@atlasauth/cli 0.24.0 → 0.25.0

package/dist/migrate/export/frameworks/devise.js

@@ -1,218 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEVISE_EXPORT_SCRIPT = void 0;
-exports.exportDevise = exportDevise;
-const tables_1 = require("./tables");
-function exportDevise(tables, options = {}) {
-    const out = new tables_1.FrameworkExport();
-    const now = (options.now ?? new Date()).getTime();
-    const config = tables.rows('devise_config')[0] ?? {};
-    const pepper = (0, tables_1.text)(config.pepper);
-    const modules = new Set(String(config.modules ?? '').split(/[\s,]+/).filter(Boolean));
-    const confirmable = modules.size ? modules.has('confirmable') : undefined;
-    out.manifest.sourceVersion = (0, tables_1.text)(config.devise_version) ? `devise ${(0, tables_1.text)(config.devise_version)}` : 'devise';
-    if (pepper)
-        out.manifest.settings = { pepper_set: true };
-    const users = tables.find(...(options.usersTable ? [options.usersTable] : ['users', 'user', 'accounts', 'admins']));
-    if (!users) {
-        out.warn('No users rows found (run the Rails export script with your Devise model).');
-        return out;
-    }
-    const ids = new Set();
-    const providers = new Set();
-    let encryptable = 0;
-    let mfa = 0;
-    for (const row of users.rows) {
-        const id = (0, tables_1.text)((0, tables_1.col)(row, 'id'));
-        const email = (0, tables_1.text)((0, tables_1.col)(row, 'email'))?.toLowerCase();
-        if (!id || !email) {
-            out.omit('user', 'row without an id or email');
-            continue;
-        }
-        const encrypted = (0, tables_1.text)((0, tables_1.col)(row, 'encrypted_password'));
-        let password;
-        if (encrypted && /^\$2[aby]\$\d{2}\$[./A-Za-z0-9]{53}$/.test(encrypted)) {
-            password = pepper ? { algorithm: 'bcrypt_pepper', hash: encrypted, params: { pepper } } : { algorithm: 'bcrypt', hash: encrypted };
-        }
-        else if (encrypted)
-            encryptable++;
-        const confirmedAt = (0, tables_1.col)(row, 'confirmed_at');
-        const verified = confirmable === false || (confirmable === undefined && !('confirmed_at' in row))
-            ? options.trustUnconfirmable === true
-            : Boolean(confirmedAt);
-        const name = (0, tables_1.text)((0, tables_1.col)(row, 'name', 'full_name'));
-        const roles = new Set();
-        if ((0, tables_1.bool)((0, tables_1.col)(row, 'admin', 'is_admin')))
-            roles.add('admin');
-        const role = (0, tables_1.text)((0, tables_1.col)(row, 'role'));
-        if (role)
-            roles.add(role);
-        ids.add(id);
-        out.add('user', {
-            id,
-            emails: [{ email, verified, primary: true }],
-            username: (0, tables_1.text)((0, tables_1.col)(row, 'username')),
-            name,
-            first_name: (0, tables_1.text)((0, tables_1.col)(row, 'first_name')) ?? (0, tables_1.splitName)(name).first_name,
-            last_name: (0, tables_1.text)((0, tables_1.col)(row, 'last_name')) ?? (0, tables_1.splitName)(name).last_name,
-            password,
-            locked: Boolean((0, tables_1.col)(row, 'locked_at')) || undefined,
-            roles: roles.size ? [...roles] : undefined,
-            created_at: (0, tables_1.time)((0, tables_1.col)(row, 'created_at')),
-            last_sign_in_at: (0, tables_1.time)((0, tables_1.col)(row, 'current_sign_in_at', 'last_sign_in_at')),
-            private_metadata: (0, tables_1.text)((0, tables_1.col)(row, 'unconfirmed_email')) ? { unconfirmed_email: (0, tables_1.text)((0, tables_1.col)(row, 'unconfirmed_email')) } : undefined,
-        });
-        // omniauth's single-provider convention: provider + uid columns on the user.
-        const provider = (0, tables_1.text)((0, tables_1.col)(row, 'provider'));
-        const uid = (0, tables_1.text)((0, tables_1.col)(row, 'uid'));
-        if (provider && uid && provider !== 'email') {
-            providers.add(provider);
-            out.add('identity', { user_id: id, provider, provider_user_id: uid, kind: 'oauth' });
-        }
-        // devise-two-factor.
