create-authenik8-app 2.4.14 → 2.4.15

package/dist/src/commands/doctor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/commands/doctor/index.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAQjE,MAAM,OAAO,gBAAiB,SAAQ,KAAK;CAAG;AAI9C,MAAM,UAAU,oBAAoB,CAClC,IAAuB,EACvB,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAEnB,IAAI,SAA6B,CAAC;IAClC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,IAAI,IAAI,GAAG,KAAK,CAAC;IAEjB,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,QAAQ,KAAK,QAAQ;YAAE,IAAI,GAAG,IAAI,CAAC;aAClC,IAAI,QAAQ,KAAK,iBAAiB;YAAE,YAAY,GAAG,IAAI,CAAC;aACxD,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI;YAAE,IAAI,GAAG,IAAI,CAAC;aAC5D,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;aAC/F,IAAI,SAAS;YAAE,MAAM,IAAI,gBAAgB,CAAC,+CAA+C,CAAC,CAAC;;YAC3F,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,IAAI,GAAG,CAAC;QAC9C,IAAI;QACJ,YAAY;QACZ,IAAI;KACL,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,MAA6B,EAC7B,OAAe,EACf,GAAY;IAEZ,OAAO;QACL,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,OAAO;QACd,MAAM;QACN,OAAO;QACP,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAsB,EACtB,UAAgC,EAAE;IAElC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,OAAO,EACP,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,gBAAgB,CACzB,CAAC;IAEF,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAC,CAAC;IACxE,CAAC;SAAM,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,+CAA+C,CAAC,CAAC,CAAC;IACrF,CAAC;SAAM,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,WAAW,EAAE,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,uDAAuD,CAAC,CAAC,CAAC;IAC7F,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,KAAK,WAAW;mBAC9C,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YACjE,IACE,CAAC,QAAQ,CAAC,IAAI;mBACX,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;mBAChC,QAAQ,CAAC,IAAI,GAAG,CAAC;mBACjB,QAAQ,CAAC,IAAI,GAAG,MAAM,EACzB,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,0BAA0B,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAChG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,CAAC,IAAI,CAAC,YAAY,CACtB,MAAM,EACN,uBAAuB,MAAM,EAAE,EAC/B,wDAAwD,CACzD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QAC9D,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QAChE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;KAC/D,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC/E,CAAC"}

package/dist/src/commands/doctor/output.d.ts

@@ -0,0 +1,4 @@
+import type { DoctorReport } from "./types.js";
+export declare function formatDoctorReport(report: DoctorReport, json: boolean): string;
+export declare function doctorHelp(): string;
+//# sourceMappingURL=output.d.ts.map

package/dist/src/commands/doctor/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../../../src/commands/doctor/output.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAe,YAAY,EAAE,MAAM,YAAY,CAAC;AAe5D,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAsB9E;AAED,wBAAgB,UAAU,IAAI,MAAM,CAiBnC"}

package/dist/src/commands/doctor/output.js

@@ -0,0 +1,53 @@
+import chalk from "chalk";
+const statusSymbol = {
+    pass: "✓",
+    warn: "!",
+    fail: "×",
+};
+function colorStatus(check) {
+    const symbol = statusSymbol[check.status];
+    if (check.status === "pass")
+        return chalk.green(symbol);
+    if (check.status === "warn")
+        return chalk.yellow(symbol);
+    return chalk.red(symbol);
+}
+export function formatDoctorReport(report, json) {
+    if (json)
+        return `${JSON.stringify(report, null, 2)}\n`;
+    const lines = [
+        chalk.bold("\nAuthenik8 doctor"),
+        chalk.dim(`${report.preset} · ${report.rootDir}`),
+        "",
+    ];
+    for (const item of report.checks) {
+        lines.push(`${colorStatus(item)} ${chalk.bold(item.label)}: ${item.message}`);
+        if (item.fix)
+            lines.push(`  ${chalk.dim(`Fix: ${item.fix}`)}`);
+    }
+    lines.push("", report.summary.failed > 0
+        ? chalk.red(`${report.summary.failed} failed, ${report.summary.warnings} warnings, ${report.summary.passed} passed`)
+        : report.summary.warnings > 0
+            ? chalk.yellow(`${report.summary.passed} passed with ${report.summary.warnings} warnings`)
+            : chalk.green(`All ${report.summary.passed} checks passed`), "");
+    return lines.join("\n");
+}
+export function doctorHelp() {
+    return `
+AUTHENIK8 DOCTOR
+Validate a generated project's auth configuration and local services
+
+Usage:
+  create-authenik8-app doctor [directory] [options]
+
+Options:
+  --json             Print a machine-readable report
+  --skip-services    Skip live Redis checks (useful in CI)
+  -h, --help         Show this help message
+
+Examples:
+  npx create-authenik8-app doctor
+  npx create-authenik8-app doctor ./my-app --json
+`;
+}
+//# sourceMappingURL=output.js.map

