@atlasauth/cli 0.11.0 → 0.13.0

package/dist/migrate/export/frameworks/lucia.d.ts

@@ -0,0 +1,42 @@
+import { FrameworkExport, type Tables } from './tables';
+/**
+ * Lucia → canonical records. Lucia never owned a schema the way an adapter
+ * library does, so three generations are recognised:
+ *
+ *   - v1 / v2: `auth_user`, `user_key` / `auth_key` (key id `<provider>:<provider
+ *     user id>`, `hashed_password` on email/username keys, Lucia's own
+ *     `s2:` scrypt) and `user_session` / `auth_session` (`active_expires`,
+ *     `idle_expires` in epoch ms);
+ *   - v3: your `user` table, `session(id, user_id, expires_at)`, OAuth links in
+ *     a table you named (`oauth_account(provider_id, provider_user_id, user_id)`
+ *     by the docs) or `<provider>_id` columns on the user (`github_id`), and a
+ *     password column you filled with oslo's Argon2id / Scrypt / Bcrypt;
+ *   - the current Lucia guide (sessions you implement): `session.id` is
+ *     hex(sha256(token)); TOTP keys in `totp_credential.key` and the recovery
+ *     code in `user.recovery_code`, both AES-128-GCM encrypted under your
+ *     ENCRYPTION_KEY; passkeys in `passkey_credential` with a SEC1 public key.
+ */
+export interface LuciaExportOptions {
+    /** How session rows store the cookie token: `none` (v2/v3, the id IS the token) or `sha256-hex` (the guide). Auto-detected. */
+    sessionIdHashing?: 'none' | 'sha256-hex';
+    /** The guide's ENCRYPTION_KEY (base64), to read encrypted TOTP keys and recovery codes. */
+    encryptionKey?: string;
+    /** WebAuthn RP id, for passkey_credential rows. */
+    rpId?: string;
+    /** Include live sessions. Default true. */
+    sessions?: boolean;
+    /** Table name overrides. */
+    userTable?: string;
+    sessionTable?: string;
+    oauthTable?: string;
+    now?: Date;
+}
+export declare function exportLucia(tables: Tables, options?: LuciaExportOptions): FrameworkExport;
+/** The guide's `encrypt()`: iv(16) ‖ ciphertext ‖ tag(16), AES-128-GCM (AES-256 for a 32-byte key). */
+export declare function decryptGuideValue(v: unknown, key: Buffer): Buffer | null;
+export declare function base32(data: Buffer): string;
+/**
+ * An uncompressed SEC1 P-256 key (0x04 ‖ x ‖ y) as a COSE_Key:
+ * {1: 2 (EC2), 3: -7 (ES256), -1: 1 (P-256), -2: x, -3: y}, CBOR-encoded.
+ */
+export declare function coseFromSec1(key: Buffer | null): Buffer | null;

package/dist/migrate/export/frameworks/lucia.js

@@ -0,0 +1,263 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.exportLucia = exportLucia;
+exports.decryptGuideValue = decryptGuideValue;
+exports.base32 = base32;
+exports.coseFromSec1 = coseFromSec1;
+const node_crypto_1 = require("node:crypto");
+const tables_1 = require("./tables");
+const PASSWORD_COLUMNS = ['password_hash', 'hashed_password', 'passwordHash', 'hashedPassword', 'password'];
+const PROVIDER_COLUMNS = {
+    github_id: 'github',
+    google_id: 'google',
+    discord_id: 'discord',
+    apple_id: 'apple',
+    gitlab_id: 'gitlab',
+    twitter_id: 'twitter',
+    facebook_id: 'facebook',
+    microsoft_id: 'microsoft',
+    twitch_id: 'twitch',
+    spotify_id: 'spotify',
+};
+function exportLucia(tables, options = {}) {
+    const out = new tables_1.FrameworkExport();
+    const now = (options.now ?? new Date()).getTime();
+    const userTable = tables.find(...(options.userTable ? [options.userTable] : ['auth_user', 'user', 'users', 'User']));
+    if (!userTable) {
+        out.warn('No user table found (looked for auth_user, user, users; pass --user-table).');
+        return out;
+    }
+    const keyTable = tables.find('user_key', 'auth_key', 'key');
+    const generation = keyTable ? 'v2' : 'v3';
+    out.manifest.sourceVersion = generation === 'v2' ? 'lucia v1/v2' : 'lucia v3 / guide';
+    // v2 keys: email/username keys carry the password; others are OAuth links.
