@atlasauth/cli 0.25.0 → 0.26.0

package/dist/migrate/frameworks/plugins.js

@@ -0,0 +1,402 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FRAMEWORK_PLUGINS = exports.djangoPlugin = exports.devisePlugin = exports.ironSessionPlugin = exports.passportPlugin = exports.luciaPlugin = exports.authJsPlugin = exports.ASSERTION_PRESETS = void 0;
+exports.readInput = readInput;
+exports.writeFrameworkExport = writeFrameworkExport;
+exports.bridgeSecret = bridgeSecret;
+exports.parsePairs = parsePairs;
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const args_1 = require("../../args");
+const errors_1 = require("../../errors");
+const app_users_1 = require("../export/frameworks/app-users");
+const authjs_1 = require("../export/frameworks/authjs");
+const devise_1 = require("../export/frameworks/devise");
+const django_1 = require("../export/frameworks/django");
+const lucia_1 = require("../export/frameworks/lucia");
+const tables_1 = require("../export/frameworks/tables");
+const translate_js_1 = require("./translate-js");
+const translate_rails_django_1 = require("./translate-rails-django");
+/**
+ * The `atlas migrate <vendor>` plugins for the self-hosted frameworks:
+ * Auth.js / NextAuth, Lucia, Passport (+ express-session), iron-session,
+ * Devise and Django (contrib.auth + allauth).
+ *
+ * These keep users in the APP's database, so there is no vendor API to call:
+ * `config` reads the app's source (statically), `export` reads table dumps
+ * made with the owner's own tools (`--set dump=<dir>`) or the NDJSON a
+ * framework export script prints (`--file <path>`, `--file -` for stdin).
+ * Database credentials and app secrets never reach the CLI, let alone Atlas.
+ */
+// ── Shared inputs ───────────────────────────────────────────────────────────
+const DUMP = { flag: '--dump', env: 'ATLAS_MIGRATE_DUMP', label: 'the folder of table dumps (--set dump=<dir>)', required: false };
+const RP_ID = { flag: '--rp-id', env: 'ATLAS_MIGRATE_RP_ID', label: 'the WebAuthn relying-party id passkeys were registered on (your domain)', required: false };
+const SESSIONS = { flag: '--sessions', env: 'ATLAS_MIGRATE_SESSIONS', label: 'whether to export live sessions (true / false)', required: false };
+function setting(p, name, env, label, secret = false) {
+    return p.credential({ flag: `--${name}`, env, label, required: false, secret });
+}
+function flagBool(p, spec, fallback) {
+    const v = p.credential(spec)?.toLowerCase();
+    if (v === undefined)
+        return fallback;
+    if (['1', 'true', 'yes', 'on'].includes(v))
+        return true;
+    if (['0', 'false', 'no', 'off'].includes(v))
+        return false;
+    throw new errors_1.CliError(`${spec.label}: expected true or false, got "${v}".`);
+}
+/** The `--file` path, `-` for stdin. */
+function fileArg(p) {
+    return (0, args_1.str)(p.args.values, 'file');
+}
+/**
+ * The tables to export from: `--file` (an export script's NDJSON stream, or a
+ * single JSON / NDJSON / CSV table file) and/or `--set dump=<dir>`.
+ */
+function readInput(p, opts = {}) {
+    const dump = p.credential(DUMP);
+    const file = fileArg(p);
+    const tables = dump ? (0, tables_1.readDumpDir)((0, node_path_1.resolve)(dump)) : new tables_1.Tables();
+    if (file) {
+        const text = file === '-' ? (0, node_fs_1.readFileSync)(0, 'utf8') : p.ctx.readFile((0, node_path_1.resolve)(file));
+        if (opts.singleFile && !looksLikeStream(text))
+            opts.singleFile(text, tables);
+        else
+            (0, tables_1.tablesFromStream)(text, tables);
+    }
+    return tables;
+}
+/** True for the export scripts' `{"table": …, "row": …}` NDJSON. */
+function looksLikeStream(text) {
+    return /^\s*\{\s*"table"\s*:/m.test(text);
+}
+function needInput(p, hint) {
+    if (!p.credential(DUMP) && !fileArg(p))
+        throw new errors_1.CliError(hint);
+}
+/** Write a framework export's rows through the bundle writer, in canonical order. */
+async function writeFrameworkExport(p, out, writer) {
+    for (const w of out.warnings)
+        writer.warn(w);
+    for (const [model, o] of Object.entries(out.omitted))
+        writer.omit(model, o.reason, o.count);
+    let written = 0;
+    for (const [model, data] of out.entries()) {
+        const issues = await writer.add(model, data);
+        if (issues.length)
+            p.say(`  left out a ${model}: ${issues[0].message}`);
+        else
+            written++;
+    }
+    const counts = Object.entries(out.counts()).map(([m, n]) => `${n} ${m}`).join(', ');
+    p.say(`  read ${counts || 'no records'} (${written} written)`);
+}
+/** The bridge preset and variables: the translation's when there is one, flags over it. */
+function bridgeVars(p, translation, names) {
+    const vars = { ...(translation?.bridge?.vars ?? {}) };
+    for (const name of names) {
+        const v = p.credential({ flag: `--${name.replace(/_/g, '-')}`, env: `ATLAS_BRIDGE_${name.toUpperCase()}`, label: name, required: false });
+        if (v)
+            vars[name] = v;
+    }
+    return vars;
+}
+function lazyConfig(p, translation, keys) {
+    const config = { ...(translation?.lazy?.config ?? {}) };
+    for (const key of keys) {
+        const v = p.credential({ flag: `--${key.replace(/_/g, '-')}`, env: `ATLAS_LAZY_${key.toUpperCase()}`, label: key, required: false });
+        if (v)
+            config[key] = v;
+    }
+    // A placeholder from the source is not a URL the preset can call.
