@lowdefy/server-dev 0.0.0-experimental-20260720072521 → 0.0.0-experimental-20260720135014

package/client/feedback/pinResponsiveImages.js

@@ -1,59 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-// html-to-image embeds img.src and clones srcset/<source> attributes as-is:
-// the selection the browser actually displays (img.currentSrc) is ignored, so
-// a <picture> rasterizes its fallback src stretched into the displayed box
-// (e.g. the PageHeaderMenu square logo warped into the wordmark's slot), and
-// remote srcset candidates can't load inside the sandboxed SVG rasterization
-// anyway. Pin every responsive image to its currentSrc for the capture — the
-// URL the tab already displays, so nothing changes visually — and return a
-// restore function for the caller's finally block.
-function pinResponsiveImages() {
-  const restores = [];
-
-  document.querySelectorAll('img').forEach((img) => {
-    const isResponsive =
-      img.hasAttribute('srcset') || (img.currentSrc && img.currentSrc !== img.src);
-    if (!img.currentSrc || !isResponsive) return;
-    const src = img.getAttribute('src');
-    const srcset = img.getAttribute('srcset');
-    restores.push(() => {
-      if (src === null) {
-        img.removeAttribute('src');
-      } else {
-        img.setAttribute('src', src);
-      }
-      if (srcset !== null) {
-        img.setAttribute('srcset', srcset);
-      }
-    });
-    img.setAttribute('src', img.currentSrc);
-    img.removeAttribute('srcset');
-  });
-
-  document.querySelectorAll('picture > source[srcset]').forEach((source) => {
-    const srcset = source.getAttribute('srcset');
-    restores.push(() => source.setAttribute('srcset', srcset));
-    source.removeAttribute('srcset');
-  });
-
-  return function restore() {
-    restores.forEach((fn) => fn());
-  };
-}
-
-export default pinResponsiveImages;

package/client/feedback/sendFeedback.js

@@ -1,39 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-// Sends the batch to the dev server for enrichment (blockId → yaml file:line
-// via the build's keyMap) and gets back the formatted, agent-readable text.
-// Best-effort, matching Inspector.jsx's postResult style — a dev-only feature
-// must never throw into the app it rides along with. Returns the formatted
-// string, or null on any failure.
-async function sendFeedback({ basePath, batch }) {
-  try {
-    const response = await fetch(`${basePath}/lowdefy-feedback`, {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify(batch),
-    });
-    if (!response.ok) {
-      return null;
-    }
-    const data = await response.json();
-    return typeof data.formatted === 'string' ? data.formatted : null;
-  } catch {
-    return null;
-  }
-}
-
-export default sendFeedback;

package/client/feedback/useFeedbackToggle.js

@@ -1,70 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import { useEffect, useRef } from 'react';
-
-import { tinykeys } from 'tinykeys';
-
-// Binds the global Cmd/Ctrl+/ feedback toggle, matching the app's own
-// shortcut convention (see createShortcutManager.js): tinykeys on window,
-// "$mod" for the platform modifier. Registered at capture phase with
-// stopImmediatePropagation so the app's own shortcut manager (or any block
-// event bound to the same key) never also fires.
-function useFeedbackToggle({ onToggle }) {
-  const onToggleRef = useRef(onToggle);
-  onToggleRef.current = onToggle;
-
-  useEffect(() => {
-    if (typeof window === 'undefined') {
-      return undefined;
-    }
-
-    let unsubscribe;
-    try {
-      unsubscribe = tinykeys(
-        window,
-        {
-          '$mod+Slash': (event) => {
-            try {
-              event.preventDefault();
-              event.stopImmediatePropagation();
-              if (onToggleRef.current) {
-                onToggleRef.current();
-              }
-            } catch {
-              // Never let the toggle handler crash the app.
-            }
-          },
-        },
-        { capture: true }
-      );
-    } catch {
-      // tinykeys unavailable or binding failed — the feature just won't toggle.
-    }
-
-    return () => {
-      try {
-        if (unsubscribe) {
-          unsubscribe();
-        }
-      } catch {
-        // no-op
-      }
-    };
-  }, []);
-}
-
-export default useFeedbackToggle;

