workos 0.2.1 → 0.3.3

package/dist/utils/git-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-utils.js","sourceRoot":"","sources":["../../src/utils/git-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAEzD;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,iCAAiC,EAAE;YACjD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC;aACC,QAAQ,EAAE;aACV,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,2CAA2C,EAAE;YAChE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC;aACC,QAAQ,EAAE;aACV,IAAI,EAAE,CAAC;QACV,OAAO,GAAG,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,YAAY,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;QACxC,IAAI,YAAY,CAAC,QAAQ,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC5C,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ;IACtB,IAAI,CAAC;QACH,QAAQ,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,wBAAwB,EAAE;YAChD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,MAAM;aACV,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import { execSync, execFileSync } from 'node:child_process';\n\nconst PROTECTED_BRANCHES = ['main', 'master', 'develop'];\n\n/**\n * Get the current git branch name.\n * Returns null if not in a git repo or if the command fails.\n */\nexport function getCurrentBranch(): string | null {\n  try {\n    return execSync('git rev-parse --abbrev-ref HEAD', {\n      stdio: ['ignore', 'pipe', 'ignore'],\n    })\n      .toString()\n      .trim();\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Check if a branch name is considered protected (main, master, develop).\n */\nexport function isProtectedBranch(branch: string): boolean {\n  return PROTECTED_BRANCHES.includes(branch);\n}\n\nexport function createBranch(name: string): void {\n  execFileSync('git', ['checkout', '-b', name], { stdio: 'ignore' });\n}\n\nexport function branchExists(name: string): boolean {\n  try {\n    execFileSync('git', ['rev-parse', '--verify', name], { stdio: 'ignore' });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Get the default branch from origin, falling back to main/master detection.\n */\nexport function getDefaultBranch(): string {\n  try {\n    const ref = execSync('git symbolic-ref refs/remotes/origin/HEAD', {\n      stdio: ['ignore', 'pipe', 'ignore'],\n    })\n      .toString()\n      .trim();\n    return ref.replace('refs/remotes/origin/', '');\n  } catch {\n    if (branchExists('main')) return 'main';\n    if (branchExists('master')) return 'master';\n    return 'main';\n  }\n}\n\n/**\n * Check if the GitHub CLI (gh) is available.\n */\nexport function hasGhCli(): boolean {\n  try {\n    execSync('gh --version', { stdio: 'ignore' });\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * Get list of uncommitted/untracked files from git status.\n */\nexport function getUncommittedFiles(): string[] {\n  try {\n    const status = execSync('git status --porcelain', {\n      stdio: ['ignore', 'pipe', 'ignore'],\n    }).toString();\n    return status\n      .split('\\n')\n      .filter(Boolean)\n      .map((line) => line.slice(3));\n  } catch {\n    return [];\n  }\n}\n"]}

package/dist/utils/logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.js","sourceRoot":"","sources":["../../src/utils/logging.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,CAAC,CAAC,GAAW;IAC3B,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,EAAE;IAChB,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;AACf,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,GAAW;IAC/B,OAAO,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,GAAW;IAC7B,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,GAAW;IAC7B,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAW;IAChC,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,GAAW;IAC9B,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,GAAQ;IAC5B,OAAO,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC","sourcesContent":["import Chalk from 'chalk';\n\nexport function prepareMessage(msg: unknown): string {\n  if (typeof msg === 'string') {\n    return msg;\n  }\n  if (msg instanceof Error) {\n    return `${msg.stack || ''}`;\n  }\n  return JSON.stringify(msg, null, '\\t');\n}\n\nexport function l(msg: string): void {\n  // eslint-disable-next-line no-console\n  console.log(msg);\n}\n\nexport function nl(): void {\n  return l('');\n}\n\nexport function green(msg: string): void {\n  return l(Chalk.green(prepareMessage(msg)));\n}\n\nexport function red(msg: string): void {\n  return l(Chalk.red(prepareMessage(msg)));\n}\n\nexport function dim(msg: string): void {\n  return l(Chalk.dim(prepareMessage(msg)));\n}\n\nexport function yellow(msg: string): void {\n  return l(Chalk.yellow(prepareMessage(msg)));\n}\n\nexport function cyan(msg: string): void {\n  return l(Chalk.cyan(prepareMessage(msg)));\n}\n\nexport function debug(msg: any): void {\n  return l(Chalk.italic.yellow(prepareMessage(msg)));\n}\n"]}

package/dist/utils/package-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-json.js","sourceRoot":"","sources":["../../src/utils/package-json.ts"],"names":[],"mappings":"AAiBA;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,gBAA0B,EAC1B,WAA2B;IAE3B,OAAO,gBAAgB;SACpB,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACrB,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC;KACrD,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,UAAU,EAA4B,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,WAAmB,EAAE,WAA2B;IAClF,OAAO,iBAAiB,CAAC,WAAW,EAAE,WAAW,CAAC,KAAK,SAAS,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,WAAmB,EAAE,WAA2B;IAChF,OAAO,WAAW,EAAE,YAAY,EAAE,CAAC,WAAW,CAAC,IAAI,WAAW,EAAE,eAAe,EAAE,CAAC,WAAW,CAAC,CAAC;AACjG,CAAC","sourcesContent":["export type PackageDotJson = {\n  version?: string;\n  scripts?: Record<string, string | undefined>;\n  dependencies?: Record<string, string>;\n  devDependencies?: Record<string, string>;\n  resolutions?: Record<string, string>;\n  overrides?: Record<string, string>;\n  pnpm?: {\n    overrides?: Record<string, string>;\n  };\n};\n\ntype NpmPackage = {\n  name: string;\n  version: string;\n};\n\n/**\n * Checks if @param packageJson has any of the @param packageNamesList package names\n * listed as a dependency or devDependency.\n * If so, it returns the first package name that is found, including the\n * version (range) specified in the package.json.\n */\nexport function findInstalledPackageFromList(\n  packageNamesList: string[],\n  packageJson: PackageDotJson,\n): NpmPackage | undefined {\n  return packageNamesList\n    .map((packageName) => ({\n      name: packageName,\n      version: getPackageVersion(packageName, packageJson),\n    }))\n    .find((sdkPackage): sdkPackage is NpmPackage => !!sdkPackage.version);\n}\n\nexport function hasPackageInstalled(packageName: string, packageJson: PackageDotJson): boolean {\n  return getPackageVersion(packageName, packageJson) !== undefined;\n}\n\nexport function getPackageVersion(packageName: string, packageJson: PackageDotJson): string | undefined {\n  return packageJson?.dependencies?.[packageName] || packageJson?.devDependencies?.[packageName];\n}\n"]}