+    for (const [k, v] of Object.entries(config))
+        if (v.includes('${'))
+            delete config[k];
+    return config;
+}
+/** Presets whose token is a bridge assertion signed on the owner's server (see the backend extractors). */
+exports.ASSERTION_PRESETS = new Set(['authjs_jwt', 'iron_session', 'devise', 'django_signed_cookies']);
+/**
+ * The bridge secret shared by the extractor on your server and Atlas:
+ * `--set bridge-secret=…` / ATLAS_BRIDGE_SECRET, else the one generated on an
+ * earlier run, else a new one — kept in atlas-migrate/<vendor>/bridge-secret
+ * (mode 0600) for your server's ATLAS_BRIDGE_SECRET.
+ */
+function bridgeSecret(p, vendor, preset) {
+    if (!exports.ASSERTION_PRESETS.has(preset))
+        return undefined;
+    const given = p.credential({ flag: '--bridge-secret', env: 'ATLAS_BRIDGE_SECRET', label: 'the bridge secret', required: false, secret: true });
+    if (given)
+        return given;
+    const path = (0, node_path_1.resolve)(p.project, 'atlas-migrate', vendor, 'bridge-secret');
+    if ((0, node_fs_1.existsSync)(path)) {
+        const kept = (0, node_fs_1.readFileSync)(path, 'utf8').trim();
+        if (kept)
+            return kept;
+    }
+    const secret = (0, node_crypto_1.randomBytes)(32).toString('base64url');
+    (0, node_fs_1.mkdirSync)((0, node_path_1.resolve)(p.project, 'atlas-migrate', vendor), { recursive: true });
+    (0, node_fs_1.writeFileSync)(path, `${secret}\n`, { mode: 0o600 });
+    p.say(`  generated the bridge secret in ${path}: set it as ATLAS_BRIDGE_SECRET on the server that runs the bridge middleware (it never goes in your code)`);
+    return secret;
+}
+function frameworkPlugin(input) {
+    return {
+        vendor: input.vendor,
+        source: input.source,
+        label: input.label,
+        help: input.help,
+        config: {
+            reads: input.reads,
+            async translate(p) {
+                return input.translate(p.project);
+            },
+        },
+        export: {
+            reads: input.exportReads,
+            credentials: input.credentials,
+            limits: input.limits,
+            check: input.check,
+            async run(p, writer) {
+                const out = input.run(p);
+                await writeFrameworkExport(p, out, writer);
+            },
+        },
+        bridge: {
+            preset: input.bridgePreset,
+            vars: (p, translation) => bridgeVars(p, translation, input.bridgeVarNames),
+            sharedSecret: (p, preset) => bridgeSecret(p, input.vendor, preset),
+        },
+        ...(input.lazy
+            ? {
+                lazy: {
+                    preset: input.lazy.preset,
+                    config: (p, translation) => lazyConfig(p, translation, input.lazy.keys),
+                    optional: true,
+                },
+            }
+            : {}),
+        ...(input.codemod ? { codemod: input.codemod } : {}),
+    };
+}
+const DUMP_HINT = (vendor, tables) => `Export your ${tables} first, one file per table (<table>.csv / .json / .ndjson — psql \\copy, sqlite3 -json, mongoexport, mysqldump --tab), then pass the folder: atlas migrate ${vendor} export --set dump=<dir>.`;
+// ── Auth.js / NextAuth ──────────────────────────────────────────────────────
+exports.authJsPlugin = frameworkPlugin({
+    vendor: 'authjs',
+    source: 'authjs',
+    label: 'Auth.js (NextAuth)',
+    help: 'Moves an Auth.js / NextAuth v4 or v5 app: config reads your NextAuth(...) / Auth(...) options (providers, session strategy and lifetime, cookies, pages); export reads your adapter tables (User, Account, Session, Authenticator) from a dump folder (--set dump=<dir>) — Prisma, Drizzle, Kysely, TypeORM, MongoDB and the SQL adapters all use these shapes. Database sessions bridge through the imported session table (preset authjs); JWT sessions are decrypted on your server with AUTH_SECRET (preset authjs_jwt).',
+    reads: 'your Auth.js configuration (auth.ts / [...nextauth].ts), statically',
+    translate: translate_js_1.translateAuthJs,
+    exportReads: 'a dump of your Auth.js adapter tables (--set dump=<dir>)',
+    credentials: [DUMP, RP_ID, SESSIONS],
+    check: (p) => needInput(p, DUMP_HINT('authjs', 'adapter tables (User, Account, Session, Authenticator)')),
+    run(p) {
+        return (0, authjs_1.exportAuthJs)(readInput(p), {
+            rpId: p.credential(RP_ID),
+            oauthTokens: flagBool(p, { flag: '--oauth-tokens', env: 'ATLAS_MIGRATE_OAUTH_TOKENS', label: 'whether to carry OAuth access / refresh tokens', required: false }, false),
+            sessions: flagBool(p, SESSIONS, true),
+            passwordColumn: setting(p, 'password-column', 'ATLAS_MIGRATE_PASSWORD_COLUMN', 'the users column holding a Credentials-provider hash'),
+        });
+    },
+    limits: [
+        'Passwords exist only if your Credentials provider stored hashes; a scheme Atlas cannot verify falls back to lazy migration (preset authjs_credentials).',
+        'JWT-strategy sessions live only in the browser: the bridge decrypts them on your server with AUTH_SECRET (preset authjs_jwt).',
+        'Verification tokens (magic links in flight) are not exported: those links expire and users request a new one.',
+    ],
+    bridgePreset: 'authjs',
+    bridgeVarNames: ['cookie_name'],
+    lazy: { preset: 'authjs_credentials', keys: ['base_url', 'provider_id', 'identifier_field'] },
+    codemod: 'authjs',
+});
+// ── Lucia ───────────────────────────────────────────────────────────────────
+exports.luciaPlugin = frameworkPlugin({
+    vendor: 'lucia',
+    source: 'lucia',
+    label: 'Lucia',
