@rc-tool/unified-auth-hosted-service 0.2.9 → 0.3.0

package/dist/cli/database.js

@@ -0,0 +1,346 @@
+import { Client } from "pg";
+import { getAuthRealmSchemaName } from "@rc-tool/unified-auth-sdk/schema";
+import { resolveUnifiedAuthConfigValue } from "../config.js";
+const authTableSpecs = [
+    {
+        columns: [
+            column("id", "text", "text NOT NULL"),
+            column("name", "text", "text NOT NULL"),
+            column("email", "text", "text NOT NULL"),
+            column("emailVerified", "boolean", "boolean NOT NULL DEFAULT false"),
+            column("image", "text", "text", true),
+            column("createdAt", "timestamp with time zone", "timestamp with time zone NOT NULL DEFAULT now()"),
+            column("updatedAt", "timestamp with time zone", "timestamp with time zone NOT NULL DEFAULT now()"),
+            column("role", "text", "text", true),
+            column("banned", "boolean", "boolean DEFAULT false", true),
+            column("banReason", "text", "text", true),
+            column("banExpires", "timestamp with time zone", "timestamp with time zone", true),
+            column("feishuTenantKey", "text", "text", true),
+            column("feishuTenantName", "text", "text", true),
+        ],
+        constraints: [
+            primaryKey("user_pkey", "user", ["id"]),
+        ],
+        indexes: [
+            index("user_email_unique", (schemaName) => `CREATE UNIQUE INDEX IF NOT EXISTS "user_email_unique" ON ${tableName(schemaName, "user")} ("email")`),
+        ],
+        name: "user",
+    },
+    {
+        columns: [
+            column("id", "text", "text NOT NULL"),
+            column("expiresAt", "timestamp with time zone", "timestamp with time zone NOT NULL"),
+            column("token", "text", "text NOT NULL"),
+            column("createdAt", "timestamp with time zone", "timestamp with time zone NOT NULL DEFAULT now()"),
+            column("updatedAt", "timestamp with time zone", "timestamp with time zone NOT NULL DEFAULT now()"),
+            column("ipAddress", "text", "text", true),
+            column("userAgent", "text", "text", true),
+            column("userId", "text", "text NOT NULL"),
+            column("impersonatedBy", "text", "text", true),
+        ],
+        constraints: [
+            primaryKey("session_pkey", "session", ["id"]),
+            foreignKey("session_userId_user_id_fk", "session", "userId", "user", "id"),
+        ],
+        indexes: [
+            index("session_token_unique", (schemaName) => `CREATE UNIQUE INDEX IF NOT EXISTS "session_token_unique" ON ${tableName(schemaName, "session")} ("token")`),
+            index("session_user_id_idx", (schemaName) => `CREATE INDEX IF NOT EXISTS "session_user_id_idx" ON ${tableName(schemaName, "session")} ("userId")`),
+        ],
+        name: "session",
+    },
+    {
+        columns: [
+            column("id", "text", "text NOT NULL"),
+            column("accountId", "text", "text NOT NULL"),
+            column("providerId", "text", "text NOT NULL"),
+            column("userId", "text", "text NOT NULL"),
+            column("accessToken", "text", "text", true),
+            column("refreshToken", "text", "text", true),
+            column("idToken", "text", "text", true),
+            column("accessTokenExpiresAt", "timestamp with time zone", "timestamp with time zone", true),
+            column("refreshTokenExpiresAt", "timestamp with time zone", "timestamp with time zone", true),
+            column("scope", "text", "text", true),
+            column("password", "text", "text", true),
+            column("createdAt", "timestamp with time zone", "timestamp with time zone NOT NULL DEFAULT now()"),
+            column("updatedAt", "timestamp with time zone", "timestamp with time zone NOT NULL DEFAULT now()"),
+        ],
+        constraints: [
+            primaryKey("account_pkey", "account", ["id"]),
+            foreignKey("account_userId_user_id_fk", "account", "userId", "user", "id"),
+        ],
+        indexes: [
+            index("account_provider_account_unique", (schemaName) => `CREATE UNIQUE INDEX IF NOT EXISTS "account_provider_account_unique" ON ${tableName(schemaName, "account")} ("providerId", "accountId")`),
+            index("account_user_id_idx", (schemaName) => `CREATE INDEX IF NOT EXISTS "account_user_id_idx" ON ${tableName(schemaName, "account")} ("userId")`),
+        ],
+        name: "account",
+    },
+    {
+        columns: [
+            column("id", "text", "text NOT NULL"),
+            column("identifier", "text", "text NOT NULL"),
+            column("value", "text", "text NOT NULL"),
+            column("expiresAt", "timestamp with time zone", "timestamp with time zone NOT NULL"),
+            column("createdAt", "timestamp with time zone", "timestamp with time zone NOT NULL DEFAULT now()"),
+            column("updatedAt", "timestamp with time zone", "timestamp with time zone NOT NULL DEFAULT now()"),
+        ],
+        constraints: [
+            primaryKey("verification_pkey", "verification", ["id"]),
+        ],
+        indexes: [
+            index("verification_identifier_idx", (schemaName) => `CREATE INDEX IF NOT EXISTS "verification_identifier_idx" ON ${tableName(schemaName, "verification")} ("identifier")`),
+        ],
+        name: "verification",
+    },
+];
