import { g as getClientCredentialsToken, d as debugServiceTokenClaims } from './service-token-BANrKR5z.js';

/**
 * @file `@skylab-kulubu/inscribed-auth/config` — `cms-sync` CLI wiring.
 *
 * The `cms-sync` CLI is a plain Node binary - it can't receive function props
 * the way the React tree does - so it loads the consumer's `cms.config.{js,mjs}`
 * from the project root to learn how to obtain a service token (and, optionally,
 * how to diagnose failures). This entry lets that config file be a one-liner:
 *
 *   // cms.config.mjs (consumer project root)
 *   export { getServiceToken, onSyncError } from "@skylab-kulubu/inscribed-auth/config";
 *
 * Resolves to ESM so the CLI's dynamic `import()` works regardless of the
 * consuming app's `"type"`.
 */


/** Service token for build-time `POST /cms/sync`. */
const getServiceToken = getClientCredentialsToken;

/** Called when a sync fails - probes the backend + dumps Keycloak claims. */
const onSyncError = (err) => debugServiceTokenClaims(err);

export { getServiceToken, onSyncError };