Repository navigation

feat(migrate): add migration command suite - #479

Draft

royanger wants to merge 294 commits into

mainfrom

ra/integrate-migration-tool-into-cli

Draft

feat(migrate): add migration command suite#479
royanger wants to merge 294 commits into
mainfrom
ra/integrate-migration-tool-into-cli

This pull request is big! We're only showing the most recent 250 commits

Commits on Sep 18, 2026
- build: drop the unused `build` script and compile in CI
  
  royanger
  and
  claude
  committed
  e447998
- chore: set bun.lock configVersion to 0
  
  royanger
  and
  claude
  committed
  3030f79
- Merge branch 'main' into ra/integrate-migration-tool-into-cli
  royanger
  committed
  13c37c0
Commits on Sep 21, 2026
- feat(migrate): accept --no-with-identities and assume it under -y
  
  royanger
  and
  claude
  committed
  f46c0fc
- fix(migrate): keep the log directory an import saved at its start
  
  royanger
  and
  claude
  committed
  a2a5165
- feat(migrate): print the import command where an agent can see it
  
  royanger
  and
  claude
  committed
  e4db578
- build: track the playwright-core patch against 1.63.0
  
  royanger
  and
  claude
  committed
  95a0ca7
- test(migrate): compare the satellite host by hostname, not substring
  
  royanger
  and
  claude
  committed
  c33e9f8
Commits on Sep 22, 2026
- ci: match the Playwright image to the version installed
  
  royanger
  and
  claude
  committed
  dbd907f
- build: restore a build alias for main's CI
  royanger
  committed
  9edb832
- build: hold Playwright at 1.60.0 until main's CI image moves
  
  royanger
  and
  claude
  committed
  c7e5452
Commits on Sep 23, 2026
- feat(migrate): remember what an export produced
  
  royanger
  and
  claude
  committed
  d76b455
Commits on Sep 29, 2026
- refactor(migrate)!: remove `clerk migrate settings` and the state it kept
  
  royanger
  and
  claude
  committed
  447432d
- feat(migrate): keep every run in a run store, and add `clerk migrate runs`
  
  royanger
  and
  claude
  committed
  8376389
- feat(migrate): add `clerk migrate undo <run-id>`
  
  royanger
  and
  claude
  committed
  560cf28
- feat(migrate): exports write a self-describing file into their run
  
  royanger
  and
  claude
  committed
  e9e75b6
- feat(migrate)!: rename transformers to sources, and say what each one carries
  
  royanger
  and
  claude
  committed
  5e24e5a
- fix(migrate): correct what each source carries
  
  royanger
  and
  claude
  committed
  983b1f3
- feat(migrate)!: check every import against the instance, continue re-runs, and ask before writing
  
  royanger
  and
  claude
  committed
  d56fa31
- feat(migrate): print the target first on every command, and name the key's real source
  
  royanger
  and
  claude
  committed
  9fca06c
- docs(migrate): rewrite the README around the six commands, the five rules and the run store
  
  royanger
  and
  claude
  committed
  4bf1cd3
Commits on Oct 1, 2026
- fix(migrate): keep banned users banned from Better Auth, Firebase and Supabase
  
  royanger
  and
  claude
  committed
  ea8fc9d
- fix(migrate): carry Auth0 blocked users and display names
  
  royanger
  and
  claude
  committed
  459887a
- feat(migrate): keep the WorkOS tenant's external_id in private metadata
  
  royanger
  and
  claude
  committed
  63886d4
- fix(migrate): warn when Firebase returns no hash for a password user
  
  royanger
  and
  claude
  committed
  f6a3232
- fix(migrate): add the leading + to Supabase phone numbers
  
  royanger
  and
  claude
  committed
  0effeda
- feat(migrate): let CLERK_MIGRATE_DEV_USER_LIMIT override the dev user limit
  
  royanger
  and
  claude
  committed
  ebd8acb
- fix(migrate): check usernames against the instance's username rules
  
  royanger
  and
  claude
  committed
  9ab81bc
- fix(migrate): drop emails and phones the instance has off before creating users
  
  royanger
  and
  claude
  committed
  2c38439
- fix(migrate): say passwords are stored, not dropped, on an instance with passwords off
  
