@atlasauth/react 0.24.0 → 0.25.0

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @atlasauth/react changelog
 
+## 0.25.0 — 2026-11-02
+
+### Added
+
+- `<ReferralPanel program=... />` mounts a referral platform's widget with the Atlas session token (renders nothing when signed out), and `useReferral()` returns `{ code, linkUrl }`.
+- `<AtlasProvider>` registers `window.Atlas.session` and `window.Atlas.billing.customerMetadata()` through the active-atlas registry.
+
 ## 0.24.0 — 2026-10-30
 
 ### Added

package/dist/active-atlas.d.ts

@@ -1,8 +1,3 @@
-/**
- * The registry the imperative compat helpers read: `<AtlasProvider>` publishes
- * its state here on every change. Kept dependency-free so the provider and the
- * compat module do not import each other.
- */
 import type { AtlasUser, SessionClaims } from './types';
 export type AuthStatus = 'loading' | 'signed_in' | 'signed_out';
 /** What `getToken` mints: the session JWT by default. */

package/dist/active-atlas.js

@@ -4,7 +4,23 @@ exports.publishActiveAtlas = publishActiveAtlas;
 exports.requireActive = requireActive;
 exports.getActiveAtlas = getActiveAtlas;
 exports.onActiveAtlasChange = onActiveAtlasChange;
+/**
+ * The registry the imperative compat helpers read: `<AtlasProvider>` publishes
+ * its state here on every change. Kept dependency-free so the provider and the
+ * compat module do not import each other.
+ */
+const js_1 = require("@atlasauth/js");
 let active = null;
+let unregisterGlobal = null;
+/** `window.Atlas.session` reads whichever provider is mounted right now. */
+function exposeGlobal() {
+    if (unregisterGlobal || typeof window === 'undefined')
+        return;
+    unregisterGlobal = (0, js_1.installSessionGlobal)({
+        getToken: async (o) => (active ? active.getToken(o) : null),
+        user: () => (active?.status === 'signed_in' && active.user ? { ...active.user, external_id: active.claims?.external_id ?? null } : null),
+    });
+}
 const listeners = new Set();
 /**
  * Called by `<AtlasProvider>` whenever its state changes, so the imperative
@@ -13,6 +29,14 @@ const listeners = new Set();
  */
 function publishActiveAtlas(next) {
     active = next;
+    if (next)
+        exposeGlobal();
+    else {
+        unregisterGlobal?.();
+        unregisterGlobal = null;
+    }
+    if (next && next.status !== 'loading')
+        (0, js_1.announceSessionChange)(next.status === 'signed_in' ? (next.user?.id ?? null) : null);
     for (const listener of [...listeners]) {
         try {
             listener(next);

