@atlasauth/react 0.20.0 → 0.22.0

package/dist/compat-amplify.d.ts

@@ -0,0 +1,116 @@
+/**
+ * AWS Amplify Auth (Amazon Cognito) compatibility helpers, for
+ * `atlas migrate code --from cognito`. They keep the call shapes of
+ * `aws-amplify/auth` v6 (`getCurrentUser`, `fetchAuthSession`,
+ * `fetchUserAttributes`, `signOut`, `signInWithRedirect`), `Hub.listen('auth')`,
+ * the v5 `Auth` object's session readers, and `@aws-amplify/ui-react`'s
+ * `useAuthenticator` / `withAuthenticator`, over the `<AtlasProvider>` session.
+ *
+ * Tokens: `fetchAuthSession().tokens.idToken` and `.accessToken` are both the
+ * Atlas session JWT (`{ payload, toString() }`, like Amplify's `JWT`). AWS
+ * credentials from an identity pool are not produced; `credentials` is undefined.
+ */
+import { type ComponentType } from 'react';
+import type { AtlasUser } from './types';
+/** Thrown like Amplify's `UserUnAuthenticatedException` when no one is signed in. */
+export declare class AmplifyCompatUnauthenticatedError extends Error {
+    constructor();
+}
+export interface AmplifyCompatJwt {
+    payload: Record<string, unknown>;
+    toString(): string;
+}
+export interface AmplifyCompatCurrentUser {
+    username: string;
+    userId: string;
+    signInDetails?: {
+        loginId?: string;
+        authFlowType?: string;
+    };
+}
+/** Cognito-style attributes (all strings, as Amplify returns them). */
+export declare function amplifyAttributesFrom(user: AtlasUser): Record<string, string>;
+/** `getCurrentUser()`: `{ username, userId }`; throws when signed out. */
+export declare function amplifyGetCurrentUserCompat(): Promise<AmplifyCompatCurrentUser>;
+/** `fetchAuthSession()`: `{ tokens: { idToken, accessToken }, userSub }`, or `{}` when signed out. */
+export declare function amplifyFetchAuthSessionCompat(_options?: {
+    forceRefresh?: boolean;
+}): Promise<{
+    tokens?: {
+        idToken?: AmplifyCompatJwt;
+        accessToken: AmplifyCompatJwt;
+    };
+    userSub?: string;
+    credentials?: undefined;
+    identityId?: undefined;
+}>;
+/** `fetchUserAttributes()`. */
+export declare function amplifyFetchUserAttributesCompat(): Promise<Record<string, string>>;
+/** `signOut({ global })`. */
+export declare function amplifySignOutCompat(_input?: {
+    global?: boolean;
+}): Promise<void>;
+/** `signInWithRedirect({ provider })`: opens your Atlas sign-in page. */
+export declare function amplifySignInWithRedirectCompat(input?: {
+    provider?: unknown;
+    customState?: string;
+    signInUrl?: string;
+}): Promise<void>;
+type HubCallback = (capsule: {
+    channel: string;
+    payload: {
+        event: string;
+        data?: unknown;
+    };
+}) => void;
+/**
+ * `Hub.listen('auth', cb)`: `signedIn`, `signedOut` and `tokenRefresh` events
+ * as the Atlas session changes. Other channels never fire. Returns the
+ * unsubscribe, like Amplify v6.
+ */
+export declare function amplifyHubListenCompat(channel: string, callback: HubCallback): () => void;
+/** The v5 `Auth` object's session readers (`Auth.currentAuthenticatedUser()` …). */
+export declare const amplifyAuthV5Compat: {
+    currentAuthenticatedUser(_params?: unknown): Promise<{
+        username: string;
+        attributes: Record<string, string>;
+    }>;
+    currentUserInfo(): Promise<{
+        id: string;
+        username: string;
+        attributes: Record<string, string>;
+    } | null>;
+    currentSession(): Promise<{
+        getIdToken: () => {
+            getJwtToken: () => string;
+            payload: Record<string, unknown>;
+        };
+        getAccessToken: () => {
+            getJwtToken: () => string;
+            payload: Record<string, unknown>;
+        };
+        isValid: () => boolean;
+    }>;
+    signOut(_opts?: unknown): Promise<void>;
+    federatedSignIn(_opts?: unknown): Promise<void>;
+};
+export type AmplifyAuthStatus = 'configuring' | 'authenticated' | 'unauthenticated';
+/** `useAuthenticator()` from @aws-amplify/ui-react: `{ user, authStatus, route, signOut }`. */
+export declare function useAmplifyAuthenticatorCompat(_selector?: unknown): {
+    user: (AmplifyCompatCurrentUser & {
+        attributes: Record<string, string>;
+    }) | undefined;
+    authStatus: AmplifyAuthStatus;
+    route: 'idle' | 'authenticated' | 'signIn';
+    signOut: () => void;
+};
+/**
+ * `withAuthenticator(Component)`: renders the component for signed-in users
+ * (with `user` and `signOut` props, as Amplify passes them) and sends everyone
+ * else to your sign-in page.
