workos 0.5.0 → 0.5.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -511,27 +511,57 @@ async function validateCredentialFormats(projectDir, issues) {
|
|
|
511
511
|
}
|
|
512
512
|
}
|
|
513
513
|
/**
|
|
514
|
-
* Validates Next.js middleware
|
|
515
|
-
* Must be
|
|
514
|
+
* Validates Next.js middleware/proxy is at the correct location.
|
|
515
|
+
* Must be alongside the app/ directory — Next.js only watches for these files
|
|
516
|
+
* in the parent directory of app/.
|
|
516
517
|
*/
|
|
517
518
|
async function validateNextjsMiddlewarePlacement(projectDir, issues) {
|
|
518
|
-
//
|
|
519
|
-
const
|
|
520
|
-
const
|
|
521
|
-
|
|
522
|
-
|
|
523
|
-
|
|
524
|
-
|
|
525
|
-
|
|
519
|
+
// Determine where app/ lives to know where middleware/proxy should be
|
|
520
|
+
const appInSrc = existsSync(join(projectDir, 'src', 'app'));
|
|
521
|
+
const expectedDir = appInSrc ? 'src/' : '';
|
|
522
|
+
const correctPaths = [
|
|
523
|
+
`${expectedDir}middleware.ts`,
|
|
524
|
+
`${expectedDir}middleware.js`,
|
|
525
|
+
`${expectedDir}proxy.ts`,
|
|
526
|
+
`${expectedDir}proxy.js`,
|
|
527
|
+
];
|
|
528
|
+
const hasCorrectPlacement = correctPaths.some((p) => existsSync(join(projectDir, p)));
|
|
529
|
+
if (hasCorrectPlacement) {
|
|
530
|
+
return;
|
|
531
|
+
}
|
|
532
|
+
// Check for middleware/proxy at the wrong level
|
|
533
|
+
const allPossible = [
|
|
534
|
+
'middleware.ts',
|
|
535
|
+
'middleware.js',
|
|
536
|
+
'src/middleware.ts',
|
|
537
|
+
'src/middleware.js',
|
|
538
|
+
'proxy.ts',
|
|
539
|
+
'proxy.js',
|
|
540
|
+
'src/proxy.ts',
|
|
541
|
+
'src/proxy.js',
|
|
542
|
+
];
|
|
543
|
+
const wrongLevel = allPossible.find((p) => existsSync(join(projectDir, p)) && !correctPaths.includes(p));
|
|
544
|
+
if (wrongLevel) {
|
|
545
|
+
const correctLevel = appInSrc ? 'src/' : 'project root';
|
|
546
|
+
issues.push({
|
|
547
|
+
type: 'file',
|
|
548
|
+
severity: 'error',
|
|
549
|
+
message: `${wrongLevel} is at the wrong level — app/ is in ${appInSrc ? 'src/' : 'root'}`,
|
|
550
|
+
hint: `Move it to ${expectedDir}${wrongLevel.replace(/^src\//, '')} (must be alongside app/ directory). Next.js silently ignores middleware/proxy files at the wrong level.`,
|
|
551
|
+
});
|
|
552
|
+
return;
|
|
553
|
+
}
|
|
554
|
+
// Check for deeply misplaced middleware
|
|
555
|
+
const misplaced = await fg(['**/{middleware,proxy}.{ts,js}'], {
|
|
526
556
|
cwd: projectDir,
|
|
527
557
|
ignore: ['node_modules/**'],
|
|
528
558
|
});
|
|
529
|
-
if (
|
|
559
|
+
if (misplaced.length > 0) {
|
|
530
560
|
issues.push({
|
|
531
561
|
type: 'file',
|
|
532
562
|
severity: 'error',
|
|
533
|
-
message: `middleware
|
|
534
|
-
hint:
|
|
563
|
+
message: `middleware/proxy found at wrong location: ${misplaced[0]}`,
|
|
564
|
+
hint: `Must be at ${expectedDir}middleware.ts or ${expectedDir}proxy.ts (alongside app/ directory).`,
|
|
535
565
|
});
|
|
536
566
|
}
|
|
537
567
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../src/lib/validation/validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,WAAW,CAAC;AAE3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAO1D,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,UAAkB,EAClB,UAA2B,EAAE;IAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,mDAAmD;IACnD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,SAAS;YACT,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC;IACJ,CAAC;IAED,kBAAkB;IAClB,MAAM,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAE/C,2CAA2C;IAC3C,MAAM,yBAAyB,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAE/D,kCAAkC;IAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QACjE,SAAS;QACT,MAAM;QACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACnC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,OAAgB;IAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,SAAS,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;QAErD,mCAAmC;QACnC,IAAI,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7C,OAAO;gBACL,GAAG,KAAK;gBACR,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBACtD,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;gBAC/D,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;aAC7D,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,kCAAkC;IACjD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAAsB,EAAE,UAAkB,EAAE,MAAyB;IACnG,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO;IAEjC,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;QACnD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAA2B,CAAC;IAChE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAA2B,CAAC;IACtE,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;QACxC,MAAM,QAAQ,GAAG,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QAE7F,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;gBACxC,IAAI,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAAsB,EAAE,UAAkB,EAAE,MAAyB;IAClG,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAU,GAAG,EAAE,CAAC;IAEpB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,yBAAyB;gBAClC,IAAI,EAAE,uDAAuD;aAC9D,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACjC,wCAAwC;QACxC,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACzC,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,KAAK,EAAE,GAAG,CAAC,CAAC;YAClD,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU;gBAC1B,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;gBAC7E,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,2BAA2B,CAAC;YAEhD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;gBACvD,OAAO,EAAE,iCAAiC,IAAI,CAAC,IAAI,EAAE;gBACrD,IAAI;aACL,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAsB,EAAE,UAAkB,EAAE,MAAyB;IAChG,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;YAC9B,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,iBAAiB,IAAI,CAAC,IAAI,EAAE;gBACrC,IAAI,EAAE,UAAU,IAAI,CAAC,IAAI,EAAE;aAC5B,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,yBAAyB;QACzB,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,wCAAwC;gBACxC,SAAS;YACX,CAAC;YAED,sBAAsB;YACtB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACvC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC/B,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,SAAS;4BACf,QAAQ,EAAE,SAAS;4BACnB,OAAO,EAAE,QAAQ,OAAO,CAAC,CAAC,CAAC,+BAA+B,OAAO,GAAG;4BACpE,IAAI,EAAE,UAAU,OAAO,CAAC,CAAC,CAAC,cAAc,OAAO,EAAE;yBAClD,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,+BAA+B;YAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,SAAS;wBACnB,OAAO,EAAE,QAAQ,OAAO,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBAC/E,IAAI,EAAE,UAAU,OAAO,CAAC,CAAC,CAAC,iCAAiC;qBAC5D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,yBAAyB,CACtC,SAAiB,EACjB,UAAkB,EAClB,MAAyB;IAEzB,8BAA8B;IAC9B,MAAM,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,wBAAwB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAEnD,iCAAiC;IACjC,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,QAAQ;YACX,MAAM,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACpD,MAAM,iCAAiC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC5D,MAAM,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;YACjF,MAAM;QACR,KAAK,OAAO;YACV,MAAM,6BAA6B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACxD,MAAM;QACR,KAAK,cAAc;YACjB,MAAM,8BAA8B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;YACjF,MAAM;QACR,KAAK,gBAAgB;YACnB,MAAM,gCAAgC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;YACjF,MAAM;IACV,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,yBAAyB,CAAC,UAAkB,EAAE,MAAyB;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,+CAA+C;IACzD,CAAC;IAED,6BAA6B;IAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,iDAAiD;IAC3D,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,YAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,yBAAyB,WAAW,EAAE;YAC/C,IAAI,EAAE,qDAAqD;SAC5D,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,yCAAyC;IACzC,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAElD,uEAAuE;IACvE,MAAM,aAAa,GAAG;QACpB,OAAO,SAAS,WAAW;QAC3B,OAAO,SAAS,YAAY;QAC5B,OAAO,SAAS,WAAW;QAC3B,OAAO,SAAS,YAAY;QAC5B,WAAW,SAAS,WAAW;QAC/B,WAAW,SAAS,YAAY;QAChC,WAAW,SAAS,WAAW;QAC/B,WAAW,SAAS,YAAY;KACjC,CAAC;IAEF,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,mDAAmD;QACnD,MAAM,cAAc,GAAG,MAAM,EAAE,CAC7B,CAAC,0CAA0C,EAAE,8CAA8C,CAAC,EAC5F;YACE,GAAG,EAAE,UAAU;SAChB,CACF,CAAC;QAEF,IAAI,IAAI,GAAG,iCAAiC,SAAS,WAAW,CAAC;QACjE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,0DAA0D;YAC1D,MAAM,UAAU,GAAG,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;YAClH,IAAI;gBACF,2BAA2B,cAAc,CAAC,CAAC,CAAC,+BAA+B,YAAY,aAAa;oBACpG,uEAAuE,UAAU,IAAI;oBACrF,8BAA8B,SAAS,WAAW,CAAC;QACvD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sBAAsB,YAAY,8BAA8B;YACzE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,8BAA8B,CAAC,UAAkB,EAAE,MAAyB;IACzF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,YAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,yBAAyB,WAAW,EAAE;YAC/C,IAAI,EAAE,yCAAyC;SAChD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,iEAAiE;IACjE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE9C,sCAAsC;IACtC,MAAM,aAAa,GAAG;QACpB,oDAAoD;QACpD,cAAc,OAAO,MAAM;QAC3B,cAAc,OAAO,KAAK;QAC1B,cAAc,OAAO,MAAM;QAC3B,cAAc,OAAO,KAAK;QAC1B,sDAAsD;QACtD,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,kEAAkE;QAClE,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