@atlasauth/cli 0.23.0 → 0.25.0

package/dist/migrate/export/propelauth-config.js

@@ -1,58 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.fetchPropelauthConfig = fetchPropelauthConfig;
-exports.translatePropelauthConfig = translatePropelauthConfig;
-const record_set_1 = require("./record-set");
-const translate_kit_1 = require("./translate-kit");
-const propelauth_1 = require("./propelauth");
-const vendor_http_1 = require("./vendor-http");
-async function optional(fn, fallback) {
-    try {
-        return await fn();
-    }
-    catch (err) {
-        if (err instanceof vendor_http_1.VendorApiError && [400, 403, 404, 405].includes(err.status))
-            return fallback;
-        throw err;
-    }
-}
-async function fetchPropelauthConfig(http, authUrl) {
-    const mappings = await optional(async () => (await http.get('/api/backend/v1/custom_role_mappings')).body, null);
-    const list = Array.isArray(mappings) ? mappings : Array.isArray(mappings?.custom_role_mappings) ? mappings.custom_role_mappings : [];
-    const roleMappings = list.map((m) => (typeof m === 'string' ? m : (0, record_set_1.str)(m?.custom_role_mapping_name) ?? (0, record_set_1.str)(m?.name))).filter((n) => !!n);
-    let orgs = 0;
-    let samlOrgs = 0;
-    for (let page = 0; page < 1000; page++) {
-        const body = await optional(async () => (await http.get(`/api/backend/v1/org/query?page_size=100&page_number=${page}`)).body, null);
-        const rows = (0, record_set_1.objs)(body?.orgs);
-        orgs += rows.length;
-        samlOrgs += rows.filter((o) => o.is_saml_configured === true).length;
-        if (body?.has_more_results !== true || rows.length === 0)
-            break;
-    }
-    return { authUrl: (0, propelauth_1.normalizeAuthUrl)(authUrl), roleMappings, orgs, samlOrgs };
-}
-function translatePropelauthConfig(snap) {
-    const b = new translate_kit_1.ConfigBuilder();
-    b.add('mapped', 'organizations', 'organizations and members', `${snap.orgs} organization(s) with their members, roles, permissions and pending invitations move with the data export.`, 'organizations');
-    for (const name of snap.roleMappings) {
-        b.add('manual', 'roles', `custom role mapping ${name}`, 'PropelAuth role mappings choose which role set an organization uses; Atlas roles are instance-wide, so recreate the set once and assign it in Atlas.', 'roles');
-    }
-    if (snap.samlOrgs > 0) {
-        b.add('manual', 'enterprise', `SAML (${snap.samlOrgs} organization(s))`, 'PropelAuth never returns a connection\'s IdP settings: create each SAML connection again in Atlas with the IdP\'s metadata.', 'sso_connections');
-    }
-    for (const [setting, where] of [
-        ['login methods (password, passwordless, social)', 'Dashboard → Login Methods'],
-        ['password and MFA requirements', 'Dashboard → Login Methods / Security'],
-        ['session and token lifetimes', 'Dashboard → Settings → Sessions'],
-        ['social provider credentials', 'Dashboard → Login Methods → Social (re-enter each client id and secret as an Atlas oauth provider)'],
-        ['allowed redirect URLs and domains', 'Dashboard → Frontend Integration'],
-        ['branding, hosted pages and emails', 'Dashboard → Branding / Emails (use the Atlas theme and email templates)'],
-        ['user properties and metadata schema', 'Dashboard → User Properties (carried as user metadata in the export)'],
-    ]) {
-        b.add('manual', 'settings not in the API', setting, `PropelAuth does not expose this by API; copy it from the dashboard (${where}).`);
-    }
-    b.add('differs', 'sessions', 'access tokens', 'PropelAuth signs RS256 tokens verified with a project verifier key (there is no JWKS). The propelauth bridge preset needs that key to keep sessions through the switch; new sign-ins use Atlas tokens.', 'migration bridge');
-    return b.result(`PropelAuth project ${snap.authUrl}`, { bridge: { preset: 'propelauth', vars: { auth_url: snap.authUrl } } });
-}
-//# sourceMappingURL=propelauth-config.js.map

package/dist/migrate/export/propelauth-config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"propelauth-config.js","sourceRoot":"","sources":["../../../src/migrate/export/propelauth-config.ts"],"names":[],"mappings":";;AA8BA,sDAcC;AAED,8DAsBC;AAnED,6CAAmD;AACnD,mDAAgD;AAChD,6CAAgD;AAChD,+CAAgE;AAiBhE,KAAK,UAAU,QAAQ,CAAI,EAAoB,EAAE,QAAW;IAC1D,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,4BAAc,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,QAAQ,CAAC;QAChG,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,qBAAqB,CAAC,IAAgB,EAAE,OAAe;IAC3E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAU,sCAAsC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAe,CAAC,CAAC;IACrI,MAAM,IAAI,GAAc,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAE,QAAuB,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAG,QAAgB,CAAC,oBAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxL,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAG,EAAE,CAAgB,EAAE,wBAAwB,CAAC,IAAI,IAAA,gBAAG,EAAE,CAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrL,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAM,uDAAuD,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAkB,CAAC,CAAC;QACvJ,MAAM,IAAI,GAAG,IAAA,iBAAI,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC;QACpB,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,kBAAkB,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;QACrE,IAAI,IAAI,EAAE,gBAAgB,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;IAClE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAA,6BAAgB,EAAC,OAAO,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC9E,CAAC;