@atlasauth/cli 0.12.0 → 0.13.0

package/dist/migrate/export/stytch.js

@@ -0,0 +1,510 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stytchBaseUrl = stytchBaseUrl;
+exports.stytchAuthorization = stytchAuthorization;
+exports.stytchHttp = stytchHttp;
+exports.detectStytchProduct = detectStytchProduct;
+exports.stytchSearch = stytchSearch;
+exports.exportStytch = exportStytch;
+exports.mapStytchUser = mapStytchUser;
+exports.stytchRoleKey = stytchRoleKey;
+exports.parseStytchHashes = parseStytchHashes;
+exports.stytchPasswordHash = stytchPasswordHash;
+const csv_1 = require("../../import/csv");
+const record_set_1 = require("./record-set");
+const vendor_http_1 = require("./vendor-http");
+/** The API host for a project id: live projects are on api.stytch.com, test projects on test.stytch.com. */
+function stytchBaseUrl(projectId) {
+    return projectId.startsWith('project-live-') ? 'https://api.stytch.com' : 'https://test.stytch.com';
+}
+/** HTTP Basic credentials for the project. */
+function stytchAuthorization(projectId, secret) {
+    return `Basic ${Buffer.from(`${projectId}:${secret}`).toString('base64')}`;
+}
+function stytchHttp(o) {
+    return new vendor_http_1.VendorHttp({
+        vendor: 'Stytch',
+        baseUrl: (o.baseUrl ?? stytchBaseUrl(o.projectId)).replace(/\/+$/, ''),
+        headers: { authorization: stytchAuthorization(o.projectId, o.secret) },
+        fetchImpl: o.fetchImpl,
+        sleep: o.sleep,
+    });
+}
+/** Is this a B2B project? Its organization search answers; a consumer project refuses the endpoint. */
+async function detectStytchProduct(http) {
+    try {
+        await http.post('/v1/b2b/organizations/search', { limit: 1 });
+        return 'b2b';
+    }
+    catch (err) {
+        if (err instanceof vendor_http_1.VendorApiError && [400, 401, 403, 404].includes(err.status))
+            return 'consumer';
+        throw err;
+    }
+}
+/** Stytch's cursor paging: `results_metadata.next_cursor` until it is null. */
+async function stytchSearch(http, path, body, key) {
+    const out = [];
+    let cursor;
+    for (;;) {
+        const { body: res } = await http.post(path, { ...body, limit: 1000, ...(cursor ? { cursor } : {}) });
+        const rows = (0, record_set_1.isObj)(res) ? (0, record_set_1.objs)(res[key]) : [];
+        out.push(...rows);
+        const next = (0, record_set_1.isObj)(res) && (0, record_set_1.isObj)(res.results_metadata) ? (0, record_set_1.str)(res.results_metadata.next_cursor) : undefined;
+        if (!next || next === cursor || rows.length === 0)
+            return out;
+        cursor = next;
+    }
+}
+async function exportStytch(opts) {
+    const set = new record_set_1.RecordSet();
+    const progress = opts.onProgress ?? (() => undefined);
+    const http = stytchHttp(opts);
+    const product = opts.product ?? (await detectStytchProduct(http));
+    const hashes = opts.hashesText !== undefined ? parseStytchHashes(opts.hashesText) : [];
+    if (product === 'b2b')
+        await exportB2b(set, http, hashes, progress);
+    else
+        await exportConsumer(set, http, hashes, progress);
+    if (opts.hashesText === undefined) {
+        set.warn('No password hashes: Stytch only provides them through support (support@stytch.com). Pass the file with --stytch-hashes, or turn on the stytch lazy-migration preset so passwords move on first sign-in.');
+    }
+    set.warn('Stytch does not export TOTP secrets, passkeys (WebAuthn) or crypto wallets: those users enrol again in Atlas.');
+    const providers = [...new Set(set.list('identity').map((i) => i.provider))].sort();
+    set.manifest = { origin: opts.projectId, providers, settings: { product, project_id: opts.projectId } };
+    return set;
+}
+// ── consumer ────────────────────────────────────────────────────────────────
+async function exportConsumer(set, http, hashes, progress) {
+    progress('users');
+    const rows = await stytchSearch(http, '/v1/users/search', {}, 'results');
+    const byId = new Map();
+    const byEmail = new Map();
+    const roleKeys = new Set();
+    for (const u of rows) {
+        const user = mapStytchUser(u);
+        if (!user) {
+            set.omit('user', 'no email address or phone number');
+            continue;
+        }
+        byId.set(user.id, user);
+        for (const e of user.emails ?? [])
+            byEmail.set(e.email, user);
+        set.add('user', user, user.id);
+        for (const r of user.roles ?? [])
+            roleKeys.add(r);
+        addOauth(set, user.id, (0, record_set_1.objs)(u.providers));
+        countUnexportable(set, u);
+    }
+    for (const key of roleKeys)
+        set.add('role', { key, scope: 'app' }, key);
+    attachHashes(set, hashes, (row) => {
+        const id = (0, record_set_1.str)(row.user_id) ?? (0, record_set_1.str)(row.id);
+        const email = (0, record_set_1.str)(row.email)?.toLowerCase() ?? (0, record_set_1.str)(row.email_address)?.toLowerCase();
+        return (id ? byId.get(id) : undefined) ?? (email ? byEmail.get(email) : undefined);
+    });
