@atlasauth/cli 0.25.0 → 0.26.0

package/dist/migrate/export/frameworks/tables.js

@@ -0,0 +1,325 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FrameworkExport = exports.Tables = void 0;
+exports.readDumpDir = readDumpDir;
+exports.tablesFromStream = tablesFromStream;
+exports.parseTableText = parseTableText;
+exports.isRow = isRow;
+exports.col = col;
+exports.text = text;
+exports.bool = bool;
+exports.time = time;
+exports.timeMs = timeMs;
+exports.json = json;
+exports.sha256Hex = sha256Hex;
+exports.base64url = base64url;
+exports.selfDescribingHash = selfDescribingHash;
+exports.splitName = splitName;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const migrate_1 = require("@atlasauth/migrate");
+const csv_1 = require("../../../import/csv");
+/** Rows by table name (lowercase). */
+class Tables {
+    byName = new Map();
+    constructor(tables = {}) {
+        for (const [name, rows] of Object.entries(tables))
+            this.set(name, rows);
+    }
+    set(name, rows) {
+        this.byName.set(name.toLowerCase(), rows.map(normalizeRow));
+    }
+    /** The first table that exists among `names` (case-insensitive), with its name. */
+    find(...names) {
+        for (const n of names) {
+            const rows = this.byName.get(n.toLowerCase());
+            if (rows)
+                return { name: n, rows };
+        }
+        return undefined;
+    }
+    rows(...names) {
+        return this.find(...names)?.rows ?? [];
+    }
+    names() {
+        return [...this.byName.keys()];
+    }
+}
+exports.Tables = Tables;
+/** Read every table file in a dump directory. */
+function readDumpDir(dir) {
+    const tables = new Tables();
+    for (const file of (0, node_fs_1.readdirSync)(dir).sort()) {
+        const path = (0, node_path_1.join)(dir, file);
+        if (!(0, node_fs_1.statSync)(path).isFile())
+            continue;
+        const ext = (0, node_path_1.extname)(file).toLowerCase();
+        if (!['.json', '.ndjson', '.jsonl', '.csv'].includes(ext))
+            continue;
+        tables.set((0, node_path_1.basename)(file, (0, node_path_1.extname)(file)), parseTableText((0, node_fs_1.readFileSync)(path, 'utf8'), ext));
+    }
+    return tables;
+}
+/**
+ * Rows streamed as NDJSON `{"table": "<name>", "row": {…}}` lines — what the
+ * Rails and Django export scripts print, piped into `--file -`.
+ */
+function tablesFromStream(text, into = new Tables()) {
+    const grouped = new Map();
+    for (const line of text.split(/\r?\n/)) {
+        const l = line.trim();
+        if (!l.startsWith('{'))
+            continue; // framework boot noise on stdout
+        let entry;
+        try {
+            entry = JSON.parse(l);
+        }
+        catch {
+            continue;
+        }
+        if (!isRow(entry) || typeof entry.table !== 'string' || !isRow(entry.row))
+            continue;
+        const list = grouped.get(entry.table) ?? [];
+        list.push(entry.row);
+        grouped.set(entry.table, list);
+    }
+    for (const [name, rows] of grouped)
+        into.set(name, [...(into.find(name)?.rows ?? []), ...rows]);
+    return into;
+}
+/** Parse one table file's text by its extension. */
+function parseTableText(text, ext) {
+    if (ext === '.csv')
+        return (0, csv_1.parseCsv)(text);
+    const trimmed = text.trim();
+    if (!trimmed)
+        return [];
+    if (ext === '.json') {
+        const doc = JSON.parse(trimmed);
+        if (Array.isArray(doc))
+            return doc.filter(isRow);
+        if (isRow(doc) && Array.isArray(doc.rows))
+            return doc.rows.filter(isRow);
+        if (isRow(doc))
+            return [doc];
+        return [];
+    }
+    return trimmed
+        .split(/\r?\n/)
+        .filter((l) => l.trim())
+        .map((l) => JSON.parse(l))
+        .filter(isRow);
+}
+function isRow(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+/**
+ * Unwrap MongoDB extended JSON (`{"$oid": …}`, `{"$date": …}`,
+ * `{"$numberLong": …}`, `{"$binary": {"base64": …}}`) as mongoexport writes it,
+ * so a Mongo dump reads like any other.
