@authowl/core 0.21.0 → 0.21.1

package/dist/index.cjs

@@ -1,3 +1,3 @@
-'use strict';var no=Object.defineProperty;var Nt=(e,t,n)=>()=>{if(n)throw n[0];try{return e&&(t=e(e=0)),t}catch(i){throw n=[i],i}};var io=(e,t)=>{for(var n in t)no(e,n,{get:t[n],enumerable:true});};function ge(){return typeof window<"u"&&typeof document<"u"&&typeof crypto<"u"&&typeof crypto.subtle?.digest=="function"}var lt=Nt(()=>{"use strict";});var qe={};io(qe,{beginCrossSiteSignIn:()=>as,challengeFor:()=>Ci,completeCrossSiteSignIn:()=>cs,takeHandoffCode:()=>It});function Ei(e){let t="";for(let n of e)t+=String.fromCharCode(n);return btoa(t).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}async function Ci(e){let t=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(e));return Ei(new Uint8Array(t))}function os(){return Ei(crypto.getRandomValues(new Uint8Array(ts)))}function vi(e,t){let n=window.location.protocol==="https:"?"; Secure":"";document.cookie=`${Pi}=${e}; Path=/; Max-Age=${t}; SameSite=Lax${n}`;}function rs(){for(let e of document.cookie.split(";")){let t=e.indexOf("=");if(!(t<0)&&e.slice(0,t).trim()===Pi)return e.slice(t+1).trim()||null}return null}function ss(){vi("",0);}function Ii(e){return new URL(e,window.location.href).toString()}async function as(e,t){let n=t.callbackURL?Ii(t.callbackURL):null;if(n&&new URL(n).origin!==window.location.origin)return null;let i=os(),o=new URL(`${e.projectBaseURL}/session/start`);if(o.searchParams.set("pk",e.publishableKey),o.searchParams.set("kind",t.kind),t.kind==="social")o.searchParams.set("provider",t.provider),t.scopes?.length&&o.searchParams.set("scopes",t.scopes.join(",")),t.loginHint&&o.searchParams.set("loginHint",t.loginHint),t.requestSignUp!==void 0&&o.searchParams.set("requestSignUp",t.requestSignUp?"1":"0");else for(let c of is){let u=t[c];u&&o.searchParams.set(c,u);}let r=`${window.location.origin}${window.location.pathname}${window.location.search}`;o.searchParams.set("cb",n??r);for(let[c,u]of [["err",t.errorCallbackURL],["new",t.newUserCallbackURL]])u&&o.searchParams.set(c,Ii(u));return o.searchParams.set("challenge",await Ci(i)),vi(i,ns),o.toString()}function It(e){if(typeof window>"u")return null;let t=window.location.hash;if(!t.includes(Tt))return null;let n=new URLSearchParams(t.replace(/^#/,"")),i=n.get(Tt);if(!i||e!==void 0&&i!==e)return null;n.delete(Tt);let o=n.toString();return window.history.replaceState(window.history.state,"",`${window.location.pathname}${window.location.search}${o?`#${o}`:""}`),i}async function cs(e,t,n){if(!ge())return  false;let i=n??It();if(!i)return  false;n&&It(n);let o=rs();if(ss(),!o)return  false;t.beginSession({remember:true});let{error:r}=await e.request("/session/exchange",{method:"POST",body:{code:i,verifier:o}});return r===null}var Pi,Tt,ts,ns,is,He=Nt(()=>{"use strict";lt();Pi="authowl_handoff_verifier",Tt="authowl_code",ts=32,ns=900,is=["email","providerId","domain","organizationSlug"];});var oo=/^(pk_(live|test))_([0-9a-f-]{36})_([A-Za-z0-9]{20,})$/i,ro=/^sk_/i;function $e(e){if(typeof e!="string"||e.length===0)throw new Error("publishableKey is required");if(ro.test(e))throw new Error("A secret key was passed where a publishable key was expected. Never embed secret keys in client code.");let t=oo.exec(e);if(!t)throw new Error("publishableKey is malformed; expected pk_(live|test)_<uuid>_<base62>");return {prefix:t[1].toLowerCase(),env:t[2].toLowerCase(),projectId:t[3].toLowerCase()}}function so(e,t){let n=`p_${e.toLowerCase().replace(/-/g,"")}`;return `${t?.secure?"__Secure-":""}${n}.session_token`}var Lt=/^http:\/\/(?:(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*localhost|127\.0\.0\.1|\[::1\])(?::\d+)?(?:\/|$)/i;function We(e,t){throw new Error(`${e}: ${t}`)}function Mt(e,t){let n;try{n=new URL(String(e));}catch{throw new TypeError("Transport URL must be absolute.")}if(n.username||n.password||n.hash)throw new TypeError("Transport URL must not contain credentials or a fragment.");let i=n.toString();if(n.protocol!=="https:"&&!(n.protocol==="http:"&&t.allowHttpLoopback&&Lt.test(i)))throw new TypeError("Transport URL must use HTTPS except on approved loopback.");return n}function Ft(e,t){(typeof e!="string"||!/^https?:\/\/[^/?#@\\\s]+\/?$/i.test(e))&&We("apiUrl","origin required");let n;try{n=new URL(e);}catch{We("apiUrl","origin required");}return n.protocol==="http:"&&(!t.allowHttpLoopback||!Lt.test(e))&&We("apiUrl","HTTPS required except exact loopback"),n.origin}function q(e,t){try{return e?.getItem(t)??null}catch{return null}}function U(e,t,n){try{n===null?e?.removeItem(t):e?.setItem(t,n);}catch{}}function D(){try{return globalThis.localStorage}catch{return}}function X(){try{return globalThis.sessionStorage}catch{return}}var ao="authowl.session-challenge",co=e=>`${ao}.${e}`,uo="set-auth-challenge",Ye="x-authowl-challenge";function lo(e){let t=e.get(Ye);return ue(t)?Ht(t).some(([n,i])=>n.endsWith(".dont_remember")&&i.length>0):false}var qt="INVALID_TWO_FACTOR_COOKIE",po=2048,ue=e=>e!==null&&e.length<=po,Vt=/^[\x21\x23-\x2B\x2D-\x3A\x3C-\x5B\x5D-\x7E]+$/;function Ht(e){let t=[];for(let n of e.split(";")){let i=n.trimStart(),o=i.indexOf("=");o<=0||t.push([i.slice(0,o).trimEnd(),i.slice(o+1)]);}return t}function Kt(e){let t=co(e),n=new Map;function i(){return n.size===0?null:[...n].map(([u,a])=>`${u}=${a}`).join("; ")}function o(){let u=i();U(X(),t,ue(u)?u:null);}function r(u){for(let[a,h]of Ht(u))Vt.test(a)&&(h===""?n.delete(a):Vt.test(h)&&n.set(a,h));}let c=q(X(),t);return ue(c)&&r(c),{presentOn(u){let a=i();u.delete(Ye),ue(a)&&u.set(Ye,a);},observe(u){let a=u.get(uo);ue(a)&&(r(a),o());},clear(){n.clear(),o();}}}var Xe="set-auth-token",Qe="x-authowl-session-transport",Ze="bearer";var fo="authowl.session-token",go="authowl.cookie-transport",jt="ok",Jt="bearer",mo=e=>`${fo}.${e}`,ho=e=>`${go}.${e}`;function yo(e){return e===jt?"cookies":e===Jt?"bearer":"unknown"}function Ao(e){return e==="cookies"?jt:e==="bearer"?Jt:null}function Oo(e){let t=mo(e),n=ho(e),i=Kt(e),o=null,r=false,c=null,u=yo(q(D(),n)),a=()=>u==="unknown",h=0,s=null,d=false;function f(){let y=q(X(),t);if(y!==null)return r=true,y;let w=q(D(),t);return w!==null?(r=false,w):null}o=f(),o!==null&&a()&&(d=true);function O(){if(!(!d||!s)){d=false;try{s();}catch{}}}function l(){let y=u==="bearer"?o:null,[w,K]=r?[X(),D()]:[D(),X()];U(K,t,null),U(w,t,y);}function m(y){y!==null&&c!==null&&(r=c,c=null),o=y,l(),y!==null&&a()&&(d=true,O());}function A(y){u=y,U(D(),n,Ao(y));}function b(){A("unknown"),d=false;}function S(){return o===null&&(o=f()),o}function N(){let y=f();return y!==null&&(o=y),o}function H(y){N()===y&&l();}function L(){h+=1,c=null,r=false,m(null),i.clear(),b();}let Y=()=>u!=="cookies";return {hasToken:()=>S()!==null,declareOn(y){if(y.has("authorization"))return  false;let w=S();return !w&&!Y()?false:(w&&y.set("authorization",`Bearer ${w}`),y.set(Qe,Ze),i.presentOn(y),true)},wantsToken:Y,needsProbe:a,observe(y){let w=y.get(Xe);w&&m(w),i.observe(y);},dropChallenge:i.clear,measureWith(y){s=y,O();},beginRead(){let y=S(),w=h;return {carriedToken:y!==null,endIfDead(){y!==null&&N()===y&&h===w&&L();},recordCookieVerdict(K){if(h===w&&a()){if(A(K?"cookies":"bearer"),K){m(null);return}H(y);}}}},beginSession({remember:y}){h+=1,c=!y,i.clear(),b();},endSession:L}}var Bt=new Map;function Gt(e){let t=Bt.get(e);if(t)return t;let n=Oo(e);return Bt.set(e,n),n}function bo(e,t){return t?.headers?new Headers(t.headers):typeof e=="object"&&e!==null&&"headers"in e?new Headers(e.headers):new Headers}function $t(e,t){let n=Gt(e),i=(c,u)=>(t??globalThis.fetch)(c,u);return {fetch:async(c,u)=>{if(u?.credentials==="omit"||!n.wantsToken())return i(c,u);let a=bo(c,u),h=n.declareOn(a),s=await i(c,{...u,headers:a});return h&&n.observe(s.headers),s},probe:i,tokens:n}}function Wt(e){if(!e||typeof e!="object")throw new Error("AuthConfig is required");let t=$e(e.publishableKey),n=Ft(e.apiUrl,{allowHttpLoopback:t.env==="test"});return {publishableKey:e.publishableKey,apiUrl:n,decoded:t,projectBaseURL:`${n}/api/projects/${t.projectId}/auth`}}function wo(e){let t=Wt(e),{fetch:n,...i}=$t(t.decoded.projectId,e.fetch);return {...e,...t,fetch:n,session:i}}var et="authowl_invitation",tt="authowl.invitation-claim",Yt=/^[A-Za-z0-9_-]{1,128}$/,Xt=10080*60*1e3;function Ro(e=Date.now()){if(typeof window>"u")return le(e);let t;try{t=new URL(window.location.href);}catch{return le(e)}let n=t.searchParams.get(et);if(n===null)return le(e);t.searchParams.delete(et);try{window.history.replaceState(window.history.state,"",t.toString());}catch{}if(!Yt.test(n))return le(e);let i={id:n,capturedAt:e};return U(D(),tt,JSON.stringify(i)),i}function le(e=Date.now()){let t=q(D(),tt);if(t===null)return null;let n;try{n=JSON.parse(t);}catch{return de(),null}if(typeof n!="object"||n===null)return de(),null;let{id:i,capturedAt:o}=n;return typeof i!="string"||!Yt.test(i)||typeof o!="number"||e-o>Xt?(de(),null):{id:i,capturedAt:o}}function de(){U(D(),tt,null);}var Qt="authowl.last-used-method",So=/^(password|username|magic-link|email-otp|phone-otp|passkey|sso|social:[a-z0-9][a-z0-9_-]{0,63})$/,nt=e=>`${Qt}.${e}`;function Ie(e){return So.test(e)}function ko(e){let t=q(D(),nt(e));return t===null||!Ie(t)?null:t}function To(e,t){Ie(t)&&(U(D(),Te(e),null),U(D(),nt(e),t));}var Te=e=>`${Qt}.pending.${e}`;function Io(e,t){Ie(t)&&U(D(),Te(e),t);}function Po(e,t){let n=q(D(),Te(e));U(D(),Te(e),null),t&&n!==null&&Ie(n)&&U(D(),nt(e),n);}function Eo(e){let t=e?.enabledMethods??["password"],n=t.includes("password"),i=t.includes("passkey"),o=e?.authentication,r=e?.mfa;return {emailSignUp:o?.email.signUp??t.some(c=>c==="password"||c==="magic_link"||c==="email_otp"),passwordSignUp:o?.password.signUp??n,phoneSignUp:o?.phone.signUp??t.includes("phone_otp"),passwordSignIn:o?.email.signIn.includes("password")??n,passwordMinLength:o?.password.minLength??8,passwordMaxLength:o?.password.maxLength??128,magicLinkSignIn:o?.email.signIn.includes("magic_link")??t.includes("magic_link"),emailOtpSignIn:o?.email.signIn.includes("email_otp")??t.includes("email_otp"),phoneSignIn:o?.phone.signIn??t.includes("phone_otp"),usernameSignIn:o?.username.signIn??false,collectUsername:o?.username.collectOnSignUp??false,passkeySignIn:o?.passkey.signIn??i,passkeyAdd:o?.passkey.add??i,firstLastName:e?.userModel?.firstLastName??false,emailChange:e===null?false:e.userModel?.emailChange??true,accountDeletion:e?.userModel?.accountDeletion??e?.accountDeletion??false,emailVerificationRequired:e?.emailVerification?.required??e?.requireEmailVerification??false,emailVerificationMethod:e?.emailVerification?.method??"link",totp:r?.totp??e?.twoFactor??false,mfaRequired:r?.required??e?.mfaRequired??false,backupCodes:r?.backupCodes??e?.twoFactor??false,legacyNameField:e?.authentication===void 0}}var Co=1e4,vo=1024*1024,_=class extends Error{kind;requestId;constructor(t,n){super(Mo(t)),this.name="TransportError",this.kind=t,this.requestId=n;}},tn=new WeakSet;function z(e,t){let n=new _(e,t);return tn.add(n),n}async function nn({fetchImpl:e,url:t,init:n={},timeoutMs:i=Co,maxResponseBytes:o=vo,allowHttpLoopback:r=false,decode:c}){en(i,"timeoutMs"),en(o,"maxResponseBytes");let u=Mt(t,{allowHttpLoopback:r}),a=n.signal,h=new AbortController,s=null,d,f=new Promise(A=>{d=A;}),O=A=>{s===null&&(s=A,d({type:"abort",kind:A}),h.abort());},l=()=>O("aborted");a?.addEventListener("abort",l,{once:true});let m=setTimeout(()=>O("timeout"),i);a?.aborted&&l();try{if(s!==null)throw z(s);let A;try{A=await Promise.race([e(u.toString(),{...n,redirect:"error",signal:h.signal}).then(Y=>({type:"response",response:Y})),f]);}catch{throw z(s??"network")}if(A.type==="abort")throw z(A.kind);if(!xo(A.response))throw z("invalid_response");let b=A.response,S=Lo(b.headers),N=await Do(b,o,f,()=>s,S),H=zo(b,N,S),L;try{L=b.ok&&c?c(H,Object.freeze({status:b.status})):H;}catch{throw z("invalid_response",S)}return {response:b,data:L,...S===void 0?{}:{requestId:S}}}catch(A){throw A instanceof _&&tn.has(A)?A:z(s??"network")}finally{clearTimeout(m),a?.removeEventListener("abort",l);}}function xo(e){if(!e||typeof e!="object")return  false;let t=e;return Number.isInteger(t.status)&&t.status>=0&&t.status<=599&&typeof t.statusText=="string"&&typeof t.ok=="boolean"&&typeof t.headers?.get=="function"&&(t.body===null||typeof t.body=="object"&&typeof t.body?.getReader=="function"&&typeof t.body.cancel=="function")}async function Do(e,t,n,i,o){let r=e.headers.get("content-length");if(r!==null){if(!/^\d+$/.test(r))throw Zt(e.body),z("invalid_response",o);if(Number(r)>t)throw Zt(e.body),z("response_too_large",o)}if(!e.body)return "";let c;try{c=e.body.getReader();}catch{throw z("network",o)}let u=[],a=0,h=null;try{for(;;){let f;try{f=await Promise.race([c.read(),n]);}catch{h=z(i()??"network",o);break}if(_o(f)){h=z(f.kind,o);break}let{done:O,value:l}=f;if(O)break;if(l.byteLength!==0){if(a+=l.byteLength,a>t){h=z("response_too_large",o);break}u.push(l);}}}finally{h&&Uo(c);try{c.releaseLock();}catch{}}if(h)throw h;let s=new Uint8Array(a),d=0;for(let f of u)s.set(f,d),d+=f.byteLength;try{return new TextDecoder("utf-8",{fatal:!0}).decode(s)}catch{throw z("invalid_response",o)}}function _o(e){return "type"in e&&e.type==="abort"}function Zt(e){if(e)try{e.cancel().catch(()=>{});}catch{}}function Uo(e){try{e.cancel().catch(()=>{});}catch{}}function zo(e,t,n){if(e.status===204||e.status===205)return null;let i=No(e.headers.get("content-type"));if(!e.ok&&(!i||t.length===0))return null;if(!i||t.length===0)throw z("invalid_response",n);try{return JSON.parse(t)}catch{if(!e.ok)return null;throw z("invalid_response",n)}}function No(e){if(e===null)return  false;let t=e.split(";",1)[0]?.trim().toLowerCase();return t==="application/json"||t?.endsWith("+json")===true}function Lo(e){let t=e.get("x-request-id")?.trim();if(!(!t||t.length>256||!/^[A-Za-z0-9._:-]+$/.test(t)))return t}function en(e,t){if(!Number.isInteger(e)||e<=0)throw new TypeError(`${t} must be a positive integer.`)}function Mo(e){switch(e){case "aborted":return "The request was cancelled.";case "timeout":return "The request timed out.";case "response_too_large":return "The response exceeded the allowed size.";case "invalid_response":return "The service returned an invalid response.";case "network":return "The network request could not be completed."}}var Pe=class extends Error{status;requestId;constructor(t,n,i){super(`${t} request failed with status ${n.status}.`),this.name="AuthOwlHttpError",this.status=n.status,this.requestId=i;}};function j(e,t,n={}){let i=new Headers(n.init?.headers);return i.set("x-publishable-key",e.publishableKey),nn({fetchImpl:e.fetch,url:t,init:{...n.init,headers:i},allowHttpLoopback:e.decoded.env==="test",...n.timeoutMs===void 0?{}:{timeoutMs:n.timeoutMs},...n.maxResponseBytes===void 0?{}:{maxResponseBytes:n.maxResponseBytes},...n.decode===void 0?{}:{decode:n.decode}})}function Q(e,t){if(!e.response.ok)throw new Pe(t,e.response,e.requestId);return e.data}var Z=new Map,Fo=/^[a-z]{2}$/;function Vo(e,t){if(typeof window>"u")return ()=>{};if(t===null)return Z.delete(e),()=>{};let n=t.trim().toLowerCase();if(!Fo.test(n))return ()=>{};let i=Symbol(e),o=Z.get(e)??[];return o.push({token:i,locale:n}),Z.set(e,o),()=>{let r=Z.get(e);if(!r)return;let c=r.filter(u=>u.token!==i);c.length===0?Z.delete(e):Z.set(e,c);}}function it(e){return typeof window>"u"?null:Z.get(e)?.at(-1)?.locale??null}var sn="x-authowl-turnstile-token",an="x-authowl-locale",qo=1e4,Ho=32,Ko=2e4;function oe(e,t){return {post:(n,i,o,r)=>e.request(n,{method:"POST",body:i,fetchOptions:o,decode:r}),mutation:async(n,i)=>{let o=await n;return o.error===null&&(i===void 0||o.data!==null&&i(o.data))&&t(),o}}}function fe(e,t=e.projectBaseURL){return {async request(n,i={}){let o=Jo(t,n,i.query),r=i.method??(i.body===void 0?"GET":"POST"),c=new Headers(i.fetchOptions?.headers);i.fetchOptions?.authChallengeToken&&c.set(sn,i.fetchOptions.authChallengeToken);let u=it(e.decoded.projectId);u&&c.set(an,u),i.body!==void 0&&c.set("content-type","application/json");let a={method:r,headers:c,credentials:i.credentials??"include",...i.body===void 0?{}:{body:JSON.stringify(i.body)}},h=Object.freeze({method:r,path:n});await i.fetchOptions?.onRequest?.(h);let s=jo(r,i.fetchOptions),d;try{d=await Bo(e,o,{...a,signal:i.fetchOptions?.signal},s);}catch(b){let S=rn(b);return await i.fetchOptions?.onError?.(ot(h,S,Wo(b))),{data:null,error:S}}let{response:f,requestId:O}=d,l=Qo(n,d.data),m=l;if(f.ok)try{m=st(l),i.decode&&(m=i.decode(m));}catch{let b=rn(new _("invalid_response",O));return await i.fetchOptions?.onError?.(ot(h,b,"invalid_response")),{data:null,error:b}}let A=Object.freeze({...h,status:f.status,...O===void 0?{}:{requestId:O}});if(await i.fetchOptions?.onResponse?.(A),!f.ok){let b=Go(f,l,O);return b.code===qt&&e.session.tokens.dropChallenge(),await i.fetchOptions?.onError?.(ot(h,b,"api")),{data:null,error:b}}return await i.fetchOptions?.onSuccess?.(A),{data:m,error:null}}}}async function Bo(e,t,n,i){let o=Date.now()+qo;for(let r=0;r<i;r+=1){let c=o-Date.now();if(c<=0)throw new _("timeout");try{let u=await j(e,t,{init:n,timeoutMs:Math.max(1,Math.ceil(c))});if(u.response.status<500||r===i-1)return u}catch(u){if(r===i-1||!(u instanceof _)||u.kind!=="network")throw u}await Yo(50*2**r,n.signal,o);}throw new _("network")}function jo(e,t){if(e!=="GET"||t?.authChallengeToken)return 1;let n=t?.retry;return typeof n!="number"||!Number.isFinite(n)?1:Math.min(Math.max(Math.trunc(n),0),3)+1}function Jo(e,t,n){let i=new URL(`${e}${t.startsWith("/")?t:`/${t}`}`);for(let[o,r]of Object.entries(n??{}))r!==void 0&&i.searchParams.set(o,String(r));return i.toString()}function Go(e,t,n){let i=pe(t)?t:{},o=$o(i,e.headers);return {status:e.status,statusText:e.statusText,code:typeof i.code=="string"?i.code:void 0,...n===void 0?{}:{requestId:n},...typeof i.current_version=="number"?{currentVersion:i.current_version}:{},...o!==void 0?{retryAfterSeconds:o}:{},message:typeof i.message=="string"?i.message:typeof i.error=="string"?i.error:typeof i.detail=="string"?i.detail:e.statusText||"Request failed"}}function $o(e,t){let n=(typeof e.retryAfterSeconds=="number"&&Number.isFinite(e.retryAfterSeconds)?e.retryAfterSeconds:void 0)??on(t.get("retry-after"))??on(t.get("x-retry-after"));if(n!==void 0)return Math.min(Math.max(Math.trunc(n),1),86400)}function on(e){if(!e)return;let t=e.trim();if(!/^\d+$/.test(t))return;let n=Number(t);return Number.isFinite(n)?n:void 0}function rn(e){let t=e instanceof _?e.kind:"network";return {status:0,...{aborted:{statusText:"ABORTED",code:"REQUEST_ABORTED",message:"The request was cancelled."},timeout:{statusText:"TIMEOUT",code:"REQUEST_TIMEOUT",message:"The request timed out."},response_too_large:{statusText:"INVALID_RESPONSE",code:"RESPONSE_TOO_LARGE",message:"The service response was too large."},invalid_response:{statusText:"INVALID_RESPONSE",code:"INVALID_RESPONSE",message:"The service returned an invalid response."},network:{statusText:"FETCH_ERROR",code:"FETCH_ERROR",message:"Network request failed."}}[t],...e instanceof _&&e.requestId?{requestId:e.requestId}:{}}}function ot(e,t,n){return Object.freeze({...e,status:t.status??0,...t.requestId===void 0?{}:{requestId:t.requestId},failure:n})}function Wo(e){return e instanceof _?e.kind:"network"}function Yo(e,t,n){return new Promise((i,o)=>{if(t?.aborted){o(new _("aborted"));return}let r=n-Date.now();if(r<=0){o(new _("timeout"));return}let c=Math.min(e,r),u=()=>{clearTimeout(a),o(new _("aborted"));},a=setTimeout(()=>{t?.removeEventListener("abort",u),Date.now()>=n?o(new _("timeout")):i();},c);t?.addEventListener("abort",u,{once:true}),t?.aborted&&u();})}function st(e,t="",n=0,i={nodes:0}){if(i.nodes+=1,n>Ho||i.nodes>Ko)throw new Error("response traversal limit exceeded");if(typeof e=="string"&&/^(?:createdAt|updatedAt|expiresAt)$/.test(t)){let o=new Date(e);return Number.isNaN(o.getTime())?e:o}return Array.isArray(e)?e.map(o=>st(o,"",n+1,i)):pe(e)?Object.fromEntries(Object.entries(e).map(([o,r])=>[o,Xo(o)?r:st(r,o,n+1,i)])):e}function Xo(e){return e==="metadata"||e==="public_metadata"||e==="unsafe_metadata"||e==="private_metadata"||e==="publicMetadata"||e==="unsafeMetadata"||e==="privateMetadata"}function Qo(e,t){if(e==="/list-sessions"&&Array.isArray(t))return t.map(o=>pe(o)?rt(o):o);if(!pe(t))return t;let i=e==="/change-password"||e==="/passkey/verify-authentication"||e==="/phone-otp/verify"||e==="/sign-up/email"||e.startsWith("/sign-in/")||e.startsWith("/two-factor/verify-")?rt(t):t;return e==="/sign-up/email"&&!("sessionCreated"in i)&&(i={...i,sessionCreated:typeof t.token=="string"&&t.token.length>0}),(e==="/get-session"||e==="/passkey/verify-authentication")&&pe(i.session)&&(i={...i,session:rt(i.session)}),i}function rt(e){if(!Object.hasOwn(e,"token"))return e;let t={...e};return delete t.token,t}function pe(e){return !!e&&typeof e=="object"&&!Array.isArray(e)}var Zo=new Set(["__proto__","constructor","prototype"]);function g(e){(!e||typeof e!="object"||Array.isArray(e))&&p();let t=Object.getPrototypeOf(e);return t!==Object.prototype&&t!==null&&p(),e}function R(e){return typeof e!="string"&&p(),e}function k(e){return typeof e!="boolean"&&p(),e}function T(e){return (!(e instanceof Date)||Number.isNaN(e.getTime()))&&p(),e}function ee(e){return (!Array.isArray(e)||!e.every(t=>typeof t=="string"))&&p(),[...e]}function E(e,t){let n=e[t];return n==null||typeof n=="string"?n:p()}function cn(e,t){let n=e[t];return n==null||typeof n=="boolean"?n:p()}function F(e){let t=g(e),n=t.email;return n!==null&&typeof n!="string"&&p(),{id:R(t.id),email:n,emailVerified:k(t.emailVerified),createdAt:T(t.createdAt),updatedAt:T(t.updatedAt),...M("phoneNumber",E(t,"phoneNumber")),...M("username",E(t,"username")),...M("displayUsername",E(t,"displayUsername")),...M("firstName",E(t,"firstName")),...M("lastName",E(t,"lastName")),...M("name",E(t,"name")),...M("image",E(t,"image")),...M("twoFactorEnabled",cn(t,"twoFactorEnabled"))}}function Ee(e){let t=g(e),n=t.membership;return {id:R(t.id),userId:R(t.userId),expiresAt:T(t.expiresAt),...M("activeOrganizationId",E(t,"activeOrganizationId")),...M("activeTeamId",E(t,"activeTeamId")),...M("membership",n==null?n:er(n)),...M("pendingMfaEnrollment",cn(t,"pendingMfaEnrollment"))}}function p(){throw new TypeError("AuthOwl response does not match its runtime contract.")}function J(e,t=20,n=1e4){return (!e||typeof e!="object"||Array.isArray(e))&&p(),ct(e,t,n)}function ct(e,t=20,n=1e4){return at(e,0,{nodes:0},t,n)}function er(e){let t=g(e);return {role:R(t.role),...t.roles===void 0?{}:{roles:ee(t.roles)},permissions:ee(t.permissions),...t.teams===void 0?{}:{teams:ee(t.teams)}}}function at(e,t,n,i,o){if(n.nodes+=1,(t>i||n.nodes>o)&&p(),e===null||typeof e=="string"||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||p(),e;if(Array.isArray(e))return e.map(u=>at(u,t+1,n,i,o));(!e||typeof e!="object")&&p();let r=Object.getPrototypeOf(e);r!==Object.prototype&&r!==null&&p();let c={};for(let[u,a]of Object.entries(e))Zo.has(u)&&p(),c[u]=at(a,t+1,n,i,o);return c}function M(e,t){return t===void 0?{}:{[e]:t}}function un({http:e,probe:t,tokens:n,channelName:i}){let o=new Set,r=null,c=null,u=null,a=null,h=null,s=null,d,f=y=>{m(y);};d={data:null,isPending:true,isRefetching:false,error:null,refetch:f};function O(y){d=y;for(let w of o)w();}async function l(y){return e.request("/get-session",{query:y?.query,decode:ut})}function m(y){if(y?.query?.disableCookieCache===true)return b(y);if(a)return a;if(h)return h;let w=b(y).finally(()=>{h===w&&(h=null);});return h=w,w}function A(){if(a)return a;let y=b({query:{disableCookieCache:true}}).finally(()=>{a===y&&(a=null);});return a=y,y}async function b(y){u?.abort();let w=new AbortController;u=w,O({...d,isPending:d.data===null&&d.error===null,isRefetching:d.data!==null});let K=n.beginRead(),ke=await e.request("/get-session",{query:y?.query,fetchOptions:{signal:w.signal},decode:ut});if(u===w&&(u=null,O({data:ke.data,error:ke.error,isPending:false,isRefetching:false,refetch:f}),ke.error===null)){if(ke.data===null){K.endIfDead();return}await S(K);}}async function S(y){if(n.needsProbe()){if(!y.carriedToken){y.recordCookieVerdict(true);return}return s||N(y)}}function N(y){let w=t.request("/get-session",{query:{disableCookieCache:true},decode:ut}).then(K=>{s===w&&K.error===null&&y.recordCookieVerdict(K.data!