@atlasauth/cli 0.24.0 → 0.25.0

package/dist/migrate/export/table.js

@@ -1,248 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.parseDelimited = parseDelimited;
-exports.parseTable = parseTable;
-exports.parseKeyValues = parseKeyValues;
-exports.typedParams = typedParams;
-exports.mapTable = mapTable;
-const password_detect_1 = require("./password-detect");
-const record_set_1 = require("./record-set");
-const translate_kit_1 = require("./translate-kit");
-// ── parsing ─────────────────────────────────────────────────────────────────
-/** RFC 4180 CSV with a sniffed delimiter (`,` `;` tab `|`), quoted fields, doubled quotes, embedded newlines. */
-function parseDelimited(text) {
-    const src = text.replace(/^\ufeff/, '');
-    const first = src.split(/\r?\n/, 1)[0] ?? '';
-    const delimiter = [',', ';', '\t', '|'].map((d) => [d, first.split(d).length]).sort((a, b) => b[1] - a[1])[0][0];
-    const rows = [];
-    let row = [];
-    let field = '';
-    let quoted = false;
-    for (let i = 0; i < src.length; i++) {
-        const c = src[i];
-        if (quoted) {
-            if (c === '"') {
-                if (src[i + 1] === '"') {
-                    field += '"';
-                    i++;
-                }
-                else
-                    quoted = false;
-            }
-            else
-                field += c;
-        }
-        else if (c === '"' && field === '')
-            quoted = true;
-        else if (c === delimiter) {
-            row.push(field);
-            field = '';
-        }
-        else if (c === '\n' || c === '\r') {
-            if (c === '\r' && src[i + 1] === '\n')
-                i++;
-            row.push(field);
-            field = '';
-            if (row.some((f) => f !== ''))
-                rows.push(row);
-            row = [];
-        }
-        else
-            field += c;
-    }
-    row.push(field);
-    if (row.some((f) => f !== ''))
-        rows.push(row);
-    const header = (rows.shift() ?? []).map((h) => h.trim());
-    return rows.map((r) => Object.fromEntries(header.map((h, i) => [h, r[i] ?? ''])));
-}
-/** Rows from CSV/TSV, a JSON array (of objects, or `{ users: [...] }`) or NDJSON. */
-function parseTable(text) {
-    const t = text.trim();
-    if (t.startsWith('[') || t.startsWith('{')) {
-        try {
-            const v = JSON.parse(t);
-            if (Array.isArray(v))
-                return v.filter(record_set_1.isObj);
-            if ((0, record_set_1.isObj)(v)) {
-                const list = Object.values(v).find(Array.isArray);
-                if (list)
-                    return list.filter(record_set_1.isObj);
-                return [v];
-            }
-        }
-        catch {
-            // NDJSON: one object per line
-            return t.split(/\r?\n/).filter((l) => l.trim()).map((l, i) => {
-                try {
-                    const o = JSON.parse(l);
-                    if (!(0, record_set_1.isObj)(o))
-                        throw new Error('not an object');
-                    return o;
-                }
-                catch {
-                    throw new Error(`Line ${i + 1} is not a JSON object.`);
-                }
-            });
-        }
-    }
-    return parseDelimited(t);
-}
-// ── column recognition ──────────────────────────────────────────────────────
-const NAMES = {
-    id: ['id', 'user_id', 'userid', 'uid', 'uuid', 'sub', 'external_id'],
-    email: ['email', 'email_address', 'emailaddress', 'mail', 'e_mail'],
-    email_verified: ['email_verified', 'emailverified', 'verified', 'is_verified', 'email_confirmed', 'email_confirmed_at', 'confirmed_at', 'email_verified_at'],
-    username: ['username', 'user_name', 'login', 'handle', 'screen_name'],
-    first_name: ['first_name', 'firstname', 'given_name', 'givenname', 'fname'],
-    last_name: ['last_name', 'lastname', 'family_name', 'surname', 'lname'],
-    name: ['name', 'full_name', 'fullname', 'display_name', 'displayname'],
-    phone: ['phone', 'phone_number', 'phonenumber', 'mobile', 'mobile_phone', 'tel'],
-    password: ['password_hash', 'passwordhash', 'encrypted_password', 'hashed_password', 'password_digest', 'pwd_hash', 'password', 'passwd', 'hash', 'pass'],
-    salt: ['password_salt', 'salt', 'pwd_salt', 'passwordsalt'],
-    created_at: ['created_at', 'createdat', 'created', 'date_joined', 'registered_at', 'signup_date'],
-    last_sign_in_at: ['last_sign_in_at', 'last_login', 'last_login_at', 'last_seen', 'lastlogin'],
-    roles: ['roles', 'role', 'groups'],
-    disabled: ['disabled', 'banned', 'is_banned', 'blocked', 'is_blocked', 'suspended', 'locked'],
-    active: ['active', 'is_active', 'enabled'],
-    image_url: ['image_url', 'avatar', 'avatar_url', 'picture', 'photo'],
-};
-const truthy = (v) => {
-    if (typeof v === 'boolean')
