workos 0.7.3 → 0.8.0

package/dist/commands/audit-log.d.ts

@@ -0,0 +1,26 @@
+export interface AuditLogCreateEventFlags {
+    action?: string;
+    actorType?: string;
+    actorId?: string;
+    actorName?: string;
+    targets?: string;
+    context?: string;
+    metadata?: string;
+    occurredAt?: string;
+    file?: string;
+}
+export declare function runAuditLogCreateEvent(orgId: string, flags: AuditLogCreateEventFlags, apiKey: string, baseUrl?: string): Promise<void>;
+export interface AuditLogExportOptions {
+    organizationId: string;
+    rangeStart: string;
+    rangeEnd: string;
+    actions?: string[];
+    actorNames?: string[];
+    actorIds?: string[];
+    targets?: string[];
+}
+export declare function runAuditLogExport(options: AuditLogExportOptions, apiKey: string, baseUrl?: string): Promise<void>;
+export declare function runAuditLogListActions(apiKey: string, baseUrl?: string): Promise<void>;
+export declare function runAuditLogGetSchema(action: string, apiKey: string, baseUrl?: string): Promise<void>;
+export declare function runAuditLogCreateSchema(action: string, filePath: string, apiKey: string, baseUrl?: string): Promise<void>;
+export declare function runAuditLogGetRetention(orgId: string, apiKey: string, baseUrl?: string): Promise<void>;

package/dist/commands/audit-log.js

@@ -0,0 +1,155 @@
+import chalk from 'chalk';
+import { readFile } from 'node:fs/promises';
+import { createWorkOSClient } from '../lib/workos-client.js';
+import { formatTable } from '../utils/table.js';
+import { outputJson, outputSuccess, isJsonMode } from '../utils/output.js';
+import { createApiErrorHandler } from '../lib/api-error-handler.js';
+const handleApiError = createApiErrorHandler('AuditLog');
+export async function runAuditLogCreateEvent(orgId, flags, apiKey, baseUrl) {
+    const client = createWorkOSClient(apiKey, baseUrl);
+    try {
+        let event;
+        if (flags.file) {
+            const raw = await readFile(flags.file, 'utf-8');
+            event = JSON.parse(raw);
+        }
+        else {
+            if (!flags.action || !flags.actorType || !flags.actorId) {
+                throw new Error('--action, --actor-type, and --actor-id are required (or use --file)');
+            }
+            event = {
+                action: flags.action,
+                occurredAt: flags.occurredAt ? new Date(flags.occurredAt) : new Date(),
+                actor: {
+                    id: flags.actorId,
+                    type: flags.actorType,
+                    ...(flags.actorName && { name: flags.actorName }),
+                },
+                targets: flags.targets ? JSON.parse(flags.targets) : [],
+                context: flags.context ? JSON.parse(flags.context) : { location: '0.0.0.0' },
+                ...(flags.metadata && { metadata: JSON.parse(flags.metadata) }),
+            };
+        }
+        await client.sdk.auditLogs.createEvent(orgId, event);
+        outputSuccess('Created audit log event', { organization_id: orgId, action: event.action });
+    }
+    catch (error) {
+        handleApiError(error);
+    }
+}
+const POLL_MAX_ATTEMPTS = 60;
+const POLL_INITIAL_DELAY_MS = 1000;
+const POLL_MAX_DELAY_MS = 30000;
+export async function runAuditLogExport(options, apiKey, baseUrl) {
+    const client = createWorkOSClient(apiKey, baseUrl);
+    try {
+        const exportResult = await client.sdk.auditLogs.createExport({
+            organizationId: options.organizationId,
+            rangeStart: new Date(options.rangeStart),
+            rangeEnd: new Date(options.rangeEnd),
+            ...(options.actions && { actions: options.actions }),
+            ...(options.actorNames && { actorNames: options.actorNames }),
+            ...(options.actorIds && { actorIds: options.actorIds }),
+            ...(options.targets && { targets: options.targets }),
+        });
+        let current = exportResult;
+        let delay = POLL_INITIAL_DELAY_MS;
+        for (let attempt = 0; attempt < POLL_MAX_ATTEMPTS && current.state === 'pending'; attempt++) {
+            if (!isJsonMode()) {
+                process.stderr.write('.');
+            }
+            await new Promise((resolve) => setTimeout(resolve, delay));
+            delay = Math.min(delay * 2, POLL_MAX_DELAY_MS);
+            current = await client.sdk.auditLogs.getExport(current.id);
+        }
+        if (!isJsonMode() && current.state !== 'pending') {
+            process.stderr.write('\n');
+        }
+        if (current.state === 'error') {
+            throw new Error(`Export failed (id: ${current.id})`);
+        }
+        if (current.state === 'pending') {
+            throw new Error(`Export timed out (id: ${current.id}). Check status later.`);
+        }
+        if (isJsonMode()) {
+            outputJson(current);
+            return;
+        }
+        console.log(chalk.green('Export ready'));
+        console.log(`  ID:  ${current.id}`);
+        if (current.url) {
+            console.log(`  URL: ${current.url}`);
+        }
+    }
+    catch (error) {
+        handleApiError(error);
+    }
+}
+// ── list-actions ──────────────────────────────────────────────────────
+export async function runAuditLogListActions(apiKey, baseUrl) {
+    const client = createWorkOSClient(apiKey, baseUrl);
+    try {
+        const result = await client.auditLogs.listActions();
+        if (isJsonMode()) {
+            outputJson(result);
+            return;
+        }
+        if (result.data.length === 0) {
+            console.log('No audit log actions found.');
+            return;
+        }
+        const rows = result.data.map((item) => [item.action]);
+        console.log(formatTable([{ header: 'Action Name' }], rows));
+    }
+    catch (error) {
+        handleApiError(error);
+    }
+}
+// ── get-schema ────────────────────────────────────────────────────────
+export async function runAuditLogGetSchema(action, apiKey, baseUrl) {
+    const client = createWorkOSClient(apiKey, baseUrl);
+    try {
+        const result = await client.auditLogs.getSchema(action);
+        if (isJsonMode()) {
+            outputJson(result);
+            return;
+        }
+        console.log(chalk.bold(`Schema for ${action}`));
+        console.log(JSON.stringify(result, null, 2));
+    }
+    catch (error) {
+        handleApiError(error);
+    }
+}
+// ── create-schema ─────────────────────────────────────────────────────
+export async function runAuditLogCreateSchema(action, filePath, apiKey, baseUrl) {
+    const client = createWorkOSClient(apiKey, baseUrl);
+    try {
+        const raw = await readFile(filePath, 'utf-8');
+        const schema = JSON.parse(raw);
+        const result = await client.sdk.auditLogs.createSchema({
+            action,
+            ...schema,
+        });
+        outputSuccess('Created audit log schema', result);
+    }
+    catch (error) {
+        handleApiError(error);
+    }
+}
+// ── get-retention ─────────────────────────────────────────────────────
+export async function runAuditLogGetRetention(orgId, apiKey, baseUrl) {
+    const client = createWorkOSClient(apiKey, baseUrl);
+    try {
+        const result = await client.auditLogs.getRetention(orgId);
+        if (isJsonMode()) {
+            outputJson(result);
+            return;
+        }
+        console.log(`Retention period: ${chalk.bold(String(result.retention_period_in_days))} days`);
+    }
+    catch (error) {
+        handleApiError(error);
+    }
+}
+//# sourceMappingURL=audit-log.js.map

