@atlasauth/cli 0.12.0 → 0.13.0

package/dist/migrate/export/pocketbase.d.ts

@@ -0,0 +1,52 @@
+import { RecordSet, type Obj } from './record-set';
+/**
+ * `atlas migrate export pocketbase` — a PocketBase app's auth collections.
+ *
+ * PocketBase's REST API never returns a password hash or a token key (they
+ * are stripped from every record, superusers included), so the export reads
+ * the SQLite database: `pb_data/data.db` directly through Node's built-in
+ * `node:sqlite` (read-only; stop the server or copy the file with its -wal
+ * and -shm first), or a dump directory the owner made with `sqlite3 -json`
+ * (one `<table>.json` per table: `_collections`, each auth collection, and
+ * `_externalAuths`). Nothing connects to a running PocketBase.
+ *
+ * What moves: every auth collection's records (v0.23+ `password`, ≤0.22
+ * `passwordHash`, both Go bcrypt), email + verified, username, name, avatar
+ * (as a file URL when the PocketBase URL is given), custom fields as public
+ * metadata, and OAuth2 links from `_externalAuths`. Superusers (`_superusers`,
+ * or ≤0.22 `_admins`) stay behind unless asked for. `_mfas` and `_otps` hold
+ * one-time sign-in state, not enrolments: nothing to carry. Tokens are HS256
+ * signed with a per-record key, so the bridge asks PocketBase about them
+ * (`pocketbase` bridge preset) instead of importing sessions.
+ */
+export interface PocketBaseTables {
+    /** `_collections` rows (`id, name, type, options, fields` or ≤0.22 `schema`). */
+    collections: Obj[];
+    /** Rows by table name. */
+    tables: Map<string, Obj[]>;
+}
+export interface PocketBaseExportOptions {
+    /** Auth collections to export (default: every auth collection except `_superusers`). */
+    collections?: string[];
+    includeSuperusers?: boolean;
+    /** The public PocketBase URL, to turn avatar file names into URLs. */
+    url?: string;
+    /** Shown in the dashboard as where the data came from (a file path, never a credential). */
+    origin?: string;
+}
+export declare function exportPocketBase(db: PocketBaseTables, opts?: PocketBaseExportOptions): RecordSet;
+/** PocketBase stores `2024-01-02 03:04:05.123Z`; the bundle wants ISO-8601. */
+export declare function pbTime(v: unknown): string | undefined;
+/**
+ * A dump directory: one file per table (`_collections.json`, `users.json`,
+ * `_externalAuths.json` …) as `sqlite3 -json` writes it (a JSON array), NDJSON,
+ * or CSV with a header row.
+ */
+export declare function readPocketBaseDump(dir: string): PocketBaseTables;
+export declare function parseTable(text: string, ext: string): Obj[];
+/**
+ * `pb_data/data.db` through Node's built-in SQLite (Node 22.5+), opened
+ * read-only. Reads `_collections`, every auth collection's table and
+ * `_externalAuths` — nothing else.
+ */
+export declare function readPocketBaseDb(path: string): Promise<PocketBaseTables>;