  royanger
  and
  claude
  committed
  63a38bb
- fix(migrate): create the user without a phone Clerk refuses
  
  royanger
  and
  claude
  committed
  069a1db
- fix(migrate): skip anonymous Better Auth users
  
  royanger
  and
  claude
  committed
  7407d73
- fix(migrate): record each user as created as soon as POST /v1/users returns
  
  royanger
  and
  claude
  committed
  6630765
Commits on Oct 2, 2026
- fix(migrate): drop usernames too when the instance has them off
  
  royanger
  and
  claude
  committed
  e8291f0
- fix(migrate): retry the instance lookup on 429, and never call an unknown instance a different one
  
  royanger
  and
  claude
  committed
  8cfda2e
- fix(migrate): import a one-word name as the first name
  
  royanger
  and
  claude
  committed
  1aea960
- fix(migrate): name the columns for a schema the export can't read, and exit 2
  
  royanger
  and
  claude
  committed
  e0960b1
- fix(migrate): drop placeholder emails Clerk refuses, and reject users left with none
  
  royanger
  and
  claude
  committed
  a33767f
- fix(migrate): name the record kept when duplicates in the file collide
  
  royanger
  and
  claude
  committed
  2ff5ae7
- fix(migrate): let undo find users whose create was in flight when the import stopped
  
  royanger
  and
  claude
  committed
  f108dc0
- fix(migrate): drop a first or last name Clerk refuses, instead of failing the user
  
  royanger
  and
  claude
  committed
  3e01d66
- fix(migrate): detect Supabase password hashers per user, and skip soft-deleted users
  
  royanger
  and
  claude
  committed
  4b7a604
- docs(migrate): document the read-only Firebase roles, and name a missing hash permission
  
  royanger
  and
  claude
  committed
  fdfe548
- docs(migrate): document both verified Firebase role setups
  
  royanger
  and
  claude
  committed
  cea1167
- fix(migrate): make resume and undo safe after an interrupted import
  
  royanger
  and
  claude
  committed
  3eec00b
- docs: add stacked pr plan
  royanger
  committed
  6930163
- fix(migrate): stop creating users with more trust than the source gave them
  
  royanger
  and
  claude
  committed
  e642140
- fix(migrate): fix the Medium review findings and the Standards behavior items
  
  royanger
  and
  claude
  committed
  0365fb8
- fix(migrate): fix the Low review findings and the Firebase temp-file leak
  
  royanger
  and
  claude
  committed
  0d0fb59
- fix(migrate): offer no fix for a Supabase provider Clerk doesn't offer
  
  royanger
  and
  claude
  committed
  fdd4974
- docs(changeset): Add `clerk migrate` for moving users into Clerk from Clerk, Auth0, Supabase, Auth.js, Better Auth, Firebase or WorkOS.
  
  royanger
  and
  claude
  committed
  033a28c
- test(migrate): read each user's latest run line in the e2e test
  
  royanger
  and
  claude
  committed
  b59cbbf
- test(e2e): don't load .env files into the e2e run
  
  royanger
  and
  claude
  committed
  b070514
- fix(migrate): read Better Auth schemas Drizzle generated
  
  royanger
  and
  claude
  committed
  baba090
- fix(migrate): exit 130 when Ctrl-C stops an import or undo
  
  royanger
  and
  claude
  committed
  d620193
Commits on Oct 5, 2026
- Merge branch 'main' into ra/integrate-migration-tool-into-cli
  royanger
  committed
  7a82040
- docs: replace the stacked PR plan with the slice plan
  
  royanger
  and
  claude
  committed
  fc2a1da
- docs: drop the agent baseline re-runs from the slice plan
  
  royanger
  and
  claude
  committed
  a87ac6e
Commits on Oct 6, 2026
- fix(migrate): keep Supabase last names from user metadata
  
  royanger
  and
  claude
  committed
  2e7dd4c
- fix(migrate): reject a row with an unknown password hasher instead of aborting
  
  royanger
  and
  claude
  committed
  86fcc62
- fix(migrate): let a row's own values win over source defaults
  