-        const secret = (0, tables_1.text)((0, tables_1.col)(row, 'otp_secret'));
-        if (secret && ((0, tables_1.bool)((0, tables_1.col)(row, 'otp_required_for_login')) || !('otp_required_for_login' in row))) {
-            mfa++;
-            out.add('mfa_factor', { user_id: id, type: 'totp', secret_base32: secret.toUpperCase(), digits: 6, period: 30, algorithm: 'SHA1', verified: true });
-            const codes = backupCodes((0, tables_1.col)(row, 'otp_backup_codes'));
-            if (codes.length) {
-                out.add('mfa_factor', {
-                    user_id: id,
-                    type: 'backup_codes',
-                    backup_code_hashes: codes.map((hash) => pepper ? { algorithm: 'bcrypt_pepper', hash, params: { pepper } } : { algorithm: 'bcrypt', hash }),
-                });
-            }
-        }
-    }
-    if (encryptable)
-        out.warn(`${encryptable} encrypted_password value(s) are not bcrypt (devise-encryptable): those users reset their password or migrate lazily.`);
-    if (mfa)
-        out.warn(`${mfa} devise-two-factor TOTP secret(s) carried over; authenticator apps keep working.`);
-    for (const row of tables.rows('identities', 'authentications', 'user_identities', 'omniauth_identities')) {
-        const userId = (0, tables_1.text)((0, tables_1.col)(row, 'user_id'));
-        const provider = (0, tables_1.text)((0, tables_1.col)(row, 'provider'));
-        const uid = (0, tables_1.text)((0, tables_1.col)(row, 'uid', 'provider_uid'));
-        if (!userId || !provider || !uid || !ids.has(userId)) {
-            out.omit('identity', 'identity row without a known user, provider or uid');
-            continue;
-        }
-        providers.add(provider);
-        out.add('identity', { user_id: userId, provider, provider_user_id: uid, kind: 'oauth', email: (0, tables_1.text)((0, tables_1.col)(row, 'email')) });
-    }
-    out.manifest.providers = [...providers].sort();
-    // rolify: roles(id, name, resource_type, resource_id) + users_roles(user_id, role_id). Global roles only.
-    const roleNames = new Map();
-    for (const r of tables.rows('roles')) {
-        const rid = (0, tables_1.text)((0, tables_1.col)(r, 'id'));
-        const name = (0, tables_1.text)((0, tables_1.col)(r, 'name'));
-        if (rid && name && !(0, tables_1.text)((0, tables_1.col)(r, 'resource_type')))
-            roleNames.set(rid, name);
-    }
-    if (roleNames.size) {
-        for (const name of new Set(roleNames.values()))
-            out.add('role', { key: name, name, scope: 'app' });
-        const extra = new Map();
-        for (const ur of tables.rows('users_roles')) {
-            const uid = (0, tables_1.text)((0, tables_1.col)(ur, 'user_id'));
-            const name = roleNames.get((0, tables_1.text)((0, tables_1.col)(ur, 'role_id')) ?? '');
-            if (!uid || !name || !ids.has(uid))
-                continue;
-            const set = extra.get(uid) ?? new Set();
-            set.add(name);
-            extra.set(uid, set);
-        }
-        for (const user of out.list('user')) {
-            const more = extra.get(user.id);
-            if (more)
-                user.roles = [...new Set([...(user.roles ?? []), ...more])];
-        }
-        const scoped = tables.rows('roles').length - roleNames.size;
-        if (scoped > 0)
-            out.warn(`${scoped} rolify role(s) scoped to a resource were not carried: model them as Atlas organization roles or permissions.`);
-    }
-    // activerecord-session_store rows, as the export script decoded them.
-    if (options.sessions !== false) {
-        for (const row of tables.rows('sessions')) {
-            const raw = (0, tables_1.text)((0, tables_1.col)(row, 'session_id'));
-            const userId = (0, tables_1.text)((0, tables_1.col)(row, 'user_id'));
-            const updated = (0, tables_1.timeMs)((0, tables_1.col)(row, 'expires_at')) ?? ((0, tables_1.timeMs)((0, tables_1.col)(row, 'updated_at')) !== undefined ? (0, tables_1.timeMs)((0, tables_1.col)(row, 'updated_at')) + Number(config.session_ttl_seconds ?? 1209600) * 1000 : undefined);
-            if (!raw || !userId || !ids.has(userId) || updated === undefined) {
-                out.omit('session', 'session row without an id, a known user or an expiry');
-                continue;
-            }
-            if (updated <= now) {
-                out.omit('session', 'expired');
-                continue;
-            }
-            // Rack stores the PRIVATE id `2::<sha256 hex of the cookie's public id>`.
-            const tokenHash = /^2::[0-9a-f]{64}$/.test(raw) ? raw.slice(3) : (0, tables_1.sha256Hex)(raw);
-            out.add('session', { id: tokenHash.slice(0, 32), user_id: userId, token_hash: tokenHash, expires_at: new Date(updated).toISOString() });
-        }
-    }
-    out.manifest.settings = {
-        ...(out.manifest.settings ?? {}),
-        session_store: (0, tables_1.text)(config.session_store) ?? 'cookie_store',
-        session_cookie: (0, tables_1.text)(config.session_key) ?? null,
-    };
-    return out;
-}
-function backupCodes(v) {
-    const list = Array.isArray(v) ? v : typeof v === 'string' ? (v.trim().startsWith('[') ? JSON.parse(v) : v.replace(/^\{|\}$/g, '').split(',')) : [];
-    return list
-        .map((c) => String(c).replace(/^"|"$/g, '').trim())
-        .filter((c) => /^\$2[aby]\$\d{2}\$[./A-Za-z0-9]{53}$/.test(c));
-}
-/**
- * The Rails runner script that streams a Devise app's rows as NDJSON
- * (`{"table": …, "row": {…}}`), straight into `atlas migrate export devise
- * --file -`, so decrypted secrets only ever travel through the pipe:
- *
- *   bin/rails runner atlas_export.rb | npx atlas migrate devise export --file -
- */
-exports.DEVISE_EXPORT_SCRIPT = `# Atlas export for a Devise app. Run: bin/rails runner atlas_export.rb [ModelName]
-require "json"
-
-model = (ARGV[0] || "User").constantize
-emit = ->(table, row) { $stdout.puts({ table: table, row: row }.to_json) }
-
-session_key = Rails.application.config.session_options[:key] rescue nil
-emit.call("devise_config", {
-  devise_version: Devise::VERSION,
-  pepper: Devise.pepper,
-  stretches: Devise.stretches,
-  modules: model.devise_modules.join(","),
-  session_store: Rails.application.config.session_store.to_s.demodulize.underscore,
-  session_key: session_key,
-  session_ttl_seconds: (Rails.application.config.session_options[:expire_after] || 1209600).to_i,
-})
-
-attrs = model.column_names - %w[encrypted_otp_secret encrypted_otp_secret_iv encrypted_otp_secret_salt]
-model.find_each(batch_size: 1000) do |u|
-  row = attrs.index_with { |c| u.read_attribute(c) }
-  # devise-two-factor: read the secret through the model so Rails decrypts it.
