@atlasauth/cli 0.23.0 → 0.25.0

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @atlasauth/cli changelog
 
+## 0.25.0 — 2026-11-03
+
+### Added
+
+- `signing_key_policy` config section: `prepublish_days` (1..90, or `null` / `0` for off) is planned, applied and exported like any other setting.
+
+## 0.24.0 — 2026-11-03
+
+### Added
+
+- `atlas.config.ts` (also `.mts`, `.mjs`, `.js`): `atlas plan` / `atlas apply` load its default export (an object, or a sync or async function returning one) the same way they read `atlas.yaml`. `defineConfig` is exported for typing. `.ts` needs Node 22.18+ / 23.6+ (built-in type stripping).
+- With no path, `atlas plan` and `atlas apply` pick up `atlas.config.ts`, `atlas.config.mts`, `atlas.config.mjs`, `atlas.config.js`, `atlas.yaml`, `atlas.yml` or `atlas.json` from the current directory before falling back to `./atlas-config`.
+
 ## 0.23.0 — 2026-11-03
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlasauth/cli",
-  "version": "0.23.0",
+  "version": "0.25.0",
   "description": "atlas — manage an Atlas instance from the terminal via the Backend API.",
   "bin": {
     "atlas": "dist/cli.js"
@@ -20,8 +20,8 @@
     "@atlasauth/backend": "0.35.0",
     "@atlasauth/emulator": "0.1.0",
     "@atlasauth/upgrade": "0.7.0",
-    "@atlasauth/migrate": "0.2.0",
-    "@atlasauth/referral-conformance": "0.2.1"
+    "@atlasauth/referral-conformance": "0.2.1",
+    "@atlasauth/migrate": "0.2.0"
   },
   "devDependencies": {
     "@types/node": "^22.9.0",

package/dist/args.d.ts

@@ -1,601 +0,0 @@
-/**
- * The single option schema for the whole CLI. parseArgs in `strict` mode rejects
- * an unknown flag for us (turned into a clean {@link CliError} below), so every
- * flag any command accepts must appear here once. Per-command validation of
- * which flags actually apply happens in the handler.
- */
-declare const OPTIONS: {
-    readonly json: {
-        readonly type: "boolean";
-    };
-    readonly profile: {
-        readonly type: "string";
-    };
-    readonly limit: {
-        readonly type: "string";
-    };
-    readonly 'starting-after': {
-        readonly type: "string";
-    };
-    readonly help: {
-        readonly type: "boolean";
-        readonly short: "h";
-    };
-    readonly version: {
-        readonly type: "boolean";
-        readonly short: "v";
-    };
-    readonly url: {
-        readonly type: "string";
-    };
-    readonly 'secret-key': {
-        readonly type: "string";
-    };
-    readonly device: {
-        readonly type: "boolean";
-    };
-    readonly resource: {
-        readonly type: "string";
-    };
-    readonly scope: {
-        readonly type: "string";
-    };
-    readonly scopes: {
-        readonly type: "string";
-    };
-    readonly owner: {
-        readonly type: "string";
-    };
-    readonly 'expires-at': {
-        readonly type: "string";
-    };
-    readonly 'allowed-ips': {
-        readonly type: "string";
-    };
-    readonly out: {
-        readonly type: "string";
-    };
-    readonly email: {
-        readonly type: "string";
-    };
-    readonly 'first-name': {
-        readonly type: "string";
-    };
-    readonly 'last-name': {
-        readonly type: "string";
-    };
-    readonly password: {
-        readonly type: "string";
-    };
-    readonly 'subject-type': {
-        readonly type: "string";
-    };
-    readonly 'subject-id': {
-        readonly type: "string";
-    };
-    readonly name: {
-        readonly type: "string";
-    };
-    readonly dir: {
-        readonly type: "string";
-    };
-    readonly format: {
-        readonly type: "string";
-    };
-    readonly 'dry-run': {
-        readonly type: "boolean";
-    };
-    readonly prune: {
-        readonly type: "boolean";
-    };
-    readonly 'force-hook': {
-        readonly type: "boolean";
-    };
-    readonly trigger: {
-        readonly type: "string";
-    };
-    readonly 'secrets-file': {
-        readonly type: "string";
-    };
-    readonly draft: {
-        readonly type: "boolean";
-    };
-    readonly page: {
-        readonly type: "string";
