workos 0.4.5 → 0.5.0

package/dist/doctor/checks/sdk.js

@@ -0,0 +1,111 @@
+import { getPackageDotJson } from '../../utils/clack-utils.js';
+import { hasPackageInstalled, getPackageVersion } from '../../utils/package-json.js';
+// AuthKit SDKs - check newer @workos/* scope first, then legacy @workos-inc/*
+const SDK_PACKAGES = [
+    // New @workos/* scope
+    '@workos/authkit-nextjs',
+    '@workos/authkit-tanstack-react-start',
+    '@workos/authkit-react-router',
+    '@workos/authkit-remix',
+    '@workos/authkit-sveltekit',
+    '@workos/authkit-react',
+    '@workos/authkit-js',
+    // Legacy @workos-inc/* scope
+    '@workos-inc/authkit-nextjs',
+    '@workos-inc/authkit-remix',
+    '@workos-inc/authkit-react-router',
+    '@workos-inc/authkit-react',
+    '@workos-inc/authkit-js',
+    '@workos-inc/node',
+    'workos', // very old legacy
+];
+const AUTHKIT_PACKAGES = new Set([
+    '@workos/authkit-nextjs',
+    '@workos/authkit-tanstack-react-start',
+    '@workos/authkit-react-router',
+    '@workos/authkit-remix',
+    '@workos/authkit-sveltekit',
+    '@workos/authkit-react',
+    '@workos/authkit-js',
+    '@workos-inc/authkit-nextjs',
+    '@workos-inc/authkit-remix',
+    '@workos-inc/authkit-react-router',
+    '@workos-inc/authkit-react',
+    '@workos-inc/authkit-js',
+]);
+export async function checkSdk(options) {
+    let packageJson;
+    try {
+        packageJson = await getPackageDotJson(options);
+    }
+    catch {
+        return {
+            name: null,
+            version: null,
+            latest: null,
+            outdated: false,
+            isAuthKit: false,
+        };
+    }
+    // Find installed SDK (order matters—AuthKit before standalone)
+    const installedSdk = SDK_PACKAGES.find((pkg) => hasPackageInstalled(pkg, packageJson));
+    if (!installedSdk) {
+        return {
+            name: null,
+            version: null,
+            latest: null,
+            outdated: false,
+            isAuthKit: false,
+        };
+    }
+    const version = getPackageVersion(installedSdk, packageJson) ?? null;
+    const latest = await fetchLatestVersion(installedSdk);
+    return {
+        name: installedSdk,
+        version,
+        latest,
+        outdated: version && latest ? isVersionOutdated(version, latest) : false,
+        isAuthKit: AUTHKIT_PACKAGES.has(installedSdk),
+    };
+}
+async function fetchLatestVersion(packageName) {
+    try {
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), 5000);
+        const response = await fetch(`https://registry.npmjs.org/${packageName}/latest`, {
+            signal: controller.signal,
+        });
+        clearTimeout(timeoutId);
+        if (!response.ok)
+            return null;
+        const data = (await response.json());
+        return data.version ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+function isVersionOutdated(current, latest) {
+    // Strip semver range prefixes (^, ~, etc.) and workspace protocol
+    const cleanCurrent = current.replace(/^[\^~>=<]+/, '').replace(/^workspace:\*?/, '');
+    const cleanLatest = latest.replace(/^[\^~>=<]+/, '');
+    // Handle prerelease: "1.0.0-beta.1" → "1.0.0", "-beta.1"
+    const [currBase] = cleanCurrent.split('-');
+    const [latBase] = cleanLatest.split('-');
+    const currParts = currBase.split('.').map(Number);
+    const latParts = latBase.split('.').map(Number);
+    // If we got NaN values, we can't reliably compare - assume not outdated
+    if (currParts.some(isNaN) || latParts.some(isNaN)) {
+        return false;
+    }
+    const [currMajor = 0, currMinor = 0, currPatch = 0] = currParts;
+    const [latMajor = 0, latMinor = 0, latPatch = 0] = latParts;
+    if (latMajor > currMajor)
+        return true;
+    if (latMajor === currMajor && latMinor > currMinor)
+        return true;
+    if (latMajor === currMajor && latMinor === currMinor && latPatch > currPatch)
+        return true;
+    return false;
+}
+//# sourceMappingURL=sdk.js.map

