@atlasauth/react 0.1.0

package/dist/components.js

@@ -0,0 +1,241 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SignedIn = SignedIn;
+exports.SignedOut = SignedOut;
+exports.AtlasLoading = AtlasLoading;
+exports.AtlasLoaded = AtlasLoaded;
+exports.Protect = Protect;
+exports.SignIn = SignIn;
+exports.SignUp = SignUp;
+exports.UserButton = UserButton;
+exports.OrganizationSwitcher = OrganizationSwitcher;
+exports.UserProfile = UserProfile;
+exports.OrganizationProfile = OrganizationProfile;
+const jsx_runtime_1 = require("react/jsx-runtime");
+const react_1 = require("react");
+const js_1 = require("@atlasauth/js");
+const AtlasProvider_1 = require("./AtlasProvider");
+const fapi_1 = require("./fapi");
+const hooks_1 = require("./hooks");
+const appearance_1 = require("./appearance");
+const i18n_1 = require("./i18n");
+const protect_1 = require("./protect");
+/**
+ * §10.2 components.
+ *
+ * `<SignIn/>` and `<SignUp/>` are "full multi-step flows driven entirely by the
+ * server-side attempt status". That phrase is the design: this file contains no
+ * decision about what comes next. It renders whatever `status` the server
+ * returned, via the exhaustive mapping in @atlasauth/js — so adding a step to the
+ * flow is a server change, and a client that has not shipped yet degrades to a
+ * visible "needs an update" rather than a blank screen.
+ */
+function useClass(appearanceKey, base) {
+    const { appearance } = (0, AtlasProvider_1.useAtlas)();
+    return (0, appearance_1.classFor)(appearanceKey, appearance, base);
+}
+function useText() {
+    const { catalog } = (0, AtlasProvider_1.useAtlas)();
+    return (key, vars) => (0, i18n_1.translate)(catalog, key, vars);
+}
+function SignedIn({ children }) {
+    const { isLoaded, isSignedIn } = (0, hooks_1.useUser)();
+    // Renders nothing while loading rather than flashing the signed-out branch.
+    if (!isLoaded || !isSignedIn)
+        return null;
+    return (0, jsx_runtime_1.jsx)(jsx_runtime_1.Fragment, { children: children });
+}
+function SignedOut({ children }) {
+    const { isLoaded, isSignedIn } = (0, hooks_1.useUser)();
+    if (!isLoaded || isSignedIn)
+        return null;
+    return (0, jsx_runtime_1.jsx)(jsx_runtime_1.Fragment, { children: children });
+}
+/** §10.2: render children only while the SDK is still loading. */
+function AtlasLoading({ children }) {
+    const { isLoaded } = (0, hooks_1.useUser)();
+    return isLoaded ? null : (0, jsx_runtime_1.jsx)(jsx_runtime_1.Fragment, { children: children });
+}
+/** §10.2: render children only once the SDK has finished loading — the
+ * symmetric partner of {@link AtlasLoading}, so a consumer can show a spinner
+ * and its resolved content without hand-rolling the inverse condition. */
+function AtlasLoaded({ children }) {
+    const { isLoaded } = (0, hooks_1.useUser)();
+    return isLoaded ? (0, jsx_runtime_1.jsx)(jsx_runtime_1.Fragment, { children: children }) : null;
+}
+/**
+ * §10.2 `<Protect permission="…">`.
+ *
+ * A rendering helper, never an authorization boundary — anyone can flip the
+ * condition in devtools. The server checking the same permission is what
+ * actually stops them, and this component's job is only to avoid showing a
+ * button that would fail.
+ */
+function Protect({ children, fallback = null, ...condition }) {
+    const { claims, status } = (0, AtlasProvider_1.useAtlas)();
+    if (status === 'loading')
+        return null;
+    return (0, protect_1.evaluate)(claims, condition).allowed ? (0, jsx_runtime_1.jsx)(jsx_runtime_1.Fragment, { children: children }) : (0, jsx_runtime_1.jsx)(jsx_runtime_1.Fragment, { children: fallback });
+}
+/**
+ * The server-driven flow shell.
+ *
+ * Every branch comes from `nextStep`, which is exhaustive — including the
+ * `unknown` case, which renders an honest message instead of nothing.
+ */
+function AttemptFlow({ attempt, onSubmit, busy, errors, titleKey, }) {
+    const t = useText();
+    const cardClass = useClass('card', 'atlas-card');
+    const titleClass = useClass('headerTitle', 'atlas-title');
+    const inputClass = useClass('formFieldInput', 'atlas-input');
+    const buttonClass = useClass('formButtonPrimary', 'atlas-button');
+    const errorClass = useClass('formFieldError', 'atlas-error');
+    const [values, setValues] = (0, react_1.useState)({});
+    const step = attempt ? (0, js_1.nextStep)(attempt) : { kind: 'collect_identifier' };
+    const field = (name, labelKey, type = 'text') => ((0, jsx_runtime_1.jsxs)("label", { className: "atlas-field", children: [(0, jsx_runtime_1.jsx)("span", { children: t(labelKey) }), (0, jsx_runtime_1.jsx)("input", { className: inputClass, type: type, value: values[name] ?? '', onChange: (event) => setValues((v) => ({ ...v, [name]: event.target.value })) }), errors
+                .filter((error) => error.param === name)
+                .map((error) => ((0, jsx_runtime_1.jsx)("span", { className: errorClass, children: error.message }, error.code)))] }, name));
+    const fields = () => {
+        switch (step.kind) {
+            case 'collect_identifier':
+                return [field('identifier', 'signIn.identifierLabel', 'email')];
+            case 'collect_first_factor':
+                return [field('password', 'signIn.passwordLabel', 'password')];
+            case 'collect_second_factor':
+                return [field('code', 'mfa.codeLabel')];
+            case 'enroll_second_factor':
+                /**
+                 * Two codes, not one. §5.6 wants consecutive codes so a phone with a
+                 * fast clock fails here rather than on every sign-in afterwards, and
+                 * asking for one would hide that failure until it was expensive.
+                 */
+                return [
+                    field('code', 'mfa.enrollFirstCodeLabel'),
+                    field('secondCode', 'mfa.enrollSecondCodeLabel'),
+                ];
+            case 'collect_email_code':
+                return [field('code', 'signIn.emailCodeLabel')];
+            case 'collect_new_password':
+                return [field('password', 'reset.newPasswordLabel', 'password')];
+            case 'await_oauth':
+                return [(0, jsx_runtime_1.jsx)("p", { children: t('signIn.magicLinkSent') }, "oauth")];
+            case 'done':
+                return [(0, jsx_runtime_1.jsx)("p", { children: t('signIn.checkOtherTab') }, "done")];
+            case 'restart':
+                return [(0, jsx_runtime_1.jsx)("p", { children: t('error.generic') }, "restart")];
+            default:
+                /**
+                 * A status this SDK version does not know. Saying so beats rendering
+                 * nothing, which is a blank login box the user cannot act on.
+                 */
+                return [
+                    (0, jsx_runtime_1.jsx)("p", { className: errorClass, children: t('error.generic') }, "unknown"),
+                ];
+        }
+    };
+    return ((0, jsx_runtime_1.jsxs)("div", { className: cardClass, children: [(0, jsx_runtime_1.jsx)("h1", { className: titleClass, children: t(titleKey) }), errors
+                .filter((error) => !error.param)