package/dist/migrate/export/pocketbase.js

@@ -0,0 +1,243 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.exportPocketBase = exportPocketBase;
+exports.pbTime = pbTime;
+exports.readPocketBaseDump = readPocketBaseDump;
+exports.parseTable = parseTable;
+exports.readPocketBaseDb = readPocketBaseDb;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const csv_1 = require("../../import/csv");
+const record_set_1 = require("./record-set");
+/** Fields every auth record has that are not metadata. */
+const SYSTEM_FIELDS = new Set([
+    'id', 'email', 'emailVisibility', 'verified', 'password', 'passwordHash', 'tokenKey', 'username', 'name', 'avatar', 'created', 'updated',
+    'lastResetSentAt', 'lastVerificationSentAt', 'lastLoginAlertSentAt',
+]);
+function exportPocketBase(db, opts = {}) {
+    const set = new record_set_1.RecordSet();
+    const auth = db.collections.filter((c) => (0, record_set_1.str)(c.type) === 'auth');
+    const wanted = opts.collections?.length ? new Set(opts.collections) : null;
+    const chosen = auth.filter((c) => {
+        const name = (0, record_set_1.str)(c.name) ?? '';
+        if (wanted)
+            return wanted.has(name);
+        return name !== '_superusers' || opts.includeSuperusers === true;
+    });
+    if (wanted)
+        for (const name of wanted)
+            if (!auth.some((c) => (0, record_set_1.str)(c.name) === name))
+                set.warn(`"${name}" is not an auth collection in this database and was skipped.`);
+    if (!auth.length)
+        set.warn('No auth collection found in _collections: is this a PocketBase data.db (or a dump of it)?');
+    if (db.tables.has('_admins') && opts.includeSuperusers)
+        set.warn('PocketBase ≤0.22 admins (_admins) are not exported: create them again as Atlas instance admins.');
+    const userIds = new Set();
+    const multiple = chosen.length > 1;
+    for (const c of chosen) {
+        const name = (0, record_set_1.str)(c.name);
+        const collectionId = (0, record_set_1.str)(c.id) ?? name;
+        const rows = db.tables.get(name) ?? db.tables.get(name.toLowerCase()) ?? [];
+        if (!rows.length)
+            set.warn(`The auth collection "${name}" has no rows in the export (was its table dumped?).`);
+        for (const r of rows) {
+            const id = (0, record_set_1.str)(r.id);
+            if (!id)
+                continue;
+            if (userIds.has(id)) {
+                set.omit('user', 'record id already exported from another auth collection');
+                continue;
+            }
+            const user = mapRecord(r, { collection: name, collectionId, url: opts.url, tag: multiple || name !== 'users' });
+            if (!user) {
+                set.omit('user', 'record without an email or username');
+                continue;
+            }
+            userIds.add(id);
+            set.add('user', (0, record_set_1.compact)(user));
+        }
+    }
+    if (set.list('user').some((u) => !u.password))
+        set.warn('Some records have no password hash (OAuth2- or OTP-only users): they keep signing in with those methods.');
+    // OAuth2 links: v0.23+ collectionRef/recordRef, ≤0.22 collectionId/recordId.
+    for (const e of db.tables.get('_externalauths') ?? db.tables.get('_externalAuths') ?? []) {
+        const userId = (0, record_set_1.str)(e.recordRef) ?? (0, record_set_1.str)(e.recordId);
+        const provider = (0, record_set_1.str)(e.provider);
+        const providerId = (0, record_set_1.str)(e.providerId);
+        if (!userId || !provider || !providerId || !userIds.has(userId))
+            continue;
+        set.add('identity', (0, record_set_1.compact)({ id: (0, record_set_1.str)(e.id), user_id: userId, provider, provider_user_id: providerId, kind: 'oauth' }), `${provider}:${providerId}`);
+    }
+    const providers = new Set(set.list('identity').map((i) => i.provider));
+    set.manifest = { ...set.manifest, origin: opts.origin ?? 'pocketbase data.db', providers: [...providers].sort() };
+    set.warn('PocketBase auth tokens are signed per record and cannot be imported: enable the pocketbase bridge preset so signed-in users move without a new sign-in.');
+    return set;
+}
+function mapRecord(r, ctx) {
+    const email = (0, record_set_1.str)(r.email)?.toLowerCase();
+    const username = (0, record_set_1.str)(r.username);
+    if (!email && !username)
+        return null;
+    const hash = (0, record_set_1.str)(r.password) ?? (0, record_set_1.str)(r.passwordHash);
+    const avatar = (0, record_set_1.str)(r.avatar);
+    const meta = {};
+    for (const [k, v] of Object.entries(r)) {
+        if (SYSTEM_FIELDS.has(k) || v === null || v === '' || v === undefined)
+            continue;
+        meta[k] = parseJsonish(v);
+    }
+    return {
+        id: (0, record_set_1.str)(r.id),
+        emails: email ? [{ email, verified: truthy(r.verified), primary: true }] : undefined,
+        username,
+        name: (0, record_set_1.str)(r.name),
