workos 0.19.0 → 0.20.2

package/dist/commands/debug.js

@@ -1,406 +0,0 @@
-import chalk from 'chalk';
-import ui from '../utils/ui.js';
-import { getCredentials, saveCredentials, clearCredentials, isTokenExpired, diagnoseCredentials, getCredentialsPath, setInsecureStorage, } from '../lib/credentials.js';
-import { getConfig, saveConfig, clearConfig, getConfigPath, setInsecureConfigStorage, diagnoseConfig, } from '../lib/config-store.js';
-import { clearPreferences, getPreferencesPath, getTelemetrySource, isNoticeShown, isTelemetryEnabled, isTelemetryOptedOut, } from '../lib/preferences.js';
-import { isJsonMode, outputJson, exitWithError } from '../utils/output.js';
-import { isPromptAllowed } from '../utils/interaction-mode.js';
-function maskSecret(value) {
-    if (!value)
-        return undefined;
-    if (value.length <= 8)
-        return '****';
-    return value.slice(0, 4) + '****' + value.slice(-4);
-}
-function formatTimeRemaining(ms) {
-    if (ms <= 0)
-        return 'expired';
-    const seconds = Math.floor(ms / 1000);
-    const minutes = Math.floor(seconds / 60);
-    const hours = Math.floor(minutes / 60);
-    if (hours > 0)
-        return `${hours}h ${minutes % 60}m`;
-    if (minutes > 0)
-        return `${minutes}m ${seconds % 60}s`;
-    return `${seconds}s`;
-}
-function parseJwt(token) {
-    try {
-        const parts = token.split('.');
-        if (parts.length !== 3)
-            return null;
-        return JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf-8'));
-    }
-    catch {
-        return null;
-    }
-}
-function determineCredentialSource(diagnostics) {
-    const hasKeyring = diagnostics.some((l) => l.startsWith('keyring: found'));
-    const hasFile = diagnostics.some((l) => l.includes('exists=true'));
-    const isInsecure = diagnostics.some((l) => l.includes('insecureStorage=true'));
-    if (isInsecure)
-        return hasFile ? 'file' : 'none';
-    if (hasKeyring)
-        return 'keyring';
-    if (hasFile)
-        return 'file';
-    return 'none';
-}
-// --- debug state ---
-export async function runDebugState({ showSecrets }) {
-    const creds = getCredentials();
-    const config = getConfig();
-    const diagnostics = diagnoseCredentials();
-    const credSource = determineCredentialSource(diagnostics);
-    const maybeRedact = showSecrets ? (v) => v : maskSecret;
-    const credentialsOutput = { present: !!creds, source: credSource };
-    if (creds) {
-        const timeRemaining = creds.expiresAt - Date.now();
-        const expired = isTokenExpired(creds);
-        Object.assign(credentialsOutput, {
-            userId: creds.userId,
-            email: creds.email ?? null,
-            accessToken: maybeRedact(creds.accessToken),
-            refreshToken: creds.refreshToken ? 'present' : 'absent',
-            expiresAt: creds.expiresAt,
-            expiresIn: expired
-                ? `expired ${formatTimeRemaining(-timeRemaining)} ago`
-                : `in ${formatTimeRemaining(timeRemaining)}`,
-            isExpired: expired,
-        });
-        if (creds.staging) {
-            credentialsOutput.staging = {
-                clientId: creds.staging.clientId,
-                apiKey: maybeRedact(creds.staging.apiKey),
-                fetchedAt: creds.staging.fetchedAt,
-            };
-        }
-    }
-    const configOutput = { present: !!config };
-    if (config) {
-        configOutput.activeEnvironment = config.activeEnvironment ?? null;
-        configOutput.environments = Object.fromEntries(Object.entries(config.environments).map(([key, env]) => [
-            key,
-            {
-                name: env.name,
-                type: env.type,
-                apiKey: maybeRedact(env.apiKey),
-                clientId: env.clientId ?? null,
-                endpoint: env.endpoint ?? null,
-                ...(env.type === 'unclaimed' && { claimToken: maybeRedact(env.claimToken) }),
-            },
-        ]));
-    }
-    const configDiagnostics = diagnoseConfig();
-    const configSource = determineCredentialSource(configDiagnostics);
-    configOutput.source = configSource;
-    const telemetryOutput = {
-        enabled: isTelemetryEnabled(),
-        optedOut: isTelemetryOptedOut(),
-        source: getTelemetrySource(),
-        noticeShown: isNoticeShown(),
-    };
-    const result = {
-        credentials: credentialsOutput,
-        config: configOutput,
-        telemetry: telemetryOutput,
-        storage: {
-            credentialsPath: getCredentialsPath(),
-            configPath: getConfigPath(),
-            preferencesPath: getPreferencesPath(),
-            credentialDiagnostics: diagnostics,
-            configDiagnostics,
-        },
-    };
-    if (isJsonMode()) {
-        outputJson(result);
-        return;
-    }
-    console.log(chalk.bold('Credentials'));
-    console.log(`  present: ${creds ? chalk.green('true') : chalk.yellow('false')}`);
-    console.log(`  source:  ${credSource}`);
-    if (creds) {
-        console.log(`  userId:  ${creds.userId}`);
-        console.log(`  email:   ${creds.email ?? chalk.dim('none')}`);
-        console.log(`  token:   ${maybeRedact(creds.accessToken)}`);
-        console.log(`  refresh: ${creds.refreshToken ? 'present' : 'absent'}`);
-        const expired = isTokenExpired(creds);
-        const timeRemaining = creds.expiresAt - Date.now();
-        console.log(`  expires: ${expired ? chalk.red(`expired ${formatTimeRemaining(-timeRemaining)} ago`) : chalk.green(`in ${formatTimeRemaining(timeRemaining)}`)}`);
-        if (creds.staging) {
-            console.log(`  staging: clientId=${creds.staging.clientId} apiKey=${maybeRedact(creds.staging.apiKey)}`);
-        }
-    }
-    console.log();
-    console.log(chalk.bold('Config'));
-    console.log(`  present: ${config ? chalk.green('true') : chalk.yellow('false')}`);
-    console.log(`  source:  ${configSource}`);
-    if (config) {
-        console.log(`  active:  ${config.activeEnvironment ?? chalk.dim('none')}`);
-        for (const [key, env] of Object.entries(config.environments)) {
-            console.log(`  env[${key}]: type=${env.type} apiKey=${maybeRedact(env.apiKey)}`);
-            if (env.type === 'unclaimed')
-                console.log(`    claimToken=${maybeRedact(env.claimToken)}`);
-        }
-    }
-    console.log();
-    console.log(chalk.bold('Telemetry'));
-    console.log(`  enabled:  ${telemetryOutput.enabled ? chalk.green('true') : chalk.yellow('false')}`);
-    console.log(`  optedOut: ${telemetryOutput.optedOut ? chalk.yellow('true') : 'false'}`);
-    console.log(`  source:   ${telemetryOutput.source}`);
-    console.log(`  notice:   ${telemetryOutput.noticeShown ? 'shown' : chalk.dim('not shown')}`);
-    console.log();
-    console.log(chalk.bold('Storage — Credentials'));
-    console.log(`  path: ${getCredentialsPath()}`);
-    for (const line of diagnostics) {
-        console.log(`  ${chalk.dim(line)}`);
-    }
-    console.log();
-    console.log(chalk.bold('Storage — Config'));
-    console.log(`  path: ${getConfigPath()}`);
-    for (const line of configDiagnostics) {
-        console.log(`  ${chalk.dim(line)}`);
-    }
-    console.log();
-    console.log(chalk.bold('Storage — Preferences'));
-    console.log(`  path: ${getPreferencesPath()}`);
-}
-// --- debug reset ---
-/** Join names with an Oxford comma: ["a","b","c"] => "a, b, and c". */
-function formatList(items) {
-    if (items.length <= 1)
-        return items.join('');
-    if (items.length === 2)
-        return `${items[0]} and ${items[1]}`;
-    return `${items.slice(0, -1).join(', ')}, and ${items[items.length - 1]}`;
-}
-export async function runDebugReset({ force, credentialsOnly, configOnly, }) {
-    // Both flags = clear both (same as neither)
-    const clearCreds = !configOnly || credentialsOnly;
-    const clearConf = !credentialsOnly || configOnly;
-    // Preferences (~/.workos/preferences.json) are non-secret local CLI state, so
-    // they ride with the config target. Clearing config returns the CLI to a
-    // fresh-install state, which includes resetting the telemetry preference.
