@meshagent/meshagent-react-auth 0.36.3 → 0.37.2

package/CHANGELOG.md

@@ -1,3 +1,22 @@
+## [0.37.2]
+- Stability
+
+## [0.37.1]
+- Added `useAuth` to the React auth package to handle OAuth redirect/callback, token refresh, and profile loading without React Query, plus a `useEnsureLogin` compatibility wrapper.
+- React auth `useMAuthResponse` now deduplicates token exchanges per callback parameters to avoid repeated exchanges on re-renders.
+- Breaking: React auth no longer exports React Query `QueryClient` or `QueryClientProvider`.
+- Breaking: `useLoginScope` now delegates to `useAuth` and defaults the OAuth scope to `email`.
+- Breaking: the `staticAuthorization` helper was removed from the React room connection utilities.
+- React dev terminal hooks now return `RefObject`-typed `containerRef` values for stronger typing.
+- Meshagent TS client now normalizes binary request bodies for fetch and includes TypeScript declarations for runtime entrypoint functions.
+
+## [0.37.0]
+- Breaking: Database client now supports `json`, `uuid`, `list`, and `struct` types with typed wrappers (DatabaseJson/DatabaseStruct/DatabaseExpression/DatabaseDate/DatabaseUuid); list/struct values must be wrapped and update now takes `values` only.
+- Breaking: Containers build now streams build contexts (start/data chunks) with `mountPath`/`chunks` and removes `start_build`.
+- Breaking: Toolkit/hosting refactor replaces RemoteToolkit with startHostedToolkit/HostedToolkit, removes ToolkitConfiguration and `supports_context`, and updates React/Tailwind helpers to start hosted toolkits.
+- Participant tokens now include LLM grants and richer grant serialization (including allowed toolkits and extra payload preservation), and schema helpers add `json`/`uuid` data types.
+- The JS SDK now exports its version constant for client-side visibility.
+
 ## [0.36.3]
 - Storage client now supports move operations and emits file moved events.
 - Secrets client now supports existence checks.

