create-authenik8-app 2.4.14 → 2.4.15

package/dist/src/lib/interruption.d.ts

@@ -0,0 +1,14 @@
+import type { PackageManager, StepName } from "./types.js";
+export type ShutdownSignal = "SIGINT" | "SIGTERM";
+type RestartCommandOptions = {
+    projectName: string;
+    productionReady: boolean;
+    resume: boolean;
+    skipInstall?: boolean;
+    packageManager?: PackageManager;
+};
+export declare function canResumeSetup(step: StepName): boolean;
+export declare function restartCommand(options: RestartCommandOptions): string;
+export declare function interruptionExitCode(signal: ShutdownSignal): number;
+export {};
+//# sourceMappingURL=interruption.d.ts.map

package/dist/src/lib/interruption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interruption.d.ts","sourceRoot":"","sources":["../../../src/lib/interruption.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3D,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,SAAS,CAAC;AAElD,KAAK,qBAAqB,GAAG;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,OAAO,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,cAAc,CAAC,EAAE,cAAc,CAAC;CACjC,CAAC;AAEF,wBAAgB,cAAc,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAEtD;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CASrE;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAEnE"}

package/dist/src/lib/interruption.js

@@ -0,0 +1,16 @@
+export function canResumeSetup(step) {
+    return step !== "start" && step !== "done";
+}
+export function restartCommand(options) {
+    const flags = [
+        ...(options.packageManager ? ["--package-manager", options.packageManager] : []),
+        ...(options.skipInstall ? ["--no-install"] : []),
+        ...(options.productionReady ? ["--production-ready"] : []),
+        ...(options.resume ? ["--resume"] : []),
+    ];
+    return ["npx", "create-authenik8-app", options.projectName, ...flags].join(" ");
+}
+export function interruptionExitCode(signal) {
+    return signal === "SIGINT" ? 130 : 143;
+}
+//# sourceMappingURL=interruption.js.map

package/dist/src/lib/interruption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interruption.js","sourceRoot":"","sources":["../../../src/lib/interruption.ts"],"names":[],"mappings":"AAYA,MAAM,UAAU,cAAc,CAAC,IAAc;IAC3C,OAAO,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,MAAM,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAA8B;IAC3D,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,mBAAmB,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;IAEF,OAAO,CAAC,KAAK,EAAE,sBAAsB,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAsB;IACzD,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AACzC,CAAC"}

package/dist/src/lib/nonInteractive.d.ts

@@ -0,0 +1,8 @@
+import type { CliArguments } from "./args.js";
+import type { CliState } from "./types.js";
+type NonInteractiveEnvironment = {
+    bunAvailable: boolean;
+};
+export declare function resolveNonInteractiveAnswers(options: CliArguments, environment: NonInteractiveEnvironment): Partial<CliState>;
+export {};
+//# sourceMappingURL=nonInteractive.d.ts.map

package/dist/src/lib/nonInteractive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonInteractive.d.ts","sourceRoot":"","sources":["../../../src/lib/nonInteractive.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,KAAK,EAAE,QAAQ,EAA8B,MAAM,YAAY,CAAC;AAEvE,KAAK,yBAAyB,GAAG;IAC/B,YAAY,EAAE,OAAO,CAAC;CACvB,CAAC;AA8BF,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,YAAY,EACrB,WAAW,EAAE,yBAAyB,GACrC,OAAO,CAAC,QAAQ,CAAC,CAyEnB"}