-        return v;
-    if (typeof v === 'number')
-        return v !== 0;
-    const s = String(v ?? '').trim().toLowerCase();
-    return ['1', 'true', 't', 'yes', 'y'].includes(s) || (s !== '' && !['0', 'false', 'f', 'no', 'n', 'null', 'nil', 'none'].includes(s) && /^\d{4}-|^\d{9,}$/.test(s));
-};
-function columnFinder(row, map = {}) {
-    const lower = new Map(Object.keys(row).map((k) => [k.toLowerCase().replace(/[\s-]+/g, '_'), k]));
-    return (field) => {
-        const wanted = map[field];
-        if (wanted)
-            return Object.keys(row).find((k) => k === wanted) ?? lower.get(wanted.toLowerCase());
-        for (const n of NAMES[field] ?? [])
-            if (lower.has(n))
-                return lower.get(n);
-        return undefined;
-    };
-}
-const isoTime = (v) => {
-    const s = (0, record_set_1.str)(v);
-    if (!s)
-        return undefined;
-    const n = /^\d{9,13}$/.test(s) ? Number(s) * (s.length >= 12 ? 1 : 1000) : Date.parse(s);
-    return Number.isFinite(n) && n > 0 ? new Date(n).toISOString() : undefined;
-};
-function passwordFor(hash, salt, o) {
-    const algorithm = o.hashAlgorithm?.toLowerCase();
-    if (algorithm === 'plaintext') {
-        const d = (0, password_detect_1.detectPasswordHash)(hash, { plaintext: true });
-        return d.ok ? { password: d.password } : { reason: d.reason };
-    }
-    if (!algorithm || algorithm === 'auto') {
-        const d = (0, password_detect_1.detectPasswordHash)(hash);
-        if (d.ok)
-            return { password: d.password, weak: d.weak };
-        return { reason: `${d.reason}; name its algorithm with --set hash-algorithm=<id>` };
-    }
-    if (!(0, password_detect_1.isKnownAlgorithm)(algorithm))
-        return { reason: `unknown hash algorithm "${algorithm}"` };
-    const params = { ...(o.hashParams ?? {}) };
-    if (o.saltPosition)
-        params.salt_position = o.saltPosition;
-    if (o.hashEncoding)
-        params.encoding = o.hashEncoding;
-    return { password: (0, record_set_1.compact)({ algorithm, hash, salt, params: Object.keys(params).length ? params : undefined }) };
-}
-/** Parse `a=1,b=two,c=true` into typed params. */
-function parseKeyValues(raw) {
-    const out = {};
-    for (const part of (raw ?? '').split(',')) {
-        const i = part.indexOf('=');
-        if (i > 0)
-            out[part.slice(0, i).trim()] = part.slice(i + 1).trim();
-    }
-    return out;
-}
-function typedParams(raw) {
-    return Object.fromEntries(Object.entries(parseKeyValues(raw)).map(([k, v]) => [k, v === 'true' ? true : v === 'false' ? false : /^\d+$/.test(v) ? Number(v) : v]));
-}
-// ── mapping ─────────────────────────────────────────────────────────────────
-function mapTable(rows, options = {}) {
-    const set = new record_set_1.RecordSet();
-    set.manifest = { origin: options.origin ?? 'user table' };
-    const ids = new Set();
-    let n = 0;
-    const unusable = new Map();
-    let weak = 0;
-    for (const row of rows) {
-        n++;
-        const col = columnFinder(row, options.map);
-        const get = (f) => {
-            const c = col(f);
-            return c === undefined ? undefined : row[c];
-        };
-        const emailRaw = (0, record_set_1.str)(get('email'))?.toLowerCase();
-        const email = emailRaw?.includes('@') ? emailRaw : undefined;
-        const phone = (0, record_set_1.e164)(get('phone'));
-        const username = (0, record_set_1.str)(get('username'));
-        if (!email && !phone && !username) {
-            set.omit('user', 'no email, phone or username', 1);
-            continue;
-        }
-        const id = (0, record_set_1.str)(get('id')) ?? email ?? username ?? String(n);
-        if (ids.has(id)) {
-            set.omit('user', 'duplicate id', 1);
-            continue;
-        }
-        ids.add(id);
-        const verifiedCol = col('email_verified');
-        const emails = email ? [{ email, verified: options.trustEmails === true || (verifiedCol !== undefined && truthy(row[verifiedCol])), primary: true }] : [];
-        const phones = phone ? [{ phone, verified: false, primary: true }] : [];
-        const record = (0, record_set_1.compact)({
-            id,
-            emails,
-            phones,
-            username,
-            first_name: (0, record_set_1.str)(get('first_name')),
-            last_name: (0, record_set_1.str)(get('last_name')),
-            name: (0, record_set_1.str)(get('name')),
-            image_url: (0, record_set_1.str)(get('image_url')),
-            created_at: isoTime(get('created_at')),
-            last_sign_in_at: isoTime(get('last_sign_in_at')),
-        });
-        const roleValue = get('roles');
-        const roles = (Array.isArray(roleValue) ? (0, record_set_1.strs)(roleValue) : ((0, record_set_1.str)(roleValue) ?? '').split(/[;,|]/)).map((r) => r.trim()).filter(Boolean).map(translate_kit_1.keyOf);