package/dist/commands/audit-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.js","sourceRoot":"","sources":["../../src/commands/audit-log.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;AAgBzD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAa,EACb,KAA+B,EAC/B,MAAc,EACd,OAAgB;IAEhB,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,IAAI,KAAiC,CAAC;QAEtC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAChD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;gBACxD,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;YACzF,CAAC;YACD,KAAK,GAAG;gBACN,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE;gBACtE,KAAK,EAAE;oBACL,EAAE,EAAE,KAAK,CAAC,OAAO;oBACjB,IAAI,EAAE,KAAK,CAAC,SAAS;oBACrB,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;iBAClD;gBACD,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE;gBACvD,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE;gBAC5E,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;aAChE,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACrD,aAAa,CAAC,yBAAyB,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAcD,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAA8B,EAC9B,MAAc,EACd,OAAgB;IAEhB,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC;YAC3D,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,UAAU,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;YACxC,QAAQ,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;YACpC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;YACpD,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;YAC7D,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvD,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;SACrD,CAAC,CAAC;QAEH,IAAI,OAAO,GAAG,YAAY,CAAC;QAC3B,IAAI,KAAK,GAAG,qBAAqB,CAAC;QAElC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,iBAAiB,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;YAC5F,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;gBAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5B,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YAC3D,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;YAC/C,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,yBAAyB,OAAO,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACpC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,UAAU,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,MAAc,EAAE,OAAgB;IAC3E,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QAEpD,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YAC3C,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAc,EAAE,MAAc,EAAE,OAAgB;IACzF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAExD,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,MAAM,EAAE,CAAC,CAAC,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAAc,EACd,QAAgB,EAChB,MAAc,EACd,OAAgB;IAEhB,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC;YACrD,MAAM;YACN,GAAG,MAAM;SACV,CAAC,CAAC;QAEH,aAAa,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,yEAAyE;AAEzE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAAa,EAAE,MAAc,EAAE,OAAgB;IAC3F,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAE1D,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,CAAC;IAC/F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC","sourcesContent":["import chalk from 'chalk';\nimport { readFile } from 'node:fs/promises';\nimport type { CreateAuditLogEventOptions } from '@workos-inc/node';\nimport { createWorkOSClient } from '../lib/workos-client.js';\nimport { formatTable } from '../utils/table.js';\nimport { outputJson, outputSuccess, isJsonMode } from '../utils/output.js';\nimport { createApiErrorHandler } from '../lib/api-error-handler.js';\n\nconst handleApiError = createApiErrorHandler('AuditLog');\n\n// ── create-event ──────────────────────────────────────────────────────\n\nexport interface AuditLogCreateEventFlags {\n  action?: string;\n  actorType?: string;\n  actorId?: string;\n  actorName?: string;\n  targets?: string;\n  context?: string;\n  metadata?: string;\n  occurredAt?: string;\n  file?: string;\n}\n\nexport async function runAuditLogCreateEvent(\n  orgId: string,\n  flags: AuditLogCreateEventFlags,\n  apiKey: string,\n  baseUrl?: string,\n): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    let event: CreateAuditLogEventOptions;\n\n    if (flags.file) {\n      const raw = await readFile(flags.file, 'utf-8');\n      event = JSON.parse(raw);\n    } else {\n      if (!flags.action || !flags.actorType || !flags.actorId) {\n        throw new Error('--action, --actor-type, and --actor-id are required (or use --file)');\n      }\n      event = {\n        action: flags.action,\n        occurredAt: flags.occurredAt ? new Date(flags.occurredAt) : new Date(),\n        actor: {\n          id: flags.actorId,\n          type: flags.actorType,\n          ...(flags.actorName && { name: flags.actorName }),\n        },\n        targets: flags.targets ? JSON.parse(flags.targets) : [],\n        context: flags.context ? JSON.parse(flags.context) : { location: '0.0.0.0' },\n        ...(flags.metadata && { metadata: JSON.parse(flags.metadata) }),\n      };\n    }\n\n    await client.sdk.auditLogs.createEvent(orgId, event);\n    outputSuccess('Created audit log event', { organization_id: orgId, action: event.action });\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\n// ── export ────────────────────────────────────────────────────────────\n\nexport interface AuditLogExportOptions {\n  organizationId: string;\n  rangeStart: string;\n  rangeEnd: string;\n  actions?: string[];\n  actorNames?: string[];\n  actorIds?: string[];\n  targets?: string[];\n}\n\nconst POLL_MAX_ATTEMPTS = 60;\nconst POLL_INITIAL_DELAY_MS = 1000;\nconst POLL_MAX_DELAY_MS = 30000;\n\nexport async function runAuditLogExport(\n  options: AuditLogExportOptions,\n  apiKey: string,\n  baseUrl?: string,\n): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const exportResult = await client.sdk.auditLogs.createExport({\n      organizationId: options.organizationId,\n      rangeStart: new Date(options.rangeStart),\n      rangeEnd: new Date(options.rangeEnd),\n      ...(options.actions && { actions: options.actions }),\n      ...(options.actorNames && { actorNames: options.actorNames }),\n      ...(options.actorIds && { actorIds: options.actorIds }),\n      ...(options.targets && { targets: options.targets }),\n    });\n\n    let current = exportResult;\n    let delay = POLL_INITIAL_DELAY_MS;\n\n    for (let attempt = 0; attempt < POLL_MAX_ATTEMPTS && current.state === 'pending'; attempt++) {\n      if (!isJsonMode()) {\n        process.stderr.write('.');\n      }\n      await new Promise((resolve) => setTimeout(resolve, delay));\n      delay = Math.min(delay * 2, POLL_MAX_DELAY_MS);\n      current = await client.sdk.auditLogs.getExport(current.id);\n    }\n\n    if (!isJsonMode() && current.state !== 'pending') {\n      process.stderr.write('\\n');\n    }\n\n    if (current.state === 'error') {\n      throw new Error(`Export failed (id: ${current.id})`);\n    }\n\n    if (current.state === 'pending') {\n      throw new Error(`Export timed out (id: ${current.id}). Check status later.`);\n    }\n\n    if (isJsonMode()) {\n      outputJson(current);\n      return;\n    }\n\n    console.log(chalk.green('Export ready'));\n    console.log(`  ID:  ${current.id}`);\n    if (current.url) {\n      console.log(`  URL: ${current.url}`);\n    }\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\n// ── list-actions ──────────────────────────────────────────────────────\n\nexport async function runAuditLogListActions(apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const result = await client.auditLogs.listActions();\n\n    if (isJsonMode()) {\n      outputJson(result);\n      return;\n    }\n\n    if (result.data.length === 0) {\n      console.log('No audit log actions found.');\n      return;\n    }\n\n    const rows = result.data.map((item) => [item.action]);\n    console.log(formatTable([{ header: 'Action Name' }], rows));\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\n// ── get-schema ────────────────────────────────────────────────────────\n\nexport async function runAuditLogGetSchema(action: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const result = await client.auditLogs.getSchema(action);\n\n    if (isJsonMode()) {\n      outputJson(result);\n      return;\n    }\n\n    console.log(chalk.bold(`Schema for ${action}`));\n    console.log(JSON.stringify(result, null, 2));\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\n// ── create-schema ─────────────────────────────────────────────────────\n\nexport async function runAuditLogCreateSchema(\n  action: string,\n  filePath: string,\n  apiKey: string,\n  baseUrl?: string,\n): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const raw = await readFile(filePath, 'utf-8');\n    const schema = JSON.parse(raw);\n\n    const result = await client.sdk.auditLogs.createSchema({\n      action,\n      ...schema,\n    });\n\n    outputSuccess('Created audit log schema', result);\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\n// ── get-retention ─────────────────────────────────────────────────────\n\nexport async function runAuditLogGetRetention(orgId: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const result = await client.auditLogs.getRetention(orgId);\n\n    if (isJsonMode()) {\n      outputJson(result);\n      return;\n    }\n\n    console.log(`Retention period: ${chalk.bold(String(result.retention_period_in_days))} days`);\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n"]}