package/dist/src/lib/nonInteractive.js

@@ -0,0 +1,111 @@
+import { firstZodIssue, promptAnswersSchema } from "./schemas.js";
+function fail(message) {
+    throw new Error(`Invalid non-interactive configuration: ${message}`);
+}
+function rejectOAuthOption(options) {
+    if (options.oauthProviders !== undefined) {
+        fail("--oauth/--no-oauth only applies to auth-oauth and fullstack presets");
+    }
+}
+function productionRuntime(options, environment) {
+    if (!options.productionReady) {
+        if (options.runtime !== undefined) {
+            fail("--runtime requires --production-ready for Express presets");
+        }
+        return undefined;
+    }
+    const runtime = options.runtime ?? "node";
+    if (runtime === "bun" && !environment.bunAvailable) {
+        fail("the Bun runtime was selected but bun is not available on PATH");
+    }
+    return runtime;
+}
+export function resolveNonInteractiveAnswers(options, environment) {
+    if (!options.nonInteractive)
+        fail("--non-interactive or --yes is required");
+    if (options.resume)
+        fail("--resume cannot be combined with non-interactive generation");
+    const authMode = options.preset ?? fail("--preset is required");
+    const useGit = options.useGit ?? false;
+    let raw;
+    if (authMode === "base") {
+        rejectOAuthOption(options);
+        if (options.usePrisma === undefined)
+            fail("the base preset requires --prisma or --no-prisma");
+        if (options.usePrisma && !options.database)
+            fail("--prisma requires --database sqlite or postgresql");
+        if (!options.usePrisma && options.database)
+            fail("--database cannot be used with --no-prisma");
+        const runtime = productionRuntime(options, environment);
+        raw = {
+            framework: "Express",
+            authMode,
+            usePrisma: options.usePrisma,
+            ...(options.database ? { database: options.database } : {}),
+            useGit,
+            ...(runtime ? { runtime } : {}),
+        };
+    }
+    else if (authMode === "auth") {
+        rejectOAuthOption(options);
+        if (options.usePrisma === false)
+            fail("the auth preset requires Prisma");
+        if (!options.database)
+            fail("the auth preset requires --database sqlite or postgresql");
+        const runtime = productionRuntime(options, environment);
+        raw = {
+            framework: "Express",
+            authMode,
+            usePrisma: true,
+            database: options.database,
+            useGit,
+            ...(runtime ? { runtime } : {}),
+        };
+    }
+    else if (authMode === "auth-oauth") {
+        if (options.usePrisma === false)
+            fail("the auth-oauth preset requires Prisma");
+        if (!options.database)
+            fail("the auth-oauth preset requires --database sqlite or postgresql");
+        const oauthProviders = options.oauthProviders;
+        if (!oauthProviders?.length)
+            fail("the auth-oauth preset requires --oauth google, github, or google,github");
+        const runtime = productionRuntime(options, environment);
+        raw = {
+            framework: "Express",
+            authMode,
+            usePrisma: true,
+            database: options.database,
+            oauthProviders,
+            useGit,
+            ...(runtime ? { runtime } : {}),
+        };
+    }
+    else {
+        if (options.productionReady)
+            fail("--production-ready configures PM2 and is only available for Express presets");
+        if (options.usePrisma === false)
+            fail("the fullstack preset requires Prisma");
+        if (options.database && options.database !== "postgresql") {
+            fail("the fullstack preset requires PostgreSQL");
+        }
+        if (options.runtime && options.runtime !== "node") {
+            fail("the fullstack preset requires the Node.js runtime");
+        }
+        if (options.oauthProviders === undefined) {
+            fail("the fullstack preset requires --oauth google,github or --no-oauth");
+        }
+        const oauthProviders = options.oauthProviders;
+        raw = {
+            framework: "Express",
+            authMode,
+            authMethods: ["password", ...oauthProviders],
+            useGit,
+        };
+    }
+    const result = promptAnswersSchema.safeParse(raw);
+    if (!result.success)
+        fail(firstZodIssue(result.error));
+    return result.data;
+}
+//# sourceMappingURL=nonInteractive.js.map

package/dist/src/lib/nonInteractive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonInteractive.js","sourceRoot":"","sources":["../../../src/lib/nonInteractive.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAOlE,SAAS,IAAI,CAAC,OAAe;IAC3B,MAAM,IAAI,KAAK,CAAC,0CAA0C,OAAO,EAAE,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAqB;IAC9C,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,qEAAqE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAqB,EACrB,WAAsC;IAEtC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QACnD,IAAI,CAAC,+DAA+D,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAqB,EACrB,WAAsC;IAEtC,IAAI,CAAC,OAAO,CAAC,cAAc;QAAE,IAAI,CAAC,wCAAwC,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM;QAAE,IAAI,CAAC,6DAA6D,CAAC,CAAC;IACxF,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IACvC,IAAI,GAA4B,CAAC;IAEjC,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC3B,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,kDAAkD,CAAC,CAAC;QAC9F,IAAI,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,IAAI,CAAC,mDAAmD,CAAC,CAAC;QACtG,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ;YAAE,IAAI,CAAC,4CAA4C,CAAC,CAAC;QAC/F,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,GAAG,GAAG;YACJ,SAAS,EAAE,SAAS;YACpB,QAAQ;YACR,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM;YACN,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC;IACJ,CAAC;SAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC/B,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC3B,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK;YAAE,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACzE,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,IAAI,CAAC,0DAA0D,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,GAAG,GAAG;YACJ,SAAS,EAAE,SAAS;YACpB,QAAQ;YACR,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM;YACN,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC;IACJ,CAAC;SAAM,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK;YAAE,IAAI,CAAC,uCAAuC,CAAC,CAAC;QAC/E,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAC9F,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC9C,IAAI,CAAC,cAAc,EAAE,MAAM;YAAE,IAAI,CAAC,yEAAyE,CAAC,CAAC;QAC7G,MAAM,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACxD,GAAG,GAAG;YACJ,SAAS,EAAE,SAAS;YACpB,QAAQ;YACR,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,cAAc;YACd,MAAM;YACN,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,IAAI,OAAO,CAAC,eAAe;YAAE,IAAI,CAAC,6EAA6E,CAAC,CAAC;QACjH,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK;YAAE,IAAI,CAAC,sCAAsC,CAAC,CAAC;QAC9E,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC1D,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAClD,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACzC,IAAI,CAAC,mEAAmE,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,cAAc,GAAwB,OAAO,CAAC,cAAc,CAAC;QACnE,GAAG,GAAG;YACJ,SAAS,EAAE,SAAS;YACpB,QAAQ;YACR,WAAW,EAAE,CAAC,UAAU,EAAE,GAAG,cAAc,CAAC;YAC5C,MAAM;SACP,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}

