@atlasauth/cli 0.25.0 → 0.26.0

package/dist/migrate/export/firebase.js

@@ -0,0 +1,464 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stdBase64 = void 0;
+exports.parseServiceAccount = parseServiceAccount;
+exports.serviceAccountAssertion = serviceAccountAssertion;
+exports.serviceAccountToken = serviceAccountToken;
+exports.firebaseHttp = firebaseHttp;
+exports.fetchHashConfig = fetchHashConfig;
+exports.hashParamsOf = hashParamsOf;
+exports.exportFirebase = exportFirebase;
+exports.mapFirebaseUser = mapFirebaseUser;
+exports.parseFirebaseExport = parseFirebaseExport;
+const node_crypto_1 = require("node:crypto");
+const csv_1 = require("../../import/csv");
+const record_set_1 = require("./record-set");
+const vendor_http_1 = require("./vendor-http");
+const API = 'https://identitytoolkit.googleapis.com';
+const TOKEN_URL = 'https://oauth2.googleapis.com/token';
+const SCOPE = 'https://www.googleapis.com/auth/cloud-platform https://www.googleapis.com/auth/identitytoolkit';
+/** `base64("REDACTED")`: what the API returns for a hash the caller may not read. */
+const REDACTED = 'UkVEQUNURUQ=';
+const PAGE = 1000;
+/** Firebase provider ids → the provider name identity records carry (Atlas's key where one exists). */
+const SOCIAL = {
+    'google.com': 'google',
+    'facebook.com': 'facebook',
+    'twitter.com': 'x',
+    'github.com': 'github',
+    'apple.com': 'apple',
+    'microsoft.com': 'microsoft',
+    'linkedin.com': 'linkedin',
+    'yahoo.com': 'yahoo',
+};
+/** Providers that are sign-in methods, not linked accounts. */
+const NOT_IDENTITIES = new Set(['password', 'phone', 'emailLink', 'anonymous', 'custom']);
+/** Firebase's `-_` alphabet → standard base64 (the CLI does the same; the Admin SDK does not). */
+const stdBase64 = (v) => v.trim().replace(/-/g, '+').replace(/_/g, '/');
+exports.stdBase64 = stdBase64;
+const ms = (v) => {
+    const s = (0, record_set_1.str)(v);
+    if (!s)
+        return undefined;
+    const n = Number(s);
+    if (Number.isFinite(n) && n > 0)
+        return n;
+    const t = Date.parse(s);
+    return Number.isFinite(t) ? t : undefined;
+};
+// ── access ─────────────────────────────────────────────────────────────────
+function parseServiceAccount(text) {
+    let doc;
+    try {
+        doc = JSON.parse(text);
+    }
+    catch {
+        throw new Error('The service-account key file is not JSON.');
+    }
+    if (!(0, record_set_1.isObj)(doc) || doc.type !== 'service_account' || !(0, record_set_1.str)(doc.client_email) || !(0, record_set_1.str)(doc.private_key)) {
+        throw new Error('That is not a service-account key file (it needs type "service_account", client_email and private_key).');
+    }
+    return {
+        client_email: (0, record_set_1.str)(doc.client_email),
+        private_key: String(doc.private_key),
+        private_key_id: (0, record_set_1.str)(doc.private_key_id),
+        project_id: (0, record_set_1.str)(doc.project_id),
+        token_uri: (0, record_set_1.str)(doc.token_uri),
+    };
+}
+/** The RS256 JWT assertion of the OAuth 2.0 JWT-bearer grant, signed locally with the service account's key. */
+function serviceAccountAssertion(sa, nowSeconds) {
+    const enc = (o) => Buffer.from(JSON.stringify(o)).toString('base64url');
+    const header = { alg: 'RS256', typ: 'JWT', ...(sa.private_key_id ? { kid: sa.private_key_id } : {}) };
+    const claims = { iss: sa.client_email, sub: sa.client_email, scope: SCOPE, aud: sa.token_uri ?? TOKEN_URL, iat: nowSeconds, exp: nowSeconds + 3600 };
+    const input = `${enc(header)}.${enc(claims)}`;
+    const sig = (0, node_crypto_1.createSign)('RSA-SHA256').update(input).sign(sa.private_key).toString('base64url');
+    return `${input}.${sig}`;
+}
+/** Exchange the assertion for an access token — at Google, the only place the key's signature goes. */
+async function serviceAccountToken(sa, fetchImpl = fetch, now = Date.now) {
+    const url = sa.token_uri ?? TOKEN_URL;
+    if (!/^https:\/\/[a-z0-9.-]+\.googleapis\.com\//.test(url))
+        throw new Error(`Refusing the service account's token_uri ${url}: not a googleapis.com address.`);
+    const res = await fetchImpl(url, {
+        method: 'POST',
+        headers: { 'content-type': 'application/x-www-form-urlencoded', accept: 'application/json' },
+        body: new URLSearchParams({ grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer', assertion: serviceAccountAssertion(sa, Math.floor(now() / 1000)) }).toString(),
+    });
+    const body = (await res.json().catch(() => ({})));
+    if (!res.ok || !(0, record_set_1.str)(body.access_token)) {
+        throw new vendor_http_1.VendorApiError('Google OAuth', res.status, '/token', (0, record_set_1.str)(body.error_description) ?? (0, record_set_1.str)(body.error) ?? '');
+    }
+    return (0, record_set_1.str)(body.access_token);
+}
+function firebaseHttp(o) {
+    if (!o.accessToken && !o.serviceAccount)
+        throw new Error('Firebase: pass a service-account key file or an access token.');
+    let bearer = o.accessToken;
+    return new vendor_http_1.VendorHttp({
+        vendor: 'Firebase',
+        baseUrl: API,
+        headers: async () => ({
+            authorization: `Bearer ${(bearer ??= await serviceAccountToken(o.serviceAccount, o.fetchImpl, o.now))}`,
+            // Bills quota to the project being exported (needed with user credentials from gcloud).
