@pyric/ui 0.1.0-alpha.10

package/dist/auth/components/AuthUserForm.d.ts

@@ -0,0 +1,84 @@
+import type { ReactNode } from 'react';
+import type { AuthUserRecord, CreateUserRequest, UpdateUserRequest } from 'pyric/auth';
+/** What `onSubmit` receives — discriminated on the form's mode. */
+export type AuthUserFormSubmit = {
+    mode: 'create';
+    request: CreateUserRequest;
+} | {
+    mode: 'edit';
+    uid: string;
+    request: UpdateUserRequest;
+};
+/** Field names the {@link AuthUserFormProps.renderField} slot receives,
+ *  in render order. Claims is NOT a slot field — it stays the standalone
+ *  `<ClaimsField>` (override it by composing `useAuthUserEditor`). */
+export type AuthUserFormFieldName = 'email' | 'password' | 'display-name' | 'phone-number' | 'photo-url' | 'providers' | 'email-verified' | 'disabled';
+/** What the {@link AuthUserFormProps.renderField} slot receives per field. */
+export interface AuthUserFormField {
+    name: AuthUserFormFieldName;
+    /** The visible label text the default rendering uses. */
+    label: string;
+    /** The wired, controlled input element (carries `data-pyric-field`).
+     *  Place it anywhere; state/validation stay connected. */
+    input: ReactNode;
+    /** Current validation message for this field, or null. */
+    error: string | null;
+    /** `'text' | 'checkbox' | 'group'` — lets one slot impl branch on
+     *  layout (`group` = a multi-control block, e.g. the provider
+     *  checklist; create mode only). */
+    kind: 'text' | 'checkbox' | 'group';
+    /** The default rendering (label wrapper + label text + input + error).
+     *  Call it to keep the stock layout for fields you don't customize. */
+    defaultRender: () => ReactNode;
+}
+export interface AuthUserFormProps {
+    /** Existing record → edit mode (delta payloads); omit → create mode. */
+    initial?: AuthUserRecord;
+    /** Receives the validated payload. Wire `create` to
+     *  `useAuthUsers().createUser` and `edit` to `updateUser`. */
+    onSubmit: (submit: AuthUserFormSubmit) => void;
+    onCancel?: () => void;
+    submitLabel?: string;
+    cancelLabel?: string;
+    /** Extra content rendered before the action row (e.g. an error from a
+     *  failed `createUser` call). */
+    children?: ReactNode;
+    className?: string;
+    /** Per-field layout override. Called for each field (see
+     *  {@link AuthUserFormFieldName} order); return your own markup around
+     *  `field.input`, or `field.defaultRender()` to keep the stock label
+     *  wrapper for that field. Omit the prop for the default layout. */
+    renderField?: (field: AuthUserFormField) => ReactNode;
+}
+/**
+ * Headless add/edit-user form over `useAuthUserEditor` — the emulator
+ * UI's user dialog fields (email, password, display name, phone, photo
+ * URL, verified/disabled toggles, custom claims) with its validation
+ * messages. Zero CSS; structure addressable via `data-pyric-*`:
+ *
+ * - root `form[data-pyric-ui="auth-user-form"]` with `data-pyric-mode`,
+ *   `data-pyric-is-dirty`, `data-pyric-is-valid` state attrs
+ * - every field (text inputs AND checkboxes) is wrapped in a
+ *   `label[data-pyric-field-label="<name>"]` carrying a visible
+ *   `span[data-pyric-label-text]` — labeled grid layouts are pure CSS
+ *   (`display: grid` on the wrappers); label-less designs hide
+ *   `[data-pyric-label-text]` and lean on the placeholders
+ * - inputs `[data-pyric-field="email" | "password" | "display-name" |
+ *   "phone-number" | "photo-url" | "email-verified" | "disabled"]`
+ * - CREATE mode only: a "Sign-in providers" group
+ *   (`fieldset[data-pyric-field-label="providers"]` wrapping
+ *   `[data-pyric-provider-checklist]`) — one checkbox per federated
+ *   provider the sandbox supports (`FEDERATED_PROVIDER_IDS` from
+ *   `pyric/auth`; multiple selectable, entries land on
+ *   `CreateUserRequest.providerUserInfo`)
+ * - claims via the standalone `<ClaimsField>`
+ * - per-field messages `[data-pyric-field-error="email" | "password"]`
+ *   render INSIDE the field's label wrapper, after the input
+ * - `button[data-pyric-cancel]` / `button[data-pyric-submit]` (submit is
+ *   disabled while invalid, or pristine in edit mode)
+ *
+ * Submit emits payloads only — no sandbox calls — so the same form works
+ * for create and edit and the consumer owns error handling.
+ */
+export declare function AuthUserForm({ initial, onSubmit, onCancel, submitLabel, cancelLabel, children, className, renderField, }: AuthUserFormProps): import("react").JSX.Element;
+//# sourceMappingURL=AuthUserForm.d.ts.map

package/dist/auth/components/AuthUserForm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthUserForm.d.ts","sourceRoot":"","sources":["../../../src/auth/components/AuthUserForm.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAa,SAAS,EAAE,MAAM,OAAO,CAAC;AAElD,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAsCvF,mEAAmE;AACnE,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,GAC9C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,iBAAiB,CAAA;CAAE,CAAC;AAE9D;;sEAEsE;AACtE,MAAM,MAAM,qBAAqB,GAC7B,OAAO,GACP,UAAU,GACV,cAAc,GACd,cAAc,GACd,WAAW,GACX,WAAW,GACX,gBAAgB,GAChB,UAAU,CAAC;AAEf,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,yDAAyD;IACzD,KAAK,EAAE,MAAM,CAAC;IACd;8DAC0D;IAC1D,KAAK,EAAE,SAAS,CAAC;IACjB,0DAA0D;IAC1D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;;wCAEoC;IACpC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC;IACpC;2EACuE;IACvE,aAAa,EAAE,MAAM,SAAS,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB;kEAC8D;IAC9D,QAAQ,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC/C,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;qCACiC;IACjC,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;wEAGoE;IACpE,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,SAAS,CAAC;CACvD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,YAAY,CAAC,EAC3B,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,WAAoB,EACpB,WAAsB,EACtB,QAAQ,EACR,SAAS,EACT,WAAW,GACZ,EAAE,iBAAiB,+BA8LnB"}