+    const keysByUser = new Map();
+    for (const k of keyTable?.rows ?? []) {
+        const uid = (0, tables_1.text)((0, tables_1.col)(k, 'user_id', 'userId'));
+        if (!uid)
+            continue;
+        const list = keysByUser.get(uid) ?? [];
+        list.push(k);
+        keysByUser.set(uid, list);
+    }
+    const key = options.encryptionKey ? Buffer.from(options.encryptionKey, 'base64') : undefined;
+    const userIds = new Set();
+    const providers = new Set();
+    let unknownHashes = 0;
+    for (const row of userTable.rows) {
+        const id = (0, tables_1.text)((0, tables_1.col)(row, 'id', '_id'));
+        if (!id) {
+            out.omit('user', 'row without an id');
+            continue;
+        }
+        let email = (0, tables_1.text)((0, tables_1.col)(row, 'email', 'email_address'))?.toLowerCase();
+        let username = (0, tables_1.text)((0, tables_1.col)(row, 'username'));
+        let digest = (0, tables_1.text)((0, tables_1.col)(row, ...PASSWORD_COLUMNS));
+        const identities = [];
+        for (const k of keysByUser.get(id) ?? []) {
+            const keyId = (0, tables_1.text)((0, tables_1.col)(k, 'id'));
+            if (!keyId || !keyId.includes(':'))
+                continue;
+            const provider = keyId.slice(0, keyId.indexOf(':'));
+            const subject = keyId.slice(keyId.indexOf(':') + 1);
+            if (provider === 'email') {
+                email ??= subject.toLowerCase();
+                digest ??= (0, tables_1.text)((0, tables_1.col)(k, 'hashed_password'));
+            }
+            else if (provider === 'username') {
+                username ??= subject;
+                digest ??= (0, tables_1.text)((0, tables_1.col)(k, 'hashed_password'));
+            }
+            else
+                identities.push({ provider, subject });
+        }
+        for (const [column, provider] of Object.entries(PROVIDER_COLUMNS)) {
+            const subject = (0, tables_1.text)(row[column]);
+            if (subject)
+                identities.push({ provider, subject });
+        }
+        if (!email && !username) {
+            out.omit('user', 'no email or username');
+            continue;
+        }
+        let password;
+        if (digest) {
+            password = (0, tables_1.selfDescribingHash)(digest) ?? undefined;
+            if (!password)
+                unknownHashes++;
+        }
+        const name = (0, tables_1.text)((0, tables_1.col)(row, 'name', 'display_name'));
+        userIds.add(id);
+        out.add('user', {
+            id,
+            emails: email ? [{ email, verified: (0, tables_1.bool)((0, tables_1.col)(row, 'email_verified', 'emailVerified')), primary: true }] : undefined,
+            username,
+            name,
+            ...(0, tables_1.splitName)(name),
+            password,
+            created_at: (0, tables_1.time)((0, tables_1.col)(row, 'created_at', 'createdAt')),
+        });
+        for (const i of identities) {
+            providers.add(i.provider);
+            out.add('identity', { user_id: id, provider: i.provider, provider_user_id: i.subject, kind: 'oauth' });
+        }
+        // The guide's recovery code: one encrypted code on the user row.
+        const recovery = (0, tables_1.col)(row, 'recovery_code');
+        if (recovery !== undefined && key) {
+            const code = decryptGuideValue(recovery, key);
+            if (code)
+                out.add('mfa_factor', { user_id: id, type: 'backup_codes', backup_codes: [code.toString('utf8')] });
+            else
+                out.omit('mfa_factor', 'recovery code that does not decrypt under the ENCRYPTION_KEY given');
+        }
+    }
+    if (unknownHashes)
+        out.warn(`${unknownHashes} password value(s) are not a format Atlas verifies: those users reset their password or migrate lazily.`);
+    const oauth = tables.find(...(options.oauthTable ? [options.oauthTable] : ['oauth_account', 'oauth_accounts', 'account']));
+    for (const row of oauth?.rows ?? []) {
+        const userId = (0, tables_1.text)((0, tables_1.col)(row, 'user_id', 'userId'));
+        const provider = (0, tables_1.text)((0, tables_1.col)(row, 'provider_id', 'provider'));
+        const subject = (0, tables_1.text)((0, tables_1.col)(row, 'provider_user_id', 'providerUserId'));
+        if (!userId || !provider || !subject || !userIds.has(userId)) {
+            out.omit('identity', 'oauth account row without a known user, provider or provider user id');
+            continue;
+        }
+        providers.add(provider);
+        out.add('identity', { user_id: userId, provider, provider_user_id: subject, kind: 'oauth' });
+    }
+    out.manifest.providers = [...providers].sort();
+    // The guide's TOTP credentials.
