workos 0.4.5 → 0.5.1

package/dist/bin.js

@@ -7,7 +7,7 @@ if (process.argv.includes('--local') || process.env.INSTALLER_DEV) {
 }
 import { satisfies } from 'semver';
 import { red } from './utils/logging.js';
-import { getConfig } from './lib/settings.js';
+import { getConfig, getVersion } from './lib/settings.js';
 import yargs from 'yargs';
 import { hideBin } from 'yargs/helpers';
 import { ensureAuthenticated } from './lib/ensure-auth.js';
@@ -112,7 +112,6 @@ const installerOptions = {
     },
     integration: {
         describe: 'Integration to set up',
-        choices: ['nextjs', 'react', 'tanstack-start', 'react-router', 'vanilla-js'],
         type: 'string',
     },
     'force-install': {
@@ -169,6 +168,36 @@ yargs(hideBin(process.argv))
         agent: argv.agent,
     });
 }))
+    .command('doctor', 'Diagnose WorkOS integration issues', (yargs) => yargs.options({
+    verbose: {
+        type: 'boolean',
+        default: false,
+        description: 'Include additional diagnostic information',
+    },
+    'skip-api': {
+        type: 'boolean',
+        default: false,
+        description: 'Skip API calls (offline mode)',
+    },
+    'install-dir': {
+        type: 'string',
+        default: process.cwd(),
+        description: 'Project directory to analyze',
+    },
+    json: {
+        type: 'boolean',
+        default: false,
+        description: 'Output report as JSON',
+    },
+    copy: {
+        type: 'boolean',
+        default: false,
+        description: 'Copy report to clipboard',
+    },
+}), async (argv) => {
+    const { handleDoctor } = await import('./commands/doctor.js');
+    await handleDoctor(argv);
+})
     .command('install', 'Install WorkOS AuthKit into your project', (yargs) => yargs.options(installerOptions), withAuth(async (argv) => {
     const { handleInstall } = await import('./commands/install.js');
     await handleInstall(argv);
@@ -201,7 +230,7 @@ yargs(hideBin(process.argv))
     .strict()
     .help()
     .alias('help', 'h')
-    .version()
+    .version(getVersion())
     .alias('version', 'v')
     .wrap(process.stdout.isTTY && process.stdout.columns ? process.stdout.columns : 80).argv;
 //# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -1 +1 @@
-{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AAEA,kEAAkE;AAClE,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;IAClE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1C,wEAAwE;IACxE,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAE9C,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,kBAAkB,GAAG,SAAS,EAAE,CAAC,WAAW,CAAC;AAEnD,iFAAiF;AACjF,+BAA+B;AAC/B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAAE,CAAC;IACpD,GAAG,CACD,6CAA6C,kBAAkB,2BAA2B,OAAO,CAAC,OAAO,wCAAwC,CAClJ,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,KAAK,MAAM,kBAAkB,CAAC;AAErC,yCAAyC;AACzC,KAAK,UAAU,oBAAoB,CAAC,eAAyB;IAC3D,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACpE,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,qBAAqB,GAAG;IAC5B,kBAAkB,EAAE;QAClB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,+DAA+D;QACzE,IAAI,EAAE,SAAkB;KACzB;CACO,CAAC;AAEX;;;;GAIG;AACH,SAAS,QAAQ,CAAI,OAAmC;IACtD,OAAO,KAAK,EAAE,IAAO,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,IAAyD,CAAC;QAC5E,MAAM,oBAAoB,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,QAAQ;YAAE,MAAM,mBAAmB,EAAE,CAAC;QACrD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAG;IACvB,MAAM,EAAE;QACN,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,qDAAqD;QAC/D,IAAI,EAAE,SAAkB;KACzB;IACD,KAAK,EAAE;QACL,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,wBAAwB;QAClC,IAAI,EAAE,SAAkB;KACzB;IACD,GAAG,qBAAqB;IACxB,6CAA6C;IAC7C,KAAK,EAAE;QACL,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,SAAkB;QACxB,MAAM,EAAE,IAAI;KACb;IACD,EAAE,EAAE;QACF,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,SAAkB;QACxB,MAAM,EAAE,IAAI;KACb;IACD,WAAW,EAAE;QACX,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,SAAkB;QACxB,MAAM,EAAE,IAAI;KACb;IACD,SAAS,EAAE;QACT,IAAI,EAAE,QAAiB;QACvB,MAAM,EAAE,IAAI;KACb;IACD,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,MAAM,EAAE,IAAI;KACb;IACD,OAAO,EAAE;QACP,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,SAAkB;QACxB,MAAM,EAAE,IAAI;KACb;IACD,oBAAoB;IACpB,cAAc,EAAE;QACd,QAAQ,EAAE,mEAAmE;QAC7E,IAAI,EAAE,QAAiB;KACxB;IACD,cAAc,EAAE;QACd,QAAQ,EAAE,qEAAqE;QAC/E,IAAI,EAAE,QAAiB;KACxB;IACD,aAAa,EAAE;QACb,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,0DAA0D;QACpE,IAAI,EAAE,SAAkB;KACzB;IACD,aAAa,EAAE;QACb,QAAQ,EAAE,wCAAwC;QAClD,IAAI,EAAE,QAAiB;KACxB;IACD,WAAW,EAAE;QACX,QAAQ,EAAE,uBAAuB;QACjC,OAAO,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,YAAY,CAAU;QACrF,IAAI,EAAE,QAAiB;KACxB;IACD,eAAe,EAAE;QACf,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,4DAA4D;QACtE,IAAI,EAAE,SAAkB;KACzB;IACD,SAAS,EAAE;QACT,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,gCAAgC;QAC1C,IAAI,EAAE,SAAkB;KACzB;CACF,CAAC;AAEF,yCAAyC;AACzC,MAAM,eAAe,EAAE,CAAC;AAExB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KACzB,GAAG,CAAC,kBAAkB,CAAC;KACvB,OAAO,CAAC,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IAClF,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACzD,MAAM,QAAQ,EAAE,CAAC;IACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;KACD,OAAO,CAAC,QAAQ,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IACpF,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC3D,MAAM,SAAS,EAAE,CAAC;AACpB,CAAC,CAAC;KACD,OAAO,CACN,eAAe,EACf,iDAAiD,EACjD,CAAC,KAAK,EAAE,EAAE;IACR,OAAO,KAAK;SACT,MAAM,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,0CAA0C;KACxD,CAAC;SACD,MAAM,CAAC,OAAO,EAAE;QACf,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,2BAA2B;KACzC,CAAC;SACD,MAAM,CAAC,OAAO,EAAE;QACf,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,6DAA6D;KAC3E,CAAC,CAAC;AACP,CAAC,EACD,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACtB,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;IACxE,MAAM,eAAe,CAAC;QACpB,IAAI,EAAE,IAAI,CAAC,IAA2B;QACtC,KAAK,EAAE,IAAI,CAAC,KAA6B;QACzC,KAAK,EAAE,IAAI,CAAC,KAA6B;KAC1C,CAAC,CAAC;AACL,CAAC,CAAC,CACH;KACA,OAAO,CACN,SAAS,EACT,0CAA0C,EAC1C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAC1C,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACtB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC,CAAC,CACH;KACA,OAAO,CACN,WAAW,EACX,KAAK,EAAE,mBAAmB;AAC1B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAC1C,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACtB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,aAAa,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC,CAAC,CACH;KACA,OAAO,CACN,CAAC,IAAI,CAAC,EACN,oBAAoB,EACpB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAC/C,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,qBAAqB;IACrB,IAAI,2BAA2B,EAAE,EAAE,CAAC;QAClC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxC,OAAO;IACT,CAAC;IAED,0CAA0C;IAC1C,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;QACxC,OAAO,EAAE,4BAA4B;KACtC,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,+CAA+C;IAC/C,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,mBAAmB,EAAE,CAAC;IAE5B,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,aAAa,CAAC,EAAE,SAAS,EAAE,KAAK,EAAS,CAAC,CAAC;IACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CACF;KACA,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC;KAClB,OAAO,EAAE;KACT,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC;KACrB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC","sourcesContent":["#!/usr/bin/env node\n\n// Load .env.local for local development when --local flag is used\nif (process.argv.includes('--local') || process.env.INSTALLER_DEV) {\n  const { config } = await import('dotenv');\n  // bin.ts compiles to dist/bin.js, so go up one level to find .env.local\n  config({ path: new URL('../.env.local', import.meta.url).pathname });\n}\n\nimport { satisfies } from 'semver';\nimport { red } from './utils/logging.js';\nimport { getConfig } from './lib/settings.js';\n\nimport yargs from 'yargs';\nimport { hideBin } from 'yargs/helpers';\nimport chalk from 'chalk';\nimport { ensureAuthenticated } from './lib/ensure-auth.js';\nimport { checkForUpdates } from './lib/version-check.js';\n\nconst NODE_VERSION_RANGE = getConfig().nodeVersion;\n\n// Have to run this above the other imports because they are importing clack that\n// has the problematic imports.\nif (!satisfies(process.version, NODE_VERSION_RANGE)) {\n  red(\n    `WorkOS AuthKit installer requires Node.js ${NODE_VERSION_RANGE}. You are using Node.js ${process.version}. Please upgrade your Node.js version.`,\n  );\n  process.exit(1);\n}\n\nimport { isNonInteractiveEnvironment } from './utils/environment.js';\nimport clack from './utils/clack.js';\n\n/** Apply insecure storage flag if set */\nasync function applyInsecureStorage(insecureStorage?: boolean): Promise<void> {\n  if (insecureStorage) {\n    const { setInsecureStorage } = await import('./lib/credentials.js');\n    setInsecureStorage(true);\n  }\n}\n\n/** Shared insecure-storage option for commands that access credentials */\nconst insecureStorageOption = {\n  'insecure-storage': {\n    default: false,\n    describe: 'Store credentials in plaintext file instead of system keyring',\n    type: 'boolean' as const,\n  },\n} as const;\n\n/**\n * Wrap a command handler with authentication check.\n * Ensures valid auth before executing the handler.\n * Respects --skip-auth flag for CI/testing.