create-authenik8-app 2.4.14 → 2.4.15

package/dist/src/commands/add/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../../src/commands/add/context.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,UAAU,CAAC;AAE1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAGnE,MAAM,OAAO,eAAgB,SAAQ,KAAK;CAAG;AAE7C,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,eAAe,CAAC,4BAA4B,OAAO,GAAG,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,eAAe,CACvB,sGAAsG,CACvG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE3E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;AAChD,CAAC"}

package/dist/src/commands/add/diff.d.ts

@@ -0,0 +1,4 @@
+import type { PlannedFileChange } from "./types.js";
+export declare function formatFileDiff(change: PlannedFileChange): string;
+export declare function formatAddDiff(changes: readonly PlannedFileChange[]): string;
+//# sourceMappingURL=diff.d.ts.map

package/dist/src/commands/add/diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.d.ts","sourceRoot":"","sources":["../../../../src/commands/add/diff.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AA4FpD,wBAAgB,cAAc,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAsBhE;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,GAAG,MAAM,CAE3E"}

package/dist/src/commands/add/diff.js

@@ -0,0 +1,114 @@
+function lines(source) {
+    const normalized = source.replace(/\r\n/g, "\n");
+    const withoutFinalNewline = normalized.endsWith("\n") ? normalized.slice(0, -1) : normalized;
+    return withoutFinalNewline ? withoutFinalNewline.split("\n") : [];
+}
+function lineOperations(before, after) {
+    const left = lines(before);
+    const right = lines(after);
+    if (left.length * right.length > 1_000_000) {
+        return [
+            ...left.map((line) => ({ type: "delete", line })),
+            ...right.map((line) => ({ type: "add", line })),
+        ];
+    }
+    const matrix = Array.from({ length: left.length + 1 }, () => new Uint32Array(right.length + 1));
+    for (let leftIndex = left.length - 1; leftIndex >= 0; leftIndex -= 1) {
+        for (let rightIndex = right.length - 1; rightIndex >= 0; rightIndex -= 1) {
+            matrix[leftIndex][rightIndex] = left[leftIndex] === right[rightIndex]
+                ? matrix[leftIndex + 1][rightIndex + 1] + 1
+                : Math.max(matrix[leftIndex + 1][rightIndex], matrix[leftIndex][rightIndex + 1]);
+        }
+    }
+    const operations = [];
+    let leftIndex = 0;
+    let rightIndex = 0;
+    while (leftIndex < left.length && rightIndex < right.length) {
+        if (left[leftIndex] === right[rightIndex]) {
+            operations.push({ type: "equal", line: left[leftIndex] });
+            leftIndex += 1;
+            rightIndex += 1;
+        }
+        else if (matrix[leftIndex + 1][rightIndex] >= matrix[leftIndex][rightIndex + 1]) {
+            operations.push({ type: "delete", line: left[leftIndex] });
+            leftIndex += 1;
+        }
+        else {
+            operations.push({ type: "add", line: right[rightIndex] });
+            rightIndex += 1;
+        }
+    }
+    while (leftIndex < left.length)
+        operations.push({ type: "delete", line: left[leftIndex++] });
+    while (rightIndex < right.length)
+        operations.push({ type: "add", line: right[rightIndex++] });
+    return operations;
+}
+function redactEnvironmentLine(line) {
+    const match = line.match(/^([^=]+)=(.*)$/);
+    if (!match)
+        return line;
+    const name = match[1]?.trim() ?? "";
+    if (/(?:SECRET|PASSWORD|TOKEN|PRIVATE|SIGNING_JWKS|CLIENT_ID)$/i.test(name)) {
+        return `${name}=<redacted>`;
+    }
+    return line;
+}
+function hunkRanges(operations, contextLines) {
+    const changed = operations
+        .map((operation, index) => operation.type === "equal" ? -1 : index)
+        .filter((index) => index >= 0);
+    if (changed.length === 0)
+        return [];
+    const ranges = [];
+    for (const index of changed) {
+        const start = Math.max(0, index - contextLines);
+        const end = Math.min(operations.length, index + contextLines + 1);
+        const previous = ranges.at(-1);
+        if (previous && start <= previous[1])
+            previous[1] = Math.max(previous[1], end);
+        else
+            ranges.push([start, end]);
+    }
+    return ranges;
+}
+function positionsBefore(operations) {
+    const result = [];
+    let old = 1;
+    let next = 1;
+    for (const operation of operations) {
+        result.push({ old, next });
+        if (operation.type !== "add")
+            old += 1;
+        if (operation.type !== "delete")
+            next += 1;
+    }
+    result.push({ old, next });
+    return result;
+}
+export function formatFileDiff(change) {
+    const operations = lineOperations(change.before ?? "", change.after);
+    const contextLines = change.sensitive ? 0 : 3;
+    const ranges = hunkRanges(operations, contextLines);
+    const positions = positionsBefore(operations);
+    const suffix = change.sensitive ? " (sensitive values redacted)" : "";
+    const beforeLabel = change.before === null ? "/dev/null" : `a/${change.relativePath}${suffix}`;
+    const output = [`--- ${beforeLabel}`, `+++ b/${change.relativePath}${suffix}`];
+    for (const [start, end] of ranges) {
+        const oldCount = operations.slice(start, end).filter((item) => item.type !== "add").length;
+        const newCount = operations.slice(start, end).filter((item) => item.type !== "delete").length;
+        const position = positions[start] ?? { old: 1, next: 1 };
+        const oldStart = change.before === null ? 0 : position.old;
+        output.push(`@@ -${oldStart},${oldCount} +${position.next},${newCount} @@`);
+        for (const operation of operations.slice(start, end)) {
+            const prefix = operation.type === "add" ? "+" : operation.type === "delete" ? "-" : " ";
+            const value = change.sensitive ? redactEnvironmentLine(operation.line) : operation.line;
+            output.push(`${prefix}${value}`);
+        }
+    }
+    return output.join("\n");
+}
+export function formatAddDiff(changes) {
+    return changes.map(formatFileDiff).join("\n\n");
+}
+//# sourceMappingURL=diff.js.map