+            'x-goog-user-project': o.projectId,
+        }),
+        fetchImpl: o.fetchImpl,
+        sleep: o.sleep,
+    });
+}
+/** The scope of a call: the project, or one tenant of it. */
+const scopePath = (projectId, tenant) => `projects/${encodeURIComponent(projectId)}${tenant ? `/tenants/${encodeURIComponent(tenant)}` : ''}`;
+/** A project's (or tenant's) password hash parameters, from the admin v2 config. Null when the caller cannot read them. */
+async function fetchHashConfig(http, projectId, tenant) {
+    try {
+        const { body } = await http.get(tenant ? `/v2/${scopePath(projectId, tenant)}` : `/v2/${scopePath(projectId)}/config`);
+        // The project config nests it under signIn; a Tenant carries it at the top level.
+        const hc = (0, record_set_1.isObj)(body.hashConfig) ? body.hashConfig : (0, record_set_1.isObj)(body.signIn) && (0, record_set_1.isObj)(body.signIn.hashConfig) ? body.signIn.hashConfig : null;
+        if (!hc)
+            return null;
+        return { params: hashParamsOf(hc), algorithm: (0, record_set_1.str)(hc.algorithm) };
+    }
+    catch (err) {
+        if (err instanceof vendor_http_1.VendorApiError && [403, 404].includes(err.status))
+            return null;
+        throw err;
+    }
+}
+/** `signIn.hashConfig` (or the console's names) → the registry's scrypt_firebase params. */
+function hashParamsOf(hc) {
+    const n = (v) => (typeof v === 'number' ? v : (0, record_set_1.str)(v) ? Number((0, record_set_1.str)(v)) : undefined);
+    return (0, record_set_1.compact)({
+        signer_key: (0, record_set_1.str)(hc.signerKey ?? hc.signer_key ?? hc.base64_signer_key) && (0, exports.stdBase64)((0, record_set_1.str)(hc.signerKey ?? hc.signer_key ?? hc.base64_signer_key)),
+        salt_separator: (0, record_set_1.str)(hc.saltSeparator ?? hc.salt_separator ?? hc.base64_salt_separator) !== undefined ? (0, exports.stdBase64)((0, record_set_1.str)(hc.saltSeparator ?? hc.salt_separator ?? hc.base64_salt_separator)) : undefined,
+        rounds: n(hc.rounds),
+        mem_cost: n(hc.memoryCost ?? hc.memCost ?? hc.mem_cost),
+    });
+}
+function completeParams(p) {
+    if (!p.signer_key || !p.rounds || !p.mem_cost)
+        return null;
+    return { signer_key: p.signer_key, salt_separator: p.salt_separator ?? '', rounds: p.rounds, mem_cost: p.mem_cost };
+}
+async function pages(http, path, key, size) {
+    const out = [];
+    let token;
+    const sep = path.includes('?') ? '&' : '?';
+    for (let guard = 0; guard < 100_000; guard++) {
+        const q = `${sep}${key === 'users' ? 'maxResults' : 'pageSize'}=${size}${token ? `&nextPageToken=${encodeURIComponent(token)}` : ''}`;
+        const { body } = await http.get(`${path}${q}`);
+        out.push(...(0, record_set_1.objs)(body?.[key]));
+        token = (0, record_set_1.str)(body?.nextPageToken);
+        if (!token)
+            break;
+    }
+    return out;
+}
+// ── export ─────────────────────────────────────────────────────────────────
+async function exportFirebase(opts) {
+    const set = new record_set_1.RecordSet();
+    const progress = opts.onProgress ?? (() => undefined);
+    const projectId = opts.projectId.trim();
+    if (!/^[a-z0-9][a-z0-9-]{3,62}$/.test(projectId))
+        throw new Error(`Not a Firebase project id: ${opts.projectId}`);
+    set.manifest.origin = `firebase project ${projectId}`;
+    const flagParams = opts.hashParams ?? {};
+    if (opts.usersText !== undefined) {
+        if (opts.tenant)
+            throw new Error('Firebase: an auth:export file holds project-level users only (the CLI cannot export a tenant); use the API for tenants.');
+        progress('users file');
+        const users = parseFirebaseExport(opts.usersText, opts.usersFileName);
+        const params = completeParams(flagParams);
+        if (!params)
+            warnNoParams(set);
+        addUsers(set, users, { params, includeAnonymous: opts.includeAnonymous === true });
+        if (/\.csv$/i.test(opts.usersFileName ?? '') || !opts.usersText.trim().startsWith('{')) {
+            set.warn('The auth:export CSV has no second factors and keeps ten social providers only: export through the API (a service account) to move SMS second factors and OIDC / SAML links.');
+        }
+        else {
+            set.warn('auth:export keeps ten social providers only and drops OIDC, SAML and phone links: export through the API (a service account) for those.');
+        }
+        settle(set, params);
+        return set;
+    }
+    const http = firebaseHttp({
+        accessToken: opts.accessToken,
+        serviceAccount: opts.serviceAccountJson ? parseServiceAccount(opts.serviceAccountJson) : undefined,
+        projectId,
+        fetchImpl: opts.fetchImpl,
+        sleep: opts.sleep,
+        now: opts.now,
+    });
+    const scopes = [];
+    if (opts.tenant === 'all') {
+        progress('tenants');
+        const tenants = await pages(http, `/v2/${scopePath(projectId)}/tenants`, 'tenants', 1000);
+        for (const t of tenants) {
+            const id = (0, record_set_1.str)(t.name)?.split('/').pop();