\n */\nfunction withAuth<T>(handler: (argv: T) => Promise<void>): (argv: T) => Promise<void> {\n  return async (argv: T) => {\n    const typedArgv = argv as { skipAuth?: boolean; insecureStorage?: boolean };\n    await applyInsecureStorage(typedArgv.insecureStorage);\n    if (!typedArgv.skipAuth) await ensureAuthenticated();\n    await handler(argv);\n  };\n}\n\nconst installerOptions = {\n  direct: {\n    alias: 'D',\n    default: false,\n    describe: 'Use your own Anthropic API key (bypass llm-gateway)',\n    type: 'boolean' as const,\n  },\n  debug: {\n    default: false,\n    describe: 'Enable verbose logging',\n    type: 'boolean' as const,\n  },\n  ...insecureStorageOption,\n  // Hidden dev/automation flags (use env vars)\n  local: {\n    default: false,\n    type: 'boolean' as const,\n    hidden: true,\n  },\n  ci: {\n    default: false,\n    type: 'boolean' as const,\n    hidden: true,\n  },\n  'skip-auth': {\n    default: false,\n    type: 'boolean' as const,\n    hidden: true,\n  },\n  'api-key': {\n    type: 'string' as const,\n    hidden: true,\n  },\n  'client-id': {\n    type: 'string' as const,\n    hidden: true,\n  },\n  inspect: {\n    default: false,\n    type: 'boolean' as const,\n    hidden: true,\n  },\n  // User-facing flags\n  'homepage-url': {\n    describe: 'App homepage URL for WorkOS (defaults to http://localhost:{port})',\n    type: 'string' as const,\n  },\n  'redirect-uri': {\n    describe: 'Redirect URI for WorkOS callback (defaults to framework convention)',\n    type: 'string' as const,\n  },\n  'no-validate': {\n    default: false,\n    describe: 'Skip post-installation validation (includes build check)',\n    type: 'boolean' as const,\n  },\n  'install-dir': {\n    describe: 'Directory to install WorkOS AuthKit in',\n    type: 'string' as const,\n  },\n  integration: {\n    describe: 'Integration to set up',\n    choices: ['nextjs', 'react', 'tanstack-start', 'react-router', 'vanilla-js'] as const,\n    type: 'string' as const,\n  },\n  'force-install': {\n    default: false,\n    describe: 'Force install packages even if peer dependency checks fail',\n    type: 'boolean' as const,\n  },\n  dashboard: {\n    alias: 'd',\n    default: false,\n    describe: 'Run with visual dashboard mode',\n    type: 'boolean' as const,\n  },\n};\n\n// Check for updates (blocks up to 500ms)\nawait checkForUpdates();\n\nyargs(hideBin(process.argv))\n  .env('WORKOS_INSTALLER')\n  .command('login', 'Authenticate with WorkOS', insecureStorageOption, async (argv) => {\n    await applyInsecureStorage(argv.insecureStorage);\n    const { runLogin } = await import('./commands/login.js');\n    await runLogin();\n    process.exit(0);\n  })\n  .command('logout', 'Remove stored credentials', insecureStorageOption, async (argv) => {\n    await applyInsecureStorage(argv.insecureStorage);\n    const { runLogout } = await import('./commands/logout.js');\n    await runLogout();\n  })\n  .command(\n    'install-skill',\n    'Install bundled AuthKit skills to coding agents',\n    (yargs) => {\n      return yargs\n        .option('list', {\n          alias: 'l',\n          type: 'boolean',\n          description: 'List available skills without installing',\n        })\n        .option('skill', {\n          alias: 's',\n          type: 'array',\n          string: true,\n          description: 'Install specific skill(s)',\n        })\n        .option('agent', {\n          alias: 'a',\n          type: 'array',\n          string: true,\n          description: 'Target specific agent(s): claude-code, codex, cursor, goose',\n        });\n    },\n    withAuth(async (argv) => {\n      const { runInstallSkill } = await import('./commands/install-skill.js');\n      await runInstallSkill({\n        list: argv.list as boolean | undefined,\n        skill: argv.skill as string[] | undefined,\n        agent: argv.agent as string[] | undefined,\n      });\n    }),\n  )\n  .command(\n    'install',\n    'Install WorkOS AuthKit into your project',\n    (yargs) => yargs.options(installerOptions),\n    withAuth(async (argv) => {\n      const { handleInstall } = await import('./commands/install.js');\n      await handleInstall(argv);\n    }),\n  )\n  .command(\n    'dashboard',\n    false, // hidden from help\n    (yargs) => yargs.options(installerOptions),\n    withAuth(async (argv) => {\n      const { handleInstall } = await import('./commands/install.js');\n      await handleInstall({ ...argv, dashboard: true });\n    }),\n  )\n  .command(\n    ['$0'],\n    'WorkOS AuthKit CLI',\n    (yargs) => yargs.options(insecureStorageOption),\n    async (argv) => {\n      // Non-TTY: show help\n      if (isNonInteractiveEnvironment()) {\n        yargs(hideBin(process.argv)).showHelp();\n        return;\n      }\n\n      // TTY: ask if user wants to run installer\n      const shouldInstall = await clack.confirm({\n        message: 'Run the AuthKit installer?',\n      });\n\n      if (clack.isCancel(shouldInstall) || !shouldInstall) {\n        process.exit(0);\n      }\n\n      // Auth check happens HERE, after user confirms\n      await applyInsecureStorage(argv.insecureStorage);\n      await ensureAuthenticated();\n\n      const { handleInstall } = await import('./commands/install.js');\n      await handleInstall({ dashboard: false } as any);\n      process.exit(0);\n    },\n  )\n  .strict()\n  .help()\n  .alias('help', 'h')\n  .version()\n  .alias('version', 'v')\n  .wrap(process.stdout.isTTY && process.stdout.columns ? process.stdout.columns : 80).argv;\n"]}
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AAEA,kEAAkE;AAClE,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;IAClE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1C,wEAAwE;IACxE,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE1D,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,kBAAkB,GAAG,SAAS,EAAE,CAAC,WAAW,CAAC;AAEnD,iFAAiF;AACjF,+BAA+B;AAC/B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAAE,CAAC;IACpD,GAAG,CACD,6CAA6C,kBAAkB,2BAA2B,OAAO,CAAC,OAAO,wCAAwC,CAClJ,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,KAAK,MAAM,kBAAkB,CAAC;AAErC,yCAAyC;AACzC,KAAK,UAAU,oBAAoB,CAAC,eAAyB;IAC3D,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACpE,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,qBAAqB,GAAG;IAC5B,kBAAkB,EAAE;QAClB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,+DAA+D;QACzE,IAAI,EAAE,SAAkB;KACzB;CACO,CAAC;AAEX;;;;GAIG;AACH,SAAS,QAAQ,CAAI,OAAmC;IACtD,OAAO,KAAK,EAAE,IAAO,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,IAAyD,CAAC;QAC5E,MAAM,oBAAoB,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,QAAQ;YAAE,MAAM,mBAAmB,EAAE,CAAC;QACrD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAG;IACvB,MAAM,EAAE;QACN,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,qDAAqD;QAC/D,IAAI,EAAE,SAAkB;KACzB;IACD,KAAK,EAAE;QACL,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,wBAAwB;QAClC,IAAI,EAAE,SAAkB;KACzB;IACD,GAAG,qBAAqB;IACxB,6CAA6C;IAC7C,KAAK,EAAE;QACL,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,SAAkB;QACxB,MAAM,EAAE,IAAI;KACb;IACD,EAAE,EAAE;QACF,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,SAAkB;QACxB,MAAM,EAAE,IAAI;KACb;IACD,WAAW,EAAE;QACX,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,SAAkB;QACxB,MAAM,EAAE,IAAI;KACb;IACD,SAAS,EAAE;QACT,IAAI,EAAE,QAAiB;QACvB,MAAM,EAAE,IAAI;KACb;IACD,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,MAAM,EAAE,IAAI;KACb;IACD,OAAO,EAAE;QACP,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,SAAkB;QACxB,MAAM,EAAE,IAAI;KACb;IACD,oBAAoB;IACpB,cAAc,EAAE;QACd,QAAQ,EAAE,mEAAmE;QAC7E,IAAI,EAAE,QAAiB;KACxB;IACD,cAAc,EAAE;QACd,QAAQ,EAAE,qEAAqE;QAC/E,IAAI,EAAE,QAAiB;KACxB;IACD,aAAa,EAAE;QACb,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,0DAA0D;QACpE,IAAI,EAAE,SAAkB;KACzB;IACD,aAAa,EAAE;QACb,QAAQ,EAAE,wCAAwC;QAClD,IAAI,EAAE,QAAiB;KACxB;IACD,WAAW,EAAE;QACX,QAAQ,EAAE,uBAAuB;QACjC,IAAI,EAAE,QAAiB;KACxB;IACD,eAAe,EAAE;QACf,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,4DAA4D;QACtE,IAAI,EAAE,SAAkB;KACzB;IACD,SAAS,EAAE;QACT,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,gCAAgC;QAC1C,IAAI,EAAE,SAAkB;KACzB;CACF,CAAC;AAEF,yCAAyC;AACzC,MAAM,eAAe,EAAE,CAAC;AAExB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KACzB,GAAG,CAAC,kBAAkB,CAAC;KACvB,OAAO,CAAC,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IAClF,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACzD,MAAM,QAAQ,EAAE,CAAC;IACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;KACD,OAAO,CAAC,QAAQ,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IACpF,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC3D,MAAM,SAAS,EAAE,CAAC;AACpB,CAAC,CAAC;KACD,OAAO,CACN,eAAe,EACf,iDAAiD,EACjD,CAAC,KAAK,EAAE,EAAE;IACR,OAAO,KAAK;SACT,MAAM,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,0CAA0C;KACxD,CAAC;SACD,MAAM,CAAC,OAAO,EAAE;QACf,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,2BAA2B;KACzC,CAAC;SACD,MAAM,CAAC,OAAO,EAAE;QACf,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,6DAA6D;KAC3E,CAAC,CAAC;AACP,CAAC,EACD,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACtB,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;IACxE,MAAM,eAAe,CAAC;QACpB,IAAI,EAAE,IAAI,CAAC,IAA2B;QACtC,KAAK,EAAE,IAAI,CAAC,KAA6B;QACzC,KAAK,EAAE,IAAI,CAAC,KAA6B;KAC1C,CAAC,CAAC;AACL,CAAC,CAAC,CACH;KACA,OAAO,CACN,QAAQ,EACR,oCAAoC,EACpC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,OAAO,CAAC;IACZ,OAAO,EAAE;QACP,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,2CAA2C;KACzD;IACD,UAAU,EAAE;QACV,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,+BAA+B;KAC7C;IACD,aAAa,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;QACtB,WAAW,EAAE,8BAA8B;KAC5C;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,uBAAuB;KACrC;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,0BAA0B;KACxC;CACF,CAAC,EACJ,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC9D,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC,CACF;KACA,OAAO,CACN,SAAS,EACT,0CAA0C,EAC1C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAC1C,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACtB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC,CAAC,CACH;KACA,OAAO,CACN,WAAW,EACX,KAAK,EAAE,mBAAmB;AAC1B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAC1C,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACtB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,aAAa,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC,CAAC,CACH;KACA,OAAO,CACN,CAAC,IAAI,CAAC,EACN,oBAAoB,EACpB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAC/C,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,qBAAqB;IACrB,IAAI,2BAA2B,EAAE,EAAE,CAAC;QAClC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxC,OAAO;IACT,CAAC;IAED,0CAA0C;IAC1C,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;QACxC,OAAO,EAAE,4BAA4B;KACtC,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,+CAA+C;IAC/C,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,mBAAmB,EAAE,CAAC;IAE5B,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,aAAa,CAAC,EAAE,SAAS,EAAE,KAAK,EAAS,CAAC,CAAC;IACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CACF;KACA,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC;KAClB,OAAO,CAAC,UAAU,EAAE,CAAC;KACrB,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC;KACrB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC","sourcesContent":["#!