@pyric/ui 0.1.0-alpha.7

package/dist/auth/hooks/useAuthProviderConfig.js

@@ -0,0 +1,98 @@
+import { useCallback, useEffect, useState } from 'react';
+import { useAuthApi } from '../authApi.js';
+/**
+ * Live sign-in provider config view over a sandbox `Auth` handle:
+ * `sandbox.getAuthProviderConfig` + `sandbox.subscribeAuthProviderConfig` +
+ * `sandbox.setAuthProviderConfig`. Mirrors `useAuthUsers`'s shape exactly
+ * (coarse "something changed, re-list" subscription; sync in-process,
+ * tolerates a promise over the SharedWorker client).
+ *
+ * Sandbox-only: throws `failed-precondition` on a prod-backed handle (the
+ * hook surfaces that via `error`, same as `useAuthUsers`).
+ */
+export function useAuthProviderConfig(auth) {
+    const { getAuthProviderConfig, setAuthProviderConfig: apiSetAuthProviderConfig, subscribeAuthProviderConfig, } = useAuthApi();
+    const [config, setConfig] = useState([]);
+    const [isLoading, setIsLoading] = useState(true);
+    const [error, setError] = useState(undefined);
+    useEffect(() => {
+        let cancelled = false;
+        setIsLoading(true);
+        setError(undefined);
+        const apply = (c) => {
+            if (cancelled)
+                return;
+            setConfig(c);
+            setIsLoading(false);
+        };
+        const applyErr = (e) => {
+            if (cancelled)
+                return;
+            setConfig([]);
+            setError(e instanceof Error ? e : new Error(String(e)));
+            setIsLoading(false);
+        };
+        // `getAuthProviderConfig` is SYNC in-process, ASYNC (RPC) over the worker
+        // — same thenable-tolerant branch `useAuthUsers` uses for `listUsers`.
+        const relist = () => {
+            try {
+                const r = getAuthProviderConfig(auth);
+                if (r && typeof r.then === 'function') {
+                    r.then(apply).catch(applyErr);
+                }
+                else {
+                    apply(r);
+                }
+            }
+            catch (e) {
+                applyErr(e);
+            }
+        };
+        let unsub;
+        try {
+            relist();
+            unsub = subscribeAuthProviderConfig(auth, relist);
+        }
+        catch (e) {
+            applyErr(e);
+        }
+        return () => {
+            cancelled = true;
+            unsub?.();
+        };
+    }, [auth, getAuthProviderConfig, subscribeAuthProviderConfig]);
+    const isEnabled = useCallback((providerId) => config.find((c) => c.providerId === providerId)?.enabled ?? false, [config]);
+    const toError = (e) => (e instanceof Error ? e : new Error(String(e)));
+    const setEnabled = useCallback((providerId, enabled) => {
+        // Over the worker this is an RPC promise — a fire-and-forget caller
+        // would otherwise leave a rejection unhandled and the toggle silently
+        // dead. Route async failures into the hook's error state; sync throws
+        // still propagate (in-process policy, matching useAuthUsers).
+        const r = apiSetAuthProviderConfig(auth, providerId, enabled);
+        if (r && typeof r.then === 'function') {
+            r.catch((e) => setError(toError(e)));
+        }
+    }, [auth, apiSetAuthProviderConfig]);
+    const refresh = useCallback(() => {
+        try {
+            const r = getAuthProviderConfig(auth);
+            if (r && typeof r.then === 'function') {
+                void r
+                    .then((c) => {
+                    setConfig(c);
+                    setError(undefined);
+                })
+                    .catch((e) => setError(toError(e)));
+            }
+            else {
+                setConfig(r);
+                setError(undefined);
+            }
+        }
+        catch (e) {
+            setError(toError(e));
+        }
+    }, [auth, getAuthProviderConfig]);
+    return { config, isLoading, error, isEnabled, setEnabled, refresh };
+}
+//# sourceMappingURL=useAuthProviderConfig.js.map

