@atlasauth/react 0.1.17 → 0.1.19

package/dist/components.js

@@ -1,1229 +1,74 @@
 "use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SignedIn = SignedIn;
-exports.SignedOut = SignedOut;
-exports.AtlasLoading = AtlasLoading;
-exports.AtlasLoaded = AtlasLoaded;
-exports.Protect = Protect;
-exports.SignIn = SignIn;
-exports.useSignIn = useSignIn;
-exports.SignUp = SignUp;
-exports.UserButton = UserButton;
-exports.SignInButton = SignInButton;
-exports.SignUpButton = SignUpButton;
-exports.SignOutButton = SignOutButton;
-exports.RedirectToSignIn = RedirectToSignIn;
-exports.RedirectToSignUp = RedirectToSignUp;
-exports.MultisessionAppSupport = MultisessionAppSupport;
-exports.UserAvatar = UserAvatar;
-exports.useSignUp = useSignUp;
-exports.OrganizationSwitcher = OrganizationSwitcher;
-exports.useOrganizationList = useOrganizationList;
-exports.CreateOrganization = CreateOrganization;
-exports.OrganizationList = OrganizationList;
-exports.ActiveSessions = ActiveSessions;
-exports.ProfileCard = ProfileCard;
-exports.ManageMfa = ManageMfa;
-exports.ManagePasskeys = ManagePasskeys;
-exports.UserProfile = UserProfile;
-exports.OrganizationProfile = OrganizationProfile;
-exports.useWaitlist = useWaitlist;
-exports.Waitlist = Waitlist;
-exports.useReverification = useReverification;
-exports.useBilling = useBilling;
-exports.useCheckout = useCheckout;
-exports.useSubscription = useSubscription;
-exports.useInvoices = useInvoices;
-exports.usePaymentMethods = usePaymentMethods;
-exports.PricingTable = PricingTable;
-exports.Invoices = Invoices;
-exports.EmbeddedCheckout = EmbeddedCheckout;
-const jsx_runtime_1 = require("react/jsx-runtime");
-const react_1 = require("react");
-const js_1 = require("@atlasauth/js");
-const AtlasProvider_1 = require("./AtlasProvider");
-const fapi_1 = require("./fapi");
-const hooks_1 = require("./hooks");
-const appearance_1 = require("./appearance");
-const i18n_1 = require("./i18n");
-const protect_1 = require("./protect");
-/**
- * §10.2 components.
- *
- * `<SignIn/>` and `<SignUp/>` are "full multi-step flows driven entirely by the
- * server-side attempt status". That phrase is the design: this file contains no
- * decision about what comes next. It renders whatever `status` the server
- * returned, via the exhaustive mapping in @atlasauth/js — so adding a step to the
- * flow is a server change, and a client that has not shipped yet degrades to a
- * visible "needs an update" rather than a blank screen.
- */
-function useClass(appearanceKey, base) {
-    const { appearance } = (0, AtlasProvider_1.useAtlas)();
-    return (0, appearance_1.classFor)(appearanceKey, appearance, base);
-}
-function useText() {
-    const { catalog } = (0, AtlasProvider_1.useAtlas)();
-    return (key, vars) => (0, i18n_1.translate)(catalog, key, vars);
-}
-function SignedIn({ children }) {
-    const { isLoaded, isSignedIn } = (0, hooks_1.useUser)();
-    // Renders nothing while loading rather than flashing the signed-out branch.
-    if (!isLoaded || !isSignedIn)
-        return null;
-    return (0, jsx_runtime_1.jsx)(jsx_runtime_1.Fragment, { children: children });
-}
-function SignedOut({ children }) {
-    const { isLoaded, isSignedIn } = (0, hooks_1.useUser)();
-    if (!isLoaded || isSignedIn)
-        return null;
-    return (0, jsx_runtime_1.jsx)(jsx_runtime_1.Fragment, { children: children });
-}
-/** §10.2: render children only while the SDK is still loading. */
-function AtlasLoading({ children }) {
-    const { isLoaded } = (0, hooks_1.useUser)();
-    return isLoaded ? null : (0, jsx_runtime_1.jsx)(jsx_runtime_1.Fragment, { children: children });
-}
-/** §10.2: render children only once the SDK has finished loading — the
- * symmetric partner of {@link AtlasLoading}, so a consumer can show a spinner
- * and its resolved content without hand-rolling the inverse condition. */
-function AtlasLoaded({ children }) {
-    const { isLoaded } = (0, hooks_1.useUser)();
-    return isLoaded ? (0, jsx_runtime_1.jsx)(jsx_runtime_1.Fragment, { children: children }) : null;
-}
-/**
- * §10.2 `<Protect permission="…">`.
- *
- * A rendering helper, never an authorization boundary — anyone can flip the
- * condition in devtools. The server checking the same permission is what
- * actually stops them, and this component's job is only to avoid showing a
- * button that would fail.
- */
-function Protect({ children, fallback = null, ...condition }) {
-    const { claims, status } = (0, AtlasProvider_1.useAtlas)();
-    if (status === 'loading')
-        return null;
-    return (0, protect_1.evaluate)(claims, condition).allowed ? (0, jsx_runtime_1.jsx)(jsx_runtime_1.Fragment, { children: children }) : (0, jsx_runtime_1.jsx)(jsx_runtime_1.Fragment, { children: fallback });
-}
-/**
- * The server-driven flow shell.
- *
- * Every branch comes from `nextStep`, which is exhaustive — including the
- * `unknown` case, which renders an honest message instead of nothing.
- */
-function AttemptFlow({ attempt, onSubmit, busy, errors, titleKey, }) {
-    const t = useText();
-    const cardClass = useClass('card', 'atlas-card');
-    const titleClass = useClass('headerTitle', 'atlas-title');
-    const inputClass = useClass('formFieldInput', 'atlas-input');
-    const buttonClass = useClass('formButtonPrimary', 'atlas-button');
-    const errorClass = useClass('formFieldError', 'atlas-error');
-    const [values, setValues] = (0, react_1.useState)({});
-    const step = attempt ? (0, js_1.nextStep)(attempt) : { kind: 'collect_identifier' };
-    const field = (name, labelKey, type = 'text') => ((0, jsx_runtime_1.jsxs)("label", { className: "atlas-field", children: [(0, jsx_runtime_1.jsx)("span", { children: t(labelKey) }), (0, jsx_runtime_1.jsx)("input", { className: inputClass, type: type, value: values[name] ?? '', onChange: (event) => setValues((v) => ({ ...v, [name]: event.target.value })) }), errors
-                .filter((error) => error.param === name)
-                .map((error) => ((0, jsx_runtime_1.jsx)("span", { className: errorClass, children: error.message }, error.code)))] }, name));
-    const fields = () => {
-        switch (step.kind) {
-            case 'collect_identifier':
-                return [field('identifier', 'signIn.identifierLabel', 'email')];
-            case 'collect_first_factor':
-                return [field('password', 'signIn.passwordLabel', 'password')];
-            case 'collect_second_factor':
-                return [field('code', 'mfa.codeLabel')];
-            case 'enroll_second_factor':
-                /**
-                 * Two codes, not one. §5.6 wants consecutive codes so a phone with a
-                 * fast clock fails here rather than on every sign-in afterwards, and
-                 * asking for one would hide that failure until it was expensive.
-                 */
-                return [
-                    field('code', 'mfa.enrollFirstCodeLabel'),
-                    field('secondCode', 'mfa.enrollSecondCodeLabel'),
-                ];
-            case 'collect_email_code':
-                return [field('code', 'signIn.emailCodeLabel')];
-            case 'collect_new_password':
-                return [field('password', 'reset.newPasswordLabel', 'password')];
-            case 'await_oauth':
-                return [(0, jsx_runtime_1.jsx)("p", { children: t('signIn.magicLinkSent') }, "oauth")];
-            case 'done':
-                return [(0, jsx_runtime_1.jsx)("p", { children: t('signIn.checkOtherTab') }, "done")];
-            case 'restart':
-                return [(0, jsx_runtime_1.jsx)("p", { children: t('error.generic') }, "restart")];
-            default:
-                /**
-                 * A status this SDK version does not know. Saying so beats rendering
-                 * nothing, which is a blank login box the user cannot act on.
-                 */
-                return [
-                    (0, jsx_runtime_1.jsx)("p", { className: errorClass, children: t('error.generic') }, "unknown"),
-                ];
-        }
-    };
-    return ((0, jsx_runtime_1.jsxs)("div", { className: cardClass, children: [(0, jsx_runtime_1.jsx)("h1", { className: titleClass, children: t(titleKey) }), errors
-                .filter((error) => !error.param)
-                .map((error) => ((0, jsx_runtime_1.jsx)("p", { className: errorClass, role: "alert", children: error.message }, error.code))), (0, jsx_runtime_1.jsxs)("form", { onSubmit: (event) => {
-                    event.preventDefault();
-                    onSubmit(values);
-                }, children: [fields(), step.kind !== 'done' && step.kind !== 'await_oauth' ? ((0, jsx_runtime_1.jsx)("button", { className: buttonClass, disabled: busy, type: "submit", children: t('signIn.submit') })) : null] })] }));
-}
-/**
- * Drives the flow through `advance`, which owns the step-to-endpoint mapping.
- * This component never decides what comes next — it renders the status the
- * server returned and posts whatever the driver says the current step needs.
- */
-function useFlow() {
-    const { publishableKey, frontendApi, reload, pendingAttempt } = (0, AtlasProvider_1.useAtlas)();
-    // Seeded from a redirect that came back mid-flow (e.g. OAuth needing a second
-    // factor), so the user resumes at the demanded step instead of starting over.
-    const [state, setState] = (0, react_1.useState)(() => (0, fapi_1.flowFromPending)(pendingAttempt));
-    const client = (0, react_1.useMemo)(() => new fapi_1.FapiClient({ publishableKey, baseUrl: frontendApi }), [frontendApi, publishableKey]);
-    // Apply a driver result to the UI, and — on completion — exchange the one-time
-    // ticket (§7.1) for cookies over a same-origin request (FAPI is cross-origin
-    // to the app and cannot set the cookie on the completion response itself),
-    // THEN re-boot so the rest of the app sees a signed-in user. Shared by the
-    // password/flow `submit` and the native (Google) button, so both complete a
-    // sign-in identically.
