@atlasauth/react 0.19.0 → 0.21.0

package/dist/compat-descope.js

@@ -0,0 +1,191 @@
+"use strict";
+'use client';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.descopeUserFrom = descopeUserFrom;
+exports.descopeClaimsFrom = descopeClaimsFrom;
+exports.useDescopeSessionCompat = useDescopeSessionCompat;
+exports.useDescopeUserCompat = useDescopeUserCompat;
+exports.useDescopeCompat = useDescopeCompat;
+exports.getDescopeSessionTokenCompat = getDescopeSessionTokenCompat;
+/**
+ * Drop-in helpers for apps moving to Atlas from Descope (`@descope/react-sdk`,
+ * and the client half of `@descope/nextjs-sdk`).
+ *
+ * `atlas migrate code --from descope` rewrites `useSession()`, `useUser()`,
+ * `useDescope()` and awaited `getSessionToken()` calls onto these, so the
+ * migrated components keep reading the Descope shapes they were written against
+ * (`{ isAuthenticated, isSessionLoading, sessionToken }`, `user.userId`,
+ * `user.userTenants`, …). Each one is a projection over the `<AtlasProvider>`
+ * state; move call sites to `useAuth()` / `useUser()` at your own pace.
+ *
+ * Where Atlas and Descope differ:
+ *  - Descope's project-wide roles and permissions are Atlas app roles: they
+ *    come from the session's `app_roles` / `app_permissions` claims. Tenant
+ *    roles are organization roles: `userTenants` lists every membership (one
+ *    role each); the claims' `tenants` holds the active organization.
+ *  - `customAttributes` is the user's `publicMetadata`.
+ *  - `useDescopeCompat()` only has `logout()` and `refresh()`; the codemod
+ *    leaves every other `useDescope()` member for you to port.
+ */
+const react_1 = require("react");
+const AtlasProvider_1 = require("./AtlasProvider");
+const active_atlas_1 = require("./active-atlas");
+function stringList(value) {
+    return Array.isArray(value) ? value.filter((v) => typeof v === 'string') : [];
+}
+/**
+ * Project an Atlas user onto Descope's user shape: organization memberships
+ * become `userTenants`, the session's app roles `roleNames`.
+ */
+function descopeUserFrom(user, memberships = [], claims = null) {
+    if (!user)
+        return undefined;
+    const emails = user.email_addresses ?? [];
+    const email = emails.find((e) => e.primary) ?? emails.find((e) => e.verified) ?? emails[0];
+    const phones = user.phone_numbers ?? [];
+    const phone = phones.find((p) => p.primary) ?? phones[0];
+    const name = [user.first_name, user.last_name].filter(Boolean).join(' ').trim();
+    const out = {
+        userId: user.id,
+        loginIds: [email?.email_address, phone?.phone_number, user.username].filter((v) => Boolean(v)),
+        verifiedEmail: email?.verified ?? false,
+        verifiedPhone: phone?.verified ?? false,
+        roleNames: stringList(claims?.app_roles),
+        userTenants: memberships.map((m) => ({
+            tenantId: m.organization.id,
+            tenantName: m.organization.name,
+            roleNames: m.role ? [m.role] : [],
+        })),
+        customAttributes: { ...user.public_metadata },
+    };
+    if (email)
+        out.email = email.email_address;
+    if (phone)
+        out.phone = phone.phone_number;
+    if (name)
+        out.name = name;
+    if (user.first_name)
+        out.givenName = user.first_name;
+    if (user.last_name)
+        out.familyName = user.last_name;
+    if (user.image_url)
+        out.picture = user.image_url;
+    return out;
+}
+/**
+ * Project Atlas session claims onto Descope's: top-level `roles` / `permissions`
+ * are the app roles and their permissions (`app_roles` / `app_permissions`),
+ * `tenants` holds the active organization's role and permissions.
+ */
+function descopeClaimsFrom(claims) {
+    if (!claims)
+        return undefined;
+    const tenants = {};
+    if (claims.org_id) {
+        tenants[claims.org_id] = {
+            roles: claims.org_role ? [claims.org_role] : [],
+            permissions: [...(claims.org_permissions ?? [])],
+        };
+    }
+    return { ...claims, roles: stringList(claims.app_roles), permissions: stringList(claims.app_permissions), tenants };
+}
+/** The `exp` (unix seconds) of a JWT, or undefined when it cannot be read. */
+function tokenExp(token) {
+    try {
+        const payload = token.split('.')[1];
+        if (!payload)
+            return undefined;
+        const json = JSON.parse(atob(payload.replace(/-/g, '+').replace(/_/g, '/')));
+        return typeof json.exp === 'number' ? json.exp : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * `useSession()` from Descope, on Atlas: `{ isAuthenticated, isSessionLoading,
+ * isSessionFetched, sessionToken, claims }`. `sessionToken` is the Atlas session
+ * JWT; Atlas session tokens are short-lived, so it is fetched again shortly
+ * before each one expires. `isSessionLoading` stays true until the first token
+ * is in hand, so a component that waits for it never sends `Bearer undefined`.