package/dist/auth/hooks/useAuthProviderConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAuthProviderConfig.js","sourceRoot":"","sources":["../../../src/auth/hooks/useAuthProviderConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAEzD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AA4B3C;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAU;IAC9C,MAAM,EACJ,qBAAqB,EACrB,qBAAqB,EAAE,wBAAwB,EAC/C,2BAA2B,GAC5B,GAAG,UAAU,EAAE,CAAC;IAEjB,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAA4B,EAAE,CAAC,CAAC;IACpE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAoB,SAAS,CAAC,CAAC;IAEjE,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpB,MAAM,KAAK,GAAG,CAAC,CAA4B,EAAE,EAAE;YAC7C,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,CAAC,CAAC,CAAC,CAAC;YACb,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAE,EAAE;YAC9B,IAAI,SAAS;gBAAE,OAAO;YACtB,SAAS,CAAC,EAAE,CAAC,CAAC;YACd,QAAQ,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,0EAA0E;QAC1E,uEAAuE;QACvE,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAEE,CAAC;gBACvC,IAAI,CAAC,IAAI,OAAQ,CAAwC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC7E,CAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACxE,CAAC;qBAAM,CAAC;oBACN,KAAK,CAAC,CAA8B,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,QAAQ,CAAC,CAAC,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QACF,IAAI,KAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC;YACT,KAAK,GAAG,2BAA2B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;QACD,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;YACjB,KAAK,EAAE,EAAE,CAAC;QACZ,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,EAAE,2BAA2B,CAAC,CAAC,CAAC;IAE/D,MAAM,SAAS,GAAG,WAAW,CAC3B,CAAC,UAAkB,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,EAAE,OAAO,IAAI,KAAK,EACzF,CAAC,MAAM,CAAC,CACT,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhF,MAAM,UAAU,GAAG,WAAW,CAC5B,CAAC,UAAkB,EAAE,OAAgB,EAAE,EAAE;QACvC,oEAAoE;QACpE,sEAAsE;QACtE,sEAAsE;QACtE,8DAA8D;QAC9D,MAAM,CAAC,GAAG,wBAAwB,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,CAAyB,CAAC;QACtF,IAAI,CAAC,IAAI,OAAQ,CAAmB,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACxD,CAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,EACD,CAAC,IAAI,EAAE,wBAAwB,CAAC,CACjC,CAAC;IAEF,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE;QAC/B,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,qBAAqB,CAAC,IAAI,CAEE,CAAC;YACvC,IAAI,CAAC,IAAI,OAAQ,CAAwC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC9E,KAAM,CAAwC;qBAC3C,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;oBACV,SAAS,CAAC,CAAC,CAAC,CAAC;oBACb,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACtB,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,CAA8B,CAAC,CAAC;gBAC1C,QAAQ,CAAC,SAAS,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,EAAE,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAElC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACtE,CAAC"}

package/dist/auth/hooks/useAuthUserEditor.d.ts

@@ -0,0 +1,30 @@
+import type { AuthUserRecord, CreateUserRequest, UpdateUserRequest } from 'pyric/auth';
+import { type AuthUserEditorAction, type AuthUserEditorErrors, type AuthUserEditorFields } from '../reducers/userEditor.js';
+export interface UseAuthUserEditorOptions {
+    /** Existing record to edit. Omit for create mode. */
+    initial?: AuthUserRecord;
+}
+export interface UseAuthUserEditorResult {
+    fields: AuthUserEditorFields;
+    /** Per-field validation messages (emulator-UI wording). Empty when valid. */
+    errors: AuthUserEditorErrors;
+    isDirty: boolean;
+    isValid: boolean;
+    setField: <K extends keyof AuthUserEditorFields>(field: K, value: AuthUserEditorFields[K]) => void;
+    /** Back to the initial snapshot. */
+    reset: () => void;
+    /** Full payload for `createUser` (every non-empty field). */
+    toCreateRequest: () => CreateUserRequest;
+    /** Delta payload for `updateUser` (only changed fields). */
+    toUpdateRequest: () => UpdateUserRequest;
+    /** Raw reducer access for advanced consumers. */
+    dispatch: (action: AuthUserEditorAction) => void;
+}
+/**
+ * Headless add/edit-user state machine (reducer-based, like
+ * `useDocumentEditor`): field edits, claims-JSON validation with
+ * emulator-grade messages, dirtiness vs the initial record, and payload
+ * builders for `useAuthUsers`' `createUser` / `updateUser`.
+ */
+export declare function useAuthUserEditor(options?: UseAuthUserEditorOptions): UseAuthUserEditorResult;
+//# sourceMappingURL=useAuthUserEditor.d.ts.map

package/dist/auth/hooks/useAuthUserEditor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAuthUserEditor.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useAuthUserEditor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACvF,OAAO,EAOL,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EAC1B,MAAM,2BAA2B,CAAC;AAEnC,MAAM,WAAW,wBAAwB;IACvC,qDAAqD;IACrD,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,6EAA6E;IAC7E,MAAM,EAAE,oBAAoB,CAAC;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,CAAC,CAAC,SAAS,MAAM,oBAAoB,EAC7C,KAAK,EAAE,CAAC,EACR,KAAK,EAAE,oBAAoB,CAAC,CAAC,CAAC,KAC3B,IAAI,CAAC;IACV,oCAAoC;IACpC,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,6DAA6D;IAC7D,eAAe,EAAE,MAAM,iBAAiB,CAAC;IACzC,4DAA4D;IAC5D,eAAe,EAAE,MAAM,iBAAiB,CAAC;IACzC,iDAAiD;IACjD,QAAQ,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAC;CAClD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,GAAE,wBAA6B,GACrC,uBAAuB,CA4BzB"}

