@descope/web-component 3.70.5 → 3.70.7

package/dist/esm/helpers/helpers.js

@@ -1,2 +1,2 @@
-import{__awaiter as t}from"tslib";import{URL_RUN_IDS_PARAM_NAME as e,URL_TOKEN_PARAM_NAME as n,URL_CODE_PARAM_NAME as o,URL_REDIRECT_MODE_PARAM_NAME as r,URL_ERR_PARAM_NAME as i,OIDC_IDP_STATE_ID_PARAM_NAME as c,SAML_IDP_STATE_ID_PARAM_NAME as u,WSFED_IDP_STATE_ID_PARAM_NAME as d,SAML_IDP_USERNAME_PARAM_NAME as s,DESCOPE_IDP_INITIATED_PARAM_NAME as a,SSO_APP_ID_PARAM_NAME as l,CUSTOM_APP_ID_PARAM_NAME as p,THIRD_PARTY_APP_ID_PARAM_NAME as m,THIRD_PARTY_APP_STATE_ID_PARAM_NAME as f,APPLICATION_SCOPES_PARAM_NAME as h,OIDC_LOGIN_HINT_PARAM_NAME as v,OIDC_PROMPT_PARAM_NAME as w,OIDC_ERROR_REDIRECT_URI_PARAM_NAME as S,OIDC_RESOURCE_PARAM_NAME as g,DESCOPE_ATTRIBUTE_PREFIX as y,SDK_SCRIPT_RESULTS_KEY as A,URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME as b,URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME as I,URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME as C,URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME as E}from"../constants/index.js";import{EXCLUDED_STATE_KEYS as P}from"../constants/customScreens.js";import{Direction as k}from"../types.js";import{OVERRIDE_CONTENT_URL as x,BASE_CONTENT_URL as T,ASSETS_FOLDER as U}from"../constants/content.js";const L=["descope-enriched-text"];function $(e,n,o){return(...r)=>t(this,void 0,void 0,(function*(){let t;const i=o+1;for(let c=0;c<i;c++)try{return yield e(...r)}catch(e){t=e,c<o&&(yield new Promise((t=>{setTimeout(t,n*Math.pow(2,c+1))})))}throw t}))}function O(t){return new URLSearchParams(window.location.search).get(t)}function j(t){if(window.history.replaceState&&O(t)){const e=new URL(window.location.href),n=new URLSearchParams(e.search);n.delete(t),e.search=n.toString(),window.history.replaceState({},"",e.toString())}}function R(e,n){return t(this,void 0,void 0,(function*(){const t=yield fetch(e,{cache:"default"});if(!t.ok)throw Error(`Error fetching URL ${e} [${t.status}]`);return{body:yield t[n](),headers:Object.fromEntries(t.headers.entries())}}))}function F({projectId:t,filename:e,assetsFolder:n=U,baseUrl:o}){const r=new URL(x||o||T);return r.pathname=((...t)=>t.join("/").replace(/\/+/g,"/"))(r.pathname,t,n,e),r.toString()}function N(t,e){if(!e)return;const n=+t,o=+e;return Number.isNaN(n)||Number.isNaN(o)?void 0:n>o?k.forward:n<o?k.backward:void 0}const B=t=>{let[n="",o=""]=(O(e)||"").split("_");const r=(t=>{var e;return(null===(e=/(.*)\|#\|.*/.exec(t))||void 0===e?void 0:e[1])||""})(n);return(!t||r&&r!==t)&&(n="",o=""),{executionId:n,stepId:o,executionFlowId:r}};function H(){return/Chrome/.test(navigator.userAgent)&&/Google Inc/.test(navigator.vendor)}function M(){j(e)}function W(){return O(n)||void 0}function q(){j(n)}function _(){return O(o)||void 0}function Q(){return"popup"===O(r)}function z(){return O(i)||void 0}function D(){j(o)}function G(){j(r)}function V(){j(i)}function J(){return{redirectAuthCodeChallenge:O(b),redirectAuthCallbackUrl:O(I),redirectAuthBackupCallbackUri:O(C),redirectAuthInitiator:O(E)}}function K(){return O(c)}function X(){j(c)}function Y(){return O(u)}function Z(){j(u)}function tt(){return O(d)}function et(){j(d)}function nt(){return O(s)}function ot(){j(s)}function rt(){return O(a)}function it(){j(a)}function ct(){return O(l)}function ut(){return O(p)}function dt(){return O(m)}function st(){j(l)}function at(){j(p)}function lt(){j(m)}function pt(){return O(f)}function mt(){j(f)}function ft(){return O(h)}function ht(){j(h)}function vt(){return O(v)}function wt(){j(v)}function St(){return O(w)}function gt(){j(w)}function yt(){return O(S)}function At(){j(S)}function bt(){return O(g)}function It(){j(g)}const Ct=t=>t.replace(/-./g,(t=>t[1].toUpperCase())),Et=(t,e)=>n=>t[n]!==e[n],Pt=t=>Array.from((null==t?void 0:t.attributes)||[]).reduce(((t,e)=>{var n;const o=null===(n=new RegExp(`^${y}(\\S+)$`).exec(e.name))||void 0===n?void 0:n[1];return o?Object.assign(t,{[o]:e.value}):t}),{}),kt=(t,e)=>{const{executionId:n,stepId:o,executionFlowId:r}=B(t);if(r&&t!==r)return e.debug("Flow id does not match the execution flow id, skipping url params handling"),{ssoQueryParams:{}};(n||o)&&M();const i=W();i&&q();const c=_();c&&D();const u=Q();u&&G();const d=z();d&&V();const{redirectAuthCodeChallenge:s,redirectAuthCallbackUrl:a,redirectAuthBackupCallbackUri:l,redirectAuthInitiator:p}=J(),m=K();m&&X();const f=Y();f&&Z();const h=tt();h&&et();const v=nt();f&&ot();const w=rt();w&&it();const S=ct();S&&st();const g=ut();g&&at();const y=dt();y&&lt();const A=pt();A&&mt();const b=ft();b&&ht();const I=vt();I&&wt();const C=St();C&&gt();const E=yt();E&&At();const P=bt();P&&It();return{executionId:n,stepId:o,token:i,code:c,isPopup:u,exchangeError:d,redirectAuthCodeChallenge:s,redirectAuthCallbackUrl:a,redirectAuthBackupCallbackUri:l,redirectAuthInitiator:p,ssoQueryParams:{oidcIdpStateId:m,samlIdpStateId:f,wsfedIdpStateId:h,samlIdpUsername:v,descopeIdpInitiated:"true"===w,ssoAppId:S,customAppId:g,oidcLoginHint:I,oidcPrompt:C,oidcErrorRedirectUri:E,oidcResource:P,thirdPartyAppId:y,thirdPartyAppStateId:A,applicationScopes:b}}},xt=t=>{let e,n;return Object.assign(((...o)=>{return e&&(i=o,(r=e).length===i.length&&r.every(((t,e)=>t===i[e])))||(e=o,n=t(...o)),n;var r,i}),{reset:()=>{e=void 0,n=void 0}})},Tt='*[name]:not([auto-focus="false"]):not([aria-hidden="true"])',Ut=(t,e,n)=>{if(!0===e||"skipFirstScreen"===e&&!n){const e=t.querySelector(Tt);setTimeout((()=>{null==e||e.focus()}))}},Lt=t=>{t.querySelectorAll("*[name]").forEach((e=>{e.addEventListener("blur",(()=>{var n;const o=()=>{var t;const n=e.focus;e.focus=()=>{},null===(t=e.reportValidity)||void 0===t||t.call(e),setTimeout((()=>{e.focus=n}))};if("true"===e.getAttribute("invalid")||(null===(n=e.value)||void 0===n?void 0:n.length))return void o();const r={timer:void 0},i=t=>{"true"===t.target.getAttribute("formnovalidate")&&(clearTimeout(r.timer),r.timer=void 0)};r.timer=setTimeout((()=>{t.removeEventListener("click",i),o(),r.timer=void 0}),150),t.addEventListener("click",i,{once:!0})}))}))};function $t(t,e,n){return new Promise(((o,r)=>{let i=!1;const c=setTimeout((()=>{i=!0,void 0!==n?o(n):r(new Error(`Promise timed out after ${t} ms`))}),t);e.then((t=>{i||(clearTimeout(c),o(t))})).catch((t=>{i||(clearTimeout(c),r(t))}))}))}const Ot=()=>{var t;const e=null===(t=null===navigator||void 0===navigator?void 0:navigator.userAgentData)||void 0===t?void 0:t.brands,n=null==e?void 0:e.find((({brand:t,version:e})=>"Chromium"===t&&parseFloat(e)));return n?n.version:0},jt=(t,{oidcIdpStateId:e,samlIdpStateId:n,wsfedIdpStateId:o,samlIdpUsername:r,ssoAppId:i,customAppId:c,oidcLoginHint:u,oidcPrompt:d,oidcErrorRedirectUri:s,oidcResource:a,thirdPartyAppId:l,thirdPartyAppStateId:p,applicationScopes:m})=>!(!t||e||n||o||r||i||c||u||d||s||a||l||p||m),Rt=(t,e,n,o)=>{const r=document.createElement("form");r.method="POST",r.action=t,r.innerHTML=`\n  <input type="hidden" role="saml-response" name="SAMLResponse" value="${e}" />\n  <input type="hidden" role="saml-relay-state" name="RelayState" value="${n}" />\n  <input style="display: none;" id="SAMLSubmitButton" type="submit" value="Continue" />\n  `,document.body.appendChild(r),o(r)},Ft=(t,e,n,o)=>{const r=document.createElement("form");r.method="POST",r.action=t;const i=(t,e)=>{const n=document.createElement("input");return n.type="hidden",n.name=t,n.value=e,n};r.appendChild(i("wa","wsignin1.0")),r.appendChild(i("wresult",e)),r.appendChild(i("wctx",n));const c=document.createElement("input");c.type="submit",c.id="WSFedSubmitButton",c.value="Continue",c.style.display="none",r.appendChild(c),document.body.appendChild(r),o(r)},Nt=t=>null==t?void 0:t.submit(),Bt=(t,e)=>{const n=e.find((e=>t[e]));return n?t[n]:null},Ht=(t,e=100)=>{let n;return function(...o){n||t.apply(this,o),clearTimeout(n),n=setTimeout((()=>{n=null}),e)}},Mt=()=>{document.querySelectorAll('[data-hidden-input="true"]').forEach((t=>t.remove()))},Wt=t=>L.includes(t),qt=t=>{var e,n,o;const r=(i=t.screenState,c=(t,e)=>P.includes(e)||e.startsWith("_"),Object.fromEntries(Object.entries(i).filter((([t,e])=>!c(e,t)))));var i,c;const{screenState:{errorText:u,errorType:d}}=t;return(u||d)&&(r.error={text:u,type:d}),t.action&&(r.action=t.action),(null===(o=null===(n=null===(e=t.screenState)||void 0===e?void 0:e.componentsConfig)||void 0===n?void 0:n.thirdPartyAppApproveScopes)||void 0===o?void 0:o.data)&&(r.inboundAppApproveScopes=t.screenState.componentsConfig.thirdPartyAppApproveScopes.data),r},_t=t=>{const e=Object.assign({},t);return t.inboundAppApproveScopes&&(e.thirdPartyAppApproveScopes=t.inboundAppApproveScopes),e};function Qt(t,e){return`${A}.${e?`${t}_${e}`:t}`}const zt=(t,e,n,o)=>{const r=void 0!==window.screenLeft?window.screenLeft:window.screen.left,i=void 0!==window.screenTop?window.screenTop:window.screen.top,c=((window.innerWidth||document.documentElement.clientWidth||window.screen.width)-n)/2+r,u=((window.innerHeight||document.documentElement.clientHeight||window.screen.height)-o)/2+i,d=function(){const t=navigator.userAgent||"",e=/\b(iPhone)\b/.test(t),n=/Safari/.test(t)&&!/CriOS|FxiOS|OPiOS|EdgiOS|Chrome|Chromium/.test(t);return e&&n}()?"about:blank":"",s=window.open(d,e,`width=${n},height=${o},top=${u},left=${c},scrollbars=yes,resizable=yes`);return s.location.href=t,s.focus(),s};export{Tt as FOCUSABLE_INPUTS_SELECTOR,Ct as camelCase,ht as clearApplicationScopesParamFromUrl,D as clearCodeFromUrl,at as clearCustomAppIdParamFromUrl,it as clearDescopeIDPInitiatedParamFromUrl,V as clearExchangeErrorFromUrl,G as clearIsPopupFromUrl,At as clearOIDCErrorRedirectUriParamFromUrl,X as clearOIDCIDPParamFromUrl,wt as clearOIDCLoginHintParamFromUrl,gt as clearOIDCPromptParamFromUrl,It as clearOIDCResourceParamFromUrl,Mt as clearPreviousExternalInputs,M as clearRunIdsFromUrl,Z as clearSAMLIDPParamFromUrl,ot as clearSAMLIDPUsernameParamFromUrl,st as clearSSOAppIdParamFromUrl,lt as clearThirdPartyAppIdParamFromUrl,mt as clearThirdPartyAppStateIdParamFromUrl,q as clearTokenFromUrl,et as clearWSFedIDPParamFromUrl,Et as createIsChanged,R as fetchContent,N as getAnimationDirection,ft as getApplicationScopesParamFromUrl,Ot as getChromiumVersion,_ as getCodeFromUrl,F as getContentUrl,ut as getCustomAppIdParamFromUrl,rt as getDescopeIDPInitiatedParamFromUrl,Pt as getElementDescopeAttributes,z as getExchangeErrorFromUrl,Bt as getFirstNonEmptyValue,Q as getIsPopupFromUrl,yt as getOIDCErrorRedirectUriParamFromUrl,K as getOIDCIDPParamFromUrl,vt as getOIDCLoginHintParamFromUrl,St as getOIDCPromptParamFromUrl,bt as getOIDCResourceParamFromUrl,J as getRedirectAuthFromUrl,B as getRunIdsFromUrl,Y as getSAMLIDPParamFromUrl,nt as getSAMLIDPUsernameParamFromUrl,ct as getSSOAppIdParamFromUrl,Qt as getScriptResultPath,dt as getThirdPartyAppIdParamFromUrl,pt as getThirdPartyAppStateIdParamFromUrl,W as getTokenFromUrl,tt as getWSFedIDPParamFromUrl,Ut as handleAutoFocus,Lt as handleReportValidityOnBlur,kt as handleUrlParams,Rt as injectSamlIdpForm,Ft as injectWsFedIdpForm,H as isChromium,Ht as leadingDebounce,zt as openCenteredPopup,Wt as shouldHandleMarkdown,jt as showFirstScreenOnExecutionInit,Nt as submitForm,$t as timeoutPromise,_t as transformScreenInputs,qt as transformStepStateForCustomScreen,xt as withMemCache,$ as withRetry};
+import{__awaiter as t}from"tslib";import{URL_RUN_IDS_PARAM_NAME as e,URL_TOKEN_PARAM_NAME as n,URL_CODE_PARAM_NAME as o,URL_REDIRECT_MODE_PARAM_NAME as r,URL_ERR_PARAM_NAME as i,OIDC_IDP_STATE_ID_PARAM_NAME as s,SAML_IDP_STATE_ID_PARAM_NAME as c,WSFED_IDP_STATE_ID_PARAM_NAME as a,SAML_IDP_USERNAME_PARAM_NAME as u,DESCOPE_IDP_INITIATED_PARAM_NAME as d,SSO_APP_ID_PARAM_NAME as l,CUSTOM_APP_ID_PARAM_NAME as p,THIRD_PARTY_APP_ID_PARAM_NAME as m,THIRD_PARTY_APP_STATE_ID_PARAM_NAME as f,APPLICATION_SCOPES_PARAM_NAME as v,OIDC_LOGIN_HINT_PARAM_NAME as h,OIDC_PROMPT_PARAM_NAME as y,OIDC_ERROR_REDIRECT_URI_PARAM_NAME as g,OIDC_RESOURCE_PARAM_NAME as w,DESCOPE_ATTRIBUTE_PREFIX as b,SDK_SCRIPT_RESULTS_KEY as A,URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME as S,URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME as C,URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME as k,URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME as I}from"../constants/index.js";import{EXCLUDED_STATE_KEYS as P}from"../constants/customScreens.js";import{Direction as E}from"../types.js";import{OVERRIDE_CONTENT_URL as T,BASE_CONTENT_URL as O,ASSETS_FOLDER as j}from"../constants/content.js";const x=["descope-enriched-text"];function U(e,n,o){return(...r)=>t(this,void 0,void 0,(function*(){let t;const i=o+1;for(let s=0;s<i;s++)try{return yield e(...r)}catch(e){t=e,s<o&&(yield new Promise((t=>{setTimeout(t,n*Math.pow(2,s+1))})))}throw t}))}function L(t){return new URLSearchParams(window.location.search).get(t)}function $(t){if(window.history.replaceState&&L(t)){const e=new URL(window.location.href),n=new URLSearchParams(e.search);n.delete(t),e.search=n.toString(),window.history.replaceState({},"",e.toString())}}function R(e,n){return t(this,void 0,void 0,(function*(){const t=yield fetch(e,{cache:"default"});if(!t.ok)throw Error(`Error fetching URL ${e} [${t.status}]`);return{body:yield t[n](),headers:Object.fromEntries(t.headers.entries())}}))}function M({projectId:t,filename:e,assetsFolder:n=j,baseUrl:o}){const r=new URL(T||o||O);return r.pathname=((...t)=>t.join("/").replace(/\/+/g,"/"))(r.pathname,t,n,e),r.toString()}function F(t,e){if(!e)return;const n=+t,o=+e;return Number.isNaN(n)||Number.isNaN(o)?void 0:n>o?E.forward:n<o?E.backward:void 0}const N=t=>{let[n="",o=""]=(L(e)||"").split("_");const r=(t=>{var e;return(null===(e=/(.