@atlasauth/cli 0.23.0 → 0.25.0

package/dist/commands/fga.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fga.js","sourceRoot":"","sources":["../../src/commands/fga.ts"],"names":[],"mappings":";;AA2CA,8BAuBC;AAED,kBA0CC;AA9GD,yCAA6C;AAC7C,+BAA0C;AAC1C,kCAA+C;AAE/C,sCAAqC;AACrC,sCAAsC;AACtC,wCAAqC;AACrC,2CAAyD;AACzD,qCAA6D;AAqB7D,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,IAAY,EAAW,EAAE;IACvD,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAA,YAAS,EAAC,IAAI,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,iBAAQ,CAAC,GAAG,IAAI,yBAA0B,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC,CAAC;AAEF,SAAS,IAAI,CAAC,GAAe,EAAE,IAAgB;IAC7C,MAAM,IAAI,GAAG,IAAA,oBAAW,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,OAAO,IAAA,iBAAO,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAChG,CAAC;AAED,uGAAuG;AACvG,SAAgB,SAAS,CAAC,GAAe,EAAE,IAAY;IACrD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAmC,CAAC;IACjF,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,iBAAQ,CAAC,GAAG,IAAI,sBAAsB,CAAC,CAAC;IACvF,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAA,mBAAO,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACrD,IAAI,GAAuB,CAAC;IAC5B,IAAI,KAAc,CAAC;IACnB,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC;SAC9C,IAAI,GAAG,CAAC,KAAK,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ;QAAE,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;SAClE,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;;YAC7C,GAAG,GAAG,IAAI,CAAC;IAClB,CAAC;;QAAM,MAAM,IAAI,iBAAQ,CAAC,GAAG,IAAI,+BAA+B,CAAC,CAAC;IAClE,IAAI,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,iBAAQ,CAAC,GAAG,GAAG,CAAC,UAAU,8BAA8B,CAAC,CAAC;QAC9F,MAAM,GAAG,CAAC,GAAG,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACxD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,iBAAQ,CAAC,GAAG,IAAI,gBAAgB,CAAC,CAAC;IACpE,OAAO,EAAE,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC7G,CAAC;AAEM,KAAK,UAAU,GAAG,CAAC,GAAe,EAAE,IAAgB;IACzD,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;IACvC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,IAAI,GAAG,IAAI,GAAG,IAAI,qBAAS;QAAE,OAAO,IAAA,2BAAe,EAAC,KAAK,EAAE,qBAAS,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACjF,IAAI,GAAG,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,iBAAQ,CAAC,4JAA4J,CAAC,CAAC;IAC/O,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,iBAAQ,CAAC,aAAa,GAAG,gBAAgB,CAAC,CAAC;IAEhE,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACnC,sGAAsG;QACtG,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1B,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACpB,IAAI,CAAC,GAAG;YAAE,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAkB,0BAA0B,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACxG,MAAM,KAAK,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,IAAI,CAAS,KAAK,CAAC,CAAC,CAAC,kBAAkB,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QACzH,IAAI,IAAA,kBAAS,EAAC,CAAC,CAAC,EAAE,CAAC;YACjB,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC1B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YAC5G,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ;gBAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,cAAc,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClL,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,qCAAqC,MAAM,CAAC,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,CAAC;QAC1J,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM;YAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzG,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,IAAI,CAAkC,0BAA0B,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1J,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;QACvB,IAAI,IAAA,kBAAS,EAAC,CAAC,CAAC;YAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;;YAChD,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,EAAE,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,MAAM;QAAE,MAAM,IAAI,iBAAQ,CAAC,+BAA+B,CAAC,CAAC;IACvF,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,mHAAmH;AACnH,KAAK,UAAU,KAAK,CAAC,GAAe,EAAE,IAAgB;IACpD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,iBAAQ,CAAC,mCAAmC,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,IAAA,oBAAW,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,iBAAQ,CAAC,4DAA4D,CAAC,CAAC;IAClI,MAAM,IAAI,GAAG,CAAC,IAAA,kBAAS,EAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,GAAG,IAAI,kBAAkB,kBAAkB,CAAC,KAAK,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE;QAClI,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE;QACnF,MAAM,EAAE,GAAG,CAAC,MAAM;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,iBAAQ,CAAC,yCAAyC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;IACtG,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,CAAC,IAA4C,EAAE,CAAC;YAC3E,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/C,IAAI,CAAS,CAAC;YACd,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACvH,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvB,IAAI,IAAI;oBAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAK,CAAW,CAAC,IAAI,KAAK,YAAY;YAAE,MAAM,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/golive.d.ts

@@ -1,40 +0,0 @@
-import { type ParsedArgs } from '../args';
-import type { ConfigHttp } from '../config-http';
-import type { RunContext } from '../context';
-/**
- * `atlas golive --origin <url>`: take an instance from "configured" to "live"
- * for one app origin. Runs the steps in order and stops at the first failure,
- * printing the fix. `--dry-run` sends every write with `?dry_run=true`, so the
- * server validates it and nothing changes.