package/dist/active-atlas.js.map

@@ -1 +1 @@
-{"version":3,"file":"active-atlas.js","sourceRoot":"","sources":["../src/active-atlas.ts"],"names":[],"mappings":";;AA0DA,gDASC;AAED,sCAKC;AAGD,wCAEC;AAID,kDAGC;AApCD,IAAI,MAAM,GAAuB,IAAI,CAAC;AACtC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuC,CAAC;AAEjE;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,IAAwB;IACzD,MAAM,GAAG,IAAI,CAAC;IACd,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAgB,aAAa,CAAC,MAAc;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,+CAA+C,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iEAAiE;AACjE,SAAgB,cAAc;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAGD,oEAAoE;AACpE,SAAgB,mBAAmB,CAAC,QAA6C;IAC/E,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,OAAO,GAAG,EAAE,CAAC,KAAK,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"active-atlas.js","sourceRoot":"","sources":["../src/active-atlas.ts"],"names":[],"mappings":";;AAqEA,gDAeC;AAED,sCAKC;AAGD,wCAEC;AAID,kDAGC;AAvGD;;;;GAIG;AACH,sCAA4G;AA8C5G,IAAI,MAAM,GAAuB,IAAI,CAAC;AACtC,IAAI,gBAAgB,GAAwB,IAAI,CAAC;AAEjD,4EAA4E;AAC5E,SAAS,YAAY;IACnB,IAAI,gBAAgB,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO;IAC9D,gBAAgB,GAAG,IAAA,yBAAoB,EAAC;QACtC,QAAQ,EAAE,KAAK,EAAE,CAA4B,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtF,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,WAAW,EAAG,MAAM,CAAC,MAA0C,EAAE,WAAW,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;KAC9K,CAAC,CAAC;AACL,CAAC;AACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuC,CAAC;AAEjE;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,IAAwB;IACzD,MAAM,GAAG,IAAI,CAAC;IACd,IAAI,IAAI;QAAE,YAAY,EAAE,CAAC;SACpB,CAAC;QACJ,gBAAgB,EAAE,EAAE,CAAC;QACrB,gBAAgB,GAAG,IAAI,CAAC;IAC1B,CAAC;IACD,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAAE,IAAA,0BAAqB,EAAC,IAAI,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3H,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;QAC7D,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAgB,aAAa,CAAC,MAAc;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,+CAA+C,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iEAAiE;AACjE,SAAgB,cAAc;IAC5B,OAAO,MAAM,CAAC;AAChB,CAAC;AAGD,oEAAoE;AACpE,SAAgB,mBAAmB,CAAC,QAA6C;IAC/E,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,OAAO,GAAG,EAAE,CAAC,KAAK,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC"}

package/dist/index.d.ts

@@ -31,3 +31,5 @@ export type { ProviderDiagnosis, OverlayGeometry, Rect } from '@atlasauth/js';
 export type { InstanceSettings, PublicSignUpField } from './instance-settings';
 export type { CaptchaFlowKey, CaptchaWidgetMode, FlowCaptcha } from '@atlasauth/js';
 export type { GetTokenOptions } from './active-atlas';
+export { ReferralPanel, useReferral, referralFromUser, referralWidgetSrc, DEFAULT_REFERRAL_WIDGET_BASE } from './referral-panel';
+export type { ReferralPanelProps, UserReferral } from './referral-panel';

