                    return;
-                }
-                consecutiveFailures++;
-                logError('[claim] Poll error:', pollError instanceof Error ? pollError.message : 'Unknown');
-                if (consecutiveFailures >= MAX_CONSECUTIVE_FAILURES) {
-                    spinner.stop('Too many connection failures');
-                    ui.log.error(`Polling failed ${consecutiveFailures} times in a row. Check your network and try again.\n` +
-                        `You can also complete the claim at: ${claimUrl}`);
-                    return;
-                }
-                if (consecutiveFailures >= 3) {
-                    spinner.message('Still waiting... (connection issues detected)');
-                }
-            }
-        }
-        spinner.stop('Claim timed out');
-        ui.log.info(`Complete the claim in your browser, then run \`${formatWorkOSCommand('env list')}\` to verify.`);
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : 'Unknown error';
-        logError('[claim] Error:', message);
-        exitWithError({
-            code: 'claim_failed',
-            message: `Could not claim this environment: ${message}`,
-            recovery: networkRetryRecovery({ command: formatWorkOSCommand('env claim') }),
-        });
-    }
-}
-//# sourceMappingURL=claim.js.map

package/dist/commands/claim.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"claim.js","sourceRoot":"","sources":["../../src/commands/claim.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAChC,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAC9G,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAElE,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AACnD,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,YAAY;AAC5C,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAEpC;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;IAEzC,IAAI,CAAC,SAAS,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC,CAAC;QACnH,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACnE,CAAC;QACD,OAAO;IACT,CAAC;IAED,2EAA2E;IAE3E,OAAO,CAAC,8CAA8C,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;IAExE,IAAI,CAAC;QACH,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAExC,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;QAEhF,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,sBAAsB,EAAE,CAAC;YACzB,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,UAAU,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC,CAAC;YACrF,CAAC;iBAAM,CAAC;gBACN,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;gBAC/C,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,mBAAmB,CAAC,YAAY,CAAC,6BAA6B,CAAC,CAAC;YACvF,CAAC;YACD,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,4CAA4C,MAAM,CAAC,KAAK,EAAE,CAAC;QAE5E,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC;gBACT,MAAM,EAAE,WAAW;gBACnB,QAAQ;gBACR,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,SAAS,EAAE,IAAI;gBACf,IAAI,EAAE,mFAAmF;aAC1F,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,EAAE,EAAE,CAAC;YACf,aAAa,CAAC;gBACZ,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,8DAA8D;gBACvE,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;QACjG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,iDAAiD,QAAQ,EAAE,CAAC,CAAC;QAEzE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtC,IAAI,WAAW,EAAE,EAAE,CAAC;gBAClB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;YAC9F,CAAC;iBAAM,CAAC;gBACN,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,kBAAkB,CAAC,gBAAgB,EAAE,SAAS,EAAE;gBAC9C,SAAS,EAAE,MAAM;gBACjB,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,2BAA2B;aACnC,CAAC,CAAC;YACH,QAAQ,CAAC,iCAAiC,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YAChH,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACvE,CAAC;QAED,4BAA4B;QAC5B,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAEtC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,mBAAmB,GAAG,CAAC,CAAC;QAE5B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,eAAe,EAAE,CAAC;YAChD,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC9B,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;gBAC/E,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;oBACzB,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;oBACrC,sBAAsB,EAAE,CAAC;oBACzB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,mBAAmB,CAAC,YAAY,CAAC,6BAA6B,CAAC,CAAC;oBACrF,OAAO;gBACT,CAAC;gBACD,mBAAmB,GAAG,CAAC,CAAC;YAC1B,CAAC;YAAC,OAAO,SAAS,EAAE,CAAC;gBACnB,MAAM,UAAU,GAAG,SAAS,YAAY,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;gBAChG,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;oBACvB,kEAAkE;oBAClE,+DAA+D;oBAC/D,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;oBACnD,sBAAsB,EAAE,CAAC;oBACzB,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,mBAAmB,CAAC,YAAY,CAAC,gCAAgC,CAAC,CAAC;oBACxF,OAAO;gBACT,CAAC;gBACD,mBAAmB,EAAE,CAAC;gBACtB,QAAQ,CAAC,qBAAqB,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBAC5F,IAAI,mBAAmB,IAAI,wBAAwB,EAAE,CAAC;oBACpD,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;oBAC7C,EAAE,CAAC,GAAG,CAAC,KAAK,CACV,kBAAkB,mBAAmB,sDAAsD;wBACzF,uCAAuC,QAAQ,EAAE,CACpD,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,IAAI,mBAAmB,IAAI,CAAC,EAAE,CAAC;oBAC7B,OAAO,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,kDAAkD,mBAAmB,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAChH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACzE,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACpC,aAAa,CAAC;YACZ,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,qCAAqC,OAAO,EAAE;YACvD,QAAQ,EAAE,oBAAoB,CAAC,EAAE,OAAO,EAAE,mBAAmB,CAAC,WAAW,CAAC,EAAE,CAAC;SAC9E,CAAC,CAAC;IACL,CAAC;AACH,CAAC","sourcesContent":["/**\n * `workos env claim` — claim an unclaimed environment.\n *\n * Reads claim token from active environment, generates a nonce via\n * createClaimNonce(), opens browser to dashboard claim URL, and polls\n * until the environment is claimed.