@authowl/core 0.10.0 → 0.11.0

package/dist/index.cjs

@@ -1,3 +1,3 @@
 'use strict';var Fn=/^(pk_(live|test))_([0-9a-f-]{36})_([A-Za-z0-9]{20,})$/i,Vn=/^sk_/i;function ke(e){if(typeof e!="string"||e.length===0)throw new Error("publishableKey is required");if(Vn.test(e))throw new Error("A secret key was passed where a publishable key was expected. Never embed secret keys in client code.");let t=Fn.exec(e);if(!t)throw new Error("publishableKey is malformed; expected pk_(live|test)_<uuid>_<base62>");return {prefix:t[1],env:t[2],projectId:t[3]}}function qn(e,t){let n=`p_${e.replace(/-/g,"")}`;return `${t?.secure?"__Secure-":""}${n}.session_token`}var Xe=/^http:\/\/(?:(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*localhost|127\.0\.0\.1|\[::1\])(?::\d+)?(?:\/|$)/i;function Se(e,t){throw new Error(`${e}: ${t}`)}function Qe(e,t){let n;try{n=new URL(String(e));}catch{throw new TypeError("Transport URL must be absolute.")}if(n.username||n.password||n.hash)throw new TypeError("Transport URL must not contain credentials or a fragment.");let o=n.toString();if(n.protocol!=="https:"&&!(n.protocol==="http:"&&t.allowHttpLoopback&&Xe.test(o)))throw new TypeError("Transport URL must use HTTPS except on approved loopback.");return n}function Ze(e,t){(typeof e!="string"||!/^https?:\/\/[^/?#@\\\s]+\/?$/i.test(e))&&Se("apiUrl","origin required");let n;try{n=new URL(e);}catch{Se("apiUrl","origin required");}return n.protocol==="http:"&&(!t.allowHttpLoopback||!Xe.test(e))&&Se("apiUrl","HTTPS required except exact loopback"),n.origin}function Kn(e){if(!e||typeof e!="object")throw new Error("AuthConfig is required");let t=ke(e.publishableKey),n=Ze(e.apiUrl,{allowHttpLoopback:t.env==="test"}),o=`${n}/api/projects/${t.projectId}/auth`;return {...e,apiUrl:n,decoded:t,projectBaseURL:o}}var Hn=1e4,Bn=1024*1024,T=class extends Error{kind;requestId;constructor(t,n){super(Qn(t)),this.name="TransportError",this.kind=t,this.requestId=n;}},nt=new WeakSet;function E(e,t){let n=new T(e,t);return nt.add(n),n}async function ne({fetchImpl:e,url:t,init:n={},timeoutMs:o=Hn,maxResponseBytes:i=Bn,allowHttpLoopback:a=false,decode:r}){tt(o,"timeoutMs"),tt(i,"maxResponseBytes");let s=Qe(t,{allowHttpLoopback:a}),c=n.signal,l=new AbortController,u=null,f,m=new Promise(A=>{f=A;}),h=A=>{u===null&&(u=A,f({type:"abort",kind:A}),l.abort());},g=()=>h("aborted");c?.addEventListener("abort",g,{once:true});let U=setTimeout(()=>h("timeout"),o);c?.aborted&&g();try{if(u!==null)throw E(u);let A;try{A=await Promise.race([e(s.toString(),{...n,redirect:"error",signal:l.signal}).then(Re=>({type:"response",response:Re})),m]);}catch{throw E(u??"network")}if(A.type==="abort")throw E(A.kind);if(!jn(A.response))throw E("invalid_response");let v=A.response,z=Xn(v.headers),V=await Jn(v,i,m,()=>u,z),X=$n(v,V,z),q;try{q=v.ok&&r?r(X,Object.freeze({status:v.status})):X;}catch{throw E("invalid_response",z)}return {response:v,data:q,...z===void 0?{}:{requestId:z}}}catch(A){throw A instanceof T&&nt.has(A)?A:E(u??"network")}finally{clearTimeout(U),c?.removeEventListener("abort",g);}}function jn(e){if(!e||typeof e!="object")return  false;let t=e;return Number.isInteger(t.status)&&t.status>=0&&t.status<=599&&typeof t.statusText=="string"&&typeof t.ok=="boolean"&&typeof t.headers?.get=="function"&&(t.body===null||typeof t.body=="object"&&typeof t.body?.getReader=="function"&&typeof t.body.cancel=="function")}async function Jn(e,t,n,o,i){let a=e.headers.get("content-length");if(a!==null){if(!/^\d+$/.test(a))throw et(e.body),E("invalid_response",i);if(Number(a)>t)throw et(e.body),E("response_too_large",i)}if(!e.body)return "";let r;try{r=e.body.getReader();}catch{throw E("network",i)}let s=[],c=0,l=null;try{for(;;){let m;try{m=await Promise.race([r.read(),n]);}catch{l=E(o()??"network",i);break}if(Gn(m)){l=E(m.kind,i);break}let{done:h,value:g}=m;if(h)break;if(g.byteLength!==0){if(c+=g.byteLength,c>t){l=E("response_too_large",i);break}s.push(g);}}}finally{l&&Wn(r);try{r.releaseLock();}catch{}}if(l)throw l;let u=new Uint8Array(c),f=0;for(let m of s)u.set(m,f),f+=m.byteLength;try{return new TextDecoder("utf-8",{fatal:!0}).decode(u)}catch{throw E("invalid_response",i)}}function Gn(e){return "type"in e&&e.type==="abort"}function et(e){if(e)try{e.cancel().catch(()=>{});}catch{}}function Wn(e){try{e.cancel().catch(()=>{});}catch{}}function $n(e,t,n){if(e.status===204||e.status===205)return null;let o=Yn(e.headers.get("content-type"));if(!e.ok&&(!o||t.length===0))return null;if(!o||t.length===0)throw E("invalid_response",n);try{return JSON.parse(t)}catch{if(!e.ok)return null;throw E("invalid_response",n)}}function Yn(e){if(e===null)return  false;let t=e.split(";",1)[0]?.trim().toLowerCase();return t==="application/json"||t?.endsWith("+json")===true}function Xn(e){let t=e.get("x-request-id")?.trim();if(!(!t||t.length>256||!/^[A-Za-z0-9._:-]+$/.test(t)))return t}function tt(e,t){if(!Number.isInteger(e)||e<=0)throw new TypeError(`${t} must be a positive integer.`)}function Qn(e){switch(e){case "aborted":return "The request was cancelled.";case "timeout":return "The request timed out.";case "response_too_large":return "The response exceeded the allowed size.";case "invalid_response":return "The service returned an invalid response.";case "network":return "The network request could not be completed."}}var rt="x-authowl-turnstile-token",Zn=1e4,eo=32,to=2e4;function J(e,t){return {post:(n,o,i,a)=>e.request(n,{method:"POST",body:o,fetchOptions:i,decode:a}),mutation:async(n,o)=>{let i=await n;return i.error===null&&(o===void 0||i.data!==null&&o(i.data))&&t(),i}}}function oe(e,t=e.projectBaseURL){return {async request(n,o={}){let i=io(t,n,o.query),a=o.method??(o.body===void 0?"GET":"POST"),r=new Headers(o.fetchOptions?.headers);r.set("x-publishable-key",e.publishableKey),o.fetchOptions?.authChallengeToken&&r.set(rt,o.fetchOptions.authChallengeToken),o.body!==void 0&&r.set("content-type","application/json");let s={method:a,headers:r,credentials:o.credentials??"include",...o.body===void 0?{}:{body:JSON.stringify(o.body)}},c=Object.freeze({method:a,path:n});await o.fetchOptions?.onRequest?.(c);let l=oo(a,o.fetchOptions),u;try{u=await no(e,i,{...s,signal:o.fetchOptions?.signal},l);}catch(A){let v=it(A);return await o.fetchOptions?.onError?.(Te(c,v,so(A))),{data:null,error:v}}let{response:f,requestId:m}=u,h=lo(n,u.data),g=h;if(f.ok)try{g=xe(h),o.decode&&(g=o.decode(g));}catch{let A=it(new T("invalid_response",m));return await o.fetchOptions?.onError?.(Te(c,A,"invalid_response")),{data:null,error:A}}let U=Object.freeze({...c,status:f.status,...m===void 0?{}:{requestId:m}});if(await o.fetchOptions?.onResponse?.(U),!f.ok){let A=ro(f,h,m);return await o.fetchOptions?.onError?.(Te(c,A,"api")),{data:null,error:A}}return await o.fetchOptions?.onSuccess?.(U),{data:g,error:null}}}}async function no(e,t,n,o){let i=Date.now()+Zn;for(let a=0;a<o;a+=1){let r=i-Date.now();if(r<=0)throw new T("timeout");try{let s=await ne({fetchImpl:e.fetch??fetch,url:t,init:n,timeoutMs:Math.max(1,Math.ceil(r)),allowHttpLoopback:e.decoded.env==="test"});if(s.response.status<500||a===o-1)return s}catch(s){if(a===o-1||!(s instanceof T)||s.kind!=="network")throw s}await co(50*2**a,n.signal,i);}throw new T("network")}function oo(e,t){if(e!=="GET"||t?.authChallengeToken)return 1;let n=t?.retry;return typeof n!="number"||!Number.isFinite(n)?1:Math.min(Math.max(Math.trunc(n),0),3)+1}function io(e,t,n){let o=new URL(`${e}${t.startsWith("/")?t:`/${t}`}`);for(let[i,a]of Object.entries(n??{}))a!==void 0&&o.searchParams.set(i,String(a));return o.toString()}function ro(e,t,n){let o=Q(t)?t:{},i=ao(o,e.headers);return {status:e.status,statusText:e.statusText,code:typeof o.code=="string"?o.code:void 0,...n===void 0?{}:{requestId:n},...typeof o.current_version=="number"?{currentVersion:o.current_version}:{},...i!==void 0?{retryAfterSeconds:i}:{},message:typeof o.message=="string"?o.message:typeof o.error=="string"?o.error:typeof o.detail=="string"?o.detail:e.statusText||"Request failed"}}function ao(e,t){let n=(typeof e.retryAfterSeconds=="number"&&Number.isFinite(e.retryAfterSeconds)?e.retryAfterSeconds:void 0)??ot(t.get("retry-after"))??ot(t.get("x-retry-after"));if(n!==void 0)return Math.min(Math.max(Math.trunc(n),1),86400)}function ot(e){if(!e)return;let t=e.trim();if(!/^\d+$/.test(t))return;let n=Number(t);return Number.isFinite(n)?n:void 0}function it(e){let t=e instanceof T?e.kind:"network";return {status:0,...{aborted:{statusText:"ABORTED",code:"REQUEST_ABORTED",message:"The request was cancelled."},timeout:{statusText:"TIMEOUT",code:"REQUEST_TIMEOUT",message:"The request timed out."},response_too_large:{statusText:"INVALID_RESPONSE",code:"RESPONSE_TOO_LARGE",message:"The service response was too large."},invalid_response:{statusText:"INVALID_RESPONSE",code:"INVALID_RESPONSE",message:"The service returned an invalid response."},network:{statusText:"FETCH_ERROR",code:"FETCH_ERROR",message:"Network request failed."}}[t],...e instanceof T&&e.requestId?{requestId:e.requestId}:{}}}function Te(e,t,n){return Object.freeze({...e,status:t.status??0,...t.requestId===void 0?{}:{requestId:t.requestId},failure:n})}function so(e){return e instanceof T?e.kind:"network"}function co(e,t,n){return new Promise((o,i)=>{if(t?.aborted){i(new T("aborted"));return}let a=n-Date.now();if(a<=0){i(new T("timeout"));return}let r=Math.min(e,a),s=()=>{clearTimeout(c),i(new T("aborted"));},c=setTimeout(()=>{t?.removeEventListener("abort",s),Date.now()>=n?i(new T("timeout")):o();},r);t?.addEventListener("abort",s,{once:true}),t?.aborted&&s();})}function xe(e,t="",n=0,o={nodes:0}){if(o.nodes+=1,n>eo||o.nodes>to)throw new Error("response traversal limit exceeded");if(typeof e=="string"&&/^(?:createdAt|updatedAt|expiresAt)$/.test(t)){let i=new Date(e);return Number.isNaN(i.getTime())?e:i}return Array.isArray(e)?e.map(i=>xe(i,"",n+1,o)):Q(e)?Object.fromEntries(Object.entries(e).map(([i,a])=>[i,uo(i)?a:xe(a,i,n+1,o)])):e}function uo(e){return e==="metadata"||e==="public_metadata"||e==="unsafe_metadata"||e==="private_metadata"||e==="publicMetadata"||e==="unsafeMetadata"||e==="privateMetadata"}function lo(e,t){if(e==="/list-sessions"&&Array.isArray(t))return t.map(i=>Q(i)?Ee(i):i);if(!Q(t))return t;let o=e==="/change-password"||e==="/passkey/verify-authentication"||e==="/phone-otp/verify"||e==="/sign-up/email"||e.startsWith("/sign-in/")||e.startsWith("/two-factor/verify-")?Ee(t):t;return e==="/sign-up/email"&&!("sessionCreated"in o)&&(o={...o,sessionCreated:typeof t.token=="string"&&t.token.length>0}),(e==="/get-session"||e==="/passkey/verify-authentication")&&Q(o.session)&&(o={...o,session:Ee(o.session)}),o}function Ee(e){if(!Object.hasOwn(e,"token"))return e;let t={...e};return delete t.token,t}function Q(e){return !!e&&typeof e=="object"&&!Array.isArray(e)}function I(e){let t=new Uint8Array(e),n="";for(let i of t)n+=String.fromCharCode(i);return btoa(n).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function K(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),n=(4-t.length%4)%4,o=t.padEnd(t.length+n,"="),i=atob(o),a=new ArrayBuffer(i.length),r=new Uint8Array(a);for(let s=0;s<i.length;s++)r[s]=i.charCodeAt(s);return a}function H(){return po.stubThis(globalThis?.PublicKeyCredential!==void 0&&typeof globalThis.PublicKeyCredential=="function")}var po={stubThis:e=>e};function ie(e){let{id:t}=e;return {...e,id:K(t),transports:e.transports}}function re(e){return e==="localhost"||/^((xn--[a-z0-9-]+|[a-z0-9]+(-[a-z0-9]+)*)\.)+([a-z]{2,}|xn--[a-z0-9-]+)$/i.test(e)}var y=class extends Error{constructor({message:t,code:n,cause:o,name:i}){super(t,{cause:o}),Object.defineProperty(this,"code",{enumerable:true,configurable:true,writable:true,value:void 0}),this.name=i??o.name,this.code=n;}};function at({error:e,options:t}){let{publicKey:n}=t;if(!n)throw Error("options was missing required publicKey property");if(e.name==="AbortError"){if(t.signal instanceof AbortSignal)return new y({message:"Registration ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:e})}else if(e.name==="ConstraintError"){if(n.authenticatorSelection?.requireResidentKey===true)return new y({message:"Discoverable credentials were required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT",cause:e});if(t.mediation==="conditional"&&n.authenticatorSelection?.userVerification==="required")return new y({message:"User verification was required during automatic registration but it could not be performed",code:"ERROR_AUTO_REGISTER_USER_VERIFICATION_FAILURE",cause:e});if(n.authenticatorSelection?.userVerification==="required")return new y({message:"User verification was required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT",cause:e})}else {if(e.name==="InvalidStateError")return new y({message:"The authenticator was previously registered",code:"ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED",cause:e});if(e.name==="NotAllowedError")return new y({message:e.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:e});if(e.name==="NotSupportedError")return n.pubKeyCredParams.filter(i=>i.type==="public-key").length===0?new y({message:'No entry in pubKeyCredParams was of type "public-key"',code:"ERROR_MALFORMED_PUBKEYCREDPARAMS",cause:e}):new y({message:"No available authenticator supported any of the specified pubKeyCredParams algorithms",code:"ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEYCREDPARAMS_ALG",cause:e});if(e.name==="SecurityError"){let o=globalThis.location.hostname;if(re(o)){if(n.rp.id!==o)return new y({message:`The RP ID "${n.rp.id}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:e})}else return new y({message:`${globalThis.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:e})}else if(e.name==="TypeError"){if(n.user.id.byteLength<1||n.user.id.byteLength>64)return new y({message:"User ID was not between 1 and 64 characters",code:"ERROR_INVALID_USER_ID_LENGTH",cause:e})}else if(e.name==="UnknownError")return new y({message:"The authenticator was unable to process the specified options, or could not create a new credential",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:e})}return e}var Ie=class{constructor(){Object.defineProperty(this,"controller",{enumerable:true,configurable:true,writable:true,value:void 0});}createNewAbortSignal(){if(this.controller){let n=new Error("Cancelling existing WebAuthn API call for new one");n.name="AbortError",this.controller.abort(n);}let t=new AbortController;return this.controller=t,t.signal}cancelCeremony(){if(this.controller){let t=new Error("Manually cancelling existing WebAuthn API call");t.name="AbortError",this.controller.abort(t),this.controller=void 0;}}},ae=new Ie;var fo=["cross-platform","platform"];function se(e){if(e&&!(fo.indexOf(e)<0))return e}async function st(e){!e.optionsJSON&&e.challenge&&(console.warn("startRegistration() was not called correctly. It will try to continue with the provided options, but this call should be refactored to use the expected call structure instead. See https://simplewebauthn.dev/docs/packages/browser#typeerror-cannot-read-properties-of-undefined-reading-challenge for more information."),e={optionsJSON:e});let{optionsJSON:t,useAutoRegister:n=false}=e;if(!H())throw new Error("WebAuthn is not supported in this browser");let o={...t,challenge:K(t.challenge),user:{...t.user,id:K(t.user.id)},excludeCredentials:t.excludeCredentials?.map(ie)},i={};n&&(i.mediation="conditional"),i.publicKey=o,i.signal=ae.createNewAbortSignal();let a;try{a=await navigator.credentials.create(i);}catch(g){throw at({error:g,options:i})}if(!a)throw new Error("Registration was not completed");let{id:r,rawId:s,response:c,type:l}=a,u;typeof c.getTransports=="function"&&(u=c.getTransports());let f;if(typeof c.getPublicKeyAlgorithm=="function")try{f=c.getPublicKeyAlgorithm();}catch(g){Pe("getPublicKeyAlgorithm()",g);}let m;if(typeof c.getPublicKey=="function")try{let g=c.getPublicKey();g!==null&&(m=I(g));}catch(g){Pe("getPublicKey()",g);}let h;if(typeof c.getAuthenticatorData=="function")try{h=I(c.getAuthenticatorData());}catch(g){Pe("getAuthenticatorData()",g);}return {id:r,rawId:I(s),response:{attestationObject:I(c.attestationObject),clientDataJSON:I(c.clientDataJSON),transports:u,publicKeyAlgorithm:f,publicKey:m,authenticatorData:h},type:l,clientExtensionResults:a.getClientExtensionResults(),authenticatorAttachment:se(a.authenticatorAttachment)}}function Pe(e,t){console.warn(`The browser extension that intercepted this WebAuthn API call incorrectly implemented ${e}. You should report this error to them.