  royanger
  and
  claude
  committed
  e6079dd
- test(migrate): expect an unknown hasher to be rejected, not abort the import
  
  royanger
  and
  claude
  committed
  3b1463e
- fix(migrate): leave a create answered without a user ID as unknown
  
  royanger
  and
  claude
  committed
  5c28491
- fix(migrate): say a literal --instance could not be verified when the lookup fails
  
  royanger
  and
  claude
  committed
  2ff094f
- test(migrate): restore the interactive tests' mode instead of forcing it
  
  royanger
  and
  claude
  committed
  17bf7a9
Commits on Oct 7, 2026
- fix(migrate): reject JSON export rows that are not user objects
  
  royanger
  and
  claude
  committed
  94a33d4
- fix(migrate): skip creates a Ctrl-C stopped before they were sent
  
  royanger
  and
  claude
  committed
  ce0f749
- fix(migrate): retry a rate-limited read of the instance's settings
  
  royanger
  and
  claude
  committed
  d633874
- fix(migrate): lock the import run while undo deletes its users
  
  royanger
  and
  claude
  committed
  567cf5f
- fix(migrate): refuse an undo when another undo finished during its preview
  
  royanger
  and
  claude
  committed
  6e8a685
- docs(migrate): say undo skips consent when no users remain
  
  royanger
  and
  claude
  committed
  5d425ad
- fix(migrate): make an existing --output file owner-only too
  
  royanger
  and
  claude
  committed
  b38a471
- fix(migrate): time out a libsql request that stops responding
  
  royanger
  and
  claude
  committed
  75b12bf
- fix(migrate): redact credentials for schemes with - or .
  
  royanger
  and
  claude
  committed
  5b2c534
- fix(migrate): never prompt under --json, even at a terminal
  
  royanger
  and
  claude
  committed
  112f548
- fix(migrate): never prompt for a Firebase key under --json
  
  royanger
  and
  claude
  committed
  f7fba0d
- fix(migrate): never prompt for Auth0 credentials under --json
  
  royanger
  and
  claude
  committed
  f1bb668
- fix(migrate): never prompt for a WorkOS key or identities under --json
  
  royanger
  and
  claude
  committed
  57c876f
- fix(migrate): stop paging WorkOS users when the cursor does not move
  
  royanger
  and
  claude
  committed
  fe05c40
- fix(migrate): never re-prompt for a Better Auth connection under --json
  
  royanger
  and
  claude
  committed
  4ed193c
- fix(migrate): never re-prompt for an Auth.js connection under --json
  
  royanger
  and
  claude
  committed
  60e615b
- docs: list clerk migrate in the README and match its help
  
  royanger
  and
  claude
  committed
  b917729
- test(migrate): bring the e2e suite in line with the slice PRs
  
  royanger
  and
  claude
  committed
  b9001ad
- fix(migrate): port the remaining fixes and docs from the slice PRs
  
  royanger
  and
  claude
  committed
  3c6966a
- fix(migrate): accept only a bare host name as the Auth0 domain
  
  royanger
  and
  claude
  committed
  a634b85
- fix(migrate): never follow a redirect with Auth0 credentials
  
  royanger
  and
  claude
  committed
  e5d2213
- fix(migrate): warn whenever an Auth0 export reaches 1000 users
  
  royanger
  and
  claude
  committed
  bf95635
- fix(migrate): export each Better Auth user once
  
  royanger
  and
  claude
  committed
  d485e16
- docs(migrate): say libsql:// exports go over HTTP
  
  royanger
  and
  claude
  committed
  b32dcdf
- fix(migrate): stop the WorkOS identity fan-out on Ctrl-C or a rejected key
  
  royanger
  and
  claude
  committed
  68e4de5
- fix(migrate): encode the WorkOS user ID in the identities path
  
  royanger
  and
  claude
  committed
  0d31f6e
- feat(migrate): opt in to creating unverified identifiers reserved
  
  royanger
  and
  claude
  committed
  b50499a
- fix(migrate): read the Better Auth account table's column casing on its own
  
  royanger
  and
  claude
  committed
  4e35d86
- fix(migrate): say Auth.js Credentials-provider passwords are not exported
  