- */
-/** One result line. `ok: false` carries the fix. */
-export interface CheckResult {
-    id: string;
-    ok: boolean;
-    detail: string;
-    fix?: string;
-}
-interface Domain {
-    id: string;
-    role: string;
-    host: string;
-    status: string;
-    method?: 'cname' | 'path';
-    base_path?: string | null;
-    action?: string | null;
-    failure_reason?: string | null;
-    verified?: boolean;
-}
-/** The cookies the SDKs read: a consent manager that does not declare them may block sign-in. */
-export declare const SDK_COOKIES: readonly ["__session", "__atlas_uat", "__atlas_rt", "__client"];
-/** Parse `--origin` to a bare origin (scheme + host + port). */
-export declare function parseOrigin(raw: string | undefined, command: string): URL;
-/** The custom domain serving this origin's host: an exact host match, else the Frontend API domain. */
-export declare function domainFor(domains: Domain[], host: string): Domain | undefined;
-export declare function preflightCheck(api: ConfigHttp): Promise<CheckResult>;
-export declare function loginReadinessCheck(api: ConfigHttp, origin: string): Promise<CheckResult>;
-/** A path mount on the origin's host: verified (active) or the step still to do. */
-export declare function pathMountCheck(api: ConfigHttp, host: string): Promise<CheckResult>;
-export declare function declaredCookiesCheck(api: ConfigHttp): Promise<CheckResult>;
-export declare function golive(ctx: RunContext, args: ParsedArgs): Promise<number>;
-export {};

package/dist/commands/golive.js

@@ -1,285 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SDK_COOKIES = void 0;
-exports.parseOrigin = parseOrigin;
-exports.domainFor = domainFor;
-exports.preflightCheck = preflightCheck;
-exports.loginReadinessCheck = loginReadinessCheck;
-exports.pathMountCheck = pathMountCheck;
-exports.declaredCookiesCheck = declaredCookiesCheck;
-exports.golive = golive;
-const backend_1 = require("@atlasauth/backend");
-const args_1 = require("../args");
-const errors_1 = require("../errors");
-const output_1 = require("../output");
-const project_1 = require("../project");
-const project_commands_1 = require("./project-commands");
-const shared_1 = require("./shared");
-/** The cookies the SDKs read: a consent manager that does not declare them may block sign-in. */
-exports.SDK_COOKIES = ['__session', '__atlas_uat', '__atlas_rt', '__client'];
-/** Parse `--origin` to a bare origin (scheme + host + port). */
-function parseOrigin(raw, command) {
-    if (!raw)
-        throw new errors_1.CliError(`${command} needs --origin <https://your-app.example.com>.`);
-    let u;
-    try {
-        u = new URL(raw);
-    }
-    catch {
-        throw new errors_1.CliError(`--origin must be a full origin such as https://app.example.com, got '${raw}'.`);
-    }
-    if (u.protocol !== 'https:' && u.protocol !== 'http:')
-        throw new errors_1.CliError(`--origin must be http(s), got '${raw}'.`);
-    return new URL(u.origin);
-}
-/** The custom domain serving this origin's host: an exact host match, else the Frontend API domain. */
-function domainFor(domains, host) {
-    return domains.find((d) => d.host === host) ?? domains.find((d) => d.role === 'fapi');
-}
-async function preflightCheck(api) {
-    const report = await api.get('/v1/instance/preflight');
-    const errors = (report.findings ?? []).filter((f) => f.severity === 'error' && !f.acknowledged);
-    if (!errors.length)
-        return { id: 'preflight', ok: true, detail: 'no error findings' };
-    return {
-        id: 'preflight',
-        ok: false,
-        detail: errors.map((f) => `${f.code}: ${f.message}`).join('; '),
-        fix: errors.map((f) => `${f.code}: ${f.fix}`).join(' | '),
-    };
-}
-async function loginReadinessCheck(api, origin) {
-    const r = await api.get(`/v1/diagnostics/login_readiness?origin=${encodeURIComponent(origin)}&live=true`);
-    if (r.ready)
-        return { id: 'login_readiness', ok: true, detail: `ready for ${origin}` };
-    const failing = (r.checks ?? []).filter((c) => !c.pass && c.applies !== false);
-    return {
-        id: 'login_readiness',
-        ok: false,
-        detail: `not ready for ${origin} (${failing.map((c) => c.name).join(', ') || 'unknown hop'})`,
-        fix: failing.map((c) => c.detail).join(' ') || 'See GET /v1/diagnostics/login_readiness for the failing hop.',
-    };
-}
-/** A path mount on the origin's host: verified (active) or the step still to do. */
-async function pathMountCheck(api, host) {
-    const { data } = await api.get('/v1/domains');
-    const mount = data.find((d) => d.method === 'path' && d.host === host);
-    if (!mount)
-        return { id: 'path_mount', ok: true, detail: `no path mount on ${host}` };
-    if (mount.status === 'active')
-        return { id: 'path_mount', ok: true, detail: `${host}${mount.base_path ?? ''} verified` };
-    return {
-        id: 'path_mount',
-        ok: false,
-        detail: `${host}${mount.base_path ?? ''} is ${mount.status}${mount.failure_reason ? `: ${mount.failure_reason}` : ''}`,
-        fix: mount.action ?? `Publish the verification file, then POST /v1/domains/${mount.id}/verify.`,
-    };
-}
-async function declaredCookiesCheck(api) {
-    const cc = await api.get('/v1/instance/cookie_consent');
-    const names = new Set((cc.declared_cookies ?? []).map((c) => c.name));
-    const missing = exports.SDK_COOKIES.filter((n) => !names.has(n));
-    if (!missing.length)
-        return { id: 'declared_cookies', ok: true, detail: `declares ${exports.SDK_COOKIES.join(', ')}` };
-    return {
-        id: 'declared_cookies',
-        ok: false,
-        detail: `cookie declaration is missing ${missing.join(', ')}`,
-        fix: 'Re-import the storage declaration (GET /v1/instance/storage_declaration) into your consent manager as strictly necessary.',
-    };
-}
-class StepFailed extends Error {
-    step;
-    problem;
-    fix;
-    constructor(step, problem, fix) {
-        super(problem);
-        this.step = step;
-        this.problem = problem;
-        this.fix = fix;
-    }
-}
-const trimSlash = (s) => s.replace(/\/+$/, '');
-async function golive(ctx, args) {
-    const v = args.values;
-    const origin = parseOrigin((0, args_1.str)(v, 'origin'), 'golive');
-    const dry = v['dry-run'] === true;
-    const json = (0, shared_1.wantsJson)(v);
-    const api = (0, project_1.httpFor)(ctx, (0, project_commands_1.instanceCredential)(ctx, args));
-    const fetchImpl = ctx.fetch ?? globalThis.fetch;
-    const q = (path) => (dry ? `${path}${path.includes('?') ? '&' : '?'}dry_run=true` : path);