-`,t);}function ct(){if(!H())return De.stubThis(new Promise(t=>t(false)));let e=globalThis.PublicKeyCredential;return e?.isConditionalMediationAvailable===void 0?De.stubThis(new Promise(t=>t(false))):De.stubThis(e.isConditionalMediationAvailable())}var De={stubThis:e=>e};function ut({error:e,options:t}){let{publicKey:n}=t;if(!n)throw Error("options was missing required publicKey property");if(e.name==="AbortError"){if(t.signal instanceof AbortSignal)return new y({message:"Authentication ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:e})}else {if(e.name==="NotAllowedError")return new y({message:e.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:e});if(e.name==="SecurityError"){let o=globalThis.location.hostname;if(re(o)){if(n.rpId!==o)return new y({message:`The RP ID "${n.rpId}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:e})}else return new y({message:`${globalThis.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:e})}else if(e.name==="UnknownError")return new y({message:"The authenticator was unable to process the specified options, or could not create a new assertion signature",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:e})}return e}async function lt(e){!e.optionsJSON&&e.challenge&&(console.warn("startAuthentication() was not called correctly. It will try to continue with the provided options, but this call should be refactored to use the expected call structure instead. See https://simplewebauthn.dev/docs/packages/browser#typeerror-cannot-read-properties-of-undefined-reading-challenge for more information."),e={optionsJSON:e});let{optionsJSON:t,useBrowserAutofill:n=false,verifyBrowserAutofillInput:o=true}=e;if(!H())throw new Error("WebAuthn is not supported in this browser");let i;t.allowCredentials?.length!==0&&(i=t.allowCredentials?.map(ie));let a={...t,challenge:K(t.challenge),allowCredentials:i},r={};if(n){if(!await ct())throw Error("Browser does not support WebAuthn autofill");if(document.querySelectorAll("input[autocomplete$='webauthn']").length<1&&o)throw Error('No <input> with "webauthn" as the only or last value in its `autocomplete` attribute was detected');r.mediation="conditional",a.allowCredentials=[];}r.publicKey=a,r.signal=ae.createNewAbortSignal();let s;try{s=await navigator.credentials.get(r);}catch(h){throw ut({error:h,options:r})}if(!s)throw new Error("Authentication was not completed");let{id:c,rawId:l,response:u,type:f}=s,m;return u.userHandle&&(m=I(u.userHandle)),{id:c,rawId:I(l),response:{authenticatorData:I(u.authenticatorData),clientDataJSON:I(u.clientDataJSON),signature:I(u.signature),userHandle:m},type:f,clientExtensionResults:s.getClientExtensionResults(),authenticatorAttachment:se(s.authenticatorAttachment)}}var mo=new Set(["__proto__","constructor","prototype"]);function p(e){(!e||typeof e!="object"||Array.isArray(e))&&d();let t=Object.getPrototypeOf(e);return t!==Object.prototype&&t!==null&&d(),e}function w(e){return typeof e!="string"&&d(),e}function b(e){return typeof e!="boolean"&&d(),e}function k(e){return (!(e instanceof Date)||Number.isNaN(e.getTime()))&&d(),e}function ce(e){return (!Array.isArray(e)||!e.every(t=>typeof t=="string"))&&d(),[...e]}function R(e,t){let n=e[t];return n==null||typeof n=="string"?n:d()}function dt(e,t){let n=e[t];return n==null||typeof n=="boolean"?n:d()}function D(e){let t=p(e),n=t.email;return n!==null&&typeof n!="string"&&d(),{id:w(t.id),email:n,emailVerified:b(t.emailVerified),createdAt:k(t.createdAt),updatedAt:k(t.updatedAt),...P("phoneNumber",R(t,"phoneNumber")),...P("username",R(t,"username")),...P("displayUsername",R(t,"displayUsername")),...P("firstName",R(t,"firstName")),...P("lastName",R(t,"lastName")),...P("name",R(t,"name")),...P("image",R(t,"image")),...P("twoFactorEnabled",dt(t,"twoFactorEnabled"))}}function ue(e){let t=p(e),n=t.membership;return {id:w(t.id),userId:w(t.userId),expiresAt:k(t.expiresAt),...P("activeOrganizationId",R(t,"activeOrganizationId")),...P("activeTeamId",R(t,"activeTeamId")),...P("membership",n==null?n:go(n)),...P("pendingMfaEnrollment",dt(t,"pendingMfaEnrollment"))}}function d(){throw new TypeError("AuthOwl response does not match its runtime contract.")}function _(e,t=20,n=1e4){return (!e||typeof e!="object"||Array.isArray(e))&&d(),ve(e,t,n)}function ve(e,t=20,n=1e4){return Ce(e,0,{nodes:0},t,n)}function go(e){let t=p(e);return {role:w(t.role),permissions:ce(t.permissions),...t.teams===void 0?{}:{teams:ce(t.teams)}}}function Ce(e,t,n,o,i){if(n.nodes+=1,(t>o||n.nodes>i)&&d(),e===null||typeof e=="string"||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||d(),e;if(Array.isArray(e))return e.map(s=>Ce(s,t+1,n,o,i));(!e||typeof e!="object")&&d();let a=Object.getPrototypeOf(e);a!==Object.prototype&&a!==null&&d();let r={};for(let[s,c]of Object.entries(e))mo.has(s)&&d(),r[s]=Ce(c,t+1,n,o,i);return r}function P(e,t){return t===void 0?{}:{[e]:t}}var pt=new Set([1564,8206,8207,8234,8235,8236,8237,8238,8294,8295,8296,8297]),le=new Set([9,10,11,12,13,32,133,160,5760,8192,8193,8194,8195,8196,8197,8198,8199,8200,8201,8202,8232,8233,8239,8287,12288,65279]);function de(e){if(e===void 0)return {valid:true,value:void 0};for(let n of e){let o=n.codePointAt(0);if(o===void 0||mt(n,o)||ft(o)||pt.has(o))return {valid:false}}let t=ho(e);return Ue(t)?{valid:true,value:t}:{valid:false}}function Ue(e){let t=0,n,o;for(let i of e){if(t+=1,t>256)return  false;let a=i.codePointAt(0);if(a===void 0||mt(i,a)||ft(a)||pt.has(a))return  false;n??=a,o=a;}return t>0&&n!==void 0&&o!==void 0&&!le.has(n)&&!le.has(o)}function pe(){return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:"INVALID_PASSKEY_NAME",message:"Passkey names must contain 1 to 256 safe Unicode characters."}}}function ho(e){let t=0,n=e.length;for(;t<n;){let o=e.codePointAt(t);if(o===void 0||!le.has(o))break;t+=o>65535?2:1;}for(;n>t;){let o=e.codePointAt(n-1);if(o===void 0)break;let a=o>=56320&&o<=57343?n-2:n-1,r=e.codePointAt(a);if(r===void 0||!le.has(r))break;n=a;}return e.slice(t,n)}function ft(e){return e>=0&&e<=31||e>=127&&e<=159}function mt(e,t){return e.length===1&&t>=55296&&t<=57343}var At=12,Ot=5e3,Ao=8,Oo=1e3,yo=16,gt=512,yt=100,bt=8192,bo=32768,ze=1024,ht=256,Ne=64,wo=6e5,Ro=/^[A-Za-z0-9_-]+$/u,ko=/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u,So=/[\u0000-\u001f\u007f-\u009f\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]/u,To=/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?$/u,Eo=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu,wt=new Set(["discouraged","preferred","required"]),xo=new Set(["singleDevice","multiDevice"]),Rt=new Set(["ble","cable","hybrid","internal","nfc","smart-card","usb"]),kt=new Set(["hybrid","security-key","client-device"]),Io=new Set(["none","indirect","direct","enterprise"]),Po=new Set(["fido-u2f","packed","android-safetynet","android-key","tpm","apple","none"]),Do=new Set(["platform","cross-platform"]),Co=new Set(["discouraged","preferred","required"]),vo=new Set([-8,-7,-257]);function St(e){let t=_(e,At,Ot);return {challenge:zt(t.challenge),...S("timeout",vt(t.timeout)),...S("rpId",_t(t.rpId)),...S("allowCredentials",Ct(t.allowCredentials)),...S("userVerification",Z(t.userVerification,wt)),...S("hints",fe(t.hints,kt)),...S("extensions",Ut(t.extensions))}}function Tt(e){let t=_(e,At,Ot);return {challenge:zt(t.challenge),rp:Uo(t.rp),user:zo(t.user),pubKeyCredParams:_o(t.pubKeyCredParams),...S("timeout",vt(t.timeout)),...S("excludeCredentials",Ct(t.excludeCredentials)),...S("authenticatorSelection",No(t.authenticatorSelection)),...S("attestation",Z(t.attestation,Io)),...S("attestationFormats",fe(t.attestationFormats,Po)),...S("hints",fe(t.hints,kt)),...S("extensions",Ut(t.extensions))}}function Et(e){let t=p(e),n=ue(t.session),o=D(t.user);return n.userId!==o.id&&d(),{session:n,user:o}}function Le(e){let t=p(e),n=t.counter;(!Number.isSafeInteger(n)||n<0)&&d();let o=Me(t.deviceType,xo),i=b(t.backedUp);return i&&o!=="multiDevice"&&d(),{id:G(t.id,ht),...Fo(t),publicKey:Lo(t.publicKey,bo),userId:G(t.userId,ht),credentialID:ge(t.credentialID,bt),counter:n,deviceType:o,backedUp:i,...Vo(t),createdAt:k(t.createdAt),...qo(t)}}function xt(e,t,n){let o=Le(e);return (o.credentialID!==t||(n===void 0?o.name!==void 0&&o.name!==null:o.name!==n))&&d(),o}function It(e){(!Array.isArray(e)||e.length>yt)&&d();let t=e.map(Le);return me(t.map(n=>n.id)),me(t.map(n=>n.credentialID)),t.length>1&&t.some(n=>n.userId!==t[0]?.userId)&&d(),t}function Pt(e,t,n){let o=p(e),i=Le(o.passkey);return (i.id!==t||i.name!==n)&&d(),{passkey:i}}function Dt(e){return p(e).status!==true&&d(),{status:true}}function Uo(e){let t=p(e);return {name:_e(t.name,ze),...S("id",_t(t.id))}}function zo(e){let t=p(e);return {id:ge(t.id,128,1,64),name:_e(t.name,ze),displayName:_e(t.displayName,ze)}}function _o(e){(!Array.isArray(e)||e.length===0||e.length>Ne)&&d();let t=e.map(n=>{let o=p(n);return (o.type!=="public-key"||!Number.isSafeInteger(o.alg)||!vo.has(o.alg))&&d(),{type:"public-key",alg:o.alg}});return Ko(t.map(n=>n.alg)),t}function Ct(e){if(e===void 0)return;(!Array.isArray(e)||e.length>yt)&&d();let t=e.map(n=>{let o=p(n);return o.type!=="public-key"&&d(),{type:"public-key",id:ge(o.id,bt),...S("transports",fe(o.transports,Rt))}});return me(t.map(n=>n.id)),t}function No(e){if(e===void 0)return;let t=p(e);t.requireResidentKey!==void 0&&typeof t.requireResidentKey!="boolean"&&d();let n=Z(t.residentKey,Co);return t.requireResidentKey!==void 0&&n!==void 0&&t.requireResidentKey!==(n==="required")&&d(),{...S("authenticatorAttachment",Z(t.authenticatorAttachment,Do)),...S("residentKey",n),...S("requireResidentKey",t.requireResidentKey),...S("userVerification",Z(t.userVerification,wt))}}function vt(e){return e!==void 0&&(typeof e!="number"||!Number.isFinite(e)||e<0||e>wo)&&d(),e}function Ut(e){return e===void 0?void 0:_(e,Ao,Oo)}function fe(e,t){if(e===void 0)return;(!Array.isArray(e)||e.length>Ne)&&d();let n=e.map(o=>Me(o,t));return me(n),n}function Z(e,t){if(e!==void 0)return Me(e,t)}function zt(e){return ge(e,Math.ceil(gt*4/3),yo,gt)}function ge(e,t,n=1,o=Number.POSITIVE_INFINITY){let i=G(e,t),a=i.length%4,r=Mo(i.at(-1)??""),s=Math.floor(i.length*3/4);return (!Ro.test(i)||a===1||a===2&&(r&15)!==0||a===3&&(r&3)!==0||s<n||s>o)&&d(),i}function G(e,t){let n=w(e);return (n.length===0||n.length>t)&&d(),n}function _e(e,t){let n=G(e,t);return So.test(n)&&d(),n}function _t(e){if(e===void 0)return;let t=G(e,253);return t!=="localhost"&&(t.endsWith(".")||!t.includes(".")||t.split(".").some(n=>!To.test(n)))&&d(),t}function Lo(e,t){let n=G(e,t),o=n.endsWith("=="),i=!o&&n.endsWith("="),a=n.at(o?-3:i?-2:-1)??"",r=Nt(a);return (n.length%4!==0||!ko.test(n)||o&&(r&15)!==0||i&&(r&3)!==0)&&d(),n}function Mo(e){return Nt(e,true)}function Nt(e,t=false){return (t?"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_":"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/").indexOf(e)}function Fo(e){let t=R(e,"name");return t===void 0?{}:(t!==null&&!Ue(t)&&d(),{name:t})}function Vo(e){let t=R(e,"transports");if(t==null||t==="")return t===void 0?{}:{transports:t};let n=t.split(",");return (n.length>Ne||n.some(o=>!Rt.has(o))||new Set(n).size!==n.length)&&d(),{transports:t}}function qo(e){let t=R(e,"aaguid");return t==null?t===void 0?{}:{aaguid:null}:(Eo.test(t)||d(),{aaguid:t})}function Me(e,t){let n=w(e);return t.has(n)||d(),n}function S(e,t){return t===void 0?{}:{[e]:t}}function me(e){new Set(e).size!==e.length&&d();}function Ko(e){new Set(e).size!==e.length&&d();}function Vt(e,t){let n=new Map;return {async signIn(o={},i){let a=await e.request("/passkey/generate-authenticate-options");if(!a.data)return Mt(a.error);let r;try{r=St(a.data);}catch{return Lt()}let s;try{s=await lt({optionsJSON:r,useBrowserAutofill:o.autoFill});}catch(m){return Ft(m,"AUTH_CANCELLED","Passkey authentication was cancelled.")}let{clientExtensionResults:c,...l}=s,u=n.get(s.id);if(u)return u;let f=(async()=>{let m=await e.request("/passkey/verify-authentication",{method:"POST",body:{response:l},fetchOptions:i,decode:Et});return m.data&&t(),m})();n.set(s.id,f);try{return await f}finally{n.get(s.id)===f&&n.delete(s.id);}},async add(o={},i){let a=de(o.name);if(!a.valid)return pe();let r=await e.request("/passkey/generate-register-options",{query:{name:a.value,authenticatorAttachment:o.authenticatorAttachment}});if(!r.data)return Mt(r.error);let s;try{s=Tt(r.data);}catch{return Lt()}let c;try{c=await st({optionsJSON:s});}catch(m){return Ft(m,"REGISTRATION_CANCELLED","Passkey registration was cancelled.")}let{clientExtensionResults:l,...u}=c,f=await e.request("/passkey/verify-registration",{method:"POST",body:{response:u,name:a.value},fetchOptions:i,decode:m=>xt(m,c.id,a.value)});return f.data&&t(),f}}}function Lt(){return {data:null,error:{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned invalid WebAuthn options."}}}function Mt(e){return {data:null,error:e??{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned no WebAuthn options."}}}function Ft(e,t,n){let o=Bo(e,"page does not have focus"),i=e instanceof y?e.code==="ERROR_CEREMONY_ABORTED":Ho(e)==="AbortError",a=t==="AUTH_CANCELLED"?"Passkey authentication could not be completed by this browser.":"Passkey registration could not be completed by this browser.";return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:o?"PASSKEY_PAGE_NOT_FOCUSED":i?t:e instanceof y?e.code:"PASSKEY_BROWSER_ERROR",message:o?"Keep this page focused while completing the passkey prompt.":i?n:a}}}function Ho(e){return e&&typeof e=="object"&&"name"in e&&typeof e.name=="string"?e.name:void 0}function Bo(e,t){let n=t.toLowerCase(),o=new Set,i=e;for(;i&&typeof i=="object"&&!o.has(i);){if(o.add(i),"message"in i&&typeof i.message=="string"&&i.message.toLowerCase().includes(n))return  true;i="cause"in i?i.cause:void 0;}return  false}function Kt(e,t){let n=new Set,o=null,i=null,a=null,r,s=h=>{u(h);};r={data:null,isPending:true,isRefetching:false,error:null,refetch:s};function c(h){r=h;for(let g of n)g();}async function l(h){return e.request("/get-session",{query:h?.query,decode:qt})}async function u(h){a?.abort();let g=new AbortController;a=g,c({...r,isPending:r.data===null&&r.error===null,isRefetching:r.data!==null});let U=await e.request("/get-session",{query:h?.query,fetchOptions:{signal:g.signal},decode:qt});a===g&&(a=null,c({data:U.data,error:U.error,isPending:false,isRefetching:false,refetch:s}));}function f(){if(typeof window>"u"||i)return;let h=()=>{u();},g=()=>{document.visibilityState==="visible"&&u();};window.addEventListener("focus",h),document.addEventListener("visibilitychange",g),typeof BroadcastChannel<"u"&&(o=new BroadcastChannel(`authowl:${t}`),o.addEventListener("message",h)),i=()=>{window.removeEventListener("focus",h),document.removeEventListener("visibilitychange",g),o?.close(),o=null,i=null;};}function m(h){return n.add(h),n.size===1&&(f(),u()),()=>{n.delete(h),n.size===0&&(a?.abort(),a=null,i?.());}}return {store:{subscribe:m,getSnapshot:()=>r},getSession:l,notifyMutation(){o?.postMessage({type:"session-changed"}),n.size>0&&u({query:{disableCookieCache:true}});}}}function qt(e){if(e===null)return null;let t=p(e);return (t.session===void 0||t.user===void 0)&&d(),{session:ue(t.session),user:D(t.user)}}function Fe(){let e=globalThis.crypto.getRandomValues(new Uint8Array(16));e[6]=e[6]&15|64,e[8]=e[8]&63|128;let t=Array.from(e,n=>n.toString(16).padStart(2,"0")).join("");return `${t.slice(0,8)}-${t.slice(8,12)}-${t.slice(12,16)}-${t.slice(16,20)}-${t.slice(20)}`}async function Ht(e,t){return e.request("/user/metadata",{fetchOptions:t,decode:jt})}async function Bt(e,t,n){return e.request("/user/metadata",{method:"PATCH",body:{expected_version:t.expectedVersion,unsafe_metadata:t.unsafeMetadata},fetchOptions:n,decode:jt})}function jt(e){let t=p(e),n=_(t.public_metadata),o=_(t.unsafe_metadata);if(!Number.isSafeInteger(t.metadata_version)||t.metadata_version<0)throw new TypeError("Invalid AuthOwl metadata response");return {publicMetadata:n,unsafeMetadata:o,metadataVersion:t.metadata_version}}function Gt(e,t){let{post:n,mutation:o}=J(e,t);return {getMetadata:i=>Ht(e,i),updateUnsafeMetadata:(i,a)=>Bt(e,i,a),updateProfile:(i,a)=>o(n("/update-user",i,a,ee)),changeEmail:(i,a)=>o(n("/change-email",i,a,ee)),changePassword:(i,a)=>o(n("/change-password",i,a,jo)),listSessions:i=>e.request("/list-sessions",{fetchOptions:i,decode:Jo}),revokeSession:({sessionId:i},a)=>o(n("/revoke-session",{sessionId:i},a,ee)),revokeOtherSessions:i=>o(n("/revoke-other-sessions",{},i,ee)),listSocialAccounts:async i=>{let a=await e.request("/list-accounts",{fetchOptions:i,decode:Go});if(!a.data)return {data:null,error:a.error};let r=a.data.length>1;return {...a,data:a.data.filter(s=>s.providerId!=="credential").map(s=>({...s,canUnlink:r}))}},linkSocial:(i,a)=>n("/link-social",i,a,Wo),unlinkSocial:(i,a)=>o(n("/unlink-account",i,a,ee)),delete:(i={},a)=>o(n("/delete-user",i,a,$o))}}function ee(e){let t=p(e);return {status:b(t.status)}}function jo(e){let t=p(e);return {user:D(t.user)}}function Jo(e){return Array.isArray(e)||d(),e.map(t=>{let n=p(t);return {id:w(n.id),userId:w(n.userId),createdAt:k(n.createdAt),updatedAt:k(n.updatedAt),expiresAt:k(n.expiresAt),...Jt("ipAddress",R(n,"ipAddress")),...Jt("userAgent",R(n,"userAgent"))}})}function Go(e){return Array.isArray(e)||d(),e.map(t=>{let n=p(t);return {id:w(n.id),userId:w(n.userId),providerId:w(n.providerId),accountId:w(n.accountId),scopes:ce(n.scopes),createdAt:k(n.createdAt),updatedAt:k(n.updatedAt)}})}function Wo(e){let t=p(e);return {url:w(t.url),redirect:b(t.redirect)}}function $o(e){let t=p(e);return {success:b(t.success),message:w(t.message)}}function Jt(e,t){return t===void 0?{}:{[e]:t}}function he(e,t){return !e||!t?false:e.permissions.includes(t)}function Wt(e,t){return !e||!t?false:e.teams?.includes(t)??false}function Ae(e,t){if(!e)return  false;let{role:n,permission:o,teamId:i}=t;return !(n===void 0&&o===void 0&&i===void 0||n!==void 0&&e.role!==n||o!==void 0&&!e.permissions.includes(o)||i!==void 0&&!Wt(e,i))}function Yo(e){return {has:t=>Ae(e,t),hasPermission:t=>he(e,t.permission)}}var Xo=new Set(["pending","accepted","rejected","canceled"]),$t=1e4;function W(e,t,n){let o=p(e),i={id:O(o.id),name:O(o.name),slug:O(o.slug),createdAt:k(o.createdAt),...Oe("logo",R(o,"logo")),...Oe("metadata",o.metadata===void 0?void 0:ve(o.metadata))};return M(i.id,t),M(i.slug,n),i}function Yt(e){return F(e,W)}function Ve(e,t,n){return e===null?null:(t===null&&d(),W(e,t,n))}function Xt(e,t,n){if(e===null)return null;let o=p(e),i=W(o,t,n);return {...i,members:F(o.members,a=>dn(a,i.id)),invitations:F(o.invitations,a=>N(a,void 0,i.id))}}function Qt(e,t){let n=F(e,o=>ln(o));return ye(n.map(o=>o.organizationId),t),n}function Zt(e,t,n){return e===null?null:(t===null&&d(),ln(e,t,n))}function en(e,t){let n=p(e);return (!Number.isSafeInteger(n.total)||n.total<0)&&d(),{members:Qo(n.members,t),total:n.total}}function N(e,t,n){let o=p(e),i=O(o.status);Xo.has(i)||d();let a={id:O(o.id),organizationId:O(o.organizationId),email:O(o.email),role:O(o.role),status:i,inviterId:O(o.inviterId),expiresAt:k(o.expiresAt),createdAt:k(o.createdAt)};return M(a.id,t),M(a.organizationId,n),a}function tn(e,t){let n=F(e,o=>N(o));return ye(n.map(o=>o.organizationId),t),n}function nn(e){return F(e,t=>{let n=p(t);return {...N(n),organizationName:O(n.organizationName)}})}function on(e,t){let n=p(e);return {...N(n,t),organizationName:O(n.organizationName),organizationSlug:O(n.organizationSlug),inviterEmail:O(n.inviterEmail)}}function rn(e,t){let n=p(e),o=N(n.invitation,t);return {invitation:o,member:$(n.member,void 0,o.organizationId)}}function an(e,t){let n=p(e);return n.member!==null&&d(),{invitation:n.invitation===null?null:N(n.invitation,t),member:null}}function sn(e,t){return e===null?null:N(e,t)}function cn(e,t,n){let o=p(e);return {member:$(o.member,n,t)}}function $(e,t,n){let o=p(e),i={id:O(o.id),organizationId:O(o.organizationId),userId:O(o.userId),role:O(o.role),createdAt:k(o.createdAt),...o.user===void 0?{}:{user:pn(o.user)}};return M(i.id,t),M(i.organizationId,n),i}function un(e,t){let n=F(e,o=>{let i=p(o);return {organizationId:O(i.organizationId),data:{role:O(i.role),...Oe("permission",i.permission===void 0?void 0:Zo(i.permission))}}});return ye(n.map(o=>o.organizationId),t),n.map(o=>o.data)}function ln(e,t,n){let o=p(e),i=o.updatedAt,a={id:O(o.id),name:O(o.name),organizationId:O(o.organizationId),createdAt:k(o.createdAt),...i===void 0?{}:{updatedAt:k(i)}};return M(a.id,t),M(a.organizationId,n),a}function dn(e,t){let n=p(e);return {...$(n,void 0,t),user:pn(n.user)}}function Qo(e,t){let n=F(e,o=>dn(o));return ye(n.map(o=>o.organizationId),t),n}function Zo(e){let t=p(e),n={};for(let[o,i]of Object.entries(t))(o==="__proto__"||o==="constructor"||o==="prototype"||o.length===0||o.length>$t||!Array.isArray(i))&&d(),n[o]=i.map(a=>O(a));return n}function O(e){let t=w(e);return (t.length===0||t.length>$t)&&d(),t}function M(e,t){t!==void 0&&e!==t&&d();}function ye(e,t){let n=t??e[0];n!==void 0&&e.some(o=>o!==n)&&d();}function pn(e){let t=p(e);return {id:O(t.id),name:O(t.name),email:O(t.email),...Oe("image",R(t,"image"))}}function F(e,t){return Array.isArray(e)||d(),e.map(n=>t(n))}function Oe(e,t){return t===void 0?