package/dist/index.js

@@ -14,7 +14,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolveLocale = exports.missingKeys = exports.LOCALIZATION_KEYS = exports.fetchAtlasInitialState = exports.SignOutError = exports.SAME_ORIGIN_FRONTEND_API = exports.AtlasConfigError = exports.diagnoseProvider = exports.handleSilentCallback = exports.checkSession = exports.useAtlasIdEvents = exports.SignInWithAtlasButton = exports.signInWithAtlasPopup = exports.oneTapWithAtlas = exports.listenAtlasIdEvents = exports.completeSignInWithAtlas = exports.buildAtlasAuthorizeUrl = exports.atlasIdLabels = exports.ATLASID_EVENTS = exports.onAtlasSignOut = exports.SIGN_OUT_EVENT = exports.ATLAS_REACT_VERSION = exports.ATLAS_REACT_SDK = exports.useDelegatedFlow = exports.useDelegatedChallenge = exports.useShareableResources = exports.ShareDialog = exports.RoleMatrix = exports.PendingApprovals = exports.AccessRequestButton = exports.useAccess = exports.AccessRequests = exports.useUser = exports.useSilentAuth = exports.useSignOutListener = exports.useSessionList = exports.useSession = exports.useOrganization = exports.useAuth = exports.authFromContext = exports.useAtlas = exports.AtlasProvider = void 0;
+exports.DEFAULT_REFERRAL_WIDGET_BASE = exports.referralWidgetSrc = exports.referralFromUser = exports.useReferral = exports.ReferralPanel = exports.resolveLocale = exports.missingKeys = exports.LOCALIZATION_KEYS = exports.fetchAtlasInitialState = exports.SignOutError = exports.SAME_ORIGIN_FRONTEND_API = exports.AtlasConfigError = exports.diagnoseProvider = exports.handleSilentCallback = exports.checkSession = exports.useAtlasIdEvents = exports.SignInWithAtlasButton = exports.signInWithAtlasPopup = exports.oneTapWithAtlas = exports.listenAtlasIdEvents = exports.completeSignInWithAtlas = exports.buildAtlasAuthorizeUrl = exports.atlasIdLabels = exports.ATLASID_EVENTS = exports.onAtlasSignOut = exports.SIGN_OUT_EVENT = exports.ATLAS_REACT_VERSION = exports.ATLAS_REACT_SDK = exports.useDelegatedFlow = exports.useDelegatedChallenge = exports.useShareableResources = exports.ShareDialog = exports.RoleMatrix = exports.PendingApprovals = exports.AccessRequestButton = exports.useAccess = exports.AccessRequests = exports.useUser = exports.useSilentAuth = exports.useSignOutListener = exports.useSessionList = exports.useSession = exports.useOrganization = exports.useAuth = exports.authFromContext = exports.useAtlas = exports.AtlasProvider = void 0;
 __exportStar(require("./appearance"), exports);
 __exportStar(require("./styles"), exports);
 __exportStar(require("./protect"), exports);
@@ -92,4 +92,11 @@ var localizations_1 = require("@atlasauth/localizations");
 Object.defineProperty(exports, "LOCALIZATION_KEYS", { enumerable: true, get: function () { return localizations_1.LOCALIZATION_KEYS; } });
 Object.defineProperty(exports, "missingKeys", { enumerable: true, get: function () { return localizations_1.missingKeys; } });
 Object.defineProperty(exports, "resolveLocale", { enumerable: true, get: function () { return localizations_1.resolveLocale; } });
+// The "refer a friend" panel from a referral platform's widget, authenticated with the Atlas session.
+var referral_panel_1 = require("./referral-panel");
+Object.defineProperty(exports, "ReferralPanel", { enumerable: true, get: function () { return referral_panel_1.ReferralPanel; } });
+Object.defineProperty(exports, "useReferral", { enumerable: true, get: function () { return referral_panel_1.useReferral; } });
