@atlasauth/msw 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `@atlasauth/msw` — Mock Service Worker (v2) request handlers that mock Atlas's
+ * Frontend API (FAPI) and Backend API (BAPI), so an integrator can test their
+ * Atlas integration against realistic, shape-correct responses without a live
+ * server. The MSW peer of `@atlasauth/testing`.
+ *
+ * ```ts
+ * import { setupServer } from 'msw/node';
+ * import { atlasHandlers, createAtlasMock } from '@atlasauth/msw';
+ *
+ * const mock = createAtlasMock({ users: [{ email: 'ada@example.com', password: 'pw' }] });
+ * const server = setupServer(...atlasHandlers(mock));
+ * ```
+ */
+export { atlasHandlers, type AtlasHandlersOptions } from './handlers';
+export { createAtlasMock, AtlasMock, IdFactory, ID_PREFIXES, type AtlasMockSeed, type SeedUser, type SeedOrganization, type EntityKind, type MockInstance, type MockUser, type MockEmail, type MockOrganization, type MockMembership, type MockSession, type MockAttempt, type MockSocialProvider, } from './state';
+export { errorBody, listEnvelope, presentUser, presentMeUser, presentMembership, presentOrganization, presentSession, presentSignInAttempt, presentSignUpAttempt, } from './serializers';

package/dist/index.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.presentSignUpAttempt = exports.presentSignInAttempt = exports.presentSession = exports.presentOrganization = exports.presentMembership = exports.presentMeUser = exports.presentUser = exports.listEnvelope = exports.errorBody = exports.ID_PREFIXES = exports.IdFactory = exports.AtlasMock = exports.createAtlasMock = exports.atlasHandlers = void 0;
+/**
+ * `@atlasauth/msw` — Mock Service Worker (v2) request handlers that mock Atlas's
+ * Frontend API (FAPI) and Backend API (BAPI), so an integrator can test their
+ * Atlas integration against realistic, shape-correct responses without a live
+ * server. The MSW peer of `@atlasauth/testing`.
+ *
+ * ```ts
+ * import { setupServer } from 'msw/node';
+ * import { atlasHandlers, createAtlasMock } from '@atlasauth/msw';
+ *
+ * const mock = createAtlasMock({ users: [{ email: 'ada@example.com', password: 'pw' }] });
+ * const server = setupServer(...atlasHandlers(mock));
+ * ```
+ */
+var handlers_1 = require("./handlers");
+Object.defineProperty(exports, "atlasHandlers", { enumerable: true, get: function () { return handlers_1.atlasHandlers; } });
+var state_1 = require("./state");
+Object.defineProperty(exports, "createAtlasMock", { enumerable: true, get: function () { return state_1.createAtlasMock; } });
+Object.defineProperty(exports, "AtlasMock", { enumerable: true, get: function () { return state_1.AtlasMock; } });
+Object.defineProperty(exports, "IdFactory", { enumerable: true, get: function () { return state_1.IdFactory; } });
+Object.defineProperty(exports, "ID_PREFIXES", { enumerable: true, get: function () { return state_1.ID_PREFIXES; } });
+var serializers_1 = require("./serializers");
+Object.defineProperty(exports, "errorBody", { enumerable: true, get: function () { return serializers_1.errorBody; } });
+Object.defineProperty(exports, "listEnvelope", { enumerable: true, get: function () { return serializers_1.listEnvelope; } });
+Object.defineProperty(exports, "presentUser", { enumerable: true, get: function () { return serializers_1.presentUser; } });
+Object.defineProperty(exports, "presentMeUser", { enumerable: true, get: function () { return serializers_1.presentMeUser; } });
+Object.defineProperty(exports, "presentMembership", { enumerable: true, get: function () { return serializers_1.presentMembership; } });
+Object.defineProperty(exports, "presentOrganization", { enumerable: true, get: function () { return serializers_1.presentOrganization; } });
