@atlasauth/cli 0.27.0 → 0.29.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +14 -0
- package/README.md +3 -2
- package/dist/commands/config.js +9 -0
- package/dist/commands/config.js.map +1 -1
- package/dist/commands/doctor-scan.d.ts +1 -1
- package/dist/commands/doctor-scan.js +18 -17
- package/dist/commands/doctor-scan.js.map +1 -1
- package/dist/commands/import-jsonl.d.ts +16 -0
- package/dist/commands/import-jsonl.js +73 -3
- package/dist/commands/import-jsonl.js.map +1 -1
- package/dist/commands/import.js +7 -1
- package/dist/commands/import.js.map +1 -1
- package/dist/commands/init.js +17 -15
- package/dist/commands/init.js.map +1 -1
- package/dist/commands/project-commands.js +5 -2
- package/dist/commands/project-commands.js.map +1 -1
- package/dist/commands/users.js +15 -1
- package/dist/commands/users.js.map +1 -1
- package/dist/help.d.ts +1 -1
- package/dist/help.js +16 -10
- package/dist/help.js.map +1 -1
- package/package.json +4 -4
package/dist/commands/users.js
CHANGED
|
@@ -79,6 +79,20 @@ async function users(ctx, args) {
|
|
|
79
79
|
ctx.io.out(`Cleared the password of user ${id}. Their other sessions were signed out.`);
|
|
80
80
|
return 0;
|
|
81
81
|
}
|
|
82
|
+
case 'protect': {
|
|
83
|
+
// A proof of the address then reaches this user instead of making a second account.
|
|
84
|
+
const id = (0, shared_1.requireArg)(args.positionals, 2, 'user-id');
|
|
85
|
+
const auth = (0, shared_1.resolveAuth)(ctx, args.values);
|
|
86
|
+
const res = await (0, project_1.httpFor)(ctx, { secretKey: auth.secretKey, apiUrl: (0, shared_1.envApiUrl)(ctx.env) ?? auth.apiUrl }).post(`/v1/users/${encodeURIComponent(id)}/account_claim`, { password_policy: 'until_email_verified' });
|
|
87
|
+
if (json)
|
|
88
|
+
(0, output_1.printJson)(ctx.io, res);
|
|
89
|
+
else {
|
|
90
|
+
ctx.io.out(res.protection === 'password_hold'
|
|
91
|
+
? `Put the password of user ${id} on hold. Proving the address reaches this user, and the password then works.`
|
|
92
|
+
: `Marked user ${id} as yours. Proving the address now reaches this user, because nothing on it signs in yet.`);
|
|
93
|
+
}
|
|
94
|
+
return 0;
|
|
95
|
+
}
|
|
82
96
|
case 'delete': {
|
|
83
97
|
const id = (0, shared_1.requireArg)(args.positionals, 2, 'user-id');
|
|
84
98
|
const { client } = (0, shared_1.requireClient)(ctx, args.values);
|
|
@@ -91,7 +105,7 @@ async function users(ctx, args) {
|
|
|
91
105
|
}
|
|
92
106
|
default:
|
|
93
107
|
throw new errors_1.CliError(sub
|
|
94
|
-
? `Unknown subcommand 'users ${sub}'. Try: list, get, create, merge, clear-password, delete.`
|
|
108
|
+
? `Unknown subcommand 'users ${sub}'. Try: list, get, create, merge, clear-password, protect, delete.`
|
|
95
109
|
: "users needs a subcommand: list, get, create, delete.");
|
|
96
110
|
}
|
|
97
111
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/commands/users.ts"],"names":[],"mappings":";;AAkBA,
|
|
1
|
+
{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/commands/users.ts"],"names":[],"mappings":";;AAkBA,sBAiGC;AAlHD,kCAAsD;AAEtD,sCAAqC;AACrC,sCAAuE;AACvE,wCAAqC;AACrC,qCAAwF;AAExF,+EAA+E;AAC/E,MAAM,OAAO,GAAmB;IAC9B,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;IAClC,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;IACrF,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE;IAC1C,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gBAAO,EAAC,CAAC,CAAC,UAAU,CAAC,EAAE;CACzD,CAAC;AAEF,+EAA+E;AACxE,KAAK,UAAU,KAAK,CAAC,GAAe,EAAE,IAAgB;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAA,kBAAS,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEpC,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,sBAAa,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,mEAAmE;YACnE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;gBACnC,KAAK,EAAE,IAAA,YAAK,EAAC,IAAI,CAAC,MAAM,CAAC;gBACzB,cAAc,EAAE,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC;aACnD,CAAC,CAAC;YACH,