==null);}).finally(()=>{s===w&&(s=null);});return s=w,w}function H(){r?.postMessage({type:"session-changed"});}function L(){if(typeof window>"u"||c)return;let y=()=>{m();},w=()=>{document.visibilityState==="visible"&&m();};window.addEventListener("focus",y),document.addEventListener("visibilitychange",w),typeof BroadcastChannel<"u"&&(r=new BroadcastChannel(i),r.addEventListener("message",y)),c=()=>{window.removeEventListener("focus",y),document.removeEventListener("visibilitychange",w),r?.close(),r=null,c=null;};}function Y(y){return o.add(y),o.size===1&&(L(),m()),()=>{if(o.delete(y),o.size===0){let w=u;u=null,h=null,a=null,w?.abort(),c?.();}}}return n.measureWith(()=>{n.needsProbe()&&N(n.beginRead());}),{store:{subscribe:Y,getSnapshot:()=>d,refresh:A},getSession:l,notifyMutation(){H(),s&&s.catch(()=>{}).then(()=>{!n.needsProbe()&&n.hasToken()&&H();}),o.size>0&&m({query:{disableCookieCache:true}});}}}function ut(e){if(e===null)return null;let t=g(e);return (t.session===void 0||t.user===void 0)&&p(),{session:Ee(t.session),user:F(t.user)}}lt();function me(){let e=globalThis.crypto.getRandomValues(new Uint8Array(16));e[6]=e[6]&15|64,e[8]=e[8]&63|128;let t=Array.from(e,n=>n.toString(16).padStart(2,"0")).join("");return `${t.slice(0,8)}-${t.slice(8,12)}-${t.slice(12,16)}-${t.slice(16,20)}-${t.slice(20)}`}async function ln(e,t){return e.request("/user/metadata",{fetchOptions:t,decode:pn})}async function dn(e,t,n){return e.request("/user/metadata",{method:"PATCH",body:{expected_version:t.expectedVersion,unsafe_metadata:t.unsafeMetadata},fetchOptions:n,decode:pn})}function pn(e){let t=g(e),n=J(t.public_metadata),i=J(t.unsafe_metadata);if(!Number.isSafeInteger(t.metadata_version)||t.metadata_version<0)throw new TypeError("Invalid AuthOwl metadata response");return {publicMetadata:n,unsafeMetadata:i,metadataVersion:t.metadata_version}}function gn(e,t){let{post:n,mutation:i}=oe(e,t);return {getMetadata:o=>ln(e,o),updateUnsafeMetadata:(o,r)=>dn(e,o,r),updateProfile:(o,r)=>i(n("/update-user",o,r,he)),changeEmail:(o,r)=>i(n("/change-email",o,r,he)),changePassword:(o,r)=>i(n("/change-password",o,r,tr)),listSessions:o=>e.request("/list-sessions",{fetchOptions:o,decode:nr}),revokeSession:({sessionId:o},r)=>i(n("/revoke-session",{sessionId:o},r,he)),revokeOtherSessions:o=>i(n("/revoke-other-sessions",{},o,he)),listSocialAccounts:async o=>{let r=await e.request("/list-accounts",{fetchOptions:o,decode:ir});if(!r.data)return {data:null,error:r.error};let c=r.data.length>1;return {...r,data:r.data.filter(u=>u.providerId!=="credential").map(u=>({...u,canUnlink:c}))}},linkSocial:(o,r)=>n("/link-social",o,r,or),unlinkSocial:(o,r)=>i(n("/unlink-account",o,r,he)),delete:(o={},r)=>i(n("/delete-user",o,r,rr))}}function he(e){let t=g(e);return {status:k(t.status)}}function tr(e){let t=g(e);return {user:F(t.user)}}function nr(e){return Array.isArray(e)||p(),e.map(t=>{let n=g(t);return {id:R(n.id),userId:R(n.userId),createdAt:T(n.createdAt),updatedAt:T(n.updatedAt),expiresAt:T(n.expiresAt),...fn("ipAddress",E(n,"ipAddress")),...fn("userAgent",E(n,"userAgent"))}})}function ir(e){return Array.isArray(e)||p(),e.map(t=>{let n=g(t);return {id:R(n.id),userId:R(n.userId),providerId:R(n.providerId),accountId:R(n.accountId),scopes:ee(n.scopes),createdAt:T(n.createdAt),updatedAt:T(n.updatedAt)}})}function or(e){let t=g(e);return {url:R(t.url),redirect:k(t.redirect)}}function rr(e){let t=g(e);return {success:k(t.success),message:R(t.message)}}function fn(e,t){return t===void 0?{}:{[e]:t}}function Ce(e,t){return !e||!t?false:e.permissions.includes(t)}function mn(e,t){return !e||!t?false:e.teams?.includes(t)??false}function hn(e,t){return e?e.roles===void 0?e.role===t:e.roles.includes(t):false}function ve(e,t){if(!e)return  false;let{role:n,permission:i,teamId:o}=t;return !(n===void 0&&i===void 0&&o===void 0||n!==void 0&&!hn(e,n)||i!==void 0&&!e.permissions.includes(i)||o!==void 0&&!mn(e,o))}function sr(e){return {has:t=>ve(e,t),hasPermission:t=>Ce(e,t.permission)}}var ar=new Set(["pending","accepted","rejected","canceled"]),dt=1e4;function yn(e){let t=g(e);return t.recipientHint!==null&&t.recipientHint!=="new_user"&&p(),{recipientHint:t.recipientHint}}function re(e,t,n){let i=g(e),o={id:I(i.id),name:I(i.name),slug:I(i.slug),createdAt:T(i.createdAt),...ye("logo",E(i,"logo")),...ye("metadata",i.metadata===void 0?void 0:ct(i.metadata))};return B(o.id,t),B(o.slug,n),o}function An(e){return G(e,re)}function pt(e,t,n){return e===null?null:(t===null&&p(),re(e,t,n))}function On(e,t,n){if(e===null)return null;let i=g(e),o=re(i,t,n);return {...o,members:G(i.members,r=>xn(r,o.id)),invitations:G(i.invitations,r=>$(r,void 0,o.id))}}function ft(e,t,n=false){let i=G(e,o=>Ae(o));return n||be(i.map(o=>o.organizationId),t),i}function bn(e,t){let n=G(e,i=>gt(i));return be(n.map(i=>i.teamId),t),n}function gt(e,t,n){let i=g(e),o={id:I(i.id),teamId:I(i.teamId),userId:I(i.userId),createdAt:T(i.createdAt)};return B(o.teamId,t),B(o.userId,n),o}function wn(e,t,n){return e===null?null:(t===null&&p(),Ae(e,t,n))}function Rn(e,t){let n=g(e);return (!Number.isSafeInteger(n.total)||n.total<0)&&p(),{members:cr(n.members,t),total:n.total}}function $(e,t,n){let i=g(e),o=I(i.status);ar.has(o)||p();let r={id:I(i.id),organizationId:I(i.organizationId),email:Oe(i.email),role:I(i.role),status:o,inviterId:I(i.inviterId),expiresAt:T(i.expiresAt),createdAt:T(i.createdAt)};return B(r.id,t),B(r.organizationId,n),r}function Sn(e,t){let n=G(e,i=>$(i));return be(n.map(i=>i.organizationId),t),n}function kn(e){return G(e,t=>{let n=g(t);return {...$(n),organizationName:Oe(n.organizationName)}})}function Tn(e,t){let n=g(e);return {...$(n,t),organizationName:I(n.organizationName),organizationSlug:I(n.organizationSlug),inviterEmail:Dn(n.inviterEmail)}}function In(e,t){let n=g(e),i=$(n.invitation,t);return {invitation:i,member:se(n.member,void 0,i.organizationId)}}function Pn(e,t){let n=g(e);return n.member!==null&&p(),{invitation:n.invitation===null?null:$(n.invitation,t),member:null}}function En(e,t){return e===null?null:$(e,t)}function Cn(e,t,n){let i=g(e);return {member:se(i.member,n,t)}}function se(e,t,n){let i=g(e),o={id:I(i.id),organizationId:I(i.organizationId),userId:I(i.userId),role:I(i.role),createdAt:T(i.createdAt),...i.user===void 0?{}:{user:_n(i.user)}};return B(o.id,t),B(o.organizationId,n),o}function vn(e,t){let n=G(e,i=>{let o=g(i);return {organizationId:I(o.organizationId),data:{role:I(o.role),...ye("permission",o.permission===void 0?void 0:ur(o.permission)),...ye("customPermissionKeys",o.customPermissionKeys===void 0?void 0:ee(o.customPermissionKeys))}}});return be(n.map(i=>i.organizationId),t),n.map(i=>i.data)}function Ae(e,t,n){let i=g(e),o=i.updatedAt,r={id:I(i.id),name:Oe(i.name),organizationId:I(i.organizationId),createdAt:T(i.createdAt),...o===void 0?{}:{updatedAt:T(o)}};return B(r.id,t),B(r.organizationId,n),r}function mt(e){let t=g(e);return {message:Oe(t.message)}}function xn(e,t){let n=g(e);return {...se(n,void 0,t),user:_n(n.user)}}function cr(e,t){let n=G(e,i=>xn(i));return be(n.map(i=>i.organizationId),t),n}function ur(e){let t=g(e),n={};for(let[i,o]of Object.entries(t))(i==="__proto__"||i==="constructor"||i==="prototype"||i.length===0||i.length>dt||!Array.isArray(o))&&p(),n[i]=o.map(r=>I(r));return n}function I(e){let t=R(e);return (t.length===0||t.length>dt)&&p(),t}function Oe(e){if(e==null)return "";let t=R(e);return t.length>dt&&p(),t}function Dn(e){return e===null?null:I(e)}function B(e,t){t!==void 0&&e!==t&&p();}function be(e,t){let n=t??e[0];n!==void 0&&e.some(i=>i!==n)&&p();}function _n(e){let t=g(e);return {id:I(t.id),name:Oe(t.name),email:Dn(t.email),...ye("image",E(t,"image"))}}function G(e,t){return Array.isArray(e)||p(),e.map(n=>t(n))}function ye(e,t){return t===void 0?{}:{[e]:t}}function Un(e,t,n=()=>null){let{post:i,mutation:o}=oe(e,t),r=new Set,c=()=>{for(let s of r)try{s();}catch{}},u=new Map,a=(s,d,f,O)=>{if(f)return e.request(s,{query:d,fetchOptions:f,decode:O});let l=`${s}\0${JSON.stringify(d??null)}`,m=u.get(l);if(m)return m;let A=e.request(s,{query:d,decode:O}).finally(()=>{u.delete(l);});return u.set(l,A),A},h=async s=>{let d=await o(s).finally(()=>u.clear());return d.error===null&&c(),d};return {subscribe(s){return r.add(s),()=>r.delete(s)},create:(s,d)=>h(i("/organization/create",s,d,re)),list:s=>a("/organization/list",void 0,s,An),get:(s={},d)=>a("/organization/get-full-organization",{organizationId:s.organizationId,organizationSlug:s.organizationSlug,membersLimit:s.membersLimit},d,f=>On(f,s.organizationId,s.organizationSlug)),setActive:(s,d)=>h(i("/organization/set-active",s,d,f=>pt(f,s.organizationId,s.organizationSlug))),createTeam:(s,d)=>h(i("/organization/create-team",s,d,f=>Ae(f,void 0,s.organizationId))),listTeams:(s={},d)=>a("/organization/list-teams",{organizationId:s.organizationId},d,f=>ft(f,s.organizationId)),updateTeam:(s,d)=>h(i("/organization/update-team",s,d,f=>Ae(f,s.teamId,s.data.organizationId))),removeTeam:(s,d)=>h(i("/organization/remove-team",s,d,mt)),listUserTeams:s=>a("/organization/list-user-teams",void 0,s,d=>ft(d,void 0,true)),listTeamMembers:(s={},d)=>a("/organization/list-team-members",{teamId:s.teamId},d,f=>bn(f,s.teamId)),addTeamMember:(s,d)=>h(i("/organization/add-team-member",s,d,f=>gt(f,s.teamId,s.userId))),removeTeamMember:(s,d)=>h(i("/organization/remove-team-member",s,d,mt)),setActiveTeam:(s,d)=>h(i("/organization/set-active-team",s,d,f=>wn(f,s.teamId))),update:(s,d)=>h(i("/organization/update",s,d,f=>pt(f,s.organizationId))),delete:(s,d)=>h(i("/organization/delete",s,d,f=>re(f,s.organizationId))),listMembers:(s={},d)=>a("/organization/list-members",{organizationId:s.organizationId,organizationSlug:s.organizationSlug,limit:s.limit,offset:s.offset,sortBy:s.sortBy,sortDirection:s.sortDirection,filterField:s.filterField,filterValue:s.filterValue,filterOperator:s.filterOperator},d,f=>Rn(f,s.organizationId)),inviteMember:(s,d)=>h(i("/organization/invite-member",s,d,f=>$(f,void 0,s.organizationId))),listInvitations:(s={},d)=>a("/organization/list-invitations",{organizationId:s.organizationId},d,f=>Sn(f,s.organizationId)),listUserInvitations:s=>a("/organization/list-user-invitations",void 0,s,kn),getInvitation:(s,d)=>a("/organization/get-invitation",{id:s.id},d,f=>Tn(f,s.id)),getInvitationRecipientHint:(s,d)=>a("/organization/invitation-recipient-hint",{invitationId:s.invitationId},d,yn),acceptInvitation:(s,d)=>h(i("/organization/accept-invitation",s,d,f=>In(f,s.invitationId))),rejectInvitation:(s,d)=>h(i("/organization/reject-invitation",s,d,f=>Pn(f,s.invitationId))),cancelInvitation:(s,d)=>h(i("/organization/cancel-invitation",s,d,f=>En(f,s.invitationId))),removeMember:(s,d)=>h(i("/organization/remove-member",s,d,f=>Cn(f,s.organizationId,s.memberIdOrEmail.includes("@")?void 0:s.memberIdOrEmail))),updateMemberRole:(s,d)=>h(i("/organization/update-member-role",s,d,f=>se(f,s.memberId,s.organizationId))),leave:(s,d)=>h(i("/organization/leave",s,d,f=>se(f,void 0,s.organizationId))),listRoles:(s={},d)=>a("/organization/list-roles",{organizationId:s.organizationId},d,f=>vn(f,s.organizationId)),has:s=>ve(n(),s),hasPermission:s=>Ce(n(),s.permission)}}function _e(e){return {listConsentPreferences:t=>e.request("/privacy/consent-decisions",{fetchOptions:t,decode:lr}),recordConsent:(t,n)=>e.request("/privacy/consent-decisions",{method:"POST",body:{...t,correlationId:t.correlationId??me()},fetchOptions:n,decode:pr}),listRightsRequests:t=>e.request("/privacy/rights",{fetchOptions:t,decode:fr}),createRightsRequest:(t,n)=>e.request("/privacy/rights",{method:"POST",body:t,fetchOptions:n,decode:gr})}}function lr(e){let t=g(e);return Array.isArray(t.preferences)||p(),{preferences:t.preferences.map(dr)}}function dr(e){let t=g(e);return {purposeId:R(t.purposeId),purposeVersionId:R(t.purposeVersionId),code:R(t.code),state:mr(t.state,["granted","refused","withdrawn"]),updatedAt:xe(t.updatedAt),decidedAt:xe(t.decidedAt)}}function pr(e){let t=g(e);return t.recorded!==true&&p(),{recorded:true,decision:we(t.decision,["granted","refused","withdrawn"]),decidedAt:De(t.decidedAt)}}function fr(e){let t=g(e);return Array.isArray(t.requests)||p(),{requests:t.requests.map(zn)}}function gr(e){return {request:zn(g(e).request)}}function zn(e){let t=g(e);return {id:R(t.id),rightType:we(t.rightType,["access","correction","portability","erasure","restriction","objection","consent_withdrawal"]),state:we(t.state,["received","identity_pending","in_progress","restricted","completed","denied","withdrawn"]),locale:we(t.locale,["en","ar"]),receivedAt:De(t.receivedAt),acknowledgedAt:xe(t.acknowledgedAt),fulfilmentDeadline:De(t.fulfilmentDeadline),completedAt:xe(t.completedAt)}}function xe(e){return e===null?null:De(e)}function De(e){if(e instanceof Date)return T(e);typeof e!="string"&&p();let t=new Date(e);return Number.isNaN(t.getTime())&&p(),t}function we(e,t){return (typeof e!="string"||!t.includes(e))&&p(),e}function mr(e,t){return e===null?null:we(e,t)}var Nn=4096,hr=4096,yr=100,Ar=256,Or=16,br=64,wr=12;function yt(e){let t=g(e);return t.twoFactorRedirect===true?((t.user!==void 0||t.redirect!==void 0||t.url!==void 0)&&p(),{twoFactorRedirect:true,...t.twoFactorMethods===void 0?{}:{twoFactorMethods:ei(t.twoFactorMethods,Or,br)}}):(t.twoFactorRedirect!==void 0&&p(),{redirect:k(t.redirect),...Ir(t,"url"),user:F(t.user)})}function Ln(e){let t=g(e);return {user:F(t.user)}}function Mn(e){let t=g(e);return {sessionCreated:k(t.sessionCreated),user:F(t.user)}}function Fn(e,t){let n=g(e),i=k(n.redirect);n.user===null&&p();let o=n.user!==void 0&&n.user!==null,r=n.url!==void 0&&n.url!==null;return i?((o||!r)&&p(),{redirect:true,url:ht(n.url,t)}):(o===r&&p(),o?{redirect:false,user:F(n.user)}:{redirect:false,url:ht(n.url,t)})}function Vn(e,t){let n=g(e);return (n.redirect!==true||n.user!==void 0)&&p(),{redirect:true,url:ht(n.url,t)}}function qn(e){return {status:k(g(e).status)}}function Hn(e){return {success:k(g(e).success)}}function Kn(e){return g(e).status!=="pending"&&p(),{status:"pending"}}function Bn(e){let t=g(e);if(t.kind==="authowl_turnstile")return {kind:"authowl_turnstile"};t.kind!=="akedly_shield_v1_2"&&p();let n=g(t.turnstile),i=n.siteKey===null?null:R(n.siteKey);return {kind:"akedly_shield_v1_2",connectionId:R(t.connectionId),challenge:R(t.challenge),difficulty:Rr(t.difficulty),challengeToken:R(t.challengeToken),challengeRequired:k(t.challengeRequired),turnstile:{required:k(n.required),siteKey:i}}}function Rr(e){return (!Number.isSafeInteger(e)||Number(e)<0||Number(e)>wr)&&p(),Number(e)}function jn(e){let t=g(e);return (t.status!==true||t.sessionCreated!==true)&&p(),{status:true,sessionCreated:true,user:Sr(t.user)}}function At(e){return {status:k(g(e).status)}}function Jn(e){return {status:k(g(e).status)}}function Gn(e){let t=g(e);return {status:k(t.status),user:F(t.user)}}function $n(e){return {success:k(g(e).success)}}function Wn(e){let t=g(e);return {totpURI:Tr(t.totpURI),backupCodes:Zn(t.backupCodes)}}function Yn(e){return {status:k(g(e).status)}}function Ue(e){return g(e).status!==true&&p(),{status:true}}function Xn(e){return {status:k(g(e).status)}}function Qn(e){let t=g(e);return t.status!==void 0&&t.status!==true&&p(),{backupCodes:Zn(t.backupCodes)}}function Sr(e){let t=g(e);return {id:ae(t.id,512),...Pr(t,"name",1024),phoneNumber:ae(t.phoneNumber,64),phoneNumberVerified:k(t.phoneNumberVerified),...t.createdAt===void 0?{}:{createdAt:T(t.createdAt)},...t.updatedAt===void 0?{}:{updatedAt:T(t.updatedAt)}}}function ht(e,t){let n=ae(e,Nn);/[\u0000-\u0020\u007f]/u.test(n)&&p();let i;try{i=new URL(n);}catch{return p()}return (i.username||i.password)&&p(),i.protocol==="https:"||t&&i.protocol==="http:"&&kr(i.hostname)?i.href:p()}function kr(e){let t=e.toLowerCase();return t==="localhost"||t==="127.0.0.1"||t==="[::1]"}function Tr(e){let t=ae(e,hr),n;try{n=new URL(t);}catch{return p()}let i=n.searchParams.get("secret");return (n.protocol!=="otpauth:"||n.hostname.toLowerCase()!=="totp"||n.username||n.password||n.hash||i===null||i.length===0||i.length>512||/\s/u.test(i))&&p(),t}function Zn(e){return ei(e,yr,Ar)}function ei(e,t,n){(!Array.isArray(e)||e.length===0||e.length>t)&&p();let i=e.map(o=>ae(o,n));return i.some(o=>o.trim().length===0)&&p(),new Set(i).size!==i.length&&p(),i}function ae(e,t){let n=R(e);return (n.length===0||n.length>t)&&p(),n}function Ir(e,t){let n=e[t];return n==null?{}:{[t]:ae(n,Nn)}}function Pr(e,t,n){let i=E(e,t);return i===void 0?{}:(i!==null&&i.length>n&&p(),{[t]:i})}var ti=new Set([1564,8206,8207,8234,8235,8236,8237,8238,8294,8295,8296,8297]),ze=new Set([9,10,11,12,13,32,133,160,5760,8192,8193,8194,8195,8196,8197,8198,8199,8200,8201,8202,8232,8233,8239,8287,12288,65279]);function Ne(e){if(e===void 0)return {valid:true,value:void 0};for(let n of e){let i=n.codePointAt(0);if(i===void 0||ii(n,i)||ni(i)||ti.has(i))return {valid:false}}let t=Er(e);return Ot(t)?{valid:true,value:t}:{valid:false}}function Ot(e){let t=0,n,i;for(let o of e){if(t+=1,t>256)return  false;let r=o.codePointAt(0);if(r===void 0||ii(o,r)||ni(r)||ti.has(r))return  false;n??=r,i=r;}return t>0&&n!==void 0&&i!==void 0&&!ze.has(n)&&!ze.has(i)}function Le(){return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:"INVALID_PASSKEY_NAME",message:"Passkey names must contain 1 to 256 safe Unicode characters."}}}function Er(e){let t=0,n=e.length;for(;t<n;){let i=e.codePointAt(t);if(i===void 0||!ze.has(i))break;t+=i>65535?2:1;}for(;n>t;){let i=e.codePointAt(n-1);if(i===void 0)break;let r=i>=56320&&i<=57343?n-2:n-1,c=e.codePointAt(r);if(c===void 0||!ze.has(c))break;n=r;}return e.slice(t,n)}function ni(e){return e>=0&&e<=31||e>=127&&e<=159}function ii(e,t){return e.length===1&&t>=55296&&t<=57343}var si=12,ai=5e3,Cr=8,vr=1e3,xr=16,oi=512,ci=100,ui=8192,Dr=32768,bt=1024,ri=256,Rt=64,_r=6e5,Ur=/^[A-Za-z0-9_-]+$/u,zr=/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u,Nr=/[\u0000-\u001f\u007f-\u009f\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]/u,Lr=/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?$/u,Mr=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu,li=new Set(["discouraged","preferred","required"]),Fr=new Set(["singleDevice","multiDevice"]),di=new Set(["ble","cable","hybrid","internal","nfc","smart-card","usb"]),pi=new Set(["hybrid","security-key","client-device"]),Vr=new Set(["none","indirect","direct","enterprise"]),qr=new Set(["fido-u2f","packed","android-safetynet","android-key","tpm","apple","none"]),Hr=new Set(["platform","cross-platform"]),Kr=new Set(["discouraged","preferred","required"]),Br=new Set([-8,-7,-257]);function fi(e){let t=J(e,si,ai);return {challenge:Si(t.challenge),...v("timeout",wi(t.timeout)),...v("rpId",ki(t.rpId)),...v("allowCredentials",bi(t.allowCredentials)),...v("userVerification",Re(t.userVerification,li)),...v("hints",Me(t.hints,pi)),...v("extensions",Ri(t.extensions))}}function gi(e){let t=J(e,si,ai);return {challenge:Si(t.challenge),rp:jr(t.rp),user:Jr(t.user),pubKeyCredParams:Gr(t.pubKeyCredParams),...v("timeout",wi(t.timeout)),...v("excludeCredentials",bi(t.excludeCredentials)),...v("authenticatorSelection",$r(t.authenticatorSelection)),...v("attestation",Re(t.attestation,Vr)),...v("attestationFormats",Me(t.attestationFormats,qr)),...v("hints",Me(t.hints,pi)),...v("extensions",Ri(t.extensions))}}function mi(e){let t=g(e),n=Ee(t.session),i=F(t.user);return n.userId!==i.id&&p(),{session:n,user:i}}function St(e){let t=g(e),n=t.counter;(!Number.isSafeInteger(n)||n<0)&&p();let i=kt(t.deviceType,Fr),o=k(t.backedUp);return o&&i!=="multiDevice"&&p(),{id:ce(t.id,ri),...Xr(t),publicKey:Wr(t.publicKey,Dr),userId:ce(t.userId,ri),credentialID:Ve(t.credentialID,ui),counter:n,deviceType:i,backedUp:o,...Qr(t),createdAt:T(t.createdAt),...Zr(t)}}function hi(e,t,n){let i=St(e);return (i.credentialID!==t||(n===void 0?i.name!==void 0&&i.name!==null:i.name!==n))&&p(),i}function yi(e){(!Array.isArray(e)||e.length>ci)&&p();let t=e.map(St);return Fe(t.map(n=>n.id)),Fe(t.map(n=>n.credentialID)),t.length>1&&t.some(n=>n.userId!==t[0]?.userId)&&p(),t}function Ai(e,t,n){let i=g(e),o=St(i.passkey);return (o.id!==t||o.name!==n)&&p(),{passkey:o}}function Oi(e){return g(e).status!==true&&p(),{status:true}}function jr(e){let t=g(e);return {name:wt(t.name,bt),...v("id",ki(t.id))}}function Jr(e){let t=g(e);return {id:Ve(t.id,128,1,64),name:wt(t.name,bt),displayName:wt(t.displayName,bt)}}function Gr(e){(!Array.isArray(e)||e.length===0||e.length>Rt)&&p();let t=e.map(n=>{let i=g(n);return (i.type!=="public-key"||!Number.isSafeInteger(i.alg)||!Br.has(i.alg))&&p(),{type:"public-key",alg:i.alg}});return es(t.map(n=>n.alg)),t}function bi(e){if(e===void 0)return;(!Array.isArray(e)||e.length>ci)&&p();let t=e.map(n=>{let i=g(n);return i.type!=="public-key"&&p(),{type:"public-key",id:Ve(i.id,ui),...v("transports",Me(i.transports,di))}});return Fe(t.map(n=>n.id)),t}function $r(e){if(e===void 0)return;let t=g(e);t.requireResidentKey!==void 0&&typeof t.requireResidentKey!="boolean"&&p();let n=Re(t.residentKey,Kr);return t.requireResidentKey!==void 0&&n!==void 0&&t.requireResidentKey!==(n==="required")&&p(),{...v("authenticatorAttachment",Re(t.authenticatorAttachment,Hr)),...v("residentKey",n),...v("requireResidentKey",t.requireResidentKey),...v("userVerification",Re(t.userVerification,li))}}function wi(e){return e!==void 0&&(typeof e!="number"||!Number.isFinite(e)||e<0||e>_r)&&p(),e}function Ri(e){return e===void 0?void 0:J(e,Cr,vr)}function Me(e,t){if(e===void 0)return;(!Array.isArray(e)||e.length>Rt)&&p();let n=e.map(i=>kt(i,t));return Fe(n),n}function Re(e,t){if(e!==void 0)return kt(e,t)}function Si(e){return Ve(e,Math.ceil(oi*4/3),xr,oi)}function Ve(e,t,n=1,i=Number.POSITIVE_INFINITY){let o=ce(e,t),r=o.length%4,c=Yr(o.at(-1)??""),u=Math.floor(o.length*3/4);return (!Ur.test(o)||r===1||r===2&&(c&15)!==0||r===3&&(c&3)!==0||u<n||u>i)&&p(),o}function ce(e,t){let n=R(e);return (n.length===0||n.length>t)&&p(),n}function wt(e,t){let n=ce(e,t);return Nr.test(n)&&p(),n}function ki(e){if(e===void 0)return;let t=ce(e,253);return t!=="localhost"&&(t.endsWith(".")||!t.includes(".")||t.split(".").some(n=>!Lr.test(n)))&&p(),t}function Wr(e,t){let n=ce(e,t),i=n.endsWith("=="),o=!i&&n.endsWith("="),r=n.at(i?-3:o?-2:-1)??"",c=Ti(r);return (n.length%4!==0||!zr.test(n)||i&&(c&15)!==0||o&&(c&3)!==0)&&p(),n}function Yr(e){return Ti(e,true)}function Ti(e,t=false){return (t?"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_":"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/").indexOf(e)}function Xr(e){let t=E(e,"name");return t===void 0?{}:(t!==null&&!Ot(t)&&p(),{name:t})}function Qr(e){let t=E(e,"transports");if(t==null||t==="")return t===void 0?{}:{transports:t};let n=t.split(",");return (n.length>Rt||n.some(i=>!di.has(i))||new Set(n).size!==n.length)&&p(),{transports:t}}function Zr(e){let t=E(e,"aaguid");return t==null?t===void 0?{}:{aaguid:null}:(Mr.test(t)||p(),{aaguid:t})}function kt(e,t){let n=R(e);return t.has(n)||p(),n}function v(e,t){return t===void 0?{}:{[e]:t}}function Fe(e){new Set(e).size!==e.length&&p();}function es(e){new Set(e).size!==e.length&&p();}function us(e,t){if(!t)return e;let n=t.catch(()=>{});return n.then(()=>{n=null;}),{async request(i,o){return n&&await n,e.request(i,o)}}}var xi=new Map;function ls(e,t,n){let i=xi.get(n);if(!i){let o=new URLSearchParams(window.location.hash.slice(1)).get("authowl_code");if(!o)return;i=Promise.resolve().then(()=>(He(),qe)).then(r=>r.completeCrossSiteSignIn(e,t,o)),xi.set(n,i);}return i}function Di(e){return !ge()||e.idToken||e.disableRedirect?"legacy":"first-party"}function Ui(e,t=()=>{},n=ds){let i=fe(e),o=e.session.tokens,r=ge()?ls(i,o,e.decoded.projectId):void 0,c=us(i,r),u=un({http:c,probe:fe({...e,fetch:e.session.probe}),tokens:o,channelName:`authowl:${e.decoded.projectId}`}),a=n(c,u.notifyMutation),h=()=>{u.notifyMutation(),t();},{post:s,mutation:d}=oe(c,h),f=e.decoded.env==="test",O=l=>{o.beginSession({remember:l?.rememberMe!==false});};return {sessionStore:u.store,getSession:u.getSession,account:gn(c,h),organization:Un(c,h,()=>u.store.getSnapshot().data?.session.membership??null),privacy:_e(c),signIn:{email:(l,m)=>(O(l),d(s("/sign-in/email",l,m,yt),A=>!("twoFactorRedirect"in A))),username:(l,m)=>(O(l),d(s("/sign-in/username",l,m,yt),A=>!("twoFactorRedirect"in A))),social:async(l,m)=>{if(O(),Di(l)==="first-party"){let{beginCrossSiteSignIn:b}=await Promise.resolve().then(()=>(He(),qe)),S=await b(e,{kind:"social",provider:l.provider,callbackURL:l.callbackURL,errorCallbackURL:l.errorCallbackURL,newUserCallbackURL:l.newUserCallbackURL,scopes:l.scopes,loginHint:l.loginHint,requestSignUp:l.requestSignUp});if(S)return window.location.assign(S),{data:{redirect:true,url:S},error:null}}let A=await d(s("/sign-in/social",l,m,b=>Fn(b,f)),b=>"user"in b);return A.error!