*)\|#\|.*/.exec(t))||void 0===e?void 0:e[1])||""})(n);return(!t||r&&r!==t)&&(n="",o=""),{executionId:n,stepId:o,executionFlowId:r}};function q(){return/Chrome/.test(navigator.userAgent)&&/Google Inc/.test(navigator.vendor)}function B(){$(e)}function H(){return L(n)||void 0}function D(){$(n)}function Q(){return L(o)||void 0}function W(){return"popup"===L(r)}function G(){return L(i)||void 0}function V(){$(o)}function _(){$(r)}function z(){$(i)}function J(){return{redirectAuthCodeChallenge:L(S),redirectAuthCallbackUrl:L(C),redirectAuthBackupCallbackUri:L(k),redirectAuthInitiator:L(I)}}function K(){return L(s)}function X(){$(s)}function Y(){return L(c)}function Z(){$(c)}function tt(){return L(a)}function et(){$(a)}function nt(){return L(u)}function ot(){$(u)}function rt(){return L(d)}function it(){$(d)}function st(){return L(l)}function ct(){return L(p)}function at(){return L(m)}function ut(){$(l)}function dt(){$(p)}function lt(){$(m)}function pt(){return L(f)}function mt(){$(f)}function ft(){return L(v)}function vt(){$(v)}function ht(){return L(h)}function yt(){$(h)}function gt(){return L(y)}function wt(){$(y)}function bt(){return L(g)}function At(){$(g)}function St(){return L(w)}function Ct(){$(w)}const kt=t=>t.replace(/-./g,(t=>t[1].toUpperCase())),It=(t,e)=>n=>t[n]!==e[n],Pt=t=>Array.from((null==t?void 0:t.attributes)||[]).reduce(((t,e)=>{var n;const o=null===(n=new RegExp(`^${b}(\\S+)$`).exec(e.name))||void 0===n?void 0:n[1];return o?Object.assign(t,{[o]:e.value}):t}),{}),Et=(t,e)=>{const{executionId:n,stepId:o,executionFlowId:r}=N(t);if(r&&t!==r)return e.debug("Flow id does not match the execution flow id, skipping url params handling"),{ssoQueryParams:{}};(n||o)&&B();const i=H();i&&D();const s=Q();s&&V();const c=W();c&&_();const a=G();a&&z();const{redirectAuthCodeChallenge:u,redirectAuthCallbackUrl:d,redirectAuthBackupCallbackUri:l,redirectAuthInitiator:p}=J(),m=K();m&&X();const f=Y();f&&Z();const v=tt();v&&et();const h=nt();f&&ot();const y=rt();y&&it();const g=st();g&&ut();const w=ct();w&&dt();const b=at();b&&lt();const A=pt();A&&mt();const S=ft();S&&vt();const C=ht();C&&yt();const k=gt();k&&wt();const I=bt();I&&At();const P=St();P&&Ct();return{executionId:n,stepId:o,token:i,code:s,isPopup:c,exchangeError:a,redirectAuthCodeChallenge:u,redirectAuthCallbackUrl:d,redirectAuthBackupCallbackUri:l,redirectAuthInitiator:p,ssoQueryParams:{oidcIdpStateId:m,samlIdpStateId:f,wsfedIdpStateId:v,samlIdpUsername:h,descopeIdpInitiated:"true"===y,ssoAppId:g,customAppId:w,oidcLoginHint:C,oidcPrompt:k,oidcErrorRedirectUri:I,oidcResource:P,thirdPartyAppId:b,thirdPartyAppStateId:A,applicationScopes:S}}},Tt=t=>{let e,n;return Object.assign(((...o)=>{return e&&(i=o,(r=e).length===i.length&&r.every(((t,e)=>t===i[e])))||(e=o,n=t(...o)),n;var r,i}),{reset:()=>{e=void 0,n=void 0}})},Ot='*[name]:not([auto-focus="false"]):not([aria-hidden="true"])',jt=(t,e,n)=>{if(!0===e||"skipFirstScreen"===e&&!n){const e=t.querySelector(Ot);setTimeout((()=>{null==e||e.focus()}))}},xt=t=>{t.querySelectorAll("*[name]").forEach((e=>{e.addEventListener("blur",(()=>{var n;const o=()=>{var t;const n=e.focus;e.focus=()=>{},null===(t=e.reportValidity)||void 0===t||t.call(e),setTimeout((()=>{e.focus=n}))};if("true"===e.getAttribute("invalid")||(null===(n=e.value)||void 0===n?void 0:n.length))return void o();const r={timer:void 0},i=t=>{"true"===t.target.getAttribute("formnovalidate")&&(clearTimeout(r.timer),r.timer=void 0)};r.timer=setTimeout((()=>{t.removeEventListener("click",i),o(),r.timer=void 0}),150),t.addEventListener("click",i,{once:!0})}))}))};function Ut(t,e,n){return new Promise(((o,r)=>{let i=!1;const s=setTimeout((()=>{i=!0,void 0!==n?o(n):r(new Error(`Promise timed out after ${t} ms`))}),t);e.then((t=>{i||(clearTimeout(s),o(t))})).catch((t=>{i||(clearTimeout(s),r(t))}))}))}const Lt=()=>{var t;const e=null===(t=null===navigator||void 0===navigator?void 0:navigator.userAgentData)||void 0===t?void 0:t.brands,n=null==e?void 0:e.find((({brand:t,version:e})=>"Chromium"===t&&parseFloat(e)));return n?n.version:0},$t=(t,{oidcIdpStateId:e,samlIdpStateId:n,wsfedIdpStateId:o,samlIdpUsername:r,ssoAppId:i,customAppId:s,oidcLoginHint:c,oidcPrompt:a,oidcErrorRedirectUri:u,oidcResource:d,thirdPartyAppId:l,thirdPartyAppStateId:p,applicationScopes:m})=>!(!t||e||n||o||r||i||s||c||a||u||d||l||p||m),Rt=(t,e,n,o)=>{const r=document.createElement("form");r.method="POST",r.action=t,r.innerHTML=`\n  <input type="hidden" role="saml-response" name="SAMLResponse" value="${e}" />\n  <input type="hidden" role="saml-relay-state" name="RelayState" value="${n}" />\n  <input style="display: none;" id="SAMLSubmitButton" type="submit" value="Continue" />\n  `,document.body.appendChild(r),o(r)},Mt=(t,e,n,o)=>{const r=document.createElement("form");r.method="POST",r.action=t;const i=(t,e)=>{const n=document.createElement("input");return n.type="hidden",n.name=t,n.value=e,n};r.appendChild(i("wa","wsignin1.0")),r.appendChild(i("wresult",e)),r.appendChild(i("wctx",n));const s=document.createElement("input");s.type="submit",s.id="WSFedSubmitButton",s.value="Continue",s.style.display="none",r.appendChild(s),document.body.appendChild(r),o(r)},Ft=t=>null==t?void 0:t.submit(),Nt=(t,e)=>{const n=e.find((e=>t[e]));return n?t[n]:null},qt=(t,e=100)=>{let n;return function(...o){n||t.apply(this,o),clearTimeout(n),n=setTimeout((()=>{n=null}),e)}},Bt=()=>{document.querySelectorAll('[data-hidden-input="true"]').forEach((t=>t.remove()))},Ht=t=>x.includes(t),Dt={minLength:"data-password-policy-value-minlength",strength:"data-password-policy-value-passwordstrength",disallowedChars:"data-password-policy-value-disallowedchars",email:"data-password-policy-value-email",activePolicies:"active-policies",availablePolicies:"available-policies"},Qt=(t,e)=>{var n;const o=null==t?void 0:t.componentsDynamicAttrs;if(!o)return;const r=Object.entries(o).find((([t])=>(t=>{var e;return null===(e=t.match(/\[data-name=["']([^"']+)["']\]/))||void 0===e?void 0:e[1]})(t)===e));return null===(n=null==r?void 0:r[1])||void 0===n?void 0:n.attributes},Wt=[{key:"totp",from:t=>t.totp},{key:"notp",from:t=>t.notp},{key:"sentTo",from:t=>t.sentTo},{key:"sso",from:t=>t.sso},{key:"selfProvisionDomains",from:t=>t.selfProvisionDomains},{key:"inboundAppApproveScopes",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.thirdPartyAppApproveScopes)||void 0===n?void 0:n.data}},{key:"securityQuestionsSetup",from:t=>{var e;return null===(e=t.componentsConfig)||void 0===e?void 0:e.sqSetup}},{key:"securityQuestionsVerify",from:t=>{var e;return null===(e=t.componentsConfig)||void 0===e?void 0:e.sqVerify}},{key:"userTenants",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.userSelectedTenant)||void 0===n?void 0:n.data}},{key:"userRoles",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.userRoles)||void 0===n?void 0:n.data}},{key:"ssoApplications",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.ssoApplications)||void 0===n?void 0:n.data}},{key:"ssoConfigurations",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.ssoConfigurations)||void 0===n?void 0:n.data}},{key:"samlAttributeMappings",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.samlMappings)||void 0===n?void 0:n.options}},{key:"oidcAttributeMappings",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.oidcMappings)||void 0===n?void 0:n.options}},{key:"samlGroupMappings",from:t=>{var e,n;return null===(n=null===(e=t.componentsConfig)||void 0===e?void 0:e.samlGroupMappings)||void 0===n?void 0:n.options}},{key:"passwordPolicy",from:t=>{var e;return(t=>{if(!t)return;const e=Object.fromEntries(Object.entries(Dt).map((([e,n])=>[e,t[n]])).filter((([,t])=>void 0!==t)));return Object.keys(e).length?e:void 0})(null===(e=t.componentsConfig)||void 0===e?void 0:e.newPassword)}},{key:"recoveryCodes",from:t=>(t=>{const e=Qt(t,"recoveryCodes");if(e)return Array.isArray(e.data)?e.data.map((t=>t.value)):[]})(t.componentsConfig)},{key:"outboundApp",from:t=>(t=>{const e=Qt(t,"outboundApp");if(e)return{label:e.label,iconSrc:e["icon-src"],appId:e["data-descope-outbound-oauth-app-id"]}})(t.componentsConfig)}],Gt=t=>{const e=(n=t.screenState,o=(t,e)=>P.includes(e)||e.startsWith("_"),Object.fromEntries(Object.entries(n).filter((([t,e])=>!o(e,t)))));var n,o;const{screenState:{errorText:r,errorType:i}}=t;(r||i)&&(e.error={text:r,type:i}),t.action&&(e.action=t.action);const s=(t=>{if(!t)return;const e={};return Wt.forEach((({key:n,from:o})=>{const r=o(t);void 0!==r&&(e[n]=r)})),Object.keys(e).length?e:void 0})(t.screenState);return s&&(e.data=s),e},Vt=t=>{const e=Object.assign({},t);return t.inboundAppApproveScopes&&(e.thirdPartyAppApproveScopes=t.inboundAppApproveScopes),e};function _t(t,e){return`${A}.${e?`${t}_${e}`:t}`}const zt=(t,e,n,o)=>{const r=void 0!==window.screenLeft?window.screenLeft:window.screen.left,i=void 0!==window.screenTop?window.screenTop:window.screen.top,s=((window.innerWidth||document.documentElement.clientWidth||window.screen.width)-n)/2+r,c=((window.innerHeight||document.documentElement.clientHeight||window.screen.height)-o)/2+i,a=function(){const t=navigator.userAgent||"",e=/\b(iPhone)\b/.test(t),n=/Safari/.test(t)&&!/CriOS|FxiOS|OPiOS|EdgiOS|Chrome|Chromium/.test(t);return e&&n}()?"about:blank":"",u=window.open(a,e,`width=${n},height=${o},top=${c},left=${s},scrollbars=yes,resizable=yes`);return u.location.href=t,u.focus(),u};export{Ot as FOCUSABLE_INPUTS_SELECTOR,kt as camelCase,vt as clearApplicationScopesParamFromUrl,V as clearCodeFromUrl,dt as clearCustomAppIdParamFromUrl,it as clearDescopeIDPInitiatedParamFromUrl,z as clearExchangeErrorFromUrl,_ as clearIsPopupFromUrl,At as clearOIDCErrorRedirectUriParamFromUrl,X as clearOIDCIDPParamFromUrl,yt as clearOIDCLoginHintParamFromUrl,wt as clearOIDCPromptParamFromUrl,Ct as clearOIDCResourceParamFromUrl,Bt as clearPreviousExternalInputs,B as clearRunIdsFromUrl,Z as clearSAMLIDPParamFromUrl,ot as clearSAMLIDPUsernameParamFromUrl,ut as clearSSOAppIdParamFromUrl,lt as clearThirdPartyAppIdParamFromUrl,mt as clearThirdPartyAppStateIdParamFromUrl,D as clearTokenFromUrl,et as clearWSFedIDPParamFromUrl,It as createIsChanged,R as fetchContent,F as getAnimationDirection,ft as getApplicationScopesParamFromUrl,Lt as getChromiumVersion,Q as getCodeFromUrl,M as getContentUrl,ct as getCustomAppIdParamFromUrl,rt as getDescopeIDPInitiatedParamFromUrl,Pt as getElementDescopeAttributes,G as getExchangeErrorFromUrl,Nt as getFirstNonEmptyValue,W as getIsPopupFromUrl,bt as getOIDCErrorRedirectUriParamFromUrl,K as getOIDCIDPParamFromUrl,ht as getOIDCLoginHintParamFromUrl,gt as getOIDCPromptParamFromUrl,St as getOIDCResourceParamFromUrl,J as getRedirectAuthFromUrl,N as getRunIdsFromUrl,Y as getSAMLIDPParamFromUrl,nt as getSAMLIDPUsernameParamFromUrl,st as getSSOAppIdParamFromUrl,_t as getScriptResultPath,at as getThirdPartyAppIdParamFromUrl,pt as getThirdPartyAppStateIdParamFromUrl,H as getTokenFromUrl,tt as getWSFedIDPParamFromUrl,jt as handleAutoFocus,xt as handleReportValidityOnBlur,Et as handleUrlParams,Rt as injectSamlIdpForm,Mt as injectWsFedIdpForm,q as isChromium,qt as leadingDebounce,zt as openCenteredPopup,Ht as shouldHandleMarkdown,$t as showFirstScreenOnExecutionInit,Ft as submitForm,Ut as timeoutPromise,Vt as transformScreenInputs,Gt as transformStepStateForCustomScreen,Tt as withMemCache,U as withRetry};
 //# sourceMappingURL=helpers.js.map

package/dist/esm/helpers/helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"helpers.js","sources":["../../../src/lib/helpers/helpers.ts"],"sourcesContent":["import {\n  ASSETS_FOLDER,\n  BASE_CONTENT_URL,\n  DESCOPE_ATTRIBUTE_PREFIX,\n  URL_CODE_PARAM_NAME,\n  URL_ERR_PARAM_NAME,\n  URL_RUN_IDS_PARAM_NAME,\n  URL_TOKEN_PARAM_NAME,\n  URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME,\n  URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME,\n  URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME,\n  URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME,\n  OIDC_IDP_STATE_ID_PARAM_NAME,\n  SAML_IDP_STATE_ID_PARAM_NAME,\n  WSFED_IDP_STATE_ID_PARAM_NAME,\n  SAML_IDP_USERNAME_PARAM_NAME,\n  SSO_APP_ID_PARAM_NAME,\n  CUSTOM_APP_ID_PARAM_NAME,\n  OIDC_LOGIN_HINT_PARAM_NAME,\n  DESCOPE_IDP_INITIATED_PARAM_NAME,\n  OVERRIDE_CONTENT_URL,\n  OIDC_PROMPT_PARAM_NAME,\n  OIDC_RESOURCE_PARAM_NAME,\n  OIDC_ERROR_REDIRECT_URI_PARAM_NAME,\n  THIRD_PARTY_APP_ID_PARAM_NAME,\n  THIRD_PARTY_APP_STATE_ID_PARAM_NAME,\n  APPLICATION_SCOPES_PARAM_NAME,\n  SDK_SCRIPT_RESULTS_KEY,\n  URL_REDIRECT_MODE_PARAM_NAME,\n} from '../constants';\nimport { EXCLUDED_STATE_KEYS } from '../constants/customScreens';\nimport {\n  AutoFocusOptions,\n  CustomScreenState,\n  Direction,\n  SSOQueryParams,\n  StepState,\n} from '../types';\n\nconst MD_COMPONENTS = ['descope-enriched-text'];\n\n/**\n * Wraps an async function with retry logic\n * @param fn - The async function to wrap\n * @param timeoutMs - Time to wait between retries in milliseconds\n * @param maxRetries - Maximum number of retry attempts\n * @returns A new function with retry logic\n */\nexport function withRetry<TArgs extends any[], TReturn>(\n  fn: (...args: TArgs) => Promise<TReturn>,\n  timeoutMs: number,\n  maxRetries: number,\n): (...args: TArgs) => Promise<TReturn> {\n  return async (...args: TArgs): Promise<TReturn> => {\n    let lastError: any;\n    const totalAttempts = maxRetries + 1; // initial attempt + retries\n\n    // eslint-disable-next-line no-plusplus\n    for (let attempt = 0; attempt < totalAttempts; attempt++) {\n      try {\n        // eslint-disable-next-line no-await-in-loop\n        return await fn(...args);\n      } catch (error) {\n        lastError = error;\n\n        // Don't wait after the last attempt\n        if (attempt < maxRetries) {\n          // eslint-disable-next-line no-await-in-loop\n          await new Promise((resolve) => {\n            setTimeout(resolve, timeoutMs * Math.pow(2, attempt + 1));\n          });\n        }\n      }\n    }\n\n    // All attempts failed, throw the last error\n    throw lastError;\n  };\n}\n\nfunction getUrlParam(paramName: string) {\n  const urlParams = new URLSearchParams(window.location.search);\n\n  return urlParams.get(paramName);\n}\n\nfunction getFlowUrlParam() {\n  return getUrlParam(URL_RUN_IDS_PARAM_NAME);\n}\n\nfunction setFlowUrlParam(id: string) {\n  if (window.history.pushState && id !