+ */
+export declare function withAmplifyAuthenticatorCompat<P extends object>(Component: ComponentType<P & {
+    user?: unknown;
+    signOut?: () => void;
+}>, _options?: unknown): ComponentType<P>;
+export {};

package/dist/compat-amplify.js

@@ -0,0 +1,212 @@
+"use strict";
+'use client';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.amplifyAuthV5Compat = exports.AmplifyCompatUnauthenticatedError = void 0;
+exports.amplifyAttributesFrom = amplifyAttributesFrom;
+exports.amplifyGetCurrentUserCompat = amplifyGetCurrentUserCompat;
+exports.amplifyFetchAuthSessionCompat = amplifyFetchAuthSessionCompat;
+exports.amplifyFetchUserAttributesCompat = amplifyFetchUserAttributesCompat;
+exports.amplifySignOutCompat = amplifySignOutCompat;
+exports.amplifySignInWithRedirectCompat = amplifySignInWithRedirectCompat;
+exports.amplifyHubListenCompat = amplifyHubListenCompat;
+exports.useAmplifyAuthenticatorCompat = useAmplifyAuthenticatorCompat;
+exports.withAmplifyAuthenticatorCompat = withAmplifyAuthenticatorCompat;
+/**
+ * AWS Amplify Auth (Amazon Cognito) compatibility helpers, for
+ * `atlas migrate code --from cognito`. They keep the call shapes of
+ * `aws-amplify/auth` v6 (`getCurrentUser`, `fetchAuthSession`,
+ * `fetchUserAttributes`, `signOut`, `signInWithRedirect`), `Hub.listen('auth')`,
+ * the v5 `Auth` object's session readers, and `@aws-amplify/ui-react`'s
+ * `useAuthenticator` / `withAuthenticator`, over the `<AtlasProvider>` session.
+ *
+ * Tokens: `fetchAuthSession().tokens.idToken` and `.accessToken` are both the
+ * Atlas session JWT (`{ payload, toString() }`, like Amplify's `JWT`). AWS
+ * credentials from an identity pool are not produced; `credentials` is undefined.
+ */
+const react_1 = require("react");
+const AtlasProvider_1 = require("./AtlasProvider");
+const components_shared_1 = require("./components-shared");
+const compat_1 = require("./compat");
+const active_atlas_1 = require("./active-atlas");
+/** Thrown like Amplify's `UserUnAuthenticatedException` when no one is signed in. */
+class AmplifyCompatUnauthenticatedError extends Error {
+    constructor() {
+        super('User needs to be authenticated to call this API.');
+        this.name = 'UserUnAuthenticatedException';
+    }
+}
+exports.AmplifyCompatUnauthenticatedError = AmplifyCompatUnauthenticatedError;
+function signedIn(helper) {
+    const atlas = (0, active_atlas_1.requireActive)(helper);
+    if (atlas.status !== 'signed_in' || !atlas.user)
+        throw new AmplifyCompatUnauthenticatedError();
+    return atlas;
+}
+function decodePayload(token) {
+    try {
+        const part = token.split('.')[1] ?? '';
+        const json = atob(part.replace(/-/g, '+').replace(/_/g, '/').padEnd(Math.ceil(part.length / 4) * 4, '='));
+        const parsed = JSON.parse(json);
+        return parsed && typeof parsed === 'object' ? parsed : {};
+    }
+    catch {
+        return {};
+    }
+}
+function jwt(token) {
+    return { payload: decodePayload(token), toString: () => token };
+}
+function currentUserOf(user) {
+    const email = (0, compat_1.primaryEmail)(user)?.address;
+    return { username: user.username ?? email ?? user.id, userId: user.id, signInDetails: email ? { loginId: email } : undefined };
+}
+/** Cognito-style attributes (all strings, as Amplify returns them). */
+function amplifyAttributesFrom(user) {
+    const email = (0, compat_1.primaryEmail)(user);
+    const phone = (user.phone_numbers ?? []).find((p) => p.primary) ?? user.phone_numbers?.[0];
+    const out = { sub: user.id };
+    if (email) {
+        out.email = email.address;
+        out.email_verified = String(email.verified);
+    }
+    if (phone) {
+        out.phone_number = phone.phone_number;
+        out.phone_number_verified = String(phone.verified);
+    }
+    if (user.first_name)