,kEAAkE;QAClE,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;KACnC,CAAC;IAEF,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,CAAC,0CAA0C,CAAC,EAAE;YAC5E,GAAG,EAAE,UAAU;SAChB,CAAC,CAAC;QAEH,IAAI,IAAI,GAAG,gCAAgC,OAAO,MAAM,CAAC;QACzD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YACrC,qCAAqC;YACrC,MAAM,UAAU,GACd,GAAG;gBACH,UAAU;qBACP,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;qBAC/B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACzB,IAAI;gBACF,2BAA2B,UAAU,+BAA+B,YAAY,aAAa;oBAC7F,2DAA2D,UAAU,IAAI;oBACzE,qCAAqC,OAAO,MAAM,CAAC;QACvD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sBAAsB,YAAY,8BAA8B;YACzE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gCAAgC,CAAC,UAAkB,EAAE,MAAyB;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,YAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,yBAAyB,WAAW,EAAE;YAC/C,IAAI,EAAE,yCAAyC;SAChD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAElD,gCAAgC;IAChC,MAAM,aAAa,GAAG;QACpB,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;KACnC,CAAC;IAEF,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,CAAC,0CAA0C,CAAC,EAAE;YAC5E,GAAG,EAAE,UAAU;SAChB,CAAC,CAAC;QAEH,IAAI,IAAI,GAAG,gCAAgC,SAAS,MAAM,CAAC;QAC3D,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,UAAU,GACd,GAAG;gBACH,UAAU;qBACP,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAC7B,IAAI;gBACF,2BAA2B,UAAU,+BAA+B,YAAY,aAAa;oBAC7F,2DAA2D,UAAU,IAAI;oBACzE,qCAAqC,SAAS,MAAM,CAAC;QACzD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sBAAsB,YAAY,8BAA8B;YACzE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,4BAA4B,CACzC,UAAkB,EAClB,MAAyB,EACzB,UAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,+CAA+C;IACzD,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,UAAU,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,iDAAiD;IAC3D,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,GAAG,UAAU,8CAA8C,QAAQ,CAAC,MAAM,GAAG;YACtF,IAAI,EAAE,qDAAqD;SAC5D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,yBAAyB,CAAC,UAAkB,EAAE,MAAyB;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,8CAA8C;IAC9C,MAAM,cAAc,GAAG,CAAC,wBAAwB,EAAE,oCAAoC,CAAC,CAAC;IAExF,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,4BAA4B,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;oBACjE,IAAI,EAAE,oFAAoF;iBAC3F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,gBAAgB,GAAG,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;IAE9F,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1C,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,8BAA8B,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;oBACnE,IAAI,EAAE,yFAAyF;iBAChG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,iCAAiC,CAAC,UAAkB,EAAE,MAAyB;IAC5F,kBAAkB;IAClB,MAAM,UAAU,GAAG,CAAC,eAAe,EAAE,eAAe,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,CAAC;IAEhG,MAAM,kBAAkB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,IAAI,kBAAkB,EAAE,CAAC;QACvB,OAAO,CAAC,mBAAmB;IAC7B,CAAC;IAED,iCAAiC;IACjC,MAAM,mBAAmB,GAAG,MAAM,EAAE,CAAC,CAAC,uBAAuB,CAAC,EAAE;QAC9D,GAAG,EAAE,UAAU;QACf,MAAM,EAAE,CAAC,iBAAiB,CAAC;KAC5B,CAAC,CAAC;IAEH,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,0CAA0C,mBAAmB,CAAC,CAAC,CAAC,EAAE;YAC3E,IAAI,EAAE,uHAAuH;SAC9H,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,6BAA6B,CAAC,UAAkB,EAAE,MAAyB;IACxF,qCAAqC;IACrC,MAAM,aAAa,GAAG;QACpB,cAAc;QACd,cAAc;QACd,eAAe;QACf,eAAe;QACf,aAAa;QACb,aAAa;QACb,gBAAgB;QAChB,gBAAgB;KACjB,CAAC;IAEF,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACxC,aAAa,GAAG,IAAI,CAAC;gBACrB,MAAM;YACR,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,qEAAqE;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBACzD,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;gBAC7D,IAAI,IAAI,CAAC,2BAA2B,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,SAAS;wBACnB,OAAO,EAAE,kDAAkD;wBAC3D,IAAI,EAAE,yHAAyH;qBAChI,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,wBAAwB,CAAC,UAAkB,EAAE,MAAyB;IACnF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAEpD,IAAI,UAAkB,CAAC;IACvB,IAAI,eAAuB,CAAC;IAE5B,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,sCAAsC;IAChD,CAAC;IAED,IAAI,CAAC;QACH,eAAe,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,uCAAuC;IACjD,CAAC;IAED,sCAAsC;IACtC,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAuB,EAAE;QACxD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACtD,IAAI,KAAK,EAAE,CAAC;gBACV,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;IAE/C,4CAA4C;IAC5C,MAAM,UAAU,GAAG;QACjB,gBAAgB;QAChB,kBAAkB;QAClB,qBAAqB;QACrB,wBAAwB;QACxB,8BAA8B;QAC9B,iCAAiC;KAClC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE7C,IAAI,QAAQ,IAAI,UAAU,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,GAAG,OAAO,8CAA8C;gBACjE,IAAI,EAAE,yFAAyF;aAChG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import { readFile } from 'fs/promises';\nimport { existsSync } from 'fs';\nimport { join } from 'path';\nimport fg from 'fast-glob';\nimport type { ValidationResult, ValidationRules, ValidationIssue } from './types.js';\nimport { runBuildValidation } from './build-validator.js';\n\nexport interface ValidateOptions {\n variant?: string;\n runBuild?: boolean;\n}\n\nexport async function validateInstallation(\n framework: string,\n projectDir: string,\n options: ValidateOptions = {},\n): Promise<ValidationResult> {\n const startTime = Date.now();\n const issues: ValidationIssue[] = [];\n\n // Load rules for framework (with optional variant)\n const rules = await loadRules(framework, options.variant);\n if (!rules) {\n return {\n passed: true,\n framework,\n issues: [],\n durationMs: Date.now() - startTime,\n };\n }\n\n // Run validations\n await validatePackages(rules, projectDir, issues);\n await validateEnvVars(rules, projectDir, issues);\n await validateFiles(rules, projectDir, issues);\n\n // Run framework-specific cross-validations\n await validateFrameworkSpecific(framework, projectDir, issues);\n\n // Run build validation if enabled\n if (options.runBuild !== false) {\n const buildResult = await runBuildValidation(projectDir);\n issues.push(...buildResult.issues);\n }\n\n return {\n passed: issues.filter((i) => i.severity === 'error').length === 0,\n framework,\n issues,\n durationMs: Date.now() - startTime,\n };\n}\n\nasync function loadRules(framework: string, variant?: string): Promise<ValidationRules | null> {\n const rulesPath = new URL(`./rules/${framework}.json`, import.meta.url);\n try {\n const content = await readFile(rulesPath, 'utf-8');\n const rules = JSON.parse(content) as ValidationRules;\n\n // Merge variant rules if specified\n if (variant && rules.variants?.[variant]) {\n const variantRules = rules.variants[variant];\n return {\n ...rules,\n files: [...rules.files, ...(variantRules.files || [])],\n packages: [...rules.packages, ...(variantRules.packages || [])],\n envVars: [...rules.envVars, ...(variantRules.envVars || [])],\n };\n }\n\n return rules;\n } catch {\n return null; // No rules for this framework yet\n }\n}\n\nasync function validatePackages(rules: ValidationRules, projectDir: string, issues: ValidationIssue[]): Promise<void> {\n const pkgPath = join(projectDir, 'package.json');\n if (!existsSync(pkgPath)) return;\n\n let pkg: Record<string, unknown>;\n try {\n pkg = JSON.parse(await readFile(pkgPath, 'utf-8'));\n } catch {\n // Malformed package.json - skip package validation\n return;\n }\n\n const deps = (pkg.dependencies || {}) as Record<string, string>;\n const devDeps = (pkg.devDependencies || {}) as Record<string, string>;\n const allDeps = { ...devDeps, ...deps };\n\n for (const rule of rules.packages) {\n const location = rule.location || 'any';\n const searchIn = location === 'any' ? allDeps : location === 'dependencies' ? deps : devDeps;\n\n if (!searchIn[rule.name]) {\n issues.push({\n type: 'package',\n severity: 'error',\n message: `Missing package: ${rule.name}`,\n hint: `Run: npm install ${rule.name}`,\n });\n }\n }\n}\n\nasync function validateEnvVars(rules: ValidationRules, projectDir: string, issues: ValidationIssue[]): Promise<void> {\n const envPath = join(projectDir, '.env.local');\n let envContent = '';\n\n try {\n envContent = await readFile(envPath, 'utf-8');\n } catch {\n if (rules.envVars.length > 0) {\n issues.push({\n type: 'env',\n severity: 'error',\n message: 'Missing .env.local file',\n hint: 'Create .env.local with required environment variables',\n });\n }\n return;\n }\n\n for (const rule of rules.envVars) {\n // Check primary name and any alternates\n const varsToCheck = [rule.name, ...(rule.alternates || [])];\n const found = varsToCheck.some((varName) => {\n const pattern = new RegExp(`^${varName}=.+`, 'm');\n return pattern.test(envContent);\n });\n\n if (!found) {\n const hint = rule.alternates\n ? `Add ${rule.name} (or one of: ${rule.alternates.join(', ')}) to .env.local`\n : `Add ${rule.name}=your_value to .env.local`;\n\n issues.push({\n type: 'env',\n severity: rule.required === false ? 