@atlasauth/cli 0.23.0 → 0.25.0

package/dist/migrate/export/frameworks/app-users.js

@@ -1,161 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.exportAppUsers = exportAppUsers;
-const tables_1 = require("./tables");
-const DEFAULT_IDENTITY_COLUMNS = {
-    google: ['googleId', 'google_id'],
-    github: ['githubId', 'github_id'],
-    facebook: ['facebookId', 'facebook_id'],
-    twitter: ['twitterId', 'twitter_id'],
-    microsoft: ['microsoftId', 'microsoft_id'],
-    apple: ['appleId', 'apple_id'],
-    discord: ['discordId', 'discord_id'],
-    gitlab: ['gitlabId', 'gitlab_id'],
-    linkedin: ['linkedinId', 'linkedin_id'],
-    slack: ['slackId', 'slack_id'],
-};
-/** passlib adapted base64 (what Atlas's PHC PBKDF2 verifier reads). */
-function ab64(b) {
-    return b.toString('base64').replace(/\+/g, '.').replace(/=+$/, '');
-}
-function exportAppUsers(tables, options = {}) {
-    const out = new tables_1.FrameworkExport();
-    const now = (options.now ?? new Date()).getTime();
-    const users = tables.find(...(options.usersTable ? [options.usersTable] : ['users', 'user', 'User', 'accounts']));
-    if (!users) {
-        out.warn('No users table found (looked for users, user, accounts; pass --users-table).');
-        return out;
-    }
-    const ids = new Set();
-    const providers = new Set();
-    let plm = 0;
-    let unknown = 0;
-    for (const row of users.rows) {
-        const id = (0, tables_1.text)(options.idColumn ? (0, tables_1.col)(row, options.idColumn) : (0, tables_1.col)(row, 'id', '_id', 'uuid'));
-        if (!id) {
-            out.omit('user', 'row without an id');
-            continue;
-        }
-        const email = (0, tables_1.text)(options.emailColumn ? (0, tables_1.col)(row, options.emailColumn) : (0, tables_1.col)(row, 'email', 'emailAddress', 'email_address'))?.toLowerCase();
-        const username = (0, tables_1.text)(options.usernameColumn ? (0, tables_1.col)(row, options.usernameColumn) : (0, tables_1.col)(row, 'username', 'login'));
-        if (!email && !username) {
-            out.omit('user', 'no email or username');
-            continue;
-        }
-        let password;
-        const salt = (0, tables_1.text)((0, tables_1.col)(row, 'salt'));
-        const plmHash = (0, tables_1.text)((0, tables_1.col)(row, 'hash'));
-        if (!options.passwordColumn && salt && plmHash && /^([0-9a-f]{2})+$/i.test(plmHash)) {
-            const digestName = options.plmDigest ?? 'sha256';
-            const rounds = options.plmIterations ?? 25000;
-            password = {
-                algorithm: 'auto',
-                hash: `$pbkdf2-${digestName}$${rounds}$${ab64(Buffer.from(salt, 'utf8'))}$${ab64(Buffer.from(plmHash, 'hex'))}`,
-            };
-            plm++;
-        }
-        else {
-            const digest = (0, tables_1.text)(options.passwordColumn
-                ? (0, tables_1.col)(row, options.passwordColumn)
-                : (0, tables_1.col)(row, 'password', 'passwordHash', 'password_hash', 'hashedPassword', 'hashed_password', 'encrypted_password'));
-            if (digest) {
-                password = (0, tables_1.selfDescribingHash)(digest) ?? undefined;
-                if (!password)
-                    unknown++;
-            }
-        }
-        const verified = options.emailVerifiedColumn
-            ? (0, tables_1.bool)((0, tables_1.col)(row, options.emailVerifiedColumn))
-            : (0, tables_1.bool)((0, tables_1.col)(row, 'emailVerified', 'email_verified', 'verified', 'isVerified', 'is_verified', 'confirmed'));
-        const name = (0, tables_1.text)(options.nameColumn ? (0, tables_1.col)(row, options.nameColumn) : (0, tables_1.col)(row, 'name', 'displayName', 'display_name', 'fullName', 'full_name'));
-        ids.add(id);
-        out.add('user', {
-            id,
-            emails: email ? [{ email, verified, primary: true }] : undefined,
-            username,
-            name,
