@clerk/electron 0.0.1-snapshot.v20260617204522

package/dist/cjs/passkeys/index.js

@@ -0,0 +1,267 @@
+'use strict';
+
+var error = require('@clerk/shared/error');
+var passkeys$1 = require('@clerk/shared/internal/clerk-js/passkeys');
+var webauthn = require('@clerk/shared/webauthn');
+
+// src/passkeys/index.ts
+var RP_ID_DOCS_URL = "https://clerk.com/docs/deployments/overview#authentication-across-subdomains";
+function mapPasskeyIpcError(error$1, action) {
+  const { code, message } = error$1;
+  switch (code) {
+    case "cancelled":
+      return new error.ClerkWebAuthnError(message, {
+        code: action === "create" ? "passkey_registration_cancelled" : "passkey_retrieval_cancelled"
+      });
+    case "invalid_rp":
+      return new error.ClerkWebAuthnError(message, {
+        code: "passkey_invalid_rpID_or_domain",
+        docsUrl: RP_ID_DOCS_URL
+      });
+    case "timeout":
+      return new error.ClerkWebAuthnError(message, { code: "passkey_operation_aborted" });
+    case "not_supported":
+      return new error.ClerkWebAuthnError(message, { code: "passkey_not_supported" });
+    case "unknown":
+    default:
+      return new error.ClerkWebAuthnError(message, {
+        code: action === "create" ? "passkey_registration_failed" : "passkey_retrieval_failed"
+      });
+  }
+}
+function toArrayBuffer(bufferSource) {
+  if (bufferSource instanceof ArrayBuffer) {
+    return bufferSource;
+  }
+  const view = new Uint8Array(bufferSource.buffer, bufferSource.byteOffset, bufferSource.byteLength);
+  const copy = new ArrayBuffer(view.byteLength);
+  new Uint8Array(copy).set(view);
+  return copy;
+}
+var encode = (bufferSource) => passkeys$1.bufferToBase64Url(toArrayBuffer(bufferSource));
+function serializeCreationOptions(publicKey) {
+  var _a, _b;
+  return {
+    rp: { id: (_a = publicKey.rp.id) != null ? _a : "", name: publicKey.rp.name },
+    user: {
+      id: encode(publicKey.user.id),
+      displayName: publicKey.user.displayName,
+      name: publicKey.user.name
+    },
+    challenge: encode(publicKey.challenge),
+    pubKeyCredParams: publicKey.pubKeyCredParams.map((p) => ({ type: "public-key", alg: p.alg })),
+    timeout: publicKey.timeout,
+    authenticatorSelection: publicKey.authenticatorSelection,
+    attestation: publicKey.attestation,
+    excludeCredentials: ((_b = publicKey.excludeCredentials) != null ? _b : []).map((c) => ({
+      type: "public-key",
+      id: encode(c.id),
+      transports: c.transports
+    }))
+  };
+}
+function serializeRequestOptions(publicKeyOptions) {
+  var _a, _b;
+  return {
+    challenge: encode(publicKeyOptions.challenge),
+    rpId: (_a = publicKeyOptions.rpId) != null ? _a : "",
+    timeout: publicKeyOptions.timeout,
+    userVerification: publicKeyOptions.userVerification,
+    allowCredentials: ((_b = publicKeyOptions.allowCredentials) != null ? _b : []).map((c) => ({
+      type: "public-key",
+      id: encode(c.id)
+    }))
+  };
+}
+function deserializeCreationResponse(credential) {
+  var _a;
+  return {
+    id: credential.id,
+    rawId: passkeys$1.base64UrlToBuffer(credential.rawId),
+    type: credential.type,
+    authenticatorAttachment: (_a = credential.authenticatorAttachment) != null ? _a : null,
+    response: {
+      clientDataJSON: passkeys$1.base64UrlToBuffer(credential.response.clientDataJSON),
+      attestationObject: passkeys$1.base64UrlToBuffer(credential.response.attestationObject),
+      getTransports: () => {
+        var _a2;
+        return (_a2 = credential.response.transports) != null ? _a2 : [];
+      }
+    },
+    toJSON: () => credential
+  };
+}
+function deserializeRequestResponse(credential) {
+  var _a;
+  return {
+    id: credential.id,
+    rawId: passkeys$1.base64UrlToBuffer(credential.rawId),
+    type: credential.type,
+    authenticatorAttachment: (_a = credential.authenticatorAttachment) != null ? _a : null,
+    response: {
+      clientDataJSON: passkeys$1.base64UrlToBuffer(credential.response.clientDataJSON),
+      authenticatorData: passkeys$1.base64UrlToBuffer(credential.response.authenticatorData),
+      signature: passkeys$1.base64UrlToBuffer(credential.response.signature),
+      userHandle: credential.response.userHandle ? passkeys$1.base64UrlToBuffer(credential.response.userHandle) : null
+    },
+    toJSON: () => credential
+  };
+}
+
+// src/passkeys/renderer/native-bridge.ts
+function getPasskeyBridge() {
+  return typeof window !== "undefined" ? window.__clerk_internal_electron_passkeys : void 0;
+}
+var bridgeMissingError = () => new error.ClerkWebAuthnError(
+  "Clerk: The native passkey bridge is not available. Pass `passkeys: true` to exposeClerkBridge() in your preload script and createClerkBridge() in the main process.",
+  { code: "passkey_not_supported" }
+);
+async function nativeCreateCredential(publicKey) {
+  const bridge = getPasskeyBridge();
+  if (!bridge) {
+    return { publicKeyCredential: null, error: bridgeMissingError() };
+  }
+  const result = await bridge.create(serializeCreationOptions(publicKey));
+  if (!result.ok) {
+    return { publicKeyCredential: null, error: mapPasskeyIpcError(result.error, "create") };
+  }
+  return { publicKeyCredential: deserializeCreationResponse(result.credential), error: null };
+}
+async function nativeGetCredential(publicKeyOptions) {
+  const bridge = getPasskeyBridge();
+  if (!bridge) {
+    return { publicKeyCredential: null, error: bridgeMissingError() };
+  }
+  const result = await bridge.get(serializeRequestOptions(publicKeyOptions));
+  if (!result.ok) {
+    return { publicKeyCredential: null, error: mapPasskeyIpcError(result.error, "get") };
+  }
+  return { publicKeyCredential: deserializeRequestResponse(result.credential), error: null };
+}
+
+// src/passkeys/renderer/strategy.ts
+function originSatisfiesRpId(env, rpId) {
+  if (env.protocol !== "https:" || !rpId) {
+    return false;
+  }
+  return env.hostname === rpId || env.hostname.endsWith(`.${rpId}`);
+}
+function decidePath(rpId, mode, env) {
+  if (mode === "renderer") {
+    return env.hasWebAuthn ? "renderer" : "unsupported";
+  }
+  if (mode === "native") {
+    return env.nativeAvailable ? "native" : "unsupported";
+  }
+  if (env.hasWebAuthn && originSatisfiesRpId(env, rpId)) {
+    if (env.platform === "darwin" && env.electronMajor > 0 && env.electronMajor < 42 && env.nativeAvailable) {
+      return "native";
+    }
+    return "renderer";
+  }
+  return env.nativeAvailable ? "native" : "unsupported";
+}
+
+// src/passkeys/index.ts
+var NATIVE_PLATFORMS = ["darwin", "win32"];
+function getEnv() {
+  var _a, _b;
+  const bridge = getPasskeyBridge();
+  const hasLocation = typeof location !== "undefined";
+  return {
+    protocol: hasLocation ? location.protocol : "",
+    hostname: hasLocation ? location.hostname : "",
+    hasWebAuthn: typeof window !== "undefined" && typeof window.PublicKeyCredential === "function",
+    nativeAvailable: !!bridge && NATIVE_PLATFORMS.includes(bridge.platform),
+    platform: (_a = bridge == null ? void 0 : bridge.platform) != null ? _a : "",
+    electronMajor: (_b = bridge == null ? void 0 : bridge.electronMajor) != null ? _b : 0
+  };
+}
+var unsupportedReturn = () => ({
+  publicKeyCredential: null,
+  error: new error.ClerkWebAuthnError(
