@atlasauth/vue 0.1.0

package/dist/components.js

@@ -0,0 +1,327 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrganizationProfile = exports.UserProfile = exports.OrganizationSwitcher = exports.UserButton = exports.SignUp = exports.SignIn = exports.Protect = exports.AtlasLoaded = exports.AtlasLoading = exports.SignedOut = exports.SignedIn = void 0;
+const vue_1 = require("vue");
+const js_1 = require("@atlasauth/js");
+const context_1 = require("./context");
+const composables_1 = require("./composables");
+const flow_1 = require("./flow");
+const appearance_1 = require("./appearance");
+const i18n_1 = require("./i18n");
+const protect_1 = require("./protect");
+/**
+ * §10.2 components — the Vue peer of React's `components.tsx`.
+ *
+ * `<SignIn/>` and `<SignUp/>` are full multi-step flows driven entirely by the
+ * server-side attempt status. That phrase is the design: this file contains no
+ * decision about what comes next. It renders whatever `status` the server
+ * returned, via the exhaustive mapping in `@atlasauth/js` — so adding a step to the
+ * flow is a server change, and a client that has not shipped yet degrades to a
+ * visible "needs an update" rather than a blank screen.
+ *
+ * Components are authored as render functions (not `.vue` SFCs) so the package
+ * builds with plain `tsc`, exactly like `@atlasauth/react` — no SFC compiler in the
+ * toolchain, and components render in the host DOM so Tailwind/CSS just works.
+ */
+/** Resolve an element's class with the customer's appearance override appended. */
+function useClass() {
+    const { appearance } = (0, context_1.useAtlas)();
+    return (key, base) => (0, appearance_1.classFor)(key, appearance, base);
+}
+/** Look up a catalog string and interpolate `{placeholders}`. */
+function useText() {
+    const { catalog } = (0, context_1.useAtlas)();
+    return (key, vars) => (0, i18n_1.translate)(catalog, key, vars);
+}
+exports.SignedIn = (0, vue_1.defineComponent)({
+    name: 'SignedIn',
+    setup(_props, { slots }) {
+        const { isLoaded, isSignedIn } = (0, composables_1.useUser)();
+        // Renders nothing while loading rather than flashing the signed-out branch.
+        return () => (isLoaded.value && isSignedIn.value ? slots.default?.() : null);
+    },
+});
+exports.SignedOut = (0, vue_1.defineComponent)({
+    name: 'SignedOut',
+    setup(_props, { slots }) {
+        const { isLoaded, isSignedIn } = (0, composables_1.useUser)();
+        return () => (isLoaded.value && !isSignedIn.value ? slots.default?.() : null);
+    },
+});
+/** §10.2: render children only while the SDK is still loading. */
+exports.AtlasLoading = (0, vue_1.defineComponent)({
+    name: 'AtlasLoading',
+    setup(_props, { slots }) {
+        const { isLoaded } = (0, composables_1.useUser)();
+        return () => (isLoaded.value ? null : slots.default?.());
+    },
+});
+/**
+ * §10.2: render children only once the SDK has finished loading — the symmetric
+ * partner of {@link AtlasLoading}, so a consumer can show a spinner and its
+ * resolved content without hand-rolling the inverse condition.
+ */
+exports.AtlasLoaded = (0, vue_1.defineComponent)({
+    name: 'AtlasLoaded',
+    setup(_props, { slots }) {
+        const { isLoaded } = (0, composables_1.useUser)();
+        return () => (isLoaded.value ? slots.default?.() : null);
+    },
+});
+/**
+ * §10.2 `<Protect permission="…">`.
+ *
+ * A rendering helper, never an authorization boundary — anyone can flip the
+ * condition in devtools. The server checking the same permission is what
+ * actually stops them, and this component's job is only to avoid showing a
+ * button that would fail. Renders the `#fallback` slot when the condition is not
+ * met, mirroring React's `fallback` prop.
+ */
+exports.Protect = (0, vue_1.defineComponent)({
+    name: 'Protect',
+    props: {
+        permission: { type: String, default: undefined },
+        role: { type: String, default: undefined },
+        anyPermission: { type: Array, default: undefined },
+        allPermissions: { type: Array, default: undefined },
+    },
+    setup(props, { slots }) {
+        const { claims, status } = (0, context_1.useAtlas)();
+        return () => {
+            if (status.value === 'loading')
+                return null;
+            const allowed = (0, protect_1.evaluate)(claims.value, {
+                permission: props.permission,
+                role: props.role,
+                anyPermission: props.anyPermission,
+                allPermissions: props.allPermissions,
+            }).allowed;
+            return allowed ? slots.default?.() : (slots.fallback?.() ?? null);
+        };
+    },
+});
+/**
+ * The server-driven flow shell.
+ *
+ * Every branch comes from `nextStep`, which is exhaustive — including the
+ * `unknown` case, which renders an honest message instead of nothing.
+ */
+const AttemptFlow = (0, vue_1.defineComponent)({
+    name: 'AttemptFlow',
+    props: {
+        attempt: { type: Object, default: null },
+        busy: { type: Boolean, default: false },
+        errors: { type: Array, default: () => [] },
+        titleKey: { type: String, required: true },
+        onSubmit: { type: Function, required: true },
+    },
+    setup(props) {
+        const t = useText();
+        const cls = useClass();
+        const values = (0, vue_1.reactive)({});
+        const field = (name, labelKey, type = 'text') => (0, vue_1.h)('label', { class: 'atlas-field', key: name }, [
+            (0, vue_1.h)('span', t(labelKey)),
+            (0, vue_1.h)('input', {
+                class: cls('formFieldInput', 'atlas-input'),
+                type,
+                value: values[name] ?? '',
+                onInput: (event) => {
+                    values[name] = event.target.value;
+                },
+            }),
+            ...props.errors
+                .filter((error) => error.param === name)
+                .map((error) => (0, vue_1.h)('span', { class: cls('formFieldError', 'atlas-error'), key: error.code }, error.message)),
+        ]);
+        const fields = (kind) => {
+            switch (kind) {
+                case 'collect_identifier':
+                    return [field('identifier', 'signIn.identifierLabel', 'email')];
+                case 'collect_first_factor':
+                    return [field('password', 'signIn.passwordLabel', 'password')];
+                case 'collect_second_factor':
+                    return [field('code', 'mfa.codeLabel')];
+                case 'enroll_second_factor':
+                    // Two codes, not one. §5.6 wants consecutive codes so a phone with a
+                    // fast clock fails here rather than on every sign-in afterwards.
+                    return [
+                        field('code', 'mfa.enrollFirstCodeLabel'),
+                        field('secondCode', 'mfa.enrollSecondCodeLabel'),
+                    ];
+                case 'collect_email_code':
+                    return [field('code', 'signIn.emailCodeLabel')];
+                case 'collect_new_password':
+                    return [field('password', 'reset.newPasswordLabel', 'password')];
+                case 'await_oauth':
+                    return [(0, vue_1.h)('p', { key: 'oauth' }, t('signIn.magicLinkSent'))];
+                case 'done':
+                    return [(0, vue_1.h)('p', { key: 'done' }, t('signIn.checkOtherTab'))];
+                case 'restart':