package/dist/src/commands/doctor/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../../../src/commands/doctor/output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B,MAAM,YAAY,GAA0C;IAC1D,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;IACT,IAAI,EAAE,GAAG;CACV,CAAC;AAEF,SAAS,WAAW,CAAC,KAAkB;IACrC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAoB,EAAE,IAAa;IACpE,IAAI,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAExD,MAAM,KAAK,GAAG;QACZ,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC;QAChC,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACjD,EAAE;KACH,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9E,IAAI,IAAI,CAAC,GAAG;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QACvB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,YAAY,MAAM,CAAC,OAAO,CAAC,QAAQ,cAAc,MAAM,CAAC,OAAO,CAAC,MAAM,SAAS,CAAC;QACpH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC;YAC3B,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,gBAAgB,MAAM,CAAC,OAAO,CAAC,QAAQ,WAAW,CAAC;YAC1F,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,gBAAgB,CAAC,EAC/D,EAAE,CACH,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO;;;;;;;;;;;;;;;CAeR,CAAC;AACF,CAAC"}

package/dist/src/commands/doctor/postGeneration.d.ts

@@ -0,0 +1,7 @@
+export type PostGenerationDoctorResult = {
+    passed: number;
+    warnings: number;
+    warningLabels: readonly string[];
+};
+export declare function runPostGenerationDoctor(rootDir: string, dependenciesInstalled: boolean): Promise<PostGenerationDoctorResult>;
+//# sourceMappingURL=postGeneration.d.ts.map

package/dist/src/commands/doctor/postGeneration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postGeneration.d.ts","sourceRoot":"","sources":["../../../../src/commands/doctor/postGeneration.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,0BAA0B,GAAG;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC,CAAC;AAMF,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,MAAM,EACf,qBAAqB,EAAE,OAAO,GAC7B,OAAO,CAAC,0BAA0B,CAAC,CAoBrC"}

package/dist/src/commands/doctor/postGeneration.js

@@ -0,0 +1,22 @@
+import { runDoctor } from "./index.js";
+function withoutServiceProbe(checks) {
+    return checks.filter((check) => check.id !== "service.redis");
+}
+export async function runPostGenerationDoctor(rootDir, dependenciesInstalled) {
+    const report = await runDoctor({ directory: rootDir, json: false, skipServices: true }, { allowMissingCore: !dependenciesInstalled });
+    const checks = withoutServiceProbe(report.checks);
+    const failures = checks.filter((check) => check.status === "fail");
+    if (failures.length > 0) {
+        const details = failures
+            .map((check) => `${check.label}: ${check.message}`)
+            .join("; ");
+        throw new Error(`Generated auth validation failed: ${details}`);
+    }
+    const warnings = checks.filter((check) => check.status === "warn");
+    return {
+        passed: checks.filter((check) => check.status === "pass").length,
+        warnings: warnings.length,
+        warningLabels: warnings.map((check) => check.label),
+    };
+}
+//# sourceMappingURL=postGeneration.js.map

