@atlasauth/react 0.1.17 → 0.1.19

package/dist/flow.js

@@ -0,0 +1,319 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AttemptFlow = AttemptFlow;
+exports.useFlow = useFlow;
+exports.SocialSignInButtons = SocialSignInButtons;
+const jsx_runtime_1 = require("react/jsx-runtime");
+const react_1 = require("react");
+const js_1 = require("@atlasauth/js");
+const AtlasProvider_1 = require("./AtlasProvider");
+const fapi_1 = require("./fapi");
+const components_shared_1 = require("./components-shared");
+/**
+ * The server-driven flow shell.
+ *
+ * Every branch comes from `nextStep`, which is exhaustive — including the
+ * `unknown` case, which renders an honest message instead of nothing.
+ */
+function AttemptFlow({ attempt, onSubmit, busy, errors, titleKey, hideTitle, }) {
+    const t = (0, components_shared_1.useText)();
+    const cardClass = (0, components_shared_1.useClass)('card', 'atlas-card');
+    const titleClass = (0, components_shared_1.useClass)('headerTitle', 'atlas-title');
+    const inputClass = (0, components_shared_1.useClass)('formFieldInput', 'atlas-input');
+    const buttonClass = (0, components_shared_1.useClass)('formButtonPrimary', 'atlas-button');
+    const errorClass = (0, components_shared_1.useClass)('formFieldError', 'atlas-error');
+    const [values, setValues] = (0, react_1.useState)({});
+    const step = attempt ? (0, js_1.nextStep)(attempt) : { kind: 'collect_identifier' };
+    const field = (name, labelKey, type = 'text') => ((0, jsx_runtime_1.jsxs)("label", { className: "atlas-field", children: [(0, jsx_runtime_1.jsx)("span", { children: t(labelKey) }), (0, jsx_runtime_1.jsx)("input", { className: inputClass, type: type, value: values[name] ?? '', onChange: (event) => setValues((v) => ({ ...v, [name]: event.target.value })) }), errors
+                .filter((error) => error.param === name)
+                .map((error) => ((0, jsx_runtime_1.jsx)("span", { className: errorClass, children: error.message }, error.code)))] }, name));
+    const fields = () => {
+        switch (step.kind) {
+            case 'collect_identifier':
+                return [field('identifier', 'signIn.identifierLabel', 'email')];
+            case 'collect_first_factor':
+                return [field('password', 'signIn.passwordLabel', 'password')];
+            case 'collect_second_factor':
+                return [field('code', 'mfa.codeLabel')];
+            case 'enroll_second_factor':
+                /**
+                 * Two codes, not one. §5.6 wants consecutive codes so a phone with a
+                 * fast clock fails here rather than on every sign-in afterwards, and
+                 * asking for one would hide that failure until it was expensive.
+                 */
+                return [
+                    field('code', 'mfa.enrollFirstCodeLabel'),
+                    field('secondCode', 'mfa.enrollSecondCodeLabel'),
+                ];
+            case 'collect_email_code':
+                return [field('code', 'signIn.emailCodeLabel')];
+            case 'collect_new_password':
+                return [field('password', 'reset.newPasswordLabel', 'password')];
+            case 'await_oauth':
+                return [(0, jsx_runtime_1.jsx)("p", { children: t('signIn.magicLinkSent') }, "oauth")];
+            case 'done':
+                return [(0, jsx_runtime_1.jsx)("p", { children: t('signIn.checkOtherTab') }, "done")];
+            case 'restart':
+                return [(0, jsx_runtime_1.jsx)("p", { children: t('error.generic') }, "restart")];
+            default:
+                /**
+                 * A status this SDK version does not know. Saying so beats rendering
+                 * nothing, which is a blank login box the user cannot act on.
+                 */
+                return [
+                    (0, jsx_runtime_1.jsx)("p", { className: errorClass, children: t('error.generic') }, "unknown"),
+                ];
+        }
+    };
+    return ((0, jsx_runtime_1.jsxs)("div", { className: cardClass, children: [hideTitle ? null : (0, jsx_runtime_1.jsx)("h1", { className: titleClass, children: t(titleKey) }), errors
+                .filter((error) => !error.param)
+                .map((error) => ((0, jsx_runtime_1.jsx)("p", { className: errorClass, role: "alert", children: error.message }, error.code))), (0, jsx_runtime_1.jsxs)("form", { onSubmit: (event) => {
+                    event.preventDefault();
+                    onSubmit(values);
+                }, children: [fields(), step.kind !== 'done' && step.kind !== 'await_oauth' ? ((0, jsx_runtime_1.jsx)("button", { className: buttonClass, disabled: busy, type: "submit", children: t('signIn.submit') })) : null] })] }));
+}
+/**
+ * Drives the flow through `advance`, which owns the step-to-endpoint mapping.
+ * This component never decides what comes next — it renders the status the
+ * server returned and posts whatever the driver says the current step needs.
+ */
+function useFlow() {
+    const { publishableKey, frontendApi, reload, pendingAttempt } = (0, AtlasProvider_1.useAtlas)();
+    // Seeded from a redirect that came back mid-flow (e.g. OAuth needing a second
+    // factor), so the user resumes at the demanded step instead of starting over.
+    const [state, setState] = (0, react_1.useState)(() => (0, fapi_1.flowFromPending)(pendingAttempt));
+    const client = (0, react_1.useMemo)(() => new fapi_1.FapiClient({ publishableKey, baseUrl: frontendApi }), [frontendApi, publishableKey]);
+    // Apply a driver result to the UI, and — on completion — exchange the one-time
+    // ticket (§7.1) for cookies over a same-origin request (FAPI is cross-origin
+    // to the app and cannot set the cookie on the completion response itself),
+    // THEN re-boot so the rest of the app sees a signed-in user. Shared by the
+    // password/flow `submit` and the native (Google) button, so both complete a
+    // sign-in identically.
+    const finish = (0, react_1.useCallback)(async (next) => {
+        setState(next);
+        if (next.attempt?.status === 'complete') {
+            if (next.ticket) {
+                await client.post('/v1/client/tickets/exchange', {
+                    attempt_id: next.attempt.id,
+                    ticket: next.ticket,
+                });
+            }
+            await reload();
+        }
+    }, [client, reload]);
+    const submit = (0, react_1.useCallback)((values) => {
+        void (async () => {
+            setState((current) => ({ ...current, busy: true, errors: [] }));
+            const next = await (0, fapi_1.advance)(client, state, values);
+            await finish(next);
+        })();
+    }, [client, finish, state]);
+    /** §5.3: collect a sign-in completed by a link opened on another device. */
+    (0, react_1.useEffect)(() => {
+        if (!(0, fapi_1.shouldKeepPolling)(state))
+            return;
+        const timer = setInterval(() => {
+            void (async () => {
+                const { state: next, ticket } = await (0, fapi_1.pollAttempt)(client, state);
+                setState(next);
+                if (!ticket || !next.attempt)
+                    return;
+                // The ticket is exchanged by a normal request, so no session token has
+                // ever appeared in a URL.