package/dist/src/commands/add/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../../../src/commands/add/diff.ts"],"names":[],"mappings":"AAIA,SAAS,KAAK,CAAC,MAAc;IAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,mBAAmB,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAC7F,OAAO,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,cAAc,CAAC,MAAc,EAAE,KAAa;IACnD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3C,OAAO;YACL,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAiB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAiB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;SAC/D,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAC1D,IAAI,WAAW,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAClC,CAAC;IACF,KAAK,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,SAAS,IAAI,CAAC,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC;QACrE,KAAK,IAAI,UAAU,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,UAAU,IAAI,CAAC,EAAE,UAAU,IAAI,CAAC,EAAE,CAAC;YACzE,MAAM,CAAC,SAAS,CAAE,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,UAAU,CAAC;gBACpE,CAAC,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,CAAE,CAAC,UAAU,GAAG,CAAC,CAAE,GAAG,CAAC;gBAC7C,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,GAAG,CAAC,CAAE,CAAC,UAAU,CAAE,EAAE,MAAM,CAAC,SAAS,CAAE,CAAC,UAAU,GAAG,CAAC,CAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAoB,EAAE,CAAC;IACvC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,OAAO,SAAS,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QAC5D,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAE,EAAE,CAAC,CAAC;YAC3D,SAAS,IAAI,CAAC,CAAC;YACf,UAAU,IAAI,CAAC,CAAC;QAClB,CAAC;aAAM,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC,CAAE,CAAC,UAAU,CAAE,IAAI,MAAM,CAAC,SAAS,CAAE,CAAC,UAAU,GAAG,CAAC,CAAE,EAAE,CAAC;YACtF,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAE,EAAE,CAAC,CAAC;YAC5D,SAAS,IAAI,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,CAAE,EAAE,CAAC,CAAC;YAC3D,UAAU,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,GAAG,IAAI,CAAC,MAAM;QAAE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,CAAE,EAAE,CAAC,CAAC;IAC9F,OAAO,UAAU,GAAG,KAAK,CAAC,MAAM;QAAE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,CAAE,EAAE,CAAC,CAAC;IAC/F,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,4DAA4D,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5E,OAAO,GAAG,IAAI,aAAa,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,UAAoC,EAAE,YAAoB;IAC5E,MAAM,OAAO,GAAG,UAAU;SACvB,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;SAClE,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,YAAY,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC;QAClE,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,QAAQ,IAAI,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC;YAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;;YAC1E,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,UAAoC;IAC3D,MAAM,MAAM,GAAyC,EAAE,CAAC;IACxD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3B,IAAI,SAAS,CAAC,IAAI,KAAK,KAAK;YAAE,GAAG,IAAI,CAAC,CAAC;QACvC,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ;YAAE,IAAI,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAyB;IACtD,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,YAAY,GAAG,MAAM,EAAE,CAAC;IAC/F,MAAM,MAAM,GAAG,CAAC,OAAO,WAAW,EAAE,EAAE,SAAS,MAAM,CAAC,YAAY,GAAG,MAAM,EAAE,CAAC,CAAC;IAE/E,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,MAAM,CAAC;QAC3F,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC9F,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,OAAO,QAAQ,IAAI,QAAQ,KAAK,QAAQ,CAAC,IAAI,IAAI,QAAQ,KAAK,CAAC,CAAC;QAC5E,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACxF,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;YACxF,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAqC;IACjE,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAClD,CAAC"}

