@atlasauth/cli 0.25.0 → 0.26.0

package/dist/commands/import-better-auth.js

@@ -0,0 +1,164 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.importBetterAuthBundle = importBetterAuthBundle;
+const backend_1 = require("@atlasauth/backend");
+const args_1 = require("../args");
+const errors_1 = require("../errors");
+const output_1 = require("../output");
+const project_1 = require("../project");
+const shared_1 = require("./shared");
+function parseOptions(ctx, raw) {
+    if (!raw)
+        return undefined;
+    const text = raw.startsWith('@') ? ctx.readFile(raw.slice(1)) : raw;
+    try {
+        const v = JSON.parse(text);
+        if (!v || typeof v !== 'object' || Array.isArray(v))
+            throw new Error('not an object');
+        return v;
+    }
+    catch {
+        throw new errors_1.CliError('--options must be a JSON object, or @<file> holding one.');
+    }
+}
+function printReport(ctx, imp) {
+    const out = (s) => ctx.io.out(s);
+    const r = imp.report;
+    if (!r)
+        return;
+    out('Dry run (nothing imported yet):');
+    for (const m of r.models) {
+        out(`  ${m.label.padEnd(44)} ${String(m.found).padStart(6)} found  ${String(m.will_create).padStart(6)} new  ${String(m.will_update).padStart(6)} existing  ${String(m.will_skip).padStart(6)} skipped`);
+    }
+    if (r.conflicts_total) {
+        out(`Conflicts with existing Atlas data: ${r.conflicts_total}`);
+        for (const c of r.conflicts.slice(0, 10))
+            out(`  [${c.resolution}] ${c.model} ${c.row_id ?? ''}: ${c.message}`);
+    }
+    for (const a of r.action_items)
+        out(`${a.severity === 'required' ? 'REQUIRED' : a.severity === 'recommended' ? 'todo' : 'note'}: ${a.message} (${a.count}${a.items.length ? `: ${a.items.slice(0, 5).join(', ')}` : ''})`);
+    for (const w of r.warnings)
+        out(`warning: ${w}`);
+    if (r.skipped_total) {
+        out(`Skipped rows: ${r.skipped_total}`);
+        for (const [code, n] of Object.entries(r.skipped_by_code))
+            out(`  ${code}: ${n}`);
+    }
+}
+function printResult(ctx, imp) {
+    const r = imp.result;
+    if (!r)
+        return;
+    ctx.io.out(`Imported (import ${imp.id}):`);
+    for (const m of r.models) {
+        ctx.io.out(`  ${m.label.padEnd(44)} ${m.created} created, ${m.updated + m.unchanged} existing, ${m.skipped} skipped, ${m.failed} failed`);
+    }
+}
+async function poll(ctx, http, imp, json) {
+    const sleep = ctx.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+    let last = -1;
+    while (['analyzing', 'queued', 'applying'].includes(imp.status)) {
+        await sleep(2000);
+        imp = await http.get(`/v1/better_auth_imports/${encodeURIComponent(imp.id)}`);
+        const pct = imp.progress?.percent ?? -1;
+        if (!json && pct !== last && imp.progress)
+            ctx.io.err(`  ${imp.status}: ${imp.progress.processed}/${imp.progress.total} (${pct}%)`);
+        last = pct;
+    }
+    return imp;
+}
+async function importBetterAuthBundle(ctx, args) {
+    const json = (0, shared_1.wantsJson)(args.values);
+    const auth = (0, shared_1.resolveAuth)(ctx, args.values);
+    const http = (0, project_1.httpFor)(ctx, { secretKey: auth.secretKey, apiUrl: auth.apiUrl });
+    const bundle = (0, args_1.str)(args.values, 'bundle');
+    const existing = (0, args_1.str)(args.values, 'import');
+    const options = parseOptions(ctx, (0, args_1.str)(args.values, 'options'));
+    if (!bundle && !existing) {
+        const key = await http.get('/v1/better_auth_imports/public_key');
+        if (json)
+            (0, output_1.printJson)(ctx.io, key);
+        else {
+            ctx.io.out(`Import key ${key.kid} (fingerprint ${key.fingerprint}).`);
+            ctx.io.out('In your Better Auth app, run:');
+            ctx.io.out(`  npx atlas-better-auth-export --out better-auth.atlas-bundle --public-key ${key.compact}`);
+            ctx.io.out('then:');
+            ctx.io.out('  atlas import --from better-auth --bundle better-auth.atlas-bundle');
+        }
+        return 0;
+    }
+    let imp;
+    if (bundle) {
+        const text = ctx.readFile(bundle);
+        const parts = (0, backend_1.splitBundleParts)(text);
+        if (parts.length === 0)
+            throw new errors_1.CliError(`${bundle} is empty.`);
+        imp = await http.post('/v1/better_auth_imports', options ? { options } : {});
+        for (let i = 0; i < parts.length; i++) {
+            await http.put(`/v1/better_auth_imports/${encodeURIComponent(imp.id)}/parts/${i + 1}`, { data: parts[i] });
+            if (!json)
+                ctx.io.err(`  uploaded part ${i + 1}/${parts.length}`);
+        }
+        imp = await http.post(`/v1/better_auth_imports/${encodeURIComponent(imp.id)}/finalize`, {});
+    }
+    else {
+        imp = await http.get(`/v1/better_auth_imports/${encodeURIComponent(existing)}`);
+        if (imp.status === 'uploading') {
+            imp = await http.post(`/v1/better_auth_imports/${encodeURIComponent(imp.id)}/finalize`, {});
+        }
+        else if (options && ['ready', 'failed', 'completed'].includes(imp.status)) {
+            imp = await http.post(`/v1/better_auth_imports/${encodeURIComponent(imp.id)}/dry_run`, { options });
+        }
+    }
+    imp = await poll(ctx, http, imp, json);
+    if (imp.status === 'invalid' || (imp.status === 'failed' && !imp.analyzed_at)) {
+        if (json)
+            (0, output_1.printJson)(ctx.io, imp);
