@authowl/core 0.16.0 → 0.17.0

package/dist/native.cjs

@@ -1,2 +1,2 @@
-'use strict';var Qn=Object.defineProperty;var We=(e,t)=>()=>(e&&(t=e(e=0)),t);var Zn=(e,t)=>{for(var n in t)Qn(e,n,{get:t[n],enumerable:true});};function ee(){return typeof window<"u"&&typeof document<"u"&&typeof crypto<"u"&&typeof crypto.subtle?.digest=="function"}var ve=We(()=>{});var Ae={};Zn(Ae,{beginCrossSiteSignIn:()=>Bo,challengeFor:()=>Mn,completeCrossSiteSignIn:()=>jo,takeHandoffCode:()=>Je});function Ln(e){let t="";for(let n of e)t+=String.fromCharCode(n);return btoa(t).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}async function Mn(e){let t=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(e));return Ln(new Uint8Array(t))}function qo(){return Ln(crypto.getRandomValues(new Uint8Array(Mo)))}function Fn(e,t){let n=window.location.protocol==="https:"?"; Secure":"";document.cookie=`${Nn}=${e}; Path=/; Max-Age=${t}; SameSite=Lax${n}`;}function Vo(){for(let e of document.cookie.split(";")){let t=e.indexOf("=");if(!(t<0)&&e.slice(0,t).trim()===Nn)return e.slice(t+1).trim()||null}return null}function Ko(){Fn("",0);}function zn(e){return new URL(e,window.location.href).toString()}async function Bo(e,t){let n=t.callbackURL?zn(t.callbackURL):null;if(n&&new URL(n).origin!==window.location.origin)return null;let i=qo(),o=new URL(`${e.projectBaseURL}/session/start`);if(o.searchParams.set("pk",e.publishableKey),o.searchParams.set("kind",t.kind),t.kind==="social")o.searchParams.set("provider",t.provider),t.scopes?.length&&o.searchParams.set("scopes",t.scopes.join(",")),t.loginHint&&o.searchParams.set("loginHint",t.loginHint),t.requestSignUp!==void 0&&o.searchParams.set("requestSignUp",t.requestSignUp?"1":"0");else for(let u of Ho){let c=t[u];c&&o.searchParams.set(u,c);}let s=`${window.location.origin}${window.location.pathname}${window.location.search}`;o.searchParams.set("cb",n??s);for(let[u,c]of [["err",t.errorCallbackURL],["new",t.newUserCallbackURL]])c&&o.searchParams.set(u,zn(c));return o.searchParams.set("challenge",await Mn(i)),Fn(i,Fo),o.toString()}function Je(e){if(typeof window>"u")return null;let t=window.location.hash;if(!t.includes(je))return null;let n=new URLSearchParams(t.replace(/^#/,"")),i=n.get(je);if(!i||e!==void 0&&i!==e)return null;n.delete(je);let o=n.toString();return window.history.replaceState(window.history.state,"",`${window.location.pathname}${window.location.search}${o?`#${o}`:""}`),i}async function jo(e,t,n){if(!ee())return  false;let i=n??Je();if(!i)return  false;n&&Je(n);let o=Vo();if(Ko(),!o)return  false;t.beginSession({remember:true});let{error:s}=await e.request("/session/exchange",{method:"POST",body:{code:i,verifier:o}});return s===null}var Nn,je,Mo,Fo,Ho,be=We(()=>{ve();Nn="authowl_handoff_verifier",je="authowl_code",Mo=32,Fo=900,Ho=["email","providerId","domain","organizationSlug"];});var ei=/^(pk_(live|test))_([0-9a-f-]{36})_([A-Za-z0-9]{20,})$/i,ti=/^sk_/i;function we(e){if(typeof e!="string"||e.length===0)throw new Error("publishableKey is required");if(ti.test(e))throw new Error("A secret key was passed where a publishable key was expected. Never embed secret keys in client code.");let t=ei.exec(e);if(!t)throw new Error("publishableKey is malformed; expected pk_(live|test)_<uuid>_<base62>");return {prefix:t[1].toLowerCase(),env:t[2].toLowerCase(),projectId:t[3].toLowerCase()}}var Ye=/^http:\/\/(?:(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*localhost|127\.0\.0\.1|\[::1\])(?::\d+)?(?:\/|$)/i;function Oe(e,t){throw new Error(`${e}: ${t}`)}function Xe(e,t){let n;try{n=new URL(String(e));}catch{throw new TypeError("Transport URL must be absolute.")}if(n.username||n.password||n.hash)throw new TypeError("Transport URL must not contain credentials or a fragment.");let i=n.toString();if(n.protocol!=="https:"&&!(n.protocol==="http:"&&t.allowHttpLoopback&&Ye.test(i)))throw new TypeError("Transport URL must use HTTPS except on approved loopback.");return n}function Qe(e,t){(typeof e!="string"||!/^https?:\/\/[^/?#@\\\s]+\/?$/i.test(e))&&Oe("apiUrl","origin required");let n;try{n=new URL(e);}catch{Oe("apiUrl","origin required");}return n.protocol==="http:"&&(!t.allowHttpLoopback||!Ye.test(e))&&Oe("apiUrl","HTTPS required except exact loopback"),n.origin}function j(e,t){try{return e?.getItem(t)??null}catch{return null}}function J(e,t,n){try{n===null?e?.removeItem(t):e?.setItem(t,n);}catch{}}function $(){try{return globalThis.localStorage}catch{return}}function V(){try{return globalThis.sessionStorage}catch{return}}var ni="authowl.session-challenge",ii=e=>`${ni}.${e}`,oi="set-auth-challenge",Ze="x-authowl-challenge";var tt="INVALID_TWO_FACTOR_COOKIE",ri=2048,oe=e=>e!==null&&e.length<=ri,et=/^[\x21\x23-\x2B\x2D-\x3A\x3C-\x5B\x5D-\x7E]+$/;function si(e){let t=[];for(let n of e.split(";")){let i=n.trimStart(),o=i.indexOf("=");o<=0||t.push([i.slice(0,o).trimEnd(),i.slice(o+1)]);}return t}function nt(e){let t=ii(e),n=new Map;function i(){return n.size===0?null:[...n].map(([c,r])=>`${c}=${r}`).join("; ")}function o(){let c=i();J(V(),t,oe(c)?c:null);}function s(c){for(let[r,l]of si(c))et.test(r)&&(l===""?n.delete(r):et.test(l)&&n.set(r,l));}let u=j(V(),t);return oe(u)&&s(u),{presentOn(c){let r=i();c.delete(Ze),oe(r)&&c.set(Ze,r);},observe(c){let r=c.get(oi);oe(r)&&(s(r),o());},clear(){n.clear(),o();}}}var it="set-auth-token",ot="x-authowl-session-transport",rt="bearer";var ai="authowl.session-token",ui="authowl.cookie-transport",at="ok",ut="bearer",ci=e=>`${ai}.${e}`,di=e=>`${ui}.${e}`;function li(e){return e===at?"cookies":e===ut?"bearer":"unknown"}function pi(e){return e==="cookies"?at:e==="bearer"?ut:null}function fi(e){let t=ci(e),n=di(e),i=nt(e),o=null,s=false,u=null,c=li(j($(),n)),r=()=>c==="unknown",l=0,d=null,h=false;function A(){let y=j(V(),t);if(y!==null)return s=true,y;let x=j($(),t);return x!==null?(s=false,x):null}o=A(),o!==null&&r()&&(h=true);function b(){if(!(!h||!d)){h=false;try{d();}catch{}}}function a(){let y=c==="bearer"?o:null,[x,ie]=s?[V(),$()]:[$(),V()];J(ie,t,null),J(x,t,y);}function f(y){y!==null&&u!==null&&(s=u,u=null),o=y,a(),y!==null&&r()&&(h=true,b());}function m(y){c=y,J($(),n,pi(y));}function O(){m("unknown"),h=false;}function R(){return o===null&&(o=A()),o}function K(){let y=A();return y!==null&&(o=y),o}function B(y){K()===y&&a();}function w(){l+=1,u=null,s=false,f(null),i.clear(),O();}let S=()=>c!=="cookies";return {hasToken:()=>R()!==null,declareOn(y){if(y.has("authorization"))return  false;let x=R();return !x&&!S()?false:(x&&y.set("authorization",`Bearer ${x}`),y.set(ot,rt),i.presentOn(y),true)},wantsToken:S,needsProbe:r,observe(y){let x=y.get(it);x&&f(x),i.observe(y);},dropChallenge:i.clear,measureWith(y){d=y,b();},beginRead(){let y=R(),x=l;return {carriedToken:y!==null,endIfDead(){y!==null&&K()===y&&l===x&&w();},recordCookieVerdict(ie){if(l===x&&r()){if(m(ie?"cookies":"bearer"),ie){f(null);return}B(y);}}}},beginSession({remember:y}){l+=1,u=!y,i.clear(),O();},endSession:w}}var st=new Map;function ct(e){let t=st.get(e);if(t)return t;let n=fi(e);return st.set(e,n),n}function gi(e,t){return t?.headers?new Headers(t.headers):typeof e=="object"&&e!==null&&"headers"in e?new Headers(e.headers):new Headers}function dt(e,t){let n=ct(e),i=(u,c)=>(t??globalThis.fetch)(u,c);return {fetch:async(u,c)=>{if(c?.credentials==="omit"||!n.wantsToken())return i(u,c);let r=gi(u,c),l=n.declareOn(r),d=await i(u,{...c,headers:r});return l&&n.observe(d.headers),d},probe:i,tokens:n}}function mi(e){if(!e||typeof e!="object")throw new Error("AuthConfig is required");let t=we(e.publishableKey),n=Qe(e.apiUrl,{allowHttpLoopback:t.env==="test"});return {publishableKey:e.publishableKey,apiUrl:n,decoded:t,projectBaseURL:`${n}/api/projects/${t.projectId}/auth`}}function ke(e){let t=mi(e),{fetch:n,...i}=dt(t.decoded.projectId,e.fetch);return {...e,...t,fetch:n,session:i}}var hi=1e4,yi=1024*1024,v=class extends Error{kind;requestId;constructor(t,n){super(Ti(t)),this.name="TransportError",this.kind=t,this.requestId=n;}},ft=new WeakSet;function D(e,t){let n=new v(e,t);return ft.add(n),n}async function gt({fetchImpl:e,url:t,init:n={},timeoutMs:i=hi,maxResponseBytes:o=yi,allowHttpLoopback:s=false,decode:u}){pt(i,"timeoutMs"),pt(o,"maxResponseBytes");let c=Xe(t,{allowHttpLoopback:s}),r=n.signal,l=new AbortController,d=null,h,A=new Promise(m=>{h=m;}),b=m=>{d===null&&(d=m,h({type:"abort",kind:m}),l.abort());},a=()=>b("aborted");r?.addEventListener("abort",a,{once:true});let f=setTimeout(()=>b("timeout"),i);r?.aborted&&a();try{if(d!==null)throw D(d);let m;try{m=await Promise.race([e(c.toString(),{...n,redirect:"error",signal:l.signal}).then(S=>({type:"response",response:S})),A]);}catch{throw D(d??"network")}if(m.type==="abort")throw D(m.kind);if(!Ai(m.response))throw D("invalid_response");let O=m.response,R=Ri(O.headers),K=await bi(O,o,A,()=>d,R),B=ki(O,K,R),w;try{w=O.ok&&u?u(B,Object.freeze({status:O.status})):B;}catch{throw D("invalid_response",R)}return {response:O,data:w,...R===void 0?{}:{requestId:R}}}catch(m){throw m instanceof v&&ft.has(m)?m:D(d??"network")}finally{clearTimeout(f),r?.removeEventListener("abort",a);}}function Ai(e){if(!e||typeof e!="object")return  false;let t=e;return Number.isInteger(t.status)&&t.status>=0&&t.status<=599&&typeof t.statusText=="string"&&typeof t.ok=="boolean"&&typeof t.headers?.get=="function"&&(t.body===null||typeof t.body=="object"&&typeof t.body?.getReader=="function"&&typeof t.body.cancel=="function")}async function bi(e,t,n,i,o){let s=e.headers.get("content-length");if(s!==null){if(!/^\d+$/.test(s))throw lt(e.body),D("invalid_response",o);if(Number(s)>t)throw lt(e.body),D("response_too_large",o)}if(!e.body)return "";let u;try{u=e.body.getReader();}catch{throw D("network",o)}let c=[],r=0,l=null;try{for(;;){let A;try{A=await Promise.race([u.read(),n]);}catch{l=D(i()??"network",o);break}if(wi(A)){l=D(A.kind,o);break}let{done:b,value:a}=A;if(b)break;if(a.byteLength!==0){if(r+=a.byteLength,r>t){l=D("response_too_large",o);break}c.push(a);}}}finally{l&&Oi(u);try{u.releaseLock();}catch{}}if(l)throw l;let d=new Uint8Array(r),h=0;for(let A of c)d.set(A,h),h+=A.byteLength;try{return new TextDecoder("utf-8",{fatal:!0}).decode(d)}catch{throw D("invalid_response",o)}}function wi(e){return "type"in e&&e.type==="abort"}function lt(e){if(e)try{e.cancel().catch(()=>{});}catch{}}function Oi(e){try{e.cancel().catch(()=>{});}catch{}}function ki(e,t,n){if(e.status===204||e.status===205)return null;let i=Si(e.headers.get("content-type"));if(!e.ok&&(!i||t.length===0))return null;if(!i||t.length===0)throw D("invalid_response",n);try{return JSON.parse(t)}catch{if(!e.ok)return null;throw D("invalid_response",n)}}function Si(e){if(e===null)return  false;let t=e.split(";",1)[0]?.trim().toLowerCase();return t==="application/json"||t?.endsWith("+json")===true}function Ri(e){let t=e.get("x-request-id")?.trim();if(!(!t||t.length>256||!/^[A-Za-z0-9._:-]+$/.test(t)))return t}function pt(e,t){if(!Number.isInteger(e)||e<=0)throw new TypeError(`${t} must be a positive integer.`)}function Ti(e){switch(e){case "aborted":return "The request was cancelled.";case "timeout":return "The request timed out.";case "response_too_large":return "The response exceeded the allowed size.";case "invalid_response":return "The service returned an invalid response.";case "network":return "The network request could not be completed."}}var Se=class extends Error{status;requestId;constructor(t,n,i){super(`${t} request failed with status ${n.status}.`),this.name="AuthOwlHttpError",this.status=n.status,this.requestId=i;}};function re(e,t,n={}){let i=new Headers(n.init?.headers);return i.set("x-publishable-key",e.publishableKey),gt({fetchImpl:e.fetch,url:t,init:{...n.init,headers:i},allowHttpLoopback:e.decoded.env==="test",...n.timeoutMs===void 0?{}:{timeoutMs:n.timeoutMs},...n.maxResponseBytes===void 0?{}:{maxResponseBytes:n.maxResponseBytes},...n.decode===void 0?{}:{decode:n.decode}})}function mt(e,t){if(!e.response.ok)throw new Se(t,e.response,e.requestId);return e.data}var Ii="x-authowl-turnstile-token",Pi=1e4,Ei=32,xi=2e4;function G(e,t){return {post:(n,i,o,s)=>e.request(n,{method:"POST",body:i,fetchOptions:o,decode:s}),mutation:async(n,i)=>{let o=await n;return o.error===null&&(i===void 0||o.data!==null&&i(o.data))&&t(),o}}}function Pe(e,t=e.projectBaseURL){return {async request(n,i={}){let o=Di(t,n,i.query),s=i.method??(i.body===void 0?"GET":"POST"),u=new Headers(i.fetchOptions?.headers);i.fetchOptions?.authChallengeToken&&u.set(Ii,i.fetchOptions.authChallengeToken),i.body!==void 0&&u.set("content-type","application/json");let c={method:s,headers:u,credentials:i.credentials??"include",...i.body===void 0?{}:{body:JSON.stringify(i.body)}},r=Object.freeze({method:s,path:n});await i.fetchOptions?.onRequest?.(r);let l=vi(s,i.fetchOptions),d;try{d=await Ci(e,o,{...c,signal:i.fetchOptions?.signal},l);}catch(m){let O=yt(m);return await i.fetchOptions?.onError?.(Re(r,O,zi(m))),{data:null,error:O}}let{response:h,requestId:A}=d,b=Mi(n,d.data),a=b;if(h.ok)try{a=Ie(b),i.decode&&(a=i.decode(a));}catch{let m=yt(new v("invalid_response",A));return await i.fetchOptions?.onError?.(Re(r,m,"invalid_response")),{data:null,error:m}}let f=Object.freeze({...r,status:h.status,...A===void 0?{}:{requestId:A}});if(await i.fetchOptions?.onResponse?.(f),!h.ok){let m=_i(h,b,A);return m.code===tt&&e.session.tokens.dropChallenge(),await i.fetchOptions?.onError?.(Re(r,m,"api")),{data:null,error:m}}return await i.fetchOptions?.onSuccess?.(f),{data:a,error:null}}}}async function Ci(e,t,n,i){let o=Date.now()+Pi;for(let s=0;s<i;s+=1){let u=o-Date.now();if(u<=0)throw new v("timeout");try{let c=await re(e,t,{init:n,timeoutMs:Math.max(1,Math.ceil(u))});if(c.response.status<500||s===i-1)return c}catch(c){if(s===i-1||!(c instanceof v)||c.kind!=="network")throw c}await Ni(50*2**s,n.signal,o);}throw new v("network")}function vi(e,t){if(e!=="GET"||t?.authChallengeToken)return 1;let n=t?.retry;return typeof n!="number"||!Number.isFinite(n)?1:Math.min(Math.max(Math.trunc(n),0),3)+1}function Di(e,t,n){let i=new URL(`${e}${t.startsWith("/")?t:`/${t}`}`);for(let[o,s]of Object.entries(n??{}))s!==void 0&&i.searchParams.set(o,String(s));return i.toString()}function _i(e,t,n){let i=Z(t)?t:{},o=Ui(i,e.headers);return {status:e.status,statusText:e.statusText,code:typeof i.code=="string"?i.code:void 0,...n===void 0?{}:{requestId:n},...typeof i.current_version=="number"?{currentVersion:i.current_version}:{},...o!==void 0?