package/dist/src/commands/add/index.d.ts

@@ -0,0 +1,6 @@
+import type { AddOptions, AddResult } from "./types.js";
+export declare class AddUsageError extends Error {
+}
+export declare function parseAddArguments(args: readonly string[], cwd?: string): AddOptions;
+export declare function runAdd(options: AddOptions): Promise<AddResult>;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/commands/add/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/add/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAExD,qBAAa,aAAc,SAAQ,KAAK;CAAG;AAE3C,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,SAAgB,GAClB,UAAU,CA4BZ;AAED,wBAAsB,MAAM,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CA2BpE"}

package/dist/src/commands/add/index.js

@@ -0,0 +1,61 @@
+import path from "node:path";
+import { applyPlannedChanges } from "./apply.js";
+import { createAddContext } from "./context.js";
+import { findAddRecipe } from "./registry.js";
+export class AddUsageError extends Error {
+}
+export function parseAddArguments(args, cwd = process.cwd()) {
+    const positional = [];
+    let dryRun = false;
+    let list = false;
+    let help = false;
+    for (const argument of args) {
+        if (argument === "--dry-run" || argument === "--diff")
+            dryRun = true;
+        else if (argument === "--list")
+            list = true;
+        else if (argument === "--help" || argument === "-h")
+            help = true;
+        else if (argument.startsWith("-"))
+            throw new AddUsageError(`Unknown add option: ${argument}`);
+        else
+            positional.push(argument);
+    }
+    if (positional.length > 2) {
+        throw new AddUsageError("Add accepts one recipe and at most one project directory.");
+    }
+    if (!list && !help && !positional[0]) {
+        throw new AddUsageError("Add requires a recipe name. Use --list to see available recipes.");
+    }
+    return {
+        ...(positional[0] ? { recipeName: positional[0] } : {}),
+        directory: path.resolve(cwd, positional[1] ?? "."),
+        dryRun,
+        list,
+        help,
+    };
+}
+export async function runAdd(options) {
+    if (!options.recipeName)
+        throw new AddUsageError("Add requires a recipe name.");
+    const recipe = findAddRecipe(options.recipeName);
+    if (!recipe) {
+        throw new AddUsageError(`Unknown recipe "${options.recipeName}". Use create-authenik8-app add --list.`);
+    }
+    const context = await createAddContext(options.directory);
+    const changes = await recipe.plan(context);
+    if (changes.length === 0) {
+        return { recipe, rootDir: context.rootDir, changes, status: "unchanged" };
+    }
+    if (options.dryRun) {
+        return { recipe, rootDir: context.rootDir, changes, status: "preview" };
+    }
+    await applyPlannedChanges(context.rootDir, changes, async () => {
+        const verified = await recipe.plan(await createAddContext(context.rootDir));
+        if (verified.length > 0) {
+            throw new Error(`Post-apply verification found ${verified.length} unapplied recipe change(s).`);
+        }
+    });
+    return { recipe, rootDir: context.rootDir, changes, status: "applied" };
+}
+//# sourceMappingURL=index.js.map