package/dist/commands/config.d.ts

@@ -0,0 +1,3 @@
+export declare function runConfigRedirectAdd(uri: string, apiKey: string, baseUrl?: string): Promise<void>;
+export declare function runConfigCorsAdd(origin: string, apiKey: string, baseUrl?: string): Promise<void>;
+export declare function runConfigHomepageUrlSet(url: string, apiKey: string, baseUrl?: string): Promise<void>;

package/dist/commands/config.js

@@ -0,0 +1,54 @@
+import chalk from 'chalk';
+import { createWorkOSClient } from '../lib/workos-client.js';
+import { outputSuccess, isJsonMode } from '../utils/output.js';
+import { createApiErrorHandler } from '../lib/api-error-handler.js';
+const handleApiError = createApiErrorHandler('Config');
+export async function runConfigRedirectAdd(uri, apiKey, baseUrl) {
+    const client = createWorkOSClient(apiKey, baseUrl);
+    try {
+        const result = await client.redirectUris.add(uri);
+        if (result.alreadyExists) {
+            if (isJsonMode()) {
+                outputSuccess('Redirect URI already exists', { uri, alreadyExists: true });
+            }
+            else {
+                console.log(chalk.yellow('Redirect URI already exists (no change)'));
+            }
+            return;
+        }
+        outputSuccess('Added redirect URI', { uri });
+    }
+    catch (error) {
+        handleApiError(error);
+    }
+}
+export async function runConfigCorsAdd(origin, apiKey, baseUrl) {
+    const client = createWorkOSClient(apiKey, baseUrl);
+    try {
+        const result = await client.corsOrigins.add(origin);
+        if (result.alreadyExists) {
+            if (isJsonMode()) {
+                outputSuccess('CORS origin already exists', { origin, alreadyExists: true });
+            }
+            else {
+                console.log(chalk.yellow('CORS origin already exists (no change)'));
+            }
+            return;
+        }
+        outputSuccess('Added CORS origin', { origin });
+    }
+    catch (error) {
+        handleApiError(error);
+    }
+}
+export async function runConfigHomepageUrlSet(url, apiKey, baseUrl) {
+    const client = createWorkOSClient(apiKey, baseUrl);
+    try {
+        await client.homepageUrl.set(url);
+        outputSuccess('Set homepage URL', { url });
+    }
+    catch (error) {
+        handleApiError(error);
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/commands/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/commands/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;AAEvD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAW,EAAE,MAAc,EAAE,OAAgB;IACtF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAElD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,aAAa,CAAC,6BAA6B,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC,CAAC;YACvE,CAAC;YACD,OAAO;QACT,CAAC;QAED,aAAa,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc,EAAE,MAAc,EAAE,OAAgB;IACrF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEpD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,IAAI,UAAU,EAAE,EAAE,CAAC;gBACjB,aAAa,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAAC,CAAC;YACtE,CAAC;YACD,OAAO;QACT,CAAC;QAED,aAAa,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAW,EAAE,MAAc,EAAE,OAAgB;IACzF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,aAAa,CAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC","sourcesContent":["import chalk from 'chalk';\nimport { createWorkOSClient } from '../lib/workos-client.js';\nimport { outputSuccess, isJsonMode } from '../utils/output.js';\nimport { createApiErrorHandler } from '../lib/api-error-handler.js';\n\nconst handleApiError = createApiErrorHandler('Config');\n\nexport async function runConfigRedirectAdd(uri: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const result = await client.redirectUris.add(uri);\n\n    if (result.alreadyExists) {\n      if (isJsonMode()) {\n        outputSuccess('Redirect URI already exists', { uri, alreadyExists: true });\n      } else {\n        console.log(chalk.yellow('Redirect URI already exists (no change)'));\n      }\n      return;\n    }\n\n    outputSuccess('Added redirect URI', { uri });\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\nexport async function runConfigCorsAdd(origin: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const result = await client.corsOrigins.add(origin);\n\n    if (result.alreadyExists) {\n      if (isJsonMode()) {\n        outputSuccess('CORS origin already exists', { origin, alreadyExists: true });\n      } else {\n        console.log(chalk.yellow('CORS origin already exists (no change)'));\n      }\n      return;\n    }\n\n    outputSuccess('Added CORS origin', { origin });\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\nexport async function runConfigHomepageUrlSet(url: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    await client.homepageUrl.set(url);\n    outputSuccess('Set homepage URL', { url });\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n"]}

