@we8/cloudflare 0.1.1 → 0.2.0

package/dist/cli-args.js

@@ -12,13 +12,20 @@ Usage:
       Worker's secrets.
 
   we8-cloudflare migrate [--remote] [--dir <path>]
-      Apply the @we8/cms migrations in order. Local by default; --remote
-      applies them to the deployed D1 database.
+      Apply the @we8/cms migrations in order, then the migrations of every
+      installed provider package (today: @we8/auth). Local by default;
+      --remote applies them to the deployed D1 database.
 
   we8-cloudflare seed [--dir <path>]
       Load the development seed into the LOCAL database. It contains plaintext
       API keys, so this command has no remote mode and refuses to be given one.
 
+  we8-cloudflare skill [--check] [--dir <path>]
+      Write .claude/skills/we8/SKILL.md, the operating manual an agentic tool
+      loads when it opens this project, generated from the project's own auth
+      mode and workspace. --check writes nothing and exits 1 when the file is
+      missing or out of date, which is what belongs in CI.
+
   we8-cloudflare help | --version
 `;
 /**
@@ -27,7 +34,7 @@ Usage:
  * would otherwise quietly do the wrong half of the job.
  */
 export function parseCliArgs(argv, cwd) {
-    const base = { command: 'help', dir: cwd, remote: false };
+    const base = { command: 'help', dir: cwd, remote: false, check: false };
     const [first, ...rest] = argv;
     if (first === undefined || first === 'help' || first === '--help' || first === '-h') {
         return base;
@@ -35,7 +42,7 @@ export function parseCliArgs(argv, cwd) {
     if (first === '--version' || first === '-v' || first === 'version') {
         return { ...base, command: 'version' };
     }
-    if (first !== 'doctor' && first !== 'migrate' && first !== 'seed') {
+    if (first !== 'doctor' && first !== 'migrate' && first !== 'seed' && first !== 'skill') {
         return { ...base, error: `unknown command "${first}"` };
     }
     const parsed = { ...base, command: first };
@@ -49,6 +56,10 @@ export function parseCliArgs(argv, cwd) {
             parsed.remote = false;
             continue;
         }
+        if (arg === '--check') {
+            parsed.check = true;
+            continue;
+        }
         if (arg === '--dir') {
             const value = rest[i + 1];
             if (value === undefined)
@@ -63,6 +74,19 @@ export function parseCliArgs(argv, cwd) {
         }
         return { ...parsed, error: `unknown option "${arg}"` };
     }
+    // `--check` belongs to the skill command, and `--remote` does not: the skill
+    // is a file in the repository, and there is no deployed one to compare it
+    // to. Both are errors rather than silent no-ops, for the same reason an
+    // unknown flag is.
+    if (parsed.check && parsed.command !== 'skill') {
+        return { ...parsed, error: `--check is only for "skill", not "${parsed.command}"` };
+    }
+    if (parsed.command === 'skill' && parsed.remote) {
+        return {
+            ...parsed,
+            error: 'skill has no remote mode: the skill is a file in this project, not something deployed',
+        };
+    }
     // The guardrail, stated once and enforced here: the development seed carries
     // plaintext API keys, so it never goes anywhere but the local database.
     if (parsed.command === 'seed' && (parsed.remote || seedTargetsRemote(rest))) {

