@atlasauth/cli 0.25.0 → 0.26.0

package/dist/commands/migrate.js

@@ -0,0 +1,114 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.migrate = migrate;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const upgrade_1 = require("@atlasauth/upgrade");
+const args_1 = require("../args");
+const errors_1 = require("../errors");
+const output_1 = require("../output");
+const shared_1 = require("./shared");
+const config_1 = require("./config");
+const orchestrator_1 = require("../migrate/better-auth/orchestrator");
+const output_2 = require("../migrate/better-auth/output");
+const translate_1 = require("../migrate/better-auth/translate");
+const commands_1 = require("../migrate/framework/commands");
+/**
+ * `atlas migrate <vendor> [config|export|import|bridge|lazy] [path]` — the
+ * vendor-neutral program, one plugin per vendor (src/migrate/framework);
+ * `atlas migrate export <vendor>` is the same as `atlas migrate <vendor> export`.
+ *
+ * `atlas migrate code --from <vendor> [path]` — rewrite an app's auth code onto
+ * Atlas (Clerk, Auth.js/NextAuth, Supabase Auth, Auth0, Okta, Kinde, Descope, Better Auth).
+ *
+ * Safe by default: without `--yes` it is a dry run that prints the diff of every
+ * file it would change plus a report of what it could not rewrite (file:line).
+ * `--yes` writes the changes. Running it again over migrated code changes nothing.
+ * Users move separately, with `atlas migrate <vendor>` (or `atlas import --from <vendor>`).
+ */
+async function migrate(ctx, args) {
+    const sub = args.positionals[1];
+    if (sub === 'better-auth') {
+        if (args.positionals[2] === 'config')
+            return betterAuthConfig(ctx, args, args.positionals[3]);
+        return (0, orchestrator_1.migrateBetterAuth)(ctx, args, args.positionals[2]);
+    }
+    if (sub === 'export')
+        return (0, commands_1.migrateExportAlias)(ctx, args, args.positionals.slice(2));
+    if (sub !== 'code' && sub && (0, commands_1.hasPlugin)(sub))
+        return (0, commands_1.migrateWithPlugin)(ctx, args, sub, args.positionals.slice(2));
+    if (sub !== 'code') {
+        const others = `Other vendors: ${(0, commands_1.knownVendors)().join(', ')} (atlas migrate <vendor> [config|export|import|bridge|lazy]).`;
+        throw new errors_1.CliError(sub ? `Unknown subcommand 'migrate ${sub}'. Try: code, better-auth. ${others}` : `migrate needs a subcommand: code, better-auth. ${others}`);
+    }
+    const raw = (0, args_1.str)(args.values, 'from');
+    const vendor = (0, upgrade_1.resolveVendor)(raw);
+    if (!vendor) {
+        throw new errors_1.CliError(raw
+            ? `Unknown --from '${raw}'. Use one of: ${upgrade_1.MIGRATE_VENDORS.join(', ')}.`
+            : `migrate code needs --from <${upgrade_1.MIGRATE_VENDORS.join('|')}>.`);
+    }
+    const target = (0, node_path_1.resolve)(args.positionals[2] ?? process.cwd());
+    if (!(0, node_fs_1.existsSync)(target))
+        throw new errors_1.CliError(`Path not found: ${target}`);
+    const write = args.values.yes === true && args.values['dry-run'] !== true;
+    const result = (0, upgrade_1.runMigration)(target, { from: vendor, write });
+    if ((0, shared_1.wantsJson)(args.values)) {
+        (0, output_1.printJson)(ctx.io, {
+            object: 'code_migration',
+            vendor: result.vendor,
+            written: write,
+            env_style: result.envStyle,
+            files_scanned: result.filesScanned,
+            files_changed: result.filesChanged,
+            rewrites: result.rewrites,
+            changes: result.changes.map((c) => ({ path: c.path, diff: (0, upgrade_1.unifiedDiff)(c.before, c.after, c.path) })),
+            manual: result.manual,
+            packages: result.packages,
+            env_to_set: result.envToSet,
+        });
+        return 0;
+    }
+    for (const change of result.changes) {
+        if (write)
+            ctx.io.out(`updated ${change.path}`);
+        else {
+            ctx.io.out((0, upgrade_1.unifiedDiff)(change.before, change.after, change.path));
+            ctx.io.out('');
+        }
+    }
+    for (const line of (0, upgrade_1.formatMigration)(result, { written: write }))
+        ctx.io.out(line);
+    return 0;
+}
+/**
+ * `atlas migrate better-auth config [path]` — offline: read the app's Better Auth
+ * setup statically and write the Atlas config-as-code files plus the report.
+ * Needs no login; nothing is sent anywhere.
+ */
+async function betterAuthConfig(ctx, args, pathArg) {
+    const target = (0, node_path_1.resolve)(pathArg ?? process.cwd());
+    if (!(0, node_fs_1.existsSync)(target))
+        throw new errors_1.CliError(`Path not found: ${target}`);
+    const entry = (0, args_1.str)(args.values, 'entry');
+    const analysis = (0, upgrade_1.analyzeBetterAuth)(target, entry ? { entry } : {});
+    if (!analysis.instances.length) {
+        throw new errors_1.CliError(`No betterAuth({...}) call found under ${target}. Point at the app folder, or pass --entry <file>.`);
+    }
+    const translation = (0, translate_1.translateBetterAuth)(analysis);
+    const format = (0, config_1.resolveFormat)(args.values);
+    const root = (0, node_fs_1.statSync)(target).isDirectory() ? target : (0, node_path_1.dirname)(target);
+    const dir = (0, node_path_1.resolve)(root, (0, args_1.str)(args.values, 'dir') ?? 'atlas-migrate/config');
+    const written = (0, output_2.writeTranslation)(translation, dir, format);
+    if ((0, shared_1.wantsJson)(args.values)) {
+        (0, output_1.printJson)(ctx.io, { ...(0, output_2.reportJson)(translation), config_dir: dir, files: written });
+        return 0;
+    }
+    for (const line of (0, output_2.summaryLines)(translation, dir, written))
+        ctx.io.out(line);
+    ctx.io.out('');
+    ctx.io.out(`Review the files, then apply them with: atlas config import --dir ${dir} --dry-run`);
+    ctx.io.out('Or run the whole program: atlas migrate better-auth');
+    return 0;
+}
+//# sourceMappingURL=migrate.js.map