-    const results = [];
-    let current = 'domains';
-    const pass = (id, detail) => {
-        results.push({ id, ok: true, detail });
-        if (!json)
-            ctx.io.out(`✓ ${id} — ${detail}`);
-    };
-    const fail = (problem, fix) => {
-        throw new StepFailed(current, problem, fix);
-    };
-    const check = (r) => (r.ok ? pass(r.id, r.detail) : fail(r.detail, r.fix ?? ''));
-    const would = (done, planned) => (dry ? `would ${planned} (dry run)` : done);
-    try {
-        // (1) domains
-        const listed = await api.get('/v1/domains');
-        let domain = domainFor(listed.data ?? [], origin.host);
-        if (!domain) {
-            if (listed.required)
-                fail(`no custom domain for ${origin.host}, and this instance needs one`, 'Add one: POST /v1/domains {"host": "auth.<your-domain>"} (or a path mount on your app host), then publish its DNS record or file.');
-            pass('domains', 'no custom domain (not required for this instance)');
-        }
-        else if (domain.status === 'active') {
-            pass('domains', `${domain.host}${domain.base_path ?? ''} verified`);
-        }
-        else {
-            const res = await api.post(q(`/v1/domains/${domain.id}/verify`), {});
-            if (dry)
-                pass('domains', would('', `verify ${domain.host}`));
-            else if (!res.verified)
-                fail(`${domain.host} is not verified yet (${res.status})`, res.action ?? res.failure_reason ?? 'Publish the DNS record or verification file, then run golive again.');
-            else {
-                domain = { ...domain, ...res };
-                pass('domains', `${domain.host} verified`);
-            }
-        }
-        // (2) issuer
-        current = 'issuer';
-        const instance = await api.get('/v1/instance');
-        const expected = instance.issuer ? trimSlash(instance.issuer) : null;
-        if (!expected)
-            fail('the instance reports no issuer', 'Check GET /v1/instance; a verified Frontend API domain sets it.');
-        const base = domain?.method === 'path' && domain.host === origin.host
-            ? `${origin.origin}${domain.base_path ?? ''}`
-            : domain
-                ? `https://${domain.host}${domain.base_path ?? ''}`
-                : expected;
-        const discoveryUrl = `${trimSlash(base)}/.well-known/openid-configuration`;
-        let served;
-        try {
-            const res = await fetchImpl(discoveryUrl, { headers: { accept: 'application/json' } });
-            if (!res.ok)
-                fail(`${discoveryUrl} answered ${res.status}`, 'Route that path to your Atlas Frontend API (see the domain instructions in GET /v1/domains).');
-            served = (await res.json()).issuer;
-        }
-        catch (err) {
-            if (err instanceof StepFailed)
-                throw err;
-            fail(`${discoveryUrl} is unreachable (${err instanceof Error ? err.message : String(err)})`, 'Check DNS, TLS and the proxy rule for that host.');
-        }
-        if (!served || trimSlash(served) !== expected) {
-            fail(`${discoveryUrl} serves issuer ${served ?? '(none)'}, expected ${expected}`, 'Point that host/path at this instance\'s Frontend API, or verify the domain so the instance issues tokens for it.');
-        }
-        pass('issuer', `${expected}`);
-        // (3) Sign in with Atlas
-        current = 'sign_in_with_atlas';
-        const siwa = await api.get('/v1/instance/sign_in_with_atlas');
-        const declared = !siwa.turned_off_by_you && (siwa.connection_id !== null || (siwa.candidates?.length ?? 0) > 0);
-        if (siwa.enabled)
-            pass('sign_in_with_atlas', 'enabled');
-        else if (!declared)
-            pass('sign_in_with_atlas', 'not declared, skipped');
-        else {
-            if (siwa.available === false)
-                fail('declared, but Sign in with Atlas is not available on this Atlas', 'Remove the declaration, or contact your Atlas operator.');
-            const body = { enabled: true, ...(siwa.connection_id ? {} : { connection_id: siwa.candidates[0].id }) };
-            const after = await api.patch(q('/v1/instance/sign_in_with_atlas'), body);
-            if (!dry && !after.enabled)
-                fail('could not turn Sign in with Atlas on', 'PATCH /v1/instance/sign_in_with_atlas {"enabled": true} and read the error.');
-            pass('sign_in_with_atlas', would('turned on', 'turn it on'));
-        }
-        // (4) webhooks: an inactive endpoint is turned on only after its test delivery succeeds.
-        current = 'webhooks';
-        const endpoints = (await api.get('/v1/webhook_endpoints')).data ?? [];
-        const inactive = endpoints.filter((e) => !e.active);
-        for (const e of inactive) {
-            const t = await api.post(q(`/v1/webhook_endpoints/${e.id}/test?wait=10s`), {});
-            if (!dry && t.status !== 'success') {
-                fail(`test delivery to ${e.url} failed (${t.http_status ?? t.error ?? t.status ?? 'no answer'})`, `Fix the receiver, then 'atlas webhooks test ${e.id}' and run golive again.`);
-            }
-            await api.patch(q(`/v1/webhook_endpoints/${e.id}`), { active: true });
-            pass('webhooks', would(`${e.url} tested and activated`, `test and activate ${e.url}`));
-        }
-        if (!inactive.length)
-            pass('webhooks', `${endpoints.length} endpoint(s), none inactive`);
-        // (5) hooks
-        current = 'hooks';
-        const hookPath = '/v1/instance/hooks/before_user_create';
-        const hook = await api.get(hookPath);
-        if (hook.enabled)
-            pass('hooks', 'before_user_create enabled');
-        else if (!hook.url || !hook.signing_secret_set)
-            pass('hooks', 'no hook configured');
-        else {
-            const t = await api.post(q(`${hookPath}/test`), {});
-            if (!dry && !t.ok)
-                fail(`before_user_create test call failed: ${t.error?.message ?? 'no answer'}`, `Fix the endpoint (GET ${hookPath}/calls?status=failed), then run golive again.`);
-            await api.patch(q(hookPath), { enabled: true });
-            pass('hooks', would('before_user_create tested and enabled', 'test and enable before_user_create'));
-        }
-        // (6) preflight + login readiness
-        current = 'preflight';
-        check(await preflightCheck(api));
-        current = 'login_readiness';
-        check(await loginReadinessCheck(api, origin.origin));
-        // (7) integrations: only those the instance declares.