== getFlowUrlParam()) {\n    const newUrl = new URL(window.location.href);\n    const search = new URLSearchParams(newUrl.search);\n    search.set(URL_RUN_IDS_PARAM_NAME, id);\n    newUrl.search = search.toString();\n    window.history.pushState({}, '', newUrl.toString());\n  }\n}\n\nfunction resetUrlParam(paramName: string) {\n  if (window.history.replaceState && getUrlParam(paramName)) {\n    const newUrl = new URL(window.location.href);\n    const search = new URLSearchParams(newUrl.search);\n    search.delete(paramName);\n    newUrl.search = search.toString();\n    window.history.replaceState({}, '', newUrl.toString());\n  }\n}\n\nconst getFlowIdFromExecId = (executionId: string) => {\n  const regex = /(.*)\\|#\\|.*/;\n  return regex.exec(executionId)?.[1] || '';\n};\n\nexport async function fetchContent<T extends 'text' | 'json'>(\n  url: string,\n  returnType: T,\n): Promise<{\n  body: T extends 'json' ? Record<string, any> : string;\n  headers: Record<string, string>;\n}> {\n  const res = await fetch(url, { cache: 'default' });\n  if (!res.ok) {\n    throw Error(`Error fetching URL ${url} [${res.status}]`);\n  }\n\n  return {\n    body: await res[returnType || 'text'](),\n    headers: Object.fromEntries(res.headers.entries()),\n  };\n}\n\nconst pathJoin = (...paths: string[]) => paths.join('/').replace(/\\/+/g, '/'); // preventing duplicate separators\n\nexport function getContentUrl({\n  projectId,\n  filename,\n  assetsFolder = ASSETS_FOLDER,\n  baseUrl,\n}: {\n  projectId: string;\n  filename: string;\n  assetsFolder?: string;\n  baseUrl?: string;\n}) {\n  const url = new URL(OVERRIDE_CONTENT_URL || baseUrl || BASE_CONTENT_URL);\n  url.pathname = pathJoin(url.pathname, projectId, assetsFolder, filename);\n\n  return url.toString();\n}\n\nexport function getAnimationDirection(\n  currentIdxStr: string,\n  prevIdxStr: string,\n) {\n  if (!prevIdxStr) return undefined;\n\n  const currentIdx = +currentIdxStr;\n  const prevIdx = +prevIdxStr;\n\n  if (Number.isNaN(currentIdx) || Number.isNaN(prevIdx)) return undefined;\n  if (currentIdx > prevIdx) return Direction.forward;\n  if (currentIdx < prevIdx) return Direction.backward;\n  return undefined;\n}\n\nexport const getRunIdsFromUrl = (flowId: string) => {\n  let [executionId = '', stepId = ''] = (getFlowUrlParam() || '').split('_');\n  const executionFlowId = getFlowIdFromExecId(executionId);\n\n  // if the flow id does not match, this execution id is not for this flow\n  if (!flowId || (executionFlowId && executionFlowId !== flowId)) {\n    executionId = '';\n    stepId = '';\n  }\n\n  return { executionId, stepId, executionFlowId };\n};\n\nexport const setRunIdsOnUrl = (executionId: string, stepId: string) => {\n  setFlowUrlParam([executionId, stepId].join('_'));\n};\n\nexport function isChromium() {\n  return (\n    /Chrome/.test(navigator.userAgent) && /Google Inc/.test(navigator.vendor)\n  );\n}\n\n// Detect Safari running on iPhone specifically.\nfunction isIphoneSafari() {\n  const ua = navigator.userAgent || '';\n  const isIphone = /\\b(iPhone)\\b/.test(ua);\n  // Safari UA contains 'Safari' and usually 'Version/X', exclude other iOS browsers\n  const isSafari =\n    /Safari/.test(ua) && !/CriOS|FxiOS|OPiOS|EdgiOS|Chrome|Chromium/.test(ua);\n\n  return isIphone && isSafari;\n}\n\nexport function clearRunIdsFromUrl() {\n  resetUrlParam(URL_RUN_IDS_PARAM_NAME);\n}\n\nexport function getTokenFromUrl() {\n  return getUrlParam(URL_TOKEN_PARAM_NAME) || undefined;\n}\n\nexport function clearTokenFromUrl() {\n  resetUrlParam(URL_TOKEN_PARAM_NAME);\n}\n\nexport function getCodeFromUrl() {\n  return getUrlParam(URL_CODE_PARAM_NAME) || undefined;\n}\n\nexport function getIsPopupFromUrl() {\n  return getUrlParam(URL_REDIRECT_MODE_PARAM_NAME) === 'popup';\n}\n\nexport function getExchangeErrorFromUrl() {\n  return getUrlParam(URL_ERR_PARAM_NAME) || undefined;\n}\n\nexport function clearCodeFromUrl() {\n  resetUrlParam(URL_CODE_PARAM_NAME);\n}\n\nexport function clearIsPopupFromUrl() {\n  resetUrlParam(URL_REDIRECT_MODE_PARAM_NAME);\n}\n\nexport function clearExchangeErrorFromUrl() {\n  resetUrlParam(URL_ERR_PARAM_NAME);\n}\n\nexport function getRedirectAuthFromUrl() {\n  const redirectAuthCodeChallenge = getUrlParam(\n    URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME,\n  );\n  const redirectAuthCallbackUrl = getUrlParam(\n    URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME,\n  );\n  const redirectAuthBackupCallbackUri = getUrlParam(\n    URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME,\n  );\n  const redirectAuthInitiator = getUrlParam(\n    URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME,\n  );\n  return {\n    redirectAuthCodeChallenge,\n    redirectAuthCallbackUrl,\n    redirectAuthBackupCallbackUri,\n    redirectAuthInitiator,\n  };\n}\n\nexport function getOIDCIDPParamFromUrl() {\n  return getUrlParam(OIDC_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearOIDCIDPParamFromUrl() {\n  resetUrlParam(OIDC_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getSAMLIDPParamFromUrl() {\n  return getUrlParam(SAML_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearSAMLIDPParamFromUrl() {\n  resetUrlParam(SAML_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getWSFedIDPParamFromUrl() {\n  return getUrlParam(WSFED_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearWSFedIDPParamFromUrl() {\n  resetUrlParam(WSFED_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getSAMLIDPUsernameParamFromUrl() {\n  return getUrlParam(SAML_IDP_USERNAME_PARAM_NAME);\n}\n\nexport function clearSAMLIDPUsernameParamFromUrl() {\n  resetUrlParam(SAML_IDP_USERNAME_PARAM_NAME);\n}\n\nexport function getDescopeIDPInitiatedParamFromUrl() {\n  return getUrlParam(DESCOPE_IDP_INITIATED_PARAM_NAME);\n}\n\nexport function clearDescopeIDPInitiatedParamFromUrl() {\n  resetUrlParam(DESCOPE_IDP_INITIATED_PARAM_NAME);\n}\n\nexport function getSSOAppIdParamFromUrl() {\n  return getUrlParam(SSO_APP_ID_PARAM_NAME);\n}\n\nexport function getCustomAppIdParamFromUrl() {\n  return getUrlParam(CUSTOM_APP_ID_PARAM_NAME);\n}\n\nexport function getThirdPartyAppIdParamFromUrl() {\n  return getUrlParam(THIRD_PARTY_APP_ID_PARAM_NAME);\n}\n\nexport function clearSSOAppIdParamFromUrl() {\n  resetUrlParam(SSO_APP_ID_PARAM_NAME);\n}\n\nexport function clearCustomAppIdParamFromUrl() {\n  resetUrlParam(CUSTOM_APP_ID_PARAM_NAME);\n}\n\nexport function clearThirdPartyAppIdParamFromUrl() {\n  resetUrlParam(THIRD_PARTY_APP_ID_PARAM_NAME);\n}\n\nexport function getThirdPartyAppStateIdParamFromUrl() {\n  return getUrlParam(THIRD_PARTY_APP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearThirdPartyAppStateIdParamFromUrl() {\n  resetUrlParam(THIRD_PARTY_APP_STATE_ID_PARAM_NAME);\n}\n\nexport function getApplicationScopesParamFromUrl() {\n  return getUrlParam(APPLICATION_SCOPES_PARAM_NAME);\n}\n\nexport function clearApplicationScopesParamFromUrl() {\n  resetUrlParam(APPLICATION_SCOPES_PARAM_NAME);\n}\n\nexport function getOIDCLoginHintParamFromUrl() {\n  return getUrlParam(OIDC_LOGIN_HINT_PARAM_NAME);\n}\n\nexport function clearOIDCLoginHintParamFromUrl() {\n  resetUrlParam(OIDC_LOGIN_HINT_PARAM_NAME);\n}\n\nexport function getOIDCPromptParamFromUrl() {\n  return getUrlParam(OIDC_PROMPT_PARAM_NAME);\n}\n\nexport function clearOIDCPromptParamFromUrl() {\n  resetUrlParam(OIDC_PROMPT_PARAM_NAME);\n}\n\nexport function getOIDCErrorRedirectUriParamFromUrl() {\n  return getUrlParam(OIDC_ERROR_REDIRECT_URI_PARAM_NAME);\n}\n\nexport function clearOIDCErrorRedirectUriParamFromUrl() {\n  resetUrlParam(OIDC_ERROR_REDIRECT_URI_PARAM_NAME);\n}\n\nexport function getOIDCResourceParamFromUrl() {\n  return getUrlParam(OIDC_RESOURCE_PARAM_NAME);\n}\n\nexport function clearOIDCResourceParamFromUrl() {\n  resetUrlParam(OIDC_RESOURCE_PARAM_NAME);\n}\n\nexport const camelCase = (s: string) =>\n  s.replace(/-./g, (x) => x[1].toUpperCase());\n\nexport const createIsChanged =\n  <T extends Record<string, any>>(state: T, prevState: T) =>\n  (attrName: keyof T) =>\n    state[attrName] !== prevState[attrName];\n\nexport const getElementDescopeAttributes = (ele: HTMLElement) =>\n  Array.from(ele?.attributes || []).reduce((acc, attr) => {\n    const descopeAttrName = new RegExp(\n      `^${DESCOPE_ATTRIBUTE_PREFIX}(\\\\S+)$`,\n    ).exec(attr.name)?.[1];\n\n    return !descopeAttrName\n      ? acc\n      : Object.assign(acc, { [descopeAttrName]: attr.value });\n  }, {});\n\nexport const getFlowConfig = (config: Record<string, any>, flowId: string) =>\n  config?.flows?.[flowId] || {};\n\nexport const handleUrlParams = (\n  flowId: string,\n  logger: { debug: (...data: any[]) => void },\n) => {\n  const { executionId, stepId, executionFlowId } = getRunIdsFromUrl(flowId);\n\n  // if the flow id does not match, we do not want to read & remove any query params\n  // because it's probably belongs to another flow\n  if (executionFlowId && flowId !== executionFlowId) {\n    logger.debug(\n      'Flow id does not match the execution flow id, skipping url params handling',\n    );\n    return { ssoQueryParams: {} };\n  }\n\n  if (executionId || stepId) {\n    clearRunIdsFromUrl();\n  }\n\n  const token = getTokenFromUrl();\n  if (token) {\n    clearTokenFromUrl();\n  }\n\n  const code = getCodeFromUrl();\n  if (code) {\n    clearCodeFromUrl();\n  }\n\n  // this is used for oauth when we want to open the provider login page in a new tab\n  const isPopup = getIsPopupFromUrl();\n  if (isPopup) {\n    clearIsPopupFromUrl();\n  }\n\n  const exchangeError = getExchangeErrorFromUrl();\n  if (exchangeError) {\n    clearExchangeErrorFromUrl();\n  }\n\n  // these query params are retained to allow the flow to be refreshed\n  // without losing the redirect auth state\n  const {\n    redirectAuthCodeChallenge,\n    redirectAuthCallbackUrl,\n    redirectAuthBackupCallbackUri,\n    redirectAuthInitiator,\n  } = getRedirectAuthFromUrl();\n\n  const oidcIdpStateId = getOIDCIDPParamFromUrl();\n  if (oidcIdpStateId) {\n    clearOIDCIDPParamFromUrl();\n  }\n\n  const samlIdpStateId = getSAMLIDPParamFromUrl();\n  if (samlIdpStateId) {\n    clearSAMLIDPParamFromUrl();\n  }\n\n  const wsfedIdpStateId = getWSFedIDPParamFromUrl();\n  if (wsfedIdpStateId) {\n    clearWSFedIDPParamFromUrl();\n  }\n\n  const samlIdpUsername = getSAMLIDPUsernameParamFromUrl();\n  if (samlIdpStateId) {\n    clearSAMLIDPUsernameParamFromUrl();\n  }\n\n  const descopeIdpInitiated = getDescopeIDPInitiatedParamFromUrl();\n  if (descopeIdpInitiated) {\n    clearDescopeIDPInitiatedParamFromUrl();\n  }\n\n  const ssoAppId = getSSOAppIdParamFromUrl();\n  if (ssoAppId) {\n    clearSSOAppIdParamFromUrl();\n  }\n\n  const customAppId = getCustomAppIdParamFromUrl();\n  if (customAppId) {\n    clearCustomAppIdParamFromUrl();\n  }\n\n  const thirdPartyAppId = getThirdPartyAppIdParamFromUrl();\n  if (thirdPartyAppId) {\n    clearThirdPartyAppIdParamFromUrl();\n  }\n\n  const thirdPartyAppStateId = getThirdPartyAppStateIdParamFromUrl();\n  if (thirdPartyAppStateId) {\n    clearThirdPartyAppStateIdParamFromUrl();\n  }\n\n  const applicationScopes = getApplicationScopesParamFromUrl();\n  if (applicationScopes) {\n    clearApplicationScopesParamFromUrl();\n  }\n\n  const oidcLoginHint = getOIDCLoginHintParamFromUrl();\n  if (oidcLoginHint) {\n    clearOIDCLoginHintParamFromUrl();\n  }\n\n  const oidcPrompt = getOIDCPromptParamFromUrl();\n  if (oidcPrompt) {\n    clearOIDCPromptParamFromUrl();\n  }\n\n  const oidcErrorRedirectUri = getOIDCErrorRedirectUriParamFromUrl();\n  if (oidcErrorRedirectUri) {\n    clearOIDCErrorRedirectUriParamFromUrl();\n  }\n\n  const oidcResource = getOIDCResourceParamFromUrl();\n  if (oidcResource) {\n    clearOIDCResourceParamFromUrl();\n  }\n\n  const idpInitiatedVal = descopeIdpInitiated === 'true';\n\n  return {\n    executionId,\n    stepId,\n    token,\n    code,\n    isPopup,\n    exchangeError,\n    redirectAuthCodeChallenge,\n    redirectAuthCallbackUrl,\n    redirectAuthBackupCallbackUri,\n    redirectAuthInitiator,\n    ssoQueryParams: {\n      oidcIdpStateId,\n      samlIdpStateId,\n      wsfedIdpStateId,\n      samlIdpUsername,\n      descopeIdpInitiated: idpInitiatedVal,\n      ssoAppId,\n      customAppId,\n      oidcLoginHint,\n      oidcPrompt,\n      oidcErrorRedirectUri,\n      oidcResource,\n      thirdPartyAppId,\n      thirdPartyAppStateId,\n      applicationScopes,\n    },\n  };\n};\n\nexport const loadFont = (url: string) => {\n  if (!url) return;\n\n  const font = document.createElement('link');\n  font.href = url;\n  font.rel = 'stylesheet';\n  document.head.appendChild(font);\n};\n\nconst compareArrays = (array1: any[], array2: any[]) =>\n  array1.length === array2.length &&\n  array1.every((value: any, index: number) => value === array2[index]);\n\nexport const withMemCache = <I extends any[], O>(fn: (...args: I) => O) => {\n  let prevArgs: any[];\n  let cache: any;\n  return Object.assign(\n    (...args: I) => {\n      if (prevArgs && compareArrays(prevArgs, args)) return cache as O;\n\n      prevArgs = args;\n      cache = fn(...args);\n\n      return cache as O;\n    },\n    {\n      reset: () => {\n        prevArgs = undefined;\n        cache = undefined;\n      },\n    },\n  );\n};\n\nexport const FOCUSABLE_INPUTS_SELECTOR =\n  '*[name]:not([auto-focus=\"false\"]):not([aria-hidden=\"true\"])';\n\nexport const handleAutoFocus = (\n  ele: HTMLElement,\n  autoFocus: AutoFocusOptions,\n  isFirstScreen: boolean,\n) => {\n  if (\n    autoFocus === true ||\n    (autoFocus === 'skipFirstScreen' && !isFirstScreen)\n  ) {\n    // focus the first visible input\n    const firstVisibleInput: HTMLInputElement = ele.querySelector(\n      FOCUSABLE_INPUTS_SELECTOR,\n    );\n    setTimeout(() => {\n      firstVisibleInput?.focus();\n    });\n  }\n};\n\nexport const handleReportValidityOnBlur = (rootEle: HTMLElement) => {\n  rootEle.querySelectorAll('*[name]').forEach((ele: HTMLInputElement) => {\n    ele.addEventListener('blur', () => {\n      const onBlur = () => {\n        // reportValidity also focus the element if it's invalid\n        // in order to prevent this we need to override the focus method\n        const origFocus = ele.focus;\n        // eslint-disable-next-line no-param-reassign\n        ele.focus = () => {};\n        ele.reportValidity?.