package/dist/auth/components/AuthUserForm.js

@@ -0,0 +1,89 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { Fragment } from 'react';
+import { FEDERATED_PROVIDER_IDS } from 'pyric/auth';
+import { useAuthUserEditor } from '../hooks/useAuthUserEditor.js';
+import { providerLabel } from '../providers.js';
+import { ClaimsField } from './ClaimsField.js';
+/** Create-mode provider multi-select: one checkbox per federated provider
+ *  id the sandbox supports (the canonical `FEDERATED_PROVIDER_IDS` set from
+ *  `pyric/auth` — derived from the shipped provider classes, not a UI-side
+ *  copy). A user can link one or several. Headless: style
+ *  `[data-pyric-provider-checklist]` / `[data-pyric-provider-option]`. */
+function ProviderChecklist({ selected, onChange, }) {
+    return (_jsx("div", { "data-pyric-provider-checklist": true, children: FEDERATED_PROVIDER_IDS.map((id) => (_jsxs("label", { "data-pyric-provider-option": id, children: [_jsx("input", { type: "checkbox", checked: selected.includes(id), onChange: (e) => onChange(e.target.checked ? [...selected, id] : selected.filter((p) => p !== id)) }), _jsx("span", { "data-pyric-provider-option-label": true, children: providerLabel(id) }), _jsx("span", { "data-pyric-provider-option-id": true, children: id })] }, id))) }));
+}
+/**
+ * Headless add/edit-user form over `useAuthUserEditor` — the emulator
+ * UI's user dialog fields (email, password, display name, phone, photo
+ * URL, verified/disabled toggles, custom claims) with its validation
+ * messages. Zero CSS; structure addressable via `data-pyric-*`:
+ *
+ * - root `form[data-pyric-ui="auth-user-form"]` with `data-pyric-mode`,
+ *   `data-pyric-is-dirty`, `data-pyric-is-valid` state attrs
+ * - every field (text inputs AND checkboxes) is wrapped in a
+ *   `label[data-pyric-field-label="<name>"]` carrying a visible
+ *   `span[data-pyric-label-text]` — labeled grid layouts are pure CSS
+ *   (`display: grid` on the wrappers); label-less designs hide
+ *   `[data-pyric-label-text]` and lean on the placeholders
+ * - inputs `[data-pyric-field="email" | "password" | "display-name" |
+ *   "phone-number" | "photo-url" | "email-verified" | "disabled"]`
+ * - CREATE mode only: a "Sign-in providers" group
+ *   (`fieldset[data-pyric-field-label="providers"]` wrapping
+ *   `[data-pyric-provider-checklist]`) — one checkbox per federated
+ *   provider the sandbox supports (`FEDERATED_PROVIDER_IDS` from
+ *   `pyric/auth`; multiple selectable, entries land on
+ *   `CreateUserRequest.providerUserInfo`)
+ * - claims via the standalone `<ClaimsField>`
+ * - per-field messages `[data-pyric-field-error="email" | "password"]`
+ *   render INSIDE the field's label wrapper, after the input
+ * - `button[data-pyric-cancel]` / `button[data-pyric-submit]` (submit is
+ *   disabled while invalid, or pristine in edit mode)
+ *
+ * Submit emits payloads only — no sandbox calls — so the same form works
+ * for create and edit and the consumer owns error handling.
+ */
+export function AuthUserForm({ initial, onSubmit, onCancel, submitLabel = 'Save', cancelLabel = 'Cancel', children, className, renderField, }) {
+    const editor = useAuthUserEditor({ initial });
+    const mode = initial ? 'edit' : 'create';
+    const submittable = editor.isValid && (mode === 'create' || editor.isDirty);
+    /** Build one field descriptor: the wired input + the stock label-wrapper
+     *  rendering. `renderField` consumers place `input` themselves. */
+    const field = (name, label, kind, input, error = null) => ({
+        name,
+        label,
+        input,
+        error,
+        kind,
+        defaultRender: () => kind === 'checkbox' ? (_jsxs("label", { "data-pyric-field-label": name, children: [input, _jsx("span", { "data-pyric-label-text": true, children: label })] }, name)) : kind === 'group' ? (_jsxs("fieldset", { "data-pyric-field-label": name, children: [_jsx("legend", { "data-pyric-label-text": true, children: label }), input] }, name)) : (_jsxs("label", { "data-pyric-field-label": name, children: [_jsx("span", { "data-pyric-label-text": true, children: label }), input, error != null && (_jsx("p", { role: "alert", "data-pyric-field-error": name, children: error }))] }, name)),
+    });
+    const fields = [
+        field('email', 'Email', 'text', _jsx("input", { type: "email", "data-pyric-field": "email", placeholder: "email@example.com", value: editor.fields.email, onChange: (e) => editor.setField('email', e.target.value) }), editor.errors.email ?? null),
+        field('password', 'Password', 'text', _jsx("input", { type: "password", "data-pyric-field": "password", placeholder: mode === 'edit' ? 'New password (unchanged if empty)' : 'Password', value: editor.fields.password, onChange: (e) => editor.setField('password', e.target.value) }), editor.errors.password ?? null),
+        field('display-name', 'Display name', 'text', _jsx("input", { type: "text", "data-pyric-field": "display-name", placeholder: "Display name (optional)", value: editor.fields.displayName, onChange: (e) => editor.setField('displayName', e.target.value) })),
+        field('phone-number', 'Phone number', 'text', _jsx("input", { type: "tel", "data-pyric-field": "phone-number", placeholder: "+1 555 555 0100", value: editor.fields.phoneNumber, onChange: (e) => editor.setField('phoneNumber', e.target.value) })),
+        field('photo-url', 'Photo URL', 'text', _jsx("input", { type: "url", "data-pyric-field": "photo-url", placeholder: "https://example.com/avatar.png", value: editor.fields.photoUrl, onChange: (e) => editor.setField('photoUrl', e.target.value) })),
+        // Provider selection is CREATE-only: in edit mode linked providers are
+        // managed by the consumer's own affordance over `updateUser` (Studio's
+        // per-user ProvidersEditor), not the delta form.
+        ...(mode === 'create'
+            ? [
+                field('providers', 'Sign-in providers', 'group', _jsx(ProviderChecklist, { selected: editor.fields.providerIds, onChange: (ids) => editor.setField('providerIds', ids) })),
+            ]
+            : []),
+        field('email-verified', 'Verified email', 'checkbox', _jsx("input", { type: "checkbox", "data-pyric-field": "email-verified", checked: editor.fields.emailVerified, onChange: (e) => editor.setField('emailVerified', e.target.checked) })),
+        field('disabled', 'Disabled (sign-in attempts are rejected)', 'checkbox', _jsx("input", { type: "checkbox", "data-pyric-field": "disabled", checked: editor.fields.disabled, onChange: (e) => editor.setField('disabled', e.target.checked) })),
+    ];
+    const submit = (e) => {
+        e.preventDefault();
+        if (!submittable)
+            return;
+        if (mode === 'edit') {
+            onSubmit({ mode, uid: initial.uid, request: editor.toUpdateRequest() });
+        }
+        else {
+            onSubmit({ mode, request: editor.toCreateRequest() });
+        }
+    };
+    return (_jsxs("form", { className: className, "data-pyric-ui": "auth-user-form", "data-pyric-mode": mode, "data-pyric-is-dirty": editor.isDirty ? '' : undefined, "data-pyric-is-valid": editor.isValid ? '' : undefined, onSubmit: submit, children: [fields.map((f) => renderField ? (_jsx(Fragment, { children: renderField(f) }, f.name)) : (f.defaultRender())), _jsx(ClaimsField, { value: editor.fields.claimsText, onChange: (text) => editor.setField('claimsText', text), error: editor.errors.claims }), children, _jsxs("footer", { "data-pyric-form-actions": true, children: [onCancel ? (_jsx("button", { type: "button", "data-pyric-cancel": true, onClick: onCancel, children: cancelLabel })) : null, _jsx("button", { type: "submit", "data-pyric-submit": true, disabled: !submittable, children: submitLabel })] })] }));
+}
+//# sourceMappingURL=AuthUserForm.js.map