{retryAfterSeconds:o}:{},message:typeof i.message=="string"?i.message:typeof i.error=="string"?i.error:typeof i.detail=="string"?i.detail:e.statusText||"Request failed"}}function Ui(e,t){let n=(typeof e.retryAfterSeconds=="number"&&Number.isFinite(e.retryAfterSeconds)?e.retryAfterSeconds:void 0)??ht(t.get("retry-after"))??ht(t.get("x-retry-after"));if(n!==void 0)return Math.min(Math.max(Math.trunc(n),1),86400)}function ht(e){if(!e)return;let t=e.trim();if(!/^\d+$/.test(t))return;let n=Number(t);return Number.isFinite(n)?n:void 0}function yt(e){let t=e instanceof v?e.kind:"network";return {status:0,...{aborted:{statusText:"ABORTED",code:"REQUEST_ABORTED",message:"The request was cancelled."},timeout:{statusText:"TIMEOUT",code:"REQUEST_TIMEOUT",message:"The request timed out."},response_too_large:{statusText:"INVALID_RESPONSE",code:"RESPONSE_TOO_LARGE",message:"The service response was too large."},invalid_response:{statusText:"INVALID_RESPONSE",code:"INVALID_RESPONSE",message:"The service returned an invalid response."},network:{statusText:"FETCH_ERROR",code:"FETCH_ERROR",message:"Network request failed."}}[t],...e instanceof v&&e.requestId?{requestId:e.requestId}:{}}}function Re(e,t,n){return Object.freeze({...e,status:t.status??0,...t.requestId===void 0?{}:{requestId:t.requestId},failure:n})}function zi(e){return e instanceof v?e.kind:"network"}function Ni(e,t,n){return new Promise((i,o)=>{if(t?.aborted){o(new v("aborted"));return}let s=n-Date.now();if(s<=0){o(new v("timeout"));return}let u=Math.min(e,s),c=()=>{clearTimeout(r),o(new v("aborted"));},r=setTimeout(()=>{t?.removeEventListener("abort",c),Date.now()>=n?o(new v("timeout")):i();},u);t?.addEventListener("abort",c,{once:true}),t?.aborted&&c();})}function Ie(e,t="",n=0,i={nodes:0}){if(i.nodes+=1,n>Ei||i.nodes>xi)throw new Error("response traversal limit exceeded");if(typeof e=="string"&&/^(?:createdAt|updatedAt|expiresAt)$/.test(t)){let o=new Date(e);return Number.isNaN(o.getTime())?e:o}return Array.isArray(e)?e.map(o=>Ie(o,"",n+1,i)):Z(e)?Object.fromEntries(Object.entries(e).map(([o,s])=>[o,Li(o)?s:Ie(s,o,n+1,i)])):e}function Li(e){return e==="metadata"||e==="public_metadata"||e==="unsafe_metadata"||e==="private_metadata"||e==="publicMetadata"||e==="unsafeMetadata"||e==="privateMetadata"}function Mi(e,t){if(e==="/list-sessions"&&Array.isArray(t))return t.map(o=>Z(o)?Te(o):o);if(!Z(t))return t;let i=e==="/change-password"||e==="/passkey/verify-authentication"||e==="/phone-otp/verify"||e==="/sign-up/email"||e.startsWith("/sign-in/")||e.startsWith("/two-factor/verify-")?Te(t):t;return e==="/sign-up/email"&&!("sessionCreated"in i)&&(i={...i,sessionCreated:typeof t.token=="string"&&t.token.length>0}),(e==="/get-session"||e==="/passkey/verify-authentication")&&Z(i.session)&&(i={...i,session:Te(i.session)}),i}function Te(e){if(!Object.hasOwn(e,"token"))return e;let t={...e};return delete t.token,t}function Z(e){return !!e&&typeof e=="object"&&!Array.isArray(e)}var Fi=new Set(["__proto__","constructor","prototype"]);function g(e){(!e||typeof e!="object"||Array.isArray(e))&&p();let t=Object.getPrototypeOf(e);return t!==Object.prototype&&t!==null&&p(),e}function k(e){return typeof e!="string"&&p(),e}function T(e){return typeof e!="boolean"&&p(),e}function P(e){return (!(e instanceof Date)||Number.isNaN(e.getTime()))&&p(),e}function se(e){return (!Array.isArray(e)||!e.every(t=>typeof t=="string"))&&p(),[...e]}function I(e,t){let n=e[t];return n==null||typeof n=="string"?n:p()}function At(e,t){let n=e[t];return n==null||typeof n=="boolean"?n:p()}function z(e){let t=g(e),n=t.email;return n!==null&&typeof n!="string"&&p(),{id:k(t.id),email:n,emailVerified:T(t.emailVerified),createdAt:P(t.createdAt),updatedAt:P(t.updatedAt),...U("phoneNumber",I(t,"phoneNumber")),...U("username",I(t,"username")),...U("displayUsername",I(t,"displayUsername")),...U("firstName",I(t,"firstName")),...U("lastName",I(t,"lastName")),...U("name",I(t,"name")),...U("image",I(t,"image")),...U("twoFactorEnabled",At(t,"twoFactorEnabled"))}}function ae(e){let t=g(e),n=t.membership;return {id:k(t.id),userId:k(t.userId),expiresAt:P(t.expiresAt),...U("activeOrganizationId",I(t,"activeOrganizationId")),...U("activeTeamId",I(t,"activeTeamId")),...U("membership",n==null?n:Hi(n)),...U("pendingMfaEnrollment",At(t,"pendingMfaEnrollment"))}}function p(){throw new TypeError("AuthOwl response does not match its runtime contract.")}function L(e,t=20,n=1e4){return (!e||typeof e!="object"||Array.isArray(e))&&p(),xe(e,t,n)}function xe(e,t=20,n=1e4){return Ee(e,0,{nodes:0},t,n)}function Hi(e){let t=g(e);return {role:k(t.role),permissions:se(t.permissions),...t.teams===void 0?{}:{teams:se(t.teams)}}}function Ee(e,t,n,i,o){if(n.nodes+=1,(t>i||n.nodes>o)&&p(),e===null||typeof e=="string"||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||p(),e;if(Array.isArray(e))return e.map(c=>Ee(c,t+1,n,i,o));(!e||typeof e!="object")&&p();let s=Object.getPrototypeOf(e);s!==Object.prototype&&s!==null&&p();let u={};for(let[c,r]of Object.entries(e))Fi.has(c)&&p(),u[c]=Ee(r,t+1,n,i,o);return u}function U(e,t){return t===void 0?{}:{[e]:t}}function bt({http:e,probe:t,tokens:n,channelName:i}){let o=new Set,s=null,u=null,c=null,r=null,l=null,d,h=w=>{a(w);};d={data:null,isPending:true,isRefetching:false,error:null,refetch:h};function A(w){d=w;for(let S of o)S();}async function b(w){return e.request("/get-session",{query:w?.query,decode:Ce})}function a(w){if(w?.query?.disableCookieCache===true)return f(w);if(r)return r;let S=f(w).finally(()=>{r===S&&(r=null);});return r=S,S}async function f(w){c?.abort();let S=new AbortController;c=S,A({...d,isPending:d.data===null&&d.error===null,isRefetching:d.data!==null});let y=n.beginRead(),x=await e.request("/get-session",{query:w?.query,fetchOptions:{signal:S.signal},decode:Ce});if(c===S&&(c=null,A({data:x.data,error:x.error,isPending:false,isRefetching:false,refetch:h}),x.error===null)){if(x.data===null){y.endIfDead();return}await m(y);}}async function m(w){if(n.needsProbe()){if(!w.carriedToken){w.recordCookieVerdict(true);return}return l||O(w)}}function O(w){let S=t.request("/get-session",{query:{disableCookieCache:true},decode:Ce}).then(y=>{l===S&&y.error===null&&w.recordCookieVerdict(y.data!==null);}).finally(()=>{l===S&&(l=null);});return l=S,S}function R(){s?.postMessage({type:"session-changed"});}function K(){if(typeof window>"u"||u)return;let w=()=>{a();},S=()=>{document.visibilityState==="visible"&&a();};window.addEventListener("focus",w),document.addEventListener("visibilitychange",S),typeof BroadcastChannel<"u"&&(s=new BroadcastChannel(i),s.addEventListener("message",w)),u=()=>{window.removeEventListener("focus",w),document.removeEventListener("visibilitychange",S),s?.close(),s=null,u=null;};}function B(w){return o.add(w),o.size===1&&(K(),a()),()=>{if(o.delete(w),o.size===0){let S=c;c=null,r=null,S?.abort(),u?.();}}}return n.measureWith(()=>{n.needsProbe()&&O(n.beginRead());}),{store:{subscribe:B,getSnapshot:()=>d},getSession:b,notifyMutation(){R(),l&&l.catch(()=>{}).then(()=>{!n.needsProbe()&&n.hasToken()&&R();}),o.size>0&&a({query:{disableCookieCache:true}});}}}function Ce(e){if(e===null)return null;let t=g(e);return (t.session===void 0||t.user===void 0)&&p(),{session:ae(t.session),user:z(t.user)}}ve();function wt(){let e=globalThis.crypto.getRandomValues(new Uint8Array(16));e[6]=e[6]&15|64,e[8]=e[8]&63|128;let t=Array.from(e,n=>n.toString(16).padStart(2,"0")).join("");return `${t.slice(0,8)}-${t.slice(8,12)}-${t.slice(12,16)}-${t.slice(16,20)}-${t.slice(20)}`}async function Ot(e,t){return e.request("/user/metadata",{fetchOptions:t,decode:St})}async function kt(e,t,n){return e.request("/user/metadata",{method:"PATCH",body:{expected_version:t.expectedVersion,unsafe_metadata:t.unsafeMetadata},fetchOptions:n,decode:St})}function St(e){let t=g(e),n=L(t.public_metadata),i=L(t.unsafe_metadata);if(!Number.isSafeInteger(t.metadata_version)||t.metadata_version<0)throw new TypeError("Invalid AuthOwl metadata response");return {publicMetadata:n,unsafeMetadata:i,metadataVersion:t.metadata_version}}function Tt(e,t){let{post:n,mutation:i}=G(e,t);return {getMetadata:o=>Ot(e,o),updateUnsafeMetadata:(o,s)=>kt(e,o,s),updateProfile:(o,s)=>i(n("/update-user",o,s,te)),changeEmail:(o,s)=>i(n("/change-email",o,s,te)),changePassword:(o,s)=>i(n("/change-password",o,s,qi)),listSessions:o=>e.request("/list-sessions",{fetchOptions:o,decode:Vi}),revokeSession:({sessionId:o},s)=>i(n("/revoke-session",{sessionId:o},s,te)),revokeOtherSessions:o=>i(n("/revoke-other-sessions",{},o,te)),listSocialAccounts:async o=>{let s=await e.request("/list-accounts",{fetchOptions:o,decode:Ki});if(!s.data)return {data:null,error:s.error};let u=s.data.length>1;return {...s,data:s.data.filter(c=>c.providerId!=="credential").map(c=>({...c,canUnlink:u}))}},linkSocial:(o,s)=>n("/link-social",o,s,Bi),unlinkSocial:(o,s)=>i(n("/unlink-account",o,s,te)),delete:(o={},s)=>i(n("/delete-user",o,s,ji))}}function te(e){let t=g(e);return {status:T(t.status)}}function qi(e){let t=g(e);return {user:z(t.user)}}function Vi(e){return Array.isArray(e)||p(),e.map(t=>{let n=g(t);return {id:k(n.id),userId:k(n.userId),createdAt:P(n.createdAt),updatedAt:P(n.updatedAt),expiresAt:P(n.expiresAt),...Rt("ipAddress",I(n,"ipAddress")),...Rt("userAgent",I(n,"userAgent"))}})}function Ki(e){return Array.isArray(e)||p(),e.map(t=>{let n=g(t);return {id:k(n.id),userId:k(n.userId),providerId:k(n.providerId),accountId:k(n.accountId),scopes:se(n.scopes),createdAt:P(n.createdAt),updatedAt:P(n.updatedAt)}})}function Bi(e){let t=g(e);return {url:k(t.url),redirect:T(t.redirect)}}function ji(e){let t=g(e);return {success:T(t.success),message:k(t.message)}}function Rt(e,t){return t===void 0?{}:{[e]:t}}function De(e,t){return !e||!t?false:e.permissions.includes(t)}function Ji(e,t){return !e||!t?false:e.teams?.includes(t)??false}function $i(e,t){return e?e.roles===void 0?e.role===t:e.roles.includes(t):false}function _e(e,t){if(!e)return  false;let{role:n,permission:i,teamId:o}=t;return !(n===void 0&&i===void 0&&o===void 0||n!==void 0&&!$i(e,n)||i!==void 0&&!e.permissions.includes(i)||o!==void 0&&!Ji(e,o))}function Gi(e){return {has:t=>_e(e,t),hasPermission:t=>De(e,t.permission)}}var Wi=new Set(["pending","accepted","rejected","canceled"]),Ue=1e4;function W(e,t,n){let i=g(e),o={id:E(i.id),name:E(i.name),slug:E(i.slug),createdAt:P(i.createdAt),...ue("logo",I(i,"logo")),...ue("metadata",i.metadata===void 0?void 0:xe(i.metadata))};return H(o.id,t),H(o.slug,n),o}function It(e){return q(e,W)}function ze(e,t,n){return e===null?null:(t===null&&p(),W(e,t,n))}function Pt(e,t,n){if(e===null)return null;let i=g(e),o=W(i,t,n);return {...o,members:q(i.members,s=>Ht(s,o.id)),invitations:q(i.invitations,s=>M(s,void 0,o.id))}}function Et(e,t){let n=q(e,i=>Ft(i));return de(n.map(i=>i.organizationId),t),n}function xt(e,t,n){return e===null?null:(t===null&&p(),Ft(e,t,n))}function Ct(e,t){let n=g(e);return (!Number.isSafeInteger(n.total)||n.total<0)&&p(),{members:Yi(n.members,t),total:n.total}}function M(e,t,n){let i=g(e),o=E(i.status);Wi.has(o)||p();let s={id:E(i.id),organizationId:E(i.organizationId),email:ce(i.email),role:E(i.role),status:o,inviterId:E(i.inviterId),expiresAt:P(i.expiresAt),createdAt:P(i.createdAt)};return H(s.id,t),H(s.organizationId,n),s}function vt(e,t){let n=q(e,i=>M(i));return de(n.map(i=>i.organizationId),t),n}function Dt(e){return q(e,t=>{let n=g(t);return {...M(n),organizationName:ce(n.organizationName)}})}function _t(e,t){let n=g(e);return {...M(n,t),organizationName:E(n.organizationName),organizationSlug:E(n.organizationSlug),inviterEmail:qt(n.inviterEmail)}}function Ut(e,t){let n=g(e),i=M(n.invitation,t);return {invitation:i,member:Y(n.member,void 0,i.organizationId)}}function zt(e,t){let n=g(e);return n.member!==null&&p(),{invitation:n.invitation===null?null:M(n.invitation,t),member:null}}function Nt(e,t){return e===null?null:M(e,t)}function Lt(e,t,n){let i=g(e);return {member:Y(i.member,n,t)}}function Y(e,t,n){let i=g(e),o={id:E(i.id),organizationId:E(i.organizationId),userId:E(i.userId),role:E(i.role),createdAt:P(i.createdAt),...i.user===void 0?{}:{user:Vt(i.user)}};return H(o.id,t),H(o.organizationId,n),o}function Mt(e,t){let n=q(e,i=>{let o=g(i);return {organizationId:E(o.organizationId),data:{role:E(o.role),...ue("permission",o.permission===void 0?void 0:Xi(o.permission))}}});return de(n.map(i=>i.organizationId),t),n.map(i=>i.data)}function Ft(e,t,n){let i=g(e),o=i.updatedAt,s={id:E(i.id),name:ce(i.name),organizationId:E(i.organizationId),createdAt:P(i.createdAt),...o===void 0?{}:{updatedAt:P(o)}};return H(s.id,t),H(s.organizationId,n),s}function Ht(e,t){let n=g(e);return {...Y(n,void 0,t),user:Vt(n.user)}}function Yi(e,t){let n=q(e,i=>Ht(i));return de(n.map(i=>i.organizationId),t),n}function Xi(e){let t=g(e),n={};for(let[i,o]of Object.entries(t))(i==="__proto__"||i==="constructor"||i==="prototype"||i.length===0||i.length>Ue||!Array.isArray(o))&&p(),n[i]=o.map(s=>E(s));return n}function E(e){let t=k(e);return (t.length===0||t.length>Ue)&&p(),t}function ce(e){if(e==null)return "";let t=k(e);return t.length>Ue&&p(),t}function qt(e){return e===null?null:E(e)}function H(e,t){t!==void 0&&e!==t&&p();}function de(e,t){let n=t??e[0];n!==void 0&&e.some(i=>i!==n)&&p();}function Vt(e){let t=g(e);return {id:E(t.id),name:ce(t.name),email:qt(t.email),...ue("image",I(t,"image"))}}function q(e,t){return Array.isArray(e)||p(),e.map(n=>t(n))}function ue(e,t){return t===void 0?