+            if (id)
+                scopes.push({ tenant: id, name: (0, record_set_1.str)(t.displayName) ?? id });
+        }
+        if (!scopes.length)
+            set.warn('The project has no Identity Platform tenants; nothing was exported. Run without the tenant option for project-level users.');
+        else
+            set.add('role', { key: 'member', name: 'Member', scope: 'organization' });
+    }
+    else {
+        scopes.push({ tenant: opts.tenant || undefined });
+    }
+    let anyParams = null;
+    for (const scope of scopes) {
+        const label = scope.tenant ? `tenant ${scope.tenant}` : 'project';
+        progress(`${label} hash parameters`);
+        const fetched = await fetchHashConfig(http, projectId, scope.tenant);
+        if (fetched?.algorithm && fetched.algorithm !== 'SCRYPT')
+            set.warn(`The ${label} reports hash algorithm ${fetched.algorithm}; Firebase stores its own passwords with SCRYPT, so the hashes are read as Firebase scrypt.`);
+        const params = completeParams({ ...fetched?.params, ...flagParams });
+        if (!params)
+            warnNoParams(set, label);
+        anyParams ??= params;
+        progress(`${label} SAML and OIDC providers`);
+        const connections = await enterpriseConnections(http, projectId, scope.tenant);
+        for (const c of connections)
+            set.add('sso_connection', c, c.id);
+        if (opts.tenant === 'all' && scope.tenant) {
+            set.add('organization', { id: scope.tenant, name: scope.name ?? scope.tenant, public_metadata: { firebase_tenant_id: scope.tenant } });
+        }
+        progress(`${label} users`);
+        const users = await pages(http, `/v1/${scopePath(projectId, scope.tenant)}/accounts:batchGet`, 'users', PAGE);
+        const added = addUsers(set, users, { params, includeAnonymous: opts.includeAnonymous === true, tenant: scope.tenant, connections: new Set(connections.map((c) => c.id)) });
+        if (opts.tenant === 'all' && scope.tenant) {
+            for (const uid of added)
+                set.add('membership', { organization_id: scope.tenant, user_id: uid, role: 'member' }, `${scope.tenant}:${uid}`);
+        }
+    }
+    if (opts.tenant === 'all' && scopes.length) {
+        set.warn('Each Identity Platform tenant is a separate user pool: it becomes an organization here, and an email address used in two tenants is reported as a conflict at import. To keep tenants apart, export each one (tenant=<id>) into its own Atlas instance instead.');
+    }
+    settle(set, anyParams);
+    return set;
+}
+function warnNoParams(set, label = 'project') {
+    set.warn(`The ${label}'s password hash parameters were not available, so password hashes were left out. Pass them (--set firebase-signer-key=… firebase-salt-separator=… firebase-rounds=… firebase-mem-cost=…, from Console → Authentication → Users → ⋮ → Password hash parameters), or let the firebase lazy-migration preset check passwords on first sign-in.`);
+}
+function settle(set, params) {
+    set.manifest.providers = [...new Set(set.list('identity').map((i) => i.provider))].sort();
+    // Never the signer key: the manifest is shown in the dashboard. Each password carries its own parameters, sealed.
+    if (params)
+        set.manifest.settings = { password_hash: { algorithm: 'scrypt_firebase', rounds: params.rounds, mem_cost: params.mem_cost, salt_separator: params.salt_separator } };
+}
+/** SAML providers (and OIDC ones, for the record) the identities can point at. */
+async function enterpriseConnections(http, projectId, tenant) {
+    const out = [];
+    const list = async (kind) => {
+        try {
+            return await pages(http, `/v2/${scopePath(projectId, tenant)}/${kind}`, kind, 100);
+        }
+        catch (err) {
+            if (err instanceof vendor_http_1.VendorApiError && [400, 403, 404].includes(err.status))
+                return [];
+            throw err;
+        }
+    };
+    for (const c of await list('inboundSamlConfigs')) {
+        const id = (0, record_set_1.str)(c.name)?.split('/').pop();
+        if (!id)
+            continue;
+        const idp = (0, record_set_1.isObj)(c.idpConfig) ? c.idpConfig : {};
+        const sp = (0, record_set_1.isObj)(c.spConfig) ? c.spConfig : {};
+        const cert = (0, record_set_1.objs)(idp.idpCertificates).map((x) => (0, record_set_1.str)(x.x509Certificate)).find(Boolean);
+        out.push((0, record_set_1.compact)({
+            id,
+            name: (0, record_set_1.str)(c.displayName) ?? id,
+            protocol: 'saml',
+            enabled: c.enabled === true,
+            saml: (0, record_set_1.compact)({ idp_entity_id: (0, record_set_1.str)(idp.idpEntityId), idp_sso_url: (0, record_set_1.str)(idp.ssoUrl), idp_certificate: cert, sp_entity_id: (0, record_set_1.str)(sp.spEntityId), sp_acs_url: (0, record_set_1.str)(sp.callbackUri) }),
+        }));
+    }
+    return out;
+}
+/**
+ * Add users (REST UserInfo or auth:export JSON — the same keys — or rows from
+ * the CSV mapped onto them) with their identities and second factors. Returns
+ * the uids added.