AAED,SAAgB,yBAAyB,CAAC,IAA8B;IACtE,MAAM,CAAC,GAAG,IAAI,6BAAa,EAAE,CAAC;IAC9B,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE,2BAA2B,EAAE,GAAG,IAAI,CAAC,IAAI,4GAA4G,EAAE,eAAe,CAAC,CAAC;IACzM,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,uBAAuB,IAAI,EAAE,EAAE,sJAAsJ,EAAE,OAAO,CAAC,CAAC;IAC3N,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QACtB,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,EAAE,SAAS,IAAI,CAAC,QAAQ,mBAAmB,EAAE,6HAA6H,EAAE,iBAAiB,CAAC,CAAC;IAC7N,CAAC;IACD,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI;QAC7B,CAAC,gDAAgD,EAAE,2BAA2B,CAAC;QAC/E,CAAC,+BAA+B,EAAE,sCAAsC,CAAC;QACzE,CAAC,6BAA6B,EAAE,iCAAiC,CAAC;QAClE,CAAC,6BAA6B,EAAE,oGAAoG,CAAC;QACrI,CAAC,mCAAmC,EAAE,kCAAkC,CAAC;QACzE,CAAC,mCAAmC,EAAE,yEAAyE,CAAC;QAChH,CAAC,qCAAqC,EAAE,sEAAsE,CAAC;KACvG,EAAE,CAAC;QACX,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,yBAAyB,EAAE,OAAO,EAAE,uEAAuE,KAAK,IAAI,CAAC,CAAC;IACxI,CAAC;IACD,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,wMAAwM,EAAE,kBAAkB,CAAC,CAAC;IAC5Q,OAAO,CAAC,CAAC,MAAM,CAAC,sBAAsB,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;AAChI,CAAC"}

package/dist/migrate/export/propelauth-harness.test-helper.d.ts

@@ -1,62 +0,0 @@
-import type { MigrationBundleWriter, RecordIssue } from '@atlasauth/migrate';
-import type { ExportCursor, PluginContext } from '../framework/plugin';
-/**
- * Test harness for the PropelAuth and Userfront tracks: a fake vendor API
- * (routes are `METHOD path?query` as the exporter sends it; unrouted calls
- * answer 404, so an exporter that calls something unexpected degrades the way
- * it would against a vendor that lacks the endpoint), a hand-built
- * PluginContext and a bundle writer that records every call.
- */
-export type Route = unknown | {
-    status: number;
-    body?: unknown;
-} | ((req: {
-    url: URL;
-    body: unknown;
-    headers: Headers;
-}) => unknown);
-export interface FakeVendor {
-    fetchImpl: typeof fetch;
-    calls: Array<{
-        method: string;
-        url: string;
-        headers: Headers;
-        body: unknown;
-    }>;
-}
-export declare function fakeVendor(origin: string, routes: Record<string, Route>): FakeVendor;
-export declare const noSleep: () => Promise<undefined>;
-export interface Harness {
-    p: PluginContext;
-    said: string[];
-}
-export declare function context(opts?: {
-    values?: Record<string, unknown>;
-    env?: Record<string, string>;
-    files?: Record<string, string>;
-    fetch?: typeof fetch;
-}): Harness;
-export declare class FakeWriter {
-    described: unknown[];
-    warnings: string[];
-    omits: Array<[string, string, number]>;
-    adds: Array<{
-        model: string;
-        data: Record<string, unknown>;
-    }>;
-    issues: Record<string, RecordIssue[]>;
-    describe(fields: unknown): void;
-    warn(message: string): void;
-    omit(model: string, reason: string, count?: number): void;
-    add(model: string, data: unknown): Promise<RecordIssue[]>;
-    get writer(): MigrationBundleWriter;
-    ids(model: string): unknown[];
-    models(): string[];
-}
-export declare function resumeFrom(cursor?: ExportCursor | null): {
-    checkpoints: import("../../serialize").Json[];
-    resume: {
-        cursor: import("../../serialize").Json;
-        checkpoint: (c: ExportCursor) => undefined;
-    };
-};

package/dist/migrate/export/propelauth-harness.test-helper.js

@@ -1,109 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.FakeWriter = exports.noSleep = void 0;
-exports.fakeVendor = fakeVendor;
-exports.context = context;
-exports.resumeFrom = resumeFrom;
-const errors_1 = require("../../errors");
-const isStatus = (v) => typeof v === 'object' && v !== null && 'status' in v && typeof v.status === 'number' && Object.keys(v).every((k) => ['status', 'body'].includes(k));
-function fakeVendor(origin, routes) {
-    const calls = [];
-    const fetchImpl = (async (input, init = {}) => {
-        const url = new URL(String(input));
-        const method = (init.method ?? 'GET').toUpperCase();
-        const headers = new Headers(init.headers);
-        let body = init.body;
-        if (typeof body === 'string') {
-            try {
-                body = JSON.parse(body);
-            }
-            catch {
-                // plain text: kept as the string
-            }
-        }
-        calls.push({ method, url: url.toString(), headers, body });
-        const key = url.origin === origin ? `${method} ${url.pathname}${url.search}` : `${method} ${url.toString()}`;
-        let route = routes[key];
-        if (route === undefined)
-            route = routes[`${method} ${url.pathname}`];
-        if (route === undefined)
-            return new Response(JSON.stringify({ message: `no route for ${key}` }), { status: 404 });
-        const value = typeof route === 'function' ? route({ url, body, headers }) : route;
-        const resolved = isStatus(value) ? value : { status: 200, body: value };
-        return new Response(resolved.body === undefined ? '' : JSON.stringify(resolved.body), { status: resolved.status, headers: { 'content-type': 'application/json' } });
-    });
-    return { fetchImpl, calls };
-}
-const noSleep = async () => undefined;
-exports.noSleep = noSleep;
-function context(opts = {}) {
-    const values = opts.values ?? {};
-    const env = opts.env ?? {};
-    const files = opts.files ?? {};
-    const said = [];
-    const p = {
-        ctx: {
-            env,
-            readFile: (path) => {
-                const text = files[path];
-                if (text === undefined)
-                    throw new Error(`ENOENT: no such file, open '${path}'`);