+export async function migrateUnifiedAuthDatabase(config) {
+    const schemaName = resolveAuthSchemaName(config);
+    const client = createPgClient(config);
+    await client.connect();
+    try {
+        const inspection = await inspectAuthDatabase(client, schemaName);
+        const plan = buildAuthDatabasePlan(schemaName, inspection);
+        if (plan.warnings.length) {
+            throw new Error(`Auth database has incompatible existing structure:\n${plan.warnings.join("\n")}`);
+        }
+        for (const action of plan.actions) {
+            await client.query(action.sql);
+        }
+        return {
+            ...plan,
+            changed: plan.actions.length > 0,
+        };
+    }
+    finally {
+        await client.end();
+    }
+}
+export async function doctorUnifiedAuthDatabase(config) {
+    const checks = [];
+    const schemaName = resolveAuthSchemaName(config);
+    let client;
+    try {
+        client = createPgClient(config);
+    }
+    catch (error) {
+        return [fail(error instanceof Error ? error.message : "database config is invalid")];
+    }
+    try {
+        await client.connect();
+        checks.push(pass("database connection is usable"));
+        const inspection = await inspectAuthDatabase(client, schemaName);
+        const plan = buildAuthDatabasePlan(schemaName, inspection);
+        if (inspection.schemaExists) {
+            checks.push(pass(`auth schema ${schemaName} exists`));
+        }
+        else {
+            checks.push(fail(`auth schema ${schemaName} is missing; run unified-auth db migrate`));
+        }
+        for (const spec of authTableSpecs) {
+            const table = inspection.tables.get(spec.name);
+            if (table?.exists) {
+                checks.push(pass(`table ${schemaName}.${spec.name} exists`));
+            }
+            else {
+                checks.push(fail(`table ${schemaName}.${spec.name} is missing; run unified-auth db migrate`));
+            }
+        }
+        for (const warning of plan.warnings) {
+            checks.push(fail(warning));
+        }
+        if (plan.actions.length === 0 && plan.warnings.length === 0) {
+            checks.push(pass("auth database schema is up to date"));
+        }
+        else if (plan.actions.length > 0) {
+            checks.push(fail(`auth database schema has ${plan.actions.length} pending migration action(s)`));
+            for (const action of plan.actions) {
+                checks.push(warn(`pending migration: ${action.label}`));
+            }
+        }
+    }
+    catch (error) {
+        checks.push(fail(error instanceof Error ? error.message : "database check failed"));
+    }
+    finally {
+        await client.end().catch(() => undefined);
+    }
+    return checks;
+}
+export function buildAuthDatabasePlan(schemaName, inspection) {
+    const actions = [];
+    const warnings = [];
+    if (!inspection.schemaExists) {
+        actions.push({
+            label: `create schema ${schemaName}`,
+            sql: `CREATE SCHEMA IF NOT EXISTS ${quoteIdent(schemaName)}`,
+        });
+    }
+    for (const spec of authTableSpecs) {
+        const inspected = inspection.tables.get(spec.name);
+        if (!inspected?.exists) {
+            actions.push({
+                label: `create table ${schemaName}.${spec.name}`,
+                sql: createTableSQL(schemaName, spec),
+            });
+            for (const constraint of spec.constraints?.filter((item) => item.type !== "p") ?? []) {
+                actions.push({
+                    label: `add constraint ${schemaName}.${constraint.name}`,
+                    sql: constraint.sql(schemaName),
+                });
+            }
+            addIndexes(actions, schemaName, spec, new Set());
+            continue;
+        }
+        for (const expected of spec.columns) {
+            const actual = inspected.columns.get(expected.name);
+            if (!actual) {
+                actions.push({
+                    label: `add column ${schemaName}.${spec.name}.${expected.name}`,
+                    sql: `ALTER TABLE ${tableName(schemaName, spec.name)} ADD COLUMN IF NOT EXISTS ${quoteIdent(expected.name)} ${expected.definition}`,
+                });
+                continue;
+            }
+            if (!isTypeCompatible(actual.dataType, expected.dataType)) {
+                warnings.push(`column ${schemaName}.${spec.name}.${expected.name} has type ${actual.dataType}, expected ${expected.dataType}`);
+            }
+            if (actual.isNullable !== expected.nullable) {
+                warnings.push(`column ${schemaName}.${spec.name}.${expected.name} nullability is ${actual.isNullable ? "nullable" : "not nullable"}, expected ${expected.nullable ? "nullable" : "not nullable"}`);
+            }
+        }
+        for (const constraint of spec.constraints ?? []) {
+            if (!inspected.constraints.has(constraint.name)) {
+                actions.push({
+                    label: `add constraint ${schemaName}.${constraint.name}`,
+                    sql: constraint.sql(schemaName),
+                });
+            }
+        }
+        addIndexes(actions, schemaName, spec, inspected.indexes);
+    }
+    return {
+        actions,
+        schemaName,
+        warnings,
+    };
+}
+async function inspectAuthDatabase(client, schemaName) {