();\n        setTimeout(() => {\n          // eslint-disable-next-line no-param-reassign\n          ele.focus = origFocus;\n        });\n      };\n\n      const isInputAlreadyInErrorState = ele.getAttribute('invalid') === 'true';\n\n      if (isInputAlreadyInErrorState || ele.value?.length) {\n        onBlur();\n        return;\n      }\n\n      // If the input is not in an error state, has no value, and a `formnovalidate` button was clicked,\n      // we want to prevent triggering validation.\n      // This handles a case where a required input was focused, and the user then clicked a social login button —\n      // in that case, we don't want the required error message to flash for a split second.\n      const ref = { timer: undefined };\n\n      const onClick = (e: MouseEvent) => {\n        const target = e.target as HTMLElement;\n\n        if (target.getAttribute('formnovalidate') === 'true') {\n          clearTimeout(ref.timer);\n          ref.timer = undefined;\n        }\n      };\n\n      ref.timer = setTimeout(() => {\n        rootEle.removeEventListener('click', onClick);\n        onBlur();\n        ref.timer = undefined;\n      }, 150);\n\n      rootEle.addEventListener('click', onClick, { once: true });\n    });\n  });\n};\n\n/**\n * To return a fallback value in case the timeout expires and the promise\n * isn't fulfilled:\n *\n *   const promise = loadUserCount();\n *   const count = await timeoutPromise(2000, promise, 0);\n *\n * Or without a fallback value to just throw an error if the timeout expires:\n *\n *   try {\n *     count = await timeoutPromise(2000, promise);\n *   }\n *\n * Fallback is returned only in case of timeout, so if the passed promise rejects\n * the fallback value is not used, and the returned promise will throw as well.\n */\nexport function timeoutPromise<T>(\n  timeout: number,\n  promise: Promise<T>,\n  fallback?: T,\n): Promise<T> {\n  return new Promise((resolve, reject) => {\n    let expired = false;\n    const timer = setTimeout(() => {\n      expired = true;\n      if (fallback !== undefined) {\n        resolve(fallback);\n      } else {\n        reject(new Error(`Promise timed out after ${timeout} ms`));\n      }\n    }, timeout);\n\n    promise\n      .then((value) => {\n        if (!expired) {\n          clearTimeout(timer);\n          resolve(value);\n        }\n      })\n      .catch((error) => {\n        if (!expired) {\n          clearTimeout(timer);\n          reject(error);\n        }\n      });\n  });\n}\n\nexport const getChromiumVersion = (): number => {\n  const brands = (navigator as any)?.userAgentData?.brands;\n  const found = brands?.find(\n    ({ brand, version }) => brand === 'Chromium' && parseFloat(version),\n  );\n  return found ? found.version : 0;\n};\n\n// As an optimization - We can show first screen if we have startScreenId and we don't have any other of the ssoAppId/oidcIdpStateId/samlIdp params\n// - If there startScreenId it means that the sdk can show the first screen and we don't need to wait for the sdk to return the first screen\n// - If there is any one else of the other params (like oidcIdpStateId, ..) - we can't skip this call because descope may decide not to show the first screen (in cases like a user is already logged in)\nexport const showFirstScreenOnExecutionInit = (\n  startScreenId: string,\n  {\n    oidcIdpStateId,\n    samlIdpStateId,\n    wsfedIdpStateId,\n    samlIdpUsername,\n    ssoAppId,\n    customAppId,\n    oidcLoginHint,\n    oidcPrompt,\n    oidcErrorRedirectUri,\n    oidcResource,\n    thirdPartyAppId,\n    thirdPartyAppStateId,\n    applicationScopes,\n  }: SSOQueryParams,\n): boolean =>\n  !!startScreenId &&\n  !oidcIdpStateId &&\n  !samlIdpStateId &&\n  !wsfedIdpStateId &&\n  !samlIdpUsername &&\n  !ssoAppId &&\n  !customAppId &&\n  !oidcLoginHint &&\n  !oidcPrompt &&\n  !oidcErrorRedirectUri &&\n  !oidcResource &&\n  !thirdPartyAppId &&\n  !thirdPartyAppStateId &&\n  !applicationScopes;\n\nexport const injectSamlIdpForm = (\n  url: string,\n  samlResponse: string,\n  relayState: string,\n  submitCallback: (form: HTMLFormElement) => void,\n) => {\n  const formEle = document.createElement('form');\n  formEle.method = 'POST';\n  formEle.action = url;\n  formEle.innerHTML = `\n  <input type=\"hidden\" role=\"saml-response\" name=\"SAMLResponse\" value=\"${samlResponse}\" />\n  <input type=\"hidden\" role=\"saml-relay-state\" name=\"RelayState\" value=\"${relayState}\" />\n  <input style=\"display: none;\" id=\"SAMLSubmitButton\" type=\"submit\" value=\"Continue\" />\n  `;\n\n  document.body.appendChild(formEle);\n\n  submitCallback(formEle);\n};\n\nexport const injectWsFedIdpForm = (\n  url: string,\n  wresult: string,\n  wctx: string,\n  submitCallback: (form: HTMLFormElement) => void,\n) => {\n  const formEle = document.createElement('form');\n  formEle.method = 'POST';\n  formEle.action = url;\n\n  // Use DOM APIs to set values safely — wresult is raw XML that would break innerHTML interpolation\n  const createHiddenInput = (name: string, value: string) => {\n    const input = document.createElement('input');\n    input.type = 'hidden';\n    input.name = name;\n    input.value = value;\n    return input;\n  };\n\n  formEle.appendChild(createHiddenInput('wa', 'wsignin1.0'));\n  formEle.appendChild(createHiddenInput('wresult', wresult));\n  formEle.appendChild(createHiddenInput('wctx', wctx));\n\n  const submitBtn = document.createElement('input');\n  submitBtn.type = 'submit';\n  submitBtn.id = 'WSFedSubmitButton';\n  submitBtn.value = 'Continue';\n  submitBtn.style.display = 'none';\n  formEle.appendChild(submitBtn);\n\n  document.body.appendChild(formEle);\n\n  submitCallback(formEle);\n};\n\nexport const submitForm = (formEle: HTMLFormElement) => formEle?.submit();\n\nexport const getFirstNonEmptyValue = (obj: object, keys: string[]) => {\n  const firstNonEmptyKey = keys.find((key) => obj[key]);\n  return firstNonEmptyKey ? obj[firstNonEmptyKey] : null;\n};\n\nexport const leadingDebounce = <T extends (...args: any[]) => void>(\n  func: T,\n  wait = 100,\n) => {\n  let timeout: NodeJS.Timeout;\n  return function executedFunction(...args) {\n    if (!timeout) func.apply(this, args);\n    clearTimeout(timeout);\n    timeout = setTimeout(() => {\n      timeout = null;\n    }, wait);\n  } as T;\n};\n\nexport const clearPreviousExternalInputs = () => {\n  document\n    .querySelectorAll('[data-hidden-input=\"true\"]')\n    .forEach((ele) => ele.remove());\n};\n\nexport const shouldHandleMarkdown = (compName: string) =>\n  MD_COMPONENTS.includes(compName);\n\nconst omitBy = <T extends Record<string, any>>(\n  obj: T,\n  predicate: (value: any, key: keyof T) => boolean,\n): T =>\n  Object.fromEntries(\n    Object.entries(obj).filter(\n      ([key, value]) => !predicate(value, key as keyof T),\n    ),\n  ) as T;\n\nexport const transformStepStateForCustomScreen = (\n  state: Partial<StepState>,\n) => {\n  const sanitizedState: CustomScreenState = omitBy(\n    state.screenState,\n    (_, key) => EXCLUDED_STATE_KEYS.includes(key) || key.startsWith('_'),\n  );\n\n  const {\n    screenState: { errorText, errorType },\n  } = state;\n\n  if (errorText || errorType) {\n    sanitizedState.error = { text: errorText, type: errorType };\n  }\n\n  if (state.action) {\n    sanitizedState.action = state.action;\n  }\n\n  if (state.screenState?.componentsConfig?.thirdPartyAppApproveScopes?.data) {\n    sanitizedState.inboundAppApproveScopes =\n      state.screenState.componentsConfig.thirdPartyAppApproveScopes.data;\n  }\n\n  return sanitizedState;\n};\n\nexport const transformScreenInputs = (inputs: Record<string, any>) => {\n  const res = { ...inputs };\n\n  if (inputs.inboundAppApproveScopes) {\n    res.thirdPartyAppApproveScopes = inputs.inboundAppApproveScopes;\n  }\n\n  return res;\n};\n\nexport function getScriptResultPath(scriptId: string, resultKey?: string) {\n  const path = resultKey ? `${scriptId}_${resultKey}` : scriptId;\n  return `${SDK_SCRIPT_RESULTS_KEY}.${path}`;\n}\n\nexport const openCenteredPopup = (\n  url: string,\n  title: string,\n  w: number,\n  h: number,\n) => {\n  const dualScreenLeft =\n    window.screenLeft !== undefined\n      ? window.screenLeft\n      : (window.screen as any).left;\n  const dualScreenTop =\n    window.screenTop !== undefined\n      ? window.screenTop\n      : (window.screen as any).top;\n\n  const width =\n    window.innerWidth ||\n    document.documentElement.clientWidth ||\n    window.screen.width;\n  const height =\n    window.innerHeight ||\n    document.documentElement.clientHeight ||\n    window.screen.height;\n\n  const left = (width - w) / 2 + dualScreenLeft;\n  const top = (height - h) / 2 + dualScreenTop;\n\n  // Safari on Mac may detect authentication URLs and replace the popup with a native macOS auth dialog.\n  // To avoid that, we open the popup with empty string as URL and then populate it with the needed URL.\n  // This avoids the native dialog, and uses the web interface for authentication.\n  const initialUrl = isIphoneSafari() ? 'about:blank' : '';\n  const popup = window.open(\n    initialUrl,\n    title,\n    `width=${w},height=${h},top=${top},left=${left},scrollbars=yes,resizable=yes`,\n  );\n\n  popup.location.href = url;\n  popup.focus();\n\n  return popup;\n};\n"],"names":["MD_COMPONENTS","withRetry","fn","timeoutMs","maxRetries","args","__awaiter","this","lastError","totalAttempts","attempt","error","Promise","resolve","setTimeout","Math","pow","getUrlParam","paramName","URLSearchParams","window","location","search","get","resetUrlParam","history","replaceState","newUrl","URL","href","delete","toString","fetchContent","url","returnType","res","fetch","cache","ok","Error","status","body","headers","Object","fromEntries","entries","getContentUrl","projectId","filename","assetsFolder","ASSETS_FOLDER","baseUrl","OVERRIDE_CONTENT_URL","BASE_CONTENT_URL","pathname","paths","join","replace","pathJoin","getAnimationDirection","currentIdxStr","prevIdxStr","currentIdx","prevIdx","Number","isNaN","Direction","forward","backward","getRunIdsFromUrl","flowId","executionId","stepId","URL_RUN_IDS_PARAM_NAME","split","executionFlowId","_a","exec","getFlowIdFromExecId","isChromium","test","navigator","userAgent","vendor","clearRunIdsFromUrl","getTokenFromUrl","URL_TOKEN_PARAM_NAME","undefined","clearTokenFromUrl","getCodeFromUrl","URL_CODE_PARAM_NAME","getIsPopupFromUrl","URL_REDIRECT_MODE_PARAM_NAME","getExchangeErrorFromUrl","URL_ERR_PARAM_NAME","clearCodeFromUrl","clearIsPopupFromUrl","clearExchangeErrorFromUrl","getRedirectAuthFromUrl","redirectAuthCodeChallenge","URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME","redirectAuthCallbackUrl","URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME","redirectAuthBackupCallbackUri","URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME","redirectAuthInitiator","URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME","getOIDCIDPParamFromUrl","OIDC_IDP_STATE_ID_PARAM_NAME","clearOIDCIDPParamFromUrl","getSAMLIDPParamFromUrl","SAML_IDP_STATE_ID_PARAM_NAME","clearSAMLIDPParamFromUrl","getWSFedIDPParamFromUrl","WSFED_IDP_STATE_ID_PARAM_NAME","clearWSFedIDPParamFromUrl","getSAMLIDPUsernameParamFromUrl","SAML_IDP_USERNAME_PARAM_NAME","clearSAMLIDPUsernameParamFromUrl","getDescopeIDPInitiatedParamFromUrl","DESCOPE_IDP_INITIATED_PARAM_NAME","clearDescopeIDPInitiatedParamFromUrl","getSSOAppIdParamFromUrl","SSO_APP_ID_PARAM_NAME","getCustomAppIdParamFromUrl","CUSTOM_APP_ID_PARAM_NAME","getThirdPartyAppIdParamFromUrl","THIRD_PARTY_APP_ID_PARAM_NAME","clearSSOAppIdParamFromUrl","clearCustomAppIdParamFromUrl","clearThirdPartyAppIdParamFromUrl","getThirdPartyAppStateIdParamFromUrl","THIRD_PARTY_APP_STATE_ID_PARAM_NAME","clearThirdPartyAppStateIdParamFromUrl","getApplicationScopesParamFromUrl","APPLICATION_SCOPES_PARAM_NAME","clearApplicationScopesParamFromUrl","getOIDCLoginHintParamFromUrl","OIDC_LOGIN_HINT_PARAM_NAME","clearOIDCLoginHintParamFromUrl","getOIDCPromptParamFromUrl","OIDC_PROMPT_PARAM_NAME","clearOIDCPromptParamFromUrl","getOIDCErrorRedirectUriParamFromUrl","OIDC_ERROR_REDIRECT_URI_PARAM_NAME","clearOIDCErrorRedirectUriParamFromUrl","getOIDCResourceParamFromUrl","OIDC_RESOURCE_PARAM_NAME","clearOIDCResourceParamFromUrl","camelCase","s","x","toUpperCase","createIsChanged","state","prevState","attrName","getElementDescopeAttributes","ele","Array","from","attributes","reduce","acc","attr","descopeAttrName","RegExp","DESCOPE_ATTRIBUTE_PREFIX","name","assign","value","handleUrlParams","logger","debug","ssoQueryParams","token","code","isPopup","exchangeError","oidcIdpStateId","samlIdpStateId","wsfedIdpStateId","samlIdpUsername","descopeIdpInitiated","ssoAppId","customAppId","thirdPartyAppId","thirdPartyAppStateId","applicationScopes","oidcLoginHint","oidcPrompt","oidcErrorRedirectUri","oidcResource","withMemCache","prevArgs","array2","array1","length","every","index","reset","FOCUSABLE_INPUTS_SELECTOR","handleAutoFocus","autoFocus","isFirstScreen","firstVisibleInput","querySelector","focus","handleReportValidityOnBlur","rootEle","querySelectorAll","forEach","addEventListener","onBlur","origFocus","reportValidity","call","getAttribute","ref","timer","onClick","e","target","clearTimeout","removeEventListener","once","timeoutPromise","timeout","promise","fallback","reject","expired","then","catch","getChromiumVersion","brands","userAgentData","found","find","brand","version","parseFloat","showFirstScreenOnExecutionInit","startScreenId","injectSamlIdpForm","samlResponse","relayState","submitCallback","formEle","document","createElement","method","action","innerHTML","appendChild","injectWsFedIdpForm","wresult","wctx","createHiddenInput","input","type","submitBtn","id","style","display","submitForm","submit","getFirstNonEmptyValue","obj","keys","firstNonEmptyKey","key","leadingDebounce","func","wait","apply","clearPreviousExternalInputs","remove","shouldHandleMarkdown","compName","includes","transformStepStateForCustomScreen","sanitizedState","screenState","predicate","_","EXCLUDED_STATE_KEYS","startsWith","filter","errorText","errorType","text","_c","_b","componentsConfig","thirdPartyAppApproveScopes","data","inboundAppApproveScopes","transformScreenInputs","inputs","getScriptResultPath","scriptId","resultKey","SDK_SCRIPT_RESULTS_KEY","openCenteredPopup","title","w","h","dualScreenLeft","screenLeft","screen","left","dualScreenTop","screenTop","top","innerWidth","documentElement","clientWidth","width","innerHeight","clientHeight","height","initialUrl","ua","isIphone","isSafari","isIphoneSafari","popup","open"],"mappings":"0mCAuCA,MAAMA,EAAgB,CAAC,kCASPC,EACdC,EACAC,EACAC,GAEA,MAAO,IAAUC,IAAiCC,EAAAC,UAAA,OAAA,GAAA,YAChD,IAAIC,EACJ,MAAMC,EAAgBL,EAAa,EAGnC,IAAK,IAAIM,EAAU,EAAGA,EAAUD,EAAeC,IAC7C,IAEE,aAAaR,KAAMG,EACpB,CAAC,MAAOM,GACPH,EAAYG,EAGRD,EAAUN,UAEN,IAAIQ,SAASC,IACjBC,WAAWD,EAASV,EAAYY,KAAKC,IAAI,EAAGN,EAAU,GAAG,IAG9D,CAIH,MAAMF,CACR,GACF,CAEA,SAASS,EAAYC,GAGnB,OAFkB,IAAIC,gBAAgBC,OAAOC,SAASC,QAErCC,IAAIL,EACvB,CAgBA,SAASM,EAAcN,GACrB,GAAIE,OAAOK,QAAQC,cAAgBT,EAAYC,GAAY,CACzD,MAAMS,EAAS,IAAIC,IAAIR,OAAOC,SAASQ,MACjCP,EAAS,IAAIH,gBAAgBQ,EAAOL,QAC1CA,EAAOQ,OAAOZ,GACdS,EAAOL,OAASA,EAAOS,WACvBX,OAAOK,QAAQC,aAAa,CAAA,EAAI,GAAIC,EAAOI,WAC5C,CACH,CAOsB,SAAAC,EACpBC,EACAC,4CAKA,MAAMC,QAAYC,MAAMH,EAAK,CAAEI,MAAO,YACtC,IAAKF,EAAIG,GACP,MAAMC,MAAM,sBAAsBN,MAAQE,EAAIK,WAGhD,MAAO,CACLC,WAAYN,EAAID,KAChBQ,QAASC,OAAOC,YAAYT,EAAIO,QAAQG,cAE3C,CAIe,SAAAC,GAAcC,UAC5BA,EAASC,SACTA,EAAQC,aACRA,EAAeC,EAAaC,QAC5BA,IAOA,MAAMlB,EAAM,IAAIL,IAAIwB,GAAwBD,GAAWE,GAGvD,OAFApB,EAAIqB,SAdW,KAAIC,IAAoBA,EAAMC,KAAK,KAAKC,QAAQ,OAAQ,KAcxDC,CAASzB,EAAIqB,SAAUP,EAAWE,EAAcD,GAExDf,EAAIF,UACb,CAEgB,SAAA4B,EACdC,EACAC,GAEA,IAAKA,EAAY,OAEjB,MAAMC,GAAcF,EACdG,GAAWF,EAEjB,OAAIG,OAAOC,MAAMH,IAAeE,OAAOC,MAAMF,QAA7C,EACID,EAAaC,EAAgBG,EAAUC,QACvCL,EAAaC,EAAgBG,EAAUE,cAA3C,CAEF,CAEa,MAAAC,EAAoBC,IAC/B,IAAKC,EAAc,GAAIC,EAAS,KAjFzBvD,EAAYwD,IAiFyC,IAAIC,MAAM,KACtE,MAAMC,EA3DoB,CAACJ,UAE3B,OAAiC,QAA1BK,EADO,cACDC,KAAKN,UAAe,IAAAK,OAAA,EAAAA,EAAA,KAAM,EAAE,EAyDjBE,CAAoBP,GAQ5C,QALKD,GAAWK,GAAmBA,IAAoBL,KACrDC,EAAc,GACdC,EAAS,IAGJ,CAAED,cAAaC,SAAQG,kBAAiB,WAOjCI,IACd,MACE,SAASC,KAAKC,UAAUC,YAAc,aAAaF,KAAKC,UAAUE,OAEtE,UAagBC,IACd5D,EAAciD,EAChB,UAEgBY,IACd,OAAOpE,EAAYqE,SAAyBC,CAC9C,UAEgBC,IACdhE,EAAc8D,EAChB,UAEgBG,IACd,OAAOxE,EAAYyE,SAAwBH,CAC7C,UAEgBI,IACd,MAAqD,UAA9C1E,EAAY2E,EACrB,UAEgBC,IACd,OAAO5E,EAAY6E,SAAuBP,CAC5C,UAEgBQ,IACdvE,EAAckE,EAChB,UAEgBM,IACdxE,EAAcoE,EAChB,UAEgBK,IACdzE,EAAcsE,EAChB,UAEgBI,IAad,MAAO,CACLC,0BAbgClF,EAChCmF,GAaAC,wBAX8BpF,EAC9BqF,GAWAC,8BAToCtF,EACpCuF,GASAC,sBAP4BxF,EAC5ByF,GAQJ,UAEgBC,IACd,OAAO1F,EAAY2F,EACrB,UAEgBC,IACdrF,EAAcoF,EAChB,UAEgBE,IACd,OAAO7F,EAAY8F,EACrB,UAEgBC,IACdxF,EAAcuF,EAChB,UAEgBE,KACd,OAAOhG,EAAYiG,EACrB,UAEgBC,KACd3F,EAAc0F,EAChB,UAEgBE,KACd,OAAOnG,EAAYoG,EACrB,UAEgBC,KACd9F,EAAc6F,EAChB,UAEgBE,KACd,OAAOtG,EAAYuG,EACrB,UAEgBC,KACdjG,EAAcgG,EAChB,UAEgBE,KACd,OAAOzG,EAAY0G,EACrB,UAEgBC,KACd,OAAO3G,EAAY4G,EACrB,UAEgBC,KACd,OAAO7G,EAAY8G,EACrB,UAEgBC,KACdxG,EAAcmG,EAChB,UAEgBM,KACdzG,EAAcqG,EAChB,UAEgBK,KACd1G,EAAcuG,EAChB,UAEgBI,KACd,OAAOlH,EAAYmH,EACrB,UAEgBC,KACd7G,EAAc4G,EAChB,UAEgBE,KACd,OAAOrH,EAAYsH,EACrB,UAEgBC,KACdhH,EAAc+G,EAChB,UAEgBE,KACd,OAAOxH,EAAYyH,EACrB,UAEgBC,KACdnH,EAAckH,EAChB,UAEgBE,KACd,OAAO3H,EAAY4H,EACrB,UAEgBC,KACdtH,EAAcqH,EAChB,UAEgBE,KACd,OAAO9H,EAAY+H,EACrB,UAEgBC,KACdzH,EAAcwH,EAChB,UAEgBE,KACd,OAAOjI,EAAYkI,EACrB,UAEgBC,KACd5H,EAAc2H,EAChB,CAEO,MAAME,GAAaC,GACxBA,EAAE7F,QAAQ,OAAQ8F,GAAMA,EAAE,GAAGC,gBAElBC,GACX,CAAgCC,EAAUC,IACzCC,GACCF,EAAME,KAAcD,EAAUC,GAErBC,GAA+BC,GAC1CC,MAAMC,MAAKF,aAAG,EAAHA,EAAKG,aAAc,IAAIC,QAAO,CAACC,EAAKC,WAC7C,MAAMC,EAEc,QAFIzF,EAAA,IAAI0F,OAC1B,IAAIC,YACJ1F,KAAKuF,EAAKI,aAAQ,IAAA5F,OAAA,EAAAA,EAAA,GAEpB,OAAQyF,EAEJ1H,OAAO8H,OAAON,EAAK,CAAEE,CAACA,GAAkBD,EAAKM,QAD7CP,CACqD,GACxD,IAKQQ,GAAkB,CAC7BrG,EACAsG,KAEA,MAAMrG,YAAEA,EAAWC,OAAEA,EAAMG,gBAAEA,GAAoBN,EAAiBC,GAIlE,GAAIK,GAAmBL,IAAWK,EAIhC,OAHAiG,EAAOC,MACL,8EAEK,CAAEC,eAAgB,CAAA,IAGvBvG,GAAeC,IACjBY,IAGF,MAAM2F,EAAQ1F,IACV0F,GACFvF,IAGF,MAAMwF,EAAOvF,IACTuF,GACFjF,IAIF,MAAMkF,EAAUtF,IACZsF,GACFjF,IAGF,MAAMkF,EAAgBrF,IAClBqF,GACFjF,IAKF,MAAME,0BACJA,EAAyBE,wBACzBA,EAAuBE,8BACvBA,EAA6BE,sBAC7BA,GACEP,IAEEiF,EAAiBxE,IACnBwE,GACFtE,IAGF,MAAMuE,EAAiBtE,IACnBsE,GACFpE,IAGF,MAAMqE,EAAkBpE,KACpBoE,GACFlE,KAGF,MAAMmE,EAAkBlE,KACpBgE,GACF9D,KAGF,MAAMiE,EAAsBhE,KACxBgE,GACF9D,KAGF,MAAM+D,EAAW9D,KACb8D,GACFxD,KAGF,MAAMyD,EAAc7D,KAChB6D,GACFxD,KAGF,MAAMyD,EAAkB5D,KACpB4D,GACFxD,KAGF,MAAMyD,EAAuBxD,KACzBwD,GACFtD,KAGF,MAAMuD,EAAoBtD,KACtBsD,GACFpD,KAGF,MAAMqD,EAAgBpD,KAClBoD,GACFlD,KAGF,MAAMmD,EAAalD,KACfkD,GACFhD,KAGF,MAAMiD,EAAuBhD,KACzBgD,GACF9C,KAGF,MAAM+C,EAAe9C,KACjB8C,GACF5C,KAKF,MAAO,CACL7E,cACAC,SACAuG,QACAC,OACAC,UACAC,gBACA/E,4BACAE,0BACAE,gCACAE,wBACAqE,eAAgB,CACdK,iBACAC,iBACAC,kBACAC,kBACAC,oBAlB4C,SAAxBA,EAmBpBC,WACAC,cACAI,gBACAC,aACAC,uBACAC,eACAN,kBACAC,uBACAC,qBAEH,EAgBUK,GAAoC/L,IAC/C,IAAIgM,EACA7J,EACJ,OAAOM,OAAO8H,QACZ,IAAIpK,KACF,OAAI6L,IAT4BC,EASQ9L,GATvB+L,EASaF,GAR3BG,SAAWF,EAAOE,QACzBD,EAAOE,OAAM,CAAC5B,EAAY6B,IAAkB7B,IAAUyB,EAAOI,QASzDL,EAAW7L,EACXgC,EAAQnC,KAAMG,IAHwCgC,EATtC,IAAC+J,EAAeD,CAcf,GAEnB,CACEK,MAAO,KACLN,OAAW3G,EACXlD,OAAQkD,CAAS,GAGtB,EAGUkH,GACX,8DAEWC,GAAkB,CAC7B5C,EACA6C,EACAC,KAEA,IACgB,IAAdD,GACe,oBAAdA,IAAoCC,EACrC,CAEA,MAAMC,EAAsC/C,EAAIgD,cAC9CL,IAEF3L,YAAW,KACT+L,SAAAA,EAAmBE,OAAO,GAE7B,GAGUC,GAA8BC,IACzCA,EAAQC,iBAAiB,WAAWC,SAASrD,IAC3CA,EAAIsD,iBAAiB,QAAQ,WAC3B,MAAMC,EAAS,WAGb,MAAMC,EAAYxD,EAAIiD,MAEtBjD,EAAIiD,MAAQ,OACM,QAAlBnI,EAAAkF,EAAIyD,sBAAc,IAAA3I,GAAAA,EAAA4I,KAAA1D,GAClBhJ,YAAW,KAETgJ,EAAIiD,MAAQO,CAAS,GACrB,EAKJ,GAFmE,SAAhCxD,EAAI2D,aAAa,aAEP,QAAX7I,EAAAkF,EAAIY,aAAO,IAAA9F,OAAA,EAAAA,EAAAyH,QAE3C,YADAgB,IAQF,MAAMK,EAAM,CAAEC,WAAOpI,GAEfqI,EAAWC,IAG+B,SAF/BA,EAAEC,OAENL,aAAa,oBACtBM,aAAaL,EAAIC,OACjBD,EAAIC,WAAQpI,EACb,EAGHmI,EAAIC,MAAQ7M,YAAW,KACrBmM,EAAQe,oBAAoB,QAASJ,GACrCP,IACAK,EAAIC,WAAQpI,CAAS,GACpB,KAEH0H,EAAQG,iBAAiB,QAASQ,EAAS,CAAEK,MAAM,GAAO,GAC1D,GACF,WAmBYC,GACdC,EACAC,EACAC,GAEA,OAAO,IAAIzN,SAAQ,CAACC,EAASyN,KAC3B,IAAIC,GAAU,EACd,MAAMZ,EAAQ7M,YAAW,KACvByN,GAAU,OACOhJ,IAAb8I,EACFxN,EAAQwN,GAERC,EAAO,IAAI/L,MAAM,2BAA2B4L,QAC7C,GACAA,GAEHC,EACGI,MAAM9D,IACA6D,IACHR,aAAaJ,GACb9M,EAAQ6J,GACT,IAEF+D,OAAO9N,IACD4N,IACHR,aAAaJ,GACbW,EAAO3N,GACR,GACD,GAER,CAEO,MAAM+N,GAAqB,WAChC,MAAMC,EAA4C,QAAlC/J,EAAA,OAAAK,gBAAA,IAAAA,eAAA,EAAAA,UAAmB2J,qBAAe,IAAAhK,OAAA,EAAAA,EAAA+J,OAC5CE,EAAQF,aAAM,EAANA,EAAQG,MACpB,EAAGC,QAAOC,aAAwB,aAAVD,GAAwBE,WAAWD,KAE7D,OAAOH,EAAQA,EAAMG,QAAU,CAAC,EAMrBE,GAAiC,CAC5CC,GAEEhE,iBACAC,iBACAC,kBACAC,kBACAE,WACAC,cACAI,gBACAC,aACAC,uBACAC,eACAN,kBACAC,uBACAC,0BAGAuD,GACDhE,GACAC,GACAC,GACAC,GACAE,GACAC,GACAI,GACAC,GACAC,GACAC,GACAN,GACAC,GACAC,GAEUwD,GAAoB,CAC/BnN,EACAoN,EACAC,EACAC,KAEA,MAAMC,EAAUC,SAASC,cAAc,QACvCF,EAAQG,OAAS,OACjBH,EAAQI,OAAS3N,EACjBuN,EAAQK,UAAY,4EACmDR,kFACCC,qGAIxEG,SAAShN,KAAKqN,YAAYN,GAE1BD,EAAeC,EAAQ,EAGZO,GAAqB,CAChC9N,EACA+N,EACAC,EACAV,KAEA,MAAMC,EAAUC,SAASC,cAAc,QACvCF,EAAQG,OAAS,OACjBH,EAAQI,OAAS3N,EAGjB,MAAMiO,EAAoB,CAAC1F,EAAcE,KACvC,MAAMyF,EAAQV,SAASC,cAAc,SAIrC,OAHAS,EAAMC,KAAO,SACbD,EAAM3F,KAAOA,EACb2F,EAAMzF,MAAQA,EACPyF,CAAK,EAGdX,EAAQM,YAAYI,EAAkB,KAAM,eAC5CV,EAAQM,YAAYI,EAAkB,UAAWF,IACjDR,EAAQM,YAAYI,EAAkB,OAAQD,IAE9C,MAAMI,EAAYZ,SAASC,cAAc,SACzCW,EAAUD,KAAO,SACjBC,EAAUC,GAAK,oBACfD,EAAU3F,MAAQ,WAClB2F,EAAUE,MAAMC,QAAU,OAC1BhB,EAAQM,YAAYO,GAEpBZ,SAAShN,KAAKqN,YAAYN,GAE1BD,EAAeC,EAAQ,EAGZiB,GAAcjB,GAA6BA,aAAO,EAAPA,EAASkB,SAEpDC,GAAwB,CAACC,EAAaC,KACjD,MAAMC,EAAmBD,EAAK/B,MAAMiC,GAAQH,EAAIG,KAChD,OAAOD,EAAmBF,EAAIE,GAAoB,IAAI,EAG3CE,GAAkB,CAC7BC,EACAC,EAAO,OAEP,IAAI/C,EACJ,OAAO,YAA6B9N,GAC7B8N,GAAS8C,EAAKE,MAAM5Q,KAAMF,GAC/B0N,aAAaI,GACbA,EAAUrN,YAAW,KACnBqN,EAAU,IAAI,GACb+C,EACL,CAAM,EAGKE,GAA8B,KACzC3B,SACGvC,iBAAiB,8BACjBC,SAASrD,GAAQA,EAAIuH,UAAS,EAGtBC,GAAwBC,GACnCvR,EAAcwR,SAASD,GAYZE,GACX/H,cAEA,MAAMgI,GAZNd,EAaElH,EAAMiI,YAZRC,EAaE,CAACC,EAAGd,IAAQe,EAAoBN,SAAST,IAAQA,EAAIgB,WAAW,KAXlEpP,OAAOC,YACLD,OAAOE,QAAQ+N,GAAKoB,QAClB,EAAEjB,EAAKrG,MAAYkH,EAAUlH,EAAOqG,OAN3B,IACbH,EACAgB,EAgBA,MACED,aAAaM,UAAEA,EAASC,UAAEA,IACxBxI,EAeJ,OAbIuI,GAAaC,KACfR,EAAe/Q,MAAQ,CAAEwR,KAAMF,EAAW7B,KAAM8B,IAG9CxI,EAAMkG,SACR8B,EAAe9B,OAASlG,EAAMkG,SAGqC,QAAjEwC,EAAqC,QAArCC,EAAmB,QAAnBzN,EAAA8E,EAAMiI,mBAAa,IAAA/M,OAAA,EAAAA,EAAA0N,wBAAkB,IAAAD,OAAA,EAAAA,EAAAE,kCAA4B,IAAAH,OAAA,EAAAA,EAAAI,QACnEd,EAAee,wBACb/I,EAAMiI,YAAYW,iBAAiBC,2BAA2BC,MAG3Dd,CAAc,EAGVgB,GAAyBC,IACpC,MAAMxQ,EAAGQ,OAAA8H,OAAA,CAAA,EAAQkI,GAMjB,OAJIA,EAAOF,0BACTtQ,EAAIoQ,2BAA6BI,EAAOF,yBAGnCtQ,CAAG,EAGI,SAAAyQ,GAAoBC,EAAkBC,GAEpD,MAAO,GAAGC,KADGD,EAAY,GAAGD,KAAYC,IAAcD,GAExD,CAEO,MAAMG,GAAoB,CAC/B/Q,EACAgR,EACAC,EACAC,KAEA,MAAMC,OACkB7N,IAAtBnE,OAAOiS,WACHjS,OAAOiS,WACNjS,OAAOkS,OAAeC,KACvBC,OACiBjO,IAArBnE,OAAOqS,UACHrS,OAAOqS,UACNrS,OAAOkS,OAAeI,IAWvBH,IARJnS,OAAOuS,YACPlE,SAASmE,gBAAgBC,aACzBzS,OAAOkS,OAAOQ,OAMMZ,GAAK,EAAIE,EACzBM,IALJtS,OAAO2S,aACPtE,SAASmE,gBAAgBI,cACzB5S,OAAOkS,OAAOW,QAGMd,GAAK,EAAIK,EAKzBU,EA7sBR,WACE,MAAMC,EAAKlP,UAAUC,WAAa,GAC5BkP,EAAW,eAAepP,KAAKmP,GAE/BE,EACJ,SAASrP,KAAKmP,KAAQ,2CAA2CnP,KAAKmP,GAExE,OAAOC,GAAYC,CACrB,CAqsBqBC,GAAmB,cAAgB,GAChDC,EAAQnT,OAAOoT,KACnBN,EACAjB,EACA,SAASC,YAAYC,SAASO,UAAYH,kCAM5C,OAHAgB,EAAMlT,SAASQ,KAAOI,EACtBsS,EAAMxH,QAECwH,CAAK"}
+{"version":3,"file":"helpers.js","sources":["../../../src/lib/helpers/helpers.ts"],"sourcesContent":["import {\n  ASSETS_FOLDER,\n  BASE_CONTENT_URL,\n  DESCOPE_ATTRIBUTE_PREFIX,\n  URL_CODE_PARAM_NAME,\n  URL_ERR_PARAM_NAME,\n  URL_RUN_IDS_PARAM_NAME,\n  URL_TOKEN_PARAM_NAME,\n  URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME,\n  URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME,\n  URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME,\n  URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME,\n  OIDC_IDP_STATE_ID_PARAM_NAME,\n  SAML_IDP_STATE_ID_PARAM_NAME,\n  WSFED_IDP_STATE_ID_PARAM_NAME,\n  SAML_IDP_USERNAME_PARAM_NAME,\n  SSO_APP_ID_PARAM_NAME,\n  CUSTOM_APP_ID_PARAM_NAME,\n  OIDC_LOGIN_HINT_PARAM_NAME,\n  DESCOPE_IDP_INITIATED_PARAM_NAME,\n  OVERRIDE_CONTENT_URL,\n  OIDC_PROMPT_PARAM_NAME,\n  OIDC_RESOURCE_PARAM_NAME,\n  OIDC_ERROR_REDIRECT_URI_PARAM_NAME,\n  THIRD_PARTY_APP_ID_PARAM_NAME,\n  THIRD_PARTY_APP_STATE_ID_PARAM_NAME,\n  APPLICATION_SCOPES_PARAM_NAME,\n  SDK_SCRIPT_RESULTS_KEY,\n  URL_REDIRECT_MODE_PARAM_NAME,\n} from '../constants';\nimport { EXCLUDED_STATE_KEYS } from '../constants/customScreens';\nimport {\n  AutoFocusOptions,\n  ComponentsConfig,\n  CustomScreenData,\n  CustomScreenState,\n  Direction,\n  ScreenState,\n  SSOQueryParams,\n  StepState,\n} from '../types';\n\nconst MD_COMPONENTS = ['descope-enriched-text'];\n\n/**\n * Wraps an async function with retry logic\n * @param fn - The async function to wrap\n * @param timeoutMs - Time to wait between retries in milliseconds\n * @param maxRetries - Maximum number of retry attempts\n * @returns A new function with retry logic\n */\nexport function withRetry<TArgs extends any[], TReturn>(\n  fn: (...args: TArgs) => Promise<TReturn>,\n  timeoutMs: number,\n  maxRetries: number,\n): (...args: TArgs) => Promise<TReturn> {\n  return async (...args: TArgs): Promise<TReturn> => {\n    let lastError: any;\n    const totalAttempts = maxRetries + 1; // initial attempt + retries\n\n    // eslint-disable-next-line no-plusplus\n    for (let attempt = 0; attempt < totalAttempts; attempt++) {\n      try {\n        // eslint-disable-next-line no-await-in-loop\n        return await fn(...args);\n      } catch (error) {\n        lastError = error;\n\n        // Don't wait after the last attempt\n        if (attempt < maxRetries) {\n          // eslint-disable-next-line no-await-in-loop\n          await new Promise((resolve) => {\n            setTimeout(resolve, timeoutMs * Math.pow(2, attempt + 1));\n          });\n        }\n      }\n    }\n\n    // All attempts failed, throw the last error\n    throw lastError;\n  };\n}\n\nfunction getUrlParam(paramName: string) {\n  const urlParams = new URLSearchParams(window.location.search);\n\n  return urlParams.get(paramName);\n}\n\nfunction getFlowUrlParam() {\n  return getUrlParam(URL_RUN_IDS_PARAM_NAME);\n}\n\nfunction setFlowUrlParam(id: string) {\n  if (window.history.pushState && id !