+ */
+function useDescopeSessionCompat() {
+    const atlas = (0, AtlasProvider_1.useAtlas)();
+    const signedIn = atlas.status === 'signed_in';
+    const [token, setToken] = (0, react_1.useState)(undefined);
+    // The latest getToken, without re-running the effect when its identity changes.
+    const getToken = (0, react_1.useRef)(atlas.getToken);
+    getToken.current = atlas.getToken;
+    const sessionKey = signedIn ? `${atlas.user?.id ?? ''}:${atlas.claims?.sid ?? ''}` : '';
+    (0, react_1.useEffect)(() => {
+        if (!sessionKey) {
+            setToken(undefined);
+            return;
+        }
+        let cancelled = false;
+        let timer;
+        const load = async () => {
+            const next = await getToken.current().catch(() => null);
+            if (cancelled)
+                return;
+            setToken(next ?? undefined);
+            const exp = next ? tokenExp(next) : undefined;
+            const wait = exp ? Math.max(5_000, exp * 1000 - Date.now() - 10_000) : 30_000;
+            timer = setTimeout(() => void load(), wait);
+        };
+        void load();
+        return () => {
+            cancelled = true;
+            if (timer)
+                clearTimeout(timer);
+        };
+    }, [sessionKey]);
+    return {
+        isAuthenticated: signedIn,
+        isSessionLoading: atlas.status === 'loading' || (signedIn && token === undefined),
+        isSessionFetched: atlas.status !== 'loading',
+        sessionToken: signedIn ? token : undefined,
+        claims: signedIn ? descopeClaimsFrom(atlas.claims) : undefined,
+    };
+}
+/** `useUser()` from Descope, on Atlas: `{ user, isUserLoading, isUserFetched }`. */
+function useDescopeUserCompat() {
+    const atlas = (0, AtlasProvider_1.useAtlas)();
+    return {
+        user: atlas.status === 'signed_in' ? descopeUserFrom(atlas.user, atlas.memberships, atlas.claims) : undefined,
+        isUserLoading: atlas.status === 'loading',
+        isUserFetched: atlas.status !== 'loading',
+    };
+}
+/**
+ * `useDescope()` from Descope, on Atlas — the session members only: `logout()`
+ * signs out (revoking the session) and `refresh()` reloads the session. Both
+ * resolve `{ ok: true }` like the Descope SDK's responses. Stable across renders,
+ * so it can sit in a `useCallback` dependency list as the Descope SDK did.
+ */
+function useDescopeCompat() {
+    const { signOut, reload } = (0, AtlasProvider_1.useAtlas)();
+    return (0, react_1.useMemo)(() => ({
+        async logout() {
+            await signOut();
+            return { ok: true };
+        },
+        async refresh() {
+            await reload();
+            return { ok: true };
+        },
+    }), [signOut, reload]);
+}
+/**
+ * `getSessionToken()` from Descope, on Atlas. Descope's is synchronous; Atlas
+ * mints tokens asynchronously, so this resolves the token (`await` it). Like
+ * Descope it yields an empty string when nobody is signed in, or when no
+ * `<AtlasProvider>` is mounted.