+                .map((error) => ((0, jsx_runtime_1.jsx)("p", { className: errorClass, role: "alert", children: error.message }, error.code))), (0, jsx_runtime_1.jsxs)("form", { onSubmit: (event) => {
+                    event.preventDefault();
+                    onSubmit(values);
+                }, children: [fields(), step.kind !== 'done' && step.kind !== 'await_oauth' ? ((0, jsx_runtime_1.jsx)("button", { className: buttonClass, disabled: busy, type: "submit", children: t('signIn.submit') })) : null] })] }));
+}
+/**
+ * Drives the flow through `advance`, which owns the step-to-endpoint mapping.
+ * This component never decides what comes next — it renders the status the
+ * server returned and posts whatever the driver says the current step needs.
+ */
+function useFlow() {
+    const { publishableKey, frontendApi, reload, pendingAttempt } = (0, AtlasProvider_1.useAtlas)();
+    // Seeded from a redirect that came back mid-flow (e.g. OAuth needing a second
+    // factor), so the user resumes at the demanded step instead of starting over.
+    const [state, setState] = (0, react_1.useState)(() => (0, fapi_1.flowFromPending)(pendingAttempt));
+    const client = (0, react_1.useMemo)(() => new fapi_1.FapiClient({ publishableKey, baseUrl: frontendApi }), [frontendApi, publishableKey]);
+    const submit = (0, react_1.useCallback)((values) => {
+        void (async () => {
+            setState((current) => ({ ...current, busy: true, errors: [] }));
+            const next = await (0, fapi_1.advance)(client, state, values);
+            setState(next);
+            // On completion the response carries a one-time ticket (§7.1). Exchange
+            // it for cookies over a same-origin request — FAPI is cross-origin to
+            // the app and cannot set the cookie on the completion response itself —
+            // THEN re-boot so the rest of the app sees a signed-in user.
+            if (next.attempt?.status === 'complete') {
+                if (next.ticket) {
+                    await client.post('/v1/client/tickets/exchange', {
+                        attempt_id: next.attempt.id,
+                        ticket: next.ticket,
+                    });
+                }
+                await reload();
+            }
+        })();
+    }, [client, reload, state]);
+    /** §5.3: collect a sign-in completed by a link opened on another device. */
+    (0, react_1.useEffect)(() => {
+        if (!(0, fapi_1.shouldKeepPolling)(state))
+            return;
+        const timer = setInterval(() => {
+            void (async () => {
+                const { state: next, ticket } = await (0, fapi_1.pollAttempt)(client, state);
+                setState(next);
+                if (!ticket || !next.attempt)
+                    return;
+                // The ticket is exchanged by a normal request, so no session token has
+                // ever appeared in a URL.
+                await client.post('/v1/client/tickets/exchange', {
+                    attempt_id: next.attempt.id,
+                    ticket,
+                });
+                await reload();
+            })();
+        }, 2_000);
+        return () => clearInterval(timer);
+    }, [client, reload, state]);
+    return { state, submit };
+}
+function SignIn(_props = {}) {
+    const { state, submit } = useFlow();
+    return ((0, jsx_runtime_1.jsx)(AttemptFlow, { attempt: state.attempt, busy: state.busy, errors: state.errors, titleKey: "signIn.title", onSubmit: submit }));
+}
+function SignUp(_props = {}) {
+    const { state, submit } = useFlow();
+    return ((0, jsx_runtime_1.jsx)(AttemptFlow, { attempt: state.attempt, busy: state.busy, errors: state.errors, titleKey: "signUp.title", onSubmit: submit }));
+}
+function UserButton() {
+    const { user } = (0, hooks_1.useUser)();
+    const { signOut } = (0, hooks_1.useAuth)();
+    const t = useText();
+    const [open, setOpen] = (0, react_1.useState)(false);
+    const avatarClass = useClass('avatar', 'atlas-avatar');
+    const menuClass = useClass('menu', 'atlas-menu');
+    const itemClass = useClass('menuItem', 'atlas-menu-item');
+    if (!user)
+        return null;
+    const label = [user.first_name, user.last_name].filter(Boolean).join(' ') || user.username || '';
+    return ((0, jsx_runtime_1.jsxs)("div", { className: "atlas-user-button", children: [(0, jsx_runtime_1.jsx)("button", { className: avatarClass, onClick: () => setOpen((o) => !o), "aria-expanded": open, children: user.image_url ? (0, jsx_runtime_1.jsx)("img", { alt: "", src: user.image_url }) : (0, jsx_runtime_1.jsx)("span", { children: label.slice(0, 1) }) }), open ? ((0, jsx_runtime_1.jsxs)("div", { className: menuClass, role: "menu", children: [(0, jsx_runtime_1.jsx)("span", { className: itemClass, children: label }), (0, jsx_runtime_1.jsx)("button", { className: itemClass, onClick: () => void signOut(), children: t('userButton.signOut') })] })) : null] }));
+}
+function OrganizationSwitcher() {
+    const { memberships, organization, setActive } = (0, hooks_1.useOrganization)();
+    const t = useText();
+    const menuClass = useClass('menu', 'atlas-menu');
+    const itemClass = useClass('menuItem', 'atlas-menu-item');
+    return ((0, jsx_runtime_1.jsxs)("div", { className: menuClass, children: [(0, jsx_runtime_1.jsx)("button", { className: itemClass, onClick: () => void setActive(null), children: t('organization.personal') }), memberships.map((membership) => ((0, jsx_runtime_1.jsx)("button", { className: itemClass, disabled: membership.organization.id === organization?.id, onClick: () => void setActive(membership.organization.id), children: membership.organization.name }, membership.organization.id)))] }));
+}
+function UserProfile() {
+    const { user } = (0, hooks_1.useUser)();
+    const t = useText();
+    const cardClass = useClass('card', 'atlas-card');
+    if (!user)
+        return null;
+    return ((0, jsx_runtime_1.jsxs)("div", { className: cardClass, children: [(0, jsx_runtime_1.jsx)("h1", { children: t('userProfile.title') }), (0, jsx_runtime_1.jsxs)("section", { children: [(0, jsx_runtime_1.jsx)("h2", { children: t('userProfile.emailsSection') }), (0, jsx_runtime_1.jsx)("ul", { children: (user.email_addresses ?? []).map((email) => ((0, jsx_runtime_1.jsxs)("li", { children: [email.email_address, email.verified ? null : (0, jsx_runtime_1.jsxs)("em", { children: [" \u2014 ", t('userProfile.unverified')] })] }, email.id))) })] }), (0, jsx_runtime_1.jsxs)("section", { children: [(0, jsx_runtime_1.jsx)("h2", { children: t('userProfile.securitySection') }), (0, jsx_runtime_1.jsx)("p", { children: user.mfa_enabled ? '2FA on' : '2FA off' })] })] }));
+}
+function OrganizationProfile() {
+    const { organization, membership } = (0, hooks_1.useOrganization)();
+    const t = useText();
+    const cardClass = useClass('card', 'atlas-card');
+    if (!organization)
+        return null;
+    return ((0, jsx_runtime_1.jsxs)("div", { className: cardClass, children: [(0, jsx_runtime_1.jsx)("h1", { children: organization.name }), (0, jsx_runtime_1.jsxs)("p", { children: [t('organization.roleLabel'), ": ", membership?.role] }), (0, jsx_runtime_1.jsx)(Protect, { permission: "org:sys_memberships:manage", children: (0, jsx_runtime_1.jsx)("button", { children: t('organization.invite') }) })] }));
+}
+//# sourceMappingURL=components.js.map

