@atlasauth/cli 0.11.0 → 0.13.0

package/dist/migrate/export/table.js

@@ -0,0 +1,248 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseDelimited = parseDelimited;
+exports.parseTable = parseTable;
+exports.parseKeyValues = parseKeyValues;
+exports.typedParams = typedParams;
+exports.mapTable = mapTable;
+const password_detect_1 = require("./password-detect");
+const record_set_1 = require("./record-set");
+const translate_kit_1 = require("./translate-kit");
+// ── parsing ─────────────────────────────────────────────────────────────────
+/** RFC 4180 CSV with a sniffed delimiter (`,` `;` tab `|`), quoted fields, doubled quotes, embedded newlines. */
+function parseDelimited(text) {
+    const src = text.replace(/^\ufeff/, '');
+    const first = src.split(/\r?\n/, 1)[0] ?? '';
+    const delimiter = [',', ';', '\t', '|'].map((d) => [d, first.split(d).length]).sort((a, b) => b[1] - a[1])[0][0];
+    const rows = [];
+    let row = [];
+    let field = '';
+    let quoted = false;
+    for (let i = 0; i < src.length; i++) {
+        const c = src[i];
+        if (quoted) {
+            if (c === '"') {
+                if (src[i + 1] === '"') {
+                    field += '"';
+                    i++;
+                }
+                else
+                    quoted = false;
+            }
+            else
+                field += c;
+        }
+        else if (c === '"' && field === '')
+            quoted = true;
+        else if (c === delimiter) {
+            row.push(field);
+            field = '';
+        }
+        else if (c === '\n' || c === '\r') {
+            if (c === '\r' && src[i + 1] === '\n')
+                i++;
+            row.push(field);
+            field = '';
+            if (row.some((f) => f !== ''))
+                rows.push(row);
+            row = [];
+        }
+        else
+            field += c;
+    }
+    row.push(field);
+    if (row.some((f) => f !== ''))
+        rows.push(row);
+    const header = (rows.shift() ?? []).map((h) => h.trim());
+    return rows.map((r) => Object.fromEntries(header.map((h, i) => [h, r[i] ?? ''])));
+}
+/** Rows from CSV/TSV, a JSON array (of objects, or `{ users: [...] }`) or NDJSON. */
+function parseTable(text) {
+    const t = text.trim();
+    if (t.startsWith('[') || t.startsWith('{')) {
+        try {
+            const v = JSON.parse(t);
+            if (Array.isArray(v))
+                return v.filter(record_set_1.isObj);
+            if ((0, record_set_1.isObj)(v)) {
+                const list = Object.values(v).find(Array.isArray);
+                if (list)
+                    return list.filter(record_set_1.isObj);
+                return [v];
+            }
+        }
+        catch {
+            // NDJSON: one object per line
+            return t.split(/\r?\n/).filter((l) => l.trim()).map((l, i) => {
+                try {
+                    const o = JSON.parse(l);
+                    if (!(0, record_set_1.isObj)(o))
+                        throw new Error('not an object');
+                    return o;
+                }
+                catch {
+                    throw new Error(`Line ${i + 1} is not a JSON object.`);
+                }
+            });
+        }
+    }
+    return parseDelimited(t);
+}
+// ── column recognition ──────────────────────────────────────────────────────
+const NAMES = {
+    id: ['id', 'user_id', 'userid', 'uid', 'uuid', 'sub', 'external_id'],
+    email: ['email', 'email_address', 'emailaddress', 'mail', 'e_mail'],
+    email_verified: ['email_verified', 'emailverified', 'verified', 'is_verified', 'email_confirmed', 'email_confirmed_at', 'confirmed_at', 'email_verified_at'],
+    username: ['username', 'user_name', 'login', 'handle', 'screen_name'],
+    first_name: ['first_name', 'firstname', 'given_name', 'givenname', 'fname'],
+    last_name: ['last_name', 'lastname', 'family_name', 'surname', 'lname'],
+    name: ['name', 'full_name', 'fullname', 'display_name', 'displayname'],
+    phone: ['phone', 'phone_number', 'phonenumber', 'mobile', 'mobile_phone', 'tel'],
+    password: ['password_hash', 'passwordhash', 'encrypted_password', 'hashed_password', 'password_digest', 'pwd_hash', 'password', 'passwd', 'hash', 'pass'],
+    salt: ['password_salt', 'salt', 'pwd_salt', 'passwordsalt'],
+    created_at: ['created_at', 'createdat', 'created', 'date_joined', 'registered_at', 'signup_date'],
+    last_sign_in_at: ['last_sign_in_at', 'last_login', 'last_login_at', 'last_seen', 'lastlogin'],
+    roles: ['roles', 'role', 'groups'],
+    disabled: ['disabled', 'banned', 'is_banned', 'blocked', 'is_blocked', 'suspended', 'locked'],
+    active: ['active', 'is_active', 'enabled'],