package/dist/auth/components/AuthUserForm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthUserForm.js","sourceRoot":"","sources":["../../../src/auth/components/AuthUserForm.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C;;;;0EAI0E;AAC1E,SAAS,iBAAiB,CAAC,EACzB,QAAQ,EACR,QAAQ,GAIT;IACC,OAAO,CACL,+DACG,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAClC,+CAA4C,EAAE,aAC5C,gBACE,IAAI,EAAC,UAAU,EACf,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,EAC9B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CACd,QAAQ,CACN,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CACxE,GAEH,EACF,mEAAwC,aAAa,CAAC,EAAE,CAAC,GAAQ,EACjE,gEAAqC,EAAE,GAAQ,KAXrC,EAAE,CAYN,CACT,CAAC,GACE,CACP,CAAC;AACJ,CAAC;AA2DD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,OAAO,EACP,QAAQ,EACR,QAAQ,EACR,WAAW,GAAG,MAAM,EACpB,WAAW,GAAG,QAAQ,EACtB,QAAQ,EACR,SAAS,EACT,WAAW,GACO;IAClB,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IACzC,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;IAE5E;uEACmE;IACnE,MAAM,KAAK,GAAG,CACZ,IAA2B,EAC3B,KAAa,EACb,IAAmC,EACnC,KAAgB,EAChB,QAAuB,IAAI,EACR,EAAE,CAAC,CAAC;QACvB,IAAI;QACJ,KAAK;QACL,KAAK;QACL,KAAK;QACL,IAAI;QACJ,aAAa,EAAE,GAAG,EAAE,CAClB,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CACpB,2CAA+B,IAAI,aAChC,KAAK,EACN,wDAA6B,KAAK,GAAQ,KAFF,IAAI,CAGtC,CACT,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CACrB,8CAAkC,IAAI,aACpC,0DAA+B,KAAK,GAAU,EAC7C,KAAK,KAFqC,IAAI,CAGtC,CACZ,CAAC,CAAC,CAAC,CACF,2CAA+B,IAAI,aACjC,wDAA6B,KAAK,GAAQ,EACzC,KAAK,EACL,KAAK,IAAI,IAAI,IAAI,CAChB,YAAG,IAAI,EAAC,OAAO,4BAAyB,IAAI,YACzC,KAAK,GACJ,CACL,KAPuC,IAAI,CAQtC,CACT;KACJ,CAAC,CAAC;IAEH,MAAM,MAAM,GAAwB;QAClC,KAAK,CACH,OAAO,EACP,OAAO,EACP,MAAM,EACN,gBACE,IAAI,EAAC,OAAO,sBACK,OAAO,EACxB,WAAW,EAAC,mBAAmB,EAC/B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAC1B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GACzD,EACF,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAC5B;QACD,KAAK,CACH,UAAU,EACV,UAAU,EACV,MAAM,EACN,gBACE,IAAI,EAAC,UAAU,sBACE,UAAU,EAC3B,WAAW,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,UAAU,EAC/E,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAC7B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAC5D,EACF,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,IAAI,CAC/B;QACD,KAAK,CACH,cAAc,EACd,cAAc,EACd,MAAM,EACN,gBACE,IAAI,EAAC,MAAM,sBACM,cAAc,EAC/B,WAAW,EAAC,yBAAyB,EACrC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,EAChC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAC/D,CACH;QACD,KAAK,CACH,cAAc,EACd,cAAc,EACd,MAAM,EACN,gBACE,IAAI,EAAC,KAAK,sBACO,cAAc,EAC/B,WAAW,EAAC,iBAAiB,EAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,EAChC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAC/D,CACH;QACD,KAAK,CACH,WAAW,EACX,WAAW,EACX,MAAM,EACN,gBACE,IAAI,EAAC,KAAK,sBACO,WAAW,EAC5B,WAAW,EAAC,gCAAgC,EAC5C,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAC7B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAC5D,CACH;QACD,uEAAuE;QACvE,uEAAuE;QACvE,iDAAiD;QACjD,GAAG,CAAC,IAAI,KAAK,QAAQ;YACnB,CAAC,CAAC;gBACE,KAAK,CACH,WAAW,EACX,mBAAmB,EACnB,OAAO,EACP,KAAC,iBAAiB,IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,EACnC,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,GACtD,CACH;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,KAAK,CACH,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,gBACE,IAAI,EAAC,UAAU,sBACE,gBAAgB,EACjC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,EACpC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GACnE,CACH;QACD,KAAK,CACH,UAAU,EACV,0CAA0C,EAC1C,UAAU,EACV,gBACE,IAAI,EAAC,UAAU,sBACE,UAAU,EAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAC/B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAC9D,CACH;KACF,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,CAAY,EAAE,EAAE;QAC9B,CAAC,CAAC,cAAc,EAAE,CAAC;QACnB,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,QAAQ,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAC3E,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CACL,gBACE,SAAS,EAAE,SAAS,mBACN,gBAAgB,qBACb,IAAI,yBACA,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,yBAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EACpD,QAAQ,EAAE,MAAM,aAEf,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAChB,WAAW,CAAC,CAAC,CAAC,CACZ,KAAC,QAAQ,cAAe,WAAW,CAAC,CAAC,CAAC,IAAvB,CAAC,CAAC,IAAI,CAA6B,CACnD,CAAC,CAAC,CAAC,CACF,CAAC,CAAC,aAAa,EAAE,CAClB,CACF,EACD,KAAC,WAAW,IACV,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,EAC/B,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,EACvD,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAC3B,EACD,QAAQ,EACT,8DACG,QAAQ,CAAC,CAAC,CAAC,CACV,iBAAQ,IAAI,EAAC,QAAQ,6BAAmB,OAAO,EAAE,QAAQ,YACtD,WAAW,GACL,CACV,CAAC,CAAC,CAAC,IAAI,EACR,iBAAQ,IAAI,EAAC,QAAQ,6BAAmB,QAAQ,EAAE,CAAC,WAAW,YAC3D,WAAW,GACL,IACF,IACJ,CACR,CAAC;AACJ,CAAC"}