package/dist/doctor/checks/sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk.js","sourceRoot":"","sources":["../../../src/doctor/checks/sdk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAGrF,8EAA8E;AAC9E,MAAM,YAAY,GAAG;IACnB,sBAAsB;IACtB,wBAAwB;IACxB,sCAAsC;IACtC,8BAA8B;IAC9B,uBAAuB;IACvB,2BAA2B;IAC3B,uBAAuB;IACvB,oBAAoB;IACpB,6BAA6B;IAC7B,4BAA4B;IAC5B,2BAA2B;IAC3B,kCAAkC;IAClC,2BAA2B;IAC3B,wBAAwB;IACxB,kBAAkB;IAClB,QAAQ,EAAE,kBAAkB;CACpB,CAAC;AAEX,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,wBAAwB;IACxB,sCAAsC;IACtC,8BAA8B;IAC9B,uBAAuB;IACvB,2BAA2B;IAC3B,uBAAuB;IACvB,oBAAoB;IACpB,4BAA4B;IAC5B,2BAA2B;IAC3B,kCAAkC;IAClC,2BAA2B;IAC3B,wBAAwB;CACzB,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAsB;IACnD,IAAI,WAAW,CAAC;IAChB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;IAEvF,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO;YACL,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,KAAK;YACf,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,YAAY,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAEtD,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,OAAO;QACP,MAAM;QACN,QAAQ,EAAE,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK;QACxE,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,WAAmB;IACnD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAE7D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,8BAA8B,WAAW,SAAS,EAAE;YAC/E,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,YAAY,CAAC,SAAS,CAAC,CAAC;QAExB,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;QAC7D,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,MAAc;IACxD,kEAAkE;IAClE,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAErD,yDAAyD;IACzD,MAAM,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,CAAC,OAAO,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEzC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEhD,wEAAwE;IACxE,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,CAAC,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC;IAChE,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC;IAE5D,IAAI,QAAQ,GAAG,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,SAAS;QAAE,OAAO,IAAI,CAAC;IAChE,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,GAAG,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1F,OAAO,KAAK,CAAC;AACf,CAAC","sourcesContent":["import { getPackageDotJson } from '../../utils/clack-utils.js';\nimport { hasPackageInstalled, getPackageVersion } from '../../utils/package-json.js';\nimport type { DoctorOptions, SdkInfo } from '../types.js';\n\n// AuthKit SDKs - check newer @workos/* scope first, then legacy @workos-inc/*\nconst SDK_PACKAGES = [\n  // New @workos/* scope\n  '@workos/authkit-nextjs',\n  '@workos/authkit-tanstack-react-start',\n  '@workos/authkit-react-router',\n  '@workos/authkit-remix',\n  '@workos/authkit-sveltekit',\n  '@workos/authkit-react',\n  '@workos/authkit-js',\n  // Legacy @workos-inc/* scope\n  '@workos-inc/authkit-nextjs',\n  '@workos-inc/authkit-remix',\n  '@workos-inc/authkit-react-router',\n  '@workos-inc/authkit-react',\n  '@workos-inc/authkit-js',\n  '@workos-inc/node',\n  'workos', // very old legacy\n] as const;\n\nconst AUTHKIT_PACKAGES = new Set([\n  '@workos/authkit-nextjs',\n  '@workos/authkit-tanstack-react-start',\n  '@workos/authkit-react-router',\n  '@workos/authkit-remix',\n  '@workos/authkit-sveltekit',\n  '@workos/authkit-react',\n  '@workos/authkit-js',\n  '@workos-inc/authkit-nextjs',\n  '@workos-inc/authkit-remix',\n  '@workos-inc/authkit-react-router',\n  '@workos-inc/authkit-react',\n  '@workos-inc/authkit-js',\n]);\n\nexport async function checkSdk(options: DoctorOptions): Promise<SdkInfo> {\n  let packageJson;\n  try {\n    packageJson = await getPackageDotJson(options);\n  } catch {\n    return {\n      name: null,\n      version: null,\n      latest: null,\n      outdated: false,\n      isAuthKit: false,\n    };\n  }\n\n  // Find installed SDK (order matters—AuthKit before standalone)\n  const installedSdk = SDK_PACKAGES.find((pkg) => hasPackageInstalled(pkg, packageJson));\n\n  if (!installedSdk) {\n    return {\n      name: null,\n      version: null,\n      latest: null,\n      outdated: false,\n      isAuthKit: false,\n    };\n  }\n\n  const version = getPackageVersion(installedSdk, packageJson) ?? null;\n  const latest = await fetchLatestVersion(installedSdk);\n\n  return {\n    name: installedSdk,\n    version,\n    latest,\n    outdated: version && latest ? isVersionOutdated(version, latest) : false,\n    isAuthKit: AUTHKIT_PACKAGES.has(installedSdk),\n  };\n}\n\nasync function fetchLatestVersion(packageName: string): Promise<string | null> {\n  try {\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), 5000);\n\n    const response = await fetch(`https://registry.npmjs.org/${packageName}/latest`, {\n      signal: controller.signal,\n    });\n\n    clearTimeout(timeoutId);\n\n    if (!response.ok) return null;\n    const data = (await response.json()) as { version?: string };\n    return data.version ?? null;\n  } catch {\n    return null;\n  }\n}\n\nfunction isVersionOutdated(current: string, latest: string): boolean {\n  // Strip semver range prefixes (^, ~, etc.) and workspace protocol\n  const cleanCurrent = current.replace(/^[\\^~>=<]+/, '').replace(/^workspace:\\*?/, '');\n  const cleanLatest = latest.replace(/^[\\^~>=<]+/, '');\n\n  // Handle prerelease: \"1.0.0-beta.1\" → \"1.0.0\", \"-beta.1\"\n  const [currBase] = cleanCurrent.split('-');\n  const [latBase] = cleanLatest.split('-');\n\n  const currParts = currBase.split('.').map(Number);\n  const latParts = latBase.split('.').map(Number);\n\n  // If we got NaN values, we can't reliably compare - assume not outdated\n  if (currParts.some(isNaN) || latParts.some(isNaN)) {\n    return false;\n  }\n\n  const [currMajor = 0, currMinor = 0, currPatch = 0] = currParts;\n  const [latMajor = 0, latMinor = 0, latPatch = 0] = latParts;\n\n  if (latMajor > currMajor) return true;\n  if (latMajor === currMajor && latMinor > currMinor) return true;\n  if (latMajor === currMajor && latMinor === currMinor && latPatch > currPatch) return true;\n  return false;\n}\n"]}

package/dist/doctor/clipboard.d.ts

@@ -0,0 +1 @@
+export declare function copyToClipboard(text: string): Promise<boolean>;

