@atlasauth/solid 0.0.0-stage → 0.1.1

package/README.md

@@ -1,3 +1,55 @@
-# Temporary Holding Version
+# @atlasauth/solid
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+SolidJS bindings for [Atlas](https://atlasauth.net). Wraps the
+framework-agnostic `@atlasauth/js` client in Solid's fine-grained reactivity:
+drop in `<AtlasProvider>`, read auth state through accessors, and gate UI with
+control components — the Solid peer of `@atlasauth/react` and `@atlasauth/vue`.
+
+```tsx
+import {
+  AtlasProvider,
+  SignedIn,
+  SignedOut,
+  SignIn,
+  UserButton,
+  useAuth,
+} from '@atlasauth/solid';
+
+function App() {
+  return (
+    <AtlasProvider publishableKey="pk_test_...">
+      <SignedIn>
+        <UserButton />
+      </SignedIn>
+      <SignedOut>
+        <SignIn />
+      </SignedOut>
+    </AtlasProvider>
+  );
+}
+```
+
+## Reactive accessors
+
+Each returns Solid accessors (`() => T`), so a component re-runs only when the
+field it reads changes:
+
+- `useAtlas()` — the underlying client.
+- `useAuth()` — `{ isLoaded, isSignedIn, userId, sessionId, orgId, orgRole, getToken, getProviderToken, signOut, has }`.
+- `useUser()` — `{ isLoaded, isSignedIn, user, getProviderToken }`.
+- `useSession()` — `{ isLoaded, session }`.
+
+## Control components
+
+`<SignedIn>`, `<SignedOut>`, `<AtlasLoading>`, `<AtlasLoaded>`, and
+`<Protect permission="…" fallback={…}>` — all `<Show>`-based. `<Protect>` is a
+rendering helper, never an authorization boundary: the server checking the same
+permission is what actually stops an action.
+
+## Widgets
+
+`<SignIn>`, `<SignUp>`, and `<UserButton>` mount Atlas's server-driven flow into
+a host element on mount and tear it down on cleanup.
+
+> SSR-safe: the provider boots only in the browser; on the server it renders a
+> `loading` state and hydrates into the real status on the client.

package/dist/accessors.d.ts

@@ -0,0 +1,45 @@
+import { type ProtectCondition, type ProviderToken } from '@atlasauth/js';
+import type { AuthStatus } from './provider';
+import type { AtlasSession, AtlasUser } from './types';
+/**
+ * The Solid peer of React's hooks and Vue's composables.
+ *
+ * Every one returns `isLoaded` alongside its data, and that is not ceremony:
+ * without it a component cannot tell "still booting" from "signed out", so it
+ * flashes a sign-in form for a frame on every load — the flash of
+ * unauthenticated content that makes an app feel broken. Each returned value is
+ * an ACCESSOR (a `() => T` function), the idiomatic Solid shape: call it inside
+ * JSX or an effect and that spot re-runs when just that field changes.
+ */
+export declare function useUser(): {
+    isLoaded: () => boolean;
+    isSignedIn: () => boolean;
+    user: () => AtlasUser | null;
+    /**
+     * The signed-in user's own live token at a connected provider — always the
+     * caller's (the server keys off the session), refreshed on read if stale, and
+     * never the refresh token.
+     */
+    getProviderToken: (provider: string) => Promise<ProviderToken | null>;
+};
+export declare function useSession(): {
+    isLoaded: () => boolean;
+    session: () => AtlasSession | null;
+};
+export declare function useAuth(): {
+    isLoaded: () => boolean;
+    isSignedIn: () => boolean;
+    /** Three-state auth status (`loading` | `signed_in` | `signed_out`); same source as isLoaded/isSignedIn. */
+    status: () => AuthStatus;
+    /** The active session, or null while loading or signed out. */
+    session: () => AtlasSession | null;
+    userId: () => string | null;
+    sessionId: () => string | null;
+    orgId: () => string | null;
+    orgRole: () => string | null;
+    getToken: () => Promise<string | null>;
+    getProviderToken: (provider: string) => Promise<ProviderToken | null>;
+    signOut: () => Promise<void>;
+    /** Mirrors `<Protect>`, for logic that is not a render decision. */
+    has: (condition: ProtectCondition) => boolean;
+};

package/dist/accessors.js

@@ -0,0 +1,46 @@
+import { evaluate } from '@atlasauth/js';
+import { useAtlas } from './context';
+/**
+ * The Solid peer of React's hooks and Vue's composables.
+ *
+ * Every one returns `isLoaded` alongside its data, and that is not ceremony:
+ * without it a component cannot tell "still booting" from "signed out", so it
+ * flashes a sign-in form for a frame on every load — the flash of
+ * unauthenticated content that makes an app feel broken. Each returned value is
+ * an ACCESSOR (a `() => T` function), the idiomatic Solid shape: call it inside
+ * JSX or an effect and that spot re-runs when just that field changes.
+ */
+export function useUser() {
+    const client = useAtlas();
+    return {
+        isLoaded: () => client.state.status !== 'loading',
+        isSignedIn: () => client.state.status === 'signed_in',
+        user: () => client.state.user,
+        getProviderToken: client.getProviderToken,
+    };
+}
+export function useSession() {
+    const client = useAtlas();
+    return {
+        isLoaded: () => client.state.status !== 'loading',
+        session: () => client.state.session,
+    };
+}
+export function useAuth() {
+    const client = useAtlas();
+    return {
+        isLoaded: () => client.state.status !== 'loading',
+        isSignedIn: () => client.state.status === 'signed_in',
+        status: () => client.state.status,
+        session: () => client.state.session,
+        userId: () => client.state.claims?.sub ?? null,
+        sessionId: () => client.state.claims?.sid ?? null,
+        orgId: () => client.state.claims?.org_id ?? null,
+        orgRole: () => client.state.claims?.org_role ?? null,
+        getToken: client.getToken,
+        getProviderToken: client.getProviderToken,
+        signOut: client.signOut,
+        has: (condition) => evaluate(client.state.claims, condition).allowed,
+    };
+}
+//# sourceMappingURL=accessors.js.map

package/dist/accessors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accessors.js","sourceRoot":"","sources":["../src/accessors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAA6C,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAIrC;;;;;;;;;GASG;AAEH,MAAM,UAAU,OAAO;IAWrB,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;IAC1B,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;QACjD,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW;QACrD,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI;QAC7B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU;IAIxB,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;IAC1B,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;QACjD,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,OAAO;IAiBrB,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;IAC1B,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;QACjD,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,WAAW;QACrD,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM;QACjC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO;QACnC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI;QAC9C,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,IAAI,IAAI;QACjD,KAAK,EAAE,GAAG,EAAE,CAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAA6B,IAAI,IAAI;QACxE,OAAO,EAAE,GAAG,EAAE,CAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,QAA+B,IAAI,IAAI;QAC5E,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,OAAO;KACrE,CAAC;AACJ,CAAC"}