-    const clearPrefs = clearConf;
-    const targets = formatList([clearCreds && 'credentials', clearConf && 'config', clearPrefs && 'preferences'].filter(Boolean));
-    if (!force) {
-        if (!isPromptAllowed()) {
-            exitWithError({
-                code: 'non_interactive_reset',
-                message: 'Use --force to reset in agent or CI mode',
-            });
-        }
-        const confirmed = await ui.confirm({
-            message: `Clear all ${targets}? This cannot be undone.`,
-        });
-        if (ui.isCancel(confirmed) || !confirmed) {
-            if (isJsonMode()) {
-                outputJson({ cleared: false, cancelled: true });
-            }
-            else {
-                ui.log.info('Reset cancelled');
-            }
-            return;
-        }
-    }
-    if (clearCreds)
-        clearCredentials();
-    if (clearConf)
-        clearConfig();
-    if (clearPrefs)
-        clearPreferences();
-    if (isJsonMode()) {
-        outputJson({ cleared: true, credentials: clearCreds, config: clearConf, preferences: clearPrefs });
-    }
-    else {
-        ui.log.success(`Cleared ${targets}`);
-    }
-}
-// --- debug simulate ---
-export async function runDebugSimulate({ expiredToken, noKeyring, unclaimed, noAuth, crash = false, }) {
-    // Simulate an unexpected crash to exercise the crash-telemetry pipeline
-    // end-to-end. Throws a plain Error (not CliExit) so the bin.ts lifecycle
-    // records a `crash` event with a sanitized stack rather than a handled exit.
-    if (crash) {
-        throw new Error('Simulated crash for telemetry verification');
-    }
-    // Validate: at least one flag
-    if (!expiredToken && !noKeyring && !unclaimed && !noAuth) {
-        exitWithError({
-            code: 'no_simulation_flags',
-            message: 'Specify at least one simulation flag: --expired-token, --no-keyring, --unclaimed, --no-auth',
-        });
-    }
-    // Validate: contradictory
-    if (expiredToken && noAuth) {
-        exitWithError({
-            code: 'contradictory_flags',
-            message: "Cannot combine --expired-token and --no-auth (can't expire a cleared token)",
-        });
-    }
-    const actions = [];
-    // Apply in order: storage tier first, then credential mutations, then config mutations
-    if (noKeyring) {
-        // Migrate current state to file storage
-        const creds = getCredentials();
-        const config = getConfig();
-        setInsecureStorage(true);
-        setInsecureConfigStorage(true);
-        if (creds)
-            saveCredentials(creds);
-        if (config)
-            saveConfig(config);
-        actions.push('Forced file-only storage (keyring bypassed)');
-    }
-    if (expiredToken) {
-        const creds = getCredentials();
-        if (!creds) {
-            exitWithError({
-                code: 'no_credentials',
-                message: 'Cannot simulate expired token — no credentials found. Log in first.',
-            });
-        }
-        saveCredentials({ ...creds, expiresAt: Date.now() - 60_000 });
-        actions.push('Set token expiresAt to 1 minute ago');
-    }
-    if (noAuth) {
-        clearCredentials();
-        actions.push('Cleared credentials (config preserved)');
-    }
-    if (unclaimed) {
-        const config = getConfig() ?? { environments: {} };
-        const envName = 'simulated-unclaimed';
-        config.environments[envName] = {
-            name: envName,
-            type: 'unclaimed',
-            apiKey: 'sk_test_simulated_unclaimed_000000000000',
-            clientId: 'client_simulated',
-            claimToken: 'claim_simulated_token_000000000000',
-        };
-        config.activeEnvironment = envName;
-        saveConfig(config);
-        actions.push(`Created unclaimed environment "${envName}" and set as active`);
-    }
-    if (isJsonMode()) {
-        outputJson({ simulated: true, actions });
-    }
-    else {
-        for (const action of actions) {
-            ui.log.success(action);
-        }
-    }
-}
-/**
- * Catalog of WORKOS_-prefixed environment variables the CLI reads.
- *
- * This is the single source of truth for `workos debug env`. A unit test
- * (env-var-catalog.spec.ts) scans the source for `process.env.WORKOS_*` reads
- * and fails if any are missing here, so this list can't silently drift.