+    const totp = tables.rows('totp_credential', 'totp_credentials');
+    if (totp.length && !key) {
+        out.omit('mfa_factor', 'TOTP keys are encrypted: pass --encryption-key (your ENCRYPTION_KEY) to carry them', totp.length);
+    }
+    for (const row of key ? totp : []) {
+        const userId = (0, tables_1.text)((0, tables_1.col)(row, 'user_id', 'userId'));
+        const secret = decryptGuideValue((0, tables_1.col)(row, 'key'), key);
+        if (!userId || !userIds.has(userId) || !secret) {
+            out.omit('mfa_factor', 'TOTP row without a known user, or a key that does not decrypt');
+            continue;
+        }
+        out.add('mfa_factor', { user_id: userId, type: 'totp', secret_base32: base32(secret), digits: 6, period: 30, algorithm: 'SHA1', verified: true });
+    }
+    // The guide's passkeys: SEC1 P-256 public keys (COSE alg -7) are re-encoded as COSE.
+    const passkeys = tables.rows('passkey_credential', 'passkey_credentials');
+    if (passkeys.length && !options.rpId) {
+        out.omit('passkey', 'no RP id given (--rp-id): a passkey only works on the domain it was registered for', passkeys.length);
+    }
+    for (const row of options.rpId ? passkeys : []) {
+        const userId = (0, tables_1.text)((0, tables_1.col)(row, 'user_id', 'userId'));
+        const credentialId = bytesOf((0, tables_1.col)(row, 'id'));
+        const alg = Number((0, tables_1.col)(row, 'algorithm', 'algorithm_id'));
+        const cose = alg === -7 ? coseFromSec1(bytesOf((0, tables_1.col)(row, 'public_key'))) : null;
+        if (!userId || !userIds.has(userId) || !credentialId || !cose) {
+            out.omit('passkey', alg === -7 ? 'passkey row without a known user or a readable key' : 'passkey with an algorithm other than ES256 (re-register it)');
+            continue;
+        }
+        out.add('passkey', {
+            user_id: userId,
+            credential_id: credentialId.toString('base64url'),
+            public_key: cose.toString('base64url'),
+            rp_id: options.rpId,
+            name: (0, tables_1.text)((0, tables_1.col)(row, 'name')),
+        });
+    }
+    if (options.rpId)
+        out.manifest.rpId = options.rpId;
+    if (options.sessions !== false) {
+        const sessions = tables.find(...(options.sessionTable ? [options.sessionTable] : ['user_session', 'auth_session', 'session', 'sessions']));
+        const hashing = options.sessionIdHashing ?? detectHashing(sessions?.rows ?? []);
+        for (const row of sessions?.rows ?? []) {
+            const sid = (0, tables_1.text)((0, tables_1.col)(row, 'id'));
+            const userId = (0, tables_1.text)((0, tables_1.col)(row, 'user_id', 'userId'));
+            // v2 sessions stay usable until idle_expires (Lucia renews them on use).
+            const expires = (0, tables_1.timeMs)((0, tables_1.col)(row, 'idle_expires', 'expires_at', 'expiresAt', 'active_expires'));
+            if (!sid || !userId || !userIds.has(userId) || expires === undefined) {
+                out.omit('session', 'session row without an id, a known user or an expiry');
+                continue;
+            }
+            if (expires <= now) {
+                out.omit('session', 'expired');
+                continue;
+            }
+            out.add('session', {
+                id: sid.slice(0, 64),
+                user_id: userId,
+                // The bridge hashes the cookie token: for guide sessions the stored id already is that hash.