-  row["otp_secret"] = u.otp_secret if u.respond_to?(:otp_secret)
-  emit.call(model.table_name, row)
-end
-
-%w[Identity Authentication].each do |name|
-  next unless Object.const_defined?(name)
-  klass = name.constantize
-  next unless klass < ActiveRecord::Base
-  klass.find_each { |i| emit.call(klass.table_name, i.attributes.slice("user_id", "provider", "uid", "email")) }
-end
-
-if Object.const_defined?(:Role) && ActiveRecord::Base.connection.table_exists?("users_roles")
-  Role.find_each { |r| emit.call("roles", r.attributes.slice("id", "name", "resource_type", "resource_id")) }
-  ActiveRecord::Base.connection.select_all("SELECT user_id, role_id FROM users_roles").each { |r| emit.call("users_roles", r) }
-end
-
-if defined?(ActiveRecord::SessionStore::Session)
-  scope = "warden.user.#{Devise::Mapping.find_scope!(model)}.key"
-  ActiveRecord::SessionStore::Session.find_each do |s|
-    entry = s.data[scope] rescue nil
-    next unless entry
-    emit.call("sessions", { session_id: s.session_id, user_id: Array(entry[0]).first, updated_at: s.updated_at })
-  end
-end
-`;
-//# sourceMappingURL=devise.js.map

package/dist/migrate/export/frameworks/devise.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"devise.js","sourceRoot":"","sources":["../../../../src/migrate/export/frameworks/devise.ts"],"names":[],"mappings":";;;AA0CA,oCAkJC;AA5LD,qCAUkB;AAgClB,SAAgB,YAAY,CAAC,MAAc,EAAE,UAA+B,EAAE;IAC5E,MAAM,GAAG,GAAG,IAAI,wBAAe,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACtF,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,GAAG,CAAC,QAAQ,CAAC,aAAa,GAAG,IAAA,aAAI,EAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,IAAA,aAAI,EAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9G,IAAI,MAAM;QAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAEzD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACpH,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,GAAG,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;QACtF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACrD,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,4BAA4B,CAAC,CAAC;YAC/C,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAC;QACvD,IAAI,QAA0F,CAAC;QAC/F,IAAI,SAAS,IAAI,sCAAsC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACxE,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACrI,CAAC;aAAM,IAAI,SAAS;YAAE,WAAW,EAAE,CAAC;QACpC,MAAM,WAAW,GAAG,IAAA,YAAG,EAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,WAAW,KAAK,KAAK,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,CAAC,cAAc,IAAI,GAAG,CAAC,CAAC;YAC/F,CAAC,CAAC,OAAO,CAAC,kBAAkB,KAAK,IAAI;YACrC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACzB,MAAM,IAAI,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,IAAI,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QACpC,IAAI,IAAI;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACZ,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE;YACd,EAAE;YACF,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC5C,QAAQ,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YACpC,IAAI;YACJ,UAAU,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC,IAAI,IAAA,kBAAS,EAAC,IAAI,CAAC,CAAC,UAAU;YACtE,SAAS,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC,IAAI,IAAA,kBAAS,EAAC,IAAI,CAAC,CAAC,SAAS;YACnE,QAAQ;YACR,MAAM,EAAE,OAAO,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,WAAW,CAAC,CAAC,IAAI,SAAS;YACnD,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS;YAC1C,UAAU,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YACxC,eAAe,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,oBAAoB,EAAE,iBAAiB,CAAC,CAAC;YACxE,gBAAgB,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;SAC/H,CAAC,CAAC;QACH,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAClC,IAAI,QAAQ,IAAI,GAAG,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC5C,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,qBAAqB;QACrB,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;QAC5C,IAAI,MAAM,IAAI,CAAC,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC,IAAI,CAAC,CAAC,wBAAwB,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC;YAC/F,GAAG,EAAE,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACpJ,MAAM,KAAK,GAAG,WAAW,CAAC,IAAA,YAAG,EAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC,CAAC;YACxD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACjB,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE;oBACpB,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE,cAAc;oBACpB,kBAAkB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACrC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAClG;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,WAAW;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,WAAW,uHAAuH,CAAC,CAAC;IACjK,IAAI,GAAG;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,kFAAkF,CAAC,CAAC;IAE5G,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACzG,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,oDAAoD,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3H,CAAC;IACD,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAE/C,0GAA0G;IAC1G,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAClC,IAAI,GAAG,IAAI,IAAI,IAAI,CAAC,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,CAAC,EAAE,eAAe,CAAC,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACnG,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;QAC7C,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,EAAE,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC7C,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YAChD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACd,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACtB,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChC,IAAI,IAAI;gBAAE,IAAI,CAAC,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC;QAC5D,IAAI,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,+GAA+G,CAAC,CAAC;IACrJ,CAAC;IAED,sEAAsE;IACtE,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC/B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,MAAM,GAAG,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC;YACzC,MAAM,OAAO,GAAG,IAAA,eAAM,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,IAAA,eAAM,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAA,eAAM,EAAC,IAAA,YAAG,EAAC,GAAG,EAAE,YAAY,CAAC,CAAE,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACtM,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBACjE,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,sDAAsD,CAAC,CAAC;gBAC5E,SAAS;YACX,CAAC;YACD,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,0EAA0E;YAC1E,MAAM,SAAS,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAS,EAAC,GAAG,CAAC,CAAC;YAChF,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC1I,CAAC;IACH,CAAC;IACD,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG;QACtB,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;QAChC,aAAa,EAAE,IAAA,aAAI,EAAC,MAAM,CAAC,aAAa,CAAC,IAAI,cAAc;QAC3D,cAAc,EAAE,IAAA,aAAI,EAAC,MAAM,CAAC,WAAW,CAAC,IAAI,IAAI;KACjD,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,CAAU;IAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAe,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClK,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;SAClD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;GAMG;AACU,QAAA,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6CnC,CAAC"}

package/dist/migrate/export/frameworks/django.d.ts

@@ -1,45 +0,0 @@
-import { FrameworkExport, type Row, type Tables } from './tables';
-/**
- * Django (django.contrib.auth, django-allauth) → canonical records, from
- * `manage.py dumpdata` JSON (`[{ "model", "pk", "fields" }]`) — or the export
- * script ({@link DJANGO_EXPORT_SCRIPT}), which runs the same dump inside the
- * app and adds what only the app's own code can produce: allauth TOTP secrets
- * through the MFA adapter's `decrypt`, and the unused recovery codes.
- *
- *   auth.user (or your AUTH_USER_MODEL) → user: the `password` column verbatim
- *       (pbkdf2_sha256 / argon2 / bcrypt_sha256 / scrypt / legacy md5+sha1 —
- *       every Django hasher Atlas verifies); `!`-prefixed unusable passwords are
- *       dropped; is_active=false → banned; is_staff / is_superuser and groups →
- *       app roles
- *   account.emailaddress → every address with its verified / primary flags
- *   socialaccount.socialaccount (+ socialtoken) → identity
- *   mfa.authenticator → totp, recovery codes (script), WebAuthn passkeys
- *   sessions.session (database backend) → session (sha256 of the session key)
- */
-export interface DjangoExportOptions {
-    /** `app_label.model` of AUTH_USER_MODEL (detected: a model with a `password` field and `username` or `email`). */
-    userModel?: string;
-    /** The WebAuthn RP id allauth registered passkeys against. */
-    rpId?: string;
-    oauthTokens?: boolean;
-    sessions?: boolean;
-    /** Treat users.email as verified when allauth is absent. Default false. */
-    trustEmails?: boolean;
-    now?: Date;
-}
-export declare function exportDjango(tables: Tables, options?: DjangoExportOptions): FrameworkExport;
-/**
- * Decode `django_session.session_data` without the SECRET_KEY (the rows come
- * from the app's own database): Django ≥ 3.1 `signing.dumps` (`payload:ts:sig`,
- * payload zlib-compressed when it starts with `.`), and the pre-3.1 form,
- * base64(`<hash>:<json>`).
- */
-export declare function decodeSessionData(raw: string): Row | null;
-/**
- * The export script, run inside the Django app so allauth's own code decrypts
- * TOTP secrets and lists the unused recovery codes; it streams NDJSON straight
- * into the CLI:
- *
- *   python manage.py shell < atlas_export.py | npx atlas migrate django export --file -
- */
-export declare const DJANGO_EXPORT_SCRIPT = "# Atlas export for a Django app (django.contrib.auth + django-allauth).\nimport io, json, sys\nfrom django.apps import apps\nfrom django.conf import settings\nfrom django.core.management import call_command\n\ndef emit(table, row):\n    sys.stdout.write(json.dumps({\"table\": table, \"row\": row}, default=str) + \"\\n\")\n\nlabels = [settings.AUTH_USER_MODEL, \"auth.group\", \"auth.permission\"]\nfor label in [\"account.emailaddress\", \"socialaccount.socialaccount\", \"socialaccount.socialtoken\", \"mfa.authenticator\", \"sessions.session\"]:\n    try:\n        apps.get_model(label)\n        labels.append(label)\n    except (LookupError, ValueError):\n        pass\n\nbuf = io.StringIO()\ncall_command(\"dumpdata\", *labels, format=\"json\", stdout=buf)\nfor obj in json.loads(buf.getvalue()):\n    emit(\"dumpdata\", obj)\n\ntry:\n    from allauth.mfa.models import Authenticator\n    from allauth.mfa.adapter import get_adapter\nexcept ImportError:\n    Authenticator = None\n\nif Authenticator is not None:\n    try:\n        from allauth.mfa.recovery_codes.internal.auth import RecoveryCodes\n    except ImportError:\n        try:\n            from allauth.mfa.recovery_codes import RecoveryCodes\n        except ImportError:\n            RecoveryCodes = None\n    adapter = get_adapter()\n    for a in Authenticator.objects.all():\n        if a.type == \"totp\":\n            emit(\"mfa_secrets\", {\"authenticator_id\": a.pk, \"secret\": adapter.decrypt(a.data[\"secret\"])})\n        elif a.type == \"recovery_codes\" and RecoveryCodes is not None:\n            emit(\"mfa_secrets\", {\"authenticator_id\": a.pk, \"codes\": RecoveryCodes(a).get_unused_codes()})\n";

