@atlasauth/capacitor 0.1.1 → 0.3.0

package/CHANGELOG.md

@@ -1,5 +1,37 @@
 # @atlasauth/capacitor changelog
 
+## 0.3.0 — 2026-10-24
+Requires `@atlasauth/js` with policy acceptance.
+- **Policy acceptance** (terms of service, privacy, any policy the app defines). The system-browser sign-in runs on Atlas's
+  hosted pages, which collect and hold for the policies themselves. For the app's own WebView screens, the handle gains
+  `policies()` (a `PolicyAcceptanceController` for a sign-up form), `pendingPolicies(attempt)`, `policyGate()` (in-app
+  re-acceptance with the session's bearer token) and `fapi`; new `locale` option. `mountPolicyGate(host, gate)` draws the
+  signed-in banner, and the DOM pieces (`mountPolicyConsent`, `mountPolicyClickwrap`, `mountPolicyAcceptStep`) are re-exported.
+
+## 0.2.0
+
+### Changed
+- **`signOut(options?: SignOutOptions)` now resolves `Promise<SignOutResult>`** (`{ revoked: boolean; activeSessionId?: string }`)
+  instead of `Promise<void>`, and revokes the session on the Frontend API (it used to only clear local state). Existing
+  `await atlas.signOut()` call sites keep working. The revoke is authenticated as the session being dropped, retried once,
+  then re-tried in the background (a 401 from an expired JWT rotates it once with the refresh token). `{ strict: true }`
+  rejects with `SignOutError` (`code: 'SIGN_OUT_REVOKE_FAILED'`, `sessionId`, `status`) after the local sign-out.
+  `activeSessionId` (a server-promoted session) is reported but not adopted: the bearer revoke never returns a credential
+  for it.
+- **A signed-out session is never re-adopted.** Its id is remembered (a tombstone, via `SignOutGuard` from
+  `@atlasauth/js`) in the platform store before the revoke; the next app start refuses a stored session that is tombstoned
+  (and clears it), and a refresh still in flight at sign-out can no longer write the session back or resurrect it in
+  memory. A refused session's revoke is re-tried in the background and its tombstone dropped once the server confirms.
+- `getToken()` / `authHeaders()` return no bearer for a session signed out while a refresh was in flight; `onChange()`
+  listeners are not called for a signed-out session.
+
+### Added
+- `CreateAtlasCapacitorConfig.tombstoneStore?: TombstoneStore` (default: `@capacitor/preferences` when present, else the
+  WebView's `localStorage`) and `CreateAtlasCapacitorConfig.signOutRetryDelaysMs?: number[]`.
+- `createPreferencesTombstoneStore(preferences)` and `tombstoneStoreFromTokenStore(store)` adapters.
+- `NativeSessionConfig.refuse?: (session: NativeSession) => boolean` on `createNativeSessionManager()`.
+- Re-exports `SignOutError`, `SignOutOptions`, `SignOutResult` and `TombstoneStore` from `@atlasauth/js`.
+
 ## 0.1.1
 - **`frontendApi` is validated at `createAtlasCapacitor()`.** A missing, empty or malformed value now throws an
   `AtlasConfigError` (from `@atlasauth/js`; `code: 'FRONTEND_API_REQUIRED'` or `'FRONTEND_API_INVALID'`)

package/README.md

@@ -109,6 +109,23 @@ const secureStore: TokenStore = {
 const atlas = await createAtlasCapacitor({ /* … */ storage: secureStore });
 ```
 
+## Policy acceptance (terms of service, privacy)
+
+The system-browser sign-in (`atlas.signIn()`) happens on Atlas's hosted pages, which already collect the acceptances at sign-up
+and hold a sign-in until a newer version is accepted. For screens in your own WebView:
+
+```ts
+// A custom sign-up form
+const policies = await atlas.policies();
+mountPolicyConsent(consentHost, policies, { t: policyText() });
+// on submit: send policies.build() as policy_acceptances
+
+// A signed-in user whose policies changed
+mountPolicyGate(gateHost, atlas.policyGate(), { onAccepted: () => refresh() });
+```
+
+Pass `locale` to `createAtlasCapacitor` to get translated policy versions.
+
 ## Driving the pieces yourself
 
 The flow is also exposed à la carte: `createPkcePair`, `buildAuthorizeUrl`,

package/dist/index.d.ts

@@ -16,10 +16,11 @@
  * (the sign-in flow, the token store, the PKCE helpers) is exposed for apps that
  * want to drive the pieces themselves.
  */
-import { type NativeSession, type NativeSessionManager } from '@atlasauth/js';
+import { NativeSessionManager, type NativeSession, type SignOutOptions, type SignOutResult, type TombstoneStore } from '@atlasauth/js';
 import { type CapacitorPlugins } from './plugins';
 import { type SignInOutcome } from './sign-in';
 import { type TokenStore } from './token-store';
+import { type PolicyApi } from './policies';
 export interface CreateAtlasCapacitorConfig {
     /** The instance publishable key (`pk_…`). */
     publishableKey: string;
@@ -40,10 +41,28 @@ export interface CreateAtlasCapacitorConfig {
     storage?: TokenStore;
     /** Where the transient PKCE material is stashed on the WEB redirect path. */
     pkceStore?: TokenStore;
+    /**
+     * Where the ids of sessions this app signed out of are kept, so a restart
+     * never re-adopts one (even when the revoke never reached the server).
+     * Defaults to `@capacitor/preferences` when present, else the WebView's
+     * `localStorage`. Adapt a secure-storage {@link TokenStore} with
+     * `tombstoneStoreFromTokenStore()` (give it its own slot).
+     */
+    tombstoneStore?: TombstoneStore;
+    /**
+     * Delays (ms) between background re-tries of a revoke `signOut()` could not
+     * complete. @default `[15_000, 60_000, 300_000]`
+     */
+    signOutRetryDelaysMs?: number[];
     /** Inject the Capacitor plugins (tests). Defaults to a lazy, guarded load. */
     plugins?: CapacitorPlugins;
     /** Injectable for tests; defaults to the platform `fetch`. */
     fetchImpl?: typeof fetch;
+    /**
+     * The app's UI language (`"es"`), sent as `Accept-Language` on the policy calls
+     * so the server picks a translated policy version. @default none
+     */
+    locale?: string;
     /** Injectable clock, epoch ms. Defaults to `Date.now`. */
     now?: () => number;
     /** Navigate the page on the web redirect path. @default `window.location.assign` */
@@ -61,7 +80,7 @@ export interface SignInOptions {
  * the manager, {@link getToken} hands out a live (auto-refreshing) JWT, and
  * {@link onChange} fires on every session change.
  */
-export interface AtlasCapacitor {
+export interface AtlasCapacitor extends PolicyApi {
     /**
      * Run the native-session sign-in: open the system browser, catch the deep-link
      * callback, complete PKCE, exchange for a session, and store it. On the web
@@ -75,8 +94,18 @@ export interface AtlasCapacitor {
      * (or null when there is nothing to complete).
      */
     handleRedirectCallback(url?: string): Promise<NativeSession | null>;
-    /** Forget the session and clear the store (sign-out). */
-    signOut(): Promise<void>;
+    /**
+     * Sign out: remember the session id (so nothing re-adopts it — not a refresh
+     * in flight, not the next app start), revoke it on the Frontend API (retried
+     * once, then in the background, authenticated as the dropped session), and
+     * forget it locally. Resolves `{ revoked }` — `false` when the server could
+     * not be reached (the app is signed out regardless). With `{ strict: true }`
+     * it rejects with a `SignOutError` instead, after the local sign-out.
+     *
+     * A bearer client never gets a server-promoted session's credential back from
+     * the revoke, so `activeSessionId` is reported (when present) but not adopted.
+     */
+    signOut(options?: SignOutOptions): Promise<SignOutResult>;
     /** The current session JWT, auto-refreshed near expiry; null when signed out. */
     getToken(): Promise<string | null>;
     /** The headers an authenticated `/v1/client/me/*` call needs (bearer + pk). */
@@ -109,8 +138,10 @@ export interface AtlasCapacitor {
  * ```
  */
 export declare function createAtlasCapacitor(config: CreateAtlasCapacitorConfig): Promise<AtlasCapacitor>;
+export { SignOutError, type SignOutOptions, type SignOutResult, type TombstoneStore, } from '@atlasauth/js';
 export * from './plugins';
 export * from './pkce';
 export * from './token-store';
 export * from './sign-in';
 export { createNativeSessionManager, clearNativeSession, NativeSessionManager, exchangeForSession, refreshNativeSession, type NativeSession, type NativeSessionConfig, } from './native-session';
+export * from './policies';