package/dist/auth/hooks/useAuthUserEditor.js

@@ -0,0 +1,27 @@
+import { useCallback, useMemo, useReducer } from 'react';
+import { authUserEditorReducer, initAuthUserEditorState, isDirty as computeDirty, toCreateRequest, toUpdateRequest, validateAuthUserFields, } from '../reducers/userEditor.js';
+/**
+ * Headless add/edit-user state machine (reducer-based, like
+ * `useDocumentEditor`): field edits, claims-JSON validation with
+ * emulator-grade messages, dirtiness vs the initial record, and payload
+ * builders for `useAuthUsers`' `createUser` / `updateUser`.
+ */
+export function useAuthUserEditor(options = {}) {
+    const [state, dispatch] = useReducer(authUserEditorReducer, options.initial, initAuthUserEditorState);
+    const errors = useMemo(() => validateAuthUserFields(state.fields), [state.fields]);
+    const dirty = useMemo(() => computeDirty(state), [state]);
+    const setField = useCallback((field, value) => dispatch({ type: 'setField', field, value }), []);
+    const reset = useCallback(() => dispatch({ type: 'reset' }), []);
+    return {
+        fields: state.fields,
+        errors,
+        isDirty: dirty,
+        isValid: Object.keys(errors).length === 0,
+        setField,
+        reset,
+        toCreateRequest: () => toCreateRequest(state),
+        toUpdateRequest: () => toUpdateRequest(state),
+        dispatch,
+    };
+}
+//# sourceMappingURL=useAuthUserEditor.js.map

package/dist/auth/hooks/useAuthUserEditor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAuthUserEditor.js","sourceRoot":"","sources":["../../../src/auth/hooks/useAuthUserEditor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAEzD,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,OAAO,IAAI,YAAY,EACvB,eAAe,EACf,eAAe,EACf,sBAAsB,GAIvB,MAAM,2BAA2B,CAAC;AA2BnC;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAoC,EAAE;IAEtC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,UAAU,CAClC,qBAAqB,EACrB,OAAO,CAAC,OAAO,EACf,uBAAuB,CACxB,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAE1D,MAAM,QAAQ,GAAG,WAAW,CAC1B,CAAuC,KAAQ,EAAE,KAA8B,EAAE,EAAE,CACjF,QAAQ,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAC9C,EAAE,CACH,CAAC;IACF,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAEjE,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM;QACN,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;QACzC,QAAQ;QACR,KAAK;QACL,eAAe,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC;QAC7C,eAAe,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC;QAC7C,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/dist/auth/hooks/useAuthUsers.d.ts

@@ -0,0 +1,38 @@
+import type { Auth, AuthUserRecord, CreateUserRequest, UpdateUserRequest } from 'pyric/auth';
+export interface UseAuthUsersResult {
+    /** Users matching {@link filter} (everyone when the filter is empty). */
+    users: AuthUserRecord[];
+    /** Unfiltered count: lets a list distinguish "no users at all" from
+     *  "no results for this filter". */
+    totalCount: number;
+    isLoading: boolean;
+    error: Error | undefined;
+    /** Case-insensitive substring match over uid, email, display name and
+     *  phone number (the emulator UI's search semantics). */
+    filter: string;
+    setFilter: (filter: string) => void;
+    createUser: (request: CreateUserRequest) => AuthUserRecord;
+    updateUser: (uid: string, update: UpdateUserRequest) => AuthUserRecord;
+    deleteUser: (uid: string) => void;
+    clearUsers: () => void;
+    /** Re-list manually. Rarely needed, every mutation (including ones made
+     *  by the agent or the running app) already triggers `subscribeUsers`. */
+    refresh: () => void;
+}
+/**
+ * Live user-admin view over a sandbox `Auth` handle:
+ * `sandbox.listUsers` + `sandbox.subscribeUsers` + CRUD actions.
+ *
+ * The subscription is coarse ("something changed"): any user-DB
+ * mutation (from these actions, the running app's sign-ups, the
+ * agent's seeding) triggers a re-list, so the view stays live without
+ * per-row bookkeeping. Filtering is client-side (the sandbox is
+ * in-process; there is no server to push the query to).
+ *
+ * Mutation errors (e.g. `auth/uid-already-exists`) throw to the caller:
+ * handle them at the call site like the firestore hooks' `createDocument`.
+ * Sandbox-only: throws `failed-precondition` on a prod-backed handle (the
+ * hook surfaces that via `error`).
+ */
+export declare function useAuthUsers(auth: Auth): UseAuthUsersResult;
+//# sourceMappingURL=useAuthUsers.d.ts.map

package/dist/auth/hooks/useAuthUsers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAuthUsers.d.ts","sourceRoot":"","sources":["../../../src/auth/hooks/useAuthUsers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,IAAI,EACJ,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAGpB,MAAM,WAAW,kBAAkB;IACjC,yEAAyE;IACzE,KAAK,EAAE,cAAc,EAAE,CAAC;IACxB;wCACoC;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,KAAK,GAAG,SAAS,CAAC;IACzB;6DACyD;IACzD,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC,UAAU,EAAE,CAAC,OAAO,EAAE,iBAAiB,KAAK,cAAc,CAAC;IAC3D,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,KAAK,cAAc,CAAC;IACvE,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,UAAU,EAAE,MAAM,IAAI,CAAC;IACvB;8EAC0E;IAC1E,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAQD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,kBAAkB,CAsG3D"}