+                await client.post('/v1/client/tickets/exchange', {
+                    attempt_id: next.attempt.id,
+                    ticket,
+                });
+                await reload();
+            })();
+        }, 2_000);
+        return () => clearInterval(timer);
+    }, [client, reload, state]);
+    return { state, submit, client, finish };
+}
+/** Google's multi-color "G" mark — trusted, static, first-party SVG. */
+function GoogleMark() {
+    return ((0, jsx_runtime_1.jsxs)("svg", { className: "atlas-social-icon", width: "18", height: "18", viewBox: "0 0 24 24", "aria-hidden": "true", focusable: "false", children: [(0, jsx_runtime_1.jsx)("path", { fill: "#4285F4", d: "M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z" }), (0, jsx_runtime_1.jsx)("path", { fill: "#34A853", d: "M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z" }), (0, jsx_runtime_1.jsx)("path", { fill: "#FBBC05", d: "M5.84 14.1c-.22-.66-.35-1.36-.35-2.1s.13-1.44.35-2.1V7.06H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.94l3.66-2.84z" }), (0, jsx_runtime_1.jsx)("path", { fill: "#EA4335", d: "M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.06l3.66 2.84C6.71 7.31 9.14 5.38 12 5.38z" })] }));
+}
+/**
+ * §6 the native "Sign in with Google" button (GSI id_token flow — no secret, no
+ * redirect). Discovers whether Google native sign-in is enabled for the instance
+ * via `/v1/client/environment`; if so it mints a single-use replay-binding nonce
+ * and renders OUR OWN themed button, backed by Google's real (but transparent)
+ * GSI button overlaid on top. The user sees a button that inherits the app's
+ * appearance (the `socialButton` element key / `atlas-social-button` class, so
+ * `appearance.elements.socialButton` and the design tokens theme it like every
+ * other control) — NOT Google's fixed, unstyleable button. On a returned
+ * credential the id_token is posted to the native endpoint and completes through
+ * the shared `finish`. Renders nothing when Google native sign-in isn't enabled.
+ *
+ * One-Tap stays off unless `oneTap` is set (see {@link FlowProps.googleOneTap}).
+ */
+function GoogleSignInButton({ client, onComplete, oneTap, }) {
+    const ref = (0, react_1.useRef)(null);
+    const socialButtonClass = (0, components_shared_1.useClass)('socialButton', 'atlas-social-button');
+    const [clientId, setClientId] = (0, react_1.useState)(null);
+    // Discover the Google client_id (exposed only for native-enabled providers).
+    (0, react_1.useEffect)(() => {
+        let alive = true;
+        void (async () => {
+            const res = await client.get('/v1/client/environment');
+            const google = res.data?.social_providers?.find((p) => p.provider === 'google' && p.native && p.client_id && p.allow_sign_in !== false);
+            if (alive)
+                setClientId(google?.client_id ?? null);
+        })();
+        return () => {
+            alive = false;
+        };
+    }, [client]);
+    // Overlay Google's invisible button on our themed one once client_id is known.
+    (0, react_1.useEffect)(() => {
+        const wrapper = ref.current;
+        if (!clientId || !wrapper)
+            return;
+        let cancelled = false;
+        let handle;
+        void (async () => {
+            const nonce = await (0, js_1.mintNativeNonce)(client, 'google');
+            if (cancelled || !nonce || !ref.current)
+                return;
+            handle = await (0, js_1.renderGoogleOverlayButton)({
+                wrapper,
+                clientId,
+                nonce,
+                oneTap: oneTap ?? false,
+                onCredential: (idToken) => {
+                    void (async () => {
+                        const next = await (0, js_1.nativeSignIn)(client, { provider: 'google', idToken, nonce });
+                        await onComplete(next);
+                    })();
+                },
+            });
+        })();
+        return () => {
+            cancelled = true;
+            handle?.destroy();
+        };
+    }, [client, clientId, oneTap, onComplete]);
+    if (!clientId)
+        return null;
+    // Our styled button; GSI's transparent real button is overlaid onto this node.
+    // Defaults are driven by the appearance design tokens (`--atlas-*` set on
+    // `.atlas-root`), so the button matches the app's theme out of the box AND
+    // updates when a customer sets `appearance.variables`; `appearance.elements.socialButton`
+    // (appended to the class) still layers CSS on top. minHeight matches GSI's
+    // own button height so the transparent overlay lines up over the visible one.
+    return ((0, jsx_runtime_1.jsxs)("div", { ref: ref, className: socialButtonClass, "data-atlas": "google-signin", "data-atlas-provider": "google", role: "button", tabIndex: 0, style: DEFAULT_SOCIAL_BUTTON_STYLE, children: [(0, jsx_runtime_1.jsx)(GoogleMark, {}), (0, jsx_runtime_1.jsx)("span", { className: "atlas-social-label", children: "Continue with Google" })] }));
+}
+/** Theme-token defaults so the social button looks right with no customer CSS. */
+const DEFAULT_SOCIAL_BUTTON_STYLE = {
+    display: 'flex',
+    alignItems: 'center',
+    justifyContent: 'center',
+    gap: '8px',
+    width: '100%',
+    boxSizing: 'border-box',
+    minHeight: '40px',
+    padding: '10px 16px',
+    border: '1px solid var(--atlas-color-border, #e4e4e9)',
+    borderRadius: 'var(--atlas-border-radius, 8px)',
+    background: 'var(--atlas-color-background, #ffffff)',
+    color: 'var(--atlas-color-text, #1c1c1f)',
+    fontFamily: 'var(--atlas-font-family, inherit)',
+    fontWeight: 500,
+    cursor: 'pointer',
+    userSelect: 'none',
+};
+/** Human label for a provider key, for the redirect button text. */
+const PROVIDER_LABEL = {
+    github: 'GitHub',
+    gitlab: 'GitLab',
+    microsoft: 'Microsoft',
+    apple: 'Apple',
+    facebook: 'Facebook',
+    discord: 'Discord',
+    linkedin: 'LinkedIn',
+    google: 'Google',
+    x: 'X',
+    twitter: 'X',
+    slack: 'Slack',
+    spotify: 'Spotify',
+    twitch: 'Twitch',
+    notion: 'Notion',
+};
+function providerLabel(p) {
+    return PROVIDER_LABEL[p] ?? p.charAt(0).toUpperCase() + p.slice(1).replace(/[_-]/g, ' ');
+}
+/**
+ * §6 all enabled social sign-in providers, native-first.