package/dist/index.js

@@ -32,13 +32,14 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.refreshNativeSession = exports.exchangeForSession = exports.NativeSessionManager = exports.clearNativeSession = exports.createNativeSessionManager = void 0;
+exports.refreshNativeSession = exports.exchangeForSession = exports.NativeSessionManager = exports.clearNativeSession = exports.createNativeSessionManager = exports.SignOutError = void 0;
 exports.createAtlasCapacitor = createAtlasCapacitor;
 const js_1 = require("@atlasauth/js");
 const plugins_1 = require("./plugins");
 const sign_in_1 = require("./sign-in");
 const token_store_1 = require("./token-store");
 const native_session_1 = require("./native-session");
+const policies_1 = require("./policies");
 /**
  * Create the Atlas handle for a Capacitor app.
  *
@@ -77,6 +78,47 @@ async function createAtlasCapacitor(config) {
         (plugins.Preferences
             ? (0, token_store_1.createPreferencesTokenStore)(plugins.Preferences, sign_in_1.PKCE_STASH_KEY)
             : (0, token_store_1.createInMemoryTokenStore)());
+    const doFetch = config.fetchImpl ?? ((input, init) => fetch(input, init));
+    /**
+     * A Frontend API request authenticated as `session` — and only it. Holds its
+     * own copy (never persisted), so a revoke re-tried after sign-out dropped the
+     * session can still authenticate: a 401 (the short-lived JWT expired) rotates
+     * it once with the refresh token and tries again.
+     */
+    const sessionBoundRequest = (session) => {
+        const holder = new js_1.NativeSessionManager({
+            baseUrl: frontendApi,
+            publishableKey: config.publishableKey,
+            initial: session,
+            fetchImpl: config.fetchImpl,
+            now: config.now,
+        });
+        return async (path, init) => {
+            const send = async () => doFetch(`${frontendApi}${path}`, {
+                ...init,
+                headers: { ...(await holder.authHeaders()), ...init?.headers },
+            });
+            const response = await send();
+            if (response.status !== 401 || !(await holder.refresh()))
+                return response;
+            return send();
+        };
+    };
+    // The sessions this app signed out of, kept in the platform store so a
+    // restart never re-adopts one. Loaded before the stored session is trusted.
+    const tombstoneStore = config.tombstoneStore ??
+        (plugins.Preferences ? (0, token_store_1.createPreferencesTombstoneStore)(plugins.Preferences) : undefined);
+    const guard = new js_1.SignOutGuard({
+        // Every revoke passes its own session-bound request; this one carries none.
+        request: (path, init) => doFetch(`${frontendApi}${path}`, {
+            ...init,
+            headers: { 'x-publishable-key': config.publishableKey, ...init?.headers },
+        }),
+        frontendApi,
+        ...(tombstoneStore ? { store: tombstoneStore } : {}),
+        ...(config.signOutRetryDelaysMs ? { retryDelaysMs: config.signOutRetryDelaysMs } : {}),
+    });
+    await guard.ready;
     const manager = await (0, native_session_1.createNativeSessionManager)({
         frontendApi,
         publishableKey: config.publishableKey,
@@ -84,14 +126,39 @@ async function createAtlasCapacitor(config) {
         storage,
         fetchImpl: config.fetchImpl,
         now: config.now,
+        // Never adopt (nor write back) a session this app signed out of; a stored
+        // one is revoked again in the background, as itself.
+        refuse: (session) => guard.isSignedOut(session.sessionId) && guard.refuse(session.sessionId, sessionBoundRequest(session)),
     });
+    // A refresh still in flight at sign-out must not put the session back in memory.
+    manager.onChange((session) => {
+        if (guard.isSignedOut(session.sessionId))
+            manager.clear();
+    });
+    const getToken = async () => {
+        const token = await manager.getToken();
+        // Signed out while a refresh was in flight: the rotated token is not ours.
+        return token && manager.current ? token : null;
+    };
     const requireString = (value, name) => {
         if (!value)
             throw new Error(`Atlas: \`${name}\` is required to sign in.`);
         return value;
     };
+    // Policy acceptance (terms, privacy, any policy) over the same bearer session.
+    const policyApi = (0, policies_1.createPolicyApi)({
+        publishableKey: config.publishableKey,
+        frontendApi,
+        authHeaders: async () => {
+            const token = await getToken();
+            return token ? { Authorization: `Bearer ${token}` } : {};
+        },
+        fetchImpl: config.fetchImpl,
+        locale: config.locale,
+    });
     return {
         manager,
+        ...policyApi,
         async signIn(options = {}) {
             const clientId = requireString(options.clientId ?? config.clientId, 'clientId');
             const redirectUri = requireString(options.redirectUri ?? config.redirectUri, 'redirectUri');
@@ -132,25 +199,47 @@ async function createAtlasCapacitor(config) {
                 manager.setSession(session);
             return session;
         },
-        async signOut() {
+        async signOut(options = {}) {
+            const session = manager.current;
+            // Tombstones the session synchronously, before anything below can yield;
+            // the revoke itself rides on the session being dropped.
+            const pending = session
+                ? guard.revoke(session.sessionId, { ...options, request: sessionBoundRequest(session) })
+                : null;
             manager.clear();
-            await (0, native_session_1.clearNativeSession)(storage);
-        },
-        getToken() {
-            return manager.getToken();
+            // The tombstone already keeps a restart from re-adopting a session this
+            // clear fails to remove, so a store error does not fail the sign-out.
+            await Promise.resolve()
+                .then(() => (0, native_session_1.clearNativeSession)(storage))
+                .catch(() => undefined);
+            // Nothing to revoke when signed out (a bearer client has no cookie to find one by).
+            const attempt = pending ? await pending : { sessionId: null, outcome: { revoked: true, status: 200 } };
+            // A promoted session (`activeSessionId`) comes with cookies only — the
+            // bearer revoke never hands this client a credential for it — so it is
+            // reported, not adopted.
+            return guard.settle(attempt, options);
         },
-        authHeaders() {
-            return manager.authHeaders();
+        getToken,
+        async authHeaders() {
+            const token = await getToken();
+            return token
+                ? { Authorization: `Bearer ${token}`, 'x-publishable-key': config.publishableKey }
+                : { 'x-publishable-key': config.publishableKey };
         },
         getSession() {
             return manager.current;
         },
         onChange(listener) {
-            return manager.onChange(listener);
+            return manager.onChange((session) => {
+                if (!guard.isSignedOut(session.sessionId))
+                    listener(session);
+            });
         },
     };
 }
 // ── Re-exports: the pieces, for apps that drive the flow themselves ──────────
+var js_2 = require("@atlasauth/js");
+Object.defineProperty(exports, "SignOutError", { enumerable: true, get: function () { return js_2.SignOutError; } });
 __exportStar(require("./plugins"), exports);
 __exportStar(require("./pkce"), exports);
 __exportStar(require("./token-store"), exports);
@@ -161,4 +250,6 @@ Object.defineProperty(exports, "clearNativeSession", { enumerable: true, get: fu
 Object.defineProperty(exports, "NativeSessionManager", { enumerable: true, get: function () { return native_session_2.NativeSessionManager; } });
 Object.defineProperty(exports, "exchangeForSession", { enumerable: true, get: function () { return native_session_2.exchangeForSession; } });
 Object.defineProperty(exports, "refreshNativeSession", { enumerable: true, get: function () { return native_session_2.refreshNativeSession; } });
+// Policy acceptance: the DOM pieces for a WebView screen, the gate banner, and the API builder.
+__exportStar(require("./policies"), exports);