package/dist/auth/components/AuthUserList.d.ts

@@ -0,0 +1,62 @@
+import type { ReactNode } from 'react';
+import type { AuthUserRecord } from 'pyric/auth';
+export interface AuthUserListProps {
+    /** Rows to render — usually `useAuthUsers().users`. */
+    users: AuthUserRecord[];
+    isLoading?: boolean;
+    error?: Error;
+    /** The active filter text. Distinguishes the "no users yet" zero state
+     *  (empty filter) from "no results" (non-empty). */
+    filter?: string;
+    /** Fired when the identifier cell is clicked. When omitted, the
+     *  identifier renders as plain text. */
+    onSelect?: (user: AuthUserRecord) => void;
+    /** Identifier-cell override. Default: email, else phone, else
+     *  `anonymous`, else the uid. */
+    renderIdentifier?: (user: AuthUserRecord) => ReactNode;
+    /** Providers-cell override. Default: one `<span data-pyric-provider-id>`
+     *  per linked provider with its text label (`anonymous` for anonymous
+     *  users) — hook icons off the attribute. */
+    renderProviders?: (user: AuthUserRecord) => ReactNode;
+    /** Per-row selection control. Rendered in the leading cell so bulk
+     *  selection stays visually separate from trailing row actions. */
+    renderSelection?: (user: AuthUserRecord) => ReactNode;
+    /** Optional content for the leading selection column header (for example,
+     *  a select-all checkbox). Only rendered with `renderSelection`. */
+    renderSelectionHeader?: ReactNode;
+    /** Per-row action slot (edit / disable / delete menu). Rendered in a
+     *  trailing cell; column header is added when this is provided. */
+    renderActions?: (user: AuthUserRecord) => ReactNode;
+    /** Optional content for the trailing actions column header (for example,
+     *  a select-all checkbox). Only rendered with `renderActions`. */
+    renderActionsHeader?: ReactNode;
+    /** Timestamp formatter for Created. Default: locale date, em dash for null. */
+    formatCreatedAt?: (iso: string | null) => ReactNode;
+    /** Timestamp formatter for Signed In. Kept separate because a missing login
+     *  means "never", while a missing/invalid creation time is malformed data. */
+    formatLastLoginAt?: (iso: string | null) => ReactNode;
+    /** Zero state when the project has no users at all. */
+    emptyState?: ReactNode;
+    /** Zero state when the filter matches nothing. */
+    noResultsState?: ReactNode;
+    className?: string;
+    /** Above this row count, rows render through `<VirtualList>`.
+     *  Default 100. `Infinity` disables. */
+    virtualizeThreshold?: number;
+    /** Estimated row height when virtualizing. Default 44. */
+    rowHeight?: number | ((index: number) => number);
+    /** Scroll-container height when virtualized. Default `'60vh'`. */
+    virtualizedHeight?: number | string;
+}
+/**
+ * Headless users table — the emulator UI's columns (Identifier,
+ * Provider, Created, Signed In, User UID, actions) over the
+ * `data-pyric-*` styling contract, with role-based table semantics so
+ * rows can virtualize (a real `<table>` can't wrap a scroll container).
+ *
+ * The hook (`useAuthUsers`) owns data + filter state; this component
+ * just renders. Disabled accounts carry `data-pyric-user-disabled` for
+ * dimmed styling.
+ */
+export declare function AuthUserList({ users, isLoading, error, filter, onSelect, renderIdentifier, renderProviders, renderSelection, renderSelectionHeader, renderActions, renderActionsHeader, formatCreatedAt, formatLastLoginAt, emptyState, noResultsState, className, virtualizeThreshold, rowHeight, virtualizedHeight, }: AuthUserListProps): import("react").JSX.Element;
+//# sourceMappingURL=AuthUserList.d.ts.map

package/dist/auth/components/AuthUserList.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthUserList.d.ts","sourceRoot":"","sources":["../../../src/auth/components/AuthUserList.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAIjD,MAAM,WAAW,iBAAiB;IAChC,uDAAuD;IACvD,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,KAAK,CAAC,EAAE,KAAK,CAAC;IACd;wDACoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;4CACwC;IACxC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,IAAI,CAAC;IAC1C;qCACiC;IACjC,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,SAAS,CAAC;IACvD;;iDAE6C;IAC7C,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,SAAS,CAAC;IACtD;uEACmE;IACnE,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,SAAS,CAAC;IACtD;wEACoE;IACpE,qBAAqB,CAAC,EAAE,SAAS,CAAC;IAClC;uEACmE;IACnE,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,SAAS,CAAC;IACpD;sEACkE;IAClE,mBAAmB,CAAC,EAAE,SAAS,CAAC;IAChC,+EAA+E;IAC/E,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC;IACpD;kFAC8E;IAC9E,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC;IACtD,uDAAuD;IACvD,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,kDAAkD;IAClD,cAAc,CAAC,EAAE,SAAS,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;4CACwC;IACxC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC;IACjD,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACrC;AAuBD;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,EAC3B,KAAK,EACL,SAAS,EACT,KAAK,EACL,MAAM,EACN,QAAQ,EACR,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,mBAAmB,EACnB,eAAmC,EACnC,iBAAqC,EACrC,UAAU,EACV,cAAc,EACd,SAAS,EACT,mBAAyB,EACzB,SAAc,EACd,iBAA0B,GAC3B,EAAE,iBAAiB,+BAiHnB"}