package/dist/context.d.ts

@@ -0,0 +1,19 @@
+import type { AtlasClient } from './provider';
+/**
+ * The injected Atlas client — the Solid peer of React's `AtlasContext` and Vue's
+ * `ATLAS_INJECTION_KEY`.
+ *
+ * `<AtlasProvider>` puts exactly one `AtlasClient` here, so every accessor and
+ * component reaches a single reactive source of auth truth per provider — never
+ * a module-level singleton that would leak one request's session into another
+ * on an SSR server sharing a process.
+ */
+export declare const AtlasContext: import("solid-js").Context<AtlasClient | undefined>;
+/**
+ * Reach the Atlas client from inside the provider tree.
+ *
+ * Throws rather than handing back a null-ish default. An accessor that returned
+ * `{ user: null }` outside the provider is indistinguishable from a signed-out
+ * user, and the developer loses an afternoon to it.
+ */
+export declare function useAtlas(): AtlasClient;

package/dist/context.js

@@ -0,0 +1,26 @@
+import { createContext, useContext } from 'solid-js';
+/**
+ * The injected Atlas client — the Solid peer of React's `AtlasContext` and Vue's
+ * `ATLAS_INJECTION_KEY`.
+ *
+ * `<AtlasProvider>` puts exactly one `AtlasClient` here, so every accessor and
+ * component reaches a single reactive source of auth truth per provider — never
+ * a module-level singleton that would leak one request's session into another
+ * on an SSR server sharing a process.
+ */
+export const AtlasContext = createContext();
+/**
+ * Reach the Atlas client from inside the provider tree.
+ *
+ * Throws rather than handing back a null-ish default. An accessor that returned
+ * `{ user: null }` outside the provider is indistinguishable from a signed-out
+ * user, and the developer loses an afternoon to it.
+ */
+export function useAtlas() {
+    const client = useContext(AtlasContext);
+    if (!client) {
+        throw new Error('Atlas accessors and components must be used inside <AtlasProvider publishableKey="...">.');
+    }
+    return client;
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAGrD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,aAAa,EAAe,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ;IACtB,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/control-components.d.ts

@@ -0,0 +1,51 @@
+import { type JSX } from 'solid-js';
+import { type ProtectCondition } from '@atlasauth/js';
+/**
+ * Control / conditional-rendering components — the Solid peers of React's
+ * `control-components.tsx` and Vue's `<SignedIn>` / `<Protect>`.
+ *
+ * All three are thin `<Show>` wrappers. `when` is passed as a zero-arg FUNCTION
+ * (an accessor), which `solid-js/h` converts to a reactive component prop — so
+ * the branch flips when auth state changes without re-rendering anything above
+ * it. (A plain getter would NOT be made reactive by `h`; only a function value
+ * is.) Children are a function so `<Show>` realises them only on the winning
+ * branch.
+ */
+export declare function SignedIn(props: {
+    children?: JSX.Element;
+}): JSX.Element;
+export declare function SignedOut(props: {
+    children?: JSX.Element;
+}): JSX.Element;
+/** Render children only while the SDK is still loading. */
+export declare function AtlasLoading(props: {
+    children?: JSX.Element;
+}): JSX.Element;
+/** Render children only once the SDK has finished loading — the symmetric
+ * partner of {@link AtlasLoading}. */
+export declare function AtlasLoaded(props: {
+    children?: JSX.Element;
+}): JSX.Element;
+export type ProtectProps = ProtectCondition & {
+    children?: JSX.Element;
+    fallback?: JSX.Element;
+};
+/**
+ * `<Protect permission="…">` — conditional rendering.
+ *
+ * A rendering helper, NEVER an authorization boundary — anyone can flip the
+ * condition in devtools, and seeing is not doing. The server checking the same
+ * permission is the only thing that actually stops an action; this component's
+ * job is just to avoid showing a button that would fail. The evaluation lives in
+ * `@atlasauth/authz` (re-exported by `@atlasauth/js`), the one primitive every
+ * SDK shares, so this `<Protect>` and the server's `has()` judge a condition
+ * identically.
+ *
+ * Implemented as a `createMemo` whose value IS the content to render, returned
+ * straight from the component (not wrapped in `<Show>`). A component that
+ * returns another component — `<Protect>` returning `<Show>` — breaks under
+ * `solid-js/h`: the returned component's reactive scope stops updating, so the
+ * gate never reopened once the token's claims landed after boot. Returning a
+ * reactive accessor is how a function child behaves, and that tracks correctly.
+ */
+export declare function Protect(props: ProtectProps): JSX.Element;

package/dist/control-components.js

@@ -0,0 +1,80 @@
+import { Show, createMemo } from 'solid-js';
+import { h } from './h';
+import { evaluate } from '@atlasauth/js';
+import { useAtlas } from './context';
+import { useUser } from './accessors';
+/**
+ * Control / conditional-rendering components — the Solid peers of React's
+ * `control-components.tsx` and Vue's `<SignedIn>` / `<Protect>`.
+ *
+ * All three are thin `<Show>` wrappers. `when` is passed as a zero-arg FUNCTION
+ * (an accessor), which `solid-js/h` converts to a reactive component prop — so
+ * the branch flips when auth state changes without re-rendering anything above
+ * it. (A plain getter would NOT be made reactive by `h`; only a function value
+ * is.) Children are a function so `<Show>` realises them only on the winning
+ * branch.
+ */
+export function SignedIn(props) {
+    const { isLoaded, isSignedIn } = useUser();
+    // Renders nothing while loading rather than flashing the signed-out branch.
+    return h(Show, { when: () => isLoaded() && isSignedIn() }, () => props.children);
+}
+export function SignedOut(props) {
+    const { isLoaded, isSignedIn } = useUser();
+    return h(Show, { when: () => isLoaded() && !isSignedIn() }, () => props.children);
+}
+/** Render children only while the SDK is still loading. */
+export function AtlasLoading(props) {
+    const { isLoaded } = useUser();
+    return h(Show, { when: () => !isLoaded() }, () => props.children);
+}
+/** Render children only once the SDK has finished loading — the symmetric
+ * partner of {@link AtlasLoading}. */
+export function AtlasLoaded(props) {
+    const { isLoaded } = useUser();
+    return h(Show, { when: () => isLoaded() }, () => props.children);
+}
+/**
+ * `<Protect permission="…">` — conditional rendering.
+ *
+ * A rendering helper, NEVER an authorization boundary — anyone can flip the
+ * condition in devtools, and seeing is not doing. The server checking the same
+ * permission is the only thing that actually stops an action; this component's
+ * job is just to avoid showing a button that would fail. The evaluation lives in
+ * `@atlasauth/authz` (re-exported by `@atlasauth/js`), the one primitive every
+ * SDK shares, so this `<Protect>` and the server's `has()` judge a condition
+ * identically.
+ *
+ * Implemented as a `createMemo` whose value IS the content to render, returned
+ * straight from the component (not wrapped in `<Show>`). A component that
+ * returns another component — `<Protect>` returning `<Show>` — breaks under
+ * `solid-js/h`: the returned component's reactive scope stops updating, so the
+ * gate never reopened once the token's claims landed after boot. Returning a
+ * reactive accessor is how a function child behaves, and that tracks correctly.
+ */
+export function Protect(props) {
+    const client = useAtlas();
+    const loaded = () => client.state.status !== 'loading';
+    // Capture the condition ONCE as a plain object; it is fixed for the
+    // component's life (the `permission`/`role` props do not change the way auth
+    // state does).
+    const condition = {
+        permission: props.permission,
+        role: props.role,
+        anyPermission: props.anyPermission,
+        allPermissions: props.allPermissions,
+        plan: props.plan,
+        feature: props.feature,
+    };
+    // Read status AND claims unconditionally on every run so both are tracked
+    // from the first evaluation — while loading, show nothing (not the fallback);
+    // once loaded, show children when allowed and the caller's fallback when not.
+    const content = createMemo(() => {
+        const claims = client.state.claims;
+        if (!loaded())
+            return null;
+        return evaluate(claims, condition).allowed ? props.children : (props.fallback ?? null);
+    });
+    return content;
+}
+//# sourceMappingURL=control-components.js.map