+    const schemaResult = await client.query("select exists(select 1 from information_schema.schemata where schema_name = $1) as exists", [schemaName]);
+    const tableRows = await client.query("select table_name from information_schema.tables where table_schema = $1 and table_type = 'BASE TABLE'", [schemaName]);
+    const tables = new Map();
+    for (const spec of authTableSpecs) {
+        tables.set(spec.name, {
+            columns: new Map(),
+            constraints: new Set(),
+            exists: tableRows.rows.some((row) => row.table_name === spec.name),
+            indexes: new Set(),
+        });
+    }
+    const columnRows = await client.query(`select table_name, column_name, data_type, is_nullable
+     from information_schema.columns
+     where table_schema = $1`, [schemaName]);
+    for (const row of columnRows.rows) {
+        const table = tables.get(row.table_name);
+        if (table) {
+            table.columns.set(row.column_name, {
+                dataType: row.data_type,
+                isNullable: row.is_nullable === "YES",
+            });
+        }
+    }
+    const indexRows = await client.query("select tablename, indexname from pg_indexes where schemaname = $1", [schemaName]);
+    for (const row of indexRows.rows) {
+        tables.get(row.tablename)?.indexes.add(row.indexname);
+    }
+    const constraintRows = await client.query(`select c.conname, t.relname
+     from pg_constraint c
+     join pg_class t on t.oid = c.conrelid
+     join pg_namespace n on n.oid = t.relnamespace
+     where n.nspname = $1`, [schemaName]);
+    for (const row of constraintRows.rows) {
+        tables.get(row.relname)?.constraints.add(row.conname);
+    }
+    return {
+        schemaExists: Boolean(schemaResult.rows[0]?.exists),
+        tables,
+    };
+}
+function createPgClient(config) {
+    const connectionString = resolveUnifiedAuthConfigValue(config.database?.url);
+    if (!connectionString) {
+        throw new Error("database.url is missing in unified-auth.config.ts");
+    }
+    return new Client({
+        connectionString,
+        ssl: config.database?.ssl,
+    });
+}
+function resolveAuthSchemaName(config) {
+    return getAuthRealmSchemaName(config.realm ?? config.app?.id);
+}
+function addIndexes(actions, schemaName, spec, existing) {
+    for (const item of spec.indexes ?? []) {
+        if (!existing.has(item.name)) {
+            actions.push({
+                label: `create index ${schemaName}.${item.name}`,
+                sql: item.sql(schemaName),
+            });
+        }
+    }
+}
+function createTableSQL(schemaName, spec) {
+    const lines = spec.columns.map((item) => `${quoteIdent(item.name)} ${item.definition}`);
+    const primary = spec.constraints?.find((constraint) => constraint.type === "p");
+    if (primary) {
+        lines.push(primary.sql(schemaName).replace(/^ALTER TABLE .+ ADD CONSTRAINT /, "CONSTRAINT "));
+    }
+    return `CREATE TABLE IF NOT EXISTS ${tableName(schemaName, spec.name)} (\n  ${lines.join(",\n  ")}\n)`;
+}
+function column(name, dataType, definition, nullable = false) {
+    return {
+        dataType,
+        definition,
+        name,
+        nullable,
+    };
+}
+function primaryKey(name, table, columns) {
+    return {
+        name,
+        sql: (schemaName) => `ALTER TABLE ${tableName(schemaName, table)} ADD CONSTRAINT ${quoteIdent(name)} PRIMARY KEY (${columns.map(quoteIdent).join(", ")})`,
+        type: "p",
+    };
+}
+function foreignKey(name, table, columnName, targetTable, targetColumn) {
+    return {
+        name,
+        sql: (schemaName) => `ALTER TABLE ${tableName(schemaName, table)} ADD CONSTRAINT ${quoteIdent(name)} FOREIGN KEY (${quoteIdent(columnName)}) REFERENCES ${tableName(schemaName, targetTable)} (${quoteIdent(targetColumn)}) ON DELETE CASCADE`,
+        type: "f",
+    };
+}
+function index(name, sql) {
+    return { name, sql };
+}
+function tableName(schemaName, name) {
+    return `${quoteIdent(schemaName)}.${quoteIdent(name)}`;
+}
+function quoteIdent(value) {
+    return `"${value.replace(/"/g, "\"\"")}"`;
+}
+function isTypeCompatible(actual, expected) {
+    if (actual === expected) {
+        return true;
+    }
+    if (expected === "text") {
+        return actual === "character varying";
+    }
+    return false;
+}
+function pass(message) {
+    return { message, status: "pass" };
+}
+function warn(message) {
+    return { message, status: "warn" };
+}
+function fail(message) {
+    return { message, status: "fail" };
+}
+//# sourceMappingURL=database.js.map

package/dist/cli/database.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"database.js","sourceRoot":"","sources":["../../src/cli/database.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AA6D7D,MAAM,cAAc,GAAgB;IAClC;QACE,OAAO,EAAE;YACP,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC;YACrC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC;YACvC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC;YACxC,MAAM,CAAC,eAAe,EAAE,SAAS,EAAE,gCAAgC,CAAC;YACpE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;YACrC,MAAM,CAAC,WAAW,EAAE,0BAA0B,EAAE,iDAAiD,CAAC;YAClG,MAAM,CAAC,WAAW,EAAE,0BAA0B,EAAE,iDAAiD,CAAC;YAClG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;YACpC,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,uBAAuB,EAAE,IAAI,CAAC;YAC1D,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;YACzC,MAAM,CAAC,YAAY,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,IAAI,CAAC;YAClF,MAAM,CAAC,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;YAC/C,MAAM,CAAC,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;SACjD;QACD,WAAW,EAAE;YACX,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;SACxC;QACD,OAAO,EAAE;YACP,KAAK,CAAC,mBAAmB,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,4DAA4D,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC;SAClJ;QACD,IAAI,EAAE,MAAM;KACb;IACD;QACE,OAAO,EAAE;YACP,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC;YACrC,MAAM,CAAC,WAAW,EAAE,0BAA0B,EAAE,mCAAmC,CAAC;YACpF,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC;YACxC,MAAM,CAAC,WAAW,EAAE,0BAA0B,EAAE,iDAAiD,CAAC;YAClG,MAAM,CAAC,WAAW,EAAE,0BAA0B,EAAE,iDAAiD,CAAC;YAClG,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;YACzC,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;YACzC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,CAAC;YACzC,MAAM,CAAC,gBAAgB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;SAC/C;QACD,WAAW,EAAE;YACX,UAAU,CAAC,cAAc,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC;YAC7C,UAAU,CAAC,2BAA2B,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC;SAC3E;QACD,OAAO,EAAE;YACP,KAAK,CAAC,sBAAsB,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,+DAA+D,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,YAAY,CAAC;YAC1J,KAAK,CAAC,qBAAqB,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,uDAAuD,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,aAAa,CAAC;SACnJ;QACD,IAAI,EAAE,SAAS;KAChB;IACD;QACE,OAAO,EAAE;YACP,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC;YACrC,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,eAAe,CAAC;YAC5C,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,CAAC;YAC7C,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,CAAC;YACzC,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;YAC3C,MAAM,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;YAC5C,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;YACvC,MAAM,CAAC,sBAAsB,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,IAAI,CAAC;YAC5F,MAAM,CAAC,uBAAuB,EAAE,0BAA0B,EAAE,0BAA0B,EAAE,IAAI,CAAC;YAC7F,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;YACrC,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC;YACxC,MAAM,CAAC,WAAW,EAAE,0BAA0B,EAAE,iDAAiD,CAAC;YAClG,MAAM,CAAC,WAAW,EAAE,0BAA0B,EAAE,iDAAiD,CAAC;SACnG;QACD,WAAW,EAAE;YACX,UAAU,CAAC,cAAc,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC;YAC7C,UAAU,CAAC,2BAA2B,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC;SAC3E;QACD,OAAO,EAAE;YACP,KAAK,CAAC,iCAAiC,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,0EAA0E,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,8BAA8B,CAAC;YAClM,KAAK,CAAC,qBAAqB,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,uDAAuD,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,aAAa,CAAC;SACnJ;QACD,IAAI,EAAE,SAAS;KAChB;IACD;QACE,OAAO,EAAE;YACP,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC;YACrC,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,CAAC;YAC7C,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC;YACxC,MAAM,CAAC,WAAW,EAAE,0BAA0B,EAAE,mCAAmC,CAAC;YACpF,MAAM,CAAC,WAAW,EAAE,0BAA0B,EAAE,iDAAiD,CAAC;YAClG,MAAM,CAAC,WAAW,EAAE,0BAA0B,EAAE,iDAAiD,CAAC;SACnG;QACD,WAAW,EAAE;YACX,UAAU,CAAC,mBAAmB,EAAE,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC;SACxD;QACD,OAAO,EAAE;YACP,KAAK,CAAC,6BAA6B,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,+DAA+D,SAAS,CAAC,UAAU,EAAE,cAAc,CAAC,iBAAiB,CAAC;SAC5K;QACD,IAAI,EAAE,cAAc;KACrB;CACF,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,MAAyB;IACxE,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAEtC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,qBAAqB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAE3D,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,uDAAuD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrG,CAAC;QAED,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,MAAM,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAED,OAAO;YACL,GAAG,IAAI;YACP,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;SACjC,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,MAAyB;IACvE,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,MAAc,CAAC;IAEnB,IAAI,CAAC;QACH,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,CAAC;QAEnD,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,qBAAqB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAE3D,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,UAAU,SAAS,CAAC,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,UAAU,0CAA0C,CAAC,CAAC,CAAC;QACzF,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAE/C,IAAI,KAAK,EAAE,MAAM,EAAE,CAAC;gBAClB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,UAAU,IAAI,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC;YAC/D,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,UAAU,IAAI,IAAI,CAAC,IAAI,0CAA0C,CAAC,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;QAED,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAC;QAC1D,CAAC;aAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,IAAI,CAAC,OAAO,CAAC,MAAM,8BAA8B,CAAC,CAAC,CAAC;YACjG,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC;IACtF,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,UAAkB,EAAE,UAAkC;IAC1F,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