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;YACpD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,EAAE,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YACtD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,sBAAa,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxC,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;;gBAC7B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;YAClC,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,KAAK,GAAG,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,iBAAQ,CAAC,0CAA0C,CAAC,CAAC;YAC3E,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,sBAAa,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;gBACrC,aAAa,EAAE,KAAK;gBACpB,UAAU,EAAE,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;gBAC1C,SAAS,EAAE,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;gBACxC,QAAQ,EAAE,IAAA,UAAG,EAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC;aACvC,CAAC,CAAC;YACH,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;;gBAC7B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;YAC5C,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,8GAA8G;YAC9G,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;YACjE,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;YAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;YAC5C,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,IAAI;gBAAE,MAAM,IAAI,iBAAQ,CAAC,+EAA+E,CAAC,CAAC;YAC1I,MAAM,IAAI,GAAG,IAAA,oBAAW,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,IAAA,iBAAO,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/N,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC1B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,4EAA4E;YAC5E,MAAM,EAAE,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YACtD,MAAM,IAAI,GAAG,IAAA,oBAAW,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,IAAA,iBAAO,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,kBAAkB,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;YAC9H,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC;;gBACxD,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gCAAgC,EAAE,yCAAyC,CAAC,CAAC;YAC7F,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,oFAAoF;YACpF,MAAM,EAAE,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YACtD,MAAM,IAAI,GAAG,IAAA,oBAAW,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,GAAG,GAAG,MAAM,IAAA,iBAAO,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC3G,aAAa,kBAAkB,CAAC,EAAE,CAAC,gBAAgB,EACnD,EAAE,eAAe,EAAE,sBAAsB,EAAE,CAC5C,CAAC;YACF,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;iBAC5B,CAAC;gBACJ,GAAG,CAAC,EAAE,CAAC,GAAG,CACR,GAAG,CAAC,UAAU,KAAK,eAAe;oBAChC,CAAC,CAAC,4BAA4B,EAAE,+EAA+E;oBAC/G,CAAC,CAAC,eAAe,EAAE,2FAA2F,CACjH,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,EAAE,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;YACtD,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,sBAAa,EAAC,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC7C,IAAI,IAAI;gBAAE,IAAA,kBAAS,EAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;;gBAC/B,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9C,OAAO,CAAC,CAAC;QACX,CAAC;QAED;YACE,MAAM,IAAI,iBAAQ,CAChB,GAAG;gBACD,CAAC,CAAC,6BAA6B,GAAG,oEAAoE;gBACtG,CAAC,CAAC,sDAAsD,CAC3D,CAAC;IACN,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,SAAS,UAAU,CAAC,CAAO;IACzB,OAAO;QACL,eAAe,CAAC,CAAC,EAAE,EAAE;QACrB,eAAe,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE;QACjC,eAAe,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACtE,eAAe,CAAC,CAAC,MAAM,EAAE;QACzB,eAAe,CAAC,CAAC,MAAM,EAAE;QACzB,eAAe,CAAC,CAAC,WAAW,EAAE;QAC9B,iBAAiB,IAAA,gBAAO,EAAC,CAAC,CAAC,eAAe,CAAC,EAAE;QAC7C,eAAe,IAAA,gBAAO,EAAC,CAAC,CAAC,UAAU,CAAC,EAAE;KACvC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}
|
package/dist/help.d.ts
CHANGED
|
@@ -3,6 +3,6 @@
|
|
|
3
3
|
* out of the handlers so the dispatch code stays about control flow and the
|
|
4
4
|
* copy can be read (and kept consistent) in one place.
