@atlasauth/svelte 0.7.0 → 0.9.0

package/dist/components/SignIn.svelte

@@ -1,22 +1,69 @@
 <script>import { onDestroy } from "svelte";
+import { lastUsedMethodLabel, pendingRecoveryCodes, signUp as hostedSignUp } from "@atlasauth/js";
 import { signIn } from "../accessors";
+import { useAtlas } from "../context";
+import { classFor } from "../appearance";
+import { translate } from "../i18n";
 import AttemptFlow from "./AttemptFlow.svelte";
+import RecoveryCodes from "./RecoveryCodes.svelte";
 export let afterUrl = void 0;
+export let signUpUrl = void 0;
+const atlas = useAtlas();
+const t = (key) => translate(atlas.catalog, key);
+function signUpHref(url, after) {
+  if (url === null) return null;
+  if (url) return url;
+  try {
+    return hostedSignUp({
+      frontendApi: atlas.frontendApi,
+      redirectUrl: after ?? (typeof window !== "undefined" ? window.location.href : void 0),
+      navigate: false
+    });
+  } catch {
+    return null;
+  }
+}
+$: promptHref = $flowState.attempt?.status !== "complete" ? signUpHref(signUpUrl, afterUrl) : null;
 const flow = signIn();
 const flowState = flow.state;
 const settings = flow.settings;
+const lastMethod = flow.lastMethod;
+const enrollmentState = flow.enrollmentState;
 onDestroy(() => flow.destroy());
+$: recoveryCodes = pendingRecoveryCodes($flowState);
+$: lastLabel = !$flowState.attempt ? lastUsedMethodLabel($lastMethod, t) : null;
 const drawn = (..._deps) => flow.captcha.needed ? flow.captcha : null;
 $: captcha = drawn($settings, $flowState);
 </script>
 
+{#if lastLabel}
+  <p class={classFor('badge', atlas.appearance, 'atlas-text atlas-last-used-hint')} data-atlas="last-used" data-atlas-method={$lastMethod}>
+    {t('signIn.lastUsed')}: {lastLabel}
+  </p>
+{/if}
+
+{#if recoveryCodes}
+  <RecoveryCodes codes={recoveryCodes} busy={$flowState.busy} onSaved={flow.saveRecoveryCodes} />
+{:else}
 <AttemptFlow
   attempt={$flowState.attempt}
   busy={$flowState.busy}
   errors={$flowState.errors}
+  sessionKept={$flowState.sessionKept}
   titleKey="signIn.title"
   onSubmit={flow.submit}
   onPrepare={flow.prepare}
+  onEmailSecondFactor={$settings?.account.emailSecondFactor ? flow.sendEmailSecondFactor : null}
+  onSmsSecondFactor={$settings && flow.mfaChoices().sms ? flow.sendSmsSecondFactor : null}
+  enrollment={flow.enrollment}
+  enrollmentState={$enrollmentState}
   emailDelivery={$settings?.emailDelivery ?? null}
   {captcha}
 />
+{/if}
+
+{#if promptHref}
+  <p class={classFor('footerAction', atlas.appearance, 'atlas-footer')} data-atlas-sign-up-prompt="">
+    {t('signIn.noAccount')} <a class="atlas-link" href={promptHref}>{t('signIn.signUpLink')}</a>
+  </p>
+{/if}

package/dist/components/SignIn.svelte.d.ts

@@ -9,6 +9,11 @@ declare const __propDef: {
            * Offers emailed first factors (code / link) only while the app can deliver
            * email (`settings.emailDelivery`).
            */ afterUrl?: string | undefined;
+        /**
+           * Where "No account? Sign up" goes. Default: the instance's hosted sign-up
+           * page (carrying the visitor's referral). `null` hides it. Always shown, never
+           * only after a failed sign-in, so it says nothing about whether an email has an account.
+           */ signUpUrl?: string | null | undefined;
     };
     events: {
         [evt: string]: CustomEvent<any>;