package/dist/doctor/clipboard.js

@@ -0,0 +1,43 @@
+import { spawn } from 'node:child_process';
+import { platform } from 'node:os';
+/**
+ * Execute a command with stdin input.
+ * Returns true if the command succeeded (exit code 0).
+ */
+function execWithStdin(command, args, input) {
+    return new Promise((resolve) => {
+        const child = spawn(command, args, {
+            shell: false,
+            stdio: ['pipe', 'ignore', 'ignore'],
+        });
+        child.on('error', () => resolve(false));
+        child.on('close', (code) => resolve(code === 0));
+        child.stdin?.write(input);
+        child.stdin?.end();
+    });
+}
+export async function copyToClipboard(text) {
+    const os = platform();
+    try {
+        if (os === 'darwin') {
+            // macOS: use pbcopy
+            return await execWithStdin('pbcopy', [], text);
+        }
+        else if (os === 'linux') {
+            // Linux: try xclip first, then xsel
+            const xclipResult = await execWithStdin('xclip', ['-selection', 'clipboard'], text);
+            if (xclipResult)
+                return true;
+            return await execWithStdin('xsel', ['--clipboard', '--input'], text);
+        }
+        else if (os === 'win32') {
+            // Windows: use clip.exe
+            return await execWithStdin('clip', [], text);
+        }
+        return false;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=clipboard.js.map

package/dist/doctor/clipboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clipboard.js","sourceRoot":"","sources":["../../src/doctor/clipboard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEnC;;;GAGG;AACH,SAAS,aAAa,CAAC,OAAe,EAAE,IAAc,EAAE,KAAa;IACnE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YACjC,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACxC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QAEjD,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,MAAM,EAAE,GAAG,QAAQ,EAAE,CAAC;IAEtB,IAAI,CAAC;QACH,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;YACpB,oBAAoB;YACpB,OAAO,MAAM,aAAa,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YAC1B,oCAAoC;YACpC,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;YACpF,IAAI,WAAW;gBAAE,OAAO,IAAI,CAAC;YAC7B,OAAO,MAAM,aAAa,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QACvE,CAAC;aAAM,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YAC1B,wBAAwB;YACxB,OAAO,MAAM,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["import { spawn } from 'node:child_process';\nimport { platform } from 'node:os';\n\n/**\n * Execute a command with stdin input.\n * Returns true if the command succeeded (exit code 0).\n */\nfunction execWithStdin(command: string, args: string[], input: string): Promise<boolean> {\n  return new Promise((resolve) => {\n    const child = spawn(command, args, {\n      shell: false,\n      stdio: ['pipe', 'ignore', 'ignore'],\n    });\n\n    child.on('error', () => resolve(false));\n    child.on('close', (code) => resolve(code === 0));\n\n    child.stdin?.write(input);\n    child.stdin?.end();\n  });\n}\n\nexport async function copyToClipboard(text: string): Promise<boolean> {\n  const os = platform();\n\n  try {\n    if (os === 'darwin') {\n      // macOS: use pbcopy\n      return await execWithStdin('pbcopy', [], text);\n    } else if (os === 'linux') {\n      // Linux: try xclip first, then xsel\n      const xclipResult = await execWithStdin('xclip', ['-selection', 'clipboard'], text);\n      if (xclipResult) return true;\n      return await execWithStdin('xsel', ['--clipboard', '--input'], text);\n    } else if (os === 'win32') {\n      // Windows: use clip.exe\n      return await execWithStdin('clip', [], text);\n    }\n    return false;\n  } catch {\n    return false;\n  }\n}\n"]}

package/dist/doctor/index.d.ts

@@ -0,0 +1,6 @@
+import type { DoctorOptions, DoctorReport } from './types.js';
+export declare function runDoctor(options: DoctorOptions): Promise<DoctorReport>;
+export declare function outputReport(report: DoctorReport, options: DoctorOptions): Promise<void>;
+export { formatReport } from './output.js';
+export { formatReportAsJson } from './json-output.js';
+export type { DoctorReport, DoctorOptions } from './types.js';