==null||A.data===null||"url"in A.data&&A.data.redirect&&!l.disableRedirect&&typeof window<"u"&&window.location.assign(A.data.url),A},sso:async(l,m)=>{if(Di(l)==="first-party"){let{beginCrossSiteSignIn:b}=await Promise.resolve().then(()=>(He(),qe)),S=await b(e,{kind:"sso",email:l.email,providerId:l.providerId,domain:l.domain,organizationSlug:l.organizationSlug,callbackURL:l.callbackURL,errorCallbackURL:l.errorCallbackURL,newUserCallbackURL:l.newUserCallbackURL});if(S)return window.location.assign(S),{data:{url:S,redirect:true},error:null}}let A=await s("/sign-in/sso",l,m,b=>Vn(b,f));return A.error!==null||A.data===null||typeof window<"u"&&window.location.assign(A.data.url),A},magicLink:(l,m)=>s("/sign-in/magic-link",l,m,qn),emailOtp:(l,m)=>(O(),d(s("/sign-in/email-otp",l,m,Ln))),passkey:(l,m)=>(O(),a.signIn(l,m))},signUp:{email:(l,m)=>(O(),d(s("/sign-up/email",l,m,Mn),A=>A.sessionCreated))},emailOtp:{sendVerificationOtp:(l,m)=>s("/email-otp/send-verification-otp",l,m,Hn),verifyEmail:(l,m)=>(O(),d(s("/email-otp/verify-email",l,m,Gn)))},phoneOtp:{prepare:l=>s("/phone-otp/challenge",{},l,Bn),start:(l,m)=>s("/phone-otp/start",{...l,idempotencyKey:l.idempotencyKey??me()},m,Kn),verify:(l,m)=>(O(),d(s("/phone-otp/verify",l,m,jn)))},requestPasswordReset:(l,m)=>s("/request-password-reset",l,m,At),resetPassword:(l,m)=>s("/reset-password",l,m,At),sendVerificationEmail:(l,m)=>s("/send-verification-email",l,m,Jn),passkey:{addPasskey:(l,m)=>a.add(l,m),listUserPasskeys:()=>c.request("/passkey/list-user-passkeys",{decode:yi}),updatePasskey:async(l,m)=>{let A=Ne(l.name);if(!A.valid||A.value===void 0)return Le();let b=A.value;return s("/passkey/update-passkey",{...l,name:b},m,S=>Ai(S,l.id,b))},deletePasskey:(l,m)=>s("/passkey/delete-passkey",l,m,Oi)},twoFactor:{enable:(l,m)=>s("/two-factor/enable",l,m,Wn),disable:(l,m)=>d(s("/two-factor/disable",l,m,Yn),A=>A.status),verifyTotp:(l,m)=>d(s("/two-factor/verify-totp",l,m,Ue)),verifyBackupCode:(l,m)=>d(s("/two-factor/verify-backup-code",l,m,Ue)),sendOtp:(l={},m)=>s("/two-factor/send-otp",l,m,Xn),verifyOtp:(l,m)=>d(s("/two-factor/verify-otp",l,m,Ue)),generateBackupCodes:(l,m)=>s("/two-factor/generate-backup-codes",l,m,Qn)},signOut:l=>d(c.request("/sign-out",{method:"POST",body:{},fetchOptions:l,decode:$n}).then(m=>(o.endSession(),m)),m=>m.success)}}function ds(){return {signIn:()=>_i(),add:()=>_i()}}function _i(){return Promise.resolve({data:null,error:{status:400,statusText:"BAD_REQUEST",code:"PASSKEY_BROWSER_REQUIRED",message:"This passkey ceremony requires a browser with WebAuthn."}})}function Vi(e,t,n){let i=new Map;return {async signIn(o={},r){let c=await e.request("/passkey/generate-authenticate-options");if(!c.data)return Li(c.error);let u;try{u=fi(c.data);}catch{return zi()}let a;try{a=await n.authenticate({optionsJSON:u,useBrowserAutofill:o.autoFill});}catch(O){return Mi(n,O,"AUTH_CANCELLED","Passkey authentication was cancelled.")}if(!ps(a))return Ni();let{clientExtensionResults:h,...s}=a,d=i.get(a.id);if(d)return d;let f=(async()=>{let O=await e.request("/passkey/verify-authentication",{method:"POST",body:{response:s},fetchOptions:r,decode:mi});return O.data&&t(),O})();i.set(a.id,f);try{return await f}finally{i.get(a.id)===f&&i.delete(a.id);}},async add(o={},r){let c=Ne(o.name);if(!c.valid)return Le();let u=await e.request("/passkey/generate-register-options",{query:{name:c.value,authenticatorAttachment:o.authenticatorAttachment}});if(!u.data)return Li(u.error);let a;try{a=gi(u.data);}catch{return zi()}let h;try{h=await n.register({optionsJSON:a});}catch(O){return Mi(n,O,"REGISTRATION_CANCELLED","Passkey registration was cancelled.")}if(!fs(h))return Ni();let{clientExtensionResults:s,...d}=h,f=await e.request("/passkey/verify-registration",{method:"POST",body:{response:d,name:c.value},fetchOptions:r,decode:O=>hi(O,h.id,c.value)});return f.data&&t(),f}}}function zi(){return {data:null,error:{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned invalid WebAuthn options."}}}function Ni(){return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:"INVALID_WEBAUTHN_RESPONSE",message:"The platform returned an invalid passkey response."}}}function qi(e){if(!e||typeof e!="object")return  false;let t=e;return typeof t.id=="string"&&t.id.length>0&&typeof t.rawId=="string"&&t.rawId.length>0&&t.type==="public-key"&&!!t.response&&typeof t.response=="object"}function ps(e){if(!qi(e))return  false;let t=e.response;return typeof t.clientDataJSON=="string"&&typeof t.authenticatorData=="string"&&typeof t.signature=="string"&&(t.userHandle===void 0||typeof t.userHandle=="string")}function fs(e){if(!qi(e))return  false;let t=e.response;return typeof t.clientDataJSON=="string"&&typeof t.attestationObject=="string"}function Li(e){return {data:null,error:e??{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned no WebAuthn options."}}}function Mi(e,t,n,i){let o=ms(t,"page does not have focus"),r=e.errorCode?.(t),c=r!==void 0?r==="ERROR_CEREMONY_ABORTED":Fi(t)==="AbortError",u=n!=="AUTH_CANCELLED",a=gs(r,Fi(t),u);return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:o?"PASSKEY_PAGE_NOT_FOCUSED":c?n:r??"PASSKEY_BROWSER_ERROR",message:o?"Keep this page focused while completing the passkey prompt.":c?i:a}}}function gs(e,t,n){switch(e){case "ERROR_INVALID_DOMAIN":case "ERROR_INVALID_RP_ID":return "Passkeys are not set up for this site\u2019s domain.";case "ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED":return "This device already has a passkey for this account.";case "ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEY_ALGS":case "ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT":case "ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT":return "This device cannot create a passkey for this site.";}return t==="NotAllowedError"?n?"No passkey was created. The prompt was dismissed or timed out.":"No passkey was used. This device may not have one saved for this site yet, or the prompt was dismissed.":t==="SecurityError"?"Passkeys are not set up for this site\u2019s domain.":n?"Passkey registration did not complete.":"Passkey sign-in did not complete."}function Fi(e){return e&&typeof e=="object"&&"name"in e&&typeof e.name=="string"?e.name:void 0}function ms(e,t){let n=t.toLowerCase(),i=new Set,o=e;for(;o&&typeof o=="object"&&!i.has(o);){if(i.add(o),"message"in o&&typeof o.message=="string"&&o.message.toLowerCase().includes(n))return  true;o="cause"in o?o.cause:void 0;}return  false}function V(e){let t=new Uint8Array(e),n="";for(let o of t)n+=String.fromCharCode(o);return btoa(n).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function te(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),n=(4-t.length%4)%4,i=t.padEnd(t.length+n,"="),o=atob(i),r=new ArrayBuffer(o.length),c=new Uint8Array(r);for(let u=0;u<o.length;u++)c[u]=o.charCodeAt(u);return r}function ne(){return hs.stubThis(globalThis?.PublicKeyCredential!==void 0&&typeof globalThis.PublicKeyCredential=="function")}var hs={stubThis:e=>e};function Ke(e){let{id:t}=e;return {...e,id:te(t),transports:e.transports}}function Be(e){return e==="localhost"||/^((xn--[a-z0-9-]+|[a-z0-9]+(-[a-z0-9]+)*)\.)+([a-z]{2,}|xn--[a-z0-9-]+)$/i.test(e)}var P=class extends Error{constructor({message:t,code:n,cause:i,name:o}){super(t,{cause:i}),Object.defineProperty(this,"code",{enumerable:true,configurable:true,writable:true,value:void 0}),this.name=o??i.name,this.code=n;}};function Hi({error:e,options:t}){let{publicKey:n}=t;if(!n)throw Error("options was missing required publicKey property");if(e.name==="AbortError"){if(t.signal instanceof AbortSignal)return new P({message:"Registration ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:e})}else if(e.name==="ConstraintError"){if(n.authenticatorSelection?.requireResidentKey===true)return new P({message:"Discoverable credentials were required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT",cause:e});if(t.mediation==="conditional"&&n.authenticatorSelection?.userVerification==="required")return new P({message:"User verification was required during automatic registration but it could not be performed",code:"ERROR_AUTO_REGISTER_USER_VERIFICATION_FAILURE",cause:e});if(n.authenticatorSelection?.userVerification==="required")return new P({message:"User verification was required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT",cause:e})}else {if(e.name==="InvalidStateError")return new P({message:"The authenticator was previously registered",code:"ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED",cause:e});if(e.name==="NotAllowedError")return new P({message:e.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:e});if(e.name==="NotSupportedError")return n.pubKeyCredParams.filter(o=>o.type==="public-key").length===0?new P({message:'No entry in pubKeyCredParams was of type "public-key"',code:"ERROR_MALFORMED_PUBKEYCREDPARAMS",cause:e}):new P({message:"No available authenticator supported any of the specified pubKeyCredParams algorithms",code:"ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEYCREDPARAMS_ALG",cause:e});if(e.name==="SecurityError"){let i=globalThis.location.hostname;if(Be(i)){if(n.rp.id!==i)return new P({message:`The RP ID "${n.rp.id}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:e})}else return new P({message:`${globalThis.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:e})}else if(e.name==="TypeError"){if(n.user.id.byteLength<1||n.user.id.byteLength>64)return new P({message:"User ID was not between 1 and 64 characters",code:"ERROR_INVALID_USER_ID_LENGTH",cause:e})}else if(e.name==="UnknownError")return new P({message:"The authenticator was unable to process the specified options, or could not create a new credential",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:e})}return e}var Pt=class{constructor(){Object.defineProperty(this,"controller",{enumerable:true,configurable:true,writable:true,value:void 0});}createNewAbortSignal(){if(this.controller){let n=new Error("Cancelling existing WebAuthn API call for new one");n.name="AbortError",this.controller.abort(n);}let t=new AbortController;return this.controller=t,t.signal}cancelCeremony(){if(this.controller){let t=new Error("Manually cancelling existing WebAuthn API call");t.name="AbortError",this.controller.abort(t),this.controller=void 0;}}},je=new Pt;var ys=["cross-platform","platform"];function Je(e){if(e&&!(ys.indexOf(e)<0))return e}async function Ki(e){!e.optionsJSON&&e.challenge&&(console.warn("startRegistration() was not called correctly. It will try to continue with the provided options, but this call should be refactored to use the expected call structure instead. See https://simplewebauthn.dev/docs/packages/browser#typeerror-cannot-read-properties-of-undefined-reading-challenge for more information."),e={optionsJSON:e});let{optionsJSON:t,useAutoRegister:n=false}=e;if(!ne())throw new Error("WebAuthn is not supported in this browser");let i={...t,challenge:te(t.challenge),user:{...t.user,id:te(t.user.id)},excludeCredentials:t.excludeCredentials?.map(Ke)},o={};n&&(o.mediation="conditional"),o.publicKey=i,o.signal=je.createNewAbortSignal();let r;try{r=await navigator.credentials.create(o);}catch(l){throw Hi({error:l,options:o})}if(!r)throw new Error("Registration was not completed");let{id:c,rawId:u,response:a,type:h}=r,s;typeof a.getTransports=="function"&&(s=a.getTransports());let d;if(typeof a.getPublicKeyAlgorithm=="function")try{d=a.getPublicKeyAlgorithm();}catch(l){Et("getPublicKeyAlgorithm()",l);}let f;if(typeof a.getPublicKey=="function")try{let l=a.getPublicKey();l!==null&&(f=V(l));}catch(l){Et("getPublicKey()",l);}let O;if(typeof a.getAuthenticatorData=="function")try{O=V(a.getAuthenticatorData());}catch(l){Et("getAuthenticatorData()",l);}return {id:c,rawId:V(u),response:{attestationObject:V(a.attestationObject),clientDataJSON:V(a.clientDataJSON),transports:s,publicKeyAlgorithm:d,publicKey:f,authenticatorData:O},type:h,clientExtensionResults:r.getClientExtensionResults(),authenticatorAttachment:Je(r.authenticatorAttachment)}}function Et(e,t){console.warn(`The browser extension that intercepted this WebAuthn API call incorrectly implemented ${e}. You should report this error to them.
-`,t);}function Bi(){if(!ne())return Ct.stubThis(new Promise(t=>t(false)));let e=globalThis.PublicKeyCredential;return e?.isConditionalMediationAvailable===void 0?Ct.stubThis(new Promise(t=>t(false))):Ct.stubThis(e.isConditionalMediationAvailable())}var Ct={stubThis:e=>e};function ji({error:e,options:t}){let{publicKey:n}=t;if(!n)throw Error("options was missing required publicKey property");if(e.name==="AbortError"){if(t.signal instanceof AbortSignal)return new P({message:"Authentication ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:e})}else {if(e.name==="NotAllowedError")return new P({message:e.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:e});if(e.name==="SecurityError"){let i=globalThis.location.hostname;if(Be(i)){if(n.rpId!==i)return new P({message:`The RP ID "${n.rpId}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:e})}else return new P({message:`${globalThis.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:e})}else if(e.name==="UnknownError")return new P({message:"The authenticator was unable to process the specified options, or could not create a new assertion signature",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:e})}return e}async function Ji(e){!e.optionsJSON&&e.challenge&&(console.warn("startAuthentication() was not called correctly. It will try to continue with the provided options, but this call should be refactored to use the expected call structure instead. See https://simplewebauthn.dev/docs/packages/browser#typeerror-cannot-read-properties-of-undefined-reading-challenge for more information."),e={optionsJSON:e});let{optionsJSON:t,useBrowserAutofill:n=false,verifyBrowserAutofillInput:i=true}=e;if(!ne())throw new Error("WebAuthn is not supported in this browser");let o;t.allowCredentials?.length!==0&&(o=t.allowCredentials?.map(Ke));let r={...t,challenge:te(t.challenge),allowCredentials:o},c={};if(n){if(!await Bi())throw Error("Browser does not support WebAuthn autofill");if(document.querySelectorAll("input[autocomplete$='webauthn']").length<1&&i)throw Error('No <input> with "webauthn" as the only or last value in its `autocomplete` attribute was detected');c.mediation="conditional",r.allowCredentials=[];}c.publicKey=r,c.signal=je.createNewAbortSignal();let u;try{u=await navigator.credentials.get(c);}catch(O){throw ji({error:O,options:c})}if(!u)throw new Error("Authentication was not completed");let{id:a,rawId:h,response:s,type:d}=u,f;return s.userHandle&&(f=V(s.userHandle)),{id:a,rawId:V(h),response:{authenticatorData:V(s.authenticatorData),clientDataJSON:V(s.clientDataJSON),signature:V(s.signature),userHandle:f},type:d,clientExtensionResults:u.getClientExtensionResults(),authenticatorAttachment:Je(u.authenticatorAttachment)}}var Gi={authenticate:e=>Ji(e),register:e=>Ki(e),errorCode:e=>e instanceof P?e.code:void 0};function Wi(e){return `${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}/consent`}async function vt(e){let t=await j(e,Wi(e),{init:{method:"GET",credentials:"include"},maxResponseBytes:65536,decode:As});return t.response.status===401?{required:false}:Q(t,"consent status")}async function xt(e,t){if(!Number.isSafeInteger(t)||t<1)throw new TypeError("Consent version must be a positive integer.");return Q(await j(e,Wi(e),{init:{method:"POST",headers:{"content-type":"application/json"},credentials:"include",body:JSON.stringify({version:t})},maxResponseBytes:64*1024,decode:Os}),"consent accept")}function As(e){let t=g(e),n=k(t.required),i=bs(t.needsConsent),o=Yi(t.version),r=$i(t.termsUrl),c=$i(t.privacyUrl);return {required:n,...i===void 0?{}:{needsConsent:i},...o===void 0?{}:{version:o},...r===void 0?{}:{termsUrl:r},...c===void 0?{}:{privacyUrl:c}}}function Os(e){let t=g(e),n=Yi(t.version);return {ok:k(t.ok),...n===void 0?{}:{version:n}}}function bs(e){if(e===void 0||typeof e=="boolean")return e;throw new TypeError("Invalid consent response.")}function Yi(e){if(e===void 0||Number.isSafeInteger(e)&&e>=1)return e;throw new TypeError("Invalid consent response.")}function $i(e){if(e===void 0||typeof e=="string"&&e.length<=4096)return e;throw new TypeError("Invalid consent response.")}var ws=30;function Rs(e){return typeof e?.exp=="number"?e.exp:null}function Ss(e){let t=e.split(".")[1];if(!t)return null;try{let n=t.replace(/-/g,"+").replace(/_/g,"/"),i=JSON.parse(atob(n));return typeof i=="object"&&i!==null?i:null}catch{return null}}function Dt(e){let t=new Map;async function n(r={}){let c=r.template===void 0?null:r.template.trim().toLowerCase();if(c==="")throw new TypeError("Template missing");let u=c??"",a=t.get(u);a||(a={activeKey:null,cachedByKey:new Map,inflight:null,sequence:0},t.set(u,a));let h=r.forceRefresh===true;if(!h){let l=a.activeKey?a.cachedByKey.get(a.activeKey):null;if(l&&l.exp-Date.now()/1e3>ws)return l.token;if(a.inflight)return a.inflight}let s=++a.sequence,d=()=>t.get(u)===a&&a.sequence===s,f=(async()=>{let l=c?`${e.projectBaseURL}/token/${encodeURIComponent(c)}`:`${e.projectBaseURL}/token`,m=await j(e,l,{init:{method:"GET",credentials:"include"},maxResponseBytes:64*1024,decode:L=>ks(L,c!==null)});if(m.response.status===401)return d()&&i(),null;let A=Q(m,"token"),b=A.policyVersion,S=A.token,N=Ss(S),H=Rs(N);if(d())if(H!==null){let L=typeof N?.sub=="string"?N.sub:null,Y=typeof N?.org_id=="string"?N.org_id:null;if(!c||L){let y=JSON.stringify([e.projectBaseURL,L,Y,c,b]);a.cachedByKey.clear(),a.cachedByKey.set(y,{token:S,exp:H}),a.activeKey=y;}else o(a);}else o(a);return S})();if(h)return f;let O=f.finally(()=>{a.inflight===O&&(a.inflight=null);});return a.inflight=O,O}function i(){t.clear();}function o(r){r.cachedByKey.clear(),r.activeKey=null;}return {getToken:n,clear:i}}function ks(e,t){let n=g(e),i=R(n.token);if(i.length===0||i.length>32*1024)throw new TypeError("Invalid token response.");if(!t)return {token:i,policyVersion:0};let o=g(n.template);if(!Number.isSafeInteger(o.policyVersion)||o.policyVersion<1)throw new TypeError("Invalid token response.");return {token:i,policyVersion:o.policyVersion}}function Ts(e){let t=Dt(e),n=Ui(e,t.clear,(u,a)=>Vi(u,a,Gi)),i=fe(e,`${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}`),o=_e(i),r=u=>(...a)=>(t.clear(),u(...a)),c={getConsentStatus:()=>vt(e),acceptConsent:u=>xt(e,u),getToken:t.getToken,privacy:o,waitlist:{join:(u,a)=>i.request("/waitlist",{method:"POST",body:u,fetchOptions:a,credentials:"omit"})},account:{...n.account,updateUnsafeMetadata:r(n.account.updateUnsafeMetadata),updateProfile:r(n.account.updateProfile),changeEmail:r(n.account.changeEmail),changePassword:r(n.account.changePassword),revokeSession:r(n.account.revokeSession),delete:r(n.account.delete)},signIn:{email:r(n.signIn.email),username:r(n.signIn.username),social:r(n.signIn.social),sso:n.signIn.sso,magicLink:n.signIn.magicLink,emailOtp:r(n.signIn.emailOtp),passkey:r(n.signIn.passkey)},signUp:{email:r(n.signUp.email)},emailOtp:{...n.emailOtp,verifyEmail:r(n.emailOtp.verifyEmail)},twoFactor:{enable:n.twoFactor.enable,disable:r(n.twoFactor.disable),verifyTotp:r(n.twoFactor.verifyTotp),verifyBackupCode:r(n.twoFactor.verifyBackupCode),sendOtp:n.twoFactor.sendOtp,verifyOtp:r(n.twoFactor.verifyOtp),generateBackupCodes:n.twoFactor.generateBackupCodes},phoneOtp:{prepare:n.phoneOtp.prepare,start:n.phoneOtp.start,verify:r(n.phoneOtp.verify)},signOut:r(n.signOut)};return {...n,...c}}async function Is(e){if(typeof window>"u")throw new Error("Akedly Shield challenges must be solved in a browser.");let t=await Ps(),n=e.challengeRequired?await t.solvePow(e.challenge,e.difficulty):null,i=e.turnstile.required?await t.getTurnstileToken(Es(e.turnstile.siteKey)):void 0;return {connectionId:e.connectionId,...n?{challengeToken:e.challengeToken,nonce:n.nonce}:{},...i?{turnstileToken:i}:{}}}async function Ps(){return import('@akedly/shield')}function Es(e){if(!e)throw new Error("Akedly Shield did not provide a Turnstile site key.");return e}async function Cs(e){let n=`${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}/public-config`;return Q(await j(e,n,{init:{method:"GET",credentials:"omit"},maxResponseBytes:256*1024,decode:i=>vs(i,e)}),"public-config")}function vs(e,t){let n=J(e),i=n.environmentId,o=n.environmentType,r=`${new URL(t.apiUrl).origin}/api/projects/${t.decoded.projectId}/auth`;if(typeof n.applicationId!="string"||!_t(n.applicationId)||i!==t.decoded.projectId||o!=="development"&&o!=="production"||n.authBaseUrl!==r)throw x();let c=C(n.branding),u=C(n.legal);if(!ie(n.enabledMethods,64)||!ie(n.socialProviders,64)||!eo(c,["appName","logoUrl","primaryColor"])||c.showAppName!==void 0&&typeof c.showAppName!="boolean"||c.alignment!==void 0&&c.alignment!=="left"&&c.alignment!=="center"&&c.alignment!=="right"||c.theme!==void 0&&c.theme!=="light"&&c.theme!=="dark"&&c.theme!=="system"||!eo(u,["termsUrl","privacyUrl"])||!Number.isSafeInteger(u.version)||u.version<0||typeof u.required!="boolean")throw x();if(n.socialProviderClientIds!==void 0){let a=C(n.socialProviderClientIds);if(Object.keys(a).length>64||Object.values(a).some(h=>typeof h!="string"||h.length>2048))throw x()}if(!W(n,["requireEmailVerification","twoFactor","mfaRequired","accountDeletion","organizations","sso","badge"])||!Xi(n.turnstileSiteKey)||!Xi(n.authTurnstileSiteKey)||typeof n.locale!="string"||n.locale.length===0||n.locale.length>64||!Number.isSafeInteger(n.configVersion)||n.configVersion<0)throw x();if(n.jwtIssuer!==null){let a=C(n.jwtIssuer);if(a.issuer!==r||a.jwksUrl!==`${r}/jwks`||a.aud!==t.decoded.projectId)throw x()}if(n.signUp!==void 0){let a=C(n.signUp).mode;if(typeof a!="string"||!["open","restricted","allowlist","waitlist"].includes(a))throw x()}if(n.authentication!==void 0&&xs(n.authentication),n.privacy!==void 0&&Ds(n.privacy),n.emailVerification!==void 0){let a=C(n.emailVerification);if(!W(a,["required"])||a.method!=="link"&&a.method!=="code")throw x()}if(n.userModel!==void 0&&!W(C(n.userModel),["requireEmail","firstLastName","emailChange","accountDeletion"]))throw x();if(n.mfa!==void 0){let a=C(n.mfa);if(!W(a,["totp","required","backupCodes"])||(a.required===true||a.backupCodes===true)&&a.totp!==true)throw x()}if(n.captcha===void 0||n.captcha===null)n.captcha=typeof n.authTurnstileSiteKey=="string"&&n.authTurnstileSiteKey.length>0?{provider:"turnstile",siteKey:n.authTurnstileSiteKey}:null;else {let a=C(n.captcha);if(typeof a.provider!="string"||a.provider.length===0||a.provider.length>64||typeof a.siteKey!="string"||a.siteKey.length===0||a.siteKey.length>512)throw x();n.captcha={provider:a.provider,siteKey:a.siteKey};}return n}function _t(e){return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(e)}function x(){return new TypeError("public-config returned an invalid response")}function C(e){if(!e||typeof e!="object"||Array.isArray(e))throw x();return e}function Xi(e){return e===null||typeof e=="string"&&e.length<=4096}function xs(e){let t=C(e),n=C(t.email),i=C(t.password),o=i.minLength!==void 0||i.maxLength!==void 0;if(!W(n,["signUp"])||!ie(n.signIn,3)||n.signIn.some(r=>r!=="password"&&r!=="magic_link"&&r!=="email_otp")||!W(C(t.phone),["signUp","signIn"])||!W(i,["signUp","add"])||o&&(!Number.isSafeInteger(i.minLength)||!Number.isSafeInteger(i.maxLength)||i.minLength<1||i.maxLength>4096||i.minLength>i.maxLength)||!W(C(t.passkey),["signIn","add"])||!_s(C(t.passkey).relyingPartyId)||!W(C(t.username),["collectOnSignUp","signIn"]))throw x()}function Ds(e){let t=C(e);if(!Array.isArray(t.notices)||!Array.isArray(t.consentPurposes)||t.notices.length>64||t.consentPurposes.length>64)throw x();for(let n of t.notices){let i=C(n);if(Qi(i,"noticeId","noticeVersionId"),Ge(i.title,512),Ge(i.body,1e5),Zi(i.digest),!ie(i.activityCodes,128)||!ie(i.purposeCodes,128)||typeof i.effectiveFrom!="string"||!Number.isFinite(Date.parse(i.effectiveFrom)))throw x()}for(let n of t.consentPurposes){let i=C(n);if(Qi(i,"purposeId","purposeVersionId"),Ge(i.title,512),Ge(i.description,1e4),Zi(i.digest),!ie(i.activityCodes,128)||!ie(i.dataCategories,128))throw x()}}function Qi(e,t,n){if(typeof e[t]!="string"||!_t(e[t])||typeof e[n]!="string"||!_t(e[n])||typeof e.code!="string"||!/^[a-z][a-z0-9_]{0,63}$/.test(e.code)||!Number.isSafeInteger(e.version)||e.version<1)throw x()}function Ge(e,t){let n=C(e);if(typeof n.en!="string"||n.en.length===0||n.en.length>t||typeof n.ar!="string"||n.ar.length===0||n.ar.length>t)throw x()}function Zi(e){let t=C(e);if(typeof t.en!="string"||!/^[a-f0-9]{64}$/.test(t.en)||typeof t.ar!="string"||!/^[a-f0-9]{64}$/.test(t.ar))throw x()}function _s(e){return e==null||typeof e=="string"}function W(e,t){return t.every(n=>typeof e[n]=="boolean")}function eo(e,t){return t.every(n=>e[n]===void 0||typeof e[n]=="string"&&e[n].length<=4096)}function ie(e,t){return Array.isArray(e)&&e.length<=t&&e.every(n=>typeof n=="string"&&n.length<=128)&&new Set(e).size===e.length}var Se=class extends Error{constructor(n,i){super(n);this.cause=i;this.name="AuthOwlError";}cause},Ut=class extends Se{constructor(n,i){super(`Rate limited. Retry after ${n}s.`,i);this.retryAfterSeconds=n;this.name="RateLimitedError";}retryAfterSeconds},zt=class extends Se{constructor(t="invalid publishable key",n){super(t,n),this.name="InvalidKeyError";}};var to=["en","ar"];function Us(e){return e==="ar"?"rtl":"ltr"}function zs(e){return typeof e=="string"&&to.includes(e)}