package/dist/src/commands/doctor/postGeneration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postGeneration.js","sourceRoot":"","sources":["../../../../src/commands/doctor/postGeneration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AASvC,SAAS,mBAAmB,CAAC,MAA8B;IACzD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,eAAe,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAe,EACf,qBAA8B;IAE9B,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,EACvD,EAAE,gBAAgB,EAAE,CAAC,qBAAqB,EAAE,CAC7C,CAAC;IACF,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACnE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,QAAQ;aACrB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;aAClD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,qCAAqC,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACnE,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QAChE,QAAQ,EAAE,QAAQ,CAAC,MAAM;QACzB,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;KACpD,CAAC;AACJ,CAAC"}

package/dist/src/commands/doctor/services.d.ts

@@ -0,0 +1,5 @@
+import type { EnvironmentValues, RedisEndpoint, RedisProbe } from "./types.js";
+export declare function redisProbePayload(endpoint: RedisEndpoint): string;
+export declare const probeRedis: RedisProbe;
+export declare function redisEndpointFromEnv(env: EnvironmentValues, fullstack: boolean): RedisEndpoint;
+//# sourceMappingURL=services.d.ts.map

package/dist/src/commands/doctor/services.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"services.d.ts","sourceRoot":"","sources":["../../../../src/commands/doctor/services.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAQ/E,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,aAAa,GAAG,MAAM,CASjE;AAED,eAAO,MAAM,UAAU,EAAE,UAgCvB,CAAC;AAEH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,iBAAiB,EACtB,SAAS,EAAE,OAAO,GACjB,aAAa,CA2Bf"}

package/dist/src/commands/doctor/services.js

@@ -0,0 +1,80 @@
+import net from "node:net";
+import tls from "node:tls";
+function redisCommand(parts) {
+    return `*${parts.length}\r\n${parts
+        .map((part) => `$${Buffer.byteLength(part)}\r\n${part}\r\n`)
+        .join("")}`;
+}
+export function redisProbePayload(endpoint) {
+    const commands = [];
+    if (endpoint.password) {
+        commands.push(redisCommand(endpoint.username
+            ? ["AUTH", endpoint.username, endpoint.password]
+            : ["AUTH", endpoint.password]));
+    }
+    commands.push(redisCommand(["PING"]));
+    return commands.join("");
+}
+export const probeRedis = (endpoint) => new Promise((resolve, reject) => {
+    let settled = false;
+    let response = "";
+    const connectionOptions = { host: endpoint.host, port: endpoint.port };
+    const socket = endpoint.tls
+        ? tls.connect({ ...connectionOptions, servername: net.isIP(endpoint.host) ? undefined : endpoint.host })
+        : net.createConnection(connectionOptions);
+    const finish = (error) => {
+        if (settled)
+            return;
+        settled = true;
+        socket.destroy();
+        if (error)
+            reject(error);
+        else
+            resolve();
+    };
+    socket.setTimeout(2_000);
+    socket.once("error", (error) => finish(error));
+    socket.once("timeout", () => finish(new Error("connection timed out")));
+    socket.once("close", () => finish(new Error("connection closed before Redis answered PING")));
+    socket.on("data", (chunk) => {
+        response += chunk.toString("utf8");
+        if (response.includes("-")) {
+            const redisError = response.split("\r\n").find((line) => line.startsWith("-"));
+            if (redisError)
+                finish(new Error(redisError.slice(1)));
+            return;
+        }
+        if (response.includes("+PONG\r\n"))
+            finish();
+    });
+    socket.once(endpoint.tls ? "secureConnect" : "connect", () => {
+        socket.write(redisProbePayload(endpoint));
+    });
+});
+export function redisEndpointFromEnv(env, fullstack) {
+    if (fullstack) {
+        const source = env.REDIS_URL?.trim() || "memory://";
+        if (source === "memory://") {
+            throw new Error("memory Redis does not have a network endpoint");
+        }
+        const url = new URL(source);
+        if (url.protocol !== "redis:" && url.protocol !== "rediss:") {
+            throw new Error("REDIS_URL must use redis:// or rediss://");
+        }
+        return {
+            host: url.hostname,
+            port: url.port ? Number.parseInt(url.port, 10) : 6379,
+            tls: url.protocol === "rediss:",
+            ...(url.username ? { username: decodeURIComponent(url.username) } : {}),
+            ...(url.password ? { password: decodeURIComponent(url.password) } : {}),
+        };
+    }
+    const port = Number(env.REDIS_PORT?.trim() || "6379");
+    return {
+        host: env.REDIS_HOST?.trim() || "127.0.0.1",
+        port,
+        tls: false,
+        ...(env.REDIS_PASSWORD?.trim() ? { password: env.REDIS_PASSWORD.trim() } : {}),
+    };
+}
+//# sourceMappingURL=services.js.map

