workos 0.7.3 → 0.8.1

package/dist/lib/ensure-auth.js

@@ -1,11 +1,13 @@
 /**
  * Startup auth guard - ensures valid authentication before command execution.
  */
-import { getCredentials, updateTokens, hasCredentials, isTokenExpired } from './credentials.js';
+import { getCredentials, updateTokens, hasCredentials, isTokenExpired, clearCredentials } from './credentials.js';
 import { refreshAccessToken } from './token-refresh-client.js';
 import { getCliAuthClientId, getAuthkitDomain } from './settings.js';
 import { runLogin } from '../commands/login.js';
 import { logInfo } from '../utils/debug.js';
+import { isNonInteractiveEnvironment } from '../utils/environment.js';
+import { exitWithAuthRequired } from '../utils/exit-codes.js';
 /**
  * Ensure valid authentication before command execution.
  *
@@ -24,6 +26,9 @@ export async function ensureAuthenticated() {
     };
     // Case 1: No credentials at all
     if (!hasCredentials()) {
+        if (isNonInteractiveEnvironment()) {
+            exitWithAuthRequired();
+        }
         logInfo('[ensure-auth] No credentials found, triggering login');
         await runLogin();
         result.loginTriggered = true;
@@ -32,7 +37,11 @@ export async function ensureAuthenticated() {
     }
     const creds = getCredentials();
     if (!creds) {
-        // Credentials file exists but is invalid/empty
+        // Credentials file exists but is invalid/empty — clear stale data
+        clearCredentials();
+        if (isNonInteractiveEnvironment()) {
+            exitWithAuthRequired();
+        }
         logInfo('[ensure-auth] Invalid credentials file, triggering login');
         await runLogin();
         result.loginTriggered = true;
@@ -59,13 +68,21 @@ export async function ensureAuthenticated() {
             }
             // Refresh failed - check if it's recoverable
             if (refreshResult.errorType === 'invalid_grant') {
+                clearCredentials();
+                if (isNonInteractiveEnvironment()) {
+                    exitWithAuthRequired('Session expired. Run `workos login` in an interactive terminal to re-authenticate.');
+                }
                 logInfo('[ensure-auth] Refresh token expired, triggering login');
                 await runLogin();
                 result.loginTriggered = true;
                 result.authenticated = hasCredentials();
                 return result;
             }
-            // Network or server error - try login as fallback
+            // Network or server error - clear stale creds and try login as fallback
+            clearCredentials();
+            if (isNonInteractiveEnvironment()) {
+                exitWithAuthRequired(`Authentication refresh failed (${refreshResult.errorType}). Run \`workos login\` in an interactive terminal.`);
+            }
             logInfo(`[ensure-auth] Refresh failed (${refreshResult.errorType}), triggering login`);
             await runLogin();
             result.loginTriggered = true;
@@ -73,7 +90,11 @@ export async function ensureAuthenticated() {
             return result;
         }
     }
-    // Case 4: No refresh token available, must login
+    // Case 4: No refresh token available — clear stale creds, must login
+    clearCredentials();
+    if (isNonInteractiveEnvironment()) {
+        exitWithAuthRequired('Session expired. Run `workos login` in an interactive terminal to re-authenticate.');
+    }
     logInfo('[ensure-auth] No refresh token, triggering login');
     await runLogin();
     result.loginTriggered = true;

package/dist/lib/ensure-auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"ensure-auth.js","sourceRoot":"","sources":["../../src/lib/ensure-auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAW5C;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,MAAM,GAAqB;QAC/B,aAAa,EAAE,KAAK;QACpB,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,KAAK;KACtB,CAAC;IAEF,gCAAgC;IAChC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACtB,OAAO,CAAC,sDAAsD,CAAC,CAAC;QAChE,MAAM,QAAQ,EAAE,CAAC;QACjB,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,MAAM,CAAC,aAAa,GAAG,cAAc,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,+CAA+C;QAC/C,OAAO,CAAC,0DAA0D,CAAC,CAAC;QACpE,MAAM,QAAQ,EAAE,CAAC;QACjB,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,MAAM,CAAC,aAAa,GAAG,cAAc,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,mCAAmC;IACnC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,4CAA4C;IAC5C,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,OAAO,CAAC,wDAAwD,CAAC,CAAC;QAElE,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;QAEzC,IAAI,QAAQ,IAAI,aAAa,EAAE,CAAC;YAC9B,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YAExE,IAAI,aAAa,CAAC,OAAO,IAAI,aAAa,CAAC,WAAW,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;gBAClF,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,aAAa,CAAC,SAAS,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;gBAC7F,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC7B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC5B,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,6CAA6C;YAC7C,IAAI,aAAa,CAAC,SAAS,KAAK,eAAe,EAAE,CAAC;gBAChD,OAAO,CAAC,uDAAuD,CAAC,CAAC;gBACjE,MAAM,QAAQ,EAAE,CAAC;gBACjB,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC7B,MAAM,CAAC,aAAa,GAAG,cAAc,EAAE,CAAC;gBACxC,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,kDAAkD;YAClD,OAAO,CAAC,iCAAiC,aAAa,CAAC,SAAS,qBAAqB,CAAC,CAAC;YACvF,MAAM,QAAQ,EAAE,CAAC;YACjB,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;YAC7B,MAAM,CAAC,aAAa,GAAG,cAAc,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,OAAO,CAAC,kDAAkD,CAAC,CAAC;IAC5D,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,MAAM,CAAC,aAAa,GAAG,cAAc,EAAE,CAAC;IACxC,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/**\n * Startup auth guard - ensures valid authentication before command execution.\n */\n\nimport { getCredentials, updateTokens, hasCredentials, isTokenExpired } from './credentials.js';\nimport { refreshAccessToken } from './token-refresh-client.js';\nimport { getCliAuthClientId, getAuthkitDomain } from './settings.js';\nimport { runLogin } from '../commands/login.js';\nimport { logInfo } from '../utils/debug.js';\n\nexport interface EnsureAuthResult {\n  /** Whether auth is now valid */\n  authenticated: boolean;\n  /** Whether login flow was triggered */\n  loginTriggered: boolean;\n  /** Whether token was refreshed */\n  tokenRefreshed: boolean;\n}\n\n/**\n * Ensure valid authentication before command execution.\n *\n * - No credentials: triggers login flow\n * - Expired access token (valid refresh): silently refreshes\n * - Expired refresh token: triggers login flow\n *\n * @returns Result indicating what actions were taken\n * @throws Error if login fails or refresh fails unexpectedly\n */\nexport async function ensureAuthenticated(): Promise<EnsureAuthResult> {\n  const result: EnsureAuthResult = {\n    authenticated: false,\n    loginTriggered: false,\n    tokenRefreshed: false,\n  };\n\n  // Case 1: No credentials at all\n  if (!hasCredentials()) {\n    logInfo('[ensure-auth] No credentials found, triggering login');\n    await runLogin();\n    result.loginTriggered = true;\n    result.authenticated = hasCredentials();\n    return result;\n  }\n\n  const creds = getCredentials();\n  if (!creds) {\n    // Credentials file exists but is invalid/empty\n    logInfo('[ensure-auth] Invalid credentials file, triggering login');\n    await runLogin();\n    result.loginTriggered = true;\n    result.authenticated = hasCredentials();\n    return result;\n  }\n\n  // Case 2: Access token still valid\n  if (!isTokenExpired(creds)) {\n    result.authenticated = true;\n    return result;\n  }\n\n  // Case 3: Access token expired, try refresh\n  if (creds.refreshToken) {\n    logInfo('[ensure-auth] Access token expired, attempting refresh');\n\n    const clientId = getCliAuthClientId();\n    const authkitDomain = getAuthkitDomain();\n\n    if (clientId && authkitDomain) {\n      const refreshResult = await refreshAccessToken(authkitDomain, clientId);\n\n      if (refreshResult.success && refreshResult.accessToken && refreshResult.expiresAt) {\n        updateTokens(refreshResult.accessToken, refreshResult.expiresAt, refreshResult.refreshToken);\n        result.tokenRefreshed = true;\n        result.authenticated = true;\n        return result;\n      }\n\n      // Refresh failed - check if it's recoverable\n      if (refreshResult.errorType === 'invalid_grant') {\n        logInfo('[ensure-auth] Refresh token expired, triggering login');\n        await runLogin();\n        result.loginTriggered = true;\n        result.authenticated = hasCredentials();\n        return result;\n      }\n\n      // Network or server error - try login as fallback\n      logInfo(`[ensure-auth] Refresh failed (${refreshResult.errorType}), triggering login`);\n      await runLogin();\n      result.loginTriggered = true;\n      result.authenticated = hasCredentials();\n      return result;\n    }\n  }\n\n  // Case 4: No refresh token available, must login\n  logInfo('[ensure-auth] No refresh token, triggering login');\n  await runLogin();\n  result.loginTriggered = true;\n  result.authenticated = hasCredentials();\n  return result;\n}\n"]}
+{"version":3,"file":"ensure-auth.js","sourceRoot":"","sources":["../../src/lib/ensure-auth.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAClH,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAW9D;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,MAAM,GAAqB;QAC/B,aAAa,EAAE,KAAK;QACpB,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,KAAK;KACtB,CAAC;IAEF,gCAAgC;IAChC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACtB,IAAI,2BAA2B,EAAE,EAAE,CAAC;YAClC,oBAAoB,EAAE,CAAC;QACzB,CAAC;QACD,OAAO,CAAC,sDAAsD,CAAC,CAAC;QAChE,MAAM,QAAQ,EAAE,CAAC;QACjB,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,MAAM,CAAC,aAAa,GAAG,cAAc,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,kEAAkE;QAClE,gBAAgB,EAAE,CAAC;QACnB,IAAI,2BAA2B,EAAE,EAAE,CAAC;YAClC,oBAAoB,EAAE,CAAC;QACzB,CAAC;QACD,OAAO,CAAC,0DAA0D,CAAC,CAAC;QACpE,MAAM,QAAQ,EAAE,CAAC;QACjB,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,MAAM,CAAC,aAAa,GAAG,cAAc,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,mCAAmC;IACnC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;QAC5B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,4CAA4C;IAC5C,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,OAAO,CAAC,wDAAwD,CAAC,CAAC;QAElE,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;QAEzC,IAAI,QAAQ,IAAI,aAAa,EAAE,CAAC;YAC9B,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;YAExE,IAAI,aAAa,CAAC,OAAO,IAAI,aAAa,CAAC,WAAW,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;gBAClF,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,aAAa,CAAC,SAAS,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;gBAC7F,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC7B,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC5B,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,6CAA6C;YAC7C,IAAI,aAAa,CAAC,SAAS,KAAK,eAAe,EAAE,CAAC;gBAChD,gBAAgB,EAAE,CAAC;gBACnB,IAAI,2BAA2B,EAAE,EAAE,CAAC;oBAClC,oBAAoB,CAAC,oFAAoF,CAAC,CAAC;gBAC7G,CAAC;gBACD,OAAO,CAAC,uDAAuD,CAAC,CAAC;gBACjE,MAAM,QAAQ,EAAE,CAAC;gBACjB,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC7B,MAAM,CAAC,aAAa,GAAG,cAAc,EAAE,CAAC;gBACxC,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,wEAAwE;YACxE,gBAAgB,EAAE,CAAC;YACnB,IAAI,2BAA2B,EAAE,EAAE,CAAC;gBAClC,oBAAoB,CAClB,kCAAkC,aAAa,CAAC,SAAS,qDAAqD,CAC/G,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,iCAAiC,aAAa,CAAC,SAAS,qBAAqB,CAAC,CAAC;YACvF,MAAM,QAAQ,EAAE,CAAC;YACjB,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;YAC7B,MAAM,CAAC,aAAa,GAAG,cAAc,EAAE,CAAC;YACxC,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,gBAAgB,EAAE,CAAC;IACnB,IAAI,2BAA2B,EAAE,EAAE,CAAC;QAClC,oBAAoB,CAAC,oFAAoF,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,CAAC,kDAAkD,CAAC,CAAC;IAC5D,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;IAC7B,MAAM,CAAC,aAAa,GAAG,cAAc,EAAE,CAAC;IACxC,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["/**\n * Startup auth guard - ensures valid authentication before command execution.\n */\n\nimport { getCredentials, updateTokens, hasCredentials, isTokenExpired, clearCredentials } from './credentials.js';\nimport { refreshAccessToken } from './token-refresh-client.js';\nimport { getCliAuthClientId, getAuthkitDomain } from './settings.js';\nimport { runLogin } from '../commands/login.js';\nimport { logInfo } from '../utils/debug.js';\nimport { isNonInteractiveEnvironment } from '../utils/environment.js';\nimport { exitWithAuthRequired } from '../utils/exit-codes.js';\n\nexport interface EnsureAuthResult {\n  /** Whether auth is now valid */\n  authenticated: boolean;\n  /** Whether login flow was triggered */\n  loginTriggered: boolean;\n  /** Whether token was refreshed */\n  tokenRefreshed: boolean;\n}\n\n/**\n * Ensure valid authentication before command execution.\n *\n * - No credentials: triggers login flow\n * - Expired access token (valid refresh): silently refreshes\n * - Expired refresh token: triggers login flow\n *\n * @returns Result indicating what actions were taken\n * @throws Error if login fails or refresh fails unexpectedly\n */\nexport async function ensureAuthenticated(): Promise<EnsureAuthResult> {\n  const result: EnsureAuthResult = {\n    authenticated: false,\n    loginTriggered: false,\n    tokenRefreshed: false,\n  };\n\n  // Case 1: No credentials at all\n  if (!hasCredentials()) {\n    if (isNonInteractiveEnvironment()) {\n      exitWithAuthRequired();\n    }\n    logInfo('[ensure-auth] No credentials found, triggering login');\n    await runLogin();\n    result.loginTriggered = true;\n    result.authenticated = hasCredentials();\n    return result;\n  }\n\n  const creds = getCredentials();\n  if (!creds) {\n    // Credentials file exists but is invalid/empty — clear stale data\n    clearCredentials();\n    if (isNonInteractiveEnvironment()) {\n      exitWithAuthRequired();\n    }\n    logInfo('[ensure-auth] Invalid credentials file, triggering login');\n    await runLogin();\n    result.loginTriggered = true;\n    result.authenticated = hasCredentials();\n    return result;\n  }\n\n  // Case 2: Access token still valid\n  if (!isTokenExpired(creds)) {\n    result.authenticated = true;\n    return result;\n  }\n\n  // Case 3: Access token expired, try refresh\n  if (creds.refreshToken) {\n    logInfo('[ensure-auth] Access token expired, attempting refresh');\n\n    const clientId = getCliAuthClientId();\n    const authkitDomain = getAuthkitDomain();\n\n    if (clientId && authkitDomain) {\n      const refreshResult = await refreshAccessToken(authkitDomain, clientId);\n\n      if (refreshResult.success && refreshResult.accessToken && refreshResult.expiresAt) {\n        updateTokens(refreshResult.accessToken, refreshResult.expiresAt, refreshResult.refreshToken);\n        result.tokenRefreshed = true;\n        result.authenticated = true;\n        return result;\n      }\n\n      // Refresh failed - check if it's recoverable\n      if (refreshResult.errorType === 'invalid_grant') {\n        clearCredentials();\n        if (isNonInteractiveEnvironment()) {\n          exitWithAuthRequired('Session expired. Run `workos login` in an interactive terminal to re-authenticate.');\n        }\n        logInfo('[ensure-auth] Refresh token expired, triggering login');\n        await runLogin();\n        result.loginTriggered = true;\n        result.authenticated = hasCredentials();\n        return result;\n      }\n\n      // Network or server error - clear stale creds and try login as fallback\n      clearCredentials();\n      if (isNonInteractiveEnvironment()) {\n        exitWithAuthRequired(\n          `Authentication refresh failed (${refreshResult.errorType}). Run \\`workos login\\` in an interactive terminal.`,\n        );\n      }\n      logInfo(`[ensure-auth] Refresh failed (${refreshResult.errorType}), triggering login`);\n      await runLogin();\n      result.loginTriggered = true;\n      result.authenticated = hasCredentials();\n      return result;\n    }\n  }\n\n  // Case 4: No refresh token available — clear stale creds, must login\n  clearCredentials();\n  if (isNonInteractiveEnvironment()) {\n    exitWithAuthRequired('Session expired. Run `workos login` in an interactive terminal to re-authenticate.');\n  }\n  logInfo('[ensure-auth] No refresh token, triggering login');\n  await runLogin();\n  result.loginTriggered = true;\n  result.authenticated = hasCredentials();\n  return result;\n}\n"]}

package/dist/lib/installer-core.d.ts

@@ -38,7 +38,11 @@ export declare const installerMachine: import("xstate").StateMachine<InstallerMa
 } | {
     type: "PR_DECLINED";
 }, {
-    [x: string]: import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<boolean, {
+    [x: string]: import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<string, {
+        title: string;
+        body: string;
+        cwd: string;
+    }, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<boolean, {
         options: InstallerOptions;
     }, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<DetectionOutput, {
         options: InstallerOptions;
@@ -79,12 +83,16 @@ export declare const installerMachine: import("xstate").StateMachine<InstallerMa
         direct?: boolean;
     }, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<void, {
         cwd: string;
-    }, import("xstate").EventObject>> | import("xstate").ActorRefFromLogic<import("xstate").PromiseActorLogic<string, {
+    }, import("xstate").EventObject>> | undefined;
+}, {
+    src: "createPr";
+    logic: import("xstate").PromiseActorLogic<string, {
         title: string;
         body: string;
         cwd: string;
-    }, import("xstate").EventObject>> | undefined;
-}, {
+    }, import("xstate").EventObject>;
+    id: string | undefined;
+} | {
     src: "checkAuthentication";
     logic: import("xstate").PromiseActorLogic<boolean, {
         options: InstallerOptions;
@@ -193,14 +201,6 @@ export declare const installerMachine: import("xstate").StateMachine<InstallerMa
         cwd: string;
     }, import("xstate").EventObject>;
     id: string | undefined;
-} | {
-    src: "createPr";
-    logic: import("xstate").PromiseActorLogic<string, {
-        title: string;
-        body: string;
-        cwd: string;
-    }, import("xstate").EventObject>;
-    id: string | undefined;
 }, {
     type: "emitStateEnter";
     params: {

package/dist/lib/run-with-core.js

@@ -6,6 +6,7 @@ import { installerMachine } from './installer-core.js';
 import { createInstallerEventEmitter } from './events.js';
 import { CLIAdapter } from './adapters/cli-adapter.js';
 import { DashboardAdapter } from './adapters/dashboard-adapter.js';
+import { isNonInteractiveEnvironment } from '../utils/environment.js';
 import { parseEnvFile } from '../utils/env-parser.js';
 import { enableDebugLogs, initLogFile, logInfo, logError } from '../utils/debug.js';
 import { getAccessToken, getCredentials, saveCredentials, getStagingCredentials, saveStagingCredentials, } from './credentials.js';
@@ -148,9 +149,29 @@ export async function runWithCore(options) {
             actor.send(event);
         }
     };
-    const adapter = options.dashboard
-        ? new DashboardAdapter({ emitter, sendEvent, debug: augmentedOptions.debug })
-        : new CLIAdapter({ emitter, sendEvent, debug: augmentedOptions.debug });
+    let adapter;
+    if (isNonInteractiveEnvironment()) {
+        const { HeadlessAdapter } = await import('./adapters/headless-adapter.js');
+        adapter = new HeadlessAdapter({
+            emitter,
+            sendEvent,
+            debug: augmentedOptions.debug,
+            options: {
+                apiKey: augmentedOptions.apiKey,
+                clientId: augmentedOptions.clientId,
+                noBranch: augmentedOptions.noBranch,
+                noCommit: augmentedOptions.noCommit,