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;;;;;;;;;;;;;;;AAiHH,oDAsGC;AArND,sCAAkG;AAClG,uCAImB;AACnB,uCAKmB;AACnB,+CAKuB;AACvB,qDAAkF;AAyElF;;;;;;;;;;;;;;;;;;;GAmBG;AACI,KAAK,UAAU,oBAAoB,CACxC,MAAkC;IAElC,yEAAyE;IACzE,4EAA4E;IAC5E,4EAA4E;IAC5E,6CAA6C;IAC7C,MAAM,WAAW,GAAG,IAAA,uBAAkB,EAAC,MAAM,CAAC,WAAW,EAAE;QACzD,SAAS,EAAE,wBAAwB;QACnC,eAAe,EAAE,KAAK;KACvB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,IAAA,8BAAoB,GAAE,CAAC,CAAC;IAEjE,MAAM,OAAO,GACX,MAAM,CAAC,OAAO;QACd,CAAC,OAAO,CAAC,WAAW;YAClB,CAAC,CAAC,IAAA,yCAA2B,EAAC,OAAO,CAAC,WAAW,EAAE,iCAAmB,CAAC;YACvE,CAAC,CAAC,IAAA,sCAAwB,GAAE,CAAC,CAAC;IAElC,MAAM,SAAS,GACb,MAAM,CAAC,SAAS;QAChB,CAAC,OAAO,CAAC,WAAW;YAClB,CAAC,CAAC,IAAA,yCAA2B,EAAC,OAAO,CAAC,WAAW,EAAE,wBAAc,CAAC;YAClE,CAAC,CAAC,IAAA,sCAAwB,GAAE,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,MAAM,IAAA,2CAA0B,EAAC;QAC/C,WAAW;QACX,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO;QACP,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;KAChB,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,CAAC,KAAyB,EAAE,IAAY,EAAU,EAAE;QACxE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,4BAA4B,CAAC,CAAC;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,OAAO;QACL,OAAO;QAEP,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,EAAE;YACvB,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAChF,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;YAC5F,MAAM,OAAO,GAAG,MAAM,IAAA,2BAAiB,EAAC;gBACtC,WAAW;gBACX,QAAQ;gBACR,WAAW;gBACX,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;gBACpC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS;gBACT,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,OAAO;gBAAE,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACzD,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,sBAAsB,CAAC,GAAG;YAC9B,8EAA8E;YAC9E,IAAI,IAAA,0BAAgB,EAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpE,MAAM,UAAU,GACd,GAAG,IAAI,CAAC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC5E,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC;YAC7B,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC5D,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,MAAM,IAAA,gCAAsB,EAAC;gBAC3C,WAAW;gBACX,QAAQ;gBACR,WAAW;gBACX,GAAG,EAAE,UAAU;gBACf,SAAS;gBACT,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC;YACH,IAAI,OAAO;gBAAE,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,OAAO;YACX,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAA,mCAAkB,EAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,QAAQ;YACN,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC5B,CAAC;QAED,WAAW;YACT,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC;QAC/B,CAAC;QAED,UAAU;YACR,OAAO,OAAO,CAAC,OAAO,CAAC;QACzB,CAAC;QAED,QAAQ,CAAC,QAAQ;YACf,OAAO,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,4CAA0B;AAC1B,yCAAuB;AACvB,gDAA8B;AAC9B,4CAA0B;AAC1B,mDAQ0B;AAPxB,4HAAA,0BAA0B,OAAA;AAC1B,oHAAA,kBAAkB,OAAA;AAClB,sHAAA,oBAAoB,OAAA;AACpB,oHAAA,kBAAkB,OAAA;AAClB,sHAAA,oBAAoB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;;;;;;;;;;;;;;;AAwJH,oDAkMC;AAxVD,sCASuB;AACvB,uCAImB;AACnB,uCAKmB;AACnB,+CAMuB;AACvB,qDAAkF;AAClF,yCAA6D;AAqG7D;;;;;;;;;;;;;;;;;;;GAmBG;AACI,KAAK,UAAU,oBAAoB,CACxC,MAAkC;IAElC,yEAAyE;IACzE,4EAA4E;IAC5E,4EAA4E;IAC5E,6CAA6C;IAC7C,MAAM,WAAW,GAAG,IAAA,uBAAkB,EAAC,MAAM,CAAC,WAAW,EAAE;QACzD,SAAS,EAAE,wBAAwB;QACnC,eAAe,EAAE,KAAK;KACvB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,IAAA,8BAAoB,GAAE,CAAC,CAAC;IAEjE,MAAM,OAAO,GACX,MAAM,CAAC,OAAO;QACd,CAAC,OAAO,CAAC,WAAW;YAClB,CAAC,CAAC,IAAA,yCAA2B,EAAC,OAAO,CAAC,WAAW,EAAE,iCAAmB,CAAC;YACvE,CAAC,CAAC,IAAA,sCAAwB,GAAE,CAAC,CAAC;IAElC,MAAM,SAAS,GACb,MAAM,CAAC,SAAS;QAChB,CAAC,OAAO,CAAC,WAAW;YAClB,CAAC,CAAC,IAAA,yCAA2B,EAAC,OAAO,CAAC,WAAW,EAAE,wBAAc,CAAC;YAClE,CAAC,CAAC,IAAA,sCAAwB,GAAE,CAAC,CAAC;IAElC,MAAM,OAAO,GAAiB,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAExF;;;;;OAKG;IACH,MAAM,mBAAmB,GAAG,CAAC,OAAsB,EAAe,EAAE;QAClE,MAAM,MAAM,GAAG,IAAI,yBAAoB,CAAC;YACtC,OAAO,EAAE,WAAW;YACpB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,OAAO,EAAE,OAAO;YAChB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;SAChB,CAAC,CAAC;QACH,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;YAC1B,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CACtB,OAAO,CAAC,GAAG,WAAW,GAAG,IAAI,EAAE,EAAE;gBAC/B,GAAG,IAAI;gBACP,OAAO,EAAE,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC,EAAE,GAAI,IAAI,EAAE,OAAkC,EAAE;aAC3F,CAAC,CAAC;YACL,MAAM,QAAQ,GAAG,MAAM,IAAI,EAAE,CAAC;YAC9B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAE,OAAO,QAAQ,CAAC;YAC1E,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,uEAAuE;IACvE,4EAA4E;IAC5E,MAAM,cAAc,GAClB,MAAM,CAAC,cAAc;QACrB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAA,6CAA+B,EAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,IAAI,iBAAY,CAAC;QAC7B,4EAA4E;QAC5E,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CACtB,OAAO,CAAC,GAAG,WAAW,GAAG,IAAI,EAAE,EAAE;YAC/B,GAAG,IAAI;YACP,OAAO,EAAE,EAAE,mBAAmB,EAAE,MAAM,CAAC,cAAc,EAAE,GAAI,IAAI,EAAE,OAAkC,EAAE;SACtG,CAAC;QACJ,WAAW;QACX,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvF,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,KAAK,CAAC;IAElB,MAAM,OAAO,GAAG,MAAM,IAAA,2CAA0B,EAAC;QAC/C,WAAW;QACX,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO;QACP,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,0EAA0E;QAC1E,qDAAqD;QACrD,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAClB,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;KACxG,CAAC,CAAC;IACH,iFAAiF;IACjF,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,IAAI,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,KAAK,IAA4B,EAAE;QAClD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,2EAA2E;QAC3E,OAAO,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACjD,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,CAAC,KAAyB,EAAE,IAAY,EAAU,EAAE;QACxE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,4BAA4B,CAAC,CAAC;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,+EAA+E;IAC/E,MAAM,SAAS,GAAG,IAAA,0BAAe,EAAC;QAChC,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,WAAW;QACX,WAAW,EAAE,KAAK,IAAqC,EAAE;YACvD,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,CAAC;QACD,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IAEH,OAAO;QACL,OAAO;QACP,GAAG,SAAS;QAEZ,KAAK,CAAC,MAAM,CAAC,OAAO,GAAG,EAAE;YACvB,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAChF,MAAM,WAAW,GAAG,aAAa,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;YAC5F,MAAM,OAAO,GAAG,MAAM,IAAA,2BAAiB,EAAC;gBACtC,WAAW;gBACX,QAAQ;gBACR,WAAW;gBACX,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;gBACpC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,SAAS;gBACT,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,OAAO;gBAAE,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACzD,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,sBAAsB,CAAC,GAAG;YAC9B,8EAA8E;YAC9E,IAAI,IAAA,0BAAgB,EAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpE,MAAM,UAAU,GACd,GAAG,IAAI,CAAC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC5E,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC;YAC7B,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC5D,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;YACrE,MAAM,OAAO,GAAG,MAAM,IAAA,gCAAsB,EAAC;gBAC3C,WAAW;gBACX,QAAQ;gBACR,WAAW;gBACX,GAAG,EAAE,UAAU;gBACf,SAAS;gBACT,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC;YACH,IAAI,OAAO;gBAAE,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACzC,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,OAAO,GAAG,EAAE;YACxB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;YAChC,yEAAyE;YACzE,wDAAwD;YACxD,MAAM,OAAO,GAAG,OAAO;gBACrB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxF,CAAC,CAAC,IAAI,CAAC;YACT,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,wEAAwE;YACxE,sEAAsE;YACtE,MAAM,OAAO,CAAC,OAAO,EAAE;iBACpB,IAAI,CAAC,GAAG,EAAE,CAAC,IAAA,mCAAkB,EAAC,OAAO,CAAC,CAAC;iBACvC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1B,oFAAoF;YACpF,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;YACvG,uEAAuE;YACvE,uEAAuE;YACvE,yBAAyB;YACzB,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;QAED,QAAQ;QAER,KAAK,CAAC,WAAW;YACf,MAAM,KAAK,GAAG,MAAM,QAAQ,EAAE,CAAC;YAC/B,OAAO,KAAK;gBACV,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,mBAAmB,EAAE,MAAM,CAAC,cAAc,EAAE;gBAClF,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC;QACrD,CAAC;QAED,UAAU;YACR,OAAO,OAAO,CAAC,OAAO,CAAC;QACzB,CAAC;QAED,QAAQ,CAAC,QAAQ;YACf,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE;gBAClC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;oBAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC/D,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,oCAKuB;AAJrB,kGAAA,YAAY,OAAA;AAKd,4CAA0B;AAC1B,yCAAuB;AACvB,gDAA8B;AAC9B,4CAA0B;AAC1B,mDAQ0B;AAPxB,4HAAA,0BAA0B,OAAA;AAC1B,oHAAA,kBAAkB,OAAA;AAClB,sHAAA,oBAAoB,OAAA;AACpB,oHAAA,kBAAkB,OAAA;AAClB,sHAAA,oBAAoB,OAAA;AAKtB,gGAAgG;AAChG,6CAA2B"}