+ */
+async function getDescopeSessionTokenCompat() {
+    const atlas = (0, active_atlas_1.getActiveAtlas)();
+    if (!atlas || atlas.status !== 'signed_in')
+        return '';
+    return (await atlas.getToken()) ?? '';
+}
+//# sourceMappingURL=compat-descope.js.map

package/dist/compat-descope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compat-descope.js","sourceRoot":"","sources":["../src/compat-descope.ts"],"names":[],"mappings":";AAAA,YAAY,CAAC;;AA8Db,0CA+BC;AAOD,8CAUC;AAqBD,0DA4CC;AAGD,oDAWC;AAQD,4CAkBC;AAQD,oEAIC;AAjOD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,iCAA6D;AAC7D,mDAA2C;AAC3C,iDAAgD;AA8BhD,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7F,CAAC;AAED;;;GAGG;AACH,SAAgB,eAAe,CAC7B,IAAsB,EACtB,cAAsD,EAAE,EACxD,SAA+B,IAAI;IAEnC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChF,MAAM,GAAG,GAAsB;QAC7B,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,QAAQ,EAAE,CAAC,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC3G,aAAa,EAAE,KAAK,EAAE,QAAQ,IAAI,KAAK;QACvC,aAAa,EAAE,KAAK,EAAE,QAAQ,IAAI,KAAK;QACvC,SAAS,EAAE,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC;QACxC,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnC,QAAQ,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE;YAC3B,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI;YAC/B,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;SAClC,CAAC,CAAC;QACH,gBAAgB,EAAE,EAAE,GAAG,IAAI,CAAC,eAAe,EAAE;KAC9C,CAAC;IACF,IAAI,KAAK;QAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC;IAC3C,IAAI,KAAK;QAAE,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,YAAY,CAAC;IAC1C,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;IAC1B,IAAI,IAAI,CAAC,UAAU;QAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC;IACrD,IAAI,IAAI,CAAC,SAAS;QAAE,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;IACpD,IAAI,IAAI,CAAC,SAAS;QAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;IACjD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,MAA4B;IAC5D,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,OAAO,GAAmC,EAAE,CAAC;IACnD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG;YACvB,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/C,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;SACjD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC;AACtH,CAAC;AAED,8EAA8E;AAC9E,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAsB,CAAC;QAClG,OAAO,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,uBAAuB;IAOrC,MAAM,KAAK,GAAG,IAAA,wBAAQ,GAAE,CAAC;IACzB,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC;IAC9C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,IAAA,gBAAQ,EAAqB,SAAS,CAAC,CAAC;IAClE,gFAAgF;IAChF,MAAM,QAAQ,GAAG,IAAA,cAAM,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxC,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC;IAClC,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAExF,IAAA,iBAAS,EAAC,GAAG,EAAE;QACb,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,QAAQ,CAAC,SAAS,CAAC,CAAC;YACpB,OAAO;QACT,CAAC;QACD,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,KAAgD,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;YACtB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,SAAS;gBAAE,OAAO;YACtB,QAAQ,CAAC,IAAI,IAAI,SAAS,CAAC,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9C,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YAC9E,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QAC9C,CAAC,CAAC;QACF,KAAK,IAAI,EAAE,CAAC;QACZ,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;YACjB,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAEjB,OAAO;QACL,eAAe,EAAE,QAAQ;QACzB,gBAAgB,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,SAAS,CAAC;QACjF,gBAAgB,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS;QAC5C,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAC1C,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;KAC/D,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAgB,oBAAoB;IAKlC,MAAM,KAAK,GAAG,IAAA,wBAAQ,GAAE,CAAC;IACzB,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7G,aAAa,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS;QACzC,aAAa,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS;KAC1C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gBAAgB;IAI9B,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAA,wBAAQ,GAAE,CAAC;IACvC,OAAO,IAAA,eAAO,EACZ,GAAG,EAAE,CAAC,CAAC;QACL,KAAK,CAAC,MAAM;YACV,MAAM,OAAO,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,OAAO;YACX,MAAM,MAAM,EAAE,CAAC;YACf,OAAO,EAAE,EAAE,EAAE,IAAa,EAAE,CAAC;QAC/B,CAAC;KACF,CAAC,EACF,CAAC,OAAO,EAAE,MAAM,CAAC,CAClB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,4BAA4B;IAChD,MAAM,KAAK,GAAG,IAAA,6BAAc,GAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC;IACtD,OAAO,CAAC,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;AACxC,CAAC"}

package/dist/compat-firebase.d.ts

@@ -0,0 +1,67 @@
+import type { AtlasUser } from './types';
+import { type ActiveAtlas } from './active-atlas';
+/** The fields of a Firebase `User` apps read, plus the token methods. */
+export interface FirebaseCompatUser {
+    uid: string;
+    /** The Firebase uid this user had before the move, when the import kept it. */
+    firebaseUid: string | null;
+    email: string | null;
+    emailVerified: boolean;
+    displayName: string | null;
+    photoURL: string | null;
+    phoneNumber: string | null;
+    isAnonymous: false;
+    providerId: 'atlas';
+    tenantId: null;
+    metadata: {
+        creationTime?: string;
+        lastSignInTime?: string;
+    };
+    providerData: Array<{
+        providerId: string;
+        uid: string;
+        email: string | null;
+    }>;
+    /** The Atlas session JWT (the ID-token analogue). */
+    getIdToken(forceRefresh?: boolean): Promise<string>;
+    getIdTokenResult(forceRefresh?: boolean): Promise<FirebaseCompatIdTokenResult>;
+    reload(): Promise<void>;
+    toJSON(): Record<string, unknown>;
+}
+export interface FirebaseCompatIdTokenResult {
+    token: string;
+    claims: Record<string, unknown>;
+    expirationTime: string;
+    issuedAtTime: string;
+    authTime: string;
+    signInProvider: 'atlas';
+    signInSecondFactor: string | null;
+}
+/** Project an Atlas user onto Firebase's `User` shape (null when signed out). */
+export declare function firebaseUserFrom(user: AtlasUser | null, atlas?: ActiveAtlas | null): FirebaseCompatUser | null;
+type Observer = ((user: FirebaseCompatUser | null) => void) | {
+    next?: (user: FirebaseCompatUser | null) => void;
+};
+/** `onAuthStateChanged(auth, next)`: fires on sign-in and sign-out. Returns the unsubscribe. */
+export declare function onFirebaseAuthStateChangedCompat(_auth: unknown, next: Observer, _error?: unknown): () => void;
+/** `onIdTokenChanged(auth, next)`: also fires when the session token is refreshed. */
+export declare function onFirebaseIdTokenChangedCompat(_auth: unknown, next: Observer, _error?: unknown): () => void;
+/** `signOut(auth)`. */
+export declare function firebaseSignOutCompat(_auth?: unknown): Promise<void>;
+/** `getIdToken(user, forceRefresh)`: the Atlas session JWT. */
+export declare function getFirebaseIdTokenCompat(_user?: unknown, _forceRefresh?: boolean): Promise<string>;
+/** `auth.currentUser`, read imperatively. */
+export declare function getFirebaseCurrentUserCompat(): FirebaseCompatUser | null;
+/**
+ * `signInWithRedirect(auth, provider)`: sends the browser to your Atlas
+ * sign-in page (social buttons there replace the provider object), returning
+ * to the current page afterwards.