  royanger
  and
  claude
  committed
  ecb65b4
- fix(migrate): resolve each Better Auth column on its own
  
  royanger
  and
  claude
  committed
  c5b23b1
- fix(migrate): keep looking for the Auth.js table past one without its columns
  
  royanger
  and
  claude
  committed
  9df8d7b
- fix(migrate): redact credentials from database error messages
  
  royanger
  and
  claude
  committed
  6906d8a
- test(migrate): cover the generic missing-column advice again
  
  royanger
  and
  claude
  committed
  67ac723
- docs(migrate): list both hook validation errors for a custom source
  
  royanger
  and
  claude
  committed
  0e0aad1
- fix(migrate): attach what an adopted user's create left out, in its own mode
  
  royanger
  and
  claude
  committed
  71e49e6
- fix(migrate): keep prompt answers in the commands a run suggests
  
  royanger
  and
  claude
  committed
  16b6511
- fix(migrate): offer no email fix that --reserve-unverified already covers
  
  royanger
  and
  claude
  committed
  6f28ac5
Commits on Oct 8, 2026
- fix(migrate): give MySQL's missing-table errors the table advice
  
  royanger
  and
  claude
  committed
  2802d97
- fix(migrate): read a Better Auth ban expiry in epoch seconds given as a string
  
  royanger
  and
  claude
  committed
  a8713ff
- fix(migrate): detect Better Auth's Postgres schema through the search_path
  
  royanger
  and
  claude
  committed
  d86ca8e
- fix(migrate): give the Auth.js column hint a query that runs on its own example
  
  royanger
  and
  claude
  committed
  3fc131a
- fix(migrate): take the Dashboard's formula TAB off before matching Clerk identifiers
  
  royanger
  and
  claude
  committed
  6516b80
- fix(migrate): read Supabase CSV NULL cells as empty
  
  royanger
  and
  claude
  committed
  753615d
- fix(migrate): drop the Supabase source's bcrypt default
  
  royanger
  and
  claude
  committed
  057d426
- fix(migrate): number validation failures from 1
  
  royanger
  and
  claude
  committed
  789510d
- fix(migrate): keep a Supabase user on a disabled provider who can sign in by code
  
  royanger
  and
  claude
  committed
  348e2ed
- fix(migrate): retry a rate-limited read of the instance's user count
  
  royanger
  and
  claude
  committed
  28d9a6a
- fix(migrate): name the app in a suggested config patch, or leave it to fill in
  
  royanger
  and
  claude
  committed
  2db488a
- chore(migrate): drop two leftover doc comments
  
  royanger
  and
  claude
  committed
  6739906
- docs(migrate): match the import's README and tests to the provider and --app fixes
  
  royanger
  and
  claude
  committed
  1d4417f
- fix(migrate): read a Clerk primary identifier given as an array
  
  royanger
  and
  claude
  committed
  13f9167
- fix(migrate): filter --require-password's users with a Set, not a scan
  
  royanger
  and
  claude
  committed
  30407a3
- fix(migrate): do not ask about legal acceptance under --yes
  
  royanger
  and
  claude
  committed
  f1a1055
- fix(migrate): count --require-password's left-out users in the --json output
  
  royanger
  and
  claude
  committed
  021e402
- test(migrate): register the e2e import's users for cleanup before asserting
  
  royanger
  and
  claude
  committed
  fe01ebc
- fix(migrate): sign in for an --app import instead of failing on the key
  
  royanger
  and
  claude
  committed
  8d835a2
- fix(migrate): check a continued run again once its lock is held
  
  royanger
  and
  claude
  committed
  93820a9
- fix(migrate): count an adopted user against dev headroom once
  
  royanger
  and
  claude
  committed
  52da818
- fix(migrate): refuse to start over when Clerk can't name a resumed run's instance
  
  royanger
  and
  claude
  committed
  5006685
- fix(migrate): let the Supabase source split names instead of the export's SQL
  
  royanger
  and
  claude
  committed
  b9a94be
- fix(migrate): refuse an export clerk --instance the key does not address
  
  royanger
  and
  claude
  committed
  924677b
- fix(migrate): retry only the connect for a Supabase export, not the read
  