package/dist/src/commands/doctor/services.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"services.js","sourceRoot":"","sources":["../../../../src/commands/doctor/services.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,GAAG,MAAM,UAAU,CAAC;AAI3B,SAAS,YAAY,CAAC,KAAe;IACnC,OAAO,IAAI,KAAK,CAAC,MAAM,OAAO,KAAK;SAChC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC;SAC3D,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAuB;IACvD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ;YAC1C,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;YAChD,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtC,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAe,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAClF,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,MAAM,iBAAiB,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;IACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG;QACzB,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,iBAAiB,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;IAE5C,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;QAC/B,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,KAAK;YAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;YACpB,OAAO,EAAE,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACzB,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/C,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC,CAAC,CAAC;IAC9F,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAC1B,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/E,IAAI,UAAU;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,MAAM,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,UAAU,oBAAoB,CAClC,GAAsB,EACtB,SAAkB;IAElB,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,WAAW,CAAC;QACpD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,QAAQ;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;YACrD,GAAG,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS;YAC/B,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,MAAM,CAAC,CAAC;IACtD,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,WAAW;QAC3C,IAAI;QACJ,GAAG,EAAE,KAAK;QACV,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC;AACJ,CAAC"}

package/dist/src/commands/doctor/types.d.ts

@@ -0,0 +1,69 @@
+import type { OAuthProvider } from "../../lib/oauth.js";
+import type { ProjectManifestReadResult } from "../../lib/projectManifest.js";
+import type { AuthMode, Database } from "../../lib/types.js";
+export type DoctorPreset = AuthMode;
+export type DoctorStatus = "pass" | "warn" | "fail";
+export type DoctorPackageManager = "npm" | "pnpm" | "bun";
+export type EnvironmentValues = Record<string, string | undefined>;
+export type PackageJson = {
+    name?: string;
+    version?: string;
+    main?: string;
+    exports?: unknown;
+    workspaces?: string[];
+    trustedDependencies?: string[];
+    scripts?: Record<string, string>;
+    dependencies?: Record<string, string>;
+    devDependencies?: Record<string, string>;
+};
+export type DoctorContext = {
+    rootDir: string;
+    appDir: string;
+    preset: DoctorPreset;
+    packageManager: DoctorPackageManager;
+    packageJson: PackageJson;
+    appPackageJson: PackageJson;
+    env: EnvironmentValues;
+    envParseError?: string;
+    oauthProviders: OAuthProvider[];
+    usesPrisma: boolean;
+    databaseProvider?: Database;
+    manifest: ProjectManifestReadResult;
+};
+export type DoctorCheck = {
+    id: string;
+    label: string;
+    status: DoctorStatus;
+    message: string;
+    fix?: string;
+};
+export type DoctorSummary = {
+    passed: number;
+    warnings: number;
+    failed: number;
+};
+export type DoctorReport = {
+    rootDir: string;
+    preset: DoctorPreset;
+    checks: DoctorCheck[];
+    summary: DoctorSummary;
+};
+export type RedisEndpoint = {
+    host: string;
+    port: number;
+    tls: boolean;
+    username?: string;
+    password?: string;
+};
+export type RedisProbe = (endpoint: RedisEndpoint) => Promise<void>;
+export type DoctorOptions = {
+    directory: string;
+    json: boolean;
+    skipServices: boolean;
+};
+export type DoctorRuntimeOptions = {
+    nodeVersion?: string;
+    redisProbe?: RedisProbe;
+    allowMissingCore?: boolean;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/src/commands/doctor/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/commands/doctor/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE7D,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;AACpC,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AACpD,MAAM,MAAM,oBAAoB,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;AAC1D,MAAM,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAEnE,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,YAAY,CAAC;IACrB,cAAc,EAAE,oBAAoB,CAAC;IACrC,WAAW,EAAE,WAAW,CAAC;IACzB,cAAc,EAAE,WAAW,CAAC;IAC5B,GAAG,EAAE,iBAAiB,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,CAAC,EAAE,QAAQ,CAAC;IAC5B,QAAQ,EAAE,yBAAyB,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,OAAO,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpE,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,YAAY,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC"}

