@atlasauth/cli 0.11.0 → 0.12.0

package/dist/migrate/export/descope.js

@@ -0,0 +1,208 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.exportDescope = exportDescope;
+exports.mapDescopeUser = mapDescopeUser;
+exports.roleKey = roleKey;
+const csv_1 = require("../../import/csv");
+const record_set_1 = require("./record-set");
+const vendor_http_1 = require("./vendor-http");
+const PAGE = 100;
+async function exportDescope(opts) {
+    const set = new record_set_1.RecordSet();
+    if (!/^P[A-Za-z0-9]{10,}$/.test(opts.projectId))
+        throw new Error(`Not a Descope project id: ${opts.projectId}`);
+    if (!opts.managementKey)
+        throw new Error('Descope export needs a management key (DESCOPE_MANAGEMENT_KEY).');
+    const progress = opts.onProgress ?? (() => undefined);
+    const http = new vendor_http_1.VendorHttp({
+        vendor: 'Descope',
+        baseUrl: (opts.baseUrl ?? 'https://api.descope.com').replace(/\/+$/, ''),
+        headers: { authorization: `Bearer ${opts.projectId}:${opts.managementKey}` },
+        fetchImpl: opts.fetchImpl,
+        sleep: opts.sleep,
+    });
+    progress('tenants');
+    const tenants = (0, record_set_1.objs)((await http.get('/v1/mgmt/tenant/all')).body?.tenants);
+    const tenantIds = new Set();
+    for (const t of tenants) {
+        const id = (0, record_set_1.str)(t.id);
+        const name = (0, record_set_1.str)(t.name) ?? id;
+        if (!id || !name)
+            continue;
+        tenantIds.add(id);
+        set.add('organization', (0, record_set_1.compact)({ id, name, domains: (0, record_set_1.strs)(t.selfProvisioningDomains), public_metadata: (0, record_set_1.bag)(t.customAttributes) }));
+    }
+    progress('roles');
+    const roles = (0, record_set_1.objs)((await optional(http, 'GET', '/v1/mgmt/role/all'))?.roles);
+    for (const r of roles) {
+        const name = (0, record_set_1.str)(r.name);
+        if (!name)
+            continue;
+        const tenantId = (0, record_set_1.str)(r.tenantId);
+        const key = roleKey(name);
+        // A Descope role serves both project-level assignment and tenant
+        // membership: it becomes an app role and an organization role.
+        set.add('role', (0, record_set_1.compact)({ key, name, description: (0, record_set_1.str)(r.description), scope: 'app', permissions: (0, record_set_1.strs)(r.permissionNames) }), `app:${key}`);
+        set.add('role', (0, record_set_1.compact)({ key, name, description: (0, record_set_1.str)(r.description), scope: 'organization', organization_id: tenantId && tenantIds.has(tenantId) ? tenantId : undefined, permissions: (0, record_set_1.strs)(r.permissionNames) }), `org:${tenantId ?? ''}:${key}`);
+    }
+    progress('users');
+    const hashes = opts.hashesText ? indexHashes(opts.hashesText) : null;
+    const userIds = new Set();
+    let withHash = 0;
+    for (let page = 0;; page++) {
+        const { body } = await http.post('/v2/mgmt/user/search', { limit: PAGE, page, withTestUser: false });
+        const users = (0, record_set_1.objs)(body?.users);
+        for (const u of users) {
+            const user = mapDescopeUser(u);
+            if (!user) {
+                set.omit('user', u.test === true ? 'test user' : 'no email, phone number or login id');
+                continue;
+            }
+            const h = hashes ? (hashes.get(user.id) ?? (0, record_set_1.strs)(u.loginIds).map((l) => hashes.get(l.toLowerCase())).find(Boolean)) : undefined;
+            if (h) {
+                user.password = { algorithm: 'auto', hash: h };
+                withHash++;
+            }
+            set.add('user', user);
+            userIds.add(user.id);
+            for (const t of (0, record_set_1.objs)(u.userTenants)) {
+                const tid = (0, record_set_1.str)(t.tenantId);
+                if (!tid || !tenantIds.has(tid))
+                    continue;
+                set.add('membership', { organization_id: tid, user_id: user.id, role: (0, record_set_1.strs)(t.roleNames)[0] ? roleKey((0, record_set_1.strs)(t.roleNames)[0]) : 'member' }, `${tid}:${user.id}`);
+                if ((0, record_set_1.strs)(t.roleNames).length > 1)
+                    set.warn('Some tenant members hold several Descope roles; Atlas seats each member with one role (the first).');
+            }
+            if ((0, record_set_1.isObj)(u.OAuth) && Object.values(u.OAuth).some(Boolean)) {
+                set.omit('identity', "Descope does not export social accounts' provider user ids: they relink by verified email on first social sign-in");
+            }
+            if (u.TOTP === true)
+                set.omit('mfa_factor', 'Descope does not export TOTP seeds; re-enrol in Atlas');
+            if (u.webauthn === true)
+                set.omit('passkey', 'Descope does not export passkey public keys; register again in Atlas');
+        }
+        const total = typeof body?.total === 'number' ? body.total : undefined;
+        if (users.length < PAGE || (total !== undefined && (page + 1) * PAGE >= total))
+            break;
+    }
+    if (!hashes && set.count('user') > 0) {
+        set.warn('No password hashes: Descope exports them only through its support team. Pass that file with --descope-hashes-file, or turn on the descope lazy-migration preset so each password moves on its first sign-in.');
+    }
+    else if (hashes && withHash === 0) {
+        set.warn('The hash file matched no user (by user id or login id): check its columns.');
+    }
+    progress('sso');
+    for (const tid of tenantIds)
+        await addSso(set, http, tid);
+    progress('access keys');
+    const keys = (0, record_set_1.objs)((await optional(http, 'POST', '/v1/mgmt/accesskey/search', { tenantIds: [] }))?.keys);
+    if (keys.length)
+        set.omit('api_key', 'Descope never reveals access-key secrets: reissue them as Atlas API keys', keys.length);
+    set.manifest = { origin: opts.projectId, settings: { project_id: opts.projectId } };
+    return set;
+}
+/** One Descope user (search result) → a user record. */
+function mapDescopeUser(u) {
+    const id = (0, record_set_1.str)(u.userId);
+    if (!id || u.test === true)
+        return null;
+    const email = (0, record_set_1.str)(u.email)?.toLowerCase();
+    const phone = (0, record_set_1.e164)(u.phone);
+    const loginIds = (0, record_set_1.strs)(u.loginIds);
+    // A login id that is neither the email nor the phone is a username.