package/README.md

@@ -1,3 +1,408 @@
 # Meshagent React Auth
 
-React helpers for Meshagent OAuth login, PKCE, token refresh, and auth state.
+React helpers for browser OAuth login against Meshagent.
+
+This package sits on top of `@meshagent/meshagent-ts-auth` and gives you React-friendly hooks for:
+
+- starting a PKCE OAuth redirect
+- exchanging the callback `code` for tokens
+- refreshing access tokens before protected requests
+- loading the current user profile into auth state
+- subscribing to auth state from React components
+
+It is designed for browser React apps and does not require React Query or a provider wrapper.
+
+## Install
+
+```sh
+npm install @meshagent/meshagent-react-auth
+```
+
+If your app also imports lower-level auth primitives or the core Meshagent client directly, add those as direct dependencies too:
+
+```sh
+npm install @meshagent/meshagent-ts-auth @meshagent/meshagent
+```
+
+## Before You Get Started
+
+Create an OAuth client in Meshagent Studio and register your callback URL.
+
+1. Sign in to https://studio.meshagent.com.
+2. Select your project
+3. Open "OAuth Clients" at the bottom of the left menu
+4. Click "New OAuth Client" button at the top
+5. Add 
+    - name for the client id (e.g. "My App")
+    - enter "email" for the scope
+    - add redirect URIs (e.g. "http://localhost:3000/")
+6. Upon successful creation, you will see the client id and client secret. Click "Copy" button to copy the client id and client secret to clipboard. You will need them later when you run the app.
+
+
+You will need these values throughout the examples:
+
+- `oauthClientId`: the OAuth client ID from Meshagent Studio
+- `callbackUrl`: the URL Meshagent redirects back to after login - this must match the redirect URI you registered in Studio
+
+Optional
+- `serverUrl`: your Meshagent API base URL, uses `https://api.meshagent.com` as default
+
+
+## What This Package Exports
+
+- `useAuth`: main hook for login, callback handling, session refresh, and current-user loading
+- `useLoginScope`: compatibility alias for the older signed-in hook API
+- `useEnsureLogin`: compatibility alias for the older same-page login API
+- `useMAuthResponse`: callback hook that exchanges the OAuth authorization code
+- `useMeshagentAuth`: React subscription hook for auth state
+- `buildOAuthAuthorizeUrl`: manual helper for custom login launches
+
+## Typical Flow
+
+1. Render your app normally. No auth provider wrapper is required.
+2. For the simplest same-page flow, run `useAuth(...)` and read auth state with `useMeshagentAuth()`.
+3. If you prefer a dedicated callback route, render `useMAuthResponse(...)` on that route and protect the rest of the app with `useAuth(...)`.
+4. Read live auth state anywhere with `useMeshagentAuth()`.
+
+`useAuth(...)` defaults `autoSignIn` to `true`, so it will immediately launch the OAuth redirect when there is no session yet. Set `autoSignIn: false` when you want to show your own "Sign in" button.
+
+## Quick Start
+
+### Simplest Flow: `useAuth(...)`
+
+Use `useAuth(...)` when you want the same component to handle both the initial login redirect and the callback return.
+
+If you omit `callbackUrl`, it uses the current page as the callback URL and strips the OAuth query params after a successful return.
+
+```tsx
+import {
+  useAuth,
+  useMeshagentAuth,
+} from "@meshagent/meshagent-react-auth";
+
+const oauthClientId = "YOUR_OAUTH_CLIENT_ID";
+
+export function App(): JSX.Element {
+  const { failed, refreshing, refresh } = useAuth({
+    oauthClientId,
+  });
+  const auth = useMeshagentAuth();
+
+  if (refreshing) {
+    return <p>Signing you in...</p>;
+  }
+
+  if (failed) {
+    return (
+      <div>
+        <p>Authentication failed: {String(failed)}</p>
+        <button onClick={refresh}>Retry</button>
+      </div>
+    );
+  }
+
+  return <pre>{JSON.stringify(auth, null, 2)}</pre>;
+}
+```
+
+`useAuth(...)` uses the default shared `meshagentAuth` store by default, but it also accepts custom `auth` and `storage` instances when you need them. `useEnsureLogin(...)` remains available as a compatibility alias for this same-page flow.
+
+### 1. Handle The OAuth Callback
+
+Use `useMAuthResponse(...)` on the route that matches your registered callback URL.
+
+If you do not pass `authorizationCode`, the hook reads `?code=...` from `window.location`.
+
+```tsx
+import { useEffect } from "react";
+
+import { useMAuthResponse } from "@meshagent/meshagent-react-auth";
+
+// callbackUrl must match redirect URI registered in Studio, e.g. "http://localhost:3000/auth/callback"
+const callbackUrl = new URL("/auth/callback", window.location.origin);
+const oauthClientId = "YOUR_OAUTH_CLIENT_ID";