package/dist/{src/utils → utils}/package-manager.d.ts

@@ -1,4 +1,4 @@
-import type { WizardOptions } from './types.js';
+import type { InstallerOptions } from './types.js';
 export interface PackageManager {
     name: string;
     label: string;
@@ -7,8 +7,8 @@ export interface PackageManager {
     runScriptCommand: string;
     flags: string;
     forceInstallFlag: string;
-    detect: ({ installDir }: Pick<WizardOptions, 'installDir'>) => boolean;
-    addOverride: (pkgName: string, pkgVersion: string, { installDir }: Pick<WizardOptions, 'installDir'>) => Promise<void>;
+    detect: ({ installDir }: Pick<InstallerOptions, 'installDir'>) => boolean;
+    addOverride: (pkgName: string, pkgVersion: string, { installDir }: Pick<InstallerOptions, 'installDir'>) => Promise<void>;
 }
 export declare const BUN: PackageManager;
 export declare const YARN_V1: PackageManager;
@@ -18,4 +18,4 @@ export declare const PNPM: PackageManager;
 export declare const NPM: PackageManager;
 export declare const EXPO: PackageManager;
 export declare const packageManagers: PackageManager[];
-export declare function detectAllPackageManagers({ installDir }: Pick<WizardOptions, 'installDir'>): PackageManager[];
+export declare function detectAllPackageManagers({ installDir }: Pick<InstallerOptions, 'installDir'>): PackageManager[];