package/dist/commands/connection.d.ts

@@ -0,0 +1,13 @@
+export interface ConnectionListOptions {
+    organizationId?: string;
+    connectionType?: string;
+    limit?: number;
+    before?: string;
+    after?: string;
+    order?: string;
+}
+export declare function runConnectionList(options: ConnectionListOptions, apiKey: string, baseUrl?: string): Promise<void>;
+export declare function runConnectionGet(id: string, apiKey: string, baseUrl?: string): Promise<void>;
+export declare function runConnectionDelete(id: string, options: {
+    force?: boolean;
+}, apiKey: string, baseUrl?: string): Promise<void>;

package/dist/commands/connection.js

@@ -0,0 +1,94 @@
+import chalk from 'chalk';
+import { createWorkOSClient } from '../lib/workos-client.js';
+import { formatTable } from '../utils/table.js';
+import { outputSuccess, outputJson, isJsonMode, exitWithError } from '../utils/output.js';
+import { createApiErrorHandler } from '../lib/api-error-handler.js';
+import { isNonInteractiveEnvironment } from '../utils/environment.js';
+import clack from '../utils/clack.js';
+const handleApiError = createApiErrorHandler('Connection');
+export async function runConnectionList(options, apiKey, baseUrl) {
+    const client = createWorkOSClient(apiKey, baseUrl);
+    try {
+        const result = await client.sdk.sso.listConnections({
+            ...(options.organizationId && { organizationId: options.organizationId }),
+            ...(options.connectionType && { connectionType: options.connectionType }),
+            limit: options.limit,
+            before: options.before,
+            after: options.after,
+            order: options.order,
+        });
+        if (isJsonMode()) {
+            outputJson({ data: result.data, listMetadata: result.listMetadata });
+            return;
+        }
+        if (result.data.length === 0) {
+            console.log('No connections found.');
+            return;
+        }
+        const rows = result.data.map((conn) => [
+            conn.id,
+            conn.name,
+            conn.type,
+            conn.organizationId || chalk.dim('-'),
+            conn.state,
+            conn.createdAt,
+        ]);
+        console.log(formatTable([
+            { header: 'ID' },
+            { header: 'Name' },
+            { header: 'Type' },
+            { header: 'Org ID' },
+            { header: 'State' },
+            { header: 'Created' },
+        ], rows));
+        const { before, after } = result.listMetadata;
+        if (before && after) {
+            console.log(chalk.dim(`Before: ${before}  After: ${after}`));
+        }
+        else if (before) {
+            console.log(chalk.dim(`Before: ${before}`));
+        }
+        else if (after) {
+            console.log(chalk.dim(`After: ${after}`));
+        }
+    }
+    catch (error) {
+        handleApiError(error);
+    }
+}
+export async function runConnectionGet(id, apiKey, baseUrl) {
+    const client = createWorkOSClient(apiKey, baseUrl);
+    try {
+        const connection = await client.sdk.sso.getConnection(id);
+        outputJson(connection);
+    }
+    catch (error) {
+        handleApiError(error);
+    }
+}
+export async function runConnectionDelete(id, options, apiKey, baseUrl) {
+    if (!options.force) {
+        if (isNonInteractiveEnvironment()) {
+            exitWithError({
+                code: 'confirmation_required',
+                message: 'Destructive operation requires --force flag in non-interactive mode.',
+            });
+        }
+        const confirmed = await clack.confirm({
+            message: `Delete connection ${id}? This cannot be undone.`,
+        });
+        if (clack.isCancel(confirmed) || !confirmed) {
+            console.log('Delete cancelled.');
+            return;
+        }
+    }
+    const client = createWorkOSClient(apiKey, baseUrl);
+    try {
+        await client.sdk.sso.deleteConnection(id);
+        outputSuccess('Deleted connection', { id });
+    }
+    catch (error) {
+        handleApiError(error);
+    }
+}
+//# sourceMappingURL=connection.js.map