+        image_url: avatar && ctx.url ? `${ctx.url.replace(/\/+$/, '')}/api/files/${encodeURIComponent(ctx.collectionId)}/${encodeURIComponent((0, record_set_1.str)(r.id))}/${encodeURIComponent(avatar)}` : undefined,
+        password: hash && /^\$2[aby]\$\d{2}\$/.test(hash) ? { algorithm: 'auto', hash } : undefined,
+        public_metadata: Object.keys(meta).length ? meta : undefined,
+        private_metadata: ctx.tag ? { pocketbase_collection: ctx.collection } : undefined,
+        created_at: pbTime(r.created),
+    };
+}
+/** PocketBase stores `2024-01-02 03:04:05.123Z`; the bundle wants ISO-8601. */
+function pbTime(v) {
+    const s = (0, record_set_1.str)(v);
+    if (!s)
+        return undefined;
+    return /^\d{4}-\d{2}-\d{2} \d/.test(s) ? s.replace(' ', 'T') : s;
+}
+const truthy = (v) => v === true || v === 1 || v === '1' || v === 'true';
+/** JSON / multi-select / relation fields come out of SQLite as JSON text. */
+function parseJsonish(v) {
+    if (typeof v !== 'string')
+        return v;
+    const t = v.trim();
+    if ((t.startsWith('{') && t.endsWith('}')) || (t.startsWith('[') && t.endsWith(']'))) {
+        try {
+            return JSON.parse(t);
+        }
+        catch {
+            return v;
+        }
+    }
+    return v;
+}
+// ── readers ─────────────────────────────────────────────────────────────────
+function tablesFrom(byName) {
+    const collections = (byName.get('_collections') ?? []).map((c) => ({ ...c, options: parseJsonish(c.options), fields: parseJsonish(c.fields ?? c.schema) }));
+    return { collections, tables: byName };
+}
+/**
+ * A dump directory: one file per table (`_collections.json`, `users.json`,
+ * `_externalAuths.json` …) as `sqlite3 -json` writes it (a JSON array), NDJSON,
+ * or CSV with a header row.
+ */
+function readPocketBaseDump(dir) {
+    const byName = new Map();
+    for (const file of (0, node_fs_1.readdirSync)(dir).sort()) {
+        const path = (0, node_path_1.join)(dir, file);
+        const ext = (0, node_path_1.extname)(file).toLowerCase();
+        if (!(0, node_fs_1.statSync)(path).isFile() || !['.json', '.ndjson', '.jsonl', '.csv'].includes(ext))
+            continue;
+        const rows = parseTable((0, node_fs_1.readFileSync)(path, 'utf8'), ext);
+        const name = (0, node_path_1.basename)(file, (0, node_path_1.extname)(file));
+        byName.set(name, rows);
+        if (name.toLowerCase() !== name)
+            byName.set(name.toLowerCase(), rows);
+    }
+    return tablesFrom(byName);
+}
+function parseTable(text, ext) {
+    if (ext === '.csv')
+        return (0, csv_1.parseCsv)(text);
+    if (ext === '.ndjson' || ext === '.jsonl') {
+        return text
+            .split(/\r?\n/)
+            .map((l) => l.trim())
+            .filter(Boolean)
+            .map((l) => JSON.parse(l))
+            .filter(record_set_1.isObj);
+    }
+    const t = text.trim();
+    if (!t)
+        return [];
+    const parsed = JSON.parse(t);
+    if (Array.isArray(parsed))
+        return parsed.filter(record_set_1.isObj);
+    if ((0, record_set_1.isObj)(parsed) && Array.isArray(parsed.rows))
+        return parsed.rows.filter(record_set_1.isObj);
+    if ((0, record_set_1.isObj)(parsed) && Array.isArray(parsed.items))
+        return parsed.items.filter(record_set_1.isObj);
+    return [];
+}
+/**
+ * `pb_data/data.db` through Node's built-in SQLite (Node 22.5+), opened
+ * read-only. Reads `_collections`, every auth collection's table and
+ * `_externalAuths` — nothing else.
+ */
+async function readPocketBaseDb(path) {
+    const spec = 'node:sqlite';
+    let mod;
+    try {
+        mod = (await Promise.resolve(`${spec}`).then(s => __importStar(require(s))));
+    }
+    catch {
+        throw new Error('This Node.js has no built-in SQLite (node:sqlite, Node 22.5+). Dump the tables with sqlite3 -json instead and pass the folder with --set pocketbase-dump=<dir>.');
+    }
+    const db = new mod.DatabaseSync(path, { readOnly: true });
+    try {
+        const all = (sql) => db.prepare(sql).all().filter(record_set_1.isObj);
+        const has = new Set(all("SELECT name FROM sqlite_master WHERE type = 'table'").map((r) => (0, record_set_1.str)(r.name)).filter((n) => !!n));
+        if (!has.has('_collections'))
+            throw new Error(`${path} has no _collections table: it is not a PocketBase data.db.`);
+        const byName = new Map();
+        const q = (name) => `"${name.replace(/"/g, '""')}"`;
+        byName.set('_collections', all('SELECT * FROM _collections'));
+        for (const c of byName.get('_collections')) {
+            const name = (0, record_set_1.str)(c.name);
+            if (name && (0, record_set_1.str)(c.type) === 'auth' && has.has(name))
+                byName.set(name, all(`SELECT * FROM ${q(name)}`));
+        }
+        if (has.has('_externalAuths'))
+            byName.set('_externalAuths', all('SELECT * FROM _externalAuths'));
+        if (has.has('_admins'))
+            byName.set('_admins', []);
+        return tablesFrom(byName);
+    }
+    finally {
+        db.close();
+    }
+}
+//# sourceMappingURL=pocketbase.js.map