package/dist/src/lib/oauth.d.ts

@@ -0,0 +1,9 @@
+export declare const oauthProviders: readonly ["google", "github"];
+export type OAuthProvider = (typeof oauthProviders)[number];
+export type OAuthEnvironmentPreset = "express" | "fullstack";
+export declare function supportedOAuthProviders(providers: readonly string[] | undefined): OAuthProvider[];
+export declare function filterOAuthEnvironment(source: string, enabledProviders: readonly OAuthProvider[]): string;
+/** Add only missing provider keys; existing credentials are never rewritten. */
+export declare function ensureOAuthEnvironment(source: string, provider: OAuthProvider, preset: OAuthEnvironmentPreset): string;
+export declare function configureOAuthEnvironmentFiles(targetDir: string, enabledProviders: readonly OAuthProvider[]): Promise<void>;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/src/lib/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/lib/oauth.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,cAAc,+BAAgC,CAAC;AAE5D,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAC5D,MAAM,MAAM,sBAAsB,GAAG,SAAS,GAAG,WAAW,CAAC;AAE7D,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GACvC,aAAa,EAAE,CAIjB;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,gBAAgB,EAAE,SAAS,aAAa,EAAE,GACzC,MAAM,CAgBR;AA8BD,gFAAgF;AAChF,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,sBAAsB,GAC7B,MAAM,CAUR;AAED,wBAAsB,8BAA8B,CAClD,SAAS,EAAE,MAAM,EACjB,gBAAgB,EAAE,SAAS,aAAa,EAAE,GACzC,OAAO,CAAC,IAAI,CAAC,CAWf"}

package/dist/src/lib/oauth.js

@@ -0,0 +1,62 @@
+import fs from "fs-extra";
+import path from "node:path";
+export const oauthProviders = ["google", "github"];
+export function supportedOAuthProviders(providers) {
+    return (providers ?? []).filter((provider) => oauthProviders.includes(provider));
+}
+export function filterOAuthEnvironment(source, enabledProviders) {
+    const enabledPrefixes = new Set(enabledProviders.map((provider) => provider.toUpperCase()));
+    return source
+        .replace(/\r\n/g, "\n")
+        .split("\n")
+        .filter((line) => {
+        if (line.startsWith("AUTHENIK8_OAUTH_PROVIDERS="))
+            return false;
+        const provider = line.match(/^(GOOGLE|GITHUB)_/)?.[1];
+        return !provider || enabledPrefixes.has(provider);
+    })
+        .join("\n")
+        .replace(/\n*$/, "\n");
+}
+function environmentEntries(provider, preset) {
+    const upper = provider.toUpperCase();
+    const callbackPath = preset === "fullstack"
+        ? `/api/auth/oauth/${provider}/callback`
+        : `/auth/${provider}/callback`;
+    const clientId = preset === "express" ? `"change-me-${provider}-client-id"` : "";
+    const clientSecret = preset === "express"
+        ? `"change-me-${provider}-client-secret"`
+        : "";
+    return [
+        [`${upper}_CLIENT_ID`, clientId],
+        [`${upper}_CLIENT_SECRET`, clientSecret],
+        [`${upper}_REDIRECT_URI`, preset === "express"
+                ? `"http://localhost:3000${callbackPath}"`
+                : `http://localhost:3000${callbackPath}`],
+    ];
+}
+function hasEnvironmentName(source, name) {
+    return source.split(/\r?\n/).some((line) => new RegExp(`^(?:export\\s+)?${name}\\s*=`).test(line));
+}
+/** Add only missing provider keys; existing credentials are never rewritten. */
+export function ensureOAuthEnvironment(source, provider, preset) {
+    const normalized = source.replace(/\r\n/g, "\n");
+    const newline = source.includes("\r\n") ? "\r\n" : "\n";
+    const additions = environmentEntries(provider, preset)
+        .filter(([name]) => !hasEnvironmentName(normalized, name))
+        .map(([name, value]) => `${name}=${value}`);
+    if (additions.length === 0)
+        return source;
+    const separator = source.length === 0 || source.endsWith("\n") ? "" : newline;
+    return `${source}${separator}${additions.join(newline)}${newline}`;
+}
+export async function configureOAuthEnvironmentFiles(targetDir, enabledProviders) {
+    for (const filename of [".env", ".env.example"]) {
+        const envPath = path.join(targetDir, filename);
+        if (!(await fs.pathExists(envPath)))
+            continue;
+        const source = await fs.readFile(envPath, "utf8");
+        await fs.writeFile(envPath, filterOAuthEnvironment(source, enabledProviders));
+    }
+}
+//# sourceMappingURL=oauth.js.map

