Function dedupeOAuthClients

packages/core/sdk/src/migration-spec.ts:764–790

(
  inputs: readonly PlannedOAuthClientInput[],
)

};

export const dedupeOAuthClients = (
  inputs: readonly PlannedOAuthClientInput[],
): OAuthClientDedupResult => {
  const slugByDedupKey: Record<string, string> = {};
  const clients: DedupedOAuthClient[] = [];
  // Per-partition taken slugs, so two distinct apps in one partition disambiguate.
  const takenByPartition = new Map<string, Set<string>>();

  for (const input of inputs) {
    const partition = ownerPartitionKey(input.ownerKeys);
    const key = oauthClientPlanDedupKey(input);
    if (slugByDedupKey[key]) continue; // already folded — identical app

    const taken = takenByPartition.get(partition) ?? new Set<string>();
    const base = hostSlug(input.tokenUrl);
    let slug = base;
    let n = 2;
    while (taken.has(slug)) slug = `${base}_${n++}`;
    taken.add(slug);
    takenByPartition.set(partition, taken);

    slugByDedupKey[key] = slug;
    clients.push({ ...input, slug });
  }

  return { clients, slugByDedupKey };
};

const secretReadRefKey = (ref: SecretReadRef): string =>
  `${ref.provider}\0${ref.scopeId}\0${ref.secretId}`;