+                    return [(0, vue_1.h)('p', { key: 'restart' }, t('error.generic'))];
+                default:
+                    // A status this SDK version does not know. Saying so beats rendering
+                    // nothing, which is a blank login box the user cannot act on.
+                    return [
+                        (0, vue_1.h)('p', { key: 'unknown', class: cls('formFieldError', 'atlas-error') }, t('error.generic')),
+                    ];
+            }
+        };
+        return () => {
+            const step = props.attempt
+                ? (0, js_1.nextStep)(props.attempt)
+                : { kind: 'collect_identifier' };
+            return (0, vue_1.h)('div', { class: cls('card', 'atlas-card') }, [
+                (0, vue_1.h)('h1', { class: cls('headerTitle', 'atlas-title') }, t(props.titleKey)),
+                ...props.errors
+                    .filter((error) => !error.param)
+                    .map((error) => (0, vue_1.h)('p', { class: cls('formFieldError', 'atlas-error'), role: 'alert', key: error.code }, error.message)),
+                (0, vue_1.h)('form', {
+                    onSubmit: (event) => {
+                        event.preventDefault();
+                        props.onSubmit({ ...values });
+                    },
+                }, [
+                    ...fields(step.kind),
+                    step.kind !== 'done' && step.kind !== 'await_oauth'
+                        ? (0, vue_1.h)('button', {
+                            class: cls('formButtonPrimary', 'atlas-button'),
+                            disabled: props.busy,
+                            type: 'submit',
+                        }, t('signIn.submit'))
+                        : null,
+                ]),
+            ]);
+        };
+    },
+});
+exports.SignIn = (0, vue_1.defineComponent)({
+    name: 'SignIn',
+    props: {
+        /** Where to send the user once the flow completes. */
+        afterUrl: { type: String, default: undefined },
+    },
+    setup() {
+        const { state, submit } = (0, flow_1.useFlow)();
+        return () => (0, vue_1.h)(AttemptFlow, {
+            attempt: state.value.attempt,
+            busy: state.value.busy,
+            errors: state.value.errors,
+            titleKey: 'signIn.title',
+            onSubmit: submit,
+        });
+    },
+});
+exports.SignUp = (0, vue_1.defineComponent)({
+    name: 'SignUp',
+    props: {
+        afterUrl: { type: String, default: undefined },
+    },
+    setup() {
+        const { state, submit } = (0, flow_1.useFlow)();
+        return () => (0, vue_1.h)(AttemptFlow, {
+            attempt: state.value.attempt,
+            busy: state.value.busy,
+            errors: state.value.errors,
+            titleKey: 'signUp.title',
+            onSubmit: submit,
+        });
+    },
+});
+exports.UserButton = (0, vue_1.defineComponent)({
+    name: 'UserButton',
+    setup() {
+        const { user } = (0, composables_1.useUser)();
+        const { signOut } = (0, composables_1.useAuth)();
+        const t = useText();
+        const cls = useClass();
+        const open = (0, vue_1.ref)(false);
+        return () => {
+            const u = user.value;
+            if (!u)
+                return null;
+            const label = [u.first_name, u.last_name].filter(Boolean).join(' ') || u.username || '';
+            return (0, vue_1.h)('div', { class: 'atlas-user-button' }, [
+                (0, vue_1.h)('button', {
+                    class: cls('avatar', 'atlas-avatar'),
+                    'aria-expanded': open.value,
+                    onClick: () => {
+                        open.value = !open.value;
+                    },
+                }, u.image_url
+                    ? (0, vue_1.h)('img', { alt: '', src: u.image_url })
+                    : (0, vue_1.h)('span', label.slice(0, 1))),
+                open.value
+                    ? (0, vue_1.h)('div', { class: cls('menu', 'atlas-menu'), role: 'menu' }, [
+                        (0, vue_1.h)('span', { class: cls('menuItem', 'atlas-menu-item') }, label),
+                        (0, vue_1.h)('button', { class: cls('menuItem', 'atlas-menu-item'), onClick: () => void signOut() }, t('userButton.signOut')),
+                    ])
+                    : null,
+            ]);
+        };
+    },
+});
+exports.OrganizationSwitcher = (0, vue_1.defineComponent)({
+    name: 'OrganizationSwitcher',
+    setup() {
+        const { memberships, organization, setActive } = (0, composables_1.useOrganization)();
+        const t = useText();
+        const cls = useClass();
+        return () => (0, vue_1.h)('div', { class: cls('menu', 'atlas-menu') }, [
+            (0, vue_1.h)('button', { class: cls('menuItem', 'atlas-menu-item'), onClick: () => void setActive(null) }, t('organization.personal')),
+            ...memberships.value.map((membership) => (0, vue_1.h)('button', {
+                key: membership.organization.id,
+                class: cls('menuItem', 'atlas-menu-item'),
+                disabled: membership.organization.id === organization.value?.id,
+                onClick: () => void setActive(membership.organization.id),
+            }, membership.organization.name)),
+        ]);
+    },
+});
+exports.UserProfile = (0, vue_1.defineComponent)({
+    name: 'UserProfile',
+    setup() {
+        const { user } = (0, composables_1.useUser)();
+        const t = useText();
+        const cls = useClass();
+        return () => {
+            const u = user.value;
+            if (!u)
+                return null;
+            return (0, vue_1.h)('div', { class: cls('card', 'atlas-card') }, [
+                (0, vue_1.h)('h1', t('userProfile.title')),
+                (0, vue_1.h)('section', [
+                    (0, vue_1.h)('h2', t('userProfile.emailsSection')),
+                    (0, vue_1.h)('ul', (u.email_addresses ?? []).map((email) => (0, vue_1.h)('li', { key: email.id }, [
+                        email.email_address,
+                        email.verified ? null : (0, vue_1.h)('em', ` — ${t('userProfile.unverified')}`),
+                    ]))),
+                ]),
+                (0, vue_1.h)('section', [
+                    (0, vue_1.h)('h2', t('userProfile.securitySection')),
+                    (0, vue_1.h)('p', u.mfa_enabled ? '2FA on' : '2FA off'),
+                ]),
+            ]);
+        };
+    },
+});
+exports.OrganizationProfile = (0, vue_1.defineComponent)({
+    name: 'OrganizationProfile',
+    setup() {
+        const { organization, membership } = (0, composables_1.useOrganization)();
+        const t = useText();
+        const cls = useClass();
+        return () => {
+            const org = organization.value;
+            if (!org)
+                return null;
+            return (0, vue_1.h)('div', { class: cls('card', 'atlas-card') }, [
+                (0, vue_1.h)('h1', org.name),
+                (0, vue_1.h)('p', `${t('organization.roleLabel')}: ${membership.value?.role ?? ''}`),
+                // Management controls are gated on the ACTIVE org role, matching the
+                // server's §9.2 rule rather than duplicating a looser one.
+                (0, vue_1.h)(exports.Protect, { permission: 'org:sys_memberships:manage' }, () => (0, vue_1.h)('button', t('organization.invite'))),
+            ]);
+        };
+    },
+});
+//# sourceMappingURL=components.js.map