-    const finish = (0, react_1.useCallback)(async (next) => {
-        setState(next);
-        if (next.attempt?.status === 'complete') {
-            if (next.ticket) {
-                await client.post('/v1/client/tickets/exchange', {
-                    attempt_id: next.attempt.id,
-                    ticket: next.ticket,
-                });
-            }
-            await reload();
-        }
-    }, [client, reload]);
-    const submit = (0, react_1.useCallback)((values) => {
-        void (async () => {
-            setState((current) => ({ ...current, busy: true, errors: [] }));
-            const next = await (0, fapi_1.advance)(client, state, values);
-            await finish(next);
-        })();
-    }, [client, finish, state]);
-    /** §5.3: collect a sign-in completed by a link opened on another device. */
-    (0, react_1.useEffect)(() => {
-        if (!(0, fapi_1.shouldKeepPolling)(state))
-            return;
-        const timer = setInterval(() => {
-            void (async () => {
-                const { state: next, ticket } = await (0, fapi_1.pollAttempt)(client, state);
-                setState(next);
-                if (!ticket || !next.attempt)
-                    return;
-                // The ticket is exchanged by a normal request, so no session token has
-                // ever appeared in a URL.
-                await client.post('/v1/client/tickets/exchange', {
-                    attempt_id: next.attempt.id,
-                    ticket,
-                });
-                await reload();
-            })();
-        }, 2_000);
-        return () => clearInterval(timer);
-    }, [client, reload, state]);
-    return { state, submit, client, finish };
-}
-/** Google's multi-color "G" mark — trusted, static, first-party SVG. */
-function GoogleMark() {
-    return ((0, jsx_runtime_1.jsxs)("svg", { className: "atlas-social-icon", width: "18", height: "18", viewBox: "0 0 24 24", "aria-hidden": "true", focusable: "false", children: [(0, jsx_runtime_1.jsx)("path", { fill: "#4285F4", d: "M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z" }), (0, jsx_runtime_1.jsx)("path", { fill: "#34A853", d: "M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z" }), (0, jsx_runtime_1.jsx)("path", { fill: "#FBBC05", d: "M5.84 14.1c-.22-.66-.35-1.36-.35-2.1s.13-1.44.35-2.1V7.06H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.94l3.66-2.84z" }), (0, jsx_runtime_1.jsx)("path", { fill: "#EA4335", d: "M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.06l3.66 2.84C6.71 7.31 9.14 5.38 12 5.38z" })] }));
-}
-/**
- * §6 the native "Sign in with Google" button (GSI id_token flow — no secret, no
- * redirect). Discovers whether Google native sign-in is enabled for the instance
- * via `/v1/client/environment`; if so it mints a single-use replay-binding nonce
- * and renders OUR OWN themed button, backed by Google's real (but transparent)
- * GSI button overlaid on top. The user sees a button that inherits the app's
- * appearance (the `socialButton` element key / `atlas-social-button` class, so
- * `appearance.elements.socialButton` and the design tokens theme it like every
- * other control) — NOT Google's fixed, unstyleable button. On a returned
- * credential the id_token is posted to the native endpoint and completes through
- * the shared `finish`. Renders nothing when Google native sign-in isn't enabled.
- *
- * One-Tap stays off unless `oneTap` is set (see {@link FlowProps.googleOneTap}).
- */
-function GoogleSignInButton({ client, onComplete, oneTap, }) {
-    const ref = (0, react_1.useRef)(null);
-    const socialButtonClass = useClass('socialButton', 'atlas-social-button');
-    const [clientId, setClientId] = (0, react_1.useState)(null);
-    // Discover the Google client_id (exposed only for native-enabled providers).
-    (0, react_1.useEffect)(() => {
-        let alive = true;
-        void (async () => {
-            const res = await client.get('/v1/client/environment');
-            const google = res.data?.social_providers?.find((p) => p.provider === 'google' && p.native && p.client_id && p.allow_sign_in !== false);
-            if (alive)
-                setClientId(google?.client_id ?? null);
-        })();
-        return () => {
-            alive = false;
-        };
-    }, [client]);
-    // Overlay Google's invisible button on our themed one once client_id is known.
-    (0, react_1.useEffect)(() => {
-        const wrapper = ref.current;
-        if (!clientId || !wrapper)
-            return;
-        let cancelled = false;
-        let handle;
-        void (async () => {
-            const nonce = await (0, js_1.mintNativeNonce)(client, 'google');
-            if (cancelled || !nonce || !ref.current)
-                return;
-            handle = await (0, js_1.renderGoogleOverlayButton)({
-                wrapper,
-                clientId,
-                nonce,
-                oneTap: oneTap ?? false,
-                onCredential: (idToken) => {
-                    void (async () => {
-                        const next = await (0, js_1.nativeSignIn)(client, { provider: 'google', idToken, nonce });
-                        await onComplete(next);
-                    })();
-                },
-            });
-        })();
-        return () => {
-            cancelled = true;
-            handle?.destroy();
-        };
-    }, [client, clientId, oneTap, onComplete]);
-    if (!clientId)
-        return null;
-    // Our styled button; GSI's transparent real button is overlaid onto this node.
-    // Defaults are driven by the appearance design tokens (`--atlas-*` set on
-    // `.atlas-root`), so the button matches the app's theme out of the box AND
-    // updates when a customer sets `appearance.variables`; `appearance.elements.socialButton`
-    // (appended to the class) still layers CSS on top. minHeight matches GSI's
-    // own button height so the transparent overlay lines up over the visible one.
-    return ((0, jsx_runtime_1.jsxs)("div", { ref: ref, className: socialButtonClass, "data-atlas": "google-signin", "data-atlas-provider": "google", role: "button", tabIndex: 0, style: DEFAULT_SOCIAL_BUTTON_STYLE, children: [(0, jsx_runtime_1.jsx)(GoogleMark, {}), (0, jsx_runtime_1.jsx)("span", { className: "atlas-social-label", children: "Continue with Google" })] }));
-}
-/** Theme-token defaults so the social button looks right with no customer CSS. */
-const DEFAULT_SOCIAL_BUTTON_STYLE = {
-    display: 'flex',
-    alignItems: 'center',
-    justifyContent: 'center',
-    gap: '8px',
-    width: '100%',
-    boxSizing: 'border-box',
-    minHeight: '40px',
-    padding: '10px 16px',
-    border: '1px solid var(--atlas-color-border, #e4e4e9)',
-    borderRadius: 'var(--atlas-border-radius, 8px)',
-    background: 'var(--atlas-color-background, #ffffff)',
-    color: 'var(--atlas-color-text, #1c1c1f)',
-    fontFamily: 'var(--atlas-font-family, inherit)',
-    fontWeight: 500,
-    cursor: 'pointer',
-    userSelect: 'none',
-};
-/** Human label for a provider key, for the redirect button text. */
-const PROVIDER_LABEL = {
-    github: 'GitHub',
-    gitlab: 'GitLab',
-    microsoft: 'Microsoft',
-    apple: 'Apple',
-    facebook: 'Facebook',
-    discord: 'Discord',
-    linkedin: 'LinkedIn',
-    google: 'Google',
-    x: 'X',
-    twitter: 'X',
-    slack: 'Slack',
-    spotify: 'Spotify',
-    twitch: 'Twitch',
-    notion: 'Notion',
-};
-function providerLabel(p) {
-    return PROVIDER_LABEL[p] ?? p.charAt(0).toUpperCase() + p.slice(1).replace(/[_-]/g, ' ');
-}
 /**
- * §6 all enabled social sign-in providers, native-first.
+ * §10.2 components — public aggregation point for the @atlasauth/react component
+ * library.
  *
- * A provider with an in-page native flow (Google today) renders its secretless
- * button — no redirect, no new tab, no stranded initiating tab. Every OTHER
- * enabled provider (GitHub, Microsoft, Discord, …) renders a redirect button that
- * starts the OAuth flow and returns to THIS page, where `<AtlasProvider>` exchanges
- * the returned ticket for a session. Previously `<SignIn>` rendered only the
- * Google button, so an instance's other social providers never appeared.
- */
-function SocialSignInButtons({ client, onComplete, oneTap, }) {
-    const socialButtonClass = useClass('socialButton', 'atlas-social-button');
-    const [redirectProviders, setRedirectProviders] = (0, react_1.useState)([]);
-    (0, react_1.useEffect)(() => {
-        let alive = true;
-        void (async () => {
-            const res = await client.get('/v1/client/environment');
-            const list = (res.data?.social_providers ?? [])
-                .filter((p) => p.allow_sign_in !== false)
-                // Google renders as the native GSI button below. Any other native provider
-                // gets its own in-page button in a later pass; the rest use redirect.
-                .filter((p) => p.provider !== 'google')
-                .map((p) => p.provider);
-            if (alive)
-                setRedirectProviders(list);
-        })();
-        return () => {
-            alive = false;
-        };
-    }, [client]);
-    const startRedirect = (0, react_1.useCallback)((provider) => {
-        void (async () => {
-            const res = await (0, js_1.startOauthRedirect)(client, {
-                provider,
-                redirectUrl: typeof window !== 'undefined' ? window.location.href : '/',
-            });
-            if (res && typeof window !== 'undefined')
-                window.location.href = res.authorizationUrl;
-        })();
-    }, [client]);
-    return ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsx)(GoogleSignInButton, { client: client, onComplete: onComplete, oneTap: oneTap }), redirectProviders.map((provider) => ((0, jsx_runtime_1.jsx)("div", { className: socialButtonClass, "data-atlas": "social-signin", "data-atlas-provider": provider, role: "button", tabIndex: 0, style: DEFAULT_SOCIAL_BUTTON_STYLE, onClick: () => startRedirect(provider), onKeyDown: (e) => {
-                    if (e.key === 'Enter' || e.key === ' ')
-                        startRedirect(provider);
-                }, children: (0, jsx_runtime_1.jsxs)("span", { className: "atlas-social-label", children: ["Continue with ", providerLabel(provider)] }) }, provider)))] }));
-}
-function SignIn(props = {}) {
-    const { state, submit, client, finish } = useFlow();
-    return ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsx)(AttemptFlow, { attempt: state.attempt, busy: state.busy, errors: state.errors, titleKey: "signIn.title", onSubmit: submit }), !state.attempt ? ((0, jsx_runtime_1.jsx)(SocialSignInButtons, { client: client, onComplete: finish, oneTap: props.googleOneTap })) : null] }));
-}
-/**
- * §6 headless native sign-in, for a consumer that renders its OWN Google button
- * (or Apple / Facebook Limited Login). Mint a nonce with `mintNonce(provider)`,
- * hand it to the provider SDK, then pass the resulting id_token to
- * `signInWithIdToken` — it posts to the native endpoint, exchanges the ticket
- * for cookies and re-boots the app on completion, returning the flow state so
- * the caller can react to `needs_second_factor` etc.