+Object.defineProperty(exports, "referralFromUser", { enumerable: true, get: function () { return referral_panel_1.referralFromUser; } });
+Object.defineProperty(exports, "referralWidgetSrc", { enumerable: true, get: function () { return referral_panel_1.referralWidgetSrc; } });
+Object.defineProperty(exports, "DEFAULT_REFERRAL_WIDGET_BASE", { enumerable: true, get: function () { return referral_panel_1.DEFAULT_REFERRAL_WIDGET_BASE; } });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,2CAAyB;AACzB,4CAA0B;AAC1B,yCAAuB;AACvB,0CAAwB;AAKxB,iDAA0D;AAAjD,8GAAA,aAAa,OAAA;AAAE,yGAAA,QAAQ,OAAA;AAEhC,iCASiB;AARf,wGAAA,eAAe,OAAA;AACf,gGAAA,OAAO,OAAA;AACP,wGAAA,eAAe,OAAA;AACf,mGAAA,UAAU,OAAA;AACV,uGAAA,cAAc,OAAA;AACd,2GAAA,kBAAkB,OAAA;AAClB,sGAAA,aAAa,OAAA;AACb,gGAAA,OAAO,OAAA;AAET,wDAAwD;AACxD,mCAAqD;AAA5C,wGAAA,cAAc,OAAA;AAAE,mGAAA,SAAS,OAAA;AAElC,2FAA2F;AAC3F,iDAAwH;AAA/G,oHAAA,mBAAmB,OAAA;AAAE,iHAAA,gBAAgB,OAAA;AAAE,2GAAA,UAAU,OAAA;AAAE,4GAAA,WAAW,OAAA;AAAE,sHAAA,qBAAqB,OAAA;AAC9F,gEAAgE;AAChE,+CAAyE;AAAhE,qHAAA,qBAAqB,OAAA;AAAE,gHAAA,gBAAgB,OAAA;AAChD,qCAAiE;AAAxD,0GAAA,eAAe,OAAA;AAAE,8GAAA,mBAAmB,OAAA;AAC7C,oFAAoF;AACpF,kCAAkC;AAClC,oCAA+D;AAAtD,oGAAA,cAAc,OAAA;AAAE,oGAAA,cAAc,OAAA;AAEvC,yCAAuB;AACvB,+CAA6B;AAE7B,2DAU8B;AAT5B,oHAAA,cAAc,OAAA;AACd,mHAAA,aAAa,OAAA;AACb,4HAAA,sBAAsB,OAAA;AACtB,6HAAA,uBAAuB,OAAA;AACvB,yHAAA,mBAAmB,OAAA;AACnB,qHAAA,eAAe,OAAA;AACf,0HAAA,oBAAoB,OAAA;AACpB,2HAAA,qBAAqB,OAAA;AACrB,sHAAA,gBAAgB,OAAA;AAElB,iFAAiF;AACjF,gDAAgD;AAChD,oCAAmE;AAA1D,kGAAA,YAAY,OAAA;AAAE,0GAAA,oBAAoB,OAAA;AAE3C,qFAAqF;AACrF,gFAAgF;AAChF,gFAAgF;AAChF,oCAAiD;AAAxC,sGAAA,gBAAgB,OAAA;AACzB,0EAA0E;AAC1E,4DAA4D;AAC5D,oCAAyF;AAAhF,sGAAA,gBAAgB,OAAA;AAAE,8GAAA,wBAAwB,OAAA;AAAE,kGAAA,YAAY,OAAA;AAEjE,qFAAqF;AACrF,+CAA+C;AAC/C,oCAAuD;AAA9C,4GAAA,sBAAsB,OAAA;AAE/B,4EAA4E;AAC5E,0DAAyF;AAAhF,kHAAA,iBAAiB,OAAA;AAAE,4GAAA,WAAW,OAAA;AAAE,8GAAA,aAAa,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,2CAAyB;AACzB,4CAA0B;AAC1B,yCAAuB;AACvB,0CAAwB;AAKxB,iDAA0D;AAAjD,8GAAA,aAAa,OAAA;AAAE,yGAAA,QAAQ,OAAA;AAEhC,iCASiB;AARf,wGAAA,eAAe,OAAA;AACf,gGAAA,OAAO,OAAA;AACP,wGAAA,eAAe,OAAA;AACf,mGAAA,UAAU,OAAA;AACV,uGAAA,cAAc,OAAA;AACd,2GAAA,kBAAkB,OAAA;AAClB,sGAAA,aAAa,OAAA;AACb,gGAAA,OAAO,OAAA;AAET,wDAAwD;AACxD,mCAAqD;AAA5C,wGAAA,cAAc,OAAA;AAAE,mGAAA,SAAS,OAAA;AAElC,2FAA2F;AAC3F,iDAAwH;AAA/G,oHAAA,mBAAmB,OAAA;AAAE,iHAAA,gBAAgB,OAAA;AAAE,2GAAA,UAAU,OAAA;AAAE,4GAAA,WAAW,OAAA;AAAE,sHAAA,qBAAqB,OAAA;AAC9F,gEAAgE;AAChE,+CAAyE;AAAhE,qHAAA,qBAAqB,OAAA;AAAE,gHAAA,gBAAgB,OAAA;AAChD,qCAAiE;AAAxD,0GAAA,eAAe,OAAA;AAAE,8GAAA,mBAAmB,OAAA;AAC7C,oFAAoF;AACpF,kCAAkC;AAClC,oCAA+D;AAAtD,oGAAA,cAAc,OAAA;AAAE,oGAAA,cAAc,OAAA;AAEvC,yCAAuB;AACvB,+CAA6B;AAE7B,2DAU8B;AAT5B,oHAAA,cAAc,OAAA;AACd,mHAAA,aAAa,OAAA;AACb,4HAAA,sBAAsB,OAAA;AACtB,6HAAA,uBAAuB,OAAA;AACvB,yHAAA,mBAAmB,OAAA;AACnB,qHAAA,eAAe,OAAA;AACf,0HAAA,oBAAoB,OAAA;AACpB,2HAAA,qBAAqB,OAAA;AACrB,sHAAA,gBAAgB,OAAA;AAElB,iFAAiF;AACjF,gDAAgD;AAChD,oCAAmE;AAA1D,kGAAA,YAAY,OAAA;AAAE,0GAAA,oBAAoB,OAAA;AAE3C,qFAAqF;AACrF,gFAAgF;AAChF,gFAAgF;AAChF,oCAAiD;AAAxC,sGAAA,gBAAgB,OAAA;AACzB,0EAA0E;AAC1E,4DAA4D;AAC5D,oCAAyF;AAAhF,sGAAA,gBAAgB,OAAA;AAAE,8GAAA,wBAAwB,OAAA;AAAE,kGAAA,YAAY,OAAA;AAEjE,qFAAqF;AACrF,+CAA+C;AAC/C,oCAAuD;AAA9C,4GAAA,sBAAsB,OAAA;AAE/B,4EAA4E;AAC5E,0DAAyF;AAAhF,kHAAA,iBAAiB,OAAA;AAAE,4GAAA,WAAW,OAAA;AAAE,8GAAA,aAAa,OAAA;AAatD,sGAAsG;AACtG,mDAAiI;AAAxH,+GAAA,aAAa,OAAA;AAAE,6GAAA,WAAW,OAAA;AAAE,kHAAA,gBAAgB,OAAA;AAAE,mHAAA,iBAAiB,OAAA;AAAE,8HAAA,4BAA4B,OAAA"}