'warning' : 'error',\n message: `Missing environment variable: ${rule.name}`,\n hint,\n });\n }\n }\n}\n\nasync function validateFiles(rules: ValidationRules, projectDir: string, issues: ValidationIssue[]): Promise<void> {\n for (const rule of rules.files) {\n let matches: string[];\n try {\n matches = await fg(rule.path, { cwd: projectDir });\n } catch {\n // Invalid glob pattern - skip\n continue;\n }\n\n if (matches.length === 0) {\n issues.push({\n type: 'file',\n severity: 'error',\n message: `Missing file: ${rule.path}`,\n hint: `Create ${rule.path}`,\n });\n continue;\n }\n\n // Check content patterns\n if (rule.mustContain || rule.mustContainAny) {\n const filePath = join(projectDir, matches[0]);\n let content: string;\n try {\n content = await readFile(filePath, 'utf-8');\n } catch {\n // File read error - skip content checks\n continue;\n }\n\n // All must be present\n if (rule.mustContain) {\n for (const pattern of rule.mustContain) {\n if (!content.includes(pattern)) {\n issues.push({\n type: 'pattern',\n severity: 'warning',\n message: `File ${matches[0]} missing expected pattern: \"${pattern}\"`,\n hint: `Ensure ${matches[0]} contains: ${pattern}`,\n });\n }\n }\n }\n\n // At least one must be present\n if (rule.mustContainAny) {\n const hasAny = rule.mustContainAny.some((p) => content.includes(p));\n if (!hasAny) {\n issues.push({\n type: 'pattern',\n severity: 'warning',\n message: `File ${matches[0]} missing one of: ${rule.mustContainAny.join(', ')}`,\n hint: `Ensure ${matches[0]} contains one of these patterns`,\n });\n }\n }\n }\n }\n}\n\n/**\n * Framework-specific cross-validations that require reading multiple sources.\n */\nasync function validateFrameworkSpecific(\n framework: string,\n projectDir: string,\n issues: ValidationIssue[],\n): Promise<void> {\n // Universal cross-validations\n await validateCredentialFormats(projectDir, issues);\n await validateDuplicateEnvVars(projectDir, issues);\n\n // Framework-specific validations\n switch (framework) {\n case 'nextjs':\n await validateNextjsRedirectUri(projectDir, issues);\n await validateNextjsMiddlewarePlacement(projectDir, issues);\n await validateCookiePasswordLength(projectDir, issues, 'WORKOS_COOKIE_PASSWORD');\n break;\n case 'react':\n await validateReactProviderWrapping(projectDir, issues);\n break;\n case 'react-router':\n await validateReactRouterRedirectUri(projectDir, issues);\n await validateCookiePasswordLength(projectDir, issues, 'WORKOS_COOKIE_PASSWORD');\n break;\n case 'tanstack-start':\n await validateTanstackStartRedirectUri(projectDir, issues);\n await validateCookiePasswordLength(projectDir, issues, 'WORKOS_COOKIE_PASSWORD');\n break;\n }\n}\n\n/**\n * Validates that the Next.js redirect URI matches an existing callback route.\n *\n * Common failure: .env.local has /auth/callback but route is at /api/auth/callback\n */\nasync function validateNextjsRedirectUri(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n const envPath = join(projectDir, '.env.local');\n let envContent: string;\n\n try {\n envContent = await readFile(envPath, 'utf-8');\n } catch {\n return; // No .env.local - other validators handle this\n }\n\n // Extract redirect URI value\n const match = envContent.match(/^NEXT_PUBLIC_WORKOS_REDIRECT_URI=(.+)$/m);\n if (!match) {\n return; // Missing env var - other validators handle this\n }\n\n const redirectUri = match[1].trim();\n let callbackPath: string;\n\n try {\n const url = new URL(redirectUri);\n callbackPath = url.pathname;\n } catch {\n issues.push({\n type: 'env',\n severity: 'error',\n message: `Invalid redirect URI: ${redirectUri}`,\n hint: 'NEXT_PUBLIC_WORKOS_REDIRECT_URI must be a valid URL',\n });\n return;\n }\n\n // Remove leading slash for path matching\n const routePath = callbackPath.replace(/^\\//, '');\n\n // Check if route file exists at expected location (Next.js App Router)\n const routePatterns = [\n `app/${routePath}/route.ts`,\n `app/${routePath}/route.tsx`,\n `app/${routePath}/route.js`,\n `app/${routePath}/route.jsx`,\n `src/app/${routePath}/route.ts`,\n `src/app/${routePath}/route.tsx`,\n `src/app/${routePath}/route.js`,\n `src/app/${routePath}/route.jsx`,\n ];\n\n const routeExists = routePatterns.some((pattern) => existsSync(join(projectDir, pattern)));\n\n if (!routeExists) {\n // Check what routes DO exist to give a better hint\n const existingRoutes = await fg(\n ['app/**/callback/**/route.{ts,tsx,js,jsx}', 'src/app/**/callback/**/route.{ts,tsx,js,jsx}'],\n {\n cwd: projectDir,\n },\n );\n\n let hint = `Create a route handler at app/${routePath}/route.ts`;\n if (existingRoutes.length > 0) {\n // Found a route at a different path - likely the mismatch\n const actualPath = '/' + existingRoutes[0].replace(/^(src\\/)?app\\//, '').replace(/\\/route\\.(ts|tsx|js|jsx)$/, '');\n hint =\n `Found callback route at ${existingRoutes[0]} but redirect URI points to ${callbackPath}. Either:\\n` +\n ` 1. Change NEXT_PUBLIC_WORKOS_REDIRECT_URI to http://localhost:3000${actualPath}\\n` +\n ` 2. Move the route to app/${routePath}/route.ts`;\n }\n\n issues.push({\n type: 'file',\n severity: 'error',\n message: `Redirect URI path \"${callbackPath}\" has no matching route file`,\n hint,\n });\n }\n}\n\n/**\n * Validates that the React Router redirect URI matches an existing callback route.\n *\n * React Router v7 framework mode uses file-based routing:\n * - /auth/callback → app/routes/auth.callback.tsx (dot notation)\n * - /auth/callback → app/routes/auth/callback.tsx (nested folders)\n */\nasync function validateReactRouterRedirectUri(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n const envPath = join(projectDir, '.env.local');\n let envContent: string;\n\n try {\n envContent = await readFile(envPath, 'utf-8');\n } catch {\n return;\n }\n\n const match = envContent.match(/^WORKOS_REDIRECT_URI=(.+)$/m);\n if (!match) {\n return;\n }\n\n const redirectUri = match[1].trim();\n let callbackPath: string;\n\n try {\n const url = new URL(redirectUri);\n callbackPath = url.pathname;\n } catch {\n issues.push({\n type: 'env',\n severity: 'error',\n message: `Invalid redirect URI: ${redirectUri}`,\n hint: 'WORKOS_REDIRECT_URI must be a valid URL',\n });\n return;\n }\n\n const routePath = callbackPath.replace(/^\\//, '');\n // React Router uses dot notation: /auth/callback → auth.callback\n const dotPath = routePath.replace(/\\//g, '.');\n\n // Check possible route file locations\n const routePatterns = [\n // Dot notation (e.g., app/routes/auth.callback.tsx)\n `app/routes/${dotPath}.tsx`,\n `app/routes/${dotPath}.ts`,\n `app/routes/${dotPath}.jsx`,\n `app/routes/${dotPath}.js`,\n // Nested folders (e.g., app/routes/auth/callback.tsx)\n `app/routes/${routePath}.tsx`,\n `app/routes/${routePath}.ts`,\n `app/routes/${routePath}.jsx`,\n `app/routes/${routePath}.js`,\n // Index file in folder (e.g., app/routes/auth/callback/index.tsx)\n `app/routes/${routePath}/index.tsx`,\n `app/routes/${routePath}/index.ts`,\n `app/routes/${routePath}/index.jsx`,\n `app/routes/${routePath}/index.js`,\n // Route file in folder (e.g., app/routes/auth/callback/route.tsx)\n `app/routes/${routePath}/route.tsx`,\n `app/routes/${routePath}/route.ts`,\n `app/routes/${routePath}/route.jsx`,\n `app/routes/${routePath}/route.js`,\n ];\n\n const routeExists = routePatterns.some((pattern) => existsSync(join(projectDir, pattern)));\n\n if (!routeExists) {\n const existingRoutes = await fg(['app/routes/**/*callback*.{ts,tsx,js,jsx}'], {\n cwd: projectDir,\n });\n\n let hint = `Create a route at app/routes/${dotPath}.tsx`;\n if (existingRoutes.length > 0) {\n const actualFile = existingRoutes[0];\n // Convert file path back to URL path\n const actualPath =\n '/' +\n actualFile\n .replace(/^app\\/routes\\//, '')\n .replace(/\\.(tsx?|jsx?)$/, '')\n .replace(/\\/(index|route)$/, '')\n .replace(/\\./g, '/');\n hint =\n `Found callback route at ${actualFile} but redirect URI points to ${callbackPath}. Either:\\n` +\n ` 1. Change WORKOS_REDIRECT_URI to http://localhost:3000${actualPath}\\n` +\n ` 2. Move the route to app/routes/${dotPath}.tsx`;\n }\n\n issues.push({\n type: 'file',\n severity: 'error',\n message: `Redirect URI path \"${callbackPath}\" has no matching route file`,\n hint,\n });\n }\n}\n\n/**\n * Validates that the TanStack Start redirect URI matches an existing callback route.\n *\n * TanStack Start uses file-based routing:\n * - /auth/callback → app/routes/auth/callback.tsx\n */\nasync function validateTanstackStartRedirectUri(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n const envPath = join(projectDir, '.env.local');\n let envContent: string;\n\n try {\n envContent = await readFile(envPath, 'utf-8');\n } catch {\n return;\n }\n\n const match = envContent.match(/^WORKOS_REDIRECT_URI=(.+)$/m);\n if (!match) {\n return;\n }\n\n const redirectUri = match[1].trim();\n let callbackPath: string;\n\n try {\n const url = new URL(redirectUri);\n callbackPath = url.pathname;\n } catch {\n issues.push({\n type: 'env',\n severity: 'error',\n message: `Invalid redirect URI: ${redirectUri}`,\n hint: 'WORKOS_REDIRECT_URI must be a valid URL',\n });\n return;\n }\n\n const routePath = callbackPath.replace(/^\\//, '');\n\n // TanStack Start route patterns\n const routePatterns = [\n `app/routes/${routePath}.tsx`,\n `app/routes/${routePath}.ts`,\n `app/routes/${routePath}.jsx`,\n `app/routes/${routePath}.js`,\n `app/routes/${routePath}/index.tsx`,\n `app/routes/${routePath}/index.ts`,\n `app/routes/${routePath}/index.jsx`,\n `app/routes/${routePath}/index.js`,\n ];\n\n const routeExists = routePatterns.some((pattern) => existsSync(join(projectDir, pattern)));\n\n if (!routeExists) {\n const existingRoutes = await fg(['app/routes/**/*callback*.