package/dist/native-session.d.ts

@@ -12,7 +12,7 @@
  * session id the refresh call needs and the current JWT. Give the native session
  * its OWN store/key, separate from any other value the app keeps.
  */
-import { NativeSessionManager } from '@atlasauth/js';
+import { NativeSessionManager, type NativeSession } from '@atlasauth/js';
 import { type TokenStore } from './token-store';
 export interface NativeSessionConfig {
     /** The instance's FAPI origin, e.g. `https://fapi.acme.atlasauth.net`. */
@@ -31,6 +31,14 @@ export interface NativeSessionConfig {
     fetchImpl?: typeof fetch;
     /** Injectable clock, epoch ms. Defaults to `Date.now`. */
     now?: () => number;
+    /**
+     * Asked before a session is adopted from the store on boot, and before a
+     * (rotated) session is persisted. Return true for a session the app signed
+     * out of: it is not seeded (and is cleared from the store), nor written back
+     * by a refresh that was still in flight at sign-out. `createAtlasCapacitor`
+     * wires this to its `SignOutGuard`.
+     */
+    refuse?: (session: NativeSession) => boolean;
 }
 /**
  * Build a {@link NativeSessionManager} wired to a Capacitor token store.

package/dist/native-session.js

@@ -35,7 +35,15 @@ async function createNativeSessionManager(config) {
         allowSameOrigin: false,
     });
     const storage = config.storage ?? (0, token_store_1.createInMemoryTokenStore)();
-    const initial = (0, js_1.parseNativeSession)(await storage.getToken()) ?? undefined;
+    let initial = (0, js_1.parseNativeSession)(await storage.getToken()) ?? undefined;
+    if (initial && config.refuse?.(initial)) {
+        // A session this app signed out of (the clear never landed, or a refresh
+        // in flight at sign-out wrote it back): boot signed out.
+        initial = undefined;
+        await Promise.resolve()
+            .then(() => storage.clearToken())
+            .catch(() => undefined);
+    }
     return new js_1.NativeSessionManager({
         baseUrl,
         publishableKey: config.publishableKey,
@@ -47,6 +55,8 @@ async function createNativeSessionManager(config) {
         // the rotated refresh token survives an app restart. Fire-and-forget — the
         // store may be async, and a write failure must not break the live session.
         persist: (session) => {
+            if (config.refuse?.(session))
+                return;
             void Promise.resolve(storage.setToken((0, js_1.serializeNativeSession)(session))).catch(() => undefined);
         },
     });

package/dist/native-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"native-session.js","sourceRoot":"","sources":["../src/native-session.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAsCH,gEA4BC;AAGD,gDAEC;AArED,sCAMuB;AACvB,+CAA0E;AAqB1E;;;;;;;GAOG;AACI,KAAK,UAAU,0BAA0B,CAC9C,MAA2B;IAE3B,2EAA2E;IAC3E,sCAAsC;IACtC,MAAM,OAAO,GAAG,IAAA,uBAAkB,EAAC,MAAM,CAAC,WAAW,EAAE;QACrD,SAAS,EAAE,8BAA8B;QACzC,eAAe,EAAE,KAAK;KACvB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,IAAA,sCAAwB,GAAE,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAA,uBAAkB,EAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,SAAS,CAAC;IAE1E,OAAO,IAAI,yBAAoB,CAAC;QAC9B,OAAO;QACP,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO;QACP,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,OAAO,EAAE,CAAC,OAAsB,EAAE,EAAE;YAClC,KAAK,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAA,2BAAsB,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAC3E,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,qDAAqD;AAC9C,KAAK,UAAU,kBAAkB,CAAC,OAAmB;IAC1D,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC;AAED,oCAKuB;AAJrB,0GAAA,oBAAoB,OAAA;AACpB,wGAAA,kBAAkB,OAAA;AAClB,0GAAA,oBAAoB,OAAA"}
+{"version":3,"file":"native-session.js","sourceRoot":"","sources":["../src/native-session.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AA8CH,gEAqCC;AAGD,gDAEC;AAtFD,sCAMuB;AACvB,+CAA0E;AA6B1E;;;;;;;GAOG;AACI,KAAK,UAAU,0BAA0B,CAC9C,MAA2B;IAE3B,2EAA2E;IAC3E,sCAAsC;IACtC,MAAM,OAAO,GAAG,IAAA,uBAAkB,EAAC,MAAM,CAAC,WAAW,EAAE;QACrD,SAAS,EAAE,8BAA8B;QACzC,eAAe,EAAE,KAAK;KACvB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,IAAA,sCAAwB,GAAE,CAAC;IAC7D,IAAI,OAAO,GAAG,IAAA,uBAAkB,EAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,SAAS,CAAC;IACxE,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,yEAAyE;QACzE,yDAAyD;QACzD,OAAO,GAAG,SAAS,CAAC;QACpB,MAAM,OAAO,CAAC,OAAO,EAAE;aACpB,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;aAChC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,IAAI,yBAAoB,CAAC;QAC9B,OAAO;QACP,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO;QACP,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,2EAA2E;QAC3E,2EAA2E;QAC3E,2EAA2E;QAC3E,OAAO,EAAE,CAAC,OAAsB,EAAE,EAAE;YAClC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC;gBAAE,OAAO;YACrC,KAAK,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAA,2BAAsB,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAC3E,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,qDAAqD;AAC9C,KAAK,UAAU,kBAAkB,CAAC,OAAmB;IAC1D,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;AAC7B,CAAC;AAED,oCAKuB;AAJrB,0GAAA,oBAAoB,OAAA;AACpB,wGAAA,kBAAkB,OAAA;AAClB,0GAAA,oBAAoB,OAAA"}