{}:{[e]:t}}function Kt(e,t,n=()=>null){let{post:i,mutation:o}=G(e,t),s=new Map,u=(r,l,d,h)=>{if(d)return e.request(r,{query:l,fetchOptions:d,decode:h});let A=`${r}\0${JSON.stringify(l??null)}`,b=s.get(A);if(b)return b;let a=e.request(r,{query:l,decode:h}).finally(()=>{s.delete(A);});return s.set(A,a),a},c=r=>o(r).finally(()=>s.clear());return {create:(r,l)=>c(i("/organization/create",r,l,W)),list:r=>u("/organization/list",void 0,r,It),get:(r={},l)=>u("/organization/get-full-organization",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,membersLimit:r.membersLimit},l,d=>Pt(d,r.organizationId,r.organizationSlug)),setActive:(r,l)=>c(i("/organization/set-active",r,l,d=>ze(d,r.organizationId,r.organizationSlug))),listTeams:(r={},l)=>u("/organization/list-teams",{organizationId:r.organizationId},l,d=>Et(d,r.organizationId)),setActiveTeam:(r,l)=>c(i("/organization/set-active-team",r,l,d=>xt(d,r.teamId))),update:(r,l)=>c(i("/organization/update",r,l,d=>ze(d,r.organizationId))),delete:(r,l)=>c(i("/organization/delete",r,l,d=>W(d,r.organizationId))),listMembers:(r={},l)=>u("/organization/list-members",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,limit:r.limit,offset:r.offset,sortBy:r.sortBy,sortDirection:r.sortDirection,filterField:r.filterField,filterValue:r.filterValue,filterOperator:r.filterOperator},l,d=>Ct(d,r.organizationId)),inviteMember:(r,l)=>c(i("/organization/invite-member",r,l,d=>M(d,void 0,r.organizationId))),listInvitations:(r={},l)=>u("/organization/list-invitations",{organizationId:r.organizationId},l,d=>vt(d,r.organizationId)),listUserInvitations:r=>u("/organization/list-user-invitations",void 0,r,Dt),getInvitation:(r,l)=>u("/organization/get-invitation",{id:r.id},l,d=>_t(d,r.id)),acceptInvitation:(r,l)=>c(i("/organization/accept-invitation",r,l,d=>Ut(d,r.invitationId))),rejectInvitation:(r,l)=>c(i("/organization/reject-invitation",r,l,d=>zt(d,r.invitationId))),cancelInvitation:(r,l)=>c(i("/organization/cancel-invitation",r,l,d=>Nt(d,r.invitationId))),removeMember:(r,l)=>c(i("/organization/remove-member",r,l,d=>Lt(d,r.organizationId,r.memberIdOrEmail.includes("@")?void 0:r.memberIdOrEmail))),updateMemberRole:(r,l)=>c(i("/organization/update-member-role",r,l,d=>Y(d,r.memberId,r.organizationId))),leave:(r,l)=>c(i("/organization/leave",r,l,d=>Y(d,void 0,r.organizationId))),listRoles:(r={},l)=>u("/organization/list-roles",{organizationId:r.organizationId},l,d=>Mt(d,r.organizationId)),has:r=>_e(n(),r),hasPermission:r=>De(n(),r.permission)}}var Bt=4096,Qi=4096,Zi=100,eo=256,to=16,no=64,io=12;function Le(e){let t=g(e);return t.twoFactorRedirect===true?((t.user!==void 0||t.redirect!==void 0||t.url!==void 0)&&p(),{twoFactorRedirect:true,...t.twoFactorMethods===void 0?{}:{twoFactorMethods:cn(t.twoFactorMethods,to,no)}}):(t.twoFactorRedirect!==void 0&&p(),{redirect:T(t.redirect),...uo(t,"url"),user:z(t.user)})}function jt(e){let t=g(e);return {user:z(t.user)}}function Jt(e){let t=g(e);return {sessionCreated:T(t.sessionCreated),user:z(t.user)}}function $t(e,t){let n=g(e),i=T(n.redirect);n.user===null&&p();let o=n.user!==void 0&&n.user!==null,s=n.url!==void 0&&n.url!==null;return i?((o||!s)&&p(),{redirect:true,url:Ne(n.url,t)}):(o===s&&p(),o?{redirect:false,user:z(n.user)}:{redirect:false,url:Ne(n.url,t)})}function Gt(e,t){let n=g(e);return (n.redirect!==true||n.user!==void 0)&&p(),{redirect:true,url:Ne(n.url,t)}}function Wt(e){return {status:T(g(e).status)}}function Yt(e){return {success:T(g(e).success)}}function Xt(e){return g(e).status!=="pending"&&p(),{status:"pending"}}function Qt(e){let t=g(e);if(t.kind==="authowl_turnstile")return {kind:"authowl_turnstile"};t.kind!=="akedly_shield_v1_2"&&p();let n=g(t.turnstile),i=n.siteKey===null?null:k(n.siteKey);return {kind:"akedly_shield_v1_2",connectionId:k(t.connectionId),challenge:k(t.challenge),difficulty:oo(t.difficulty),challengeToken:k(t.challengeToken),challengeRequired:T(t.challengeRequired),turnstile:{required:T(n.required),siteKey:i}}}function oo(e){return (!Number.isSafeInteger(e)||Number(e)<0||Number(e)>io)&&p(),Number(e)}function Zt(e){let t=g(e);return (t.status!==true||t.sessionCreated!==true)&&p(),{status:true,sessionCreated:true,user:ro(t.user)}}function Me(e){return {status:T(g(e).status)}}function en(e){return {status:T(g(e).status)}}function tn(e){let t=g(e);return {status:T(t.status),user:z(t.user)}}function nn(e){return {success:T(g(e).success)}}function on(e){let t=g(e);return {totpURI:ao(t.totpURI),backupCodes:un(t.backupCodes)}}function rn(e){return {status:T(g(e).status)}}function le(e){return g(e).status!==true&&p(),{status:true}}function sn(e){return {status:T(g(e).status)}}function an(e){let t=g(e);return t.status!==void 0&&t.status!==true&&p(),{backupCodes:un(t.backupCodes)}}function ro(e){let t=g(e);return {id:X(t.id,512),...co(t,"name",1024),phoneNumber:X(t.phoneNumber,64),phoneNumberVerified:T(t.phoneNumberVerified),...t.createdAt===void 0?{}:{createdAt:P(t.createdAt)},...t.updatedAt===void 0?{}:{updatedAt:P(t.updatedAt)}}}function Ne(e,t){let n=X(e,Bt);/[\u0000-\u0020\u007f]/u.test(n)&&p();let i;try{i=new URL(n);}catch{return p()}return (i.username||i.password)&&p(),i.protocol==="https:"||t&&i.protocol==="http:"&&so(i.hostname)?i.href:p()}function so(e){let t=e.toLowerCase();return t==="localhost"||t==="127.0.0.1"||t==="[::1]"}function ao(e){let t=X(e,Qi),n;try{n=new URL(t);}catch{return p()}let i=n.searchParams.get("secret");return (n.protocol!=="otpauth:"||n.hostname.toLowerCase()!=="totp"||n.username||n.password||n.hash||i===null||i.length===0||i.length>512||/\s/u.test(i))&&p(),t}function un(e){return cn(e,Zi,eo)}function cn(e,t,n){(!Array.isArray(e)||e.length===0||e.length>t)&&p();let i=e.map(o=>X(o,n));return i.some(o=>o.trim().length===0)&&p(),new Set(i).size!==i.length&&p(),i}function X(e,t){let n=k(e);return (n.length===0||n.length>t)&&p(),n}function uo(e,t){let n=e[t];return n==null?{}:{[t]:X(n,Bt)}}function co(e,t,n){let i=I(e,t);return i===void 0?{}:(i!==null&&i.length>n&&p(),{[t]:i})}var dn=new Set([1564,8206,8207,8234,8235,8236,8237,8238,8294,8295,8296,8297]),pe=new Set([9,10,11,12,13,32,133,160,5760,8192,8193,8194,8195,8196,8197,8198,8199,8200,8201,8202,8232,8233,8239,8287,12288,65279]);function fe(e){if(e===void 0)return {valid:true,value:void 0};for(let n of e){let i=n.codePointAt(0);if(i===void 0||pn(n,i)||ln(i)||dn.has(i))return {valid:false}}let t=lo(e);return Fe(t)?{valid:true,value:t}:{valid:false}}function Fe(e){let t=0,n,i;for(let o of e){if(t+=1,t>256)return  false;let s=o.codePointAt(0);if(s===void 0||pn(o,s)||ln(s)||dn.has(s))return  false;n??=s,i=s;}return t>0&&n!==void 0&&i!==void 0&&!pe.has(n)&&!pe.has(i)}function ge(){return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:"INVALID_PASSKEY_NAME",message:"Passkey names must contain 1 to 256 safe Unicode characters."}}}function lo(e){let t=0,n=e.length;for(;t<n;){let i=e.codePointAt(t);if(i===void 0||!pe.has(i))break;t+=i>65535?2:1;}for(;n>t;){let i=e.codePointAt(n-1);if(i===void 0)break;let s=i>=56320&&i<=57343?n-2:n-1,u=e.codePointAt(s);if(u===void 0||!pe.has(u))break;n=s;}return e.slice(t,n)}function ln(e){return e>=0&&e<=31||e>=127&&e<=159}function pn(e,t){return e.length===1&&t>=55296&&t<=57343}var mn=12,hn=5e3,po=8,fo=1e3,go=16,fn=512,yn=100,An=8192,mo=32768,He=1024,gn=256,Ve=64,ho=6e5,yo=/^[A-Za-z0-9_-]+$/u,Ao=/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u,bo=/[\u0000-\u001f\u007f-\u009f\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]/u,wo=/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?$/u,Oo=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu,bn=new Set(["discouraged","preferred","required"]),ko=new Set(["singleDevice","multiDevice"]),wn=new Set(["ble","cable","hybrid","internal","nfc","smart-card","usb"]),On=new Set(["hybrid","security-key","client-device"]),So=new Set(["none","indirect","direct","enterprise"]),Ro=new Set(["fido-u2f","packed","android-safetynet","android-key","tpm","apple","none"]),To=new Set(["platform","cross-platform"]),Io=new Set(["discouraged","preferred","required"]),Po=new Set([-8,-7,-257]);function kn(e){let t=L(e,mn,hn);return {challenge:Dn(t.challenge),...C("timeout",Cn(t.timeout)),...C("rpId",_n(t.rpId)),...C("allowCredentials",xn(t.allowCredentials)),...C("userVerification",ne(t.userVerification,bn)),...C("hints",me(t.hints,On)),...C("extensions",vn(t.extensions))}}function Sn(e){let t=L(e,mn,hn);return {challenge:Dn(t.challenge),rp:Eo(t.rp),user:xo(t.user),pubKeyCredParams:Co(t.pubKeyCredParams),...C("timeout",Cn(t.timeout)),...C("excludeCredentials",xn(t.excludeCredentials)),...C("authenticatorSelection",vo(t.authenticatorSelection)),...C("attestation",ne(t.attestation,So)),...C("attestationFormats",me(t.attestationFormats,Ro)),...C("hints",me(t.hints,On)),...C("extensions",vn(t.extensions))}}function Rn(e){let t=g(e),n=ae(t.session),i=z(t.user);return n.userId!==i.id&&p(),{session:n,user:i}}function Ke(e){let t=g(e),n=t.counter;(!Number.isSafeInteger(n)||n<0)&&p();let i=Be(t.deviceType,ko),o=T(t.backedUp);return o&&i!=="multiDevice"&&p(),{id:Q(t.id,gn),...Uo(t),publicKey:Do(t.publicKey,mo),userId:Q(t.userId,gn),credentialID:ye(t.credentialID,An),counter:n,deviceType:i,backedUp:o,...zo(t),createdAt:P(t.createdAt),...No(t)}}function Tn(e,t,n){let i=Ke(e);return (i.credentialID!==t||(n===void 0?i.name!==void 0&&i.name!==null:i.name!==n))&&p(),i}function In(e){(!Array.isArray(e)||e.length>yn)&&p();let t=e.map(Ke);return he(t.map(n=>n.id)),he(t.map(n=>n.credentialID)),t.length>1&&t.some(n=>n.userId!==t[0]?.userId)&&p(),t}function Pn(e,t,n){let i=g(e),o=Ke(i.passkey);return (o.id!==t||o.name!==n)&&p(),{passkey:o}}function En(e){return g(e).status!==true&&p(),{status:true}}function Eo(e){let t=g(e);return {name:qe(t.name,He),...C("id",_n(t.id))}}function xo(e){let t=g(e);return {id:ye(t.id,128,1,64),name:qe(t.name,He),displayName:qe(t.displayName,He)}}function Co(e){(!Array.isArray(e)||e.length===0||e.length>Ve)&&p();let t=e.map(n=>{let i=g(n);return (i.type!=="public-key"||!Number.isSafeInteger(i.alg)||!Po.has(i.alg))&&p(),{type:"public-key",alg:i.alg}});return Lo(t.map(n=>n.alg)),t}function xn(e){if(e===void 0)return;(!Array.isArray(e)||e.length>yn)&&p();let t=e.map(n=>{let i=g(n);return i.type!=="public-key"&&p(),{type:"public-key",id:ye(i.id,An),...C("transports",me(i.transports,wn))}});return he(t.map(n=>n.id)),t}function vo(e){if(e===void 0)return;let t=g(e);t.requireResidentKey!==void 0&&typeof t.requireResidentKey!="boolean"&&p();let n=ne(t.residentKey,Io);return t.requireResidentKey!==void 0&&n!==void 0&&t.requireResidentKey!==(n==="required")&&p(),{...C("authenticatorAttachment",ne(t.authenticatorAttachment,To)),...C("residentKey",n),...C("requireResidentKey",t.requireResidentKey),...C("userVerification",ne(t.userVerification,bn))}}function Cn(e){return e!==void 0&&(typeof e!="number"||!Number.isFinite(e)||e<0||e>ho)&&p(),e}function vn(e){return e===void 0?void 0:L(e,po,fo)}function me(e,t){if(e===void 0)return;(!Array.isArray(e)||e.length>Ve)&&p();let n=e.map(i=>Be(i,t));return he(n),n}function ne(e,t){if(e!==void 0)return Be(e,t)}function Dn(e){return ye(e,Math.ceil(fn*4/3),go,fn)}function ye(e,t,n=1,i=Number.POSITIVE_INFINITY){let o=Q(e,t),s=o.length%4,u=_o(o.at(-1)??""),c=Math.floor(o.length*3/4);return (!yo.test(o)||s===1||s===2&&(u&15)!==0||s===3&&(u&3)!==0||c<n||c>i)&&p(),o}function Q(e,t){let n=k(e);return (n.length===0||n.length>t)&&p(),n}function qe(e,t){let n=Q(e,t);return bo.test(n)&&p(),n}function _n(e){if(e===void 0)return;let t=Q(e,253);return t!=="localhost"&&(t.endsWith(".")||!t.includes(".")||t.split(".").some(n=>!wo.test(n)))&&p(),t}function Do(e,t){let n=Q(e,t),i=n.endsWith("=="),o=!i&&n.endsWith("="),s=n.at(i?-3:o?-2:-1)??"",u=Un(s);return (n.length%4!==0||!Ao.test(n)||i&&(u&15)!==0||o&&(u&3)!==0)&&p(),n}function _o(e){return Un(e,true)}function Un(e,t=false){return (t?"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_":"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/").indexOf(e)}function Uo(e){let t=I(e,"name");return t===void 0?{}:(t!==null&&!Fe(t)&&p(),{name:t})}function zo(e){let t=I(e,"transports");if(t==null||t==="")return t===void 0?{}:{transports:t};let n=t.split(",");return (n.length>Ve||n.some(i=>!wn.has(i))||new Set(n).size!==n.length)&&p(),{transports:t}}function No(e){let t=I(e,"aaguid");return t==null?t===void 0?{}:{aaguid:null}:(Oo.test(t)||p(),{aaguid:t})}function Be(e,t){let n=k(e);return t.has(n)||p(),n}function C(e,t){return t===void 0?{}:{[e]:t}}function he(e){new Set(e).size!==e.length&&p();}function Lo(e){new Set(e).size!==e.length&&p();}function Jo(e,t){if(!t)return e;let n=t.catch(()=>{});return n.then(()=>{n=null;}),{async request(i,o){return n&&await n,e.request(i,o)}}}var Hn=new Map;function $o(e,t,n){let i=Hn.get(n);if(!i){let o=new URLSearchParams(window.location.hash.slice(1)).get("authowl_code");if(!o)return;i=Promise.resolve().then(()=>(be(),Ae)).then(s=>s.completeCrossSiteSignIn(e,t,o)),Hn.set(n,i);}return i}function qn(e){return !ee()||e.idToken||e.disableRedirect?"legacy":"first-party"}function Go(e,t=()=>{},n=Xo){let i=Pe(e),o=e.session.tokens,s=ee()?$o(i,o,e.decoded.projectId):void 0,u=Jo(i,s),c=bt({http:u,probe:Pe({...e,fetch:e.session.probe}),tokens:o,channelName:`authowl:${e.decoded.projectId}`}),r=n(u,c.notifyMutation),l=()=>{c.notifyMutation(),t();},{post:d,mutation:h}=G(u,l),A=e.decoded.env==="test",b=a=>{o.beginSession({remember:a?.rememberMe!==false});};return {sessionStore:c.store,getSession:c.getSession,account:Tt(u,l),organization:Kt(u,l,()=>c.store.getSnapshot().data?.session.membership??null),signIn:{email:(a,f)=>(b(a),h(d("/sign-in/email",a,f,Le),m=>!("twoFactorRedirect"in m))),username:(a,f)=>(b(a),h(d("/sign-in/username",a,f,Le),m=>!("twoFactorRedirect"in m))),social:async(a,f)=>{if(b(),qn(a)==="first-party"){let{beginCrossSiteSignIn:O}=await Promise.resolve().then(()=>(be(),Ae)),R=await O(e,{kind:"social",provider:a.provider,callbackURL:a.callbackURL,errorCallbackURL:a.errorCallbackURL,newUserCallbackURL:a.newUserCallbackURL,scopes:a.scopes,loginHint:a.loginHint,requestSignUp:a.requestSignUp});if(R)return window.location.assign(R),{data:{redirect:true,url:R},error:null}}let m=await h(d("/sign-in/social",a,f,O=>$t(O,A)),O=>"user"in O);return m.error!==null||m.data===null||"url"in m.data&&m.data.redirect&&!a.disableRedirect&&typeof window<"u"&&window.location.assign(m.data.url),m},sso:async(a,f)=>{if(qn(a)==="first-party"){let{beginCrossSiteSignIn:O}=await Promise.resolve().then(()=>(be(),Ae)),R=await O(e,{kind:"sso",email:a.email,providerId:a.providerId,domain:a.domain,organizationSlug:a.organizationSlug,callbackURL:a.callbackURL,errorCallbackURL:a.errorCallbackURL,newUserCallbackURL:a.newUserCallbackURL});if(R)return window.location.assign(R),{data:{url:R,redirect:true},error:null}}let m=await d("/sign-in/sso",a,f,O=>Gt(O,A));return m.error!