+}
+/** One Stytch user object → a user record; null with nothing to sign in with. */
+function mapStytchUser(u) {
+    const id = (0, record_set_1.str)(u.user_id);
+    if (!id)
+        return null;
+    const emails = (0, record_set_1.objs)(u.emails).flatMap((e, i) => {
+        const email = (0, record_set_1.str)(e.email)?.toLowerCase();
+        return email ? [{ email, verified: e.verified === true, primary: i === 0 }] : [];
+    });
+    const phones = (0, record_set_1.objs)(u.phone_numbers).flatMap((p, i) => {
+        const phone = (0, record_set_1.e164)(p.phone_number);
+        return phone ? [{ phone, verified: p.verified === true, primary: i === 0 && emails.length === 0 }] : [];
+    });
+    const name = (0, record_set_1.isObj)(u.name) ? u.name : {};
+    const first = [(0, record_set_1.str)(name.first_name), (0, record_set_1.str)(name.middle_name)].filter(Boolean).join(' ') || undefined;
+    const roles = (0, record_set_1.strs)(u.roles).length ? (0, record_set_1.strs)(u.roles) : (0, record_set_1.objs)(u.roles).map((r) => (0, record_set_1.str)(r.role_id)).filter((r) => !!r);
+    const user = (0, record_set_1.compact)({
+        id,
+        emails,
+        phones,
+        first_name: first,
+        last_name: (0, record_set_1.str)(name.last_name),
+        roles,
+        locked: u.is_locked === true ? true : undefined,
+        private_metadata: (0, record_set_1.bag)((0, record_set_1.compact)({ ...((0, record_set_1.isObj)(u.trusted_metadata) ? u.trusted_metadata : {}), stytch_external_id: (0, record_set_1.str)(u.external_id) })),
+        unsafe_metadata: (0, record_set_1.bag)(u.untrusted_metadata),
+        created_at: (0, record_set_1.str)(u.created_at),
+    });
+    return user.emails?.length || user.phones?.length ? user : null;
+}
+/** Social sign-ins: `providers` (consumer) / `oauth_registrations` (B2B). */
+function addOauth(set, userId, regs) {
+    for (const p of regs) {
+        const provider = (0, record_set_1.str)(p.provider_type)?.toLowerCase();
+        const subject = (0, record_set_1.str)(p.provider_subject);
+        if (!provider || !subject)
+            continue;
+        set.add('identity', (0, record_set_1.compact)({ user_id: userId, provider, provider_user_id: subject, kind: 'oauth', profile: (0, record_set_1.bag)((0, record_set_1.compact)({ picture: (0, record_set_1.str)(p.profile_picture_url), locale: (0, record_set_1.str)(p.locale) })) }), `${provider}:${subject}`);
+    }
+}
+function countUnexportable(set, u) {
+    const totps = (0, record_set_1.objs)(u.totps).length;
+    if (totps)
+        set.omit('mfa_factor', 'Stytch does not export TOTP secrets; re-enrol in Atlas', totps);
+    const passkeys = (0, record_set_1.objs)(u.webauthn_registrations).length + (0, record_set_1.objs)(u.biometric_registrations).length;
+    if (passkeys)
+        set.omit('passkey', 'Stytch does not export passkey public keys through the API; register again in Atlas', passkeys);
+}
+// ── B2B ─────────────────────────────────────────────────────────────────────
+/** Stytch's built-in role ids → the Atlas membership roles. */
+const BUILT_IN_ROLES = { stytch_admin: 'admin', stytch_member: 'member' };
+function stytchRoleKey(roleId) {
+    return BUILT_IN_ROLES[roleId] ?? roleId;
+}
+/** RBAC role objects (`{ role_id, description, permissions: [{ resource_id, actions }] }`) → role records. */
+function addRoles(set, roles, organizationId) {
+    for (const r of roles) {
+        const id = (0, record_set_1.str)(r.role_id);
+        if (!id || id in BUILT_IN_ROLES)
+            continue;
+        const permissions = (0, record_set_1.objs)(r.permissions).flatMap((p) => (0, record_set_1.strs)(p.actions).map((a) => `${(0, record_set_1.str)(p.resource_id) ?? '*'}:${a}`));
+        set.add('role', (0, record_set_1.compact)({ key: id, description: (0, record_set_1.str)(r.description), scope: 'organization', organization_id: organizationId, permissions }), `${organizationId ?? ''}|${id}`);
+    }
+}
+async function optional(fn, fallback) {
+    try {
+        return await fn();
+    }
+    catch (err) {
+        if (err instanceof vendor_http_1.VendorApiError && [400, 403, 404].includes(err.status))
+            return fallback;
+        throw err;
+    }
+}
+async function exportB2b(set, http, hashes, progress) {
+    progress('roles');
+    const policy = await optional(async () => (await http.get('/v1/b2b/rbac/policy')).body, null);
+    if (policy && (0, record_set_1.isObj)(policy.policy))
+        addRoles(set, (0, record_set_1.objs)(policy.policy.roles));
+    progress('organizations');
+    const orgs = await stytchSearch(http, '/v1/b2b/organizations/search', {}, 'organizations');
+    const orgDomains = new Map();
+    for (const o of orgs) {
+        const id = (0, record_set_1.str)(o.organization_id);
+        const name = (0, record_set_1.str)(o.organization_name);
+        if (!id || !name)
+            continue;
+        // Claimed (verified) domains are the ones that grant membership; allowed-but-unclaimed ones stay in the metadata.