+                createPr: augmentedOptions.createPr,
+                noGitCheck: augmentedOptions.noGitCheck,
+            },
+        });
+    }
+    else if (options.dashboard) {
+        adapter = new DashboardAdapter({ emitter, sendEvent, debug: augmentedOptions.debug });
+    }
+    else {
+        adapter = new CLIAdapter({ emitter, sendEvent, debug: augmentedOptions.debug });
+    }
     const machineWithActors = installerMachine.provide({
         actors: {
             checkAuthentication: fromPromise(async () => {
@@ -379,7 +400,7 @@ export async function runWithCore(options) {
     });
     await adapter.start();
     // Start telemetry session
-    const mode = augmentedOptions.dashboard ? 'tui' : 'cli';
+    const mode = isNonInteractiveEnvironment() ? 'headless' : augmentedOptions.dashboard ? 'tui' : 'cli';
     analytics.sessionStart(mode, getVersion());
     let installerStatus = 'success';
     // Handle ctrl+c by sending CANCEL to state machine for graceful shutdown

package/dist/lib/run-with-core.js.map

@@ -1 +1 @@
-{"version":3,"file":"run-with-core.js","sourceRoot":"","sources":["../../src/lib/run-with-core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,IAAI,MAAM,KAAK,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAWnE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAEpF,OAAO,EACL,cAAc,EACd,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,uBAAuB,IAAI,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,IAAI,eAAe,EAC/B,YAAY,GAEb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,IAAI,aAAa,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAClH,OAAO,EACL,qBAAqB,IAAI,uBAAuB,EAChD,qBAAqB,IAAI,uBAAuB,GACjD,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,KAAK,UAAU,yBAAyB,CAAC,WAAwB,EAAE,OAAyB;IAC1F,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,cAAc,IAAI,SAAS;YAC3C,QAAQ,EAAE,OAAO,CAAC,gBAAgB,IAAI,SAAS;SAChD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,OAA6C;IAC9E,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;IAE1C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,oFAAoF;QACpF,iEAAiE;QACjE,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACrF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,uBAAuB,CACpC,WAAmB,EACnB,OAA6C;IAE7C,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACtE,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACzE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAE3C,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAEvB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAE1B,0CAA0C;IAC1C,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAErD,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,QAAQ;gBACX,OAAO,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAClD,KAAK,gBAAgB;gBACnB,OAAO,mBAAmB,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC;YACnE,KAAK,cAAc;gBACjB,OAAO,mBAAmB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YAC1D,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;gBAC3D,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBACzD,MAAM,cAAc,GAAG,mBAAmB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;gBACxE,MAAM,WAAW,GAAG,mBAAmB,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC;gBAC9E,MAAM,YAAY,GAAG,mBAAmB,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;gBACvE,OAAO,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC;YAClF,CAAC;YACD,KAAK,WAAW;gBACd,OAAO,mBAAmB,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;YAC3D,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBAC/D,MAAM,WAAW,GACf,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC;oBACxC,mBAAmB,CAAC,eAAe,EAAE,WAAW,CAAC;oBACjD,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC;oBACzC,mBAAmB,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC;gBAC5D,OAAO,UAAU,IAAI,CAAC,WAAW,CAAC;YACpC,CAAC;YACD,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,CAAC,WAAW;YAC1B;gBACE,sDAAsD;gBACtD,OAAO,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QACjC,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAyB;IACzD,4DAA4D;IAC5D,WAAW,EAAE,CAAC;IACd,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,eAAe,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,CAAC,+BAA+B,EAAE;QACvC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IAEH,yDAAyD;IACzD,MAAM,UAAU,GAAG,wBAAwB,EAAE,CAAC;IAC9C,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAEpC,MAAM,aAAa,GAAG,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAqB;QACzC,GAAG,OAAO;QACV,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM;QAC9C,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC,QAAQ;KACrD,CAAC;IAEF,MAAM,OAAO,GAAG,2BAA2B,EAAE,CAAC;IAC9C,IAAI,KAAK,GAAmE,IAAI,CAAC;IAEjF,MAAM,SAAS,GAAG,CAAC,KAA+C,EAAE,EAAE;QACpE,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,KAAyC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAqB,OAAO,CAAC,SAAS;QACjD,CAAC,CAAC,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC7E,CAAC,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC;IAE1E,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,OAAO,CAAC;QACjD,MAAM,EAAE;YACN,mBAAmB,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;gBAC1C,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,4DAA4D;oBAC5D,gDAAgD;oBAChD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBAClE,CAAC;gBAED,0CAA0C;gBAC1C,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC/B,IAAI,KAAK,EAAE,CAAC;oBACV,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;oBAC5C,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACxC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;YAEF,iBAAiB,EAAE,WAAW,CAAiD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACjG,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;gBACxF,OAAO,EAAE,WAAW,EAAE,CAAC;YACzB,CAAC,CAAC;YAEF,cAAc,EAAE,WAAW,CAAyC,KAAK,IAAI,EAAE;gBAC7E,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;gBACtC,CAAC;gBACD,MAAM,KAAK,GAAG,8BAA8B,EAAE,CAAC;gBAC/C,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;YAChD,CAAC,CAAC;YAEF,oBAAoB,EAAE,WAAW,CAA6C,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAChG,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;gBAC1B,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;gBAExE,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACxD,CAAC;gBAED,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBAClE,MAAM,YAAY,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;gBAClD,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,IAAI,oBAAoB,IAAI,GAAG,YAAY,EAAE,CAAC;gBAE9F,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAC1F,IAAI,WAAW,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC;oBACzC,MAAM,8BAA8B,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE;wBAC1E,WAAW,EAAE,gBAAgB,CAAC,WAAW;wBACzC,WAAW,EAAE,gBAAgB,CAAC,WAAW;qBAC1C,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,cAAc,GAAG,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,qBAAqB,CAAC;gBAE5G,aAAa,CAAC,gBAAgB,CAAC,UAAU,EAAE;oBACzC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrE,gBAAgB,EAAE,WAAW,CAAC,QAAQ;oBACtC,CAAC,cAAc,CAAC,EAAE,WAAW;iBAC9B,CAAC,CAAC;YACL,CAAC,CAAC;YAEF,QAAQ,EAAE,WAAW,CAAoD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC3F,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;gBAC1B,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;gBAExE,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC;gBAC1E,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,YAAY,GAAqB;wBACrC,GAAG,gBAAgB;wBACnB,MAAM,EAAE,WAAW,EAAE,MAAM;wBAC3B,QAAQ,EAAE,WAAW,EAAE,QAAQ;wBAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;qBACzB,CAAC;oBACF,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;oBAC3E,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,OAAO,IAAI,6CAA6C,WAAW,GAAG;qBAChF,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;qBACjE,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC;YAEF,8BAA8B;YAC9B,cAAc,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC9C,OAAO,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC5C,CAAC,CAAC;YAEF,YAAY,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC5C,OAAO,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/C,CAAC,CAAC;YAEF,eAAe,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;gBACtC,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC/B,OAAO,KAAK,KAAK,IAAI,CAAC;YACxB,CAAC,CAAC;YAEF,aAAa,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC7C,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;gBACtC,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;gBAEzC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;gBAC7F,CAAC;gBAED,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC;oBACzC,QAAQ;oBACR,aAAa;iBACd,CAAC,CAAC;gBAEH,mDAAmD;gBACnD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE;oBACnC,eAAe,EAAE,UAAU,CAAC,gBAAgB;oBAC5C,uBAAuB,EAAE,UAAU,CAAC,yBAAyB;oBAC7D,QAAQ,EAAE,UAAU,CAAC,SAAS;iBAC/B,CAAC,CAAC;gBAEH,eAAe;gBACf,IAAI,CAAC;oBACH,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;oBAChD,MAAM,MAAM,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,WAAW,EAAE;oBACxD,QAAQ;oBACR,aAAa;oBACb,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;iBACvD,CAAC,CAAC;gBAEH,sBAAsB;gBACtB,eAAe,CAAC;oBACd,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;iBACpB,CAAC,CAAC;gBAEH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAChC,CAAC,CAAC;YAEF,uBAAuB,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;gBAC9C,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;gBACzC,IAAI,SAAS,EAAE,QAAQ,IAAI,SAAS,EAAE,MAAM,EAAE,CAAC;oBAC7C,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;gBACpE,CAAC;gBAED,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;gBACvC,IAAI,MAAM;oBAAE,OAAO,MAAM,CAAC;gBAE1B,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC/B,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAEzD,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;gBACxD,sBAAsB,CAAC,OAAO,CAAC,CAAC;gBAEhC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;oBACnD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;wBACpC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG;4BAC/B,IAAI,EAAE,SAAS;4BACf,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;4BACtE,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;yBAC3B,CAAC;wBACF,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;4BAC9B,MAAM,CAAC,iBAAiB,GAAG,SAAS,CAAC;wBACvC,CAAC;wBACD,UAAU,CAAC,MAAM,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,kDAAkD;gBACpD,CAAC;gBAED,OAAO,OAAO,CAAC;YACjB,CAAC,CAAC;YAEF,sBAAsB;YACtB,WAAW,EAAE,WAAW,CAA0B,KAAK,IAAI,EAAE;gBAC3D,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBAClC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;gBAC9C,CAAC;gBACD,OAAO;oBACL,MAAM;oBACN,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC;iBACvC,CAAC;YACJ,CAAC,CAAC;YAEF,YAAY,EAAE,WAAW,CAA6D,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACxG,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;gBACrC,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC9D,eAAe,CAAC,YAAY,CAAC,CAAC;gBAC9B,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YAClC,CAAC,CAAC;YAEF,sBAAsB;YACtB,aAAa,EAAE,WAAW,CAAiD,KAAK,IAAI,EAAE;gBACpF,OAAO,aAAa,EAAE,CAAC;YACzB,CAAC,CAAC;YAEF,qBAAqB,EAAE,WAAW,CAChC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAClB,OAAO,uBAAuB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3F,CAAC,CACF;YAED,aAAa,EAAE,WAAW,CAAyC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACrF,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3C,CAAC,CAAC;YAEF,qBAAqB,EAAE,WAAW,CAGhC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACpB,OAAO,uBAAuB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAChH,CAAC,CAAC;YAEF,UAAU,EAAE,WAAW,CAAwB,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACjE,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC,CAAC;YAEF,QAAQ,EAAE,WAAW,CAAuD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC9F,OAAO,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/D,CAAC,CAAC;SACH;KACF,CAAC,CAAC;IAEH,8DAA8D;IAC9D,IAAI,SAAuC,CAAC;IAC5C,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;QAChC,IAAI,UAA8B,CAAC;QAEnC,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAAE,CAAC;gBAC7E,UAAU,GAAG,GAAG,CAAC;gBACjB,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,6BAA6B,UAAU,EAAE,CAAC,CAAC;gBACvD,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACnC,CAAC;QACH,CAAC,CAAC;QAEF,yDAAyD;QACzD,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAClE,SAAS,GAAG,kBAAkB,EAAE,CAAC;QACjC,UAAU,CAAC,GAAG,EAAE;YACd,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;QAC5B,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,GAAG,WAAW,CAAC,iBAAiB,EAAE;QACrC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE;QAC7C,OAAO,EAAE,SAAS,EAAE,OAAO;KAC5B,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IAEtB,0BAA0B;IAC1B,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACxD,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAE3C,IAAI,eAAe,GAAsC,SAAS,CAAC;IAEnE,yEAAyE;IACzE,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,eAAe,GAAG,WAAW,CAAC;QAC9B,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,KAAM,CAAC,SAAS,CAAC;gBACf,QAAQ,EAAE,GAAG,EAAE;oBACb,MAAM,QAAQ,GAAG,KAAM,CAAC,WAAW,EAAE,CAAC;oBACtC,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;wBAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;wBACnC,eAAe,GAAG,OAAO,CAAC;wBAC1B,MAAM,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;oBAC5C,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;wBAC1C,eAAe,GAAG,WAAW,CAAC;wBAC9B,OAAO,EAAE,CAAC;oBACZ,CAAC;yBAAM,CAAC;wBACN,OAAO,EAAE,CAAC;oBACZ,CAAC;gBACH,CAAC;gBACD,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;oBACb,eAAe,GAAG,OAAO,CAAC;oBAC1B,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC;aACF,CAAC,CAAC;YAEH,KAAM,CAAC,KAAK,EAAE,CAAC;YACf,KAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAe,GAAG,OAAO,CAAC;QAC1B,QAAQ,CAAC,2BAA2B,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7G,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACpC,MAAM,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC1C,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;AACH,CAAC","sourcesContent":["import { createActor, fromPromise } from 'xstate';\nimport open from 'opn';\nimport { existsSync, readFileSync } from 'fs';\nimport { join } from 'path';\nimport { installerMachine } from './installer-core.js';\nimport { createInstallerEventEmitter } from './events.js';\nimport { CLIAdapter } from './adapters/cli-adapter.js';\nimport { DashboardAdapter } from './adapters/dashboard-adapter.js';\nimport type { InstallerAdapter } from './adapters/types.js';\nimport type { InstallerOptions } from '../utils/types.js';\nimport type {\n  InstallerMachineContext,\n  DetectionOutput,\n  GitCheckOutput,\n  AgentOutput,\n  BranchCheckOutput,\n} from './installer-core.types.js';\nimport type { Integration } from './constants.js';\nimport { parseEnvFile } from '../utils/env-parser.js';\nimport { enableDebugLogs, initLogFile, logInfo, logError } from '../utils/debug.js';\n\nimport {\n  getAccessToken,\n  getCredentials,\n  saveCredentials,\n  getStagingCredentials,\n  saveStagingCredentials,\n} from './credentials.js';\nimport { getConfig, saveConfig, getActiveEnvironment } from './config-store.js';\nimport { checkForEnvFiles, discoverCredentials } from './credential-discovery.js';\nimport { requestDeviceCode, pollForToken } from './device-auth.js';\nimport { fetchStagingCredentials as fetchStagingCredentialsApi } from './staging-api.js';\nimport { getCliAuthClientId, getAuthkitDomain } from './settings.js';\nimport { analytics } from '../utils/analytics.js';\nimport { getVersion } from './settings.js';\nimport { getLlmGatewayUrlFromHost } from '../utils/urls.js';\nimport { isInGitRepo, getUncommittedOrUntrackedFiles } from '../utils/clack-utils.js';\nimport {\n  getCurrentBranch,\n  isProtectedBranch,\n  createBranch as createGitBranch,\n  branchExists,\n  hasGhCli,\n} from '../utils/git-utils.js';\nimport { detectChanges, stageAndCommit, pushBranch as pushGitBranch, createPullRequest } from './post-install.js';\nimport {\n  generateCommitMessage as generateCommitMessageAi,\n  generatePrDescription as generatePrDescriptionAi,\n} from './ai-content.js';\nimport { autoConfigureWorkOSEnvironment } from './workos-management.js';\nimport { detectPort, getCallbackPath } from './port-detection.js';\nimport { writeEnvLocal } from './env-writer.js';\nimport { getRegistry } from './registry.js';\n\nasync function runIntegrationInstallerFn(integration: Integration, options: InstallerOptions): Promise<string> {\n  const registry = await getRegistry();\n  const mod = registry.get(integration);\n  if (!mod) {\n    throw new Error(`Unknown integration: ${integration}`);\n  }\n  return mod.run(options);\n}\n\nfunction readExistingCredentials(installDir: string): { apiKey?: string; clientId?: string } {\n  const envPath = join(installDir, '.env.local');\n  if (!existsSync(envPath)) {\n    return {};\n  }\n\n  try {\n    const content = readFileSync(envPath, 'utf-8');\n    const envVars = parseEnvFile(content);\n    return {\n      apiKey: envVars.WORKOS_API_KEY || undefined,\n      clientId: envVars.WORKOS_CLIENT_ID || undefined,\n    };\n  } catch {\n    return {};\n  }\n}\n\nasync function detectIntegrationFn(options: Pick<InstallerOptions, 'installDir'>): Promise<Integration | undefined> {\n  const registry = await getRegistry();\n  const configs = registry.detectionOrder();\n\n  for (const config of configs) {\n    // Use the detect function from INTEGRATION_CONFIG in config.ts for JS integrations,\n    // or fall back to checking if the framework package is installed\n    const detected = await detectSingleIntegration(config.metadata.integration, options);\n    if (detected) {\n      return config.metadata.integration;\n    }\n  }\n  return undefined;\n}\n\n/**\n * Detect if a single integration matches the project.\n * Uses package.json detection for JS integrations, manifest files for others.