package/dist/commands/migrate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/commands/migrate.ts"],"names":[],"mappings":";;AA2BA,0BAuDC;AAlFD,qCAA+C;AAC/C,yCAA6C;AAC7C,gDAAmI;AACnI,kCAA+C;AAE/C,sCAAqC;AACrC,sCAAsC;AACtC,qCAAqC;AACrC,qCAAyC;AACzC,sEAAwE;AACxE,0DAA2F;AAC3F,gEAAuE;AACvE,4DAA+G;AAE/G;;;;;;;;;;;;GAYG;AACI,KAAK,UAAU,OAAO,CAAC,GAAe,EAAE,IAAgB;IAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9F,OAAO,IAAA,gCAAiB,EAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAA,6BAAkB,EAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,IAAI,IAAA,oBAAS,EAAC,GAAG,CAAC;QAAE,OAAO,IAAA,4BAAiB,EAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjH,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,kBAAkB,IAAA,uBAAY,GAAE,CAAC,IAAI,CAAC,IAAI,CAAC,+DAA+D,CAAC;QAC1H,MAAM,IAAI,iBAAQ,CAChB,GAAG,CAAC,CAAC,CAAC,+BAA+B,GAAG,8BAA8B,MAAM,EAAE,CAAC,CAAC,CAAC,kDAAkD,MAAM,EAAE,CAC5I,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,IAAA,uBAAa,EAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,iBAAQ,CAChB,GAAG;YACD,CAAC,CAAC,mBAAmB,GAAG,kBAAkB,yBAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACvE,CAAC,CAAC,8BAA8B,yBAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,mBAAO,EAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAA,oBAAU,EAAC,MAAM,CAAC;QAAE,MAAM,IAAI,iBAAQ,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;IAEzE,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAA,sBAAY,EAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAE7D,IAAI,IAAA,kBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE;YAChB,MAAM,EAAE,gBAAgB;YACxB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAA,qBAAW,EAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpG,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,UAAU,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC;QACH,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,KAAK;YAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;aAC3C,CAAC;YACJ,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAA,qBAAW,EAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAClE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,IAAA,yBAAe,EAAC,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjF,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,gBAAgB,CAAC,GAAe,EAAE,IAAgB,EAAE,OAA2B;IAC5F,MAAM,MAAM,GAAG,IAAA,mBAAO,EAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,IAAA,oBAAU,EAAC,MAAM,CAAC;QAAE,MAAM,IAAI,iBAAQ,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAA,2BAAiB,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,iBAAQ,CAAC,yCAAyC,MAAM,oDAAoD,CAAC,CAAC;IAC1H,CAAC;IACD,MAAM,WAAW,GAAG,IAAA,+BAAmB,EAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAA,sBAAa,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,IAAA,kBAAQ,EAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAA,mBAAO,EAAC,MAAM,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,IAAI,EAAE,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,sBAAsB,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,IAAA,yBAAgB,EAAC,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,IAAA,kBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,IAAA,mBAAU,EAAC,WAAW,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACnF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,IAAA,qBAAY,EAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC;QAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7E,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACf,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,qEAAqE,GAAG,YAAY,CAAC,CAAC;IACjG,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;IAClE,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/move-origin.d.ts

@@ -0,0 +1,11 @@
+import type { ParsedArgs } from '../args';
+import type { RunContext } from '../context';
+/**
+ * `atlas move-origin --from <origin> --to <origin> [--dry-run] [--yes]`: move an
+ * app to a new domain in one step. The server rewrites every origin-bearing
+ * field (allowed origins, OAuth client redirect/logout URIs, webhook URLs,
+ * redirect allowlist, branding links, Sign in with Atlas apps). The CLI always
+ * shows the diff first, asks before writing (skip with --yes), and after a real
+ * move sends a signed test delivery to each webhook endpoint that moved.
+ */
+export declare function moveOrigin(ctx: RunContext, args: ParsedArgs): Promise<number>;