-                return text;
-            },
-        },
-        args: { positionals: [], values },
-        project: '/project',
-        credential(spec) {
-            const name = spec.flag.replace(/^--/, '');
-            const raw = values[name];
-            const value = (typeof raw === 'string' && raw.trim() ? raw.trim() : undefined) ?? env[spec.env]?.trim();
-            if (value)
-                return value;
-            if (spec.required)
-                throw new errors_1.CliError(`${spec.label} is needed. Pass --set ${name}=<value> or set ${spec.env}.`);
-            return undefined;
-        },
-        fetch: opts.fetch ??
-            (async () => {
-                throw new Error('no vendor API in this test');
-            }),
-        say: (line) => void said.push(line),
-        dryRun: false,
-    };
-    return { p, said };
-}
-class FakeWriter {
-    described = [];
-    warnings = [];
-    omits = [];
-    adds = [];
-    issues = {};
-    describe(fields) {
-        this.described.push(fields);
-    }
-    warn(message) {
-        this.warnings.push(message);
-    }
-    omit(model, reason, count = 1) {
-        this.omits.push([model, reason, count]);
-    }
-    async add(model, data) {
-        this.adds.push({ model, data: data });
-        return this.issues[model] ?? [];
-    }
-    get writer() {
-        return this;
-    }
-    ids(model) {
-        return this.adds.filter((a) => a.model === model).map((a) => a.data.id);
-    }
-    models() {
-        return this.adds.map((a) => a.model);
-    }
-}
-exports.FakeWriter = FakeWriter;
-function resumeFrom(cursor = null) {
-    const checkpoints = [];
-    return { checkpoints, resume: { cursor, checkpoint: (c) => void checkpoints.push(c) } };
-}
-//# sourceMappingURL=propelauth-harness.test-helper.js.map

package/dist/migrate/export/propelauth-harness.test-helper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"propelauth-harness.test-helper.js","sourceRoot":"","sources":["../../../src/migrate/export/propelauth-harness.test-helper.ts"],"names":[],"mappings":";;;AAuBA,gCAwBC;AASD,0BAiCC;AAkCD,gCAGC;AA3HD,yCAAwC;AAiBxC,MAAM,QAAQ,GAAG,CAAC,CAAU,EAA2C,EAAE,CACvE,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,QAAQ,IAAI,CAAC,IAAI,OAAQ,CAAyB,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/K,SAAgB,UAAU,CAAC,MAAc,EAAE,MAA6B;IACtE,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,KAA6B,EAAE,OAAoB,EAAE,EAAE,EAAE;QACjF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,IAAI,GAAY,IAAI,CAAC,IAAI,CAAC;QAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;QAC7G,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,GAAG,MAAM,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrE,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,gBAAgB,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAClH,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAE,KAAuE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACrJ,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QACxE,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACtK,CAAC,CAAiB,CAAC;IACnB,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAEM,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC;AAAhC,QAAA,OAAO,WAAyB;AAO7C,SAAgB,OAAO,CAAC,OAAiI,EAAE;IACzJ,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,CAAC,GAAkB;QACvB,GAAG,EAAE;YACH,GAAG;YACH,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE;gBACzB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzB,IAAI,IAAI,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,GAAG,CAAC,CAAC;gBAChF,OAAO,IAAI,CAAC;YACd,CAAC;SACuB;QAC1B,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAA2B;QAC1D,OAAO,EAAE,UAAU;QACnB,UAAU,CAAC,IAAoB;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YACzB,MAAM,KAAK,GAAG,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;YACxG,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;YACxB,IAAI,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,iBAAQ,CAAC,GAAG,IAAI,CAAC,KAAK,0BAA0B,IAAI,mBAAmB,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;YACjH,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,EACH,IAAI,CAAC,KAAK;YACT,CAAC,KAAK,IAAI,EAAE;gBACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAChD,CAAC,CAAkB;QACrB,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACnC,MAAM,EAAE,KAAK;KACd,CAAC;IACF,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;AACrB,CAAC;AAED,MAAa,UAAU;IACrB,SAAS,GAAc,EAAE,CAAC;IAC1B,QAAQ,GAAa,EAAE,CAAC;IACxB,KAAK,GAAoC,EAAE,CAAC;IAC5C,IAAI,GAA4D,EAAE,CAAC;IACnE,MAAM,GAAkC,EAAE,CAAC;IAE3C,QAAQ,CAAC,MAAe;QACtB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,OAAe;QAClB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,KAAa,EAAE,MAAc,EAAE,KAAK,GAAG,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,IAAa;QACpC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAA+B,EAAE,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAwC,CAAC;IAClD,CAAC;IACD,GAAG,CAAC,KAAa;QACf,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM;QACJ,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;CACF;AA9BD,gCA8BC;AAED,SAAgB,UAAU,CAAC,SAA8B,IAAI;IAC3D,MAAM,WAAW,GAAmB,EAAE,CAAC;IACvC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAe,EAAE,EAAE,CAAC,KAAK,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACxG,CAAC"}

package/dist/migrate/export/propelauth.d.ts

@@ -1,48 +0,0 @@
-import type { UserRecord } from '@atlasauth/migrate';
-import { RecordSet, type Obj } from './record-set';
-import { VendorHttp } from './vendor-http';
-/**
- * `atlas migrate export propelauth` — a PropelAuth project onto the canonical
- * bundle models, read with a backend API key on this machine.