+        throw new errors_1.CliError(`Atlas could not read the bundle: ${imp.error?.message ?? imp.status} (${imp.error?.code ?? imp.status}).`);
+    }
+    if (imp.status === 'completed' && !options) {
+        if (json)
+            (0, output_1.printJson)(ctx.io, imp);
+        else {
+            ctx.io.out(`Import ${imp.id} is already complete.`);
+            printResult(ctx, imp);
+        }
+        return 0;
+    }
+    if (!json)
+        printReport(ctx, imp);
+    if (args.values['dry-run']) {
+        if (json)
+            (0, output_1.printJson)(ctx.io, imp);
+        else
+            ctx.io.out(`Nothing was imported. Apply it with: atlas import --from better-auth --import ${imp.id}`);
+        return 0;
+    }
+    const conflicts = imp.report?.conflicts_total ?? 0;
+    if (conflicts > 0 && !args.values['confirm-conflicts']) {
+        if (json)
+            (0, output_1.printJson)(ctx.io, imp);
+        throw new errors_1.CliError(`The dry run found ${conflicts} conflict(s). Review them, then re-run with --import ${imp.id} --confirm-conflicts.`);
+    }
+    if (!args.values.yes && !json) {
+        const answer = (await ctx.prompt.text(`Import into Atlas now? [y/N] `)).trim().toLowerCase();
+        if (answer !== 'y' && answer !== 'yes') {
+            ctx.io.out(`Not applied. Apply later with: atlas import --from better-auth --import ${imp.id}`);
+            return 0;
+        }
+    }
+    imp = await http.post(`/v1/better_auth_imports/${encodeURIComponent(imp.id)}/apply`, conflicts > 0 ? { confirm_conflicts: true } : {});
+    imp = await poll(ctx, http, imp, json);
+    if (json)
+        (0, output_1.printJson)(ctx.io, imp);
+    else
+        printResult(ctx, imp);
+    if (imp.status !== 'completed') {
+        throw new errors_1.CliError(`The import stopped (${imp.error?.message ?? imp.status}). Run the same command with --import ${imp.id} to resume.`);
+    }
+    const failed = imp.progress?.failed ?? 0;
+    if (!json)
+        ctx.io.out(`Done. Next: turn on the session bridge so signed-in users stay signed in, then switch your app's SDK to Atlas.`);
+    return failed > 0 ? 2 : 0;
+}
+//# sourceMappingURL=import-better-auth.js.map

package/dist/commands/import-better-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-better-auth.js","sourceRoot":"","sources":["../../src/commands/import-better-auth.ts"],"names":[],"mappings":";;AAkFA,wDAmFC;AArKD,gDAAuG;AACvG,kCAA+C;AAE/C,sCAAqC;AACrC,sCAAsC;AACtC,wCAAqC;AACrC,qCAAkD;AAsBlD,SAAS,YAAY,CAAC,GAAe,EAAE,GAAuB;IAC5D,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACpE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QACtC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;QACtF,OAAO,CAA4B,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,iBAAQ,CAAC,0DAA0D,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAe,EAAE,GAAqB;IACzD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;IACrB,IAAI,CAAC,CAAC;QAAE,OAAO;IACf,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACzB,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC3M,CAAC;IACD,IAAI,CAAC,CAAC,eAAe,EAAE,CAAC;QACtB,GAAG,CAAC,uCAAuC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;QAChE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAAE,GAAG,CAAC,MAAM,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAClH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3N,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ;QAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QACpB,GAAG,CAAC,iBAAiB,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAAE,GAAG,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAe,EAAE,GAAqB;IACzD,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;IACrB,IAAI,CAAC,CAAC;QAAE,OAAO;IACf,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,oBAAoB,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACzB,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,aAAa,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,SAAS,cAAc,CAAC,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC;IAC5I,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,GAAe,EAAE,IAAU,EAAE,GAAqB,EAAE,IAAa;IACnF,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACzF,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;IACd,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAChE,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAClB,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAmB,2BAA2B,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAChG,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ;YAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,GAAG,IAAI,CAAC,CAAC;QACpI,IAAI,GAAG,GAAG,CAAC;IACb,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAEM,KAAK,UAAU,sBAAsB,CAAC,GAAe,EAAE,IAAgB;IAC5E,MAAM,IAAI,GAAG,IAAA,kBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAA,oBAAW,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAA,iBAAO,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,EAAE,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAE/D,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAsB,oCAAoC,CAAC,CAAC;QACtF,IAAI,IAAI;YAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;aAC5B,CAAC;YACJ,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,GAAG,iBAAiB,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC;YACtE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAC5C,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,8EAA8E,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACxG,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACpB,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,GAAqB,CAAC;IAC1B,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,IAAA,0BAAgB,EAAC,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,iBAAQ,CAAC,GAAG,MAAM,YAAY,CAAC,CAAC;QAClE,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAmB,yBAAyB,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,GAAG,CAAC,2BAA2B,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3G,IAAI,CAAC,IAAI;gBAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAmB,2BAA2B,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAChH,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAmB,2BAA2B,kBAAkB,CAAC,QAAS,CAAC,EAAE,CAAC,CAAC;QACnG,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC/B,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAmB,2BAA2B,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAChH,CAAC;aAAM,IAAI,OAAO,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5E,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAmB,2BAA2B,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACxH,CAAC;IACH,CAAC;IACD,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAEvC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9E,IAAI,IAAI;YAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,iBAAQ,CAAC,oCAAoC,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,IAAI,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;IACjI,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3C,IAAI,IAAI;YAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;aAC5B,CAAC;YACJ,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,EAAE,uBAAuB,CAAC,CAAC;YACpD,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAEjC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,IAAI,IAAI;YAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;;YAC5B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,iFAAiF,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3G,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,eAAe,IAAI,CAAC,CAAC;IACnD,IAAI,SAAS,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACvD,IAAI,IAAI;YAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,iBAAQ,CAAC,qBAAqB,SAAS,wDAAwD,GAAG,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC1I,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7F,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACvC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,2EAA2E,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAChG,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IACD,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAmB,2BAA2B,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACzJ,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,IAAI;QAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;;QAC5B,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,iBAAQ,CAAC,uBAAuB,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,GAAG,CAAC,MAAM,yCAAyC,GAAG,CAAC,EAAE,aAAa,CAAC,CAAC;IAC1I,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gHAAgH,CAAC,CAAC;IACxI,OAAO,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5B,CAAC"}

package/dist/commands/import-jsonl.d.ts

@@ -0,0 +1,50 @@
+import { type ParsedArgs } from '../args';
+import type { ConfigHttp } from '../config-http';
+import type { RunContext } from '../context';
+/**
+ * `atlas import users.jsonl`: Atlas's own import shape, one user per line, mapped
+ * onto `POST /v1/user_imports`. Idempotent by `external_id`: each row is looked up
+ * first, so re-running a file changes nothing and a catch-up run only touches what
+ * is new or changed. Output carries counts and external ids, never an email address
+ * or a password digest.
+ */
+export interface JobResult {
+    id: string;
+    status: string;
+    total: number;
+    succeeded: number;
+    failed: number;
+    results?: Array<{
+        outcome: 'created' | 'updated' | 'matched' | 'failed';
+    }> | null;
+}
+/** Send one batch and wait for it: a batch over the inline limit is queued. */
+export declare function sendImportBatch(ctx: RunContext, http: ConfigHttp, body: Record<string, unknown>): Promise<JobResult>;
+/** Epoch seconds, epoch milliseconds or an ISO string as epoch ms; undefined when absent or unreadable. */
+export declare function parseTimestamp(value: unknown): number | undefined;
+/** `--since` as epoch ms. */
+export declare function parseSince(raw: string | undefined): number | undefined;
+/** `--password-policy`, checked. */
+export declare function parsePasswordPolicy(raw: string | undefined): string | undefined;
+/** `--on-conflict`, checked. */
+export declare function parseOnConflict(raw: string | undefined, fallback: 'skip' | 'update'): 'skip' | 'update';
+interface InputRow {
+    external_id: string;
+    email: string;
+    email_verified?: boolean;
+    password_digest?: string;
+    algorithm?: string;
+    password_salt?: string;
+    first_name?: string;
+    last_name?: string;
+    oauth_identities?: Array<{
+        provider: string;
+        provider_user_id: string;
+    }>;
+    created_at?: string | number;
+    updated_at?: string | number;
+}
+/** Parse the file. Errors name the line only: a line holds an email and maybe a digest. */
+export declare function parseUsersJsonl(text: string): InputRow[];
+export declare function importJsonl(ctx: RunContext, args: ParsedArgs, file: string): Promise<number>;
+export {};