package/dist/migrate/export/frameworks/django.js

@@ -1,315 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DJANGO_EXPORT_SCRIPT = void 0;
-exports.exportDjango = exportDjango;
-exports.decodeSessionData = decodeSessionData;
-const node_zlib_1 = require("node:zlib");
-const tables_1 = require("./tables");
-const webauthn_1 = require("./webauthn");
-function fixtures(tables) {
-    const byModel = new Map();
-    for (const name of tables.names()) {
-        for (const row of tables.rows(name)) {
-            const model = (0, tables_1.text)(row.model)?.toLowerCase();
-            const fields = (0, tables_1.json)(row.fields);
-            if (!model || !fields)
-                continue;
-            const list = byModel.get(model) ?? [];
-            list.push({ model, pk: row.pk, fields });
-            byModel.set(model, list);
-        }
-    }
-    return byModel;
-}
-function exportDjango(tables, options = {}) {
-    const out = new tables_1.FrameworkExport();
-    const now = (options.now ?? new Date()).getTime();
-    const fx = fixtures(tables);
-    const userModel = options.userModel?.toLowerCase() ??
-        (fx.has('auth.user')
-            ? 'auth.user'
-            : [...fx.keys()].find((m) => {
-                const f = fx.get(m)[0].fields;
-                return 'password' in f && ('username' in f || 'email' in f) && 'last_login' in f;
-            }));
-    if (!userModel || !fx.has(userModel)) {
-        out.warn('No user model rows found: dump auth.user (or your AUTH_USER_MODEL) with manage.py dumpdata.');
-        return out;
-    }
-    // Groups → app roles (permission codenames when auth.permission was dumped).
-    const permissions = new Map();
-    for (const p of fx.get('auth.permission') ?? []) {
-        const codename = (0, tables_1.text)(p.fields.codename);
-        if (codename)
-            permissions.set(String(p.pk), codename);
-    }
-    const groups = new Map();
-    for (const g of fx.get('auth.group') ?? []) {
-        const name = (0, tables_1.text)(g.fields.name);
-        if (!name)
-            continue;
-        groups.set(String(g.pk), name);
-        const perms = (Array.isArray(g.fields.permissions) ? g.fields.permissions : [])
-            .map((pk) => (Array.isArray(pk) ? (0, tables_1.text)(pk[0]) : permissions.get(String(pk))))
-            .filter((p) => Boolean(p));
-        out.add('role', { key: name, name, scope: 'app', permissions: perms.length ? perms : undefined });
-    }
-    const emails = new Map();
-    for (const e of fx.get('account.emailaddress') ?? []) {
-        const uid = (0, tables_1.text)(e.fields.user);
-        const email = (0, tables_1.text)(e.fields.email)?.toLowerCase();
-        if (!uid || !email)
-            continue;
-        const list = emails.get(uid) ?? [];
-        list.push({ email, verified: (0, tables_1.bool)(e.fields.verified), primary: (0, tables_1.bool)(e.fields.primary) });
-        emails.set(uid, list);
-    }
-    const allauth = fx.has('account.emailaddress');
-    const ids = new Set();
-    let unusable = 0;
-    for (const u of fx.get(userModel)) {
-        const id = (0, tables_1.text)(u.pk);
-        if (!id)
-            continue;
-        const f = u.fields;
-        const email = (0, tables_1.text)(f.email)?.toLowerCase();
-        const list = emails.get(id) ?? (email ? [{ email, verified: options.trustEmails === true, primary: true }] : []);
-        const username = (0, tables_1.text)(f.username);
-        if (!list.length && !username) {
-            out.omit('user', 'no email or username');
-            continue;
-        }
-        const digest = (0, tables_1.text)(f.password);
-        const usable = Boolean(digest) && !digest.startsWith('!');
-        if (!usable && digest)
-            unusable++;
-        const roles = (Array.isArray(f.groups) ? f.groups : [])
-            .map((g) => (Array.isArray(g) ? (0, tables_1.text)(g[0]) : groups.get(String(g))))
-            .filter((g) => Boolean(g));
-        if ((0, tables_1.bool)(f.is_superuser))
-            roles.push('superuser');
-        if ((0, tables_1.bool)(f.is_staff))
-            roles.push('staff');
-        const active = f.is_active === undefined ? true : (0, tables_1.bool)(f.is_active);
-        ids.add(id);
-        out.add('user', {
-            id,
-            emails: list,
-            username,
-            first_name: (0, tables_1.text)(f.first_name),
-            last_name: (0, tables_1.text)(f.last_name),
-            password: usable ? { algorithm: 'auto', hash: digest } : undefined,
-            roles: roles.length ? [...new Set(roles)] : undefined,
-            banned: active ? undefined : true,
-            ban_reason: active ? undefined : 'is_active was false in Django',
-            created_at: (0, tables_1.time)(f.date_joined),
-            last_sign_in_at: (0, tables_1.time)(f.last_login),
-        });
-    }
-    if (unusable)
-        out.warn(`${unusable} user(s) had an unusable password (social-only or set_unusable_password): they sign in through their identities.`);
-    if (!allauth)
-        out.warn('django-allauth email addresses were not in the dump: email verification state comes from --trust-emails.');
-    for (const key of ['superuser', 'staff']) {
-        const used = out.list('user').some((u) => u.roles?.includes(key));
-        if (used && !out.list('role').some((r) => r.key === key))
-            out.add('role', { key, name: key, scope: 'app' });
-    }
-    // Social accounts (+ tokens).