\n */\nasync function detectSingleIntegration(\n  integration: string,\n  options: Pick<InstallerOptions, 'installDir'>,\n): Promise<boolean> {\n  const { getPackageDotJson } = await import('../utils/clack-utils.js');\n  const { hasPackageInstalled } = await import('../utils/package-json.js');\n  const { existsSync } = await import('node:fs');\n  const { join } = await import('node:path');\n\n  const registry = await getRegistry();\n  const mod = registry.get(integration);\n  if (!mod) return false;\n\n  const config = mod.config;\n\n  // For JS integrations, check package.json\n  if (config.metadata.language === 'javascript') {\n    const packageJson = await getPackageDotJson(options);\n\n    switch (integration) {\n      case 'nextjs':\n        return hasPackageInstalled('next', packageJson);\n      case 'tanstack-start':\n        return hasPackageInstalled('@tanstack/react-start', packageJson);\n      case 'react-router':\n        return hasPackageInstalled('react-router', packageJson);\n      case 'react': {\n        const hasReact = hasPackageInstalled('react', packageJson);\n        const hasNext = hasPackageInstalled('next', packageJson);\n        const hasReactRouter = hasPackageInstalled('react-router', packageJson);\n        const hasTanstack = hasPackageInstalled('@tanstack/react-start', packageJson);\n        const hasSvelteKit = hasPackageInstalled('@sveltejs/kit', packageJson);\n        return hasReact && !hasNext && !hasReactRouter && !hasTanstack && !hasSvelteKit;\n      }\n      case 'sveltekit':\n        return hasPackageInstalled('@sveltejs/kit', packageJson);\n      case 'node': {\n        const hasExpress = hasPackageInstalled('express', packageJson);\n        const hasFrontend =\n          hasPackageInstalled('next', packageJson) ||\n          hasPackageInstalled('@sveltejs/kit', packageJson) ||\n          hasPackageInstalled('react', packageJson) ||\n          hasPackageInstalled('@tanstack/react-start', packageJson);\n        return hasExpress && !hasFrontend;\n      }\n      case 'vanilla-js':\n        return true; // Fallback\n      default:\n        // Unknown JS integration — try package name detection\n        return hasPackageInstalled(config.detection.packageName, packageJson);\n    }\n  }\n\n  // For non-JS integrations, check manifest files\n  if (config.metadata.manifestFile) {\n    return existsSync(join(options.installDir, config.metadata.manifestFile));\n  }\n\n  return false;\n}\n\nexport async function runWithCore(options: InstallerOptions): Promise<void> {\n  // Initialize debug/logging early so we capture all failures\n  initLogFile();\n  if (options.debug) {\n    enableDebugLogs();\n  }\n  logInfo('Wizard starting with options:', {\n    debug: options.debug,\n    dashboard: options.dashboard,\n    local: options.local,\n    ci: options.ci,\n    skipAuth: options.skipAuth,\n    installDir: options.installDir,\n  });\n\n  // Configure telemetry endpoint (same URL as LLM gateway)\n  const gatewayUrl = getLlmGatewayUrlFromHost();\n  analytics.setGatewayUrl(gatewayUrl);\n\n  const existingCreds = readExistingCredentials(options.installDir);\n  const augmentedOptions: InstallerOptions = {\n    ...options,\n    apiKey: options.apiKey || existingCreds.apiKey,\n    clientId: options.clientId || existingCreds.clientId,\n  };\n\n  const emitter = createInstallerEventEmitter();\n  let actor: ReturnType<typeof createActor<typeof installerMachine>> | null = null;\n\n  const sendEvent = (event: { type: string; [key: string]: unknown }) => {\n    if (actor) {\n      actor.send(event as Parameters<typeof actor.send>[0]);\n    }\n  };\n\n  const adapter: InstallerAdapter = options.dashboard\n    ? new DashboardAdapter({ emitter, sendEvent, debug: augmentedOptions.debug })\n    : new CLIAdapter({ emitter, sendEvent, debug: augmentedOptions.debug });\n\n  const machineWithActors = installerMachine.provide({\n    actors: {\n      checkAuthentication: fromPromise(async () => {\n        const token = getAccessToken();\n        if (!token) {\n          // This should rarely happen since bin.ts handles auth first\n          // But keep as safety net for programmatic usage\n          throw new Error('Not authenticated. Run `workos login` first.');\n        }\n\n        // Set telemetry from existing credentials\n        const creds = getCredentials();\n        if (creds) {\n          analytics.setAccessToken(creds.accessToken);\n          analytics.setDistinctId(creds.userId);\n        }\n        return true;\n      }),\n\n      detectIntegration: fromPromise<DetectionOutput, { options: InstallerOptions }>(async ({ input }) => {\n        const integration = await detectIntegrationFn({ installDir: input.options.installDir });\n        return { integration };\n      }),\n\n      checkGitStatus: fromPromise<GitCheckOutput, { installDir: string }>(async () => {\n        if (!isInGitRepo()) {\n          return { isClean: true, files: [] };\n        }\n        const files = getUncommittedOrUntrackedFiles();\n        return { isClean: files.length === 0, files };\n      }),\n\n      configureEnvironment: fromPromise<void, { context: InstallerMachineContext }>(async ({ input }) => {\n        const { context } = input;\n        const { options: installerOptions, integration, credentials } = context;\n\n        if (!integration || !credentials) {\n          throw new Error('Missing integration or credentials');\n        }\n\n        const port = detectPort(integration, installerOptions.installDir);\n        const callbackPath = getCallbackPath(integration);\n        const redirectUri = installerOptions.redirectUri || `http://localhost:${port}${callbackPath}`;\n\n        const requiresApiKey = ['nextjs', 'tanstack-start', 'react-router'].includes(integration);\n        if (credentials.apiKey && requiresApiKey) {\n          await autoConfigureWorkOSEnvironment(credentials.apiKey, integration, port, {\n            homepageUrl: installerOptions.homepageUrl,\n            redirectUri: installerOptions.redirectUri,\n          });\n        }\n\n        const redirectUriKey = integration === 'nextjs' ? 'NEXT_PUBLIC_WORKOS_REDIRECT_URI' : 'WORKOS_REDIRECT_URI';\n\n        writeEnvLocal(installerOptions.installDir, {\n          ...(credentials.apiKey ? { WORKOS_API_KEY: credentials.apiKey } : {}),\n          WORKOS_CLIENT_ID: credentials.clientId,\n          [redirectUriKey]: redirectUri,\n        });\n      }),\n\n      runAgent: fromPromise<AgentOutput, { context: InstallerMachineContext }>(async ({ input }) => {\n        const { context } = input;\n        const { options: installerOptions, integration, credentials } = context;\n\n        if (!integration) {\n          return { success: false, error: new Error('No integration specified') };\n        }\n\n        try {\n          const agentOptions: InstallerOptions = {\n            ...installerOptions,\n            apiKey: credentials?.apiKey,\n            clientId: credentials?.clientId,\n            emitter: context.emitter,\n          };\n          const summary = await runIntegrationInstallerFn(integration, agentOptions);\n          return {\n            success: true,\n            summary: summary || `Successfully installed WorkOS AuthKit for ${integration}!`,\n          };\n        } catch (error) {\n          return {\n            success: false,\n            error: error instanceof Error ? error : new Error(String(error)),\n          };\n        }\n      }),\n\n      // Credential discovery actors\n      detectEnvFiles: fromPromise(async ({ input }) => {\n        return checkForEnvFiles(input.installDir);\n      }),\n\n      scanEnvFiles: fromPromise(async ({ input }) => {\n        return discoverCredentials(input.installDir);\n      }),\n\n      checkStoredAuth: fromPromise(async () => {\n        const token = getAccessToken();\n        return token !== null;\n      }),\n\n      runDeviceAuth: fromPromise(async ({ input }) => {\n        const clientId = getCliAuthClientId();\n        const authkitDomain = getAuthkitDomain();\n\n        if (!clientId) {\n          throw new Error('CLI auth not configured. Set WORKOS_CLI_CLIENT_ID environment variable.');\n        }\n\n        const deviceAuth = await requestDeviceCode({\n          clientId,\n          authkitDomain,\n        });\n\n        // Emit device started event with verification info\n        input.emitter.emit('device:started', {\n          verificationUri: deviceAuth.verification_uri,\n          verificationUriComplete: deviceAuth.verification_uri_complete,\n          userCode: deviceAuth.user_code,\n        });\n\n        // Open browser\n        try {\n          const { default: openFn } = await import('opn');\n          await openFn(deviceAuth.verification_uri_complete);\n        } catch {\n          // User can open manually\n        }\n\n        const result = await pollForToken(deviceAuth.device_code, {\n          clientId,\n          authkitDomain,\n          interval: deviceAuth.interval,\n          onPoll: () => input.emitter.emit('device:polling', {}),\n        });\n\n        // Save the auth token\n        saveCredentials({\n          accessToken: result.accessToken,\n          expiresAt: result.expiresAt,\n          userId: result.userId,\n          email: result.email,\n        });\n\n        return { result, deviceAuth };\n      }),\n\n      fetchStagingCredentials: fromPromise(async () => {\n        const activeEnv = getActiveEnvironment();\n        if (activeEnv?.clientId && activeEnv?.apiKey) {\n          return { clientId: activeEnv.clientId, apiKey: activeEnv.apiKey };\n        }\n\n        const cached = getStagingCredentials();\n        if (cached) return cached;\n\n        const token = getAccessToken();\n        if (!token) throw new Error('No access token available');\n\n        const staging = await fetchStagingCredentialsApi(token);\n        saveStagingCredentials(staging);\n\n        try {\n          const config = getConfig() ?? { environments: {} };\n          if (!config.environments['default']) {\n            config.environments['default'] = {\n              name: 'default',\n              type: staging.apiKey.startsWith('sk_test_') ? 'sandbox' : 'production',\n              apiKey: staging.apiKey,\n              clientId: staging.clientId,\n            };\n            if (!config.activeEnvironment) {\n              config.activeEnvironment = 'default';\n            }\n            saveConfig(config);\n          }\n        } catch {\n          // Don't block install if config-store write fails\n        }\n\n        return staging;\n      }),\n\n      // Branch check actors\n      checkBranch: fromPromise<BranchCheckOutput, void>(async () => {\n        const branch = getCurrentBranch();\n        if (!branch) {\n          return { branch: null, isProtected: false };\n        }\n        return {\n          branch,\n          isProtected: isProtectedBranch(branch),\n        };\n      }),\n\n      createBranch: fromPromise<{ branch: string }, { name: string; fallbackName: string }>(async ({ input }) => {\n        const { name, fallbackName } = input;\n        const targetBranch = branchExists(name) ? fallbackName : name;\n        createGitBranch(targetBranch);\n        return { branch: targetBranch };\n      }),\n\n      // Post-install actors\n      detectChanges: fromPromise<{ hasChanges: boolean; files: string[] }, void>(async () => {\n        return detectChanges();\n      }),\n\n      generateCommitMessage: fromPromise<string, { integration: string; files: string[]; direct?: boolean }>(\n        async ({ input }) => {\n          return generateCommitMessageAi(input.integration, input.files, { direct: input.direct });\n        },\n      ),\n\n      commitChanges: fromPromise<void, { message: string; cwd: string }>(async ({ input }) => {\n        stageAndCommit(input.message, input.cwd);\n      }),\n\n      generatePrDescription: fromPromise<\n        string,\n        { integration: string; files: string[]; commitMessage: string; direct?: boolean }\n      >(async ({ input }) => {\n        return generatePrDescriptionAi(input.integration, input.files, input.commitMessage, { direct: input.direct });\n      }),\n\n      pushBranch: fromPromise<void, { cwd: string }>(async ({ input }) => {\n        pushGitBranch(input.cwd);\n      }),\n\n      createPr: fromPromise<string, { title: string; body: string; cwd: string }>(async ({ input }) => {\n        return createPullRequest(input.title, input.body, input.cwd);\n      }),\n    },\n  });\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  let inspector: { inspect: any } | undefined;\n  if (augmentedOptions.inspect) {\n    const originalLog = console.log;\n    let inspectUrl: string | undefined;\n\n    console.log = (...args: unknown[]) => {\n      const msg = args.join(' ');\n      if (typeof msg === 'string' && msg.startsWith('https://stately.ai/inspect/')) {\n        inspectUrl = msg;\n        console.log = originalLog;\n        console.log(`Opening XState inspector: ${inspectUrl}`);\n        void open(inspectUrl);\n      } else {\n        originalLog.apply(console, args);\n      }\n    };\n\n    // Dynamic import - @statelyai/inspect is a devDependency\n    const { createSkyInspector } = await import('@statelyai/inspect');\n    inspector = createSkyInspector();\n    setTimeout(() => {\n      console.log = originalLog;\n    }, 5000).unref();\n  }\n\n  actor = createActor(machineWithActors, {\n    input: { emitter, options: augmentedOptions },\n    inspect: inspector?.inspect,\n  });\n\n  await adapter.start();\n\n  // Start telemetry session\n  const mode = augmentedOptions.dashboard ? 'tui' : 'cli';\n  analytics.sessionStart(mode, getVersion());\n\n  let installerStatus: 'success' | 'error' | 'cancelled' = 'success';\n\n  // Handle ctrl+c by sending CANCEL to state machine for graceful shutdown\n  const handleSigint = () => {\n    installerStatus = 'cancelled';\n    actor?.send({ type: 'CANCEL' });\n  };\n  process.on('SIGINT', handleSigint);\n\n  try {\n    await new Promise<void>((resolve, reject) => {\n      actor!.subscribe({\n        complete: () => {\n          const snapshot = actor!.getSnapshot();\n          if (snapshot.value === 'error') {\n            const err = snapshot.context.error;\n            installerStatus = 'error';\n            reject(err ?? new Error('Wizard failed'));\n          } else if (snapshot.value === 'cancelled') {\n            installerStatus = 'cancelled';\n            resolve();\n          } else {\n            resolve();\n          }\n        },\n        error: (err) => {\n          installerStatus = 'error';\n          reject(err);\n        },\n      });\n\n      actor!.start();\n      actor!.send({ type: 'START' });\n    });\n  } catch (error) {\n    installerStatus = 'error';\n    logError('Wizard failed with error:', error instanceof Error ? error.stack || error.message : String(error));\n    throw error;\n  } finally {\n    process.off('SIGINT', handleSigint);\n    await analytics.shutdown(installerStatus);\n    await adapter.stop();\n  }\n}\n"]}
+{"version":3,"file":"run-with-core.js","sourceRoot":"","sources":["../../src/lib/run-with-core.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,IAAI,MAAM,KAAK,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAStE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAEpF,OAAO,EACL,cAAc,EACd,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAChF,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,uBAAuB,IAAI,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AACtF,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,IAAI,eAAe,EAC/B,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,IAAI,aAAa,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAClH,OAAO,EACL,qBAAqB,IAAI,uBAAuB,EAChD,qBAAqB,IAAI,uBAAuB,GACjD,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,KAAK,UAAU,yBAAyB,CAAC,WAAwB,EAAE,OAAyB;IAC1F,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,cAAc,IAAI,SAAS;YAC3C,QAAQ,EAAE,OAAO,CAAC,gBAAgB,IAAI,SAAS;SAChD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,OAA6C;IAC9E,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;IAE1C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,oFAAoF;QACpF,iEAAiE;QACjE,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACrF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,uBAAuB,CACpC,WAAmB,EACnB,OAA6C;IAE7C,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACtE,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IACzE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAE3C,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAEvB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAE1B,0CAA0C;IAC1C,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAErD,QAAQ,WAAW,EAAE,CAAC;YACpB,KAAK,QAAQ;gBACX,OAAO,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;YAClD,KAAK,gBAAgB;gBACnB,OAAO,mBAAmB,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC;YACnE,KAAK,cAAc;gBACjB,OAAO,mBAAmB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;YAC1D,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;gBAC3D,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;gBACzD,MAAM,cAAc,GAAG,mBAAmB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;gBACxE,MAAM,WAAW,GAAG,mBAAmB,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC;gBAC9E,MAAM,YAAY,GAAG,mBAAmB,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;gBACvE,OAAO,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,cAAc,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC;YAClF,CAAC;YACD,KAAK,WAAW;gBACd,OAAO,mBAAmB,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;YAC3D,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBAC/D,MAAM,WAAW,GACf,mBAAmB,CAAC,MAAM,EAAE,WAAW,CAAC;oBACxC,mBAAmB,CAAC,eAAe,EAAE,WAAW,CAAC;oBACjD,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC;oBACzC,mBAAmB,CAAC,uBAAuB,EAAE,WAAW,CAAC,CAAC;gBAC5D,OAAO,UAAU,IAAI,CAAC,WAAW,CAAC;YACpC,CAAC;YACD,KAAK,YAAY;gBACf,OAAO,IAAI,CAAC,CAAC,WAAW;YAC1B;gBACE,sDAAsD;gBACtD,OAAO,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QACjC,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAyB;IACzD,4DAA4D;IAC5D,WAAW,EAAE,CAAC;IACd,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,eAAe,EAAE,CAAC;IACpB,CAAC;IACD,OAAO,CAAC,+BAA+B,EAAE;QACvC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IAEH,yDAAyD;IACzD,MAAM,UAAU,GAAG,wBAAwB,EAAE,CAAC;IAC9C,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAEpC,MAAM,aAAa,GAAG,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClE,MAAM,gBAAgB,GAAqB;QACzC,GAAG,OAAO;QACV,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,MAAM;QAC9C,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,aAAa,CAAC,QAAQ;KACrD,CAAC;IAEF,MAAM,OAAO,GAAG,2BAA2B,EAAE,CAAC;IAC9C,IAAI,KAAK,GAAmE,IAAI,CAAC;IAEjF,MAAM,SAAS,GAAG,CAAC,KAA+C,EAAE,EAAE;QACpE,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,KAAyC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,OAAyB,CAAC;IAC9B,IAAI,2BAA2B,EAAE,EAAE,CAAC;QAClC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,gCAAgC,CAAC,CAAC;QAC3E,OAAO,GAAG,IAAI,eAAe,CAAC;YAC5B,OAAO;YACP,SAAS;YACT,KAAK,EAAE,gBAAgB,CAAC,KAAK;YAC7B,OAAO,EAAE;gBACP,MAAM,EAAE,gBAAgB,CAAC,MAAM;gBAC/B,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;gBACnC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;gBACnC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;gBACnC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;gBACnC,UAAU,EAAE,gBAAgB,CAAC,UAAU;aACxC;SACF,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QAC7B,OAAO,GAAG,IAAI,gBAAgB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,OAAO,CAAC;QACjD,MAAM,EAAE;YACN,mBAAmB,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;gBAC1C,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,4DAA4D;oBAC5D,gDAAgD;oBAChD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBAClE,CAAC;gBAED,0CAA0C;gBAC1C,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC/B,IAAI,KAAK,EAAE,CAAC;oBACV,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;oBAC5C,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACxC,CAAC;gBACD,OAAO,IAAI,CAAC;YACd,CAAC,CAAC;YAEF,iBAAiB,EAAE,WAAW,CAAiD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACjG,MAAM,WAAW,GAAG,MAAM,mBAAmB,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;gBACxF,OAAO,EAAE,WAAW,EAAE,CAAC;YACzB,CAAC,CAAC;YAEF,cAAc,EAAE,WAAW,CAAyC,KAAK,IAAI,EAAE;gBAC7E,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;gBACtC,CAAC;gBACD,MAAM,KAAK,GAAG,8BAA8B,EAAE,CAAC;gBAC/C,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;YAChD,CAAC,CAAC;YAEF,oBAAoB,EAAE,WAAW,CAA6C,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAChG,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;gBAC1B,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;gBAExE,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACxD,CAAC;gBAED,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBAClE,MAAM,YAAY,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;gBAClD,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,IAAI,oBAAoB,IAAI,GAAG,YAAY,EAAE,CAAC;gBAE9F,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBAC1F,IAAI,WAAW,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC;oBACzC,MAAM,8BAA8B,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE;wBAC1E,WAAW,EAAE,gBAAgB,CAAC,WAAW;wBACzC,WAAW,EAAE,gBAAgB,CAAC,WAAW;qBAC1C,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,cAAc,GAAG,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,qBAAqB,CAAC;gBAE5G,aAAa,CAAC,gBAAgB,CAAC,UAAU,EAAE;oBACzC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrE,gBAAgB,EAAE,WAAW,CAAC,QAAQ;oBACtC,CAAC,cAAc,CAAC,EAAE,WAAW;iBAC9B,CAAC,CAAC;YACL,CAAC,CAAC;YAEF,QAAQ,EAAE,WAAW,CAAoD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC3F,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;gBAC1B,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;gBAExE,IAAI,CAAC,WAAW,EAAE,CAAC;oBACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC;gBAC1E,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,YAAY,GAAqB;wBACrC,GAAG,gBAAgB;wBACnB,MAAM,EAAE,WAAW,EAAE,MAAM;wBAC3B,QAAQ,EAAE,WAAW,EAAE,QAAQ;wBAC/B,OAAO,EAAE,OAAO,CAAC,OAAO;qBACzB,CAAC;oBACF,MAAM,OAAO,GAAG,MAAM,yBAAyB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;oBAC3E