create-authenik8-app 2.4.14 → 2.4.15

package/dist/src/commands/upgrade/plan.js

@@ -0,0 +1,119 @@
+import { compareSemanticVersions } from "../../lib/semver.js";
+import { coreMigrationActions } from "./migrations.js";
+function installCommand(packageManager) {
+    if (packageManager === "pnpm")
+        return "pnpm install --frozen-lockfile";
+    if (packageManager === "bun")
+        return "bun install --frozen-lockfile";
+    return "npm ci";
+}
+function engineUpgradeCommand(context) {
+    const dependency = `authenik8-core@${context.targetEngineVersion}`;
+    if (context.packageManager === "pnpm")
+        return `pnpm add ${dependency}`;
+    if (context.packageManager === "bun")
+        return `bun add ${dependency}`;
+    if (context.manifest.preset === "fullstack") {
+        return `npm install ${dependency} --workspace @authenik8/api`;
+    }
+    return `npm install ${dependency}`;
+}
+function blockedAction(id, title, detail) {
+    return { id, kind: "blocked", title, detail };
+}
+export function createUpgradePlan(context) {
+    const actions = [];
+    let status = "current";
+    if (context.declaredEngineVersion !== context.manifest.engine.version) {
+        actions.push(blockedAction("engine.manifest-drift", "Reconcile the engine declaration and project manifest", `package.json declares ${context.declaredEngineVersion}, while authenik8.json records ${context.manifest.engine.version}. Doctor must pass before an upgrade is planned.`));
+        status = "blocked";
+    }
+    if (context.installedEngineVersion
+        && context.installedEngineVersion !== context.declaredEngineVersion) {
+        actions.push(blockedAction("engine.install-drift", "Restore a reproducible dependency installation", `Installed authenik8-core ${context.installedEngineVersion} does not match the ${context.declaredEngineVersion} declaration. Restore the lockfile installation before upgrading.`));
+        status = "blocked";
+    }
+    else if (!context.installedEngineVersion) {
+        actions.push({
+            id: "dependencies.install",
+            kind: "recommended",
+            title: "Install the declared dependency graph before validation",
+            detail: "The plan can compare declarations without node_modules, but Doctor must inspect the installed identity engine before an auth change is accepted.",
+            command: installCommand(context.packageManager),
+        });
+    }
+    const generatorOrder = compareSemanticVersions(context.manifest.generatedBy.version, context.targetGeneratorVersion);
+    if (generatorOrder === "invalid") {
+        actions.push(blockedAction("generator.invalid-version", "Use a semantic generator version", `Cannot compare project generator version ${context.manifest.generatedBy.version} with ${context.targetGeneratorVersion}.`));
+        status = "blocked";
+    }
+    else if (generatorOrder === "newer") {
+        actions.push(blockedAction("generator.downgrade", "Use a CLI that is at least as new as the project", `This project was generated by ${context.manifest.generatedBy.version}; the running CLI is ${context.targetGeneratorVersion} and cannot safely plan a downgrade.`));
+        status = "blocked";
+    }
+    else if (generatorOrder === "older") {
+        actions.push({
+            id: "generator.release-review",
+            kind: "required",
+            title: `Review generator changes through ${context.targetGeneratorVersion}`,
+            detail: "Generator upgrades are never inferred as source rewrites. Review the release notes and preview explicit add or migration recipes on a branch.",
+            references: ["create-authenik8-app release notes", "authenik8.json"],
+        });
+        if (status !== "blocked")
+            status = "upgrade-available";
+    }
+    const engineOrder = compareSemanticVersions(context.manifest.engine.version, context.targetEngineVersion);
+    if (engineOrder === "invalid") {
+        actions.push(blockedAction("engine.invalid-version", "Use an exact semantic engine version", `Cannot compare project engine version ${context.manifest.engine.version} with ${context.targetEngineVersion}.`));
+        status = "blocked";
+    }
+    else if (engineOrder === "newer") {
+        actions.push(blockedAction("engine.downgrade", "Use a CLI compatible with the declared identity engine", `The project targets authenik8-core ${context.manifest.engine.version}, newer than this CLI's ${context.targetEngineVersion} template contract.`));
+        status = "blocked";
+    }
+    else if (engineOrder === "older") {
+        actions.push(...coreMigrationActions(context.manifest.engine.version, context.targetEngineVersion));
+        actions.push({
+            id: "engine.upgrade",
+            kind: "required",
+            title: `Upgrade authenik8-core to ${context.targetEngineVersion}`,
+            detail: "Apply this only after reviewing every security-boundary action above. Keep the manifest unchanged until the dependency, generated integration, and Doctor all agree.",
+            command: engineUpgradeCommand(context),
+            references: ["authenik8-core CHANGELOG.md"],
+        });
+        if (status !== "blocked")
+            status = "upgrade-available";
+    }
+    if (status === "upgrade-available") {
+        actions.push({
+            id: "upgrade.verify",
+            kind: "required",
+            title: "Validate the upgraded auth boundary before updating metadata",
+            detail: "Run static and live-service diagnostics, exercise login, refresh rotation, OAuth callbacks, linking, and authorization, then update authenik8.json as the final audited change.",
+            command: `npx create-authenik8-app@${context.targetGeneratorVersion} doctor`,
+            references: ["THREAT_MODEL.md"],
+        });
+    }
+    return {
+        schemaVersion: 1,
+        rootDir: context.rootDir,
+        preset: context.manifest.preset,
+        status,
+        versions: {
+            generator: {
+                project: context.manifest.generatedBy.version,
+                target: context.targetGeneratorVersion,
+            },
+            engine: {
+                manifest: context.manifest.engine.version,
+                declared: context.declaredEngineVersion,
+                ...(context.installedEngineVersion
+                    ? { installed: context.installedEngineVersion }
+                    : {}),
+                target: context.targetEngineVersion,
+            },
+        },
+        actions,
+    };
+}
+//# sourceMappingURL=plan.js.map