package/dist/src/commands/doctor/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/commands/doctor/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/commands/doctor/types.ts"],"names":[],"mappings":""}

package/dist/src/commands/upgrade/context.d.ts

@@ -0,0 +1,5 @@
+import type { UpgradeContext } from "./types.js";
+export declare class UpgradeProjectError extends Error {
+}
+export declare function createUpgradeContext(directory: string): Promise<UpgradeContext>;
+//# sourceMappingURL=context.d.ts.map

package/dist/src/commands/upgrade/context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../../src/commands/upgrade/context.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAOjD,qBAAa,mBAAoB,SAAQ,KAAK;CAAG;AAMjD,wBAAsB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CA+CrF"}

package/dist/src/commands/upgrade/context.js

@@ -0,0 +1,57 @@
+import path from "node:path";
+import fs from "fs-extra";
+import { readProjectManifest } from "../../lib/projectManifest.js";
+import { currentToolRelease, templateEngineVersion } from "../../lib/release.js";
+export class UpgradeProjectError extends Error {
+}
+function dependencyVersion(packageJson, name) {
+    return packageJson.dependencies?.[name] ?? packageJson.devDependencies?.[name];
+}
+export async function createUpgradeContext(directory) {
+    const rootDir = path.resolve(directory);
+    const manifestResult = await readProjectManifest(rootDir);
+    if (manifestResult.status === "missing") {
+        throw new UpgradeProjectError("authenik8.json is required for version-aware upgrades. Legacy projects must be migrated explicitly.");
+    }
+    if (manifestResult.status === "invalid")
+        throw new UpgradeProjectError(manifestResult.message);
+    const manifest = manifestResult.manifest;
+    const appDir = manifest.preset === "fullstack" ? path.join(rootDir, "apps/api") : rootDir;
+    const packagePath = path.join(appDir, "package.json");
+    if (!(await fs.pathExists(packagePath))) {
+        throw new UpgradeProjectError(`Required package file is missing: ${path.relative(rootDir, packagePath)}`);
+    }
+    const packageJson = await fs.readJson(packagePath);
+    const declaredEngineVersion = dependencyVersion(packageJson, "authenik8-core")?.trim();
+    if (!declaredEngineVersion) {
+        throw new UpgradeProjectError("The generated application does not declare authenik8-core.");
+    }
+    const installedCandidates = [
+        path.join(appDir, "node_modules/authenik8-core/package.json"),
+        path.join(rootDir, "node_modules/authenik8-core/package.json"),
+    ];
+    let installedEngineVersion;
+    for (const candidate of installedCandidates) {
+        if (!(await fs.pathExists(candidate)))
+            continue;
+        try {
+            installedEngineVersion = (await fs.readJson(candidate)).version?.trim();
+        }
+        catch {
+            throw new UpgradeProjectError("Installed authenik8-core package metadata is unreadable.");
+        }
+        break;
+    }
+    const release = currentToolRelease();
+    return {
+        rootDir,
+        appDir,
+        manifest,
+        packageManager: manifest.packageManager,
+        declaredEngineVersion,
+        ...(installedEngineVersion ? { installedEngineVersion } : {}),
+        targetGeneratorVersion: release.generatorVersion,
+        targetEngineVersion: templateEngineVersion(manifest.preset),
+    };
+}
+//# sourceMappingURL=context.js.map