{ts,tsx,js,jsx}'], {\n cwd: projectDir,\n });\n\n let hint = `Create a route at app/routes/${routePath}.tsx`;\n if (existingRoutes.length > 0) {\n const actualFile = existingRoutes[0];\n const actualPath =\n '/' +\n actualFile\n .replace(/^app\\/routes\\//, '')\n .replace(/\\.(tsx?|jsx?)$/, '')\n .replace(/\\/index$/, '');\n hint =\n `Found callback route at ${actualFile} but redirect URI points to ${callbackPath}. Either:\\n` +\n ` 1. Change WORKOS_REDIRECT_URI to http://localhost:3000${actualPath}\\n` +\n ` 2. Move the route to app/routes/${routePath}.tsx`;\n }\n\n issues.push({\n type: 'file',\n severity: 'error',\n message: `Redirect URI path \"${callbackPath}\" has no matching route file`,\n hint,\n });\n }\n}\n\n/**\n * Validates cookie password is at least 32 characters.\n * WorkOS requires this for secure session encryption.\n */\nasync function validateCookiePasswordLength(\n projectDir: string,\n issues: ValidationIssue[],\n envVarName: string,\n): Promise<void> {\n const envPath = join(projectDir, '.env.local');\n let envContent: string;\n\n try {\n envContent = await readFile(envPath, 'utf-8');\n } catch {\n return; // No .env.local - other validators handle this\n }\n\n const match = envContent.match(new RegExp(`^${envVarName}=(.*)$`, 'm'));\n if (!match) {\n return; // Missing env var - other validators handle this\n }\n\n const password = match[1].trim();\n if (password.length < 32) {\n issues.push({\n type: 'env',\n severity: 'error',\n message: `${envVarName} must be at least 32 characters (currently ${password.length})`,\n hint: `Generate a secure password: openssl rand -base64 32`,\n });\n }\n}\n\n/**\n * Validates credential formats:\n * - API key should start with sk_\n * - Client ID should start with client_\n */\nasync function validateCredentialFormats(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n const envPath = join(projectDir, '.env.local');\n let envContent: string;\n\n try {\n envContent = await readFile(envPath, 'utf-8');\n } catch {\n return;\n }\n\n // Check API key format (any common variation)\n const apiKeyPatterns = [/^WORKOS_API_KEY=(.*)$/m, /^NEXT_PUBLIC_WORKOS_API_KEY=(.*)$/m];\n\n for (const pattern of apiKeyPatterns) {\n const match = envContent.match(pattern);\n if (match) {\n const value = match[1].trim();\n if (value && !value.startsWith('sk_')) {\n issues.push({\n type: 'env',\n severity: 'error',\n message: `Invalid API key format: \"${value.substring(0, 10)}...\"`,\n hint: 'WorkOS API keys start with \"sk_\". Check your WorkOS Dashboard for the correct key.',\n });\n }\n }\n }\n\n // Check Client ID format\n const clientIdPatterns = [/^WORKOS_CLIENT_ID=(.*)$/m, /^NEXT_PUBLIC_WORKOS_CLIENT_ID=(.*)$/m];\n\n for (const pattern of clientIdPatterns) {\n const match = envContent.match(pattern);\n if (match) {\n const value = match[1].trim();\n if (value && !value.startsWith('client_')) {\n issues.push({\n type: 'env',\n severity: 'error',\n message: `Invalid Client ID format: \"${value.substring(0, 15)}...\"`,\n hint: 'WorkOS Client IDs start with \"client_\". Check your WorkOS Dashboard for the correct ID.',\n });\n }\n }\n }\n}\n\n/**\n * Validates Next.js middleware.ts is at the correct location.\n * Must be at project root or src/ folder, not nested deeper.\n */\nasync function validateNextjsMiddlewarePlacement(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n // Valid locations\n const validPaths = ['middleware.ts', 'middleware.js', 'src/middleware.ts', 'src/middleware.js'];\n\n const hasValidMiddleware = validPaths.some((p) => existsSync(join(projectDir, p)));\n if (hasValidMiddleware) {\n return; // Correctly placed\n }\n\n // Check for misplaced middleware\n const misplacedMiddleware = await fg(['**/middleware.{ts,js}'], {\n cwd: projectDir,\n ignore: ['node_modules/**'],\n });\n\n if (misplacedMiddleware.length > 0) {\n issues.push({\n type: 'file',\n severity: 'error',\n message: `middleware.ts found at wrong location: ${misplacedMiddleware[0]}`,\n hint: 'Next.js middleware must be at project root (middleware.ts) or src/middleware.ts, not nested in app/ or other folders.',\n });\n }\n}\n\n/**\n * Validates React SPA has AuthKitProvider wrapping the app.\n */\nasync function validateReactProviderWrapping(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n // Common entry points for React apps\n const entryPatterns = [\n 'src/main.tsx',\n 'src/main.jsx',\n 'src/index.tsx',\n 'src/index.jsx',\n 'src/App.tsx',\n 'src/App.jsx',\n 'app/layout.tsx',\n 'app/layout.jsx',\n ];\n\n let foundProvider = false;\n\n for (const pattern of entryPatterns) {\n const filePath = join(projectDir, pattern);\n if (!existsSync(filePath)) continue;\n\n try {\n const content = await readFile(filePath, 'utf-8');\n if (content.includes('AuthKitProvider')) {\n foundProvider = true;\n break;\n }\n } catch {\n continue;\n }\n }\n\n if (!foundProvider) {\n // Check if package is installed (if not, other validators handle it)\n const pkgPath = join(projectDir, 'package.json');\n if (existsSync(pkgPath)) {\n try {\n const pkg = JSON.parse(await readFile(pkgPath, 'utf-8'));\n const deps = { ...pkg.dependencies, ...pkg.devDependencies };\n if (deps['@workos-inc/authkit-react']) {\n issues.push({\n type: 'pattern',\n severity: 'warning',\n message: 'AuthKitProvider not found in common entry points',\n hint: 'Wrap your app with <AuthKitProvider> in main.tsx or App.tsx. See: https://workos.com/docs/user-management/react/authkit',\n });\n }\n } catch {\n // Malformed package.json - skip\n }\n }\n }\n}\n\n/**\n * Detects duplicate env vars between .env and .env.local with different values.\n * This can cause confusing behavior where wrong values are used.\n */\nasync function validateDuplicateEnvVars(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n const envPath = join(projectDir, '.env');\n const envLocalPath = join(projectDir, '.env.local');\n\n let envContent: string;\n let envLocalContent: string;\n\n try {\n envContent = await readFile(envPath, 'utf-8');\n } catch {\n return; // No .env file - no conflict possible\n }\n\n try {\n envLocalContent = await readFile(envLocalPath, 'utf-8');\n } catch {\n return; // No .env.local - no conflict possible\n }\n\n // Parse env files into key-value maps\n const parseEnv = (content: string): Map<string, string> => {\n const map = new Map<string, string>();\n for (const line of content.split('\\n')) {\n const match = line.match(/^([A-Z_][A-Z0-9_]*)=(.*)$/);\n if (match) {\n map.set(match[1], match[2].trim());\n }\n }\n return map;\n };\n\n const envVars = parseEnv(envContent);\n const envLocalVars = parseEnv(envLocalContent);\n\n // Check for WorkOS-related vars that differ\n const workosVars = [\n 'WORKOS_API_KEY',\n 'WORKOS_CLIENT_ID',\n 'WORKOS_REDIRECT_URI',\n 'WORKOS_COOKIE_PASSWORD',\n 'NEXT_PUBLIC_WORKOS_CLIENT_ID',\n 'NEXT_PUBLIC_WORKOS_REDIRECT_URI',\n ];\n\n for (const varName of workosVars) {\n const envValue = envVars.get(varName);\n const localValue = envLocalVars.get(varName);\n\n if (envValue && localValue && envValue !== localValue) {\n issues.push({\n type: 'env',\n severity: 'warning',\n message: `${varName} has different values in .env and .env.local`,\n hint: `.env.local takes precedence. Remove from .env to avoid confusion, or ensure they match.`,\n });\n }\n }\n}\n"]}
|
|
1
|
+
{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../src/lib/validation/validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,WAAW,CAAC;AAE3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAO1D,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,UAAkB,EAClB,UAA2B,EAAE;IAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,mDAAmD;IACnD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,SAAS;YACT,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC;IACJ,CAAC;IAED,kBAAkB;IAClB,MAAM,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAE/C,2CAA2C;IAC3C,MAAM,yBAAyB,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;IAE/D,kCAAkC;IAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QACjE,SAAS;QACT,MAAM;QACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACnC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,OAAgB;IAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,SAAS,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;QAErD,mCAAmC;QACnC,IAAI,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7C,OAAO;gBACL,GAAG,KAAK;gBACR,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBACtD,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;gBAC/D,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;aAC7D,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,kCAAkC;IACjD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAAsB,EAAE,UAAkB,EAAE,MAAyB;IACnG,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO;IAEjC,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;QACnD,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAA2B,CAAC;IAChE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAA2B,CAAC;IACtE,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;QACxC,MAAM,QAAQ,GAAG,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QAE7F,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;gBACxC,IAAI,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