@authowl/core 0.20.0 → 0.21.1

package/dist/native.cjs

@@ -1,2 +1,2 @@
-'use strict';var oi=Object.defineProperty;var et=(e,t,n)=>()=>{if(n)throw n[0];try{return e&&(t=e(e=0)),t}catch(i){throw n=[i],i}};var ri=(e,t)=>{for(var n in t)oi(e,n,{get:t[n],enumerable:true});};function ne(){return typeof window<"u"&&typeof document<"u"&&typeof crypto<"u"&&typeof crypto.subtle?.digest=="function"}var De=et(()=>{"use strict";});var Oe={};ri(Oe,{beginCrossSiteSignIn:()=>Qo,challengeFor:()=>Bn,completeCrossSiteSignIn:()=>Zo,takeHandoffCode:()=>Xe});function Vn(e){let t="";for(let n of e)t+=String.fromCharCode(n);return btoa(t).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}async function Bn(e){let t=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(e));return Vn(new Uint8Array(t))}function Wo(){return Vn(crypto.getRandomValues(new Uint8Array(Jo)))}function jn(e,t){let n=window.location.protocol==="https:"?"; Secure":"";document.cookie=`${Kn}=${e}; Path=/; Max-Age=${t}; SameSite=Lax${n}`;}function Yo(){for(let e of document.cookie.split(";")){let t=e.indexOf("=");if(!(t<0)&&e.slice(0,t).trim()===Kn)return e.slice(t+1).trim()||null}return null}function Xo(){jn("",0);}function qn(e){return new URL(e,window.location.href).toString()}async function Qo(e,t){let n=t.callbackURL?qn(t.callbackURL):null;if(n&&new URL(n).origin!==window.location.origin)return null;let i=Wo(),o=new URL(`${e.projectBaseURL}/session/start`);if(o.searchParams.set("pk",e.publishableKey),o.searchParams.set("kind",t.kind),t.kind==="social")o.searchParams.set("provider",t.provider),t.scopes?.length&&o.searchParams.set("scopes",t.scopes.join(",")),t.loginHint&&o.searchParams.set("loginHint",t.loginHint),t.requestSignUp!==void 0&&o.searchParams.set("requestSignUp",t.requestSignUp?"1":"0");else for(let d of Go){let l=t[d];l&&o.searchParams.set(d,l);}let s=`${window.location.origin}${window.location.pathname}${window.location.search}`;o.searchParams.set("cb",n??s);for(let[d,l]of [["err",t.errorCallbackURL],["new",t.newUserCallbackURL]])l&&o.searchParams.set(d,qn(l));return o.searchParams.set("challenge",await Bn(i)),jn(i,$o),o.toString()}function Xe(e){if(typeof window>"u")return null;let t=window.location.hash;if(!t.includes(Ye))return null;let n=new URLSearchParams(t.replace(/^#/,"")),i=n.get(Ye);if(!i||e!==void 0&&i!==e)return null;n.delete(Ye);let o=n.toString();return window.history.replaceState(window.history.state,"",`${window.location.pathname}${window.location.search}${o?`#${o}`:""}`),i}async function Zo(e,t,n){if(!ne())return  false;let i=n??Xe();if(!i)return  false;n&&Xe(n);let o=Yo();if(Xo(),!o)return  false;t.beginSession({remember:true});let{error:s}=await e.request("/session/exchange",{method:"POST",body:{code:i,verifier:o}});return s===null}var Kn,Ye,Jo,$o,Go,we=et(()=>{"use strict";De();Kn="authowl_handoff_verifier",Ye="authowl_code",Jo=32,$o=900,Go=["email","providerId","domain","organizationSlug"];});var si=/^(pk_(live|test))_([0-9a-f-]{36})_([A-Za-z0-9]{20,})$/i,ai=/^sk_/i;function ke(e){if(typeof e!="string"||e.length===0)throw new Error("publishableKey is required");if(ai.test(e))throw new Error("A secret key was passed where a publishable key was expected. Never embed secret keys in client code.");let t=si.exec(e);if(!t)throw new Error("publishableKey is malformed; expected pk_(live|test)_<uuid>_<base62>");return {prefix:t[1].toLowerCase(),env:t[2].toLowerCase(),projectId:t[3].toLowerCase()}}var tt=/^http:\/\/(?:(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*localhost|127\.0\.0\.1|\[::1\])(?::\d+)?(?:\/|$)/i;function Re(e,t){throw new Error(`${e}: ${t}`)}function nt(e,t){let n;try{n=new URL(String(e));}catch{throw new TypeError("Transport URL must be absolute.")}if(n.username||n.password||n.hash)throw new TypeError("Transport URL must not contain credentials or a fragment.");let i=n.toString();if(n.protocol!=="https:"&&!(n.protocol==="http:"&&t.allowHttpLoopback&&tt.test(i)))throw new TypeError("Transport URL must use HTTPS except on approved loopback.");return n}function it(e,t){(typeof e!="string"||!/^https?:\/\/[^/?#@\\\s]+\/?$/i.test(e))&&Re("apiUrl","origin required");let n;try{n=new URL(e);}catch{Re("apiUrl","origin required");}return n.protocol==="http:"&&(!t.allowHttpLoopback||!tt.test(e))&&Re("apiUrl","HTTPS required except exact loopback"),n.origin}function $(e,t){try{return e?.getItem(t)??null}catch{return null}}function G(e,t,n){try{n===null?e?.removeItem(t):e?.setItem(t,n);}catch{}}function W(){try{return globalThis.localStorage}catch{return}}function B(){try{return globalThis.sessionStorage}catch{return}}var ui="authowl.session-challenge",ci=e=>`${ui}.${e}`,di="set-auth-challenge",ot="x-authowl-challenge";var st="INVALID_TWO_FACTOR_COOKIE",li=2048,de=e=>e!==null&&e.length<=li,rt=/^[\x21\x23-\x2B\x2D-\x3A\x3C-\x5B\x5D-\x7E]+$/;function pi(e){let t=[];for(let n of e.split(";")){let i=n.trimStart(),o=i.indexOf("=");o<=0||t.push([i.slice(0,o).trimEnd(),i.slice(o+1)]);}return t}function at(e){let t=ci(e),n=new Map;function i(){return n.size===0?null:[...n].map(([l,u])=>`${l}=${u}`).join("; ")}function o(){let l=i();G(B(),t,de(l)?l:null);}function s(l){for(let[u,m]of pi(l))rt.test(u)&&(m===""?n.delete(u):rt.test(m)&&n.set(u,m));}let d=$(B(),t);return de(d)&&s(d),{presentOn(l){let u=i();l.delete(ot),de(u)&&l.set(ot,u);},observe(l){let u=l.get(di);de(u)&&(s(u),o());},clear(){n.clear(),o();}}}var ut="set-auth-token",ct="x-authowl-session-transport",dt="bearer";var fi="authowl.session-token",gi="authowl.cookie-transport",pt="ok",ft="bearer",mi=e=>`${fi}.${e}`,hi=e=>`${gi}.${e}`;function yi(e){return e===pt?"cookies":e===ft?"bearer":"unknown"}function Ai(e){return e==="cookies"?pt:e==="bearer"?ft:null}function bi(e){let t=mi(e),n=hi(e),i=at(e),o=null,s=false,d=null,l=yi($(W(),n)),u=()=>l==="unknown",m=0,r=null,a=false;function f(){let y=$(B(),t);if(y!==null)return s=true,y;let w=$(W(),t);return w!==null?(s=false,w):null}o=f(),o!==null&&u()&&(a=true);function b(){if(!(!a||!r)){a=false;try{r();}catch{}}}function c(){let y=l==="bearer"?o:null,[w,U]=s?[B(),W()]:[W(),B()];G(U,t,null),G(w,t,y);}function g(y){y!==null&&d!==null&&(s=d,d=null),o=y,c(),y!==null&&u()&&(a=true,b());}function A(y){l=y,G(W(),n,Ai(y));}function O(){A("unknown"),a=false;}function R(){return o===null&&(o=f()),o}function q(){let y=f();return y!==null&&(o=y),o}function K(y){q()===y&&c();}function V(){m+=1,d=null,s=false,g(null),i.clear(),O();}let J=()=>l!=="cookies";return {hasToken:()=>R()!==null,declareOn(y){if(y.has("authorization"))return  false;let w=R();return !w&&!J()?false:(w&&y.set("authorization",`Bearer ${w}`),y.set(ct,dt),i.presentOn(y),true)},wantsToken:J,needsProbe:u,observe(y){let w=y.get(ut);w&&g(w),i.observe(y);},dropChallenge:i.clear,measureWith(y){r=y,b();},beginRead(){let y=R(),w=m;return {carriedToken:y!==null,endIfDead(){y!==null&&q()===y&&m===w&&V();},recordCookieVerdict(U){if(m===w&&u()){if(A(U?"cookies":"bearer"),U){g(null);return}K(y);}}}},beginSession({remember:y}){m+=1,d=!y,i.clear(),O();},endSession:V}}var lt=new Map;function gt(e){let t=lt.get(e);if(t)return t;let n=bi(e);return lt.set(e,n),n}function Oi(e,t){return t?.headers?new Headers(t.headers):typeof e=="object"&&e!==null&&"headers"in e?new Headers(e.headers):new Headers}function mt(e,t){let n=gt(e),i=(d,l)=>(t??globalThis.fetch)(d,l);return {fetch:async(d,l)=>{if(l?.credentials==="omit"||!n.wantsToken())return i(d,l);let u=Oi(d,l),m=n.declareOn(u),r=await i(d,{...l,headers:u});return m&&n.observe(r.headers),r},probe:i,tokens:n}}function wi(e){if(!e||typeof e!="object")throw new Error("AuthConfig is required");let t=ke(e.publishableKey),n=it(e.apiUrl,{allowHttpLoopback:t.env==="test"});return {publishableKey:e.publishableKey,apiUrl:n,decoded:t,projectBaseURL:`${n}/api/projects/${t.projectId}/auth`}}function Se(e){let t=wi(e),{fetch:n,...i}=mt(t.decoded.projectId,e.fetch);return {...e,...t,fetch:n,session:i}}var ki=1e4,Ri=1024*1024,x=class extends Error{kind;requestId;constructor(t,n){super(Ci(t)),this.name="TransportError",this.kind=t,this.requestId=n;}},At=new WeakSet;function C(e,t){let n=new x(e,t);return At.add(n),n}async function bt({fetchImpl:e,url:t,init:n={},timeoutMs:i=ki,maxResponseBytes:o=Ri,allowHttpLoopback:s=false,decode:d}){yt(i,"timeoutMs"),yt(o,"maxResponseBytes");let l=nt(t,{allowHttpLoopback:s}),u=n.signal,m=new AbortController,r=null,a,f=new Promise(A=>{a=A;}),b=A=>{r===null&&(r=A,a({type:"abort",kind:A}),m.abort());},c=()=>b("aborted");u?.addEventListener("abort",c,{once:true});let g=setTimeout(()=>b("timeout"),i);u?.aborted&&c();try{if(r!==null)throw C(r);let A;try{A=await Promise.race([e(l.toString(),{...n,redirect:"error",signal:m.signal}).then(J=>({type:"response",response:J})),f]);}catch{throw C(r??"network")}if(A.type==="abort")throw C(A.kind);if(!Si(A.response))throw C("invalid_response");let O=A.response,R=Ei(O.headers),q=await Ti(O,o,f,()=>r,R),K=vi(O,q,R),V;try{V=O.ok&&d?d(K,Object.freeze({status:O.status})):K;}catch{throw C("invalid_response",R)}return {response:O,data:V,...R===void 0?{}:{requestId:R}}}catch(A){throw A instanceof x&&At.has(A)?A:C(r??"network")}finally{clearTimeout(g),u?.removeEventListener("abort",c);}}function Si(e){if(!e||typeof e!="object")return  false;let t=e;return Number.isInteger(t.status)&&t.status>=0&&t.status<=599&&typeof t.statusText=="string"&&typeof t.ok=="boolean"&&typeof t.headers?.get=="function"&&(t.body===null||typeof t.body=="object"&&typeof t.body?.getReader=="function"&&typeof t.body.cancel=="function")}async function Ti(e,t,n,i,o){let s=e.headers.get("content-length");if(s!==null){if(!/^\d+$/.test(s))throw ht(e.body),C("invalid_response",o);if(Number(s)>t)throw ht(e.body),C("response_too_large",o)}if(!e.body)return "";let d;try{d=e.body.getReader();}catch{throw C("network",o)}let l=[],u=0,m=null;try{for(;;){let f;try{f=await Promise.race([d.read(),n]);}catch{m=C(i()??"network",o);break}if(Ii(f)){m=C(f.kind,o);break}let{done:b,value:c}=f;if(b)break;if(c.byteLength!==0){if(u+=c.byteLength,u>t){m=C("response_too_large",o);break}l.push(c);}}}finally{m&&Pi(d);try{d.releaseLock();}catch{}}if(m)throw m;let r=new Uint8Array(u),a=0;for(let f of l)r.set(f,a),a+=f.byteLength;try{return new TextDecoder("utf-8",{fatal:!0}).decode(r)}catch{throw C("invalid_response",o)}}function Ii(e){return "type"in e&&e.type==="abort"}function ht(e){if(e)try{e.cancel().catch(()=>{});}catch{}}function Pi(e){try{e.cancel().catch(()=>{});}catch{}}function vi(e,t,n){if(e.status===204||e.status===205)return null;let i=xi(e.headers.get("content-type"));if(!e.ok&&(!i||t.length===0))return null;if(!i||t.length===0)throw C("invalid_response",n);try{return JSON.parse(t)}catch{if(!e.ok)return null;throw C("invalid_response",n)}}function xi(e){if(e===null)return  false;let t=e.split(";",1)[0]?.trim().toLowerCase();return t==="application/json"||t?.endsWith("+json")===true}function Ei(e){let t=e.get("x-request-id")?.trim();if(!(!t||t.length>256||!/^[A-Za-z0-9._:-]+$/.test(t)))return t}function yt(e,t){if(!Number.isInteger(e)||e<=0)throw new TypeError(`${t} must be a positive integer.`)}function Ci(e){switch(e){case "aborted":return "The request was cancelled.";case "timeout":return "The request timed out.";case "response_too_large":return "The response exceeded the allowed size.";case "invalid_response":return "The service returned an invalid response.";case "network":return "The network request could not be completed."}}var Te=class extends Error{status;requestId;constructor(t,n,i){super(`${t} request failed with status ${n.status}.`),this.name="AuthOwlHttpError",this.status=n.status,this.requestId=i;}};function le(e,t,n={}){let i=new Headers(n.init?.headers);return i.set("x-publishable-key",e.publishableKey),bt({fetchImpl:e.fetch,url:t,init:{...n.init,headers:i},allowHttpLoopback:e.decoded.env==="test",...n.timeoutMs===void 0?{}:{timeoutMs:n.timeoutMs},...n.maxResponseBytes===void 0?{}:{maxResponseBytes:n.maxResponseBytes},...n.decode===void 0?{}:{decode:n.decode}})}function Ot(e,t){if(!e.response.ok)throw new Te(t,e.response,e.requestId);return e.data}var zi=new Map;function wt(e){return typeof window>"u"?null:zi.get(e)?.at(-1)?.locale??null}var Di="x-authowl-turnstile-token",_i="x-authowl-locale",Ui=1e4,Ni=32,Li=2e4;function Y(e,t){return {post:(n,i,o,s)=>e.request(n,{method:"POST",body:i,fetchOptions:o,decode:s}),mutation:async(n,i)=>{let o=await n;return o.error===null&&(i===void 0||o.data!==null&&i(o.data))&&t(),o}}}function xe(e,t=e.projectBaseURL){return {async request(n,i={}){let o=Fi(t,n,i.query),s=i.method??(i.body===void 0?"GET":"POST"),d=new Headers(i.fetchOptions?.headers);i.fetchOptions?.authChallengeToken&&d.set(Di,i.fetchOptions.authChallengeToken);let l=wt(e.decoded.projectId);l&&d.set(_i,l),i.body!==void 0&&d.set("content-type","application/json");let u={method:s,headers:d,credentials:i.credentials??"include",...i.body===void 0?{}:{body:JSON.stringify(i.body)}},m=Object.freeze({method:s,path:n});await i.fetchOptions?.onRequest?.(m);let r=Hi(s,i.fetchOptions),a;try{a=await Mi(e,o,{...u,signal:i.fetchOptions?.signal},r);}catch(O){let R=Rt(O);return await i.fetchOptions?.onError?.(Ie(m,R,Vi(O))),{data:null,error:R}}let{response:f,requestId:b}=a,c=Ji(n,a.data),g=c;if(f.ok)try{g=ve(c),i.decode&&(g=i.decode(g));}catch{let O=Rt(new x("invalid_response",b));return await i.fetchOptions?.onError?.(Ie(m,O,"invalid_response")),{data:null,error:O}}let A=Object.freeze({...m,status:f.status,...b===void 0?{}:{requestId:b}});if(await i.fetchOptions?.onResponse?.(A),!f.ok){let O=qi(f,c,b);return O.code===st&&e.session.tokens.dropChallenge(),await i.fetchOptions?.onError?.(Ie(m,O,"api")),{data:null,error:O}}return await i.fetchOptions?.onSuccess?.(A),{data:g,error:null}}}}async function Mi(e,t,n,i){let o=Date.now()+Ui;for(let s=0;s<i;s+=1){let d=o-Date.now();if(d<=0)throw new x("timeout");try{let l=await le(e,t,{init:n,timeoutMs:Math.max(1,Math.ceil(d))});if(l.response.status<500||s===i-1)return l}catch(l){if(s===i-1||!(l instanceof x)||l.kind!=="network")throw l}await Bi(50*2**s,n.signal,o);}throw new x("network")}function Hi(e,t){if(e!=="GET"||t?.authChallengeToken)return 1;let n=t?.retry;return typeof n!="number"||!Number.isFinite(n)?1:Math.min(Math.max(Math.trunc(n),0),3)+1}function Fi(e,t,n){let i=new URL(`${e}${t.startsWith("/")?t:`/${t}`}`);for(let[o,s]of Object.entries(n??{}))s!==void 0&&i.searchParams.set(o,String(s));return i.toString()}function qi(e,t,n){let i=te(t)?t:{},o=Ki(i,e.headers);return {status:e.status,statusText:e.statusText,code:typeof i.code=="string"?i.code:void 0,...n===void 0?{}:{requestId:n},...typeof i.current_version=="number"?{currentVersion:i.current_version}:{},...o!==void 0?{retryAfterSeconds:o}:{},message:typeof i.message=="string"?i.message:typeof i.error=="string"?i.error:typeof i.detail=="string"?i.detail:e.statusText||"Request failed"}}function Ki(e,t){let n=(typeof e.retryAfterSeconds=="number"&&Number.isFinite(e.retryAfterSeconds)?e.retryAfterSeconds:void 0)??kt(t.get("retry-after"))??kt(t.get("x-retry-after"));if(n!==void 0)return Math.min(Math.max(Math.trunc(n),1),86400)}function kt(e){if(!e)return;let t=e.trim();if(!/^\d+$/.test(t))return;let n=Number(t);return Number.isFinite(n)?n:void 0}function Rt(e){let t=e instanceof x?e.kind:"network";return {status:0,...{aborted:{statusText:"ABORTED",code:"REQUEST_ABORTED",message:"The request was cancelled."},timeout:{statusText:"TIMEOUT",code:"REQUEST_TIMEOUT",message:"The request timed out."},response_too_large:{statusText:"INVALID_RESPONSE",code:"RESPONSE_TOO_LARGE",message:"The service response was too large."},invalid_response:{statusText:"INVALID_RESPONSE",code:"INVALID_RESPONSE",message:"The service returned an invalid response."},network:{statusText:"FETCH_ERROR",code:"FETCH_ERROR",message:"Network request failed."}}[t],...e instanceof x&&e.requestId?{requestId:e.requestId}:{}}}function Ie(e,t,n){return Object.freeze({...e,status:t.status??0,...t.requestId===void 0?{}:{requestId:t.requestId},failure:n})}function Vi(e){return e instanceof x?e.kind:"network"}function Bi(e,t,n){return new Promise((i,o)=>{if(t?.aborted){o(new x("aborted"));return}let s=n-Date.now();if(s<=0){o(new x("timeout"));return}let d=Math.min(e,s),l=()=>{clearTimeout(u),o(new x("aborted"));},u=setTimeout(()=>{t?.removeEventListener("abort",l),Date.now()>=n?o(new x("timeout")):i();},d);t?.addEventListener("abort",l,{once:true}),t?.aborted&&l();})}function ve(e,t="",n=0,i={nodes:0}){if(i.nodes+=1,n>Ni||i.nodes>Li)throw new Error("response traversal limit exceeded");if(typeof e=="string"&&/^(?:createdAt|updatedAt|expiresAt)$/.test(t)){let o=new Date(e);return Number.isNaN(o.getTime())?e:o}return Array.isArray(e)?e.map(o=>ve(o,"",n+1,i)):te(e)?Object.fromEntries(Object.entries(e).map(([o,s])=>[o,ji(o)?s:ve(s,o,n+1,i)])):e}function ji(e){return e==="metadata"||e==="public_metadata"||e==="unsafe_metadata"||e==="private_metadata"||e==="publicMetadata"||e==="unsafeMetadata"||e==="privateMetadata"}function Ji(e,t){if(e==="/list-sessions"&&Array.isArray(t))return t.map(o=>te(o)?Pe(o):o);if(!te(t))return t;let i=e==="/change-password"||e==="/passkey/verify-authentication"||e==="/phone-otp/verify"||e==="/sign-up/email"||e.startsWith("/sign-in/")||e.startsWith("/two-factor/verify-")?Pe(t):t;return e==="/sign-up/email"&&!