package/dist/components.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"components.js","sourceRoot":"","sources":["../src/components.ts"],"names":[],"mappings":";;;AAAA,6BAAmF;AACnF,sCAA4E;AAC5E,uCAAqC;AACrC,+CAAkE;AAClE,iCAAiC;AACjC,6CAAyD;AACzD,iCAAmC;AACnC,uCAAqC;AAErC;;;;;;;;;;;;;GAaG;AAEH,mFAAmF;AACnF,SAAS,QAAQ;IACf,MAAM,EAAE,UAAU,EAAE,GAAG,IAAA,kBAAQ,GAAE,CAAC;IAClC,OAAO,CAAC,GAAe,EAAE,IAAY,EAAE,EAAE,CAAC,IAAA,qBAAQ,EAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED,iEAAiE;AACjE,SAAS,OAAO;IACd,MAAM,EAAE,OAAO,EAAE,GAAG,IAAA,kBAAQ,GAAE,CAAC;IAC/B,OAAO,CAAC,GAAW,EAAE,IAA6B,EAAE,EAAE,CAAC,IAAA,gBAAS,EAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;AACvF,CAAC;AAEY,QAAA,QAAQ,GAAG,IAAA,qBAAe,EAAC;IACtC,IAAI,EAAE,UAAU;IAChB,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE;QACrB,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAA,qBAAO,GAAE,CAAC;QAC3C,4EAA4E;QAC5E,OAAO,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/E,CAAC;CACF,CAAC,CAAC;AAEU,QAAA,SAAS,GAAG,IAAA,qBAAe,EAAC;IACvC,IAAI,EAAE,WAAW;IACjB,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE;QACrB,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAA,qBAAO,GAAE,CAAC;QAC3C,OAAO,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC;CACF,CAAC,CAAC;AAEH,kEAAkE;AACrD,QAAA,YAAY,GAAG,IAAA,qBAAe,EAAC;IAC1C,IAAI,EAAE,cAAc;IACpB,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE;QACrB,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAA,qBAAO,GAAE,CAAC;QAC/B,OAAO,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;CACF,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,WAAW,GAAG,IAAA,qBAAe,EAAC;IACzC,IAAI,EAAE,aAAa;IACnB,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE;QACrB,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAA,qBAAO,GAAE,CAAC;QAC/B,OAAO,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC;CACF,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACU,QAAA,OAAO,GAAG,IAAA,qBAAe,EAAC;IACrC,IAAI,EAAE,SAAS;IACf,KAAK,EAAE;QACL,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE;QAChD,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE;QAC1C,aAAa,EAAE,EAAE,IAAI,EAAE,KAAoC,EAAE,OAAO,EAAE,SAAS,EAAE;QACjF,cAAc,EAAE,EAAE,IAAI,EAAE,KAAoC,EAAE,OAAO,EAAE,SAAS,EAAE;KACnF;IACD,KAAK,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE;QACpB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,kBAAQ,GAAE,CAAC;QACtC,OAAO,GAAG,EAAE;YACV,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC5C,MAAM,OAAO,GAAG,IAAA,kBAAQ,EAAC,MAAM,CAAC,KAAK,EAAE;gBACrC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,aAAa,EAAE,KAAK,CAAC,aAAa;gBAClC,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC,CAAC,OAAO,CAAC;YACX,OAAO,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,IAAI,CAAC,CAAC;QACpE,CAAC,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,WAAW,GAAG,IAAA,qBAAe,EAAC;IAClC,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE;QACL,OAAO,EAAE,EAAE,IAAI,EAAE,MAAsC,EAAE,OAAO,EAAE,IAAI,EAAE;QACxE,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE;QACvC,MAAM,EAAE,EAAE,IAAI,EAAE,KAA+B,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE;QACpE,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,QAA8D,EAAE,QAAQ,EAAE,IAAI,EAAE;KACnG;IACD,KAAK,CAAC,KAAK;QACT,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAA,cAAQ,EAAyB,EAAE,CAAC,CAAC;QAEpD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,QAAgB,EAAE,IAAI,GAAG,MAAM,EAAS,EAAE,CACrE,IAAA,OAAC,EAAC,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC9C,IAAA,OAAC,EAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YACtB,IAAA,OAAC,EAAC,OAAO,EAAE;gBACT,KAAK,EAAE,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC;gBAC3C,IAAI;gBACJ,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE;gBACzB,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;oBACxB,MAAM,CAAC,IAAI,CAAC,GAAI,KAAK,CAAC,MAA2B,CAAC,KAAK,CAAC;gBAC1D,CAAC;aACF,CAAC;YACF,GAAG,KAAK,CAAC,MAAM;iBACZ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;iBACvC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,IAAA,OAAC,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAC3F;SACJ,CAAC,CAAC;QAEL,MAAM,MAAM,GAAG,CAAC,IAAY,EAAW,EAAE;YACvC,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,oBAAoB;oBACvB,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,wBAAwB,EAAE,OAAO,CAAC,CAAC,CAAC;gBAClE,KAAK,sBAAsB;oBACzB,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,sBAAsB,EAAE,UAAU,CAAC,CAAC,CAAC;gBACjE,KAAK,uBAAuB;oBAC1B,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;gBAC1C,KAAK,sBAAsB;oBACzB,qEAAqE;oBACrE,iEAAiE;oBACjE,OAAO;wBACL,KAAK,CAAC,MAAM,EAAE,0BAA0B,CAAC;wBACzC,KAAK,CAAC,YAAY,EAAE,2BAA2B,CAAC;qBACjD,CAAC;gBACJ,KAAK,oBAAoB;oBACvB,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC,CAAC;gBAClD,KAAK,sBAAsB;oBACzB,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,wBAAwB,EAAE,UAAU,CAAC,CAAC,CAAC;gBACnE,KAAK,aAAa;oBAChB,OAAO,CAAC,IAAA,OAAC,EAAC,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;gBAC/D,KAAK,MAAM;oBACT,OAAO,CAAC,IAAA,OAAC,EAAC,GAAG,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;gBAC9D,KAAK,SAAS;oBACZ,OAAO,CAAC,IAAA,OAAC,EAAC,GAAG,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;gBAC1D;oBACE,qEAAqE;oBACrE,8DAA8D;oBAC9D,OAAO;wBACL,IAAA,OAAC,EAAC,GAAG,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC;qBAC5F,CAAC;YACN,CAAC;QACH,CAAC,CAAC;QAEF,OAAO,GAAG,EAAE;YACV,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO;gBACxB,CAAC,CAAC,IAAA,aAAQ,EAAC,KAAK,CAAC,OAAO,CAAC;gBACzB,CAAC,CAAC,EAAE,IAAI,EAAE,oBAA6B,EAAE,CAAC;YAE5C,OAAO,IAAA,OAAC,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,EAAE;gBACpD,IAAA,OAAC,EAAC,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,aAAa,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAExE,GAAG,KAAK,CAAC,MAAM;qBACZ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;qBAC/B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACb,IAAA,OAAC,EACC,GAAG,EACH,EAAE,KAAK,EAAE,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,EAC/E,KAAK,CAAC,OAAO,CACd,CACF;gBAEH,IAAA,OAAC,EACC,MAAM,EACN;oBACE,QAAQ,EAAE,CAAC,KAAY,EAAE,EAAE;wBACzB,KAAK,CAAC,cAAc,EAAE,CAAC;wBACvB,