+    image_url: ['image_url', 'avatar', 'avatar_url', 'picture', 'photo'],
+};
+const truthy = (v) => {
+    if (typeof v === 'boolean')
+        return v;
+    if (typeof v === 'number')
+        return v !== 0;
+    const s = String(v ?? '').trim().toLowerCase();
+    return ['1', 'true', 't', 'yes', 'y'].includes(s) || (s !== '' && !['0', 'false', 'f', 'no', 'n', 'null', 'nil', 'none'].includes(s) && /^\d{4}-|^\d{9,}$/.test(s));
+};
+function columnFinder(row, map = {}) {
+    const lower = new Map(Object.keys(row).map((k) => [k.toLowerCase().replace(/[\s-]+/g, '_'), k]));
+    return (field) => {
+        const wanted = map[field];
+        if (wanted)
+            return Object.keys(row).find((k) => k === wanted) ?? lower.get(wanted.toLowerCase());
+        for (const n of NAMES[field] ?? [])
+            if (lower.has(n))
+                return lower.get(n);
+        return undefined;
+    };
+}
+const isoTime = (v) => {
+    const s = (0, record_set_1.str)(v);
+    if (!s)
+        return undefined;
+    const n = /^\d{9,13}$/.test(s) ? Number(s) * (s.length >= 12 ? 1 : 1000) : Date.parse(s);
+    return Number.isFinite(n) && n > 0 ? new Date(n).toISOString() : undefined;
+};
+function passwordFor(hash, salt, o) {
+    const algorithm = o.hashAlgorithm?.toLowerCase();
+    if (algorithm === 'plaintext') {
+        const d = (0, password_detect_1.detectPasswordHash)(hash, { plaintext: true });
+        return d.ok ? { password: d.password } : { reason: d.reason };
+    }
+    if (!algorithm || algorithm === 'auto') {
+        const d = (0, password_detect_1.detectPasswordHash)(hash);
+        if (d.ok)
+            return { password: d.password, weak: d.weak };
+        return { reason: `${d.reason}; name its algorithm with --set hash-algorithm=<id>` };
+    }
+    if (!(0, password_detect_1.isKnownAlgorithm)(algorithm))
+        return { reason: `unknown hash algorithm "${algorithm}"` };
+    const params = { ...(o.hashParams ?? {}) };
+    if (o.saltPosition)
+        params.salt_position = o.saltPosition;
+    if (o.hashEncoding)
+        params.encoding = o.hashEncoding;
+    return { password: (0, record_set_1.compact)({ algorithm, hash, salt, params: Object.keys(params).length ? params : undefined }) };
+}
+/** Parse `a=1,b=two,c=true` into typed params. */
+function parseKeyValues(raw) {
+    const out = {};
+    for (const part of (raw ?? '').split(',')) {
+        const i = part.indexOf('=');
+        if (i > 0)
+            out[part.slice(0, i).trim()] = part.slice(i + 1).trim();
+    }
+    return out;
+}
+function typedParams(raw) {
+    return Object.fromEntries(Object.entries(parseKeyValues(raw)).map(([k, v]) => [k, v === 'true' ? true : v === 'false' ? false : /^\d+$/.test(v) ? Number(v) : v]));
+}
+// ── mapping ─────────────────────────────────────────────────────────────────
+function mapTable(rows, options = {}) {
+    const set = new record_set_1.RecordSet();
+    set.manifest = { origin: options.origin ?? 'user table' };
+    const ids = new Set();
+    let n = 0;
+    const unusable = new Map();
+    let weak = 0;
+    for (const row of rows) {
+        n++;
+        const col = columnFinder(row, options.map);
+        const get = (f) => {
+            const c = col(f);
+            return c === undefined ? undefined : row[c];
+        };
+        const emailRaw = (0, record_set_1.str)(get('email'))?.toLowerCase();
+        const email = emailRaw?.includes('@') ? emailRaw : undefined;
+        const phone = (0, record_set_1.e164)(get('phone'));
+        const username = (0, record_set_1.str)(get('username'));
+        if (!email && !phone && !username) {
+            set.omit('user', 'no email, phone or username', 1);
+            continue;
+        }
+        const id = (0, record_set_1.str)(get('id')) ?? email ?? username ?? String(n);
+        if (ids.has(id)) {
+            set.omit('user', 'duplicate id', 1);
+            continue;
+        }
+        ids.add(id);
+        const verifiedCol = col('email_verified');
+        const emails = email ? [{ email, verified: options.trustEmails === true || (verifiedCol !== undefined && truthy(row[verifiedCol])), primary: true }] : [];
+        const phones = phone ? [{ phone, verified: false, primary: true }] : [];
+        const record = (0, record_set_1.compact)({
+            id,
+            emails,
+            phones,
+            username,
+            first_name: (0, record_set_1.str)(get('first_name')),
+            last_name: (0, record_set_1.str)(get('last_name')),
+            name: (0, record_set_1.str)(get('name')),
+            image_url: (0, record_set_1.str)(get('image_url')),
+            created_at: isoTime(get('created_at')),
+            last_sign_in_at: isoTime(get('last_sign_in_at')),
+        });