+    "Clerk: Passkeys are not supported in this window. Serve the page from an https origin matching the RP ID, or enable the native passkey module with `passkeys: true` in createClerkBridge() and exposeClerkBridge().",
+    { code: "passkey_not_supported" }
+  )
+});
+var isRpIdMismatchError = (error) => !!error && typeof error === "object" && error.code === "passkey_invalid_rpID_or_domain";
+function createPasskeys(options) {
+  var _a;
+  const mode = (_a = options == null ? void 0 : options.mode) != null ? _a : "auto";
+  const create = async (publicKey) => {
+    var _a2;
+    const env = getEnv();
+    const path = decidePath((_a2 = publicKey.rp.id) != null ? _a2 : "", mode, env);
+    if (path === "unsupported") {
+      return unsupportedReturn();
+    }
+    if (path === "native") {
+      return nativeCreateCredential(publicKey);
+    }
+    const result = await passkeys$1.webAuthnCreateCredential(publicKey);
+    if (result.error && isRpIdMismatchError(result.error) && mode === "auto" && env.nativeAvailable) {
+      return nativeCreateCredential(publicKey);
+    }
+    return result;
+  };
+  const get = async ({ publicKeyOptions }) => {
+    var _a2;
+    const env = getEnv();
+    const path = decidePath((_a2 = publicKeyOptions.rpId) != null ? _a2 : "", mode, env);
+    if (path === "unsupported") {
+      return unsupportedReturn();
+    }
+    if (path === "native") {
+      return nativeGetCredential(publicKeyOptions);
+    }
+    const result = await passkeys$1.webAuthnGetCredential({ publicKeyOptions, conditionalUI: false });
+    if (result.error && isRpIdMismatchError(result.error) && mode === "auto" && env.nativeAvailable) {
+      return nativeGetCredential(publicKeyOptions);
+    }
+    return result;
+  };
+  const isSupported = () => {
+    const env = getEnv();
+    if (mode === "renderer") {
+      return env.hasWebAuthn;
+    }
+    if (mode === "native") {
+      return env.nativeAvailable;
+    }
+    return env.hasWebAuthn || env.nativeAvailable;
+  };
+  const isAutoFillSupported = () => {
+    return mode === "native" ? Promise.resolve(false) : webauthn.isWebAuthnAutofillSupported();
+  };
+  const isPlatformAuthenticatorSupported = async () => {
+    const env = getEnv();
+    if (env.nativeAvailable && mode !== "renderer") {
+      const bridge = getPasskeyBridge();
+      try {
+        const capabilities = await (bridge == null ? void 0 : bridge.capabilities());
+        if (capabilities == null ? void 0 : capabilities.available) {
+          return capabilities.platformAuthenticator;
+        }
+      } catch {
+      }
+    }
+    return webauthn.isWebAuthnPlatformAuthenticatorSupported();
+  };
+  return { create, get, isSupported, isAutoFillSupported, isPlatformAuthenticatorSupported };
+}
+var passkeys = createPasskeys();
+function createPasskeyProvider(clerk, options) {
+  const passkeys2 = createPasskeys(options);
+  clerk.__internal_createPublicCredentials = passkeys2.create;
+  clerk.__internal_getPublicCredentials = passkeys2.get;
+  clerk.__internal_isWebAuthnSupported = passkeys2.isSupported;
+  clerk.__internal_isWebAuthnAutofillSupported = passkeys2.isAutoFillSupported;
+  clerk.__internal_isWebAuthnPlatformAuthenticatorSupported = passkeys2.isPlatformAuthenticatorSupported;
+  return passkeys2;
+}
+
+exports.createPasskeyProvider = createPasskeyProvider;
+exports.createPasskeys = createPasskeys;
+exports.passkeys = passkeys;
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/cjs/passkeys/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/passkeys/shared/errors.ts","../../../src/passkeys/shared/serialization.ts","../../../src/passkeys/renderer/native-bridge.ts","../../../src/passkeys/renderer/strategy.ts","../../../src/passkeys/index.ts"],"names":["error","ClerkWebAuthnError","bufferToBase64Url","base64UrlToBuffer","_a","webAuthnCreateCredential","webAuthnGetCredential","isWebAuthnAutofillSupported","isWebAuthnPlatformAuthenticatorSupported","passkeys"],"mappings":";;;;;;;AAIA,IAAM,cAAA,GAAiB,8EAAA;AAGhB,SAAS,kBAAA,CACdA,SACA,MAAA,EACoB;AACpB,EAAA,MAAM,EAAE,IAAA,EAAM,OAAA,EAAQ,GAAIA,OAAA;AAE1B,EAAA,QAAQ,IAAA;AAAM,IACZ,KAAK,WAAA;AACH,MAAA,OAAO,IAAIC,yBAAmB,OAAA,EAAS;AAAA,QACrC,IAAA,EAAM,MAAA,KAAW,QAAA,GAAW,gCAAA,GAAmC;AAAA,OAChE,CAAA;AAAA,IACH,KAAK,YAAA;AACH,MAAA,OAAO,IAAIA,yBAAmB,OAAA,EAAS;AAAA,QACrC,IAAA,EAAM,gCAAA;AAAA,QACN,OAAA,EAAS;AAAA,OACV,CAAA;AAAA,IACH,KAAK,SAAA;AACH,MAAA,OAAO,IAAIA,wBAAA,CAAmB,OAAA,EAAS,EAAE,IAAA,EAAM,6BAA6B,CAAA;AAAA,IAC9E,KAAK,eAAA;AACH,MAAA,OAAO,IAAIA,wBAAA,CAAmB,OAAA,EAAS,EAAE,IAAA,EAAM,yBAAyB,CAAA;AAAA,IAC1E,KAAK,SAAA;AAAA,IACL;AACE,MAAA,OAAO,IAAIA,yBAAmB,OAAA,EAAS;AAAA,QACrC,IAAA,EAAM,MAAA,KAAW,QAAA,GAAW,6BAAA,GAAgC;AAAA,OAC7D,CAAA;AAAA;AAEP;ACjBA,SAAS,cAAc,YAAA,EAAyC;AAC9D,EAAA,IAAI,wBAAwB,WAAA,EAAa;AACvC,IAAA,OAAO,YAAA;AAAA,EACT;AAEA,EAAA,MAAM,IAAA,GAAO,IAAI,UAAA,CAAW,YAAA,CAAa,QAAQ,YAAA,CAAa,UAAA,EAAY,aAAa,UAAU,CAAA;AACjG,EAAA,MAAM,IAAA,GAAO,IAAI,WAAA,CAAY,IAAA,CAAK,UAAU,CAAA;AAC5C,EAAA,IAAI,UAAA,CAAW,IAAI,CAAA,CAAE,GAAA,CAAI,IAAI,CAAA;AAC7B,EAAA,OAAO,IAAA;AACT;AAEA,IAAM,SAAS,CAAC,YAAA,KAA+BC,4BAAA,CAAkB,aAAA,CAAc,YAAY,CAAC,CAAA;AAErF,SAAS,yBACd,SAAA,EAC8C;AA/BhD,EAAA,IAAA,EAAA,EAAA,EAAA;AAgCE,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,EAAE,EAAA,EAAA,CAAI,EAAA,GAAA,SAAA,CAAU,EAAA,CAAG,EAAA,KAAb,IAAA,GAAA,EAAA,GAAmB,EAAA,EAAI,IAAA,EAAM,SAAA,CAAU,EAAA,CAAG,IAAA,EAAK;AAAA,IACzD,IAAA,EAAM;AAAA,MACJ,EAAA,EAAI,MAAA,CAAO,SAAA,CAAU,IAAA,CAAK,EAAE,CAAA;AAAA,MAC5B,WAAA,EAAa,UAAU,IAAA,CAAK,WAAA;AAAA,MAC5B,IAAA,EAAM,UAAU,IAAA,CAAK;AAAA,KACvB;AAAA,IACA,SAAA,EAAW,MAAA,CAAO,SAAA,CAAU,SAAS,CAAA;AAAA,IACrC,gBAAA,EAAkB,SAAA,CAAU,gBAAA,CAAiB,GAAA,CAAI,CAAA,CAAA,MAAM,EAAE,IAAA,EAAM,YAAA,EAAc,GAAA,EAAK,CAAA,CAAE,GAAA,EAAI,CAAE,CAAA;AAAA,IAC1F,SAAS,SAAA,CAAU,OAAA;AAAA,IACnB,wBAAwB,SAAA,CAAU,sBAAA;AAAA,IAClC,aAAa,SAAA,CAAU,WAAA;AAAA,IACvB,sBAAqB,EAAA,GAAA,SAAA,CAAU,kBAAA,KAAV,YAAgC,EAAC,EAAG,IAAI,CAAA,CAAA,MAAM;AAAA,MACjE,IAAA,EAAM,YAAA;AAAA,MACN,EAAA,EAAI,MAAA,CAAO,CAAA,CAAE,EAAE,CAAA;AAAA,MACf,YAAY,CAAA,CAAE;AAAA,KAChB,CAAE;AAAA,GACJ;AACF;AAEO,SAAS,wBACd,gBAAA,EAC6C;AAtD/C,EAAA,IAAA,EAAA,EAAA,EAAA;AAuDE,EAAA,OAAO;AAAA,IACL,SAAA,EAAW,MAAA,CAAO,gBAAA,CAAiB,SAAS,CAAA;AAAA,IAC5C,IAAA,EAAA,CAAM,EAAA,GAAA,gBAAA,CAAiB,IAAA,KAAjB,IAAA,GAAA,EAAA,GAAyB,EAAA;AAAA,IAC/B,SAAS,gBAAA,CAAiB,OAAA;AAAA,IAC1B,kBAAkB,gBAAA,CAAiB,gBAAA;AAAA,IACnC,oBAAmB,EAAA,GAAA,gBAAA,CAAiB,gBAAA,KAAjB,YAAqC,EAAC,EAAG,IAAI,CAAA,CAAA,MAAM;AAAA,MACpE,IAAA,EAAM,YAAA;AAAA,MACN,EAAA,EAAI,MAAA,CAAO,CAAA,CAAE,EAAE;AAAA,KACjB,CAAE;AAAA,GACJ;AACF;AAEO,SAAS,4BACd,UAAA,EACsG;AArExG,EAAA,IAAA,EAAA;AAsEE,EAAA,OAAO;AAAA,IACL,IAAI,UAAA,CAAW,EAAA;AAAA,IACf,KAAA,EAAOC,4BAAA,CAAkB,UAAA,CAAW,KAAK,CAAA;AAAA,IACzC,MAAM,UAAA,CAAW,IAAA;AAAA,IACjB,uBAAA,EAAA,CAAyB,EAAA,GAAA,UAAA,CAAW,uBAAA,KAAX,IAAA,GAAA,EAAA,GAAsC,IAAA;AAAA,IAC/D,QAAA,EAAU;AAAA,MACR,cAAA,EAAgBA,4BAAA,CAAkB,UAAA,CAAW,QAAA,CAAS,cAAc,CAAA;AAAA,MACpE,iBAAA,EAAmBA,4BAAA,CAAkB,UAAA,CAAW,QAAA,CAAS,iBAAiB,CAAA;AAAA,MAC1E,eAAe,MAAG;AA9ExB,QAAA,IAAAC,GAAAA;AA8E2B,QAAA,OAAA,CAAAA,MAAA,UAAA,CAAW,QAAA,CAAS,UAAA,KAApB,IAAA,GAAAA,MAAkC,EAAC;AAAA,MAAA;AAAA,KAC1D;AAAA,IACA,QAAQ,MAAM;AAAA,GAChB;AACF;AAEO,SAAS,2BACd,UAAA,EACsG;AAtFxG,EAAA,IAAA,EAAA;AAuFE,EAAA,OAAO;AAAA,IACL,IAAI,UAAA,CAAW,EAAA;AAAA,IACf,KAAA,EAAOD,4BAAA,CAAkB,UAAA,CAAW,KAAK,CAAA;AAAA,IACzC,MAAM,UAAA,CAAW,IAAA;AAAA,IACjB,uBAAA,EAAA,CAAyB,EAAA,GAAA,UAAA,CAAW,uBAAA,KAAX,IAAA,GAAA,EAAA,GAAsC,IAAA;AAAA,IAC/D,QAAA,EAAU;AAAA,MACR,cAAA,EAAgBA,4BAAA,CAAkB,UAAA,CAAW,QAAA,CAAS,cAAc,CAAA;AAAA,MACpE,iBAAA,EAAmBA,4BAAA,CAAkB,UAAA,CAAW,QAAA,CAAS,iBAAiB,CAAA;AAAA,MAC1E,SAAA,EAAWA,4BAAA,CAAkB,UAAA,CAAW,QAAA,CAAS,SAAS,CAAA;AAAA,MAC1D,UAAA,EAAY,WAAW,QAAA,CAAS,UAAA,GAAaA,6BAAkB,UAAA,CAAW,QAAA,CAAS,UAAU,CAAA,GAAI;AAAA,KACnG;AAAA,IACA,QAAQ,MAAM;AAAA,GAChB;AACF;;;AClFO,SAAS,gBAAA,GAA8C;AAC5D,EAAA,OAAO,OAAO,MAAA,KAAW,WAAA,GAAc,MAAA,CAAO,kCAAA,GAAqC,MAAA;AACrF;AAEA,IAAM,kBAAA,GAAqB,MACzB,IAAIF,wBAAAA;AAAA,EACF,qKAAA;AAAA,EACA,EAAE,MAAM,uBAAA;AACV,CAAA;AAEF,eAAsB,uBACpB,SAAA,EACoF;AACpF,EAAA,MAAM,SAAS,gBAAA,EAAiB;AAChC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,OAAO,EAAE,mBAAA,EAAqB,IAAA,EAAM,KAAA,EAAO,oBAAmB,EAAE;AAAA,EAClE;AAEA,EAAA,MAAM,SAAS,MAAM,MAAA,CAAO,MAAA,CAAO,wBAAA,CAAyB,SAAS,CAAC,CAAA;AACtE,EAAA,IAAI,CAAC,OAAO,EAAA,EAAI;AACd,IAAA,OAAO,EAAE,qBAAqB,IAAA,EAAM,KAAA,EAAO,mBAAmB,MAAA,CAAO,KAAA,EAAO,QAAQ,CAAA,EAAE;AAAA,EACxF;AACA,EAAA,OAAO,EAAE,mBAAA,EAAqB,2BAAA,CAA4B,OAAO,UAAU,CAAA,EAAG,OAAO,IAAA,EAAK;AAC5F;AAEA,eAAsB,oBACpB,gBAAA,EACkF;AAClF,EAAA,MAAM,SAAS,gBAAA,EAAiB;AAChC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,OAAO,EAAE,mBAAA,EAAqB,IAAA,EAAM,KAAA,EAAO,oBAAmB,EAAE;AAAA,EAClE;AAEA,EAAA,MAAM,SAAS,MAAM,MAAA,CAAO,GAAA,CAAI,uBAAA,CAAwB,gBAAgB,CAAC,CAAA;AACzE,EAAA,IAAI,CAAC,OAAO,EAAA,EAAI;AACd,IAAA,OAAO,EAAE,qBAAqB,IAAA,EAAM,KAAA,EAAO,mBAAmB,MAAA,CAAO,KAAA,EAAO,KAAK,CAAA,EAAE;AAAA,EACrF;AACA,EAAA,OAAO,EAAE,mBAAA,EAAqB,0BAAA,CAA2B,OAAO,UAAU,CAAA,EAAG,OAAO,IAAA,EAAK;AAC3F;;;AC5CO,SAAS,mBAAA,CAAoB,KAAiD,IAAA,EAAuB;AAC1G,EAAA,IAAI,GAAA,CAAI,QAAA,KAAa,QAAA,IAAY,CAAC,IAAA,EAAM;AACtC,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,GAAA,CAAI,aAAa,IAAA,IAAQ,GAAA,CAAI,SAAS,QAAA,CAAS,CAAA,CAAA,EAAI,IAAI,CAAA,CAAE,CAAA;AAClE;AAMO,SAAS,UAAA,CAAW,IAAA,EAAc,IAAA,EAAmB,GAAA,EAA+B;AACzF,EAAA,IAAI,SAAS,UAAA,EAAY;AACvB,IAAA,OAAO,GAAA,CAAI,cAAc,UAAA,GAAa,aAAA;AAAA,EACxC;AACA,EAAA,IAAI,SAAS,QAAA,EAAU;AACrB,IAAA,OAAO,GAAA,CAAI,kBAAkB,QAAA,GAAW,aAAA;AAAA,EAC1C;AAEA,EAAA,IAAI,GAAA,CAAI,WAAA,IAAe,mBAAA,CAAoB,GAAA,EAAK,IAAI,CAAA,EAAG;AACrD,IAAA,IAAI,GAAA,CAAI,QAAA,KAAa,QAAA,IAAY,GAAA,CAAI,aAAA,GAAgB,KAAK,GAAA,CAAI,aAAA,GAAgB,EAAA,IAAM,GAAA,CAAI,eAAA,EAAiB;AACvG,MAAA,OAAO,QAAA;AAAA,IACT;AACA,IAAA,OAAO,UAAA;AAAA,EACT;AAEA,EAAA,OAAO,GAAA,CAAI,kBAAkB,QAAA,GAAW,aAAA;AAC1C;;;ACMA,IAAM,gBAAA,GAAmB,CAAC,QAAA,EAAU,OAAO,CAAA;AAE3C,SAAS,MAAA,GAAsB;AA/C/B,EAAA,IAAA,EAAA,EAAA,EAAA;AAgDE,EAAA,MAAM,SAAS,gBAAA,EAAiB;AAChC,EAAA,MAAM,WAAA,GAAc,OAAO,QAAA,KAAa,WAAA;AACxC,EAAA,OAAO;AAAA,IACL,QAAA,EAAU,WAAA,GAAc,QAAA,CAAS,QAAA,GAAW,EAAA;AAAA,IAC5C,QAAA,EAAU,WAAA,GAAc,QAAA,CAAS,QAAA,GAAW,EAAA;AAAA,IAC5C,aAAa,OAAO,MAAA,KAAW,WAAA,IAAe,OAAO,OAAO,mBAAA,KAAwB,UAAA;AAAA,IACpF,iBAAiB,CAAC,CAAC,UAAU,gBAAA,CAAiB,QAAA,CAAS,OAAO,QAAQ,CAAA;AAAA,IACtE,QAAA,EAAA,CAAU,EAAA,GAAA,MAAA,IAAA,IAAA,GAAA,MAAA,GAAA,MAAA,CAAQ,QAAA,KAAR,IAAA,GAAA,EAAA,GAAoB,EAAA;AAAA,IAC9B,aAAA,EAAA,CAAe,EAAA,GAAA,MAAA,IAAA,IAAA,GAAA,MAAA,GAAA,MAAA,CAAQ,aAAA,KAAR,IAAA,GAAA,EAAA,GAAyB;AAAA,GAC1C;AACF;AAEA,IAAM,oBAAoB,OACvB;AAAA,EACC,mBAAA,EAAqB,IAAA;AAAA,EACrB,OAAO,IAAIA,wBAAAA;AAAA,IACT,qNAAA;AAAA,IACA,EAAE,MAAM,uBAAA;AAAwB;AAEpC,CAAA,CAAA;AAEF,IAAM,mBAAA,GAAsB,CAAC,KAAA,KAC3B,CAAC,CAAC,SAAS,OAAO,KAAA,KAAU,QAAA,IAAa,KAAA,CAA4B,IAAA,KAAS,gCAAA;AAGzE,SAAS,eAAe,OAAA,EAAiD;AAzEhF,EAAA,IAAA,EAAA;AA0EE,EAAA,MAAM,IAAA,GAAA,CAAoB,EAAA,GAAA,OAAA,IAAA,IAAA,GAAA,MAAA,GAAA,OAAA,CAAS,IAAA,KAAT,IAAA,GAAA,EAAA,GAAiB,MAAA;AAE3C,EAAA,MAAM,MAAA,GAAmC,OAAM,SAAA,KAAa;AA5E9D,IAAA,IAAAG,GAAAA;AA6EI,IAAA,MAAM,MAAM,MAAA,EAAO;AACnB,IAAA,MAAM,IAAA,GAAO,UAAA,CAAA,CAAWA,GAAAA,GAAA,SAAA,CAAU,EAAA,CAAG,OAAb,IAAA,GAAAA,GAAAA,GAAmB,EAAA,EAAI,IAAA,EAAM,GAAG,CAAA;AAExD,IAAA,IAAI,SAAS,aAAA,EAAe;AAC1B,MAAA,OAAO,iBAAA,EAAkB;AAAA,IAC3B;AACA,IAAA,IAAI,SAAS,QAAA,EAAU;AACrB,MAAA,OAAO,uBAAuB,SAAS,CAAA;AAAA,IACzC;AAEA,IAAA,MAAM,MAAA,GAAS,MAAMC,mCAAA,CAAyB,SAAS,CAAA;AAEvD,IAAA,IAAI,MAAA,CAAO,SAAS,mBAAA,CAAoB,MAAA,CAAO,KAAK,CAAA,IAAK,IAAA,KAAS,MAAA,IAAU,GAAA,CAAI,eAAA,EAAiB;AAC/F,MAAA,OAAO,uBAAuB,SAAS,CAAA;AAAA,IACzC;AACA,IAAA,OAAO,MAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,GAAA,GAA6B,OAAO,EAAE,gBAAA,EAAiB,KAAM;AA/FrE,IAAA,IAAAD,GAAAA;AAgGI,IAAA,MAAM,MAAM,MAAA,EAAO;AACnB,IAAA,MAAM,IAAA,GAAO,YAAWA,GAAAA,GAAA,gBAAA,CAAiB,SAAjB,IAAA,GAAAA,GAAAA,GAAyB,EAAA,EAAI,IAAA,EAAM,GAAG,CAAA;AAE9D,IAAA,IAAI,SAAS,aAAA,EAAe;AAC1B,MAAA,OAAO,iBAAA,EAAkB;AAAA,IAC3B;AACA,IAAA,IAAI,SAAS,QAAA,EAAU;AACrB,MAAA,OAAO,oBAAoB,gBAAgB,CAAA;AAAA,IAC7C;AAEA,IAAA,MAAM,SAAS,MAAME,gCAAA,CAAsB,EAAE,gBAAA,EAAkB,aAAA,EAAe,OAAO,CAAA;AACrF,IAAA,IAAI,MAAA,CAAO,SAAS,mBAAA,CAAoB,MAAA,CAAO,KAAK,CAAA,IAAK,IAAA,KAAS,MAAA,IAAU,GAAA,CAAI,eAAA,EAAiB;AAC/F,MAAA,OAAO,oBAAoB,gBAAgB,CAAA;AAAA,IAC7C;AACA,IAAA,OAAO,MAAA;AAAA,EACT,CAAA;AAEA,EAAA,MAAM,cAA6C,MAAM;AACvD,IAAA,MAAM,MAAM,MAAA,EAAO;AACnB,IAAA,IAAI,SAAS,UAAA,EAAY;AACvB,MAAA,OAAO,GAAA,CAAI,WAAA;AAAA,IACb;AACA,IAAA,IAAI,SAAS,QAAA,EAAU;AACrB,MAAA,OAAO,GAAA,CAAI,eAAA;AAAA,IACb;AACA,IAAA,OAAO,GAAA,CAAI,eAAe,GAAA,CAAI,eAAA;AAAA,EAChC,CAAA;AAEA,EAAA,MAAM,sBAA6D,MAAM;AACvE,IAAA,OAAO,SAAS,QAAA,GAAW,OAAA,CAAQ,OAAA,CAAQ,KAAK,IAAIC,oCAAA,EAA4B;AAAA,EAClF,CAAA;AAEA,EAAA,MAAM,mCAAuF,YAAY;AACvG,IAAA,MAAM,MAAM,MAAA,EAAO;AACnB,IAAA,IAAI,GAAA,CAAI,eAAA,IAAmB,IAAA,KAAS,UAAA,EAAY;AAC9C,MAAA,MAAM,SAAS,gBAAA,EAAiB;AAChC,MAAA,IAAI;AACF,QAAA,MAAM,YAAA,GAAe,OAAM,MAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,MAAA,CAAQ,YAAA,EAAA,CAAA;AACnC,QAAA,IAAI,6CAAc,SAAA,EAAW;AAC3B,UAAA,OAAO,YAAA,CAAa,qBAAA;AAAA,QACtB;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AACA,IAAA,OAAOC,iDAAA,EAAyC;AAAA,EAClD,CAAA;AAEA,EAAA,OAAO,EAAE,MAAA,EAAQ,GAAA,EAAK,WAAA,EAAa,qBAAqB,gCAAA,EAAiC;AAC3F;AAcO,IAAM,WAA2B,cAAA;AAejC,SAAS,qBAAA,CAAsB,OAAyB,OAAA,EAAiD;AAC9G,EAAA,MAAMC,SAAAA,GAAW,eAAe,OAAO,CAAA;AAEvC,EAAA,KAAA,CAAM,qCAAqCA,SAAAA,CAAS,MAAA;AACpD,EAAA,KAAA,CAAM,kCAAkCA,SAAAA,CAAS,GAAA;AACjD,EAAA,KAAA,CAAM,iCAAiCA,SAAAA,CAAS,WAAA;AAChD,EAAA,KAAA,CAAM,yCAAyCA,SAAAA,CAAS,mBAAA;AACxD,EAAA,KAAA,CAAM,sDAAsDA,SAAAA,CAAS,gCAAA;AAErE,EAAA,OAAOA,SAAAA;AACT","file":"index.js","sourcesContent":["import { ClerkWebAuthnError } from '@clerk/shared/error';\n\nimport type { PasskeyNativeErrorCode } from '../../shared/types';\n\nconst RP_ID_DOCS_URL = 'https://clerk.com/docs/deployments/overview#authentication-across-subdomains';\n\n/** Maps native bridge errors to clerk-js WebAuthn errors. */\nexport function mapPasskeyIpcError(\n  error: { code: PasskeyNativeErrorCode; message: string },\n  action: 'create' | 'get',\n): ClerkWebAuthnError {\n  const { code, message } = error;\n\n  switch (code) {\n    case 'cancelled':\n      return new ClerkWebAuthnError(message, {\n        code: action === 'create' ? 'passkey_registration_cancelled' : 'passkey_retrieval_cancelled',\n      });\n    case 'invalid_rp':\n      return new ClerkWebAuthnError(message, {\n        code: 'passkey_invalid_rpID_or_domain',\n        docsUrl: RP_ID_DOCS_URL,\n      });\n    case 'timeout':\n      return new ClerkWebAuthnError(message, { code: 'passkey_operation_aborted' });\n    case 'not_supported':\n      return new ClerkWebAuthnError(message, { code: 'passkey_not_supported' });\n    case 'unknown':\n    default:\n      return new ClerkWebAuthnError(message, {\n        code: action === 'create' ? 