package/dist/src/commands/add/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/commands/add/index.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAG9C,MAAM,OAAO,aAAc,SAAQ,KAAK;CAAG;AAE3C,MAAM,UAAU,iBAAiB,CAC/B,IAAuB,EACvB,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAEnB,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,IAAI,GAAG,KAAK,CAAC;IAEjB,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,QAAQ;YAAE,MAAM,GAAG,IAAI,CAAC;aAChE,IAAI,QAAQ,KAAK,QAAQ;YAAE,IAAI,GAAG,IAAI,CAAC;aACvC,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI;YAAE,IAAI,GAAG,IAAI,CAAC;aAC5D,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,uBAAuB,QAAQ,EAAE,CAAC,CAAC;;YACzF,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,aAAa,CAAC,2DAA2D,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,aAAa,CAAC,kEAAkE,CAAC,CAAC;IAC9F,CAAC;IAED,OAAO;QACL,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;QAClD,MAAM;QACN,IAAI;QACJ,IAAI;KACL,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,OAAmB;IAC9C,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,MAAM,IAAI,aAAa,CAAC,6BAA6B,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,aAAa,CACrB,mBAAmB,OAAO,CAAC,UAAU,yCAAyC,CAC/E,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC1E,CAAC;IAED,MAAM,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5E,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,iCAAiC,QAAQ,CAAC,MAAM,8BAA8B,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAC1E,CAAC"}

package/dist/src/commands/add/output.d.ts

@@ -0,0 +1,5 @@
+import type { AddResult } from "./types.js";
+export declare function addHelp(): string;
+export declare function formatRecipeList(): string;
+export declare function formatAddResult(result: AddResult): string;
+//# sourceMappingURL=output.d.ts.map

package/dist/src/commands/add/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../../../src/commands/add/output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAI5C,wBAAgB,OAAO,IAAI,MAAM,CAkBhC;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAUzC;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CA6BzD"}

package/dist/src/commands/add/output.js

@@ -0,0 +1,58 @@
+import { addRecipes } from "./registry.js";
+import { formatAddDiff } from "./diff.js";
+export function addHelp() {
+    return `
+AUTHENIK8 ADD
+Apply a built-in, auditable auth recipe to a generated project
+
+Usage:
+  create-authenik8-app add <recipe> [directory] [options]
+  create-authenik8-app add --list
+
+Options:
+  --dry-run, --diff   Print the exact proposed diff without writing files
+  --list              List built-in recipes and compatible presets
+  -h, --help          Show this help message
+
+Examples:
+  npx create-authenik8-app add oauth-github
+  npx create-authenik8-app add oauth-google ./my-app --dry-run
+`;
+}
+export function formatRecipeList() {
+    const lines = ["\nBuilt-in Authenik8 recipes", ""];
+    for (const recipe of addRecipes) {
+        lines.push(`  ${recipe.id.padEnd(16)} ${recipe.description}`, `  ${"".padEnd(16)} Presets: ${recipe.supportedPresets.join(", ")}`);
+    }
+    lines.push("", "Preview any recipe with --dry-run before applying it.", "");
+    return lines.join("\n");
+}
+export function formatAddResult(result) {
+    const lines = [
+        "",
+        `Authenik8 add · ${result.recipe.id}`,
+        `Project: ${result.rootDir}`,
+        "",
+    ];
+    if (result.status === "unchanged") {
+        lines.push("Nothing to change. The recipe is already fully wired.", "");
+        return lines.join("\n");
+    }
+    lines.push(formatAddDiff(result.changes), "");
+    if (result.status === "preview") {
+        lines.push(`Dry run: ${result.changes.length} file(s) would change; no files were written.`);
+    }
+    else {
+        lines.push(`Applied and verified ${result.changes.length} file(s).`);
+        if (result.recipe.provider) {
+            const prefix = result.recipe.provider.toUpperCase();
+            lines.push(`Next: set ${prefix}_CLIENT_ID and ${prefix}_CLIENT_SECRET, then run create-authenik8-app doctor.`);
+        }
+        else {
+            lines.push("Next: commit the workflow and let its Authenik8 checks run on a pull request.");
+        }
+    }
+    lines.push("");
+    return lines.join("\n");
+}
+//# sourceMappingURL=output.js.map