-    const tokens = new Map();
-    for (const t of fx.get('socialaccount.socialtoken') ?? []) {
-        const account = (0, tables_1.text)(t.fields.account);
-        if (account)
-            tokens.set(account, t.fields);
-    }
-    const providers = new Set();
-    for (const s of fx.get('socialaccount.socialaccount') ?? []) {
-        const uid = (0, tables_1.text)(s.fields.user);
-        const provider = (0, tables_1.text)(s.fields.provider);
-        const subject = (0, tables_1.text)(s.fields.uid);
-        if (!uid || !provider || !subject || !ids.has(uid)) {
-            out.omit('identity', 'social account without a known user, provider or uid');
-            continue;
-        }
-        providers.add(provider);
-        const token = tokens.get(String(s.pk));
-        const extra = (0, tables_1.json)(s.fields.extra_data);
-        out.add('identity', {
-            user_id: uid,
-            provider,
-            provider_user_id: subject,
-            kind: provider === 'openid_connect' || provider === 'saml' ? (provider === 'saml' ? 'saml' : 'oidc') : 'oauth',
-            email: (0, tables_1.text)(extra?.email),
-            profile: extra,
-            ...(options.oauthTokens && token
-                ? { access_token: (0, tables_1.text)(token.token), refresh_token: (0, tables_1.text)(token.token_secret), expires_at: (0, tables_1.time)(token.expires_at) }
-                : {}),
-        });
-    }
-    out.manifest.providers = [...providers].sort();
-    // allauth MFA. The script's decrypted extras win over the dump's raw data.
-    const extras = tables.rows('mfa_secrets');
-    const extraBy = new Map(extras.map((r) => [`${(0, tables_1.text)(r.authenticator_id)}`, r]));
-    const rawPasskeys = [];
-    for (const a of fx.get('mfa.authenticator') ?? []) {
-        const uid = (0, tables_1.text)(a.fields.user);
-        const type = (0, tables_1.text)(a.fields.type);
-        const data = (0, tables_1.json)(a.fields.data) ?? {};
-        if (!uid || !ids.has(uid))
-            continue;
-        const extra = extraBy.get(String(a.pk));
-        if (type === 'totp') {
-            const secret = (0, tables_1.text)(extra?.secret) ?? (0, tables_1.text)(data.secret);
-            if (!secret || !/^[A-Z2-7]+=*$/i.test(secret)) {
-                out.omit('mfa_factor', 'TOTP secret encrypted by a custom MFA adapter: run the export script so the adapter decrypts it');
-                continue;
-            }
-            out.add('mfa_factor', { user_id: uid, type: 'totp', secret_base32: secret.toUpperCase(), digits: 6, period: 30, algorithm: 'SHA1', verified: true, created_at: (0, tables_1.time)(a.fields.created_at) });
-        }
-        else if (type === 'recovery_codes') {
-            const codes = Array.isArray(extra?.codes) ? extra.codes.map(String) : [];
-            if (!codes.length) {
-                out.omit('mfa_factor', 'recovery codes are derived from an encrypted seed: run the export script to carry the unused ones');
-                continue;
-            }
-            out.add('mfa_factor', { user_id: uid, type: 'backup_codes', backup_codes: codes });
-        }
-        else if (type === 'webauthn') {
-            rawPasskeys.push(a);
-        }
-    }
-    if (rawPasskeys.length && !options.rpId) {
-        out.omit('passkey', 'no RP id given (--rp-id): a passkey only works on the domain it was registered for', rawPasskeys.length);
-    }
-    for (const a of options.rpId ? rawPasskeys : []) {
-        const data = (0, tables_1.json)(a.fields.data) ?? {};
-        const credential = (0, tables_1.json)(data.credential);
-        const response = (0, tables_1.json)(credential?.response);
-        const parsed = typeof response?.attestationObject === 'string' ? (0, webauthn_1.parseAttestationObject)(response.attestationObject) : null;
-        if (!parsed) {
-            out.omit('passkey', 'WebAuthn authenticator whose registration response could not be read');
-            continue;
-        }
-        out.add('passkey', {
-            user_id: (0, tables_1.text)(a.fields.user),
-            credential_id: parsed.credentialId.toString('base64url'),
-            public_key: parsed.publicKey.toString('base64url'),
-            sign_count: parsed.signCount,
-            aaguid: parsed.aaguid,
-            backed_up: parsed.backedUp,
-            transports: Array.isArray(response?.transports) ? response.transports.map(String) : undefined,
-            rp_id: options.rpId,
-            name: (0, tables_1.text)(data.name),
-            created_at: (0, tables_1.time)(a.fields.created_at),
-        });
-    }
-    if (options.rpId)
-        out.manifest.rpId = options.rpId;
-    // Database-backed sessions.