package/dist/commands/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../src/commands/connection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,KAAK,MAAM,mBAAmB,CAAC;AAEtC,MAAM,cAAc,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;AAW3D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAA8B,EAC9B,MAAc,EACd,OAAgB;IAEhB,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC;YAClD,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;YACzE,GAAG,CAAC,OAAO,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,cAAgC,EAAE,CAAC;YAC3F,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAmC;SACnD,CAAC,CAAC;QAEH,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACrC,IAAI,CAAC,EAAE;YACP,IAAI,CAAC,IAAI;YACT,IAAI,CAAC,IAAI;YACT,IAAI,CAAC,cAAc,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YACrC,IAAI,CAAC,KAAK;YACV,IAAI,CAAC,SAAS;SACf,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CACT,WAAW,CACT;YACE,EAAE,MAAM,EAAE,IAAI,EAAE;YAChB,EAAE,MAAM,EAAE,MAAM,EAAE;YAClB,EAAE,MAAM,EAAE,MAAM,EAAE;YAClB,EAAE,MAAM,EAAE,QAAQ,EAAE;YACpB,EAAE,MAAM,EAAE,OAAO,EAAE;YACnB,EAAE,MAAM,EAAE,SAAS,EAAE;SACtB,EACD,IAAI,CACL,CACF,CAAC;QAEF,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC;QAC9C,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,MAAM,YAAY,KAAK,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,MAAM,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EAAU,EAAE,MAAc,EAAE,OAAgB;IACjF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAC1D,UAAU,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,EAAU,EACV,OAA4B,EAC5B,MAAc,EACd,OAAgB;IAEhB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,2BAA2B,EAAE,EAAE,CAAC;YAClC,aAAa,CAAC;gBACZ,IAAI,EAAE,uBAAuB;gBAC7B,OAAO,EAAE,sEAAsE;aAChF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC;YACpC,OAAO,EAAE,qBAAqB,EAAE,0BAA0B;SAC3D,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;QAC1C,aAAa,CAAC,oBAAoB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC","sourcesContent":["import chalk from 'chalk';\nimport type { ConnectionType } from '@workos-inc/node';\nimport { createWorkOSClient } from '../lib/workos-client.js';\nimport { formatTable } from '../utils/table.js';\nimport { outputSuccess, outputJson, isJsonMode, exitWithError } from '../utils/output.js';\nimport { createApiErrorHandler } from '../lib/api-error-handler.js';\nimport { isNonInteractiveEnvironment } from '../utils/environment.js';\nimport clack from '../utils/clack.js';\n\nconst handleApiError = createApiErrorHandler('Connection');\n\nexport interface ConnectionListOptions {\n  organizationId?: string;\n  connectionType?: string;\n  limit?: number;\n  before?: string;\n  after?: string;\n  order?: string;\n}\n\nexport async function runConnectionList(\n  options: ConnectionListOptions,\n  apiKey: string,\n  baseUrl?: string,\n): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const result = await client.sdk.sso.listConnections({\n      ...(options.organizationId && { organizationId: options.organizationId }),\n      ...(options.connectionType && { connectionType: options.connectionType as ConnectionType }),\n      limit: options.limit,\n      before: options.before,\n      after: options.after,\n      order: options.order as 'asc' | 'desc' | undefined,\n    });\n\n    if (isJsonMode()) {\n      outputJson({ data: result.data, listMetadata: result.listMetadata });\n      return;\n    }\n\n    if (result.data.length === 0) {\n      console.log('No connections found.');\n      return;\n    }\n\n    const rows = result.data.map((conn) => [\n      conn.id,\n      conn.name,\n      conn.type,\n      conn.organizationId || chalk.dim('-'),\n      conn.state,\n      conn.createdAt,\n    ]);\n\n    console.log(\n      formatTable(\n        [\n          { header: 'ID' },\n          { header: 'Name' },\n          { header: 'Type' },\n          { header: 'Org ID' },\n          { header: 'State' },\n          { header: 'Created' },\n        ],\n        rows,\n      ),\n    );\n\n    const { before, after } = result.listMetadata;\n    if (before && after) {\n      console.log(chalk.dim(`Before: ${before}  After: ${after}`));\n    } else if (before) {\n      console.log(chalk.dim(`Before: ${before}`));\n    } else if (after) {\n      console.log(chalk.dim(`After: ${after}`));\n    }\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\nexport async function runConnectionGet(id: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    const connection = await client.sdk.sso.getConnection(id);\n    outputJson(connection);\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n\nexport async function runConnectionDelete(\n  id: string,\n  options: { force?: boolean },\n  apiKey: string,\n  baseUrl?: string,\n): Promise<void> {\n  if (!options.force) {\n    if (isNonInteractiveEnvironment()) {\n      exitWithError({\n        code: 'confirmation_required',\n        message: 'Destructive operation requires --force flag in non-interactive mode.',\n      });\n    }\n\n    const confirmed = await clack.confirm({\n      message: `Delete connection ${id}? This cannot be undone.`,\n    });\n\n    if (clack.isCancel(confirmed) || !confirmed) {\n      console.log('Delete cancelled.');\n      return;\n    }\n  }\n\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    await client.sdk.sso.deleteConnection(id);\n    outputSuccess('Deleted connection', { id });\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n"]}

package/dist/commands/debug-sso.d.ts

@@ -0,0 +1 @@
+export declare function runDebugSso(connectionId: string, apiKey: string, baseUrl?: string): Promise<void>;