+Object.defineProperty(exports, "presentSession", { enumerable: true, get: function () { return serializers_1.presentSession; } });
+Object.defineProperty(exports, "presentSignInAttempt", { enumerable: true, get: function () { return serializers_1.presentSignInAttempt; } });
+Object.defineProperty(exports, "presentSignUpAttempt", { enumerable: true, get: function () { return serializers_1.presentSignUpAttempt; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;GAaG;AACH,uCAAsE;AAA7D,yGAAA,aAAa,OAAA;AACtB,iCAiBiB;AAhBf,wGAAA,eAAe,OAAA;AACf,kGAAA,SAAS,OAAA;AACT,kGAAA,SAAS,OAAA;AACT,oGAAA,WAAW,OAAA;AAcb,6CAUuB;AATrB,wGAAA,SAAS,OAAA;AACT,2GAAA,YAAY,OAAA;AACZ,0GAAA,WAAW,OAAA;AACX,4GAAA,aAAa,OAAA;AACb,gHAAA,iBAAiB,OAAA;AACjB,kHAAA,mBAAmB,OAAA;AACnB,6GAAA,cAAc,OAAA;AACd,mHAAA,oBAAoB,OAAA;AACpB,mHAAA,oBAAoB,OAAA"}

package/dist/serializers.d.ts

@@ -0,0 +1,156 @@
+/**
+ * Serialisers that turn the mock store's internal objects into the exact wire
+ * shapes Atlas's FAPI and BAPI return. Kept in one place, mirroring the API's
+ * own per-resource `present()` closures, so a shape change is a one-line edit.
+ *
+ * Verbatim references (so the shapes do not drift from the server):
+ *   - BAPI user         → apps/api/src/routes/users/context.ts `present`
+ *   - FAPI `me` user     → apps/api/src/routes/me/profile.ts `present` (+ extras)
+ *   - BAPI organization → apps/api/src/routes/organizations/context.ts `present`
+ *   - BAPI session       → apps/api/src/routes/bapi-sessions.ts `present`
+ *   - sign_in_attempt    → apps/api/src/modules/signin/signin.service.ts `view`
+ *   - sign_up_attempt    → apps/api/src/modules/signup/signup.types.ts `toAttemptView`
+ *   - environment        → apps/api/src/routes/fapi-oauth/environment.ts
+ */
+import type { AtlasMock, MockAttempt, MockOrganization, MockSession, MockUser } from './state';
+/** The §9.1 error envelope: `{ errors: [{ code, message, param?, meta?, docs_url }] }`. */
+export declare function errorBody(code: string, message: string, param?: string, meta?: Record<string, unknown>): {
+    errors: Array<Record<string, unknown>>;
+};
+/** BAPI user — `private_metadata` is never serialised (§4.2). */
+export declare function presentUser(user: MockUser): {
+    object: "user";
+    id: string;
+    username: string | null;
+    first_name: string | null;
+    last_name: string | null;
+    image_url: string | null;
+    email_addresses: {
+        id: string;
+        object: "email_address";
+        email_address: string;
+        verification: {
+            status: string;
+        };
+        verified: boolean;
+        primary: boolean;
+    }[];
+    primary_email_address_id: string | null;
+    primary_email: string | null;
+    external_id: string | null;
+    password_enabled: boolean;
+    public_metadata: Record<string, unknown>;
+    mfa_enabled: boolean;
+    is_anonymous: boolean;
+    banned: boolean;
+    ban_reason: null;
+    ban_note: null;
+    locked: boolean;
+    deleted_at: number | null;
+    last_sign_in_at: number | null;
+    created_at: number;
+    updated_at: number;
+};
+/** FAPI `/v1/client/me` user — carries `unsafe_metadata` + connections, never `private_metadata`. */
+export declare function presentMeUser(mock: AtlasMock, user: MockUser): {
+    object: "user";
+    id: string;
+    first_name: string | null;
+    last_name: string | null;
+    username: string | null;
+    image_url: string | null;
+    locale: string | null;
+    public_metadata: Record<string, unknown>;
+    unsafe_metadata: Record<string, unknown>;
+    mfa_enabled: boolean;
+    has_password: boolean;
+    is_anonymous: boolean;