'passkey_registration_failed' : 'passkey_retrieval_failed',\n      });\n  }\n}\n","import { base64UrlToBuffer, bufferToBase64Url } from '@clerk/shared/internal/clerk-js/passkeys';\nimport type {\n  PublicKeyCredentialCreationOptionsWithoutExtensions,\n  PublicKeyCredentialRequestOptionsWithoutExtensions,\n  PublicKeyCredentialWithAuthenticatorAssertionResponse,\n  PublicKeyCredentialWithAuthenticatorAttestationResponse,\n} from '@clerk/shared/types';\n\nimport type {\n  AuthenticationResponseJSON,\n  AuthenticatorTransport,\n  RegistrationResponseJSON,\n  SerializedPublicKeyCredentialCreationOptions,\n  SerializedPublicKeyCredentialRequestOptions,\n} from '../../shared/types';\n\nfunction toArrayBuffer(bufferSource: BufferSource): ArrayBuffer {\n  if (bufferSource instanceof ArrayBuffer) {\n    return bufferSource;\n  }\n  // Copy the view into a fresh ArrayBuffer; .buffer may be a SharedArrayBuffer.\n  const view = new Uint8Array(bufferSource.buffer, bufferSource.byteOffset, bufferSource.byteLength);\n  const copy = new ArrayBuffer(view.byteLength);\n  new Uint8Array(copy).set(view);\n  return copy;\n}\n\nconst encode = (bufferSource: BufferSource) => bufferToBase64Url(toArrayBuffer(bufferSource));\n\nexport function serializeCreationOptions(\n  publicKey: PublicKeyCredentialCreationOptionsWithoutExtensions,\n): SerializedPublicKeyCredentialCreationOptions {\n  return {\n    rp: { id: publicKey.rp.id ?? '', name: publicKey.rp.name },\n    user: {\n      id: encode(publicKey.user.id),\n      displayName: publicKey.user.displayName,\n      name: publicKey.user.name,\n    },\n    challenge: encode(publicKey.challenge),\n    pubKeyCredParams: publicKey.pubKeyCredParams.map(p => ({ type: 'public-key', alg: p.alg })),\n    timeout: publicKey.timeout,\n    authenticatorSelection: publicKey.authenticatorSelection,\n    attestation: publicKey.attestation,\n    excludeCredentials: (publicKey.excludeCredentials ?? []).map(c => ({\n      type: 'public-key',\n      id: encode(c.id),\n      transports: c.transports as AuthenticatorTransport[] | undefined,\n    })),\n  };\n}\n\nexport function serializeRequestOptions(\n  publicKeyOptions: PublicKeyCredentialRequestOptionsWithoutExtensions,\n): SerializedPublicKeyCredentialRequestOptions {\n  return {\n    challenge: encode(publicKeyOptions.challenge),\n    rpId: publicKeyOptions.rpId ?? '',\n    timeout: publicKeyOptions.timeout,\n    userVerification: publicKeyOptions.userVerification,\n    allowCredentials: (publicKeyOptions.allowCredentials ?? []).map(c => ({\n      type: 'public-key',\n      id: encode(c.id),\n    })),\n  };\n}\n\nexport function deserializeCreationResponse(\n  credential: RegistrationResponseJSON,\n): PublicKeyCredentialWithAuthenticatorAttestationResponse & { toJSON: () => RegistrationResponseJSON } {\n  return {\n    id: credential.id,\n    rawId: base64UrlToBuffer(credential.rawId),\n    type: credential.type,\n    authenticatorAttachment: credential.authenticatorAttachment ?? null,\n    response: {\n      clientDataJSON: base64UrlToBuffer(credential.response.clientDataJSON),\n      attestationObject: base64UrlToBuffer(credential.response.attestationObject),\n      getTransports: () => credential.response.transports ?? [],\n    },\n    toJSON: () => credential,\n  } as PublicKeyCredentialWithAuthenticatorAttestationResponse & { toJSON: () => RegistrationResponseJSON };\n}\n\nexport function deserializeRequestResponse(\n  credential: AuthenticationResponseJSON,\n): PublicKeyCredentialWithAuthenticatorAssertionResponse & { toJSON: () => AuthenticationResponseJSON } {\n  return {\n    id: credential.id,\n    rawId: base64UrlToBuffer(credential.rawId),\n    type: credential.type,\n    authenticatorAttachment: credential.authenticatorAttachment ?? null,\n    response: {\n      clientDataJSON: base64UrlToBuffer(credential.response.clientDataJSON),\n      authenticatorData: base64UrlToBuffer(credential.response.authenticatorData),\n      signature: base64UrlToBuffer(credential.response.signature),\n      userHandle: credential.response.userHandle ? base64UrlToBuffer(credential.response.userHandle) : null,\n    },\n    toJSON: () => credential,\n  } as PublicKeyCredentialWithAuthenticatorAssertionResponse & { toJSON: () => AuthenticationResponseJSON };\n}\n","import { ClerkWebAuthnError } from '@clerk/shared/error';\nimport type {\n  CredentialReturn,\n  PublicKeyCredentialCreationOptionsWithoutExtensions,\n  PublicKeyCredentialRequestOptionsWithoutExtensions,\n  PublicKeyCredentialWithAuthenticatorAssertionResponse,\n  PublicKeyCredentialWithAuthenticatorAttestationResponse,\n} from '@clerk/shared/types';\n\nimport type { PasskeyBridge } from '../../shared/types';\nimport { mapPasskeyIpcError } from '../shared/errors';\nimport {\n  deserializeCreationResponse,\n  deserializeRequestResponse,\n  serializeCreationOptions,\n  serializeRequestOptions,\n} from '../shared/serialization';\n\nexport function getPasskeyBridge(): PasskeyBridge | undefined {\n  return typeof window !== 'undefined' ? window.__clerk_internal_electron_passkeys : undefined;\n}\n\nconst bridgeMissingError = () =>\n  new ClerkWebAuthnError(\n    'Clerk: The native passkey bridge is not available. Pass `passkeys: true` to exposeClerkBridge() in your preload script and createClerkBridge() in the main process.',\n    { code: 'passkey_not_supported' },\n  );\n\nexport async function nativeCreateCredential(\n  publicKey: PublicKeyCredentialCreationOptionsWithoutExtensions,\n): Promise<CredentialReturn<PublicKeyCredentialWithAuthenticatorAttestationResponse>> {\n  const bridge = getPasskeyBridge();\n  if (!bridge) {\n    return { publicKeyCredential: null, error: bridgeMissingError() };\n  }\n\n  const result = await bridge.create(serializeCreationOptions(publicKey));\n  if (!result.ok) {\n    return { publicKeyCredential: null, error: mapPasskeyIpcError(result.error, 'create') };\n  }\n  return { publicKeyCredential: deserializeCreationResponse(result.credential), error: null };\n}\n\nexport async function nativeGetCredential(\n  publicKeyOptions: PublicKeyCredentialRequestOptionsWithoutExtensions,\n): Promise<CredentialReturn<PublicKeyCredentialWithAuthenticatorAssertionResponse>> {\n  const bridge = getPasskeyBridge();\n  if (!bridge) {\n    return { publicKeyCredential: null, error: bridgeMissingError() };\n  }\n\n  const result = await bridge.get(serializeRequestOptions(publicKeyOptions));\n  if (!result.ok) {\n    return { publicKeyCredential: null, error: mapPasskeyIpcError(result.error, 'get') };\n  }\n  return { publicKeyCredential: deserializeRequestResponse(result.credential), error: null };\n}\n","export type PasskeyMode = 'auto' | 'renderer' | 'native';\nexport type PasskeyPath = 'renderer' | 'native' | 'unsupported';\n\nexport type StrategyEnv = {\n  protocol: string;\n  hostname: string;\n  hasWebAuthn: boolean;\n  nativeAvailable: boolean;\n  platform: string;\n  electronMajor: number;\n};\n\nexport function originSatisfiesRpId(env: Pick<StrategyEnv, 'protocol' | 'hostname'>, rpId: string): boolean {\n  if (env.protocol !== 'https:' || !rpId) {\n    return false;\n  }\n  return env.hostname === rpId || env.hostname.endsWith(`.${rpId}`);\n}\n\n/**\n * Prefer Chromium WebAuthn when the page origin can satisfy the RP ID.