("sessionCreated"in i)&&(i={...i,sessionCreated:typeof t.token=="string"&&t.token.length>0}),(e==="/get-session"||e==="/passkey/verify-authentication")&&te(i.session)&&(i={...i,session:Pe(i.session)}),i}function Pe(e){if(!Object.hasOwn(e,"token"))return e;let t={...e};return delete t.token,t}function te(e){return !!e&&typeof e=="object"&&!Array.isArray(e)}var $i=new Set(["__proto__","constructor","prototype"]);function h(e){(!e||typeof e!="object"||Array.isArray(e))&&p();let t=Object.getPrototypeOf(e);return t!==Object.prototype&&t!==null&&p(),e}function k(e){return typeof e!="string"&&p(),e}function I(e){return typeof e!="boolean"&&p(),e}function T(e){return (!(e instanceof Date)||Number.isNaN(e.getTime()))&&p(),e}function j(e){return (!Array.isArray(e)||!e.every(t=>typeof t=="string"))&&p(),[...e]}function P(e,t){let n=e[t];return n==null||typeof n=="string"?n:p()}function St(e,t){let n=e[t];return n==null||typeof n=="boolean"?n:p()}function _(e){let t=h(e),n=t.email;return n!==null&&typeof n!="string"&&p(),{id:k(t.id),email:n,emailVerified:I(t.emailVerified),createdAt:T(t.createdAt),updatedAt:T(t.updatedAt),...D("phoneNumber",P(t,"phoneNumber")),...D("username",P(t,"username")),...D("displayUsername",P(t,"displayUsername")),...D("firstName",P(t,"firstName")),...D("lastName",P(t,"lastName")),...D("name",P(t,"name")),...D("image",P(t,"image")),...D("twoFactorEnabled",St(t,"twoFactorEnabled"))}}function pe(e){let t=h(e),n=t.membership;return {id:k(t.id),userId:k(t.userId),expiresAt:T(t.expiresAt),...D("activeOrganizationId",P(t,"activeOrganizationId")),...D("activeTeamId",P(t,"activeTeamId")),...D("membership",n==null?n:Gi(n)),...D("pendingMfaEnrollment",St(t,"pendingMfaEnrollment"))}}function p(){throw new TypeError("AuthOwl response does not match its runtime contract.")}function L(e,t=20,n=1e4){return (!e||typeof e!="object"||Array.isArray(e))&&p(),Ce(e,t,n)}function Ce(e,t=20,n=1e4){return Ee(e,0,{nodes:0},t,n)}function Gi(e){let t=h(e);return {role:k(t.role),...t.roles===void 0?{}:{roles:j(t.roles)},permissions:j(t.permissions),...t.teams===void 0?{}:{teams:j(t.teams)}}}function Ee(e,t,n,i,o){if(n.nodes+=1,(t>i||n.nodes>o)&&p(),e===null||typeof e=="string"||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||p(),e;if(Array.isArray(e))return e.map(l=>Ee(l,t+1,n,i,o));(!e||typeof e!="object")&&p();let s=Object.getPrototypeOf(e);s!==Object.prototype&&s!==null&&p();let d={};for(let[l,u]of Object.entries(e))$i.has(l)&&p(),d[l]=Ee(u,t+1,n,i,o);return d}function D(e,t){return t===void 0?{}:{[e]:t}}function Tt({http:e,probe:t,tokens:n,channelName:i}){let o=new Set,s=null,d=null,l=null,u=null,m=null,r=null,a,f=y=>{g(y);};a={data:null,isPending:true,isRefetching:false,error:null,refetch:f};function b(y){a=y;for(let w of o)w();}async function c(y){return e.request("/get-session",{query:y?.query,decode:ze})}function g(y){if(y?.query?.disableCookieCache===true)return O(y);if(u)return u;if(m)return m;let w=O(y).finally(()=>{m===w&&(m=null);});return m=w,w}function A(){if(u)return u;let y=O({query:{disableCookieCache:true}}).finally(()=>{u===y&&(u=null);});return u=y,y}async function O(y){l?.abort();let w=new AbortController;l=w,b({...a,isPending:a.data===null&&a.error===null,isRefetching:a.data!==null});let U=n.beginRead(),ce=await e.request("/get-session",{query:y?.query,fetchOptions:{signal:w.signal},decode:ze});if(l===w&&(l=null,b({data:ce.data,error:ce.error,isPending:false,isRefetching:false,refetch:f}),ce.error===null)){if(ce.data===null){U.endIfDead();return}await R(U);}}async function R(y){if(n.needsProbe()){if(!y.carriedToken){y.recordCookieVerdict(true);return}return r||q(y)}}function q(y){let w=t.request("/get-session",{query:{disableCookieCache:true},decode:ze}).then(U=>{r===w&&U.error===null&&y.recordCookieVerdict(U.data!==null);}).finally(()=>{r===w&&(r=null);});return r=w,w}function K(){s?.postMessage({type:"session-changed"});}function V(){if(typeof window>"u"||d)return;let y=()=>{g();},w=()=>{document.visibilityState==="visible"&&g();};window.addEventListener("focus",y),document.addEventListener("visibilitychange",w),typeof BroadcastChannel<"u"&&(s=new BroadcastChannel(i),s.addEventListener("message",y)),d=()=>{window.removeEventListener("focus",y),document.removeEventListener("visibilitychange",w),s?.close(),s=null,d=null;};}function J(y){return o.add(y),o.size===1&&(V(),g()),()=>{if(o.delete(y),o.size===0){let w=l;l=null,m=null,u=null,w?.abort(),d?.();}}}return n.measureWith(()=>{n.needsProbe()&&q(n.beginRead());}),{store:{subscribe:J,getSnapshot:()=>a,refresh:A},getSession:c,notifyMutation(){K(),r&&r.catch(()=>{}).then(()=>{!n.needsProbe()&&n.hasToken()&&K();}),o.size>0&&g({query:{disableCookieCache:true}});}}}function ze(e){if(e===null)return null;let t=h(e);return (t.session===void 0||t.user===void 0)&&p(),{session:pe(t.session),user:_(t.user)}}De();function It(){let e=globalThis.crypto.getRandomValues(new Uint8Array(16));e[6]=e[6]&15|64,e[8]=e[8]&63|128;let t=Array.from(e,n=>n.toString(16).padStart(2,"0")).join("");return `${t.slice(0,8)}-${t.slice(8,12)}-${t.slice(12,16)}-${t.slice(16,20)}-${t.slice(20)}`}async function Pt(e,t){return e.request("/user/metadata",{fetchOptions:t,decode:xt})}async function vt(e,t,n){return e.request("/user/metadata",{method:"PATCH",body:{expected_version:t.expectedVersion,unsafe_metadata:t.unsafeMetadata},fetchOptions:n,decode:xt})}function xt(e){let t=h(e),n=L(t.public_metadata),i=L(t.unsafe_metadata);if(!Number.isSafeInteger(t.metadata_version)||t.metadata_version<0)throw new TypeError("Invalid AuthOwl metadata response");return {publicMetadata:n,unsafeMetadata:i,metadataVersion:t.metadata_version}}function Ct(e,t){let{post:n,mutation:i}=Y(e,t);return {getMetadata:o=>Pt(e,o),updateUnsafeMetadata:(o,s)=>vt(e,o,s),updateProfile:(o,s)=>i(n("/update-user",o,s,ie)),changeEmail:(o,s)=>i(n("/change-email",o,s,ie)),changePassword:(o,s)=>i(n("/change-password",o,s,Wi)),listSessions:o=>e.request("/list-sessions",{fetchOptions:o,decode:Yi}),revokeSession:({sessionId:o},s)=>i(n("/revoke-session",{sessionId:o},s,ie)),revokeOtherSessions:o=>i(n("/revoke-other-sessions",{},o,ie)),listSocialAccounts:async o=>{let s=await e.request("/list-accounts",{fetchOptions:o,decode:Xi});if(!s.data)return {data:null,error:s.error};let d=s.data.length>1;return {...s,data:s.data.filter(l=>l.providerId!=="credential").map(l=>({...l,canUnlink:d}))}},linkSocial:(o,s)=>n("/link-social",o,s,Qi),unlinkSocial:(o,s)=>i(n("/unlink-account",o,s,ie)),delete:(o={},s)=>i(n("/delete-user",o,s,Zi))}}function ie(e){let t=h(e);return {status:I(t.status)}}function Wi(e){let t=h(e);return {user:_(t.user)}}function Yi(e){return Array.isArray(e)||p(),e.map(t=>{let n=h(t);return {id:k(n.id),userId:k(n.userId),createdAt:T(n.createdAt),updatedAt:T(n.updatedAt),expiresAt:T(n.expiresAt),...Et("ipAddress",P(n,"ipAddress")),...Et("userAgent",P(n,"userAgent"))}})}function Xi(e){return Array.isArray(e)||p(),e.map(t=>{let n=h(t);return {id:k(n.id),userId:k(n.userId),providerId:k(n.providerId),accountId:k(n.accountId),scopes:j(n.scopes),createdAt:T(n.createdAt),updatedAt:T(n.updatedAt)}})}function Qi(e){let t=h(e);return {url:k(t.url),redirect:I(t.redirect)}}function Zi(e){let t=h(e);return {success:I(t.success),message:k(t.message)}}function Et(e,t){return t===void 0?{}:{[e]:t}}function _e(e,t){return !e||!t?false:e.permissions.includes(t)}function eo(e,t){return !e||!t?false:e.teams?.includes(t)??false}function to(e,t){return e?e.roles===void 0?e.role===t:e.roles.includes(t):false}function Ue(e,t){if(!e)return  false;let{role:n,permission:i,teamId:o}=t;return !(n===void 0&&i===void 0&&o===void 0||n!==void 0&&!to(e,n)||i!==void 0&&!e.permissions.includes(i)||o!==void 0&&!eo(e,o))}function no(e){return {has:t=>Ue(e,t),hasPermission:t=>_e(e,t.permission)}}var io=new Set(["pending","accepted","rejected","canceled"]),Ne=1e4;function zt(e){let t=h(e);return t.recipientHint!==null&&t.recipientHint!=="new_user"&&p(),{recipientHint:t.recipientHint}}function X(e,t,n){let i=h(e),o={id:S(i.id),name:S(i.name),slug:S(i.slug),createdAt:T(i.createdAt),...oe("logo",P(i,"logo")),...oe("metadata",i.metadata===void 0?void 0:Ce(i.metadata))};return N(o.id,t),N(o.slug,n),o}function Dt(e){return M(e,X)}function Le(e,t,n){return e===null?null:(t===null&&p(),X(e,t,n))}function _t(e,t,n){if(e===null)return null;let i=h(e),o=X(i,t,n);return {...o,members:M(i.members,s=>Jt(s,o.id)),invitations:M(i.invitations,s=>H(s,void 0,o.id))}}function Me(e,t,n=false){let i=M(e,o=>re(o));return n||ae(i.map(o=>o.organizationId),t),i}function Ut(e,t){let n=M(e,i=>He(i));return ae(n.map(i=>i.teamId),t),n}function He(e,t,n){let i=h(e),o={id:S(i.id),teamId:S(i.teamId),userId:S(i.userId),createdAt:T(i.createdAt)};return N(o.teamId,t),N(o.userId,n),o}function Nt(e,t,n){return e===null?null:(t===null&&p(),re(e,t,n))}function Lt(e,t){let n=h(e);return (!Number.isSafeInteger(n.total)||n.total<0)&&p(),{members:oo(n.members,t),total:n.total}}function H(e,t,n){let i=h(e),o=S(i.status);io.has(o)||p();let s={id:S(i.id),organizationId:S(i.organizationId),email:se(i.email),role:S(i.role),status:o,inviterId:S(i.inviterId),expiresAt:T(i.expiresAt),createdAt:T(i.createdAt)};return N(s.id,t),N(s.organizationId,n),s}function Mt(e,t){let n=M(e,i=>H(i));return ae(n.map(i=>i.organizationId),t),n}function Ht(e){return M(e,t=>{let n=h(t);return {...H(n),organizationName:se(n.organizationName)}})}function Ft(e,t){let n=h(e);return {...H(n,t),organizationName:S(n.organizationName),organizationSlug:S(n.organizationSlug),inviterEmail:$t(n.inviterEmail)}}function qt(e,t){let n=h(e),i=H(n.invitation,t);return {invitation:i,member:Q(n.member,void 0,i.organizationId)}}function Kt(e,t){let n=h(e);return n.member!==null&&p(),{invitation:n.invitation===null?null:H(n.invitation,t),member:null}}function Vt(e,t){return e===null?null:H(e,t)}function Bt(e,t,n){let i=h(e);return {member:Q(i.member,n,t)}}function Q(e,t,n){let i=h(e),o={id:S(i.id),organizationId:S(i.organizationId),userId:S(i.userId),role:S(i.role),createdAt:T(i.createdAt),...i.user===void 0?{}:{user:Gt(i.user)}};return N(o.id,t),N(o.organizationId,n),o}function jt(e,t){let n=M(e,i=>{let o=h(i);return {organizationId:S(o.organizationId),data:{role:S(o.role),...oe("permission",o.permission===void 0?void 0:ro(o.permission)),...oe("customPermissionKeys",o.customPermissionKeys===void 0?void 0:j(o.customPermissionKeys))}}});return ae(n.map(i=>i.organizationId),t),n.map(i=>i.data)}function re(e,t,n){let i=h(e),o=i.updatedAt,s={id:S(i.id),name:se(i.name),organizationId:S(i.organizationId),createdAt:T(i.createdAt),...o===void 0?{}:{updatedAt:T(o)}};return N(s.id,t),N(s.organizationId,n),s}function Fe(e){let t=h(e);return {message:se(t.message)}}function Jt(e,t){let n=h(e);return {...Q(n,void 0,t),user:Gt(n.user)}}function oo(e,t){let n=M(e,i=>Jt(i));return ae(n.map(i=>i.organizationId),t),n}function ro(e){let t=h(e),n={};for(let[i,o]of Object.entries(t))(i==="__proto__"||i==="constructor"||i==="prototype"||i.length===0||i.length>Ne||!Array.isArray(o))&&p(),n[i]=o.map(s=>S(s));return n}function S(e){let t=k(e);return (t.length===0||t.length>Ne)&&p(),t}function se(e){if(e==null)return "";let t=k(e);return t.length>Ne&&p(),t}function $t(e){return e===null?null:S(e)}function N(e,t){t!==void 0&&e!==t&&p();}function ae(e,t){let n=t??e[0];n!==void 0&&e.some(i=>i!==n)&&p();}function Gt(e){let t=h(e);return {id:S(t.id),name:se(t.name),email:$t(t.email),...oe("image",P(t,"image"))}}function M(e,t){return Array.isArray(e)||p(),e.map(n=>t(n))}function oe(e,t){return t===void 0?{}:{[e]:t}}function Wt(e,t,n=()=>null){let{post:i,mutation:o}=Y(e,t),s=new Set,d=()=>{for(let r of s)try{r();}catch{}},l=new Map,u=(r,a,f,b)=>{if(f)return e.request(r,{query:a,fetchOptions:f,decode:b});let c=`${r}\0${JSON.stringify(a??null)}`,g=l.get(c);if(g)return g;let A=e.request(r,{query:a,decode:b}).finally(()=>{l.delete(c);});return l.set(c,A),A},m=async r=>{let a=await o(r).finally(()=>l.clear());return a.error===null&&d(),a};return {subscribe(r){return s.add(r),()=>s.delete(r)},create:(r,a)=>m(i("/organization/create",r,a,X)),list:r=>u("/organization/list",void 0,r,Dt),get:(r={},a)=>u("/organization/get-full-organization",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,membersLimit:r.membersLimit},a,f=>_t(f,r.organizationId,r.organizationSlug)),setActive:(r,a)=>m(i("/organization/set-active",r,a,f=>Le(f,r.organizationId,r.organizationSlug))),createTeam:(r,a)=>m(i("/organization/create-team",r,a,f=>re(f,void 0,r.organizationId))),listTeams:(r={},a)=>u("/organization/list-teams",{organizationId:r.organizationId},a,f=>Me(f,r.organizationId)),updateTeam:(r,a)=>m(i("/organization/update-team",r,a,f=>re(f,r.teamId,r.data.organizationId))),removeTeam:(r,a)=>m(i("/organization/remove-team",r,a,Fe)),listUserTeams:r=>u("/organization/list-user-teams",void 0,r,a=>Me(a,void 0,true)),listTeamMembers:(r={},a)=>u("/organization/list-team-members",{teamId:r.teamId},a,f=>Ut(f,r.teamId)),addTeamMember:(r,a)=>m(i("/organization/add-team-member",r,a,f=>He(f,r.teamId,r.userId))),removeTeamMember:(r,a)=>m(i("/organization/remove-team-member",r,a,Fe)),setActiveTeam:(r,a)=>m(i("/organization/set-active-team",r,a,f=>Nt(f,r.teamId))),update:(r,a)=>m(i("/organization/update",r,a,f=>Le(f,r.organizationId))),delete:(r,a)=>m(i("/organization/delete",r,a,f=>X(f,r.organizationId))),listMembers:(r={},a)=>u("/organization/list-members",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,limit:r.limit,offset:r.offset,sortBy:r.sortBy,sortDirection:r.sortDirection,filterField:r.filterField,filterValue:r.filterValue,filterOperator:r.filterOperator},a,f=>Lt(f,r.organizationId)),inviteMember:(r,a)=>m(i("/organization/invite-member",r,a,f=>H(f,void 0,r.organizationId))),listInvitations:(r={},a)=>u("/organization/list-invitations",{organizationId:r.organizationId},a,f=>Mt(f,r.organizationId)),listUserInvitations:r=>u("/organization/list-user-invitations",void 0,r,Ht),getInvitation:(r,a)=>u("/organization/get-invitation",{id:r.id},a,f=>Ft(f,r.id)),getInvitationRecipientHint:(r,a)=>u("/organization/invitation-recipient-hint",{invitationId:r.invitationId},a,zt),acceptInvitation:(r,a)=>m(i("/organization/accept-invitation",r,a,f=>qt(f,r.invitationId))),rejectInvitation:(r,a)=>m(i("/organization/reject-invitation",r,a,f=>Kt(f,r.invitationId))),cancelInvitation:(r,a)=>m(i("/organization/cancel-invitation",r,a,f=>Vt(f,r.invitationId))),removeMember:(r,a)=>m(i("/organization/remove-member",r,a,f=>Bt(f,r.organizationId,r.memberIdOrEmail.includes("@")?void 0:r.memberIdOrEmail))),updateMemberRole:(r,a)=>m(i("/organization/update-member-role",r,a,f=>Q(f,r.memberId,r.organizationId))),leave:(r,a)=>m(i("/organization/leave",r,a,f=>Q(f,void 0,r.organizationId))),listRoles:(r={},a)=>u("/organization/list-roles",{organizationId:r.organizationId},a,f=>jt(f,r.organizationId)),has:r=>Ue(n(),r),hasPermission:r=>_e(n(),r.permission)}}var Yt=4096,so=4096,ao=100,uo=256,co=16,lo=64,po=12;function Ke(e){let t=h(e);return t.twoFactorRedirect===true?((t.user!==void 0||t.redirect!==void 0||t.url!==void 0)&&p(),{twoFactorRedirect:true,...t.twoFactorMethods===void 0?{}:{twoFactorMethods:mn(t.twoFactorMethods,co,lo)}}):(t.twoFactorRedirect!==void 0&&p(),{redirect:I(t.redirect),...yo(t,"url"),user:_(t.user)})}function Xt(e){let t=h(e);return {user:_(t.user)}}function Qt(e){let t=h(e);return {sessionCreated:I(t.sessionCreated),user:_(t.user)}}function Zt(e,t){let n=h(e),i=I(n.redirect);n.user===null&&p();let o=n.user!==void 0&&n.user!==null,s=n.url!==void 0&&n.url!==null;return i?((o||!s)&&p(),{redirect:true,url:qe(n.url,t)}):(o===s&&p(),o?{redirect:false,user:_(n.user)}:{redirect:false,url:qe(n.url,t)})}function en(e,t){let n=h(e);return (n.redirect!==true||n.user!==void 0)&&p(),{redirect:true,url:qe(n.url,t)}}function tn(e){return {status:I(h(e).status)}}function nn(e){return {success:I(h(e).success)}}function on(e){return h(e).status!=="pending"&&p(),{status:"pending"}}function rn(e){let t=h(e);if(t.kind==="authowl_turnstile")return {kind:"authowl_turnstile"};t.kind!=="akedly_shield_v1_2"&&p();let n=h(t.turnstile),i=n.siteKey===null?null:k(n.siteKey);return {kind:"akedly_shield_v1_2",connectionId:k(t.connectionId),challenge:k(t.challenge),difficulty:fo(t.difficulty),challengeToken:k(t.challengeToken),challengeRequired:I(t.challengeRequired),turnstile:{required:I(n.required),siteKey:i}}}function fo(e){return (!Number.isSafeInteger(e)||Number(e)<0||Number(e)>po)&&p(),Number(e)}function sn(e){let t=h(e);return (t.status!