package/dist/src/commands/add/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../../../src/commands/add/output.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,UAAU,OAAO;IACrB,OAAO;;;;;;;;;;;;;;;;CAgBR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,MAAM,KAAK,GAAG,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;IACnD,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CACR,KAAK,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,WAAW,EAAE,EACjD,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,aAAa,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpE,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,uDAAuD,EAAE,EAAE,CAAC,CAAC;IAC5E,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAiB;IAC/C,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,mBAAmB,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE;QACrC,YAAY,MAAM,CAAC,OAAO,EAAE;QAC5B,EAAE;KACH,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,uDAAuD,EAAE,EAAE,CAAC,CAAC;QACxE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,OAAO,CAAC,MAAM,+CAA+C,CAAC,CAAC;IAC/F,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,wBAAwB,MAAM,CAAC,OAAO,CAAC,MAAM,WAAW,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACpD,KAAK,CAAC,IAAI,CACR,aAAa,MAAM,kBAAkB,MAAM,uDAAuD,CACnG,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,+EAA+E,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/src/commands/add/plan.d.ts

@@ -0,0 +1,6 @@
+import { type OAuthProvider } from "../../lib/oauth.js";
+import type { AddContext, PlannedFileChange } from "./types.js";
+export declare class AddRecipeError extends Error {
+}
+export declare function planOAuthProvider(context: AddContext, provider: OAuthProvider): Promise<PlannedFileChange[]>;
+//# sourceMappingURL=plan.d.ts.map

package/dist/src/commands/add/plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../../../src/commands/add/plan.ts"],"names":[],"mappings":"AAGA,OAAO,EAKL,KAAK,aAAa,EACnB,MAAM,oBAAoB,CAAC;AAS5B,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAIhE,qBAAa,cAAe,SAAQ,KAAK;CAAG;AAkG5C,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,UAAU,EACnB,QAAQ,EAAE,aAAa,GACtB,OAAO,CAAC,iBAAiB,EAAE,CAAC,CA8C9B"}