- */
-function useSignIn() {
-    const { publishableKey, frontendApi, reload } = (0, AtlasProvider_1.useAtlas)();
-    const client = (0, react_1.useMemo)(() => new fapi_1.FapiClient({ publishableKey, baseUrl: frontendApi }), [frontendApi, publishableKey]);
-    const mintNonce = (0, react_1.useCallback)((provider) => (0, js_1.mintNativeNonce)(client, provider), [client]);
-    const signInWithIdToken = (0, react_1.useCallback)(async (input) => {
-        const next = await (0, js_1.nativeSignIn)(client, input);
-        if (next.attempt?.status === 'complete' && next.ticket) {
-            await client.post('/v1/client/tickets/exchange', {
-                attempt_id: next.attempt.id,
-                ticket: next.ticket,
-            });
-            await reload();
-        }
-        return next;
-    }, [client, reload]);
-    return { mintNonce, signInWithIdToken };
-}
-function SignUp(_props = {}) {
-    const { state, submit } = useFlow();
-    return ((0, jsx_runtime_1.jsx)(AttemptFlow, { attempt: state.attempt, busy: state.busy, errors: state.errors, titleKey: "signUp.title", onSubmit: submit }));
-}
-/** A container for custom `<UserButton.Action>` / `<UserButton.Link>` rows. Renders nothing itself. */
-function UserButtonMenuItems(_props) {
-    return null;
-}
-/** A custom action row inside `<UserButton.MenuItems>`. Renders nothing itself. */
-function UserButtonAction(_props) {
-    return null;
-}
-/** A custom link row inside `<UserButton.MenuItems>`. Renders nothing itself. */
-function UserButtonLink(_props) {
-    return null;
-}
-/** Walk a children tree and collect the extension descriptors matching `types`. */
-function collectByType(children, match, out = []) {
-    react_1.Children.forEach(children, (child) => {
-        if (!(0, react_1.isValidElement)(child))
-            return;
-        const hit = match(child);
-        if (hit)
-            out.push(hit);
-        // Descend so `<Action>` inside `<MenuItems>` (or any wrapper) is still found.
-        const nested = child.props?.children;
-        if (nested)
-            collectByType(nested, match, out);
-    });
-    return out;
-}
-function collectMenuEntries(children) {
-    return collectByType(children, (el) => {
-        if (el.type === UserButtonAction)
-            return { kind: 'action', props: el.props };
-        if (el.type === UserButtonLink)
-            return { kind: 'link', props: el.props };
-        return undefined;
-    });
-}
-/**
- * The signed-in user's avatar + dropdown. Pass `<UserButton.MenuItems>` children
- * to add custom `<UserButton.Action>` / `<UserButton.Link>` rows above sign-out.
- */
-function UserButton({ children } = {}) {
-    const { user } = (0, hooks_1.useUser)();
-    const { signOut } = (0, hooks_1.useAuth)();
-    const { session } = (0, hooks_1.useSession)();
-    const { sessions, setActive } = (0, hooks_1.useSessionList)();
-    const t = useText();
-    const [open, setOpen] = (0, react_1.useState)(false);
-    const avatarClass = useClass('avatar', 'atlas-avatar');
-    const menuClass = useClass('menu', 'atlas-menu');
-    const itemClass = useClass('menuItem', 'atlas-menu-item');
-    const custom = (0, react_1.useMemo)(() => collectMenuEntries(children), [children]);
-    if (!user)
-        return null;
-    const label = [user.first_name, user.last_name].filter(Boolean).join(' ') || user.username || '';
-    const nameOf = (u) => [u.first_name, u.last_name].filter(Boolean).join(' ') || u.username || '';
-    // §L1 the OTHER accounts signed in on this browser (switchable in one click).
-    const others = sessions.filter((s) => s.id !== session?.id);
-    return ((0, jsx_runtime_1.jsxs)("div", { className: "atlas-user-button", children: [(0, jsx_runtime_1.jsx)("button", { className: avatarClass, onClick: () => setOpen((o) => !o), "aria-expanded": open, children: user.image_url ? (0, jsx_runtime_1.jsx)("img", { alt: "", src: user.image_url }) : (0, jsx_runtime_1.jsx)("span", { children: label.slice(0, 1) }) }), open ? ((0, jsx_runtime_1.jsxs)("div", { className: menuClass, role: "menu", children: [(0, jsx_runtime_1.jsx)("span", { className: itemClass, children: label }), others.map((s) => ((0, jsx_runtime_1.jsxs)("button", { className: itemClass, role: "menuitem", "data-atlas": "switch-session", onClick: () => {
-                            setOpen(false);
-                            void setActive({ session: s.id });
-                        }, children: [s.user.image_url ? ((0, jsx_runtime_1.jsx)("img", { alt: "", src: s.user.image_url, width: 16, height: 16 })) : null, t('userButton.switchTo'), " ", nameOf(s.user)] }, s.id))), custom.map((entry, i) => entry.kind === 'action' ? ((0, jsx_runtime_1.jsxs)("button", { className: itemClass, role: "menuitem", onClick: () => {
-                            setOpen(false);
-                            entry.props.onClick?.();
-                        }, children: [entry.props.labelIcon, entry.props.label] }, i)) : ((0, jsx_runtime_1.jsxs)("a", { className: itemClass, role: "menuitem", href: entry.props.href, children: [entry.props.labelIcon, entry.props.label] }, i))), (0, jsx_runtime_1.jsx)("button", { className: itemClass, role: "menuitem", onClick: () => void signOut(), children: t('userButton.signOut') })] })) : null] }));
-}
-UserButton.MenuItems = UserButtonMenuItems;
-UserButton.Action = UserButtonAction;
-UserButton.Link = UserButtonLink;
-/** Navigate the whole document. Guarded for SSR; `replace` for redirect helpers. */
-function navigateTo(url, replace = false) {
-    if (typeof window === 'undefined')
-        return;
-    if (replace)
-        window.location.replace(url);
-    else
-        window.location.assign(url);
-}
-/** Append `?redirect_url=` (where to land after auth), preserving any existing query. */
-function withRedirect(url, redirectUrl) {
-    if (!redirectUrl)
-        return url;
-    const sep = url.includes('?') ? '&' : '?';
-    return `${url}${sep}redirect_url=${encodeURIComponent(redirectUrl)}`;
-}
-/** Clerk-parity ergonomic: a button that sends the user to your sign-in page. */
-function SignInButton({ url = '/sign-in', redirectUrl, children, className }) {
-    const t = useText();
-    return ((0, jsx_runtime_1.jsx)("button", { type: "button", className: className, onClick: () => navigateTo(withRedirect(url, redirectUrl)), children: children ?? t('signIn.title') }));
-}
-/** Clerk-parity ergonomic: a button that sends the user to your sign-up page. */
-function SignUpButton({ url = '/sign-up', redirectUrl, children, className }) {
-    const t = useText();
-    return ((0, jsx_runtime_1.jsx)("button", { type: "button", className: className, onClick: () => navigateTo(withRedirect(url, redirectUrl)), children: children ?? t('signIn.signUpLink') }));
-}
-/** Clerk-parity ergonomic: a button that signs the user out, then optionally redirects. */
-function SignOutButton({ redirectUrl, children, className, }) {
-    const { signOut } = (0, hooks_1.useAuth)();
-    const t = useText();
-    return ((0, jsx_runtime_1.jsx)("button", { type: "button", className: className, onClick: () => {
-            void signOut().then(() => {
-                if (redirectUrl)
-                    navigateTo(redirectUrl);
-            });
-        }, children: children ?? t('userButton.signOut') }));
-}
-/** Declarative "render this to send the user to sign-in" (Clerk `<RedirectToSignIn>`). */
-function RedirectToSignIn({ url = '/sign-in', redirectUrl }) {
-    (0, react_1.useEffect)(() => navigateTo(withRedirect(url, redirectUrl), true), [url, redirectUrl]);
-    return null;
-}
-/** Declarative "render this to send the user to sign-up" (Clerk `<RedirectToSignUp>`). */
-function RedirectToSignUp({ url = '/sign-up', redirectUrl }) {
-    (0, react_1.useEffect)(() => navigateTo(withRedirect(url, redirectUrl), true), [url, redirectUrl]);
-    return null;
-}
-/**
- * §L1 (Clerk `<MultisessionAppSupport>`). Re-mounts its subtree whenever the
- * ACTIVE account changes, so per-user state held in component state or memo
- * caches is discarded on a `setActive({ session })` switch rather than bleeding
- * one account's data into the next. Keying on the session id (plus a stable key
- * while signed out) is the whole mechanism — React unmounts the old tree and
- * mounts a fresh one when the key changes.
- */
-function MultisessionAppSupport({ children }) {
-    const { session } = (0, hooks_1.useSession)();
-    return (0, jsx_runtime_1.jsx)("div", { "data-atlas": "multisession-root", children: children }, session?.id ?? 'signed-out');
-}
-/**
- * The signed-in user's avatar (image, or initials fallback) — the standalone
- * renderer `<UserButton>` uses internally, exported for reuse (Clerk `<UserAvatar>`).