+    const username = loginIds.find((l) => l.toLowerCase() !== email && (0, record_set_1.e164)(l) !== phone && !l.includes('@'));
+    const status = (0, record_set_1.str)(u.status);
+    const user = (0, record_set_1.compact)({
+        id,
+        emails: email ? [{ email, verified: u.verifiedEmail === true, primary: true }] : [],
+        phones: phone ? [{ phone, verified: u.verifiedPhone === true, primary: !email }] : [],
+        username,
+        first_name: (0, record_set_1.str)(u.givenName),
+        last_name: (0, record_set_1.str)(u.familyName),
+        name: !(0, record_set_1.str)(u.givenName) && !(0, record_set_1.str)(u.familyName) ? (0, record_set_1.str)(u.name) : undefined,
+        image_url: (0, record_set_1.str)(u.picture),
+        roles: (0, record_set_1.strs)(u.roleNames).map(roleKey),
+        banned: status === 'disabled' ? true : undefined,
+        private_metadata: (0, record_set_1.bag)({ ...((0, record_set_1.isObj)(u.customAttributes) ? u.customAttributes : {}), ...((0, record_set_1.strs)(u.externalIds).length ? { descope_external_ids: (0, record_set_1.strs)(u.externalIds) } : {}) }),
+        created_at: typeof u.createdTime === 'number' ? u.createdTime * 1000 : undefined,
+    });
+    return user.emails?.length || user.phones?.length || user.username ? user : null;
+}
+/** Descope role names are free text: `Tenant Admin` → `tenant_admin`. */
+function roleKey(name) {
+    return name.trim().toLowerCase().replace(/[^a-z0-9]+/g, '_').replace(/^_+|_+$/g, '') || 'role';
+}
+/**
+ * The support export, by user id and login id (lowercased). Its exact layout
+ * is not published: accepted as CSV with a hash column and a user id / login
+ * id / email column, or NDJSON objects with the same names.
+ */
+function indexHashes(text) {
+    const t = text.trim();
+    const rows = t.startsWith('{') ? t.split(/\r?\n/).filter((l) => l.trim()).map((l) => JSON.parse(l)) : (0, csv_1.parseCsv)(t);
+    const out = new Map();
+    for (const r of rows) {
+        const keys = Object.keys(r);
+        const hashKey = keys.find((k) => /hash/i.test(k) && !/algo/i.test(k));
+        const hash = hashKey ? (0, record_set_1.str)(r[hashKey]) : undefined;
+        if (!hash)
+            continue;
+        for (const k of keys) {
+            if (/^(user_?id|userid|login_?id|loginid|email|login_?ids)$/i.test(k)) {
+                for (const v of String(r[k] ?? '').split(/[|,;]/))
+                    if (v.trim())
+                        out.set(/user_?id/i.test(k) ? v.trim() : v.trim().toLowerCase(), hash);
+            }
+        }
+    }
+    return out;
+}
+async function addSso(set, http, tenantId) {
+    const body = (await optional(http, 'GET', `/v2/mgmt/sso/settings?tenantId=${encodeURIComponent(tenantId)}`)) ?? (await optional(http, 'GET', `/v1/mgmt/sso/settings?tenantId=${encodeURIComponent(tenantId)}`));
+    if (!body)
+        return;
+    const saml = (0, record_set_1.isObj)(body.saml) ? body.saml : undefined;
+    const oidc = (0, record_set_1.isObj)(body.oidc) ? body.oidc : undefined;
+    const domains = [...(0, record_set_1.strs)(body.domains), ...((0, record_set_1.str)(body.domain) ? [(0, record_set_1.str)(body.domain)] : []), ...((0, record_set_1.isObj)(body.tenant) ? (0, record_set_1.strs)(body.tenant.domains) : [])];
+    if (saml && ((0, record_set_1.str)(saml.idpEntityId) || (0, record_set_1.str)(saml.idpMetadataUrl) || (0, record_set_1.str)(saml.idpSSOUrl))) {
+        const mapping = (0, record_set_1.isObj)(saml.attributeMapping) ? saml.attributeMapping : undefined;
+        set.add('sso_connection', (0, record_set_1.compact)({
+            id: `${tenantId}:saml`,
+            name: `${tenantId} SAML`,
+            organization_id: tenantId,
+            protocol: 'saml',
+            domains: [...new Set(domains)],
+            saml: (0, record_set_1.compact)({
+                idp_entity_id: (0, record_set_1.str)(saml.idpEntityId),
+                idp_sso_url: (0, record_set_1.str)(saml.idpSSOUrl),
+                idp_certificate: (0, record_set_1.str)(saml.idpCertificate),
+                idp_metadata_url: (0, record_set_1.str)(saml.idpMetadataUrl),
+                sp_entity_id: (0, record_set_1.str)(saml.spEntityId),
+                sp_acs_url: (0, record_set_1.str)(saml.spACSUrl),
+                attribute_mapping: mapping ? Object.fromEntries(Object.entries(mapping).filter(([, v]) => typeof v === 'string' && v)) : undefined,
+            }),
+        }));
+    }
+    else if (oidc && ((0, record_set_1.str)(oidc.issuer) || (0, record_set_1.str)(oidc.clientId))) {
+        set.add('sso_connection', (0, record_set_1.compact)({
+            id: `${tenantId}:oidc`,
+            name: (0, record_set_1.str)(oidc.name) ?? `${tenantId} OIDC`,
+            organization_id: tenantId,
+            protocol: 'oidc',
+            domains: [...new Set(domains)],
+            oidc: (0, record_set_1.compact)({ issuer: (0, record_set_1.str)(oidc.issuer), discovery_url: (0, record_set_1.str)(oidc.wellKnownUrl), client_id: (0, record_set_1.str)(oidc.clientId), scopes: (0, record_set_1.strs)(oidc.scope) }),
+        }));
+        set.warn(`Tenant ${tenantId} OIDC SSO: Descope does not return the client secret; enter it in Atlas after the import.`);