+        const claimed = (0, record_set_1.strs)(o.claimed_email_domains).map((d) => d.toLowerCase());
+        const allowed = (0, record_set_1.strs)(o.email_allowed_domains).map((d) => d.toLowerCase());
+        orgDomains.set(id, [...new Set([...claimed, ...allowed])]);
+        set.add('organization', (0, record_set_1.compact)({
+            id,
+            name,
+            slug: (0, record_set_1.str)(o.organization_slug),
+            image_url: (0, record_set_1.str)(o.organization_logo_url),
+            domains: claimed,
+            private_metadata: (0, record_set_1.bag)((0, record_set_1.compact)({ ...((0, record_set_1.isObj)(o.trusted_metadata) ? o.trusted_metadata : {}), stytch_external_id: (0, record_set_1.str)(o.organization_external_id), stytch_mfa_policy: (0, record_set_1.str)(o.mfa_policy), stytch_allowed_auth_methods: (0, record_set_1.strs)(o.allowed_auth_methods) })),
+            created_at: (0, record_set_1.str)(o.created_at),
+        }), id);
+        addRoles(set, (0, record_set_1.objs)(o.custom_roles), id);
+        if (allowed.length > claimed.length)
+            set.warn(`Organization ${name}: ${allowed.length - claimed.length} allowed email domain(s) are not claimed (verified) in Stytch; add them in Atlas once verified.`);
+        if ((0, record_set_1.str)(o.mfa_policy) === 'REQUIRED_FOR_ALL')
+            set.warn(`Organization ${name} requires MFA for all members: set the matching MFA requirement in Atlas.`);
+        if ((0, record_set_1.isObj)(o.scim_active_connection))
+            set.warn(`Organization ${name} has an active SCIM connection: recreate it in Atlas (Stytch does not export SCIM bearer tokens).`);
+    }
+    progress('SSO connections');
+    const connectionProtocol = new Map();
+    for (const o of orgs) {
+        const orgId = (0, record_set_1.str)(o.organization_id);
+        if (!orgId)
+            continue;
+        const sso = await optional(async () => (await http.get(`/v1/b2b/sso/${encodeURIComponent(orgId)}`)).body, null);
+        if (!(0, record_set_1.isObj)(sso))
+            continue;
+        for (const c of (0, record_set_1.objs)(sso.saml_connections)) {
+            const id = (0, record_set_1.str)(c.connection_id);
+            if (!id)
+                continue;
+            connectionProtocol.set(id, 'saml');
+            const cert = (0, record_set_1.objs)(c.verification_certificates).map((x) => (0, record_set_1.str)(x.certificate))[0] ?? (0, record_set_1.str)(c.x509_certificate);
+            set.add('sso_connection', (0, record_set_1.compact)({
+                id,
+                name: (0, record_set_1.str)(c.display_name),
+                organization_id: orgId,
+                protocol: 'saml',
+                domains: orgDomains.get(orgId),
+                saml: (0, record_set_1.compact)({
+                    idp_entity_id: (0, record_set_1.str)(c.idp_entity_id),
+                    idp_sso_url: (0, record_set_1.str)(c.idp_sso_url),
+                    idp_certificate: cert,
+                    sp_entity_id: (0, record_set_1.str)(c.audience_uri),
+                    sp_acs_url: (0, record_set_1.str)(c.acs_url),
+                    attribute_mapping: (0, record_set_1.isObj)(c.attribute_mapping) ? stringMap(c.attribute_mapping) : undefined,
+                }),
+                enabled: c.status === undefined ? undefined : c.status === 'active',
+            }), id);
+        }
+        for (const c of (0, record_set_1.objs)(sso.oidc_connections)) {
+            const id = (0, record_set_1.str)(c.connection_id);
+            if (!id)
+                continue;
+            connectionProtocol.set(id, 'oidc');
+            const name = (0, record_set_1.str)(c.display_name);
+            set.add('sso_connection', (0, record_set_1.compact)({
+                id,
+                name,
+                organization_id: orgId,
+                protocol: 'oidc',
+                domains: orgDomains.get(orgId),
+                oidc: (0, record_set_1.compact)({ issuer: (0, record_set_1.str)(c.issuer), client_id: (0, record_set_1.str)(c.client_id), client_secret: (0, record_set_1.str)(c.client_secret), scopes: (0, record_set_1.strs)(c.custom_scopes) }),
+                enabled: c.status === undefined ? undefined : c.status === 'active',
+            }), id);
+            if (!(0, record_set_1.str)(c.client_secret))
+                set.warn(`OIDC connection ${name ?? id}: Stytch did not return its client secret; enter it in Atlas after the import.`);
+        }
+        const external = (0, record_set_1.objs)(sso.external_connections).length;
+        if (external)
+            set.omit('sso_connection', 'Stytch external SSO connections are managed outside Stytch; recreate them in Atlas', external);
+    }
+    progress('members');
+    const members = [];
+    for (const o of orgs) {
+        const org = (0, record_set_1.str)(o.organization_id);
+        if (!org)
+            continue;
+        for (const m of await stytchSearch(http, '/v1/b2b/organizations/members/search', { organization_ids: [org] }, 'members'))
+            members.push({ m, org });
+    }
+    // One Atlas user per email: the earliest member's id is the user id.
