@clerk/shared 4.32.0-snapshot.v20260904162929 → 4.32.0

package/dist/types/oauthApplication.d.ts

@@ -96,27 +96,78 @@ type OAuthConsentInfo = {
    */
   scopes: OAuthConsentScope[];
 };
-type OAuthDeviceVerificationStatus = 'pending' | 'approved' | 'denied' | 'consumed';
+/**
+ * The current status of an OAuth device authorization.
+ *
+ * @inline
+ */
+type OAuthDeviceVerificationStatus =
+/**
+ * The device authorization is awaiting approval or denial.
+ */
+'pending'
+/**
+ * The device authorization was approved.
+ */
+| 'approved'
+/**
+ * The device authorization was denied.
+ */
+| 'denied'
+/**
+ * The approved device authorization has already been used by the device.
+ */
+| 'consumed';
 /**
  * A scope requested by an OAuth device authorization.
+ *
+ * @interface
  */
 type OAuthDeviceVerificationScope = OAuthConsentScope;
 /**
- * Information about an OAuth device authorization awaiting verification.
+ * Information about an OAuth device authorization.
+ *
+ * @interface
  */
 type OAuthDeviceVerificationInfo = {
+  /**
+   * The display name of the OAuth application requesting authorization.
+   */
   oauthApplicationName: string;
+  /**
+   * The URL of the OAuth application's logo image, or `null` if no logo is available.
+   */
   oauthApplicationLogoUrl: string | null;
+  /**
+   * The OAuth `client_id` that identifies the application requesting authorization.
+   */
   clientId: string;
+  /**
+   * The scopes the OAuth application is requesting.
+   */
   scopes: OAuthDeviceVerificationScope[];
-  status: OAuthDeviceVerificationStatus; /** Expiration time as Unix milliseconds. */
+  /**
+   * The current status of the device authorization.
+   */
+  status: OAuthDeviceVerificationStatus;
+  /**
+   * The expiration time of the device authorization, as a Unix timestamp in milliseconds.
+   */
   expiresAt: number;
 };
 /**
  * The result of approving or denying an OAuth device authorization.
+ *
+ * @interface
  */
 type OAuthDeviceVerificationResult = {
+  /**
+   * The type of the resource.
+   */
   object: 'oauth_device_verification';
+  /**
+   * The final decision for the device authorization.
+   */
   status: Extract<OAuthDeviceVerificationStatus, 'approved' | 'denied'>;
 };
 type GetOAuthConsentInfoParams = {
@@ -124,12 +175,34 @@ type GetOAuthConsentInfoParams = {
   scope?: string; /** The redirect URI from the authorize request. When provided, the backend returns a PSL-resolved `redirectDomain`. */
   redirectUri?: string;
 };
+/**
+ * The parameters for looking up an OAuth device authorization.
+ *
+ * @interface
+ */
 type LookupOAuthDeviceVerificationParams = {
+  /**
+   * The user code displayed by the device requesting authorization.
+   */
   userCode: string;
 };
+/**
+ * The parameters for approving or denying an OAuth device authorization.
+ *
+ * @interface
+ */
 type SubmitOAuthDeviceVerificationParams = {
+  /**
+   * The user code displayed by the device requesting authorization.
+   */
   userCode: string;
+  /**
+   * Whether to approve or deny the authorization request.
+   */
   approved: boolean;
+  /**
+   * The ID of the Organization to authorize the request for. Omit this to authorize the request for the user's personal account.
+   */
   organizationId?: string;
 };
 /**

package/dist/types/organization.d.mts

@@ -4,6 +4,7 @@ import { ClerkResource } from "./resource.mjs";
 import { BillingPayerMethods } from "./billing.mjs";
 import { CreateOrganizationDomainParams, OrganizationDomainResource, OrganizationDomainsBulkOwnershipVerificationResource, OrganizationEnrollmentMode } from "./organizationDomain.mjs";
 import { OrganizationJSONSnapshot } from "./snapshots.mjs";
+import { CreateDirectorySyncParams, DirectorySyncResource } from "./directorySync.mjs";
 import { CreateOrganizationEnterpriseConnectionParams, EnterpriseConnectionResource, UpdateOrganizationEnterpriseConnectionParams } from "./enterpriseConnection.mjs";
 import { EnterpriseConnectionTestRunInitResource, EnterpriseConnectionTestRunResource, GetEnterpriseConnectionTestRunsParams } from "./enterpriseConnectionTestRun.mjs";
 import { OrganizationInvitationResource, OrganizationInvitationStatus } from "./organizationInvitation.mjs";
@@ -171,7 +172,7 @@ interface OrganizationResource extends ClerkResource, BillingPayerMethods {
    */
   prepareOwnershipVerification: (domainIds: string[]) => Promise<OrganizationDomainsBulkOwnershipVerificationResource>;
   /**
-   * Completes the verification process started by [`prepareOwnershipVerification()`](https://clerk.com/docs/reference/objects/organization#prepare-ownership-verification), by resolving the published TXT record for each of the given domains in a single request. A single bad domain does not fail the batch; it lands in the returned [`OrganizationDomainsBulkOwnershipVerificationResource`](https://clerk.com/docs/reference/types/organization-domains-bulk-ownership-verification-resource) object's `errors` array.
+   * Completes the verification process started by [`prepareOwnershipVerification()`](https://clerk.com/docs/reference/objects/organization#prepareownershipverification), by resolving the published TXT record for each of the given domains in a single request. A single bad domain does not fail the batch; it lands in the returned [`OrganizationDomainsBulkOwnershipVerificationResource`](https://clerk.com/docs/reference/types/organization-domains-bulk-ownership-verification-resource) object's `errors` array.
    * @returns An [`OrganizationDomainsBulkOwnershipVerificationResource`](https://clerk.com/docs/reference/types/organization-domains-bulk-ownership-verification-resource) object.
    * @param domainIds - The unique identifiers of the domains to attempt.
    */
@@ -195,6 +196,15 @@ interface OrganizationResource extends ClerkResource, BillingPayerMethods {
   deleteEnterpriseConnection: (enterpriseConnectionId: string) => Promise<DeletedObjectResource>;
   createEnterpriseConnectionTestRun: (enterpriseConnectionId: string) => Promise<EnterpriseConnectionTestRunInitResource>;
   getEnterpriseConnectionTestRuns: (enterpriseConnectionId: string, params?: GetEnterpriseConnectionTestRunsParams) => Promise<ClerkPaginatedResponse<EnterpriseConnectionTestRunResource>>;
+  /**
+   * Gets the Directory Sync directory bound to the given enterprise connection.
+   */
+  getDirectorySync: (enterpriseConnectionId: string) => Promise<DirectorySyncResource>;
+  /**
+   * Provisions Directory Sync for the given enterprise connection. The returned resource is the only place the SCIM
+   * bearer token (`apiKey`) is ever available; rotate it to obtain a new one.
+   */
+  createDirectorySync: (enterpriseConnectionId: string, params?: CreateDirectorySyncParams) => Promise<DirectorySyncResource>;
   /**
    * Deletes the Organization. Only administrators can delete an Organization.
    *