,iBAAiB,UAAU,EAAE;YACpC,GAAG,EAAE,+BAA+B,UAAU,CAAC,UAAU,CAAC,EAAE;SAC7D,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEnD,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK,EAAE,gBAAgB,UAAU,IAAI,IAAI,CAAC,IAAI,EAAE;gBAChD,GAAG,EAAE,cAAc,CAAC,UAAU,EAAE,IAAI,CAAC;aACtC,CAAC,CAAC;YACH,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;gBACrF,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAE,kBAAkB,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE;oBACxD,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC;iBAChC,CAAC,CAAC;YACL,CAAC;YACD,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;YACjD,SAAS;QACX,CAAC;QAED,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAEpD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAE,cAAc,UAAU,IAAI,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE;oBAC/D,GAAG,EAAE,eAAe,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,6BAA6B,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,UAAU,EAAE;iBACpI,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1D,QAAQ,CAAC,IAAI,CAAC,UAAU,UAAU,IAAI,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,aAAa,MAAM,CAAC,QAAQ,cAAc,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjI,CAAC;YACD,IAAI,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBAC5C,QAAQ,CAAC,IAAI,CAAC,UAAU,UAAU,IAAI,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,mBAAmB,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,cAAc,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC;YACrM,CAAC;QACH,CAAC;QAED,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,IAAI,EAAE,EAAE,CAAC;YAChD,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,OAAO,CAAC,IAAI,CAAC;oBACX,KAAK,EAAE,kBAAkB,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE;oBACxD,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC;iBAChC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,OAAO;QACP,UAAU;QACV,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,MAAc,EAAE,UAAkB;IACnE,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,KAAK,CACrC,2FAA2F,EAC3F,CAAC,UAAU,CAAC,CACb,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,CAClC,wGAAwG,EACxG,CAAC,UAAU,CAAC,CACb,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,GAAG,EAA2B,CAAC;IAElD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE;YACpB,OAAO,EAAE,IAAI,GAAG,EAAE;YAClB,WAAW,EAAE,IAAI,GAAG,EAAE;YACtB,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,IAAI,CAAC;YAClE,OAAO,EAAE,IAAI,GAAG,EAAE;SACnB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,KAAK,CAMnC;;6BAEyB,EACzB,CAAC,UAAU,CAAC,CACb,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEzC,IAAI,KAAK,EAAE,CAAC;YACV,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE;gBACjC,QAAQ,EAAE,GAAG,CAAC,SAAS;gBACvB,UAAU,EAAE,GAAG,CAAC,WAAW,KAAK,KAAK;aACtC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,KAAK,CAClC,mEAAmE,EACnE,CAAC,UAAU,CAAC,CACb,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,KAAK,CACvC;;;;0BAIsB,EACtB,CAAC,UAAU,CAAC,CACb,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;QACnD,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,MAAyB;IAC/C,MAAM,gBAAgB,GAAG,6BAA6B,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAE7E,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,IAAI,MAAM,CAAC;QAChB,gBAAgB;QAChB,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAyB;IACtD,OAAO,sBAAsB,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,UAAU,CAAC,OAA6B,EAAE,UAAkB,EAAE,IAAe,EAAE,QAAqB;IAC3G,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC;gBACX,KAAK,EAAE,gBAAgB,UAAU,IAAI,IAAI,CAAC,IAAI,EAAE;gBAChD,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,UAAkB,EAAE,IAAe;IACzD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IACxF,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;IAEhF,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,iCAAiC,EAAE,aAAa,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,OAAO,8BAA8B,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;AACzG,CAAC;AAED,SAAS,MAAM,CAAC,IAAY,EAAE,QAAgB,EAAE,UAAkB,EAAE,QAAQ,GAAG,KAAK;IAClF,OAAO;QACL,QAAQ;QACR,UAAU;QACV,IAAI;QACJ,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,KAAa,EAAE,OAAiB;IAChE,OAAO;QACL,IAAI;QACJ,GAAG,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,eAAe,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,mBAAmB,UAAU,CAAC,IAAI,CAAC,iBAAiB,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACzJ,IAAI,EAAE,GAAG;KACV,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,KAAa,EAAE,UAAkB,EAAE,WAAmB,EAAE,YAAoB;IAC5G,OAAO;QACL,IAAI;QACJ,GAAG,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,eAAe,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,mBAAmB,UAAU,CAAC,IAAI,CAAC,iBAAiB,UAAU,CAAC,UAAU,CAAC,gBAAgB,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC,qBAAqB;QAC9O,IAAI,EAAE,GAAG;KACV,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,IAAY,EAAE,GAAmC;IAC9D,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,SAAS,CAAC,UAAkB,EAAE,IAAY;IACjD,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC;AAC5C,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,QAAgB;IACxD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,MAAM,KAAK,mBAAmB,CAAC;IACxC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC"}

package/dist/cli/index.d.ts

@@ -1,4 +1,4 @@
 type Output = Pick<typeof console, "error" | "log">;