package/dist/cli-args.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli-args.js","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAchD,MAAM,CAAC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;CAiBpB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAuB,EAAE,GAAW;IAC/D,MAAM,IAAI,GAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAEzE,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAE9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACpF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACnE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAClE,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,oBAAoB,KAAK,GAAG,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,MAAM,GAAkB,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAC9B,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YAC3E,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC;YACnB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxC,SAAS;QACX,CAAC;QACD,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,GAAG,EAAE,CAAC;IACzD,CAAC;IAED,6EAA6E;IAC7E,wEAAwE;IACxE,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO;YACL,GAAG,MAAM;YACT,KAAK,EACH,sLAAsL;SACzL,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"cli-args.js","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAoBhD,MAAM,CAAC,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;CAwBpB,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAAuB,EAAE,GAAW;IAC/D,MAAM,IAAI,GAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAEvF,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAE9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACpF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACnE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;QACvF,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,oBAAoB,KAAK,GAAG,EAAE,CAAC;IAC1D,CAAC;IAED,MAAM,MAAM,GAAkB,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAE1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAW,CAAC;QAC9B,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAC1B,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;YAC3E,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC;YACnB,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACxC,SAAS;QACX,CAAC;QACD,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,GAAG,EAAE,CAAC;IACzD,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,wEAAwE;IACxE,mBAAmB;IACnB,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC/C,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,qCAAqC,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAChD,OAAO;YACL,GAAG,MAAM;YACT,KAAK,EAAE,uFAAuF;SAC/F,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,wEAAwE;IACxE,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO;YACL,GAAG,MAAM;YACT,KAAK,EACH,sLAAsL;SACzL,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cli.d.ts

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 /**
- * `we8-cloudflare`: the three commands a scaffolded project needs that are not
+ * `we8-cloudflare`: the four commands a scaffolded project needs that are not
  * just wrangler. Each one gathers facts, checks them, and only then shells out
  * to wrangler, so the failure a stranger sees is a sentence about their
  * project rather than a stack trace from a tool they have not met yet.

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAwCH;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAe/D;AA0CD,wBAAgB,IAAI,CAAC,IAAI,GAAE,SAAS,MAAM,EAA0B,EAAE,GAAG,GAAE,MAAsB,GAAG,MAAM,CA0BzG"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AA+CH;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAe/D;AAmID,wBAAgB,IAAI,CAAC,IAAI,GAAE,SAAS,MAAM,EAA0B,EAAE,GAAG,GAAE,MAAsB,GAAG,MAAM,CA4BzG"}