-            first_name: (0, tables_1.text)((0, tables_1.col)(row, 'firstName', 'first_name', 'givenName', 'given_name')) ?? (0, tables_1.splitName)(name).first_name,
-            last_name: (0, tables_1.text)((0, tables_1.col)(row, 'lastName', 'last_name', 'familyName', 'family_name')) ?? (0, tables_1.splitName)(name).last_name,
-            image_url: (0, tables_1.text)((0, tables_1.col)(row, 'image', 'avatar', 'avatarUrl', 'avatar_url', 'picture')),
-            password,
-            created_at: (0, tables_1.time)((0, tables_1.col)(row, 'createdAt', 'created_at', 'date_joined')),
-        });
-        const identityColumns = options.identityColumns
-            ? Object.fromEntries(Object.entries(options.identityColumns).map(([p, c]) => [p, [c]]))
-            : DEFAULT_IDENTITY_COLUMNS;
-        for (const [provider, columns] of Object.entries(identityColumns)) {
-            const subject = (0, tables_1.text)((0, tables_1.col)(row, ...columns));
-            if (!subject)
-                continue;
-            providers.add(provider);
-            out.add('identity', { user_id: id, provider, provider_user_id: subject, kind: 'oauth' });
-        }
-    }
-    if (plm)
-        out.warn(`${plm} passport-local-mongoose password(s) carried over as PBKDF2 (${options.plmDigest ?? 'sha256'}).`);
-    if (unknown)
-        out.warn(`${unknown} password value(s) are not a format Atlas verifies: those users reset their password or migrate lazily.`);
-    const identities = tables.find(...(options.identitiesTable ? [options.identitiesTable] : ['identities', 'user_identities', 'federated_credentials', 'oauth_accounts']));
-    for (const row of identities?.rows ?? []) {
-        const userId = (0, tables_1.text)((0, tables_1.col)(row, 'user_id', 'userId'));
-        const provider = (0, tables_1.text)((0, tables_1.col)(row, 'provider'))?.replace(/^https?:\/\//, '').replace(/\/.*$/, '');
-        const subject = (0, tables_1.text)((0, tables_1.col)(row, 'provider_user_id', 'providerUserId', 'subject', 'uid', 'provider_id'));
-        if (!userId || !provider || !subject || !ids.has(userId)) {
-            out.omit('identity', 'identity row without a known user, provider or subject');
-            continue;
-        }
-        providers.add(provider);
-        out.add('identity', { user_id: userId, provider, provider_user_id: subject, kind: 'oauth' });
-    }
-    out.manifest.providers = [...providers].sort();
-    if (options.sessions !== false)
-        exportExpressSessions(tables, out, ids, options, now);
-    return out;
-}
-/** connect-* session stores → session records (Passport). */
-function exportExpressSessions(tables, out, ids, options, now) {
-    const store = tables.find(...(options.sessionsTable ? [options.sessionsTable] : ['session', 'sessions', 'Sessions', 'redis_sessions']));
-    if (!store)
-        return;
-    for (const row of store.rows) {
-        // connect-redis dumps carry the key `sess:<sid>`.
-        const redisKey = (0, tables_1.text)((0, tables_1.col)(row, 'key'));
-        const sid = (0, tables_1.text)((0, tables_1.col)(row, 'sid', '_id', 'session_id', 'id')) ?? (redisKey?.startsWith('sess:') ? redisKey.slice(5) : undefined);
-        const data = (0, tables_1.json)((0, tables_1.col)(row, 'sess', 'session', 'data', 'value'));
-        if (!sid || !data) {
-            out.omit('session', 'session row without an id or session data');
-            continue;
-        }
-        const userId = sessionUser(data, options.sessionUserPath);
-        if (!userId) {
-            out.omit('session', 'anonymous session (no passport.user)');
-            continue;
-        }
-        if (!ids.has(userId)) {
-            out.omit('session', 'session of a user not in the export');
-            continue;
-        }
-        const cookie = (0, tables_1.json)(data.cookie);
-        const ttl = Number((0, tables_1.col)(row, 'ttl'));
-        const expires = (0, tables_1.timeMs)((0, tables_1.col)(row, 'expire', 'expires', 'expired', 'expires_at')) ??
-            (0, tables_1.timeMs)(cookie?.expires) ??