==true||t.sessionCreated!==true)&&p(),{status:true,sessionCreated:true,user:go(t.user)}}function Ve(e){return {status:I(h(e).status)}}function an(e){return {status:I(h(e).status)}}function un(e){let t=h(e);return {status:I(t.status),user:_(t.user)}}function cn(e){return {success:I(h(e).success)}}function dn(e){let t=h(e);return {totpURI:ho(t.totpURI),backupCodes:gn(t.backupCodes)}}function ln(e){return {status:I(h(e).status)}}function fe(e){return h(e).status!==true&&p(),{status:true}}function pn(e){return {status:I(h(e).status)}}function fn(e){let t=h(e);return t.status!==void 0&&t.status!==true&&p(),{backupCodes:gn(t.backupCodes)}}function go(e){let t=h(e);return {id:Z(t.id,512),...Ao(t,"name",1024),phoneNumber:Z(t.phoneNumber,64),phoneNumberVerified:I(t.phoneNumberVerified),...t.createdAt===void 0?{}:{createdAt:T(t.createdAt)},...t.updatedAt===void 0?{}:{updatedAt:T(t.updatedAt)}}}function qe(e,t){let n=Z(e,Yt);/[\u0000-\u0020\u007f]/u.test(n)&&p();let i;try{i=new URL(n);}catch{return p()}return (i.username||i.password)&&p(),i.protocol==="https:"||t&&i.protocol==="http:"&&mo(i.hostname)?i.href:p()}function mo(e){let t=e.toLowerCase();return t==="localhost"||t==="127.0.0.1"||t==="[::1]"}function ho(e){let t=Z(e,so),n;try{n=new URL(t);}catch{return p()}let i=n.searchParams.get("secret");return (n.protocol!=="otpauth:"||n.hostname.toLowerCase()!=="totp"||n.username||n.password||n.hash||i===null||i.length===0||i.length>512||/\s/u.test(i))&&p(),t}function gn(e){return mn(e,ao,uo)}function mn(e,t,n){(!Array.isArray(e)||e.length===0||e.length>t)&&p();let i=e.map(o=>Z(o,n));return i.some(o=>o.trim().length===0)&&p(),new Set(i).size!==i.length&&p(),i}function Z(e,t){let n=k(e);return (n.length===0||n.length>t)&&p(),n}function yo(e,t){let n=e[t];return n==null?{}:{[t]:Z(n,Yt)}}function Ao(e,t,n){let i=P(e,t);return i===void 0?{}:(i!==null&&i.length>n&&p(),{[t]:i})}var hn=new Set([1564,8206,8207,8234,8235,8236,8237,8238,8294,8295,8296,8297]),ge=new Set([9,10,11,12,13,32,133,160,5760,8192,8193,8194,8195,8196,8197,8198,8199,8200,8201,8202,8232,8233,8239,8287,12288,65279]);function me(e){if(e===void 0)return {valid:true,value:void 0};for(let n of e){let i=n.codePointAt(0);if(i===void 0||An(n,i)||yn(i)||hn.has(i))return {valid:false}}let t=bo(e);return Be(t)?{valid:true,value:t}:{valid:false}}function Be(e){let t=0,n,i;for(let o of e){if(t+=1,t>256)return  false;let s=o.codePointAt(0);if(s===void 0||An(o,s)||yn(s)||hn.has(s))return  false;n??=s,i=s;}return t>0&&n!==void 0&&i!==void 0&&!ge.has(n)&&!ge.has(i)}function he(){return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:"INVALID_PASSKEY_NAME",message:"Passkey names must contain 1 to 256 safe Unicode characters."}}}function bo(e){let t=0,n=e.length;for(;t<n;){let i=e.codePointAt(t);if(i===void 0||!ge.has(i))break;t+=i>65535?2:1;}for(;n>t;){let i=e.codePointAt(n-1);if(i===void 0)break;let s=i>=56320&&i<=57343?n-2:n-1,d=e.codePointAt(s);if(d===void 0||!ge.has(d))break;n=s;}return e.slice(t,n)}function yn(e){return e>=0&&e<=31||e>=127&&e<=159}function An(e,t){return e.length===1&&t>=55296&&t<=57343}var wn=12,kn=5e3,Oo=8,wo=1e3,ko=16,bn=512,Rn=100,Sn=8192,Ro=32768,je=1024,On=256,$e=64,So=6e5,To=/^[A-Za-z0-9_-]+$/u,Io=/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u,Po=/[\u0000-\u001f\u007f-\u009f\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]/u,vo=/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?$/u,xo=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu,Tn=new Set(["discouraged","preferred","required"]),Eo=new Set(["singleDevice","multiDevice"]),In=new Set(["ble","cable","hybrid","internal","nfc","smart-card","usb"]),Pn=new Set(["hybrid","security-key","client-device"]),Co=new Set(["none","indirect","direct","enterprise"]),zo=new Set(["fido-u2f","packed","android-safetynet","android-key","tpm","apple","none"]),Do=new Set(["platform","cross-platform"]),_o=new Set(["discouraged","preferred","required"]),Uo=new Set([-8,-7,-257]);function vn(e){let t=L(e,wn,kn);return {challenge:Mn(t.challenge),...v("timeout",Nn(t.timeout)),...v("rpId",Hn(t.rpId)),...v("allowCredentials",Un(t.allowCredentials)),...v("userVerification",ue(t.userVerification,Tn)),...v("hints",ye(t.hints,Pn)),...v("extensions",Ln(t.extensions))}}function xn(e){let t=L(e,wn,kn);return {challenge:Mn(t.challenge),rp:No(t.rp),user:Lo(t.user),pubKeyCredParams:Mo(t.pubKeyCredParams),...v("timeout",Nn(t.timeout)),...v("excludeCredentials",Un(t.excludeCredentials)),...v("authenticatorSelection",Ho(t.authenticatorSelection)),...v("attestation",ue(t.attestation,Co)),...v("attestationFormats",ye(t.attestationFormats,zo)),...v("hints",ye(t.hints,Pn)),...v("extensions",Ln(t.extensions))}}function En(e){let t=h(e),n=pe(t.session),i=_(t.user);return n.userId!==i.id&&p(),{session:n,user:i}}function Ge(e){let t=h(e),n=t.counter;(!Number.isSafeInteger(n)||n<0)&&p();let i=We(t.deviceType,Eo),o=I(t.backedUp);return o&&i!=="multiDevice"&&p(),{id:ee(t.id,On),...Ko(t),publicKey:Fo(t.publicKey,Ro),userId:ee(t.userId,On),credentialID:be(t.credentialID,Sn),counter:n,deviceType:i,backedUp:o,...Vo(t),createdAt:T(t.createdAt),...Bo(t)}}function Cn(e,t,n){let i=Ge(e);return (i.credentialID!==t||(n===void 0?i.name!==void 0&&i.name!==null:i.name!==n))&&p(),i}function zn(e){(!Array.isArray(e)||e.length>Rn)&&p();let t=e.map(Ge);return Ae(t.map(n=>n.id)),Ae(t.map(n=>n.credentialID)),t.length>1&&t.some(n=>n.userId!==t[0]?.userId)&&p(),t}function Dn(e,t,n){let i=h(e),o=Ge(i.passkey);return (o.id!==t||o.name!==n)&&p(),{passkey:o}}function _n(e){return h(e).status!==true&&p(),{status:true}}function No(e){let t=h(e);return {name:Je(t.name,je),...v("id",Hn(t.id))}}function Lo(e){let t=h(e);return {id:be(t.id,128,1,64),name:Je(t.name,je),displayName:Je(t.displayName,je)}}function Mo(e){(!Array.isArray(e)||e.length===0||e.length>$e)&&p();let t=e.map(n=>{let i=h(n);return (i.type!=="public-key"||!Number.isSafeInteger(i.alg)||!Uo.has(i.alg))&&p(),{type:"public-key",alg:i.alg}});return jo(t.map(n=>n.alg)),t}function Un(e){if(e===void 0)return;(!Array.isArray(e)||e.length>Rn)&&p();let t=e.map(n=>{let i=h(n);return i.type!=="public-key"&&p(),{type:"public-key",id:be(i.id,Sn),...v("transports",ye(i.transports,In))}});return Ae(t.map(n=>n.id)),t}function Ho(e){if(e===void 0)return;let t=h(e);t.requireResidentKey!==void 0&&typeof t.requireResidentKey!="boolean"&&p();let n=ue(t.residentKey,_o);return t.requireResidentKey!==void 0&&n!==void 0&&t.requireResidentKey!==(n==="required")&&p(),{...v("authenticatorAttachment",ue(t.authenticatorAttachment,Do)),...v("residentKey",n),...v("requireResidentKey",t.requireResidentKey),...v("userVerification",ue(t.userVerification,Tn))}}function Nn(e){return e!==void 0&&(typeof e!="number"||!Number.isFinite(e)||e<0||e>So)&&p(),e}function Ln(e){return e===void 0?void 0:L(e,Oo,wo)}function ye(e,t){if(e===void 0)return;(!Array.isArray(e)||e.length>$e)&&p();let n=e.map(i=>We(i,t));return Ae(n),n}function ue(e,t){if(e!==void 0)return We(e,t)}function Mn(e){return be(e,Math.ceil(bn*4/3),ko,bn)}function be(e,t,n=1,i=Number.POSITIVE_INFINITY){let o=ee(e,t),s=o.length%4,d=qo(o.at(-1)??""),l=Math.floor(o.length*3/4);return (!To.test(o)||s===1||s===2&&(d&15)!==0||s===3&&(d&3)!==0||l<n||l>i)&&p(),o}function ee(e,t){let n=k(e);return (n.length===0||n.length>t)&&p(),n}function Je(e,t){let n=ee(e,t);return Po.test(n)&&p(),n}function Hn(e){if(e===void 0)return;let t=ee(e,253);return t!=="localhost"&&(t.endsWith(".")||!t.includes(".")||t.split(".").some(n=>!vo.test(n)))&&p(),t}function Fo(e,t){let n=ee(e,t),i=n.endsWith("=="),o=!i&&n.endsWith("="),s=n.at(i?-3:o?-2:-1)??"",d=Fn(s);return (n.length%4!==0||!Io.test(n)||i&&(d&15)!==0||o&&(d&3)!==0)&&p(),n}function qo(e){return Fn(e,true)}function Fn(e,t=false){return (t?"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_":"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/").indexOf(e)}function Ko(e){let t=P(e,"name");return t===void 0?{}:(t!==null&&!Be(t)&&p(),{name:t})}function Vo(e){let t=P(e,"transports");if(t==null||t==="")return t===void 0?{}:{transports:t};let n=t.split(",");return (n.length>$e||n.some(i=>!In.has(i))||new Set(n).size!==n.length)&&p(),{transports:t}}function Bo(e){let t=P(e,"aaguid");return t==null?t===void 0?{}:{aaguid:null}:(xo.test(t)||p(),{aaguid:t})}function We(e,t){let n=k(e);return t.has(n)||p(),n}function v(e,t){return t===void 0?{}:{[e]:t}}function Ae(e){new Set(e).size!==e.length&&p();}function jo(e){new Set(e).size!==e.length&&p();}function er(e,t){if(!t)return e;let n=t.catch(()=>{});return n.then(()=>{n=null;}),{async request(i,o){return n&&await n,e.request(i,o)}}}var Jn=new Map;function tr(e,t,n){let i=Jn.get(n);if(!i){let o=new URLSearchParams(window.location.hash.slice(1)).get("authowl_code");if(!o)return;i=Promise.resolve().then(()=>(we(),Oe)).then(s=>s.completeCrossSiteSignIn(e,t,o)),Jn.set(n,i);}return i}function $n(e){return !ne()||e.idToken||e.disableRedirect?"legacy":"first-party"}function nr(e,t=()=>{},n=rr){let i=xe(e),o=e.session.tokens,s=ne()?tr(i,o,e.decoded.projectId):void 0,d=er(i,s),l=Tt({http:d,probe:xe({...e,fetch:e.session.probe}),tokens:o,channelName:`authowl:${e.decoded.projectId}`}),u=n(d,l.notifyMutation),m=()=>{l.notifyMutation(),t();},{post:r,mutation:a}=Y(d,m),f=e.decoded.env==="test",b=c=>{o.beginSession({remember:c?.rememberMe!==false});};return {sessionStore:l.store,getSession:l.getSession,account:Ct(d,m),organization:Wt(d,m,()=>l.store.getSnapshot().data?.session.membership??null),signIn:{email:(c,g)=>(b(c),a(r("/sign-in/email",c,g,Ke),A=>!("twoFactorRedirect"in A))),username:(c,g)=>(b(c),a(r("/sign-in/username",c,g,Ke),A=>!("twoFactorRedirect"in A))),social:async(c,g)=>{if(b(),$n(c)==="first-party"){let{beginCrossSiteSignIn:O}=await Promise.resolve().then(()=>(we(),Oe)),R=await O(e,{kind:"social",provider:c.provider,callbackURL:c.callbackURL,errorCallbackURL:c.errorCallbackURL,newUserCallbackURL:c.newUserCallbackURL,scopes:c.scopes,loginHint:c.loginHint,requestSignUp:c.requestSignUp});if(R)return window.location.assign(R),{data:{redirect:true,url:R},error:null}}let A=await a(r("/sign-in/social",c,g,O=>Zt(O,f)),O=>"user"in O);return A.error!==null||A.data===null||"url"in A.data&&A.data.redirect&&!c.disableRedirect&&typeof window<"u"&&window.location.assign(A.data.url),A},sso:async(c,g)=>{if($n(c)==="first-party"){let{beginCrossSiteSignIn:O}=await Promise.resolve().then(()=>(we(),Oe)),R=await O(e,{kind:"sso",email:c.email,providerId:c.providerId,domain:c.domain,organizationSlug:c.organizationSlug,callbackURL:c.callbackURL,errorCallbackURL:c.errorCallbackURL,newUserCallbackURL:c.newUserCallbackURL});if(R)return window.location.assign(R),{data:{url:R,redirect:true},error:null}}let A=await r("/sign-in/sso",c,g,O=>en(O,f));return A.error!==null||A.data===null||typeof window<"u"&&window.location.assign(A.data.url),A},magicLink:(c,g)=>r("/sign-in/magic-link",c,g,tn),emailOtp:(c,g)=>(b(),a(r("/sign-in/email-otp",c,g,Xt))),passkey:(c,g)=>(b(),u.signIn(c,g))},signUp:{email:(c,g)=>(b(),a(r("/sign-up/email",c,g,Qt),A=>A.sessionCreated))},emailOtp:{sendVerificationOtp:(c,g)=>r("/email-otp/send-verification-otp",c,g,nn),verifyEmail:(c,g)=>(b(),a(r("/email-otp/verify-email",c,g,un)))},phoneOtp:{prepare:c=>r("/phone-otp/challenge",{},c,rn),start:(c,g)=>r("/phone-otp/start",{...c,idempotencyKey:c.idempotencyKey??It()},g,on),verify:(c,g)=>(b(),a(r("/phone-otp/verify",c,g,sn)))},requestPasswordReset:(c,g)=>r("/request-password-reset",c,g,Ve),resetPassword:(c,g)=>r("/reset-password",c,g,Ve),sendVerificationEmail:(c,g)=>r("/send-verification-email",c,g,an),passkey:{addPasskey:(c,g)=>u.add(c,g),listUserPasskeys:()=>d.request("/passkey/list-user-passkeys",{decode:zn}),updatePasskey:async(c,g)=>{let A=me(c.name);if(!A.valid||A.value===void 0)return he();let O=A.value;return r("/passkey/update-passkey",{...c,name:O},g,R=>Dn(R,c.id,O))},deletePasskey:(c,g)=>r("/passkey/delete-passkey",c,g,_n)},twoFactor:{enable:(c,g)=>r("/two-factor/enable",c,g,dn),disable:(c,g)=>a(r("/two-factor/disable",c,g,ln),A=>A.status),verifyTotp:(c,g)=>a(r("/two-factor/verify-totp",c,g,fe)),verifyBackupCode:(c,g)=>a(r("/two-factor/verify-backup-code",c,g,fe)),sendOtp:(c={},g)=>r("/two-factor/send-otp",c,g,pn),verifyOtp:(c,g)=>a(r("/two-factor/verify-otp",c,g,fe)),generateBackupCodes:(c,g)=>r("/two-factor/generate-backup-codes",c,g,fn)},signOut:c=>a(d.request("/sign-out",{method:"POST",body:{},fetchOptions:c,decode:cn}).then(g=>(o.endSession(),g)),g=>g.success)}}function Qe(e,t=()=>{},n){let i=nr(e,t,n);return n?{...i,signIn:{email:i.signIn.email,username:i.signIn.username,social:Gn(i),magicLink:i.signIn.magicLink,emailOtp:i.signIn.emailOtp,passkey:i.signIn.passkey},passkey:{listUserPasskeys:i.passkey.listUserPasskeys,updatePasskey:i.passkey.updatePasskey,deletePasskey:i.passkey.deletePasskey,addPasskey:i.passkey.addPasskey}}:{...i,signIn:{email:i.signIn.email,username:i.signIn.username,social:Gn(i),magicLink:i.signIn.magicLink,emailOtp:i.signIn.emailOtp},passkey:{listUserPasskeys:i.passkey.listUserPasskeys,updatePasskey:i.passkey.updatePasskey,deletePasskey:i.passkey.deletePasskey}}}function Gn(e){return async(t,n)=>{if(!t?.idToken||typeof t.idToken.token!="string"||t.idToken.token==="")return ir();let i=await e.signIn.social({...t,disableRedirect:true},n);return i.data!==null&&"url"in i.data?or():i}}function ir(){return Promise.resolve({data:null,error:{status:400,statusText:"BAD_REQUEST",code:"NATIVE_SOCIAL_ID_TOKEN_REQUIRED",message:"Native social sign-in requires a provider ID token."}})}function or(){return Promise.resolve({data:null,error:{status:502,statusText:"BAD_GATEWAY",code:"INVALID_NATIVE_SOCIAL_RESPONSE",message:"The server returned a redirect for native ID-token sign-in."}})}function rr(){return {signIn:()=>Wn(),add:()=>Wn()}}function Wn(){return Promise.resolve({data:null,error:{status:400,statusText:"BAD_REQUEST",code:"PASSKEY_BROWSER_REQUIRED",message:"This passkey ceremony requires a browser with WebAuthn."}})}function sr(e,t,n){let i=new Map;return {async signIn(o={},s){let d=await e.request("/passkey/generate-authenticate-options");if(!d.data)return Qn(d.error);let l;try{l=vn(d.data);}catch{return Yn()}let u;try{u=await n.authenticate({optionsJSON:l,useBrowserAutofill:o.autoFill});}catch(b){return Zn(n,b,"AUTH_CANCELLED","Passkey authentication was cancelled.")}if(!ar(u))return Xn();let{clientExtensionResults:m,...r}=u,a=i.get(u.id);if(a)return a;let f=(async()=>{let b=await e.request("/passkey/verify-authentication",{method:"POST",body:{response:r},fetchOptions:s,decode:En});return b.data&&t(),b})();i.set(u.id,f);try{return await f}finally{i.get(u.id)===f&&i.delete(u.id);}},async add(o={},s){let d=me(o.name);if(!d.valid)return he();let l=await e.request("/passkey/generate-register-options",{query:{name:d.value,authenticatorAttachment:o.authenticatorAttachment}});if(!l.data)return Qn(l.error);let u;try{u=xn(l.data);}catch{return Yn()}let m;try{m=await n.register({optionsJSON:u});}catch(b){return Zn(n,b,"REGISTRATION_CANCELLED","Passkey registration was cancelled.")}if(!ur(m))return Xn();let{clientExtensionResults:r,...a}=m,f=await e.request("/passkey/verify-registration",{method:"POST",body:{response:a,name:d.value},fetchOptions:s,decode:b=>Cn(b,m.id,d.value)});return f.data&&t(),f}}}function Yn(){return {data:null,error:{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned invalid WebAuthn options."}}}function Xn(){return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:"INVALID_WEBAUTHN_RESPONSE",message:"The platform returned an invalid passkey response."}}}function ti(e){if(!e||typeof e!="object")return  false;let t=e;return typeof t.id=="string"&&t.id.length>0&&typeof t.rawId=="string"&&t.rawId.length>0&&t.type==="public-key"&&!!t.response&&typeof t.response=="object"}function ar(e){if(!ti(e))return  false;let t=e.response;return typeof t.clientDataJSON=="string"&&typeof t.authenticatorData=="string"&&typeof t.signature=="string"&&(t.userHandle===void 0||typeof t.userHandle=="string")}function ur(e){if(!ti(e))return  false;let t=e.response;return typeof t.clientDataJSON=="string"&&typeof t.attestationObject=="string"}function Qn(e){return {data:null,error:e??{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned no WebAuthn options."}}}function Zn(e,t,n,i){let o=dr(t,"page does not have focus"),s=e.errorCode?.(t),d=s!==void 0?s==="ERROR_CEREMONY_ABORTED":ei(t)==="AbortError",l=n!