package/dist/control-components.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-components.js","sourceRoot":"","sources":["../src/control-components.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,UAAU,EAAY,MAAM,UAAU,CAAC;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAyB,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC;;;;;;;;;;GAUG;AAEH,MAAM,UAAU,QAAQ,CAAC,KAAiC;IACxD,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAAC;IAC3C,4EAA4E;IAC5E,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAiC;IACzD,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAAC;IAC3C,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACpF,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,YAAY,CAAC,KAAiC;IAC5D,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC;IAC/B,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACpE,CAAC;AAED;sCACsC;AACtC,MAAM,UAAU,WAAW,CAAC,KAAiC;IAC3D,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,EAAE,CAAC;IAC/B,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACnE,CAAC;AAOD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,OAAO,CAAC,KAAmB;IACzC,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;IACvD,oEAAoE;IACpE,6EAA6E;IAC7E,eAAe;IACf,MAAM,SAAS,GAAG;QAChB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC;IAEF,0EAA0E;IAC1E,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;QACnC,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,IAAI,CAAC;QAC3B,OAAO,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,OAAO,OAAiC,CAAC;AAC3C,CAAC"}

package/dist/h.d.ts

@@ -0,0 +1,13 @@
+import type { JSX } from 'solid-js';
+/**
+ * `solid-js/h` is the runtime hyperscript — it lets this package author
+ * components WITHOUT JSX, so the build is a plain `tsc` (no Babel/vite-plugin-
+ * solid transform) exactly like `@atlasauth/vue`'s `h()` render functions.
+ *
+ * Its published types declare the output as a thunk (`() => Node`), which is how
+ * Solid carries a reactive node. At runtime Solid unwraps that function
+ * everywhere it accepts children — `insert`, `render`, `createComponent` — so it
+ * IS a valid reactive `JSX.Element`. We retype `h` to say so, which keeps every
+ * component signature returning an honest `JSX.Element` instead of a thunk.
+ */
+export declare const h: (type: unknown, props?: unknown, ...children: unknown[]) => JSX.Element;

package/dist/h.js

@@ -0,0 +1,14 @@
+import rawH from 'solid-js/h';
+/**
+ * `solid-js/h` is the runtime hyperscript — it lets this package author
+ * components WITHOUT JSX, so the build is a plain `tsc` (no Babel/vite-plugin-
+ * solid transform) exactly like `@atlasauth/vue`'s `h()` render functions.
+ *
+ * Its published types declare the output as a thunk (`() => Node`), which is how
+ * Solid carries a reactive node. At runtime Solid unwraps that function
+ * everywhere it accepts children — `insert`, `render`, `createComponent` — so it
+ * IS a valid reactive `JSX.Element`. We retype `h` to say so, which keeps every
+ * component signature returning an honest `JSX.Element` instead of a thunk.
+ */
+export const h = rawH;
+//# sourceMappingURL=h.js.map

package/dist/h.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"h.js","sourceRoot":"","sources":["../src/h.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,YAAY,CAAC;AAG9B;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,CAAC,GAAG,IAID,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export * from './types';
+export * from './context';
+export * from './provider';
+export * from './accessors';
+export * from './control-components';
+export * from './widgets';

package/dist/index.js

@@ -0,0 +1,7 @@
+export * from './types';
+export * from './context';
+export * from './provider';
+export * from './accessors';
+export * from './control-components';
+export * from './widgets';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,SAAS,CAAC;AACxB,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,WAAW,CAAC"}

