@atlasauth/cli 0.6.0 → 0.8.0

package/dist/migrate/better-auth/output.js

@@ -0,0 +1,146 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REPORT_JSON = exports.REPORT_MD = void 0;
+exports.reportCounts = reportCounts;
+exports.documentFiles = documentFiles;
+exports.writeTranslation = writeTranslation;
+exports.reportJson = reportJson;
+exports.renderReport = renderReport;
+exports.summaryLines = summaryLines;
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const serialize_1 = require("../../serialize");
+/** The report files written next to the config documents (ignored by `atlas config import`). */
+exports.REPORT_MD = 'better-auth-report.md';
+exports.REPORT_JSON = 'better-auth-report.json';
+const ORDER = ['manual', 'differs', 'mapped'];
+const HEADINGS = {
+    manual: 'Needs a manual step',
+    differs: 'Maps with a difference',
+    mapped: 'Maps 1:1',
+};
+/** Counts per status. */
+function reportCounts(report) {
+    const out = { mapped: 0, differs: 0, manual: 0 };
+    for (const e of report)
+        out[e.status] += 1;
+    return out;
+}
+/** The resource files a translation produces: only the non-empty ones, plus the instance. */
+function documentFiles(t) {
+    const d = t.document;
+    const files = [{ type: 'instance', value: d.instance }];
+    const collections = [
+        ['oauth_providers', d.oauth_providers],
+        ['custom_oauth_providers', d.custom_oauth_providers],
+        ['permissions', d.permissions],
+        ['roles', d.roles],
+        ['oauth_clients', d.oauth_clients],
+        ['resource_servers', d.resource_servers],
+        ['billing_plans', d.billing_plans],
+        ['redirect_urls', d.redirect_urls],
+        ['jwt_templates', d.jwt_templates],
+    ];
+    for (const [type, value] of collections)
+        if (value.length)
+            files.push({ type, value });
+    return files;
+}
+/** Write the config documents and both reports into `dir`. Returns the file names written. */
+function writeTranslation(t, dir, format) {
+    (0, node_fs_1.mkdirSync)(dir, { recursive: true });
+    const ext = format === 'json' ? 'json' : 'yaml';
+    const written = [];
+    for (const f of documentFiles(t)) {
+        const name = `${f.type}.${ext}`;
+        (0, node_fs_1.writeFileSync)((0, node_path_1.join)(dir, name), (0, serialize_1.serialize)(f.value, format));
+        written.push(name);
+    }
+    (0, node_fs_1.writeFileSync)((0, node_path_1.join)(dir, exports.REPORT_MD), renderReport(t));
+    (0, node_fs_1.writeFileSync)((0, node_path_1.join)(dir, exports.REPORT_JSON), JSON.stringify(reportJson(t), null, 2) + '\n');
+    written.push(exports.REPORT_MD, exports.REPORT_JSON);
+    return written;
+}
+/** The machine-readable report (no values of secrets: only env var names). */
+function reportJson(t) {
+    return {
+        object: 'better_auth_config_translation',
+        source: t.source,
+        other_instances: t.otherInstances,
+        plugins: t.plugins,
+        counts: reportCounts(t.report),
+        report: t.report,
+        env: t.env,
+        secrets: t.secrets,
+        mappings: t.mappings,
+        bridge: t.bridge,
+        document: t.document,
+    };
+}
+/** The human report, as Markdown. */
+function renderReport(t) {
+    const counts = reportCounts(t.report);
+    const lines = [];
+    lines.push('# Better Auth → Atlas: configuration report', '');
+    lines.push(t.source ? `Translated \`betterAuth()\` at \`${t.source.file}:${t.source.line}\`.` : 'No `betterAuth()` call was found.', '');
+    if (t.plugins.length)
+        lines.push(`Plugins: ${t.plugins.map((p) => `\`${p}\``).join(', ')}.`, '');
+    lines.push(`${counts.mapped} map 1:1, ${counts.differs} map with a difference, ${counts.manual} need a manual step.`, '');
+    if (t.env.length) {
+        lines.push('## Environment variables to set before applying', '');
+        lines.push('The config files hold `${NAME}` placeholders, never secret values. Set these (from your app\'s environment) when you run `atlas config import` or `atlas migrate better-auth`:', '');
+        for (const e of t.env)
+            lines.push(`- \`${e.name}\`: ${e.for}`);
+        lines.push('');
+    }
+    if (t.secrets.length) {
+        lines.push('## Secrets stored before the config', '');
+        for (const s of t.secrets)
+            lines.push(`- captcha secret for \`${s.provider}\` from \`${s.env}\` (write-only)`);
+        lines.push('');
+    }
+    for (const status of ORDER) {
+        const entries = t.report.filter((e) => e.status === status);
+        if (!entries.length)
+            continue;
+        lines.push(`## ${HEADINGS[status]} (${entries.length})`, '');