+ */
+function normalizeValue(v) {
+    if (Array.isArray(v))
+        return v.map(normalizeValue);
+    if (!isRow(v))
+        return v;
+    const keys = Object.keys(v);
+    if (keys.length === 1) {
+        const k = keys[0];
+        const inner = v[k];
+        if (k === '$oid' && typeof inner === 'string')
+            return inner;
+        if (k === '$date') {
+            if (typeof inner === 'string')
+                return inner;
+            if (isRow(inner) && typeof inner.$numberLong === 'string')
+                return new Date(Number(inner.$numberLong)).toISOString();
+            if (typeof inner === 'number')
+                return new Date(inner).toISOString();
+        }
+        if ((k === '$numberLong' || k === '$numberInt' || k === '$numberDouble') && typeof inner === 'string')
+            return Number(inner);
+        if (k === '$binary' && isRow(inner) && typeof inner.base64 === 'string')
+            return inner.base64;
+    }
+    const out = {};
+    for (const [key, value] of Object.entries(v))
+        out[key] = normalizeValue(value);
+    return out;
+}
+function normalizeRow(row) {
+    return normalizeValue(row);
+}
+// ── column helpers ──────────────────────────────────────────────────────────
+/** The first present, non-empty column among `names` (exact, then case-insensitive). */
+function col(row, ...names) {
+    for (const n of names) {
+        const v = row[n];
+        if (v !== undefined && v !== null && v !== '')
+            return v;
+    }
+    const lower = new Map(Object.keys(row).map((k) => [k.toLowerCase(), k]));
+    for (const n of names) {
+        const k = lower.get(n.toLowerCase());
+        if (k !== undefined) {
+            const v = row[k];
+            if (v !== undefined && v !== null && v !== '')
+                return v;
+        }
+    }
+    return undefined;
+}
+function text(v) {
+    if (typeof v === 'string')
+        return v.trim() ? v.trim() : undefined;
+    if (typeof v === 'number' && Number.isFinite(v))
+        return String(v);
+    if (typeof v === 'bigint')
+        return v.toString();
+    return undefined;
+}
+function bool(v) {
+    return v === true || v === 1 || (typeof v === 'string' && ['true', 't', '1', 'yes'].includes(v.trim().toLowerCase()));
+}
+/**
+ * A timestamp column as the bundle wants it: ISO strings pass, numbers are
+ * epoch ms (or seconds when small), SQL `2024-01-02 03:04:05[+00]` strings are
+ * made ISO. Undefined when absent or unparseable.
+ */
+function time(v) {
+    if (v === undefined || v === null || v === '')
+        return undefined;
+    if (typeof v === 'number' && Number.isFinite(v))
+        return v < 1e11 ? v * 1000 : v;
+    if (typeof v === 'string') {
+        const s = v.trim();
+        if (/^\d+$/.test(s))
+            return time(Number(s));
+        // SQL dumps write `2024-01-02 03:04:05.123+00` / `+0000`: make it ISO 8601.