package/dist/provider.d.ts

@@ -0,0 +1,100 @@
+import { type JSX } from 'solid-js';
+import { type ProviderToken } from '@atlasauth/js';
+import type { AtlasOrganizationMembership, AtlasSession, AtlasUser, SessionClaims } from './types';
+/**
+ * The Solid peer of React's `<AtlasProvider>` and Vue's `createAtlas()` plugin.
+ *
+ * It holds exactly one thing that matters in memory: the token. Not
+ * localStorage, not a cookie this code writes — the refresh token is HttpOnly so
+ * browser script never touches it, and the short-lived JWT lives only as long as
+ * the tab. A client that persisted either would outlive the tab and become the
+ * first thing an XSS reads.
+ */
+export type AuthStatus = 'loading' | 'signed_in' | 'signed_out';
+/**
+ * The reactive auth state. A Solid store, so a component that reads
+ * `client.state.user` re-runs ONLY when the user changes — the fine-grained
+ * peer of Vue's refs, not React's whole-component re-render.
+ */
+export interface AtlasState {
+    status: AuthStatus;
+    user: AtlasUser | null;
+    session: AtlasSession | null;
+    claims: SessionClaims | null;
+    memberships: AtlasOrganizationMembership[];
+}
+/**
+ * The client provided to the whole app. Every field React's `AtlasContextValue`
+ * exposes, but reactivity is a Solid store (`state`) plus the mount seams the
+ * widgets drive, so the public surface stays recognisable across SDKs.
+ */
+export interface AtlasClient {
+    publishableKey: string;
+    /** The instance's FAPI origin. */
+    frontendApi: string;
+    /** The reactive auth state; read fields off it inside a tracking scope. */
+    state: AtlasState;
+    /**
+     * A sign-in attempt handed back by an OAuth redirect that still owes a second
+     * factor (no session was issued). Null in the ordinary case. `<SignIn>` seeds
+     * its flow from this so the user resumes at the 2FA step instead of starting
+     * over. Captured synchronously at construction — before any component reads
+     * it — because such a redirect carries a status but no ticket.
+     */
+    pendingAttempt: {
+        id: string;
+        status: string;
+    } | null;
+    /** Always fresh: refreshes first if the cached token is close to expiry. */
+    getToken(): Promise<string | null>;
+    /**
+     * The signed-in user's OWN live token at a connected provider (Google,
+     * GitHub, …), so the app can call that provider's API. Null when there is no
+     * usable token. The server refreshes a stale one on read; the refresh token
+     * is never exposed.
+     */
+    getProviderToken(provider: string): Promise<ProviderToken | null>;
+    signOut(): Promise<void>;
+    setActiveOrganization(organizationId: string | null): Promise<void>;
+    reload(): Promise<void>;
+    /**
+     * Mount the server-driven sign-in / sign-up flow, or the user button, into a
+     * host element and return a disposer. These are the seams `<SignIn>`,
+     * `<SignUp>` and `<UserButton>` call in `onMount`, and tear down in
+     * `onCleanup`. The widgets live on the client (not in `@atlasauth/js`, which
+     * ships no DOM widgets) so a mounted flow can reach this same client — its
+     * `reload()` after completion, its `signOut()` — without re-threading context.
+     */
+    mountSignIn(el: HTMLElement): () => void;
+    mountSignUp(el: HTMLElement): () => void;
+    mountUserButton(el: HTMLElement): () => void;
+}
+export interface AtlasProviderProps {
+    publishableKey: string;
+    /** The instance's FAPI origin. Empty for same-origin. */
+    frontendApi?: string;
+    /** Injected in tests to drive the client through a mocked network. */
+    fetchImpl?: typeof fetch;
+    children?: JSX.Element;
+}
+/**
+ * Build the reactive client. Separated from the component so a test can
+ * construct it directly and so the mount seams close over one consistent
+ * client.
+ */
+export declare function createAtlasClient(options: {
+    publishableKey: string;
+    frontendApi?: string;
+    fetchImpl?: typeof fetch;
+}): {
+    client: AtlasClient;
+    boot: () => Promise<void>;
+    dispose: () => void;
+};
+/**
+ * The provider component. Builds the client, provides it, and boots the session
+ * on mount — guarded to the browser: on the server there is no redirect to
+ * complete and no cookie jar to read, so the app renders `loading` and hydrates
+ * into the real status on the client. The refresh timer is cleared on unmount.
+ */
+export declare function AtlasProvider(props: AtlasProviderProps): JSX.Element;

package/dist/provider.js

@@ -0,0 +1,239 @@
+import { onCleanup, onMount } from 'solid-js';
+import { createStore } from 'solid-js/store';
+import { isServer } from 'solid-js/web';
+import { h } from './h';
+import { FapiClient, TokenCache, getProviderToken as fetchProviderToken, msUntilRefresh, readExpiry, readRedirectResult, stripRedirectParams, } from '@atlasauth/js';
+import { AtlasContext } from './context';
+import { mountSignInWidget, mountSignUpWidget, mountUserButtonWidget } from './widgets';
+/**
+ * Build the reactive client. Separated from the component so a test can
+ * construct it directly and so the mount seams close over one consistent
+ * client.
+ */
+export function createAtlasClient(options) {
+    const publishableKey = options.publishableKey;
+    const baseUrl = options.frontendApi ?? '';
+    const doFetch = options.fetchImpl ?? fetch;
+    const [state, setState] = createStore({
+        status: 'loading',
+        user: null,
+        session: null,
+        claims: null,
+        memberships: [],
+    });
+    const cache = new TokenCache();
+    let timer = null;
+    // A `needs_second_factor` redirect carries a status but no ticket; that is
+    // what the 2FA resume seeds from. Read once, synchronously, at construction.
+    const pendingAttempt = (() => {
+        if (isServer || typeof window === 'undefined')
+            return null;
+        const result = readRedirectResult(window.location.search);
+        return result?.status && !result.ticket
+            ? { id: result.attemptId, status: result.status }
+            : null;
+    })();
+    const call = (path, init) => doFetch(`${baseUrl}${path}`, {
+        ...init,
+        // Cookies carry the session; a fetch without this is indistinguishable
+        // from being signed out.
+        credentials: 'include',
+        headers: {
+            'x-publishable-key': publishableKey,
+            ...(init?.body ? { 'content-type': 'application/json' } : {}),
+            ...init?.headers,
+        },
+    });
+    const applyToken = (jwt, sessionId) => {
+        const expiresAt = readExpiry(jwt);
+        if (!expiresAt)
+            return;
+        cache.set({ jwt, expiresAt, sessionId });
+        setState('claims', decodeClaims(jwt));
+    };
+    // Keep the proactive refresh timer in step with the live token. Called after
+    // every status/token change rather than from a reactive effect, so the client
+    // behaves identically whether or not it was built inside a Solid root.
+    const scheduleRefresh = () => {
+        if (timer) {
+            clearTimeout(timer);