package/dist/commands/move-origin.js

@@ -0,0 +1,95 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.moveOrigin = moveOrigin;
+const args_1 = require("../args");
+const errors_1 = require("../errors");
+const output_1 = require("../output");
+const project_1 = require("../project");
+const shared_1 = require("./shared");
+const COLUMNS = [
+    { header: 'OBJECT', get: (c) => `${c.object} ${c.id}` },
+    { header: 'FIELD', get: (c) => c.field },
+    { header: 'BEFORE', get: (c) => c.before },
+    { header: 'AFTER', get: (c) => c.after },
+];
+/**
+ * `atlas move-origin --from <origin> --to <origin> [--dry-run] [--yes]`: move an
+ * app to a new domain in one step. The server rewrites every origin-bearing
+ * field (allowed origins, OAuth client redirect/logout URIs, webhook URLs,
+ * redirect allowlist, branding links, Sign in with Atlas apps). The CLI always
+ * shows the diff first, asks before writing (skip with --yes), and after a real
+ * move sends a signed test delivery to each webhook endpoint that moved.
+ */
+async function moveOrigin(ctx, args) {
+    const v = args.values;
+    const from = (0, args_1.str)(v, 'from');
+    const to = (0, args_1.str)(v, 'to');
+    if (!from || !to)
+        throw new errors_1.CliError('move-origin needs --from <origin> and --to <origin>, e.g. --from https://old.example --to https://new.example.');
+    const json = (0, shared_1.wantsJson)(v);
+    const auth = (0, shared_1.resolveAuth)(ctx, v);
+    const http = (0, project_1.httpFor)(ctx, { secretKey: auth.secretKey, apiUrl: auth.apiUrl });
+    const path = '/v1/instance/move_origin';
+    const plan = await http.post(path, { from, to, dry_run: true });
+    if (!json) {
+        if (plan.changes.length === 0)
+            ctx.io.out(`Nothing on ${plan.from} to move: no field of this instance uses that origin.`);
+        else {
+            ctx.io.out(`${plan.from} → ${plan.to}: ${plan.changes.length} field(s) would change.`);
+            ctx.io.out((0, output_1.renderTable)(COLUMNS, plan.changes));
+        }
+        for (const p of plan.problems)
+            ctx.io.out(`problem: ${p.object} ${p.id} ${p.field}: ${p.message} (${p.url})`);
+    }
+    if (v['dry-run'] === true) {
+        if (json)
+            (0, output_1.printJson)(ctx.io, plan);
+        else
+            ctx.io.out('Dry run: nothing was written.');
+        return plan.problems.length > 0 ? 1 : 0;
+    }
+    if (plan.problems.length > 0) {
+        if (json)
+            (0, output_1.printJson)(ctx.io, plan);
+        throw new errors_1.CliError(`${plan.problems.length} rewritten value(s) would be refused (see above); fix them and run again. Nothing was written.`);
+    }
+    if (plan.changes.length === 0) {
+        if (json)
+            (0, output_1.printJson)(ctx.io, plan);
+        return 0;
+    }
+    if (v.yes !== true) {
+        if (json)
+            throw new errors_1.CliError('Pass --yes to apply a move with --json (the confirmation prompt is interactive).');
+        const answer = (await ctx.prompt.text('Apply these changes? [y/N]', { default: 'n' })).trim().toLowerCase();
+        if (answer !== 'y' && answer !== 'yes') {
+            ctx.io.out('Cancelled: nothing was written.');
+            return 1;
+        }
+    }
+    const done = await http.post(path, { from, to });
+    const hooks = [...new Set(done.changes.filter((c) => c.object === 'webhook_endpoint').map((c) => c.id))];
+    const tests = [];
+    for (const id of hooks) {
+        try {
+            const res = await http.post(`/v1/webhook_endpoints/${encodeURIComponent(id)}/test?wait=10s`, {});
+            const status = res.http_status ?? null;
+            tests.push({ endpoint: id, ok: status !== null && status >= 200 && status < 300, http_status: status, error: res.error ?? null });
+        }
+        catch (err) {
+            tests.push({ endpoint: id, ok: false, http_status: null, error: err instanceof Error ? err.message : String(err) });
+        }
+    }
+    if (json) {
+        (0, output_1.printJson)(ctx.io, { ...done, webhook_tests: tests });
+    }
+    else {
+        ctx.io.out(`Moved ${done.changes.length} field(s) from ${done.from} to ${done.to}.`);
+        for (const t of tests) {
+            ctx.io.out(`webhook ${t.endpoint}: ${t.ok ? `test delivery answered ${t.http_status}` : `test delivery did not get a 2xx${t.http_status ? ` (${t.http_status})` : ''}${t.error ? `: ${t.error}` : ''}`}`);
+        }
+        ctx.io.out("Next: update your app's own config (env vars, DNS, deploy) to the new origin, then run 'atlas preflight'.");
+    }
+    return tests.some((t) => !t.ok) ? 1 : 0;
+}
+//# sourceMappingURL=move-origin.js.map

package/dist/commands/move-origin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"move-origin.js","sourceRoot":"","sources":["../../src/commands/move-origin.ts"],"names":[],"mappings":";;AAiDA,gCAsEC;AAtHD,kCAA8B;AAE9B,sCAAqC;AACrC,sCAAgE;AAChE,wCAAqC;AACrC,qCAAkD;AA4BlD,MAAM,OAAO,GAA2B;IACtC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;IACvD,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE;IACxC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE;IAC1C,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE;CACzC,CAAC;AAEF;;;;;;;GAOG;AACI,KAAK,UAAU,UAAU,CAAC,GAAe,EAAE,IAAgB;IAChE,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,MAAM,IAAI,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC5B,MAAM,EAAE,GAAG,IAAA,UAAG,EAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACxB,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,iBAAQ,CAAC,gHAAgH,CAAC,CAAC;IACvJ,MAAM,IAAI,GAAG,IAAA,kBAAS,EAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,IAAA,oBAAW,EAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,IAAA,iBAAO,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,0BAA0B,CAAC;IAExC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAa,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAE5E,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,IAAI,uDAAuD,CAAC,CAAC;aACrH,CAAC;YACJ,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,yBAAyB,CAAC,CAAC;YACvF,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAA,oBAAW,EAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACjD,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IAChH,CAAC;IAED,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1B,IAAI,IAAI;YAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;;YAC7B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,IAAI,IAAI;YAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAClC,MAAM,IAAI,iBAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,gGAAgG,CAAC,CAAC;IAC9I,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,IAAI,IAAI;YAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,IAAI;YAAE,MAAM,IAAI,iBAAQ,CAAC,kFAAkF,CAAC,CAAC;QACjH,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5G,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACvC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;YAC9C,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAa,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzG,MAAM,KAAK,GAA+F,EAAE,CAAC;IAC7G,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CACzB,yBAAyB,kBAAkB,CAAC,EAAE,CAAC,gBAAgB,EAC/D,EAAE,CACH,CAAC;YACF,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,KAAK,IAAI,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;QACpI,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtH,CAAC;IACH,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,kBAAkB,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACrF,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5M,CAAC;QACD,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,2GAA2G,CAAC,CAAC;IAC1H,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC"}