package/dist/cli.js

@@ -1,16 +1,23 @@
 #!/usr/bin/env node
 /**
- * `we8-cloudflare`: the three commands a scaffolded project needs that are not
+ * `we8-cloudflare`: the four commands a scaffolded project needs that are not
  * just wrangler. Each one gathers facts, checks them, and only then shells out
  * to wrangler, so the failure a stranger sees is a sentence about their
  * project rather than a stack trace from a tool they have not met yet.
  */
 import { spawnSync } from 'node:child_process';
-import { resolve } from 'node:path';
+import { rmSync, writeFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { join, resolve } from 'node:path';
 import { parseCliArgs, USAGE } from './cli-args.js';
-import { formatDoctorReport, runDoctorChecks } from './doctor.js';
+import { findD1Binding, formatDoctorReport, runDoctorChecks } from './doctor.js';
 import { findSeedFile, gatherFacts, SEED_RELATIVE_PATH } from './project.js';
-const VERSION = '0.1.0';
+import { runSkillCommand, skillExitCode } from './skill-command.js';
+import { AUTH_MIGRATIONS_DIR, generateMigrationsConfig } from './wrangler-config.js';
+// Read from the manifest so a release cannot leave this behind (0.1.1 and
+// 0.1.2 printed 0.1.0 for exactly that reason).
+const require = createRequire(import.meta.url);
+const VERSION = require('../package.json').version;
 /** Runs wrangler in the project directory, inheriting stdio so its output is the user's. */
 function runWrangler(dir, args) {
     console.log(`> wrangler ${args.join(' ')}`);
@@ -65,13 +72,56 @@ function doctor(dir, remote) {
     process.stdout.write(formatDoctorReport(report));
     return report.ok ? 0 : 1;
 }
+/**
+ * The generated config `migrate` uses for a second migrations directory, and
+ * the reason it exists.
+ *
+ * `wrangler d1 migrations apply` reads one `migrations_dir` out of one config
+ * file. A we8 site's schema comes from every package it composes: the CMS owns
+ * its tables, `@we8/auth` owns the four auth ones. So the command runs twice,
+ * and the second run needs a config that names the same database and the other
+ * directory. It is written next to the project's own config so wrangler
+ * resolves relative paths and local state exactly as it does for the first
+ * run, and removed straight afterwards.
+ */
+const PROVIDER_MIGRATIONS_CONFIG = '.we8-provider-migrations.json';
+function applyProviderMigrations(dir, facts, migrationsDir, remote) {
+    const d1 = findD1Binding(facts.config);
+    const config = facts.config;
+    const path = join(dir, PROVIDER_MIGRATIONS_CONFIG);
+    writeFileSync(path, generateMigrationsConfig({
+        name: config?.name,
+        compatibilityDate: config?.compatibility_date,
+        databaseName: d1?.database_name,
+        databaseId: d1?.database_id,
+    }, migrationsDir), 'utf8');
+    try {
+        console.log(`Applying the migrations that ship with @we8/auth (${migrationsDir}).`);
+        return runWrangler(dir, [
+            'd1',
+            'migrations',
+            'apply',
+            'DB',
+            remote ? '--remote' : '--local',
+            '--config',
+            PROVIDER_MIGRATIONS_CONFIG,
+        ]);
+    }
+    finally {
+        rmSync(path, { force: true });
+    }
+}
 function migrate(dir, remote) {
     // The same checks the doctor runs, narrowed to the ones a migration needs.
     // Applying migrations against a placeholder database id fails inside
     // wrangler with a message about an id, not about what to do next.
     const facts = gatherFacts(dir, remote ? 'remote' : 'local');
     const report = runDoctorChecks(facts);
-    const blockers = report.checks.filter((c) => c.status === 'fail' && (c.id === 'config' || c.id === 'migrations' || (remote && c.id === 'd1')));
+    const blockers = report.checks.filter((c) => c.status === 'fail' &&
+        (c.id === 'config' ||
+            c.id === 'migrations' ||
+            c.id === 'auth_migrations' ||
+            (remote && c.id === 'd1')));
     if (blockers.length > 0) {
         console.error('Cannot apply migrations yet:');
         for (const blocker of blockers) {
@@ -81,7 +131,20 @@ function migrate(dir, remote) {
         }
         return 1;
     }
-    return runWrangler(dir, ['d1', 'migrations', 'apply', 'DB', remote ? '--remote' : '--local']);
+    const core = runWrangler(dir, ['d1', 'migrations', 'apply', 'DB', remote ? '--remote' : '--local']);
+    if (core !== 0)
+        return core;
+    // Providers own their own tables. An installed @we8/auth brings the four
+    // auth ones, every statement in them guarded, so a database that already
+    // carries them from 0.1 accepts the migration and changes nothing.
+    if (!facts.authPackageInstalled)
+        return 0;
+    if (facts.authMigrations === null) {
+        console.error(`@we8/auth is installed but ${AUTH_MIGRATIONS_DIR} does not exist.`);
+        console.error('fix: npm install   (the migrations ship inside the @we8/auth package)');
+        return 1;
+    }
+    return applyProviderMigrations(dir, facts, AUTH_MIGRATIONS_DIR, remote);
 }
 function seed(dir) {
     const file = findSeedFile(dir);
@@ -94,6 +157,24 @@ function seed(dir) {
     console.log('It contains plaintext API keys; never load it into a deployed database.');
     return runWrangler(dir, ['d1', 'execute', 'DB', '--local', '--file', file]);
 }
+/**
+ * Writes or checks the project skill. Nothing is spawned and nothing is
+ * fetched: the whole answer is in the project's own files, which is what lets
+ * `--check` run in CI with no account and no network.
+ */
+function skill(dir, check) {
+    const result = runSkillCommand(dir, { check });
+    const code = skillExitCode(result.status);
+    if (code === 0) {
+        console.log(result.message);
+    }
+    else {
+        console.error(result.message);
+        if (result.fix)
+            console.error(`fix: ${result.fix}`);
+    }
+    return code;
+}
 export function main(argv = process.argv.slice(2), cwd = process.cwd()) {
     const parsed = parseCliArgs(argv, cwd);
     if (parsed.error) {
@@ -116,6 +197,8 @@ export function main(argv = process.argv.slice(2), cwd = process.cwd()) {
             return migrate(dir, parsed.remote);
         case 'seed':
             return seed(dir);
+        case 'skill':
+            return skill(dir, parsed.check);
     }
 }
 process.exitCode = main();