- */
-export const ENV_VAR_CATALOG = [
-    // Credentials
-    { name: 'WORKOS_API_KEY', effect: 'Bypasses credential resolution — used directly for API calls' },
-    { name: 'WORKOS_CLIENT_ID', effect: 'WorkOS client ID used during credential resolution' },
-    // Interaction & output
-    { name: 'WORKOS_MODE', effect: 'Controls interaction behavior: human, agent, or CI' },
-    { name: 'WORKOS_AGENT', effect: 'Set to "1" to force agent interaction mode' },
-    { name: 'WORKOS_FORCE_TTY', effect: 'Forces human (non-JSON) output mode, even when piped' },
-    { name: 'WORKOS_DEBUG', effect: 'Set to "1" to enable verbose debug logging for all commands' },
-    { name: 'WORKOS_TELEMETRY', effect: 'Set to "false" to disable telemetry' },
-    // URLs (WORKOS_API_URL is the single base; gateway + telemetry derive from it)
-    {
-        name: 'WORKOS_API_URL',
-        effect: 'Overrides API base URL; also reroutes the LLM gateway and CLI telemetry endpoints',
-    },
-    { name: 'WORKOS_DASHBOARD_URL', effect: 'Overrides dashboard URL (default: https://dashboard.workos.com)' },
-    { name: 'WORKOS_AUTHKIT_DOMAIN', effect: 'Overrides AuthKit domain from settings' },
-    { name: 'WORKOS_BASE_URL', effect: 'AuthKit base URL, read during doctor environment checks' },
-    { name: 'WORKOS_REDIRECT_URI', effect: 'OAuth redirect URI, read during doctor environment checks' },
-    { name: 'WORKOS_COOKIE_DOMAIN', effect: 'Session cookie domain, read during doctor environment checks' },
-    // Development
-    { name: 'WORKOS_DEV', effect: 'Enables dev mode — loads .env.local at startup' },
-    { name: 'WORKOS_DISABLE_PROXY', effect: 'Disables the credential proxy for gateway auth' },
-];
-export async function runDebugEnv() {
-    const vars = ENV_VAR_CATALOG.map(({ name, effect }) => ({
-        name,
-        value: process.env[name],
-        effect,
-    }));
-    const setVars = vars.filter((v) => v.value !== undefined);
-    const unsetVars = vars.filter((v) => v.value === undefined);
-    if (isJsonMode()) {
-        outputJson({
-            variables: Object.fromEntries(vars.map((v) => [v.name, { value: v.value ?? null, effect: v.effect }])),
-            set: setVars.map((v) => v.name),
-            unset: unsetVars.map((v) => v.name),
-        });
-        return;
-    }
-    if (setVars.length > 0) {
-        console.log(chalk.bold('Set'));
-        for (const v of setVars) {
-            console.log(`  ${chalk.green(v.name)}=${v.value}`);
-            console.log(`    ${chalk.dim(v.effect)}`);
-        }
-        console.log();
-    }
-    console.log(chalk.bold(`Unset${setVars.length > 0 ? '' : ' (none active)'}`));
-    for (const v of unsetVars) {
-        console.log(`  ${chalk.dim(v.name)} — ${chalk.dim(v.effect)}`);
-    }
-}
-// --- debug token ---
-export async function runDebugToken() {
-    const creds = getCredentials();
-    if (!creds) {
-        if (isJsonMode()) {
-            outputJson({ present: false });
-        }
-        else {
-            console.log(chalk.yellow('No credentials found'));
-        }
-        return;
-    }
-    const claims = parseJwt(creds.accessToken);
-    const expired = isTokenExpired(creds);
-    const timeRemaining = creds.expiresAt - Date.now();
-    if (isJsonMode()) {
-        outputJson({
-            present: true,
-            format: claims ? 'jwt' : 'opaque',
-            expired,
-            expiresAt: creds.expiresAt,
-            expiresIn: expired
-                ? `expired ${formatTimeRemaining(-timeRemaining)} ago`
-                : `in ${formatTimeRemaining(timeRemaining)}`,
-            claims: claims ?? null,
-            refreshToken: { present: !!creds.refreshToken },
-        });
-        return;
-    }
-    if (claims) {
-        console.log(chalk.bold('JWT Token'));
-        console.log(`  expires: ${expired ? chalk.red(`expired ${formatTimeRemaining(-timeRemaining)} ago`) : chalk.green(`in ${formatTimeRemaining(timeRemaining)}`)}`);
-        console.log();
-        console.log(chalk.bold('Claims'));
-        for (const [key, value] of Object.entries(claims)) {
-            if (key === 'exp' || key === 'iat' || key === 'nbf') {
-                const date = new Date(value * 1000).toISOString();
-                console.log(`  ${key}: ${value} (${date})`);
-            }
-            else {
-                console.log(`  ${key}: ${JSON.stringify(value)}`);
-            }
-        }
-    }
-    else {
-        console.log(chalk.bold('Opaque Token'));
-        console.log(chalk.dim('  Token is not a JWT — cannot decode claims'));
-        console.log(`  expires: ${expired ? chalk.red(`expired ${formatTimeRemaining(-timeRemaining)} ago`) : chalk.green(`in ${formatTimeRemaining(timeRemaining)}`)}`);
-    }
-    console.log();
-    console.log(`  refresh token: ${creds.refreshToken ? chalk.green('present') : chalk.yellow('absent')}`);
-}
-//# sourceMappingURL=debug.js.map

package/dist/commands/debug.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"debug.js","sourceRoot":"","sources":["../../src/commands/debug.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAChC,OAAO,EACL,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,SAAS,EACT,UAAU,EACV,WAAW,EACX,aAAa,EACb,wBAAwB,EACxB,cAAc,GACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAE/D,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,mBAAmB,CAAC,EAAU;IACrC,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACvC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,GAAG,KAAK,KAAK,OAAO,GAAG,EAAE,GAAG,CAAC;IACnD,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,GAAG,OAAO,KAAK,OAAO,GAAG,EAAE,GAAG,CAAC;IACvD,OAAO,GAAG,OAAO,GAAG,CAAC;AACvB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACpC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,WAAqB;IACtD,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAE/E,IAAI,UAAU;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,UAAU;QAAE,OAAO,SAAS,CAAC;IACjC,IAAI,OAAO;QAAE,OAAO,MAAM,CAAC;IAC3B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sBAAsB;AAEtB,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAE,WAAW,EAA4B;IAC3E,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAqB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAE5E,MAAM,iBAAiB,GAA4B,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAE5F,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE;YAC/B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI;YAC1B,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC;YAC3C,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YACvD,