,KAAsB,EAAE,UAAkB,EAAE,MAAyB;IAClG,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAU,GAAG,EAAE,CAAC;IAEpB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,yBAAyB;gBAClC,IAAI,EAAE,uDAAuD;aAC9D,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACjC,wCAAwC;QACxC,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACzC,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,KAAK,EAAE,GAAG,CAAC,CAAC;YAClD,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU;gBAC1B,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;gBAC7E,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,2BAA2B,CAAC;YAEhD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;gBACvD,OAAO,EAAE,iCAAiC,IAAI,CAAC,IAAI,EAAE;gBACrD,IAAI;aACL,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAsB,EAAE,UAAkB,EAAE,MAAyB;IAChG,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;YAC9B,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,iBAAiB,IAAI,CAAC,IAAI,EAAE;gBACrC,IAAI,EAAE,UAAU,IAAI,CAAC,IAAI,EAAE;aAC5B,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,yBAAyB;QACzB,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,wCAAwC;gBACxC,SAAS;YACX,CAAC;YAED,sBAAsB;YACtB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACvC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC/B,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,SAAS;4BACf,QAAQ,EAAE,SAAS;4BACnB,OAAO,EAAE,QAAQ,OAAO,CAAC,CAAC,CAAC,+BAA+B,OAAO,GAAG;4BACpE,IAAI,EAAE,UAAU,OAAO,CAAC,CAAC,CAAC,cAAc,OAAO,EAAE;yBAClD,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,+BAA+B;YAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,SAAS;wBACnB,OAAO,EAAE,QAAQ,OAAO,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBAC/E,IAAI,EAAE,UAAU,OAAO,CAAC,CAAC,CAAC,iCAAiC;qBAC5D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,yBAAyB,CACtC,SAAiB,EACjB,UAAkB,EAClB,MAAyB;IAEzB,8BAA8B;IAC9B,MAAM,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,wBAAwB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAEnD,iCAAiC;IACjC,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,QAAQ;YACX,MAAM,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACpD,MAAM,iCAAiC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC5D,MAAM,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;YACjF,MAAM;QACR,KAAK,OAAO;YACV,MAAM,6BAA6B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACxD,MAAM;QACR,KAAK,cAAc;YACjB,MAAM,8BAA8B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;YACjF,MAAM;QACR,KAAK,gBAAgB;YACnB,MAAM,gCAAgC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;YACjF,MAAM;IACV,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,yBAAyB,CAAC,UAAkB,EAAE,MAAyB;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,+CAA+C;IACzD,CAAC;IAED,6BAA6B;IAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,iDAAiD;IAC3D,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,YAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,yBAAyB,WAAW,EAAE;YAC/C,IAAI,EAAE,qDAAqD;SAC5D,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,yCAAyC;IACzC,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAElD,uEAAuE;IACvE,MAAM,aAAa,GAAG;QACpB,OAAO,SAAS,WAAW;QAC3B,OAAO,SAAS,YAAY;QAC5B,OAAO,SAAS,WAAW;QAC3B,OAAO,SAAS,YAAY;QAC5B,WAAW,SAAS,WAAW;QAC/B,WAAW,SAAS,YAAY;QAChC,WAAW,SAAS,WAAW;QAC/B,WAAW,SAAS,YAAY;KACjC,CAAC;IAEF,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,mDAAmD;QACnD,MAAM,cAAc,GAAG,MAAM,EAAE,CAC7B,CAAC,0CAA0C,EAAE,8CAA8C,CAAC,EAC5F;YACE,GAAG,EAAE,UAAU;SAChB,CACF,CAAC;QAEF,IAAI,IAAI,GAAG,iCAAiC,SAAS,WAAW,CAAC;QACjE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,0DAA0D;YAC1D,MAAM,UAAU,GAAG,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;YAClH,IAAI;gBACF,2BAA2B,cAAc,CAAC,CAAC,CAAC,+BAA+B,YAAY,aAAa;oBACpG,uEAAuE,UAAU,IAAI;oBACrF,8BAA8B,SAAS,WAAW,CAAC;QACvD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sBAAsB,YAAY,8BAA8B;YACzE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,8BAA8B,CAAC,UAAkB,EAAE,MAAyB;IACzF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,YAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,yBAAyB,WAAW,EAAE;YAC/C,IAAI,EAAE,yCAAyC;SAChD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,iEAAiE;IACjE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE9C,sCAAsC;IACtC,MAAM,aAAa,GAAG;QACpB,oDAAoD;QACpD,cAAc,OAAO,MAAM;QAC3B,cAAc,OAAO,KAAK;QAC1B,cAAc,OAAO,MAAM;QAC3B,cAAc,OAAO,KAAK;QAC1B,sDAAsD;QACtD,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,kEAAkE;QAClE,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,kEAAkE;QAClE,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;KACnC,CAAC;IAEF,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,CAAC,0CAA0C,CAAC,EAAE;YAC5E,GAAG,EAAE,UAAU;SAChB,CAAC,CAAC;QAEH,IAAI,IAAI,GAAG,gCAAgC,OAAO,MAAM,CAAC;QACzD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YACrC,qCAAqC;YACrC,MAAM,UAAU,GACd,GAAG;gBACH,UAAU;qBACP,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;qBAC/B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACzB,IAAI;gBACF,2BAA2B,UAAU,+BAA+B,YAAY,aAAa;oBAC7F,2DAA2D,UAAU,IAAI;oBACzE,qCAAqC,OAAO,MAAM,CAAC;QACvD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sBAAsB,YAAY,8BAA8B;YACzE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gCAAgC,CAAC,UAAkB,EAAE,MAAyB;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,YAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,yBAAyB,WAAW,EAAE;YAC/C,IAAI,EAAE,yCAAyC;SAChD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAElD,gCAAgC;IAChC,MAAM,aAAa,GAAG;QACpB,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;KACnC,CAAC;IAEF,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,CAAC,0CAA0C,CAAC,EAAE;YAC5E,GAAG,EAAE,UAAU;SAChB,CAAC,CAAC;QAEH,IAAI,IAAI,GAAG,gCAAgC,SAAS,MAAM,CAAC;QAC3D,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,UAAU,GACd,GAAG;gBACH,UAAU;qBACP,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAC7B,IAAI;gBACF,2BAA2B,UAAU,+BAA+B,YAAY,aAAa;oBAC7F,2DAA2D,UAAU,IAAI;oBACzE,qCAAqC,SAAS,MAAM,CAAC;QACzD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sBAAsB,YAAY,8BAA8B;YACzE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,4BAA4B,CACzC,UAAkB,EAClB,MAAyB,EACzB,UAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,+CAA+C;IACzD,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,UAAU,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,iDAAiD;IAC3D,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,GAAG,UAAU,8CAA8C,QAAQ,CAAC,MAAM,GAAG;YACtF,IAAI,EAAE,qDAAqD;SAC5D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,yBAAyB,CAAC,UAAkB,EAAE,MAAyB;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,8CAA8C;IAC9C,MAAM,cAAc,GAAG,CAAC,wBAAwB,EAAE,oCAAoC,CAAC,CAAC;IAExF,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,4BAA4B,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;oBACjE,IAAI,EAAE,oFAAoF;iBAC3F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,gBAAgB,GAAG,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;IAE9F,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1C,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,8BAA8B,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;oBACnE,IAAI,EAAE,yFAAyF;iBAChG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iCAAiC,CAAC,UAAkB,EAAE,MAAyB;IAC5F,sEAAsE;IACtE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3C,MAAM,YAAY,GAAG;QACnB,GAAG,WAAW,eAAe;QAC7B,GAAG,WAAW,eAAe;QAC7B,GAAG,WAAW,UAAU;QACxB,GAAG,WAAW,UAAU;KACzB,CAAC;IAEF,MAAM,mBAAmB,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,mBAAmB,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IAED,gDAAgD;IAChD,MAAM,WAAW,GAAG;QAClB,eAAe;QACf,eAAe;QACf,mBAAmB;QACnB,mBAAmB;QACnB,UAAU;QACV,UAAU;QACV,cAAc;QACd,cAAc;KACf,CAAC;IACF,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzG,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,GAAG,UAAU,uCAAuC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE;YACzF,IAAI,EAAE,cAAc,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,0GAA0G;SAC7K,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,wCAAwC;IACxC,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,CAAC,+BAA+B,CAAC,EAAE;QAC5D,GAAG,EAAE,UAAU;QACf,MAAM,EAAE,CAAC,iBAAiB,CAAC;KAC5B,CAAC,CAAC;IAEH,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,6CAA6C,SAAS,CAAC,CAAC,CAAC,EAAE;YACpE,IAAI,EAAE,cAAc,WAAW,oBAAoB,WAAW,sCAAsC;SACrG,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,6BAA6B,CAAC,UAAkB,EAAE,MAAyB;IACxF,qCAAqC;IACrC,MAAM,aAAa,GAAG;QACpB,cAAc;QACd,cAAc;QACd,eAAe;QACf,eAAe;QACf,aAAa;QACb,aAAa;QACb,gBAAgB;QAChB,gBAAgB;KACjB,CAAC;IAEF,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACxC,aAAa,GAAG,IAAI,CAAC;gBACrB,MAAM;YACR,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,qEAAqE;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBACzD,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;gBAC7D,IAAI,IAAI,CAAC,2BAA2B,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,SAAS;wBACnB,OAAO,EAAE,kDAAkD;wBAC3D,IAAI,EAAE,yHAAyH;qBAChI,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,wBAAwB,CAAC,UAAkB,EAAE,MAAyB;IACnF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAEpD,IAAI,UAAkB,CAAC;IACvB,IAAI,eAAuB,CAAC;IAE5B,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,sCAAsC;IAChD,CAAC;IAED,IAAI,CAAC;QACH,eAAe,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,uCAAuC;IACjD,CAAC;IAED,sCAAsC;IACtC,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAuB,EAAE;QACxD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACtD,IAAI,KAAK,EAAE,CAAC;gBACV,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;IAE/C,4CAA4C;IAC5C,MAAM,UAAU,GAAG;QACjB,gBAAgB;QAChB,kBAAkB;QAClB,qBAAqB;QACrB,wBAAwB;QACxB,8BAA8B;QAC9B,iCAAiC;KAClC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE7C,IAAI,QAAQ,IAAI,UAAU,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,GAAG,OAAO,8CAA8C;gBACjE,IAAI,EAAE,yFAAyF;aAChG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import { readFile } from 'fs/promises';\nimport { existsSync } from 'fs';\nimport { join } from 'path';\nimport fg from 'fast-glob';\nimport type { ValidationResult, ValidationRules, ValidationIssue } from './types.js';\nimport { runBuildValidation } from './build-validator.js';\n\nexport interface ValidateOptions {\n variant?: string;\n runBuild?: boolean;\n}\n\nexport async function validateInstallation(\n framework: string,\n projectDir: string,\n options: ValidateOptions = {},\n): Promise<ValidationResult> {\n const startTime = Date.now();\n const issues: ValidationIssue[] = [];\n\n // Load rules for framework (with optional variant)\n const rules = await loadRules(framework, options.variant);\n if (!rules) {\n return {\n passed: true,\n framework,\n issues: [],\n durationMs: Date.now() - startTime,\n };\n }\n\n // Run validations\n await validatePackages(rules, projectDir, issues);\n await validateEnvVars(rules, projectDir, issues);\n await validateFiles(rules, projectDir, issues);\n\n // Run framework-specific cross-validations\n await validateFrameworkSpecific(framework, projectDir, issues);\n\n // Run build validation if enabled\n if (options.runBuild !== false) {\n const buildResult = await runBuildValidation(projectDir);\n issues.push(...buildResult.issues);\n }\n\n return {\n passed: issues.filter((i) => i.severity === 'error').length === 0,\n framework,\n issues,\n durationMs: Date.now() - startTime,\n };\n}\n\nasync function loadRules(framework: string, variant?: string): Promise<ValidationRules | null> {\n const rulesPath = new URL(`./rules/${framework}.json`, import.meta.url);\n try {\n const content = await readFile(rulesPath, 'utf-8');\n const rules = JSON.parse(content) as ValidationRules;\n\n // Merge variant rules if specified\n if (variant && rules.variants?.[variant]) {\n const variantRules = rules.variants[variant];\n return {\n ...rules,\n files: [...rules.files, ...(variantRules.files || [])],\n packages: [...rules.packages, ...(variantRules.packages || [])],\n envVars: [...rules.envVars, ...(variantRules.envVars || [])],\n };\n }\n\n return rules;\n } catch {\n return null; // No rules for this framework yet\n }\n}\n\nasync function validatePackages(rules: ValidationRules, projectDir: string, issues: ValidationIssue[]): Promise<void> {\n const pkgPath = join(projectDir, 'package.json');\n if (!existsSync(pkgPath)) return;\n\n let pkg: Record<string, unknown>;\n try {\n pkg = JSON.parse(await readFile(pkgPath, 'utf-8'));\n } catch {\n // Malformed package.json - skip package validation\n return;\n }\n\n const deps = (pkg.dependencies || {}) as Record<string, string>;\n const devDeps = (pkg.devDependencies || {}) as Record<string, string>;\n const allDeps = { ...devDeps, ...deps };\n\n for (const rule of rules.packages) {\n const location = rule.location || 'any';\n const searchIn = location === 'any' ? allDeps : location === 'dependencies' ? deps : devDeps;\n\n if (!searchIn[rule.name]) {\n issues.push({\n type: 'package',\n severity: 'error',\n message: `Missing package: ${rule.name}`,\n hint: `Run: npm install ${rule.name}`,\n });\n }\n }\n}\n\nasync function validateEnvVars(rules: ValidationRules, projectDir: string, issues: ValidationIssue[]): Promise<void> {\n const envPath = join(projectDir, '.env.local');\n let envContent = '';\n\n try {\n envContent = await readFile(envPath, 'utf-8');\n } catch {\n if (rules.envVars.length > 0) {\n issues.push({\n type: 'env',\n severity: 'error',\n message: 'Missing .env.local file',\n hint: 'Create .env.local with required environment variables',\n });\n }\n return;\n }\n\n for (const rule of rules.envVars) {\n // Check primary name and any alternates\n const varsToCheck = [rule.name, ...(rule.alternates || [])];\n const found = varsToCheck.some((varName) => {\n const pattern = new RegExp(`^${varName}=.+`, 'm');\n return pattern.test(envContent);\n });\n\n if (!found) {\n const hint = rule.alternates\n ? `Add ${rule.name} (or one of: ${rule.alternates.join(', ')}) to .env.local`\n : `Add ${rule.name}=your_value to .env.local`;\n\n issues.push({\n type: 'env',\n severity: rule.required === false ? 'warning' : 'error',\n message: `Missing environment variable: ${rule.name}`,\n hint,\n });\n }\n }\n}\n\nasync function validateFiles(rules: ValidationRules, projectDir: string, issues: ValidationIssue[]): Promise<void> {\n for (const rule of rules.files) {\n let matches: string[];\n try {\n matches = await fg(rule.path, { cwd: projectDir });\n } catch {\n // Invalid glob pattern - skip\n continue;\n }\n\n if (matches.length === 0) {\n issues.push({\n type: 'file',\n severity: 'error',\n message: `Missing file: ${rule.path}`,\n hint: `Create ${rule.path}`,\n });\n continue;\n }\n\n // Check content patterns\n if (rule.mustContain || rule.mustContainAny) {\n const filePath = join(projectDir, matches[0]);\n let content: string;\n try {\n content = await readFile(filePath, 'utf-8');\n } catch {\n // File read error - skip content checks\n continue;\n }\n\n // All must be present\n if (rule.mustContain) {\n for (const pattern of rule.mustContain) {\n if (!content.includes(pattern)) {\n issues.push({\n type: 'pattern',\n severity: 'warning',\n message: `File ${matches[0]} missing expected pattern: \"${pattern}\"`,\n hint: `Ensure ${matches[0]} contains: ${pattern}`,\n });\n }\n }\n }\n\n // At least one must be present\n if (rule.mustContainAny) {\n const hasAny = rule.mustContainAny.some((p) => content.includes(p));\n if (!hasAny) {\n issues.push({\n type: 'pattern',\n severity: 'warning',\n message: `File ${matches[0]} missing one of: ${rule.mustContainAny.join(', ')}`,\n hint: `Ensure ${matches[0]} contains one of these patterns`,\n });\n }\n }\n }\n }\n}\n\n/**\n * Framework-specific cross-validations that require reading multiple sources.\n */\nasync function validateFrameworkSpecific(\n framework: string,\n projectDir: string,\n issues: ValidationIssue[],\n): Promise<void> {\n // Universal cross-validations\n await validateCredentialFormats(projectDir, issues);\n await validateDuplicateEnvVars(projectDir, issues);\n\n // Framework-specific validations\n switch (framework) {\n case 'nextjs':\n await validateNextjsRedirectUri(projectDir, issues);\n await validateNextjsMiddlewarePlacement(projectDir, issues);\n await validateCookiePasswordLength(projectDir, issues, 'WORKOS_COOKIE_PASSWORD');\n break;\n case 'react':\n await validateReactProviderWrapping(projectDir, issues);\n break;\n case 'react-router':\n await validateReactRouterRedirectUri(projectDir, issues);\n await validateCookiePasswordLength(projectDir, issues, 'WORKOS_COOKIE_PASSWORD');\n break;\n case 'tanstack-start':\n await validateTanstackStartRedirectUri(projectDir, issues);\n await validateCookiePasswordLength(projectDir, issues, 'WORKOS_COOKIE_PASSWORD');\n break;\n }\n}\n\n/**\n * Validates that the Next.js redirect URI matches an existing callback route.\n *\n * Common failure: .env.local has /auth/callback but route is at /api/auth/callback\n */\nasync function validateNextjsRedirectUri(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n const envPath = join(projectDir, '.env.local');\n let envContent: string;\n\n try {\n envContent = await readFile(envPath, 'utf-8');\n } catch {\n return; // No .env.local - other validators handle this\n }\n\n // Extract redirect URI value\n const match = envContent.match(/^NEXT_PUBLIC_WORKOS_REDIRECT_URI=(.+)$/m);\n if (!match) {\n return; // Missing env var - other validators handle this\n }\n\n const redirectUri = match[1].trim();\n let callbackPath: string;\n\n try {\n const url = new URL(redirectUri);\n callbackPath = url.pathname;\n } catch {\n issues.push({\n type: 'env',\n severity: 'error',\n message: `Invalid redirect URI: ${redirectUri}`,\n hint: 'NEXT_PUBLIC_WORKOS_REDIRECT_URI must be a valid URL',\n });\n return;\n }\n\n // Remove leading slash for path matching\n const routePath = callbackPath.replace(/^\\//, '');\n\n // Check if route file exists at expected location (Next.js App Router)\n const routePatterns = [\n `app/${routePath}/route.ts`,\n `app/${routePath}/route.tsx`,\n `app/${routePath}/route.js`,\n `app/${routePath}/route.jsx`,\n `src/app/${routePath}/route.ts`,\n `src/app/${routePath}/route.tsx`,\n `src/app/${routePath}/route.js`,\n `src/app/${routePath}/route.jsx`,\n ];\n\n const routeExists = routePatterns.some((pattern) => existsSync(join(projectDir, pattern)));\n\n if (!routeExists) {\n // Check what routes DO exist to give a better hint\n const existingRoutes = await fg(\n ['app/**/callback/**/route.{ts,tsx,js,jsx}', 'src/app/**/callback/**/route.{ts,tsx,js,jsx}'],\n {\n cwd: projectDir,\n },\n );\n\n let hint = `Create a route handler at app/${routePath}/route.ts`;\n if (existingRoutes.length > 0) {\n // Found a route at a different path - likely the mismatch\n const actualPath = '/' + existingRoutes[0].replace(/^(src\\/)?app\\//, '').replace(/\\/route\\.