package/dist/commands/import-jsonl.js

@@ -0,0 +1,252 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sendImportBatch = sendImportBatch;
+exports.parseTimestamp = parseTimestamp;
+exports.parseSince = parseSince;
+exports.parsePasswordPolicy = parsePasswordPolicy;
+exports.parseOnConflict = parseOnConflict;
+exports.parseUsersJsonl = parseUsersJsonl;
+exports.importJsonl = importJsonl;
+const args_1 = require("../args");
+const errors_1 = require("../errors");
+const output_1 = require("../output");
+const project_1 = require("../project");
+const shared_1 = require("./shared");
+/** Send one batch and wait for it: a batch over the inline limit is queued. */
+async function sendImportBatch(ctx, http, body) {
+    let job = await http.post('/v1/user_imports', body);
+    while (job.status === 'pending' || job.status === 'processing') {
+        await (ctx.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms))))(2000);
+        job = await http.get(`/v1/jobs/${job.id}`);
+    }
+    return job;
+}
+/** Epoch seconds, epoch milliseconds or an ISO string as epoch ms; undefined when absent or unreadable. */
+function parseTimestamp(value) {
+    if (typeof value === 'number' && Number.isFinite(value))
+        return value < 1e12 ? value * 1000 : value;
+    if (typeof value !== 'string' || !value.trim())
+        return undefined;
+    const n = Number(value);
+    if (Number.isFinite(n))
+        return parseTimestamp(n);
+    const t = Date.parse(value);
+    return Number.isNaN(t) ? undefined : t;
+}
+/** `--since` as epoch ms. */
+function parseSince(raw) {
+    if (raw === undefined)
+        return undefined;
+    const t = parseTimestamp(raw);
+    if (t === undefined)
+        throw new errors_1.CliError(`--since must be an ISO date or epoch time, got '${raw}'.`);
+    return t;
+}
+/** `--password-policy`, checked. */
+function parsePasswordPolicy(raw) {
+    if (raw !== undefined && raw !== 'active' && raw !== 'until_email_verified') {
+        throw new errors_1.CliError(`--password-policy must be active or until_email_verified, got '${raw}'.`);
+    }
+    return raw;
+}
+/** `--on-conflict`, checked. */
+function parseOnConflict(raw, fallback) {
+    if (raw === undefined)
+        return fallback;
+    if (raw !== 'skip' && raw !== 'update')
+        throw new errors_1.CliError(`--on-conflict must be skip or update, got '${raw}'.`);
+    return raw;
+}
+/** Parse the file. Errors name the line only: a line holds an email and maybe a digest. */
+function parseUsersJsonl(text) {
+    const rows = [];
+    const seen = new Set();
+    text.split(/\r?\n/).forEach((raw, i) => {
+        if (!raw.trim())
+            return;
+        const line = i + 1;
+        let row;
+        try {
+            row = JSON.parse(raw);
+        }
+        catch {
+            throw new errors_1.CliError(`Line ${line} is not valid JSON.`);
+        }
+        if (row === null || typeof row !== 'object' || typeof row.external_id !== 'string' || !row.external_id.trim()) {
+            throw new errors_1.CliError(`Line ${line} has no external_id: re-running is only safe when every row has one.`);
+        }
+        if (typeof row.email !== 'string' || !row.email.trim())
+            throw new errors_1.CliError(`Line ${line} has no email.`);
+        if (seen.has(row.external_id))
+            throw new errors_1.CliError(`Line ${line} repeats an external_id from an earlier line.`);
+        seen.add(row.external_id);
+        rows.push(row);
+    });
+    return rows;
+}
+function toImportRow(row) {
+    const out = { email_address: row.email, external_id: row.external_id, email_verified: row.email_verified === true };
+    if (row.password_digest)
+        out.password_hash = row.password_digest;
+    if (row.algorithm)
+        out.password_hasher = row.algorithm;
+    if (row.password_salt)
+        out.password_salt = row.password_salt;
+    if (row.first_name !== undefined)
+        out.first_name = row.first_name;
+    if (row.last_name !== undefined)
+        out.last_name = row.last_name;
+    if (row.created_at !== undefined)
+        out.created_at = row.created_at;
+    if (row.oauth_identities?.length) {
+        out.external_accounts = row.oauth_identities.map((a) => ({ provider: a.provider, provider_user_id: a.provider_user_id }));
+    }
+    return out;
+}
+/** A small map with bounded concurrency: one lookup per row, without flooding the API. */
+async function mapLimited(items, limit, fn) {
+    const out = new Array(items.length);
+    let next = 0;
+    await Promise.all(Array.from({ length: Math.min(limit, items.length) }, async () => {
+        while (next < items.length) {
+            const i = next++;
+            out[i] = await fn(items[i]);
+        }
+    }));
+    return out;
+}
+const BATCH = 100;
+async function importJsonl(ctx, args, file) {
+    const v = args.values;
+    const json = (0, shared_1.wantsJson)(v);
+    const dry = v['dry-run'] === true;
+    const onConflict = parseOnConflict((0, args_1.str)(v, 'on-conflict'), 'skip');
+    const policy = parsePasswordPolicy((0, args_1.str)(v, 'password-policy'));
+    const since = parseSince((0, args_1.str)(v, 'since'));
+    const all = parseUsersJsonl(ctx.readFile(file));
+    let skipped = 0;
+    const rows = all.filter((r) => {
+        const at = parseTimestamp(r.updated_at) ?? parseTimestamp(r.created_at);
+        // A row with no date cannot be shown to be old, so it stays.