package/client/main.jsx

@@ -1,42 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-// CSS layer order — MUST be the first CSS import. This locks the cascade
-// priority (antd > base/preflight) before antd's StyleProvider injects
-// @layer antd {} at runtime. Vite's PostCSS pipeline compiles globals.css
-// (Tailwind) on the fly and hot-replaces it — the old tailwind-jit.css
-// side-channel is gone.
-import '../build/layer-order.css';
-
-import React from 'react';
-import { createRoot } from 'react-dom/client';
-import createRouter from '@lowdefy/client/adapters/createRouter.js';
-
-import App from './App.jsx';
-
-import '../build/globals.css';
-
-const config = JSON.parse(document.getElementById('__LOWDEFY_CONFIG__').textContent);
-const router = createRouter({ basePath: config.basePath ?? '', window });
-const container = document.getElementById('root');
-
-// Keep one React root across Vite HMR updates.
-const root = import.meta.hot?.data.root ?? createRoot(container);
-if (import.meta.hot) {
-  import.meta.hot.data.root = root;
-}
-
-root.render(<App config={config} router={router} />);

package/client/openInEditor/OpenInEditorListener.jsx

@@ -1,261 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import React, { useEffect, useRef, useState } from 'react';
-import { createPortal } from 'react-dom';
-
-import { blockAncestorChain, nearestBlock } from '../feedback/elementInspect.js';
-import { highlightBox, labelChip, overlayContainer } from '../feedback/feedbackStyles.js';
-import findBlockLocation from './findBlockLocation.js';
-
-const STYLE_TAG_ID = 'lowdefy-open-in-editor-style-tag';
-const BODY_CLASS = 'lowdefy-open-in-editor-target';
-
-// Cursor over arbitrary app descendants can't be forced from inline styles —
-// same trick as feedbackStyles' picking/drawing classes.
-function injectStyleTag() {
-  if (typeof document === 'undefined' || document.getElementById(STYLE_TAG_ID)) {
-    return;
-  }
-  const style = document.createElement('style');
-  style.id = STYLE_TAG_ID;
-  style.textContent = `
-    .${BODY_CLASS}, .${BODY_CLASS} * {
-      cursor: pointer !important;
-    }
-  `;
-  document.head.appendChild(style);
-}
-
-function removeStyleTag() {
-  if (typeof document === 'undefined') {
-    return;
-  }
-  document.getElementById(STYLE_TAG_ID)?.remove();
-}
-
-// The feedback overlay owns clicks while it is open (its picking mode claims
-// them) — the Cmd/Ctrl+click shortcut stays out of the way until it closes.
-// :not() skips this component's own highlight portal, which carries
-// data-lowdefy-feedback purely for screenshot/picking exclusion.
-function feedbackOverlayOpen() {
-  return Boolean(
-    document.querySelector('[data-lowdefy-feedback]:not([data-lowdefy-open-in-editor])')
-  );
-}
-
-// Dev-only: Cmd/Ctrl+click any element to open the YAML that defines its
-// block in VS Code (vscode://file deep link, at the exact line). While the
-// modifier is held, the hovered block shows the same blue highlight box and
-// blockId chip as the annotation overlay's picking mode, and the cursor
-// switches to a pointer — so the developer sees exactly what a click will
-// open. Mounted always-on from Routing.jsx alongside Inspector and
-// FeedbackMount, and follows their resilience contract — every handler is
-// try/caught so this can never take the app down with it.
-//
-// The click resolves the nearest block and, when that id is generated at
-// runtime (list items, Dynamic endpoints), falls back through the ancestor
-// block chain until an id resolves in config — the same strategy the
-// feedback pipeline uses in enrichFeedback.js.
-function OpenInEditorListener({ basePath, pageId }) {
-  const [hoverBlock, setHoverBlock] = useState(null); // { blockId, rect }
-  // Refs keep the freshest values without re-binding the capture listeners
-  // on every SPA navigation or hover change.
-  const pageIdRef = useRef(pageId);
-  pageIdRef.current = pageId;
-  const hoverRef = useRef(hoverBlock);
-  hoverRef.current = hoverBlock;
-  const lastPointerRef = useRef(null); // { x, y }
-
-  // Style tag lifecycle — the listener is always mounted, so this lives for
-  // the app's lifetime and only the body class toggles per hover.
-  useEffect(() => {
-    injectStyleTag();
-    return () => removeStyleTag();
-  }, []);
-
-  // Pointer cursor only while a block is highlighted — over non-block areas
-  // the cursor stays native, signalling the click would do nothing.
-  useEffect(() => {
-    try {
-      document.body.classList.toggle(BODY_CLASS, Boolean(hoverBlock));
-    } catch {
-      // no-op
-    }
-    return () => {
-      try {
-        document.body.classList.remove(BODY_CLASS);
-      } catch {
-        // no-op
-      }
-    };
-  }, [hoverBlock]);
-