+            timer = null;
+        }
+        if (state.status !== 'signed_in')
+            return;
+        const token = cache.peek();
+        if (!token)
+            return;
+        const delay = msUntilRefresh({ token, now: Date.now() });
+        timer = setTimeout(() => void refresh(), delay);
+    };
+    const reload = async () => {
+        try {
+            const response = await call('/v1/client');
+            if (!response.ok)
+                throw new Error('boot failed');
+            const body = (await response.json());
+            if (!body.session || !body.user) {
+                cache.clear();
+                setState({ status: 'signed_out', user: null, session: null, claims: null, memberships: [] });
+                scheduleRefresh();
+                return;
+            }
+            setState({
+                status: 'signed_in',
+                user: body.user,
+                session: body.session,
+                memberships: body.organization_memberships ?? [],
+            });
+            if (body.jwt)
+                applyToken(body.jwt, body.session.id);
+            scheduleRefresh();
+        }
+        catch {
+            // A failed boot is NOT signed-out. Rendering a sign-in form because the
+            // network hiccuped throws away a perfectly good session and forces a
+            // needless re-auth.
+            if (state.status === 'loading')
+                setState('status', 'signed_out');
+        }
+    };
+    const refresh = async () => {
+        const current = cache.peek();
+        if (!current)
+            return;
+        try {
+            const response = await call(`/v1/client/sessions/${current.sessionId}/tokens`, {
+                method: 'POST',
+            });
+            if (!response.ok)
+                throw new Error('refresh failed');
+            const body = (await response.json());
+            applyToken(body.jwt, body.session_id);
+            scheduleRefresh();
+        }
+        catch {
+            // The session may genuinely be gone. Re-boot rather than guess.
+            await reload();
+        }
+    };
+    const getToken = async () => {
+        // A 5s skew so a token that would die inside the caller's request is
+        // refreshed first rather than handed over.
+        const usable = cache.get(5_000);
+        if (usable)
+            return usable.jwt;
+        await refresh();
+        return cache.get(5_000)?.jwt ?? null;
+    };
+    // The FAPI client for the token-vault read. Reuses the same publishable key
+    // and fetch so `@atlasauth/js` stays the single implementation.
+    const fapiClient = new FapiClient({ publishableKey, baseUrl, fetchImpl: doFetch });
+    const getProviderToken = (provider) => fetchProviderToken(fapiClient, provider);
+    const signOut = async () => {
+        const current = cache.peek();
+        if (current) {
+            await call(`/v1/client/sessions/${current.sessionId}/revoke`, { method: 'POST' }).catch(() => undefined);
+        }
+        cache.clear();
+        setState({ status: 'signed_out', user: null, session: null, claims: null, memberships: [] });
+        scheduleRefresh();
+    };
+    const setActiveOrganization = async (organizationId) => {
+        const current = cache.peek();
+        if (!current)
+            return;
+        const response = await call(`/v1/client/sessions/${current.sessionId}/touch`, {
+            method: 'POST',
+            body: JSON.stringify({ active_organization_id: organizationId }),
+        });
+        if (!response.ok)
+            return;
+        const body = (await response.json());
+        // The new token carries the new org claims; re-boot would work too but
+        // costs a round trip for information already in hand.
+        applyToken(body.jwt, current.sessionId);
+        await reload();
+    };
+    /**
+     * Complete a redirect-based sign-in. An OAuth or hosted-page flow lands back
+     * with a one-time ticket in the URL; exchange it for cookies, scrub the URL so
+     * a reload can't replay it, THEN boot. A redirect carrying only a status (a
+     * second factor still owed) has no ticket, so nothing is exchanged and the app
+     * boots signed-out — exactly as intended.
+     */
+    const boot = async () => {
+        const result = !isServer && typeof window !== 'undefined'
+            ? readRedirectResult(window.location.search)
+            : null;
+        if (result?.ticket) {
+            await call('/v1/client/tickets/exchange', {
+                method: 'POST',
+                body: JSON.stringify({ attempt_id: result.attemptId, ticket: result.ticket }),
+            }).catch(() => undefined);
+        }
+        if (result && typeof window !== 'undefined') {
+            window.history.replaceState({}, document.title, stripRedirectParams(window.location.href));
+        }
+        await reload();
+    };
+    // `client` is referenced inside the mount seams; the arrows only run once the
+    // `const` is initialised, so the self-reference is sound.
+    const client = {
+        publishableKey,
+        frontendApi: baseUrl,
+        state,
+        pendingAttempt,
+        getToken,
+        getProviderToken,
+        signOut,
+        setActiveOrganization,
+        reload,
+        mountSignIn: (el) => mountSignInWidget(client, el),
+        mountSignUp: (el) => mountSignUpWidget(client, el),
+        mountUserButton: (el) => mountUserButtonWidget(client, el),
+    };
+    // Clear the refresh timer WITHOUT revoking the session — the provider calls
+    // this on unmount. `signOut()` would log the user out server-side, which is
+    // emphatically not what unmounting a React/Vue/Solid tree should do.
+    const dispose = () => {
+        if (timer) {
+            clearTimeout(timer);
+            timer = null;
+        }
+    };
+    return { client, boot, dispose };
+}
+/**
+ * The provider component. Builds the client, provides it, and boots the session
+ * on mount — guarded to the browser: on the server there is no redirect to
+ * complete and no cookie jar to read, so the app renders `loading` and hydrates
+ * into the real status on the client. The refresh timer is cleared on unmount.
+ */
+export function AtlasProvider(props) {
+    const { client, boot, dispose } = createAtlasClient({
+        publishableKey: props.publishableKey,
+        frontendApi: props.frontendApi,
+        fetchImpl: props.fetchImpl,
+    });
+    if (!isServer) {
+        onMount(() => {
+            void boot();
+        });
+        // The client's refresh timer is a resource that outlives a render; drop it
+        // when the provider unmounts so a torn-down app does not keep polling.
+        onCleanup(dispose);
+    }
+    return h(AtlasContext.Provider, { value: client }, () => props.children);
+}
+function decodeClaims(jwt) {
+    const parts = jwt.split('.');
+    if (parts.length !== 3)
+        return null;
+    try {
+        return JSON.parse(atob(parts[1].replace(/-/g, '+').replace(/_/g, '/')));
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=provider.js.map