package/dist/src/lib/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/lib/oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAK5D,MAAM,UAAU,uBAAuB,CACrC,SAAwC;IAExC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,EAA6B,EAAE,CACtE,cAAc,CAAC,QAAQ,CAAC,QAAyB,CAAC,CACnD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,gBAA0C;IAE1C,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,gBAAgB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAC3D,CAAC;IAEF,OAAO,MAAM;SACV,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;SACtB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACf,IAAI,IAAI,CAAC,UAAU,CAAC,4BAA4B,CAAC;YAAE,OAAO,KAAK,CAAC;QAEhE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtD,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC;SACV,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,kBAAkB,CACzB,QAAuB,EACvB,MAA8B;IAE9B,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,YAAY,GAAG,MAAM,KAAK,WAAW;QACzC,CAAC,CAAC,mBAAmB,QAAQ,WAAW;QACxC,CAAC,CAAC,SAAS,QAAQ,WAAW,CAAC;IACjC,MAAM,QAAQ,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,QAAQ,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,MAAM,YAAY,GAAG,MAAM,KAAK,SAAS;QACvC,CAAC,CAAC,cAAc,QAAQ,iBAAiB;QACzC,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;QACL,CAAC,GAAG,KAAK,YAAY,EAAE,QAAQ,CAAC;QAChC,CAAC,GAAG,KAAK,gBAAgB,EAAE,YAAY,CAAC;QACxC,CAAC,GAAG,KAAK,eAAe,EAAE,MAAM,KAAK,SAAS;gBAC5C,CAAC,CAAC,yBAAyB,YAAY,GAAG;gBAC1C,CAAC,CAAC,wBAAwB,YAAY,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAc,EAAE,IAAY;IACtD,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACzC,IAAI,MAAM,CAAC,mBAAmB,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACtD,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,QAAuB,EACvB,MAA8B;IAE9B,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,MAAM,SAAS,GAAG,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC;SACnD,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;SACzD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;IAE9C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9E,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,OAAO,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,SAAiB,EACjB,gBAA0C;IAE1C,KAAK,MAAM,QAAQ,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAAE,SAAS;QAE9C,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,EAAE,CAAC,SAAS,CAChB,OAAO,EACP,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CACjD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/src/lib/onboarding.d.ts

@@ -0,0 +1,8 @@
+import type { AuthMode, PackageManager } from "./types.js";
+export type FirstSuccessGuide = {
+    title: string;
+    steps: readonly string[];
+};
+export declare function doctorCommand(packageManager: PackageManager): string;
+export declare function firstSuccessGuide(authMode: AuthMode): FirstSuccessGuide;
+//# sourceMappingURL=onboarding.d.ts.map

package/dist/src/lib/onboarding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.d.ts","sourceRoot":"","sources":["../../../src/lib/onboarding.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE3D,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B,CAAC;AAEF,wBAAgB,aAAa,CAAC,cAAc,EAAE,cAAc,GAAG,MAAM,CAMpE;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,iBAAiB,CA+BvE"}

package/dist/src/lib/onboarding.js

@@ -0,0 +1,35 @@
+import { packageCommand } from "./packageManagerCommands.js";
+export function doctorCommand(packageManager) {
+    return packageCommand(packageManager, "create-authenik8-app@latest", "doctor");
+}
+export function firstSuccessGuide(authMode) {
+    if (authMode === "fullstack") {
+        return {
+            title: "Sign in to the generated application",
+            steps: [
+                "Open http://localhost:5173 after the development server starts.",
+                "Use SEED_ADMIN_EMAIL and SEED_ADMIN_PASSWORD from .env.",
+                "Change the seeded password before sharing the environment.",
+            ],
+        };
+    }
+    if (authMode === "auth" || authMode === "auth-oauth") {
+        return {
+            title: "Complete an authenticated API request",
+            steps: [
+                "Open README.md and follow the 3-Minute Verification.",
+                "Register, sign in, and call GET /protected with the access token.",
+                "Rotate the refresh token once and replace the previous value.",
+            ],
+        };
+    }
+    return {
+        title: "Verify the JWT boundary",
+        steps: [
+            "Open README.md and follow the 3-Minute Verification.",
+            "Confirm GET /public succeeds and GET /protected rejects a missing token.",
+            "Connect your trusted identity source before calling auth.issueTokens().",
+        ],
+    };
+}
+//# sourceMappingURL=onboarding.js.map

package/dist/src/lib/onboarding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.js","sourceRoot":"","sources":["../../../src/lib/onboarding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAQ7D,MAAM,UAAU,aAAa,CAAC,cAA8B;IAC1D,OAAO,cAAc,CACnB,cAAc,EACd,6BAA6B,EAC7B,QAAQ,CACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAkB;IAClD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,OAAO;YACL,KAAK,EAAE,sCAAsC;YAC7C,KAAK,EAAE;gBACL,iEAAiE;gBACjE,yDAAyD;gBACzD,4DAA4D;aAC7D;SACF,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QACrD,OAAO;YACL,KAAK,EAAE,uCAAuC;YAC9C,KAAK,EAAE;gBACL,sDAAsD;gBACtD,mEAAmE;gBACnE,+DAA+D;aAChE;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,yBAAyB;QAChC,KAAK,EAAE;YACL,sDAAsD;YACtD,0EAA0E;YAC1E,yEAAyE;SAC1E;KACF,CAAC;AACJ,CAAC"}

