@atlasauth/cli 0.11.0 → 0.13.0

package/dist/migrate/framework/plugin.d.ts

@@ -0,0 +1,167 @@
+import type { MigrationBundleWriter, MigrationSource } from '@atlasauth/migrate';
+import type { ParsedArgs } from '../../args';
+import type { RunContext } from '../../context';
+import type { Json } from '../../serialize';
+/**
+ * The TRANSLATOR PLUGIN interface behind `atlas migrate <vendor> [config|export|import|bridge]`.
+ *
+ * One plugin per vendor, registered in ./registry.ts. The framework owns the
+ * command surface, the resumable orchestrator (`atlas migrate <vendor>` with
+ * no subcommand runs every step with checkpoints), the upload/import of the
+ * bundle, the bridge settings call and the codemod hand-off; a plugin only
+ * supplies the vendor-specific parts:
+ *
+ *   config  read the vendor's configuration (its API with the owner's
+ *           credentials, an export file, or the app's config source) and
+ *           translate it into Atlas config-as-code plus a report in which
+ *           every setting is `mapped` (1:1), `differs`, or `manual`, with where
+ *           it came from (file:line or the vendor setting path).
+ *   export  read the vendor's users / orgs / … and write them through the
+ *           {@link MigrationBundleWriter} the framework hands over (sealed to
+ *           the instance's import key). Vendor credentials come from flags or
+ *           env vars ON THIS MACHINE and are never sent to Atlas.
+ *   bridge  the zero-logout bridge preset and its variables (resolved from the
+ *           translation or flags), applied with PUT /v1/migrations/{source}/bridge.
+ *   lazy    the lazy-migration preset for vendors whose hashes never leave
+ *           (applied with PUT /v1/legacy_auth_connection).
+ *   code    the `atlas migrate code --from <vendor>` codemod id, when one exists.
+ */
+export type ReportStatus = 'mapped' | 'differs' | 'manual';
+/** One line of the translation report. */
+export interface TranslationReportEntry {
+    status: ReportStatus;
+    /** The vendor area (`connections`, `tenant settings`, `plugin:organization` …). */
+    area: string;
+    /** The vendor setting path (`session_lifetime`, `password_policy.min_length`). */
+    setting: string;
+    /** Where it lands in Atlas (`auth_config.session.idleMs`, `oauth_providers google`). */
+    atlas?: string;
+    note: string;
+    /** Source location for a config read from code (file and 1-based line); absent for an API/file read. */
+    file?: string;
+    line?: number;
+}
+/** Atlas config-as-code, as `atlas config import --dir` reads it. Keys are the document types. */
+export type ConfigDocuments = Record<string, Json>;
+export interface TranslationResult {
+    /** Where the config was read from, for the report header (`auth0 tenant acme.us.auth0.com`, `src/auth.ts`). */
+    origin: string;
+    documents: ConfigDocuments;
+    report: TranslationReportEntry[];
+    /** Env vars the documents' `${NAME}` placeholders need at import time. */
+    env: Array<{
+        name: string;
+        for: string;
+    }>;
+    /** Vendor ids → Atlas ids for the data import and the codemod (provider keys, role keys). */
+    mappings: {
+        providers: Record<string, string>;
+        roles: Record<string, string>;
+    };
+    /** What the bridge step needs, when the translation learned it (preset variables, cookie names). */
+    bridge?: {
+        preset: string;
+        vars: Record<string, string>;
+    };
+    /** What the lazy-migration step needs, when the translation learned it. */
+    lazy?: {
+        preset: string;
+        config: Record<string, string>;
+    };
+}
+/**
+ * A credential an exporter needs, read from `--set <flag>=<value>` or an env
+ * var — never sent to Atlas. (Vendor flags are `--set` pairs because the CLI's
+ * option schema is strict and shared by every command.)
+ */
+export interface CredentialSpec {