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;oBAChC,CAAC;iBACF,EACD;oBACE,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;oBACpB,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa;wBACjD,CAAC,CAAC,IAAA,OAAC,EACC,QAAQ,EACR;4BACE,KAAK,EAAE,GAAG,CAAC,mBAAmB,EAAE,cAAc,CAAC;4BAC/C,QAAQ,EAAE,KAAK,CAAC,IAAI;4BACpB,IAAI,EAAE,QAAQ;yBACf,EACD,CAAC,CAAC,eAAe,CAAC,CACnB;wBACH,CAAC,CAAC,IAAI;iBACT,CACF;aACF,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEU,QAAA,MAAM,GAAG,IAAA,qBAAe,EAAC;IACpC,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE;QACL,sDAAsD;QACtD,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE;KAC/C;IACD,KAAK;QACH,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAA,cAAO,GAAE,CAAC;QACpC,OAAO,GAAG,EAAE,CACV,IAAA,OAAC,EAAC,WAAW,EAAE;YACb,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;YAC5B,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;YACtB,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;YAC1B,QAAQ,EAAE,cAAc;YACxB,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;IACP,CAAC;CACF,CAAC,CAAC;AAEU,QAAA,MAAM,GAAG,IAAA,qBAAe,EAAC;IACpC,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE;QACL,QAAQ,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE;KAC/C;IACD,KAAK;QACH,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAA,cAAO,GAAE,CAAC;QACpC,OAAO,GAAG,EAAE,CACV,IAAA,OAAC,EAAC,WAAW,EAAE;YACb,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;YAC5B,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;YACtB,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;YAC1B,QAAQ,EAAE,cAAc;YACxB,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;IACP,CAAC;CACF,CAAC,CAAC;AAEU,QAAA,UAAU,GAAG,IAAA,qBAAe,EAAC;IACxC,IAAI,EAAE,YAAY;IAClB,KAAK;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,qBAAO,GAAE,CAAC;QAC3B,MAAM,EAAE,OAAO,EAAE,GAAG,IAAA,qBAAO,GAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAA,SAAG,EAAC,KAAK,CAAC,CAAC;QAExB,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;YACrB,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAEpB,MAAM,KAAK,GACT,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC;YAE5E,OAAO,IAAA,OAAC,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE;gBAC9C,IAAA,OAAC,EACC,QAAQ,EACR;oBACE,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC;oBACpC,eAAe,EAAE,IAAI,CAAC,KAAK;oBAC3B,OAAO,EAAE,GAAG,EAAE;wBACZ,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;oBAC3B,CAAC;iBACF,EACD,CAAC,CAAC,SAAS;oBACT,CAAC,CAAC,IAAA,OAAC,EAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;oBACzC,CAAC,CAAC,IAAA,OAAC,EAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CACjC;gBACD,IAAI,CAAC,KAAK;oBACR,CAAC,CAAC,IAAA,OAAC,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;wBAC3D,IAAA,OAAC,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC;wBAC/D,IAAA,OAAC,EACC,QAAQ,EACR,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,iBAAiB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,OAAO,EAAE,EAAE,EAC5E,CAAC,CAAC,oBAAoB,CAAC,CACxB;qBACF,CAAC;oBACJ,CAAC,CAAC,IAAI;aACT,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEU,QAAA,oBAAoB,GAAG,IAAA,qBAAe,EAAC;IAClD,IAAI,EAAE,sBAAsB;IAC5B,KAAK;QACH,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,IAAA,6BAAe,GAAE,CAAC;QACnE,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;QAEvB,OAAO,GAAG,EAAE,CACV,IAAA,OAAC,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,EAAE;YAC7C,IAAA,OAAC,EACC,QAAQ,EACR,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,iBAAiB,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,EAAE,EAClF,CAAC,CAAC,uBAAuB,CAAC,CAC3B;YACD,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CACtC,IAAA,OAAC,EACC,QAAQ,EACR;gBACE,GAAG,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE;gBAC/B,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,iBAAiB,CAAC;gBACzC,QAAQ,EAAE,UAAU,CAAC,YAAY,CAAC,EAAE,KAAK,YAAY,CAAC,KAAK,EAAE,EAAE;gBAC/D,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;aAC1D,EACD,UAAU,CAAC,YAAY,CAAC,IAAI,CAC7B,CACF;SACF,CAAC,CAAC;IACP,CAAC;CACF,CAAC,CAAC;AAEU,QAAA,WAAW,GAAG,IAAA,qBAAe,EAAC;IACzC,IAAI,EAAE,aAAa;IACnB,KAAK;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,IAAA,qBAAO,GAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;QAEvB,OAAO,GAAG,EAAE;YACV,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;YACrB,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;YAEpB,OAAO,IAAA,OAAC,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,EAAE;gBACpD,IAAA,OAAC,EAAC,IAAI,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC;gBAC/B,IAAA,OAAC,EAAC,SAAS,EAAE;oBACX,IAAA,OAAC,EAAC,IAAI,EAAE,CAAC,CAAC,2BAA2B,CAAC,CAAC;oBACvC,IAAA,OAAC,EACC,IAAI,EACJ,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACtC,IAAA,OAAC,EAAC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE;wBACzB,KAAK,CAAC,aAAa;wBACnB,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,OAAC,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,wBAAwB,CAAC,EAAE,CAAC;qBACrE,CAAC,CACH,CACF;iBACF,CAAC;gBACF,IAAA,OAAC,EAAC,SAAS,EAAE;oBACX,IAAA,OAAC,EAAC,IAAI,EAAE,CAAC,CAAC,6BAA6B,CAAC,CAAC;oBACzC,IAAA,OAAC,EAAC,GAAG,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;iBAC7C,CAAC;aACH,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEU,QAAA,mBAAmB,GAAG,IAAA,qBAAe,EAAC;IACjD,IAAI,EAAE,qBAAqB;IAC3B,KAAK;QACH,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,IAAA,6BAAe,GAAE,CAAC;QACvD,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,QAAQ,EAAE,CAAC;QAEvB,OAAO,GAAG,EAAE;YACV,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC;YAC/B,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YAEtB,OAAO,IAAA,OAAC,EAAC,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,EAAE;gBACpD,IAAA,OAAC,EAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC;gBACjB,IAAA,OAAC,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC,wBAAwB,CAAC,KAAK,UAAU,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;gBACzE,qEAAqE;gBACrE,2DAA2D;gBAC3D,IAAA,OAAC,EAAC,eAAO,EAAE,EAAE,UAAU,EAAE,4BAA4B,EAAE,EAAE,GAAG,EAAE,CAC5D,IAAA,OAAC,EAAC,QAAQ,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC,CACtC;aACF,CAAC,CAAC;QACL,CAAC,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/composables.d.ts