package/dist/src/lib/packageManagerCommands.d.ts

@@ -0,0 +1,11 @@
+import type { PackageManager } from "./types.js";
+export declare function installCommand(packageManager: PackageManager): string;
+export declare function runScriptCommand(packageManager: PackageManager, script: string): string;
+export declare function packageCommand(packageManager: PackageManager, packageName: string, arguments_?: string): string;
+export declare function binaryCommand(packageManager: PackageManager, binary: string, arguments_?: string): string;
+export declare function productionReadmeCommands(packageManager: PackageManager): {
+    start: string;
+    logs: string;
+    stop: string;
+};
+//# sourceMappingURL=packageManagerCommands.d.ts.map

package/dist/src/lib/packageManagerCommands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"packageManagerCommands.d.ts","sourceRoot":"","sources":["../../../src/lib/packageManagerCommands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD,wBAAgB,cAAc,CAAC,cAAc,EAAE,cAAc,GAAG,MAAM,CAErE;AAED,wBAAgB,gBAAgB,CAC9B,cAAc,EAAE,cAAc,EAC9B,MAAM,EAAE,MAAM,GACb,MAAM,CAER;AAED,wBAAgB,cAAc,CAC5B,cAAc,EAAE,cAAc,EAC9B,WAAW,EAAE,MAAM,EACnB,UAAU,SAAK,GACd,MAAM,CASR;AAED,wBAAgB,aAAa,CAC3B,cAAc,EAAE,cAAc,EAC9B,MAAM,EAAE,MAAM,EACd,UAAU,SAAK,GACd,MAAM,CASR;AAED,wBAAgB,wBAAwB,CACtC,cAAc,EAAE,cAAc,GAC7B;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAM/C"}

package/dist/src/lib/packageManagerCommands.js

@@ -0,0 +1,34 @@
+export function installCommand(packageManager) {
+    return `${packageManager} install`;
+}
+export function runScriptCommand(packageManager, script) {
+    return `${packageManager} run ${script}`;
+}
+export function packageCommand(packageManager, packageName, arguments_ = "") {
+    const suffix = arguments_ ? ` ${arguments_}` : "";
+    if (packageManager === "pnpm") {
+        return `pnpm dlx ${packageName}${suffix}`;
+    }
+    if (packageManager === "bun") {
+        return `bunx ${packageName}${suffix}`;
+    }
+    return `npx ${packageName}${suffix}`;
+}
+export function binaryCommand(packageManager, binary, arguments_ = "") {
+    const suffix = arguments_ ? ` ${arguments_}` : "";
+    if (packageManager === "pnpm") {
+        return `pnpm exec ${binary}${suffix}`;
+    }
+    if (packageManager === "bun") {
+        return `bunx ${binary}${suffix}`;
+    }
+    return `npx ${binary}${suffix}`;
+}
+export function productionReadmeCommands(packageManager) {
+    return {
+        start: runScriptCommand(packageManager, "pm2:start"),
+        logs: runScriptCommand(packageManager, "pm2:logs"),
+        stop: runScriptCommand(packageManager, "pm2:stop"),
+    };
+}
+//# sourceMappingURL=packageManagerCommands.js.map

package/dist/src/lib/packageManagerCommands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"packageManagerCommands.js","sourceRoot":"","sources":["../../../src/lib/packageManagerCommands.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,cAAc,CAAC,cAA8B;IAC3D,OAAO,GAAG,cAAc,UAAU,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,cAA8B,EAC9B,MAAc;IAEd,OAAO,GAAG,cAAc,QAAQ,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,cAA8B,EAC9B,WAAmB,EACnB,UAAU,GAAG,EAAE;IAEf,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,YAAY,WAAW,GAAG,MAAM,EAAE,CAAC;IAC5C,CAAC;IACD,IAAI,cAAc,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,QAAQ,WAAW,GAAG,MAAM,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,OAAO,WAAW,GAAG,MAAM,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,cAA8B,EAC9B,MAAc,EACd,UAAU,GAAG,EAAE;IAEf,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,IAAI,cAAc,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,aAAa,MAAM,GAAG,MAAM,EAAE,CAAC;IACxC,CAAC;IACD,IAAI,cAAc,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,QAAQ,MAAM,GAAG,MAAM,EAAE,CAAC;IACnC,CAAC;IACD,OAAO,OAAO,MAAM,GAAG,MAAM,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,cAA8B;IAE9B,OAAO;QACL,KAAK,EAAE,gBAAgB,CAAC,cAAc,EAAE,WAAW,CAAC;QACpD,IAAI,EAAE,gBAAgB,CAAC,cAAc,EAAE,UAAU,CAAC;QAClD,IAAI,EAAE,gBAAgB,CAAC,cAAc,EAAE,UAAU,CAAC;KACnD,CAAC;AACJ,CAAC"}