-            (Number.isFinite(ttl) && ttl > 0 ? now + ttl * 1000 : undefined);
-        if (expires === undefined) {
-            out.omit('session', 'browser-session cookie with no expiry in the store');
-            continue;
-        }
-        if (expires <= now) {
-            out.omit('session', 'expired');
-            continue;
-        }
-        out.add('session', { id: (0, tables_1.sha256Hex)(sid).slice(0, 32), user_id: userId, token_hash: (0, tables_1.sha256Hex)(sid), expires_at: new Date(expires).toISOString() });
-    }
-    out.manifest.settings = { ...(out.manifest.settings ?? {}), session_cookie: 'connect.sid' };
-}
-function sessionUser(data, path) {
-    const at = (p) => p.split('.').reduce((cur, k) => (cur && typeof cur === 'object' ? cur[k] : undefined), data);
-    if (path)
-        return (0, tables_1.text)(at(path));
-    return (0, tables_1.text)(at('passport.user')) ?? (0, tables_1.text)(at('passport.user.id')) ?? (0, tables_1.text)(at('passport.user._id')) ?? (0, tables_1.text)(at('userId'));
-}
-//# sourceMappingURL=app-users.js.map

package/dist/migrate/export/frameworks/app-users.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app-users.js","sourceRoot":"","sources":["../../../../src/migrate/export/frameworks/app-users.ts"],"names":[],"mappings":";;AA0EA,wCA2FC;AArKD,qCAakB;AA2ClB,MAAM,wBAAwB,GAA6B;IACzD,MAAM,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,MAAM,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,QAAQ,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;IACvC,OAAO,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;IACpC,SAAS,EAAE,CAAC,aAAa,EAAE,cAAc,CAAC;IAC1C,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;IAC9B,OAAO,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;IACpC,MAAM,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;IACjC,QAAQ,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;IACvC,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;CAC/B,CAAC;AAEF,uEAAuE;AACvE,SAAS,IAAI,CAAC,CAAS;IACrB,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,SAAgB,cAAc,CAAC,MAAc,EAAE,UAAiC,EAAE;IAChF,MAAM,GAAG,GAAG,IAAI,wBAAe,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAClH,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;QACzF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,IAAA,aAAI,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/F,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAA,aAAI,EAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QAC5I,MAAM,QAAQ,GAAG,IAAA,aAAI,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QACjH,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;YACzC,SAAS;QACX,CAAC;QACD,IAAI,QAAyD,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,IAAI,IAAI,OAAO,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACpF,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC;YACjD,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC;YAC9C,QAAQ,GAAG;gBACT,SAAS,EAAE,MAAM;gBACjB,IAAI,EAAE,WAAW,UAAU,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE;aAChH,CAAC;YACF,GAAG,EAAE,CAAC;QACR,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,IAAA,aAAI,EACjB,OAAO,CAAC,cAAc;gBACpB,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC;gBAClC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CACrH,CAAC;YACF,IAAI,MAAM,EAAE,CAAC;gBACX,QAAQ,GAAG,IAAA,2BAAkB,EAAC,MAAM,CAAC,IAAI,SAAS,CAAC;gBACnD,IAAI,CAAC,QAAQ;oBAAE,OAAO,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,mBAAmB;YAC1C,CAAC,CAAC,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;YAC7C,CAAC,CAAC,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,eAAe,EAAE,gBAAgB,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;QAC5G,MAAM,IAAI,GAAG,IAAA,aAAI,EAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;QAChJ,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACZ,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE;YACd,EAAE;YACF,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YAChE,QAAQ;YACR,IAAI;YACJ,UAAU,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,IAAI,IAAA,kBAAS,EAAC,IAAI,CAAC,CAAC,UAAU;YAC9G,SAAS,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,IAAI,IAAA,kBAAS,EAAC,IAAI,CAAC,CAAC,SAAS;YAC5G