package/dist/policies.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Policy acceptance (terms of service, privacy, any policy) for Capacitor.
+ *
+ * The native-session sign-in runs in the SYSTEM browser on Atlas's hosted pages,
+ * which already collect the acceptances (sign-up) and hold a sign-in until a
+ * newer version is accepted, so {@link AtlasCapacitor.signIn} needs nothing more.
+ * What the app's own WebView layer needs is:
+ *
+ *  - the policies for its own screens (a custom sign-up form): `policies()`
+ *    returns a `PolicyAcceptanceController`, and the DOM pieces re-exported below
+ *    (`mountPolicyConsent`, `mountPolicyClickwrap`, `mountPolicyAcceptStep`) draw
+ *    it;
+ *  - in-app re-acceptance for the signed-in user: `policyGate()` and
+ *    {@link mountPolicyGate}'s banner, which post `/v1/client/me/policies/accept`
+ *    with the session's bearer token.
+ *
+ * Everything is `@atlasauth/js`; this file only supplies a bearer-authenticated
+ * client (a Capacitor app has no cookie against the FAPI origin).
+ */
+import { FapiClient, PolicyAcceptanceController, PolicyGateController, type PolicyClasses, type PolicyT } from '@atlasauth/js';
+export interface PolicyApiConfig {
+    publishableKey: string;
+    frontendApi: string;
+    /** The headers an authenticated `/v1/client/me/*` call needs (bearer + pk); empty-bearer when signed out. */
+    authHeaders: () => Promise<Record<string, string>>;
+    fetchImpl?: typeof fetch;
+    /** The UI language, sent as `Accept-Language` and used to pick a translation. */
+    locale?: string;
+}
+/** What the Atlas handle exposes for policy acceptance. */
+export interface PolicyApi {
+    /** The bearer-authenticated Frontend API client (for `@atlasauth/js` helpers). */
+    readonly fapi: FapiClient;
+    /**
+     * Load the instance's policies (`GET /v1/client/policies`) into a controller
+     * for a sign-up form of your own. `signIn` keeps only the policies that also
+     * apply at sign-in.
+     */
+    policies(options?: {
+        combined?: boolean;
+        signIn?: boolean;
+        locale?: string;
+    }): Promise<PolicyAcceptanceController>;
+    /**
+     * The controller for an attempt the server holds at `needs_policy_acceptance`
+     * (an attempt view with `pending_policies`), with the content filled in.
+     */
+    pendingPolicies(attempt: {
+        pending_policies?: unknown;
+    } | null | undefined, options?: {
+        combined?: boolean;
+        locale?: string;
+    }): Promise<PolicyAcceptanceController>;
+    /**
+     * In-app re-acceptance for the signed-in user: `load()` the standing,
+     * `begin()` a controller for what needs accepting, `accept(controller)` to send it.
+     */
+    policyGate(locale?: string): PolicyGateController;
+}
+/** Build the policy API over a bearer-authenticated client. */
+export declare function createPolicyApi(config: PolicyApiConfig): PolicyApi;
+/** The English policy strings, with any `policy.*` overrides on top. */
+export declare function policyText(strings?: Record<string, string>): PolicyT;
+export interface MountPolicyGateOptions {
+    /** Override any `policy.*` string. */
+    strings?: Record<string, string>;
+    /** Extra class names per element. */
+    classes?: PolicyClasses;
+    /** Called after the user accepted and the server confirmed. */
+    onAccepted?(): void;
+}
+/**
+ * Mount the signed-in re-acceptance banner into `host`: it loads the user's
+ * standing from `gate`, shows a banner when a policy needs accepting (with the
+ * end of any grace window), and "Review and accept" opens the acceptance step
+ * and posts the result. Draws nothing when there is nothing to accept. Call it
+ * only for a signed-in user; `ready` resolves once the standing has loaded.
+ */
+export declare function mountPolicyGate(host: HTMLElement, gate: PolicyGateController, options?: MountPolicyGateOptions): {
+    destroy(): void;
+    ready: Promise<void>;
+};
+export { PolicyAcceptanceController, PolicyGateController, buildPolicyAcceptances, injectPolicyStyles, isPolicyAcceptanceRequired, mountPolicyAcceptStep, mountPolicyClickwrap, mountPolicyConsent, runScrollPolicies, type Policy, type PolicyAcceptancePayload, } from '@atlasauth/js';