package/dist/types/organization.d.ts

@@ -4,6 +4,7 @@ import { ClerkResource } from "./resource.js";
 import { BillingPayerMethods } from "./billing.js";
 import { CreateOrganizationDomainParams, OrganizationDomainResource, OrganizationDomainsBulkOwnershipVerificationResource, OrganizationEnrollmentMode } from "./organizationDomain.js";
 import { OrganizationJSONSnapshot } from "./snapshots.js";
+import { CreateDirectorySyncParams, DirectorySyncResource } from "./directorySync.js";
 import { CreateOrganizationEnterpriseConnectionParams, EnterpriseConnectionResource, UpdateOrganizationEnterpriseConnectionParams } from "./enterpriseConnection.js";
 import { EnterpriseConnectionTestRunInitResource, EnterpriseConnectionTestRunResource, GetEnterpriseConnectionTestRunsParams } from "./enterpriseConnectionTestRun.js";
 import { OrganizationInvitationResource, OrganizationInvitationStatus } from "./organizationInvitation.js";
@@ -171,7 +172,7 @@ interface OrganizationResource extends ClerkResource, BillingPayerMethods {
    */
   prepareOwnershipVerification: (domainIds: string[]) => Promise<OrganizationDomainsBulkOwnershipVerificationResource>;
   /**
-   * Completes the verification process started by [`prepareOwnershipVerification()`](https://clerk.com/docs/reference/objects/organization#prepare-ownership-verification), by resolving the published TXT record for each of the given domains in a single request. A single bad domain does not fail the batch; it lands in the returned [`OrganizationDomainsBulkOwnershipVerificationResource`](https://clerk.com/docs/reference/types/organization-domains-bulk-ownership-verification-resource) object's `errors` array.
+   * Completes the verification process started by [`prepareOwnershipVerification()`](https://clerk.com/docs/reference/objects/organization#prepareownershipverification), by resolving the published TXT record for each of the given domains in a single request. A single bad domain does not fail the batch; it lands in the returned [`OrganizationDomainsBulkOwnershipVerificationResource`](https://clerk.com/docs/reference/types/organization-domains-bulk-ownership-verification-resource) object's `errors` array.
    * @returns An [`OrganizationDomainsBulkOwnershipVerificationResource`](https://clerk.com/docs/reference/types/organization-domains-bulk-ownership-verification-resource) object.
    * @param domainIds - The unique identifiers of the domains to attempt.
    */
@@ -195,6 +196,15 @@ interface OrganizationResource extends ClerkResource, BillingPayerMethods {
   deleteEnterpriseConnection: (enterpriseConnectionId: string) => Promise<DeletedObjectResource>;
   createEnterpriseConnectionTestRun: (enterpriseConnectionId: string) => Promise<EnterpriseConnectionTestRunInitResource>;
   getEnterpriseConnectionTestRuns: (enterpriseConnectionId: string, params?: GetEnterpriseConnectionTestRunsParams) => Promise<ClerkPaginatedResponse<EnterpriseConnectionTestRunResource>>;
+  /**
+   * Gets the Directory Sync directory bound to the given enterprise connection.
+   */
+  getDirectorySync: (enterpriseConnectionId: string) => Promise<DirectorySyncResource>;
+  /**
+   * Provisions Directory Sync for the given enterprise connection. The returned resource is the only place the SCIM
+   * bearer token (`apiKey`) is ever available; rotate it to obtain a new one.
+   */
+  createDirectorySync: (enterpriseConnectionId: string, params?: CreateDirectorySyncParams) => Promise<DirectorySyncResource>;
   /**
    * Deletes the Organization. Only administrators can delete an Organization.
    *

package/dist/types/organizationDomain.d.mts

@@ -167,7 +167,7 @@ interface OrganizationDomainResource extends ClerkResource {
    */
   prepareAffiliationVerification: (params: PrepareAffiliationVerificationParams) => Promise<OrganizationDomainResource>;
   /**
-   * Completes the verification process started by [`prepareAffiliationVerification()`](https://clerk.com/docs/reference/types/organization-domain-resource#prepare-affiliation-verification), by validating the provided verification code.
+   * Completes the verification process started by [`prepareAffiliationVerification()`](https://clerk.com/docs/reference/types/organization-domain-resource#prepareaffiliationverification), by validating the provided verification code.
    * @returns The updated [`OrganizationDomainResource`](https://clerk.com/docs/reference/types/organization-domain-resource) object.
    */
   attemptAffiliationVerification: (params: AttemptAffiliationVerificationParams) => Promise<OrganizationDomainResource>;
@@ -220,11 +220,11 @@ interface OrganizationDomainBulkOwnershipVerificationError {
   code: string;
 }
 /**
- * The `OrganizationDomainsBulkOwnershipVerificationResource` object is the result of a bulk ownership verification flow, such as [`prepareOwnershipVerification()`](https://clerk.com/docs/reference/objects/organization#prepare-ownership-verification) or [`attemptOwnershipVerification()`](https://clerk.com/docs/reference/objects/organization#attempt-ownership-verification), where ownership is verified for several of an Organization's [Verified Domains](https://clerk.com/docs/guides/organizations/add-members/verified-domains) at once. Because the operation can partially succeed, each requested domain is reported in either `data` or `errors`.
+ * The `OrganizationDomainsBulkOwnershipVerificationResource` object is the result of a bulk ownership verification flow, such as [`prepareOwnershipVerification()`](https://clerk.com/docs/reference/objects/organization#prepareownershipverification) or [`attemptOwnershipVerification()`](https://clerk.com/docs/reference/objects/organization#attemptownershipverification), where ownership is verified for several of an Organization's [Verified Domains](https://clerk.com/docs/guides/organizations/add-members/verified-domains) at once. Because the operation can partially succeed, each requested domain is reported in either `data` or `errors`.
  */
 interface OrganizationDomainsBulkOwnershipVerificationResource {
   /**
-   * The domains that were processed successfully. After [`prepareOwnershipVerification()`](https://clerk.com/docs/reference/objects/organization#prepare-ownership-verification), each domain's `ownershipVerification` carries the `txtRecordName` and `txtRecordValue` that must be published to a DNS TXT record.
+   * The domains that were processed successfully. After [`prepareOwnershipVerification()`](https://clerk.com/docs/reference/objects/organization#prepareownershipverification), each domain's `ownershipVerification` carries the `txtRecordName` and `txtRecordValue` that must be published to a DNS TXT record.
    */
   data: OrganizationDomainResource[];
   /**