+    }
+}
+async function optional(http, method, path, body) {
+    try {
+        return (await http.request(method, path, body)).body;
+    }
+    catch (err) {
+        if (err instanceof vendor_http_1.VendorApiError && [400, 403, 404, 405].includes(err.status))
+            return null;
+        throw err;
+    }
+}
+//# sourceMappingURL=descope.js.map

package/dist/migrate/export/descope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"descope.js","sourceRoot":"","sources":["../../../src/migrate/export/descope.ts"],"names":[],"mappings":";;AAqCA,sCAgGC;AAGD,wCAwBC;AAGD,0BAEC;AApKD,0CAA4C;AAC5C,6CAA+F;AAC/F,+CAA2D;AAgC3D,MAAM,IAAI,GAAG,GAAG,CAAC;AAEV,KAAK,UAAU,aAAa,CAAC,IAA0B;IAC5D,MAAM,GAAG,GAAG,IAAI,sBAAS,EAAE,CAAC;IAC5B,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAChH,IAAI,CAAC,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IAC5G,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,wBAAU,CAAC;QAC1B,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,yBAAyB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACxE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,aAAa,EAAE,EAAE;QAC5E,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;IAEH,QAAQ,CAAC,SAAS,CAAC,CAAC;IACpB,MAAM,OAAO,GAAG,IAAA,iBAAI,EAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAM,qBAAqB,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrB,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI;YAAE,SAAS;QAC3B,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClB,GAAG,CAAC,GAAG,CACL,cAAc,EACd,IAAA,oBAAO,EAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAA,iBAAI,EAAC,CAAC,CAAC,uBAAuB,CAAC,EAAE,eAAe,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAC1G,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClB,MAAM,KAAK,GAAG,IAAA,iBAAI,EAAC,CAAC,MAAM,QAAQ,CAAM,IAAI,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACnF,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,QAAQ,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1B,iEAAiE;QACjE,+DAA+D;QAC/D,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAA,oBAAO,EAAC,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,KAAc,EAAE,WAAW,EAAE,IAAA,iBAAI,EAAC,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,OAAO,GAAG,EAAE,CAAC,CAAC;QACpJ,GAAG,CAAC,GAAG,CACL,MAAM,EACN,IAAA,oBAAO,EAAC,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,cAAuB,EAAE,eAAe,EAAE,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,IAAA,iBAAI,EAAC,CAAC,CAAC,eAAe,CAAC,EAAE,CAAC,EAC1M,OAAO,QAAQ,IAAI,EAAE,IAAI,GAAG,EAAE,CAC/B,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,IAAI,GAAG,CAAC,GAAI,IAAI,EAAE,EAAE,CAAC;QAC5B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAM,sBAAsB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1G,MAAM,KAAK,GAAG,IAAA,iBAAI,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC;gBACvF,SAAS;YACX,CAAC;YACD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAA,iBAAI,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/H,IAAI,CAAC,EAAE,CAAC;gBACN,IAAI,CAAC,QAAQ,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC/C,QAAQ,EAAE,CAAC;YACb,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrB,KAAK,MAAM,CAAC,IAAI,IAAA,iBAAI,EAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;gBACpC,MAAM,GAAG,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAC5B,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC1C,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,eAAe,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAA,iBAAI,EAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAA,iBAAI,EAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,GAAG,GAAG,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC/J,IAAI,IAAA,iBAAI,EAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC;oBAAE,GAAG,CAAC,IAAI,CAAC,oGAAoG,CAAC,CAAC;YACnJ,CAAC;YACD,IAAI,IAAA,kBAAK,EAAC,CAAC,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3D,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,mHAAmH,CAAC,CAAC;YAC5I,CAAC;YACD,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;gBAAE,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,uDAAuD,CAAC,CAAC;YACrG,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI;gBAAE,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,sEAAsE,CAAC,CAAC;QACvH,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACvE,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC;YAAE,MAAM;IACxF,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CACN,8MAA8M,CAC/M,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IACzF,CAAC;IAED,QAAQ,CAAC,KAAK,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,SAAS;QAAE,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAE1D,QAAQ,CAAC,aAAa,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,IAAA,iBAAI,EAAC,CAAC,MAAM,QAAQ,CAAM,IAAI,EAAE,MAAM,EAAE,2BAA2B,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7G,IAAI,IAAI,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,0EAA0E,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAE9H,GAAG,CAAC,QAAQ,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;IACpF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wDAAwD;AACxD,SAAgB,cAAc,CAAC,CAAM;IACnC,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,KAAK,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClC,oEAAoE;IACpE,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,IAAI,IAAA,iBAAI,EAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1G,MAAM,MAAM,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAe,IAAA,oBAAO,EAAC;QAC/B,EAAE;QACF,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,aAAa,KAAK,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;QACnF,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,aAAa,KAAK,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;QACrF,QAAQ;QACR,UAAU,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,SAAS,CAAC;QAC5B,SAAS,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC;QAC5B,IAAI,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;QACvE,SAAS,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,OAAO,CAAC;QACzB,KAAK,EAAE,IAAA,iBAAI,EAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QACrC,MAAM,EAAE,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAChD,gBAAgB,EAAE,IAAA,gBAAG,EAAC,EAAE,GAAG,CAAC,IAAA,kBAAK,EAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAA,iBAAI,EAAC,CAAC,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAA,iBAAI,EAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACzK,UAAU,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS;KACjF,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACnF,CAAC;AAED,yEAAyE;AACzE,SAAgB,OAAO,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;AACjG,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,MAAM,IAAI,GAAU,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAQ,CAAC,CAAC,CAAC,CAAC,IAAA,cAAQ,EAAC,CAAC,CAAC,CAAC;IAChI,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,yDAAyD,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;oBAAE,IAAI,CAAC,CAAC,IAAI,EAAE;wBAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;YAC1I,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,GAAc,EAAE,IAAgB,EAAE,QAAgB;IACtE,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAM,IAAI,EAAE,KAAK,EAAE,kCAAkC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAM,IAAI,EAAE,KAAK,EAAE,kCAAkC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1N,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,MAAM,IAAI,GAAG,IAAA,kBAAK,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACtD,MAAM,IAAI,GAAG,IAAA,kBAAK,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACtD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAA,iBAAI,EAAC,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAA,gBAAG,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAG,EAAC,IAAI,CAAC,MAAM,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAA,kBAAK,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAI,EAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpJ,IAAI,IAAI,IAAI,CAAC,IAAA,gBAAG,EAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAA,gBAAG,EAAC,IAAI,CAAC,cAAc,CAAC,IAAI,IAAA,gBAAG,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,OAAO,GAAG,IAAA,kBAAK,EAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,GAAG,CAAC,GAAG,CACL,gBAAgB,EAChB,IAAA,oBAAO,EAAC;YACN,EAAE,EAAE,GAAG,QAAQ,OAAO;YACtB,IAAI,EAAE,GAAG,QAAQ,OAAO;YACxB,eAAe,EAAE,QAAQ;YACzB,QAAQ,EAAE,MAAe;YACzB,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,EAAE,IAAA,oBAAO,EAAC;gBACZ,aAAa,EAAE,IAAA,gBAAG,EAAC,IAAI,CAAC,WAAW,CAAC;gBACpC,WAAW,EAAE,IAAA,gBAAG,EAAC,IAAI,CAAC,SAAS,CAAC;gBAChC,eAAe,EAAE,IAAA,gBAAG,EAAC,IAAI,CAAC,cAAc,CAAC;gBACzC,gBAAgB,EAAE,IAAA,gBAAG,EAAC,IAAI,CAAC,cAAc,CAAC;gBAC1C,YAAY,EAAE,IAAA,gBAAG,EAAC,IAAI,CAAC,UAAU,CAAC;gBAClC,UAAU,EAAE,IAAA,gBAAG,EAAC,IAAI,CAAC,QAAQ,CAAC;gBAC9B,iBAAiB,EAAE,OAAO,CAAC,CAAC,CAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAA4B,CAAC,CAAC,CAAC,SAAS;aAC/J,CAAC;SACH,CAAC,CACH,CAAC;IACJ,CAAC;SAAM,IAAI,IAAI,IAAI,CAAC,IAAA,gBAAG,EAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAA,gBAAG,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,GAAG,CACL,gBAAgB,EAChB,IAAA,oBAAO,EAAC;YACN,EAAE,EAAE,GAAG,QAAQ,OAAO;YACtB,IAAI,EAAE,IAAA,gBAAG,EAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,QAAQ,OAAO;YAC1C,eAAe,EAAE,QAAQ;YACzB,QAAQ,EAAE,MAAe;YACzB,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,EAAE,IAAA,oBAAO,EAAC,EAAE,MAAM,EAAE,IAAA,gBAAG,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,IAAA,gBAAG,EAAC,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,IAAA,gBAAG,EAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAA,iBAAI,EAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;SAC5I,CAAC,CACH,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,UAAU,QAAQ,2FAA2F,CAAC,CAAC;IAC1H,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAI,IAAgB,EAAE,MAAsB,EAAE,IAAY,EAAE,IAAc;IAC/F,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAI,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,4BAAc,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5F,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/migrate/export/fake-vendor.test-helper.d.ts

@@ -0,0 +1,27 @@
+/**
+ * A fake vendor API for exporter tests: routes are `METHOD path?query` (the
+ * query as the exporter sends it) → a JSON body, a status + body, or a
+ * function of the request. Unrouted calls answer 404, so an exporter that
+ * calls something unexpected degrades the way it would against a vendor that
+ * lacks the endpoint. Every call is recorded (with its headers) for assertions.