package/dist/auth/hooks/useAuthUsers.js

@@ -0,0 +1,111 @@
+import { useCallback, useEffect, useMemo, useState } from 'react';
+import { useAuthApi } from '../authApi.js';
+function matches(user, needle) {
+    return [user.uid, user.email, user.displayName, user.phoneNumber].some((v) => v != null && v.toLowerCase().includes(needle));
+}
+/**
+ * Live user-admin view over a sandbox `Auth` handle:
+ * `sandbox.listUsers` + `sandbox.subscribeUsers` + CRUD actions.
+ *
+ * The subscription is coarse ("something changed"): any user-DB
+ * mutation (from these actions, the running app's sign-ups, the
+ * agent's seeding) triggers a re-list, so the view stays live without
+ * per-row bookkeeping. Filtering is client-side (the sandbox is
+ * in-process; there is no server to push the query to).
+ *
+ * Mutation errors (e.g. `auth/uid-already-exists`) throw to the caller:
+ * handle them at the call site like the firestore hooks' `createDocument`.
+ * Sandbox-only: throws `failed-precondition` on a prod-backed handle (the
+ * hook surfaces that via `error`).
+ */
+export function useAuthUsers(auth) {
+    // The sandbox auth ops, injected: in-process `pyric/auth` by default, or the
+    // SharedWorker client bundle when a consumer (Pyric Studio served mode) wraps
+    // the tree in an `AuthApiProvider`.
+    const { listUsers, subscribeUsers, createUser: apiCreateUser, updateUser: apiUpdateUser, deleteUser: apiDeleteUser, clearUsers: apiClearUsers, } = useAuthApi();
+    const [all, setAll] = useState([]);
+    const [isLoading, setIsLoading] = useState(true);
+    const [error, setError] = useState(undefined);
+    const [filter, setFilter] = useState('');
+    useEffect(() => {
+        let cancelled = false;
+        setIsLoading(true);
+        setError(undefined);
+        const applyUsers = (u) => {
+            if (cancelled)
+                return;
+            setAll(u);
+            setIsLoading(false);
+        };
+        const applyErr = (e) => {
+            if (cancelled)
+                return;
+            setAll([]);
+            setError(e instanceof Error ? e : new Error(String(e)));
+            setIsLoading(false);
+        };
+        // `listUsers` is SYNC in-process (apply immediately, preserving the sync
+        // contract existing consumers + tests rely on) but ASYNC over the worker (an
+        // RPC), so branch on a thenable. The subscription is coarse: re-list on any
+        // change.
+        const relist = () => {
+            try {
+                const r = listUsers(auth);
+                if (r && typeof r.then === 'function') {
+                    r.then(applyUsers).catch(applyErr);
+                }
+                else {
+                    applyUsers(r);
+                }
+            }
+            catch (e) {
+                applyErr(e);
+            }
+        };
+        let unsub;
+        try {
+            relist();
+            unsub = subscribeUsers(auth, relist);
+        }
+        catch (e) {
+            applyErr(e);
+        }
+        return () => {
+            cancelled = true;
+            unsub?.();
+        };
+    }, [auth, listUsers, subscribeUsers]);
+    const users = useMemo(() => {
+        const needle = filter.trim().toLowerCase();
+        if (!needle)
+            return all;
+        return all.filter((u) => matches(u, needle));
+    }, [all, filter]);
+    const createUser = useCallback((request) => apiCreateUser(auth, request), [auth, apiCreateUser]);
+    const updateUser = useCallback((uid, update) => apiUpdateUser(auth, uid, update), [auth, apiUpdateUser]);
+    const deleteUser = useCallback((uid) => apiDeleteUser(auth, uid), [auth, apiDeleteUser]);
+    const clearUsers = useCallback(() => apiClearUsers(auth), [auth, apiClearUsers]);
+    const refresh = useCallback(() => {
+        const r = listUsers(auth);
+        if (r && typeof r.then === 'function') {
+            void r.then((u) => setAll(u)).catch(() => { });
+        }
+        else {
+            setAll(r);
+        }
+    }, [auth, listUsers]);
+    return {
+        users,
+        totalCount: all.length,
+        isLoading,
+        error,
+        filter,
+        setFilter,
+        createUser,
+        updateUser,
+        deleteUser,
+        clearUsers,
+        refresh,
+    };
+}
+//# sourceMappingURL=useAuthUsers.js.map