package/dist/commands/operator.d.ts

@@ -0,0 +1,18 @@
+import { type ParsedArgs } from '../args';
+import type { RunContext } from '../context';
+/**
+ * `atlas login --device` — sign in as an OPERATOR through Atlas's own sign-in
+ * (passkey, MFA) with the OAuth device flow, instead of pasting a key. Only
+ * short-lived tokens are stored: the operator token (to swap later with
+ * `atlas token`) and, with `--resource`, a one-hour token bound to that
+ * instance or app, used as the profile credential. No long-lived key is written.
+ */
+export declare function deviceLogin(ctx: RunContext, args: ParsedArgs): Promise<number>;
+/**
+ * `atlas token --resource <ins_…|app_…|acct_…> --scope "<scopes>"` — swap the
+ * stored operator token for a one-hour Atlas token bound to that resource.
+ * Prints the token (or JSON with --json); `--profile` stores it as that
+ * profile's credential instead.
+ */
+export declare function token(ctx: RunContext, args: ParsedArgs): Promise<number>;
+export declare function keys(ctx: RunContext, args: ParsedArgs): Promise<number>;

package/dist/commands/operator.js

@@ -0,0 +1,238 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deviceLogin = deviceLogin;
+exports.token = token;
+exports.keys = keys;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const backend_1 = require("@atlasauth/backend");
+const node_crypto_1 = require("node:crypto");
+const args_1 = require("../args");
+const project_1 = require("../project");
+const errors_1 = require("../errors");
+const output_1 = require("../output");
+const shared_1 = require("./shared");
+const resources_1 = require("./resources");
+/**
+ * `atlas login --device` — sign in as an OPERATOR through Atlas's own sign-in
+ * (passkey, MFA) with the OAuth device flow, instead of pasting a key. Only
+ * short-lived tokens are stored: the operator token (to swap later with
+ * `atlas token`) and, with `--resource`, a one-hour token bound to that
+ * instance or app, used as the profile credential. No long-lived key is written.
+ */
+async function deviceLogin(ctx, args) {
+    const { values } = args;
+    const profile = (0, args_1.str)(values, 'profile') || 'default';
+    const apiUrl = (0, args_1.str)(values, 'url') || (0, shared_1.envApiUrl)(ctx.env) || backend_1.DEFAULT_API_URL;
+    const opts = { apiUrl, fetch: ctx.fetch };
+    // --audience <id>: an operator token FOR another product that trusts Atlas's
+    // operator issuer (one of /v1/operator `audiences`). It is printed, not
+    // stored: Atlas's own token exchange refuses it.
+    const audience = (0, args_1.str)(values, 'audience');
+    let start;
+    try {
+        start = await (0, backend_1.startOperatorLogin)({ ...opts, ...(audience ? { audience } : {}) });
+    }
+    catch (err) {
+        throw new errors_1.CliError(err instanceof Error ? err.message : String(err));
+    }
+    ctx.io.out(`Open ${start.verification_uri_complete}`);
+    ctx.io.out(`and confirm the code ${start.user_code} (it expires in ${Math.round(start.expires_in / 60)} minutes).`);
+    let token;
+    try {
+        token = await (0, backend_1.pollOperatorLogin)(start, { fetch: ctx.fetch, sleep: ctx.sleep });
+    }
+    catch (err) {
+        if (err instanceof backend_1.OAuthFlowError)
+            throw new errors_1.CliError(`Sign-in did not complete: ${err.message}`);
+        throw err;
+    }
+    if (audience) {
+        if ((0, shared_1.wantsJson)(values))
+            (0, output_1.printJson)(ctx.io, { ...token, audience, issuer: start.config.issuer });
+        else
+            ctx.io.out(token.access_token);
+        ctx.io.err(`An operator token for ${audience} (expires in ${Math.round(token.expires_in / 60)} minutes). Hand it to that product; it is not stored.`);
+        return 0;
+    }
+    const now = Date.now();
+    const file = ctx.config.load();
+    const entry = file.profiles[profile] ?? { api_url: apiUrl, secret_key: '' };
+    entry.api_url = apiUrl;
+    entry.operator = { access_token: token.access_token, expires_at: now + token.expires_in * 1000, issuer: start.config.issuer };
+    const resource = (0, args_1.str)(values, 'resource');
+    if (resource) {
+        const scope = (0, args_1.str)(values, 'scope') || 'read';
+        const bound = await exchangeOrExplain(token.access_token, resource, scope, opts);
+        entry.secret_key = bound.access_token;
+        entry.expires_at = now + bound.expires_in * 1000;
+        entry.resource = resource;
+        entry.scope = bound.scope;
+    }
+    file.profiles[profile] = entry;