  royanger
  and
  claude
  committed
  ead3150
- fix(migrate): name an export file outside its run folder in the cleanup hint
  
  royanger
  and
  claude
  committed
  e739c30
- fix(migrate): overlap export clerk's pages so a deletion can't skip a user
  
  royanger
  and
  claude
  committed
  db88a86
- fix(migrate): let -y stand the exports' prompts down, as it says
  
  royanger
  and
  claude
  committed
  c01f496
- fix(migrate): do not ask for a Firebase key under -y
  
  royanger
  and
  claude
  committed
  0d80d8c
- fix(migrate): do not ask for Auth0 credentials under -y
  
  royanger
  and
  claude
  committed
  452d0fd
- fix(migrate): refuse an export run ID whose file changed since the export
  
  royanger
  and
  claude
  committed
  3b37194
- fix(migrate): check Firebase hash parameters before they reach a digest
  
  royanger
  and
  claude
  committed
  817fee4
- fix(migrate): check an export run's file again where its users are read
  
  royanger
  and
  claude
  committed
  cf0a607
- fix(migrate): refuse Firebase keys whose base64 Clerk could not decode
  
  royanger
  and
  claude
  committed
  6fc11ab
- fix(migrate): check an export run's file after the last read of it
  
  royanger
  and
  claude
  committed
  c938c7e
- fix(migrate): accept a Firebase project with no salt separator
  
  royanger
  and
  claude
  committed
  4eb20e0
- fix(migrate): clear SQL NULL text only from Supabase's nullable columns
  
  royanger
  and
  claude
  committed
  33917ff
- fix(migrate): stop sending creates once the user quota is reached
  
  royanger
  and
  claude
  committed
  242d6d9
- fix(migrate): pause the whole import on a 429, not just one user
  
  royanger
  and
  claude
  committed
  7cd58a2
- fix(migrate): call a key accountless only when it came from the SDK's file
  
  royanger
  and
  claude
  committed
  35556cc
- fix(migrate): print the key source without escape codes for agents
  
  royanger
  and
  claude
  committed
  65d3fc4
- fix(migrate): create a run's files owner-only
  
  royanger
  and
  claude
  committed
  a0b4678
- test(migrate): give the checks' scheduler stub a pause
  
  royanger
  and
  claude
  committed
  b126383
- test(migrate): restore the mode by value in the agent-mode test
  
  royanger
  and
  claude
  committed
  93f908e
- fix(migrate): keep calls paced when a 429 pause ends
  
  royanger
  and
  claude
  committed
  13e4869
- test(migrate): skip the run store's mode checks on Windows
  
  royanger
  and
  claude
  committed
  1726c4f
- fix(migrate): reject a user without a password when nothing else signs in
  
  royanger
  and
  claude
  committed
  e46a357
- fix(migrate): keep the identifiers Clerk keeps, by Clerk's rule
  
  royanger
  and
  claude
  committed
  8814889
- fix(migrate): check duplicates only on the identifiers the create sends
  
  royanger
  and
  claude
  committed
  7570d8b
- fix(migrate): say a name is stored, not dropped, when names are off
  
  royanger
  and
  claude
  committed
  d8a709c
- fix(migrate): drop a blank or over-long name, as Clerk refuses both
  
  royanger
  and
  claude
  committed
  d4e3a3a
- fix(migrate): put the right article on each field in the warnings
  
  royanger
  and
  claude
  committed
  e2dbfb3
- fix(migrate): use APP_ID as the fix command's app placeholder
  
  royanger
  and
  claude
  committed
  55e6c89
- fix(migrate): offer the config patch a username reject asks for
  
  royanger
  and
  claude
  committed
  edc3f76
- test(migrate): match the import's tests and README to the stricter checks
  
  royanger
  and
  claude
  committed
  26882b0
- test(migrate): give the --reserve-unverified check fixture a sign-in
  
  royanger
  and
  claude
  committed
  4bb5391
- fix(migrate): count the users an import never sent
  
  royanger
  and
  claude
  committed
  c1b7695
- fix(migrate): count the phones an import dropped on a retry
  