package/dist/types/organizationDomain.d.ts

@@ -167,7 +167,7 @@ interface OrganizationDomainResource extends ClerkResource {
    */
   prepareAffiliationVerification: (params: PrepareAffiliationVerificationParams) => Promise<OrganizationDomainResource>;
   /**
-   * Completes the verification process started by [`prepareAffiliationVerification()`](https://clerk.com/docs/reference/types/organization-domain-resource#prepare-affiliation-verification), by validating the provided verification code.
+   * Completes the verification process started by [`prepareAffiliationVerification()`](https://clerk.com/docs/reference/types/organization-domain-resource#prepareaffiliationverification), by validating the provided verification code.
    * @returns The updated [`OrganizationDomainResource`](https://clerk.com/docs/reference/types/organization-domain-resource) object.
    */
   attemptAffiliationVerification: (params: AttemptAffiliationVerificationParams) => Promise<OrganizationDomainResource>;
@@ -220,11 +220,11 @@ interface OrganizationDomainBulkOwnershipVerificationError {
   code: string;
 }
 /**
- * The `OrganizationDomainsBulkOwnershipVerificationResource` object is the result of a bulk ownership verification flow, such as [`prepareOwnershipVerification()`](https://clerk.com/docs/reference/objects/organization#prepare-ownership-verification) or [`attemptOwnershipVerification()`](https://clerk.com/docs/reference/objects/organization#attempt-ownership-verification), where ownership is verified for several of an Organization's [Verified Domains](https://clerk.com/docs/guides/organizations/add-members/verified-domains) at once. Because the operation can partially succeed, each requested domain is reported in either `data` or `errors`.
+ * The `OrganizationDomainsBulkOwnershipVerificationResource` object is the result of a bulk ownership verification flow, such as [`prepareOwnershipVerification()`](https://clerk.com/docs/reference/objects/organization#prepareownershipverification) or [`attemptOwnershipVerification()`](https://clerk.com/docs/reference/objects/organization#attemptownershipverification), where ownership is verified for several of an Organization's [Verified Domains](https://clerk.com/docs/guides/organizations/add-members/verified-domains) at once. Because the operation can partially succeed, each requested domain is reported in either `data` or `errors`.
  */
 interface OrganizationDomainsBulkOwnershipVerificationResource {
   /**
-   * The domains that were processed successfully. After [`prepareOwnershipVerification()`](https://clerk.com/docs/reference/objects/organization#prepare-ownership-verification), each domain's `ownershipVerification` carries the `txtRecordName` and `txtRecordValue` that must be published to a DNS TXT record.
+   * The domains that were processed successfully. After [`prepareOwnershipVerification()`](https://clerk.com/docs/reference/objects/organization#prepareownershipverification), each domain's `ownershipVerification` carries the `txtRecordName` and `txtRecordValue` that must be published to a DNS TXT record.
    */
   data: OrganizationDomainResource[];
   /**

package/dist/types/signIn.d.mts

@@ -29,6 +29,7 @@ interface SignInResource extends ClerkResource {
   supportedIdentifiers: SignInIdentifier[];
   supportedFirstFactors: SignInFirstFactor[] | null;
   supportedSecondFactors: SignInSecondFactor[] | null;
+  ssoFallbackFirstFactors: SignInFirstFactor[] | null;
   clientTrustState?: ClientTrustState;
   firstFactorVerification: VerificationResource;
   secondFactorVerification: VerificationResource;
@@ -90,6 +91,7 @@ interface SignInJSON extends ClerkResourceJSON {
   user_data: UserDataJSON;
   supported_first_factors: SignInFirstFactorJSON[];
   supported_second_factors: SignInSecondFactorJSON[];
+  sso_fallback_first_factors?: SignInFirstFactorJSON[];
   first_factor_verification: VerificationJSON | null;
   second_factor_verification: VerificationJSON | null;
   created_session_id: string | null;

package/dist/types/signIn.d.ts

@@ -29,6 +29,7 @@ interface SignInResource extends ClerkResource {
   supportedIdentifiers: SignInIdentifier[];
   supportedFirstFactors: SignInFirstFactor[] | null;
   supportedSecondFactors: SignInSecondFactor[] | null;
+  ssoFallbackFirstFactors: SignInFirstFactor[] | null;
   clientTrustState?: ClientTrustState;
   firstFactorVerification: VerificationResource;
   secondFactorVerification: VerificationResource;
@@ -90,6 +91,7 @@ interface SignInJSON extends ClerkResourceJSON {
   user_data: UserDataJSON;
   supported_first_factors: SignInFirstFactorJSON[];
   supported_second_factors: SignInSecondFactorJSON[];
+  sso_fallback_first_factors?: SignInFirstFactorJSON[];
   first_factor_verification: VerificationJSON | null;
   second_factor_verification: VerificationJSON | null;
   created_session_id: string | null;