+ *
+ * A provider with an in-page native flow (Google today) renders its secretless
+ * button — no redirect, no new tab, no stranded initiating tab. Every OTHER
+ * enabled provider (GitHub, Microsoft, Discord, …) renders a redirect button that
+ * starts the OAuth flow and returns to THIS page, where `<AtlasProvider>` exchanges
+ * the returned ticket for a session. Previously `<SignIn>` rendered only the
+ * Google button, so an instance's other social providers never appeared.
+ */
+function SocialSignInButtons({ client, onComplete, oneTap, oauthMode, }) {
+    const socialButtonClass = (0, components_shared_1.useClass)('socialButton', 'atlas-social-button');
+    const { oauthMode: providerOauthMode } = (0, AtlasProvider_1.useAtlas)();
+    const effectiveMode = oauthMode ?? providerOauthMode ?? 'redirect';
+    const [redirectProviders, setRedirectProviders] = (0, react_1.useState)([]);
+    (0, react_1.useEffect)(() => {
+        let alive = true;
+        void (async () => {
+            const res = await client.get('/v1/client/environment');
+            const list = (res.data?.social_providers ?? [])
+                .filter((p) => p.allow_sign_in !== false)
+                // Google renders as the native GSI button below. Any other native provider
+                // gets its own in-page button in a later pass; the rest use redirect.
+                .filter((p) => p.provider !== 'google')
+                .map((p) => p.provider);
+            if (alive)
+                setRedirectProviders(list);
+        })();
+        return () => {
+            alive = false;
+        };
+    }, [client]);
+    const startSocial = (0, react_1.useCallback)((provider) => {
+        void (async () => {
+            if (typeof window === 'undefined')
+                return;
+            const redirectUrl = window.location.href;
+            if (effectiveMode === 'popup') {
+                const out = await (0, js_1.startOauthPopup)(client, { provider, redirectUrl });
+                // Popup blocked → fall back to a full redirect (always safe to enable).
+                if (out.blocked && out.authorizationUrl) {
+                    window.location.href = out.authorizationUrl;
+                    return;
+                }
+                // Completed in the popup → drive the SAME completion path as the native
+                // (Google) button: exchange the one-time ticket + re-boot signed-in.
+                if (out.ticket) {
+                    await onComplete({
+                        attempt: { id: out.attemptId, status: 'complete' },
+                        ticket: out.ticket,
+                    });
+                    return;
+                }
+                // 2FA / connect / provider error → hand off to the redirect continuation
+                // so the existing status handling takes over in the opener.
+                if (out.continuationUrl) {
+                    window.location.href = out.continuationUrl;
+                    return;
+                }
+                // popup_closed / start_failed → the user cancelled; nothing to do.
+                return;
+            }
+            const res = await (0, js_1.startOauthRedirect)(client, { provider, redirectUrl });
+            if (res)
+                window.location.href = res.authorizationUrl;
+        })();
+    }, [client, effectiveMode, onComplete]);
+    return ((0, jsx_runtime_1.jsxs)(jsx_runtime_1.Fragment, { children: [(0, jsx_runtime_1.jsx)(GoogleSignInButton, { client: client, onComplete: onComplete, oneTap: oneTap }), redirectProviders.map((provider) => ((0, jsx_runtime_1.jsx)("div", { className: socialButtonClass, "data-atlas": "social-signin", "data-atlas-provider": provider, role: "button", tabIndex: 0, style: DEFAULT_SOCIAL_BUTTON_STYLE, onClick: () => startSocial(provider), onKeyDown: (e) => {
+                    if (e.key === 'Enter' || e.key === ' ')
+                        startSocial(provider);
+                }, children: (0, jsx_runtime_1.jsxs)("span", { className: "atlas-social-label", children: ["Continue with ", providerLabel(provider)] }) }, provider)))] }));
+}
+//# sourceMappingURL=flow.js.map

package/dist/flow.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow.js","sourceRoot":"","sources":["../src/flow.tsx"],"names":[],"mappings":";;AA2EA,kCAgHC;AAOD,0BAoEC;AAwLD,kDAgGC;;AA9hBD,iCAOe;AACf,sCASuB;AACvB,mDAA2C;AAC3C,iCAOgB;AAChB,2DAAwD;AA0CxD;;;;;GAKG;AACH,SAAgB,WAAW,CAAC,EAC1B,OAAO,EACP,QAAQ,EACR,IAAI,EACJ,MAAM,EACN,QAAQ,EACR,SAAS,GAQV;IACC,MAAM,CAAC,GAAG,IAAA,2BAAO,GAAE,CAAC;IACpB,MAAM,SAAS,GAAG,IAAA,4BAAQ,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,IAAA,4BAAQ,EAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAA,4BAAQ,EAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAA,4BAAQ,EAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,IAAA,4BAAQ,EAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IAE7D,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,IAAA,gBAAQ,EAAyB,EAAE,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAA,aAAQ,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,oBAA6B,EAAE,CAAC;IAEnF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAE,IAAI,GAAG,MAAM,EAAE,EAAE,CAAC,CAC/D,mCAAkB,SAAS,EAAC,aAAa,aACvC,2CAAO,CAAC,CAAC,QAAQ,CAAC,GAAQ,EAC1B,kCACE,SAAS,EAAE,UAAU,EACrB,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EACzB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,GAC7E,EACD,MAAM;iBACJ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;iBACvC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACd,iCAAuB,SAAS,EAAE,UAAU,YACzC,KAAK,CAAC,OAAO,IADL,KAAK,CAAC,IAAI,CAEd,CACR,CAAC,KAdM,IAAI,CAeR,CACT,CAAC;IAEF,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,oBAAoB;gBACvB,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