\n * Local bundles and older macOS Electron builds use the native bridge when available.\n */\nexport function decidePath(rpId: string, mode: PasskeyMode, env: StrategyEnv): PasskeyPath {\n  if (mode === 'renderer') {\n    return env.hasWebAuthn ? 'renderer' : 'unsupported';\n  }\n  if (mode === 'native') {\n    return env.nativeAvailable ? 'native' : 'unsupported';\n  }\n\n  if (env.hasWebAuthn && originSatisfiesRpId(env, rpId)) {\n    if (env.platform === 'darwin' && env.electronMajor > 0 && env.electronMajor < 42 && env.nativeAvailable) {\n      return 'native';\n    }\n    return 'renderer';\n  }\n\n  return env.nativeAvailable ? 'native' : 'unsupported';\n}\n","import { ClerkWebAuthnError } from '@clerk/shared/error';\nimport { webAuthnCreateCredential, webAuthnGetCredential } from '@clerk/shared/internal/clerk-js/passkeys';\nimport type {\n  CredentialReturn,\n  PublicKeyCredentialCreationOptionsWithoutExtensions,\n  PublicKeyCredentialRequestOptionsWithoutExtensions,\n  PublicKeyCredentialWithAuthenticatorAssertionResponse,\n  PublicKeyCredentialWithAuthenticatorAttestationResponse,\n} from '@clerk/shared/types';\nimport { isWebAuthnAutofillSupported, isWebAuthnPlatformAuthenticatorSupported } from '@clerk/shared/webauthn';\n\nimport { getPasskeyBridge, nativeCreateCredential, nativeGetCredential } from './renderer/native-bridge';\nimport type { PasskeyMode, StrategyEnv } from './renderer/strategy';\nimport { decidePath } from './renderer/strategy';\n\nexport type { PasskeyMode, PasskeyPath, StrategyEnv } from './renderer/strategy';\n\nexport type CreatePasskeysOptions = {\n  /**\n   * WebAuthn implementation to use:\n   * `auto` chooses renderer WebAuthn for valid HTTPS origins and native WebAuthn otherwise.\n   */\n  mode?: PasskeyMode;\n};\n\nexport type PasskeySupport = {\n  create: (\n    publicKey: PublicKeyCredentialCreationOptionsWithoutExtensions,\n  ) => Promise<CredentialReturn<PublicKeyCredentialWithAuthenticatorAttestationResponse>>;\n  get: (args: {\n    publicKeyOptions: PublicKeyCredentialRequestOptionsWithoutExtensions;\n  }) => Promise<CredentialReturn<PublicKeyCredentialWithAuthenticatorAssertionResponse>>;\n  isSupported: () => boolean;\n  isAutoFillSupported: () => Promise<boolean>;\n  isPlatformAuthenticatorSupported: () => Promise<boolean>;\n};\n\nexport type ClerkPasskeyHost = {\n  __internal_createPublicCredentials: PasskeySupport['create'] | undefined;\n  __internal_getPublicCredentials: PasskeySupport['get'] | undefined;\n  __internal_isWebAuthnSupported: PasskeySupport['isSupported'] | undefined;\n  __internal_isWebAuthnAutofillSupported: PasskeySupport['isAutoFillSupported'] | undefined;\n  __internal_isWebAuthnPlatformAuthenticatorSupported: PasskeySupport['isPlatformAuthenticatorSupported'] | undefined;\n};\n\nconst NATIVE_PLATFORMS = ['darwin', 'win32'];\n\nfunction getEnv(): StrategyEnv {\n  const bridge = getPasskeyBridge();\n  const hasLocation = typeof location !== 'undefined';\n  return {\n    protocol: hasLocation ? location.protocol : '',\n    hostname: hasLocation ? location.hostname : '',\n    hasWebAuthn: typeof window !== 'undefined' && typeof window.PublicKeyCredential === 'function',\n    nativeAvailable: !!bridge && NATIVE_PLATFORMS.includes(bridge.platform),\n    platform: bridge?.platform ?? '',\n    electronMajor: bridge?.electronMajor ?? 0,\n  };\n}\n\nconst unsupportedReturn = <T>(): CredentialReturn<T> =>\n  ({\n    publicKeyCredential: null,\n    error: new ClerkWebAuthnError(\n      'Clerk: Passkeys are not supported in this window. Serve the page from an https origin matching the RP ID, or enable the native passkey module with `passkeys: true` in createClerkBridge() and exposeClerkBridge().',\n      { code: 'passkey_not_supported' },\n    ),\n  }) as CredentialReturn<T>;\n\nconst isRpIdMismatchError = (error: unknown): boolean =>\n  !!error && typeof error === 'object' && (error as { code?: string }).code === 'passkey_invalid_rpID_or_domain';\n\n/** Creates an Electron passkey provider for clerk-js. */\nexport function createPasskeys(options?: CreatePasskeysOptions): PasskeySupport {\n  const mode: PasskeyMode = options?.mode ?? 'auto';\n\n  const create: PasskeySupport['create'] = async publicKey => {\n    const env = getEnv();\n    const path = decidePath(publicKey.rp.id ?? '', mode, env);\n\n    if (path === 'unsupported') {\n      return unsupportedReturn();\n    }\n    if (path === 'native') {\n      return nativeCreateCredential(publicKey);\n    }\n\n    const result = await webAuthnCreateCredential(publicKey);\n    // Retry with native WebAuthn when Chromium rejects the RP ID for the page origin.\n    if (result.error && isRpIdMismatchError(result.error) && mode === 'auto' && env.nativeAvailable) {\n      return nativeCreateCredential(publicKey);\n    }\n    return result;\n  };\n\n  const get: PasskeySupport['get'] = async ({ publicKeyOptions }) => {\n    const env = getEnv();\n    const path = decidePath(publicKeyOptions.rpId ?? '', mode, env);\n\n    if (path === 'unsupported') {\n      return unsupportedReturn();\n    }\n    if (path === 'native') {\n      return nativeGetCredential(publicKeyOptions);\n    }\n\n    const result = await webAuthnGetCredential({ publicKeyOptions, conditionalUI: false });\n    if (result.error && isRpIdMismatchError(result.error) && mode === 'auto' && env.nativeAvailable) {\n      return nativeGetCredential(publicKeyOptions);\n    }\n    return result;\n  };\n\n  const isSupported: PasskeySupport['isSupported'] = () => {\n    const env = getEnv();\n    if (mode === 'renderer') {\n      return env.hasWebAuthn;\n    }\n    if (mode === 'native') {\n      return env.nativeAvailable;\n    }\n    return env.hasWebAuthn || env.nativeAvailable;\n  };\n\n  const isAutoFillSupported: PasskeySupport['isAutoFillSupported'] = () => {\n    return mode === 'native' ? Promise.resolve(false) : isWebAuthnAutofillSupported();\n  };\n\n  const isPlatformAuthenticatorSupported: PasskeySupport['isPlatformAuthenticatorSupported'] = async () => {\n    const env = getEnv();\n    if (env.nativeAvailable && mode !== 'renderer') {\n      const bridge = getPasskeyBridge();\n      try {\n        const capabilities = await bridge?.capabilities();\n        if (capabilities?.available) {\n          return capabilities.platformAuthenticator;\n        }\n      } catch {\n        // Fall back to Chromium's capability check.\n      }\n    }\n    return isWebAuthnPlatformAuthenticatorSupported();\n  };\n\n  return { create, get, isSupported, isAutoFillSupported, isPlatformAuthenticatorSupported };\n}\n\n/**\n * Ready-to-use passkey implementation for the `ClerkProvider` `passkeys` prop.\n * Chooses renderer or native WebAuthn automatically per request.\n *\n * @example\n * ```tsx\n * import { ClerkProvider } from '@clerk/electron/react';\n * import { passkeys } from '@clerk/electron/passkeys';\n *\n * <ClerkProvider publishableKey={publishableKey} passkeys={passkeys} />\n * ```\n */\nexport const passkeys: PasskeySupport = createPasskeys();\n\n/**\n * Wires passkey support into a Clerk instance. Call before `clerk.load()`.\n *\n * @example\n * ```ts\n * import { Clerk } from '@clerk/clerk-js';\n * import { createPasskeyProvider } from '@clerk/electron/passkeys';\n *\n * const clerk = new Clerk(publishableKey);\n * createPasskeyProvider(clerk);\n * await clerk.load();\n * ```\n */\nexport function createPasskeyProvider(clerk: ClerkPasskeyHost, options?: CreatePasskeysOptions): PasskeySupport {\n  const passkeys = createPasskeys(options);\n\n  clerk.__internal_createPublicCredentials = passkeys.create;\n  clerk.__internal_getPublicCredentials = passkeys.get;\n  clerk.__internal_isWebAuthnSupported = passkeys.isSupported;\n  clerk.__internal_isWebAuthnAutofillSupported = passkeys.isAutoFillSupported;\n  clerk.__internal_isWebAuthnPlatformAuthenticatorSupported = passkeys.isPlatformAuthenticatorSupported;\n\n  return passkeys;\n}\n"]}