package/dist/types/signInFuture.d.mts

@@ -26,6 +26,14 @@ interface SignInFutureCreateParams {
    * The full URL or path that the OAuth provider should redirect to after successful authorization on their part.
    */
   redirectUrl?: string;
+  /**
+   * The value to pass to the [OIDC `prompt` parameter](https://openid.net/specs/openid-connect-core-1_0.html#:~:text=prompt,reauthentication%20and%20consent.) in the generated OAuth redirect URL.
+   */
+  oidcPrompt?: string;
+  /**
+   * The value to pass to the [OIDC `login_hint` parameter](https://openid.net/specs/openid-connect-core-1_0.html#:~:text=login_hint,in%20\(if%20necessary\).) in the generated OAuth redirect URL.
+   */
+  oidcLoginHint?: string;
   /**
    * The URL that the user will be redirected to, after successful authorization from the OAuth provider and Clerk sign-in.
    */
@@ -303,13 +311,17 @@ interface SignInFutureResource {
    * Array of the second factors that are supported in the current sign-in. Each factor contains information about the verification strategy that can be used. This property is populated only when the first factor is verified.
    */
   readonly supportedSecondFactors: SignInSecondFactor[];
+  /**
+   * Factors an enterprise SSO user can fall back to when they cannot reach their identity provider. Empty unless the instance has allowlisted this user for a fallback.
+   */
+  readonly ssoFallbackFirstFactors: SignInFirstFactor[];
   /**
    * The current status of the sign-in.
    * <ul>
    * <li>`'complete'` - The sign-in process has been completed successfully.</li>
    * <li>`'needs_client_trust'` - The user is signing in from a new device and must complete a [second factor verification](!second-factor-verification) to establish [Device Trust](https://clerk.com/docs/guides/secure/device-trust). See the [Device Trust custom flow guide](https://clerk.com/docs/guides/development/custom-flows/authentication/device-trust) for more information.</li>
    * <li>`'needs_identifier'` - The user's identifier (e.g., email address, phone number, username) hasn't been provided.</li>
-   * <li>`'needs_first_factor'` - One of the following [first factor verification](!first-factor-verification) strategies is missing: `'email_link'`, `'email_code'`, `passkey`, `password`, `'phone_code'`, `'web3_base_signature'`, `'web3_metamask_signature'`, `'web3_coinbase_wallet_signature'`, `'web3_okx_wallet_signature'`, `'web3_solana_signature'`, [`OAuthStrategy`](https://clerk.com/docs/reference/types/sso#o-auth-strategy), or `'enterprise_sso'`.</li>
+   * <li>`'needs_first_factor'` - One of the following [first factor verification](!first-factor-verification) strategies is missing: `'email_link'`, `'email_code'`, `passkey`, `password`, `'phone_code'`, `'web3_base_signature'`, `'web3_metamask_signature'`, `'web3_coinbase_wallet_signature'`, `'web3_okx_wallet_signature'`, `'web3_solana_signature'`, [`OAuthStrategy`](https://clerk.com/docs/reference/types/sso#oauthstrategy), or `'enterprise_sso'`.</li>
    * <li>`'needs_second_factor'` - One of the following [second factor verification](!second-factor-verification) strategies is missing: `'phone_code'`, `'totp'`, `'backup_code'`, `'email_code'`, or `'email_link'`.</li>
    * <li>`'needs_new_password'` - The user needs to set a new password. See the [dedicated custom flow](/docs/guides/development/custom-flows/authentication/forgot-password) guide for more information.</li>
    * <li>`'needs_protect_check'` - A Clerk Protect challenge must be resolved before the sign-in can continue. This status is only returned when Protect mid-flow challenges are explicitly enabled for the instance; upgrading the SDK alone does not enable it. Run the challenge described by `protectCheck` and resolve it via `submitProtectCheck()`. The pre-built components handle this automatically.</li>
@@ -394,7 +406,7 @@ interface SignInFutureResource {
       error: ClerkError | null;
     }>;
     /**
-     * Verifies a code sent with the [`emailCode.sendCode()`](https://clerk.com/docs/reference/objects/sign-in-future#email-code-send-code) method.
+     * Verifies a code sent with the [`emailCode.sendCode()`](https://clerk.com/docs/reference/objects/sign-in-future#emailcode-sendcode) method.
      */
     verifyCode: (params: SignInFutureEmailCodeVerifyParams) => Promise<{
       error: ClerkError | null;
@@ -441,7 +453,7 @@ interface SignInFutureResource {
       error: ClerkError | null;
     }>;
     /**
-     * Verifies a code sent with the [`phoneCode.sendCode()`](https://clerk.com/docs/reference/objects/sign-in-future#phone-code-send-code) method.
+     * Verifies a code sent with the [`phoneCode.sendCode()`](https://clerk.com/docs/reference/objects/sign-in-future#phonecode-sendcode) method.
      */
     verifyCode: (params: SignInFuturePhoneCodeVerifyParams) => Promise<{
       error: ClerkError | null;
@@ -456,7 +468,7 @@ interface SignInFutureResource {
       error: ClerkError | null;
     }>;
     /**
-     * Verifies a password reset code sent with the [`resetPasswordEmailCode.sendCode()`](https://clerk.com/docs/reference/objects/sign-in-future#reset-password-email-code-send-code) method. Will cause `signIn.status` to become `'needs_new_password'`. This is when you will call the [`resetPasswordEmailCode.submitPassword()`](https://clerk.com/docs/reference/objects/sign-in-future#reset-password-email-code-submit-password) method to complete the password reset flow.
+     * Verifies a password reset code sent with the [`resetPasswordEmailCode.sendCode()`](https://clerk.com/docs/reference/objects/sign-in-future#resetpasswordemailcode-sendcode) method. Will cause `signIn.status` to become `'needs_new_password'`. This is when you will call the [`resetPasswordEmailCode.submitPassword()`](https://clerk.com/docs/reference/objects/sign-in-future#resetpasswordemailcode-submitpassword) method to complete the password reset flow.
      */
     verifyCode: (params: SignInFutureEmailCodeVerifyParams) => Promise<{
       error: ClerkError | null;
@@ -477,7 +489,7 @@ interface SignInFutureResource {
       error: ClerkError | null;
     }>;
     /**
-     * Verifies a password reset code sent with the [`resetPasswordPhoneCode.sendCode()`](https://clerk.com/docs/reference/objects/sign-in-future#reset-password-phone-code-send-code) method. Will cause `signIn.status` to become `'needs_new_password'`. This is when you will call the [`resetPasswordPhoneCode.submitPassword()`](https://clerk.com/docs/reference/objects/sign-in-future#reset-password-phone-code-submit-password) method to complete the password reset flow.
+     * Verifies a password reset code sent with the [`resetPasswordPhoneCode.sendCode()`](https://clerk.com/docs/reference/objects/sign-in-future#resetpasswordphonecode-sendcode) method. Will cause `signIn.status` to become `'needs_new_password'`. This is when you will call the [`resetPasswordPhoneCode.submitPassword()`](https://clerk.com/docs/reference/objects/sign-in-future#resetpasswordphonecode-submitpassword) method to complete the password reset flow.
      */
     verifyCode: (params: SignInFutureResetPasswordPhoneCodeVerifyParams) => Promise<{
       error: ClerkError | null;
@@ -504,7 +516,7 @@ interface SignInFutureResource {
       error: ClerkError | null;
     }>;
     /**
-     * Verifies a phone code sent with the [`mfa.sendPhoneCode()`](https://clerk.com/docs/reference/objects/sign-in-future#mfa-send-phone-code) method.
+     * Verifies a phone code sent with the [`mfa.sendPhoneCode()`](https://clerk.com/docs/reference/objects/sign-in-future#mfa-sendphonecode) method.
      */
     verifyPhoneCode: (params: SignInFutureMFAPhoneCodeVerifyParams) => Promise<{
       error: ClerkError | null;
@@ -516,7 +528,7 @@ interface SignInFutureResource {
       error: ClerkError | null;
     }>;
     /**
-     * Verifies an email code sent with the [`mfa.sendEmailCode()`](https://clerk.com/docs/reference/objects/sign-in-future#mfa-send-email-code) method.
+     * Verifies an email code sent with the [`mfa.sendEmailCode()`](https://clerk.com/docs/reference/objects/sign-in-future#mfa-sendemailcode) method.
      */
     verifyEmailCode: (params: SignInFutureMFAEmailCodeVerifyParams) => Promise<{
       error: ClerkError | null;