== getFlowUrlParam()) {\n    const newUrl = new URL(window.location.href);\n    const search = new URLSearchParams(newUrl.search);\n    search.set(URL_RUN_IDS_PARAM_NAME, id);\n    newUrl.search = search.toString();\n    window.history.pushState({}, '', newUrl.toString());\n  }\n}\n\nfunction resetUrlParam(paramName: string) {\n  if (window.history.replaceState && getUrlParam(paramName)) {\n    const newUrl = new URL(window.location.href);\n    const search = new URLSearchParams(newUrl.search);\n    search.delete(paramName);\n    newUrl.search = search.toString();\n    window.history.replaceState({}, '', newUrl.toString());\n  }\n}\n\nconst getFlowIdFromExecId = (executionId: string) => {\n  const regex = /(.*)\\|#\\|.*/;\n  return regex.exec(executionId)?.[1] || '';\n};\n\nexport async function fetchContent<T extends 'text' | 'json'>(\n  url: string,\n  returnType: T,\n): Promise<{\n  body: T extends 'json' ? Record<string, any> : string;\n  headers: Record<string, string>;\n}> {\n  const res = await fetch(url, { cache: 'default' });\n  if (!res.ok) {\n    throw Error(`Error fetching URL ${url} [${res.status}]`);\n  }\n\n  return {\n    body: await res[returnType || 'text'](),\n    headers: Object.fromEntries(res.headers.entries()),\n  };\n}\n\nconst pathJoin = (...paths: string[]) => paths.join('/').replace(/\\/+/g, '/'); // preventing duplicate separators\n\nexport function getContentUrl({\n  projectId,\n  filename,\n  assetsFolder = ASSETS_FOLDER,\n  baseUrl,\n}: {\n  projectId: string;\n  filename: string;\n  assetsFolder?: string;\n  baseUrl?: string;\n}) {\n  const url = new URL(OVERRIDE_CONTENT_URL || baseUrl || BASE_CONTENT_URL);\n  url.pathname = pathJoin(url.pathname, projectId, assetsFolder, filename);\n\n  return url.toString();\n}\n\nexport function getAnimationDirection(\n  currentIdxStr: string,\n  prevIdxStr: string,\n) {\n  if (!prevIdxStr) return undefined;\n\n  const currentIdx = +currentIdxStr;\n  const prevIdx = +prevIdxStr;\n\n  if (Number.isNaN(currentIdx) || Number.isNaN(prevIdx)) return undefined;\n  if (currentIdx > prevIdx) return Direction.forward;\n  if (currentIdx < prevIdx) return Direction.backward;\n  return undefined;\n}\n\nexport const getRunIdsFromUrl = (flowId: string) => {\n  let [executionId = '', stepId = ''] = (getFlowUrlParam() || '').split('_');\n  const executionFlowId = getFlowIdFromExecId(executionId);\n\n  // if the flow id does not match, this execution id is not for this flow\n  if (!flowId || (executionFlowId && executionFlowId !== flowId)) {\n    executionId = '';\n    stepId = '';\n  }\n\n  return { executionId, stepId, executionFlowId };\n};\n\nexport const setRunIdsOnUrl = (executionId: string, stepId: string) => {\n  setFlowUrlParam([executionId, stepId].join('_'));\n};\n\nexport function isChromium() {\n  return (\n    /Chrome/.test(navigator.userAgent) && /Google Inc/.test(navigator.vendor)\n  );\n}\n\n// Detect Safari running on iPhone specifically.\nfunction isIphoneSafari() {\n  const ua = navigator.userAgent || '';\n  const isIphone = /\\b(iPhone)\\b/.test(ua);\n  // Safari UA contains 'Safari' and usually 'Version/X', exclude other iOS browsers\n  const isSafari =\n    /Safari/.test(ua) && !/CriOS|FxiOS|OPiOS|EdgiOS|Chrome|Chromium/.test(ua);\n\n  return isIphone && isSafari;\n}\n\nexport function clearRunIdsFromUrl() {\n  resetUrlParam(URL_RUN_IDS_PARAM_NAME);\n}\n\nexport function getTokenFromUrl() {\n  return getUrlParam(URL_TOKEN_PARAM_NAME) || undefined;\n}\n\nexport function clearTokenFromUrl() {\n  resetUrlParam(URL_TOKEN_PARAM_NAME);\n}\n\nexport function getCodeFromUrl() {\n  return getUrlParam(URL_CODE_PARAM_NAME) || undefined;\n}\n\nexport function getIsPopupFromUrl() {\n  return getUrlParam(URL_REDIRECT_MODE_PARAM_NAME) === 'popup';\n}\n\nexport function getExchangeErrorFromUrl() {\n  return getUrlParam(URL_ERR_PARAM_NAME) || undefined;\n}\n\nexport function clearCodeFromUrl() {\n  resetUrlParam(URL_CODE_PARAM_NAME);\n}\n\nexport function clearIsPopupFromUrl() {\n  resetUrlParam(URL_REDIRECT_MODE_PARAM_NAME);\n}\n\nexport function clearExchangeErrorFromUrl() {\n  resetUrlParam(URL_ERR_PARAM_NAME);\n}\n\nexport function getRedirectAuthFromUrl() {\n  const redirectAuthCodeChallenge = getUrlParam(\n    URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME,\n  );\n  const redirectAuthCallbackUrl = getUrlParam(\n    URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME,\n  );\n  const redirectAuthBackupCallbackUri = getUrlParam(\n    URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME,\n  );\n  const redirectAuthInitiator = getUrlParam(\n    URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME,\n  );\n  return {\n    redirectAuthCodeChallenge,\n    redirectAuthCallbackUrl,\n    redirectAuthBackupCallbackUri,\n    redirectAuthInitiator,\n  };\n}\n\nexport function getOIDCIDPParamFromUrl() {\n  return getUrlParam(OIDC_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearOIDCIDPParamFromUrl() {\n  resetUrlParam(OIDC_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getSAMLIDPParamFromUrl() {\n  return getUrlParam(SAML_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearSAMLIDPParamFromUrl() {\n  resetUrlParam(SAML_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getWSFedIDPParamFromUrl() {\n  return getUrlParam(WSFED_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearWSFedIDPParamFromUrl() {\n  resetUrlParam(WSFED_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getSAMLIDPUsernameParamFromUrl() {\n  return getUrlParam(SAML_IDP_USERNAME_PARAM_NAME);\n}\n\nexport function clearSAMLIDPUsernameParamFromUrl() {\n  resetUrlParam(SAML_IDP_USERNAME_PARAM_NAME);\n}\n\nexport function getDescopeIDPInitiatedParamFromUrl() {\n  return getUrlParam(DESCOPE_IDP_INITIATED_PARAM_NAME);\n}\n\nexport function clearDescopeIDPInitiatedParamFromUrl() {\n  resetUrlParam(DESCOPE_IDP_INITIATED_PARAM_NAME);\n}\n\nexport function getSSOAppIdParamFromUrl() {\n  return getUrlParam(SSO_APP_ID_PARAM_NAME);\n}\n\nexport function getCustomAppIdParamFromUrl() {\n  return getUrlParam(CUSTOM_APP_ID_PARAM_NAME);\n}\n\nexport function getThirdPartyAppIdParamFromUrl() {\n  return getUrlParam(THIRD_PARTY_APP_ID_PARAM_NAME);\n}\n\nexport function clearSSOAppIdParamFromUrl() {\n  resetUrlParam(SSO_APP_ID_PARAM_NAME);\n}\n\nexport function clearCustomAppIdParamFromUrl() {\n  resetUrlParam(CUSTOM_APP_ID_PARAM_NAME);\n}\n\nexport function clearThirdPartyAppIdParamFromUrl() {\n  resetUrlParam(THIRD_PARTY_APP_ID_PARAM_NAME);\n}\n\nexport function getThirdPartyAppStateIdParamFromUrl() {\n  return getUrlParam(THIRD_PARTY_APP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearThirdPartyAppStateIdParamFromUrl() {\n  resetUrlParam(THIRD_PARTY_APP_STATE_ID_PARAM_NAME);\n}\n\nexport function getApplicationScopesParamFromUrl() {\n  return getUrlParam(APPLICATION_SCOPES_PARAM_NAME);\n}\n\nexport function clearApplicationScopesParamFromUrl() {\n  resetUrlParam(APPLICATION_SCOPES_PARAM_NAME);\n}\n\nexport function getOIDCLoginHintParamFromUrl() {\n  return getUrlParam(OIDC_LOGIN_HINT_PARAM_NAME);\n}\n\nexport function clearOIDCLoginHintParamFromUrl() {\n  resetUrlParam(OIDC_LOGIN_HINT_PARAM_NAME);\n}\n\nexport function getOIDCPromptParamFromUrl() {\n  return getUrlParam(OIDC_PROMPT_PARAM_NAME);\n}\n\nexport function clearOIDCPromptParamFromUrl() {\n  resetUrlParam(OIDC_PROMPT_PARAM_NAME);\n}\n\nexport function getOIDCErrorRedirectUriParamFromUrl() {\n  return getUrlParam(OIDC_ERROR_REDIRECT_URI_PARAM_NAME);\n}\n\nexport function clearOIDCErrorRedirectUriParamFromUrl() {\n  resetUrlParam(OIDC_ERROR_REDIRECT_URI_PARAM_NAME);\n}\n\nexport function getOIDCResourceParamFromUrl() {\n  return getUrlParam(OIDC_RESOURCE_PARAM_NAME);\n}\n\nexport function clearOIDCResourceParamFromUrl() {\n  resetUrlParam(OIDC_RESOURCE_PARAM_NAME);\n}\n\nexport const camelCase = (s: string) =>\n  s.replace(/-./g, (x) => x[1].toUpperCase());\n\nexport const createIsChanged =\n  <T extends Record<string, any>>(state: T, prevState: T) =>\n  (attrName: keyof T) =>\n    state[attrName] !== prevState[attrName];\n\nexport const getElementDescopeAttributes = (ele: HTMLElement) =>\n  Array.from(ele?.attributes || []).reduce((acc, attr) => {\n    const descopeAttrName = new RegExp(\n      `^${DESCOPE_ATTRIBUTE_PREFIX}(\\\\S+)$`,\n    ).exec(attr.name)?.[1];\n\n    return !descopeAttrName\n      ? acc\n      : Object.assign(acc, { [descopeAttrName]: attr.value });\n  }, {});\n\nexport const getFlowConfig = (config: Record<string, any>, flowId: string) =>\n  config?.flows?.[flowId] || {};\n\nexport const handleUrlParams = (\n  flowId: string,\n  logger: { debug: (...data: any[]) => void },\n) => {\n  const { executionId, stepId, executionFlowId } = getRunIdsFromUrl(flowId);\n\n  // if the flow id does not match, we do not want to read & remove any query params\n  // because it's probably belongs to another flow\n  if (executionFlowId && flowId !== executionFlowId) {\n    logger.debug(\n      'Flow id does not match the execution flow id, skipping url params handling',\n    );\n    return { ssoQueryParams: {} };\n  }\n\n  if (executionId || stepId) {\n    clearRunIdsFromUrl();\n  }\n\n  const token = getTokenFromUrl();\n  if (token) {\n    clearTokenFromUrl();\n  }\n\n  const code = getCodeFromUrl();\n  if (code) {\n    clearCodeFromUrl();\n  }\n\n  // this is used for oauth when we want to open the provider login page in a new tab\n  const isPopup = getIsPopupFromUrl();\n  if (isPopup) {\n    clearIsPopupFromUrl();\n  }\n\n  const exchangeError = getExchangeErrorFromUrl();\n  if (exchangeError) {\n    clearExchangeErrorFromUrl();\n  }\n\n  // these query params are retained to allow the flow to be refreshed\n  // without losing the redirect auth state\n  const {\n    redirectAuthCodeChallenge,\n    redirectAuthCallbackUrl,\n    redirectAuthBackupCallbackUri,\n    redirectAuthInitiator,\n  } = getRedirectAuthFromUrl();\n\n  const oidcIdpStateId = getOIDCIDPParamFromUrl();\n  if (oidcIdpStateId) {\n    clearOIDCIDPParamFromUrl();\n  }\n\n  const samlIdpStateId = getSAMLIDPParamFromUrl();\n  if (samlIdpStateId) {\n    clearSAMLIDPParamFromUrl();\n  }\n\n  const wsfedIdpStateId = getWSFedIDPParamFromUrl();\n  if (wsfedIdpStateId) {\n    clearWSFedIDPParamFromUrl();\n  }\n\n  const samlIdpUsername = getSAMLIDPUsernameParamFromUrl();\n  if (samlIdpStateId) {\n    clearSAMLIDPUsernameParamFromUrl();\n  }\n\n  const descopeIdpInitiated = getDescopeIDPInitiatedParamFromUrl();\n  if (descopeIdpInitiated) {\n    clearDescopeIDPInitiatedParamFromUrl();\n  }\n\n  const ssoAppId = getSSOAppIdParamFromUrl();\n  if (ssoAppId) {\n    clearSSOAppIdParamFromUrl();\n  }\n\n  const customAppId = getCustomAppIdParamFromUrl();\n  if (customAppId) {\n    clearCustomAppIdParamFromUrl();\n  }\n\n  const thirdPartyAppId = getThirdPartyAppIdParamFromUrl();\n  if (thirdPartyAppId) {\n    clearThirdPartyAppIdParamFromUrl();\n  }\n\n  const thirdPartyAppStateId = getThirdPartyAppStateIdParamFromUrl();\n  if (thirdPartyAppStateId) {\n    clearThirdPartyAppStateIdParamFromUrl();\n  }\n\n  const applicationScopes = getApplicationScopesParamFromUrl();\n  if (applicationScopes) {\n    clearApplicationScopesParamFromUrl();\n  }\n\n  const oidcLoginHint = getOIDCLoginHintParamFromUrl();\n  if (oidcLoginHint) {\n    clearOIDCLoginHintParamFromUrl();\n  }\n\n  const oidcPrompt = getOIDCPromptParamFromUrl();\n  if (oidcPrompt) {\n    clearOIDCPromptParamFromUrl();\n  }\n\n  const oidcErrorRedirectUri = getOIDCErrorRedirectUriParamFromUrl();\n  if (oidcErrorRedirectUri) {\n    clearOIDCErrorRedirectUriParamFromUrl();\n  }\n\n  const oidcResource = getOIDCResourceParamFromUrl();\n  if (oidcResource) {\n    clearOIDCResourceParamFromUrl();\n  }\n\n  const idpInitiatedVal = descopeIdpInitiated === 'true';\n\n  return {\n    executionId,\n    stepId,\n    token,\n    code,\n    isPopup,\n    exchangeError,\n    redirectAuthCodeChallenge,\n    redirectAuthCallbackUrl,\n    redirectAuthBackupCallbackUri,\n    redirectAuthInitiator,\n    ssoQueryParams: {\n      oidcIdpStateId,\n      samlIdpStateId,\n      wsfedIdpStateId,\n      samlIdpUsername,\n      descopeIdpInitiated: idpInitiatedVal,\n      ssoAppId,\n      customAppId,\n      oidcLoginHint,\n      oidcPrompt,\n      oidcErrorRedirectUri,\n      oidcResource,\n      thirdPartyAppId,\n      thirdPartyAppStateId,\n      applicationScopes,\n    },\n  };\n};\n\nexport const loadFont = (url: string) => {\n  if (!url) return;\n\n  const font = document.createElement('link');\n  font.href = url;\n  font.rel = 'stylesheet';\n  document.head.appendChild(font);\n};\n\nconst compareArrays = (array1: any[], array2: any[]) =>\n  array1.length === array2.length &&\n  array1.every((value: any, index: number) => value === array2[index]);\n\nexport const withMemCache = <I extends any[], O>(fn: (...args: I) => O) => {\n  let prevArgs: any[];\n  let cache: any;\n  return Object.assign(\n    (...args: I) => {\n      if (prevArgs && compareArrays(prevArgs, args)) return cache as O;\n\n      prevArgs = args;\n      cache = fn(...args);\n\n      return cache as O;\n    },\n    {\n      reset: () => {\n        prevArgs = undefined;\n        cache = undefined;\n      },\n    },\n  );\n};\n\nexport const FOCUSABLE_INPUTS_SELECTOR =\n  '*[name]:not([auto-focus=\"false\"]):not([aria-hidden=\"true\"])';\n\nexport const handleAutoFocus = (\n  ele: HTMLElement,\n  autoFocus: AutoFocusOptions,\n  isFirstScreen: boolean,\n) => {\n  if (\n    autoFocus === true ||\n    (autoFocus === 'skipFirstScreen' && !isFirstScreen)\n  ) {\n    // focus the first visible input\n    const firstVisibleInput: HTMLInputElement = ele.querySelector(\n      FOCUSABLE_INPUTS_SELECTOR,\n    );\n    setTimeout(() => {\n      firstVisibleInput?.focus();\n    });\n  }\n};\n\nexport const handleReportValidityOnBlur = (rootEle: HTMLElement) => {\n  rootEle.querySelectorAll('*[name]').forEach((ele: HTMLInputElement) => {\n    ele.addEventListener('blur', () => {\n      const onBlur = () => {\n        // reportValidity also focus the element if it's invalid\n        // in order to prevent this we need to override the focus method\n        const origFocus = ele.focus;\n        // eslint-disable-next-line no-param-reassign\n        ele.focus = () => {};\n        ele.reportValidity?.