\n */\n\nimport open from 'open';\nimport ui from '../utils/ui.js';\nimport { getActiveEnvironment, isUnclaimedEnvironment, markEnvironmentClaimed } from '../lib/config-store.js';\nimport { createClaimNonce, UnclaimedEnvApiError } from '../lib/unclaimed-env-api.js';\nimport { observeHostFailure } from '../lib/host-probe.js';\nimport { logInfo, logError } from '../utils/debug.js';\nimport { isJsonMode, outputJson, exitWithError } from '../utils/output.js';\nimport { isAgentMode, isCiMode } from '../utils/interaction-mode.js';\nimport { sleep } from '../lib/helper-functions.js';\nimport { formatWorkOSCommand } from '../utils/command-invocation.js';\nimport { networkRetryRecovery } from '../utils/recovery-hints.js';\n\nconst POLL_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes\nconst POLL_INTERVAL_MS = 5_000; // 5 seconds\nconst MAX_CONSECUTIVE_FAILURES = 10;\n\n/**\n * Run the claim flow.\n */\nexport async function runClaim(): Promise<void> {\n  const activeEnv = getActiveEnvironment();\n\n  if (!activeEnv || !isUnclaimedEnvironment(activeEnv)) {\n    if (isJsonMode()) {\n      outputJson({ status: 'no_unclaimed_environment', message: 'No unclaimed environment found. Nothing to claim.' });\n    } else {\n      ui.log.info('No unclaimed environment found. Nothing to claim.');\n    }\n    return;\n  }\n\n  // claimToken and clientId guaranteed present by UnclaimedEnvironmentConfig\n\n  logInfo('[claim] Starting claim flow for environment:', activeEnv.name);\n\n  try {\n    ui.log.step('Generating claim link...');\n\n    const result = await createClaimNonce(activeEnv.clientId, activeEnv.claimToken);\n\n    if (result.alreadyClaimed) {\n      markEnvironmentClaimed();\n      if (isJsonMode()) {\n        outputJson({ status: 'already_claimed', message: 'Environment already claimed!' });\n      } else {\n        ui.log.success('Environment already claimed!');\n        ui.log.info(`Run \\`${formatWorkOSCommand('auth login')}\\` to connect your account.`);\n      }\n      return;\n    }\n\n    const claimUrl = `https://dashboard.workos.com/claim?nonce=${result.nonce}`;\n\n    if (isJsonMode()) {\n      outputJson({\n        status: 'claim_url',\n        claimUrl,\n        nonce: result.nonce,\n        permanent: true,\n        note: 'Claiming permanently links this environment to your account and cannot be undone.',\n      });\n      return;\n    }\n\n    if (isCiMode()) {\n      exitWithError({\n        code: 'unsupported_in_ci',\n        message: 'Environment claim requires opening the claim URL outside CI.',\n        details: { claimUrl, nonce: result.nonce },\n      });\n    }\n\n    ui.log.warn('Claiming permanently links this environment to your account and cannot be undone.');\n    ui.log.info(`Open this URL to claim your environment:\\n\\n  ${claimUrl}`);\n\n    try {\n      await open(claimUrl, { wait: false });\n      if (isAgentMode()) {\n        ui.log.info('Browser launch attempted. If it did not open on the host, use the URL above.');\n      } else {\n        ui.log.info('Browser opened automatically');\n      }\n    } catch (openError) {\n      observeHostFailure('browser-launch', openError, {\n        operation: 'open',\n        target: claimUrl,\n        label: 'environment claim browser',\n      });\n      logError('[claim] Failed to open browser:', openError instanceof Error ? openError.message : String(openError));\n      ui.log.info('Could not open browser — open the URL above manually.');\n    }\n\n    // Poll for claim completion\n    const spinner = ui.spinner();\n    spinner.start('Waiting for claim...');\n\n    const startTime = Date.now();\n    let consecutiveFailures = 0;\n\n    while (Date.now() - startTime < POLL_TIMEOUT_MS) {\n      await sleep(POLL_INTERVAL_MS);\n      try {\n        const check = await createClaimNonce(activeEnv.clientId, activeEnv.claimToken);\n        if (check.alreadyClaimed) {\n          spinner.stop('Environment claimed!');\n          markEnvironmentClaimed();\n          ui.log.info(`Run \\`${formatWorkOSCommand('auth login')}\\` to connect your account.`);\n          return;\n        }\n        consecutiveFailures = 0;\n      } catch (pollError) {\n        const statusCode = pollError instanceof UnclaimedEnvApiError ? pollError.statusCode : undefined;\n        if (statusCode === 401) {\n          // 401 means the server invalidated the claim token — this happens\n          // when the environment is claimed. Safe to promote to sandbox.\n          spinner.stop('Claim token is invalid or expired.');\n          markEnvironmentClaimed();\n          ui.log.warn(`Run \\`${formatWorkOSCommand('auth login')}\\` to set up your environment.`);\n          return;\n        }\n        consecutiveFailures++;\n        logError('[claim] Poll error:', pollError instanceof Error ? pollError.message : 'Unknown');\n        if (consecutiveFailures >= MAX_CONSECUTIVE_FAILURES) {\n          spinner.stop('Too many connection failures');\n          ui.log.error(\n            `Polling failed ${consecutiveFailures} times in a row. Check your network and try again.\\n` +\n              `You can also complete the claim at: ${claimUrl}`,\n          );\n          return;\n        }\n        if (consecutiveFailures >= 3) {\n          spinner.message('Still waiting... (connection issues detected)');\n        }\n      }\n    }\n\n    spinner.stop('Claim timed out');\n    ui.log.info(`Complete the claim in your browser, then run \\`${formatWorkOSCommand('env list')}\\` to verify.`);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : 'Unknown error';\n    logError('[claim] Error:', message);\n    exitWithError({\n      code: 'claim_failed',\n      message: `Could not claim this environment: ${message}`,\n      recovery: networkRetryRecovery({ command: formatWorkOSCommand('env claim') }),\n    });\n  }\n}\n"]}