@@ -0,0 +1,49 @@
+import { type ComputedRef, type ShallowRef } from 'vue';
+import type { ProviderToken } from '@atlasauth/js';
+import { type ProtectCondition } from './protect';
+import type { AtlasOrganizationMembership, AtlasSession, AtlasUser } from './types';
+/**
+ * §10.1 composables — the Vue peer of React's hooks.
+ *
+ * Every one returns `isLoaded` alongside its data, and that is not ceremony.
+ * Without it a component cannot tell "still booting" from "signed out", so it
+ * renders a sign-in form for a fraction of a second on every page load — the
+ * flash of unauthenticated content that makes an app feel broken. The React SDK
+ * returns plain values recomputed each render; the Vue SDK returns `computed`
+ * refs off the reactive client, which stay live without a re-render.
+ */
+export declare function useUser(): {
+    isLoaded: ComputedRef<boolean>;
+    isSignedIn: ComputedRef<boolean>;
+    user: ShallowRef<AtlasUser | null>;
+    /**
+     * §6.6 the signed-in user's own live token at a connected provider — the
+     * `user.getToken({ provider })` equivalent. Always the caller's own token
+     * (the server keys off the session), refreshed on read if stale, and never
+     * the refresh token.
+     */
+    getProviderToken(provider: string): Promise<ProviderToken | null>;
+};
+export declare function useSession(): {
+    isLoaded: ComputedRef<boolean>;
+    session: ShallowRef<AtlasSession | null>;
+};
+export declare function useAuth(): {
+    isLoaded: ComputedRef<boolean>;
+    isSignedIn: ComputedRef<boolean>;
+    userId: ComputedRef<string | null>;
+    sessionId: ComputedRef<string | null>;
+    orgId: ComputedRef<string | null>;
+    orgRole: ComputedRef<string | null>;
+    getToken(): Promise<string | null>;
+    getProviderToken(provider: string): Promise<ProviderToken | null>;
+    signOut(): Promise<void>;
+    has(condition: ProtectCondition): boolean;
+};
+export declare function useOrganization(): {
+    isLoaded: ComputedRef<boolean>;
+    organization: ComputedRef<AtlasOrganizationMembership['organization'] | null>;
+    membership: ComputedRef<AtlasOrganizationMembership | null>;
+    memberships: ShallowRef<AtlasOrganizationMembership[]>;
+    setActive(organizationId: string | null): Promise<void>;
+};