package/dist/commands/debug-sso.js

@@ -0,0 +1,78 @@
+import chalk from 'chalk';
+import { createWorkOSClient } from '../lib/workos-client.js';
+import { outputJson, isJsonMode } from '../utils/output.js';
+import { createApiErrorHandler } from '../lib/api-error-handler.js';
+const handleApiError = createApiErrorHandler('Connection');
+export async function runDebugSso(connectionId, apiKey, baseUrl) {
+    const client = createWorkOSClient(apiKey, baseUrl);
+    try {
+        // 1. Get connection details
+        const connection = await client.sdk.sso.getConnection(connectionId);
+        const issues = [];
+        // 2. Check for common issues
+        if (connection.state !== 'active') {
+            issues.push(`Connection is ${connection.state} (not active)`);
+        }
+        // 3. List recent authentication events
+        let recentEvents = [];
+        try {
+            const events = await client.sdk.events.listEvents({
+                events: [
+                    'authentication.email_verification_succeeded',
+                    'authentication.magic_auth_succeeded',
+                    'authentication.sso_succeeded',
+                ],
+                ...(connection.organizationId && { organizationId: connection.organizationId }),
+                limit: 5,
+            });
+            recentEvents = events.data.map((e) => ({ id: e.id, event: e.event, createdAt: e.createdAt }));
+        }
+        catch {
+            // Events may not be available
+        }
+        if (isJsonMode()) {
+            outputJson({
+                connection: {
+                    id: connection.id,
+                    name: connection.name,
+                    type: connection.type,
+                    state: connection.state,
+                    organizationId: connection.organizationId,
+                    createdAt: connection.createdAt,
+                },
+                recentEvents,
+                issues,
+            });
+            return;
+        }
+        // 4. Human-readable diagnosis
+        console.log(chalk.bold(`SSO Connection: ${connection.name}`));
+        console.log(`  ID: ${connection.id}`);
+        console.log(`  Type: ${connection.type}`);
+        console.log(`  State: ${connection.state === 'active' ? chalk.green('active') : chalk.yellow(connection.state)}`);
+        console.log(`  Organization: ${connection.organizationId || chalk.dim('none')}`);
+        console.log(`  Created: ${connection.createdAt}`);
+        if (recentEvents.length > 0) {
+            console.log(chalk.bold('\nRecent auth events:'));
+            for (const event of recentEvents) {
+                console.log(`  ${event.event} (${event.createdAt})`);
+            }
+        }
+        else {
+            console.log(chalk.dim('\nNo recent authentication events found.'));
+        }
+        if (issues.length > 0) {
+            console.log(chalk.bold('\nIssues found:'));
+            for (const issue of issues) {
+                console.log(chalk.yellow(`  ⚠ ${issue}`));
+            }
+        }
+        else {
+            console.log(chalk.green('\nNo issues detected.'));
+        }
+    }
+    catch (error) {
+        handleApiError(error);
+    }
+}
+//# sourceMappingURL=debug-sso.js.map

package/dist/commands/debug-sso.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"debug-sso.js","sourceRoot":"","sources":["../../src/commands/debug-sso.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;AAE3D,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,YAAoB,EAAE,MAAc,EAAE,OAAgB;IACtF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,4BAA4B;QAC5B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAEpE,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,6BAA6B;QAC7B,IAAI,UAAU,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,iBAAiB,UAAU,CAAC,KAAK,eAAe,CAAC,CAAC;QAChE,CAAC;QAED,uCAAuC;QACvC,IAAI,YAAY,GAA4D,EAAE,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;gBAChD,MAAM,EAAE;oBACN,6CAA6C;oBAC7C,qCAAqC;oBACrC,8BAA8B;iBAChB;gBAChB,GAAG,CAAC,UAAU,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,UAAU,CAAC,cAAc,EAAE,CAAC;gBAC/E,KAAK,EAAE,CAAC;aACT,CAAC,CAAC;YACH,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;QAED,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC;gBACT,UAAU,EAAE;oBACV,EAAE,EAAE,UAAU,CAAC,EAAE;oBACjB,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,IAAI,EAAE,UAAU,CAAC,IAAI;oBACrB,KAAK,EAAE,UAAU,CAAC,KAAK;oBACvB,cAAc,EAAE,UAAU,CAAC,cAAc;oBACzC,SAAS,EAAE,UAAU,CAAC,SAAS;iBAChC;gBACD,YAAY;gBACZ,MAAM;aACP,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,SAAS,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,YAAY,UAAU,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClH,OAAO,CAAC,GAAG,CAAC,mBAAmB,UAAU,CAAC,cAAc,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,CAAC,cAAc,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC;QAElD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACjD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC","sourcesContent":["import chalk from 'chalk';\nimport type { EventName } from '@workos-inc/node';\nimport { createWorkOSClient } from '../lib/workos-client.js';\nimport { outputJson, isJsonMode } from '../utils/output.js';\nimport { createApiErrorHandler } from '../lib/api-error-handler.js';\n\nconst handleApiError = createApiErrorHandler('Connection');\n\nexport async function runDebugSso(connectionId: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    // 1. Get connection details\n    const connection = await client.sdk.sso.getConnection(connectionId);\n\n    const issues: string[] = [];\n\n    // 2. Check for common issues\n    if (connection.state !== 'active') {\n      issues.push(`Connection is ${connection.state} (not active)`);\n    }\n\n    // 3. List recent authentication events\n    let recentEvents: Array<{ id: string; event: string; createdAt: string }> = [];\n    try {\n      const events = await client.sdk.events.listEvents({\n        events: [\n          'authentication.email_verification_succeeded',\n          'authentication.magic_auth_succeeded',\n          'authentication.sso_succeeded',\n        ] as EventName[],\n        ...(connection.organizationId && { organizationId: connection.organizationId }),\n        limit: 5,\n      });\n      recentEvents = events.data.map((e) => ({ id: e.id, event: e.event, createdAt: e.createdAt }));\n    } catch {\n      // Events may not be available\n    }\n\n    if (isJsonMode()) {\n      outputJson({\n        connection: {\n          id: connection.id,\n          name: connection.name,\n          type: connection.type,\n          state: connection.state,\n          organizationId: connection.organizationId,\n          createdAt: connection.createdAt,\n        },\n        recentEvents,\n        issues,\n      });\n      return;\n    }\n\n    // 4. Human-readable diagnosis\n    console.log(chalk.bold(`SSO Connection: ${connection.name}`));\n    console.log(`  ID: ${connection.id}`);\n    console.log(`  Type: ${connection.type}`);\n    console.log(`  State: ${connection.state === 'active' ? chalk.green('active') : chalk.yellow(connection.state)}`);\n    console.log(`  Organization: ${connection.organizationId || chalk.dim('none')}`);\n    console.log(`  Created: ${connection.createdAt}`);\n\n    if (recentEvents.length > 0) {\n      console.log(chalk.bold('\\nRecent auth events:'));\n      for (const event of recentEvents) {\n        console.log(`  ${event.event} (${event.createdAt})`);\n      }\n    } else {\n      console.log(chalk.dim('\\nNo recent authentication events found.'));\n    }\n\n    if (issues.length > 0) {\n      console.log(chalk.bold('\\nIssues found:'));\n      for (const issue of issues) {\n        console.log(chalk.yellow(`  ⚠ ${issue}`));\n      }\n    } else {\n      console.log(chalk.green('\\nNo issues detected.'));\n    }\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n"]}