+        out.given_name = user.first_name;
+    if (user.last_name)
+        out.family_name = user.last_name;
+    const name = (0, compat_1.displayName)(user);
+    if (name)
+        out.name = name;
+    if (user.username)
+        out.preferred_username = user.username;
+    if (user.image_url)
+        out.picture = user.image_url;
+    for (const [k, v] of Object.entries(user.public_metadata ?? {})) {
+        if (typeof v === 'string' || typeof v === 'number' || typeof v === 'boolean')
+            out[`custom:${k}`] = String(v);
+    }
+    return out;
+}
+/** `getCurrentUser()`: `{ username, userId }`; throws when signed out. */
+async function amplifyGetCurrentUserCompat() {
+    return currentUserOf(signedIn('amplifyGetCurrentUserCompat').user);
+}
+/** `fetchAuthSession()`: `{ tokens: { idToken, accessToken }, userSub }`, or `{}` when signed out. */
+async function amplifyFetchAuthSessionCompat(_options) {
+    const atlas = (0, active_atlas_1.requireActive)('amplifyFetchAuthSessionCompat');
+    if (atlas.status !== 'signed_in' || !atlas.user)
+        return {};
+    const token = await atlas.getToken();
+    if (!token)
+        return {};
+    return { tokens: { idToken: jwt(token), accessToken: jwt(token) }, userSub: atlas.user.id };
+}
+/** `fetchUserAttributes()`. */
+async function amplifyFetchUserAttributesCompat() {
+    return amplifyAttributesFrom(signedIn('amplifyFetchUserAttributesCompat').user);
+}
+/** `signOut({ global })`. */
+async function amplifySignOutCompat(_input) {
+    await (0, active_atlas_1.requireActive)('amplifySignOutCompat').signOut();
+}
+/** `signInWithRedirect({ provider })`: opens your Atlas sign-in page. */
+async function amplifySignInWithRedirectCompat(input = {}) {
+    const back = typeof window !== 'undefined' ? window.location.href : undefined;
+    (0, components_shared_1.navigateTo)((0, components_shared_1.withRedirect)(input.signInUrl ?? '/sign-in', back));
+}
+/**
+ * `Hub.listen('auth', cb)`: `signedIn`, `signedOut` and `tokenRefresh` events
+ * as the Atlas session changes. Other channels never fire. Returns the
+ * unsubscribe, like Amplify v6.
+ */
+function amplifyHubListenCompat(channel, callback) {
+    if (channel !== 'auth')
+        return () => undefined;
+    let last = { status: null, id: null, exp: null };
+    const listener = (atlas) => {
+        if (!atlas || atlas.status === 'loading')
+            return;
+        const id = atlas.status === 'signed_in' ? (atlas.user?.id ?? null) : null;
+        const exp = atlas.claims?.exp ?? null;
+        let event = null;
+        if (last.status !== null) {
+            if (id && id !== last.id)
+                event = 'signedIn';
+            else if (!id && last.id)
+                event = 'signedOut';
+            else if (id && exp !== last.exp)
+                event = 'tokenRefresh';
+        }
+        last = { status: atlas.status, id, exp };
+        if (event)
+            callback({ channel: 'auth', payload: { event, data: event === 'signedIn' && atlas.user ? currentUserOf(atlas.user) : undefined } });
+    };
+    const unsubscribe = (0, active_atlas_1.onActiveAtlasChange)(listener);
+    const current = (0, active_atlas_1.getActiveAtlas)();
+    if (current)
+        listener(current);
+    return unsubscribe;
+}
+/** The v5 `Auth` object's session readers (`Auth.currentAuthenticatedUser()` …). */
+exports.amplifyAuthV5Compat = {
+    async currentAuthenticatedUser(_params) {
+        const atlas = signedIn('Auth.currentAuthenticatedUser');
+        return { username: currentUserOf(atlas.user).username, attributes: amplifyAttributesFrom(atlas.user) };
+    },
+    async currentUserInfo() {
+        const atlas = (0, active_atlas_1.getActiveAtlas)();
+        if (!atlas || atlas.status !== 'signed_in' || !atlas.user)
+            return null;