package/dist/doctor/index.js

@@ -0,0 +1,94 @@
+import { checkSdk } from './checks/sdk.js';
+import { checkFramework } from './checks/framework.js';
+import { checkRuntime } from './checks/runtime.js';
+import { checkEnvironment } from './checks/environment.js';
+import { checkConnectivity } from './checks/connectivity.js';
+import { checkDashboardSettings, compareRedirectUris } from './checks/dashboard.js';
+import { detectIssues } from './issues.js';
+import { formatReport } from './output.js';
+import { formatReportAsJson } from './json-output.js';
+import { copyToClipboard } from './clipboard.js';
+import Chalk from 'chalk';
+const DOCTOR_VERSION = '1.0.0';
+export async function runDoctor(options) {
+    // Environment check first - loads project's .env/.env.local files
+    // Must run before connectivity so the resolved base URL is available
+    const { info: environment, raw: envRaw } = checkEnvironment(options);
+    // Run remaining checks concurrently
+    const [sdk, framework, runtime, connectivity] = await Promise.all([
+        checkSdk(options),
+        checkFramework(options),
+        checkRuntime(options),
+        checkConnectivity(options, environment.baseUrl ?? 'https://api.workos.com'),
+    ]);
+    // Dashboard settings + credential validation (single pass, staging only)
+    const dashboardResult = await checkDashboardSettings(options, environment.apiKeyType, envRaw);
+    // Compute expected redirect URI from framework detection if not set in env
+    const redirectUriSource = environment.redirectUri ? 'env' : 'inferred';
+    const expectedRedirectUri = environment.redirectUri ??
+        (framework.expectedCallbackPath && framework.detectedPort
+            ? `http://localhost:${framework.detectedPort}${framework.expectedCallbackPath}`
+            : null);
+    // Compare redirect URIs if we have dashboard data
+    const redirectUris = dashboardResult.settings
+        ? compareRedirectUris(expectedRedirectUri, dashboardResult.settings.redirectUris, redirectUriSource)
+        : undefined;
+    // Build partial report
+    const partialReport = {
+        version: DOCTOR_VERSION,
+        timestamp: new Date().toISOString(),
+        project: {
+            path: options.installDir,
+            packageManager: runtime.packageManager,
+        },
+        sdk,
+        runtime,
+        framework,
+        environment,
+        connectivity,
+        credentialValidation: dashboardResult.credentialValidation,
+        dashboardSettings: dashboardResult.settings ?? undefined,
+        dashboardError: dashboardResult.settings ? undefined : dashboardResult.error,
+        redirectUris,
+    };
+    // Detect issues based on collected data
+    const issues = detectIssues(partialReport);
+    // Calculate summary
+    const errors = issues.filter((i) => i.severity === 'error').length;
+    const warnings = issues.filter((i) => i.severity === 'warning').length;
+    const report = {
+        ...partialReport,
+        issues,
+        summary: {
+            errors,
+            warnings,
+            healthy: errors === 0,
+        },
+    };
+    return report;
+}
+export async function outputReport(report, options) {
+    if (options.json) {
+        const json = formatReportAsJson(report);
+        console.log(json);
+        if (options.copy) {
+            const success = await copyToClipboard(json);
+            if (success) {
+                console.error('(Copied to clipboard)');
+            }
+        }
+    }
+    else {
+        formatReport(report, { verbose: options.verbose });
+        if (options.copy) {
+            const json = formatReportAsJson(report);
+            const success = await copyToClipboard(json);
+            if (success) {
+                console.log(Chalk.dim('Report copied to clipboard'));
+            }
+        }
+    }
+}
+export { formatReport } from './output.js';
+export { formatReportAsJson } from './json-output.js';
+//# sourceMappingURL=index.js.map

package/dist/doctor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/doctor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAsB;IACpD,kEAAkE;IAClE,qEAAqE;IACrE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAErE,oCAAoC;IACpC,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAChE,QAAQ,CAAC,OAAO,CAAC;QACjB,cAAc,CAAC,OAAO,CAAC;QACvB,YAAY,CAAC,OAAO,CAAC;QACrB,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,IAAI,wBAAwB,CAAC;KAC5E,CAAC,CAAC;IAEH,yEAAyE;IACzE,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAE9F,2EAA2E;IAC3E,MAAM,iBAAiB,GAAuB,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;IAC3F,MAAM,mBAAmB,GACvB,WAAW,CAAC,WAAW;QACvB,CAAC,SAAS,CAAC,oBAAoB,IAAI,SAAS,CAAC,YAAY;YACvD,CAAC,CAAC,oBAAoB,SAAS,CAAC,YAAY,GAAG,SAAS,CAAC,oBAAoB,EAAE;YAC/E,CAAC,CAAC,IAAI,CAAC,CAAC;IAEZ,kDAAkD;IAClD,MAAM,YAAY,GAAG,eAAe,CAAC,QAAQ;QAC3C,CAAC,CAAC,mBAAmB,CAAC,mBAAmB,EAAE,eAAe,CAAC,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;QACpG,CAAC,CAAC,SAAS,CAAC;IAEd,uBAAuB;IACvB,MAAM,aAAa,GAAG;QACpB,OAAO,EAAE,cAAc;QACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE;YACP,IAAI,EAAE,OAAO,CAAC,UAAU;YACxB,cAAc,EAAE,OAAO,CAAC,cAAc;SACvC;QACD,GAAG;QACH,OAAO;QACP,SAAS;QACT,WAAW;QACX,YAAY;QACZ,oBAAoB,EAAE,eAAe,CAAC,oBAAoB;QAC1D,iBAAiB,EAAE,eAAe,CAAC,QAAQ,IAAI,SAAS;QACxD,cAAc,EAAE,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK;QAC5E,YAAY;KACb,CAAC;IAEF,wCAAwC;IACxC,MAAM,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IAE3C,oBAAoB;IACpB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAEvE,MAAM,MAAM,GAAiB;QAC3B,GAAG,aAAa;QAChB,MAAM;QACN,OAAO,EAAE;YACP,MAAM;YACN,QAAQ;YACR,OAAO,EAAE,MAAM,KAAK,CAAC;SACtB;KACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAoB,EAAE,OAAsB;IAC7E,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAElB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAEnD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC","sourcesContent":["import { checkSdk } from './checks/sdk.js';\nimport { checkFramework } from './checks/framework.js';\nimport { checkRuntime } from './checks/runtime.js';\nimport { checkEnvironment } from './checks/environment.js';\nimport { checkConnectivity } from './checks/connectivity.js';\nimport { checkDashboardSettings, compareRedirectUris } from './checks/dashboard.js';\nimport { detectIssues } from './issues.js';\nimport { formatReport } from './output.js';\nimport { formatReportAsJson } from './json-output.js';\nimport { copyToClipboard } from './clipboard.js';\nimport Chalk from 'chalk';\nimport type { DoctorOptions, DoctorReport } from './types.js';\n\nconst DOCTOR_VERSION = '1.0.0';\n\nexport async function runDoctor(options: DoctorOptions): Promise<DoctorReport> {\n  // Environment check first - loads project's .env/.env.local files\n  // Must run before connectivity so the resolved base URL is available\n  const { info: environment, raw: envRaw } = checkEnvironment(options);\n\n  // Run remaining checks concurrently\n  const [sdk, framework, runtime, connectivity] = await Promise.all([\n    checkSdk(options),\n    checkFramework(options),\n    checkRuntime(options),\n    checkConnectivity(options, environment.baseUrl ?? 'https://api.workos.com'),\n  ]);\n\n  // Dashboard settings + credential validation (single pass, staging only)\n  const dashboardResult = await checkDashboardSettings(options, environment.apiKeyType, envRaw);\n\n  // Compute expected redirect URI from framework detection if not set in env\n  const redirectUriSource: 'env' | 'inferred' = environment.redirectUri ? 'env' : 'inferred';\n  const expectedRedirectUri =\n    environment.redirectUri ??\n    (framework.expectedCallbackPath && framework.detectedPort\n      ? `http://localhost:${framework.detectedPort}${framework.expectedCallbackPath}`\n      : null);\n\n  // Compare redirect URIs if we have dashboard data\n  const redirectUris = dashboardResult.settings\n    ? compareRedirectUris(expectedRedirectUri, dashboardResult.settings.redirectUris, redirectUriSource)\n    : undefined;\n\n  // Build partial report\n  const partialReport = {\n    version: DOCTOR_VERSION,\n    timestamp: new Date().toISOString(),\n    project: {\n      path: options.installDir,\n      packageManager: runtime.packageManager,\n    },\n    sdk,\n    runtime,\n    framework,\n    environment,\n    connectivity,\n    credentialValidation: dashboardResult.credentialValidation,\n    dashboardSettings: dashboardResult.settings ?? undefined,\n    dashboardError: dashboardResult.settings ? undefined : dashboardResult.error,\n    redirectUris,\n  };\n\n  // Detect issues based on collected data\n  const issues = detectIssues(partialReport);\n\n  // Calculate summary\n  const errors = issues.filter((i) => i.severity === 'error').length;\n  const warnings = issues.filter((i) => i.severity === 'warning').length;\n\n  const report: DoctorReport = {\n    ...partialReport,\n    issues,\n    summary: {\n      errors,\n      warnings,\n      healthy: errors === 0,\n    },\n  };\n\n  return report;\n}\n\nexport async function outputReport(report: DoctorReport, options: DoctorOptions): Promise<void> {\n  if (options.json) {\n    const json = formatReportAsJson(report);\n    console.log(json);\n\n    if (options.copy) {\n      const success = await copyToClipboard(json);\n      if (success) {\n        console.error('(Copied to clipboard)');\n      }\n    }\n  } else {\n    formatReport(report, { verbose: options.verbose });\n\n    if (options.copy) {\n      const json = formatReportAsJson(report);\n      const success = await copyToClipboard(json);\n      if (success) {\n        console.log(Chalk.dim('Report copied to clipboard'));\n      }\n    }\n  }\n}\n\nexport { formatReport } from './output.js';\nexport { formatReportAsJson } from './json-output.js';\nexport type { DoctorReport, DoctorOptions } from './types.js';\n"]}