package/dist/types/signInFuture.d.ts

@@ -26,6 +26,14 @@ interface SignInFutureCreateParams {
    * The full URL or path that the OAuth provider should redirect to after successful authorization on their part.
    */
   redirectUrl?: string;
+  /**
+   * The value to pass to the [OIDC `prompt` parameter](https://openid.net/specs/openid-connect-core-1_0.html#:~:text=prompt,reauthentication%20and%20consent.) in the generated OAuth redirect URL.
+   */
+  oidcPrompt?: string;
+  /**
+   * The value to pass to the [OIDC `login_hint` parameter](https://openid.net/specs/openid-connect-core-1_0.html#:~:text=login_hint,in%20\(if%20necessary\).) in the generated OAuth redirect URL.
+   */
+  oidcLoginHint?: string;
   /**
    * The URL that the user will be redirected to, after successful authorization from the OAuth provider and Clerk sign-in.
    */
@@ -303,13 +311,17 @@ interface SignInFutureResource {
    * Array of the second factors that are supported in the current sign-in. Each factor contains information about the verification strategy that can be used. This property is populated only when the first factor is verified.
    */
   readonly supportedSecondFactors: SignInSecondFactor[];
+  /**
+   * Factors an enterprise SSO user can fall back to when they cannot reach their identity provider. Empty unless the instance has allowlisted this user for a fallback.
+   */
+  readonly ssoFallbackFirstFactors: SignInFirstFactor[];
   /**
    * The current status of the sign-in.
    * <ul>
    * <li>`'complete'` - The sign-in process has been completed successfully.</li>
    * <li>`'needs_client_trust'` - The user is signing in from a new device and must complete a [second factor verification](!second-factor-verification) to establish [Device Trust](https://clerk.com/docs/guides/secure/device-trust). See the [Device Trust custom flow guide](https://clerk.com/docs/guides/development/custom-flows/authentication/device-trust) for more information.</li>
    * <li>`'needs_identifier'` - The user's identifier (e.g., email address, phone number, username) hasn't been provided.</li>
-   * <li>`'needs_first_factor'` - One of the following [first factor verification](!first-factor-verification) strategies is missing: `'email_link'`, `'email_code'`, `passkey`, `password`, `'phone_code'`, `'web3_base_signature'`, `'web3_metamask_signature'`, `'web3_coinbase_wallet_signature'`, `'web3_okx_wallet_signature'`, `'web3_solana_signature'`, [`OAuthStrategy`](https://clerk.com/docs/reference/types/sso#o-auth-strategy), or `'enterprise_sso'`.</li>
+   * <li>`'needs_first_factor'` - One of the following [first factor verification](!first-factor-verification) strategies is missing: `'email_link'`, `'email_code'`, `passkey`, `password`, `'phone_code'`, `'web3_base_signature'`, `'web3_metamask_signature'`, `'web3_coinbase_wallet_signature'`, `'web3_okx_wallet_signature'`, `'web3_solana_signature'`, [`OAuthStrategy`](https://clerk.com/docs/reference/types/sso#oauthstrategy), or `'enterprise_sso'`.</li>
    * <li>`'needs_second_factor'` - One of the following [second factor verification](!second-factor-verification) strategies is missing: `'phone_code'`, `'totp'`, `'backup_code'`, `'email_code'`, or `'email_link'`.</li>
    * <li>`'needs_new_password'` - The user needs to set a new password. See the [dedicated custom flow](/docs/guides/development/custom-flows/authentication/forgot-password) guide for more information.</li>
    * <li>`'needs_protect_check'` - A Clerk Protect challenge must be resolved before the sign-in can continue. This status is only returned when Protect mid-flow challenges are explicitly enabled for the instance; upgrading the SDK alone does not enable it. Run the challenge described by `protectCheck` and resolve it via `submitProtectCheck()`. The pre-built components handle this automatically.</li>
@@ -394,7 +406,7 @@ interface SignInFutureResource {
       error: ClerkError | null;
     }>;
     /**
-     * Verifies a code sent with the [`emailCode.sendCode()`](https://clerk.com/docs/reference/objects/sign-in-future#email-code-send-code) method.
+     * Verifies a code sent with the [`emailCode.sendCode()`](https://clerk.com/docs/reference/objects/sign-in-future#emailcode-sendcode) method.
      */
     verifyCode: (params: SignInFutureEmailCodeVerifyParams) => Promise<{
       error: ClerkError | null;
@@ -441,7 +453,7 @@ interface SignInFutureResource {
       error: ClerkError | null;
     }>;
     /**
-     * Verifies a code sent with the [`phoneCode.sendCode()`](https://clerk.com/docs/reference/objects/sign-in-future#phone-code-send-code) method.
+     * Verifies a code sent with the [`phoneCode.sendCode()`](https://clerk.com/docs/reference/objects/sign-in-future#phonecode-sendcode) method.
      */
     verifyCode: (params: SignInFuturePhoneCodeVerifyParams) => Promise<{
       error: ClerkError | null;
@@ -456,7 +468,7 @@ interface SignInFutureResource {
       error: ClerkError | null;
     }>;
     /**
-     * Verifies a password reset code sent with the [`resetPasswordEmailCode.sendCode()`](https://clerk.com/docs/reference/objects/sign-in-future#reset-password-email-code-send-code) method. Will cause `signIn.status` to become `'needs_new_password'`. This is when you will call the [`resetPasswordEmailCode.submitPassword()`](https://clerk.com/docs/reference/objects/sign-in-future#reset-password-email-code-submit-password) method to complete the password reset flow.
+     * Verifies a password reset code sent with the [`resetPasswordEmailCode.sendCode()`](https://clerk.com/docs/reference/objects/sign-in-future#resetpasswordemailcode-sendcode) method. Will cause `signIn.status` to become `'needs_new_password'`. This is when you will call the [`resetPasswordEmailCode.submitPassword()`](https://clerk.com/docs/reference/objects/sign-in-future#resetpasswordemailcode-submitpassword) method to complete the password reset flow.
      */
     verifyCode: (params: SignInFutureEmailCodeVerifyParams) => Promise<{
       error: ClerkError | null;
@@ -477,7 +489,7 @@ interface SignInFutureResource {
       error: ClerkError | null;
     }>;
     /**
-     * Verifies a password reset code sent with the [`resetPasswordPhoneCode.sendCode()`](https://clerk.com/docs/reference/objects/sign-in-future#reset-password-phone-code-send-code) method. Will cause `signIn.status` to become `'needs_new_password'`. This is when you will call the [`resetPasswordPhoneCode.submitPassword()`](https://clerk.com/docs/reference/objects/sign-in-future#reset-password-phone-code-submit-password) method to complete the password reset flow.
+     * Verifies a password reset code sent with the [`resetPasswordPhoneCode.sendCode()`](https://clerk.com/docs/reference/objects/sign-in-future#resetpasswordphonecode-sendcode) method. Will cause `signIn.status` to become `'needs_new_password'`. This is when you will call the [`resetPasswordPhoneCode.submitPassword()`](https://clerk.com/docs/reference/objects/sign-in-future#resetpasswordphonecode-submitpassword) method to complete the password reset flow.
      */
     verifyCode: (params: SignInFutureResetPasswordPhoneCodeVerifyParams) => Promise<{
       error: ClerkError | null;
@@ -504,7 +516,7 @@ interface SignInFutureResource {
       error: ClerkError | null;
     }>;
     /**
-     * Verifies a phone code sent with the [`mfa.sendPhoneCode()`](https://clerk.com/docs/reference/objects/sign-in-future#mfa-send-phone-code) method.
+     * Verifies a phone code sent with the [`mfa.sendPhoneCode()`](https://clerk.com/docs/reference/objects/sign-in-future#mfa-sendphonecode) method.
      */
     verifyPhoneCode: (params: SignInFutureMFAPhoneCodeVerifyParams) => Promise<{
       error: ClerkError | null;
@@ -516,7 +528,7 @@ interface SignInFutureResource {
       error: ClerkError | null;
     }>;
     /**
-     * Verifies an email code sent with the [`mfa.sendEmailCode()`](https://clerk.com/docs/reference/objects/sign-in-future#mfa-send-email-code) method.
+     * Verifies an email code sent with the [`mfa.sendEmailCode()`](https://clerk.com/docs/reference/objects/sign-in-future#mfa-sendemailcode) method.
      */
     verifyEmailCode: (params: SignInFutureMFAEmailCodeVerifyParams) => Promise<{
       error: ClerkError | null;

