@atlasauth/react 0.1.0

package/dist/protect.d.ts

@@ -0,0 +1,18 @@
+/**
+ * §10.2 `<Protect permission="org:sys_memberships:manage">` — conditional
+ * rendering.
+ *
+ * The rule that makes this safe to ship: this is a RENDERING helper, never an
+ * authorization boundary. It decides what a user sees, and seeing is not doing.
+ * Anyone can open devtools and flip the condition; the only thing that stops
+ * them acting is the server checking the same permission on the request.
+ *
+ * That is worth stating loudly because the component reads like a guard, and a
+ * developer who believes it is one will eventually put a delete button behind
+ * it and no check behind the endpoint.
+ *
+ * The evaluation logic lives in `@atlasauth/authz` — the ONE primitive every SDK
+ * (backend, Next.js, React, React Native, JS) shares, so `<Protect>` here and
+ * `auth().has()` on the server judge a condition identically.
+ */
+export { type ProtectCondition, type ProtectOutcome, type ProtectReason, evaluate, hasFromClaims, } from '@atlasauth/authz';

package/dist/protect.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hasFromClaims = exports.evaluate = void 0;
+/**
+ * §10.2 `<Protect permission="org:sys_memberships:manage">` — conditional
+ * rendering.
+ *
+ * The rule that makes this safe to ship: this is a RENDERING helper, never an
+ * authorization boundary. It decides what a user sees, and seeing is not doing.
+ * Anyone can open devtools and flip the condition; the only thing that stops
+ * them acting is the server checking the same permission on the request.
+ *
+ * That is worth stating loudly because the component reads like a guard, and a
+ * developer who believes it is one will eventually put a delete button behind
+ * it and no check behind the endpoint.
+ *
+ * The evaluation logic lives in `@atlasauth/authz` — the ONE primitive every SDK
+ * (backend, Next.js, React, React Native, JS) shares, so `<Protect>` here and
+ * `auth().has()` on the server judge a condition identically.
+ */
+var authz_1 = require("@atlasauth/authz");
+Object.defineProperty(exports, "evaluate", { enumerable: true, get: function () { return authz_1.evaluate; } });
+Object.defineProperty(exports, "hasFromClaims", { enumerable: true, get: function () { return authz_1.hasFromClaims; } });
+//# sourceMappingURL=protect.js.map

package/dist/protect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protect.js","sourceRoot":"","sources":["../src/protect.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,0CAM0B;AAFxB,iGAAA,QAAQ,OAAA;AACR,sGAAA,aAAa,OAAA"}

package/dist/types.d.ts

@@ -0,0 +1,42 @@
+export interface SessionClaims {
+    sub: string;
+    sid: string;
+    exp: number;
+    org_id?: string;
+    org_slug?: string;
+    org_role?: string;
+    org_permissions?: string[];
+    mfa?: boolean;
+    [claim: string]: unknown;
+}
+export interface AtlasUser {
+    id: string;
+    first_name: string | null;
+    last_name: string | null;
+    username: string | null;
+    image_url: string | null;
+    public_metadata: Record<string, unknown>;
+    unsafe_metadata: Record<string, unknown>;
+    mfa_enabled: boolean;
+    has_password: boolean;
+    email_addresses?: Array<{
+        id: string;
+        email_address: string;
+        verified: boolean;
+        primary: boolean;
+    }>;
+}
+export interface AtlasOrganizationMembership {
+    role: string;
+    organization: {
+        id: string;
+        name: string;
+        slug: string;
+        image_url: string | null;
+    };
+}
+export interface AtlasSession {
+    id: string;
+    status: string;
+    last_active_organization_id: string | null;
+}

package/dist/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "@atlasauth/react",
+  "version": "0.1.0",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "dependencies": {
+    "@atlasauth/js": "0.1.0",
+    "@atlasauth/authz": "0.1.0"
+  },
+  "peerDependencies": {
+    "react": ">=18"
+  },
+  "devDependencies": {
+    "@types/react": "^18.3.12",
+    "react": "^18.3.1",
+    "typescript": "^5.6.3",
+    "vitest": "^2.1.4"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  }
+}