+        lines.push('| Better Auth | Atlas | Note | Where |', '|---|---|---|---|');
+        for (const e of entries) {
+            lines.push(`| \`${cell(e.option)}\` | ${e.atlas ? `\`${cell(e.atlas)}\`` : ''} | ${cell(e.note)} | \`${e.file}:${e.line}\` |`);
+        }
+        lines.push('');
+    }
+    const providers = Object.entries(t.mappings.providers);
+    if (providers.length) {
+        lines.push('## Provider ids', '', '| Better Auth providerId | Atlas provider |', '|---|---|');
+        for (const [from, to] of providers)
+            lines.push(`| \`${from}\` | \`${to}\` |`);
+        lines.push('');
+    }
+    const roles = Object.entries(t.mappings.roles);
+    if (roles.length) {
+        lines.push('## Organization roles', '', '| Better Auth role | Atlas role |', '|---|---|');
+        for (const [from, to] of roles)
+            lines.push(`| \`${from}\` | \`${to}\` |`);
+        lines.push('');
+    }
+    return lines.join('\n');
+}
+function cell(text) {
+    return text.replace(/\|/g, '\\|').replace(/\n/g, ' ');
+}
+/** Short terminal summary lines. */
+function summaryLines(t, dir, written) {
+    const c = reportCounts(t.report);
+    const out = [
+        t.source ? `Read betterAuth() at ${t.source.file}:${t.source.line}${t.plugins.length ? ` with ${t.plugins.length} plugin(s): ${t.plugins.join(', ')}` : ''}.` : 'No betterAuth() call found.',
+        `Wrote ${written.length - 2} config file(s) and the report to ${dir}: ${written.join(', ')}`,
+        `${c.mapped} map 1:1, ${c.differs} map with a difference, ${c.manual} need a manual step (see ${(0, node_path_1.join)(dir, exports.REPORT_MD)}).`,
+    ];
+    if (t.env.length)
+        out.push(`Set before applying: ${t.env.map((e) => e.name).join(', ')}`);
+    for (const e of t.report.filter((x) => x.status === 'manual'))
+        out.push(`  manual  ${e.file}:${e.line}  ${e.option}: ${e.note}`);
+    return out;
+}
+//# sourceMappingURL=output.js.map

package/dist/migrate/better-auth/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../../src/migrate/better-auth/output.ts"],"names":[],"mappings":";;;AAiBA,oCAIC;AAGD,sCAgBC;AAGD,4CAaC;AAGD,gCAcC;AAGD,oCAyCC;AAOD,oCAUC;AAtID,qCAAmD;AACnD,yCAAiC;AACjC,+CAAoE;AAGpE,gGAAgG;AACnF,QAAA,SAAS,GAAG,uBAAuB,CAAC;AACpC,QAAA,WAAW,GAAG,yBAAyB,CAAC;AAErD,MAAM,KAAK,GAAmB,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC9D,MAAM,QAAQ,GAAiC;IAC7C,MAAM,EAAE,qBAAqB;IAC7B,OAAO,EAAE,wBAAwB;IACjC,MAAM,EAAE,UAAU;CACnB,CAAC;AAEF,yBAAyB;AACzB,SAAgB,YAAY,CAAC,MAAqB;IAChD,MAAM,GAAG,GAAiC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAC/E,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6FAA6F;AAC7F,SAAgB,aAAa,CAAC,CAAc;IAC1C,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IACrB,MAAM,KAAK,GAAyC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,QAA2B,EAAE,CAAC,CAAC;IACjH,MAAM,WAAW,GAA4B;QAC3C,CAAC,iBAAiB,EAAE,CAAC,CAAC,eAAe,CAAC;QACtC,CAAC,wBAAwB,EAAE,CAAC,CAAC,sBAAsB,CAAC;QACpD,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,CAAC;QAC9B,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC;QAClB,CAAC,eAAe,EAAE,CAAC,CAAC,aAAa,CAAC;QAClC,CAAC,kBAAkB,EAAE,CAAC,CAAC,gBAAgB,CAAC;QACxC,CAAC,eAAe,EAAE,CAAC,CAAC,aAAa,CAAC;QAClC,CAAC,eAAe,EAAE,CAAC,CAAC,aAAa,CAAC;QAClC,CAAC,eAAe,EAAE,CAAC,CAAC,aAAa,CAAC;KACnC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,WAAW;QAAE,IAAI,KAAK,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,8FAA8F;AAC9F,SAAgB,gBAAgB,CAAC,CAAc,EAAE,GAAW,EAAE,MAAc;IAC1E,IAAA,mBAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAChD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;QAChC,IAAA,uBAAa,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,IAAI,CAAC,EAAE,IAAA,qBAAS,EAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IACD,IAAA,uBAAa,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,iBAAS,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAA,uBAAa,EAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,mBAAW,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACrF,OAAO,CAAC,IAAI,CAAC,iBAAS,EAAE,mBAAW,CAAC,CAAC;IACrC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,SAAgB,UAAU,CAAC,CAAc;IACvC,OAAO;QACL,MAAM,EAAE,gCAAgC;QACxC,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,eAAe,EAAE,CAAC,CAAC,cAAc;QACjC,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9B,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC;AACJ,CAAC;AAED,qCAAqC;AACrC,SAAgB,YAAY,CAAC,CAAc;IACzC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,6CAA6C,EAAE,EAAE,CAAC,CAAC;IAC9D,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;IACzI,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACjG,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