,SAAS,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;YAClF,QAAQ;YACR,UAAU,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;SACrE,CAAC,CAAC;QACH,MAAM,eAAe,GAA6B,OAAO,CAAC,eAAe;YACvE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvF,CAAC,CAAC,wBAAwB,CAAC;QAC7B,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YAClE,MAAM,OAAO,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO;gBAAE,SAAS;YACvB,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IACD,IAAI,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,gEAAgE,OAAO,CAAC,SAAS,IAAI,QAAQ,IAAI,CAAC,CAAC;IAC3H,IAAI,OAAO;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,yGAAyG,CAAC,CAAC;IAE3I,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACxK,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACzC,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC9F,MAAM,OAAO,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;QACtG,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,wDAAwD,CAAC,CAAC;YAC/E,SAAS;QACX,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAE/C,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK;QAAE,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IACtF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6DAA6D;AAC7D,SAAS,qBAAqB,CAAC,MAAc,EAAE,GAAoB,EAAE,GAAgB,EAAE,OAA8B,EAAE,GAAW;IAChI,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IACxI,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,kDAAkD;QAClD,MAAM,QAAQ,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAChI,MAAM,IAAI,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,2CAA2C,CAAC,CAAC;YACjE,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,sCAAsC,CAAC,CAAC;YAC5D,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrB,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,qCAAqC,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QACpC,MAAM,OAAO,GACX,IAAA,eAAM,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;YAC9D,IAAA,eAAM,EAAC,MAAM,EAAE,OAAO,CAAC;YACvB,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,oDAAoD,CAAC,CAAC;YAC1E,SAAS;QACX,CAAC;QACD,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACpJ,CAAC;IACD,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;AAC9F,CAAC;AAED,SAAS,WAAW,CAAC,IAAS,EAAE,IAAa;IAC3C,MAAM,EAAE,GAAG,CAAC,CAAS,EAAW,EAAE,CAChC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAU,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;IACjH,IAAI,IAAI;QAAE,OAAO,IAAA,aAAI,EAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAChC,OAAO,IAAA,aAAI,EAAC,EAAE,CAAC,eAAe,CAAC,CAAC,IAAI,IAAA,aAAI,EAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,IAAI,IAAA,aAAI,EAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,IAAI,IAAA,aAAI,EAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC1H,CAAC"}

package/dist/migrate/export/frameworks/authjs.d.ts

@@ -1,41 +0,0 @@
-import { FrameworkExport, type Tables } from './tables';
-/**
- * Auth.js / NextAuth (v4 and v5) → canonical records, from the adapter's tables.
- *
- * Every official adapter keeps the same four models under its own table and
- * column spelling — Prisma `User`/`Account`/`Session`/`Authenticator`, Drizzle
- * `user`/`account`/`session`/`authenticator`, `@auth/pg-adapter` and Kysely
- * `users`/`accounts`/`sessions`, TypeORM, Sequelize, the Supabase adapter's
- * `next_auth` schema, MongoDB's `users`/`accounts`/`sessions` collections — so
- * the mapper accepts each spelling (camelCase, snake_case, Mongo `_id`).
- *
- *   users          → user (email + emailVerified, name, image; a password column
- *                    the app's Credentials provider filled, when it is a format
- *                    Atlas verifies)
- *   accounts       → identity (oauth / oidc; tokens only with `oauthTokens`)
- *   authenticators → passkey (the WebAuthn provider; needs the RP id)
- *   sessions       → session (database strategy; sha256 of `sessionToken`)
- *
- * Not exported: `verification_token` rows (magic-link tokens live minutes), the
- * Credentials provider's `authorize` logic (it is app code: Atlas owns
- * passwords now), JWT-strategy sessions (they live only in the browser — the
- * bridge reads them with the app's AUTH_SECRET instead).