-exports.AUTH_CHALLENGE_HEADER=sn;exports.AUTH_LOCALE_HEADER=an;exports.AuthOwlError=Se;exports.AuthOwlHttpError=Pe;exports.INVITATION_CLAIM_MAX_AGE_MS=Xt;exports.INVITATION_QUERY_PARAM=et;exports.InvalidKeyError=zt;exports.LOCALES=to;exports.RateLimitedError=Ut;exports.SESSION_TOKEN_HEADER=Xe;exports.SESSION_TRANSPORT_BEARER=Ze;exports.SESSION_TRANSPORT_HEADER=Qe;exports.TransportError=_;exports.acceptConsent=xt;exports.activeLocale=it;exports.captureInvitationClaim=Ro;exports.clearInvitationClaim=de;exports.createAuthOwlClient=Ts;exports.createIdempotencyKey=me;exports.createMembershipHas=sr;exports.createTokenClient=Dt;exports.decodePublishableKey=$e;exports.directionFor=Us;exports.getConsentStatus=vt;exports.getPublicConfig=Cs;exports.isLocale=zs;exports.membershipHas=ve;exports.membershipHasPermission=Ce;exports.membershipHasRole=hn;exports.membershipHasTeam=mn;exports.readInvitationClaim=le;exports.readLastUsedSignInMethod=ko;exports.recordLastUsedSignInMethod=To;exports.rememberPendingSignInMethod=Io;exports.resolveAuthTarget=Wt;exports.resolveConfig=wo;exports.resolveProjectCapabilities=Eo;exports.sessionChallengeIsEphemeral=lo;exports.sessionCookieName=so;exports.setActiveLocale=Vo;exports.settlePendingSignInMethod=Po;exports.solvePhoneOtpChallenge=Is;
+'use strict';var no=Object.defineProperty;var Nt=(e,t,n)=>()=>{if(n)throw n[0];try{return e&&(t=e(e=0)),t}catch(i){throw n=[i],i}};var io=(e,t)=>{for(var n in t)no(e,n,{get:t[n],enumerable:true});};function ge(){return typeof window<"u"&&typeof document<"u"&&typeof crypto<"u"&&typeof crypto.subtle?.digest=="function"}var lt=Nt(()=>{"use strict";});var qe={};io(qe,{beginCrossSiteSignIn:()=>as,challengeFor:()=>Ci,completeCrossSiteSignIn:()=>cs,takeHandoffCode:()=>It});function Ei(e){let t="";for(let n of e)t+=String.fromCharCode(n);return btoa(t).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}async function Ci(e){let t=await crypto.subtle.digest("SHA-256",new TextEncoder().encode(e));return Ei(new Uint8Array(t))}function os(){return Ei(crypto.getRandomValues(new Uint8Array(ts)))}function vi(e,t){let n=window.location.protocol==="https:"?"; Secure":"";document.cookie=`${Pi}=${e}; Path=/; Max-Age=${t}; SameSite=Lax${n}`;}function rs(){for(let e of document.cookie.split(";")){let t=e.indexOf("=");if(!(t<0)&&e.slice(0,t).trim()===Pi)return e.slice(t+1).trim()||null}return null}function ss(){vi("",0);}function Ii(e){return new URL(e,window.location.href).toString()}async function as(e,t){let n=t.callbackURL?Ii(t.callbackURL):null;if(n&&new URL(n).origin!==window.location.origin)return null;let i=os(),o=new URL(`${e.projectBaseURL}/session/start`);if(o.searchParams.set("pk",e.publishableKey),o.searchParams.set("kind",t.kind),t.kind==="social")o.searchParams.set("provider",t.provider),t.scopes?.length&&o.searchParams.set("scopes",t.scopes.join(",")),t.loginHint&&o.searchParams.set("loginHint",t.loginHint),t.requestSignUp!==void 0&&o.searchParams.set("requestSignUp",t.requestSignUp?"1":"0");else for(let c of is){let u=t[c];u&&o.searchParams.set(c,u);}let s=`${window.location.origin}${window.location.pathname}${window.location.search}`;o.searchParams.set("cb",n??s);for(let[c,u]of [["err",t.errorCallbackURL],["new",t.newUserCallbackURL]])u&&o.searchParams.set(c,Ii(u));return o.searchParams.set("challenge",await Ci(i)),vi(i,ns),o.toString()}function It(e){if(typeof window>"u")return null;let t=window.location.hash;if(!t.includes(Tt))return null;let n=new URLSearchParams(t.replace(/^#/,"")),i=n.get(Tt);if(!i||e!==void 0&&i!==e)return null;n.delete(Tt);let o=n.toString();return window.history.replaceState(window.history.state,"",`${window.location.pathname}${window.location.search}${o?`#${o}`:""}`),i}async function cs(e,t,n){if(!ge())return  false;let i=n??It();if(!i)return  false;n&&It(n);let o=rs();if(ss(),!o)return  false;t.beginSession({remember:true});let{error:s}=await e.request("/session/exchange",{method:"POST",body:{code:i,verifier:o}});return s===null}var Pi,Tt,ts,ns,is,He=Nt(()=>{"use strict";lt();Pi="authowl_handoff_verifier",Tt="authowl_code",ts=32,ns=900,is=["email","providerId","domain","organizationSlug"];});var oo=/^(pk_(live|test))_([0-9a-f-]{36})_([A-Za-z0-9]{20,})$/i,ro=/^sk_/i;function Ge(e){if(typeof e!="string"||e.length===0)throw new Error("publishableKey is required");if(ro.test(e))throw new Error("A secret key was passed where a publishable key was expected. Never embed secret keys in client code.");let t=oo.exec(e);if(!t)throw new Error("publishableKey is malformed; expected pk_(live|test)_<uuid>_<base62>");return {prefix:t[1].toLowerCase(),env:t[2].toLowerCase(),projectId:t[3].toLowerCase()}}function so(e,t){let n=`p_${e.toLowerCase().replace(/-/g,"")}`;return `${t?.secure?"__Secure-":""}${n}.session_token`}var Lt=/^http:\/\/(?:(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)*localhost|127\.0\.0\.1|\[::1\])(?::\d+)?(?:\/|$)/i;function We(e,t){throw new Error(`${e}: ${t}`)}function Mt(e,t){let n;try{n=new URL(String(e));}catch{throw new TypeError("Transport URL must be absolute.")}if(n.username||n.password||n.hash)throw new TypeError("Transport URL must not contain credentials or a fragment.");let i=n.toString();if(n.protocol!=="https:"&&!(n.protocol==="http:"&&t.allowHttpLoopback&&Lt.test(i)))throw new TypeError("Transport URL must use HTTPS except on approved loopback.");return n}function Ft(e,t){(typeof e!="string"||!/^https?:\/\/[^/?#@\\\s]+\/?$/i.test(e))&&We("apiUrl","origin required");let n;try{n=new URL(e);}catch{We("apiUrl","origin required");}return n.protocol==="http:"&&(!t.allowHttpLoopback||!Lt.test(e))&&We("apiUrl","HTTPS required except exact loopback"),n.origin}function q(e,t){try{return e?.getItem(t)??null}catch{return null}}function U(e,t,n){try{n===null?e?.removeItem(t):e?.setItem(t,n);}catch{}}function D(){try{return globalThis.localStorage}catch{return}}function X(){try{return globalThis.sessionStorage}catch{return}}var ao="authowl.session-challenge",co=e=>`${ao}.${e}`,uo="set-auth-challenge",Ye="x-authowl-challenge";function lo(e){let t=e.get(Ye);return ue(t)?Ht(t).some(([n,i])=>n.endsWith(".dont_remember")&&i.length>0):false}var qt="INVALID_TWO_FACTOR_COOKIE",po=2048,ue=e=>e!==null&&e.length<=po,Vt=/^[\x21\x23-\x2B\x2D-\x3A\x3C-\x5B\x5D-\x7E]+$/;function Ht(e){let t=[];for(let n of e.split(";")){let i=n.trimStart(),o=i.indexOf("=");o<=0||t.push([i.slice(0,o).trimEnd(),i.slice(o+1)]);}return t}function Kt(e){let t=co(e),n=new Map;function i(){return n.size===0?null:[...n].map(([u,a])=>`${u}=${a}`).join("; ")}function o(){let u=i();U(X(),t,ue(u)?u:null);}function s(u){for(let[a,m]of Ht(u))Vt.test(a)&&(m===""?n.delete(a):Vt.test(m)&&n.set(a,m));}let c=q(X(),t);return ue(c)&&s(c),{presentOn(u){let a=i();u.delete(Ye),ue(a)&&u.set(Ye,a);},observe(u){let a=u.get(uo);ue(a)&&(s(a),o());},clear(){n.clear(),o();}}}var Xe="set-auth-token",Qe="x-authowl-session-transport",Ze="bearer";var fo="authowl.session-token",go="authowl.cookie-transport",jt="ok",Jt="bearer",mo=e=>`${fo}.${e}`,ho=e=>`${go}.${e}`;function yo(e){return e===jt?"cookies":e===Jt?"bearer":"unknown"}function Ao(e){return e==="cookies"?jt:e==="bearer"?Jt:null}function Oo(e){let t=mo(e),n=ho(e),i=Kt(e),o=null,s=false,c=null,u=yo(q(D(),n)),a=()=>u==="unknown",m=0,r=null,d=false;function f(){let y=q(X(),t);if(y!==null)return s=true,y;let w=q(D(),t);return w!==null?(s=false,w):null}o=f(),o!==null&&a()&&(d=true);function O(){if(!(!d||!r)){d=false;try{r();}catch{}}}function l(){let y=u==="bearer"?o:null,[w,K]=s?[X(),D()]:[D(),X()];U(K,t,null),U(w,t,y);}function h(y){y!==null&&c!==null&&(s=c,c=null),o=y,l(),y!==null&&a()&&(d=true,O());}function A(y){u=y,U(D(),n,Ao(y));}function b(){A("unknown"),d=false;}function S(){return o===null&&(o=f()),o}function N(){let y=f();return y!==null&&(o=y),o}function H(y){N()===y&&l();}function L(){m+=1,c=null,s=false,h(null),i.clear(),b();}let Y=()=>u!=="cookies";return {hasToken:()=>S()!==null,declareOn(y){if(y.has("authorization"))return  false;let w=S();return !w&&!Y()?false:(w&&y.set("authorization",`Bearer ${w}`),y.set(Qe,Ze),i.presentOn(y),true)},wantsToken:Y,needsProbe:a,observe(y){let w=y.get(Xe);w&&h(w),i.observe(y);},dropChallenge:i.clear,measureWith(y){r=y,O();},beginRead(){let y=S(),w=m;return {carriedToken:y!==null,endIfDead(){y!==null&&N()===y&&m===w&&L();},recordCookieVerdict(K){if(m===w&&a()){if(A(K?"cookies":"bearer"),K){h(null);return}H(y);}}}},beginSession({remember:y}){m+=1,c=!y,i.clear(),b();},endSession:L}}var Bt=new Map;function $t(e){let t=Bt.get(e);if(t)return t;let n=Oo(e);return Bt.set(e,n),n}function bo(e,t){return t?.headers?new Headers(t.headers):typeof e=="object"&&e!==null&&"headers"in e?new Headers(e.headers):new Headers}function Gt(e,t){let n=$t(e),i=(c,u)=>(t??globalThis.fetch)(c,u);return {fetch:async(c,u)=>{if(u?.credentials==="omit"||!n.wantsToken())return i(c,u);let a=bo(c,u),m=n.declareOn(a),r=await i(c,{...u,headers:a});return m&&n.observe(r.headers),r},probe:i,tokens:n}}function Wt(e){if(!e||typeof e!="object")throw new Error("AuthConfig is required");let t=Ge(e.publishableKey),n=Ft(e.apiUrl,{allowHttpLoopback:t.env==="test"});return {publishableKey:e.publishableKey,apiUrl:n,decoded:t,projectBaseURL:`${n}/api/projects/${t.projectId}/auth`}}function wo(e){let t=Wt(e),{fetch:n,...i}=Gt(t.decoded.projectId,e.fetch);return {...e,...t,fetch:n,session:i}}var et="authowl_invitation",tt="authowl.invitation-claim",Yt=/^[A-Za-z0-9_-]{1,128}$/,Xt=10080*60*1e3;function Ro(e=Date.now()){if(typeof window>"u")return le(e);let t;try{t=new URL(window.location.href);}catch{return le(e)}let n=t.searchParams.get(et);if(n===null)return le(e);t.searchParams.delete(et);try{window.history.replaceState(window.history.state,"",t.toString());}catch{}if(!Yt.test(n))return le(e);let i={id:n,capturedAt:e};return U(D(),tt,JSON.stringify(i)),i}function le(e=Date.now()){let t=q(D(),tt);if(t===null)return null;let n;try{n=JSON.parse(t);}catch{return de(),null}if(typeof n!="object"||n===null)return de(),null;let{id:i,capturedAt:o}=n;return typeof i!="string"||!Yt.test(i)||typeof o!="number"||e-o>Xt?(de(),null):{id:i,capturedAt:o}}function de(){U(D(),tt,null);}var Qt="authowl.last-used-method",So=/^(password|username|magic-link|email-otp|phone-otp|passkey|sso|social:[a-z0-9][a-z0-9_-]{0,63})$/,nt=e=>`${Qt}.${e}`;function Ie(e){return So.test(e)}function ko(e){let t=q(D(),nt(e));return t===null||!Ie(t)?null:t}function To(e,t){Ie(t)&&(U(D(),Te(e),null),U(D(),nt(e),t));}var Te=e=>`${Qt}.pending.${e}`;function Io(e,t){Ie(t)&&U(D(),Te(e),t);}function Po(e,t){let n=q(D(),Te(e));U(D(),Te(e),null),t&&n!==null&&Ie(n)&&U(D(),nt(e),n);}function Eo(e){let t=e?.enabledMethods??["password"],n=t.includes("password"),i=t.includes("passkey"),o=e?.authentication,s=e?.mfa;return {emailSignUp:o?.email.signUp??t.some(c=>c==="password"||c==="magic_link"||c==="email_otp"),passwordSignUp:o?.password.signUp??n,phoneSignUp:o?.phone.signUp??t.includes("phone_otp"),passwordSignIn:o?.email.signIn.includes("password")??n,passwordMinLength:o?.password.minLength??8,passwordMaxLength:o?.password.maxLength??128,magicLinkSignIn:o?.email.signIn.includes("magic_link")??t.includes("magic_link"),emailOtpSignIn:o?.email.signIn.includes("email_otp")??t.includes("email_otp"),phoneSignIn:o?.phone.signIn??t.includes("phone_otp"),usernameSignIn:o?.username.signIn??false,collectUsername:o?.username.collectOnSignUp??false,passkeySignIn:o?.passkey.signIn??i,passkeyAdd:o?.passkey.add??i,firstLastName:e?.userModel?.firstLastName??false,emailChange:e===null?false:e.userModel?.emailChange??true,accountDeletion:e?.userModel?.accountDeletion??e?.accountDeletion??false,emailVerificationRequired:e?.emailVerification?.required??e?.requireEmailVerification??false,emailVerificationMethod:e?.emailVerification?.method??"link",totp:s?.totp??e?.twoFactor??false,mfaRequired:s?.required??e?.mfaRequired??false,backupCodes:s?.backupCodes??e?.twoFactor??false,legacyNameField:e?.authentication===void 0}}var Co=1e4,vo=1024*1024,_=class extends Error{kind;requestId;constructor(t,n){super(Mo(t)),this.name="TransportError",this.kind=t,this.requestId=n;}},tn=new WeakSet;function z(e,t){let n=new _(e,t);return tn.add(n),n}async function nn({fetchImpl:e,url:t,init:n={},timeoutMs:i=Co,maxResponseBytes:o=vo,allowHttpLoopback:s=false,decode:c}){en(i,"timeoutMs"),en(o,"maxResponseBytes");let u=Mt(t,{allowHttpLoopback:s}),a=n.signal,m=new AbortController,r=null,d,f=new Promise(A=>{d=A;}),O=A=>{r===null&&(r=A,d({type:"abort",kind:A}),m.abort());},l=()=>O("aborted");a?.addEventListener("abort",l,{once:true});let h=setTimeout(()=>O("timeout"),i);a?.aborted&&l();try{if(r!==null)throw z(r);let A;try{A=await Promise.race([e(u.toString(),{...n,redirect:"error",signal:m.signal}).then(Y=>({type:"response",response:Y})),f]);}catch{throw z(r??"network")}if(A.type==="abort")throw z(A.kind);if(!xo(A.response))throw z("invalid_response");let b=A.response,S=Lo(b.headers),N=await Do(b,o,f,()=>r,S),H=zo(b,N,S),L;try{L=b.ok&&c?c(H,Object.freeze({status:b.status})):H;}catch{throw z("invalid_response",S)}return {response:b,data:L,...S===void 0?{}:{requestId:S}}}catch(A){throw A instanceof _&&tn.has(A)?A:z(r??"network")}finally{clearTimeout(h),a?.removeEventListener("abort",l);}}function xo(e){if(!e||typeof e!="object")return  false;let t=e;return Number.isInteger(t.status)&&t.status>=0&&t.status<=599&&typeof t.statusText=="string"&&typeof t.ok=="boolean"&&typeof t.headers?.get=="function"&&(t.body===null||typeof t.body=="object"&&typeof t.body?.getReader=="function"&&typeof t.body.cancel=="function")}async function Do(e,t,n,i,o){let s=e.headers.get("content-length");if(s!==null){if(!/^\d+$/.test(s))throw Zt(e.body),z("invalid_response",o);if(Number(s)>t)throw Zt(e.body),z("response_too_large",o)}if(!e.body)return "";let c;try{c=e.body.getReader();}catch{throw z("network",o)}let u=[],a=0,m=null;try{for(;;){let f;try{f=await Promise.race([c.read(),n]);}catch{m=z(i()??"network",o);break}if(_o(f)){m=z(f.kind,o);break}let{done:O,value:l}=f;if(O)break;if(l.byteLength!==0){if(a+=l.byteLength,a>t){m=z("response_too_large",o);break}u.push(l);}}}finally{m&&Uo(c);try{c.releaseLock();}catch{}}if(m)throw m;let r=new Uint8Array(a),d=0;for(let f of u)r.set(f,d),d+=f.byteLength;try{return new TextDecoder("utf-8",{fatal:!0}).decode(r)}catch{throw z("invalid_response",o)}}function _o(e){return "type"in e&&e.type==="abort"}function Zt(e){if(e)try{e.cancel().catch(()=>{});}catch{}}function Uo(e){try{e.cancel().catch(()=>{});}catch{}}function zo(e,t,n){if(e.status===204||e.status===205)return null;let i=No(e.headers.get("content-type"));if(!e.ok&&(!i||t.length===0))return null;if(!i||t.length===0)throw z("invalid_response",n);try{return JSON.parse(t)}catch{if(!e.ok)return null;throw z("invalid_response",n)}}function No(e){if(e===null)return  false;let t=e.split(";",1)[0]?.trim().toLowerCase();return t==="application/json"||t?.endsWith("+json")===true}function Lo(e){let t=e.get("x-request-id")?.trim();if(!(!t||t.length>256||!/^[A-Za-z0-9._:-]+$/.test(t)))return t}function en(e,t){if(!Number.isInteger(e)||e<=0)throw new TypeError(`${t} must be a positive integer.`)}function Mo(e){switch(e){case "aborted":return "The request was cancelled.";case "timeout":return "The request timed out.";case "response_too_large":return "The response exceeded the allowed size.";case "invalid_response":return "The service returned an invalid response.";case "network":return "The network request could not be completed."}}var Pe=class extends Error{status;requestId;constructor(t,n,i){super(`${t} request failed with status ${n.status}.`),this.name="AuthOwlHttpError",this.status=n.status,this.requestId=i;}};function j(e,t,n={}){let i=new Headers(n.init?.headers);return i.set("x-publishable-key",e.publishableKey),nn({fetchImpl:e.fetch,url:t,init:{...n.init,headers:i},allowHttpLoopback:e.decoded.env==="test",...n.timeoutMs===void 0?{}:{timeoutMs:n.timeoutMs},...n.maxResponseBytes===void 0?{}:{maxResponseBytes:n.maxResponseBytes},...n.decode===void 0?{}:{decode:n.decode}})}function Q(e,t){if(!e.response.ok)throw new Pe(t,e.response,e.requestId);return e.data}var Z=new Map,Fo=/^[a-z]{2}$/;function Vo(e,t){if(typeof window>"u")return ()=>{};if(t===null)return Z.delete(e),()=>{};let n=t.trim().toLowerCase();if(!Fo.test(n))return ()=>{};let i=Symbol(e),o=Z.get(e)??[];return o.push({token:i,locale:n}),Z.set(e,o),()=>{let s=Z.get(e);if(!s)return;let c=s.filter(u=>u.token!==i);c.length===0?Z.delete(e):Z.set(e,c);}}function it(e){return typeof window>"u"?null:Z.get(e)?.at(-1)?.locale??null}var sn="x-authowl-turnstile-token",an="x-authowl-locale",qo=1e4,Ho=32,Ko=2e4;function oe(e,t){return {post:(n,i,o,s)=>e.request(n,{method:"POST",body:i,fetchOptions:o,decode:s}),mutation:async(n,i)=>{let o=await n;return o.error===null&&(i===void 0||o.data!==null&&i(o.data))&&t(),o}}}function fe(e,t=e.projectBaseURL){return {async request(n,i={}){let o=Jo(t,n,i.query),s=i.method??(i.body===void 0?"GET":"POST"),c=new Headers(i.fetchOptions?.headers);i.fetchOptions?.authChallengeToken&&c.set(sn,i.fetchOptions.authChallengeToken);let u=it(e.decoded.projectId);u&&c.set(an,u),i.body!==void 0&&c.set("content-type","application/json");let a={method:s,headers:c,credentials:i.credentials??"include",...i.body===void 0?{}:{body:JSON.stringify(i.body)}},m=Object.freeze({method:s,path:n});await i.fetchOptions?.onRequest?.(m);let r=jo(s,i.fetchOptions),d;try{d=await Bo(e,o,{...a,signal:i.fetchOptions?.signal},r);}catch(b){let S=rn(b);return await i.fetchOptions?.onError?.(ot(m,S,Wo(b))),{data:null,error:S}}let{response:f,requestId:O}=d,l=Qo(n,d.data),h=l;if(f.ok)try{h=st(l),i.decode&&(h=i.decode(h));}catch{let b=rn(new _("invalid_response",O));return await i.fetchOptions?.onError?.(ot(m,b,"invalid_response")),{data:null,error:b}}let A=Object.freeze({...m,status:f.status,...O===void 0?{}:{requestId:O}});if(await i.fetchOptions?.onResponse?.(A),!f.ok){let b=$o(f,l,O);return b.code===qt&&e.session.tokens.dropChallenge(),await i.fetchOptions?.onError?.(ot(m,b,"api")),{data:null,error:b}}return await i.fetchOptions?.onSuccess?.(A),{data:h,error:null}}}}async function Bo(e,t,n,i){let o=Date.now()+qo;for(let s=0;s<i;s+=1){let c=o-Date.now();if(c<=0)throw new _("timeout");try{let u=await j(e,t,{init:n,timeoutMs:Math.max(1,Math.ceil(c))});if(u.response.status<500||s===i-1)return u}catch(u){if(s===i-1||!(u instanceof _)||u.kind!=="network")throw u}await Yo(50*2**s,n.signal,o);}throw new _("network")}function jo(e,t){if(e!=="GET"||t?.authChallengeToken)return 1;let n=t?.retry;return typeof n!="number"||!Number.isFinite(n)?1:Math.min(Math.max(Math.trunc(n),0),3)+1}function Jo(e,t,n){let i=new URL(`${e}${t.startsWith("/")?t:`/${t}`}`);for(let[o,s]of Object.entries(n??{}))s!==void 0&&i.searchParams.set(o,String(s));return i.toString()}function $o(e,t,n){let i=pe(t)?t:{},o=Go(i,e.headers);return {status:e.status,statusText:e.statusText,code:typeof i.code=="string"?i.code:void 0,...n===void 0?{}:{requestId:n},...typeof i.current_version=="number"?{currentVersion:i.current_version}:{},...o!==void 0?{retryAfterSeconds:o}:{},message:typeof i.message=="string"?i.message:typeof i.error=="string"?i.error:typeof i.detail=="string"?i.detail:e.statusText||"Request failed"}}function Go(e,t){let n=(typeof e.retryAfterSeconds=="number"&&Number.isFinite(e.retryAfterSeconds)?e.retryAfterSeconds:void 0)??on(t.get("retry-after"))??on(t.get("x-retry-after"));if(n!==void 0)return Math.min(Math.max(Math.trunc(n),1),86400)}function on(e){if(!e)return;let t=e.trim();if(!/^\d+$/.test(t))return;let n=Number(t);return Number.isFinite(n)?n:void 0}function rn(e){let t=e instanceof _?e.kind:"network";return {status:0,...{aborted:{statusText:"ABORTED",code:"REQUEST_ABORTED",message:"The request was cancelled."},timeout:{statusText:"TIMEOUT",code:"REQUEST_TIMEOUT",message:"The request timed out."},response_too_large:{statusText:"INVALID_RESPONSE",code:"RESPONSE_TOO_LARGE",message:"The service response was too large."},invalid_response:{statusText:"INVALID_RESPONSE",code:"INVALID_RESPONSE",message:"The service returned an invalid response."},network:{statusText:"FETCH_ERROR",code:"FETCH_ERROR",message:"Network request failed."}}[t],...e instanceof _&&e.requestId?{requestId:e.requestId}:{}}}function ot(e,t,n){return Object.freeze({...e,status:t.status??0,...t.requestId===void 0?{}:{requestId:t.requestId},failure:n})}function Wo(e){return e instanceof _?e.kind:"network"}function Yo(e,t,n){return new Promise((i,o)=>{if(t?.aborted){o(new _("aborted"));return}let s=n-Date.now();if(s<=0){o(new _("timeout"));return}let c=Math.min(e,s),u=()=>{clearTimeout(a),o(new _("aborted"));},a=setTimeout(()=>{t?.removeEventListener("abort",u),Date.now()>=n?o(new _("timeout")):i();},c);t?.addEventListener("abort",u,{once:true}),t?.aborted&&u();})}function st(e,t="",n=0,i={nodes:0}){if(i.nodes+=1,n>Ho||i.nodes>Ko)throw new Error("response traversal limit exceeded");if(typeof e=="string"&&/^(?:createdAt|updatedAt|expiresAt)$/.test(t)){let o=new Date(e);return Number.isNaN(o.getTime())?e:o}return Array.isArray(e)?e.map(o=>st(o,"",n+1,i)):pe(e)?Object.fromEntries(Object.entries(e).map(([o,s])=>[o,Xo(o)?s:st(s,o,n+1,i)])):e}function Xo(e){return e==="metadata"||e==="public_metadata"||e==="unsafe_metadata"||e==="private_metadata"||e==="publicMetadata"||e==="unsafeMetadata"||e==="privateMetadata"}function Qo(e,t){if(e==="/list-sessions"&&Array.isArray(t))return t.map(o=>pe(o)?rt(o):o);if(!pe(t))return t;let i=e==="/change-password"||e==="/passkey/verify-authentication"||e==="/phone-otp/verify"||e==="/sign-up/email"||e.startsWith("/sign-in/")||e.startsWith("/two-factor/verify-")?rt(t):t;return e==="/sign-up/email"&&!("sessionCreated"in i)&&(i={...i,sessionCreated:typeof t.token=="string"&&t.token.length>0}),(e==="/get-session"||e==="/passkey/verify-authentication")&&pe(i.session)&&(i={...i,session:rt(i.session)}),i}function rt(e){if(!Object.hasOwn(e,"token"))return e;let t={...e};return delete t.token,t}function pe(e){return !!e&&typeof e=="object"&&!Array.isArray(e)}var Zo=new Set(["__proto__","constructor","prototype"]);function g(e){(!e||typeof e!="object"||Array.isArray(e))&&p();let t=Object.getPrototypeOf(e);return t!==Object.prototype&&t!==null&&p(),e}function R(e){return typeof e!="string"&&p(),e}function k(e){return typeof e!="boolean"&&p(),e}function T(e){return (!(e instanceof Date)||Number.isNaN(e.getTime()))&&p(),e}function ee(e){return (!Array.isArray(e)||!e.every(t=>typeof t=="string"))&&p(),[...e]}function E(e,t){let n=e[t];return n==null||typeof n=="string"?n:p()}function cn(e,t){let n=e[t];return n==null||typeof n=="boolean"?n:p()}function F(e){let t=g(e),n=t.email;return n!==null&&typeof n!="string"&&p(),{id:R(t.id),email:n,emailVerified:k(t.emailVerified),createdAt:T(t.createdAt),updatedAt:T(t.updatedAt),...M("phoneNumber",E(t,"phoneNumber")),...M("username",E(t,"username")),...M("displayUsername",E(t,"displayUsername")),...M("firstName",E(t,"firstName")),...M("lastName",E(t,"lastName")),...M("name",E(t,"name")),...M("image",E(t,"image")),...M("twoFactorEnabled",cn(t,"twoFactorEnabled"))}}function Ee(e){let t=g(e),n=t.membership;return {id:R(t.id),userId:R(t.userId),expiresAt:T(t.expiresAt),...M("activeOrganizationId",E(t,"activeOrganizationId")),...M("activeTeamId",E(t,"activeTeamId")),...M("membership",n==null?n:er(n)),...M("pendingMfaEnrollment",cn(t,"pendingMfaEnrollment"))}}function p(){throw new TypeError("AuthOwl response does not match its runtime contract.")