package/dist/components/SignUp.svelte

@@ -1,6 +1,8 @@
 <script>import { onDestroy } from "svelte";
+import { awaitingPasskey, passkeysSupported } from "@atlasauth/js";
 import { signUp } from "../accessors";
 import AttemptFlow from "./AttemptFlow.svelte";
+import PasskeySignUpStep from "./PasskeySignUpStep.svelte";
 import SignUpForm from "./SignUpForm.svelte";
 export let afterUrl = void 0;
 const flow = signUp();
@@ -9,15 +11,27 @@ const settings = flow.settings;
 onDestroy(() => flow.destroy());
 const drawn = (..._deps) => flow.signUpCaptcha.needed ? flow.signUpCaptcha : null;
 $: captcha = drawn($settings, $flowState);
+let mode = "password";
+$: offer = $settings?.account.passkeySignUp ?? null;
+$: canPasskey = !!offer && passkeysSupported();
+$: usingPasskey = mode === "passkey" && canPasskey;
+function switchMode() {
+  mode = usingPasskey ? "password" : "passkey";
+}
 </script>
 
-{#if $flowState.attempt}
+{#if $flowState.attempt && awaitingPasskey($flowState.attempt)}
+  <PasskeySignUpStep busy={$flowState.busy} errors={$flowState.errors} onCreate={flow.createPasskey} />
+{:else if $flowState.attempt}
   <AttemptFlow
     attempt={$flowState.attempt}
     busy={$flowState.busy}
     errors={$flowState.errors}
+    sessionKept={$flowState.sessionKept}
     titleKey="signUp.title"
     onSubmit={flow.submit}
+    emailVerification={$settings?.account.emailVerification ?? 'code'}
+    onResend={flow.resendSignUp}
   />
 {:else}
   <SignUpForm
@@ -25,6 +39,8 @@ $: captcha = drawn($settings, $flowState);
     busy={$flowState.busy}
     errors={$flowState.errors}
     {captcha}
-    onSubmit={flow.create}
+    onSubmit={usingPasskey ? flow.createWithPasskey : flow.create}
+    passkey={usingPasskey && offer ? { email: offer.email } : null}
+    onSwitchMode={canPasskey ? switchMode : undefined}
   />
 {/if}

package/dist/components/SignUpForm.svelte

@@ -10,6 +10,8 @@ export let busy = false;
 export let errors = [];
 export let captcha = null;
 export let onSubmit;
+export let passkey = null;
+export let onSwitchMode = void 0;
 const atlas = useAtlas();
 const cls = (key, base) => classFor(key, atlas.appearance, base);
 const t = (key, vars) => translate(atlas.catalog, key, vars);
@@ -20,7 +22,9 @@ $: legal = settings?.legal;
 $: showLegal = !!legal && (!!legal.termsUrl || !!legal.privacyUrl);
 $: consentOk = !legal?.required || agreed;
 $: fields = settings?.signUpFields ?? [];
-$: emailUnavailable = settings?.emailDelivery?.passwordSignUp === false;
+$: emailUnavailable = settings?.emailDelivery?.passwordSignUp === false && !(passkey && passkey.email !== "required");
+$: showEmail = !passkey || passkey.email !== "off";
+$: emailRequired = !passkey || passkey.email === "required";
 const label = (f) => f.required ? f.label : t("signUp.optionalField", { label: f.label });
 const inputType = (f) => ["email", "tel", "url", "number", "date"].includes(f.type) ? f.type : "text";
 const picked = (key) => values[key] ? values[key].split(", ") : [];
@@ -123,22 +127,29 @@ function handleSubmit(event) {
         {/if}
       {/each}
 