+    created_at: number;
+    primary_email_id: string | null;
+    email_addresses: {
+        object: "email_address";
+        id: string;
+        email_address: string;
+        verified: boolean;
+        primary: boolean;
+    }[];
+    external_accounts: unknown[];
+    passkeys: unknown[];
+    organization_memberships: {
+        object: "organization_membership";
+        role: string;
+        organization: {
+            object: "organization";
+            id: string;
+            name: string;
+            slug: string | null;
+            image_url: string | null;
+            public_metadata: Record<string, unknown>;
+        } | null;
+    }[];
+};
+/** The `organization_membership` shape used in the client boot + me. */
+export declare function presentMembership(mock: AtlasMock, organizationId: string, role: string): {
+    object: "organization_membership";
+    role: string;
+    organization: {
+        object: "organization";
+        id: string;
+        name: string;
+        slug: string | null;
+        image_url: string | null;
+        public_metadata: Record<string, unknown>;
+    } | null;
+};
+/** BAPI organization — `private_metadata` is never serialised (§4.4). */
+export declare function presentOrganization(org: MockOrganization): {
+    object: "organization";
+    id: string;
+    name: string;
+    slug: string | null;
+    image_url: string | null;
+    parent_organization_id: string | null;
+    public_metadata: Record<string, unknown>;
+    max_allowed_memberships: number | null;
+    created_by: string | null;
+    created_at: number;
+    updated_at: number;
+};
+/** BAPI session (operator view). */
+export declare function presentSession(session: MockSession): {
+    object: "session";
+    id: string;
+    user_id: string;
+    status: "active" | "revoked" | "ended";
+    last_active_organization_id: string | null;
+    impersonated_by: string | null;
+    last_active_at: number;
+    expire_at: number;
+    abandon_at: number;
+    created_at: number;
+};
+/** A sign_in_attempt view. `supported_first_factors` is always the instance's list. */
+export declare function presentSignInAttempt(mock: AtlasMock, attempt: MockAttempt): {
+    id: string;
+    object: "sign_in_attempt";
+    status: "needs_identifier" | "needs_first_factor" | "needs_second_factor" | "needs_email_verification" | "complete" | "abandoned";
+    identifier: string | null;
+    supported_first_factors: string[];
+    created_session_id: string | null;
+    expires_at: number;
+};
+/** A sign_up_attempt view. */
+export declare function presentSignUpAttempt(attempt: MockAttempt): {
+    id: string;
+    object: "sign_up_attempt";
+    status: "needs_identifier" | "needs_first_factor" | "needs_second_factor" | "needs_email_verification" | "complete" | "abandoned";
+    identifier: string | null;
+    created_session_id: string | null;
+    expires_at: number;
+};
+/** The cursor-paginated list envelope (§9.1): `{ data, has_more, next_cursor }`. */
+export declare function listEnvelope<T>(data: T[], hasMore: boolean, nextCursor: string | null): {
+    data: T[];
+    has_more: boolean;
+    next_cursor: string | null;
+};

package/dist/serializers.js

@@ -0,0 +1,162 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.errorBody = errorBody;
+exports.presentUser = presentUser;
+exports.presentMeUser = presentMeUser;
+exports.presentMembership = presentMembership;
+exports.presentOrganization = presentOrganization;
+exports.presentSession = presentSession;
+exports.presentSignInAttempt = presentSignInAttempt;
+exports.presentSignUpAttempt = presentSignUpAttempt;
+exports.listEnvelope = listEnvelope;