+
+export function AuthCallbackPage(): JSX.Element {
+  const { status, error } = useMAuthResponse({
+    callbackUrl,
+    oauthClientId,
+  });
+
+  useEffect(() => {
+    if (status === "success") {
+      window.location.replace("/");
+    }
+  }, [status]);
+
+  if (status === "idle") {
+    return <p>Missing authorization code.</p>;
+  }
+
+  if (status === "loading") {
+    return <p>Signing you in...</p>;
+  }
+
+  if (status === "error") {
+    return <p>Authentication failed: {error}</p>;
+  }
+
+  return <p>Login complete. Redirecting...</p>;
+}
+```
+
+After a successful exchange, the hook stores the access token, refresh token, expiration, and current user in the underlying auth store.
+
+### 2. Protect The Signed-In Part Of Your App
+
+Use `useAuth(...)` anywhere you want to ensure that:
+
+- the user has a session
+- the access token is still valid enough
+- the current user profile has been loaded into auth state
+
+The example below disables auto-redirect so the UI can show manual sign-in buttons.
+
+```tsx
+import {
+  useAuth,
+  useMeshagentAuth,
+} from "@meshagent/meshagent-react-auth";
+import { meshagentAuth } from "@meshagent/meshagent-ts-auth";
+
+const callbackUrl = new URL("/auth/callback", window.location.origin);
+const oauthClientId = "YOUR_OAUTH_CLIENT_ID";
+
+export function ProtectedApp(): JSX.Element {
+  const {
+    failed,
+    isSigningIn,
+    refreshing,
+    signIn,
+    refresh,
+    user,
+  } = useAuth({
+    callbackUrl,
+    oauthClientId,
+    scope: "email",
+    autoSignIn: false,
+  });
+
+  if (refreshing) {
+    return <p>Checking session...</p>;
+  }
+
+  if (!user) {
+    return (
+      <div>
+        {failed ? <p>Authentication failed: {String(failed)}</p> : null}
+
+        <button onClick={() => void signIn()} disabled={isSigningIn}>
+          Sign in
+        </button>
+
+        <button onClick={() => void signIn("google")} disabled={isSigningIn}>
+          Continue with Google
+        </button>
+
+        <button onClick={refresh} disabled={isSigningIn}>
+          Retry
+        </button>
+      </div>
+    );
+  }
+
+  return <AuthenticatedHome />;
+}
+
+function AuthenticatedHome(): JSX.Element {
+  const auth = useMeshagentAuth();
+
+  return (
+    <div>
+      <p>Signed in.</p>
+      <pre>{JSON.stringify(auth, null, 2)}</pre>
+      <button onClick={() => meshagentAuth.signOut()}>Sign out</button>
+    </div>
+  );
+}
+```
+
+If you want automatic redirect instead of a sign-in screen, omit `autoSignIn`:
+
+```tsx
+const auth = useAuth({ callbackUrl, oauthClientId });
+```
+
+When there is no session, that hook will immediately start the OAuth redirect flow.
+
+### 3. Read Auth State Anywhere
+
+`useMeshagentAuth()` is the smallest hook in the package. It subscribes to the underlying auth store and returns the current snapshot:
+
+```tsx
+import { useMeshagentAuth } from "@meshagent/meshagent-react-auth";
+
+export function SessionDebugPanel(): JSX.Element {
+  const auth = useMeshagentAuth();
+
+  return <pre>{JSON.stringify(auth, null, 2)}</pre>;
+}
+```
+
+The returned snapshot has this shape:
+
+```ts
+{
+  accessToken: string | null;
+  refreshToken: string | null;
+  expiration: Date | null;
+  user: Record<string, unknown> | null;
+}
+```
+
+`user` is intentionally application-specific. Model it in your app instead of assuming fixed fields in shared code.
+
+## Example: Manual Authorize URL
+
+Use `buildOAuthAuthorizeUrl(...)` when you want manual control over when and how the browser is redirected.
+
+This helper also saves the PKCE verifier so that `useMAuthResponse(...)` can complete the callback exchange later.
+
+```tsx
+import { buildOAuthAuthorizeUrl } from "@meshagent/meshagent-react-auth";
+
+const serverUrl = "https://api.meshagent.com";
+const callbackUrl = new URL("/auth/callback", window.location.origin);
+const oauthClientId = "YOUR_OAUTH_CLIENT_ID";
+
+export async function signInWithGoogle(): Promise<void> {
+  const authorizeUrl = await buildOAuthAuthorizeUrl({
+    serverUrl,
+    callbackUrl,
+    oauthClientId,
+    scope: "email",
+    provider: "google",
+    extraQueryParams: {
+      invitation: "abc123",
+    },
+  });
+
+  window.location.assign(authorizeUrl.toString());
+}
+```
+
+If you pass custom `auth` or `storage`, use the same instances in both the login-launch side and the callback side.
+Passing `storage` alone changes PKCE verifier storage. Session persistence follows the `auth` instance you use.
+
+## API Reference
+
+### `useAuth(options)`
+
+Primary auth hook for browser login flows.
+
+What it does:
+
+- launches the browser OAuth redirect when there is no session yet