package/dist/referral-panel.d.ts

@@ -0,0 +1,45 @@
+import type { AtlasUser } from './types';
+/** The Referalli preset's base URL; its widget script is served per merchant at `{base}/t/{trackingToken}/widget.js`. */
+export declare const DEFAULT_REFERRAL_WIDGET_BASE = "https://referalli.com";
+/** The Referalli widget script for a merchant's tracking token. */
+export declare function referralWidgetSrc(trackingToken: string, base?: string): string;
+/** A user's referral code and link. */
+export interface UserReferral {
+    code: string;
+    linkUrl: string | null;
+}
+/**
+ * The referral fields on a user: `public_metadata.referalli` (`code`, `link_url`),
+ * else the attribution mirror's `public_metadata.referral.own_code`. Null without a code.
+ */
+export declare function referralFromUser(user: Pick<AtlasUser, 'public_metadata'> | null): UserReferral | null;
+/** `{ code, linkUrl }` for the signed-in user, or null when signed out or not enrolled. */
+export declare function useReferral(): UserReferral | null;
+/**
+ * Load the widget script and mount its element in `host`, with `getAuthToken`
+ * set to the Atlas session token. Returns the teardown.
+ * @internal
+ */
+export declare function mountReferralElement(host: HTMLElement, opts: {
+    program: string;
+    src: string;
+    getAuthToken: () => Promise<string | null>;
+}): () => void;
+export interface ReferralPanelProps {
+    /** The referral program id. */
+    program: string;
+    /** Your Referalli tracking token: the script is loaded from `https://referalli.com/t/<trackingToken>/widget.js`. */
+    trackingToken?: string;
+    /** The referral platform's widget script URL, when not the Referalli preset (overrides `trackingToken`). */
+    src?: string;
+    className?: string;
+}
+/**
+ * The user's "refer a friend" panel from the referral platform's own widget,
+ * authenticated with the Atlas session token (no server route). Renders
+ * nothing while signed out.
+ */
+export declare function ReferralPanel({ program, trackingToken, src: srcProp, className }: ReferralPanelProps): import("react").DetailedReactHTMLElement<{
+    ref: import("react").RefObject<HTMLDivElement>;
+    className: string | undefined;
+}, HTMLDivElement> | null;