  royanger
  and
  claude
  committed
  47becb2
- fix(migrate): leave an interrupted import unfinished, and count users not sent
  
  royanger
  and
  claude
  committed
  bd5185f
- fix(migrate): report the users imported without the phone Clerk refused
  
  royanger
  and
  claude
  committed
  28f5820
- test(migrate): prove an import without --yes writes nothing to a real instance
  
  royanger
  and
  claude
  committed
  45a7716
- docs(migrate): say production has no user limit by default, not none at all
  
  royanger
  and
  claude
  committed
  7cd9552
- fix(migrate): sign in for --app even when CLERK_SECRET_KEY is set
  
  royanger
  and
  claude
  committed
  51b755f
- docs(migrate): say unknown fields are warned about, and use sentence case
  
  royanger
  and
  claude
  committed
  1bfd21c
- fix(migrate): name the users an import would skip when asking to go ahead
  
  royanger
  and
  claude
  committed
  ab3087d
Commits on Oct 9, 2026
- test(migrate): check undo's users are gone by Clerk's not-found answer
  
  royanger
  and
  claude
  committed
  591e256
- fix(migrate): adopt an in-flight user only if Clerk created it during the run
  
  royanger
  and
  claude
  committed
  1ef115d
- fix(migrate): read a path import's envelope and users from one revision
  
  royanger
  and
  claude
  committed
  f1914b3
- fix(migrate): print the Firebase parameters as names a shell passes through
  
  royanger
  and
  claude
  committed
  4baae7a
- fix(migrate): reject a Firebase digest whose segments are not base64
  
  royanger
  and
  claude
  committed
  8496aea
- fix(migrate): keep the verified phone when Clerk refuses a reserved one
  
  royanger
  and
  claude
  committed
  cc6b778
- fix(migrate): check reserved identifiers for duplicates too
  
  royanger
  and
  claude
  committed
  abecb22
- fix(migrate): count an adopted user's reserved email toward a required one
  
  royanger
  and
  claude
  committed
  899f814
- fix(migrate): refuse to continue a Firebase import with other hash parameters
  
  royanger
  and
  claude
  committed
  729a473
- fix(migrate): pause every user lookup on a 429, not just the one that hit it
  
  royanger
  and
  claude
  committed
  0087092
- fix(migrate): pause every undo delete on a 429, not just the one that hit it
  
  royanger
  and
  claude
  committed
  1def5a6
- fix(migrate): drop a malformed bcrypt hash instead of rejecting its user
  
  royanger
  and
  claude
  committed
  b95d636
- fix(migrate): keep a temporary Supabase ban's end date for the checks
  
  royanger
  and
  claude
  committed
  67e79bf
- fix(migrate): warn that a ban due to end stays until it is lifted in Clerk
  
  royanger
  and
  claude
  committed
  48e3729
- docs(migrate): say retries and refusals land in a line's error field
  
  royanger
  and
  claude
  committed
  bb3f015
- fix(migrate): page an Auth0 export to its total, not to the first short page
  
  royanger
  and
  claude
  committed
  22ee96f
- fix(migrate): keep a Better Auth ban's end date, and drop a malformed hash
  
  royanger
  and
  claude
  committed
  49195c7
- fix(migrate): refuse a second import while one of the same file is live
  
  royanger
  and
  claude
  committed
  c0c82a2
- fix(migrate): check an adopted user's identifiers in its own create's mode
  
  royanger
  and
  claude
  committed
  ff171f1
- test(migrate): allow timer drift in the pause pacing check
  
  royanger
  and
  claude
  committed
  455bb01
- test(migrate): cover the --json outcomes that stop before a run exists
  
  royanger
  and
  claude
  committed
  1964ca2
- fix(migrate): check for an unfinished undo again once a continue holds the lock
  
  royanger
  and
  claude
  committed
  20eabf6
- fix(migrate): still check other users against an adopted user's identifiers
  
  royanger
  and
  claude
  committed
  1af209c
- fix(migrate): adopt an in-flight user only if it carries the run's marker
  
  royanger
  and
  claude
  committed
  ad00fb6
- fix(migrate): make an existing --output owner-only before writing the export to it
  