package/dist/src/commands/upgrade/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../../src/commands/upgrade/context.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,UAAU,CAAC;AAE1B,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAQjF,MAAM,OAAO,mBAAoB,SAAQ,KAAK;CAAG;AAEjD,SAAS,iBAAiB,CAAC,WAAwB,EAAE,IAAY;IAC/D,OAAO,WAAW,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,eAAe,EAAE,CAAC,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,mBAAmB,CAC3B,qGAAqG,CACtG,CAAC;IACJ,CAAC;IACD,IAAI,cAAc,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,mBAAmB,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC;IACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC1F,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,mBAAmB,CAAC,qCAAqC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAgB,CAAC;IAClE,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC;IACvF,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,MAAM,IAAI,mBAAmB,CAAC,4DAA4D,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,mBAAmB,GAAG;QAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,0CAA0C,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,0CAA0C,CAAC;KAC/D,CAAC;IACF,IAAI,sBAA0C,CAAC;IAC/C,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;QAC5C,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAAE,SAAS;QAChD,IAAI,CAAC;YACH,sBAAsB,GAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAA0B,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;QACpG,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,mBAAmB,CAAC,0DAA0D,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM;IACR,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,OAAO;QACL,OAAO;QACP,MAAM;QACN,QAAQ;QACR,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,qBAAqB;QACrB,GAAG,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,sBAAsB,EAAE,OAAO,CAAC,gBAAgB;QAChD,mBAAmB,EAAE,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC;KAC5D,CAAC;AACJ,CAAC"}

package/dist/src/commands/upgrade/index.d.ts

@@ -0,0 +1,7 @@
+import type { UpgradeOptions, UpgradePlan } from "./types.js";
+export declare class UpgradeUsageError extends Error {
+}
+export declare function parseUpgradeArguments(args: readonly string[], cwd?: string): UpgradeOptions;
+export declare function runUpgrade(options: UpgradeOptions): Promise<UpgradePlan>;
+export declare function upgradeCheckExitCode(plan: UpgradePlan): 0 | 1;
+//# sourceMappingURL=index.d.ts.map

package/dist/src/commands/upgrade/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/upgrade/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9D,qBAAa,iBAAkB,SAAQ,KAAK;CAAG;AAE/C,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,SAAgB,GAClB,cAAc,CAiBhB;AAED,wBAAsB,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,CAAC,CAE9E;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,WAAW,GAAG,CAAC,GAAG,CAAC,CAE7D"}

package/dist/src/commands/upgrade/index.js

@@ -0,0 +1,35 @@
+import path from "node:path";
+import { createUpgradeContext } from "./context.js";
+import { createUpgradePlan } from "./plan.js";
+export class UpgradeUsageError extends Error {
+}
+export function parseUpgradeArguments(args, cwd = process.cwd()) {
+    let directory;
+    let json = false;
+    let check = false;
+    let help = false;
+    for (const argument of args) {
+        if (argument === "--json")
+            json = true;
+        else if (argument === "--check")
+            check = true;
+        else if (argument === "--help" || argument === "-h")
+            help = true;
+        else if (argument.startsWith("-")) {
+            throw new UpgradeUsageError(`Unknown upgrade option: ${argument}`);
+        }
+        else if (directory) {
+            throw new UpgradeUsageError("Upgrade accepts at most one project directory.");
+        }
+        else
+            directory = argument;
+    }
+    return { directory: path.resolve(cwd, directory ?? "."), json, check, help };
+}
+export async function runUpgrade(options) {
+    return createUpgradePlan(await createUpgradeContext(options.directory));
+}
+export function upgradeCheckExitCode(plan) {
+    return plan.status === "current" ? 0 : 1;
+}
+//# sourceMappingURL=index.js.map