+        const roleValue = get('roles');
+        const roles = (Array.isArray(roleValue) ? (0, record_set_1.strs)(roleValue) : ((0, record_set_1.str)(roleValue) ?? '').split(/[;,|]/)).map((r) => r.trim()).filter(Boolean).map(translate_kit_1.keyOf);
+        for (const r of roles)
+            set.add('role', { key: r, name: r, scope: 'app' }, r);
+        if (roles.length)
+            record.roles = [...new Set(roles)];
+        if (truthy(get('disabled')) && col('disabled') !== undefined) {
+            record.banned = true;
+            record.ban_reason = 'Disabled in the source table';
+        }
+        else if (col('active') !== undefined && get('active') !== '' && get('active') !== undefined && !truthy(get('active'))) {
+            record.banned = true;
+            record.ban_reason = 'Inactive in the source table';
+        }
+        const hash = (0, record_set_1.str)(get('password'));
+        if (hash) {
+            const r = passwordFor(hash, (0, record_set_1.str)(get('salt')), options);
+            if (r.password) {
+                record.password = r.password;
+                if (r.weak)
+                    weak++;
+            }
+            else
+                unusable.set(r.reason, (unusable.get(r.reason) ?? 0) + 1);
+        }
+        set.add('user', record, id);
+    }
+    for (const [reason, count] of unusable)
+        set.warn(`${count} password(s) left out: ${reason}.`);
+    if (weak)
+        set.warn(`${weak} password(s) use a weak legacy hash; Atlas re-hashes each to Argon2id on that user's first sign-in.`);
+    return set;
+}
+//# sourceMappingURL=table.js.map

package/dist/migrate/export/table.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"table.js","sourceRoot":"","sources":["../../../src/migrate/export/table.ts"],"names":[],"mappings":";;AAoCA,wCAiCC;AAGD,gCAyBC;AAkED,wCAOC;AAED,kCAEC;AAID,4BAsEC;AAvPD,uDAAyE;AACzE,6CAAoF;AACpF,mDAAwC;AA8BxC,+EAA+E;AAE/E,iHAAiH;AACjH,SAAgB,cAAc,CAAC,IAAY;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;IAC3H,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,IAAI,GAAG,GAAa,EAAE,CAAC;IACvB,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;QAClB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBACd,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACvB,KAAK,IAAI,GAAG,CAAC;oBACb,CAAC,EAAE,CAAC;gBACN,CAAC;;oBAAM,MAAM,GAAG,KAAK,CAAC;YACxB,CAAC;;gBAAM,KAAK,IAAI,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,KAAK,EAAE;YAAE,MAAM,GAAG,IAAI,CAAC;aAC/C,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChB,KAAK,GAAG,EAAE,CAAC;QACb,CAAC;aAAM,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChB,KAAK,GAAG,EAAE,CAAC;YACX,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9C,GAAG,GAAG,EAAE,CAAC;QACX,CAAC;;YAAM,KAAK,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,qFAAqF;AACrF,SAAgB,UAAU,CAAC,IAAY;IACrC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAY,CAAC;YACnC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,MAAM,CAAC,kBAAK,CAAC,CAAC;YAC7C,IAAI,IAAA,kBAAK,EAAC,CAAC,CAAC,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAClD,IAAI,IAAI;oBAAE,OAAQ,IAAkB,CAAC,MAAM,CAAC,kBAAK,CAAC,CAAC;gBACnD,OAAO,CAAC,CAAC,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;YAC9B,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBAC3D,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAY,CAAC;oBACnC,IAAI,CAAC,IAAA,kBAAK,EAAC,CAAC,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;oBAChD,OAAO,CAAC,CAAC;gBACX,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAE/E,MAAM,KAAK,GAA6B;IACtC,EAAE,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC;IACpE,KAAK,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC;IACnE,cAAc,EAAE,CAAC,gBAAgB,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,cAAc,EAAE,mBAAmB,CAAC;IAC5J,QAAQ,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC;IACrE,UAAU,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC;IAC3E,SAAS,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,CAAC;IACvE,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,CAAC;IACtE,KAAK,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,CAAC;IAChF,QAAQ,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;IACzJ,IAAI,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,CAAC;IAC3D,UAAU,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,CAAC;IACjG,eAAe,EAAE,CAAC,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,CAAC;IAC7F,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;IAClC,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC;IAC7F,MAAM,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC;IAC1C,SAAS,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC;CACrE,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,CAAU,EAAW,EAAE;IACrC,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACtK,CAAC,CAAC;AAEF,SAAS,YAAY,CAAC,GAAQ,EAAE,MAA8B,EAAE;IAC9D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,OAAO,CAAC,KAAa,EAAsB,EAAE;QAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACjG,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1E,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,CAAU,EAAsB,EAAE;IACjD,MAAM,CAAC,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC;IACjB,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzF,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC,CAAC;AAEF,SAAS,WAAW,CAAC,IAAY,EAAE,IAAwB,EAAE,CAAqB;IAChF,MAAM,SAAS,GAAG,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,CAAC;IACjD,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,IAAA,oCAAkB,EAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAA,oCAAkB,EAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,qDAAqD,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,IAAA,kCAAgB,EAAC,SAAS,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,2BAA2B,SAAS,GAAG,EAAE,CAAC;IAC7F,MAAM,MAAM,GAA8C,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;IACtF,IAAI,CAAC,CAAC,YAAY;QAAE,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,IAAI,CAAC,CAAC,YAAY;QAAE,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,YAAY,CAAC;IACrD,OAAO,EAAE,QAAQ,EAAE,IAAA,oBAAO,EAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAkB,CAAC,EAAE,CAAC;AACnI,CAAC;AAED,kDAAkD;AAClD,SAAgB,cAAc,CAAC,GAAuB;IACpD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,WAAW,CAAC,GAAuB;IACjD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrK,CAAC;AAED,+EAA+E;AAE/E,SAAgB,QAAQ,CAAC,IAAW,EAAE,UAA8B,EAAE;IACpE,MAAM,GAAG,GAAG,IAAI,sBAAS,EAAE,CAAC;IAC5B,GAAG,CAAC,QAAQ,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;IAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,CAAC,EAAE,CAAC;QACJ,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,CAAC,CAAS,EAAW,EAAE;YACjC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACjB,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAA,iBAAI,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,6BAA6B,EAAE,CAAC,CAAC,CAAC;YACnD,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACZ,MAAM,WAAW,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAmB,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1K,MAAM,MAAM,GAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,MAAM,GAAe,IAAA,oBAAO,EAAC;YACjC,EAAE;YACF,MAAM;YACN,MAAM;YACN,QAAQ;YACR,UAAU,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAClC,SAAS,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAChC,IAAI,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtB,SAAS,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAChC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACtC,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;SACnC,CAAC,CAAC;QAEjB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAI,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAG,EAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,qBAAK,CAAC,CAAC;QACnJ,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7E,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAErD,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;YAC7D,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;YACrB,MAAM,CAAC,UAAU,GAAG,8BAA8B,CAAC;QACrD,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACxH,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;YACrB,MAAM,CAAC,UAAU,GAAG,8BAA8B,CAAC;QACrD,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QAClC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACvD,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACf,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;gBAC7B,IAAI,CAAC,CAAC,IAAI;oBAAE,IAAI,EAAE,CAAC;YACrB,CAAC;;gBAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAO,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9B,CAAC;IACD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,0BAA0B,MAAM,GAAG,CAAC,CAAC;IAC9F,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,qGAAqG,CAAC,CAAC;IACjI,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/migrate/export/translate-kit.d.ts

@@ -0,0 +1,46 @@
+import type { ReportStatus, TranslationReportEntry, TranslationResult } from '../framework/plugin';
+import type { Json } from '../../serialize';
+/**
+ * Shared machinery for the vendor CONFIG translators (`atlas migrate <vendor>
+ * config`): build the Atlas config-as-code documents (`instance` with its
+ * `auth_config`, `oauth_providers`, `roles`, `permissions`, …) and the report
+ * line by line, every line naming the vendor setting it came from.
+ *
+ * Secrets are never copied: a vendor client secret becomes a `${NAME}`
+ * placeholder the operator sets before `atlas config import`.