package/dist/referral-panel.js

@@ -0,0 +1,101 @@
+"use strict";
+'use client';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_REFERRAL_WIDGET_BASE = void 0;
+exports.referralWidgetSrc = referralWidgetSrc;
+exports.referralFromUser = referralFromUser;
+exports.useReferral = useReferral;
+exports.mountReferralElement = mountReferralElement;
+exports.ReferralPanel = ReferralPanel;
+const react_1 = require("react");
+const AtlasProvider_1 = require("./AtlasProvider");
+/** The Referalli preset's base URL; its widget script is served per merchant at `{base}/t/{trackingToken}/widget.js`. */
+exports.DEFAULT_REFERRAL_WIDGET_BASE = 'https://referalli.com';
+/** The Referalli widget script for a merchant's tracking token. */
+function referralWidgetSrc(trackingToken, base = exports.DEFAULT_REFERRAL_WIDGET_BASE) {
+    return `${base.replace(/\/+$/, '')}/t/${encodeURIComponent(trackingToken)}/widget.js`;
+}
+/** The tag the widget script registers (the Referalli preset). */
+const WIDGET_TAG = 'referalli-referral-widget';
+const str = (v) => (typeof v === 'string' && v ? v : null);
+/**
+ * The referral fields on a user: `public_metadata.referalli` (`code`, `link_url`),
+ * else the attribution mirror's `public_metadata.referral.own_code`. Null without a code.
+ */
+function referralFromUser(user) {
+    const md = (user?.public_metadata ?? {});
+    const rec = (v) => (v && typeof v === 'object' ? v : {});
+    const own = rec(md.referalli);
+    const code = str(own.code) ?? str(rec(md.referral).own_code);
+    if (!code)
+        return null;
+    return { code, linkUrl: str(own.link_url) ?? str(own.linkUrl) };
+}
+/** `{ code, linkUrl }` for the signed-in user, or null when signed out or not enrolled. */
+function useReferral() {
+    return referralFromUser((0, AtlasProvider_1.useAtlas)().user);
+}
+const loading = new Map();
+/** Load a script once per page. */
+function loadScript(src) {
+    let p = loading.get(src);
+    if (!p) {
+        p = new Promise((resolve, reject) => {
+            const el = document.createElement('script');
+            el.src = src;
+            el.async = true;
+            el.onload = () => resolve();
+            el.onerror = () => {
+                loading.delete(src);
+                reject(new Error(`could not load ${src}`));
+            };
+            document.head.appendChild(el);
+        });
+        loading.set(src, p);
+    }
+    return p;
+}
+/**
+ * Load the widget script and mount its element in `host`, with `getAuthToken`
+ * set to the Atlas session token. Returns the teardown.
+ * @internal
+ */
+function mountReferralElement(host, opts) {
+    let alive = true;
+    void loadScript(opts.src)
+        .then(() => {
+        if (!alive)
+            return;
+        const el = document.createElement(WIDGET_TAG);
+        el.setAttribute('program', opts.program);
+        el.setAttribute('auth', 'atlas');
+        el.getAuthToken = opts.getAuthToken;
+        host.replaceChildren(el);
+    })
+        .catch(() => undefined); // the panel just does not appear
+    return () => {
+        alive = false;
+        host.replaceChildren();
+    };
+}
+/**
+ * The user's "refer a friend" panel from the referral platform's own widget,
+ * authenticated with the Atlas session token (no server route). Renders
+ * nothing while signed out.
+ */
+function ReferralPanel({ program, trackingToken, src: srcProp, className }) {
+    // The script is per merchant: without src or a tracking token there is nothing to load.
+    const src = srcProp ?? (trackingToken ? referralWidgetSrc(trackingToken) : null);
+    const { status, getToken } = (0, AtlasProvider_1.useAtlas)();
+    const host = (0, react_1.useRef)(null);
+    const tokenRef = (0, react_1.useRef)(getToken);
+    tokenRef.current = getToken;
+    const signedIn = status === 'signed_in';
+    (0, react_1.useEffect)(() => {
+        if (!signedIn || !host.current || !src)
+            return;
+        return mountReferralElement(host.current, { program, src, getAuthToken: () => tokenRef.current() });
+    }, [signedIn, program, src]);
+    return signedIn && src ? (0, react_1.createElement)('div', { ref: host, className }) : null;
+}
+//# sourceMappingURL=referral-panel.js.map