}function J(e,t=20,n=1e4){return (!e||typeof e!="object"||Array.isArray(e))&&p(),ct(e,t,n)}function ct(e,t=20,n=1e4){return at(e,0,{nodes:0},t,n)}function er(e){let t=g(e);return {role:R(t.role),...t.roles===void 0?{}:{roles:ee(t.roles)},permissions:ee(t.permissions),...t.teams===void 0?{}:{teams:ee(t.teams)}}}function at(e,t,n,i,o){if(n.nodes+=1,(t>i||n.nodes>o)&&p(),e===null||typeof e=="string"||typeof e=="boolean")return e;if(typeof e=="number")return Number.isFinite(e)||p(),e;if(Array.isArray(e))return e.map(u=>at(u,t+1,n,i,o));(!e||typeof e!="object")&&p();let s=Object.getPrototypeOf(e);s!==Object.prototype&&s!==null&&p();let c={};for(let[u,a]of Object.entries(e))Zo.has(u)&&p(),c[u]=at(a,t+1,n,i,o);return c}function M(e,t){return t===void 0?{}:{[e]:t}}function un({http:e,probe:t,tokens:n,channelName:i}){let o=new Set,s=null,c=null,u=null,a=null,m=null,r=null,d,f=y=>{h(y);};d={data:null,isPending:true,isRefetching:false,error:null,refetch:f};function O(y){d=y;for(let w of o)w();}async function l(y){return e.request("/get-session",{query:y?.query,decode:ut})}function h(y){if(y?.query?.disableCookieCache===true)return b(y);if(a)return a;if(m)return m;let w=b(y).finally(()=>{m===w&&(m=null);});return m=w,w}function A(){if(a)return a;let y=b({query:{disableCookieCache:true}}).finally(()=>{a===y&&(a=null);});return a=y,y}async function b(y){u?.abort();let w=new AbortController;u=w,O({...d,isPending:d.data===null&&d.error===null,isRefetching:d.data!==null});let K=n.beginRead(),ke=await e.request("/get-session",{query:y?.query,fetchOptions:{signal:w.signal},decode:ut});if(u===w&&(u=null,O({data:ke.data,error:ke.error,isPending:false,isRefetching:false,refetch:f}),ke.error===null)){if(ke.data===null){K.endIfDead();return}await S(K);}}async function S(y){if(n.needsProbe()){if(!y.carriedToken){y.recordCookieVerdict(true);return}return r||N(y)}}function N(y){let w=t.request("/get-session",{query:{disableCookieCache:true},decode:ut}).then(K=>{r===w&&K.error===null&&y.recordCookieVerdict(K.data!==null);}).finally(()=>{r===w&&(r=null);});return r=w,w}function H(){s?.postMessage({type:"session-changed"});}function L(){if(typeof window>"u"||c)return;let y=()=>{h();},w=()=>{document.visibilityState==="visible"&&h();};window.addEventListener("focus",y),document.addEventListener("visibilitychange",w),typeof BroadcastChannel<"u"&&(s=new BroadcastChannel(i),s.addEventListener("message",y)),c=()=>{window.removeEventListener("focus",y),document.removeEventListener("visibilitychange",w),s?.close(),s=null,c=null;};}function Y(y){return o.add(y),o.size===1&&(L(),h()),()=>{if(o.delete(y),o.size===0){let w=u;u=null,m=null,a=null,w?.abort(),c?.();}}}return n.measureWith(()=>{n.needsProbe()&&N(n.beginRead());}),{store:{subscribe:Y,getSnapshot:()=>d,refresh:A},getSession:l,notifyMutation(){H(),r&&r.catch(()=>{}).then(()=>{!n.needsProbe()&&n.hasToken()&&H();}),o.size>0&&h({query:{disableCookieCache:true}});}}}function ut(e){if(e===null)return null;let t=g(e);return (t.session===void 0||t.user===void 0)&&p(),{session:Ee(t.session),user:F(t.user)}}lt();function me(){let e=globalThis.crypto.getRandomValues(new Uint8Array(16));e[6]=e[6]&15|64,e[8]=e[8]&63|128;let t=Array.from(e,n=>n.toString(16).padStart(2,"0")).join("");return `${t.slice(0,8)}-${t.slice(8,12)}-${t.slice(12,16)}-${t.slice(16,20)}-${t.slice(20)}`}async function ln(e,t){return e.request("/user/metadata",{fetchOptions:t,decode:pn})}async function dn(e,t,n){return e.request("/user/metadata",{method:"PATCH",body:{expected_version:t.expectedVersion,unsafe_metadata:t.unsafeMetadata},fetchOptions:n,decode:pn})}function pn(e){let t=g(e),n=J(t.public_metadata),i=J(t.unsafe_metadata);if(!Number.isSafeInteger(t.metadata_version)||t.metadata_version<0)throw new TypeError("Invalid AuthOwl metadata response");return {publicMetadata:n,unsafeMetadata:i,metadataVersion:t.metadata_version}}function gn(e,t){let{post:n,mutation:i}=oe(e,t);return {getMetadata:o=>ln(e,o),updateUnsafeMetadata:(o,s)=>dn(e,o,s),updateProfile:(o,s)=>i(n("/update-user",o,s,he)),changeEmail:(o,s)=>i(n("/change-email",o,s,he)),changePassword:(o,s)=>i(n("/change-password",o,s,tr)),listSessions:o=>e.request("/list-sessions",{fetchOptions:o,decode:nr}),revokeSession:({sessionId:o},s)=>i(n("/revoke-session",{sessionId:o},s,he)),revokeOtherSessions:o=>i(n("/revoke-other-sessions",{},o,he)),listSocialAccounts:async o=>{let s=await e.request("/list-accounts",{fetchOptions:o,decode:ir});if(!s.data)return {data:null,error:s.error};let c=s.data.length>1;return {...s,data:s.data.filter(u=>u.providerId!=="credential").map(u=>({...u,canUnlink:c}))}},linkSocial:(o,s)=>n("/link-social",o,s,or),unlinkSocial:(o,s)=>i(n("/unlink-account",o,s,he)),delete:(o={},s)=>i(n("/delete-user",o,s,rr))}}function he(e){let t=g(e);return {status:k(t.status)}}function tr(e){let t=g(e);return {user:F(t.user)}}function nr(e){return Array.isArray(e)||p(),e.map(t=>{let n=g(t);return {id:R(n.id),userId:R(n.userId),createdAt:T(n.createdAt),updatedAt:T(n.updatedAt),expiresAt:T(n.expiresAt),...fn("ipAddress",E(n,"ipAddress")),...fn("userAgent",E(n,"userAgent"))}})}function ir(e){return Array.isArray(e)||p(),e.map(t=>{let n=g(t);return {id:R(n.id),userId:R(n.userId),providerId:R(n.providerId),accountId:R(n.accountId),scopes:ee(n.scopes),createdAt:T(n.createdAt),updatedAt:T(n.updatedAt)}})}function or(e){let t=g(e);return {url:R(t.url),redirect:k(t.redirect)}}function rr(e){let t=g(e);return {success:k(t.success),message:R(t.message)}}function fn(e,t){return t===void 0?{}:{[e]:t}}function Ce(e,t){return !e||!t?false:e.permissions.includes(t)}function mn(e,t){return !e||!t?false:e.teams?.includes(t)??false}function hn(e,t){return e?e.roles===void 0?e.role===t:e.roles.includes(t):false}function ve(e,t){if(!e)return  false;let{role:n,permission:i,teamId:o}=t;return !(n===void 0&&i===void 0&&o===void 0||n!==void 0&&!hn(e,n)||i!==void 0&&!e.permissions.includes(i)||o!==void 0&&!mn(e,o))}function sr(e){return {has:t=>ve(e,t),hasPermission:t=>Ce(e,t.permission)}}var ar=new Set(["pending","accepted","rejected","canceled"]),dt=1e4;function yn(e){let t=g(e);return t.recipientHint!==null&&t.recipientHint!=="new_user"&&p(),{recipientHint:t.recipientHint}}function re(e,t,n){let i=g(e),o={id:I(i.id),name:I(i.name),slug:I(i.slug),createdAt:T(i.createdAt),...ye("logo",E(i,"logo")),...ye("metadata",i.metadata===void 0?void 0:ct(i.metadata))};return B(o.id,t),B(o.slug,n),o}function An(e){return $(e,re)}function pt(e,t,n){return e===null?null:(t===null&&p(),re(e,t,n))}function On(e,t,n){if(e===null)return null;let i=g(e),o=re(i,t,n);return {...o,members:$(i.members,s=>xn(s,o.id)),invitations:$(i.invitations,s=>G(s,void 0,o.id))}}function ft(e,t,n=false){let i=$(e,o=>Ae(o));return n||be(i.map(o=>o.organizationId),t),i}function bn(e,t){let n=$(e,i=>gt(i));return be(n.map(i=>i.teamId),t),n}function gt(e,t,n){let i=g(e),o={id:I(i.id),teamId:I(i.teamId),userId:I(i.userId),createdAt:T(i.createdAt)};return B(o.teamId,t),B(o.userId,n),o}function wn(e,t,n){return e===null?null:(t===null&&p(),Ae(e,t,n))}function Rn(e,t){let n=g(e);return (!Number.isSafeInteger(n.total)||n.total<0)&&p(),{members:cr(n.members,t),total:n.total}}function G(e,t,n){let i=g(e),o=I(i.status);ar.has(o)||p();let s={id:I(i.id),organizationId:I(i.organizationId),email:Oe(i.email),role:I(i.role),status:o,inviterId:I(i.inviterId),expiresAt:T(i.expiresAt),createdAt:T(i.createdAt)};return B(s.id,t),B(s.organizationId,n),s}function Sn(e,t){let n=$(e,i=>G(i));return be(n.map(i=>i.organizationId),t),n}function kn(e){return $(e,t=>{let n=g(t);return {...G(n),organizationName:Oe(n.organizationName)}})}function Tn(e,t){let n=g(e);return {...G(n,t),organizationName:I(n.organizationName),organizationSlug:I(n.organizationSlug),inviterEmail:Dn(n.inviterEmail)}}function In(e,t){let n=g(e),i=G(n.invitation,t);return {invitation:i,member:se(n.member,void 0,i.organizationId)}}function Pn(e,t){let n=g(e);return n.member!==null&&p(),{invitation:n.invitation===null?null:G(n.invitation,t),member:null}}function En(e,t){return e===null?null:G(e,t)}function Cn(e,t,n){let i=g(e);return {member:se(i.member,n,t)}}function se(e,t,n){let i=g(e),o={id:I(i.id),organizationId:I(i.organizationId),userId:I(i.userId),role:I(i.role),createdAt:T(i.createdAt),...i.user===void 0?{}:{user:_n(i.user)}};return B(o.id,t),B(o.organizationId,n),o}function vn(e,t){let n=$(e,i=>{let o=g(i);return {organizationId:I(o.organizationId),data:{role:I(o.role),...ye("permission",o.permission===void 0?void 0:ur(o.permission)),...ye("customPermissionKeys",o.customPermissionKeys===void 0?void 0:ee(o.customPermissionKeys))}}});return be(n.map(i=>i.organizationId),t),n.map(i=>i.data)}function Ae(e,t,n){let i=g(e),o=i.updatedAt,s={id:I(i.id),name:Oe(i.name),organizationId:I(i.organizationId),createdAt:T(i.createdAt),...o===void 0?{}:{updatedAt:T(o)}};return B(s.id,t),B(s.organizationId,n),s}function mt(e){let t=g(e);return {message:Oe(t.message)}}function xn(e,t){let n=g(e);return {...se(n,void 0,t),user:_n(n.user)}}function cr(e,t){let n=$(e,i=>xn(i));return be(n.map(i=>i.organizationId),t),n}function ur(e){let t=g(e),n={};for(let[i,o]of Object.entries(t))(i==="__proto__"||i==="constructor"||i==="prototype"||i.length===0||i.length>dt||!Array.isArray(o))&&p(),n[i]=o.map(s=>I(s));return n}function I(e){let t=R(e);return (t.length===0||t.length>dt)&&p(),t}function Oe(e){if(e==null)return "";let t=R(e);return t.length>dt&&p(),t}function Dn(e){return e===null?null:I(e)}function B(e,t){t!==void 0&&e!==t&&p();}function be(e,t){let n=t??e[0];n!==void 0&&e.some(i=>i!==n)&&p();}function _n(e){let t=g(e);return {id:I(t.id),name:Oe(t.name),email:Dn(t.email),...ye("image",E(t,"image"))}}function $(e,t){return Array.isArray(e)||p(),e.map(n=>t(n))}function ye(e,t){return t===void 0?{}:{[e]:t}}function Un(e,t,n=()=>null){let{post:i,mutation:o}=oe(e,t),s=new Set,c=()=>{for(let r of s)try{r();}catch{}},u=new Map,a=(r,d,f,O)=>{if(f)return e.request(r,{query:d,fetchOptions:f,decode:O});let l=`${r}\0${JSON.stringify(d??null)}`,h=u.get(l);if(h)return h;let A=e.request(r,{query:d,decode:O}).finally(()=>{u.delete(l);});return u.set(l,A),A},m=async r=>{let d=await o(r).finally(()=>u.clear());return d.error===null&&c(),d};return {subscribe(r){return s.add(r),()=>s.delete(r)},create:(r,d)=>m(i("/organization/create",r,d,re)),list:r=>a("/organization/list",void 0,r,An),get:(r={},d)=>a("/organization/get-full-organization",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,membersLimit:r.membersLimit},d,f=>On(f,r.organizationId,r.organizationSlug)),setActive:(r,d)=>m(i("/organization/set-active",r,d,f=>pt(f,r.organizationId,r.organizationSlug))),createTeam:(r,d)=>m(i("/organization/create-team",r,d,f=>Ae(f,void 0,r.organizationId))),listTeams:(r={},d)=>a("/organization/list-teams",{organizationId:r.organizationId},d,f=>ft(f,r.organizationId)),updateTeam:(r,d)=>m(i("/organization/update-team",r,d,f=>Ae(f,r.teamId,r.data.organizationId))),removeTeam:(r,d)=>m(i("/organization/remove-team",r,d,mt)),listUserTeams:r=>a("/organization/list-user-teams",void 0,r,d=>ft(d,void 0,true)),listTeamMembers:(r={},d)=>a("/organization/list-team-members",{teamId:r.teamId},d,f=>bn(f,r.teamId)),addTeamMember:(r,d)=>m(i("/organization/add-team-member",r,d,f=>gt(f,r.teamId,r.userId))),removeTeamMember:(r,d)=>m(i("/organization/remove-team-member",r,d,mt)),setActiveTeam:(r,d)=>m(i("/organization/set-active-team",r,d,f=>wn(f,r.teamId))),update:(r,d)=>m(i("/organization/update",r,d,f=>pt(f,r.organizationId))),delete:(r,d)=>m(i("/organization/delete",r,d,f=>re(f,r.organizationId))),listMembers:(r={},d)=>a("/organization/list-members",{organizationId:r.organizationId,organizationSlug:r.organizationSlug,limit:r.limit,offset:r.offset,sortBy:r.sortBy,sortDirection:r.sortDirection,filterField:r.filterField,filterValue:r.filterValue,filterOperator:r.filterOperator},d,f=>Rn(f,r.organizationId)),inviteMember:(r,d)=>m(i("/organization/invite-member",r,d,f=>G(f,void 0,r.organizationId))),listInvitations:(r={},d)=>a("/organization/list-invitations",{organizationId:r.organizationId},d,f=>Sn(f,r.organizationId)),listUserInvitations:r=>a("/organization/list-user-invitations",void 0,r,kn),getInvitation:(r,d)=>a("/organization/get-invitation",{id:r.id},d,f=>Tn(f,r.id)),getInvitationRecipientHint:(r,d)=>a("/organization/invitation-recipient-hint",{invitationId:r.invitationId},d,yn),acceptInvitation:(r,d)=>m(i("/organization/accept-invitation",r,d,f=>In(f,r.invitationId))),rejectInvitation:(r,d)=>m(i("/organization/reject-invitation",r,d,f=>Pn(f,r.invitationId))),cancelInvitation:(r,d)=>m(i("/organization/cancel-invitation",r,d,f=>En(f,r.invitationId))),removeMember:(r,d)=>m(i("/organization/remove-member",r,d,f=>Cn(f,r.organizationId,r.memberIdOrEmail.includes("@")?void 0:r.memberIdOrEmail))),updateMemberRole:(r,d)=>m(i("/organization/update-member-role",r,d,f=>se(f,r.memberId,r.organizationId))),leave:(r,d)=>m(i("/organization/leave",r,d,f=>se(f,void 0,r.organizationId))),listRoles:(r={},d)=>a("/organization/list-roles",{organizationId:r.organizationId},d,f=>vn(f,r.organizationId)),has:r=>ve(n(),r),hasPermission:r=>Ce(n(),r.permission)}}function _e(e){return {listConsentPreferences:t=>e.request("/privacy/consent-decisions",{fetchOptions:t,decode:lr}),recordConsent:(t,n)=>e.request("/privacy/consent-decisions",{method:"POST",body:{...t,correlationId:t.correlationId??me()},fetchOptions:n,decode:pr}),listRightsRequests:t=>e.request("/privacy/rights",{fetchOptions:t,decode:fr}),createRightsRequest:(t,n)=>e.request("/privacy/rights",{method:"POST",body:t,fetchOptions:n,decode:gr})}}function lr(e){let t=g(e);return Array.isArray(t.preferences)||p(),{preferences:t.preferences.map(dr)}}function dr(e){let t=g(e);return {purposeId:R(t.purposeId),purposeVersionId:R(t.purposeVersionId),code:R(t.code),state:mr(t.state,["granted","refused","withdrawn"]),updatedAt:xe(t.updatedAt),decidedAt:xe(t.decidedAt)}}function pr(e){let t=g(e);return t.recorded!==true&&p(),{recorded:true,decision:we(t.decision,["granted","refused","withdrawn"]),decidedAt:De(t.decidedAt)}}function fr(e){let t=g(e);return Array.isArray(t.requests)||p(),{requests:t.requests.map(zn)}}function gr(e){return {request:zn(g(e).request)}}function zn(e){let t=g(e);return {id:R(t.id),rightType:we(t.rightType,["access","correction","portability","erasure","restriction","objection","consent_withdrawal"]),state:we(t.state,["received","identity_pending","in_progress","restricted","completed","denied","withdrawn"]),locale:we(t.locale,["en","ar"]),receivedAt:De(t.receivedAt),acknowledgedAt:xe(t.acknowledgedAt),fulfilmentDeadline:De(t.fulfilmentDeadline),completedAt:xe(t.completedAt)}}function xe(e){return e===null?null:De(e)}function De(e){if(e instanceof Date)return T(e);typeof e!="string"&&p();let t=new Date(e);return Number.isNaN(t.getTime())&&p(),t}function we(e,t){return (typeof e!="string"||!t.includes(e))&&p(),e}function mr(e,t){return e===null?null:we(e,t)}var Nn=4096,hr=4096,yr=100,Ar=256,Or=16,br=64,wr=12;function yt(e){let t=g(e);return t.twoFactorRedirect===true?((t.user!==void 0||t.redirect!==void 0||t.url!==void 0)&&p(),{twoFactorRedirect:true,...t.twoFactorMethods===void 0?{}:{twoFactorMethods:ei(t.twoFactorMethods,Or,br)}}):(t.twoFactorRedirect!==void 0&&p(),{redirect:k(t.redirect),...Ir(t,"url"),user:F(t.user)})}function Ln(e){let t=g(e);return {user:F(t.user)}}function Mn(e){let t=g(e);return {sessionCreated:k(t.sessionCreated),user:F(t.user)}}function Fn(e,t){let n=g(e),i=k(n.redirect);n.user===null&&p();let o=n.user!==void 0&&n.user!==null,s=n.url!==void 0&&n.url!==null;return i?((o||!s)&&p(),{redirect:true,url:ht(n.url,t)}):(o===s&&p(),o?{redirect:false,user:F(n.user)}:{redirect:false,url:ht(n.url,t)})}function Vn(e,t){let n=g(e);return (n.redirect!==true||n.user!==void 0)&&p(),{redirect:true,url:ht(n.url,t)}}function qn(e){return {status:k(g(e).status)}}function Hn(e){return {success:k(g(e).success)}}function Kn(e){return g(e).status!=="pending"&&p(),{status:"pending"}}function Bn(e){let t=g(e);if(t.kind==="authowl_turnstile")return {kind:"authowl_turnstile"};t.kind!=="akedly_shield_v1_2"&&p();let n=g(t.turnstile),i=n.siteKey===null?null:R(n.siteKey);return {kind:"akedly_shield_v1_2",connectionId:R(t.connectionId),challenge:R(t.challenge),difficulty:Rr(t.difficulty),challengeToken:R(t.challengeToken),challengeRequired:k(t.challengeRequired),turnstile:{required:k(n.required),siteKey:i}}}function Rr(e){return (!Number.isSafeInteger(e)||Number(e)<0||Number(e)>wr)&&p(),Number(e)}function jn(e){let t=g(e);return (t.status!==true||t.sessionCreated!==true)&&p(),{status:true,sessionCreated:true,user:Sr(t.user)}}function At(e){return {status:k(g(e).status)}}function Jn(e){return {status:k(g(e).status)}}function $n(e){let t=g(e);return {status:k(t.status),user:F(t.user)}}function Gn(e){return {success:k(g(e).success)}}function Wn(e){let t=g(e);return {totpURI:Tr(t.totpURI),backupCodes:Zn(t.backupCodes)}}function Yn(e){return {status:k(g(e).status)}}function Ue(e){return g(e).status!==true&&p(),{status:true}}function Xn(e){return {status:k(g(e).status)}}function Qn(e){let t=g(e);return t.status!==void 0&&t.status!==true&&p(),{backupCodes:Zn(t.backupCodes)}}function Sr(e){let t=g(e);return {id:ae(t.id,512),...Pr(t,"name",1024),phoneNumber:ae(t.phoneNumber,64),phoneNumberVerified:k(t.phoneNumberVerified),...t.createdAt===void 0?{}:{createdAt:T(t.createdAt)},...t.updatedAt===void 0?{}:{updatedAt:T(t.updatedAt)}}}function ht(e,t){let n=ae(e,Nn);/[\u0000-\u0020\u007f]/u.test(n)&&p();let i;try{i=new URL(n);}catch{return p()}return (i.username||i.password)&&p(),i.protocol==="https:"||t&&i.protocol==="http:"&&kr(i.hostname)?i.href:p()}function kr(e){let t=e.toLowerCase();return t==="localhost"||t==="127.0.0.1"||t==="[::1]"}function Tr(e){let t=ae(e,hr),n;try{n=new URL(t);}catch{return p()}let i=n.searchParams.get("secret");return (n.protocol!=="otpauth:"||n.hostname.toLowerCase()!=="totp"||n.username||n.password||n.hash||i===null||i.length===0||i.length>512||/\s/u.test(i))&&p(),t}function Zn(e){return ei(e,yr,Ar)}function ei(e,t,n){(!Array.isArray(e)||e.length===0||e.length>t)&&p();let i=e.map(o=>ae(o,n));return i.some(o=>o.trim().length===0)&&p(),new Set(i).size!==i.length&&p(),i}function ae(e,t){let n=R(e);return (n.length===0||n.length>t)&&p(),n}function Ir(e,t){let n=e[t];return n==null?{}:{[t]:ae(n,Nn)}}function Pr(e,t,n){let i=E(e,t);return i===void 0?{}:(i!==null&&i.length>n&&p(),{[t]:i})}var ti=new Set([1564,8206,8207,8234,8235,8236,8237,8238,8294,8295,8296,8297]),ze=new Set([9,10,11,12,13,32,133,160,5760,8192,8193,8194,8195,8196,8197,8198,8199,8200,8201,8202,8232,8233,8239,8287,12288,65279]);function Ne(e){if(e===void 0)return {valid:true,value:void 0};for(let n of e){let i=n.codePointAt(0);if(i===void 0||ii(n,i)||ni(i)||ti.has(i))return {valid:false}}let t=Er(e);return Ot(t)?{valid:true,value:t}:{valid:false}}function Ot(e){let t=0,n,i;for(let o of e){if(t+=1,t>256)return  false;let s=o.codePointAt(0);if(s===void 0||ii(o,s)||ni(s)||ti.has(s))return  false;n??=s,i=s;}return t>0&&n!==void 0&&i!==void 0&&!ze.has(n)&&!ze.has(i)}function Le(){return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:"INVALID_PASSKEY_NAME",message:"Passkey names must contain 1 to 256 safe Unicode characters."}}}function Er(e){let t=0,n=e.length;for(;t<n;){let i=e.codePointAt(t);if(i===void 0||!ze.has(i))break;t+=i>65535?2:1;}for(;n>t;){let i=e.codePointAt(n-1);if(i===void 0)break;let s=i>=56320&&i<=57343?n-2:n-1,c=e.codePointAt(s);if(c===void 0||!ze.has(c))break;n=s;}return e.slice(t,n)}function ni(e){return e>=0&&e<=31||e>=127&&e<=159}function ii(e,t){return e.length===1&&t>=55296&&t<=57343}var si=12,ai=5e3,Cr=8,vr=1e3,xr=16,oi=512,ci=100,ui=8192,Dr=32768,bt=1024,ri=256,Rt=64,_r=6e5,Ur=/^[A-Za-z0-9_-]+$/u,zr=/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u,Nr=/[\u0000-\u001f\u007f-\u009f\u061c\u200e\u200f\u202a-\u202e\u2066-\u2069]/u,Lr=/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?$/u,Mr=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/iu,li=new Set(["discouraged","preferred","required"]),Fr=new Set(["singleDevice","multiDevice"]),di=new Set(["ble","cable","hybrid","internal","nfc","smart-card","usb"]),pi=new Set(["hybrid","security-key","client-device"]),Vr=new Set(["none","indirect","direct","enterprise"]),qr=new Set(["fido-u2f","packed","android-safetynet","android-key","tpm","apple","none"]),Hr=new Set(["platform","cross-platform"]),Kr=new Set(["discouraged","preferred","required"]),Br=new Set([-8,-7,-257]);function fi(e){let t=J(e,si,ai);return {challenge:Si(t.challenge),...v("timeout",wi(t.timeout)),...v("rpId",ki(t.rpId)),...v("allowCredentials",bi(t.allowCredentials)),...v("userVerification",Re(t.userVerification,li)),...v("hints",Me(t.hints,pi)),...v("extensions",Ri(t.extensions))}}function gi(e){let t=J(e,si,ai);return {challenge:Si(t.challenge),rp:jr(t.rp),user:Jr(t.user),pubKeyCredParams:$r(t.pubKeyCredParams),...v("timeout",wi(t.timeout)),...v("excludeCredentials",bi(t.excludeCredentials)),...v("authenticatorSelection",Gr(t.authenticatorSelection)),...v("attestation",Re(t.attestation,Vr)),...v("attestationFormats",Me(t.attestationFormats,qr)),...v("hints",Me(t.hints,pi)),...v("extensions",Ri(t.extensions))}}function mi(e){let t=g(e),n=Ee(t.session),i=F(t.user);return n.userId!==i.id&&p(),{session:n,user:i}}function St(e){let t=g(e),n=t.counter;(!Number.isSafeInteger(n)||n<0)&&p();let i=kt(t.deviceType,Fr),o=k(t.backedUp);return o&&i!=="multiDevice"&&p(),{id:ce(t.id,ri),...Xr(t),publicKey:Wr(t.publicKey,Dr),userId:ce(t.userId,ri),credentialID:Ve(t.credentialID,ui),counter:n,deviceType:i,backedUp:o,...Qr(t),createdAt:T(t.createdAt),...Zr(t)}}function hi(e,t,n){let i=St(e);return (i.credentialID!==t||(n===void 0?i.name!==void 0&&i.name!==null:i.name!==n))&&p(),i}function yi(e){(!Array.isArray(e)||e.length>ci)&&p();let t=e.map(St);return Fe(t.map(n=>n.id)),Fe(t.map(n=>n.credentialID)),t.length>1&&t.some(n=>n.userId!==t[0]?.userId)&&p(),t}function Ai(e,t,n){let i=g(e),o=St(i.passkey);return (o.id!==t||o.name!==n)&&p(),{passkey:o}}function Oi(e){return g(e).status!==true&&p(),{status:true}}function jr(e){let t=g(e);return {name:wt(t.name,bt),...v("id",ki(t.id))}}function Jr(e){let t=g(e);return {id:Ve(t.id,128,1,64),name:wt(t.name,bt),displayName:wt(t.displayName,bt)}}function $r(e){(!Array.isArray(e)||e.length===0||e.length>Rt)&&p();let t=e.map(n=>{let i=g(n);return (i.type!=="public-key"||!Number.isSafeInteger(i.alg)||!Br.has(i.alg))&&p(),{type:"public-key",alg:i.alg}});return es(t.map(n=>n.alg)),t}function bi(e){if(e===void 0)return;(!Array.isArray(e)||e.length>ci)&&p();let t=e.map(n=>{let i=g(n);return i.type!=="public-key"&&p(),{type:"public-key",id:Ve(i.id,ui),...v("transports",Me(i.transports,di))}});return Fe(t.map(n=>n.id)),t}function Gr(e){if(e===void 0)return;let t=g(e);t.requireResidentKey!==void 0&&typeof t.requireResidentKey!="boolean"&&p();let n=Re(t.residentKey,Kr);return t.requireResidentKey!==void 0&&n!==void 0&&t.requireResidentKey!==(n==="required")&&p(),{...v("authenticatorAttachment",Re(t.authenticatorAttachment,Hr)),...v("residentKey",n),...v("requireResidentKey",t.requireResidentKey),...v("userVerification",Re(t.userVerification,li))}}function wi(e){return e!==void 0&&(typeof e!="number"||!Number.isFinite(e)||e<0||e>_r)&&p(),e}function Ri(e){return e===void 0?void 0:J(e,Cr,vr)}function Me(e,t){if(e===void 0)return;(!Array.isArray(e)||e.length>Rt)&&p();let n=e.map(i=>kt(i,t));return Fe(n),n}function Re(e,t){if(e!==void 0)return kt(e,t)}function Si(e){return Ve(e,Math.ceil(oi*4/3),xr,oi)}function Ve(e,t,n=1,i=Number.POSITIVE_INFINITY){let o=ce(e,t),s=o.length%4,c=Yr(o.at(-1)??""),u=Math.floor(o.length*3/4);return (!Ur.test(o)||s===1||s===2&&(c&15)!==0||s===3&&(c&3)!==0||u<n||u>i)&&p(),o}function ce(e,t){let n=R(e);return (n.length===0||n.length>t)&&p(),n}function wt(e,t){let n=ce(e,t);return Nr.test(n)&&p(),n}function ki(e){if(e===void 0)return;let t=ce(e,253);return t!=="localhost"&&(t.endsWith(".")||!t.includes(".")||t.split(".").some(n=>!Lr.test(n)))&&p(),t}function Wr(e,t){let n=ce(e,t),i=n.endsWith("=="),o=!i&&n.endsWith("="),s=n.at(i?-3:o?-2:-1)??"",c=Ti(s);return (n.length%4!==0||!zr.test(n)||i&&(c&15)!==0||o&&(c&3)!==0)&&p(),n}function Yr(e){return Ti(e,true)}function Ti(e,t=false){return (t?"