package/dist/utils/package-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-manager.js","sourceRoot":"","sources":["../../src/utils/package-manager.ts"],"names":[],"mappings":"AAAA,+CAA+C;AAC/C,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAoB3C,MAAM,CAAC,MAAM,GAAG,GAAmB;IACjC,IAAI,EAAE,KAAK;IACX,KAAK,EAAE,KAAK;IACZ,cAAc,EAAE,SAAS;IACzB,YAAY,EAAE,eAAe;IAC7B,gBAAgB,EAAE,SAAS;IAC3B,KAAK,EAAE,EAAE;IACT,gBAAgB,EAAE,SAAS;IAC3B,MAAM,EAAE,CAAC,EAAE,UAAU,EAAwC,EAAE,EAAE,CAC/D,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC9F,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,UAAU,EAAwC,EAAiB,EAAE;QAC9G,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,IAAI,EAAE,CAAC;QAEjD,MAAM,oBAAoB,CACxB;YACE,GAAG,cAAc;YACjB,SAAS,EAAE;gBACT,GAAG,SAAS;gBACZ,CAAC,OAAO,CAAC,EAAE,UAAU;aACtB;SACF,EACD,EAAE,UAAU,EAAE,UAAU,EAAE,CAC3B,CAAC;IACJ,CAAC;CACF,CAAC;AACF,MAAM,CAAC,MAAM,OAAO,GAAmB;IACrC,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,SAAS;IAChB,cAAc,EAAE,UAAU;IAC1B,YAAY,EAAE,YAAY;IAC1B,gBAAgB,EAAE,MAAM;IACxB,KAAK,EAAE,+BAA+B;IACtC,gBAAgB,EAAE,SAAS;IAC3B,MAAM,EAAE,CAAC,EAAE,UAAU,EAAwC,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;QACjH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,UAAU,EAAwC,EAAiB,EAAE;QAC9G,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,IAAI,EAAE,CAAC;QAErD,MAAM,oBAAoB,CACxB;YACE,GAAG,cAAc;YACjB,WAAW,EAAE;gBACX,GAAG,WAAW;gBACd,CAAC,OAAO,CAAC,EAAE,UAAU;aACtB;SACF,EACD,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;CACF,CAAC;AACF,kBAAkB;AAClB,MAAM,CAAC,MAAM,OAAO,GAAmB;IACrC,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,aAAa;IACpB,cAAc,EAAE,UAAU;IAC1B,YAAY,EAAE,YAAY;IAC1B,gBAAgB,EAAE,MAAM;IACxB,KAAK,EAAE,EAAE;IACT,gBAAgB,EAAE,SAAS;IAC3B,MAAM,EAAE,CAAC,EAAE,UAAU,EAAwC,EAAE,EAAE;QAC/D,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC3G,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,UAAU,EAAwC,EAAiB,EAAE;QAC9G,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,MAAM,WAAW,GAAG,cAAc,CAAC,WAAW,IAAI,EAAE,CAAC;QAErD,MAAM,oBAAoB,CACxB;YACE,GAAG,cAAc;YACjB,WAAW,EAAE;gBACX,GAAG,WAAW;gBACd,CAAC,OAAO,CAAC,EAAE,UAAU;aACtB;SACF,EACD,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;CACF,CAAC;AACF,MAAM,CAAC,MAAM,IAAI,GAAmB;IAClC,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,MAAM;IACb,cAAc,EAAE,UAAU;IAC1B,YAAY,EAAE,YAAY;IAC1B,gBAAgB,EAAE,MAAM;IACxB,KAAK,EAAE,+BAA+B;IACtC,gBAAgB,EAAE,SAAS;IAC3B,MAAM,EAAE,CAAC,EAAE,UAAU,EAAwC,EAAE,EAAE,CAC/D,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IACxD,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,UAAU,EAAwC,EAAiB,EAAE;QAC9G,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,IAAI,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QAEvC,MAAM,oBAAoB,CACxB;YACE,GAAG,cAAc;YACjB,IAAI,EAAE;gBACJ,GAAG,IAAI;gBACP,SAAS,EAAE;oBACT,GAAG,SAAS;oBACZ,CAAC,OAAO,CAAC,EAAE,UAAU;iBACtB;aACF;SACF,EACD,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;CACF,CAAC;AACF,MAAM,CAAC,MAAM,GAAG,GAAmB;IACjC,IAAI,EAAE,KAAK;IACX,KAAK,EAAE,KAAK;IACZ,cAAc,EAAE,SAAS;IACzB,YAAY,EAAE,eAAe;IAC7B,gBAAgB,EAAE,SAAS;IAC3B,KAAK,EAAE,EAAE;IACT,gBAAgB,EAAE,SAAS;IAC3B,MAAM,EAAE,CAAC,EAAE,UAAU,EAAwC,EAAE,EAAE,CAC/D,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IAC3D,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,UAAU,EAAwC,EAAiB,EAAE;QAC9G,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,IAAI,EAAE,CAAC;QAEjD,MAAM,oBAAoB,CACxB;YACE,GAAG,cAAc;YACjB,SAAS,EAAE;gBACT,GAAG,SAAS;gBACZ,CAAC,OAAO,CAAC,EAAE,UAAU;aACtB;SACF,EACD,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,IAAI,GAAmB;IAClC,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,MAAM;IACb,cAAc,EAAE,kBAAkB;IAClC,YAAY,EAAE,gBAAgB;IAC9B,gBAAgB,EAAE,cAAc;IAChC,KAAK,EAAE,EAAE;IACT,gBAAgB,EAAE,SAAS;IAC3B,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK;IACnB,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,UAAU,EAAwC,EAAiB,EAAE;QAC9G,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,IAAI,EAAE,CAAC;QAEjD,MAAM,oBAAoB,CACxB;YACE,GAAG,cAAc;YACjB,SAAS,EAAE;gBACT,GAAG,SAAS;gBACZ,CAAC,OAAO,CAAC,EAAE,UAAU;aACtB;SACF,EACD,EAAE,UAAU,EAAE,CACf,CAAC;IACJ,CAAC;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AAExE,MAAM,UAAU,wBAAwB,CAAC,EAAE,UAAU,EAAwC;IAC3F,OAAO,SAAS,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAC9C,MAAM,gBAAgB,GAAqB,EAAE,CAAC;QAC9C,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;YAC7C,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;gBAC1C,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,SAAS,CAAC,MAAM,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,gBAAgB,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["/* eslint-disable @typescript-eslint/typedef */\nimport * as fs from 'fs';\nimport * as path from 'path';\nimport { traceStep } from '../telemetry.js';\nimport { getPackageDotJson, updatePackageDotJson } from './clack-utils.js';\nimport { analytics } from './analytics.js';\nimport type { InstallerOptions } from './types.js';\n\nexport interface PackageManager {\n  name: string;\n  label: string;\n  installCommand: string;\n  buildCommand: string;\n  /* The command that the package manager uses to run a script from package.json */\n  runScriptCommand: string;\n  flags: string;\n  forceInstallFlag: string;\n  detect: ({ installDir }: Pick<InstallerOptions, 'installDir'>) => boolean;\n  addOverride: (\n    pkgName: string,\n    pkgVersion: string,\n    { installDir }: Pick<InstallerOptions, 'installDir'>,\n  ) => Promise<void>;\n}\n\nexport const BUN: PackageManager = {\n  name: 'bun',\n  label: 'Bun',\n  installCommand: 'bun add',\n  buildCommand: 'bun run build',\n  runScriptCommand: 'bun run',\n  flags: '',\n  forceInstallFlag: '--force',\n  detect: ({ installDir }: Pick<InstallerOptions, 'installDir'>) =>\n    ['bun.lockb', 'bun.lock'].some((lockFile) => fs.existsSync(path.join(installDir, lockFile))),\n  addOverride: async (pkgName, pkgVersion, { installDir }: Pick<InstallerOptions, 'installDir'>): Promise<void> => {\n    const packageDotJson = await getPackageDotJson({ installDir });\n    const overrides = packageDotJson.overrides || {};\n\n    await updatePackageDotJson(\n      {\n        ...packageDotJson,\n        overrides: {\n          ...overrides,\n          [pkgName]: pkgVersion,\n        },\n      },\n      { installDir: installDir },\n    );\n  },\n};\nexport const YARN_V1: PackageManager = {\n  name: 'yarn',\n  label: 'Yarn V1',\n  installCommand: 'yarn add',\n  buildCommand: 'yarn build',\n  runScriptCommand: 'yarn',\n  flags: '--ignore-workspace-root-check',\n  forceInstallFlag: '--force',\n  detect: ({ installDir }: Pick<InstallerOptions, 'installDir'>) => {\n    try {\n      return fs.readFileSync(path.join(installDir, 'yarn.lock'), 'utf-8').slice(0, 500).includes('yarn lockfile v1');\n    } catch (e) {\n      return false;\n    }\n  },\n  addOverride: async (pkgName, pkgVersion, { installDir }: Pick<InstallerOptions, 'installDir'>): Promise<void> => {\n    const packageDotJson = await getPackageDotJson({ installDir });\n    const resolutions = packageDotJson.resolutions || {};\n\n    await updatePackageDotJson(\n      {\n        ...packageDotJson,\n        resolutions: {\n          ...resolutions,\n          [pkgName]: pkgVersion,\n        },\n      },\n      { installDir },\n    );\n  },\n};\n/** YARN V2/3/4 */\nexport const YARN_V2: PackageManager = {\n  name: 'yarn',\n  label: 'Yarn V2/3/4',\n  installCommand: 'yarn add',\n  buildCommand: 'yarn build',\n  runScriptCommand: 'yarn',\n  flags: '',\n  forceInstallFlag: '--force',\n  detect: ({ installDir }: Pick<InstallerOptions, 'installDir'>) => {\n    try {\n      return fs.readFileSync(path.join(installDir, 'yarn.lock'), 'utf-8').slice(0, 500).includes('__metadata');\n    } catch (e) {\n      return false;\n    }\n  },\n  addOverride: async (pkgName, pkgVersion, { installDir }: Pick<InstallerOptions, 'installDir'>): Promise<void> => {\n    const packageDotJson = await getPackageDotJson({ installDir });\n    const resolutions = packageDotJson.resolutions || {};\n\n    await updatePackageDotJson(\n      {\n        ...packageDotJson,\n        resolutions: {\n          ...resolutions,\n          [pkgName]: pkgVersion,\n        },\n      },\n      { installDir },\n    );\n  },\n};\nexport const PNPM: PackageManager = {\n  name: 'pnpm',\n  label: 'pnpm',\n  installCommand: 'pnpm add',\n  buildCommand: 'pnpm build',\n  runScriptCommand: 'pnpm',\n  flags: '--ignore-workspace-root-check',\n  forceInstallFlag: '--force',\n  detect: ({ installDir }: Pick<InstallerOptions, 'installDir'>) =>\n    fs.existsSync(path.join(installDir, 'pnpm-lock.yaml')),\n  addOverride: async (pkgName, pkgVersion, { installDir }: Pick<InstallerOptions, 'installDir'>): Promise<void> => {\n    const packageDotJson = await getPackageDotJson({ installDir });\n    const pnpm = packageDotJson.pnpm || {};\n    const overrides = pnpm.overrides || {};\n\n    await updatePackageDotJson(\n      {\n        ...packageDotJson,\n        pnpm: {\n          ...pnpm,\n          overrides: {\n            ...overrides,\n            [pkgName]: pkgVersion,\n          },\n        },\n      },\n      { installDir },\n    );\n  },\n};\nexport const NPM: PackageManager = {\n  name: 'npm',\n  label: 'npm',\n  installCommand: 'npm add',\n  buildCommand: 'npm run build',\n  runScriptCommand: 'npm run',\n  flags: '',\n  forceInstallFlag: '--force',\n  detect: ({ installDir }: Pick<InstallerOptions, 'installDir'>) =>\n    fs.existsSync(path.join(installDir, 'package-lock.json')),\n  addOverride: async (pkgName, pkgVersion, { installDir }: Pick<InstallerOptions, 'installDir'>): Promise<void> => {\n    const packageDotJson = await getPackageDotJson({ installDir });\n    const overrides = packageDotJson.overrides || {};\n\n    await updatePackageDotJson(\n      {\n        ...packageDotJson,\n        overrides: {\n          ...overrides,\n          [pkgName]: pkgVersion,\n        },\n      },\n      { installDir },\n    );\n  },\n};\n\nexport const EXPO: PackageManager = {\n  name: 'expo',\n  label: 'Expo',\n  installCommand: 'npx expo install',\n  buildCommand: 'npx expo build',\n  runScriptCommand: 'npx expo run',\n  flags: '',\n  forceInstallFlag: '--force',\n  detect: () => false,\n  addOverride: async (pkgName, pkgVersion, { installDir }: Pick<InstallerOptions, 'installDir'>): Promise<void> => {\n    const packageDotJson = await getPackageDotJson({ installDir });\n    const overrides = packageDotJson.overrides || {};\n\n    await updatePackageDotJson(\n      {\n        ...packageDotJson,\n        overrides: {\n          ...overrides,\n          [pkgName]: pkgVersion,\n        },\n      },\n      { installDir },\n    );\n  },\n};\n\nexport const packageManagers = [BUN, YARN_V1, YARN_V2, PNPM, NPM, EXPO];\n\nexport function detectAllPackageManagers({ installDir }: Pick<InstallerOptions, 'installDir'>): PackageManager[] {\n  return traceStep('detect-package-manager', () => {\n    const detectedManagers: PackageManager[] = [];\n    for (const packageManager of packageManagers) {\n      if (packageManager.detect({ installDir })) {\n        detectedManagers.push(packageManager);\n      }\n    }\n\n    if (detectedManagers.length === 0) {\n      analytics.setTag('package-manager', 'not-detected');\n    }\n    return detectedManagers;\n  });\n}\n"]}