package/dist/auth/hooks/useAuthUsers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAuthUsers.js","sourceRoot":"","sources":["../../../src/auth/hooks/useAuthUsers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAOlE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAuB3C,SAAS,OAAO,CAAC,IAAoB,EAAE,MAAc;IACnD,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CACpE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CACrD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,YAAY,CAAC,IAAU;IACrC,6EAA6E;IAC7E,8EAA8E;IAC9E,oCAAoC;IACpC,MAAM,EACJ,SAAS,EACT,cAAc,EACd,UAAU,EAAE,aAAa,EACzB,UAAU,EAAE,aAAa,EACzB,UAAU,EAAE,aAAa,EACzB,UAAU,EAAE,aAAa,GAC1B,GAAG,UAAU,EAAE,CAAC;IACjB,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,QAAQ,CAAmB,EAAE,CAAC,CAAC;IACrD,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAoB,SAAS,CAAC,CAAC;IACjE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAEzC,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpB,MAAM,UAAU,GAAG,CAAC,CAAmB,EAAE,EAAE;YACzC,IAAI,SAAS;gBAAE,OAAO;YACtB,MAAM,CAAC,CAAC,CAAC,CAAC;YACV,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAE,EAAE;YAC9B,IAAI,SAAS;gBAAE,OAAO;YACtB,MAAM,CAAC,EAAE,CAAC,CAAC;YACX,QAAQ,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC;QACF,yEAAyE;QACzE,6EAA6E;QAC7E,4EAA4E;QAC5E,UAAU;QACV,MAAM,MAAM,GAAG,GAAG,EAAE;YAClB,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAiD,CAAC;gBAC1E,IAAI,CAAC,IAAI,OAAQ,CAA+B,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACpE,CAA+B,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBACpE,CAAC;qBAAM,CAAC;oBACN,UAAU,CAAC,CAAqB,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,QAAQ,CAAC,CAAC,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QACF,IAAI,KAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,EAAE,CAAC;YACT,KAAK,GAAG,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,QAAQ,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;QACD,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;YACjB,KAAK,EAAE,EAAE,CAAC;QACZ,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;IAEtC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC;QACxB,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAElB,MAAM,UAAU,GAAG,WAAW,CAC5B,CAAC,OAA0B,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,EAC5D,CAAC,IAAI,EAAE,aAAa,CAAC,CACtB,CAAC;IACF,MAAM,UAAU,GAAG,WAAW,CAC5B,CAAC,GAAW,EAAE,MAAyB,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,EAC5E,CAAC,IAAI,EAAE,aAAa,CAAC,CACtB,CAAC;IACF,MAAM,UAAU,GAAG,WAAW,CAC5B,CAAC,GAAW,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,EACzC,CAAC,IAAI,EAAE,aAAa,CAAC,CACtB,CAAC;IACF,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE;QAC/B,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAiD,CAAC;QAC1E,IAAI,CAAC,IAAI,OAAQ,CAA+B,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACrE,KAAM,CAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC/E,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,CAAqB,CAAC,CAAC;QAChC,CAAC;IACH,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IAEtB,OAAO;QACL,KAAK;QACL,UAAU,EAAE,GAAG,CAAC,MAAM;QACtB,SAAS;QACT,KAAK;QACL,MAAM;QACN,SAAS;QACT,UAAU;QACV,UAAU;QACV,UAAU;QACV,UAAU;QACV,OAAO;KACR,CAAC;AACJ,CAAC"}

package/dist/auth/index.d.ts

@@ -0,0 +1,11 @@
+export * from './hooks/index.js';
+export { AuthApiProvider, useAuthApi, type AuthApi } from './authApi.js';
+export { AuthSignInHelper, type AuthSignInHelperProps, } from './components/AuthSignInHelper.js';
+export { AuthUserList, type AuthUserListProps, } from './components/AuthUserList.js';
+export { AuthProviderToggles, DEFAULT_KNOWN_PROVIDER_IDS, type AuthProviderTogglesProps, } from './components/AuthProviderToggles.js';
+export { AuthUserForm, type AuthUserFormField, type AuthUserFormFieldName, type AuthUserFormProps, type AuthUserFormSubmit, } from './components/AuthUserForm.js';
+export { ClaimsField, type ClaimsFieldProps, } from './components/ClaimsField.js';
+export { DeleteUserWithConfirm, type DeleteUserWithConfirmProps, ClearUsersWithConfirm, type ClearUsersWithConfirmProps, } from './components/confirmActions.js';
+export { validateSerializedClaims, FORBIDDEN_CUSTOM_CLAIMS, CUSTOM_CLAIMS_MAX_LENGTH, type ClaimsValidationResult, } from './claims.js';
+export { PROVIDER_LABELS, providerLabel } from './providers.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AAIjC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,KAAK,OAAO,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EACL,gBAAgB,EAChB,KAAK,qBAAqB,GAC3B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,YAAY,EACZ,KAAK,iBAAiB,GACvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,mBAAmB,EACnB,0BAA0B,EAC1B,KAAK,wBAAwB,GAC9B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,GACxB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,WAAW,EACX,KAAK,gBAAgB,GACtB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,qBAAqB,EACrB,KAAK,0BAA0B,EAC/B,qBAAqB,EACrB,KAAK,0BAA0B,GAChC,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,EACxB,KAAK,sBAAsB,GAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/auth/index.js