,OAAO;wBACL,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,OAAO,IAAI,6CAA6C,WAAW,GAAG;qBAChF,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;qBACjE,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC;YAEF,8BAA8B;YAC9B,cAAc,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC9C,OAAO,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC5C,CAAC,CAAC;YAEF,YAAY,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC5C,OAAO,mBAAmB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/C,CAAC,CAAC;YAEF,eAAe,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;gBACtC,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC/B,OAAO,KAAK,KAAK,IAAI,CAAC;YACxB,CAAC,CAAC;YAEF,aAAa,EAAE,WAAW,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC7C,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;gBACtC,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;gBAEzC,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;gBAC7F,CAAC;gBAED,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC;oBACzC,QAAQ;oBACR,aAAa;iBACd,CAAC,CAAC;gBAEH,mDAAmD;gBACnD,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE;oBACnC,eAAe,EAAE,UAAU,CAAC,gBAAgB;oBAC5C,uBAAuB,EAAE,UAAU,CAAC,yBAAyB;oBAC7D,QAAQ,EAAE,UAAU,CAAC,SAAS;iBAC/B,CAAC,CAAC;gBAEH,eAAe;gBACf,IAAI,CAAC;oBACH,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC;oBAChD,MAAM,MAAM,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;gBACrD,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;gBAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC,WAAW,EAAE;oBACxD,QAAQ;oBACR,aAAa;oBACb,QAAQ,EAAE,UAAU,CAAC,QAAQ;oBAC7B,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;iBACvD,CAAC,CAAC;gBAEH,sBAAsB;gBACtB,eAAe,CAAC;oBACd,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;iBACpB,CAAC,CAAC;gBAEH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;YAChC,CAAC,CAAC;YAEF,uBAAuB,EAAE,WAAW,CAAC,KAAK,IAAI,EAAE;gBAC9C,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;gBACzC,IAAI,SAAS,EAAE,QAAQ,IAAI,SAAS,EAAE,MAAM,EAAE,CAAC;oBAC7C,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;gBACpE,CAAC;gBAED,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;gBACvC,IAAI,MAAM;oBAAE,OAAO,MAAM,CAAC;gBAE1B,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;gBAC/B,IAAI,CAAC,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;gBAEzD,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,CAAC;gBACxD,sBAAsB,CAAC,OAAO,CAAC,CAAC;gBAEhC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;oBACnD,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;wBACpC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,GAAG;4BAC/B,IAAI,EAAE,SAAS;4BACf,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;4BACtE,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;yBAC3B,CAAC;wBACF,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;4BAC9B,MAAM,CAAC,iBAAiB,GAAG,SAAS,CAAC;wBACvC,CAAC;wBACD,UAAU,CAAC,MAAM,CAAC,CAAC;oBACrB,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,kDAAkD;gBACpD,CAAC;gBAED,OAAO,OAAO,CAAC;YACjB,CAAC,CAAC;YAEF,sBAAsB;YACtB,WAAW,EAAE,WAAW,CAA0B,KAAK,IAAI,EAAE;gBAC3D,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;gBAClC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;gBAC9C,CAAC;gBACD,OAAO;oBACL,MAAM;oBACN,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC;iBACvC,CAAC;YACJ,CAAC,CAAC;YAEF,YAAY,EAAE,WAAW,CAA6D,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACxG,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;gBACrC,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC9D,eAAe,CAAC,YAAY,CAAC,CAAC;gBAC9B,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;YAClC,CAAC,CAAC;YAEF,sBAAsB;YACtB,aAAa,EAAE,WAAW,CAAiD,KAAK,IAAI,EAAE;gBACpF,OAAO,aAAa,EAAE,CAAC;YACzB,CAAC,CAAC;YAEF,qBAAqB,EAAE,WAAW,CAChC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAClB,OAAO,uBAAuB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3F,CAAC,CACF;YAED,aAAa,EAAE,WAAW,CAAyC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACrF,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3C,CAAC,CAAC;YAEF,qBAAqB,EAAE,WAAW,CAGhC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACpB,OAAO,uBAAuB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;YAChH,CAAC,CAAC;YAEF,UAAU,EAAE,WAAW,CAAwB,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBACjE,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC,CAAC;YAEF,QAAQ,EAAE,WAAW,CAAuD,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC9F,OAAO,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/D,CAAC,CAAC;SACH;KACF,CAAC,CAAC;IAEH,8DAA8D;IAC9D,IAAI,SAAuC,CAAC;IAC5C,IAAI,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;QAChC,IAAI,UAA8B,CAAC;QAEnC,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,6BAA6B,CAAC,EAAE,CAAC;gBAC7E,UAAU,GAAG,GAAG,CAAC;gBACjB,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;gBAC1B,OAAO,CAAC,GAAG,CAAC,6BAA6B,UAAU,EAAE,CAAC,CAAC;gBACvD,KAAK,IAAI,CAAC,UAAU,CAAC,CAAC;YACxB,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACnC,CAAC;QACH,CAAC,CAAC;QAEF,yDAAyD;QACzD,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAClE,SAAS,GAAG,kBAAkB,EAAE,CAAC;QACjC,UAAU,CAAC,GAAG,EAAE;YACd,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;QAC5B,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;IACnB,CAAC;IAED,KAAK,GAAG,WAAW,CAAC,iBAAiB,EAAE;QACrC,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE;QAC7C,OAAO,EAAE,SAAS,EAAE,OAAO;KAC5B,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IAEtB,0BAA0B;IAC1B,MAAM,IAAI,GAAG,2BAA2B,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACrG,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAE3C,IAAI,eAAe,GAAsC,SAAS,CAAC;IAEnE,yEAAyE;IACzE,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,eAAe,GAAG,WAAW,CAAC;QAC9B,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,KAAM,CAAC,SAAS,CAAC;gBACf,QAAQ,EAAE,GAAG,EAAE;oBACb,MAAM,QAAQ,GAAG,KAAM,CAAC,WAAW,EAAE,CAAC;oBACtC,IAAI,QAAQ,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;wBAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;wBACnC,eAAe,GAAG,OAAO,CAAC;wBAC1B,MAAM,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;oBAC5C,CAAC;yBAAM,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;wBAC1C,eAAe,GAAG,WAAW,CAAC;wBAC9B,OAAO,EAAE,CAAC;oBACZ,CAAC;yBAAM,CAAC;wBACN,OAAO,EAAE,CAAC;oBACZ,CAAC;gBACH,CAAC;gBACD,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;oBACb,eAAe,GAAG,OAAO,CAAC;oBAC1B,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC;aACF,CAAC,CAAC;YAEH,KAAM,CAAC,KAAK,EAAE,CAAC;YACf,KAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,eAAe,GAAG,OAAO,CAAC;QAC1B,QAAQ,CAAC,2BAA2B,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7G,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACpC,MAAM,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC1C,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;AACH,CAAC","sourcesContent":["import { createActor, fromPromise } from 'xstate';\nimport open from 'opn';\nimport { existsSync, readFileSync } from 'fs';\nimport { join } from 'path';\nimport { installerMachine } from './installer-core.js';\nimport { createInstallerEventEmitter } from './events.js';\nimport { CLIAdapter } from './adapters/cli-adapter.js';\nimport { DashboardAdapter } from './adapters/dashboard-adapter.js';\nimport type { InstallerAdapter } from './adapters/types.js';\nimport type { InstallerOptions } from '../utils/types.js';\nimport { isNonInteractiveEnvironment } from '../utils/environment.js';\nimport type {\n  InstallerMachineContext,\n  DetectionOutput,\n  GitCheckOutput,\n  AgentOutput,\n  BranchCheckOutput,\n} from './installer-core.types.js';\nimport type { Integration } from './constants.js';\nimport { parseEnvFile } from '../utils/env-parser.js';\nimport { enableDebugLogs, initLogFile, logInfo, logError } from '../utils/debug.js';\n\nimport {\n  getAccessToken,\n  getCredentials,\n  saveCredentials,\n  getStagingCredentials,\n  saveStagingCredentials,\n} from './credentials.js';\nimport { getConfig, saveConfig, getActiveEnvironment } from './config-store.js';\nimport { checkForEnvFiles, discoverCredentials } from './credential-discovery.js';\nimport { requestDeviceCode, pollForToken } from './device-auth.js';\nimport { fetchStagingCredentials as fetchStagingCredentialsApi } from './staging-api.js';\nimport { getCliAuthClientId, getAuthkitDomain } from './settings.js';\nimport { analytics } from '../utils/analytics.js';\nimport { getVersion } from './settings.js';\nimport { getLlmGatewayUrlFromHost } from '../utils/urls.js';\nimport { isInGitRepo, getUncommittedOrUntrackedFiles } from '../utils/clack-utils.js';\nimport {\n  getCurrentBranch,\n  isProtectedBranch,\n  createBranch as createGitBranch,\n  branchExists,\n} from '../utils/git-utils.js';\nimport { detectChanges, stageAndCommit, pushBranch as pushGitBranch, createPullRequest } from './post-install.js';\nimport {\n  generateCommitMessage as generateCommitMessageAi,\n  generatePrDescription as generatePrDescriptionAi,\n} from './ai-content.js';\nimport { autoConfigureWorkOSEnvironment } from './workos-management.js';\nimport { detectPort, getCallbackPath } from './port-detection.js';\nimport { writeEnvLocal } from './env-writer.js';\nimport { getRegistry } from './registry.js';\n\nasync function runIntegrationInstallerFn(integration: Integration, options: InstallerOptions): Promise<string> {\n  const registry = await getRegistry();\n  const mod = registry.get(integration);\n  if (!mod) {\n    throw new Error(`Unknown integration: ${integration}`);\n  }\n  return mod.run(options);\n}\n\nfunction readExistingCredentials(installDir: string): { apiKey?: string; clientId?: string } {\n  const envPath = join(installDir, '.env.local');\n  if (!existsSync(envPath)) {\n    return {};\n  }\n\n  try {\n    const content = readFileSync(envPath, 'utf-8');\n    const envVars = parseEnvFile(content);\n    return {\n      apiKey: envVars.WORKOS_API_KEY || undefined,\n      clientId: envVars.WORKOS_CLIENT_ID || undefined,\n    };\n  } catch {\n    return {};\n  }\n}\n\nasync function detectIntegrationFn(options: Pick<InstallerOptions, 'installDir'>): Promise<Integration | undefined> {\n  const registry = await getRegistry();\n  const configs = registry.detectionOrder();\n\n  for (const config of configs) {\n    // Use the detect function from INTEGRATION_CONFIG in config.ts for JS integrations,\n    // or fall back to checking if the framework package is installed\n    const detected = await detectSingleIntegration(config.metadata.integration, options);\n    if (detected) {\n      return config.metadata.integration;\n    }\n  }\n  return undefined;\n}\n\n/**\n * Detect if a single integration matches the project.\n * Uses package.json detection for JS integrations, manifest files for others.\n */\nasync function detectSingleIntegration(\n  integration: string,\n  options: Pick<InstallerOptions, 'installDir'>,\n): Promise<boolean> {\n  const { getPackageDotJson } = await import('../utils/clack-utils.js');\n  const { hasPackageInstalled } = await import('../utils/package-json.js');\n  const { existsSync } = await import('node:fs');\n  const { join } = await import('node:path');\n\n  const registry = await getRegistry();\n  const mod = registry.get(integration);\n  if (!mod) return false;\n\n  const config = mod.config;\n\n  // For JS integrations, check package.json\n  if (config.metadata.language === 'javascript') {\n    const packageJson = await getPackageDotJson(options);\n\n    switch (integration) {\n      case 'nextjs':\n        return hasPackageInstalled('next', packageJson);\n      case 'tanstack-start':\n        return hasPackageInstalled('@tanstack/react-start', packageJson);\n      case 'react-router':\n        return hasPackageInstalled('react-router', packageJson);\n      case 'react': {\n        const hasReact = hasPackageInstalled('react', packageJson);\n        const hasNext = hasPackageInstalled('next', packageJson);\n        const hasReactRouter = hasPackageInstalled('react-router', packageJson);\n        const hasTanstack = hasPackageInstalled('@tanstack/react-start', packageJson);\n        const hasSvelteKit = hasPackageInstalled('@sveltejs/kit', packageJson);\n        return hasReact && !hasNext && !hasReactRouter && !hasTanstack && !hasSvelteKit;\n      }\n      case 'sveltekit':\n        return hasPackageInstalled('@sveltejs/kit', packageJson);\n      case 'node': {\n        const hasExpress = hasPackageInstalled('express', packageJson);\n        const hasFrontend =\n          hasPackageInstalled('next', packageJson) ||\n          hasPackageInstalled('@sveltejs/kit', packageJson) ||\n          hasPackageInstalled('react', packageJson) ||\n          hasPackageInstalled('@tanstack/react-start', packageJson);\n        return hasExpress && !hasFrontend;\n      }\n      case 'vanilla-js':\n        return true; // Fallback\n      default:\n        // Unknown JS integration — try package name detection\n        return hasPackageInstalled(config.detection.packageName, packageJson);\n    }\n  }\n\n  // For non-JS integrations, check manifest files\n  if (config.metadata.manifestFile) {\n    return existsSync(join(options.installDir, config.metadata.manifestFile));\n  }\n\n  return false;\n}\n\nexport async function runWithCore(options: InstallerOptions): Promise<void> {\n  // Initialize debug/logging early so we capture all failures\n  initLogFile();\n  if (options.debug) {\n    enableDebugLogs();\n  }\n  logInfo('Wizard starting with options:', {\n    debug: options.debug,\n    dashboard: options.dashboard,\n    local: options.local,\n    ci: options.ci,\n    skipAuth: options.skipAuth,\n    installDir: options.installDir,\n  });\n\n  // Configure telemetry endpoint (same URL as LLM gateway)\n  const gatewayUrl = getLlmGatewayUrlFromHost();\n  analytics.setGatewayUrl(gatewayUrl);\n\n  const existingCreds = readExistingCredentials(options.installDir);\n  const augmentedOptions: InstallerOptions = {\n    ...options,\n    apiKey: options.apiKey || existingCreds.apiKey,\n    clientId: options.clientId || existingCreds.clientId,\n  };\n\n  const emitter = createInstallerEventEmitter();\n  let actor: ReturnType<typeof createActor<typeof installerMachine>> | null = null;\n\n  const sendEvent = (event: { type: string; [key: string]: unknown }) => {\n    if (actor) {\n      actor.send(event as Parameters<typeof actor.send>[0]);\n    }\n  };\n\n  let adapter: InstallerAdapter;\n  if (isNonInteractiveEnvironment()) {\n    const { HeadlessAdapter } = await import('./adapters/headless-adapter.js');\n    adapter = new HeadlessAdapter({\n      emitter,\n      sendEvent,\n      debug: augmentedOptions.debug,\n      options: {\n        apiKey: augmentedOptions.apiKey,\n        clientId: augmentedOptions.clientId,\n        noBranch: augmentedOptions.noBranch,\n        noCommit: augmentedOptions.noCommit,\n        createPr: augmentedOptions.createPr,\n        noGitCheck: augmentedOptions.noGitCheck,\n      },\n    });\n  } else if (options.dashboard) {\n    adapter = new DashboardAdapter({ emitter, sendEvent, debug: augmentedOptions.debug });\n  } else {\n    adapter = new CLIAdapter({ emitter, sendEvent, debug: augmentedOptions.debug });\n  }\n\n  const machineWithActors = installerMachine.provide({\n    actors: {\n      checkAuthentication: fromPromise(async () => {\n        const token = getAccessToken();\n        if (!token) {\n          // This should rarely happen since bin.ts handles auth first\n          // But keep as safety net for programmatic usage\n          throw new Error('Not authenticated. Run `workos login` first.');\n        }\n\n        // Set telemetry from existing credentials\n        const creds = getCredentials();\n        if (creds) {\n          analytics.setAccessToken(creds.accessToken);\n          analytics.setDistinctId(creds.userId);\n        }\n        return true;\n      }),\n\n      detectIntegration: fromPromise<DetectionOutput, { options: InstallerOptions }>(async ({ input }) => {\n        const integration = await detectIntegrationFn({ installDir: input.options.installDir });\n        return { integration };\n      }),\n\n      checkGitStatus: fromPromise<GitCheckOutput, { installDir: string }>(async () => {\n        if (!isInGitRepo()) {\n          return { isClean: true, files: [] };\n        }\n        const files = getUncommittedOrUntrackedFiles();\n        return { isClean: files.length === 0, files };\n      }),\n\n      configureEnvironment: fromPromise<void, { context: InstallerMachineContext }>(async ({ input }) => {\n        const { context } = input;\n        const { options: installerOptions, integration, credentials } = context;\n\n        if (!integration || !credentials) {\n          throw new Error('Missing integration or credentials');\n        }\n\n        const port = detectPort(integration, installerOptions.installDir);\n        const callbackPath = getCallbackPath(integration);\n        const redirectUri = installerOptions.redirectUri || `http://localhost:${port}${callbackPath}`;\n\n        const requiresApiKey = ['nextjs', 'tanstack-start', 'react-router'].includes(integration);\n        if (credentials.apiKey && requiresApiKey) {\n          await autoConfigureWorkOSEnvironment(credentials.apiKey, integration, port, {\n            homepageUrl: installerOptions.homepageUrl,\n            redirectUri: installerOptions.redirectUri,\n          });\n        }\n\n        const redirectUriKey = integration === 'nextjs' ? 'NEXT_PUBLIC_WORKOS_REDIRECT_URI' : 'WORKOS_REDIRECT_URI';\n\n        writeEnvLocal(installerOptions.installDir, {\n          ...(credentials.apiKey ? { WORKOS_API_KEY: credentials.apiKey } : {}),\n          WORKOS_CLIENT_ID: credentials.clientId,\n          [redirectUriKey]: redirectUri,\n        });\n      }),\n\n      runAgent: fromPromise<AgentOutput, { context: InstallerMachineContext }>(async ({ input }) => {\n        const { context } = input;\n        const { options: installerOptions, integration, credentials } = context;\n\n        if (!integration) {\n          return { success: false, error: new Error('No integration specified') };\n        }\n\n        try {\n          const agentOptions: InstallerOptions = {\n            ...installerOptions,\n            apiKey: credentials?.apiKey,\n            clientId: credentials?.clientId,\n            emitter: context.emitter,\n          };\n          const summary = await runIntegrationInstallerFn(integration, agentOptions);\n          return {\n            success: true,\n            summary: summary || `Successfully installed WorkOS AuthKit for ${integration}!`,\n          };\n        } catch (error) {\n          return {\n            success: false,\n            error: error instanceof Error ? error : new Error(String(error)),\n          };\n        }\n      }),\n\n      // Credential discovery actors\n      detectEnvFiles: fromPromise(async ({ input }) => {\n        return checkForEnvFiles(input.installDir);\n      }),\n\n      scanEnvFiles: fromPromise(async ({ input }) => {\n        return discoverCredentials(input.installDir);\n      }),\n\n      checkStoredAuth: fromPromise(async () => {\n        const token = getAccessToken();\n        return token !