package/dist/src/lib/process.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"process.d.ts","sourceRoot":"","sources":["../../../src/lib/process.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAY7C,wBAAgB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CA6ClF;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,kBAAmB,QAc3D;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,kBAAmB,UAQlE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,kBAAmB,GAAG,OAAO,CAQ/E;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,kBAAmB,GAAG,OAAO,CAQ3E;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,kBAAmB,GAAG,OAAO,CAY1E;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE9D;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,WAQ9C;AAED,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,OAAO,iBAIlD"}
+{"version":3,"file":"process.d.ts","sourceRoot":"","sources":["../../../src/lib/process.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAY7C,wBAAgB,GAAG,CACjB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,IAAI,CAAC,CA0Cf;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,kBAAmB,QAoB3D;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,kBAAmB,UAQlE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,kBAAmB,GAAG,OAAO,CAQ/E;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,kBAAmB,GAAG,OAAO,CAQ3E;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,kBAAmB,GAAG,OAAO,CAY1E;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE9D;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,WAQ9C;AAED,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,OAAO,iBAIlD"}

package/dist/src/lib/process.js

@@ -14,6 +14,7 @@ export function run(cmd, args, options) {
             stdio: options.stdio ?? "ignore",
             env: options.env,
             shell: process.platform === "win32",
+            detached: process.platform !== "win32",
             windowsHide: true,
         });
         activeProcesses.add(child);
@@ -55,6 +56,14 @@ export function killAllProcesses(platform = process.platform) {
                     windowsHide: true,
                 });
             }
+            else if (proc.pid) {
+                try {
+                    process.kill(-proc.pid, "SIGTERM");
+                }
+                catch {
+                    proc.kill("SIGTERM");
+                }
+            }
             else {
                 proc.kill("SIGTERM");
             }

package/dist/src/lib/process.js.map

@@ -1 +1 @@
-{"version":3,"file":"process.js","sourceRoot":"","sources":["../../../src/lib/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAgB,MAAM,eAAe,CAAC;AAG/D,MAAM,eAAe,GAAG,IAAI,GAAG,EAAgB,CAAC;AAChD,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC,SAAS,YAAY,CAAC,OAAe,EAAE,KAAc;IACnD,MAAM,IAAI,GAAG,GAAG,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1C,OAAO,IAAI,CAAC,MAAM,GAAG,mBAAmB;QACtC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,mBAAmB,CAAC;QAC/C,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,IAAc,EAAC,OAAmB;IACjE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YAC7B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,QAAQ;YAEhC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;YACnC,WAAW,EAAE,IAAI;SAElB,CAAC,CAAC;QACH,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,MAAM,GAAG,EAAE,CAAC;QAGhB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAEjC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,MAAM;oBACnB,CAAC,CAAC,GAAG,GAAG,uBAAuB,MAAM,EAAE;oBACvC,CAAC,CAAC,GAAG,GAAG,qBAAqB,IAAI,EAAE,CAAC;gBACtC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAEjE,CAAC;gBACF,IAAI,MAAM;oBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;gBAClC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAO,EAAE,EAAE;YAC5B,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAC1D,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,IAAI,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACrC,SAAS,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;oBAChE,KAAK,EAAE,QAAQ;oBACf,WAAW,EAAE,IAAI;iBAClB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IACD,eAAe,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ;IACjE,MAAM,KAAK,GAAG,QAAQ,KAAK,OAAO,CAAC;IACnC,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACpD,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACpD,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;IACvD,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACpD,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACpD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ;IACpE,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE;QACjE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,QAAQ,KAAK,OAAO;QAC3B,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAChE,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE;QAC/E,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,QAAQ,KAAK,OAAO;QAC3B,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAC/D,MAAM,MAAM,GAAG,SAAS,CACtB,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAC9B,CAAC,MAAM,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAC1C;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,QAAQ,KAAK,OAAO;QAC3B,WAAW,EAAE,IAAI;KAClB,CACF,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,QAAQ,IAAI,GAAG;QACf,CAAE,GAA2B,CAAC,MAAM,KAAK,QAAQ;YAC9C,GAA2B,CAAC,MAAM,KAAK,SAAS,CAAC,CACrD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAY;IACjD,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../../../src/lib/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAgB,MAAM,eAAe,CAAC;AAG/D,MAAM,eAAe,GAAG,IAAI,GAAG,EAAgB,CAAC;AAChD,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC,SAAS,YAAY,CAAC,OAAe,EAAE,KAAc;IACnD,MAAM,IAAI,GAAG,GAAG,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1C,OAAO,IAAI,CAAC,MAAM,GAAG,mBAAmB;QACtC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,mBAAmB,CAAC;QAC/C,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,MAAM,UAAU,GAAG,CACjB,GAAW,EACX,IAAc,EACd,OAAmB;IAEnB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;YAC7B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,QAAQ;YAChC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;YACnC,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;YACtC,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,MAAM,GAAG,EAAE,CAAC;QAEhB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACjC,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACjC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,OAAO,EAAE,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,MAAM;oBACnB,CAAC,CAAC,GAAG,GAAG,uBAAuB,MAAM,EAAE;oBACvC,CAAC,CAAC,GAAG,GAAG,qBAAqB,IAAI,EAAE,CAAC;gBACtC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,OAAO,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAEjE,CAAC;gBACF,IAAI,MAAM;oBAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;gBAClC,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAC1D,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,IAAI,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACrC,SAAS,CAAC,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;oBAChE,KAAK,EAAE,QAAQ;oBACf,WAAW,EAAE,IAAI;iBAClB,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACvB,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IACD,eAAe,CAAC,KAAK,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ;IACjE,MAAM,KAAK,GAAG,QAAQ,KAAK,OAAO,CAAC;IACnC,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACpD,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACpD,IAAI,GAAG,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;IACvD,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACpD,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;IACpD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ;IACpE,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE;QACjE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,QAAQ,KAAK,OAAO;QAC3B,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAChE,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE;QAC/E,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,QAAQ,KAAK,OAAO;QAC3B,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ;IAC/D,MAAM,MAAM,GAAG,SAAS,CACtB,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAC9B,CAAC,MAAM,EAAE,UAAU,EAAE,oBAAoB,CAAC,EAC1C;QACE,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,QAAQ,KAAK,OAAO;QAC3B,WAAW,EAAE,IAAI;KAClB,CACF,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC;AACzG,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,QAAQ,IAAI,GAAG;QACf,CAAE,GAA2B,CAAC,MAAM,KAAK,QAAQ;YAC9C,GAA2B,CAAC,MAAM,KAAK,SAAS,CAAC,CACrD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAY;IACjD,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/src/lib/projectManifest.d.ts