+/** The §9.1 error envelope: `{ errors: [{ code, message, param?, meta?, docs_url }] }`. */
+function errorBody(code, message, param, meta) {
+    const item = { code, message };
+    if (param !== undefined)
+        item.param = param;
+    if (meta !== undefined)
+        item.meta = meta;
+    item.docs_url = `https://atlasauth.net/docs/errors/${code.toLowerCase()}`;
+    return { errors: [item] };
+}
+/** BAPI user — `private_metadata` is never serialised (§4.2). */
+function presentUser(user) {
+    return {
+        object: 'user',
+        id: user.id,
+        username: user.username,
+        first_name: user.firstName,
+        last_name: user.lastName,
+        image_url: user.imageUrl,
+        email_addresses: user.emails.map((e) => ({
+            id: e.id,
+            object: 'email_address',
+            email_address: e.email,
+            verification: { status: e.verified ? 'verified' : 'unverified' },
+            verified: e.verified,
+            primary: e.id === user.primaryEmailId,
+        })),
+        primary_email_address_id: user.primaryEmailId,
+        primary_email: user.emails.find((e) => e.id === user.primaryEmailId)?.email ?? null,
+        external_id: user.externalId,
+        password_enabled: user.password != null,
+        public_metadata: user.publicMetadata,
+        mfa_enabled: user.mfaEnabled,
+        is_anonymous: user.isAnonymous,
+        banned: user.banned,
+        ban_reason: null,
+        ban_note: null,
+        locked: false,
+        deleted_at: user.deletedAt,
+        last_sign_in_at: user.lastSignInAt,
+        created_at: user.createdAt,
+        updated_at: user.updatedAt,
+    };
+}
+/** FAPI `/v1/client/me` user — carries `unsafe_metadata` + connections, never `private_metadata`. */
+function presentMeUser(mock, user) {
+    const memberships = mock.memberships.filter((m) => m.userId === user.id);
+    return {
+        object: 'user',
+        id: user.id,
+        first_name: user.firstName,
+        last_name: user.lastName,
+        username: user.username,
+        image_url: user.imageUrl,
+        locale: user.locale,
+        public_metadata: user.publicMetadata,
+        unsafe_metadata: user.unsafeMetadata,
+        mfa_enabled: user.mfaEnabled,
+        has_password: user.password !== null,
+        is_anonymous: user.isAnonymous,
+        created_at: user.createdAt,
+        primary_email_id: user.primaryEmailId,
+        email_addresses: user.emails.map((e) => ({
+            object: 'email_address',
+            id: e.id,
+            email_address: e.email,
+            verified: e.verified,
+            primary: e.id === user.primaryEmailId,
+        })),
+        external_accounts: [],
+        passkeys: [],
+        organization_memberships: memberships.map((m) => presentMembership(mock, m.organizationId, m.role)),
+    };
+}
+/** The `organization_membership` shape used in the client boot + me. */
+function presentMembership(mock, organizationId, role) {
+    const org = mock.findOrganization(organizationId);
+    return {
+        object: 'organization_membership',
+        role,
+        organization: org
+            ? {
+                object: 'organization',
+                id: org.id,
+                name: org.name,
+                slug: org.slug,
+                image_url: org.imageUrl,
+                public_metadata: org.publicMetadata,
+            }
+            : null,
+    };
+}
+/** BAPI organization — `private_metadata` is never serialised (§4.4). */
+function presentOrganization(org) {
+    return {
+        object: 'organization',
+        id: org.id,
+        name: org.name,
+        slug: org.slug,