+ */
+export type Route = unknown | {
+    status: number;
+    body?: unknown;
+    headers?: Record<string, string>;
+} | ((req: {
+    url: URL;
+    body: unknown;
+    headers: Headers;
+}) => unknown);
+export interface FakeVendor {
+    fetchImpl: typeof fetch;
+    calls: Array<{
+        method: string;
+        url: string;
+        headers: Headers;
+        body: unknown;
+    }>;
+}
+export declare function fakeVendor(origin: string, routes: Record<string, Route>): FakeVendor;
+export declare const noSleep: () => Promise<undefined>;

package/dist/migrate/export/fake-vendor.test-helper.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.noSleep = void 0;
+exports.fakeVendor = fakeVendor;
+const isStatus = (v) => typeof v === 'object' && v !== null && 'status' in v && typeof v.status === 'number' && Object.keys(v).every((k) => ['status', 'body', 'headers'].includes(k));
+function fakeVendor(origin, routes) {
+    const calls = [];
+    const fetchImpl = (async (input, init = {}) => {
+        const url = new URL(String(input));
+        const method = (init.method ?? 'GET').toUpperCase();
+        const headers = new Headers(init.headers);
+        let body = init.body;
+        if (typeof body === 'string') {
+            try {
+                body = JSON.parse(body);
+            }
+            catch {
+                // form-encoded or plain text: kept as the string
+            }
+        }
+        calls.push({ method, url: url.toString(), headers, body });
+        const key = url.origin === origin ? `${method} ${url.pathname}${url.search}` : `${method} ${url.toString()}`;
+        let route = routes[key];
+        if (route === undefined)
+            route = routes[`${method} ${url.pathname}`];
+        if (route === undefined)
+            return new Response(JSON.stringify({ message: `no route for ${key}` }), { status: 404 });
+        const value = typeof route === 'function' ? route({ url, body, headers }) : route;
+        if (value instanceof Uint8Array)
+            return new Response(value, { status: 200 });
+        const resolved = isStatus(value) ? value : { status: 200, body: value };
+        return new Response(resolved.body === undefined ? '' : JSON.stringify(resolved.body), {
+            status: resolved.status,
+            headers: { 'content-type': 'application/json', ...(resolved.headers ?? {}) },
+        });
+    });
+    return { fetchImpl, calls };
+}
+const noSleep = async () => undefined;
+exports.noSleep = noSleep;
+//# sourceMappingURL=fake-vendor.test-helper.js.map

package/dist/migrate/export/fake-vendor.test-helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-vendor.test-helper.js","sourceRoot":"","sources":["../../../src/migrate/export/fake-vendor.test-helper.ts"],"names":[],"mappings":";;;AAiBA,gCA4BC;AA/BD,MAAM,QAAQ,GAAG,CAAC,CAAU,EAA6E,EAAE,CACzG,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,QAAQ,IAAI,CAAC,IAAI,OAAQ,CAAyB,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAE1L,SAAgB,UAAU,CAAC,MAAc,EAAE,MAA6B;IACtE,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,KAA6B,EAAE,OAAoB,EAAE,EAAE,EAAE;QACjF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,IAAI,GAAY,IAAI,CAAC,IAAI,CAAC;QAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,iDAAiD;YACnD,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC7G,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,GAAG,MAAM,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,gBAAgB,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAClH,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAE,KAAuE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACrJ,IAAI,KAAK,YAAY,UAAU;YAAE,OAAO,IAAI,QAAQ,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7E,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACxE,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;YACpF,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;SAC7E,CAAC,CAAC;IACL,CAAC,CAAiB,CAAC;IACnB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAEM,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;AAAhC,QAAA,OAAO,WAAyB"}

package/dist/migrate/export/frameworks/app-users.d.ts

@@ -0,0 +1,42 @@
+import { FrameworkExport, type Tables } from './tables';
+/**
+ * Passport.js and iron-session leave the user store to the app: there is no
+ * schema to recognise, only conventions. This mapper reads the app's users
+ * table with column names you can override, and recognises the common shapes:
+ *
+ *   - a password column holding a self-describing hash (bcrypt / bcryptjs,
+ *     argon2 / @node-rs/argon2, Django-style PBKDF2, oslo scrypt);
+ *   - passport-local-mongoose's `salt` + `hash` fields (PBKDF2-SHA256, 25000
+ *     iterations, 512-byte key — `sha1` for apps on its pre-v5 default);
+ *   - provider id columns the Passport strategies' `verify` callbacks fill
+ *     (`googleId`, `github_id`, `facebookId` …), or a separate identities table;
+ *
+ * and, for Passport, the express-session store the app used (connect-pg-simple,
+ * connect-mongo, connect-redis via a JSON dump, connect-session-sequelize,
+ * knex/typeorm stores): each live session's `passport.user` becomes a session
+ * record keyed by sha256 of the session id, which the bridge reads out of the
+ * `connect.sid` cookie.