{}:{[e]:t}}function fn(e,t,n=()=>null){let{post:o,mutation:i}=J(e,t),a=(r,s,c,l)=>e.request(r,{query:s,fetchOptions:c,decode:l});return {create:(r,s)=>i(o("/organization/create",r,s,W)),list:r=>a("/organization/list",void 0,r,Yt),get:(r={},s)=>a("/organization/get-full-organization",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,membersLimit:r.membersLimit},s,c=>Xt(c,r.organizationId,r.organizationSlug)),setActive:(r,s)=>i(o("/organization/set-active",r,s,c=>Ve(c,r.organizationId,r.organizationSlug))),listTeams:(r={},s)=>a("/organization/list-teams",{organizationId:r.organizationId},s,c=>Qt(c,r.organizationId)),setActiveTeam:(r,s)=>i(o("/organization/set-active-team",r,s,c=>Zt(c,r.teamId))),update:(r,s)=>i(o("/organization/update",r,s,c=>Ve(c,r.organizationId))),delete:(r,s)=>i(o("/organization/delete",r,s,c=>W(c,r.organizationId))),listMembers:(r={},s)=>a("/organization/list-members",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,limit:r.limit,offset:r.offset,sortBy:r.sortBy,sortDirection:r.sortDirection,filterField:r.filterField,filterValue:r.filterValue,filterOperator:r.filterOperator},s,c=>en(c,r.organizationId)),inviteMember:(r,s)=>i(o("/organization/invite-member",r,s,c=>N(c,void 0,r.organizationId))),listInvitations:(r={},s)=>a("/organization/list-invitations",{organizationId:r.organizationId},s,c=>tn(c,r.organizationId)),listUserInvitations:r=>a("/organization/list-user-invitations",void 0,r,nn),getInvitation:(r,s)=>a("/organization/get-invitation",{id:r.id},s,c=>on(c,r.id)),acceptInvitation:(r,s)=>i(o("/organization/accept-invitation",r,s,c=>rn(c,r.invitationId))),rejectInvitation:(r,s)=>i(o("/organization/reject-invitation",r,s,c=>an(c,r.invitationId))),cancelInvitation:(r,s)=>i(o("/organization/cancel-invitation",r,s,c=>sn(c,r.invitationId))),removeMember:(r,s)=>i(o("/organization/remove-member",r,s,c=>cn(c,r.organizationId,r.memberIdOrEmail.includes("@")?void 0:r.memberIdOrEmail))),updateMemberRole:(r,s)=>i(o("/organization/update-member-role",r,s,c=>$(c,r.memberId,r.organizationId))),leave:(r,s)=>i(o("/organization/leave",r,s,c=>$(c,void 0,r.organizationId))),listRoles:(r={},s)=>a("/organization/list-roles",{organizationId:r.organizationId},s,c=>un(c,r.organizationId)),has:r=>Ae(n(),r),hasPermission:r=>he(n(),r.permission)}}var mn=4096,ei=4096,ti=100,ni=256,oi=16,ii=64;function Ke(e){let t=p(e);return t.twoFactorRedirect===true?((t.user!==void 0||t.redirect!==void 0||t.url!==void 0)&&d(),{twoFactorRedirect:true,...t.twoFactorMethods===void 0?{}:{twoFactorMethods:Cn(t.twoFactorMethods,oi,ii)}}):(t.twoFactorRedirect!==void 0&&d(),{redirect:b(t.redirect),...ci(t,"url"),user:D(t.user)})}function gn(e){let t=p(e);return {user:D(t.user)}}function hn(e){let t=p(e);return {sessionCreated:b(t.sessionCreated),user:D(t.user)}}function An(e,t){let n=p(e),o=b(n.redirect);n.user===null&&d();let i=n.user!==void 0&&n.user!==null,a=n.url!==void 0&&n.url!==null;return o?((i||!a)&&d(),{redirect:true,url:qe(n.url,t)}):(i===a&&d(),i?{redirect:false,user:D(n.user)}:{redirect:false,url:qe(n.url,t)})}function On(e,t){let n=p(e);return (n.redirect!==true||n.user!==void 0)&&d(),{redirect:true,url:qe(n.url,t)}}function yn(e){return {status:b(p(e).status)}}function bn(e){return {success:b(p(e).success)}}function wn(e){return p(e).status!=="pending"&&d(),{status:"pending"}}function Rn(e){let t=p(e);return (t.status!==true||t.sessionCreated!==true)&&d(),{status:true,sessionCreated:true,user:ri(t.user)}}function He(e){return {status:b(p(e).status)}}function kn(e){return {status:b(p(e).status)}}function Sn(e){let t=p(e);return {status:b(t.status),user:D(t.user)}}function Tn(e){return {success:b(p(e).success)}}function En(e){let t=p(e);return {totpURI:si(t.totpURI),backupCodes:Dn(t.backupCodes)}}function xn(e){return {status:b(p(e).status)}}function be(e){return p(e).status!==true&&d(),{status:true}}function In(e){return {status:b(p(e).status)}}function Pn(e){let t=p(e);return t.status!==void 0&&t.status!==true&&d(),{backupCodes:Dn(t.backupCodes)}}function ri(e){let t=p(e);return {id:Y(t.id,512),...ui(t,"name",1024),phoneNumber:Y(t.phoneNumber,64),phoneNumberVerified:b(t.phoneNumberVerified),...t.createdAt===void 0?{}:{createdAt:k(t.createdAt)},...t.updatedAt===void 0?{}:{updatedAt:k(t.updatedAt)}}}function qe(e,t){let n=Y(e,mn);/[\u0000-\u0020\u007f]/u.test(n)&&d();let o;try{o=new URL(n);}catch{return d()}return (o.username||o.password)&&d(),o.protocol==="https:"||t&&o.protocol==="http:"&&ai(o.hostname)?o.href:d()}function ai(e){let t=e.toLowerCase();return t==="localhost"||t==="127.0.0.1"||t==="[::1]"}function si(e){let t=Y(e,ei),n;try{n=new URL(t);}catch{return d()}let o=n.searchParams.get("secret");return (n.protocol!=="otpauth:"||n.hostname.toLowerCase()!=="totp"||n.username||n.password||n.hash||o===null||o.length===0||o.length>512||/\s/u.test(o))&&d(),t}function Dn(e){return Cn(e,ti,ni)}function Cn(e,t,n){(!Array.isArray(e)||e.length===0||e.length>t)&&d();let o=e.map(i=>Y(i,n));return o.some(i=>i.trim().length===0)&&d(),new Set(o).size!==o.length&&d(),o}function Y(e,t){let n=w(e);return (n.length===0||n.length>t)&&d(),n}function ci(e,t){let n=e[t];return n==null?{}:{[t]:Y(n,mn)}}function ui(e,t,n){let o=R(e,t);return o===void 0?{}:(o!==null&&o.length>n&&d(),{[t]:o})}function vn(e,t=()=>{}){let n=oe(e),o=Kt(n,e.decoded.projectId),i=Vt(n,o.notifyMutation),a=()=>{o.notifyMutation(),t();},{post:r,mutation:s}=J(n,a),c=e.decoded.env==="test";return {sessionStore:o.store,getSession:o.getSession,account:Gt(n,a),organization:fn(n,a,()=>o.store.getSnapshot().data?.session.membership??null),signIn:{email:(l,u)=>s(r("/sign-in/email",l,u,Ke),f=>!("twoFactorRedirect"in f)),username:(l,u)=>s(r("/sign-in/username",l,u,Ke),f=>!("twoFactorRedirect"in f)),social:async(l,u)=>{let f=await s(r("/sign-in/social",l,u,m=>An(m,c)),m=>"user"in m);return f.error!==null||f.data===null||"url"in f.data&&f.data.redirect&&!l.disableRedirect&&typeof window<"u"&&window.location.assign(f.data.url),f},sso:async(l,u)=>{let f=await r("/sign-in/sso",l,u,m=>On(m,c));return f.error!==null||f.data===null||typeof window<"u"&&window.location.assign(f.data.url),f},magicLink:(l,u)=>r("/sign-in/magic-link",l,u,yn),emailOtp:(l,u)=>s(r("/sign-in/email-otp",l,u,gn)),passkey:(l,u)=>i.signIn(l,u)},signUp:{email:(l,u)=>s(r("/sign-up/email",l,u,hn),f=>f.sessionCreated)},emailOtp:{sendVerificationOtp:(l,u)=>r("/email-otp/send-verification-otp",l,u,bn),verifyEmail:(l,u)=>s(r("/email-otp/verify-email",l,u,Sn))},phoneOtp:{start:(l,u)=>r("/phone-otp/start",{...l,idempotencyKey:l.idempotencyKey??Fe()},u,wn),verify:(l,u)=>s(r("/phone-otp/verify",l,u,Rn))},requestPasswordReset:(l,u)=>r("/request-password-reset",l,u,He),resetPassword:(l,u)=>r("/reset-password",l,u,He),sendVerificationEmail:(l,u)=>r("/send-verification-email",l,u,kn),passkey:{addPasskey:(l,u)=>i.add(l,u),listUserPasskeys:()=>n.request("/passkey/list-user-passkeys",{decode:It}),updatePasskey:async(l,u)=>{let f=de(l.name);if(!f.valid||f.value===void 0)return pe();let m=f.value;return r("/passkey/update-passkey",{...l,name:m},u,h=>Pt(h,l.id,m))},deletePasskey:(l,u)=>r("/passkey/delete-passkey",l,u,Dt)},twoFactor:{enable:(l,u)=>r("/two-factor/enable",l,u,En),disable:(l,u)=>s(r("/two-factor/disable",l,u,xn),f=>f.status),verifyTotp:(l,u)=>s(r("/two-factor/verify-totp",l,u,be)),verifyBackupCode:(l,u)=>s(r("/two-factor/verify-backup-code",l,u,be)),sendOtp:(l={},u)=>r("/two-factor/send-otp",l,u,In),verifyOtp:(l,u)=>s(r("/two-factor/verify-otp",l,u,be)),generateBackupCodes:(l,u)=>r("/two-factor/generate-backup-codes",l,u,Pn)},signOut:l=>s(n.request("/sign-out",{method:"POST",body:{},fetchOptions:l,decode:Tn}),u=>u.success)}}var we=class extends Error{status;requestId;constructor(t,n,o){super(`${t} request failed with status ${n.status}.`),this.name="AuthOwlHttpError",this.status=n.status,this.requestId=o;}};function B(e,t,n={}){let o=new Headers(n.init?.headers);return o.set("x-publishable-key",e.publishableKey),ne({fetchImpl:e.fetch??fetch,url:t,init:{...n.init,headers:o},allowHttpLoopback:e.decoded.env==="test",...n.timeoutMs===void 0?{}:{timeoutMs:n.timeoutMs},...n.maxResponseBytes===void 0?{}:{maxResponseBytes:n.maxResponseBytes},...n.decode===void 0?{}:{decode:n.decode}})}function j(e,t){if(!e.response.ok)throw new we(t,e.response,e.requestId);return e.data}function zn(e){return `${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}/consent`}async function Be(e){let t=await B(e,zn(e),{init:{method:"GET",credentials:"include"},maxResponseBytes:65536,decode:li});return t.response.status===401?{required:false}:j(t,"consent status")}async function je(e,t){if(!Number.isSafeInteger(t)||t<1)throw new TypeError("Consent version must be a positive integer.");return j(await B(e,zn(e),{init:{method:"POST",headers:{"content-type":"application/json"},credentials:"include",body:JSON.stringify({version:t})},maxResponseBytes:64*1024,decode:di}),"consent accept")}function li(e){let t=p(e),n=b(t.required),o=pi(t.needsConsent),i=_n(t.version),a=Un(t.termsUrl),r=Un(t.privacyUrl);return {required:n,...o===void 0?{}:{needsConsent:o},...i===void 0?{}:{version:i},...a===void 0?{}:{termsUrl:a},...r===void 0?{}:{privacyUrl:r}}}function di(e){let t=p(e),n=_n(t.version);return {ok:b(t.ok),...n===void 0?{}:{version:n}}}function pi(e){if(e===void 0||typeof e=="boolean")return e;throw new TypeError("Invalid consent response.")}function _n(e){if(e===void 0||Number.isSafeInteger(e)&&e>=1)return e;throw new TypeError("Invalid consent response.")}function Un(e){if(e===void 0||typeof e=="string"&&e.length<=4096)return e;throw new TypeError("Invalid consent response.")}var fi=30;function mi(e){return typeof e?.exp=="number"?e.exp:null}function gi(e){let t=e.split(".")[1];if(!t)return null;try{let n=t.replace(/-/g,"+").replace(/_/g,"/"),o=JSON.parse(atob(n));return typeof o=="object"&&o!==null?o:null}catch{return null}}function Je(e){let t=new Map;async function n(a={}){let r=a.template===void 0?null:a.template.trim().toLowerCase();if(r==="")throw new TypeError("Template missing");let s=r??"",c=t.get(s);c||(c={activeKey:null,cachedByKey:new Map,inflight:null,sequence:0},t.set(s,c));let l=a.forceRefresh===true;if(!l){let g=c.activeKey?c.cachedByKey.get(c.activeKey):null;if(g&&g.exp-Date.now()/1e3>fi)return g.token;if(c.inflight)return c.inflight}let u=++c.sequence,f=()=>t.get(s)===c&&c.sequence===u,m=(async()=>{let g=r?`${e.projectBaseURL}/token/${encodeURIComponent(r)}`:`${e.projectBaseURL}/token`,U=await B(e,g,{init:{method:"GET",credentials:"include"},maxResponseBytes:64*1024,decode:q=>hi(q,r!==null)});if(U.response.status===401)return f()&&o(),null;let A=j(U,"token"),v=A.policyVersion,z=A.token,V=gi(z),X=mi(V);if(f())if(X!==null){let q=typeof V?.sub=="string"?V.sub:null,Re=typeof V?.org_id=="string"?V.org_id:null;if(!r||q){let Ye=JSON.stringify([e.projectBaseURL,q,Re,r,v]);c.cachedByKey.clear(),c.cachedByKey.set(Ye,{token:z,exp:X}),c.activeKey=Ye;}else i(c);}else i(c);return z})();if(l)return m;let h=m.finally(()=>{c.inflight===h&&(c.inflight=null);});return c.inflight=h,h}function o(){t.clear();}function i(a){a.cachedByKey.clear(),a.activeKey=null;}return {getToken:n,clear:o}}function hi(e,t){let n=p(e),o=w(n.token);if(o.length===0||o.length>32*1024)throw new TypeError("Invalid token response.");if(!t)return {token:o,policyVersion:0};let i=p(n.template);if(!Number.isSafeInteger(i.policyVersion)||i.policyVersion<1)throw new TypeError("Invalid token response.");return {token:o,policyVersion:i.policyVersion}}function Ai(e){let t=Je(e),n=vn(e,t.clear),o=oe(e,`${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}`),i=r=>(...s)=>(t.clear(),r(...s)),a={getConsentStatus:()=>Be(e),acceptConsent:r=>je(e,r),getToken:t.getToken,waitlist:{join:(r,s)=>o.request("/waitlist",{method:"POST",body:r,fetchOptions:s,credentials:"omit"})},account:{...n.account,updateUnsafeMetadata:i(n.account.updateUnsafeMetadata),updateProfile:i(n.account.updateProfile),changeEmail:i(n.account.changeEmail),changePassword:i(n.account.changePassword),revokeSession:i(n.account.revokeSession),delete:i(n.account.delete)},signIn:{email:i(n.signIn.email),username:i(n.signIn.username),social:i(n.signIn.social),sso:n.signIn.sso,magicLink:n.signIn.magicLink,emailOtp:i(n.signIn.emailOtp),passkey:i(n.signIn.passkey)},signUp:{email:i(n.signUp.email)},emailOtp:{...n.emailOtp,verifyEmail:i(n.emailOtp.verifyEmail)},twoFactor:{enable:n.twoFactor.enable,disable:i(n.twoFactor.disable),verifyTotp:i(n.twoFactor.verifyTotp),verifyBackupCode:i(n.twoFactor.verifyBackupCode),sendOtp:n.twoFactor.sendOtp,verifyOtp:i(n.twoFactor.verifyOtp),generateBackupCodes:n.twoFactor.generateBackupCodes},phoneOtp:{start:n.phoneOtp.start,verify:i(n.phoneOtp.verify)},signOut:i(n.signOut)};return {...n,...a}}async function Oi(e){let n=`${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}/public-config`;return j(await B(e,n,{init:{method:"GET",credentials:"omit"},maxResponseBytes:256*1024,decode:o=>yi(o,e)}),"public-config")}function yi(e,t){let n=_(e),o=n.environmentId,i=n.environmentType,a=`${new URL(t.apiUrl).origin}/api/projects/${t.decoded.projectId}/auth`;if(typeof n.applicationId!="string"||!bi(n.applicationId)||o!==t.decoded.projectId||i!=="development"&&i!=="production"||n.authBaseUrl!==a)throw C();let r=x(n.branding),s=x(n.legal);if(!Ge(n.enabledMethods,64)||!Ge(n.socialProviders,64)||!Ln(r,["appName","logoUrl","primaryColor"])||r.theme!==void 0&&r.theme!=="light"&&r.theme!=="dark"&&r.theme!=="system"||!Ln(s,["termsUrl","privacyUrl"])||!Number.isSafeInteger(s.version)||s.version<0||typeof s.required!="boolean")throw C();if(n.socialProviderClientIds!==void 0){let c=x(n.socialProviderClientIds);if(Object.keys(c).length>64||Object.values(c).some(l=>typeof l!="string"||l.length>2048))throw C()}if(!L(n,["requireEmailVerification","twoFactor","mfaRequired","accountDeletion","organizations","sso","badge"])||!Nn(n.turnstileSiteKey)||!Nn(n.authTurnstileSiteKey)||typeof n.locale!="string"||n.locale.length===0||n.locale.length>64||!Number.isSafeInteger(n.configVersion)||n.configVersion<0)throw C();if(n.jwtIssuer!==null){let c=x(n.jwtIssuer);if(c.issuer!==a||c.jwksUrl!==`${a}/jwks`||c.aud!==t.decoded.projectId)throw C()}if(n.signUp!==void 0){let c=x(n.signUp).mode;if(typeof c!="string"||!["open","restricted","allowlist","waitlist"].includes(c))throw C()}if(n.authentication!==void 0&&wi(n.authentication),n.emailVerification!==void 0){let c=x(n.emailVerification);if(!L(c,["required"])||c.method!=="link"&&c.method!=="code")throw C()}if(n.userModel!==void 0&&!L(x(n.userModel),["requireEmail","firstLastName","emailChange","accountDeletion"]))throw C();if(n.mfa!==void 0){let c=x(n.mfa);if(!L(c,["totp","required","backupCodes"])||(c.required===true||c.backupCodes===true)&&c.totp!==true)throw C()}return n}function bi(e){return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(e)}function C(){return new TypeError("public-config returned an invalid response")}function x(e){if(!e||typeof e!="object"||Array.isArray(e))throw C();return e}function Nn(e){return e===null||typeof e=="string"&&e.length<=4096}function wi(e){let t=x(e),n=x(t.email),o=x(t.password),i=o.minLength!==void 0||o.maxLength!==void 0;if(!L(n,["signUp"])||!Ge(n.signIn,3)||n.signIn.some(a=>a!=="password"&&a!=="magic_link"&&a!=="email_otp")||!L(x(t.phone),["signUp","signIn"])||!L(o,["signUp","add"])||i&&(!Number.isSafeInteger(o.minLength)||!Number.isSafeInteger(o.maxLength)||o.minLength<1||o.maxLength>4096||o.minLength>o.maxLength)||!L(x(t.passkey),["signIn","add"])||!L(x(t.username),["collectOnSignUp","signIn"]))throw C()}function L(e,t){return t.every(n=>typeof e[n]=="boolean")}function Ln(e,t){return t.every(n=>e[n]===void 0||typeof e[n]=="string"&&e[n].length<=4096)}function Ge(e,t){return Array.isArray(e)&&e.length<=t&&e.every(n=>typeof n=="string"&&n.length<=128)&&new Set(e).size===e.length}var te=class extends Error{constructor(n,o){super(n);this.cause=o;this.name="AuthOwlError";}cause},We=class extends te{constructor(n,o){super(`Rate limited. Retry after ${n}s.`,o);this.retryAfterSeconds=n;this.name="RateLimitedError";}retryAfterSeconds},$e=class extends te{constructor(t="invalid publishable key",n){super(t,n),this.name="InvalidKeyError";}};var Mn=["en","ar"];function Ri(e){return e==="ar"?"rtl":"ltr"}function ki(e){return typeof e=="string"&&Mn.includes(e)}
+`,t);}function ct(){if(!H())return De.stubThis(new Promise(t=>t(false)));let e=globalThis.PublicKeyCredential;return e?.isConditionalMediationAvailable===void 0?De.stubThis(new Promise(t=>t(false))):De.stubThis(e.isConditionalMediationAvailable())}var De={stubThis:e=>e};function ut({error:e,options:t}){let{publicKey:n}=t;if(!n)throw Error("options was missing required publicKey property");if(e.name==="AbortError"){if(t.signal instanceof AbortSignal)return new y({message:"Authentication ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:e})}else {if(e.name==="NotAllowedError")return new y({message:e.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:e});if(e.name==="SecurityError"){let o=globalThis.location.hostname;if(re(o)){if(n.rpId!==o)return new y({message:`The RP ID "${n.rpId}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:e})}else return new y({message:`${globalThis.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:e})}else if(e.name==="UnknownError")return new y({message:"The authenticator was unable to process the specified options, or could not create a new assertion signature",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:e})}return e}async function lt(e){!e.optionsJSON&&e.challenge&&(console.warn("startAuthentication() was not called correctly. It will try to continue with the provided options, but this call should be refactored to use the expected call structure instead. See https://simplewebauthn.dev/docs/packages/browser#typeerror-cannot-read-properties-of-undefined-reading-challenge for more information."),e={optionsJSON:e});let{optionsJSON:t,useBrowserAutofill:n=false,verifyBrowserAutofillInput:o=true}=e;if(!H())throw new Error("WebAuthn is not supported in this browser");let i;t.allowCredentials?.length!==0&&(i=t.allowCredentials?.map(ie));let a={...t,challenge:K(t.challenge),allowCredentials:i},r={};if(n){if(!await ct())throw Error("Browser does not support WebAuthn autofill");if(document.querySelectorAll("input[autocomplete$='webauthn']").length<1&&o)throw Error('No <input> with "webauthn" as the only or last value in its `autocomplete` attribute was detected');r.mediation="conditional",a.allowCredentials=[];}r.publicKey=a,r.signal=ae.createNewAbortSignal();let s;try{s=await navigator.credentials.get(r);}catch(h){throw ut({error:h,options:r})}if(!s)throw new Error("Authentication was not completed");let{id:c,rawId:l,response:u,type:f}=s,m;return u.userHandle&&(m=I(u.userHandle)),{id:c,rawId:I(l),response:{authenticatorData:I(u.authenticatorData),clientDataJSON:I(u.clientDataJSON),signature:I(u.signature),userHandle:m},type:f,clientExtensionResults:s.getClientExtensionResults(),authenticatorAttachment:se(s.authenticatorAttachment)}}var mo=new Set(["__proto__","constructor","prototype"]);function p(e){(!e||typeof e!="object"||Array.isArray(e))&&d();let t=Object.getPrototypeOf(e);return t!==Object.prototype&&t!==null&&d(),e}function w(e){return typeof e!="string"&&d(),e}function b(e){return typeof e!="boolean"&&d(),e}function k(e){return (!(e instanceof Date)||Number.isNaN(e.getTime()))&&d(),e}function ce(e){return (!Array.isArray(e)||!e.every(t=>typeof t=="string"))&&d(),[...e]}function R(e,t){let n=e[t];return n==null||typeof n=="string"?n:d()}function dt(e,t){let n=e[t];return n==null||typeof n=="boolean"?n:d()}function D(e){let t=p(e),n=t.email;return n!==null&&typeof n!="string"&&d(),{id:w(t.id),email:n,emailVerified:b(t.emailVerified),createdAt:k(t.createdAt),updatedAt:k(t.updatedAt),...P("phoneNumber",R(t,"phoneNumber")),...P("username",R(t,"username")),...P("displayUsername",R(t,"displayUsername")),...P("firstName",R(t,"firstName")),...P("lastName",R(t,"lastName")),...P("name",R(t,"name")),...P("image",R(t,"image")),...P("twoFactorEnabled",dt(t,"twoFactorEnabled"))}}function ue(e){let t=p(e),n=t.membership;return {id:w(t.id),userId:w(t.userId),expiresAt:k(t.expiresAt),...P("activeOrganizationId",R(t,"activeOrganizationId")),...P("activeTeamId",R(t,"activeTeamId")),...P("membership",n==null?n:go(n)),...P("pendingMfaEnrollment",dt(t,"pendingMfaEnrollment"))}}function d(){throw new TypeError("AuthOwl response does not match its runtime contract.")}function _(e,t=20,n=1e4){return (!e||typeof e!="object"||Array.isArray(e))&&d(),ve(e,t,n)}function ve(e,t=20,n=1e4){return Ce(e,0,{nodes:0},t,n)}function go(e){let t=p(e);return {role:w(t.role),permissions:ce(t.permissions),...t.teams===void 0?{}:{teams:ce(t.teams)}}}function Ce(e,t,n,o,i){if(n.nodes+=1,(t>o||n.nodes>i)&&d(),e===null||typeof e=="string"||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||d(),e;if(Array.isArray(e))return e.map(s=>Ce(s,t+1,n,o,i));(!e||typeof e!="object")&&d();let a=Object.getPrototypeOf(e);a!==Object.prototype&&a!==null&&d();let r={};for(let[s,c]of Object.entries(e))mo.has(s)&&d(),r[s]=Ce(c,t+1,n,o,i);return r}function P(e,t){return t===void 0?{}:{[e]:t}}var pt=new Set([1564,8206,8207,8234,8235,8236,8237,8238,8294,8295,8296,8297]),le=new Set([9,10,11,12,13,32,133,160,5760,8192,8193,8194,8195,8196,8197,8198,8199,8200,8201,8202,8232,8233,8239,8287,12288,65279]);function de(e){if(e===void 0)return {valid:true,value:void 0};for(let n of e){let o=n.codePointAt(0);if(o===void 0||mt(n,o)||ft(o)||pt.has(o))return {valid:false}}let t=ho(e);return Ue(t)?{valid:true,value:t}:{valid:false}}function Ue(e){let t=0,n,o;for(let i of e){if(t+=1,t>256)return  false;let a=i.codePointAt(0);if(a===void 0||mt(i,a)||ft(a)||pt.has(a))return  false;n??=a,o=a;}return t>0&&n!==void 0&&o!==void 0&&!le.has(n)&&!le.has(o)}function pe(){return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:"INVALID_PASSKEY_NAME",message:"Passkey names must contain 1 to 256 safe Unicode characters."}}}function ho(e){let t=0,n=e.length;for(;t<n;){let o=e.codePointAt(t);if(o===void 0||!le.has(o))break;t+=o>65535?2:1;}for(;n>t;){let o=e.codePointAt(n-1);if(o===void 0)break;let a=o>=56320&&o<=57343?n-2:n-1,r=e.codePointAt(a);if(r===void 0||!le.has(r))break;n=a;}return e.slice(t,n)}function ft(e){return e>=0&&e<=31||e>=127&&e<=159}function mt(e,t){return e.length===1&&t>=55296&&t<=57343}var At=12,Ot=5e3,Ao=8,Oo=1e3,yo=16,gt=512,yt=100,bt=8192,bo=32768,ze=1024,ht=256,Ne=64,wo=6e5,Ro=/^[A-Za-z0-9_-]+$/u,ko=/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u,So=/[\u0000-\u001f\u007f-\u009f\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]/u,To=/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?