+    /** The `--set` name (`auth0-domain` → `--set auth0-domain=acme.us.auth0.com`). A leading `--` is ignored. */
+    flag: string;
+    /** The env var (`AUTH0_DOMAIN`). */
+    env: string;
+    label: string;
+    required: boolean;
+    secret?: boolean;
+}
+/** Everything a plugin step gets. */
+export interface PluginContext {
+    ctx: RunContext;
+    args: ParsedArgs;
+    /** The project folder (`atlas migrate <vendor> <step> [path]`). */
+    project: string;
+    /** `--set` / env lookup for a credential spec (`--set` wins). Throws a CliError when a required one is missing. */
+    credential(spec: CredentialSpec): string | undefined;
+    /** HTTP for the VENDOR's API (injectable for tests — never real vendors in tests). */
+    fetch: typeof fetch;
+    /** Progress line (stderr in --json mode). */
+    say(line: string): void;
+    dryRun: boolean;
+}
+export interface ExportSummary {
+    counts: Record<string, number>;
+    omitted: Record<string, {
+        count: number;
+        reason: string;
+    }>;
+    warnings: string[];
+}
+/** An exporter's checkpoint, so `--resume` restarts a long export where it stopped (opaque to the framework). */
+export type ExportCursor = Json;
+export interface MigrationPlugin {
+    /** CLI spelling (`auth0`, `better-auth`). */
+    vendor: string;
+    source: MigrationSource;
+    label: string;
+    /** One-paragraph help for `atlas migrate <vendor> --help`. */
+    help: string;
+    config?: {
+        /** What `config` reads (`your Auth0 tenant via the Management API`, `your auth.ts`). */
+        reads: string;
+        credentials?: CredentialSpec[];
+        translate(p: PluginContext): Promise<TranslationResult>;
+    };
+    export?: {
+        reads: string;
+        credentials: CredentialSpec[];
+        /**
+         * Write every record through `writer` in canonical model order (the writer
+         * enforces it). `cursor` is the last checkpoint this export saved with
+         * `checkpoint` (resume), or null on a fresh run.
+         */
+        run(p: PluginContext, writer: MigrationBundleWriter, resume: {
+            cursor: ExportCursor | null;
+            checkpoint(cursor: ExportCursor): void;
+        }): Promise<void>;
+        /** Input checks before the import key is fetched or a segment is opened (throw a CliError to stop). */
+        check?(p: PluginContext): void;
+        /** What cannot be exported and the fallback, shown before the export runs. */
+        limits?: string[];
+    };
+    bridge?: {
+        /** The default preset; a translation's `bridge.preset` (e.g. Auth.js JWT vs database sessions) wins over it. */
+        preset: string;
+        /** When the vendor has several presets (hosted / self-hosted, token / cookie): the one the flags pick; `preset` otherwise. */
+        presetFor?(p: PluginContext, translation?: TranslationResult): string;
+        /** Preset variables from flags / the translation; missing ones are asked for. */
+        vars(p: PluginContext, translation?: TranslationResult): Record<string, string>;
+        /**
+         * The HS256 shared secret for presets whose tokens are signed on the
+         * owner's server (a bridge assertion from an extractor), or undefined.
+         * Sent once as `shared_secret` (write-only on the Atlas side).
+         */
+        sharedSecret?(p: PluginContext, preset: string): string | undefined;
+    };
+    lazy?: {
+        preset: string;
+        config(p: PluginContext, translation?: TranslationResult): Record<string, string>;
+        /**
+         * Only a fallback (the hashes export): the program skips the step unless
+         * the translation asked for it or settings were given.
+         */
+        optional?: boolean;
+        /** Where the vendor secret comes from (a credential spec), when the preset needs one. */
+        secret?: CredentialSpec;
+    };
+    /** The codemod vendor id (`atlas migrate code --from <id>`). */
+    codemod?: string;
+}