package/dist/src/commands/add/plan.js

@@ -0,0 +1,93 @@
+import path from "node:path";
+import fs from "fs-extra";
+import { ensureOAuthEnvironment, oauthProviders, supportedOAuthProviders, } from "../../lib/oauth.js";
+import { expressOAuthFiles, renderExpressOAuthFiles, } from "../../lib/expressOAuth.js";
+import { PROJECT_MANIFEST_FILENAME, projectManifestSchema, } from "../../lib/projectManifest.js";
+const fullstackProviderFile = "apps/web/src/auth/providers.ts";
+export class AddRecipeError extends Error {
+}
+async function requiredSource(context, relativePath) {
+    const filename = path.join(context.rootDir, relativePath);
+    if (!(await fs.pathExists(filename))) {
+        throw new AddRecipeError(`Required generated file is missing: ${relativePath}`);
+    }
+    return fs.readFile(filename, "utf8");
+}
+function addChange(changes, relativePath, before, after, sensitive = false) {
+    if (before !== after) {
+        changes.push({ relativePath, before, after, ...(sensitive ? { sensitive: true } : {}) });
+    }
+}
+function sameProviders(left, right) {
+    return left.length === right.length && left.every((provider, index) => provider === right[index]);
+}
+function nextProviders(current, added) {
+    const enabled = new Set([...current, added]);
+    return oauthProviders.filter((provider) => enabled.has(provider));
+}
+function renderFullstackProviderSource(source, manifestProviders, providers) {
+    const pattern = /(export const enabledOAuthProviders[^=]*=\s*)(\[[^;]*\])/gs;
+    const matches = [...source.matchAll(pattern)];
+    if (matches.length !== 1) {
+        throw new AddRecipeError(`${fullstackProviderFile} does not contain one recognizable provider registry; refusing to guess.`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(matches[0]?.[2] ?? "");
+    }
+    catch {
+        throw new AddRecipeError(`${fullstackProviderFile} contains an invalid provider registry.`);
+    }
+    const actual = Array.isArray(parsed)
+        ? supportedOAuthProviders(parsed.filter((value) => typeof value === "string"))
+        : [];
+    if (!Array.isArray(parsed) || actual.length !== parsed.length || !sameProviders(actual, manifestProviders)) {
+        throw new AddRecipeError(`${fullstackProviderFile} has drifted from authenik8.json; run doctor and reconcile it before adding auth features.`);
+    }
+    return source.replace(pattern, `$1${JSON.stringify(providers)}`);
+}
+async function planExpressSource(context, currentProviders, providers, changes) {
+    const current = renderExpressOAuthFiles(currentProviders);
+    const next = renderExpressOAuthFiles(providers);
+    for (const relativePath of Object.values(expressOAuthFiles)) {
+        const before = await requiredSource(context, relativePath);
+        if (before !== current[relativePath]) {
+            throw new AddRecipeError(`${relativePath} has local changes. The recipe will not overwrite modified auth code; integrate the provider manually or restore the generated file.`);
+        }
+        addChange(changes, relativePath, before, next[relativePath]);
+    }
+}
+async function planEnvironment(context, provider, preset, changes) {
+    for (const relativePath of [".env.example", ".env"]) {
+        const before = await requiredSource(context, relativePath);
+        const after = ensureOAuthEnvironment(before, provider, preset);
+        addChange(changes, relativePath, before, after, relativePath === ".env");
+    }
+}
+export async function planOAuthProvider(context, provider) {
+    const { manifest } = context;
+    if (manifest.preset !== "auth-oauth" && manifest.preset !== "fullstack") {
+        throw new AddRecipeError(`oauth-${provider} supports auth-oauth and fullstack projects; this project uses ${manifest.preset}.`);
+    }
+    const currentProviders = supportedOAuthProviders(manifest.features.oauthProviders);
+    const providers = nextProviders(currentProviders, provider);
+    const changes = [];
+    if (manifest.preset === "auth-oauth") {
+        await planExpressSource(context, currentProviders, providers, changes);
+    }
+    else {
+        const before = await requiredSource(context, fullstackProviderFile);
+        addChange(changes, fullstackProviderFile, before, renderFullstackProviderSource(before, currentProviders, providers));
+    }
+    await planEnvironment(context, provider, manifest.preset === "fullstack" ? "fullstack" : "express", changes);
+    if (!sameProviders(currentProviders, providers)) {
+        const before = await requiredSource(context, PROJECT_MANIFEST_FILENAME);
+        const updated = projectManifestSchema.parse({
+            ...manifest,
+            features: { ...manifest.features, oauthProviders: providers },
+        });
+        addChange(changes, PROJECT_MANIFEST_FILENAME, before, `${JSON.stringify(updated, null, 2)}\n`);
+    }
+    return changes;
+}
+//# sourceMappingURL=plan.js.map