+ */
+export declare function firebaseSignInWithRedirectCompat(_auth?: unknown, _provider?: unknown, options?: {
+    signInUrl?: string;
+}): Promise<void>;
+/** `useAuthState(auth)` from react-firebase-hooks: `[user, loading, error]`. */
+export declare function useFirebaseAuthStateCompat(_auth?: unknown): [FirebaseCompatUser | null | undefined, boolean, undefined];
+/** `useIdToken(auth)` from react-firebase-hooks: `[user, loading, error]`, re-rendering on token refresh. */
+export declare function useFirebaseIdTokenCompat(_auth?: unknown): [FirebaseCompatUser | null | undefined, boolean, undefined];
+export {};

package/dist/compat-firebase.js

@@ -0,0 +1,166 @@
+"use strict";
+'use client';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.firebaseUserFrom = firebaseUserFrom;
+exports.onFirebaseAuthStateChangedCompat = onFirebaseAuthStateChangedCompat;
+exports.onFirebaseIdTokenChangedCompat = onFirebaseIdTokenChangedCompat;
+exports.firebaseSignOutCompat = firebaseSignOutCompat;
+exports.getFirebaseIdTokenCompat = getFirebaseIdTokenCompat;
+exports.getFirebaseCurrentUserCompat = getFirebaseCurrentUserCompat;
+exports.firebaseSignInWithRedirectCompat = firebaseSignInWithRedirectCompat;
+exports.useFirebaseAuthStateCompat = useFirebaseAuthStateCompat;
+exports.useFirebaseIdTokenCompat = useFirebaseIdTokenCompat;
+/**
+ * Firebase Auth (`firebase/auth`, `react-firebase-hooks/auth`) compatibility
+ * helpers. `atlas migrate code --from firebase` rewrites the session-reading
+ * half of the Firebase client SDK onto these, keeping its call shapes: the
+ * `auth` argument is accepted and ignored (the session is the `<AtlasProvider>`
+ * on the page), observers get a `User`-shaped object, and `getIdToken(user)`
+ * resolves the Atlas session JWT.
+ *
+ * `uid` is the ATLAS user id. A database keyed on Firebase uids should look
+ * users up by their external id (Atlas keeps the Firebase uid there) or be
+ * re-keyed; `firebaseUid` carries the old id when the import recorded it.