-    };
-    readonly promote: {
-        readonly type: "boolean";
-    };
-    readonly product: {
-        readonly type: "string";
-    };
-    readonly domain: {
-        readonly type: "string";
-    };
-    readonly 'auth-host': {
-        readonly type: "string";
-    };
-    readonly 'instance-env': {
-        readonly type: "string";
-    };
-    readonly strategies: {
-        readonly type: "string";
-    };
-    readonly 'email-from': {
-        readonly type: "string";
-    };
-    readonly 'email-provider': {
-        readonly type: "string";
-    };
-    readonly 'email-key-file': {
-        readonly type: "string";
-    };
-    readonly 'client-redirect': {
-        readonly type: "string";
-        readonly multiple: true;
-    };
-    readonly 'webhook-url': {
-        readonly type: "string";
-    };
-    readonly backchannel: {
-        readonly type: "string";
-    };
-    readonly yes: {
-        readonly type: "boolean";
-        readonly short: "y";
-    };
-    readonly force: {
-        readonly type: "boolean";
-    };
-    readonly 'rotate-secret': {
-        readonly type: "boolean";
-    };
-    readonly instance: {
-        readonly type: "string";
-    };
-    readonly 'fail-on': {
-        readonly type: "string";
-    };
-    readonly only: {
-        readonly type: "string";
-    };
-    readonly 'no-probe': {
-        readonly type: "boolean";
-    };
-    readonly shape: {
-        readonly type: "string";
-    };
-    readonly origin: {
-        readonly type: "string";
-    };
-    readonly now: {
-        readonly type: "boolean";
-    };
-    readonly overlap: {
-        readonly type: "string";
-    };
-    readonly 'print-secret': {
-        readonly type: "boolean";
-    };
-    readonly events: {
-        readonly type: "string";
-    };
-    readonly delivery: {
-        readonly type: "string";
-    };
-    readonly status: {
-        readonly type: "string";
-    };
-    readonly 'event-type': {
-        readonly type: "string";
-    };
-    readonly until: {
-        readonly type: "string";
-    };
-    readonly active: {
-        readonly type: "boolean";
-    };
-    readonly inactive: {
-        readonly type: "boolean";
-    };
-    readonly timeout: {
-        readonly type: "string";
-    };
-    readonly 'no-wait': {
-        readonly type: "boolean";
-    };
-    readonly to: {
-        readonly type: "string";
-    };
-    readonly 'forward-to': {
-        readonly type: "string";
-    };
-    readonly count: {
-        readonly type: "string";
-    };
-    readonly 'no-forward': {
-        readonly type: "boolean";
-    };
-    readonly port: {
-        readonly type: "string";
-    };
-    readonly seed: {
-        readonly type: "string";
-    };
-    readonly api: {
-        readonly type: "string";
-    };
-    readonly store: {
-        readonly type: "string";
-    };
-    readonly data: {
-        readonly type: "string";
-    };
-    readonly framework: {
-        readonly type: "string";
-    };
-    readonly manifest: {
-        readonly type: "string";
-        readonly multiple: true;
-    };
-    readonly 'no-atlas': {
-        readonly type: "boolean";
-    };
-    readonly 'exit-code': {
-        readonly type: "boolean";
-    };
-    readonly check: {
-        readonly type: "boolean";
-    };
-    readonly provider: {
-        readonly type: "string";
-    };
-    readonly program: {
-        readonly type: "string";
-    };
-    readonly 'base-url': {
-        readonly type: "string";
-    };
-    readonly 'referalli-key': {
-        readonly type: "string";
-    };
-    readonly 'referalli-key-file': {
-        readonly type: "string";
-    };
-    readonly 'referally-key': {
-        readonly type: "string";
-    };
-    readonly 'referally-key-file': {
-        readonly type: "string";
-    };
-    readonly oauth: {
-        readonly type: "boolean";
-    };
-    readonly preset: {
-        readonly type: "string";
-    };
-    readonly 'connection-id': {
-        readonly type: "string";
-    };
-    readonly protocol: {
-        readonly type: "string";