+    const when = (m) => Date.parse((0, record_set_1.str)(m.created_at) ?? '') || 0;
+    members.sort((a, b) => when(a.m) - when(b.m));
+    const groups = new Map();
+    for (const x of members) {
+        const status = (0, record_set_1.str)(x.m.status);
+        const email = (0, record_set_1.str)(x.m.email_address)?.toLowerCase();
+        const id = (0, record_set_1.str)(x.m.member_id);
+        if (!id || !email)
+            continue;
+        if (status === 'deleted') {
+            set.omit('user', 'deleted member');
+            continue;
+        }
+        if (status === 'invited') {
+            const role = stytchRoleKey((0, record_set_1.str)((0, record_set_1.objs)(x.m.roles)[0]?.role_id) ?? 'stytch_member');
+            set.add('invitation', (0, record_set_1.compact)({ id, organization_id: x.org, email, role, status: 'pending', created_at: (0, record_set_1.str)(x.m.created_at) }), id);
+            continue;
+        }
+        const g = groups.get(email) ?? [];
+        g.push(x);
+        groups.set(email, g);
+    }
+    const userByMember = new Map();
+    const userByEmail = new Map();
+    let merged = 0;
+    for (const [email, g] of groups) {
+        const primary = g[0];
+        const userId = (0, record_set_1.str)(primary.m.member_id);
+        const ids = g.map((x) => (0, record_set_1.str)(x.m.member_id));
+        const verified = g.some((x) => x.m.email_address_verified === true);
+        const phone = g.map((x) => (0, record_set_1.e164)(x.m.mfa_phone_number)).find((p) => p);
+        const user = (0, record_set_1.compact)({
+            id: userId,
+            emails: [{ email, verified, primary: true }],
+            name: (0, record_set_1.str)(primary.m.name),
+            locked: g.every((x) => x.m.is_locked === true) ? true : undefined,
+            private_metadata: (0, record_set_1.bag)((0, record_set_1.compact)({
+                ...((0, record_set_1.isObj)(primary.m.trusted_metadata) ? primary.m.trusted_metadata : {}),
+                stytch_member_ids: ids.length > 1 ? ids : undefined,
+                stytch_external_id: (0, record_set_1.str)(primary.m.external_id),
+                stytch_is_breakglass: g.some((x) => x.m.is_breakglass === true) ? true : undefined,
+            })),
+            unsafe_metadata: (0, record_set_1.bag)(primary.m.untrusted_metadata),
+            created_at: (0, record_set_1.str)(primary.m.created_at),
+        });
+        set.add('user', user, userId);
+        userByEmail.set(email, user);
+        for (const x of g) {
+            const mid = (0, record_set_1.str)(x.m.member_id);
+            userByMember.set(mid, user);
+            const roles = (0, record_set_1.objs)(x.m.roles).map((r) => (0, record_set_1.str)(r.role_id)).filter((r) => !!r);
+            set.add('membership', (0, record_set_1.compact)({ organization_id: x.org, user_id: userId, role: stytchRoleKey(roles[0] ?? 'stytch_member'), created_at: (0, record_set_1.str)(x.m.created_at) }), `${x.org}:${userId}`);
+            if (roles.length > 1)
+                set.warn('Some members hold several Stytch roles; Atlas seats each member with one role (the first).');
+            addOauth(set, userId, (0, record_set_1.objs)(x.m.oauth_registrations));
+            for (const s of (0, record_set_1.objs)(x.m.sso_registrations)) {
+                const conn = (0, record_set_1.str)(s.connection_id);
+                const subject = (0, record_set_1.str)(s.external_id);
+                if (!subject)
+                    continue;
+                const protocol = conn ? connectionProtocol.get(conn) : undefined;
+                if (!conn || !protocol) {
+                    set.omit('identity', 'SSO sign-ins whose connection could not be read from Stytch relink by verified email');
+                    continue;
+                }
+                set.add('identity', (0, record_set_1.compact)({ user_id: userId, provider: protocol, provider_user_id: subject, kind: protocol, sso_connection_id: conn, email, email_verified: verified }), `sso:${conn}:${subject}`);
+            }
+            if ((0, record_set_1.str)(x.m.totp_registration_id))
+                set.omit('mfa_factor', 'Stytch does not export TOTP secrets; re-enrol in Atlas');
+        }
+        if (g.length > 1)
+            merged += g.length - 1;
+        if (phone && g.some((x) => x.m.mfa_enrolled === true)) {
+            set.add('mfa_factor', { user_id: userId, type: 'phone', phone, verified: g.some((x) => x.m.mfa_phone_number_verified === true) }, `phone:${userId}`);
+        }
+    }
+    if (merged)
+        set.warn(`${merged} Stytch members share an email with a member of another organization: they became one Atlas user with a membership per organization. Only the earliest member's id maps to the user for the zero-logout bridge; the others sign in once.`);
+    attachHashes(set, hashes, (row) => {
+        const id = (0, record_set_1.str)(row.member_id) ?? (0, record_set_1.str)(row.user_id) ?? (0, record_set_1.str)(row.id);
+        const email = (0, record_set_1.str)(row.email_address)?.toLowerCase() ?? (0, record_set_1.str)(row.email)?.toLowerCase();
+        return (id ? userByMember.get(id) : undefined) ?? (email ? userByEmail.get(email) : undefined);
+    });
+}
+function stringMap(o) {
+    const out = {};
+    for (const [k, v] of Object.entries(o)) {
+        const s = (0, record_set_1.str)(v);
+        if (s)
+            out[k] = s;
+    }
+    return out;
+}
+// ── password hashes (the support export) ────────────────────────────────────
+/**
+ * Parse the password export Stytch support sends: a JSON array (or an object
+ * holding one under `users` / `members` / `results`), NDJSON, or CSV with a
+ * header row. Keys are lower-cased; a nested `scrypt_config` etc. is flattened.
+ */
+function parseStytchHashes(text) {
+    const trimmed = text.trim();
+    if (!trimmed)
+        return [];
+    let rows;
+    if (trimmed.startsWith('[') || (trimmed.startsWith('{') && !trimmed.includes('\n{'))) {
+        const parsed = JSON.parse(trimmed);
+        rows = Array.isArray(parsed) ? (0, record_set_1.objs)(parsed) : (0, record_set_1.isObj)(parsed) ? (['users', 'members', 'results', 'passwords'].map((k) => (0, record_set_1.objs)(parsed[k])).find((l) => l.length) ?? [parsed]) : [];
+    }
+    else if (trimmed.startsWith('{')) {
+        rows = trimmed
+            .split(/\r?\n/)
+            .filter((l) => l.trim())
+            .map((l) => JSON.parse(l))
+            .filter(record_set_1.isObj);
+    }
+    else {
+        rows = (0, csv_1.parseCsv)(trimmed);
+    }
+    return rows.map(flatten);
+}
+function flatten(row) {
+    const out = {};
+    for (const [k, v] of Object.entries(row)) {
+        if ((0, record_set_1.isObj)(v))
+            for (const [k2, v2] of Object.entries(v))
+                out[k2.trim().toLowerCase()] ??= v2;
+        else
+            out[k.trim().toLowerCase()] = v;
+    }
+    return out;
+}
+const num = (v) => {
+    const n = typeof v === 'number' ? v : typeof v === 'string' && v.trim() ? Number(v) : NaN;
+    return Number.isFinite(n) ? n : undefined;
+};
+/**
+ * One row of the support export → the bundle's password hash. Field names
+ * follow Stytch's own password-migration API (`hash`, `hash_type`, and the
+ * `scrypt_config` / `pbkdf_2_config` / salt fields), which is the format the
+ * export mirrors (UNCONFIRMED: Stytch support documents it per request).