- */
-function UserAvatar({ size = 32, className }) {
-    const { user } = (0, hooks_1.useUser)();
-    const avatarClass = useClass('avatar', 'atlas-avatar');
-    if (!user)
-        return null;
-    const label = [user.first_name, user.last_name].filter(Boolean).join(' ') || user.username || '';
-    const style = { width: size, height: size };
-    return ((0, jsx_runtime_1.jsx)("span", { className: className ?? avatarClass, style: style, "data-atlas": "user-avatar", children: user.image_url ? (0, jsx_runtime_1.jsx)("img", { alt: "", src: user.image_url, width: size, height: size }) : (0, jsx_runtime_1.jsx)("span", { children: label.slice(0, 1).toUpperCase() }) }));
-}
-/**
- * §5.1 headless sign-up — the sign-up counterpart of {@link useSignIn}. Starts a
- * sign-up attempt and returns the resulting flow (usually `needs_email_verification`;
- * the shared `advance` then drives the code to completion), reloading the provider
- * when a sign-up completes with a session ticket.
- */
-function useSignUp() {
-    const { publishableKey, frontendApi, reload } = (0, AtlasProvider_1.useAtlas)();
-    const client = (0, react_1.useMemo)(() => new fapi_1.FapiClient({ publishableKey, baseUrl: frontendApi }), [frontendApi, publishableKey]);
-    const create = (0, react_1.useCallback)(async (input) => {
-        const next = await (0, js_1.startSignUp)(client, input);
-        if (next.attempt?.status === 'complete' && next.ticket) {
-            await client.post('/v1/client/tickets/exchange', {
-                attempt_id: next.attempt.id,
-                ticket: next.ticket,
-            });
-            await reload();
-        }
-        return next;
-    }, [client, reload]);
-    return { create };
-}
-function OrganizationSwitcher() {
-    const { memberships, organization, setActive } = (0, hooks_1.useOrganization)();
-    const t = useText();
-    const menuClass = useClass('menu', 'atlas-menu');
-    const itemClass = useClass('menuItem', 'atlas-menu-item');
-    return ((0, jsx_runtime_1.jsxs)("div", { className: menuClass, children: [(0, jsx_runtime_1.jsx)("button", { className: itemClass, onClick: () => void setActive(null), children: t('organization.personal') }), memberships.map((membership) => ((0, jsx_runtime_1.jsx)("button", { className: itemClass, disabled: membership.organization.id === organization?.id, onClick: () => void setActive(membership.organization.id), children: membership.organization.name }, membership.organization.id)))] }));
-}
-/**
- * Clerk-parity `useOrganizationList()`. The memberships the signed-in user
- * belongs to, plus a `createOrganization(name)` that creates one through FAPI and
- * re-boots the provider so the new membership appears everywhere. `memberships`
- * comes straight from {@link useOrganization} (the same list `<OrganizationSwitcher>`
- * renders), so there is one source of truth for what the user belongs to.
- */
-function useOrganizationList() {
-    const { memberships } = (0, hooks_1.useOrganization)();
-    const { reload } = (0, AtlasProvider_1.useAtlas)();
-    const client = useMeClient();
-    const createOrganization = (0, react_1.useCallback)(async (name) => {
-        const res = await client.post('/v1/client/organizations', {
-            name,
-        });
-        // Re-boot so the new membership lands in `memberships` for the whole app,
-        // not just this hook's caller.
-        await reload();
-        return res.data;
-    }, [client, reload]);
-    return { memberships, createOrganization };
-}
-/**
- * Clerk-parity `<CreateOrganization>`. A small name-and-submit form that creates
- * an organization via {@link useOrganizationList} and immediately makes it the
- * active org, so the user drops straight into the org they just made. Styled like
- * the `<SignUp>` card. `onCreate` fires with the created org for a caller that
- * wants to route afterwards.
- */
-function CreateOrganization({ onCreate, } = {}) {
-    const { createOrganization } = useOrganizationList();
-    const { setActive } = (0, hooks_1.useOrganization)();
-    const t = useText();
-    const cardClass = useClass('card', 'atlas-card');
-    const titleClass = useClass('headerTitle', 'atlas-title');
-    const inputClass = useClass('formFieldInput', 'atlas-input');
-    const buttonClass = useClass('formButtonPrimary', 'atlas-button');
-    const errorClass = useClass('formFieldError', 'atlas-error');
-    const [name, setName] = (0, react_1.useState)('');
-    const [busy, setBusy] = (0, react_1.useState)(false);
-    const [error, setError] = (0, react_1.useState)(null);
-    const submit = async () => {
-        const trimmed = name.trim();
-        if (!trimmed)
-            return;
-        setBusy(true);
-        setError(null);
-        try {
-            const org = await createOrganization(trimmed);
-            if (!org) {
-                setError(t('error.generic'));
-                return;
-            }
-            await setActive(org.id);
-            setName('');
-            onCreate?.(org);
-        }
-        catch {
-            setError(t('error.generic'));
-        }
-        finally {
-            setBusy(false);
-        }
-    };
-    return ((0, jsx_runtime_1.jsxs)("form", { className: cardClass, "data-atlas": "create-organization", onSubmit: (event) => {
-            event.preventDefault();
-            void submit();
-        }, children: [(0, jsx_runtime_1.jsx)("h2", { className: titleClass, children: t('organization.createTitle') }), (0, jsx_runtime_1.jsxs)("label", { className: "atlas-field", children: [(0, jsx_runtime_1.jsx)("span", { children: t('organization.nameLabel') }), (0, jsx_runtime_1.jsx)("input", { className: inputClass, value: name, onChange: (event) => setName(event.target.value) })] }), error ? ((0, jsx_runtime_1.jsx)("p", { className: errorClass, role: "alert", children: error })) : null, (0, jsx_runtime_1.jsx)("button", { className: buttonClass, type: "submit", disabled: busy || !name.trim(), children: t('organization.create') })] }));
-}
-/**
- * Clerk-parity `<OrganizationList>`. Every organization the user belongs to as a
- * button that switches to it (mirroring `<OrganizationSwitcher>`'s markup), plus
- * an inline `<CreateOrganization>` so a user with no orgs — or who wants another —
- * can make one without leaving the list.
- */
-function OrganizationList() {
-    const { memberships, organization, setActive } = (0, hooks_1.useOrganization)();
-    const t = useText();
-    const menuClass = useClass('menu', 'atlas-menu');
-    const itemClass = useClass('menuItem', 'atlas-menu-item');
-    return ((0, jsx_runtime_1.jsxs)("div", { className: menuClass, "data-atlas": "organization-list", children: [memberships.map((membership) => ((0, jsx_runtime_1.jsx)("button", { className: itemClass, disabled: membership.organization.id === organization?.id, onClick: () => void setActive(membership.organization.id), children: membership.organization.name }, membership.organization.id))), (0, jsx_runtime_1.jsx)("span", { className: itemClass, "data-atlas": "organization-list-divider", children: t('organization.orCreate') }), (0, jsx_runtime_1.jsx)(CreateOrganization, {})] }));
-}
-/** §2 A FapiClient bound to this instance, for the `/v1/client/me` + session
- *  account-management calls (all cookie-authenticated, credentials:'include'). */
-function useMeClient() {
-    const { publishableKey, frontendApi } = (0, AtlasProvider_1.useAtlas)();
-    return (0, react_1.useMemo)(() => new fapi_1.FapiClient({ publishableKey, baseUrl: frontendApi }), [publishableKey, frontendApi]);
-}
-/**
- * §2 The signed-in user's active devices, with per-device and "sign out everyone
- * else" revocation. A drop-in for a settings page — the composable half of the
- * post-login account surface an integrator needs the moment login is Atlas.
- */
-function ActiveSessions() {
-    const client = useMeClient();
-    const cardClass = useClass('card', 'atlas-card');
-    const [sessions, setSessions] = (0, react_1.useState)([]);
-    const [busy, setBusy] = (0, react_1.useState)(false);
-    const load = (0, react_1.useCallback)(async () => {
-        const res = await client.get('/v1/client/sessions');
-        setSessions(res.data?.data ?? []);
-    }, [client]);
-    (0, react_1.useEffect)(() => {
-        void load();
-    }, [load]);
-    const revoke = (0, react_1.useCallback)(async (id) => {
-        setBusy(true);
-        await client.post(`/v1/client/sessions/${id}/revoke`).catch(() => undefined);
-        await load();
-        setBusy(false);
-    }, [client, load]);
-    const revokeOthers = (0, react_1.useCallback)(async () => {
-        setBusy(true);
-        await client.post('/v1/client/sessions/revoke_all').catch(() => undefined);
-        await load();
-        setBusy(false);
-    }, [client, load]);
-    const fmt = (ms) => new Date(ms).toLocaleString();
-    return ((0, jsx_runtime_1.jsxs)("section", { className: cardClass, "data-atlas": "active-sessions", children: [(0, jsx_runtime_1.jsx)("h2", { children: "Active devices" }), (0, jsx_runtime_1.jsx)("ul", { children: sessions.map((s) => ((0, jsx_runtime_1.jsxs)("li", { children: [(0, jsx_runtime_1.jsx)("strong", { children: s.device_label ?? [s.browser, s.os].filter(Boolean).join(' on ') ?? 'Unknown device' }), s.current ? (0, jsx_runtime_1.jsx)("em", { children: " \u2014 this device" }) : null, (0, jsx_runtime_1.jsx)("div", { children: [s.location, fmt(s.last_active_at)].filter(Boolean).join(' · ') }), !s.current ? ((0, jsx_runtime_1.jsx)("button", { type: "button", disabled: busy, onClick: () => void revoke(s.id), children: "Sign out" })) : null] }, s.id))) }), sessions.some((s) => !s.current) ? ((0, jsx_runtime_1.jsx)("button", { type: "button", disabled: busy, onClick: () => void revokeOthers(), children: "Sign out of all other devices" })) : null] }));
-}
-/**
- * §2 The signed-in user's profile — name (editable) and email addresses. Another
- * composable piece of the account surface; writes go to `PATCH /v1/client/me` and
- * re-boot the provider so the rest of the app sees the change.