package/dist/types/signUpFuture.d.mts

@@ -37,7 +37,7 @@ interface SignUpFutureCreateParams extends SignUpFutureAdditionalParams {
    * <li>`'oauth_<provider>'`: The user will be authenticated with their [social connection account](https://clerk.com/docs/guides/configure/auth-strategies/social-connections/overview). See a list of [supported values for `<provider>`](https://clerk.com/docs/reference/types/sso).</li>
    * <li>`'enterprise_sso'`: The user will be authenticated either through SAML or OIDC depending on the configuration of their [enterprise SSO account](https://clerk.com/docs/guides/configure/auth-strategies/enterprise-connections/overview).</li>
    * <li>`'ticket'`: The user will be authenticated via the ticket _or token_ generated from the Backend API.</li>
-   * <li>`'google_one_tap'`: The user will be authenticated with the Google One Tap UI. It's recommended to use [`authenticateWithGoogleOneTap()`](https://clerk.com/docs/reference/components/authentication/google-one-tap#authenticate-with-google-one-tap) instead, as it will also set the user's current session as active for you.</li>
+   * <li>`'google_one_tap'`: The user will be authenticated with the Google One Tap UI. It's recommended to use [`authenticateWithGoogleOneTap()`](https://clerk.com/docs/reference/components/authentication/google-one-tap#authenticatewithgoogleonetap) instead, as it will also set the user's current session as active for you.</li>
    * <li>`'oauth_token_apple'`: The user will be authenticated using a native [Sign in with Apple](https://clerk.com/docs/guides/configure/auth-strategies/sign-in-with-apple) identity token.</li>
    * <li>`'phone_code'`: The user will receive a one-time code via SMS to verify their phone number.</li>
    * </ul>
@@ -184,7 +184,7 @@ interface SignUpFuturePhoneCodeVerifyParams {
 /** @generateWithEmptyComment */
 interface SignUpFutureSSOParams extends SignUpFutureAdditionalParams {
   /**
-   * The strategy to use for authentication. Either [`OAuthStrategy`](https://clerk.com/docs/reference/types/sso#o-auth-strategy) or [`EnterpriseSSOStrategy`](https://clerk.com/docs/reference/types/sso#enterprise-sso-strategy).
+   * The strategy to use for authentication. Either [`OAuthStrategy`](https://clerk.com/docs/reference/types/sso#oauthstrategy) or [`EnterpriseSSOStrategy`](https://clerk.com/docs/reference/types/sso#enterprisessostrategy).
    */
   strategy: string;
   /**
@@ -293,7 +293,7 @@ interface SignUpFutureVerifications {
     error: ClerkError | null;
   }>;
   /**
-   * Verifies a code sent with the [`verifications.sendEmailCode()`](https://clerk.com/docs/reference/objects/sign-up-future#verifications-send-email-code) method.
+   * Verifies a code sent with the [`verifications.sendEmailCode()`](https://clerk.com/docs/reference/objects/sign-up-future#verifications-sendemailcode) method.
    */
   verifyEmailCode: (params: SignUpFutureEmailCodeVerifyParams) => Promise<{
     error: ClerkError | null;
@@ -305,7 +305,7 @@ interface SignUpFutureVerifications {
     error: ClerkError | null;
   }>;
   /**
-   * Will wait for email link verification to complete or expire after calling [`verifications.sendEmailLink()`](https://clerk.com/docs/reference/objects/sign-up-future#verifications-send-email-link).
+   * Will wait for email link verification to complete or expire after calling [`verifications.sendEmailLink()`](https://clerk.com/docs/reference/objects/sign-up-future#verifications-sendemaillink).
    */
   waitForEmailLinkVerification: () => Promise<{
     error: ClerkError | null;
@@ -317,7 +317,7 @@ interface SignUpFutureVerifications {
     error: ClerkError | null;
   }>;
   /**
-   * Verifies a code sent with the [`verifications.sendPhoneCode()`](https://clerk.com/docs/reference/objects/sign-up-future#verifications-send-phone-code) method.
+   * Verifies a code sent with the [`verifications.sendPhoneCode()`](https://clerk.com/docs/reference/objects/sign-up-future#verifications-sendphonecode) method.
    */
   verifyPhoneCode: (params: SignUpFuturePhoneCodeVerifyParams) => Promise<{
     error: ClerkError | null;