-export declare function runCli(argv: string[], output?: Output): 0 | 1;
+export declare function runCli(argv: string[], output?: Output): Promise<0 | 1>;
 export {};
 //# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAGA,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,OAAO,EAAE,OAAO,GAAG,KAAK,CAAC,CAAC;AA2BpD,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,GAAE,MAAgB,SAsC9D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAKA,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,OAAO,EAAE,OAAO,GAAG,KAAK,CAAC,CAAC;AAqBpD,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,GAAE,MAAgB,kBAgEpE"}

package/dist/cli/index.js

@@ -1,24 +1,19 @@
-import { doctorAuthEnv, initAuthEnv } from "./env.js";
+import { loadUnifiedAuthConfig } from "./config-file.js";
+import { doctorUnifiedAuthConfig, initUnifiedAuthConfig } from "./config.js";
+import { doctorUnifiedAuthDatabase, migrateUnifiedAuthDatabase } from "./database.js";
 const helpText = `Unified Auth CLI
 
 Usage:
   unified-auth init [options]
   unified-auth doctor [options]
+  unified-auth db migrate [options]
 
 Options:
-  --app <id>             Auth client id. Defaults to the current folder name.
-  --name <name>          Display name for the auth application.
-  --port <port>          Local auth service port. Defaults to 3005.
-  --service-url <url>    Auth service base URL. Defaults to http://localhost:<port>.
-  --redirect <url>       Allowed app redirect URI. Defaults to http://localhost:3004/.
-  --providers <list>     Comma-separated providers: feishu,google,github.
-  --store <provider>     Store provider: file or prisma. Defaults to file.
-  --env-file <path>      Env file to update. Defaults to .env.local.
-  --example-file <path>  Example env file to update. Defaults to .env.example.
+  --config <path>        Config file. Defaults to unified-auth.config.ts.
   --cwd <path>           Project directory. Defaults to the current directory.
   --help                 Show this help message.
 `;
-export function runCli(argv, output = console) {
+export async function runCli(argv, output = console) {
     const args = parseArgs(argv);
     try {
         if (!args.command || args.command === "help" || args.flags.has("help")) {
@@ -26,24 +21,44 @@ export function runCli(argv, output = console) {
             return 0;
         }
         if (args.command === "init") {
-            const result = initAuthEnv(toInitOptions(args.flags));
-            output.log("Unified Auth env initialized.");
-            printWriteSummary(output, ".env.local", result.env);
-            printWriteSummary(output, ".env.example", result.example);
-            printWriteSummary(output, ".gitignore", result.gitignore);
-            output.log("Run unified-auth doctor to verify the project config.");
+            const cwd = readString(args.flags, "cwd") ?? process.cwd();
+            const result = initUnifiedAuthConfig({
+                configPath: readString(args.flags, "config"),
+                cwd,
+            });
+            output.log(result.created ? "Unified Auth config created." : "Unified Auth config already exists.");
+            output.log(`Config: ${result.path}`);
+            output.log("Optional: run unified-auth doctor to verify the project config.");
             return 0;
         }
         if (args.command === "doctor") {
-            const result = doctorAuthEnv({
-                cwd: readString(args.flags, "cwd"),
-                envFile: readString(args.flags, "env-file"),
-            });
+            const cwd = readString(args.flags, "cwd") ?? process.cwd();
+            const loaded = await loadUnifiedAuthConfig(cwd, readString(args.flags, "config"));
+            const result = doctorUnifiedAuthConfig(loaded.config, loaded.path);
+            if (loaded.config?.database?.url) {
+                result.checks.push(...await doctorUnifiedAuthDatabase(loaded.config));
+                result.ok = !result.checks.some((check) => check.status === "fail");
+            }
             for (const check of result.checks) {
                 output.log(formatCheck(check));
             }
             return result.ok ? 0 : 1;
         }
+        if (args.command === "db" && args.subcommand === "migrate") {
+            const cwd = readString(args.flags, "cwd") ?? process.cwd();
+            const loaded = await loadUnifiedAuthConfig(cwd, readString(args.flags, "config"));
+            if (!loaded.config) {
+                output.error("unified-auth.config.ts is missing; run unified-auth init");
+                return 1;
+            }
+            const result = await migrateUnifiedAuthDatabase(loaded.config);
+            output.log(result.changed ? "Unified Auth database migrated." : "Unified Auth database already up to date.");
+            output.log(`Schema: ${result.schemaName}`);
+            for (const action of result.actions) {
+                output.log(`- ${action.label}`);
+            }
+            return 0;
+        }
         output.error(`Unknown command: ${args.command}`);
         output.error("Run unified-auth --help for usage.");
         return 1;
@@ -56,10 +71,16 @@ export function runCli(argv, output = console) {
 function parseArgs(argv) {
     const flags = new Map();
     let command = "";
+    let subcommand = "";
     for (let index = 0; index < argv.length; index += 1) {
         const arg = argv[index];