+        const keep = since === undefined || at === undefined || at >= since;
+        if (!keep)
+            skipped += 1;
+        return keep;
+    });
+    const auth = (0, shared_1.resolveAuth)(ctx, v);
+    const http = (0, project_1.httpFor)(ctx, { secretKey: auth.secretKey, apiUrl: auth.apiUrl });
+    const live = await mapLimited(rows, 10, async (r) => {
+        const res = await http.get(`/v1/users?external_id=${encodeURIComponent(r.external_id)}&limit=1`);
+        return res.data?.[0];
+    });
+    const creates = [];
+    const upserts = [];
+    const direct = [];
+    const emailChanged = [];
+    const passwordNotApplied = [];
+    rows.forEach((row, i) => {
+        const user = live[i];
+        if (!user) {
+            creates.push(toImportRow(row));
+            return;
+        }
+        if (onConflict === 'skip') {
+            skipped += 1;
+            return;
+        }
+        const address = user.email_addresses?.find((e) => e.email_address.toLowerCase() === row.email.trim().toLowerCase());
+        // The import matches on a verified email, so a changed address would make a second user.
+        if (!address) {
+            emailChanged.push(row.external_id);
+            skipped += 1;
+            return;
+        }
+        const namesDiffer = (row.first_name !== undefined && row.first_name !== user.first_name) || (row.last_name !== undefined && row.last_name !== user.last_name);
+        const verifyNow = row.email_verified === true && address.verified !== true;
+        const wantsPassword = Boolean(row.password_digest) && user.password_enabled === false;
+        const missingIdentity = Boolean(user.external_accounts && row.oauth_identities?.some((a) => !user.external_accounts.some((b) => b.provider === a.provider && b.provider_user_id === a.provider_user_id)));
+        const at = parseTimestamp(row.updated_at);
+        const newer = at !== undefined && user.updated_at !== undefined && at > user.updated_at;
+        if (!namesDiffer && !verifyNow && !wantsPassword && !missingIdentity && !newer) {
+            skipped += 1;
+            return;
+        }
+        if (address.verified === true) {
+            upserts.push(toImportRow(row));
+            return;
+        }
+        // The address is unverified, so the import would not find this user: update it by id.
+        if (wantsPassword || missingIdentity)
+            passwordNotApplied.push(row.external_id);
+        direct.push({ row, user, ...(verifyNow ? { verifyId: address.id } : {}) });
+    });
+    const unverifiedWithPassword = rows.filter((r) => r.password_digest && r.email_verified !== true).length;
+    const report = {
+        created: creates.length,
+        updated: upserts.length + direct.length,
+        skipped,
+        unverified_with_password: unverifiedWithPassword,
+        failed: 0,
+        jobs: [],
+    };
+    const notes = [
+        ...(emailChanged.length ? [`${emailChanged.length} row(s) have a different email from the existing user and were left alone; change the address on the user first. external_id: ${emailChanged.join(', ')}`] : []),
+        ...(passwordNotApplied.length ? [`${passwordNotApplied.length} row(s) hold a password or identity that cannot be added while the address is unverified. external_id: ${passwordNotApplied.join(', ')}`] : []),
+    ];
+    if (!dry) {
+        // What was planned as created may still meet a verified email already here.
+        report.created = 0;
+        report.updated = 0;
+        const send = async (batch, upsert) => {
+            const job = await sendImportBatch(ctx, http, { users: batch, upsert, ...(policy ? { password_policy: policy } : {}) });
+            report.jobs.push(job.id);
+            if (!job.results) {
+                report.created += job.succeeded;
+                report.failed += job.failed;
+                return;
+            }
+            for (const r of job.results) {
+                if (r.outcome === 'created')
+                    report.created += 1;
+                else if (r.outcome === 'updated')
+                    report.updated += 1;
+                else if (r.outcome === 'matched')
+                    report.skipped += 1;
+                else
+                    report.failed += 1;
+            }
+        };
+        for (let i = 0; i < creates.length; i += BATCH)
+            await send(creates.slice(i, i + BATCH), onConflict === 'update');
+        for (let i = 0; i < upserts.length; i += BATCH)
+            await send(upserts.slice(i, i + BATCH), true);
+        for (const { row, user, verifyId } of direct) {
+            if (row.first_name !== undefined || row.last_name !== undefined) {
+                await http.patch(`/v1/users/${encodeURIComponent(user.id)}`, {
+                    ...(row.first_name !== undefined ? { first_name: row.first_name } : {}),
+                    ...(row.last_name !== undefined ? { last_name: row.last_name } : {}),
+                });
+            }
+            if (verifyId)
+                await http.post(`/v1/users/${encodeURIComponent(user.id)}/email_addresses/${encodeURIComponent(verifyId)}/verify`, {});
+            report.updated += 1;
+        }
+    }
+    if (json)
+        (0, output_1.printJson)(ctx.io, { dry_run: dry, ...report, notes });
+    else {
+        ctx.io.out(dry ? `Dry run of ${all.length} row(s). Nothing was sent.` : `Imported ${all.length} row(s).`);