package/dist/migrate/export/pocketbase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pocketbase.js","sourceRoot":"","sources":["../../../src/migrate/export/pocketbase.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkDA,4CAmDC;AA2BD,wBAIC;AA8BD,gDAYC;AAED,gCAiBC;AAYD,4CA0BC;AAvOD,qCAA8D;AAC9D,yCAAoD;AAEpD,0CAA4C;AAC5C,6CAAwE;AAwCxE,0DAA0D;AAC1D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS;IACxI,iBAAiB,EAAE,wBAAwB,EAAE,sBAAsB;CACpE,CAAC,CAAC;AAEH,SAAgB,gBAAgB,CAAC,EAAoB,EAAE,OAAgC,EAAE;IACvF,MAAM,GAAG,GAAG,IAAI,sBAAS,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,OAAO,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI,CAAC;IACnE,CAAC,CAAC,CAAC;IACH,IAAI,MAAM;QAAE,KAAK,MAAM,IAAI,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,+DAA+D,CAAC,CAAC;IACtK,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,2FAA2F,CAAC,CAAC;IACxH,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,iBAAiB;QAAE,GAAG,CAAC,IAAI,CAAC,iGAAiG,CAAC,CAAC;IAEpK,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;QACvC,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAC5E,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,wBAAwB,IAAI,sDAAsD,CAAC,CAAC;QAC/G,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrB,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBACpB,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,yDAAyD,CAAC,CAAC;gBAC5E,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;YAChH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,qCAAqC,CAAC,CAAC;gBACxD,SAAS;YACX,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAA,oBAAO,EAAC,IAAI,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,0GAA0G,CAAC,CAAC;IAEpK,6EAA6E;IAC7E,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,CAAC;QACzF,MAAM,MAAM,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,SAAS;QAC1E,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,IAAA,oBAAO,EAAC,EAAE,EAAE,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,EAAE,OAAgB,EAAE,CAAC,EAAE,GAAG,QAAQ,IAAI,UAAU,EAAE,CAAC,CAAC;IAChK,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvE,GAAG,CAAC,QAAQ,GAAG,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,oBAAoB,EAAE,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IAClH,GAAG,CAAC,IAAI,CAAC,yJAAyJ,CAAC,CAAC;IACpK,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,CAAM,EAAE,GAA6E;IACtG,MAAM,KAAK,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAQ,EAAE,CAAC;IACrB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAChF,IAAI,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,EAAE,CAAE;QACd,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACpF,QAAQ;QACR,IAAI,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC;QACjB,SAAS,EAAE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,kBAAkB,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,EAAE,CAAE,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;QAC7L,QAAQ,EAAE,IAAI,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;QAC3F,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC5D,gBAAgB,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS;QACjF,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAgB,MAAM,CAAC,CAAU;IAC/B,MAAM,CAAC,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC;IACjB,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,OAAO,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,CAAC;AAE3F,6EAA6E;AAC7E,SAAS,YAAY,CAAC,CAAU;IAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACrF,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAY,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,+EAA+E;AAE/E,SAAS,UAAU,CAAC,MAA0B;IAC5C,MAAM,WAAW,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5J,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,IAAA,qBAAW,EAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QAChG,MAAM,IAAI,GAAG,UAAU,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,IAAA,oBAAQ,EAAC,IAAI,EAAE,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvB,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,SAAgB,UAAU,CAAC,IAAY,EAAE,GAAW;IAClD,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,IAAA,cAAQ,EAAC,IAAI,CAAU,CAAC;IACnD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAI;aACR,KAAK,CAAC,OAAO,CAAC;aACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAY,CAAC;aACpC,MAAM,CAAC,kBAAK,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAY,CAAC;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,kBAAK,CAAC,CAAC;IACvD,IAAI,IAAA,kBAAK,EAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAK,CAAC,CAAC;IAClF,IAAI,IAAA,kBAAK,EAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAK,CAAC,CAAC;IACpF,OAAO,EAAE,CAAC;AACZ,CAAC;AAOD;;;;GAIG;AACI,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,MAAM,IAAI,GAAG,aAAa,CAAC;IAC3B,IAAI,GAA8E,CAAC;IACnF,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,yBAAa,IAAI,uCAAC,CAAe,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,iKAAiK,CAAC,CAAC;IACrL,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,kBAAK,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,6DAA6D,CAAC,CAAC;QACpH,MAAM,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;QAC5D,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAC9D,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,cAAc,CAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACzB,IAAI,IAAI,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,GAAG,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACjG,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAClD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/migrate/export/project-files.d.ts