=="AUTH_CANCELLED",u=cr(s,ei(t),l);return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:o?"PASSKEY_PAGE_NOT_FOCUSED":d?n:s??"PASSKEY_BROWSER_ERROR",message:o?"Keep this page focused while completing the passkey prompt.":d?i:u}}}function cr(e,t,n){switch(e){case "ERROR_INVALID_DOMAIN":case "ERROR_INVALID_RP_ID":return "Passkeys are not set up for this site\u2019s domain.";case "ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED":return "This device already has a passkey for this account.";case "ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEY_ALGS":case "ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT":case "ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT":return "This device cannot create a passkey for this site.";}return t==="NotAllowedError"?n?"No passkey was created. The prompt was dismissed or timed out.":"No passkey was used. This device may not have one saved for this site yet, or the prompt was dismissed.":t==="SecurityError"?"Passkeys are not set up for this site\u2019s domain.":n?"Passkey registration did not complete.":"Passkey sign-in did not complete."}function ei(e){return e&&typeof e=="object"&&"name"in e&&typeof e.name=="string"?e.name:void 0}function dr(e,t){let n=t.toLowerCase(),i=new Set,o=e;for(;o&&typeof o=="object"&&!i.has(o);){if(i.add(o),"message"in o&&typeof o.message=="string"&&o.message.toLowerCase().includes(n))return  true;o="cause"in o?o.cause:void 0;}return  false}async function lr(e){let n=`${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}/public-config`;return Ot(await le(e,n,{init:{method:"GET",credentials:"omit"},maxResponseBytes:256*1024,decode:i=>pr(i,e)}),"public-config")}function pr(e,t){let n=L(e),i=n.environmentId,o=n.environmentType,s=`${new URL(t.apiUrl).origin}/api/projects/${t.decoded.projectId}/auth`;if(typeof n.applicationId!="string"||!fr(n.applicationId)||i!==t.decoded.projectId||o!=="development"&&o!=="production"||n.authBaseUrl!==s)throw z();let d=E(n.branding),l=E(n.legal);if(!Ze(n.enabledMethods,64)||!Ze(n.socialProviders,64)||!ii(d,["appName","logoUrl","primaryColor"])||d.showAppName!==void 0&&typeof d.showAppName!="boolean"||d.alignment!==void 0&&d.alignment!=="left"&&d.alignment!=="center"&&d.alignment!=="right"||d.theme!==void 0&&d.theme!=="light"&&d.theme!=="dark"&&d.theme!=="system"||!ii(l,["termsUrl","privacyUrl"])||!Number.isSafeInteger(l.version)||l.version<0||typeof l.required!="boolean")throw z();if(n.socialProviderClientIds!==void 0){let u=E(n.socialProviderClientIds);if(Object.keys(u).length>64||Object.values(u).some(m=>typeof m!="string"||m.length>2048))throw z()}if(!F(n,["requireEmailVerification","twoFactor","mfaRequired","accountDeletion","organizations","sso","badge"])||!ni(n.turnstileSiteKey)||!ni(n.authTurnstileSiteKey)||typeof n.locale!="string"||n.locale.length===0||n.locale.length>64||!Number.isSafeInteger(n.configVersion)||n.configVersion<0)throw z();if(n.jwtIssuer!==null){let u=E(n.jwtIssuer);if(u.issuer!==s||u.jwksUrl!==`${s}/jwks`||u.aud!==t.decoded.projectId)throw z()}if(n.signUp!==void 0){let u=E(n.signUp).mode;if(typeof u!="string"||!["open","restricted","allowlist","waitlist"].includes(u))throw z()}if(n.authentication!==void 0&&gr(n.authentication),n.emailVerification!==void 0){let u=E(n.emailVerification);if(!F(u,["required"])||u.method!=="link"&&u.method!=="code")throw z()}if(n.userModel!==void 0&&!F(E(n.userModel),["requireEmail","firstLastName","emailChange","accountDeletion"]))throw z();if(n.mfa!==void 0){let u=E(n.mfa);if(!F(u,["totp","required","backupCodes"])||(u.required===true||u.backupCodes===true)&&u.totp!==true)throw z()}if(n.captcha===void 0||n.captcha===null)n.captcha=typeof n.authTurnstileSiteKey=="string"&&n.authTurnstileSiteKey.length>0?{provider:"turnstile",siteKey:n.authTurnstileSiteKey}:null;else {let u=E(n.captcha);if(typeof u.provider!="string"||u.provider.length===0||u.provider.length>64||typeof u.siteKey!="string"||u.siteKey.length===0||u.siteKey.length>512)throw z();n.captcha={provider:u.provider,siteKey:u.siteKey};}return n}function fr(e){return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(e)}function z(){return new TypeError("public-config returned an invalid response")}function E(e){if(!e||typeof e!="object"||Array.isArray(e))throw z();return e}function ni(e){return e===null||typeof e=="string"&&e.length<=4096}function gr(e){let t=E(e),n=E(t.email),i=E(t.password),o=i.minLength!==void 0||i.maxLength!==void 0;if(!F(n,["signUp"])||!Ze(n.signIn,3)||n.signIn.some(s=>s!=="password"&&s!=="magic_link"&&s!=="email_otp")||!F(E(t.phone),["signUp","signIn"])||!F(i,["signUp","add"])||o&&(!Number.isSafeInteger(i.minLength)||!Number.isSafeInteger(i.maxLength)||i.minLength<1||i.maxLength>4096||i.minLength>i.maxLength)||!F(E(t.passkey),["signIn","add"])||!mr(E(t.passkey).relyingPartyId)||!F(E(t.username),["collectOnSignUp","signIn"]))throw z()}function mr(e){return e==null||typeof e=="string"}function F(e,t){return t.every(n=>typeof e[n]=="boolean")}function ii(e,t){return t.every(n=>e[n]===void 0||typeof e[n]=="string"&&e[n].length<=4096)}function Ze(e,t){return Array.isArray(e)&&e.length<=t&&e.every(n=>typeof n=="string"&&n.length<=128)&&new Set(e).size===e.length}function hr(e){let t=e?.enabledMethods??["password"],n=t.includes("password"),i=t.includes("passkey"),o=e?.authentication,s=e?.mfa;return {emailSignUp:o?.email.signUp??t.some(d=>d==="password"||d==="magic_link"||d==="email_otp"),passwordSignUp:o?.password.signUp??n,phoneSignUp:o?.phone.signUp??t.includes("phone_otp"),passwordSignIn:o?.email.signIn.includes("password")??n,passwordMinLength:o?.password.minLength??8,passwordMaxLength:o?.password.maxLength??128,magicLinkSignIn:o?.email.signIn.includes("magic_link")??t.includes("magic_link"),emailOtpSignIn:o?.email.signIn.includes("email_otp")??t.includes("email_otp"),phoneSignIn:o?.phone.signIn??t.includes("phone_otp"),usernameSignIn:o?.username.signIn??false,collectUsername:o?.username.collectOnSignUp??false,passkeySignIn:o?.passkey.signIn??i,passkeyAdd:o?.passkey.add??i,firstLastName:e?.userModel?.firstLastName??false,emailChange:e===null?false:e.userModel?.emailChange??true,accountDeletion:e?.userModel?.accountDeletion??e?.accountDeletion??false,emailVerificationRequired:e?.emailVerification?.required??e?.requireEmailVerification??false,emailVerificationMethod:e?.emailVerification?.method??"link",totp:s?.totp??e?.twoFactor??false,mfaRequired:s?.required??e?.mfaRequired??false,backupCodes:s?.backupCodes??e?.twoFactor??false,legacyNameField:e?.authentication===void 0}}function yr(e,t){let n=`p_${e.toLowerCase().replace(/-/g,"")}`;return `${t?.secure?"__Secure-":""}${n}.session_token`}function Ns(e,t){return Qe(Se(e),t)}
-exports.createMembershipHas=no;exports.createNativeAuthClient=Qe;exports.createNativeClient=Ns;exports.createPasskeyClient=sr;exports.decodePublishableKey=ke;exports.getPublicConfig=lr;exports.resolveConfig=Se;exports.resolveProjectCapabilities=hr;exports.sessionCookieName=yr;
+'use strict';var gi=Object.defineProperty;var st=(e,t,n)=>()=>{if(n)throw n[0];try{return e&&(t=e(e=0)),t}catch(i){throw n=[i],i}};var mi=(e,t)=>{for(var n in t)gi(e,n,{get:t[n],enumerable:true});};function oe(){return typeof window<"u"&&typeof document<"u"&&typeof crypto<"u"&&typeof crypto.subtle?.digest=="function"}var Fe=st(()=>{"use strict";});var Te={};mi(Te,{beginCrossSiteSignIn:()=>gr,challengeFor:()=>Xn,completeCrossSiteSignIn:()=>mr,takeHandoffCode:()=>it});function Yn(e){let t="";for(let n of e)t+=String.fromCharCode(n);return btoa(t).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}async function Xn(e){let t=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(e));return Yn(new Uint8Array(t))}function lr(){return Yn(crypto.getRandomValues(new Uint8Array(cr)))}function Qn(e,t){let n=window.location.protocol==="https:"?"; Secure":"";document.cookie=`${Wn}=${e}; Path=/; Max-Age=${t}; SameSite=Lax${n}`;}function pr(){for(let e of document.cookie.split(";")){let t=e.indexOf("=");if(!(t<0)&&e.slice(0,t).trim()===Wn)return e.slice(t+1).trim()||null}return null}function fr(){Qn("",0);}function Gn(e){return new URL(e,window.location.href).toString()}async function gr(e,t){let n=t.callbackURL?Gn(t.callbackURL):null;if(n&&new URL(n).origin!==window.location.origin)return null;let i=lr(),o=new URL(`${e.projectBaseURL}/session/start`);if(o.searchParams.set("pk",e.publishableKey),o.searchParams.set("kind",t.kind),t.kind==="social")o.searchParams.set("provider",t.provider),t.scopes?.length&&o.searchParams.set("scopes",t.scopes.join(",")),t.loginHint&&o.searchParams.set("loginHint",t.loginHint),t.requestSignUp!==void 0&&o.searchParams.set("requestSignUp",t.requestSignUp?"1":"0");else for(let u of dr){let l=t[u];l&&o.searchParams.set(u,l);}let s=`${window.location.origin}${window.location.pathname}${window.location.search}`;o.searchParams.set("cb",n??s);for(let[u,l]of [["err",t.errorCallbackURL],["new",t.newUserCallbackURL]])l&&o.searchParams.set(u,Gn(l));return o.searchParams.set("challenge",await Xn(i)),Qn(i,ur),o.toString()}function it(e){if(typeof window>"u")return null;let t=window.location.hash;if(!t.includes(nt))return null;let n=new URLSearchParams(t.replace(/^#/,"")),i=n.get(nt);if(!i||e!==void 0&&i!==e)return null;n.delete(nt);let o=n.toString();return window.history.replaceState(window.history.state,"",`${window.location.pathname}${window.location.search}${o?`#${o}`:""}`),i}async function mr(e,t,n){if(!oe())return  false;let i=n??it();if(!i)return  false;n&&it(n);let o=pr();if(fr(),!o)return  false;t.beginSession({remember:true});let{error:s}=await e.request("/session/exchange",{method:"POST",body:{code:i,verifier:o}});return s===null}var Wn,nt,cr,ur,dr,Ie=st(()=>{"use strict";Fe();Wn="authowl_handoff_verifier",nt="authowl_code",cr=32,ur=900,dr=["email","providerId","domain","organizationSlug"];});var hi=/^(pk_(live|test))_([0-9a-f-]{36})_([A-Za-z0-9]{20,})$/i,yi=/^sk_/i;function ve(e){if(typeof e!="string"||e.length===0)throw new Error("publishableKey is required");if(yi.test(e))throw new Error("A secret key was passed where a publishable key was expected. Never embed secret keys in client code.");let t=hi.exec(e);if(!t)throw new Error("publishableKey is malformed; expected pk_(live|test)_<uuid>_<base62>");return {prefix:t[1].toLowerCase(),env:t[2].toLowerCase(),projectId:t[3].toLowerCase()}}var at=/^http:\/\/(?:(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*localhost|127\.0\.0\.1|\[::1\])(?::\d+)?(?:\/|$)/i;function Ce(e,t){throw new Error(`${e}: ${t}`)}function ct(e,t){let n;try{n=new URL(String(e));}catch{throw new TypeError("Transport URL must be absolute.")}if(n.username||n.password||n.hash)throw new TypeError("Transport URL must not contain credentials or a fragment.");let i=n.toString();if(n.protocol!=="https:"&&!(n.protocol==="http:"&&t.allowHttpLoopback&&at.test(i)))throw new TypeError("Transport URL must use HTTPS except on approved loopback.");return n}function ut(e,t){(typeof e!="string"||!/^https?:\/\/[^/?#@\\\s]+\/?$/i.test(e))&&Ce("apiUrl","origin required");let n;try{n=new URL(e);}catch{Ce("apiUrl","origin required");}return n.protocol==="http:"&&(!t.allowHttpLoopback||!at.test(e))&&Ce("apiUrl","HTTPS required except exact loopback"),n.origin}function W(e,t){try{return e?.getItem(t)??null}catch{return null}}function Y(e,t,n){try{n===null?e?.removeItem(t):e?.setItem(t,n);}catch{}}function X(){try{return globalThis.localStorage}catch{return}}function B(){try{return globalThis.sessionStorage}catch{return}}var Ai="authowl.session-challenge",bi=e=>`${Ai}.${e}`,Oi="set-auth-challenge",dt="x-authowl-challenge";var pt="INVALID_TWO_FACTOR_COOKIE",wi=2048,fe=e=>e!==null&&e.length<=wi,lt=/^[\x21\x23-\x2B\x2D-\x3A\x3C-\x5B\x5D-\x7E]+$/;function Ri(e){let t=[];for(let n of e.split(";")){let i=n.trimStart(),o=i.indexOf("=");o<=0||t.push([i.slice(0,o).trimEnd(),i.slice(o+1)]);}return t}function ft(e){let t=bi(e),n=new Map;function i(){return n.size===0?null:[...n].map(([l,c])=>`${l}=${c}`).join("; ")}function o(){let l=i();Y(B(),t,fe(l)?l:null);}function s(l){for(let[c,h]of Ri(l))lt.test(c)&&(h===""?n.delete(c):lt.test(h)&&n.set(c,h));}let u=W(B(),t);return fe(u)&&s(u),{presentOn(l){let c=i();l.delete(dt),fe(c)&&l.set(dt,c);},observe(l){let c=l.get(Oi);fe(c)&&(s(c),o());},clear(){n.clear(),o();}}}var gt="set-auth-token",mt="x-authowl-session-transport",ht="bearer";var ki="authowl.session-token",Si="authowl.cookie-transport",At="ok",bt="bearer",Ti=e=>`${ki}.${e}`,Ii=e=>`${Si}.${e}`;function Pi(e){return e===At?"cookies":e===bt?"bearer":"unknown"}function vi(e){return e==="cookies"?At:e==="bearer"?bt:null}function Ci(e){let t=Ti(e),n=Ii(e),i=ft(e),o=null,s=false,u=null,l=Pi(W(X(),n)),c=()=>l==="unknown",h=0,r=null,a=false;function f(){let y=W(B(),t);if(y!==null)return s=true,y;let w=W(X(),t);return w!==null?(s=false,w):null}o=f(),o!==null&&c()&&(a=true);function b(){if(!(!a||!r)){a=false;try{r();}catch{}}}function d(){let y=l==="bearer"?o:null,[w,U]=s?[B(),X()]:[X(),B()];Y(U,t,null),Y(w,t,y);}function g(y){y!==null&&u!==null&&(s=u,u=null),o=y,d(),y!==null&&c()&&(a=true,b());}function A(y){l=y,Y(X(),n,vi(y));}function O(){A("unknown"),a=false;}function k(){return o===null&&(o=f()),o}function q(){let y=f();return y!==null&&(o=y),o}function V(y){q()===y&&d();}function K(){h+=1,u=null,s=false,g(null),i.clear(),O();}let G=()=>l!=="cookies";return {hasToken:()=>k()!==null,declareOn(y){if(y.has("authorization"))return  false;let w=k();return !w&&!G()?false:(w&&y.set("authorization",`Bearer ${w}`),y.set(mt,ht),i.presentOn(y),true)},wantsToken:G,needsProbe:c,observe(y){let w=y.get(gt);w&&g(w),i.observe(y);},dropChallenge:i.clear,measureWith(y){r=y,b();},beginRead(){let y=k(),w=h;return {carriedToken:y!==null,endIfDead(){y!==null&&q()===y&&h===w&&K();},recordCookieVerdict(U){if(h===w&&c()){if(A(U?"cookies":"bearer"),U){g(null);return}V(y);}}}},beginSession({remember:y}){h+=1,u=!y,i.clear(),O();},endSession:K}}var yt=new Map;function Ot(e){let t=yt.get(e);if(t)return t;let n=Ci(e);return yt.set(e,n),n}function xi(e,t){return t?.headers?new Headers(t.headers):typeof e=="object"&&e!==null&&"headers"in e?new Headers(e.headers):new Headers}function wt(e,t){let n=Ot(e),i=(u,l)=>(t??globalThis.fetch)(u,l);return {fetch:async(u,l)=>{if(l?.credentials==="omit"||!n.wantsToken())return i(u,l);let c=xi(u,l),h=n.declareOn(c),r=await i(u,{...l,headers:c});return h&&n.observe(r.headers),r},probe:i,tokens:n}}function Ei(e){if(!e||typeof e!="object")throw new Error("AuthConfig is required");let t=ve(e.publishableKey),n=ut(e.apiUrl,{allowHttpLoopback:t.env==="test"});return {publishableKey:e.publishableKey,apiUrl:n,decoded:t,projectBaseURL:`${n}/api/projects/${t.projectId}/auth`}}function xe(e){let t=Ei(e),{fetch:n,...i}=wt(t.decoded.projectId,e.fetch);return {...e,...t,fetch:n,session:i}}var Di=1e4,zi=1024*1024,E=class extends Error{kind;requestId;constructor(t,n){super(qi(t)),this.name="TransportError",this.kind=t,this.requestId=n;}},St=new WeakSet;function D(e,t){let n=new E(e,t);return St.add(n),n}async function Tt({fetchImpl:e,url:t,init:n={},timeoutMs:i=Di,maxResponseBytes:o=zi,allowHttpLoopback:s=false,decode:u}){kt(i,"timeoutMs"),kt(o,"maxResponseBytes");let l=ct(t,{allowHttpLoopback:s}),c=n.signal,h=new AbortController,r=null,a,f=new Promise(A=>{a=A;}),b=A=>{r===null&&(r=A,a({type:"abort",kind:A}),h.abort());},d=()=>b("aborted");c?.addEventListener("abort",d,{once:true});let g=setTimeout(()=>b("timeout"),i);c?.aborted&&d();try{if(r!==null)throw D(r);let A;try{A=await Promise.race([e(l.toString(),{...n,redirect:"error",signal:h.signal}).then(G=>({type:"response",response:G})),f]);}catch{throw D(r??"network")}if(A.type==="abort")throw D(A.kind);if(!_i(A.response))throw D("invalid_response");let O=A.response,k=Hi(O.headers),q=await Ui(O,o,f,()=>r,k),V=Mi(O,q,k),K;try{K=O.ok&&u?u(V,Object.freeze({status:O.status})):V;}catch{throw D("invalid_response",k)}return {response:O,data:K,...k===void 0?{}:{requestId:k}}}catch(A){throw A instanceof E&&St.has(A)?A:D(r??"network")}finally{clearTimeout(g),c?.removeEventListener("abort",d);}}function _i(e){if(!e||typeof e!="object")return  false;let t=e;return Number.isInteger(t.status)&&t.status>=0&&t.status<=599&&typeof t.statusText=="string"&&typeof t.ok=="boolean"&&typeof t.headers?.get=="function"&&(t.body===null||typeof t.body=="object"&&typeof t.body?.getReader=="function"&&typeof t.body.cancel=="function")}async function Ui(e,t,n,i,o){let s=e.headers.get("content-length");if(s!==null){if(!/^\d+$/.test(s))throw Rt(e.body),D("invalid_response",o);if(Number(s)>t)throw Rt(e.body),D("response_too_large",o)}if(!e.body)return "";let u;try{u=e.body.getReader();}catch{throw D("network",o)}let l=[],c=0,h=null;try{for(;;){let f;try{f=await Promise.race([u.read(),n]);}catch{h=D(i()??"network",o);break}if(Ni(f)){h=D(f.kind,o);break}let{done:b,value:d}=f;if(b)break;if(d.byteLength!