+        image_url: org.imageUrl,
+        parent_organization_id: org.parentOrganizationId,
+        public_metadata: org.publicMetadata,
+        max_allowed_memberships: org.maxAllowedMemberships,
+        created_by: org.createdBy,
+        created_at: org.createdAt,
+        updated_at: org.updatedAt,
+    };
+}
+/** BAPI session (operator view). */
+function presentSession(session) {
+    return {
+        object: 'session',
+        id: session.id,
+        user_id: session.userId,
+        status: session.status,
+        last_active_organization_id: session.activeOrganizationId,
+        impersonated_by: session.impersonatedBy,
+        last_active_at: session.lastActiveAt,
+        expire_at: session.expiresAt,
+        abandon_at: session.idleExpiresAt,
+        created_at: session.createdAt,
+    };
+}
+/** A sign_in_attempt view. `supported_first_factors` is always the instance's list. */
+function presentSignInAttempt(mock, attempt) {
+    return {
+        id: attempt.id,
+        object: 'sign_in_attempt',
+        status: attempt.status,
+        identifier: attempt.identifier,
+        supported_first_factors: mock.instance.firstFactors,
+        created_session_id: attempt.sessionId,
+        expires_at: attempt.expiresAt,
+    };
+}
+/** A sign_up_attempt view. */
+function presentSignUpAttempt(attempt) {
+    return {
+        id: attempt.id,
+        object: 'sign_up_attempt',
+        status: attempt.status,
+        identifier: attempt.identifier,
+        created_session_id: attempt.sessionId,
+        expires_at: attempt.expiresAt,
+    };
+}
+/** The cursor-paginated list envelope (§9.1): `{ data, has_more, next_cursor }`. */
+function listEnvelope(data, hasMore, nextCursor) {
+    return { data, has_more: hasMore, next_cursor: nextCursor };
+}
+//# sourceMappingURL=serializers.js.map

package/dist/serializers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serializers.js","sourceRoot":"","sources":["../src/serializers.ts"],"names":[],"mappings":";;AAuBA,8BAWC;AAGD,kCAgCC;AAGD,sCA4BC;AAGD,8CAgBC;AAGD,kDAcC;AAGD,wCAaC;AAGD,oDAUC;AAGD,oDASC;AAGD,oCAEC;AAhKD,2FAA2F;AAC3F,SAAgB,SAAS,CACvB,IAAY,EACZ,OAAe,EACf,KAAc,EACd,IAA8B;IAE9B,MAAM,IAAI,GAA4B,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACxD,IAAI,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAC5C,IAAI,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACzC,IAAI,CAAC,QAAQ,GAAG,qCAAqC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;IAC1E,OAAO,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;AAC5B,CAAC;AAED,iEAAiE;AACjE,SAAgB,WAAW,CAAC,IAAc;IACxC,OAAO;QACL,MAAM,EAAE,MAAe;QACvB,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,SAAS,EAAE,IAAI,CAAC,QAAQ;QACxB,SAAS,EAAE,IAAI,CAAC,QAAQ;QACxB,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,MAAM,EAAE,eAAwB;YAChC,aAAa,EAAE,CAAC,CAAC,KAAK;YACtB,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE;YAChE,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,OAAO,EAAE,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,cAAc;SACtC,CAAC,CAAC;QACH,wBAAwB,EAAE,IAAI,CAAC,cAAc;QAC7C,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,cAAc,CAAC,EAAE,KAAK,IAAI,IAAI;QACnF,WAAW,EAAE,IAAI,CAAC,UAAU;QAC5B,gBAAgB,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;QACvC,eAAe,EAAE,IAAI,CAAC,cAAc;QACpC,WAAW,EAAE,IAAI,CAAC,UAAU;QAC5B,YAAY,EAAE,IAAI,CAAC,WAAW;QAC9B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,KAAK;QACb,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,eAAe,EAAE,IAAI,CAAC,YAAY;QAClC,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,UAAU,EAAE,IAAI,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC;AAED,qGAAqG;AACrG,SAAgB,aAAa,CAAC,IAAe,EAAE,IAAc;IAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;IACzE,OAAO;QACL,MAAM,EAAE,MAAe;QACvB,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,SAAS,EAAE,IAAI,CAAC,QAAQ;QACxB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,SAAS,EAAE,IAAI,CAAC,QAAQ;QACxB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,eAAe,EAAE,IAAI,CAAC,cAAc;QACpC,eAAe,EAAE,IAAI,CAAC,cAAc;QACpC,WAAW,EAAE,IAAI,CAAC,UAAU;QAC5B,YAAY,EAAE,IAAI,CAAC,QAAQ,KAAK,IAAI;QACpC,YAAY,EAAE,IAAI,CAAC,WAAW;QAC9B,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,gBAAgB,EAAE,IAAI,CAAC,cAAc;QACrC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvC,MAAM,EAAE,eAAwB;YAChC,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,aAAa,EAAE,CAAC,CAAC,KAAK;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,OAAO,EAAE,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,cAAc;SACtC,CAAC,CAAC;QACH,iBAAiB,EAAE,EAAe;QAClC,QAAQ,EAAE,EAAe;QACzB,wBAAwB,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;KACpG,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,SAAgB,iBAAiB,CAAC,IAAe,EAAE,cAAsB,EAAE,IAAY;IACrF,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;IAClD,OAAO;QACL,MAAM,EAAE,yBAAkC;QAC1C,IAAI;QACJ,YAAY,EAAE,GAAG;YACf,CAAC,CAAC;gBACE,MAAM,EAAE,cAAuB;gBAC/B,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,SAAS,EAAE,GAAG,CAAC,QAAQ;gBACvB,eAAe,EAAE,GAAG,CAAC,cAAc;aACpC;YACH,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAgB,mBAAmB,CAAC,GAAqB;IACvD,OAAO;QACL,MAAM,EAAE,cAAuB;QAC/B,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,SAAS,EAAE,GAAG,CAAC,QAAQ;QACvB,sBAAsB,EAAE,GAAG,CAAC,oBAAoB;QAChD,eAAe,EAAE,GAAG,CAAC,cAAc;QACnC,uBAAuB,EAAE,GAAG,CAAC,qBAAqB;QAClD,UAAU,EAAE,GAAG,CAAC,SAAS;QACzB,UAAU,EAAE,GAAG,CAAC,SAAS;QACzB,UAAU,EAAE,GAAG,CAAC,SAAS;KAC1B,CAAC;AACJ,CAAC;AAED,oCAAoC;AACpC,SAAgB,cAAc,CAAC,OAAoB;IACjD,OAAO;QACL,MAAM,EAAE,SAAkB;QAC1B,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,OAAO,EAAE,OAAO,CAAC,MAAM;QACvB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,2BAA2B,EAAE,OAAO,CAAC,oBAAoB;QACzD,eAAe,EAAE,OAAO,CAAC,cAAc;QACvC,cAAc,EAAE,OAAO,CAAC,YAAY;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,OAAO,CAAC,aAAa;QACjC,UAAU,EAAE,OAAO,CAAC,SAAS;KAC9B,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,SAAgB,oBAAoB,CAAC,IAAe,EAAE,OAAoB;IACxE,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,MAAM,EAAE,iBAA0B;QAClC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,uBAAuB,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAY;QACnD,kBAAkB,EAAE,OAAO,CAAC,SAAS;QACrC,UAAU,EAAE,OAAO,CAAC,SAAS;KAC9B,CAAC;AACJ,CAAC;AAED,8BAA8B;AAC9B,SAAgB,oBAAoB,CAAC,OAAoB;IACvD,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,MAAM,EAAE,iBAA0B;QAClC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,kBAAkB,EAAE,OAAO,CAAC,SAAS;QACrC,UAAU,EAAE,OAAO,CAAC,SAAS;KAC9B,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAgB,YAAY,CAAI,IAAS,EAAE,OAAgB,EAAE,UAAyB;IACpF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AAC9D,CAAC"}

package/dist/state.d.ts

@@ -0,0 +1,242 @@
+/**
+ * The in-memory mock backend that {@link ../handlers} reads and mutates.
+ *
+ * `createAtlasMock(seed?)` returns a mutable store standing in for ONE Atlas
+ * instance: its environment config, users (with email addresses), organizations
+ * and memberships, live sign-in / sign-up attempts, and sessions. The handlers
+ * advance this store — a sign-in attempt really transitions across calls, a
+ * created user really appears in the next list — so a test drives the same state
+ * machine the real server runs, without a server.
+ *
+ * Everything is deterministic: ids come from a seedable per-prefix counter, so a
+ * test that seeds the same thing gets byte-identical ids every run.