  royanger
  and
  claude
  committed
  8872773
- fix(migrate): link a run continued by export run ID to its export
  
  royanger
  and
  claude
  committed
  32953a8
- fix(migrate): refuse a non-Postgres URL for a Supabase export before connecting
  
  royanger
  and
  claude
  committed
  11c5c56
- fix(migrate): say --source takes a key or a path in the sources listing
  
  royanger
  and
  claude
  committed
  52b9090
- test(migrate): import exportSupabase where this branch's db-exports test needs it
  
  royanger
  and
  claude
  committed
  0c640f3
- test(migrate): hold the pause pacing check to 80% of the interval
  
  royanger
  and
  claude
  committed
  887c5ac
- fix(migrate): never reject an adopted user, nor count it against the dev quota
  
  royanger
  and
  claude
  committed
  52810e3
- docs(migrate): say a cut-off create is redone only when nothing matches
  
  royanger
  and
  claude
  committed
  9242dfc
- fix(migrate): write an export to a temp file and rename it over --output
  
  royanger
  and
  claude
  committed
  09830a6
- docs(migrate): note the Supabase export's memory ceiling
  
  royanger
  and
  claude
  committed
  fe4be7f
- docs(migrate): list Auth.js among the platforms that export no passwords
  
  royanger
  and
  claude
  committed
  10688be
- fix(migrate): hold an exclusive lock for an import of a file, from before its checks
  
  royanger
  and
  claude
  committed
  ba48621
- fix(migrate): load a custom source by the hash a run records for it
  
  royanger
  and
  claude
  committed
  e70544d
- docs(migrate): say a custom source's hash covers its own file only
  
  royanger
  and
  claude
  committed
  082b4c6
- fix(migrate): clear a NULL created_at, refuse bcrypt under cost 4, and match the checks
  
  royanger
  and
  claude
  committed
  6e87237
- fix(migrate): reject a bcrypt digest under cost 4 in the checks
  
  royanger
  and
  claude
  committed
  7dbe5b4
- fix(migrate): drain the queue at once after a quota stop or a Ctrl-C
  
  royanger
  and
  claude
  committed
  f93a1e9
- fix(migrate): return the quota stop for the caller to print after the progress bar
  
  royanger
  and
  claude
  committed
  32db660
- refactor(migrate): read the SDK keyless file's source from keyless-target
  
  royanger
  and
  claude
  committed
  8418773
- fix(migrate): say why an import stopped in its summary, after the progress bar
  
  royanger
  and
  claude
  committed
  0b3ba26
- fix(migrate): type this branch's import summary so stopReason reads
  
  royanger
  and
  claude
  committed
  0ee2340
- refactor(migrate): name the stored-field fix rows' verb so oxlint's no-thenable stops firing
  
  royanger
  and
  claude
  committed
  51ce34b
- fix(migrate): say a user with no identifier may have a username Clerk refuses
  
  royanger
  and
  claude
  committed
  c02c114
- fix(migrate): say numeric usernames make Clerk require E.164 phones, and skip that fix for a file without them
  
  royanger
  and
  claude
  committed
  d585cdd
- chore(migrate): drop the log import the import's stop reason left unused
  
  royanger
  and
  claude
  committed
  7bcadce
- fix(migrate): print the run line on a Ctrl-C and close the gutter as paused
  
  royanger
  and
  claude
  committed
  8220784
- fix(migrate): save the users a stopped import never sent in run.json's counts
  
  royanger
  and
  claude
  committed
  b9e21fe
- fix(migrate): split the consent refusal into what the import would do and how to confirm it
  
  royanger
  and
  claude
  committed
  204ef72
- docs(migrate): document the Not sent count, how to send those users, and an interrupted run
  
  royanger
  and
  claude
  committed
  1ebd67d
- refactor(migrate): drop the adopted-user guard the checks made dead when recording rejects
  
  royanger
  and
  claude
  committed
  9db2fcf
- docs(migrate): say export supabase takes a Postgres connection string only
  
  royanger
  and
  claude
  committed
  eda6aa9
- docs(migrate): say only clerk's export counts the passwords it can't export
  
  royanger
  and
  claude
  committed
  57c2917
- docs(migrate): say an Auth.js Credentials app stores passwords wherever it chose to
  