package/dist/src/commands/upgrade/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../../src/commands/upgrade/plan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAQvD,SAAS,cAAc,CAAC,cAA8B;IACpD,IAAI,cAAc,KAAK,MAAM;QAAE,OAAO,gCAAgC,CAAC;IACvE,IAAI,cAAc,KAAK,KAAK;QAAE,OAAO,+BAA+B,CAAC;IACrE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAuB;IACnD,MAAM,UAAU,GAAG,kBAAkB,OAAO,CAAC,mBAAmB,EAAE,CAAC;IACnE,IAAI,OAAO,CAAC,cAAc,KAAK,MAAM;QAAE,OAAO,YAAY,UAAU,EAAE,CAAC;IACvE,IAAI,OAAO,CAAC,cAAc,KAAK,KAAK;QAAE,OAAO,WAAW,UAAU,EAAE,CAAC;IACrE,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAC5C,OAAO,eAAe,UAAU,6BAA6B,CAAC;IAChE,CAAC;IACD,OAAO,eAAe,UAAU,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,aAAa,CAAC,EAAU,EAAE,KAAa,EAAE,MAAc;IAC9D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAuB;IACvD,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,IAAI,MAAM,GAAkB,SAAS,CAAC;IAEtC,IAAI,OAAO,CAAC,qBAAqB,KAAK,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACtE,OAAO,CAAC,IAAI,CAAC,aAAa,CACxB,uBAAuB,EACvB,uDAAuD,EACvD,yBAAyB,OAAO,CAAC,qBAAqB,kCAAkC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,kDAAkD,CAC1K,CAAC,CAAC;QACH,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;IACD,IACE,OAAO,CAAC,sBAAsB;WAC3B,OAAO,CAAC,sBAAsB,KAAK,OAAO,CAAC,qBAAqB,EACnE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,aAAa,CACxB,sBAAsB,EACtB,gDAAgD,EAChD,4BAA4B,OAAO,CAAC,sBAAsB,uBAAuB,OAAO,CAAC,qBAAqB,mEAAmE,CAClL,CAAC,CAAC;QACH,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;SAAM,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC;QAC3C,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,sBAAsB;YAC1B,IAAI,EAAE,aAAa;YACnB,KAAK,EAAE,yDAAyD;YAChE,MAAM,EAAE,kJAAkJ;YAC1J,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,cAAc,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAG,uBAAuB,CAC5C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,EACpC,OAAO,CAAC,sBAAsB,CAC/B,CAAC;IACF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,aAAa,CACxB,2BAA2B,EAC3B,kCAAkC,EAClC,4CAA4C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,SAAS,OAAO,CAAC,sBAAsB,GAAG,CAC3H,CAAC,CAAC;QACH,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;SAAM,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,aAAa,CACxB,qBAAqB,EACrB,kDAAkD,EAClD,iCAAiC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,wBAAwB,OAAO,CAAC,sBAAsB,sCAAsC,CAClK,CAAC,CAAC;QACH,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;SAAM,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,0BAA0B;YAC9B,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,oCAAoC,OAAO,CAAC,sBAAsB,EAAE;YAC3E,MAAM,EAAE,+IAA+I;YACvJ,UAAU,EAAE,CAAC,oCAAoC,EAAE,gBAAgB,CAAC;SACrE,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,GAAG,mBAAmB,CAAC;IACzD,CAAC;IAED,MAAM,WAAW,GAAG,uBAAuB,CACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAC/B,OAAO,CAAC,mBAAmB,CAC5B,CAAC;IACF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,aAAa,CACxB,wBAAwB,EACxB,sCAAsC,EACtC,yCAAyC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,SAAS,OAAO,CAAC,mBAAmB,GAAG,CAChH,CAAC,CAAC;QACH,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;SAAM,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,aAAa,CACxB,kBAAkB,EAClB,wDAAwD,EACxD,sCAAsC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,2BAA2B,OAAO,CAAC,mBAAmB,qBAAqB,CACjJ,CAAC,CAAC;QACH,MAAM,GAAG,SAAS,CAAC;IACrB,CAAC;SAAM,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAC/B,OAAO,CAAC,mBAAmB,CAC5B,CAAC,CAAC;QACH,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,gBAAgB;YACpB,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,6BAA6B,OAAO,CAAC,mBAAmB,EAAE;YACjE,MAAM,EAAE,sKAAsK;YAC9K,OAAO,EAAE,oBAAoB,CAAC,OAAO,CAAC;YACtC,UAAU,EAAE,CAAC,6BAA6B,CAAC;SAC5C,CAAC,CAAC;QACH,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,GAAG,mBAAmB,CAAC;IACzD,CAAC;IAED,IAAI,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,gBAAgB;YACpB,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,8DAA8D;YACrE,MAAM,EAAE,iLAAiL;YACzL,OAAO,EAAE,4BAA4B,OAAO,CAAC,sBAAsB,SAAS;YAC5E,UAAU,EAAE,CAAC,iBAAiB,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;QAC/B,MAAM;QACN,QAAQ,EAAE;YACR,SAAS,EAAE;gBACT,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO;gBAC7C,MAAM,EAAE,OAAO,CAAC,sBAAsB;aACvC;YACD,MAAM,EAAE;gBACN,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO;gBACzC,QAAQ,EAAE,OAAO,CAAC,qBAAqB;gBACvC,GAAG,CAAC,OAAO,CAAC,sBAAsB;oBAChC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,sBAAsB,EAAE;oBAC/C,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,EAAE,OAAO,CAAC,mBAAmB;aACpC;SACF;QACD,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/src/commands/upgrade/types.d.ts