+    file.active_profile = profile;
+    ctx.config.save(file);
+    ctx.io.out(`Signed in to ${start.config.issuer} as an operator (profile '${profile}').`);
+    if (resource)
+        ctx.io.out(`Profile credential: a one-hour token for ${resource} (${entry.scope}).`);
+    else
+        ctx.io.out("Run 'atlas token --resource <ins_… | app_…> --scope <scopes>' for a token bound to one instance or app.");
+    return 0;
+}
+async function exchangeOrExplain(subject, resource, scope, opts) {
+    try {
+        return await (0, backend_1.exchangeOperatorToken)(subject, { resource, scope }, opts);
+    }
+    catch (err) {
+        if (err instanceof backend_1.OAuthFlowError)
+            throw new errors_1.CliError(`Token exchange refused (${err.error}): ${err.message}`);
+        throw err;
+    }
+}
+/**
+ * `atlas token --resource <ins_…|app_…|acct_…> --scope "<scopes>"` — swap the
+ * stored operator token for a one-hour Atlas token bound to that resource.
+ * Prints the token (or JSON with --json); `--profile` stores it as that
+ * profile's credential instead.
+ */
+async function token(ctx, args) {
+    const { values } = args;
+    const file = ctx.config.load();
+    const profileName = (0, args_1.str)(values, 'profile') || file.active_profile || 'default';
+    const profile = file.profiles[profileName];
+    if (!profile?.operator || profile.operator.expires_at <= Date.now()) {
+        throw new errors_1.CliError("No current operator sign-in. Run 'atlas login --device' first.");
+    }
+    const resource = (0, args_1.str)(values, 'resource');
+    if (!resource)
+        throw new errors_1.CliError('--resource is required (an ins_…, app_… or acct_… id).');
+    const scope = (0, args_1.str)(values, 'scope') || 'read';
+    const bound = await exchangeOrExplain(profile.operator.access_token, resource, scope, { apiUrl: profile.api_url, fetch: ctx.fetch });
+    if ((0, shared_1.wantsJson)(values)) {
+        (0, output_1.printJson)(ctx.io, bound);
+        return 0;
+    }
+    ctx.io.out(bound.access_token);
+    return 0;
+}
+/** Write a secret to a 0600 file (directories 0700). */
+function writeSecret(path, name, secret) {
+    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(path), { recursive: true, mode: 0o700 });
+    (0, node_fs_1.writeFileSync)(path, `${name}=${secret}\n`, { mode: 0o600 });
+    (0, node_fs_1.chmodSync)(path, 0o600);
+}
+/**
+ * `atlas keys whoami|list|create|rotate|revoke|revoke-leaked`.
+ *
+ * create / rotate ask for the new secret SEALED to a key pair generated here
+ * (X-Secret-Recipient), open it locally and write it to a 0600 file
+ * (`--out`, default `.atlas/secret-key-<id>.env`), so the plaintext never
+ * crosses a log or terminal. `--print-secret` prints it instead.
+ */
+/**
+ * `atlas keys data shred`: remove customer-managed encryption, which crypto-shreds everything encrypted under it.
+ * The caller types the instance id (or passes --confirm <instance id>); only an exact match sends { confirm: 'shred' }.
+ */
+async function shredDataKey(ctx, args) {
+    const auth = (0, shared_1.resolveAuth)(ctx, args.values);
+    const http = (0, project_1.httpFor)(ctx, { secretKey: auth.secretKey, apiUrl: (0, shared_1.envApiUrl)(ctx.env) ?? auth.apiUrl });
+    const inst = await http.get('/v1/instance');
+    if (!inst?.id)
+        throw new errors_1.CliError('Could not read the instance id, so nothing was shredded.');
+    const typed = (0, args_1.str)(args.values, 'confirm') ?? (await ctx.prompt.text(`This permanently destroys the data protected by your key and cannot be undone.\nType the instance id (${inst.id}) to continue`));
+    const a = Buffer.from(typed.trim());
+    const b = Buffer.from(inst.id);
+    if (a.length !== b.length || !(0, node_crypto_1.timingSafeEqual)(a, b))
+        throw new errors_1.CliError('That is not this instance id, so nothing was shredded.');
+    await http.delete('/v1/instance/data_key_provider', { confirm: 'shred' });
+    ctx.io.out('Customer-managed encryption removed; the data under it is shredded.');
+    return 0;
+}
+async function keys(ctx, args) {
+    const { values, positionals } = args;
+    const sub = positionals[1];
+    if (sub === 'data' && positionals[2] === 'shred')
+        return shredDataKey(ctx, args);
+    if (sub === 'data')
+        return (0, resources_1.resourceCommand)('keys data', resources_1.KEYS_DATA)(ctx, (0, resources_1.shift)(args));
+    if (sub === 'op')
+        return (0, resources_1.resourceCommand)('keys op', resources_1.KEYS_OP)(ctx, (0, resources_1.shift)(args));