package/dist/doctor/issues.d.ts

@@ -0,0 +1,58 @@
+import type { Issue, DoctorReport } from './types.js';
+export declare const ISSUE_DEFINITIONS: {
+    MISSING_API_KEY: {
+        severity: "error";
+        message: string;
+        remediation: string;
+        docsUrl: string;
+    };
+    MISSING_CLIENT_ID: {
+        severity: "error";
+        message: string;
+        remediation: string;
+        docsUrl: string;
+    };
+    SDK_OUTDATED: {
+        severity: "warning";
+        message: string;
+    };
+    COOKIE_DOMAIN_NOT_SET: {
+        severity: "warning";
+        message: string;
+        remediation: string;
+        docsUrl: string;
+    };
+    NO_SDK_FOUND: {
+        severity: "error";
+        message: string;
+        remediation: string;
+        docsUrl: string;
+    };
+    API_UNREACHABLE: {
+        severity: "warning";
+        message: string;
+    };
+    REDIRECT_URI_MISMATCH: {
+        severity: "warning";
+        message: string;
+        docsUrl: string;
+    };
+    PROD_API_CALL_BLOCKED: {
+        severity: "warning";
+        message: string;
+        remediation: string;
+    };
+    INVALID_API_KEY: {
+        severity: "error";
+        message: string;
+        remediation: string;
+        docsUrl: string;
+    };
+    CLIENT_ID_MISMATCH: {
+        severity: "error";
+        message: string;
+        remediation: string;
+        docsUrl: string;
+    };
+};
+export declare function detectIssues(report: Omit<DoctorReport, 'issues' | 'summary'>): Issue[];