== null;\n      }),\n\n      runDeviceAuth: fromPromise(async ({ input }) => {\n        const clientId = getCliAuthClientId();\n        const authkitDomain = getAuthkitDomain();\n\n        if (!clientId) {\n          throw new Error('CLI auth not configured. Set WORKOS_CLI_CLIENT_ID environment variable.');\n        }\n\n        const deviceAuth = await requestDeviceCode({\n          clientId,\n          authkitDomain,\n        });\n\n        // Emit device started event with verification info\n        input.emitter.emit('device:started', {\n          verificationUri: deviceAuth.verification_uri,\n          verificationUriComplete: deviceAuth.verification_uri_complete,\n          userCode: deviceAuth.user_code,\n        });\n\n        // Open browser\n        try {\n          const { default: openFn } = await import('opn');\n          await openFn(deviceAuth.verification_uri_complete);\n        } catch {\n          // User can open manually\n        }\n\n        const result = await pollForToken(deviceAuth.device_code, {\n          clientId,\n          authkitDomain,\n          interval: deviceAuth.interval,\n          onPoll: () => input.emitter.emit('device:polling', {}),\n        });\n\n        // Save the auth token\n        saveCredentials({\n          accessToken: result.accessToken,\n          expiresAt: result.expiresAt,\n          userId: result.userId,\n          email: result.email,\n        });\n\n        return { result, deviceAuth };\n      }),\n\n      fetchStagingCredentials: fromPromise(async () => {\n        const activeEnv = getActiveEnvironment();\n        if (activeEnv?.clientId && activeEnv?.apiKey) {\n          return { clientId: activeEnv.clientId, apiKey: activeEnv.apiKey };\n        }\n\n        const cached = getStagingCredentials();\n        if (cached) return cached;\n\n        const token = getAccessToken();\n        if (!token) throw new Error('No access token available');\n\n        const staging = await fetchStagingCredentialsApi(token);\n        saveStagingCredentials(staging);\n\n        try {\n          const config = getConfig() ?? { environments: {} };\n          if (!config.environments['default']) {\n            config.environments['default'] = {\n              name: 'default',\n              type: staging.apiKey.startsWith('sk_test_') ? 'sandbox' : 'production',\n              apiKey: staging.apiKey,\n              clientId: staging.clientId,\n            };\n            if (!config.activeEnvironment) {\n              config.activeEnvironment = 'default';\n            }\n            saveConfig(config);\n          }\n        } catch {\n          // Don't block install if config-store write fails\n        }\n\n        return staging;\n      }),\n\n      // Branch check actors\n      checkBranch: fromPromise<BranchCheckOutput, void>(async () => {\n        const branch = getCurrentBranch();\n        if (!branch) {\n          return { branch: null, isProtected: false };\n        }\n        return {\n          branch,\n          isProtected: isProtectedBranch(branch),\n        };\n      }),\n\n      createBranch: fromPromise<{ branch: string }, { name: string; fallbackName: string }>(async ({ input }) => {\n        const { name, fallbackName } = input;\n        const targetBranch = branchExists(name) ? fallbackName : name;\n        createGitBranch(targetBranch);\n        return { branch: targetBranch };\n      }),\n\n      // Post-install actors\n      detectChanges: fromPromise<{ hasChanges: boolean; files: string[] }, void>(async () => {\n        return detectChanges();\n      }),\n\n      generateCommitMessage: fromPromise<string, { integration: string; files: string[]; direct?: boolean }>(\n        async ({ input }) => {\n          return generateCommitMessageAi(input.integration, input.files, { direct: input.direct });\n        },\n      ),\n\n      commitChanges: fromPromise<void, { message: string; cwd: string }>(async ({ input }) => {\n        stageAndCommit(input.message, input.cwd);\n      }),\n\n      generatePrDescription: fromPromise<\n        string,\n        { integration: string; files: string[]; commitMessage: string; direct?: boolean }\n      >(async ({ input }) => {\n        return generatePrDescriptionAi(input.integration, input.files, input.commitMessage, { direct: input.direct });\n      }),\n\n      pushBranch: fromPromise<void, { cwd: string }>(async ({ input }) => {\n        pushGitBranch(input.cwd);\n      }),\n\n      createPr: fromPromise<string, { title: string; body: string; cwd: string }>(async ({ input }) => {\n        return createPullRequest(input.title, input.body, input.cwd);\n      }),\n    },\n  });\n\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  let inspector: { inspect: any } | undefined;\n  if (augmentedOptions.inspect) {\n    const originalLog = console.log;\n    let inspectUrl: string | undefined;\n\n    console.log = (...args: unknown[]) => {\n      const msg = args.join(' ');\n      if (typeof msg === 'string' && msg.startsWith('https://stately.ai/inspect/')) {\n        inspectUrl = msg;\n        console.log = originalLog;\n        console.log(`Opening XState inspector: ${inspectUrl}`);\n        void open(inspectUrl);\n      } else {\n        originalLog.apply(console, args);\n      }\n    };\n\n    // Dynamic import - @statelyai/inspect is a devDependency\n    const { createSkyInspector } = await import('@statelyai/inspect');\n    inspector = createSkyInspector();\n    setTimeout(() => {\n      console.log = originalLog;\n    }, 5000).unref();\n  }\n\n  actor = createActor(machineWithActors, {\n    input: { emitter, options: augmentedOptions },\n    inspect: inspector?.inspect,\n  });\n\n  await adapter.start();\n\n  // Start telemetry session\n  const mode = isNonInteractiveEnvironment() ? 'headless' : augmentedOptions.dashboard ? 'tui' : 'cli';\n  analytics.sessionStart(mode, getVersion());\n\n  let installerStatus: 'success' | 'error' | 'cancelled' = 'success';\n\n  // Handle ctrl+c by sending CANCEL to state machine for graceful shutdown\n  const handleSigint = () => {\n    installerStatus = 'cancelled';\n    actor?.send({ type: 'CANCEL' });\n  };\n  process.on('SIGINT', handleSigint);\n\n  try {\n    await new Promise<void>((resolve, reject) => {\n      actor!.subscribe({\n        complete: () => {\n          const snapshot = actor!.getSnapshot();\n          if (snapshot.value === 'error') {\n            const err = snapshot.context.error;\n            installerStatus = 'error';\n            reject(err ?? new Error('Wizard failed'));\n          } else if (snapshot.value === 'cancelled') {\n            installerStatus = 'cancelled';\n            resolve();\n          } else {\n            resolve();\n          }\n        },\n        error: (err) => {\n          installerStatus = 'error';\n          reject(err);\n        },\n      });\n\n      actor!.start();\n      actor!.send({ type: 'START' });\n    });\n  } catch (error) {\n    installerStatus = 'error';\n    logError('Wizard failed with error:', error instanceof Error ? error.stack || error.message : String(error));\n    throw error;\n  } finally {\n    process.off('SIGINT', handleSigint);\n    await analytics.shutdown(installerStatus);\n    await adapter.stop();\n  }\n}\n"]}

package/dist/lib/validation/validator.js

@@ -550,7 +550,6 @@ async function validateNextjsMiddlewarePlacement(projectDir, issues) {
     ];
     const wrongLevel = allPossible.find((p) => existsSync(join(projectDir, p)) && !correctPaths.includes(p));
     if (wrongLevel) {
-        const correctLevel = appInSrc ? 'src/' : 'project root';
         issues.push({
             type: 'file',
             severity: 'error',

package/dist/lib/validation/validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../src/lib/validation/validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,WAAW,CAAC;AAE3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAO1D,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,UAAkB,EAClB,UAA2B,EAAE;IAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,mDAAmD;IACnD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,SAAS;YACT,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC;IACJ,CAAC;IAED,kBAAkB;IAClB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,eAAe,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAEzD,2CAA2C;IAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,yBAAyB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAEzE,kCAAkC;IAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QACjE,SAAS;QACT,MAAM;QACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACnC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,OAAgB;IAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,SAAS,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;QAErD,mCAAmC;QACnC,IAAI,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7C,OAAO;gBACL,GAAG,KAAK;gBACR,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBACtD,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;gBAC/D,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;aAC7D,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,kCAAkC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAsB,EAAE,UAAkB;IAC/E,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IAExC,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;QACnD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAA2B,CAAC;IAChE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAA2B,CAAC;IACtE,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;QACxC,MAAM,QAAQ,GAAG,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QAE7F,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;gBACxC,IAAI,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAsB,EAAE,UAAkB;IAC9E,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAU,GAAG,EAAE,CAAC;IAEpB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,yBAAyB;gBAClC,IAAI,EAAE,uDAAuD;aAC9D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACjC,wCAAwC;QACxC,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACzC,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,KAAK,EAAE,GAAG,CAAC,CAAC;YAClD,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU;gBAC1B,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;gBAC7E,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,2BAA2B,CAAC;YAEhD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;gBACvD,OAAO,EAAE,iCAAiC,IAAI,CAAC,IAAI,EAAE;gBACrD,IAAI;aACL,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAsB,EAAE,UAAkB;IAC5E,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;YAC9B,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,iBAAiB,IAAI,CAAC,IAAI,EAAE;gBACrC,IAAI,EAAE,UAAU,IAAI,CAAC,IAAI,EAAE;aAC5B,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,yBAAyB;QACzB,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,wCAAwC;gBACxC,SAAS;YACX,CAAC;YAED,sBAAsB;YACtB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACvC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC/B,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,SAAS;4BACf,QAAQ,EAAE,SAAS;4BACnB,OAAO,EAAE,QAAQ,OAAO,CAAC,CAAC,CAAC,+BAA+B,OAAO,GAAG;4BACpE,IAAI,EAAE,UAAU,OAAO,CAAC,CAAC,CAAC,cAAc,OAAO,EAAE;yBAClD,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,+BAA+B;YAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,SAAS;wBACnB,OAAO,EAAE,QAAQ,OAAO,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBAC/E,IAAI,EAAE,UAAU,OAAO,CAAC,CAAC,CAAC,iCAAiC;qBAC5D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,SAAiB,EAAE,UAAkB;IACnF,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,8BAA8B;IAC9B,MAAM,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,wBAAwB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAEnD,iCAAiC;IACjC,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,QAAQ;YACX,MAAM,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACpD,MAAM,iCAAiC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC5D,MAAM,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;YACjF,MAAM;QACR,KAAK,OAAO;YACV,MAAM,6BAA6B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACxD,MAAM;QACR,KAAK,cAAc;YACjB,MAAM,8BAA8B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;YACjF,MAAM;QACR,KAAK,gBAAgB;YACnB,MAAM,gCAAgC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;YACjF,MAAM;IACV,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,yBAAyB,CAAC,UAAkB,EAAE,MAAyB;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,+CAA+C;IACzD,CAAC;IAED,6BAA6B;IAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,iDAAiD;IAC3D,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,YAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,yBAAyB,WAAW,EAAE;YAC/C,IAAI,EAAE,qDAAqD;SAC5D,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,yCAAyC;IACzC,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAElD,uEAAuE;IACvE,MAAM,aAAa,GAAG;QACpB,OAAO,SAAS,WAAW;QAC3B,OAAO,SAAS,YAAY;QAC5B,OAAO,SAAS,WAAW;QAC3B,OAAO,SAAS,YAAY;QAC5B,WAAW,SAAS,WAAW;QAC/B,WAAW,SAAS,YAAY;QAChC,WAAW,SAAS,WAAW;QAC/B,WAAW,SAAS,YAAY;KACjC,CAAC;IAEF,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,mDAAmD;QACnD,MAAM,cAAc,GAAG,MAAM,EAAE,CAC7B,CAAC,0CAA0C,EAAE,8CAA8C,CAAC,EAC5F;YACE,GAAG,EAAE,UAAU;SAChB,CACF,CAAC;QAEF,IAAI,IAAI,GAAG,iCAAiC,SAAS,WAAW,CAAC;QACjE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,0DAA0D;YAC1D,MAAM,UAAU,GAAG,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;YAClH,IAAI;gBACF,2BAA2B,cAAc,CAAC,CAAC,CAAC,+BAA+B,YAAY,aAAa;oBACpG,uEAAuE,UAAU,IAAI;oBACrF,8BAA8B,SAAS,WAAW,CAAC;QACvD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sBAAsB,YAAY,8BAA8B;YACzE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,8BAA8B,CAAC,UAAkB,EAAE,MAAyB;IACzF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,YAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,yBAAyB,WAAW,EAAE;YAC/C,IAAI,EAAE,yCAAyC;SAChD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,iEAAiE;IACjE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE9C,sCAAsC;IACtC,MAAM,aAAa,GAAG;QACpB,oDAAoD;QACpD,cAAc,OAAO,MAAM;QAC3B,cAAc,OAAO,KAAK;QAC1B,cAAc,OAAO,MAAM;QAC3B,cAAc,OAAO,KAAK;QAC1B,sDAAsD;QACtD,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,kEAAkE;QAClE,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,kEAAkE;QAClE,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;KACnC,CAAC;IAEF,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,CAAC,0CAA0C,CAAC,EAAE;YAC5E,GAAG,EAAE,UAAU;SAChB,CAAC,CAAC;QAEH,IAAI,IAAI,GAAG,gCAAgC,OAAO,MAAM,CAAC;QACzD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YACrC,qCAAqC;YACrC,MAAM,UAAU,GACd,GAAG;gBACH,UAAU;qBACP,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;qBAC/B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACzB,IAAI;gBACF,2BAA2B,UAAU,+BAA+B,YAAY,aAAa;oBAC7F,2DAA2D,UAAU,IAAI;oBACzE,qCAAqC,OAAO,MAAM,CAAC;QACvD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sBAAsB,YAAY,8BAA8B;YACzE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gCAAgC,CAAC,UAAkB,EAAE,MAAyB;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,YAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,yBAAyB,WAAW,EAAE;YAC/C,IAAI,EAAE,yCAAyC;SAChD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAElD,gCAAgC;IAChC,MAAM,aAAa,GAAG;QACpB,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;KACnC,CAAC;IAEF,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,CAAC,0CAA0C,CAAC,EAAE;YAC5E,GAAG,EAAE,UAAU;SAChB,CAAC,CAAC;QAEH,IAAI,IAAI,GAAG,gCAAgC,SAAS,MAAM,CAAC;QAC3D,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,UAAU,GACd,GAAG;gBACH,UAAU;qBACP,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAC7B,IAAI;gBACF,2BAA2B,UAAU,+BAA+B,YAAY,aAAa;oBAC7F,2DAA2D,UAAU,IAAI;oBACzE,qCAAqC,SAAS,MAAM,CAAC;QACzD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sBAAsB,YAAY,8BAA8B;YACzE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,4BAA4B,CACzC,UAAkB,EAClB,MAAyB,EACzB,UAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,+CAA+C;IACzD,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,UAAU,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,iDAAiD;IAC3D,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,GAAG,UAAU,8CAA8C,QAAQ,CAAC,MAAM,GAAG;YACtF,IAAI,EAAE,qDAAqD;SAC5D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,yBAAyB,CAAC,UAAkB,EAAE,MAAyB;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,8CAA8C;IAC9C,MAAM,cAAc,GAAG,CAAC,wBAAwB,EAAE,oCAAoC,CAAC,CAAC;IAExF,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,4BAA4B,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;oBACjE,IAAI,EAAE,oFAAoF;iBAC3F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,gBAAgB,GAAG,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;IAE9F,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1C,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,8BAA8B,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;oBACnE,IAAI,EAAE,yFAAyF;iBAChG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iCAAiC,CAAC,UAAkB,EAAE,MAAyB;IAC5F,sEAAsE;IACtE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3C,MAAM,YAAY,GAAG;QACnB,GAAG,WAAW,eAAe;QAC7B,GAAG,WAAW,eAAe;QAC7B,GAAG,WAAW,UAAU;QACxB,GAAG,WAAW,UAAU;KACzB,CAAC;IAEF,MAAM,mBAAmB,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,mBAAmB,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IAED,gDAAgD;IAChD,MAAM,WAAW,GAAG;QAClB,eAAe;QACf,eAAe;QACf,mBAAmB;QACnB,mBAAmB;QACnB,UAAU;QACV,UAAU;QACV,cAAc;QACd,cAAc;KACf,CAAC;IACF,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzG,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,GAAG,UAAU,uCAAuC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE;YACzF,IAAI,EAAE,cAAc,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,0GAA0G;SAC7K,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,wCAAwC;IACxC,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,CAAC,+BAA+B,CAAC,EAAE;QAC5D,GAAG,EAAE,UAAU;QACf,MAAM,EAAE,CAAC,iBAAiB,CAAC;KAC5B,CAAC,CAAC;IAEH,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,6CAA6C,SAAS,CAAC,CAAC,CAAC,EAAE;YACpE,IAAI,EAAE,cAAc,WAAW,oBAAoB,WAAW,sCAAsC;SACrG,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,6BAA6B,CAAC,UAAkB,EAAE,MAAyB;IACxF,qCAAqC;IACrC,MAAM,aAAa,GAAG;QACpB,cAAc;QACd,cAAc;QACd,eAAe;QACf,eAAe;QACf,aAAa;QACb,aAAa;QACb,gBAAgB;QAChB,gBAAgB;KACjB,CAAC;IAEF,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACxC,aAAa,GAAG,IAAI,CAAC;gBACrB,MAAM;YACR,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,qEAAqE;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBACzD,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;gBAC7D,IAAI,IAAI,CAAC,2BAA2B,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,SAAS;wBACnB,OAAO,EAAE,kDAAkD;wBAC3D,IAAI,EAAE,yHAAyH;qBAChI,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,wBAAwB,CAAC,UAAkB,EAAE,MAAyB;IACnF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAEpD,IAAI,UAAkB,CAAC;IACvB,IAAI,eAAuB,CAAC;IAE5B,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,sCAAsC;IAChD,CAAC;IAED,IAAI,CAAC;QACH,eAAe,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,uCAAuC;IACjD,CAAC;IAED,sCAAsC;IACtC,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAuB,EAAE;QACxD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACtD,IAAI,KAAK,EAAE,CAAC;gBACV,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;IAE/C,4CAA4C;IAC5C,MAAM,UAAU,GAAG;QACjB,gBAAgB;QAChB,kBAAkB;QAClB,qBAAqB;QACrB,wBAAwB;QACxB,8BAA8B;QAC9B,iCAAiC;KAClC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE7C,IAAI,QAAQ,IAAI,UAAU,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,GAAG,OAAO,8CAA8C;gBACjE,IAAI,EAAE,yFAAyF;aAChG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import { readFile } from 'fs/promises';\nimport { existsSync } from 'fs';\nimport { join } from 'path';\nimport fg from 'fast-glob';\nimport type { ValidationResult, ValidationRules, ValidationIssue } from './types.js';\nimport { runBuildValidation } from './build-validator.js';\n\nexport interface ValidateOptions {\n  variant?: string;\n  runBuild?: boolean;\n}\n\nexport async function validateInstallation(\n  framework: string,\n  projectDir: string,\n  options: ValidateOptions = {},\n): Promise<ValidationResult> {\n  const startTime = Date.now();\n  const issues: ValidationIssue[] = [];\n\n  // Load rules for framework (with optional variant)\n  const rules = await loadRules(framework, options.variant);\n  if (!rules) {\n    return {\n      passed: true,\n      framework,\n      issues: [],\n      durationMs: Date.now() - startTime,\n    };\n  }\n\n  // Run validations\n  issues.push(...(await validatePackages(rules, projectDir)));\n  issues.push(...(await validateEnvVars(rules, projectDir)));\n  issues.push(...(await validateFiles(rules, projectDir)));\n\n  // Run framework-specific cross-validations\n  issues.push(...(await validateFrameworkSpecific(framework, projectDir)));\n\n  // Run build validation if enabled\n  if (options.runBuild !