package/dist/commands/debug-sync.d.ts

@@ -0,0 +1 @@
+export declare function runDebugSync(directoryId: string, apiKey: string, baseUrl?: string): Promise<void>;

package/dist/commands/debug-sync.js

@@ -0,0 +1,102 @@
+import chalk from 'chalk';
+import { createWorkOSClient } from '../lib/workos-client.js';
+import { outputJson, isJsonMode } from '../utils/output.js';
+import { createApiErrorHandler } from '../lib/api-error-handler.js';
+const handleApiError = createApiErrorHandler('Directory');
+export async function runDebugSync(directoryId, apiKey, baseUrl) {
+    const client = createWorkOSClient(apiKey, baseUrl);
+    try {
+        // 1. Get directory details
+        const directory = await client.sdk.directorySync.getDirectory(directoryId);
+        const issues = [];
+        // 2. Check state
+        if (String(directory.state) !== 'linked') {
+            issues.push(`Directory is ${directory.state} (not linked)`);
+        }
+        // 3. Count users and groups
+        let userCount = 0;
+        let groupCount = 0;
+        try {
+            const users = await client.sdk.directorySync.listUsers({ directory: directoryId, limit: 1 });
+            userCount = users.data.length;
+            // If there's pagination, there are more
+            if (users.listMetadata.after)
+                userCount = -1; // indicates "more than 1"
+        }
+        catch {
+            // May not have access
+        }
+        try {
+            const groups = await client.sdk.directorySync.listGroups({ directory: directoryId, limit: 1 });
+            groupCount = groups.data.length;
+            if (groups.listMetadata.after)
+                groupCount = -1;
+        }
+        catch {
+            // May not have access
+        }
+        // 4. List recent sync events
+        let recentEvents = [];
+        try {
+            const events = await client.sdk.events.listEvents({
+                events: ['dsync.user.created', 'dsync.user.updated', 'dsync.group.created'],
+                ...(directory.organizationId && { organizationId: directory.organizationId }),
+                limit: 5,
+            });
+            recentEvents = events.data.map((e) => ({ id: e.id, event: e.event, createdAt: e.createdAt }));
+        }
+        catch {
+            // Events may not be available
+        }
+        if (recentEvents.length === 0) {
+            issues.push('No recent sync events found — sync may be stalled');
+        }
+        if (isJsonMode()) {
+            outputJson({
+                directory: {
+                    id: directory.id,
+                    name: directory.name,
+                    type: directory.type,
+                    state: directory.state,
+                    organizationId: directory.organizationId,
+                    createdAt: directory.createdAt,
+                },
+                userCount: userCount === -1 ? '1+' : userCount,
+                groupCount: groupCount === -1 ? '1+' : groupCount,
+                recentEvents,
+                issues,
+            });
+            return;
+        }
+        // 5. Human-readable diagnosis
+        console.log(chalk.bold(`Directory Sync: ${directory.name}`));
+        console.log(`  ID: ${directory.id}`);
+        console.log(`  Type: ${directory.type}`);
+        console.log(`  State: ${String(directory.state) === 'linked' ? chalk.green('linked') : chalk.yellow(directory.state)}`);
+        console.log(`  Organization: ${directory.organizationId || chalk.dim('none')}`);
+        console.log(`  Users: ${userCount === -1 ? '1+' : userCount}`);
+        console.log(`  Groups: ${groupCount === -1 ? '1+' : groupCount}`);
+        if (recentEvents.length > 0) {
+            console.log(chalk.bold('\nRecent sync events:'));
+            for (const event of recentEvents) {
+                console.log(`  ${event.event} (${event.createdAt})`);
+            }
+        }
+        else {
+            console.log(chalk.dim('\nNo recent sync events found.'));
+        }
+        if (issues.length > 0) {
+            console.log(chalk.bold('\nIssues found:'));
+            for (const issue of issues) {
+                console.log(chalk.yellow(`  ⚠ ${issue}`));
+            }
+        }
+        else {
+            console.log(chalk.green('\nNo issues detected.'));
+        }
+    }
+    catch (error) {
+        handleApiError(error);
+    }
+}
+//# sourceMappingURL=debug-sync.js.map