@@ -0,0 +1,67 @@
+import { z } from "zod";
+import type { AuthMode, Database, OAuthProviderName, PackageManager, Runtime } from "./types.js";
+export declare const PROJECT_MANIFEST_FILENAME = "authenik8.json";
+export declare const PROJECT_MANIFEST_VERSION: 1;
+export declare const projectManifestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    projectName: z.ZodString;
+    generatedBy: z.ZodObject<{
+        package: z.ZodLiteral<"create-authenik8-app">;
+        version: z.ZodString;
+    }, z.core.$strict>;
+    engine: z.ZodObject<{
+        package: z.ZodLiteral<"authenik8-core">;
+        version: z.ZodString;
+    }, z.core.$strict>;
+    preset: z.ZodEnum<{
+        fullstack: "fullstack";
+        base: "base";
+        auth: "auth";
+        "auth-oauth": "auth-oauth";
+    }>;
+    packageManager: z.ZodEnum<{
+        npm: "npm";
+        pnpm: "pnpm";
+        bun: "bun";
+    }>;
+    runtime: z.ZodEnum<{
+        bun: "bun";
+        node: "node";
+    }>;
+    database: z.ZodNullable<z.ZodEnum<{
+        sqlite: "sqlite";
+        postgresql: "postgresql";
+    }>>;
+    features: z.ZodObject<{
+        prisma: z.ZodBoolean;
+        oauthProviders: z.ZodArray<z.ZodEnum<{
+            google: "google";
+            github: "github";
+        }>>;
+        pm2: z.ZodBoolean;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type ProjectManifest = z.infer<typeof projectManifestSchema>;
+export type ProjectManifestInput = {
+    projectName: string;
+    generatorVersion: string;
+    preset: AuthMode;
+    packageManager: PackageManager;
+    runtime: Runtime;
+    database?: Database;
+    usePrisma: boolean;
+    oauthProviders?: OAuthProviderName[];
+    productionReady: boolean;
+};
+export type ProjectManifestReadResult = {
+    status: "valid";
+    manifest: ProjectManifest;
+} | {
+    status: "missing";
+} | {
+    status: "invalid";
+    message: string;
+};
+export declare function writeProjectManifest(targetDir: string, input: ProjectManifestInput): Promise<ProjectManifest>;
+export declare function readProjectManifest(rootDir: string): Promise<ProjectManifestReadResult>;
+//# sourceMappingURL=projectManifest.d.ts.map

package/dist/src/lib/projectManifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectManifest.d.ts","sourceRoot":"","sources":["../../../src/lib/projectManifest.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,OAAO,KAAK,EACV,QAAQ,EACR,QAAQ,EACR,iBAAiB,EACjB,cAAc,EACd,OAAO,EACR,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,yBAAyB,mBAAmB,CAAC;AAC1D,eAAO,MAAM,wBAAwB,EAAG,CAAU,CAAC;AAInD,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA4DhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,MAAM,MAAM,oBAAoB,GAAG;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,QAAQ,CAAC;IACjB,cAAc,EAAE,cAAc,CAAC;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACrC,eAAe,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,yBAAyB,GACjC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,eAAe,CAAA;CAAE,GAC9C;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAgB3C,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,eAAe,CAAC,CA+B1B;AAED,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAkB7F"}