- */
-function ProfileCard() {
-    const { user } = (0, hooks_1.useUser)();
-    const { reload } = (0, AtlasProvider_1.useAtlas)();
-    const client = useMeClient();
-    const cardClass = useClass('card', 'atlas-card');
-    const [firstName, setFirstName] = (0, react_1.useState)('');
-    const [lastName, setLastName] = (0, react_1.useState)('');
-    const [saving, setSaving] = (0, react_1.useState)(false);
-    (0, react_1.useEffect)(() => {
-        setFirstName(user?.first_name ?? '');
-        setLastName(user?.last_name ?? '');
-    }, [user?.first_name, user?.last_name]);
-    if (!user)
-        return null;
-    const save = async () => {
-        setSaving(true);
-        await client
-            .request('/v1/client/me', {
-            method: 'PATCH',
-            body: JSON.stringify({ first_name: firstName, last_name: lastName }),
-        })
-            .catch(() => undefined);
-        await reload();
-        setSaving(false);
-    };
-    return ((0, jsx_runtime_1.jsxs)("section", { className: cardClass, "data-atlas": "profile-card", children: [(0, jsx_runtime_1.jsx)("h2", { children: "Profile" }), (0, jsx_runtime_1.jsxs)("label", { children: ["First name", (0, jsx_runtime_1.jsx)("input", { value: firstName, onChange: (e) => setFirstName(e.target.value) })] }), (0, jsx_runtime_1.jsxs)("label", { children: ["Last name", (0, jsx_runtime_1.jsx)("input", { value: lastName, onChange: (e) => setLastName(e.target.value) })] }), (0, jsx_runtime_1.jsx)("button", { type: "button", disabled: saving, onClick: () => void save(), children: "Save" }), (0, jsx_runtime_1.jsx)("ul", { "data-atlas": "emails", children: (user.email_addresses ?? []).map((email) => ((0, jsx_runtime_1.jsxs)("li", { children: [email.email_address, email.verified ? null : (0, jsx_runtime_1.jsx)("em", { children: " \u2014 unverified" }), email.primary ? (0, jsx_runtime_1.jsx)("em", { children: " \u2014 primary" }) : null] }, email.id))) })] }));
-}
-/**
- * §2 Manage two-factor authentication (authenticator app / TOTP). The full
- * enrollment ceremony — start (secret + otpauth URI), verify with a live code,
- * then the one-time backup codes — plus turn-off, in one composable drop-in, so a
- * team never rebuilds the FAPI dance to put 2FA in their own settings page. The
- * secret + `otpauth://` URI are shown for scan-or-manual entry (render a QR from
- * the URI if you like — kept dependency-free here).
- */
-function ManageMfa() {
-    const client = useMeClient();
-    const cardClass = useClass('card', 'atlas-card');
-    const [factors, setFactors] = (0, react_1.useState)([]);
-    const [remaining, setRemaining] = (0, react_1.useState)(null);
-    const [enroll, setEnroll] = (0, react_1.useState)(null);
-    const [codes, setCodes] = (0, react_1.useState)([]);
-    const [backupCodes, setBackupCodes] = (0, react_1.useState)(null);
-    const [error, setError] = (0, react_1.useState)(null);
-    const [busy, setBusy] = (0, react_1.useState)(false);
-    const load = (0, react_1.useCallback)(async () => {
-        const res = await client.get('/v1/client/me/mfa');
-        setFactors(res.data?.data ?? []);
-        setRemaining(res.data?.backup_codes_remaining ?? null);
-    }, [client]);
-    (0, react_1.useEffect)(() => {
-        void load();
-    }, [load]);
-    const totp = factors.find((f) => f.type === 'totp' && f.verified);
-    const startEnroll = async () => {
-        setError(null);
-        setBackupCodes(null);
-        setBusy(true);
-        const res = await client.post('/v1/client/me/mfa/totp');
-        setBusy(false);
-        if (!res.ok || !res.data) {
-            setError(res.errors[0]?.message ?? 'Could not start enrollment.');
-            return;
-        }
-        const required = res.data.required_codes || 1;
-        setEnroll({ id: res.data.id, secret: res.data.secret, uri: res.data.uri, requiredCodes: required });
-        setCodes(Array.from({ length: required }, () => ''));
-    };
-    const verify = async () => {
-        if (!enroll)
-            return;
-        setError(null);
-        setBusy(true);
-        const res = await client.post(`/v1/client/me/mfa/totp/${enroll.id}/verify`, { codes });
-        setBusy(false);
-        if (!res.ok) {
-            setError(res.errors[0]?.message ?? 'That code was not accepted.');
-            return;
-        }
-        setBackupCodes(res.data?.backup_codes ?? []);
-        setEnroll(null);
-        await load();
-    };
-    const disable = async (id) => {
-        setBusy(true);
-        await client.request(`/v1/client/me/mfa/${id}`, { method: 'DELETE' }).catch(() => undefined);
-        await load();
-        setBusy(false);
-    };
-    return ((0, jsx_runtime_1.jsxs)("section", { className: cardClass, "data-atlas": "manage-mfa", children: [(0, jsx_runtime_1.jsx)("h2", { children: "Two-factor authentication" }), totp ? ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsxs)("p", { children: ["Authenticator app is on.", remaining != null ? ` ${remaining} backup codes remaining.` : ''] }), (0, jsx_runtime_1.jsx)("button", { type: "button", disabled: busy, onClick: () => void disable(totp.id), children: "Turn off" })] })) : enroll ? ((0, jsx_runtime_1.jsxs)("div", { children: [(0, jsx_runtime_1.jsx)("p", { children: "Add this to your authenticator app \u2014 scan the QR you render from the URI, or enter the key:" }), (0, jsx_runtime_1.jsx)("code", { "data-atlas": "totp-secret", children: enroll.secret }), (0, jsx_runtime_1.jsx)("p", { children: (0, jsx_runtime_1.jsx)("a", { href: enroll.uri, children: "Open in an authenticator app" }) }), codes.map((c, i) => ((0, jsx_runtime_1.jsx)("input", { inputMode: "numeric", autoComplete: "one-time-code", value: c, placeholder: enroll.requiredCodes > 1 ? `Code ${i + 1}` : 'Enter the 6-digit code', onChange: (e) => setCodes((prev) => prev.map((v, j) => (j === i ? e.target.value : v))) }, i))), (0, jsx_runtime_1.jsx)("button", { type: "button", disabled: busy, onClick: () => void verify(), children: "Verify & enable" })] })) : backupCodes ? ((0, jsx_runtime_1.jsxs)("div", { children: [(0, jsx_runtime_1.jsx)("p", { children: "Two-factor is on. Save these backup codes now \u2014 they are shown only once:" }), (0, jsx_runtime_1.jsx)("ul", { "data-atlas": "backup-codes", children: backupCodes.map((c) => ((0, jsx_runtime_1.jsx)("li", { children: (0, jsx_runtime_1.jsx)("code", { children: c }) }, c))) })] })) : ((0, jsx_runtime_1.jsx)("button", { type: "button", disabled: busy, onClick: () => void startEnroll(), children: "Enable authenticator app" })), error ? ((0, jsx_runtime_1.jsx)("p", { "data-atlas": "mfa-error", role: "alert", children: error })) : null] }));
-}
-/**
- * §2 Manage passkeys (WebAuthn). Lists the user's registered credentials and runs
- * the full add ceremony — `POST /passkeys/begin` → `navigator.credentials.create`
- * (via the SDK's {@link createPasskey}) → `POST /passkeys/finish` — plus rename-free
- * removal, in one composable drop-in. Nothing renders the "Add" affordance when the
- * runtime has no WebAuthn support, so it degrades cleanly on older browsers.
- */
-function ManagePasskeys() {
-    const client = useMeClient();
-    const cardClass = useClass('card', 'atlas-card');
-    const [passkeys, setPasskeys] = (0, react_1.useState)([]);
-    const [name, setName] = (0, react_1.useState)('');
-    const [error, setError] = (0, react_1.useState)(null);
-    const [busy, setBusy] = (0, react_1.useState)(false);
-    const supported = (0, js_1.passkeysSupported)();
-    const load = (0, react_1.useCallback)(async () => {
-        const res = await client.get('/v1/client/me/passkeys');
-        setPasskeys(res.data?.data ?? []);
-    }, [client]);
-    (0, react_1.useEffect)(() => {
-        void load();
-    }, [load]);
-    const add = async () => {
-        setError(null);
-        setBusy(true);
-        try {
-            const begin = await client.post('/v1/client/me/passkeys/begin');
-            if (!begin.ok || !begin.data) {
-                setError(begin.errors[0]?.message ?? 'Could not start passkey setup.');
-                return;
-            }
-            const body = await (0, js_1.createPasskey)(begin.data, { name: name.trim() || undefined });
-            const finish = await client.post('/v1/client/me/passkeys/finish', body);
-            if (!finish.ok) {
-                setError(finish.errors[0]?.message ?? 'Could not save the passkey.');
-                return;
-            }
-            setName('');
-            await load();
-        }
-        catch {
-            // A cancelled or timed-out WebAuthn prompt throws — treat as a no-op, not an error banner.