+- exchanges the callback `code` when the current URL matches the callback URL
+- loads the current user into auth state
+- refreshes the access token when needed before protected requests
+- signs out automatically if token refresh fails
+- signs out automatically if profile loading returns `401` or `403`
+- strips OAuth query params from the current URL after a successful callback exchange
+- dedupes duplicate effect runs for the same login attempt
+
+Important options:
+
+- `oauthClientId`: required OAuth client ID
+- `serverUrl`: optional Meshagent base URL, defaults to `https://api.meshagent.com`
+- `callbackUrl`: optional callback URL, defaults to the current page
+- `scope`: optional OAuth scope, defaults to `"profile"`
+- `provider`: optional provider slug to pass through to `/oauth/authorize`
+- `extraQueryParams`: optional extra query params for `/oauth/authorize`
+- `storage`: optional custom storage for PKCE verifier caching
+- `auth`: optional custom `MeshagentAuth` instance
+- `autoSignIn`: optional, defaults to `true`
+
+Returned fields:
+
+| Field | Meaning |
+| --- | --- |
+| `failed` | Most recent error, or `null` |
+| `isCancelled` | Currently always `false` in this browser redirect implementation |
+| `isSigningIn` | `true` while a sign-in launch is in progress |
+| `refreshing` | `true` while callback exchange, session validation, or profile loading is running |
+| `user` | Current user from auth state, or `null` |
+| `signIn(provider?)` | Starts the OAuth redirect, optionally forcing a provider |
+| `refresh()` | Re-runs the auth flow |
+| `isLoginLaunched` | Useful for deciding when to show login or retry UI |
+
+`useAuth(...)` replaces the overlap between `useEnsureLogin(...)` and `useLoginScope(...)`. Both legacy names still exist as wrappers for compatibility.
+
+### Legacy Aliases
+
+`useEnsureLogin(options)` is a compatibility wrapper over `useAuth(...)` for the old same-page login API. It still returns:
+
+| Field | Meaning |
+| --- | --- |
+| `status` | `"loading"`, `"success"`, or `"error"` |
+| `error` | Error message string, or `null` |
+| `refresh()` | Re-runs the auth flow |
+
+`useLoginScope(options)` is a compatibility wrapper over `useAuth(...)` for the older signed-in hook API. It returns the same fields as `useAuth(...)`, while keeping `callbackUrl` required and preserving its previous default `scope` behavior.
+
+### `useMAuthResponse(props)`
+
+Hook for your OAuth callback route.
+
+What it does:
+
+- reads the authorization code from `authorizationCode` or the current URL
+- exchanges the code at `/oauth/token`
+- stores access token, refresh token, and expiration in auth state
+- loads the current user profile
+- stores that user in auth state
+
+It does not navigate away after success. Redirect to the rest of your app yourself.
+If you used custom storage for the PKCE verifier during login launch, pass that same `storage` here.
+
+Return value:
+
+| `status` | Meaning |
+| --- | --- |
+| `"idle"` | No authorization code was found |
+| `"loading"` | Token exchange is in progress |
+| `"success"` | Exchange and profile load completed |
+| `"error"` | Exchange failed |
+
+The returned `error` is the message string from the failed query, or `null`.
+
+### `useMeshagentAuth(auth?)`
+
+Subscribes to a `MeshagentAuth` store with `useSyncExternalStore` and returns the current snapshot.
+
+Use this anywhere you want React components to update when tokens, expiration, or user state changes.
+
+### `buildOAuthAuthorizeUrl(params)`
+
+Builds the `/oauth/authorize` URL and stores a PKCE verifier before redirect.
+
+Supported parameters:
+
+- `serverUrl`
+- `callbackUrl`
+- `oauthClientId`
+- `scope`
+- `provider`
+- `extraQueryParams`
+- `storage`
+
+Use this helper when the default `signIn()` behavior is too opinionated and you need manual redirect control.
+`storage` here controls where the PKCE verifier is cached before the redirect.
+
+## Notes
+
+- This package is for browser redirect-based OAuth flows. `useAuth(...)` and its legacy aliases will throw if they try to launch login outside a browser environment.
+- No provider wrapper is required. `useAuth(...)`, `useEnsureLogin(...)`, `useLoginScope(...)`, and `useMAuthResponse(...)` manage their own async state.
+- `useMAuthResponse(...)` does not clear the `code` query parameter or navigate after success. Most apps should redirect away from the callback page after `status === "success"`.
+- Sign-out functionality lives in `@meshagent/meshagent-ts-auth`, for example `meshagentAuth.signOut()`.
+- If you need the low-level primitives directly, see `@meshagent/meshagent-ts-auth`. This package is the React layer on top of it.