(ts|tsx|js|jsx)$/, '');\n hint =\n `Found callback route at ${existingRoutes[0]} but redirect URI points to ${callbackPath}. Either:\\n` +\n ` 1. Change NEXT_PUBLIC_WORKOS_REDIRECT_URI to http://localhost:3000${actualPath}\\n` +\n ` 2. Move the route to app/${routePath}/route.ts`;\n }\n\n issues.push({\n type: 'file',\n severity: 'error',\n message: `Redirect URI path \"${callbackPath}\" has no matching route file`,\n hint,\n });\n }\n}\n\n/**\n * Validates that the React Router redirect URI matches an existing callback route.\n *\n * React Router v7 framework mode uses file-based routing:\n * - /auth/callback → app/routes/auth.callback.tsx (dot notation)\n * - /auth/callback → app/routes/auth/callback.tsx (nested folders)\n */\nasync function validateReactRouterRedirectUri(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n const envPath = join(projectDir, '.env.local');\n let envContent: string;\n\n try {\n envContent = await readFile(envPath, 'utf-8');\n } catch {\n return;\n }\n\n const match = envContent.match(/^WORKOS_REDIRECT_URI=(.+)$/m);\n if (!match) {\n return;\n }\n\n const redirectUri = match[1].trim();\n let callbackPath: string;\n\n try {\n const url = new URL(redirectUri);\n callbackPath = url.pathname;\n } catch {\n issues.push({\n type: 'env',\n severity: 'error',\n message: `Invalid redirect URI: ${redirectUri}`,\n hint: 'WORKOS_REDIRECT_URI must be a valid URL',\n });\n return;\n }\n\n const routePath = callbackPath.replace(/^\\//, '');\n // React Router uses dot notation: /auth/callback → auth.callback\n const dotPath = routePath.replace(/\\//g, '.');\n\n // Check possible route file locations\n const routePatterns = [\n // Dot notation (e.g., app/routes/auth.callback.tsx)\n `app/routes/${dotPath}.tsx`,\n `app/routes/${dotPath}.ts`,\n `app/routes/${dotPath}.jsx`,\n `app/routes/${dotPath}.js`,\n // Nested folders (e.g., app/routes/auth/callback.tsx)\n `app/routes/${routePath}.tsx`,\n `app/routes/${routePath}.ts`,\n `app/routes/${routePath}.jsx`,\n `app/routes/${routePath}.js`,\n // Index file in folder (e.g., app/routes/auth/callback/index.tsx)\n `app/routes/${routePath}/index.tsx`,\n `app/routes/${routePath}/index.ts`,\n `app/routes/${routePath}/index.jsx`,\n `app/routes/${routePath}/index.js`,\n // Route file in folder (e.g., app/routes/auth/callback/route.tsx)\n `app/routes/${routePath}/route.tsx`,\n `app/routes/${routePath}/route.ts`,\n `app/routes/${routePath}/route.jsx`,\n `app/routes/${routePath}/route.js`,\n ];\n\n const routeExists = routePatterns.some((pattern) => existsSync(join(projectDir, pattern)));\n\n if (!routeExists) {\n const existingRoutes = await fg(['app/routes/**/*callback*.{ts,tsx,js,jsx}'], {\n cwd: projectDir,\n });\n\n let hint = `Create a route at app/routes/${dotPath}.tsx`;\n if (existingRoutes.length > 0) {\n const actualFile = existingRoutes[0];\n // Convert file path back to URL path\n const actualPath =\n '/' +\n actualFile\n .replace(/^app\\/routes\\//, '')\n .replace(/\\.(tsx?|jsx?)$/, '')\n .replace(/\\/(index|route)$/, '')\n .replace(/\\./g, '/');\n hint =\n `Found callback route at ${actualFile} but redirect URI points to ${callbackPath}. Either:\\n` +\n ` 1. Change WORKOS_REDIRECT_URI to http://localhost:3000${actualPath}\\n` +\n ` 2. Move the route to app/routes/${dotPath}.tsx`;\n }\n\n issues.push({\n type: 'file',\n severity: 'error',\n message: `Redirect URI path \"${callbackPath}\" has no matching route file`,\n hint,\n });\n }\n}\n\n/**\n * Validates that the TanStack Start redirect URI matches an existing callback route.\n *\n * TanStack Start uses file-based routing:\n * - /auth/callback → app/routes/auth/callback.tsx\n */\nasync function validateTanstackStartRedirectUri(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n const envPath = join(projectDir, '.env.local');\n let envContent: string;\n\n try {\n envContent = await readFile(envPath, 'utf-8');\n } catch {\n return;\n }\n\n const match = envContent.match(/^WORKOS_REDIRECT_URI=(.+)$/m);\n if (!match) {\n return;\n }\n\n const redirectUri = match[1].trim();\n let callbackPath: string;\n\n try {\n const url = new URL(redirectUri);\n callbackPath = url.pathname;\n } catch {\n issues.push({\n type: 'env',\n severity: 'error',\n message: `Invalid redirect URI: ${redirectUri}`,\n hint: 'WORKOS_REDIRECT_URI must be a valid URL',\n });\n return;\n }\n\n const routePath = callbackPath.replace(/^\\//, '');\n\n // TanStack Start route patterns\n const routePatterns = [\n `app/routes/${routePath}.tsx`,\n `app/routes/${routePath}.ts`,\n `app/routes/${routePath}.jsx`,\n `app/routes/${routePath}.js`,\n `app/routes/${routePath}/index.tsx`,\n `app/routes/${routePath}/index.ts`,\n `app/routes/${routePath}/index.jsx`,\n `app/routes/${routePath}/index.js`,\n ];\n\n const routeExists = routePatterns.some((pattern) => existsSync(join(projectDir, pattern)));\n\n if (!routeExists) {\n const existingRoutes = await fg(['app/routes/**/*callback*.{ts,tsx,js,jsx}'], {\n cwd: projectDir,\n });\n\n let hint = `Create a route at app/routes/${routePath}.tsx`;\n if (existingRoutes.length > 0) {\n const actualFile = existingRoutes[0];\n const actualPath =\n '/' +\n actualFile\n .replace(/^app\\/routes\\//, '')\n .replace(/\\.(tsx?|jsx?)$/, '')\n .replace(/\\/index$/, '');\n hint =\n `Found callback route at ${actualFile} but redirect URI points to ${callbackPath}. Either:\\n` +\n ` 1. Change WORKOS_REDIRECT_URI to http://localhost:3000${actualPath}\\n` +\n ` 2. Move the route to app/routes/${routePath}.tsx`;\n }\n\n issues.push({\n type: 'file',\n severity: 'error',\n message: `Redirect URI path \"${callbackPath}\" has no matching route file`,\n hint,\n });\n }\n}\n\n/**\n * Validates cookie password is at least 32 characters.\n * WorkOS requires this for secure session encryption.\n */\nasync function validateCookiePasswordLength(\n projectDir: string,\n issues: ValidationIssue[],\n envVarName: string,\n): Promise<void> {\n const envPath = join(projectDir, '.env.local');\n let envContent: string;\n\n try {\n envContent = await readFile(envPath, 'utf-8');\n } catch {\n return; // No .env.local - other validators handle this\n }\n\n const match = envContent.match(new RegExp(`^${envVarName}=(.*)$`, 'm'));\n if (!match) {\n return; // Missing env var - other validators handle this\n }\n\n const password = match[1].trim();\n if (password.length < 32) {\n issues.push({\n type: 'env',\n severity: 'error',\n message: `${envVarName} must be at least 32 characters (currently ${password.length})`,\n hint: `Generate a secure password: openssl rand -base64 32`,\n });\n }\n}\n\n/**\n * Validates credential formats:\n * - API key should start with sk_\n * - Client ID should start with client_\n */\nasync function validateCredentialFormats(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n const envPath = join(projectDir, '.env.local');\n let envContent: string;\n\n try {\n envContent = await readFile(envPath, 'utf-8');\n } catch {\n return;\n }\n\n // Check API key format (any common variation)\n const apiKeyPatterns = [/^WORKOS_API_KEY=(.*)$/m, /^NEXT_PUBLIC_WORKOS_API_KEY=(.*)$/m];\n\n for (const pattern of apiKeyPatterns) {\n const match = envContent.match(pattern);\n if (match) {\n const value = match[1].trim();\n if (value && !value.startsWith('sk_')) {\n issues.push({\n type: 'env',\n severity: 'error',\n message: `Invalid API key format: \"${value.substring(0, 10)}...\"`,\n hint: 'WorkOS API keys start with \"sk_\". Check your WorkOS Dashboard for the correct key.',\n });\n }\n }\n }\n\n // Check Client ID format\n const clientIdPatterns = [/^WORKOS_CLIENT_ID=(.*)$/m, /^NEXT_PUBLIC_WORKOS_CLIENT_ID=(.*)$/m];\n\n for (const pattern of clientIdPatterns) {\n const match = envContent.match(pattern);\n if (match) {\n const value = match[1].trim();\n if (value && !value.startsWith('client_')) {\n issues.push({\n type: 'env',\n severity: 'error',\n message: `Invalid Client ID format: \"${value.substring(0, 15)}...\"`,\n hint: 'WorkOS Client IDs start with \"client_\". Check your WorkOS Dashboard for the correct ID.',\n });\n }\n }\n }\n}\n\n/**\n * Validates Next.js middleware/proxy is at the correct location.\n * Must be alongside the app/ directory — Next.js only watches for these files\n * in the parent directory of app/.\n */\nasync function validateNextjsMiddlewarePlacement(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n // Determine where app/ lives to know where middleware/proxy should be\n const appInSrc = existsSync(join(projectDir, 'src', 'app'));\n const expectedDir = appInSrc ? 'src/' : '';\n\n const correctPaths = [\n `${expectedDir}middleware.ts`,\n `${expectedDir}middleware.js`,\n `${expectedDir}proxy.ts`,\n `${expectedDir}proxy.js`,\n ];\n\n const hasCorrectPlacement = correctPaths.some((p) => existsSync(join(projectDir, p)));\n if (hasCorrectPlacement) {\n return;\n }\n\n // Check for middleware/proxy at the wrong level\n const allPossible = [\n 'middleware.ts',\n 'middleware.js',\n 'src/middleware.ts',\n 'src/middleware.js',\n 'proxy.ts',\n 'proxy.js',\n 'src/proxy.ts',\n 'src/proxy.js',\n ];\n const wrongLevel = allPossible.find((p) => existsSync(join(projectDir, p)) && !correctPaths.includes(p));\n\n if (wrongLevel) {\n const correctLevel = appInSrc ? 