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,OAAO;gBAChB,CAAC,CAAC,WAAW,mBAAmB,CAAC,CAAC,aAAa,CAAC,MAAM;gBACtD,CAAC,CAAC,MAAM,mBAAmB,CAAC,aAAa,CAAC,EAAE;YAC9C,SAAS,EAAE,OAAO;SACnB,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,iBAAiB,CAAC,OAAO,GAAG;gBAC1B,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;gBAChC,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACzC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;aACnC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,YAAY,GAA4B,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAEpE,IAAI,MAAM,EAAE,CAAC;QACX,YAAY,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,IAAI,CAAC;QAClE,YAAY,CAAC,YAAY,GAAG,MAAM,CAAC,WAAW,CAC5C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;YACtD,GAAG;YACH;gBACE,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC/B,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;gBAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;gBAC9B,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;aAC7E;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,cAAc,EAAE,CAAC;IAC3C,MAAM,YAAY,GAAG,yBAAyB,CAAC,iBAAiB,CAAC,CAAC;IAClE,YAAY,CAAC,MAAM,GAAG,YAAY,CAAC;IAEnC,MAAM,eAAe,GAAG;QACtB,OAAO,EAAE,kBAAkB,EAAE;QAC7B,QAAQ,EAAE,mBAAmB,EAAE;QAC/B,MAAM,EAAE,kBAAkB,EAAE;QAC5B,WAAW,EAAE,aAAa,EAAE;KAC7B,CAAC;IAEF,MAAM,MAAM,GAAG;QACb,WAAW,EAAE,iBAAiB;QAC9B,MAAM,EAAE,YAAY;QACpB,SAAS,EAAE,eAAe;QAC1B,OAAO,EAAE;YACP,eAAe,EAAE,kBAAkB,EAAE;YACrC,UAAU,EAAE,aAAa,EAAE;YAC3B,eAAe,EAAE,kBAAkB,EAAE;YACrC,qBAAqB,EAAE,WAAW;YAClC,iBAAiB;SAClB;KACF,CAAC;IAEF,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,EAAE,CAAC,CAAC;IACxC,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,cAAc,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CACT,cAAc,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,mBAAmB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,mBAAmB,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CACpJ,CAAC;QACF,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,CAAC,OAAO,CAAC,QAAQ,WAAW,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,CAAC,cAAc,YAAY,EAAE,CAAC,CAAC;IAC1C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,iBAAiB,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3E,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,SAAS,GAAG,WAAW,GAAG,CAAC,IAAI,WAAW,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACjF,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACrC,OAAO,CAAC,GAAG,CAAC,eAAe,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpG,OAAO,CAAC,GAAG,CAAC,eAAe,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACxF,OAAO,CAAC,GAAG,CAAC,eAAe,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,eAAe,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAE7F,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,WAAW,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC/C,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,WAAW,aAAa,EAAE,EAAE,CAAC,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,WAAW,kBAAkB,EAAE,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,sBAAsB;AAEtB,uEAAuE;AACvE,SAAS,UAAU,CAAC,KAAe;IACjC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAClC,KAAK,EACL,eAAe,EACf,UAAU,GAKX;IACC,4CAA4C;IAC5C,MAAM,UAAU,GAAG,CAAC,UAAU,IAAI,eAAe,CAAC;IAClD,MAAM,SAAS,GAAG,CAAC,eAAe,IAAI,UAAU,CAAC;IACjD,8EAA8E;IAC9E,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,UAAU,GAAG,SAAS,CAAC;IAE7B,MAAM,OAAO,GAAG,UAAU,CACxB,CAAC,UAAU,IAAI,aAAa,EAAE,SAAS,IAAI,QAAQ,EAAE,UAAU,IAAI,aAAa,CAAC,CAAC,MAAM,CAAC,OAAO,CAAa,CAC9G,CAAC;IAEF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YACvB,aAAa,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,0CAA0C;aACpD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC;YACjC,OAAO,EAAE,aAAa,OAAO,0BAA0B;SACxD,CAAC,CAAC;QAEH,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACzC,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,CAAC;iBAAM,CAAC;gBACN,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACjC,CAAC;YACD,OAAO;QACT,CAAC;IACH,CAAC;IAED,IAAI,UAAU;QAAE,gBAAgB,EAAE,CAAC;IACnC,IAAI,SAAS;QAAE,WAAW,EAAE,CAAC;IAC7B,IAAI,UAAU;QAAE,gBAAgB,EAAE,CAAC;IAEnC,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC;IACrG,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,yBAAyB;AAEzB,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,YAAY,EACZ,SAAS,EACT,SAAS,EACT,MAAM,EACN,KAAK,GAAG,KAAK,GAOd;IACC,wEAAwE;IACxE,yEAAyE;IACzE,6EAA6E;IAC7E,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,8BAA8B;IAC9B,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;QACzD,aAAa,CAAC;YACZ,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,6FAA6F;SACvG,CAAC,CAAC;IACL,CAAC;IAED,0BAA0B;IAC1B,IAAI,YAAY,IAAI,MAAM,EAAE,CAAC;QAC3B,aAAa,CAAC;YACZ,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,6EAA6E;SACvF,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,uFAAuF;IAEvF,IAAI,SAAS,EAAE,CAAC;QACd,wCAAwC;QACxC,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAE3B,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACzB,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAE/B,IAAI,KAAK;YAAE,eAAe,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,MAAM;YAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAE/B,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,aAAa,CAAC;gBACZ,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,qEAAqE;aAC/E,CAAC,CAAC;QACL,CAAC;QACD,eAAe,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,gBAAgB,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,qBAAqB,CAAC;QACtC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG;YAC7B,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,0CAA0C;YAClD,QAAQ,EAAE,kBAAkB;YAC5B,UAAU,EAAE,oCAAoC;SACjD,CAAC;QACF,MAAM,CAAC,iBAAiB,GAAG,OAAO,CAAC;QACnC,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,kCAAkC,OAAO,qBAAqB,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;AACH,CAAC;AAUD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAuC;IACjE,cAAc;IACd,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,8DAA8D,EAAE;IAClG,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,oDAAoD,EAAE;IAC1F,uBAAuB;IACvB,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,oDAAoD,EAAE;IACrF,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,4CAA4C,EAAE;IAC9E,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,sDAAsD,EAAE;IAC5F,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,6DAA6D,EAAE;IAC/F,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,qCAAqC,EAAE;IAC3E,+EAA+E;IAC/E;QACE,IAAI,EAAE,gBAAgB;QACtB,MAAM,EAAE,mFAAmF;KAC5F;IACD,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,iEAAiE,EAAE;IAC3G,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