-        }
-        finally {
-            setBusy(false);
-        }
-    };
-    const remove = async (id) => {
-        setBusy(true);
-        await client.request(`/v1/client/me/passkeys/${id}`, { method: 'DELETE' }).catch(() => undefined);
-        await load();
-        setBusy(false);
-    };
-    const fmt = (ms) => (ms ? new Date(ms).toLocaleDateString() : null);
-    return ((0, jsx_runtime_1.jsxs)("section", { className: cardClass, "data-atlas": "manage-passkeys", children: [(0, jsx_runtime_1.jsx)("h2", { children: "Passkeys" }), (0, jsx_runtime_1.jsx)("ul", { "data-atlas": "passkey-list", children: passkeys.map((pk) => ((0, jsx_runtime_1.jsxs)("li", { children: [(0, jsx_runtime_1.jsx)("strong", { children: pk.name || 'Passkey' }), (0, jsx_runtime_1.jsx)("div", { children: [pk.last_used_at ? `Last used ${fmt(pk.last_used_at)}` : `Added ${fmt(pk.created_at)}`]
-                                .filter(Boolean)
-                                .join(' · ') }), (0, jsx_runtime_1.jsx)("button", { type: "button", disabled: busy, onClick: () => void remove(pk.id), children: "Remove" })] }, pk.id))) }), supported ? ((0, jsx_runtime_1.jsxs)("div", { "data-atlas": "passkey-add", children: [(0, jsx_runtime_1.jsx)("input", { value: name, placeholder: "Name this device (optional)", onChange: (e) => setName(e.target.value) }), (0, jsx_runtime_1.jsx)("button", { type: "button", disabled: busy, onClick: () => void add(), children: "Add a passkey" })] })) : ((0, jsx_runtime_1.jsx)("p", { children: "Passkeys are not supported in this browser." })), error ? ((0, jsx_runtime_1.jsx)("p", { "data-atlas": "passkey-error", role: "alert", children: error })) : null] }));
-}
-/** A custom content tab inside `<UserProfile>`. Renders nothing on its own. */
-function UserProfilePage(_props) {
-    return null;
-}
-/** A custom external-link tab inside `<UserProfile>`. Renders nothing on its own. */
-function UserProfileLink(_props) {
-    return null;
-}
-function UserProfile({ children } = {}) {
-    const { user } = (0, hooks_1.useUser)();
-    const t = useText();
-    const cardClass = useClass('card', 'atlas-card');
-    const tabClass = useClass('menuItem', 'atlas-tab');
-    const pages = (0, react_1.useMemo)(() => collectByType(children, (el) => el.type === UserProfilePage ? el.props : undefined), [children]);
-    const links = (0, react_1.useMemo)(() => collectByType(children, (el) => el.type === UserProfileLink ? el.props : undefined), [children]);
-    // 0 = the built-in account page; 1..N = custom pages.
-    const [tab, setTab] = (0, react_1.useState)(0);
-    if (!user)
-        return null;
-    return ((0, jsx_runtime_1.jsxs)("div", { className: cardClass, "data-atlas": "user-profile", children: [(0, jsx_runtime_1.jsx)("h1", { children: t('userProfile.title') }), pages.length || links.length ? ((0, jsx_runtime_1.jsxs)("nav", { className: "atlas-tabs", role: "tablist", children: [(0, jsx_runtime_1.jsx)("button", { className: tabClass, role: "tab", "aria-selected": tab === 0, onClick: () => setTab(0), children: t('userProfile.title') }), pages.map((p, i) => ((0, jsx_runtime_1.jsxs)("button", { className: tabClass, role: "tab", "aria-selected": tab === i + 1, onClick: () => setTab(i + 1), children: [p.labelIcon, p.label] }, `p${i}`))), links.map((l, i) => ((0, jsx_runtime_1.jsxs)("a", { className: tabClass, href: l.url, children: [l.labelIcon, l.label] }, `l${i}`)))] })) : null, tab === 0 ? ((0, jsx_runtime_1.jsxs)("div", { "data-atlas": "user-profile-account", role: "tabpanel", children: [(0, jsx_runtime_1.jsx)(ProfileCard, {}), (0, jsx_runtime_1.jsx)(ManageMfa, {}), (0, jsx_runtime_1.jsx)(ManagePasskeys, {}), (0, jsx_runtime_1.jsx)(ActiveSessions, {})] })) : ((0, jsx_runtime_1.jsx)("div", { "data-atlas": "user-profile-custom", role: "tabpanel", children: pages[tab - 1]?.children }))] }));
-}
-UserProfile.Page = UserProfilePage;
-UserProfile.Link = UserProfileLink;
-function OrganizationProfile() {
-    const { organization, membership } = (0, hooks_1.useOrganization)();
-    const t = useText();
-    const cardClass = useClass('card', 'atlas-card');
-    if (!organization)
-        return null;
-    return ((0, jsx_runtime_1.jsxs)("div", { className: cardClass, children: [(0, jsx_runtime_1.jsx)("h1", { children: organization.name }), (0, jsx_runtime_1.jsxs)("p", { children: [t('organization.roleLabel'), ": ", membership?.role] }), (0, jsx_runtime_1.jsx)(Protect, { permission: "org:sys_memberships:manage", children: (0, jsx_runtime_1.jsx)("button", { children: t('organization.invite') }) })] }));
-}
-/**
- * Clerk-parity `useWaitlist()`. Headless join: `join(email)` posts the address to
- * the waitlist endpoint and hands back the raw {@link FapiClient} response, so a
- * caller rendering its own form decides what to show on success vs. failure.
- */
-function useWaitlist() {
-    const client = useMeClient();
-    const join = (0, react_1.useCallback)((email) => client.post('/v1/client/waitlist', { email_address: email }), [client]);
-    return { join };
-}
-/**
- * Clerk-parity `<Waitlist>`. An email-and-submit card (styled like `<SignUp>`)
- * that calls {@link useWaitlist}. A 200 swaps the form for a success message; any
- * other response surfaces the server's message as a field error, so a bad or
- * duplicate address is reported in place rather than silently swallowed.
- */
-function Waitlist() {
-    const { join } = useWaitlist();
-    const t = useText();
-    const cardClass = useClass('card', 'atlas-card');
-    const titleClass = useClass('headerTitle', 'atlas-title');
-    const inputClass = useClass('formFieldInput', 'atlas-input');
-    const buttonClass = useClass('formButtonPrimary', 'atlas-button');
-    const errorClass = useClass('formFieldError', 'atlas-error');
-    const [email, setEmail] = (0, react_1.useState)('');
-    const [busy, setBusy] = (0, react_1.useState)(false);
-    const [joined, setJoined] = (0, react_1.useState)(false);
-    const [error, setError] = (0, react_1.useState)(null);
-    const submit = async () => {
-        setBusy(true);
-        setError(null);
-        const res = await join(email);
-        setBusy(false);
-        if (res.ok) {
-            setJoined(true);
-            return;
-        }
-        setError(res.errors[0]?.message ?? t('error.generic'));
-    };
-    return ((0, jsx_runtime_1.jsxs)("form", { className: cardClass, "data-atlas": "waitlist", onSubmit: (event) => {
-            event.preventDefault();
-            void submit();
-        }, children: [(0, jsx_runtime_1.jsx)("h1", { className: titleClass, children: t('waitlist.title') }), joined ? ((0, jsx_runtime_1.jsx)("p", { "data-atlas": "waitlist-success", children: t('waitlist.success') })) : ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsxs)("label", { className: "atlas-field", children: [(0, jsx_runtime_1.jsx)("span", { children: t('waitlist.emailLabel') }), (0, jsx_runtime_1.jsx)("input", { className: inputClass, type: "email", value: email, onChange: (event) => setEmail(event.target.value) }), error ? ((0, jsx_runtime_1.jsx)("span", { className: errorClass, role: "alert", children: error })) : null] }), (0, jsx_runtime_1.jsx)("button", { className: buttonClass, type: "submit", disabled: busy, children: t('waitlist.submit') })] }))] }));
-}
-/**
- * Clerk-parity `useReverification()`. A thin, headless wrapper over the EXISTING
- * step-up path (`@atlasauth/js`'s {@link reauthenticate} → `POST /v1/client/me/reauthenticate`)
- * — it invents no server endpoint.
+ * The implementations live in per-component sibling files (`sign-in.tsx`,
+ * `sign-up.tsx`, `user-button.tsx`, `organization.tsx`, `account.tsx`,
+ * `auth-buttons.tsx`, `control-components.tsx`, `billing.tsx`, `waitlist.tsx`,
+ * `reverification.tsx`, and the shared `flow.tsx` / `components-shared.tsx`).
+ * This module re-exports every one of them so the package's public API — what
+ * `index.ts` re-exports via `export * from './components'` — stays byte-for-byte
+ * identical after the split. Import sites (`@atlasauth/react`) are unaffected.
  *
- * Wrap a security-sensitive action with `withReverification(action)`. It runs the
- * action; if that throws or returns a `STEP_UP_REQUIRED` (reauthentication-required)
- * signal, it flips `needsReverification` true and parks the call. The caller renders
- * its own prompt, gathers a credential, and calls `completeReverification(input)`,
- * which re-authenticates in place and retries the action ONCE — resolving the
- * original `withReverification` promise with the retry's result. `cancelReverification`
- * abandons the parked call. A wrong password throws out of `completeReverification`
- * with the parked call intact, so the prompt can let the user try again.
- */
-function useReverification() {
-    const { publishableKey, frontendApi } = (0, AtlasProvider_1.useAtlas)();
-    const [needsReverification, setNeedsReverification] = (0, react_1.useState)(false);
-    const pending = (0, react_1.useRef)(null);
-    // A STEP_UP_REQUIRED signal, whether it arrived as a thrown Error carrying a
-    // `.code`, or as a returned FapiClient response whose `errors[]` names it.
-    const isStepUp = (candidate) => {
-        if (!candidate || typeof candidate !== 'object')
-            return false;
-        if (candidate.code === 'STEP_UP_REQUIRED')
-            return true;
-        const errors = candidate.errors;
-        return Array.isArray(errors) && errors.some((error) => error?.code === 'STEP_UP_REQUIRED');
-    };
-    const park = (action) => new Promise((resolve, reject) => {
-        pending.current = { action, resolve: resolve, reject };
-        setNeedsReverification(true);
-    });
-    const withReverification = (0, react_1.useCallback)(async (action) => {
-        try {
-            const result = await action();
-            return isStepUp(result) ? await park(action) : result;
-        }
-        catch (err) {
-            if (isStepUp(err))
-                return await park(action);
-            throw err;
-        }
-    }, []);
-    const completeReverification = (0, react_1.useCallback)(async (input) => {
-        // Throws on a bad credential; the parked call is left intact so the prompt
-        // can retry, and we neither clear it nor drop the flag until this resolves.