package/dist/policies.js

@@ -0,0 +1,159 @@
+"use strict";
+/**
+ * Policy acceptance (terms of service, privacy, any policy) for Capacitor.
+ *
+ * The native-session sign-in runs in the SYSTEM browser on Atlas's hosted pages,
+ * which already collect the acceptances (sign-up) and hold a sign-in until a
+ * newer version is accepted, so {@link AtlasCapacitor.signIn} needs nothing more.
+ * What the app's own WebView layer needs is:
+ *
+ *  - the policies for its own screens (a custom sign-up form): `policies()`
+ *    returns a `PolicyAcceptanceController`, and the DOM pieces re-exported below
+ *    (`mountPolicyConsent`, `mountPolicyClickwrap`, `mountPolicyAcceptStep`) draw
+ *    it;
+ *  - in-app re-acceptance for the signed-in user: `policyGate()` and
+ *    {@link mountPolicyGate}'s banner, which post `/v1/client/me/policies/accept`
+ *    with the session's bearer token.
+ *
+ * Everything is `@atlasauth/js`; this file only supplies a bearer-authenticated
+ * client (a Capacitor app has no cookie against the FAPI origin).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runScrollPolicies = exports.mountPolicyConsent = exports.mountPolicyClickwrap = exports.mountPolicyAcceptStep = exports.isPolicyAcceptanceRequired = exports.injectPolicyStyles = exports.buildPolicyAcceptances = exports.PolicyGateController = exports.PolicyAcceptanceController = void 0;
+exports.createPolicyApi = createPolicyApi;
+exports.policyText = policyText;
+exports.mountPolicyGate = mountPolicyGate;
+const js_1 = require("@atlasauth/js");
+/** Build the policy API over a bearer-authenticated client. */
+function createPolicyApi(config) {
+    const doFetch = config.fetchImpl ?? ((input, init) => fetch(input, init));
+    const fapi = new js_1.FapiClient({
+        publishableKey: config.publishableKey,
+        baseUrl: config.frontendApi,
+        locale: config.locale,
+        fetchImpl: async (input, init) => {
+            const headers = new Headers(init?.headers);
+            for (const [k, v] of Object.entries(await config.authHeaders()))
+                if (!headers.has(k))
+                    headers.set(k, v);
+            return doFetch(input, { ...init, headers });
+        },
+    });
+    return {
+        fapi,
+        async policies(options = {}) {
+            const controller = new js_1.PolicyAcceptanceController([], { combined: options.combined });
+            controller.setPolicies(await (0, js_1.loadPolicies)(fapi, { locale: options.locale ?? config.locale, signIn: options.signIn }));
+            return controller;
+        },
+        pendingPolicies: (attempt, options = {}) => (0, js_1.controllerForPending)(fapi, attempt, { combined: options.combined, locale: options.locale ?? config.locale }),
+        policyGate: (locale) => new js_1.PolicyGateController(fapi, locale ?? config.locale),
+    };
+}
+/** The English policy strings, with any `policy.*` overrides on top. */
+function policyText(strings) {
+    return (0, js_1.policyTranslator)((key, vars) => {
+        const template = strings?.[key];
+        return template ? template.replace(/\{(\w+)\}/g, (m, n) => vars?.[n] ?? m) : '';
+    });
+}
+/**
+ * Mount the signed-in re-acceptance banner into `host`: it loads the user's
+ * standing from `gate`, shows a banner when a policy needs accepting (with the
+ * end of any grace window), and "Review and accept" opens the acceptance step
+ * and posts the result. Draws nothing when there is nothing to accept. Call it
+ * only for a signed-in user; `ready` resolves once the standing has loaded.
+ */
+function mountPolicyGate(host, gate, options = {}) {
+    const doc = host.ownerDocument;
+    const t = policyText(options.strings);
+    let step = null;
+    let open = false;
+    let alive = true;
+    (0, js_1.injectPolicyStyles)(doc);
+    const showError = (message) => {
+        const p = doc.createElement('p');
+        p.setAttribute('role', 'alert');
+        p.textContent = message;
+        host.append(p);
+    };
+    const draw = () => {
+        if (!alive || open)
+            return;
+        host.textContent = '';
+        host.setAttribute('data-atlas-policy-gate', '');
+        if (gate.pending.length === 0)
+            return;
+        const banner = doc.createElement('div');
+        banner.className = 'atlas-policy-banner';
+        banner.setAttribute('role', 'status');
+        banner.setAttribute('data-atlas-policy-banner', '');
+        const text = doc.createElement('span');
+        const strong = doc.createElement('strong');
+        strong.textContent = `${t('policy.bannerTitle')}. `;
+        text.append(strong, t('policy.bannerBody', { policies: (0, js_1.joinTitles)(gate.pending.map((p) => p.title), t('policy.and')) }));
+        if (gate.graceEndsAt)
+            text.append(` ${t('policy.bannerGrace', { date: (0, js_1.formatPolicyDate)(gate.graceEndsAt) })}`);
+        const button = doc.createElement('button');
+        button.type = 'button';
+        button.className = ['atlas-policy-link', options.classes?.link].filter(Boolean).join(' ');
+        button.textContent = t('policy.bannerReview');
+        button.addEventListener('click', () => void begin());
+        banner.append(text, button);
+        host.append(banner);
+    };
+    const close = () => {
+        step?.destroy();
+        step = null;
+        open = false;
+        draw();
+    };
+    const begin = async () => {
+        const controller = await gate.begin();
+        if (!alive)
+            return;
+        open = true;
+        host.textContent = '';
+        const stepHost = doc.createElement('div');
+        host.append(stepHost);
+        step = (0, js_1.mountPolicyAcceptStep)(stepHost, controller, {
+            t,
+            classes: options.classes,
+            onSubmit: async () => {
+                step?.setBusy(true);
+                const res = await gate.accept(controller);
+                step?.setBusy(false);
+                if (!res.ok) {