package/dist/utils/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/utils/redact.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,YAAY,CAAC;IAEvD,gEAAgE;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAEnD,OAAO,GAAG,MAAM,MAAM,MAAM,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAQ;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC;IAExD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC;IAE5D,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE5B,kBAAkB;QAClB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,QAAQ,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;QACD,oCAAoC;aAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACrD,QAAQ,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC","sourcesContent":["/**\n * Redact sensitive values from logs\n */\n\nexport function redactApiKey(apiKey: string): string {\n  if (!apiKey || apiKey.length < 12) return '[REDACTED]';\n\n  // Show format: sk_test_xxx...xxx (first 8 chars + last 3 chars)\n  const prefix = apiKey.substring(0, 8);\n  const suffix = apiKey.substring(apiKey.length - 3);\n\n  return `${prefix}...${suffix}`;\n}\n\nexport function redactCredentials(obj: any): any {\n  if (typeof obj !== 'object' || obj === null) return obj;\n\n  const redacted = Array.isArray(obj) ? [...obj] : { ...obj };\n\n  for (const key in redacted) {\n    const value = redacted[key];\n\n    // Redact API keys\n    if (typeof value === 'string' && value.startsWith('sk_')) {\n      redacted[key] = redactApiKey(value);\n    }\n    // Recursively redact nested objects\n    else if (typeof value === 'object' && value !== null) {\n      redacted[key] = redactCredentials(value);\n    }\n  }\n\n  return redacted;\n}\n"]}

package/dist/utils/semver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semver.js","sourceRoot":"","sources":["../../src/utils/semver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEjF,MAAM,UAAU,oBAAoB,CAAC,EACnC,OAAO,EACP,kBAAkB,EAClB,WAAW,GAKZ;IACC,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,IAAI,kBAAkB,EAAE,OAAO,CAAC;IAEhC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACnB,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QACpC,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;SAAM,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,kBAAkB,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,OAAO;IACL,yGAAyG;IACzG,CAAC,CAAC,kBAAkB;QACpB,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC,CAC/G,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA2B,EAAE,YAAoB;IAChF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,YAAY,IAAI,YAAY,EAAE,CAAC;YACjC,OAAO,GAAG,YAAY,IAAI,CAAC;QAC7B,CAAC;QACD,OAAO,IAAI,YAAY,MAAM,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC","sourcesContent":["import { major, minVersion, satisfies, subset, valid, validRange } from 'semver';\n\nexport function fulfillsVersionRange({\n  version,\n  acceptableVersions,\n  canBeLatest,\n}: {\n  version: string;\n  acceptableVersions: string;\n  canBeLatest: boolean;\n}): boolean {\n  if (version === 'latest') {\n    return canBeLatest;\n  }\n\n  let cleanedUserVersion, isRange;\n\n  if (valid(version)) {\n    cleanedUserVersion = valid(version);\n    isRange = false;\n  } else if (validRange(version)) {\n    cleanedUserVersion = validRange(version);\n    isRange = true;\n  }\n\n  return (\n    // If the given version is a bogus format, this will still be undefined and we'll automatically reject it\n    !!cleanedUserVersion &&\n    (isRange ? subset(cleanedUserVersion, acceptableVersions) : satisfies(cleanedUserVersion, acceptableVersions))\n  );\n}\n\n/**\n * Get a version bucket string for analytics.\n * Returns format like \"15.x\" for versions >= minimumMajor, or \"<{minimumMajor}.0.0\" otherwise.\n */\nexport function getVersionBucket(version: string | undefined, minimumMajor: number): string {\n  if (!version) {\n    return 'none';\n  }\n\n  try {\n    const minVer = minVersion(version);\n    if (!minVer) {\n      return 'invalid';\n    }\n    const majorVersion = major(minVer);\n    if (majorVersion >= minimumMajor) {\n      return `${majorVersion}.x`;\n    }\n    return `<${minimumMajor}.0.0`;\n  } catch {\n    return 'unknown';\n  }\n}\n"]}

package/dist/utils/string.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"string.js","sourceRoot":"","sources":["../../src/utils/string.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,OAAO;IAChB,4CAA4C;IAC5C,6EAA6E,EAC7E,EAAE,CACH,CAAC;AACJ,CAAC","sourcesContent":["export function stripAnsii(str: string): string {\n  return str.replace(\n    // eslint-disable-next-line no-control-regex\n    /[\\u001b\\u009b][[()#;?]*(?:[0-9]{1,4}(?:;[0-9]{0,4})*)?[0-9A-ORZcf-nqry=><]/g,\n    '',\n  );\n}\n"]}

package/dist/{src/utils → utils}/telemetry-client.js

@@ -1,4 +1,5 @@
 import { debug } from './debug.js';
+import { getCredentials } from '../lib/credentials.js';
 /**
  * HTTP client that queues telemetry events and flushes them to the gateway.
  * Failures are silent—telemetry should never crash the wizard.
@@ -28,8 +29,11 @@ export class TelemetryClient {
         const headers = {
             'Content-Type': 'application/json',
         };
-        if (this.accessToken) {
-            headers['Authorization'] = `Bearer ${this.accessToken}`;
+        // Read fresh credentials to handle token refresh mid-session
+        const freshCreds = getCredentials();
+        const token = freshCreds?.accessToken ?? this.accessToken;
+        if (token) {
+            headers['Authorization'] = `Bearer ${token}`;
         }
         const controller = new AbortController();
         const timeout = setTimeout(() => controller.abort(), 3000);