-        current = 'integrations';
-        const referrals = await optional(() => api.get('/v1/instance/referrals'));
-        if (referrals && (referrals.endpoint_url || referrals.connection_id)) {
-            current = 'integrations/referrals';
-            if (!referrals.signing_secret_set)
-                fail('referral connection has no signing secret', "Run 'atlas referrals connect' to finish it.");
-            if (referrals.connection?.last_test?.ok === true)
-                pass(current, 'connected');
-            else {
-                const t = await api.post(q('/v1/instance/referrals/test'), {});
-                if (!dry && !t.ok)
-                    fail(`connection test failed: ${t.error?.message ?? 'no answer'}`, "Run 'atlas referrals status' for details.");
-                pass(current, would('connection tested', 'test the connection'));
-            }
-        }
-        const privacy = await optional(() => api.get('/v1/instance/privacy_integrations'));
-        if (privacy?.preset) {
-            current = 'integrations/privacy';
-            if (!privacy.connected) {
-                fail(`${privacy.preset} is declared but not connected`, 'Finish it in the dashboard, or POST /v1/instance/privacy_integrations/connect with the orchestrator key and completion webhook URL.');
-            }
-            pass(current, `${privacy.preset} connected`);
-        }
-        const identity = (await optional(() => api.get('/v1/instance/integrations')))?.data ?? [];
-        for (const i of identity.filter((x) => x.connected))
-            pass(`integrations/${i.id}`, i.enabled ? 'on' : 'off');
-    }
-    catch (err) {
-        const failed = err instanceof StepFailed
-            ? err
-            : err instanceof backend_1.AtlasApiError
-                ? new StepFailed(current, `API error (HTTP ${err.status})${err.code ? ` [${err.code}]` : ''}: ${err.message}`, 'Check the key has the scopes this step needs, then run golive again.')
-                : null;
-        if (!failed)
-            throw err;
-        results.push({ id: failed.step, ok: false, detail: failed.problem, fix: failed.fix });
-        if (json)
-            (0, output_1.printJson)(ctx.io, { ok: false, dry_run: dry, origin: origin.origin, steps: results });
-        else
-            ctx.io.out(`✗ ${failed.step} — ${failed.problem}\n  fix: ${failed.fix}`);
-        return 1;
-    }
-    if (json)
-        (0, output_1.printJson)(ctx.io, { ok: true, dry_run: dry, origin: origin.origin, steps: results });
-    else if (dry)
-        ctx.io.out('Dry run: nothing was written.');
-    return 0;
-}
-/** A read that is absent on this instance (404) is "not declared". */
-async function optional(read) {
-    try {
-        return await read();
-    }
-    catch (err) {
-        if (err instanceof backend_1.AtlasApiError && err.status === 404)
-            return undefined;
-        throw err;
-    }
-}
-//# sourceMappingURL=golive.js.map

package/dist/commands/golive.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"golive.js","sourceRoot":"","sources":["../../src/commands/golive.ts"],"names":[],"mappings":";;;AAiDA,kCAUC;AAGD,8BAEC;AAED,wCAUC;AAED,kDAYC;AAGD,wCAWC;AAED,oDAWC;AAcD,wBA8JC;AAjSD,gDAAmD;AACnD,kCAA+C;AAG/C,sCAAqC;AACrC,sCAAsC;AACtC,wCAAqC;AACrC,yDAAwD;AACxD,qCAAqC;AAqCrC,iGAAiG;AACpF,QAAA,WAAW,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,CAAU,CAAC;AAE3F,gEAAgE;AAChE,SAAgB,WAAW,CAAC,GAAuB,EAAE,OAAe;IAClE,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,iBAAQ,CAAC,GAAG,OAAO,iDAAiD,CAAC,CAAC;IAC1F,IAAI,CAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAQ,CAAC,wEAAwE,GAAG,IAAI,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,IAAI,iBAAQ,CAAC,kCAAkC,GAAG,IAAI,CAAC,CAAC;IACrH,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,uGAAuG;AACvG,SAAgB,SAAS,CAAC,OAAiB,EAAE,IAAY;IACvD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;AACxF,CAAC;AAEM,KAAK,UAAU,cAAc,CAAC,GAAe;IAClD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAoC,wBAAwB,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAChG,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IACtF,OAAO;QACL,EAAE,EAAE,WAAW;QACf,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/D,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;KAC1D,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,mBAAmB,CAAC,GAAe,EAAE,MAAc;IACvE,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,GAAG,CACrB,0CAA0C,kBAAkB,CAAC,MAAM,CAAC,YAAY,CACjF,CAAC;IACF,IAAI,CAAC,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,MAAM,EAAE,EAAE,CAAC;IACvF,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC;IAC/E,OAAO;QACL,EAAE,EAAE,iBAAiB;QACrB,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,iBAAiB,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,aAAa,GAAG;QAC7F,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,8DAA8D;KAC9G,CAAC;AACJ,CAAC;AAED,oFAAoF;AAC7E,KAAK,UAAU,cAAc,CAAC,GAAe,EAAE,IAAY;IAChE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CAAqB,aAAa,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACvE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,IAAI,EAAE,EAAE,CAAC;IACtF,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;IACzH,OAAO;QACL,EAAE,EAAE,YAAY;QAChB,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,GAAG,IAAI,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,OAAO,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QACtH,GAAG,EAAE,KAAK,CAAC,MAAM,IAAI,wDAAwD,KAAK,CAAC,EAAE,UAAU;KAChG,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,oBAAoB,CAAC,GAAe;IACxD,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CAAwD,6BAA6B,CAAC,CAAC;IAC/G,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,mBAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,mBAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IAC/G,OAAO;QACL,EAAE,EAAE,kBAAkB;QACtB,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,iCAAiC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC7D,GAAG,EAAE,2HAA2H;KACjI,CAAC;AACJ,CAAC;AAED,MAAM,UAAW,SAAQ,KAAK;IAEjB;IACA;IACA;IAHX,YACW,IAAY,EACZ,OAAe,EACf,GAAW;QAEpB,KAAK,CAAC,OAAO,CAAC,CAAC;QAJN,SAAI,GAAJ,IAAI,CAAQ;QACZ,YAAO,GAAP,OAAO,CAAQ;QACf,QAAG,GAAH,GAAG,CAAQ;IAGtB,CAAC;CACF;AAED,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEhD,KAAK,UAAU,MAAM,CAAC,GAAe,EAAE,IAAgB;IAC5D,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,MAAM,MAAM,GAAG,WAAW,CAAC,IAAA,UAAG,EAAC,CAAC,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