package/dist/components.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"components.js","sourceRoot":"","sources":["../src/components.tsx"],"names":[],"mappings":";;AAqCA,4BAKC;AAED,8BAIC;AAGD,oCAGC;AAKD,kCAGC;AAUD,0BAQC;AAgMD,wBAYC;AAED,wBAYC;AAED,gCA8BC;AAED,oDAuBC;AAED,kCA6BC;AAED,kDAoBC;;AAxZD,iCAAkF;AAClF,sCAA4E;AAC5E,mDAA2C;AAC3C,iCAOgB;AAChB,mCAA4D;AAC5D,6CAAwC;AACxC,iCAAmC;AACnC,uCAA4D;AAE5D;;;;;;;;;GASG;AAEH,SAAS,QAAQ,CAAC,aAA6C,EAAE,IAAY;IAC3E,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,wBAAQ,GAAE,CAAC;IAClC,OAAO,IAAA,qBAAQ,EAAC,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,OAAO;IACd,MAAM,EAAE,OAAO,EAAE,GAAG,IAAA,wBAAQ,GAAE,CAAC;IAC/B,OAAO,CAAC,GAAW,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,gBAAS,EAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACvF,CAAC;AAED,SAAgB,QAAQ,CAAC,EAAE,QAAQ,EAA2B;IAC5D,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAA,eAAO,GAAE,CAAC;IAC3C,4EAA4E;IAC5E,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,2DAAG,QAAQ,GAAI,CAAC;AACzB,CAAC;AAED,SAAgB,SAAS,CAAC,EAAE,QAAQ,EAA2B;IAC7D,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAA,eAAO,GAAE,CAAC;IAC3C,IAAI,CAAC,QAAQ,IAAI,UAAU;QAAE,OAAO,IAAI,CAAC;IACzC,OAAO,2DAAG,QAAQ,GAAI,CAAC;AACzB,CAAC;AAED,kEAAkE;AAClE,SAAgB,YAAY,CAAC,EAAE,QAAQ,EAA2B;IAChE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAA,eAAO,GAAE,CAAC;IAC/B,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,2DAAG,QAAQ,GAAI,CAAC;AAC3C,CAAC;AAED;;0EAE0E;AAC1E,SAAgB,WAAW,CAAC,EAAE,QAAQ,EAA2B;IAC/D,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAA,eAAO,GAAE,CAAC;IAC/B,OAAO,QAAQ,CAAC,CAAC,CAAC,2DAAG,QAAQ,GAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,OAAO,CAAC,EACtB,QAAQ,EACR,QAAQ,GAAG,IAAI,EACf,GAAG,SAAS,EACqD;IACjE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,wBAAQ,GAAE,CAAC;IACtC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,IAAA,kBAAQ,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2DAAG,QAAQ,GAAI,CAAC,CAAC,CAAC,2DAAG,QAAQ,GAAI,CAAC;AACjF,CAAC;AAOD;;;;;GAKG;AACH,SAAS,WAAW,CAAC,EACnB,OAAO,EACP,QAAQ,EACR,IAAI,EACJ,MAAM,EACN,QAAQ,GAOT;IACC,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IACpB,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,QAAQ,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,QAAQ,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,QAAQ,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IAE7D,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,IAAA,gBAAQ,EAAyB,EAAE,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAA,aAAQ,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,oBAA6B,EAAE,CAAC;IAEnF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAE,IAAI,GAAG,MAAM,EAAE,EAAE,CAAC,CAC/D,mCAAkB,SAAS,EAAC,aAAa,aACvC,2CAAO,CAAC,CAAC,QAAQ,CAAC,GAAQ,EAC1B,kCACE,SAAS,EAAE,UAAU,EACrB,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EACzB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,GAC7E,EACD,MAAM;iBACJ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;iBACvC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACd,iCAAuB,SAAS,EAAE,UAAU,YACzC,KAAK,CAAC,OAAO,IADL,KAAK,CAAC,IAAI,CAEd,CACR,CAAC,KAdM,IAAI,CAeR,CACT,CAAC;IAEF,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,oBAAoB;gBACvB,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,wBAAwB,EAAE,OAAO,CAAC,CAAC,CAAC;YAClE,KAAK,sBAAsB;gBACzB,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,sBAAsB,EAAE,UAAU,CAAC,CAAC,CAAC;YACjE,KAAK,uBAAuB;gBAC1B,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;YAC1C,KAAK,sBAAsB;gBACzB;;;;mBAIG;gBACH,OAAO;oBACL,KAAK,CAAC,MAAM,EAAE,0BAA0B,CAAC;oBACzC,KAAK,CAAC,YAAY,EAAE,2BAA2B,CAAC;iBACjD,CAAC;YACJ,KAAK,oBAAoB;gBACvB,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC,CAAC;YAClD,KAAK,sBAAsB;gBACzB,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,wBAAwB,EAAE,UAAU,CAAC,CAAC,CAAC;YACnE,KAAK,aAAa;gBAChB,OAAO,CAAC,wCAAgB,CAAC,CAAC,sBAAsB,CAAC,IAAlC,OAAO,CAAgC,CAAC,CAAC;YAC1D,KAAK,MAAM;gBACT,OAAO,CAAC,wCAAe,CAAC,CAAC,sBAAsB,CAAC,IAAjC,MAAM,CAAgC,CAAC,CAAC;YACzD,KAAK,SAAS;gBACZ,OAAO,CAAC,wCAAkB,CAAC,CAAC,eAAe,CAAC,IAA7B,SAAS,CAAyB,CAAC,CAAC;YACrD;gBACE;;;mBAGG;gBACH,OAAO;oBACL,8BAAiB,SAAS,EAAE,UAAU,YACnC,CAAC,CAAC,eAAe,CAAC,IADd,SAAS,CAEZ;iBACL,CAAC;QACN,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,iCAAK,SAAS,EAAE,SAAS,aACvB,+BAAI,SAAS,EAAE,UAAU,YAAG,CAAC,CAAC,QAAQ,CAAC,GAAM,EAE5C,MAAM;iBACJ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;iBAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACd,8BAAoB,SAAS,EAAE,UAAU,EAAE,IAAI,EAAC,OAAO,YACpD,KAAK,CAAC,OAAO,IADR,KAAK,CAAC,IAAI,CAEd,CACL,CAAC,EAEJ,kCACE,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;oBAClB,KAAK,CAAC,cAAc,EAAE,CAAC;oBACvB,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACnB,CAAC,aAEA,MAAM,EAAE,EACR,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,CACrD,mCAAQ,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAC,QAAQ,YAC1D,CAAC,CAAC,eAAe,CAAC,GACZ,CACV,CAAC,CAAC,CAAC,IAAI,IACH,IACH,CACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO;IACd,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,IAAA,wBAAQ,GAAE,CAAC;IAC3E,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,IAAA,gBAAQ,EAAY,GAAG,EAAE,CAAC,IAAA,sBAAe,EAAC,cAAc,CAAC,CAAC,CAAC;IAErF,MAAM,MAAM,GAAG,IAAA,eAAO,EACpB,GAAG,EAAE,CAAC,IAAI,iBAAU,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAC9D,CAAC,WAAW,EAAE,cAAc,CAAC,CAC9B,CAAC;IAEF,MAAM,MAAM,GAAG,IAAA,mBAAW,EACxB,CAAC,MAA8B,EAAE,EAAE;QACjC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,MAAM,IAAA,cAAO,EAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAClD,QAAQ,CAAC,IAAI,CAAC,CAAC;YAEf,wEAAwE;YACxE,sEAAsE;YACtE,wEAAwE;YACxE,6DAA6D;YAC7D,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;gBACxC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBAChB,MAAM,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;wBAC/C,UAAU,EAAG,IAAI,CAAC,OAA2B,CAAC,EAAE;wBAChD,MAAM,EAAE,IAAI,CAAC,MAAM;qBACpB,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,MAAM,EAAE,CAAC;YACjB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,EACD,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CACxB,CAAC;IAEF,4EAA4E;IAC5E,IAAA,iBAAS,EAAC,GAAG,EAAE;QACb,IAAI,CAAC,IAAA,wBAAiB,EAAC,KAAK,CAAC;YAAE,OAAO;QAEtC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,kBAAW,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBACjE,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACf,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,OAAO;gBAErC,uEAAuE;gBACvE,0BAA0B;gBAC1B,MAAM,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;oBAC/C,UAAU,EAAG,IAAI,CAAC,OAA2B,CAAC,EAAE;oBAChD,MAAM;iBACP,CAAC,CAAC;gBACH,MAAM,MAAM,EAAE,CAAC;YACjB,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,EAAE,KAAK,CAAC,CAAC;QAEV,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAE5B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,SAAgB,MAAM,CAAC,SAAoB,EAAE;IAC3C,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;IAEpC,OAAO,CACL,uBAAC,WAAW,IACV,OAAO,EAAE,KAAK,CAAC,OAAO,EACtB,IAAI,EAAE,KAAK,CAAC,IAAI,EAChB,MAAM,EAAE,KAAK,CAAC,MAAM,EACpB,QAAQ,EAAC,cAAc,EACvB,QAAQ,EAAE,MAAM,GAChB,CACH,CAAC;AACJ,CAAC;AAED,SAAgB,MAAM,CAAC,SAAoB,EAAE;IAC3C,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC;IAEpC,OAAO,CACL,uBAAC,WAAW,IACV,OAAO,EAAE,KAAK,CAAC,OAAO,EACtB,IAAI,EAAE,KAAK,CAAC,IAAI,EAChB,MAAM,EAAE,KAAK,CAAC,MAAM,EACpB,QAAQ,EAAC,cAAc,EACvB,QAAQ,EAAE,MAAM,GAChB,CACH,CAAC;AACJ,CAAC;AAED,SAAgB,UAAU;IACxB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,eAAO,GAAE,CAAC;IAC3B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAA,eAAO,GAAE,CAAC;IAC9B,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IACpB,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,IAAA,gBAAQ,EAAC,KAAK,CAAC,CAAC;IAExC,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAE1D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;IAEjG,OAAO,CACL,iCAAK,SAAS,EAAC,mBAAmB,aAChC,mCAAQ,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,mBAAiB,IAAI,YACnF,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,gCAAK,GAAG,EAAC,EAAE,EAAC,GAAG,EAAE,IAAI,CAAC,SAAS,GAAI,CAAC,CAAC,CAAC,2CAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAQ,GACjF,EAER,IAAI,CAAC,CAAC,CAAC,CACN,iCAAK,SAAS,EAAE,SAAS,EAAE,IAAI,EAAC,MAAM,aACpC,iCAAM,SAAS,EAAE,SAAS,YAAG,KAAK,GAAQ,EAC1C,mCAAQ,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,OAAO,EAAE,YACxD,CAAC,CAAC,oBAAoB,CAAC,GACjB,IACL,CACP,CAAC,CAAC,CAAC,IAAI,IACJ,CACP,CAAC;AACJ,CAAC;AAED,SAAgB,oBAAoB;IAClC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,IAAA,uBAAe,GAAE,CAAC;IACnE,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IACpB,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAE1D,OAAO,CACL,iCAAK,SAAS,EAAE,SAAS,aACvB,mCAAQ,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,YAC9D,CAAC,CAAC,uBAAuB,CAAC,GACpB,EACR,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAC/B,mCAEE,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE,KAAK,YAAY,EAAE,EAAE,EACzD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC,YAExD,UAAU,CAAC,YAAY,CAAC,IAAI,IALxB,UAAU,CAAC,YAAY,CAAC,EAAE,CAMxB,CACV,CAAC,IACE,CACP,CAAC;AACJ,CAAC;AAED,SAAgB,WAAW;IACzB,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,eAAO,GAAE,CAAC;IAC3B,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IACpB,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAEjD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,OAAO,CACL,iCAAK,SAAS,EAAE,SAAS,aACvB,yCAAK,CAAC,CAAC,mBAAmB,CAAC,GAAM,EAEjC,gDACE,yCAAK,CAAC,CAAC,2BAA2B,CAAC,GAAM,EACzC,yCACG,CAAC,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAC3C,2CACG,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,uDAAQ,CAAC,CAAC,wBAAwB,CAAC,IAAM,KAF3D,KAAK,CAAC,EAAE,CAGZ,CACN,CAAC,GACC,IACG,EAEV,gDACE,yCAAK,CAAC,CAAC,6BAA6B,CAAC,GAAM,EAC3C,wCAAI,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,GAAK,IACxC,IACN,CACP,CAAC;AACJ,CAAC;AAED,SAAgB,mBAAmB;IACjC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,IAAA,uBAAe,GAAE,CAAC;IACvD,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;IACpB,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAEjD,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAE/B,OAAO,CACL,iCAAK,SAAS,EAAE,SAAS,aACvB,yCAAK,YAAY,CAAC,IAAI,GAAM,EAC5B,0CACG,CAAC,CAAC,wBAAwB,CAAC,QAAI,UAAU,EAAE,IAAI,IAC9C,EAGJ,uBAAC,OAAO,IAAC,UAAU,EAAC,4BAA4B,YAC9C,6CAAS,CAAC,CAAC,qBAAqB,CAAC,GAAU,GACnC,IACN,CACP,CAAC;AACJ,CAAC"}