package/dist/utils/telemetry-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-client.js","sourceRoot":"","sources":["../../src/utils/telemetry-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAEvD;;;GAGG;AACH,MAAM,OAAO,eAAe;IAClB,MAAM,GAAqB,EAAE,CAAC;IAC9B,WAAW,GAAkB,IAAI,CAAC;IAClC,UAAU,GAAkB,IAAI,CAAC;IAEzC,aAAa,CAAC,GAAW;QACvB,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;IACxB,CAAC;IAED,cAAc,CAAC,KAAa;QAC1B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;IAC3B,CAAC;IAED,UAAU,CAAC,KAAqB;QAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACrC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,KAAK,CAAC,uDAAuD,CAAC,CAAC;YAC/D,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAqB,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QAEjB,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;SACnC,CAAC;QACF,6DAA6D;QAC7D,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,UAAU,EAAE,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC;QAC1D,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,KAAK,EAAE,CAAC;QAC/C,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAE3D,IAAI,CAAC;YACH,KAAK,CAAC,uBAAuB,OAAO,CAAC,MAAM,CAAC,MAAM,cAAc,IAAI,CAAC,UAAU,YAAY,CAAC,CAAC;YAE7F,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,UAAU,YAAY,EAAE;gBAC3D,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,KAAK,CAAC,qCAAqC,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC","sourcesContent":["import { debug } from './debug.js';\nimport type { TelemetryEvent, TelemetryRequest } from './telemetry-types.js';\nimport { getCredentials } from '../lib/credentials.js';\n\n/**\n * HTTP client that queues telemetry events and flushes them to the gateway.\n * Failures are silent—telemetry should never crash the wizard.\n */\nexport class TelemetryClient {\n  private events: TelemetryEvent[] = [];\n  private accessToken: string | null = null;\n  private gatewayUrl: string | null = null;\n\n  setGatewayUrl(url: string) {\n    this.gatewayUrl = url;\n  }\n\n  setAccessToken(token: string) {\n    this.accessToken = token;\n  }\n\n  queueEvent(event: TelemetryEvent) {\n    this.events.push(event);\n  }\n\n  async flush(): Promise<void> {\n    if (this.events.length === 0) return;\n    if (!this.gatewayUrl) {\n      debug('[Telemetry] No gateway URL configured, skipping flush');\n      return;\n    }\n\n    const payload: TelemetryRequest = { events: [...this.events] };\n    this.events = [];\n\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n    };\n    // Read fresh credentials to handle token refresh mid-session\n    const freshCreds = getCredentials();\n    const token = freshCreds?.accessToken ?? this.accessToken;\n    if (token) {\n      headers['Authorization'] = `Bearer ${token}`;\n    }\n\n    const controller = new AbortController();\n    const timeout = setTimeout(() => controller.abort(), 3000);\n\n    try {\n      debug(`[Telemetry] Sending ${payload.events.length} events to ${this.gatewayUrl}/telemetry`);\n\n      const response = await fetch(`${this.gatewayUrl}/telemetry`, {\n        method: 'POST',\n        headers,\n        body: JSON.stringify(payload),\n        signal: controller.signal,\n      });\n\n      if (!response.ok) {\n        debug(`[Telemetry] Failed to send: ${response.status}`);\n      }\n    } catch (error) {\n      debug(`[Telemetry] Error sending events: ${error}`);\n    } finally {\n      clearTimeout(timeout);\n    }\n  }\n}\n\nexport const telemetryClient = new TelemetryClient();\n"]}

package/dist/{src/utils → utils}/telemetry-types.d.ts

@@ -1,5 +1,5 @@
 /**
- * Telemetry event types for wizard → gateway communication.
+ * Telemetry event types for installer → gateway communication.
  * The gateway converts these to OTel format.
  */
 export interface TelemetryEvent {
@@ -11,8 +11,8 @@ export interface TelemetryEvent {
 export interface SessionStartEvent extends TelemetryEvent {
     type: 'session.start';
     attributes: {
-        'wizard.version': string;
-        'wizard.mode': 'cli' | 'tui';
+        'installer.version': string;
+        'installer.mode': 'cli' | 'tui';
         'workos.user_id'?: string;
         'workos.org_id'?: string;
     };
@@ -20,8 +20,8 @@ export interface SessionStartEvent extends TelemetryEvent {
 export interface SessionEndEvent extends TelemetryEvent {
     type: 'session.end';
     attributes: {
-        'wizard.outcome': 'success' | 'error' | 'cancelled';
-        'wizard.duration_ms': number;
+        'installer.outcome': 'success' | 'error' | 'cancelled';
+        'installer.duration_ms': number;
     } & Record<string, string | number | boolean>;
 }
 export interface StepEvent extends TelemetryEvent {

package/dist/utils/telemetry-types.js

@@ -0,0 +1,6 @@
+/**
+ * Telemetry event types for installer → gateway communication.
+ * The gateway converts these to OTel format.
+ */
+export {};
+//# sourceMappingURL=telemetry-types.js.map

package/dist/utils/telemetry-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-types.js","sourceRoot":"","sources":["../../src/utils/telemetry-types.ts"],"names":[],"mappings":"AAAA;;;GAGG","sourcesContent":["/**\n * Telemetry event types for installer → gateway communication.\n * The gateway converts these to OTel format.\n */\n\nexport interface TelemetryEvent {\n  type: 'session.start' | 'session.end' | 'step' | 'agent.tool' | 'agent.llm';\n  sessionId: string;\n  timestamp: string;\n  attributes?: Record<string, string | number | boolean>;\n}\n\nexport interface SessionStartEvent extends TelemetryEvent {\n  type: 'session.start';\n  attributes: {\n    'installer.version': string;\n    'installer.mode': 'cli' | 'tui';\n    'workos.user_id'?: string;\n    'workos.org_id'?: string;\n  };\n}\n\nexport interface SessionEndEvent extends TelemetryEvent {\n  type: 'session.end';\n  attributes: {\n    'installer.outcome': 'success' | 'error' | 'cancelled';\n    'installer.duration_ms': number;\n  } & Record<string, string | number | boolean>;\n}\n\nexport interface StepEvent extends TelemetryEvent {\n  type: 'step';\n  name: string;\n  durationMs: number;\n  success: boolean;\n  error?: {\n    type: string;\n    message: string;\n  };\n}\n\nexport interface AgentToolEvent extends TelemetryEvent {\n  type: 'agent.tool';\n  toolName: string;\n  durationMs: number;\n  success: boolean;\n}\n\nexport interface AgentLLMEvent extends TelemetryEvent {\n  type: 'agent.llm';\n  model: string;\n  inputTokens: number;\n  outputTokens: number;\n}\n\nexport interface TelemetryRequest {\n  events: TelemetryEvent[];\n}\n"]}

