Function getManagedIdentityValidationError

src/cli/handlers/auth.ts:70–101

(
  tokens: OAuthTokens,
  profile: OAuthTokens['profile'],
  mode: OAuthInstallMode,
)

}

function getManagedIdentityValidationError(
  tokens: OAuthTokens,
  profile: OAuthTokens['profile'],
  mode: OAuthInstallMode,
): string | null {
  if (!usesManagedInstallMode(tokens, mode)) {
    return null
  }

  const accountUuid = profile?.account?.uuid ?? tokens.tokenAccount?.uuid
  const emailAddress =
    profile?.account?.email ?? tokens.tokenAccount?.emailAddress
  const organizationUuid =
    profile?.organization?.uuid ?? tokens.tokenAccount?.organizationUuid

  if (
    !isPresentIdentityValue(accountUuid) ||
    !isPresentIdentityValue(emailAddress) ||
    !isPresentIdentityValue(organizationUuid)
  ) {
    return 'Managed OAuth login did not yield a usable Noumena account identity. The issuer returned incomplete account information, so remote sessions cannot be created.'
  }

  if (
    accountUuid === STUB_ACCOUNT_UUID ||
    organizationUuid === STUB_ORGANIZATION_UUID
  ) {
    return 'Managed OAuth login returned a stub Noumena identity. Remote sessions require a real account and organization binding.'
  }

  return null
}

export async function installOAuthTokens(
  tokens: OAuthTokens,