+        ctx.io.out(`  created: ${report.created}`);
+        ctx.io.out(`  updated: ${report.updated}`);
+        ctx.io.out(`  skipped: ${report.skipped}`);
+        ctx.io.out(`  unverified with password: ${report.unverified_with_password}`);
+        if (!dry)
+            ctx.io.out(`  failed: ${report.failed}`);
+        for (const n of notes)
+            ctx.io.out(`  note: ${n}`);
+        if (report.failed)
+            ctx.io.out(`Per-row issues: GET /v1/jobs/<job-id>/errors for jobs ${report.jobs.join(', ')}`);
+    }
+    return report.failed > 0 ? 2 : 0;
+}
+//# sourceMappingURL=import-jsonl.js.map

package/dist/commands/import-jsonl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"import-jsonl.js","sourceRoot":"","sources":["../../src/commands/import-jsonl.ts"],"names":[],"mappings":";;AA0BA,0CAOC;AAGD,wCAOC;AAGD,gCAKC;AAGD,kDAKC;AAGD,0CAIC;AAiBD,0CAqBC;AA2CD,kCAgIC;AAnRD,kCAA+C;AAG/C,sCAAqC;AACrC,sCAAsC;AACtC,wCAAqC;AACrC,qCAAkD;AAmBlD,+EAA+E;AACxE,KAAK,UAAU,eAAe,CAAC,GAAe,EAAE,IAAgB,EAAE,IAA6B;IACpG,IAAI,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAY,kBAAkB,EAAE,IAAI,CAAC,CAAC;IAC/D,OAAO,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QAC/D,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC3E,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAY,YAAY,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2GAA2G;AAC3G,SAAgB,cAAc,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IACpG,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,SAAS,CAAC;IACjE,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC;IACjD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,6BAA6B;AAC7B,SAAgB,UAAU,CAAC,GAAuB;IAChD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,iBAAQ,CAAC,mDAAmD,GAAG,IAAI,CAAC,CAAC;IACpG,OAAO,CAAC,CAAC;AACX,CAAC;AAED,oCAAoC;AACpC,SAAgB,mBAAmB,CAAC,GAAuB;IACzD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,sBAAsB,EAAE,CAAC;QAC5E,MAAM,IAAI,iBAAQ,CAAC,kEAAkE,GAAG,IAAI,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gCAAgC;AAChC,SAAgB,eAAe,CAAC,GAAuB,EAAE,QAA2B;IAClF,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,QAAQ;QAAE,MAAM,IAAI,iBAAQ,CAAC,8CAA8C,GAAG,IAAI,CAAC,CAAC;IAClH,OAAO,GAAG,CAAC;AACb,CAAC;AAgBD,2FAA2F;AAC3F,SAAgB,eAAe,CAAC,IAAY;IAC1C,MAAM,IAAI,GAAe,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACrC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;YAAE,OAAO;QACxB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAa,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,iBAAQ,CAAC,QAAQ,IAAI,qBAAqB,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9G,MAAM,IAAI,iBAAQ,CAAC,QAAQ,IAAI,sEAAsE,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,iBAAQ,CAAC,QAAQ,IAAI,gBAAgB,CAAC,CAAC;QACzG,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;YAAE,MAAM,IAAI,iBAAQ,CAAC,QAAQ,IAAI,+CAA+C,CAAC,CAAC;QAC/G,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,GAAa;IAChC,MAAM,GAAG,GAA4B,EAAE,aAAa,EAAE,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;IAC7I,IAAI,GAAG,CAAC,eAAe;QAAE,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC,eAAe,CAAC;IACjE,IAAI,GAAG,CAAC,SAAS;QAAE,GAAG,CAAC,eAAe,GAAG,GAAG,CAAC,SAAS,CAAC;IACvD,IAAI,GAAG,CAAC,aAAa;QAAE,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC;IAC7D,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;QAAE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;IAClE,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IAC/D,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;QAAE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;IAClE,IAAI,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;QACjC,GAAG,CAAC,iBAAiB,GAAG,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IAC5H,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAYD,0FAA0F;AAC1F,KAAK,UAAU,UAAU,CAAO,KAAU,EAAE,KAAa,EAAE,EAA2B;IACpF,MAAM,GAAG,GAAG,IAAI,KAAK,CAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,IAAI,EAAE;QAC/D,OAAO,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;YACjB,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,KAAK,GAAG,GAAG,CAAC;AAEX,KAAK,UAAU,WAAW,CAAC,GAAe,EAAE,IAAgB,EAAE,IAAY;IAC/E,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,MAAM,IAAI,GAAG,IAAA,kBAAS,EAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;IAClC,MAAM,UAAU,GAAG,eAAe,CAAC,IAAA,UAAG,EAAC,CAAC,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,mBAAmB,CAAC,IAAA,UAAG,EAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,IAAA,UAAG,EAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAEhD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5B,MAAM,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACxE,6DAA6D;QAC7D,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,IAAI,KAAK,CAAC;QACpE,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,IAAA,oBAAW,EAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAA,iBAAO,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAwB,yBAAyB,kBAAkB,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QACxH,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAgE,EAAE,CAAC;IAC/E,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,kBAAkB,GAAa,EAAE,CAAC;IACxC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QACpH,yFAAyF;QACzF,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9J,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC;QAC3E,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,gBAAgB,KAAK,KAAK,CAAC;QACtF,MAAM,eAAe,GAAG,OAAO,CAC7B,IAAI,CAAC,iBAAiB,IAAI,