package/dist/fapi.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The FAPI client and sign-in flow driver now live in `@atlasauth/js` — the pure,
+ * framework-agnostic browser FAPI flow — so the React `<SignIn/>` and the
+ * framework-agnostic `@atlasauth/embed` widget drive the exact same endpoints
+ * through one implementation and cannot diverge in what the server sees.
+ *
+ * This module is kept as a thin re-export so every existing importer inside the
+ * React SDK (`./components`, the public barrel, the tests) keeps resolving the
+ * driver from `./fapi` unchanged.
+ */
+export { FapiClient, advance, prepareFactor, pollAttempt, shouldKeepPolling, requestForStep, flowFromPending, initialFlow, getProviderToken, type FapiClientOptions, type FapiResponse, type FlowState, type ProviderToken, } from '@atlasauth/js';

package/dist/fapi.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getProviderToken = exports.initialFlow = exports.flowFromPending = exports.requestForStep = exports.shouldKeepPolling = exports.pollAttempt = exports.prepareFactor = exports.advance = exports.FapiClient = void 0;
+/**
+ * The FAPI client and sign-in flow driver now live in `@atlasauth/js` — the pure,
+ * framework-agnostic browser FAPI flow — so the React `<SignIn/>` and the
+ * framework-agnostic `@atlasauth/embed` widget drive the exact same endpoints
+ * through one implementation and cannot diverge in what the server sees.
+ *
+ * This module is kept as a thin re-export so every existing importer inside the
+ * React SDK (`./components`, the public barrel, the tests) keeps resolving the
+ * driver from `./fapi` unchanged.
+ */
+var js_1 = require("@atlasauth/js");
+Object.defineProperty(exports, "FapiClient", { enumerable: true, get: function () { return js_1.FapiClient; } });
+Object.defineProperty(exports, "advance", { enumerable: true, get: function () { return js_1.advance; } });
+Object.defineProperty(exports, "prepareFactor", { enumerable: true, get: function () { return js_1.prepareFactor; } });
+Object.defineProperty(exports, "pollAttempt", { enumerable: true, get: function () { return js_1.pollAttempt; } });
+Object.defineProperty(exports, "shouldKeepPolling", { enumerable: true, get: function () { return js_1.shouldKeepPolling; } });
+Object.defineProperty(exports, "requestForStep", { enumerable: true, get: function () { return js_1.requestForStep; } });
+Object.defineProperty(exports, "flowFromPending", { enumerable: true, get: function () { return js_1.flowFromPending; } });
+Object.defineProperty(exports, "initialFlow", { enumerable: true, get: function () { return js_1.initialFlow; } });
+Object.defineProperty(exports, "getProviderToken", { enumerable: true, get: function () { return js_1.getProviderToken; } });
+//# sourceMappingURL=fapi.js.map

package/dist/fapi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fapi.js","sourceRoot":"","sources":["../src/fapi.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;GASG;AACH,oCAcuB;AAbrB,gGAAA,UAAU,OAAA;AACV,6FAAA,OAAO,OAAA;AACP,mGAAA,aAAa,OAAA;AACb,iGAAA,WAAW,OAAA;AACX,uGAAA,iBAAiB,OAAA;AACjB,oGAAA,cAAc,OAAA;AACd,qGAAA,eAAe,OAAA;AACf,iGAAA,WAAW,OAAA;AACX,sGAAA,gBAAgB,OAAA"}