+ */
+const react_1 = require("react");
+const AtlasProvider_1 = require("./AtlasProvider");
+const components_shared_1 = require("./components-shared");
+const compat_1 = require("./compat");
+const active_atlas_1 = require("./active-atlas");
+function legacyUid(user) {
+    const meta = user.public_metadata ?? {};
+    for (const key of ['firebase_uid', 'external_id', 'legacy_id']) {
+        const v = meta[key];
+        if (typeof v === 'string' && v)
+            return v;
+    }
+    return null;
+}
+async function tokenOf(atlas) {
+    const token = await atlas.getToken();
+    if (!token)
+        throw new Error('getIdToken: the user is signed out.');
+    return token;
+}
+function isoFromSeconds(v) {
+    return new Date(typeof v === 'number' ? v * 1000 : Date.now()).toUTCString();
+}
+/** Project an Atlas user onto Firebase's `User` shape (null when signed out). */
+function firebaseUserFrom(user, atlas = (0, active_atlas_1.getActiveAtlas)()) {
+    if (!user)
+        return null;
+    const email = (0, compat_1.primaryEmail)(user);
+    const phone = (user.phone_numbers ?? []).find((p) => p.primary) ?? user.phone_numbers?.[0];
+    const claims = atlas?.claims ?? null;
+    const live = () => atlas ?? (0, active_atlas_1.requireActive)('FirebaseCompatUser');
+    const projected = {
+        uid: user.id,
+        firebaseUid: legacyUid(user),
+        email: email?.address ?? null,
+        emailVerified: email?.verified ?? false,
+        displayName: (0, compat_1.displayName)(user),
+        photoURL: user.image_url,
+        phoneNumber: phone?.phone_number ?? null,
+        isAnonymous: false,
+        providerId: 'atlas',
+        tenantId: null,
+        metadata: {},
+        providerData: email ? [{ providerId: 'password', uid: email.address, email: email.address }] : [],
+        getIdToken: () => tokenOf(live()),
+        async getIdTokenResult() {
+            const a = live();
+            const token = await tokenOf(a);
+            const c = (a.claims ?? claims ?? {});
+            return {
+                token,
+                claims: c,
+                expirationTime: isoFromSeconds(c.exp),
+                issuedAtTime: isoFromSeconds(c.iat),
+                authTime: isoFromSeconds(c.auth_time ?? c.iat),
+                signInProvider: 'atlas',
+                signInSecondFactor: null,
+            };
+        },
+        async reload() {
+            await live().reload();
+        },
+        toJSON() {
+            const { getIdToken: _a, getIdTokenResult: _b, reload: _c, toJSON: _d, ...plain } = projected;
+            return plain;
+        },
+    };
+    return projected;
+}
+function notify(observer, user) {
+    if (typeof observer === 'function')
+        observer(user);
+    else
+        observer.next?.(user);
+}
+function observe(observer, everyTokenChange) {
+    let lastStatus = null;
+    let lastId = null;
+    let lastExp = null;
+    const listener = (atlas) => {
+        if (!atlas || atlas.status === 'loading')
+            return;
+        const id = atlas.status === 'signed_in' ? (atlas.user?.id ?? null) : null;
+        const exp = atlas.claims?.exp ?? null;
+        const changed = lastStatus === null || id !== lastId || (everyTokenChange && exp !== lastExp);
+        lastStatus = atlas.status;
+        lastId = id;
+        lastExp = exp;
+        if (changed)
+            notify(observer, atlas.status === 'signed_in' ? firebaseUserFrom(atlas.user, atlas) : null);
+    };
+    const unsubscribe = (0, active_atlas_1.onActiveAtlasChange)(listener);
+    const current = (0, active_atlas_1.getActiveAtlas)();
+    if (current)
+        listener(current);
+    return unsubscribe;
+}
+/** `onAuthStateChanged(auth, next)`: fires on sign-in and sign-out. Returns the unsubscribe. */
+function onFirebaseAuthStateChangedCompat(_auth, next, _error) {
+    return observe(next, false);
+}
+/** `onIdTokenChanged(auth, next)`: also fires when the session token is refreshed. */
+function onFirebaseIdTokenChangedCompat(_auth, next, _error) {
+    return observe(next, true);
+}
+/** `signOut(auth)`. */
+async function firebaseSignOutCompat(_auth) {
+    await (0, active_atlas_1.requireActive)('firebaseSignOutCompat').signOut();
+}
+/** `getIdToken(user, forceRefresh)`: the Atlas session JWT. */
+async function getFirebaseIdTokenCompat(_user, _forceRefresh) {
+    return tokenOf((0, active_atlas_1.requireActive)('getFirebaseIdTokenCompat'));
+}
+/** `auth.currentUser`, read imperatively. */
+function getFirebaseCurrentUserCompat() {
+    const atlas = (0, active_atlas_1.getActiveAtlas)();
+    return atlas?.status === 'signed_in' ? firebaseUserFrom(atlas.user, atlas) : null;
+}
+/**
+ * `signInWithRedirect(auth, provider)`: sends the browser to your Atlas
+ * sign-in page (social buttons there replace the provider object), returning
+ * to the current page afterwards.