+ */
+export interface AppUsersExportOptions {
+    usersTable?: string;
+    idColumn?: string;
+    emailColumn?: string;
+    emailVerifiedColumn?: string;
+    usernameColumn?: string;
+    nameColumn?: string;
+    passwordColumn?: string;
+    /** passport-local-mongoose's digest (`sha256`, or `sha1` before v5). */
+    plmDigest?: 'sha1' | 'sha256' | 'sha512';
+    plmIterations?: number;
+    /** `provider=column` pairs for provider id columns on the users row. */
+    identityColumns?: Record<string, string>;
+    /** A separate identities table (`user_id`, `provider`, `provider_user_id` / `provider_id` / `uid`). */
+    identitiesTable?: string;
+    /** The session store table / collection (default: detected). */
+    sessionsTable?: string;
+    /** Where the user id sits in the session JSON (default `passport.user`, then `passport.user.id`). */
+    sessionUserPath?: string;
+    sessions?: boolean;
+    now?: Date;
+}
+export declare function exportAppUsers(tables: Tables, options?: AppUsersExportOptions): FrameworkExport;

package/dist/migrate/export/frameworks/app-users.js

@@ -0,0 +1,161 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.exportAppUsers = exportAppUsers;
+const tables_1 = require("./tables");
+const DEFAULT_IDENTITY_COLUMNS = {
+    google: ['googleId', 'google_id'],
+    github: ['githubId', 'github_id'],
+    facebook: ['facebookId', 'facebook_id'],
+    twitter: ['twitterId', 'twitter_id'],
+    microsoft: ['microsoftId', 'microsoft_id'],
+    apple: ['appleId', 'apple_id'],
+    discord: ['discordId', 'discord_id'],
+    gitlab: ['gitlabId', 'gitlab_id'],
+    linkedin: ['linkedinId', 'linkedin_id'],
+    slack: ['slackId', 'slack_id'],
+};
+/** passlib adapted base64 (what Atlas's PHC PBKDF2 verifier reads). */
+function ab64(b) {
+    return b.toString('base64').replace(/\+/g, '.').replace(/=+$/, '');
+}
+function exportAppUsers(tables, options = {}) {
+    const out = new tables_1.FrameworkExport();
+    const now = (options.now ?? new Date()).getTime();
+    const users = tables.find(...(options.usersTable ? [options.usersTable] : ['users', 'user', 'User', 'accounts']));
+    if (!users) {
+        out.warn('No users table found (looked for users, user, accounts; pass --users-table).');
+        return out;
+    }
+    const ids = new Set();
+    const providers = new Set();
+    let plm = 0;
+    let unknown = 0;
+    for (const row of users.rows) {
+        const id = (0, tables_1.text)(options.idColumn ? (0, tables_1.col)(row, options.idColumn) : (0, tables_1.col)(row, 'id', '_id', 'uuid'));
+        if (!id) {
+            out.omit('user', 'row without an id');
+            continue;
+        }
+        const email = (0, tables_1.text)(options.emailColumn ? (0, tables_1.col)(row, options.emailColumn) : (0, tables_1.col)(row, 'email', 'emailAddress', 'email_address'))?.toLowerCase();
+        const username = (0, tables_1.text)(options.usernameColumn ? (0, tables_1.col)(row, options.usernameColumn) : (0, tables_1.col)(row, 'username', 'login'));
+        if (!email && !username) {
+            out.omit('user', 'no email or username');
+            continue;
+        }
+        let password;
+        const salt = (0, tables_1.text)((0, tables_1.col)(row, 'salt'));
+        const plmHash = (0, tables_1.text)((0, tables_1.col)(row, 'hash'));
+        if (!options.passwordColumn && salt && plmHash && /^([0-9a-f]{2})+$/i.test(plmHash)) {
+            const digestName = options.plmDigest ?? 'sha256';
+            const rounds = options.plmIterations ?? 25000;
+            password = {
+                algorithm: 'auto',
+                hash: `$pbkdf2-${digestName}$${rounds}$${ab64(Buffer.from(salt, 'utf8'))}$${ab64(Buffer.from(plmHash, 'hex'))}`,
+            };
+            plm++;
+        }
+        else {
+            const digest = (0, tables_1.text)(options.passwordColumn
+                ? (0, tables_1.col)(row, options.passwordColumn)
+                : (0, tables_1.col)(row, 'password', 'passwordHash', 'password_hash', 'hashedPassword', 'hashed_password', 'encrypted_password'));
+            if (digest) {
+                password = (0, tables_1.selfDescribingHash)(digest) ?? undefined;
+                if (!password)
+                    unknown++;
+            }
+        }
+        const verified = options.emailVerifiedColumn
+            ? (0, tables_1.bool)((0, tables_1.col)(row, options.emailVerifiedColumn))
+            : (0, tables_1.bool)((0, tables_1.col)(row, 'emailVerified', 'email_verified', 'verified', 'isVerified', 'is_verified', 'confirmed'));
+        const name = (0, tables_1.text)(options.nameColumn ? (0, tables_1.col)(row, options.nameColumn) : (0, tables_1.col)(row, 'name', 'displayName', 'display_name', 'fullName', 'full_name'));
+        ids.add(id);
+        out.add('user', {
+            id,
+            emails: email ? [{ email, verified, primary: true }] : undefined,
+            username,
+            name,
+            first_name: (0, tables_1.text)((0, tables_1.col)(row, 'firstName', 'first_name', 'givenName', 'given_name')) ?? (0, tables_1.splitName)(name).first_name,
+            last_name: (0, tables_1.text)((0, tables_1.col)(row, 'lastName', 'last_name', 'familyName', 'family_name')) ?? (0, tables_1.splitName)(name).last_name,
+            image_url: (0, tables_1.text)((0, tables_1.col)(row, 'image', 'avatar', 'avatarUrl', 'avatar_url', 'picture')),
+            password,
+            created_at: (0, tables_1.time)((0, tables_1.col)(row, 'createdAt', 'created_at', 'date_joined')),
+        });
+        const identityColumns = options.identityColumns
+            ? Object.fromEntries(Object.entries(options.identityColumns).map(([p, c]) => [p, [c]]))
+            : DEFAULT_IDENTITY_COLUMNS;
+        for (const [provider, columns] of Object.entries(identityColumns)) {
+            const subject = (0, tables_1.text)((0, tables_1.col)(row, ...columns));
+            if (!subject)
+                continue;
+            providers.add(provider);