==null||m.data===null||typeof window<"u"&&window.location.assign(m.data.url),m},magicLink:(a,f)=>d("/sign-in/magic-link",a,f,Wt),emailOtp:(a,f)=>(b(),h(d("/sign-in/email-otp",a,f,jt))),passkey:(a,f)=>(b(),r.signIn(a,f))},signUp:{email:(a,f)=>(b(),h(d("/sign-up/email",a,f,Jt),m=>m.sessionCreated))},emailOtp:{sendVerificationOtp:(a,f)=>d("/email-otp/send-verification-otp",a,f,Yt),verifyEmail:(a,f)=>(b(),h(d("/email-otp/verify-email",a,f,tn)))},phoneOtp:{prepare:a=>d("/phone-otp/challenge",{},a,Qt),start:(a,f)=>d("/phone-otp/start",{...a,idempotencyKey:a.idempotencyKey??wt()},f,Xt),verify:(a,f)=>(b(),h(d("/phone-otp/verify",a,f,Zt)))},requestPasswordReset:(a,f)=>d("/request-password-reset",a,f,Me),resetPassword:(a,f)=>d("/reset-password",a,f,Me),sendVerificationEmail:(a,f)=>d("/send-verification-email",a,f,en),passkey:{addPasskey:(a,f)=>r.add(a,f),listUserPasskeys:()=>u.request("/passkey/list-user-passkeys",{decode:In}),updatePasskey:async(a,f)=>{let m=fe(a.name);if(!m.valid||m.value===void 0)return ge();let O=m.value;return d("/passkey/update-passkey",{...a,name:O},f,R=>Pn(R,a.id,O))},deletePasskey:(a,f)=>d("/passkey/delete-passkey",a,f,En)},twoFactor:{enable:(a,f)=>d("/two-factor/enable",a,f,on),disable:(a,f)=>h(d("/two-factor/disable",a,f,rn),m=>m.status),verifyTotp:(a,f)=>h(d("/two-factor/verify-totp",a,f,le)),verifyBackupCode:(a,f)=>h(d("/two-factor/verify-backup-code",a,f,le)),sendOtp:(a={},f)=>d("/two-factor/send-otp",a,f,sn),verifyOtp:(a,f)=>h(d("/two-factor/verify-otp",a,f,le)),generateBackupCodes:(a,f)=>d("/two-factor/generate-backup-codes",a,f,an)},signOut:a=>h(u.request("/sign-out",{method:"POST",body:{},fetchOptions:a,decode:nn}).then(f=>(o.endSession(),f)),f=>f.success)}}function $e(e,t=()=>{},n){let i=Go(e,t,n);return n?{...i,signIn:{email:i.signIn.email,username:i.signIn.username,social:Vn(i),magicLink:i.signIn.magicLink,emailOtp:i.signIn.emailOtp,passkey:i.signIn.passkey},passkey:{listUserPasskeys:i.passkey.listUserPasskeys,updatePasskey:i.passkey.updatePasskey,deletePasskey:i.passkey.deletePasskey,addPasskey:i.passkey.addPasskey}}:{...i,signIn:{email:i.signIn.email,username:i.signIn.username,social:Vn(i),magicLink:i.signIn.magicLink,emailOtp:i.signIn.emailOtp},passkey:{listUserPasskeys:i.passkey.listUserPasskeys,updatePasskey:i.passkey.updatePasskey,deletePasskey:i.passkey.deletePasskey}}}function Vn(e){return async(t,n)=>{if(!t?.idToken||typeof t.idToken.token!="string"||t.idToken.token==="")return Wo();let i=await e.signIn.social({...t,disableRedirect:true},n);return i.data!==null&&"url"in i.data?Yo():i}}function Wo(){return Promise.resolve({data:null,error:{status:400,statusText:"BAD_REQUEST",code:"NATIVE_SOCIAL_ID_TOKEN_REQUIRED",message:"Native social sign-in requires a provider ID token."}})}function Yo(){return Promise.resolve({data:null,error:{status:502,statusText:"BAD_GATEWAY",code:"INVALID_NATIVE_SOCIAL_RESPONSE",message:"The server returned a redirect for native ID-token sign-in."}})}function Xo(){return {signIn:()=>Kn(),add:()=>Kn()}}function Kn(){return Promise.resolve({data:null,error:{status:400,statusText:"BAD_REQUEST",code:"PASSKEY_BROWSER_REQUIRED",message:"This passkey ceremony requires a browser with WebAuthn."}})}function Qo(e,t,n){let i=new Map;return {async signIn(o={},s){let u=await e.request("/passkey/generate-authenticate-options");if(!u.data)return Jn(u.error);let c;try{c=kn(u.data);}catch{return Bn()}let r;try{r=await n.authenticate({optionsJSON:c,useBrowserAutofill:o.autoFill});}catch(b){return $n(n,b,"AUTH_CANCELLED","Passkey authentication was cancelled.")}if(!Zo(r))return jn();let{clientExtensionResults:l,...d}=r,h=i.get(r.id);if(h)return h;let A=(async()=>{let b=await e.request("/passkey/verify-authentication",{method:"POST",body:{response:d},fetchOptions:s,decode:Rn});return b.data&&t(),b})();i.set(r.id,A);try{return await A}finally{i.get(r.id)===A&&i.delete(r.id);}},async add(o={},s){let u=fe(o.name);if(!u.valid)return ge();let c=await e.request("/passkey/generate-register-options",{query:{name:u.value,authenticatorAttachment:o.authenticatorAttachment}});if(!c.data)return Jn(c.error);let r;try{r=Sn(c.data);}catch{return Bn()}let l;try{l=await n.register({optionsJSON:r});}catch(b){return $n(n,b,"REGISTRATION_CANCELLED","Passkey registration was cancelled.")}if(!er(l))return jn();let{clientExtensionResults:d,...h}=l,A=await e.request("/passkey/verify-registration",{method:"POST",body:{response:h,name:u.value},fetchOptions:s,decode:b=>Tn(b,l.id,u.value)});return A.data&&t(),A}}}function Bn(){return {data:null,error:{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned invalid WebAuthn options."}}}function jn(){return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:"INVALID_WEBAUTHN_RESPONSE",message:"The platform returned an invalid passkey response."}}}function Wn(e){if(!e||typeof e!="object")return  false;let t=e;return typeof t.id=="string"&&t.id.length>0&&typeof t.rawId=="string"&&t.rawId.length>0&&t.type==="public-key"&&!!t.response&&typeof t.response=="object"}function Zo(e){if(!Wn(e))return  false;let t=e.response;return typeof t.clientDataJSON=="string"&&typeof t.authenticatorData=="string"&&typeof t.signature=="string"&&(t.userHandle===void 0||typeof t.userHandle=="string")}function er(e){if(!Wn(e))return  false;let t=e.response;return typeof t.clientDataJSON=="string"&&typeof t.attestationObject=="string"}function Jn(e){return {data:null,error:e??{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned no WebAuthn options."}}}function $n(e,t,n,i){let o=nr(t,"page does not have focus"),s=e.errorCode?.(t),u=s!==void 0?s==="ERROR_CEREMONY_ABORTED":Gn(t)==="AbortError",c=n!=="AUTH_CANCELLED",r=tr(s,Gn(t),c);return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:o?"PASSKEY_PAGE_NOT_FOCUSED":u?n:s??"PASSKEY_BROWSER_ERROR",message:o?"Keep this page focused while completing the passkey prompt.":u?i:r}}}function tr(e,t,n){switch(e){case "ERROR_INVALID_DOMAIN":case "ERROR_INVALID_RP_ID":return "Passkeys are not set up for this site\u2019s domain.";case "ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED":return "This device already has a passkey for this account.";case "ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEY_ALGS":case "ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT":case "ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT":return "This device cannot create a passkey for this site.";}return t==="NotAllowedError"?n?"No passkey was created. The prompt was dismissed or timed out.":"No passkey was used. This device may not have one saved for this site yet, or the prompt was dismissed.":t==="SecurityError"?"Passkeys are not set up for this site\u2019s domain.":n?"Passkey registration did not complete.":"Passkey sign-in did not complete."}function Gn(e){return e&&typeof e=="object"&&"name"in e&&typeof e.name=="string"?e.name:void 0}function nr(e,t){let n=t.toLowerCase(),i=new Set,o=e;for(;o&&typeof o=="object"&&!i.has(o);){if(i.add(o),"message"in o&&typeof o.message=="string"&&o.message.toLowerCase().includes(n))return  true;o="cause"in o?o.cause:void 0;}return  false}async function ir(e){let n=`${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}/public-config`;return mt(await re(e,n,{init:{method:"GET",credentials:"omit"},maxResponseBytes:256*1024,decode:i=>or(i,e)}),"public-config")}function or(e,t){let n=L(e),i=n.environmentId,o=n.environmentType,s=`${new URL(t.apiUrl).origin}/api/projects/${t.decoded.projectId}/auth`;if(typeof n.applicationId!="string"||!rr(n.applicationId)||i!==t.decoded.projectId||o!=="development"&&o!=="production"||n.authBaseUrl!==s)throw N();let u=_(n.branding),c=_(n.legal);if(!Ge(n.enabledMethods,64)||!Ge(n.socialProviders,64)||!Xn(u,["appName","logoUrl","primaryColor"])||u.showAppName!==void 0&&typeof u.showAppName!="boolean"||u.alignment!==void 0&&u.alignment!=="left"&&u.alignment!=="center"&&u.alignment!=="right"||u.theme!==void 0&&u.theme!=="light"&&u.theme!=="dark"&&u.theme!=="system"||!Xn(c,["termsUrl","privacyUrl"])||!Number.isSafeInteger(c.version)||c.version<0||typeof c.required!="boolean")throw N();if(n.socialProviderClientIds!==void 0){let r=_(n.socialProviderClientIds);if(Object.keys(r).length>64||Object.values(r).some(l=>typeof l!="string"||l.length>2048))throw N()}if(!F(n,["requireEmailVerification","twoFactor","mfaRequired","accountDeletion","organizations","sso","badge"])||!Yn(n.turnstileSiteKey)||!Yn(n.authTurnstileSiteKey)||typeof n.locale!="string"||n.locale.length===0||n.locale.length>64||!Number.isSafeInteger(n.configVersion)||n.configVersion<0)throw N();if(n.jwtIssuer!==null){let r=_(n.jwtIssuer);if(r.issuer!==s||r.jwksUrl!==`${s}/jwks`||r.aud!==t.decoded.projectId)throw N()}if(n.signUp!==void 0){let r=_(n.signUp).mode;if(typeof r!="string"||!["open","restricted","allowlist","waitlist"].includes(r))throw N()}if(n.authentication!==void 0&&sr(n.authentication),n.emailVerification!==void 0){let r=_(n.emailVerification);if(!F(r,["required"])||r.method!=="link"&&r.method!=="code")throw N()}if(n.userModel!==void 0&&!F(_(n.userModel),["requireEmail","firstLastName","emailChange","accountDeletion"]))throw N();if(n.mfa!==void 0){let r=_(n.mfa);if(!F(r,["totp","required","backupCodes"])||(r.required===true||r.backupCodes===true)&&r.totp!==true)throw N()}return n}function rr(e){return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(e)}function N(){return new TypeError("public-config returned an invalid response")}function _(e){if(!e||typeof e!="object"||Array.isArray(e))throw N();return e}function Yn(e){return e===null||typeof e=="string"&&e.length<=4096}function sr(e){let t=_(e),n=_(t.email),i=_(t.password),o=i.minLength!==void 0||i.maxLength!==void 0;if(!F(n,["signUp"])||!Ge(n.signIn,3)||n.signIn.some(s=>s!=="password"&&s!=="magic_link"&&s!=="email_otp")||!F(_(t.phone),["signUp","signIn"])||!F(i,["signUp","add"])||o&&(!Number.isSafeInteger(i.minLength)||!Number.isSafeInteger(i.maxLength)||i.minLength<1||i.maxLength>4096||i.minLength>i.maxLength)||!F(_(t.passkey),["signIn","add"])||!ar(_(t.passkey).relyingPartyId)||!F(_(t.username),["collectOnSignUp","signIn"]))throw N()}function ar(e){return e==null||typeof e=="string"}function F(e,t){return t.every(n=>typeof e[n]=="boolean")}function Xn(e,t){return t.every(n=>e[n]===void 0||typeof e[n]=="string"&&e[n].length<=4096)}function Ge(e,t){return Array.isArray(e)&&e.length<=t&&e.every(n=>typeof n=="string"&&n.length<=128)&&new Set(e).size===e.length}function ur(e){let t=e?.enabledMethods??["password"],n=t.includes("password"),i=t.includes("passkey"),o=e?.authentication,s=e?.mfa;return {emailSignUp:o?.email.signUp??t.some(u=>u==="password"||u==="magic_link"||u==="email_otp"),passwordSignUp:o?.password.signUp??n,phoneSignUp:o?.phone.signUp??t.includes("phone_otp"),passwordSignIn:o?.email.signIn.includes("password")??n,passwordMinLength:o?.password.minLength??8,passwordMaxLength:o?.password.maxLength??128,magicLinkSignIn:o?.email.signIn.includes("magic_link")??t.includes("magic_link"),emailOtpSignIn:o?.email.signIn.includes("email_otp")??t.includes("email_otp"),phoneSignIn:o?.phone.signIn??t.includes("phone_otp"),usernameSignIn:o?.username.signIn??false,collectUsername:o?.username.collectOnSignUp??false,passkeySignIn:o?.passkey.signIn??i,passkeyAdd:o?.passkey.add??i,firstLastName:e?.userModel?.firstLastName??false,emailChange:e===null?false:e.userModel?.emailChange??true,accountDeletion:e?.userModel?.accountDeletion??e?.accountDeletion??false,emailVerificationRequired:e?.emailVerification?.required??e?.requireEmailVerification??false,emailVerificationMethod:e?.emailVerification?.method??"link",totp:s?.totp??e?.twoFactor??false,mfaRequired:s?.required??e?.mfaRequired??false,backupCodes:s?.backupCodes??e?.twoFactor??false,legacyNameField:e?.authentication===void 0}}function cr(e,t){let n=`p_${e.toLowerCase().replace(/-/g,"")}`;return `${t?.secure?"__Secure-":""}${n}.session_token`}function Is(e,t){return $e(ke(e),t)}
-exports.createMembershipHas=Gi;exports.createNativeAuthClient=$e;exports.createNativeClient=Is;exports.createPasskeyClient=Qo;exports.decodePublishableKey=we;exports.getPublicConfig=ir;exports.resolveConfig=ke;exports.resolveProjectCapabilities=ur;exports.sessionCookieName=cr;
+'use strict';var ni=Object.defineProperty;var et=(e,t)=>()=>(e&&(t=e(e=0)),t);var ii=(e,t)=>{for(var n in t)ni(e,n,{get:t[n],enumerable:true});};function ne(){return typeof window<"u"&&typeof document<"u"&&typeof crypto<"u"&&typeof crypto.subtle?.digest=="function"}var De=et(()=>{});var Oe={};ii(Oe,{beginCrossSiteSignIn:()=>Go,challengeFor:()=>Vn,completeCrossSiteSignIn:()=>Wo,takeHandoffCode:()=>Xe});function qn(e){let t="";for(let n of e)t+=String.fromCharCode(n);return btoa(t).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}async function Vn(e){let t=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(e));return qn(new Uint8Array(t))}function jo(){return qn(crypto.getRandomValues(new Uint8Array(Vo)))}function Kn(e,t){let n=window.location.protocol==="https:"?"; Secure":"";document.cookie=`${Hn}=${e}; Path=/; Max-Age=${t}; SameSite=Lax${n}`;}function Jo(){for(let e of document.cookie.split(";")){let t=e.indexOf("=");if(!(t<0)&&e.slice(0,t).trim()===Hn)return e.slice(t+1).trim()||null}return null}function $o(){Kn("",0);}function Fn(e){return new URL(e,window.location.href).toString()}async function Go(e,t){let n=t.callbackURL?Fn(t.callbackURL):null;if(n&&new URL(n).origin!==window.location.origin)return null;let i=jo(),o=new URL(`${e.projectBaseURL}/session/start`);if(o.searchParams.set("pk",e.publishableKey),o.searchParams.set("kind",t.kind),t.kind==="social")o.searchParams.set("provider",t.provider),t.scopes?.length&&o.searchParams.set("scopes",t.scopes.join(",")),t.loginHint&&o.searchParams.set("loginHint",t.loginHint),t.requestSignUp!==void 0&&o.searchParams.set("requestSignUp",t.requestSignUp?"1":"0");else for(let c of Bo){let d=t[c];d&&o.searchParams.set(c,d);}let s=`${window.location.origin}${window.location.pathname}${window.location.search}`;o.searchParams.set("cb",n??s);for(let[c,d]of [["err",t.errorCallbackURL],["new",t.newUserCallbackURL]])d&&o.searchParams.set(c,Fn(d));return o.searchParams.set("challenge",await Vn(i)),Kn(i,Ko),o.toString()}function Xe(e){if(typeof window>"u")return null;let t=window.location.hash;if(!t.includes(Ye))return null;let n=new URLSearchParams(t.replace(/^#/,"")),i=n.get(Ye);if(!i||e!==void 0&&i!==e)return null;n.delete(Ye);let o=n.toString();return window.history.replaceState(window.history.state,"",`${window.location.pathname}${window.location.search}${o?`#${o}`:""}`),i}async function Wo(e,t,n){if(!ne())return  false;let i=n??Xe();if(!i)return  false;n&&Xe(n);let o=Jo();if($o(),!o)return  false;t.beginSession({remember:true});let{error:s}=await e.request("/session/exchange",{method:"POST",body:{code:i,verifier:o}});return s===null}var Hn,Ye,Vo,Ko,Bo,we=et(()=>{De();Hn="authowl_handoff_verifier",Ye="authowl_code",Vo=32,Ko=900,Bo=["email","providerId","domain","organizationSlug"];});var oi=/^(pk_(live|test))_([0-9a-f-]{36})_([A-Za-z0-9]{20,})$/i,ri=/^sk_/i;function ke(e){if(typeof e!