package/dist/migrate/framework/plugin.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=plugin.js.map

package/dist/migrate/framework/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../../src/migrate/framework/plugin.ts"],"names":[],"mappings":""}

package/dist/migrate/framework/registry.d.ts

@@ -0,0 +1,11 @@
+import type { MigrationPlugin } from './plugin';
+export declare function registerMigrationPlugin(plugin: MigrationPlugin, options?: {
+    replace?: boolean;
+}): void;
+/** Whether a plugin is registered under exactly this vendor name (no alias / source matching). */
+export declare function hasMigrationPlugin(vendor: string): boolean;
+/** The plugin for a vendor spelling (`auth0`, `aws-cognito`, `next-auth` …), or undefined. */
+export declare function migrationPlugin(vendor: string): MigrationPlugin | undefined;
+export declare function migrationPlugins(): MigrationPlugin[];
+/** Test helper: forget every registered plugin. */
+export declare function resetMigrationPlugins(): void;

package/dist/migrate/framework/registry.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerMigrationPlugin = registerMigrationPlugin;
+exports.hasMigrationPlugin = hasMigrationPlugin;
+exports.migrationPlugin = migrationPlugin;
+exports.migrationPlugins = migrationPlugins;
+exports.resetMigrationPlugins = resetMigrationPlugins;
+const migrate_1 = require("@atlasauth/migrate");
+/**
+ * The `atlas migrate <vendor>` plugin registry. A vendor track adds its plugin
+ * module under src/migrate/<vendor>/ and one line to BUILT_IN_PLUGINS in
+ * ./builtins.ts — nothing else in the framework changes.
+ */
+const plugins = new Map();
+function registerMigrationPlugin(plugin, options = {}) {
+    if (plugins.has(plugin.vendor) && !options.replace)
+        throw new Error(`atlas migrate: plugin "${plugin.vendor}" is already registered.`);
+    plugins.set(plugin.vendor, plugin);
+}
+/** Whether a plugin is registered under exactly this vendor name (no alias / source matching). */
+function hasMigrationPlugin(vendor) {
+    return plugins.has(vendor.toLowerCase());
+}
+/** The plugin for a vendor spelling (`auth0`, `aws-cognito`, `next-auth` …), or undefined. */
+function migrationPlugin(vendor) {
+    const direct = plugins.get(vendor.toLowerCase());
+    if (direct)
+        return direct;
+    const source = (0, migrate_1.sourceFromVendor)(vendor);
+    if (!source)
+        return undefined;
+    for (const p of plugins.values())
+        if (p.source === source)
+            return p;
+    return undefined;
+}
+function migrationPlugins() {
+    return [...plugins.values()].sort((a, b) => a.vendor.localeCompare(b.vendor));
+}
+/** Test helper: forget every registered plugin. */
+function resetMigrationPlugins() {
+    plugins.clear();
+}
+//# sourceMappingURL=registry.js.map

package/dist/migrate/framework/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/migrate/framework/registry.ts"],"names":[],"mappings":";;AAWA,0DAGC;AAGD,gDAEC;AAGD,0CAOC;AAED,4CAEC;AAGD,sDAEC;AAtCD,gDAAsD;AAGtD;;;;GAIG;AAEH,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;AAEnD,SAAgB,uBAAuB,CAAC,MAAuB,EAAE,UAAiC,EAAE;IAClG,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,CAAC,MAAM,0BAA0B,CAAC,CAAC;IACvI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACrC,CAAC;AAED,kGAAkG;AAClG,SAAgB,kBAAkB,CAAC,MAAc;IAC/C,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,8FAA8F;AAC9F,SAAgB,eAAe,CAAC,MAAc;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAA,0BAAgB,EAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE;QAAE,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,CAAC,CAAC;IACpE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,gBAAgB;IAC9B,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,mDAAmD;AACnD,SAAgB,qBAAqB;IACnC,OAAO,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC"}