package/dist/commands/debug-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"debug-sync.js","sourceRoot":"","sources":["../../src/commands/debug-sync.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,WAAmB,EAAE,MAAc,EAAE,OAAgB;IACtF,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEnD,IAAI,CAAC;QACH,2BAA2B;QAC3B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAE3E,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,iBAAiB;QACjB,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,gBAAgB,SAAS,CAAC,KAAK,eAAe,CAAC,CAAC;QAC9D,CAAC;QAED,4BAA4B;QAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAC7F,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;YAC9B,wCAAwC;YACxC,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK;gBAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,0BAA0B;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/F,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAChC,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK;gBAAE,UAAU,GAAG,CAAC,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;QAED,6BAA6B;QAC7B,IAAI,YAAY,GAA4D,EAAE,CAAC;QAC/E,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;gBAChD,MAAM,EAAE,CAAC,oBAAoB,EAAE,oBAAoB,EAAE,qBAAqB,CAAgB;gBAC1F,GAAG,CAAC,SAAS,CAAC,cAAc,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC,cAAc,EAAE,CAAC;gBAC7E,KAAK,EAAE,CAAC;aACT,CAAC,CAAC;YACH,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,UAAU,EAAE,EAAE,CAAC;YACjB,UAAU,CAAC;gBACT,SAAS,EAAE;oBACT,EAAE,EAAE,SAAS,CAAC,EAAE;oBAChB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,KAAK,EAAE,SAAS,CAAC,KAAK;oBACtB,cAAc,EAAE,SAAS,CAAC,cAAc;oBACxC,SAAS,EAAE,SAAS,CAAC,SAAS;iBAC/B;gBACD,SAAS,EAAE,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;gBAC9C,UAAU,EAAE,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU;gBACjD,YAAY;gBACZ,MAAM;aACP,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,8BAA8B;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,SAAS,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,WAAW,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CACT,YAAY,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAC3G,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,mBAAmB,SAAS,CAAC,cAAc,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,GAAG,CAAC,YAAY,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,aAAa,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;QAElE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC;YACjD,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBACjC,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC;YAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;AACH,CAAC","sourcesContent":["import chalk from 'chalk';\nimport type { EventName } from '@workos-inc/node';\nimport { createWorkOSClient } from '../lib/workos-client.js';\nimport { outputJson, isJsonMode } from '../utils/output.js';\nimport { createApiErrorHandler } from '../lib/api-error-handler.js';\n\nconst handleApiError = createApiErrorHandler('Directory');\n\nexport async function runDebugSync(directoryId: string, apiKey: string, baseUrl?: string): Promise<void> {\n  const client = createWorkOSClient(apiKey, baseUrl);\n\n  try {\n    // 1. Get directory details\n    const directory = await client.sdk.directorySync.getDirectory(directoryId);\n\n    const issues: string[] = [];\n\n    // 2. Check state\n    if (String(directory.state) !== 'linked') {\n      issues.push(`Directory is ${directory.state} (not linked)`);\n    }\n\n    // 3. Count users and groups\n    let userCount = 0;\n    let groupCount = 0;\n    try {\n      const users = await client.sdk.directorySync.listUsers({ directory: directoryId, limit: 1 });\n      userCount = users.data.length;\n      // If there's pagination, there are more\n      if (users.listMetadata.after) userCount = -1; // indicates \"more than 1\"\n    } catch {\n      // May not have access\n    }\n\n    try {\n      const groups = await client.sdk.directorySync.listGroups({ directory: directoryId, limit: 1 });\n      groupCount = groups.data.length;\n      if (groups.listMetadata.after) groupCount = -1;\n    } catch {\n      // May not have access\n    }\n\n    // 4. List recent sync events\n    let recentEvents: Array<{ id: string; event: string; createdAt: string }> = [];\n    try {\n      const events = await client.sdk.events.listEvents({\n        events: ['dsync.user.created', 'dsync.user.updated', 'dsync.group.created'] as EventName[],\n        ...(directory.organizationId && { organizationId: directory.organizationId }),\n        limit: 5,\n      });\n      recentEvents = events.data.map((e) => ({ id: e.id, event: e.event, createdAt: e.createdAt }));\n    } catch {\n      // Events may not be available\n    }\n\n    if (recentEvents.length === 0) {\n      issues.push('No recent sync events found — sync may be stalled');\n    }\n\n    if (isJsonMode()) {\n      outputJson({\n        directory: {\n          id: directory.id,\n          name: directory.name,\n          type: directory.type,\n          state: directory.state,\n          organizationId: directory.organizationId,\n          createdAt: directory.createdAt,\n        },\n        userCount: userCount === -1 ? '1+' : userCount,\n        groupCount: groupCount === -1 ? '1+' : groupCount,\n        recentEvents,\n        issues,\n      });\n      return;\n    }\n\n    // 5. Human-readable diagnosis\n    console.log(chalk.bold(`Directory Sync: ${directory.name}`));\n    console.log(`  ID: ${directory.id}`);\n    console.log(`  Type: ${directory.type}`);\n    console.log(\n      `  State: ${String(directory.state) === 'linked' ? chalk.green('linked') : chalk.yellow(directory.state)}`,\n    );\n    console.log(`  Organization: ${directory.organizationId || chalk.dim('none')}`);\n    console.log(`  Users: ${userCount === -1 ? '1+' : userCount}`);\n    console.log(`  Groups: ${groupCount === -1 ? '1+' : groupCount}`);\n\n    if (recentEvents.length > 0) {\n      console.log(chalk.bold('\\nRecent sync events:'));\n      for (const event of recentEvents) {\n        console.log(`  ${event.event} (${event.createdAt})`);\n      }\n    } else {\n      console.log(chalk.dim('\\nNo recent sync events found.'));\n    }\n\n    if (issues.length > 0) {\n      console.log(chalk.bold('\\nIssues found:'));\n      for (const issue of issues) {\n        console.log(chalk.yellow(`  ⚠ ${issue}`));\n      }\n    } else {\n      console.log(chalk.green('\\nNo issues detected.'));\n    }\n  } catch (error) {\n    handleApiError(error);\n  }\n}\n"]}