-        await (0, js_1.reauthenticate)(input, { api: frontendApi, publishableKey });
-        const job = pending.current;
-        pending.current = null;
-        setNeedsReverification(false);
-        if (!job)
-            return;
-        try {
-            job.resolve(await job.action());
-        }
-        catch (err) {
-            job.reject(err);
-        }
-    }, [frontendApi, publishableKey]);
-    const cancelReverification = (0, react_1.useCallback)(() => {
-        const job = pending.current;
-        pending.current = null;
-        setNeedsReverification(false);
-        job?.reject(new Error('Reverification cancelled.'));
-    }, []);
-    return { withReverification, needsReverification, completeReverification, cancelReverification };
-}
-/** The current page URL, guarded for SSR. */
-function currentUrl() {
-    return typeof window === 'undefined' ? undefined : window.location.href;
-}
-/**
- * §commerce headless billing (Clerk `useCheckout`/subscription hooks combined).
- * Loads the instance's plans and — when signed in — the subject's subscription,
- * and exposes `checkout()` and `openPortal()`. Pass `{ orgId }` to operate on an
- * organization the user administers instead of on the user.
- */
-function useBilling(opts = {}) {
-    const { status } = (0, AtlasProvider_1.useAtlas)();
-    const client = useMeClient();
-    const orgId = opts.orgId;
-    const [plans, setPlans] = (0, react_1.useState)([]);
-    const [subscription, setSubscription] = (0, react_1.useState)(null);
-    const [invoices, setInvoices] = (0, react_1.useState)([]);
-    const [paymentMethod, setPaymentMethod] = (0, react_1.useState)(null);
-    const [isLoaded, setIsLoaded] = (0, react_1.useState)(false);
-    const reload = (0, react_1.useCallback)(async () => {
-        const orgQuery = orgId ? `?org_id=${encodeURIComponent(orgId)}` : '';
-        const plansRes = await client.get('/v1/client/billing/plans');
-        if (plansRes.ok && plansRes.data)
-            setPlans(plansRes.data.data ?? []);
-        // Subscription, invoices and payment method are subject-scoped — signed in only.
-        if (status === 'signed_in') {
-            const [subRes, invRes, pmRes] = await Promise.all([
-                client.get(`/v1/client/billing/subscription${orgQuery}`),
-                client.get(`/v1/client/billing/invoices${orgQuery}`),
-                client.get(`/v1/client/billing/payment_method${orgQuery}`),
-            ]);
-            if (subRes.ok)
-                setSubscription(subRes.data ?? null);
-            if (invRes.ok && invRes.data)
-                setInvoices(invRes.data.data ?? []);
-            if (pmRes.ok)
-                setPaymentMethod(pmRes.data?.payment_method ?? null);
-        }
-        else {
-            setSubscription(null);
-            setInvoices([]);
-            setPaymentMethod(null);
-        }
-        setIsLoaded(true);
-    }, [client, status, orgId]);
-    (0, react_1.useEffect)(() => {
-        void reload();
-    }, [reload]);
-    const checkout = (0, react_1.useCallback)(async (params) => {
-        const res = await client.post('/v1/client/billing/checkout', {
-            plan_id: params.planId,
-            org_id: params.orgId ?? orgId,
-            success_url: params.successUrl ?? currentUrl(),
-            cancel_url: params.cancelUrl ?? currentUrl(),
-        });
-        if (res.ok && res.data?.url && params.redirect !== false)
-            navigateTo(res.data.url);
-        return res;
-    }, [client, orgId]);
-    const openPortal = (0, react_1.useCallback)(async (params = {}) => {
-        const res = await client.post('/v1/client/billing/portal', {
-            org_id: params.orgId ?? orgId,
-            return_url: params.returnUrl ?? currentUrl(),
-        });
-        if (res.ok && res.data?.url && params.redirect !== false)
-            navigateTo(res.data.url);
-        return res;
-    }, [client, orgId]);
-    return { isLoaded, plans, subscription, invoices, paymentMethod, checkout, openPortal, reload };
-}
-/** §commerce Clerk-parity alias — just the `checkout` action from {@link useBilling}. */
-function useCheckout(opts = {}) {
-    const { checkout } = useBilling(opts);
-    return { checkout };
-}
-/** §commerce Clerk-parity alias — the subject's subscription from {@link useBilling}. */
-function useSubscription(opts = {}) {
-    const { isLoaded, subscription, openPortal, reload } = useBilling(opts);
-    return { isLoaded, subscription, openPortal, reload };
-}
-/** §commerce Clerk-parity alias — the subject's invoices from {@link useBilling}. */
-function useInvoices(opts = {}) {
-    const { isLoaded, invoices, reload } = useBilling(opts);
-    return { isLoaded, invoices, reload };
-}
-/** §commerce Clerk-parity alias — the subject's default payment method + Portal to change it. */
-function usePaymentMethods(opts = {}) {
-    const { isLoaded, paymentMethod, openPortal, reload } = useBilling(opts);
-    return { isLoaded, paymentMethod, openPortal, reload };
-}
-/** Format a minor-unit amount (cents) as a currency string, best-effort. */
-function formatPrice(amount, currency) {
-    try {
-        return new Intl.NumberFormat(undefined, { style: 'currency', currency }).format(amount / 100);
-    }
-    catch {
-        return `${(amount / 100).toFixed(2)} ${currency.toUpperCase()}`;
-    }
-}
-/**
- * §commerce (Clerk `<PricingTable>`). Renders the instance's plans as cards with
- * price + features and a subscribe button that starts a real Stripe Checkout.
- * The plan the subject is currently on is marked as current (its button is
- * disabled and an "Manage billing" action opens the Billing Portal instead).
- */
-function PricingTable({ orgId } = {}) {
-    const { isLoaded, plans, subscription, checkout, openPortal } = useBilling({ orgId });
-    const { status } = (0, AtlasProvider_1.useAtlas)();
-    const t = useText();
-    const cardClass = useClass('card', 'atlas-card');
-    const buttonClass = useClass('formButtonPrimary', 'atlas-button');
-    const [busyPlan, setBusyPlan] = (0, react_1.useState)(null);
-    const currentPlanId = subscription?.plan?.id ?? null;
-    if (!isLoaded)
-        return (0, jsx_runtime_1.jsx)("div", { "data-atlas": "pricing-table", "aria-busy": "true" });
-    return ((0, jsx_runtime_1.jsx)("div", { className: "atlas-pricing-table", "data-atlas": "pricing-table", children: plans.map((plan) => {
-            const isCurrent = plan.id === currentPlanId;
-            return ((0, jsx_runtime_1.jsxs)("div", { className: cardClass, "data-atlas": "pricing-plan", "data-current": isCurrent, children: [(0, jsx_runtime_1.jsx)("h3", { children: plan.name }), (0, jsx_runtime_1.jsxs)("p", { className: "atlas-price", children: [formatPrice(plan.amount, plan.currency), (0, jsx_runtime_1.jsxs)("span", { className: "atlas-interval", children: [" / ", plan.interval] })] }), plan.features.length ? ((0, jsx_runtime_1.jsx)("ul", { children: plan.features.map((f, i) => ((0, jsx_runtime_1.jsx)("li", { children: f }, i))) })) : null, isCurrent ? ((0, jsx_runtime_1.jsx)("button", { type: "button", className: buttonClass, "data-atlas": "manage-billing", onClick: () => void openPortal(), children: t('commerce.manage') })) : ((0, jsx_runtime_1.jsx)("button", { type: "button", className: buttonClass, disabled: status !== 'signed_in' || busyPlan === plan.id, onClick: () => {
-                            setBusyPlan(plan.id);
-                            void checkout({ planId: plan.id }).finally(() => setBusyPlan(null));
-                        }, children: t('commerce.subscribe') }))] }, plan.id));
-        }) }));
-}
-/**
- * §commerce (Clerk `<Invoices>`). The subject's billing history — number, status,
- * amount, and a link to Stripe's hosted invoice / PDF. Renders nothing until
- * loaded, and an empty state when there are no invoices yet.
- */
-function Invoices({ orgId } = {}) {
-    const { isLoaded, invoices } = useInvoices({ orgId });
-    const t = useText();
-    const cardClass = useClass('card', 'atlas-card');
-    if (!isLoaded)
-        return (0, jsx_runtime_1.jsx)("div", { "data-atlas": "invoices", "aria-busy": "true" });
-    return ((0, jsx_runtime_1.jsxs)("div", { className: cardClass, "data-atlas": "invoices", children: [(0, jsx_runtime_1.jsx)("h3", { children: t('commerce.invoices') }), invoices.length === 0 ? ((0, jsx_runtime_1.jsx)("p", { "data-atlas": "invoices-empty", children: t('commerce.noInvoices') })) : ((0, jsx_runtime_1.jsx)("ul", { children: invoices.map((inv) => ((0, jsx_runtime_1.jsxs)("li", { "data-atlas": "invoice", "data-status": inv.status, children: [(0, jsx_runtime_1.jsx)("span", { children: inv.number ?? inv.id }), ' ', (0, jsx_runtime_1.jsx)("span", { children: formatPrice(inv.amount_paid || inv.amount_due, inv.currency) }), ' ', (0, jsx_runtime_1.jsx)("span", { children: inv.status }), ' ', inv.hosted_invoice_url ? ((0, jsx_runtime_1.jsx)("a", { href: inv.hosted_invoice_url, target: "_blank", rel: "noreferrer", children: t('commerce.viewInvoice') })) : null] }, inv.id))) }))] }));
-}
-/** Lazily inject Stripe.js once and resolve the global `Stripe` factory. */
-let stripeJsPromise = null;
-function loadStripeJs() {
-    if (typeof window === 'undefined')
-        return Promise.resolve(null);
-    const w = window;
-    if (w.Stripe)
-        return Promise.resolve(w.Stripe);
-    if (stripeJsPromise)
-        return stripeJsPromise;
-    stripeJsPromise = new Promise((resolve, reject) => {
-        const script = document.createElement('script');
-        script.src = 'https://js.stripe.com/v3';
-        script.async = true;
-        script.onload = () => resolve(window.Stripe ?? null);
-        script.onerror = () => reject(new Error('Failed to load Stripe.js'));
-        document.head.appendChild(script);
-    });
-    return stripeJsPromise;
-}
-/**
- * §commerce (Clerk `<EmbeddedCheckout>`). In-page checkout for a plan: mounts
- * Stripe's own Embedded Checkout iframe — Stripe.js owns the card fields, so no
- * PCI-scoped data ever touches Atlas. Fetches the instance's Stripe publishable
- * key from `/billing/config`; when embedded checkout is not configured it renders
- * `fallback` (default: a hosted-redirect button) rather than a broken frame.