package/dist/cli.js.map

@@ -1 +1 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAE7E,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,4FAA4F;AAC5F,SAAS,WAAW,CAAC,GAAW,EAAE,IAAc;IAC9C,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,EAAE;QACrE,GAAG,EAAE,GAAG;QACR,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;KACpC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,2BAA2B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE;QAC9E,GAAG,EAAE,GAAG;QACR,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1E,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,MAAM;iBACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAE,KAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CACxF;iBACA,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACjE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,SAAS,MAAM,CAAC,GAAW,EAAE,MAAe;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACvF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,MAAe;IAC3C,2EAA2E;IAC3E,qEAAqE;IACrE,kEAAkE;IAClE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,KAAK,YAAY,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CACxG,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACvD,IAAI,OAAO,CAAC,GAAG;gBAAE,OAAO,CAAC,KAAK,CAAC,YAAY,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,mBAAmB,kBAAkB,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACjF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;IACvF,OAAO,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,OAA0B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAc,OAAO,CAAC,GAAG,EAAE;IAC/F,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEvC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAEhC,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;QACvB,KAAK,MAAM;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,KAAK,SAAS;YACZ,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,CAAC,CAAC;QACX,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,OAAO,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC"}
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,eAAe,EAAoB,MAAM,aAAa,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAErF,0EAA0E;AAC1E,gDAAgD;AAChD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,OAAO,GAAI,OAAO,CAAC,iBAAiB,CAAyB,CAAC,OAAO,CAAC;AAE5E,4FAA4F;AAC5F,SAAS,WAAW,CAAC,GAAW,EAAE,IAAc;IAC9C,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,EAAE;QACrE,GAAG,EAAE,GAAG;QACR,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;KACpC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,2BAA2B,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE;QAC9E,GAAG,EAAE,GAAG;QACR,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC1E,OAAO,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,MAAM;iBACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAE,KAA4B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CACxF;iBACA,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,2CAA2C;IAC7C,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACjE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,SAAS,MAAM,CAAC,GAAW,EAAE,MAAe;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACvF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,0BAA0B,GAAG,+BAA+B,CAAC;AAEnE,SAAS,uBAAuB,CAC9B,GAAW,EACX,KAAkB,EAClB,aAAqB,EACrB,MAAe;IAEf,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAiE,CAAC;IACvF,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;IAEnD,aAAa,CACX,IAAI,EACJ,wBAAwB,CACtB;QACE,IAAI,EAAE,MAAM,EAAE,IAAI;QAClB,iBAAiB,EAAE,MAAM,EAAE,kBAAkB;QAC7C,YAAY,EAAE,EAAE,EAAE,aAAa;QAC/B,UAAU,EAAE,EAAE,EAAE,WAAW;KAC5B,EACD,aAAa,CACd,EACD,MAAM,CACP,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,qDAAqD,aAAa,IAAI,CAAC,CAAC;QACpF,OAAO,WAAW,CAAC,GAAG,EAAE;YACtB,IAAI;YACJ,YAAY;YACZ,OAAO;YACP,IAAI;YACJ,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YAC/B,UAAU;YACV,0BAA0B;SAC3B,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,MAAe;IAC3C,2EAA2E;IAC3E,qEAAqE;IACrE,kEAAkE;IAClE,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CACnC,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,MAAM,KAAK,MAAM;QACnB,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ;YAChB,CAAC,CAAC,EAAE,KAAK,YAAY;YACrB,CAAC,CAAC,EAAE,KAAK,iBAAiB;YAC1B,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAC/B,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YACvD,IAAI,OAAO,CAAC,GAAG;gBAAE,OAAO,CAAC,KAAK,CAAC,YAAY,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IACpG,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5B,yEAAyE;IACzE,yEAAyE;IACzE,mEAAmE;IACnE,IAAI,CAAC,KAAK,CAAC,oBAAoB;QAAE,OAAO,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QAClC,OAAO,CAAC,KAAK,CAAC,8BAA8B,mBAAmB,kBAAkB,CAAC,CAAC;QACnF,OAAO,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;QACvF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,uBAAuB,CAAC,GAAG,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,IAAI,CAAC,GAAW;IACvB,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,mBAAmB,kBAAkB,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACjF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;IACvF,OAAO,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,SAAS,KAAK,CAAC,GAAW,EAAE,KAAc;IACxC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,MAAM,CAAC,GAAG;YAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,OAA0B,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAc,OAAO,CAAC,GAAG,EAAE;IAC/F,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEvC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAEhC,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;QACvB,KAAK,MAAM;YACT,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,KAAK,SAAS;YACZ,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrB,OAAO,CAAC,CAAC;QACX,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,KAAK,OAAO;YACV,OAAO,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,OAAO,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC"}

