workos 0.6.0 → 0.7.1

package/README.md

@@ -1,6 +1,6 @@
 # workos
 
-AI-powered CLI that automatically integrates WorkOS AuthKit into web applications.
+WorkOS CLI for installing AuthKit integrations and managing WorkOS resources.
 
 ## Installation
 
@@ -45,29 +45,65 @@ Get your credentials from [dashboard.workos.com](https://dashboard.workos.com):
 ## CLI Options
 
 ```bash
-workos [options] [command]
+workos [command]
 
 Commands:
-  dashboard              Run with visual TUI dashboard (experimental)
+  install                Install WorkOS AuthKit into your project
+  dashboard              Run installer with visual TUI dashboard (experimental)
   login                  Authenticate with WorkOS via Connect OAuth device flow
   logout                 Remove stored credentials
-  install-skill          Install AuthKit skills to coding agents (Claude Code, Codex, etc.)
-    --list, -l           List available skills without installing
-    --skill, -s          Install specific skill(s)
-    --agent, -a          Target agent(s): claude-code, codex, cursor, goose
+  env                    Manage environment configurations
+  organization           Manage organizations
+  user                   Manage users
+  doctor                 Diagnose WorkOS integration issues
+  install-skill          Install AuthKit skills to coding agents
+```
+
+### Environment Management
+
+```bash
+workos env add [name] [apiKey]   # Add environment (interactive if no args)
+workos env remove <name>         # Remove an environment
+workos env switch [name]         # Switch active environment
+workos env list                  # List environments with active indicator
+```
+
+API keys are stored in the system keychain via `@napi-rs/keyring`, with a JSON file fallback at `~/.workos/config.json`.
+
+### Organization Management
+
+```bash
+workos organization create <name> [domain:state ...]
+workos organization update <orgId> <name> [domain] [state]
+workos organization get <orgId>
+workos organization list [--domain] [--limit] [--before] [--after] [--order]
+workos organization delete <orgId>
+```
+
+### User Management
+
+```bash
+workos user get <userId>
+workos user list [--email] [--organization] [--limit] [--before] [--after] [--order]
+workos user update <userId> [--first-name] [--last-name] [--email-verified] [--password] [--external-id]
+workos user delete <userId>
+```
+
+Management commands resolve API keys via: `WORKOS_API_KEY` env var → `--api-key` flag → active environment's stored key.
+
+### Installer Options
+
+```bash
+workos install [options]
 
-Options:
   --direct, -D            Use your own Anthropic API key (bypass llm-gateway)
   --integration <name>    Framework: nextjs, react, react-router, tanstack-start, vanilla-js
-  --redirect-uri <uri>    Custom redirect URI (defaults to framework convention)
-  --homepage-url <url>    Custom homepage URL (defaults to http://localhost:{port})
+  --redirect-uri <uri>    Custom redirect URI
+  --homepage-url <url>    Custom homepage URL
   --install-dir <path>    Installation directory
-  --no-validate           Skip post-installation validation (includes build check)
+  --no-validate           Skip post-installation validation
   --force-install         Force install packages even if peer dependency checks fail
   --debug                 Enable verbose logging
-
-Environment Variables:
-  WORKOS_TELEMETRY=false  Disable telemetry collection
 ```
 
 ## Examples
@@ -95,7 +131,7 @@ workos login
 workos logout
 ```
 
-Credentials are stored in `~/.workos/credentials.json`. Access tokens are not persisted long-term for security - users re-authenticate when tokens expire.
+OAuth credentials are stored in the system keychain (with `~/.workos/credentials.json` fallback). Access tokens are not persisted long-term for security - users re-authenticate when tokens expire.
 
 ## How It Works
 

package/dist/bin.js

@@ -25,7 +25,9 @@ import clack from './utils/clack.js';
 async function applyInsecureStorage(insecureStorage) {
     if (insecureStorage) {
         const { setInsecureStorage } = await import('./lib/credentials.js');
+        const { setInsecureConfigStorage } = await import('./lib/config-store.js');
         setInsecureStorage(true);
+        setInsecureConfigStorage(true);
     }
 }
 /** Shared insecure-storage option for commands that access credentials */
@@ -179,6 +181,11 @@ yargs(hideBin(process.argv))
         default: false,
         description: 'Skip API calls (offline mode)',
     },
+    'skip-ai': {
+        type: 'boolean',
+        default: false,
+        description: 'Skip AI-powered analysis',
+    },
     'install-dir': {
         type: 'string',
         default: process.cwd(),
@@ -198,6 +205,150 @@ yargs(hideBin(process.argv))
     const { handleDoctor } = await import('./commands/doctor.js');
     await handleDoctor(argv);
 })
+    .command('env', 'Manage environment configurations', (yargs) => yargs
+    .options(insecureStorageOption)
+    .command('add [name] [apiKey]', 'Add an environment configuration', (yargs) => yargs
+    .positional('name', { type: 'string', describe: 'Environment name' })
+    .positional('apiKey', { type: 'string', describe: 'WorkOS API key' })
+    .option('client-id', { type: 'string', describe: 'WorkOS client ID' })
+    .option('endpoint', { type: 'string', describe: 'Custom API endpoint' }), async (argv) => {
+    await applyInsecureStorage(argv.insecureStorage);
+    const { runEnvAdd } = await import('./commands/env.js');
+    await runEnvAdd({
+        name: argv.name,
+        apiKey: argv.apiKey,
+        clientId: argv.clientId,
+        endpoint: argv.endpoint,
+    });
+})
+    .command('remove <name>', 'Remove an environment configuration', (yargs) => yargs.positional('name', { type: 'string', demandOption: true, describe: 'Environment name' }), async (argv) => {
+    await applyInsecureStorage(argv.insecureStorage);
+    const { runEnvRemove } = await import('./commands/env.js');
+    await runEnvRemove(argv.name);
+})
+    .command('switch [name]', 'Switch active environment', (yargs) => yargs.positional('name', { type: 'string', describe: 'Environment name' }), async (argv) => {
+    await applyInsecureStorage(argv.insecureStorage);
+    const { runEnvSwitch } = await import('./commands/env.js');
+    await runEnvSwitch(argv.name);
+})
+    .command('list', 'List configured environments', {}, async (argv) => {
+    await applyInsecureStorage(argv.insecureStorage);
+    const { runEnvList } = await import('./commands/env.js');
+    await runEnvList();
+})
+    .demandCommand(1, 'Please specify an env subcommand')
+    .strict())
+    .command('organization', 'Manage organizations', (yargs) => yargs
+    .options({
+    ...insecureStorageOption,
+    'api-key': { type: 'string', describe: 'WorkOS API key (overrides environment config)' },
+})
+    .command('create <name> [domains..]', 'Create a new organization', (yargs) => yargs
+    .positional('name', { type: 'string', demandOption: true, describe: 'Organization name' })
+    .positional('domains', { type: 'string', array: true, describe: 'Domains as domain:state' }), async (argv) => {
+    await applyInsecureStorage(argv.insecureStorage);
+    const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');
+    const { runOrgCreate } = await import('./commands/organization.js');
+    const apiKey = resolveApiKey({ apiKey: argv.apiKey });
+    await runOrgCreate(argv.name, argv.domains || [], apiKey, resolveApiBaseUrl());
+})
+    .command('update <orgId> <name> [domain] [state]', 'Update an organization', (yargs) => yargs
+    .positional('orgId', { type: 'string', demandOption: true, describe: 'Organization ID' })
+    .positional('name', { type: 'string', demandOption: true, describe: 'Organization name' })
+    .positional('domain', { type: 'string', describe: 'Domain' })
+    .positional('state', { type: 'string', describe: 'Domain state (verified or pending)' }), async (argv) => {
+    await applyInsecureStorage(argv.insecureStorage);
+    const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');
+    const { runOrgUpdate } = await import('./commands/organization.js');
+    const apiKey = resolveApiKey({ apiKey: argv.apiKey });
+    await runOrgUpdate(argv.orgId, argv.name, apiKey, argv.domain, argv.state, resolveApiBaseUrl());
+})
+    .command('get <orgId>', 'Get an organization by ID', (yargs) => yargs.positional('orgId', { type: 'string', demandOption: true, describe: 'Organization ID' }), async (argv) => {
+    await applyInsecureStorage(argv.insecureStorage);
+    const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');
+    const { runOrgGet } = await import('./commands/organization.js');
+    const apiKey = resolveApiKey({ apiKey: argv.apiKey });
+    await runOrgGet(argv.orgId, apiKey, resolveApiBaseUrl());
+})
+    .command('list', 'List organizations', (yargs) => yargs.options({
+    domain: { type: 'string', describe: 'Filter by domain' },
+    limit: { type: 'number', describe: 'Limit number of results' },
+    before: { type: 'string', describe: 'Cursor for results before a specific item' },