-      <label class={cls('formField', 'atlas-field')}>
-        <span class={cls('formFieldLabel', 'atlas-field-label')}>{t('signUp.emailLabel')}</span>
-        <input
-          class={cls('formFieldInput', 'atlas-input')}
-          type="email"
-          name="email"
-          autocomplete="email"
-          required
-          value={values.email ?? ''}
-          on:input={(e) => (values.email = e.currentTarget.value)}
-        />
-        {#each errors.filter((e) => e.param === 'email') as error (error.code)}
-          <span class={cls('formFieldError', 'atlas-error')}>{errorText(error)}</span>
-        {/each}
-      </label>
+      {#if showEmail}
+        <label class={cls('formField', 'atlas-field')}>
+          <span class={cls('formFieldLabel', 'atlas-field-label')}
+            >{emailRequired ? t('signUp.emailLabel') : t('signUp.optionalField', { label: t('signUp.emailLabel') })}</span
+          >
+          <input
+            class={cls('formFieldInput', 'atlas-input')}
+            type="email"
+            name="email"
+            autocomplete="email"
+            required={emailRequired}
+            value={values.email ?? ''}
+            on:input={(e) => (values.email = e.currentTarget.value)}
+          />
+          {#each errors.filter((e) => e.param === 'email') as error (error.code)}
+            <span class={cls('formFieldError', 'atlas-error')}>{errorText(error)}</span>
+          {/each}
+        </label>
+      {/if}
 
+      {#if passkey}
+        <p class="atlas-text">{t('signUp.passkeyIntro')}</p>
+      {:else}
       <label class={cls('formField', 'atlas-field')}>
         <span class={cls('formFieldLabel', 'atlas-field-label')}>{t('signUp.passwordLabel')}</span>
         <input
@@ -154,6 +165,7 @@ function handleSubmit(event) {
           <span class={cls('formFieldError', 'atlas-error')}>{errorText(error)}</span>
         {/each}
       </label>
+      {/if}
 
       {#if showLegal && legal}
         <label class={cls('formField', 'atlas-consent')}>
@@ -187,6 +199,19 @@ function handleSubmit(event) {
       >
         {t('signUp.submit')}
       </button>
+      {#if onSwitchMode}
+        <div class="atlas-alternatives">
+          <button
+            type="button"
+            class={cls('formButtonSecondary', 'atlas-button-secondary')}
+            data-atlas-sign-up-mode={passkey ? 'password' : 'passkey'}
+            disabled={busy}
+            on:click={() => onSwitchMode?.()}
+          >
+            {t(passkey ? 'signUp.passwordOption' : 'signUp.passkeyOption')}
+          </button>
+        </div>
+      {/if}
     </form>
   {/if}
 </div>

package/dist/components/SignUpForm.svelte.d.ts

@@ -16,6 +16,10 @@ declare const __propDef: {
         errors?: FieldError[];
         captcha?: CaptchaController | null;
         onSubmit: (values: Record<string, string>, consent: boolean) => void;
+        /** Passkey-only sign-up: no password field; the email per the instance's mode. */ passkey?: {
+            email: "off" | "optional" | "required";
+        } | null;
+        /** Toggle between the password and passkey forms (only when both are offered). */ onSwitchMode?: (() => void) | undefined;
     };
     events: {
         [evt: string]: CustomEvent<any>;

package/dist/context.d.ts

@@ -1,5 +1,5 @@
 import { type Readable } from 'svelte/store';
-import { type ProviderToken, type SignOutOptions, type SignOutResult, type SignOutEvent, type SignOutListener, type ReferralConsent } from '@atlasauth/js';
+import { type ProviderToken, type SignOutOptions, type SignOutResult, type EndImpersonationResult, type SignOutEvent, type SignOutListener, type ReferralConsent } from '@atlasauth/js';
 import { type Catalog } from './i18n';
 import { type Appearance, type InstanceDesign } from './appearance';
 import type { AtlasOrganizationMembership, AtlasSession, AtlasUser, SessionClaims } from './types';
@@ -126,7 +126,15 @@ export interface AtlasClient extends AtlasStores {
      */
     signOut(options?: SignOutOptions): Promise<SignOutResult>;
     setActiveOrganization(organizationId: string | null): Promise<void>;
-    reload(): Promise<void>;
+    /**
+     * End the active impersonation ("return to admin"): the impersonator's own
+     * session on this browser becomes active again with no sign-in
+     * (`resumed: true`); with none, another account signed in here is adopted,
+     * or this browser is signed out.
+     */
+    endImpersonation(): Promise<EndImpersonationResult>;
+    /** Re-boot from the Frontend API. Resolves true when a session now exists in this browser. */
+    reload(): Promise<boolean>;
     /**
      * Redirect handling + the first `/v1/client` load. Runs once, in the browser
      * only. {@link initAtlas} calls it automatically unless `manualBoot` is set;