package/dist/doctor.d.ts

@@ -44,7 +44,76 @@ export interface DoctorFacts {
     migrations: string[] | null;
     /** Scripts declared by the project's package.json. */
     packageScripts: Record<string, string>;
+    /**
+     * The source of the worker entry point named by `main`, or null when it
+     * cannot be read. The doctor reads which admin auth provider the project
+     * composes out of it: a registration is a line of code, not configuration,
+     * so this is the only place the answer exists.
+     */
+    workerEntry: string | null;
+    /** True when `@we8/auth` is installed in the project. */
+    authPackageInstalled: boolean;
+    /**
+     * Migration filenames the installed `@we8/auth` ships, or null when the
+     * package is absent or carries no migrations directory.
+     */
+    authMigrations: string[] | null;
+    /** True when the project carries the generated skill an agentic tool loads. */
+    skillPresent: boolean;
 }
+/**
+ * How a project's worker entry answers "who is signing in".
+ *
+ * `access` and `perimeter` are the two providers this pack ships, named
+ * separately from `external` because each one has obligations of its own that
+ * the doctor checks: Access needs its team domain and audience, and perimeter
+ * mode needs an acknowledgement before it is allowed anywhere near a
+ * deployment. `external` remains what a provider somebody wrote themselves
+ * reads as.
+ */
+export type AdminAuthMode = 'embedded' | 'access' | 'perimeter' | 'external' | 'none' | 'unknown';
+/**
+ * A worker entry with its comments removed.
+ *
+ * Everything below reads code out of a file the scaffolder also fills with
+ * prose, and that prose names providers: the generated perimeter entry
+ * explains how to swap in `registerAdminAuth(embeddedAdminAuth)`, and the
+ * generated Access entry shows the settings being passed inline. Matching
+ * against the raw text reads those sentences as code and reports the wrong
+ * mode, which is exactly the kind of confident wrong answer a doctor must not
+ * give.
+ *
+ * String-aware, so a `//` inside a URL literal is not mistaken for a comment.
+ * A regular-expression literal containing an unmatched quote would confuse it;
+ * a worker entry is three imports and two calls, and does not have one.
+ */
+export declare function stripSourceComments(source: string): string;
+/**
+ * Reads the composed admin auth mode out of a worker entry.
+ *
+ * A static read of one file, deliberately: running the worker to ask it would
+ * need a deployment, and the doctor is what a stranger runs BEFORE they have
+ * one. It looks for the registration call and for the shipped providers by
+ * name, so a project that registers something of its own reads as `external`
+ * rather than as unconfigured.
+ */
+export declare function readAdminAuthMode(entry: string | null): AdminAuthMode;
+/**
+ * Whether a perimeter-mode entry says out loud that it means it.
+ *
+ * The acknowledgement is an argument in the registration call rather than a
+ * var or a flag, because the dangerous choice is a line of code and the
+ * admission belongs in the same line: a reviewer reading `registerAdminAuth`
+ * sees both at once, and nobody acknowledges a mode they never read.
+ */
+export declare function readPerimeterAcknowledged(entry: string | null): boolean;
+/**
+ * Whether an access-mode entry passes its settings inline instead of leaving
+ * them to the vars. The doctor can check a var; it cannot check a value that
+ * only exists as an expression, so it says where the answer lives and stops
+ * there rather than reporting a var as missing when it is not needed.
+ */
+export declare function readsAccessConfigInline(entry: string | null): boolean;
 interface D1Binding {
     binding?: unknown;
     database_name?: unknown;
@@ -62,9 +131,16 @@ export declare function findR2Binding(config: unknown): R2Binding | null;
 /** The migrations_dir the project configured, or the empty string when it has none. */
 export declare function readMigrationsDir(config: unknown): string;
 /**
- * Migrations apply in filename order, so the order has to be a real sequence.
- * A gap or a duplicate number is a merge that went wrong, and wrangler will
- * happily apply it anyway.
+ * Migrations apply in filename order, so the order has to be a real sequence:
+ * numbered, ascending, and each number used once. A duplicate is a merge that
+ * went wrong, and wrangler will happily apply it anyway.
+ *
+ * A gap is allowed, and there is one in the core sequence on purpose. 0007
+ * created the auth tables in 0.1 and those tables now belong to `@we8/auth`;
+ * the number is retired rather than reused, because the name of an applied
+ * migration is recorded in the database forever and must never come to mean
+ * something else. Renumbering the migrations after it would re-run them
+ * against every 0.1 database in existence.
  */
 export declare function checkMigrationSequence(files: string[]): {
     ok: boolean;