-        for (const r of roles)
-            set.add('role', { key: r, name: r, scope: 'app' }, r);
-        if (roles.length)
-            record.roles = [...new Set(roles)];
-        if (truthy(get('disabled')) && col('disabled') !== undefined) {
-            record.banned = true;
-            record.ban_reason = 'Disabled in the source table';
-        }
-        else if (col('active') !== undefined && get('active') !== '' && get('active') !== undefined && !truthy(get('active'))) {
-            record.banned = true;
-            record.ban_reason = 'Inactive in the source table';
-        }
-        const hash = (0, record_set_1.str)(get('password'));
-        if (hash) {
-            const r = passwordFor(hash, (0, record_set_1.str)(get('salt')), options);
-            if (r.password) {
-                record.password = r.password;
-                if (r.weak)
-                    weak++;
-            }
-            else
-                unusable.set(r.reason, (unusable.get(r.reason) ?? 0) + 1);
-        }
-        set.add('user', record, id);
-    }
-    for (const [reason, count] of unusable)
-        set.warn(`${count} password(s) left out: ${reason}.`);
-    if (weak)
-        set.warn(`${weak} password(s) use a weak legacy hash; Atlas re-hashes each to Argon2id on that user's first sign-in.`);
-    return set;
-}
-//# sourceMappingURL=table.js.map

package/dist/migrate/export/table.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"table.js","sourceRoot":"","sources":["../../../src/migrate/export/table.ts"],"names":[],"mappings":";;AAoCA,wCAiCC;AAGD,gCAyBC;AAkED,wCAOC;AAED,kCAEC;AAID,4BAsEC;AAvPD,uDAAyE;AACzE,6CAAoF;AACpF,mDAAwC;AA8BxC,+EAA+E;AAE/E,iHAAiH;AACjH,SAAgB,cAAc,CAAC,IAAY;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;IAC3H,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,IAAI,GAAG,GAAa,EAAE,CAAC;IACvB,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAE,CAAC;QAClB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBACd,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACvB,KAAK,IAAI,GAAG,CAAC;oBACb,CAAC,EAAE,CAAC;gBACN,CAAC;;oBAAM,MAAM,GAAG,KAAK,CAAC;YACxB,CAAC;;gBAAM,KAAK,IAAI,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,KAAK,EAAE;YAAE,MAAM,GAAG,IAAI,CAAC;aAC/C,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChB,KAAK,GAAG,EAAE,CAAC;QACb,CAAC;aAAM,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI;gBAAE,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChB,KAAK,GAAG,EAAE,CAAC;YACX,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9C,GAAG,GAAG,EAAE,CAAC;QACX,CAAC;;YAAM,KAAK,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,qFAAqF;AACrF,SAAgB,UAAU,CAAC,IAAY;IACrC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACtB,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAY,CAAC;YACnC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,MAAM,CAAC,kBAAK,CAAC,CAAC;YAC7C,IAAI,IAAA,kBAAK,EAAC,CAAC,CAAC,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAClD,IAAI,IAAI;oBAAE,OAAQ,IAAkB,CAAC,MAAM,CAAC,kBAAK,CAAC,CAAC;gBACnD,OAAO,CAAC,CAAC,CAAC,CAAC;YACb,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;YAC9B,OAAO,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBAC3D,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAY,CAAC;oBACnC,IAAI,CAAC,IAAA,kBAAK,EAAC,CAAC,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;oBAChD,OAAO,CAAC,CAAC;gBACX,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAE/E,MAAM,KAAK,GAA6B;IACtC,EAAE,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC;IACpE,KAAK,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC;IACnE,cAAc,EAAE,CAAC,gBAAgB,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,cAAc,EAAE,mBAAmB,CAAC;IAC5J,QAAQ,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC;IACrE,UAAU,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,CAAC;IAC3E,SAAS,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,CAAC;IACvE,IAAI,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,CAAC;IACtE,KAAK,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,CAAC;IAChF,QAAQ,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;IACzJ,IAAI,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,CAAC;IAC3D,UAAU,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,CAAC;IACjG,eAAe,EAAE,CAAC,iBAAiB,EAAE,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,CAAC;IAC7F,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;IAClC,QAAQ,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC;IAC7F,MAAM,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC;IAC1C,SAAS,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC;CACrE,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,CAAU,EAAW,EAAE;IACrC,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/C,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACtK,CAAC,