|
|
5
5
|
*/
|
|
6
|
-
export declare const TOP_HELP = "atlas \u2014 manage an Atlas instance from the terminal\n\nUsage: atlas <command> [subcommand] [arguments] [options]\n\nCommands:\n login Authenticate and store a profile credential\n (--device: operator sign-in in the browser, no key stored)\n token --resource <id> A one-hour token for one instance/app from your operator sign-in\n keys whoami|list|create|rotate|revoke|revoke-leaked|data|op\n Scoped secret keys; new secrets go sealed into 0600 files\n logout Remove a stored profile credential\n whoami Show the active profile and instance\n users list|get|create|merge|delete\n orgs list|get|members\n api-keys list|create|revoke\n webhooks list|create|upsert|update|test|deliveries|redeliver|replay|rotate|reveal\n listen --forward-to <url> Forward live events to your local server, signed (no tunnel)\n dev [proxy] Local in-memory Atlas (emulator) / one-origin dev proxy\n move-origin --from --to Move an app to a new domain in one step (--dry-run first)\n workflows list|run|resume|status|templates|approvals|decide\n chat list|test|links|interactions Chat approval integrations\n cloud targets|setup|login <id> Cloud access portal (AWS, Google Cloud, Azure)\n device-sso list|show|revoke|delete Native OS single sign-on registrations\n connection-actions catalog|list|run|define|remove\n triggers list|get|create|set|delete Connection triggers\n agents list|lifecycle|renew|activity|reviews|review-decide ...\n telemetry show|set|test OTLP export of gateway and relay calls\n pdp list|remove Local decision points\n billing coupons|credits ... Discount codes and account credit\n audit retention|set-retention Audit log retention\n federation show|resolve OpenID federation\n vc deferred|approve|deny Deferred credential issuance\n csp --framework next|express|nginx\n Print the Content Security Policy sources Atlas needs\n fga test|validate|transform <file>\n fga export|import|watch|materialize <store>\n Run .fga.yaml test suites, validate and convert authorization models\n integrations list|get|set|remove|deliveries Identity integrations (chat, docs, consent, referrals, custom)\n partner-platforms list|get|set|registration|token|deliveries|remove\n This instance as a partner platform (signed consent deliveries in)\n id-accounts provision|list|rotate|remove\n Test and review accounts for a Sign in with Atlas app (passwords go to 0600 files)\n admin id-accounts list|provision|extend|rotate|revoke\n admin developer-accounts provision|revoke\n Atlas staff: accounts for other platforms' integration teams\n (operator sign-in with a recent second factor; passwords to 0600 files)\n sessions revoke\n config export|import|plan|promote\n Config-as-code: round-trip the instance's config; plan = drift diff;\n promote = copy one environment's config to another\n plan [<file|dir>] Drift diff of a config file or directory; --check exits 2 on drift\n apply [<file|dir>] Plan, confirm (--yes to skip), then apply; --check = plan only, exit 2 on drift\n actions list|deploy|test|logs|gallery|show|install|installs|update|publish\n pages list|push|preview|promote|pull|discard\n Code-defined hosted-page templates: draft, signed preview link, promote\n init Create or complete an app's setup (idempotent); secrets to 0600 files\n setup-guide The setup calls in order, with the read-back for each (--json for agents)\n preflight Check an instance's setup; non-zero exit on errors (for CI)\n doctor Integration health: webhooks, logout, referrals, email, consent (exit 1 on a failure)\n golive --origin <url> Take an instance live for an app origin, step by step; stops at the first failure\n env Print deploy variables: public values + secret file paths\n client rotate Rotate an OAuth client secret straight into its file\n referrals connect|backfill|resync|status\n Connect a referral platform, backfill, check the connection\n status Atlas status, incidents that concern the instance and its\n upstream status pages; non-zero exit on an outage\n import --from <vendor> <file>\n Move users from Auth0, Clerk, Supabase, Firebase, Cognito,\n Auth.js, WorkOS or Better Auth (resumable; --dry-run first)\n migrate code --from <vendor> [path]\n Rewrite an app's auth code onto Atlas (Clerk, Auth.js,\n Supabase, Auth0, Better Auth); a dry run with a diff unless --yes\n migrate better-auth [path] Move a Better Auth app to Atlas end to end: config, users,\n sessions and code, resumable (--dry-run, --resume, --yes)\n migrate better-auth config [path]\n Translate the app's betterAuth({...