@@ -0,0 +1,48 @@
+import type { AuthMode, PackageManager } from "../../lib/types.js";
+import type { ProjectManifest } from "../../lib/projectManifest.js";
+export type UpgradeStatus = "current" | "upgrade-available" | "blocked";
+export type UpgradeActionKind = "required" | "recommended" | "blocked";
+export type UpgradeAction = {
+    id: string;
+    kind: UpgradeActionKind;
+    title: string;
+    detail: string;
+    command?: string;
+    references?: string[];
+};
+export type UpgradeContext = {
+    rootDir: string;
+    appDir: string;
+    manifest: ProjectManifest;
+    packageManager: PackageManager;
+    declaredEngineVersion: string;
+    installedEngineVersion?: string;
+    targetGeneratorVersion: string;
+    targetEngineVersion: string;
+};
+export type UpgradePlan = {
+    schemaVersion: 1;
+    rootDir: string;
+    preset: AuthMode;
+    status: UpgradeStatus;
+    versions: {
+        generator: {
+            project: string;
+            target: string;
+        };
+        engine: {
+            manifest: string;
+            declared: string;
+            installed?: string;
+            target: string;
+        };
+    };
+    actions: UpgradeAction[];
+};
+export type UpgradeOptions = {
+    directory: string;
+    json: boolean;
+    check: boolean;
+    help: boolean;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/src/commands/upgrade/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/commands/upgrade/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEpE,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,mBAAmB,GAAG,SAAS,CAAC;AACxE,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,aAAa,GAAG,SAAS,CAAC;AAEvE,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,eAAe,CAAC;IAC1B,cAAc,EAAE,cAAc,CAAC;IAC/B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,aAAa,EAAE,CAAC,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,QAAQ,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE;QACR,SAAS,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/C,MAAM,EAAE;YACN,QAAQ,EAAE,MAAM,CAAC;YACjB,QAAQ,EAAE,MAAM,CAAC;YACjB,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,MAAM,EAAE,MAAM,CAAC;SAChB,CAAC;KACH,CAAC;IACF,OAAO,EAAE,aAAa,EAAE,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;IACf,IAAI,EAAE,OAAO,CAAC;CACf,CAAC"}

package/dist/src/commands/upgrade/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/commands/upgrade/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/commands/upgrade/types.ts"],"names":[],"mappings":""}

package/dist/src/lib/args.d.ts

@@ -11,6 +11,27 @@ declare const cliArgumentsSchema: z.ZodObject<{
         pnpm: "pnpm";
         bun: "bun";
     }>>;
+    nonInteractive: z.ZodBoolean;
+    preset: z.ZodOptional<z.ZodEnum<{
+        fullstack: "fullstack";
+        base: "base";
+        auth: "auth";
+        "auth-oauth": "auth-oauth";
+    }>>;
+    usePrisma: z.ZodOptional<z.ZodBoolean>;
+    database: z.ZodOptional<z.ZodEnum<{
+        sqlite: "sqlite";
+        postgresql: "postgresql";
+    }>>;
+    oauthProviders: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        google: "google";
+        github: "github";
+    }>>>;
+    useGit: z.ZodOptional<z.ZodBoolean>;
+    runtime: z.ZodOptional<z.ZodEnum<{
+        bun: "bun";
+        node: "node";
+    }>>;
 }, z.core.$strict>;
 export type CliArguments = z.infer<typeof cliArgumentsSchema>;
 export declare function parseCliArguments(argv: string[]): CliArguments;