-    };
-    readonly simulate: {
-        readonly type: "boolean";
-    };
-    readonly 'auto-enroll': {
-        readonly type: "boolean";
-    };
-    readonly destination: {
-        readonly type: "string";
-    };
-    readonly 'tracking-token': {
-        readonly type: "string";
-    };
-    readonly 'link-template': {
-        readonly type: "string";
-    };
-    readonly 'no-sync': {
-        readonly type: "boolean";
-    };
-    readonly 'no-identity-backfill': {
-        readonly type: "boolean";
-    };
-    readonly 'allow-mode-mismatch': {
-        readonly type: "boolean";
-    };
-    readonly endpoint: {
-        readonly type: "string";
-    };
-    readonly 'secret-file': {
-        readonly type: "string";
-    };
-    readonly enable: {
-        readonly type: "boolean";
-    };
-    readonly since: {
-        readonly type: "string";
-    };
-    readonly map: {
-        readonly type: "string";
-    };
-    readonly 'metadata-path': {
-        readonly type: "string";
-    };
-    readonly 'own-map': {
-        readonly type: "string";
-    };
-    readonly 'own-metadata-path': {
-        readonly type: "string";
-    };
-    readonly wait: {
-        readonly type: "boolean";
-    };
-    readonly from: {
-        readonly type: "string";
-    };
-    readonly 'batch-size': {
-        readonly type: "string";
-    };
-    readonly 'state-file': {
-        readonly type: "string";
-    };
-    readonly 'hash-config': {
-        readonly type: "string";
-    };
-    readonly hashes: {
-        readonly type: "string";
-    };
-    readonly 'create-orgs': {
-        readonly type: "boolean";
-    };
-    readonly bundle: {
-        readonly type: "string";
-    };
-    readonly import: {
-        readonly type: "string";
-    };
-    readonly 'confirm-conflicts': {
-        readonly type: "boolean";
-    };
-    readonly confirm: {
-        readonly type: "string";
-    };
-    readonly options: {
-        readonly type: "string";
-    };
-    readonly entry: {
-        readonly type: "string";
-    };
-    readonly 'run-export': {
-        readonly type: "boolean";
-    };
-    readonly 'bridge-days': {
-        readonly type: "string";
-    };
-    readonly file: {
-        readonly type: "string";
-    };
-    readonly set: {
-        readonly type: "string";
-        readonly multiple: true;
-    };
-    readonly resume: {
-        readonly type: "boolean";
-    };
-    readonly skip: {
-        readonly type: "string";
-        readonly multiple: true;
-    };
-    readonly audience: {
-        readonly type: "string";
-    };
-    readonly 'events-url': {
-        readonly type: "string";
-    };
-    readonly 'backchannel-logout-url': {
-        readonly type: "string";
-    };
-    readonly 'oauth-client-id': {
-        readonly type: "string";
-    };
-    readonly trace: {
-        readonly type: "string";
-    };
-    readonly disable: {
-        readonly type: "boolean";
-    };
-    readonly 'platform-id': {
-        readonly type: "string";
-    };
-    readonly 'jwks-url': {
-        readonly type: "string";
-    };
-    readonly 'signature-header': {
-        readonly type: "string";
-    };
-    readonly 'allowed-source': {
-        readonly type: "string";
-        readonly multiple: true;
-    };
-    readonly 'token-file': {
-        readonly type: "string";
-    };
-    readonly rotate: {
-        readonly type: "boolean";
-    };
-    readonly app: {
-        readonly type: "string";
-    };
-    readonly label: {
-        readonly type: "string";
-    };
-    readonly 'password-file': {
-        readonly type: "string";
-    };
-    readonly 'two-factor-exempt': {
-        readonly type: "boolean";
-    };
-    readonly unverified: {
-        readonly type: "boolean";
-    };
-    readonly team: {
-        readonly type: "string";
-    };
-    readonly kind: {
-        readonly type: "string";
-    };
-    readonly days: {
-        readonly type: "string";
-    };
-    readonly 'any-app': {
-        readonly type: "boolean";
-    };
-    readonly 'staff-account': {