+                token_hash: hashing === 'sha256-hex' ? sid.toLowerCase() : (0, tables_1.sha256Hex)(sid),
+                expires_at: new Date(expires).toISOString(),
+            });
+        }
+        out.manifest.settings = { session_cookie: 'auth_session', session_id_hashing: hashing };
+    }
+    return out;
+}
+/** Guide sessions store 64-char lowercase hex ids; Lucia v2/v3 ids are 15–40 char alphanumerics. */
+function detectHashing(rows) {
+    if (!rows.length)
+        return 'none';
+    return rows.every((r) => /^[0-9a-f]{64}$/.test(String((0, tables_1.col)(r, 'id') ?? ''))) ? 'sha256-hex' : 'none';
+}
+/** A bytes column from a dump: `\x…` hex (Postgres), plain hex, or base64. */
+function bytesOf(v) {
+    if (Buffer.isBuffer(v))
+        return v;
+    const s = (0, tables_1.text)(v);
+    if (!s)
+        return null;
+    if (/^\\x[0-9a-f]*$/i.test(s))
+        return Buffer.from(s.slice(2), 'hex');
+    if (/^([0-9a-f]{2})+$/i.test(s) && s.length >= 32)
+        return Buffer.from(s, 'hex');
+    if (/^[A-Za-z0-9+/_-]+={0,2}$/.test(s))
+        return Buffer.from(s.replace(/-/g, '+').replace(/_/g, '/'), 'base64');
+    return null;
+}
+/** The guide's `encrypt()`: iv(16) ‖ ciphertext ‖ tag(16), AES-128-GCM (AES-256 for a 32-byte key). */
+function decryptGuideValue(v, key) {
+    const data = bytesOf(v);
+    if (!data || data.length < 33 || (key.length !== 16 && key.length !== 32))
+        return null;
+    try {
+        const decipher = (0, node_crypto_1.createDecipheriv)(key.length === 16 ? 'aes-128-gcm' : 'aes-256-gcm', key, data.subarray(0, 16));
+        decipher.setAuthTag(data.subarray(data.length - 16));
+        return Buffer.concat([decipher.update(data.subarray(16, data.length - 16)), decipher.final()]);
+    }
+    catch {
+        return null;
+    }
+}
+const B32 = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567';
+function base32(data) {
+    let bits = 0;
+    let value = 0;
+    let out = '';
+    for (const byte of data) {
+        value = (value << 8) | byte;
+        bits += 8;
+        while (bits >= 5) {
+            out += B32[(value >>> (bits - 5)) & 31];
+            bits -= 5;
+        }
+    }
+    if (bits > 0)
+        out += B32[(value << (5 - bits)) & 31];
+    return out;
+}
+/**
+ * An uncompressed SEC1 P-256 key (0x04 ‖ x ‖ y) as a COSE_Key:
+ * {1: 2 (EC2), 3: -7 (ES256), -1: 1 (P-256), -2: x, -3: y}, CBOR-encoded.
+ */
+function coseFromSec1(key) {
+    if (!key || key.length !== 65 || key[0] !== 0x04)
+        return null;
+    const x = key.subarray(1, 33);
+    const y = key.subarray(33, 65);
+    return Buffer.concat([
+        Buffer.from([0xa5, 0x01, 0x02, 0x03, 0x26, 0x20, 0x01, 0x21, 0x58, 0x20]),
+        x,
+        Buffer.from([0x22, 0x58, 0x20]),
+        y,
+    ]);
+}
+//# sourceMappingURL=lucia.js.map

package/dist/migrate/export/frameworks/lucia.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lucia.js","sourceRoot":"","sources":["../../../../src/migrate/export/frameworks/lucia.ts"],"names":[],"mappings":";;AA8DA,kCAuKC;AAoBD,8CAUC;AAGD,wBAcC;AAMD,oCAUC;AApSD,6CAA+C;AAC/C,qCAYkB;AAmClB,MAAM,gBAAgB,GAAG,CAAC,eAAe,EAAE,iBAAiB,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC;AAC5G,MAAM,gBAAgB,GAA2B;IAC/C,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,QAAQ;IACnB,UAAU,EAAE,SAAS;IACrB,QAAQ,EAAE,OAAO;IACjB,SAAS,EAAE,QAAQ;IACnB,UAAU,EAAE,SAAS;IACrB,WAAW,EAAE,UAAU;IACvB,YAAY,EAAE,WAAW;IACzB,SAAS,EAAE,QAAQ;IACnB,UAAU,EAAE,SAAS;CACtB,CAAC;AAEF,SAAgB,WAAW,CAAC,MAAc,EAAE,UAA8B,EAAE;IAC1E,MAAM,GAAG,GAAG,IAAI,wBAAe,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACrH,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;QACxF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,GAAG,CAAC,QAAQ,CAAC,aAAa,GAAG,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAEtF,2EAA2E;IAC3E,MAAM,UAAU,GAAG,IAAI,GAAG,EAAiB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACb,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QACD,IAAI,KAAK,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACpE,IAAI,QAAQ,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QAC1C,IAAI,MAAM,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC;QACjD,MAAM,UAAU,GAAiD,EAAE,CAAC;QACpE,KAAK,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACpD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;gBACzB,KAAK,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC;gBAChC,MAAM,KAAK,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAC7C,CAAC;iBAAM,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACnC,QAAQ,KAAK,OAAO,CAAC;gBACrB,MAAM,KAAK,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAC7C,CAAC;;gBAAM,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAClE,MAAM,OAAO,GAAG,IAAA,aAAI,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YAClC,IAAI,OAAO;gBAAE,UAAU,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;YACzC,SAAS;QACX,CAAC;QACD,IAAI,QAAyD,CAAC;QAC9D,IAAI,MAAM,EAAE,CAAC;YACX,QAAQ,GAAG,IAAA,2BAAkB,EAAC,MAAM,CAAC,IAAI,SAAS,CAAC;YACnD,IAAI,CAAC,QAAQ;gBAAE,aAAa,EAAE,CAAC;QACjC,CAAC;QACD,MAAM,IAAI,