+        let iso = s.includes('T') ? s : s.replace(' ', 'T');
+        if (iso.includes('T'))
+            iso = iso.replace(/(T[\d:.]+[+-]\d\d)$/, '$1:00').replace(/(T[\d:.]+[+-]\d\d)(\d\d)$/, '$1:$2');
+        const ms = Date.parse(!iso.includes('T') || /[zZ]$|[+-]\d\d:\d\d$/.test(iso) ? iso : `${iso}Z`);
+        return Number.isFinite(ms) ? new Date(ms).toISOString() : undefined;
+    }
+    return undefined;
+}
+function timeMs(v) {
+    const t = time(v);
+    if (t === undefined)
+        return undefined;
+    return typeof t === 'number' ? t : Date.parse(t);
+}
+/** A JSON column (object, or a string holding one). */
+function json(v) {
+    if (isRow(v))
+        return v;
+    if (typeof v === 'string' && v.trim().startsWith('{')) {
+        try {
+            const parsed = JSON.parse(v);
+            return isRow(parsed) ? parsed : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    return undefined;
+}
+/** Lowercase hex sha256 — the bundle's session `token_hash`. */
+function sha256Hex(value) {
+    return (0, node_crypto_1.createHash)('sha256').update(value, 'utf8').digest('hex');
+}
+/** Any base64 / base64url / `\x`-hex bytes column as base64url (passkey fields). */
+function base64url(v) {
+    const s = text(v);
+    if (!s)
+        return undefined;
+    if (/^\\x[0-9a-f]+$/i.test(s))
+        return Buffer.from(s.slice(2), 'hex').toString('base64url');
+    if (!/^[A-Za-z0-9+/_-]+={0,2}$/.test(s))
+        return undefined;
+    return Buffer.from(s.replace(/-/g, '+').replace(/_/g, '/'), 'base64').toString('base64url');
+}
+/**
+ * The password-hash algorithm a stored digest self-describes, for a column
+ * the app filled itself (Auth.js Credentials, Lucia, Passport): bcrypt and
+ * Argon2 PHC strings, oslo/Better Auth `salt:key` scrypt, Lucia's own scrypt,
+ * Django/passlib PBKDF2. `auto` lets Atlas's registry recognise it; null =
+ * not a format Atlas can verify (the user resets or migrates lazily).
+ */
+function selfDescribingHash(digest) {
+    const d = digest.trim();
+    if (/^\$2[aby]\$\d{2}\$[./A-Za-z0-9]{53}$/.test(d))
+        return { algorithm: 'bcrypt', hash: d };
+    if (/^\$argon2(id|i|d)\$/.test(d))
+        return { algorithm: 'argon2', hash: d };
+    if (/^[0-9a-f]{32}:[0-9a-f]{128}$/.test(d))
+        return { algorithm: 'scrypt_better_auth', hash: d };
+    if (/^(s2:)?[a-z0-9]{16}:[0-9a-f]{128}$/.test(d))
+        return { algorithm: 'scrypt_lucia', hash: d };
+    if (/^(pbkdf2_sha(1|256|512)|bcrypt|bcrypt_sha256|argon2|scrypt)\$/.test(d))
+        return { algorithm: 'auto', hash: d };
+    if (/^\$(pbkdf2-sha(1|256|512)|scrypt)\$/.test(d))
+        return { algorithm: 'auto', hash: d };
+    return null;
+}
+// ── what a framework exporter returns ───────────────────────────────────────
+/** Records by canonical model, plus what the exporter could not carry. */
+class FrameworkExport {
+    rows = new Map();
+    warnings = [];
+    omitted = {};
+    manifest = {};
+    add(model, data) {
+        const list = this.rows.get(model) ?? [];
+        list.push(stripUndefined(data));
+        this.rows.set(model, list);
+    }
+    list(model) {
+        return (this.rows.get(model) ?? []);
+    }
+    count(model) {
+        return this.rows.get(model)?.length ?? 0;
+    }
+    warn(message) {
+        if (!this.warnings.includes(message))
+            this.warnings.push(message);
+    }
+    omit(model, reason, count = 1) {
+        const o = this.omitted[model] ?? { count: 0, reason };
+        o.count += count;
+        this.omitted[model] = o;
+    }
+    /** Every row as `[model, data]`, in the canonical order the bundle writer requires. */
+    *entries() {
+        for (const model of migrate_1.CANONICAL_MODEL_ORDER)
+            for (const data of this.rows.get(model) ?? [])
+                yield [model, data];
+    }
+    counts() {
+        const out = {};
+        for (const [model, list] of this.rows)
+            out[model] = list.length;
+        return out;
+    }
+}
+exports.FrameworkExport = FrameworkExport;
+function stripUndefined(data) {
+    if (!isRow(data))
+        return data;
+    for (const k of Object.keys(data)) {
+        const v = data[k];
+        if (v === undefined || (Array.isArray(v) && v.length === 0))
+            delete data[k];
+    }
+    return data;
+}
+/** Split "Ada Lovelace" for exports that only keep a display name. */
+function splitName(name) {
+    if (!name)
+        return {};
+    const [first, ...rest] = name.trim().split(/\s+/);