+ */
+export declare class ConfigBuilder {
+    readonly auth: Record<string, Json>;
+    readonly instance: Record<string, Json>;
+    readonly collections: Record<string, Json[]>;
+    readonly report: TranslationReportEntry[];
+    private readonly env;
+    readonly providers: Record<string, string>;
+    readonly roles: Record<string, string>;
+    /** Set `auth_config.<path>` (dotted). */
+    set(path: string, value: Json): void;
+    add(status: ReportStatus, area: string, setting: string, note: string, atlas?: string): void;
+    /** A `${NAME}` placeholder the import interpolates from the environment. */
+    placeholder(name: string, purpose: string): string;
+    push(collection: keyof ConfigBuilder['collections'] | string, value: Json): void;
+    /** An `oauth_providers` entry for a built-in Atlas provider, credentials as placeholders. */
+    socialProvider(o: {
+        atlasKey: string;
+        vendorName: string;
+        area: string;
+        setting: string;
+        clientId?: string;
+        scopes?: string[];
+        enabled?: boolean;
+        allowSignUp?: boolean;
+    }): void;
+    result(origin: string, extra?: Pick<TranslationResult, 'bridge' | 'lazy'>): TranslationResult;
+}
+/** Social provider names vendors use → Atlas built-in provider keys. */
+export declare const SOCIAL_KEYS: Record<string, string>;
+/** The Atlas key for a vendor's provider name (`oauth_google`, `oauth2:google`, `GOOGLE`, `google-oauth2`), or null. */
+export declare function socialKey(raw: string): string | null;
+/** `Billing Admin` → `billing_admin`. */
+export declare function keyOf(name: string): string;
+/** Atlas's session window: 5 minutes to 90 days. */
+export declare function clampSessionMs(ms: number): number;

package/dist/migrate/export/translate-kit.js

@@ -0,0 +1,148 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SOCIAL_KEYS = exports.ConfigBuilder = void 0;
+exports.socialKey = socialKey;
+exports.keyOf = keyOf;
+exports.clampSessionMs = clampSessionMs;
+/**
+ * Shared machinery for the vendor CONFIG translators (`atlas migrate <vendor>
+ * config`): build the Atlas config-as-code documents (`instance` with its
+ * `auth_config`, `oauth_providers`, `roles`, `permissions`, …) and the report
+ * line by line, every line naming the vendor setting it came from.
+ *
+ * Secrets are never copied: a vendor client secret becomes a `${NAME}`
+ * placeholder the operator sets before `atlas config import`.
+ */
+class ConfigBuilder {
+    auth = {};
+    instance = {};
+    collections = {
+        oauth_providers: [],
+        custom_oauth_providers: [],
+        permissions: [],
+        roles: [],
+        oauth_clients: [],
+        resource_servers: [],
+        redirect_urls: [],
+        jwt_templates: [],
+    };
+    report = [];
+    env = new Map();
+    providers = {};
+    roles = {};
+    /** Set `auth_config.<path>` (dotted). */
+    set(path, value) {
+        const keys = path.split('.');
+        let node = this.auth;
+        for (const k of keys.slice(0, -1)) {
+            const next = node[k];
+            if (!next || typeof next !== 'object' || Array.isArray(next))
+                node[k] = {};
+            node = node[k];
+        }
+        node[keys[keys.length - 1]] = value;
+    }
+    add(status, area, setting, note, atlas) {
+        this.report.push({ status, area, setting, note, ...(atlas ? { atlas } : {}) });
+    }
+    /** A `${NAME}` placeholder the import interpolates from the environment. */
+    placeholder(name, purpose) {
+        this.env.set(name, purpose);
+        return `\${${name}}`;
+    }
+    push(collection, value) {
+        (this.collections[collection] ??= []).push(value);
+    }
+    /** An `oauth_providers` entry for a built-in Atlas provider, credentials as placeholders. */
+    socialProvider(o) {
+        const upper = o.atlasKey.toUpperCase().replace(/[^A-Z0-9]+/g, '_');
+        if (this.collections.oauth_providers.some((p) => p.provider === o.atlasKey))
+            return;
+        const entry = {
+            provider: o.atlasKey,
+            enabled: o.enabled !== false,
+            allow_sign_in: true,
+            allow_sign_up: o.allowSignUp !== false,
+            client_id: o.clientId ?? this.placeholder(`${upper}_CLIENT_ID`, `${o.vendorName} client id`),
+            client_secret: this.placeholder(`${upper}_CLIENT_SECRET`, `${o.vendorName} client secret`),
+        };
+        if (o.scopes?.length)
+            entry.scopes = o.scopes;
+        this.push('oauth_providers', entry);
+        this.providers[o.vendorName] = o.atlasKey;