- */
-export interface AuthJsExportOptions {
-    /** The WebAuthn RP id the Passkey provider registered against (your domain). */
-    rpId?: string;
-    /** Include OAuth access / refresh tokens on identities. Default false. */
-    oauthTokens?: boolean;
-    /** Include live database sessions for the bridge. Default true. */
-    sessions?: boolean;
-    /** The users-table column holding a Credentials-provider password hash (auto-detected otherwise). */
-    passwordColumn?: string;
-    now?: Date;
-}
-export declare const AUTHJS_TABLES: {
-    readonly user: readonly ["User", "users", "user", "next_auth.users"];
-    readonly account: readonly ["Account", "accounts", "account", "next_auth.accounts"];
-    readonly session: readonly ["Session", "sessions", "session", "next_auth.sessions"];
-    readonly authenticator: readonly ["Authenticator", "authenticators", "authenticator"];
-};
-export declare function exportAuthJs(tables: Tables, options?: AuthJsExportOptions): FrameworkExport;

package/dist/migrate/export/frameworks/authjs.js

@@ -1,146 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AUTHJS_TABLES = void 0;
-exports.exportAuthJs = exportAuthJs;
-const tables_1 = require("./tables");
-exports.AUTHJS_TABLES = {
-    user: ['User', 'users', 'user', 'next_auth.users'],
-    account: ['Account', 'accounts', 'account', 'next_auth.accounts'],
-    session: ['Session', 'sessions', 'session', 'next_auth.sessions'],
-    authenticator: ['Authenticator', 'authenticators', 'authenticator'],
-};
-const PASSWORD_COLUMNS = ['password', 'passwordHash', 'password_hash', 'hashedPassword', 'hashed_password', 'encryptedPassword'];
-function exportAuthJs(tables, options = {}) {
-    const out = new tables_1.FrameworkExport();
-    const now = (options.now ?? new Date()).getTime();
-    const users = tables.find(...exports.AUTHJS_TABLES.user);
-    if (!users) {
-        out.warn(`No users table found (looked for ${exports.AUTHJS_TABLES.user.join(', ')}).`);
-        return out;
-    }
-    const userIds = new Set();
-    let passwordsCarried = 0;
-    let passwordsUnknown = 0;
-    for (const row of users.rows) {
-        const id = (0, tables_1.text)((0, tables_1.col)(row, 'id', '_id'));
-        const email = (0, tables_1.text)((0, tables_1.col)(row, 'email'));
-        if (!id) {
-            out.omit('user', 'row without an id');
-            continue;
-        }
-        const verifiedAt = (0, tables_1.col)(row, 'emailVerified', 'email_verified');
-        const name = (0, tables_1.text)((0, tables_1.col)(row, 'name'));
-        const digest = (0, tables_1.text)(options.passwordColumn ? (0, tables_1.col)(row, options.passwordColumn) : (0, tables_1.col)(row, ...PASSWORD_COLUMNS));
-        let password;
-        if (digest) {
-            const known = (0, tables_1.selfDescribingHash)(digest);
-            if (known) {
-                password = known;
-                passwordsCarried++;
-            }
-            else
-                passwordsUnknown++;
-        }
-        if (!email) {
-            out.omit('user', 'no email address (Auth.js users without one cannot sign in to Atlas by email)');
-            continue;
-        }
-        userIds.add(id);
-        out.add('user', {
-            id,
-            emails: [{ email: email.toLowerCase(), verified: Boolean(verifiedAt) && verifiedAt !== false && verifiedAt !== 'false', primary: true }],
-            name,
-            ...(0, tables_1.splitName)(name),
-            image_url: (0, tables_1.text)((0, tables_1.col)(row, 'image')),
-            password,
-            created_at: (0, tables_1.time)((0, tables_1.col)(row, 'createdAt', 'created_at')),
-        });
-    }
-    if (passwordsCarried)
-        out.warn(`${passwordsCarried} Credentials-provider password hash(es) carried over; they verify on first sign-in and are upgraded to Argon2id.`);
-    if (passwordsUnknown) {
-        out.warn(`${passwordsUnknown} password value(s) are not a hash format Atlas verifies (bcrypt, Argon2, scrypt salt:key, PBKDF2): those users reset their password, or use lazy migration against your old /api/auth/callback/credentials.`);
-    }
-    const providers = new Set();
-    for (const row of tables.rows(...exports.AUTHJS_TABLES.account)) {
-        const userId = (0, tables_1.text)((0, tables_1.col)(row, 'userId', 'user_id'));
-        const provider = (0, tables_1.text)((0, tables_1.col)(row, 'provider'));
-        const subject = (0, tables_1.text)((0, tables_1.col)(row, 'providerAccountId', 'provider_account_id'));
-        const type = (0, tables_1.text)((0, tables_1.col)(row, 'type')) ?? 'oauth';
-        if (!userId || !provider || !subject || !userIds.has(userId)) {
-            out.omit('identity', 'account row without a known user, provider or providerAccountId');
-            continue;
-        }
-        if (type === 'email' || type === 'credentials' || type === 'webauthn')
-            continue;
-        providers.add(provider);
-        const expiresAt = (0, tables_1.col)(row, 'expires_at', 'expiresAt');
-        out.add('identity', {
-            user_id: userId,
-            provider,
-            provider_user_id: subject,
-            kind: type === 'oidc' ? 'oidc' : 'oauth',
-            ...(options.oauthTokens
-                ? {
-                    access_token: (0, tables_1.text)((0, tables_1.col)(row, 'access_token', 'accessToken')),
-                    refresh_token: (0, tables_1.text)((0, tables_1.col)(row, 'refresh_token', 'refreshToken')),
-                    // Auth.js stores expires_at in epoch SECONDS.