}) options into Atlas\n config files plus a report (offline)\n migrate <vendor> [step] [path]\n Move from any vendor (config, export, import, bridge, lazy):\n resumable; vendor credentials never leave this machine\n info [path] Print the environment for a support ticket (versions, SDKs,\n instance, API latency, preflight); secrets redacted\n mcp install Add the Atlas MCP server (docs search) to Cursor, Claude Code,\n Codex or VS Code\n\nGlobal options:\n --profile <name> Use a named profile (default: active, else \"default\")\n --json Emit raw JSON instead of a human table\n --limit <n> Page size for list commands that paginate\n --starting-after <cursor> Pagination cursor (from a prior page's hint)\n -h, --help Show this help, or help for a command\n -v, --version Print the version\n\nEnvironment overrides:\n ATLAS_SECRET_KEY Secret key to use instead of the stored one\n ATLAS_API_BASE API URL to use instead of the stored one\n ATLAS_API_URL Same (the older name); ATLAS_API_BASE wins when both are set\n ATLAS_PLATFORM_KEY Platform key (psk_) for atlas init\n REFERALLI_BASE_URL Referalli base URL for atlas referrals connect\n REFERALLI_API_KEY Referalli merchant key for atlas referrals connect (never stored)\n (the old REFERALLY_BASE_URL / REFERALLY_API_KEY still work, with a notice)\n\nSecrets: a command that receives a secret writes it to a 0600 file under\n~/.config/<product>/ and prints only the path. --print-secret prints it instead.\n\nRun 'atlas <command> --help' for command-specific help.";
|
|
6
|
+
export declare const TOP_HELP = "atlas \u2014 manage an Atlas instance from the terminal\n\nUsage: atlas <command> [subcommand] [arguments] [options]\n\nCommands:\n login Authenticate and store a profile credential\n (--device: operator sign-in in the browser, no key stored)\n token --resource <id> A one-hour token for one instance/app from your operator sign-in\n keys whoami|list|create|rotate|revoke|revoke-leaked|data|op\n Scoped secret keys; new secrets go sealed into 0600 files\n logout Remove a stored profile credential\n whoami Show the active profile and instance\n users list|get|create|merge|protect|delete\n orgs list|get|members\n api-keys list|create|revoke\n webhooks list|create|upsert|update|test|deliveries|redeliver|replay|rotate|reveal\n listen --forward-to <url> Forward live events to your local server, signed (no tunnel)\n dev [proxy] Local in-memory Atlas (emulator) / one-origin dev proxy\n move-origin --from --to Move an app to a new domain in one step (--dry-run first)\n workflows list|run|resume|status|templates|approvals|decide\n chat list|test|links|interactions Chat approval integrations\n cloud targets|setup|login <id> Cloud access portal (AWS, Google Cloud, Azure)\n device-sso list|show|revoke|delete Native OS single sign-on registrations\n connection-actions catalog|list|run|define|remove\n triggers list|get|create|set|delete Connection triggers\n agents list|lifecycle|renew|activity|reviews|review-decide ...