+        return { id: atlas.user.id, username: currentUserOf(atlas.user).username, attributes: amplifyAttributesFrom(atlas.user) };
+    },
+    async currentSession() {
+        const session = await amplifyFetchAuthSessionCompat();
+        if (!session.tokens)
+            throw new AmplifyCompatUnauthenticatedError();
+        const token = session.tokens.accessToken.toString();
+        const wrap = () => ({ getJwtToken: () => token, payload: session.tokens.accessToken.payload });
+        return { getIdToken: wrap, getAccessToken: wrap, isValid: () => true };
+    },
+    async signOut(_opts) {
+        await amplifySignOutCompat();
+    },
+    async federatedSignIn(_opts) {
+        await amplifySignInWithRedirectCompat();
+    },
+};
+/** `useAuthenticator()` from @aws-amplify/ui-react: `{ user, authStatus, route, signOut }`. */
+function useAmplifyAuthenticatorCompat(_selector) {
+    const atlas = (0, AtlasProvider_1.useAtlas)();
+    const authStatus = atlas.status === 'loading' ? 'configuring' : atlas.status === 'signed_in' ? 'authenticated' : 'unauthenticated';
+    const user = atlas.status === 'signed_in' && atlas.user ? { ...currentUserOf(atlas.user), attributes: amplifyAttributesFrom(atlas.user) } : undefined;
+    return {
+        user,
+        authStatus,
+        route: authStatus === 'configuring' ? 'idle' : authStatus === 'authenticated' ? 'authenticated' : 'signIn',
+        signOut: () => void amplifySignOutCompat(),
+    };
+}
+/**
+ * `withAuthenticator(Component)`: renders the component for signed-in users
+ * (with `user` and `signOut` props, as Amplify passes them) and sends everyone
+ * else to your sign-in page.
+ */
+function withAmplifyAuthenticatorCompat(Component, _options) {
+    function Wrapped(props) {
+        const auth = useAmplifyAuthenticatorCompat();
+        (0, react_1.useEffect)(() => {
+            if (auth.authStatus === 'unauthenticated') {
+                (0, components_shared_1.navigateTo)((0, components_shared_1.withRedirect)('/sign-in', typeof window !== 'undefined' ? window.location.href : undefined));
+            }
+        }, [auth.authStatus]);
+        if (auth.authStatus !== 'authenticated')
+            return null;
+        return (0, react_1.createElement)(Component, { ...props, user: auth.user, signOut: auth.signOut });
+    }
+    Wrapped.displayName = `withAmplifyAuthenticatorCompat(${Component.displayName ?? Component.name ?? 'Component'})`;
+    return Wrapped;
+}
+//# sourceMappingURL=compat-amplify.js.map

package/dist/compat-amplify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compat-amplify.js","sourceRoot":"","sources":["../src/compat-amplify.ts"],"names":[],"mappings":";AAAA,YAAY,CAAC;;;AAmEb,sDAsBC;AAGD,kEAEC;AAGD,sEAWC;AAGD,4EAEC;AAGD,oDAEC;AAGD,0EAGC;AASD,wDAoBC;AA+BD,sEAeC;AAOD,wEAgBC;AA5ND;;;;;;;;;;;GAWG;AACH,iCAAqE;AACrE,mDAA2C;AAC3C,2DAA+D;AAC/D,qCAAqD;AAErD,iDAAsG;AAEtG,qFAAqF;AACrF,MAAa,iCAAkC,SAAQ,KAAK;IAC1D;QACE,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AALD,8EAKC;AAaD,SAAS,QAAQ,CAAC,MAAc;IAC9B,MAAM,KAAK,GAAG,IAAA,4BAAa,EAAC,MAAM,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,MAAM,IAAI,iCAAiC,EAAE,CAAC;IAC/F,OAAO,KAA0C,CAAC;AACpD,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1G,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC3C,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,aAAa,CAAC,IAAe;IACpC,MAAM,KAAK,GAAG,IAAA,qBAAY,EAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IAC1C,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK,IAAI,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AACjI,CAAC;AAED,uEAAuE;AACvE,SAAgB,qBAAqB,CAAC,IAAe;IACnD,MAAM,KAAK,GAAG,IAAA,qBAAY,EAAC,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,GAAG,GAA2B,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;IACrD,IAAI,KAAK,EAAE,CAAC;QACV,