package/dist/migrate/framework/report.d.ts

@@ -0,0 +1,17 @@
+import { type Format } from '../../serialize';
+import type { MigrationPlugin, ReportStatus, TranslationReportEntry, TranslationResult } from './plugin';
+/**
+ * Writing a plugin's translation: the config-as-code documents (the
+ * `atlas config import --dir` format) plus `<vendor>-report.md` and
+ * `<vendor>-report.json`. The JSON report holds the whole translation, so a
+ * resumed run reads it back instead of asking the vendor again.
+ */
+export declare const reportMd: (plugin: MigrationPlugin) => string;
+export declare const reportJsonName: (plugin: MigrationPlugin) => string;
+export declare function reportCounts(report: TranslationReportEntry[]): Record<ReportStatus, number>;
+export declare function renderTranslationReport(plugin: MigrationPlugin, t: TranslationResult): string;
+/** Write the documents (non-empty ones) and both reports into `dir`. Returns the file names written. */
+export declare function writePluginTranslation(plugin: MigrationPlugin, t: TranslationResult, dir: string, format: Format): string[];
+/** The translation a previous run wrote into `dir`, or undefined. */
+export declare function readPluginTranslation(plugin: MigrationPlugin, dir: string): TranslationResult | undefined;
+export declare function translationSummary(plugin: MigrationPlugin, t: TranslationResult, dir: string, written: string[]): string[];

package/dist/migrate/framework/report.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.reportJsonName = exports.reportMd = void 0;
+exports.reportCounts = reportCounts;
+exports.renderTranslationReport = renderTranslationReport;
+exports.writePluginTranslation = writePluginTranslation;
+exports.readPluginTranslation = readPluginTranslation;
+exports.translationSummary = translationSummary;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const serialize_1 = require("../../serialize");
+/**
+ * Writing a plugin's translation: the config-as-code documents (the
+ * `atlas config import --dir` format) plus `<vendor>-report.md` and
+ * `<vendor>-report.json`. The JSON report holds the whole translation, so a
+ * resumed run reads it back instead of asking the vendor again.
+ */
+const reportMd = (plugin) => `${plugin.vendor}-report.md`;
+exports.reportMd = reportMd;
+const reportJsonName = (plugin) => `${plugin.vendor}-report.json`;
+exports.reportJsonName = reportJsonName;
+const ORDER = ['manual', 'differs', 'mapped'];
+const HEADINGS = { manual: 'Needs a manual step', differs: 'Maps with a difference', mapped: 'Maps 1:1' };
+function reportCounts(report) {
+    const out = { mapped: 0, differs: 0, manual: 0 };
+    for (const e of report)
+        out[e.status] += 1;
+    return out;
+}
+const where = (e) => (e.file ? `${e.file}${e.line ? `:${e.line}` : ''}` : e.setting);
+const cell = (text) => text.replace(/\|/g, '\\|').replace(/\n/g, ' ');
+function renderTranslationReport(plugin, t) {
+    const c = reportCounts(t.report);
+    const lines = [`# ${plugin.label} → Atlas: configuration report`, '', `Read from ${t.origin}.`, '', `${c.mapped} map 1:1, ${c.differs} map with a difference, ${c.manual} need a manual step.`, ''];
+    if (t.env.length) {
+        lines.push('## Environment variables to set before applying', '');
+        for (const e of t.env)
+            lines.push(`- \`${e.name}\`: ${e.for}`);
+        lines.push('');
+    }
+    for (const status of ORDER) {
+        const entries = t.report.filter((e) => e.status === status);
+        if (!entries.length)
+            continue;
+        lines.push(`## ${HEADINGS[status]} (${entries.length})`, '', `| ${plugin.label} | Atlas | Note | Where |`, '|---|---|---|---|');
+        for (const e of entries)
+            lines.push(`| \`${cell(e.setting)}\` | ${e.atlas ? `\`${cell(e.atlas)}\`` : ''} | ${cell(e.note)} | \`${cell(where(e))}\` |`);
+        lines.push('');
+    }
+    for (const [title, map] of [['Provider ids', t.mappings.providers], ['Roles', t.mappings.roles]]) {
+        const rows = Object.entries(map);
+        if (!rows.length)
+            continue;
+        lines.push(`## ${title}`, '', `| ${plugin.label} | Atlas |`, '|---|---|');
+        for (const [from, to] of rows)
+            lines.push(`| \`${from}\` | \`${to}\` |`);
+        lines.push('');
+    }
+    return lines.join('\n');
+}
+/** Write the documents (non-empty ones) and both reports into `dir`. Returns the file names written. */
+function writePluginTranslation(plugin, t, dir, format) {
+    (0, node_fs_1.mkdirSync)(dir, { recursive: true });
+    const ext = format === 'json' ? 'json' : 'yaml';
+    const written = [];
+    for (const [type, value] of Object.entries(t.documents)) {
+        if (value === null || (Array.isArray(value) && value.length === 0))
+            continue;
+        const name = `${type}.${ext}`;
+        (0, node_fs_1.writeFileSync)((0, node_path_1.join)(dir, name), (0, serialize_1.serialize)(value, format));
+        written.push(name);
+    }
+    (0, node_fs_1.writeFileSync)((0, node_path_1.join)(dir, (0, exports.reportMd)(plugin)), renderTranslationReport(plugin, t));
+    (0, node_fs_1.writeFileSync)((0, node_path_1.join)(dir, (0, exports.reportJsonName)(plugin)), JSON.stringify({ object: 'config_translation', vendor: plugin.vendor, source: plugin.source, counts: reportCounts(t.report), translation: t }, null, 2) + '\n');
+    written.push((0, exports.reportMd)(plugin), (0, exports.reportJsonName)(plugin));
+    return written;
+}
+/** The translation a previous run wrote into `dir`, or undefined. */
+function readPluginTranslation(plugin, dir) {
+    const path = (0, node_path_1.join)(dir, (0, exports.reportJsonName)(plugin));
+    if (!(0, node_fs_1.existsSync)(path))
+        return undefined;
+    try {
+        return JSON.parse((0, node_fs_1.readFileSync)(path, 'utf8')).translation;
+    }
+    catch {
+        return undefined;
+    }
+}
+function translationSummary(plugin, t, dir, written) {
+    const c = reportCounts(t.report);
+    const out = [
+        `Read ${plugin.label} configuration from ${t.origin}.`,
+        `Wrote ${written.length - 2} config file(s) and the report to ${dir}: ${written.join(', ')}`,
+        `${c.mapped} map 1:1, ${c.differs} map with a difference, ${c.manual} need a manual step (see ${(0, node_path_1.join)(dir, (0, exports.reportMd)(plugin))}).`,
+    ];
+    if (t.env.length)
+        out.push(`Set before applying: ${t.env.map((e) => e.name).join(', ')}`);
+    for (const e of t.report.filter((x) => x.status === 'manual'))
+        out.push(`  manual  ${where(e)}  ${e.note}`);
+    return out;
+}
+//# sourceMappingURL=report.js.map