==0){if(c+=d.byteLength,c>t){h=D("response_too_large",o);break}l.push(d);}}}finally{h&&Li(u);try{u.releaseLock();}catch{}}if(h)throw h;let r=new Uint8Array(c),a=0;for(let f of l)r.set(f,a),a+=f.byteLength;try{return new TextDecoder("utf-8",{fatal:!0}).decode(r)}catch{throw D("invalid_response",o)}}function Ni(e){return "type"in e&&e.type==="abort"}function Rt(e){if(e)try{e.cancel().catch(()=>{});}catch{}}function Li(e){try{e.cancel().catch(()=>{});}catch{}}function Mi(e,t,n){if(e.status===204||e.status===205)return null;let i=Fi(e.headers.get("content-type"));if(!e.ok&&(!i||t.length===0))return null;if(!i||t.length===0)throw D("invalid_response",n);try{return JSON.parse(t)}catch{if(!e.ok)return null;throw D("invalid_response",n)}}function Fi(e){if(e===null)return  false;let t=e.split(";",1)[0]?.trim().toLowerCase();return t==="application/json"||t?.endsWith("+json")===true}function Hi(e){let t=e.get("x-request-id")?.trim();if(!(!t||t.length>256||!/^[A-Za-z0-9._:-]+$/.test(t)))return t}function kt(e,t){if(!Number.isInteger(e)||e<=0)throw new TypeError(`${t} must be a positive integer.`)}function qi(e){switch(e){case "aborted":return "The request was cancelled.";case "timeout":return "The request timed out.";case "response_too_large":return "The response exceeded the allowed size.";case "invalid_response":return "The service returned an invalid response.";case "network":return "The network request could not be completed."}}var Ee=class extends Error{status;requestId;constructor(t,n,i){super(`${t} request failed with status ${n.status}.`),this.name="AuthOwlHttpError",this.status=n.status,this.requestId=i;}};function ge(e,t,n={}){let i=new Headers(n.init?.headers);return i.set("x-publishable-key",e.publishableKey),Tt({fetchImpl:e.fetch,url:t,init:{...n.init,headers:i},allowHttpLoopback:e.decoded.env==="test",...n.timeoutMs===void 0?{}:{timeoutMs:n.timeoutMs},...n.maxResponseBytes===void 0?{}:{maxResponseBytes:n.maxResponseBytes},...n.decode===void 0?{}:{decode:n.decode}})}function It(e,t){if(!e.response.ok)throw new Ee(t,e.response,e.requestId);return e.data}var Vi=new Map;function Pt(e){return typeof window>"u"?null:Vi.get(e)?.at(-1)?.locale??null}var Ki="x-authowl-turnstile-token",Bi="x-authowl-locale",ji=1e4,$i=32,Ji=2e4;function Q(e,t){return {post:(n,i,o,s)=>e.request(n,{method:"POST",body:i,fetchOptions:o,decode:s}),mutation:async(n,i)=>{let o=await n;return o.error===null&&(i===void 0||o.data!==null&&i(o.data))&&t(),o}}}function Ue(e,t=e.projectBaseURL){return {async request(n,i={}){let o=Yi(t,n,i.query),s=i.method??(i.body===void 0?"GET":"POST"),u=new Headers(i.fetchOptions?.headers);i.fetchOptions?.authChallengeToken&&u.set(Ki,i.fetchOptions.authChallengeToken);let l=Pt(e.decoded.projectId);l&&u.set(Bi,l),i.body!==void 0&&u.set("content-type","application/json");let c={method:s,headers:u,credentials:i.credentials??"include",...i.body===void 0?{}:{body:JSON.stringify(i.body)}},h=Object.freeze({method:s,path:n});await i.fetchOptions?.onRequest?.(h);let r=Wi(s,i.fetchOptions),a;try{a=await Gi(e,o,{...c,signal:i.fetchOptions?.signal},r);}catch(O){let k=Ct(O);return await i.fetchOptions?.onError?.(De(h,k,Zi(O))),{data:null,error:k}}let{response:f,requestId:b}=a,d=no(n,a.data),g=d;if(f.ok)try{g=_e(d),i.decode&&(g=i.decode(g));}catch{let O=Ct(new E("invalid_response",b));return await i.fetchOptions?.onError?.(De(h,O,"invalid_response")),{data:null,error:O}}let A=Object.freeze({...h,status:f.status,...b===void 0?{}:{requestId:b}});if(await i.fetchOptions?.onResponse?.(A),!f.ok){let O=Xi(f,d,b);return O.code===pt&&e.session.tokens.dropChallenge(),await i.fetchOptions?.onError?.(De(h,O,"api")),{data:null,error:O}}return await i.fetchOptions?.onSuccess?.(A),{data:g,error:null}}}}async function Gi(e,t,n,i){let o=Date.now()+ji;for(let s=0;s<i;s+=1){let u=o-Date.now();if(u<=0)throw new E("timeout");try{let l=await ge(e,t,{init:n,timeoutMs:Math.max(1,Math.ceil(u))});if(l.response.status<500||s===i-1)return l}catch(l){if(s===i-1||!(l instanceof E)||l.kind!=="network")throw l}await eo(50*2**s,n.signal,o);}throw new E("network")}function Wi(e,t){if(e!=="GET"||t?.authChallengeToken)return 1;let n=t?.retry;return typeof n!="number"||!Number.isFinite(n)?1:Math.min(Math.max(Math.trunc(n),0),3)+1}function Yi(e,t,n){let i=new URL(`${e}${t.startsWith("/")?t:`/${t}`}`);for(let[o,s]of Object.entries(n??{}))s!==void 0&&i.searchParams.set(o,String(s));return i.toString()}function Xi(e,t,n){let i=ie(t)?t:{},o=Qi(i,e.headers);return {status:e.status,statusText:e.statusText,code:typeof i.code=="string"?i.code:void 0,...n===void 0?{}:{requestId:n},...typeof i.current_version=="number"?{currentVersion:i.current_version}:{},...o!==void 0?{retryAfterSeconds:o}:{},message:typeof i.message=="string"?i.message:typeof i.error=="string"?i.error:typeof i.detail=="string"?i.detail:e.statusText||"Request failed"}}function Qi(e,t){let n=(typeof e.retryAfterSeconds=="number"&&Number.isFinite(e.retryAfterSeconds)?e.retryAfterSeconds:void 0)??vt(t.get("retry-after"))??vt(t.get("x-retry-after"));if(n!==void 0)return Math.min(Math.max(Math.trunc(n),1),86400)}function vt(e){if(!e)return;let t=e.trim();if(!/^\d+$/.test(t))return;let n=Number(t);return Number.isFinite(n)?n:void 0}function Ct(e){let t=e instanceof E?e.kind:"network";return {status:0,...{aborted:{statusText:"ABORTED",code:"REQUEST_ABORTED",message:"The request was cancelled."},timeout:{statusText:"TIMEOUT",code:"REQUEST_TIMEOUT",message:"The request timed out."},response_too_large:{statusText:"INVALID_RESPONSE",code:"RESPONSE_TOO_LARGE",message:"The service response was too large."},invalid_response:{statusText:"INVALID_RESPONSE",code:"INVALID_RESPONSE",message:"The service returned an invalid response."},network:{statusText:"FETCH_ERROR",code:"FETCH_ERROR",message:"Network request failed."}}[t],...e instanceof E&&e.requestId?{requestId:e.requestId}:{}}}function De(e,t,n){return Object.freeze({...e,status:t.status??0,...t.requestId===void 0?{}:{requestId:t.requestId},failure:n})}function Zi(e){return e instanceof E?e.kind:"network"}function eo(e,t,n){return new Promise((i,o)=>{if(t?.aborted){o(new E("aborted"));return}let s=n-Date.now();if(s<=0){o(new E("timeout"));return}let u=Math.min(e,s),l=()=>{clearTimeout(c),o(new E("aborted"));},c=setTimeout(()=>{t?.removeEventListener("abort",l),Date.now()>=n?o(new E("timeout")):i();},u);t?.addEventListener("abort",l,{once:true}),t?.aborted&&l();})}function _e(e,t="",n=0,i={nodes:0}){if(i.nodes+=1,n>$i||i.nodes>Ji)throw new Error("response traversal limit exceeded");if(typeof e=="string"&&/^(?:createdAt|updatedAt|expiresAt)$/.test(t)){let o=new Date(e);return Number.isNaN(o.getTime())?e:o}return Array.isArray(e)?e.map(o=>_e(o,"",n+1,i)):ie(e)?Object.fromEntries(Object.entries(e).map(([o,s])=>[o,to(o)?s:_e(s,o,n+1,i)])):e}function to(e){return e==="metadata"||e==="public_metadata"||e==="unsafe_metadata"||e==="private_metadata"||e==="publicMetadata"||e==="unsafeMetadata"||e==="privateMetadata"}function no(e,t){if(e==="/list-sessions"&&Array.isArray(t))return t.map(o=>ie(o)?ze(o):o);if(!ie(t))return t;let i=e==="/change-password"||e==="/passkey/verify-authentication"||e==="/phone-otp/verify"||e==="/sign-up/email"||e.startsWith("/sign-in/")||e.startsWith("/two-factor/verify-")?ze(t):t;return e==="/sign-up/email"&&!("sessionCreated"in i)&&(i={...i,sessionCreated:typeof t.token=="string"&&t.token.length>0}),(e==="/get-session"||e==="/passkey/verify-authentication")&&ie(i.session)&&(i={...i,session:ze(i.session)}),i}function ze(e){if(!Object.hasOwn(e,"token"))return e;let t={...e};return delete t.token,t}function ie(e){return !!e&&typeof e=="object"&&!Array.isArray(e)}var io=new Set(["__proto__","constructor","prototype"]);function m(e){(!e||typeof e!="object"||Array.isArray(e))&&p();let t=Object.getPrototypeOf(e);return t!==Object.prototype&&t!==null&&p(),e}function R(e){return typeof e!="string"&&p(),e}function I(e){return typeof e!="boolean"&&p(),e}function S(e){return (!(e instanceof Date)||Number.isNaN(e.getTime()))&&p(),e}function j(e){return (!Array.isArray(e)||!e.every(t=>typeof t=="string"))&&p(),[...e]}function P(e,t){let n=e[t];return n==null||typeof n=="string"?n:p()}function xt(e,t){let n=e[t];return n==null||typeof n=="boolean"?n:p()}function _(e){let t=m(e),n=t.email;return n!==null&&typeof n!="string"&&p(),{id:R(t.id),email:n,emailVerified:I(t.emailVerified),createdAt:S(t.createdAt),updatedAt:S(t.updatedAt),...z("phoneNumber",P(t,"phoneNumber")),...z("username",P(t,"username")),...z("displayUsername",P(t,"displayUsername")),...z("firstName",P(t,"firstName")),...z("lastName",P(t,"lastName")),...z("name",P(t,"name")),...z("image",P(t,"image")),...z("twoFactorEnabled",xt(t,"twoFactorEnabled"))}}function me(e){let t=m(e),n=t.membership;return {id:R(t.id),userId:R(t.userId),expiresAt:S(t.expiresAt),...z("activeOrganizationId",P(t,"activeOrganizationId")),...z("activeTeamId",P(t,"activeTeamId")),...z("membership",n==null?n:oo(n)),...z("pendingMfaEnrollment",xt(t,"pendingMfaEnrollment"))}}function p(){throw new TypeError("AuthOwl response does not match its runtime contract.")}function L(e,t=20,n=1e4){return (!e||typeof e!="object"||Array.isArray(e))&&p(),Le(e,t,n)}function Le(e,t=20,n=1e4){return Ne(e,0,{nodes:0},t,n)}function oo(e){let t=m(e);return {role:R(t.role),...t.roles===void 0?{}:{roles:j(t.roles)},permissions:j(t.permissions),...t.teams===void 0?{}:{teams:j(t.teams)}}}function Ne(e,t,n,i,o){if(n.nodes+=1,(t>i||n.nodes>o)&&p(),e===null||typeof e=="string"||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||p(),e;if(Array.isArray(e))return e.map(l=>Ne(l,t+1,n,i,o));(!e||typeof e!="object")&&p();let s=Object.getPrototypeOf(e);s!==Object.prototype&&s!==null&&p();let u={};for(let[l,c]of Object.entries(e))io.has(l)&&p(),u[l]=Ne(c,t+1,n,i,o);return u}function z(e,t){return t===void 0?{}:{[e]:t}}function Et({http:e,probe:t,tokens:n,channelName:i}){let o=new Set,s=null,u=null,l=null,c=null,h=null,r=null,a,f=y=>{g(y);};a={data:null,isPending:true,isRefetching:false,error:null,refetch:f};function b(y){a=y;for(let w of o)w();}async function d(y){return e.request("/get-session",{query:y?.query,decode:Me})}function g(y){if(y?.query?.disableCookieCache===true)return O(y);if(c)return c;if(h)return h;let w=O(y).finally(()=>{h===w&&(h=null);});return h=w,w}function A(){if(c)return c;let y=O({query:{disableCookieCache:true}}).finally(()=>{c===y&&(c=null);});return c=y,y}async function O(y){l?.abort();let w=new AbortController;l=w,b({...a,isPending:a.data===null&&a.error===null,isRefetching:a.data!==null});let U=n.beginRead(),pe=await e.request("/get-session",{query:y?.query,fetchOptions:{signal:w.signal},decode:Me});if(l===w&&(l=null,b({data:pe.data,error:pe.error,isPending:false,isRefetching:false,refetch:f}),pe.error===null)){if(pe.data===null){U.endIfDead();return}await k(U);}}async function k(y){if(n.needsProbe()){if(!y.carriedToken){y.recordCookieVerdict(true);return}return r||q(y)}}function q(y){let w=t.request("/get-session",{query:{disableCookieCache:true},decode:Me}).then(U=>{r===w&&U.error===null&&y.recordCookieVerdict(U.data!==null);}).finally(()=>{r===w&&(r=null);});return r=w,w}function V(){s?.postMessage({type:"session-changed"});}function K(){if(typeof window>"u"||u)return;let y=()=>{g();},w=()=>{document.visibilityState==="visible"&&g();};window.addEventListener("focus",y),document.addEventListener("visibilitychange",w),typeof BroadcastChannel<"u"&&(s=new BroadcastChannel(i),s.addEventListener("message",y)),u=()=>{window.removeEventListener("focus",y),document.removeEventListener("visibilitychange",w),s?.close(),s=null,u=null;};}function G(y){return o.add(y),o.size===1&&(K(),g()),()=>{if(o.delete(y),o.size===0){let w=l;l=null,h=null,c=null,w?.abort(),u?.();}}}return n.measureWith(()=>{n.needsProbe()&&q(n.beginRead());}),{store:{subscribe:G,getSnapshot:()=>a,refresh:A},getSession:d,notifyMutation(){V(),r&&r.catch(()=>{}).then(()=>{!n.needsProbe()&&n.hasToken()&&V();}),o.size>0&&g({query:{disableCookieCache:true}});}}}function Me(e){if(e===null)return null;let t=m(e);return (t.session===void 0||t.user===void 0)&&p(),{session:me(t.session),user:_(t.user)}}Fe();function $(){let e=globalThis.crypto.getRandomValues(new Uint8Array(16));e[6]=e[6]&15|64,e[8]=e[8]&63|128;let t=Array.from(e,n=>n.toString(16).padStart(2,"0")).join("");return `${t.slice(0,8)}-${t.slice(8,12)}-${t.slice(12,16)}-${t.slice(16,20)}-${t.slice(20)}`}async function Dt(e,t){return e.request("/user/metadata",{fetchOptions:t,decode:_t})}async function zt(e,t,n){return e.request("/user/metadata",{method:"PATCH",body:{expected_version:t.expectedVersion,unsafe_metadata:t.unsafeMetadata},fetchOptions:n,decode:_t})}function _t(e){let t=m(e),n=L(t.public_metadata),i=L(t.unsafe_metadata);if(!Number.isSafeInteger(t.metadata_version)||t.metadata_version<0)throw new TypeError("Invalid AuthOwl metadata response");return {publicMetadata:n,unsafeMetadata:i,metadataVersion:t.metadata_version}}function Nt(e,t){let{post:n,mutation:i}=Q(e,t);return {getMetadata:o=>Dt(e,o),updateUnsafeMetadata:(o,s)=>zt(e,o,s),updateProfile:(o,s)=>i(n("/update-user",o,s,re)),changeEmail:(o,s)=>i(n("/change-email",o,s,re)),changePassword:(o,s)=>i(n("/change-password",o,s,ro)),listSessions:o=>e.request("/list-sessions",{fetchOptions:o,decode:so}),revokeSession:({sessionId:o},s)=>i(n("/revoke-session",{sessionId:o},s,re)),revokeOtherSessions:o=>i(n("/revoke-other-sessions",{},o,re)),listSocialAccounts:async o=>{let s=await e.request("/list-accounts",{fetchOptions:o,decode:ao});if(!s.data)return {data:null,error:s.error};let u=s.data.length>1;return {...s,data:s.data.filter(l=>l.providerId!=="credential").map(l=>({...l,canUnlink:u}))}},linkSocial:(o,s)=>n("/link-social",o,s,co),unlinkSocial:(o,s)=>i(n("/unlink-account",o,s,re)),delete:(o={},s)=>i(n("/delete-user",o,s,uo))}}function re(e){let t=m(e);return {status:I(t.status)}}function ro(e){let t=m(e);return {user:_(t.user)}}function so(e){return Array.isArray(e)||p(),e.map(t=>{let n=m(t);return {id:R(n.id),userId:R(n.userId),createdAt:S(n.createdAt),updatedAt:S(n.updatedAt),expiresAt:S(n.expiresAt),...Ut("ipAddress",P(n,"ipAddress")),...Ut("userAgent",P(n,"userAgent"))}})}function ao(e){return Array.isArray(e)||p(),e.map(t=>{let n=m(t);return {id:R(n.id),userId:R(n.userId),providerId:R(n.providerId),accountId:R(n.accountId),scopes:j(n.scopes),createdAt:S(n.createdAt),updatedAt:S(n.updatedAt)}})}function co(e){let t=m(e);return {url:R(t.url),redirect:I(t.redirect)}}function uo(e){let t=m(e);return {success:I(t.success),message:R(t.message)}}function Ut(e,t){return t===void 0?{}:{[e]:t}}function He(e,t){return !e||!t?false:e.permissions.includes(t)}function lo(e,t){return !e||!t?false:e.teams?.includes(t)??false}function po(e,t){return e?e.roles===void 0?e.role===t:e.roles.includes(t):false}function qe(e,t){if(!e)return  false;let{role:n,permission:i,teamId:o}=t;return !(n===void 0&&i===void 0&&o===void 0||n!==void 0&&!po(e,n)||i!==void 0&&!e.permissions.includes(i)||o!==void 0&&!lo(e,o))}function fo(e){return {has:t=>qe(e,t),hasPermission:t=>He(e,t.permission)}}var go=new Set(["pending","accepted","rejected","canceled"]),Ve=1e4;function Lt(e){let t=m(e);return t.recipientHint!==null&&t.recipientHint!=="new_user"&&p(),{recipientHint:t.recipientHint}}function Z(e,t,n){let i=m(e),o={id:T(i.id),name:T(i.name),slug:T(i.slug),createdAt:S(i.createdAt),...se("logo",P(i,"logo")),...se("metadata",i.metadata===void 0?void 0:Le(i.metadata))};return N(o.id,t),N(o.slug,n),o}function Mt(e){return M(e,Z)}function Ke(e,t,n){return e===null?null:(t===null&&p(),Z(e,t,n))}function Ft(e,t,n){if(e===null)return null;let i=m(e),o=Z(i,t,n);return {...o,members:M(i.members,s=>Xt(s,o.id)),invitations:M(i.invitations,s=>F(s,void 0,o.id))}}function Be(e,t,n=false){let i=M(e,o=>ae(o));return n||ue(i.map(o=>o.organizationId),t),i}function Ht(e,t){let n=M(e,i=>je(i));return ue(n.map(i=>i.teamId),t),n}function je(e,t,n){let i=m(e),o={id:T(i.id),teamId:T(i.teamId),userId:T(i.userId),createdAt:S(i.createdAt)};return N(o.teamId,t),N(o.userId,n),o}function qt(e,t,n){return e===null?null:(t===null&&p(),ae(e,t,n))}function Vt(e,t){let n=m(e);return (!Number.isSafeInteger(n.total)||n.total<0)&&p(),{members:mo(n.members,t),total:n.total}}function F(e,t,n){let i=m(e),o=T(i.status);go.has(o)||p();let s={id:T(i.id),organizationId:T(i.organizationId),email:ce(i.email),role:T(i.role),status:o,inviterId:T(i.inviterId),expiresAt:S(i.expiresAt),createdAt:S(i.createdAt)};return N(s.id,t),N(s.organizationId,n),s}function Kt(e,t){let n=M(e,i=>F(i));return ue(n.map(i=>i.organizationId),t),n}function Bt(e){return M(e,t=>{let n=m(t);return {...F(n),organizationName:ce(n.organizationName)}})}function jt(e,t){let n=m(e);return {...F(n,t),organizationName:T(n.organizationName),organizationSlug:T(n.organizationSlug),inviterEmail:Qt(n.inviterEmail)}}function $t(e,t){let n=m(e),i=F(n.invitation,t);return {invitation:i,member:ee(n.member,void 0,i.organizationId)}}function Jt(e,t){let n=m(e);return n.member!==null&&p(),{invitation:n.invitation===null?null:F(n.invitation,t),member:null}}function Gt(e,t){return e===null?null:F(e,t)}function Wt(e,t,n){let i=m(e);return {member:ee(i.member,n,t)}}function ee(e,t,n){let i=m(e),o={id:T(i.id),organizationId:T(i.organizationId),userId:T(i.userId),role:T(i.role),createdAt:S(i.createdAt),...i.user===void 0?