+ */
+function addUsers(set, users, ctx) {
+    const added = [];
+    let redacted = 0;
+    let otherVersion = 0;
+    for (const u of users) {
+        const uid = (0, record_set_1.str)(u.localId ?? u.uid);
+        if (!uid) {
+            set.omit('user', 'no uid');
+            continue;
+        }
+        const mapped = mapFirebaseUser(u, ctx);
+        if (mapped.redacted)
+            redacted++;
+        if (mapped.otherVersion)
+            otherVersion++;
+        if (!mapped.user) {
+            set.omit('user', mapped.anonymous ? 'anonymous user (left out unless firebase-anonymous=include)' : 'no email, phone number or linked account');
+            continue;
+        }
+        set.add('user', mapped.user, uid);
+        added.push(uid);
+        for (const i of mapped.identities) {
+            if (i.kind === 'saml' && i.sso_connection_id && ctx.connections && !ctx.connections.has(i.sso_connection_id))
+                delete i.sso_connection_id;
+            set.add('identity', i, `${i.provider}:${i.provider_user_id}`);
+        }
+        for (const f of mapped.factors)
+            set.add('mfa_factor', f);
+        if (mapped.totp)
+            set.omit('mfa_factor', 'TOTP enrollment: Firebase never exports the secret (the user enrols again)', mapped.totp);
+    }
+    if (redacted)
+        set.warn(`${redacted} password hash(es) came back as REDACTED: the credentials lack permission to read hashes (firebaseauth.configs.getHashConfig / firebaseauth.users.get with an owner or Firebase Authentication Admin role). Those users move by lazy migration.`);
+    if (otherVersion)
+        set.warn(`${otherVersion} password hash(es) are not Firebase scrypt (users imported into Firebase with another algorithm who never signed in since); they were left out and move by lazy migration.`);
+    return added;
+}
+function mapFirebaseUser(u, ctx) {
+    const uid = (0, record_set_1.str)(u.localId ?? u.uid);
+    const out = { user: null, identities: [], factors: [], totp: 0, anonymous: false, redacted: false, otherVersion: false };
+    const email = (0, record_set_1.str)(u.email)?.toLowerCase();
+    const phone = (0, record_set_1.e164)(u.phoneNumber);
+    const providers = (0, record_set_1.objs)(u.providerUserInfo ?? u.providerData);
+    for (const p of providers) {
+        const pid = (0, record_set_1.str)(p.providerId);
+        if (!pid || NOT_IDENTITIES.has(pid))
+            continue;
+        const subject = (0, record_set_1.str)(p.rawId ?? p.federatedId ?? p.uid);
+        if (!subject)
+            continue;
+        const kind = pid.startsWith('saml.') ? 'saml' : pid.startsWith('oidc.') ? 'oidc' : 'oauth';
+        out.identities.push((0, record_set_1.compact)({
+            user_id: uid,
+            provider: SOCIAL[pid] ?? pid,
+            provider_user_id: subject,
+            kind,
+            sso_connection_id: kind === 'saml' ? pid : undefined,
+            email: (0, record_set_1.str)(p.email)?.toLowerCase(),
+            profile: (0, record_set_1.bag)((0, record_set_1.compact)({ display_name: (0, record_set_1.str)(p.displayName), photo_url: (0, record_set_1.str)(p.photoUrl ?? p.photoURL), screen_name: (0, record_set_1.str)(p.screenName), firebase_provider_id: pid })),
+        }));
+    }
+    for (const m of (0, record_set_1.objs)(u.mfaInfo ?? ((0, record_set_1.isObj)(u.multiFactor) ? u.multiFactor.enrolledFactors : undefined))) {
+        const created = ms(m.enrolledAt ?? m.enrollmentTime);
+        const id = (0, record_set_1.str)(m.mfaEnrollmentId ?? m.uid);
+        const factorPhone = (0, record_set_1.e164)(m.unobfuscatedPhoneInfo ?? m.phoneInfo ?? m.phoneNumber);
+        if (factorPhone)
+            out.factors.push((0, record_set_1.compact)({ id, user_id: uid, type: 'phone', phone: factorPhone, verified: true, created_at: created }));
+        else if ((0, record_set_1.isObj)(m.emailInfo) && (0, record_set_1.str)(m.emailInfo.emailAddress))
+            out.factors.push((0, record_set_1.compact)({ id, user_id: uid, type: 'email', verified: true, created_at: created }));
+        else if ('totpInfo' in m || m.factorId === 'totp')
+            out.totp++;
+    }
+    if (!email && !phone && !out.identities.length) {
+        out.anonymous = true;
+        if (!ctx.includeAnonymous)
+            return out;
+    }
+    let password;
+    const rawHash = (0, record_set_1.str)(u.passwordHash);
+    const version = typeof u.version === 'number' ? u.version : undefined;
+    if (rawHash === REDACTED)
+        out.redacted = true;
+    else if (rawHash && version !== undefined && version !== 0)
+        out.otherVersion = true;
+    else if (rawHash && ctx.params) {
+        password = {
+            algorithm: 'scrypt_firebase',
+            hash: (0, exports.stdBase64)(rawHash),
+            salt: (0, exports.stdBase64)((0, record_set_1.str)(u.salt ?? u.passwordSalt) ?? ''),
+            params: { ...ctx.params },
+        };
+    }
+    const custom = parseClaims(u.customAttributes ?? u.customClaims);
+    const name = (0, record_set_1.str)(u.displayName);
+    out.user = (0, record_set_1.compact)({
+        id: uid,
+        emails: email ? [{ email, verified: truthy(u.emailVerified), primary: true }] : undefined,
+        // Firebase verifies a phone number by SMS before it is set.