package/dist/doctor/issues.js

@@ -0,0 +1,134 @@
+export const ISSUE_DEFINITIONS = {
+    MISSING_API_KEY: {
+        severity: 'error',
+        message: 'WORKOS_API_KEY environment variable not set',
+        remediation: 'Set WORKOS_API_KEY in your .env.local file',
+        docsUrl: 'https://dashboard.workos.com/api-keys',
+    },
+    MISSING_CLIENT_ID: {
+        severity: 'error',
+        message: 'WORKOS_CLIENT_ID environment variable not set',
+        remediation: 'Set WORKOS_CLIENT_ID in your .env.local file',
+        docsUrl: 'https://dashboard.workos.com/configuration',
+    },
+    SDK_OUTDATED: {
+        severity: 'warning',
+        message: 'SDK version is outdated',
+        // remediation generated dynamically
+    },
+    COOKIE_DOMAIN_NOT_SET: {
+        severity: 'warning',
+        message: 'Cookie domain not explicitly set',
+        remediation: 'Consider setting WORKOS_COOKIE_DOMAIN for cross-subdomain auth',
+        docsUrl: 'https://workos.com/docs/authkit/cookie-domain',
+    },
+    NO_SDK_FOUND: {
+        severity: 'error',
+        message: 'No WorkOS SDK found in dependencies',
+        remediation: 'Install a WorkOS SDK: npm install @workos-inc/authkit-nextjs',
+        docsUrl: 'https://workos.com/docs',
+    },
+    API_UNREACHABLE: {
+        severity: 'warning',
+        message: 'Cannot reach WorkOS API',
+        // remediation generated dynamically based on error
+    },
+    REDIRECT_URI_MISMATCH: {
+        severity: 'warning',
+        message: 'Redirect URI not found in dashboard configuration',
+        docsUrl: 'https://workos.com/docs/authkit/redirect-uri',
+    },
+    PROD_API_CALL_BLOCKED: {
+        severity: 'warning',
+        message: 'Dashboard settings not fetched (production API key)',
+        remediation: 'Use a staging API key to fetch dashboard settings',
+    },
+    INVALID_API_KEY: {
+        severity: 'error',
+        message: 'API key is invalid or expired',
+        remediation: 'Check your WORKOS_API_KEY in the WorkOS dashboard',
+        docsUrl: 'https://dashboard.workos.com/api-keys',
+    },
+    CLIENT_ID_MISMATCH: {
+        severity: 'error',
+        message: 'Client ID does not match the API key environment',
+        remediation: 'Ensure WORKOS_CLIENT_ID matches the environment for your API key',
+        docsUrl: 'https://dashboard.workos.com/configuration',
+    },
+};
+export function detectIssues(report) {
+    const issues = [];
+    // SDK issues
+    if (!report.sdk.name) {
+        issues.push({ code: 'NO_SDK_FOUND', ...ISSUE_DEFINITIONS.NO_SDK_FOUND });
+    }
+    else if (report.sdk.outdated && report.sdk.version && report.sdk.latest) {
+        issues.push({
+            code: 'SDK_OUTDATED',
+            severity: 'warning',
+            message: `SDK version outdated (${report.sdk.version} → ${report.sdk.latest})`,
+            remediation: `Run: ${getUpdateCommand(report.runtime.packageManager, report.sdk.name)}`,
+            details: { installed: report.sdk.version, latest: report.sdk.latest },
+        });
+    }
+    // Environment issues
+    if (!report.environment.apiKeyConfigured) {
+        issues.push({ code: 'MISSING_API_KEY', ...ISSUE_DEFINITIONS.MISSING_API_KEY });
+    }
+    if (!report.environment.clientId) {
+        issues.push({ code: 'MISSING_CLIENT_ID', ...ISSUE_DEFINITIONS.MISSING_CLIENT_ID });
+    }
+    if (report.sdk.isAuthKit && !report.environment.cookieDomain) {
+        issues.push({ code: 'COOKIE_DOMAIN_NOT_SET', ...ISSUE_DEFINITIONS.COOKIE_DOMAIN_NOT_SET });
+    }
+    // Connectivity issues
+    if (!report.connectivity.apiReachable && !report.connectivity.error?.includes('Skipped')) {
+        issues.push({
+            code: 'API_UNREACHABLE',
+            severity: 'warning',
+            message: `Cannot reach WorkOS API: ${report.connectivity.error}`,
+            remediation: 'Check your network connection and firewall settings',
+        });
+    }
+    // Note: Redirect URI mismatch detection disabled - WorkOS API doesn't expose
+    // a public endpoint to list configured redirect URIs for verification
+    // Production key warning (no dashboard data)
+    if (report.environment.apiKeyType === 'production' && !report.dashboardSettings) {
+        issues.push({
+            code: 'PROD_API_CALL_BLOCKED',
+            ...ISSUE_DEFINITIONS.PROD_API_CALL_BLOCKED,
+        });
+    }
+    // Credential validation issues
+    if (report.credentialValidation) {
+        if (!report.credentialValidation.valid) {
+            issues.push({
+                code: 'INVALID_API_KEY',
+                ...ISSUE_DEFINITIONS.INVALID_API_KEY,
+                details: { error: report.credentialValidation.error },
+            });
+        }
+        else if (!report.credentialValidation.clientIdMatch) {
+            issues.push({
+                code: 'CLIENT_ID_MISMATCH',
+                ...ISSUE_DEFINITIONS.CLIENT_ID_MISMATCH,
+                details: { error: report.credentialValidation.error },
+            });
+        }
+    }
+    return issues;
+}
+function getUpdateCommand(packageManager, sdkName) {
+    switch (packageManager) {
+        case 'pnpm':
+            return `pnpm update ${sdkName}`;
+        case 'Yarn V1':
+        case 'Yarn V2/3/4':
+            return `yarn upgrade ${sdkName}`;
+        case 'Bun':
+            return `bun update ${sdkName}`;
+        default:
+            return `npm update ${sdkName}`;
+    }
+}
+//# sourceMappingURL=issues.js.map