/usr/bin/env node\n\n// Load .env.local for local development when --local flag is used\nif (process.argv.includes('--local') || process.env.INSTALLER_DEV) {\n  const { config } = await import('dotenv');\n  // bin.ts compiles to dist/bin.js, so go up one level to find .env.local\n  config({ path: new URL('../.env.local', import.meta.url).pathname });\n}\n\nimport { satisfies } from 'semver';\nimport { red } from './utils/logging.js';\nimport { getConfig, getVersion } from './lib/settings.js';\n\nimport yargs from 'yargs';\nimport { hideBin } from 'yargs/helpers';\nimport chalk from 'chalk';\nimport { ensureAuthenticated } from './lib/ensure-auth.js';\nimport { checkForUpdates } from './lib/version-check.js';\n\nconst NODE_VERSION_RANGE = getConfig().nodeVersion;\n\n// Have to run this above the other imports because they are importing clack that\n// has the problematic imports.\nif (!satisfies(process.version, NODE_VERSION_RANGE)) {\n  red(\n    `WorkOS AuthKit installer requires Node.js ${NODE_VERSION_RANGE}. You are using Node.js ${process.version}. Please upgrade your Node.js version.`,\n  );\n  process.exit(1);\n}\n\nimport { isNonInteractiveEnvironment } from './utils/environment.js';\nimport clack from './utils/clack.js';\n\n/** Apply insecure storage flag if set */\nasync function applyInsecureStorage(insecureStorage?: boolean): Promise<void> {\n  if (insecureStorage) {\n    const { setInsecureStorage } = await import('./lib/credentials.js');\n    setInsecureStorage(true);\n  }\n}\n\n/** Shared insecure-storage option for commands that access credentials */\nconst insecureStorageOption = {\n  'insecure-storage': {\n    default: false,\n    describe: 'Store credentials in plaintext file instead of system keyring',\n    type: 'boolean' as const,\n  },\n} as const;\n\n/**\n * Wrap a command handler with authentication check.\n * Ensures valid auth before executing the handler.\n * Respects --skip-auth flag for CI/testing.\n */\nfunction withAuth<T>(handler: (argv: T) => Promise<void>): (argv: T) => Promise<void> {\n  return async (argv: T) => {\n    const typedArgv = argv as { skipAuth?: boolean; insecureStorage?: boolean };\n    await applyInsecureStorage(typedArgv.insecureStorage);\n    if (!typedArgv.skipAuth) await ensureAuthenticated();\n    await handler(argv);\n  };\n}\n\nconst installerOptions = {\n  direct: {\n    alias: 'D',\n    default: false,\n    describe: 'Use your own Anthropic API key (bypass llm-gateway)',\n    type: 'boolean' as const,\n  },\n  debug: {\n    default: false,\n    describe: 'Enable verbose logging',\n    type: 'boolean' as const,\n  },\n  ...insecureStorageOption,\n  // Hidden dev/automation flags (use env vars)\n  local: {\n    default: false,\n    type: 'boolean' as const,\n    hidden: true,\n  },\n  ci: {\n    default: false,\n    type: 'boolean' as const,\n    hidden: true,\n  },\n  'skip-auth': {\n    default: false,\n    type: 'boolean' as const,\n    hidden: true,\n  },\n  'api-key': {\n    type: 'string' as const,\n    hidden: true,\n  },\n  'client-id': {\n    type: 'string' as const,\n    hidden: true,\n  },\n  inspect: {\n    default: false,\n    type: 'boolean' as const,\n    hidden: true,\n  },\n  // User-facing flags\n  'homepage-url': {\n    describe: 'App homepage URL for WorkOS (defaults to http://localhost:{port})',\n    type: 'string' as const,\n  },\n  'redirect-uri': {\n    describe: 'Redirect URI for WorkOS callback (defaults to framework convention)',\n    type: 'string' as const,\n  },\n  'no-validate': {\n    default: false,\n    describe: 'Skip post-installation validation (includes build check)',\n    type: 'boolean' as const,\n  },\n  'install-dir': {\n    describe: 'Directory to install WorkOS AuthKit in',\n    type: 'string' as const,\n  },\n  integration: {\n    describe: 'Integration to set up',\n    type: 'string' as const,\n  },\n  'force-install': {\n    default: false,\n    describe: 'Force install packages even if peer dependency checks fail',\n    type: 'boolean' as const,\n  },\n  dashboard: {\n    alias: 'd',\n    default: false,\n    describe: 'Run with visual dashboard mode',\n    type: 'boolean' as const,\n  },\n};\n\n// Check for updates (blocks up to 500ms)\nawait checkForUpdates();\n\nyargs(hideBin(process.argv))\n  .env('WORKOS_INSTALLER')\n  .command('login', 'Authenticate with WorkOS', insecureStorageOption, async (argv) => {\n    await applyInsecureStorage(argv.insecureStorage);\n    const { runLogin } = await import('./commands/login.js');\n    await runLogin();\n    process.exit(0);\n  })\n  .command('logout', 'Remove stored credentials', insecureStorageOption, async (argv) => {\n    await applyInsecureStorage(argv.insecureStorage);\n    const { runLogout } = await import('./commands/logout.js');\n    await runLogout();\n  })\n  .command(\n    'install-skill',\n    'Install bundled AuthKit skills to coding agents',\n    (yargs) => {\n      return yargs\n        .option('list', {\n          alias: 'l',\n          type: 'boolean',\n          description: 'List available skills without installing',\n        })\n        .option('skill', {\n          alias: 's',\n          type: 'array',\n          string: true,\n          description: 'Install specific skill(s)',\n        })\n        .option('agent', {\n          alias: 'a',\n          type: 'array',\n          string: true,\n          description: 'Target specific agent(s): claude-code, codex, cursor, goose',\n        });\n    },\n    withAuth(async (argv) => {\n      const { runInstallSkill } = await import('./commands/install-skill.js');\n      await runInstallSkill({\n        list: argv.list as boolean | undefined,\n        skill: argv.skill as string[] | undefined,\n        agent: argv.agent as string[] | undefined,\n      });\n    }),\n  )\n  .command(\n    'doctor',\n    'Diagnose WorkOS integration issues',\n    (yargs) =>\n      yargs.options({\n        verbose: {\n          type: 'boolean',\n          default: false,\n          description: 'Include additional diagnostic information',\n        },\n        'skip-api': {\n          type: 'boolean',\n          default: false,\n          description: 'Skip API calls (offline mode)',\n        },\n        'install-dir': {\n          type: 'string',\n          default: process.cwd(),\n          description: 'Project directory to analyze',\n        },\n        json: {\n          type: 'boolean',\n          default: false,\n          description: 'Output report as JSON',\n        },\n        copy: {\n          type: 'boolean',\n          default: false,\n          description: 'Copy report to clipboard',\n        },\n      }),\n    async (argv) => {\n      const { handleDoctor } = await import('./commands/doctor.js');\n      await handleDoctor(argv);\n    },\n  )\n  .command(\n    'install',\n    'Install WorkOS AuthKit into your project',\n    (yargs) => yargs.options(installerOptions),\n    withAuth(async (argv) => {\n      const { handleInstall } = await import('./commands/install.js');\n      await handleInstall(argv);\n    }),\n  )\n  .command(\n    'dashboard',\n    false, // hidden from help\n    (yargs) => yargs.options(installerOptions),\n    withAuth(async (argv) => {\n      const { handleInstall } = await import('./commands/install.js');\n      await handleInstall({ ...argv, dashboard: true });\n    }),\n  )\n  .command(\n    ['$0'],\n    'WorkOS AuthKit CLI',\n    (yargs) => yargs.options(insecureStorageOption),\n    async (argv) => {\n      // Non-TTY: show help\n      if (isNonInteractiveEnvironment()) {\n        yargs(hideBin(process.argv)).showHelp();\n        return;\n      }\n\n      // TTY: ask if user wants to run installer\n      const shouldInstall = await clack.confirm({\n        message: 'Run the AuthKit installer?',\n      });\n\n      if (clack.isCancel(shouldInstall) || !shouldInstall) {\n        process.exit(0);\n      }\n\n      // Auth check happens HERE, after user confirms\n      await applyInsecureStorage(argv.insecureStorage);\n      await ensureAuthenticated();\n\n      const { handleInstall } = await import('./commands/install.js');\n      await handleInstall({ dashboard: false } as any);\n      process.exit(0);\n    },\n  )\n  .strict()\n  .help()\n  .alias('help', 'h')\n  .version(getVersion())\n  .alias('version', 'v')\n  .wrap(process.stdout.isTTY && process.stdout.columns ? process.stdout.columns : 80).argv;\n"]}