package/dist/src/commands/upgrade/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/commands/upgrade/index.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAG9C,MAAM,OAAO,iBAAkB,SAAQ,KAAK;CAAG;AAE/C,MAAM,UAAU,qBAAqB,CACnC,IAAuB,EACvB,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE;IAEnB,IAAI,SAA6B,CAAC;IAClC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,IAAI,GAAG,KAAK,CAAC;IAEjB,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,QAAQ,KAAK,QAAQ;YAAE,IAAI,GAAG,IAAI,CAAC;aAClC,IAAI,QAAQ,KAAK,SAAS;YAAE,KAAK,GAAG,IAAI,CAAC;aACzC,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI;YAAE,IAAI,GAAG,IAAI,CAAC;aAC5D,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,iBAAiB,CAAC,2BAA2B,QAAQ,EAAE,CAAC,CAAC;QACrE,CAAC;aAAM,IAAI,SAAS,EAAE,CAAC;YACrB,MAAM,IAAI,iBAAiB,CAAC,gDAAgD,CAAC,CAAC;QAChF,CAAC;;YAAM,SAAS,GAAG,QAAQ,CAAC;IAC9B,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC/E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAuB;IACtD,OAAO,iBAAiB,CAAC,MAAM,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAiB;IACpD,OAAO,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/src/commands/upgrade/migrations.d.ts

@@ -0,0 +1,4 @@
+import type { UpgradeAction } from "./types.js";
+/** Security-significant engine boundaries that require an explicit human review. */
+export declare function coreMigrationActions(from: string, to: string): UpgradeAction[];
+//# sourceMappingURL=migrations.d.ts.map

package/dist/src/commands/upgrade/migrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../../../src/commands/upgrade/migrations.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,oFAAoF;AACpF,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,aAAa,EAAE,CAkB9E"}

package/dist/src/commands/upgrade/migrations.js

@@ -0,0 +1,22 @@
+import { parseSemanticVersion } from "../../lib/semver.js";
+/** Security-significant engine boundaries that require an explicit human review. */
+export function coreMigrationActions(from, to) {
+    const source = parseSemanticVersion(from);
+    const target = parseSemanticVersion(to);
+    if (!source || !target)
+        return [];
+    if (source.major < 2 && target.major >= 2) {
+        return [{
+                id: "engine.es256-v2",
+                kind: "required",
+                title: "Migrate the identity engine to the v2 security contract",
+                detail: [
+                    "Replace legacy shared-secret JWT configuration with a persisted ES256 P-256 key ring, active kid, issuer, and audience.",
+                    "Also audit asynchronous token verification, purpose-bound claims, Redis-backed OAuth state, and agent identity boundaries before changing the dependency.",
+                ].join(" "),
+                references: ["authenik8-core CHANGELOG.md: 2.0.0", "THREAT_MODEL.md", "AGENT_IDENTITY.md"],
+            }];
+    }
+    return [];
+}
+//# sourceMappingURL=migrations.js.map

package/dist/src/commands/upgrade/migrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../../../src/commands/upgrade/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAG3D,oFAAoF;AACpF,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,EAAU;IAC3D,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAElC,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,OAAO,CAAC;gBACN,EAAE,EAAE,iBAAiB;gBACrB,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,yDAAyD;gBAChE,MAAM,EAAE;oBACN,yHAAyH;oBACzH,2JAA2J;iBAC5J,CAAC,IAAI,CAAC,GAAG,CAAC;gBACX,UAAU,EAAE,CAAC,oCAAoC,EAAE,iBAAiB,EAAE,mBAAmB,CAAC;aAC3F,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/src/commands/upgrade/output.d.ts