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_":"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/").indexOf(e)}function Xr(e){let t=E(e,"name");return t===void 0?{}:(t!==null&&!Ot(t)&&p(),{name:t})}function Qr(e){let t=E(e,"transports");if(t==null||t==="")return t===void 0?{}:{transports:t};let n=t.split(",");return (n.length>Rt||n.some(i=>!di.has(i))||new Set(n).size!==n.length)&&p(),{transports:t}}function Zr(e){let t=E(e,"aaguid");return t==null?t===void 0?{}:{aaguid:null}:(Mr.test(t)||p(),{aaguid:t})}function kt(e,t){let n=R(e);return t.has(n)||p(),n}function v(e,t){return t===void 0?{}:{[e]:t}}function Fe(e){new Set(e).size!==e.length&&p();}function es(e){new Set(e).size!==e.length&&p();}function us(e,t){if(!t)return e;let n=t.catch(()=>{});return n.then(()=>{n=null;}),{async request(i,o){return n&&await n,e.request(i,o)}}}var xi=new Map;function ls(e,t,n){let i=xi.get(n);if(!i){let o=new URLSearchParams(window.location.hash.slice(1)).get("authowl_code");if(!o)return;i=Promise.resolve().then(()=>(He(),qe)).then(s=>s.completeCrossSiteSignIn(e,t,o)),xi.set(n,i);}return i}function Di(e){return !ge()||e.idToken||e.disableRedirect?"legacy":"first-party"}function Ui(e,t=()=>{},n=ds){let i=fe(e),o=e.session.tokens,s=ge()?ls(i,o,e.decoded.projectId):void 0,c=us(i,s),u=un({http:c,probe:fe({...e,fetch:e.session.probe}),tokens:o,channelName:`authowl:${e.decoded.projectId}`}),a=n(c,u.notifyMutation),m=()=>{u.notifyMutation(),t();},{post:r,mutation:d}=oe(c,m),f=e.decoded.env==="test",O=l=>{o.beginSession({remember:l?.rememberMe!==false});};return {sessionStore:u.store,getSession:u.getSession,account:gn(c,m),organization:Un(c,m,()=>u.store.getSnapshot().data?.session.membership??null),privacy:_e(c),signIn:{email:(l,h)=>(O(l),d(r("/sign-in/email",l,h,yt),A=>!("twoFactorRedirect"in A))),username:(l,h)=>(O(l),d(r("/sign-in/username",l,h,yt),A=>!("twoFactorRedirect"in A))),social:async(l,h)=>{if(O(),Di(l)==="first-party"){let{beginCrossSiteSignIn:b}=await Promise.resolve().then(()=>(He(),qe)),S=await b(e,{kind:"social",provider:l.provider,callbackURL:l.callbackURL,errorCallbackURL:l.errorCallbackURL,newUserCallbackURL:l.newUserCallbackURL,scopes:l.scopes,loginHint:l.loginHint,requestSignUp:l.requestSignUp});if(S)return window.location.assign(S),{data:{redirect:true,url:S},error:null}}let A=await d(r("/sign-in/social",l,h,b=>Fn(b,f)),b=>"user"in b);return A.error!==null||A.data===null||"url"in A.data&&A.data.redirect&&!l.disableRedirect&&typeof window<"u"&&window.location.assign(A.data.url),A},sso:async(l,h)=>{if(Di(l)==="first-party"){let{beginCrossSiteSignIn:b}=await Promise.resolve().then(()=>(He(),qe)),S=await b(e,{kind:"sso",email:l.email,providerId:l.providerId,domain:l.domain,organizationSlug:l.organizationSlug,callbackURL:l.callbackURL,errorCallbackURL:l.errorCallbackURL,newUserCallbackURL:l.newUserCallbackURL});if(S)return window.location.assign(S),{data:{url:S,redirect:true},error:null}}let A=await r("/sign-in/sso",l,h,b=>Vn(b,f));return A.error!==null||A.data===null||typeof window<"u"&&window.location.assign(A.data.url),A},magicLink:(l,h)=>r("/sign-in/magic-link",l,h,qn),emailOtp:(l,h)=>(O(),d(r("/sign-in/email-otp",l,h,Ln))),passkey:(l,h)=>(O(),a.signIn(l,h))},signUp:{email:(l,h)=>(O(),d(r("/sign-up/email",l,h,Mn),A=>A.sessionCreated))},emailOtp:{sendVerificationOtp:(l,h)=>r("/email-otp/send-verification-otp",l,h,Hn),verifyEmail:(l,h)=>(O(),d(r("/email-otp/verify-email",l,h,$n)))},phoneOtp:{prepare:l=>r("/phone-otp/challenge",{},l,Bn),start:(l,h)=>r("/phone-otp/start",{...l,idempotencyKey:l.idempotencyKey??me()},h,Kn),verify:(l,h)=>(O(),d(r("/phone-otp/verify",l,h,jn)))},requestPasswordReset:(l,h)=>r("/request-password-reset",l,h,At),resetPassword:(l,h)=>r("/reset-password",l,h,At),sendVerificationEmail:(l,h)=>r("/send-verification-email",l,h,Jn),passkey:{addPasskey:(l,h)=>a.add(l,h),listUserPasskeys:()=>c.request("/passkey/list-user-passkeys",{decode:yi}),updatePasskey:async(l,h)=>{let A=Ne(l.name);if(!A.valid||A.value===void 0)return Le();let b=A.value;return r("/passkey/update-passkey",{...l,name:b},h,S=>Ai(S,l.id,b))},deletePasskey:(l,h)=>r("/passkey/delete-passkey",l,h,Oi)},twoFactor:{enable:(l,h)=>r("/two-factor/enable",l,h,Wn),disable:(l,h)=>d(r("/two-factor/disable",l,h,Yn),A=>A.status),verifyTotp:(l,h)=>d(r("/two-factor/verify-totp",l,h,Ue)),verifyBackupCode:(l,h)=>d(r("/two-factor/verify-backup-code",l,h,Ue)),sendOtp:(l={},h)=>r("/two-factor/send-otp",l,h,Xn),verifyOtp:(l,h)=>d(r("/two-factor/verify-otp",l,h,Ue)),generateBackupCodes:(l,h)=>r("/two-factor/generate-backup-codes",l,h,Qn)},signOut:l=>d(c.request("/sign-out",{method:"POST",body:{},fetchOptions:l,decode:Gn}).then(h=>(o.endSession(),h)),h=>h.success)}}function ds(){return {signIn:()=>_i(),add:()=>_i()}}function _i(){return Promise.resolve({data:null,error:{status:400,statusText:"BAD_REQUEST",code:"PASSKEY_BROWSER_REQUIRED",message:"This passkey ceremony requires a browser with WebAuthn."}})}function Vi(e,t,n){let i=new Map;return {async signIn(o={},s){let c=await e.request("/passkey/generate-authenticate-options");if(!c.data)return Li(c.error);let u;try{u=fi(c.data);}catch{return zi()}let a;try{a=await n.authenticate({optionsJSON:u,useBrowserAutofill:o.autoFill});}catch(O){return Mi(n,O,"AUTH_CANCELLED","Passkey authentication was cancelled.")}if(!ps(a))return Ni();let{clientExtensionResults:m,...r}=a,d=i.get(a.id);if(d)return d;let f=(async()=>{let O=await e.request("/passkey/verify-authentication",{method:"POST",body:{response:r},fetchOptions:s,decode:mi});return O.data&&t(),O})();i.set(a.id,f);try{return await f}finally{i.get(a.id)===f&&i.delete(a.id);}},async add(o={},s){let c=Ne(o.name);if(!c.valid)return Le();let u=await e.request("/passkey/generate-register-options",{query:{name:c.value,authenticatorAttachment:o.authenticatorAttachment}});if(!u.data)return Li(u.error);let a;try{a=gi(u.data);}catch{return zi()}let m;try{m=await n.register({optionsJSON:a});}catch(O){return Mi(n,O,"REGISTRATION_CANCELLED","Passkey registration was cancelled.")}if(!fs(m))return Ni();let{clientExtensionResults:r,...d}=m,f=await e.request("/passkey/verify-registration",{method:"POST",body:{response:d,name:c.value},fetchOptions:s,decode:O=>hi(O,m.id,c.value)});return f.data&&t(),f}}}function zi(){return {data:null,error:{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned invalid WebAuthn options."}}}function Ni(){return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:"INVALID_WEBAUTHN_RESPONSE",message:"The platform returned an invalid passkey response."}}}function qi(e){if(!e||typeof e!="object")return  false;let t=e;return typeof t.id=="string"&&t.id.length>0&&typeof t.rawId=="string"&&t.rawId.length>0&&t.type==="public-key"&&!!t.response&&typeof t.response=="object"}function ps(e){if(!qi(e))return  false;let t=e.response;return typeof t.clientDataJSON=="string"&&typeof t.authenticatorData=="string"&&typeof t.signature=="string"&&(t.userHandle===void 0||typeof t.userHandle=="string")}function fs(e){if(!qi(e))return  false;let t=e.response;return typeof t.clientDataJSON=="string"&&typeof t.attestationObject=="string"}function Li(e){return {data:null,error:e??{status:502,statusText:"BAD_GATEWAY",code:"INVALID_WEBAUTHN_OPTIONS",message:"The server returned no WebAuthn options."}}}function Mi(e,t,n,i){let o=ms(t,"page does not have focus"),s=e.errorCode?.(t),c=s!==void 0?s==="ERROR_CEREMONY_ABORTED":Fi(t)==="AbortError",u=n!=="AUTH_CANCELLED",a=gs(s,Fi(t),u);return {data:null,error:{status:400,statusText:"BAD_REQUEST",code:o?"PASSKEY_PAGE_NOT_FOCUSED":c?n:s??"PASSKEY_BROWSER_ERROR",message:o?"Keep this page focused while completing the passkey prompt.":c?i:a}}}function gs(e,t,n){switch(e){case "ERROR_INVALID_DOMAIN":case "ERROR_INVALID_RP_ID":return "Passkeys are not set up for this site\u2019s domain.";case "ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED":return "This device already has a passkey for this account.";case "ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEY_ALGS":case "ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT":case "ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT":return "This device cannot create a passkey for this site.";}return t==="NotAllowedError"?n?"No passkey was created. The prompt was dismissed or timed out.":"No passkey was used. This device may not have one saved for this site yet, or the prompt was dismissed.":t==="SecurityError"?"Passkeys are not set up for this site\u2019s domain.":n?"Passkey registration did not complete.":"Passkey sign-in did not complete."}function Fi(e){return e&&typeof e=="object"&&"name"in e&&typeof e.name=="string"?e.name:void 0}function ms(e,t){let n=t.toLowerCase(),i=new Set,o=e;for(;o&&typeof o=="object"&&!i.has(o);){if(i.add(o),"message"in o&&typeof o.message=="string"&&o.message.toLowerCase().includes(n))return  true;o="cause"in o?o.cause:void 0;}return  false}function V(e){let t=new Uint8Array(e),n="";for(let o of t)n+=String.fromCharCode(o);return btoa(n).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function te(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),n=(4-t.length%4)%4,i=t.padEnd(t.length+n,"="),o=atob(i),s=new ArrayBuffer(o.length),c=new Uint8Array(s);for(let u=0;u<o.length;u++)c[u]=o.charCodeAt(u);return s}function ne(){return hs.stubThis(globalThis?.PublicKeyCredential!==void 0&&typeof globalThis.PublicKeyCredential=="function")}var hs={stubThis:e=>e};function Ke(e){let{id:t}=e;return {...e,id:te(t),transports:e.transports}}function Be(e){return e==="localhost"||/^((xn--[a-z0-9-]+|[a-z0-9]+(-[a-z0-9]+)*)\.)+([a-z]{2,}|xn--[a-z0-9-]+)$/i.test(e)}var P=class extends Error{constructor({message:t,code:n,cause:i,name:o}){super(t,{cause:i}),Object.defineProperty(this,"code",{enumerable:true,configurable:true,writable:true,value:void 0}),this.name=o??i.name,this.code=n;}};function Hi({error:e,options:t}){let{publicKey:n}=t;if(!n)throw Error("options was missing required publicKey property");if(e.name==="AbortError"){if(t.signal instanceof AbortSignal)return new P({message:"Registration ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:e})}else if(e.name==="ConstraintError"){if(n.authenticatorSelection?.requireResidentKey===true)return new P({message:"Discoverable credentials were required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT",cause:e});if(t.mediation==="conditional"&&n.authenticatorSelection?.userVerification==="required")return new P({message:"User verification was required during automatic registration but it could not be performed",code:"ERROR_AUTO_REGISTER_USER_VERIFICATION_FAILURE",cause:e});if(n.authenticatorSelection?.userVerification==="required")return new P({message:"User verification was required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT",cause:e})}else {if(e.name==="InvalidStateError")return new P({message:"The authenticator was previously registered",code:"ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED",cause:e});if(e.name==="NotAllowedError")return new P({message:e.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:e});if(e.name==="NotSupportedError")return n.pubKeyCredParams.filter(o=>o.type==="public-key").length===0?new P({message:'No entry in pubKeyCredParams was of type "public-key"',code:"ERROR_MALFORMED_PUBKEYCREDPARAMS",cause:e}):new P({message:"No available authenticator supported any of the specified pubKeyCredParams algorithms",code:"ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEYCREDPARAMS_ALG",cause:e});if(e.name==="SecurityError"){let i=globalThis.location.hostname;if(Be(i)){if(n.rp.id!==i)return new P({message:`The RP ID "${n.rp.id}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:e})}else return new P({message:`${globalThis.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:e})}else if(e.name==="TypeError"){if(n.user.id.byteLength<1||n.user.id.byteLength>64)return new P({message:"User ID was not between 1 and 64 characters",code:"ERROR_INVALID_USER_ID_LENGTH",cause:e})}else if(e.name==="UnknownError")return new P({message:"The authenticator was unable to process the specified options, or could not create a new credential",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:e})}return e}var Pt=class{constructor(){Object.defineProperty(this,"controller",{enumerable:true,configurable:true,writable:true,value:void 0});}createNewAbortSignal(){if(this.controller){let n=new Error("Cancelling existing WebAuthn API call for new one");n.name="AbortError",this.controller.abort(n);}let t=new AbortController;return this.controller=t,t.signal}cancelCeremony(){if(this.controller){let t=new Error("Manually cancelling existing WebAuthn API call");t.name="AbortError",this.controller.abort(t),this.controller=void 0;}}},je=new Pt;var ys=["cross-platform","platform"];function Je(e){if(e&&!(ys.indexOf(e)<0))return e}async function Ki(e){!e.optionsJSON&&e.challenge&&(console.warn("startRegistration() was not called correctly. It will try to continue with the provided options, but this call should be refactored to use the expected call structure instead. See https://simplewebauthn.dev/docs/packages/browser#typeerror-cannot-read-properties-of-undefined-reading-challenge for more information."),e={optionsJSON:e});let{optionsJSON:t,useAutoRegister:n=false}=e;if(!ne())throw new Error("WebAuthn is not supported in this browser");let i={...t,challenge:te(t.challenge),user:{...t.user,id:te(t.user.id)},excludeCredentials:t.excludeCredentials?.map(Ke)},o={};n&&(o.mediation="conditional"),o.publicKey=i,o.signal=je.createNewAbortSignal();let s;try{s=await navigator.credentials.create(o);}catch(l){throw Hi({error:l,options:o})}if(!s)throw new Error("Registration was not completed");let{id:c,rawId:u,response:a,type:m}=s,r;typeof a.getTransports=="function"&&(r=a.getTransports());let d;if(typeof a.getPublicKeyAlgorithm=="function")try{d=a.getPublicKeyAlgorithm();}catch(l){Et("getPublicKeyAlgorithm()",l);}let f;if(typeof a.getPublicKey=="function")try{let l=a.getPublicKey();l!==null&&(f=V(l));}catch(l){Et("getPublicKey()",l);}let O;if(typeof a.getAuthenticatorData=="function")try{O=V(a.getAuthenticatorData());}catch(l){Et("getAuthenticatorData()",l);}return {id:c,rawId:V(u),response:{attestationObject:V(a.attestationObject),clientDataJSON:V(a.clientDataJSON),transports:r,publicKeyAlgorithm:d,publicKey:f,authenticatorData:O},type:m,clientExtensionResults:s.getClientExtensionResults(),authenticatorAttachment:Je(s.authenticatorAttachment)}}function Et(e,t){console.warn(`The browser extension that intercepted this WebAuthn API call incorrectly implemented ${e}. You should report this error to them.
+`,t);}function Bi(){if(!ne())return Ct.stubThis(new Promise(t=>t(false)));let e=globalThis.PublicKeyCredential;return e?.isConditionalMediationAvailable===void 0?Ct.stubThis(new Promise(t=>t(false))):Ct.stubThis(e.isConditionalMediationAvailable())}var Ct={stubThis:e=>e};function ji({error:e,options:t}){let{publicKey:n}=t;if(!n)throw Error("options was missing required publicKey property");if(e.name==="AbortError"){if(t.signal instanceof AbortSignal)return new P({message:"Authentication ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:e})}else {if(e.name==="NotAllowedError")return new P({message:e.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:e});if(e.name==="SecurityError"){let i=globalThis.location.hostname;if(Be(i)){if(n.rpId!==i)return new P({message:`The RP ID "${n.rpId}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:e})}else return new P({message:`${globalThis.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:e})}else if(e.name==="UnknownError")return new P({message:"The authenticator was unable to process the specified options, or could not create a new assertion signature",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:e})}return e}async function Ji(e){!e.optionsJSON&&e.challenge&&(console.warn("startAuthentication() was not called correctly. It will try to continue with the provided options, but this call should be refactored to use the expected call structure instead. See https://simplewebauthn.dev/docs/packages/browser#typeerror-cannot-read-properties-of-undefined-reading-challenge for more information."),e={optionsJSON:e});let{optionsJSON:t,useBrowserAutofill:n=false,verifyBrowserAutofillInput:i=true}=e;if(!ne())throw new Error("WebAuthn is not supported in this browser");let o;t.allowCredentials?.length!==0&&(o=t.allowCredentials?.map(Ke));let s={...t,challenge:te(t.challenge),allowCredentials:o},c={};if(n){if(!await Bi())throw Error("Browser does not support WebAuthn autofill");if(document.querySelectorAll("input[autocomplete$='webauthn']").length<1&&i)throw Error('No <input> with "webauthn" as the only or last value in its `autocomplete` attribute was detected');c.mediation="conditional",s.allowCredentials=[];}c.publicKey=s,c.signal=je.createNewAbortSignal();let u;try{u=await navigator.credentials.get(c);}catch(O){throw ji({error:O,options:c})}if(!u)throw new Error("Authentication was not completed");let{id:a,rawId:m,response:r,type:d}=u,f;return r.userHandle&&(f=V(r.userHandle)),{id:a,rawId:V(m),response:{authenticatorData:V(r.authenticatorData),clientDataJSON:V(r.clientDataJSON),signature:V(r.signature),userHandle:f},type:d,clientExtensionResults:u.getClientExtensionResults(),authenticatorAttachment:Je(u.authenticatorAttachment)}}var $i={authenticate:e=>Ji(e),register:e=>Ki(e),errorCode:e=>e instanceof P?e.code:void 0};function Wi(e){return `${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}/consent`}async function vt(e){let t=await j(e,Wi(e),{init:{method:"GET",credentials:"include"},maxResponseBytes:65536,decode:As});return t.response.status===401?{required:false}:Q(t,"consent status")}async function xt(e,t){if(!Number.isSafeInteger(t)||t<1)throw new TypeError("Consent version must be a positive integer.");return Q(await j(e,Wi(e),{init:{method:"POST",headers:{"content-type":"application/json"},credentials:"include",body:JSON.stringify({version:t})},maxResponseBytes:64*1024,decode:Os}),"consent accept")}function As(e){let t=g(e),n=k(t.required),i=bs(t.needsConsent),o=Yi(t.version),s=Gi(t.termsUrl),c=Gi(t.privacyUrl);return {required:n,...i===void 0?{}:{needsConsent:i},...o===void 0?{}:{version:o},...s===void 0?{}:{termsUrl:s},...c===void 0?{}:{privacyUrl:c}}}function Os(e){let t=g(e),n=Yi(t.version);return {ok:k(t.ok),...n===void 0?{}:{version:n}}}function bs(e){if(e===void 0||typeof e=="boolean")return e;throw new TypeError("Invalid consent response.")}function Yi(e){if(e===void 0||Number.isSafeInteger(e)&&e>=1)return e;throw new TypeError("Invalid consent response.")}function Gi(e){if(e===void 0||typeof e=="string"&&e.length<=4096)return e;throw new TypeError("Invalid consent response.")}var ws=30;function Rs(e){return typeof e?.exp=="number"?e.exp:null}function Ss(e){let t=e.split(".")[1];if(!t)return null;try{let n=t.replace(/-/g,"+").replace(/_/g,"/"),i=JSON.parse(atob(n));return typeof i=="object"&&i!==null?i:null}catch{return null}}function Dt(e){let t=new Map;async function n(s={}){let c=s.template===void 0?null:s.template.trim().toLowerCase();if(c==="")throw new TypeError("Template missing");let u=c??"",a=t.get(u);a||(a={activeKey:null,cachedByKey:new Map,inflight:null,sequence:0},t.set(u,a));let m=s.forceRefresh===true;if(!m){let l=a.activeKey?a.cachedByKey.get(a.activeKey):null;if(l&&l.exp-Date.now()/1e3>ws)return l.token;if(a.inflight)return a.inflight}let r=++a.sequence,d=()=>t.get(u)===a&&a.sequence===r,f=(async()=>{let l=c?`${e.projectBaseURL}/token/${encodeURIComponent(c)}`:`${e.projectBaseURL}/token`,h=await j(e,l,{init:{method:"GET",credentials:"include"},maxResponseBytes:64*1024,decode:L=>ks(L,c!==null)});if(h.response.status===401)return d()&&i(),null;let A=Q(h,"token"),b=A.policyVersion,S=A.token,N=Ss(S),H=Rs(N);if(d())if(H!==null){let L=typeof N?.sub=="string"?N.sub:null,Y=typeof N?.org_id=="string"?N.org_id:null;if(!c||L){let y=JSON.stringify([e.projectBaseURL,L,Y,c,b]);a.cachedByKey.clear(),a.cachedByKey.set(y,{token:S,exp:H}),a.activeKey=y;}else o(a);}else o(a);return S})();if(m)return f;let O=f.finally(()=>{a.inflight===O&&(a.inflight=null);});return a.inflight=O,O}function i(){t.clear();}function o(s){s.cachedByKey.clear(),s.activeKey=null;}return {getToken:n,clear:i}}function ks(e,t){let n=g(e),i=R(n.token);if(i.length===0||i.length>32*1024)throw new TypeError("Invalid token response.");if(!t)return {token:i,policyVersion:0};let o=g(n.template);if(!Number.isSafeInteger(o.policyVersion)||o.policyVersion<1)throw new TypeError("Invalid token response.");return {token:i,policyVersion:o.policyVersion}}function Ts(e){let t=Dt(e),n=Ui(e,t.clear,(u,a)=>Vi(u,a,$i)),i=fe(e,`${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}`),o=_e(i),s=u=>(...a)=>(t.clear(),u(...a)),c={getConsentStatus:()=>vt(e),acceptConsent:u=>xt(e,u),getToken:t.getToken,privacy:o,waitlist:{join:(u,a)=>i.request("/waitlist",{method:"POST",body:u,fetchOptions:a,credentials:"omit"})},account:{...n.account,updateUnsafeMetadata:s(n.account.updateUnsafeMetadata),updateProfile:s(n.account.updateProfile),changeEmail:s(n.account.changeEmail),changePassword:s(n.account.changePassword),revokeSession:s(n.account.revokeSession),delete:s(n.account.delete)},signIn:{email:s(n.signIn.email),username:s(n.signIn.username),social:s(n.signIn.social),sso:n.signIn.sso,magicLink:n.signIn.magicLink,emailOtp:s(n.signIn.emailOtp),passkey:s(n.signIn.passkey)},signUp:{email:s(n.signUp.email)},emailOtp:{...n.emailOtp,verifyEmail:s(n.emailOtp.verifyEmail)},twoFactor:{enable:n.twoFactor.enable,disable:s(n.twoFactor.disable),verifyTotp:s(n.twoFactor.verifyTotp),verifyBackupCode:s(n.twoFactor.verifyBackupCode),sendOtp:n.twoFactor.sendOtp,verifyOtp:s(n.twoFactor.verifyOtp),generateBackupCodes:n.twoFactor.generateBackupCodes},phoneOtp:{prepare:n.phoneOtp.prepare,start:n.phoneOtp.start,verify:s(n.phoneOtp.verify)},signOut:s(n.signOut)};return {...n,...c}}async function Is(e){if(typeof window>"u")throw new Error("Akedly Shield challenges must be solved in a browser.");let t=await Ps(),n=e.challengeRequired?await t.solvePow(e.challenge,e.difficulty):null,i=e.turnstile.required?await t.getTurnstileToken(Es(e.turnstile.siteKey)):void 0;return {connectionId:e.connectionId,...n?{challengeToken:e.challengeToken,nonce:n.nonce}:{},...i?{turnstileToken:i}:{}}}async function Ps(){return import('@akedly/shield')}function Es(e){if(!e)throw new Error("Akedly Shield did not provide a Turnstile site key.");return e}async function Cs(e){let t=`${e.apiUrl}/api/projects/${e.decoded.projectId}/public-config`;return Q(await j(e,t,{init:{method:"GET",credentials:"omit"},maxResponseBytes:256*1024,decode:n=>vs(n,e)}),"public-config")}function vs(e,t){let n=J(e),i=n.environmentId,o=n.environmentType,s=`${t.apiUrl}/api/projects/${t.decoded.projectId}/auth`;if(typeof n.applicationId!="string"||!_t(n.applicationId)||i!==t.decoded.projectId||o!=="development"&&o!=="production"||n.authBaseUrl!==s)throw x();let c=C(n.branding),u=C(n.legal);if(!ie(n.enabledMethods,64)||!ie(n.socialProviders,64)||!eo(c,["appName","logoUrl","primaryColor"])||c.showAppName!==void 0&&typeof c.showAppName!="boolean"||c.alignment!==void 0&&c.alignment!=="left"&&c.alignment!=="center"&&c.alignment!=="right"||c.theme!==void 0&&c.theme!=="light"&&c.theme!=="dark"&&c.theme!=="system"||!eo(u,["termsUrl","privacyUrl"])||!Number.isSafeInteger(u.version)||u.version<0||typeof u.required!="boolean")throw x();if(n.socialProviderClientIds!==void 0){let a=C(n.socialProviderClientIds);if(Object.keys(a).length>64||Object.values(a).some(m=>typeof m!="string"||m.length>2048))throw x()}if(!W(n,["requireEmailVerification","twoFactor","mfaRequired","accountDeletion","organizations","sso","badge"])||!Xi(n.turnstileSiteKey)||!Xi(n.authTurnstileSiteKey)||typeof n.locale!="string"||n.locale.length===0||n.locale.length>64||!Number.isSafeInteger(n.configVersion)||n.configVersion<0)throw x();if(n.jwtIssuer!==null){let a=C(n.jwtIssuer),m=new URL(a.issuer),r=`${m.origin}/api/projects/${t.decoded.projectId}/auth`;if(a.issuer!==r||a.jwksUrl!==`${r}/jwks`||a.aud!==t.decoded.projectId||m.protocol!=="https:"&&m.origin!==t.apiUrl)throw x()}if(n.signUp!==void 0){let a=C(n.signUp).mode;if(typeof a!="string"||!["open","restricted","allowlist","waitlist"].includes(a))throw x()}if(n.authentication!==void 0&&xs(n.authentication),n.privacy!==void 0&&Ds(n.privacy),n.emailVerification!==void 0){let a=C(n.emailVerification);if(!W(a,["required"])||a.method!=="link"&&a.method!=="code")throw x()}if(n.userModel!==void 0&&!W(C(n.userModel),["requireEmail","firstLastName","emailChange","accountDeletion"]))throw x();if(n.mfa!==void 0){let a=C(n.mfa);if(!W(a,["totp","required","backupCodes"])||(a.required===true||a.backupCodes===true)&&a.totp!==true)throw x()}if(n.captcha===void 0||n.captcha===null)n.captcha=typeof n.authTurnstileSiteKey=="string"&&n.authTurnstileSiteKey.length>0?{provider:"turnstile",siteKey:n.authTurnstileSiteKey}:null;else {let a=C(n.captcha);if(typeof a.provider!="string"||a.provider.length===0||a.provider.length>64||typeof a.siteKey!="string"||a.siteKey.length===0||a.siteKey.length>512)throw x();n.captcha={provider:a.provider,siteKey:a.siteKey};}return n}function _t(e){return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(e)}function x(){return new TypeError("public-config returned an invalid response")}function C(e){if(!e||typeof e!="object"||Array.isArray(e))throw x();return e}function Xi(e){return e===null||typeof e=="string"&&e.length<=4096}function xs(e){let t=C(e),n=C(t.email),i=C(t.password),o=i.minLength!==void 0||i.maxLength!==void 0;if(!W(n,["signUp"])||!ie(n.signIn,3)||n.signIn.some(s=>s!=="password"&&s!=="magic_link"&&s!=="email_otp")||!W(C(t.phone),["signUp","signIn"])||!W(i,["signUp","add"])||o&&(!Number.isSafeInteger(i.minLength)||!Number.isSafeInteger(i.maxLength)||i.minLength<1||i.maxLength>4096||i.minLength>i.maxLength)||!W(C(t.passkey),["signIn","add"])||!_s(C(t.passkey).relyingPartyId)||!W(C(t.username),["collectOnSignUp","signIn"]))throw x()}function Ds(e){let t=C(e);if(!Array.isArray(t.notices)||!Array.isArray(t.consentPurposes)||t.notices.length>64||t.consentPurposes.length>64)throw x();for(let n of t.notices){let i=C(n);if(Qi(i,"noticeId","noticeVersionId"),$e(i.title,512),$e(i.body,1e5),Zi(i.digest),!ie(i.activityCodes,128)||!ie(i.purposeCodes,128)||typeof i.effectiveFrom!="string"||!Number.isFinite(Date.parse(i.effectiveFrom)))throw x()}for(let n of t.consentPurposes){let i=C(n);if(Qi(i,"purposeId","purposeVersionId"),$e(i.title,512),$e(i.description,1e4),Zi(i.digest),!ie(i.activityCodes,128)||!ie(i.dataCategories,128))throw x()}}function Qi(e,t,n){if(typeof e[t]!="string"||!_t(e[t])||typeof e[n]!="string"||!_t(e[n])||typeof e.code!="string"||!/^[a-z][a-z0-9_]{0,63}$/.test(e.code)||!Number.isSafeInteger(e.version)||e.version<1)throw x()}function $e(e,t){let n=C(e);if(typeof n.en!="string"||n.en.length===0||n.en.length>t||typeof n.ar!="string"||n.ar.length===0||n.ar.length>t)throw x()}function Zi(e){let t=C(e);if(typeof t.en!="string"||!/^[a-f0-9]{64}$/.test(t.en)||typeof t.ar!="string"||!/^[a-f0-9]{64}$/.test(t.ar))throw x()}function _s(e){return e==null||typeof e=="string"}function W(e,t){return t.every(n=>typeof e[n]=="boolean")}function eo(e,t){return t.every(n=>e[n]===void 0||typeof e[n]=="string"&&e[n].length<=4096)}function ie(e,t){return Array.isArray(e)&&e.length<=t&&e.every(n=>typeof n=="string"&&n.length<=128)&&new Set(e).size===e.length}var Se=class extends Error{constructor(n,i){super(n);this.cause=i;this.name="AuthOwlError";}cause},Ut=class extends Se{constructor(n,i){super(`Rate limited. Retry after ${n}s.`,i);this.retryAfterSeconds=n;this.name="RateLimitedError";}retryAfterSeconds},zt=class extends Se{constructor(t="invalid publishable key",n){super(t,n),this.name="InvalidKeyError";}};var to=["en","ar"];function Us(e){return e==="ar"?"rtl":"ltr"}function zs(e){return typeof e=="string"&&to.includes(e)}