+    after: { type: 'string', describe: 'Cursor for results after a specific item' },
+    order: { type: 'string', describe: 'Order of results (asc or desc)' },
+}), async (argv) => {
+    await applyInsecureStorage(argv.insecureStorage);
+    const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');
+    const { runOrgList } = await import('./commands/organization.js');
+    const apiKey = resolveApiKey({ apiKey: argv.apiKey });
+    await runOrgList({ domain: argv.domain, limit: argv.limit, before: argv.before, after: argv.after, order: argv.order }, apiKey, resolveApiBaseUrl());
+})
+    .command('delete <orgId>', 'Delete an organization', (yargs) => yargs.positional('orgId', { type: 'string', demandOption: true, describe: 'Organization ID' }), async (argv) => {
+    await applyInsecureStorage(argv.insecureStorage);
+    const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');
+    const { runOrgDelete } = await import('./commands/organization.js');
+    const apiKey = resolveApiKey({ apiKey: argv.apiKey });
+    await runOrgDelete(argv.orgId, apiKey, resolveApiBaseUrl());
+})
+    .demandCommand(1, 'Please specify an organization subcommand')
+    .strict())
+    .command('user', 'Manage users', (yargs) => yargs
+    .options({
+    ...insecureStorageOption,
+    'api-key': { type: 'string', describe: 'WorkOS API key (overrides environment config)' },
+})
+    .command('get <userId>', 'Get a user by ID', (yargs) => yargs.positional('userId', { type: 'string', demandOption: true, describe: 'User ID' }), async (argv) => {
+    await applyInsecureStorage(argv.insecureStorage);
+    const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');
+    const { runUserGet } = await import('./commands/user.js');
+    await runUserGet(argv.userId, resolveApiKey({ apiKey: argv.apiKey }), resolveApiBaseUrl());
+})
+    .command('list', 'List users', (yargs) => yargs.options({
+    email: { type: 'string', describe: 'Filter by email' },
+    organization: { type: 'string', describe: 'Filter by organization ID' },
+    limit: { type: 'number', describe: 'Limit number of results' },
+    before: { type: 'string', describe: 'Cursor for results before a specific item' },
+    after: { type: 'string', describe: 'Cursor for results after a specific item' },
+    order: { type: 'string', describe: 'Order of results (asc or desc)' },
+}), async (argv) => {
+    await applyInsecureStorage(argv.insecureStorage);
+    const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');
+    const { runUserList } = await import('./commands/user.js');
+    await runUserList({
+        email: argv.email,
+        organization: argv.organization,
+        limit: argv.limit,
+        before: argv.before,
+        after: argv.after,
+        order: argv.order,
+    }, resolveApiKey({ apiKey: argv.apiKey }), resolveApiBaseUrl());
+})
+    .command('update <userId>', 'Update a user', (yargs) => yargs.positional('userId', { type: 'string', demandOption: true, describe: 'User ID' }).options({
+    'first-name': { type: 'string', describe: 'First name' },
+    'last-name': { type: 'string', describe: 'Last name' },
+    'email-verified': { type: 'boolean', describe: 'Email verification status' },
+    password: { type: 'string', describe: 'New password' },
+    'external-id': { type: 'string', describe: 'External ID' },
+}), async (argv) => {
+    await applyInsecureStorage(argv.insecureStorage);
+    const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');
+    const { runUserUpdate } = await import('./commands/user.js');
+    await runUserUpdate(argv.userId, resolveApiKey({ apiKey: argv.apiKey }), {
+        firstName: argv.firstName,
+        lastName: argv.lastName,
+        emailVerified: argv.emailVerified,
+        password: argv.password,
+        externalId: argv.externalId,
+    }, resolveApiBaseUrl());
+})
+    .command('delete <userId>', 'Delete a user', (yargs) => yargs.positional('userId', { type: 'string', demandOption: true, describe: 'User ID' }), async (argv) => {
+    await applyInsecureStorage(argv.insecureStorage);
+    const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');
+    const { runUserDelete } = await import('./commands/user.js');
+    await runUserDelete(argv.userId, resolveApiKey({ apiKey: argv.apiKey }), resolveApiBaseUrl());
+})
+    .demandCommand(1, 'Please specify a user subcommand')
+    .strict())
     .command('install', 'Install WorkOS AuthKit into your project', (yargs) => yargs.options(installerOptions), withAuth(async (argv) => {
     const { handleInstall } = await import('./commands/install.js');
     await handleInstall(argv);

package/dist/bin.js.map

@@ -1 +1 @@
-{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AAEA,kEAAkE;AAClE,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;IAClE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1C,wEAAwE;IACxE,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE1D,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,kBAAkB,GAAG,SAAS,EAAE,CAAC,WAAW,CAAC;AAEnD,iFAAiF;AACjF,+BAA+B;AAC/B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAAE,CAAC;IACpD,GAAG,CACD,6CAA6C,kBAAkB,2BAA2B,OAAO,CAAC,OAAO,wCAAwC,CAClJ,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,KAAK,MAAM,kBAAkB,CAAC;AAErC,yCAAyC;AACzC,KAAK,UAAU,oBAAoB,CAAC,eAAyB;IAC3D,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACpE,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,qBAAqB,GAAG;IAC5B,kBAAkB,EAAE;QAClB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,+DAA+D;QACzE,IAAI,EAAE,SAAkB;KACzB;CACO,CAAC;AAEX;;;;GAIG;AACH,SAAS,QAAQ,CAAI,OAAmC;IACtD,OAAO,KAAK,EAAE,IAAO,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,IAAyD,CAAC;QAC5E,MAAM,oBAAoB,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,QAAQ;YAAE,MAAM,mBAAmB,EAAE,CAAC;QACrD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAG;IACvB,MAAM,EAAE;QACN,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,qDAAqD;QAC/D,IAAI,EAAE,SAAkB;KACzB;IACD,KAAK,EAAE;QACL,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,wBAAwB;QAClC,IAAI,EAAE,SAAkB;KACzB;IACD,GAAG,qBAAqB;IACxB,6CAA6C;IAC7C,KAAK,EAAE;QACL,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,SAAkB;QACxB,MAAM,EAAE,IAAI;KACb;IACD,EAAE,EAAE;QACF,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,SAAkB;QACxB,MAAM,EAAE,IAAI;KACb;IACD,WAAW,EAAE;QACX,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,SAAkB;QACxB,MAAM,EAAE,IAAI;KACb;IACD,SAAS,EAAE;QACT,IAAI,EAAE,QAAiB;QACvB,MAAM,EAAE,IAAI;KACb;IACD,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,MAAM,EAAE,IAAI;KACb;IACD,OAAO,EAAE;QACP,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,SAAkB;QACxB,MAAM,EAAE,IAAI;KACb;IACD,oBAAoB;IACpB,cAAc,EAAE;QACd,QAAQ,EAAE,mEAAmE;QAC7E,IAAI,EAAE,QAAiB;KACxB;IACD,cAAc,EAAE;QACd,QAAQ,EAAE,qEAAqE;QAC/E,IAAI,EAAE,QAAiB;KACxB;IACD,aAAa,EAAE;QACb,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,0DAA0D;QACpE,IAAI,EAAE,SAAkB;KACzB;IACD,aAAa,EAAE;QACb,QAAQ,EAAE,wCAAwC;QAClD,IAAI,EAAE,QAAiB;KACxB;IACD,WAAW,EAAE;QACX,QAAQ,EAAE,uBAAuB;QACjC,IAAI,EAAE,QAAiB;KACxB;IACD,eAAe,EAAE;QACf,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,4DAA4D;QACtE,IAAI,EAAE,SAAkB;KACzB;IACD,SAAS,EAAE;QACT,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,gCAAgC;QAC1C,IAAI,EAAE,SAAkB;KACzB;CACF,CAAC;AAEF,yCAAyC;AACzC,MAAM,eAAe,EAAE,CAAC;AAExB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KACzB,GAAG,CAAC,kBAAkB,CAAC;KACvB,OAAO,CAAC,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IAClF,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACzD,MAAM,QAAQ,EAAE,CAAC;IACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;KACD,OAAO,CAAC,QAAQ,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IACpF,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC3D,MAAM,SAAS,EAAE,CAAC;AACpB,CAAC,CAAC;KACD,OAAO,CACN,eAAe,EACf,iDAAiD,EACjD,CAAC,KAAK,EAAE,EAAE;IACR,OAAO,KAAK;SACT,MAAM,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,0CAA0C;KACxD,CAAC;SACD,MAAM,CAAC,OAAO,EAAE;QACf,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,2BAA2B;KACzC,CAAC;SACD,MAAM,CAAC,OAAO,EAAE;QACf,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,6DAA6D;KAC3E,CAAC,CAAC;AACP,CAAC,EACD,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACtB,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;IACxE,MAAM,eAAe,CAAC;QACpB,IAAI,EAAE,IAAI,CAAC,IAA2B;QACtC,KAAK,EAAE,IAAI,CAAC,KAA6B;QACzC,KAAK,EAAE,IAAI,CAAC,KAA6B;KAC1C,CAAC,CAAC;AACL,CAAC,CAAC,CACH;KACA,OAAO,CACN,QAAQ,EACR,oCAAoC,EACpC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,OAAO,CAAC;IACZ,OAAO,EAAE;QACP,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,2CAA2C;KACzD;IACD,UAAU,EAAE;QACV,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,+BAA+B;KAC7C;IACD,aAAa,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;QACtB,WAAW,EAAE,8BAA8B;KAC5C;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,uBAAuB;KACrC;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,0BAA0B;KACxC;CACF,CAAC,EACJ,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC9D,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC,CACF;KACA,OAAO,CACN,SAAS,EACT,0CAA0C,EAC1C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAC1C,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACtB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC,CAAC,CACH;KACA,OAAO,CACN,WAAW,EACX,KAAK,EAAE,mBAAmB;AAC1B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAC1C,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACtB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,aAAa,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC,CAAC,CACH;KACA,OAAO,CACN,CAAC,IAAI,CAAC,EACN,oBAAoB,EACpB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAC/C,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,qBAAqB;IACrB,IAAI,2BAA2B,EAAE,EAAE,CAAC;QAClC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxC,OAAO;IACT,CAAC;IAED,0CAA0C;IAC1C,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;QACxC,OAAO,EAAE,4BAA4B;KACtC,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,+CAA+C;IAC/C,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,mBAAmB,EAAE,CAAC;IAE5B,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,aAAa,CAAC,EAAE,SAAS,EAAE,KAAK,EAAS,CAAC,CAAC;IACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CACF;KACA,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC;KAClB,OAAO,CAAC,UAAU,EAAE,CAAC;KACrB,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC;KACrB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC","sourcesContent":["#!/usr/bin/env node\n\n// Load .env.local for local development when --local flag is used\nif (process.argv.includes('--local') || process.env.INSTALLER_DEV) {\n  const { config } = await import('dotenv');\n  // bin.ts compiles to dist/bin.js, so go up one level to find .env.local\n  config({ path: new URL('../.env.local', import.meta.url).pathname });\n}\n\nimport { satisfies } from 'semver';\nimport { red } from './utils/logging.js';\nimport { getConfig, getVersion } from './lib/settings.js';\n\nimport yargs from 'yargs';\nimport { hideBin } from 'yargs/helpers';\nimport chalk from 'chalk';\nimport { ensureAuthenticated } from './lib/ensure-auth.js';\nimport { checkForUpdates } from './lib/version-check.js';\n\nconst NODE_VERSION_RANGE = getConfig().nodeVersion;\n\n// Have to run this above the other imports because they are importing clack that\n// has the problematic imports.\nif (!satisfies(process.version, NODE_VERSION_RANGE)) {\n  red(\n    `WorkOS AuthKit installer requires Node.js ${NODE_VERSION_RANGE}. You are using Node.js ${process.version}. Please upgrade your Node.js version.`,\n  );\n  process.exit(1);\n}\n\nimport { isNonInteractiveEnvironment } from './utils/environment.js';\nimport clack from './utils/clack.js';\n\n/** Apply insecure storage flag if set */\nasync function applyInsecureStorage(insecureStorage?: boolean): Promise<void> {\n  if (insecureStorage) {\n    const { setInsecureStorage } = await import('./lib/credentials.js');\n    setInsecureStorage(true);\n  }\n}\n\n/** Shared insecure-storage option for commands that access credentials */\nconst insecureStorageOption = {\n  'insecure-storage': {\n    default: false,\n    describe: 'Store credentials in plaintext file instead of system keyring',\n    type: 'boolean' as const,\n  },\n} as const;\n\n/**\n * Wrap a command handler with authentication check.\n * Ensures valid auth before executing the handler.\n * Respects --skip-auth flag for CI/testing.\n */\nfunction withAuth<T>(handler: (argv: T) => Promise<void>): (argv: T) => Promise<void> {\n  return async (argv: T) => {\n    const typedArgv = argv as { skipAuth?: boolean; insecureStorage?: boolean };\n    await applyInsecureStorage(typedArgv.insecureStorage);\n    if (!typedArgv.skipAuth) await ensureAuthenticated();\n    await handler(argv);\n  };\n}\n\nconst installerOptions = {\n  direct: {\n    alias: 'D',\n    default: false,\n    describe: 'Use your own Anthropic API key (bypass llm-gateway)',\n    type: 'boolean' as const,\n  },\n  debug: {\n    default: false,\n    describe: 'Enable verbose logging',\n    type: 'boolean' as const,\n  },\n  ...insecureStorageOption,\n  // Hidden dev/automation flags (use env vars)\n  local: {\n    default: false,\n    type: 'boolean' as const,\n    hidden: true,\n  },\n  ci: {\n    default: false,\n    type: 'boolean' as const,\n    hidden: true,\n  },\n  'skip-auth': {\n    default: false,\n    type: 'boolean' as const,\n    hidden: true,\n  },\n  'api-key': {\n    type: 'string' as const,\n    hidden: true,\n  },\n  'client-id': {\n    type: 'string' as const,\n    hidden: true,\n  },\n  inspect: {\n    default: false,\n    type: 'boolean' as const,\n    hidden: true,\n  },\n  // User-facing flags\n  'homepage-url': {\n    describe: 'App homepage URL for WorkOS (defaults to http://localhost:{port})',\n    type: 'string' as const,\n  },\n  'redirect-uri': {\n    describe: 'Redirect URI for WorkOS callback (defaults to framework convention)',\n    type: 'string' as const,\n  },\n  'no-validate': {\n    default: false,\n    describe: 'Skip post-installation validation (includes build check)',\n    type: 'boolean' as const,\n  },\n  'install-dir': {\n    describe: 'Directory to install WorkOS AuthKit in',\n    type: 'string' as const,\n  },\n  integration: {\n    describe: 'Integration to set up',\n    type: 'string' as const,\n  },\n  'force-install': {\n    default: false,\n    describe: 'Force install packages even if peer dependency checks fail',\n    type: 'boolean' as const,\n  },\n  dashboard: {\n    alias: 'd',\n    default: false,\n    describe: 'Run with visual dashboard mode',\n    type: 'boolean' as const,\n  },\n};\n\n// Check for updates (blocks up to 500ms)\nawait checkForUpdates();\n\nyargs(hideBin(process.argv))\n  .env('WORKOS_INSTALLER')\n  .command('login', 'Authenticate with WorkOS', insecureStorageOption, async (argv) => {\n    await applyInsecureStorage(argv.insecureStorage);\n    const { runLogin } = await import('./commands/login.js');\n    await runLogin();\n    process.exit(0);\n  })\n  .command('logout', 'Remove stored credentials', insecureStorageOption, async (argv) => {\n    await applyInsecureStorage(argv.insecureStorage);\n    const { runLogout } = await import('./commands/logout.js');\n    await runLogout();\n  })\n  .command(\n    'install-skill',\n    'Install bundled AuthKit skills to coding agents',\n    (yargs) => {\n      return yargs\n        .option('list', {\n          alias: 'l',\n          type: 'boolean',\n          description: 'List available skills without installing',\n        })\n        .option('skill', {\n          alias: 's',\n          type: 'array',\n          string: true,\n          description: 'Install specific skill(s)',\n        })\n        .option('agent', {\n          alias: 'a',\n          type: 'array',\n          string: true,\n          description: 'Target specific agent(s): claude-code, codex, cursor, goose',\n        });\n    },\n    withAuth(async (argv) => {\n      const { runInstallSkill } = await import('./commands/install-skill.js');\n      await runInstallSkill({\n        list: argv.list as boolean | undefined,\n        skill: argv.skill as string[] | undefined,\n        agent: argv.agent as string[] | undefined,\n      });\n    }),\n  )\n  .command(\n    'doctor',\n    'Diagnose WorkOS integration issues',\n    (yargs) =>\n      yargs.options({\n        verbose: {\n          type: 'boolean',\n          default: false,\n          description: 'Include additional diagnostic information',\n        },\n        'skip-api': {\n          type: 'boolean',\n          default: false,\n          description: 'Skip API calls (offline mode)',\n        },\n        'install-dir': {\n          type: 'string',\n          default: process.cwd(),\n          description: 'Project directory to analyze',\n        },\n        json: {\n          type: 'boolean',\n          default: false,\n          description: 'Output report as JSON',\n        },\n        copy: {\n          type: 'boolean',\n          default: false,\n          description: 'Copy report to clipboard',\n        },\n      }),\n    async (argv) => {\n      const { handleDoctor } = await import('./commands/doctor.js');\n      await handleDoctor(argv);\n    },\n  )\n  .command(\n    'install',\n    'Install WorkOS AuthKit into your project',\n    (yargs) => yargs.options(installerOptions),\n    withAuth(async (argv) => {\n      const { handleInstall } = await import('./commands/install.js');\n      await handleInstall(argv);\n    }),\n  )\n  .command(\n    'dashboard',\n    false, // hidden from help\n    (yargs) => yargs.options(installerOptions),\n    withAuth(async (argv) => {\n      const { handleInstall } = await import('./commands/install.js');\n      await handleInstall({ ...argv, dashboard: true });\n    }),\n  )\n  .command(\n    ['$0'],\n    'WorkOS AuthKit CLI',\n    (yargs) => yargs.options(insecureStorageOption),\n    async (argv) => {\n      // Non-TTY: show help\n      if (isNonInteractiveEnvironment()) {\n        yargs(hideBin(process.argv)).showHelp();\n        return;\n      }\n\n      // TTY: ask if user wants to run installer\n      const shouldInstall = await clack.confirm({\n        message: 'Run the AuthKit installer?',\n      });\n\n      if (clack.isCancel(shouldInstall) || !shouldInstall) {\n        process.exit(0);\n      }\n\n      // Auth check happens HERE, after user confirms\n      await applyInsecureStorage(argv.insecureStorage);\n      await ensureAuthenticated();\n\n      const { handleInstall } = await import('./commands/install.js');\n      await handleInstall({ dashboard: false } as any);\n      process.exit(0);\n    },\n  )\n  .strict()\n  .help()\n  .alias('help', 'h')\n  .version(getVersion())\n  .alias('version', 'v')\n  .wrap(process.stdout.isTTY && process.stdout.columns ? process.stdout.columns : 80).argv;\n"]}