package/dist/doctor/issues.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"issues.js","sourceRoot":"","sources":["../../src/doctor/issues.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,eAAe,EAAE;QACf,QAAQ,EAAE,OAAgB;QAC1B,OAAO,EAAE,6CAA6C;QACtD,WAAW,EAAE,4CAA4C;QACzD,OAAO,EAAE,uCAAuC;KACjD;IACD,iBAAiB,EAAE;QACjB,QAAQ,EAAE,OAAgB;QAC1B,OAAO,EAAE,+CAA+C;QACxD,WAAW,EAAE,8CAA8C;QAC3D,OAAO,EAAE,4CAA4C;KACtD;IACD,YAAY,EAAE;QACZ,QAAQ,EAAE,SAAkB;QAC5B,OAAO,EAAE,yBAAyB;QAClC,oCAAoC;KACrC;IACD,qBAAqB,EAAE;QACrB,QAAQ,EAAE,SAAkB;QAC5B,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EAAE,gEAAgE;QAC7E,OAAO,EAAE,+CAA+C;KACzD;IACD,YAAY,EAAE;QACZ,QAAQ,EAAE,OAAgB;QAC1B,OAAO,EAAE,qCAAqC;QAC9C,WAAW,EAAE,8DAA8D;QAC3E,OAAO,EAAE,yBAAyB;KACnC;IACD,eAAe,EAAE;QACf,QAAQ,EAAE,SAAkB;QAC5B,OAAO,EAAE,yBAAyB;QAClC,mDAAmD;KACpD;IACD,qBAAqB,EAAE;QACrB,QAAQ,EAAE,SAAkB;QAC5B,OAAO,EAAE,mDAAmD;QAC5D,OAAO,EAAE,8CAA8C;KACxD;IACD,qBAAqB,EAAE;QACrB,QAAQ,EAAE,SAAkB;QAC5B,OAAO,EAAE,qDAAqD;QAC9D,WAAW,EAAE,mDAAmD;KACjE;IACD,eAAe,EAAE;QACf,QAAQ,EAAE,OAAgB;QAC1B,OAAO,EAAE,+BAA+B;QACxC,WAAW,EAAE,mDAAmD;QAChE,OAAO,EAAE,uCAAuC;KACjD;IACD,kBAAkB,EAAE;QAClB,QAAQ,EAAE,OAAgB;QAC1B,OAAO,EAAE,kDAAkD;QAC3D,WAAW,EAAE,kEAAkE;QAC/E,OAAO,EAAE,4CAA4C;KACtD;CACF,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,MAAgD;IAC3E,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,aAAa;IACb,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,iBAAiB,CAAC,YAAY,EAAE,CAAC,CAAC;IAC3E,CAAC;SAAM,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1E,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,yBAAyB,MAAM,CAAC,GAAG,CAAC,OAAO,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,GAAG;YAC9E,WAAW,EAAE,QAAQ,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YACvF,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE;SACtE,CAAC,CAAC;IACL,CAAC;IAED,qBAAqB;IACrB,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,gBAAgB,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,iBAAiB,CAAC,eAAe,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,iBAAiB,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,iBAAiB,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,sBAAsB;IACtB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,YAAY,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACzF,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,4BAA4B,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE;YAChE,WAAW,EAAE,qDAAqD;SACnE,CAAC,CAAC;IACL,CAAC;IAED,6EAA6E;IAC7E,sEAAsE;IAEtE,6CAA6C;IAC7C,IAAI,MAAM,CAAC,WAAW,CAAC,UAAU,KAAK,YAAY,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAChF,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,uBAAuB;YAC7B,GAAG,iBAAiB,CAAC,qBAAqB;SAC3C,CAAC,CAAC;IACL,CAAC;IAED,+BAA+B;IAC/B,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,KAAK,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,iBAAiB;gBACvB,GAAG,iBAAiB,CAAC,eAAe;gBACpC,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,oBAAoB,CAAC,KAAK,EAAE;aACtD,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,aAAa,EAAE,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,oBAAoB;gBAC1B,GAAG,iBAAiB,CAAC,kBAAkB;gBACvC,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,oBAAoB,CAAC,KAAK,EAAE;aACtD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,cAA6B,EAAE,OAAe;IACtE,QAAQ,cAAc,EAAE,CAAC;QACvB,KAAK,MAAM;YACT,OAAO,eAAe,OAAO,EAAE,CAAC;QAClC,KAAK,SAAS,CAAC;QACf,KAAK,aAAa;YAChB,OAAO,gBAAgB,OAAO,EAAE,CAAC;QACnC,KAAK,KAAK;YACR,OAAO,cAAc,OAAO,EAAE,CAAC;QACjC;YACE,OAAO,cAAc,OAAO,EAAE,CAAC;IACnC,CAAC;AACH,CAAC","sourcesContent":["import type { Issue, DoctorReport } from './types.js';\n\nexport const ISSUE_DEFINITIONS = {\n  MISSING_API_KEY: {\n    severity: 'error' as const,\n    message: 'WORKOS_API_KEY environment variable not set',\n    remediation: 'Set WORKOS_API_KEY in your .env.local file',\n    docsUrl: 'https://dashboard.workos.com/api-keys',\n  },\n  MISSING_CLIENT_ID: {\n    severity: 'error' as const,\n    message: 'WORKOS_CLIENT_ID environment variable not set',\n    remediation: 'Set WORKOS_CLIENT_ID in your .env.local file',\n    docsUrl: 'https://dashboard.workos.com/configuration',\n  },\n  SDK_OUTDATED: {\n    severity: 'warning' as const,\n    message: 'SDK version is outdated',\n    // remediation generated dynamically\n  },\n  COOKIE_DOMAIN_NOT_SET: {\n    severity: 'warning' as const,\n    message: 'Cookie domain not explicitly set',\n    remediation: 'Consider setting WORKOS_COOKIE_DOMAIN for cross-subdomain auth',\n    docsUrl: 'https://workos.com/docs/authkit/cookie-domain',\n  },\n  NO_SDK_FOUND: {\n    severity: 'error' as const,\n    message: 'No WorkOS SDK found in dependencies',\n    remediation: 'Install a WorkOS SDK: npm install @workos-inc/authkit-nextjs',\n    docsUrl: 'https://workos.com/docs',\n  },\n  API_UNREACHABLE: {\n    severity: 'warning' as const,\n    message: 'Cannot reach WorkOS API',\n    // remediation generated dynamically based on error\n  },\n  REDIRECT_URI_MISMATCH: {\n    severity: 'warning' as const,\n    message: 'Redirect URI not found in dashboard configuration',\n    docsUrl: 'https://workos.com/docs/authkit/redirect-uri',\n  },\n  PROD_API_CALL_BLOCKED: {\n    severity: 'warning' as const,\n    message: 'Dashboard settings not fetched (production API key)',\n    remediation: 'Use a staging API key to fetch dashboard settings',\n  },\n  INVALID_API_KEY: {\n    severity: 'error' as const,\n    message: 'API key is invalid or expired',\n    remediation: 'Check your WORKOS_API_KEY in the WorkOS dashboard',\n    docsUrl: 'https://dashboard.workos.com/api-keys',\n  },\n  CLIENT_ID_MISMATCH: {\n    severity: 'error' as const,\n    message: 'Client ID does not match the API key environment',\n    remediation: 'Ensure WORKOS_CLIENT_ID matches the environment for your API key',\n    docsUrl: 'https://dashboard.workos.com/configuration',\n  },\n};\n\nexport function detectIssues(report: Omit<DoctorReport, 'issues' | 'summary'>): Issue[] {\n  const issues: Issue[] = [];\n\n  // SDK issues\n  if (!report.sdk.name) {\n    issues.push({ code: 'NO_SDK_FOUND', ...ISSUE_DEFINITIONS.NO_SDK_FOUND });\n  } else if (report.sdk.outdated && report.sdk.version && report.sdk.latest) {\n    issues.push({\n      code: 'SDK_OUTDATED',\n      severity: 'warning',\n      message: `SDK version outdated (${report.sdk.version} → ${report.sdk.latest})`,\n      remediation: `Run: ${getUpdateCommand(report.runtime.packageManager, report.sdk.name)}`,\n      details: { installed: report.sdk.version, latest: report.sdk.latest },\n    });\n  }\n\n  // Environment issues\n  if (!report.environment.apiKeyConfigured) {\n    issues.push({ code: 'MISSING_API_KEY', ...ISSUE_DEFINITIONS.MISSING_API_KEY });\n  }\n\n  if (!report.environment.clientId) {\n    issues.push({ code: 'MISSING_CLIENT_ID', ...ISSUE_DEFINITIONS.MISSING_CLIENT_ID });\n  }\n\n  if (report.sdk.isAuthKit && !report.environment.cookieDomain) {\n    issues.push({ code: 'COOKIE_DOMAIN_NOT_SET', ...ISSUE_DEFINITIONS.COOKIE_DOMAIN_NOT_SET });\n  }\n\n  // Connectivity issues\n  if (!report.connectivity.apiReachable && !report.connectivity.error?.includes('Skipped')) {\n    issues.push({\n      code: 'API_UNREACHABLE',\n      severity: 'warning',\n      message: `Cannot reach WorkOS API: ${report.connectivity.error}`,\n      remediation: 'Check your network connection and firewall settings',\n    });\n  }\n\n  // Note: Redirect URI mismatch detection disabled - WorkOS API doesn't expose\n  // a public endpoint to list configured redirect URIs for verification\n\n  // Production key warning (no dashboard data)\n  if (report.environment.apiKeyType === 'production' && !report.dashboardSettings) {\n    issues.push({\n      code: 'PROD_API_CALL_BLOCKED',\n      ...ISSUE_DEFINITIONS.PROD_API_CALL_BLOCKED,\n    });\n  }\n\n  // Credential validation issues\n  if (report.credentialValidation) {\n    if (!report.credentialValidation.valid) {\n      issues.push({\n        code: 'INVALID_API_KEY',\n        ...ISSUE_DEFINITIONS.INVALID_API_KEY,\n        details: { error: report.credentialValidation.error },\n      });\n    } else if (!report.credentialValidation.clientIdMatch) {\n      issues.push({\n        code: 'CLIENT_ID_MISMATCH',\n        ...ISSUE_DEFINITIONS.CLIENT_ID_MISMATCH,\n        details: { error: report.credentialValidation.error },\n      });\n    }\n  }\n\n  return issues;\n}\n\nfunction getUpdateCommand(packageManager: string | null, sdkName: string): string {\n  switch (packageManager) {\n    case 'pnpm':\n      return `pnpm update ${sdkName}`;\n    case 'Yarn V1':\n    case 'Yarn V2/3/4':\n      return `yarn upgrade ${sdkName}`;\n    case 'Bun':\n      return `bun update ${sdkName}`;\n    default:\n      return `npm update ${sdkName}`;\n  }\n}\n"]}

package/dist/doctor/json-output.d.ts

@@ -0,0 +1,2 @@
+import type { DoctorReport } from './types.js';
+export declare function formatReportAsJson(report: DoctorReport): string;

package/dist/doctor/json-output.js

@@ -0,0 +1,4 @@
+export function formatReportAsJson(report) {
+    return JSON.stringify(report, null, 2);
+}
+//# sourceMappingURL=json-output.js.map

package/dist/doctor/json-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-output.js","sourceRoot":"","sources":["../../src/doctor/json-output.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC","sourcesContent":["import type { DoctorReport } from './types.js';\n\nexport function formatReportAsJson(report: DoctorReport): string {\n  return JSON.stringify(report, null, 2);\n}\n"]}

package/dist/doctor/output.d.ts

@@ -0,0 +1,5 @@
+import type { DoctorReport } from './types.js';
+export interface FormatOptions {
+    verbose?: boolean;
+}
+export declare function formatReport(report: DoctorReport, options?: FormatOptions): void;