CAAC;AAEF,SAAS,YAAY,CAAC,GAAQ,EAAE,MAA8B,EAAE;IAC9D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjG,OAAO,CAAC,KAAa,EAAsB,EAAE;QAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QACjG,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC1E,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,CAAU,EAAsB,EAAE;IACjD,MAAM,CAAC,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC;IACjB,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzF,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC,CAAC;AAEF,SAAS,WAAW,CAAC,IAAY,EAAE,IAAwB,EAAE,CAAqB;IAChF,MAAM,SAAS,GAAG,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,CAAC;IACjD,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,IAAA,oCAAkB,EAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAA,oCAAkB,EAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,EAAE;YAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,qDAAqD,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,IAAA,kCAAgB,EAAC,SAAS,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,2BAA2B,SAAS,GAAG,EAAE,CAAC;IAC7F,MAAM,MAAM,GAA8C,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;IACtF,IAAI,CAAC,CAAC,YAAY;QAAE,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,IAAI,CAAC,CAAC,YAAY;QAAE,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,YAAY,CAAC;IACrD,OAAO,EAAE,QAAQ,EAAE,IAAA,oBAAO,EAAC,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAkB,CAAC,EAAE,CAAC;AACnI,CAAC;AAED,kDAAkD;AAClD,SAAgB,cAAc,CAAC,GAAuB;IACpD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,WAAW,CAAC,GAAuB;IACjD,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrK,CAAC;AAED,+EAA+E;AAE/E,SAAgB,QAAQ,CAAC,IAAW,EAAE,UAA8B,EAAE;IACpE,MAAM,GAAG,GAAG,IAAI,sBAAS,EAAE,CAAC;IAC5B,GAAG,CAAC,QAAQ,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;IAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,CAAC,EAAE,CAAC;QACJ,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,CAAC,CAAS,EAAW,EAAE;YACjC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACjB,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAA,iBAAI,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,6BAA6B,EAAE,CAAC,CAAC,CAAC;YACnD,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAChB,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACZ,MAAM,WAAW,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAmB,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1K,MAAM,MAAM,GAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,MAAM,GAAe,IAAA,oBAAO,EAAC;YACjC,EAAE;YACF,MAAM;YACN,MAAM;YACN,QAAQ;YACR,UAAU,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAClC,SAAS,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAChC,IAAI,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtB,SAAS,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAChC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACtC,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;SACnC,CAAC,CAAC;QAEjB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAA,iBAAI,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAG,EAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,qBAAK,CAAC,CAAC;QACnJ,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7E,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAErD,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS,EAAE,CAAC;YAC7D,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;YACrB,MAAM,CAAC,UAAU,GAAG,8BAA8B,CAAC;QACrD,CAAC;aAAM,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACxH,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;YACrB,MAAM,CAAC,UAAU,GAAG,8BAA8B,CAAC;QACrD,CAAC;QAED,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QAClC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YACvD,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACf,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;gBAC7B,IAAI,CAAC,CAAC,IAAI;oBAAE,IAAI,EAAE,CAAC;YACrB,CAAC;;gBAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAO,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9B,CAAC;IACD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,0BAA0B,MAAM,GAAG,CAAC,CAAC;IAC9F,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,qGAAqG,CAAC,CAAC;IACjI,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/migrate/export/translate-kit.d.ts

@@ -1,46 +0,0 @@
-import type { ReportStatus, TranslationReportEntry, TranslationResult } from '../framework/plugin';
-import type { Json } from '../../serialize';
-/**
- * Shared machinery for the vendor CONFIG translators (`atlas migrate <vendor>
- * config`): build the Atlas config-as-code documents (`instance` with its
- * `auth_config`, `oauth_providers`, `roles`, `permissions`, …) and the report
- * line by line, every line naming the vendor setting it came from.
- *
- * Secrets are never copied: a vendor client secret becomes a `${NAME}`
- * placeholder the operator sets before `atlas config import`.