+            out.add('identity', { user_id: id, provider, provider_user_id: subject, kind: 'oauth' });
+        }
+    }
+    if (plm)
+        out.warn(`${plm} passport-local-mongoose password(s) carried over as PBKDF2 (${options.plmDigest ?? 'sha256'}).`);
+    if (unknown)
+        out.warn(`${unknown} password value(s) are not a format Atlas verifies: those users reset their password or migrate lazily.`);
+    const identities = tables.find(...(options.identitiesTable ? [options.identitiesTable] : ['identities', 'user_identities', 'federated_credentials', 'oauth_accounts']));
+    for (const row of identities?.rows ?? []) {
+        const userId = (0, tables_1.text)((0, tables_1.col)(row, 'user_id', 'userId'));
+        const provider = (0, tables_1.text)((0, tables_1.col)(row, 'provider'))?.replace(/^https?:\/\//, '').replace(/\/.*$/, '');
+        const subject = (0, tables_1.text)((0, tables_1.col)(row, 'provider_user_id', 'providerUserId', 'subject', 'uid', 'provider_id'));
+        if (!userId || !provider || !subject || !ids.has(userId)) {
+            out.omit('identity', 'identity row without a known user, provider or subject');
+            continue;
+        }
+        providers.add(provider);
+        out.add('identity', { user_id: userId, provider, provider_user_id: subject, kind: 'oauth' });
+    }
+    out.manifest.providers = [...providers].sort();
+    if (options.sessions !== false)
+        exportExpressSessions(tables, out, ids, options, now);
+    return out;
+}
+/** connect-* session stores → session records (Passport). */
+function exportExpressSessions(tables, out, ids, options, now) {
+    const store = tables.find(...(options.sessionsTable ? [options.sessionsTable] : ['session', 'sessions', 'Sessions', 'redis_sessions']));
+    if (!store)
+        return;
+    for (const row of store.rows) {
+        // connect-redis dumps carry the key `sess:<sid>`.
+        const redisKey = (0, tables_1.text)((0, tables_1.col)(row, 'key'));
+        const sid = (0, tables_1.text)((0, tables_1.col)(row, 'sid', '_id', 'session_id', 'id')) ?? (redisKey?.startsWith('sess:') ? redisKey.slice(5) : undefined);
+        const data = (0, tables_1.json)((0, tables_1.col)(row, 'sess', 'session', 'data', 'value'));
+        if (!sid || !data) {
+            out.omit('session', 'session row without an id or session data');
+            continue;
+        }
+        const userId = sessionUser(data, options.sessionUserPath);
+        if (!userId) {
+            out.omit('session', 'anonymous session (no passport.user)');
+            continue;
+        }
+        if (!ids.has(userId)) {
+            out.omit('session', 'session of a user not in the export');
+            continue;
+        }
+        const cookie = (0, tables_1.json)(data.cookie);
+        const ttl = Number((0, tables_1.col)(row, 'ttl'));
+        const expires = (0, tables_1.timeMs)((0, tables_1.col)(row, 'expire', 'expires', 'expired', 'expires_at')) ??
+            (0, tables_1.timeMs)(cookie?.expires) ??
+            (Number.isFinite(ttl) && ttl > 0 ? now + ttl * 1000 : undefined);
+        if (expires === undefined) {
+            out.omit('session', 'browser-session cookie with no expiry in the store');
+            continue;
+        }
+        if (expires <= now) {
+            out.omit('session', 'expired');
+            continue;
+        }
+        out.add('session', { id: (0, tables_1.sha256Hex)(sid).slice(0, 32), user_id: userId, token_hash: (0, tables_1.sha256Hex)(sid), expires_at: new Date(expires).toISOString() });
+    }
+    out.manifest.settings = { ...(out.manifest.settings ?? {}), session_cookie: 'connect.sid' };
+}
+function sessionUser(data, path) {
+    const at = (p) => p.split('.').reduce((cur, k) => (cur && typeof cur === 'object' ? cur[k] : undefined), data);
+    if (path)
+        return (0, tables_1.text)(at(path));
+    return (0, tables_1.text)(at('passport.user')) ?? (0, tables_1.text)(at('passport.user.id')) ?? (0, tables_1.text)(at('passport.user._id')) ?? (0, tables_1.text)(at('userId'));
+}
+//# sourceMappingURL=app-users.js.map

package/dist/migrate/export/frameworks/app-users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-users.js","sourceRoot":"","sources":["../../../../src/migrate/export/frameworks/app-users.ts"],"names":[],"mappings":";;AA0EA,wCA2FC;AArKD,qCAakB;AA2ClB,MAAM,wBAAwB,GAA6B;IACzD,MAAM,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,MAAM,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,QAAQ,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;IACvC,OAAO,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;IACpC,SAAS,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC;IAC1C,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;IAC9B,OAAO,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;IACpC,MAAM,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,QAAQ,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;IACvC,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;CAC/B,CAAC;AAEF,uEAAuE;AACvE,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,SAAgB,cAAc,CAAC,MAAc,EAAE,UAAiC,EAAE;IAChF,MAAM,GAAG,GAAG,IAAI,wBAAe,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAClH,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;QACzF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,IAAA,aAAI,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/F,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAA,aAAI,EAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QAC5I,MAAM,QAAQ,GAAG,IAAA,aAAI,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QACjH,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;YACzC,SAAS;QACX,CAAC;QACD,IAAI,QAAyD,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,IAAI,IAAI,OAAO,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACpF,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC;YACjD,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC;YAC9C,QAAQ,GAAG;gBACT,SAAS,EAAE,MAAM;gBACjB,IAAI,EAAE,WAAW,UAAU,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE;aAChH,CAAC;YACF,GAAG,EAAE,CAAC;QACR,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