="string"||e.length===0)throw new Error("publishableKey is required");if(ri.test(e))throw new Error("A secret key was passed where a publishable key was expected. Never embed secret keys in client code.");let t=oi.exec(e);if(!t)throw new Error("publishableKey is malformed; expected pk_(live|test)_<uuid>_<base62>");return {prefix:t[1].toLowerCase(),env:t[2].toLowerCase(),projectId:t[3].toLowerCase()}}var tt=/^http:\/\/(?:(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*localhost|127\.0\.0\.1|\[::1\])(?::\d+)?(?:\/|$)/i;function Se(e,t){throw new Error(`${e}: ${t}`)}function nt(e,t){let n;try{n=new URL(String(e));}catch{throw new TypeError("Transport URL must be absolute.")}if(n.username||n.password||n.hash)throw new TypeError("Transport URL must not contain credentials or a fragment.");let i=n.toString();if(n.protocol!=="https:"&&!(n.protocol==="http:"&&t.allowHttpLoopback&&tt.test(i)))throw new TypeError("Transport URL must use HTTPS except on approved loopback.");return n}function it(e,t){(typeof e!="string"||!/^https?:\/\/[^/?#@\\\s]+\/?$/i.test(e))&&Se("apiUrl","origin required");let n;try{n=new URL(e);}catch{Se("apiUrl","origin required");}return n.protocol==="http:"&&(!t.allowHttpLoopback||!tt.test(e))&&Se("apiUrl","HTTPS required except exact loopback"),n.origin}function J(e,t){try{return e?.getItem(t)??null}catch{return null}}function $(e,t,n){try{n===null?e?.removeItem(t):e?.setItem(t,n);}catch{}}function G(){try{return globalThis.localStorage}catch{return}}function B(){try{return globalThis.sessionStorage}catch{return}}var si="authowl.session-challenge",ai=e=>`${si}.${e}`,ui="set-auth-challenge",ot="x-authowl-challenge";var st="INVALID_TWO_FACTOR_COOKIE",ci=2048,ce=e=>e!==null&&e.length<=ci,rt=/^[\x21\x23-\x2B\x2D-\x3A\x3C-\x5B\x5D-\x7E]+$/;function di(e){let t=[];for(let n of e.split(";")){let i=n.trimStart(),o=i.indexOf("=");o<=0||t.push([i.slice(0,o).trimEnd(),i.slice(o+1)]);}return t}function at(e){let t=ai(e),n=new Map;function i(){return n.size===0?null:[...n].map(([d,l])=>`${d}=${l}`).join("; ")}function o(){let d=i();$(B(),t,ce(d)?d:null);}function s(d){for(let[l,y]of di(d))rt.test(l)&&(y===""?n.delete(l):rt.test(y)&&n.set(l,y));}let c=J(B(),t);return ce(c)&&s(c),{presentOn(d){let l=i();d.delete(ot),ce(l)&&d.set(ot,l);},observe(d){let l=d.get(ui);ce(l)&&(s(l),o());},clear(){n.clear(),o();}}}var ut="set-auth-token",ct="x-authowl-session-transport",dt="bearer";var li="authowl.session-token",pi="authowl.cookie-transport",pt="ok",ft="bearer",fi=e=>`${li}.${e}`,gi=e=>`${pi}.${e}`;function mi(e){return e===pt?"cookies":e===ft?"bearer":"unknown"}function hi(e){return e==="cookies"?pt:e==="bearer"?ft:null}function yi(e){let t=fi(e),n=gi(e),i=at(e),o=null,s=false,c=null,d=mi(J(G(),n)),l=()=>d==="unknown",y=0,r=null,a=false;function f(){let h=J(B(),t);if(h!==null)return s=true,h;let O=J(G(),t);return O!==null?(s=false,O):null}o=f(),o!==null&&l()&&(a=true);function b(){if(!(!a||!r)){a=false;try{r();}catch{}}}function u(){let h=d==="bearer"?o:null,[O,_]=s?[B(),G()]:[G(),B()];$(_,t,null),$(O,t,h);}function g(h){h!==null&&c!==null&&(s=c,c=null),o=h,u(),h!==null&&l()&&(a=true,b());}function A(h){d=h,$(G(),n,hi(h));}function w(){A("unknown"),a=false;}function I(){return o===null&&(o=f()),o}function q(){let h=f();return h!==null&&(o=h),o}function V(h){q()===h&&u();}function K(){y+=1,c=null,s=false,g(null),i.clear(),w();}let j=()=>d!=="cookies";return {hasToken:()=>I()!==null,declareOn(h){if(h.has("authorization"))return  false;let O=I();return !O&&!j()?false:(O&&h.set("authorization",`Bearer ${O}`),h.set(ct,dt),i.presentOn(h),true)},wantsToken:j,needsProbe:l,observe(h){let O=h.get(ut);O&&g(O),i.observe(h);},dropChallenge:i.clear,measureWith(h){r=h,b();},beginRead(){let h=I(),O=y;return {carriedToken:h!==null,endIfDead(){h!==null&&q()===h&&y===O&&K();},recordCookieVerdict(_){if(y===O&&l()){if(A(_?"cookies":"bearer"),_){g(null);return}V(h);}}}},beginSession({remember:h}){y+=1,c=!h,i.clear(),w();},endSession:K}}var lt=new Map;function gt(e){let t=lt.get(e);if(t)return t;let n=yi(e);return lt.set(e,n),n}function Ai(e,t){return t?.headers?new Headers(t.headers):typeof e=="object"&&e!==null&&"headers"in e?new Headers(e.headers):new Headers}function mt(e,t){let n=gt(e),i=(c,d)=>(t??globalThis.fetch)(c,d);return {fetch:async(c,d)=>{if(d?.credentials==="omit"||!n.wantsToken())return i(c,d);let l=Ai(c,d),y=n.declareOn(l),r=await i(c,{...d,headers:l});return y&&n.observe(r.headers),r},probe:i,tokens:n}}function bi(e){if(!e||typeof e!="object")throw new Error("AuthConfig is required");let t=ke(e.publishableKey),n=it(e.apiUrl,{allowHttpLoopback:t.env==="test"});return {publishableKey:e.publishableKey,apiUrl:n,decoded:t,projectBaseURL:`${n}/api/projects/${t.projectId}/auth`}}function Re(e){let t=bi(e),{fetch:n,...i}=mt(t.decoded.projectId,e.fetch);return {...e,...t,fetch:n,session:i}}var Oi=1e4,wi=1024*1024,E=class extends Error{kind;requestId;constructor(t,n){super(Ei(t)),this.name="TransportError",this.kind=t,this.requestId=n;}},At=new WeakSet;function v(e,t){let n=new E(e,t);return At.add(n),n}async function bt({fetchImpl:e,url:t,init:n={},timeoutMs:i=Oi,maxResponseBytes:o=wi,allowHttpLoopback:s=false,decode:c}){yt(i,"timeoutMs"),yt(o,"maxResponseBytes");let d=nt(t,{allowHttpLoopback:s}),l=n.signal,y=new AbortController,r=null,a,f=new Promise(A=>{a=A;}),b=A=>{r===null&&(r=A,a({type:"abort",kind:A}),y.abort());},u=()=>b("aborted");l?.addEventListener("abort",u,{once:true});let g=setTimeout(()=>b("timeout"),i);l?.aborted&&u();try{if(r!==null)throw v(r);let A;try{A=await Promise.race([e(d.toString(),{...n,redirect:"error",signal:y.signal}).then(j=>({type:"response",response:j})),f]);}catch{throw v(r??"network")}if(A.type==="abort")throw v(A.kind);if(!ki(A.response))throw v("invalid_response");let w=A.response,I=xi(w.headers),q=await Si(w,o,f,()=>r,I),V=Ii(w,q,I),K;try{K=w.ok&&c?c(V,Object.freeze({status:w.status})):V;}catch{throw v("invalid_response",I)}return {response:w,data:K,...I===void 0?{}:{requestId:I}}}catch(A){throw A instanceof E&&At.has(A)?A:v(r??"network")}finally{clearTimeout(g),l?.removeEventListener("abort",u);}}function ki(e){if(!e||typeof e!="object")return  false;let t=e;return Number.isInteger(t.status)&&t.status>=0&&t.status<=599&&typeof t.statusText=="string"&&typeof t.ok=="boolean"&&typeof t.headers?.get=="function"&&(t.body===null||typeof t.body=="object"&&typeof t.body?.getReader=="function"&&typeof t.body.cancel=="function")}async function Si(e,t,n,i,o){let s=e.headers.get("content-length");if(s!==null){if(!/^\d+$/.test(s))throw ht(e.body),v("invalid_response",o);if(Number(s)>t)throw ht(e.body),v("response_too_large",o)}if(!e.body)return "";let c;try{c=e.body.getReader();}catch{throw v("network",o)}let d=[],l=0,y=null;try{for(;;){let f;try{f=await Promise.race([c.read(),n]);}catch{y=v(i()??"network",o);break}if(Ri(f)){y=v(f.kind,o);break}let{done:b,value:u}=f;if(b)break;if(u.byteLength!==0){if(l+=u.byteLength,l>t){y=v("response_too_large",o);break}d.push(u);}}}finally{y&&Ti(c);try{c.releaseLock();}catch{}}if(y)throw y;let r=new Uint8Array(l),a=0;for(let f of d)r.set(f,a),a+=f.byteLength;try{return new TextDecoder("utf-8",{fatal:!0}).decode(r)}catch{throw v("invalid_response",o)}}function Ri(e){return "type"in e&&e.type==="abort"}function ht(e){if(e)try{e.cancel().catch(()=>{});}catch{}}function Ti(e){try{e.cancel().catch(()=>{});}catch{}}function Ii(e,t,n){if(e.status===204||e.status===205)return null;let i=Pi(e.headers.get("content-type"));if(!e.ok&&(!i||t.length===0))return null;if(!i||t.length===0)throw v("invalid_response",n);try{return JSON.parse(t)}catch{if(!e.ok)return null;throw v("invalid_response",n)}}function Pi(e){if(e===null)return  false;let t=e.split(";",1)[0]?.trim().toLowerCase();return t==="application/json"||t?.endsWith("+json")===true}function xi(e){let t=e.get("x-request-id")?.trim();if(!(!t||t.length>256||!/^[A-Za-z0-9._:-]+$/.test(t)))return t}function yt(e,t){if(!Number.isInteger(e)||e<=0)throw new TypeError(`${t} must be a positive integer.`)}function Ei(e){switch(e){case "aborted":return "The request was cancelled.";case "timeout":return "The request timed out.";case "response_too_large":return "The response exceeded the allowed size.";case "invalid_response":return "The service returned an invalid response.";case "network":return "The network request could not be completed."}}var Te=class extends Error{status;requestId;constructor(t,n,i){super(`${t} request failed with status ${n.status}.`),this.name="AuthOwlHttpError",this.status=n.status,this.requestId=i;}};function de(e,t,n={}){let i=new Headers(n.init?.headers);return i.set("x-publishable-key",e.publishableKey),bt({fetchImpl:e.fetch,url:t,init:{...n.init,headers:i},allowHttpLoopback:e.decoded.env==="test",...n.timeoutMs===void 0?{}:{timeoutMs:n.timeoutMs},...n.maxResponseBytes===void 0?{}:{maxResponseBytes:n.maxResponseBytes},...n.decode===void 0?{}:{decode:n.decode}})}function Ot(e,t){if(!e.response.ok)throw new Te(t,e.response,e.requestId);return e.data}var vi="x-authowl-turnstile-token",Ci=1e4,zi=32,Di=2e4;function W(e,t){return {post:(n,i,o,s)=>e.request(n,{method:"POST",body:i,fetchOptions:o,decode:s}),mutation:async(n,i)=>{let o=await n;return o.error===null&&(i===void 0||o.data!==null&&i(o.data))&&t(),o}}}function Ee(e,t=e.projectBaseURL){return {async request(n,i={}){let o=Ni(t,n,i.query),s=i.method??(i.body===void 0?"GET":"POST"),c=new Headers(i.fetchOptions?.headers);i.fetchOptions?.authChallengeToken&&c.set(vi,i.fetchOptions.authChallengeToken),i.body!==void 0&&c.set("content-type","application/json");let d={method:s,headers:c,credentials:i.credentials??"include",...i.body===void 0?{}:{body:JSON.stringify(i.body)}},l=Object.freeze({method:s,path:n});await i.fetchOptions?.onRequest?.(l);let y=_i(s,i.fetchOptions),r;try{r=await Ui(e,o,{...d,signal:i.fetchOptions?.signal},y);}catch(A){let w=kt(A);return await i.fetchOptions?.onError?.(Ie(l,w,Fi(A))),{data:null,error:w}}let{response:a,requestId:f}=r,b=Vi(n,r.data),u=b;if(a.ok)try{u=xe(b),i.decode&&(u=i.decode(u));}catch{let A=kt(new E("invalid_response",f));return await i.fetchOptions?.onError?.(Ie(l,A,"invalid_response")),{data:null,error:A}}let g=Object.freeze({...l,status:a.status,...f===void 0?{}:{requestId:f}});if(await i.fetchOptions?.onResponse?.(g),!a.ok){let A=Mi(a,b,f);return A.code===st&&e.session.tokens.dropChallenge(),await i.fetchOptions?.onError?.(Ie(l,A,"api")),{data:null,error:A}}return await i.fetchOptions?.onSuccess?.(g),{data:u,error:null}}}}async function Ui(e,t,n,i){let o=Date.now()+Ci;for(let s=0;s<i;s+=1){let c=o-Date.now();if(c<=0)throw new E("timeout");try{let d=await de(e,t,{init:n,timeoutMs:Math.max(1,Math.ceil(c))});if(d.response.status<500||s===i-1)return d}catch(d){if(s===i-1||!(d instanceof E)||d.kind!=="network")throw d}await Hi(50*2**s,n.signal,o);}throw new E("network")}function _i(e,t){if(e!=="GET"||t?.authChallengeToken)return 1;let n=t?.retry;return typeof n!="number"||!Number.isFinite(n)?1:Math.min(Math.max(Math.trunc(n),0),3)+1}function Ni(e,t,n){let i=new URL(`${e}${t.startsWith("/")?t:`/${t}`}`);for(let[o,s]of Object.entries(n??{}))s!==void 0&&i.searchParams.set(o,String(s));return i.toString()}function Mi(e,t,n){let i=ee(t)?t:{},o=Li(i,e.headers);return {status:e.status,statusText:e.statusText,code:typeof i.code=="string"?i.code:void 0,...n===void 0?{}:{requestId:n},...typeof i.current_version=="number"?{currentVersion:i.current_version}:{},...o!==void 0?{retryAfterSeconds:o}:{},message:typeof i.message=="string"?i.message:typeof i.error=="string"?i.error:typeof i.detail=="string"?i.detail:e.statusText||"Request failed"}}function Li(e,t){let n=(typeof e.retryAfterSeconds=="number"&&Number.isFinite(e.retryAfterSeconds)?e.retryAfterSeconds:void 0)??wt(t.get("retry-after"))??wt(t.get("x-retry-after"));if(n!==void 0)return Math.min(Math.max(Math.trunc(n),1),86400)}function wt(e){if(!e)return;let t=e.trim();if(!/^\d+$/.test(t))return;let n=Number(t);return Number.isFinite(n)?n:void 0}function kt(e){let t=e instanceof E?e.kind:"network";return {status:0,...{aborted:{statusText:"ABORTED",code:"REQUEST_ABORTED",message:"The request was cancelled."},timeout:{statusText:"TIMEOUT",code:"REQUEST_TIMEOUT",message:"The request timed out."},response_too_large:{statusText:"INVALID_RESPONSE",code:"RESPONSE_TOO_LARGE",message:"The service response was too large."},invalid_response:{statusText:"INVALID_RESPONSE",code:"INVALID_RESPONSE",message:"The service returned an invalid response."},network:{statusText:"FETCH_ERROR",code:"FETCH_ERROR",message:"Network request failed."}}[t],...e instanceof E&&e.requestId?{requestId:e.requestId}:{}}}function Ie(e,t,n){return Object.freeze({...e,status:t.status??0,...t.requestId===void 0?{}:{requestId:t.requestId},failure:n})}function Fi(e){return e instanceof E?e.kind:"network"}function Hi(e,t,n){return new Promise((i,o)=>{if(t?.aborted){o(new E("aborted"));return}let s=n-Date.now();if(s<=0){o(new E("timeout"));return}let c=Math.min(e,s),d=()=>{clearTimeout(l),o(new E("aborted"));},l=setTimeout(()=>{t?.removeEventListener("abort",d),Date.now()>=n?o(new E("timeout")):i();},c);t?.addEventListener("abort",d,{once:true}),t?.aborted&&d();})}function xe(e,t="",n=0,i={nodes:0}){if(i.nodes+=1,n>zi||i.nodes>Di)throw new Error("response traversal limit exceeded");if(typeof e=="string"&&/^(?:createdAt|updatedAt|expiresAt)$/.test(t)){let o=new Date(e);return Number.isNaN(o.getTime())?e:o}return Array.isArray(e)?e.map(o=>xe(o,"",n+1,i)):ee(e)?Object.fromEntries(Object.entries(e).map(([o,s])=>[o,qi(o)?s:xe(s,o,n+1,i)])):e}function qi(e){return e==="metadata"||e==="public_metadata"||e==="unsafe_metadata"||e==="private_metadata"||e==="publicMetadata"||e==="unsafeMetadata"||e==="privateMetadata"}function Vi(e,t){if(e==="/list-sessions"&&Array.isArray(t))return t.map(o=>ee(o)?Pe(o):o);if(!ee(t))return t;let i=e==="/change-password"||e==="/passkey/verify-authentication"||e==="/phone-otp/verify"||e==="/sign-up/email"||e.startsWith("/sign-in/")||e.startsWith("/two-factor/verify-")?Pe(t):t;return e==="/sign-up/email"&&!("sessionCreated"in i)&&(i={...i,sessionCreated:typeof t.token=="string"&&t.token.length>0}),(e==="/get-session"||e==="/passkey/verify-authentication")&&ee(i.session)&&(i={...i,session:Pe(i.session)}),i}function Pe(e){if(!Object.hasOwn(e,"token"))return e;let t={...e};return delete t.token,t}function ee(e){return !!e&&typeof e=="object"&&!Array.isArray(e)}var Ki=new Set(["__proto__","constructor","prototype"]);function m(e){(!e||typeof e!