-                    expires_at: expiresAt !== undefined ? (0, tables_1.time)(Number(expiresAt) * (Number(expiresAt) < 1e11 ? 1000 : 1)) : undefined,
-                }
-                : {}),
-            scopes: (0, tables_1.text)((0, tables_1.col)(row, 'scope'))?.split(/[\s,]+/).filter(Boolean),
-        });
-    }
-    out.manifest.providers = [...providers].sort();
-    const authenticators = tables.rows(...exports.AUTHJS_TABLES.authenticator);
-    if (authenticators.length && !options.rpId) {
-        out.omit('passkey', 'no RP id given (--rp-id): a passkey only works on the domain it was registered for', authenticators.length);
-    }
-    else {
-        for (const row of authenticators) {
-            const userId = (0, tables_1.text)((0, tables_1.col)(row, 'userId', 'user_id'));
-            const credentialId = (0, tables_1.base64url)((0, tables_1.col)(row, 'credentialID', 'credential_id', 'credentialId'));
-            const publicKey = (0, tables_1.base64url)((0, tables_1.col)(row, 'credentialPublicKey', 'credential_public_key'));
-            if (!userId || !userIds.has(userId) || !credentialId || !publicKey) {
-                out.omit('passkey', 'authenticator row without a known user, credential id or public key');
-                continue;
-            }
-            const transports = (0, tables_1.text)((0, tables_1.col)(row, 'transports'));
-            out.add('passkey', {
-                user_id: userId,
-                credential_id: credentialId,
-                public_key: publicKey,
-                sign_count: Number((0, tables_1.col)(row, 'counter') ?? 0) || 0,
-                rp_id: options.rpId,
-                transports: transports ? transports.split(/[\s,]+/).filter(Boolean) : undefined,
-                backed_up: (0, tables_1.bool)((0, tables_1.col)(row, 'credentialBackedUp', 'credential_backed_up')),
-            });
-        }
-        if (options.rpId)
-            out.manifest.rpId = options.rpId;
-    }
-    if (options.sessions !== false) {
-        for (const row of tables.rows(...exports.AUTHJS_TABLES.session)) {
-            const token = (0, tables_1.text)((0, tables_1.col)(row, 'sessionToken', 'session_token'));
-            const userId = (0, tables_1.text)((0, tables_1.col)(row, 'userId', 'user_id'));
-            const expires = (0, tables_1.timeMs)((0, tables_1.col)(row, 'expires', 'expires_at', 'expiresAt'));
-            if (!token || !userId || !userIds.has(userId) || expires === undefined) {
-                out.omit('session', 'session row without a token, a known user or an expiry');
-                continue;
-            }
-            if (expires <= now) {
-                out.omit('session', 'expired');
-                continue;
-            }
-            out.add('session', {
-                id: (0, tables_1.text)((0, tables_1.col)(row, 'id', '_id')) ?? (0, tables_1.sha256Hex)(token).slice(0, 32),
-                user_id: userId,
-                token_hash: (0, tables_1.sha256Hex)(token),
-                expires_at: new Date(expires).toISOString(),
-            });
-        }
-    }
-    out.manifest.settings = { session_cookie: ['authjs.session-token', 'next-auth.session-token'] };
-    return out;
-}
-//# sourceMappingURL=authjs.js.map

package/dist/migrate/export/frameworks/authjs.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"authjs.js","sourceRoot":"","sources":["../../../../src/migrate/export/frameworks/authjs.ts"],"names":[],"mappings":";;;AAyDA,oCAoIC;AA7LD,qCAYkB;AAoCL,QAAA,aAAa,GAAG;IAC3B,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,CAAC;IAClD,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,oBAAoB,CAAC;IACjE,OAAO,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,oBAAoB,CAAC;IACjE,aAAa,EAAE,CAAC,eAAe,EAAE,gBAAgB,EAAE,eAAe,CAAC;CAC3D,CAAC;AAEX,MAAM,gBAAgB,GAAG,CAAC,UAAU,EAAE,cAAc,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC;AAEjI,SAAgB,YAAY,CAAC,MAAc,EAAE,UAA+B,EAAE;IAC5E,MAAM,GAAG,GAAG,IAAI,wBAAe,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,qBAAa,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,oCAAoC,qBAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChF,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,IAAA,YAAG,EAAC,GAAG,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC;QAC/G,IAAI,QAAyD,CAAC;QAC9D,