+        phones: phone ? [{ phone, verified: true, primary: true }] : undefined,
+        name,
+        image_url: (0, record_set_1.str)(u.photoUrl ?? u.photoURL),
+        password,
+        banned: truthy(u.disabled) || undefined,
+        anonymous: out.anonymous || undefined,
+        public_metadata: (0, record_set_1.bag)(custom),
+        private_metadata: (0, record_set_1.bag)((0, record_set_1.compact)({
+            firebase_tenant_id: ctx.tenant ?? (0, record_set_1.str)(u.tenantId),
+            valid_since: (0, record_set_1.str)(u.validSince),
+            password_updated_at: ms(u.passwordUpdatedAt),
+            last_refresh_at: (0, record_set_1.str)(u.lastRefreshAt),
+            email_link_signin: u.emailLinkSignin === true ? true : undefined,
+            initial_email: (0, record_set_1.str)(u.initialEmail),
+        })),
+        created_at: ms(u.createdAt ?? ((0, record_set_1.isObj)(u.metadata) ? u.metadata.creationTime : undefined)),
+        last_sign_in_at: ms(u.lastSignedInAt ?? u.lastLoginAt ?? ((0, record_set_1.isObj)(u.metadata) ? u.metadata.lastSignInTime : undefined)),
+    });
+    return out;
+}
+const truthy = (v) => v === true || v === 1 || (typeof v === 'string' && ['true', '1'].includes(v.trim().toLowerCase()));
+/** Custom claims: a JSON string in the export and REST, an object from the Admin SDK. */
+function parseClaims(v) {
+    if ((0, record_set_1.isObj)(v))
+        return v;
+    const s = (0, record_set_1.str)(v);
+    if (!s)
+        return undefined;
+    try {
+        const parsed = JSON.parse(s);
+        return (0, record_set_1.isObj)(parsed) ? parsed : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+// ── auth:export files ──────────────────────────────────────────────────────
+/** The positional providers of the auth:export CSV (columns 7-22, four per provider; created-at starts at column 23). */
+const CSV_PROVIDERS = ['google.com', 'facebook.com', 'twitter.com', 'github.com'];
+/** `firebase auth:export` JSON (`{"users": [...]}`) or its header-less 52-column CSV → UserInfo-shaped objects. */
+function parseFirebaseExport(text, fileName = '') {
+    const trimmed = text.trim();
+    if (!trimmed)
+        return [];
+    if (trimmed.startsWith('{') || trimmed.startsWith('[')) {
+        const doc = JSON.parse(trimmed);
+        if (Array.isArray(doc))
+            return (0, record_set_1.objs)(doc);
+        if ((0, record_set_1.isObj)(doc) && Array.isArray(doc.users))
+            return (0, record_set_1.objs)(doc.users);
+        throw new Error('The Firebase export file is JSON but has no "users" array.');
+    }
+    if (fileName && !/\.csv$/i.test(fileName))
+        throw new Error('The Firebase export file must be the JSON or CSV auth:export writes.');
+    // The CSV has no header row: give parseCsv one.
+    const header = Array.from({ length: 53 }, (_, i) => `c${i}`).join(',');
+    return (0, csv_1.parseCsv)(`${header}\n${trimmed}\n`).map((r) => {
+        const c = (i) => r[`c${i}`] ?? '';
+        const providerUserInfo = [];
+        CSV_PROVIDERS.forEach((providerId, k) => {
+            const base = 7 + k * 4;
+            if (c(base))
+                providerUserInfo.push({ providerId, rawId: c(base), email: c(base + 1), displayName: c(base + 2), photoUrl: c(base + 3) });
+        });
+        return {
+            localId: c(0),
+            email: c(1),
+            emailVerified: c(2),
+            passwordHash: c(3),
+            salt: c(4),
+            displayName: c(5),
+            photoUrl: c(6),
+            createdAt: c(23),
+            lastSignedInAt: c(24),
+            phoneNumber: c(25),
+            disabled: c(26),
+            customAttributes: c(27),
+            providerUserInfo,
+        };
+    });
+}
+//# sourceMappingURL=firebase.js.map

package/dist/migrate/export/firebase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase.js","sourceRoot":"","sources":["../../../src/migrate/export/firebase.ts"],"names":[],"mappings":";;;AA0GA,kDAiBC;AAGD,0DAOC;AAGD,kDAaC;AAED,oCAcC;AAMD,0CAWC;AAGD,oCAQC;AAuBD,wCA6EC;AA8FD,0CAiFC;AAuBD,kDAmCC;AA9gBD,6CAAyC;AAEzC,0CAA4C;AAC5C,6CAAyF;AACzF,+CAA2D;AAkE3D,MAAM,GAAG,GAAG,wCAAwC,CAAC;AACrD,MAAM,SAAS,GAAG,qCAAqC,CAAC;AACxD,MAAM,KAAK,GAAG,gGAAgG,CAAC;AAC/G,qFAAqF;AACrF,MAAM,QAAQ,GAAG,cAAc,CAAC;AAChC,MAAM,IAAI,GAAG,IAAI,CAAC;AAElB,uGAAuG;AACvG,MAAM,MAAM,GAA2B;IACrC,YAAY,EAAE,QAAQ;IACtB,cAAc,EAAE,UAAU;IAC1B,aAAa,EAAE,GAAG;IAClB,YAAY,EAAE,QAAQ;IACtB,WAAW,EAAE,OAAO;IACpB,eAAe,EAAE,WAAW;IAC5B,cAAc,EAAE,UAAU;IAC1B,WAAW,EAAE,OAAO;CACrB,CAAC;AAEF,+DAA+D;AAC/D,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE1F,kGAAkG;AAC3F,MAAM,SAAS,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAAlF,QAAA,SAAS,aAAyE;AAE/F,MAAM,EAAE,GAAG,CAAC,CAAU,EAAsB,EAAE;IAC5C,MAAM,CAAC,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC;IACjB,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC,CAAC;AAEF,8EAA8E;AAE9E,SAAgB,mBAAmB,CAAC,IAAY;IAC9C,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,CAAC,IAAA,kBAAK,EAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB,IAAI,CAAC,IAAA,gBAAG,EAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAA,gBAAG,EAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACrG,MAAM,IAAI,KAAK,CAAC,yGAAyG,CAAC,CAAC;IAC7H,CAAC;IACD,OAAO;QACL,YAAY,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,YAAY,CAAE;QACpC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;QACpC,cAAc,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,cAAc,CAAC;QACvC,UAAU,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,UAAU,CAAC;QAC/B,SAAS,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,SAAS,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,gHAAgH;AAChH,SAAgB,uBAAuB,CAAC,EAA0B,EAAE,UAAkB;IACpF,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACtG,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,IAAI,