package/dist/auth/components/AuthUserList.js

@@ -0,0 +1,46 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { VirtualList } from '../../primitives/VirtualList.js';
+import { providerLabel } from '../providers.js';
+function defaultIdentifier(user) {
+    return user.email ?? user.phoneNumber ?? (user.isAnonymous ? 'anonymous' : user.uid);
+}
+function defaultProviders(user) {
+    if (user.isAnonymous && user.providerUserInfo.length === 0) {
+        return _jsx("span", { "data-pyric-provider-id": "anonymous", children: providerLabel('anonymous') });
+    }
+    return user.providerUserInfo.map((p) => (_jsx("span", { "data-pyric-provider-id": p.providerId, children: providerLabel(p.providerId) }, p.providerId)));
+}
+function defaultFormatDate(iso) {
+    if (!iso)
+        return '—';
+    const d = new Date(iso);
+    return Number.isNaN(d.getTime()) ? '—' : d.toLocaleDateString();
+}
+/**
+ * Headless users table — the emulator UI's columns (Identifier,
+ * Provider, Created, Signed In, User UID, actions) over the
+ * `data-pyric-*` styling contract, with role-based table semantics so
+ * rows can virtualize (a real `<table>` can't wrap a scroll container).
+ *
+ * The hook (`useAuthUsers`) owns data + filter state; this component
+ * just renders. Disabled accounts carry `data-pyric-user-disabled` for
+ * dimmed styling.
+ */
+export function AuthUserList({ users, isLoading, error, filter, onSelect, renderIdentifier, renderProviders, renderSelection, renderSelectionHeader, renderActions, renderActionsHeader, formatCreatedAt = defaultFormatDate, formatLastLoginAt = defaultFormatDate, emptyState, noResultsState, className, virtualizeThreshold = 100, rowHeight = 44, virtualizedHeight = '60vh', }) {
+    if (error) {
+        return (_jsx("div", { className: className, "data-pyric-ui": "auth-user-list", "data-pyric-error": "", role: "alert", children: error.message }));
+    }
+    if (isLoading && users.length === 0) {
+        return _jsx("div", { className: className, "data-pyric-ui": "auth-user-list", "data-pyric-loading": "" });
+    }
+    if (users.length === 0) {
+        const filtered = Boolean(filter?.trim());
+        return (_jsx("div", { className: className, "data-pyric-ui": "auth-user-list", "data-pyric-empty": "", "data-pyric-no-results": filtered ? '' : undefined, children: filtered
+                ? (noResultsState ?? 'No results')
+                : (emptyState ?? 'No users for this project yet') }));
+    }
+    const virtualized = users.length > virtualizeThreshold;
+    const row = (user) => (_jsxs("div", { role: "row", "data-pyric-user-entry": true, "data-pyric-user-uid": user.uid, "data-pyric-user-disabled": user.disabled ? '' : undefined, children: [renderSelection ? (_jsx("span", { role: "cell", "data-pyric-user-cell": "selection", children: renderSelection(user) })) : null, _jsx("span", { role: "cell", "data-pyric-user-cell": "identifier", children: onSelect ? (_jsx("button", { type: "button", "data-pyric-user-select": true, onClick: () => onSelect(user), children: renderIdentifier ? renderIdentifier(user) : defaultIdentifier(user) })) : ((renderIdentifier ?? defaultIdentifier)(user)) }), _jsx("span", { role: "cell", "data-pyric-user-cell": "providers", children: (renderProviders ?? defaultProviders)(user) }), _jsx("span", { role: "cell", "data-pyric-user-cell": "created", children: formatCreatedAt(user.createdAt) }), _jsx("span", { role: "cell", "data-pyric-user-cell": "signed-in", children: formatLastLoginAt(user.lastLoginAt) }), _jsx("span", { role: "cell", "data-pyric-user-cell": "uid", children: user.uid }), renderActions ? (_jsx("span", { role: "cell", "data-pyric-user-cell": "actions", children: renderActions(user) })) : null] }, user.uid));
+    return (_jsxs("div", { className: className, role: "table", "aria-label": "Authentication users", "data-pyric-ui": "auth-user-list", "data-pyric-virtualized": virtualized ? '' : undefined, "data-pyric-selection": renderSelection ? '' : undefined, "data-pyric-actions": renderActions ? '' : undefined, children: [_jsxs("div", { role: "row", "data-pyric-user-header": true, children: [renderSelection ? (_jsx("span", { role: "columnheader", "data-pyric-user-cell": "selection", "aria-label": "Selection", children: renderSelectionHeader })) : null, _jsx("span", { role: "columnheader", "data-pyric-user-cell": "identifier", children: "Identifier" }), _jsx("span", { role: "columnheader", "data-pyric-user-cell": "providers", children: "Provider" }), _jsx("span", { role: "columnheader", "data-pyric-user-cell": "created", children: "Created" }), _jsx("span", { role: "columnheader", "data-pyric-user-cell": "signed-in", children: "Signed In" }), _jsx("span", { role: "columnheader", "data-pyric-user-cell": "uid", children: "User UID" }), renderActions ? (_jsx("span", { role: "columnheader", "data-pyric-user-cell": "actions", "aria-label": "Actions", children: renderActionsHeader })) : null] }), virtualized ? (_jsx(VirtualList, { items: users, estimateSize: rowHeight, height: virtualizedHeight, getItemKey: (user) => user.uid, renderItem: row })) : (_jsx("div", { role: "rowgroup", "data-pyric-user-rows": true, children: users.map(row) }))] }));
+}
+//# sourceMappingURL=AuthUserList.js.map