;IAClC,MAAM,IAAI,GAAG,IAAA,kBAAS,EAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,IAAA,iBAAO,EAAC,GAAG,EAAE,IAAA,qCAAkB,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAChD,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClG,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,OAAO,GAAG,SAAS,CAAC;IAExB,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,MAAc,EAAE,EAAE;QAC1C,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI;YAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,GAAW,EAAS,EAAE;QACnD,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,CAAc,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,OAAe,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,OAAO,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE7F,IAAI,CAAC;QACH,cAAc;QACd,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAyC,aAAa,CAAC,CAAC;QACpF,IAAI,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC,QAAQ;gBAAE,IAAI,CAAC,wBAAwB,MAAM,CAAC,IAAI,+BAA+B,EAAE,mIAAmI,CAAC,CAAC;YACnO,IAAI,CAAC,SAAS,EAAE,mDAAmD,CAAC,CAAC;QACvE,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACtC,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,WAAW,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAA+B,CAAC,CAAC,eAAe,MAAM,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;YACnG,IAAI,GAAG;gBAAE,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,UAAU,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;iBACxD,IAAI,CAAC,GAAG,CAAC,QAAQ;gBAAE,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,yBAAyB,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,cAAc,IAAI,qEAAqE,CAAC,CAAC;iBACzL,CAAC;gBACJ,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;gBAC/B,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,IAAI,WAAW,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,aAAa;QACb,OAAO,GAAG,QAAQ,CAAC;QACnB,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,CAA6B,cAAc,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACrE,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,gCAAgC,EAAE,iEAAiE,CAAC,CAAC;QACzH,MAAM,IAAI,GACR,MAAM,EAAE,MAAM,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YACtD,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE;YAC7C,CAAC,CAAC,MAAM;gBACN,CAAC,CAAC,WAAW,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,EAAE;gBACnD,CAAC,CAAC,QAAS,CAAC;QAClB,MAAM,YAAY,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,mCAAmC,CAAC;QAC3E,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;YACvF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,IAAI,CAAC,GAAG,YAAY,aAAa,GAAG,CAAC,MAAM,EAAE,EAAE,8FAA8F,CAAC,CAAC;YAC5J,MAAM,GAAI,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyB,CAAC,MAAM,CAAC;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,UAAU;gBAAE,MAAM,GAAG,CAAC;YACzC,IAAI,CAAC,GAAG,YAAY,oBAAoB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,kDAAkD,CAAC,CAAC;QACnJ,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC9C,IAAI,CAAC,GAAG,YAAY,kBAAkB,MAAM,IAAI,QAAQ,cAAc,QAAQ,EAAE,EAAE,mHAAmH,CAAC,CAAC;QACzM,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;QAE9B,yBAAyB;QACzB,OAAO,GAAG,oBAAoB,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CACxB,iCAAiC,CAClC,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChH,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;aACnD,IAAI,CAAC,QAAQ;YAAE,IAAI,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAC;aACnE,CAAC;YACJ,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK;gBAAE,IAAI,CAAC,iEAAiE,EAAE,yDAAyD,CAAC,CAAC;YACjK,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,UAAW,CAAC,CAAC,CAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAC1G,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,CAAwB,CAAC,CAAC,iCAAiC,CAAC,EAAE,IAAI,CAAC,CAAC;YACjG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO;gBAAE,IAAI,CAAC,sCAAsC,EAAE,6EAA6E,CAAC,CAAC;YACxJ,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;QAC/D,CAAC;QAED,yFAAyF;QACzF,OAAO,GAAG,UAAU,CAAC;QACrB,MAAM,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,CAAgE,uBAAuB,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;QACrI,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACpD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAA0E,CAAC,CAAC,yBAAyB,CAAC,CAAC,EAAE,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC;YACxJ,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC,oBAAoB,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,IAAI,WAAW,GAAG,EAAE,+CAA+C,CAAC,CAAC,EAAE,yBAAyB,CAAC,CAAC;YAClL,CAAC;YACD,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACtE,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,uBAAuB,EAAE,qBAAqB,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACzF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,IAAI,CAAC,UAAU,EAAE,GAAG,SAAS,CAAC,MAAM,6BAA6B,CAAC,CAAC;QAEzF,YAAY;QACZ,OAAO,GAAG,OAAO,CAAC;QAClB,MAAM,QAAQ,GAAG,uCAAuC,CAAC;QACzD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CAAwE,QAAQ,CAAC,CAAC;QAC5G,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;aACzD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,kBAAkB;YAAE,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;aAC/E,CAAC;YACJ,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAuD,CAAC,CAAC,GAAG,QAAQ,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1G,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE;gBAAE,IAAI,CAAC,wCAAwC,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,WAAW,EAAE,EAAE,yBAAyB,QAAQ,+CAA+C,CAAC,CAAC;YACrL,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,uCAAuC,EAAE,oCAAoC,CAAC,CAAC,CAAC;QACtG,CAAC;QAED,kCAAkC;QAClC,OAAO,GAAG,WAAW,CAAC;QACtB,KAAK,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;QACjC,OAAO,GAAG,iBAAiB,CAAC;QAC5B,KAAK,CAAC,MAAM,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAErD,sDAAsD;QACtD,OAAO,GAAG,cAAc,CAAC;QACzB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CACpC,GAAG,CAAC,GAAG,CACL,wBAAwB,CACzB,CACF,CAAC;QACF,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,YAAY,IAAI,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC;YACrE,OAAO,GAAG,wBAAwB,CAAC;YACnC,IAAI,CAAC,SAAS,CAAC,kBAAkB;gBAAE,IAAI,CAAC,2CAA2C,EAAE,6CAA6C,CAAC,CAAC;YACpI,IAAI,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE,EAAE,KAAK,IAAI;gBAAE,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;iBACxE,CAAC;gBACJ,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAsD,CAAC,CAAC,6BAA6B,CAAC,EAAE,EAAE,CAAC,CAAC;gBACpH,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE;oBAAE,IAAI,CAAC,2BAA2B,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,WAAW,EAAE,EAAE,2CAA2C,CAAC,CAAC;gBACnI,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,CAAC;YACnE,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAgD,mCAAmC,CAAC,CAAC,CAAC;QAClI,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,OAAO,GAAG,sBAAsB,CAAC;YACjC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;gBACvB,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,gCAAgC,EAAE,qIAAqI,CAAC,CAAC;YACjM,CAAC;YACD,IAAI,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,YAAY,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAwE,2BAA2B,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;QACjK,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC9G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GACV,GAAG,YAAY,UAAU;YACvB,CAAC,CAAC,GAAG;YACL,CAAC,CAAC,GAAG,YAAY,uBAAa;gBAC5B,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE,mBAAmB,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,OAAO,EAAE,EAAE,sEAAsE,CAAC;gBACtL,CAAC,CAAC,IAAI,CAAC;QACb,IAAI,CAAC,MAAM;YAAE,MAAM,GAAG,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACtF,IAAI,IAAI;YAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;;YAC3F,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,OAAO,YAAY,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9E,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI;QAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;SAC1F,IAAI,GAAG;QAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAC1D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,sEAAsE;AACtE,KAAK,UAAU,QAAQ,CAAI,IAAsB;IAC/C,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,uBAAa,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/commands/id-accounts.d.ts

@@ -1,13 +0,0 @@
-import { type ParsedArgs } from '../args';
-import type { RunContext } from '../context';
-/**
- * `atlas id-accounts provision|list|rotate|remove --app <app id>`: test and
- * review accounts for a Sign in with Atlas app (a directory reviewer login, CI,
- * a demo). Takes a platform key with `platform:atlas_id_apps:provision`, or a
- * per-app key scoped `atlas_id_apps:<app id>:provision`.
- *
- * The password (yours, via `--password-file`, or one Atlas generates) is
- * returned once. It is written to a 0600 file next to the CLI's other secrets
- * and never printed, except with the explicit `--print-secret` opt-out.
- */
-export declare function idAccounts(ctx: RunContext, args: ParsedArgs): Promise<number>;

package/dist/commands/id-accounts.js

@@ -1,195 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.idAccounts = idAccounts;
-const backend_1 = require("@atlasauth/backend");
-const args_1 = require("../args");
-const errors_1 = require("../errors");
-const output_1 = require("../output");
-const project_1 = require("../project");
-const secrets_1 = require("../secrets");
-const shared_1 = require("./shared");
-const MIN_PASSWORD_LENGTH = 12;
-const COLUMNS = [
-    { header: 'ID', get: (a) => a.id },
-    { header: 'EMAIL', get: (a) => a.email ?? '' },
-    { header: 'LABEL', get: (a) => a.label },
-    { header: 'KIND', get: (a) => a.kind },
-    { header: '2FA', get: (a) => (a.two_factor_exempt ? 'exempt' : 'required') },
-    { header: 'EXPIRES', get: (a) => (a.expires_at ? (a.expired ? `${(0, output_1.fmtTime)(a.expires_at)} (expired)` : (0, output_1.fmtTime)(a.expires_at)) : 'never') },
-    { header: 'LAST SIGN-IN', get: (a) => (a.last_sign_in_at ? (0, output_1.fmtTime)(a.last_sign_in_at) : '') },
-];
-const isPlatformKey = (key) => Boolean(key && (key.startsWith('psk_') || /^atlas_(live|test)_psk_/.test(key)));
-/**
- * The platform key (or a per-app scoped platform key) and API URL:
- * ATLAS_PLATFORM_KEY, else ATLAS_SECRET_KEY when it is a platform key, else the
- * profile's stored platform key.
- */
-function platformAuth(ctx, args) {
-    const file = ctx.config.load();
-    const profile = (0, args_1.str)(args.values, 'profile') || file.active_profile || 'default';
-    const stored = file.profiles[profile];
-    const candidates = [ctx.env.ATLAS_PLATFORM_KEY?.trim(), ctx.env.ATLAS_SECRET_KEY?.trim(), stored?.secret_key];
-    const key = candidates.find(isPlatformKey);
-    if (!key) {
-        throw new errors_1.CliError("id-accounts needs a platform key with the provision scope: platform:atlas_id_apps:provision, or atlas_id_apps:<app id>:provision for one app. Set ATLAS_PLATFORM_KEY, or store one with 'atlas login --secret-key psk_…'.");
-    }
-    return { secretKey: key, apiUrl: (0, shared_1.envApiUrl)(ctx.env) || stored?.api_url || backend_1.DEFAULT_API_URL };
-}
-/** The first non-comment line of a file (or stdin), `NAME=value` or a bare value. */
-function readPasswordFile(ctx, file) {
-    const where = file === '-' ? 'stdin' : file;
-    let text;
-    try {
-        text = ctx.readFile(file === '-' ? '/dev/stdin' : file);
-    }
-    catch {
-        throw new errors_1.CliError(`Could not read the password from ${where}.`);
-    }
-    const line = text.split(/\r?\n/).find((l) => l.trim() && !l.trim().startsWith('#')) ?? '';
-    const m = /^[A-Za-z_][A-Za-z0-9_]*=(.*)$/.exec(line.trim());
-    const password = (m ? m[1] : line).replace(/[\r\n]+$/, '').replace(/^"(.*)"$/, '$1');
-    if (!password)
-        throw new errors_1.CliError(`No password found in ${where}.`);
-    if (password.length < MIN_PASSWORD_LENGTH)
-        throw new errors_1.CliError(`The password in ${where} must be at least ${MIN_PASSWORD_LENGTH} characters.`);
-    return password;
-}
-/** `--expires-at` as the API takes it: epoch ms/seconds stay numeric, anything else is an ISO date. */
-function expiresAt(raw) {
-    if (/^\d+$/.test(raw))
-        return Number(raw);
-    if (Number.isNaN(Date.parse(raw)))
-        throw new errors_1.CliError(`--expires-at must be an ISO 8601 date (2026-12-31) or epoch milliseconds, got '${raw}'.`);
-    return raw;
-}
-/** The response with the password removed: what is safe to print or log. */
-function withoutSecrets(account) {
-    const { password: _p, sealed_password: _s, ...rest } = account;
-    void _p;
-    void _s;
-    return rest;
-}
-/**
- * `atlas id-accounts provision|list|rotate|remove --app <app id>`: test and
- * review accounts for a Sign in with Atlas app (a directory reviewer login, CI,
- * a demo). Takes a platform key with `platform:atlas_id_apps:provision`, or a
- * per-app key scoped `atlas_id_apps:<app id>:provision`.