+    help: 'Moves a Lucia v2 / v3 app or one built on the Lucia guide (the post-v3 "sessions from scratch" pattern): config reads new Lucia(...) (session expiry, cookie name and attributes) and your Arctic OAuth providers; export reads the user, session, key / oauth_account, and guide TOTP / recovery / passkey tables from a dump folder. Sessions bridge through the imported session table (preset lucia).',
+    reads: 'your Lucia setup (new Lucia(...) and Arctic providers), statically',
+    translate: translate_js_1.translateLucia,
+    exportReads: 'a dump of your Lucia tables (--set dump=<dir>)',
+    credentials: [DUMP, RP_ID, SESSIONS, { flag: '--encryption-key', env: 'LUCIA_ENCRYPTION_KEY', label: 'the guide ENCRYPTION_KEY (base64), for TOTP keys and recovery codes', required: false, secret: true }],
+    check: (p) => needInput(p, DUMP_HINT('lucia', 'user, session and oauth_account / key tables')),
+    run(p) {
+        const hashing = setting(p, 'session-hashing', 'ATLAS_MIGRATE_SESSION_HASHING', 'how session ids store the token (none / sha256-hex)');
+        if (hashing && hashing !== 'none' && hashing !== 'sha256-hex')
+            throw new errors_1.CliError('session-hashing must be none or sha256-hex.');
+        return (0, lucia_1.exportLucia)(readInput(p), {
+            rpId: p.credential(RP_ID),
+            sessions: flagBool(p, SESSIONS, true),
+            encryptionKey: setting(p, 'encryption-key', 'LUCIA_ENCRYPTION_KEY', 'the guide ENCRYPTION_KEY', true),
+            sessionIdHashing: hashing,
+            userTable: setting(p, 'user-table', 'ATLAS_MIGRATE_USER_TABLE', 'the user table name'),
+            sessionTable: setting(p, 'session-table', 'ATLAS_MIGRATE_SESSION_TABLE', 'the session table name'),
+            oauthTable: setting(p, 'oauth-table', 'ATLAS_MIGRATE_OAUTH_TABLE', 'the OAuth account table name'),
+        });
+    },
+    limits: [
+        'Guide-style TOTP keys and recovery codes are encrypted with your ENCRYPTION_KEY: pass it (--set encryption-key=…, read only on this machine) or those users enrol again.',
+        'Passkeys with an algorithm other than ES256 cannot be converted and are re-registered.',
+    ],
+    bridgePreset: 'lucia',
+    bridgeVarNames: ['cookie_name'],
+    codemod: 'lucia',
+});
+// ── Passport / iron-session (the app's own users table) ─────────────────────
+function appUsersOptions(p) {
+    const s = (name, label) => setting(p, name, `ATLAS_MIGRATE_${name.toUpperCase().replace(/-/g, '_')}`, label);
+    const identityColumns = s('identity-columns', 'provider=column pairs, comma separated (google=googleId,github=githubId)');
+    const digest = s('plm-digest', 'the passport-local-mongoose digest (sha1 / sha256 / sha512)');
+    if (digest && !['sha1', 'sha256', 'sha512'].includes(digest))
+        throw new errors_1.CliError('plm-digest must be sha1, sha256 or sha512.');
+    const iterations = s('plm-iterations', 'the passport-local-mongoose iteration count');
+    if (iterations && !/^\d+$/.test(iterations))
+        throw new errors_1.CliError('plm-iterations must be a whole number.');
+    return {
+        usersTable: s('users-table', 'the users table'),
+        idColumn: s('id-column', 'the user id column'),
+        emailColumn: s('email-column', 'the email column'),
+        emailVerifiedColumn: s('email-verified-column', 'the email-verified column'),
+        usernameColumn: s('username-column', 'the username column'),
+        nameColumn: s('name-column', 'the display name column'),
+        passwordColumn: s('password-column', 'the password hash column'),
+        plmDigest: digest,
+        plmIterations: iterations ? Number(iterations) : undefined,
+        identityColumns: identityColumns ? parsePairs(identityColumns) : undefined,
+        identitiesTable: s('identities-table', 'a separate social identities table'),
+        sessionsTable: s('sessions-table', 'the express-session store table'),
+        sessionUserPath: s('session-user-path', 'where the user id sits in the session JSON'),
+        sessions: flagBool(p, SESSIONS, true),
+    };
+}
+/** `google=googleId,github=github_id` → { google: 'googleId', github: 'github_id' }. */
+function parsePairs(text) {
+    const out = {};
+    for (const part of text.split(',')) {
+        const [k, v] = part.split('=').map((x) => x.trim());
+        if (!k || !v)
+            throw new errors_1.CliError(`identity-columns: "${part}" is not provider=column.`);
+        out[k] = v;
+    }
+    return out;
+}
+const APP_USERS_CREDENTIALS = [DUMP, SESSIONS];
+exports.passportPlugin = frameworkPlugin({
+    vendor: 'passport',
+    source: 'passport',
+    label: 'Passport.js',
+    help: 'Moves an Express app on Passport.js and express-session: config reads your strategies (local, social, OIDC, SAML, JWT) and session() options; export reads YOUR users table by column (bcrypt, Argon2, scrypt, PBKDF2 and passport-local-mongoose hashes carry over), linked provider ids, and the express-session store (connect-pg-simple, connect-mongo, connect-redis dumps). Sessions bridge through the imported store (preset passport).',
+    reads: 'your Passport strategies and express-session options, statically',
+    translate: translate_js_1.translatePassport,
+    exportReads: 'a dump of your users table and session store (--set dump=<dir>)',
+    credentials: APP_USERS_CREDENTIALS,
+    check: (p) => needInput(p, DUMP_HINT('passport', 'users table (and your express-session store table)')),
+    run(p) {
+        return (0, app_users_1.exportAppUsers)(readInput(p), appUsersOptions(p));
+    },
+    limits: [
+        'Passport keeps no user store of its own: name your users table and columns when they differ from the defaults (--set users-table=… --set email-column=… --set password-column=…).',
+        'MemoryStore sessions cannot be exported: those users sign in again once.',