,wBAAwB,EAAE,OAAO,CAAC,CAAC,CAAC;YAClE,KAAK,sBAAsB;gBACzB,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,sBAAsB,EAAE,UAAU,CAAC,CAAC,CAAC;YACjE,KAAK,uBAAuB;gBAC1B,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;YAC1C,KAAK,sBAAsB;gBACzB;;;;mBAIG;gBACH,OAAO;oBACL,KAAK,CAAC,MAAM,EAAE,0BAA0B,CAAC;oBACzC,KAAK,CAAC,YAAY,EAAE,2BAA2B,CAAC;iBACjD,CAAC;YACJ,KAAK,oBAAoB;gBACvB,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC,CAAC;YAClD,KAAK,sBAAsB;gBACzB,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,wBAAwB,EAAE,UAAU,CAAC,CAAC,CAAC;YACnE,KAAK,aAAa;gBAChB,OAAO,CAAC,wCAAgB,CAAC,CAAC,sBAAsB,CAAC,IAAlC,OAAO,CAAgC,CAAC,CAAC;YAC1D,KAAK,MAAM;gBACT,OAAO,CAAC,wCAAe,CAAC,CAAC,sBAAsB,CAAC,IAAjC,MAAM,CAAgC,CAAC,CAAC;YACzD,KAAK,SAAS;gBACZ,OAAO,CAAC,wCAAkB,CAAC,CAAC,eAAe,CAAC,IAA7B,SAAS,CAAyB,CAAC,CAAC;YACrD;gBACE;;;mBAGG;gBACH,OAAO;oBACL,8BAAiB,SAAS,EAAE,UAAU,YACnC,CAAC,CAAC,eAAe,CAAC,IADd,SAAS,CAEZ;iBACL,CAAC;QACN,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,iCAAK,SAAS,EAAE,SAAS,aACtB,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,+BAAI,SAAS,EAAE,UAAU,YAAG,CAAC,CAAC,QAAQ,CAAC,GAAM,EAEhE,MAAM;iBACJ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;iBAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CACd,8BAAoB,SAAS,EAAE,UAAU,EAAE,IAAI,EAAC,OAAO,YACpD,KAAK,CAAC,OAAO,IADR,KAAK,CAAC,IAAI,CAEd,CACL,CAAC,EAEJ,kCACE,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;oBAClB,KAAK,CAAC,cAAc,EAAE,CAAC;oBACvB,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACnB,CAAC,aAEA,MAAM,EAAE,EACR,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,CACrD,mCAAQ,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAC,QAAQ,YAC1D,CAAC,CAAC,eAAe,CAAC,GACZ,CACV,CAAC,CAAC,CAAC,IAAI,IACH,IACH,CACP,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,OAAO;IACrB,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,IAAA,wBAAQ,GAAE,CAAC;IAC3E,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,IAAA,gBAAQ,EAAY,GAAG,EAAE,CAAC,IAAA,sBAAe,EAAC,cAAc,CAAC,CAAC,CAAC;IAErF,MAAM,MAAM,GAAG,IAAA,eAAO,EACpB,GAAG,EAAE,CAAC,IAAI,iBAAU,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,EAC9D,CAAC,WAAW,EAAE,cAAc,CAAC,CAC9B,CAAC;IAEF,+EAA+E;IAC/E,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,uBAAuB;IACvB,MAAM,MAAM,GAAG,IAAA,mBAAW,EACxB,KAAK,EAAE,IAAe,EAAE,EAAE;QACxB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;YACxC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;oBAC/C,UAAU,EAAG,IAAI,CAAC,OAA2B,CAAC,EAAE;oBAChD,MAAM,EAAE,IAAI,CAAC,MAAM;iBACpB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,MAAM,EAAE,CAAC;QACjB,CAAC;IACH,CAAC,EACD,CAAC,MAAM,EAAE,MAAM,CAAC,CACjB,CAAC;IAEF,MAAM,MAAM,GAAG,IAAA,mBAAW,EACxB,CAAC,MAA8B,EAAE,EAAE;QACjC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,MAAM,IAAA,cAAO,EAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAClD,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,EACD,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CACxB,CAAC;IAEF,4EAA4E;IAC5E,IAAA,iBAAS,EAAC,GAAG,EAAE;QACb,IAAI,CAAC,IAAA,wBAAiB,EAAC,KAAK,CAAC;YAAE,OAAO;QAEtC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,kBAAW,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBACjE,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACf,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,OAAO;gBAErC,uEAAuE;gBACvE,0BAA0B;gBAC1B,MAAM,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;oBAC/C,UAAU,EAAG,IAAI,CAAC,OAA2B,CAAC,EAAE;oBAChD,MAAM;iBACP,CAAC,CAAC;gBACH,MAAM,MAAM,EAAE,CAAC;YACjB,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,EAAE,KAAK,CAAC,CAAC;QAEV,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;IAE5B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED,wEAAwE;AACxE,SAAS,UAAU;IACjB,OAAO,CACL,iCACE,SAAS,EAAC,mBAAmB,EAC7B,KAAK,EAAC,IAAI,EACV,MAAM,EAAC,IAAI,EACX,OAAO,EAAC,WAAW,iBACP,MAAM,EAClB,SAAS,EAAC,OAAO,aAEjB,iCACE,IAAI,EAAC,SAAS,EACd,CAAC,EAAC,yHAAyH,GAC3H,EACF,iCACE,IAAI,EAAC,SAAS,EACd,CAAC,EAAC,uIAAuI,GACzI,EACF,iCACE,IAAI,EAAC,SAAS,EACd,CAAC,EAAC,qHAAqH,GACvH,EACF,iCACE,IAAI,EAAC,SAAS,EACd,CAAC,EAAC,sIAAsI,GACxI,IACE,CACP,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,SAAS,kBAAkB,CAAC,EAC1B,MAAM,EACN,UAAU,EACV,MAAM,GAKP;IACC,MAAM,GAAG,GAAG,IAAA,cAAM,EAAiB,IAAI,CAAC,CAAC;IACzC,MAAM,iBAAiB,GAAG,IAAA,4BAAQ,EAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC;IAC1E,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,IAAA,gBAAQ,EAAgB,IAAI,CAAC,CAAC;IAE9D,6EAA6E;IAC7E,IAAA,iBAAS,EAAC,GAAG,EAAE;QACb,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAOzB,wBAAwB,CAAC,CAAC;YAC7B,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAC7C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,aAAa,KAAK,KAAK,CACvF,CAAC;YACF,IAAI,KAAK;gBAAE,WAAW,CAAC,MAAM,EAAE,SAAS,IAAI,IAAI,CAAC,CAAC;QACpD,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,GAAG,EAAE;YACV,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,+EAA+E;IAC/E,IAAA,iBAAS,EAAC,GAAG,EAAE;QACb,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO;YAAE,OAAO;QAClC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,MAA2C,CAAC;QAChD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,KAAK,GAAG,MAAM,IAAA,oBAAe,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACtD,IAAI,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,OAAO;gBAAE,OAAO;YAChD,MAAM,GAAG,MAAM,IAAA,8BAAyB,EAAC;gBACvC,OAAO;gBACP,QAAQ;gBACR,KAAK;gBACL,MAAM,EAAE,MAAM,IAAI,KAAK;gBACvB,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE;oBACxB,KAAK,CAAC,KAAK,IAAI,EAAE;wBACf,MAAM,IAAI,GAAG,MAAM,IAAA,iBAAY,EAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;wBAChF,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;oBACzB,CAAC,CAAC,EAAE,CAAC;gBACP,CAAC;aACF,CAAC,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;YACjB,MAAM,EAAE,OAAO,EAAE,CAAC;QACpB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAE3C,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,+EAA+E;IAC/E,0EAA0E;IAC1E,2EAA2E;IAC3E,0FAA0F;IAC1F,2EAA2E;IAC3E,8EAA8E;IAC9E,OAAO,CACL,iCACE,GAAG,EAAE,GAAG,EACR,SAAS,EAAE,iBAAiB,gBACjB,eAAe,yBACN,QAAQ,EAC5B,IAAI,EAAC,QAAQ,EACb,QAAQ,EAAE,CAAC,EACX,KAAK,EAAE,2BAA2B,aAElC,uBAAC,UAAU,KAAG,EACd,iCAAM,SAAS,EAAC,oBAAoB,qCAA4B,IAC5D,CACP,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,2BAA2B,GAAkB;IACjD,OAAO,EAAE,MAAM;IACf,UAAU,EAAE,QAAQ;IACpB,cAAc,EAAE,QAAQ;IACxB,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,MAAM;IACb,SAAS,EAAE,YAAY;IACvB,SAAS,EAAE,MAAM;IACjB,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,8CAA8C;IACtD,YAAY,EAAE,iCAAiC;IAC/C,UAAU,EAAE,wCAAwC;IACpD,KAAK,EAAE,kCAAkC;IACzC,UAAU,EAAE,mCAAmC;IAC/C,UAAU,EAAE,GAAG;IACf,MAAM,EAAE,SAAS;IACjB,UAAU,EAAE,MAAM;CACnB,CAAC;AAEF,oEAAoE;AACpE,MAAM,cAAc,GAA2B;IAC7C,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;IACtB,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;IAChB,CAAC,EAAE,GAAG;IACN,OAAO,EAAE,GAAG;IACZ,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;CACjB,CAAC;AACF,SAAS,aAAa,CAAC,CAAS;IAC9B,OAAO,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,mBAAmB,CAAC,EAClC,MAAM,EACN,UAAU,EACV,MAAM,EACN,SAAS,GAMV;IACC,MAAM,iBAAiB,GAAG,IAAA,4BAAQ,EAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC;IAC1E,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,GAAG,IAAA,wBAAQ,GAAE,CAAC;IACpD,MAAM,aAAa,GAAG,SAAS,IAAI,iBAAiB,IAAI,UAAU,CAAC;IACnE,MAAM,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,GAAG,IAAA,gBAAQ,EAAW,EAAE,CAAC,CAAC;IAEzE,IAAA,iBAAS,EAAC,GAAG,EAAE;QACb,IAAI,KAAK,GAAG,IAAI,CAAC;QACjB,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,CAEzB,wBAAwB,CAAC,CAAC;YAC7B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,gBAAgB,IAAI,EAAE,CAAC;iBAC5C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,KAAK,CAAC;gBACzC,2EAA2E;gBAC3E,sEAAsE;iBACrE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;iBACtC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC1B,IAAI,KAAK;gBAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,GAAG,EAAE;YACV,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,MAAM,WAAW,GAAG,IAAA,mBAAW,EAC7B,CAAC,QAAgB,EAAE,EAAE;QACnB,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,OAAO,MAAM,KAAK,WAAW;gBAAE,OAAO;YAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAEzC,IAAI,aAAa,KAAK,OAAO,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,MAAM,IAAA,oBAAe,EAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;gBACrE,wEAAwE;gBACxE,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;oBACxC,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC,gBAAgB,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,wEAAwE;gBACxE,qEAAqE;gBACrE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;oBACf,MAAM,UAAU,CAAC;wBACf,OAAO,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE;wBAClD,MAAM,EAAE,GAAG,CAAC,MAAM;qBACK,CAAC,CAAC;oBAC3B,OAAO;gBACT,CAAC;gBACD,yEAAyE;gBACzE,4DAA4D;gBAC5D,IAAI,GAAG,CAAC,eAAe,EAAE,CAAC;oBACxB,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC,eAAe,CAAC;oBAC3C,OAAO;gBACT,CAAC;gBACD,mEAAmE;gBACnE,OAAO;YACT,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,IAAA,uBAAkB,EAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;YACxE,IAAI,GAAG;gBAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC,gBAAgB,CAAC;QACvD,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,EACD,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,CAAC,CACpC,CAAC;IAEF,OAAO,CACL,6DACE,uBAAC,kBAAkB,IAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAI,EAC7E,iBAAiB,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CACnC,gCAEE,SAAS,EAAE,iBAAiB,gBACjB,eAAe,yBACL,QAAQ,EAC7B,IAAI,EAAC,QAAQ,EACb,QAAQ,EAAE,CAAC,EACX,KAAK,EAAE,2BAA2B,EAClC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EACpC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE;oBACf,IAAI,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG;wBAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;gBAChE,CAAC,YAED,kCAAM,SAAS,EAAC,oBAAoB,+BAAgB,aAAa,CAAC,QAAQ,CAAC,IAAQ,IAZ9E,QAAQ,CAaT,CACP,CAAC,IACD,CACJ,CAAC;AACJ,CAAC"}

package/dist/organization.d.ts

@@ -0,0 +1,37 @@
+import { useOrganization } from './hooks';
+export declare function OrganizationSwitcher(): import("react").JSX.Element;
+/**
+ * Clerk-parity `useOrganizationList()`. The memberships the signed-in user
+ * belongs to, plus a `createOrganization(name)` that creates one through FAPI and
+ * re-boots the provider so the new membership appears everywhere. `memberships`
+ * comes straight from {@link useOrganization} (the same list `<OrganizationSwitcher>`
+ * renders), so there is one source of truth for what the user belongs to.
+ */
+export declare function useOrganizationList(): {
+    memberships: ReturnType<typeof useOrganization>['memberships'];
+    createOrganization(name: string): Promise<{
+        id: string;
+        name: string;
+    } | null>;
+};
+/**
+ * Clerk-parity `<CreateOrganization>`. A small name-and-submit form that creates
+ * an organization via {@link useOrganizationList} and immediately makes it the
+ * active org, so the user drops straight into the org they just made. Styled like
+ * the `<SignUp>` card. `onCreate` fires with the created org for a caller that
+ * wants to route afterwards.
+ */
+export declare function CreateOrganization({ onCreate, }?: {
+    onCreate?(organization: {
+        id: string;
+        name: string;
+    }): void;
+}): import("react").JSX.Element;
+/**
+ * Clerk-parity `<OrganizationList>`. Every organization the user belongs to as a
+ * button that switches to it (mirroring `<OrganizationSwitcher>`'s markup), plus
+ * an inline `<CreateOrganization>` so a user with no orgs — or who wants another —
+ * can make one without leaving the list.