package/dist/context.js

@@ -1,6 +1,6 @@
 import { getContext, setContext } from 'svelte';
 import { derived, get, writable } from 'svelte/store';
-import { FapiClient, SignOutGuard, TokenCache, closeOAuthPopupAfterSignIn, completeOAuthPopupLanding, getProviderToken as fetchProviderToken, mapOAuthPopupPayload, msUntilRefresh, readExpiry, readRedirectResult, resolveFrontendApi, stripRedirectParams, catalogLocale, SDK_HEADER, SignOutNotifier, getTemplateToken, reportSdkAdvisory, sdkHeaderValue, signOutReasonFromClient, configureReferralCapture, } from '@atlasauth/js';
+import { FapiClient, SignOutGuard, TokenCache, closeOAuthPopupAfterSignIn, completeOAuthPopupLanding, getProviderToken as fetchProviderToken, mapOAuthPopupPayload, msUntilRefresh, readExpiry, readRedirectResult, resolveFrontendApi, stripRedirectParams, catalogLocale, SDK_HEADER, SignOutNotifier, getTemplateToken, reportSdkAdvisory, sdkHeaderValue, signOutReasonFromClient, configureReferralCapture, withDevBrowser, } from '@atlasauth/js';
 import { ATLAS_SVELTE_SDK } from './version';
 import { EN_US, withFallback } from './i18n';
 import { instanceDesignFrom } from './appearance';
@@ -28,7 +28,9 @@ export function createAtlasClient(options) {
     const baseUrl = resolveFrontendApi(options.frontendApi, {
         component: '<AtlasProvider> / initAtlas()',
     });
-    const doFetch = options.fetchImpl ?? (typeof fetch !== 'undefined' ? fetch : undefined);
+    const rawFetch = options.fetchImpl ?? (typeof fetch !== 'undefined' ? fetch : undefined);
+    // Development instances keep the session in a header where the browser blocks the cookie.
+    const doFetch = rawFetch ? withDevBrowser(options.publishableKey, rawFetch) : undefined;
     const catalog = options.localization ? withFallback(options.localization) : EN_US;
     const errorCatalog = options.localization ?? EN_US;
     const locale = catalogLocale(options.localization);
@@ -139,7 +141,7 @@ export function createAtlasClient(options) {
             // refused: stay signed out; the guard re-tries the revoke in the background.
             if (!body.session || !body.user || guard.refuse(body.session.id)) {
                 clearSession(body.session ? 'other_tab' : signOutReasonFromClient(body));
-                return;
+                return false;
             }
             notifier.clear();
             user.set(body.user);
@@ -149,6 +151,7 @@ export function createAtlasClient(options) {
                 applyToken(body.jwt, body.session.id);
             status.set('signed_in');
             scheduleRefresh();
+            return true;
         }
         catch {
             /**
@@ -157,6 +160,7 @@ export function createAtlasClient(options) {
              * re-authenticate for no reason.
              */
             status.update((current) => (current === 'loading' ? 'signed_out' : current));
+            return false;
         }
     }
     async function refresh() {
@@ -231,6 +235,22 @@ export function createAtlasClient(options) {
         applyToken(body.jwt, current.sessionId);
         await reload();
     }
+    async function endImpersonation() {
+        const outcome = await guard.endImpersonation(cache.peek()?.sessionId ?? get(session)?.id ?? null);
+        if (!outcome.ended)
+            return outcome;
+        if (!outcome.activeSessionId) {
+            if (timer)
+                clearTimeout(timer);
+            timer = null;
+            clearSession('user');
+            return outcome;
+        }
+        if (outcome.jwt)
+            applyToken(outcome.jwt, outcome.activeSessionId);
+        await reload();
+        return outcome;
+    }
     async function boot() {
         if (booted)
             return;
@@ -318,6 +338,7 @@ export function createAtlasClient(options) {
         getProviderToken,
         signOut,
         setActiveOrganization,
+        endImpersonation,
         reload,
         boot,
         loadInstanceDesign,