$/u,Eo=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu,wt=new Set(["discouraged","preferred","required"]),xo=new Set(["singleDevice","multiDevice"]),Rt=new Set(["ble","cable","hybrid","internal","nfc","smart-card","usb"]),kt=new Set(["hybrid","security-key","client-device"]),Io=new Set(["none","indirect","direct","enterprise"]),Po=new Set(["fido-u2f","packed","android-safetynet","android-key","tpm","apple","none"]),Do=new Set(["platform","cross-platform"]),Co=new Set(["discouraged","preferred","required"]),vo=new Set([-8,-7,-257]);function St(e){let t=_(e,At,Ot);return {challenge:zt(t.challenge),...S("timeout",vt(t.timeout)),...S("rpId",_t(t.rpId)),...S("allowCredentials",Ct(t.allowCredentials)),...S("userVerification",Z(t.userVerification,wt)),...S("hints",fe(t.hints,kt)),...S("extensions",Ut(t.extensions))}}function Tt(e){let t=_(e,At,Ot);return {challenge:zt(t.challenge),rp:Uo(t.rp),user:zo(t.user),pubKeyCredParams:_o(t.pubKeyCredParams),...S("timeout",vt(t.timeout)),...S("excludeCredentials",Ct(t.excludeCredentials)),...S("authenticatorSelection",No(t.authenticatorSelection)),...S("attestation",Z(t.attestation,Io)),...S("attestationFormats",fe(t.attestationFormats,Po)),...S("hints",fe(t.hints,kt)),...S("extensions",Ut(t.extensions))}}function Et(e){let t=p(e),n=ue(t.session),o=D(t.user);return n.userId!==o.id&&d(),{session:n,user:o}}function Le(e){let t=p(e),n=t.counter;(!Number.isSafeInteger(n)||n<0)&&d();let o=Me(t.deviceType,xo),i=b(t.backedUp);return i&&o!=="multiDevice"&&d(),{id:G(t.id,ht),...Fo(t),publicKey:Lo(t.publicKey,bo),userId:G(t.userId,ht),credentialID:ge(t.credentialID,bt),counter:n,deviceType:o,backedUp:i,...Vo(t),createdAt:k(t.createdAt),...qo(t)}}function xt(e,t,n){let o=Le(e);return (o.credentialID!==t||(n===void 0?o.name!==void 0&&o.name!==null:o.name!==n))&&d(),o}function It(e){(!Array.isArray(e)||e.length>yt)&&d();let t=e.map(Le);return me(t.map(n=>n.id)),me(t.map(n=>n.credentialID)),t.length>1&&t.some(n=>n.userId!==t[0]?.userId)&&d(),t}function Pt(e,t,n){let o=p(e),i=Le(o.passkey);return (i.id!==t||i.name!==n)&&d(),{passkey:i}}function Dt(e){return p(e).status!==true&&d(),{status:true}}function Uo(e){let t=p(e);return {name:_e(t.name,ze),...S("id",_t(t.id))}}function zo(e){let t=p(e);return {id:ge(t.id,128,1,64),name:_e(t.name,ze),displayName:_e(t.displayName,ze)}}function _o(e){(!Array.isArray(e)||e.length===0||e.length>Ne)&&d();let t=e.map(n=>{let o=p(n);return (o.type!=="public-key"||!Number.isSafeInteger(o.alg)||!vo.has(o.alg))&&d(),{type:"public-key",alg:o.alg}});return Ko(t.map(n=>n.alg)),t}function Ct(e){if(e===void 0)return;(!Array.isArray(e)||e.length>yt)&&d();let t=e.map(n=>{let o=p(n);return o.type!=="public-key"&&d(),{type:"public-key",id:ge(o.id,bt),...S("transports",fe(o.transports,Rt))}});return me(t.map(n=>n.id)),t}function No(e){if(e===void 0)return;let t=p(e);t.requireResidentKey!==void 0&&typeof t.requireResidentKey!="boolean"&&d();let n=Z(t.residentKey,Co);return t.requireResidentKey!==void 0&&n!==void 0&&t.requireResidentKey!==(n==="required")&&d(),{...S("authenticatorAttachment",Z(t.authenticatorAttachment,Do)),...S("residentKey",n),...S("requireResidentKey",t.requireResidentKey),...S("userVerification",Z(t.userVerification,wt))}}function vt(e){return e!==void 0&&(typeof e!="number"||!Number.isFinite(e)||e<0||e>wo)&&d(),e}function Ut(e){return e===void 0?void 0:_(e,Ao,Oo)}function fe(e,t){if(e===void 0)return;(!Array.isArray(e)||e.length>Ne)&&d();let n=e.map(o=>Me(o,t));return me(n),n}function Z(e,t){if(e!==void 0)return Me(e,t)}function zt(e){return ge(e,Math.ceil(gt*4/3),yo,gt)}function ge(e,t,n=1,o=Number.POSITIVE_INFINITY){let i=G(e,t),a=i.length%4,r=Mo(i.at(-1)??""),s=Math.floor(i.length*3/4);return (!Ro.test(i)||a===1||a===2&&(r&15)!==0||a===3&&(r&3)!==0||s<n||s>o)&&d(),i}function G(e,t){let n=w(e);return (n.length===0||n.length>t)&&d(),n}function _e(e,t){let n=G(e,t);return So.test(n)&&d(),n}function _t(e){if(e===void 0)return;let t=G(e,253);return t!=="localhost"&&(t.endsWith(".")||!t.includes(".")||t.split(".").some(n=>!To.test(n)))&&d(),t}function Lo(e,t){let n=G(e,t),o=n.endsWith("=="),i=!o&&n.endsWith("="),a=n.at(o?-3:i?-2:-1)??"",r=Nt(a);return (n.length%4!==0||!ko.test(n)||o&&(r&15)!==0||i&&(r&3)!==0)&&d(),n}function Mo(e){return Nt(e,true)}function Nt(e,t=false){return (t?"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_":"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/").indexOf(e)}function Fo(e){let t=R(e,"name");return t===void 0?{}:(t!==null&&!Ue(t)&&d(),{name:t})}function Vo(e){let t=R(e,"transports");if(t==null||t==="")return t===void 0?{}:{transports:t};let n=t.split(",");return (n.length>Ne||n.some(o=>!Rt.has(o))||new Set(n).size!==n.length)&&d(),{transports:t}}function qo(e){let t=R(e,"aaguid");return t==null?t===void 0?{}:{aaguid:null}:(Eo.test(t)||d(),{aaguid:t})}function Me(e,t){let n=w(e);return t.has(n)||d(),n}function S(e,t){return t===void 0?{}:{[e]:t}}function me(e){new Set(e).size!==e.length&&d();}function Ko(e){new Set(e).size!==e.length&&d();}function Vt(e,t){let n=new Map;return {async signIn(o={},i){let a=await e.request("/passkey/generate-authenticate-options");if(!a.data)return Mt(a.error);let r;try{r=St(a.data);}catch{return Lt()}let s;try{s=await lt({optionsJSON:r,useBrowserAutofill:o.autoFill});}catch(m){return Ft(m,"AUTH_CANCELLED","Passkey authentication was cancelled.")}let{clientExtensionResults:c,...l}=s,u=n.get(s.id);if(u)return u;let f=(async()=>{let m=await e.request("/passkey/verify-authentication",{method:"POST",body:{response:l},fetchOptions:i,decode:Et});return m.data&&t(),m})();n.set(s.id,f);try{return await f}finally{n.get(s.id)===f&&n.delete(s.id);}},async add(o={},i){let a=de(o.name);if(!a.valid)return pe();let r=await e.request("/passkey/generate-register-options",{query:{name:a.value,authenticatorAttachment:o.authenticatorAttachment}});if(!r.data)return Mt(r.error);let s;try{s=Tt(r.data);}catch{return Lt()}let c;try{c=await st({optionsJSON:s});}catch(m){return Ft(m,"REGISTRATION_CANCELLED","Passkey registration was cancelled.")}let{clientExtensionResults:l,...u}=c,f=await e.request("/passkey/verify-registration",{method:"POST",body:{response:u,name:a.value},fetchOptions:i,decode:m=>xt(m,c.id,a.value)});return f.data&&t(),f}}}function Lt(){return {data:null,error:{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned invalid WebAuthn options."}}}function Mt(e){return {data:null,error:e??{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned no WebAuthn options."}}}function Ft(e,t,n){let o=Bo(e,"page does not have focus"),i=e instanceof y?e.code==="ERROR_CEREMONY_ABORTED":Ho(e)==="AbortError",a=t==="AUTH_CANCELLED"?"Passkey authentication could not be completed by this browser.":"Passkey registration could not be completed by this browser.";return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:o?"PASSKEY_PAGE_NOT_FOCUSED":i?t:e instanceof y?e.code:"PASSKEY_BROWSER_ERROR",message:o?"Keep this page focused while completing the passkey prompt.":i?n:a}}}function Ho(e){return e&&typeof e=="object"&&"name"in e&&typeof e.name=="string"?e.name:void 0}function Bo(e,t){let n=t.toLowerCase(),o=new Set,i=e;for(;i&&typeof i=="object"&&!o.has(i);){if(o.add(i),"message"in i&&typeof i.message=="string"&&i.message.toLowerCase().includes(n))return  true;i="cause"in i?i.cause:void 0;}return  false}function Kt(e,t){let n=new Set,o=null,i=null,a=null,r,s=h=>{u(h);};r={data:null,isPending:true,isRefetching:false,error:null,refetch:s};function c(h){r=h;for(let g of n)g();}async function l(h){return e.request("/get-session",{query:h?.query,decode:qt})}async function u(h){a?.abort();let g=new AbortController;a=g,c({...r,isPending:r.data===null&&r.error===null,isRefetching:r.data!==null});let U=await e.request("/get-session",{query:h?.query,fetchOptions:{signal:g.signal},decode:qt});a===g&&(a=null,c({data:U.data,error:U.error,isPending:false,isRefetching:false,refetch:s}));}function f(){if(typeof window>"u"||i)return;let h=()=>{u();},g=()=>{document.visibilityState==="visible"&&u();};window.addEventListener("focus",h),document.addEventListener("visibilitychange",g),typeof BroadcastChannel<"u"&&(o=new BroadcastChannel(`authowl:${t}`),o.addEventListener("message",h)),i=()=>{window.removeEventListener("focus",h),document.removeEventListener("visibilitychange",g),o?.close(),o=null,i=null;};}function m(h){return n.add(h),n.size===1&&(f(),u()),()=>{n.delete(h),n.size===0&&(a?.abort(),a=null,i?.());}}return {store:{subscribe:m,getSnapshot:()=>r},getSession:l,notifyMutation(){o?.postMessage({type:"session-changed"}),n.size>0&&u({query:{disableCookieCache:true}});}}}function qt(e){if(e===null)return null;let t=p(e);return (t.session===void 0||t.user===void 0)&&d(),{session:ue(t.session),user:D(t.user)}}function Fe(){let e=globalThis.crypto.getRandomValues(new Uint8Array(16));e[6]=e[6]&15|64,e[8]=e[8]&63|128;let t=Array.from(e,n=>n.toString(16).padStart(2,"0")).join("");return `${t.slice(0,8)}-${t.slice(8,12)}-${t.slice(12,16)}-${t.slice(16,20)}-${t.slice(20)}`}async function Ht(e,t){return e.request("/user/metadata",{fetchOptions:t,decode:jt})}async function Bt(e,t,n){return e.request("/user/metadata",{method:"PATCH",body:{expected_version:t.expectedVersion,unsafe_metadata:t.unsafeMetadata},fetchOptions:n,decode:jt})}function jt(e){let t=p(e),n=_(t.public_metadata),o=_(t.unsafe_metadata);if(!Number.isSafeInteger(t.metadata_version)||t.metadata_version<0)throw new TypeError("Invalid AuthOwl metadata response");return {publicMetadata:n,unsafeMetadata:o,metadataVersion:t.metadata_version}}function Gt(e,t){let{post:n,mutation:o}=J(e,t);return {getMetadata:i=>Ht(e,i),updateUnsafeMetadata:(i,a)=>Bt(e,i,a),updateProfile:(i,a)=>o(n("/update-user",i,a,ee)),changeEmail:(i,a)=>o(n("/change-email",i,a,ee)),changePassword:(i,a)=>o(n("/change-password",i,a,jo)),listSessions:i=>e.request("/list-sessions",{fetchOptions:i,decode:Jo}),revokeSession:({sessionId:i},a)=>o(n("/revoke-session",{sessionId:i},a,ee)),revokeOtherSessions:i=>o(n("/revoke-other-sessions",{},i,ee)),listSocialAccounts:async i=>{let a=await e.request("/list-accounts",{fetchOptions:i,decode:Go});if(!a.data)return {data:null,error:a.error};let r=a.data.length>1;return {...a,data:a.data.filter(s=>s.providerId!=="credential").map(s=>({...s,canUnlink:r}))}},linkSocial:(i,a)=>n("/link-social",i,a,Wo),unlinkSocial:(i,a)=>o(n("/unlink-account",i,a,ee)),delete:(i={},a)=>o(n("/delete-user",i,a,$o))}}function ee(e){let t=p(e);return {status:b(t.status)}}function jo(e){let t=p(e);return {user:D(t.user)}}function Jo(e){return Array.isArray(e)||d(),e.map(t=>{let n=p(t);return {id:w(n.id),userId:w(n.userId),createdAt:k(n.createdAt),updatedAt:k(n.updatedAt),expiresAt:k(n.expiresAt),...Jt("ipAddress",R(n,"ipAddress")),...Jt("userAgent",R(n,"userAgent"))}})}function Go(e){return Array.isArray(e)||d(),e.map(t=>{let n=p(t);return {id:w(n.id),userId:w(n.userId),providerId:w(n.providerId),accountId:w(n.accountId),scopes:ce(n.scopes),createdAt:k(n.createdAt),updatedAt:k(n.updatedAt)}})}function Wo(e){let t=p(e);return {url:w(t.url),redirect:b(t.redirect)}}function $o(e){let t=p(e);return {success:b(t.success),message:w(t.message)}}function Jt(e,t){return t===void 0?{}:{[e]:t}}function he(e,t){return !e||!t?false:e.permissions.includes(t)}function Wt(e,t){return !e||!t?false:e.teams?.includes(t)??false}function Ae(e,t){if(!e)return  false;let{role:n,permission:o,teamId:i}=t;return !(n===void 0&&o===void 0&&i===void 0||n!==void 0&&e.role!==n||o!==void 0&&!e.permissions.includes(o)||i!==void 0&&!Wt(e,i))}function Yo(e){return {has:t=>Ae(e,t),hasPermission:t=>he(e,t.permission)}}var Xo=new Set(["pending","accepted","rejected","canceled"]),$t=1e4;function W(e,t,n){let o=p(e),i={id:O(o.id),name:O(o.name),slug:O(o.slug),createdAt:k(o.createdAt),...Oe("logo",R(o,"logo")),...Oe("metadata",o.metadata===void 0?void 0:ve(o.metadata))};return M(i.id,t),M(i.slug,n),i}function Yt(e){return F(e,W)}function Ve(e,t,n){return e===null?null:(t===null&&d(),W(e,t,n))}function Xt(e,t,n){if(e===null)return null;let o=p(e),i=W(o,t,n);return {...i,members:F(o.members,a=>dn(a,i.id)),invitations:F(o.invitations,a=>N(a,void 0,i.id))}}function Qt(e,t){let n=F(e,o=>ln(o));return ye(n.map(o=>o.organizationId),t),n}function Zt(e,t,n){return e===null?null:(t===null&&d(),ln(e,t,n))}function en(e,t){let n=p(e);return (!Number.isSafeInteger(n.total)||n.total<0)&&d(),{members:Qo(n.members,t),total:n.total}}function N(e,t,n){let o=p(e),i=O(o.status);Xo.has(i)||d();let a={id:O(o.id),organizationId:O(o.organizationId),email:O(o.email),role:O(o.role),status:i,inviterId:O(o.inviterId),expiresAt:k(o.expiresAt),createdAt:k(o.createdAt)};return M(a.id,t),M(a.organizationId,n),a}function tn(e,t){let n=F(e,o=>N(o));return ye(n.map(o=>o.organizationId),t),n}function nn(e){return F(e,t=>{let n=p(t);return {...N(n),organizationName:O(n.organizationName)}})}function on(e,t){let n=p(e);return {...N(n,t),organizationName:O(n.organizationName),organizationSlug:O(n.organizationSlug),inviterEmail:O(n.inviterEmail)}}function rn(e,t){let n=p(e),o=N(n.invitation,t);return {invitation:o,member:$(n.member,void 0,o.organizationId)}}function an(e,t){let n=p(e);return n.member!==null&&d(),{invitation:n.invitation===null?null:N(n.invitation,t),member:null}}function sn(e,t){return e===null?null:N(e,t)}function cn(e,t,n){let o=p(e);return {member:$(o.member,n,t)}}function $(e,t,n){let o=p(e),i={id:O(o.id),organizationId:O(o.organizationId),userId:O(o.userId),role:O(o.role),createdAt:k(o.createdAt),...o.user===void 0?{}:{user:pn(o.user)}};return M(i.id,t),M(i.organizationId,n),i}function un(e,t){let n=F(e,o=>{let i=p(o);return {organizationId:O(i.organizationId),data:{role:O(i.role),...Oe("permission",i.permission===void 0?void 0:Zo(i.permission))}}});return ye(n.map(o=>o.organizationId),t),n.map(o=>o.data)}function ln(e,t,n){let o=p(e),i=o.updatedAt,a={id:O(o.id),name:O(o.name),organizationId:O(o.organizationId),createdAt:k(o.createdAt),...i===void 0?{}:{updatedAt:k(i)}};return M(a.id,t),M(a.organizationId,n),a}function dn(e,t){let n=p(e);return {...$(n,void 0,t),user:pn(n.user)}}function Qo(e,t){let n=F(e,o=>dn(o));return ye(n.map(o=>o.organizationId),t),n}function Zo(e){let t=p(e),n={};for(let[o,i]of Object.entries(t))(o==="__proto__"||o==="constructor"||o==="prototype"||o.length===0||o.length>$t||!Array.isArray(i))&&d(),n[o]=i.map(a=>O(a));return n}function O(e){let t=w(e);return (t.length===0||t.length>$t)&&d(),t}function M(e,t){t!==void 0&&e!==t&&d();}function ye(e,t){let n=t??e[0];n!==void 0&&e.some(o=>o!==n)&&d();}function pn(e){let t=p(e);return {id:O(t.id),name:O(t.name),email:O(t.email),...Oe("image",R(t,"image"))}}function F(e,t){return Array.isArray(e)||d(),e.map(n=>t(n))}function Oe(e,t){return t===void 0?{}:{[e]:t}}function fn(e,t,n=()=>null){let{post:o,mutation:i}=J(e,t),a=(r,s,c,l)=>e.request(r,{query:s,fetchOptions:c,decode:l});return {create:(r,s)=>i(o("/organization/create",r,s,W)),list:r=>a("/organization/list",void 0,r,Yt),get:(r={},s)=>a("/organization/get-full-organization",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,membersLimit:r.membersLimit},s,c=>Xt(c,r.organizationId,r.organizationSlug)),setActive:(r,s)=>i(o("/organization/set-active",r,s,c=>Ve(c,r.organizationId,r.organizationSlug))),listTeams:(r={},s)=>a("/organization/list-teams",{organizationId:r.organizationId},s,c=>Qt(c,r.organizationId)),setActiveTeam:(r,s)=>i(o("/organization/set-active-team",r,s,c=>Zt(c,r.teamId))),update:(r,s)=>i(o("/organization/update",r,s,c=>Ve(c,r.organizationId))),delete:(r,s)=>i(o("/organization/delete",r,s,c=>W(c,r.organizationId))),listMembers:(r={},s)=>a("/organization/list-members",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,limit:r.limit,offset:r.offset,sortBy:r.sortBy,sortDirection:r.sortDirection,filterField:r.filterField,filterValue:r.filterValue,filterOperator:r.filterOperator},s,c=>en(c,r.organizationId)),inviteMember:(r,s)=>i(o("/organization/invite-member",r,s,c=>N(c,void 0,r.organizationId))),listInvitations:(r={},s)=>a("/organization/list-invitations",{organizationId:r.organizationId},s,c=>tn(c,r.organizationId)),listUserInvitations:r=>a("/organization/list-user-invitations",void 0,r,nn),getInvitation:(r,s)=>a("/organization/get-invitation",{id:r.id},s,c=>on(c,r.id)),acceptInvitation:(r,s)=>i(o("/organization/accept-invitation",r,s,c=>rn(c,r.invitationId))),rejectInvitation:(r,s)=>i(o("/organization/reject-invitation",r,s,c=>an(c,r.invitationId))),cancelInvitation:(r,s)=>i(o("/organization/cancel-invitation",r,s,c=>sn(c,r.invitationId))),removeMember:(r,s)=>i(o("/organization/remove-member",r,s,c=>cn(c,r.organizationId,r.memberIdOrEmail.includes("@")?void 0:r.memberIdOrEmail))),updateMemberRole:(r,s)=>i(o("/organization/update-member-role",r,s,c=>$(c,r.memberId,r.organizationId))),leave:(r,s)=>i(o("/organization/leave",r,s,c=>$(c,void 0,r.organizationId))),listRoles:(r={},s)=>a("/organization/list-roles",{organizationId:r.organizationId},s,c=>un(c,r.organizationId)),has:r=>Ae(n(),r),hasPermission:r=>he(n(),r.permission)}}var mn=4096,ei=4096,ti=100,ni=256,oi=16,ii=64;function Ke(e){let t=p(e);return t.twoFactorRedirect===true?((t.user!==void 0||t.redirect!==void 0||t.url!==void 0)&&d(),{twoFactorRedirect:true,...t.twoFactorMethods===void 0?{}:{twoFactorMethods:Cn(t.twoFactorMethods,oi,ii)}}):(t.twoFactorRedirect!==void 0&&d(),{redirect:b(t.redirect),...ci(t,"url"),user:D(t.user)})}function gn(e){let t=p(e);return {user:D(t.user)}}function hn(e){let t=p(e);return {sessionCreated:b(t.sessionCreated),user:D(t.user)}}function An(e,t){let n=p(e),o=b(n.redirect);n.user===null&&d();let i=n.user!==void 0&&n.user!==null,a=n.url!==void 0&&n.url!==null;return o?((i||!a)&&d(),{redirect:true,url:qe(n.url,t)}):(i===a&&d(),i?{redirect:false,user:D(n.user)}:{redirect:false,url:qe(n.url,t)})}function On(e,t){let n=p(e);return (n.redirect!==true||n.user!==void 0)&&d(),{redirect:true,url:qe(n.url,t)}}function yn(e){return {status:b(p(e).status)}}function bn(e){return {success:b(p(e).success)}}function wn(e){return p(e).status!=="pending"&&d(),{status:"pending"}}function Rn(e){let t=p(e);return (t.status!==true||t.sessionCreated!==true)&&d(),{status:true,sessionCreated:true,user:ri(t.user)}}function He(e){return {status:b(p(e).status)}}function kn(e){return {status:b(p(e).status)}}function Sn(e){let t=p(e);return {status:b(t.status),user:D(t.user)}}function Tn(e){return {success:b(p(e).success)}}function En(e){let t=p(e);return {totpURI:si(t.totpURI),backupCodes:Dn(t.backupCodes)}}function xn(e){return {status:b(p(e).status)}}function be(e){return p(e).status!==true&&d(),{status:true}}function In(e){return {status:b(p(e).status)}}function Pn(e){let t=p(e);return t.status!==void 0&&t.status!==true&&d(),{backupCodes:Dn(t.backupCodes)}}function ri(e){let t=p(e);return {id:Y(t.id,512),...ui(t,"name",1024),phoneNumber:Y(t.phoneNumber,64),phoneNumberVerified:b(t.phoneNumberVerified),...t.createdAt===void 0?{}:{createdAt:k(t.createdAt)},...t.updatedAt===void 0?{}:{updatedAt:k(t.updatedAt)}}}function qe(e,t){let n=Y(e,mn);/[\u0000-\u0020\u007f]/u.test(n)&&d();let o;try{o=new URL(n);}catch{return d()}return (o.username||o.password)&&d(),o.protocol==="https:"||t&&o.protocol==="http:"&&ai(o.hostname)?o.href:d()}function ai(e){let t=e.toLowerCase();return t==="localhost"||t==="127.0.0.1"||t==="[::1]"}function si(e){let t=Y(e,ei),n;try{n=new URL(t);}catch{return d()}let o=n.searchParams.get("secret");return (n.protocol!=="otpauth:"||n.hostname.toLowerCase()!=="totp"||n.username||n.password||n.hash||o===null||o.length===0||o.length>512||/\s/u.test(o))&&d(),t}function Dn(e){return Cn(e,ti,ni)}function Cn(e,t,n){(!Array.isArray(e)||e.length===0||e.length>t)&&d();let o=e.map(i=>Y(i,n));return o.some(i=>i.trim().length===0)&&d(),new Set(o).size!==o.length&&d(),o}function Y(e,t){let n=w(e);return (n.length===0||n.length>t)&&d(),n}function ci(e,t){let n=e[t];return n==null?{}:{[t]:Y(n,mn)}}function ui(e,t,n){let o=R(e,t);return o===void 0?{}:(o!==null&&o.length>n&&d(),{[t]:o})}function vn(e,t=()=>{}){let n=oe(e),o=Kt(n,e.decoded.projectId),i=Vt(n,o.notifyMutation),a=()=>{o.notifyMutation(),t();},{post:r,mutation:s}=J(n,a),c=e.decoded.env==="test";return {sessionStore:o.store,getSession:o.getSession,account:Gt(n,a),organization:fn(n,a,()=>o.store.getSnapshot().data?.session.membership??null),signIn:{email:(l,u)=>s(r("/sign-in/email",l,u,Ke),f=>!("twoFactorRedirect"in f)),username:(l,u)=>s(r("/sign-in/username",l,u,Ke),f=>!("twoFactorRedirect"in f)),social:async(l,u)=>{let f=await s(r("/sign-in/social",l,u,m=>An(m,c)),m=>"user"in m);return f.error!==null||f.data===null||"url"in f.data&&f.data.redirect&&!l.disableRedirect&&typeof window<"u"&&window.location.assign(f.data.url),f},sso:async(l,u)=>{let f=await r("/sign-in/sso",l,u,m=>On(m,c));return f.error!==null||f.data===null||typeof window<"u"&&window.location.assign(f.data.url),f},magicLink:(l,u)=>r("/sign-in/magic-link",l,u,yn),emailOtp:(l,u)=>s(r("/sign-in/email-otp",l,u,gn)),passkey:(l,u)=>i.signIn(l,u)},signUp:{email:(l,u)=>s(r("/sign-up/email",l,u,hn),f=>f.sessionCreated)},emailOtp:{sendVerificationOtp:(l,u)=>r("/email-otp/send-verification-otp",l,u,bn),verifyEmail:(l,u)=>s(r("/email-otp/verify-email",l,u,Sn))},phoneOtp:{start:(l,u)=>r("/phone-otp/start",{...l,idempotencyKey:l.idempotencyKey??Fe()},u,wn),verify:(l,u)=>s(r("/phone-otp/verify",l,u,Rn))},requestPasswordReset:(l,u)=>r("/request-password-reset",l,u,He),resetPassword:(l,u)=>r("/reset-password",l,u,He),sendVerificationEmail:(l,u)=>r("/send-verification-email",l,u,kn),passkey:{addPasskey:(l,u)=>i.add(l,u),listUserPasskeys:()=>n.request("/passkey/list-user-passkeys",{decode:It}),updatePasskey:async(l,u)=>{let f=de(l.name);if(!f.valid||f.value===void 0)return pe();let m=f.value;return r("/passkey/update-passkey",{...l,name:m},u,h=>Pt(h,l.id,m))},deletePasskey:(l,u)=>r("/passkey/delete-passkey",l,u,Dt)},twoFactor:{enable:(l,u)=>r("/two-factor/enable",l,u,En),disable:(l,u)=>s(r("/two-factor/disable",l,u,xn),f=>f.status),verifyTotp:(l,u)=>s(r("/two-factor/verify-totp",l,u,be)),verifyBackupCode:(l,u)=>s(r("/two-factor/verify-backup-code",l,u,be)),sendOtp:(l={},u)=>r("/two-factor/send-otp",l,u,In),verifyOtp:(l,u)=>s(r("/two-factor/verify-otp",l,u,be)),generateBackupCodes:(l,u)=>r("/two-factor/generate-backup-codes",l,u,Pn)},signOut:l=>s(n.request("/sign-out",{method:"POST",body:{},fetchOptions:l,decode:Tn}),u=>u.success)}}var we=class extends Error{status;requestId;constructor(t,n,o){super(`${t} request failed with status ${n.status}.