\n telemetry show|set|test OTLP export of gateway and relay calls\n pdp list|remove Local decision points\n billing coupons|credits ... Discount codes and account credit\n audit retention|set-retention Audit log retention\n federation show|resolve OpenID federation\n vc deferred|approve|deny Deferred credential issuance\n csp --framework next|express|nginx\n Print the Content Security Policy sources Atlas needs\n fga test|validate|transform <file>\n fga export|import|watch|materialize <store>\n Run .fga.yaml test suites, validate and convert authorization models\n integrations list|get|set|remove|deliveries Identity integrations (chat, docs, consent, referrals, custom)\n partner-platforms list|get|set|registration|token|deliveries|remove\n This instance as a partner platform (signed consent deliveries in)\n id-accounts provision|list|rotate|remove\n Test and review accounts for a Sign in with Atlas app (passwords go to 0600 files)\n admin id-accounts list|provision|extend|rotate|revoke\n admin developer-accounts provision|revoke\n Atlas staff: accounts for other platforms' integration teams\n (operator sign-in with a recent second factor; passwords to 0600 files)\n sessions revoke\n config export|import|plan|promote\n Config-as-code: round-trip the instance's config; plan = drift diff;\n promote = copy one environment's config to another\n plan [<file|dir>] Drift diff of a config file or directory; --check exits 2 on drift\n apply [<file|dir>] Plan, confirm (--yes to skip), then apply; --check = plan only, exit 2 on drift\n actions list|deploy|test|logs|gallery|show|install|installs|update|publish\n pages list|push|preview|promote|pull|discard\n Code-defined hosted-page templates: draft, signed preview link, promote\n init Create or complete an app's setup (idempotent); secrets to 0600 files\n setup-guide The setup calls in order, with the read-back for each (--json for agents)\n preflight Check an instance's setup; non-zero exit on errors (for CI)\n doctor Integration health: webhooks, logout, referrals, email, consent (exit 1 on a failure)\n golive --origin <url> Take an instance live for an app origin, step by step; stops at the first failure\n env Print deploy variables: public values + secret file paths\n client rotate Rotate an OAuth client secret straight into its file\n referrals connect|backfill|resync|status\n Connect a referral platform, backfill, check the connection\n status Atlas status, incidents that concern the instance and its\n upstream status pages; non-zero exit on an outage\n import --from <vendor> <file>\n Move users from Auth0, Clerk, Supabase, Firebase, Cognito,\n Auth.js, WorkOS or Better Auth (resumable; --dry-run first)\n migrate code --from <vendor> [path]\n Rewrite an app's auth code onto Atlas (Clerk, Auth.js,\n Supabase, Auth0, Better Auth); a dry run with a diff unless --yes\n migrate better-auth [path] Move a Better Auth app to Atlas end to end: config, users,\n sessions and code, resumable (--dry-run, --resume, --yes)\n migrate better-auth config [path]\n Translate the app's betterAuth({...}) options into Atlas\n config files plus a report (offline)\n migrate <vendor> [step] [path]\n Move from any vendor (config, export, import, bridge, lazy):\n resumable; vendor credentials never leave this machine\n info [path] Print the environment for a support ticket (versions, SDKs,\n instance, API latency, preflight); secrets redacted\n mcp install Add the Atlas MCP server (docs search) to Cursor, Claude Code,\n Codex or VS Code\n\nGlobal options:\n --profile <name> Use a named profile (default: active, else \"default\")\n --json Emit raw JSON instead of a human table\n --limit <n> Page size for list commands that paginate\n --starting-after <cursor> Pagination cursor (from a prior page's hint)\n -h, --help Show this help, or help for a command\n -v, --version Print the version\n\nEnvironment overrides:\n ATLAS_SECRET_KEY Secret key to use instead of the stored one\n ATLAS_API_BASE API URL to use instead of the stored one\n ATLAS_API_URL Same (the older name); ATLAS_API_BASE wins when both are set\n ATLAS_PLATFORM_KEY Platform key (psk_) for atlas init\n REFERALLI_BASE_URL Referalli base URL for atlas referrals connect\n REFERALLI_API_KEY Referalli merchant key for atlas referrals connect (never stored)\n (the old REFERALLY_BASE_URL / REFERALLY_API_KEY still work, with a notice)\n\nSecrets: a command that receives a secret writes it to a 0600 file under\n~/.config/<product>/ and prints only the path. --print-secret prints it instead.\n\nRun 'atlas <command> --help' for command-specific help.";