package/dist/i18n.js

@@ -18,6 +18,7 @@ export const EN_US = {
     'signIn.submit': 'Continue',
     'signIn.forgotPassword': 'Forgot password?',
     'signIn.noAccount': 'No account?',
+    'signIn.lastUsed': 'Last used',
     'signIn.signUpLink': 'Sign up',
     'signIn.orDivider': 'or',
     'signIn.socialButton': 'Continue with {provider}',
@@ -31,6 +32,8 @@ export const EN_US = {
     'signIn.resendCode': 'Resend code',
     'signIn.resendLink': 'Resend link',
     'signIn.passwordOption': 'Use your password instead',
+    'signIn.signedIn': 'You\'re signed in.',
+    'signIn.sessionNotKept': 'You signed in, but this browser didn\'t keep the session. If it blocks third-party cookies, allow cookies for this site and try again.',
     'signIn.checkOtherTab': 'You can close this tab — you are signed in where you started.',
     'signUp.title': 'Create your account',
     'signUp.submit': 'Continue',
@@ -47,6 +50,13 @@ export const EN_US = {
     'signUp.and': 'and',
     // Shown instead of the email + password form when the app cannot send email.
     'signUp.emailUnavailable': EMAIL_UNAVAILABLE_MESSAGE,
+    'signUp.passkeyOption': 'Sign up with a passkey instead',
+    'signUp.passwordOption': 'Sign up with a password instead',
+    'signUp.passkeyIntro': "No password needed: you'll sign in with a passkey saved on this device or in your password manager.",
+    'signUp.passkeyPrompt': 'Create a passkey to finish setting up your account.',
+    'signUp.passkeyCreate': 'Create passkey',
+    'signUp.passkeyCancelled': "The passkey wasn't created. Try again when you're ready.",
+    'signUp.linkSentTo': 'We sent a confirmation link to {email}. Open it on any device; this page continues on its own.',
     'captcha.prompt': 'Complete the security check to continue.',
     'captcha.required': 'Please complete the security check, then try again.',
     'captcha.failed': "The security check didn't pass. Please try again.",
@@ -64,6 +74,24 @@ export const EN_US = {
     'mfa.usePasskey': 'Use a passkey instead',
     'mfa.useBackupCode': 'Use a recovery code',
     'mfa.submit': 'Verify',
+    'mfa.enrollChoose': 'Set up a second step for signing in.',
+    'mfa.enrollTotpOption': 'Use an authenticator app',
+    'mfa.enrollSmsOption': 'Use text messages',
+    'mfa.enrollScan': 'Scan this QR code with your authenticator app, or enter the setup key.',
+    'mfa.enrollQrAlt': 'QR code for your authenticator app',
+    'mfa.enrollSetupKey': 'Setup key',
+    'mfa.enrollPreparing': 'Setting up…',
+    'mfa.phoneLabel': 'Mobile number',
+    'mfa.phoneHint': 'Include the country code, for example +14155550101.',
+    'mfa.sendCode': 'Text me a code',
+    'mfa.codeTextedTo': 'Enter the code we texted to {phone}.',
+    'mfa.smsCodeOption': 'Text me a code instead',
+    'mfa.recoveryCodesTitle': 'Save your recovery codes',
+    'mfa.recoveryCodesHelp': "Each code works once. If you can't use your second step, sign in with one of these. Keep them somewhere safe: they won't be shown again.",
+    'mfa.recoveryCodesCopy': 'Copy codes',
+    'mfa.recoveryCodesCopied': 'Copied.',
+    'mfa.recoveryCodesDownload': 'Download as .txt',
+    'mfa.recoveryCodesSaved': "I've saved my codes",
     'reset.title': 'Reset your password',
     'reset.submit': 'Send reset code',
     'reset.newPasswordLabel': 'New password',
@@ -91,6 +119,35 @@ export const EN_US = {
     'organization.members': 'Members',
     'organization.invite': 'Invite member',
     'organization.roleLabel': 'Role',
+    'organization.invitations': 'Invitations',
+    'organization.settings': 'Settings',
+    'organization.emailLabel': 'Email address',
+    'organization.sendInvite': 'Send invitation',
+    'organization.noInvitations': 'No pending invitations.',
+    'organization.remove': 'Remove',
+    'organization.revoke': 'Revoke',
+    'organization.resend': 'Resend',
+    'organization.you': '(you)',
+    'organization.leave': 'Leave organization',
+    'organization.leaveConfirm': 'Leave {name}? You will lose access until you are invited again.',
+    'organization.delete': 'Delete organization',
+    'organization.deleteConfirm': 'Delete {name} for every member? This cannot be undone.',
+    'organization.confirm': 'Confirm',
+    'organization.cancel': 'Cancel',
+    'organization.unnamedMember': 'Unnamed member',
+    'organization.passwordPrompt': 'Enter your password to confirm.',
+    'organization.roles': 'Roles',
+    'organization.roleName': 'Role name',
+    'organization.roleKey': 'Role key (for example org:auditor)',
+    'organization.rolePermissions': 'Permissions',
+    'organization.createRole': 'Create role',
+    'organization.saveRole': 'Save role',
+    'organization.editRole': 'Edit',
+    'organization.deleteRole': 'Delete',
+    'organization.noCustomRoles': 'This organization has no roles of its own yet.',
+    'impersonation.banner': 'You are signed in as {name} on someone else\'s behalf.',
+    'impersonation.returnToAdmin': 'Return to admin',
+    'impersonation.end': 'End impersonation',
     'error.generic': 'Something went wrong. Please try again.',
     'error.network': 'We could not reach the server. Check your connection.',
     // Server errors, by the stable `reason` the Frontend API sends. Shown instead