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,gBAAgB,KAAK,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAC1K,CAAC;QACF,MAAM,EAAE,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;QACxF,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,IAAI,CAAC,eAAe,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/E,OAAO,IAAI,CAAC,CAAC;YACb,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,sFAAsF;QACtF,IAAI,aAAa,IAAI,eAAe;YAAE,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC/E,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,MAAM,sBAAsB,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;IACzG,MAAM,MAAM,GAAG;QACb,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;QACvC,OAAO;QACP,wBAAwB,EAAE,sBAAsB;QAChD,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,EAAc;KACrB,CAAC;IAEF,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,MAAM,iIAAiI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClN,GAAG,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,MAAM,0GAA0G,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9M,CAAC;IAEF,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,4EAA4E;QAC5E,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;QACnB,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,KAAK,EAAE,KAAgC,EAAE,MAAe,EAAE,EAAE;YACvE,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACvH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC;gBAChC,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;gBAC5B,OAAO;YACT,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;oBAAE,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;qBAC5C,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;oBAAE,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;qBACjD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;oBAAE,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;;oBACjD,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC,CAAC;QACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC;QACjH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9F,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,MAAM,EAAE,CAAC;YAC7C,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAChE,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE;oBAC3D,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvE,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrE,CAAC,CAAC;YACL,CAAC;YACD,IAAI,QAAQ;gBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,aAAa,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,kBAAkB,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACrI,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,IAAI,IAAI;QAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;SAC3D,CAAC;QACJ,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,MAAM,4BAA4B,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,MAAM,UAAU,CAAC,CAAC;QAC1G,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,+BAA+B,MAAM,CAAC,wBAAwB,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,GAAG;YAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,KAAK;YAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,MAAM;YAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,yDAAyD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnC,CAAC"}

package/dist/commands/import.d.ts

@@ -0,0 +1,3 @@
+import { type ParsedArgs } from '../args';
+import type { RunContext } from '../context';
+export declare function importUsers(ctx: RunContext, args: ParsedArgs): Promise<number>;

package/dist/commands/import.js

@@ -0,0 +1,133 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.importUsers = importUsers;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const args_1 = require("../args");
+const errors_1 = require("../errors");
+const output_1 = require("../output");
+const project_1 = require("../project");
+const vendors_1 = require("../import/vendors");
+const shared_1 = require("./shared");
+const import_better_auth_1 = require("./import-better-auth");
+const import_jsonl_1 = require("./import-jsonl");
+async function importUsers(ctx, args) {
+    const vendor = (0, args_1.str)(args.values, 'from');
+    if (!vendor && args.positionals[1])
+        return (0, import_jsonl_1.importJsonl)(ctx, args, args.positionals[1]);
+    if (!vendor || !vendors_1.VENDORS.includes(vendor)) {
+        throw new errors_1.CliError(`import needs a users file (atlas import users.jsonl) or --from <${vendors_1.VENDORS.join('|')}>.`);
+    }
+    // Better Auth: the sealed bundle from `npx atlas-better-auth-export` carries
+    // every model (passwords, two-factor, passkeys, orgs, API keys, sessions…);
+    // the table-JSON path below stays for exports made without it.
+    if (vendor === 'better-auth' && ((0, args_1.str)(args.values, 'bundle') || (0, args_1.str)(args.values, 'import') || !args.positionals[1])) {
+        return (0, import_better_auth_1.importBetterAuthBundle)(ctx, args);
+    }
+    const file = args.positionals[1];
+    if (!file)
+        throw new errors_1.CliError(`import needs the export file: atlas import --from ${vendor} <file>`);
+    const text = ctx.readFile(file);
+    let doc;
+    let hashes;
+    try {
+        doc = (0, vendors_1.parseExport)(text, file);
+        const hashesFile = (0, args_1.str)(args.values, 'hashes');
+        if (hashesFile)
+            hashes = (0, vendors_1.parseExport)(ctx.readFile(hashesFile), hashesFile);
+    }
+    catch (err) {
+        throw new errors_1.CliError(err instanceof Error ? err.message : String(err));