package/dist/src/lib/args.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../../src/lib/args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,QAAA,MAAM,kBAAkB;;;;;;;;;;;;kBAQtB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAe9D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,CA6D9D"}
+{"version":3,"file":"args.d.ts","sourceRoot":"","sources":["../../../src/lib/args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAiBxB,QAAA,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAetB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAqD9D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,YAAY,CA2I9D"}

package/dist/src/lib/args.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { firstZodIssue, packageManagerSchema } from "./schemas.js";
+import { authModeSchema, databaseSchema, firstZodIssue, oauthProvidersSchema, packageManagerSchema, runtimeSchema, } from "./schemas.js";
 const cliArgumentsSchema = z.strictObject({
     projectName: z.string().optional(),
     help: z.boolean(),
@@ -8,6 +8,13 @@ const cliArgumentsSchema = z.strictObject({
     skipInstall: z.boolean(),
     productionReady: z.boolean(),
     packageManager: packageManagerSchema.optional(),
+    nonInteractive: z.boolean(),
+    preset: authModeSchema.optional(),
+    usePrisma: z.boolean().optional(),
+    database: databaseSchema.optional(),
+    oauthProviders: oauthProvidersSchema.optional(),
+    useGit: z.boolean().optional(),
+    runtime: runtimeSchema.optional(),
 });
 const positionalArgumentsSchema = z.array(z.string()).max(1, {
     error: (issue) => {
@@ -21,6 +28,32 @@ function parsePackageManager(value) {
         throw new Error(firstZodIssue(result.error));
     return result.data;
 }
+function parseChoice(value, schema, option, allowed) {
+    if (!value || value.startsWith("-")) {
+        throw new Error(`${option} requires ${allowed}.`);
+    }
+    const result = schema.safeParse(value);
+    if (!result.success)
+        throw new Error(`${option} must be ${allowed}. Received "${value}".`);
+    return result.data;
+}
+function parseOAuthProviders(value) {
+    if (!value || value.startsWith("-")) {
+        throw new Error("--oauth requires google, github, or google,github.");
+    }
+    const providers = value.split(",").map((provider) => provider.trim()).filter(Boolean);
+    const result = oauthProvidersSchema.min(1).safeParse(providers);
+    if (!result.success) {
+        throw new Error(`--oauth requires unique supported providers. ${firstZodIssue(result.error)}`);
+    }
+    return result.data;
+}
+function setBooleanChoice(current, value, positiveOption, negativeOption) {
+    if (current !== undefined && current !== value) {
+        throw new Error(`${positiveOption} and ${negativeOption} cannot be used together.`);
+    }
+    return value;
+}
 export function parseCliArguments(argv) {
     const parsed = {
         help: false,
@@ -28,6 +61,7 @@ export function parseCliArguments(argv) {
         resume: false,
         skipInstall: false,
         productionReady: false,
+        nonInteractive: false,
     };
     const positionals = [];
     for (let index = 0; index < argv.length; index += 1) {
@@ -56,6 +90,33 @@ export function parseCliArguments(argv) {
             parsed.productionReady = true;
             continue;
         }
+        if (argument === "--yes" || argument === "--non-interactive") {
+            parsed.nonInteractive = true;
+            continue;
+        }
+        if (argument === "--prisma") {
+            parsed.usePrisma = setBooleanChoice(parsed.usePrisma, true, "--prisma", "--no-prisma");
+            continue;
+        }
+        if (argument === "--no-prisma") {
+            parsed.usePrisma = setBooleanChoice(parsed.usePrisma, false, "--prisma", "--no-prisma");
+            continue;
+        }
+        if (argument === "--git") {
+            parsed.useGit = setBooleanChoice(parsed.useGit, true, "--git", "--no-git");
+            continue;
+        }
+        if (argument === "--no-git") {