@@ -0,0 +1,13 @@
+export * from './hooks/index.js';
+// Injectable auth API bundle (Pyric Studio data-backend swap): defaults to
+// in-process `pyric/auth`; a consumer can provide the SharedWorker client.
+export { AuthApiProvider, useAuthApi } from './authApi.js';
+export { AuthSignInHelper, } from './components/AuthSignInHelper.js';
+export { AuthUserList, } from './components/AuthUserList.js';
+export { AuthProviderToggles, DEFAULT_KNOWN_PROVIDER_IDS, } from './components/AuthProviderToggles.js';
+export { AuthUserForm, } from './components/AuthUserForm.js';
+export { ClaimsField, } from './components/ClaimsField.js';
+export { DeleteUserWithConfirm, ClearUsersWithConfirm, } from './components/confirmActions.js';
+export { validateSerializedClaims, FORBIDDEN_CUSTOM_CLAIMS, CUSTOM_CLAIMS_MAX_LENGTH, } from './claims.js';
+export { PROVIDER_LABELS, providerLabel } from './providers.js';
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AAEjC,2EAA2E;AAC3E,2EAA2E;AAC3E,OAAO,EAAE,eAAe,EAAE,UAAU,EAAgB,MAAM,cAAc,CAAC;AACzE,OAAO,EACL,gBAAgB,GAEjB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EACL,YAAY,GAEb,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,mBAAmB,EACnB,0BAA0B,GAE3B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,YAAY,GAKb,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,WAAW,GAEZ,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,qBAAqB,EAErB,qBAAqB,GAEtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,wBAAwB,GAEzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/auth/providers.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Provider-id → human label mapping, mirroring the provider set the
+ * Firebase emulator UI recognizes (it maps the same ids to icons; a
+ * headless library maps them to text and leaves icons to the consumer
+ * via `data-pyric-provider-id`).
+ */
+export declare const PROVIDER_LABELS: Record<string, string>;
+/** Label for a provider id; falls back to the raw id for custom
+ *  `OAuthProvider` ids the map doesn't know. */
+export declare function providerLabel(providerId: string): string;
+//# sourceMappingURL=providers.d.ts.map

package/dist/auth/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/auth/providers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAelD,CAAC;AAEF;gDACgD;AAChD,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAExD"}

package/dist/auth/providers.js

@@ -0,0 +1,28 @@
+/**
+ * Provider-id → human label mapping, mirroring the provider set the
+ * Firebase emulator UI recognizes (it maps the same ids to icons; a
+ * headless library maps them to text and leaves icons to the consumer
+ * via `data-pyric-provider-id`).
+ */
+export const PROVIDER_LABELS = {
+    'google.com': 'Google',
+    'apple.com': 'Apple',
+    'gc.apple.com': 'Game Center',
+    'facebook.com': 'Facebook',
+    'github.com': 'GitHub',
+    'microsoft.com': 'Microsoft',
+    'playgames.google.com': 'Play Games',
+    'twitter.com': 'Twitter',
+    'yahoo.com': 'Yahoo',
+    password: 'Email/Password',
+    phone: 'Phone',
+    anonymous: 'Anonymous',
+    oidc: 'OIDC',
+    saml: 'SAML',
+};
+/** Label for a provider id; falls back to the raw id for custom
+ *  `OAuthProvider` ids the map doesn't know. */
+export function providerLabel(providerId) {
+    return PROVIDER_LABELS[providerId] ?? providerId;
+}
+//# sourceMappingURL=providers.js.map

package/dist/auth/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../src/auth/providers.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAA2B;IACrD,YAAY,EAAE,QAAQ;IACtB,WAAW,EAAE,OAAO;IACpB,cAAc,EAAE,aAAa;IAC7B,cAAc,EAAE,UAAU;IAC1B,YAAY,EAAE,QAAQ;IACtB,eAAe,EAAE,WAAW;IAC5B,sBAAsB,EAAE,YAAY;IACpC,aAAa,EAAE,SAAS;IACxB,WAAW,EAAE,OAAO;IACpB,QAAQ,EAAE,gBAAgB;IAC1B,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;CACb,CAAC;AAEF;gDACgD;AAChD,MAAM,UAAU,aAAa,CAAC,UAAkB;IAC9C,OAAO,eAAe,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC;AACnD,CAAC"}

package/dist/auth/reducers/userEditor.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Reducer behind `useAuthUserEditor` — pure, React-free (drivable from
+ * tests or non-React hosts, like the firestore `documentEditor` reducer).
+ *
+ * Validation messages match the Firebase emulator UI:
+ * - email pattern → "Invalid email"
+ * - password length → "Password should be at least 6 characters"
+ * - password without email → "Email is required for password authentication"
+ * - claims → `validateSerializedClaims` messages
+ */
+import type { AuthUserRecord, CreateUserRequest, UpdateUserRequest } from 'pyric/auth';
+/** Editable field set. `claimsText` is the raw textarea JSON.
+ *  `providerIds` are the linked FEDERATED providers (`google.com`,
+ *  `apple.com`, …) — `password` is credential-derived (the password
+ *  field) and never appears here. */
+export interface AuthUserEditorFields {
+    email: string;
+    password: string;
+    displayName: string;
+    phoneNumber: string;
+    photoUrl: string;
+    emailVerified: boolean;
+    disabled: boolean;
+    claimsText: string;
+    providerIds: string[];
+}
+export interface AuthUserEditorState {
+    fields: AuthUserEditorFields;
+    /** What {@link reset} returns to; dirtiness is measured against this. */
+    initial: AuthUserEditorFields;
+}
+export type AuthUserEditorAction = {
+    type: 'setField';
+    field: keyof AuthUserEditorFields;
+    value: AuthUserEditorFields[keyof AuthUserEditorFields];
+} | {
+    type: 'reset';
+};
+export interface AuthUserEditorErrors {
+    email?: string;
+    password?: string;
+    claims?: string;
+}
+export declare function fieldsFromRecord(record?: AuthUserRecord): AuthUserEditorFields;
+export declare function initAuthUserEditorState(initial?: AuthUserRecord): AuthUserEditorState;
+export declare function authUserEditorReducer(state: AuthUserEditorState, action: AuthUserEditorAction): AuthUserEditorState;
+export declare function validateAuthUserFields(fields: AuthUserEditorFields): AuthUserEditorErrors;
+export declare function isDirty(state: AuthUserEditorState): boolean;
+/** Full payload for `sandbox.createUser` — every non-empty field. */
+export declare function toCreateRequest(state: AuthUserEditorState): CreateUserRequest;
+/** Delta payload for `sandbox.updateUser` — only fields that changed
+ *  from the initial record. A cleared displayName maps to `null`
+ *  (the update API's clear semantics). */
+export declare function toUpdateRequest(state: AuthUserEditorState): UpdateUserRequest;
+//# sourceMappingURL=userEditor.d.ts.map