+    return { ...(first ? { first_name: first } : {}), ...(rest.length ? { last_name: rest.join(' ') } : {}) };
+}
+//# sourceMappingURL=tables.js.map

package/dist/migrate/export/frameworks/tables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tables.js","sourceRoot":"","sources":["../../../../src/migrate/export/frameworks/tables.ts"],"names":[],"mappings":";;;AAsDA,kCAUC;AAMD,4CAkBC;AAGD,wCAgBC;AAED,sBAEC;AAmCD,kBAcC;AAED,oBAKC;AAED,oBAEC;AAOD,oBAaC;AAED,wBAIC;AAGD,oBAWC;AAGD,8BAEC;AAGD,8BAMC;AASD,gDASC;AAyDD,8BAIC;AAhTD,6CAAyC;AACzC,qCAA8D;AAC9D,yCAAoD;AACpD,gDAAkJ;AAClJ,6CAA+C;AAmB/C,sCAAsC;AACtC,MAAa,MAAM;IACA,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IAEnD,YAAY,SAAgC,EAAE;QAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;IAED,GAAG,CAAC,IAAY,EAAE,IAAW;QAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,mFAAmF;IACnF,IAAI,CAAC,GAAG,KAAe;QACrB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAC9C,IAAI,IAAI;gBAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;QACrC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,GAAG,KAAe;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,KAAK;QACH,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;CACF;AA3BD,wBA2BC;AAED,iDAAiD;AACjD,SAAgB,WAAW,CAAC,GAAW;IACrC,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,IAAA,qBAAW,EAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,IAAA,kBAAQ,EAAC,IAAI,CAAC,CAAC,MAAM,EAAE;YAAE,SAAS;QACvC,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QACpE,MAAM,CAAC,GAAG,CAAC,IAAA,oBAAQ,EAAC,IAAI,EAAE,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,EAAE,cAAc,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,IAAY,EAAE,OAAe,IAAI,MAAM,EAAE;IACxE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,iCAAiC;QACnE,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,SAAS;QACpF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,OAAO;QAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IAChG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oDAAoD;AACpD,SAAgB,cAAc,CAAC,IAAY,EAAE,GAAW;IACtD,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,IAAA,cAAQ,EAAC,IAAI,CAAU,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzE,IAAI,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO;SACX,KAAK,CAAC,OAAO,CAAC;SACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAY,CAAC;SACpC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,SAAgB,KAAK,CAAC,CAAU;IAC9B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,CAAU;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,MAAM,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5D,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;YAClB,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC5C,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;gBAAE,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACpH,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,aAAa,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,eAAe,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5H,IAAI,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC;IAC/F,CAAC;IACD,MAAM,GAAG,GAAQ,EAAE,CAAC;IACpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,GAAG,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/E,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,GAAQ;IAC5B,OAAO,cAAc,CAAC,GAAG,CAAQ,CAAC;AACpC,CAAC;AAED,+EAA+E;AAE/E,wFAAwF;AACxF,SAAgB,GAAG,CAAC,GAAQ,EAAE,GAAG,KAAe;IAC9C,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE;YAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACjB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE;gBAAE,OAAO,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,IAAI,CAAC,CAAU;IAC7B,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,IAAI,CAAC,CAAU;IAC7B,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACxH,CAAC;AAED;;;;GAIG;AACH,SAAgB,IAAI,CAAC,CAAU;IAC7B,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAChE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChF,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACnB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,4EAA4E;QAC5E,IAAI,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACpD,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,2BAA2B,EAAE,OAAO,CAAC,CAAC;QACvH,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QAChG,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,MAAM,CAAC,CAAU;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,uDAAuD;AACvD,SAAgB,IAAI,CAAC,CAAU;IAC7B,IAAI,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACvB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAY,CAAC;YACxC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gEAAgE;AAChE,SAAgB,SAAS,CAAC,KAAa;IACrC,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,oFAAoF;AACpF,SAAgB,SAAS,CAAC,CAAU;IAClC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3F,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1D,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC9F,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,MAAc;IAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,sCAAsC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC5F,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC3E,IAAI,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAChG,IAAI,oCAAoC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAChG,IAAI,+DAA+D,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACnH,IAAI,qCAAqC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACzF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAE/E,0EAA0E;AAC1E,MAAa,eAAe;IACT,IAAI,GAAG,IAAI,GAAG,EAA6B,CAAC;IACpD,QAAQ,GAAa,EAAE,CAAC;IACxB,OAAO,GAAsD,EAAE,CAAC;IACzE,QAAQ,GAAqG,EAAE,CAAC;IAEhH,GAAG,CAA2B,KAAQ,EAAE,IAA4B;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,CAA2B,KAAQ;QACrC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAkC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,KAAqB;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,CAAC,OAAe;QAClB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,CAAC,KAAa,EAAE,MAAc,EAAE,KAAK,GAAG,CAAC;QAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;QACtD,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;QACjB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAED,uFAAuF;IACvF,CAAC,OAAO;QACN,KAAK,MAAM,KAAK,IAAI,+BAAqB;YAAE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE;gBAAE,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChH,CAAC;IAED,MAAM;QACJ,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI;YAAE,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QAChE,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAxCD,0CAwCC;AAED,SAAS,cAAc,CAAI,IAAO;IAChC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sEAAsE;AACtE,SAAgB,SAAS,CAAC,IAAwB;IAChD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClD,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC5G,CAAC"}

package/dist/migrate/export/frameworks/webauthn.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Just enough CBOR and WebAuthn to pull a passkey's credential id, COSE public
+ * key and sign count out of a stored registration response (attestationObject),
+ * for sources that keep the response instead of the parsed key (django-allauth's
+ * MFA WebAuthn authenticators).
+ */
+interface Decoded {
+    value: unknown;
+    end: number;
+}
+/** Decode one CBOR item at `offset` (ints, byte/text strings, arrays, maps, simple values). */
+export declare function decodeCbor(buf: Buffer, offset?: number, depth?: number): Decoded;
+export interface ParsedCredential {
+    credentialId: Buffer;
+    /** The COSE_Key, byte for byte as the authenticator produced it. */
+    publicKey: Buffer;
+    signCount: number;
+    aaguid: string;
+    backedUp: boolean;
+}
+/** Parse `authData` with attested credential data (flag AT). */
+export declare function parseAuthData(authData: Buffer): ParsedCredential | null;
+/** The credential inside a base64url attestationObject. */
+export declare function parseAttestationObject(b64url: string): ParsedCredential | null;
+export {};

package/dist/migrate/export/frameworks/webauthn.js

@@ -0,0 +1,130 @@
+"use strict";
+/**
+ * Just enough CBOR and WebAuthn to pull a passkey's credential id, COSE public
+ * key and sign count out of a stored registration response (attestationObject),
+ * for sources that keep the response instead of the parsed key (django-allauth's
+ * MFA WebAuthn authenticators).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeCbor = decodeCbor;
+exports.parseAuthData = parseAuthData;
+exports.parseAttestationObject = parseAttestationObject;
+/** Decode one CBOR item at `offset` (ints, byte/text strings, arrays, maps, simple values). */
+function decodeCbor(buf, offset = 0, depth = 0) {
+    if (depth > 16)
+        throw new Error('CBOR nesting too deep');
+    if (offset >= buf.length)
+        throw new Error('CBOR truncated');
+    const initial = buf[offset];
+    const major = initial >> 5;
+    const info = initial & 31;
+    let pos = offset + 1;
+    const readLength = () => {