="object"||Array.isArray(e))&&p();let t=Object.getPrototypeOf(e);return t!==Object.prototype&&t!==null&&p(),e}function k(e){return typeof e!="string"&&p(),e}function T(e){return typeof e!="boolean"&&p(),e}function R(e){return (!(e instanceof Date)||Number.isNaN(e.getTime()))&&p(),e}function te(e){return (!Array.isArray(e)||!e.every(t=>typeof t=="string"))&&p(),[...e]}function P(e,t){let n=e[t];return n==null||typeof n=="string"?n:p()}function St(e,t){let n=e[t];return n==null||typeof n=="boolean"?n:p()}function D(e){let t=m(e),n=t.email;return n!==null&&typeof n!="string"&&p(),{id:k(t.id),email:n,emailVerified:T(t.emailVerified),createdAt:R(t.createdAt),updatedAt:R(t.updatedAt),...z("phoneNumber",P(t,"phoneNumber")),...z("username",P(t,"username")),...z("displayUsername",P(t,"displayUsername")),...z("firstName",P(t,"firstName")),...z("lastName",P(t,"lastName")),...z("name",P(t,"name")),...z("image",P(t,"image")),...z("twoFactorEnabled",St(t,"twoFactorEnabled"))}}function le(e){let t=m(e),n=t.membership;return {id:k(t.id),userId:k(t.userId),expiresAt:R(t.expiresAt),...z("activeOrganizationId",P(t,"activeOrganizationId")),...z("activeTeamId",P(t,"activeTeamId")),...z("membership",n==null?n:Bi(n)),...z("pendingMfaEnrollment",St(t,"pendingMfaEnrollment"))}}function p(){throw new TypeError("AuthOwl response does not match its runtime contract.")}function M(e,t=20,n=1e4){return (!e||typeof e!="object"||Array.isArray(e))&&p(),Ce(e,t,n)}function Ce(e,t=20,n=1e4){return ve(e,0,{nodes:0},t,n)}function Bi(e){let t=m(e);return {role:k(t.role),...t.roles===void 0?{}:{roles:te(t.roles)},permissions:te(t.permissions),...t.teams===void 0?{}:{teams:te(t.teams)}}}function ve(e,t,n,i,o){if(n.nodes+=1,(t>i||n.nodes>o)&&p(),e===null||typeof e=="string"||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||p(),e;if(Array.isArray(e))return e.map(d=>ve(d,t+1,n,i,o));(!e||typeof e!="object")&&p();let s=Object.getPrototypeOf(e);s!==Object.prototype&&s!==null&&p();let c={};for(let[d,l]of Object.entries(e))Ki.has(d)&&p(),c[d]=ve(l,t+1,n,i,o);return c}function z(e,t){return t===void 0?{}:{[e]:t}}function Rt({http:e,probe:t,tokens:n,channelName:i}){let o=new Set,s=null,c=null,d=null,l=null,y=null,r=null,a,f=h=>{g(h);};a={data:null,isPending:true,isRefetching:false,error:null,refetch:f};function b(h){a=h;for(let O of o)O();}async function u(h){return e.request("/get-session",{query:h?.query,decode:ze})}function g(h){if(h?.query?.disableCookieCache===true)return w(h);if(l)return l;if(y)return y;let O=w(h).finally(()=>{y===O&&(y=null);});return y=O,O}function A(){if(l)return l;let h=w({query:{disableCookieCache:true}}).finally(()=>{l===h&&(l=null);});return l=h,h}async function w(h){d?.abort();let O=new AbortController;d=O,b({...a,isPending:a.data===null&&a.error===null,isRefetching:a.data!==null});let _=n.beginRead(),ue=await e.request("/get-session",{query:h?.query,fetchOptions:{signal:O.signal},decode:ze});if(d===O&&(d=null,b({data:ue.data,error:ue.error,isPending:false,isRefetching:false,refetch:f}),ue.error===null)){if(ue.data===null){_.endIfDead();return}await I(_);}}async function I(h){if(n.needsProbe()){if(!h.carriedToken){h.recordCookieVerdict(true);return}return r||q(h)}}function q(h){let O=t.request("/get-session",{query:{disableCookieCache:true},decode:ze}).then(_=>{r===O&&_.error===null&&h.recordCookieVerdict(_.data!==null);}).finally(()=>{r===O&&(r=null);});return r=O,O}function V(){s?.postMessage({type:"session-changed"});}function K(){if(typeof window>"u"||c)return;let h=()=>{g();},O=()=>{document.visibilityState==="visible"&&g();};window.addEventListener("focus",h),document.addEventListener("visibilitychange",O),typeof BroadcastChannel<"u"&&(s=new BroadcastChannel(i),s.addEventListener("message",h)),c=()=>{window.removeEventListener("focus",h),document.removeEventListener("visibilitychange",O),s?.close(),s=null,c=null;};}function j(h){return o.add(h),o.size===1&&(K(),g()),()=>{if(o.delete(h),o.size===0){let O=d;d=null,y=null,l=null,O?.abort(),c?.();}}}return n.measureWith(()=>{n.needsProbe()&&q(n.beginRead());}),{store:{subscribe:j,getSnapshot:()=>a,refresh:A},getSession:u,notifyMutation(){V(),r&&r.catch(()=>{}).then(()=>{!n.needsProbe()&&n.hasToken()&&V();}),o.size>0&&g({query:{disableCookieCache:true}});}}}function ze(e){if(e===null)return null;let t=m(e);return (t.session===void 0||t.user===void 0)&&p(),{session:le(t.session),user:D(t.user)}}De();function Tt(){let e=globalThis.crypto.getRandomValues(new Uint8Array(16));e[6]=e[6]&15|64,e[8]=e[8]&63|128;let t=Array.from(e,n=>n.toString(16).padStart(2,"0")).join("");return `${t.slice(0,8)}-${t.slice(8,12)}-${t.slice(12,16)}-${t.slice(16,20)}-${t.slice(20)}`}async function It(e,t){return e.request("/user/metadata",{fetchOptions:t,decode:xt})}async function Pt(e,t,n){return e.request("/user/metadata",{method:"PATCH",body:{expected_version:t.expectedVersion,unsafe_metadata:t.unsafeMetadata},fetchOptions:n,decode:xt})}function xt(e){let t=m(e),n=M(t.public_metadata),i=M(t.unsafe_metadata);if(!Number.isSafeInteger(t.metadata_version)||t.metadata_version<0)throw new TypeError("Invalid AuthOwl metadata response");return {publicMetadata:n,unsafeMetadata:i,metadataVersion:t.metadata_version}}function vt(e,t){let{post:n,mutation:i}=W(e,t);return {getMetadata:o=>It(e,o),updateUnsafeMetadata:(o,s)=>Pt(e,o,s),updateProfile:(o,s)=>i(n("/update-user",o,s,ie)),changeEmail:(o,s)=>i(n("/change-email",o,s,ie)),changePassword:(o,s)=>i(n("/change-password",o,s,ji)),listSessions:o=>e.request("/list-sessions",{fetchOptions:o,decode:Ji}),revokeSession:({sessionId:o},s)=>i(n("/revoke-session",{sessionId:o},s,ie)),revokeOtherSessions:o=>i(n("/revoke-other-sessions",{},o,ie)),listSocialAccounts:async o=>{let s=await e.request("/list-accounts",{fetchOptions:o,decode:$i});if(!s.data)return {data:null,error:s.error};let c=s.data.length>1;return {...s,data:s.data.filter(d=>d.providerId!=="credential").map(d=>({...d,canUnlink:c}))}},linkSocial:(o,s)=>n("/link-social",o,s,Gi),unlinkSocial:(o,s)=>i(n("/unlink-account",o,s,ie)),delete:(o={},s)=>i(n("/delete-user",o,s,Wi))}}function ie(e){let t=m(e);return {status:T(t.status)}}function ji(e){let t=m(e);return {user:D(t.user)}}function Ji(e){return Array.isArray(e)||p(),e.map(t=>{let n=m(t);return {id:k(n.id),userId:k(n.userId),createdAt:R(n.createdAt),updatedAt:R(n.updatedAt),expiresAt:R(n.expiresAt),...Et("ipAddress",P(n,"ipAddress")),...Et("userAgent",P(n,"userAgent"))}})}function $i(e){return Array.isArray(e)||p(),e.map(t=>{let n=m(t);return {id:k(n.id),userId:k(n.userId),providerId:k(n.providerId),accountId:k(n.accountId),scopes:te(n.scopes),createdAt:R(n.createdAt),updatedAt:R(n.updatedAt)}})}function Gi(e){let t=m(e);return {url:k(t.url),redirect:T(t.redirect)}}function Wi(e){let t=m(e);return {success:T(t.success),message:k(t.message)}}function Et(e,t){return t===void 0?{}:{[e]:t}}function Ue(e,t){return !e||!t?false:e.permissions.includes(t)}function Yi(e,t){return !e||!t?false:e.teams?.includes(t)??false}function Xi(e,t){return e?e.roles===void 0?e.role===t:e.roles.includes(t):false}function _e(e,t){if(!e)return  false;let{role:n,permission:i,teamId:o}=t;return !(n===void 0&&i===void 0&&o===void 0||n!==void 0&&!Xi(e,n)||i!==void 0&&!e.permissions.includes(i)||o!==void 0&&!Yi(e,o))}function Qi(e){return {has:t=>_e(e,t),hasPermission:t=>Ue(e,t.permission)}}var Zi=new Set(["pending","accepted","rejected","canceled"]),Ne=1e4;function Y(e,t,n){let i=m(e),o={id:S(i.id),name:S(i.name),slug:S(i.slug),createdAt:R(i.createdAt),...pe("logo",P(i,"logo")),...pe("metadata",i.metadata===void 0?void 0:Ce(i.metadata))};return N(o.id,t),N(o.slug,n),o}function Ct(e){return L(e,Y)}function Me(e,t,n){return e===null?null:(t===null&&p(),Y(e,t,n))}function zt(e,t,n){if(e===null)return null;let i=m(e),o=Y(i,t,n);return {...o,members:L(i.members,s=>Bt(s,o.id)),invitations:L(i.invitations,s=>F(s,void 0,o.id))}}function Le(e,t,n=false){let i=L(e,o=>oe(o));return n||se(i.map(o=>o.organizationId),t),i}function Dt(e,t){let n=L(e,i=>Fe(i));return se(n.map(i=>i.teamId),t),n}function Fe(e,t,n){let i=m(e),o={id:S(i.id),teamId:S(i.teamId),userId:S(i.userId),createdAt:R(i.createdAt)};return N(o.teamId,t),N(o.userId,n),o}function Ut(e,t,n){return e===null?null:(t===null&&p(),oe(e,t,n))}function _t(e,t){let n=m(e);return (!Number.isSafeInteger(n.total)||n.total<0)&&p(),{members:eo(n.members,t),total:n.total}}function F(e,t,n){let i=m(e),o=S(i.status);Zi.has(o)||p();let s={id:S(i.id),organizationId:S(i.organizationId),email:re(i.email),role:S(i.role),status:o,inviterId:S(i.inviterId),expiresAt:R(i.expiresAt),createdAt:R(i.createdAt)};return N(s.id,t),N(s.organizationId,n),s}function Nt(e,t){let n=L(e,i=>F(i));return se(n.map(i=>i.organizationId),t),n}function Mt(e){return L(e,t=>{let n=m(t);return {...F(n),organizationName:re(n.organizationName)}})}function Lt(e,t){let n=m(e);return {...F(n,t),organizationName:S(n.organizationName),organizationSlug:S(n.organizationSlug),inviterEmail:jt(n.inviterEmail)}}function Ft(e,t){let n=m(e),i=F(n.invitation,t);return {invitation:i,member:X(n.member,void 0,i.organizationId)}}function Ht(e,t){let n=m(e);return n.member!==null&&p(),{invitation:n.invitation===null?null:F(n.invitation,t),member:null}}function qt(e,t){return e===null?null:F(e,t)}function Vt(e,t,n){let i=m(e);return {member:X(i.member,n,t)}}function X(e,t,n){let i=m(e),o={id:S(i.id),organizationId:S(i.organizationId),userId:S(i.userId),role:S(i.role),createdAt:R(i.createdAt),...i.user===void 0?{}:{user:Jt(i.user)}};return N(o.id,t),N(o.organizationId,n),o}function Kt(e,t){let n=L(e,i=>{let o=m(i);return {organizationId:S(o.organizationId),data:{role:S(o.role),...pe("permission",o.permission===void 0?void 0:to(o.permission))}}});return se(n.map(i=>i.organizationId),t),n.map(i=>i.data)}function oe(e,t,n){let i=m(e),o=i.updatedAt,s={id:S(i.id),name:re(i.name),organizationId:S(i.organizationId),createdAt:R(i.createdAt),...o===void 0?{}:{updatedAt:R(o)}};return N(s.id,t),N(s.organizationId,n),s}function He(e){let t=m(e);return {message:re(t.message)}}function Bt(e,t){let n=m(e);return {...X(n,void 0,t),user:Jt(n.user)}}function eo(e,t){let n=L(e,i=>Bt(i));return se(n.map(i=>i.organizationId),t),n}function to(e){let t=m(e),n={};for(let[i,o]of Object.entries(t))(i==="__proto__"||i==="constructor"||i==="prototype"||i.length===0||i.length>Ne||!Array.isArray(o))&&p(),n[i]=o.map(s=>S(s));return n}function S(e){let t=k(e);return (t.length===0||t.length>Ne)&&p(),t}function re(e){if(e==null)return "";let t=k(e);return t.length>Ne&&p(),t}function jt(e){return e===null?null:S(e)}function N(e,t){t!==void 0&&e!==t&&p();}function se(e,t){let n=t??e[0];n!==void 0&&e.some(i=>i!==n)&&p();}function Jt(e){let t=m(e);return {id:S(t.id),name:re(t.name),email:jt(t.email),...pe("image",P(t,"image"))}}function L(e,t){return Array.isArray(e)||p(),e.map(n=>t(n))}function pe(e,t){return t===void 0?{}:{[e]:t}}function $t(e,t,n=()=>null){let{post:i,mutation:o}=W(e,t),s=new Set,c=()=>{for(let r of s)try{r();}catch{}},d=new Map,l=(r,a,f,b)=>{if(f)return e.request(r,{query:a,fetchOptions:f,decode:b});let u=`${r}\0${JSON.stringify(a??null)}`,g=d.get(u);if(g)return g;let A=e.request(r,{query:a,decode:b}).finally(()=>{d.delete(u);});return d.set(u,A),A},y=async r=>{let a=await o(r).finally(()=>d.clear());return a.error===null&&c(),a};return {subscribe(r){return s.add(r),()=>s.delete(r)},create:(r,a)=>y(i("/organization/create",r,a,Y)),list:r=>l("/organization/list",void 0,r,Ct),get:(r={},a)=>l("/organization/get-full-organization",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,membersLimit:r.membersLimit},a,f=>zt(f,r.organizationId,r.organizationSlug)),setActive:(r,a)=>y(i("/organization/set-active",r,a,f=>Me(f,r.organizationId,r.organizationSlug))),createTeam:(r,a)=>y(i("/organization/create-team",r,a,f=>oe(f,void 0,r.organizationId))),listTeams:(r={},a)=>l("/organization/list-teams",{organizationId:r.organizationId},a,f=>Le(f,r.organizationId)),updateTeam:(r,a)=>y(i("/organization/update-team",r,a,f=>oe(f,r.teamId,r.data.organizationId))),removeTeam:(r,a)=>y(i("/organization/remove-team",r,a,He)),listUserTeams:r=>l("/organization/list-user-teams",void 0,r,a=>Le(a,void 0,true)),listTeamMembers:(r={},a)=>l("/organization/list-team-members",{teamId:r.teamId},a,f=>Dt(f,r.teamId)),addTeamMember:(r,a)=>y(i("/organization/add-team-member",r,a,f=>Fe(f,r.teamId,r.userId))),removeTeamMember:(r,a)=>y(i("/organization/remove-team-member",r,a,He)),setActiveTeam:(r,a)=>y(i("/organization/set-active-team",r,a,f=>Ut(f,r.teamId))),update:(r,a)=>y(i("/organization/update",r,a,f=>Me(f,r.organizationId))),delete:(r,a)=>y(i("/organization/delete",r,a,f=>Y(f,r.organizationId))),listMembers:(r={},a)=>l("/organization/list-members",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,limit:r.limit,offset:r.offset,sortBy:r.sortBy,sortDirection:r.sortDirection,filterField:r.filterField,filterValue:r.filterValue,filterOperator:r.filterOperator},a,f=>_t(f,r.organizationId)),inviteMember:(r,a)=>y(i("/organization/invite-member",r,a,f=>F(f,void 0,r.organizationId))),listInvitations:(r={},a)=>l("/organization/list-invitations",{organizationId:r.organizationId},a,f=>Nt(f,r.organizationId)),listUserInvitations:r=>l("/organization/list-user-invitations",void 0,r,Mt),getInvitation:(r,a)=>l("/organization/get-invitation",{id:r.id},a,f=>Lt(f,r.id)),acceptInvitation:(r,a)=>y(i("/organization/accept-invitation",r,a,f=>Ft(f,r.invitationId))),rejectInvitation:(r,a)=>y(i("/organization/reject-invitation",r,a,f=>Ht(f,r.invitationId))),cancelInvitation:(r,a)=>y(i("/organization/cancel-invitation",r,a,f=>qt(f,r.invitationId))),removeMember:(r,a)=>y(i("/organization/remove-member",r,a,f=>Vt(f,r.organizationId,r.memberIdOrEmail.includes("@")?void 0:r.memberIdOrEmail))),updateMemberRole:(r,a)=>y(i("/organization/update-member-role",r,a,f=>X(f,r.memberId,r.organizationId))),leave:(r,a)=>y(i("/organization/leave",r,a,f=>X(f,void 0,r.organizationId))),listRoles:(r={},a)=>l("/organization/list-roles",{organizationId:r.organizationId},a,f=>Kt(f,r.organizationId)),has:r=>_e(n(),r),hasPermission:r=>Ue(n(),r.permission)}}var Gt=4096,no=4096,io=100,oo=256,ro=16,so=64,ao=12;function Ve(e){let t=m(e);return t.twoFactorRedirect===true?((t.user!==void 0||t.redirect!==void 0||t.url!==void 0)&&p(),{twoFactorRedirect:true,...t.twoFactorMethods===void 0?{}:{twoFactorMethods:fn(t.twoFactorMethods,ro,so)}}):(t.twoFactorRedirect!