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC;QAC1B,GAAG,CAAC,cAAc,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACtC,GAAG,CAAC,qBAAqB,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,IAAI,CAAC,UAAU;QAAE,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;IACtD,IAAI,IAAI,CAAC,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC;IACrD,MAAM,IAAI,GAAG,IAAA,oBAAW,EAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;IAC1B,IAAI,IAAI,CAAC,QAAQ;QAAE,GAAG,CAAC,kBAAkB,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC1D,IAAI,IAAI,CAAC,SAAS;QAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;IACjD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;QAChE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS;YAAE,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0EAA0E;AACnE,KAAK,UAAU,2BAA2B;IAC/C,OAAO,aAAa,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAAC,CAAC;AACrE,CAAC;AAED,sGAAsG;AAC/F,KAAK,UAAU,6BAA6B,CAAC,QAAqC;IAMvF,MAAM,KAAK,GAAG,IAAA,4BAAa,EAAC,+BAA+B,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;AAC9F,CAAC;AAED,+BAA+B;AACxB,KAAK,UAAU,gCAAgC;IACpD,OAAO,qBAAqB,CAAC,QAAQ,CAAC,kCAAkC,CAAC,CAAC,IAAI,CAAC,CAAC;AAClF,CAAC;AAED,6BAA6B;AACtB,KAAK,UAAU,oBAAoB,CAAC,MAA6B;IACtE,MAAM,IAAA,4BAAa,EAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE,CAAC;AACxD,CAAC;AAED,yEAAyE;AAClE,KAAK,UAAU,+BAA+B,CAAC,QAA0E,EAAE;IAChI,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,IAAA,8BAAU,EAAC,IAAA,gCAAY,EAAC,KAAK,CAAC,SAAS,IAAI,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;AAChE,CAAC;AAID;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,OAAe,EAAE,QAAqB;IAC3E,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC;IAC/C,IAAI,IAAI,GAA+D,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAC7G,MAAM,QAAQ,GAAG,CAAC,KAAyB,EAAE,EAAE;QAC7C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO;QACjD,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1E,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC;QACtC,IAAI,KAAK,GAAkB,IAAI,CAAC;QAChC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACzB,IAAI,EAAE,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE;gBAAE,KAAK,GAAG,UAAU,CAAC;iBACxC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE;gBAAE,KAAK,GAAG,WAAW,CAAC;iBACxC,IAAI,EAAE,IAAI,GAAG,KAAK,IAAI,CAAC,GAAG;gBAAE,KAAK,GAAG,cAAc,CAAC;QAC1D,CAAC;QACD,IAAI,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;QACzC,IAAI,KAAK;YAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACjJ,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,IAAA,kCAAmB,EAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAA,6BAAc,GAAE,CAAC;IACjC,IAAI,OAAO;QAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,oFAAoF;AACvE,QAAA,mBAAmB,GAAG;IACjC,KAAK,CAAC,wBAAwB,CAAC,OAAiB;QAC9C,MAAM,KAAK,GAAG,QAAQ,CAAC,+BAA+B,CAAC,CAAC;QACxD,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;IACzG,CAAC;IACD,KAAK,CAAC,eAAe;QACnB,MAAM,KAAK,GAAG,IAAA,6BAAc,GAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvE,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;IAC5H,CAAC;IACD,KAAK,CAAC,cAAc;QAClB,MAAM,OAAO,GAAG,MAAM,6BAA6B,EAAE,CAAC;QACtD,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,iCAAiC,EAAE,CAAC;QACnE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,MAAO,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAChG,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;IACzE,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,KAAe;QAC3B,MAAM,oBAAoB,EAAE,CAAC;IAC/B,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,KAAe;QACnC,MAAM,+BAA+B,EAAE,CAAC;IAC1C,CAAC;CACF,CAAC;AAIF,+FAA+F;AAC/F,SAAgB,6BAA6B,CAAC,SAAmB;IAM/D,MAAM,KAAK,GAAG,IAAA,wBAAQ,GAAE,CAAC;IACzB,MAAM,UAAU,GAAsB,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC;IACtJ,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACtJ,OAAO;QACL,IAAI;QACJ,UAAU;QACV,KAAK,EAAE,UAAU