  royanger
  and
  claude
  committed
  2b99fcb
- fix(migrate): link a lock into place whole, so no reader sees it without its PID
  
  royanger
  and
  claude
  committed
  8ae6d06
- docs(migrate): say a custom source can import its own files, but not the CLI
  
  royanger
  and
  claude
  committed
  884c203
- fix(migrate): count a reserved email or phone as a way in past a disabled provider
  
  royanger
  and
  claude
  committed
  87e6cb4
- fix(migrate): attach the reserved phones a refusal kept off the create one by one
  
  royanger
  and
  claude
  committed
  5ceaaa9
- docs(migrate): say a Supabase user on a disabled provider is kept when an email link signs them in too
  
  royanger
  and
  claude
  committed
  e6ab3a9
- fix(migrate): cut a backoff or paced wait short on a stop, and count only unsent users as not sent
  
  royanger
  and
  claude
  committed
  558f85e
- fix(migrate): leave an attach pending when a Ctrl-C lands while it waits
  
  royanger
  and
  claude
  committed
  97f4b7d
- fix(migrate): drop phones not in E.164 form where numeric usernames are on, and say what turning it on would cost
  
  royanger
  and
  claude
  committed
  a24c497
- docs(migrate): document the phones numeric usernames make Clerk refuse
  
  royanger
  and
  claude
  committed
  718753f
- fix(migrate): print the run ID and folder as the import starts, so a real Ctrl-C leaves them on screen
  
  royanger
  and
  claude
  committed
  7076125
- fix(migrate): say how to send the users a quota stop left, without repeating Clerk's message
  
  royanger
  and
  claude
  committed
  f92aa47
- docs(migrate): bring the username and bcrypt cost check bullets in line with #519
  
  royanger
  and
  claude
  committed
  49a176b
- fix(migrate): say a plain re-run sends the users a quota stop left, on this branch
  
  royanger
  and
  claude
  committed
  a0eea46
- test(migrate): keep an inherited runs-dir override out of the Ctrl-C subprocess
  
  royanger
  and
  claude
  committed
  eb52328
- docs(migrate): say only an import that gets as far as writing is a run
  
  royanger
  and
  claude
  committed
  e85f536
- docs(migrate): say only an empty file writes no run among the imports with nobody to create
  
  royanger
  and
  claude
  committed
  5b41984
- fix(migrate): record a created user with its pending attaches in one line
  
  royanger
  and
  claude
  committed
  6737dd1
- fix(migrate): still reject a second record with an adopted user's source ID
  
  royanger
  and
  claude
  committed
  799a9d0
- test(migrate): check the email each platform's import sends, not just its source ID
  
  royanger
  and
  claude
  committed
  128bcb0
- fix(migrate): key the import lock by the secret key, so a failed instance lookup takes the same one
  
  royanger
  and
  claude
  committed
  c1ff6c4
Commits on Oct 10, 2026
- docs(migrate): say the run's marker replaces one the source already carries
  
  royanger
  and
  claude
  committed
  9249587
- fix(migrate): reject an earlier record that claims an identifier an adopted user holds
  
  royanger
  and
  claude
  committed
  7ade4f4
- fix(migrate): do not prompt for a missing WorkOS key under -y
  
  royanger
  and
  claude
  committed
  482a248
- fix(migrate): lock an import by the instance too, so a second key for it takes the same lock
  
  royanger
  and
  claude
  committed
  b13a438
- docs(migrate): name the Auth0 API the exporter calls as the Management API
  
  royanger
  and
  claude
  committed
  875a7e3
- docs(migrate): name the phone endpoint too, and say an adopted user keeps its recorded mode
  
  royanger
  and
  claude
  committed
  514e29f

Commits

Commits on Sep 18, 2026

Commits on Sep 21, 2026

Commits on Sep 22, 2026

Commits on Sep 23, 2026

Commits on Sep 29, 2026

Commits on Oct 1, 2026

Commits on Oct 2, 2026

Commits on Oct 5, 2026

Commits on Oct 6, 2026

Commits on Oct 7, 2026

Commits on Oct 8, 2026