+ */
+function stytchPasswordHash(row) {
+    const hash = (0, record_set_1.str)(row.hash) ?? (0, record_set_1.str)(row.password_hash) ?? (0, record_set_1.str)(row.hashed_password);
+    if (!hash)
+        return { reason: 'empty Stytch password hash' };
+    const type = ((0, record_set_1.str)(row.hash_type) ?? (0, record_set_1.str)(row.hash_algorithm) ?? (0, record_set_1.str)(row.algorithm) ?? '').toLowerCase().replace(/[-\s]/g, '_');
+    const phc = hash.startsWith('$');
+    switch (type) {
+        case '':
+            return phc ? { algorithm: 'auto', hash } : { reason: 'Stytch password hash without its hash_type' };
+        case 'bcrypt':
+            return { algorithm: 'bcrypt', hash };
+        case 'argon_2i':
+        case 'argon_2id':
+        case 'argon2i':
+        case 'argon2id':
+        case 'argon2':
+            return phc ? { algorithm: 'auto', hash } : { reason: 'Stytch Argon2 hash in the raw (non-encoded) form is not supported: ask support for the encoded form' };
+        case 'phpass':
+            return { algorithm: 'auto', hash };
+        case 'scrypt': {
+            if (phc)
+                return { algorithm: 'auto', hash };
+            const salt = (0, record_set_1.str)(row.salt);
+            const n = num(row.n_parameter) ?? num(row.n);
+            if (!salt || !n)
+                return { reason: 'Stytch scrypt hash without salt or N parameter' };
+            const keyLength = num(row.key_length);
+            return {
+                algorithm: 'scrypt',
+                hash,
+                salt,
+                params: { n, r: num(row.r_parameter) ?? num(row.r) ?? 8, p: num(row.p_parameter) ?? num(row.p) ?? 1, ...(keyLength ? { key_length: keyLength } : {}), encoding: 'base64', salt_encoding: 'base64' },
+            };
+        }
+        case 'pbkdf_2':
+        case 'pbkdf2': {
+            if (phc)
+                return { algorithm: 'auto', hash };
+            const salt = (0, record_set_1.str)(row.salt);
+            const iterations = num(row.iteration_amount) ?? num(row.iterations);
+            if (!salt || !iterations)
+                return { reason: 'Stytch PBKDF2 hash without salt or iteration count' };
+            const keyLength = num(row.key_length);
+            const digest = ((0, record_set_1.str)(row.digest) ?? ((0, record_set_1.str)(row.algorithm) && (0, record_set_1.str)(row.algorithm).toLowerCase().startsWith('sha') ? (0, record_set_1.str)(row.algorithm) : undefined) ?? 'sha256').toLowerCase();
+            return { algorithm: 'pbkdf2', hash, salt, params: { digest, iterations, ...(keyLength ? { key_length: keyLength } : {}), encoding: 'base64', salt_encoding: 'base64' } };
+        }
+        case 'md_5':
+        case 'md5':
+        case 'sha_1':
+        case 'sha1':
+        case 'sha_512':
+        case 'sha512': {
+            const base = type.replace('_', '');
+            const prepend = (0, record_set_1.str)(row.prepend_salt);
+            const append = (0, record_set_1.str)(row.append_salt);
+            if (prepend && append)
+                return { reason: `Stytch ${base} hash salted on both sides is not supported` };
+            if (!prepend && !append)
+                return { algorithm: base, hash };
+            return { algorithm: `${base}_salted`, hash, salt: (prepend ?? append), params: { salt_position: prepend ? 'prefix' : 'suffix' } };
+        }
+        default:
+            return { reason: `Stytch password hash type "${type}" is not supported` };
+    }
+}
+/** Attach each row's hash to the user `find` returns; count what could not be placed. */
+function attachHashes(set, rows, find) {
+    let unmatched = 0;
+    let attached = 0;
+    for (const row of rows) {
+        const user = find(row);
+        if (!user) {
+            unmatched++;
+            continue;
+        }
+        if (user.password)
+            continue;
+        const mapped = stytchPasswordHash(row);
+        if ('reason' in mapped)
+            set.omit('password', mapped.reason);
+        else {
+            user.password = mapped;
+            attached++;
+        }
+    }
+    if (unmatched)
+        set.warn(`${unmatched} row(s) of the Stytch password export matched no exported user and were left out.`);
+    if (rows.length && attached === 0)
+        set.warn('No password in the Stytch export could be attached to a user: check the id / email columns and the hash_type values.');
+}
+//# sourceMappingURL=stytch.js.map

package/dist/migrate/export/stytch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stytch.js","sourceRoot":"","sources":["../../../src/migrate/export/stytch.ts"],"names":[],"mappings":";;AA8CA,sCAEC;AAGD,kDAEC;AAED,gCAQC;AAGD,kDAQC;AAGD,oCAWC;AAED,oCAiBC;AAgCD,sCA2BC;AAwBD,sCAEC;AAkOD,8CAiBC;AAsBD,gDAyDC;AAjgBD,0CAA4C;AAC5C,6CAA+F;AAC/F,+CAA2D;AA0C3D,4GAA4G;AAC5G,SAAgB,aAAa,CAAC,SAAiB;IAC7C,OAAO,SAAS,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,yBAAyB,CAAC;AACtG,CAAC;AAED,8CAA8C;AAC9C,SAAgB,mBAAmB,CAAC,SAAiB,EAAE,MAAc;IACnE,OAAO,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,SAAgB,UAAU,CAAC,CAAwF;IACjH,OAAO,IAAI,wBAAU,CAAC;QACpB,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACtE,OAAO,EAAE,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE;QACtE,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC,CAAC;AACL,CAAC;AAED,uGAAuG;AAChG,KAAK,UAAU,mBAAmB,CAAC,IAAgB;IACxD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,4BAAc,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,UAAU,CAAC;QAClG,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+EAA+E;AACxE,KAAK,UAAU,YAAY,CAAC,IAAgB,EAAE,IAAY,EAAE,IAAS,EAAE,GAAW;IACvF,MAAM,GAAG,GAAU,EAAE,CAAC;IACtB,IAAI,MAA0B,CAAC;IAC/B,SAAS,CAAC;QACR,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAM,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1G,MAAM,IAAI,GAAG,IAAA,kBAAK,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAI,EAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAClB,MAAM,IAAI,GAAG,IAAA,kBAAK,EAAC,GAAG,CAAC,IAAI,IAAA,kBAAK,EAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAG,EAAC,GAAG,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3G,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC;QAC9D,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,IAAyB;IAC1D,MAAM,GAAG,GAAG,IAAI,sBAAS,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEvF,IAAI,OAAO,KAAK,KAAK;QAAE,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;;QAC/D,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