package/dist/commands/doctor.d.ts

@@ -0,0 +1,10 @@
+import type { ArgumentsCamelCase } from 'yargs';
+interface DoctorArgs {
+    verbose?: boolean;
+    skipApi?: boolean;
+    installDir?: string;
+    json?: boolean;
+    copy?: boolean;
+}
+export declare function handleDoctor(argv: ArgumentsCamelCase<DoctorArgs>): Promise<void>;
+export {};

package/dist/commands/doctor.js

@@ -0,0 +1,30 @@
+import { runDoctor, outputReport } from '../doctor/index.js';
+import clack from '../utils/clack.js';
+export async function handleDoctor(argv) {
+    const options = {
+        installDir: argv.installDir ?? process.cwd(),
+        verbose: argv.verbose ?? false,
+        skipApi: argv.skipApi ?? false,
+        json: argv.json ?? false,
+        copy: argv.copy ?? false,
+    };
+    try {
+        const report = await runDoctor(options);
+        await outputReport(report, options);
+        // Exit with error code if critical issues found
+        if (report.summary.errors > 0) {
+            process.exit(1);
+        }
+        process.exit(0);
+    }
+    catch (error) {
+        if (!options.json) {
+            clack.log.error(`Doctor failed: ${error instanceof Error ? error.message : 'Unknown error'}`);
+        }
+        else {
+            console.error(JSON.stringify({ error: error instanceof Error ? error.message : 'Unknown error' }));
+        }
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=doctor.js.map

package/dist/commands/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,MAAM,mBAAmB,CAAC;AAUtC,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAoC;IACrE,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE;QAC5C,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK;QAC9B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK;QAC9B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK;QACxB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK;KACzB,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAEpC,gDAAgD;QAChD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAChG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC","sourcesContent":["import type { ArgumentsCamelCase } from 'yargs';\nimport { runDoctor, outputReport } from '../doctor/index.js';\nimport clack from '../utils/clack.js';\n\ninterface DoctorArgs {\n  verbose?: boolean;\n  skipApi?: boolean;\n  installDir?: string;\n  json?: boolean;\n  copy?: boolean;\n}\n\nexport async function handleDoctor(argv: ArgumentsCamelCase<DoctorArgs>): Promise<void> {\n  const options = {\n    installDir: argv.installDir ?? process.cwd(),\n    verbose: argv.verbose ?? false,\n    skipApi: argv.skipApi ?? false,\n    json: argv.json ?? false,\n    copy: argv.copy ?? false,\n  };\n\n  try {\n    const report = await runDoctor(options);\n    await outputReport(report, options);\n\n    // Exit with error code if critical issues found\n    if (report.summary.errors > 0) {\n      process.exit(1);\n    }\n    process.exit(0);\n  } catch (error) {\n    if (!options.json) {\n      clack.log.error(`Doctor failed: ${error instanceof Error ? error.message : 'Unknown error'}`);\n    } else {\n      console.error(JSON.stringify({ error: error instanceof Error ? error.message : 'Unknown error' }));\n    }\n    process.exit(1);\n  }\n}\n"]}

package/dist/doctor/checks/connectivity.d.ts

@@ -0,0 +1,2 @@
+import type { DoctorOptions, ConnectivityInfo } from '../types.js';
+export declare function checkConnectivity(options: DoctorOptions, baseUrl: string): Promise<ConnectivityInfo>;

package/dist/doctor/checks/connectivity.js

@@ -0,0 +1,35 @@
+export async function checkConnectivity(options, baseUrl) {
+    if (options.skipApi) {
+        return {
+            apiReachable: false,
+            latencyMs: null,
+            tlsValid: false,
+            error: 'Skipped (--skip-api)',
+        };
+    }
+    const startTime = Date.now();
+    try {
+        const controller = new AbortController();
+        const timeoutId = setTimeout(() => controller.abort(), 10000);
+        const response = await fetch(`${baseUrl}/health`, {
+            signal: controller.signal,
+        });
+        clearTimeout(timeoutId);
+        const latencyMs = Date.now() - startTime;
+        return {
+            apiReachable: response.ok,
+            latencyMs,
+            tlsValid: true, // If fetch succeeded over HTTPS, TLS is valid
+            error: response.ok ? undefined : `HTTP ${response.status}`,
+        };
+    }
+    catch (error) {
+        return {
+            apiReachable: false,
+            latencyMs: null,
+            tlsValid: false,
+            error: error instanceof Error ? error.message : 'Unknown error',
+        };
+    }
+}
+//# sourceMappingURL=connectivity.js.map