-        readonly type: "string";
-    };
-    readonly 'account-name': {
-        readonly type: "string";
-    };
-    readonly 'application-name': {
-        readonly type: "string";
-    };
-    readonly 'no-step-up': {
-        readonly type: "boolean";
-    };
-    readonly 'clerk-secret-key': {
-        readonly type: "string";
-    };
-    readonly 'clerk-publishable-key': {
-        readonly type: "string";
-    };
-    readonly 'clerk-csv': {
-        readonly type: "string";
-    };
-    readonly 'skip-api-keys': {
-        readonly type: "boolean";
-    };
-    readonly 'auth0-domain': {
-        readonly type: "string";
-    };
-    readonly 'auth0-client-id': {
-        readonly type: "string";
-    };
-    readonly 'auth0-client-secret': {
-        readonly type: "string";
-    };
-    readonly 'auth0-mgmt-client-id': {
-        readonly type: "string";
-    };
-    readonly 'auth0-mgmt-client-secret': {
-        readonly type: "string";
-    };
-    readonly 'auth0-mgmt-token': {
-        readonly type: "string";
-    };
-    readonly 'auth0-connection': {
-        readonly type: "string";
-    };
-    readonly 'auth0-users-file': {
-        readonly type: "string";
-    };
-    readonly 'auth0-hashes-file': {
-        readonly type: "string";
-    };
-    readonly 'authentication-methods': {
-        readonly type: "boolean";
-    };
-    readonly 'rp-id': {
-        readonly type: "string";
-    };
-    readonly 'okta-domain': {
-        readonly type: "string";
-    };
-    readonly 'okta-api-token': {
-        readonly type: "string";
-    };
-    readonly 'okta-auth-server': {
-        readonly type: "string";
-    };
-    readonly 'okta-client-id': {
-        readonly type: "string";
-    };
-    readonly 'okta-client-secret': {
-        readonly type: "string";
-    };
-    readonly 'groups-as': {
-        readonly type: "string";
-    };
-    readonly factors: {
-        readonly type: "boolean";
-    };
-    readonly 'kinde-domain': {
-        readonly type: "string";
-    };
-    readonly 'kinde-client-id': {
-        readonly type: "string";
-    };
-    readonly 'kinde-client-secret': {
-        readonly type: "string";
-    };
-    readonly 'kinde-export': {
-        readonly type: "string";
-    };
-    readonly 'kinde-export-key': {
-        readonly type: "string";
-    };
-    readonly 'kinde-export-iv': {
-        readonly type: "string";
-    };
-    readonly 'kinde-include-default-org': {
-        readonly type: "boolean";
-    };
-    readonly 'descope-project-id': {
-        readonly type: "string";
-    };
-    readonly 'descope-management-key': {
-        readonly type: "string";
-    };
-    readonly 'descope-base-url': {
-        readonly type: "string";
-    };
-    readonly 'descope-hashes-file': {
-        readonly type: "string";
-    };
-    readonly cursor: {
-        readonly type: "boolean";
-    };
-    readonly 'claude-code': {
-        readonly type: "boolean";
-    };
-    readonly codex: {
-        readonly type: "boolean";
-    };
-    readonly vscode: {
-        readonly type: "boolean";
-    };
-    readonly global: {
-        readonly type: "boolean";
-    };
-};
-type OptionValue<O> = O extends {
-    type: 'boolean';
-} ? boolean : O extends {
-    multiple: true;
-} ? string[] : string;
-export type Values = {
-    [K in keyof typeof OPTIONS]?: OptionValue<(typeof OPTIONS)[K]>;
-};
-export interface ParsedArgs {
-    positionals: string[];
-    values: Values;
-}
-/** Parse argv, turning parseArgs' own errors (unknown/invalid flag) into clean CliErrors. */
-export declare function parse(argv: string[]): ParsedArgs;
-/** A string flag's value, or undefined. */
-export declare function str(values: Values, key: keyof Values): string | undefined;
-/** A repeatable string flag's values (each may also be comma-separated), or []. */
-export declare function list(values: Values, key: keyof Values): string[];
-/** `--limit` as a positive integer, or undefined. Rejects garbage with a clean error. */
-export declare function limit(values: Values): number | undefined;
-export {};