`),this.name="AuthOwlHttpError",this.status=n.status,this.requestId=o;}};function B(e,t,n={}){let o=new Headers(n.init?.headers);return o.set("x-publishable-key",e.publishableKey),ne({fetchImpl:e.fetch??fetch,url:t,init:{...n.init,headers:o},allowHttpLoopback:e.decoded.env==="test",...n.timeoutMs===void 0?{}:{timeoutMs:n.timeoutMs},...n.maxResponseBytes===void 0?{}:{maxResponseBytes:n.maxResponseBytes},...n.decode===void 0?{}:{decode:n.decode}})}function j(e,t){if(!e.response.ok)throw new we(t,e.response,e.requestId);return e.data}function zn(e){return `${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}/consent`}async function Be(e){let t=await B(e,zn(e),{init:{method:"GET",credentials:"include"},maxResponseBytes:65536,decode:li});return t.response.status===401?{required:false}:j(t,"consent status")}async function je(e,t){if(!Number.isSafeInteger(t)||t<1)throw new TypeError("Consent version must be a positive integer.");return j(await B(e,zn(e),{init:{method:"POST",headers:{"content-type":"application/json"},credentials:"include",body:JSON.stringify({version:t})},maxResponseBytes:64*1024,decode:di}),"consent accept")}function li(e){let t=p(e),n=b(t.required),o=pi(t.needsConsent),i=_n(t.version),a=Un(t.termsUrl),r=Un(t.privacyUrl);return {required:n,...o===void 0?{}:{needsConsent:o},...i===void 0?{}:{version:i},...a===void 0?{}:{termsUrl:a},...r===void 0?{}:{privacyUrl:r}}}function di(e){let t=p(e),n=_n(t.version);return {ok:b(t.ok),...n===void 0?{}:{version:n}}}function pi(e){if(e===void 0||typeof e=="boolean")return e;throw new TypeError("Invalid consent response.")}function _n(e){if(e===void 0||Number.isSafeInteger(e)&&e>=1)return e;throw new TypeError("Invalid consent response.")}function Un(e){if(e===void 0||typeof e=="string"&&e.length<=4096)return e;throw new TypeError("Invalid consent response.")}var fi=30;function mi(e){return typeof e?.exp=="number"?e.exp:null}function gi(e){let t=e.split(".")[1];if(!t)return null;try{let n=t.replace(/-/g,"+").replace(/_/g,"/"),o=JSON.parse(atob(n));return typeof o=="object"&&o!==null?o:null}catch{return null}}function Je(e){let t=new Map;async function n(a={}){let r=a.template===void 0?null:a.template.trim().toLowerCase();if(r==="")throw new TypeError("Template missing");let s=r??"",c=t.get(s);c||(c={activeKey:null,cachedByKey:new Map,inflight:null,sequence:0},t.set(s,c));let l=a.forceRefresh===true;if(!l){let g=c.activeKey?c.cachedByKey.get(c.activeKey):null;if(g&&g.exp-Date.now()/1e3>fi)return g.token;if(c.inflight)return c.inflight}let u=++c.sequence,f=()=>t.get(s)===c&&c.sequence===u,m=(async()=>{let g=r?`${e.projectBaseURL}/token/${encodeURIComponent(r)}`:`${e.projectBaseURL}/token`,U=await B(e,g,{init:{method:"GET",credentials:"include"},maxResponseBytes:64*1024,decode:q=>hi(q,r!==null)});if(U.response.status===401)return f()&&o(),null;let A=j(U,"token"),v=A.policyVersion,z=A.token,V=gi(z),X=mi(V);if(f())if(X!==null){let q=typeof V?.sub=="string"?V.sub:null,Re=typeof V?.org_id=="string"?V.org_id:null;if(!r||q){let Ye=JSON.stringify([e.projectBaseURL,q,Re,r,v]);c.cachedByKey.clear(),c.cachedByKey.set(Ye,{token:z,exp:X}),c.activeKey=Ye;}else i(c);}else i(c);return z})();if(l)return m;let h=m.finally(()=>{c.inflight===h&&(c.inflight=null);});return c.inflight=h,h}function o(){t.clear();}function i(a){a.cachedByKey.clear(),a.activeKey=null;}return {getToken:n,clear:o}}function hi(e,t){let n=p(e),o=w(n.token);if(o.length===0||o.length>32*1024)throw new TypeError("Invalid token response.");if(!t)return {token:o,policyVersion:0};let i=p(n.template);if(!Number.isSafeInteger(i.policyVersion)||i.policyVersion<1)throw new TypeError("Invalid token response.");return {token:o,policyVersion:i.policyVersion}}function Ai(e){let t=Je(e),n=vn(e,t.clear),o=oe(e,`${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}`),i=r=>(...s)=>(t.clear(),r(...s)),a={getConsentStatus:()=>Be(e),acceptConsent:r=>je(e,r),getToken:t.getToken,waitlist:{join:(r,s)=>o.request("/waitlist",{method:"POST",body:r,fetchOptions:s,credentials:"omit"})},account:{...n.account,updateUnsafeMetadata:i(n.account.updateUnsafeMetadata),updateProfile:i(n.account.updateProfile),changeEmail:i(n.account.changeEmail),changePassword:i(n.account.changePassword),revokeSession:i(n.account.revokeSession),delete:i(n.account.delete)},signIn:{email:i(n.signIn.email),username:i(n.signIn.username),social:i(n.signIn.social),sso:n.signIn.sso,magicLink:n.signIn.magicLink,emailOtp:i(n.signIn.emailOtp),passkey:i(n.signIn.passkey)},signUp:{email:i(n.signUp.email)},emailOtp:{...n.emailOtp,verifyEmail:i(n.emailOtp.verifyEmail)},twoFactor:{enable:n.twoFactor.enable,disable:i(n.twoFactor.disable),verifyTotp:i(n.twoFactor.verifyTotp),verifyBackupCode:i(n.twoFactor.verifyBackupCode),sendOtp:n.twoFactor.sendOtp,verifyOtp:i(n.twoFactor.verifyOtp),generateBackupCodes:n.twoFactor.generateBackupCodes},phoneOtp:{start:n.phoneOtp.start,verify:i(n.phoneOtp.verify)},signOut:i(n.signOut)};return {...n,...a}}async function Oi(e){let n=`${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}/public-config`;return j(await B(e,n,{init:{method:"GET",credentials:"omit"},maxResponseBytes:256*1024,decode:o=>yi(o,e)}),"public-config")}function yi(e,t){let n=_(e),o=n.environmentId,i=n.environmentType,a=`${new URL(t.apiUrl).origin}/api/projects/${t.decoded.projectId}/auth`;if(typeof n.applicationId!="string"||!bi(n.applicationId)||o!==t.decoded.projectId||i!=="development"&&i!=="production"||n.authBaseUrl!==a)throw C();let r=x(n.branding),s=x(n.legal);if(!Ge(n.enabledMethods,64)||!Ge(n.socialProviders,64)||!Ln(r,["appName","logoUrl","primaryColor"])||r.showAppName!==void 0&&typeof r.showAppName!="boolean"||r.alignment!==void 0&&r.alignment!=="left"&&r.alignment!=="center"&&r.alignment!=="right"||r.theme!==void 0&&r.theme!=="light"&&r.theme!=="dark"&&r.theme!=="system"||!Ln(s,["termsUrl","privacyUrl"])||!Number.isSafeInteger(s.version)||s.version<0||typeof s.required!="boolean")throw C();if(n.socialProviderClientIds!==void 0){let c=x(n.socialProviderClientIds);if(Object.keys(c).length>64||Object.values(c).some(l=>typeof l!="string"||l.length>2048))throw C()}if(!L(n,["requireEmailVerification","twoFactor","mfaRequired","accountDeletion","organizations","sso","badge"])||!Nn(n.turnstileSiteKey)||!Nn(n.authTurnstileSiteKey)||typeof n.locale!="string"||n.locale.length===0||n.locale.length>64||!Number.isSafeInteger(n.configVersion)||n.configVersion<0)throw C();if(n.jwtIssuer!==null){let c=x(n.jwtIssuer);if(c.issuer!==a||c.jwksUrl!==`${a}/jwks`||c.aud!==t.decoded.projectId)throw C()}if(n.signUp!==void 0){let c=x(n.signUp).mode;if(typeof c!="string"||!["open","restricted","allowlist","waitlist"].includes(c))throw C()}if(n.authentication!==void 0&&wi(n.authentication),n.emailVerification!==void 0){let c=x(n.emailVerification);if(!L(c,["required"])||c.method!=="link"&&c.method!=="code")throw C()}if(n.userModel!==void 0&&!L(x(n.userModel),["requireEmail","firstLastName","emailChange","accountDeletion"]))throw C();if(n.mfa!==void 0){let c=x(n.mfa);if(!L(c,["totp","required","backupCodes"])||(c.required===true||c.backupCodes===true)&&c.totp!==true)throw C()}return n}function bi(e){return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(e)}function C(){return new TypeError("public-config returned an invalid response")}function x(e){if(!e||typeof e!="object"||Array.isArray(e))throw C();return e}function Nn(e){return e===null||typeof e=="string"&&e.length<=4096}function wi(e){let t=x(e),n=x(t.email),o=x(t.password),i=o.minLength!==void 0||o.maxLength!==void 0;if(!L(n,["signUp"])||!Ge(n.signIn,3)||n.signIn.some(a=>a!=="password"&&a!=="magic_link"&&a!=="email_otp")||!L(x(t.phone),["signUp","signIn"])||!L(o,["signUp","add"])||i&&(!Number.isSafeInteger(o.minLength)||!Number.isSafeInteger(o.maxLength)||o.minLength<1||o.maxLength>4096||o.minLength>o.maxLength)||!L(x(t.passkey),["signIn","add"])||!L(x(t.username),["collectOnSignUp","signIn"]))throw C()}function L(e,t){return t.every(n=>typeof e[n]=="boolean")}function Ln(e,t){return t.every(n=>e[n]===void 0||typeof e[n]=="string"&&e[n].length<=4096)}function Ge(e,t){return Array.isArray(e)&&e.length<=t&&e.every(n=>typeof n=="string"&&n.length<=128)&&new Set(e).size===e.length}var te=class extends Error{constructor(n,o){super(n);this.cause=o;this.name="AuthOwlError";}cause},We=class extends te{constructor(n,o){super(`Rate limited. Retry after ${n}s.`,o);this.retryAfterSeconds=n;this.name="RateLimitedError";}retryAfterSeconds},$e=class extends te{constructor(t="invalid publishable key",n){super(t,n),this.name="InvalidKeyError";}};var Mn=["en","ar"];function Ri(e){return e==="ar"?"rtl":"ltr"}function ki(e){return typeof e=="string"&&Mn.includes(e)}
 exports.AUTH_CHALLENGE_HEADER=rt;exports.AuthOwlError=te;exports.AuthOwlHttpError=we;exports.InvalidKeyError=$e;exports.LOCALES=Mn;exports.RateLimitedError=We;exports.TransportError=T;exports.acceptConsent=je;exports.createAuthOwlClient=Ai;exports.createIdempotencyKey=Fe;exports.createMembershipHas=Yo;exports.createTokenClient=Je;exports.decodePublishableKey=ke;exports.directionFor=Ri;exports.getConsentStatus=Be;exports.getPublicConfig=Oi;exports.isLocale=ki;exports.membershipHas=Ae;exports.membershipHasPermission=he;exports.membershipHasTeam=Wt;exports.resolveConfig=Kn;exports.sessionCookieName=qn;

package/dist/index.d.cts

@@ -1164,6 +1164,10 @@ type PublicConfig = {
     branding: {
         appName?: string;
         logoUrl?: string;
+        /** Whether the application name is visible beside the logo. */
+        showAppName?: boolean;
+        /** Alignment of the brand identity within managed component headers. */
+        alignment?: 'left' | 'center' | 'right';
         primaryColor?: string;
         theme?: 'light' | 'dark' | 'system';
     };

package/dist/index.d.ts

@@ -1164,6 +1164,10 @@ type PublicConfig = {
     branding: {
         appName?: string;
         logoUrl?: string;
+        /** Whether the application name is visible beside the logo. */
+        showAppName?: boolean;
+        /** Alignment of the brand identity within managed component headers. */
+        alignment?: 'left' | 'center' | 'right';
         primaryColor?: string;
         theme?: 'light' | 'dark' | 'system';
     };

package/dist/index.js

@@ -1,3 +1,3 @@
 import {g,f,h,j,i,p,n,s,u,k,r,m,l,o,q as q$1}from'./chunk-KPXCQZUX.js';export{f as TransportError,v as createMembershipHas,a as decodePublishableKey,u as membershipHas,s as membershipHasPermission,t as membershipHasTeam,e as resolveConfig,b as sessionCookieName}from'./chunk-KPXCQZUX.js';var Je="x-authowl-turnstile-token",Cn=1e4,vn=32,zn=2e4;function V(e,t){return {post:(n,i,o,a)=>e.request(n,{method:"POST",body:i,fetchOptions:o,decode:a}),mutation:async(n,i)=>{let o=await n;return o.error===null&&(i===void 0||o.data!==null&&i(o.data))&&t(),o}}}function ee(e,t=e.projectBaseURL){return {async request(n,i={}){let o=_n(t,n,i.query),a=i.method??(i.body===void 0?"GET":"POST"),r=new Headers(i.fetchOptions?.headers);r.set("x-publishable-key",e.publishableKey),i.fetchOptions?.authChallengeToken&&r.set(Je,i.fetchOptions.authChallengeToken),i.body!==void 0&&r.set("content-type","application/json");let s={method:a,headers:r,credentials:i.credentials??"include",...i.body===void 0?{}:{body:JSON.stringify(i.body)}},c=Object.freeze({method:a,path:n});await i.fetchOptions?.onRequest?.(c);let l=Nn(a,i.fetchOptions),u;try{u=await Un(e,o,{...s,signal:i.fetchOptions?.signal},l);}catch(D){let Y=Ge(D);return await i.fetchOptions?.onError?.(Oe(c,Y,Ln(D))),{data:null,error:Y}}let{response:f$1,requestId:g}=u,m=Kn(n,u.data),h=m;if(f$1.ok)try{h=be(m),i.decode&&(h=i.decode(h));}catch{let D=Ge(new f("invalid_response",g));return await i.fetchOptions?.onError?.(Oe(c,D,"invalid_response")),{data:null,error:D}}let z=Object.freeze({...c,status:f$1.status,...g===void 0?{}:{requestId:g}});if(await i.fetchOptions?.onResponse?.(z),!f$1.ok){let D=Fn(f$1,m,g);return await i.fetchOptions?.onError?.(Oe(c,D,"api")),{data:null,error:D}}return await i.fetchOptions?.onSuccess?.(z),{data:h,error:null}}}}async function Un(e,t,n,i){let o=Date.now()+Cn;for(let a=0;a<i;a+=1){let r=o-Date.now();if(r<=0)throw new f("timeout");try{let s=await g({fetchImpl:e.fetch??fetch,url:t,init:n,timeoutMs:Math.max(1,Math.ceil(r)),allowHttpLoopback:e.decoded.env==="test"});if(s.response.status<500||a===i-1)return s}catch(s){if(a===i-1||!(s instanceof f)||s.kind!=="network")throw s}await Vn(50*2**a,n.signal,o);}throw new f("network")}function Nn(e,t){if(e!=="GET"||t?.authChallengeToken)return 1;let n=t?.retry;return typeof n!="number"||!Number.isFinite(n)?1:Math.min(Math.max(Math.trunc(n),0),3)+1}function _n(e,t,n){let i=new URL(`${e}${t.startsWith("/")?t:`/${t}`}`);for(let[o,a]of Object.entries(n??{}))a!==void 0&&i.searchParams.set(o,String(a));return i.toString()}function Fn(e,t,n){let i=G(t)?t:{},o=Mn(i,e.headers);return {status:e.status,statusText:e.statusText,code:typeof i.code=="string"?i.code:void 0,...n===void 0?{}:{requestId:n},...typeof i.current_version=="number"?{currentVersion:i.current_version}:{},...o!==void 0?{retryAfterSeconds:o}:{},message:typeof i.message=="string"?i.message:typeof i.error=="string"?i.error:typeof i.detail=="string"?i.detail:e.statusText||"Request failed"}}function Mn(e,t){let n=(typeof e.retryAfterSeconds=="number"&&Number.isFinite(e.retryAfterSeconds)?e.retryAfterSeconds:void 0)??je(t.get("retry-after"))??je(t.get("x-retry-after"));if(n!==void 0)return Math.min(Math.max(Math.trunc(n),1),86400)}function je(e){if(!e)return;let t=e.trim();if(!/^\d+$/.test(t))return;let n=Number(t);return Number.isFinite(n)?n:void 0}function Ge(e){let t=e instanceof f?e.kind:"network";return {status:0,...{aborted:{statusText:"ABORTED",code:"REQUEST_ABORTED",message:"The request was cancelled."},timeout:{statusText:"TIMEOUT",code:"REQUEST_TIMEOUT",message:"The request timed out."},response_too_large:{statusText:"INVALID_RESPONSE",code:"RESPONSE_TOO_LARGE",message:"The service response was too large."},invalid_response:{statusText:"INVALID_RESPONSE",code:"INVALID_RESPONSE",message:"The service returned an invalid response."},network:{statusText:"FETCH_ERROR",code:"FETCH_ERROR",message:"Network request failed."}}[t],...e instanceof f&&e.requestId?{requestId:e.requestId}:{}}}function Oe(e,t,n){return Object.freeze({...e,status:t.status??0,...t.requestId===void 0?{}:{requestId:t.requestId},failure:n})}function Ln(e){return e instanceof f?e.kind:"network"}function Vn(e,t,n){return new Promise((i,o)=>{if(t?.aborted){o(new f("aborted"));return}let a=n-Date.now();if(a<=0){o(new f("timeout"));return}let r=Math.min(e,a),s=()=>{clearTimeout(c),o(new f("aborted"));},c=setTimeout(()=>{t?.removeEventListener("abort",s),Date.now()>=n?o(new f("timeout")):i();},r);t?.addEventListener("abort",s,{once:true}),t?.aborted&&s();})}function be(e,t="",n=0,i={nodes:0}){if(i.nodes+=1,n>vn||i.nodes>zn)throw new Error("response traversal limit exceeded");if(typeof e=="string"&&/^(?:createdAt|updatedAt|expiresAt)$/.test(t)){let o=new Date(e);return Number.isNaN(o.getTime())?e:o}return Array.isArray(e)?e.map(o=>be(o,"",n+1,i)):G(e)?Object.fromEntries(Object.entries(e).map(([o,a])=>[o,qn(o)?a:be(a,o,n+1,i)])):e}function qn(e){return e==="metadata"||e==="public_metadata"||e==="unsafe_metadata"||e==="private_metadata"||e==="publicMetadata"||e==="unsafeMetadata"||e==="privateMetadata"}function Kn(e,t){if(e==="/list-sessions"&&Array.isArray(t))return t.map(o=>G(o)?ye(o):o);if(!G(t))return t;let i=e==="/change-password"||e==="/passkey/verify-authentication"||e==="/phone-otp/verify"||e==="/sign-up/email"||e.startsWith("/sign-in/")||e.startsWith("/two-factor/verify-")?ye(t):t;return e==="/sign-up/email"&&!("sessionCreated"in i)&&(i={...i,sessionCreated:typeof t.token=="string"&&t.token.length>0}),(e==="/get-session"||e==="/passkey/verify-authentication")&&G(i.session)&&(i={...i,session:ye(i.session)}),i}function ye(e){if(!Object.hasOwn(e,"token"))return e;let t={...e};return delete t.token,t}function G(e){return !!e&&typeof e=="object"&&!Array.isArray(e)}function E(e){let t=new Uint8Array(e),n="";for(let o of t)n+=String.fromCharCode(o);return btoa(n).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function _(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),n=(4-t.length%4)%4,i=t.padEnd(t.length+n,"="),o=atob(i),a=new ArrayBuffer(o.length),r=new Uint8Array(a);for(let s=0;s<o.length;s++)r[s]=o.charCodeAt(s);return a}function F(){return Bn.stubThis(globalThis?.PublicKeyCredential!==void 0&&typeof globalThis.PublicKeyCredential=="function")}var Bn={stubThis:e=>e};function te(e){let{id:t}=e;return {...e,id:_(t),transports:e.transports}}function ne(e){return e==="localhost"||/^((xn--[a-z0-9-]+|[a-z0-9]+(-[a-z0-9]+)*)\.)+([a-z]{2,}|xn--[a-z0-9-]+)$/i.test(e)}var O=class extends Error{constructor({message:t,code:n,cause:i,name:o}){super(t,{cause:i}),Object.defineProperty(this,"code",{enumerable:true,configurable:true,writable:true,value:void 0}),this.name=o??i.name,this.code=n;}};function We({error:e,options:t}){let{publicKey:n}=t;if(!n)throw Error("options was missing required publicKey property");if(e.name==="AbortError"){if(t.signal instanceof AbortSignal)return new O({message:"Registration ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:e})}else if(e.name==="ConstraintError"){if(n.authenticatorSelection?.requireResidentKey===true)return new O({message:"Discoverable credentials were required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT",cause:e});if(t.mediation==="conditional"&&n.authenticatorSelection?.userVerification==="required")return new O({message:"User verification was required during automatic registration but it could not be performed",code:"ERROR_AUTO_REGISTER_USER_VERIFICATION_FAILURE",cause:e});if(n.authenticatorSelection?.userVerification==="required")return new O({message:"User verification was required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT",cause:e})}else {if(e.name==="InvalidStateError")return new O({message:"The authenticator was previously registered",code:"ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED",cause:e});if(e.name==="NotAllowedError")return new O({message:e.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:e});if(e.name==="NotSupportedError")return n.pubKeyCredParams.filter(o=>o.type==="public-key").length===0?new O({message:'No entry in pubKeyCredParams was of type "public-key"',code:"ERROR_MALFORMED_PUBKEYCREDPARAMS",cause:e}):new O({message:"No available authenticator supported any of the specified pubKeyCredParams algorithms",code:"ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEYCREDPARAMS_ALG",cause:e});if(e.name==="SecurityError"){let i=globalThis.location.hostname;if(ne(i)){if(n.rp.id!==i)return new O({message:`The RP ID "${n.rp.id}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:e})}else return new O({message:`${globalThis.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:e})}else if(e.name==="TypeError"){if(n.user.id.byteLength<1||n.user.id.byteLength>64)return new O({message:"User ID was not between 1 and 64 characters",code:"ERROR_INVALID_USER_ID_LENGTH",cause:e})}else if(e.name==="UnknownError")return new O({message:"The authenticator was unable to process the specified options, or could not create a new credential",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:e})}return e}var we=class{constructor(){Object.defineProperty(this,"controller",{enumerable:true,configurable:true,writable:true,value:void 0});}createNewAbortSignal(){if(this.controller){let n=new Error("Cancelling existing WebAuthn API call for new one");n.name="AbortError",this.controller.abort(n);}let t=new AbortController;return this.controller=t,t.signal}cancelCeremony(){if(this.controller){let t=new Error("Manually cancelling existing WebAuthn API call");t.name="AbortError",this.controller.abort(t),this.controller=void 0;}}},ie=new we;var Hn=["cross-platform","platform"];function oe(e){if(e&&!(Hn.indexOf(e)<0))return e}async function $e(e){!e.optionsJSON&&e.challenge&&(console.warn("startRegistration() was not called correctly. It will try to continue with the provided options, but this call should be refactored to use the expected call structure instead. See https://simplewebauthn.dev/docs/packages/browser#typeerror-cannot-read-properties-of-undefined-reading-challenge for more information."),e={optionsJSON:e});let{optionsJSON:t,useAutoRegister:n=false}=e;if(!F())throw new Error("WebAuthn is not supported in this browser");let i={...t,challenge:_(t.challenge),user:{...t.user,id:_(t.user.id)},excludeCredentials:t.excludeCredentials?.map(te)},o={};n&&(o.mediation="conditional"),o.publicKey=i,o.signal=ie.createNewAbortSignal();let a;try{a=await navigator.credentials.create(o);}catch(h){throw We({error:h,options:o})}if(!a)throw new Error("Registration was not completed");let{id:r,rawId:s,response:c,type:l}=a,u;typeof c.getTransports=="function"&&(u=c.getTransports());let f;if(typeof c.getPublicKeyAlgorithm=="function")try{f=c.getPublicKeyAlgorithm();}catch(h){Re("getPublicKeyAlgorithm()",h);}let g;if(typeof c.getPublicKey=="function")try{let h=c.getPublicKey();h!==null&&(g=E(h));}catch(h){Re("getPublicKey()",h);}let m;if(typeof c.getAuthenticatorData=="function")try{m=E(c.getAuthenticatorData());}catch(h){Re("getAuthenticatorData()",h);}return {id:r,rawId:E(s),response:{attestationObject:E(c.attestationObject),clientDataJSON:E(c.clientDataJSON),transports:u,publicKeyAlgorithm:f,publicKey:g,authenticatorData:m},type:l,clientExtensionResults:a.getClientExtensionResults(),authenticatorAttachment:oe(a.authenticatorAttachment)}}function Re(e,t){console.warn(`The browser extension that intercepted this WebAuthn API call incorrectly implemented ${e}. You should report this error to them.