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE;YACd,EAAE;YACF,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACnH,QAAQ;YACR,IAAI;YACJ,GAAG,IAAA,kBAAS,EAAC,IAAI,CAAC;YAClB,QAAQ;YACR,UAAU,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;SACtD,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC1B,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,iEAAiE;QACjE,MAAM,QAAQ,GAAG,IAAA,YAAG,EAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QAC3C,IAAI,QAAQ,KAAK,SAAS,IAAI,GAAG,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC9C,IAAI,IAAI;gBAAE,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;;gBACzG,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,oEAAoE,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IACD,IAAI,aAAa;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,aAAa,yGAAyG,CAAC,CAAC;IAEvJ,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAC3H,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,sEAAsE,CAAC,CAAC;YAC7F,SAAS;QACX,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAE/C,gCAAgC;IAChC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,oFAAoF,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5H,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,KAAK,CAAC,EAAE,GAAI,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,+DAA+D,CAAC,CAAC;YACxF,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACpJ,CAAC;IAED,qFAAqF;IACrF,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,qBAAqB,CAAC,CAAC;IAC1E,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,oFAAoF,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7H,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/E,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,oDAAoD,CAAC,CAAC,CAAC,6DAA6D,CAAC,CAAC;YACvJ,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE;YACjB,OAAO,EAAE,MAAM;YACf,aAAa,EAAE,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC;YACjD,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;YACtC,KAAK,EAAE,OAAO,CAAC,IAAK;YACpB,IAAI,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,IAAI;QAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAEnD,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;QAC3I,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,IAAI,aAAa,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAChF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;YACjC,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;YACnD,yEAAyE;YACzE,MAAM,OAAO,GAAG,IAAA,eAAM,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC;YAC9F,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBACrE,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,sDAAsD,CAAC,CAAC;gBAC5E,SAAS;YACX,CAAC;YACD,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE;gBACjB,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBACpB,OAAO,EAAE,MAAM;gBACf,6FAA6F;gBAC7F,UAAU,EAAE,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAA,kBAAS,EAAC,GAAG,CAAC;gBACzE,UAAU,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC;IAC1F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oGAAoG;AACpG,SAAS,aAAa,CAAC,IAAW;IAChC,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IAChC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAA,YAAG,EAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;AACtG,CAAC;AAED,8EAA8E;AAC9E,SAAS,OAAO,CAAC,CAAU;IACzB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,CAAC;IAClB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrE,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAChF,IAAI,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC9G,OAAO,IAAI,CAAC;AACd,CAAC;AAED,uGAAuG;AACvG,SAAgB,iBAAiB,CAAC,CAAU,EAAE,GAAW;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACvF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAA,8BAAgB,EAAC,GAAG,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAChH,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;QACrD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,GAAG,GAAG,kCAAkC,CAAC;AAC/C,SAAgB,MAAM,CAAC,IAAY;IACjC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QAC5B,IAAI,IAAI,CAAC,CAAC;QACV,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YACjB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IACD,IAAI,IAAI,GAAG,CAAC;QAAE,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACrD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAgB,YAAY,CAAC,GAAkB;IAC7C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/migrate/export/frameworks/tables.d.ts

@@ -0,0 +1,90 @@
+import { type CanonicalModel, type CanonicalRecordData, type MigrationManifest, type Timestamp } from '@atlasauth/migrate';
+/**
+ * The self-hosted frameworks (Auth.js, Lucia, Passport, iron-session, Devise,
+ * Django) keep users in the APP's own database, so their exporters read table
+ * dumps the owner makes with their usual tools — `psql \copy … csv`,
+ * `mysqldump --tab`, `sqlite3 -json`, `mongoexport`, Prisma/Drizzle scripts,
+ * `manage.py dumpdata`, the Rails runner script — rather than connecting to a
+ * database. Nothing leaves the owner's machine unsealed, and no database
+ * driver is needed.