package/dist/migrate/framework/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../../src/migrate/framework/report.ts"],"names":[],"mappings":";;;AAkBA,oCAIC;AAKD,0DAuBC;AAGD,wDAcC;AAGD,sDAQC;AAED,gDAUC;AA1FD,qCAA6E;AAC7E,yCAAiC;AACjC,+CAAyD;AAGzD;;;;;GAKG;AAEI,MAAM,QAAQ,GAAG,CAAC,MAAuB,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,YAAY,CAAC;AAArE,QAAA,QAAQ,YAA6D;AAC3E,MAAM,cAAc,GAAG,CAAC,MAAuB,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,cAAc,CAAC;AAA7E,QAAA,cAAc,kBAA+D;AAE1F,MAAM,KAAK,GAAmB,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC9D,MAAM,QAAQ,GAAiC,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAExI,SAAgB,YAAY,CAAC,MAAgC;IAC3D,MAAM,GAAG,GAAiC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAC/E,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,CAAyB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAC7G,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAE9E,SAAgB,uBAAuB,CAAC,MAAuB,EAAE,CAAoB;IACnF,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,gCAAgC,EAAE,EAAE,EAAE,aAAa,CAAC,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,sBAAsB,EAAE,EAAE,CAAC,CAAC;IACpM,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,iDAAiD,EAAE,EAAE,CAAC,CAAC;QAClE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,SAAS;QAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,KAAK,MAAM,CAAC,KAAK,2BAA2B,EAAE,mBAAmB,CAAC,CAAC;QAChI,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACvJ,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAU,EAAE,CAAC;QAC1G,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,SAAS;QAC3B,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,MAAM,CAAC,KAAK,YAAY,EAAE,WAAW,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;QACzE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,wGAAwG;AACxG,SAAgB,sBAAsB,CAAC,MAAuB,EAAE,CAAoB,EAAE,GAAW,EAAE,MAAc;IAC/G,IAAA,mBAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAChD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;YAAE,SAAS;QAC7E,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;QAC9B,IAAA,uBAAa,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAA,qBAAS,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,IAAA,uBAAa,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAA,gBAAQ,EAAC,MAAM,CAAC,CAAC,EAAE,uBAAuB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAA,uBAAa,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAA,sBAAc,EAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACjN,OAAO,CAAC,IAAI,CAAC,IAAA,gBAAQ,EAAC,MAAM,CAAC,EAAE,IAAA,sBAAc,EAAC,MAAM,CAAC,CAAC,CAAC;IACvD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,qEAAqE;AACrE,SAAgB,qBAAqB,CAAC,MAAuB,EAAE,GAAW;IACxE,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAA,sBAAc,EAAC,MAAM,CAAC,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,OAAQ,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAyC,CAAC,WAAW,CAAC;IACrG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAgB,kBAAkB,CAAC,MAAuB,EAAE,CAAoB,EAAE,GAAW,EAAE,OAAiB;IAC9G,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG;QACV,QAAQ,MAAM,CAAC,KAAK,uBAAuB,CAAC,CAAC,MAAM,GAAG;QACtD,SAAS,OAAO,CAAC,MAAM,GAAG,CAAC,qCAAqC,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC5F,GAAG,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,4BAA4B,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAA,gBAAQ,EAAC,MAAM,CAAC,CAAC,IAAI;KAChI,CAAC;IACF,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1F,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5G,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/migrate/frameworks/plugins.d.ts