package/dist/index.d.ts

@@ -16,7 +16,7 @@ export * from './i18n';
 export * from './types';
 export * from './fapi';
 export { ATLAS_KEY, initAtlas, createAtlasClient, useAtlas, type AuthStatus, type AtlasInitOptions, type AtlasStores, type AtlasClient, } from './context';
-export { getUser, getSession, getAuth, getOrganization, getToken, signIn, signUp, signOut, type UseUser, type UseSession, type UseAuth, type UseOrganization, type FlowController, } from './accessors';
+export { getUser, getSession, getAuth, getOrganization, getOrganizationAuditLog, getToken, signIn, signUp, signOut, type UseUser, type UseSession, type UseAuth, type UseOrganization, type OrganizationAuditLogStore, type FlowController, } from './accessors';
 export { default as AtlasProvider } from './components/AtlasProvider.svelte';
 export { default as SignedIn } from './components/SignedIn.svelte';
 export { default as SignedOut } from './components/SignedOut.svelte';
@@ -29,6 +29,9 @@ export { default as UserButton } from './components/UserButton.svelte';
 export { default as UserProfile } from './components/UserProfile.svelte';
 export { default as OrganizationSwitcher } from './components/OrganizationSwitcher.svelte';
 export { default as OrganizationProfile } from './components/OrganizationProfile.svelte';
+export { default as OrganizationAuditLog } from './components/OrganizationAuditLog.svelte';
+export type { OrganizationAuditLogEntry, OrganizationAuditLogState } from '@atlasauth/js';
+export { default as ImpersonationBanner } from './components/ImpersonationBanner.svelte';
 export type { InstanceSettings, EmailDelivery, PublicSignUpField, CaptchaController, CaptchaFlowKey, CaptchaWidgetMode, FlowCaptcha, } from '@atlasauth/js';
 export { SignOutError } from '@atlasauth/js';
 export type { SignOutOptions, SignOutResult } from '@atlasauth/js';