+        'A password scheme Atlas cannot verify falls back to lazy migration through a verify endpoint in your app (preset webhook).',
+    ],
+    bridgePreset: 'passport',
+    bridgeVarNames: ['cookie_name'],
+    codemod: 'passport',
+});
+exports.ironSessionPlugin = frameworkPlugin({
+    vendor: 'iron-session',
+    source: 'iron_session',
+    label: 'iron-session',
+    help: 'Moves an app that keeps its session in an iron-session sealed cookie: config reads your session options (cookieName, ttl, cookieOptions); export reads YOUR users table by column. The session itself only exists in the cookie, so the bridge unseals it on your server with the session password (preset iron_session) and Atlas only sees a short-lived signed assertion.',
+    reads: 'your getIronSession / sealData options, statically',
+    translate: translate_js_1.translateIronSession,
+    exportReads: 'a dump of your users table (--set dump=<dir>)',
+    credentials: APP_USERS_CREDENTIALS,
+    check: (p) => needInput(p, DUMP_HINT('iron-session', 'users table')),
+    run(p) {
+        return (0, app_users_1.exportAppUsers)(readInput(p), { ...appUsersOptions(p), sessions: false });
+    },
+    limits: [
+        'iron-session has no server-side session store and no user table: export your own users table; sessions move through the bridge only.',
+    ],
+    bridgePreset: 'iron_session',
+    bridgeVarNames: ['cookie_name'],
+    codemod: 'iron-session',
+});
+// ── Devise / Django (an export script run inside the app) ───────────────────
+/** Write the export script into the migration folder and explain how to run it. */
+function scriptMissing(p, vendor, file, script, run) {
+    const dir = (0, node_path_1.resolve)(p.project, 'atlas-migrate', vendor);
+    const path = (0, node_path_1.join)(dir, file);
+    if (!p.dryRun) {
+        (0, node_fs_1.mkdirSync)(dir, { recursive: true });
+        (0, node_fs_1.writeFileSync)(path, script, { mode: 0o600 });
+    }
+    throw new errors_1.CliError(`Wrote the export script to ${path}. Run it inside your app and pipe it in:\n  ${run.replace('{script}', (0, node_path_1.join)('atlas-migrate', vendor, file))}\n(or redirect it to a file and pass --file <path>).`);
+}
+exports.devisePlugin = frameworkPlugin({
+    vendor: 'devise',
+    source: 'devise',
+    label: 'Devise (Rails)',
+    help: 'Moves a Rails app on Devise: config reads config/initializers/devise.rb, your Devise models, OmniAuth providers and the session store; export runs a small Rails runner script inside your app (written for you on the first run) that streams users, confirmable / lockable state, OmniAuth identities, devise-two-factor secrets and activerecord-session_store sessions — bcrypt hashes (with your pepper) carry over. Cookie-store sessions bridge through deviseExtractor on your server (preset devise); activerecord sessions through the imported table (devise_active_record).',
+    reads: 'config/initializers/devise.rb, your Devise models and session store, statically',
+    translate: translate_rails_django_1.translateDevise,
+    exportReads: 'the Rails export script output (--file <path>, or --file - to pipe it)',
+    credentials: [SESSIONS],
+    check(p) {
+        if (!fileArg(p) && !p.credential(DUMP))
+            scriptMissing(p, 'devise', 'atlas_export.rb', devise_1.DEVISE_EXPORT_SCRIPT, 'bin/rails runner {script} [User] | atlas migrate devise export --file -');
+    },
+    run(p) {
+        return (0, devise_1.exportDevise)(readInput(p), {
+            usersTable: setting(p, 'users-table', 'ATLAS_MIGRATE_USERS_TABLE', 'the Devise model table'),
+            trustUnconfirmable: flagBool(p, { flag: '--trust-unconfirmable', env: 'ATLAS_MIGRATE_TRUST_UNCONFIRMABLE', label: 'treat emails as verified when the model is not :confirmable', required: false }, false),
+            sessions: flagBool(p, SESSIONS, true),
+        });
+    },
+    limits: [
+        'devise-encryptable digests (SHA-1/SHA-512, Authlogic, restful_authentication) do not carry over: those users migrate lazily (preset devise_json) or reset.',
+        'Cookie-store sessions are opened on your server with secret_key_base; the bridge needs the JSON (or hybrid) cookie serializer, not Marshal.',
+    ],
+    bridgePreset: 'devise',
+    bridgeVarNames: ['cookie_name'],
+    lazy: { preset: 'devise_json', keys: ['base_url', 'path', 'scope'] },
+});
+exports.djangoPlugin = frameworkPlugin({
+    vendor: 'django',
+    source: 'django',
+    label: 'Django (contrib.auth, django-allauth)',
+    help: 'Moves a Django app on django.contrib.auth with or without django-allauth: config reads settings.py (password hashers and validators, session engine and age, allauth account / socialaccount / mfa settings); export reads `manage.py dumpdata` JSON or, better, the export script (written for you on the first run) that also decrypts allauth TOTP secrets and lists unused recovery codes. pbkdf2_sha256, argon2, bcrypt_sha256 and scrypt hashes carry over. Database sessions bridge through the imported table (preset django); signed-cookie sessions through djangoSignedCookieExtractor (django_signed_cookies).',
+    reads: 'your Django settings, statically',
+    translate: translate_rails_django_1.translateDjango,
+    exportReads: 'manage.py dumpdata JSON or the export script output (--file <path>, or --file - to pipe it)',
+    credentials: [SESSIONS, RP_ID],
+    check(p) {
+        if (!fileArg(p) && !p.credential(DUMP))
+            scriptMissing(p, 'django', 'atlas_export.py', django_1.DJANGO_EXPORT_SCRIPT, 'python manage.py shell < {script} | atlas migrate django export --file -');
+    },
+    run(p) {
+        const tables = readInput(p, {
+            // dumpdata: one JSON array of { model, pk, fields }, which the exporter reads as the "dumpdata" table.