package/dist/auth/components/AuthUserList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthUserList.js","sourceRoot":"","sources":["../../../src/auth/components/AuthUserList.tsx"],"names":[],"mappings":";AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAmDhD,SAAS,iBAAiB,CAAC,IAAoB;IAC7C,OAAO,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAoB;IAC5C,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,yCAA6B,WAAW,YAAE,aAAa,CAAC,WAAW,CAAC,GAAQ,CAAC;IACtF,CAAC;IACD,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CACtC,yCAAiD,CAAC,CAAC,UAAU,YAC1D,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,IADnB,CAAC,CAAC,UAAU,CAEhB,CACR,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAkB;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IACrB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAAC,EAC3B,KAAK,EACL,SAAS,EACT,KAAK,EACL,MAAM,EACN,QAAQ,EACR,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,qBAAqB,EACrB,aAAa,EACb,mBAAmB,EACnB,eAAe,GAAG,iBAAiB,EACnC,iBAAiB,GAAG,iBAAiB,EACrC,UAAU,EACV,cAAc,EACd,SAAS,EACT,mBAAmB,GAAG,GAAG,EACzB,SAAS,GAAG,EAAE,EACd,iBAAiB,GAAG,MAAM,GACR;IAClB,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CACL,cAAK,SAAS,EAAE,SAAS,mBAAgB,gBAAgB,sBAAkB,EAAE,EAAC,IAAI,EAAC,OAAO,YACvF,KAAK,CAAC,OAAO,GACV,CACP,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,OAAO,cAAK,SAAS,EAAE,SAAS,mBAAgB,gBAAgB,wBAAoB,EAAE,GAAG,CAAC;IAC5F,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,OAAO,CACL,cACE,SAAS,EAAE,SAAS,mBACN,gBAAgB,sBACb,EAAE,2BACI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,YAE/C,QAAQ;gBACP,CAAC,CAAC,CAAC,cAAc,IAAI,YAAY,CAAC;gBAClC,CAAC,CAAC,CAAC,UAAU,IAAI,+BAA+B,CAAC,GAC/C,CACP,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,GAAG,mBAAmB,CAAC;IAEvD,MAAM,GAAG,GAAG,CAAC,IAAoB,EAAE,EAAE,CAAC,CACpC,eAEE,IAAI,EAAC,KAAK,wDAEW,IAAI,CAAC,GAAG,8BACH,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,aAEvD,eAAe,CAAC,CAAC,CAAC,CACjB,eAAM,IAAI,EAAC,MAAM,0BAAsB,WAAW,YAC/C,eAAe,CAAC,IAAI,CAAC,GACjB,CACR,CAAC,CAAC,CAAC,IAAI,EACR,eAAM,IAAI,EAAC,MAAM,0BAAsB,YAAY,YAChD,QAAQ,CAAC,CAAC,CAAC,CACV,iBAAQ,IAAI,EAAC,QAAQ,kCAAwB,OAAO,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,YACvE,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAC7D,CACV,CAAC,CAAC,CAAC,CACF,CAAC,gBAAgB,IAAI,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAC9C,GACI,EACP,eAAM,IAAI,EAAC,MAAM,0BAAsB,WAAW,YAC/C,CAAC,eAAe,IAAI,gBAAgB,CAAC,CAAC,IAAI,CAAC,GACvC,EACP,eAAM,IAAI,EAAC,MAAM,0BAAsB,SAAS,YAC7C,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,GAC3B,EACP,eAAM,IAAI,EAAC,MAAM,0BAAsB,WAAW,YAC/C,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,GAC/B,EACP,eAAM,IAAI,EAAC,MAAM,0BAAsB,KAAK,YACzC,IAAI,CAAC,GAAG,GACJ,EACN,aAAa,CAAC,CAAC,CAAC,CACf,eAAM,IAAI,EAAC,MAAM,0BAAsB,SAAS,YAC7C,aAAa,CAAC,IAAI,CAAC,GACf,CACR,CAAC,CAAC,CAAC,IAAI,KApCH,IAAI,CAAC,GAAG,CAqCT,CACP,CAAC;IAEF,OAAO,CACL,eACE,SAAS,EAAE,SAAS,EACpB,IAAI,EAAC,OAAO,gBACD,sBAAsB,mBACnB,gBAAgB,4BACN,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,0BAC9B,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,wBAClC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,aAElD,eAAK,IAAI,EAAC,KAAK,6CACZ,eAAe,CAAC,CAAC,CAAC,CACjB,eAAM,IAAI,EAAC,cAAc,0BAAsB,WAAW,gBAAY,WAAW,YAC9E,qBAAqB,GACjB,CACR,CAAC,CAAC,CAAC,IAAI,EACR,eAAM,IAAI,EAAC,cAAc,0BAAsB,YAAY,2BAAkB,EAC7E,eAAM,IAAI,EAAC,cAAc,0BAAsB,WAAW,yBAAgB,EAC1E,eAAM,IAAI,EAAC,cAAc,0BAAsB,SAAS,wBAAe,EACvE,eAAM,IAAI,EAAC,cAAc,0BAAsB,WAAW,0BAAiB,EAC3E,eAAM,IAAI,EAAC,cAAc,0BAAsB,KAAK,yBAAgB,EACnE,aAAa,CAAC,CAAC,CAAC,CACf,eAAM,IAAI,EAAC,cAAc,0BAAsB,SAAS,gBAAY,SAAS,YAC1E,mBAAmB,GACf,CACR,CAAC,CAAC,CAAC,IAAI,IACJ,EACL,WAAW,CAAC,CAAC,CAAC,CACb,KAAC,WAAW,IACV,KAAK,EAAE,KAAK,EACZ,YAAY,EAAE,SAAS,EACvB,MAAM,EAAE,iBAAiB,EACzB,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAC9B,UAAU,EAAE,GAAG,GACf,CACH,CAAC,CAAC,CAAC,CACF,cAAK,IAAI,EAAC,UAAU,0CACjB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GACX,CACP,IACG,CACP,CAAC;AACJ,CAAC"}

package/dist/auth/components/ClaimsField.d.ts

@@ -0,0 +1,22 @@
+import type { ReactNode } from 'react';
+export interface ClaimsFieldProps {
+    /** Raw claims JSON text. */
+    value: string;
+    onChange: (text: string) => void;
+    /** Validation message (from `validateSerializedClaims` /
+     *  `useAuthUserEditor().errors.claims`). Renders a `role="alert"`
+     *  paragraph and marks the textarea invalid. */
+    error?: string;
+    /** Helper text under the field (rules-usage hint by default). */
+    hint?: ReactNode;
+    placeholder?: string;
+    className?: string;
+}
+/**
+ * Headless custom-claims textarea — the emulator UI's
+ * `customAttributes` control. Standalone so custom forms can reuse the
+ * exact field (the playground's sign-in helper and the user form both
+ * render one); validation itself lives in `validateSerializedClaims`.
+ */
+export declare function ClaimsField({ value, onChange, error, hint, placeholder, className, }: ClaimsFieldProps): import("react").JSX.Element;
+//# sourceMappingURL=ClaimsField.d.ts.map

package/dist/auth/components/ClaimsField.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClaimsField.d.ts","sourceRoot":"","sources":["../../../src/auth/components/ClaimsField.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAEvC,MAAM,WAAW,gBAAgB;IAC/B,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACjC;;oDAEgD;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,EAC1B,KAAK,EACL,QAAQ,EACR,KAAK,EACL,IAAI,EACJ,WAAgC,EAChC,SAAS,GACV,EAAE,gBAAgB,+BAoBlB"}

package/dist/auth/components/ClaimsField.js

@@ -0,0 +1,11 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Headless custom-claims textarea — the emulator UI's
+ * `customAttributes` control. Standalone so custom forms can reuse the
+ * exact field (the playground's sign-in helper and the user form both
+ * render one); validation itself lives in `validateSerializedClaims`.
+ */
+export function ClaimsField({ value, onChange, error, hint, placeholder = '{"role":"admin"}', className, }) {
+    return (_jsxs("div", { className: className, "data-pyric-ui": "claims-field", children: [_jsx("textarea", { "data-pyric-field": "claims", "data-pyric-claims-invalid": error != null ? '' : undefined, "aria-label": "Custom claims (optional)", "aria-invalid": error != null || undefined, placeholder: placeholder, value: value, onChange: (e) => onChange(e.target.value) }), error != null && (_jsx("p", { role: "alert", "data-pyric-claims-error": true, children: error })), hint != null && _jsx("p", { "data-pyric-claims-hint": true, children: hint })] }));
+}
+//# sourceMappingURL=ClaimsField.js.map