+ * `<SignIn/>` and `<SignUp/>` are "full multi-step flows driven entirely by the
+ * server-side attempt status": no client here decides what comes next; each step
+ * renders whatever `status` the server returned, via the exhaustive mapping in
+ * @atlasauth/js. See `flow.tsx` for that shell.
  */
-function EmbeddedCheckout({ planId, orgId, returnUrl, fallback, }) {
-    const client = useMeClient();
-    const { checkout } = useBilling({ orgId });
-    const t = useText();
-    const containerRef = (0, react_1.useRef)(null);
-    const [unavailable, setUnavailable] = (0, react_1.useState)(false);
-    const [error, setError] = (0, react_1.useState)(null);
-    (0, react_1.useEffect)(() => {
-        let cancelled = false;
-        let embedded = null;
-        void (async () => {
-            // 1) Is embedded checkout configured on this instance?
-            const cfg = await client.get('/v1/client/billing/config');
-            const pk = cfg.ok ? cfg.data?.stripe_publishable_key : null;
-            if (!pk) {
-                if (!cancelled)
-                    setUnavailable(true);
-                return;
-            }
-            // 2) Create an embedded Checkout Session → client_secret.
-            const res = await client.post('/v1/client/billing/checkout', {
-                plan_id: planId,
-                org_id: orgId,
-                ui_mode: 'embedded',
-                return_url: returnUrl ?? currentUrl(),
-            });
-            if (!res.ok || !res.data?.client_secret) {
-                if (!cancelled)
-                    setError(res.errors[0]?.message ?? t('error.generic'));
-                return;
-            }
-            // 3) Mount Stripe's Embedded Checkout.
-            const factory = (await loadStripeJs());
-            if (!factory || cancelled)
-                return;
-            const stripe = factory(pk);
-            const instance = await stripe.initEmbeddedCheckout({ clientSecret: res.data.client_secret });
-            if (cancelled) {
-                instance.destroy();
-                return;
-            }
-            embedded = instance;
-            if (containerRef.current)
-                instance.mount(containerRef.current);
-        })();
-        return () => {
-            cancelled = true;
-            try {
-                embedded?.destroy();
-            }
-            catch {
-                /* already gone */
-            }
-        };
-        // planId/orgId/returnUrl identify the session to create; client is stable.
-    }, [client, planId, orgId, returnUrl, t]);
-    if (unavailable) {
-        return ((0, jsx_runtime_1.jsx)(jsx_runtime_1.Fragment, { children: fallback ?? ((0, jsx_runtime_1.jsx)("button", { type: "button", "data-atlas": "checkout-fallback", onClick: () => void checkout({ planId, orgId }), children: t('commerce.subscribe') })) }));
-    }
-    return ((0, jsx_runtime_1.jsxs)("div", { "data-atlas": "embedded-checkout", children: [error ? (0, jsx_runtime_1.jsx)("p", { role: "alert", children: error }) : null, (0, jsx_runtime_1.jsx)("div", { ref: containerRef })] }));
-}
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EmbeddedCheckout = exports.Invoices = exports.PricingTable = exports.usePaymentMethods = exports.useInvoices = exports.useSubscription = exports.useCheckout = exports.useBilling = exports.useReverification = exports.Waitlist = exports.useWaitlist = exports.UserProfile = exports.ManagePasskeys = exports.ManageMfa = exports.ProfileCard = exports.ActiveSessions = exports.OrganizationProfile = exports.OrganizationList = exports.CreateOrganization = exports.useOrganizationList = exports.OrganizationSwitcher = exports.RedirectToSignUp = exports.RedirectToSignIn = exports.SignOutButton = exports.SignUpButton = exports.SignInButton = exports.UserAvatar = exports.UserButton = exports.useSignUp = exports.SignUp = exports.useSignIn = exports.SocialSignInButton = exports.SignIn = exports.MultisessionAppSupport = exports.Protect = exports.AtlasLoaded = exports.AtlasLoading = exports.SignedOut = exports.SignedIn = void 0;
+// Control / conditional-rendering components.
+var control_components_1 = require("./control-components");
+Object.defineProperty(exports, "SignedIn", { enumerable: true, get: function () { return control_components_1.SignedIn; } });
+Object.defineProperty(exports, "SignedOut", { enumerable: true, get: function () { return control_components_1.SignedOut; } });
+Object.defineProperty(exports, "AtlasLoading", { enumerable: true, get: function () { return control_components_1.AtlasLoading; } });
+Object.defineProperty(exports, "AtlasLoaded", { enumerable: true, get: function () { return control_components_1.AtlasLoaded; } });
+Object.defineProperty(exports, "Protect", { enumerable: true, get: function () { return control_components_1.Protect; } });
+Object.defineProperty(exports, "MultisessionAppSupport", { enumerable: true, get: function () { return control_components_1.MultisessionAppSupport; } });
+var sign_in_1 = require("./sign-in");
+Object.defineProperty(exports, "SignIn", { enumerable: true, get: function () { return sign_in_1.SignIn; } });
+Object.defineProperty(exports, "SocialSignInButton", { enumerable: true, get: function () { return sign_in_1.SocialSignInButton; } });
+Object.defineProperty(exports, "useSignIn", { enumerable: true, get: function () { return sign_in_1.useSignIn; } });
+var sign_up_1 = require("./sign-up");
+Object.defineProperty(exports, "SignUp", { enumerable: true, get: function () { return sign_up_1.SignUp; } });
+Object.defineProperty(exports, "useSignUp", { enumerable: true, get: function () { return sign_up_1.useSignUp; } });
+var user_button_1 = require("./user-button");
+Object.defineProperty(exports, "UserButton", { enumerable: true, get: function () { return user_button_1.UserButton; } });
+Object.defineProperty(exports, "UserAvatar", { enumerable: true, get: function () { return user_button_1.UserAvatar; } });
+var auth_buttons_1 = require("./auth-buttons");
+Object.defineProperty(exports, "SignInButton", { enumerable: true, get: function () { return auth_buttons_1.SignInButton; } });
+Object.defineProperty(exports, "SignUpButton", { enumerable: true, get: function () { return auth_buttons_1.SignUpButton; } });
+Object.defineProperty(exports, "SignOutButton", { enumerable: true, get: function () { return auth_buttons_1.SignOutButton; } });
+Object.defineProperty(exports, "RedirectToSignIn", { enumerable: true, get: function () { return auth_buttons_1.RedirectToSignIn; } });
+Object.defineProperty(exports, "RedirectToSignUp", { enumerable: true, get: function () { return auth_buttons_1.RedirectToSignUp; } });
+// Organizations.
+var organization_1 = require("./organization");
+Object.defineProperty(exports, "OrganizationSwitcher", { enumerable: true, get: function () { return organization_1.OrganizationSwitcher; } });
+Object.defineProperty(exports, "useOrganizationList", { enumerable: true, get: function () { return organization_1.useOrganizationList; } });
+Object.defineProperty(exports, "CreateOrganization", { enumerable: true, get: function () { return organization_1.CreateOrganization; } });
+Object.defineProperty(exports, "OrganizationList", { enumerable: true, get: function () { return organization_1.OrganizationList; } });
+Object.defineProperty(exports, "OrganizationProfile", { enumerable: true, get: function () { return organization_1.OrganizationProfile; } });
+var account_1 = require("./account");
+Object.defineProperty(exports, "ActiveSessions", { enumerable: true, get: function () { return account_1.ActiveSessions; } });
+Object.defineProperty(exports, "ProfileCard", { enumerable: true, get: function () { return account_1.ProfileCard; } });
+Object.defineProperty(exports, "ManageMfa", { enumerable: true, get: function () { return account_1.ManageMfa; } });
+Object.defineProperty(exports, "ManagePasskeys", { enumerable: true, get: function () { return account_1.ManagePasskeys; } });
+Object.defineProperty(exports, "UserProfile", { enumerable: true, get: function () { return account_1.UserProfile; } });
+// Waitlist.
+var waitlist_1 = require("./waitlist");
+Object.defineProperty(exports, "useWaitlist", { enumerable: true, get: function () { return waitlist_1.useWaitlist; } });
+Object.defineProperty(exports, "Waitlist", { enumerable: true, get: function () { return waitlist_1.Waitlist; } });
+// Step-up reverification.
+var reverification_1 = require("./reverification");
+Object.defineProperty(exports, "useReverification", { enumerable: true, get: function () { return reverification_1.useReverification; } });
+var billing_1 = require("./billing");
+Object.defineProperty(exports, "useBilling", { enumerable: true, get: function () { return billing_1.useBilling; } });
+Object.defineProperty(exports, "useCheckout", { enumerable: true, get: function () { return billing_1.useCheckout; } });
+Object.defineProperty(exports, "useSubscription", { enumerable: true, get: function () { return billing_1.useSubscription; } });
+Object.defineProperty(exports, "useInvoices", { enumerable: true, get: function () { return billing_1.useInvoices; } });
+Object.defineProperty(exports, "usePaymentMethods", { enumerable: true, get: function () { return billing_1.usePaymentMethods; } });
+Object.defineProperty(exports, "PricingTable", { enumerable: true, get: function () { return billing_1.PricingTable; } });
+Object.defineProperty(exports, "Invoices", { enumerable: true, get: function () { return billing_1.Invoices; } });
+Object.defineProperty(exports, "EmbeddedCheckout", { enumerable: true, get: function () { return billing_1.EmbeddedCheckout; } });
 //# sourceMappingURL=components.js.map