,wCAAwC,EAAE;IACnF,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,yDAAyD,EAAE;IAC9F,EAAE,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,2DAA2D,EAAE;IACpG,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,8DAA8D,EAAE;IACxG,cAAc;IACd,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,gDAAgD,EAAE;IAChF,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,gDAAgD,EAAE;CAC3F,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,IAAI,GAAiB,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACpE,IAAI;QACJ,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QACxB,MAAM;KACP,CAAC,CAAC,CAAC;IAEJ,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAE5D,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC;YACT,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACtG,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/B,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;SACpC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAC9E,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,sBAAsB;AAEtB,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAE/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,aAAa,GAAG,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEnD,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,UAAU,CAAC;YACT,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;YACjC,OAAO;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,OAAO;gBAChB,CAAC,CAAC,WAAW,mBAAmB,CAAC,CAAC,aAAa,CAAC,MAAM;gBACtD,CAAC,CAAC,MAAM,mBAAmB,CAAC,aAAa,CAAC,EAAE;YAC9C,MAAM,EAAE,MAAM,IAAI,IAAI;YACtB,YAAY,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE;SAChD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CACT,cAAc,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,mBAAmB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,mBAAmB,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CACpJ,CAAC;QACF,OAAO,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBACpD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAE,KAAgB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC9D,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,KAAK,KAAK,KAAK,IAAI,GAAG,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC,CAAC;QACtE,OAAO,CAAC,GAAG,CACT,cAAc,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,mBAAmB,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,mBAAmB,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CACpJ,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC1G,CAAC","sourcesContent":["import chalk from 'chalk';\nimport ui from '../utils/ui.js';\nimport {\n  getCredentials,\n  saveCredentials,\n  clearCredentials,\n  isTokenExpired,\n  diagnoseCredentials,\n  getCredentialsPath,\n  setInsecureStorage,\n} from '../lib/credentials.js';\nimport {\n  getConfig,\n  saveConfig,\n  clearConfig,\n  getConfigPath,\n  setInsecureConfigStorage,\n  diagnoseConfig,\n} from '../lib/config-store.js';\nimport {\n  clearPreferences,\n  getPreferencesPath,\n  getTelemetrySource,\n  isNoticeShown,\n  isTelemetryEnabled,\n  isTelemetryOptedOut,\n} from '../lib/preferences.js';\nimport { isJsonMode, outputJson, exitWithError } from '../utils/output.js';\nimport { isPromptAllowed } from '../utils/interaction-mode.js';\n\nfunction maskSecret(value: string | undefined): string | undefined {\n  if (!value) return undefined;\n  if (value.length <= 8) return '****';\n  return value.slice(0, 4) + '****' + value.slice(-4);\n}\n\nfunction formatTimeRemaining(ms: number): string {\n  if (ms <= 0) return 'expired';\n  const seconds = Math.floor(ms / 1000);\n  const minutes = Math.floor(seconds / 60);\n  const hours = Math.floor(minutes / 60);\n  if (hours > 0) return `${hours}h ${minutes % 60}m`;\n  if (minutes > 0) return `${minutes}m ${seconds % 60}s`;\n  return `${seconds}s`;\n}\n\nfunction parseJwt(token: string): Record<string, unknown> | null {\n  try {\n    const parts = token.split('.');\n    if (parts.length !== 3) return null;\n    return JSON.parse(Buffer.from(parts[1], 'base64url').toString('utf-8'));\n  } catch {\n    return null;\n  }\n}\n\nfunction determineCredentialSource(diagnostics: string[]): 'keyring' | 'file' | 'none' {\n  const hasKeyring = diagnostics.some((l) => l.startsWith('keyring: found'));\n  const hasFile = diagnostics.some((l) => l.includes('exists=true'));\n  const isInsecure = diagnostics.some((l) => l.includes('insecureStorage=true'));\n\n  if (isInsecure) return hasFile ? 'file' : 'none';\n  if (hasKeyring) return 'keyring';\n  if (hasFile) return 'file';\n  return 'none';\n}\n\n// --- debug state ---\n\nexport async function runDebugState({ showSecrets }: { showSecrets: boolean }): Promise<void> {\n  const creds = getCredentials();\n  const config = getConfig();\n  const diagnostics = diagnoseCredentials();\n  const credSource = determineCredentialSource(diagnostics);\n  const maybeRedact = showSecrets ? (v: string | undefined) => v : maskSecret;\n\n  const credentialsOutput: Record<string, unknown> = { present: !!creds, source: credSource };\n\n  if (creds) {\n    const timeRemaining = creds.expiresAt - Date.now();\n    const expired = isTokenExpired(creds);\n    Object.assign(credentialsOutput, {\n      userId: creds.userId,\n      email: creds.email ?? null,\n      accessToken: maybeRedact(creds.accessToken),\n      refreshToken: creds.refreshToken ? 'present' : 'absent',\n      expiresAt: creds.expiresAt,\n      expiresIn: expired\n        ? `expired ${formatTimeRemaining(-timeRemaining)} ago`\n        : `in ${formatTimeRemaining(timeRemaining)}`,\n      isExpired: expired,\n    });\n    if (creds.staging) {\n      credentialsOutput.staging = {\n        clientId: creds.staging.clientId,\n        apiKey: maybeRedact(creds.staging.apiKey),\n        fetchedAt: creds.staging.fetchedAt,\n      };\n    }\n  }\n\n  const configOutput: Record<string, unknown> = { present: !!config };\n\n  if (config) {\n    configOutput.activeEnvironment = config.activeEnvironment ?? null;\n    configOutput.environments = Object.fromEntries(\n      Object.entries(config.environments).map(([key, env]) => [\n        key,\n        {\n          name: env.name,\n          type: env.type,\n          apiKey: maybeRedact(env.apiKey),\n          clientId: env.clientId ?? null,\n          endpoint: env.endpoint ?? null,\n          ...