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI,EAAE,CAAC;IACrJ,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IAC9C,MAAM,GAAG,GAAG,IAAA,wBAAU,EAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC9F,OAAO,GAAG,KAAK,IAAI,GAAG,EAAE,CAAC;AAC3B,CAAC;AAED,uGAAuG;AAChG,KAAK,UAAU,mBAAmB,CAAC,EAA0B,EAAE,YAA0B,KAAK,EAAE,MAAoB,IAAI,CAAC,GAAG;IACjI,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,IAAI,SAAS,CAAC;IACtC,IAAI,CAAC,2CAA2C,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,GAAG,iCAAiC,CAAC,CAAC;IAC9J,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QAC/B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,EAAE,kBAAkB,EAAE;QAC5F,IAAI,EAAE,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,6CAA6C,EAAE,SAAS,EAAE,uBAAuB,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;KACtK,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAQ,CAAC;IACzD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAA,gBAAG,EAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,4BAAc,CAAC,cAAc,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAA,gBAAG,EAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,IAAA,gBAAG,EAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvH,CAAC;IACD,OAAO,IAAA,gBAAG,EAAC,IAAI,CAAC,YAAY,CAAE,CAAC;AACjC,CAAC;AAED,SAAgB,YAAY,CAAC,CAA4K;IACvM,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC1H,IAAI,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC;IAC3B,OAAO,IAAI,wBAAU,CAAC;QACpB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,GAAG;QACZ,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACpB,aAAa,EAAE,UAAU,CAAC,MAAM,KAAK,MAAM,mBAAmB,CAAC,CAAC,CAAC,cAAe,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE;YACxG,wFAAwF;YACxF,qBAAqB,EAAE,CAAC,CAAC,SAAS;SACnC,CAAC;QACF,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,KAAK,EAAE,CAAC,CAAC,KAAK;KACf,CAAC,CAAC;AACL,CAAC;AAED,6DAA6D;AAC7D,MAAM,SAAS,GAAG,CAAC,SAAiB,EAAE,MAAe,EAAE,EAAE,CAAC,YAAY,kBAAkB,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAE/J,2HAA2H;AACpH,KAAK,UAAU,eAAe,CAAC,IAAgB,EAAE,SAAiB,EAAE,MAAe;IACxF,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAM,MAAM,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC5H,kFAAkF;QAClF,MAAM,EAAE,GAAG,IAAA,kBAAK,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAA,kBAAK,EAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAA,kBAAK,EAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1I,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACrB,OAAO,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,IAAA,gBAAG,EAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;IACpE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,4BAAc,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAClF,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,4FAA4F;AAC5F,SAAgB,YAAY,CAAC,EAAO;IAClC,MAAM,CAAC,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5F,OAAO,IAAA,oBAAO,EAAC;QACb,UAAU,EAAE,IAAA,gBAAG,EAAC,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,iBAAiB,CAAC,IAAI,IAAA,iBAAS,EAAC,IAAA,gBAAG,EAAC,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,iBAAiB,CAAE,CAAC;QAChJ,cAAc,EAAE,IAAA,gBAAG,EAAC,EAAE,CAAC,aAAa,IAAI,EAAE,CAAC,cAAc,IAAI,EAAE,CAAC,qBAAqB,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAA,iBAAS,EAAC,IAAA,gBAAG,EAAC,EAAE,CAAC,aAAa,IAAI,EAAE,CAAC,cAAc,IAAI,EAAE,CAAC,qBAAqB,CAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACrM,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC;QACpB,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,OAAO,IAAI,EAAE,CAAC,QAAQ,CAAC;KACxD,CAAgC,CAAC;AACpC,CAAC;AAED,SAAS,cAAc,CAAC,CAA8B;IACpD,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtH,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,IAAgB,EAAE,IAAY,EAAE,GAAW,EAAE,IAAY;IAC5E,MAAM,GAAG,GAAU,EAAE,CAAC;IACtB,IAAI,KAAyB,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7C,MAAM,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,kBAAkB,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACtI,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAM,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,GAAG,IAAA,iBAAI,EAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/B,KAAK,GAAG,IAAA,gBAAG,EAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK;YAAE,MAAM;IACpB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAEvE,KAAK,UAAU,cAAc,CAAC,IAA2B;IAC9D,MAAM,GAAG,GAAG,IAAI,sBAAS,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAClH,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,oBAAoB,SAAS,EAAE,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;IAEzC,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yHAAyH,CAAC,CAAC;QAC5J,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvB,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,YAAY,CAAC,GAAG,CAAC,CAAC;QAC/B,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC,CAAC;QACnF,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACvF,GAAG,CAAC,IAAI,CAAC,6KAA6K,CAAC,CAAC;QAC1L,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,yIAAyI,CAAC,CAAC;QACtJ,CAAC;QACD,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACpB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC;QACxB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS;QAClG,SAAS;QACT,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;IAEH,MAAM,MAAM,GAA8C,EAAE,CAAC;IAC7D,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,OAAO,SAAS,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC1F,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;YACzC,IAAI,EAAE;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,4HAA4H,CAAC,CAAC;;YACtJ,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IACjF,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,SAAS,GAA8B,IAAI,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,QAAQ,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACrE,IAAI,OAAO,EAAE,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