+            singleFile: (text, into) => into.set('dumpdata', (0, tables_1.parseTableText)(text, '.json')),
+        });
+        return (0, django_1.exportDjango)(tables, {
+            userModel: setting(p, 'user-model', 'ATLAS_MIGRATE_USER_MODEL', 'AUTH_USER_MODEL (app_label.model)'),
+            rpId: p.credential(RP_ID),
+            oauthTokens: flagBool(p, { flag: '--oauth-tokens', env: 'ATLAS_MIGRATE_OAUTH_TOKENS', label: 'whether to carry OAuth tokens', required: false }, false),
+            sessions: flagBool(p, SESSIONS, true),
+            trustEmails: flagBool(p, { flag: '--trust-emails', env: 'ATLAS_MIGRATE_TRUST_EMAILS', label: 'treat user.email as verified without allauth', required: false }, false),
+        });
+    },
+    limits: [
+        'allauth recovery codes and TOTP secrets encrypted by a custom MFA adapter need the export script (run inside your app); a plain dumpdata leaves them out.',
+        'cache and file session engines cannot be exported: those users sign in again once. Signed-cookie sessions are opened on your server with SECRET_KEY.',
+        'A custom password hasher falls back to lazy migration through the allauth headless API (preset allauth_headless).',
+    ],
+    bridgePreset: 'django',
+    bridgeVarNames: ['cookie_name'],
+    lazy: { preset: 'allauth_headless', keys: ['base_url', 'login_field'] },
+});
+exports.FRAMEWORK_PLUGINS = [exports.authJsPlugin, exports.luciaPlugin, exports.passportPlugin, exports.ironSessionPlugin, exports.devisePlugin, exports.djangoPlugin];
+//# sourceMappingURL=plugins.js.map

package/dist/migrate/frameworks/plugins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugins.js","sourceRoot":"","sources":["../../../src/migrate/frameworks/plugins.ts"],"names":[],"mappings":";;;AAuDA,8BAUC;AAYD,oDAWC;AAgCD,oCAcC;AA6JD,gCAQC;AA3SD,6CAA0C;AAC1C,qCAA6E;AAC7E,yCAA0C;AAE1C,qCAAiC;AACjC,yCAAwC;AACxC,8DAA4F;AAC5F,wDAA2D;AAC3D,wDAAiF;AACjF,wDAAiF;AACjF,sDAAyD;AACzD,wDAA0H;AAE1H,iDAA0G;AAC1G,qEAA4E;AAE5E;;;;;;;;;;GAUG;AAEH,+EAA+E;AAE/E,MAAM,IAAI,GAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,8CAA8C,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACnJ,MAAM,KAAK,GAAmB,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,qBAAqB,EAAE,KAAK,EAAE,yEAAyE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACjL,MAAM,QAAQ,GAAmB,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,wBAAwB,EAAE,KAAK,EAAE,gDAAgD,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAEjK,SAAS,OAAO,CAAC,CAAgB,EAAE,IAAY,EAAE,GAAW,EAAE,KAAa,EAAE,MAAM,GAAG,KAAK;IACzF,OAAO,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,QAAQ,CAAC,CAAgB,EAAE,IAAoB,EAAE,QAAiB;IACzE,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACrC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,IAAI,iBAAQ,CAAC,GAAG,IAAI,CAAC,KAAK,kCAAkC,CAAC,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED,wCAAwC;AACxC,SAAS,OAAO,CAAC,CAAgB;IAC/B,OAAO,IAAA,UAAG,EAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,SAAgB,SAAS,CAAC,CAAgB,EAAE,OAAgE,EAAE;IAC5G,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAA,oBAAW,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,eAAM,EAAE,CAAC;IAChE,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,IAAA,sBAAY,EAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,CAAC;QACpF,IAAI,IAAI,CAAC,UAAU,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;;YACxE,IAAA,yBAAgB,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,oEAAoE;AACpE,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,SAAS,CAAC,CAAgB,EAAE,IAAY;IAC/C,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,iBAAQ,CAAC,IAAI,CAAC,CAAC;AACnE,CAAC;AAED,qFAAqF;AAC9E,KAAK,UAAU,oBAAoB,CAAC,CAAgB,EAAE,GAAoB,EAAE,MAAoE;IACrJ,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7C,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5F,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,KAAuB,EAAE,IAA2C,CAAC,CAAC;QACtG,IAAI,MAAM,CAAC,MAAM;YAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,KAAK,KAAK,MAAM,CAAC,CAAC,CAAE,CAAC,OAAO,EAAE,CAAC,CAAC;;YACpE,OAAO,EAAE,CAAC;IACjB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpF,CAAC,CAAC,GAAG,CAAC,UAAU,MAAM,IAAI,YAAY,KAAK,OAAO,WAAW,CAAC,CAAC;AACjE,CAAC;AAED,2FAA2F;AAC3F,SAAS,UAAU,CAAC,CAAgB,EAAE,WAA0C,EAAE,KAAe;IAC/F,MAAM,IAAI,GAA2B,EAAE,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;IAC9E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,gBAAgB,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1I,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,CAAgB,EAAE,WAA0C,EAAE,IAAc;IAC9F,MAAM,MAAM,GAA2B,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;IAChF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