- */
-export declare class ConfigBuilder {
-    readonly auth: Record<string, Json>;
-    readonly instance: Record<string, Json>;
-    readonly collections: Record<string, Json[]>;
-    readonly report: TranslationReportEntry[];
-    private readonly env;
-    readonly providers: Record<string, string>;
-    readonly roles: Record<string, string>;
-    /** Set `auth_config.<path>` (dotted). */
-    set(path: string, value: Json): void;
-    add(status: ReportStatus, area: string, setting: string, note: string, atlas?: string): void;
-    /** A `${NAME}` placeholder the import interpolates from the environment. */
-    placeholder(name: string, purpose: string): string;
-    push(collection: keyof ConfigBuilder['collections'] | string, value: Json): void;
-    /** An `oauth_providers` entry for a built-in Atlas provider, credentials as placeholders. */
-    socialProvider(o: {
-        atlasKey: string;
-        vendorName: string;
-        area: string;
-        setting: string;
-        clientId?: string;
-        scopes?: string[];
-        enabled?: boolean;
-        allowSignUp?: boolean;
-    }): void;
-    result(origin: string, extra?: Pick<TranslationResult, 'bridge' | 'lazy'>): TranslationResult;
-}
-/** Social provider names vendors use → Atlas built-in provider keys. */
-export declare const SOCIAL_KEYS: Record<string, string>;
-/** The Atlas key for a vendor's provider name (`oauth_google`, `oauth2:google`, `GOOGLE`, `google-oauth2`), or null. */
-export declare function socialKey(raw: string): string | null;
-/** `Billing Admin` → `billing_admin`. */
-export declare function keyOf(name: string): string;
-/** Atlas's session window: 5 minutes to 90 days. */
-export declare function clampSessionMs(ms: number): number;

package/dist/migrate/export/translate-kit.js

@@ -1,148 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SOCIAL_KEYS = exports.ConfigBuilder = void 0;
-exports.socialKey = socialKey;
-exports.keyOf = keyOf;
-exports.clampSessionMs = clampSessionMs;
-/**
- * Shared machinery for the vendor CONFIG translators (`atlas migrate <vendor>
- * config`): build the Atlas config-as-code documents (`instance` with its
- * `auth_config`, `oauth_providers`, `roles`, `permissions`, …) and the report
- * line by line, every line naming the vendor setting it came from.
- *
- * Secrets are never copied: a vendor client secret becomes a `${NAME}`
- * placeholder the operator sets before `atlas config import`.
- */
-class ConfigBuilder {
-    auth = {};
-    instance = {};
-    collections = {
-        oauth_providers: [],
-        custom_oauth_providers: [],
-        permissions: [],
-        roles: [],
-        oauth_clients: [],
-        resource_servers: [],
-        redirect_urls: [],
-        jwt_templates: [],
-    };
-    report = [];
-    env = new Map();
-    providers = {};
-    roles = {};
-    /** Set `auth_config.<path>` (dotted). */
-    set(path, value) {
-        const keys = path.split('.');
-        let node = this.auth;
-        for (const k of keys.slice(0, -1)) {
-            const next = node[k];
-            if (!next || typeof next !== 'object' || Array.isArray(next))
-                node[k] = {};
-            node = node[k];
-        }
-        node[keys[keys.length - 1]] = value;
-    }
-    add(status, area, setting, note, atlas) {
-        this.report.push({ status, area, setting, note, ...(atlas ? { atlas } : {}) });
-    }
-    /** A `${NAME}` placeholder the import interpolates from the environment. */
-    placeholder(name, purpose) {
-        this.env.set(name, purpose);
-        return `\${${name}}`;
-    }
-    push(collection, value) {
-        (this.collections[collection] ??= []).push(value);
-    }
-    /** An `oauth_providers` entry for a built-in Atlas provider, credentials as placeholders. */
-    socialProvider(o) {
-        const upper = o.atlasKey.toUpperCase().replace(/[^A-Z0-9]+/g, '_');
-        if (this.collections.oauth_providers.some((p) => p.provider === o.atlasKey))
-            return;
-        const entry = {
-            provider: o.atlasKey,
-            enabled: o.enabled !== false,
-            allow_sign_in: true,
-            allow_sign_up: o.allowSignUp !== false,
-            client_id: o.clientId ?? this.placeholder(`${upper}_CLIENT_ID`, `${o.vendorName} client id`),
-            client_secret: this.placeholder(`${upper}_CLIENT_SECRET`, `${o.vendorName} client secret`),
-        };
-        if (o.scopes?.length)
-            entry.scopes = o.scopes;
-        this.push('oauth_providers', entry);
-        this.providers[o.vendorName] = o.atlasKey;