- *
- * The password (yours, via `--password-file`, or one Atlas generates) is
- * returned once. It is written to a 0600 file next to the CLI's other secrets
- * and never printed, except with the explicit `--print-secret` opt-out.
- */
-async function idAccounts(ctx, args) {
-    const sub = args.positionals[1];
-    const v = args.values;
-    const json = (0, shared_1.wantsJson)(v);
-    const http = () => {
-        const auth = platformAuth(ctx, args);
-        return (0, project_1.httpFor)(ctx, auth);
-    };
-    const appId = () => {
-        const app = (0, args_1.str)(v, 'app');
-        if (!app)
-            throw new errors_1.CliError(`id-accounts ${sub} needs --app <Sign in with Atlas app id>.`);
-        return app;
-    };
-    const base = (app) => `/v1/platform/atlas_id_apps/${encodeURIComponent(app)}/provisioned_accounts`;
-    const accountArg = () => {
-        const id = args.positionals[2];
-        if (!id)
-            throw new errors_1.CliError(`id-accounts ${sub} needs the test account id (see: atlas id-accounts list --app <id>).`);
-        return id;
-    };
-    const deliverPassword = (account, label) => {
-        if (!account.password) {
-            if (account.sealed_password) {
-                ctx.io.err('The password came back sealed to your secret recipient; open it with your key. Nothing was written.');
-            }
-            return undefined;
-        }
-        const entries = {
-            ATLAS_ID_TEST_EMAIL: account.email ?? '',
-            ATLAS_ID_TEST_PASSWORD: account.password,
-        };
-        const io = json ? { out: () => undefined, err: ctx.io.err } : ctx.io;
-        return (0, secrets_1.deliverSecret)({
-            io,
-            env: ctx.env,
-            product: (0, args_1.str)(v, 'product') ?? 'atlasauth',
-            fileName: `id-account-${account.id}.env`,
-            entries,
-            label,
-            printSecret: v['print-secret'] === true,
-            // A rotation always replaces; a fresh account has a fresh id, so nothing to clobber.
-            force: true,
-            comment: `Sign in with Atlas test account ${account.email ?? account.id} (${account.label}). Use it only with the app it was created for.`,
-        }).path;
-    };
-    switch (sub) {
-        case 'list': {
-            const page = await http().get(base(appId()));
-            if (json)
-                (0, output_1.printJson)(ctx.io, page);
-            else {
-                ctx.io.out((0, output_1.renderTable)(COLUMNS, page.data));
-                ctx.io.out(`${page.total} of ${page.limit} test accounts used across your apps.`);
-            }
-            return 0;
-        }
-        case 'provision': {
-            const app = appId();
-            const email = (0, args_1.str)(v, 'email');
-            const label = (0, args_1.str)(v, 'label');
-            if (!email || !label)
-                throw new errors_1.CliError('id-accounts provision needs --email <address> and --label <what it is for, e.g. reviewer>.');
-            const passwordFile = (0, args_1.str)(v, 'password-file');
-            const expires = (0, args_1.str)(v, 'expires-at');
-            const body = {
-                email,
-                label,
-                email_verified: v.unverified === true ? false : true,
-                ...(passwordFile ? { password: readPasswordFile(ctx, passwordFile) } : {}),
-                ...(v['two-factor-exempt'] === true ? { two_factor_exempt: true } : {}),
-                ...(expires ? { expires_at: expiresAt(expires) } : {}),
-            };
-            const created = await http().post(base(app), body);
-            const path = deliverPassword(created, `The password for ${created.email ?? email}`);
-            if (json)
-                (0, output_1.printJson)(ctx.io, { ...withoutSecrets(created), ...(path ? { secret_file: path } : {}) });
-            else {
-                ctx.io.out(`Created ${created.email ?? email} (${created.id}) for app ${app}${created.two_factor_exempt ? ', exempt from two-factor sign-in' : ''}${created.expires_at ? `, expires ${(0, output_1.fmtTime)(created.expires_at)}` : ', never expires'}.`);
-                if (created.two_factor_exempt) {
-                    ctx.io.out('Two-factor exemption: anyone holding this password can sign in to the app. Share it only with the review team.');
-                }
-            }
-            return 0;
-        }
-        case 'rotate': {
-            const app = appId();
-            const id = accountArg();
-            const passwordFile = (0, args_1.str)(v, 'password-file');
-            const rotated = await http().post(`${base(app)}/${encodeURIComponent(id)}/password`, passwordFile ? { password: readPasswordFile(ctx, passwordFile) } : {});
-            const path = deliverPassword(rotated, `The new password for ${rotated.email ?? id}`);
-            if (json)
-                (0, output_1.printJson)(ctx.io, { ...withoutSecrets(rotated), ...(path ? { secret_file: path } : {}) });
-            else
-                ctx.io.out('Existing sessions stay signed in; remove the account to end them.');
-            return 0;
-        }
-        case 'remove': {
-            const app = appId();
-            const id = accountArg();
-            await http().delete(`${base(app)}/${encodeURIComponent(id)}`);
-            if (json)
-                (0, output_1.printJson)(ctx.io, { id, removed: true });
-            else
-                ctx.io.out(`Removed ${id}: the account is deleted and its sessions and grants are revoked.`);
-            return 0;
-        }
-        default:
-            throw new errors_1.CliError(sub
-                ? `Unknown subcommand 'id-accounts ${sub}'. Try: provision, list, rotate, remove.`
-                : 'id-accounts needs a subcommand: provision, list, rotate, remove.');
-    }
-}
-//# sourceMappingURL=id-accounts.js.map