,aAAa,MAAM,CAAC,OAAO,2BAA2B,MAAM,CAAC,MAAM,sBAAsB,EAAE,EAAE,CAAC,CAAC;IAC1H,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,iDAAiD,EAAE,EAAE,CAAC,CAAC;QAClE,KAAK,CAAC,IAAI,CAAC,gLAAgL,EAAE,EAAE,CAAC,CAAC;QACjM,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC,QAAQ,aAAa,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC;QAC/G,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,SAAS;QAC9B,KAAK,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7D,KAAK,CAAC,IAAI,CAAC,wCAAwC,EAAE,mBAAmB,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC;QACjI,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,EAAE,6CAA6C,EAAE,WAAW,CAAC,CAAC;QAC9F,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;QAC9E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,EAAE,mCAAmC,EAAE,WAAW,CAAC,CAAC;QAC1F,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,UAAU,EAAE,MAAM,CAAC,CAAC;QAC1E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,oCAAoC;AACpC,SAAgB,YAAY,CAAC,CAAc,EAAE,GAAW,EAAE,OAAiB;IACzE,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG;QACV,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,MAAM,eAAe,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,6BAA6B;QAC7L,SAAS,OAAO,CAAC,MAAM,GAAG,CAAC,qCAAqC,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC5F,GAAG,CAAC,CAAC,MAAM,aAAa,CAAC,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,4BAA4B,IAAA,gBAAI,EAAC,GAAG,EAAE,iBAAS,CAAC,IAAI;KACzH,CAAC;IACF,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1F,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACjI,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/migrate/better-auth/translate.d.ts

@@ -0,0 +1,77 @@
+import { type BetterAuthAnalysis, type SourceLoc } from '@atlasauth/upgrade';
+import type { Json } from '../../serialize';
+/**
+ * Better Auth options → an Atlas config-as-code document (the same per-resource
+ * files `atlas config export` writes and `atlas config import` applies) plus a
+ * line-by-line report of what mapped 1:1, what maps with a difference and what
+ * needs a manual step, each with the file and line of the option.
+ *
+ * Pure: it works on the static analysis only. Secrets are NEVER read: a value
+ * that comes from an environment variable is written as a `${NAME}` placeholder
+ * (the import interpolates it from the environment), and a secret hard-coded in
+ * source is replaced by a placeholder and flagged.
+ */
+export type ReportStatus = 'mapped' | 'differs' | 'manual';
+export interface ReportEntry {
+    status: ReportStatus;
+    /** The Better Auth area: `emailAndPassword`, `plugin:organization`, … */
+    area: string;
+    /** The Better Auth option path (`session.expiresIn`). */
+    option: string;
+    /** Where it lands in Atlas (`auth_config.session.idleMs`, `oauth_providers google`). */
+    atlas?: string;
+    note: string;
+    file: string;
+    line: number;
+}
+export interface ConfigDocument {
+    instance: {
+        allowed_origins?: string[];
+        auth_config: Record<string, Json>;
+    };
+    oauth_providers: Json[];
+    custom_oauth_providers: Json[];
+    permissions: Json[];
+    roles: Json[];
+    oauth_clients: Json[];
+    resource_servers: Json[];
+    billing_plans: Json[];
+    redirect_urls: Json[];
+    jwt_templates: Json[];
+}
+export interface Translation {
+    /** The `betterAuth()` call that was translated. */
+    source: SourceLoc | null;
+    /** Every other `betterAuth()` call found (not translated). */
+    otherInstances: SourceLoc[];
+    document: ConfigDocument;
+    report: ReportEntry[];
+    /** Environment variables the document's `${NAME}` placeholders need at import time. */
+    env: Array<{
+        name: string;
+        for: string;
+    }>;
+    /** Secrets that are stored through their own write-only endpoint before the config is applied. */
+    secrets: Array<{
+        kind: 'captcha_secret';
+        provider: string;
+        env: string;
+    }>;
+    /** Better Auth ids → Atlas ids, for the data import and the code rewrite. */
+    mappings: {
+        providers: Record<string, string>;
+        roles: Record<string, string>;
+    };
+    /** What the session bridge needs to recognise a Better Auth session. */
+    bridge: {
+        cookiePrefix: string;
+        sessionCookie: string;
+        secretEnv: string | null;
+        expiresInSeconds: number;
+    };
+    /** Plugin ids found, in order. */
+    plugins: string[];
+}
+/** Better Auth social provider id → Atlas catalog provider key. */
+export declare const SOCIAL_PROVIDER_MAP: Record<string, string>;
+export declare function translateBetterAuth(analysis: BetterAuthAnalysis): Translation;