+ */
+async function firebaseSignInWithRedirectCompat(_auth, _provider, options = {}) {
+    const back = typeof window !== 'undefined' ? window.location.href : undefined;
+    (0, components_shared_1.navigateTo)((0, components_shared_1.withRedirect)(options.signInUrl ?? '/sign-in', back));
+}
+/** `useAuthState(auth)` from react-firebase-hooks: `[user, loading, error]`. */
+function useFirebaseAuthStateCompat(_auth) {
+    const atlas = (0, AtlasProvider_1.useAtlas)();
+    if (atlas.status === 'loading')
+        return [undefined, true, undefined];
+    return [atlas.status === 'signed_in' ? firebaseUserFrom(atlas.user, (0, active_atlas_1.getActiveAtlas)()) : null, false, undefined];
+}
+/** `useIdToken(auth)` from react-firebase-hooks: `[user, loading, error]`, re-rendering on token refresh. */
+function useFirebaseIdTokenCompat(_auth) {
+    const state = useFirebaseAuthStateCompat();
+    const [, setTick] = (0, react_1.useState)(0);
+    (0, react_1.useEffect)(() => observe(() => setTick((t) => t + 1), true), []);
+    return state;
+}
+//# sourceMappingURL=compat-firebase.js.map

package/dist/compat-firebase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compat-firebase.js","sourceRoot":"","sources":["../src/compat-firebase.ts"],"names":[],"mappings":";AAAA,YAAY,CAAC;;AAyEb,4CA2CC;AA8BD,4EAEC;AAGD,wEAEC;AAGD,sDAEC;AAGD,4DAEC;AAGD,oEAGC;AAOD,4EAGC;AAGD,gEAIC;AAGD,4DAKC;AAhMD;;;;;;;;;;;GAWG;AACH,iCAA4C;AAC5C,mDAA2C;AAC3C,2DAA+D;AAC/D,qCAAqD;AAErD,iDAAsG;AAkCtG,SAAS,SAAS,CAAC,IAAe;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,CAAC,cAAc,EAAE,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACpB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,KAAkB;IACvC,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACnE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,CAAU;IAChC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AAC/E,CAAC;AAED,iFAAiF;AACjF,SAAgB,gBAAgB,CAAC,IAAsB,EAAE,QAA4B,IAAA,6BAAc,GAAE;IACnG,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,KAAK,GAAG,IAAA,qBAAY,EAAC,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAyB,KAAK,EAAE,MAAM,IAAI,IAAI,CAAC;IAC3D,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,KAAK,IAAI,IAAA,4BAAa,EAAC,oBAAoB,CAAC,CAAC;IAChE,MAAM,SAAS,GAAuB;QACpC,GAAG,EAAE,IAAI,CAAC,EAAE;QACZ,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC;QAC5B,KAAK,EAAE,KAAK,EAAE,OAAO,IAAI,IAAI;QAC7B,aAAa,EAAE,KAAK,EAAE,QAAQ,IAAI,KAAK;QACvC,WAAW,EAAE,IAAA,oBAAW,EAAC,IAAI,CAAC;QAC9B,QAAQ,EAAE,IAAI,CAAC,SAAS;QACxB,WAAW,EAAE,KAAK,EAAE,YAAY,IAAI,IAAI;QACxC,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,OAAO;QACnB,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,EAAE;QACZ,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;QACjG,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACjC,KAAK,CAAC,gBAAgB;YACpB,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,MAAM,IAAI,EAAE,CAA4B,CAAC;YAChE,OAAO;gBACL,KAAK;gBACL,MAAM,EAAE,CAAC;gBACT,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC;gBACrC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC;gBACnC,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC;gBAC9C,cAAc,EAAE,OAAO;gBACvB,kBAAkB,EAAE,IAAI;aACzB,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,MAAM;YACV,MAAM,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QACxB,CAAC;QACD,MAAM;YACJ,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,CAAC;YAC7F,OAAO,KAA2C,CAAC;QACrD,CAAC;KACF,CAAC;IACF,OAAO,SAAS,CAAC;AACnB,CAAC;AAID,SAAS,MAAM,CAAC,QAAkB,EAAE,IAA+B;IACjE,IAAI,OAAO,QAAQ,KAAK,UAAU;QAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;;QAC9C,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,OAAO,CAAC,QAAkB,EAAE,gBAAyB;IAC5D,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IAAI,MAAM,GAAkB,IAAI,CAAC;IACjC,IAAI,OAAO,GAAY,IAAI,CAAC;IAC5B,MAAM,QAAQ,GAAG,CAAC,KAAyB,EAAE,EAAE;QAC7C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QACjD,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1E,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC;QACtC,MAAM,OAAO,GAAG