+        if (info < 24)
+            return info;
+        if (info === 24)
+            return buf.readUInt8(pos++);
+        if (info === 25) {
+            const v = buf.readUInt16BE(pos);
+            pos += 2;
+            return v;
+        }
+        if (info === 26) {
+            const v = buf.readUInt32BE(pos);
+            pos += 4;
+            return v;
+        }
+        if (info === 27) {
+            const v = Number(buf.readBigUInt64BE(pos));
+            pos += 8;
+            return v;
+        }
+        throw new Error('CBOR indefinite lengths are not supported');
+    };
+    switch (major) {
+        case 0:
+            return { value: readLength(), end: pos };
+        case 1:
+            return { value: -1 - readLength(), end: pos };
+        case 2: {
+            const n = readLength();
+            if (pos + n > buf.length)
+                throw new Error('CBOR truncated');
+            return { value: buf.subarray(pos, pos + n), end: pos + n };
+        }
+        case 3: {
+            const n = readLength();
+            if (pos + n > buf.length)
+                throw new Error('CBOR truncated');
+            return { value: buf.toString('utf8', pos, pos + n), end: pos + n };
+        }
+        case 4: {
+            const n = readLength();
+            const arr = [];
+            for (let i = 0; i < n; i++) {
+                const item = decodeCbor(buf, pos, depth + 1);
+                arr.push(item.value);
+                pos = item.end;
+            }
+            return { value: arr, end: pos };
+        }
+        case 5: {
+            const n = readLength();
+            const map = new Map();
+            for (let i = 0; i < n; i++) {
+                const k = decodeCbor(buf, pos, depth + 1);
+                const v = decodeCbor(buf, k.end, depth + 1);
+                map.set(k.value, v.value);
+                pos = v.end;
+            }
+            return { value: map, end: pos };
+        }
+        case 7:
+            if (info === 20)
+                return { value: false, end: pos };
+            if (info === 21)
+                return { value: true, end: pos };
+            if (info === 22 || info === 23)
+                return { value: null, end: pos };
+            throw new Error('CBOR float/simple values are not supported');
+        default:
+            throw new Error(`CBOR major type ${major} is not supported`);
+    }
+}
+/** Parse `authData` with attested credential data (flag AT). */
+function parseAuthData(authData) {
+    if (authData.length < 37 + 18)
+        return null;
+    const flags = authData[32];
+    if (!(flags & 0x40))
+        return null;
+    const signCount = authData.readUInt32BE(33);
+    const aaguid = authData.subarray(37, 53).toString('hex');
+    const idLength = authData.readUInt16BE(53);
+    const idEnd = 55 + idLength;
+    if (idEnd > authData.length)
+        return null;
+    const credentialId = authData.subarray(55, idEnd);
+    const key = decodeCbor(authData, idEnd);
+    return {
+        credentialId,
+        publicKey: authData.subarray(idEnd, key.end),
+        signCount,
+        aaguid: `${aaguid.slice(0, 8)}-${aaguid.slice(8, 12)}-${aaguid.slice(12, 16)}-${aaguid.slice(16, 20)}-${aaguid.slice(20)}`,
+        backedUp: Boolean(flags & 0x10),
+    };
+}
+/** The credential inside a base64url attestationObject. */
+function parseAttestationObject(b64url) {
+    try {
+        const decoded = decodeCbor(Buffer.from(b64url.replace(/\+/g, '-').replace(/\//g, '_'), 'base64url')).value;
+        if (!(decoded instanceof Map))
+            return null;
+        const authData = decoded.get('authData');
+        return Buffer.isBuffer(authData) ? parseAuthData(authData) : null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=webauthn.js.map

package/dist/migrate/export/frameworks/webauthn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn.js","sourceRoot":"","sources":["../../../../src/migrate/export/frameworks/webauthn.