package/dist/hooks.d.ts

@@ -0,0 +1,62 @@
+import { type CheckSessionOptions, type ProviderToken } from '@atlasauth/js';
+import { type ProtectCondition } from './protect';
+import type { AtlasOrganizationMembership, AtlasSession, AtlasUser } from './types';
+/**
+ * §10.1 hooks.
+ *
+ * Every one returns `isLoaded` alongside its data, and that is not ceremony.
+ * Without it a component cannot tell "still booting" from "signed out", so it
+ * renders a sign-in form for a fraction of a second on every page load — the
+ * flash of unauthenticated content that makes an app feel broken.
+ */
+export declare function useUser(): {
+    isLoaded: boolean;
+    isSignedIn: boolean;
+    user: AtlasUser | null;
+    /**
+     * §6.6 the signed-in user's own live token at a connected provider — the
+     * `user.getToken({ provider })` equivalent. Always the caller's own token
+     * (the server keys off the session), refreshed on read if stale, and never
+     * the refresh token.
+     */
+    getProviderToken(provider: string): Promise<ProviderToken | null>;
+};
+export declare function useSession(): {
+    isLoaded: boolean;
+    session: AtlasSession | null;
+};
+export declare function useAuth(): {
+    isLoaded: boolean;
+    isSignedIn: boolean;
+    userId: string | null;
+    sessionId: string | null;
+    orgId: string | null;
+    orgRole: string | null;
+    /** Always fresh: refreshes first if the cached token is close to expiry. */
+    getToken: () => Promise<string | null>;
+    /** §6.6 the user's own live access token at a connected social provider. */
+    getProviderToken: (provider: string) => Promise<ProviderToken | null>;
+    signOut: () => Promise<void>;
+    /** Mirrors <Protect>, for logic that is not a render decision. */
+    has: (condition: ProtectCondition) => boolean;
+};
+export declare function useOrganization(): {
+    isLoaded: boolean;
+    organization: AtlasOrganizationMembership['organization'] | null;
+    membership: AtlasOrganizationMembership | null;
+    memberships: AtlasOrganizationMembership[];
+    setActive(organizationId: string | null): Promise<void>;
+};
+/**
+ * Cross-property silent auth (P3). Runs the hidden-iframe OIDC `prompt=none`
+ * check ({@link checkSession}) once on mount and reports whether the visitor is
+ * already signed in on this Atlas instance — for a pure client-side UI decision
+ * ("show Sign in" vs "show account"), never as a security boundary. Pass `null`
+ * to skip the check (e.g. until config is ready). `signedIn` is `null` while the
+ * check is in flight or skipped, then a boolean.
+ */
+export declare function useSilentAuth(options: CheckSessionOptions | null): {
+    loading: boolean;
+    signedIn: boolean | null;
+    error?: string;
+};

package/dist/hooks.js

@@ -0,0 +1,96 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.useUser = useUser;
+exports.useSession = useSession;
+exports.useAuth = useAuth;
+exports.useOrganization = useOrganization;
+exports.useSilentAuth = useSilentAuth;
+const react_1 = require("react");
+const js_1 = require("@atlasauth/js");
+const AtlasProvider_1 = require("./AtlasProvider");
+const protect_1 = require("./protect");
+/**
+ * §10.1 hooks.
+ *
+ * Every one returns `isLoaded` alongside its data, and that is not ceremony.
+ * Without it a component cannot tell "still booting" from "signed out", so it
+ * renders a sign-in form for a fraction of a second on every page load — the
+ * flash of unauthenticated content that makes an app feel broken.
+ */
+function useUser() {
+    const { status, user, getProviderToken } = (0, AtlasProvider_1.useAtlas)();
+    return {
+        isLoaded: status !== 'loading',
+        isSignedIn: status === 'signed_in',
+        user,
+        getProviderToken,
+    };
+}
+function useSession() {
+    const { status, session } = (0, AtlasProvider_1.useAtlas)();
+    return { isLoaded: status !== 'loading', session };
+}
+function useAuth() {
+    const { status, claims, getToken, getProviderToken, signOut } = (0, AtlasProvider_1.useAtlas)();
+    return {
+        isLoaded: status !== 'loading',
+        isSignedIn: status === 'signed_in',
+        userId: claims?.sub ?? null,
+        sessionId: claims?.sid ?? null,
+        orgId: claims?.org_id ?? null,
+        orgRole: claims?.org_role ?? null,
+        /** Always fresh: refreshes first if the cached token is close to expiry. */
+        getToken,
+        /** §6.6 the user's own live access token at a connected social provider. */
+        getProviderToken,
+        signOut,
+        /** Mirrors <Protect>, for logic that is not a render decision. */
+        has: (condition) => (0, protect_1.evaluate)(claims, condition).allowed,
+    };
+}
+function useOrganization() {
+    const { status, claims, memberships, setActiveOrganization } = (0, AtlasProvider_1.useAtlas)();
+    const active = memberships.find((m) => m.organization.id === claims?.org_id) ?? null;
+    return {
+        isLoaded: status !== 'loading',
+        organization: active?.organization ?? null,
+        membership: active,
+        memberships,
+        setActive: setActiveOrganization,
+    };
+}
+/**
+ * Cross-property silent auth (P3). Runs the hidden-iframe OIDC `prompt=none`
+ * check ({@link checkSession}) once on mount and reports whether the visitor is
+ * already signed in on this Atlas instance — for a pure client-side UI decision
+ * ("show Sign in" vs "show account"), never as a security boundary. Pass `null`
+ * to skip the check (e.g. until config is ready). `signedIn` is `null` while the
+ * check is in flight or skipped, then a boolean.
+ */
+function useSilentAuth(options) {
+    const [state, setState] = (0, react_1.useState)({
+        loading: options !== null,
+        signedIn: null,
+    });
+    // Re-run only when the meaningful inputs change, not on every render.
+    const key = options
+        ? [options.issuer, options.clientId, options.redirectUri, options.idTokenHint ?? ''].join('|')
+        : null;
+    (0, react_1.useEffect)(() => {
+        if (!options) {
+            setState({ loading: false, signedIn: null });
+            return;
+        }
+        let active = true;
+        setState((s) => ({ ...s, loading: true }));
+        void (0, js_1.checkSession)(options).then((r) => {
+            if (active)
+                setState({ loading: false, signedIn: r.signedIn, error: r.error });
+        });
+        return () => {
+            active = false;
+        };
+    }, [key]);
+    return state;
+}
+//# sourceMappingURL=hooks.js.map