package/dist/auth/reducers/userEditor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"userEditor.d.ts","sourceRoot":"","sources":["../../../src/auth/reducers/userEditor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAGvF;;;qCAGqC;AACrC,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,yEAAyE;IACzE,OAAO,EAAE,oBAAoB,CAAC;CAC/B;AAED,MAAM,MAAM,oBAAoB,GAC5B;IACE,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,MAAM,oBAAoB,CAAC;IAClC,KAAK,EAAE,oBAAoB,CAAC,MAAM,oBAAoB,CAAC,CAAC;CACzD,GACD;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAEtB,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAsBD,wBAAgB,gBAAgB,CAAC,MAAM,CAAC,EAAE,cAAc,GAAG,oBAAoB,CAiB9E;AAED,wBAAgB,uBAAuB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,mBAAmB,CAGrF;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,oBAAoB,GAC3B,mBAAmB,CAOrB;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,oBAAoB,GAAG,oBAAoB,CAgBzF;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAO3D;AAcD,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,KAAK,EAAE,mBAAmB,GAAG,iBAAiB,CAiB7E;AAED;;0CAE0C;AAC1C,wBAAgB,eAAe,CAAC,KAAK,EAAE,mBAAmB,GAAG,iBAAiB,CAkB7E"}

package/dist/auth/reducers/userEditor.js

@@ -0,0 +1,136 @@
+import { validateSerializedClaims } from '../claims.js';
+const EMPTY_FIELDS = {
+    email: '',
+    password: '',
+    displayName: '',
+    phoneNumber: '',
+    photoUrl: '',
+    emailVerified: false,
+    disabled: false,
+    claimsText: '',
+    providerIds: [],
+};
+/** Credential-derived / token-level ids — sign-in methods, not linkable
+ *  federated entries (mirrors the sandbox backend's rule). */
+const NON_FEDERATED_IDS = new Set(['password', 'anonymous', 'phone']);
+/** Same permissive shape the emulator UI uses (`pattern` validation). */
+const EMAIL_REGEX = /^[^@]+@[^@]+\.[^@]+$/;
+const PASSWORD_MIN_LENGTH = 6;
+export function fieldsFromRecord(record) {
+    if (!record)
+        return { ...EMPTY_FIELDS };
+    return {
+        email: record.email ?? '',
+        password: '',
+        displayName: record.displayName ?? '',
+        phoneNumber: record.phoneNumber ?? '',
+        photoUrl: record.photoUrl ?? '',
+        emailVerified: record.emailVerified,
+        disabled: record.disabled,
+        claimsText: Object.keys(record.customClaims).length
+            ? JSON.stringify(record.customClaims, null, 2)
+            : '',
+        providerIds: record.providerUserInfo
+            .map((p) => p.providerId)
+            .filter((id) => !NON_FEDERATED_IDS.has(id)),
+    };
+}
+export function initAuthUserEditorState(initial) {
+    const fields = fieldsFromRecord(initial);
+    return { fields, initial: { ...fields } };
+}
+export function authUserEditorReducer(state, action) {
+    switch (action.type) {
+        case 'setField':
+            return { ...state, fields: { ...state.fields, [action.field]: action.value } };
+        case 'reset':
+            return { ...state, fields: { ...state.initial } };
+    }
+}
+export function validateAuthUserFields(fields) {
+    const errors = {};
+    const email = fields.email.trim();
+    const password = fields.password;
+    if (email && !EMAIL_REGEX.test(email)) {
+        errors.email = 'Invalid email';
+    }
+    if (password && password.length < PASSWORD_MIN_LENGTH) {
+        errors.password = `Password should be at least ${PASSWORD_MIN_LENGTH} characters`;
+    }
+    if (password && !email) {
+        errors.password = 'Email is required for password authentication';
+    }
+    const claims = validateSerializedClaims(fields.claimsText);
+    if (!claims.ok)
+        errors.claims = claims.message;
+    return errors;
+}
+export function isDirty(state) {
+    const { fields, initial } = state;
+    return Object.keys(fields).some((k) => k === 'providerIds'
+        ? !sameIds(fields.providerIds, initial.providerIds)
+        : fields[k] !== initial[k]);
+}
+/** Order-insensitive id-list equality (toggling A then B ≡ B then A). */
+function sameIds(a, b) {
+    if (a.length !== b.length)
+        return false;
+    const sorted = [...b].sort();
+    return [...a].sort().every((id, i) => id === sorted[i]);
+}
+function parsedClaims(fields) {
+    const r = validateSerializedClaims(fields.claimsText);
+    return r.ok ? r.claims : undefined;
+}
+/** Full payload for `sandbox.createUser` — every non-empty field. */
+export function toCreateRequest(state) {
+    const f = state.fields;
+    const req = {
+        emailVerified: f.emailVerified,
+        disabled: f.disabled,
+    };
+    if (f.email.trim())
+        req.email = f.email.trim();
+    if (f.password)
+        req.password = f.password;
+    if (f.displayName.trim())
+        req.displayName = f.displayName.trim();
+    if (f.phoneNumber.trim())
+        req.phoneNumber = f.phoneNumber.trim();
+    if (f.photoUrl.trim())
+        req.photoUrl = f.photoUrl.trim();
+    const claims = parsedClaims(f);
+    if (claims)
+        req.customClaims = claims;
+    if (f.providerIds.length) {
+        req.providerUserInfo = f.providerIds.map((providerId) => ({ providerId }));
+    }
+    return req;
+}
+/** Delta payload for `sandbox.updateUser` — only fields that changed
+ *  from the initial record. A cleared displayName maps to `null`
+ *  (the update API's clear semantics). */
+export function toUpdateRequest(state) {
+    const { fields: f, initial: i } = state;
+    const req = {};
+    if (f.email.trim() !== i.email && f.email.trim())
+        req.email = f.email.trim();
+    if (f.password && f.password !== i.password)
+        req.password = f.password;
+    if (f.displayName.trim() !== i.displayName) {
+        req.displayName = f.displayName.trim() || null;
+    }
+    if (f.emailVerified !== i.emailVerified)
+        req.emailVerified = f.emailVerified;
+    if (f.disabled !== i.disabled)
+        req.disabled = f.disabled;
+    if (f.claimsText !== i.claimsText) {
+        req.customClaims = parsedClaims(f) ?? {};
+    }
+    if (!sameIds(f.providerIds, i.providerIds)) {
+        // Replacement semantics; the backend re-derives the password entry.
+        req.providerUserInfo = f.providerIds.map((providerId) => ({ providerId }));
+    }
+    return req;
+}
+//# sourceMappingURL=userEditor.js.map