package/dist/auth/components/ClaimsField.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ClaimsField.js","sourceRoot":"","sources":["../../../src/auth/components/ClaimsField.tsx"],"names":[],"mappings":";AAgBA;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,EAC1B,KAAK,EACL,QAAQ,EACR,KAAK,EACL,IAAI,EACJ,WAAW,GAAG,kBAAkB,EAChC,SAAS,GACQ;IACjB,OAAO,CACL,eAAK,SAAS,EAAE,SAAS,mBAAgB,cAAc,aACrD,uCACmB,QAAQ,+BACE,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,gBAC9C,0BAA0B,kBACvB,KAAK,IAAI,IAAI,IAAI,SAAS,EACxC,WAAW,EAAE,WAAW,EACxB,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GACzC,EACD,KAAK,IAAI,IAAI,IAAI,CAChB,YAAG,IAAI,EAAC,OAAO,6CACZ,KAAK,GACJ,CACL,EACA,IAAI,IAAI,IAAI,IAAI,sDAA2B,IAAI,GAAK,IACjD,CACP,CAAC;AACJ,CAAC"}

package/dist/auth/components/confirmActions.d.ts

@@ -0,0 +1,40 @@
+import type { ReactNode } from 'react';
+import type { AuthUserRecord } from 'pyric/auth';
+/** Shared trigger contract for the confirm-gated destructive actions. */
+interface TriggerProps {
+    onClick: () => void;
+}
+export interface DeleteUserWithConfirmProps {
+    user: AuthUserRecord;
+    /** Runs after the user confirms. Wire to `useAuthUsers().deleteUser`. */
+    onDelete: (uid: string) => void;
+    title?: string;
+    body?: ReactNode;
+    confirmLabel?: string;
+    /** Trigger override; default is a plain destructive `<button>`. */
+    renderTrigger?: (props: TriggerProps) => ReactNode;
+    className?: string;
+}
+/**
+ * Confirm-gated single-user delete (the emulator UI's row-menu
+ * "Delete user"). Requires a `<ConfirmProvider>` ancestor.
+ */
+export declare function DeleteUserWithConfirm({ user, onDelete, title, body, confirmLabel, renderTrigger, className, }: DeleteUserWithConfirmProps): import("react").JSX.Element;
+export interface ClearUsersWithConfirmProps {
+    /** Runs after the user confirms. Wire to `useAuthUsers().clearUsers`. */
+    onClear: () => void;
+    /** Current user count, interpolated into the default body. */
+    count?: number;
+    title?: string;
+    body?: ReactNode;
+    confirmLabel?: string;
+    renderTrigger?: (props: TriggerProps) => ReactNode;
+    className?: string;
+}
+/**
+ * Confirm-gated clear-all (the emulator UI's "Clear all data").
+ * Requires a `<ConfirmProvider>` ancestor.
+ */
+export declare function ClearUsersWithConfirm({ onClear, count, title, body, confirmLabel, renderTrigger, className, }: ClearUsersWithConfirmProps): import("react").JSX.Element;
+export {};
+//# sourceMappingURL=confirmActions.d.ts.map

package/dist/auth/components/confirmActions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmActions.d.ts","sourceRoot":"","sources":["../../../src/auth/components/confirmActions.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjD,yEAAyE;AACzE,UAAU,YAAY;IACpB,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,cAAc,CAAC;IACrB,yEAAyE;IACzE,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,SAAS,CAAC;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAMD;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,IAAI,EACJ,QAAQ,EACR,KAAqB,EACrB,IAAI,EACJ,YAAuB,EACvB,aAAa,EACb,SAAS,GACV,EAAE,0BAA0B,+BAuB5B;AAED,MAAM,WAAW,0BAA0B;IACzC,yEAAyE;IACzE,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,SAAS,CAAC;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,EACpC,OAAO,EACP,KAAK,EACL,KAAyB,EACzB,IAAI,EACJ,YAAsB,EACtB,aAAa,EACb,SAAS,GACV,EAAE,0BAA0B,+BA2B5B"}

package/dist/auth/components/confirmActions.js

@@ -0,0 +1,49 @@
+import { Fragment as _Fragment, jsx as _jsx } from "react/jsx-runtime";
+import { useConfirm } from '../../primitives/useConfirm.js';
+function identifierOf(user) {
+    return user.email ?? user.phoneNumber ?? user.displayName ?? user.uid;
+}
+/**
+ * Confirm-gated single-user delete (the emulator UI's row-menu
+ * "Delete user"). Requires a `<ConfirmProvider>` ancestor.
+ */
+export function DeleteUserWithConfirm({ user, onDelete, title = 'Delete user', body, confirmLabel = 'Delete', renderTrigger, className, }) {
+    const confirm = useConfirm();
+    const handleClick = async () => {
+        const ok = await confirm({
+            title,
+            body: body ?? `This will permanently delete ${identifierOf(user)}.`,
+            destructive: true,
+            confirmLabel,
+        });
+        if (ok)
+            onDelete(user.uid);
+    };
+    if (renderTrigger)
+        return _jsx(_Fragment, { children: renderTrigger({ onClick: handleClick }) });
+    return (_jsx("button", { type: "button", className: className, "data-pyric-ui": "delete-user", "data-pyric-destructive": true, onClick: handleClick, children: "Delete user" }));
+}
+/**
+ * Confirm-gated clear-all (the emulator UI's "Clear all data").
+ * Requires a `<ConfirmProvider>` ancestor.
+ */
+export function ClearUsersWithConfirm({ onClear, count, title = 'Clear all users', body, confirmLabel = 'Clear', renderTrigger, className, }) {
+    const confirm = useConfirm();
+    const handleClick = async () => {
+        const ok = await confirm({
+            title,
+            body: body ??
+                (count != null
+                    ? `This will permanently delete all ${count} users.`
+                    : 'This will permanently delete every user.'),
+            destructive: true,
+            confirmLabel,
+        });
+        if (ok)
+            onClear();
+    };
+    if (renderTrigger)
+        return _jsx(_Fragment, { children: renderTrigger({ onClick: handleClick }) });
+    return (_jsx("button", { type: "button", className: className, "data-pyric-ui": "clear-users", "data-pyric-destructive": true, onClick: handleClick, children: "Clear all users" }));
+}
+//# sourceMappingURL=confirmActions.js.map