package/dist/types/signUpFuture.d.ts

@@ -37,7 +37,7 @@ interface SignUpFutureCreateParams extends SignUpFutureAdditionalParams {
    * <li>`'oauth_<provider>'`: The user will be authenticated with their [social connection account](https://clerk.com/docs/guides/configure/auth-strategies/social-connections/overview). See a list of [supported values for `<provider>`](https://clerk.com/docs/reference/types/sso).</li>
    * <li>`'enterprise_sso'`: The user will be authenticated either through SAML or OIDC depending on the configuration of their [enterprise SSO account](https://clerk.com/docs/guides/configure/auth-strategies/enterprise-connections/overview).</li>
    * <li>`'ticket'`: The user will be authenticated via the ticket _or token_ generated from the Backend API.</li>
-   * <li>`'google_one_tap'`: The user will be authenticated with the Google One Tap UI. It's recommended to use [`authenticateWithGoogleOneTap()`](https://clerk.com/docs/reference/components/authentication/google-one-tap#authenticate-with-google-one-tap) instead, as it will also set the user's current session as active for you.</li>
+   * <li>`'google_one_tap'`: The user will be authenticated with the Google One Tap UI. It's recommended to use [`authenticateWithGoogleOneTap()`](https://clerk.com/docs/reference/components/authentication/google-one-tap#authenticatewithgoogleonetap) instead, as it will also set the user's current session as active for you.</li>
    * <li>`'oauth_token_apple'`: The user will be authenticated using a native [Sign in with Apple](https://clerk.com/docs/guides/configure/auth-strategies/sign-in-with-apple) identity token.</li>
    * <li>`'phone_code'`: The user will receive a one-time code via SMS to verify their phone number.</li>
    * </ul>
@@ -184,7 +184,7 @@ interface SignUpFuturePhoneCodeVerifyParams {
 /** @generateWithEmptyComment */
 interface SignUpFutureSSOParams extends SignUpFutureAdditionalParams {
   /**
-   * The strategy to use for authentication. Either [`OAuthStrategy`](https://clerk.com/docs/reference/types/sso#o-auth-strategy) or [`EnterpriseSSOStrategy`](https://clerk.com/docs/reference/types/sso#enterprise-sso-strategy).
+   * The strategy to use for authentication. Either [`OAuthStrategy`](https://clerk.com/docs/reference/types/sso#oauthstrategy) or [`EnterpriseSSOStrategy`](https://clerk.com/docs/reference/types/sso#enterprisessostrategy).
    */
   strategy: string;
   /**
@@ -293,7 +293,7 @@ interface SignUpFutureVerifications {
     error: ClerkError | null;
   }>;
   /**
-   * Verifies a code sent with the [`verifications.sendEmailCode()`](https://clerk.com/docs/reference/objects/sign-up-future#verifications-send-email-code) method.
+   * Verifies a code sent with the [`verifications.sendEmailCode()`](https://clerk.com/docs/reference/objects/sign-up-future#verifications-sendemailcode) method.
    */
   verifyEmailCode: (params: SignUpFutureEmailCodeVerifyParams) => Promise<{
     error: ClerkError | null;
@@ -305,7 +305,7 @@ interface SignUpFutureVerifications {
     error: ClerkError | null;
   }>;
   /**
-   * Will wait for email link verification to complete or expire after calling [`verifications.sendEmailLink()`](https://clerk.com/docs/reference/objects/sign-up-future#verifications-send-email-link).
+   * Will wait for email link verification to complete or expire after calling [`verifications.sendEmailLink()`](https://clerk.com/docs/reference/objects/sign-up-future#verifications-sendemaillink).
    */
   waitForEmailLinkVerification: () => Promise<{
     error: ClerkError | null;
@@ -317,7 +317,7 @@ interface SignUpFutureVerifications {
     error: ClerkError | null;
   }>;
   /**
-   * Verifies a code sent with the [`verifications.sendPhoneCode()`](https://clerk.com/docs/reference/objects/sign-up-future#verifications-send-phone-code) method.
+   * Verifies a code sent with the [`verifications.sendPhoneCode()`](https://clerk.com/docs/reference/objects/sign-up-future#verifications-sendphonecode) method.
    */
   verifyPhoneCode: (params: SignUpFuturePhoneCodeVerifyParams) => Promise<{
     error: ClerkError | null;

package/dist/types/user.d.mts

@@ -371,7 +371,7 @@ type CreateExternalAccountParams = {
    */
   enterpriseConnectionId?: string;
   /**
-   * The full URL or path that the OAuth provider should redirect to, on successful authorization on their part. Typically, this will be a simple `/sso-callback` route that calls [`Clerk.handleRedirectCallback`](https://clerk.com/docs/reference/objects/clerk#handle-redirect-callback) or mounts the [`<AuthenticateWithRedirectCallback />`](https://clerk.com/docs/reference/components/control/authenticate-with-redirect-callback) component. See the [custom flow](https://clerk.com/docs/guides/development/custom-flows/authentication/oauth-connections) for implementation details.
+   * The full URL or path that the OAuth provider should redirect to, on successful authorization on their part. Typically, this will be a simple `/sso-callback` route that calls [`Clerk.handleRedirectCallback`](https://clerk.com/docs/reference/objects/clerk#handleredirectcallback) or mounts the [`<AuthenticateWithRedirectCallback />`](https://clerk.com/docs/reference/components/control/authenticate-with-redirect-callback) component. See the [custom flow](https://clerk.com/docs/guides/development/custom-flows/authentication/oauth-connections) for implementation details.
       */
   redirectUrl?: string;
   /**

package/dist/types/user.d.ts

@@ -371,7 +371,7 @@ type CreateExternalAccountParams = {
    */
   enterpriseConnectionId?: string;
   /**
-   * The full URL or path that the OAuth provider should redirect to, on successful authorization on their part. Typically, this will be a simple `/sso-callback` route that calls [`Clerk.handleRedirectCallback`](https://clerk.com/docs/reference/objects/clerk#handle-redirect-callback) or mounts the [`<AuthenticateWithRedirectCallback />`](https://clerk.com/docs/reference/components/control/authenticate-with-redirect-callback) component. See the [custom flow](https://clerk.com/docs/guides/development/custom-flows/authentication/oauth-connections) for implementation details.
+   * The full URL or path that the OAuth provider should redirect to, on successful authorization on their part. Typically, this will be a simple `/sso-callback` route that calls [`Clerk.handleRedirectCallback`](https://clerk.com/docs/reference/objects/clerk#handleredirectcallback) or mounts the [`<AuthenticateWithRedirectCallback />`](https://clerk.com/docs/reference/components/control/authenticate-with-redirect-callback) component. See the [custom flow](https://clerk.com/docs/guides/development/custom-flows/authentication/oauth-connections) for implementation details.
       */
   redirectUrl?: string;
   /**