+                    showError(res.errors[0]?.message ?? t('policy.requiredGeneric'));
+                    return;
+                }
+                close();
+                options.onAccepted?.();
+            },
+            onDecline: close,
+        });
+    };
+    const off = gate.subscribe(draw);
+    const ready = gate.load().then(draw, draw);
+    return {
+        ready,
+        destroy() {
+            alive = false;
+            off();
+            step?.destroy();
+            host.textContent = '';
+        },
+    };
+}
+// The DOM pieces and helpers a WebView screen draws with (all from `@atlasauth/js`).
+var js_2 = require("@atlasauth/js");
+Object.defineProperty(exports, "PolicyAcceptanceController", { enumerable: true, get: function () { return js_2.PolicyAcceptanceController; } });
+Object.defineProperty(exports, "PolicyGateController", { enumerable: true, get: function () { return js_2.PolicyGateController; } });
+Object.defineProperty(exports, "buildPolicyAcceptances", { enumerable: true, get: function () { return js_2.buildPolicyAcceptances; } });
+Object.defineProperty(exports, "injectPolicyStyles", { enumerable: true, get: function () { return js_2.injectPolicyStyles; } });
+Object.defineProperty(exports, "isPolicyAcceptanceRequired", { enumerable: true, get: function () { return js_2.isPolicyAcceptanceRequired; } });
+Object.defineProperty(exports, "mountPolicyAcceptStep", { enumerable: true, get: function () { return js_2.mountPolicyAcceptStep; } });
+Object.defineProperty(exports, "mountPolicyClickwrap", { enumerable: true, get: function () { return js_2.mountPolicyClickwrap; } });
+Object.defineProperty(exports, "mountPolicyConsent", { enumerable: true, get: function () { return js_2.mountPolicyConsent; } });
+Object.defineProperty(exports, "runScrollPolicies", { enumerable: true, get: function () { return js_2.runScrollPolicies; } });
+//# sourceMappingURL=policies.js.map

package/dist/policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.js","sourceRoot":"","sources":["../src/policies.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AAqDH,0CAuBC;AAGD,gCAKC;AAkBD,0CAqFC;AAzLD,sCAauB;AAqCvB,+DAA+D;AAC/D,SAAgB,eAAe,CAAC,MAAuB;IACrD,MAAM,OAAO,GAAiB,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACxF,MAAM,IAAI,GAAG,IAAI,eAAU,CAAC;QAC1B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,OAAO,EAAE,MAAM,CAAC,WAAW;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC/B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACxG,OAAO,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9C,CAAC;KACF,CAAC,CAAC;IACH,OAAO;QACL,IAAI;QACJ,KAAK,CAAC,QAAQ,CAAC,OAAO,GAAG,EAAE;YACzB,MAAM,UAAU,GAAG,IAAI,+BAA0B,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtF,UAAU,CAAC,WAAW,CAAC,MAAM,IAAA,iBAAY,EAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACtH,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,eAAe,EAAE,CAAC,OAAO,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE,CACzC,IAAA,yBAAoB,EAAC,IAAI,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAC9G,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,yBAAoB,CAAC,IAAI,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;KAChF,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,SAAgB,UAAU,CAAC,OAAgC;IACzD,OAAO,IAAA,qBAAgB,EAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;QACpC,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,CAAC,CAAC,CAAC;AACL,CAAC;AAWD;;;;;;GAMG;AACH,SAAgB,eAAe,CAC7B,IAAiB,EACjB,IAA0B,EAC1B,UAAkC,EAAE;IAEpC,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,CAAC;IAC/B,MAAM,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,IAAI,GAAoD,IAAI,CAAC;IACjE,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,IAAA,uBAAkB,EAAC,GAAG,CAAC,CAAC;IAExB,MAAM,SAAS,GAAG,CAAC,OAAe,EAAE,EAAE;QACpC,MAAM,CAAC,GAAG,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,CAAC,CAAC,WAAW,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,CAAC,KAAK,IAAI,IAAI;YAAE,OAAO;QAC3B,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,YAAY,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACtC,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,SAAS,GAAG,qBAAqB,CAAC;QACzC,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtC,MAAM,CAAC,YAAY,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,IAAA,eAAU,EAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACzH,IAAI,IAAI,CAAC,WAAW;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,EAAE,IAAI,EAAE,IAAA,qBAAgB,EAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/G,MAAM,MAAM,GAAG,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC;QACvB,MAAM,CAAC,SAAS,GAAG,CAAC,mBAAmB,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1F,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAC9C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,EAAE,OAAO,EAAE,CAAC;QAChB,IAAI,GAAG,IAAI,CAAC;QACZ,IAAI,GAAG,KAAK,CAAC;QACb,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,GAAG,IAAI,CAAC;QACZ,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtB,IAAI,GAAG,IAAA,0BAAqB,EAAC,QAAQ,EAAE,UAAU,EAAE;YACjD,CAAC;YACD,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,KAAK,IAAI,EAAE;gBACnB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBACpB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC1C,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;gBACrB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;oBACZ,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC;oBACjE,OAAO;gBACT,CAAC;gBACD,KAAK,EAAE,CAAC;gBACR,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;YACzB,CAAC;YACD,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3C,OAAO;QACL,KAAK;QACL,OAAO;YACL,KAAK,GAAG,KAAK,CAAC;YACd,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,OAAO,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,oCAYuB;AAXrB,gHAAA,0BAA0B,OAAA;AAC1B,0GAAA,oBAAoB,OAAA;AACpB,4GAAA,sBAAsB,OAAA;AACtB,wGAAA,kBAAkB,OAAA;AAClB,gHAAA,0BAA0B,OAAA;AAC1B,2GAAA,qBAAqB,OAAA;AACrB,0GAAA,oBAAoB,OAAA;AACpB,wGAAA,kBAAkB,OAAA;AAClB,uGAAA,iBAAiB,OAAA"}