@@ -0,0 +1,15 @@
+import type { CredentialSpec, PluginContext } from '../framework/plugin';
+/**
+ * A config file the vendor keeps in the app's repository (appwrite.json,
+ * nhost/nhost.toml, pb_schema.json): the path named by the flag / env var, or
+ * the first of `candidates` that exists in the project folder. The report
+ * shows the path relative to the project.
+ */
+export declare function projectFile(p: PluginContext, spec: CredentialSpec, candidates: string[]): {
+    path: string;
+    text: string;
+} | undefined;
+/** A folder the owner named (a table dump), or the first candidate folder that exists in the project. */
+export declare function projectDir(p: PluginContext, spec: CredentialSpec, candidates?: string[]): string | undefined;
+/** `--set name=true` / an env var set to true, 1 or yes. */
+export declare function truthyCredential(p: PluginContext, spec: CredentialSpec): boolean;

package/dist/migrate/export/project-files.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.projectFile = projectFile;
+exports.projectDir = projectDir;
+exports.truthyCredential = truthyCredential;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const plugin_kit_1 = require("./plugin-kit");
+/**
+ * A config file the vendor keeps in the app's repository (appwrite.json,
+ * nhost/nhost.toml, pb_schema.json): the path named by the flag / env var, or
+ * the first of `candidates` that exists in the project folder. The report
+ * shows the path relative to the project.
+ */
+function projectFile(p, spec, candidates) {
+    const named = p.credential({ ...spec, required: false });
+    if (named)
+        return { path: named, text: (0, plugin_kit_1.localFile)(p, spec, 'text') };
+    for (const c of candidates) {
+        const full = (0, node_path_1.resolve)(p.project, c);
+        if ((0, node_fs_1.existsSync)(full) && (0, node_fs_1.statSync)(full).isFile())
+            return { path: (0, node_path_1.relative)((0, node_path_1.resolve)(p.project), full) || c, text: p.ctx.readFile(full) };
+    }
+    return undefined;
+}
+/** A folder the owner named (a table dump), or the first candidate folder that exists in the project. */
+function projectDir(p, spec, candidates = []) {
+    const named = p.credential({ ...spec, required: false });
+    if (named)
+        return (0, node_path_1.resolve)(named);
+    for (const c of candidates) {
+        const full = (0, node_path_1.join)((0, node_path_1.resolve)(p.project), c);
+        if ((0, node_fs_1.existsSync)(full) && (0, node_fs_1.statSync)(full).isDirectory())
+            return full;
+    }
+    return undefined;
+}
+/** `--set name=true` / an env var set to true, 1 or yes. */
+function truthyCredential(p, spec) {
+    const v = p.credential({ ...spec, required: false });
+    return v !== undefined && /^(1|true|yes|on)$/i.test(v.trim());
+}
+//# sourceMappingURL=project-files.js.map

package/dist/migrate/export/project-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-files.js","sourceRoot":"","sources":["../../../src/migrate/export/project-files.ts"],"names":[],"mappings":";;AAWA,kCAQC;AAGD,gCAQC;AAGD,4CAGC;AApCD,qCAA+C;AAC/C,yCAAoD;AAEpD,6CAAyC;AAEzC;;;;;GAKG;AACH,SAAgB,WAAW,CAAC,CAAgB,EAAE,IAAoB,EAAE,UAAoB;IACtF,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,IAAI,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAA,sBAAS,EAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAE,EAAE,CAAC;IACrE,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAA,mBAAO,EAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACnC,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC,IAAI,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,MAAM,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,IAAA,oBAAQ,EAAC,IAAA,mBAAO,EAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACxI,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,yGAAyG;AACzG,SAAgB,UAAU,CAAC,CAAgB,EAAE,IAAoB,EAAE,aAAuB,EAAE;IAC1F,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,IAAI,KAAK;QAAE,OAAO,IAAA,mBAAO,EAAC,KAAK,CAAC,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,IAAA,mBAAO,EAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QACzC,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC,IAAI,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,IAAI,CAAC;IACpE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4DAA4D;AAC5D,SAAgB,gBAAgB,CAAC,CAAgB,EAAE,IAAoB;IACrE,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,OAAO,CAAC,KAAK,SAAS,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC"}

package/dist/migrate/export/propelauth-config.d.ts

@@ -0,0 +1,18 @@
+import type { TranslationResult } from '../framework/plugin';
+import { type VendorHttp } from './vendor-http';
+/**
+ * `atlas migrate propelauth config` — what PropelAuth's backend API exposes
+ * about a project's configuration: the custom role mappings, and which
+ * organizations have SAML set up. Login methods, password and MFA rules,
+ * session lifetimes, branding and the hosted-page settings live only in the
+ * PropelAuth dashboard: the report lists each as manual with where to find it.
+ */
+export interface PropelauthConfigSnapshot {
+    authUrl: string;
+    /** Names of the custom role mappings (shape UNCONFIRMED: tolerated as objects or bare names). */
+    roleMappings: string[];
+    orgs: number;
+    samlOrgs: number;
+}
+export declare function fetchPropelauthConfig(http: VendorHttp, authUrl: string): Promise<PropelauthConfigSnapshot>;
+export declare function translatePropelauthConfig(snap: PropelauthConfigSnapshot): TranslationResult;