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,IAAA,2BAAkB,EAAC,MAAM,CAAC,CAAC;YACzC,IAAI,KAAK,EAAE,CAAC;gBACV,QAAQ,GAAG,KAAK,CAAC;gBACjB,gBAAgB,EAAE,CAAC;YACrB,CAAC;;gBAAM,gBAAgB,EAAE,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,+EAA+E,CAAC,CAAC;YAClG,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE;YACd,EAAE;YACF,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACxI,IAAI;YACJ,GAAG,IAAA,kBAAS,EAAC,IAAI,CAAC;YAClB,SAAS,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAClC,QAAQ;YACR,UAAU,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,gBAAgB;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,gBAAgB,kHAAkH,CAAC,CAAC;IACtK,IAAI,gBAAgB,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,CACN,GAAG,gBAAgB,6MAA6M,CACjO,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,qBAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC,IAAI,OAAO,CAAC;QAC/C,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,iEAAiE,CAAC,CAAC;YACxF,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,UAAU;YAAE,SAAS;QAChF,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,SAAS,GAAG,IAAA,YAAG,EAAC,GAAG,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;QACtD,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE;YAClB,OAAO,EAAE,MAAM;YACf,QAAQ;YACR,gBAAgB,EAAE,OAAO;YACzB,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;YACxC,GAAG,CAAC,OAAO,CAAC,WAAW;gBACrB,CAAC,CAAC;oBACE,YAAY,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;oBAC3D,aAAa,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC;oBAC9D,8CAA8C;oBAC9C,UAAU,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAA,aAAI,EAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;iBAClH;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;SACjE,CAAC,CAAC;IACL,CAAC;IACD,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAE/C,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,qBAAa,CAAC,aAAa,CAAC,CAAC;IACnE,IAAI,cAAc,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,oFAAoF,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACnI,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;YACnD,MAAM,YAAY,GAAG,IAAA,kBAAS,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,CAAC;YAC1F,MAAM,SAAS,GAAG,IAAA,kBAAS,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,qBAAqB,EAAE,uBAAuB,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,EAAE,CAAC;gBACnE,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,qEAAqE,CAAC,CAAC;gBAC3F,SAAS;YACX,CAAC;YACD,MAAM,UAAU,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;YAChD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE;gBACjB,OAAO,EAAE,MAAM;gBACf,aAAa,EAAE,YAAY;gBAC3B,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,MAAM,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;gBACjD,KAAK,EAAE,OAAO,CAAC,IAAK;gBACpB,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;gBAC/E,SAAS,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,oBAAoB,EAAE,sBAAsB,CAAC,CAAC;aACxE,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,IAAI;YAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IACrD,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,qBAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,IAAA,eAAM,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBACvE,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,wDAAwD,CAAC,CAAC;gBAC9E,SAAS;YACX,CAAC;YACD,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE;gBACjB,EAAE,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,IAAA,kBAAS,EAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBAChE,OAAO,EAAE,MAAM;gBACf,UAAU,EAAE,IAAA,kBAAS,EAAC,KAAK,CAAC;gBAC5B,UAAU,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE;aAC5C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,EAAE,cAAc,EAAE,CAAC,sBAAsB,EAAE,yBAAyB,CAAC,EAAE,CAAC;IAChG,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/migrate/export/frameworks/devise.d.ts

@@ -1,39 +0,0 @@
-import { FrameworkExport, type Tables } from './tables';
-/**
- * Devise (Rails) → canonical records, from the rows the Rails runner script
- * ({@link DEVISE_EXPORT_SCRIPT}) streams out of the app with its own models —
- * so attributes Rails encrypts (devise-two-factor's `otp_secret` under Active
- * Record encryption or attr_encrypted) arrive decrypted, and the Devise config
- * (pepper, stretches, the modules each model enables) comes along.