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AAEA,kEAAkE;AAClE,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;IAClE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1C,wEAAwE;IACxE,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE1D,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,MAAM,kBAAkB,GAAG,SAAS,EAAE,CAAC,WAAW,CAAC;AAEnD,iFAAiF;AACjF,+BAA+B;AAC/B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,kBAAkB,CAAC,EAAE,CAAC;IACpD,GAAG,CACD,6CAA6C,kBAAkB,2BAA2B,OAAO,CAAC,OAAO,wCAAwC,CAClJ,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,KAAK,MAAM,kBAAkB,CAAC;AAErC,yCAAyC;AACzC,KAAK,UAAU,oBAAoB,CAAC,eAAyB;IAC3D,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QACpE,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAC3E,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACzB,wBAAwB,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,qBAAqB,GAAG;IAC5B,kBAAkB,EAAE;QAClB,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,+DAA+D;QACzE,IAAI,EAAE,SAAkB;KACzB;CACO,CAAC;AAEX;;;;GAIG;AACH,SAAS,QAAQ,CAAI,OAAmC;IACtD,OAAO,KAAK,EAAE,IAAO,EAAE,EAAE;QACvB,MAAM,SAAS,GAAG,IAAyD,CAAC;QAC5E,MAAM,oBAAoB,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,CAAC,QAAQ;YAAE,MAAM,mBAAmB,EAAE,CAAC;QACrD,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAG;IACvB,MAAM,EAAE;QACN,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,qDAAqD;QAC/D,IAAI,EAAE,SAAkB;KACzB;IACD,KAAK,EAAE;QACL,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,wBAAwB;QAClC,IAAI,EAAE,SAAkB;KACzB;IACD,GAAG,qBAAqB;IACxB,6CAA6C;IAC7C,KAAK,EAAE;QACL,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,SAAkB;QACxB,MAAM,EAAE,IAAI;KACb;IACD,EAAE,EAAE;QACF,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,SAAkB;QACxB,MAAM,EAAE,IAAI;KACb;IACD,WAAW,EAAE;QACX,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,SAAkB;QACxB,MAAM,EAAE,IAAI;KACb;IACD,SAAS,EAAE;QACT,IAAI,EAAE,QAAiB;QACvB,MAAM,EAAE,IAAI;KACb;IACD,WAAW,EAAE;QACX,IAAI,EAAE,QAAiB;QACvB,MAAM,EAAE,IAAI;KACb;IACD,OAAO,EAAE;QACP,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,SAAkB;QACxB,MAAM,EAAE,IAAI;KACb;IACD,oBAAoB;IACpB,cAAc,EAAE;QACd,QAAQ,EAAE,mEAAmE;QAC7E,IAAI,EAAE,QAAiB;KACxB;IACD,cAAc,EAAE;QACd,QAAQ,EAAE,qEAAqE;QAC/E,IAAI,EAAE,QAAiB;KACxB;IACD,aAAa,EAAE;QACb,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,0DAA0D;QACpE,IAAI,EAAE,SAAkB;KACzB;IACD,aAAa,EAAE;QACb,QAAQ,EAAE,wCAAwC;QAClD,IAAI,EAAE,QAAiB;KACxB;IACD,WAAW,EAAE;QACX,QAAQ,EAAE,uBAAuB;QACjC,IAAI,EAAE,QAAiB;KACxB;IACD,eAAe,EAAE;QACf,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,4DAA4D;QACtE,IAAI,EAAE,SAAkB;KACzB;IACD,SAAS,EAAE;QACT,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,gCAAgC;QAC1C,IAAI,EAAE,SAAkB;KACzB;CACF,CAAC;AAEF,yCAAyC;AACzC,MAAM,eAAe,EAAE,CAAC;AAExB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KACzB,GAAG,CAAC,kBAAkB,CAAC;KACvB,OAAO,CAAC,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IAClF,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACzD,MAAM,QAAQ,EAAE,CAAC;IACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;KACD,OAAO,CAAC,QAAQ,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IACpF,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC3D,MAAM,SAAS,EAAE,CAAC;AACpB,CAAC,CAAC;KACD,OAAO,CACN,eAAe,EACf,iDAAiD,EACjD,CAAC,KAAK,EAAE,EAAE;IACR,OAAO,KAAK;SACT,MAAM,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,0CAA0C;KACxD,CAAC;SACD,MAAM,CAAC,OAAO,EAAE;QACf,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,2BAA2B;KACzC,CAAC;SACD,MAAM,CAAC,OAAO,EAAE;QACf,KAAK,EAAE,GAAG;QACV,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,6DAA6D;KAC3E,CAAC,CAAC;AACP,CAAC,EACD,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACtB,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,6BAA6B,CAAC,CAAC;IACxE,MAAM,eAAe,CAAC;QACpB,IAAI,EAAE,IAAI,CAAC,IAA2B;QACtC,KAAK,EAAE,IAAI,CAAC,KAA6B;QACzC,KAAK,EAAE,IAAI,CAAC,KAA6B;KAC1C,CAAC,CAAC;AACL,CAAC,CAAC,CACH;KACA,OAAO,CACN,QAAQ,EACR,oCAAoC,EACpC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,OAAO,CAAC;IACZ,OAAO,EAAE;QACP,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,2CAA2C;KACzD;IACD,UAAU,EAAE;QACV,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,+BAA+B;KAC7C;IACD,SAAS,EAAE;QACT,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,0BAA0B;KACxC;IACD,aAAa,EAAE;QACb,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE;QACtB,WAAW,EAAE,8BAA8B;KAC5C;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,uBAAuB;KACrC;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,0BAA0B;KACxC;CACF,CAAC,EACJ,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC9D,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC,CACF;KACA,OAAO,CAAC,KAAK,EAAE,mCAAmC,EAAE,CAAC,KAAK,EAAE,EAAE,CAC7D,KAAK;KACF,OAAO,CAAC,qBAAqB,CAAC;KAC9B,OAAO,CACN,qBAAqB,EACrB,kCAAkC,EAClC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK;KACF,UAAU,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;KACpE,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC;KACpE,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC;KACrE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,qBAAqB,EAAE,CAAC,EAC5E,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACxD,MAAM,SAAS,CAAC;QACd,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC,CAAC;AACL,CAAC,CACF;KACA,OAAO,CACN,eAAe,EACf,qCAAqC,EACrC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,EACzG,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC3D,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC,CACF;KACA,OAAO,CACN,eAAe,EACf,2BAA2B,EAC3B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,kBAAkB,EAAE,CAAC,EACrF,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC3D,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC,CACF;KACA,OAAO,CAAC,MAAM,EAAE,8BAA8B,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IAClE,MAAM,oBAAoB,CAAE,IAAY,CAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACzD,MAAM,UAAU,EAAE,CAAC;AACrB,CAAC,CAAC;KACD,aAAa,CAAC,CAAC,EAAE,kCAAkC,CAAC;KACpD,MAAM,EAAE,CACZ;KACA,OAAO,CAAC,cAAc,EAAE,sBAAsB,EAAE,CAAC,KAAK,EAAE,EAAE,CACzD,KAAK;KACF,OAAO,CAAC;IACP,GAAG,qBAAqB;IACxB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,QAAQ,EAAE,+CAA+C,EAAE;CAClG,CAAC;KACD,OAAO,CACN,2BAA2B,EAC3B,2BAA2B,EAC3B,CAAC,KAAK,EAAE,EAAE,CACR,KAAK;KACF,UAAU,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;KACzF,UAAU,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,yBAAyB,EAAE,CAAC,EAChG,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC9E,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAG,IAAI,CAAC,OAAoB,IAAI,EAAE,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAC/F,CAAC,CACF;KACA,OAAO,CACN,wCAAwC,EACxC,wBAAwB,EACxB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK;KACF,UAAU,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;KACxF,UAAU,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;KACzF,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;KAC5D,UAAU,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,oCAAoC,EAAE,CAAC,EAC5F,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC9E,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAClG,CAAC,CACF;KACA,OAAO,CACN,aAAa,EACb,2BAA2B,EAC3B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,EACzG,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC9E,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAC3D,CAAC,CACF;KACA,OAAO,CACN,MAAM,EACN,oBAAoB,EACpB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,OAAO,CAAC;IACZ,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,kBAAkB,EAAE;IACxD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,yBAAyB,EAAE;IAC9D,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,2CAA2C,EAAE;IACjF,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,0CAA0C,EAAE;IAC/E,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,gCAAgC,EAAE;CACtE,CAAC,EACJ,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC9E,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,MAAM,UAAU,CACd,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EACrG,MAAM,EACN,iBAAiB,EAAE,CACpB,CAAC;AACJ,CAAC,CACF;KACA,OAAO,CACN,gBAAgB,EAChB,wBAAwB,EACxB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,EACzG,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC9E,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAC9D,CAAC,CACF;KACA,aAAa,CAAC,CAAC,EAAE,2CAA2C,CAAC;KAC7D,MAAM,EAAE,CACZ;KACA,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CACzC,KAAK;KACF,OAAO,CAAC;IACP,GAAG,qBAAqB;IACxB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,QAAQ,EAAE,+CAA+C,EAAE;CAClG,CAAC;KACD,OAAO,CACN,cAAc,EACd,kBAAkB,EAClB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAClG,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC9E,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC1D,MAAM,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAC7F,CAAC,CACF;KACA,OAAO,CACN,MAAM,EACN,YAAY,EACZ,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,OAAO,CAAC;IACZ,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE;IACtD,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,2BAA2B,EAAE;IACvE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,yBAAyB,EAAE;IAC9D,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,2CAA2C,EAAE;IACjF,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,0CAA0C,EAAE;IAC/E,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,gCAAgC,EAAE;CACtE,CAAC,EACJ,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC9E,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC3D,MAAM,WAAW,CACf;QACE,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,EACD,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EACtC,iBAAiB,EAAE,CACpB,CAAC;AACJ,CAAC,CACF;KACA,OAAO,CACN,iBAAiB,EACjB,eAAe,EACf,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC;IAC9F,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE;IACxD,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE;IACtD,gBAAgB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,2BAA2B,EAAE;IAC5E,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE;IACtD,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE;CAC3D,CAAC,EACJ,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC9E,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC7D,MAAM,aAAa,CACjB,IAAI,CAAC,MAAM,EACX,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EACtC;QACE,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,EACD,iBAAiB,EAAE,CACpB,CAAC;AACJ,CAAC,CACF;KACA,OAAO,CACN,iBAAiB,EACjB,eAAe,EACf,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAClG,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,EAAE,aAAa,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC9E,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAC7D,MAAM,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAChG,CAAC,CACF;KACA,aAAa,CAAC,CAAC,EAAE,kCAAkC,CAAC;KACpD,MAAM,EAAE,CACZ;KACA,OAAO,CACN,SAAS,EACT,0CAA0C,EAC1C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAC1C,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACtB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC,CAAC,CACH;KACA,OAAO,CACN,WAAW,EACX,KAAK,EAAE,mBAAmB;AAC1B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAC1C,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;IACtB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,aAAa,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC,CAAC,CACH;KACA,OAAO,CACN,CAAC,IAAI,CAAC,EACN,oBAAoB,EACpB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAC/C,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,qBAAqB;IACrB,IAAI,2BAA2B,EAAE,EAAE,CAAC;QAClC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxC,OAAO;IACT,CAAC;IAED,0CAA0C;IAC1C,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;QACxC,OAAO,EAAE,4BAA4B;KACtC,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,+CAA+C;IAC/C,MAAM,oBAAoB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACjD,MAAM,mBAAmB,EAAE,CAAC;IAE5B,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IAChE,MAAM,aAAa,CAAC,EAAE,SAAS,EAAE,KAAK,EAAS,CAAC,CAAC;IACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CACF;KACA,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC;KAClB,OAAO,CAAC,UAAU,EAAE,CAAC;KACrB,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC;KACrB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC","sourcesContent":["#!/usr/bin/env node\n\n// Load .env.local for local development when --local flag is used\nif (process.argv.includes('--local') || process.env.INSTALLER_DEV) {\n  const { config } = await import('dotenv');\n  // bin.ts compiles to dist/bin.js, so go up one level to find .env.local\n  config({ path: new URL('../.env.local', import.meta.url).pathname });\n}\n\nimport { satisfies } from 'semver';\nimport { red } from './utils/logging.js';\nimport { getConfig, getVersion } from './lib/settings.js';\n\nimport yargs from 'yargs';\nimport { hideBin } from 'yargs/helpers';\nimport chalk from 'chalk';\nimport { ensureAuthenticated } from './lib/ensure-auth.js';\nimport { checkForUpdates } from './lib/version-check.js';\n\nconst NODE_VERSION_RANGE = getConfig().nodeVersion;\n\n// Have to run this above the other imports because they are importing clack that\n// has the problematic imports.\nif (!satisfies(process.version, NODE_VERSION_RANGE)) {\n  red(\n    `WorkOS AuthKit installer requires Node.js ${NODE_VERSION_RANGE}. You are using Node.js ${process.version}. Please upgrade your Node.js version.`,\n  );\n  process.exit(1);\n}\n\nimport { isNonInteractiveEnvironment } from './utils/environment.js';\nimport clack from './utils/clack.js';\n\n/** Apply insecure storage flag if set */\nasync function applyInsecureStorage(insecureStorage?: boolean): Promise<void> {\n  if (insecureStorage) {\n    const { setInsecureStorage } = await import('./lib/credentials.js');\n    const { setInsecureConfigStorage } = await import('./lib/config-store.js');\n    setInsecureStorage(true);\n    setInsecureConfigStorage(true);\n  }\n}\n\n/** Shared insecure-storage option for commands that access credentials */\nconst insecureStorageOption = {\n  'insecure-storage': {\n    default: false,\n    describe: 'Store credentials in plaintext file instead of system keyring',\n    type: 'boolean' as const,\n  },\n} as const;\n\n/**\n * Wrap a command handler with authentication check.\n * Ensures valid auth before executing the handler.\n * Respects --skip-auth flag for CI/testing.\n */\nfunction withAuth<T>(handler: (argv: T) => Promise<void>): (argv: T) => Promise<void> {\n  return async (argv: T) => {\n    const typedArgv = argv as { skipAuth?: boolean; insecureStorage?: boolean };\n    await applyInsecureStorage(typedArgv.insecureStorage);\n    if (!typedArgv.skipAuth) await ensureAuthenticated();\n    await handler(argv);\n  };\n}\n\nconst installerOptions = {\n  direct: {\n    alias: 'D',\n    default: false,\n    describe: 'Use your own Anthropic API key (bypass llm-gateway)',\n    type: 'boolean' as const,\n  },\n  debug: {\n    default: false,\n    describe: 'Enable verbose logging',\n    type: 'boolean' as const,\n  },\n  ...insecureStorageOption,\n  // Hidden dev/automation flags (use env vars)\n  local: {\n    default: false,\n    type: 'boolean' as const,\n    hidden: true,\n  },\n  ci: {\n    default: false,\n    type: 'boolean' as const,\n    hidden: true,\n  },\n  'skip-auth': {\n    default: false,\n    type: 'boolean' as const,\n    hidden: true,\n  },\n  'api-key': {\n    type: 'string' as const,\n    hidden: true,\n  },\n  'client-id': {\n    type: 'string' as const,\n    hidden: true,\n  },\n  inspect: {\n    default: false,\n    type: 'boolean' as const,\n    hidden: true,\n  },\n  // User-facing flags\n  'homepage-url': {\n    describe: 'App homepage URL for WorkOS (defaults to http://localhost:{port})',\n    type: 'string' as const,\n  },\n  'redirect-uri': {\n    describe: 'Redirect URI for WorkOS callback (defaults to framework convention)',\n    type: 'string' as const,\n  },\n  'no-validate': {\n    default: false,\n    describe: 'Skip post-installation validation (includes build check)',\n    type: 'boolean' as const,\n  },\n  'install-dir': {\n    describe: 'Directory to install WorkOS AuthKit in',\n    type: 'string' as const,\n  },\n  integration: {\n    describe: 'Integration to set up',\n    type: 'string' as const,\n  },\n  'force-install': {\n    default: false,\n    describe: 'Force install packages even if peer dependency checks fail',\n    type: 'boolean' as const,\n  },\n  dashboard: {\n    alias: 'd',\n    default: false,\n    describe: 'Run with visual dashboard mode',\n    type: 'boolean' as const,\n  },\n};\n\n// Check for updates (blocks up to 500ms)\nawait checkForUpdates();\n\nyargs(hideBin(process.argv))\n  .env('WORKOS_INSTALLER')\n  .command('login', 'Authenticate with WorkOS', insecureStorageOption, async (argv) => {\n    await applyInsecureStorage(argv.insecureStorage);\n    const { runLogin } = await import('./commands/login.js');\n    await runLogin();\n    process.exit(0);\n  })\n  .command('logout', 'Remove stored credentials', insecureStorageOption, async (argv) => {\n    await applyInsecureStorage(argv.insecureStorage);\n    const { runLogout } = await import('./commands/logout.js');\n    await runLogout();\n  })\n  .command(\n    'install-skill',\n    'Install bundled AuthKit skills to coding agents',\n    (yargs) => {\n      return yargs\n        .option('list', {\n          alias: 'l',\n          type: 'boolean',\n          description: 'List available skills without installing',\n        })\n        .option('skill', {\n          alias: 's',\n          type: 'array',\n          string: true,\n          description: 'Install specific skill(s)',\n        })\n        .option('agent', {\n          alias: 'a',\n          type: 'array',\n          string: true,\n          description: 'Target specific agent(s): claude-code, codex, cursor, goose',\n        });\n    },\n    withAuth(async (argv) => {\n      const { runInstallSkill } = await import('./commands/install-skill.js');\n      await runInstallSkill({\n        list: argv.list as boolean | undefined,\n        skill: argv.skill as string[] | undefined,\n        agent: argv.agent as string[] | undefined,\n      });\n    }),\n  )\n  .command(\n    'doctor',\n    'Diagnose WorkOS integration issues',\n    (yargs) =>\n      yargs.options({\n        verbose: {\n          type: 'boolean',\n          default: false,\n          description: 'Include additional diagnostic information',\n        },\n        'skip-api': {\n          type: 'boolean',\n          default: false,\n          description: 'Skip API calls (offline mode)',\n        },\n        'skip-ai': {\n          type: 'boolean',\n          default: false,\n          description: 'Skip AI-powered analysis',\n        },\n        'install-dir': {\n          type: 'string',\n          default: process.cwd(),\n          description: 'Project directory to analyze',\n        },\n        json: {\n          type: 'boolean',\n          default: false,\n          description: 'Output report as JSON',\n        },\n        copy: {\n          type: 'boolean',\n          default: false,\n          description: 'Copy report to clipboard',\n        },\n      }),\n    async (argv) => {\n      const { handleDoctor } = await import('./commands/doctor.js');\n      await handleDoctor(argv);\n    },\n  )\n  .command('env', 'Manage environment configurations', (yargs) =>\n    yargs\n      .options(insecureStorageOption)\n      .command(\n        'add [name] [apiKey]',\n        'Add an environment configuration',\n        (yargs) =>\n          yargs\n            .positional('name', { type: 'string', describe: 'Environment name' })\n            .positional('apiKey', { type: 'string', describe: 'WorkOS API key' })\n            .option('client-id', { type: 'string', describe: 'WorkOS client ID' })\n            .option('endpoint', { type: 'string', describe: 'Custom API endpoint' }),\n        async (argv) => {\n          await applyInsecureStorage(argv.insecureStorage);\n          const { runEnvAdd } = await import('./commands/env.js');\n          await runEnvAdd({\n            name: argv.name,\n            apiKey: argv.apiKey,\n            clientId: argv.clientId,\n            endpoint: argv.endpoint,\n          });\n        },\n      )\n      .command(\n        'remove <name>',\n        'Remove an environment configuration',\n        (yargs) => yargs.positional('name', { type: 'string', demandOption: true, describe: 'Environment name' }),\n        async (argv) => {\n          await applyInsecureStorage(argv.insecureStorage);\n          const { runEnvRemove } = await import('./commands/env.js');\n          await runEnvRemove(argv.name);\n        },\n      )\n      .command(\n        'switch [name]',\n        'Switch active environment',\n        (yargs) => yargs.positional('name', { type: 'string', describe: 'Environment name' }),\n        async (argv) => {\n          await applyInsecureStorage(argv.insecureStorage);\n          const { runEnvSwitch } = await import('./commands/env.js');\n          await runEnvSwitch(argv.name);\n        },\n      )\n      .command('list', 'List configured environments', {}, async (argv) => {\n        await applyInsecureStorage((argv as any).insecureStorage);\n        const { runEnvList } = await import('./commands/env.js');\n        await runEnvList();\n      })\n      .demandCommand(1, 'Please specify an env subcommand')\n      .strict(),\n  )\n  .command('organization', 'Manage organizations', (yargs) =>\n    yargs\n      .options({\n        ...insecureStorageOption,\n        'api-key': { type: 'string' as const, describe: 'WorkOS API key (overrides environment config)' },\n      })\n      .command(\n        'create <name> [domains..]',\n        'Create a new organization',\n        (yargs) =>\n          yargs\n            .positional('name', { type: 'string', demandOption: true, describe: 'Organization name' })\n            .positional('domains', { type: 'string', array: true, describe: 'Domains as domain:state' }),\n        async (argv) => {\n          await applyInsecureStorage(argv.insecureStorage);\n          const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');\n          const { runOrgCreate } = await import('./commands/organization.js');\n          const apiKey = resolveApiKey({ apiKey: argv.apiKey });\n          await runOrgCreate(argv.name, (argv.domains as string[]) || [], apiKey, resolveApiBaseUrl());\n        },\n      )\n      .command(\n        'update <orgId> <name> [domain] [state]',\n        'Update an organization',\n        (yargs) =>\n          yargs\n            .positional('orgId', { type: 'string', demandOption: true, describe: 'Organization ID' })\n            .positional('name', { type: 'string', demandOption: true, describe: 'Organization name' })\n            .positional('domain', { type: 'string', describe: 'Domain' })\n            .positional('state', { type: 'string', describe: 'Domain state (verified or pending)' }),\n        async (argv) => {\n          await applyInsecureStorage(argv.insecureStorage);\n          const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');\n          const { runOrgUpdate } = await import('./commands/organization.js');\n          const apiKey = resolveApiKey({ apiKey: argv.apiKey });\n          await runOrgUpdate(argv.orgId, argv.name, apiKey, argv.domain, argv.state, resolveApiBaseUrl());\n        },\n      )\n      .command(\n        'get <orgId>',\n        'Get an organization by ID',\n        (yargs) => yargs.positional('orgId', { type: 'string', demandOption: true, describe: 'Organization ID' }),\n        async (argv) => {\n          await applyInsecureStorage(argv.insecureStorage);\n          const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');\n          const { runOrgGet } = await import('./commands/organization.js');\n          const apiKey = resolveApiKey({ apiKey: argv.apiKey });\n          await runOrgGet(argv.orgId, apiKey, resolveApiBaseUrl());\n        },\n      )\n      .command(\n        'list',\n        'List organizations',\n        (yargs) =>\n          yargs.options({\n            domain: { type: 'string', describe: 'Filter by domain' },\n            limit: { type: 'number', describe: 'Limit number of results' },\n            before: { type: 'string', describe: 'Cursor for results before a specific item' },\n            after: { type: 'string', describe: 'Cursor for results after a specific item' },\n            order: { type: 'string', describe: 'Order of results (asc or desc)' },\n          }),\n        async (argv) => {\n          await applyInsecureStorage(argv.insecureStorage);\n          const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');\n          const { runOrgList } = await import('./commands/organization.js');\n          const apiKey = resolveApiKey({ apiKey: argv.apiKey });\n          await runOrgList(\n            { domain: argv.domain, limit: argv.limit, before: argv.before, after: argv.after, order: argv.order },\n            apiKey,\n            resolveApiBaseUrl(),\n          );\n        },\n      )\n      .command(\n        'delete <orgId>',\n        'Delete an organization',\n        (yargs) => yargs.positional('orgId', { type: 'string', demandOption: true, describe: 'Organization ID' }),\n        async (argv) => {\n          await applyInsecureStorage(argv.insecureStorage);\n          const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');\n          const { runOrgDelete } = await import('./commands/organization.js');\n          const apiKey = resolveApiKey({ apiKey: argv.apiKey });\n          await runOrgDelete(argv.orgId, apiKey, resolveApiBaseUrl());\n        },\n      )\n      .demandCommand(1, 'Please specify an organization subcommand')\n      .strict(),\n  )\n  .command('user', 'Manage users', (yargs) =>\n    yargs\n      .options({\n        ...insecureStorageOption,\n        'api-key': { type: 'string' as const, describe: 'WorkOS API key (overrides environment config)' },\n      })\n      .command(\n        'get <userId>',\n        'Get a user by ID',\n        (yargs) => yargs.positional('userId', { type: 'string', demandOption: true, describe: 'User ID' }),\n        async (argv) => {\n          await applyInsecureStorage(argv.insecureStorage);\n          const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');\n          const { runUserGet } = await import('./commands/user.js');\n          await runUserGet(argv.userId, resolveApiKey({ apiKey: argv.apiKey }), resolveApiBaseUrl());\n        },\n      )\n      .command(\n        'list',\n        'List users',\n        (yargs) =>\n          yargs.options({\n            email: { type: 'string', describe: 'Filter