+exports.AUTH_CHALLENGE_HEADER=sn;exports.AUTH_LOCALE_HEADER=an;exports.AuthOwlError=Se;exports.AuthOwlHttpError=Pe;exports.INVITATION_CLAIM_MAX_AGE_MS=Xt;exports.INVITATION_QUERY_PARAM=et;exports.InvalidKeyError=zt;exports.LOCALES=to;exports.RateLimitedError=Ut;exports.SESSION_TOKEN_HEADER=Xe;exports.SESSION_TRANSPORT_BEARER=Ze;exports.SESSION_TRANSPORT_HEADER=Qe;exports.TransportError=_;exports.acceptConsent=xt;exports.activeLocale=it;exports.captureInvitationClaim=Ro;exports.clearInvitationClaim=de;exports.createAuthOwlClient=Ts;exports.createIdempotencyKey=me;exports.createMembershipHas=sr;exports.createTokenClient=Dt;exports.decodePublishableKey=Ge;exports.directionFor=Us;exports.getConsentStatus=vt;exports.getPublicConfig=Cs;exports.isLocale=zs;exports.membershipHas=ve;exports.membershipHasPermission=Ce;exports.membershipHasRole=hn;exports.membershipHasTeam=mn;exports.readInvitationClaim=le;exports.readLastUsedSignInMethod=ko;exports.recordLastUsedSignInMethod=To;exports.rememberPendingSignInMethod=Io;exports.resolveAuthTarget=Wt;exports.resolveConfig=wo;exports.resolveProjectCapabilities=Eo;exports.sessionChallengeIsEphemeral=lo;exports.sessionCookieName=so;exports.setActiveLocale=Vo;exports.settlePendingSignInMethod=Po;exports.solvePhoneOtpChallenge=Is;

package/dist/index.d.cts

@@ -1,9 +1,9 @@
 export { A as AuthConfig, D as DecodedPublishableKey, H as HasParams, O as OrganizationMembership, R as ResolvedAuthConfig, a as ResolvedAuthTarget, T as TransportError, b as TransportErrorKind, c as createMembershipHas, d as decodePublishableKey, m as membershipHas, e as membershipHasPermission, f as membershipHasRole, g as membershipHasTeam, h as resolveAuthTarget, r as resolveConfig } from './organization-membership-DSqmZLkN.cjs';
 export { s as sessionCookieName } from './cookie-BqcfagTw.cjs';
-import { x as PhoneOtpChallengeData, y as AkedlyShieldStartProof } from './client-2xyOK_yb.cjs';
-export { z as AcceptOrganizationInvitationData, B as AccountClient, D as AccountSession, E as AccountStatusData, A as ActionFetchOptions, F as AddOrganizationTeamMemberOptions, e as AddPasskeyOptions, a as AuthActionResult, g as AuthClientError, G as AuthErrorContext, b as AuthOwlClient, H as AuthOwlErrorCode, f as AuthPasskey, I as AuthRequestContext, J as AuthResponseContext, h as AuthSession, i as AuthUser, K as ChangeEmailOptions, L as ChangePasswordData, M as ChangePasswordOptions, N as ConsentAcceptResult, Q as ConsentStatus, T as CreateOrganizationOptions, U as CreateOrganizationTeamOptions, C as CreatePrivacyRightsRequestOptions, V as DeleteAccountData, W as DeleteAccountOptions, X as DeleteOrganizationOptions, Y as DeletePasskeyData, Z as DeletePasskeyOptions, _ as DisableTwoFactorOptions, $ as EmailAuthData, a0 as EmailOtpAuthData, a1 as EmailOtpSignInOptions, a2 as EmailOtpType, a3 as EmailSignInOptions, a4 as EmailSignUpData, a5 as EmailSignUpOptions, a6 as EnableTwoFactorOptions, a7 as EnvironmentType, a8 as GenerateBackupCodesOptions, a9 as GetOrganizationInvitationOptions, aa as GetOrganizationOptions, ab as GetToken, ac as GetTokenOptions, ad as INVITATION_CLAIM_MAX_AGE_MS, ae as INVITATION_QUERY_PARAM, af as InvitationClaim, ag as InvitationRecipientHint, ah as InviteOrganizationMemberOptions, ai as JsonObject, aj as JsonPrimitive, ak as JsonValue, al as LeaveOrganizationOptions, am as LinkSocialData, an as LinkSocialOptions, ao as ListOrganizationInvitationsOptions, ap as ListOrganizationMembersOptions, aq as ListOrganizationRolesOptions, ar as ListOrganizationTeamMembersOptions, as as ListOrganizationTeamsOptions, at as MagicLinkData, au as MagicLinkSignInOptions, O as Organization, j as OrganizationClient, k as OrganizationDetails, av as OrganizationFilterOperator, aw as OrganizationInvitation, ax as OrganizationInvitationActionOptions, ay as OrganizationInvitationDetails, az as OrganizationInvitationStatus, aA as OrganizationMember, aB as OrganizationMemberUser, aC as OrganizationMemberWithUser, aD as OrganizationMembersData, aE as OrganizationRoleSummary, aF as OrganizationSelector, aG as OrganizationTeam, aH as OrganizationTeamMember, aI as OrganizationUserInvitation, d as PasskeyAuthData, c as PasskeySignInOptions, aJ as PasswordResetData, aK as PhoneAuthUser, aL as PhoneOtpStartData, aM as PhoneOtpStartOptions, aN as PhoneOtpVerifyData, aO as PhoneOtpVerifyOptions, l as PrivacyClient, m as PrivacyConsentPreference, n as PrivacyConsentState, o as PrivacyLocale, p as PrivacyRightState, q as PrivacyRightType, r as PrivacyRightsRequest, P as PublicConfig, R as RecordPrivacyConsentOptions, aP as RejectOrganizationInvitationData, aQ as RemoveOrganizationMemberData, aR as RemoveOrganizationMemberOptions, aS as RemoveOrganizationTeamData, aT as RemoveOrganizationTeamMemberData, aU as RemoveOrganizationTeamMemberOptions, aV as RemoveOrganizationTeamOptions, aW as RequestPasswordResetOptions, aX as ResetPasswordOptions, aY as RevokeSessionOptions, aZ as SendOtpData, a_ as SendTwoFactorOtpData, a$ as SendTwoFactorOtpOptions, b0 as SendVerificationOtpOptions, s as SessionState, t as SessionStore, u as SetActiveOrganizationOptions, b1 as SetActiveTeamOptions, b2 as SignOutData, b3 as SocialAccount, v as SocialAuthData, S as SocialIdTokenOptions, b4 as SocialSignInOptions, b5 as TokenClient, b6 as TwoFactorBackupCodesData, b7 as TwoFactorEnableData, b8 as TwoFactorRedirectData, b9 as TwoFactorStatusData, ba as TwoFactorVerifyData, bb as UnlinkSocialOptions, bc as UpdateOrganizationMemberRoleOptions, bd as UpdateOrganizationOptions, be as UpdateOrganizationTeamOptions, bf as UpdatePasskeyData, bg as UpdatePasskeyOptions, bh as UpdateProfileOptions, bi as UpdateUnsafeMetadataOptions, bj as UserMetadata, bk as UsernameSignInOptions, bl as VerifyBackupCodeOptions, bm as VerifyEmailOtpData, bn as VerifyEmailOtpOptions, bo as VerifyTotpOptions, bp as VerifyTwoFactorOtpOptions, bq as WaitlistJoinData, br as WaitlistJoinOptions, bs as acceptConsent, bt as captureInvitationClaim, bu as clearInvitationClaim, bv as createAuthOwlClient, bw as createTokenClient, bx as getConsentStatus, w as getPublicConfig, by as readInvitationClaim } from './client-2xyOK_yb.cjs';
+import { x as PhoneOtpChallengeData, y as AkedlyShieldStartProof } from './client-BRDFS1ln.cjs';
+export { z as AcceptOrganizationInvitationData, B as AccountClient, D as AccountSession, E as AccountStatusData, A as ActionFetchOptions, F as AddOrganizationTeamMemberOptions, e as AddPasskeyOptions, a as AuthActionResult, g as AuthClientError, G as AuthErrorContext, b as AuthOwlClient, H as AuthOwlErrorCode, f as AuthPasskey, I as AuthRequestContext, J as AuthResponseContext, h as AuthSession, i as AuthUser, K as ChangeEmailOptions, L as ChangePasswordData, M as ChangePasswordOptions, N as ConsentAcceptResult, Q as ConsentStatus, T as CreateOrganizationOptions, U as CreateOrganizationTeamOptions, C as CreatePrivacyRightsRequestOptions, V as DeleteAccountData, W as DeleteAccountOptions, X as DeleteOrganizationOptions, Y as DeletePasskeyData, Z as DeletePasskeyOptions, _ as DisableTwoFactorOptions, $ as EmailAuthData, a0 as EmailOtpAuthData, a1 as EmailOtpSignInOptions, a2 as EmailOtpType, a3 as EmailSignInOptions, a4 as EmailSignUpData, a5 as EmailSignUpOptions, a6 as EnableTwoFactorOptions, a7 as EnvironmentType, a8 as GenerateBackupCodesOptions, a9 as GetOrganizationInvitationOptions, aa as GetOrganizationOptions, ab as GetToken, ac as GetTokenOptions, ad as INVITATION_CLAIM_MAX_AGE_MS, ae as INVITATION_QUERY_PARAM, af as InvitationClaim, ag as InvitationRecipientHint, ah as InviteOrganizationMemberOptions, ai as JsonObject, aj as JsonPrimitive, ak as JsonValue, al as LeaveOrganizationOptions, am as LinkSocialData, an as LinkSocialOptions, ao as ListOrganizationInvitationsOptions, ap as ListOrganizationMembersOptions, aq as ListOrganizationRolesOptions, ar as ListOrganizationTeamMembersOptions, as as ListOrganizationTeamsOptions, at as MagicLinkData, au as MagicLinkSignInOptions, O as Organization, j as OrganizationClient, k as OrganizationDetails, av as OrganizationFilterOperator, aw as OrganizationInvitation, ax as OrganizationInvitationActionOptions, ay as OrganizationInvitationDetails, az as OrganizationInvitationStatus, aA as OrganizationMember, aB as OrganizationMemberUser, aC as OrganizationMemberWithUser, aD as OrganizationMembersData, aE as OrganizationRoleSummary, aF as OrganizationSelector, aG as OrganizationTeam, aH as OrganizationTeamMember, aI as OrganizationUserInvitation, d as PasskeyAuthData, c as PasskeySignInOptions, aJ as PasswordResetData, aK as PhoneAuthUser, aL as PhoneOtpStartData, aM as PhoneOtpStartOptions, aN as PhoneOtpVerifyData, aO as PhoneOtpVerifyOptions, l as PrivacyClient, m as PrivacyConsentPreference, n as PrivacyConsentState, o as PrivacyLocale, p as PrivacyRightState, q as PrivacyRightType, r as PrivacyRightsRequest, P as PublicConfig, R as RecordPrivacyConsentOptions, aP as RejectOrganizationInvitationData, aQ as RemoveOrganizationMemberData, aR as RemoveOrganizationMemberOptions, aS as RemoveOrganizationTeamData, aT as RemoveOrganizationTeamMemberData, aU as RemoveOrganizationTeamMemberOptions, aV as RemoveOrganizationTeamOptions, aW as RequestPasswordResetOptions, aX as ResetPasswordOptions, aY as RevokeSessionOptions, aZ as SendOtpData, a_ as SendTwoFactorOtpData, a$ as SendTwoFactorOtpOptions, b0 as SendVerificationOtpOptions, s as SessionState, t as SessionStore, u as SetActiveOrganizationOptions, b1 as SetActiveTeamOptions, b2 as SignOutData, b3 as SocialAccount, v as SocialAuthData, S as SocialIdTokenOptions, b4 as SocialSignInOptions, b5 as TokenClient, b6 as TwoFactorBackupCodesData, b7 as TwoFactorEnableData, b8 as TwoFactorRedirectData, b9 as TwoFactorStatusData, ba as TwoFactorVerifyData, bb as UnlinkSocialOptions, bc as UpdateOrganizationMemberRoleOptions, bd as UpdateOrganizationOptions, be as UpdateOrganizationTeamOptions, bf as UpdatePasskeyData, bg as UpdatePasskeyOptions, bh as UpdateProfileOptions, bi as UpdateUnsafeMetadataOptions, bj as UserMetadata, bk as UsernameSignInOptions, bl as VerifyBackupCodeOptions, bm as VerifyEmailOtpData, bn as VerifyEmailOtpOptions, bo as VerifyTotpOptions, bp as VerifyTwoFactorOtpOptions, bq as WaitlistJoinData, br as WaitlistJoinOptions, bs as acceptConsent, bt as captureInvitationClaim, bu as clearInvitationClaim, bv as createAuthOwlClient, bw as createTokenClient, bx as getConsentStatus, w as getPublicConfig, by as readInvitationClaim } from './client-BRDFS1ln.cjs';
 export { S as SESSION_TOKEN_HEADER, a as SESSION_TRANSPORT_BEARER, b as SESSION_TRANSPORT_HEADER } from './session-transport-contract-HDPYRum8.cjs';
-export { b as AUTH_CHALLENGE_HEADER, d as AUTH_LOCALE_HEADER, P as ProjectCapabilities, a as createIdempotencyKey, r as resolveProjectCapabilities } from './idempotency-BWgUuHGa.cjs';
+export { b as AUTH_CHALLENGE_HEADER, d as AUTH_LOCALE_HEADER, P as ProjectCapabilities, a as createIdempotencyKey, r as resolveProjectCapabilities } from './idempotency-kuv3HQVN.cjs';
 export { a as LOCALES, L as Locale, d as directionFor, i as isLocale } from './index-DgVPDEYx.cjs';
 
 /**

package/dist/index.d.ts

@@ -1,9 +1,9 @@
 export { A as AuthConfig, D as DecodedPublishableKey, H as HasParams, O as OrganizationMembership, R as ResolvedAuthConfig, a as ResolvedAuthTarget, T as TransportError, b as TransportErrorKind, c as createMembershipHas, d as decodePublishableKey, m as membershipHas, e as membershipHasPermission, f as membershipHasRole, g as membershipHasTeam, h as resolveAuthTarget, r as resolveConfig } from './organization-membership-DSqmZLkN.js';
 export { s as sessionCookieName } from './cookie-BqcfagTw.js';
-import { x as PhoneOtpChallengeData, y as AkedlyShieldStartProof } from './client-Za31KAN3.js';
-export { z as AcceptOrganizationInvitationData, B as AccountClient, D as AccountSession, E as AccountStatusData, A as ActionFetchOptions, F as AddOrganizationTeamMemberOptions, e as AddPasskeyOptions, a as AuthActionResult, g as AuthClientError, G as AuthErrorContext, b as AuthOwlClient, H as AuthOwlErrorCode, f as AuthPasskey, I as AuthRequestContext, J as AuthResponseContext, h as AuthSession, i as AuthUser, K as ChangeEmailOptions, L as ChangePasswordData, M as ChangePasswordOptions, N as ConsentAcceptResult, Q as ConsentStatus, T as CreateOrganizationOptions, U as CreateOrganizationTeamOptions, C as CreatePrivacyRightsRequestOptions, V as DeleteAccountData, W as DeleteAccountOptions, X as DeleteOrganizationOptions, Y as DeletePasskeyData, Z as DeletePasskeyOptions, _ as DisableTwoFactorOptions, $ as EmailAuthData, a0 as EmailOtpAuthData, a1 as EmailOtpSignInOptions, a2 as EmailOtpType, a3 as EmailSignInOptions, a4 as EmailSignUpData, a5 as EmailSignUpOptions, a6 as EnableTwoFactorOptions, a7 as EnvironmentType, a8 as GenerateBackupCodesOptions, a9 as GetOrganizationInvitationOptions, aa as GetOrganizationOptions, ab as GetToken, ac as GetTokenOptions, ad as INVITATION_CLAIM_MAX_AGE_MS, ae as INVITATION_QUERY_PARAM, af as InvitationClaim, ag as InvitationRecipientHint, ah as InviteOrganizationMemberOptions, ai as JsonObject, aj as JsonPrimitive, ak as JsonValue, al as LeaveOrganizationOptions, am as LinkSocialData, an as LinkSocialOptions, ao as ListOrganizationInvitationsOptions, ap as ListOrganizationMembersOptions, aq as ListOrganizationRolesOptions, ar as ListOrganizationTeamMembersOptions, as as ListOrganizationTeamsOptions, at as MagicLinkData, au as MagicLinkSignInOptions, O as Organization, j as OrganizationClient, k as OrganizationDetails, av as OrganizationFilterOperator, aw as OrganizationInvitation, ax as OrganizationInvitationActionOptions, ay as OrganizationInvitationDetails, az as OrganizationInvitationStatus, aA as OrganizationMember, aB as OrganizationMemberUser, aC as OrganizationMemberWithUser, aD as OrganizationMembersData, aE as OrganizationRoleSummary, aF as OrganizationSelector, aG as OrganizationTeam, aH as OrganizationTeamMember, aI as OrganizationUserInvitation, d as PasskeyAuthData, c as PasskeySignInOptions, aJ as PasswordResetData, aK as PhoneAuthUser, aL as PhoneOtpStartData, aM as PhoneOtpStartOptions, aN as PhoneOtpVerifyData, aO as PhoneOtpVerifyOptions, l as PrivacyClient, m as PrivacyConsentPreference, n as PrivacyConsentState, o as PrivacyLocale, p as PrivacyRightState, q as PrivacyRightType, r as PrivacyRightsRequest, P as PublicConfig, R as RecordPrivacyConsentOptions, aP as RejectOrganizationInvitationData, aQ as RemoveOrganizationMemberData, aR as RemoveOrganizationMemberOptions, aS as RemoveOrganizationTeamData, aT as RemoveOrganizationTeamMemberData, aU as RemoveOrganizationTeamMemberOptions, aV as RemoveOrganizationTeamOptions, aW as RequestPasswordResetOptions, aX as ResetPasswordOptions, aY as RevokeSessionOptions, aZ as SendOtpData, a_ as SendTwoFactorOtpData, a$ as SendTwoFactorOtpOptions, b0 as SendVerificationOtpOptions, s as SessionState, t as SessionStore, u as SetActiveOrganizationOptions, b1 as SetActiveTeamOptions, b2 as SignOutData, b3 as SocialAccount, v as SocialAuthData, S as SocialIdTokenOptions, b4 as SocialSignInOptions, b5 as TokenClient, b6 as TwoFactorBackupCodesData, b7 as TwoFactorEnableData, b8 as TwoFactorRedirectData, b9 as TwoFactorStatusData, ba as TwoFactorVerifyData, bb as UnlinkSocialOptions, bc as UpdateOrganizationMemberRoleOptions, bd as UpdateOrganizationOptions, be as UpdateOrganizationTeamOptions, bf as UpdatePasskeyData, bg as UpdatePasskeyOptions, bh as UpdateProfileOptions, bi as UpdateUnsafeMetadataOptions, bj as UserMetadata, bk as UsernameSignInOptions, bl as VerifyBackupCodeOptions, bm as VerifyEmailOtpData, bn as VerifyEmailOtpOptions, bo as VerifyTotpOptions, bp as VerifyTwoFactorOtpOptions, bq as WaitlistJoinData, br as WaitlistJoinOptions, bs as acceptConsent, bt as captureInvitationClaim, bu as clearInvitationClaim, bv as createAuthOwlClient, bw as createTokenClient, bx as getConsentStatus, w as getPublicConfig, by as readInvitationClaim } from './client-Za31KAN3.js';
+import { x as PhoneOtpChallengeData, y as AkedlyShieldStartProof } from './client-DhUE4JL1.js';
+export { z as AcceptOrganizationInvitationData, B as AccountClient, D as AccountSession, E as AccountStatusData, A as ActionFetchOptions, F as AddOrganizationTeamMemberOptions, e as AddPasskeyOptions, a as AuthActionResult, g as AuthClientError, G as AuthErrorContext, b as AuthOwlClient, H as AuthOwlErrorCode, f as AuthPasskey, I as AuthRequestContext, J as AuthResponseContext, h as AuthSession, i as AuthUser, K as ChangeEmailOptions, L as ChangePasswordData, M as ChangePasswordOptions, N as ConsentAcceptResult, Q as ConsentStatus, T as CreateOrganizationOptions, U as CreateOrganizationTeamOptions, C as CreatePrivacyRightsRequestOptions, V as DeleteAccountData, W as DeleteAccountOptions, X as DeleteOrganizationOptions, Y as DeletePasskeyData, Z as DeletePasskeyOptions, _ as DisableTwoFactorOptions, $ as EmailAuthData, a0 as EmailOtpAuthData, a1 as EmailOtpSignInOptions, a2 as EmailOtpType, a3 as EmailSignInOptions, a4 as EmailSignUpData, a5 as EmailSignUpOptions, a6 as EnableTwoFactorOptions, a7 as EnvironmentType, a8 as GenerateBackupCodesOptions, a9 as GetOrganizationInvitationOptions, aa as GetOrganizationOptions, ab as GetToken, ac as GetTokenOptions, ad as INVITATION_CLAIM_MAX_AGE_MS, ae as INVITATION_QUERY_PARAM, af as InvitationClaim, ag as InvitationRecipientHint, ah as InviteOrganizationMemberOptions, ai as JsonObject, aj as JsonPrimitive, ak as JsonValue, al as LeaveOrganizationOptions, am as LinkSocialData, an as LinkSocialOptions, ao as ListOrganizationInvitationsOptions, ap as ListOrganizationMembersOptions, aq as ListOrganizationRolesOptions, ar as ListOrganizationTeamMembersOptions, as as ListOrganizationTeamsOptions, at as MagicLinkData, au as MagicLinkSignInOptions, O as Organization, j as OrganizationClient, k as OrganizationDetails, av as OrganizationFilterOperator, aw as OrganizationInvitation, ax as OrganizationInvitationActionOptions, ay as OrganizationInvitationDetails, az as OrganizationInvitationStatus, aA as OrganizationMember, aB as OrganizationMemberUser, aC as OrganizationMemberWithUser, aD as OrganizationMembersData, aE as OrganizationRoleSummary, aF as OrganizationSelector, aG as OrganizationTeam, aH as OrganizationTeamMember, aI as OrganizationUserInvitation, d as PasskeyAuthData, c as PasskeySignInOptions, aJ as PasswordResetData, aK as PhoneAuthUser, aL as PhoneOtpStartData, aM as PhoneOtpStartOptions, aN as PhoneOtpVerifyData, aO as PhoneOtpVerifyOptions, l as PrivacyClient, m as PrivacyConsentPreference, n as PrivacyConsentState, o as PrivacyLocale, p as PrivacyRightState, q as PrivacyRightType, r as PrivacyRightsRequest, P as PublicConfig, R as RecordPrivacyConsentOptions, aP as RejectOrganizationInvitationData, aQ as RemoveOrganizationMemberData, aR as RemoveOrganizationMemberOptions, aS as RemoveOrganizationTeamData, aT as RemoveOrganizationTeamMemberData, aU as RemoveOrganizationTeamMemberOptions, aV as RemoveOrganizationTeamOptions, aW as RequestPasswordResetOptions, aX as ResetPasswordOptions, aY as RevokeSessionOptions, aZ as SendOtpData, a_ as SendTwoFactorOtpData, a$ as SendTwoFactorOtpOptions, b0 as SendVerificationOtpOptions, s as SessionState, t as SessionStore, u as SetActiveOrganizationOptions, b1 as SetActiveTeamOptions, b2 as SignOutData, b3 as SocialAccount, v as SocialAuthData, S as SocialIdTokenOptions, b4 as SocialSignInOptions, b5 as TokenClient, b6 as TwoFactorBackupCodesData, b7 as TwoFactorEnableData, b8 as TwoFactorRedirectData, b9 as TwoFactorStatusData, ba as TwoFactorVerifyData, bb as UnlinkSocialOptions, bc as UpdateOrganizationMemberRoleOptions, bd as UpdateOrganizationOptions, be as UpdateOrganizationTeamOptions, bf as UpdatePasskeyData, bg as UpdatePasskeyOptions, bh as UpdateProfileOptions, bi as UpdateUnsafeMetadataOptions, bj as UserMetadata, bk as UsernameSignInOptions, bl as VerifyBackupCodeOptions, bm as VerifyEmailOtpData, bn as VerifyEmailOtpOptions, bo as VerifyTotpOptions, bp as VerifyTwoFactorOtpOptions, bq as WaitlistJoinData, br as WaitlistJoinOptions, bs as acceptConsent, bt as captureInvitationClaim, bu as clearInvitationClaim, bv as createAuthOwlClient, bw as createTokenClient, bx as getConsentStatus, w as getPublicConfig, by as readInvitationClaim } from './client-DhUE4JL1.js';
 export { S as SESSION_TOKEN_HEADER, a as SESSION_TRANSPORT_BEARER, b as SESSION_TRANSPORT_HEADER } from './session-transport-contract-HDPYRum8.js';
-export { b as AUTH_CHALLENGE_HEADER, d as AUTH_LOCALE_HEADER, P as ProjectCapabilities, a as createIdempotencyKey, r as resolveProjectCapabilities } from './idempotency-BidZZuun.js';
+export { b as AUTH_CHALLENGE_HEADER, d as AUTH_LOCALE_HEADER, P as ProjectCapabilities, a as createIdempotencyKey, r as resolveProjectCapabilities } from './idempotency-DmDFUS3e.js';
 export { a as LOCALES, L as Locale, d as directionFor, i as isLocale } from './index-DgVPDEYx.js';
 
 /**

package/dist/index.js