==void 0&&p(),{redirect:T(t.redirect),...fo(t,"url"),user:D(t.user)})}function Wt(e){let t=m(e);return {user:D(t.user)}}function Yt(e){let t=m(e);return {sessionCreated:T(t.sessionCreated),user:D(t.user)}}function Xt(e,t){let n=m(e),i=T(n.redirect);n.user===null&&p();let o=n.user!==void 0&&n.user!==null,s=n.url!==void 0&&n.url!==null;return i?((o||!s)&&p(),{redirect:true,url:qe(n.url,t)}):(o===s&&p(),o?{redirect:false,user:D(n.user)}:{redirect:false,url:qe(n.url,t)})}function Qt(e,t){let n=m(e);return (n.redirect!==true||n.user!==void 0)&&p(),{redirect:true,url:qe(n.url,t)}}function Zt(e){return {status:T(m(e).status)}}function en(e){return {success:T(m(e).success)}}function tn(e){return m(e).status!=="pending"&&p(),{status:"pending"}}function nn(e){let t=m(e);if(t.kind==="authowl_turnstile")return {kind:"authowl_turnstile"};t.kind!=="akedly_shield_v1_2"&&p();let n=m(t.turnstile),i=n.siteKey===null?null:k(n.siteKey);return {kind:"akedly_shield_v1_2",connectionId:k(t.connectionId),challenge:k(t.challenge),difficulty:uo(t.difficulty),challengeToken:k(t.challengeToken),challengeRequired:T(t.challengeRequired),turnstile:{required:T(n.required),siteKey:i}}}function uo(e){return (!Number.isSafeInteger(e)||Number(e)<0||Number(e)>ao)&&p(),Number(e)}function on(e){let t=m(e);return (t.status!==true||t.sessionCreated!==true)&&p(),{status:true,sessionCreated:true,user:co(t.user)}}function Ke(e){return {status:T(m(e).status)}}function rn(e){return {status:T(m(e).status)}}function sn(e){let t=m(e);return {status:T(t.status),user:D(t.user)}}function an(e){return {success:T(m(e).success)}}function un(e){let t=m(e);return {totpURI:po(t.totpURI),backupCodes:pn(t.backupCodes)}}function cn(e){return {status:T(m(e).status)}}function fe(e){return m(e).status!==true&&p(),{status:true}}function dn(e){return {status:T(m(e).status)}}function ln(e){let t=m(e);return t.status!==void 0&&t.status!==true&&p(),{backupCodes:pn(t.backupCodes)}}function co(e){let t=m(e);return {id:Q(t.id,512),...go(t,"name",1024),phoneNumber:Q(t.phoneNumber,64),phoneNumberVerified:T(t.phoneNumberVerified),...t.createdAt===void 0?{}:{createdAt:R(t.createdAt)},...t.updatedAt===void 0?{}:{updatedAt:R(t.updatedAt)}}}function qe(e,t){let n=Q(e,Gt);/[\u0000-\u0020\u007f]/u.test(n)&&p();let i;try{i=new URL(n);}catch{return p()}return (i.username||i.password)&&p(),i.protocol==="https:"||t&&i.protocol==="http:"&&lo(i.hostname)?i.href:p()}function lo(e){let t=e.toLowerCase();return t==="localhost"||t==="127.0.0.1"||t==="[::1]"}function po(e){let t=Q(e,no),n;try{n=new URL(t);}catch{return p()}let i=n.searchParams.get("secret");return (n.protocol!=="otpauth:"||n.hostname.toLowerCase()!=="totp"||n.username||n.password||n.hash||i===null||i.length===0||i.length>512||/\s/u.test(i))&&p(),t}function pn(e){return fn(e,io,oo)}function fn(e,t,n){(!Array.isArray(e)||e.length===0||e.length>t)&&p();let i=e.map(o=>Q(o,n));return i.some(o=>o.trim().length===0)&&p(),new Set(i).size!==i.length&&p(),i}function Q(e,t){let n=k(e);return (n.length===0||n.length>t)&&p(),n}function fo(e,t){let n=e[t];return n==null?{}:{[t]:Q(n,Gt)}}function go(e,t,n){let i=P(e,t);return i===void 0?{}:(i!==null&&i.length>n&&p(),{[t]:i})}var gn=new Set([1564,8206,8207,8234,8235,8236,8237,8238,8294,8295,8296,8297]),ge=new Set([9,10,11,12,13,32,133,160,5760,8192,8193,8194,8195,8196,8197,8198,8199,8200,8201,8202,8232,8233,8239,8287,12288,65279]);function me(e){if(e===void 0)return {valid:true,value:void 0};for(let n of e){let i=n.codePointAt(0);if(i===void 0||hn(n,i)||mn(i)||gn.has(i))return {valid:false}}let t=mo(e);return Be(t)?{valid:true,value:t}:{valid:false}}function Be(e){let t=0,n,i;for(let o of e){if(t+=1,t>256)return  false;let s=o.codePointAt(0);if(s===void 0||hn(o,s)||mn(s)||gn.has(s))return  false;n??=s,i=s;}return t>0&&n!==void 0&&i!==void 0&&!ge.has(n)&&!ge.has(i)}function he(){return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:"INVALID_PASSKEY_NAME",message:"Passkey names must contain 1 to 256 safe Unicode characters."}}}function mo(e){let t=0,n=e.length;for(;t<n;){let i=e.codePointAt(t);if(i===void 0||!ge.has(i))break;t+=i>65535?2:1;}for(;n>t;){let i=e.codePointAt(n-1);if(i===void 0)break;let s=i>=56320&&i<=57343?n-2:n-1,c=e.codePointAt(s);if(c===void 0||!ge.has(c))break;n=s;}return e.slice(t,n)}function mn(e){return e>=0&&e<=31||e>=127&&e<=159}function hn(e,t){return e.length===1&&t>=55296&&t<=57343}var bn=12,On=5e3,ho=8,yo=1e3,Ao=16,yn=512,wn=100,kn=8192,bo=32768,je=1024,An=256,$e=64,Oo=6e5,wo=/^[A-Za-z0-9_-]+$/u,ko=/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u,So=/[\u0000-\u001f\u007f-\u009f\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]/u,Ro=/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?$/u,To=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu,Sn=new Set(["discouraged","preferred","required"]),Io=new Set(["singleDevice","multiDevice"]),Rn=new Set(["ble","cable","hybrid","internal","nfc","smart-card","usb"]),Tn=new Set(["hybrid","security-key","client-device"]),Po=new Set(["none","indirect","direct","enterprise"]),xo=new Set(["fido-u2f","packed","android-safetynet","android-key","tpm","apple","none"]),Eo=new Set(["platform","cross-platform"]),vo=new Set(["discouraged","preferred","required"]),Co=new Set([-8,-7,-257]);function In(e){let t=M(e,bn,On);return {challenge:Nn(t.challenge),...x("timeout",Un(t.timeout)),...x("rpId",Mn(t.rpId)),...x("allowCredentials",Dn(t.allowCredentials)),...x("userVerification",ae(t.userVerification,Sn)),...x("hints",ye(t.hints,Tn)),...x("extensions",_n(t.extensions))}}function Pn(e){let t=M(e,bn,On);return {challenge:Nn(t.challenge),rp:zo(t.rp),user:Do(t.user),pubKeyCredParams:Uo(t.pubKeyCredParams),...x("timeout",Un(t.timeout)),...x("excludeCredentials",Dn(t.excludeCredentials)),...x("authenticatorSelection",_o(t.authenticatorSelection)),...x("attestation",ae(t.attestation,Po)),...x("attestationFormats",ye(t.attestationFormats,xo)),...x("hints",ye(t.hints,Tn)),...x("extensions",_n(t.extensions))}}function xn(e){let t=m(e),n=le(t.session),i=D(t.user);return n.userId!==i.id&&p(),{session:n,user:i}}function Ge(e){let t=m(e),n=t.counter;(!Number.isSafeInteger(n)||n<0)&&p();let i=We(t.deviceType,Io),o=T(t.backedUp);return o&&i!=="multiDevice"&&p(),{id:Z(t.id,An),...Lo(t),publicKey:No(t.publicKey,bo),userId:Z(t.userId,An),credentialID:be(t.credentialID,kn),counter:n,deviceType:i,backedUp:o,...Fo(t),createdAt:R(t.createdAt),...Ho(t)}}function En(e,t,n){let i=Ge(e);return (i.credentialID!==t||(n===void 0?i.name!==void 0&&i.name!==null:i.name!==n))&&p(),i}function vn(e){(!Array.isArray(e)||e.length>wn)&&p();let t=e.map(Ge);return Ae(t.map(n=>n.id)),Ae(t.map(n=>n.credentialID)),t.length>1&&t.some(n=>n.userId!==t[0]?.userId)&&p(),t}function Cn(e,t,n){let i=m(e),o=Ge(i.passkey);return (o.id!==t||o.name!==n)&&p(),{passkey:o}}function zn(e){return m(e).status!==true&&p(),{status:true}}function zo(e){let t=m(e);return {name:Je(t.name,je),...x("id",Mn(t.id))}}function Do(e){let t=m(e);return {id:be(t.id,128,1,64),name:Je(t.name,je),displayName:Je(t.displayName,je)}}function Uo(e){(!Array.isArray(e)||e.length===0||e.length>$e)&&p();let t=e.map(n=>{let i=m(n);return (i.type!=="public-key"||!Number.isSafeInteger(i.alg)||!Co.has(i.alg))&&p(),{type:"public-key",alg:i.alg}});return qo(t.map(n=>n.alg)),t}function Dn(e){if(e===void 0)return;(!Array.isArray(e)||e.length>wn)&&p();let t=e.map(n=>{let i=m(n);return i.type!=="public-key"&&p(),{type:"public-key",id:be(i.id,kn),...x("transports",ye(i.transports,Rn))}});return Ae(t.map(n=>n.id)),t}function _o(e){if(e===void 0)return;let t=m(e);t.requireResidentKey!==void 0&&typeof t.requireResidentKey!="boolean"&&p();let n=ae(t.residentKey,vo);return t.requireResidentKey!==void 0&&n!==void 0&&t.requireResidentKey!==(n==="required")&&p(),{...x("authenticatorAttachment",ae(t.authenticatorAttachment,Eo)),...x("residentKey",n),...x("requireResidentKey",t.requireResidentKey),...x("userVerification",ae(t.userVerification,Sn))}}function Un(e){return e!==void 0&&(typeof e!="number"||!Number.isFinite(e)||e<0||e>Oo)&&p(),e}function _n(e){return e===void 0?void 0:M(e,ho,yo)}function ye(e,t){if(e===void 0)return;(!Array.isArray(e)||e.length>$e)&&p();let n=e.map(i=>We(i,t));return Ae(n),n}function ae(e,t){if(e!==void 0)return We(e,t)}function Nn(e){return be(e,Math.ceil(yn*4/3),Ao,yn)}function be(e,t,n=1,i=Number.POSITIVE_INFINITY){let o=Z(e,t),s=o.length%4,c=Mo(o.at(-1)??""),d=Math.floor(o.length*3/4);return (!wo.test(o)||s===1||s===2&&(c&15)!==0||s===3&&(c&3)!==0||d<n||d>i)&&p(),o}function Z(e,t){let n=k(e);return (n.length===0||n.length>t)&&p(),n}function Je(e,t){let n=Z(e,t);return So.test(n)&&p(),n}function Mn(e){if(e===void 0)return;let t=Z(e,253);return t!=="localhost"&&(t.endsWith(".")||!t.includes(".")||t.split(".").some(n=>!Ro.test(n)))&&p(),t}function No(e,t){let n=Z(e,t),i=n.endsWith("=="),o=!i&&n.endsWith("="),s=n.at(i?-3:o?-2:-1)??"",c=Ln(s);return (n.length%4!==0||!ko.test(n)||i&&(c&15)!==0||o&&(c&3)!==0)&&p(),n}function Mo(e){return Ln(e,true)}function Ln(e,t=false){return (t?"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_":"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/").indexOf(e)}function Lo(e){let t=P(e,"name");return t===void 0?{}:(t!==null&&!Be(t)&&p(),{name:t})}function Fo(e){let t=P(e,"transports");if(t==null||t==="")return t===void 0?{}:{transports:t};let n=t.split(",");return (n.length>$e||n.some(i=>!Rn.has(i))||new Set(n).size!==n.length)&&p(),{transports:t}}function Ho(e){let t=P(e,"aaguid");return t==null?t===void 0?{}:{aaguid:null}:(To.test(t)||p(),{aaguid:t})}function We(e,t){let n=k(e);return t.has(n)||p(),n}function x(e,t){return t===void 0?{}:{[e]:t}}function Ae(e){new Set(e).size!==e.length&&p();}function qo(e){new Set(e).size!==e.length&&p();}function Yo(e,t){if(!t)return e;let n=t.catch(()=>{});return n.then(()=>{n=null;}),{async request(i,o){return n&&await n,e.request(i,o)}}}var Bn=new Map;function Xo(e,t,n){let i=Bn.get(n);if(!i){let o=new URLSearchParams(window.location.hash.slice(1)).get("authowl_code");if(!o)return;i=Promise.resolve().then(()=>(we(),Oe)).then(s=>s.completeCrossSiteSignIn(e,t,o)),Bn.set(n,i);}return i}function jn(e){return !ne()||e.idToken||e.disableRedirect?"legacy":"first-party"}function Qo(e,t=()=>{},n=tr){let i=Ee(e),o=e.session.tokens,s=ne()?Xo(i,o,e.decoded.projectId):void 0,c=Yo(i,s),d=Rt({http:c,probe:Ee({...e,fetch:e.session.probe}),tokens:o,channelName:`authowl:${e.decoded.projectId}`}),l=n(c,d.notifyMutation),y=()=>{d.notifyMutation(),t();},{post:r,mutation:a}=W(c,y),f=e.decoded.env==="test",b=u=>{o.beginSession({remember:u?.rememberMe!==false});};return {sessionStore:d.store,getSession:d.getSession,account:vt(c,y),organization:$t(c,y,()=>d.store.getSnapshot().data?.session.membership??null),signIn:{email:(u,g)=>(b(u),a(r("/sign-in/email",u,g,Ve),A=>!("twoFactorRedirect"in A))),username:(u,g)=>(b(u),a(r("/sign-in/username",u,g,Ve),A=>!("twoFactorRedirect"in A))),social:async(u,g)=>{if(b(),jn(u)==="first-party"){let{beginCrossSiteSignIn:w}=await Promise.resolve().then(()=>(we(),Oe)),I=await w(e,{kind:"social",provider:u.provider,callbackURL:u.callbackURL,errorCallbackURL:u.errorCallbackURL,newUserCallbackURL:u.newUserCallbackURL,scopes:u.scopes,loginHint:u.loginHint,requestSignUp:u.requestSignUp});if(I)return window.location.assign(I),{data:{redirect:true,url:I},error:null}}let A=await a(r("/sign-in/social",u,g,w=>Xt(w,f)),w=>"user"in w);return A.error!==null||A.data===null||"url"in A.data&&A.data.redirect&&!u.disableRedirect&&typeof window<"u"&&window.location.assign(A.data.url),A},sso:async(u,g)=>{if(jn(u)==="first-party"){let{beginCrossSiteSignIn:w}=await Promise.resolve().then(()=>(we(),Oe)),I=await w(e,{kind:"sso",email:u.email,providerId:u.providerId,domain:u.domain,organizationSlug:u.organizationSlug,callbackURL:u.callbackURL,errorCallbackURL:u.errorCallbackURL,newUserCallbackURL:u.newUserCallbackURL});if(I)return window.location.assign(I),{data:{url:I,redirect:true},error:null}}let A=await r("/sign-in/sso",u,g,w=>Qt(w,f));return A.error!==null||A.data===null||typeof window<"u"&&window.location.assign(A.data.url),A},magicLink:(u,g)=>r("/sign-in/magic-link",u,g,Zt),emailOtp:(u,g)=>(b(),a(r("/sign-in/email-otp",u,g,Wt))),passkey:(u,g)=>(b(),l.signIn(u,g))},signUp:{email:(u,g)=>(b(),a(r("/sign-up/email",u,g,Yt),A=>A.sessionCreated))},emailOtp:{sendVerificationOtp:(u,g)=>r("/email-otp/send-verification-otp",u,g,en),verifyEmail:(u,g)=>(b(),a(r("/email-otp/verify-email",u,g,sn)))},phoneOtp:{prepare:u=>r("/phone-otp/challenge",{},u,nn),start:(u,g)=>r("/phone-otp/start",{...u,idempotencyKey:u.idempotencyKey??Tt()},g,tn),verify:(u,g)=>(b(),a(r("/phone-otp/verify",u,g,on)))},requestPasswordReset:(u,g)=>r("/request-password-reset",u,g,Ke),resetPassword:(u,g)=>r("/reset-password",u,g,Ke),sendVerificationEmail:(u,g)=>r("/send-verification-email",u,g,rn),passkey:{addPasskey:(u,g)=>l.add(u,g),listUserPasskeys:()=>c.request("/passkey/list-user-passkeys",{decode:vn}),updatePasskey:async(u,g)=>{let A=me(u.name);if(!A.valid||A.value===void 0)return he();let w=A.value;return r("/passkey/update-passkey",{...u,name:w},g,I=>Cn(I,u.id,w))},deletePasskey:(u,g)=>r("/passkey/delete-passkey",u,g,zn)},twoFactor:{enable:(u,g)=>r("/two-factor/enable",u,g,un),disable:(u,g)=>a(r("/two-factor/disable",u,g,cn),A=>A.status),verifyTotp:(u,g)=>a(r("/two-factor/verify-totp",u,g,fe)),verifyBackupCode:(u,g)=>a(r("/two-factor/verify-backup-code",u,g,fe)),sendOtp:(u={},g)=>r("/two-factor/send-otp",u,g,dn),verifyOtp:(u,g)=>a(r("/two-factor/verify-otp",u,g,fe)),generateBackupCodes:(u,g)=>r("/two-factor/generate-backup-codes",u,g,ln)},signOut:u=>a(c.request("/sign-out",{method:"POST",body:{},fetchOptions:u,decode:an}).then(g=>(o.endSession(),g)),g=>g.success)}}function Qe(e,t=()=>{},n){let i=Qo(e,t,n);return n?{...i,signIn:{email:i.signIn.email,username:i.signIn.username,social:Jn(i),magicLink:i.signIn.magicLink,emailOtp:i.signIn.emailOtp,passkey:i.signIn.passkey},passkey:{listUserPasskeys:i.passkey.listUserPasskeys,updatePasskey:i.passkey.updatePasskey,deletePasskey:i.passkey.deletePasskey,addPasskey:i.passkey.addPasskey}}:{...i,signIn:{email:i.signIn.email,username:i.signIn.username,social:Jn(i),magicLink:i.signIn.magicLink,emailOtp:i.signIn.emailOtp},passkey:{listUserPasskeys:i.passkey.listUserPasskeys,updatePasskey:i.passkey.updatePasskey,deletePasskey:i.passkey.deletePasskey}}}function Jn(e){return async(t,n)=>{if(!t?.idToken||typeof t.idToken.token!="string"||t.idToken.token==="")return Zo();let i=await e.signIn.social({...t,disableRedirect:true},n);return i.data!==null&&"url"in i.data?er():i}}function Zo(){return Promise.resolve({data:null,error:{status:400,statusText:"BAD_REQUEST",code:"NATIVE_SOCIAL_ID_TOKEN_REQUIRED",message:"Native social sign-in requires a provider ID token."}})}function er(){return Promise.resolve({data:null,error:{status:502,statusText:"BAD_GATEWAY",code:"INVALID_NATIVE_SOCIAL_RESPONSE",message:"The server returned a redirect for native ID-token sign-in."}})}function tr(){return {signIn:()=>$n(),add:()=>$n()}}function $n(){return Promise.resolve({data:null,error:{status:400,statusText:"BAD_REQUEST",code:"PASSKEY_BROWSER_REQUIRED",message:"This passkey ceremony requires a browser with WebAuthn."}})}function nr(e,t,n){let i=new Map;return {async signIn(o={},s){let c=await e.request("/passkey/generate-authenticate-options");if(!c.data)return Yn(c.error);let d;try{d=In(c.data);}catch{return Gn()}let l;try{l=await n.authenticate({optionsJSON:d,useBrowserAutofill:o.autoFill});}catch(b){return Xn(n,b,"AUTH_CANCELLED","Passkey authentication was cancelled.")}if(!ir(l))return Wn();let{clientExtensionResults:y,...r}=l,a=i.get(l.id);if(a)return a;let f=(async()=>{let b=await e.request("/passkey/verify-authentication",{method:"POST",body:{response:r},fetchOptions:s,decode:xn});return b.data&&t(),b})();i.set(l.id,f);try{return await f}finally{i.get(l.id)===f&&i.delete(l.id);}},async add(o={},s){let c=me(o.name);if(!c.valid)return he();let d=await e.request("/passkey/generate-register-options",{query:{name:c.value,authenticatorAttachment:o.authenticatorAttachment}});if(!d.data)return Yn(d.error);let l;try{l=Pn(d.data);}catch{return Gn()}let y;try{y=await n.register({optionsJSON:l});}catch(b){return Xn(n,b,"REGISTRATION_CANCELLED","Passkey registration was cancelled.")}if(!or(y))return Wn();let{clientExtensionResults:r,...a}=y,f=await e.request("/passkey/verify-registration",{method:"POST",body:{response:a,name:c.value},fetchOptions:s,decode:b=>En(b,y.id,c.value)});return f.data&&t(),f}}}function Gn(){return {data:null,error:{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned invalid WebAuthn options."}}}function Wn(){return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:"INVALID_WEBAUTHN_RESPONSE",message:"The platform returned an invalid passkey response."}}}function Zn(e){if(!e||typeof e!="object")return  false;let t=e;return typeof t.id=="string"&&t.id.length>0&&typeof t.rawId=="string"&&t.rawId.length>0&&t.type==="public-key"&&!!t.response&&typeof t.response=="object"}function ir(e){if(!Zn(e))return  false;let t=e.response;return typeof t.clientDataJSON=="string"&&typeof t.authenticatorData=="string"&&typeof t.signature=="string"&&(t.userHandle===void 0||typeof t.userHandle=="string")}function or(e){if(!Zn(e))return  false;let t=e.response;return typeof t.clientDataJSON=="string"&&typeof t.attestationObject=="string"}function Yn(e){return {data:null,error:e??{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned no WebAuthn options."}}}function Xn(e,t,n,i){let o=sr(t,"page does not have focus"),s=e.errorCode?.(t),c=s!==void 0?s==="ERROR_CEREMONY_ABORTED":Qn(t)==="AbortError",d=n!=="AUTH_CANCELLED",l=rr(s,Qn(t),d);return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:o?"PASSKEY_PAGE_NOT_FOCUSED":c?n:s??"PASSKEY_BROWSER_ERROR",message:o?"Keep this page focused while completing the passkey prompt.":c?i:l}}}function rr(e,t,n){switch(e){case "ERROR_INVALID_DOMAIN":case "ERROR_INVALID_RP_ID":return "Passkeys are not set up for this site\u2019s domain.";case "ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED":return "This device already has a passkey for this account.";case "ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEY_ALGS":case "ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT":case "ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT":return "This device cannot create a passkey for this site.";}return t==="NotAllowedError"?n?"No passkey was created. The prompt was dismissed or timed out.":"No passkey was used. This device may not have one saved for this site yet, or the prompt was dismissed.":t==="SecurityError"?"Passkeys are not set up for this site\u2019s domain.":n?"Passkey registration did not complete.":"Passkey sign-in did not complete."}function Qn(e){return e&&typeof e=="object"&&"name"in e&&typeof e.name=="string"?e.name:void 0}function sr(e,t){let n=t.toLowerCase(),i=new Set,o=e;for(;o&&typeof o=="object"&&!i.has(o);){if(i.add(o),"message"in o&&typeof o.message=="string"&&o.message.toLowerCase().includes(n))return  true;o="cause"in o?o.cause:void 0;}return  false}async function ar(e){let n=`${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}/public-config`;return Ot(await de(e,n,{init:{method:"GET",credentials:"omit"},maxResponseBytes:256*1024,decode:i=>ur(i,e)}),"public-config")}function ur(e,t){let n=M(e),i=n.environmentId,o=n.environmentType,s=`${new URL(t.apiUrl).origin}/api/projects/${t.decoded.projectId}/auth`;if(typeof n.applicationId!="string"||!cr(n.applicationId)||i!==t.decoded.projectId||o!=="development"&&o!=="production"||n.authBaseUrl!==s)throw U();let c=C(n.branding),d=C(n.legal);if(!Ze(n.enabledMethods,64)||!Ze(n.socialProviders,64)||!ti(c,["appName","logoUrl","primaryColor"])||c.showAppName!==void 0&&typeof c.showAppName!="boolean"||c.alignment!==void 0&&c.alignment!=="left"&&c.alignment!=="center"&&c.alignment!=="right"||c.theme!==void 0&&c.theme!=="light"&&c.theme!=="dark"&&c.theme!=="system"||!ti(d,["termsUrl","privacyUrl"])||!Number.isSafeInteger(d.version)||d.version<0||typeof d.required!="boolean")throw U();if(n.socialProviderClientIds!==void 0){let l=C(n.socialProviderClientIds);if(Object.keys(l).length>64||Object.values(l).some(y=>typeof y!="string"||y.length>2048))throw U()}if(!H(n,["requireEmailVerification","twoFactor","mfaRequired","accountDeletion","organizations","sso","badge"])||!ei(n.turnstileSiteKey)||!ei(n.authTurnstileSiteKey)||typeof n.locale!="string"||n.locale.length===0||n.locale.length>64||!Number.isSafeInteger(n.configVersion)||n.configVersion<0)throw U();if(n.jwtIssuer!==null){let l=C(n.jwtIssuer);if(l.issuer!==s||l.jwksUrl!==`${s}/jwks`||l.aud!==t.decoded.projectId)throw U()}if(n.signUp!==void 0){let l=C(n.signUp).mode;if(typeof l!="string"||!["open","restricted","allowlist","waitlist"].includes(l))throw U()}if(n.authentication!==void 0&&dr(n.authentication),n.emailVerification!==void 0){let l=C(n.emailVerification);if(!H(l,["required"])||l.method!=="link"&&l.method!=="code")throw U()}if(n.userModel!==void 0&&!H(C(n.userModel),["requireEmail","firstLastName","emailChange","accountDeletion"]))throw U();if(n.mfa!==void 0){let l=C(n.mfa);if(!H(l,["totp","required","backupCodes"])||(l.required===true||l.backupCodes===true)&&l.totp!==true)throw U()}return n}function cr(e){return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(e)}function U(){return new TypeError("public-config returned an invalid response")}function C(e){if(!e||typeof e!="object"||Array.isArray(e))throw U();return e}function ei(e){return e===null||typeof e=="string"&&e.length<=4096}function dr(e){let t=C(e),n=C(t.email),i=C(t.password),o=i.minLength!==void 0||i.maxLength!==void 0;if(!H(n,["signUp"])||!Ze(n.signIn,3)||n.signIn.some(s=>s!=="password"&&s!=="magic_link"&&s!=="email_otp")||!H(C(t.phone),["signUp","signIn"])||!H(i,["signUp","add"])||o&&(!Number.isSafeInteger(i.minLength)||!Number.isSafeInteger(i.maxLength)||i.minLength<1||i.maxLength>4096||i.minLength>i.maxLength)||!H(C(t.passkey),["signIn","add"])||!lr(C(t.passkey).relyingPartyId)||!H(C(t.username),["collectOnSignUp","signIn"]))throw U()}function lr(e){return e==null||typeof e=="string"}function H(e,t){return t.every(n=>typeof e[n]=="boolean")}function ti(e,t){return t.every(n=>e[n]===void 0||typeof e[n]=="string"&&e[n].length<=4096)}function Ze(e,t){return Array.isArray(e)&&e.length<=t&&e.every(n=>typeof n=="string"&&n.length<=128)&&new Set(e).size===e.length}function pr(e){let t=e?.enabledMethods??["password"],n=t.includes("password"),i=t.includes("passkey"),o=e?.authentication,s=e?.mfa;return {emailSignUp:o?.email.signUp??t.some(c=>c==="password"||c==="magic_link"||c==="email_otp"),passwordSignUp:o?.password.signUp??n,phoneSignUp:o?.phone.signUp??t.includes("phone_otp"),passwordSignIn:o?.email.signIn.includes("password")??n,passwordMinLength:o?.password.minLength??8,passwordMaxLength:o?.password.maxLength??128,magicLinkSignIn:o?.email.signIn.includes("magic_link")??t.includes("magic_link"),emailOtpSignIn:o?.email.signIn.includes("email_otp")??t.includes("email_otp"),phoneSignIn:o?.phone.signIn??t.includes("phone_otp"),usernameSignIn:o?.username.signIn??false,collectUsername:o?.username.collectOnSignUp??false,passkeySignIn:o?.passkey.signIn??i,passkeyAdd:o?.passkey.add??i,firstLastName:e?.userModel?.firstLastName??false,emailChange:e===null?false:e.userModel?.emailChange??true,accountDeletion:e?.userModel?.accountDeletion??e?.accountDeletion??false,emailVerificationRequired:e?.emailVerification?.required??e?.requireEmailVerification??false,emailVerificationMethod:e?.emailVerification?.method??"link",totp:s?.totp??e?.twoFactor??false,mfaRequired:s?.required??e?.mfaRequired??false,backupCodes:s?.backupCodes??e?.twoFactor??false,legacyNameField:e?.authentication===void 0}}function fr(e,t){let n=`p_${e.toLowerCase().replace(/-/g,"")}`;return `${t?.secure?"__Secure-":""}${n}.session_token`}function vs(e,t){return Qe(Re(e),t)}
+exports.createMembershipHas=Qi;exports.createNativeAuthClient=Qe;exports.createNativeClient=vs;exports.createPasskeyClient=nr;exports.decodePublishableKey=ke;exports.getPublicConfig=ar;exports.resolveConfig=Re;exports.resolveProjectCapabilities=pr;exports.sessionCookieName=fr;

package/dist/native.d.cts

@@ -1,7 +1,7 @@
 import { R as ResolvedAuthConfig, A as AuthConfig } from './organization-membership-B05mzhtA.cjs';
 export { D as DecodedPublishableKey, H as HasParams, O as OrganizationMembership, c as createMembershipHas, d as decodePublishableKey, h as resolveConfig, s as sessionCookieName } from './organization-membership-B05mzhtA.cjs';
-import { k as AuthOwlClient, aL as SocialIdTokenOptions, bd as createAuthHttpClient, be as AuthHttpClient, al as PasskeySignInOptions, f as ActionFetchOptions, h as AuthActionResult, ak as PasskeyAuthData, g as AddPasskeyOptions, m as AuthPasskey } from './client-BebgV6Rp.cjs';
-export { i as AuthClientError, p as AuthSession, q as AuthUser, a4 as Organization, a5 as OrganizationClient, a6 as OrganizationDetails, as as ProjectCapabilities, at as PublicConfig, aE as SessionState, aF as SessionStore, aG as SetActiveOrganizationOptions, aK as SocialAuthData, bb as getPublicConfig, bc as resolveProjectCapabilities } from './client-BebgV6Rp.cjs';
+import { l as AuthOwlClient, aT as SocialIdTokenOptions, bm as createAuthHttpClient, bn as AuthHttpClient, ap as PasskeySignInOptions, f as ActionFetchOptions, i as AuthActionResult, ao as PasskeyAuthData, h as AddPasskeyOptions, n as AuthPasskey } from './client-CEqVpSLs.cjs';
+export { j as AuthClientError, q as AuthSession, r as AuthUser, a7 as Organization, a8 as OrganizationClient, a9 as OrganizationDetails, aw as ProjectCapabilities, ax as PublicConfig, aM as SessionState, aN as SessionStore, aO as SetActiveOrganizationOptions, aS as SocialAuthData, bk as getPublicConfig, bl as resolveProjectCapabilities } from './client-CEqVpSLs.cjs';
 import { startAuthentication, startRegistration } from '@simplewebauthn/browser';
 
 type AuthActionClient = Omit<AuthOwlClient, 'getToken' | 'getConsentStatus' | 'acceptConsent' | 'waitlist'>;

package/dist/native.d.ts

@@ -1,7 +1,7 @@
 import { R as ResolvedAuthConfig, A as AuthConfig } from './organization-membership-B05mzhtA.js';
 export { D as DecodedPublishableKey, H as HasParams, O as OrganizationMembership, c as createMembershipHas, d as decodePublishableKey, h as resolveConfig, s as sessionCookieName } from './organization-membership-B05mzhtA.js';
-import { k as AuthOwlClient, aL as SocialIdTokenOptions, bd as createAuthHttpClient, be as AuthHttpClient, al as PasskeySignInOptions, f as ActionFetchOptions, h as AuthActionResult, ak as PasskeyAuthData, g as AddPasskeyOptions, m as AuthPasskey } from './client-FwJ8dBsF.js';
-export { i as AuthClientError, p as AuthSession, q as AuthUser, a4 as Organization, a5 as OrganizationClient, a6 as OrganizationDetails, as as ProjectCapabilities, at as PublicConfig, aE as SessionState, aF as SessionStore, aG as SetActiveOrganizationOptions, aK as SocialAuthData, bb as getPublicConfig, bc as resolveProjectCapabilities } from './client-FwJ8dBsF.js';
+import { l as AuthOwlClient, aT as SocialIdTokenOptions, bm as createAuthHttpClient, bn as AuthHttpClient, ap as PasskeySignInOptions, f as ActionFetchOptions, i as AuthActionResult, ao as PasskeyAuthData, h as AddPasskeyOptions, n as AuthPasskey } from './client-BkPncYVH.js';
+export { j as AuthClientError, q as AuthSession, r as AuthUser, a7 as Organization, a8 as OrganizationClient, a9 as OrganizationDetails, aw as ProjectCapabilities, ax as PublicConfig, aM as SessionState, aN as SessionStore, aO as SetActiveOrganizationOptions, aS as SocialAuthData, bk as getPublicConfig, bl as resolveProjectCapabilities } from './client-BkPncYVH.js';
 import { startAuthentication, startRegistration } from '@simplewebauthn/browser';
 
 type AuthActionClient = Omit<AuthOwlClient, 'getToken' | 'getConsentStatus' | 'acceptConsent' | 'waitlist'>;

package/dist/native.js

@@ -1 +1 @@
-import {i}from'./chunk-QQA645UM.js';export{i as createNativeAuthClient,j as createPasskeyClient,k as getPublicConfig,a as resolveProjectCapabilities}from'./chunk-QQA645UM.js';import {n}from'./chunk-5REZDJ26.js';export{F as createMembershipHas,a as decodePublishableKey,n as resolveConfig,b as sessionCookieName}from'./chunk-5REZDJ26.js';import'./chunk-T5SH3ZZP.js';function u(i$1,o){return i(n(i$1),o)}export{u as createNativeClient};
+import {i}from'./chunk-55HRM7WA.js';export{i as createNativeAuthClient,j as createPasskeyClient,k as getPublicConfig,a as resolveProjectCapabilities}from'./chunk-55HRM7WA.js';import {n}from'./chunk-V3MSLXXB.js';export{F as createMembershipHas,a as decodePublishableKey,n as resolveConfig,b as sessionCookieName}from'./chunk-V3MSLXXB.js';import'./chunk-T5SH3ZZP.js';function u(i$1,o){return i(n(i$1),o)}export{u as createNativeClient};