package/dist/src/commands/add/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../../src/commands/add/plan.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,UAAU,CAAC;AAE1B,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,uBAAuB,GAGxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,8BAA8B,CAAC;AAGtC,MAAM,qBAAqB,GAAG,gCAAgC,CAAC;AAE/D,MAAM,OAAO,cAAe,SAAQ,KAAK;CAAG;AAE5C,KAAK,UAAU,cAAc,CAAC,OAAmB,EAAE,YAAoB;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,cAAc,CAAC,uCAAuC,YAAY,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,SAAS,CAChB,OAA4B,EAC5B,YAAoB,EACpB,MAAc,EACd,KAAa,EACb,SAAS,GAAG,KAAK;IAEjB,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAA8B,EAAE,KAA+B;IACpF,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,SAAS,aAAa,CACpB,OAAiC,EACjC,KAAoB;IAEpB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAC7C,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,6BAA6B,CACpC,MAAc,EACd,iBAA2C,EAC3C,SAAmC;IAEnC,MAAM,OAAO,GAAG,4DAA4D,CAAC;IAC7E,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,cAAc,CACtB,GAAG,qBAAqB,0EAA0E,CACnG,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,GAAG,qBAAqB,yCAAyC,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;QAC/F,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;QAC3G,MAAM,IAAI,cAAc,CACtB,GAAG,qBAAqB,4FAA4F,CACrH,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,OAAmB,EACnB,gBAA0C,EAC1C,SAAmC,EACnC,OAA4B;IAE5B,MAAM,OAAO,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAEhD,KAAK,MAAM,YAAY,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC3D,IAAI,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,cAAc,CACtB,GAAG,YAAY,sIAAsI,CACtJ,CAAC;QACJ,CAAC;QACD,SAAS,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,OAAmB,EACnB,QAAuB,EACvB,MAA8B,EAC9B,OAA4B;IAE5B,KAAK,MAAM,YAAY,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC/D,SAAS,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,KAAK,MAAM,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAmB,EACnB,QAAuB;IAEvB,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC7B,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QACxE,MAAM,IAAI,cAAc,CACtB,SAAS,QAAQ,kEAAkE,QAAQ,CAAC,MAAM,GAAG,CACtG,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,aAAa,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAwB,EAAE,CAAC;IAExC,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QACrC,MAAM,iBAAiB,CAAC,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;QACpE,SAAS,CACP,OAAO,EACP,qBAAqB,EACrB,MAAM,EACN,6BAA6B,CAAC,MAAM,EAAE,gBAAgB,EAAE,SAAS,CAAC,CACnE,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,CACnB,OAAO,EACP,QAAQ,EACR,QAAQ,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EACzD,OAAO,CACR,CAAC;IAEF,IAAI,CAAC,aAAa,CAAC,gBAAgB,EAAE,SAAS,CAAC,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;QACxE,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC;YAC1C,GAAG,QAAQ;YACX,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE;SAC9D,CAAC,CAAC;QACH,SAAS,CACP,OAAO,EACP,yBAAyB,EACzB,MAAM,EACN,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CACxC,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/src/commands/add/registry.d.ts

@@ -0,0 +1,4 @@
+import type { AddRecipe } from "./types.js";
+export declare const addRecipes: readonly AddRecipe[];
+export declare function findAddRecipe(name: string): AddRecipe | undefined;
+//# sourceMappingURL=registry.d.ts.map

package/dist/src/commands/add/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../src/commands/add/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAiC5C,eAAO,MAAM,UAAU,EAAE,SAAS,SAAS,EAIzC,CAAC;AAEH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAEjE"}

package/dist/src/commands/add/registry.js

@@ -0,0 +1,37 @@
+import { planOAuthProvider } from "./plan.js";
+import { planGithubCi } from "./ci.js";
+const googleRecipe = Object.freeze({
+    id: "oauth-google",
+    aliases: Object.freeze(["google"]),
+    description: "Enable Google OAuth across the generated provider registry and environment",
+    provider: "google",
+    category: "oauth",
+    supportedPresets: Object.freeze(["auth-oauth", "fullstack"]),
+    plan: (context) => planOAuthProvider(context, "google"),
+});
+const githubRecipe = Object.freeze({
+    id: "oauth-github",
+    aliases: Object.freeze(["github"]),
+    description: "Enable GitHub OAuth across the generated provider registry and environment",
+    provider: "github",
+    category: "oauth",
+    supportedPresets: Object.freeze(["auth-oauth", "fullstack"]),
+    plan: (context) => planOAuthProvider(context, "github"),
+});
+const githubCiRecipe = Object.freeze({
+    id: "ci-github",
+    aliases: Object.freeze(["github-ci"]),
+    description: "Add a pinned GitHub Actions auth-boundary and upgrade-policy gate",
+    category: "ci",
+    supportedPresets: Object.freeze(["base", "auth", "auth-oauth", "fullstack"]),
+    plan: planGithubCi,
+});
+export const addRecipes = Object.freeze([
+    googleRecipe,
+    githubRecipe,
+    githubCiRecipe,
+]);
+export function findAddRecipe(name) {
+    return addRecipes.find((recipe) => recipe.id === name || recipe.aliases.includes(name));
+}
+//# sourceMappingURL=registry.js.map