+    }
+    const onConflict = (0, import_jsonl_1.parseOnConflict)((0, args_1.str)(args.values, 'on-conflict'), 'update');
+    const passwordPolicy = (0, import_jsonl_1.parsePasswordPolicy)((0, args_1.str)(args.values, 'password-policy'));
+    const sinceRaw = (0, args_1.str)(args.values, 'since');
+    const since = (0, import_jsonl_1.parseSince)(sinceRaw);
+    const mapped = (0, vendors_1.mapExport)(vendor, doc, hashes);
+    const warnings = mapped.warnings;
+    const rows = since === undefined ? mapped.rows : mapped.rows.filter((r) => ((0, import_jsonl_1.parseTimestamp)(r.created_at) ?? since) >= since);
+    const json = (0, shared_1.wantsJson)(args.values);
+    const summary = (0, vendors_1.summarize)(rows);
+    let hashConfig;
+    const hashConfigFile = (0, args_1.str)(args.values, 'hash-config');
+    if (hashConfigFile) {
+        try {
+            hashConfig = JSON.parse(ctx.readFile(hashConfigFile));
+        }
+        catch {
+            throw new errors_1.CliError(`--hash-config ${hashConfigFile} is not valid JSON.`);
+        }
+    }
+    if (vendor === 'firebase' && (summary.with_password_hash ?? 0) > 0 && !hashConfig && !args.values['dry-run']) {
+        throw new errors_1.CliError('Firebase password hashes need the project hash parameters. Copy them from the Firebase console (Authentication > Users > Password hash parameters) into a JSON file and pass --hash-config <file>.');
+    }
+    if (args.values['dry-run']) {
+        if (json)
+            (0, output_1.printJson)(ctx.io, { vendor, summary, warnings, sample: rows.slice(0, 3).map(redact) });
+        else {
+            ctx.io.out(`Dry run: ${rows.length} user(s) mapped from ${vendor}. Nothing was sent.`);
+            for (const [k, v] of Object.entries(summary))
+                ctx.io.out(`  ${k.replace(/_/g, ' ')}: ${v}`);
+            for (const w of warnings)
+                ctx.io.out(`  note: ${w}`);
+        }
+        return 0;
+    }
+    if (rows.length === 0)
+        throw new errors_1.CliError('The export contains no users with an email address.');
+    const batchSize = Math.min(Math.max(Number((0, args_1.str)(args.values, 'batch-size') ?? 100) || 100, 1), 100);
+    const statePath = (0, args_1.str)(args.values, 'state-file') ?? `${file}.atlas-import.json`;
+    const sha = (0, node_crypto_1.createHash)('sha256').update(text).update(sinceRaw ?? '').digest('hex');
+    let state = { vendor, input_sha256: sha, next_index: 0, total: rows.length, succeeded: 0, failed: 0, jobs: [] };
+    if ((0, node_fs_1.existsSync)(statePath)) {
+        const saved = JSON.parse((0, node_fs_1.readFileSync)(statePath, 'utf8'));
+        if (saved.input_sha256 !== sha || saved.vendor !== vendor) {
+            throw new errors_1.CliError(`${statePath} belongs to a different export. Delete it or pass --state-file to start over.`);
+        }
+        state = saved;
+        if (state.next_index >= rows.length) {
+            ctx.io.out(`Already imported: ${state.succeeded} succeeded, ${state.failed} failed. Delete ${statePath} to run again.`);
+            return 0;
+        }
+        ctx.io.err(`Resuming at user ${state.next_index + 1} of ${rows.length}.`);
+    }
+    const auth = (0, shared_1.resolveAuth)(ctx, args.values);
+    const http = (0, project_1.httpFor)(ctx, { secretKey: auth.secretKey, apiUrl: auth.apiUrl });
+    for (const w of warnings)
+        ctx.io.err(`note: ${w}`);
+    while (state.next_index < rows.length) {
+        const batch = rows.slice(state.next_index, state.next_index + batchSize);
+        const body = { users: batch, upsert: onConflict === 'update' };
+        if (passwordPolicy)
+            body.password_policy = passwordPolicy;
+        if (args.values['create-orgs'])
+            body.create_organizations = true;
+        if (hashConfig)
+            body.password_hash_config = { firebase: hashConfig };
+        const job = await (0, import_jsonl_1.sendImportBatch)(ctx, http, body);
+        // Under --on-conflict skip an existing user is reported as a row issue; it is not one here.
+        const matched = (job.results ?? []).filter((r) => r.outcome === 'matched').length;
+        state.next_index += batch.length;
+        state.succeeded += job.succeeded;
+        state.failed += job.failed - matched;
+        if (matched)
+            state.skipped = (state.skipped ?? 0) + matched;
+        state.jobs.push(job.id);
+        (0, node_fs_1.writeFileSync)(statePath, JSON.stringify(state, null, 2));
+        if (!json)
+            ctx.io.err(`  ${state.next_index}/${rows.length} sent (job ${job.id}: ${job.succeeded} ok, ${job.failed} issues)`);
+    }
+    if (json)
+        (0, output_1.printJson)(ctx.io, { ...state, summary, warnings });
+    else {
+        ctx.io.out(`Imported ${rows.length} user(s) from ${vendor}: ${state.succeeded} created or updated, ${state.skipped ? `${state.skipped} skipped, ` : ''}${state.failed} row issue(s).`);
+        if (state.failed)
+            ctx.io.out(`Per-row issues: GET /v1/jobs/<job-id>/errors for jobs ${state.jobs.join(', ')}`);
+    }
+    return state.failed > 0 ? 2 : 0;
+}
+/** A dry-run sample never prints a password hash. */
+function redact(row) {
+    return row.password_hash ? { ...row, password_hash: '[redacted]', ...(row.password_salt ? { password_salt: '[redacted]' } : {}) } : row;
+}
+//# sourceMappingURL=import.js.map