         if (!arg.startsWith("--")) {
-            command ||= arg;
+            if (!command) {
+                command = arg;
+            }
+            else if (!subcommand) {
+                subcommand = arg;
+            }
             continue;
         }
         const inline = /^--([^=]+)=(.*)$/.exec(arg);
@@ -76,68 +97,12 @@ function parseArgs(argv) {
         flags.set(name, next);
         index += 1;
     }
-    return { command, flags };
-}
-function toInitOptions(flags) {
-    return {
-        app: readString(flags, "app"),
-        cwd: readString(flags, "cwd"),
-        envFile: readString(flags, "env-file"),
-        exampleFile: readString(flags, "example-file"),
-        name: readString(flags, "name"),
-        port: readNumber(flags, "port"),
-        providers: readProviders(flags),
-        redirectURI: readString(flags, "redirect"),
-        serviceURL: readString(flags, "service-url"),
-        store: readStore(flags),
-    };
+    return { command, flags, subcommand };
 }
 function readString(flags, name) {
     const value = flags.get(name);
     return typeof value === "string" && value.trim() ? value.trim() : undefined;
 }
-function readNumber(flags, name) {
-    const value = readString(flags, name);
-    if (!value) {
-        return undefined;
-    }
-    const parsed = Number(value);
-    if (!Number.isInteger(parsed) || parsed <= 0) {
-        throw new Error(`--${name} must be a positive integer.`);
-    }
-    return parsed;
-}
-function readProviders(flags) {
-    const value = readString(flags, "providers");
-    if (!value) {
-        return undefined;
-    }
-    const providers = value.split(",").map((provider) => provider.trim()).filter(Boolean);
-    const allowed = new Set(["feishu", "github", "google"]);
-    for (const provider of providers) {
-        if (!allowed.has(provider)) {
-            throw new Error(`Unsupported provider: ${provider}`);
-        }
-    }
-    return providers;
-}
-function readStore(flags) {
-    const value = readString(flags, "store");
-    if (!value) {
-        return undefined;
-    }
-    if (value === "file" || value === "prisma") {
-        return value;
-    }
-    throw new Error(`Unsupported store provider: ${value}`);
-}
-function printWriteSummary(output, label, summary) {
-    const changes = [
-        summary.added.length ? `${summary.added.length} added` : "",
-        summary.updated.length ? `${summary.updated.length} updated` : "",
-    ].filter(Boolean).join(", ") || "already up to date";
-    output.log(`${label}: ${changes} (${summary.path})`);
-}
 function formatCheck(check) {
     const prefix = check.status === "pass" ? "[ok]" : check.status === "warn" ? "[warn]" : "[fail]";
     return `${prefix} ${check.message}`;

package/dist/cli/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAUtD,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;CAkBhB,CAAC;AAEF,MAAM,UAAU,MAAM,CAAC,IAAc,EAAE,SAAiB,OAAO;IAC7D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE7B,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/B,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAEtD,MAAM,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAC5C,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACpD,iBAAiB,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1D,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAC1D,MAAM,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;YACpE,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,aAAa,CAAC;gBAC3B,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC;gBAClC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC;aAC5C,CAAC,CAAC;YAEH,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;YACjC,CAAC;YAED,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;QAClF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC/C,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAExB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,GAAG,CAAC;YAChB,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE5C,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAE7B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtB,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,aAAa,CAAC,KAAiC;IACtD,OAAO;QACL,GAAG,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC;QAC7B,GAAG,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC;QAC7B,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC;QACtC,WAAW,EAAE,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC;QAC9C,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;QAC/B,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;QAC/B,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC;QAC/B,WAAW,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC;QAC1C,UAAU,EAAE,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5C,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAiC,EAAE,IAAY;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAE9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,SAAS,UAAU,CAAC,KAAiC,EAAE,IAAY;IACjE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAEtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAE7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,8BAA8B,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAiC;IACtD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAE7C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAExD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO,SAAkD,CAAC;AAC5D,CAAC;AAED,SAAS,SAAS,CAAC,KAAiC;IAClD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAEzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,KAAa,EAAE,OAA6D;IACrH,MAAM,OAAO,GAAG;QACd,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,EAAE;QAC3D,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,UAAU,CAAC,CAAC,CAAC,EAAE;KAClE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC;IAErD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,KAAK,OAAO,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,KAAkB;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAEhG,OAAO,GAAG,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;AACtC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,eAAe,CAAC;AAWtF,MAAM,QAAQ,GAAG;;;;;;;;;;;CAWhB,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc,EAAE,SAAiB,OAAO;IACnE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE7B,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/B,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,qBAAqB,CAAC;gBACnC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC;gBAC5C,GAAG;aACJ,CAAC,CAAC;YAEH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC;YACpG,MAAM,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;YACrC,MAAM,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;YAC9E,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YAClF,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAEnE,IAAI,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;gBACjC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBACtE,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;YACtE,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;YACjC,CAAC;YAED,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAC3D,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YAElF,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnB,MAAM,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBACzE,OAAO,CAAC,CAAC;YACX,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAE/D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC;YAC7G,MAAM,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;YAE3C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpC,MAAM,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAClC,CAAC;YAED,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;QAClF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC/C,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,UAAU,GAAG,EAAE,CAAC;IAEpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAExB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,GAAG,CAAC;YAChB,CAAC;iBAAM,IAAI,CAAC,UAAU,EAAE,CAAC;gBACvB,UAAU,GAAG,GAAG,CAAC;YACnB,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE5C,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAE7B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtB,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,UAAU,CAAC,KAAiC,EAAE,IAAY;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAE9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAkB;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAEhG,OAAO,GAAG,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;AACtC,CAAC"}

package/dist/cli.js

@@ -1,4 +1,4 @@
 #!/usr/bin/env node
 import { runCli } from "./cli/index.js";
-process.exitCode = runCli(process.argv.slice(2));
+process.exitCode = await runCli(process.argv.slice(2));
 //# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAExC,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAExC,OAAO,CAAC,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,32 @@
+export type AuthProvider = "feishu" | "github" | "google";
+export type UnifiedAuthConfigValue<T> = T | (() => T | undefined);
+export interface UnifiedAuthAppConfig {
+    id?: string;
+    name?: string;
+    origin?: string;
+    redirectURI?: string;
+    url?: string;
+}
+export interface UnifiedAuthServiceConfig {
+    origin?: string;
+    port?: number;
+    secret?: UnifiedAuthConfigValue<string>;
+    trustedOrigins?: string[];
+    url?: string;
+}
+export interface UnifiedAuthDatabaseConfig {
+    ssl?: boolean | {
+        rejectUnauthorized?: boolean;
+    };
+    url?: UnifiedAuthConfigValue<string>;
+}
+export interface UnifiedAuthConfig {
+    app?: UnifiedAuthAppConfig;
+    auth?: UnifiedAuthServiceConfig;
+    database?: UnifiedAuthDatabaseConfig;
+    providers?: AuthProvider[];
+    realm?: string;
+}
+export declare function defineUnifiedAuthConfig(config: UnifiedAuthConfig): UnifiedAuthConfig;
+export declare function resolveUnifiedAuthConfigValue<T>(value: UnifiedAuthConfigValue<T> | undefined): T | undefined;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAC1D,MAAM,MAAM,sBAAsB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC;AAElE,MAAM,WAAW,oBAAoB;IACnC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACxC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,yBAAyB;IACxC,GAAG,CAAC,EAAE,OAAO,GAAG;QACd,kBAAkB,CAAC,EAAE,OAAO,CAAC;KAC9B,CAAC;IACF,GAAG,CAAC,EAAE,sBAAsB,CAAC,MAAM,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,oBAAoB,CAAC;IAC3B,IAAI,CAAC,EAAE,wBAAwB,CAAC;IAChC,QAAQ,CAAC,EAAE,yBAAyB,CAAC;IACrC,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,iBAAiB,GAAG,iBAAiB,CAEpF;AAED,wBAAgB,6BAA6B,CAAC,CAAC,EAAE,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC,GAAG,SAAS,GAAG,CAAC,GAAG,SAAS,CAE5G"}