== false) {\n    const buildResult = await runBuildValidation(projectDir);\n    issues.push(...buildResult.issues);\n  }\n\n  return {\n    passed: issues.filter((i) => i.severity === 'error').length === 0,\n    framework,\n    issues,\n    durationMs: Date.now() - startTime,\n  };\n}\n\nasync function loadRules(framework: string, variant?: string): Promise<ValidationRules | null> {\n  const rulesPath = new URL(`./rules/${framework}.json`, import.meta.url);\n  try {\n    const content = await readFile(rulesPath, 'utf-8');\n    const rules = JSON.parse(content) as ValidationRules;\n\n    // Merge variant rules if specified\n    if (variant && rules.variants?.[variant]) {\n      const variantRules = rules.variants[variant];\n      return {\n        ...rules,\n        files: [...rules.files, ...(variantRules.files || [])],\n        packages: [...rules.packages, ...(variantRules.packages || [])],\n        envVars: [...rules.envVars, ...(variantRules.envVars || [])],\n      };\n    }\n\n    return rules;\n  } catch {\n    return null; // No rules for this framework yet\n  }\n}\n\nexport async function validatePackages(rules: ValidationRules, projectDir: string): Promise<ValidationIssue[]> {\n  const issues: ValidationIssue[] = [];\n  const pkgPath = join(projectDir, 'package.json');\n  if (!existsSync(pkgPath)) return issues;\n\n  let pkg: Record<string, unknown>;\n  try {\n    pkg = JSON.parse(await readFile(pkgPath, 'utf-8'));\n  } catch {\n    // Malformed package.json - skip package validation\n    return issues;\n  }\n\n  const deps = (pkg.dependencies || {}) as Record<string, string>;\n  const devDeps = (pkg.devDependencies || {}) as Record<string, string>;\n  const allDeps = { ...devDeps, ...deps };\n\n  for (const rule of rules.packages) {\n    const location = rule.location || 'any';\n    const searchIn = location === 'any' ? allDeps : location === 'dependencies' ? deps : devDeps;\n\n    if (!searchIn[rule.name]) {\n      issues.push({\n        type: 'package',\n        severity: 'error',\n        message: `Missing package: ${rule.name}`,\n        hint: `Run: npm install ${rule.name}`,\n      });\n    }\n  }\n\n  return issues;\n}\n\nexport async function validateEnvVars(rules: ValidationRules, projectDir: string): Promise<ValidationIssue[]> {\n  const issues: ValidationIssue[] = [];\n  const envPath = join(projectDir, '.env.local');\n  let envContent = '';\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    if (rules.envVars.length > 0) {\n      issues.push({\n        type: 'env',\n        severity: 'error',\n        message: 'Missing .env.local file',\n        hint: 'Create .env.local with required environment variables',\n      });\n    }\n    return issues;\n  }\n\n  for (const rule of rules.envVars) {\n    // Check primary name and any alternates\n    const varsToCheck = [rule.name, ...(rule.alternates || [])];\n    const found = varsToCheck.some((varName) => {\n      const pattern = new RegExp(`^${varName}=.+`, 'm');\n      return pattern.test(envContent);\n    });\n\n    if (!found) {\n      const hint = rule.alternates\n        ? `Add ${rule.name} (or one of: ${rule.alternates.join(', ')}) to .env.local`\n        : `Add ${rule.name}=your_value to .env.local`;\n\n      issues.push({\n        type: 'env',\n        severity: rule.required === false ? 'warning' : 'error',\n        message: `Missing environment variable: ${rule.name}`,\n        hint,\n      });\n    }\n  }\n\n  return issues;\n}\n\nexport async function validateFiles(rules: ValidationRules, projectDir: string): Promise<ValidationIssue[]> {\n  const issues: ValidationIssue[] = [];\n\n  for (const rule of rules.files) {\n    let matches: string[];\n    try {\n      matches = await fg(rule.path, { cwd: projectDir });\n    } catch {\n      // Invalid glob pattern - skip\n      continue;\n    }\n\n    if (matches.length === 0) {\n      issues.push({\n        type: 'file',\n        severity: 'error',\n        message: `Missing file: ${rule.path}`,\n        hint: `Create ${rule.path}`,\n      });\n      continue;\n    }\n\n    // Check content patterns\n    if (rule.mustContain || rule.mustContainAny) {\n      const filePath = join(projectDir, matches[0]);\n      let content: string;\n      try {\n        content = await readFile(filePath, 'utf-8');\n      } catch {\n        // File read error - skip content checks\n        continue;\n      }\n\n      // All must be present\n      if (rule.mustContain) {\n        for (const pattern of rule.mustContain) {\n          if (!content.includes(pattern)) {\n            issues.push({\n              type: 'pattern',\n              severity: 'warning',\n              message: `File ${matches[0]} missing expected pattern: \"${pattern}\"`,\n              hint: `Ensure ${matches[0]} contains: ${pattern}`,\n            });\n          }\n        }\n      }\n\n      // At least one must be present\n      if (rule.mustContainAny) {\n        const hasAny = rule.mustContainAny.some((p) => content.includes(p));\n        if (!hasAny) {\n          issues.push({\n            type: 'pattern',\n            severity: 'warning',\n            message: `File ${matches[0]} missing one of: ${rule.mustContainAny.join(', ')}`,\n            hint: `Ensure ${matches[0]} contains one of these patterns`,\n          });\n        }\n      }\n    }\n  }\n\n  return issues;\n}\n\n/**\n * Framework-specific cross-validations that require reading multiple sources.\n */\nexport async function validateFrameworkSpecific(framework: string, projectDir: string): Promise<ValidationIssue[]> {\n  const issues: ValidationIssue[] = [];\n\n  // Universal cross-validations\n  await validateCredentialFormats(projectDir, issues);\n  await validateDuplicateEnvVars(projectDir, issues);\n\n  // Framework-specific validations\n  switch (framework) {\n    case 'nextjs':\n      await validateNextjsRedirectUri(projectDir, issues);\n      await validateNextjsMiddlewarePlacement(projectDir, issues);\n      await validateCookiePasswordLength(projectDir, issues, 'WORKOS_COOKIE_PASSWORD');\n      break;\n    case 'react':\n      await validateReactProviderWrapping(projectDir, issues);\n      break;\n    case 'react-router':\n      await validateReactRouterRedirectUri(projectDir, issues);\n      await validateCookiePasswordLength(projectDir, issues, 'WORKOS_COOKIE_PASSWORD');\n      break;\n    case 'tanstack-start':\n      await validateTanstackStartRedirectUri(projectDir, issues);\n      await validateCookiePasswordLength(projectDir, issues, 'WORKOS_COOKIE_PASSWORD');\n      break;\n  }\n\n  return issues;\n}\n\n/**\n * Validates that the Next.js redirect URI matches an existing callback route.\n *\n * Common failure: .env.local has /auth/callback but route is at /api/auth/callback\n */\nasync function validateNextjsRedirectUri(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  const envPath = join(projectDir, '.env.local');\n  let envContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return; // No .env.local - other validators handle this\n  }\n\n  // Extract redirect URI value\n  const match = envContent.match(/^NEXT_PUBLIC_WORKOS_REDIRECT_URI=(.+)$/m);\n  if (!match) {\n    return; // Missing env var - other validators handle this\n  }\n\n  const redirectUri = match[1].trim();\n  let callbackPath: string;\n\n  try {\n    const url = new URL(redirectUri);\n    callbackPath = url.pathname;\n  } catch {\n    issues.push({\n      type: 'env',\n      severity: 'error',\n      message: `Invalid redirect URI: ${redirectUri}`,\n      hint: 'NEXT_PUBLIC_WORKOS_REDIRECT_URI must be a valid URL',\n    });\n    return;\n  }\n\n  // Remove leading slash for path matching\n  const routePath = callbackPath.replace(/^\\//, '');\n\n  // Check if route file exists at expected location (Next.js App Router)\n  const routePatterns = [\n    `app/${routePath}/route.ts`,\n    `app/${routePath}/route.tsx`,\n    `app/${routePath}/route.js`,\n    `app/${routePath}/route.jsx`,\n    `src/app/${routePath}/route.ts`,\n    `src/app/${routePath}/route.tsx`,\n    `src/app/${routePath}/route.js`,\n    `src/app/${routePath}/route.jsx`,\n  ];\n\n  const routeExists = routePatterns.some((pattern) => existsSync(join(projectDir, pattern)));\n\n  if (!routeExists) {\n    // Check what routes DO exist to give a better hint\n    const existingRoutes = await fg(\n      ['app/**/callback/**/route.{ts,tsx,js,jsx}', 'src/app/**/callback/**/route.{ts,tsx,js,jsx}'],\n      {\n        cwd: projectDir,\n      },\n    );\n\n    let hint = `Create a route handler at app/${routePath}/route.ts`;\n    if (existingRoutes.length > 0) {\n      // Found a route at a different path - likely the mismatch\n      const actualPath = '/' + existingRoutes[0].replace(/^(src\\/)?app\\//, '').replace(/\\/route\\.(ts|tsx|js|jsx)$/, '');\n      hint =\n        `Found callback route at ${existingRoutes[0]} but redirect URI points to ${callbackPath}. Either:\\n` +\n        `  1. Change NEXT_PUBLIC_WORKOS_REDIRECT_URI to http://localhost:3000${actualPath}\\n` +\n        `  2. Move the route to app/${routePath}/route.ts`;\n    }\n\n    issues.push({\n      type: 'file',\n      severity: 'error',\n      message: `Redirect URI path \"${callbackPath}\" has no matching route file`,\n      hint,\n    });\n  }\n}\n\n/**\n * Validates that the React Router redirect URI matches an existing callback route.\n *\n * React Router v7 framework mode uses file-based routing:\n * - /auth/callback → app/routes/auth.callback.tsx (dot notation)\n * - /auth/callback → app/routes/auth/callback.tsx (nested folders)\n */\nasync function validateReactRouterRedirectUri(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  const envPath = join(projectDir, '.env.local');\n  let envContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return;\n  }\n\n  const match = envContent.match(/^WORKOS_REDIRECT_URI=(.+)$/m);\n  if (!match) {\n    return;\n  }\n\n  const redirectUri = match[1].trim();\n  let callbackPath: string;\n\n  try {\n    const url = new URL(redirectUri);\n    callbackPath = url.pathname;\n  } catch {\n    issues.push({\n      type: 'env',\n      severity: 'error',\n      message: `Invalid redirect URI: ${redirectUri}`,\n      hint: 'WORKOS_REDIRECT_URI must be a valid URL',\n    });\n    return;\n  }\n\n  const routePath = callbackPath.replace(/^\\//, '');\n  // React Router uses dot notation: /auth/callback → auth.callback\n  const dotPath = routePath.replace(/\\//g, '.');\n\n  // Check possible route file locations\n  const routePatterns = [\n    // Dot notation (e.g., app/routes/auth.callback.tsx)\n    `app/routes/${dotPath}.tsx`,\n    `app/routes/${dotPath}.ts`,\n    `app/routes/${dotPath}.jsx`,\n    `app/routes/${dotPath}.js`,\n    // Nested folders (e.g., app/routes/auth/callback.tsx)\n    `app/routes/${routePath}.tsx`,\n    `app/routes/${routePath}.ts`,\n    `app/routes/${routePath}.jsx`,\n    `app/routes/${routePath}.js`,\n    // Index file in folder (e.g., app/routes/auth/callback/index.tsx)\n    `app/routes/${routePath}/index.tsx`,\n    `app/routes/${routePath}/index.ts`,\n    `app/routes/${routePath}/index.jsx`,\n    `app/routes/${routePath}/index.js`,\n    // Route file in folder (e.g., app/routes/auth/callback/route.tsx)\n    `app/routes/${routePath}/route.tsx`,\n    `app/routes/${routePath}/route.ts`,\n    `app/routes/${routePath}/route.jsx`,\n    `app/routes/${routePath}/route.js`,\n  ];\n\n  const routeExists = routePatterns.some((pattern) => existsSync(join(projectDir, pattern)));\n\n  if (!routeExists) {\n    const existingRoutes = await fg(['app/routes/**/*callback*.{ts,tsx,js,jsx}'], {\n      cwd: projectDir,\n    });\n\n    let hint = `Create a route at app/routes/${dotPath}.tsx`;\n    if (existingRoutes.length > 0) {\n      const actualFile = existingRoutes[0];\n      // Convert file path back to URL path\n      const actualPath =\n        '/' +\n        actualFile\n          .replace(/^app\\/routes\\//, '')\n          .replace(/\\.(tsx?|jsx?)$/, '')\n          .replace(/\\/(index|route)$/, '')\n          .replace(/\\./g, '/');\n      hint =\n        `Found callback route at ${actualFile} but redirect URI points to ${callbackPath}. Either:\\n` +\n        `  1. Change WORKOS_REDIRECT_URI to http://localhost:3000${actualPath}\\n` +\n        `  2. Move the route to app/routes/${dotPath}.tsx`;\n    }\n\n    issues.push({\n      type: 'file',\n      severity: 'error',\n      message: `Redirect URI path \"${callbackPath}\" has no matching route file`,\n      hint,\n    });\n  }\n}\n\n/**\n * Validates that the TanStack Start redirect URI matches an existing callback route.\n *\n * TanStack Start uses file-based routing:\n * - /auth/callback → app/routes/auth/callback.tsx\n */\nasync function validateTanstackStartRedirectUri(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  const envPath = join(projectDir, '.env.local');\n  let envContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return;\n  }\n\n  const match = envContent.match(/^WORKOS_REDIRECT_URI=(.+)$/m);\n  if (!match) {\n    return;\n  }\n\n  const redirectUri = match[1].trim();\n  let callbackPath: string;\n\n  try {\n    const url = new URL(redirectUri);\n    callbackPath = url.pathname;\n  } catch {\n    issues.push({\n      type: 'env',\n      severity: 'error',\n      message: `Invalid redirect URI: ${redirectUri}`,\n      hint: 'WORKOS_REDIRECT_URI must be a valid URL',\n    });\n    return;\n  }\n\n  const routePath = callbackPath.replace(/^\\//, '');\n\n  // TanStack Start route patterns\n  const routePatterns = [\n    `app/routes/${routePath}.tsx`,\n    `app/routes/${routePath}.ts`,\n    `app/routes/${routePath}.jsx`,\n    `app/routes/${routePath}.js`,\n    `app/routes/${routePath}/index.tsx`,\n    `app/routes/${routePath}/index.ts`,\n    `app/routes/${routePath}/index.jsx`,\n    `app/routes/${routePath}/index.js`,\n  ];\n\n  const routeExists = routePatterns.some((pattern) => existsSync(join(projectDir, pattern)));\n\n  if (!routeExists) {\n    const existingRoutes = await fg(['app/routes/**/*callback*.{ts,tsx,js,jsx}'], {\n      cwd: projectDir,\n    });\n\n    let hint = `Create a route at app/routes/${routePath}.tsx`;\n    if (existingRoutes.length > 0) {\n      const actualFile = existingRoutes[0];\n      const actualPath =\n        '/' +\n        actualFile\n          .replace(/^app\\/routes\\//, '')\n          .replace(/\\.(tsx?|jsx?)$/, '')\n          .replace(/\\/index$/, '');\n      hint =\n        `Found callback route at ${actualFile} but redirect URI points to ${callbackPath}. Either:\\n` +\n        `  1. Change WORKOS_REDIRECT_URI to http://localhost:3000${actualPath}\\n` +\n        `  2. Move the route to app/routes/${routePath}.tsx`;\n    }\n\n    issues.push({\n      type: 'file',\n      severity: 'error',\n      message: `Redirect URI path \"${callbackPath}\" has no matching route file`,\n      hint,\n    });\n  }\n}\n\n/**\n * Validates cookie password is at least 32 characters.\n * WorkOS requires this for secure session encryption.\n */\nasync function validateCookiePasswordLength(\n  projectDir: string,\n  issues: ValidationIssue[],\n  envVarName: string,\n): Promise<void> {\n  const envPath = join(projectDir, '.env.local');\n  let envContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return; // No .env.local - other validators handle this\n  }\n\n  const match = envContent.match(new RegExp(`^${envVarName}=(.*)$`, 'm'));\n  if (!match) {\n    return; // Missing env var - other validators handle this\n  }\n\n  const password = match[1].trim();\n  if (password.length < 32) {\n    issues.push({\n      type: 'env',\n      severity: 'error',\n      message: `${envVarName} must be at least 32 characters (currently ${password.length})`,\n      hint: `Generate a secure password: openssl rand -base64 32`,\n    });\n  }\n}\n\n/**\n * Validates credential formats:\n * - API key should start with sk_\n * - Client ID should start with client_\n */\nasync function validateCredentialFormats(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  const envPath = join(projectDir, '.env.local');\n  let envContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return;\n  }\n\n  // Check API key format (any common variation)\n  const apiKeyPatterns = [/^WORKOS_API_KEY=(.*)$/m, /^NEXT_PUBLIC_WORKOS_API_KEY=(.*)$/m];\n\n  for (const pattern of apiKeyPatterns) {\n    const match = envContent.match(pattern);\n    if (match) {\n      const value = match[1].trim();\n      if (value && !value.startsWith('sk_')) {\n        issues.push({\n          type: 'env',\n          severity: 'error',\n          message: `Invalid API key format: \"${value.substring(0, 10)}...\"`,\n          hint: 'WorkOS API keys start with \"sk_\". Check your WorkOS Dashboard for the correct key.',\n        });\n      }\n    }\n  }\n\n  // Check Client ID format\n  const clientIdPatterns = [/^WORKOS_CLIENT_ID=(.*)$/m, /^NEXT_PUBLIC_WORKOS_CLIENT_ID=(.*)$/m];\n\n  for (const pattern of clientIdPatterns) {\n    const match = envContent.match(pattern);\n    if (match) {\n      const value = match[1].trim();\n      if (value && !value.startsWith('client_')) {\n        issues.push({\n          type: 'env',\n          severity: 'error',\n          message: `Invalid Client ID format: \"${value.substring(0, 15)}...\"`,\n          hint: 'WorkOS Client IDs start with \"client_\". Check your WorkOS Dashboard for the correct ID.',\n        });\n      }\n    }\n  }\n}\n\n/**\n * Validates Next.js middleware/proxy is at the correct location.\n * Must be alongside the app/ directory — Next.js only watches for these files\n * in the parent directory of app/.\n */\nasync function validateNextjsMiddlewarePlacement(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  // Determine where app/ lives to know where middleware/proxy should be\n  const appInSrc = existsSync(join(projectDir, 'src', 'app'));\n  const expectedDir = appInSrc ? 'src/' : '';\n\n  const correctPaths = [\n    `${expectedDir}middleware.ts`,\n    `${expectedDir}middleware.js`,\n    `${expectedDir}proxy.ts`,\n    `${expectedDir}proxy.js`,\n  ];\n\n  const hasCorrectPlacement = correctPaths.some((p) => existsSync(join(projectDir, p)));\n  if (hasCorrectPlacement) {\n    return;\n  }\n\n  // Check for middleware/proxy at the wrong level\n  const allPossible = [\n    'middleware.ts',\n    'middleware.js',\n    'src/middleware.ts',\n    'src/middleware.js',\n    'proxy.ts',\n    'proxy.js',\n    'src/proxy.ts',\n    'src/proxy.js',\n  ];\n  const wrongLevel = allPossible.find((p) => existsSync(join(projectDir, p)) && !correctPaths.includes(p));\n\n  if (wrongLevel) {\n    const correctLevel = appInSrc ? 'src/' : 'project root';\n    issues.push({\n      type: 'file',\n      severity: 'error',\n      message: `${wrongLevel} is at the wrong level — app/ is in ${appInSrc ? 'src/' : 'root'}`,\n      hint: `Move it to ${expectedDir}${wrongLevel.replace(/^src\\//, '')} (must be alongside app/ directory). Next.js silently ignores middleware/proxy files at the wrong level.`,\n    });\n    return;\n  }\n\n  // Check for deeply misplaced middleware\n  const misplaced = await fg(['**/{middleware,proxy}.{ts,js}'], {\n    cwd: projectDir,\n    ignore: ['node_modules/**'],\n  });\n\n  if (misplaced.length > 0) {\n    issues.push({\n      type: 'file',\n      severity: 'error',\n      message: `middleware/proxy found at wrong location: ${misplaced[0]}`,\n      hint: `Must be at ${expectedDir}middleware.ts or ${expectedDir}proxy.ts (alongside app/ directory).`,\n    });\n  }\n}\n\n/**\n * Validates React SPA has AuthKitProvider wrapping the app.\n */\nasync function validateReactProviderWrapping(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  // Common entry points for React apps\n  const entryPatterns = [\n    'src/main.tsx',\n    'src/main.jsx',\n    'src/index.tsx',\n    'src/index.jsx',\n    'src/App.tsx',\n    'src/App.jsx',\n    'app/layout.tsx',\n    'app/layout.jsx',\n  ];\n\n  let foundProvider = false;\n\n  for (const pattern of entryPatterns) {\n    const filePath = join(projectDir, pattern);\n    if (!existsSync(filePath)) continue;\n\n    try {\n      const content = await readFile(filePath, 'utf-8');\n      if (content.includes('AuthKitProvider')) {\n        foundProvider = true;\n        break;\n      }\n    } catch {\n      continue;\n    }\n  }\n\n  if (!foundProvider) {\n    // Check if package is installed (if not, other validators handle it)\n    const pkgPath = join(projectDir, 'package.json');\n    if (existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(await readFile(pkgPath, 'utf-8'));\n        const deps = { ...pkg.dependencies, ...pkg.devDependencies };\n        if (deps['@workos-inc/authkit-react']) {\n          issues.push({\n            type: 'pattern',\n            severity: 'warning',\n            message: 'AuthKitProvider not found in common entry points',\n            hint: 'Wrap your app with <AuthKitProvider> in main.tsx or App.tsx. See: https://workos.com/docs/user-management/react/authkit',\n          });\n        }\n      } catch {\n        // Malformed package.json - skip\n      }\n    }\n  }\n}\n\n/**\n * Detects duplicate env vars between .env and .env.local with different values.\n * This can cause confusing behavior where wrong values are used.\n */\nasync function validateDuplicateEnvVars(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  const envPath = join(projectDir, '.env');\n  const envLocalPath = join(projectDir, '.env.local');\n\n  let envContent: string;\n  let envLocalContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return; // No .env file - no conflict possible\n  }\n\n  try {\n    envLocalContent = await readFile(envLocalPath, 'utf-8');\n  } catch {\n    return; // No .env.local - no conflict possible\n  }\n\n  // Parse env files into key-value maps\n  const parseEnv = (content: string): Map<string, string> => {\n    const map = new Map<string, string>();\n    for (const line of content.split('\\n')) {\n      const match = line.match(/^([A-Z_][A-Z0-9_]*)=(.*)$/);\n      if (match) {\n        map.set(match[1], match[2].trim());\n      }\n    }\n    return map;\n  };\n\n  const envVars = parseEnv(envContent);\n  const envLocalVars = parseEnv(envLocalContent);\n\n  // Check for WorkOS-related vars that differ\n  const workosVars = [\n    'WORKOS_API_KEY',\n    'WORKOS_CLIENT_ID',\n    'WORKOS_REDIRECT_URI',\n    'WORKOS_COOKIE_PASSWORD',\n    'NEXT_PUBLIC_WORKOS_CLIENT_ID',\n    'NEXT_PUBLIC_WORKOS_REDIRECT_URI',\n  ];\n\n  for (const varName of workosVars) {\n    const envValue = envVars.get(varName);\n    const localValue = envLocalVars.get(varName);\n\n    if (envValue && localValue && envValue !== localValue) {\n      issues.push({\n        type: 'env',\n        severity: 'warning',\n        message: `${varName} has different values in .env and .env.local`,\n        hint: `.env.local takes precedence. Remove from .env to avoid confusion, or ensure they match.`,\n      });\n    }\n  }\n}\n"]}