package/dist/doctor/checks/connectivity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connectivity.js","sourceRoot":"","sources":["../../../src/doctor/checks/connectivity.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAsB,EAAE,OAAe;IAC7E,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO;YACL,YAAY,EAAE,KAAK;YACnB,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,sBAAsB;SAC9B,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;QAE9D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,SAAS,EAAE;YAChD,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,YAAY,CAAC,SAAS,CAAC,CAAC;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAEzC,OAAO;YACL,YAAY,EAAE,QAAQ,CAAC,EAAE;YACzB,SAAS;YACT,QAAQ,EAAE,IAAI,EAAE,8CAA8C;YAC9D,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,EAAE;SAC3D,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,YAAY,EAAE,KAAK;YACnB,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;SAChE,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["import type { DoctorOptions, ConnectivityInfo } from '../types.js';\n\nexport async function checkConnectivity(options: DoctorOptions, baseUrl: string): Promise<ConnectivityInfo> {\n  if (options.skipApi) {\n    return {\n      apiReachable: false,\n      latencyMs: null,\n      tlsValid: false,\n      error: 'Skipped (--skip-api)',\n    };\n  }\n  const startTime = Date.now();\n\n  try {\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), 10000);\n\n    const response = await fetch(`${baseUrl}/health`, {\n      signal: controller.signal,\n    });\n\n    clearTimeout(timeoutId);\n    const latencyMs = Date.now() - startTime;\n\n    return {\n      apiReachable: response.ok,\n      latencyMs,\n      tlsValid: true, // If fetch succeeded over HTTPS, TLS is valid\n      error: response.ok ? undefined : `HTTP ${response.status}`,\n    };\n  } catch (error) {\n    return {\n      apiReachable: false,\n      latencyMs: null,\n      tlsValid: false,\n      error: error instanceof Error ? error.message : 'Unknown error',\n    };\n  }\n}\n"]}

package/dist/doctor/checks/dashboard.d.ts

@@ -0,0 +1,3 @@
+import type { DashboardFetchResult, DoctorOptions, RedirectUriComparison, EnvironmentRaw } from '../types.js';
+export declare function checkDashboardSettings(options: DoctorOptions, apiKeyType: 'staging' | 'production' | null, raw: EnvironmentRaw): Promise<DashboardFetchResult>;
+export declare function compareRedirectUris(codeUri: string | null, dashboardUris: string[], source?: 'env' | 'inferred'): RedirectUriComparison;

package/dist/doctor/checks/dashboard.js

@@ -0,0 +1,123 @@
+const WORKOS_API_URL = 'https://api.workos.com';
+export async function checkDashboardSettings(options, apiKeyType, raw) {
+    // Never call API with production keys
+    if (apiKeyType === 'production') {
+        return { settings: null, error: 'Skipped (production API key)' };
+    }
+    if (options.skipApi) {
+        return { settings: null, error: 'Skipped (--skip-api)' };
+    }
+    const apiKey = raw.apiKey;
+    if (!apiKey) {
+        return { settings: null, error: 'No API key configured' };
+    }
+    try {
+        return await fetchDashboardSettings(apiKey, raw.baseUrl);
+    }
+    catch (err) {
+        const message = err instanceof Error ? err.message : 'Unknown error';
+        return { settings: null, error: message };
+    }
+}
+async function fetchDashboardSettings(apiKey, baseUrlOverride) {
+    const baseUrl = baseUrlOverride ?? WORKOS_API_URL;
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), 10000);
+    try {
+        const redirectUris = [];
+        // Single /organizations?limit=1 call — validates credentials AND gets org count
+        const orgsResponse = await fetch(`${baseUrl}/organizations?limit=1`, {
+            headers: { Authorization: `Bearer ${apiKey}` },
+            signal: controller.signal,
+        });
+        if (orgsResponse.status === 401) {
+            return {
+                settings: null,
+                credentialValidation: { valid: false, clientIdMatch: true, error: 'Invalid API key' },
+                error: 'Invalid API key (401)',
+            };
+        }
+        if (orgsResponse.status === 403) {
+            return {
+                settings: null,
+                credentialValidation: { valid: false, clientIdMatch: true, error: 'API key lacks permissions' },
+                error: 'API key lacks permissions (403)',
+            };
+        }
+        if (!orgsResponse.ok) {
+            return {
+                settings: null,
+                credentialValidation: { valid: false, clientIdMatch: true, error: `API error: ${orgsResponse.status}` },
+                error: `API error: ${orgsResponse.status}`,
+            };
+        }
+        // Credentials valid — extract org count from the same response
+        const credentialValidation = { valid: true, clientIdMatch: true };
+        let organizationCount = 0;
+        const orgsData = (await orgsResponse.json());
+        organizationCount = orgsData.list_metadata?.total_count ?? orgsData.data?.length ?? 0;
+        // Fetch environment settings
+        const envResponse = await fetch(`${baseUrl}/environments/current`, {
+            headers: { Authorization: `Bearer ${apiKey}` },
+            signal: controller.signal,
+        });
+        let authMethods = [];
+        let sessionTimeout = null;
+        let mfa = null;
+        if (envResponse.ok) {
+            const envData = (await envResponse.json());
+            authMethods = envData.auth_methods ?? [];
+            sessionTimeout = envData.session_timeout ?? null;
+            mfa = envData.mfa_policy ?? null;
+        }
+        return {
+            settings: { redirectUris, authMethods, sessionTimeout, mfa, organizationCount },
+            credentialValidation,
+        };
+    }
+    catch (err) {
+        if (err instanceof Error && err.name === 'AbortError') {
+            throw new Error('Request timeout (10s)');
+        }
+        throw err;
+    }
+    finally {
+        clearTimeout(timeoutId);
+    }
+}
+/**
+ * Normalize a URI for comparison:
+ * - Remove trailing slashes
+ * - Normalize localhost variants (127.0.0.1 → localhost)
+ * - Lowercase the host portion
+ */
+function normalizeUri(uri) {
+    try {
+        const url = new URL(uri);
+        // Normalize localhost variants
+        if (url.hostname === '127.0.0.1' || url.hostname === '[::1]') {
+            url.hostname = 'localhost';
+        }
+        // Lowercase hostname (but preserve path case for compatibility)
+        url.hostname = url.hostname.toLowerCase();
+        // Remove trailing slash from pathname (unless it's just "/")
+        if (url.pathname.length > 1 && url.pathname.endsWith('/')) {
+            url.pathname = url.pathname.slice(0, -1);
+        }
+        return url.toString();
+    }
+    catch {
+        // If URL parsing fails, return as-is for exact match fallback
+        return uri;
+    }
+}
+export function compareRedirectUris(codeUri, dashboardUris, source) {
+    if (!codeUri) {
+        return { codeUri, dashboardUris, match: false, source };
+    }
+    const normalizedCode = normalizeUri(codeUri);
+    const normalizedDashboard = dashboardUris.map(normalizeUri);
+    const match = normalizedDashboard.includes(normalizedCode);
+    return { codeUri, dashboardUris, match, source };
+}
+//# sourceMappingURL=dashboard.js.map

package/dist/doctor/checks/dashboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dashboard.js","sourceRoot":"","sources":["../../../src/doctor/checks/dashboard.ts"],"names":[],"mappings":"AASA,MAAM,cAAc,GAAG,wBAAwB,CAAC;AAEhD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAsB,EACtB,UAA2C,EAC3C,GAAmB;IAEnB,sCAAsC;IACtC,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;QAChC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;IACnE,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACrE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,MAAc,EAAE,eAA8B;IAClF,MAAM,OAAO,GAAG,eAAe,IAAI,cAAc,CAAC;IAElD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,CAAC;IAE9D,IAAI,CAAC;QACH,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,gFAAgF;QAChF,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,wBAAwB,EAAE;YACnE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;YAC9C,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,IAAI,YAAY,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAChC,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,oBAAoB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,EAAE;gBACrF,KAAK,EAAE,uBAAuB;aAC/B,CAAC;QACJ,CAAC;QACD,IAAI,YAAY,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAChC,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,oBAAoB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,2BAA2B,EAAE;gBAC/F,KAAK,EAAE,iCAAiC;aACzC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,oBAAoB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,YAAY,CAAC,MAAM,EAAE,EAAE;gBACvG,KAAK,EAAE,cAAc,YAAY,CAAC,MAAM,EAAE;aAC3C,CAAC;QACJ,CAAC;QAED,+DAA+D;QAC/D,MAAM,oBAAoB,GAAyB,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QAExF,IAAI,iBAAiB,GAAG,CAAC,CAAC;QAC1B,MAAM,QAAQ,GAAG,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAG1C,CAAC;QACF,iBAAiB,GAAG,QAAQ,CAAC,aAAa,EAAE,WAAW,IAAI,QAAQ,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC;QAEtF,6BAA6B;QAC7B,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,uBAAuB,EAAE;YACjE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;YAC9C,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,IAAI,WAAW,GAAa,EAAE,CAAC;QAC/B,IAAI,cAAc,GAAkB,IAAI,CAAC;QACzC,IAAI,GAAG,GAAgD,IAAI,CAAC;QAE5D,IAAI,WAAW,CAAC,EAAE,EAAE,CAAC;YACnB,MAAM,OAAO,GAAG,CAAC,MAAM,WAAW,CAAC,IAAI,EAAE,CAIxC,CAAC;YACF,WAAW,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;YACzC,cAAc,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC;YACjD,GAAG,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;QACnC,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,EAAE,iBAAiB,EAAE;YAC/E,oBAAoB;SACrB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,+BAA+B;QAC/B,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC7D,GAAG,CAAC,QAAQ,GAAG,WAAW,CAAC;QAC7B,CAAC;QACD,gEAAgE;QAChE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC1C,6DAA6D;QAC7D,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;QAC9D,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAAsB,EACtB,aAAuB,EACvB,MAA2B;IAE3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,mBAAmB,GAAG,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,mBAAmB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAE3D,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACnD,CAAC","sourcesContent":["import type {\n  CredentialValidation,\n  DashboardSettings,\n  DashboardFetchResult,\n  DoctorOptions,\n  RedirectUriComparison,\n  EnvironmentRaw,\n} from '../types.js';\n\nconst WORKOS_API_URL = 'https://api.workos.com';\n\nexport async function checkDashboardSettings(\n  options: DoctorOptions,\n  apiKeyType: 'staging' | 'production' | null,\n  raw: EnvironmentRaw,\n): Promise<DashboardFetchResult> {\n  // Never call API with production keys\n  if (apiKeyType === 'production') {\n    return { settings: null, error: 'Skipped (production API key)' };\n  }\n\n  if (options.skipApi) {\n    return { settings: null, error: 'Skipped (--skip-api)' };\n  }\n\n  const apiKey = raw.apiKey;\n  if (!apiKey) {\n    return { settings: null, error: 'No API key configured' };\n  }\n\n  try {\n    return await fetchDashboardSettings(apiKey, raw.baseUrl);\n  } catch (err) {\n    const message = err instanceof Error ? err.message : 'Unknown error';\n    return { settings: null, error: message };\n  }\n}\n\nasync function fetchDashboardSettings(apiKey: string, baseUrlOverride: string | null): Promise<DashboardFetchResult> {\n  const baseUrl = baseUrlOverride ?? WORKOS_API_URL;\n\n  const controller = new AbortController();\n  const timeoutId = setTimeout(() => controller.abort(), 10000);\n\n  try {\n    const redirectUris: string[] = [];\n\n    // Single /organizations?limit=1 call — validates credentials AND gets org count\n    const orgsResponse = await fetch(`${baseUrl}/organizations?limit=1`, {\n      headers: { Authorization: `Bearer ${apiKey}` },\n      signal: controller.signal,\n    });\n\n    if (orgsResponse.status === 401) {\n      return {\n        settings: null,\n        credentialValidation: { valid: false, clientIdMatch: true, error: 'Invalid API key' },\n        error: 'Invalid API key (401)',\n      };\n    }\n    if (orgsResponse.status === 403) {\n      return {\n        settings: null,\n        credentialValidation: { valid: false, clientIdMatch: true, error: 'API key lacks permissions' },\n        error: 'API key lacks permissions (403)',\n      };\n    }\n    if (!orgsResponse.ok) {\n      return {\n        settings: null,\n        credentialValidation: { valid: false, clientIdMatch: true, error: `API error: ${orgsResponse.status}` },\n        error: `API error: ${orgsResponse.status}`,\n      };\n    }\n\n    // Credentials valid — extract org count from the same response\n    const credentialValidation: CredentialValidation = { valid: true, clientIdMatch: true };\n\n    let organizationCount = 0;\n    const orgsData = (await orgsResponse.json()) as {\n      list_metadata?: { total_count?: number };\n      data?: unknown[];\n    };\n    organizationCount = orgsData.list_metadata?.total_count ?? orgsData.data?.length ?? 0;\n\n    // Fetch environment settings\n    const envResponse = await fetch(`${baseUrl}/environments/current`, {\n      headers: { Authorization: `Bearer ${apiKey}` },\n      signal: controller.signal,\n    });\n\n    let authMethods: string[] = [];\n    let sessionTimeout: string | null = null;\n    let mfa: 'optional' | 'required' | 'disabled' | null = null;\n\n    if (envResponse.ok) {\n      const envData = (await envResponse.json()) as {\n        auth_methods?: string[];\n        session_timeout?: string;\n        mfa_policy?: 'optional' | 'required' | 'disabled';\n      };\n      authMethods = envData.auth_methods ?? [];\n      sessionTimeout = envData.session_timeout ?? null;\n      mfa = envData.mfa_policy ?? null;\n    }\n\n    return {\n      settings: { redirectUris, authMethods, sessionTimeout, mfa, organizationCount },\n      credentialValidation,\n    };\n  } catch (err) {\n    if (err instanceof Error && err.name === 'AbortError') {\n      throw new Error('Request timeout (10s)');\n    }\n    throw err;\n  } finally {\n    clearTimeout(timeoutId);\n  }\n}\n\n/**\n * Normalize a URI for comparison:\n * - Remove trailing slashes\n * - Normalize localhost variants (127.0.0.1 → localhost)\n * - Lowercase the host portion\n */\nfunction normalizeUri(uri: string): string {\n  try {\n    const url = new URL(uri);\n    // Normalize localhost variants\n    if (url.hostname === '127.0.0.1' || url.hostname === '[::1]') {\n      url.hostname = 'localhost';\n    }\n    // Lowercase hostname (but preserve path case for compatibility)\n    url.hostname = url.hostname.toLowerCase();\n    // Remove trailing slash from pathname (unless it's just \"/\")\n    if (url.pathname.length > 1 && url.pathname.endsWith('/')) {\n      url.pathname = url.pathname.slice(0, -1);\n    }\n    return url.toString();\n  } catch {\n    // If URL parsing fails, return as-is for exact match fallback\n    return uri;\n  }\n}\n\nexport function compareRedirectUris(\n  codeUri: string | null,\n  dashboardUris: string[],\n  source?: 'env' | 'inferred',\n): RedirectUriComparison {\n  if (!codeUri) {\n    return { codeUri, dashboardUris, match: false, source };\n  }\n\n  const normalizedCode = normalizeUri(codeUri);\n  const normalizedDashboard = dashboardUris.map(normalizeUri);\n  const match = normalizedDashboard.includes(normalizedCode);\n\n  return { codeUri, dashboardUris, match, source };\n}\n"]}

package/dist/doctor/checks/environment.d.ts

@@ -0,0 +1,2 @@
+import type { EnvironmentCheckResult, DoctorOptions } from '../types.js';
+export declare function checkEnvironment(options?: DoctorOptions): EnvironmentCheckResult;