+ */
+/** The Atlas entity kinds this mock mints ids for. Mirrors `@atlas/shared`'s prefixes. */
+export declare const ID_PREFIXES: {
+    readonly instance: "ins";
+    readonly user: "user";
+    readonly emailAddress: "eml";
+    readonly session: "sess";
+    readonly signInAttempt: "sia";
+    readonly signUpAttempt: "sia";
+    readonly organization: "org";
+    readonly organizationMembership: "orgmem";
+};
+export type EntityKind = keyof typeof ID_PREFIXES;
+/** A single email address on a user — the Clerk-compatible `email_address` shape. */
+export interface MockEmail {
+    id: string;
+    email: string;
+    verified: boolean;
+    primary: boolean;
+}
+/** A user in the mock store. Field names are internal; the handlers serialise them. */
+export interface MockUser {
+    id: string;
+    firstName: string | null;
+    lastName: string | null;
+    username: string | null;
+    imageUrl: string | null;
+    locale: string | null;
+    externalId: string | null;
+    /** The plaintext password the mock checks on a password sign-in (never serialised). */
+    password: string | null;
+    emails: MockEmail[];
+    primaryEmailId: string | null;
+    publicMetadata: Record<string, unknown>;
+    privateMetadata: Record<string, unknown>;
+    unsafeMetadata: Record<string, unknown>;
+    mfaEnabled: boolean;
+    isAnonymous: boolean;
+    banned: boolean;
+    deletedAt: number | null;
+    lastSignInAt: number | null;
+    createdAt: number;
+    updatedAt: number;
+}
+/** An organization in the mock store. */
+export interface MockOrganization {
+    id: string;
+    name: string;
+    slug: string | null;
+    imageUrl: string | null;
+    parentOrganizationId: string | null;
+    publicMetadata: Record<string, unknown>;
+    privateMetadata: Record<string, unknown>;
+    maxAllowedMemberships: number | null;
+    createdBy: string | null;
+    createdAt: number;
+    updatedAt: number;
+}
+/** A user's membership of an organization, with the role they hold in it. */
+export interface MockMembership {
+    id: string;
+    userId: string;
+    organizationId: string;
+    role: string;
+    createdAt: number;
+}
+/** A live session minted by a completed sign-in or a backend mint. */
+export interface MockSession {
+    id: string;
+    userId: string;
+    status: 'active' | 'revoked' | 'ended';
+    activeOrganizationId: string | null;
+    impersonatedBy: string | null;
+    /** The opaque bearer the mock hands back as `jwt` and accepts on `me`. */
+    jwt: string;
+    refreshToken: string;
+    lastActiveAt: number;
+    expiresAt: number;
+    idleExpiresAt: number;
+    createdAt: number;
+}
+/** A live sign-in or sign-up attempt, advanced across prepare/attempt calls. */
+export interface MockAttempt {
+    id: string;
+    kind: 'sign_in' | 'sign_up';
+    status: 'needs_identifier' | 'needs_first_factor' | 'needs_second_factor' | 'needs_email_verification' | 'complete' | 'abandoned';
+    identifier: string | null;
+    userId: string | null;
+    strategy: string | null;
+    /** The code the next `attempt_*` call must present (email_code / verification). */
+    pendingCode: string | null;
+    /** Returned to the originating tab by `prepare_first_factor` (sign-in only). */
+    pollSecret: string | null;
+    /** One-time ticket issued on completion, redeemed at `tickets/exchange`. */
+    ticket: string | null;
+    sessionId: string | null;
+    createdAt: number;
+    expiresAt: number;
+}
+/** A social provider surfaced by `GET /v1/client/environment`. */
+export interface MockSocialProvider {
+    provider: string;
+    native?: boolean;
+    mode?: 'native' | 'redirect';
+    label?: string | null;
+    display_name?: string | null;
+    allow_sign_in?: boolean;
+    allow_sign_up?: boolean;
+}
+/** The instance / environment config the environment + JWKS endpoints report. */
+export interface MockInstance {
+    id: string;
+    /** The FAPI origin the handlers are mounted on (publishable-key surface). */
+    fapiBaseUrl: string;
+    /** The BAPI origin the handlers are mounted on (secret-key surface). */
+    bapiBaseUrl: string;
+    publishableKey: string;
+    secretKey: string;
+    /** The enabled first factors, surfaced as `environment.first_factors`. */
+    firstFactors: string[];
+    socialProviders: MockSocialProvider[];