,cAAc,GAAG,CAAC,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACrI,IAAI,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,kEAAkE;IAClE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACpF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,2GAA2G;AAC9F,QAAA,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,uBAAuB,CAAC,CAAC,CAAC;AAE5G;;;;;GAKG;AACH,SAAgB,YAAY,CAAC,CAAgB,EAAE,MAAc,EAAE,MAAc;IAC3E,IAAI,CAAC,yBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,qBAAqB,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/I,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,IAAI,GAAG,IAAA,mBAAO,EAAC,CAAC,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IAC1E,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACrD,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,CAAC,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,IAAA,uBAAa,EAAC,IAAI,EAAE,GAAG,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,GAAG,CAAC,oCAAoC,IAAI,4GAA4G,CAAC,CAAC;IAC5J,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,KAiBxB;IACC,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE;YACN,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,CAAC,SAAS,CAAC,CAAC;gBACf,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YACpC,CAAC;SACF;QACD,MAAM,EAAE;YACN,KAAK,EAAE,KAAK,CAAC,WAAW;YACxB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM;gBACjB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACzB,MAAM,oBAAoB,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YAC7C,CAAC;SACF;QACD,MAAM,EAAE;YACN,MAAM,EAAE,KAAK,CAAC,YAAY;YAC1B,IAAI,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC;YAC1E,YAAY,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;SACnE;QACD,GAAG,CAAC,KAAK,CAAC,IAAI;YACZ,CAAC,CAAC;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;oBACzB,MAAM,EAAE,CAAC,CAAgB,EAAE,WAA+B,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,IAAK,CAAC,IAAI,CAAC;oBAC3G,QAAQ,EAAE,IAAI;iBACf;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,MAAc,EAAE,MAAc,EAAE,EAAE,CACnD,eAAe,MAAM,8JAA8J,MAAM,2BAA2B,CAAC;AAEvN,+EAA+E;AAElE,QAAA,YAAY,GAAG,eAAe,CAAC;IAC1C,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,oBAAoB;IAC3B,IAAI,EACF,8fAA8f;IAChgB,KAAK,EAAE,qEAAqE;IAC5E,SAAS,EAAE,8BAAe;IAC1B,WAAW,EAAE,0DAA0D;IACvE,WAAW,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,QAAQ,EAAE,wDAAwD,CAAC,CAAC;IACzG,GAAG,CAAC,CAAC;QACH,OAAO,IAAA,qBAAY,EAAC,SAAS,CAAC,CAAC,CAAC,EAAE;YAChC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;YACzB,WAAW,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,4BAA4B,EAAE,KAAK,EAAE,gDAAgD,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC;YACxK,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC;YACrC,cAAc,EAAE,OAAO,CAAC,CAAC,EAAE,iBAAiB,EAAE,+BAA+B,EAAE,sDAAsD,CAAC;SACvI,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE;QACN,yJAAyJ;QACzJ,+HAA+H;QAC/H,+GAA+G;KAChH;IACD,YAAY,EAAE,QAAQ;IACtB,cAAc,EAAE,CAAC,aAAa,CAAC;IAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,kBAAkB,CAAC,EAAE;IAC7F,OAAO,EAAE,QAAQ;CAClB,CAAC,CAAC;AAEH,+EAA+E;AAElE,QAAA,WAAW,GAAG,eAAe,CAAC;IACzC,MAAM,EAAE,OAAO;IACf,MAAM,EAAE,OAAO;IACf,KAAK,EAAE,OAAO;IACd,IAAI,EACF,2YAA2Y;IAC7Y,KAAK,EAAE,oEAAoE;IAC3E,SAAS,EAAE,6BAAc;IACzB,WAAW,EAAE,gDAAgD;IAC7D,WAAW,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,qEAAqE,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5M,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,OAAO,EAAE,8CAA8C,CAAC,CAAC;IAC9F,GAAG,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,EAAE,iBAAiB,EAAE,+BAA+B,EAAE,qDAAqD,CAAC,CAAC;QACtI,IAAI,OAAO,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,YAAY;YAAE,MAAM,IAAI,iBAAQ,CAAC,6CAA6C,CAAC,CAAC;QACjI,OAAO,IAAA,mBAAW,EAAC,SAAS,CAAC,CAAC,CAAC,EAAE;YAC/B,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;YACzB,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC;YACrC,aAAa,EAAE,OAAO,CAAC,CAAC,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,0BAA0B,EAAE,IAAI,CAAC;YACrG,gBAAgB,EAAE,OAA4C;YAC9D,SAAS,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY,EAAE,0BAA0B,EAAE,qBAAqB,CAAC;YACtF,YAAY,EAAE,OAAO,CAAC,CAAC,EAAE,eAAe,EAAE,6BAA6B,EAAE,wBAAwB,CAAC;YAClG,UAAU,EAAE,OAAO,CAAC,CAAC,EAAE,aAAa,EAAE,2BAA2B,EAAE,8BAA8B,CAAC;SACnG,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE;QACN,0KAA0K;QAC1K,wFAAwF;KACzF;IACD,YAAY,EAAE,OAAO;IACrB,cAAc,EAAE,CAAC,aAAa,CAAC;IAC/B,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,+EAA+E;AAE/E,SAAS,eAAe,CAAC,CAAgB;IACvC,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,iBAAiB,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC7H,MAAM,eAAe,GAAG,CAAC,CAAC,kBAAkB,EAAE,0EAA0E,CAAC,CAAC;IAC1H,