,2BAA2B,OAAO,CAAC,SAAS,6FAA6F,CAAC,CAAC;QAC1N,MAAM,MAAM,GAAG,cAAc,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,MAAM;YAAE,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtC,SAAS,KAAK,MAAM,CAAC;QAErB,QAAQ,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/E,KAAK,MAAM,CAAC,IAAI,WAAW;YAAE,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAEhE,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAC1C,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,kBAAkB,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACzI,CAAC;QAED,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,OAAO,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,oBAAoB,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9G,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,KAAK,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3K,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAC1C,KAAK,MAAM,GAAG,IAAI,KAAK;gBAAE,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,eAAe,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC;QAC5I,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,iQAAiQ,CAAC,CAAC;IAC9Q,CAAC;IACD,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACvB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,GAAc,EAAE,KAAK,GAAG,SAAS;IACrD,GAAG,CAAC,IAAI,CACN,OAAO,KAAK,8UAA8U,CAC3V,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,GAAc,EAAE,MAAiC;IAC/D,GAAG,CAAC,QAAQ,CAAC,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1F,kHAAkH;IAClH,IAAI,MAAM;QAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,EAAE,aAAa,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC;AACnL,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,qBAAqB,CAAC,IAAgB,EAAE,SAAiB,EAAE,MAAe;IACvF,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,EAAE,IAAY,EAAkB,EAAE;QAClD,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,IAAI,EAAE,OAAO,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,4BAAc,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,CAAC;YACrF,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACjD,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;QACzC,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,GAAG,GAAG,IAAA,kBAAK,EAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,MAAM,EAAE,GAAG,IAAA,kBAAK,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAA,iBAAI,EAAC,GAAG,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxF,GAAG,CAAC,IAAI,CACN,IAAA,oBAAO,EAAC;YACN,EAAE;YACF,IAAI,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE;YAC9B,QAAQ,EAAE,MAAe;YACzB,OAAO,EAAE,CAAC,CAAC,OAAO,KAAK,IAAI;YAC3B,IAAI,EAAE,IAAA,oBAAO,EAAC,EAAE,aAAa,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,IAAA,gBAAG,EAAC,GAAG,CAAC,MAAM,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,EAAE,IAAA,gBAAG,EAAC,EAAE,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,IAAA,gBAAG,EAAC,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;SAC/K,CAAC,CACH,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CACf,GAAc,EACd,KAAY,EACZ,GAAiH;IAEjH,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,QAAQ;YAAE,QAAQ,EAAE,CAAC;QAChC,IAAI,MAAM,CAAC,YAAY;YAAE,YAAY,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,6DAA6D,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC;YAChJ,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YAClC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,iBAAiB,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC;gBAAE,OAAO,CAAC,CAAC,iBAAiB,CAAC;YACzI,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO;YAAE,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,4EAA4E,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACrI,CAAC;IACD,IAAI,QAAQ;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,QAAQ,iPAAiP,CAAC,CAAC;IACrR,IAAI,YAAY;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,YAAY,4KAA4K,CAAC,CAAC;IACxN,OAAO,KAAK,CAAC;AACf,CAAC;AAYD,SAAgB,eAAe,CAAC,CAAM,EAAE,GAAuF;IAC7H,MAAM,GAAG,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,CAAE,CAAC;IACrC,MAAM,GAAG,GAAuB,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;IAC7I,MAAM,KAAK,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC;IAE7D,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC9C,MAAM,OAAO,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3F,GAAG,CAAC,UAAU,CAAC,IAAI,CACjB,IAAA,oBAAO,EAAC;YACN,OAAO,EAAE,GAAG;YACZ,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,GAAG;YAC5B,gBAAgB,EAAE,OAAO;YACzB,IAAI;YACJ,iBAAiB,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;YACpD,KAAK,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE;YAClC,OAAO,EAAE,IAAA,gBAAG,EAAC,IAAA,oBAAO,EAAC,EAAE,YAAY,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;SACjK,CAAmB,CACrB,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,IAAA,iBAAI,EAAC,CAAC,CAAC,OAAO,IAAI,CAAC,IAAA,kBAAK,EAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACtG,MAAM,OAAO,GAAG,EAAE,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;QACrD,MAAM,EAAE,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,IAAA,iBAAI,EAAC,CAAC,CAAC,qBAAqB,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC;QAClF,IAAI,WAAW;YAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAA,oBAAO,EAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAgB,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;aAC7I,IAAI,IAAA,kBAAK,EAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC;YAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAA,oBAAO,EAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;aACtK,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM;YAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QAC/C,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,gBAAgB;YAAE,OAAO,GAAG,CAAC;IACxC,CAAC;IAED,IAAI,QAAkC,CAAC;IACvC,MAAM,OAAO,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,IAAI,OAAO,KAAK,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;SACzC,IAAI,OAAO,