package/dist/hooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hooks.js","sourceRoot":"","sources":["../src/hooks.ts"],"names":[],"mappings":";;AAeA,0BAmBC;AAED,gCAGC;AAED,0BAiBC;AAED,0CAiBC;AAUD,sCA4BC;AAnHD,iCAA4C;AAC5C,sCAA2F;AAC3F,mDAA2C;AAC3C,uCAA4D;AAG5D;;;;;;;GAOG;AAEH,SAAgB,OAAO;IAYrB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,IAAA,wBAAQ,GAAE,CAAC;IACtD,OAAO;QACL,QAAQ,EAAE,MAAM,KAAK,SAAS;QAC9B,UAAU,EAAE,MAAM,KAAK,WAAW;QAClC,IAAI;QACJ,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,SAAgB,UAAU;IACxB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAA,wBAAQ,GAAE,CAAC;IACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,SAAS,EAAE,OAAO,EAAE,CAAC;AACrD,CAAC;AAED,SAAgB,OAAO;IACrB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,IAAA,wBAAQ,GAAE,CAAC;IAC3E,OAAO;QACL,QAAQ,EAAE,MAAM,KAAK,SAAS;QAC9B,UAAU,EAAE,MAAM,KAAK,WAAW;QAClC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI;QAC3B,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI;QAC9B,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI,IAAI;QAC7B,OAAO,EAAE,MAAM,EAAE,QAAQ,IAAI,IAAI;QACjC,4EAA4E;QAC5E,QAAQ;QACR,4EAA4E;QAC5E,gBAAgB;QAChB,OAAO;QACP,kEAAkE;QAClE,GAAG,EAAE,CAAC,SAA2B,EAAE,EAAE,CAAC,IAAA,kBAAQ,EAAC,MAAM,EAAE,SAAS,CAAC,CAAC,OAAO;KAC1E,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe;IAO7B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB,EAAE,GAAG,IAAA,wBAAQ,GAAE,CAAC;IAC1E,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,MAAM,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC;IAErF,OAAO;QACL,QAAQ,EAAE,MAAM,KAAK,SAAS;QAC9B,YAAY,EAAE,MAAM,EAAE,YAAY,IAAI,IAAI;QAC1C,UAAU,EAAE,MAAM;QAClB,WAAW;QACX,SAAS,EAAE,qBAAqB;KACjC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,aAAa,CAAC,OAAmC;IAK/D,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,IAAA,gBAAQ,EAAiE;QACjG,OAAO,EAAE,OAAO,KAAK,IAAI;QACzB,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IACH,sEAAsE;IACtE,MAAM,GAAG,GAAG,OAAO;QACjB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9F,CAAC,CAAC,IAAI,CAAC;IACT,IAAA,iBAAS,EAAC,GAAG,EAAE;QACb,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3C,KAAK,IAAA,iBAAY,EAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;YACpC,IAAI,MAAM;gBAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QACH,OAAO,GAAG,EAAE;YACV,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACV,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/i18n.d.ts

@@ -0,0 +1,23 @@
+/**
+ * §10.3: "Every string passes through an i18n catalog; en-US ships, catalog
+ * format documented for community locales."
+ *
+ * A flat key-to-string map rather than nested objects, because nesting looks
+ * tidier and makes a missing key a runtime crash on `undefined.of.a.chain`
+ * rather than a visible fallback.
+ *
+ * A missing key renders the KEY, not an empty string. A blank button is a bug
+ * nobody can report; a button reading `signIn.submit` is one anyone can.
+ */
+export type Catalog = Record<string, string>;
+export declare const EN_US: Catalog;
+/**
+ * Look up a key and interpolate `{placeholders}`.
+ *
+ * An unknown placeholder is left visible for the same reason a missing key is:
+ * `Continue with {provider}` in the UI is a bug report waiting to be filed,
+ * whereas `Continue with ` is one nobody notices until a customer does.
+ */
+export declare function translate(catalog: Catalog, key: string, variables?: Record<string, string>): string;
+/** Merge a community locale over en-US so a partial translation still renders. */
+export declare function withFallback(locale: Catalog): Catalog;

package/dist/i18n.js

@@ -0,0 +1,83 @@
+"use strict";
+/**
+ * §10.3: "Every string passes through an i18n catalog; en-US ships, catalog
+ * format documented for community locales."
+ *
+ * A flat key-to-string map rather than nested objects, because nesting looks
+ * tidier and makes a missing key a runtime crash on `undefined.of.a.chain`
+ * rather than a visible fallback.
+ *
+ * A missing key renders the KEY, not an empty string. A blank button is a bug
+ * nobody can report; a button reading `signIn.submit` is one anyone can.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EN_US = void 0;
+exports.translate = translate;
+exports.withFallback = withFallback;
+exports.EN_US = {
+    'signIn.title': 'Sign in',
+    'signIn.subtitle': 'to continue to {application}',
+    'signIn.identifierLabel': 'Email address',
+    'signIn.passwordLabel': 'Password',
+    'signIn.submit': 'Continue',
+    'signIn.forgotPassword': 'Forgot password?',
+    'signIn.noAccount': 'No account?',
+    'signIn.signUpLink': 'Sign up',
+    'signIn.orDivider': 'or',
+    'signIn.socialButton': 'Continue with {provider}',
+    'signIn.emailCodeLabel': 'Verification code',
+    'signIn.magicLinkSent': 'Check your email for a sign-in link.',
+    'signIn.checkOtherTab': 'You can close this tab — you are signed in where you started.',
+    'signUp.title': 'Create your account',
+    'signUp.submit': 'Continue',
+    'signUp.haveAccount': 'Already have an account?',
+    'signUp.signInLink': 'Sign in',
+    'mfa.title': 'Two-step verification',
+    'mfa.subtitle': 'Enter the code from your authenticator app.',
+    'mfa.codeLabel': 'Code',
+    'mfa.enrollFirstCodeLabel': 'Code from your authenticator app',
+    'mfa.enrollSecondCodeLabel': 'The next code it shows',
+    'mfa.usePasskey': 'Use a passkey instead',
+    'mfa.useBackupCode': 'Use a recovery code',
+    'mfa.submit': 'Verify',
+    'reset.title': 'Reset your password',
+    'reset.submit': 'Send reset code',
+    'reset.newPasswordLabel': 'New password',
+    'userButton.manageAccount': 'Manage account',
+    'userButton.signOut': 'Sign out',
+    'userButton.signOutAll': 'Sign out of all devices',
+    'userProfile.title': 'Account',
+    'userProfile.profileSection': 'Profile',
+    'userProfile.emailsSection': 'Email addresses',
+    'userProfile.securitySection': 'Security',
+    'userProfile.devicesSection': 'Active devices',
+    'userProfile.dangerSection': 'Danger zone',
+    'userProfile.addEmail': 'Add an email address',
+    'userProfile.makePrimary': 'Make primary',
+    'userProfile.unverified': 'Unverified',
+    'userProfile.revokeDevice': 'Sign out',
+    'userProfile.deleteAccount': 'Delete account',
+    'organization.switcher': 'Switch organization',
+    'organization.personal': 'Personal account',
+    'organization.members': 'Members',
+    'organization.invite': 'Invite member',
+    'organization.roleLabel': 'Role',
+    'error.generic': 'Something went wrong. Please try again.',
+    'error.network': 'We could not reach the server. Check your connection.',
+};
+/**
+ * Look up a key and interpolate `{placeholders}`.
+ *
+ * An unknown placeholder is left visible for the same reason a missing key is:
+ * `Continue with {provider}` in the UI is a bug report waiting to be filed,
+ * whereas `Continue with ` is one nobody notices until a customer does.
+ */
+function translate(catalog, key, variables = {}) {
+    const template = catalog[key] ?? exports.EN_US[key] ?? key;
+    return template.replace(/\{(\w+)\}/g, (match, name) => variables[name] ?? match);
+}
+/** Merge a community locale over en-US so a partial translation still renders. */
+function withFallback(locale) {
+    return { ...exports.EN_US, ...locale };
+}
+//# sourceMappingURL=i18n.js.map