-        this.add(o.clientId ? 'differs' : 'manual', o.area, o.setting, `${o.vendorName} sign-in becomes Atlas's built-in "${o.atlasKey}" provider. Keep the same OAuth app so imported accounts relink by provider user id; add Atlas's callback URL to it${o.clientId ? '' : ', and set the client id'} and set ${upper}_CLIENT_SECRET (secrets are never copied).`, `oauth_providers ${o.atlasKey}`);
-    }
-    result(origin, extra = {}) {
-        const documents = {};
-        const instance = { ...this.instance };
-        if (Object.keys(this.auth).length)
-            instance.auth_config = this.auth;
-        if (Object.keys(instance).length)
-            documents.instance = instance;
-        for (const [type, list] of Object.entries(this.collections))
-            if (list.length)
-                documents[type] = list;
-        return {
-            origin,
-            documents,
-            report: this.report,
-            env: [...this.env.entries()].map(([name, purpose]) => ({ name, for: purpose })),
-            mappings: { providers: this.providers, roles: this.roles },
-            ...extra,
-        };
-    }
-}
-exports.ConfigBuilder = ConfigBuilder;
-/** Social provider names vendors use → Atlas built-in provider keys. */
-exports.SOCIAL_KEYS = {
-    google: 'google',
-    'google-oauth2': 'google',
-    github: 'github',
-    gitlab: 'gitlab',
-    facebook: 'facebook',
-    apple: 'apple',
-    microsoft: 'microsoft',
-    windowslive: 'microsoft',
-    'microsoft-account': 'microsoft',
-    azure_ad: 'microsoft',
-    linkedin: 'linkedin',
-    linkedin_oidc: 'linkedin',
-    twitter: 'x',
-    x: 'x',
-    discord: 'discord',
-    slack: 'slack',
-    spotify: 'spotify',
-    twitch: 'twitch',
-    bitbucket: 'bitbucket',
-    dropbox: 'dropbox',
-    notion: 'notion',
-    salesforce: 'salesforce',
-    paypal: 'paypal',
-    amazon: 'amazon',
-    tiktok: 'tiktok',
-    line: 'line',
-    zoom: 'zoom',
-    figma: 'figma',
-    hubspot: 'hubspot',
-    atlassian: 'atlassian',
-    coinbase: 'coinbase',
-    box: 'box',
-    yahoo: 'yahoo',
-    roblox: 'roblox',
-    reddit: 'reddit',
-};
-/** The Atlas key for a vendor's provider name (`oauth_google`, `oauth2:google`, `GOOGLE`, `google-oauth2`), or null. */
-function socialKey(raw) {
-    const k = raw.toLowerCase().replace(/^oauth2?[_:]/, '').replace(/^oauth_/, '');
-    return exports.SOCIAL_KEYS[k] ?? null;
-}
-/** `Billing Admin` → `billing_admin`. */
-function keyOf(name) {
-    return name.trim().toLowerCase().replace(/[^a-z0-9:]+/g, '_').replace(/^_+|_+$/g, '') || 'role';
-}
-const MIN = 60_000;
-/** Atlas's session window: 5 minutes to 90 days. */
-function clampSessionMs(ms) {
-    return Math.min(Math.max(ms, 5 * MIN), 90 * 24 * 60 * MIN);
-}
-//# sourceMappingURL=translate-kit.js.map

package/dist/migrate/export/translate-kit.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"translate-kit.js","sourceRoot":"","sources":["../../../src/migrate/export/translate-kit.ts"],"names":[],"mappings":";;;AAkJA,8BAGC;AAGD,sBAEC;AAID,wCAEC;AA7JD;;;;;;;;GAQG;AACH,MAAa,aAAa;IACf,IAAI,GAAyB,EAAE,CAAC;IAChC,QAAQ,GAAyB,EAAE,CAAC;IACpC,WAAW,GAA2B;QAC7C,eAAe,EAAE,EAAE;QACnB,sBAAsB,EAAE,EAAE;QAC1B,WAAW,EAAE,EAAE;QACf,KAAK,EAAE,EAAE;QACT,aAAa,EAAE,EAAE;QACjB,gBAAgB,EAAE,EAAE;QACpB,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,EAAE;KAClB,CAAC;IACO,MAAM,GAA6B,EAAE,CAAC;IAC9B,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,SAAS,GAA2B,EAAE,CAAC;IACvC,KAAK,GAA2B,EAAE,CAAC;IAE5C,yCAAyC;IACzC,GAAG,CAAC,IAAY,EAAE,KAAW;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACrB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;YAC3E,IAAI,GAAG,IAAI,CAAC,CAAC,CAAyB,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,GAAG,KAAK,CAAC;IACvC,CAAC;IAED,GAAG,CAAC,MAAoB,EAAE,IAAY,EAAE,OAAe,EAAE,IAAY,EAAE,KAAc;QACnF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,4EAA4E;IAC5E,WAAW,CAAC,IAAY,EAAE,OAAe;QACvC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5B,OAAO,MAAM,IAAI,GAAG,CAAC;IACvB,CAAC;IAED,IAAI,CAAC,UAAuD,EAAE,KAAW;QACvE,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IAED,6FAA6F;IAC7F,cAAc,CAAC,CASd;QACC,MAAM,KAAK,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QACnE,IAAI,IAAI,CAAC,WAAW,CAAC,eAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,CAA2B,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC;YAAE,OAAO;QAChH,MAAM,KAAK,GAAyB;YAClC,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK;YAC5B,aAAa,EAAE,IAAI;YACnB,aAAa,EAAE,CAAC,CAAC,WAAW,KAAK,KAAK;YACtC,SAAS,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,KAAK,YAAY,EAAE,GAAG,CAAC,CAAC,UAAU,YAAY,CAAC;YAC5F,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,KAAK,gBAAgB,EAAE,GAAG,CAAC,CAAC,UAAU,gBAAgB,CAAC;SAC3F,CAAC;QACF,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM;YAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC1C,IAAI,CAAC,GAAG,CACN,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EACjC,CAAC,CAAC,IAAI,EACN,CAAC,CAAC,OAAO,EACT,GAAG,CAAC,CAAC,UAAU,sCAAsC,CAAC,CAAC,QAAQ,sHAAsH,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,yBAAyB,YAAY,KAAK,4CAA4C,EAC7R,mBAAmB,CAAC,CAAC,QAAQ,EAAE,CAChC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,QAAoD,EAAE;QAC3E,MAAM,SAAS,GAAoB,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAyB,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM;YAAE,QAAQ,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC;QACpE,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM;YAAE,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAChE,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,IAAI,IAAI,CAAC,MAAM;gBAAE,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACrG,OAAO;YACL,MAAM;YACN,SAAS;YACT,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/E,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;YAC1D,GAAG,KAAK;SACT,CAAC;IACJ,CAAC;CACF;AA5FD,sCA4FC;AAED,wEAAwE;AAC3D,QAAA,WAAW,GAA2B;IACjD,MAAM,EAAE,QAAQ;IAChB,eAAe,EAAE,QAAQ;IACzB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,WAAW,EAAE,WAAW;IACxB,mBAAmB,EAAE,WAAW;IAChC,QAAQ,EAAE,WAAW;IACrB,QAAQ,EAAE,UAAU;IACpB,aAAa,EAAE,UAAU;IACzB,OAAO,EAAE,GAAG;IACZ,CAAC,EAAE,GAAG;IACN,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,YAAY;IACxB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,OAAO;IACd,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACjB,CAAC;AAEF,wHAAwH;AACxH,SAAgB,SAAS,CAAC,GAAW;IACnC,MAAM,CAAC,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC/E,OAAO,mBAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAChC,CAAC;AAED,yCAAyC;AACzC,SAAgB,KAAK,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC;AAClG,CAAC;AAED,MAAM,GAAG,GAAG,MAAM,CAAC;AACnB,oDAAoD;AACpD,SAAgB,cAAc,CAAC,EAAU;IACvC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;AAC7D,CAAC"}

package/dist/migrate/export/userfront-config.d.ts

@@ -1,15 +0,0 @@
-import type { TranslationResult } from '../framework/plugin';
-import { type VendorHttp } from './vendor-http';
-/**
- * `atlas migrate userfront config` — what Userfront's admin API exposes about
- * a tenant's configuration: its roles. Sign-in methods, forms, password and
- * MFA rules, session lifetimes, domains and branding live only in the
- * Userfront dashboard: the report lists each as manual with where to look.
- * Passwords move by the `userfront` lazy-migration preset.
- */
-export interface UserfrontConfigSnapshot {
-    tenantId: string;
-    roles: string[];
-}
-export declare function fetchUserfrontConfig(http: VendorHttp, tenantId: string): Promise<UserfrontConfigSnapshot>;
-export declare function translateUserfrontConfig(snap: UserfrontConfigSnapshot): TranslationResult;

package/dist/migrate/export/userfront-config.js

@@ -1,49 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.fetchUserfrontConfig = fetchUserfrontConfig;
-exports.translateUserfrontConfig = translateUserfrontConfig;
-const record_set_1 = require("./record-set");
-const translate_kit_1 = require("./translate-kit");
-const userfront_1 = require("./userfront");
-const vendor_http_1 = require("./vendor-http");
-async function fetchUserfrontConfig(http, tenantId) {
-    const tid = (0, userfront_1.checkTenantId)(tenantId);
-    let body = null;
-    try {
-        body = (await http.get(`/tenants/${tid}/roles`)).body;
-    }
-    catch (err) {
-        if (!(err instanceof vendor_http_1.VendorApiError) || ![400, 403, 404].includes(err.status))
-            throw err;
-    }
-    return { tenantId: tid, roles: (0, record_set_1.objs)(body?.roles).map((r) => (0, record_set_1.str)(r.name)).filter((n) => !!n) };
-}
-function translateUserfrontConfig(snap) {
-    const b = new translate_kit_1.ConfigBuilder();
-    const seen = new Set();
-    for (const name of snap.roles) {
-        const key = (0, translate_kit_1.keyOf)(name);
-        if (seen.has(key))
-            continue;
-        seen.add(key);
-        b.roles[name] = key;
-        b.push('roles', { key, name, description: '', permissions: [] });
-    }
-    if (seen.size)
-        b.add('mapped', 'authorization', 'roles', `${seen.size} role(s) (tenant roles become app roles; members keep theirs with the data export).`, 'roles');
-    b.add('mapped', 'authentication', 'password sign-in', 'Userfront never returns password hashes: the userfront lazy-migration preset checks each password against Userfront on the first Atlas sign-in.', 'auth_config.strategies.password');
-    for (const [setting, where] of [
-        ['sign-in methods (password, email link, code, social, SSO)', 'Dashboard → Authentication'],
-        ['multi-factor authentication', 'Dashboard → Authentication → Multi-factor'],