@@ -0,0 +1,29 @@
+import { type FrameworkExport, Tables } from '../export/frameworks/tables';
+import type { MigrationPlugin, PluginContext } from '../framework/plugin';
+/**
+ * The tables to export from: `--file` (an export script's NDJSON stream, or a
+ * single JSON / NDJSON / CSV table file) and/or `--set dump=<dir>`.
+ */
+export declare function readInput(p: PluginContext, opts?: {
+    singleFile?: (text: string, tables: Tables) => void;
+}): Tables;
+/** Write a framework export's rows through the bundle writer, in canonical order. */
+export declare function writeFrameworkExport(p: PluginContext, out: FrameworkExport, writer: Parameters<NonNullable<MigrationPlugin['export']>['run']>[1]): Promise<void>;
+/** Presets whose token is a bridge assertion signed on the owner's server (see the backend extractors). */
+export declare const ASSERTION_PRESETS: Set<string>;
+/**
+ * The bridge secret shared by the extractor on your server and Atlas:
+ * `--set bridge-secret=…` / ATLAS_BRIDGE_SECRET, else the one generated on an
+ * earlier run, else a new one — kept in atlas-migrate/<vendor>/bridge-secret
+ * (mode 0600) for your server's ATLAS_BRIDGE_SECRET.
+ */
+export declare function bridgeSecret(p: PluginContext, vendor: string, preset: string): string | undefined;
+export declare const authJsPlugin: MigrationPlugin;
+export declare const luciaPlugin: MigrationPlugin;
+/** `google=googleId,github=github_id` → { google: 'googleId', github: 'github_id' }. */
+export declare function parsePairs(text: string): Record<string, string>;
+export declare const passportPlugin: MigrationPlugin;
+export declare const ironSessionPlugin: MigrationPlugin;
+export declare const devisePlugin: MigrationPlugin;
+export declare const djangoPlugin: MigrationPlugin;
+export declare const FRAMEWORK_PLUGINS: readonly MigrationPlugin[];