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC;QAAE,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC;SAC/E,IAAI,OAAO,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,QAAQ,GAAG;YACT,SAAS,EAAE,iBAAiB;YAC5B,IAAI,EAAE,IAAA,iBAAS,EAAC,OAAO,CAAC;YACxB,IAAI,EAAE,IAAA,iBAAS,EAAC,IAAA,gBAAG,EAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;YACpD,MAAM,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE;SAC1B,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAChC,GAAG,CAAC,IAAI,GAAG,IAAA,oBAAO,EAAC;QACjB,EAAE,EAAE,GAAG;QACP,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACzF,4DAA4D;QAC5D,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACtE,IAAI;QACJ,SAAS,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC;QACxC,QAAQ;QACR,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,SAAS;QACvC,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,SAAS;QACrC,eAAe,EAAE,IAAA,gBAAG,EAAC,MAAM,CAAC;QAC5B,gBAAgB,EAAE,IAAA,gBAAG,EACnB,IAAA,oBAAO,EAAC;YACN,kBAAkB,EAAE,GAAG,CAAC,MAAM,IAAI,IAAA,gBAAG,EAAC,CAAC,CAAC,QAAQ,CAAC;YACjD,WAAW,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,UAAU,CAAC;YAC9B,mBAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC;YAC5C,eAAe,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,aAAa,CAAC;YACrC,iBAAiB,EAAE,CAAC,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YAChE,aAAa,EAAE,IAAA,gBAAG,EAAC,CAAC,CAAC,YAAY,CAAC;SACnC,CAAC,CACH;QACD,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,IAAA,kBAAK,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACxF,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,IAAA,kBAAK,EAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;KACtH,CAAe,CAAC;IACjB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAE3I,yFAAyF;AACzF,SAAS,WAAW,CAAC,CAAU;IAC7B,IAAI,IAAA,kBAAK,EAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,IAAA,gBAAG,EAAC,CAAC,CAAC,CAAC;IACjB,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,IAAA,kBAAK,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,8EAA8E;AAE9E,yHAAyH;AACzH,MAAM,aAAa,GAAG,CAAC,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;AAElF,mHAAmH;AACnH,SAAgB,mBAAmB,CAAC,IAAY,EAAE,QAAQ,GAAG,EAAE;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,IAAA,iBAAI,EAAC,GAAG,CAAC,CAAC;QACzC,IAAI,IAAA,kBAAK,EAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,IAAA,iBAAI,EAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IACnI,gDAAgD;IAChD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvE,OAAO,IAAA,cAAQ,EAAC,GAAG,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACnD,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,gBAAgB,GAAU,EAAE,CAAC;QACnC,aAAa,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE;YACtC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,IAAI,CAAC,CAAC,IAAI,CAAC;gBAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;QAC1I,CAAC,CAAC,CAAC;QACH,OAAO;YACL,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACb,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YACX,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;YACnB,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;YAClB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YACV,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;YACjB,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;YACd,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC;YAChB,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC;YACrB,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC;YAClB,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC;YACf,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC;YACvB,gBAAgB;SACjB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/migrate/export/frameworks/app-users.d.ts

@@ -0,0 +1,42 @@
+import { FrameworkExport, type Tables } from './tables';
+/**
+ * Passport.js and iron-session leave the user store to the app: there is no
+ * schema to recognise, only conventions. This mapper reads the app's users
+ * table with column names you can override, and recognises the common shapes:
+ *
+ *   - a password column holding a self-describing hash (bcrypt / bcryptjs,
+ *     argon2 / @node-rs/argon2, Django-style PBKDF2, oslo scrypt);
+ *   - passport-local-mongoose's `salt` + `hash` fields (PBKDF2-SHA256, 25000
+ *     iterations, 512-byte key — `sha1` for apps on its pre-v5 default);
+ *   - provider id columns the Passport strategies' `verify` callbacks fill
+ *     (`googleId`, `github_id`, `facebookId` …), or a separate identities table;
+ *
+ * and, for Passport, the express-session store the app used (connect-pg-simple,
+ * connect-mongo, connect-redis via a JSON dump, connect-session-sequelize,
+ * knex/typeorm stores): each live session's `passport.user` becomes a session
+ * record keyed by sha256 of the session id, which the bridge reads out of the
+ * `connect.sid` cookie.
+ */
+export interface AppUsersExportOptions {
+    usersTable?: string;
+    idColumn?: string;
+    emailColumn?: string;
+    emailVerifiedColumn?: string;
+    usernameColumn?: string;
+    nameColumn?: string;
+    passwordColumn?: string;
+    /** passport-local-mongoose's digest (`sha256`, or `sha1` before v5). */
+    plmDigest?: 'sha1' | 'sha256' | 'sha512';
+    plmIterations?: number;
+    /** `provider=column` pairs for provider id columns on the users row. */
+    identityColumns?: Record<string, string>;
+    /** A separate identities table (`user_id`, `provider`, `provider_user_id` / `provider_id` / `uid`). */
+    identitiesTable?: string;
+    /** The session store table / collection (default: detected). */
+    sessionsTable?: string;
+    /** Where the user id sits in the session JSON (default `passport.user`, then `passport.user.id`). */
+    sessionUserPath?: string;
+    sessions?: boolean;
+    now?: Date;
+}
+export declare function exportAppUsers(tables: Tables, options?: AppUsersExportOptions): FrameworkExport;