package/dist/commands/id-accounts.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"id-accounts.js","sourceRoot":"","sources":["../../src/commands/id-accounts.ts"],"names":[],"mappings":";;AAqFA,gCA6GC;AAlMD,gDAAyH;AACzH,kCAA+C;AAE/C,sCAAqC;AACrC,sCAAyE;AACzE,wCAAqC;AACrC,wCAA2C;AAC3C,qCAAgD;AAEhD,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B,MAAM,OAAO,GAAwC;IACnD,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;IAClC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;IAC9C,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE;IACxC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;IACtC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE;IAC5E,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAA,gBAAO,EAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,IAAA,gBAAO,EAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;IACxI,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAA,gBAAO,EAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;CAC9F,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,GAAuB,EAAiB,EAAE,CAC/D,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAElF;;;;GAIG;AACH,SAAS,YAAY,CAAC,GAAe,EAAE,IAAgB;IACrD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,cAAc,IAAI,SAAS,CAAC;IAChF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IAC9G,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,iBAAQ,CAChB,2NAA2N,CAC5N,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,EAAE,OAAO,IAAI,yBAAe,EAAE,CAAC;AAC9F,CAAC;AAED,qFAAqF;AACrF,SAAS,gBAAgB,CAAC,GAAe,EAAE,IAAY;IACrD,MAAM,KAAK,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAQ,CAAC,oCAAoC,KAAK,GAAG,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1F,MAAM,CAAC,GAAG,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACtF,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,iBAAQ,CAAC,wBAAwB,KAAK,GAAG,CAAC,CAAC;IACpE,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB;QAAE,MAAM,IAAI,iBAAQ,CAAC,mBAAmB,KAAK,qBAAqB,mBAAmB,cAAc,CAAC,CAAC;IAC9I,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,uGAAuG;AACvG,SAAS,SAAS,CAAC,GAAW;IAC5B,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,iBAAQ,CAAC,kFAAkF,GAAG,IAAI,CAAC,CAAC;IACjJ,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4EAA4E;AAC5E,SAAS,cAAc,CAAC,OAAkC;IACxD,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC/D,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,CAAC;IACR,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,UAAU,CAAC,GAAe,EAAE,IAAgB;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,MAAM,IAAI,GAAG,IAAA,kBAAS,EAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACrC,OAAO,IAAA,iBAAO,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,GAAG,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,iBAAQ,CAAC,eAAe,GAAG,2CAA2C,CAAC,CAAC;QAC5F,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,8BAA8B,kBAAkB,CAAC,GAAG,CAAC,uBAAuB,CAAC;IAC3G,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,MAAM,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,iBAAQ,CAAC,eAAe,GAAG,sEAAsE,CAAC,CAAC;QACtH,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,CAAC,OAAkC,EAAE,KAAa,EAAsB,EAAE;QAChG,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;gBAC5B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,qGAAqG,CAAC,CAAC;YACpH,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,OAAO,GAA2B;YACtC,mBAAmB,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;YACxC,sBAAsB,EAAE,OAAO,CAAC,QAAQ;SACzC,CAAC;QACF,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACrE,OAAO,IAAA,uBAAa,EAAC;YACnB,EAAE;YACF,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,OAAO,EAAE,IAAA,UAAG,EAAC,CAAC,EAAE,SAAS,CAAC,IAAI,WAAW;YACzC,QAAQ,EAAE,cAAc,OAAO,CAAC,EAAE,MAAM;YACxC,OAAO;YACP,KAAK;YACL,WAAW,EAAE,CAAC,CAAC,cAAc,CAAC,KAAK,IAAI;YACvC,qFAAqF;YACrF,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,mCAAmC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK,iDAAiD;SAC3I,CAAC,CAAC,IAAI,CAAC;IACV,CAAC,CAAC;IAEF,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,IAAI,EAAE,CAAC,GAAG,CAAgC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5E,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;iBAC7B,CAAC;gBACJ,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAA,oBAAW,EAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC5C,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,uCAAuC,CAAC,CAAC;YACpF,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9B,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,iBAAQ,CAAC,4FAA4F,CAAC,CAAC;YACvI,MAAM,YAAY,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,eAAe,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,YAAY,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG;gBACX,KAAK;gBACL,KAAK;gBACL,cAAc,EAAE,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;gBACpD,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC,IAAI,CAA4B,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;YAC9E,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,EAAE,oBAAoB,OAAO,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC,CAAC;YACpF,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;iBAC/F,CAAC;gBACJ,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,WAAW,OAAO,CAAC,KAAK,IAAI,KAAK,KAAK,OAAO,CAAC,EAAE,aAAa,GAAG,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,IAAA,gBAAO,EAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,GAAG,CAChO,CAAC;gBACF,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;oBAC9B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gHAAgH,CAAC,CAAC;gBAC/H,CAAC;YACH,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;YACpB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YACxB,MAAM,YAAY,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,eAAe,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC,IAAI,CAA4B,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvL,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,EAAE,wBAAwB,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;YACrF,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;;gBAC/F,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;YACrF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;YACpB,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;YACxB,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9D,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;;gBAC9C,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,mEAAmE,CAAC,CAAC;YAClG,OAAO,CAAC,CAAC;QACX,CAAC;QACD;YACE,MAAM,IAAI,iBAAQ,CAChB,GAAG;gBACD,CAAC,CAAC,mCAAmC,GAAG,0CAA0C;gBAClF,CAAC,CAAC,kEAAkE,CACvE,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/commands/import-better-auth.d.ts

@@ -1,3 +0,0 @@
-import { type ParsedArgs } from '../args';
-import type { RunContext } from '../context';
-export declare function importBetterAuthBundle(ctx: RunContext, args: ParsedArgs): Promise<number>;