-        ['session and token lifetimes', 'Dashboard → Settings → Sessions'],
-        ['social provider credentials', 'Dashboard → Authentication → Social (re-enter each client id and secret as an Atlas oauth provider)'],
-        ['domains and redirect URLs', 'Dashboard → Settings → Domains'],
-        ['forms and branding', 'Dashboard → Toolkit / Branding (use the Atlas components and theme)'],
-        ['custom emails', 'Dashboard → Emails (use the Atlas email templates)'],
-    ]) {
-        b.add('manual', 'settings not in the API', setting, `Userfront does not expose this by API; copy it from the dashboard (${where}).`);
-    }
-    b.add('differs', 'sessions', 'access and ID tokens', 'Userfront tokens carry no issuer claim, so the zero-logout bridge cannot verify them: users sign in once more after the switch.', 'migration bridge');
-    return b.result(`Userfront tenant ${snap.tenantId}`, { lazy: { preset: 'userfront', config: { tenant_id: snap.tenantId } } });
-}
-//# sourceMappingURL=userfront-config.js.map

package/dist/migrate/export/userfront-config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"userfront-config.js","sourceRoot":"","sources":["../../../src/migrate/export/userfront-config.ts"],"names":[],"mappings":";;AAmBA,oDASC;AAED,4DAyBC;AArDD,6CAAmD;AACnD,mDAAuD;AACvD,2CAA4C;AAC5C,+CAAgE;AAczD,KAAK,UAAU,oBAAoB,CAAC,IAAgB,EAAE,QAAgB;IAC3E,MAAM,GAAG,GAAG,IAAA,yBAAa,EAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,IAAI,GAAe,IAAI,CAAC;IAC5B,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,4BAAc,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,MAAM,GAAG,CAAC;IAC3F,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,IAAA,iBAAI,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,SAAgB,wBAAwB,CAAC,IAA6B;IACpE,MAAM,CAAC,GAAG,IAAI,6BAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAA,qBAAK,EAAC,IAAI,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;QACpB,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAU,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,IAAI,CAAC,IAAI;QAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,qFAAqF,EAAE,OAAO,CAAC,CAAC;IACrK,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,iJAAiJ,EAAE,iCAAiC,CAAC,CAAC;IAC5O,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI;QAC7B,CAAC,2DAA2D,EAAE,4BAA4B,CAAC;QAC3F,CAAC,6BAA6B,EAAE,2CAA2C,CAAC;QAC5E,CAAC,6BAA6B,EAAE,iCAAiC,CAAC;QAClE,CAAC,6BAA6B,EAAE,qGAAqG,CAAC;QACtI,CAAC,2BAA2B,EAAE,gCAAgC,CAAC;QAC/D,CAAC,oBAAoB,EAAE,qEAAqE,CAAC;QAC7F,CAAC,eAAe,EAAE,oDAAoD,CAAC;KAC/D,EAAE,CAAC;QACX,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,yBAAyB,EAAE,OAAO,EAAE,sEAAsE,KAAK,IAAI,CAAC,CAAC;IACvI,CAAC;IACD,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,sBAAsB,EAAE,iIAAiI,EAAE,kBAAkB,CAAC,CAAC;IAC5M,OAAO,CAAC,CAAC,MAAM,CAAC,oBAAoB,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;AAChI,CAAC"}

package/dist/migrate/export/userfront.d.ts

@@ -1,38 +0,0 @@
-import type { UserRecord } from '@atlasauth/migrate';
-import { RecordSet, type Obj } from './record-set';
-import { VendorHttp } from './vendor-http';
-/**
- * `atlas migrate export userfront` — a Userfront tenant onto the canonical
- * bundle models, read with an admin API key (`uf_live_admin_…`) on this
- * machine.
- *
- *   - users (email, username, phone, names, image, custom `data`, confirmed
- *     flags, locked) with their roles on the tenant;
- *   - sub-tenants → organizations, with each member's role in them;
- *   - roles (the tenant's role list plus any a user holds).
- *
- * Userfront never returns password hashes, so passwords move by lazy
- * migration: the `userfront` preset checks each password against Userfront's
- * own sign-in on a member's first Atlas sign-in. Not exportable: second
- * factors (re-enrol), passkeys (register again), social account ids (relink
- * by verified email), pending invitations (create only, no listing).
- */
-export interface UserfrontExportOptions {
-    tenantId: string;
-    /** An admin key: `uf_live_admin_…` for the live tenant, `uf_test_admin_…` for test mode. */
-    apiKey: string;
-    apiBase?: string;
-    fetchImpl?: typeof fetch;
-    sleep?: (ms: number) => Promise<void>;
-    onProgress?: (message: string) => void;
-}
-export declare function checkTenantId(tenantId: string): string;
-export declare function userfrontHttp(o: {
-    apiKey: string;
-    apiBase?: string;
-    fetchImpl?: typeof fetch;
-    sleep?: (ms: number) => Promise<void>;
-}): VendorHttp;
-export declare function exportUserfront(opts: UserfrontExportOptions): Promise<RecordSet>;
-/** One Userfront user (users/find result) → a user record. */
-export declare function mapUserfrontUser(u: Obj, tenantId: string): UserRecord | null;