package/dist/commands/config.d.ts

@@ -1,3 +0,0 @@
-export declare function runConfigRedirectAdd(uri: string, apiKey: string, baseUrl?: string): Promise<void>;
-export declare function runConfigCorsAdd(origin: string, apiKey: string, baseUrl?: string): Promise<void>;
-export declare function runConfigHomepageUrlSet(url: string, apiKey: string, baseUrl?: string): Promise<void>;

package/dist/commands/config.js

@@ -1,54 +0,0 @@
-import chalk from 'chalk';
-import { createWorkOSClient } from '../lib/workos-client.js';
-import { outputSuccess, isJsonMode } from '../utils/output.js';
-import { createApiErrorHandler } from '../lib/api-error-handler.js';
-const handleApiError = createApiErrorHandler('Config');
-export async function runConfigRedirectAdd(uri, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        const result = await client.redirectUris.add(uri);
-        if (result.alreadyExists) {
-            if (isJsonMode()) {
-                outputSuccess('Redirect URI already exists', { uri, alreadyExists: true });
-            }
-            else {
-                console.log(chalk.yellow('Redirect URI already exists (no change)'));
-            }
-            return;
-        }
-        outputSuccess('Added redirect URI', { uri });
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-export async function runConfigCorsAdd(origin, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        const result = await client.corsOrigins.add(origin);
-        if (result.alreadyExists) {
-            if (isJsonMode()) {
-                outputSuccess('CORS origin already exists', { origin, alreadyExists: true });
-            }
-            else {
-                console.log(chalk.yellow('CORS origin already exists (no change)'));
-            }
-            return;
-        }
-        outputSuccess('Added CORS origin', { origin });
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-export async function runConfigHomepageUrlSet(url, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        await client.homepageUrl.set(url);
-        outputSuccess('Set homepage URL', { url });
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-//# sourceMappingURL=config.js.map

package/dist/commands/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;AAEvD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAW,EAAE,MAAc,EAAE,OAAgB;IACtF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,aAAa,CAAC,6BAA6B,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAC;YACvE,CAAC;YACD,OAAO;QACT,CAAC;QAED,aAAa,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAc,EAAE,OAAgB;IACrF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEpD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,aAAa,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAAC,CAAC;YACtE,CAAC;YACD,OAAO;QACT,CAAC;QAED,aAAa,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAW,EAAE,MAAc,EAAE,OAAgB;IACzF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,aAAa,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC","sourcesContent":["import chalk from 'chalk';\nimport { createWorkOSClient } from '../lib/workos-client.js';\nimport { outputSuccess, isJsonMode } from '../utils/output.js';\nimport { createApiErrorHandler } from '../lib/api-error-handler.js';\n\nconst handleApiError = createApiErrorHandler('Config');\n\nexport async function runConfigRedirectAdd(uri: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const result = await client.redirectUris.add(uri);\n\n    if (result.alreadyExists) {\n      if (isJsonMode()) {\n        outputSuccess('Redirect URI already exists', { uri, alreadyExists: true });\n      } else {\n        console.log(chalk.yellow('Redirect URI already exists (no change)'));\n      }\n      return;\n    }\n\n    outputSuccess('Added redirect URI', { uri });\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\nexport async function runConfigCorsAdd(origin: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const result = await client.corsOrigins.add(origin);\n\n    if (result.alreadyExists) {\n      if (isJsonMode()) {\n        outputSuccess('CORS origin already exists', { origin, alreadyExists: true });\n      } else {\n        console.log(chalk.yellow('CORS origin already exists (no change)'));\n      }\n      return;\n    }\n\n    outputSuccess('Added CORS origin', { origin });\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\nexport async function runConfigHomepageUrlSet(url: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    await client.homepageUrl.set(url);\n    outputSuccess('Set homepage URL', { url });\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n"]}

package/dist/commands/connection.d.ts

@@ -1,13 +0,0 @@
-export interface ConnectionListOptions {
-    organizationId?: string;
-    connectionType?: string;
-    limit?: number;
-    before?: string;
-    after?: string;
-    order?: string;
-}
-export declare function runConnectionList(options: ConnectionListOptions, apiKey: string, baseUrl?: string): Promise<void>;
-export declare function runConnectionGet(id: string, apiKey: string, baseUrl?: string): Promise<void>;
-export declare function runConnectionDelete(id: string, options: {
-    force?: boolean;
-}, apiKey: string, baseUrl?: string): Promise<void>;