,UAAU,KAAK,IAAI,IAAI,EAAE,KAAK,MAAM,IAAI,CAAC,gBAAgB,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC;QAC9F,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;QAC1B,MAAM,GAAG,EAAE,CAAC;QACZ,OAAO,GAAG,GAAG,CAAC;QACd,IAAI,OAAO;YAAE,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3G,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,IAAA,kCAAmB,EAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAA,6BAAc,GAAE,CAAC;IACjC,IAAI,OAAO;QAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,gGAAgG;AAChG,SAAgB,gCAAgC,CAAC,KAAc,EAAE,IAAc,EAAE,MAAgB;IAC/F,OAAO,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,sFAAsF;AACtF,SAAgB,8BAA8B,CAAC,KAAc,EAAE,IAAc,EAAE,MAAgB;IAC7F,OAAO,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,uBAAuB;AAChB,KAAK,UAAU,qBAAqB,CAAC,KAAe;IACzD,MAAM,IAAA,4BAAa,EAAC,uBAAuB,CAAC,CAAC,OAAO,EAAE,CAAC;AACzD,CAAC;AAED,+DAA+D;AACxD,KAAK,UAAU,wBAAwB,CAAC,KAAe,EAAE,aAAuB;IACrF,OAAO,OAAO,CAAC,IAAA,4BAAa,EAAC,0BAA0B,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,6CAA6C;AAC7C,SAAgB,4BAA4B;IAC1C,MAAM,KAAK,GAAG,IAAA,6BAAc,GAAE,CAAC;IAC/B,OAAO,KAAK,EAAE,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACpF,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,gCAAgC,CAAC,KAAe,EAAE,SAAmB,EAAE,UAAkC,EAAE;IAC/H,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,IAAA,8BAAU,EAAC,IAAA,gCAAY,EAAC,OAAO,CAAC,SAAS,IAAI,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,gFAAgF;AAChF,SAAgB,0BAA0B,CAAC,KAAe;IACxD,MAAM,KAAK,GAAG,IAAA,wBAAQ,GAAE,CAAC;IACzB,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACpE,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,EAAE,IAAA,6BAAc,GAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAClH,CAAC;AAED,6GAA6G;AAC7G,SAAgB,wBAAwB,CAAC,KAAe;IACtD,MAAM,KAAK,GAAG,0BAA0B,EAAE,CAAC;IAC3C,MAAM,CAAC,EAAE,OAAO,CAAC,GAAG,IAAA,gBAAQ,EAAC,CAAC,CAAC,CAAC;IAChC,IAAA,iBAAS,EAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAChE,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/compat-kinde.d.ts

@@ -0,0 +1,166 @@
+import type { AuthStatus } from './active-atlas';
+import type { AtlasOrganizationMembership, AtlasUser, SessionClaims } from './types';
+/** The user object Kinde's `getUser()` / `user` expose. */
+export interface KindeCompatUser {
+    id: string;
+    email: string | null;
+    given_name: string | null;
+    family_name: string | null;
+    picture: string | null;
+    username: string | null;
+    phone_number: string | null;
+}
+/** `getPermission(key)`. */
+export interface KindeCompatPermission {
+    isGranted: boolean;
+    orgCode: string | null;
+}
+/** `getPermissions()` / `permissions`. */
+export interface KindeCompatPermissions {
+    permissions: string[];
+    orgCode: string | null;
+}
+/** `getOrganization()` / `organization`. `orgCode` is the Atlas organization id. */
+export interface KindeCompatOrganization {
+    orgCode: string | null;
+    orgName: string | null;
+}
+/** `getUserOrganizations()` / `userOrganizations`. */
+export interface KindeCompatUserOrganizations {
+    orgCodes: string[];
+    orgs: Array<{
+        code: string;
+        name: string | null;
+    }>;
+}
+/** `getClaim(name)`. */
+export interface KindeCompatClaim {
+    name: string;
+    value: unknown;
+}
+/** `getFlag(code, defaultValue)`: always the default (Atlas has no feature flags). */
+export interface KindeCompatFlag<T> {
+    code: string;
+    type: 'boolean' | 'string' | 'integer';
+    value: T;
+    is_default: true;
+    defaultValue: T;
+}
+/** The provider state the projections read. */
+export interface KindeCompatState {
+    status: AuthStatus;
+    user: AtlasUser | null;
+    claims: SessionClaims | null;
+    memberships?: AtlasOrganizationMembership[];
+}
+/** Project an Atlas user onto Kinde's user shape. */
+export declare function kindeUserFrom(user: AtlasUser | null): KindeCompatUser | null;
+/**
+ * Pure projection of the provider state onto the members `useKindeAuth()` and
+ * `useKindeBrowserClient()` share. Exported for tests and custom wiring.