package/dist/migrate/export/propelauth-config.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.fetchPropelauthConfig = fetchPropelauthConfig;
+exports.translatePropelauthConfig = translatePropelauthConfig;
+const record_set_1 = require("./record-set");
+const translate_kit_1 = require("./translate-kit");
+const propelauth_1 = require("./propelauth");
+const vendor_http_1 = require("./vendor-http");
+async function optional(fn, fallback) {
+    try {
+        return await fn();
+    }
+    catch (err) {
+        if (err instanceof vendor_http_1.VendorApiError && [400, 403, 404, 405].includes(err.status))
+            return fallback;
+        throw err;
+    }
+}
+async function fetchPropelauthConfig(http, authUrl) {
+    const mappings = await optional(async () => (await http.get('/api/backend/v1/custom_role_mappings')).body, null);
+    const list = Array.isArray(mappings) ? mappings : Array.isArray(mappings?.custom_role_mappings) ? mappings.custom_role_mappings : [];
+    const roleMappings = list.map((m) => (typeof m === 'string' ? m : (0, record_set_1.str)(m?.custom_role_mapping_name) ?? (0, record_set_1.str)(m?.name))).filter((n) => !!n);
+    let orgs = 0;
+    let samlOrgs = 0;
+    for (let page = 0; page < 1000; page++) {
+        const body = await optional(async () => (await http.get(`/api/backend/v1/org/query?page_size=100&page_number=${page}`)).body, null);
+        const rows = (0, record_set_1.objs)(body?.orgs);
+        orgs += rows.length;
+        samlOrgs += rows.filter((o) => o.is_saml_configured === true).length;
+        if (body?.has_more_results !== true || rows.length === 0)
+            break;
+    }
+    return { authUrl: (0, propelauth_1.normalizeAuthUrl)(authUrl), roleMappings, orgs, samlOrgs };
+}
+function translatePropelauthConfig(snap) {
+    const b = new translate_kit_1.ConfigBuilder();
+    b.add('mapped', 'organizations', 'organizations and members', `${snap.orgs} organization(s) with their members, roles, permissions and pending invitations move with the data export.`, 'organizations');
+    for (const name of snap.roleMappings) {
+        b.add('manual', 'roles', `custom role mapping ${name}`, 'PropelAuth role mappings choose which role set an organization uses; Atlas roles are instance-wide, so recreate the set once and assign it in Atlas.', 'roles');
+    }
+    if (snap.samlOrgs > 0) {
+        b.add('manual', 'enterprise', `SAML (${snap.samlOrgs} organization(s))`, 'PropelAuth never returns a connection\'s IdP settings: create each SAML connection again in Atlas with the IdP\'s metadata.', 'sso_connections');
+    }
+    for (const [setting, where] of [
+        ['login methods (password, passwordless, social)', 'Dashboard → Login Methods'],
+        ['password and MFA requirements', 'Dashboard → Login Methods / Security'],
+        ['session and token lifetimes', 'Dashboard → Settings → Sessions'],
+        ['social provider credentials', 'Dashboard → Login Methods → Social (re-enter each client id and secret as an Atlas oauth provider)'],
+        ['allowed redirect URLs and domains', 'Dashboard → Frontend Integration'],
+        ['branding, hosted pages and emails', 'Dashboard → Branding / Emails (use the Atlas theme and email templates)'],
+        ['user properties and metadata schema', 'Dashboard → User Properties (carried as user metadata in the export)'],
+    ]) {
+        b.add('manual', 'settings not in the API', setting, `PropelAuth does not expose this by API; copy it from the dashboard (${where}).`);
+    }
+    b.add('differs', 'sessions', 'access tokens', 'PropelAuth signs RS256 tokens verified with a project verifier key (there is no JWKS). The propelauth bridge preset needs that key to keep sessions through the switch; new sign-ins use Atlas tokens.', 'migration bridge');
+    return b.result(`PropelAuth project ${snap.authUrl}`, { bridge: { preset: 'propelauth', vars: { auth_url: snap.authUrl } } });
+}
+//# sourceMappingURL=propelauth-config.js.map

package/dist/migrate/export/propelauth-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"propelauth-config.js","sourceRoot":"","sources":["../../../src/migrate/export/propelauth-config.ts"],"names":[],"mappings":";;AA8BA,sDAcC;AAED,8DAsBC;AAnED,6CAAmD;AACnD,mDAAgD;AAChD,6CAAgD;AAChD,+CAAgE;AAiBhE,KAAK,UAAU,QAAQ,CAAI,EAAoB,EAAE,QAAW;IAC1D,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,4BAAc,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,QAAQ,CAAC;QAChG,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,qBAAqB,CAAC,IAAgB,EAAE,OAAe;IAC3E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAU,sCAAsC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAe,CAAC,CAAC;IACrI,MAAM,IAAI,GAAc,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAE,QAAuB,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAG,QAAgB,CAAC,oBAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxL,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAG,EAAE,CAAgB,EAAE,wBAAwB,CAAC,IAAI,IAAA,gBAAG,EAAE,CAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrL,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAM,uDAAuD,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAkB,CAAC,CAAC;QACvJ,MAAM,IAAI,GAAG,IAAA,iBAAI,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC;QACpB,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;QACrE,IAAI,IAAI,EAAE,gBAAgB,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;IAClE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAA,6BAAgB,EAAC,OAAO,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC9E,CAAC;AAED,SAAgB,yBAAyB,CAAC,IAA8B;IACtE,MAAM,CAAC,GAAG,IAAI,6BAAa,EAAE,CAAC;IAC9B,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE,2BAA2B,EAAE,GAAG,IAAI,CAAC,IAAI,4GAA4G,EAAE,eAAe,CAAC,CAAC;IACzM,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,uBAAuB,IAAI,EAAE,EAAE,sJAAsJ,EAAE,OAAO,CAAC,CAAC;IAC3N,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QACtB,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,SAAS,IAAI,CAAC,QAAQ,mBAAmB,EAAE,6HAA6H,EAAE,iBAAiB,CAAC,CAAC;IAC7N,CAAC;IACD,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI;QAC7B,CAAC,gDAAgD,EAAE,2BAA2B,CAAC;QAC/E,CAAC,+BAA+B,EAAE,sCAAsC,CAAC;QACzE,CAAC,6BAA6B,EAAE,iCAAiC,CAAC;QAClE,CAAC,6BAA6B,EAAE,oGAAoG,CAAC;QACrI,CAAC,mCAAmC,EAAE,kCAAkC,CAAC;QACzE,CAAC,mCAAmC,EAAE,yEAAyE,CAAC;QAChH,CAAC,qCAAqC,EAAE,sEAAsE,CAAC;KACvG,EAAE,CAAC;QACX,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,yBAAyB,EAAE,OAAO,EAAE,uEAAuE,KAAK,IAAI,CAAC,CAAC;IACxI,CAAC;IACD,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,wMAAwM,EAAE,kBAAkB,CAAC,CAAC;IAC5Q,OAAO,CAAC,CAAC,MAAM,CAAC,sBAAsB,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;AAChI,CAAC"}