- *
- *   - users (email + confirmed flag, username, names, picture, locked /
- *     disabled, metadata) with every organization they belong to and the role
- *     they hold there;
- *   - organizations (slug, self-join domains, member cap), the roles seen on
- *     members (with the permissions they carry) and pending invitations;
- *   - password hashes: PropelAuth has no password-verify API and does not
- *     return hashes. Support can export them; pass that file with
- *     --propelauth-hashes-file (self-describing hashes are recognised on their
- *     own). Without it members set a password again (reset link) — or sign in
- *     with the method they already use.
- *
- * Not exportable: TOTP secrets (only the factor type is readable), social
- * account ids (users relink by verified email), end-user API key secrets
- * (reissue), SAML IdP settings (write-only: set the connection up again).
- * Sessions are RS256 tokens verified with the project's verifier key: see the
- * `propelauth` bridge preset.
- */
-export interface PropelauthExportOptions {
-    /** The project's auth URL (https://123456.propelauthtest.com or a custom domain). */
-    authUrl: string;
-    apiKey: string;
-    /** Backend API host (default https://propelauth-api.com). */
-    apiBase?: string;
-    /** The password-hash export from PropelAuth support (CSV or NDJSON). */
-    hashesText?: string;
-    fetchImpl?: typeof fetch;
-    sleep?: (ms: number) => Promise<void>;
-    onProgress?: (message: string) => void;
-}
-/** `https://x.propelauthtest.com/` → `https://x.propelauthtest.com`; anything but a plain https origin is refused. */
-export declare function normalizeAuthUrl(raw: string): string;
-export declare function propelauthHttp(o: {
-    authUrl: string;
-    apiKey: string;
-    apiBase?: string;
-    fetchImpl?: typeof fetch;
-    sleep?: (ms: number) => Promise<void>;
-}): VendorHttp;
-export declare function exportPropelauth(opts: PropelauthExportOptions): Promise<RecordSet>;
-/** One PropelAuth user (user query result) → a user record. */
-export declare function mapPropelauthUser(u: Obj): UserRecord | null;

package/dist/migrate/export/propelauth.js

@@ -1,255 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.normalizeAuthUrl = normalizeAuthUrl;
-exports.propelauthHttp = propelauthHttp;
-exports.exportPropelauth = exportPropelauth;
-exports.mapPropelauthUser = mapPropelauthUser;
-const csv_1 = require("../../import/csv");
-const record_set_1 = require("./record-set");
-const translate_kit_1 = require("./translate-kit");
-const vendor_http_1 = require("./vendor-http");
-const API = 'https://propelauth-api.com';
-const PAGE = 100;
-const MAX_PAGES = 100_000;
-const BUILT_IN_ROLES = new Set(['admin', 'member']);
-/** `https://x.propelauthtest.com/` → `https://x.propelauthtest.com`; anything but a plain https origin is refused. */
-function normalizeAuthUrl(raw) {
-    const url = raw.trim().replace(/\/+$/, '');
-    const withScheme = /^https:\/\//.test(url) ? url : /^[a-z0-9.-]+$/i.test(url) ? `https://${url}` : url;
-    if (!/^https:\/\/[a-z0-9.-]+(:\d+)?$/i.test(withScheme))
-        throw new Error(`Not a PropelAuth auth URL: ${raw}`);
-    return withScheme;
-}
-function propelauthHttp(o) {
-    return new vendor_http_1.VendorHttp({
-        vendor: 'PropelAuth',
-        baseUrl: (o.apiBase ?? API).replace(/\/+$/, ''),
-        headers: { authorization: `Bearer ${o.apiKey}`, 'x-propelauth-url': normalizeAuthUrl(o.authUrl).replace(/^https:\/\//, '') },
-        fetchImpl: o.fetchImpl,
-        sleep: o.sleep,
-    });
-}
-async function exportPropelauth(opts) {
-    const set = new record_set_1.RecordSet();
-    const authUrl = normalizeAuthUrl(opts.authUrl);
-    if (!opts.apiKey)
-        throw new Error('PropelAuth export needs a backend API key (PROPELAUTH_API_KEY).');
-    const progress = opts.onProgress ?? (() => undefined);
-    const http = propelauthHttp({ authUrl, apiKey: opts.apiKey, apiBase: opts.apiBase, fetchImpl: opts.fetchImpl, sleep: opts.sleep });
-    progress('organizations');
-    const orgs = await listOrgs(http);
-    const orgIds = new Set();
-    let saml = 0;
-    for (const o of orgs) {
-        const id = (0, record_set_1.str)(o.org_id);
-        const name = (0, record_set_1.str)(o.name) ?? (0, record_set_1.str)(o.org_name) ?? id;
-        if (!id || !name)
-            continue;
-        orgIds.add(id);
-        const detail = await optional(async () => (await http.get(`/api/backend/v1/org/${encodeURIComponent(id)}`)).body);
-        const domains = detail && detail.domain_autojoin === true ? [(0, record_set_1.str)(detail.domain), ...(0, record_set_1.strs)(detail.extra_domains)].filter((d) => !!d) : [];
-        set.add('organization', (0, record_set_1.compact)({
-            id,
-            name,
-            slug: (0, record_set_1.str)(detail?.url_safe_org_slug) ?? (0, record_set_1.str)(o.url_safe_org_slug) ?? (0, record_set_1.str)(o.url_safe_org_name),
-            domains: [...new Set(domains.map((d) => d.toLowerCase()))],