package/dist/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAY,MAAM,UAAU,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,UAAU,EACV,UAAU,EACV,gBAAgB,IAAI,kBAAkB,EACtC,cAAc,EACd,UAAU,EACV,kBAAkB,EAClB,mBAAmB,GAEpB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAsFxF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAIjC;IACC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAE3C,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,WAAW,CAAa;QAChD,MAAM,EAAE,SAAS;QACjB,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,IAAI;QACZ,WAAW,EAAE,EAAE;KAChB,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,IAAI,UAAU,EAAE,CAAC;IAC/B,IAAI,KAAK,GAAyC,IAAI,CAAC;IAEvD,2EAA2E;IAC3E,6EAA6E;IAC7E,MAAM,cAAc,GAA0C,CAAC,GAAG,EAAE;QAClE,IAAI,QAAQ,IAAI,OAAO,MAAM,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QAC3D,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC1D,OAAO,MAAM,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM;YACrC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;YACjD,CAAC,CAAC,IAAI,CAAC;IACX,CAAC,CAAC,EAAE,CAAC;IAEL,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,IAAkB,EAAE,EAAE,CAChD,OAAO,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE;QAC3B,GAAG,IAAI;QACP,uEAAuE;QACvE,yBAAyB;QACzB,WAAW,EAAE,SAAS;QACtB,OAAO,EAAE;YACP,mBAAmB,EAAE,cAAc;YACnC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,IAAI,EAAE,OAAO;SACjB;KACF,CAAC,CAAC;IAEL,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,SAAiB,EAAE,EAAE;QACpD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,SAAS;YAAE,OAAO;QACvB,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QACzC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC;IAEF,6EAA6E;IAC7E,8EAA8E;IAC9E,uEAAuE;IACvE,MAAM,eAAe,GAAG,GAAG,EAAE;QAC3B,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO;QACzC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,KAAK,GAAG,cAAc,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACzD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;YAEjD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAKlC,CAAC;YAEF,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBAChC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,QAAQ,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC7F,eAAe,EAAE,CAAC;gBAClB,OAAO;YACT,CAAC;YAED,QAAQ,CAAC;gBACP,MAAM,EAAE,WAAW;gBACnB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,WAAW,EAAE,IAAI,CAAC,wBAAwB,IAAI,EAAE;aACjD,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,GAAG;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACpD,eAAe,EAAE,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,wEAAwE;YACxE,qEAAqE;YACrE,oBAAoB;YACpB,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;gBAAE,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACnE,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,uBAAuB,OAAO,CAAC,SAAS,SAAS,EAAE;gBAC7E,MAAM,EAAE,MAAM;aACf,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAEpD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwC,CAAC;YAC5E,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;YACtC,eAAe,EAAE,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,gEAAgE;YAChE,MAAM,MAAM,EAAE,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,qEAAqE;QACrE,2CAA2C;QAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC;QAC9B,MAAM,OAAO,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC;IACvC,CAAC,CAAC;IAEF,4EAA4E;IAC5E,gEAAgE;IAChE,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC;IACnF,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAE,EAAE,CAAC,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAExF,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,uBAAuB,OAAO,CAAC,SAAS,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CACrF,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7F,eAAe,EAAE,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,qBAAqB,GAAG,KAAK,EAAE,cAA6B,EAAE,EAAE;QACpE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,OAAO;QAErB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,uBAAuB,OAAO,CAAC,SAAS,QAAQ,EAAE;YAC5E,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,sBAAsB,EAAE,cAAc,EAAE,CAAC;SACjE,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO;QAEzB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAoB,CAAC;QACxD,uEAAuE;QACvE,sDAAsD;QACtD,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,MAAM,EAAE,CAAC;IACjB,CAAC,CAAC;IAEF;;;;;;OAMG;IACH,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;QACtB,MAAM,MAAM,GACV,CAAC,QAAQ,IAAI,OAAO,MAAM,KAAK,WAAW;YACxC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5C,CAAC,CAAC,IAAI,CAAC;QAEX,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,6BAA6B,EAAE;gBACxC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;aAC9E,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;YAC5C,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,MAAM,EAAE,CAAC;IACjB,CAAC,CAAC;IAEF,8EAA8E;IAC9E,0DAA0D;IAC1D,MAAM,MAAM,GAAgB;QAC1B,cAAc;QACd,WAAW,EAAE,OAAO;QACpB,KAAK;QACL,cAAc;QACd,QAAQ;QACR,gBAAgB;QAChB,OAAO;QACP,qBAAqB;QACrB,MAAM;QACN,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC;QAClD,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,CAAC;QAClD,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,EAAE,EAAE,CAAC;KAC3D,CAAC;IAEF,4EAA4E;IAC5E,4EAA4E;IAC5E,qEAAqE;IACrE,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC;QAClD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,EAAE;YACX,KAAK,IAAI,EAAE,CAAC;QACd,CAAC,CAAC,CAAC;QACH,2EAA2E;QAC3E,uEAAuE;QACvE,SAAS,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAkB,CAAC;IAC5F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,50 @@
+/**
+ * The public auth shapes the Solid SDK surfaces.
+ *
+ * Kept identical to `@atlasauth/vue`'s `types.ts` on purpose: a customer moving
+ * a component between frameworks should read the same `user.first_name` and the
+ * same `claims.org_role`, not relearn the model. These mirror the FAPI
+ * `/v1/client` response, so the field names are the server's, not ours.
+ */
+export interface SessionClaims {
+    sub: string;
+    sid: string;
+    exp: number;
+    org_id?: string;
+    org_slug?: string;
+    org_role?: string;
+    org_permissions?: string[];
+    mfa?: boolean;
+    [claim: string]: unknown;
+}
+export interface AtlasUser {
+    id: string;
+    first_name: string | null;
+    last_name: string | null;
+    username: string | null;
+    image_url: string | null;
+    public_metadata: Record<string, unknown>;
+    unsafe_metadata: Record<string, unknown>;
+    mfa_enabled: boolean;
+    has_password: boolean;
+    email_addresses?: Array<{
+        id: string;
+        email_address: string;
+        verified: boolean;
+        primary: boolean;
+    }>;
+}
+export interface AtlasOrganizationMembership {
+    role: string;
+    organization: {
+        id: string;
+        name: string;
+        slug: string;
+        image_url: string | null;
+    };
+}
+export interface AtlasSession {
+    id: string;
+    status: string;
+    last_active_organization_id: string | null;
+}