package/dist/migrate/export/propelauth-harness.test-helper.d.ts

@@ -0,0 +1,62 @@
+import type { MigrationBundleWriter, RecordIssue } from '@atlasauth/migrate';
+import type { ExportCursor, PluginContext } from '../framework/plugin';
+/**
+ * Test harness for the PropelAuth and Userfront tracks: a fake vendor API
+ * (routes are `METHOD path?query` as the exporter sends it; unrouted calls
+ * answer 404, so an exporter that calls something unexpected degrades the way
+ * it would against a vendor that lacks the endpoint), a hand-built
+ * PluginContext and a bundle writer that records every call.
+ */
+export type Route = unknown | {
+    status: number;
+    body?: unknown;
+} | ((req: {
+    url: URL;
+    body: unknown;
+    headers: Headers;
+}) => unknown);
+export interface FakeVendor {
+    fetchImpl: typeof fetch;
+    calls: Array<{
+        method: string;
+        url: string;
+        headers: Headers;
+        body: unknown;
+    }>;
+}
+export declare function fakeVendor(origin: string, routes: Record<string, Route>): FakeVendor;
+export declare const noSleep: () => Promise<undefined>;
+export interface Harness {
+    p: PluginContext;
+    said: string[];
+}
+export declare function context(opts?: {
+    values?: Record<string, unknown>;
+    env?: Record<string, string>;
+    files?: Record<string, string>;
+    fetch?: typeof fetch;
+}): Harness;
+export declare class FakeWriter {
+    described: unknown[];
+    warnings: string[];
+    omits: Array<[string, string, number]>;
+    adds: Array<{
+        model: string;
+        data: Record<string, unknown>;
+    }>;
+    issues: Record<string, RecordIssue[]>;
+    describe(fields: unknown): void;
+    warn(message: string): void;
+    omit(model: string, reason: string, count?: number): void;
+    add(model: string, data: unknown): Promise<RecordIssue[]>;
+    get writer(): MigrationBundleWriter;
+    ids(model: string): unknown[];
+    models(): string[];
+}
+export declare function resumeFrom(cursor?: ExportCursor | null): {
+    checkpoints: import("../../serialize").Json[];
+    resume: {
+        cursor: import("../../serialize").Json;
+        checkpoint: (c: ExportCursor) => undefined;
+    };
+};

package/dist/migrate/export/propelauth-harness.test-helper.js

@@ -0,0 +1,109 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FakeWriter = exports.noSleep = void 0;
+exports.fakeVendor = fakeVendor;
+exports.context = context;
+exports.resumeFrom = resumeFrom;
+const errors_1 = require("../../errors");
+const isStatus = (v) => typeof v === 'object' && v !== null && 'status' in v && typeof v.status === 'number' && Object.keys(v).every((k) => ['status', 'body'].includes(k));
+function fakeVendor(origin, routes) {
+    const calls = [];
+    const fetchImpl = (async (input, init = {}) => {
+        const url = new URL(String(input));
+        const method = (init.method ?? 'GET').toUpperCase();
+        const headers = new Headers(init.headers);
+        let body = init.body;
+        if (typeof body === 'string') {
+            try {
+                body = JSON.parse(body);
+            }
+            catch {
+                // plain text: kept as the string
+            }
+        }
+        calls.push({ method, url: url.toString(), headers, body });
+        const key = url.origin === origin ? `${method} ${url.pathname}${url.search}` : `${method} ${url.toString()}`;
+        let route = routes[key];
+        if (route === undefined)
+            route = routes[`${method} ${url.pathname}`];
+        if (route === undefined)
+            return new Response(JSON.stringify({ message: `no route for ${key}` }), { status: 404 });
+        const value = typeof route === 'function' ? route({ url, body, headers }) : route;
+        const resolved = isStatus(value) ? value : { status: 200, body: value };
+        return new Response(resolved.body === undefined ? '' : JSON.stringify(resolved.body), { status: resolved.status, headers: { 'content-type': 'application/json' } });
+    });
+    return { fetchImpl, calls };
+}
+const noSleep = async () => undefined;
+exports.noSleep = noSleep;
+function context(opts = {}) {
+    const values = opts.values ?? {};
+    const env = opts.env ?? {};
+    const files = opts.files ?? {};
+    const said = [];
+    const p = {
+        ctx: {
+            env,
+            readFile: (path) => {
+                const text = files[path];
+                if (text === undefined)
+                    throw new Error(`ENOENT: no such file, open '${path}'`);
+                return text;
+            },
+        },
+        args: { positionals: [], values },
+        project: '/project',
+        credential(spec) {
+            const name = spec.flag.replace(/^--/, '');
+            const raw = values[name];
+            const value = (typeof raw === 'string' && raw.trim() ? raw.trim() : undefined) ?? env[spec.env]?.trim();
+            if (value)
+                return value;
+            if (spec.required)
+                throw new errors_1.CliError(`${spec.label} is needed. Pass --set ${name}=<value> or set ${spec.env}.`);
+            return undefined;
+        },
+        fetch: opts.fetch ??
+            (async () => {
+                throw new Error('no vendor API in this test');
+            }),
+        say: (line) => void said.push(line),
+        dryRun: false,
+    };
+    return { p, said };
+}
+class FakeWriter {
+    described = [];
+    warnings = [];
+    omits = [];
+    adds = [];
+    issues = {};
+    describe(fields) {
+        this.described.push(fields);
+    }
+    warn(message) {
+        this.warnings.push(message);
+    }
+    omit(model, reason, count = 1) {
+        this.omits.push([model, reason, count]);
+    }
+    async add(model, data) {
+        this.adds.push({ model, data: data });
+        return this.issues[model] ?? [];
+    }
+    get writer() {
+        return this;
+    }
+    ids(model) {
+        return this.adds.filter((a) => a.model === model).map((a) => a.data.id);
+    }
+    models() {
+        return this.adds.map((a) => a.model);
+    }
+}
+exports.FakeWriter = FakeWriter;
+function resumeFrom(cursor = null) {
+    const checkpoints = [];
+    return { checkpoints, resume: { cursor, checkpoint: (c) => void checkpoints.push(c) } };
+}
+//# sourceMappingURL=propelauth-harness.test-helper.js.map