-    if (options.sessions !== false) {
-        for (const s of fx.get('sessions.session') ?? []) {
-            const key = (0, tables_1.text)(s.pk);
-            const expires = (0, tables_1.timeMs)(s.fields.expire_date);
-            const data = decodeSessionData(String(s.fields.session_data ?? ''));
-            const uid = (0, tables_1.text)(data?._auth_user_id);
-            if (!key || expires === undefined || !data) {
-                out.omit('session', 'session row that could not be decoded');
-                continue;
-            }
-            if (!uid) {
-                out.omit('session', 'anonymous session');
-                continue;
-            }
-            if (!ids.has(uid)) {
-                out.omit('session', 'session of a user not in the export');
-                continue;
-            }
-            if (expires <= now) {
-                out.omit('session', 'expired');
-                continue;
-            }
-            out.add('session', { id: (0, tables_1.sha256Hex)(key).slice(0, 32), user_id: uid, token_hash: (0, tables_1.sha256Hex)(key), expires_at: new Date(expires).toISOString() });
-        }
-    }
-    out.manifest.settings = { session_cookie: 'sessionid' };
-    return out;
-}
-/**
- * Decode `django_session.session_data` without the SECRET_KEY (the rows come
- * from the app's own database): Django ≥ 3.1 `signing.dumps` (`payload:ts:sig`,
- * payload zlib-compressed when it starts with `.`), and the pre-3.1 form,
- * base64(`<hash>:<json>`).
- */
-function decodeSessionData(raw) {
-    const value = raw.trim();
-    if (!value)
-        return null;
-    try {
-        if (value.split(':').length === 3) {
-            const payload = value.split(':')[0];
-            const compressed = payload.startsWith('.');
-            const bytes = Buffer.from(compressed ? payload.slice(1) : payload, 'base64url');
-            const parsed = JSON.parse((compressed ? (0, node_zlib_1.inflateSync)(bytes) : bytes).toString('utf8'));
-            return (0, tables_1.json)(parsed) ?? null;
-        }
-        const legacy = Buffer.from(value, 'base64').toString('utf8');
-        const colon = legacy.indexOf(':');
-        if (colon < 0)
-            return null;
-        return (0, tables_1.json)(legacy.slice(colon + 1)) ?? null;
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * The export script, run inside the Django app so allauth's own code decrypts
- * TOTP secrets and lists the unused recovery codes; it streams NDJSON straight
- * into the CLI:
- *
- *   python manage.py shell < atlas_export.py | npx atlas migrate django export --file -
- */
-exports.DJANGO_EXPORT_SCRIPT = `# Atlas export for a Django app (django.contrib.auth + django-allauth).
-import io, json, sys
-from django.apps import apps
-from django.conf import settings
-from django.core.management import call_command
-
-def emit(table, row):
-    sys.stdout.write(json.dumps({"table": table, "row": row}, default=str) + "\\n")
-
-labels = [settings.AUTH_USER_MODEL, "auth.group", "auth.permission"]
-for label in ["account.emailaddress", "socialaccount.socialaccount", "socialaccount.socialtoken", "mfa.authenticator", "sessions.session"]:
-    try:
-        apps.get_model(label)
-        labels.append(label)
-    except (LookupError, ValueError):
-        pass
-
-buf = io.StringIO()
-call_command("dumpdata", *labels, format="json", stdout=buf)
-for obj in json.loads(buf.getvalue()):
-    emit("dumpdata", obj)
-
-try:
-    from allauth.mfa.models import Authenticator
-    from allauth.mfa.adapter import get_adapter
-except ImportError:
-    Authenticator = None
-
-if Authenticator is not None:
-    try:
-        from allauth.mfa.recovery_codes.internal.auth import RecoveryCodes
-    except ImportError:
-        try:
-            from allauth.mfa.recovery_codes import RecoveryCodes
-        except ImportError:
-            RecoveryCodes = None
-    adapter = get_adapter()
-    for a in Authenticator.objects.all():
-        if a.type == "totp":
-            emit("mfa_secrets", {"authenticator_id": a.pk, "secret": adapter.decrypt(a.data["secret"])})
-        elif a.type == "recovery_codes" and RecoveryCodes is not None:
-            emit("mfa_secrets", {"authenticator_id": a.pk, "codes": RecoveryCodes(a).get_unused_codes()})
-`;
-//# sourceMappingURL=django.js.map

package/dist/migrate/export/frameworks/django.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"django.js","sourceRoot":"","sources":["../../../../src/migrate/export/frameworks/django.ts"],"names":[],"mappings":";;;AAgEA,oCA4MC;AAQD,8CAkBC;AAtSD,yCAAwC;AACxC,qCAUkB;AAClB,yCAAoD;AAqCpD,SAAS,QAAQ,CAAC,MAAc;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QAClC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,IAAA,aAAI,EAAC,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;gBAAE,SAAS;YAChC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAgB,YAAY,CAAC,MAAc,EAAE,UAA+B,EAAE;IAC5E,MAAM,GAAG,GAAG,IAAI,wBAAe,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,SAAS,GACb,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE;QAChC,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC;YAClB,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBACxB,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;gBAChC,OAAO,UAAU,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,IAAI,YAAY,IAAI,CAAC,CAAC;YACnF,CAAC,CAAC,CAAC,CAAC;IACV,IAAI,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,6FAA6F,CAAC,CAAC;QACxG,OAAO,GAAG,CAAC;IACb,CAAC;IAED,6EAA6E;IAC7E,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,QAAQ;YAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5E,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAA,aAAI,EAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;aAC5E,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IACpG,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyE,CAAC;IAChG,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,EAAE,EAAE,CAAC;QACrD,MAAM,GAAG,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;QAClD,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK;YAAE,SAAS;QAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAE/C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,SAAS,CAAE,EAAE,CAAC;QACnC,MAAM,EAAE,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtB,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACnB,MAAM,KAAK,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,WAAW,KAAK,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjH,MAAM,QAAQ,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;YACzC,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC3D,IAAI,CAAC,MAAM,IAAI,MAAM;YAAE,QAAQ,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;aACpD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,aAAI,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACnE,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,IAAA,aAAI,EAAC,CAAC,CAAC,YAAY,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,IAAA,aAAI,EAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,aAAI,EAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACpE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACZ,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE;YACd,EAAE;YACF,MAAM,EAAE,IAAI;YACZ,QAAQ;YACR,UAAU,EAAE,IAAA,aAAI,EAAC,CAAC,CAAC,UAAU,CAAC;YAC9B,SAAS,EAAE,IAAA,aAAI,EAAC,CAAC,CAAC,SAAS,CAAC;YAC5B,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAO,EAAE,CAAC,CAAC,CAAC,SAAS;YACnE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YACrD,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;YACjC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,+BAA+B;YAChE,UAAU,EAAE,IAAA,aAAI,EAAC,CAAC,CAAC,WAAW,CAAC;YAC/B,eAAe,EAAE,IAAA,aAAI,EAAC,CAAC,CAAC,UAAU,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,kHAAkH,CAAC,CAAC;IACtJ,IAAI,CAAC,OAAO;QAAE,GAAG,CAAC,IAAI,CAAC,0GAA0G,CAAC,CAAC;IACnI,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9G,CAAC;IAED,8BAA8B;IAC9B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAe,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,OAAO;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,6BAA6B,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5D,MAAM,GAAG,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,sDAAsD,CAAC,CAAC;YAC7E,SAAS;QACX,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACxC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE;YAClB,OAAO,EAAE,GAAG;YACZ,QAAQ;YACR,gBAAgB,EAAE,OAAO;YACzB,IAAI,EAAE,QAAQ,KAAK,gBAAgB,IAAI,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO;YAC9G,KAAK,EAAE,IAAA,aAAI,EAAC,KAAK,EAAE,KAAK,CAAC;YACzB,OAAO,EAAE,KAAK;YACd,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,KAAK;gBAC9B,CAAC,CAAC,EAAE,YAAY,EAAE,IAAA,aAAI,EAAC,KAAK,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,IAAA,aAAI,EAAC,KAAK,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,IAAA,aAAI,EAAC,KAAK,CAAC,UAAU,CAAC,EAAE;gBAClH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;IACD,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAE/C,2EAA2E;IAC3E,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,MAAM,WAAW,GAAc,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAA,aAAI,EAAC,KAAK,EAAE,MAAM,CAAC,IAAI,IAAA,aAAI,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9C,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,iGAAiG,CAAC,CAAC;gBAC1H,SAAS;YACX,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC9L,CAAC;aAAM,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAE,KAAM,CAAC,KAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,mGAAmG,CAAC,CAAC;gBAC5H,SAAS;YACX,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QACrF,CAAC;aAAM,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACxC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,oFAAoF,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAChI,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,IAAA,aAAI,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,IAAA,aAAI,EAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,OAAO,QAAQ,EAAE,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,iCAAsB,EAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3H,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,sEAAsE,CAAC,CAAC;YAC5F,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE;YACjB,OAAO,EAAE,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAE;YAC7B,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC;YACxD,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;YAClD,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAE,QAAS,CAAC,UAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;YAC7G,KAAK,EAAE,OAAO,CAAC,IAAK;YACpB,IAAI,EAAE,IAAA,aAAI,EAAC,IAAI,CAAC,IAAI,CAAC;YACrB,UAAU,EAAE,IAAA,aAAI,EAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,OAAO,CAAC,IAAI;QAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAEnD,4BAA4B;IAC5B,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC;YACjD,MAAM,GAAG,GAAG,IAAA,aAAI,EAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvB,MAAM,OAAO,GAAG,IAAA,eAAM,EAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC;YACpE,MAAM,GAAG,GAAG,IAAA,aAAI,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;YACtC,IAAI,CAAC,GAAG,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC3C,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,uCAAuC,CAAC,CAAC;gBAC7D,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;gBACzC,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClB,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,qCAAqC,CAAC,CAAC;gBAC3D,SAAS;YACX,CAAC;YACD,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACjJ,CAAC;IACH,CAAC;IACD,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;IACxD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;YACrC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAChF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAA,uBAAW,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;YACjG,OAAO,IAAA,aAAI,EAAC,MAAM,CAAC,IAAI,IAAI,CAAC;QAC9B,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3B,OAAO,IAAA,aAAI,EAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACU,QAAA,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0CnC,CAAC"}