package/dist/index.js

@@ -19,7 +19,7 @@ export * from './fapi';
 // The client, context install, and the base accessor.
 export { ATLAS_KEY, initAtlas, createAtlasClient, useAtlas, } from './context';
 // Store accessors (peers of the React hooks) and action helpers.
-export { getUser, getSession, getAuth, getOrganization, getToken, signIn, signUp, signOut, } from './accessors';
+export { getUser, getSession, getAuth, getOrganization, getOrganizationAuditLog, getToken, signIn, signUp, signOut, } from './accessors';
 // Components.
 export { default as AtlasProvider } from './components/AtlasProvider.svelte';
 export { default as SignedIn } from './components/SignedIn.svelte';
@@ -33,6 +33,8 @@ export { default as UserButton } from './components/UserButton.svelte';
 export { default as UserProfile } from './components/UserProfile.svelte';
 export { default as OrganizationSwitcher } from './components/OrganizationSwitcher.svelte';
 export { default as OrganizationProfile } from './components/OrganizationProfile.svelte';
+export { default as OrganizationAuditLog } from './components/OrganizationAuditLog.svelte';
+export { default as ImpersonationBanner } from './components/ImpersonationBanner.svelte';
 // What `signOut()` resolves with, and what it rejects with under `{ strict: true }`.
 export { SignOutError } from '@atlasauth/js';
 // `onSignOut({ reason })` event types + the `atlas:signout` window event; this SDK's version.

package/dist/types.d.ts

@@ -39,4 +39,10 @@ export interface AtlasSession {
     id: string;
     status: string;
     last_active_organization_id: string | null;
+    /** On an impersonation session: who is acting (the token's `act` claim). */
+    actor?: {
+        sub: string;
+    } | null;
+    /** On an impersonation session: the impersonator's own session that "return to admin" resumes, or null. */
+    actor_session_id?: string | null;
 }

package/dist/version.d.ts

@@ -1,4 +1,4 @@
 import type { AtlasSdkInfo } from '@atlasauth/js';
 /** This package's version, sent as `X-Atlas-SDK` (kept in step with package.json by a test). */
-export declare const ATLAS_SVELTE_VERSION = "0.7.0";
+export declare const ATLAS_SVELTE_VERSION = "0.9.0";
 export declare const ATLAS_SVELTE_SDK: AtlasSdkInfo;

package/dist/version.js

@@ -1,3 +1,3 @@
 /** This package's version, sent as `X-Atlas-SDK` (kept in step with package.json by a test). */
-export const ATLAS_SVELTE_VERSION = '0.7.0';
+export const ATLAS_SVELTE_VERSION = '0.9.0';
 export const ATLAS_SVELTE_SDK = { name: '@atlasauth/svelte', version: ATLAS_SVELTE_VERSION };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@atlasauth/svelte",
-  "version": "0.7.0",
+  "version": "0.9.0",
   "type": "module",
   "svelte": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -23,9 +23,9 @@
   },
   "dependencies": {
     "@atlasauth/design": "0.2.0",
-    "@atlasauth/backend": "0.10.0",
-    "@atlasauth/authz": "0.1.1",
-    "@atlasauth/js": "0.13.0"
+    "@atlasauth/authz": "0.2.0",
+    "@atlasauth/backend": "0.15.0",
+    "@atlasauth/js": "0.16.0"
   },
   "peerDependencies": {
     "svelte": ">=4",