package/dist/types.js

@@ -0,0 +1,10 @@
+/**
+ * The public auth shapes the Solid SDK surfaces.
+ *
+ * Kept identical to `@atlasauth/vue`'s `types.ts` on purpose: a customer moving
+ * a component between frameworks should read the same `user.first_name` and the
+ * same `claims.org_role`, not relearn the model. These mirror the FAPI
+ * `/v1/client` response, so the field names are the server's, not ours.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/widgets.d.ts

@@ -0,0 +1,8 @@
+import { type JSX } from 'solid-js';
+import type { AtlasClient } from './provider';
+export declare function mountSignInWidget(client: AtlasClient, el: HTMLElement): () => void;
+export declare function mountSignUpWidget(client: AtlasClient, el: HTMLElement): () => void;
+export declare function mountUserButtonWidget(client: AtlasClient, el: HTMLElement): () => void;
+export declare const SignIn: () => JSX.Element;
+export declare const SignUp: () => JSX.Element;
+export declare const UserButton: () => JSX.Element;

package/dist/widgets.js

@@ -0,0 +1,207 @@
+import { Show, createEffect, createSignal, onCleanup, onMount } from 'solid-js';
+import { isServer, render } from 'solid-js/web';
+import { h } from './h';
+import { FapiClient, advance, flowFromPending, nextStep, pollAttempt, shouldKeepPolling, } from '@atlasauth/js';
+import { useAtlas } from './context';
+/** A labelled, UNCONTROLLED input — its value is read from the form's
+ * `FormData` on submit, which sidesteps per-keystroke signal churn for a plain
+ * auth form. */
+function field(name, label, type = 'text') {
+    return h('label', { class: 'atlas-field' }, [
+        h('span', label),
+        h('input', { class: 'atlas-input', name, type }),
+    ]);
+}
+/** Form-level (non-field) errors, rendered as an alert. */
+function renderErrors(errors) {
+    return errors
+        .filter((error) => !error.param)
+        .map((error) => h('p', { class: 'atlas-error', role: 'alert' }, error.message));
+}
+/** The fields for the current server-driven step. The `unknown`/default branch
+ * says so out loud rather than rendering a blank box the user cannot act on. */
+function renderFields(kind) {
+    switch (kind) {
+        case 'collect_identifier':
+            return [field('identifier', 'Email', 'email')];
+        case 'collect_first_factor':
+            return [field('password', 'Password', 'password')];
+        case 'collect_second_factor':
+            return [field('code', 'Two-factor code')];
+        case 'enroll_second_factor':
+            // Two codes, not one: consecutive codes catch a phone with a fast clock
+            // here rather than on every sign-in afterwards.
+            return [
+                field('code', 'Authenticator code'),
+                field('secondCode', 'Next authenticator code'),
+            ];
+        case 'collect_email_code':
+            return [field('code', 'Email code')];
+        case 'collect_new_password':
+            return [field('password', 'New password', 'password')];
+        case 'await_oauth':
+            return [h('p', 'Continue in the window that opened.')];
+        case 'done':
+            return [h('p', 'Signed in — you can close this.')];
+        default:
+            return [h('p', { class: 'atlas-error' }, 'This step needs an updated app. Please reload.')];
+    }
+}
+function renderSubmit(kind, busy) {
+    if (kind === 'done' || kind === 'await_oauth')
+        return null;
+    return h('button', { class: 'atlas-button', type: 'submit', disabled: busy }, 'Continue');
+}
+/**
+ * The server-driven sign-in / sign-up flow. Never decides what comes next: it
+ * drives through `advance` (the driver owns the step→endpoint mapping) and
+ * renders whatever `status` the server returned. `<SignIn>` and `<SignUp>` are
+ * the same driver — only the title differs, exactly as in React and Vue.
+ */
+function Flow(props) {
+    const client = props.client;
+    const fapi = new FapiClient({ publishableKey: client.publishableKey, baseUrl: client.frontendApi });
+    // Seeded from a redirect that returned mid-flow (OAuth owing a second
+    // factor), so the user resumes at the demanded step instead of restarting.
+    const [state, setState] = createSignal(flowFromPending(client.pendingAttempt));
+    const submit = (values) => {
+        void (async () => {
+            setState((s) => ({ ...s, busy: true, errors: [] }));
+            const next = await advance(fapi, state(), values);
+            setState(next);
+            // A completion response carries a one-time ticket (§7.1). FAPI is
+            // cross-origin to the app and cannot set the cookie on its own response,
+            // so exchange the ticket over a request THEN re-boot, so the rest of the
+            // app sees a signed-in user — and no session token ever rode in a URL.
+            if (next.attempt?.status === 'complete') {
+                if (next.ticket) {
+                    await fapi.post('/v1/client/tickets/exchange', {
+                        attempt_id: next.attempt.id,
+                        ticket: next.ticket,
+                    });
+                }
+                await client.reload();
+            }
+        })();
+    };
+    // §5.3 magic-link poll: a sign-in finished on another device. Restart on each
+    // state change, run only while the state says to, stop on teardown.
+    let poller = null;
+    const stopPolling = () => {
+        if (poller) {
+            clearInterval(poller);
+            poller = null;
+        }
+    };
+    createEffect(() => {
+        const current = state();
+        stopPolling();
+        if (!shouldKeepPolling(current))
+            return;
+        poller = setInterval(() => {
+            void (async () => {
+                const { state: next, ticket } = await pollAttempt(fapi, state());
+                setState(next);
+                if (!ticket || !next.attempt)
+                    return;
+                await fapi.post('/v1/client/tickets/exchange', {
+                    attempt_id: next.attempt.id,
+                    ticket,
+                });
+                await client.reload();
+            })();
+        }, 2_000);
+    });
+    onCleanup(stopPolling);
+    const step = () => {
+        const attempt = state().attempt;
+        return attempt ? nextStep(attempt) : { kind: 'collect_identifier' };
+    };
+    return h('form', {
+        class: 'atlas-card',
+        onSubmit: (event) => {
+            event.preventDefault();
+            const form = event.currentTarget;
+            const values = {};
+            new FormData(form).forEach((value, key) => {
+                values[key] = String(value);
+            });
+            submit(values);
+        },
+    }, [
+        h('h1', { class: 'atlas-title' }, props.title),
+        () => renderErrors(state().errors),
+        () => renderFields(step().kind),
+        () => renderSubmit(step().kind, state().busy),
+    ]);
+}
+/** The signed-in user's avatar + a menu whose only built-in action is sign-out
+ * — the Solid peer of Vue's `<UserButton>`. Renders nothing when signed out. */
+function UserButtonView(client) {
+    const [open, setOpen] = createSignal(false);
+    const user = () => client.state.user;
+    const label = () => {
+        const u = user();
+        if (!u)
+            return '';
+        return [u.first_name, u.last_name].filter(Boolean).join(' ') || u.username || '';
+    };
+    return h(Show, { when: () => Boolean(user()) }, () => h('div', { class: 'atlas-user-button' }, [
+        h('button', {
+            class: 'atlas-avatar',
+            'aria-expanded': () => open(),
+            onClick: () => setOpen(!open()),
+        }, () => {
+            const u = user();
+            return u?.image_url
+                ? h('img', { alt: '', src: u.image_url })
+                : h('span', () => label().slice(0, 1));
+        }),
+        () => open()
+            ? h('div', { class: 'atlas-menu', role: 'menu' }, [
+                h('span', { class: 'atlas-menu-item' }, () => label()),
+                h('button', { class: 'atlas-menu-item', onClick: () => void client.signOut() }, 'Sign out'),
+            ])
+            : null,
+    ]));
+}
+// --- Mount seams, called by the client's `mountX` methods. `render` returns the
+// disposer that `onCleanup` later invokes to tear the nested root down. ---
+export function mountSignInWidget(client, el) {
+    return render(() => Flow({ client, title: 'Sign in' }), el);
+}
+export function mountSignUpWidget(client, el) {
+    return render(() => Flow({ client, title: 'Sign up' }), el);
+}
+export function mountUserButtonWidget(client, el) {
+    return render(() => UserButtonView(client), el);
+}
+// --- The public, thin mountable components. ---
+/**
+ * Build a component that mounts one widget. It calls the CLIENT's seam
+ * (`client.mountSignIn` etc.) rather than the module function directly, so the
+ * mounted root reaches the same client the provider built — and so the seam is a
+ * real, test-observable boundary. The host element is created imperatively
+ * (not via a reactive `ref`) so it is guaranteed present the moment `onMount`
+ * fires. SSR renders an empty host and hydrates on the client.
+ */
+function mountable(seam, rootClass) {
+    return () => {
+        const client = useAtlas();
+        if (isServer)
+            return h('div', { class: rootClass });
+        const container = document.createElement('div');
+        container.className = rootClass;
+        onMount(() => {
+            // The seam drives a nested Solid root into `container`; its disposer is
+            // the whole teardown, so unmounting the component unmounts the widget.
+            const dispose = seam(client)(container);
+            onCleanup(dispose);
+        });
+        return container;
+    };
+}
+export const SignIn = mountable((client) => client.mountSignIn, 'atlas-signin-root');
+export const SignUp = mountable((client) => client.mountSignUp, 'atlas-signup-root');
+export const UserButton = mountable((client) => client.mountUserButton, 'atlas-user-button-root');
+//# sourceMappingURL=widgets.js.map