- *
- *   users            → user: email + confirmable (`confirmed_at`), the bcrypt
- *                      `encrypted_password` (with `config.pepper` when set),
- *                      lockable (`locked_at`), trackable timestamps
- *   omniauth         → identity: `provider`/`uid` on users, or an
- *                      `identities` / `authentications` table
- *   devise-two-factor → mfa_factor totp (`otp_secret`) + backup codes (their
- *                      Devise-bcrypt digests, verified like passwords)
- *   rolify / `admin`  → app roles
- *   activerecord-session_store → session (the cookie store has no rows: the
- *                      bridge decrypts the `_<app>_session` cookie instead)
- *
- * devise-encryptable digests (sha1 / sha512 / authlogic / restful_authentication)
- * are not carried: those users reset their password or migrate lazily.
- */
-export interface DeviseExportOptions {
-    /** The Warden scope / model table (default `users`). */
-    usersTable?: string;
-    /** Treat emails as verified when the model does not use :confirmable. Default false. */
-    trustUnconfirmable?: boolean;
-    sessions?: boolean;
-    now?: Date;
-}
-export declare function exportDevise(tables: Tables, options?: DeviseExportOptions): FrameworkExport;
-/**
- * The Rails runner script that streams a Devise app's rows as NDJSON
- * (`{"table": …, "row": {…}}`), straight into `atlas migrate export devise
- * --file -`, so decrypted secrets only ever travel through the pipe:
- *
- *   bin/rails runner atlas_export.rb | npx atlas migrate devise export --file -
- */
-export declare const DEVISE_EXPORT_SCRIPT = "# Atlas export for a Devise app. Run: bin/rails runner atlas_export.rb [ModelName]\nrequire \"json\"\n\nmodel = (ARGV[0] || \"User\").constantize\nemit = ->(table, row) { $stdout.puts({ table: table, row: row }.to_json) }\n\nsession_key = Rails.application.config.session_options[:key] rescue nil\nemit.call(\"devise_config\", {\n  devise_version: Devise::VERSION,\n  pepper: Devise.pepper,\n  stretches: Devise.stretches,\n  modules: model.devise_modules.join(\",\"),\n  session_store: Rails.application.config.session_store.to_s.demodulize.underscore,\n  session_key: session_key,\n  session_ttl_seconds: (Rails.application.config.session_options[:expire_after] || 1209600).to_i,\n})\n\nattrs = model.column_names - %w[encrypted_otp_secret encrypted_otp_secret_iv encrypted_otp_secret_salt]\nmodel.find_each(batch_size: 1000) do |u|\n  row = attrs.index_with { |c| u.read_attribute(c) }\n  # devise-two-factor: read the secret through the model so Rails decrypts it.\n  row[\"otp_secret\"] = u.otp_secret if u.respond_to?(:otp_secret)\n  emit.call(model.table_name, row)\nend\n\n%w[Identity Authentication].each do |name|\n  next unless Object.const_defined?(name)\n  klass = name.constantize\n  next unless klass < ActiveRecord::Base\n  klass.find_each { |i| emit.call(klass.table_name, i.attributes.slice(\"user_id\", \"provider\", \"uid\", \"email\")) }\nend\n\nif Object.const_defined?(:Role) && ActiveRecord::Base.connection.table_exists?(\"users_roles\")\n  Role.find_each { |r| emit.call(\"roles\", r.attributes.slice(\"id\", \"name\", \"resource_type\", \"resource_id\")) }\n  ActiveRecord::Base.connection.select_all(\"SELECT user_id, role_id FROM users_roles\").each { |r| emit.call(\"users_roles\", r) }\nend\n\nif defined?(ActiveRecord::SessionStore::Session)\n  scope = \"warden.user.#{Devise::Mapping.find_scope!(model)}.key\"\n  ActiveRecord::SessionStore::Session.find_each do |s|\n    entry = s.data[scope] rescue nil\n    next unless entry\n    emit.call(\"sessions\", { session_id: s.session_id, user_id: Array(entry[0]).first, updated_at: s.updated_at })\n  end\nend\n";