refactor: use atcute oauth client

[ghostdevv]

🔗 Linked issue

🧭 Context

Updating @atproto/oauth-client-node breaks stuff, so I thought instead of trying to figure that out we could switch fully to atcute libraries - this being the first step of that

📚 Description

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs.npmx.dev	Ready	Preview, Comment	Jul 5, 2026 11:42pm
npmx.dev	Error		Jul 5, 2026 11:42pm

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
npmx-lunaria	Ignored		Jul 5, 2026 11:42pm

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 00d369a0-291c-4db6-b2c8-d9e8276276fa

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch w/atcute-oauth

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​atcute/​identity-resolver-node@​2.0.1
	@​atcute/​identity-resolver@​2.0.1
	@​atcute/​oauth-node-client@​2.0.1
	@​atcute/​lexicons@​2.0.2

View full report

[github-actions]

e18e dependency analysis

No dependency warnings found.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

[fatfingers23]

Looks good to me! Only thing I had to flag was migration of OAuth session store

[fatfingers23]

Are the types the same here from @atproto to @ATCUTE? Do we want to do some kind of translate layer or just have everyone login again?