+ *
+ * A dump directory holds one file per table, `<table>.json` (an array, or
+ * `{ "rows": [...] }`), `<table>.ndjson` / `.jsonl`, or `<table>.csv`. Table
+ * lookups are case-insensitive and accept the names every adapter uses
+ * (`User`, `users`, `user`, `auth_user` …), so a mapper names the candidates.
+ */
+export type Row = Record<string, unknown>;
+/** Rows by table name (lowercase). */
+export declare class Tables {
+    private readonly byName;
+    constructor(tables?: Record<string, Row[]>);
+    set(name: string, rows: Row[]): void;
+    /** The first table that exists among `names` (case-insensitive), with its name. */
+    find(...names: string[]): {
+        name: string;
+        rows: Row[];
+    } | undefined;
+    rows(...names: string[]): Row[];
+    names(): string[];
+}
+/** Read every table file in a dump directory. */
+export declare function readDumpDir(dir: string): Tables;
+/**
+ * Rows streamed as NDJSON `{"table": "<name>", "row": {…}}` lines — what the
+ * Rails and Django export scripts print, piped into `--file -`.
+ */
+export declare function tablesFromStream(text: string, into?: Tables): Tables;
+/** Parse one table file's text by its extension. */
+export declare function parseTableText(text: string, ext: string): Row[];
+export declare function isRow(v: unknown): v is Row;
+/** The first present, non-empty column among `names` (exact, then case-insensitive). */
+export declare function col(row: Row, ...names: string[]): unknown;
+export declare function text(v: unknown): string | undefined;
+export declare function bool(v: unknown): boolean;
+/**
+ * A timestamp column as the bundle wants it: ISO strings pass, numbers are
+ * epoch ms (or seconds when small), SQL `2024-01-02 03:04:05[+00]` strings are
+ * made ISO. Undefined when absent or unparseable.
+ */
+export declare function time(v: unknown): Timestamp | undefined;
+export declare function timeMs(v: unknown): number | undefined;
+/** A JSON column (object, or a string holding one). */
+export declare function json(v: unknown): Row | undefined;
+/** Lowercase hex sha256 — the bundle's session `token_hash`. */
+export declare function sha256Hex(value: string): string;
+/** Any base64 / base64url / `\x`-hex bytes column as base64url (passkey fields). */
+export declare function base64url(v: unknown): string | undefined;
+/**
+ * The password-hash algorithm a stored digest self-describes, for a column
+ * the app filled itself (Auth.js Credentials, Lucia, Passport): bcrypt and
+ * Argon2 PHC strings, oslo/Better Auth `salt:key` scrypt, Lucia's own scrypt,
+ * Django/passlib PBKDF2. `auto` lets Atlas's registry recognise it; null =
+ * not a format Atlas can verify (the user resets or migrates lazily).
+ */
+export declare function selfDescribingHash(digest: string): {
+    algorithm: string;
+    hash: string;
+} | null;
+/** Records by canonical model, plus what the exporter could not carry. */
+export declare class FrameworkExport {
+    private readonly rows;
+    readonly warnings: string[];
+    readonly omitted: Record<string, {
+        count: number;
+        reason: string;
+    }>;
+    manifest: Partial<Pick<MigrationManifest, 'origin' | 'sourceVersion' | 'rpId' | 'providers' | 'settings'>>;
+    add<M extends CanonicalModel>(model: M, data: CanonicalRecordData[M]): void;
+    list<M extends CanonicalModel>(model: M): Array<CanonicalRecordData[M]>;
+    count(model: CanonicalModel): number;
+    warn(message: string): void;
+    omit(model: string, reason: string, count?: number): void;
+    /** Every row as `[model, data]`, in the canonical order the bundle writer requires. */
+    entries(): Generator<[CanonicalModel, unknown]>;
+    counts(): Record<string, number>;
+}
+/** Split "Ada Lovelace" for exports that only keep a display name. */
+export declare function splitName(name: string | undefined): {
+    first_name?: string;
+    last_name?: string;
+};