package/dist/src/commands/add/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../../src/commands/add/registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,cAAc;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClC,WAAW,EAAE,4EAA4E;IACzF,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,OAAO;IACjB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IAC5D,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC;CACpC,CAAC,CAAC;AAEzB,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,cAAc;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC;IAClC,WAAW,EAAE,4EAA4E;IACzF,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,OAAO;IACjB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IAC5D,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC;CACpC,CAAC,CAAC;AAEzB,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,WAAW;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC;IACrC,WAAW,EAAE,mEAAmE;IAChF,QAAQ,EAAE,IAAI;IACd,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IAC5E,IAAI,EAAE,YAAY;CACC,CAAC,CAAC;AAEvB,MAAM,CAAC,MAAM,UAAU,GAAyB,MAAM,CAAC,MAAM,CAAC;IAC5D,YAAY;IACZ,YAAY;IACZ,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1F,CAAC"}

package/dist/src/commands/add/types.d.ts

@@ -0,0 +1,37 @@
+import type { AuthMode } from "../../lib/types.js";
+import type { OAuthProvider } from "../../lib/oauth.js";
+import type { ProjectManifest } from "../../lib/projectManifest.js";
+export type AddRecipeId = `oauth-${OAuthProvider}` | "ci-github";
+export type PlannedFileChange = {
+    relativePath: string;
+    before: string | null;
+    after: string;
+    sensitive?: boolean;
+};
+export type AddContext = {
+    rootDir: string;
+    manifest: ProjectManifest;
+};
+export type AddRecipe = {
+    id: AddRecipeId;
+    aliases: readonly string[];
+    description: string;
+    provider?: OAuthProvider;
+    category: "oauth" | "ci";
+    supportedPresets: readonly AuthMode[];
+    plan(context: AddContext): Promise<PlannedFileChange[]>;
+};
+export type AddOptions = {
+    recipeName?: string;
+    directory: string;
+    dryRun: boolean;
+    list: boolean;
+    help: boolean;
+};
+export type AddResult = {
+    recipe: AddRecipe;
+    rootDir: string;
+    changes: PlannedFileChange[];
+    status: "applied" | "preview" | "unchanged";
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/src/commands/add/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/commands/add/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEpE,MAAM,MAAM,WAAW,GAAG,SAAS,aAAa,EAAE,GAAG,WAAW,CAAC;AAEjE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,eAAe,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,WAAW,CAAC;IAChB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB,gBAAgB,EAAE,SAAS,QAAQ,EAAE,CAAC;IACtC,IAAI,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;CACzD,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;CAC7C,CAAC"}

package/dist/src/commands/add/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/commands/add/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/commands/add/types.ts"],"names":[],"mappings":""}

package/dist/src/commands/doctor/checks.d.ts

@@ -0,0 +1,3 @@
+import type { DoctorCheck, DoctorContext } from "./types.js";
+export declare function runStaticChecks(context: DoctorContext, nodeVersion?: string, allowMissingCore?: boolean): Promise<DoctorCheck[]>;
+//# sourceMappingURL=checks.d.ts.map

package/dist/src/commands/doctor/checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../../../../src/commands/doctor/checks.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,WAAW,EACX,aAAa,EAEd,MAAM,YAAY,CAAC;AAkbpB,wBAAsB,eAAe,CACnC,OAAO,EAAE,aAAa,EACtB,WAAW,SAAwB,EACnC,gBAAgB,UAAQ,GACvB,OAAO,CAAC,WAAW,EAAE,CAAC,CAmDxB"}