package/dist/auth/reducers/userEditor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"userEditor.js","sourceRoot":"","sources":["../../../src/auth/reducers/userEditor.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AAsCxD,MAAM,YAAY,GAAyB;IACzC,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,EAAE;IACZ,WAAW,EAAE,EAAE;IACf,WAAW,EAAE,EAAE;IACf,QAAQ,EAAE,EAAE;IACZ,aAAa,EAAE,KAAK;IACpB,QAAQ,EAAE,KAAK;IACf,UAAU,EAAE,EAAE;IACd,WAAW,EAAE,EAAE;CAChB,CAAC;AAEF;8DAC8D;AAC9D,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAEtE,yEAAyE;AACzE,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAC3C,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,MAAM,UAAU,gBAAgB,CAAC,MAAuB;IACtD,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,GAAG,YAAY,EAAE,CAAC;IACxC,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;QACzB,QAAQ,EAAE,EAAE;QACZ,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;QACrC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;QAC/B,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM;YACjD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,CAAC,CAAC,EAAE;QACN,WAAW,EAAE,MAAM,CAAC,gBAAgB;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;aACxB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAwB;IAC9D,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAA0B,EAC1B,MAA4B;IAE5B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,UAAU;YACb,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QACjF,KAAK,OAAO;YACV,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;IACtD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAA4B;IACjE,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IAAI,KAAK,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,KAAK,GAAG,eAAe,CAAC;IACjC,CAAC;IACD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACtD,MAAM,CAAC,QAAQ,GAAG,+BAA+B,mBAAmB,aAAa,CAAC;IACpF,CAAC;IACD,IAAI,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,CAAC,QAAQ,GAAG,+CAA+C,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAA0B;IAChD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAClC,OAAQ,MAAM,CAAC,IAAI,CAAC,MAAM,CAAuC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC3E,CAAC,KAAK,aAAa;QACjB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC;QACnD,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,SAAS,OAAO,CAAC,CAAoB,EAAE,CAAoB;IACzD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,MAA4B;IAChD,MAAM,CAAC,GAAG,wBAAwB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtD,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACrC,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAAC,KAA0B;IACxD,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IACvB,MAAM,GAAG,GAAsB;QAC7B,aAAa,EAAE,CAAC,CAAC,aAAa;QAC9B,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC;IACF,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,CAAC,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC1C,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IACjE,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IACjE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC/B,IAAI,MAAM;QAAE,GAAG,CAAC,YAAY,GAAG,MAAM,CAAC;IACtC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QACzB,GAAG,CAAC,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;0CAE0C;AAC1C,MAAM,UAAU,eAAe,CAAC,KAA0B;IACxD,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC;IACxC,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7E,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;IACvE,IAAI,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3C,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa;QAAE,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;IAC7E,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;IACzD,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;QAClC,GAAG,CAAC,YAAY,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3C,oEAAoE;QACpE,GAAG,CAAC,gBAAgB,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}