package/dist/token-store.d.ts

@@ -20,6 +20,7 @@
  * `capacitor-secure-storage-plugin` — behind this same {@link TokenStore}
  * interface. See {@link createPreferencesTokenStore} for the drop-in shape.
  */
+import type { TombstoneStore } from '@atlasauth/js';
 import type { PreferencesPlugin } from './plugins';
 /**
  * A single-slot token store: read, write, clear one string value. This is the
@@ -61,3 +62,16 @@ export declare function createPreferencesTokenStore(preferences: PreferencesPlug
  * adapter) in production.
  */
 export declare function createInMemoryTokenStore(): TokenStore;
+/**
+ * A {@link TombstoneStore} over `@capacitor/preferences` — where the ids of the
+ * sessions this app signed out of are kept, so a restart never re-adopts one
+ * (see `SignOutGuard` in `@atlasauth/js`). The default when the plugin is
+ * present. Tombstones are session ids, never credentials, so plaintext is fine.
+ */
+export declare function createPreferencesTombstoneStore(preferences: PreferencesPlugin): TombstoneStore;
+/**
+ * Adapt a single-slot {@link TokenStore} (e.g. a secure-storage-backed one) to
+ * a {@link TombstoneStore}. Give it its OWN slot — never the session's: the
+ * key `SignOutGuard` asks for is ignored, every read and write hits that slot.
+ */
+export declare function tombstoneStoreFromTokenStore(store: TokenStore): TombstoneStore;

package/dist/token-store.js

@@ -25,6 +25,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.DEFAULT_SESSION_KEY = void 0;
 exports.createPreferencesTokenStore = createPreferencesTokenStore;
 exports.createInMemoryTokenStore = createInMemoryTokenStore;
+exports.createPreferencesTombstoneStore = createPreferencesTombstoneStore;
+exports.tombstoneStoreFromTokenStore = tombstoneStoreFromTokenStore;
 /** The default key the serialized native session is stored under. */
 exports.DEFAULT_SESSION_KEY = 'atlas.native_session';
 /**
@@ -67,4 +69,27 @@ function createInMemoryTokenStore() {
         },
     };
 }
+/**
+ * A {@link TombstoneStore} over `@capacitor/preferences` — where the ids of the
+ * sessions this app signed out of are kept, so a restart never re-adopts one
+ * (see `SignOutGuard` in `@atlasauth/js`). The default when the plugin is
+ * present. Tombstones are session ids, never credentials, so plaintext is fine.
+ */
+function createPreferencesTombstoneStore(preferences) {
+    return {
+        getItem: async (key) => (await preferences.get({ key })).value ?? null,
+        setItem: (key, value) => preferences.set({ key, value }),
+    };
+}
+/**
+ * Adapt a single-slot {@link TokenStore} (e.g. a secure-storage-backed one) to
+ * a {@link TombstoneStore}. Give it its OWN slot — never the session's: the
+ * key `SignOutGuard` asks for is ignored, every read and write hits that slot.
+ */
+function tombstoneStoreFromTokenStore(store) {
+    return {
+        getItem: () => store.getToken(),
+        setItem: (_key, value) => store.setToken(value),
+    };
+}
 //# sourceMappingURL=token-store.js.map

package/dist/token-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"token-store.js","sourceRoot":"","sources":["../src/token-store.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;AAsCH,kEASC;AAQD,4DAWC;AA9CD,qEAAqE;AACxD,QAAA,mBAAmB,GAAG,sBAAsB,CAAC;AAE1D;;;;;;;;;;;;;;GAcG;AACH,SAAgB,2BAA2B,CACzC,WAA8B,EAC9B,MAAc,2BAAmB;IAEjC,OAAO;QACL,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI;QACpE,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACpD,UAAU,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB;IACtC,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;QACrB,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE;YACzB,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,UAAU,EAAE,GAAG,EAAE;YACf,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"token-store.js","sourceRoot":"","sources":["../src/token-store.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;AAuCH,kEASC;AAQD,4DAWC;AAQD,0EAKC;AAOD,oEAKC;AAvED,qEAAqE;AACxD,QAAA,mBAAmB,GAAG,sBAAsB,CAAC;AAE1D;;;;;;;;;;;;;;GAcG;AACH,SAAgB,2BAA2B,CACzC,WAA8B,EAC9B,MAAc,2BAAmB;IAEjC,OAAO;QACL,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI;QACpE,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACpD,UAAU,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,wBAAwB;IACtC,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK;QACrB,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE;YACzB,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,UAAU,EAAE,GAAG,EAAE;YACf,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,+BAA+B,CAAC,WAA8B;IAC5E,OAAO;QACL,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI;QACtE,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;KACzD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,4BAA4B,CAAC,KAAiB;IAC5D,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE;QAC/B,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;KAChD,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlasauth/capacitor",
-  "version": "0.1.1",
+  "version": "0.3.0",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
@@ -11,7 +11,7 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@atlasauth/js": "0.6.0"
+    "@atlasauth/js": "0.19.0"
   },
   "peerDependencies": {
     "@capacitor/core": ">=6",