IAEvD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAClC,GAAG,CAAC,IAAI,CAAC,yMAAyM,CAAC,CAAC;IACtN,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,+GAA+G,CAAC,CAAC;IAC1H,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnF,GAAG,CAAC,QAAQ,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;IACxG,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+EAA+E;AAE/E,KAAK,UAAU,cAAc,CAAC,GAAc,EAAE,IAAgB,EAAE,MAAa,EAAE,QAA6B;IAC1G,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAClD,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,IAAA,iBAAI,EAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1C,iBAAiB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC5B,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,QAAQ;QAAE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;IACxE,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;QAChC,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAA,gBAAG,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,IAAA,gBAAG,EAAC,GAAG,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC;QACrF,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iFAAiF;AACjF,SAAgB,aAAa,CAAC,CAAM;IAClC,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1B,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,MAAM,MAAM,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,KAAK,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpD,MAAM,KAAK,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC;QACnC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1G,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAA,kBAAK,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,CAAC,IAAA,gBAAG,EAAC,IAAI,CAAC,UAAU,CAAC,EAAE,IAAA,gBAAG,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;IACnG,MAAM,KAAK,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,iBAAI,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAI,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9H,MAAM,IAAI,GAAe,IAAA,oBAAO,EAAC;QAC/B,EAAE;QACF,MAAM;QACN,MAAM;QACN,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,IAAA,gBAAG,EAAC,IAAI,CAAC,SAAS,CAAC;QAC9B,KAAK;QACL,MAAM,EAAE,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC/C,gBAAgB,EAAE,IAAA,gBAAG,EAAC,IAAA,oBAAO,EAAC,EAAE,GAAG,CAAC,IAAA,kBAAK,EAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,kBAAkB,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACpI,eAAe,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,kBAAkB,CAAC;QAC1C,UAAU,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC;KAC9B,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED,6EAA6E;AAC7E,SAAS,QAAQ,CAAC,GAAc,EAAE,MAAc,EAAE,IAAW;IAC3D,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,MAAM,OAAO,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;QACxC,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO;YAAE,SAAS;QACpC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,IAAA,oBAAO,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAgB,EAAE,OAAO,EAAE,IAAA,gBAAG,EAAC,IAAA,oBAAO,EAAC,EAAE,OAAO,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC;IAClO,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAc,EAAE,CAAM;IAC/C,MAAM,KAAK,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,KAAK;QAAE,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,wDAAwD,EAAE,KAAK,CAAC,CAAC;IACnG,MAAM,QAAQ,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,MAAM,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,MAAM,CAAC;IAChG,IAAI,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,qFAAqF,EAAE,QAAQ,CAAC,CAAC;AACrI,CAAC;AAED,+EAA+E;AAE/E,+DAA+D;AAC/D,MAAM,cAAc,GAA2B,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC;AAElG,SAAgB,aAAa,CAAC,MAAc;IAC1C,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC;AAC1C,CAAC;AAED,8GAA8G;AAC9G,SAAS,QAAQ,CAAC,GAAc,EAAE,KAAY,EAAE,cAAuB;IACrE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,cAAc;YAAE,SAAS;QAC1C,MAAM,WAAW,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,iBAAI,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,WAAW,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACxH,GAAG,CAAC,GAAG,CACL,MAAM,EACN,IAAA,oBAAO,EAAC,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,cAAuB,EAAE,eAAe,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,EACnI,GAAG,cAAc,IAAI,EAAE,IAAI,EAAE,EAAE,CAChC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAI,EAAoB,EAAE,QAAW;IAC1D,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,4BAAc,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,QAAQ,CAAC;QAC3F,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAc,EAAE,IAAgB,EAAE,MAAa,EAAE,QAA6B;IACrG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAM,qBAAqB,CAAC,CAAC,CAAC,IAAI,EAAE,IAAkB,CAAC,CAAC;IACjH,IAAI,MAAM,IAAI,IAAA,kBAAK,EAAC,MAAM,CAAC,MAAM,CAAC;QAAE,QAAQ,CAAC,GAAG,EAAE,IAAA,iBAAI,EAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAE7E,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,8BAA8B,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAClC,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI;YAAE,SAAS;QAC3B,kHAAkH;QAClH,MAAM,OAAO,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC1E,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,GAAG,CAAC,GAAG,CACL,cAAc,EACd,IAAA,oBAAO,EAAC;YACN,EAAE;YACF,IAAI;YACJ,IAAI,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,iBAAiB,CAAC;YAC9B,SAAS,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,qBAAqB,CAAC;YACvC,OAAO,EAAE,OAAO;YAChB,gBAAgB,EAAE,IAAA,gBAAG,EAAC,IAAA,oBAAO,EAAC,EAAE,GAAG,CAAC,IAAA,kBAAK,EAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,kBAAkB,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,wBAAwB,CAAC,EAAE,iBAAiB,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC,EAAE,2BAA2B,EAAE,IAAA,iBAAI,EAAC,CAAC,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC;YAClP,UAAU,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC;SAC9B,CAAC,EACF,EAAE,CACH,CAAC;QACF,QAAQ,CAAC,GAAG,EAAE,IAAA,iBAAI,EAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,KAAK,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,iGAAiG,CAAC,CAAC;QACzM,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC,KAAK,kBAAkB;YAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,2EAA2E,CAAC,CAAC;QACxJ,IAAI,IAAA,kBAAK,EAAC,CAAC,CAAC,sBAAsB,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,mGAAmG,CAAC,CAAC;IACzK,CAAC;IAED,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAC5B,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAM,eAAe,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAkB,CAAC,CAAC;QACnI,IAAI,CAAC