+        this.add(o.clientId ? 'differs' : 'manual', o.area, o.setting, `${o.vendorName} sign-in becomes Atlas's built-in "${o.atlasKey}" provider. Keep the same OAuth app so imported accounts relink by provider user id; add Atlas's callback URL to it${o.clientId ? '' : ', and set the client id'} and set ${upper}_CLIENT_SECRET (secrets are never copied).`, `oauth_providers ${o.atlasKey}`);
+    }
+    result(origin, extra = {}) {
+        const documents = {};
+        const instance = { ...this.instance };
+        if (Object.keys(this.auth).length)
+            instance.auth_config = this.auth;
+        if (Object.keys(instance).length)
+            documents.instance = instance;
+        for (const [type, list] of Object.entries(this.collections))
+            if (list.length)
+                documents[type] = list;
+        return {
+            origin,
+            documents,
+            report: this.report,
+            env: [...this.env.entries()].map(([name, purpose]) => ({ name, for: purpose })),
+            mappings: { providers: this.providers, roles: this.roles },
+            ...extra,
+        };
+    }
+}
+exports.ConfigBuilder = ConfigBuilder;
+/** Social provider names vendors use → Atlas built-in provider keys. */
+exports.SOCIAL_KEYS = {
+    google: 'google',
+    'google-oauth2': 'google',
+    github: 'github',
+    gitlab: 'gitlab',
+    facebook: 'facebook',
+    apple: 'apple',
+    microsoft: 'microsoft',
+    windowslive: 'microsoft',
+    'microsoft-account': 'microsoft',
+    azure_ad: 'microsoft',
+    linkedin: 'linkedin',
+    linkedin_oidc: 'linkedin',
+    twitter: 'x',
+    x: 'x',
+    discord: 'discord',
+    slack: 'slack',
+    spotify: 'spotify',
+    twitch: 'twitch',
+    bitbucket: 'bitbucket',
+    dropbox: 'dropbox',
+    notion: 'notion',
+    salesforce: 'salesforce',
+    paypal: 'paypal',
+    amazon: 'amazon',
+    tiktok: 'tiktok',
+    line: 'line',
+    zoom: 'zoom',
+    figma: 'figma',
+    hubspot: 'hubspot',
+    atlassian: 'atlassian',
+    coinbase: 'coinbase',
+    box: 'box',
+    yahoo: 'yahoo',
+    roblox: 'roblox',
+    reddit: 'reddit',
+};
+/** The Atlas key for a vendor's provider name (`oauth_google`, `oauth2:google`, `GOOGLE`, `google-oauth2`), or null. */
+function socialKey(raw) {
+    const k = raw.toLowerCase().replace(/^oauth2?[_:]/, '').replace(/^oauth_/, '');
+    return exports.SOCIAL_KEYS[k] ?? null;
+}
+/** `Billing Admin` → `billing_admin`. */
+function keyOf(name) {
+    return name.trim().toLowerCase().replace(/[^a-z0-9:]+/g, '_').replace(/^_+|_+$/g, '') || 'role';
+}
+const MIN = 60_000;
+/** Atlas's session window: 5 minutes to 90 days. */
+function clampSessionMs(ms) {
+    return Math.min(Math.max(ms, 5 * MIN), 90 * 24 * 60 * MIN);
+}
+//# sourceMappingURL=translate-kit.js.map

package/dist/migrate/export/translate-kit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"translate-kit.js","sourceRoot":"","sources":["../../../src/migrate/export/translate-kit.ts"],"names":[],"mappings":";;;AAkJA,8BAGC;AAGD,sBAEC;AAID,wCAEC;AA7JD;;;;;;;;GAQG;AACH,MAAa,aAAa;IACf,IAAI,GAAyB,EAAE,CAAC;IAChC,QAAQ,GAAyB,EAAE,CAAC;IACpC,WAAW,GAA2B;QAC7C,eAAe,EAAE,EAAE;QACnB,sBAAsB,EAAE,EAAE;QAC1B,WAAW,EAAE,EAAE;QACf,KAAK,EAAE,EAAE;QACT,aAAa,EAAE,EAAE;QACjB,gBAAgB,EAAE,EAAE;QACpB,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,EAAE;KAClB,CAAC;IACO,MAAM,GAA6B,EAAE,CAAC;IAC9B,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,SAAS,GAA2B,EAAE,CAAC;IACvC,KAAK,GAA2B,EAAE,CAAC;IAE5C,yCAAyC;IACzC,GAAG,CAAC,IAAY,EAAE,KAAW;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;YAC3E,IAAI,GAAG,IAAI,CAAC,CAAC,CAAyB,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,GAAG,KAAK,CAAC;IACvC,CAAC;IAED,GAAG,CAAC,MAAoB,EAAE,IAAY,EAAE,OAAe,EAAE,IAAY,EAAE,KAAc;QACnF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,4EAA4E;IAC5E,WAAW,CAAC,IAAY,EAAE,OAAe;QACvC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5B,OAAO,MAAM,IAAI,GAAG,CAAC;IACvB,CAAC;IAED,IAAI,CAAC,UAAuD,EAAE,KAAW;QACvE,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IAED,6FAA6F;IAC7F,cAAc,CAAC,CASd;QACC,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QACnE,IAAI,IAAI,CAAC,WAAW,CAAC,eAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAA2B,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC;YAAE,OAAO;QAChH,MAAM,KAAK,GAAyB;YAClC,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK;YAC5B,aAAa,EAAE,IAAI;YACnB,aAAa,EAAE,CAAC,CAAC,WAAW,KAAK,KAAK;YACtC,SAAS,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,KAAK,YAAY,EAAE,GAAG,CAAC,CAAC,UAAU,YAAY,CAAC;YAC5F,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,KAAK,gBAAgB,EAAE,GAAG,CAAC,CAAC,UAAU,gBAAgB,CAAC;SAC3F,CAAC;QACF,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM;YAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC1C,IAAI,CAAC,GAAG,CACN,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EACjC,CAAC,CAAC,IAAI,EACN,CAAC,CAAC,OAAO,EACT,GAAG,CAAC,CAAC,UAAU,sCAAsC,CAAC,CAAC,QAAQ,sHAAsH,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,yBAAyB,YAAY,KAAK,4CAA4C,EAC7R,mBAAmB,CAAC,CAAC,QAAQ,EAAE,CAChC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,QAAoD,EAAE;QAC3E,MAAM,SAAS,GAAoB,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAyB,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM;YAAE,QAAQ,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC;QACpE,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM;YAAE,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAChE,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,IAAI,IAAI,CAAC,MAAM;gBAAE,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACrG,OAAO;YACL,MAAM;YACN,SAAS;YACT,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/E,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YAC1D,GAAG,KAAK;SACT,CAAC;IACJ,CAAC;CACF;AA5FD,sCA4FC;AAED,wEAAwE;AAC3D,QAAA,WAAW,GAA2B;IACjD,MAAM,EAAE,QAAQ;IAChB,eAAe,EAAE,QAAQ;IACzB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,WAAW;IACxB,mBAAmB,EAAE,WAAW;IAChC,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,UAAU;IACpB,aAAa,EAAE,UAAU;IACzB,OAAO,EAAE,GAAG;IACZ,CAAC,EAAE,GAAG;IACN,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,YAAY;IACxB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACjB,CAAC;AAEF,wHAAwH;AACxH,SAAgB,SAAS,CAAC,GAAW;IACnC,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC/E,OAAO,mBAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAChC,CAAC;AAED,yCAAyC;AACzC,SAAgB,KAAK,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;AAClG,CAAC;AAED,MAAM,GAAG,GAAG,MAAM,CAAC;AACnB,oDAAoD;AACpD,SAAgB,cAAc,CAAC,EAAU;IACvC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;AAC7D,CAAC"}

package/dist/migrate/export/userfront-config.d.ts

@@ -0,0 +1,15 @@
+import type { TranslationResult } from '../framework/plugin';
+import { type VendorHttp } from './vendor-http';
+/**
+ * `atlas migrate userfront config` — what Userfront's admin API exposes about
+ * a tenant's configuration: its roles. Sign-in methods, forms, password and
+ * MFA rules, session lifetimes, domains and branding live only in the
+ * Userfront dashboard: the report lists each as manual with where to look.
+ * Passwords move by the `userfront` lazy-migration preset.
+ */
+export interface UserfrontConfigSnapshot {
+    tenantId: string;
+    roles: string[];
+}
+export declare function fetchUserfrontConfig(http: VendorHttp, tenantId: string): Promise<UserfrontConfigSnapshot>;
+export declare function translateUserfrontConfig(snap: UserfrontConfigSnapshot): TranslationResult;

package/dist/migrate/export/userfront-config.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchUserfrontConfig = fetchUserfrontConfig;
+exports.translateUserfrontConfig = translateUserfrontConfig;
+const record_set_1 = require("./record-set");
+const translate_kit_1 = require("./translate-kit");
+const userfront_1 = require("./userfront");
+const vendor_http_1 = require("./vendor-http");
+async function fetchUserfrontConfig(http, tenantId) {
+    const tid = (0, userfront_1.checkTenantId)(tenantId);
+    let body = null;
+    try {
+        body = (await http.get(`/tenants/${tid}/roles`)).body;
+    }
+    catch (err) {
+        if (!(err instanceof vendor_http_1.VendorApiError) || ![400, 403, 404].includes(err.status))
+            throw err;
+    }
+    return { tenantId: tid, roles: (0, record_set_1.objs)(body?.roles).map((r) => (0, record_set_1.str)(r.name)).filter((n) => !!n) };
+}
+function translateUserfrontConfig(snap) {
+    const b = new translate_kit_1.ConfigBuilder();
+    const seen = new Set();
+    for (const name of snap.roles) {
+        const key = (0, translate_kit_1.keyOf)(name);
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        b.roles[name] = key;
+        b.push('roles', { key, name, description: '', permissions: [] });
+    }
+    if (seen.size)
+        b.add('mapped', 'authorization', 'roles', `${seen.size} role(s) (tenant roles become app roles; members keep theirs with the data export).`, 'roles');
+    b.add('mapped', 'authentication', 'password sign-in', 'Userfront never returns password hashes: the userfront lazy-migration preset checks each password against Userfront on the first Atlas sign-in.', 'auth_config.strategies.password');
+    for (const [setting, where] of [
+        ['sign-in methods (password, email link, code, social, SSO)', 'Dashboard → Authentication'],
+        ['multi-factor authentication', 'Dashboard → Authentication → Multi-factor'],