+ */
+export declare function OrganizationList(): import("react").JSX.Element;
+export declare function OrganizationProfile(): import("react").JSX.Element | null;

package/dist/organization.js

@@ -0,0 +1,111 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrganizationSwitcher = OrganizationSwitcher;
+exports.useOrganizationList = useOrganizationList;
+exports.CreateOrganization = CreateOrganization;
+exports.OrganizationList = OrganizationList;
+exports.OrganizationProfile = OrganizationProfile;
+const jsx_runtime_1 = require("react/jsx-runtime");
+const react_1 = require("react");
+const AtlasProvider_1 = require("./AtlasProvider");
+const hooks_1 = require("./hooks");
+const components_shared_1 = require("./components-shared");
+const control_components_1 = require("./control-components");
+function OrganizationSwitcher() {
+    const { memberships, organization, setActive } = (0, hooks_1.useOrganization)();
+    const t = (0, components_shared_1.useText)();
+    const menuClass = (0, components_shared_1.useClass)('menu', 'atlas-menu');
+    const itemClass = (0, components_shared_1.useClass)('menuItem', 'atlas-menu-item');
+    return ((0, jsx_runtime_1.jsxs)("div", { className: menuClass, children: [(0, jsx_runtime_1.jsx)("button", { className: itemClass, onClick: () => void setActive(null), children: t('organization.personal') }), memberships.map((membership) => ((0, jsx_runtime_1.jsx)("button", { className: itemClass, disabled: membership.organization.id === organization?.id, onClick: () => void setActive(membership.organization.id), children: membership.organization.name }, membership.organization.id)))] }));
+}
+/**
+ * Clerk-parity `useOrganizationList()`. The memberships the signed-in user
+ * belongs to, plus a `createOrganization(name)` that creates one through FAPI and
+ * re-boots the provider so the new membership appears everywhere. `memberships`
+ * comes straight from {@link useOrganization} (the same list `<OrganizationSwitcher>`
+ * renders), so there is one source of truth for what the user belongs to.
+ */
+function useOrganizationList() {
+    const { memberships } = (0, hooks_1.useOrganization)();
+    const { reload } = (0, AtlasProvider_1.useAtlas)();
+    const client = (0, components_shared_1.useMeClient)();
+    const createOrganization = (0, react_1.useCallback)(async (name) => {
+        const res = await client.post('/v1/client/organizations', {
+            name,
+        });
+        // Re-boot so the new membership lands in `memberships` for the whole app,
+        // not just this hook's caller.
+        await reload();
+        return res.data;
+    }, [client, reload]);
+    return { memberships, createOrganization };
+}
+/**
+ * Clerk-parity `<CreateOrganization>`. A small name-and-submit form that creates
+ * an organization via {@link useOrganizationList} and immediately makes it the
+ * active org, so the user drops straight into the org they just made. Styled like
+ * the `<SignUp>` card. `onCreate` fires with the created org for a caller that
+ * wants to route afterwards.
+ */
+function CreateOrganization({ onCreate, } = {}) {
+    const { createOrganization } = useOrganizationList();
+    const { setActive } = (0, hooks_1.useOrganization)();
+    const t = (0, components_shared_1.useText)();
+    const cardClass = (0, components_shared_1.useClass)('card', 'atlas-card');
+    const titleClass = (0, components_shared_1.useClass)('headerTitle', 'atlas-title');
+    const inputClass = (0, components_shared_1.useClass)('formFieldInput', 'atlas-input');
+    const buttonClass = (0, components_shared_1.useClass)('formButtonPrimary', 'atlas-button');
+    const errorClass = (0, components_shared_1.useClass)('formFieldError', 'atlas-error');
+    const [name, setName] = (0, react_1.useState)('');
+    const [busy, setBusy] = (0, react_1.useState)(false);
+    const [error, setError] = (0, react_1.useState)(null);
+    const submit = async () => {
+        const trimmed = name.trim();
+        if (!trimmed)
+            return;
+        setBusy(true);
+        setError(null);
+        try {
+            const org = await createOrganization(trimmed);
+            if (!org) {
+                setError(t('error.generic'));
+                return;
+            }
+            await setActive(org.id);
+            setName('');
+            onCreate?.(org);
+        }
+        catch {
+            setError(t('error.generic'));
+        }
+        finally {
+            setBusy(false);
+        }
+    };
+    return ((0, jsx_runtime_1.jsxs)("form", { className: cardClass, "data-atlas": "create-organization", onSubmit: (event) => {
+            event.preventDefault();
+            void submit();
+        }, children: [(0, jsx_runtime_1.jsx)("h2", { className: titleClass, children: t('organization.createTitle') }), (0, jsx_runtime_1.jsxs)("label", { className: "atlas-field", children: [(0, jsx_runtime_1.jsx)("span", { children: t('organization.nameLabel') }), (0, jsx_runtime_1.jsx)("input", { className: inputClass, value: name, onChange: (event) => setName(event.target.value) })] }), error ? ((0, jsx_runtime_1.jsx)("p", { className: errorClass, role: "alert", children: error })) : null, (0, jsx_runtime_1.jsx)("button", { className: buttonClass, type: "submit", disabled: busy || !name.trim(), children: t('organization.create') })] }));
+}
+/**
+ * Clerk-parity `<OrganizationList>`. Every organization the user belongs to as a
+ * button that switches to it (mirroring `<OrganizationSwitcher>`'s markup), plus
+ * an inline `<CreateOrganization>` so a user with no orgs — or who wants another —
+ * can make one without leaving the list.