,IAAA,kBAAK,EAAC,GAAG,CAAC;YAAE,SAAS;QAC1B,KAAK,MAAM,CAAC,IAAI,IAAA,iBAAI,EAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC3C,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YAChC,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;YAC5G,GAAG,CAAC,GAAG,CACL,gBAAgB,EAChB,IAAA,oBAAO,EAAC;gBACN,EAAE;gBACF,IAAI,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,YAAY,CAAC;gBACzB,eAAe,EAAE,KAAK;gBACtB,QAAQ,EAAE,MAAe;gBACzB,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;gBAC9B,IAAI,EAAE,IAAA,oBAAO,EAAC;oBACZ,aAAa,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,aAAa,CAAC;oBACnC,WAAW,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,WAAW,CAAC;oBAC/B,eAAe,EAAE,IAAI;oBACrB,YAAY,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,YAAY,CAAC;oBACjC,UAAU,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,OAAO,CAAC;oBAC1B,iBAAiB,EAAE,IAAA,kBAAK,EAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,SAAS;iBAC3F,CAAC;gBACF,OAAO,EAAE,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ;aACpE,CAAC,EACF,EAAE,CACH,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAA,iBAAI,EAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC3C,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YAChC,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACnC,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC;YACjC,GAAG,CAAC,GAAG,CACL,gBAAgB,EAChB,IAAA,oBAAO,EAAC;gBACN,EAAE;gBACF,IAAI;gBACJ,eAAe,EAAE,KAAK;gBACtB,QAAQ,EAAE,MAAe;gBACzB,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC;gBAC9B,IAAI,EAAE,IAAA,oBAAO,EAAC,EAAE,MAAM,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,IAAA,iBAAI,EAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;gBACzI,OAAO,EAAE,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ;aACpE,CAAC,EACF,EAAE,CACH,CAAC;YACF,IAAI,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,aAAa,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,mBAAmB,IAAI,IAAI,EAAE,gFAAgF,CAAC,CAAC;QACrJ,CAAC;QACD,MAAM,QAAQ,GAAG,IAAA,iBAAI,EAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC;QACvD,IAAI,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,oFAAoF,EAAE,QAAQ,CAAC,CAAC;IAC3I,CAAC;IAED,QAAQ,CAAC,SAAS,CAAC,CAAC;IAEpB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,KAAK,MAAM,CAAC,IAAI,MAAM,YAAY,CAAC,IAAI,EAAE,sCAAsC,EAAE,EAAE,gBAAgB,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACrJ,CAAC;IAED,qEAAqE;IACrE,MAAM,IAAI,GAAG,CAAC,CAAM,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;IAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC;QACpD,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC9B,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK;YAAE,SAAS;QAC5B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;YACnC,SAAS;QACX,CAAC;QACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAA,gBAAG,EAAC,IAAA,iBAAI,EAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,eAAe,CAAC,CAAC;YAChF,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,IAAA,oBAAO,EAAC,EAAE,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAkB,EAAE,UAAU,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7I,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAClC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAsB,CAAC;IACnD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;IAClD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QACtB,MAAM,MAAM,GAAG,IAAA,gBAAG,EAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAE,CAAC;QACzC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAE,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,KAAK,IAAI,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,iBAAI,EAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,IAAI,GAAe,IAAA,oBAAO,EAAC;YAC/B,EAAE,EAAE,MAAM;YACV,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC5C,IAAI,EAAE,IAAA,gBAAG,EAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;YACzB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YACjE,gBAAgB,EAAE,IAAA,gBAAG,EACnB,IAAA,oBAAO,EAAC;gBACN,GAAG,CAAC,IAAA,kBAAK,EAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxE,iBAAiB,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;gBACnD,kBAAkB,EAAE,IAAA,gBAAG,EAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;gBAC9C,oBAAoB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;aACnF,CAAC,CACH;YACD,eAAe,EAAE,IAAA,gBAAG,EAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;YAClD,UAAU,EAAE,IAAA,gBAAG,EAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;SACtC,CAAC,CAAC;QACH,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9B,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAE,CAAC;YAChC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACzF,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,IAAA,oBAAO,EAAC,EAAE,eAAe,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,MAAM,EAAE,CAAC,CAAC;YACrL,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,4FAA4F,CAAC,CAAC;YAC7H,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,IAAA,iBAAI,EAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACrD,KAAK,MAAM,CAAC,IAAI,IAAA,iBAAI,EAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,aAAa,CAAC,CAAC;gBAClC,MAAM,OAAO,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,WAAW,CAAC,CAAC;gBACnC,IAAI,CAAC,OAAO;oBAAE,SAAS;gBACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACjE,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACvB,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,sFAAsF,CAAC,CAAC;oBAC7G,SAAS;gBACX,CAAC;gBACD,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,IAAA,oBAAO,EAAC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;YACvM,CAAC;YACD,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,wDAAwD,CAAC,CAAC;QACtH,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACzC,IAAI,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB,KAAK,IAAI,CAAC,EAAE,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;QACvJ,CAAC;IACH,CAAC;IACD,IAAI,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,0OAA0O,CAAC,CAAC;IAE1Q,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE;QAChC,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAA,gBAAG,EAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAA,gBAAG,EAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,IAAI,IAAA,gBAAG,EAAC,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;QACrF,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,CAAM;IACvB,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC;QACjB,IAAI,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+EAA+E;AAE/E;