+            parsed.useGit = setBooleanChoice(parsed.useGit, false, "--git", "--no-git");
+            continue;
+        }
+        if (argument === "--no-oauth") {
+            if (parsed.oauthProviders !== undefined) {
+                throw new Error("--oauth and --no-oauth cannot be used together.");
+            }
+            parsed.oauthProviders = [];
+            continue;
+        }
         if (argument === "--package-manager") {
             const value = argv[index + 1];
             parsed.packageManager = parsePackageManager(value?.startsWith("-") ? undefined : value);
@@ -66,6 +127,49 @@ export function parseCliArguments(argv) {
             parsed.packageManager = parsePackageManager(argument.slice("--package-manager=".length));
             continue;
         }
+        if (argument === "--preset" || argument.startsWith("--preset=")) {
+            if (parsed.preset !== undefined)
+                throw new Error("--preset may only be provided once.");
+            const inline = argument.startsWith("--preset=");
+            const value = inline ? argument.slice("--preset=".length) : argv[index + 1];
+            parsed.preset = parseChoice(value, authModeSchema, "--preset", "base, auth, auth-oauth, or fullstack");
+            if (!inline)
+                index += 1;
+            continue;
+        }
+        if (argument === "--database" || argument.startsWith("--database=")) {
+            if (parsed.database !== undefined)
+                throw new Error("--database may only be provided once.");
+            const inline = argument.startsWith("--database=");
+            const value = inline ? argument.slice("--database=".length) : argv[index + 1];
+            parsed.database = parseChoice(value, databaseSchema, "--database", "sqlite or postgresql");
+            if (!inline)
+                index += 1;
+            continue;
+        }
+        if (argument === "--runtime" || argument.startsWith("--runtime=")) {
+            if (parsed.runtime !== undefined)
+                throw new Error("--runtime may only be provided once.");
+            const inline = argument.startsWith("--runtime=");
+            const value = inline ? argument.slice("--runtime=".length) : argv[index + 1];
+            parsed.runtime = parseChoice(value, runtimeSchema, "--runtime", "node or bun");
+            if (!inline)
+                index += 1;
+            continue;
+        }
+        if (argument === "--oauth" || argument.startsWith("--oauth=")) {
+            if (parsed.oauthProviders !== undefined) {
+                throw new Error(parsed.oauthProviders.length === 0
+                    ? "--oauth and --no-oauth cannot be used together."
+                    : "--oauth may only be provided once.");
+            }
+            const inline = argument.startsWith("--oauth=");
+            const value = inline ? argument.slice("--oauth=".length) : argv[index + 1];
+            parsed.oauthProviders = parseOAuthProviders(value);
+            if (!inline)
+                index += 1;
+            continue;
+        }
         if (argument.startsWith("-")) {
             throw new Error(`Unknown option "${argument}". Run with --help for usage.`);
         }
@@ -77,6 +181,20 @@ export function parseCliArguments(argv) {
     }
     if (positionalResult.data[0])
         parsed.projectName = positionalResult.data[0];
+    const nonInteractiveOnly = [
+        parsed.preset,
+        parsed.usePrisma,
+        parsed.database,
+        parsed.oauthProviders,
+        parsed.useGit,
+        parsed.runtime,
+    ];
+    if (!parsed.nonInteractive && nonInteractiveOnly.some((value) => value !== undefined)) {
+        throw new Error("--preset, --prisma, --database, --oauth, --git, and --runtime require --non-interactive (or --yes).");
+    }
+    if (parsed.nonInteractive && parsed.resume) {
+        throw new Error("--resume cannot be combined with --non-interactive or --yes.");
+    }
     return cliArgumentsSchema.parse(parsed);
 }
 //# sourceMappingURL=args.js.map