package/dist/src/lib/projectManifest.js

@@ -0,0 +1,134 @@
+import { randomUUID } from "node:crypto";
+import path from "node:path";
+import fs from "fs-extra";
+import { z } from "zod";
+import { authModeSchema, databaseSchema, firstZodIssue, oauthProvidersSchema, packageManagerSchema, projectNameSchema, runtimeSchema, } from "./schemas.js";
+export const PROJECT_MANIFEST_FILENAME = "authenik8.json";
+export const PROJECT_MANIFEST_VERSION = 1;
+const packageVersionSchema = z.string().trim().min(1).max(100);
+export const projectManifestSchema = z.strictObject({
+    schemaVersion: z.literal(PROJECT_MANIFEST_VERSION),
+    projectName: projectNameSchema,
+    generatedBy: z.strictObject({
+        package: z.literal("create-authenik8-app"),
+        version: packageVersionSchema,
+    }),
+    engine: z.strictObject({
+        package: z.literal("authenik8-core"),
+        version: packageVersionSchema,
+    }),
+    preset: authModeSchema,
+    packageManager: packageManagerSchema,
+    runtime: runtimeSchema,
+    database: databaseSchema.nullable(),
+    features: z.strictObject({
+        prisma: z.boolean(),
+        oauthProviders: oauthProvidersSchema,
+        pm2: z.boolean(),
+    }),
+}).superRefine((manifest, context) => {
+    const issue = (path, message) => context.addIssue({
+        code: "custom",
+        path,
+        message,
+    });
+    if (manifest.preset === "fullstack") {
+        if (!manifest.features.prisma)
+            issue(["features", "prisma"], "fullstack requires Prisma");
+        if (manifest.database !== "postgresql")
+            issue(["database"], "fullstack requires PostgreSQL");
+        if (manifest.runtime !== "node")
+            issue(["runtime"], "fullstack requires Node.js");
+        if (manifest.packageManager !== "npm")
+            issue(["packageManager"], "fullstack requires npm workspaces");
+        if (manifest.features.pm2)
+            issue(["features", "pm2"], "PM2 generation only applies to Express presets");
+    }
+    if (manifest.preset === "base") {
+        if (manifest.features.prisma !== (manifest.database !== null)) {
+            issue(["database"], "database must be null exactly when Prisma is disabled");
+        }
+        if (manifest.features.oauthProviders.length > 0) {
+            issue(["features", "oauthProviders"], "the base preset does not include OAuth providers");
+        }
+    }
+    if (manifest.preset === "auth" || manifest.preset === "auth-oauth") {
+        if (!manifest.features.prisma || manifest.database === null) {
+            issue(["features", "prisma"], `${manifest.preset} requires Prisma and a database`);
+        }
+    }
+    if (manifest.preset !== "fullstack" && !manifest.features.pm2 && manifest.runtime !== "node") {
+        issue(["runtime"], "Express presets use Node.js unless PM2 runtime generation is enabled");
+    }
+    if (manifest.preset === "auth" && manifest.features.oauthProviders.length > 0) {
+        issue(["features", "oauthProviders"], "the auth preset does not include OAuth providers");
+    }
+    if (manifest.preset === "auth-oauth" && manifest.features.oauthProviders.length === 0) {
+        issue(["features", "oauthProviders"], "the auth-oauth preset requires an OAuth provider");
+    }
+});
+async function declaredEngineVersion(targetDir, preset) {
+    const packagePath = preset === "fullstack"
+        ? path.join(targetDir, "apps/api/package.json")
+        : path.join(targetDir, "package.json");
+    const packageJson = await fs.readJson(packagePath);
+    const version = packageJson.dependencies?.["authenik8-core"]
+        ?? packageJson.devDependencies?.["authenik8-core"];
+    if (!version?.trim())
+        throw new Error("Generated project does not declare authenik8-core");
+    return version;
+}
+export async function writeProjectManifest(targetDir, input) {
+    const manifest = projectManifestSchema.parse({
+        schemaVersion: PROJECT_MANIFEST_VERSION,
+        projectName: input.projectName,
+        generatedBy: {
+            package: "create-authenik8-app",
+            version: input.generatorVersion,
+        },
+        engine: {
+            package: "authenik8-core",
+            version: await declaredEngineVersion(targetDir, input.preset),
+        },
+        preset: input.preset,
+        packageManager: input.packageManager,
+        runtime: input.runtime,
+        database: input.database ?? null,
+        features: {
+            prisma: input.usePrisma,
+            oauthProviders: input.oauthProviders ?? [],
+            pm2: input.productionReady,
+        },
+    });
+    const manifestPath = path.join(targetDir, PROJECT_MANIFEST_FILENAME);
+    const temporaryPath = `${manifestPath}.${process.pid}-${randomUUID()}.tmp`;
+    try {
+        await fs.writeJson(temporaryPath, manifest, { spaces: 2 });
+        await fs.move(temporaryPath, manifestPath, { overwrite: true });
+    }
+    finally {
+        await fs.remove(temporaryPath);
+    }
+    return manifest;
+}
+export async function readProjectManifest(rootDir) {
+    const manifestPath = path.join(rootDir, PROJECT_MANIFEST_FILENAME);
+    if (!(await fs.pathExists(manifestPath)))
+        return { status: "missing" };
+    let source;
+    try {
+        source = await fs.readJson(manifestPath);
+    }
+    catch {
+        return { status: "invalid", message: `${PROJECT_MANIFEST_FILENAME} is not valid JSON` };
+    }
+    const result = projectManifestSchema.safeParse(source);
+    if (!result.success) {
+        return {
+            status: "invalid",
+            message: `${PROJECT_MANIFEST_FILENAME} is invalid: ${firstZodIssue(result.error)}`,
+        };
+    }
+    return { status: "valid", manifest: result.data };
+}
+//# sourceMappingURL=projectManifest.js.map