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;AAQH,gCAuEC;AAYD,sCAkBC;AAGD,wDASC;AAlHD,+FAA+F;AAC/F,SAAgB,UAAU,CAAC,GAAW,EAAE,MAAM,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC;IAC3D,IAAI,KAAK,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACzD,IAAI,MAAM,IAAI,GAAG,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,GAAG,EAAE,CAAC;IAC1B,IAAI,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC;IACrB,MAAM,UAAU,GAAG,GAAW,EAAE;QAC9B,IAAI,IAAI,GAAG,EAAE;YAAE,OAAO,IAAI,CAAC;QAC3B,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;QAC7C,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YAChC,GAAG,IAAI,CAAC,CAAC;YACT,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YAChC,GAAG,IAAI,CAAC,CAAC;YACT,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3C,GAAG,IAAI,CAAC,CAAC;YACT,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC,CAAC;IACF,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,CAAC;YACJ,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QAC3C,KAAK,CAAC;YACJ,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,UAAU,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QAChD,KAAK,CAAC,CAAC,CAAC,CAAC;YACP,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;YACvB,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC5D,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;QAC7D,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,CAAC;YACP,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;YACvB,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC5D,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;QACrE,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,CAAC;YACP,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;YACvB,MAAM,GAAG,GAAc,EAAE,CAAC;YAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC7C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACrB,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;YACjB,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QAClC,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,CAAC;YACP,MAAM,CAAC,GAAG,UAAU,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;YACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3B,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC1C,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC5C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC1B,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;YACd,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QAClC,CAAC;QACD,KAAK,CAAC;YACJ,IAAI,IAAI,KAAK,EAAE;gBAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;YACnD,IAAI,IAAI,KAAK,EAAE;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;YAClD,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE;gBAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE;YACE,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,mBAAmB,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAWD,gEAAgE;AAChE,SAAgB,aAAa,CAAC,QAAgB;IAC5C,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,CAAE,CAAC;IAC5B,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,SAAS,GAAG,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,EAAE,GAAG,QAAQ,CAAC;IAC5B,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxC,OAAO;QACL,YAAY;QACZ,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC;QAC5C,SAAS;QACT,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE;QAC1H,QAAQ,EAAE,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,2DAA2D;AAC3D,SAAgB,sBAAsB,CAAC,MAAc;IACnD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3G,IAAI,CAAC,CAAC,OAAO,YAAY,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzC,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/migrate/export/frontegg-config.d.ts

@@ -0,0 +1,29 @@
+import type { TranslationResult } from '../framework/plugin';
+import { type FronteggConnection } from './frontegg';
+import { type Obj } from './record-set';
+/**
+ * `atlas migrate frontegg config` — what the Frontegg management API exposes of
+ * an environment: identity configuration (sign-in method, JWT contents), the
+ * password, MFA, lockout and session policies, roles and permissions, custom
+ * social providers, applications (login and app URLs), JWT templates and email
+ * domain restrictions. Social providers set in the portal, hosted-login
+ * branding, flows and webhooks are not in the public API: the report lists them
+ * as manual. SSO configurations and users move with the data export.
+ */
+export interface FronteggConfigSnapshot {
+    clientId: string;
+    region: string;
+    configuration: Obj | null;
+    password: Obj | null;
+    mfaPolicy: Obj | null;
+    lockout: Obj | null;
+    sessions: Obj | null;
+    roles: Obj[];
+    permissions: Obj[];
+    customProviders: Obj[];
+    applications: Obj[];
+    jwtTemplates: Obj[];
+    domainRestrictions: Obj | null;
+}
+export declare function fetchFronteggConfig(c: FronteggConnection): Promise<FronteggConfigSnapshot>;
+export declare function translateFronteggConfig(snap: FronteggConfigSnapshot, domain?: string): TranslationResult;