package/dist/src/lib/args.js.map

@@ -1 +1 @@
-{"version":3,"file":"args.js","sourceRoot":"","sources":["../../../src/lib/args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGnE,MAAM,kBAAkB,GAAG,CAAC,CAAC,YAAY,CAAC;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,cAAc,EAAE,oBAAoB,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAIH,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE;IAC3D,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;QACf,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,wBAAwB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,sCAAsC,CAAC;IAC/F,CAAC;CACF,CAAC,CAAC;AAEH,SAAS,mBAAmB,CAAC,KAAyB;IACpD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAc;IAC9C,MAAM,MAAM,GAAiB;QAC3B,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE,KAAK;KACvB,CAAC;IACF,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAE,CAAC;QAE9B,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YAC3C,MAAM;QACR,CAAC;QACD,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC/C,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,cAAc,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC9D,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,oBAAoB,EAAE,CAAC;YACtC,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC9B,MAAM,CAAC,cAAc,GAAG,mBAAmB,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACxF,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,cAAc,GAAG,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;YACzF,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,+BAA+B,CAAC,CAAC;QAC9E,CAAC;QAED,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC1E,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,CAAC,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,OAAO,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../../src/lib/args.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,EACd,cAAc,EACd,aAAa,EACb,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,GACd,MAAM,cAAc,CAAC;AAStB,MAAM,kBAAkB,GAAG,CAAC,CAAC,YAAY,CAAC;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,cAAc,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC/C,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;IAC3B,MAAM,EAAE,cAAc,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;IACnC,cAAc,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC/C,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAIH,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE;IAC3D,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;QACf,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,wBAAwB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,sCAAsC,CAAC;IAC/F,CAAC;CACF,CAAC,CAAC;AAEH,SAAS,mBAAmB,CAAC,KAAyB;IACpD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,WAAW,CAClB,KAAyB,EACzB,MAA6G,EAC7G,MAAc,EACd,OAAe;IAEf,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,aAAa,OAAO,GAAG,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,YAAY,OAAO,eAAe,KAAK,IAAI,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAyB;IACpD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtF,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,gDAAgD,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,gBAAgB,CACvB,OAA4B,EAC5B,KAAc,EACd,cAAsB,EACtB,cAAsB;IAEtB,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,GAAG,cAAc,QAAQ,cAAc,2BAA2B,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAc;IAC9C,MAAM,MAAM,GAAiB;QAC3B,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,KAAK;QAClB,eAAe,EAAE,KAAK;QACtB,cAAc,EAAE,KAAK;KACtB,CAAC;IACF,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAE,CAAC;QAE9B,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YAC3C,MAAM;QACR,CAAC;QACD,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC/C,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,cAAc,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC9D,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,oBAAoB,EAAE,CAAC;YACtC,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;YAC7D,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;YAC7B,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,CAAC,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;YACvF,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC/B,MAAM,CAAC,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;YACxF,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,MAAM,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAC5E,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC9B,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,CAAC,cAAc,GAAG,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC9B,MAAM,CAAC,cAAc,GAAG,mBAAmB,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACxF,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,cAAc,GAAG,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;YACzF,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAChE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACxF,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;YAChD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC5E,MAAM,CAAC,MAAM,GAAG,WAAW,CAAW,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,sCAAsC,CAAC,CAAC;YACjH,IAAI,CAAC,MAAM;gBAAE,KAAK,IAAI,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YACpE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;YAC5F,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC9E,MAAM,CAAC,QAAQ,GAAG,WAAW,CAAW,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,sBAAsB,CAAC,CAAC;YACrG,IAAI,CAAC,MAAM;gBAAE,KAAK,IAAI,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAClE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC1F,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YACjD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC7E,MAAM,CAAC,OAAO,GAAG,WAAW,CAAU,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;YACxF,IAAI,CAAC,MAAM;gBAAE,KAAK,IAAI,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9D,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;oBAChD,CAAC,CAAC,iDAAiD;oBACnD,CAAC,CAAC,oCAAoC,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YAC3E,MAAM,CAAC,cAAc,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM;gBAAE,KAAK,IAAI,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,+BAA+B,CAAC,CAAC;QAC9E,CAAC;QAED,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC1E,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,CAAC,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,kBAAkB,GAAG;QACzB,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,SAAS;QAChB,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,cAAc;QACrB,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,OAAO;KACf,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,qGAAqG,CAAC,CAAC;IACzH,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC"}

package/dist/src/lib/constants.d.ts

@@ -1,5 +1,5 @@
 import type { StepName } from "./types.js";
-export declare const PRISMA_VERSION = "7.8.0";
+export declare const PRISMA_VERSION = "7.9.0";
 export declare const stepOrder: StepName[];
 export declare const stepLabels: Record<StepName, string>;
 //# sourceMappingURL=constants.d.ts.map

package/dist/src/lib/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/lib/constants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,eAAO,MAAM,cAAc,UAAU,CAAC;AAEtC,eAAO,MAAM,SAAS,EAAE,QAAQ,EAU/B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAU/C,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/lib/constants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,eAAO,MAAM,cAAc,UAAU,CAAC;AAEtC,eAAO,MAAM,SAAS,EAAE,QAAQ,EAW/B,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAW/C,CAAC"}

package/dist/src/lib/constants.js

@@ -1,4 +1,4 @@
-export const PRISMA_VERSION = "7.8.0";
+export const PRISMA_VERSION = "7.9.0";
 export const stepOrder = [
     "start",
     "prompts",
@@ -8,6 +8,7 @@ export const stepOrder = [
     "production-configured",
     "deps-installed",
     "git-initialized",
+    "project-validated",
     "done",
 ];
 export const stepLabels = {
@@ -19,6 +20,7 @@ export const stepLabels = {
     "deps-installed": "Install dependencies",
     "production-configured": "Configure production runtime",
     "git-initialized": "Initialize Git repository",
+    "project-validated": "Validate generated auth boundary",
     done: "Project ready",
 };
 //# sourceMappingURL=constants.js.map