-  useEffect(() => {
-    function clearHover() {
-      if (hoverRef.current) {
-        setHoverBlock(null);
-      }
-    }
-
-    function resolveHover() {
-      try {
-        const point = lastPointerRef.current;
-        if (!point || feedbackOverlayOpen()) {
-          clearHover();
-          return;
-        }
-        const el = document.elementFromPoint(point.x, point.y);
-        const blockId = nearestBlock(el);
-        const blockEl = blockId ? document.getElementById(`bl-${blockId}`) : null;
-        if (!blockEl) {
-          clearHover();
-          return;
-        }
-        const rect = blockEl.getBoundingClientRect();
-        setHoverBlock({
-          blockId,
-          rect: { top: rect.top, left: rect.left, width: rect.width, height: rect.height },
-        });
-      } catch {
-        clearHover();
-      }
-    }
-
-    function onPointerMove(event) {
-      try {
-        lastPointerRef.current = { x: event.clientX, y: event.clientY };
-        if (event.metaKey || event.ctrlKey) {
-          resolveHover();
-        } else {
-          clearHover();
-        }
-      } catch {
-        // Best-effort hover tracking.
-      }
-    }
-
-    // Modifier pressed/released while the mouse is stationary — pointermove
-    // alone would leave the highlight stale.
-    function onKeyDown(event) {
-      if (event.key === 'Meta' || event.key === 'Control') {
-        resolveHover();
-      }
-    }
-
-    function onKeyUp(event) {
-      if (event.key === 'Meta' || event.key === 'Control') {
-        clearHover();
-      }
-    }
-
-    // Cmd+Tab away releases the modifier without a keyup reaching the page.
-    function onBlur() {
-      clearHover();
-    }
-
-    // Keep the highlight glued to the block while the app scrolls under a
-    // stationary cursor.
-    function onScroll() {
-      if (hoverRef.current) {
-        resolveHover();
-      }
-    }
-
-    async function openBlockInEditor({ candidates }) {
-      for (const blockId of candidates) {
-        const location = await findBlockLocation({
-          basePath,
-          blockId,
-          pageId: pageIdRef.current,
-        });
-        if (location) {
-          window.location.assign(`vscode://file${location.file}:${location.line}`);
-          return;
-        }
-      }
-      try {
-        // eslint-disable-next-line no-console
-        console.info(
-          `Lowdefy: no config location found for "${candidates[0]}" — the block is generated at runtime.`
-        );
-      } catch {
-        // no-op
-      }
-    }
-
-    function onClickCapture(event) {
-      try {
-        if (!(event.metaKey || event.ctrlKey) || event.shiftKey || event.altKey) {
-          return;
-        }
-        if (feedbackOverlayOpen()) {
-          return;
-        }
-        const candidates = blockAncestorChain(event.target);
-        if (candidates.length === 0) {
-          return;
-        }
-        // Only claim the click once a block is under the cursor — plain
-        // Cmd/Ctrl+clicks elsewhere keep their default behaviour.
-        event.preventDefault();
-        event.stopPropagation();
-        void openBlockInEditor({ candidates });
-      } catch {
-        // Never let the shortcut break the developer's app.
-      }
-    }
-
-    window.addEventListener('pointermove', onPointerMove);
-    window.addEventListener('keydown', onKeyDown);
-    window.addEventListener('keyup', onKeyUp);
-    window.addEventListener('blur', onBlur);
-    window.addEventListener('scroll', onScroll, true);
-    window.addEventListener('click', onClickCapture, { capture: true });
-    return () => {
-      window.removeEventListener('pointermove', onPointerMove);
-      window.removeEventListener('keydown', onKeyDown);
-      window.removeEventListener('keyup', onKeyUp);
-      window.removeEventListener('blur', onBlur);
-      window.removeEventListener('scroll', onScroll, true);
-      window.removeEventListener('click', onClickCapture, { capture: true });
-    };
-  }, [basePath]);
-
-  if (!hoverBlock || typeof document === 'undefined' || !document.body) {
-    return null;
-  }
-  // data-lowdefy-feedback keeps this out of the annotation overlay's element
-  // picking and out of tab-captured screenshots (both exclude that root).
-  return createPortal(
-    <div data-lowdefy-feedback data-lowdefy-open-in-editor style={overlayContainer}>
-      <div
-        style={{
-          ...highlightBox,
-          top: hoverBlock.rect.top,
-          left: hoverBlock.rect.left,
-          width: hoverBlock.rect.width,
-          height: hoverBlock.rect.height,
-        }}
-      >
-        <span style={labelChip}>{hoverBlock.blockId}</span>
-      </div>
-    </div>,
-    document.body
-  );
-}
-
-export default OpenInEditorListener;