{}:{user:Zt(i.user)}};return N(o.id,t),N(o.organizationId,n),o}function Yt(e,t){let n=M(e,i=>{let o=m(i);return {organizationId:T(o.organizationId),data:{role:T(o.role),...se("permission",o.permission===void 0?void 0:ho(o.permission)),...se("customPermissionKeys",o.customPermissionKeys===void 0?void 0:j(o.customPermissionKeys))}}});return ue(n.map(i=>i.organizationId),t),n.map(i=>i.data)}function ae(e,t,n){let i=m(e),o=i.updatedAt,s={id:T(i.id),name:ce(i.name),organizationId:T(i.organizationId),createdAt:S(i.createdAt),...o===void 0?{}:{updatedAt:S(o)}};return N(s.id,t),N(s.organizationId,n),s}function $e(e){let t=m(e);return {message:ce(t.message)}}function Xt(e,t){let n=m(e);return {...ee(n,void 0,t),user:Zt(n.user)}}function mo(e,t){let n=M(e,i=>Xt(i));return ue(n.map(i=>i.organizationId),t),n}function ho(e){let t=m(e),n={};for(let[i,o]of Object.entries(t))(i==="__proto__"||i==="constructor"||i==="prototype"||i.length===0||i.length>Ve||!Array.isArray(o))&&p(),n[i]=o.map(s=>T(s));return n}function T(e){let t=R(e);return (t.length===0||t.length>Ve)&&p(),t}function ce(e){if(e==null)return "";let t=R(e);return t.length>Ve&&p(),t}function Qt(e){return e===null?null:T(e)}function N(e,t){t!==void 0&&e!==t&&p();}function ue(e,t){let n=t??e[0];n!==void 0&&e.some(i=>i!==n)&&p();}function Zt(e){let t=m(e);return {id:T(t.id),name:ce(t.name),email:Qt(t.email),...se("image",P(t,"image"))}}function M(e,t){return Array.isArray(e)||p(),e.map(n=>t(n))}function se(e,t){return t===void 0?{}:{[e]:t}}function en(e,t,n=()=>null){let{post:i,mutation:o}=Q(e,t),s=new Set,u=()=>{for(let r of s)try{r();}catch{}},l=new Map,c=(r,a,f,b)=>{if(f)return e.request(r,{query:a,fetchOptions:f,decode:b});let d=`${r}\0${JSON.stringify(a??null)}`,g=l.get(d);if(g)return g;let A=e.request(r,{query:a,decode:b}).finally(()=>{l.delete(d);});return l.set(d,A),A},h=async r=>{let a=await o(r).finally(()=>l.clear());return a.error===null&&u(),a};return {subscribe(r){return s.add(r),()=>s.delete(r)},create:(r,a)=>h(i("/organization/create",r,a,Z)),list:r=>c("/organization/list",void 0,r,Mt),get:(r={},a)=>c("/organization/get-full-organization",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,membersLimit:r.membersLimit},a,f=>Ft(f,r.organizationId,r.organizationSlug)),setActive:(r,a)=>h(i("/organization/set-active",r,a,f=>Ke(f,r.organizationId,r.organizationSlug))),createTeam:(r,a)=>h(i("/organization/create-team",r,a,f=>ae(f,void 0,r.organizationId))),listTeams:(r={},a)=>c("/organization/list-teams",{organizationId:r.organizationId},a,f=>Be(f,r.organizationId)),updateTeam:(r,a)=>h(i("/organization/update-team",r,a,f=>ae(f,r.teamId,r.data.organizationId))),removeTeam:(r,a)=>h(i("/organization/remove-team",r,a,$e)),listUserTeams:r=>c("/organization/list-user-teams",void 0,r,a=>Be(a,void 0,true)),listTeamMembers:(r={},a)=>c("/organization/list-team-members",{teamId:r.teamId},a,f=>Ht(f,r.teamId)),addTeamMember:(r,a)=>h(i("/organization/add-team-member",r,a,f=>je(f,r.teamId,r.userId))),removeTeamMember:(r,a)=>h(i("/organization/remove-team-member",r,a,$e)),setActiveTeam:(r,a)=>h(i("/organization/set-active-team",r,a,f=>qt(f,r.teamId))),update:(r,a)=>h(i("/organization/update",r,a,f=>Ke(f,r.organizationId))),delete:(r,a)=>h(i("/organization/delete",r,a,f=>Z(f,r.organizationId))),listMembers:(r={},a)=>c("/organization/list-members",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,limit:r.limit,offset:r.offset,sortBy:r.sortBy,sortDirection:r.sortDirection,filterField:r.filterField,filterValue:r.filterValue,filterOperator:r.filterOperator},a,f=>Vt(f,r.organizationId)),inviteMember:(r,a)=>h(i("/organization/invite-member",r,a,f=>F(f,void 0,r.organizationId))),listInvitations:(r={},a)=>c("/organization/list-invitations",{organizationId:r.organizationId},a,f=>Kt(f,r.organizationId)),listUserInvitations:r=>c("/organization/list-user-invitations",void 0,r,Bt),getInvitation:(r,a)=>c("/organization/get-invitation",{id:r.id},a,f=>jt(f,r.id)),getInvitationRecipientHint:(r,a)=>c("/organization/invitation-recipient-hint",{invitationId:r.invitationId},a,Lt),acceptInvitation:(r,a)=>h(i("/organization/accept-invitation",r,a,f=>$t(f,r.invitationId))),rejectInvitation:(r,a)=>h(i("/organization/reject-invitation",r,a,f=>Jt(f,r.invitationId))),cancelInvitation:(r,a)=>h(i("/organization/cancel-invitation",r,a,f=>Gt(f,r.invitationId))),removeMember:(r,a)=>h(i("/organization/remove-member",r,a,f=>Wt(f,r.organizationId,r.memberIdOrEmail.includes("@")?void 0:r.memberIdOrEmail))),updateMemberRole:(r,a)=>h(i("/organization/update-member-role",r,a,f=>ee(f,r.memberId,r.organizationId))),leave:(r,a)=>h(i("/organization/leave",r,a,f=>ee(f,void 0,r.organizationId))),listRoles:(r={},a)=>c("/organization/list-roles",{organizationId:r.organizationId},a,f=>Yt(f,r.organizationId)),has:r=>qe(n(),r),hasPermission:r=>He(n(),r.permission)}}function tn(e){return {listConsentPreferences:t=>e.request("/privacy/consent-decisions",{fetchOptions:t,decode:yo}),recordConsent:(t,n)=>e.request("/privacy/consent-decisions",{method:"POST",body:{...t,correlationId:t.correlationId??$()},fetchOptions:n,decode:bo}),listRightsRequests:t=>e.request("/privacy/rights",{fetchOptions:t,decode:Oo}),createRightsRequest:(t,n)=>e.request("/privacy/rights",{method:"POST",body:t,fetchOptions:n,decode:wo})}}function yo(e){let t=m(e);return Array.isArray(t.preferences)||p(),{preferences:t.preferences.map(Ao)}}function Ao(e){let t=m(e);return {purposeId:R(t.purposeId),purposeVersionId:R(t.purposeVersionId),code:R(t.code),state:Ro(t.state,["granted","refused","withdrawn"]),updatedAt:he(t.updatedAt),decidedAt:he(t.decidedAt)}}function bo(e){let t=m(e);return t.recorded!==true&&p(),{recorded:true,decision:de(t.decision,["granted","refused","withdrawn"]),decidedAt:ye(t.decidedAt)}}function Oo(e){let t=m(e);return Array.isArray(t.requests)||p(),{requests:t.requests.map(nn)}}function wo(e){return {request:nn(m(e).request)}}function nn(e){let t=m(e);return {id:R(t.id),rightType:de(t.rightType,["access","correction","portability","erasure","restriction","objection","consent_withdrawal"]),state:de(t.state,["received","identity_pending","in_progress","restricted","completed","denied","withdrawn"]),locale:de(t.locale,["en","ar"]),receivedAt:ye(t.receivedAt),acknowledgedAt:he(t.acknowledgedAt),fulfilmentDeadline:ye(t.fulfilmentDeadline),completedAt:he(t.completedAt)}}function he(e){return e===null?null:ye(e)}function ye(e){if(e instanceof Date)return S(e);typeof e!="string"&&p();let t=new Date(e);return Number.isNaN(t.getTime())&&p(),t}function de(e,t){return (typeof e!="string"||!t.includes(e))&&p(),e}function Ro(e,t){return e===null?null:de(e,t)}var on=4096,ko=4096,So=100,To=256,Io=16,Po=64,vo=12;function Ge(e){let t=m(e);return t.twoFactorRedirect===true?((t.user!==void 0||t.redirect!==void 0||t.url!==void 0)&&p(),{twoFactorRedirect:true,...t.twoFactorMethods===void 0?{}:{twoFactorMethods:Rn(t.twoFactorMethods,Io,Po)}}):(t.twoFactorRedirect!==void 0&&p(),{redirect:I(t.redirect),...zo(t,"url"),user:_(t.user)})}function rn(e){let t=m(e);return {user:_(t.user)}}function sn(e){let t=m(e);return {sessionCreated:I(t.sessionCreated),user:_(t.user)}}function an(e,t){let n=m(e),i=I(n.redirect);n.user===null&&p();let o=n.user!==void 0&&n.user!==null,s=n.url!==void 0&&n.url!==null;return i?((o||!s)&&p(),{redirect:true,url:Je(n.url,t)}):(o===s&&p(),o?{redirect:false,user:_(n.user)}:{redirect:false,url:Je(n.url,t)})}function cn(e,t){let n=m(e);return (n.redirect!==true||n.user!==void 0)&&p(),{redirect:true,url:Je(n.url,t)}}function un(e){return {status:I(m(e).status)}}function dn(e){return {success:I(m(e).success)}}function ln(e){return m(e).status!=="pending"&&p(),{status:"pending"}}function pn(e){let t=m(e);if(t.kind==="authowl_turnstile")return {kind:"authowl_turnstile"};t.kind!=="akedly_shield_v1_2"&&p();let n=m(t.turnstile),i=n.siteKey===null?null:R(n.siteKey);return {kind:"akedly_shield_v1_2",connectionId:R(t.connectionId),challenge:R(t.challenge),difficulty:Co(t.difficulty),challengeToken:R(t.challengeToken),challengeRequired:I(t.challengeRequired),turnstile:{required:I(n.required),siteKey:i}}}function Co(e){return (!Number.isSafeInteger(e)||Number(e)<0||Number(e)>vo)&&p(),Number(e)}function fn(e){let t=m(e);return (t.status!==true||t.sessionCreated!==true)&&p(),{status:true,sessionCreated:true,user:xo(t.user)}}function We(e){return {status:I(m(e).status)}}function gn(e){return {status:I(m(e).status)}}function mn(e){let t=m(e);return {status:I(t.status),user:_(t.user)}}function hn(e){return {success:I(m(e).success)}}function yn(e){let t=m(e);return {totpURI:Do(t.totpURI),backupCodes:wn(t.backupCodes)}}function An(e){return {status:I(m(e).status)}}function Ae(e){return m(e).status!==true&&p(),{status:true}}function bn(e){return {status:I(m(e).status)}}function On(e){let t=m(e);return t.status!==void 0&&t.status!==true&&p(),{backupCodes:wn(t.backupCodes)}}function xo(e){let t=m(e);return {id:te(t.id,512),..._o(t,"name",1024),phoneNumber:te(t.phoneNumber,64),phoneNumberVerified:I(t.phoneNumberVerified),...t.createdAt===void 0?{}:{createdAt:S(t.createdAt)},...t.updatedAt===void 0?{}:{updatedAt:S(t.updatedAt)}}}function Je(e,t){let n=te(e,on);/[\u0000-\u0020\u007f]/u.test(n)&&p();let i;try{i=new URL(n);}catch{return p()}return (i.username||i.password)&&p(),i.protocol==="https:"||t&&i.protocol==="http:"&&Eo(i.hostname)?i.href:p()}function Eo(e){let t=e.toLowerCase();return t==="localhost"||t==="127.0.0.1"||t==="[::1]"}function Do(e){let t=te(e,ko),n;try{n=new URL(t);}catch{return p()}let i=n.searchParams.get("secret");return (n.protocol!=="otpauth:"||n.hostname.toLowerCase()!=="totp"||n.username||n.password||n.hash||i===null||i.length===0||i.length>512||/\s/u.test(i))&&p(),t}function wn(e){return Rn(e,So,To)}function Rn(e,t,n){(!Array.isArray(e)||e.length===0||e.length>t)&&p();let i=e.map(o=>te(o,n));return i.some(o=>o.trim().length===0)&&p(),new Set(i).size!==i.length&&p(),i}function te(e,t){let n=R(e);return (n.length===0||n.length>t)&&p(),n}function zo(e,t){let n=e[t];return n==null?{}:{[t]:te(n,on)}}function _o(e,t,n){let i=P(e,t);return i===void 0?{}:(i!==null&&i.length>n&&p(),{[t]:i})}var kn=new Set([1564,8206,8207,8234,8235,8236,8237,8238,8294,8295,8296,8297]),be=new Set([9,10,11,12,13,32,133,160,5760,8192,8193,8194,8195,8196,8197,8198,8199,8200,8201,8202,8232,8233,8239,8287,12288,65279]);function Oe(e){if(e===void 0)return {valid:true,value:void 0};for(let n of e){let i=n.codePointAt(0);if(i===void 0||Tn(n,i)||Sn(i)||kn.has(i))return {valid:false}}let t=Uo(e);return Ye(t)?{valid:true,value:t}:{valid:false}}function Ye(e){let t=0,n,i;for(let o of e){if(t+=1,t>256)return  false;let s=o.codePointAt(0);if(s===void 0||Tn(o,s)||Sn(s)||kn.has(s))return  false;n??=s,i=s;}return t>0&&n!==void 0&&i!==void 0&&!be.has(n)&&!be.has(i)}function we(){return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:"INVALID_PASSKEY_NAME",message:"Passkey names must contain 1 to 256 safe Unicode characters."}}}function Uo(e){let t=0,n=e.length;for(;t<n;){let i=e.codePointAt(t);if(i===void 0||!be.has(i))break;t+=i>65535?2:1;}for(;n>t;){let i=e.codePointAt(n-1);if(i===void 0)break;let s=i>=56320&&i<=57343?n-2:n-1,u=e.codePointAt(s);if(u===void 0||!be.has(u))break;n=s;}return e.slice(t,n)}function Sn(e){return e>=0&&e<=31||e>=127&&e<=159}function Tn(e,t){return e.length===1&&t>=55296&&t<=57343}var vn=12,Cn=5e3,No=8,Lo=1e3,Mo=16,In=512,xn=100,En=8192,Fo=32768,Xe=1024,Pn=256,Ze=64,Ho=6e5,qo=/^[A-Za-z0-9_-]+$/u,Vo=/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u,Ko=/[\u0000-\u001f\u007f-\u009f\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]/u,Bo=/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?$/u,jo=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu,Dn=new Set(["discouraged","preferred","required"]),$o=new Set(["singleDevice","multiDevice"]),zn=new Set(["ble","cable","hybrid","internal","nfc","smart-card","usb"]),_n=new Set(["hybrid","security-key","client-device"]),Jo=new Set(["none","indirect","direct","enterprise"]),Go=new Set(["fido-u2f","packed","android-safetynet","android-key","tpm","apple","none"]),Wo=new Set(["platform","cross-platform"]),Yo=new Set(["discouraged","preferred","required"]),Xo=new Set([-8,-7,-257]);function Un(e){let t=L(e,vn,Cn);return {challenge:jn(t.challenge),...C("timeout",Kn(t.timeout)),...C("rpId",$n(t.rpId)),...C("allowCredentials",Vn(t.allowCredentials)),...C("userVerification",le(t.userVerification,Dn)),...C("hints",Re(t.hints,_n)),...C("extensions",Bn(t.extensions))}}function Nn(e){let t=L(e,vn,Cn);return {challenge:jn(t.challenge),rp:Qo(t.rp),user:Zo(t.user),pubKeyCredParams:er(t.pubKeyCredParams),...C("timeout",Kn(t.timeout)),...C("excludeCredentials",Vn(t.excludeCredentials)),...C("authenticatorSelection",tr(t.authenticatorSelection)),...C("attestation",le(t.attestation,Jo)),...C("attestationFormats",Re(t.attestationFormats,Go)),...C("hints",Re(t.hints,_n)),...C("extensions",Bn(t.extensions))}}function Ln(e){let t=m(e),n=me(t.session),i=_(t.user);return n.userId!==i.id&&p(),{session:n,user:i}}function et(e){let t=m(e),n=t.counter;(!Number.isSafeInteger(n)||n<0)&&p();let i=tt(t.deviceType,$o),o=I(t.backedUp);return o&&i!=="multiDevice"&&p(),{id:ne(t.id,Pn),...or(t),publicKey:nr(t.publicKey,Fo),userId:ne(t.userId,Pn),credentialID:Se(t.credentialID,En),counter:n,deviceType:i,backedUp:o,...rr(t),createdAt:S(t.createdAt),...sr(t)}}function Mn(e,t,n){let i=et(e);return (i.credentialID!==t||(n===void 0?i.name!==void 0&&i.name!==null:i.name!==n))&&p(),i}function Fn(e){(!Array.isArray(e)||e.length>xn)&&p();let t=e.map(et);return ke(t.map(n=>n.id)),ke(t.map(n=>n.credentialID)),t.length>1&&t.some(n=>n.userId!==t[0]?.userId)&&p(),t}function Hn(e,t,n){let i=m(e),o=et(i.passkey);return (o.id!==t||o.name!==n)&&p(),{passkey:o}}function qn(e){return m(e).status!==true&&p(),{status:true}}function Qo(e){let t=m(e);return {name:Qe(t.name,Xe),...C("id",$n(t.id))}}function Zo(e){let t=m(e);return {id:Se(t.id,128,1,64),name:Qe(t.name,Xe),displayName:Qe(t.displayName,Xe)}}function er(e){(!Array.isArray(e)||e.length===0||e.length>Ze)&&p();let t=e.map(n=>{let i=m(n);return (i.type!=="public-key"||!Number.isSafeInteger(i.alg)||!Xo.has(i.alg))&&p(),{type:"public-key",alg:i.alg}});return ar(t.map(n=>n.alg)),t}function Vn(e){if(e===void 0)return;(!Array.isArray(e)||e.length>xn)&&p();let t=e.map(n=>{let i=m(n);return i.type!=="public-key"&&p(),{type:"public-key",id:Se(i.id,En),...C("transports",Re(i.transports,zn))}});return ke(t.map(n=>n.id)),t}function tr(e){if(e===void 0)return;let t=m(e);t.requireResidentKey!==void 0&&typeof t.requireResidentKey!="boolean"&&p();let n=le(t.residentKey,Yo);return t.requireResidentKey!==void 0&&n!==void 0&&t.requireResidentKey!==(n==="required")&&p(),{...C("authenticatorAttachment",le(t.authenticatorAttachment,Wo)),...C("residentKey",n),...C("requireResidentKey",t.requireResidentKey),...C("userVerification",le(t.userVerification,Dn))}}function Kn(e){return e!==void 0&&(typeof e!="number"||!Number.isFinite(e)||e<0||e>Ho)&&p(),e}function Bn(e){return e===void 0?void 0:L(e,No,Lo)}function Re(e,t){if(e===void 0)return;(!Array.isArray(e)||e.length>Ze)&&p();let n=e.map(i=>tt(i,t));return ke(n),n}function le(e,t){if(e!==void 0)return tt(e,t)}function jn(e){return Se(e,Math.ceil(In*4/3),Mo,In)}function Se(e,t,n=1,i=Number.POSITIVE_INFINITY){let o=ne(e,t),s=o.length%4,u=ir(o.at(-1)??""),l=Math.floor(o.length*3/4);return (!qo.test(o)||s===1||s===2&&(u&15)!==0||s===3&&(u&3)!==0||l<n||l>i)&&p(),o}function ne(e,t){let n=R(e);return (n.length===0||n.length>t)&&p(),n}function Qe(e,t){let n=ne(e,t);return Ko.test(n)&&p(),n}function $n(e){if(e===void 0)return;let t=ne(e,253);return t!=="localhost"&&(t.endsWith(".")||!t.includes(".")||t.split(".").some(n=>!Bo.test(n)))&&p(),t}function nr(e,t){let n=ne(e,t),i=n.endsWith("=="),o=!i&&n.endsWith("="),s=n.at(i?-3:o?-2:-1)??"",u=Jn(s);return (n.length%4!==0||!Vo.test(n)||i&&(u&15)!==0||o&&(u&3)!==0)&&p(),n}function ir(e){return Jn(e,true)}function Jn(e,t=false){return (t?"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_":"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/").indexOf(e)}function or(e){let t=P(e,"name");return t===void 0?{}:(t!==null&&!Ye(t)&&p(),{name:t})}function rr(e){let t=P(e,"transports");if(t==null||t==="")return t===void 0?{}:{transports:t};let n=t.split(",");return (n.length>Ze||n.some(i=>!zn.has(i))||new Set(n).size!==n.length)&&p(),{transports:t}}function sr(e){let t=P(e,"aaguid");return t==null?t===void 0?{}:{aaguid:null}:(jo.test(t)||p(),{aaguid:t})}function tt(e,t){let n=R(e);return t.has(n)||p(),n}function C(e,t){return t===void 0?{}:{[e]:t}}function ke(e){new Set(e).size!