package/dist/types/userSettings.d.mts

@@ -75,7 +75,8 @@ type PasskeySettingsData = {
 type OAuthProviders = { [provider in OAuthStrategy]: OAuthProviderSettings };
 type EnterpriseSSOSettings = {
   enabled: boolean;
-  self_serve_sso: boolean;
+  self_serve_sso: boolean; /** Whether end-users may manage Directory Sync for their enterprise connections. */
+  self_serve_directory_sync: boolean;
 };
 type AttributesJSON = { [attribute in Attribute]: AttributeDataJSON };
 type Attributes = { [attribute in Attribute]: AttributeData };

package/dist/types/userSettings.d.ts

@@ -75,7 +75,8 @@ type PasskeySettingsData = {
 type OAuthProviders = { [provider in OAuthStrategy]: OAuthProviderSettings };
 type EnterpriseSSOSettings = {
   enabled: boolean;
-  self_serve_sso: boolean;
+  self_serve_sso: boolean; /** Whether end-users may manage Directory Sync for their enterprise connections. */
+  self_serve_directory_sync: boolean;
 };
 type AttributesJSON = { [attribute in Attribute]: AttributeDataJSON };
 type Attributes = { [attribute in Attribute]: AttributeData };

package/dist/versionSelector.js

@@ -12,7 +12,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 * @param packageVersion - The version of `@clerk/clerk-js` that will be used if an explicit version is not provided
 * @returns The npm tag, version or major version to use
 */
-const versionSelector = (clerkJSVersion, packageVersion = "6.31.1-snapshot.v20260904162929") => {
+const versionSelector = (clerkJSVersion, packageVersion = "6.32.0") => {
 	if (clerkJSVersion) return clerkJSVersion;
 	const prereleaseTag = getPrereleaseTag(packageVersion);
 	if (prereleaseTag) {

package/dist/versionSelector.js.map

@@ -1 +1 @@
-{"version":3,"file":"versionSelector.js","names":[],"sources":["../src/versionSelector.ts"],"sourcesContent":["/**\n * This version selector is a bit complicated, so here is the flow:\n * 1. Use the clerkJSVersion prop on the provider\n * 2. Use the exact `@clerk/clerk-js` version if it is a `@snapshot` prerelease\n * 3. Use the prerelease tag of `@clerk/clerk-js` or the packageVersion provided\n * 4. Fallback to the major version of `@clerk/clerk-js` or the packageVersion provided\n *\n * @param clerkJSVersion - The optional clerkJSVersion prop on the provider\n * @param packageVersion - The version of `@clerk/clerk-js` that will be used if an explicit version is not provided\n * @returns The npm tag, version or major version to use\n */\nexport const versionSelector = (clerkJSVersion: string | undefined, packageVersion = JS_PACKAGE_VERSION) => {\n  if (clerkJSVersion) {\n    return clerkJSVersion;\n  }\n\n  const prereleaseTag = getPrereleaseTag(packageVersion);\n  if (prereleaseTag) {\n    if (prereleaseTag === 'snapshot') {\n      return packageVersion;\n    }\n\n    return prereleaseTag;\n  }\n\n  return getMajorVersion(packageVersion);\n};\n\nconst getPrereleaseTag = (packageVersion: string) =>\n  packageVersion\n    .trim()\n    .replace(/^v/, '')\n    .match(/-(.+?)(\\.|$)/)?.[1];\n\nexport const getMajorVersion = (packageVersion: string) => packageVersion.trim().replace(/^v/, '').split('.')[0];\n"],"mappings":";;;;;;;;;;;;;;AAWA,MAAa,mBAAmB,gBAAoC,uDAAwC;CAC1G,IAAI,gBACF,OAAO;CAGT,MAAM,gBAAgB,iBAAiB,cAAc;CACrD,IAAI,eAAe;EACjB,IAAI,kBAAkB,YACpB,OAAO;EAGT,OAAO;CACT;CAEA,OAAO,gBAAgB,cAAc;AACvC;AAEA,MAAM,oBAAoB,mBACxB,eACG,KAAK,CAAC,CACN,QAAQ,MAAM,EAAE,CAAC,CACjB,MAAM,cAAc,CAAC,GAAG;AAE7B,MAAa,mBAAmB,mBAA2B,eAAe,KAAK,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC"}
+{"version":3,"file":"versionSelector.js","names":[],"sources":["../src/versionSelector.ts"],"sourcesContent":["/**\n * This version selector is a bit complicated, so here is the flow:\n * 1. Use the clerkJSVersion prop on the provider\n * 2. Use the exact `@clerk/clerk-js` version if it is a `@snapshot` prerelease\n * 3. Use the prerelease tag of `@clerk/clerk-js` or the packageVersion provided\n * 4. Fallback to the major version of `@clerk/clerk-js` or the packageVersion provided\n *\n * @param clerkJSVersion - The optional clerkJSVersion prop on the provider\n * @param packageVersion - The version of `@clerk/clerk-js` that will be used if an explicit version is not provided\n * @returns The npm tag, version or major version to use\n */\nexport const versionSelector = (clerkJSVersion: string | undefined, packageVersion = JS_PACKAGE_VERSION) => {\n  if (clerkJSVersion) {\n    return clerkJSVersion;\n  }\n\n  const prereleaseTag = getPrereleaseTag(packageVersion);\n  if (prereleaseTag) {\n    if (prereleaseTag === 'snapshot') {\n      return packageVersion;\n    }\n\n    return prereleaseTag;\n  }\n\n  return getMajorVersion(packageVersion);\n};\n\nconst getPrereleaseTag = (packageVersion: string) =>\n  packageVersion\n    .trim()\n    .replace(/^v/, '')\n    .match(/-(.+?)(\\.|$)/)?.[1];\n\nexport const getMajorVersion = (packageVersion: string) => packageVersion.trim().replace(/^v/, '').split('.')[0];\n"],"mappings":";;;;;;;;;;;;;;AAWA,MAAa,mBAAmB,gBAAoC,8BAAwC;CAC1G,IAAI,gBACF,OAAO;CAGT,MAAM,gBAAgB,iBAAiB,cAAc;CACrD,IAAI,eAAe;EACjB,IAAI,kBAAkB,YACpB,OAAO;EAGT,OAAO;CACT;CAEA,OAAO,gBAAgB,cAAc;AACvC;AAEA,MAAM,oBAAoB,mBACxB,eACG,KAAK,CAAC,CACN,QAAQ,MAAM,EAAE,CAAC,CACjB,MAAM,cAAc,CAAC,GAAG;AAE7B,MAAa,mBAAmB,mBAA2B,eAAe,KAAK,CAAC,CAAC,QAAQ,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC"}