package/dist/cjs/index.d.ts

@@ -1,4 +1,5 @@
-export { QueryClient, QueryClientProvider } from "@tanstack/react-query";
 export * from "./mauth-response";
+export * from "./use-auth";
+export * from "./use-ensure-login";
 export * from "./use-login-scope";
 export * from "./use-meshagent-auth";

package/dist/cjs/index.js

@@ -14,10 +14,8 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.QueryClientProvider = exports.QueryClient = void 0;
-var react_query_1 = require("@tanstack/react-query");
-Object.defineProperty(exports, "QueryClient", { enumerable: true, get: function () { return react_query_1.QueryClient; } });
-Object.defineProperty(exports, "QueryClientProvider", { enumerable: true, get: function () { return react_query_1.QueryClientProvider; } });
 __exportStar(require("./mauth-response"), exports);
+__exportStar(require("./use-auth"), exports);
+__exportStar(require("./use-ensure-login"), exports);
 __exportStar(require("./use-login-scope"), exports);
 __exportStar(require("./use-meshagent-auth"), exports);

package/dist/cjs/mauth-response.d.ts

@@ -1,10 +1,18 @@
-import type { MAuthResponseProps } from "@meshagent/meshagent-ts-auth";
+import type { StorageLike, MeshagentAuth } from "@meshagent/meshagent-ts-auth";
 declare enum UseMAuthResponseStatus {
     Idle = "idle",
     Loading = "loading",
     Success = "success",
     Error = "error"
 }
+export interface MAuthResponseProps {
+    serverUrl?: string | URL;
+    callbackUrl: string | URL;
+    oauthClientId: string;
+    authorizationCode?: string;
+    storage?: StorageLike;
+    auth?: MeshagentAuth;
+}
 export interface MAuthResponse {
     status: UseMAuthResponseStatus;
     error: string | null;

package/dist/cjs/mauth-response.js

@@ -1,11 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.useMAuthResponse = useMAuthResponse;
-const react_query_1 = require("@tanstack/react-query");
+const react_1 = require("react");
 const meshagent_ts_auth_1 = require("@meshagent/meshagent-ts-auth");
+const reference_key_1 = require("./reference-key");
 function toUrl(value) {
     return value instanceof URL ? value : new URL(value);
 }
+const inFlightTokenExchanges = new Map();
 var UseMAuthResponseStatus;
 (function (UseMAuthResponseStatus) {
     UseMAuthResponseStatus["Idle"] = "idle";
@@ -13,50 +15,88 @@ var UseMAuthResponseStatus;
     UseMAuthResponseStatus["Success"] = "success";
     UseMAuthResponseStatus["Error"] = "error";
 })(UseMAuthResponseStatus || (UseMAuthResponseStatus = {}));
-function toStatus(hasAuthCode, tokenExchangeQuery) {
-    if (!hasAuthCode) {
-        return UseMAuthResponseStatus.Idle;
-    }
-    if (tokenExchangeQuery.isPending) {
-        return UseMAuthResponseStatus.Loading;
-    }
-    if (tokenExchangeQuery.isError) {
-        return UseMAuthResponseStatus.Error;
+function buildTokenExchangeKey(params) {
+    return JSON.stringify([
+        params.serverUrl,
+        params.callbackUrl,
+        params.oauthClientId,
+        params.code,
+        params.storageKey,
+        params.authKey,
+    ]);
+}
+function toErrorMessage(error) {
+    if (error instanceof Error) {
+        return error.message;
     }
-    return UseMAuthResponseStatus.Success;
+    return String(error);
 }
 ;
 function useMAuthResponse({ serverUrl, callbackUrl, oauthClientId, authorizationCode, storage, auth, }) {
+    const serverUrlKey = toUrl(serverUrl ?? "http://api.meshcentral.com").toString();
+    const callbackUrlKey = toUrl(callbackUrl).toString();
     const code = authorizationCode ?? (0, meshagent_ts_auth_1.getAuthorizationCode)() ?? undefined;
-    const tokenExchangeQuery = (0, react_query_1.useQuery)({
-        queryKey: [
-            "mauth-response",
-            toUrl(serverUrl).toString(),
-            toUrl(callbackUrl).toString(),
+    const [status, setStatus] = (0, react_1.useState)(code === undefined ? UseMAuthResponseStatus.Idle : UseMAuthResponseStatus.Loading);
+    const [error, setError] = (0, react_1.useState)(null);
+    const tokenExchangeKey = code === undefined
+        ? null
+        : buildTokenExchangeKey({
+            serverUrl: serverUrlKey,
+            callbackUrl: callbackUrlKey,
             oauthClientId,
             code,
-        ],
-        enabled: code !== undefined,
-        retry: false,
-        refetchOnReconnect: false,
-        refetchOnWindowFocus: false,
-        queryFn: async ({ signal }) => {
-            if (code === undefined) {
-                throw new Error("Missing authorization code");
-            }
-            await (0, meshagent_ts_auth_1.exchangeToken)({
-                serverUrl,
+            storageKey: (0, reference_key_1.getReferenceKey)(storage, "default-storage"),
+            authKey: (0, reference_key_1.getReferenceKey)(auth, "default-auth"),
+        });
+    (0, react_1.useEffect)(() => {
+        if (code === undefined || tokenExchangeKey === null) {
+            setStatus(UseMAuthResponseStatus.Idle);
+            setError(null);
+            return;
+        }
+        let cancelled = false;
+        setStatus(UseMAuthResponseStatus.Loading);
+        setError(null);
+        let tokenExchange = inFlightTokenExchanges.get(tokenExchangeKey);
+        if (!tokenExchange) {
+            tokenExchange = (0, meshagent_ts_auth_1.exchangeToken)({
+                serverUrl: serverUrlKey,
                 callbackUrl,
                 oauthClientId,
                 authorizationCode: code,
                 storage,
                 auth,
-            }, signal);
-            return null;
-        },
-    });
-    return {
-        status: toStatus(code !== undefined, tokenExchangeQuery),
-        error: tokenExchangeQuery.error?.message ?? null,
-    };
+            }).finally(() => {
+                inFlightTokenExchanges.delete(tokenExchangeKey);
+            });
+            inFlightTokenExchanges.set(tokenExchangeKey, tokenExchange);
+        }
+        tokenExchange
+            .then(() => {
+            if (cancelled) {
+                return;
+            }
+            setStatus(UseMAuthResponseStatus.Success);
+            setError(null);
+        })
+            .catch((exchangeError) => {
+            if (cancelled) {
+                return;
+            }
+            setStatus(UseMAuthResponseStatus.Error);
+            setError(toErrorMessage(exchangeError));
+        });
+        return () => {
+            cancelled = true;
+        };
+    }, [
+        auth,
+        callbackUrl,
+        code,
+        oauthClientId,
+        serverUrl,
+        storage,
+        tokenExchangeKey,
+    ]);
+    return { status, error };
 }