package/dist/commands/connection.js

@@ -1,96 +0,0 @@
-import chalk from 'chalk';
-import { createWorkOSClient } from '../lib/workos-client.js';
-import { formatTable } from '../utils/table.js';
-import { outputSuccess, outputJson, isJsonMode, exitWithError } from '../utils/output.js';
-import { createApiErrorHandler } from '../lib/api-error-handler.js';
-import { isCiMode, isPromptAllowed } from '../utils/interaction-mode.js';
-import ui from '../utils/ui.js';
-const handleApiError = createApiErrorHandler('Connection');
-export async function runConnectionList(options, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        const result = await client.sdk.sso.listConnections({
-            ...(options.organizationId && { organizationId: options.organizationId }),
-            ...(options.connectionType && { connectionType: options.connectionType }),
-            limit: options.limit,
-            before: options.before,
-            after: options.after,
-            order: options.order,
-        });
-        if (isJsonMode()) {
-            outputJson({ data: result.data, listMetadata: result.listMetadata });
-            return;
-        }
-        if (result.data.length === 0) {
-            console.log('No connections found.');
-            return;
-        }
-        const rows = result.data.map((conn) => [
-            conn.id,
-            conn.name,
-            conn.type,
-            conn.organizationId || chalk.dim('-'),
-            conn.state,
-            conn.createdAt,
-        ]);
-        console.log(formatTable([
-            { header: 'ID' },
-            { header: 'Name' },
-            { header: 'Type' },
-            { header: 'Org ID' },
-            { header: 'State' },
-            { header: 'Created' },
-        ], rows));
-        const { before, after } = result.listMetadata;
-        if (before && after) {
-            console.log(chalk.dim(`Before: ${before}  After: ${after}`));
-        }
-        else if (before) {
-            console.log(chalk.dim(`Before: ${before}`));
-        }
-        else if (after) {
-            console.log(chalk.dim(`After: ${after}`));
-        }
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-export async function runConnectionGet(id, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        const connection = await client.sdk.sso.getConnection(id);
-        outputJson(connection);
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-export async function runConnectionDelete(id, options, apiKey, baseUrl) {
-    if (!options.force) {
-        if (!isPromptAllowed()) {
-            exitWithError({
-                code: 'confirmation_required',
-                message: isCiMode()
-                    ? 'Destructive operation requires --force flag in CI mode.'
-                    : 'Destructive operation requires --force flag in agent mode.',
-            });
-        }
-        const confirmed = await ui.confirm({
-            message: `Delete connection ${id}? This cannot be undone.`,
-        });
-        if (ui.isCancel(confirmed) || !confirmed) {
-            console.log('Delete cancelled.');
-            return;
-        }
-    }
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        await client.sdk.sso.deleteConnection(id);
-        outputSuccess('Deleted connection', { id });
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-//# sourceMappingURL=connection.js.map