package/dist/src/lib/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/lib/constants.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC;AAEtC,MAAM,CAAC,MAAM,SAAS,GAAe;IACnC,OAAO;IACP,SAAS;IACT,iBAAiB;IACjB,gBAAgB;IAChB,mBAAmB;IACnB,uBAAuB;IACvB,gBAAgB;IAChB,iBAAiB;IACjB,MAAM;CACP,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAA6B;IAClD,KAAK,EAAE,aAAa;IACpB,OAAO,EAAE,uBAAuB;IAChC,iBAAiB,EAAE,sBAAsB;IACzC,gBAAgB,EAAE,0BAA0B;IAC5C,mBAAmB,EAAE,oBAAoB;IACzC,gBAAgB,EAAE,sBAAsB;IACxC,uBAAuB,EAAE,8BAA8B;IACvD,iBAAiB,EAAE,2BAA2B;IAC9C,IAAI,EAAE,eAAe;CACtB,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/lib/constants.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC;AAEtC,MAAM,CAAC,MAAM,SAAS,GAAe;IACnC,OAAO;IACP,SAAS;IACT,iBAAiB;IACjB,gBAAgB;IAChB,mBAAmB;IACnB,uBAAuB;IACvB,gBAAgB;IAChB,iBAAiB;IACjB,mBAAmB;IACnB,MAAM;CACP,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAA6B;IAClD,KAAK,EAAE,aAAa;IACpB,OAAO,EAAE,uBAAuB;IAChC,iBAAiB,EAAE,sBAAsB;IACzC,gBAAgB,EAAE,0BAA0B;IAC5C,mBAAmB,EAAE,oBAAoB;IACzC,gBAAgB,EAAE,sBAAsB;IACxC,uBAAuB,EAAE,8BAA8B;IACvD,iBAAiB,EAAE,2BAA2B;IAC9C,mBAAmB,EAAE,kCAAkC;IACvD,IAAI,EAAE,eAAe;CACtB,CAAC"}

package/dist/src/lib/expressOAuth.d.ts

@@ -0,0 +1,10 @@
+import type { OAuthProvider } from "./oauth.js";
+export declare const expressOAuthFiles: {
+    readonly auth: "src/auth/auth.ts";
+    readonly controller: "src/auth/controllers/oauth.controller.ts";
+    readonly routes: "src/auth/routes/oauth.routes.ts";
+};
+export type ExpressOAuthFile = (typeof expressOAuthFiles)[keyof typeof expressOAuthFiles];
+/** Canonical OAuth source shared by generation and guarded add recipes. */
+export declare function renderExpressOAuthFiles(providers: readonly OAuthProvider[]): Record<ExpressOAuthFile, string>;
+//# sourceMappingURL=expressOAuth.d.ts.map

package/dist/src/lib/expressOAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expressOAuth.d.ts","sourceRoot":"","sources":["../../../src/lib/expressOAuth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,eAAO,MAAM,iBAAiB;;;;CAIpB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAkF1F,2EAA2E;AAC3E,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,SAAS,aAAa,EAAE,GAClC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAgFlC"}