|
|
7
7
|
/** Per-command help, keyed by the resource word. */
|
|
8
8
|
export declare const COMMAND_HELP: Record<string, string>;
|
package/dist/help.js
CHANGED
|
@@ -19,7 +19,7 @@ Commands:
|
|
|
19
19
|
Scoped secret keys; new secrets go sealed into 0600 files
|
|
20
20
|
logout Remove a stored profile credential
|
|
21
21
|
whoami Show the active profile and instance
|
|
22
|
-
users list|get|create|merge|delete
|
|
22
|
+
users list|get|create|merge|protect|delete
|
|
23
23
|
orgs list|get|members
|
|
24
24
|
api-keys list|create|revoke
|
|
25
25
|
webhooks list|create|upsert|update|test|deliveries|redeliver|replay|rotate|reveal
|
|
@@ -452,7 +452,13 @@ Usage:
|
|
|
452
452
|
atlas users get <user-id> [--json]
|
|
453
453
|
atlas users create --email <address> [--first-name <n>] [--last-name <n>] [--password <p>] [--json]
|
|
454
454
|
atlas users clear-password <user-id> [--json]
|
|
455
|
-
atlas users
|
|
455
|
+
atlas users protect <user-id> [--json]
|
|
456
|
+
atlas users delete <user-id> [--json]
|
|
457
|
+
|
|
458
|
+
protect makes a proof of an unverified user's address reach that user, instead of
|
|
459
|
+
making a second account. A password goes on hold; a row with no credential is marked
|
|
460
|
+
as yours. It refuses a user with a verified address, or one with anything else that
|
|
461
|
+
signs in, and names what it found.`,
|
|
456
462
|
'setup-guide': `atlas setup-guide — the setup calls in order, with the read-back for each
|
|
457
463
|
|
|
458
464
|
Usage: atlas setup-guide [--json]
|
|
@@ -675,18 +681,18 @@ Email always goes through YOUR provider account (Atlas lends none):
|
|
|
675
681
|
The key is read from --email-key-file (a file holding the key or KEY=value; '-'
|
|
676
682
|
reads stdin). It is never taken from argv and never printed.
|
|
677
683
|
|
|
678
|
-
Every secret goes to ~/.config/<product>/<env
|
|
684
|
+
Every secret goes to ~/.config/<product>/<env>/ (dir 0700, files 0600) and
|
|
679
685
|
is never printed. An existing file is never overwritten without --force.
|
|
680
686
|
--rotate-secret mints a new secret key when the app exists but its file is gone.
|
|
681
687
|
Public values and file paths are kept in ~/.config/<product>/atlas.json.
|
|
682
688
|
Turns on strict request bodies unless the instance has them or opted out.
|
|
683
689
|
|
|
684
|
-
|
|
685
|
-
environment in its own folder (~/.config/<product>/production/atlas.env and
|
|
690
|
+
Each environment gets its own folder (~/.config/<product>/production/atlas.env and
|
|
686
691
|
development/atlas.env), so a script reading a folder's *.env files never mixes
|
|
687
|
-
keys
|
|
688
|
-
|
|
689
|
-
|
|
692
|
+
keys, and init prints a line saying where the files went. --with-dev also creates
|
|
693
|
+
the development sibling. An existing <env>.env stays where it is and keeps its
|
|
694
|
+
layout; atlas doctor --scan-dir reports it beside another environment's folder until
|
|
695
|
+
you move it to <env>/atlas.env and run atlas init again.
|
|
690
696
|
--no-env-files writes no secret file: each secret is handed over once in the
|
|
691
697
|
--json output on stdout. Without --json it is refused and names the paths it
|
|
692
698
|
would have written.
|
|
@@ -725,8 +731,8 @@ SDKs read (__session, __atlas_uat, __atlas_rt, __client).
|
|
|
725
731
|
|
|
726
732
|
--scan-dir <path> and --scan-image <ref> need no key. They flag secret keys and
|
|
727
733
|
webhook or hook secrets in Dockerfile ARG / ENV lines, compose build.args, and an
|
|
728
|
-
image's docker history and environment, plus folders whose *.env files
|
|
729
|
-
a development and a production key. Prints the file and line, never the value.