package/dist/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../src/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,kFAAkF;AAClF,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE9C,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnD,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,YAAY,CAAC;IACrB,kFAAkF;IAClF,MAAM,EAAE,OAAO,CAAC;IAChB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,8EAA8E;IAC9E,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACzB;;;;OAIG;IACH,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/B,8FAA8F;IAC9F,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC5B,sDAAsD;IACtD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED,UAAU,SAAS;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,UAAU,SAAS;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAsBD,iFAAiF;AACjF,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAQ/D;AAED,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAQ/D;AAED,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAGzD;AAID;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAqBvF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAElE;AAYD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,YAAY,CAqQhE;AAID,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAuB/D"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../src/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAeH,kFAAkF;AAClF,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE9C,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnD,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,WAAW,EAAE,CAAC;CACvB;AAED,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,YAAY,CAAC;IACrB,kFAAkF;IAClF,MAAM,EAAE,OAAO,CAAC;IAChB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,8EAA8E;IAC9E,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACzB;;;;OAIG;IACH,aAAa,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/B,8FAA8F;IAC9F,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC5B,sDAAsD;IACtD,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC;;;;;OAKG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,yDAAyD;IACzD,oBAAoB,EAAE,OAAO,CAAC;IAC9B;;;OAGG;IACH,cAAc,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAChC,+EAA+E;IAC/E,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;AAElG;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CA6C1D;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,aAAa,CAcrE;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAGvE;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAGrE;AAED,UAAU,SAAS;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,UAAU,SAAS;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAsBD,iFAAiF;AACjF,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAQ/D;AAED,oFAAoF;AACpF,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAQ/D;AAED,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAGzD;AAID;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAuBvF;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAElE;AAYD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,YAAY,CAiehE;AAID,0EAA0E;AAC1E,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAuB/D"}