==e.length&&p();}function ar(e){new Set(e).size!==e.length&&p();}function hr(e,t){if(!t)return e;let n=t.catch(()=>{});return n.then(()=>{n=null;}),{async request(i,o){return n&&await n,e.request(i,o)}}}var Zn=new Map;function yr(e,t,n){let i=Zn.get(n);if(!i){let o=new URLSearchParams(window.location.hash.slice(1)).get("authowl_code");if(!o)return;i=Promise.resolve().then(()=>(Ie(),Te)).then(s=>s.completeCrossSiteSignIn(e,t,o)),Zn.set(n,i);}return i}function ei(e){return !oe()||e.idToken||e.disableRedirect?"legacy":"first-party"}function Ar(e,t=()=>{},n=wr){let i=Ue(e),o=e.session.tokens,s=oe()?yr(i,o,e.decoded.projectId):void 0,u=hr(i,s),l=Et({http:u,probe:Ue({...e,fetch:e.session.probe}),tokens:o,channelName:`authowl:${e.decoded.projectId}`}),c=n(u,l.notifyMutation),h=()=>{l.notifyMutation(),t();},{post:r,mutation:a}=Q(u,h),f=e.decoded.env==="test",b=d=>{o.beginSession({remember:d?.rememberMe!==false});};return {sessionStore:l.store,getSession:l.getSession,account:Nt(u,h),organization:en(u,h,()=>l.store.getSnapshot().data?.session.membership??null),privacy:tn(u),signIn:{email:(d,g)=>(b(d),a(r("/sign-in/email",d,g,Ge),A=>!("twoFactorRedirect"in A))),username:(d,g)=>(b(d),a(r("/sign-in/username",d,g,Ge),A=>!("twoFactorRedirect"in A))),social:async(d,g)=>{if(b(),ei(d)==="first-party"){let{beginCrossSiteSignIn:O}=await Promise.resolve().then(()=>(Ie(),Te)),k=await O(e,{kind:"social",provider:d.provider,callbackURL:d.callbackURL,errorCallbackURL:d.errorCallbackURL,newUserCallbackURL:d.newUserCallbackURL,scopes:d.scopes,loginHint:d.loginHint,requestSignUp:d.requestSignUp});if(k)return window.location.assign(k),{data:{redirect:true,url:k},error:null}}let A=await a(r("/sign-in/social",d,g,O=>an(O,f)),O=>"user"in O);return A.error!==null||A.data===null||"url"in A.data&&A.data.redirect&&!d.disableRedirect&&typeof window<"u"&&window.location.assign(A.data.url),A},sso:async(d,g)=>{if(ei(d)==="first-party"){let{beginCrossSiteSignIn:O}=await Promise.resolve().then(()=>(Ie(),Te)),k=await O(e,{kind:"sso",email:d.email,providerId:d.providerId,domain:d.domain,organizationSlug:d.organizationSlug,callbackURL:d.callbackURL,errorCallbackURL:d.errorCallbackURL,newUserCallbackURL:d.newUserCallbackURL});if(k)return window.location.assign(k),{data:{url:k,redirect:true},error:null}}let A=await r("/sign-in/sso",d,g,O=>cn(O,f));return A.error!==null||A.data===null||typeof window<"u"&&window.location.assign(A.data.url),A},magicLink:(d,g)=>r("/sign-in/magic-link",d,g,un),emailOtp:(d,g)=>(b(),a(r("/sign-in/email-otp",d,g,rn))),passkey:(d,g)=>(b(),c.signIn(d,g))},signUp:{email:(d,g)=>(b(),a(r("/sign-up/email",d,g,sn),A=>A.sessionCreated))},emailOtp:{sendVerificationOtp:(d,g)=>r("/email-otp/send-verification-otp",d,g,dn),verifyEmail:(d,g)=>(b(),a(r("/email-otp/verify-email",d,g,mn)))},phoneOtp:{prepare:d=>r("/phone-otp/challenge",{},d,pn),start:(d,g)=>r("/phone-otp/start",{...d,idempotencyKey:d.idempotencyKey??$()},g,ln),verify:(d,g)=>(b(),a(r("/phone-otp/verify",d,g,fn)))},requestPasswordReset:(d,g)=>r("/request-password-reset",d,g,We),resetPassword:(d,g)=>r("/reset-password",d,g,We),sendVerificationEmail:(d,g)=>r("/send-verification-email",d,g,gn),passkey:{addPasskey:(d,g)=>c.add(d,g),listUserPasskeys:()=>u.request("/passkey/list-user-passkeys",{decode:Fn}),updatePasskey:async(d,g)=>{let A=Oe(d.name);if(!A.valid||A.value===void 0)return we();let O=A.value;return r("/passkey/update-passkey",{...d,name:O},g,k=>Hn(k,d.id,O))},deletePasskey:(d,g)=>r("/passkey/delete-passkey",d,g,qn)},twoFactor:{enable:(d,g)=>r("/two-factor/enable",d,g,yn),disable:(d,g)=>a(r("/two-factor/disable",d,g,An),A=>A.status),verifyTotp:(d,g)=>a(r("/two-factor/verify-totp",d,g,Ae)),verifyBackupCode:(d,g)=>a(r("/two-factor/verify-backup-code",d,g,Ae)),sendOtp:(d={},g)=>r("/two-factor/send-otp",d,g,bn),verifyOtp:(d,g)=>a(r("/two-factor/verify-otp",d,g,Ae)),generateBackupCodes:(d,g)=>r("/two-factor/generate-backup-codes",d,g,On)},signOut:d=>a(u.request("/sign-out",{method:"POST",body:{},fetchOptions:d,decode:hn}).then(g=>(o.endSession(),g)),g=>g.success)}}function ot(e,t=()=>{},n){let i=Ar(e,t,n);return n?{...i,signIn:{email:i.signIn.email,username:i.signIn.username,social:ti(i),magicLink:i.signIn.magicLink,emailOtp:i.signIn.emailOtp,passkey:i.signIn.passkey},passkey:{listUserPasskeys:i.passkey.listUserPasskeys,updatePasskey:i.passkey.updatePasskey,deletePasskey:i.passkey.deletePasskey,addPasskey:i.passkey.addPasskey}}:{...i,signIn:{email:i.signIn.email,username:i.signIn.username,social:ti(i),magicLink:i.signIn.magicLink,emailOtp:i.signIn.emailOtp},passkey:{listUserPasskeys:i.passkey.listUserPasskeys,updatePasskey:i.passkey.updatePasskey,deletePasskey:i.passkey.deletePasskey}}}function ti(e){return async(t,n)=>{if(!t?.idToken||typeof t.idToken.token!="string"||t.idToken.token==="")return br();let i=await e.signIn.social({...t,disableRedirect:true},n);return i.data!==null&&"url"in i.data?Or():i}}function br(){return Promise.resolve({data:null,error:{status:400,statusText:"BAD_REQUEST",code:"NATIVE_SOCIAL_ID_TOKEN_REQUIRED",message:"Native social sign-in requires a provider ID token."}})}function Or(){return Promise.resolve({data:null,error:{status:502,statusText:"BAD_GATEWAY",code:"INVALID_NATIVE_SOCIAL_RESPONSE",message:"The server returned a redirect for native ID-token sign-in."}})}function wr(){return {signIn:()=>ni(),add:()=>ni()}}function ni(){return Promise.resolve({data:null,error:{status:400,statusText:"BAD_REQUEST",code:"PASSKEY_BROWSER_REQUIRED",message:"This passkey ceremony requires a browser with WebAuthn."}})}function Rr(e,t,n){let i=new Map;return {async signIn(o={},s){let u=await e.request("/passkey/generate-authenticate-options");if(!u.data)return ri(u.error);let l;try{l=Un(u.data);}catch{return ii()}let c;try{c=await n.authenticate({optionsJSON:l,useBrowserAutofill:o.autoFill});}catch(b){return si(n,b,"AUTH_CANCELLED","Passkey authentication was cancelled.")}if(!kr(c))return oi();let{clientExtensionResults:h,...r}=c,a=i.get(c.id);if(a)return a;let f=(async()=>{let b=await e.request("/passkey/verify-authentication",{method:"POST",body:{response:r},fetchOptions:s,decode:Ln});return b.data&&t(),b})();i.set(c.id,f);try{return await f}finally{i.get(c.id)===f&&i.delete(c.id);}},async add(o={},s){let u=Oe(o.name);if(!u.valid)return we();let l=await e.request("/passkey/generate-register-options",{query:{name:u.value,authenticatorAttachment:o.authenticatorAttachment}});if(!l.data)return ri(l.error);let c;try{c=Nn(l.data);}catch{return ii()}let h;try{h=await n.register({optionsJSON:c});}catch(b){return si(n,b,"REGISTRATION_CANCELLED","Passkey registration was cancelled.")}if(!Sr(h))return oi();let{clientExtensionResults:r,...a}=h,f=await e.request("/passkey/verify-registration",{method:"POST",body:{response:a,name:u.value},fetchOptions:s,decode:b=>Mn(b,h.id,u.value)});return f.data&&t(),f}}}function ii(){return {data:null,error:{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned invalid WebAuthn options."}}}function oi(){return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:"INVALID_WEBAUTHN_RESPONSE",message:"The platform returned an invalid passkey response."}}}function ci(e){if(!e||typeof e!="object")return  false;let t=e;return typeof t.id=="string"&&t.id.length>0&&typeof t.rawId=="string"&&t.rawId.length>0&&t.type==="public-key"&&!!t.response&&typeof t.response=="object"}function kr(e){if(!ci(e))return  false;let t=e.response;return typeof t.clientDataJSON=="string"&&typeof t.authenticatorData=="string"&&typeof t.signature=="string"&&(t.userHandle===void 0||typeof t.userHandle=="string")}function Sr(e){if(!ci(e))return  false;let t=e.response;return typeof t.clientDataJSON=="string"&&typeof t.attestationObject=="string"}function ri(e){return {data:null,error:e??{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned no WebAuthn options."}}}function si(e,t,n,i){let o=Ir(t,"page does not have focus"),s=e.errorCode?.(t),u=s!==void 0?s==="ERROR_CEREMONY_ABORTED":ai(t)==="AbortError",l=n!=="AUTH_CANCELLED",c=Tr(s,ai(t),l);return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:o?"PASSKEY_PAGE_NOT_FOCUSED":u?n:s??"PASSKEY_BROWSER_ERROR",message:o?"Keep this page focused while completing the passkey prompt.":u?i:c}}}function Tr(e,t,n){switch(e){case "ERROR_INVALID_DOMAIN":case "ERROR_INVALID_RP_ID":return "Passkeys are not set up for this site\u2019s domain.";case "ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED":return "This device already has a passkey for this account.";case "ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEY_ALGS":case "ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT":case "ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT":return "This device cannot create a passkey for this site.";}return t==="NotAllowedError"?n?"No passkey was created. The prompt was dismissed or timed out.":"No passkey was used. This device may not have one saved for this site yet, or the prompt was dismissed.":t==="SecurityError"?"Passkeys are not set up for this site\u2019s domain.":n?"Passkey registration did not complete.":"Passkey sign-in did not complete."}function ai(e){return e&&typeof e=="object"&&"name"in e&&typeof e.name=="string"?e.name:void 0}function Ir(e,t){let n=t.toLowerCase(),i=new Set,o=e;for(;o&&typeof o=="object"&&!i.has(o);){if(i.add(o),"message"in o&&typeof o.message=="string"&&o.message.toLowerCase().includes(n))return  true;o="cause"in o?o.cause:void 0;}return  false}async function Pr(e){let t=`${e.apiUrl}/api/projects/${e.decoded.projectId}/public-config`;return It(await ge(e,t,{init:{method:"GET",credentials:"omit"},maxResponseBytes:256*1024,decode:n=>vr(n,e)}),"public-config")}function vr(e,t){let n=L(e),i=n.environmentId,o=n.environmentType,s=`${t.apiUrl}/api/projects/${t.decoded.projectId}/auth`;if(typeof n.applicationId!="string"||!rt(n.applicationId)||i!==t.decoded.projectId||o!=="development"&&o!=="production"||n.authBaseUrl!==s)throw x();let u=v(n.branding),l=v(n.legal);if(!J(n.enabledMethods,64)||!J(n.socialProviders,64)||!pi(u,["appName","logoUrl","primaryColor"])||u.showAppName!==void 0&&typeof u.showAppName!="boolean"||u.alignment!==void 0&&u.alignment!=="left"&&u.alignment!=="center"&&u.alignment!=="right"||u.theme!==void 0&&u.theme!=="light"&&u.theme!=="dark"&&u.theme!=="system"||!pi(l,["termsUrl","privacyUrl"])||!Number.isSafeInteger(l.version)||l.version<0||typeof l.required!="boolean")throw x();if(n.socialProviderClientIds!==void 0){let c=v(n.socialProviderClientIds);if(Object.keys(c).length>64||Object.values(c).some(h=>typeof h!="string"||h.length>2048))throw x()}if(!H(n,["requireEmailVerification","twoFactor","mfaRequired","accountDeletion","organizations","sso","badge"])||!ui(n.turnstileSiteKey)||!ui(n.authTurnstileSiteKey)||typeof n.locale!="string"||n.locale.length===0||n.locale.length>64||!Number.isSafeInteger(n.configVersion)||n.configVersion<0)throw x();if(n.jwtIssuer!==null){let c=v(n.jwtIssuer),h=new URL(c.issuer),r=`${h.origin}/api/projects/${t.decoded.projectId}/auth`;if(c.issuer!==r||c.jwksUrl!==`${r}/jwks`||c.aud!==t.decoded.projectId||h.protocol!=="https:"&&h.origin!==t.apiUrl)throw x()}if(n.signUp!==void 0){let c=v(n.signUp).mode;if(typeof c!="string"||!["open","restricted","allowlist","waitlist"].includes(c))throw x()}if(n.authentication!==void 0&&Cr(n.authentication),n.privacy!==void 0&&xr(n.privacy),n.emailVerification!==void 0){let c=v(n.emailVerification);if(!H(c,["required"])||c.method!=="link"&&c.method!=="code")throw x()}if(n.userModel!==void 0&&!H(v(n.userModel),["requireEmail","firstLastName","emailChange","accountDeletion"]))throw x();if(n.mfa!==void 0){let c=v(n.mfa);if(!H(c,["totp","required","backupCodes"])||(c.required===true||c.backupCodes===true)&&c.totp!==true)throw x()}if(n.captcha===void 0||n.captcha===null)n.captcha=typeof n.authTurnstileSiteKey=="string"&&n.authTurnstileSiteKey.length>0?{provider:"turnstile",siteKey:n.authTurnstileSiteKey}:null;else {let c=v(n.captcha);if(typeof c.provider!="string"||c.provider.length===0||c.provider.length>64||typeof c.siteKey!="string"||c.siteKey.length===0||c.siteKey.length>512)throw x();n.captcha={provider:c.provider,siteKey:c.siteKey};}return n}function rt(e){return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(e)}function x(){return new TypeError("public-config returned an invalid response")}function v(e){if(!e||typeof e!="object"||Array.isArray(e))throw x();return e}function ui(e){return e===null||typeof e=="string"&&e.length<=4096}function Cr(e){let t=v(e),n=v(t.email),i=v(t.password),o=i.minLength!==void 0||i.maxLength!==void 0;if(!H(n,["signUp"])||!J(n.signIn,3)||n.signIn.some(s=>s!=="password"&&s!=="magic_link"&&s!=="email_otp")||!H(v(t.phone),["signUp","signIn"])||!H(i,["signUp","add"])||o&&(!Number.isSafeInteger(i.minLength)||!Number.isSafeInteger(i.maxLength)||i.minLength<1||i.maxLength>4096||i.minLength>i.maxLength)||!H(v(t.passkey),["signIn","add"])||!Er(v(t.passkey).relyingPartyId)||!H(v(t.username),["collectOnSignUp","signIn"]))throw x()}function xr(e){let t=v(e);if(!Array.isArray(t.notices)||!Array.isArray(t.consentPurposes)||t.notices.length>64||t.consentPurposes.length>64)throw x();for(let n of t.notices){let i=v(n);if(di(i,"noticeId","noticeVersionId"),Pe(i.title,512),Pe(i.body,1e5),li(i.digest),!J(i.activityCodes,128)||!J(i.purposeCodes,128)||typeof i.effectiveFrom!="string"||!Number.isFinite(Date.parse(i.effectiveFrom)))throw x()}for(let n of t.consentPurposes){let i=v(n);if(di(i,"purposeId","purposeVersionId"),Pe(i.title,512),Pe(i.description,1e4),li(i.digest),!J(i.activityCodes,128)||!J(i.dataCategories,128))throw x()}}function di(e,t,n){if(typeof e[t]!="string"||!rt(e[t])||typeof e[n]!="string"||!rt(e[n])||typeof e.code!="string"||!/^[a-z][a-z0-9_]{0,63}$/.test(e.code)||!Number.isSafeInteger(e.version)||e.version<1)throw x()}function Pe(e,t){let n=v(e);if(typeof n.en!="string"||n.en.length===0||n.en.length>t||typeof n.ar!="string"||n.ar.length===0||n.ar.length>t)throw x()}function li(e){let t=v(e);if(typeof t.en!="string"||!/^[a-f0-9]{64}$/.test(t.en)||typeof t.ar!="string"||!/^[a-f0-9]{64}$/.test(t.ar))throw x()}function Er(e){return e==null||typeof e=="string"}function H(e,t){return t.every(n=>typeof e[n]=="boolean")}function pi(e,t){return t.every(n=>e[n]===void 0||typeof e[n]=="string"&&e[n].length<=4096)}function J(e,t){return Array.isArray(e)&&e.length<=t&&e.every(n=>typeof n=="string"&&n.length<=128)&&new Set(e).size===e.length}var fi=["en","ar"];function Dr(e){return e==="ar"?"rtl":"ltr"}function zr(e){return typeof e=="string"&&fi.includes(e)}function _r(e,t,n,i=$()){return {locale:t,correlationId:i,noticeVersionIds:e.notices.map(o=>o.noticeVersionId),consentDecisions:e.consentPurposes.flatMap(o=>{let s=e.notices.find(u=>u.purposeCodes.includes(o.code));return s?[{purposeCode:o.code,purposeVersionId:o.purposeVersionId,noticeVersionId:s.noticeVersionId,decision:n.has(o.code)?"granted":"refused",guardianRequired:false,guardianEvidenceId:null}]:[]})}}function Ur(e){let t=e?.enabledMethods??["password"],n=t.includes("password"),i=t.includes("passkey"),o=e?.authentication,s=e?.mfa;return {emailSignUp:o?.email.signUp??t.some(u=>u==="password"||u==="magic_link"||u==="email_otp"),passwordSignUp:o?.password.signUp??n,phoneSignUp:o?.phone.signUp??t.includes("phone_otp"),passwordSignIn:o?.email.signIn.includes("password")??n,passwordMinLength:o?.password.minLength??8,passwordMaxLength:o?.password.maxLength??128,magicLinkSignIn:o?.email.signIn.includes("magic_link")??t.includes("magic_link"),emailOtpSignIn:o?.email.signIn.includes("email_otp")??t.includes("email_otp"),phoneSignIn:o?.phone.signIn??t.includes("phone_otp"),usernameSignIn:o?.username.signIn??false,collectUsername:o?.username.collectOnSignUp??false,passkeySignIn:o?.passkey.signIn??i,passkeyAdd:o?.passkey.add??i,firstLastName:e?.userModel?.firstLastName??false,emailChange:e===null?false:e.userModel?.emailChange??true,accountDeletion:e?.userModel?.accountDeletion??e?.accountDeletion??false,emailVerificationRequired:e?.emailVerification?.required??e?.requireEmailVerification??false,emailVerificationMethod:e?.emailVerification?.method??"link",totp:s?.totp??e?.twoFactor??false,mfaRequired:s?.required??e?.mfaRequired??false,backupCodes:s?.backupCodes??e?.twoFactor??false,legacyNameField:e?.authentication===void 0}}function Nr(e,t){let n=`p_${e.toLowerCase().replace(/-/g,"")}`;return `${t?.secure?"__Secure-":""}${n}.session_token`}function ca(e,t){return ot(xe(e),t)}
+exports.LOCALES=fi;exports.buildPrivacySignUpEvidence=_r;exports.createIdempotencyKey=$;exports.createMembershipHas=fo;exports.createNativeAuthClient=ot;exports.createNativeClient=ca;exports.createPasskeyClient=Rr;exports.decodePublishableKey=ve;exports.directionFor=Dr;exports.getPublicConfig=Pr;exports.isLocale=zr;exports.resolveConfig=xe;exports.resolveProjectCapabilities=Ur;exports.sessionCookieName=Nr;