|
|
734
|
+
image's docker history and environment, plus folders whose *.env files, directly
|
|
735
|
+
or in a subfolder, hold both a development and a production key. Prints the file and line, never the value.
|
|
730
736
|
Exits 1 on a finding. Only the publishable key belongs in a build arg.`,
|
|
731
737
|
golive: `atlas golive — take an instance live for one app origin
|
|
732
738
|
|
package/dist/help.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"help.js","sourceRoot":"","sources":["../src/help.ts"],"names":[],"mappings":";;;AAAA,oDAA2M;AAC3M;;;;GAIG;AAEU,QAAA,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wDAyGgC,CAAC;AAEzD,oDAAoD;AACvC,QAAA,YAAY,GAA2B;IAClD,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8CA8GmC;IAC5C,IAAI,EAAE;;;;;;;;;;gEAUwD;IAC9D,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2EAsDiE;IACzE,GAAG,EAAE;;;;;;;;;;;;;;;;;+CAiBwC;IAC7C,MAAM,EAAE;;;;;;;;;;;;sCAY4B;IACpC,SAAS,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yEAyE4D;IAEvE,KAAK,EAAE;;;;;;;;;;;;;;;;;;;;wEAoB+D;IAEtE,KAAK,EAAE;;;;;4CAKmC;IAE1C,IAAI,EAAE;;;;;;;;;;;;;;qBAca;IAEnB,MAAM,EAAE;;uCAE6B;IAErC,MAAM,EAAE;;gDAEsC;IAE9C,KAAK,EAAE
|
|
1
|
+
{"version":3,"file":"help.js","sourceRoot":"","sources":["../src/help.ts"],"names":[],"mappings":";;;AAAA,oDAA2M;AAC3M;;;;GAIG;AAEU,QAAA,QAAQ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wDAyGgC,CAAC;AAEzD,oDAAoD;AACvC,QAAA,YAAY,GAA2B;IAClD,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8CA8GmC;IAC5C,IAAI,EAAE;;;;;;;;;;gEAUwD;IAC9D,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2EAsDiE;IACzE,GAAG,EAAE;;;;;;;;;;;;;;;;;+CAiBwC;IAC7C,MAAM,EAAE;;;;;;;;;;;;sCAY4B;IACpC,SAAS,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;yEAyE4D;IAEvE,KAAK,EAAE;;;;;;;;;;;;;;;;;;;;wEAoB+D;IAEtE,KAAK,EAAE;;;;;4CAKmC;IAE1C,IAAI,EAAE;;;;;;;;;;;;;;qBAca;IAEnB,MAAM,EAAE;;uCAE6B;IAErC,MAAM,EAAE;;gDAEsC;IAE9C,KAAK,EAAE;;;;;;;;;;;;;mCAa0B;IAEjC,aAAa,EAAE;;;;;mDAKkC;IAEjD,IAAI,EAAE;;;;;uCAK+B;IAErC,UAAU,EAAE;;;;;;8CAMgC;IAE5C,QAAQ,EAAE;;;;;;;;;;;;;;;;;;;;4DAoBgD;IAC1D,MAAM,EAAE;;;;;;;;;;;;gFAYsE;IAC9E,GAAG,EAAE;;;;;;;;;2EASoE;IACzE,aAAa,EAAE;;;;;;;;;gFAS+D;IAC9E,GAAG,EAAE;;;;;;;;;;;;;;;6DAesD;IAC3D,GAAG,EAAE;;;;;;;;;;;;;;;+DAewD;IAE7D,mBAAmB,EAAE;;;;;;;;;;;;;;;;oCAgBa;IAElC,KAAK,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;8CA6BqC;IAE5C,aAAa,EAAE;;;;;;;;;;;;;;;;;;;;;;;;qBAwBI;IAEnB,YAAY,EAAE;;;;;;;;;;;;;;qCAcqB;IAEnC,IAAI,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uEAiD+D;IAErE,SAAS,EAAE;;;;;;;;;;;oCAWuB;IAElC,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;uEAoB6D;IAErE,MAAM,EAAE;;;;;;;;;;;;;;;;;;;yEAmB+D;IAEvE,GAAG,EAAE;;;;;;;;;;mDAU4C;IAEjD,MAAM,EAAE;;;;;;;;wDAQ8C;IAEtD,QAAQ,EAAE;;;8CAGkC;IAE5C,