package/dist/cjs/preload/index.js

@@ -0,0 +1,65 @@
+'use strict';
+
+var electron = require('electron');
+
+// src/preload/index.ts
+
+// src/shared/ipc.ts
+var TOKEN_CACHE_CHANNELS = {
+  getToken: "clerk:token-cache:get",
+  saveToken: "clerk:token-cache:save",
+  clearToken: "clerk:token-cache:clear"
+};
+var OAUTH_TRANSPORT_CHANNELS = {
+  getRedirectUrl: "clerk:oauth-transport:get-redirect-url",
+  open: "clerk:oauth-transport:open"
+};
+var PASSKEY_CHANNELS = {
+  create: "clerk:passkeys:create",
+  get: "clerk:passkeys:get",
+  capabilities: "clerk:passkeys:capabilities"
+};
+
+// src/passkeys/preload.ts
+function setupPasskeysPreload() {
+  var _a;
+  const bridge = {
+    create: (options) => electron.ipcRenderer.invoke(PASSKEY_CHANNELS.create, options),
+    get: (options) => electron.ipcRenderer.invoke(PASSKEY_CHANNELS.get, options),
+    capabilities: () => electron.ipcRenderer.invoke(PASSKEY_CHANNELS.capabilities),
+    electronMajor: Number.parseInt((_a = process.versions.electron) != null ? _a : "", 10) || 0,
+    platform: process.platform
+  };
+  if (process.contextIsolated) {
+    electron.contextBridge.exposeInMainWorld("__clerk_internal_electron_passkeys", bridge);
+  } else {
+    window.__clerk_internal_electron_passkeys = bridge;
+  }
+}
+
+// src/preload/index.ts
+function exposeClerkBridge(options) {
+  const tokenCache = {
+    getToken: (key) => electron.ipcRenderer.invoke(TOKEN_CACHE_CHANNELS.getToken, key),
+    saveToken: (key, value) => electron.ipcRenderer.invoke(TOKEN_CACHE_CHANNELS.saveToken, key, value),
+    clearToken: (key) => electron.ipcRenderer.invoke(TOKEN_CACHE_CHANNELS.clearToken, key)
+  };
+  const oauthTransport = {
+    getRedirectUrl: () => electron.ipcRenderer.invoke(OAUTH_TRANSPORT_CHANNELS.getRedirectUrl),
+    open: (url) => electron.ipcRenderer.invoke(OAUTH_TRANSPORT_CHANNELS.open, url)
+  };
+  const bridge = { tokenCache, oauthTransport };
+  if (process.contextIsolated) {
+    electron.contextBridge.exposeInMainWorld("__clerk_internal_electron", bridge);
+  } else {
+    window.__clerk_internal_electron = bridge;
+  }
+  if (options == null ? void 0 : options.passkeys) {
+    setupPasskeysPreload();
+  }
+}
+
+exports.exposeClerkBridge = exposeClerkBridge;
+exports.setupPasskeysPreload = setupPasskeysPreload;
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/cjs/preload/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/shared/ipc.ts","../../../src/passkeys/preload.ts","../../../src/preload/index.ts"],"names":["ipcRenderer","contextBridge"],"mappings":";;;;;;;AAAO,IAAM,oBAAA,GAAuB;AAAA,EAClC,QAAA,EAAU,uBAAA;AAAA,EACV,SAAA,EAAW,wBAAA;AAAA,EACX,UAAA,EAAY;AACd,CAAA;AAEO,IAAM,wBAAA,GAA2B;AAAA,EACtC,cAAA,EAAgB,wCAAA;AAAA,EAChB,IAAA,EAAM;AACR,CAAA;AAEO,IAAM,gBAAA,GAAmB;AAAA,EAC9B,MAAA,EAAQ,uBAAA;AAAA,EACR,GAAA,EAAK,oBAAA;AAAA,EACL,YAAA,EAAc;AAChB,CAAA;;;ACTO,SAAS,oBAAA,GAA6B;AAN7C,EAAA,IAAA,EAAA;AAOE,EAAA,MAAM,MAAA,GAAwB;AAAA,IAC5B,QAAQ,CAAA,OAAA,KAAWA,oBAAA,CAAY,MAAA,CAAO,gBAAA,CAAiB,QAAQ,OAAO,CAAA;AAAA,IACtE,KAAK,CAAA,OAAA,KAAWA,oBAAA,CAAY,MAAA,CAAO,gBAAA,CAAiB,KAAK,OAAO,CAAA;AAAA,IAChE,YAAA,EAAc,MAAMA,oBAAA,CAAY,MAAA,CAAO,iBAAiB,YAAY,CAAA;AAAA,IACpE,aAAA,EAAe,OAAO,QAAA,CAAA,CAAS,EAAA,GAAA,OAAA,CAAQ,SAAS,QAAA,KAAjB,IAAA,GAAA,EAAA,GAA6B,EAAA,EAAI,EAAE,CAAA,IAAK,CAAA;AAAA,IACvE,UAAU,OAAA,CAAQ;AAAA,GACpB;AAEA,EAAA,IAAI,QAAQ,eAAA,EAAiB;AAC3B,IAAAC,sBAAA,CAAc,iBAAA,CAAkB,sCAAsC,MAAM,CAAA;AAAA,EAC9E,CAAA,MAAO;AACL,IAAA,MAAA,CAAO,kCAAA,GAAqC,MAAA;AAAA,EAC9C;AACF;;;ACNO,SAAS,kBAAkB,OAAA,EAA0C;AAC1E,EAAA,MAAM,UAAA,GAAyB;AAAA,IAC7B,UAAU,CAAA,GAAA,KAAOD,oBAAAA,CAAY,MAAA,CAAO,oBAAA,CAAqB,UAAU,GAAG,CAAA;AAAA,IACtE,SAAA,EAAW,CAAC,GAAA,EAAK,KAAA,KAAUA,qBAAY,MAAA,CAAO,oBAAA,CAAqB,SAAA,EAAW,GAAA,EAAK,KAAK,CAAA;AAAA,IACxF,YAAY,CAAA,GAAA,KAAOA,oBAAAA,CAAY,MAAA,CAAO,oBAAA,CAAqB,YAAY,GAAG;AAAA,GAC5E;AACA,EAAA,MAAM,cAAA,GAAiC;AAAA,IACrC,cAAA,EAAgB,MAAMA,oBAAAA,CAAY,MAAA,CAAO,yBAAyB,cAAc,CAAA;AAAA,IAChF,MAAM,CAAA,GAAA,KAAOA,oBAAAA,CAAY,MAAA,CAAO,wBAAA,CAAyB,MAAM,GAAG;AAAA,GACpE;AACA,EAAA,MAAM,MAAA,GAAS,EAAE,UAAA,EAAY,cAAA,EAAe;AAE5C,EAAA,IAAI,QAAQ,eAAA,EAAiB;AAC3B,IAAAC,sBAAAA,CAAc,iBAAA,CAAkB,2BAAA,EAA6B,MAAM,CAAA;AAAA,EACrE,CAAA,MAAO;AACL,IAAA,MAAA,CAAO,yBAAA,GAA4B,MAAA;AAAA,EACrC;AAEA,EAAA,IAAI,mCAAS,QAAA,EAAU;AACrB,IAAA,oBAAA,EAAqB;AAAA,EACvB;AACF","file":"index.js","sourcesContent":["export const TOKEN_CACHE_CHANNELS = {\n  getToken: 'clerk:token-cache:get',\n  saveToken: 'clerk:token-cache:save',\n  clearToken: 'clerk:token-cache:clear',\n} as const;\n\nexport const OAUTH_TRANSPORT_CHANNELS = {\n  getRedirectUrl: 'clerk:oauth-transport:get-redirect-url',\n  open: 'clerk:oauth-transport:open',\n} as const;\n\nexport const PASSKEY_CHANNELS = {\n  create: 'clerk:passkeys:create',\n  get: 'clerk:passkeys:get',\n  capabilities: 'clerk:passkeys:capabilities',\n} as const;\n","import { contextBridge, ipcRenderer } from 'electron';\n\nimport { PASSKEY_CHANNELS } from '../shared/ipc';\nimport type { PasskeyBridge } from '../shared/types';\n\n/** Exposes the native passkey bridge to the renderer. */\nexport function setupPasskeysPreload(): void {\n  const bridge: PasskeyBridge = {\n    create: options => ipcRenderer.invoke(PASSKEY_CHANNELS.create, options),\n    get: options => ipcRenderer.invoke(PASSKEY_CHANNELS.get, options),\n    capabilities: () => ipcRenderer.invoke(PASSKEY_CHANNELS.capabilities),\n    electronMajor: Number.parseInt(process.versions.electron ?? '', 10) || 0,\n    platform: process.platform,\n  };\n\n  if (process.contextIsolated) {\n    contextBridge.exposeInMainWorld('__clerk_internal_electron_passkeys', bridge);\n  } else {\n    window.__clerk_internal_electron_passkeys = bridge;\n  }\n}\n","import { contextBridge, ipcRenderer } from 'electron';\n\nimport { setupPasskeysPreload } from '../passkeys/preload';\nimport { OAUTH_TRANSPORT_CHANNELS, TOKEN_CACHE_CHANNELS } from '../shared/ipc';\nimport type { ExposeClerkBridgeOptions, OAuthTransport, TokenCache } from '../shared/types';\n\nexport { setupPasskeysPreload };\n\n/**\n * Exposes Clerk's Electron bridge from the preload script to the renderer.\n *\n * Call this from an Electron preload script. It publishes a narrow internal bridge used by\n * `@clerk/electron/react` for token storage and OAuth transport.\n */\nexport function exposeClerkBridge(options?: ExposeClerkBridgeOptions): void {\n  const tokenCache: TokenCache = {\n    getToken: key => ipcRenderer.invoke(TOKEN_CACHE_CHANNELS.getToken, key),\n    saveToken: (key, value) => ipcRenderer.invoke(TOKEN_CACHE_CHANNELS.saveToken, key, value),\n    clearToken: key => ipcRenderer.invoke(TOKEN_CACHE_CHANNELS.clearToken, key),\n  };\n  const oauthTransport: OAuthTransport = {\n    getRedirectUrl: () => ipcRenderer.invoke(OAUTH_TRANSPORT_CHANNELS.getRedirectUrl),\n    open: url => ipcRenderer.invoke(OAUTH_TRANSPORT_CHANNELS.open, url),\n  };\n  const bridge = { tokenCache, oauthTransport };\n\n  if (process.contextIsolated) {\n    contextBridge.exposeInMainWorld('__clerk_internal_electron', bridge);\n  } else {\n    window.__clerk_internal_electron = bridge;\n  }\n\n  if (options?.passkeys) {\n    setupPasskeysPreload();\n  }\n}\n"]}