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,IAAY;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,IAAI,IAAW,CAAC;IAChB,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAC9C,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAI,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAK,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,iBAAI,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClL,CAAC;SAAM,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,GAAG,OAAO;aACX,KAAK,CAAC,OAAO,CAAC;aACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAY,CAAC;aACpC,MAAM,CAAC,kBAAK,CAAC,CAAC;IACnB,CAAC;SAAM,CAAC;QACN,IAAI,GAAG,IAAA,cAAQ,EAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,OAAO,CAAC,GAAQ;IACvB,MAAM,GAAG,GAAQ,EAAE,CAAC;IACpB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,IAAA,kBAAK,EAAC,CAAC,CAAC;YAAE,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,CAAC;;YACvF,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,CAAU,EAAsB,EAAE;IAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC1F,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,kBAAkB,CAAC,GAAQ;IACzC,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAA,gBAAG,EAAC,GAAG,CAAC,aAAa,CAAC,IAAI,IAAA,gBAAG,EAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACjF,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IAC3D,MAAM,IAAI,GAAG,CAAC,IAAA,gBAAG,EAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAA,gBAAG,EAAC,GAAG,CAAC,cAAc,CAAC,IAAI,IAAA,gBAAG,EAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC9H,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACjC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,EAAE;YACL,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;QACtG,KAAK,QAAQ;YACX,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACvC,KAAK,UAAU,CAAC;QAChB,KAAK,WAAW,CAAC;QACjB,KAAK,SAAS,CAAC;QACf,KAAK,UAAU,CAAC;QAChB,KAAK,QAAQ;YACX,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,qGAAqG,EAAE,CAAC;QAC/J,KAAK,QAAQ;YACX,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACrC,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,GAAG;gBAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;YACrF,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACtC,OAAO;gBACL,SAAS,EAAE,QAAQ;gBACnB,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE;aACpM,CAAC;QACJ,CAAC;QACD,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,GAAG;gBAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3B,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACpE,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU;gBAAE,OAAO,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC;YAClG,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,CAAC,IAAA,gBAAG,EAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAA,gBAAG,EAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAA,gBAAG,EAAC,GAAG,CAAC,SAAS,CAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAG,EAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAE,CAAC,WAAW,EAAE,CAAC;YAC5K,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,CAAC;QAC3K,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,KAAK,CAAC;QACX,KAAK,OAAO,CAAC;QACb,KAAK,MAAM,CAAC;QACZ,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACnC,MAAM,OAAO,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACpC,IAAI,OAAO,IAAI,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,UAAU,IAAI,6CAA6C,EAAE,CAAC;YACtG,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YAC1D,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,OAAO,IAAI,MAAM,CAAE,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QACrI,CAAC;QACD;YACE,OAAO,EAAE,MAAM,EAAE,8BAA8B,IAAI,oBAAoB,EAAE,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,yFAAyF;AACzF,SAAS,YAAY,CAAC,GAAc,EAAE,IAAW,EAAE,IAA0C;IAC3F,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,SAAS,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ;YAAE,SAAS;QAC5B,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,QAAQ,IAAI,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;aACvD,CAAC;YACJ,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC;YACvB,QAAQ,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IACD,IAAI,SAAS;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,SAAS,mFAAmF,CAAC,CAAC;IACzH,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ,KAAK,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,sHAAsH,CAAC,CAAC;AACtK,CAAC"}

package/dist/migrate/export/supabase-config.d.ts

@@ -0,0 +1,48 @@
+import type { TranslationResult } from '../framework/plugin';
+import { type Obj } from './record-set';
+/**
+ * `atlas migrate supabase config` — Supabase Auth settings → Atlas config.
+ *
+ * Two readers, one translation:
+ *   - the project's `supabase/config.toml` (the `[auth…]` tables), every
+ *     report line carrying file:line;
+ *   - the Management API, `GET https://api.supabase.com/v1/projects/{ref}/config/auth`
+ *     with a personal access token (the hosted project's live settings),
+ *     report lines naming the API field.
+ * The API's flat fields are folded onto the config.toml paths, so both read
+ * the same way below.
+ */
+export interface SettingValue {
+    value: unknown;
+    /** The vendor setting (config.toml path or API field). */
+    setting: string;
+    file?: string;
+    line?: number;
+}
+export interface SupabaseAuthSettings {
+    origin: string;
+    /** Values by config.toml path (`auth.email.enable_confirmations`). */
+    values: Map<string, SettingValue>;
+    /** The project ref, when known (bridge preset variable). */
+    projectRef?: string;
+}
+/**
+ * A TOML reader for config.toml's shape: `[a.b.c]` tables, `key = value` with
+ * basic / literal strings, numbers, booleans and (multi-line) arrays of
+ * scalars, `#` comments. Keys come back as dotted paths with their 1-based line.
+ */
+export declare function parseToml(text: string): Map<string, {
+    value: unknown;
+    line: number;
+}>;
+export declare function settingsFromToml(text: string, file?: string): SupabaseAuthSettings;
+export declare function fetchSupabaseAuthConfig(opts: {
+    projectRef: string;
+    accessToken: string;
+    fetchImpl?: typeof fetch;
+    apiUrl?: string;
+}): Promise<SupabaseAuthSettings>;
+export declare function settingsFromApi(api: Obj, origin: string): SupabaseAuthSettings;
+/** Go durations (`24h`, `1h30m`, `90s`) or seconds → ms. */
+export declare function durationMs(v: unknown): number | undefined;
+export declare function translateSupabaseConfig(s: SupabaseAuthSettings): TranslationResult;