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../../src/lib/validation/validator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,MAAM,WAAW,CAAC;AAE3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAO1D,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,UAAkB,EAClB,UAA2B,EAAE;IAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,mDAAmD;IACnD,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,SAAS;YACT,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;SACnC,CAAC;IACJ,CAAC;IAED,kBAAkB;IAClB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,eAAe,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAEzD,2CAA2C;IAC3C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,yBAAyB,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAEzE,kCAAkC;IAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QACjE,SAAS;QACT,MAAM;QACN,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;KACnC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,OAAgB;IAC1D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,WAAW,SAAS,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;QAErD,mCAAmC;QACnC,IAAI,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC7C,OAAO;gBACL,GAAG,KAAK;gBACR,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBACtD,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;gBAC/D,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;aAC7D,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,kCAAkC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAsB,EAAE,UAAkB;IAC/E,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC;IAExC,IAAI,GAA4B,CAAC;IACjC,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;QACnD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAA2B,CAAC;IAChE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAA2B,CAAC;IACtE,MAAM,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;QACxC,MAAM,QAAQ,GAAG,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QAE7F,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;gBACxC,IAAI,EAAE,oBAAoB,IAAI,CAAC,IAAI,EAAE;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAsB,EAAE,UAAkB;IAC9E,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAU,GAAG,EAAE,CAAC;IAEpB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,yBAAyB;gBAClC,IAAI,EAAE,uDAAuD;aAC9D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACjC,wCAAwC;QACxC,MAAM,WAAW,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACzC,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,KAAK,EAAE,GAAG,CAAC,CAAC;YAClD,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU;gBAC1B,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,gBAAgB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;gBAC7E,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,2BAA2B,CAAC;YAEhD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;gBACvD,OAAO,EAAE,iCAAiC,IAAI,CAAC,IAAI,EAAE;gBACrD,IAAI;aACL,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAsB,EAAE,UAAkB;IAC5E,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;YAC9B,SAAS;QACX,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,iBAAiB,IAAI,CAAC,IAAI,EAAE;gBACrC,IAAI,EAAE,UAAU,IAAI,CAAC,IAAI,EAAE;aAC5B,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,yBAAyB;QACzB,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBACP,wCAAwC;gBACxC,SAAS;YACX,CAAC;YAED,sBAAsB;YACtB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACvC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC/B,MAAM,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,SAAS;4BACf,QAAQ,EAAE,SAAS;4BACnB,OAAO,EAAE,QAAQ,OAAO,CAAC,CAAC,CAAC,+BAA+B,OAAO,GAAG;4BACpE,IAAI,EAAE,UAAU,OAAO,CAAC,CAAC,CAAC,cAAc,OAAO,EAAE;yBAClD,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YAED,+BAA+B;YAC/B,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpE,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,SAAS;wBACnB,OAAO,EAAE,QAAQ,OAAO,CAAC,CAAC,CAAC,oBAAoB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;wBAC/E,IAAI,EAAE,UAAU,OAAO,CAAC,CAAC,CAAC,iCAAiC;qBAC5D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,SAAiB,EAAE,UAAkB;IACnF,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,8BAA8B;IAC9B,MAAM,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,wBAAwB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAEnD,iCAAiC;IACjC,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,QAAQ;YACX,MAAM,yBAAyB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACpD,MAAM,iCAAiC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC5D,MAAM,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;YACjF,MAAM;QACR,KAAK,OAAO;YACV,MAAM,6BAA6B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACxD,MAAM;QACR,KAAK,cAAc;YACjB,MAAM,8BAA8B,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACzD,MAAM,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;YACjF,MAAM;QACR,KAAK,gBAAgB;YACnB,MAAM,gCAAgC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,4BAA4B,CAAC,UAAU,EAAE,MAAM,EAAE,wBAAwB,CAAC,CAAC;YACjF,MAAM;IACV,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,yBAAyB,CAAC,UAAkB,EAAE,MAAyB;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,+CAA+C;IACzD,CAAC;IAED,6BAA6B;IAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,iDAAiD;IAC3D,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,YAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,yBAAyB,WAAW,EAAE;YAC/C,IAAI,EAAE,qDAAqD;SAC5D,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,yCAAyC;IACzC,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAElD,uEAAuE;IACvE,MAAM,aAAa,GAAG;QACpB,OAAO,SAAS,WAAW;QAC3B,OAAO,SAAS,YAAY;QAC5B,OAAO,SAAS,WAAW;QAC3B,OAAO,SAAS,YAAY;QAC5B,WAAW,SAAS,WAAW;QAC/B,WAAW,SAAS,YAAY;QAChC,WAAW,SAAS,WAAW;QAC/B,WAAW,SAAS,YAAY;KACjC,CAAC;IAEF,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,mDAAmD;QACnD,MAAM,cAAc,GAAG,MAAM,EAAE,CAC7B,CAAC,0CAA0C,EAAE,8CAA8C,CAAC,EAC5F;YACE,GAAG,EAAE,UAAU;SAChB,CACF,CAAC;QAEF,IAAI,IAAI,GAAG,iCAAiC,SAAS,WAAW,CAAC;QACjE,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,0DAA0D;YAC1D,MAAM,UAAU,GAAG,GAAG,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;YAClH,IAAI;gBACF,2BAA2B,cAAc,CAAC,CAAC,CAAC,+BAA+B,YAAY,aAAa;oBACpG,uEAAuE,UAAU,IAAI;oBACrF,8BAA8B,SAAS,WAAW,CAAC;QACvD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sBAAsB,YAAY,8BAA8B;YACzE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,8BAA8B,CAAC,UAAkB,EAAE,MAAyB;IACzF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,YAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,yBAAyB,WAAW,EAAE;YAC/C,IAAI,EAAE,yCAAyC;SAChD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,iEAAiE;IACjE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAE9C,sCAAsC;IACtC,MAAM,aAAa,GAAG;QACpB,oDAAoD;QACpD,cAAc,OAAO,MAAM;QAC3B,cAAc,OAAO,KAAK;QAC1B,cAAc,OAAO,MAAM;QAC3B,cAAc,OAAO,KAAK;QAC1B,sDAAsD;QACtD,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,kEAAkE;QAClE,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,kEAAkE;QAClE,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;KACnC,CAAC;IAEF,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,CAAC,0CAA0C,CAAC,EAAE;YAC5E,GAAG,EAAE,UAAU;SAChB,CAAC,CAAC;QAEH,IAAI,IAAI,GAAG,gCAAgC,OAAO,MAAM,CAAC;QACzD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YACrC,qCAAqC;YACrC,MAAM,UAAU,GACd,GAAG;gBACH,UAAU;qBACP,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;qBAC/B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACzB,IAAI;gBACF,2BAA2B,UAAU,+BAA+B,YAAY,aAAa;oBAC7F,2DAA2D,UAAU,IAAI;oBACzE,qCAAqC,OAAO,MAAM,CAAC;QACvD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sBAAsB,YAAY,8BAA8B;YACzE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gCAAgC,CAAC,UAAkB,EAAE,MAAyB;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,YAAoB,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,YAAY,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,yBAAyB,WAAW,EAAE;YAC/C,IAAI,EAAE,yCAAyC;SAChD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAElD,gCAAgC;IAChC,MAAM,aAAa,GAAG;QACpB,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,cAAc,SAAS,MAAM;QAC7B,cAAc,SAAS,KAAK;QAC5B,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;QAClC,cAAc,SAAS,YAAY;QACnC,cAAc,SAAS,WAAW;KACnC,CAAC;IAEF,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAE3F,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,CAAC,0CAA0C,CAAC,EAAE;YAC5E,GAAG,EAAE,UAAU;SAChB,CAAC,CAAC;QAEH,IAAI,IAAI,GAAG,gCAAgC,SAAS,MAAM,CAAC;QAC3D,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,UAAU,GACd,GAAG;gBACH,UAAU;qBACP,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC;qBAC7B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YAC7B,IAAI;gBACF,2BAA2B,UAAU,+BAA+B,YAAY,aAAa;oBAC7F,2DAA2D,UAAU,IAAI;oBACzE,qCAAqC,SAAS,MAAM,CAAC;QACzD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,sBAAsB,YAAY,8BAA8B;YACzE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,4BAA4B,CACzC,UAAkB,EAClB,MAAyB,EACzB,UAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,+CAA+C;IACzD,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,UAAU,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC;IACxE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,iDAAiD;IAC3D,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,KAAK;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,GAAG,UAAU,8CAA8C,QAAQ,CAAC,MAAM,GAAG;YACtF,IAAI,EAAE,qDAAqD;SAC5D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,yBAAyB,CAAC,UAAkB,EAAE,MAAyB;IACpF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAC/C,IAAI,UAAkB,CAAC;IAEvB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,8CAA8C;IAC9C,MAAM,cAAc,GAAG,CAAC,wBAAwB,EAAE,oCAAoC,CAAC,CAAC;IAExF,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,4BAA4B,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;oBACjE,IAAI,EAAE,oFAAoF;iBAC3F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,gBAAgB,GAAG,CAAC,0BAA0B,EAAE,sCAAsC,CAAC,CAAC;IAE9F,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1C,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,8BAA8B,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;oBACnE,IAAI,EAAE,yFAAyF;iBAChG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iCAAiC,CAAC,UAAkB,EAAE,MAAyB;IAC5F,sEAAsE;IACtE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3C,MAAM,YAAY,GAAG;QACnB,GAAG,WAAW,eAAe;QAC7B,GAAG,WAAW,eAAe;QAC7B,GAAG,WAAW,UAAU;QACxB,GAAG,WAAW,UAAU;KACzB,CAAC;IAEF,MAAM,mBAAmB,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,mBAAmB,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IAED,gDAAgD;IAChD,MAAM,WAAW,GAAG;QAClB,eAAe;QACf,eAAe;QACf,mBAAmB;QACnB,mBAAmB;QACnB,UAAU;QACV,UAAU;QACV,cAAc;QACd,cAAc;KACf,CAAC;IACF,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzG,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,GAAG,UAAU,uCAAuC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE;YACzF,IAAI,EAAE,cAAc,WAAW,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,0GAA0G;SAC7K,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,wCAAwC;IACxC,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,CAAC,+BAA+B,CAAC,EAAE;QAC5D,GAAG,EAAE,UAAU;QACf,MAAM,EAAE,CAAC,iBAAiB,CAAC;KAC5B,CAAC,CAAC;IAEH,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,MAAM;YACZ,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,6CAA6C,SAAS,CAAC,CAAC,CAAC,EAAE;YACpE,IAAI,EAAE,cAAc,WAAW,oBAAoB,WAAW,sCAAsC;SACrG,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,6BAA6B,CAAC,UAAkB,EAAE,MAAyB;IACxF,qCAAqC;IACrC,MAAM,aAAa,GAAG;QACpB,cAAc;QACd,cAAc;QACd,eAAe;QACf,eAAe;QACf,aAAa;QACb,aAAa;QACb,gBAAgB;QAChB,gBAAgB;KACjB,CAAC;IAEF,IAAI,aAAa,GAAG,KAAK,CAAC;IAE1B,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,SAAS;QAEpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBACxC,aAAa,GAAG,IAAI,CAAC;gBACrB,MAAM;YACR,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,qEAAqE;QACrE,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACjD,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBACzD,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,CAAC;gBAC7D,IAAI,IAAI,CAAC,2BAA2B,CAAC,EAAE,CAAC;oBACtC,MAAM,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,SAAS;wBACf,QAAQ,EAAE,SAAS;wBACnB,OAAO,EAAE,kDAAkD;wBAC3D,IAAI,EAAE,yHAAyH;qBAChI,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gCAAgC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,wBAAwB,CAAC,UAAkB,EAAE,MAAyB;IACnF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAEpD,IAAI,UAAkB,CAAC;IACvB,IAAI,eAAuB,CAAC;IAE5B,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,sCAAsC;IAChD,CAAC;IAED,IAAI,CAAC;QACH,eAAe,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,uCAAuC;IACjD,CAAC;IAED,sCAAsC;IACtC,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAuB,EAAE;QACxD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACtD,IAAI,KAAK,EAAE,CAAC;gBACV,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;IAE/C,4CAA4C;IAC5C,MAAM,UAAU,GAAG;QACjB,gBAAgB;QAChB,kBAAkB;QAClB,qBAAqB;QACrB,wBAAwB;QACxB,8BAA8B;QAC9B,iCAAiC;KAClC,CAAC;IAEF,KAAK,MAAM,OAAO,IAAI,UAAU,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAE7C,IAAI,QAAQ,IAAI,UAAU,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,SAAS;gBACnB,OAAO,EAAE,GAAG,OAAO,8CAA8C;gBACjE,IAAI,EAAE,yFAAyF;aAChG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC","sourcesContent":["import { readFile } from 'fs/promises';\nimport { existsSync } from 'fs';\nimport { join } from 'path';\nimport fg from 'fast-glob';\nimport type { ValidationResult, ValidationRules, ValidationIssue } from './types.js';\nimport { runBuildValidation } from './build-validator.js';\n\nexport interface ValidateOptions {\n  variant?: string;\n  runBuild?: boolean;\n}\n\nexport async function validateInstallation(\n  framework: string,\n  projectDir: string,\n  options: ValidateOptions = {},\n): Promise<ValidationResult> {\n  const startTime = Date.now();\n  const issues: ValidationIssue[] = [];\n\n  // Load rules for framework (with optional variant)\n  const rules = await loadRules(framework, options.variant);\n  if (!rules) {\n    return {\n      passed: true,\n      framework,\n      issues: [],\n      durationMs: Date.now() - startTime,\n    };\n  }\n\n  // Run validations\n  issues.push(...(await validatePackages(rules, projectDir)));\n  issues.push(...(await validateEnvVars(rules, projectDir)));\n  issues.push(...(await validateFiles(rules, projectDir)));\n\n  // Run framework-specific cross-validations\n  issues.push(...(await validateFrameworkSpecific(framework, projectDir)));\n\n  // Run build validation if enabled\n  if (options.runBuild !== false) {\n    const buildResult = await runBuildValidation(projectDir);\n    issues.push(...buildResult.issues);\n  }\n\n  return {\n    passed: issues.filter((i) => i.severity === 'error').length === 0,\n    framework,\n    issues,\n    durationMs: Date.now() - startTime,\n  };\n}\n\nasync function loadRules(framework: string, variant?: string): Promise<ValidationRules | null> {\n  const rulesPath = new URL(`./rules/${framework}.json`, import.meta.url);\n  try {\n    const content = await readFile(rulesPath, 'utf-8');\n    const rules = JSON.parse(content) as ValidationRules;\n\n    // Merge variant rules if specified\n    if (variant && rules.variants?.[variant]) {\n      const variantRules = rules.variants[variant];\n      return {\n        ...rules,\n        files: [...rules.files, ...(variantRules.files || [])],\n        packages: [...rules.packages, ...(variantRules.packages || [])],\n        envVars: [...rules.envVars, ...(variantRules.envVars || [])],\n      };\n    }\n\n    return rules;\n  } catch {\n    return null; // No rules for this framework yet\n  }\n}\n\nexport async function validatePackages(rules: ValidationRules, projectDir: string): Promise<ValidationIssue[]> {\n  const issues: ValidationIssue[] = [];\n  const pkgPath = join(projectDir, 'package.json');\n  if (!existsSync(pkgPath)) return issues;\n\n  let pkg: Record<string, unknown>;\n  try {\n    pkg = JSON.parse(await readFile(pkgPath, 'utf-8'));\n  } catch {\n    // Malformed package.json - skip package validation\n    return issues;\n  }\n\n  const deps = (pkg.dependencies || {}) as Record<string, string>;\n  const devDeps = (pkg.devDependencies || {}) as Record<string, string>;\n  const allDeps = { ...devDeps, ...deps };\n\n  for (const rule of rules.packages) {\n    const location = rule.location || 'any';\n    const searchIn = location === 'any' ? allDeps : location === 'dependencies' ? deps : devDeps;\n\n    if (!searchIn[rule.name]) {\n      issues.push({\n        type: 'package',\n        severity: 'error',\n        message: `Missing package: ${rule.name}`,\n        hint: `Run: npm install ${rule.name}`,\n      });\n    }\n  }\n\n  return issues;\n}\n\nexport async function validateEnvVars(rules: ValidationRules, projectDir: string): Promise<ValidationIssue[]> {\n  const issues: ValidationIssue[] = [];\n  const envPath = join(projectDir, '.env.local');\n  let envContent = '';\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    if (rules.envVars.length > 0) {\n      issues.push({\n        type: 'env',\n        severity: 'error',\n        message: 'Missing .env.local file',\n        hint: 'Create .env.local with required environment variables',\n      });\n    }\n    return issues;\n  }\n\n  for (const rule of rules.envVars) {\n    // Check primary name and any alternates\n    const varsToCheck = [rule.name, ...(rule.alternates || [])];\n    const found = varsToCheck.some((varName) => {\n      const pattern = new RegExp(`^${varName}=.