package/dist/doctor/checks/environment.js

@@ -0,0 +1,68 @@
+import { readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { parse as parseDotenv } from 'dotenv';
+/**
+ * Load environment variables from project's .env files.
+ * Priority: .env.local > .env (matching Next.js/Vite conventions)
+ * Uses dotenv parser for proper handling of quotes, multiline, exports, etc.
+ */
+function loadProjectEnv(installDir) {
+    const env = {};
+    // Load in order: .env first, then .env.local (later overrides earlier)
+    const envFiles = ['.env', '.env.local'];
+    for (const file of envFiles) {
+        const filePath = join(installDir, file);
+        if (existsSync(filePath)) {
+            try {
+                const content = readFileSync(filePath, 'utf-8');
+                const parsed = parseDotenv(content);
+                Object.assign(env, parsed);
+            }
+            catch {
+                // Ignore read errors
+            }
+        }
+    }
+    return env;
+}
+export function checkEnvironment(options) {
+    // Load project env files, then fall back to process.env
+    const projectEnv = options?.installDir ? loadProjectEnv(options.installDir) : {};
+    const apiKey = projectEnv.WORKOS_API_KEY ?? process.env.WORKOS_API_KEY ?? null;
+    const clientId = projectEnv.WORKOS_CLIENT_ID ?? process.env.WORKOS_CLIENT_ID ?? null;
+    const redirectUri = projectEnv.WORKOS_REDIRECT_URI ?? process.env.WORKOS_REDIRECT_URI ?? null;
+    const cookieDomain = projectEnv.WORKOS_COOKIE_DOMAIN ?? process.env.WORKOS_COOKIE_DOMAIN ?? null;
+    const baseUrl = projectEnv.WORKOS_BASE_URL ?? process.env.WORKOS_BASE_URL ?? null;
+    return {
+        info: {
+            apiKeyConfigured: !!apiKey,
+            apiKeyType: getApiKeyType(apiKey),
+            clientId: truncateClientId(clientId),
+            redirectUri: redirectUri,
+            cookieDomain: cookieDomain,
+            baseUrl: baseUrl ?? 'https://api.workos.com',
+        },
+        raw: {
+            apiKey,
+            clientId,
+            baseUrl: baseUrl ?? 'https://api.workos.com',
+        },
+    };
+}
+function getApiKeyType(apiKey) {
+    if (!apiKey)
+        return null;
+    if (apiKey.startsWith('sk_test_'))
+        return 'staging';
+    if (apiKey.startsWith('sk_live_'))
+        return 'production';
+    return null; // Unknown format
+}
+function truncateClientId(clientId) {
+    if (!clientId)
+        return null;
+    if (clientId.length <= 15)
+        return clientId;
+    return `${clientId.slice(0, 10)}...${clientId.slice(-3)}`;
+}
+//# sourceMappingURL=environment.js.map

package/dist/doctor/checks/environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment.js","sourceRoot":"","sources":["../../../src/doctor/checks/environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,IAAI,WAAW,EAAE,MAAM,QAAQ,CAAC;AAG9C;;;;GAIG;AACH,SAAS,cAAc,CAAC,UAAkB;IACxC,MAAM,GAAG,GAA2B,EAAE,CAAC;IAEvC,uEAAuE;IACvE,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAChD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;gBACpC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAuB;IACtD,wDAAwD;IACxD,MAAM,UAAU,GAAG,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEjF,MAAM,MAAM,GAAG,UAAU,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC;IAC/E,MAAM,QAAQ,GAAG,UAAU,CAAC,gBAAgB,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC;IACrF,MAAM,WAAW,GAAG,UAAU,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI,CAAC;IAC9F,MAAM,YAAY,GAAG,UAAU,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,CAAC;IACjG,MAAM,OAAO,GAAG,UAAU,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC;IAElF,OAAO;QACL,IAAI,EAAE;YACJ,gBAAgB,EAAE,CAAC,CAAC,MAAM;YAC1B,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC;YACjC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC;YACpC,WAAW,EAAE,WAAW;YACxB,YAAY,EAAE,YAAY;YAC1B,OAAO,EAAE,OAAO,IAAI,wBAAwB;SAC7C;QACD,GAAG,EAAE;YACH,MAAM;YACN,QAAQ;YACR,OAAO,EAAE,OAAO,IAAI,wBAAwB;SAC7C;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,MAA0B;IAC/C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,YAAY,CAAC;IACvD,OAAO,IAAI,CAAC,CAAC,iBAAiB;AAChC,CAAC;AAED,SAAS,gBAAgB,CAAC,QAA4B;IACpD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC3C,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5D,CAAC","sourcesContent":["import { readFileSync, existsSync } from 'node:fs';\nimport { join } from 'node:path';\nimport { parse as parseDotenv } from 'dotenv';\nimport type { EnvironmentInfo, EnvironmentCheckResult, DoctorOptions } from '../types.js';\n\n/**\n * Load environment variables from project's .env files.\n * Priority: .env.local > .env (matching Next.js/Vite conventions)\n * Uses dotenv parser for proper handling of quotes, multiline, exports, etc.\n */\nfunction loadProjectEnv(installDir: string): Record<string, string> {\n  const env: Record<string, string> = {};\n\n  // Load in order: .env first, then .env.local (later overrides earlier)\n  const envFiles = ['.env', '.env.local'];\n\n  for (const file of envFiles) {\n    const filePath = join(installDir, file);\n    if (existsSync(filePath)) {\n      try {\n        const content = readFileSync(filePath, 'utf-8');\n        const parsed = parseDotenv(content);\n        Object.assign(env, parsed);\n      } catch {\n        // Ignore read errors\n      }\n    }\n  }\n\n  return env;\n}\n\nexport function checkEnvironment(options?: DoctorOptions): EnvironmentCheckResult {\n  // Load project env files, then fall back to process.env\n  const projectEnv = options?.installDir ? loadProjectEnv(options.installDir) : {};\n\n  const apiKey = projectEnv.WORKOS_API_KEY ?? process.env.WORKOS_API_KEY ?? null;\n  const clientId = projectEnv.WORKOS_CLIENT_ID ?? process.env.WORKOS_CLIENT_ID ?? null;\n  const redirectUri = projectEnv.WORKOS_REDIRECT_URI ?? process.env.WORKOS_REDIRECT_URI ?? null;\n  const cookieDomain = projectEnv.WORKOS_COOKIE_DOMAIN ?? process.env.WORKOS_COOKIE_DOMAIN ?? null;\n  const baseUrl = projectEnv.WORKOS_BASE_URL ?? process.env.WORKOS_BASE_URL ?? null;\n\n  return {\n    info: {\n      apiKeyConfigured: !!apiKey,\n      apiKeyType: getApiKeyType(apiKey),\n      clientId: truncateClientId(clientId),\n      redirectUri: redirectUri,\n      cookieDomain: cookieDomain,\n      baseUrl: baseUrl ?? 'https://api.workos.com',\n    },\n    raw: {\n      apiKey,\n      clientId,\n      baseUrl: baseUrl ?? 'https://api.workos.com',\n    },\n  };\n}\n\nfunction getApiKeyType(apiKey: string | undefined): 'staging' | 'production' | null {\n  if (!apiKey) return null;\n  if (apiKey.startsWith('sk_test_')) return 'staging';\n  if (apiKey.startsWith('sk_live_')) return 'production';\n  return null; // Unknown format\n}\n\nfunction truncateClientId(clientId: string | undefined): string | null {\n  if (!clientId) return null;\n  if (clientId.length <= 15) return clientId;\n  return `${clientId.slice(0, 10)}...${clientId.slice(-3)}`;\n}\n"]}

package/dist/doctor/checks/framework.d.ts

@@ -0,0 +1,2 @@
+import type { DoctorOptions, FrameworkInfo } from '../types.js';
+export declare function checkFramework(options: DoctorOptions): Promise<FrameworkInfo>;

package/dist/doctor/checks/framework.js

@@ -0,0 +1,75 @@
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { getPackageDotJson } from '../../utils/clack-utils.js';
+import { hasPackageInstalled, getPackageVersion } from '../../utils/package-json.js';
+import { detectPort, getCallbackPath } from '../../lib/port-detection.js';
+import { KNOWN_INTEGRATIONS } from '../../lib/constants.js';
+// Order matters - more specific frameworks should come first (array guarantees order)
+const FRAMEWORKS = [
+    { package: 'next', name: 'Next.js', integration: KNOWN_INTEGRATIONS.nextjs, detectVariant: detectNextVariant },
+    {
+        package: '@tanstack/react-start',
+        name: 'TanStack Start',
+        integration: KNOWN_INTEGRATIONS.tanstackStart,
+        detectVariant: null,
+    },
+    {
+        package: '@tanstack/start',
+        name: 'TanStack Start',
+        integration: KNOWN_INTEGRATIONS.tanstackStart,
+        detectVariant: null,
+    },
+    { package: '@tanstack/react-router', name: 'TanStack Router', integration: null, detectVariant: null },
+    { package: '@remix-run/node', name: 'Remix', integration: null, detectVariant: null },
+    {
+        package: 'react-router-dom',
+        name: 'React Router',
+        integration: KNOWN_INTEGRATIONS.reactRouter,
+        detectVariant: null,
+    },
+    { package: 'express', name: 'Express', integration: null, detectVariant: null },
+];
+export async function checkFramework(options) {
+    let packageJson;
+    try {
+        packageJson = await getPackageDotJson(options);
+    }
+    catch {
+        return { name: null, version: null };
+    }
+    for (const config of FRAMEWORKS) {
+        if (hasPackageInstalled(config.package, packageJson)) {
+            const version = getPackageVersion(config.package, packageJson) ?? null;
+            const variant = config.detectVariant ? await config.detectVariant(options) : undefined;
+            // Get expected callback path and port if we have an integration mapping
+            let expectedCallbackPath;
+            let detectedPort;
+            if (config.integration) {
+                expectedCallbackPath = getCallbackPath(config.integration);
+                detectedPort = detectPort(config.integration, options.installDir);
+            }
+            return {
+                name: config.name,
+                version,
+                variant,
+                expectedCallbackPath,
+                detectedPort,
+            };
+        }
+    }
+    return { name: null, version: null };
+}
+async function detectNextVariant(options) {
+    const appDir = join(options.installDir, 'app');
+    const pagesDir = join(options.installDir, 'pages');
+    const srcAppDir = join(options.installDir, 'src', 'app');
+    const srcPagesDir = join(options.installDir, 'src', 'pages');
+    const hasAppDir = existsSync(appDir) || existsSync(srcAppDir);
+    const hasPagesDir = existsSync(pagesDir) || existsSync(srcPagesDir);
+    if (hasAppDir && hasPagesDir)
+        return 'hybrid';
+    if (hasAppDir)
+        return 'app-router';
+    return 'pages-router';
+}
+//# sourceMappingURL=framework.js.map