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,EAAE,6DAA6D,CAAC,CAAC;IAC9F,IAAI,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,iBAAQ,CAAC,4CAA4C,CAAC,CAAC;IAC/H,MAAM,UAAU,GAAG,CAAC,CAAC,gBAAgB,EAAE,6CAA6C,CAAC,CAAC;IACtF,IAAI,UAAU,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,iBAAQ,CAAC,wCAAwC,CAAC,CAAC;IAC1G,OAAO;QACL,UAAU,EAAE,CAAC,CAAC,aAAa,EAAE,iBAAiB,CAAC;QAC/C,QAAQ,EAAE,CAAC,CAAC,WAAW,EAAE,oBAAoB,CAAC;QAC9C,WAAW,EAAE,CAAC,CAAC,cAAc,EAAE,kBAAkB,CAAC;QAClD,mBAAmB,EAAE,CAAC,CAAC,uBAAuB,EAAE,2BAA2B,CAAC;QAC5E,cAAc,EAAE,CAAC,CAAC,iBAAiB,EAAE,qBAAqB,CAAC;QAC3D,UAAU,EAAE,CAAC,CAAC,aAAa,EAAE,yBAAyB,CAAC;QACvD,cAAc,EAAE,CAAC,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;QAChE,SAAS,EAAE,MAA4C;QACvD,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;QAC1D,eAAe,EAAE,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS;QAC1E,eAAe,EAAE,CAAC,CAAC,kBAAkB,EAAE,oCAAoC,CAAC;QAC5E,aAAa,EAAE,CAAC,CAAC,gBAAgB,EAAE,iCAAiC,CAAC;QACrE,eAAe,EAAE,CAAC,CAAC,mBAAmB,EAAE,4CAA4C,CAAC;QACrF,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,SAAgB,UAAU,CAAC,IAAY;IACrC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,iBAAQ,CAAC,sBAAsB,IAAI,2BAA2B,CAAC,CAAC;QACxF,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACb,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,qBAAqB,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAElC,QAAA,cAAc,GAAG,eAAe,CAAC;IAC5C,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,UAAU;IAClB,KAAK,EAAE,aAAa;IACpB,IAAI,EACF,ibAAib;IACnb,KAAK,EAAE,kEAAkE;IACzE,SAAS,EAAE,gCAAiB;IAC5B,WAAW,EAAE,iEAAiE;IAC9E,WAAW,EAAE,qBAAqB;IAClC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,UAAU,EAAE,oDAAoD,CAAC,CAAC;IACvG,GAAG,CAAC,CAAC;QACH,OAAO,IAAA,0BAAc,EAAC,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,EAAE;QACN,mLAAmL;QACnL,0EAA0E;QAC1E,4HAA4H;KAC7H;IACD,YAAY,EAAE,UAAU;IACxB,cAAc,EAAE,CAAC,aAAa,CAAC;IAC/B,OAAO,EAAE,UAAU;CACpB,CAAC,CAAC;AAEU,QAAA,iBAAiB,GAAG,eAAe,CAAC;IAC/C,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,cAAc;IACtB,KAAK,EAAE,cAAc;IACrB,IAAI,EACF,8WAA8W;IAChX,KAAK,EAAE,oDAAoD;IAC3D,SAAS,EAAE,mCAAoB;IAC/B,WAAW,EAAE,+CAA+C;IAC5D,WAAW,EAAE,qBAAqB;IAClC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;IACpE,GAAG,CAAC,CAAC;QACH,OAAO,IAAA,0BAAc,EAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,EAAE;QACN,sIAAsI;KACvI;IACD,YAAY,EAAE,cAAc;IAC5B,cAAc,EAAE,CAAC,aAAa,CAAC;IAC/B,OAAO,EAAE,cAAc;CACxB,CAAC,CAAC;AAEH,+EAA+E;AAE/E,mFAAmF;AACnF,SAAS,aAAa,CAAC,CAAgB,EAAE,MAAc,EAAE,IAAY,EAAE,MAAc,EAAE,GAAW;IAChG,MAAM,GAAG,GAAG,IAAA,mBAAO,EAAC,CAAC,CAAC,OAAO,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACd,IAAA,mBAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,IAAA,uBAAa,EAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,CAAC;IACD,MAAM,IAAI,iBAAQ,CAAC,8BAA8B,IAAI,+CAA+C,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,IAAA,gBAAI,EAAC,eAAe,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,sDAAsD,CAAC,CAAC;AAC1N,CAAC;AAEY,QAAA,YAAY,GAAG,eAAe,CAAC;IAC1C,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,gBAAgB;IACvB,IAAI,EACF,yjBAAyjB;IAC3jB,KAAK,EAAE,iFAAiF;IACxF,SAAS,EAAE,wCAAe;IAC1B,WAAW,EAAE,wEAAwE;IACrF,WAAW,EAAE,CAAC,QAAQ,CAAC;IACvB,KAAK,CAAC,CAAC;QACL,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,aAAa,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,6BAAoB,EAAE,yEAAyE,CAAC,CAAC;IACzL,CAAC;IACD,GAAG,CAAC,CAAC;QACH,OAAO,IAAA,qBAAY,EAAC,SAAS,CAAC,CAAC,CAAC,EAAE;YAChC,UAAU,EAAE,OAAO,CAAC,CAAC,EAAE,aAAa,EAAE,2BAA2B,EAAE,wBAAwB,CAAC;YAC5F,kBAAkB,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,GAAG,EAAE,mCAAmC,EAAE,KAAK,EAAE,6DAA6D,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC;YAC1M,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC;SACtC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE;QACN,4JAA4J;QAC5J,6IAA6I;KAC9I;IACD,YAAY,EAAE,QAAQ;IACtB,cAAc,EAAE,CAAC,aAAa,CAAC;IAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;CACrE,CAAC,CAAC;AAEU,QAAA,YAAY,GAAG,eAAe,CAAC;IAC1C,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,uCAAuC;IAC9C,IAAI,EACF,4lBAA4lB;IAC9lB,KAAK,EAAE,kCAAkC;IACzC,SAAS,EAAE,wCAAe;IAC1B,WAAW,EAAE,6FAA6F;IAC1G,WAAW,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC;IAC9B,KAAK,CAAC,CAAC;QACL,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,aAAa,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,6BAAoB,EAAE,0EAA0E,CAAC,CAAC;IAC1L,CAAC;IACD,GAAG,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,EAAE;YAC1B,uGAAuG;YACvG,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAA,uBAAc,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;SAChF,CAAC,CAAC;QACH,OAAO,IAAA,qBAAY,EAAC,MAAM,EAAE;YAC1B,SAAS,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY,EAAE,0BAA0B,EAAE,mCAAmC,CAAC;YACpG,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC;YACzB,WAAW,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,4BAA4B,EAAE,KAAK,EAAE,+BAA+B,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC;YACvJ,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC;YACrC,WAAW,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,4BAA4B,EAAE,KAAK,EAAE,8CAA8C,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,KAAK,CAAC;SACvK,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE;QACN,2JAA2J;QAC3J,sJAAsJ;QACtJ,mHAAmH;KACpH;IACD,YAAY,EAAE,QAAQ;IACtB,cAAc,EAAE,CAAC,aAAa,CAAC;IAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE;CACxE,CAAC,CAAC;AAEU,QAAA,iBAAiB,GAA+B,CAAC,oBAAY,EAAE,mBAAW,EAAE,sBAAc,EAAE,yBAAiB,EAAE,oBAAY,EAAE,oBAAY,CAAC,CAAC"}

package/dist/migrate/frameworks/report.d.ts

@@ -0,0 +1,92 @@
+import type { Json } from '../../serialize';
+import type { ReportStatus, TranslationReportEntry, TranslationResult } from '../framework/plugin';
+/**
+ * The builder every self-hosted-framework translator (Auth.js, Lucia,
+ * Passport, iron-session, Devise, Django) fills: Atlas config-as-code
+ * (`instance.auth_config`, `oauth_providers`, `custom_oauth_providers`,
+ * `redirect_urls`) plus the mapped / differs / manual report with the file and
+ * line each setting came from. Secrets are never copied: a value read from an
+ * environment variable becomes a `${NAME}` placeholder, and a secret
+ * hard-coded in source becomes a placeholder plus a manual entry.
+ */
+export declare const DAY = 86400;
+/** Atlas session bounds (seconds). */
+export declare const MIN_IDLE_S = 300;
+export declare const MAX_ABSOLUTE_S: number;
+export interface Where {
+    file: string;
+    line: number;
+}
+/** A configuration value as a translator read it: literal, env var, or something only a human can read. */
+export type ConfigValue = {
+    kind: 'literal';
+    value: string | number | boolean;
+    at: Where;
+} | {
+    kind: 'env';
+    name: string;
+    at: Where;
+} | {
+    kind: 'opaque';
+    text: string;
+    at: Where;
+};
+export declare class TranslationBuilder {
+    readonly origin: string;
+    readonly fallback: Where;
+    readonly authConfig: Record<string, Json>;
+    readonly oauthProviders: Json[];
+    readonly customOauthProviders: Json[];
+    readonly redirectUrls: Json[];
+    readonly allowedOrigins: Set<string>;
+    readonly report: TranslationReportEntry[];
+    readonly env: Map<string, string>;
+    readonly providers: Record<string, string>;
+    readonly roles: Record<string, string>;
+    bridge?: {
+        preset: string;
+        vars: Record<string, string>;
+    };
+    lazy?: {
+        preset: string;
+        config: Record<string, string>;
+    };
+    constructor(origin: string, fallback: Where);
+    set(path: string, value: Json): void;
+    get(path: string): Json | undefined;
+    add(status: ReportStatus, area: string, setting: string, note: string, at?: Where, atlas?: string): void;
+    /** A config string: a literal stays, an env var becomes `${NAME}`, anything else a `${fallback}` placeholder + manual entry. */
+    configString(v: ConfigValue | undefined, purpose: string, fallback: string, opts: {
+        secret?: boolean;
+        area: string;
+        setting: string;
+    }): string;
+    /**
+     * An enabled social provider (`oauth_providers`). Keeps the same OAuth app so
+     * imported identities relink by provider user id.
+     */
+    oauthProvider(input: {
+        sourceId: string;
+        atlasKey: string;
+        clientId: string;
+        clientSecret?: string;
+        scopes?: string[];
+        values?: Record<string, Json>;
+        area: string;
+        setting: string;
+        at?: Where;
+    }): void;
+    /** Session lifetime: `idle` true = activity extends it (rolling), false = fixed. */
+    session(seconds: number, rolling: boolean, area: string, setting: string, at: Where | undefined, sourceWords: string): void;
+    /** Minimum password length (Atlas requires at least 8). */
+    minPasswordLength(n: number, area: string, setting: string, at: Where | undefined, sourceWords: string): void;
+    result(): TranslationResult;
+}
+export declare function clamp(n: number, min: number, max: number): number;
+export declare function humanDuration(seconds: number): string;
+/**
+ * Social provider names the frameworks use → Atlas catalog provider keys
+ * (Auth.js provider ids, arctic class names lowercased, Passport strategy
+ * names, OmniAuth strategies, django-allauth provider ids).
+ */
+export declare const FRAMEWORK_PROVIDER_MAP: Record<string, string>;