+ */
+export declare function kindeSessionFrom(state: KindeCompatState): {
+    getFlag<T>(code: string, defaultValue: T, _type?: string): KindeCompatFlag<T>;
+    getBooleanFlag(_code: string, defaultValue?: boolean): boolean | undefined;
+    getStringFlag(_code: string, defaultValue?: string): string | undefined;
+    getIntegerFlag(_code: string, defaultValue?: number): number | undefined;
+    isLoading: boolean;
+    isAuthenticated: boolean;
+    user: KindeCompatUser | null;
+    permissions: KindeCompatPermissions;
+    organization: KindeCompatOrganization | null;
+    userOrganizations: KindeCompatUserOrganizations | null;
+    /** The decoded Atlas session claims (Kinde's decoded access token). */
+    accessToken: SessionClaims | null;
+    getUser: () => KindeCompatUser | null;
+    getPermission: (key: string) => KindeCompatPermission;
+    getPermissions: () => KindeCompatPermissions;
+    getOrganization: () => KindeCompatOrganization | null;
+    getUserOrganizations: () => KindeCompatUserOrganizations | null;
+    getAccessToken: () => SessionClaims | null;
+    /** A claim of the Atlas session token, as `{ name, value }`; null when signed out. */
+    getClaim: (name: string, _tokenType?: string) => KindeCompatClaim | null;
+};
+/** Options `login()` / `register()` understand (others are accepted and ignored). */
+export interface KindeCompatLoginOptions {
+    app_state?: {
+        redirectTo?: string;
+        [key: string]: unknown;
+    };
+    redirectURL?: string;
+    post_login_redirect_url?: string;
+    /** Where your Atlas sign-in page lives (default `/sign-in`). */
+    signInUrl?: string;
+    /** Where your Atlas sign-up page lives (default `/sign-up`). */
+    signUpUrl?: string;
+    [option: string]: unknown;
+}
+/**
+ * `useKindeAuth()` from `@kinde-oss/kinde-auth-react`, on Atlas. `login()` and
+ * `register()` open your Atlas sign-in / sign-up pages; `logout(url?)` signs out
+ * and goes to `url` (default `/`); `getToken()` resolves the Atlas session JWT.
+ */
+export declare function useKindeAuthCompat(): {
+    error: undefined;
+    login: (options?: KindeCompatLoginOptions) => Promise<void>;
+    register: (options?: KindeCompatLoginOptions) => Promise<void>;
+    logout: (options?: string | {
+        redirectUrl?: string;
+        returnTo?: string;
+    }) => Promise<void>;
+    getToken: () => Promise<string | undefined>;
+    getFlag<T>(code: string, defaultValue: T, _type?: string): KindeCompatFlag<T>;
+    getBooleanFlag(_code: string, defaultValue?: boolean): boolean | undefined;
+    getStringFlag(_code: string, defaultValue?: string): string | undefined;
+    getIntegerFlag(_code: string, defaultValue?: number): number | undefined;
+    isLoading: boolean;
+    isAuthenticated: boolean;
+    user: KindeCompatUser | null;
+    permissions: KindeCompatPermissions;
+    organization: KindeCompatOrganization | null;
+    userOrganizations: KindeCompatUserOrganizations | null;
+    /** The decoded Atlas session claims (Kinde's decoded access token). */
+    accessToken: SessionClaims | null;
+    getUser: () => KindeCompatUser | null;
+    getPermission: (key: string) => KindeCompatPermission;
+    getPermissions: () => KindeCompatPermissions;
+    getOrganization: () => KindeCompatOrganization | null;
+    getUserOrganizations: () => KindeCompatUserOrganizations | null;
+    getAccessToken: () => SessionClaims | null;
+    /** A claim of the Atlas session token, as `{ name, value }`; null when signed out. */
+    getClaim: (name: string, _tokenType?: string) => KindeCompatClaim | null;
+};
+/**
+ * `useKindeBrowserClient()` from `@kinde-oss/kinde-auth-nextjs`, on Atlas.
+ * `accessTokenRaw` / `getToken()` hold the latest Atlas session JWT (null until the
+ * first one is fetched); for a request, prefer `await useAuth().getToken()`, which
+ * is always fresh. `refreshData()` reloads the user and session.
+ */
+export declare function useKindeBrowserClientCompat(): {
+    error: null;
+    accessTokenRaw: string | null;
+    accessTokenEncoded: string | null;
+    getAccessTokenRaw: () => string | null;
+    getToken: () => string | null;
+    refreshData: () => Promise<void>;
+    getFlag<T>(code: string, defaultValue: T, _type?: string): KindeCompatFlag<T>;
+    getBooleanFlag(_code: string, defaultValue?: boolean): boolean | undefined;
+    getStringFlag(_code: string, defaultValue?: string): string | undefined;
+    getIntegerFlag(_code: string, defaultValue?: number): number | undefined;
+    isLoading: boolean;
+    isAuthenticated: boolean;
+    user: KindeCompatUser | null;
+    permissions: KindeCompatPermissions;
+    organization: KindeCompatOrganization | null;
+    userOrganizations: KindeCompatUserOrganizations | null;
+    /** The decoded Atlas session claims (Kinde's decoded access token). */
+    accessToken: SessionClaims | null;
+    getUser: () => KindeCompatUser | null;
+    getPermission: (key: string) => KindeCompatPermission;
+    getPermissions: () => KindeCompatPermissions;
+    getOrganization: () => KindeCompatOrganization | null;
+    getUserOrganizations: () => KindeCompatUserOrganizations | null;
+    getAccessToken: () => SessionClaims | null;
+    /** A claim of the Atlas session token, as `{ name, value }`; null when signed out. */
+    getClaim: (name: string, _tokenType?: string) => KindeCompatClaim | null;
+};