package/dist/cjs/react/index.js

@@ -0,0 +1,115 @@
+'use strict';
+
+var internal = require('@clerk/react/internal');
+var loadClerkJsScript = require('@clerk/shared/loadClerkJsScript');
+var clerkJs = require('@clerk/clerk-js');
+var react = require('@clerk/react');
+var jsxRuntime = require('react/jsx-runtime');
+
+// src/react/index.tsx
+var CLERK_CLIENT_JWT_KEY = "__clerk_client_jwt";
+var cached = null;
+function attachPasskeys(clerk, passkeys) {
+  clerk.__internal_createPublicCredentials = passkeys.create;
+  clerk.__internal_getPublicCredentials = passkeys.get;
+  clerk.__internal_isWebAuthnSupported = passkeys.isSupported;
+  clerk.__internal_isWebAuthnAutofillSupported = passkeys.isAutoFillSupported;
+  clerk.__internal_isWebAuthnPlatformAuthenticatorSupported = passkeys.isPlatformAuthenticatorSupported;
+}
+function createClerkInstance(publishableKey, passkeys) {
+  if ((cached == null ? void 0 : cached.publishableKey) === publishableKey) {
+    if (passkeys) {
+      attachPasskeys(cached.instance, passkeys);
+    }
+    return cached.instance;
+  }
+  const clerk = new clerkJs.Clerk(publishableKey);
+  if (passkeys) {
+    attachPasskeys(clerk, passkeys);
+  }
+  clerk.__internal_onBeforeRequest(async (request) => {
+    var _a, _b, _c;
+    request.credentials = "omit";
+    (_a = request.url) == null ? void 0 : _a.searchParams.append("_is_native", "1");
+    (_b = request.url) == null ? void 0 : _b.searchParams.append("_electron_sdk_version", "0.0.1-snapshot.v20260617204522");
+    const token = await ((_c = window.__clerk_internal_electron) == null ? void 0 : _c.tokenCache.getToken(CLERK_CLIENT_JWT_KEY));
+    if (token) {
+      const headers = new Headers(request.headers);
+      headers.set("Authorization", `Bearer ${token}`);
+      request.headers = headers;
+    }
+  });
+  clerk.__internal_onAfterResponse(async (_request, response) => {
+    var _a;
+    const authorization = response.headers.get("Authorization");
+    if (!authorization) {
+      return;
+    }
+    const token = authorization.startsWith("Bearer ") ? authorization.slice("Bearer ".length) : authorization;
+    await ((_a = window.__clerk_internal_electron) == null ? void 0 : _a.tokenCache.saveToken(CLERK_CLIENT_JWT_KEY, token));
+  });
+  cached = { instance: clerk, publishableKey };
+  return clerk;
+}
+var cachedClerkUI = null;
+function loadClerkUI(publishableKey, props) {
+  if ((cachedClerkUI == null ? void 0 : cachedClerkUI.publishableKey) === publishableKey) {
+    return cachedClerkUI.promise;
+  }
+  const { __internal_clerkUIUrl, __internal_clerkUIVersion } = props;
+  const promise = loadClerkJsScript.loadClerkUIScript({
+    publishableKey,
+    proxyUrl: typeof props.proxyUrl === "string" ? props.proxyUrl : void 0,
+    domain: typeof props.domain === "string" ? props.domain : void 0,
+    nonce: props.nonce,
+    __internal_clerkUIUrl,
+    __internal_clerkUIVersion
+  }).then(() => {
+    if (!window.__internal_ClerkUICtor) {
+      throw new Error(
+        "Clerk: Failed to load Clerk UI from the CDN. Ensure your Content Security Policy allows the Clerk Frontend API host in `script-src`. Contact support@clerk.com."
+      );
+    }
+    return window.__internal_ClerkUICtor;
+  });
+  cachedClerkUI = { promise, publishableKey };
+  return promise;
+}
+function createOAuthTransport() {
+  var _a;
+  const bridge = (_a = window.__clerk_internal_electron) == null ? void 0 : _a.oauthTransport;
+  if (!bridge) {
+    return void 0;
+  }
+  return {
+    getRedirectUrl: () => bridge.getRedirectUrl(),
+    open: (url) => bridge.open(url.href)
+  };
+}
+function ClerkProvider({ children, publishableKey, passkeys, ...props }) {
+  const clerk = createClerkInstance(publishableKey, passkeys);
+  const oauthTransport = createOAuthTransport();
+  const clerkUI = loadClerkUI(publishableKey, props);
+  return /* @__PURE__ */ jsxRuntime.jsx(
+    internal.InternalClerkProvider,
+    {
+      ...props,
+      Clerk: clerk,
+      __internal_oauthTransport: oauthTransport,
+      publishableKey,
+      standardBrowser: false,
+      ui: { ClerkUI: clerkUI },
+      children
+    }
+  );
+}
+
+exports.ClerkProvider = ClerkProvider;
+Object.keys(react).forEach(function (k) {
+  if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) Object.defineProperty(exports, k, {
+    enumerable: true,
+    get: function () { return react[k]; }
+  });
+});
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/cjs/react/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/react/create-clerk-instance.ts","../../../src/react/index.tsx"],"names":["Clerk","loadClerkUIScript","jsx","ReactClerkProvider"],"mappings":";;;;;;;;;AAMA,IAAM,oBAAA,GAAuB,oBAAA;AAI7B,IAAI,MAAA,GAAqE,IAAA;AAEzE,SAAS,cAAA,CAAe,OAAsB,QAAA,EAAgC;AAC5E,EAAA,KAAA,CAAM,qCAAqC,QAAA,CAAS,MAAA;AACpD,EAAA,KAAA,CAAM,kCAAkC,QAAA,CAAS,GAAA;AACjD,EAAA,KAAA,CAAM,iCAAiC,QAAA,CAAS,WAAA;AAChD,EAAA,KAAA,CAAM,yCAAyC,QAAA,CAAS,mBAAA;AACxD,EAAA,KAAA,CAAM,sDAAsD,QAAA,CAAS,gCAAA;AACvE;AAEO,SAAS,mBAAA,CAAoB,gBAAwB,QAAA,EAA0C;AACpG,EAAA,IAAA,CAAI,MAAA,IAAA,IAAA,GAAA,MAAA,GAAA,MAAA,CAAQ,oBAAmB,cAAA,EAAgB;AAC7C,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,cAAA,CAAe,MAAA,CAAO,UAAU,QAAQ,CAAA;AAAA,IAC1C;AACA,IAAA,OAAO,MAAA,CAAO,QAAA;AAAA,EAChB;AAEA,EAAA,MAAM,KAAA,GAAQ,IAAIA,aAAA,CAAM,cAAc,CAAA;AAEtC,EAAA,IAAI,QAAA,EAAU;AACZ,IAAA,cAAA,CAAe,OAAO,QAAQ,CAAA;AAAA,EAChC;AAEA,EAAA,KAAA,CAAM,0BAAA,CAA2B,OAAM,OAAA,KAAW;AAlCpD,IAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAmCI,IAAA,OAAA,CAAQ,WAAA,GAAc,MAAA;AACtB,IAAA,CAAA,EAAA,GAAA,OAAA,CAAQ,GAAA,KAAR,IAAA,GAAA,MAAA,GAAA,EAAA,CAAa,YAAA,CAAa,MAAA,CAAO,YAAA,EAAc,GAAA,CAAA;AAC/C,IAAA,CAAA,EAAA,GAAA,OAAA,CAAQ,GAAA,KAAR,IAAA,GAAA,MAAA,GAAA,EAAA,CAAa,YAAA,CAAa,MAAA,CAAO,uBAAA,EAAyB,gCAAA,CAAA;AAE1D,IAAA,MAAM,QAAQ,OAAA,CAAM,EAAA,GAAA,MAAA,CAAO,yBAAA,KAAP,IAAA,GAAA,MAAA,GAAA,EAAA,CAAkC,WAAW,QAAA,CAAS,oBAAA,CAAA,CAAA;AAC1E,IAAA,IAAI,KAAA,EAAO;AACT,MAAA,MAAM,OAAA,GAAU,IAAI,OAAA,CAAQ,OAAA,CAAQ,OAAO,CAAA;AAC3C,MAAA,OAAA,CAAQ,GAAA,CAAI,eAAA,EAAiB,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE,CAAA;AAC9C,MAAA,OAAA,CAAQ,OAAA,GAAU,OAAA;AAAA,IACpB;AAAA,EACF,CAAC,CAAA;AAED,EAAA,KAAA,CAAM,0BAAA,CAA2B,OAAO,QAAA,EAAU,QAAA,KAAa;AA/CjE,IAAA,IAAA,EAAA;AAgDI,IAAA,MAAM,aAAA,GAAiB,QAAA,CAAsB,OAAA,CAAQ,GAAA,CAAI,eAAe,CAAA;AACxE,IAAA,IAAI,CAAC,aAAA,EAAe;AAClB,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,KAAA,GAAQ,cAAc,UAAA,CAAW,SAAS,IAAI,aAAA,CAAc,KAAA,CAAM,SAAA,CAAU,MAAM,CAAA,GAAI,aAAA;AAC5F,IAAA,OAAA,CAAM,EAAA,GAAA,MAAA,CAAO,yBAAA,KAAP,IAAA,GAAA,MAAA,GAAA,EAAA,CAAkC,UAAA,CAAW,UAAU,oBAAA,EAAsB,KAAA,CAAA,CAAA;AAAA,EACrF,CAAC,CAAA;AAED,EAAA,MAAA,GAAS,EAAE,QAAA,EAAU,KAAA,EAAO,cAAA,EAAe;AAC3C,EAAA,OAAO,KAAA;AACT;ACzBA,IAAI,aAAA,GAAyF,IAAA;AAE7F,SAAS,WAAA,CAAY,gBAAwB,KAAA,EAAiE;AAC5G,EAAA,IAAA,CAAI,aAAA,IAAA,IAAA,GAAA,MAAA,GAAA,aAAA,CAAe,oBAAmB,cAAA,EAAgB;AACpD,IAAA,OAAO,aAAA,CAAc,OAAA;AAAA,EACvB;AAGA,EAAA,MAAM,EAAE,qBAAA,EAAuB,yBAAA,EAA0B,GAAI,KAAA;AAK7D,EAAA,MAAM,UAAUC,mCAAA,CAAkB;AAAA,IAChC,cAAA;AAAA,IACA,UAAU,OAAO,KAAA,CAAM,QAAA,KAAa,QAAA,GAAW,MAAM,QAAA,GAAW,MAAA;AAAA,IAChE,QAAQ,OAAO,KAAA,CAAM,MAAA,KAAW,QAAA,GAAW,MAAM,MAAA,GAAS,MAAA;AAAA,IAC1D,OAAO,KAAA,CAAM,KAAA;AAAA,IACb,qBAAA;AAAA,IACA;AAAA,GACD,CAAA,CAAE,IAAA,CAAK,MAAM;AACZ,IAAA,IAAI,CAAC,OAAO,sBAAA,EAAwB;AAClC,MAAA,MAAM,IAAI,KAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AACA,IAAA,OAAO,MAAA,CAAO,sBAAA;AAAA,EAChB,CAAC,CAAA;AAED,EAAA,aAAA,GAAgB,EAAE,SAAS,cAAA,EAAe;AAC1C,EAAA,OAAO,OAAA;AACT;AAEA,SAAS,oBAAA,GAAwD;AAnEjE,EAAA,IAAA,EAAA;AAoEE,EAAA,MAAM,MAAA,GAAA,CAAS,EAAA,GAAA,MAAA,CAAO,yBAAA,KAAP,IAAA,GAAA,MAAA,GAAA,EAAA,CAAkC,cAAA;AAEjD,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,OAAO,MAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,cAAA,EAAgB,MAAM,MAAA,CAAO,cAAA,EAAe;AAAA,IAC5C,IAAA,EAAM,CAAA,GAAA,KAAO,MAAA,CAAO,IAAA,CAAK,IAAI,IAAI;AAAA,GACnC;AACF;AAEO,SAAS,cAAc,EAAE,QAAA,EAAU,gBAAgB,QAAA,EAAU,GAAG,OAAM,EAAoC;AAC/G,EAAA,MAAM,KAAA,GAAQ,mBAAA,CAAoB,cAAA,EAAgB,QAAQ,CAAA;AAC1D,EAAA,MAAM,iBAAiB,oBAAA,EAAqB;AAC5C,EAAA,MAAM,OAAA,GAAU,WAAA,CAAY,cAAA,EAAgB,KAAK,CAAA;AAEjD,EAAA,uBACEC,cAAA;AAAA,IAACC,8BAAA;AAAA,IAAA;AAAA,MACE,GAAG,KAAA;AAAA,MACJ,KAAA,EAAO,KAAA;AAAA,MACP,yBAAA,EAA2B,cAAA;AAAA,MAC3B,cAAA;AAAA,MACA,eAAA,EAAiB,KAAA;AAAA,MACjB,EAAA,EAAI,EAAE,OAAA,EAAS,OAAA,EAAQ;AAAA,MAEtB;AAAA;AAAA,GACH;AAEJ","file":"index.js","sourcesContent":["import { Clerk } from '@clerk/clerk-js';\n\n// Type-only import: the passkeys module is only bundled when the app imports\n// `@clerk/electron/passkeys` itself.\nimport type { PasskeySupport } from '../passkeys';\n\nconst CLERK_CLIENT_JWT_KEY = '__clerk_client_jwt';\n\ntype ClerkInstance = InstanceType<typeof Clerk>;\n\nlet cached: { instance: ClerkInstance; publishableKey: string } | null = null;\n\nfunction attachPasskeys(clerk: ClerkInstance, passkeys: PasskeySupport): void {\n  clerk.__internal_createPublicCredentials = passkeys.create;\n  clerk.__internal_getPublicCredentials = passkeys.get;\n  clerk.__internal_isWebAuthnSupported = passkeys.isSupported;\n  clerk.__internal_isWebAuthnAutofillSupported = passkeys.isAutoFillSupported;\n  clerk.__internal_isWebAuthnPlatformAuthenticatorSupported = passkeys.isPlatformAuthenticatorSupported;\n}\n\nexport function createClerkInstance(publishableKey: string, passkeys?: PasskeySupport): ClerkInstance {\n  if (cached?.publishableKey === publishableKey) {\n    if (passkeys) {\n      attachPasskeys(cached.instance, passkeys);\n    }\n    return cached.instance;\n  }\n\n  const clerk = new Clerk(publishableKey);\n\n  if (passkeys) {\n    attachPasskeys(clerk, passkeys);\n  }\n\n  clerk.__internal_onBeforeRequest(async request => {\n    request.credentials = 'omit';\n    request.url?.searchParams.append('_is_native', '1');\n    request.url?.searchParams.append('_electron_sdk_version', PACKAGE_VERSION);\n\n    const token = await window.__clerk_internal_electron?.tokenCache.getToken(CLERK_CLIENT_JWT_KEY);\n    if (token) {\n      const headers = new Headers(request.headers);\n      headers.set('Authorization', `Bearer ${token}`);\n      request.headers = headers;\n    }\n  });\n\n  clerk.__internal_onAfterResponse(async (_request, response) => {\n    const authorization = (response as Response).headers.get('Authorization');\n    if (!authorization) {\n      return;\n    }\n\n    const token = authorization.startsWith('Bearer ') ? authorization.slice('Bearer '.length) : authorization;\n    await window.__clerk_internal_electron?.tokenCache.saveToken(CLERK_CLIENT_JWT_KEY, token);\n  });\n\n  cached = { instance: clerk, publishableKey };\n  return clerk;\n}\n","import type { ClerkProviderProps as ReactClerkProviderProps } from '@clerk/react';\nimport { InternalClerkProvider as ReactClerkProvider } from '@clerk/react/internal';\nimport { loadClerkUIScript } from '@clerk/shared/loadClerkJsScript';\nimport type { ClerkUIConstructor } from '@clerk/shared/ui';\nimport type { ReactNode } from 'react';\n\nimport type { PasskeySupport } from '../passkeys';\nimport { createClerkInstance } from './create-clerk-instance';\n\ntype ClerkOAuthTransport = NonNullable<ReactClerkProviderProps['__internal_oauthTransport']>;\n\nexport type ClerkProviderProps = Omit<\n  ReactClerkProviderProps,\n  'Clerk' | 'children' | 'publishableKey' | 'standardBrowser' | 'ui' | '__internal_oauthTransport'\n> & {\n  children: ReactNode;\n  /**\n   * Your Clerk publishable key, available in the Clerk Dashboard.\n   */\n  publishableKey: string;\n  /**\n   * Enables passkey support. Pass the `passkeys` export from `@clerk/electron/passkeys`;\n   * when omitted, no passkey code is bundled or initialized.\n   *\n   * @example\n   * ```tsx\n   * import { passkeys } from '@clerk/electron/passkeys';\n   *\n   * <ClerkProvider publishableKey={publishableKey} passkeys={passkeys} />\n   * ```\n   */\n  passkeys?: PasskeySupport;\n};\n\nlet cachedClerkUI: { promise: Promise<ClerkUIConstructor>; publishableKey: string } | null = null;\n\nfunction loadClerkUI(publishableKey: string, props: Partial<ClerkProviderProps>): Promise<ClerkUIConstructor> {\n  if (cachedClerkUI?.publishableKey === publishableKey) {\n    return cachedClerkUI.promise;\n  }\n\n  // Undocumented escape hatch for self-hosting/proxying the UI bundle; not part of the public props.\n  const { __internal_clerkUIUrl, __internal_clerkUIVersion } = props as {\n    __internal_clerkUIUrl?: string;\n    __internal_clerkUIVersion?: string;\n  };\n\n  const promise = loadClerkUIScript({\n    publishableKey,\n    proxyUrl: typeof props.proxyUrl === 'string' ? props.proxyUrl : undefined,\n    domain: typeof props.domain === 'string' ? props.domain : undefined,\n    nonce: props.nonce,\n    __internal_clerkUIUrl,\n    __internal_clerkUIVersion,\n  }).then(() => {\n    if (!window.__internal_ClerkUICtor) {\n      throw new Error(\n        'Clerk: Failed to load Clerk UI from the CDN. Ensure your Content Security Policy allows the Clerk Frontend API host in `script-src`. Contact support@clerk.com.',\n      );\n    }\n    return window.__internal_ClerkUICtor;\n  });\n\n  cachedClerkUI = { promise, publishableKey };\n  return promise;\n}\n\nfunction createOAuthTransport(): ClerkOAuthTransport | undefined {\n  const bridge = window.__clerk_internal_electron?.oauthTransport;\n\n  if (!bridge) {\n    return undefined;\n  }\n\n  return {\n    getRedirectUrl: () => bridge.getRedirectUrl(),\n    open: url => bridge.open(url.href),\n  };\n}\n\nexport function ClerkProvider({ children, publishableKey, passkeys, ...props }: ClerkProviderProps): JSX.Element {\n  const clerk = createClerkInstance(publishableKey, passkeys);\n  const oauthTransport = createOAuthTransport();\n  const clerkUI = loadClerkUI(publishableKey, props);\n\n  return (\n    <ReactClerkProvider\n      {...props}\n      Clerk={clerk}\n      __internal_oauthTransport={oauthTransport}\n      publishableKey={publishableKey}\n      standardBrowser={false}\n      ui={{ ClerkUI: clerkUI }}\n    >\n      {children}\n    </ReactClerkProvider>\n  );\n}\n\nexport * from '@clerk/react';\n"]}