package/dist/{src/utils → utils}/types.d.ts

@@ -1,4 +1,4 @@
-export type WizardOptions = {
+export type InstallerOptions = {
     /**
      * Whether to enable debug mode.
      */
@@ -53,7 +53,7 @@ export type WizardOptions = {
     /**
      * Event emitter for dashboard mode
      */
-    emitter?: import('../lib/events.js').WizardEventEmitter;
+    emitter?: import('../lib/events.js').InstallerEventEmitter;
     /**
      * Pre-selected framework integration (bypasses detection)
      */
@@ -70,6 +70,11 @@ export type WizardOptions = {
      * Skip post-install commit and PR workflow
      */
     noCommit?: boolean;
+    /**
+     * Direct mode - bypass llm-gateway and use user's own Anthropic API key.
+     * Requires ANTHROPIC_API_KEY environment variable.
+     */
+    direct?: boolean;
 };
 export interface Feature {
     id: string;

package/dist/{src/utils → utils}/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/utils/types.ts"],"names":[],"mappings":"","sourcesContent":["export type WizardOptions = {\n  /**\n   * Whether to enable debug mode.\n   */\n  debug: boolean;\n\n  /**\n   * Whether to force install the SDK package to continue with the installation in case\n   * any package manager checks are failing (e.g. peer dependency versions).\n   *\n   * Use with caution and only if you know what you're doing.\n   *\n   * Does not apply to all wizard flows (currently NPM only)\n   */\n  forceInstall: boolean;\n\n  /**\n   * The directory to run the wizard in.\n   */\n  installDir: string;\n\n  /**\n   * Whether to use local services (LLM gateway on localhost:8000)\n   */\n  local: boolean;\n\n  /**\n   * CI mode - non-interactive execution\n   */\n  ci: boolean;\n\n  /**\n   * Skip authentication check (for local development only)\n   */\n  skipAuth: boolean;\n\n  /**\n   * WorkOS API key (sk_xxx)\n   */\n  apiKey?: string;\n\n  /**\n   * WorkOS Client ID (client_xxx)\n   */\n  clientId?: string;\n\n  /**\n   * App homepage URL for WorkOS dashboard config.\n   * Defaults to http://localhost:{detected_port}\n   */\n  homepageUrl?: string;\n\n  /**\n   * Redirect URI for WorkOS callback.\n   * Defaults to framework-specific convention (e.g., /api/auth/callback)\n   */\n  redirectUri?: string;\n\n  /**\n   * [Experimental] Enable visual dashboard mode\n   */\n  dashboard?: boolean;\n\n  /**\n   * Event emitter for dashboard mode\n   */\n  emitter?: import('../lib/events.js').WizardEventEmitter;\n\n  /**\n   * Pre-selected framework integration (bypasses detection)\n   */\n  integration?: import('../lib/constants.js').Integration;\n\n  /**\n   * Enable XState inspector - opens browser to visualize state machine live\n   */\n  inspect?: boolean;\n\n  /**\n   * Skip post-installation validation (includes build check)\n   */\n  noValidate?: boolean;\n\n  /**\n   * Skip post-install commit and PR workflow\n   */\n  noCommit?: boolean;\n};\n\nexport interface Feature {\n  id: string;\n  prompt: string;\n  enabledHint?: string;\n  disabledHint?: string;\n}\n\nexport type FileChange = {\n  filePath: string;\n  oldContent?: string;\n  newContent: string;\n};\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/utils/types.ts"],"names":[],"mappings":"","sourcesContent":["export type InstallerOptions = {\n  /**\n   * Whether to enable debug mode.\n   */\n  debug: boolean;\n\n  /**\n   * Whether to force install the SDK package to continue with the installation in case\n   * any package manager checks are failing (e.g. peer dependency versions).\n   *\n   * Use with caution and only if you know what you're doing.\n   *\n   * Does not apply to all wizard flows (currently NPM only)\n   */\n  forceInstall: boolean;\n\n  /**\n   * The directory to run the wizard in.\n   */\n  installDir: string;\n\n  /**\n   * Whether to use local services (LLM gateway on localhost:8000)\n   */\n  local: boolean;\n\n  /**\n   * CI mode - non-interactive execution\n   */\n  ci: boolean;\n\n  /**\n   * Skip authentication check (for local development only)\n   */\n  skipAuth: boolean;\n\n  /**\n   * WorkOS API key (sk_xxx)\n   */\n  apiKey?: string;\n\n  /**\n   * WorkOS Client ID (client_xxx)\n   */\n  clientId?: string;\n\n  /**\n   * App homepage URL for WorkOS dashboard config.\n   * Defaults to http://localhost:{detected_port}\n   */\n  homepageUrl?: string;\n\n  /**\n   * Redirect URI for WorkOS callback.\n   * Defaults to framework-specific convention (e.g., /api/auth/callback)\n   */\n  redirectUri?: string;\n\n  /**\n   * [Experimental] Enable visual dashboard mode\n   */\n  dashboard?: boolean;\n\n  /**\n   * Event emitter for dashboard mode\n   */\n  emitter?: import('../lib/events.js').InstallerEventEmitter;\n\n  /**\n   * Pre-selected framework integration (bypasses detection)\n   */\n  integration?: import('../lib/constants.js').Integration;\n\n  /**\n   * Enable XState inspector - opens browser to visualize state machine live\n   */\n  inspect?: boolean;\n\n  /**\n   * Skip post-installation validation (includes build check)\n   */\n  noValidate?: boolean;\n\n  /**\n   * Skip post-install commit and PR workflow\n   */\n  noCommit?: boolean;\n\n  /**\n   * Direct mode - bypass llm-gateway and use user's own Anthropic API key.\n   * Requires ANTHROPIC_API_KEY environment variable.\n   */\n  direct?: boolean;\n};\n\nexport interface Feature {\n  id: string;\n  prompt: string;\n  enabledHint?: string;\n  disabledHint?: string;\n}\n\nexport type FileChange = {\n  filePath: string;\n  oldContent?: string;\n  newContent: string;\n};\n"]}

package/dist/utils/urls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"urls.js","sourceRoot":"","sources":["../../src/utils/urls.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD;;GAEG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,wBAAwB,CAAC;AAE5F,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,8BAA8B,CAAC;AAE9G,MAAM,CAAC,MAAM,wBAAwB,GAAG,gBAAgB,CAAC","sourcesContent":["import { getLlmGatewayUrl } from '../lib/settings.js';\n\n/**\n * Get URLs. Env vars override config defaults.\n */\n\nexport const getWorkOSApiUrl = () => process.env.WORKOS_API_URL || 'https://api.workos.com';\n\nexport const getWorkOSDashboardUrl = () => process.env.WORKOS_DASHBOARD_URL || 'https://dashboard.workos.com';\n\nexport const getLlmGatewayUrlFromHost = getLlmGatewayUrl;\n"]}