package/dist/composables.js

@@ -0,0 +1,65 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.useUser = useUser;
+exports.useSession = useSession;
+exports.useAuth = useAuth;
+exports.useOrganization = useOrganization;
+const vue_1 = require("vue");
+const context_1 = require("./context");
+const protect_1 = require("./protect");
+/**
+ * §10.1 composables — the Vue peer of React's hooks.
+ *
+ * Every one returns `isLoaded` alongside its data, and that is not ceremony.
+ * Without it a component cannot tell "still booting" from "signed out", so it
+ * renders a sign-in form for a fraction of a second on every page load — the
+ * flash of unauthenticated content that makes an app feel broken. The React SDK
+ * returns plain values recomputed each render; the Vue SDK returns `computed`
+ * refs off the reactive client, which stay live without a re-render.
+ */
+function useUser() {
+    const { status, user, getProviderToken } = (0, context_1.useAtlas)();
+    return {
+        isLoaded: (0, vue_1.computed)(() => status.value !== 'loading'),
+        isSignedIn: (0, vue_1.computed)(() => status.value === 'signed_in'),
+        user,
+        getProviderToken,
+    };
+}
+function useSession() {
+    const { status, session } = (0, context_1.useAtlas)();
+    return {
+        isLoaded: (0, vue_1.computed)(() => status.value !== 'loading'),
+        session,
+    };
+}
+function useAuth() {
+    const { status, claims, getToken, getProviderToken, signOut } = (0, context_1.useAtlas)();
+    return {
+        isLoaded: (0, vue_1.computed)(() => status.value !== 'loading'),
+        isSignedIn: (0, vue_1.computed)(() => status.value === 'signed_in'),
+        userId: (0, vue_1.computed)(() => claims.value?.sub ?? null),
+        sessionId: (0, vue_1.computed)(() => claims.value?.sid ?? null),
+        orgId: (0, vue_1.computed)(() => claims.value?.org_id ?? null),
+        orgRole: (0, vue_1.computed)(() => claims.value?.org_role ?? null),
+        /** Always fresh: refreshes first if the cached token is close to expiry. */
+        getToken,
+        /** §6.6 the user's own live access token at a connected social provider. */
+        getProviderToken,
+        signOut,
+        /** Mirrors <Protect>, for logic that is not a render decision. */
+        has: (condition) => (0, protect_1.evaluate)(claims.value, condition).allowed,
+    };
+}
+function useOrganization() {
+    const { status, claims, memberships, setActiveOrganization } = (0, context_1.useAtlas)();
+    const active = (0, vue_1.computed)(() => memberships.value.find((m) => m.organization.id === claims.value?.org_id) ?? null);
+    return {
+        isLoaded: (0, vue_1.computed)(() => status.value !== 'loading'),
+        organization: (0, vue_1.computed)(() => active.value?.organization ?? null),
+        membership: active,
+        memberships,
+        setActive: setActiveOrganization,
+    };
+}
+//# sourceMappingURL=composables.js.map