();\n        setTimeout(() => {\n          // eslint-disable-next-line no-param-reassign\n          ele.focus = origFocus;\n        });\n      };\n\n      const isInputAlreadyInErrorState = ele.getAttribute('invalid') === 'true';\n\n      if (isInputAlreadyInErrorState || ele.value?.length) {\n        onBlur();\n        return;\n      }\n\n      // If the input is not in an error state, has no value, and a `formnovalidate` button was clicked,\n      // we want to prevent triggering validation.\n      // This handles a case where a required input was focused, and the user then clicked a social login button —\n      // in that case, we don't want the required error message to flash for a split second.\n      const ref = { timer: undefined };\n\n      const onClick = (e: MouseEvent) => {\n        const target = e.target as HTMLElement;\n\n        if (target.getAttribute('formnovalidate') === 'true') {\n          clearTimeout(ref.timer);\n          ref.timer = undefined;\n        }\n      };\n\n      ref.timer = setTimeout(() => {\n        rootEle.removeEventListener('click', onClick);\n        onBlur();\n        ref.timer = undefined;\n      }, 150);\n\n      rootEle.addEventListener('click', onClick, { once: true });\n    });\n  });\n};\n\n/**\n * To return a fallback value in case the timeout expires and the promise\n * isn't fulfilled:\n *\n *   const promise = loadUserCount();\n *   const count = await timeoutPromise(2000, promise, 0);\n *\n * Or without a fallback value to just throw an error if the timeout expires:\n *\n *   try {\n *     count = await timeoutPromise(2000, promise);\n *   }\n *\n * Fallback is returned only in case of timeout, so if the passed promise rejects\n * the fallback value is not used, and the returned promise will throw as well.\n */\nexport function timeoutPromise<T>(\n  timeout: number,\n  promise: Promise<T>,\n  fallback?: T,\n): Promise<T> {\n  return new Promise((resolve, reject) => {\n    let expired = false;\n    const timer = setTimeout(() => {\n      expired = true;\n      if (fallback !== undefined) {\n        resolve(fallback);\n      } else {\n        reject(new Error(`Promise timed out after ${timeout} ms`));\n      }\n    }, timeout);\n\n    promise\n      .then((value) => {\n        if (!expired) {\n          clearTimeout(timer);\n          resolve(value);\n        }\n      })\n      .catch((error) => {\n        if (!expired) {\n          clearTimeout(timer);\n          reject(error);\n        }\n      });\n  });\n}\n\nexport const getChromiumVersion = (): number => {\n  const brands = (navigator as any)?.userAgentData?.brands;\n  const found = brands?.find(\n    ({ brand, version }) => brand === 'Chromium' && parseFloat(version),\n  );\n  return found ? found.version : 0;\n};\n\n// As an optimization - We can show first screen if we have startScreenId and we don't have any other of the ssoAppId/oidcIdpStateId/samlIdp params\n// - If there startScreenId it means that the sdk can show the first screen and we don't need to wait for the sdk to return the first screen\n// - If there is any one else of the other params (like oidcIdpStateId, ..) - we can't skip this call because descope may decide not to show the first screen (in cases like a user is already logged in)\nexport const showFirstScreenOnExecutionInit = (\n  startScreenId: string,\n  {\n    oidcIdpStateId,\n    samlIdpStateId,\n    wsfedIdpStateId,\n    samlIdpUsername,\n    ssoAppId,\n    customAppId,\n    oidcLoginHint,\n    oidcPrompt,\n    oidcErrorRedirectUri,\n    oidcResource,\n    thirdPartyAppId,\n    thirdPartyAppStateId,\n    applicationScopes,\n  }: SSOQueryParams,\n): boolean =>\n  !!startScreenId &&\n  !oidcIdpStateId &&\n  !samlIdpStateId &&\n  !wsfedIdpStateId &&\n  !samlIdpUsername &&\n  !ssoAppId &&\n  !customAppId &&\n  !oidcLoginHint &&\n  !oidcPrompt &&\n  !oidcErrorRedirectUri &&\n  !oidcResource &&\n  !thirdPartyAppId &&\n  !thirdPartyAppStateId &&\n  !applicationScopes;\n\nexport const injectSamlIdpForm = (\n  url: string,\n  samlResponse: string,\n  relayState: string,\n  submitCallback: (form: HTMLFormElement) => void,\n) => {\n  const formEle = document.createElement('form');\n  formEle.method = 'POST';\n  formEle.action = url;\n  formEle.innerHTML = `\n  <input type=\"hidden\" role=\"saml-response\" name=\"SAMLResponse\" value=\"${samlResponse}\" />\n  <input type=\"hidden\" role=\"saml-relay-state\" name=\"RelayState\" value=\"${relayState}\" />\n  <input style=\"display: none;\" id=\"SAMLSubmitButton\" type=\"submit\" value=\"Continue\" />\n  `;\n\n  document.body.appendChild(formEle);\n\n  submitCallback(formEle);\n};\n\nexport const injectWsFedIdpForm = (\n  url: string,\n  wresult: string,\n  wctx: string,\n  submitCallback: (form: HTMLFormElement) => void,\n) => {\n  const formEle = document.createElement('form');\n  formEle.method = 'POST';\n  formEle.action = url;\n\n  // Use DOM APIs to set values safely — wresult is raw XML that would break innerHTML interpolation\n  const createHiddenInput = (name: string, value: string) => {\n    const input = document.createElement('input');\n    input.type = 'hidden';\n    input.name = name;\n    input.value = value;\n    return input;\n  };\n\n  formEle.appendChild(createHiddenInput('wa', 'wsignin1.0'));\n  formEle.appendChild(createHiddenInput('wresult', wresult));\n  formEle.appendChild(createHiddenInput('wctx', wctx));\n\n  const submitBtn = document.createElement('input');\n  submitBtn.type = 'submit';\n  submitBtn.id = 'WSFedSubmitButton';\n  submitBtn.value = 'Continue';\n  submitBtn.style.display = 'none';\n  formEle.appendChild(submitBtn);\n\n  document.body.appendChild(formEle);\n\n  submitCallback(formEle);\n};\n\nexport const submitForm = (formEle: HTMLFormElement) => formEle?.submit();\n\nexport const getFirstNonEmptyValue = (obj: object, keys: string[]) => {\n  const firstNonEmptyKey = keys.find((key) => obj[key]);\n  return firstNonEmptyKey ? obj[firstNonEmptyKey] : null;\n};\n\nexport const leadingDebounce = <T extends (...args: any[]) => void>(\n  func: T,\n  wait = 100,\n) => {\n  let timeout: NodeJS.Timeout;\n  return function executedFunction(...args) {\n    if (!timeout) func.apply(this, args);\n    clearTimeout(timeout);\n    timeout = setTimeout(() => {\n      timeout = null;\n    }, wait);\n  } as T;\n};\n\nexport const clearPreviousExternalInputs = () => {\n  document\n    .querySelectorAll('[data-hidden-input=\"true\"]')\n    .forEach((ele) => ele.remove());\n};\n\nexport const shouldHandleMarkdown = (compName: string) =>\n  MD_COMPONENTS.includes(compName);\n\nconst omitBy = <T extends Record<string, any>>(\n  obj: T,\n  predicate: (value: any, key: keyof T) => boolean,\n): T =>\n  Object.fromEntries(\n    Object.entries(obj).filter(\n      ([key, value]) => !predicate(value, key as keyof T),\n    ),\n  ) as T;\n\n// Reads the `data-name` value out of a `[data-name=\"x\"]` selector (either quote style).\nconst dataNameOf = (selector: string): string | undefined =>\n  selector.match(/\\[data-name=[\"']([^\"']+)[\"']\\]/)?.[1];\n\nconst PASSWORD_POLICY_KEYS: Record<string, string> = {\n  minLength: 'data-password-policy-value-minlength',\n  strength: 'data-password-policy-value-passwordstrength',\n  disallowedChars: 'data-password-policy-value-disallowedchars',\n  email: 'data-password-policy-value-email',\n  activePolicies: 'active-policies',\n  availablePolicies: 'available-policies',\n};\n\n// Renames the backend's password-policy attribute keys to clean names.\n// Returns undefined when the screen has no password policy.\nconst normalizePasswordPolicy = (\n  newPassword: Record<string, any> | undefined,\n): Record<string, unknown> | undefined => {\n  if (!newPassword) return undefined;\n  const policy = Object.fromEntries(\n    Object.entries(PASSWORD_POLICY_KEYS)\n      .map(([clean, raw]) => [clean, newPassword[raw]])\n      .filter(([, v]) => v !== undefined),\n  );\n  return Object.keys(policy).length ? policy : undefined;\n};\n\n// Reads one `componentsDynamicAttrs` entry by its `[data-name=\"…\"]` name. The backend\n// keys these by CSS selector, so we match on the data-name rather than the raw key.\nconst dynamicAttrsOf = (\n  componentsConfig: ComponentsConfig | undefined,\n  name: string,\n): Record<string, any> | undefined => {\n  const entries = componentsConfig?.componentsDynamicAttrs;\n  if (!entries) return undefined;\n  const match = Object.entries(entries).find(\n    ([selector]) => dataNameOf(selector) === name,\n  );\n  return match?.[1]?.attributes;\n};\n\nconst recoveryCodesOf = (componentsConfig: ComponentsConfig | undefined) => {\n  const attributes = dynamicAttrsOf(componentsConfig, 'recoveryCodes');\n  if (!attributes) return undefined;\n  return Array.isArray(attributes.data)\n    ? attributes.data.map((code: { value: string }) => code.value)\n    : [];\n};\n\nconst outboundAppOf = (componentsConfig: ComponentsConfig | undefined) => {\n  const attributes = dynamicAttrsOf(componentsConfig, 'outboundApp');\n  if (!attributes) return undefined;\n  return {\n    label: attributes.label,\n    iconSrc: attributes['icon-src'],\n    appId: attributes['data-descope-outbound-oauth-app-id'],\n  };\n};\n\n// The complete, allow-listed contract for `context.data`: one entry per `data` field,\n// each with the `data` key and a `from` reader over the raw screen state. Every field\n// is defined the same way and at the same level. Because we only read the fields listed\n// here, all other screen-state data is left out by construction — internal backend\n// fields, and dynamic-select options (which the backend spreads into componentsConfig\n// under arbitrary flow-defined keys). Exposing those is reserved for a future\n// `data.selects` map. Mirrors the backend `ExternalStateContext` / `ComponentsConfig`\n// structs (orchestrationservice .../domain/context.go).\nconst DATA_FIELDS: {\n  key: string;\n  from: (screenState: ScreenState) => unknown;\n}[] = [\n  // moved verbatim from the top level of the screen state\n  { key: 'totp', from: (s) => s.totp },\n  { key: 'notp', from: (s) => s.notp },\n  { key: 'sentTo', from: (s) => s.sentTo },\n  { key: 'sso', from: (s) => s.sso },\n  { key: 'selfProvisionDomains', from: (s) => s.selfProvisionDomains },\n  // from componentsConfig — renamed, most unwrapped from a `{ data }` / `{ options }` wrapper\n  {\n    key: 'inboundAppApproveScopes',\n    from: (s) => s.componentsConfig?.thirdPartyAppApproveScopes?.data,\n  },\n  { key: 'securityQuestionsSetup', from: (s) => s.componentsConfig?.sqSetup },\n  { key: 'securityQuestionsVerify', from: (s) => s.componentsConfig?.sqVerify },\n  {\n    key: 'userTenants',\n    from: (s) => s.componentsConfig?.userSelectedTenant?.data,\n  },\n  { key: 'userRoles', from: (s) => s.componentsConfig?.userRoles?.data },\n  {\n    key: 'ssoApplications',\n    from: (s) => s.componentsConfig?.ssoApplications?.data,\n  },\n  {\n    key: 'ssoConfigurations',\n    from: (s) => s.componentsConfig?.ssoConfigurations?.data,\n  },\n  {\n    key: 'samlAttributeMappings',\n    from: (s) => s.componentsConfig?.samlMappings?.options,\n  },\n  {\n    key: 'oidcAttributeMappings',\n    from: (s) => s.componentsConfig?.oidcMappings?.options,\n  },\n  {\n    key: 'samlGroupMappings',\n    from: (s) => s.componentsConfig?.samlGroupMappings?.options,\n  },\n  {\n    key: 'passwordPolicy',\n    from: (s) => normalizePasswordPolicy(s.componentsConfig?.newPassword),\n  },\n  // from componentsConfig.componentsDynamicAttrs, matched by [data-name=\"…\"]\n  { key: 'recoveryCodes', from: (s) => recoveryCodesOf(s.componentsConfig) },\n  { key: 'outboundApp', from: (s) => outboundAppOf(s.componentsConfig) },\n];\n\n/**\n * Build the custom-screen `data` field — all server-produced screen data in one place.\n * Every field is declared in DATA_FIELDS as a `data` key + a reader over the raw screen\n * state; this function just applies them and skips any whose reader returns undefined.\n * Returns undefined when nothing was produced.\n */\nconst buildCustomScreenData = (\n  screenState: ScreenState | undefined,\n): CustomScreenData | undefined => {\n  if (!screenState) return undefined;\n\n  const data: Record<string, unknown> = {};\n  DATA_FIELDS.forEach(({ key, from }) => {\n    const value = from(screenState);\n    if (value !