package/dist/referral-panel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"referral-panel.js","sourceRoot":"","sources":["../src/referral-panel.tsx"],"names":[],"mappings":";AAAA,YAAY,CAAC;;;AAUb,8CAEC;AAiBD,4CAOC;AAGD,kCAEC;AA6BD,oDAmBC;AAiBD,sCAaC;AArHD,iCAAyD;AACzD,mDAA2C;AAG3C,yHAAyH;AAC5G,QAAA,4BAA4B,GAAG,uBAAuB,CAAC;AAEpE,mEAAmE;AACnE,SAAgB,iBAAiB,CAAC,aAAqB,EAAE,OAAe,oCAA4B;IAClG,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,kBAAkB,CAAC,aAAa,CAAC,YAAY,CAAC;AACxF,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAQ/C,MAAM,GAAG,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAEnF;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,IAA+C;IAC9E,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,eAAe,IAAI,EAAE,CAA4B,CAAC;IACpE,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/F,MAAM,GAAG,GAAG,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,2FAA2F;AAC3F,SAAgB,WAAW;IACzB,OAAO,gBAAgB,CAAC,IAAA,wBAAQ,GAAE,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAyB,CAAC;AAEjD,mCAAmC;AACnC,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,EAAE,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC5C,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC;YACb,EAAE,CAAC,KAAK,GAAG,IAAI,CAAC;YAChB,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAC5B,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE;gBAChB,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,GAAG,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,SAAgB,oBAAoB,CAClC,IAAiB,EACjB,IAAkF;IAElF,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,KAAK,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC;SACtB,IAAI,CAAC,GAAG,EAAE;QACT,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,EAAE,GAAG,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAkE,CAAC;QAC/G,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACzC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,EAAE,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;QACpC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC,CAAC;SACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,iCAAiC;IAC5D,OAAO,GAAG,EAAE;QACV,KAAK,GAAG,KAAK,CAAC;QACd,IAAI,CAAC,eAAe,EAAE,CAAC;IACzB,CAAC,CAAC;AACJ,CAAC;AAYD;;;;GAIG;AACH,SAAgB,aAAa,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAsB;IACnG,wFAAwF;IACxF,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACjF,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAA,wBAAQ,GAAE,CAAC;IACxC,MAAM,IAAI,GAAG,IAAA,cAAM,EAAiB,IAAI,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAA,cAAM,EAAC,QAAQ,CAAC,CAAC;IAClC,QAAQ,CAAC,OAAO,GAAG,QAAQ,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,KAAK,WAAW,CAAC;IACxC,IAAA,iBAAS,EAAC,GAAG,EAAE;QACb,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG;YAAE,OAAO;QAC/C,OAAO,oBAAoB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACtG,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7B,OAAO,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,IAAA,qBAAa,EAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlasauth/react",
-  "version": "0.24.0",
+  "version": "0.25.0",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {
@@ -15,10 +15,10 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@atlasauth/js": "0.27.0",
+    "@atlasauth/design": "0.3.0",
+    "@atlasauth/js": "0.29.0",
     "@atlasauth/authz": "0.3.0",
-    "@atlasauth/localizations": "0.12.0",
-    "@atlasauth/design": "0.3.0"
+    "@atlasauth/localizations": "0.12.0"
   },
   "peerDependencies": {
     "react": ">=18"