package/dist/doctor/checks/framework.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"framework.js","sourceRoot":"","sources":["../../../src/doctor/checks/framework.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACrF,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAW5D,sFAAsF;AACtF,MAAM,UAAU,GAAsB;IACpC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,kBAAkB,CAAC,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE;IAC9G;QACE,OAAO,EAAE,uBAAuB;QAChC,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,kBAAkB,CAAC,aAAa;QAC7C,aAAa,EAAE,IAAI;KACpB;IACD;QACE,OAAO,EAAE,iBAAiB;QAC1B,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,kBAAkB,CAAC,aAAa;QAC7C,aAAa,EAAE,IAAI;KACpB;IACD,EAAE,OAAO,EAAE,wBAAwB,EAAE,IAAI,EAAE,iBAAiB,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;IACtG,EAAE,OAAO,EAAE,iBAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;IACrF;QACE,OAAO,EAAE,kBAAkB;QAC3B,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,kBAAkB,CAAC,WAAW;QAC3C,aAAa,EAAE,IAAI;KACpB;IACD,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE;CAChF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAsB;IACzD,IAAI,WAAW,CAAC;IAChB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACvC,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QAChC,IAAI,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC;YACvE,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAEvF,wEAAwE;YACxE,IAAI,oBAAwC,CAAC;YAC7C,IAAI,YAAgC,CAAC;YAErC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,oBAAoB,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAC3D,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YACpE,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO;gBACP,OAAO;gBACP,oBAAoB;gBACpB,YAAY;aACb,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,OAAsB;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAE7D,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;IAEpE,IAAI,SAAS,IAAI,WAAW;QAAE,OAAO,QAAQ,CAAC;IAC9C,IAAI,SAAS;QAAE,OAAO,YAAY,CAAC;IACnC,OAAO,cAAc,CAAC;AACxB,CAAC","sourcesContent":["import { existsSync } from 'node:fs';\nimport { join } from 'node:path';\nimport { getPackageDotJson } from '../../utils/clack-utils.js';\nimport { hasPackageInstalled, getPackageVersion } from '../../utils/package-json.js';\nimport { detectPort, getCallbackPath } from '../../lib/port-detection.js';\nimport { KNOWN_INTEGRATIONS } from '../../lib/constants.js';\nimport type { Integration } from '../../lib/constants.js';\nimport type { DoctorOptions, FrameworkInfo } from '../types.js';\n\ninterface FrameworkConfig {\n  package: string;\n  name: string;\n  integration: Integration | null; // Maps to Integration type for callback path/port\n  detectVariant: ((options: DoctorOptions) => Promise<string | undefined>) | null;\n}\n\n// Order matters - more specific frameworks should come first (array guarantees order)\nconst FRAMEWORKS: FrameworkConfig[] = [\n  { package: 'next', name: 'Next.js', integration: KNOWN_INTEGRATIONS.nextjs, detectVariant: detectNextVariant },\n  {\n    package: '@tanstack/react-start',\n    name: 'TanStack Start',\n    integration: KNOWN_INTEGRATIONS.tanstackStart,\n    detectVariant: null,\n  },\n  {\n    package: '@tanstack/start',\n    name: 'TanStack Start',\n    integration: KNOWN_INTEGRATIONS.tanstackStart,\n    detectVariant: null,\n  },\n  { package: '@tanstack/react-router', name: 'TanStack Router', integration: null, detectVariant: null },\n  { package: '@remix-run/node', name: 'Remix', integration: null, detectVariant: null },\n  {\n    package: 'react-router-dom',\n    name: 'React Router',\n    integration: KNOWN_INTEGRATIONS.reactRouter,\n    detectVariant: null,\n  },\n  { package: 'express', name: 'Express', integration: null, detectVariant: null },\n];\n\nexport async function checkFramework(options: DoctorOptions): Promise<FrameworkInfo> {\n  let packageJson;\n  try {\n    packageJson = await getPackageDotJson(options);\n  } catch {\n    return { name: null, version: null };\n  }\n\n  for (const config of FRAMEWORKS) {\n    if (hasPackageInstalled(config.package, packageJson)) {\n      const version = getPackageVersion(config.package, packageJson) ?? null;\n      const variant = config.detectVariant ? await config.detectVariant(options) : undefined;\n\n      // Get expected callback path and port if we have an integration mapping\n      let expectedCallbackPath: string | undefined;\n      let detectedPort: number | undefined;\n\n      if (config.integration) {\n        expectedCallbackPath = getCallbackPath(config.integration);\n        detectedPort = detectPort(config.integration, options.installDir);\n      }\n\n      return {\n        name: config.name,\n        version,\n        variant,\n        expectedCallbackPath,\n        detectedPort,\n      };\n    }\n  }\n\n  return { name: null, version: null };\n}\n\nasync function detectNextVariant(options: DoctorOptions): Promise<string> {\n  const appDir = join(options.installDir, 'app');\n  const pagesDir = join(options.installDir, 'pages');\n  const srcAppDir = join(options.installDir, 'src', 'app');\n  const srcPagesDir = join(options.installDir, 'src', 'pages');\n\n  const hasAppDir = existsSync(appDir) || existsSync(srcAppDir);\n  const hasPagesDir = existsSync(pagesDir) || existsSync(srcPagesDir);\n\n  if (hasAppDir && hasPagesDir) return 'hybrid';\n  if (hasAppDir) return 'app-router';\n  return 'pages-router';\n}\n"]}

package/dist/doctor/checks/runtime.d.ts

@@ -0,0 +1,2 @@
+import type { DoctorOptions, RuntimeInfo } from '../types.js';
+export declare function checkRuntime(options: DoctorOptions): Promise<RuntimeInfo>;

package/dist/doctor/checks/runtime.js

@@ -0,0 +1,20 @@
+import { detectAllPackageManagers } from '../../utils/package-manager.js';
+import { execFileNoThrow } from '../../utils/exec-file.js';
+export async function checkRuntime(options) {
+    const nodeVersion = process.version;
+    const managers = detectAllPackageManagers(options);
+    const primaryManager = managers[0] ?? null;
+    let packageManagerVersion = null;
+    if (primaryManager) {
+        const result = await execFileNoThrow(primaryManager.name, ['--version']);
+        if (result.status === 0) {
+            packageManagerVersion = result.stdout.trim();
+        }
+    }
+    return {
+        nodeVersion,
+        packageManager: primaryManager?.label ?? null,
+        packageManagerVersion,
+    };
+}
+//# sourceMappingURL=runtime.js.map

package/dist/doctor/checks/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../src/doctor/checks/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAG3D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAsB;IACvD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;IAEpC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAE3C,IAAI,qBAAqB,GAAkB,IAAI,CAAC;IAChD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,qBAAqB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO;QACL,WAAW;QACX,cAAc,EAAE,cAAc,EAAE,KAAK,IAAI,IAAI;QAC7C,qBAAqB;KACtB,CAAC;AACJ,CAAC","sourcesContent":["import { detectAllPackageManagers } from '../../utils/package-manager.js';\nimport { execFileNoThrow } from '../../utils/exec-file.js';\nimport type { DoctorOptions, RuntimeInfo } from '../types.js';\n\nexport async function checkRuntime(options: DoctorOptions): Promise<RuntimeInfo> {\n  const nodeVersion = process.version;\n\n  const managers = detectAllPackageManagers(options);\n  const primaryManager = managers[0] ?? null;\n\n  let packageManagerVersion: string | null = null;\n  if (primaryManager) {\n    const result = await execFileNoThrow(primaryManager.name, ['--version']);\n    if (result.status === 0) {\n      packageManagerVersion = result.stdout.trim();\n    }\n  }\n\n  return {\n    nodeVersion,\n    packageManager: primaryManager?.label ?? null,\n    packageManagerVersion,\n  };\n}\n"]}

package/dist/doctor/checks/sdk.d.ts

@@ -0,0 +1,2 @@
+import type { DoctorOptions, SdkInfo } from '../types.js';
+export declare function checkSdk(options: DoctorOptions): Promise<SdkInfo>;