+    if (sub === 'revoke-leaked') {
+        const secret = positionals[2] ?? (await ctx.prompt.secret('Leaked secret'));
+        if (!secret)
+            throw new errors_1.CliError('Pass the leaked secret (or enter it at the prompt).');
+        const apiUrl = (0, args_1.str)(values, 'url') || (0, shared_1.envApiUrl)(ctx.env) || backend_1.DEFAULT_API_URL;
+        const res = await (0, backend_1.revokeLeakedKeys)([secret], { apiUrl, fetch: ctx.fetch });
+        ctx.io.out(`Result: ${res.results[0]?.outcome ?? 'unknown'}`);
+        return 0;
+    }
+    const auth = (0, shared_1.resolveAuth)(ctx, values);
+    const pair = (0, backend_1.generateSealKeyPair)();
+    const atlas = (0, backend_1.createAtlasClient)({ secretKey: auth.secretKey, apiUrl: auth.apiUrl, fetch: ctx.fetch, secretRecipient: pair.secretRecipient });
+    const emit = (data, line) => ((0, shared_1.wantsJson)(values) ? (0, output_1.printJson)(ctx.io, data) : line());
+    const deliver = (id, sealed, plain) => {
+        const secret = sealed ? (0, backend_1.openSealedSecret)(sealed, pair) : plain;
+        if (!secret)
+            throw new errors_1.CliError('The response carried no secret.');
+        if (values['print-secret'] === true)
+            return ctx.io.out(secret);
+        const path = (0, args_1.str)(values, 'out') || `.atlas/secret-key-${id}.env`;
+        writeSecret(path, 'ATLAS_SECRET_KEY', secret);
+        ctx.io.out(`Secret written to ${path} (mode 0600).`);
+    };
+    switch (sub) {
+        case 'whoami': {
+            const me = await atlas.whoami();
+            emit(me, () => {
+                ctx.io.out(`Key:      ${me.key.id} (${me.key.type}, ${me.key.prefix ?? ''}…)`);
+                ctx.io.out(`Scopes:   ${me.key.scopes.join(' ')}`);
+                ctx.io.out(`Instance: ${me.instance?.id ?? '-'}  Account: ${me.account.id ?? '-'}`);
+                if (me.key.expires_at)
+                    ctx.io.out(`Expires:  ${new Date(me.key.expires_at).toISOString()}`);
+            });
+            return 0;
+        }
+        case 'list': {
+            const page = await atlas.keys.list();
+            emit(page, () => {
+                for (const k of page.data) {
+                    ctx.io.out(`${k.id}  ${k.kind.padEnd(14)} ${k.prefix.padEnd(20)} ${k.status.padEnd(9)} owner=${k.owner ?? '-'} last_used=${k.last_used_at ? new Date(k.last_used_at).toISOString() : 'never'}`);
+                }
+            });
+            return 0;
+        }
+        case 'create': {
+            const scopes = ((0, args_1.str)(values, 'scopes') || '').split(/[ ,]+/).filter(Boolean);
+            if (scopes.length === 0)
+                throw new errors_1.CliError('--scopes is required, e.g. --scopes "instance:read webhooks:read" or --scopes read_only.');
+            const created = await atlas.secretKeys.create({
+                scopes,
+                name: (0, args_1.str)(values, 'name') || undefined,
+                owner: (0, args_1.str)(values, 'owner') || undefined,
+                expires_at: (0, args_1.str)(values, 'expires-at') || undefined,
+                allowed_ips: (0, args_1.str)(values, 'allowed-ips') ? ((0, args_1.str)(values, 'allowed-ips') ?? '').split(',').map((s) => s.trim()) : undefined,
+            });
+            ctx.io.out(`Created ${created.id} (${created.prefix}…) with ${created.scopes.join(' ')}.`);
+            deliver(created.id, created.sealed_secret, created.secret);
+            return 0;
+        }
+        case 'rotate': {
+            const id = (0, shared_1.requireArg)(positionals, 2, 'key id');
+            const overlap = (0, args_1.str)(values, 'overlap');
+            const rotated = await atlas.secretKeys.rotate(id, overlap ? { overlap_seconds: Number(overlap) } : {});
+            ctx.io.out(`Rotated ${id} → ${rotated.id}.` +
+                (rotated.previous_key_expires_at ? ` The old key works until ${new Date(rotated.previous_key_expires_at).toISOString()}.` : ' The old key was revoked.'));
+            deliver(rotated.id, rotated.sealed_secret, rotated.secret);
+            return 0;
+        }
+        case 'revoke': {
+            const id = (0, shared_1.requireArg)(positionals, 2, 'key id');
+            await atlas.secretKeys.revoke(id);
+            ctx.io.out(`Revoked ${id}.`);
+            return 0;
+        }
+        default:
+            throw new errors_1.CliError('Usage: atlas keys whoami|list|create|rotate <id>|revoke <id>|revoke-leaked [secret]|data ...|op ...');
+    }
+}
+//# sourceMappingURL=operator.js.map