package/dist/src/lib/expressOAuth.js

@@ -0,0 +1,164 @@
+export const expressOAuthFiles = {
+    auth: "src/auth/auth.ts",
+    controller: "src/auth/controllers/oauth.controller.ts",
+    routes: "src/auth/routes/oauth.routes.ts",
+};
+function providerEnvBlock(provider) {
+    const upper = provider.toUpperCase();
+    return `${provider}: {
+        clientId: requiredEnv("${upper}_CLIENT_ID"),
+        clientSecret: requiredEnv("${upper}_CLIENT_SECRET"),
+        redirectUri: requiredEnv("${upper}_REDIRECT_URI"),
+      },`;
+}
+function providerControllerBlock(provider) {
+    return `async ${provider}Redirect(req: Request, res: Response) {
+    try {
+      await requireProvider("${provider}", res)?.redirect(req, res);
+    } catch {
+      if (!res.headersSent) res.status(500).json({ error: "OAuth redirect failed" });
+    }
+  },
+
+  async ${provider}Callback(req: Request, res: Response) {
+    try {
+      const provider = requireProvider("${provider}", res);
+      if (!provider) return;
+
+      const result = await provider.handleCallback(req);
+      let response = result;
+
+      if (result.mode === "link" && !result.identity) {
+        if (!result.userId) {
+          return res.status(400).json({ error: "Authenticated user is required to link a provider" });
+        }
+
+        await identityAdapter.linkProvider(
+          result.userId,
+          result.profile.provider,
+          result.profile.providerId,
+        );
+        response = {
+          ...result,
+          identity: { type: "LINK_PROVIDER", success: true },
+        };
+      }
+
+      if (
+        result.identity?.type === "LINK_REQUIRED" ||
+        result.identity?.type === "EXISTING_EMAIL_CONFLICT"
+      ) {
+        return res.status(409).json({ provider: "${provider}", ...result });
+      }
+
+      if (result.identity?.type === "INVALID_LINK_REQUEST") {
+        return res.status(400).json({ provider: "${provider}", ...result });
+      }
+
+      if (result.mode === "login" && (!result.accessToken || !result.refreshToken)) {
+        throw new Error("OAuth callback did not return an application session");
+      }
+
+      res.json({ provider: "${provider}", ...response });
+    } catch (error) {
+      res.status(400).json({
+        error: error instanceof Error ? error.message : "OAuth callback failed",
+      });
+    }
+  },
+
+  async ${provider}Link(req: Request, res: Response) {
+    try {
+      await requireProvider("${provider}", res)?.redirect(req, res, "link");
+    } catch {
+      if (!res.headersSent) res.status(500).json({ error: "OAuth link redirect failed" });
+    }
+  },`;
+}
+function providerRoutesBlock(provider) {
+    return `router.get("/${provider}", oauthController.${provider}Redirect);
+router.get("/${provider}/callback", oauthController.${provider}Callback);
+router.get("/${provider}/link", authMiddleware, oauthController.${provider}Link);`;
+}
+/** Canonical OAuth source shared by generation and guarded add recipes. */
+export function renderExpressOAuthFiles(providers) {
+    const providerUnion = providers.map((provider) => `"${provider}"`).join(" | ");
+    return {
+        [expressOAuthFiles.auth]: `import { createAuthenik8 } from "authenik8-core";
+import dotenv  from "dotenv";
+import { createRedisClient } from "../config/redis";
+import { agentIdentityConfig, authJwkConfig, requiredEnv, requiredSecret } from "../utils/security";
+import { identityAdapter } from "./identity.adapter";
+
+dotenv.config();
+
+let authInstance: any;
+
+function oauthConfig() {
+  return {
+    ${providers.map(providerEnvBlock).join("\n    ")}
+  };
+}
+
+export async function initAuth() {
+  authInstance= await createAuthenik8({
+    jwt: authJwkConfig(),
+    refreshSecret: requiredSecret("REFRESH_SECRET"),
+    agent: agentIdentityConfig(),
+    redis: await createRedisClient(),
+    oauth: oauthConfig(),
+    identityAdapter,
+  });
+
+}
+export function getAuth() {
+  if (!authInstance) {
+    throw new Error("Auth not initialized. Call initAuth() first.");
+  }
+
+  return authInstance;
+}
+
+export const auth = new Proxy(
+  {},
+  {
+    get(_target, property) {
+      return getAuth()[property as keyof ReturnType<typeof getAuth>];
+    },
+  },
+) as any;
+`,
+        [expressOAuthFiles.routes]: `import express from "express";
+import { authMiddleware } from "../middleware/auth.middleware";
+import { oauthController } from "../controllers/oauth.controller";
+
+const router = express.Router();
+
+${providers.map(providerRoutesBlock).join("\n")}
+
+export default router;
+`,
+        [expressOAuthFiles.controller]: `import { Request, Response } from "express";
+import { getAuth } from "../auth";
+import { identityAdapter } from "../identity.adapter";
+
+type OAuthProvider = ${providerUnion};
+
+function requireProvider(provider: OAuthProvider, res: Response) {
+  const oauthProvider = getAuth().oauth?.[provider];
+
+  if (!oauthProvider) {
+    res.status(404).json({ error: \`\${provider} OAuth is not configured\` });
+    return undefined;
+  }
+
+  return oauthProvider;
+}
+
+export const oauthController = {
+  ${providers.map(providerControllerBlock).join("\n\n  ")}
+};
+`,
+    };
+}
+//# sourceMappingURL=expressOAuth.js.map

package/dist/src/lib/expressOAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expressOAuth.js","sourceRoot":"","sources":["../../../src/lib/expressOAuth.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,kBAAkB;IACxB,UAAU,EAAE,0CAA0C;IACtD,MAAM,EAAE,iCAAiC;CACjC,CAAC;AAIX,SAAS,gBAAgB,CAAC,QAAuB;IAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,GAAG,QAAQ;iCACa,KAAK;qCACD,KAAK;oCACN,KAAK;SAChC,CAAC;AACV,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAuB;IACtD,OAAO,SAAS,QAAQ;;+BAEK,QAAQ;;;;;;UAM7B,QAAQ;;0CAEwB,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;mDA0BC,QAAQ;;;;mDAIR,QAAQ;;;;;;;8BAO7B,QAAQ;;;;;;;;UAQ5B,QAAQ;;+BAEa,QAAQ;;;;KAIlC,CAAC;AACN,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAuB;IAClD,OAAO,gBAAgB,QAAQ,sBAAsB,QAAQ;eAChD,QAAQ,+BAA+B,QAAQ;eAC/C,QAAQ,2CAA2C,QAAQ,QAAQ,CAAC;AACnF,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,uBAAuB,CACrC,SAAmC;IAEnC,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE/E,OAAO;QACL,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE;;;;;;;;;;;;MAYxB,SAAS,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BnD;QACG,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE;;;;;;EAM9B,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;;;CAG9C;QACG,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE;;;;uBAIb,aAAa;;;;;;;;;;;;;;IAchC,SAAS,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;;CAExD;KACE,CAAC;AACJ,CAAC"}