package/dist/i18n.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"i18n.js","sourceRoot":"","sources":["../src/i18n.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAsEH,8BAOC;AAGD,oCAEC;AA9EY,QAAA,KAAK,GAAY;IAC5B,cAAc,EAAE,SAAS;IACzB,iBAAiB,EAAE,8BAA8B;IACjD,wBAAwB,EAAE,eAAe;IACzC,sBAAsB,EAAE,UAAU;IAClC,eAAe,EAAE,UAAU;IAC3B,uBAAuB,EAAE,kBAAkB;IAC3C,kBAAkB,EAAE,aAAa;IACjC,mBAAmB,EAAE,SAAS;IAC9B,kBAAkB,EAAE,IAAI;IACxB,qBAAqB,EAAE,0BAA0B;IACjD,uBAAuB,EAAE,mBAAmB;IAC5C,sBAAsB,EAAE,sCAAsC;IAC9D,sBAAsB,EAAE,+DAA+D;IAEvF,cAAc,EAAE,qBAAqB;IACrC,eAAe,EAAE,UAAU;IAC3B,oBAAoB,EAAE,0BAA0B;IAChD,mBAAmB,EAAE,SAAS;IAE9B,WAAW,EAAE,uBAAuB;IACpC,cAAc,EAAE,6CAA6C;IAC7D,eAAe,EAAE,MAAM;IACvB,0BAA0B,EAAE,kCAAkC;IAC9D,2BAA2B,EAAE,wBAAwB;IACrD,gBAAgB,EAAE,uBAAuB;IACzC,mBAAmB,EAAE,qBAAqB;IAC1C,YAAY,EAAE,QAAQ;IAEtB,aAAa,EAAE,qBAAqB;IACpC,cAAc,EAAE,iBAAiB;IACjC,wBAAwB,EAAE,cAAc;IAExC,0BAA0B,EAAE,gBAAgB;IAC5C,oBAAoB,EAAE,UAAU;IAChC,uBAAuB,EAAE,yBAAyB;IAElD,mBAAmB,EAAE,SAAS;IAC9B,4BAA4B,EAAE,SAAS;IACvC,2BAA2B,EAAE,iBAAiB;IAC9C,6BAA6B,EAAE,UAAU;IACzC,4BAA4B,EAAE,gBAAgB;IAC9C,2BAA2B,EAAE,aAAa;IAC1C,sBAAsB,EAAE,sBAAsB;IAC9C,yBAAyB,EAAE,cAAc;IACzC,wBAAwB,EAAE,YAAY;IACtC,0BAA0B,EAAE,UAAU;IACtC,2BAA2B,EAAE,gBAAgB;IAE7C,uBAAuB,EAAE,qBAAqB;IAC9C,uBAAuB,EAAE,kBAAkB;IAC3C,sBAAsB,EAAE,SAAS;IACjC,qBAAqB,EAAE,eAAe;IACtC,wBAAwB,EAAE,MAAM;IAEhC,eAAe,EAAE,yCAAyC;IAC1D,eAAe,EAAE,uDAAuD;CACzE,CAAC;AAEF;;;;;;GAMG;AACH,SAAgB,SAAS,CACvB,OAAgB,EAChB,GAAW,EACX,YAAoC,EAAE;IAEtC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,aAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;IACnD,OAAO,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC;AAC3F,CAAC;AAED,kFAAkF;AAClF,SAAgB,YAAY,CAAC,MAAe;IAC1C,OAAO,EAAE,GAAG,aAAK,EAAE,GAAG,MAAM,EAAE,CAAC;AACjC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+export * from './appearance';
+export * from './protect';
+export * from './i18n';
+export * from './types';
+export * from './AtlasProvider';
+export * from './hooks';
+export * from './fapi';
+export * from './components';
+export { checkSession, handleSilentCallback } from '@atlasauth/js';
+export type { CheckSessionOptions, CheckSessionResult } from '@atlasauth/js';

package/dist/index.js

@@ -0,0 +1,31 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleSilentCallback = exports.checkSession = void 0;
+__exportStar(require("./appearance"), exports);
+__exportStar(require("./protect"), exports);
+__exportStar(require("./i18n"), exports);
+__exportStar(require("./types"), exports);
+__exportStar(require("./AtlasProvider"), exports);
+__exportStar(require("./hooks"), exports);
+__exportStar(require("./fapi"), exports);
+__exportStar(require("./components"), exports);
+// Cross-property SSO: the browser silent-check (hidden-iframe OIDC prompt=none),
+// surfaced first-class here from @atlasauth/js.
+var js_1 = require("@atlasauth/js");
+Object.defineProperty(exports, "checkSession", { enumerable: true, get: function () { return js_1.checkSession; } });
+Object.defineProperty(exports, "handleSilentCallback", { enumerable: true, get: function () { return js_1.handleSilentCallback; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,4CAA0B;AAC1B,yCAAuB;AACvB,0CAAwB;AACxB,kDAAgC;AAChC,0CAAwB;AACxB,yCAAuB;AACvB,+CAA6B;AAC7B,iFAAiF;AACjF,gDAAgD;AAChD,oCAAmE;AAA1D,kGAAA,YAAY,OAAA;AAAE,0GAAA,oBAAoB,OAAA"}