'src/' : 'project root';\n issues.push({\n type: 'file',\n severity: 'error',\n message: `${wrongLevel} is at the wrong level — app/ is in ${appInSrc ? 'src/' : 'root'}`,\n hint: `Move it to ${expectedDir}${wrongLevel.replace(/^src\\//, '')} (must be alongside app/ directory). Next.js silently ignores middleware/proxy files at the wrong level.`,\n });\n return;\n }\n\n // Check for deeply misplaced middleware\n const misplaced = await fg(['**/{middleware,proxy}.{ts,js}'], {\n cwd: projectDir,\n ignore: ['node_modules/**'],\n });\n\n if (misplaced.length > 0) {\n issues.push({\n type: 'file',\n severity: 'error',\n message: `middleware/proxy found at wrong location: ${misplaced[0]}`,\n hint: `Must be at ${expectedDir}middleware.ts or ${expectedDir}proxy.ts (alongside app/ directory).`,\n });\n }\n}\n\n/**\n * Validates React SPA has AuthKitProvider wrapping the app.\n */\nasync function validateReactProviderWrapping(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n // Common entry points for React apps\n const entryPatterns = [\n 'src/main.tsx',\n 'src/main.jsx',\n 'src/index.tsx',\n 'src/index.jsx',\n 'src/App.tsx',\n 'src/App.jsx',\n 'app/layout.tsx',\n 'app/layout.jsx',\n ];\n\n let foundProvider = false;\n\n for (const pattern of entryPatterns) {\n const filePath = join(projectDir, pattern);\n if (!existsSync(filePath)) continue;\n\n try {\n const content = await readFile(filePath, 'utf-8');\n if (content.includes('AuthKitProvider')) {\n foundProvider = true;\n break;\n }\n } catch {\n continue;\n }\n }\n\n if (!foundProvider) {\n // Check if package is installed (if not, other validators handle it)\n const pkgPath = join(projectDir, 'package.json');\n if (existsSync(pkgPath)) {\n try {\n const pkg = JSON.parse(await readFile(pkgPath, 'utf-8'));\n const deps = { ...pkg.dependencies, ...pkg.devDependencies };\n if (deps['@workos-inc/authkit-react']) {\n issues.push({\n type: 'pattern',\n severity: 'warning',\n message: 'AuthKitProvider not found in common entry points',\n hint: 'Wrap your app with <AuthKitProvider> in main.tsx or App.tsx. See: https://workos.com/docs/user-management/react/authkit',\n });\n }\n } catch {\n // Malformed package.json - skip\n }\n }\n }\n}\n\n/**\n * Detects duplicate env vars between .env and .env.local with different values.\n * This can cause confusing behavior where wrong values are used.\n */\nasync function validateDuplicateEnvVars(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n const envPath = join(projectDir, '.env');\n const envLocalPath = join(projectDir, '.env.local');\n\n let envContent: string;\n let envLocalContent: string;\n\n try {\n envContent = await readFile(envPath, 'utf-8');\n } catch {\n return; // No .env file - no conflict possible\n }\n\n try {\n envLocalContent = await readFile(envLocalPath, 'utf-8');\n } catch {\n return; // No .env.local - no conflict possible\n }\n\n // Parse env files into key-value maps\n const parseEnv = (content: string): Map<string, string> => {\n const map = new Map<string, string>();\n for (const line of content.split('\\n')) {\n const match = line.match(/^([A-Z_][A-Z0-9_]*)=(.*)$/);\n if (match) {\n map.set(match[1], match[2].trim());\n }\n }\n return map;\n };\n\n const envVars = parseEnv(envContent);\n const envLocalVars = parseEnv(envLocalContent);\n\n // Check for WorkOS-related vars that differ\n const workosVars = [\n 'WORKOS_API_KEY',\n 'WORKOS_CLIENT_ID',\n 'WORKOS_REDIRECT_URI',\n 'WORKOS_COOKIE_PASSWORD',\n 'NEXT_PUBLIC_WORKOS_CLIENT_ID',\n 'NEXT_PUBLIC_WORKOS_REDIRECT_URI',\n ];\n\n for (const varName of workosVars) {\n const envValue = envVars.get(varName);\n const localValue = envLocalVars.get(varName);\n\n if (envValue && localValue && envValue !== localValue) {\n issues.push({\n type: 'env',\n severity: 'warning',\n message: `${varName} has different values in .env and .env.local`,\n hint: `.env.local takes precedence. Remove from .env to avoid confusion, or ensure they match.`,\n });\n }\n }\n}\n"]}
|
package/package.json
CHANGED
|
@@ -35,21 +35,39 @@ Detect package manager, install SDK package from README.
|
|
|
35
35
|
|
|
36
36
|
**Verify:** SDK package exists in node_modules before continuing.
|
|
37
37
|
|
|
38
|
-
## Step 4:
|
|
38
|
+
## Step 4: Locate the app/ directory (BLOCKING)
|
|
39
|
+
|
|
40
|
+
**STOP. Do this before creating any files.**
|
|
41
|
+
|
|
42
|
+
Determine where the `app/` directory lives:
|
|
43
|
+
|
|
44
|
+
```bash
|
|
45
|
+
# Check for src/app/ first, then root app/
|
|
46
|
+
ls src/app/ 2>/dev/null && echo "APP_DIR=src" || (ls app/ 2>/dev/null && echo "APP_DIR=root")
|
|
47
|
+
```
|
|
48
|
+
|
|
49
|
+
Set `APP_DIR` for all subsequent steps. All middleware/proxy files MUST be created in `APP_DIR`:
|
|
50
|
+
|
|
51
|
+
- If `APP_DIR=src` → create files in `src/` (e.g., `src/proxy.ts`)
|
|
52
|
+
- If `APP_DIR=root` → create files at project root (e.g., `proxy.ts`)
|
|
53
|
+
|
|
54
|
+
Next.js only discovers middleware/proxy files in the parent directory of `app/`. A file at the wrong level is **silently ignored** — no error, just doesn't run.
|
|
55
|
+
|
|
56
|
+
## Step 5: Version Detection (Decision Tree)
|
|
39
57
|
|
|
40
58
|
Read Next.js version from `package.json`:
|
|
41
59
|
|
|
42
60
|
```
|
|
43
61
|
Next.js version?
|
|
44
62
|
|
|
|
45
|
-
+-- 16+ --> Create proxy.ts
|
|
63
|
+
+-- 16+ --> Create {APP_DIR}/proxy.ts
|
|
46
64
|
|
|
|
47
|
-
+-- 15 --> Create middleware.ts (cookies() is async
|
|
65
|
+
+-- 15 --> Create {APP_DIR}/middleware.ts (cookies() is async)
|
|
48
66
|
|
|
|
49
|
-
+-- 13-14 --> Create middleware.ts (cookies() is sync)
|
|
67
|
+
+-- 13-14 --> Create {APP_DIR}/middleware.ts (cookies() is sync)
|
|
50
68
|
```
|
|
51
69
|
|
|
52
|
-
**
|
|
70
|
+
**Next.js 16+ proxy.ts:** `proxy.ts` is the preferred convention. `middleware.ts` still works but shows a deprecation warning. Next.js 16 throws **error E900** if both files exist at the same level.
|
|
53
71
|
|
|
54
72
|
**Next.js 15+ async note:** All route handlers and middleware accessing cookies must be async and properly await cookie operations. This is a breaking change from Next.js 14.
|
|
55
73
|
|
|
@@ -95,14 +113,14 @@ export default async function middleware(request: NextRequest) {
|
|
|
95
113
|
|
|
96
114
|
**Critical:** Always return via `handleAuthkitHeaders()` to ensure `withAuth()` works in pages.
|
|
97
115
|
|
|
98
|
-
## Step
|
|
116
|
+
## Step 6: Create Callback Route
|
|
99
117
|
|
|
100
118
|
Parse `NEXT_PUBLIC_WORKOS_REDIRECT_URI` to determine route path:
|
|
101
119
|
|
|
102
120
|
```
|
|
103
|
-
URI path --> Route location
|
|
104
|
-
/auth/callback --> app/auth/callback/route.ts
|
|
105
|
-
/callback --> app/callback/route.ts
|
|
121
|
+
URI path --> Route location (use APP_DIR from Step 4)
|
|
122
|
+
/auth/callback --> {APP_DIR}/app/auth/callback/route.ts
|
|
123
|
+
/callback --> {APP_DIR}/app/callback/route.ts
|
|
106
124
|
```
|
|
107
125
|
|
|
108
126
|
Use `handleAuth()` from SDK. Do not write custom OAuth logic.
|
|
@@ -118,7 +136,7 @@ export const GET = handleAuth();
|
|
|
118
136
|
|
|
119
137
|
Check README for exact usage. If build fails with "cookies outside request scope", the handler is likely missing async/await.
|
|
120
138
|
|
|
121
|
-
## Step
|
|
139
|
+
## Step 7: Provider Setup (REQUIRED)
|
|
122
140
|
|
|
123
141
|
**CRITICAL:** You MUST wrap the app in `AuthKitProvider` in `app/layout.tsx`.
|
|
124
142
|
|
|
@@ -147,7 +165,7 @@ Check README for exact import path - it may be a subpath export like `@workos-in
|
|
|
147
165
|
|
|
148
166
|
**Do NOT skip this step** even if using server-side auth patterns elsewhere.
|
|
149
167
|
|
|
150
|
-
## Step
|
|
168
|
+
## Step 8: UI Integration
|
|
151
169
|
|
|
152
170
|
Add auth UI to `app/page.tsx` using SDK functions. See README for `getUser`, `getSignInUrl`, `signOut` usage.
|
|
153
171
|
|
|
@@ -191,6 +209,18 @@ This error causes OAuth codes to expire ("invalid_grant"), so fix the handler fi
|
|
|
191
209
|
- Check: File at project root or `src/`, not inside `app/`
|
|
192
210
|
- Check: Filename matches Next.js version (proxy.ts for 16+, middleware.ts for 13-15)
|
|
193
211
|
|
|
212
|
+
### "Both middleware file and proxy file are detected" (Next.js 16+)
|
|
213
|
+
|
|
214
|
+
- Next.js 16 throws error E900 if both `middleware.ts` and `proxy.ts` exist
|
|
215
|
+
- Delete `middleware.ts` and use only `proxy.ts`
|
|
216
|
+
- If `middleware.ts` has custom logic, migrate it into `proxy.ts`
|
|
217
|
+
|
|
218
|
+
### "withAuth route not covered by middleware" but middleware/proxy file exists
|
|
219
|
+
|
|
220
|
+
- **Most common cause:** File is at the wrong level. Next.js only discovers middleware/proxy files in the parent directory of `app/`. For `src/app/` projects, the file must be in `src/`, not at the project root.
|
|
221
|
+
- Check: Is `app/` at `src/app/`? Then middleware/proxy must be at `src/middleware.ts` or `src/proxy.ts`
|
|
222
|
+
- Check: Matcher config must include the route path being accessed
|
|
223
|
+
|
|
194
224
|
### "Cannot use getUser in client component"
|
|
195
225
|
|
|
196
226
|
- Check: Component has no `'use client'` directive, or
|