package/dist/utils/vendor/is-unicorn-supported.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"is-unicorn-supported.js","sourceRoot":"","sources":["../../../src/utils/vendor/is-unicorn-supported.ts"],"names":[],"mappings":"AAAA,gIAAgI;AAEhI,cAAc;AAEd,kFAAkF;AAElF,mbAAmb;AAEnb,iIAAiI;AAEjI,+cAA+c;AAE/c,MAAM,UAAU,kBAAkB;IAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,yBAAyB;IAChE,CAAC;IAED,OAAO,CACL,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,mBAAmB;QACtD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,qBAAqB;QAC9D,OAAO,CAAC,GAAG,CAAC,UAAU,KAAK,cAAc,IAAI,mBAAmB;QAChE,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,kBAAkB;QAC/C,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,QAAQ;QACrC,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,gBAAgB;QACrC,OAAO,CAAC,GAAG,CAAC,IAAI,KAAK,WAAW;QAChC,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,oBAAoB,CACvD,CAAC;AACJ,CAAC","sourcesContent":["// Vendored from: https://github.com/sindresorhus/is-unicode-supported/blob/c80c691dde9e2fcfe3996810858c6672c8f35ad9/index.js#L3\n\n// MIT License\n\n// Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)\n\n// Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the \"Software\"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:\n\n// The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.\n\n// THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n\nexport function isUnicodeSupported() {\n  if (process.platform !== 'win32') {\n    return process.env.TERM !== 'linux'; // Linux console (kernel)\n  }\n\n  return (\n    Boolean(process.env.CI) ||\n    Boolean(process.env.WT_SESSION) || // Windows Terminal\n    Boolean(process.env.TERMINUS_SUBLIME) || // Terminus (<0.2.27)\n    process.env.ConEmuTask === '{cmd::Cmder}' || // ConEmu and cmder\n    process.env.TERM_PROGRAM === 'Terminus-Sublime' ||\n    process.env.TERM_PROGRAM === 'vscode' ||\n    process.env.TERM === 'xterm-256color' ||\n    process.env.TERM === 'alacritty' ||\n    process.env.TERMINAL_EMULATOR === 'JetBrains-JediTerm'\n  );\n}\n"]}

package/dist/vanilla-js/vanilla-js-installer-agent.d.ts

@@ -0,0 +1,2 @@
+import type { InstallerOptions } from '../utils/types.js';
+export declare function runVanillaJsInstallerAgent(options: InstallerOptions): Promise<string>;

package/dist/{src/vanilla-js/vanilla-js-wizard-agent.js → vanilla-js/vanilla-js-installer-agent.js}

@@ -1,5 +1,5 @@
 import { enableDebugLogs } from '../utils/debug.js';
-import { runAgentWizard } from '../lib/agent-runner.js';
+import { runAgentInstaller } from '../lib/agent-runner.js';
 import { Integration } from '../lib/constants.js';
 const VANILLA_JS_AGENT_CONFIG = {
     metadata: {
@@ -38,10 +38,10 @@ const VANILLA_JS_AGENT_CONFIG = {
         ],
     },
 };
-export async function runVanillaJsWizardAgent(options) {
+export async function runVanillaJsInstallerAgent(options) {
     if (options.debug) {
         enableDebugLogs();
     }
-    return runAgentWizard(VANILLA_JS_AGENT_CONFIG, options);
+    return runAgentInstaller(VANILLA_JS_AGENT_CONFIG, options);
 }
-//# sourceMappingURL=vanilla-js-wizard-agent.js.map
+//# sourceMappingURL=vanilla-js-installer-agent.js.map

package/dist/vanilla-js/vanilla-js-installer-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vanilla-js-installer-agent.js","sourceRoot":"","sources":["../../src/vanilla-js/vanilla-js-installer-agent.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAElD,MAAM,uBAAuB,GAAoB;IAC/C,QAAQ,EAAE;QACR,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,WAAW,CAAC,SAAS;QAClC,OAAO,EAAE,4DAA4D;QACrE,yBAAyB,EAAE,4DAA4D;QACvF,SAAS,EAAE,2BAA2B;KACvC;IAED,SAAS,EAAE;QACT,WAAW,EAAE,QAAQ;QACrB,kBAAkB,EAAE,oBAAoB;QACxC,UAAU,EAAE,GAAG,EAAE,CAAC,SAAS;KAC5B;IAED,WAAW,EAAE;QACX,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,KAAK,EAAE,cAAc;QACrC,UAAU,EAAE,CAAC,MAAc,EAAE,QAAgB,EAAE,EAAE,CAAC,CAAC;YACjD,gBAAgB,EAAE,QAAQ,EAAE,wBAAwB;SACrD,CAAC;KACH;IAED,SAAS,EAAE;QACT,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;KACpB;IAED,OAAO,EAAE,EAAE;IAEX,EAAE,EAAE;QACF,cAAc,EAAE,qCAAqC;QACrD,eAAe,EAAE,GAAG,EAAE,CAAC;YACrB,oCAAoC;YACpC,qDAAqD;YACrD,mCAAmC;SACpC;QACD,iBAAiB,EAAE,GAAG,EAAE,CAAC;YACvB,sDAAsD;YACtD,yDAAyD;SAC1D;KACF;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,OAAyB;IACxE,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,eAAe,EAAE,CAAC;IACpB,CAAC;IAED,OAAO,iBAAiB,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;AAC7D,CAAC","sourcesContent":["/* Vanilla JS wizard using Claude Agent SDK */\nimport type { InstallerOptions } from '../utils/types.js';\nimport type { FrameworkConfig } from '../lib/framework-config.js';\nimport { enableDebugLogs } from '../utils/debug.js';\nimport { runAgentInstaller } from '../lib/agent-runner.js';\nimport { Integration } from '../lib/constants.js';\n\nconst VANILLA_JS_AGENT_CONFIG: FrameworkConfig = {\n  metadata: {\n    name: 'Vanilla JavaScript',\n    integration: Integration.vanillaJs,\n    docsUrl: 'https://workos.com/docs/user-management/authkit/javascript',\n    unsupportedVersionDocsUrl: 'https://workos.com/docs/user-management/authkit/javascript',\n    skillName: 'workos-authkit-vanilla-js',\n  },\n\n  detection: {\n    packageName: 'workos',\n    packageDisplayName: 'Vanilla JavaScript',\n    getVersion: () => undefined,\n  },\n\n  environment: {\n    uploadToHosting: false,\n    requiresApiKey: false, // Client-only\n    getEnvVars: (apiKey: string, clientId: string) => ({\n      WORKOS_CLIENT_ID: clientId, // Only client ID needed\n    }),\n  },\n\n  analytics: {\n    getTags: () => ({}),\n  },\n\n  prompts: {},\n\n  ui: {\n    successMessage: 'WorkOS AuthKit integration complete',\n    getOutroChanges: () => [\n      'Created WorkOS AuthKit integration',\n      'Added authentication to your JavaScript application',\n      'Set up login/logout functionality',\n    ],\n    getOutroNextSteps: () => [\n      'Start your development server to test authentication',\n      'Visit the WorkOS Dashboard to manage users and settings',\n    ],\n  },\n};\n\nexport async function runVanillaJsInstallerAgent(options: InstallerOptions): Promise<string> {\n  if (options.debug) {\n    enableDebugLogs();\n  }\n\n  return runAgentInstaller(VANILLA_JS_AGENT_CONFIG, options);\n}\n"]}