package/client/openInEditor/findBlockLocation.js

@@ -1,51 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-// Resolves a blockId to its YAML source via the dev server's existing
-// GET /lowdefy-docs/find/{id}?pageId= route (which JIT-builds the page's
-// keyMap on demand). Returns { file, line } with an absolute file path, or
-// null when the id has no configured location. Best-effort, matching
-// sendFeedback.js — a dev-only feature must never throw into the app.
-async function findBlockLocation({ basePath, blockId, pageId }) {
-  try {
-    // Omit pageId when unknown — an empty ?pageId= reads as an unknown page
-    // on the server, while no param falls back to scanning all built pages.
-    const query = pageId ? `?pageId=${encodeURIComponent(pageId)}` : '';
-    const response = await fetch(
-      `${basePath}/lowdefy-docs/find/${encodeURIComponent(blockId)}${query}`
-    );
-    if (!response.ok) {
-      return null;
-    }
-    const data = await response.json();
-    const source = data.matches?.[0]?.location?.source;
-    if (typeof source !== 'string' || source.length === 0) {
-      return null;
-    }
-    // source is "<absolute path>" or "<absolute path>:<line>" — a numeric
-    // suffix after the last colon is the 1-based line number. Splitting on
-    // the last colon keeps Windows drive-letter colons intact.
-    const match = source.match(/^(.*):(\d+)$/);
-    if (match) {
-      return { file: match[1], line: Number(match[2]) };
-    }
-    return { file: source, line: 1 };
-  } catch {
-    return null;
-  }
-}
-
-export default findBlockLocation;