+ */
+function OrganizationList() {
+    const { memberships, organization, setActive } = (0, hooks_1.useOrganization)();
+    const t = (0, components_shared_1.useText)();
+    const menuClass = (0, components_shared_1.useClass)('menu', 'atlas-menu');
+    const itemClass = (0, components_shared_1.useClass)('menuItem', 'atlas-menu-item');
+    return ((0, jsx_runtime_1.jsxs)("div", { className: menuClass, "data-atlas": "organization-list", children: [memberships.map((membership) => ((0, jsx_runtime_1.jsx)("button", { className: itemClass, disabled: membership.organization.id === organization?.id, onClick: () => void setActive(membership.organization.id), children: membership.organization.name }, membership.organization.id))), (0, jsx_runtime_1.jsx)("span", { className: itemClass, "data-atlas": "organization-list-divider", children: t('organization.orCreate') }), (0, jsx_runtime_1.jsx)(CreateOrganization, {})] }));
+}
+function OrganizationProfile() {
+    const { organization, membership } = (0, hooks_1.useOrganization)();
+    const t = (0, components_shared_1.useText)();
+    const cardClass = (0, components_shared_1.useClass)('card', 'atlas-card');
+    if (!organization)
+        return null;
+    return ((0, jsx_runtime_1.jsxs)("div", { className: cardClass, children: [(0, jsx_runtime_1.jsx)("h1", { children: organization.name }), (0, jsx_runtime_1.jsxs)("p", { children: [t('organization.roleLabel'), ": ", membership?.role] }), (0, jsx_runtime_1.jsx)(control_components_1.Protect, { permission: "org:sys_memberships:manage", children: (0, jsx_runtime_1.jsx)("button", { children: t('organization.invite') }) })] }));
+}
+//# sourceMappingURL=organization.js.map

package/dist/organization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"organization.js","sourceRoot":"","sources":["../src/organization.tsx"],"names":[],"mappings":";;AAMA,oDAuBC;AASD,kDAsBC;AASD,gDA+DC;AAQD,4CAwBC;AAED,kDAoBC;;AA1LD,iCAA8C;AAC9C,mDAA2C;AAC3C,mCAA0C;AAC1C,2DAAqE;AACrE,6DAA+C;AAE/C,SAAgB,oBAAoB;IAClC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,IAAA,uBAAe,GAAE,CAAC;IACnE,MAAM,CAAC,GAAG,IAAA,2BAAO,GAAE,CAAC;IACpB,MAAM,SAAS,GAAG,IAAA,4BAAQ,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAA,4BAAQ,EAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAE1D,OAAO,CACL,iCAAK,SAAS,EAAE,SAAS,aACvB,mCAAQ,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,YAC9D,CAAC,CAAC,uBAAuB,CAAC,GACpB,EACR,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAC/B,mCAEE,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE,KAAK,YAAY,EAAE,EAAE,EACzD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC,YAExD,UAAU,CAAC,YAAY,CAAC,IAAI,IALxB,UAAU,CAAC,YAAY,CAAC,EAAE,CAMxB,CACV,CAAC,IACE,CACP,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,mBAAmB;IAIjC,MAAM,EAAE,WAAW,EAAE,GAAG,IAAA,uBAAe,GAAE,CAAC;IAC1C,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,wBAAQ,GAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAA,+BAAW,GAAE,CAAC;IAE7B,MAAM,kBAAkB,GAAG,IAAA,mBAAW,EACpC,KAAK,EAAE,IAAY,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAA+B,0BAA0B,EAAE;YACtF,IAAI;SACL,CAAC,CAAC;QACH,0EAA0E;QAC1E,+BAA+B;QAC/B,MAAM,MAAM,EAAE,CAAC;QACf,OAAO,GAAG,CAAC,IAAI,CAAC;IAClB,CAAC,EACD,CAAC,MAAM,EAAE,MAAM,CAAC,CACjB,CAAC;IAEF,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAAC,EACjC,QAAQ,MAGN,EAAE;IACJ,MAAM,EAAE,kBAAkB,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACrD,MAAM,EAAE,SAAS,EAAE,GAAG,IAAA,uBAAe,GAAE,CAAC;IACxC,MAAM,CAAC,GAAG,IAAA,2BAAO,GAAE,CAAC;IACpB,MAAM,SAAS,GAAG,IAAA,4BAAQ,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,IAAA,4BAAQ,EAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,IAAA,4BAAQ,EAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IAC7D,MAAM,WAAW,GAAG,IAAA,4BAAQ,EAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,IAAA,4BAAQ,EAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IAE7D,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,IAAA,gBAAQ,EAAC,EAAE,CAAC,CAAC;IACrC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,IAAA,gBAAQ,EAAC,KAAK,CAAC,CAAC;IACxC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,IAAA,gBAAQ,EAAgB,IAAI,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,QAAQ,CAAC,IAAI,CAAC,CAAC;QACf,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;gBAC7B,OAAO;YACT,CAAC;YACD,MAAM,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxB,OAAO,CAAC,EAAE,CAAC,CAAC;YACZ,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,kCACE,SAAS,EAAE,SAAS,gBACT,qBAAqB,EAChC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,KAAK,CAAC,cAAc,EAAE,CAAC;YACvB,KAAK,MAAM,EAAE,CAAC;QAChB,CAAC,aAED,+BAAI,SAAS,EAAE,UAAU,YAAG,CAAC,CAAC,0BAA0B,CAAC,GAAM,EAC/D,mCAAO,SAAS,EAAC,aAAa,aAC5B,2CAAO,CAAC,CAAC,wBAAwB,CAAC,GAAQ,EAC1C,kCAAO,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAI,IACzF,EACP,KAAK,CAAC,CAAC,CAAC,CACP,8BAAG,SAAS,EAAE,UAAU,EAAE,IAAI,EAAC,OAAO,YACnC,KAAK,GACJ,CACL,CAAC,CAAC,CAAC,IAAI,EACR,mCAAQ,SAAS,EAAE,WAAW,EAAE,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YACzE,CAAC,CAAC,qBAAqB,CAAC,GAClB,IACJ,CACR,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gBAAgB;IAC9B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,IAAA,uBAAe,GAAE,CAAC;IACnE,MAAM,CAAC,GAAG,IAAA,2BAAO,GAAE,CAAC;IACpB,MAAM,SAAS,GAAG,IAAA,4BAAQ,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,IAAA,4BAAQ,EAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAE1D,OAAO,CACL,iCAAK,SAAS,EAAE,SAAS,gBAAa,mBAAmB,aACtD,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAC/B,mCAEE,SAAS,EAAE,SAAS,EACpB,QAAQ,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE,KAAK,YAAY,EAAE,EAAE,EACzD,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC,YAExD,UAAU,CAAC,YAAY,CAAC,IAAI,IALxB,UAAU,CAAC,YAAY,CAAC,EAAE,CAMxB,CACV,CAAC,EACF,iCAAM,SAAS,EAAE,SAAS,gBAAa,2BAA2B,YAC/D,CAAC,CAAC,uBAAuB,CAAC,GACtB,EACP,uBAAC,kBAAkB,KAAG,IAClB,CACP,CAAC;AACJ,CAAC;AAED,SAAgB,mBAAmB;IACjC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,IAAA,uBAAe,GAAE,CAAC;IACvD,MAAM,CAAC,GAAG,IAAA,2BAAO,GAAE,CAAC;IACpB,MAAM,SAAS,GAAG,IAAA,4BAAQ,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAEjD,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAE/B,OAAO,CACL,iCAAK,SAAS,EAAE,SAAS,aACvB,yCAAK,YAAY,CAAC,IAAI,GAAM,EAC5B,0CACG,CAAC,CAAC,wBAAwB,CAAC,QAAI,UAAU,EAAE,IAAI,IAC9C,EAGJ,uBAAC,4BAAO,IAAC,UAAU,EAAC,4BAA4B,YAC9C,6CAAS,CAAC,CAAC,qBAAqB,CAAC,GAAU,GACnC,IACN,CACP,CAAC;AACJ,CAAC"}

package/dist/reverification.d.ts

@@ -0,0 +1,21 @@
+import { type ReauthInput } from '@atlasauth/js';
+/**
+ * Clerk-parity `useReverification()`. A thin, headless wrapper over the EXISTING
+ * step-up path (`@atlasauth/js`'s {@link reauthenticate} → `POST /v1/client/me/reauthenticate`)
+ * — it invents no server endpoint.