@@ -0,0 +1,4 @@
+import type { UpgradePlan } from "./types.js";
+export declare function upgradeHelp(): string;
+export declare function formatUpgradePlan(plan: UpgradePlan, json: boolean): string;
+//# sourceMappingURL=output.d.ts.map

package/dist/src/commands/upgrade/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../../../../src/commands/upgrade/output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAiB,WAAW,EAAE,MAAM,YAAY,CAAC;AAQ7D,wBAAgB,WAAW,IAAI,MAAM,CAkBpC;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,GAAG,MAAM,CAuB1E"}

package/dist/src/commands/upgrade/output.js

@@ -0,0 +1,52 @@
+const actionSymbol = {
+    required: "!",
+    recommended: "-",
+    blocked: "×",
+};
+export function upgradeHelp() {
+    return `
+AUTHENIK8 UPGRADE
+Create a read-only, version-aware upgrade plan for a generated project
+
+Usage:
+  create-authenik8-app upgrade [directory] [options]
+
+Options:
+  --json             Print a stable machine-readable plan
+  --check            Exit non-zero when an upgrade is pending or blocked
+  -h, --help         Show this help message
+
+Examples:
+  npx create-authenik8-app upgrade
+  npx create-authenik8-app upgrade ./my-app --json
+  npx create-authenik8-app upgrade --check --json
+`;
+}
+export function formatUpgradePlan(plan, json) {
+    if (json)
+        return `${JSON.stringify(plan, null, 2)}\n`;
+    const lines = [
+        "",
+        "Authenik8 upgrade plan",
+        `${plan.preset} · ${plan.rootDir}`,
+        "",
+        `Generator  ${plan.versions.generator.project} → ${plan.versions.generator.target}`,
+        `Engine     ${plan.versions.engine.manifest} → ${plan.versions.engine.target}`,
+        `Status     ${plan.status}`,
+        "",
+    ];
+    if (plan.actions.length === 0) {
+        lines.push("No upgrade actions are required.", "");
+        return lines.join("\n");
+    }
+    for (const action of plan.actions) {
+        lines.push(`${actionSymbol[action.kind]} ${action.title}`, `  ${action.detail}`);
+        if (action.command)
+            lines.push(`  Run: ${action.command}`);
+        if (action.references?.length)
+            lines.push(`  Review: ${action.references.join(", ")}`);
+    }
+    lines.push("");
+    return lines.join("\n");
+}
+//# sourceMappingURL=output.js.map

package/dist/src/commands/upgrade/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../../../src/commands/upgrade/output.ts"],"names":[],"mappings":"AAEA,MAAM,YAAY,GAA0C;IAC1D,QAAQ,EAAE,GAAG;IACb,WAAW,EAAE,GAAG;IAChB,OAAO,EAAE,GAAG;CACb,CAAC;AAEF,MAAM,UAAU,WAAW;IACzB,OAAO;;;;;;;;;;;;;;;;CAgBR,CAAC;AACF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAiB,EAAE,IAAa;IAChE,IAAI,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACtD,MAAM,KAAK,GAAG;QACZ,EAAE;QACF,wBAAwB;QACxB,GAAG,IAAI,CAAC,MAAM,MAAM,IAAI,CAAC,OAAO,EAAE;QAClC,EAAE;QACF,cAAc,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE;QACnF,cAAc,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;QAC9E,cAAc,IAAI,CAAC,MAAM,EAAE;QAC3B,EAAE;KACH,CAAC;IACF,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACjF,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,UAAU,EAAE,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/src/commands/upgrade/plan.d.ts

@@ -0,0 +1,3 @@
+import type { UpgradeContext, UpgradePlan } from "./types.js";
+export declare function createUpgradePlan(context: UpgradeContext): UpgradePlan;
+//# sourceMappingURL=plan.d.ts.map

package/dist/src/commands/upgrade/plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../../../src/commands/upgrade/plan.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAEV,cAAc,EACd,WAAW,EAEZ,MAAM,YAAY,CAAC;AAsBpB,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,cAAc,GAAG,WAAW,CA+HtE"}