,IAAA,aAAI,EACjB,OAAO,CAAC,cAAc;gBACpB,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC;gBAClC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CACrH,CAAC;YACF,IAAI,MAAM,EAAE,CAAC;gBACX,QAAQ,GAAG,IAAA,2BAAkB,EAAC,MAAM,CAAC,IAAI,SAAS,CAAC;gBACnD,IAAI,CAAC,QAAQ;oBAAE,OAAO,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,mBAAmB;YAC1C,CAAC,CAAC,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;YAC7C,CAAC,CAAC,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,eAAe,EAAE,gBAAgB,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;QAC5G,MAAM,IAAI,GAAG,IAAA,aAAI,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;QAChJ,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACZ,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE;YACd,EAAE;YACF,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YAChE,QAAQ;YACR,IAAI;YACJ,UAAU,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,IAAI,IAAA,kBAAS,EAAC,IAAI,CAAC,CAAC,UAAU;YAC9G,SAAS,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,IAAI,IAAA,kBAAS,EAAC,IAAI,CAAC,CAAC,SAAS;YAC5G,SAAS,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;YAClF,QAAQ;YACR,UAAU,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;SACrE,CAAC,CAAC;QACH,MAAM,eAAe,GAA6B,OAAO,CAAC,eAAe;YACvE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvF,CAAC,CAAC,wBAAwB,CAAC;QAC7B,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YAClE,MAAM,OAAO,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IACD,IAAI,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,gEAAgE,OAAO,CAAC,SAAS,IAAI,QAAQ,IAAI,CAAC,CAAC;IAC3H,IAAI,OAAO;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,yGAAyG,CAAC,CAAC;IAE3I,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACxK,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC9F,MAAM,OAAO,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;QACtG,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,wDAAwD,CAAC,CAAC;YAC/E,SAAS;QACX,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAE/C,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK;QAAE,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACtF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6DAA6D;AAC7D,SAAS,qBAAqB,CAAC,MAAc,EAAE,GAAoB,EAAE,GAAgB,EAAE,OAA8B,EAAE,GAAW;IAChI,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACxI,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,kDAAkD;QAClD,MAAM,QAAQ,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAChI,MAAM,IAAI,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,2CAA2C,CAAC,CAAC;YACjE,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,sCAAsC,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,qCAAqC,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QACpC,MAAM,OAAO,GACX,IAAA,eAAM,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;YAC9D,IAAA,eAAM,EAAC,MAAM,EAAE,OAAO,CAAC;YACvB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,oDAAoD,CAAC,CAAC;YAC1E,SAAS;QACX,CAAC;QACD,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACpJ,CAAC;IACD,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;AAC9F,CAAC;AAED,SAAS,WAAW,CAAC,IAAS,EAAE,IAAa;IAC3C,MAAM,EAAE,GAAG,CAAC,CAAS,EAAW,EAAE,CAChC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAU,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;IACjH,IAAI,IAAI;QAAE,OAAO,IAAA,aAAI,EAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,OAAO,IAAA,aAAI,EAAC,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,IAAA,aAAI,EAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,IAAI,IAAA,aAAI,EAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,IAAI,IAAA,aAAI,EAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC1H,CAAC"}

package/dist/migrate/export/frameworks/authjs.d.ts

@@ -0,0 +1,41 @@
+import { FrameworkExport, type Tables } from './tables';
+/**
+ * Auth.js / NextAuth (v4 and v5) → canonical records, from the adapter's tables.
+ *
+ * Every official adapter keeps the same four models under its own table and
+ * column spelling — Prisma `User`/`Account`/`Session`/`Authenticator`, Drizzle
+ * `user`/`account`/`session`/`authenticator`, `@auth/pg-adapter` and Kysely
+ * `users`/`accounts`/`sessions`, TypeORM, Sequelize, the Supabase adapter's
+ * `next_auth` schema, MongoDB's `users`/`accounts`/`sessions` collections — so
+ * the mapper accepts each spelling (camelCase, snake_case, Mongo `_id`).
+ *
+ *   users          → user (email + emailVerified, name, image; a password column
+ *                    the app's Credentials provider filled, when it is a format
+ *                    Atlas verifies)
+ *   accounts       → identity (oauth / oidc; tokens only with `oauthTokens`)
+ *   authenticators → passkey (the WebAuthn provider; needs the RP id)
+ *   sessions       → session (database strategy; sha256 of `sessionToken`)
+ *
+ * Not exported: `verification_token` rows (magic-link tokens live minutes), the
+ * Credentials provider's `authorize` logic (it is app code: Atlas owns
+ * passwords now), JWT-strategy sessions (they live only in the browser — the
+ * bridge reads them with the app's AUTH_SECRET instead).
+ */
+export interface AuthJsExportOptions {
+    /** The WebAuthn RP id the Passkey provider registered against (your domain). */
+    rpId?: string;
+    /** Include OAuth access / refresh tokens on identities. Default false. */
+    oauthTokens?: boolean;
+    /** Include live database sessions for the bridge. Default true. */
+    sessions?: boolean;
+    /** The users-table column holding a Credentials-provider password hash (auto-detected otherwise). */
+    passwordColumn?: string;
+    now?: Date;
+}
+export declare const AUTHJS_TABLES: {
+    readonly user: readonly ["User", "users", "user", "next_auth.users"];
+    readonly account: readonly ["Account", "accounts", "account", "next_auth.accounts"];
+    readonly session: readonly ["Session", "sessions", "session", "next_auth.sessions"];
+    readonly authenticator: readonly ["Authenticator", "authenticators", "authenticator"];
+};
+export declare function exportAuthJs(tables: Tables, options?: AuthJsExportOptions): FrameworkExport;