-            max_members: typeof o.max_users === 'number' && o.max_users > 0 ? o.max_users : undefined,
-            public_metadata: (0, record_set_1.bag)(o.metadata),
-            created_at: toMs(o.created_at),
-        }), id);
-        if (o.is_saml_configured === true)
-            saml++;
-    }
-    if (saml > 0) {
-        set.omit('sso_connection', 'PropelAuth never returns a SAML connection\'s IdP settings (write-only): set the connection up again in Atlas, with the same IdP', saml);
-    }
-    progress('users');
-    const hashes = opts.hashesText ? indexHashes(opts.hashesText) : null;
-    const userIds = new Set();
-    const rolePerms = new Map();
-    let withHash = 0;
-    let noPassword = 0;
-    let multiRole = false;
-    const users = await listAll(http, '/api/backend/v1/user/query?include_orgs=true&order_by=CREATED_AT_ASC', 'users');
-    for (const u of users) {
-        const user = mapPropelauthUser(u);
-        if (!user) {
-            set.omit('user', 'no email or username');
-            continue;
-        }
-        const email = user.emails?.[0]?.email;
-        const h = hashes ? (hashes.get(user.id) ?? (email ? hashes.get(email) : undefined) ?? hashes.get((0, record_set_1.str)(u.legacy_user_id) ?? '\0')) : undefined;
-        if (h) {
-            user.password = { algorithm: 'auto', hash: h };
-            withHash++;
-        }
-        if (u.has_password === false)
-            noPassword++;
-        set.add('user', user, user.id);
-        userIds.add(user.id);
-        if (u.mfa_enabled === true)
-            set.omit('mfa_factor', 'PropelAuth does not export TOTP secrets; members enrol again in Atlas');
-        const info = (0, record_set_1.isObj)(u.org_id_to_org_info) ? u.org_id_to_org_info : {};
-        for (const [orgId, raw] of Object.entries(info)) {
-            if (!(0, record_set_1.isObj)(raw))
-                continue;
-            if (!orgIds.has(orgId)) {
-                // Listed on a member but missing from the organization listing: keep the membership.
-                orgIds.add(orgId);
-                set.add('organization', (0, record_set_1.compact)({ id: orgId, name: (0, record_set_1.str)(raw.org_name) ?? orgId, slug: (0, record_set_1.str)(raw.url_safe_org_name) }), orgId);
-            }
-            const role = (0, translate_kit_1.keyOf)((0, record_set_1.str)(raw.user_role) ?? 'member');
-            if ((0, record_set_1.strs)(raw.additional_roles).length > 0)
-                multiRole = true;
-            else if (!rolePerms.has(role))
-                rolePerms.set(role, new Set((0, record_set_1.strs)(raw.user_permissions)));
-            else
-                for (const p of (0, record_set_1.strs)(raw.user_permissions))
-                    rolePerms.get(role).add(p);
-            set.add('membership', { organization_id: orgId, user_id: user.id, role }, `${orgId}:${user.id}`);
-        }
-    }
-    if (multiRole)
-        set.warn('Some members hold additional roles in an organization; Atlas seats each member with one role (their main role).');
-    if (noPassword > 0) {
-        set.omit('identity', "PropelAuth does not export social accounts' provider user ids: they relink by verified email on first social sign-in", noPassword);
-    }
-    if (!hashes && set.count('user') > 0) {
-        set.warn('No password hashes: PropelAuth has no password-verify API, so only a hash export from PropelAuth support can carry passwords. Pass it with --propelauth-hashes-file, or members set a password again on first sign-in.');
-    }
-    else if (hashes && withHash === 0) {
-        set.warn('The hash file matched no user (by user id, email or legacy user id): check its columns.');
-    }
-    progress('invitations');
-    const invitedRoles = new Set();
-    for (const orgId of orgIds) {
-        const invites = await optional(() => listAll(http, `/api/backend/v1/pending_org_invites?org_id=${encodeURIComponent(orgId)}`, 'invites'));
-        for (const inv of invites ?? []) {
-            const email = (0, record_set_1.str)(inv.invitee_email)?.toLowerCase();
-            if (!email)
-                continue;
-            const role = (0, translate_kit_1.keyOf)((0, record_set_1.str)(inv.role_in_org) ?? 'member');
-            invitedRoles.add(role);
-            const inviter = (0, record_set_1.str)(inv.inviter_user_id);
-            set.add('invitation', (0, record_set_1.compact)({
-                id: `${orgId}:${email}`,
-                organization_id: orgId,
-                email,
-                role,
-                status: 'pending',
-                inviter_user_id: inviter && userIds.has(inviter) ? inviter : undefined,
-                expires_at: toMs(inv.expires_at),
-                created_at: toMs(inv.created_at),
-            }), `${orgId}:${email}`);
-        }
-    }
-    const roleKeys = new Set([...rolePerms.keys(), ...invitedRoles]);
-    for (const key of roleKeys) {
-        if (BUILT_IN_ROLES.has(key))
-            continue;
-        set.add('role', (0, record_set_1.compact)({ key, name: key, scope: 'organization', permissions: [...(rolePerms.get(key) ?? [])] }), key);