-`,t);}function Ye(){if(!F())return Se.stubThis(new Promise(t=>t(false)));let e=globalThis.PublicKeyCredential;return e?.isConditionalMediationAvailable===void 0?Se.stubThis(new Promise(t=>t(false))):Se.stubThis(e.isConditionalMediationAvailable())}var Se={stubThis:e=>e};function Xe({error:e,options:t}){let{publicKey:n}=t;if(!n)throw Error("options was missing required publicKey property");if(e.name==="AbortError"){if(t.signal instanceof AbortSignal)return new O({message:"Authentication ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:e})}else {if(e.name==="NotAllowedError")return new O({message:e.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:e});if(e.name==="SecurityError"){let i=globalThis.location.hostname;if(ne(i)){if(n.rpId!==i)return new O({message:`The RP ID "${n.rpId}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:e})}else return new O({message:`${globalThis.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:e})}else if(e.name==="UnknownError")return new O({message:"The authenticator was unable to process the specified options, or could not create a new assertion signature",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:e})}return e}async function Qe(e){!e.optionsJSON&&e.challenge&&(console.warn("startAuthentication() was not called correctly. It will try to continue with the provided options, but this call should be refactored to use the expected call structure instead. See https://simplewebauthn.dev/docs/packages/browser#typeerror-cannot-read-properties-of-undefined-reading-challenge for more information."),e={optionsJSON:e});let{optionsJSON:t,useBrowserAutofill:n=false,verifyBrowserAutofillInput:i=true}=e;if(!F())throw new Error("WebAuthn is not supported in this browser");let o;t.allowCredentials?.length!==0&&(o=t.allowCredentials?.map(te));let a={...t,challenge:_(t.challenge),allowCredentials:o},r={};if(n){if(!await Ye())throw Error("Browser does not support WebAuthn autofill");if(document.querySelectorAll("input[autocomplete$='webauthn']").length<1&&i)throw Error('No <input> with "webauthn" as the only or last value in its `autocomplete` attribute was detected');r.mediation="conditional",a.allowCredentials=[];}r.publicKey=a,r.signal=ie.createNewAbortSignal();let s;try{s=await navigator.credentials.get(r);}catch(m){throw Xe({error:m,options:r})}if(!s)throw new Error("Authentication was not completed");let{id:c,rawId:l,response:u,type:f}=s,g;return u.userHandle&&(g=E(u.userHandle)),{id:c,rawId:E(l),response:{authenticatorData:E(u.authenticatorData),clientDataJSON:E(u.clientDataJSON),signature:E(u.signature),userHandle:g},type:f,clientExtensionResults:s.getClientExtensionResults(),authenticatorAttachment:oe(s.authenticatorAttachment)}}var Ze=new Set([1564,8206,8207,8234,8235,8236,8237,8238,8294,8295,8296,8297]),re=new Set([9,10,11,12,13,32,133,160,5760,8192,8193,8194,8195,8196,8197,8198,8199,8200,8201,8202,8232,8233,8239,8287,12288,65279]);function ae(e){if(e===void 0)return {valid:true,value:void 0};for(let n of e){let i=n.codePointAt(0);if(i===void 0||tt(n,i)||et(i)||Ze.has(i))return {valid:false}}let t=jn(e);return ke(t)?{valid:true,value:t}:{valid:false}}function ke(e){let t=0,n,i;for(let o of e){if(t+=1,t>256)return  false;let a=o.codePointAt(0);if(a===void 0||tt(o,a)||et(a)||Ze.has(a))return  false;n??=a,i=a;}return t>0&&n!==void 0&&i!==void 0&&!re.has(n)&&!re.has(i)}function se(){return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:"INVALID_PASSKEY_NAME",message:"Passkey names must contain 1 to 256 safe Unicode characters."}}}function jn(e){let t=0,n=e.length;for(;t<n;){let i=e.codePointAt(t);if(i===void 0||!re.has(i))break;t+=i>65535?2:1;}for(;n>t;){let i=e.codePointAt(n-1);if(i===void 0)break;let a=i>=56320&&i<=57343?n-2:n-1,r=e.codePointAt(a);if(r===void 0||!re.has(r))break;n=a;}return e.slice(t,n)}function et(e){return e>=0&&e<=31||e>=127&&e<=159}function tt(e,t){return e.length===1&&t>=55296&&t<=57343}var ot=12,rt=5e3,Gn=8,Jn=1e3,Wn=16,nt=512,at=100,st=8192,$n=32768,Te=1024,it=256,Ee=64,Yn=6e5,Xn=/^[A-Za-z0-9_-]+$/u,Qn=/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u,Zn=/[\u0000-\u001f\u007f-\u009f\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]/u,ei=/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?$/u,ti=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu,ct=new Set(["discouraged","preferred","required"]),ni=new Set(["singleDevice","multiDevice"]),ut=new Set(["ble","cable","hybrid","internal","nfc","smart-card","usb"]),lt=new Set(["hybrid","security-key","client-device"]),ii=new Set(["none","indirect","direct","enterprise"]),oi=new Set(["fido-u2f","packed","android-safetynet","android-key","tpm","apple","none"]),ri=new Set(["platform","cross-platform"]),ai=new Set(["discouraged","preferred","required"]),si=new Set([-8,-7,-257]);function dt(e){let t=q$1(e,ot,rt);return {challenge:wt(t.challenge),...b("timeout",yt(t.timeout)),...b("rpId",Rt(t.rpId)),...b("allowCredentials",Ot(t.allowCredentials)),...b("userVerification",J(t.userVerification,ct)),...b("hints",ce(t.hints,lt)),...b("extensions",bt(t.extensions))}}function pt(e){let t=q$1(e,ot,rt);return {challenge:wt(t.challenge),rp:ci(t.rp),user:ui(t.user),pubKeyCredParams:li(t.pubKeyCredParams),...b("timeout",yt(t.timeout)),...b("excludeCredentials",Ot(t.excludeCredentials)),...b("authenticatorSelection",di(t.authenticatorSelection)),...b("attestation",J(t.attestation,ii)),...b("attestationFormats",ce(t.attestationFormats,oi)),...b("hints",ce(t.hints,lt)),...b("extensions",bt(t.extensions))}}function ft(e){let t=h(e),n$1=o(t.session),i=n(t.user);return n$1.userId!==i.id&&p(),{session:n$1,user:i}}function xe(e){let t=h(e),n=t.counter;(!Number.isSafeInteger(n)||n<0)&&p();let i=De(t.deviceType,ni),o=j(t.backedUp);return o&&i!=="multiDevice"&&p(),{id:q(t.id,it),...gi(t),publicKey:pi(t.publicKey,$n),userId:q(t.userId,it),credentialID:le(t.credentialID,st),counter:n,deviceType:i,backedUp:o,...mi(t),createdAt:k(t.createdAt),...hi(t)}}function gt(e,t,n){let i=xe(e);return (i.credentialID!==t||(n===void 0?i.name!==void 0&&i.name!==null:i.name!==n))&&p(),i}function mt(e){(!Array.isArray(e)||e.length>at)&&p();let t=e.map(xe);return ue(t.map(n=>n.id)),ue(t.map(n=>n.credentialID)),t.length>1&&t.some(n=>n.userId!==t[0]?.userId)&&p(),t}function ht(e,t,n){let i=h(e),o=xe(i.passkey);return (o.id!==t||o.name!==n)&&p(),{passkey:o}}function At(e){return h(e).status!==true&&p(),{status:true}}function ci(e){let t=h(e);return {name:Ie(t.name,Te),...b("id",Rt(t.id))}}function ui(e){let t=h(e);return {id:le(t.id,128,1,64),name:Ie(t.name,Te),displayName:Ie(t.displayName,Te)}}function li(e){(!Array.isArray(e)||e.length===0||e.length>Ee)&&p();let t=e.map(n=>{let i=h(n);return (i.type!=="public-key"||!Number.isSafeInteger(i.alg)||!si.has(i.alg))&&p(),{type:"public-key",alg:i.alg}});return Ai(t.map(n=>n.alg)),t}function Ot(e){if(e===void 0)return;(!Array.isArray(e)||e.length>at)&&p();let t=e.map(n=>{let i=h(n);return i.type!=="public-key"&&p(),{type:"public-key",id:le(i.id,st),...b("transports",ce(i.transports,ut))}});return ue(t.map(n=>n.id)),t}function di(e){if(e===void 0)return;let t=h(e);t.requireResidentKey!==void 0&&typeof t.requireResidentKey!="boolean"&&p();let n=J(t.residentKey,ai);return t.requireResidentKey!==void 0&&n!==void 0&&t.requireResidentKey!==(n==="required")&&p(),{...b("authenticatorAttachment",J(t.authenticatorAttachment,ri)),...b("residentKey",n),...b("requireResidentKey",t.requireResidentKey),...b("userVerification",J(t.userVerification,ct))}}function yt(e){return e!==void 0&&(typeof e!="number"||!Number.isFinite(e)||e<0||e>Yn)&&p(),e}function bt(e){return e===void 0?void 0:q$1(e,Gn,Jn)}function ce(e,t){if(e===void 0)return;(!Array.isArray(e)||e.length>Ee)&&p();let n=e.map(i=>De(i,t));return ue(n),n}function J(e,t){if(e!==void 0)return De(e,t)}function wt(e){return le(e,Math.ceil(nt*4/3),Wn,nt)}function le(e,t,n=1,i=Number.POSITIVE_INFINITY){let o=q(e,t),a=o.length%4,r=fi(o.at(-1)??""),s=Math.floor(o.length*3/4);return (!Xn.test(o)||a===1||a===2&&(r&15)!==0||a===3&&(r&3)!==0||s<n||s>i)&&p(),o}function q(e,t){let n=i(e);return (n.length===0||n.length>t)&&p(),n}function Ie(e,t){let n=q(e,t);return Zn.test(n)&&p(),n}function Rt(e){if(e===void 0)return;let t=q(e,253);return t!=="localhost"&&(t.endsWith(".")||!t.includes(".")||t.split(".").some(n=>!ei.test(n)))&&p(),t}function pi(e,t){let n=q(e,t),i=n.endsWith("=="),o=!i&&n.endsWith("="),a=n.at(i?-3:o?-2:-1)??"",r=St(a);return (n.length%4!==0||!Qn.test(n)||i&&(r&15)!==0||o&&(r&3)!==0)&&p(),n}function fi(e){return St(e,true)}function St(e,t=false){return (t?"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_":"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/").indexOf(e)}function gi(e){let t=m(e,"name");return t===void 0?{}:(t!==null&&!ke(t)&&p(),{name:t})}function mi(e){let t=m(e,"transports");if(t==null||t==="")return t===void 0?{}:{transports:t};let n=t.split(",");return (n.length>Ee||n.some(i=>!ut.has(i))||new Set(n).size!==n.length)&&p(),{transports:t}}function hi(e){let t=m(e,"aaguid");return t==null?t===void 0?{}:{aaguid:null}:(ti.test(t)||p(),{aaguid:t})}function De(e,t){let n=i(e);return t.has(n)||p(),n}function b(e,t){return t===void 0?{}:{[e]:t}}function ue(e){new Set(e).size!==e.length&&p();}function Ai(e){new Set(e).size!==e.length&&p();}function Et(e,t){let n=new Map;return {async signIn(i={},o){let a=await e.request("/passkey/generate-authenticate-options");if(!a.data)return Tt(a.error);let r;try{r=dt(a.data);}catch{return kt()}let s;try{s=await Qe({optionsJSON:r,useBrowserAutofill:i.autoFill});}catch(g){return It(g,"AUTH_CANCELLED","Passkey authentication was cancelled.")}let{clientExtensionResults:c,...l}=s,u=n.get(s.id);if(u)return u;let f=(async()=>{let g=await e.request("/passkey/verify-authentication",{method:"POST",body:{response:l},fetchOptions:o,decode:ft});return g.data&&t(),g})();n.set(s.id,f);try{return await f}finally{n.get(s.id)===f&&n.delete(s.id);}},async add(i={},o){let a=ae(i.name);if(!a.valid)return se();let r=await e.request("/passkey/generate-register-options",{query:{name:a.value,authenticatorAttachment:i.authenticatorAttachment}});if(!r.data)return Tt(r.error);let s;try{s=pt(r.data);}catch{return kt()}let c;try{c=await $e({optionsJSON:s});}catch(g){return It(g,"REGISTRATION_CANCELLED","Passkey registration was cancelled.")}let{clientExtensionResults:l,...u}=c,f=await e.request("/passkey/verify-registration",{method:"POST",body:{response:u,name:a.value},fetchOptions:o,decode:g=>gt(g,c.id,a.value)});return f.data&&t(),f}}}function kt(){return {data:null,error:{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned invalid WebAuthn options."}}}function Tt(e){return {data:null,error:e??{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned no WebAuthn options."}}}function It(e,t,n){let i=yi(e,"page does not have focus"),o=e instanceof O?e.code==="ERROR_CEREMONY_ABORTED":Oi(e)==="AbortError",a=t==="AUTH_CANCELLED"?"Passkey authentication could not be completed by this browser.":"Passkey registration could not be completed by this browser.";return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:i?"PASSKEY_PAGE_NOT_FOCUSED":o?t:e instanceof O?e.code:"PASSKEY_BROWSER_ERROR",message:i?"Keep this page focused while completing the passkey prompt.":o?n:a}}}function Oi(e){return e&&typeof e=="object"&&"name"in e&&typeof e.name=="string"?e.name:void 0}function yi(e,t){let n=t.toLowerCase(),i=new Set,o=e;for(;o&&typeof o=="object"&&!i.has(o);){if(i.add(o),"message"in o&&typeof o.message=="string"&&o.message.toLowerCase().includes(n))return  true;o="cause"in o?o.cause:void 0;}return  false}function Dt(e,t){let n=new Set,i=null,o=null,a=null,r,s=m=>{u(m);};r={data:null,isPending:true,isRefetching:false,error:null,refetch:s};function c(m){r=m;for(let h of n)h();}async function l(m){return e.request("/get-session",{query:m?.query,decode:xt})}async function u(m){a?.abort();let h=new AbortController;a=h,c({...r,isPending:r.data===null&&r.error===null,isRefetching:r.data!==null});let z=await e.request("/get-session",{query:m?.query,fetchOptions:{signal:h.signal},decode:xt});a===h&&(a=null,c({data:z.data,error:z.error,isPending:false,isRefetching:false,refetch:s}));}function f(){if(typeof window>"u"||o)return;let m=()=>{u();},h=()=>{document.visibilityState==="visible"&&u();};window.addEventListener("focus",m),document.addEventListener("visibilitychange",h),typeof BroadcastChannel<"u"&&(i=new BroadcastChannel(`authowl:${t}`),i.addEventListener("message",m)),o=()=>{window.removeEventListener("focus",m),document.removeEventListener("visibilitychange",h),i?.close(),i=null,o=null;};}function g(m){return n.add(m),n.size===1&&(f(),u()),()=>{n.delete(m),n.size===0&&(a?.abort(),a=null,o?.());}}return {store:{subscribe:g,getSnapshot:()=>r},getSession:l,notifyMutation(){i?.postMessage({type:"session-changed"}),n.size>0&&u({query:{disableCookieCache:true}});}}}function xt(e){if(e===null)return null;let t=h(e);return (t.session===void 0||t.user===void 0)&&p(),{session:o(t.session),user:n(t.user)}}function Pe(){let e=globalThis.crypto.getRandomValues(new Uint8Array(16));e[6]=e[6]&15|64,e[8]=e[8]&63|128;let t=Array.from(e,n=>n.toString(16).padStart(2,"0")).join("");return `${t.slice(0,8)}-${t.slice(8,12)}-${t.slice(12,16)}-${t.slice(16,20)}-${t.slice(20)}`}async function Pt(e,t){return e.request("/user/metadata",{fetchOptions:t,decode:vt})}async function Ct(e,t,n){return e.request("/user/metadata",{method:"PATCH",body:{expected_version:t.expectedVersion,unsafe_metadata:t.unsafeMetadata},fetchOptions:n,decode:vt})}function vt(e){let t=h(e),n=q$1(t.public_metadata),i=q$1(t.unsafe_metadata);if(!Number.isSafeInteger(t.metadata_version)||t.metadata_version<0)throw new TypeError("Invalid AuthOwl metadata response");return {publicMetadata:n,unsafeMetadata:i,metadataVersion:t.metadata_version}}function Ut(e,t){let{post:n,mutation:i}=V(e,t);return {getMetadata:o=>Pt(e,o),updateUnsafeMetadata:(o,a)=>Ct(e,o,a),updateProfile:(o,a)=>i(n("/update-user",o,a,W)),changeEmail:(o,a)=>i(n("/change-email",o,a,W)),changePassword:(o,a)=>i(n("/change-password",o,a,bi)),listSessions:o=>e.request("/list-sessions",{fetchOptions:o,decode:wi}),revokeSession:({sessionId:o},a)=>i(n("/revoke-session",{sessionId:o},a,W)),revokeOtherSessions:o=>i(n("/revoke-other-sessions",{},o,W)),listSocialAccounts:async o=>{let a=await e.request("/list-accounts",{fetchOptions:o,decode:Ri});if(!a.data)return {data:null,error:a.error};let r=a.data.length>1;return {...a,data:a.data.filter(s=>s.providerId!=="credential").map(s=>({...s,canUnlink:r}))}},linkSocial:(o,a)=>n("/link-social",o,a,Si),unlinkSocial:(o,a)=>i(n("/unlink-account",o,a,W)),delete:(o={},a)=>i(n("/delete-user",o,a,ki))}}function W(e){let t=h(e);return {status:j(t.status)}}function bi(e){let t=h(e);return {user:n(t.user)}}function wi(e){return Array.isArray(e)||p(),e.map(t=>{let n=h(t);return {id:i(n.id),userId:i(n.userId),createdAt:k(n.createdAt),updatedAt:k(n.updatedAt),expiresAt:k(n.expiresAt),...zt("ipAddress",m(n,"ipAddress")),...zt("userAgent",m(n,"userAgent"))}})}function Ri(e){return Array.isArray(e)||p(),e.map(t=>{let n=h(t);return {id:i(n.id),userId:i(n.userId),providerId:i(n.providerId),accountId:i(n.accountId),scopes:l(n.scopes),createdAt:k(n.createdAt),updatedAt:k(n.updatedAt)}})}function Si(e){let t=h(e);return {url:i(t.url),redirect:j(t.redirect)}}function ki(e){let t=h(e);return {success:j(t.success),message:i(t.message)}}function zt(e,t){return t===void 0?{}:{[e]:t}}var Ti=new Set(["pending","accepted","rejected","canceled"]),Nt=1e4;function K(e,t,n){let i=h(e),o={id:A(i.id),name:A(i.name),slug:A(i.slug),createdAt:k(i.createdAt),...de("logo",m(i,"logo")),...de("metadata",i.metadata===void 0?void 0:r(i.metadata))};return U(o.id,t),U(o.slug,n),o}function _t(e){return N(e,K)}function Ce(e,t,n){return e===null?null:(t===null&&p(),K(e,t,n))}function Ft(e,t,n){if(e===null)return null;let i=h(e),o=K(i,t,n);return {...o,members:N(i.members,a=>Yt(a,o.id)),invitations:N(i.invitations,a=>C(a,void 0,o.id))}}function Mt(e,t){let n=N(e,i=>$t(i));return pe(n.map(i=>i.organizationId),t),n}function Lt(e,t,n){return e===null?null:(t===null&&p(),$t(e,t,n))}function Vt(e,t){let n=h(e);return (!Number.isSafeInteger(n.total)||n.total<0)&&p(),{members:Ii(n.members,t),total:n.total}}function C(e,t,n){let i=h(e),o=A(i.status);Ti.has(o)||p();let a={id:A(i.id),organizationId:A(i.organizationId),email:A(i.email),role:A(i.role),status:o,inviterId:A(i.inviterId),expiresAt:k(i.expiresAt),createdAt:k(i.createdAt)};return U(a.id,t),U(a.organizationId,n),a}function qt(e,t){let n=N(e,i=>C(i));return pe(n.map(i=>i.organizationId),t),n}function Kt(e){return N(e,t=>{let n=h(t);return {...C(n),organizationName:A(n.organizationName)}})}function Bt(e,t){let n=h(e);return {...C(n,t),organizationName:A(n.organizationName),organizationSlug:A(n.organizationSlug),inviterEmail:A(n.inviterEmail)}}function Ht(e,t){let n=h(e),i=C(n.invitation,t);return {invitation:i,member:B(n.member,void 0,i.organizationId)}}function jt(e,t){let n=h(e);return n.member!==null&&p(),{invitation:n.invitation===null?null:C(n.invitation,t),member:null}}function Gt(e,t){return e===null?null:C(e,t)}function Jt(e,t,n){let i=h(e);return {member:B(i.member,n,t)}}function B(e,t,n){let i=h(e),o={id:A(i.id),organizationId:A(i.organizationId),userId:A(i.userId),role:A(i.role),createdAt:k(i.createdAt),...i.user===void 0?{}:{user:Xt(i.user)}};return U(o.id,t),U(o.organizationId,n),o}function Wt(e,t){let n=N(e,i=>{let o=h(i);return {organizationId:A(o.organizationId),data:{role:A(o.role),...de("permission",o.permission===void 0?void 0:Ei(o.permission))}}});return pe(n.map(i=>i.organizationId),t),n.map(i=>i.data)}function $t(e,t,n){let i=h(e),o=i.updatedAt,a={id:A(i.id),name:A(i.name),organizationId:A(i.organizationId),createdAt:k(i.createdAt),...o===void 0?{}:{updatedAt:k(o)}};return U(a.id,t),U(a.organizationId,n),a}function Yt(e,t){let n=h(e);return {...B(n,void 0,t),user:Xt(n.user)}}function Ii(e,t){let n=N(e,i=>Yt(i));return pe(n.map(i=>i.organizationId),t),n}function Ei(e){let t=h(e),n={};for(let[i,o]of Object.entries(t))(i==="__proto__"||i==="constructor"||i==="prototype"||i.length===0||i.length>Nt||!Array.isArray(o))&&p(),n[i]=o.map(a=>A(a));return n}function A(e){let t=i(e);return (t.length===0||t.length>Nt)&&p(),t}function U(e,t){t!==void 0&&e!==t&&p();}function pe(e,t){let n=t??e[0];n!==void 0&&e.some(i=>i!==n)&&p();}function Xt(e){let t=h(e);return {id:A(t.id),name:A(t.name),email:A(t.email),...de("image",m(t,"image"))}}function N(e,t){return Array.isArray(e)||p(),e.map(n=>t(n))}function de(e,t){return t===void 0?{}:{[e]:t}}function Qt(e,t,n=()=>null){let{post:i,mutation:o}=V(e,t),a=(r,s,c,l)=>e.request(r,{query:s,fetchOptions:c,decode:l});return {create:(r,s)=>o(i("/organization/create",r,s,K)),list:r=>a("/organization/list",void 0,r,_t),get:(r={},s)=>a("/organization/get-full-organization",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,membersLimit:r.membersLimit},s,c=>Ft(c,r.organizationId,r.organizationSlug)),setActive:(r,s)=>o(i("/organization/set-active",r,s,c=>Ce(c,r.organizationId,r.organizationSlug))),listTeams:(r={},s)=>a("/organization/list-teams",{organizationId:r.organizationId},s,c=>Mt(c,r.organizationId)),setActiveTeam:(r,s)=>o(i("/organization/set-active-team",r,s,c=>Lt(c,r.teamId))),update:(r,s)=>o(i("/organization/update",r,s,c=>Ce(c,r.organizationId))),delete:(r,s)=>o(i("/organization/delete",r,s,c=>K(c,r.organizationId))),listMembers:(r={},s)=>a("/organization/list-members",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,limit:r.limit,offset:r.offset,sortBy:r.sortBy,sortDirection:r.sortDirection,filterField:r.filterField,filterValue:r.filterValue,filterOperator:r.filterOperator},s,c=>Vt(c,r.organizationId)),inviteMember:(r,s)=>o(i("/organization/invite-member",r,s,c=>C(c,void 0,r.organizationId))),listInvitations:(r={},s)=>a("/organization/list-invitations",{organizationId:r.organizationId},s,c=>qt(c,r.organizationId)),listUserInvitations:r=>a("/organization/list-user-invitations",void 0,r,Kt),getInvitation:(r,s)=>a("/organization/get-invitation",{id:r.id},s,c=>Bt(c,r.id)),acceptInvitation:(r,s)=>o(i("/organization/accept-invitation",r,s,c=>Ht(c,r.invitationId))),rejectInvitation:(r,s)=>o(i("/organization/reject-invitation",r,s,c=>jt(c,r.invitationId))),cancelInvitation:(r,s)=>o(i("/organization/cancel-invitation",r,s,c=>Gt(c,r.invitationId))),removeMember:(r,s)=>o(i("/organization/remove-member",r,s,c=>Jt(c,r.organizationId,r.memberIdOrEmail.includes("@")?void 0:r.memberIdOrEmail))),updateMemberRole:(r,s)=>o(i("/organization/update-member-role",r,s,c=>B(c,r.memberId,r.organizationId))),leave:(r,s)=>o(i("/organization/leave",r,s,c=>B(c,void 0,r.organizationId))),listRoles:(r={},s)=>a("/organization/list-roles",{organizationId:r.organizationId},s,c=>Wt(c,r.organizationId)),has:r=>u(n(),r),hasPermission:r=>s(n(),r.permission)}}var Zt=4096,xi=4096,Di=100,Pi=256,Ci=16,vi=64;function ze(e){let t=h(e);return t.twoFactorRedirect===true?((t.user!==void 0||t.redirect!==void 0||t.url!==void 0)&&p(),{twoFactorRedirect:true,...t.twoFactorMethods===void 0?{}:{twoFactorMethods:An(t.twoFactorMethods,Ci,vi)}}):(t.twoFactorRedirect!==void 0&&p(),{redirect:j(t.redirect),..._i(t,"url"),user:n(t.user)})}function en(e){let t=h(e);return {user:n(t.user)}}function tn(e){let t=h(e);return {sessionCreated:j(t.sessionCreated),user:n(t.user)}}function nn(e,t){let n$1=h(e),i=j(n$1.redirect);n$1.user===null&&p();let o=n$1.user!==void 0&&n$1.user!==null,a=n$1.url!==void 0&&n$1.url!==null;return i?((o||!a)&&p(),{redirect:true,url:ve(n$1.url,t)}):(o===a&&p(),o?{redirect:false,user:n(n$1.user)}:{redirect:false,url:ve(n$1.url,t)})}function on(e,t){let n=h(e);return (n.redirect!==true||n.user!==void 0)&&p(),{redirect:true,url:ve(n.url,t)}}function rn(e){return {status:j(h(e).status)}}function an(e){return {success:j(h(e).success)}}function sn(e){return h(e).status!=="pending"&&p(),{status:"pending"}}function cn(e){let t=h(e);return (t.status!==true||t.sessionCreated!==true)&&p(),{status:true,sessionCreated:true,user:zi(t.user)}}function Ue(e){return {status:j(h(e).status)}}function un(e){return {status:j(h(e).status)}}function ln(e){let t=h(e);return {status:j(t.status),user:n(t.user)}}function dn(e){return {success:j(h(e).success)}}function pn(e){let t=h(e);return {totpURI:Ni(t.totpURI),backupCodes:hn(t.backupCodes)}}function fn(e){return {status:j(h(e).status)}}function fe(e){return h(e).status!==true&&p(),{status:true}}function gn(e){return {status:j(h(e).status)}}function mn(e){let t=h(e);return t.status!==void 0&&t.status!==true&&p(),{backupCodes:hn(t.backupCodes)}}function zi(e){let t=h(e);return {id:H(t.id,512),...Fi(t,"name",1024),phoneNumber:H(t.phoneNumber,64),phoneNumberVerified:j(t.phoneNumberVerified),...t.createdAt===void 0?{}:{createdAt:k(t.createdAt)},...t.updatedAt===void 0?{}:{updatedAt:k(t.updatedAt)}}}function ve(e,t){let n=H(e,Zt);/[\u0000-\u0020\u007f]/u.test(n)&&p();let i;try{i=new URL(n);}catch{return p()}return (i.username||i.password)&&p(),i.protocol==="https:"||t&&i.protocol==="http:"&&Ui(i.hostname)?i.href:p()}function Ui(e){let t=e.toLowerCase();return t==="localhost"||t==="127.0.0.1"||t==="[::1]"}function Ni(e){let t=H(e,xi),n;try{n=new URL(t);}catch{return p()}let i=n.searchParams.get("secret");return (n.protocol!=="otpauth:"||n.hostname.toLowerCase()!=="totp"||n.username||n.password||n.hash||i===null||i.length===0||i.length>512||/\s/u.test(i))&&p(),t}function hn(e){return An(e,Di,Pi)}function An(e,t,n){(!Array.isArray(e)||e.length===0||e.length>t)&&p();let i=e.map(o=>H(o,n));return i.some(o=>o.trim().length===0)&&p(),new Set(i).size!