package/lib/client/auth/AuthConfigured.jsx

@@ -1,155 +0,0 @@
-/*
-  Copyright 2020-2026 Lowdefy, Inc
-
-  Licensed under the Apache License, Version 2.0 (the "License");
-  you may not use this file except in compliance with the License.
-  You may obtain a copy of the License at
-
-      http://www.apache.org/licenses/LICENSE-2.0
-
-  Unless required by applicable law or agreed to in writing, software
-  distributed under the License is distributed on an "AS IS" BASIS,
-  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-  See the License for the specific language governing permissions and
-  limitations under the License.
-*/
-
-import React, { useEffect, useRef } from 'react';
-import { createAuthClient } from 'better-auth/react';
-import {
-  adminClient,
-  genericOAuthClient,
-  magicLinkClient,
-  organizationClient,
-  phoneNumberClient,
-  twoFactorClient,
-} from 'better-auth/client/plugins';
-import { passkeyClient } from '@better-auth/passkey/client';
-
-import { serializer } from '@lowdefy/helpers';
-
-import rawLowdefyConfig from '../../../build/config.json';
-
-const lowdefyConfig = serializer.deserialize(rawLowdefyConfig);
-
-const authClient = createAuthClient({
-  baseURL: `${window.location.origin}${lowdefyConfig.basePath ?? ''}/api/auth`,
-  plugins: [
-    adminClient(),
-    genericOAuthClient(),
-    magicLinkClient(),
-    organizationClient(),
-    passkeyClient(),
-    phoneNumberClient(),
-    twoFactorClient(),
-  ],
-});
-
-// The server resolves the caller per request and embeds it in the page
-// config, so the first render never flashes unauthenticated. The BetterAuth
-// client store takes over once its session fetch settles.
-//
-// Roles and merged attributes resolve server-side from the active member row
-// - the base session carries neither. The last server-resolved caller is
-// kept in a ref: while the session user is unchanged its roles and
-// attributes stay authoritative, and UpdateSession refreshes the ref from
-// /api/user after a change (e.g. SetActiveOrganization).
-function Session({ children, reloadSuppressedRef, serverUser }) {
-  const { data: session, isPending } = authClient.useSession();
-  const resolvedUserRef = useRef(serverUser);
-  const wasAuthenticated = useRef(Boolean(serverUser));
-
-  useEffect(() => {
-    if (session) {
-      wasAuthenticated.current = true;
-    }
-    // Reload after sign-out (or session revocation) so the server can apply
-    // the page auth fork - a protected page redirects to the login page.
-    // A logout with a callbackUrl suppresses the reload - its own navigation
-    // would otherwise race this one.
-    if (wasAuthenticated.current && !isPending && !session && !reloadSuppressedRef.current) {
-      window.location.reload();
-    }
-  }, [session, isPending]);
-
-  if (isPending) {
-    return children(resolvedUserRef.current, resolvedUserRef);
-  }
-  if (!session?.user) {
-    return children(null, resolvedUserRef);
-  }
-  const resolved = resolvedUserRef.current;
-  const user =
-    resolved && resolved.id === session.user.id
-      ? { ...session.user, roles: resolved.roles, attributes: resolved.attributes }
-      : { roles: [], ...session.user };
-  return children(user, resolvedUserRef);
-}
-
-function AuthConfigured({ authConfig, children, serverUser }) {
-  const reloadSuppressedRef = useRef(false);
-  const auth = {
-    authConfig,
-    getSession: ({ disableCookieCache } = {}) =>
-      authClient.getSession(disableCookieCache ? { query: { disableCookieCache: true } } : {}),
-    // The server-resolved caller - roles from the active member row and the
-    // merged attributes bag - for re-syncing after session changes.
-    getResolvedUser: async () => {
-      const response = await fetch(`${lowdefyConfig.basePath ?? ''}/api/user`, {
-        credentials: 'same-origin',
-      });
-      if (!response.ok) {
-        // Throw instead of parsing an error page - a silent { user: undefined }
-        // would read as a client-side logout in updateSession.
-        throw new Error(`Failed to fetch the resolved user (HTTP ${response.status}).`);
-      }
-      return response.json();
-    },
-    suppressSignOutReload: () => {
-      reloadSuppressedRef.current = true;
-    },
-    acceptInvitation: (params) => authClient.organization.acceptInvitation(params),
-    // addPasskey runs the WebAuthn browser ceremony itself - options fetch,
-    // authenticator prompt, verification.
-    addPasskey: (params) => authClient.passkey.addPasskey(params),
-    changePassword: (params) => authClient.changePassword(params),
-    deletePasskey: (params) => authClient.passkey.deletePasskey(params),
-    impersonateUser: (params) => authClient.admin.impersonateUser(params),
-    phoneNumberRequestPasswordReset: (params) =>
-      authClient.phoneNumber.requestPasswordReset(params),
-    phoneNumberResetPassword: (params) => authClient.phoneNumber.resetPassword(params),
-    phoneNumberSendOtp: (params) => authClient.phoneNumber.sendOtp(params),
-    phoneNumberVerify: (params) => authClient.phoneNumber.verify(params),
-    requestPasswordReset: (params) => authClient.requestPasswordReset(params),
-    resetPassword: (params) => authClient.resetPassword(params),
-    revokeOtherSessions: () => authClient.revokeOtherSessions(),
-    sendVerificationEmail: (params) => authClient.sendVerificationEmail(params),
-    setActiveOrganization: (params) => authClient.organization.setActive(params),
-    signInEmail: (params) => authClient.signIn.email(params),
-    signInMagicLink: (params) => authClient.signIn.magicLink(params),
-    signInOauth2: (params) => authClient.signIn.oauth2(params),
-    signInPasskey: (params) => authClient.signIn.passkey(params),
-    signInPhoneNumber: (params) => authClient.signIn.phoneNumber(params),
-    signInSocial: (params) => authClient.signIn.social(params),
-    signOut: () => authClient.signOut(),
-    signUpEmail: (params) => authClient.signUp.email(params),
-    stopImpersonating: () => authClient.admin.stopImpersonating(),
-    twoFactorDisable: (params) => authClient.twoFactor.disable(params),
-    twoFactorEnable: (params) => authClient.twoFactor.enable(params),
-    twoFactorVerifyBackupCode: (params) => authClient.twoFactor.verifyBackupCode(params),
-    twoFactorVerifyTotp: (params) => authClient.twoFactor.verifyTotp(params),
-  };
-  return (
-    <Session reloadSuppressedRef={reloadSuppressedRef} serverUser={serverUser}>
-      {(user, resolvedUserRef) => {
-        auth.user = user;
-        auth.updateResolvedUser = (resolved) => {
-          resolvedUserRef.current = resolved;
-        };
-        return children(auth);
-      }}
-    </Session>
-  );
-}
-
-export default AuthConfigured;