package/dist/composables.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composables.js","sourceRoot":"","sources":["../src/composables.ts"],"names":[],"mappings":";;AAiBA,0BAmBC;AAED,gCASC;AAED,0BA4BC;AAED,0CAmBC;AAlGD,6BAAkE;AAElE,uCAAqC;AACrC,uCAA4D;AAG5D;;;;;;;;;GASG;AAEH,SAAgB,OAAO;IAYrB,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,IAAA,kBAAQ,GAAE,CAAC;IACtD,OAAO;QACL,QAAQ,EAAE,IAAA,cAAQ,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;QACpD,UAAU,EAAE,IAAA,cAAQ,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,WAAW,CAAC;QACxD,IAAI;QACJ,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,SAAgB,UAAU;IAIxB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAA,kBAAQ,GAAE,CAAC;IACvC,OAAO;QACL,QAAQ,EAAE,IAAA,cAAQ,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;QACpD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAgB,OAAO;IAYrB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,IAAA,kBAAQ,GAAE,CAAC;IAC3E,OAAO;QACL,QAAQ,EAAE,IAAA,cAAQ,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;QACpD,UAAU,EAAE,IAAA,cAAQ,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,WAAW,CAAC;QACxD,MAAM,EAAE,IAAA,cAAQ,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,CAAC;QACjD,SAAS,EAAE,IAAA,cAAQ,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,CAAC;QACpD,KAAK,EAAE,IAAA,cAAQ,EAAC,GAAG,EAAE,CAAE,MAAM,CAAC,KAAK,EAAE,MAA6B,IAAI,IAAI,CAAC;QAC3E,OAAO,EAAE,IAAA,cAAQ,EAAC,GAAG,EAAE,CAAE,MAAM,CAAC,KAAK,EAAE,QAA+B,IAAI,IAAI,CAAC;QAC/E,4EAA4E;QAC5E,QAAQ;QACR,4EAA4E;QAC5E,gBAAgB;QAChB,OAAO;QACP,kEAAkE;QAClE,GAAG,EAAE,CAAC,SAA2B,EAAE,EAAE,CAAC,IAAA,kBAAQ,EAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,OAAO;KAChF,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe;IAO7B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB,EAAE,GAAG,IAAA,kBAAQ,GAAE,CAAC;IAC1E,MAAM,MAAM,GAAG,IAAA,cAAQ,EACrB,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,IAAI,CACxF,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE,IAAA,cAAQ,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;QACpD,YAAY,EAAE,IAAA,cAAQ,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,IAAI,IAAI,CAAC;QAChE,UAAU,EAAE,MAAM;QAClB,WAAW;QACX,SAAS,EAAE,qBAAqB;KACjC,CAAC;AACJ,CAAC"}

package/dist/context.d.ts

@@ -0,0 +1,20 @@
+import { type InjectionKey } from 'vue';
+import type { AtlasClient } from './plugin';
+/**
+ * §10.1 the injected Atlas client.
+ *
+ * The Vue peer of React's `AtlasContext`. `createAtlas()` provides exactly one
+ * `AtlasClient` on the app; every composable and component reaches it through
+ * `inject`, so there is a single reactive source of auth truth per app instance
+ * — never a module-level singleton that would leak state between two apps (or
+ * two SSR requests) sharing a process.
+ */
+export declare const ATLAS_INJECTION_KEY: InjectionKey<AtlasClient>;
+/**
+ * The Vue peer of React's `useAtlas()`.
+ *
+ * Throws rather than returning a null-ish default. A composable handing back
+ * `{ user: null }` outside the plugin is indistinguishable from a signed-out
+ * user, and the developer spends an afternoon on it.
+ */
+export declare function useAtlas(): AtlasClient;

package/dist/context.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ATLAS_INJECTION_KEY = void 0;
+exports.useAtlas = useAtlas;
+const vue_1 = require("vue");
+/**
+ * §10.1 the injected Atlas client.
+ *
+ * The Vue peer of React's `AtlasContext`. `createAtlas()` provides exactly one
+ * `AtlasClient` on the app; every composable and component reaches it through
+ * `inject`, so there is a single reactive source of auth truth per app instance
+ * — never a module-level singleton that would leak state between two apps (or
+ * two SSR requests) sharing a process.
+ */
+exports.ATLAS_INJECTION_KEY = Symbol('atlas');
+/**
+ * The Vue peer of React's `useAtlas()`.
+ *
+ * Throws rather than returning a null-ish default. A composable handing back
+ * `{ user: null }` outside the plugin is indistinguishable from a signed-out
+ * user, and the developer spends an afternoon on it.
+ */
+function useAtlas() {
+    const client = (0, vue_1.inject)(exports.ATLAS_INJECTION_KEY, null);
+    if (!client) {
+        throw new Error('Atlas composables must be used after app.use(createAtlas({ publishableKey })).');
+    }
+    return client;
+}
+//# sourceMappingURL=context.js.map