+    /** The fixed OTP every email_code / verification accepts in the mock. */
+    testOtp: string;
+    jwks: {
+        keys: unknown[];
+    };
+}
+/** Seed for {@link createAtlasMock}. Everything is optional; sane defaults fill the rest. */
+export interface AtlasMockSeed {
+    instance?: Partial<MockInstance>;
+    users?: SeedUser[];
+    organizations?: SeedOrganization[];
+}
+/** A friendly user seed — the mock normalises it into a {@link MockUser}. */
+export interface SeedUser {
+    id?: string;
+    email?: string;
+    emailVerified?: boolean;
+    password?: string;
+    firstName?: string;
+    lastName?: string;
+    username?: string;
+    imageUrl?: string;
+    locale?: string;
+    externalId?: string;
+    publicMetadata?: Record<string, unknown>;
+    privateMetadata?: Record<string, unknown>;
+    unsafeMetadata?: Record<string, unknown>;
+    mfaEnabled?: boolean;
+    isAnonymous?: boolean;
+}
+/** A friendly organization seed. */
+export interface SeedOrganization {
+    id?: string;
+    name: string;
+    slug?: string;
+    imageUrl?: string;
+    publicMetadata?: Record<string, unknown>;
+    maxAllowedMemberships?: number;
+    createdBy?: string;
+    /** User ids to seat as members, with their role (defaults to `member`). */
+    members?: Array<{
+        userId: string;
+        role?: string;
+    }>;
+}
+/**
+ * A deterministic, seedable id factory. Each entity kind has its own monotonic
+ * counter, so `user(1)`, `user(2)`, … are stable across runs. Ids keep the
+ * Atlas `<prefix>_<...>` shape (e.g. `user_0000000000000000000000000001`).
+ */
+export declare class IdFactory {
+    private readonly counters;
+    next(kind: EntityKind): string;
+    reset(): void;
+}
+/**
+ * The mutable mock store. Created by {@link createAtlasMock}; the handlers close
+ * over one instance of this and mutate it in place.
+ */
+export declare class AtlasMock {
+    readonly instance: MockInstance;
+    readonly users: MockUser[];
+    readonly organizations: MockOrganization[];
+    readonly memberships: MockMembership[];
+    readonly attempts: MockAttempt[];
+    readonly sessions: MockSession[];
+    /** The session the `GET /v1/client` boot reports as active (set on exchange). */
+    activeSessionId: string | null;
+    readonly ids: IdFactory;
+    private readonly seed;
+    constructor(seed?: AtlasMockSeed);
+    private applySeed;
+    /** The FAPI origin the handlers are mounted on. */
+    get fapiBaseUrl(): string;
+    /** The BAPI origin the handlers are mounted on. */
+    get bapiBaseUrl(): string;
+    /** Seat a user into the store, normalising a friendly seed into a {@link MockUser}. */
+    addUser(seed: SeedUser): MockUser;
+    /** Seat an organization (and any seeded members) into the store. */
+    addOrganization(seed: SeedOrganization): MockOrganization;
+    /** Add a membership tying a user to an organization with a role. */
+    addMembership(userId: string, organizationId: string, role?: string): MockMembership;
+    /** Find a user by id (ignores soft-deleted unless asked). */
+    findUser(id: string, includeDeleted?: boolean): MockUser | undefined;
+    /** Find a user by any of their verified email addresses. */
+    findUserByEmail(email: string): MockUser | undefined;
+    findOrganization(id: string): MockOrganization | undefined;
+    findAttempt(id: string): MockAttempt | undefined;
+    findSession(id: string): MockSession | undefined;
+    /** The live session a FAPI bearer `jwt` authenticates as, or undefined. */
+    sessionForJwt(jwt: string): MockSession | undefined;
+    /** Mint a live session for a user (the same object a completed sign-in yields). */
+    createSession(userId: string, opts?: {
+        impersonatedBy?: string;
+    }): MockSession;
+    /** Reset the store to its original seed — the per-test teardown helper. */
+    reset(): void;
+}
+/**
+ * Create a mutable mock Atlas backend. Pass a seed to pre-populate users,
+ * organizations and the instance/environment config; everything is optional.
+ *
+ * @example
+ * const mock = createAtlasMock({
+ *   instance: { firstFactors: ['password'] },
+ *   users: [{ email: 'ada@example.com', password: 'hunter2' }],
+ * });
+ */
+export declare function createAtlasMock(seed?: AtlasMockSeed): AtlasMock;