package/package.json

@@ -1,8 +1,12 @@
 {
   "name": "workos",
-  "version": "0.2.1",
+  "version": "0.3.3",
   "type": "module",
   "description": "The Official Workos CLI",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/workos/cli"
+  },
   "keywords": [
     "workos",
     "authkit",
@@ -21,9 +25,7 @@
     "access": "public"
   },
   "files": [
-    "dist/bin.*",
-    "dist/src",
-    "dist/cli.config.*",
+    "dist",
     ".claude-plugin",
     "skills",
     "package.json",
@@ -58,12 +60,14 @@
     "@types/react": "^19.2.9",
     "@types/semver": "^7.7.1",
     "@types/yargs": "^17.0.35",
-    "@vitest/ui": "^4.0.17",
+    "@vitest/coverage-v8": "^4.0.18",
+    "@vitest/ui": "^4.0.18",
     "dotenv": "^17.2.3",
+    "p-limit": "^7.2.0",
     "prettier": "^3.8.0",
     "tsx": "^4.20.3",
     "typescript": "^5.9.3",
-    "vitest": "^4.0.17"
+    "vitest": "^4.0.18"
   },
   "engines": {
     "node": ">=20.20"
@@ -72,7 +76,7 @@
   "license": "MIT",
   "scripts": {
     "clean": "rm -rf ./dist",
-    "prebuild": "echo \"export const version = '$(node -p \"require('./package.json').version\")';\" > src/version.ts && pnpm clean",
+    "prebuild": "pnpm clean",
     "build:watch": "pnpm tsc -w",
     "build": "pnpm tsc",
     "postbuild": "chmod +x ./dist/bin.js && cp -r scripts/** dist",
@@ -82,6 +86,12 @@
     "dev": "pnpm build && pnpm link --global && pnpm build:watch",
     "test": "vitest run",
     "test:watch": "vitest",
-    "typecheck": "tsc --noEmit"
+    "test:coverage": "vitest run --coverage",
+    "typecheck": "tsc --noEmit",
+    "eval": "tsx tests/evals/index.ts",
+    "eval:history": "tsx tests/evals/index.ts history",
+    "eval:compare": "tsx tests/evals/index.ts compare",
+    "eval:logs": "tsx tests/evals/index.ts logs",
+    "eval:show": "tsx tests/evals/index.ts show"
   }
 }

package/skills/workos-authkit-nextjs/SKILL.md

@@ -55,6 +55,46 @@ Next.js version?
 
 Middleware/proxy code: See README for `authkitMiddleware()` export pattern.
 
+### Existing Middleware (IMPORTANT)
+
+If `middleware.ts` already exists with custom logic (rate limiting, logging, headers, etc.), use the **`authkit()` composable function** instead of `authkitMiddleware`.
+
+**Pattern for composing with existing middleware:**
+
+```typescript
+import { NextRequest, NextResponse } from 'next/server';
+import { authkit, handleAuthkitHeaders } from '@workos-inc/authkit-nextjs';
+
+export default async function middleware(request: NextRequest) {
+  // 1. Get auth session and headers from AuthKit
+  const { session, headers, authorizationUrl } = await authkit(request);
+  const { pathname } = request.nextUrl;
+
+  // 2. === YOUR EXISTING MIDDLEWARE LOGIC ===
+  // Rate limiting, logging, custom headers, etc.
+  const rateLimitResult = checkRateLimit(request);
+  if (!rateLimitResult.allowed) {
+    return new NextResponse('Too Many Requests', { status: 429 });
+  }
+
+  // 3. Protect routes - redirect to auth if needed
+  if (pathname.startsWith('/dashboard') && !session.user && authorizationUrl) {
+    return handleAuthkitHeaders(request, headers, { redirect: authorizationUrl });
+  }
+
+  // 4. Continue with AuthKit headers properly handled
+  return handleAuthkitHeaders(request, headers);
+}
+```
+
+**Key functions:**
+
+- `authkit(request)` - Returns `{ session, headers, authorizationUrl }` for composition
+- `handleAuthkitHeaders(request, headers, options?)` - Ensures AuthKit headers pass through correctly
+- For rewrites, use `partitionAuthkitHeaders()` and `applyResponseHeaders()` (see README)
+
+**Critical:** Always return via `handleAuthkitHeaders()` to ensure `withAuth()` works in pages.
+
 ## Step 5: Create Callback Route
 
 Parse `NEXT_PUBLIC_WORKOS_REDIRECT_URI` to determine route path:
@@ -78,33 +118,58 @@ export const GET = handleAuth();
 
 Check README for exact usage. If build fails with "cookies outside request scope", the handler is likely missing async/await.
 
-## Step 6: Provider Setup
+## Step 6: Provider Setup (REQUIRED)
+
+**CRITICAL:** You MUST wrap the app in `AuthKitProvider` in `app/layout.tsx`.
+
+This is required for:
+
+- Client-side auth state via `useAuth()` hook
+- Consistent auth UX across client/server boundaries
+- Proper migration from Auth0 (which uses client-side auth)
+
+```tsx
+// app/layout.tsx
+import { AuthKitProvider } from '@workos-inc/authkit-nextjs';
+
+export default function RootLayout({ children }: { children: React.ReactNode }) {
+  return (
+    <html lang="en">
+      <body>
+        <AuthKitProvider>{children}</AuthKitProvider>
+      </body>
+    </html>
+  );
+}
+```
+
+Check README for exact import path - it may be a subpath export like `@workos-inc/authkit-nextjs/components`.
 
-Wrap app in `AuthKitProvider` in `app/layout.tsx`. See README for import path.
+**Do NOT skip this step** even if using server-side auth patterns elsewhere.
 
 ## Step 7: UI Integration
 
 Add auth UI to `app/page.tsx` using SDK functions. See README for `getUser`, `getSignInUrl`, `signOut` usage.
 
-## Verification Checklist
+## Verification Checklist (ALL MUST PASS)
 
-Run these commands to confirm integration:
+Run these commands to confirm integration. **Do not mark complete until all pass:**
 
 ```bash
-# Check middleware/proxy exists (one should match)
+# 1. Check middleware/proxy exists (one should match)
 ls proxy.ts middleware.ts src/proxy.ts src/middleware.ts 2>/dev/null
 
-# Check provider is wrapped
-grep -l "AuthKitProvider" app/layout.tsx
+# 2. CRITICAL: Check AuthKitProvider is in layout (REQUIRED)
+grep "AuthKitProvider" app/layout.tsx || echo "FAIL: AuthKitProvider missing from layout"
 
-# Check callback route exists
+# 3. Check callback route exists
 find app -name "route.ts" -path "*/callback/*"
 
-# Build succeeds
+# 4. Build succeeds
 npm run build
 ```
 
-All checks must pass before marking complete.
+**If check #2 fails:** Go back to Step 6 and add AuthKitProvider. This is not optional.
 
 ## Error Recovery