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;0EAqCgE;IACxE,KAAK,EAAE;;;;;;;;;;;;;;;kDAeyC;IAChD,OAAO,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;qEA0B0D;CACpE,CAAC;AAEF,sFAAsF;AACtF,SAAS,OAAO,CAAC,IAAY,EAAE,KAAa,EAAE,GAAQ;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE;QACjD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpE,OAAO,WAAW,IAAI,IAAI,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC7I,CAAC,CAAC,CAAC;IACH,OAAO,SAAS,IAAI,MAAM,KAAK;;;EAG/B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;;;;YAIN,CAAC;AACb,CAAC;AACD,MAAM,CAAC,MAAM,CAAC,oBAAY,EAAE;IAC1B,KAAK,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4CAqCmC;IAC1C,IAAI,EAAE;;;;;;8EAMsE;IAC5E,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,wCAAwC,EAAE,qBAAS,CAAC;IACpF,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,0DAA0D,EAAE,gBAAI,CAAC;IACvF,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,2GAA2G,EAAE,oBAAQ,CAAC;IACtJ,YAAY,EAAE,OAAO,CAAC,cAAc,EAAE,uEAAuE,EAAE,wBAAY,CAAC;IAC5H,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,sBAAsB,EAAE,mBAAO,CAAC;IAC5D,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,qEAAqE,EAAE,iBAAK,CAAC;IACrG,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,oCAAoC,EAAE,sBAAU,CAAC;IACrF,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,EAAE,yCAAyC,EAAE,8BAAkB,CAAC;IAClH,QAAQ,EAAE,OAAO,CAAC,UAAU,EAAE,qBAAqB,EAAE,oBAAQ,CAAC;IAC9D,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,8CAA8C,EAAE,kBAAM,CAAC;IACjF,SAAS,EAAE,OAAO,CAAC,WAAW,EAAE,wCAAwC,EAAE,qBAAS,CAAC;IACpF,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,uBAAuB,EAAE,eAAG,CAAC;IACjD,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,mCAAmC,EAAE,mBAAO,CAAC;IACzE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,mEAAmE,EAAE,iBAAK,CAAC;IACnG,UAAU,EAAE,OAAO,CAAC,YAAY,EAAE,mBAAmB,EAAE,sBAAU,CAAC;IAClE,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,yCAAyC,EAAE,cAAE,CAAC;CACjE,CAAC,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@atlasauth/cli",
|
|
3
|
-
"version": "0.
|
|
3
|
+
"version": "0.29.0",
|
|
4
4
|
"description": "atlas — manage an Atlas instance from the terminal via the Backend API.",
|
|
5
5
|
"bin": {
|
|
6
6
|
"atlas": "dist/cli.js"
|
|
@@ -16,11 +16,11 @@
|
|
|
16
16
|
},
|
|
17
17
|
"dependencies": {
|
|
18
18
|
"yaml": "^2.6.0",
|
|
19
|
-
"@atlasauth/emulator": "0.1.0",
|
|
20
19
|
"@atlasauth/actions": "0.5.0",
|
|
21
|
-
"@atlasauth/
|
|
22
|
-
"@atlasauth/backend": "0.
|
|
20
|
+
"@atlasauth/emulator": "0.1.0",
|
|
21
|
+
"@atlasauth/backend": "0.39.0",
|
|
23
22
|
"@atlasauth/referral-conformance": "0.2.1",
|
|
23
|
+
"@atlasauth/migrate": "0.2.0",
|
|
24
24
|
"@atlasauth/upgrade": "0.7.0"
|
|
25
25
|
},
|
|
26
26
|
"devDependencies": {
|