(env.type === 'unclaimed' && { claimToken: maybeRedact(env.claimToken) }),\n        },\n      ]),\n    );\n  }\n\n  const configDiagnostics = diagnoseConfig();\n  const configSource = determineCredentialSource(configDiagnostics);\n  configOutput.source = configSource;\n\n  const telemetryOutput = {\n    enabled: isTelemetryEnabled(),\n    optedOut: isTelemetryOptedOut(),\n    source: getTelemetrySource(),\n    noticeShown: isNoticeShown(),\n  };\n\n  const result = {\n    credentials: credentialsOutput,\n    config: configOutput,\n    telemetry: telemetryOutput,\n    storage: {\n      credentialsPath: getCredentialsPath(),\n      configPath: getConfigPath(),\n      preferencesPath: getPreferencesPath(),\n      credentialDiagnostics: diagnostics,\n      configDiagnostics,\n    },\n  };\n\n  if (isJsonMode()) {\n    outputJson(result);\n    return;\n  }\n\n  console.log(chalk.bold('Credentials'));\n  console.log(`  present: ${creds ? chalk.green('true') : chalk.yellow('false')}`);\n  console.log(`  source:  ${credSource}`);\n  if (creds) {\n    console.log(`  userId:  ${creds.userId}`);\n    console.log(`  email:   ${creds.email ?? chalk.dim('none')}`);\n    console.log(`  token:   ${maybeRedact(creds.accessToken)}`);\n    console.log(`  refresh: ${creds.refreshToken ? 'present' : 'absent'}`);\n    const expired = isTokenExpired(creds);\n    const timeRemaining = creds.expiresAt - Date.now();\n    console.log(\n      `  expires: ${expired ? chalk.red(`expired ${formatTimeRemaining(-timeRemaining)} ago`) : chalk.green(`in ${formatTimeRemaining(timeRemaining)}`)}`,\n    );\n    if (creds.staging) {\n      console.log(`  staging: clientId=${creds.staging.clientId} apiKey=${maybeRedact(creds.staging.apiKey)}`);\n    }\n  }\n\n  console.log();\n  console.log(chalk.bold('Config'));\n  console.log(`  present: ${config ? chalk.green('true') : chalk.yellow('false')}`);\n  console.log(`  source:  ${configSource}`);\n  if (config) {\n    console.log(`  active:  ${config.activeEnvironment ?? chalk.dim('none')}`);\n    for (const [key, env] of Object.entries(config.environments)) {\n      console.log(`  env[${key}]: type=${env.type} apiKey=${maybeRedact(env.apiKey)}`);\n      if (env.type === 'unclaimed') console.log(`    claimToken=${maybeRedact(env.claimToken)}`);\n    }\n  }\n\n  console.log();\n  console.log(chalk.bold('Telemetry'));\n  console.log(`  enabled:  ${telemetryOutput.enabled ? chalk.green('true') : chalk.yellow('false')}`);\n  console.log(`  optedOut: ${telemetryOutput.optedOut ? chalk.yellow('true') : 'false'}`);\n  console.log(`  source:   ${telemetryOutput.source}`);\n  console.log(`  notice:   ${telemetryOutput.noticeShown ? 'shown' : chalk.dim('not shown')}`);\n\n  console.log();\n  console.log(chalk.bold('Storage — Credentials'));\n  console.log(`  path: ${getCredentialsPath()}`);\n  for (const line of diagnostics) {\n    console.log(`  ${chalk.dim(line)}`);\n  }\n\n  console.log();\n  console.log(chalk.bold('Storage — Config'));\n  console.log(`  path: ${getConfigPath()}`);\n  for (const line of configDiagnostics) {\n    console.log(`  ${chalk.dim(line)}`);\n  }\n\n  console.log();\n  console.log(chalk.bold('Storage — Preferences'));\n  console.log(`  path: ${getPreferencesPath()}`);\n}\n\n// --- debug reset ---\n\n/** Join names with an Oxford comma: [\"a\",\"b\",\"c\"] => \"a, b, and c\". */\nfunction formatList(items: string[]): string {\n  if (items.length <= 1) return items.join('');\n  if (items.length === 2) return `${items[0]} and ${items[1]}`;\n  return `${items.slice(0, -1).join(', ')}, and ${items[items.length - 1]}`;\n}\n\nexport async function runDebugReset({\n  force,\n  credentialsOnly,\n  configOnly,\n}: {\n  force: boolean;\n  credentialsOnly: boolean;\n  configOnly: boolean;\n}): Promise<void> {\n  // Both flags = clear both (same as neither)\n  const clearCreds = !configOnly || credentialsOnly;\n  const clearConf = !credentialsOnly || configOnly;\n  // Preferences (~/.workos/preferences.json) are non-secret local CLI state, so\n  // they ride with the config target. Clearing config returns the CLI to a\n  // fresh-install state, which includes resetting the telemetry preference.\n  const clearPrefs = clearConf;\n\n  const targets = formatList(\n    [clearCreds && 'credentials', clearConf && 'config', clearPrefs && 'preferences'].filter(Boolean) as string[],\n  );\n\n  if (!force) {\n    if (!isPromptAllowed()) {\n      exitWithError({\n        code: 'non_interactive_reset',\n        message: 'Use --force to reset in agent or CI mode',\n      });\n    }\n\n    const confirmed = await ui.confirm({\n      message: `Clear all ${targets}? This cannot be undone.`,\n    });\n\n    if (ui.isCancel(confirmed) || !confirmed) {\n      if (isJsonMode()) {\n        outputJson({ cleared: false, cancelled: true });\n      } else {\n        ui.log.info('Reset cancelled');\n      }\n      return;\n    }\n  }\n\n  if (clearCreds) clearCredentials();\n  if (clearConf) clearConfig();\n  if (clearPrefs) clearPreferences();\n\n  if (isJsonMode()) {\n    outputJson({ cleared: true, credentials: clearCreds, config: clearConf, preferences: clearPrefs });\n  } else {\n    ui.log.success(`Cleared ${targets}`);\n  }\n}\n\n// --- debug simulate ---\n\nexport async function runDebugSimulate({\n  expiredToken,\n  noKeyring,\n  unclaimed,\n  noAuth,\n  crash = false,\n}: {\n  expiredToken: boolean;\n  noKeyring: boolean;\n  unclaimed: boolean;\n  noAuth: boolean;\n  crash?: boolean;\n}): Promise<void> {\n  // Simulate an unexpected crash to exercise the crash-telemetry pipeline\n  // end-to-end. Throws a plain Error (not CliExit) so the bin.ts lifecycle\n  // records a `crash` event with a sanitized stack rather than a handled exit.\n  if (crash) {\n    throw new Error('Simulated crash for telemetry verification');\n  }\n\n  // Validate: at least one flag\n  if (!expiredToken && !noKeyring && !unclaimed && !noAuth) {\n    exitWithError({\n      code: 'no_simulation_flags',\n      message: 'Specify at least one simulation flag: --expired-token, --no-keyring, --unclaimed, --no-auth',\n    });\n  }\n\n  // Validate: contradictory\n  if (expiredToken && noAuth) {\n    exitWithError({\n      code: 'contradictory_flags',\n      message: \"Cannot combine --expired-token and --no-auth (can't expire a cleared token)\",\n    });\n  }\n\n  const actions: string[] = [];\n\n  // Apply in order: storage tier first, then credential mutations, then config mutations\n\n  if (noKeyring) {\n    // Migrate current state to file storage\n    const creds = getCredentials();\n    const config = getConfig();\n\n    setInsecureStorage(true);\n    setInsecureConfigStorage(true);\n\n    if (creds) saveCredentials(creds);\n    if (config) saveConfig(config);\n\n    actions.push('Forced file-only storage (keyring bypassed)');\n  }\n\n  if (expiredToken) {\n    const creds = getCredentials();\n    if (!creds) {\n      