@@ -1,3 +1,3 @@
-import {c as c$1,d as d$1,k,m,i,j}from'./chunk-Y2VJN76I.js';export{g as AUTH_CHALLENGE_HEADER,h as AUTH_LOCALE_HEADER,b as AuthOwlHttpError,f as activeLocale,n as getPublicConfig,a as resolveProjectCapabilities,e as setActiveLocale}from'./chunk-Y2VJN76I.js';export{a as LOCALES,b as directionFor,c as isLocale}from'./chunk-M4QJVSXT.js';export{a as createIdempotencyKey}from'./chunk-5NL5GJW6.js';import {f,g,e,q as q$1,s,r}from'./chunk-V3MSLXXB.js';export{j as SESSION_TOKEN_HEADER,l as SESSION_TRANSPORT_BEARER,k as SESSION_TRANSPORT_HEADER,o as TransportError,F as createMembershipHas,a as decodePublishableKey,E as membershipHas,B as membershipHasPermission,D as membershipHasRole,C as membershipHasTeam,m as resolveAuthTarget,n as resolveConfig,h as sessionChallengeIsEphemeral,b as sessionCookieName}from'./chunk-V3MSLXXB.js';import'./chunk-T5SH3ZZP.js';var M="authowl_invitation",V="authowl.invitation-claim",ie=/^[A-Za-z0-9_-]{1,128}$/,re=10080*60*1e3;function qe(e=Date.now()){if(typeof window>"u")return C(e);let t;try{t=new URL(window.location.href);}catch{return C(e)}let n=t.searchParams.get(M);if(n===null)return C(e);t.searchParams.delete(M);try{window.history.replaceState(window.history.state,"",t.toString());}catch{}if(!ie.test(n))return C(e);let o={id:n,capturedAt:e};return f(g(),V,JSON.stringify(o)),o}function C(e$1=Date.now()){let t=e(g(),V);if(t===null)return null;let n;try{n=JSON.parse(t);}catch{return P(),null}if(typeof n!="object"||n===null)return P(),null;let{id:o,capturedAt:a}=n;return typeof o!="string"||!ie.test(o)||typeof a!="number"||e$1-a>re?(P(),null):{id:o,capturedAt:a}}function P(){f(g(),V,null);}var ae="authowl.last-used-method",He=/^(password|username|magic-link|email-otp|phone-otp|passkey|sso|social:[a-z0-9][a-z0-9_-]{0,63})$/,K=e=>`${ae}.${e}`;function D(e){return He.test(e)}function Ge(e$1){let t=e(g(),K(e$1));return t===null||!D(t)?null:t}function Je(e,t){D(t)&&(f(g(),x(e),null),f(g(),K(e),t));}var x=e=>`${ae}.pending.${e}`;function We(e,t){D(t)&&f(g(),x(e),t);}function $e(e$1,t){let n=e(g(),x(e$1));f(g(),x(e$1),null),t&&n!==null&&D(n)&&f(g(),K(e$1),n);}function d(e){let t=new Uint8Array(e),n="";for(let a of t)n+=String.fromCharCode(a);return btoa(n).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function O(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),n=(4-t.length%4)%4,o=t.padEnd(t.length+n,"="),a=atob(o),i=new ArrayBuffer(a.length),l=new Uint8Array(i);for(let s=0;s<a.length;s++)l[s]=a.charCodeAt(s);return i}function A(){return je.stubThis(globalThis?.PublicKeyCredential!==void 0&&typeof globalThis.PublicKeyCredential=="function")}var je={stubThis:e=>e};function v(e){let{id:t}=e;return {...e,id:O(t),transports:e.transports}}function U(e){return e==="localhost"||/^((xn--[a-z0-9-]+|[a-z0-9]+(-[a-z0-9]+)*)\.)+([a-z]{2,}|xn--[a-z0-9-]+)$/i.test(e)}var c=class extends Error{constructor({message:t,code:n,cause:o,name:a}){super(t,{cause:o}),Object.defineProperty(this,"code",{enumerable:true,configurable:true,writable:true,value:void 0}),this.name=a??o.name,this.code=n;}};function se({error:e,options:t}){let{publicKey:n}=t;if(!n)throw Error("options was missing required publicKey property");if(e.name==="AbortError"){if(t.signal instanceof AbortSignal)return new c({message:"Registration ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:e})}else if(e.name==="ConstraintError"){if(n.authenticatorSelection?.requireResidentKey===true)return new c({message:"Discoverable credentials were required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT",cause:e});if(t.mediation==="conditional"&&n.authenticatorSelection?.userVerification==="required")return new c({message:"User verification was required during automatic registration but it could not be performed",code:"ERROR_AUTO_REGISTER_USER_VERIFICATION_FAILURE",cause:e});if(n.authenticatorSelection?.userVerification==="required")return new c({message:"User verification was required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT",cause:e})}else {if(e.name==="InvalidStateError")return new c({message:"The authenticator was previously registered",code:"ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED",cause:e});if(e.name==="NotAllowedError")return new c({message:e.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:e});if(e.name==="NotSupportedError")return n.pubKeyCredParams.filter(a=>a.type==="public-key").length===0?new c({message:'No entry in pubKeyCredParams was of type "public-key"',code:"ERROR_MALFORMED_PUBKEYCREDPARAMS",cause:e}):new c({message:"No available authenticator supported any of the specified pubKeyCredParams algorithms",code:"ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEYCREDPARAMS_ALG",cause:e});if(e.name==="SecurityError"){let o=globalThis.location.hostname;if(U(o)){if(n.rp.id!==o)return new c({message:`The RP ID "${n.rp.id}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:e})}else return new c({message:`${globalThis.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:e})}else if(e.name==="TypeError"){if(n.user.id.byteLength<1||n.user.id.byteLength>64)return new c({message:"User ID was not between 1 and 64 characters",code:"ERROR_INVALID_USER_ID_LENGTH",cause:e})}else if(e.name==="UnknownError")return new c({message:"The authenticator was unable to process the specified options, or could not create a new credential",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:e})}return e}var z=class{constructor(){Object.defineProperty(this,"controller",{enumerable:true,configurable:true,writable:true,value:void 0});}createNewAbortSignal(){if(this.controller){let n=new Error("Cancelling existing WebAuthn API call for new one");n.name="AbortError",this.controller.abort(n);}let t=new AbortController;return this.controller=t,t.signal}cancelCeremony(){if(this.controller){let t=new Error("Manually cancelling existing WebAuthn API call");t.name="AbortError",this.controller.abort(t),this.controller=void 0;}}},_=new z;var Ye=["cross-platform","platform"];function N(e){if(e&&!(Ye.indexOf(e)<0))return e}async function ce(e){!e.optionsJSON&&e.challenge&&(console.warn("startRegistration() was not called correctly. It will try to continue with the provided options, but this call should be refactored to use the expected call structure instead. See https://simplewebauthn.dev/docs/packages/browser#typeerror-cannot-read-properties-of-undefined-reading-challenge for more information."),e={optionsJSON:e});let{optionsJSON:t,useAutoRegister:n=false}=e;if(!A())throw new Error("WebAuthn is not supported in this browser");let o={...t,challenge:O(t.challenge),user:{...t.user,id:O(t.user.id)},excludeCredentials:t.excludeCredentials?.map(v)},a={};n&&(a.mediation="conditional"),a.publicKey=o,a.signal=_.createNewAbortSignal();let i;try{i=await navigator.credentials.create(a);}catch(p){throw se({error:p,options:a})}if(!i)throw new Error("Registration was not completed");let{id:l,rawId:s,response:r,type:b}=i,m;typeof r.getTransports=="function"&&(m=r.getTransports());let y;if(typeof r.getPublicKeyAlgorithm=="function")try{y=r.getPublicKeyAlgorithm();}catch(p){B("getPublicKeyAlgorithm()",p);}let h;if(typeof r.getPublicKey=="function")try{let p=r.getPublicKey();p!==null&&(h=d(p));}catch(p){B("getPublicKey()",p);}let f;if(typeof r.getAuthenticatorData=="function")try{f=d(r.getAuthenticatorData());}catch(p){B("getAuthenticatorData()",p);}return {id:l,rawId:d(s),response:{attestationObject:d(r.attestationObject),clientDataJSON:d(r.clientDataJSON),transports:m,publicKeyAlgorithm:y,publicKey:h,authenticatorData:f},type:b,clientExtensionResults:i.getClientExtensionResults(),authenticatorAttachment:N(i.authenticatorAttachment)}}function B(e,t){console.warn(`The browser extension that intercepted this WebAuthn API call incorrectly implemented ${e}. You should report this error to them.
+import {c as c$1,d as d$1,k,m,i,j}from'./chunk-GFSJFTD7.js';export{g as AUTH_CHALLENGE_HEADER,h as AUTH_LOCALE_HEADER,b as AuthOwlHttpError,f as activeLocale,n as getPublicConfig,a as resolveProjectCapabilities,e as setActiveLocale}from'./chunk-GFSJFTD7.js';export{a as LOCALES,b as directionFor,c as isLocale}from'./chunk-M4QJVSXT.js';export{a as createIdempotencyKey}from'./chunk-5NL5GJW6.js';import {f,g,e,q as q$1,s,r}from'./chunk-V3MSLXXB.js';export{j as SESSION_TOKEN_HEADER,l as SESSION_TRANSPORT_BEARER,k as SESSION_TRANSPORT_HEADER,o as TransportError,F as createMembershipHas,a as decodePublishableKey,E as membershipHas,B as membershipHasPermission,D as membershipHasRole,C as membershipHasTeam,m as resolveAuthTarget,n as resolveConfig,h as sessionChallengeIsEphemeral,b as sessionCookieName}from'./chunk-V3MSLXXB.js';import'./chunk-T5SH3ZZP.js';var M="authowl_invitation",V="authowl.invitation-claim",ie=/^[A-Za-z0-9_-]{1,128}$/,re=10080*60*1e3;function qe(e=Date.now()){if(typeof window>"u")return C(e);let t;try{t=new URL(window.location.href);}catch{return C(e)}let n=t.searchParams.get(M);if(n===null)return C(e);t.searchParams.delete(M);try{window.history.replaceState(window.history.state,"",t.toString());}catch{}if(!ie.test(n))return C(e);let o={id:n,capturedAt:e};return f(g(),V,JSON.stringify(o)),o}function C(e$1=Date.now()){let t=e(g(),V);if(t===null)return null;let n;try{n=JSON.parse(t);}catch{return P(),null}if(typeof n!="object"||n===null)return P(),null;let{id:o,capturedAt:a}=n;return typeof o!="string"||!ie.test(o)||typeof a!="number"||e$1-a>re?(P(),null):{id:o,capturedAt:a}}function P(){f(g(),V,null);}var ae="authowl.last-used-method",He=/^(password|username|magic-link|email-otp|phone-otp|passkey|sso|social:[a-z0-9][a-z0-9_-]{0,63})$/,K=e=>`${ae}.${e}`;function D(e){return He.test(e)}function Ge(e$1){let t=e(g(),K(e$1));return t===null||!D(t)?null:t}function Je(e,t){D(t)&&(f(g(),x(e),null),f(g(),K(e),t));}var x=e=>`${ae}.pending.${e}`;function We(e,t){D(t)&&f(g(),x(e),t);}function $e(e$1,t){let n=e(g(),x(e$1));f(g(),x(e$1),null),t&&n!==null&&D(n)&&f(g(),K(e$1),n);}function d(e){let t=new Uint8Array(e),n="";for(let a of t)n+=String.fromCharCode(a);return btoa(n).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}function O(e){let t=e.replace(/-/g,"+").replace(/_/g,"/"),n=(4-t.length%4)%4,o=t.padEnd(t.length+n,"="),a=atob(o),i=new ArrayBuffer(a.length),l=new Uint8Array(i);for(let s=0;s<a.length;s++)l[s]=a.charCodeAt(s);return i}function A(){return je.stubThis(globalThis?.PublicKeyCredential!==void 0&&typeof globalThis.PublicKeyCredential=="function")}var je={stubThis:e=>e};function v(e){let{id:t}=e;return {...e,id:O(t),transports:e.transports}}function U(e){return e==="localhost"||/^((xn--[a-z0-9-]+|[a-z0-9]+(-[a-z0-9]+)*)\.)+([a-z]{2,}|xn--[a-z0-9-]+)$/i.test(e)}var c=class extends Error{constructor({message:t,code:n,cause:o,name:a}){super(t,{cause:o}),Object.defineProperty(this,"code",{enumerable:true,configurable:true,writable:true,value:void 0}),this.name=a??o.name,this.code=n;}};function se({error:e,options:t}){let{publicKey:n}=t;if(!n)throw Error("options was missing required publicKey property");if(e.name==="AbortError"){if(t.signal instanceof AbortSignal)return new c({message:"Registration ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:e})}else if(e.name==="ConstraintError"){if(n.authenticatorSelection?.requireResidentKey===true)return new c({message:"Discoverable credentials were required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_DISCOVERABLE_CREDENTIAL_SUPPORT",cause:e});if(t.mediation==="conditional"&&n.authenticatorSelection?.userVerification==="required")return new c({message:"User verification was required during automatic registration but it could not be performed",code:"ERROR_AUTO_REGISTER_USER_VERIFICATION_FAILURE",cause:e});if(n.authenticatorSelection?.userVerification==="required")return new c({message:"User verification was required but no available authenticator supported it",code:"ERROR_AUTHENTICATOR_MISSING_USER_VERIFICATION_SUPPORT",cause:e})}else {if(e.name==="InvalidStateError")return new c({message:"The authenticator was previously registered",code:"ERROR_AUTHENTICATOR_PREVIOUSLY_REGISTERED",cause:e});if(e.name==="NotAllowedError")return new c({message:e.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:e});if(e.name==="NotSupportedError")return n.pubKeyCredParams.filter(a=>a.type==="public-key").length===0?new c({message:'No entry in pubKeyCredParams was of type "public-key"',code:"ERROR_MALFORMED_PUBKEYCREDPARAMS",cause:e}):new c({message:"No available authenticator supported any of the specified pubKeyCredParams algorithms",code:"ERROR_AUTHENTICATOR_NO_SUPPORTED_PUBKEYCREDPARAMS_ALG",cause:e});if(e.name==="SecurityError"){let o=globalThis.location.hostname;if(U(o)){if(n.rp.id!==o)return new c({message:`The RP ID "${n.rp.id}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:e})}else return new c({message:`${globalThis.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:e})}else if(e.name==="TypeError"){if(n.user.id.byteLength<1||n.user.id.byteLength>64)return new c({message:"User ID was not between 1 and 64 characters",code:"ERROR_INVALID_USER_ID_LENGTH",cause:e})}else if(e.name==="UnknownError")return new c({message:"The authenticator was unable to process the specified options, or could not create a new credential",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:e})}return e}var z=class{constructor(){Object.defineProperty(this,"controller",{enumerable:true,configurable:true,writable:true,value:void 0});}createNewAbortSignal(){if(this.controller){let n=new Error("Cancelling existing WebAuthn API call for new one");n.name="AbortError",this.controller.abort(n);}let t=new AbortController;return this.controller=t,t.signal}cancelCeremony(){if(this.controller){let t=new Error("Manually cancelling existing WebAuthn API call");t.name="AbortError",this.controller.abort(t),this.controller=void 0;}}},_=new z;var Ye=["cross-platform","platform"];function N(e){if(e&&!(Ye.indexOf(e)<0))return e}async function ce(e){!e.optionsJSON&&e.challenge&&(console.warn("startRegistration() was not called correctly. It will try to continue with the provided options, but this call should be refactored to use the expected call structure instead. See https://simplewebauthn.dev/docs/packages/browser#typeerror-cannot-read-properties-of-undefined-reading-challenge for more information."),e={optionsJSON:e});let{optionsJSON:t,useAutoRegister:n=false}=e;if(!A())throw new Error("WebAuthn is not supported in this browser");let o={...t,challenge:O(t.challenge),user:{...t.user,id:O(t.user.id)},excludeCredentials:t.excludeCredentials?.map(v)},a={};n&&(a.mediation="conditional"),a.publicKey=o,a.signal=_.createNewAbortSignal();let i;try{i=await navigator.credentials.create(a);}catch(p){throw se({error:p,options:a})}if(!i)throw new Error("Registration was not completed");let{id:l,rawId:s,response:r,type:b}=i,m;typeof r.getTransports=="function"&&(m=r.getTransports());let y;if(typeof r.getPublicKeyAlgorithm=="function")try{y=r.getPublicKeyAlgorithm();}catch(p){B("getPublicKeyAlgorithm()",p);}let h;if(typeof r.getPublicKey=="function")try{let p=r.getPublicKey();p!==null&&(h=d(p));}catch(p){B("getPublicKey()",p);}let f;if(typeof r.getAuthenticatorData=="function")try{f=d(r.getAuthenticatorData());}catch(p){B("getAuthenticatorData()",p);}return {id:l,rawId:d(s),response:{attestationObject:d(r.attestationObject),clientDataJSON:d(r.clientDataJSON),transports:m,publicKeyAlgorithm:y,publicKey:h,authenticatorData:f},type:b,clientExtensionResults:i.getClientExtensionResults(),authenticatorAttachment:N(i.authenticatorAttachment)}}function B(e,t){console.warn(`The browser extension that intercepted this WebAuthn API call incorrectly implemented ${e}. You should report this error to them.
 `,t);}function le(){if(!A())return q.stubThis(new Promise(t=>t(false)));let e=globalThis.PublicKeyCredential;return e?.isConditionalMediationAvailable===void 0?q.stubThis(new Promise(t=>t(false))):q.stubThis(e.isConditionalMediationAvailable())}var q={stubThis:e=>e};function pe({error:e,options:t}){let{publicKey:n}=t;if(!n)throw Error("options was missing required publicKey property");if(e.name==="AbortError"){if(t.signal instanceof AbortSignal)return new c({message:"Authentication ceremony was sent an abort signal",code:"ERROR_CEREMONY_ABORTED",cause:e})}else {if(e.name==="NotAllowedError")return new c({message:e.message,code:"ERROR_PASSTHROUGH_SEE_CAUSE_PROPERTY",cause:e});if(e.name==="SecurityError"){let o=globalThis.location.hostname;if(U(o)){if(n.rpId!==o)return new c({message:`The RP ID "${n.rpId}" is invalid for this domain`,code:"ERROR_INVALID_RP_ID",cause:e})}else return new c({message:`${globalThis.location.hostname} is an invalid domain`,code:"ERROR_INVALID_DOMAIN",cause:e})}else if(e.name==="UnknownError")return new c({message:"The authenticator was unable to process the specified options, or could not create a new assertion signature",code:"ERROR_AUTHENTICATOR_GENERAL_ERROR",cause:e})}return e}async function ue(e){!e.optionsJSON&&e.challenge&&(console.warn("startAuthentication() was not called correctly. It will try to continue with the provided options, but this call should be refactored to use the expected call structure instead. See https://simplewebauthn.dev/docs/packages/browser#typeerror-cannot-read-properties-of-undefined-reading-challenge for more information."),e={optionsJSON:e});let{optionsJSON:t,useBrowserAutofill:n=false,verifyBrowserAutofillInput:o=true}=e;if(!A())throw new Error("WebAuthn is not supported in this browser");let a;t.allowCredentials?.length!==0&&(a=t.allowCredentials?.map(v));let i={...t,challenge:O(t.challenge),allowCredentials:a},l={};if(n){if(!await le())throw Error("Browser does not support WebAuthn autofill");if(document.querySelectorAll("input[autocomplete$='webauthn']").length<1&&o)throw Error('No <input> with "webauthn" as the only or last value in its `autocomplete` attribute was detected');l.mediation="conditional",i.allowCredentials=[];}l.publicKey=i,l.signal=_.createNewAbortSignal();let s;try{s=await navigator.credentials.get(l);}catch(f){throw pe({error:f,options:l})}if(!s)throw new Error("Authentication was not completed");let{id:r,rawId:b,response:m,type:y}=s,h;return m.userHandle&&(h=d(m.userHandle)),{id:r,rawId:d(b),response:{authenticatorData:d(m.authenticatorData),clientDataJSON:d(m.clientDataJSON),signature:d(m.signature),userHandle:h},type:y,clientExtensionResults:s.getClientExtensionResults(),authenticatorAttachment:N(s.authenticatorAttachment)}}var de={authenticate:e=>ue(e),register:e=>ce(e),errorCode:e=>e instanceof c?e.code:void 0};function fe(e){return `${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}/consent`}async function H(e){let t=await c$1(e,fe(e),{init:{method:"GET",credentials:"include"},maxResponseBytes:65536,decode:Qe});return t.response.status===401?{required:false}:d$1(t,"consent status")}async function G(e,t){if(!Number.isSafeInteger(t)||t<1)throw new TypeError("Consent version must be a positive integer.");return d$1(await c$1(e,fe(e),{init:{method:"POST",headers:{"content-type":"application/json"},credentials:"include",body:JSON.stringify({version:t})},maxResponseBytes:64*1024,decode:Xe}),"consent accept")}function Qe(e){let t=q$1(e),n=s(t.required),o=Ze(t.needsConsent),a=ge(t.version),i=me(t.termsUrl),l=me(t.privacyUrl);return {required:n,...o===void 0?{}:{needsConsent:o},...a===void 0?{}:{version:a},...i===void 0?{}:{termsUrl:i},...l===void 0?{}:{privacyUrl:l}}}function Xe(e){let t=q$1(e),n=ge(t.version);return {ok:s(t.ok),...n===void 0?{}:{version:n}}}function Ze(e){if(e===void 0||typeof e=="boolean")return e;throw new TypeError("Invalid consent response.")}function ge(e){if(e===void 0||Number.isSafeInteger(e)&&e>=1)return e;throw new TypeError("Invalid consent response.")}function me(e){if(e===void 0||typeof e=="string"&&e.length<=4096)return e;throw new TypeError("Invalid consent response.")}var et=30;function tt(e){return typeof e?.exp=="number"?e.exp:null}function nt(e){let t=e.split(".")[1];if(!t)return null;try{let n=t.replace(/-/g,"+").replace(/_/g,"/"),o=JSON.parse(atob(n));return typeof o=="object"&&o!==null?o:null}catch{return null}}function J(e){let t=new Map;async function n(i={}){let l=i.template===void 0?null:i.template.trim().toLowerCase();if(l==="")throw new TypeError("Template missing");let s=l??"",r=t.get(s);r||(r={activeKey:null,cachedByKey:new Map,inflight:null,sequence:0},t.set(s,r));let b=i.forceRefresh===true;if(!b){let p=r.activeKey?r.cachedByKey.get(r.activeKey):null;if(p&&p.exp-Date.now()/1e3>et)return p.token;if(r.inflight)return r.inflight}let m=++r.sequence,y=()=>t.get(s)===r&&r.sequence===m,h=(async()=>{let p=l?`${e.projectBaseURL}/token/${encodeURIComponent(l)}`:`${e.projectBaseURL}/token`,j=await c$1(e,p,{init:{method:"GET",credentials:"include"},maxResponseBytes:64*1024,decode:k=>ot(k,l!==null)});if(j.response.status===401)return y()&&o(),null;let Y=d$1(j,"token"),he=Y.policyVersion,F=Y.token,w=nt(F),Q=tt(w);if(y())if(Q!==null){let k=typeof w?.sub=="string"?w.sub:null,ye=typeof w?.org_id=="string"?w.org_id:null;if(!l||k){let X=JSON.stringify([e.projectBaseURL,k,ye,l,he]);r.cachedByKey.clear(),r.cachedByKey.set(X,{token:F,exp:Q}),r.activeKey=X;}else a(r);}else a(r);return F})();if(b)return h;let f=h.finally(()=>{r.inflight===f&&(r.inflight=null);});return r.inflight=f,f}function o(){t.clear();}function a(i){i.cachedByKey.clear(),i.activeKey=null;}return {getToken:n,clear:o}}function ot(e,t){let n=q$1(e),o=r(n.token);if(o.length===0||o.length>32*1024)throw new TypeError("Invalid token response.");if(!t)return {token:o,policyVersion:0};let a=q$1(n.template);if(!Number.isSafeInteger(a.policyVersion)||a.policyVersion<1)throw new TypeError("Invalid token response.");return {token:o,policyVersion:a.policyVersion}}function it(e){let t=J(e),n=k(e,t.clear,(s,r)=>m(s,r,de)),o=i(e,`${new URL(e.apiUrl).origin}/api/projects/${e.decoded.projectId}`),a=j(o),i$1=s=>(...r)=>(t.clear(),s(...r)),l={getConsentStatus:()=>H(e),acceptConsent:s=>G(e,s),getToken:t.getToken,privacy:a,waitlist:{join:(s,r)=>o.request("/waitlist",{method:"POST",body:s,fetchOptions:r,credentials:"omit"})},account:{...n.account,updateUnsafeMetadata:i$1(n.account.updateUnsafeMetadata),updateProfile:i$1(n.account.updateProfile),changeEmail:i$1(n.account.changeEmail),changePassword:i$1(n.account.changePassword),revokeSession:i$1(n.account.revokeSession),delete:i$1(n.account.delete)},signIn:{email:i$1(n.signIn.email),username:i$1(n.signIn.username),social:i$1(n.signIn.social),sso:n.signIn.sso,magicLink:n.signIn.magicLink,emailOtp:i$1(n.signIn.emailOtp),passkey:i$1(n.signIn.passkey)},signUp:{email:i$1(n.signUp.email)},emailOtp:{...n.emailOtp,verifyEmail:i$1(n.emailOtp.verifyEmail)},twoFactor:{enable:n.twoFactor.enable,disable:i$1(n.twoFactor.disable),verifyTotp:i$1(n.twoFactor.verifyTotp),verifyBackupCode:i$1(n.twoFactor.verifyBackupCode),sendOtp:n.twoFactor.sendOtp,verifyOtp:i$1(n.twoFactor.verifyOtp),generateBackupCodes:n.twoFactor.generateBackupCodes},phoneOtp:{prepare:n.phoneOtp.prepare,start:n.phoneOtp.start,verify:i$1(n.phoneOtp.verify)},signOut:i$1(n.signOut)};return {...n,...l}}async function rt(e){if(typeof window>"u")throw new Error("Akedly Shield challenges must be solved in a browser.");let t=await at(),n=e.challengeRequired?await t.solvePow(e.challenge,e.difficulty):null,o=e.turnstile.required?await t.getTurnstileToken(st(e.turnstile.siteKey)):void 0;return {connectionId:e.connectionId,...n?{challengeToken:e.challengeToken,nonce:n.nonce}:{},...o?{turnstileToken:o}:{}}}async function at(){return import('@akedly/shield')}function st(e){if(!e)throw new Error("Akedly Shield did not provide a Turnstile site key.");return e}var I=class extends Error{constructor(n,o){super(n);this.cause=o;this.name="AuthOwlError";}cause},W=class extends I{constructor(n,o){super(`Rate limited. Retry after ${n}s.`,o);this.retryAfterSeconds=n;this.name="RateLimitedError";}retryAfterSeconds},$=class extends I{constructor(t="invalid publishable key",n){super(t,n),this.name="InvalidKeyError";}};
 export{I as AuthOwlError,re as INVITATION_CLAIM_MAX_AGE_MS,M as INVITATION_QUERY_PARAM,$ as InvalidKeyError,W as RateLimitedError,G as acceptConsent,qe as captureInvitationClaim,P as clearInvitationClaim,it as createAuthOwlClient,J as createTokenClient,H as getConsentStatus,C as readInvitationClaim,Ge as readLastUsedSignInMethod,Je as recordLastUsedSignInMethod,We as rememberPendingSignInMethod,$e as settlePendingSignInMethod,rt as solvePhoneOtpChallenge};