package/dist/migrate/export/propelauth-harness.test-helper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"propelauth-harness.test-helper.js","sourceRoot":"","sources":["../../../src/migrate/export/propelauth-harness.test-helper.ts"],"names":[],"mappings":";;;AAuBA,gCAwBC;AASD,0BAiCC;AAkCD,gCAGC;AA3HD,yCAAwC;AAiBxC,MAAM,QAAQ,GAAG,CAAC,CAAU,EAA2C,EAAE,CACvE,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,QAAQ,IAAI,CAAC,IAAI,OAAQ,CAAyB,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/K,SAAgB,UAAU,CAAC,MAAc,EAAE,MAA6B;IACtE,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,KAA6B,EAAE,OAAoB,EAAE,EAAE,EAAE;QACjF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,IAAI,GAAY,IAAI,CAAC,IAAI,CAAC;QAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC7G,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,GAAG,MAAM,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,gBAAgB,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAClH,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAE,KAAuE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACrJ,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACxE,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACtK,CAAC,CAAiB,CAAC;IACnB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAEM,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;AAAhC,QAAA,OAAO,WAAyB;AAO7C,SAAgB,OAAO,CAAC,OAAiI,EAAE;IACzJ,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,CAAC,GAAkB;QACvB,GAAG,EAAE;YACH,GAAG;YACH,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE;gBACzB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzB,IAAI,IAAI,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,GAAG,CAAC,CAAC;gBAChF,OAAO,IAAI,CAAC;YACd,CAAC;SACuB;QAC1B,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAA2B;QAC1D,OAAO,EAAE,UAAU;QACnB,UAAU,CAAC,IAAoB;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YACzB,MAAM,KAAK,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;YACxG,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;YACxB,IAAI,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,iBAAQ,CAAC,GAAG,IAAI,CAAC,KAAK,0BAA0B,IAAI,mBAAmB,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;YACjH,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,EACH,IAAI,CAAC,KAAK;YACT,CAAC,KAAK,IAAI,EAAE;gBACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAChD,CAAC,CAAkB;QACrB,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACnC,MAAM,EAAE,KAAK;KACd,CAAC;IACF,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;AACrB,CAAC;AAED,MAAa,UAAU;IACrB,SAAS,GAAc,EAAE,CAAC;IAC1B,QAAQ,GAAa,EAAE,CAAC;IACxB,KAAK,GAAoC,EAAE,CAAC;IAC5C,IAAI,GAA4D,EAAE,CAAC;IACnE,MAAM,GAAkC,EAAE,CAAC;IAE3C,QAAQ,CAAC,MAAe;QACtB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,OAAe;QAClB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,KAAa,EAAE,MAAc,EAAE,KAAK,GAAG,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,IAAa;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAA+B,EAAE,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAwC,CAAC;IAClD,CAAC;IACD,GAAG,CAAC,KAAa;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM;QACJ,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;CACF;AA9BD,gCA8BC;AAED,SAAgB,UAAU,CAAC,SAA8B,IAAI;IAC3D,MAAM,WAAW,GAAmB,EAAE,CAAC;IACvC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAe,EAAE,EAAE,CAAC,KAAK,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACxG,CAAC"}