+ *
+ * Wrap a security-sensitive action with `withReverification(action)`. It runs the
+ * action; if that throws or returns a `STEP_UP_REQUIRED` (reauthentication-required)
+ * signal, it flips `needsReverification` true and parks the call. The caller renders
+ * its own prompt, gathers a credential, and calls `completeReverification(input)`,
+ * which re-authenticates in place and retries the action ONCE — resolving the
+ * original `withReverification` promise with the retry's result. `cancelReverification`
+ * abandons the parked call. A wrong password throws out of `completeReverification`
+ * with the parked call intact, so the prompt can let the user try again.
+ */
+export declare function useReverification(): {
+    withReverification<T>(action: () => T | Promise<T>): Promise<T>;
+    needsReverification: boolean;
+    completeReverification(input: ReauthInput): Promise<void>;
+    cancelReverification(): void;
+};

package/dist/reverification.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.useReverification = useReverification;
+const react_1 = require("react");
+const js_1 = require("@atlasauth/js");
+const AtlasProvider_1 = require("./AtlasProvider");
+/**
+ * Clerk-parity `useReverification()`. A thin, headless wrapper over the EXISTING
+ * step-up path (`@atlasauth/js`'s {@link reauthenticate} → `POST /v1/client/me/reauthenticate`)
+ * — it invents no server endpoint.
+ *
+ * Wrap a security-sensitive action with `withReverification(action)`. It runs the
+ * action; if that throws or returns a `STEP_UP_REQUIRED` (reauthentication-required)
+ * signal, it flips `needsReverification` true and parks the call. The caller renders
+ * its own prompt, gathers a credential, and calls `completeReverification(input)`,
+ * which re-authenticates in place and retries the action ONCE — resolving the
+ * original `withReverification` promise with the retry's result. `cancelReverification`
+ * abandons the parked call. A wrong password throws out of `completeReverification`
+ * with the parked call intact, so the prompt can let the user try again.
+ */
+function useReverification() {
+    const { publishableKey, frontendApi } = (0, AtlasProvider_1.useAtlas)();
+    const [needsReverification, setNeedsReverification] = (0, react_1.useState)(false);
+    const pending = (0, react_1.useRef)(null);
+    // A STEP_UP_REQUIRED signal, whether it arrived as a thrown Error carrying a
+    // `.code`, or as a returned FapiClient response whose `errors[]` names it.
+    const isStepUp = (candidate) => {
+        if (!candidate || typeof candidate !== 'object')
+            return false;
+        if (candidate.code === 'STEP_UP_REQUIRED')
+            return true;
+        const errors = candidate.errors;
+        return Array.isArray(errors) && errors.some((error) => error?.code === 'STEP_UP_REQUIRED');
+    };
+    const park = (action) => new Promise((resolve, reject) => {
+        pending.current = { action, resolve: resolve, reject };
+        setNeedsReverification(true);
+    });
+    const withReverification = (0, react_1.useCallback)(async (action) => {
+        try {
+            const result = await action();
+            return isStepUp(result) ? await park(action) : result;
+        }
+        catch (err) {
+            if (isStepUp(err))
+                return await park(action);
+            throw err;
+        }
+    }, []);
+    const completeReverification = (0, react_1.useCallback)(async (input) => {
+        // Throws on a bad credential; the parked call is left intact so the prompt
+        // can retry, and we neither clear it nor drop the flag until this resolves.
+        await (0, js_1.reauthenticate)(input, { api: frontendApi, publishableKey });
+        const job = pending.current;
+        pending.current = null;
+        setNeedsReverification(false);
+        if (!job)
+            return;
+        try {
+            job.resolve(await job.action());
+        }
+        catch (err) {
+            job.reject(err);
+        }
+    }, [frontendApi, publishableKey]);
+    const cancelReverification = (0, react_1.useCallback)(() => {
+        const job = pending.current;
+        pending.current = null;
+        setNeedsReverification(false);
+        job?.reject(new Error('Reverification cancelled.'));
+    }, []);
+    return { withReverification, needsReverification, completeReverification, cancelReverification };
+}
+//# sourceMappingURL=reverification.js.map

package/dist/reverification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reverification.js","sourceRoot":"","sources":["../src/reverification.tsx"],"names":[],"mappings":";;AAkBA,8CAoEC;AAtFD,iCAAsD;AACtD,sCAAiE;AACjE,mDAA2C;AAE3C;;;;;;;;;;;;;GAaG;AACH,SAAgB,iBAAiB;IAM/B,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,IAAA,wBAAQ,GAAE,CAAC;IACnD,MAAM,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,GAAG,IAAA,gBAAQ,EAAC,KAAK,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,IAAA,cAAM,EAIZ,IAAI,CAAC,CAAC;IAEhB,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,CAAC,SAAkB,EAAW,EAAE;QAC/C,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9D,IAAK,SAA+B,CAAC,IAAI,KAAK,kBAAkB;YAAE,OAAO,IAAI,CAAC;QAC9E,MAAM,MAAM,GAAI,SAAmD,CAAC,MAAM,CAAC;QAC3E,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,KAAK,kBAAkB,CAAC,CAAC;IAC7F,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAK,MAA4B,EAAc,EAAE,CAC5D,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACjC,OAAO,CAAC,OAAO,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAmC,EAAE,MAAM,EAAE,CAAC;QACnF,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEL,MAAM,kBAAkB,GAAG,IAAA,mBAAW,EACpC,KAAK,EAAM,MAA4B,EAAc,EAAE;QACrD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC;YAC9B,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7C,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,EACD,EAAE,CACH,CAAC;IAEF,MAAM,sBAAsB,GAAG,IAAA,mBAAW,EACxC,KAAK,EAAE,KAAkB,EAAiB,EAAE;QAC1C,2EAA2E;QAC3E,4EAA4E;QAC5E,MAAM,IAAA,mBAAc,EAAC,KAAK,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC;QAClE,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC;QAC5B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QACvB,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,IAAI,CAAC;YACH,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,EACD,CAAC,WAAW,EAAE,cAAc,CAAC,CAC9B,CAAC;IAEF,MAAM,oBAAoB,GAAG,IAAA,mBAAW,EAAC,GAAG,EAAE;QAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC;QAC5B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QACvB,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC9B,GAAG,EAAE,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACtD,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,CAAC;AACnG,CAAC"}