+`, 'm');\n      return pattern.test(envContent);\n    });\n\n    if (!found) {\n      const hint = rule.alternates\n        ? `Add ${rule.name} (or one of: ${rule.alternates.join(', ')}) to .env.local`\n        : `Add ${rule.name}=your_value to .env.local`;\n\n      issues.push({\n        type: 'env',\n        severity: rule.required === false ? 'warning' : 'error',\n        message: `Missing environment variable: ${rule.name}`,\n        hint,\n      });\n    }\n  }\n\n  return issues;\n}\n\nexport async function validateFiles(rules: ValidationRules, projectDir: string): Promise<ValidationIssue[]> {\n  const issues: ValidationIssue[] = [];\n\n  for (const rule of rules.files) {\n    let matches: string[];\n    try {\n      matches = await fg(rule.path, { cwd: projectDir });\n    } catch {\n      // Invalid glob pattern - skip\n      continue;\n    }\n\n    if (matches.length === 0) {\n      issues.push({\n        type: 'file',\n        severity: 'error',\n        message: `Missing file: ${rule.path}`,\n        hint: `Create ${rule.path}`,\n      });\n      continue;\n    }\n\n    // Check content patterns\n    if (rule.mustContain || rule.mustContainAny) {\n      const filePath = join(projectDir, matches[0]);\n      let content: string;\n      try {\n        content = await readFile(filePath, 'utf-8');\n      } catch {\n        // File read error - skip content checks\n        continue;\n      }\n\n      // All must be present\n      if (rule.mustContain) {\n        for (const pattern of rule.mustContain) {\n          if (!content.includes(pattern)) {\n            issues.push({\n              type: 'pattern',\n              severity: 'warning',\n              message: `File ${matches[0]} missing expected pattern: \"${pattern}\"`,\n              hint: `Ensure ${matches[0]} contains: ${pattern}`,\n            });\n          }\n        }\n      }\n\n      // At least one must be present\n      if (rule.mustContainAny) {\n        const hasAny = rule.mustContainAny.some((p) => content.includes(p));\n        if (!hasAny) {\n          issues.push({\n            type: 'pattern',\n            severity: 'warning',\n            message: `File ${matches[0]} missing one of: ${rule.mustContainAny.join(', ')}`,\n            hint: `Ensure ${matches[0]} contains one of these patterns`,\n          });\n        }\n      }\n    }\n  }\n\n  return issues;\n}\n\n/**\n * Framework-specific cross-validations that require reading multiple sources.\n */\nexport async function validateFrameworkSpecific(framework: string, projectDir: string): Promise<ValidationIssue[]> {\n  const issues: ValidationIssue[] = [];\n\n  // Universal cross-validations\n  await validateCredentialFormats(projectDir, issues);\n  await validateDuplicateEnvVars(projectDir, issues);\n\n  // Framework-specific validations\n  switch (framework) {\n    case 'nextjs':\n      await validateNextjsRedirectUri(projectDir, issues);\n      await validateNextjsMiddlewarePlacement(projectDir, issues);\n      await validateCookiePasswordLength(projectDir, issues, 'WORKOS_COOKIE_PASSWORD');\n      break;\n    case 'react':\n      await validateReactProviderWrapping(projectDir, issues);\n      break;\n    case 'react-router':\n      await validateReactRouterRedirectUri(projectDir, issues);\n      await validateCookiePasswordLength(projectDir, issues, 'WORKOS_COOKIE_PASSWORD');\n      break;\n    case 'tanstack-start':\n      await validateTanstackStartRedirectUri(projectDir, issues);\n      await validateCookiePasswordLength(projectDir, issues, 'WORKOS_COOKIE_PASSWORD');\n      break;\n  }\n\n  return issues;\n}\n\n/**\n * Validates that the Next.js redirect URI matches an existing callback route.\n *\n * Common failure: .env.local has /auth/callback but route is at /api/auth/callback\n */\nasync function validateNextjsRedirectUri(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  const envPath = join(projectDir, '.env.local');\n  let envContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return; // No .env.local - other validators handle this\n  }\n\n  // Extract redirect URI value\n  const match = envContent.match(/^NEXT_PUBLIC_WORKOS_REDIRECT_URI=(.+)$/m);\n  if (!match) {\n    return; // Missing env var - other validators handle this\n  }\n\n  const redirectUri = match[1].trim();\n  let callbackPath: string;\n\n  try {\n    const url = new URL(redirectUri);\n    callbackPath = url.pathname;\n  } catch {\n    issues.push({\n      type: 'env',\n      severity: 'error',\n      message: `Invalid redirect URI: ${redirectUri}`,\n      hint: 'NEXT_PUBLIC_WORKOS_REDIRECT_URI must be a valid URL',\n    });\n    return;\n  }\n\n  // Remove leading slash for path matching\n  const routePath = callbackPath.replace(/^\\//, '');\n\n  // Check if route file exists at expected location (Next.js App Router)\n  const routePatterns = [\n    `app/${routePath}/route.ts`,\n    `app/${routePath}/route.tsx`,\n    `app/${routePath}/route.js`,\n    `app/${routePath}/route.jsx`,\n    `src/app/${routePath}/route.ts`,\n    `src/app/${routePath}/route.tsx`,\n    `src/app/${routePath}/route.js`,\n    `src/app/${routePath}/route.jsx`,\n  ];\n\n  const routeExists = routePatterns.some((pattern) => existsSync(join(projectDir, pattern)));\n\n  if (!routeExists) {\n    // Check what routes DO exist to give a better hint\n    const existingRoutes = await fg(\n      ['app/**/callback/**/route.{ts,tsx,js,jsx}', 'src/app/**/callback/**/route.{ts,tsx,js,jsx}'],\n      {\n        cwd: projectDir,\n      },\n    );\n\n    let hint = `Create a route handler at app/${routePath}/route.ts`;\n    if (existingRoutes.length > 0) {\n      // Found a route at a different path - likely the mismatch\n      const actualPath = '/' + existingRoutes[0].replace(/^(src\\/)?app\\//, '').replace(/\\/route\\.(ts|tsx|js|jsx)$/, '');\n      hint =\n        `Found callback route at ${existingRoutes[0]} but redirect URI points to ${callbackPath}. Either:\\n` +\n        `  1. Change NEXT_PUBLIC_WORKOS_REDIRECT_URI to http://localhost:3000${actualPath}\\n` +\n        `  2. Move the route to app/${routePath}/route.ts`;\n    }\n\n    issues.push({\n      type: 'file',\n      severity: 'error',\n      message: `Redirect URI path \"${callbackPath}\" has no matching route file`,\n      hint,\n    });\n  }\n}\n\n/**\n * Validates that the React Router redirect URI matches an existing callback route.\n *\n * React Router v7 framework mode uses file-based routing:\n * - /auth/callback → app/routes/auth.callback.tsx (dot notation)\n * - /auth/callback → app/routes/auth/callback.tsx (nested folders)\n */\nasync function validateReactRouterRedirectUri(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  const envPath = join(projectDir, '.env.local');\n  let envContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return;\n  }\n\n  const match = envContent.match(/^WORKOS_REDIRECT_URI=(.+)$/m);\n  if (!match) {\n    return;\n  }\n\n  const redirectUri = match[1].trim();\n  let callbackPath: string;\n\n  try {\n    const url = new URL(redirectUri);\n    callbackPath = url.pathname;\n  } catch {\n    issues.push({\n      type: 'env',\n      severity: 'error',\n      message: `Invalid redirect URI: ${redirectUri}`,\n      hint: 'WORKOS_REDIRECT_URI must be a valid URL',\n    });\n    return;\n  }\n\n  const routePath = callbackPath.replace(/^\\//, '');\n  // React Router uses dot notation: /auth/callback → auth.callback\n  const dotPath = routePath.replace(/\\//g, '.');\n\n  // Check possible route file locations\n  const routePatterns = [\n    // Dot notation (e.g., app/routes/auth.callback.tsx)\n    `app/routes/${dotPath}.tsx`,\n    `app/routes/${dotPath}.ts`,\n    `app/routes/${dotPath}.jsx`,\n    `app/routes/${dotPath}.js`,\n    // Nested folders (e.g., app/routes/auth/callback.tsx)\n    `app/routes/${routePath}.tsx`,\n    `app/routes/${routePath}.ts`,\n    `app/routes/${routePath}.jsx`,\n    `app/routes/${routePath}.js`,\n    // Index file in folder (e.g., app/routes/auth/callback/index.tsx)\n    `app/routes/${routePath}/index.tsx`,\n    `app/routes/${routePath}/index.ts`,\n    `app/routes/${routePath}/index.jsx`,\n    `app/routes/${routePath}/index.js`,\n    // Route file in folder (e.g., app/routes/auth/callback/route.tsx)\n    `app/routes/${routePath}/route.tsx`,\n    `app/routes/${routePath}/route.ts`,\n    `app/routes/${routePath}/route.jsx`,\n    `app/routes/${routePath}/route.js`,\n  ];\n\n  const routeExists = routePatterns.some((pattern) => existsSync(join(projectDir, pattern)));\n\n  if (!routeExists) {\n    const existingRoutes = await fg(['app/routes/**/*callback*.{ts,tsx,js,jsx}'], {\n      cwd: projectDir,\n    });\n\n    let hint = `Create a route at app/routes/${dotPath}.tsx`;\n    if (existingRoutes.length > 0) {\n      const actualFile = existingRoutes[0];\n      // Convert file path back to URL path\n      const actualPath =\n        '/' +\n        actualFile\n          .replace(/^app\\/routes\\//, '')\n          .replace(/\\.(tsx?|jsx?)$/, '')\n          .replace(/\\/(index|route)$/, '')\n          .replace(/\\./g, '/');\n      hint =\n        `Found callback route at ${actualFile} but redirect URI points to ${callbackPath}. Either:\\n` +\n        `  1. Change WORKOS_REDIRECT_URI to http://localhost:3000${actualPath}\\n` +\n        `  2. Move the route to app/routes/${dotPath}.tsx`;\n    }\n\n    issues.push({\n      type: 'file',\n      severity: 'error',\n      message: `Redirect URI path \"${callbackPath}\" has no matching route file`,\n      hint,\n    });\n  }\n}\n\n/**\n * Validates that the TanStack Start redirect URI matches an existing callback route.\n *\n * TanStack Start uses file-based routing:\n * - /auth/callback → app/routes/auth/callback.tsx\n */\nasync function validateTanstackStartRedirectUri(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  const envPath = join(projectDir, '.env.local');\n  let envContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return;\n  }\n\n  const match = envContent.match(/^WORKOS_REDIRECT_URI=(.+)$/m);\n  if (!match) {\n    return;\n  }\n\n  const redirectUri = match[1].trim();\n  let callbackPath: string;\n\n  try {\n    const url = new URL(redirectUri);\n    callbackPath = url.pathname;\n  } catch {\n    issues.push({\n      type: 'env',\n      severity: 'error',\n      message: `Invalid redirect URI: ${redirectUri}`,\n      hint: 'WORKOS_REDIRECT_URI must be a valid URL',\n    });\n    return;\n  }\n\n  const routePath = callbackPath.replace(/^\\//, '');\n\n  // TanStack Start route patterns\n  const routePatterns = [\n    `app/routes/${routePath}.tsx`,\n    `app/routes/${routePath}.ts`,\n    `app/routes/${routePath}.jsx`,\n    `app/routes/${routePath}.js`,\n    `app/routes/${routePath}/index.tsx`,\n    `app/routes/${routePath}/index.ts`,\n    `app/routes/${routePath}/index.jsx`,\n    `app/routes/${routePath}/index.js`,\n  ];\n\n  const routeExists = routePatterns.some((pattern) => existsSync(join(projectDir, pattern)));\n\n  if (!routeExists) {\n    const existingRoutes = await fg(['app/routes/**/*callback*.{ts,tsx,js,jsx}'], {\n      cwd: projectDir,\n    });\n\n    let hint = `Create a route at app/routes/${routePath}.tsx`;\n    if (existingRoutes.length > 0) {\n      const actualFile = existingRoutes[0];\n      const actualPath =\n        '/' +\n        actualFile\n          .replace(/^app\\/routes\\//, '')\n          .replace(/\\.(tsx?|jsx?)$/, '')\n          .replace(/\\/index$/, '');\n      hint =\n        `Found callback route at ${actualFile} but redirect URI points to ${callbackPath}. Either:\\n` +\n        `  1. Change WORKOS_REDIRECT_URI to http://localhost:3000${actualPath}\\n` +\n        `  2. Move the route to app/routes/${routePath}.tsx`;\n    }\n\n    issues.push({\n      type: 'file',\n      severity: 'error',\n      message: `Redirect URI path \"${callbackPath}\" has no matching route file`,\n      hint,\n    });\n  }\n}\n\n/**\n * Validates cookie password is at least 32 characters.\n * WorkOS requires this for secure session encryption.\n */\nasync function validateCookiePasswordLength(\n  projectDir: string,\n  issues: ValidationIssue[],\n  envVarName: string,\n): Promise<void> {\n  const envPath = join(projectDir, '.env.local');\n  let envContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return; // No .env.local - other validators handle this\n  }\n\n  const match = envContent.match(new RegExp(`^${envVarName}=(.*)$`, 'm'));\n  if (!match) {\n    return; // Missing env var - other validators handle this\n  }\n\n  const password = match[1].trim();\n  if (password.length < 32) {\n    issues.push({\n      type: 'env',\n      severity: 'error',\n      message: `${envVarName} must be at least 32 characters (currently ${password.length})`,\n      hint: `Generate a secure password: openssl rand -base64 32`,\n    });\n  }\n}\n\n/**\n * Validates credential formats:\n * - API key should start with sk_\n * - Client ID should start with client_\n */\nasync function validateCredentialFormats(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  const envPath = join(projectDir, '.env.local');\n  let envContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return;\n  }\n\n  // Check API key format (any common variation)\n  const apiKeyPatterns = [/^WORKOS_API_KEY=(.*)$/m, /^NEXT_PUBLIC_WORKOS_API_KEY=(.*)$/m];\n\n  for (const pattern of apiKeyPatterns) {\n    const match = envContent.match(pattern);\n    if (match) {\n      const value = match[1].trim();\n      if (value && !value.startsWith('sk_')) {\n        issues.push({\n          type: 'env',\n          severity: 'error',\n          message: `Invalid API key format: \"${value.substring(0, 10)}...\"`,\n          hint: 'WorkOS API keys start with \"sk_\". Check your WorkOS Dashboard for the correct key.',\n        });\n      }\n    }\n  }\n\n  // Check Client ID format\n  const clientIdPatterns = [/^WORKOS_CLIENT_ID=(.*)$/m, /^NEXT_PUBLIC_WORKOS_CLIENT_ID=(.*)$/m];\n\n  for (const pattern of clientIdPatterns) {\n    const match = envContent.match(pattern);\n    if (match) {\n      const value = match[1].trim();\n      if (value && !value.startsWith('client_')) {\n        issues.push({\n          type: 'env',\n          severity: 'error',\n          message: `Invalid Client ID format: \"${value.substring(0, 15)}...\"`,\n          hint: 'WorkOS Client IDs start with \"client_\". Check your WorkOS Dashboard for the correct ID.',\n        });\n      }\n    }\n  }\n}\n\n/**\n * Validates Next.js middleware/proxy is at the correct location.\n * Must be alongside the app/ directory — Next.js only watches for these files\n * in the parent directory of app/.\n */\nasync function validateNextjsMiddlewarePlacement(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  // Determine where app/ lives to know where middleware/proxy should be\n  const appInSrc = existsSync(join(projectDir, 'src', 'app'));\n  const expectedDir = appInSrc ? 'src/' : '';\n\n  const correctPaths = [\n    `${expectedDir}middleware.ts`,\n    `${expectedDir}middleware.js`,\n    `${expectedDir}proxy.ts`,\n    `${expectedDir}proxy.js`,\n  ];\n\n  const hasCorrectPlacement = correctPaths.some((p) => existsSync(join(projectDir, p)));\n  if (hasCorrectPlacement) {\n    return;\n  }\n\n  // Check for middleware/proxy at the wrong level\n  const allPossible = [\n    'middleware.ts',\n    'middleware.js',\n    'src/middleware.ts',\n    'src/middleware.js',\n    'proxy.ts',\n    'proxy.js',\n    'src/proxy.ts',\n    'src/proxy.js',\n  ];\n  const wrongLevel = allPossible.find((p) => existsSync(join(projectDir, p)) && !correctPaths.includes(p));\n\n  if (wrongLevel) {\n    issues.push({\n      type: 'file',\n      severity: 'error',\n      message: `${wrongLevel} is at the wrong level — app/ is in ${appInSrc ? 'src/' : 'root'}`,\n      hint: `Move it to ${expectedDir}${wrongLevel.replace(/^src\\//, '')} (must be alongside app/ directory). Next.js silently ignores middleware/proxy files at the wrong level.`,\n    });\n    return;\n  }\n\n  // Check for deeply misplaced middleware\n  const misplaced = await fg(['**/{middleware,proxy}.{ts,js}'], {\n    cwd: projectDir,\n    ignore: ['node_modules/**'],\n  });\n\n  if (misplaced.length > 0) {\n    issues.push({\n      type: 'file',\n      severity: 'error',\n      message: `middleware/proxy found at wrong location: ${misplaced[0]}`,\n      hint: `Must be at ${expectedDir}middleware.ts or ${expectedDir}proxy.ts (alongside app/ directory).`,\n    });\n  }\n}\n\n/**\n * Validates React SPA has AuthKitProvider wrapping the app.\n */\nasync function validateReactProviderWrapping(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  // Common entry points for React apps\n  const entryPatterns = [\n    'src/main.tsx',\n    'src/main.jsx',\n    'src/index.tsx',\n    'src/index.jsx',\n    'src/App.tsx',\n    'src/App.jsx',\n    'app/layout.tsx',\n    'app/layout.jsx',\n  ];\n\n  let foundProvider = false;\n\n  for (const pattern of entryPatterns) {\n    const filePath = join(projectDir, pattern);\n    if (!existsSync(filePath)) continue;\n\n    try {\n      const content = await readFile(filePath, 'utf-8');\n      if (content.includes('AuthKitProvider')) {\n        foundProvider = true;\n        break;\n      }\n    } catch {\n      continue;\n    }\n  }\n\n  if (!foundProvider) {\n    // Check if package is installed (if not, other validators handle it)\n    const pkgPath = join(projectDir, 'package.json');\n    if (existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(await readFile(pkgPath, 'utf-8'));\n        const deps = { ...pkg.dependencies, ...pkg.devDependencies };\n        if (deps['@workos-inc/authkit-react']) {\n          issues.push({\n            type: 'pattern',\n            severity: 'warning',\n            message: 'AuthKitProvider not found in common entry points',\n            hint: 'Wrap your app with <AuthKitProvider> in main.tsx or App.tsx. See: https://workos.com/docs/user-management/react/authkit',\n          });\n        }\n      } catch {\n        // Malformed package.json - skip\n      }\n    }\n  }\n}\n\n/**\n * Detects duplicate env vars between .env and .env.local with different values.\n * This can cause confusing behavior where wrong values are used.\n */\nasync function validateDuplicateEnvVars(projectDir: string, issues: ValidationIssue[]): Promise<void> {\n  const envPath = join(projectDir, '.env');\n  const envLocalPath = join(projectDir, '.env.local');\n\n  let envContent: string;\n  let envLocalContent: string;\n\n  try {\n    envContent = await readFile(envPath, 'utf-8');\n  } catch {\n    return; // No .env file - no conflict possible\n  }\n\n  try {\n    envLocalContent = await readFile(envLocalPath, 'utf-8');\n  } catch {\n    return; // No .env.local - no conflict possible\n  }\n\n  // Parse env files into key-value maps\n  const parseEnv = (content: string): Map<string, string> => {\n    const map = new Map<string, string>();\n    for (const line of content.split('\\n')) {\n      const match = line.match(/^([A-Z_][A-Z0-9_]*)=(.*)$/);\n      if (match) {\n        map.set(match[1], match[2].trim());\n      }\n    }\n    return map;\n  };\n\n  const envVars = parseEnv(envContent);\n  const envLocalVars = parseEnv(envLocalContent);\n\n  // Check for WorkOS-related vars that differ\n  const workosVars = [\n    'WORKOS_API_KEY',\n    'WORKOS_CLIENT_ID',\n    'WORKOS_REDIRECT_URI',\n    'WORKOS_COOKIE_PASSWORD',\n    'NEXT_PUBLIC_WORKOS_CLIENT_ID',\n    'NEXT_PUBLIC_WORKOS_REDIRECT_URI',\n  ];\n\n  for (const varName of workosVars) {\n    const envValue = envVars.get(varName);\n    const localValue = envLocalVars.get(varName);\n\n    if (envValue && localValue && envValue !== localValue) {\n      issues.push({\n        type: 'env',\n        severity: 'warning',\n        message: `${varName} has different values in .env and .env.local`,\n        hint: `.env.local takes precedence. Remove from .env to avoid confusion, or ensure they match.`,\n      });\n    }\n  }\n}\n"]}