package/dist/commands/connection.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../src/commands/connection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAEhC,MAAM,cAAc,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;AAW3D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAA8B,EAC9B,MAAc,EACd,OAAgB;IAEhB,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC;YAClD,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;YACzE,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,cAAgC,EAAE,CAAC;YAC3F,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAmC;SACnD,CAAC,CAAC;QAEH,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,EAAE;YACP,IAAI,CAAC,IAAI;YACT,IAAI,CAAC,IAAI;YACT,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YACrC,IAAI,CAAC,KAAK;YACV,IAAI,CAAC,SAAS;SACf,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CACT,WAAW,CACT;YACE,EAAE,MAAM,EAAE,IAAI,EAAE;YAChB,EAAE,MAAM,EAAE,MAAM,EAAE;YAClB,EAAE,MAAM,EAAE,MAAM,EAAE;YAClB,EAAE,MAAM,EAAE,QAAQ,EAAE;YACpB,EAAE,MAAM,EAAE,OAAO,EAAE;YACnB,EAAE,MAAM,EAAE,SAAS,EAAE;SACtB,EACD,IAAI,CACL,CACF,CAAC;QAEF,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC;QAC9C,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,MAAM,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAU,EAAE,MAAc,EAAE,OAAgB;IACjF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC1D,UAAU,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,EAAU,EACV,OAA4B,EAC5B,MAAc,EACd,OAAgB;IAEhB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YACvB,aAAa,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,QAAQ,EAAE;oBACjB,CAAC,CAAC,yDAAyD;oBAC3D,CAAC,CAAC,4DAA4D;aACjE,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YACjC,OAAO,EAAE,qBAAqB,EAAE,0BAA0B;SAC3D,CAAC,CAAC;QAEH,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC1C,aAAa,CAAC,oBAAoB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC","sourcesContent":["import chalk from 'chalk';\nimport type { ConnectionType } from '@workos-inc/node';\nimport { createWorkOSClient } from '../lib/workos-client.js';\nimport { formatTable } from '../utils/table.js';\nimport { outputSuccess, outputJson, isJsonMode, exitWithError } from '../utils/output.js';\nimport { createApiErrorHandler } from '../lib/api-error-handler.js';\nimport { isCiMode, isPromptAllowed } from '../utils/interaction-mode.js';\nimport ui from '../utils/ui.js';\n\nconst handleApiError = createApiErrorHandler('Connection');\n\nexport interface ConnectionListOptions {\n  organizationId?: string;\n  connectionType?: string;\n  limit?: number;\n  before?: string;\n  after?: string;\n  order?: string;\n}\n\nexport async function runConnectionList(\n  options: ConnectionListOptions,\n  apiKey: string,\n  baseUrl?: string,\n): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const result = await client.sdk.sso.listConnections({\n      ...(options.organizationId && { organizationId: options.organizationId }),\n      ...(options.connectionType && { connectionType: options.connectionType as ConnectionType }),\n      limit: options.limit,\n      before: options.before,\n      after: options.after,\n      order: options.order as 'asc' | 'desc' | undefined,\n    });\n\n    if (isJsonMode()) {\n      outputJson({ data: result.data, listMetadata: result.listMetadata });\n      return;\n    }\n\n    if (result.data.length === 0) {\n      console.log('No connections found.');\n      return;\n    }\n\n    const rows = result.data.map((conn) => [\n      conn.id,\n      conn.name,\n      conn.type,\n      conn.organizationId || chalk.dim('-'),\n      conn.state,\n      conn.createdAt,\n    ]);\n\n    console.log(\n      formatTable(\n        [\n          { header: 'ID' },\n          { header: 'Name' },\n          { header: 'Type' },\n          { header: 'Org ID' },\n          { header: 'State' },\n          { header: 'Created' },\n        ],\n        rows,\n      ),\n    );\n\n    const { before, after } = result.listMetadata;\n    if (before && after) {\n      console.log(chalk.dim(`Before: ${before}  After: ${after}`));\n    } else if (before) {\n      console.log(chalk.dim(`Before: ${before}`));\n    } else if (after) {\n      console.log(chalk.dim(`After: ${after}`));\n    }\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\nexport async function runConnectionGet(id: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const connection = await client.sdk.sso.getConnection(id);\n    outputJson(connection);\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\nexport async function runConnectionDelete(\n  id: string,\n  options: { force?: boolean },\n  apiKey: string,\n  baseUrl?: string,\n): Promise<void> {\n  if (!options.force) {\n    if (!isPromptAllowed()) {\n      exitWithError({\n        code: 'confirmation_required',\n        message: isCiMode()\n          ? 'Destructive operation requires --force flag in CI mode.'\n          : 'Destructive operation requires --force flag in agent mode.',\n      });\n    }\n\n    const confirmed = await ui.confirm({\n      message: `Delete connection ${id}? This cannot be undone.`,\n    });\n\n    if (ui.isCancel(confirmed) || !confirmed) {\n      console.log('Delete cancelled.');\n      return;\n    }\n  }\n\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    await client.sdk.sso.deleteConnection(id);\n    outputSuccess('Deleted connection', { id });\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n"]}

package/dist/commands/debug-sso.d.ts

@@ -1 +0,0 @@
-export declare function runDebugSso(connectionId: string, apiKey: string, baseUrl?: string): Promise<void>;

package/dist/commands/debug-sso.js

@@ -1,78 +0,0 @@
-import chalk from 'chalk';
-import { createWorkOSClient } from '../lib/workos-client.js';
-import { outputJson, isJsonMode } from '../utils/output.js';
-import { createApiErrorHandler } from '../lib/api-error-handler.js';
-const handleApiError = createApiErrorHandler('Connection');
-export async function runDebugSso(connectionId, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        // 1. Get connection details
-        const connection = await client.sdk.sso.getConnection(connectionId);
-        const issues = [];
-        // 2. Check for common issues
-        if (connection.state !== 'active') {
-            issues.push(`Connection is ${connection.state} (not active)`);
-        }
-        // 3. List recent authentication events
-        let recentEvents = [];
-        try {
-            const events = await client.sdk.events.listEvents({
-                events: [
-                    'authentication.email_verification_succeeded',
-                    'authentication.magic_auth_succeeded',
-                    'authentication.sso_succeeded',
-                ],
-                ...(connection.organizationId && { organizationId: connection.organizationId }),
-                limit: 5,
-            });
-            recentEvents = events.data.map((e) => ({ id: e.id, event: e.event, createdAt: e.createdAt }));
-        }
-        catch {
-            // Events may not be available
-        }
-        if (isJsonMode()) {
-            outputJson({
-                connection: {
-                    id: connection.id,
-                    name: connection.name,
-                    type: connection.type,
-                    state: connection.state,
-                    organizationId: connection.organizationId,
-                    createdAt: connection.createdAt,
-                },
-                recentEvents,
-                issues,
-            });
-            return;
-        }
-        // 4. Human-readable diagnosis
-        console.log(chalk.bold(`SSO Connection: ${connection.name}`));
-        console.log(`  ID: ${connection.id}`);
-        console.log(`  Type: ${connection.type}`);
-        console.log(`  State: ${connection.state === 'active' ? chalk.green('active') : chalk.yellow(connection.state)}`);
-        console.log(`  Organization: ${connection.organizationId || chalk.dim('none')}`);
-        console.log(`  Created: ${connection.createdAt}`);
-        if (recentEvents.length > 0) {
-            console.log(chalk.bold('\nRecent auth events:'));
-            for (const event of recentEvents) {
-                console.log(`  ${event.event} (${event.createdAt})`);
-            }
-        }
-        else {
-            console.log(chalk.dim('\nNo recent authentication events found.'));
-        }
-        if (issues.length > 0) {
-            console.log(chalk.bold('\nIssues found:'));
-            for (const issue of issues) {
-                console.log(chalk.yellow(`  ⚠ ${issue}`));
-            }
-        }
-        else {
-            console.log(chalk.green('\nNo issues detected.'));
-        }
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-//# sourceMappingURL=debug-sso.js.map