by email' },\n            organization: { type: 'string', describe: 'Filter by organization ID' },\n            limit: { type: 'number', describe: 'Limit number of results' },\n            before: { type: 'string', describe: 'Cursor for results before a specific item' },\n            after: { type: 'string', describe: 'Cursor for results after a specific item' },\n            order: { type: 'string', describe: 'Order of results (asc or desc)' },\n          }),\n        async (argv) => {\n          await applyInsecureStorage(argv.insecureStorage);\n          const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');\n          const { runUserList } = await import('./commands/user.js');\n          await runUserList(\n            {\n              email: argv.email,\n              organization: argv.organization,\n              limit: argv.limit,\n              before: argv.before,\n              after: argv.after,\n              order: argv.order,\n            },\n            resolveApiKey({ apiKey: argv.apiKey }),\n            resolveApiBaseUrl(),\n          );\n        },\n      )\n      .command(\n        'update <userId>',\n        'Update a user',\n        (yargs) =>\n          yargs.positional('userId', { type: 'string', demandOption: true, describe: 'User ID' }).options({\n            'first-name': { type: 'string', describe: 'First name' },\n            'last-name': { type: 'string', describe: 'Last name' },\n            'email-verified': { type: 'boolean', describe: 'Email verification status' },\n            password: { type: 'string', describe: 'New password' },\n            'external-id': { type: 'string', describe: 'External ID' },\n          }),\n        async (argv) => {\n          await applyInsecureStorage(argv.insecureStorage);\n          const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');\n          const { runUserUpdate } = await import('./commands/user.js');\n          await runUserUpdate(\n            argv.userId,\n            resolveApiKey({ apiKey: argv.apiKey }),\n            {\n              firstName: argv.firstName,\n              lastName: argv.lastName,\n              emailVerified: argv.emailVerified,\n              password: argv.password,\n              externalId: argv.externalId,\n            },\n            resolveApiBaseUrl(),\n          );\n        },\n      )\n      .command(\n        'delete <userId>',\n        'Delete a user',\n        (yargs) => yargs.positional('userId', { type: 'string', demandOption: true, describe: 'User ID' }),\n        async (argv) => {\n          await applyInsecureStorage(argv.insecureStorage);\n          const { resolveApiKey, resolveApiBaseUrl } = await import('./lib/api-key.js');\n          const { runUserDelete } = await import('./commands/user.js');\n          await runUserDelete(argv.userId, resolveApiKey({ apiKey: argv.apiKey }), resolveApiBaseUrl());\n        },\n      )\n      .demandCommand(1, 'Please specify a user subcommand')\n      .strict(),\n  )\n  .command(\n    'install',\n    'Install WorkOS AuthKit into your project',\n    (yargs) => yargs.options(installerOptions),\n    withAuth(async (argv) => {\n      const { handleInstall } = await import('./commands/install.js');\n      await handleInstall(argv);\n    }),\n  )\n  .command(\n    'dashboard',\n    false, // hidden from help\n    (yargs) => yargs.options(installerOptions),\n    withAuth(async (argv) => {\n      const { handleInstall } = await import('./commands/install.js');\n      await handleInstall({ ...argv, dashboard: true });\n    }),\n  )\n  .command(\n    ['$0'],\n    'WorkOS AuthKit CLI',\n    (yargs) => yargs.options(insecureStorageOption),\n    async (argv) => {\n      // Non-TTY: show help\n      if (isNonInteractiveEnvironment()) {\n        yargs(hideBin(process.argv)).showHelp();\n        return;\n      }\n\n      // TTY: ask if user wants to run installer\n      const shouldInstall = await clack.confirm({\n        message: 'Run the AuthKit installer?',\n      });\n\n      if (clack.isCancel(shouldInstall) || !shouldInstall) {\n        process.exit(0);\n      }\n\n      // Auth check happens HERE, after user confirms\n      await applyInsecureStorage(argv.insecureStorage);\n      await ensureAuthenticated();\n\n      const { handleInstall } = await import('./commands/install.js');\n      await handleInstall({ dashboard: false } as any);\n      process.exit(0);\n    },\n  )\n  .strict()\n  .help()\n  .alias('help', 'h')\n  .version(getVersion())\n  .alias('version', 'v')\n  .wrap(process.stdout.isTTY && process.stdout.columns ? process.stdout.columns : 80).argv;\n"]}

package/dist/cli.config.d.ts

@@ -1,6 +1,7 @@
 export declare const version: string;
 export declare const config: {
     readonly model: "claude-opus-4-5-20251101";
+    readonly doctorModel: "claude-haiku-4-5-20251001";
     readonly workos: {
         readonly clientId: "client_01KFKHSZWK9ADVJV854PDFQCCR";
         readonly authkitDomain: "https://signin.workos.com";

package/dist/cli.config.js

@@ -2,6 +2,7 @@ import pkg from '../package.json' with { type: 'json' };
 export const version = pkg.version;
 export const config = {
     model: 'claude-opus-4-5-20251101',
+    doctorModel: 'claude-haiku-4-5-20251001',
     // Production defaults - override via env vars for local dev
     workos: {
         clientId: 'client_01KFKHSZWK9ADVJV854PDFQCCR',

package/dist/cli.config.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.config.js","sourceRoot":"","sources":["../src/cli.config.ts"],"names":[],"mappings":"AACA,OAAO,GAAG,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAExD,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;AAEnC,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,KAAK,EAAE,0BAA0B;IAEjC,4DAA4D;IAC5D,MAAM,EAAE;QACN,QAAQ,EAAE,mCAAmC;QAC7C,aAAa,EAAE,2BAA2B;QAC1C,aAAa,EAAE,oCAAoC;KACpD;IAED,SAAS,EAAE;QACT,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,uBAAuB;KACnC;IAED,KAAK,EAAE;QACL,uEAAuE;QACvE,kBAAkB,EAAE,MAAM;KAC3B;IAED,WAAW,EAAE,SAAS;IAEtB,OAAO,EAAE;QACP,SAAS,EAAE,KAAK;KACjB;IAED,aAAa,EAAE;QACb,aAAa,EAAE,iCAAiC;QAChD,YAAY,EAAE,8BAA8B;QAC5C,SAAS,EAAE,4CAA4C;KACxD;IAED,UAAU,EAAE;QACV,MAAM,EAAE;YACN,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,gBAAgB;SAC/B;QACD,KAAK,EAAE;YACL,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,WAAW;SAC1B;QACD,aAAa,EAAE;YACb,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,oBAAoB;SACnC;QACD,WAAW,EAAE;YACX,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,WAAW;SAC1B;QACD,SAAS,EAAE;YACT,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,WAAW;SAC1B;KACF;IAED,MAAM,EAAE;QACN,SAAS,EAAE,IAAI;KAChB;IAED,QAAQ,EAAE;QACR,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,KAAK;QACjB,eAAe,EAAE,4BAA4B;QAC7C,QAAQ,EAAE;;;;;;;;;;;;;;;;wEAgB0D;KACrE;CACiC,CAAC","sourcesContent":["import type { InstallerConfig } from './lib/settings.js';\nimport pkg from '../package.json' with { type: 'json' };\n\nexport const version = pkg.version;\n\nexport const config = {\n  model: 'claude-opus-4-5-20251101',\n\n  // Production defaults - override via env vars for local dev\n  workos: {\n    clientId: 'client_01KFKHSZWK9ADVJV854PDFQCCR',\n    authkitDomain: 'https://signin.workos.com',\n    llmGatewayUrl: 'https://api.workos.com/llm-gateway',\n  },\n\n  telemetry: {\n    enabled: true,\n    eventName: 'installer interaction',\n  },\n\n  proxy: {\n    // Refresh token when it expires within this window (default: 1 minute)\n    refreshThresholdMs: 60_000,\n  },\n\n  nodeVersion: '>=20.20',\n\n  logging: {\n    debugMode: false,\n  },\n\n  documentation: {\n    workosDocsUrl: 'https://workos.com/docs/authkit',\n    dashboardUrl: 'https://dashboard.workos.com',\n    issuesUrl: 'https://github.com/workos/installer/issues',\n  },\n\n  frameworks: {\n    nextjs: {\n      port: 3000,\n      callbackPath: '/auth/callback',\n    },\n    react: {\n      port: 5173,\n      callbackPath: '/callback',\n    },\n    tanstackStart: {\n      port: 3000,\n      callbackPath: '/api/auth/callback',\n    },\n    reactRouter: {\n      port: 5173,\n      callbackPath: '/callback',\n    },\n    vanillaJs: {\n      port: 5173,\n      callbackPath: '/callback',\n    },\n  },\n\n  legacy: {\n    oauthPort: 8239,\n  },\n\n  branding: {\n    showAsciiArt: true,\n    useCompact: false,\n    compactAsciiArt: `⚡ WorkOS AuthKit Installer`,\n    asciiArt: `░██       ░██                     ░██         ░██████     ░██████\n░██       ░██                     ░██        ░██   ░██   ░██   ░██\n░██  ░██  ░██  ░███████  ░██░████ ░██    ░██░██     ░██ ░██\n░██ ░████ ░██ ░██    ░██ ░███     ░██   ░██ ░██     ░██  ░████████\n░██░██ ░██░██ ░██    ░██ ░██      ░███████  ░██     ░██         ░██\n░████   ░████ ░██    ░██ ░██      ░██   ░██  ░██   ░██   ░██   ░██\n░███     ░███  ░███████  ░██      ░██    ░██  ░██████     ░██████\n\n\n\n   ░███                  ░██    ░██        ░██     ░██ ░██   ░██\n  ░██░██                 ░██    ░██        ░██    ░██        ░██\n ░██  ░██  ░██    ░██ ░████████ ░████████  ░██   ░██   ░██░████████\n░█████████ ░██    ░██    ░██    ░██    ░██ ░███████    ░██   ░██\n░██    ░██ ░██    ░██    ░██    ░██    ░██ ░██   ░██   ░██   ░██\n░██    ░██ ░██   ░███    ░██    ░██    ░██ ░██    ░██  ░██   ░██\n░██    ░██  ░█████░██     ░████ ░██    ░██ ░██     ░██ ░██    ░████    `,\n  },\n} as const satisfies InstallerConfig;\n"]}