package/dist/commands/operator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../src/commands/operator.ts"],"names":[],"mappings":";;AA6BA,kCAmDC;AAiBD,sBAkBC;AAmCD,oBAgFC;AAtOD,qCAA8D;AAC9D,yCAAoC;AACpC,gDAU4B;AAC5B,6CAA8C;AAC9C,kCAA+C;AAC/C,wCAAqC;AAErC,sCAAqC;AACrC,sCAAsC;AACtC,qCAAyE;AACzE,2CAAyE;AAEzE;;;;;;GAMG;AACI,KAAK,UAAU,WAAW,CAAC,GAAe,EAAE,IAAgB;IACjE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,MAAM,OAAO,GAAG,IAAA,UAAG,EAAC,MAAM,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC;IACpD,MAAM,MAAM,GAAG,IAAA,UAAG,EAAC,MAAM,EAAE,KAAK,CAAC,IAAI,IAAA,kBAAS,EAAC,GAAG,CAAC,GAAG,CAAC,IAAI,yBAAe,CAAC;IAC3E,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IAC1C,6EAA6E;IAC7E,wEAAwE;IACxE,iDAAiD;IACjD,MAAM,QAAQ,GAAG,IAAA,UAAG,EAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,IAAA,4BAAkB,EAAC,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,iBAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,CAAC,yBAAyB,EAAE,CAAC,CAAC;IACtD,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,wBAAwB,KAAK,CAAC,SAAS,mBAAmB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC;IACpH,IAAI,KAAK,CAAC;IACV,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,IAAA,2BAAiB,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACjF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,wBAAc;YAAE,MAAM,IAAI,iBAAQ,CAAC,6BAA6B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAClG,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,IAAA,kBAAS,EAAC,MAAM,CAAC;YAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;;YACzF,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACpC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,yBAAyB,QAAQ,gBAAgB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,CAAC,uDAAuD,CAAC,CAAC;QACtJ,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC5E,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC;IACvB,KAAK,CAAC,QAAQ,GAAG,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,UAAU,EAAE,GAAG,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IAC9H,MAAM,QAAQ,GAAG,IAAA,UAAG,EAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,IAAA,UAAG,EAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACjF,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC;QACtC,KAAK,CAAC,UAAU,GAAG,GAAG,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;QACjD,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAC1B,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC5B,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;IAC/B,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;IAC9B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,KAAK,CAAC,MAAM,CAAC,MAAM,6BAA6B,OAAO,KAAK,CAAC,CAAC;IACzF,IAAI,QAAQ;QAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,4CAA4C,QAAQ,KAAK,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;;QAC9F,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,yGAAyG,CAAC,CAAC;IAC3H,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,OAAe,EAAE,QAAgB,EAAE,KAAa,EAAE,IAA8C;IAC/H,IAAI,CAAC;QACH,OAAO,MAAM,IAAA,+BAAqB,EAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,wBAAc;YAAE,MAAM,IAAI,iBAAQ,CAAC,2BAA2B,GAAG,CAAC,KAAK,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/G,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,KAAK,CAAC,GAAe,EAAE,IAAgB;IAC3D,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,WAAW,GAAG,IAAA,UAAG,EAAC,MAAM,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,cAAc,IAAI,SAAS,CAAC;IAC/E,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACpE,MAAM,IAAI,iBAAQ,CAAC,gEAAgE,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAA,UAAG,EAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,iBAAQ,CAAC,wDAAwD,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,IAAA,UAAG,EAAC,MAAM,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACrI,IAAI,IAAA,kBAAS,EAAC,MAAM,CAAC,EAAE,CAAC;QACtB,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC/B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,wDAAwD;AACxD,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY,EAAE,MAAc;IAC7D,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,IAAA,uBAAa,EAAC,IAAI,EAAE,GAAG,IAAI,IAAI,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,IAAA,mBAAS,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;GAOG;AACH;;;GAGG;AACH,KAAK,UAAU,YAAY,CAAC,GAAe,EAAE,IAAgB;IAC3D,MAAM,IAAI,GAAG,IAAA,oBAAW,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAA,iBAAO,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACpG,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAkB,cAAc,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI,EAAE,EAAE;QAAE,MAAM,IAAI,iBAAQ,CAAC,0DAA0D,CAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,yGAAyG,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;IACtM,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,IAAA,6BAAe,EAAC,CAAC,EAAE,CAAC,CAAC;QAAE,MAAM,IAAI,iBAAQ,CAAC,wDAAwD,CAAC,CAAC;IAClI,MAAM,IAAI,CAAC,MAAM,CAAC,gCAAgC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,qEAAqE,CAAC,CAAC;IAClF,OAAO,CAAC,CAAC;AACX,CAAC;AAEM,KAAK,UAAU,IAAI,CAAC,GAAe,EAAE,IAAgB;IAC1D,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACrC,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,GAAG,KAAK,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,OAAO;QAAE,OAAO,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACjF,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,IAAA,2BAAe,EAAC,WAAW,EAAE,qBAAS,CAAC,CAAC,GAAG,EAAE,IAAA,iBAAK,EAAC,IAAI,CAAC,CAAC,CAAC;IACrF,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAA,2BAAe,EAAC,SAAS,EAAE,mBAAO,CAAC,CAAC,GAAG,EAAE,IAAA,iBAAK,EAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,iBAAQ,CAAC,qDAAqD,CAAC,CAAC;QACvF,MAAM,MAAM,GAAG,IAAA,UAAG,EAAC,MAAM,EAAE,KAAK,CAAC,IAAI,IAAA,kBAAS,EAAC,GAAG,CAAC,GAAG,CAAC,IAAI,yBAAe,CAAC;QAC3E,MAAM,GAAG,GAAG,MAAM,IAAA,0BAAgB,EAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3E,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,oBAAW,EAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,IAAA,6BAAmB,GAAE,CAAC;IACnC,MAAM,KAAK,GAAG,IAAA,2BAAiB,EAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;IAC7I,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,IAAgB,EAAE,EAAE,CAAC,CAAC,IAAA,kBAAS,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACzG,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,MAA0B,EAAE,KAAyB,EAAE,EAAE;QACpF,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAA,0BAAgB,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC/D,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,iBAAQ,CAAC,iCAAiC,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,IAAI;YAAE,OAAO,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,IAAA,UAAG,EAAC,MAAM,EAAE,KAAK,CAAC,IAAI,qBAAqB,EAAE,MAAM,CAAC;QACjE,WAAW,CAAC,IAAI,EAAE,kBAAkB,EAAE,MAAM,CAAC,CAAC;QAC9C,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,qBAAqB,IAAI,eAAe,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE;gBACZ,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC/E,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnD,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,EAAE,IAAI,GAAG,cAAc,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;gBACpF,IAAI,EAAE,CAAC,GAAG,CAAC,UAAU;oBAAE,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC9F,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;gBACd,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC1B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,IAAI,GAAG,cAAc,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;gBAClM,CAAC;YACH,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,CAAC,IAAA,UAAG,EAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC5E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,iBAAQ,CAAC,0FAA0F,CAAC,CAAC;YACxI,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC5C,MAAM;gBACN,IAAI,EAAE,IAAA,UAAG,EAAC,MAAM,EAAE,MAAM,CAAC,IAAI,SAAS;gBACtC,KAAK,EAAE,IAAA,UAAG,EAAC,MAAM,EAAE,OAAO,CAAC,IAAI,SAAS;gBACxC,UAAU,EAAE,IAAA,UAAG,EAAC,MAAM,EAAE,YAAY,CAAC,IAAI,SAAS;gBAClD,WAAW,EAAE,IAAA,UAAG,EAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,UAAG,EAAC,MAAM,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;aACzH,CAAC,CAAC;YACH,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,MAAM,WAAW,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC3F,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,IAAA,mBAAU,EAAC,WAAW,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YAChD,MAAM,OAAO,GAAG,IAAA,UAAG,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvG,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,WAAW,EAAE,MAAM,OAAO,CAAC,EAAE,GAAG;gBAC9B,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,4BAA4B,IAAI,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAC3J,CAAC;YACF,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC;QACX,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,IAAA,mBAAU,EAAC,WAAW,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YAChD,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAClC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YAC7B,OAAO,CAAC,CAAC;QACX,CAAC;QACD;YACE,MAAM,IAAI,iBAAQ,CAAC,qGAAqG,CAAC,CAAC;IAC9H,CAAC;AACH,CAAC"}