package/dist/auth/components/confirmActions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmActions.js","sourceRoot":"","sources":["../../../src/auth/components/confirmActions.tsx"],"names":[],"mappings":";AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAmB5D,SAAS,YAAY,CAAC,IAAoB;IACxC,OAAO,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,EACpC,IAAI,EACJ,QAAQ,EACR,KAAK,GAAG,aAAa,EACrB,IAAI,EACJ,YAAY,GAAG,QAAQ,EACvB,aAAa,EACb,SAAS,GACkB;IAC3B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE;QAC7B,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC;YACvB,KAAK;YACL,IAAI,EAAE,IAAI,IAAI,gCAAgC,YAAY,CAAC,IAAI,CAAC,GAAG;YACnE,WAAW,EAAE,IAAI;YACjB,YAAY;SACb,CAAC,CAAC;QACH,IAAI,EAAE;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC,CAAC;IACF,IAAI,aAAa;QAAE,OAAO,4BAAG,aAAa,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,GAAI,CAAC;IACzE,OAAO,CACL,iBACE,IAAI,EAAC,QAAQ,EACb,SAAS,EAAE,SAAS,mBACN,aAAa,kCAE3B,OAAO,EAAE,WAAW,4BAGb,CACV,CAAC;AACJ,CAAC;AAcD;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,EACpC,OAAO,EACP,KAAK,EACL,KAAK,GAAG,iBAAiB,EACzB,IAAI,EACJ,YAAY,GAAG,OAAO,EACtB,aAAa,EACb,SAAS,GACkB;IAC3B,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE;QAC7B,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC;YACvB,KAAK;YACL,IAAI,EACF,IAAI;gBACJ,CAAC,KAAK,IAAI,IAAI;oBACZ,CAAC,CAAC,oCAAoC,KAAK,SAAS;oBACpD,CAAC,CAAC,0CAA0C,CAAC;YACjD,WAAW,EAAE,IAAI;YACjB,YAAY;SACb,CAAC,CAAC;QACH,IAAI,EAAE;YAAE,OAAO,EAAE,CAAC;IACpB,CAAC,CAAC;IACF,IAAI,aAAa;QAAE,OAAO,4BAAG,aAAa,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,GAAI,CAAC;IACzE,OAAO,CACL,iBACE,IAAI,EAAC,QAAQ,EACb,SAAS,EAAE,SAAS,mBACN,aAAa,kCAE3B,OAAO,EAAE,WAAW,gCAGb,CACV,CAAC;AACJ,CAAC"}

package/dist/auth/controller.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Sign-in helper controller — the host side of `pyric/auth`'s
+ * `AuthFlowResolver` seam.
+ *
+ * `pyric/auth` stays UI-free: `signInWithPopup` / `signInWithRedirect`
+ * delegate to a resolver. This controller IS that resolver's host
+ * implementation — it parks the SDK's promise, drives a host UI (an
+ * account picker + add-account form, e.g. `<AuthSignInHelper>`), and
+ * settles the promise when the user picks an identity, adds one, or
+ * cancels. React components stay thin presentational shells over this;
+ * all the settle/seed logic lives here so it's testable without a DOM.
+ *
+ * Faithful to the Firebase emulator: "add account" mints a sandbox
+ * identity with optional custom claims (the emulator's
+ * `customAttributes`), so a rule gated on `request.auth.token.<claim>`
+ * works against live sandbox traffic. Credential + token synthesis is
+ * backend-owned (`sandbox.createSignInCredential`) — this controller
+ * only drives the UI flow and settles the parked promise.
+ */
+import { sandbox as authSandbox, type Auth, type AuthFlowRequest, type AuthFlowResolver } from 'pyric/auth';
+/** A field set for "add new account" — mirrors the emulator's add-user form. */
+export interface NewIdentitySpec {
+    email: string;
+    displayName?: string;
+    /** Parsed custom claims (the emulator's `customAttributes`). */
+    customClaims?: Record<string, unknown>;
+}
+/** One pickable identity, as reported by `sandbox.listIdentities`. */
+export type SandboxIdentity = ReturnType<typeof authSandbox.listIdentities>[number];
+/** Snapshot the helper UI renders from. */
+export interface HelperState {
+    /** The in-flight request, or null when the helper is closed. */
+    request: AuthFlowRequest | null;
+    /** Existing identities to pick from (seeded + previously created). */
+    identities: SandboxIdentity[];
+}
+export declare class AuthFlowController {
+    private readonly auth;
+    private pending;
+    private readonly listeners;
+    /** Memoized {@link snapshot} result, invalidated by {@link emit}.
+     *  `useSyncExternalStore` compares consecutive `getSnapshot()` results
+     *  with `Object.is` — an uncached object here re-renders forever. */
+    private cached;
+    constructor(auth: Auth);
+    /** Wire this controller's resolver into the auth handle. Paired with
+     *  {@link uninstall} for use in a React effect (install in the body,
+     *  uninstall in the cleanup) — StrictMode-safe. */
+    install(): void;
+    uninstall(): void;
+    /** The resolver to hand to `sandbox.setAuthFlowResolver`. Popup and
+     *  redirect share one implementation (the sandbox has no navigation). */
+    resolver(): AuthFlowResolver;
+    subscribe(fn: () => void): () => void;
+    snapshot(): HelperState;
+    private emit;
+    /** Pick an existing identity (by uid). The backend mints the credential
+     *  (and records the provider on the identity). */
+    pick(uid: string): void;
+    /** Add + sign in as a new identity. The backend creates the identity
+     *  (so claims resolve in rules and it shows up in the picker next time)
+     *  and mints the credential in one step.
+     *
+     *  Credential creation happens BEFORE {@link take}'s emit: subscribers
+     *  recompute the snapshot synchronously on emit, so creating after would
+     *  publish a stale identity list (a `useSyncExternalStore` consumer
+     *  would miss the new account until the next unrelated emit). */
+    add(spec: NewIdentitySpec): void;
+    /** Dismiss — rejects with the faithful `auth/popup-closed-by-user`. */
+    cancel(): void;
+    private take;
+}
+//# sourceMappingURL=controller.d.ts.map

package/dist/auth/controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../src/auth/controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EACL,OAAO,IAAI,WAAW,EACtB,KAAK,IAAI,EACT,KAAK,eAAe,EACpB,KAAK,gBAAgB,EAEtB,MAAM,YAAY,CAAC;AAEpB,gFAAgF;AAChF,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC;AAED,sEAAsE;AACtE,MAAM,MAAM,eAAe,GAAG,UAAU,CAAC,OAAO,WAAW,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpF,2CAA2C;AAC3C,MAAM,WAAW,WAAW;IAC1B,gEAAgE;IAChE,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;IAChC,sEAAsE;IACtE,UAAU,EAAE,eAAe,EAAE,CAAC;CAC/B;AAQD,qBAAa,kBAAkB;IAQjB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAPjC,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAyB;IACnD;;yEAEqE;IACrE,OAAO,CAAC,MAAM,CAA4B;gBAEb,IAAI,EAAE,IAAI;IAEvC;;uDAEmD;IACnD,OAAO,IAAI,IAAI;IAIf,SAAS,IAAI,IAAI;IAIjB;6EACyE;IACzE,QAAQ,IAAI,gBAAgB;IAY5B,SAAS,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI;IAKrC,QAAQ,IAAI,WAAW;IAQvB,OAAO,CAAC,IAAI;IAMZ;sDACkD;IAClD,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAgBvB;;;;;;;qEAOiE;IACjE,GAAG,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI;IAoBhC,uEAAuE;IACvE,MAAM,IAAI,IAAI;IAMd,OAAO,CAAC,IAAI;CAMb"}