+        ['session and token lifetimes', 'Dashboard → Settings → Sessions'],
+        ['social provider credentials', 'Dashboard → Authentication → Social (re-enter each client id and secret as an Atlas oauth provider)'],
+        ['domains and redirect URLs', 'Dashboard → Settings → Domains'],
+        ['forms and branding', 'Dashboard → Toolkit / Branding (use the Atlas components and theme)'],
+        ['custom emails', 'Dashboard → Emails (use the Atlas email templates)'],
+    ]) {
+        b.add('manual', 'settings not in the API', setting, `Userfront does not expose this by API; copy it from the dashboard (${where}).`);
+    }
+    b.add('differs', 'sessions', 'access and ID tokens', 'Userfront tokens carry no issuer claim, so the zero-logout bridge cannot verify them: users sign in once more after the switch.', 'migration bridge');
+    return b.result(`Userfront tenant ${snap.tenantId}`, { lazy: { preset: 'userfront', config: { tenant_id: snap.tenantId } } });
+}
+//# sourceMappingURL=userfront-config.js.map

package/dist/migrate/export/userfront-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userfront-config.js","sourceRoot":"","sources":["../../../src/migrate/export/userfront-config.ts"],"names":[],"mappings":";;AAmBA,oDASC;AAED,4DAyBC;AArDD,6CAAmD;AACnD,mDAAuD;AACvD,2CAA4C;AAC5C,+CAAgE;AAczD,KAAK,UAAU,oBAAoB,CAAC,IAAgB,EAAE,QAAgB;IAC3E,MAAM,GAAG,GAAG,IAAA,yBAAa,EAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,IAAI,GAAe,IAAI,CAAC;IAC5B,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,4BAAc,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,GAAG,CAAC;IAC3F,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,IAAA,iBAAI,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,SAAgB,wBAAwB,CAAC,IAA6B;IACpE,MAAM,CAAC,GAAG,IAAI,6BAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAA,qBAAK,EAAC,IAAI,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;QACpB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAU,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,IAAI,CAAC,IAAI;QAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,qFAAqF,EAAE,OAAO,CAAC,CAAC;IACrK,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,iJAAiJ,EAAE,iCAAiC,CAAC,CAAC;IAC5O,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI;QAC7B,CAAC,2DAA2D,EAAE,4BAA4B,CAAC;QAC3F,CAAC,6BAA6B,EAAE,2CAA2C,CAAC;QAC5E,CAAC,6BAA6B,EAAE,iCAAiC,CAAC;QAClE,CAAC,6BAA6B,EAAE,qGAAqG,CAAC;QACtI,CAAC,2BAA2B,EAAE,gCAAgC,CAAC;QAC/D,CAAC,oBAAoB,EAAE,qEAAqE,CAAC;QAC7F,CAAC,eAAe,EAAE,oDAAoD,CAAC;KAC/D,EAAE,CAAC;QACX,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,yBAAyB,EAAE,OAAO,EAAE,sEAAsE,KAAK,IAAI,CAAC,CAAC;IACvI,CAAC;IACD,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,sBAAsB,EAAE,iIAAiI,EAAE,kBAAkB,CAAC,CAAC;IAC5M,OAAO,CAAC,CAAC,MAAM,CAAC,oBAAoB,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AAChI,CAAC"}

package/dist/migrate/export/userfront.d.ts

@@ -0,0 +1,38 @@
+import type { UserRecord } from '@atlasauth/migrate';
+import { RecordSet, type Obj } from './record-set';
+import { VendorHttp } from './vendor-http';
+/**
+ * `atlas migrate export userfront` — a Userfront tenant onto the canonical
+ * bundle models, read with an admin API key (`uf_live_admin_…`) on this
+ * machine.
+ *
+ *   - users (email, username, phone, names, image, custom `data`, confirmed
+ *     flags, locked) with their roles on the tenant;
+ *   - sub-tenants → organizations, with each member's role in them;
+ *   - roles (the tenant's role list plus any a user holds).
+ *
+ * Userfront never returns password hashes, so passwords move by lazy
+ * migration: the `userfront` preset checks each password against Userfront's
+ * own sign-in on a member's first Atlas sign-in. Not exportable: second
+ * factors (re-enrol), passkeys (register again), social account ids (relink
+ * by verified email), pending invitations (create only, no listing).
+ */
+export interface UserfrontExportOptions {
+    tenantId: string;
+    /** An admin key: `uf_live_admin_…` for the live tenant, `uf_test_admin_…` for test mode. */
+    apiKey: string;
+    apiBase?: string;
+    fetchImpl?: typeof fetch;
+    sleep?: (ms: number) => Promise<void>;
+    onProgress?: (message: string) => void;
+}
+export declare function checkTenantId(tenantId: string): string;
+export declare function userfrontHttp(o: {
+    apiKey: string;
+    apiBase?: string;
+    fetchImpl?: typeof fetch;
+    sleep?: (ms: number) => Promise<void>;
+}): VendorHttp;
+export declare function exportUserfront(opts: UserfrontExportOptions): Promise<RecordSet>;
+/** One Userfront user (users/find result) → a user record. */
+export declare function mapUserfrontUser(u: Obj, tenantId: string): UserRecord | null;