package/dist/commands/orgs.d.ts

@@ -0,0 +1,4 @@
+import { type ParsedArgs } from '../args';
+import type { RunContext } from '../context';
+/** `atlas orgs <list|get|members>` — maps onto `client.organizations.*`. */
+export declare function orgs(ctx: RunContext, args: ParsedArgs): Promise<number>;

package/dist/commands/orgs.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.orgs = orgs;
+const args_1 = require("../args");
+const errors_1 = require("../errors");
+const output_1 = require("../output");
+const shared_1 = require("./shared");
+const ORG_COLUMNS = [
+    { header: 'ID', get: (o) => o.id },
+    { header: 'NAME', get: (o) => o.name },
+    { header: 'SLUG', get: (o) => o.slug },
+    { header: 'MEMBERS_MAX', get: (o) => o.max_allowed_memberships },
+    { header: 'CREATED', get: (o) => (0, output_1.fmtTime)(o.created_at) },
+];
+const MEMBER_COLUMNS = [
+    { header: 'ID', get: (m) => m.id },
+    { header: 'USER_ID', get: (m) => m.user_id },
+    { header: 'ROLE', get: (m) => m.role },
+    { header: 'CREATED', get: (m) => (0, output_1.fmtTime)(m.created_at) },
+];
+/** `atlas orgs <list|get|members>` — maps onto `client.organizations.*`. */
+async function orgs(ctx, args) {
+    const sub = args.positionals[1];
+    const json = (0, shared_1.wantsJson)(args.values);
+    switch (sub) {
+        case 'list': {
+            const { client } = (0, shared_1.requireClient)(ctx, args.values);
+            const page = await client.organizations.list({
+                limit: (0, args_1.limit)(args.values),
+                starting_after: (0, args_1.str)(args.values, 'starting-after'),
+            });
+            (0, output_1.printList)(ctx.io, { json, columns: ORG_COLUMNS }, page);
+            return 0;
+        }
+        case 'get': {
+            const id = (0, shared_1.requireArg)(args.positionals, 2, 'org-id');
+            const { client } = (0, shared_1.requireClient)(ctx, args.values);
+            const org = await client.organizations.get(id);
+            if (json)
+                (0, output_1.printJson)(ctx.io, org);
+            else
+                ctx.io.out(renderOrg(org));
+            return 0;
+        }
+        case 'members': {
+            const id = (0, shared_1.requireArg)(args.positionals, 2, 'org-id');
+            const { client } = (0, shared_1.requireClient)(ctx, args.values);
+            // memberships.list returns { data, has_more } — no cursor on this route.
+            const page = await client.organizations.memberships.list(id);
+            if (json)
+                (0, output_1.printJson)(ctx.io, page);
+            else
+                ctx.io.out((0, output_1.renderTable)(MEMBER_COLUMNS, page.data));
+            return 0;
+        }
+        default:
+            throw new errors_1.CliError(sub
+                ? `Unknown subcommand 'orgs ${sub}'. Try: list, get, members.`
+                : 'orgs needs a subcommand: list, get, members.');
+    }
+}
+function renderOrg(o) {
+    return [
+        `ID:       ${o.id}`,
+        `Name:     ${o.name}`,
+        `Slug:     ${o.slug}`,
+        `Max members: ${o.max_allowed_memberships}`,
+        `Created by:  ${o.created_by}`,
+        `Created:  ${(0, output_1.fmtTime)(o.created_at)}`,
+    ].join('\n');
+}
+//# sourceMappingURL=orgs.js.map

package/dist/commands/orgs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orgs.js","sourceRoot":"","sources":["../../src/commands/orgs.ts"],"names":[],"mappings":";;AAuBA,oBAyCC;AA/DD,kCAAsD;AAEtD,sCAAqC;AACrC,sCAAoF;AACpF,qCAAgE;AAEhE,MAAM,WAAW,GAA2B;IAC1C,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;IAClC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;IACtC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;IACtC,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,uBAAuB,EAAE;IAChE,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,CAAC,CAAC,UAAU,CAAC,EAAE;CACzD,CAAC;AAEF,MAAM,cAAc,GAAqC;IACvD,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;IAClC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE;IAC5C,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;IACtC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,CAAC,CAAC,UAAU,CAAC,EAAE;CACzD,CAAC;AAEF,4EAA4E;AACrE,KAAK,UAAU,IAAI,CAAC,GAAe,EAAE,IAAgB;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAA,kBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEpC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,sBAAa,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC;gBAC3C,KAAK,EAAE,IAAA,YAAK,EAAC,IAAI,CAAC,MAAM,CAAC;gBACzB,cAAc,EAAE,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC;aACnD,CAAC,CAAC;YACH,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;YACxD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,EAAE,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YACrD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,sBAAa,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC/C,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;;gBAC5B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YAChC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,EAAE,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;YACrD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,sBAAa,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,yEAAyE;YACzE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC7D,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;;gBAC7B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAA,oBAAW,EAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,CAAC;QACX,CAAC;QAED;YACE,MAAM,IAAI,iBAAQ,CAChB,GAAG;gBACD,CAAC,CAAC,4BAA4B,GAAG,6BAA6B;gBAC9D,CAAC,CAAC,8CAA8C,CACnD,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,CAAe;IAChC,OAAO;QACL,aAAa,CAAC,CAAC,EAAE,EAAE;QACnB,aAAa,CAAC,CAAC,IAAI,EAAE;QACrB,aAAa,CAAC,CAAC,IAAI,EAAE;QACrB,gBAAgB,CAAC,CAAC,uBAAuB,EAAE;QAC3C,gBAAgB,CAAC,CAAC,UAAU,EAAE;QAC9B,aAAa,IAAA,gBAAO,EAAC,CAAC,CAAC,UAAU,CAAC,EAAE;KACrC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/commands/pages.d.ts

@@ -0,0 +1,14 @@
+import { type ParsedArgs } from '../args';
+import type { RunContext } from '../context';
+/**
+ * `atlas pages` — code-defined hosted-page templates.
+ *
+ *   list                              each page's live and draft template
+ *   push <file> --page <p> [--promote] save the file as the draft (and publish it with --promote)
+ *   preview --page <p>                print a signed link to the page with the draft applied
+ *   promote --page <p>                make the draft the live template
+ *   pull --page <p> [--draft]         print the live (or draft) definition as JSON
+ *   discard --page <p> --status <draft|live>
+ *                                     drop the draft, or take the live template down
+ */
+export declare function pages(ctx: RunContext, args: ParsedArgs): Promise<number>;