exitWithError({\n        code: 'no_credentials',\n        message: 'Cannot simulate expired token — no credentials found. Log in first.',\n      });\n    }\n    saveCredentials({ ...creds, expiresAt: Date.now() - 60_000 });\n    actions.push('Set token expiresAt to 1 minute ago');\n  }\n\n  if (noAuth) {\n    clearCredentials();\n    actions.push('Cleared credentials (config preserved)');\n  }\n\n  if (unclaimed) {\n    const config = getConfig() ?? { environments: {} };\n    const envName = 'simulated-unclaimed';\n    config.environments[envName] = {\n      name: envName,\n      type: 'unclaimed',\n      apiKey: 'sk_test_simulated_unclaimed_000000000000',\n      clientId: 'client_simulated',\n      claimToken: 'claim_simulated_token_000000000000',\n    };\n    config.activeEnvironment = envName;\n    saveConfig(config);\n    actions.push(`Created unclaimed environment \"${envName}\" and set as active`);\n  }\n\n  if (isJsonMode()) {\n    outputJson({ simulated: true, actions });\n  } else {\n    for (const action of actions) {\n      ui.log.success(action);\n    }\n  }\n}\n\n// --- debug env ---\n\ninterface EnvVarInfo {\n  name: string;\n  value: string | undefined;\n  effect: string;\n}\n\n/**\n * Catalog of WORKOS_-prefixed environment variables the CLI reads.\n *\n * This is the single source of truth for `workos debug env`. A unit test\n * (env-var-catalog.spec.ts) scans the source for `process.env.WORKOS_*` reads\n * and fails if any are missing here, so this list can't silently drift.\n */\nexport const ENV_VAR_CATALOG: { name: string; effect: string }[] = [\n  // Credentials\n  { name: 'WORKOS_API_KEY', effect: 'Bypasses credential resolution — used directly for API calls' },\n  { name: 'WORKOS_CLIENT_ID', effect: 'WorkOS client ID used during credential resolution' },\n  // Interaction & output\n  { name: 'WORKOS_MODE', effect: 'Controls interaction behavior: human, agent, or CI' },\n  { name: 'WORKOS_AGENT', effect: 'Set to \"1\" to force agent interaction mode' },\n  { name: 'WORKOS_FORCE_TTY', effect: 'Forces human (non-JSON) output mode, even when piped' },\n  { name: 'WORKOS_DEBUG', effect: 'Set to \"1\" to enable verbose debug logging for all commands' },\n  { name: 'WORKOS_TELEMETRY', effect: 'Set to \"false\" to disable telemetry' },\n  // URLs (WORKOS_API_URL is the single base; gateway + telemetry derive from it)\n  {\n    name: 'WORKOS_API_URL',\n    effect: 'Overrides API base URL; also reroutes the LLM gateway and CLI telemetry endpoints',\n  },\n  { name: 'WORKOS_DASHBOARD_URL', effect: 'Overrides dashboard URL (default: https://dashboard.workos.com)' },\n  { name: 'WORKOS_AUTHKIT_DOMAIN', effect: 'Overrides AuthKit domain from settings' },\n  { name: 'WORKOS_BASE_URL', effect: 'AuthKit base URL, read during doctor environment checks' },\n  { name: 'WORKOS_REDIRECT_URI', effect: 'OAuth redirect URI, read during doctor environment checks' },\n  { name: 'WORKOS_COOKIE_DOMAIN', effect: 'Session cookie domain, read during doctor environment checks' },\n  // Development\n  { name: 'WORKOS_DEV', effect: 'Enables dev mode — loads .env.local at startup' },\n  { name: 'WORKOS_DISABLE_PROXY', effect: 'Disables the credential proxy for gateway auth' },\n];\n\nexport async function runDebugEnv(): Promise<void> {\n  const vars: EnvVarInfo[] = ENV_VAR_CATALOG.map(({ name, effect }) => ({\n    name,\n    value: process.env[name],\n    effect,\n  }));\n\n  const setVars = vars.filter((v) => v.value !== undefined);\n  const unsetVars = vars.filter((v) => v.value === undefined);\n\n  if (isJsonMode()) {\n    outputJson({\n      variables: Object.fromEntries(vars.map((v) => [v.name, { value: v.value ?? null, effect: v.effect }])),\n      set: setVars.map((v) => v.name),\n      unset: unsetVars.map((v) => v.name),\n    });\n    return;\n  }\n\n  if (setVars.length > 0) {\n    console.log(chalk.bold('Set'));\n    for (const v of setVars) {\n      console.log(`  ${chalk.green(v.name)}=${v.value}`);\n      console.log(`    ${chalk.dim(v.effect)}`);\n    }\n    console.log();\n  }\n\n  console.log(chalk.bold(`Unset${setVars.length > 0 ? '' : ' (none active)'}`));\n  for (const v of unsetVars) {\n    console.log(`  ${chalk.dim(v.name)} — ${chalk.dim(v.effect)}`);\n  }\n}\n\n// --- debug token ---\n\nexport async function runDebugToken(): Promise<void> {\n  const creds = getCredentials();\n\n  if (!creds) {\n    if (isJsonMode()) {\n      outputJson({ present: false });\n    } else {\n      console.log(chalk.yellow('No credentials found'));\n    }\n    return;\n  }\n\n  const claims = parseJwt(creds.accessToken);\n  const expired = isTokenExpired(creds);\n  const timeRemaining = creds.expiresAt - Date.now();\n\n  if (isJsonMode()) {\n    outputJson({\n      present: true,\n      format: claims ? 'jwt' : 'opaque',\n      expired,\n      expiresAt: creds.expiresAt,\n      expiresIn: expired\n        ? `expired ${formatTimeRemaining(-timeRemaining)} ago`\n        : `in ${formatTimeRemaining(timeRemaining)}`,\n      claims: claims ?? null,\n      refreshToken: { present: !!creds.refreshToken },\n    });\n    return;\n  }\n\n  if (claims) {\n    console.log(chalk.bold('JWT Token'));\n    console.log(\n      `  expires: ${expired ? chalk.red(`expired ${formatTimeRemaining(-timeRemaining)} ago`) : chalk.green(`in ${formatTimeRemaining(timeRemaining)}`)}`,\n    );\n    console.log();\n    console.log(chalk.bold('Claims'));\n    for (const [key, value] of Object.entries(claims)) {\n      if (key === 'exp' || key === 'iat' || key === 'nbf') {\n        const date = new Date((value as number) * 1000).toISOString();\n        console.log(`  ${key}: ${value} (${date})`);\n      } else {\n        console.log(`  ${key}: ${JSON.stringify(value)}`);\n      }\n    }\n  } else {\n    console.log(chalk.bold('Opaque Token'));\n    console.log(chalk.dim('  Token is not a JWT — cannot decode claims'));\n    console.log(\n      `  expires: ${expired ? chalk.red(`expired ${formatTimeRemaining(-timeRemaining)} ago`) : chalk.green(`in ${formatTimeRemaining(timeRemaining)}`)}`,\n    );\n  }\n\n  console.log();\n  console.log(`  refresh token: ${creds.refreshToken ? chalk.green('present') : chalk.yellow('absent')}`);\n}\n"]}

package/dist/commands/dev.d.ts

@@ -1,22 +0,0 @@
-import { type EmulatorSeedConfig } from '@workos/emulate';
-export interface DevArgs {
-    port: number;
-    seed?: string;
-    '--'?: string[];
-}
-/**
- * Default seed data for `workos dev` so the AuthKit login flow works
- * out of the box. Skipped when the user provides `--seed` or a
- * `workos-emulate.config.*` file is auto-detected.