package/dist/cjs/reference-key.d.ts

@@ -0,0 +1 @@
+export declare function getReferenceKey(value: object | null | undefined, fallback: string): string;

package/dist/cjs/reference-key.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getReferenceKey = getReferenceKey;
+const objectIds = new WeakMap();
+let nextObjectId = 1;
+function getReferenceKey(value, fallback) {
+    if (!value) {
+        return fallback;
+    }
+    const existing = objectIds.get(value);
+    if (existing !== undefined) {
+        return `${fallback}:${existing}`;
+    }
+    const id = nextObjectId;
+    nextObjectId += 1;
+    objectIds.set(value, id);
+    return `${fallback}:${id}`;
+}

package/dist/cjs/use-auth.d.ts

@@ -0,0 +1,35 @@
+import { MeshagentAuth } from "@meshagent/meshagent-ts-auth";
+import type { StorageLike, MeshagentUser } from "@meshagent/meshagent-ts-auth";
+export declare function buildOAuthAuthorizeUrl(params: {
+    serverUrl: string | URL;
+    callbackUrl: string | URL;
+    oauthClientId: string;
+    scope?: string;
+    provider?: string | null;
+    extraQueryParams?: Record<string, string>;
+    storage?: StorageLike;
+}): Promise<URL>;
+export interface AuthRenderProps {
+    failed: unknown;
+    isCancelled: boolean;
+    isSigningIn: boolean;
+    refreshing: boolean;
+    user: MeshagentUser | null;
+    signIn: (provider?: string | null) => Promise<void>;
+    refresh: () => void;
+}
+export interface UseAuthProps {
+    serverUrl?: string | URL;
+    callbackUrl?: string | URL;
+    oauthClientId: string;
+    scope?: string;
+    provider?: string;
+    extraQueryParams?: Record<string, string>;
+    storage?: StorageLike;
+    auth?: MeshagentAuth;
+    autoSignIn?: boolean;
+}
+export interface UseAuthResult extends AuthRenderProps {
+    isLoginLaunched: boolean;
+}
+export declare function useAuth(props: UseAuthProps): UseAuthResult;