package/dist/commands/debug-sso.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"debug-sso.js","sourceRoot":"","sources":["../../src/commands/debug-sso.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;AAE3D,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,YAAoB,EAAE,MAAc,EAAE,OAAgB;IACtF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,4BAA4B;QAC5B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAEpE,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,6BAA6B;QAC7B,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,iBAAiB,UAAU,CAAC,KAAK,eAAe,CAAC,CAAC;QAChE,CAAC;QAED,uCAAuC;QACvC,IAAI,YAAY,GAA4D,EAAE,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;gBAChD,MAAM,EAAE;oBACN,6CAA6C;oBAC7C,qCAAqC;oBACrC,8BAA8B;iBAChB;gBAChB,GAAG,CAAC,UAAU,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,UAAU,CAAC,cAAc,EAAE,CAAC;gBAC/E,KAAK,EAAE,CAAC;aACT,CAAC,CAAC;YACH,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;QAED,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC;gBACT,UAAU,EAAE;oBACV,EAAE,EAAE,UAAU,CAAC,EAAE;oBACjB,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,cAAc,EAAE,UAAU,CAAC,cAAc;oBACzC,SAAS,EAAE,UAAU,CAAC,SAAS;iBAChC;gBACD,YAAY;gBACZ,MAAM;aACP,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,SAAS,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,YAAY,UAAU,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClH,OAAO,CAAC,GAAG,CAAC,mBAAmB,UAAU,CAAC,cAAc,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC;QAElD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACjD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC","sourcesContent":["import chalk from 'chalk';\nimport type { EventName } from '@workos-inc/node';\nimport { createWorkOSClient } from '../lib/workos-client.js';\nimport { outputJson, isJsonMode } from '../utils/output.js';\nimport { createApiErrorHandler } from '../lib/api-error-handler.js';\n\nconst handleApiError = createApiErrorHandler('Connection');\n\nexport async function runDebugSso(connectionId: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    // 1. Get connection details\n    const connection = await client.sdk.sso.getConnection(connectionId);\n\n    const issues: string[] = [];\n\n    // 2. Check for common issues\n    if (connection.state !== 'active') {\n      issues.push(`Connection is ${connection.state} (not active)`);\n    }\n\n    // 3. List recent authentication events\n    let recentEvents: Array<{ id: string; event: string; createdAt: string }> = [];\n    try {\n      const events = await client.sdk.events.listEvents({\n        events: [\n          'authentication.email_verification_succeeded',\n          'authentication.magic_auth_succeeded',\n          'authentication.sso_succeeded',\n        ] as EventName[],\n        ...(connection.organizationId && { organizationId: connection.organizationId }),\n        limit: 5,\n      });\n      recentEvents = events.data.map((e) => ({ id: e.id, event: e.event, createdAt: e.createdAt }));\n    } catch {\n      // Events may not be available\n    }\n\n    if (isJsonMode()) {\n      outputJson({\n        connection: {\n          id: connection.id,\n          name: connection.name,\n          type: connection.type,\n          state: connection.state,\n          organizationId: connection.organizationId,\n          createdAt: connection.createdAt,\n        },\n        recentEvents,\n        issues,\n      });\n      return;\n    }\n\n    // 4. Human-readable diagnosis\n    console.log(chalk.bold(`SSO Connection: ${connection.name}`));\n    console.log(`  ID: ${connection.id}`);\n    console.log(`  Type: ${connection.type}`);\n    console.log(`  State: ${connection.state === 'active' ? chalk.green('active') : chalk.yellow(connection.state)}`);\n    console.log(`  Organization: ${connection.organizationId || chalk.dim('none')}`);\n    console.log(`  Created: ${connection.createdAt}`);\n\n    if (recentEvents.length > 0) {\n      console.log(chalk.bold('\\nRecent auth events:'));\n      for (const event of recentEvents) {\n        console.log(`  ${event.event} (${event.createdAt})`);\n      }\n    } else {\n      console.log(chalk.dim('\\nNo recent authentication events found.'));\n    }\n\n    if (issues.length > 0) {\n      console.log(chalk.bold('\\nIssues found:'));\n      for (const issue of issues) {\n        console.log(chalk.yellow(`  ⚠ ${issue}`));\n      }\n    } else {\n      console.log(chalk.green('\\nNo issues detected.'));\n    }\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n"]}

package/dist/commands/debug-sync.d.ts

@@ -1 +0,0 @@
-export declare function runDebugSync(directoryId: string, apiKey: string, baseUrl?: string): Promise<void>;