package/dist/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":";;;AAqBA,4BAMC;AA3BD,6BAAgD;AAGhD;;;;;;;;GAQG;AACU,QAAA,mBAAmB,GAA8B,MAAM,CAAC,OAAO,CAAC,CAAC;AAE9E;;;;;;GAMG;AACH,SAAgB,QAAQ;IACtB,MAAM,MAAM,GAAG,IAAA,YAAM,EAAC,2BAAmB,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/fapi.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The FAPI client and sign-in flow driver now live in `@atlasauth/js` — the pure,
+ * framework-agnostic browser FAPI flow — so the React `<SignIn/>` and the
+ * framework-agnostic `@atlasauth/embed` widget drive the exact same endpoints
+ * through one implementation and cannot diverge in what the server sees.
+ *
+ * This module is kept as a thin re-export so every existing importer inside the
+ * React SDK (`./components`, the public barrel, the tests) keeps resolving the
+ * driver from `./fapi` unchanged.
+ */
+export { FapiClient, advance, prepareFactor, pollAttempt, shouldKeepPolling, requestForStep, flowFromPending, initialFlow, getProviderToken, type FapiClientOptions, type FapiResponse, type FlowState, type ProviderToken, } from '@atlasauth/js';

package/dist/fapi.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getProviderToken = exports.initialFlow = exports.flowFromPending = exports.requestForStep = exports.shouldKeepPolling = exports.pollAttempt = exports.prepareFactor = exports.advance = exports.FapiClient = void 0;
+/**
+ * The FAPI client and sign-in flow driver now live in `@atlasauth/js` — the pure,
+ * framework-agnostic browser FAPI flow — so the React `<SignIn/>` and the
+ * framework-agnostic `@atlasauth/embed` widget drive the exact same endpoints
+ * through one implementation and cannot diverge in what the server sees.
+ *
+ * This module is kept as a thin re-export so every existing importer inside the
+ * React SDK (`./components`, the public barrel, the tests) keeps resolving the
+ * driver from `./fapi` unchanged.
+ */
+var js_1 = require("@atlasauth/js");
+Object.defineProperty(exports, "FapiClient", { enumerable: true, get: function () { return js_1.FapiClient; } });
+Object.defineProperty(exports, "advance", { enumerable: true, get: function () { return js_1.advance; } });
+Object.defineProperty(exports, "prepareFactor", { enumerable: true, get: function () { return js_1.prepareFactor; } });
+Object.defineProperty(exports, "pollAttempt", { enumerable: true, get: function () { return js_1.pollAttempt; } });
+Object.defineProperty(exports, "shouldKeepPolling", { enumerable: true, get: function () { return js_1.shouldKeepPolling; } });
+Object.defineProperty(exports, "requestForStep", { enumerable: true, get: function () { return js_1.requestForStep; } });
+Object.defineProperty(exports, "flowFromPending", { enumerable: true, get: function () { return js_1.flowFromPending; } });
+Object.defineProperty(exports, "initialFlow", { enumerable: true, get: function () { return js_1.initialFlow; } });
+Object.defineProperty(exports, "getProviderToken", { enumerable: true, get: function () { return js_1.getProviderToken; } });
+//# sourceMappingURL=fapi.js.map

package/dist/fapi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fapi.js","sourceRoot":"","sources":["../src/fapi.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;GASG;AACH,oCAcuB;AAbrB,gGAAA,UAAU,OAAA;AACV,6FAAA,OAAO,OAAA;AACP,mGAAA,aAAa,OAAA;AACb,iGAAA,WAAW,OAAA;AACX,uGAAA,iBAAiB,OAAA;AACjB,oGAAA,cAAc,OAAA;AACd,qGAAA,eAAe,OAAA;AACf,iGAAA,WAAW,OAAA;AACX,sGAAA,gBAAgB,OAAA"}

package/dist/flow.d.ts

@@ -0,0 +1,22 @@
+import { type ShallowRef } from 'vue';
+import { type FlowState } from './fapi';
+/**
+ * §10.2 the server-driven sign-in / sign-up flow, as a composable.
+ *
+ * The Vue peer of the React SDK's internal `useFlow`. It never decides what
+ * comes next — it drives the flow through `advance`, which owns the
+ * step-to-endpoint mapping in `@atlasauth/js`, and renders whatever `status` the
+ * server returned. `useSignIn` and `useSignUp` are the same driver; only the
+ * `<SignIn>` / `<SignUp>` title differs, exactly as in React.
+ */
+export interface FlowController {
+    /** The current server-driven attempt state. */
+    state: ShallowRef<FlowState>;
+    /** Post the current step's fields; the server decides the next status. */
+    submit(values: Record<string, string>): void;
+}
+export declare function useFlow(): FlowController;
+/** §10.2 `useSignIn()` — drive a sign-in attempt. */
+export declare function useSignIn(): FlowController;
+/** §10.2 `useSignUp()` — drive a sign-up attempt. */
+export declare function useSignUp(): FlowController;