,KAAK,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ;QAC1G,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,oBAAoB,EAAE;KAC3C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,8BAA8B,CAC5C,SAAsE,EACtE,QAAkB;IAElB,SAAS,OAAO,CAAC,KAAQ;QACvB,MAAM,IAAI,GAAG,6BAA6B,EAAE,CAAC;QAC7C,IAAA,iBAAS,EAAC,GAAG,EAAE;YACb,IAAI,IAAI,CAAC,UAAU,KAAK,iBAAiB,EAAE,CAAC;gBAC1C,IAAA,8BAAU,EAAC,IAAA,gCAAY,EAAC,UAAU,EAAE,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YACzG,CAAC;QACH,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,UAAU,KAAK,eAAe;YAAE,OAAO,IAAI,CAAC;QACrD,OAAO,IAAA,qBAAa,EAAC,SAAS,EAAE,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,CAAC,WAAW,GAAG,kCAAkC,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,IAAI,IAAI,WAAW,GAAG,CAAC;IAClH,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/compat-baas.d.ts

@@ -0,0 +1,155 @@
+import type { AtlasUser } from './types';
+/** The fields of Appwrite's `Models.User` apps read. */
+export interface AppwriteCompatUser {
+    $id: string;
+    name: string;
+    email: string;
+    emailVerification: boolean;
+    phone: string;
+    phoneVerification: boolean;
+    status: true;
+    labels: string[];
+    prefs: Record<string, unknown>;
+    mfa: boolean;
+}
+export declare function appwriteUserFrom(user: AtlasUser): AppwriteCompatUser;
+/** Thrown like Appwrite's `AppwriteException` (code 401, `general_unauthorized_scope`) when signed out. */
+export declare class AppwriteCompatException extends Error {
+    readonly code = 401;
+    readonly type = "general_unauthorized_scope";
+    constructor();
+}
+/** `new Account(client)` from the Appwrite web SDK. The client is accepted and ignored. */
+export declare class AppwriteAccountCompat {
+    constructor(_client?: unknown);
+    get(): Promise<AppwriteCompatUser>;
+    getPrefs(): Promise<Record<string, unknown>>;
+    /** `deleteSession('current')` signs out; other session ids are managed in <UserProfile />. */
+    deleteSession(sessionId?: string): Promise<Record<string, never>>;
+    deleteSessions(): Promise<Record<string, never>>;
+    /** `createJWT()`: `{ jwt }` is the Atlas session JWT (verify it with @atlasauth/backend). */
+    createJWT(): Promise<{
+        jwt: string;
+    }>;
+    /** `createOAuth2Session(provider, success)`: opens the Atlas sign-in page, returning to `success`. */
+    createOAuth2Session(_provider?: unknown, success?: string, _failure?: string, _scopes?: string[]): void;
+    createOAuth2Token(provider?: unknown, success?: string, failure?: string, scopes?: string[]): void;
+    create(..._args: unknown[]): Promise<never>;
+    createEmailPasswordSession(..._args: unknown[]): Promise<never>;
+    createEmailSession(..._args: unknown[]): Promise<never>;
+    createMagicURLToken(..._args: unknown[]): Promise<never>;
+    createEmailToken(..._args: unknown[]): Promise<never>;
+    createPhoneToken(..._args: unknown[]): Promise<never>;
+    createSession(..._args: unknown[]): Promise<never>;
+    createAnonymousSession(..._args: unknown[]): Promise<never>;
+    updatePassword(..._args: unknown[]): Promise<never>;
+    updateEmail(..._args: unknown[]): Promise<never>;
+    updateName(..._args: unknown[]): Promise<never>;
+    updatePrefs(..._args: unknown[]): Promise<never>;
+    createRecovery(..._args: unknown[]): Promise<never>;
+    updateRecovery(..._args: unknown[]): Promise<never>;
+    createVerification(..._args: unknown[]): Promise<never>;
+    updateVerification(..._args: unknown[]): Promise<never>;
+}
+/** The PocketBase auth record shape apps read off `pb.authStore.record` / `.model`. */
+export interface PocketBaseCompatRecord {
+    id: string;
+    collectionName: 'users';
+    email: string;
+    verified: boolean;
+    username: string;
+    name: string;
+    avatar: string;
+    [field: string]: unknown;