- */
-export declare const DEFAULT_DEV_SEED: EmulatorSeedConfig;
-/**
- * Build the env vars object to inject into the child process.
- *
- * Sets both the base URL style (`WORKOS_API_BASE_URL`) and the decomposed
- * style (`WORKOS_API_HOSTNAME` + `WORKOS_API_PORT` + `WORKOS_API_HTTPS`)
- * so the emulator works with authkit SDKs (which read the decomposed vars)
- * and direct SDK consumers (which may use the base URL).
- */
-export declare function buildDevEnv(emulatorUrl: string, apiKey?: string): Record<string, string>;
-export declare function runDev(argv: DevArgs): Promise<void>;

package/dist/commands/dev.js

@@ -1,145 +0,0 @@
-import { createEmulator } from '@workos/emulate';
-import { resolveDevCommand } from '../lib/dev-command.js';
-import { spawn } from 'node:child_process';
-import { readFileSync, existsSync } from 'node:fs';
-import { resolve } from 'node:path';
-import { parse as parseYaml } from 'yaml';
-import chalk from 'chalk';
-import { IS_WINDOWS, SPAWN_OPTS } from '../utils/platform.js';
-import { ExitCode, exitWithCode } from '../utils/exit-codes.js';
-import { exitWithError } from '../utils/output.js';
-import { formatWorkOSCommand } from '../utils/command-invocation.js';
-function loadSeedFile(filePath) {
-    const resolved = resolve(filePath);
-    if (!existsSync(resolved)) {
-        exitWithError({ code: 'seed_not_found', message: `Seed file not found: ${resolved}` });
-    }
-    const content = readFileSync(resolved, 'utf-8');
-    if (resolved.endsWith('.json')) {
-        return JSON.parse(content);
-    }
-    return parseYaml(content);
-}
-function autoDetectSeedFile() {
-    const candidates = ['workos-emulate.config.yaml', 'workos-emulate.config.yml', 'workos-emulate.config.json'];
-    for (const name of candidates) {
-        const filePath = resolve(name);
-        if (existsSync(filePath)) {
-            return loadSeedFile(filePath);
-        }
-    }
-    return null;
-}
-/**
- * Default seed data for `workos dev` so the AuthKit login flow works
- * out of the box. Skipped when the user provides `--seed` or a
- * `workos-emulate.config.*` file is auto-detected.
- */
-export const DEFAULT_DEV_SEED = {
-    users: [
-        {
-            email: 'test@example.com',
-            first_name: 'Test',
-            last_name: 'User',
-            password: 'password',
-            email_verified: true,
-        },
-    ],
-    organizations: [
-        {
-            name: 'Test Organization',
-            domains: [{ domain: 'example.com', state: 'verified' }],
-        },
-    ],
-};
-/**
- * Build the env vars object to inject into the child process.
- *
- * Sets both the base URL style (`WORKOS_API_BASE_URL`) and the decomposed
- * style (`WORKOS_API_HOSTNAME` + `WORKOS_API_PORT` + `WORKOS_API_HTTPS`)
- * so the emulator works with authkit SDKs (which read the decomposed vars)
- * and direct SDK consumers (which may use the base URL).
- */
-export function buildDevEnv(emulatorUrl, apiKey = 'sk_test_default') {
-    const url = new URL(emulatorUrl);
-    return {
-        WORKOS_API_BASE_URL: emulatorUrl,
-        WORKOS_API_HOSTNAME: url.hostname,
-        WORKOS_API_PORT: url.port,
-        WORKOS_API_HTTPS: 'false',
-        WORKOS_API_KEY: apiKey,
-        WORKOS_CLIENT_ID: 'client_emulated',
-    };
-}
-export async function runDev(argv) {
-    const userSeed = argv.seed ? loadSeedFile(argv.seed) : autoDetectSeedFile();
-    const seedConfig = userSeed ?? DEFAULT_DEV_SEED;
-    // 1. Start emulator
-    const emulator = await createEmulator({
-        port: argv.port,
-        seed: seedConfig,
-    });
-    // 2. Resolve dev command
-    const explicit = argv['--'];
-    const devCmd = explicit && explicit.length > 0
-        ? { command: explicit[0], args: explicit.slice(1), framework: null }
-        : await resolveDevCommand(process.cwd());
-    // 3. Print status banner
-    console.log();
-    console.log(`${chalk.cyan('WorkOS Emulate')} ${chalk.dim(emulator.url)}`);
-    if (devCmd.framework) {
-        console.log(chalk.dim(`Detected ${devCmd.framework}`));
-    }
-    console.log(chalk.dim(`Running: ${devCmd.command} ${devCmd.args.join(' ')}`));
-    if (!userSeed) {
-        console.log();
-        console.log(`  ${chalk.dim('Email:')}    test@example.com`);
-        console.log(`  ${chalk.dim('Password:')} password`);
-    }
-    console.log();
-    // 4. Spawn child process with env vars
-    let child;
-    try {
-        child = spawn(devCmd.command, devCmd.args, {
-            stdio: 'inherit',
-            env: {
-                ...process.env,
-                ...buildDevEnv(emulator.url, emulator.apiKey),
-            },
-            ...SPAWN_OPTS,
-        });
-    }
-    catch {
-        console.error(chalk.red(`Failed to start: ${devCmd.command} ${devCmd.args.join(' ')}`));
-        console.error(chalk.dim(`Try specifying the command explicitly: ${formatWorkOSCommand('dev -- <your-command>')}`));
-        await emulator.close();
-        exitWithCode(ExitCode.GENERAL_ERROR);
-    }
-    child.on('error', async (err) => {
-        console.error(chalk.red(`Failed to start: ${devCmd.command}`));
-        if (err.code === 'ENOENT') {
-            console.error(chalk.dim(`Command not found: ${devCmd.command}`));
-            console.error(chalk.dim(`Try specifying the command explicitly: ${formatWorkOSCommand('dev -- <your-command>')}`));
-        }
-        else {
-            console.error(chalk.dim(err.message));
-        }
-        await emulator.close();
-        exitWithCode(ExitCode.GENERAL_ERROR);
-    });
-    // 5. Signal handling — forward to child, then close emulator
-    const shutdown = (signal) => {
-        child.kill(signal);
-        emulator.close().then(() => process.exit(0));
-    };
-    process.on('SIGINT', () => shutdown('SIGINT'));
-    process.on('SIGTERM', () => shutdown('SIGTERM'));
-    if (IS_WINDOWS) {
-        process.on('SIGBREAK', () => shutdown('SIGINT'));
-    }
-    // 6. If child exits, close emulator and exit with same code
-    child.on('exit', (code) => {
-        emulator.close().then(() => process.exit(code ?? 0));
-    });
-}
-//# sourceMappingURL=dev.js.map