-    }
-    progress('api keys');
-    const keys = (await optional(() => listAll(http, '/api/backend/v1/end_user_api_keys', 'api_keys'))) ?? [];
-    if (keys.length)
-        set.omit('api_key', 'PropelAuth never reveals end-user API key secrets: reissue them as Atlas API keys', keys.length);
-    set.manifest = { origin: authUrl, settings: { auth_url: authUrl } };
-    return set;
-}
-/** One PropelAuth user (user query result) → a user record. */
-function mapPropelauthUser(u) {
-    const id = (0, record_set_1.str)(u.user_id);
-    if (!id)
-        return null;
-    const email = (0, record_set_1.str)(u.email)?.toLowerCase();
-    const username = (0, record_set_1.str)(u.username);
-    const legacy = (0, record_set_1.str)(u.legacy_user_id);
-    const user = (0, record_set_1.compact)({
-        id,
-        emails: email ? [{ email, verified: u.email_confirmed === true, primary: true }] : [],
-        username,
-        first_name: (0, record_set_1.str)(u.first_name),
-        last_name: (0, record_set_1.str)(u.last_name),
-        image_url: (0, record_set_1.str)(u.picture_url),
-        banned: u.enabled === false ? true : undefined,
-        locked: u.locked === true ? true : undefined,
-        private_metadata: (0, record_set_1.bag)({ ...((0, record_set_1.isObj)(u.metadata) ? u.metadata : {}), ...(legacy ? { propelauth_legacy_user_id: legacy } : {}) }),
-        created_at: toMs(u.created_at),
-        last_sign_in_at: toMs(u.last_active_at),
-    });
-    return user.emails?.length || user.username ? user : null;
-}
-/** PropelAuth timestamps are Unix seconds. */
-function toMs(v) {
-    return typeof v === 'number' && Number.isFinite(v) && v > 0 ? (v < 1e11 ? v * 1000 : v) : undefined;
-}
-/**
- * The support export, by user id, email and legacy user id (emails lowercased).
- * Its layout is not published: CSV with a hash column and an id / email
- * column, or NDJSON objects with the same names.
- */
-function indexHashes(text) {
-    const t = text.trim();
-    const rows = t.startsWith('{') ? t.split(/\r?\n/).filter((l) => l.trim()).map((l) => JSON.parse(l)) : (0, csv_1.parseCsv)(t);
-    const out = new Map();
-    for (const r of rows) {
-        const keys = Object.keys(r);
-        const hashKey = keys.find((k) => /hash/i.test(k) && !/algo/i.test(k));
-        const hash = hashKey ? (0, record_set_1.str)(r[hashKey]) : undefined;
-        if (!hash)
-            continue;
-        for (const k of keys) {
-            const v = (0, record_set_1.str)(r[k]);
-            if (!v)
-                continue;
-            if (/^(user_?id|legacy_?user_?id)$/i.test(k))
-                out.set(v, hash);
-            else if (/^e-?mail$/i.test(k))
-                out.set(v.toLowerCase(), hash);
-        }
-    }
-    return out;
-}
-async function listAll(http, path, key) {
-    const out = [];
-    for (let n = 0; n < MAX_PAGES; n++) {
-        const sep = path.includes('?') ? '&' : '?';
-        const { body } = await http.get(`${path}${sep}page_size=${PAGE}&page_number=${n}`);
-        const rows = (0, record_set_1.objs)(body?.[key]);
-        out.push(...rows);
-        if (body?.has_more_results !== true || rows.length === 0)
-            break;
-    }
-    return out;
-}
-/** Organizations: a GET with query parameters, or (older projects) a POST with a JSON body. */
-async function listOrgs(http) {
-    try {
-        return await listAll(http, '/api/backend/v1/org/query?order_by=CREATED_AT_ASC', 'orgs');
-    }
-    catch (err) {
-        if (!(err instanceof vendor_http_1.VendorApiError) || ![404, 405].includes(err.status))
-            throw err;
-    }
-    const out = [];
-    for (let n = 0; n < MAX_PAGES; n++) {
-        const { body } = await http.post('/api/backend/v1/org/query', { page_size: PAGE, page_number: n, order_by: 'CREATED_AT_ASC' });
-        const rows = (0, record_set_1.objs)(body?.orgs);
-        out.push(...rows);
-        if (body?.has_more_results !== true || rows.length === 0)
-            break;
-    }
-    return out;
-}
-/** A call that may be missing or not permitted for this project: `null` then. */
-async function optional(fn) {
-    try {
-        return await fn();
-    }
-    catch (err) {
-        if (err instanceof vendor_http_1.VendorApiError && [400, 403, 404, 405].includes(err.status))
-            return null;
-        throw err;
-    }
-}
-//# sourceMappingURL=propelauth.js.map