==i.length&&p(),i}function H(e,t){let n=i(e);return (n.length===0||n.length>t)&&p(),n}function _i(e,t){let n=e[t];return n==null?{}:{[t]:H(n,Zt)}}function Fi(e,t,n){let i=m(e,t);return i===void 0?{}:(i!==null&&i.length>n&&p(),{[t]:i})}function On(e,t=()=>{}){let n=ee(e),i=Dt(n,e.decoded.projectId),o=Et(n,i.notifyMutation),a=()=>{i.notifyMutation(),t();},{post:r,mutation:s}=V(n,a),c=e.decoded.env==="test";return {sessionStore:i.store,getSession:i.getSession,account:Ut(n,a),organization:Qt(n,a,()=>i.store.getSnapshot().data?.session.membership??null),signIn:{email:(l,u)=>s(r("/sign-in/email",l,u,ze),f=>!("twoFactorRedirect"in f)),username:(l,u)=>s(r("/sign-in/username",l,u,ze),f=>!("twoFactorRedirect"in f)),social:async(l,u)=>{let f=await s(r("/sign-in/social",l,u,g=>nn(g,c)),g=>"user"in g);return f.error!==null||f.data===null||"url"in f.data&&f.data.redirect&&!l.disableRedirect&&typeof window<"u"&&window.location.assign(f.data.url),f},sso:async(l,u)=>{let f=await r("/sign-in/sso",l,u,g=>on(g,c));return f.error!==null||f.data===null||typeof window<"u"&&window.location.assign(f.data.url),f},magicLink:(l,u)=>r("/sign-in/magic-link",l,u,rn),emailOtp:(l,u)=>s(r("/sign-in/email-otp",l,u,en)),passkey:(l,u)=>o.signIn(l,u)},signUp:{email:(l,u)=>s(r("/sign-up/email",l,u,tn),f=>f.sessionCreated)},emailOtp:{sendVerificationOtp:(l,u)=>r("/email-otp/send-verification-otp",l,u,an),verifyEmail:(l,u)=>s(r("/email-otp/verify-email",l,u,ln))},phoneOtp:{start:(l,u)=>r("/phone-otp/start",{...l,idempotencyKey:l.idempotencyKey??Pe()},u,sn),verify:(l,u)=>s(r("/phone-otp/verify",l,u,cn))},requestPasswordReset:(l,u)=>r("/request-password-reset",l,u,Ue),resetPassword:(l,u)=>r("/reset-password",l,u,Ue),sendVerificationEmail:(l,u)=>r("/send-verification-email",l,u,un),passkey:{addPasskey:(l,u)=>o.add(l,u),listUserPasskeys:()=>n.request("/passkey/list-user-passkeys",{decode:mt}),updatePasskey:async(l,u)=>{let f=ae(l.name);if(!f.valid||f.value===void 0)return se();let g=f.value;return r("/passkey/update-passkey",{...l,name:g},u,m=>ht(m,l.id,g))},deletePasskey:(l,u)=>r("/passkey/delete-passkey",l,u,At)},twoFactor:{enable:(l,u)=>r("/two-factor/enable",l,u,pn),disable:(l,u)=>s(r("/two-factor/disable",l,u,fn),f=>f.status),verifyTotp:(l,u)=>s(r("/two-factor/verify-totp",l,u,fe)),verifyBackupCode:(l,u)=>s(r("/two-factor/verify-backup-code",l,u,fe)),sendOtp:(l={},u)=>r("/two-factor/send-otp",l,u,gn),verifyOtp:(l,u)=>s(r("/two-factor/verify-otp",l,u,fe)),generateBackupCodes:(l,u)=>r("/two-factor/generate-backup-codes",l,u,mn)},signOut:l=>s(n.request("/sign-out",{method:"POST",body:{},fetchOptions:l,decode:dn}),u=>u.success)}}var ge=class extends Error{status;requestId;constructor(t,n,i){super(`${t} request failed with status ${n.status}.`),this.name="AuthOwlHttpError",this.status=n.status,this.requestId=i;}};function M(e,t,n={}){let i=new Headers(n.init?.headers);return i.set("x-publishable-key",e.publishableKey),g({fetchImpl:e.fetch??fetch,url:t,init:{...n.init,headers:i},allowHttpLoopback:e.decoded.env==="test",...n.timeoutMs===void 0?{}:{timeoutMs:n.timeoutMs},...n.maxResponseBytes===void 0?{}:{maxResponseBytes:n.maxResponseBytes},...n.decode===void 0?{}:{decode:n.decode}})}function L(e,t){if(!e.response.ok)throw new ge(t,e.response,e.requestId);return e.data}function bn(e){return `${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}/consent`}async function Ne(e){let t=await M(e,bn(e),{init:{method:"GET",credentials:"include"},maxResponseBytes:65536,decode:Mi});return t.response.status===401?{required:false}:L(t,"consent status")}async function _e(e,t){if(!Number.isSafeInteger(t)||t<1)throw new TypeError("Consent version must be a positive integer.");return L(await M(e,bn(e),{init:{method:"POST",headers:{"content-type":"application/json"},credentials:"include",body:JSON.stringify({version:t})},maxResponseBytes:64*1024,decode:Li}),"consent accept")}function Mi(e){let t=h(e),n=j(t.required),i=Vi(t.needsConsent),o=wn(t.version),a=yn(t.termsUrl),r=yn(t.privacyUrl);return {required:n,...i===void 0?{}:{needsConsent:i},...o===void 0?{}:{version:o},...a===void 0?{}:{termsUrl:a},...r===void 0?{}:{privacyUrl:r}}}function Li(e){let t=h(e),n=wn(t.version);return {ok:j(t.ok),...n===void 0?{}:{version:n}}}function Vi(e){if(e===void 0||typeof e=="boolean")return e;throw new TypeError("Invalid consent response.")}function wn(e){if(e===void 0||Number.isSafeInteger(e)&&e>=1)return e;throw new TypeError("Invalid consent response.")}function yn(e){if(e===void 0||typeof e=="string"&&e.length<=4096)return e;throw new TypeError("Invalid consent response.")}var qi=30;function Ki(e){return typeof e?.exp=="number"?e.exp:null}function Bi(e){let t=e.split(".")[1];if(!t)return null;try{let n=t.replace(/-/g,"+").replace(/_/g,"/"),i=JSON.parse(atob(n));return typeof i=="object"&&i!==null?i:null}catch{return null}}function Fe(e){let t=new Map;async function n(a={}){let r=a.template===void 0?null:a.template.trim().toLowerCase();if(r==="")throw new TypeError("Template missing");let s=r??"",c=t.get(s);c||(c={activeKey:null,cachedByKey:new Map,inflight:null,sequence:0},t.set(s,c));let l=a.forceRefresh===true;if(!l){let h=c.activeKey?c.cachedByKey.get(c.activeKey):null;if(h&&h.exp-Date.now()/1e3>qi)return h.token;if(c.inflight)return c.inflight}let u=++c.sequence,f=()=>t.get(s)===c&&c.sequence===u,g=(async()=>{let h=r?`${e.projectBaseURL}/token/${encodeURIComponent(r)}`:`${e.projectBaseURL}/token`,z=await M(e,h,{init:{method:"GET",credentials:"include"},maxResponseBytes:64*1024,decode:X=>Hi(X,r!==null)});if(z.response.status===401)return f()&&i(),null;let D=L(z,"token"),Y=D.policyVersion,me=D.token,j=Bi(me),qe=Ki(j);if(f())if(qe!==null){let X=typeof j?.sub=="string"?j.sub:null,Tn=typeof j?.org_id=="string"?j.org_id:null;if(!r||X){let Ke=JSON.stringify([e.projectBaseURL,X,Tn,r,Y]);c.cachedByKey.clear(),c.cachedByKey.set(Ke,{token:me,exp:qe}),c.activeKey=Ke;}else o(c);}else o(c);return me})();if(l)return g;let m=g.finally(()=>{c.inflight===m&&(c.inflight=null);});return c.inflight=m,m}function i(){t.clear();}function o(a){a.cachedByKey.clear(),a.activeKey=null;}return {getToken:n,clear:i}}function Hi(e,t){let n=h(e),i$1=i(n.token);if(i$1.length===0||i$1.length>32*1024)throw new TypeError("Invalid token response.");if(!t)return {token:i$1,policyVersion:0};let o=h(n.template);if(!Number.isSafeInteger(o.policyVersion)||o.policyVersion<1)throw new TypeError("Invalid token response.");return {token:i$1,policyVersion:o.policyVersion}}function ji(e){let t=Fe(e),n=On(e,t.clear),i=ee(e,`${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}`),o=r=>(...s)=>(t.clear(),r(...s)),a={getConsentStatus:()=>Ne(e),acceptConsent:r=>_e(e,r),getToken:t.getToken,waitlist:{join:(r,s)=>i.request("/waitlist",{method:"POST",body:r,fetchOptions:s,credentials:"omit"})},account:{...n.account,updateUnsafeMetadata:o(n.account.updateUnsafeMetadata),updateProfile:o(n.account.updateProfile),changeEmail:o(n.account.changeEmail),changePassword:o(n.account.changePassword),revokeSession:o(n.account.revokeSession),delete:o(n.account.delete)},signIn:{email:o(n.signIn.email),username:o(n.signIn.username),social:o(n.signIn.social),sso:n.signIn.sso,magicLink:n.signIn.magicLink,emailOtp:o(n.signIn.emailOtp),passkey:o(n.signIn.passkey)},signUp:{email:o(n.signUp.email)},emailOtp:{...n.emailOtp,verifyEmail:o(n.emailOtp.verifyEmail)},twoFactor:{enable:n.twoFactor.enable,disable:o(n.twoFactor.disable),verifyTotp:o(n.twoFactor.verifyTotp),verifyBackupCode:o(n.twoFactor.verifyBackupCode),sendOtp:n.twoFactor.sendOtp,verifyOtp:o(n.twoFactor.verifyOtp),generateBackupCodes:n.twoFactor.generateBackupCodes},phoneOtp:{start:n.phoneOtp.start,verify:o(n.phoneOtp.verify)},signOut:o(n.signOut)};return {...n,...a}}async function Gi(e){let n=`${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}/public-config`;return L(await M(e,n,{init:{method:"GET",credentials:"omit"},maxResponseBytes:256*1024,decode:i=>Ji(i,e)}),"public-config")}function Ji(e,t){let n=q$1(e),i=n.environmentId,o=n.environmentType,a=`${new URL(t.apiUrl).origin}/api/projects/${t.decoded.projectId}/auth`;if(typeof n.applicationId!="string"||!Wi(n.applicationId)||i!==t.decoded.projectId||o!=="development"&&o!=="production"||n.authBaseUrl!==a)throw x();let r=S(n.branding),s=S(n.legal);if(!Me(n.enabledMethods,64)||!Me(n.socialProviders,64)||!Sn(r,["appName","logoUrl","primaryColor"])||r.theme!==void 0&&r.theme!=="light"&&r.theme!=="dark"&&r.theme!=="system"||!Sn(s,["termsUrl","privacyUrl"])||!Number.isSafeInteger(s.version)||s.version<0||typeof s.required!="boolean")throw x();if(n.socialProviderClientIds!==void 0){let c=S(n.socialProviderClientIds);if(Object.keys(c).length>64||Object.values(c).some(l=>typeof l!="string"||l.length>2048))throw x()}if(!v(n,["requireEmailVerification","twoFactor","mfaRequired","accountDeletion","organizations","sso","badge"])||!Rn(n.turnstileSiteKey)||!Rn(n.authTurnstileSiteKey)||typeof n.locale!="string"||n.locale.length===0||n.locale.length>64||!Number.isSafeInteger(n.configVersion)||n.configVersion<0)throw x();if(n.jwtIssuer!==null){let c=S(n.jwtIssuer);if(c.issuer!==a||c.jwksUrl!==`${a}/jwks`||c.aud!==t.decoded.projectId)throw x()}if(n.signUp!==void 0){let c=S(n.signUp).mode;if(typeof c!="string"||!["open","restricted","allowlist","waitlist"].includes(c))throw x()}if(n.authentication!==void 0&&$i(n.authentication),n.emailVerification!==void 0){let c=S(n.emailVerification);if(!v(c,["required"])||c.method!=="link"&&c.method!=="code")throw x()}if(n.userModel!==void 0&&!v(S(n.userModel),["requireEmail","firstLastName","emailChange","accountDeletion"]))throw x();if(n.mfa!==void 0){let c=S(n.mfa);if(!v(c,["totp","required","backupCodes"])||(c.required===true||c.backupCodes===true)&&c.totp!==true)throw x()}return n}function Wi(e){return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(e)}function x(){return new TypeError("public-config returned an invalid response")}function S(e){if(!e||typeof e!="object"||Array.isArray(e))throw x();return e}function Rn(e){return e===null||typeof e=="string"&&e.length<=4096}function $i(e){let t=S(e),n=S(t.email),i=S(t.password),o=i.minLength!==void 0||i.maxLength!==void 0;if(!v(n,["signUp"])||!Me(n.signIn,3)||n.signIn.some(a=>a!=="password"&&a!=="magic_link"&&a!=="email_otp")||!v(S(t.phone),["signUp","signIn"])||!v(i,["signUp","add"])||o&&(!Number.isSafeInteger(i.minLength)||!Number.isSafeInteger(i.maxLength)||i.minLength<1||i.maxLength>4096||i.minLength>i.maxLength)||!v(S(t.passkey),["signIn","add"])||!v(S(t.username),["collectOnSignUp","signIn"]))throw x()}function v(e,t){return t.every(n=>typeof e[n]=="boolean")}function Sn(e,t){return t.every(n=>e[n]===void 0||typeof e[n]=="string"&&e[n].length<=4096)}function Me(e,t){return Array.isArray(e)&&e.length<=t&&e.every(n=>typeof n=="string"&&n.length<=128)&&new Set(e).size===e.length}var $=class extends Error{constructor(n,i){super(n);this.cause=i;this.name="AuthOwlError";}cause},Le=class extends ${constructor(n,i){super(`Rate limited. Retry after ${n}s.`,i);this.retryAfterSeconds=n;this.name="RateLimitedError";}retryAfterSeconds},Ve=class extends ${constructor(t="invalid publishable key",n){super(t,n),this.name="InvalidKeyError";}};var kn=["en","ar"];function Yi(e){return e==="ar"?"rtl":"ltr"}function Xi(e){return typeof e=="string"&&kn.includes(e)}
+`,t);}function Ye(){if(!F())return Se.stubThis(new Promise(t=>t(false)));let e=globalThis.PublicKeyCredential;return e?.isConditionalMediationAvailable===void 0?Se.stubThis(new Promise(t=>t(false))):Se.stubThis(e.isConditionalMediationAvailable())}var Se={stubThis:e=>e};function Xe({error:e,options:t}){let{publicKey:n}=t;if(!n)throw Error("options was missing required publicKey property");if(e.name==="AbortError"){if(t.signal instanceof AbortSignal)return new O({message:"Authentication ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:e})}else {if(e.name==="NotAllowedError")return new O({message:e.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:e});if(e.name==="SecurityError"){let i=globalThis.location.hostname;if(ne(i)){if(n.rpId!==i)return new O({message:`The RP ID "${n.rpId}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:e})}else return new O({message:`${globalThis.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:e})}else if(e.name==="UnknownError")return new O({message:"The authenticator was unable to process the specified options, or could not create a new assertion signature",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:e})}return e}async function Qe(e){!e.optionsJSON&&e.challenge&&(console.warn("startAuthentication() was not called correctly. It will try to continue with the provided options, but this call should be refactored to use the expected call structure instead. See https://simplewebauthn.dev/docs/packages/browser#typeerror-cannot-read-properties-of-undefined-reading-challenge for more information."),e={optionsJSON:e});let{optionsJSON:t,useBrowserAutofill:n=false,verifyBrowserAutofillInput:i=true}=e;if(!F())throw new Error("WebAuthn is not supported in this browser");let o;t.allowCredentials?.length!==0&&(o=t.allowCredentials?.map(te));let a={...t,challenge:_(t.challenge),allowCredentials:o},r={};if(n){if(!await Ye())throw Error("Browser does not support WebAuthn autofill");if(document.querySelectorAll("input[autocomplete$='webauthn']").length<1&&i)throw Error('No <input> with "webauthn" as the only or last value in its `autocomplete` attribute was detected');r.mediation="conditional",a.allowCredentials=[];}r.publicKey=a,r.signal=ie.createNewAbortSignal();let s;try{s=await navigator.credentials.get(r);}catch(m){throw Xe({error:m,options:r})}if(!s)throw new Error("Authentication was not completed");let{id:c,rawId:l,response:u,type:f}=s,g;return u.userHandle&&(g=E(u.userHandle)),{id:c,rawId:E(l),response:{authenticatorData:E(u.authenticatorData),clientDataJSON:E(u.clientDataJSON),signature:E(u.signature),userHandle:g},type:f,clientExtensionResults:s.getClientExtensionResults(),authenticatorAttachment:oe(s.authenticatorAttachment)}}var Ze=new Set([1564,8206,8207,8234,8235,8236,8237,8238,8294,8295,8296,8297]),re=new Set([9,10,11,12,13,32,133,160,5760,8192,8193,8194,8195,8196,8197,8198,8199,8200,8201,8202,8232,8233,8239,8287,12288,65279]);function ae(e){if(e===void 0)return {valid:true,value:void 0};for(let n of e){let i=n.codePointAt(0);if(i===void 0||tt(n,i)||et(i)||Ze.has(i))return {valid:false}}let t=jn(e);return ke(t)?{valid:true,value:t}:{valid:false}}function ke(e){let t=0,n,i;for(let o of e){if(t+=1,t>256)return  false;let a=o.codePointAt(0);if(a===void 0||tt(o,a)||et(a)||Ze.has(a))return  false;n??=a,i=a;}return t>0&&n!==void 0&&i!==void 0&&!re.has(n)&&!re.has(i)}function se(){return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:"INVALID_PASSKEY_NAME",message:"Passkey names must contain 1 to 256 safe Unicode characters."}}}function jn(e){let t=0,n=e.length;for(;t<n;){let i=e.codePointAt(t);if(i===void 0||!re.has(i))break;t+=i>65535?2:1;}for(;n>t;){let i=e.codePointAt(n-1);if(i===void 0)break;let a=i>=56320&&i<=57343?n-2:n-1,r=e.codePointAt(a);if(r===void 0||!re.has(r))break;n=a;}return e.slice(t,n)}function et(e){return e>=0&&e<=31||e>=127&&e<=159}function tt(e,t){return e.length===1&&t>=55296&&t<=57343}var ot=12,rt=5e3,Gn=8,Jn=1e3,Wn=16,nt=512,at=100,st=8192,$n=32768,Te=1024,it=256,Ee=64,Yn=6e5,Xn=/^[A-Za-z0-9_-]+$/u,Qn=/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u,Zn=/[\u0000-\u001f\u007f-\u009f\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]/u,ei=/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?$/u,ti=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu,ct=new Set(["discouraged","preferred","required"]),ni=new Set(["singleDevice","multiDevice"]),ut=new Set(["ble","cable","hybrid","internal","nfc","smart-card","usb"]),lt=new Set(["hybrid","security-key","client-device"]),ii=new Set(["none","indirect","direct","enterprise"]),oi=new Set(["fido-u2f","packed","android-safetynet","android-key","tpm","apple","none"]),ri=new Set(["platform","cross-platform"]),ai=new Set(["discouraged","preferred","required"]),si=new Set([-8,-7,-257]);function dt(e){let t=q$1(e,ot,rt);return {challenge:wt(t.challenge),...b("timeout",yt(t.timeout)),...b("rpId",Rt(t.rpId)),...b("allowCredentials",Ot(t.allowCredentials)),...b("userVerification",J(t.userVerification,ct)),...b("hints",ce(t.hints,lt)),...b("extensions",bt(t.extensions))}}function pt(e){let t=q$1(e,ot,rt);return {challenge:wt(t.challenge),rp:ci(t.rp),user:ui(t.user),pubKeyCredParams:li(t.pubKeyCredParams),...b("timeout",yt(t.timeout)),...b("excludeCredentials",Ot(t.excludeCredentials)),...b("authenticatorSelection",di(t.authenticatorSelection)),...b("attestation",J(t.attestation,ii)),...b("attestationFormats",ce(t.attestationFormats,oi)),...b("hints",ce(t.hints,lt)),...b("extensions",bt(t.extensions))}}function ft(e){let t=h(e),n$1=o(t.session),i=n(t.user);return n$1.userId!==i.id&&p(),{session:n$1,user:i}}function xe(e){let t=h(e),n=t.counter;(!Number.isSafeInteger(n)||n<0)&&p();let i=De(t.deviceType,ni),o=j(t.backedUp);return o&&i!=="multiDevice"&&p(),{id:q(t.id,it),...gi(t),publicKey:pi(t.publicKey,$n),userId:q(t.userId,it),credentialID:le(t.credentialID,st),counter:n,deviceType:i,backedUp:o,...mi(t),createdAt:k(t.createdAt),...hi(t)}}function gt(e,t,n){let i=xe(e);return (i.credentialID!==t||(n===void 0?i.name!==void 0&&i.name!==null:i.name!==n))&&p(),i}function mt(e){(!Array.isArray(e)||e.length>at)&&p();let t=e.map(xe);return ue(t.map(n=>n.id)),ue(t.map(n=>n.credentialID)),t.length>1&&t.some(n=>n.userId!==t[0]?.userId)&&p(),t}function ht(e,t,n){let i=h(e),o=xe(i.passkey);return (o.id!==t||o.name!==n)&&p(),{passkey:o}}function At(e){return h(e).status!==true&&p(),{status:true}}function ci(e){let t=h(e);return {name:Ie(t.name,Te),...b("id",Rt(t.id))}}function ui(e){let t=h(e);return {id:le(t.id,128,1,64),name:Ie(t.name,Te),displayName:Ie(t.displayName,Te)}}function li(e){(!Array.isArray(e)||e.length===0||e.length>Ee)&&p();let t=e.map(n=>{let i=h(n);return (i.type!=="public-key"||!Number.isSafeInteger(i.alg)||!si.has(i.alg))&&p(),{type:"public-key",alg:i.alg}});return Ai(t.map(n=>n.alg)),t}function Ot(e){if(e===void 0)return;(!Array.isArray(e)||e.length>at)&&p();let t=e.map(n=>{let i=h(n);return i.type!=="public-key"&&p(),{type:"public-key",id:le(i.id,st),...b("transports",ce(i.transports,ut))}});return ue(t.map(n=>n.id)),t}function di(e){if(e===void 0)return;let t=h(e);t.requireResidentKey!==void 0&&typeof t.requireResidentKey!="boolean"&&p();let n=J(t.residentKey,ai);return t.requireResidentKey!==void 0&&n!==void 0&&t.requireResidentKey!==(n==="required")&&p(),{...b("authenticatorAttachment",J(t.authenticatorAttachment,ri)),...b("residentKey",n),...b("requireResidentKey",t.requireResidentKey),...b("userVerification",J(t.userVerification,ct))}}function yt(e){return e!==void 0&&(typeof e!="number"||!Number.isFinite(e)||e<0||e>Yn)&&p(),e}function bt(e){return e===void 0?void 0:q$1(e,Gn,Jn)}function ce(e,t){if(e===void 0)return;(!Array.isArray(e)||e.length>Ee)&&p();let n=e.map(i=>De(i,t));return ue(n),n}function J(e,t){if(e!==void 0)return De(e,t)}function wt(e){return le(e,Math.ceil(nt*4/3),Wn,nt)}function le(e,t,n=1,i=Number.POSITIVE_INFINITY){let o=q(e,t),a=o.length%4,r=fi(o.at(-1)??""),s=Math.floor(o.length*3/4);return (!Xn.test(o)||a===1||a===2&&(r&15)!==0||a===3&&(r&3)!==0||s<n||s>i)&&p(),o}function q(e,t){let n=i(e);return (n.length===0||n.length>t)&&p(),n}function Ie(e,t){let n=q(e,t);return Zn.test(n)&&p(),n}function Rt(e){if(e===void 0)return;let t=q(e,253);return t!=="localhost"&&(t.endsWith(".")||!t.includes(".")||t.split(".").some(n=>!ei.test(n)))&&p(),t}function pi(e,t){let n=q(e,t),i=n.endsWith("=="),o=!i&&n.endsWith("="),a=n.at(i?-3:o?-2:-1)??"",r=St(a);return (n.length%4!==0||!Qn.test(n)||i&&(r&15)!==0||o&&(r&3)!==0)&&p(),n}function fi(e){return St(e,true)}function St(e,t=false){return (t?"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_":"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/").indexOf(e)}function gi(e){let t=m(e,"name");return t===void 0?{}:(t!==null&&!ke(t)&&p(),{name:t})}function mi(e){let t=m(e,"transports");if(t==null||t==="")return t===void 0?{}:{transports:t};let n=t.split(",");return (n.length>Ee||n.some(i=>!ut.has(i))||new Set(n).size!==n.length)&&p(),{transports:t}}function hi(e){let t=m(e,"aaguid");return t==null?t===void 0?{}:{aaguid:null}:(ti.test(t)||p(),{aaguid:t})}function De(e,t){let n=i(e);return t.has(n)||p(),n}function b(e,t){return t===void 0?{}:{[e]:t}}function ue(e){new Set(e).size!==e.length&&p();}function Ai(e){new Set(e).size!==e.length&&p();}function Et(e,t){let n=new Map;return {async signIn(i={},o){let a=await e.request("/passkey/generate-authenticate-options");if(!a.data)return Tt(a.error);let r;try{r=dt(a.data);}catch{return kt()}let s;try{s=await Qe({optionsJSON:r,useBrowserAutofill:i.autoFill});}catch(g){return It(g,"AUTH_CANCELLED","Passkey authentication was cancelled.")}let{clientExtensionResults:c,...l}=s,u=n.get(s.id);if(u)return u;let f=(async()=>{let g=await e.request("/passkey/verify-authentication",{method:"POST",body:{response:l},fetchOptions:o,decode:ft});return g.data&&t(),g})();n.set(s.id,f);try{return await f}finally{n.get(s.id)===f&&n.delete(s.id);}},async add(i={},o){let a=ae(i.name);if(!a.valid)return se();let r=await e.request("/passkey/generate-register-options",{query:{name:a.value,authenticatorAttachment:i.authenticatorAttachment}});if(!r.data)return Tt(r.error);let s;try{s=pt(r.data);}catch{return kt()}let c;try{c=await $e({optionsJSON:s});}catch(g){return It(g,"REGISTRATION_CANCELLED","Passkey registration was cancelled.")}let{clientExtensionResults:l,...u}=c,f=await e.request("/passkey/verify-registration",{method:"POST",body:{response:u,name:a.value},fetchOptions:o,decode:g=>gt(g,c.id,a.value)});return f.data&&t(),f}}}function kt(){return {data:null,error:{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned invalid WebAuthn options."}}}function Tt(e){return {data:null,error:e??{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned no WebAuthn options."}}}function It(e,t,n){let i=yi(e,"page does not have focus"),o=e instanceof O?e.code==="ERROR_CEREMONY_ABORTED":Oi(e)==="AbortError",a=t==="AUTH_CANCELLED"?"Passkey authentication could not be completed by this browser.":"Passkey registration could not be completed by this browser.";return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:i?"PASSKEY_PAGE_NOT_FOCUSED":o?t:e instanceof O?e.code:"PASSKEY_BROWSER_ERROR",message:i?"Keep this page focused while completing the passkey prompt.":o?n:a}}}function Oi(e){return e&&typeof e=="object"&&"name"in e&&typeof e.name=="string"?e.name:void 0}function yi(e,t){let n=t.toLowerCase(),i=new Set,o=e;for(;o&&typeof o=="object"&&!i.has(o);){if(i.add(o),"message"in o&&typeof o.message=="string"&&o.message.toLowerCase().includes(n))return  true;o="cause"in o?o.cause:void 0;}return  false}function Dt(e,t){let n=new Set,i=null,o=null,a=null,r,s=m=>{u(m);};r={data:null,isPending:true,isRefetching:false,error:null,refetch:s};function c(m){r=m;for(let h of n)h();}async function l(m){return e.request("/get-session",{query:m?.query,decode:xt})}async function u(m){a?.abort();let h=new AbortController;a=h,c({...r,isPending:r.data===null&&r.error===null,isRefetching:r.data!