+}
+export declare function pocketbaseRecordFrom(user: AtlasUser): PocketBaseCompatRecord;
+/** `pb.authStore`, answered by the Atlas session. */
+export declare const pocketbaseAuthStoreCompat: {
+    readonly isValid: boolean;
+    /** The last Atlas session JWT seen (empty until the first one is minted); prefer `await getToken()`. */
+    readonly token: string;
+    readonly record: PocketBaseCompatRecord | null;
+    /** Pre-0.23 name for `record`. */
+    readonly model: PocketBaseCompatRecord | null;
+    readonly isSuperuser: boolean;
+    readonly isAdmin: boolean;
+    /** The current Atlas session JWT. */
+    getToken(): Promise<string>;
+    clear(): void;
+    /** `onChange((token, record) => …, fireImmediately)`: returns the unsubscribe. */
+    onChange(callback: (token: string, record: PocketBaseCompatRecord | null) => void, fireImmediately?: boolean): () => void;
+    /** Atlas keeps its own session cookie: there is nothing to load. */
+    loadFromCookie(_cookie?: string, _key?: string): void;
+    /** Atlas keeps its own session cookie: there is nothing to export. */
+    exportToCookie(_options?: unknown, _key?: string): string;
+    save(_token?: string, _record?: unknown): void;
+};
+/** Nhost's `User` shape (camelCase, as `@nhost/react` returns it). */
+export interface NhostCompatUser {
+    id: string;
+    email?: string;
+    emailVerified: boolean;
+    displayName: string;
+    avatarUrl: string;
+    phoneNumber?: string;
+    phoneNumberVerified: boolean;
+    defaultRole: string;
+    roles: string[];
+    locale: string;
+    isAnonymous: false;
+    metadata: Record<string, unknown>;
+}
+export declare function nhostUserFrom(user: AtlasUser): NhostCompatUser;
+/** `nhost.auth.*` session readers. */
+export declare const nhostAuthCompat: {
+    getUser(): NhostCompatUser | null;
+    isAuthenticated(): boolean;
+    /** Resolves once the session is known (not while the provider is still loading). */
+    isAuthenticatedAsync(): Promise<boolean>;
+    getAccessToken(): Promise<string | undefined>;
+    getSession(): Promise<{
+        accessToken: string;
+        user: NhostCompatUser;
+    } | null>;
+    signOut(_params?: {
+        all?: boolean;
+    }): Promise<{
+        error: null;
+    }>;
+    /** `onAuthStateChanged((event, session) => …)`: SIGNED_IN / SIGNED_OUT. Returns the unsubscribe. */
+    onAuthStateChanged(callback: (event: "SIGNED_IN" | "SIGNED_OUT", session: {
+        user: NhostCompatUser;
+    } | null) => void): () => void;
+    /** `onTokenChanged(cb)`: fires when the session token is refreshed. */
+    onTokenChanged(callback: (session: {
+        accessToken: string;
+    } | null) => void): () => void;
+};
+/** `useAuthenticationStatus()`: `{ isAuthenticated, isLoading }`. */
+export declare function useNhostAuthenticationStatusCompat(): {
+    isAuthenticated: boolean;
+    isLoading: boolean;
+    error: null;
+    isError: false;
+};
+/** `useAuthenticated()`. */
+export declare function useNhostAuthenticatedCompat(): boolean;
+/** `useUserData()`: the user, or null. */
+export declare function useNhostUserDataCompat(): NhostCompatUser | null;
+/** `useUserId()`. */
+export declare function useNhostUserIdCompat(): string | undefined;
+/** `useUserEmail()`. */
+export declare function useNhostUserEmailCompat(): string | undefined;
+/** `useUserDisplayName()`. */
+export declare function useNhostUserDisplayNameCompat(): string | undefined;
+/** `useUserAvatarUrl()`. */
+export declare function useNhostUserAvatarUrlCompat(): string | undefined;
+/** `useSignOut()`: `{ signOut, isSuccess }`. */
+export declare function useNhostSignOutCompat(): {
+    signOut: (all?: boolean) => Promise<{
+        isSuccess: boolean;
+        isError: boolean;
+        error: null;
+    }>;
+    isSuccess: boolean;
+};