package/dist/commands/debug-sync.js

@@ -1,102 +0,0 @@
-import chalk from 'chalk';
-import { createWorkOSClient } from '../lib/workos-client.js';
-import { outputJson, isJsonMode } from '../utils/output.js';
-import { createApiErrorHandler } from '../lib/api-error-handler.js';
-const handleApiError = createApiErrorHandler('Directory');
-export async function runDebugSync(directoryId, apiKey, baseUrl) {
-    const client = createWorkOSClient(apiKey, baseUrl);
-    try {
-        // 1. Get directory details
-        const directory = await client.sdk.directorySync.getDirectory(directoryId);
-        const issues = [];
-        // 2. Check state
-        if (String(directory.state) !== 'linked') {
-            issues.push(`Directory is ${directory.state} (not linked)`);
-        }
-        // 3. Count users and groups
-        let userCount = 0;
-        let groupCount = 0;
-        try {
-            const users = await client.sdk.directorySync.listUsers({ directory: directoryId, limit: 1 });
-            userCount = users.data.length;
-            // If there's pagination, there are more
-            if (users.listMetadata.after)
-                userCount = -1; // indicates "more than 1"
-        }
-        catch {
-            // May not have access
-        }
-        try {
-            const groups = await client.sdk.directorySync.listGroups({ directory: directoryId, limit: 1 });
-            groupCount = groups.data.length;
-            if (groups.listMetadata.after)
-                groupCount = -1;
-        }
-        catch {
-            // May not have access
-        }
-        // 4. List recent sync events
-        let recentEvents = [];
-        try {
-            const events = await client.sdk.events.listEvents({
-                events: ['dsync.user.created', 'dsync.user.updated', 'dsync.group.created'],
-                ...(directory.organizationId && { organizationId: directory.organizationId }),
-                limit: 5,
-            });
-            recentEvents = events.data.map((e) => ({ id: e.id, event: e.event, createdAt: e.createdAt }));
-        }
-        catch {
-            // Events may not be available
-        }
-        if (recentEvents.length === 0) {
-            issues.push('No recent sync events found — sync may be stalled');
-        }
-        if (isJsonMode()) {
-            outputJson({
-                directory: {
-                    id: directory.id,
-                    name: directory.name,
-                    type: directory.type,
-                    state: directory.state,
-                    organizationId: directory.organizationId,
-                    createdAt: directory.createdAt,
-                },
-                userCount: userCount === -1 ? '1+' : userCount,
-                groupCount: groupCount === -1 ? '1+' : groupCount,
-                recentEvents,
-                issues,
-            });
-            return;
-        }
-        // 5. Human-readable diagnosis
-        console.log(chalk.bold(`Directory Sync: ${directory.name}`));
-        console.log(`  ID: ${directory.id}`);
-        console.log(`  Type: ${directory.type}`);
-        console.log(`  State: ${String(directory.state) === 'linked' ? chalk.green('linked') : chalk.yellow(directory.state)}`);
-        console.log(`  Organization: ${directory.organizationId || chalk.dim('none')}`);
-        console.log(`  Users: ${userCount === -1 ? '1+' : userCount}`);
-        console.log(`  Groups: ${groupCount === -1 ? '1+' : groupCount}`);
-        if (recentEvents.length > 0) {
-            console.log(chalk.bold('\nRecent sync events:'));
-            for (const event of recentEvents) {
-                console.log(`  ${event.event} (${event.createdAt})`);
-            }
-        }
-        else {
-            console.log(chalk.dim('\nNo recent sync events found.'));
-        }
-        if (issues.length > 0) {
-            console.log(chalk.bold('\nIssues found:'));
-            for (const issue of issues) {
-                console.log(chalk.yellow(`  ⚠ ${issue}`));
-            }
-        }
-        else {
-            console.log(chalk.green('\nNo issues detected.'));
-        }
-    }
-    catch (error) {
-        handleApiError(error);
-    }
-}
-//# sourceMappingURL=debug-sync.js.map