+{"version":3,"file":"cli.config.js","sourceRoot":"","sources":["../src/cli.config.ts"],"names":[],"mappings":"AACA,OAAO,GAAG,MAAM,iBAAiB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAExD,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;AAEnC,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,KAAK,EAAE,0BAA0B;IACjC,WAAW,EAAE,2BAA2B;IAExC,4DAA4D;IAC5D,MAAM,EAAE;QACN,QAAQ,EAAE,mCAAmC;QAC7C,aAAa,EAAE,2BAA2B;QAC1C,aAAa,EAAE,oCAAoC;KACpD;IAED,SAAS,EAAE;QACT,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,uBAAuB;KACnC;IAED,KAAK,EAAE;QACL,uEAAuE;QACvE,kBAAkB,EAAE,MAAM;KAC3B;IAED,WAAW,EAAE,SAAS;IAEtB,OAAO,EAAE;QACP,SAAS,EAAE,KAAK;KACjB;IAED,aAAa,EAAE;QACb,aAAa,EAAE,iCAAiC;QAChD,YAAY,EAAE,8BAA8B;QAC5C,SAAS,EAAE,4CAA4C;KACxD;IAED,UAAU,EAAE;QACV,MAAM,EAAE;YACN,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,gBAAgB;SAC/B;QACD,KAAK,EAAE;YACL,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,WAAW;SAC1B;QACD,aAAa,EAAE;YACb,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,oBAAoB;SACnC;QACD,WAAW,EAAE;YACX,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,WAAW;SAC1B;QACD,SAAS,EAAE;YACT,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,WAAW;SAC1B;KACF;IAED,MAAM,EAAE;QACN,SAAS,EAAE,IAAI;KAChB;IAED,QAAQ,EAAE;QACR,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,KAAK;QACjB,eAAe,EAAE,4BAA4B;QAC7C,QAAQ,EAAE;;;;;;;;;;;;;;;;wEAgB0D;KACrE;CACiC,CAAC","sourcesContent":["import type { InstallerConfig } from './lib/settings.js';\nimport pkg from '../package.json' with { type: 'json' };\n\nexport const version = pkg.version;\n\nexport const config = {\n  model: 'claude-opus-4-5-20251101',\n  doctorModel: 'claude-haiku-4-5-20251001',\n\n  // Production defaults - override via env vars for local dev\n  workos: {\n    clientId: 'client_01KFKHSZWK9ADVJV854PDFQCCR',\n    authkitDomain: 'https://signin.workos.com',\n    llmGatewayUrl: 'https://api.workos.com/llm-gateway',\n  },\n\n  telemetry: {\n    enabled: true,\n    eventName: 'installer interaction',\n  },\n\n  proxy: {\n    // Refresh token when it expires within this window (default: 1 minute)\n    refreshThresholdMs: 60_000,\n  },\n\n  nodeVersion: '>=20.20',\n\n  logging: {\n    debugMode: false,\n  },\n\n  documentation: {\n    workosDocsUrl: 'https://workos.com/docs/authkit',\n    dashboardUrl: 'https://dashboard.workos.com',\n    issuesUrl: 'https://github.com/workos/installer/issues',\n  },\n\n  frameworks: {\n    nextjs: {\n      port: 3000,\n      callbackPath: '/auth/callback',\n    },\n    react: {\n      port: 5173,\n      callbackPath: '/callback',\n    },\n    tanstackStart: {\n      port: 3000,\n      callbackPath: '/api/auth/callback',\n    },\n    reactRouter: {\n      port: 5173,\n      callbackPath: '/callback',\n    },\n    vanillaJs: {\n      port: 5173,\n      callbackPath: '/callback',\n    },\n  },\n\n  legacy: {\n    oauthPort: 8239,\n  },\n\n  branding: {\n    showAsciiArt: true,\n    useCompact: false,\n    compactAsciiArt: `⚡ WorkOS AuthKit Installer`,\n    asciiArt: `░██       ░██                     ░██         ░██████     ░██████\n░██       ░██                     ░██        ░██   ░██   ░██   ░██\n░██  ░██  ░██  ░███████  ░██░████ ░██    ░██░██     ░██ ░██\n░██ ░████ ░██ ░██    ░██ ░███     ░██   ░██ ░██     ░██  ░████████\n░██░██ ░██░██ ░██    ░██ ░██      ░███████  ░██     ░██         ░██\n░████   ░████ ░██    ░██ ░██      ░██   ░██  ░██   ░██   ░██   ░██\n░███     ░███  ░███████  ░██      ░██    ░██  ░██████     ░██████\n\n\n\n   ░███                  ░██    ░██        ░██     ░██ ░██   ░██\n  ░██░██                 ░██    ░██        ░██    ░██        ░██\n ░██  ░██  ░██    ░██ ░████████ ░████████  ░██   ░██   ░██░████████\n░█████████ ░██    ░██    ░██    ░██    ░██ ░███████    ░██   ░██\n░██    ░██ ░██    ░██    ░██    ░██    ░██ ░██   ░██   ░██   ░██\n░██    ░██ ░██   ░███    ░██    ░██    ░██ ░██    ░██  ░██   ░██\n░██    ░██  ░█████░██     ░████ ░██    ░██ ░██     ░██ ░██    ░████    `,\n  },\n} as const satisfies InstallerConfig;\n"]}

package/dist/commands/doctor.d.ts

@@ -2,6 +2,7 @@ import type { ArgumentsCamelCase } from 'yargs';
 interface DoctorArgs {
     verbose?: boolean;
     skipApi?: boolean;
+    skipAi?: boolean;
     installDir?: string;
     json?: boolean;
     copy?: boolean;

package/dist/commands/doctor.js

@@ -5,6 +5,7 @@ export async function handleDoctor(argv) {
         installDir: argv.installDir ?? process.cwd(),
         verbose: argv.verbose ?? false,
         skipApi: argv.skipApi ?? false,
+        skipAi: argv.skipAi ?? false,
         json: argv.json ?? false,
         copy: argv.copy ?? false,
     };

package/dist/commands/doctor.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,MAAM,mBAAmB,CAAC;AAUtC,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAoC;IACrE,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE;QAC5C,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK;QAC9B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK;QAC9B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK;QACxB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK;KACzB,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAEpC,gDAAgD;QAChD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAChG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC","sourcesContent":["import type { ArgumentsCamelCase } from 'yargs';\nimport { runDoctor, outputReport } from '../doctor/index.js';\nimport clack from '../utils/clack.js';\n\ninterface DoctorArgs {\n  verbose?: boolean;\n  skipApi?: boolean;\n  installDir?: string;\n  json?: boolean;\n  copy?: boolean;\n}\n\nexport async function handleDoctor(argv: ArgumentsCamelCase<DoctorArgs>): Promise<void> {\n  const options = {\n    installDir: argv.installDir ?? process.cwd(),\n    verbose: argv.verbose ?? false,\n    skipApi: argv.skipApi ?? false,\n    json: argv.json ?? false,\n    copy: argv.copy ?? false,\n  };\n\n  try {\n    const report = await runDoctor(options);\n    await outputReport(report, options);\n\n    // Exit with error code if critical issues found\n    if (report.summary.errors > 0) {\n      process.exit(1);\n    }\n    process.exit(0);\n  } catch (error) {\n    if (!options.json) {\n      clack.log.error(`Doctor failed: ${error instanceof Error ? error.message : 'Unknown error'}`);\n    } else {\n      console.error(JSON.stringify({ error: error instanceof Error ? error.message : 'Unknown error' }));\n    }\n    process.exit(1);\n  }\n}\n"]}
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,MAAM,mBAAmB,CAAC;AAWtC,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAoC;IACrE,MAAM,OAAO,GAAG;QACd,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE;QAC5C,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK;QAC9B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK;QAC9B,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;QAC5B,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK;QACxB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,KAAK;KACzB,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAEpC,gDAAgD;QAChD,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAChG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QACrG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC","sourcesContent":["import type { ArgumentsCamelCase } from 'yargs';\nimport { runDoctor, outputReport } from '../doctor/index.js';\nimport clack from '../utils/clack.js';\n\ninterface DoctorArgs {\n  verbose?: boolean;\n  skipApi?: boolean;\n  skipAi?: boolean;\n  installDir?: string;\n  json?: boolean;\n  copy?: boolean;\n}\n\nexport async function handleDoctor(argv: ArgumentsCamelCase<DoctorArgs>): Promise<void> {\n  const options = {\n    installDir: argv.installDir ?? process.cwd(),\n    verbose: argv.verbose ?? false,\n    skipApi: argv.skipApi ?? false,\n    skipAi: argv.skipAi ?? false,\n    json: argv.json ?? false,\n    copy: argv.copy ?? false,\n  };\n\n  try {\n    const report = await runDoctor(options);\n    await outputReport(report, options);\n\n    // Exit with error code if critical issues found\n    if (report.summary.errors > 0) {\n      process.exit(1);\n    }\n    process.exit(0);\n  } catch (error) {\n    if (!options.json) {\n      clack.log.error(`Doctor failed: ${error instanceof Error ? error.message : 'Unknown error'}`);\n    } else {\n      console.error(JSON.stringify({ error: error instanceof Error ? error.message : 'Unknown error' }));\n    }\n    process.exit(1);\n  }\n}\n"]}

package/dist/commands/env.d.ts

@@ -0,0 +1,9 @@
+export declare function runEnvAdd(options: {
+    name?: string;
+    apiKey?: string;
+    clientId?: string;
+    endpoint?: string;
+}): Promise<void>;
+export declare function runEnvRemove(name: string): Promise<void>;
+export declare function runEnvSwitch(name?: string): Promise<void>;
+export declare function runEnvList(): Promise<void>;