package/dist/native.d.cts

@@ -1,8 +1,13 @@
-import { R as ResolvedAuthConfig, A as AuthConfig } from './organization-membership-B05mzhtA.cjs';
-export { D as DecodedPublishableKey, H as HasParams, O as OrganizationMembership, c as createMembershipHas, d as decodePublishableKey, h as resolveConfig, s as sessionCookieName } from './organization-membership-B05mzhtA.cjs';
-import { m as AuthOwlClient, aY as SocialIdTokenOptions, bu as createAuthHttpClient, bv as AuthHttpClient, au as PasskeySignInOptions, g as ActionFetchOptions, j as AuthActionResult, at as PasskeyAuthData, i as AddPasskeyOptions, o as AuthPasskey } from './client-N1yD-Tvm.cjs';
-export { k as AuthClientError, r as AuthSession, s as AuthUser, ac as Organization, ad as OrganizationClient, ae as OrganizationDetails, aB as ProjectCapabilities, aC as PublicConfig, aR as SessionState, aS as SessionStore, aT as SetActiveOrganizationOptions, aX as SocialAuthData, br as getPublicConfig, bt as resolveProjectCapabilities } from './client-N1yD-Tvm.cjs';
+import { R as ResolvedAuthConfig, A as AuthConfig } from './organization-membership-DSqmZLkN.cjs';
+export { D as DecodedPublishableKey, H as HasParams, O as OrganizationMembership, c as createMembershipHas, d as decodePublishableKey, r as resolveConfig } from './organization-membership-DSqmZLkN.cjs';
+import { b as AuthOwlClient, S as SocialIdTokenOptions, c as PasskeySignInOptions, A as ActionFetchOptions, a as AuthActionResult, d as PasskeyAuthData, e as AddPasskeyOptions, f as AuthPasskey } from './client-BRDFS1ln.cjs';
+export { g as AuthClientError, h as AuthSession, i as AuthUser, C as CreatePrivacyRightsRequestOptions, O as Organization, j as OrganizationClient, k as OrganizationDetails, l as PrivacyClient, m as PrivacyConsentPreference, n as PrivacyConsentState, o as PrivacyLocale, p as PrivacyRightState, q as PrivacyRightType, r as PrivacyRightsRequest, P as PublicConfig, R as RecordPrivacyConsentOptions, s as SessionState, t as SessionStore, u as SetActiveOrganizationOptions, v as SocialAuthData, w as getPublicConfig } from './client-BRDFS1ln.cjs';
+import { c as createAuthHttpClient, A as AuthHttpClient } from './idempotency-kuv3HQVN.cjs';
+export { P as ProjectCapabilities, a as createIdempotencyKey, r as resolveProjectCapabilities } from './idempotency-kuv3HQVN.cjs';
 import { startAuthentication, startRegistration } from '@simplewebauthn/browser';
+export { a as LOCALES, L as Locale, d as directionFor, i as isLocale } from './index-DgVPDEYx.cjs';
+export { buildPrivacySignUpEvidence } from './privacy.cjs';
+export { s as sessionCookieName } from './cookie-BqcfagTw.cjs';
 
 type AuthActionClient = Omit<AuthOwlClient, 'getToken' | 'getConsentStatus' | 'acceptConsent' | 'waitlist'>;
 /** Native social sign-in uses an ID token obtained from the provider SDK. */

package/dist/native.d.ts

@@ -1,8 +1,13 @@
-import { R as ResolvedAuthConfig, A as AuthConfig } from './organization-membership-B05mzhtA.js';
-export { D as DecodedPublishableKey, H as HasParams, O as OrganizationMembership, c as createMembershipHas, d as decodePublishableKey, h as resolveConfig, s as sessionCookieName } from './organization-membership-B05mzhtA.js';
-import { m as AuthOwlClient, aY as SocialIdTokenOptions, bu as createAuthHttpClient, bv as AuthHttpClient, au as PasskeySignInOptions, g as ActionFetchOptions, j as AuthActionResult, at as PasskeyAuthData, i as AddPasskeyOptions, o as AuthPasskey } from './client-C76hiQOA.js';
-export { k as AuthClientError, r as AuthSession, s as AuthUser, ac as Organization, ad as OrganizationClient, ae as OrganizationDetails, aB as ProjectCapabilities, aC as PublicConfig, aR as SessionState, aS as SessionStore, aT as SetActiveOrganizationOptions, aX as SocialAuthData, br as getPublicConfig, bt as resolveProjectCapabilities } from './client-C76hiQOA.js';
+import { R as ResolvedAuthConfig, A as AuthConfig } from './organization-membership-DSqmZLkN.js';
+export { D as DecodedPublishableKey, H as HasParams, O as OrganizationMembership, c as createMembershipHas, d as decodePublishableKey, r as resolveConfig } from './organization-membership-DSqmZLkN.js';
+import { b as AuthOwlClient, S as SocialIdTokenOptions, c as PasskeySignInOptions, A as ActionFetchOptions, a as AuthActionResult, d as PasskeyAuthData, e as AddPasskeyOptions, f as AuthPasskey } from './client-DhUE4JL1.js';
+export { g as AuthClientError, h as AuthSession, i as AuthUser, C as CreatePrivacyRightsRequestOptions, O as Organization, j as OrganizationClient, k as OrganizationDetails, l as PrivacyClient, m as PrivacyConsentPreference, n as PrivacyConsentState, o as PrivacyLocale, p as PrivacyRightState, q as PrivacyRightType, r as PrivacyRightsRequest, P as PublicConfig, R as RecordPrivacyConsentOptions, s as SessionState, t as SessionStore, u as SetActiveOrganizationOptions, v as SocialAuthData, w as getPublicConfig } from './client-DhUE4JL1.js';
+import { c as createAuthHttpClient, A as AuthHttpClient } from './idempotency-DmDFUS3e.js';
+export { P as ProjectCapabilities, a as createIdempotencyKey, r as resolveProjectCapabilities } from './idempotency-DmDFUS3e.js';
 import { startAuthentication, startRegistration } from '@simplewebauthn/browser';
+export { a as LOCALES, L as Locale, d as directionFor, i as isLocale } from './index-DgVPDEYx.js';
+export { buildPrivacySignUpEvidence } from './privacy.js';
+export { s as sessionCookieName } from './cookie-BqcfagTw.js';
 
 type AuthActionClient = Omit<AuthOwlClient, 'getToken' | 'getConsentStatus' | 'acceptConsent' | 'waitlist'>;
 /** Native social sign-in uses an ID token obtained from the provider SDK. */

package/dist/native.js

@@ -1 +1 @@
-import {l}from'./chunk-KZCWYFAX.js';export{l as createNativeAuthClient,m as createPasskeyClient,n as getPublicConfig,a as resolveProjectCapabilities}from'./chunk-KZCWYFAX.js';import {n}from'./chunk-V3MSLXXB.js';export{F as createMembershipHas,a as decodePublishableKey,n as resolveConfig,b as sessionCookieName}from'./chunk-V3MSLXXB.js';import'./chunk-T5SH3ZZP.js';function u(i,o){return l(n(i),o)}export{u as createNativeClient};
+import {l}from'./chunk-GFSJFTD7.js';export{l as createNativeAuthClient,m as createPasskeyClient,n as getPublicConfig,a as resolveProjectCapabilities}from'./chunk-GFSJFTD7.js';export{a as LOCALES,b as directionFor,c as isLocale}from'./chunk-M4QJVSXT.js';export{a as buildPrivacySignUpEvidence}from'./chunk-MW6RNUTR.js';export{a as createIdempotencyKey}from'./chunk-5NL5GJW6.js';import {n}from'./chunk-V3MSLXXB.js';export{F as createMembershipHas,a as decodePublishableKey,n as resolveConfig,b as sessionCookieName}from'./chunk-V3MSLXXB.js';import'./chunk-T5SH3ZZP.js';function P(i,o){return l(n(i),o)}export{P as createNativeClient};

package/dist/{organization-membership-B05mzhtA.d.cts → organization-membership-DSqmZLkN.d.cts}

@@ -5,35 +5,6 @@ type DecodedPublishableKey = {
 };
 declare function decodePublishableKey(key: string): DecodedPublishableKey;
 
-/**
- * The exact session-cookie name the auth server sets for a given project.
- *
- * Single source of truth for the cookie name across the SDK. The server
- * (the AuthOwl server project factory) configures
- * `advanced.cookiePrefix = "p_" + <projectId without dashes>` and
- * `useSecureCookies` in production; the auth engine then names the session
- * cookie `${securePrefix}${cookiePrefix}.session_token`, where `securePrefix`
- * is `__Secure-` for secure cookies and empty otherwise:
- *
- *   dev  (http):  p_<idNoDashes>.session_token
- *   prod (https): __Secure-p_<idNoDashes>.session_token
- *
- * Verified 2026-07-06 against the auth engine's `getCookies()` with the server's
- * real config (see CONTRACTS section 5 and `cookie.test.ts`). Note the engine
- * joins the prefix and name with a dot (`.`), not an underscore, and uses the
- * `__Secure-` (not `__Host-`) prefix - both are easy to get wrong by hand, and
- * getting them wrong makes `auth()` forward a cookie the server never set. If an
- * auth-engine upgrade changes cookie naming, re-verify and update this function,
- * the `cookie.test.ts` fixtures, and CONTRACTS section 5 together.
- *
- * `secure` must reflect the SERVER's cookie mode: callers holding the auth API
- * URL derive it from the protocol (`https:` => secure). Callers that cannot
- * know it (the UX-only redirect middleware) should check both variants.
- */
-declare function sessionCookieName(projectId: string, opts?: {
-    secure?: boolean;
-}): string;
-
 /** How a session BEGINS, as the minting door knows it. */
 type SessionStart = {
     /**
@@ -466,4 +437,4 @@ declare function createMembershipHas(membership: OrganizationMembership | null |
     }) => boolean;
 };
 
-export { type AuthConfig as A, type DecodedPublishableKey as D, type HasParams as H, type OrganizationMembership as O, type ResolvedAuthConfig as R, TransportError as T, type ResolvedAuthTarget as a, type TransportErrorKind as b, createMembershipHas as c, decodePublishableKey as d, membershipHasPermission as e, membershipHasRole as f, membershipHasTeam as g, resolveConfig as h, membershipHas as m, resolveAuthTarget as r, sessionCookieName as s };
+export { type AuthConfig as A, type DecodedPublishableKey as D, type HasParams as H, type OrganizationMembership as O, type ResolvedAuthConfig as R, TransportError as T, type ResolvedAuthTarget as a, type TransportErrorKind as b, createMembershipHas as c, decodePublishableKey as d, membershipHasPermission as e, membershipHasRole as f, membershipHasTeam as g, resolveAuthTarget as h, membershipHas as m, resolveConfig as r };

package/dist/{organization-membership-B05mzhtA.d.ts → organization-membership-DSqmZLkN.d.ts}

@@ -5,35 +5,6 @@ type DecodedPublishableKey = {
 };
 declare function decodePublishableKey(key: string): DecodedPublishableKey;
 
-/**
- * The exact session-cookie name the auth server sets for a given project.
- *
- * Single source of truth for the cookie name across the SDK. The server
- * (the AuthOwl server project factory) configures
- * `advanced.cookiePrefix = "p_" + <projectId without dashes>` and
- * `useSecureCookies` in production; the auth engine then names the session
- * cookie `${securePrefix}${cookiePrefix}.session_token`, where `securePrefix`
- * is `__Secure-` for secure cookies and empty otherwise:
- *
- *   dev  (http):  p_<idNoDashes>.session_token
- *   prod (https): __Secure-p_<idNoDashes>.session_token
- *
- * Verified 2026-07-06 against the auth engine's `getCookies()` with the server's
- * real config (see CONTRACTS section 5 and `cookie.test.ts`). Note the engine
- * joins the prefix and name with a dot (`.`), not an underscore, and uses the
- * `__Secure-` (not `__Host-`) prefix - both are easy to get wrong by hand, and
- * getting them wrong makes `auth()` forward a cookie the server never set. If an
- * auth-engine upgrade changes cookie naming, re-verify and update this function,
- * the `cookie.test.ts` fixtures, and CONTRACTS section 5 together.
- *
- * `secure` must reflect the SERVER's cookie mode: callers holding the auth API
- * URL derive it from the protocol (`https:` => secure). Callers that cannot
- * know it (the UX-only redirect middleware) should check both variants.
- */
-declare function sessionCookieName(projectId: string, opts?: {
-    secure?: boolean;
-}): string;
-
 /** How a session BEGINS, as the minting door knows it. */
 type SessionStart = {
     /**
@@ -466,4 +437,4 @@ declare function createMembershipHas(membership: OrganizationMembership | null |
     }) => boolean;
 };
 
-export { type AuthConfig as A, type DecodedPublishableKey as D, type HasParams as H, type OrganizationMembership as O, type ResolvedAuthConfig as R, TransportError as T, type ResolvedAuthTarget as a, type TransportErrorKind as b, createMembershipHas as c, decodePublishableKey as d, membershipHasPermission as e, membershipHasRole as f, membershipHasTeam as g, resolveConfig as h, membershipHas as m, resolveAuthTarget as r, sessionCookieName as s };
+export { type AuthConfig as A, type DecodedPublishableKey as D, type HasParams as H, type OrganizationMembership as O, type ResolvedAuthConfig as R, TransportError as T, type ResolvedAuthTarget as a, type TransportErrorKind as b, createMembershipHas as c, decodePublishableKey as d, membershipHasPermission as e, membershipHasRole as f, membershipHasTeam as g, resolveAuthTarget as h, membershipHas as m, resolveConfig as r };

package/dist/privacy.cjs

@@ -0,0 +1 @@
+'use strict';function r(){let e=globalThis.crypto.getRandomValues(new Uint8Array(16));e[6]=e[6]&15|64,e[8]=e[8]&63|128;let i=Array.from(e,o=>o.toString(16).padStart(2,"0")).join("");return `${i.slice(0,8)}-${i.slice(8,12)}-${i.slice(12,16)}-${i.slice(16,20)}-${i.slice(20)}`}function a(e,i,o,t=r()){return {locale:i,correlationId:t,noticeVersionIds:e.notices.map(n=>n.noticeVersionId),consentDecisions:e.consentPurposes.flatMap(n=>{let c=e.notices.find(s=>s.purposeCodes.includes(n.code));return c?[{purposeCode:n.code,purposeVersionId:n.purposeVersionId,noticeVersionId:c.noticeVersionId,decision:o.has(n.code)?"granted":"refused",guardianRequired:false,guardianEvidenceId:null}]:[]})}}exports.buildPrivacySignUpEvidence=a;

package/dist/privacy.d.cts

@@ -0,0 +1,24 @@
+import { P as PublicConfig, o as PrivacyLocale } from './client-BRDFS1ln.cjs';
+import './organization-membership-DSqmZLkN.cjs';
+
+type PrivacyPublicConfig = NonNullable<PublicConfig['privacy']>;
+/**
+ * Build the exact notice-delivery and optional-purpose evidence accepted by
+ * sign-up. Shared by browser and native UI so every managed surface emits the
+ * same version-pinned contract.
+ */
+declare function buildPrivacySignUpEvidence(privacy: PrivacyPublicConfig, locale: PrivacyLocale, grantedPurposeCodes: ReadonlySet<string>, correlationId?: string): {
+    locale: PrivacyLocale;
+    correlationId: string;
+    noticeVersionIds: string[];
+    consentDecisions: {
+        purposeCode: string;
+        purposeVersionId: string;
+        noticeVersionId: string;
+        decision: "granted" | "refused";
+        guardianRequired: boolean;
+        guardianEvidenceId: null;
+    }[];
+};
+
+export { PrivacyLocale, buildPrivacySignUpEvidence };

package/dist/privacy.d.ts

@@ -0,0 +1,24 @@
+import { P as PublicConfig, o as PrivacyLocale } from './client-DhUE4JL1.js';
+import './organization-membership-DSqmZLkN.js';
+
+type PrivacyPublicConfig = NonNullable<PublicConfig['privacy']>;
+/**
+ * Build the exact notice-delivery and optional-purpose evidence accepted by
+ * sign-up. Shared by browser and native UI so every managed surface emits the
+ * same version-pinned contract.
+ */
+declare function buildPrivacySignUpEvidence(privacy: PrivacyPublicConfig, locale: PrivacyLocale, grantedPurposeCodes: ReadonlySet<string>, correlationId?: string): {
+    locale: PrivacyLocale;
+    correlationId: string;
+    noticeVersionIds: string[];
+    consentDecisions: {
+        purposeCode: string;
+        purposeVersionId: string;
+        noticeVersionId: string;
+        decision: "granted" | "refused";
+        guardianRequired: boolean;
+        guardianEvidenceId: null;
+    }[];
+};
+
+export { PrivacyLocale, buildPrivacySignUpEvidence };

package/dist/privacy.js

@@ -0,0 +1 @@
+export{a as buildPrivacySignUpEvidence}from'./chunk-MW6RNUTR.js';import'./chunk-5NL5GJW6.js';

package/dist/server.d.cts

@@ -1,5 +1,6 @@
-import { O as OrganizationMembership, b as TransportErrorKind, H as HasParams } from './organization-membership-B05mzhtA.cjs';
-export { A as AuthConfig, R as ResolvedAuthConfig, a as ResolvedAuthTarget, r as resolveAuthTarget, h as resolveConfig, s as sessionCookieName } from './organization-membership-B05mzhtA.cjs';
+import { O as OrganizationMembership, b as TransportErrorKind, H as HasParams } from './organization-membership-DSqmZLkN.cjs';
+export { A as AuthConfig, R as ResolvedAuthConfig, a as ResolvedAuthTarget, h as resolveAuthTarget, r as resolveConfig } from './organization-membership-DSqmZLkN.cjs';
+export { s as sessionCookieName } from './cookie-BqcfagTw.cjs';
 export { a as SESSION_TRANSPORT_BEARER, b as SESSION_TRANSPORT_HEADER } from './session-transport-contract-HDPYRum8.cjs';
 
 /**

package/dist/server.d.ts

@@ -1,5 +1,6 @@
-import { O as OrganizationMembership, b as TransportErrorKind, H as HasParams } from './organization-membership-B05mzhtA.js';
-export { A as AuthConfig, R as ResolvedAuthConfig, a as ResolvedAuthTarget, r as resolveAuthTarget, h as resolveConfig, s as sessionCookieName } from './organization-membership-B05mzhtA.js';
+import { O as OrganizationMembership, b as TransportErrorKind, H as HasParams } from './organization-membership-DSqmZLkN.js';
+export { A as AuthConfig, R as ResolvedAuthConfig, a as ResolvedAuthTarget, h as resolveAuthTarget, r as resolveConfig } from './organization-membership-DSqmZLkN.js';
+export { s as sessionCookieName } from './cookie-BqcfagTw.js';
 export { a as SESSION_TRANSPORT_BEARER, b as SESSION_TRANSPORT_HEADER } from './session-transport-contract-HDPYRum8.js';
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authowl/core",
-  "version": "0.20.0",
+  "version": "0.21.1",
   "description": "Framework-agnostic client for AuthOwl, the multi-tenant auth SaaS.",
   "license": "MIT",
   "publishConfig": {
@@ -62,6 +62,16 @@
         "types": "./dist/messages.d.cts",
         "default": "./dist/messages.cjs"
       }
+    },
+    "./privacy": {
+      "import": {
+        "types": "./dist/privacy.d.ts",
+        "default": "./dist/privacy.js"
+      },
+      "require": {
+        "types": "./dist/privacy.d.cts",
+        "default": "./dist/privacy.cjs"
+      }
     }
   },
   "main": "./dist/index.cjs",
@@ -82,7 +92,7 @@
     "vitest": "^4.1.10"
   },
   "scripts": {
-    "build": "tsup && node ../../scripts/gen-notices.mjs src/index.ts src/server.ts src/native.ts src/messages.ts",
+    "build": "tsup && node ../../scripts/gen-notices.mjs src/index.ts src/server.ts src/native.ts src/messages.ts src/privacy.ts",
     "dev": "tsup --watch",
     "typecheck": "tsc --noEmit",
     "test": "vitest run --passWithNoTests"