package/dist/migrate/export/propelauth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"propelauth.js","sourceRoot":"","sources":["../../../src/migrate/export/propelauth.ts"],"names":[],"mappings":";;AA+CA,4CAKC;AAED,wCAQC;AAED,4CA6HC;AAGD,8CAoBC;AAnND,0CAA4C;AAC5C,6CAAyF;AACzF,mDAAwC;AACxC,+CAA2D;AAqC3D,MAAM,GAAG,GAAG,4BAA4B,CAAC;AACzC,MAAM,IAAI,GAAG,GAAG,CAAC;AACjB,MAAM,SAAS,GAAG,OAAO,CAAC;AAC1B,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEpD,sHAAsH;AACtH,SAAgB,gBAAgB,CAAC,GAAW;IAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACvG,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;IAC9G,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAgB,cAAc,CAAC,CAAyH;IACtJ,OAAO,IAAI,wBAAU,CAAC;QACpB,MAAM,EAAE,YAAY;QACpB,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,EAAE;QAC5H,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,gBAAgB,CAAC,IAA6B;IAClE,MAAM,GAAG,GAAG,IAAI,sBAAS,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrG,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,cAAc,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAEnI,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI;YAAE,SAAS;QAC3B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAM,uBAAuB,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvH,MAAM,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAG,EAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAA,iBAAI,EAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACrJ,GAAG,CAAC,GAAG,CACL,cAAc,EACd,IAAA,oBAAO,EAAC;YACN,EAAE;YACF,IAAI;YACJ,IAAI,EAAE,IAAA,gBAAG,EAAC,MAAM,EAAE,iBAAiB,CAAC,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,iBAAiB,CAAC;YAC5F,OAAO,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YAC1D,WAAW,EAAE,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACzF,eAAe,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC;YAChC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;SAC/B,CAAC,EACF,EAAE,CACH,CAAC;QACF,IAAI,CAAC,CAAC,kBAAkB,KAAK,IAAI;YAAE,IAAI,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,kIAAkI,EAAE,IAAI,CAAC,CAAC;IACvK,CAAC;IAED,QAAQ,CAAC,OAAO,CAAC,CAAC;IAClB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACrE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IACjD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,sEAAsE,EAAE,OAAO,CAAC,CAAC;IACnH,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;YACzC,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QACtC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7I,IAAI,CAAC,EAAE,CAAC;YACN,IAAI,CAAC,QAAQ,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/C,QAAQ,EAAE,CAAC;QACb,CAAC;QACD,IAAI,CAAC,CAAC,YAAY,KAAK,KAAK;YAAE,UAAU,EAAE,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrB,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,uEAAuE,CAAC,CAAC;QAC5H,MAAM,IAAI,GAAG,IAAA,kBAAK,EAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,IAAA,kBAAK,EAAC,GAAG,CAAC;gBAAE,SAAS;YAC1B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvB,qFAAqF;gBACrF,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAClB,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,IAAA,oBAAO,EAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,IAAI,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;YAC7H,CAAC;YACD,MAAM,IAAI,GAAG,IAAA,qBAAK,EAAC,IAAA,gBAAG,EAAC,GAAG,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,CAAC;YACnD,IAAI,IAAA,iBAAI,EAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS,GAAG,IAAI,CAAC;iBACvD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,IAAA,iBAAI,EAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;;gBACnF,KAAK,MAAM,CAAC,IAAI,IAAA,iBAAI,EAAC,GAAG,CAAC,gBAAgB,CAAC;oBAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC7E,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,KAAK,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IACD,IAAI,SAAS;QAAE,GAAG,CAAC,IAAI,CAAC,iHAAiH,CAAC,CAAC;IAC3I,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,sHAAsH,EAAE,UAAU,CAAC,CAAC;IAC3J,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,wNAAwN,CAAC,CAAC;IACrO,CAAC;SAAM,IAAI,MAAM,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,yFAAyF,CAAC,CAAC;IACtG,CAAC;IAED,QAAQ,CAAC,aAAa,CAAC,CAAC;IACxB,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,8CAA8C,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1I,KAAK,MAAM,GAAG,IAAI,OAAO,IAAI,EAAE,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC;YACpD,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,IAAI,GAAG,IAAA,qBAAK,EAAC,IAAA,gBAAG,EAAC,GAAG,CAAC,WAAW,CAAC,IAAI,QAAQ,CAAC,CAAC;YACrD,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvB,MAAM,OAAO,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACzC,GAAG,CAAC,GAAG,CACL,YAAY,EACZ,IAAA,oBAAO,EAAC;gBACN,EAAE,EAAE,GAAG,KAAK,IAAI,KAAK,EAAE;gBACvB,eAAe,EAAE,KAAK;gBACtB,KAAK;gBACL,IAAI;gBACJ,MAAM,EAAE,SAAkB;gBAC1B,eAAe,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;gBACtE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;gBAChC,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;aACjC,CAAC,EACF,GAAG,KAAK,IAAI,KAAK,EAAE,CACpB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC;IACjE,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACtC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAA,oBAAO,EAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,cAAuB,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAClI,CAAC;IAED,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,mCAAmC,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1G,IAAI,IAAI,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,mFAAmF,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAEvI,GAAG,CAAC,QAAQ,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAAC;IACpE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+DAA+D;AAC/D,SAAgB,iBAAiB,CAAC,CAAM;IACtC,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1B,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,MAAM,KAAK,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IACrC,MAAM,IAAI,GAAe,IAAA,oBAAO,EAAC;QAC/B,EAAE;QACF,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,eAAe,KAAK,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;QACrF,QAAQ;QACR,UAAU,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC;QAC7B,SAAS,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,SAAS,CAAC;QAC3B,SAAS,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,WAAW,CAAC;QAC7B,MAAM,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC5C,gBAAgB,EAAE,IAAA,gBAAG,EAAC,EAAE,GAAG,CAAC,IAAA,kBAAK,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,yBAAyB,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC7H,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;QAC9B,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC;KACxC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED,8CAA8C;AAC9C,SAAS,IAAI,CAAC,CAAU;IACtB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtG,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,MAAM,IAAI,GAAU,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAQ,CAAC,CAAC,CAAC,CAAC,IAAA,cAAQ,EAAC,CAAC,CAAC,CAAC;IAChI,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,IAAI,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;iBAC1D,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAgB,EAAE,IAAY,EAAE,GAAW;IAChE,MAAM,GAAG,GAAU,EAAE,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC3C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAM,GAAG,IAAI,GAAG,GAAG,aAAa,IAAI,gBAAgB,CAAC,EAAE,CAAC,CAAC;QACxF,MAAM,IAAI,GAAG,IAAA,iBAAI,EAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAClB,IAAI,IAAI,EAAE,gBAAgB,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;IAClE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+FAA+F;AAC/F,KAAK,UAAU,QAAQ,CAAC,IAAgB;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,EAAE,mDAAmD,EAAE,MAAM,CAAC,CAAC;IAC1F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,4BAAc,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,GAAG,CAAC;IACtF,CAAC;IACD,MAAM,GAAG,GAAU,EAAE,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAM,2BAA2B,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACpI,MAAM,IAAI,GAAG,IAAA,iBAAI,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAClB,IAAI,IAAI,EAAE,gBAAgB,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;IAClE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iFAAiF;AACjF,KAAK,UAAU,QAAQ,CAAI,EAAoB;IAC7C,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,4BAAc,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5F,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/migrate/export/record-set.d.ts

@@ -1,44 +0,0 @@
-import { type CanonicalModel, type CanonicalRecordData, type MigrationManifest } from '@atlasauth/migrate';
-/**
- * What a vendor exporter gathered, grouped by canonical model. A vendor API
- * hands data back in ITS order (users carry their identities, organizations
- * their members); the bundle needs canonical order, so exporters collect here
- * and the writer replays {@link RecordSet.ordered}.
- */
-export declare class RecordSet {
-    private readonly rows;
-    private readonly seen;
-    readonly warnings: string[];
-    readonly omitted: Record<string, {
-        count: number;
-        reason: string;
-    }>;
-    /** Manifest fields the exporter learned (origin, providers, settings, rpId). */
-    manifest: Partial<Pick<MigrationManifest, 'origin' | 'sourceVersion' | 'rpId' | 'providers' | 'settings'>>;
-    /**
-     * Add a row. With `key`, a second row with the same key is dropped (a member
-     * reached through two listings, a role seen on two organizations).
-     */
-    add<M extends CanonicalModel>(model: M, data: CanonicalRecordData[M], key?: string): void;
-    warn(message: string): void;
-    omit(model: string, reason: string, count?: number): void;
-    count(model: CanonicalModel): number;
-    list<M extends CanonicalModel>(model: M): Array<CanonicalRecordData[M]>;
-    /** Every row, in the order the bundle writer requires. */
-    ordered(): Generator<{
-        model: CanonicalModel;
-        data: unknown;
-    }>;
-    counts(): Record<string, number>;
-}
-export type Obj = Record<string, unknown>;
-export declare const isObj: (v: unknown) => v is Obj;
-export declare const str: (v: unknown) => string | undefined;
-export declare const objs: (v: unknown) => Obj[];
-export declare const strs: (v: unknown) => string[];
-/** A metadata bag, only when it has keys. */
-export declare const bag: (v: unknown) => Obj | undefined;
-/** E.164 or nothing: vendors store numbers with spaces/dashes; anything else is dropped. */
-export declare function e164(raw: unknown): string | undefined;
-/** Drop undefined fields so a record carries only what the vendor had. */
-export declare function compact<T extends object>(o: T): T;