package/dist/commands/debug-sync.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"debug-sync.js","sourceRoot":"","sources":["../../src/commands/debug-sync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,WAAmB,EAAE,MAAc,EAAE,OAAgB;IACtF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,2BAA2B;QAC3B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAE3E,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,iBAAiB;QACjB,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,gBAAgB,SAAS,CAAC,KAAK,eAAe,CAAC,CAAC;QAC9D,CAAC;QAED,4BAA4B;QAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAC7F,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YAC9B,wCAAwC;YACxC,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK;gBAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,0BAA0B;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/F,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAChC,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK;gBAAE,UAAU,GAAG,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;QAED,6BAA6B;QAC7B,IAAI,YAAY,GAA4D,EAAE,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;gBAChD,MAAM,EAAE,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,qBAAqB,CAAgB;gBAC1F,GAAG,CAAC,SAAS,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC;gBAC7E,KAAK,EAAE,CAAC;aACT,CAAC,CAAC;YACH,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC;gBACT,SAAS,EAAE;oBACT,EAAE,EAAE,SAAS,CAAC,EAAE;oBAChB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,KAAK,EAAE,SAAS,CAAC,KAAK;oBACtB,cAAc,EAAE,SAAS,CAAC,cAAc;oBACxC,SAAS,EAAE,SAAS,CAAC,SAAS;iBAC/B;gBACD,SAAS,EAAE,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;gBAC9C,UAAU,EAAE,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;gBACjD,YAAY;gBACZ,MAAM;aACP,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,SAAS,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,WAAW,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CACT,YAAY,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAC3G,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,mBAAmB,SAAS,CAAC,cAAc,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,GAAG,CAAC,YAAY,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,aAAa,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAElE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACjD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC","sourcesContent":["import chalk from 'chalk';\nimport type { EventName } from '@workos-inc/node';\nimport { createWorkOSClient } from '../lib/workos-client.js';\nimport { outputJson, isJsonMode } from '../utils/output.js';\nimport { createApiErrorHandler } from '../lib/api-error-handler.js';\n\nconst handleApiError = createApiErrorHandler('Directory');\n\nexport async function runDebugSync(directoryId: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    // 1. Get directory details\n    const directory = await client.sdk.directorySync.getDirectory(directoryId);\n\n    const issues: string[] = [];\n\n    // 2. Check state\n    if (String(directory.state) !== 'linked') {\n      issues.push(`Directory is ${directory.state} (not linked)`);\n    }\n\n    // 3. Count users and groups\n    let userCount = 0;\n    let groupCount = 0;\n    try {\n      const users = await client.sdk.directorySync.listUsers({ directory: directoryId, limit: 1 });\n      userCount = users.data.length;\n      // If there's pagination, there are more\n      if (users.listMetadata.after) userCount = -1; // indicates \"more than 1\"\n    } catch {\n      // May not have access\n    }\n\n    try {\n      const groups = await client.sdk.directorySync.listGroups({ directory: directoryId, limit: 1 });\n      groupCount = groups.data.length;\n      if (groups.listMetadata.after) groupCount = -1;\n    } catch {\n      // May not have access\n    }\n\n    // 4. List recent sync events\n    let recentEvents: Array<{ id: string; event: string; createdAt: string }> = [];\n    try {\n      const events = await client.sdk.events.listEvents({\n        events: ['dsync.user.created', 'dsync.user.updated', 'dsync.group.created'] as EventName[],\n        ...(directory.organizationId && { organizationId: directory.organizationId }),\n        limit: 5,\n      });\n      recentEvents = events.data.map((e) => ({ id: e.id, event: e.event, createdAt: e.createdAt }));\n    } catch {\n      // Events may not be available\n    }\n\n    if (recentEvents.length === 0) {\n      issues.push('No recent sync events found — sync may be stalled');\n    }\n\n    if (isJsonMode()) {\n      outputJson({\n        directory: {\n          id: directory.id,\n          name: directory.name,\n          type: directory.type,\n          state: directory.state,\n          organizationId: directory.organizationId,\n          createdAt: directory.createdAt,\n        },\n        userCount: userCount === -1 ? '1+' : userCount,\n        groupCount: groupCount === -1 ? '1+' : groupCount,\n        recentEvents,\n        issues,\n      });\n      return;\n    }\n\n    // 5. Human-readable diagnosis\n    console.log(chalk.bold(`Directory Sync: ${directory.name}`));\n    console.log(`  ID: ${directory.id}`);\n    console.log(`  Type: ${directory.type}`);\n    console.log(\n      `  State: ${String(directory.state) === 'linked' ? chalk.green('linked') : chalk.yellow(directory.state)}`,\n    );\n    console.log(`  Organization: ${directory.organizationId || chalk.dim('none')}`);\n    console.log(`  Users: ${userCount === -1 ? '1+' : userCount}`);\n    console.log(`  Groups: ${groupCount === -1 ? '1+' : groupCount}`);\n\n    if (recentEvents.length > 0) {\n      console.log(chalk.bold('\\nRecent sync events:'));\n      for (const event of recentEvents) {\n        console.log(`  ${event.event} (${event.createdAt})`);\n      }\n    } else {\n      console.log(chalk.dim('\\nNo recent sync events found.'));\n    }\n\n    if (issues.length > 0) {\n      console.log(chalk.bold('\\nIssues found:'));\n      for (const issue of issues) {\n        console.log(chalk.yellow(`  ⚠ ${issue}`));\n      }\n    } else {\n      console.log(chalk.green('\\nNo issues detected.'));\n    }\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n"]}

package/dist/commands/debug.d.ts

@@ -1,28 +0,0 @@
-export declare function runDebugState({ showSecrets }: {
-    showSecrets: boolean;
-}): Promise<void>;
-export declare function runDebugReset({ force, credentialsOnly, configOnly, }: {
-    force: boolean;
-    credentialsOnly: boolean;
-    configOnly: boolean;
-}): Promise<void>;
-export declare function runDebugSimulate({ expiredToken, noKeyring, unclaimed, noAuth, crash, }: {
-    expiredToken: boolean;
-    noKeyring: boolean;
-    unclaimed: boolean;
-    noAuth: boolean;
-    crash?: boolean;
-}): Promise<void>;
-/**
- * Catalog of WORKOS_-prefixed environment variables the CLI reads.
- *
- * This is the single source of truth for `workos debug env`. A unit test
- * (env-var-catalog.spec.ts) scans the source for `process.env.WORKOS_*` reads
- * and fails if any are missing here, so this list can't silently drift.
- */
-export declare const ENV_VAR_CATALOG: {
-    name: string;
-    effect: string;
-}[];
-export declare function runDebugEnv(): Promise<void>;
-export declare function runDebugToken(): Promise<void>;