==null});let z=await e.request("/get-session",{query:m?.query,fetchOptions:{signal:h.signal},decode:xt});a===h&&(a=null,c({data:z.data,error:z.error,isPending:false,isRefetching:false,refetch:s}));}function f(){if(typeof window>"u"||o)return;let m=()=>{u();},h=()=>{document.visibilityState==="visible"&&u();};window.addEventListener("focus",m),document.addEventListener("visibilitychange",h),typeof BroadcastChannel<"u"&&(i=new BroadcastChannel(`authowl:${t}`),i.addEventListener("message",m)),o=()=>{window.removeEventListener("focus",m),document.removeEventListener("visibilitychange",h),i?.close(),i=null,o=null;};}function g(m){return n.add(m),n.size===1&&(f(),u()),()=>{n.delete(m),n.size===0&&(a?.abort(),a=null,o?.());}}return {store:{subscribe:g,getSnapshot:()=>r},getSession:l,notifyMutation(){i?.postMessage({type:"session-changed"}),n.size>0&&u({query:{disableCookieCache:true}});}}}function xt(e){if(e===null)return null;let t=h(e);return (t.session===void 0||t.user===void 0)&&p(),{session:o(t.session),user:n(t.user)}}function Pe(){let e=globalThis.crypto.getRandomValues(new Uint8Array(16));e[6]=e[6]&15|64,e[8]=e[8]&63|128;let t=Array.from(e,n=>n.toString(16).padStart(2,"0")).join("");return `${t.slice(0,8)}-${t.slice(8,12)}-${t.slice(12,16)}-${t.slice(16,20)}-${t.slice(20)}`}async function Pt(e,t){return e.request("/user/metadata",{fetchOptions:t,decode:vt})}async function Ct(e,t,n){return e.request("/user/metadata",{method:"PATCH",body:{expected_version:t.expectedVersion,unsafe_metadata:t.unsafeMetadata},fetchOptions:n,decode:vt})}function vt(e){let t=h(e),n=q$1(t.public_metadata),i=q$1(t.unsafe_metadata);if(!Number.isSafeInteger(t.metadata_version)||t.metadata_version<0)throw new TypeError("Invalid AuthOwl metadata response");return {publicMetadata:n,unsafeMetadata:i,metadataVersion:t.metadata_version}}function Ut(e,t){let{post:n,mutation:i}=V(e,t);return {getMetadata:o=>Pt(e,o),updateUnsafeMetadata:(o,a)=>Ct(e,o,a),updateProfile:(o,a)=>i(n("/update-user",o,a,W)),changeEmail:(o,a)=>i(n("/change-email",o,a,W)),changePassword:(o,a)=>i(n("/change-password",o,a,bi)),listSessions:o=>e.request("/list-sessions",{fetchOptions:o,decode:wi}),revokeSession:({sessionId:o},a)=>i(n("/revoke-session",{sessionId:o},a,W)),revokeOtherSessions:o=>i(n("/revoke-other-sessions",{},o,W)),listSocialAccounts:async o=>{let a=await e.request("/list-accounts",{fetchOptions:o,decode:Ri});if(!a.data)return {data:null,error:a.error};let r=a.data.length>1;return {...a,data:a.data.filter(s=>s.providerId!=="credential").map(s=>({...s,canUnlink:r}))}},linkSocial:(o,a)=>n("/link-social",o,a,Si),unlinkSocial:(o,a)=>i(n("/unlink-account",o,a,W)),delete:(o={},a)=>i(n("/delete-user",o,a,ki))}}function W(e){let t=h(e);return {status:j(t.status)}}function bi(e){let t=h(e);return {user:n(t.user)}}function wi(e){return Array.isArray(e)||p(),e.map(t=>{let n=h(t);return {id:i(n.id),userId:i(n.userId),createdAt:k(n.createdAt),updatedAt:k(n.updatedAt),expiresAt:k(n.expiresAt),...zt("ipAddress",m(n,"ipAddress")),...zt("userAgent",m(n,"userAgent"))}})}function Ri(e){return Array.isArray(e)||p(),e.map(t=>{let n=h(t);return {id:i(n.id),userId:i(n.userId),providerId:i(n.providerId),accountId:i(n.accountId),scopes:l(n.scopes),createdAt:k(n.createdAt),updatedAt:k(n.updatedAt)}})}function Si(e){let t=h(e);return {url:i(t.url),redirect:j(t.redirect)}}function ki(e){let t=h(e);return {success:j(t.success),message:i(t.message)}}function zt(e,t){return t===void 0?{}:{[e]:t}}var Ti=new Set(["pending","accepted","rejected","canceled"]),Nt=1e4;function K(e,t,n){let i=h(e),o={id:A(i.id),name:A(i.name),slug:A(i.slug),createdAt:k(i.createdAt),...de("logo",m(i,"logo")),...de("metadata",i.metadata===void 0?void 0:r(i.metadata))};return U(o.id,t),U(o.slug,n),o}function _t(e){return N(e,K)}function Ce(e,t,n){return e===null?null:(t===null&&p(),K(e,t,n))}function Ft(e,t,n){if(e===null)return null;let i=h(e),o=K(i,t,n);return {...o,members:N(i.members,a=>Yt(a,o.id)),invitations:N(i.invitations,a=>C(a,void 0,o.id))}}function Mt(e,t){let n=N(e,i=>$t(i));return pe(n.map(i=>i.organizationId),t),n}function Lt(e,t,n){return e===null?null:(t===null&&p(),$t(e,t,n))}function Vt(e,t){let n=h(e);return (!Number.isSafeInteger(n.total)||n.total<0)&&p(),{members:Ii(n.members,t),total:n.total}}function C(e,t,n){let i=h(e),o=A(i.status);Ti.has(o)||p();let a={id:A(i.id),organizationId:A(i.organizationId),email:A(i.email),role:A(i.role),status:o,inviterId:A(i.inviterId),expiresAt:k(i.expiresAt),createdAt:k(i.createdAt)};return U(a.id,t),U(a.organizationId,n),a}function qt(e,t){let n=N(e,i=>C(i));return pe(n.map(i=>i.organizationId),t),n}function Kt(e){return N(e,t=>{let n=h(t);return {...C(n),organizationName:A(n.organizationName)}})}function Bt(e,t){let n=h(e);return {...C(n,t),organizationName:A(n.organizationName),organizationSlug:A(n.organizationSlug),inviterEmail:A(n.inviterEmail)}}function Ht(e,t){let n=h(e),i=C(n.invitation,t);return {invitation:i,member:B(n.member,void 0,i.organizationId)}}function jt(e,t){let n=h(e);return n.member!==null&&p(),{invitation:n.invitation===null?null:C(n.invitation,t),member:null}}function Gt(e,t){return e===null?null:C(e,t)}function Jt(e,t,n){let i=h(e);return {member:B(i.member,n,t)}}function B(e,t,n){let i=h(e),o={id:A(i.id),organizationId:A(i.organizationId),userId:A(i.userId),role:A(i.role),createdAt:k(i.createdAt),...i.user===void 0?{}:{user:Xt(i.user)}};return U(o.id,t),U(o.organizationId,n),o}function Wt(e,t){let n=N(e,i=>{let o=h(i);return {organizationId:A(o.organizationId),data:{role:A(o.role),...de("permission",o.permission===void 0?void 0:Ei(o.permission))}}});return pe(n.map(i=>i.organizationId),t),n.map(i=>i.data)}function $t(e,t,n){let i=h(e),o=i.updatedAt,a={id:A(i.id),name:A(i.name),organizationId:A(i.organizationId),createdAt:k(i.createdAt),...o===void 0?{}:{updatedAt:k(o)}};return U(a.id,t),U(a.organizationId,n),a}function Yt(e,t){let n=h(e);return {...B(n,void 0,t),user:Xt(n.user)}}function Ii(e,t){let n=N(e,i=>Yt(i));return pe(n.map(i=>i.organizationId),t),n}function Ei(e){let t=h(e),n={};for(let[i,o]of Object.entries(t))(i==="__proto__"||i==="constructor"||i==="prototype"||i.length===0||i.length>Nt||!Array.isArray(o))&&p(),n[i]=o.map(a=>A(a));return n}function A(e){let t=i(e);return (t.length===0||t.length>Nt)&&p(),t}function U(e,t){t!==void 0&&e!==t&&p();}function pe(e,t){let n=t??e[0];n!==void 0&&e.some(i=>i!==n)&&p();}function Xt(e){let t=h(e);return {id:A(t.id),name:A(t.name),email:A(t.email),...de("image",m(t,"image"))}}function N(e,t){return Array.isArray(e)||p(),e.map(n=>t(n))}function de(e,t){return t===void 0?{}:{[e]:t}}function Qt(e,t,n=()=>null){let{post:i,mutation:o}=V(e,t),a=(r,s,c,l)=>e.request(r,{query:s,fetchOptions:c,decode:l});return {create:(r,s)=>o(i("/organization/create",r,s,K)),list:r=>a("/organization/list",void 0,r,_t),get:(r={},s)=>a("/organization/get-full-organization",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,membersLimit:r.membersLimit},s,c=>Ft(c,r.organizationId,r.organizationSlug)),setActive:(r,s)=>o(i("/organization/set-active",r,s,c=>Ce(c,r.organizationId,r.organizationSlug))),listTeams:(r={},s)=>a("/organization/list-teams",{organizationId:r.organizationId},s,c=>Mt(c,r.organizationId)),setActiveTeam:(r,s)=>o(i("/organization/set-active-team",r,s,c=>Lt(c,r.teamId))),update:(r,s)=>o(i("/organization/update",r,s,c=>Ce(c,r.organizationId))),delete:(r,s)=>o(i("/organization/delete",r,s,c=>K(c,r.organizationId))),listMembers:(r={},s)=>a("/organization/list-members",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,limit:r.limit,offset:r.offset,sortBy:r.sortBy,sortDirection:r.sortDirection,filterField:r.filterField,filterValue:r.filterValue,filterOperator:r.filterOperator},s,c=>Vt(c,r.organizationId)),inviteMember:(r,s)=>o(i("/organization/invite-member",r,s,c=>C(c,void 0,r.organizationId))),listInvitations:(r={},s)=>a("/organization/list-invitations",{organizationId:r.organizationId},s,c=>qt(c,r.organizationId)),listUserInvitations:r=>a("/organization/list-user-invitations",void 0,r,Kt),getInvitation:(r,s)=>a("/organization/get-invitation",{id:r.id},s,c=>Bt(c,r.id)),acceptInvitation:(r,s)=>o(i("/organization/accept-invitation",r,s,c=>Ht(c,r.invitationId))),rejectInvitation:(r,s)=>o(i("/organization/reject-invitation",r,s,c=>jt(c,r.invitationId))),cancelInvitation:(r,s)=>o(i("/organization/cancel-invitation",r,s,c=>Gt(c,r.invitationId))),removeMember:(r,s)=>o(i("/organization/remove-member",r,s,c=>Jt(c,r.organizationId,r.memberIdOrEmail.includes("@")?void 0:r.memberIdOrEmail))),updateMemberRole:(r,s)=>o(i("/organization/update-member-role",r,s,c=>B(c,r.memberId,r.organizationId))),leave:(r,s)=>o(i("/organization/leave",r,s,c=>B(c,void 0,r.organizationId))),listRoles:(r={},s)=>a("/organization/list-roles",{organizationId:r.organizationId},s,c=>Wt(c,r.organizationId)),has:r=>u(n(),r),hasPermission:r=>s(n(),r.permission)}}var Zt=4096,xi=4096,Di=100,Pi=256,Ci=16,vi=64;function ze(e){let t=h(e);return t.twoFactorRedirect===true?((t.user!==void 0||t.redirect!==void 0||t.url!==void 0)&&p(),{twoFactorRedirect:true,...t.twoFactorMethods===void 0?{}:{twoFactorMethods:An(t.twoFactorMethods,Ci,vi)}}):(t.twoFactorRedirect!==void 0&&p(),{redirect:j(t.redirect),..._i(t,"url"),user:n(t.user)})}function en(e){let t=h(e);return {user:n(t.user)}}function tn(e){let t=h(e);return {sessionCreated:j(t.sessionCreated),user:n(t.user)}}function nn(e,t){let n$1=h(e),i=j(n$1.redirect);n$1.user===null&&p();let o=n$1.user!==void 0&&n$1.user!==null,a=n$1.url!==void 0&&n$1.url!==null;return i?((o||!a)&&p(),{redirect:true,url:ve(n$1.url,t)}):(o===a&&p(),o?{redirect:false,user:n(n$1.user)}:{redirect:false,url:ve(n$1.url,t)})}function on(e,t){let n=h(e);return (n.redirect!==true||n.user!==void 0)&&p(),{redirect:true,url:ve(n.url,t)}}function rn(e){return {status:j(h(e).status)}}function an(e){return {success:j(h(e).success)}}function sn(e){return h(e).status!=="pending"&&p(),{status:"pending"}}function cn(e){let t=h(e);return (t.status!==true||t.sessionCreated!==true)&&p(),{status:true,sessionCreated:true,user:zi(t.user)}}function Ue(e){return {status:j(h(e).status)}}function un(e){return {status:j(h(e).status)}}function ln(e){let t=h(e);return {status:j(t.status),user:n(t.user)}}function dn(e){return {success:j(h(e).success)}}function pn(e){let t=h(e);return {totpURI:Ni(t.totpURI),backupCodes:hn(t.backupCodes)}}function fn(e){return {status:j(h(e).status)}}function fe(e){return h(e).status!==true&&p(),{status:true}}function gn(e){return {status:j(h(e).status)}}function mn(e){let t=h(e);return t.status!==void 0&&t.status!==true&&p(),{backupCodes:hn(t.backupCodes)}}function zi(e){let t=h(e);return {id:H(t.id,512),...Fi(t,"name",1024),phoneNumber:H(t.phoneNumber,64),phoneNumberVerified:j(t.phoneNumberVerified),...t.createdAt===void 0?{}:{createdAt:k(t.createdAt)},...t.updatedAt===void 0?{}:{updatedAt:k(t.updatedAt)}}}function ve(e,t){let n=H(e,Zt);/[\u0000-\u0020\u007f]/u.test(n)&&p();let i;try{i=new URL(n);}catch{return p()}return (i.username||i.password)&&p(),i.protocol==="https:"||t&&i.protocol==="http:"&&Ui(i.hostname)?i.href:p()}function Ui(e){let t=e.toLowerCase();return t==="localhost"||t==="127.0.0.1"||t==="[::1]"}function Ni(e){let t=H(e,xi),n;try{n=new URL(t);}catch{return p()}let i=n.searchParams.get("secret");return (n.protocol!=="otpauth:"||n.hostname.toLowerCase()!=="totp"||n.username||n.password||n.hash||i===null||i.length===0||i.length>512||/\s/u.test(i))&&p(),t}function hn(e){return An(e,Di,Pi)}function An(e,t,n){(!Array.isArray(e)||e.length===0||e.length>t)&&p();let i=e.map(o=>H(o,n));return i.some(o=>o.trim().length===0)&&p(),new Set(i).size!==i.length&&p(),i}function H(e,t){let n=i(e);return (n.length===0||n.length>t)&&p(),n}function _i(e,t){let n=e[t];return n==null?{}:{[t]:H(n,Zt)}}function Fi(e,t,n){let i=m(e,t);return i===void 0?{}:(i!==null&&i.length>n&&p(),{[t]:i})}function On(e,t=()=>{}){let n=ee(e),i=Dt(n,e.decoded.projectId),o=Et(n,i.notifyMutation),a=()=>{i.notifyMutation(),t();},{post:r,mutation:s}=V(n,a),c=e.decoded.env==="test";return {sessionStore:i.store,getSession:i.getSession,account:Ut(n,a),organization:Qt(n,a,()=>i.store.getSnapshot().data?.session.membership??null),signIn:{email:(l,u)=>s(r("/sign-in/email",l,u,ze),f=>!("twoFactorRedirect"in f)),username:(l,u)=>s(r("/sign-in/username",l,u,ze),f=>!("twoFactorRedirect"in f)),social:async(l,u)=>{let f=await s(r("/sign-in/social",l,u,g=>nn(g,c)),g=>"user"in g);return f.error!==null||f.data===null||"url"in f.data&&f.data.redirect&&!l.disableRedirect&&typeof window<"u"&&window.location.assign(f.data.url),f},sso:async(l,u)=>{let f=await r("/sign-in/sso",l,u,g=>on(g,c));return f.error!==null||f.data===null||typeof window<"u"&&window.location.assign(f.data.url),f},magicLink:(l,u)=>r("/sign-in/magic-link",l,u,rn),emailOtp:(l,u)=>s(r("/sign-in/email-otp",l,u,en)),passkey:(l,u)=>o.signIn(l,u)},signUp:{email:(l,u)=>s(r("/sign-up/email",l,u,tn),f=>f.sessionCreated)},emailOtp:{sendVerificationOtp:(l,u)=>r("/email-otp/send-verification-otp",l,u,an),verifyEmail:(l,u)=>s(r("/email-otp/verify-email",l,u,ln))},phoneOtp:{start:(l,u)=>r("/phone-otp/start",{...l,idempotencyKey:l.idempotencyKey??Pe()},u,sn),verify:(l,u)=>s(r("/phone-otp/verify",l,u,cn))},requestPasswordReset:(l,u)=>r("/request-password-reset",l,u,Ue),resetPassword:(l,u)=>r("/reset-password",l,u,Ue),sendVerificationEmail:(l,u)=>r("/send-verification-email",l,u,un),passkey:{addPasskey:(l,u)=>o.add(l,u),listUserPasskeys:()=>n.request("/passkey/list-user-passkeys",{decode:mt}),updatePasskey:async(l,u)=>{let f=ae(l.name);if(!f.valid||f.value===void 0)return se();let g=f.value;return r("/passkey/update-passkey",{...l,name:g},u,m=>ht(m,l.id,g))},deletePasskey:(l,u)=>r("/passkey/delete-passkey",l,u,At)},twoFactor:{enable:(l,u)=>r("/two-factor/enable",l,u,pn),disable:(l,u)=>s(r("/two-factor/disable",l,u,fn),f=>f.status),verifyTotp:(l,u)=>s(r("/two-factor/verify-totp",l,u,fe)),verifyBackupCode:(l,u)=>s(r("/two-factor/verify-backup-code",l,u,fe)),sendOtp:(l={},u)=>r("/two-factor/send-otp",l,u,gn),verifyOtp:(l,u)=>s(r("/two-factor/verify-otp",l,u,fe)),generateBackupCodes:(l,u)=>r("/two-factor/generate-backup-codes",l,u,mn)},signOut:l=>s(n.request("/sign-out",{method:"POST",body:{},fetchOptions:l,decode:dn}),u=>u.success)}}var ge=class extends Error{status;requestId;constructor(t,n,i){super(`${t} request failed with status ${n.status}.`),this.name="AuthOwlHttpError",this.status=n.status,this.requestId=i;}};function M(e,t,n={}){let i=new Headers(n.init?.headers);return i.set("x-publishable-key",e.publishableKey),g({fetchImpl:e.fetch??fetch,url:t,init:{...n.init,headers:i},allowHttpLoopback:e.decoded.env==="test",...n.timeoutMs===void 0?{}:{timeoutMs:n.timeoutMs},...n.maxResponseBytes===void 0?{}:{maxResponseBytes:n.maxResponseBytes},...n.decode===void 0?{}:{decode:n.decode}})}function L(e,t){if(!e.response.ok)throw new ge(t,e.response,e.requestId);return e.data}function bn(e){return `${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}/consent`}async function Ne(e){let t=await M(e,bn(e),{init:{method:"GET",credentials:"include"},maxResponseBytes:65536,decode:Mi});return t.response.status===401?{required:false}:L(t,"consent status")}async function _e(e,t){if(!Number.isSafeInteger(t)||t<1)throw new TypeError("Consent version must be a positive integer.");return L(await M(e,bn(e),{init:{method:"POST",headers:{"content-type":"application/json"},credentials:"include",body:JSON.stringify({version:t})},maxResponseBytes:64*1024,decode:Li}),"consent accept")}function Mi(e){let t=h(e),n=j(t.required),i=Vi(t.needsConsent),o=wn(t.version),a=yn(t.termsUrl),r=yn(t.privacyUrl);return {required:n,...i===void 0?{}:{needsConsent:i},...o===void 0?{}:{version:o},...a===void 0?{}:{termsUrl:a},...r===void 0?{}:{privacyUrl:r}}}function Li(e){let t=h(e),n=wn(t.version);return {ok:j(t.ok),...n===void 0?{}:{version:n}}}function Vi(e){if(e===void 0||typeof e=="boolean")return e;throw new TypeError("Invalid consent response.")}function wn(e){if(e===void 0||Number.isSafeInteger(e)&&e>=1)return e;throw new TypeError("Invalid consent response.")}function yn(e){if(e===void 0||typeof e=="string"&&e.length<=4096)return e;throw new TypeError("Invalid consent response.")}var qi=30;function Ki(e){return typeof e?.exp=="number"?e.exp:null}function Bi(e){let t=e.split(".")[1];if(!t)return null;try{let n=t.replace(/-/g,"+").replace(/_/g,"/"),i=JSON.parse(atob(n));return typeof i=="object"&&i!==null?i:null}catch{return null}}function Fe(e){let t=new Map;async function n(a={}){let r=a.template===void 0?null:a.template.trim().toLowerCase();if(r==="")throw new TypeError("Template missing");let s=r??"",c=t.get(s);c||(c={activeKey:null,cachedByKey:new Map,inflight:null,sequence:0},t.set(s,c));let l=a.forceRefresh===true;if(!l){let h=c.activeKey?c.cachedByKey.get(c.activeKey):null;if(h&&h.exp-Date.now()/1e3>qi)return h.token;if(c.inflight)return c.inflight}let u=++c.sequence,f=()=>t.get(s)===c&&c.sequence===u,g=(async()=>{let h=r?`${e.projectBaseURL}/token/${encodeURIComponent(r)}`:`${e.projectBaseURL}/token`,z=await M(e,h,{init:{method:"GET",credentials:"include"},maxResponseBytes:64*1024,decode:X=>Hi(X,r!==null)});if(z.response.status===401)return f()&&i(),null;let D=L(z,"token"),Y=D.policyVersion,me=D.token,j=Bi(me),qe=Ki(j);if(f())if(qe!==null){let X=typeof j?.sub=="string"?j.sub:null,Tn=typeof j?.org_id=="string"?j.org_id:null;if(!r||X){let Ke=JSON.stringify([e.projectBaseURL,X,Tn,r,Y]);c.cachedByKey.clear(),c.cachedByKey.set(Ke,{token:me,exp:qe}),c.activeKey=Ke;}else o(c);}else o(c);return me})();if(l)return g;let m=g.finally(()=>{c.inflight===m&&(c.inflight=null);});return c.inflight=m,m}function i(){t.clear();}function o(a){a.cachedByKey.clear(),a.activeKey=null;}return {getToken:n,clear:i}}function Hi(e,t){let n=h(e),i$1=i(n.token);if(i$1.length===0||i$1.length>32*1024)throw new TypeError("Invalid token response.");if(!t)return {token:i$1,policyVersion:0};let o=h(n.template);if(!Number.isSafeInteger(o.policyVersion)||o.policyVersion<1)throw new TypeError("Invalid token response.");return {token:i$1,policyVersion:o.policyVersion}}function ji(e){let t=Fe(e),n=On(e,t.clear),i=ee(e,`${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}`),o=r=>(...s)=>(t.clear(),r(...s)),a={getConsentStatus:()=>Ne(e),acceptConsent:r=>_e(e,r),getToken:t.getToken,waitlist:{join:(r,s)=>i.request("/waitlist",{method:"POST",body:r,fetchOptions:s,credentials:"omit"})},account:{...n.account,updateUnsafeMetadata:o(n.account.updateUnsafeMetadata),updateProfile:o(n.account.updateProfile),changeEmail:o(n.account.changeEmail),changePassword:o(n.account.changePassword),revokeSession:o(n.account.revokeSession),delete:o(n.account.delete)},signIn:{email:o(n.signIn.email),username:o(n.signIn.username),social:o(n.signIn.social),sso:n.signIn.sso,magicLink:n.signIn.magicLink,emailOtp:o(n.signIn.emailOtp),passkey:o(n.signIn.passkey)},signUp:{email:o(n.signUp.email)},emailOtp:{...n.emailOtp,verifyEmail:o(n.emailOtp.verifyEmail)},twoFactor:{enable:n.twoFactor.enable,disable:o(n.twoFactor.disable),verifyTotp:o(n.twoFactor.verifyTotp),verifyBackupCode:o(n.twoFactor.verifyBackupCode),sendOtp:n.twoFactor.sendOtp,verifyOtp:o(n.twoFactor.verifyOtp),generateBackupCodes:n.twoFactor.generateBackupCodes},phoneOtp:{start:n.phoneOtp.start,verify:o(n.phoneOtp.verify)},signOut:o(n.signOut)};return {...n,...a}}async function Gi(e){let n=`${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}/public-config`;return L(await M(e,n,{init:{method:"GET",credentials:"omit"},maxResponseBytes:256*1024,decode:i=>Ji(i,e)}),"public-config")}function Ji(e,t){let n=q$1(e),i=n.environmentId,o=n.environmentType,a=`${new URL(t.apiUrl).origin}/api/projects/${t.decoded.projectId}/auth`;if(typeof n.applicationId!="string"||!Wi(n.applicationId)||i!==t.decoded.projectId||o!=="development"&&o!=="production"||n.authBaseUrl!==a)throw x();let r=S(n.branding),s=S(n.legal);if(!Me(n.enabledMethods,64)||!Me(n.socialProviders,64)||!Sn(r,["appName","logoUrl","primaryColor"])||r.showAppName!==void 0&&typeof r.showAppName!="boolean"||r.alignment!==void 0&&r.alignment!=="left"&&r.alignment!=="center"&&r.alignment!=="right"||r.theme!==void 0&&r.theme!=="light"&&r.theme!=="dark"&&r.theme!=="system"||!Sn(s,["termsUrl","privacyUrl"])||!Number.isSafeInteger(s.version)||s.version<0||typeof s.required!="boolean")throw x();if(n.socialProviderClientIds!==void 0){let c=S(n.socialProviderClientIds);if(Object.keys(c).length>64||Object.values(c).some(l=>typeof l!="string"||l.length>2048))throw x()}if(!v(n,["requireEmailVerification","twoFactor","mfaRequired","accountDeletion","organizations","sso","badge"])||!Rn(n.turnstileSiteKey)||!Rn(n.authTurnstileSiteKey)||typeof n.locale!="string"||n.locale.length===0||n.locale.length>64||!Number.isSafeInteger(n.configVersion)||n.configVersion<0)throw x();if(n.jwtIssuer!==null){let c=S(n.jwtIssuer);if(c.issuer!==a||c.jwksUrl!==`${a}/jwks`||c.aud!==t.decoded.projectId)throw x()}if(n.signUp!==void 0){let c=S(n.signUp).mode;if(typeof c!="string"||!["open","restricted","allowlist","waitlist"].includes(c))throw x()}if(n.authentication!==void 0&&$i(n.authentication),n.emailVerification!==void 0){let c=S(n.emailVerification);if(!v(c,["required"])||c.method!=="link"&&c.method!=="code")throw x()}if(n.userModel!==void 0&&!v(S(n.userModel),["requireEmail","firstLastName","emailChange","accountDeletion"]))throw x();if(n.mfa!==void 0){let c=S(n.mfa);if(!v(c,["totp","required","backupCodes"])||(c.required===true||c.backupCodes===true)&&c.totp!==true)throw x()}return n}function Wi(e){return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(e)}function x(){return new TypeError("public-config returned an invalid response")}function S(e){if(!e||typeof e!="object"||Array.isArray(e))throw x();return e}function Rn(e){return e===null||typeof e=="string"&&e.length<=4096}function $i(e){let t=S(e),n=S(t.email),i=S(t.password),o=i.minLength!==void 0||i.maxLength!==void 0;if(!v(n,["signUp"])||!Me(n.signIn,3)||n.signIn.some(a=>a!=="password"&&a!=="magic_link"&&a!=="email_otp")||!v(S(t.phone),["signUp","signIn"])||!v(i,["signUp","add"])||o&&(!Number.isSafeInteger(i.minLength)||!Number.isSafeInteger(i.maxLength)||i.minLength<1||i.maxLength>4096||i.minLength>i.maxLength)||!v(S(t.passkey),["signIn","add"])||!v(S(t.username),["collectOnSignUp","signIn"]))throw x()}function v(e,t){return t.every(n=>typeof e[n]=="boolean")}function Sn(e,t){return t.every(n=>e[n]===void 0||typeof e[n]=="string"&&e[n].length<=4096)}function Me(e,t){return Array.isArray(e)&&e.length<=t&&e.every(n=>typeof n=="string"&&n.length<=128)&&new Set(e).size===e.length}var $=class extends Error{constructor(n,i){super(n);this.cause=i;this.name="AuthOwlError";}cause},Le=class extends ${constructor(n,i){super(`Rate limited. Retry after ${n}s.`,i);this.retryAfterSeconds=n;this.name="RateLimitedError";}retryAfterSeconds},Ve=class extends ${constructor(t="invalid publishable key",n){super(t,n),this.name="InvalidKeyError";}};var kn=["en","ar"];function Yi(e){return e==="ar"?"rtl":"ltr"}function Xi(e){return typeof e=="string"&&kn.includes(e)}
 export{Je as AUTH_CHALLENGE_HEADER,$ as AuthOwlError,ge as AuthOwlHttpError,Ve as InvalidKeyError,kn as LOCALES,Le as RateLimitedError,_e as acceptConsent,ji as createAuthOwlClient,Pe as createIdempotencyKey,Fe as createTokenClient,Yi as directionFor,Ne as getConsentStatus,Gi as getPublicConfig,Xi as isLocale};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authowl/core",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "Framework-agnostic client for AuthOwl, the multi-tenant auth SaaS.",
   "license": "MIT",
   "publishConfig": {