package/dist/widgets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"widgets.js","sourceRoot":"","sources":["../src/widgets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAY,MAAM,UAAU,CAAC;AAC1F,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,UAAU,EACV,OAAO,EACP,eAAe,EACf,QAAQ,EACR,WAAW,EACX,iBAAiB,GAElB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAsBrC;;gBAEgB;AAChB,SAAS,KAAK,CAAC,IAAY,EAAE,KAAa,EAAE,IAAI,GAAG,MAAM;IACvD,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;QAC1C,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC;QAChB,CAAC,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;KACjD,CAAC,CAAC;AACL,CAAC;AAED,2DAA2D;AAC3D,SAAS,YAAY,CAAC,MAAkB;IACtC,OAAO,MAAM;SACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;SAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;AACpF,CAAC;AAED;gFACgF;AAChF,SAAS,YAAY,CAAC,IAAY;IAChC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,oBAAoB;YACvB,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACjD,KAAK,sBAAsB;YACzB,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;QACrD,KAAK,uBAAuB;YAC1B,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC5C,KAAK,sBAAsB;YACzB,wEAAwE;YACxE,gDAAgD;YAChD,OAAO;gBACL,KAAK,CAAC,MAAM,EAAE,oBAAoB,CAAC;gBACnC,KAAK,CAAC,YAAY,EAAE,yBAAyB,CAAC;aAC/C,CAAC;QACJ,KAAK,oBAAoB;YACvB,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;QACvC,KAAK,sBAAsB;YACzB,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC;QACzD,KAAK,aAAa;YAChB,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,qCAAqC,CAAC,CAAC,CAAC;QACzD,KAAK,MAAM;YACT,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC,CAAC;QACrD;YACE,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,gDAAgD,CAAC,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,IAAa;IAC/C,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;AAC5F,CAAC;AAED;;;;;GAKG;AACH,SAAS,IAAI,CAAC,KAA6C;IACzD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACpG,sEAAsE;IACtE,2EAA2E;IAC3E,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,YAAY,CAAY,eAAe,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;IAE1F,MAAM,MAAM,GAAG,CAAC,MAA8B,EAAE,EAAE;QAChD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YACpD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;YAClD,QAAQ,CAAC,IAAI,CAAC,CAAC;YAEf,kEAAkE;YAClE,yEAAyE;YACzE,yEAAyE;YACzE,uEAAuE;YACvE,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;gBACxC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBAChB,MAAM,IAAI,CAAC,IAAI,CAAC,6BAA6B,EAAE;wBAC7C,UAAU,EAAG,IAAI,CAAC,OAA2B,CAAC,EAAE;wBAChD,MAAM,EAAE,IAAI,CAAC,MAAM;qBACpB,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC;IAEF,8EAA8E;IAC9E,oEAAoE;IACpE,IAAI,MAAM,GAA0C,IAAI,CAAC;IACzD,MAAM,WAAW,GAAG,GAAG,EAAE;QACvB,IAAI,MAAM,EAAE,CAAC;YACX,aAAa,CAAC,MAAM,CAAC,CAAC;YACtB,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;IACH,CAAC,CAAC;IACF,YAAY,CAAC,GAAG,EAAE;QAChB,MAAM,OAAO,GAAG,KAAK,EAAE,CAAC;QACxB,WAAW,EAAE,CAAC;QACd,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;YAAE,OAAO;QACxC,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE;YACxB,KAAK,CAAC,KAAK,IAAI,EAAE;gBACf,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjE,QAAQ,CAAC,IAAI,CAAC,CAAC;gBACf,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,OAAO;gBACrC,MAAM,IAAI,CAAC,IAAI,CAAC,6BAA6B,EAAE;oBAC7C,UAAU,EAAG,IAAI,CAAC,OAA2B,CAAC,EAAE;oBAChD,MAAM;iBACP,CAAC,CAAC;gBACH,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;YACxB,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,EAAE,KAAK,CAAC,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,WAAW,CAAC,CAAC;IAEvB,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,MAAM,OAAO,GAAG,KAAK,EAAE,CAAC,OAAO,CAAC;QAChC,OAAO,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,oBAAoB,EAAY,CAAC;IACjF,CAAC,CAAC;IAEF,OAAO,CAAC,CACN,MAAM,EACN;QACE,KAAK,EAAE,YAAY;QACnB,QAAQ,EAAE,CAAC,KAAY,EAAE,EAAE;YACzB,KAAK,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,KAAK,CAAC,aAAgC,CAAC;YACpD,MAAM,MAAM,GAA2B,EAAE,CAAC;YAC1C,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACxC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,CAAC;QACjB,CAAC;KACF,EACD;QACE,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC;QAC9C,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC;QAClC,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC;QAC/B,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC;KAC9C,CACF,CAAC;AACJ,CAAC;AAED;gFACgF;AAChF,SAAS,cAAc,CAAC,MAAmB;IACzC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IACrC,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACjB,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC;QAClB,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;IACnF,CAAC,CAAC;IAEF,OAAO,CAAC,CACN,IAAI,EACJ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EAC/B,GAAG,EAAE,CACH,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE;QACvC,CAAC,CACC,QAAQ,EACR;YACE,KAAK,EAAE,cAAc;YACrB,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE;YAC7B,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;SAChC,EACD,GAAG,EAAE;YACH,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,EAAE,SAAS;gBACjB,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;gBACzC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC,CACF;QACD,GAAG,EAAE,CACH,IAAI,EAAE;YACJ,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;gBAC9C,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC;gBACtD,CAAC,CACC,QAAQ,EACR,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,MAAM,CAAC,OAAO,EAAE,EAAE,EAClE,UAAU,CACX;aACF,CAAC;YACJ,CAAC,CAAC,IAAI;KACX,CAAC,CACL,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,4EAA4E;AAE5E,MAAM,UAAU,iBAAiB,CAAC,MAAmB,EAAE,EAAe;IACpE,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAmB,EAAE,EAAe;IACpE,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAmB,EAAE,EAAe;IACxE,OAAO,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,iDAAiD;AAEjD;;;;;;;GAOG;AACH,SAAS,SAAS,CAChB,IAA8D,EAC9D,SAAiB;IAEjB,OAAO,GAAgB,EAAE;QACvB,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;QAC1B,IAAI,QAAQ;YAAE,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAEpD,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAChD,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC;QAChC,OAAO,CAAC,GAAG,EAAE;YACX,wEAAwE;YACxE,uEAAuE;YACvE,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC;YACxC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;AACrF,MAAM,CAAC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;AACrF,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,47 @@
 {
   "name": "@atlasauth/solid",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.1",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "@atlasauth/js": "0.4.0"
+  },
+  "peerDependencies": {
+    "solid-js": ">=1.8"
+  },
+  "devDependencies": {
+    "@solidjs/testing-library": "^0.8.10",
+    "jsdom": "^25.0.1",
+    "solid-js": "^1.8.0",
+    "typescript": "^5.6.3",
+    "vitest": "^2.1.4"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/alphajew420/ssoly.git",
+    "directory": "packages/solid"
+  },
+  "homepage": "https://github.com/alphajew420/ssoly/tree/main/packages/solid#readme",
+  "bugs": {
+    "url": "https://github.com/alphajew420/ssoly/issues"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  }
 }