== undefined) data[key] = value;\n  });\n\n  return Object.keys(data).length ? (data as CustomScreenData) : undefined;\n};\n\nexport const transformStepStateForCustomScreen = (\n  state: Partial<StepState>,\n) => {\n  const sanitizedState: CustomScreenState = omitBy(\n    state.screenState,\n    (_, key) => EXCLUDED_STATE_KEYS.includes(key) || key.startsWith('_'),\n  );\n\n  const {\n    screenState: { errorText, errorType },\n  } = state;\n\n  if (errorText || errorType) {\n    sanitizedState.error = { text: errorText, type: errorType };\n  }\n\n  if (state.action) {\n    sanitizedState.action = state.action;\n  }\n\n  // `data` is SDK-owned and stripped from the raw state via EXCLUDED_STATE_KEYS,\n  // so a backend-provided `data` never leaks through — we always set our own below.\n  const data = buildCustomScreenData(state.screenState);\n  if (data) {\n    sanitizedState.data = data;\n  }\n\n  return sanitizedState;\n};\n\nexport const transformScreenInputs = (inputs: Record<string, any>) => {\n  const res = { ...inputs };\n\n  if (inputs.inboundAppApproveScopes) {\n    res.thirdPartyAppApproveScopes = inputs.inboundAppApproveScopes;\n  }\n\n  return res;\n};\n\nexport function getScriptResultPath(scriptId: string, resultKey?: string) {\n  const path = resultKey ? `${scriptId}_${resultKey}` : scriptId;\n  return `${SDK_SCRIPT_RESULTS_KEY}.${path}`;\n}\n\nexport const openCenteredPopup = (\n  url: string,\n  title: string,\n  w: number,\n  h: number,\n) => {\n  const dualScreenLeft =\n    window.screenLeft !== undefined\n      ? window.screenLeft\n      : (window.screen as any).left;\n  const dualScreenTop =\n    window.screenTop !== undefined\n      ? window.screenTop\n      : (window.screen as any).top;\n\n  const width =\n    window.innerWidth ||\n    document.documentElement.clientWidth ||\n    window.screen.width;\n  const height =\n    window.innerHeight ||\n    document.documentElement.clientHeight ||\n    window.screen.height;\n\n  const left = (width - w) / 2 + dualScreenLeft;\n  const top = (height - h) / 2 + dualScreenTop;\n\n  // Safari on Mac may detect authentication URLs and replace the popup with a native macOS auth dialog.\n  // To avoid that, we open the popup with empty string as URL and then populate it with the needed URL.\n  // This avoids the native dialog, and uses the web interface for authentication.\n  const initialUrl = isIphoneSafari() ? 'about:blank' : '';\n  const popup = window.open(\n    initialUrl,\n    title,\n    `width=${w},height=${h},top=${top},left=${left},scrollbars=yes,resizable=yes`,\n  );\n\n  popup.location.href = url;\n  popup.focus();\n\n  return popup;\n};\n"],"names":["MD_COMPONENTS","withRetry","fn","timeoutMs","maxRetries","args","__awaiter","this","lastError","totalAttempts","attempt","error","Promise","resolve","setTimeout","Math","pow","getUrlParam","paramName","URLSearchParams","window","location","search","get","resetUrlParam","history","replaceState","newUrl","URL","href","delete","toString","fetchContent","url","returnType","res","fetch","cache","ok","Error","status","body","headers","Object","fromEntries","entries","getContentUrl","projectId","filename","assetsFolder","ASSETS_FOLDER","baseUrl","OVERRIDE_CONTENT_URL","BASE_CONTENT_URL","pathname","paths","join","replace","pathJoin","getAnimationDirection","currentIdxStr","prevIdxStr","currentIdx","prevIdx","Number","isNaN","Direction","forward","backward","getRunIdsFromUrl","flowId","executionId","stepId","URL_RUN_IDS_PARAM_NAME","split","executionFlowId","_a","exec","getFlowIdFromExecId","isChromium","test","navigator","userAgent","vendor","clearRunIdsFromUrl","getTokenFromUrl","URL_TOKEN_PARAM_NAME","undefined","clearTokenFromUrl","getCodeFromUrl","URL_CODE_PARAM_NAME","getIsPopupFromUrl","URL_REDIRECT_MODE_PARAM_NAME","getExchangeErrorFromUrl","URL_ERR_PARAM_NAME","clearCodeFromUrl","clearIsPopupFromUrl","clearExchangeErrorFromUrl","getRedirectAuthFromUrl","redirectAuthCodeChallenge","URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME","redirectAuthCallbackUrl","URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME","redirectAuthBackupCallbackUri","URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME","redirectAuthInitiator","URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME","getOIDCIDPParamFromUrl","OIDC_IDP_STATE_ID_PARAM_NAME","clearOIDCIDPParamFromUrl","getSAMLIDPParamFromUrl","SAML_IDP_STATE_ID_PARAM_NAME","clearSAMLIDPParamFromUrl","getWSFedIDPParamFromUrl","WSFED_IDP_STATE_ID_PARAM_NAME","clearWSFedIDPParamFromUrl","getSAMLIDPUsernameParamFromUrl","SAML_IDP_USERNAME_PARAM_NAME","clearSAMLIDPUsernameParamFromUrl","getDescopeIDPInitiatedParamFromUrl","DESCOPE_IDP_INITIATED_PARAM_NAME","clearDescopeIDPInitiatedParamFromUrl","getSSOAppIdParamFromUrl","SSO_APP_ID_PARAM_NAME","getCustomAppIdParamFromUrl","CUSTOM_APP_ID_PARAM_NAME","getThirdPartyAppIdParamFromUrl","THIRD_PARTY_APP_ID_PARAM_NAME","clearSSOAppIdParamFromUrl","clearCustomAppIdParamFromUrl","clearThirdPartyAppIdParamFromUrl","getThirdPartyAppStateIdParamFromUrl","THIRD_PARTY_APP_STATE_ID_PARAM_NAME","clearThirdPartyAppStateIdParamFromUrl","getApplicationScopesParamFromUrl","APPLICATION_SCOPES_PARAM_NAME","clearApplicationScopesParamFromUrl","getOIDCLoginHintParamFromUrl","OIDC_LOGIN_HINT_PARAM_NAME","clearOIDCLoginHintParamFromUrl","getOIDCPromptParamFromUrl","OIDC_PROMPT_PARAM_NAME","clearOIDCPromptParamFromUrl","getOIDCErrorRedirectUriParamFromUrl","OIDC_ERROR_REDIRECT_URI_PARAM_NAME","clearOIDCErrorRedirectUriParamFromUrl","getOIDCResourceParamFromUrl","OIDC_RESOURCE_PARAM_NAME","clearOIDCResourceParamFromUrl","camelCase","s","x","toUpperCase","createIsChanged","state","prevState","attrName","getElementDescopeAttributes","ele","Array","from","attributes","reduce","acc","attr","descopeAttrName","RegExp","DESCOPE_ATTRIBUTE_PREFIX","name","assign","value","handleUrlParams","logger","debug","ssoQueryParams","token","code","isPopup","exchangeError","oidcIdpStateId","samlIdpStateId","wsfedIdpStateId","samlIdpUsername","descopeIdpInitiated","ssoAppId","customAppId","thirdPartyAppId","thirdPartyAppStateId","applicationScopes","oidcLoginHint","oidcPrompt","oidcErrorRedirectUri","oidcResource","withMemCache","prevArgs","array2","array1","length","every","index","reset","FOCUSABLE_INPUTS_SELECTOR","handleAutoFocus","autoFocus","isFirstScreen","firstVisibleInput","querySelector","focus","handleReportValidityOnBlur","rootEle","querySelectorAll","forEach","addEventListener","onBlur","origFocus","reportValidity","call","getAttribute","ref","timer","onClick","e","target","clearTimeout","removeEventListener","once","timeoutPromise","timeout","promise","fallback","reject","expired","then","catch","getChromiumVersion","brands","userAgentData","found","find","brand","version","parseFloat","showFirstScreenOnExecutionInit","startScreenId","injectSamlIdpForm","samlResponse","relayState","submitCallback","formEle","document","createElement","method","action","innerHTML","appendChild","injectWsFedIdpForm","wresult","wctx","createHiddenInput","input","type","submitBtn","id","style","display","submitForm","submit","getFirstNonEmptyValue","obj","keys","firstNonEmptyKey","key","leadingDebounce","func","wait","apply","clearPreviousExternalInputs","remove","shouldHandleMarkdown","compName","includes","PASSWORD_POLICY_KEYS","minLength","strength","disallowedChars","email","activePolicies","availablePolicies","dynamicAttrsOf","componentsConfig","componentsDynamicAttrs","match","selector","dataNameOf","DATA_FIELDS","totp","notp","sentTo","sso","selfProvisionDomains","_b","thirdPartyAppApproveScopes","data","sqSetup","sqVerify","userSelectedTenant","userRoles","ssoApplications","ssoConfigurations","samlMappings","options","oidcMappings","samlGroupMappings","newPassword","policy","map","clean","raw","filter","v","normalizePasswordPolicy","isArray","recoveryCodesOf","label","iconSrc","appId","outboundAppOf","transformStepStateForCustomScreen","sanitizedState","screenState","predicate","_","EXCLUDED_STATE_KEYS","startsWith","errorText","errorType","text","buildCustomScreenData","transformScreenInputs","inputs","inboundAppApproveScopes","getScriptResultPath","scriptId","resultKey","SDK_SCRIPT_RESULTS_KEY","openCenteredPopup","title","w","h","dualScreenLeft","screenLeft","screen","left","dualScreenTop","screenTop","top","innerWidth","documentElement","clientWidth","width","innerHeight","clientHeight","height","initialUrl","ua","isIphone","isSafari","isIphoneSafari","popup","open"],"mappings":"0mCA0CA,MAAMA,EAAgB,CAAC,kCASPC,EACdC,EACAC,EACAC,GAEA,MAAO,IAAUC,IAAiCC,EAAAC,UAAA,OAAA,GAAA,YAChD,IAAIC,EACJ,MAAMC,EAAgBL,EAAa,EAGnC,IAAK,IAAIM,EAAU,EAAGA,EAAUD,EAAeC,IAC7C,IAEE,aAAaR,KAAMG,EACpB,CAAC,MAAOM,GACPH,EAAYG,EAGRD,EAAUN,UAEN,IAAIQ,SAASC,IACjBC,WAAWD,EAASV,EAAYY,KAAKC,IAAI,EAAGN,EAAU,GAAG,IAG9D,CAIH,MAAMF,CACR,GACF,CAEA,SAASS,EAAYC,GAGnB,OAFkB,IAAIC,gBAAgBC,OAAOC,SAASC,QAErCC,IAAIL,EACvB,CAgBA,SAASM,EAAcN,GACrB,GAAIE,OAAOK,QAAQC,cAAgBT,EAAYC,GAAY,CACzD,MAAMS,EAAS,IAAIC,IAAIR,OAAOC,SAASQ,MACjCP,EAAS,IAAIH,gBAAgBQ,EAAOL,QAC1CA,EAAOQ,OAAOZ,GACdS,EAAOL,OAASA,EAAOS,WACvBX,OAAOK,QAAQC,aAAa,CAAA,EAAI,GAAIC,EAAOI,WAC5C,CACH,CAOsB,SAAAC,EACpBC,EACAC,4CAKA,MAAMC,QAAYC,MAAMH,EAAK,CAAEI,MAAO,YACtC,IAAKF,EAAIG,GACP,MAAMC,MAAM,sBAAsBN,MAAQE,EAAIK,WAGhD,MAAO,CACLC,WAAYN,EAAID,KAChBQ,QAASC,OAAOC,YAAYT,EAAIO,QAAQG,cAE3C,CAIe,SAAAC,GAAcC,UAC5BA,EAASC,SACTA,EAAQC,aACRA,EAAeC,EAAaC,QAC5BA,IAOA,MAAMlB,EAAM,IAAIL,IAAIwB,GAAwBD,GAAWE,GAGvD,OAFApB,EAAIqB,SAdW,KAAIC,IAAoBA,EAAMC,KAAK,KAAKC,QAAQ,OAAQ,KAcxDC,CAASzB,EAAIqB,SAAUP,EAAWE,EAAcD,GAExDf,EAAIF,UACb,CAEgB,SAAA4B,EACdC,EACAC,GAEA,IAAKA,EAAY,OAEjB,MAAMC,GAAcF,EACdG,GAAWF,EAEjB,OAAIG,OAAOC,MAAMH,IAAeE,OAAOC,MAAMF,QAA7C,EACID,EAAaC,EAAgBG,EAAUC,QACvCL,EAAaC,EAAgBG,EAAUE,cAA3C,CAEF,CAEa,MAAAC,EAAoBC,IAC/B,IAAKC,EAAc,GAAIC,EAAS,KAjFzBvD,EAAYwD,IAiFyC,IAAIC,MAAM,KACtE,MAAMC,EA3DoB,CAACJ,UAE3B,OAAiC,QAA1BK,EADO,cACDC,KAAKN,UAAe,IAAAK,OAAA,EAAAA,EAAA,KAAM,EAAE,EAyDjBE,CAAoBP,GAQ5C,QALKD,GAAWK,GAAmBA,IAAoBL,KACrDC,EAAc,GACdC,EAAS,IAGJ,CAAED,cAAaC,SAAQG,kBAAiB,WAOjCI,IACd,MACE,SAASC,KAAKC,UAAUC,YAAc,aAAaF,KAAKC,UAAUE,OAEtE,UAagBC,IACd5D,EAAciD,EAChB,UAEgBY,IACd,OAAOpE,EAAYqE,SAAyBC,CAC9C,UAEgBC,IACdhE,EAAc8D,EAChB,UAEgBG,IACd,OAAOxE,EAAYyE,SAAwBH,CAC7C,UAEgBI,IACd,MAAqD,UAA9C1E,EAAY2E,EACrB,UAEgBC,IACd,OAAO5E,EAAY6E,SAAuBP,CAC5C,UAEgBQ,IACdvE,EAAckE,EAChB,UAEgBM,IACdxE,EAAcoE,EAChB,UAEgBK,IACdzE,EAAcsE,EAChB,UAEgBI,IAad,MAAO,CACLC,0BAbgClF,EAChCmF,GAaAC,wBAX8BpF,EAC9BqF,GAWAC,8BAToCtF,EACpCuF,GASAC,sBAP4BxF,EAC5ByF,GAQJ,UAEgBC,IACd,OAAO1F,EAAY2F,EACrB,UAEgBC,IACdrF,EAAcoF,EAChB,UAEgBE,IACd,OAAO7F,EAAY8F,EACrB,UAEgBC,IACdxF,EAAcuF,EAChB,UAEgBE,KACd,OAAOhG,EAAYiG,EACrB,UAEgBC,KACd3F,EAAc0F,EAChB,UAEgBE,KACd,OAAOnG,EAAYoG,EACrB,UAEgBC,KACd9F,EAAc6F,EAChB,UAEgBE,KACd,OAAOtG,EAAYuG,EACrB,UAEgBC,KACdjG,EAAcgG,EAChB,UAEgBE,KACd,OAAOzG,EAAY0G,EACrB,UAEgBC,KACd,OAAO3G,EAAY4G,EACrB,UAEgBC,KACd,OAAO7G,EAAY8G,EACrB,UAEgBC,KACdxG,EAAcmG,EAChB,UAEgBM,KACdzG,EAAcqG,EAChB,UAEgBK,KACd1G,EAAcuG,EAChB,UAEgBI,KACd,OAAOlH,EAAYmH,EACrB,UAEgBC,KACd7G,EAAc4G,EAChB,UAEgBE,KACd,OAAOrH,EAAYsH,EACrB,UAEgBC,KACdhH,EAAc+G,EAChB,UAEgBE,KACd,OAAOxH,EAAYyH,EACrB,UAEgBC,KACdnH,EAAckH,EAChB,UAEgBE,KACd,OAAO3H,EAAY4H,EACrB,UAEgBC,KACdtH,EAAcqH,EAChB,UAEgBE,KACd,OAAO9H,EAAY+H,EACrB,UAEgBC,KACdzH,EAAcwH,EAChB,UAEgBE,KACd,OAAOjI,EAAYkI,EACrB,UAEgBC,KACd5H,EAAc2H,EAChB,CAEO,MAAME,GAAaC,GACxBA,EAAE7F,QAAQ,OAAQ8F,GAAMA,EAAE,GAAGC,gBAElBC,GACX,CAAgCC,EAAUC,IACzCC,GACCF,EAAME,KAAcD,EAAUC,GAErBC,GAA+BC,GAC1CC,MAAMC,MAAKF,aAAG,EAAHA,EAAKG,aAAc,IAAIC,QAAO,CAACC,EAAKC,WAC7C,MAAMC,EAEc,QAFIzF,EAAA,IAAI0F,OAC1B,IAAIC,YACJ1F,KAAKuF,EAAKI,aAAQ,IAAA5F,OAAA,EAAAA,EAAA,GAEpB,OAAQyF,EAEJ1H,OAAO8H,OAAON,EAAK,CAAEE,CAACA,GAAkBD,EAAKM,QAD7CP,CACqD,GACxD,IAKQQ,GAAkB,CAC7BrG,EACAsG,KAEA,MAAMrG,YAAEA,EAAWC,OAAEA,EAAMG,gBAAEA,GAAoBN,EAAiBC,GAIlE,GAAIK,GAAmBL,IAAWK,EAIhC,OAHAiG,EAAOC,MACL,8EAEK,CAAEC,eAAgB,CAAA,IAGvBvG,GAAeC,IACjBY,IAGF,MAAM2F,EAAQ1F,IACV0F,GACFvF,IAGF,MAAMwF,EAAOvF,IACTuF,GACFjF,IAIF,MAAMkF,EAAUtF,IACZsF,GACFjF,IAGF,MAAMkF,EAAgBrF,IAClBqF,GACFjF,IAKF,MAAME,0BACJA,EAAyBE,wBACzBA,EAAuBE,8BACvBA,EAA6BE,sBAC7BA,GACEP,IAEEiF,EAAiBxE,IACnBwE,GACFtE,IAGF,MAAMuE,EAAiBtE,IACnBsE,GACFpE,IAGF,MAAMqE,EAAkBpE,KACpBoE,GACFlE,KAGF,MAAMmE,EAAkBlE,KACpBgE,GACF9D,KAGF,MAAMiE,EAAsBhE,KACxBgE,GACF9D,KAGF,MAAM+D,EAAW9D,KACb8D,GACFxD,KAGF,MAAMyD,EAAc7D,KAChB6D,GACFxD,KAGF,MAAMyD,EAAkB5D,KACpB4D,GACFxD,KAGF,MAAMyD,EAAuBxD,KACzBwD,GACFtD,KAGF,MAAMuD,EAAoBtD,KACtBsD,GACFpD,KAGF,MAAMqD,EAAgBpD,KAClBoD,GACFlD,KAGF,MAAMmD,EAAalD,KACfkD,GACFhD,KAGF,MAAMiD,EAAuBhD,KACzBgD,GACF9C,KAGF,MAAM+C,EAAe9C,KACjB8C,GACF5C,KAKF,MAAO,CACL7E,cACAC,SACAuG,QACAC,OACAC,UACAC,gBACA/E,4BACAE,0BACAE,gCACAE,wBACAqE,eAAgB,CACdK,iBACAC,iBACAC,kBACAC,kBACAC,oBAlB4C,SAAxBA,EAmBpBC,WACAC,cACAI,gBACAC,aACAC,uBACAC,eACAN,kBACAC,uBACAC,qBAEH,EAgBUK,GAAoC/L,IAC/C,IAAIgM,EACA7J,EACJ,OAAOM,OAAO8H,QACZ,IAAIpK,KACF,OAAI6L,IAT4BC,EASQ9L,GATvB+L,EASaF,GAR3BG,SAAWF,EAAOE,QACzBD,EAAOE,OAAM,CAAC5B,EAAY6B,IAAkB7B,IAAUyB,EAAOI,QASzDL,EAAW7L,EACXgC,EAAQnC,KAAMG,IAHwCgC,EATtC,IAAC+J,EAAeD,CAcf,GAEnB,CACEK,MAAO,KACLN,OAAW3G,EACXlD,OAAQkD,CAAS,GAGtB,EAGUkH,GACX,8DAEWC,GAAkB,CAC7B5C,EACA6C,EACAC,KAEA,IACgB,IAAdD,GACe,oBAAdA,IAAoCC,EACrC,CAEA,MAAMC,EAAsC/C,EAAIgD,cAC9CL,IAEF3L,YAAW,KACT+L,SAAAA,EAAmBE,OAAO,GAE7B,GAGUC,GAA8BC,IACzCA,EAAQC,iBAAiB,WAAWC,SAASrD,IAC3CA,EAAIsD,iBAAiB,QAAQ,WAC3B,MAAMC,EAAS,WAGb,MAAMC,EAAYxD,EAAIiD,MAEtBjD,EAAIiD,MAAQ,OACM,QAAlBnI,EAAAkF,EAAIyD,sBAAc,IAAA3I,GAAAA,EAAA4I,KAAA1D,GAClBhJ,YAAW,KAETgJ,EAAIiD,MAAQO,CAAS,GACrB,EAKJ,GAFmE,SAAhCxD,EAAI2D,aAAa,aAEP,QAAX7I,EAAAkF,EAAIY,aAAO,IAAA9F,OAAA,EAAAA,EAAAyH,QAE3C,YADAgB,IAQF,MAAMK,EAAM,CAAEC,WAAOpI,GAEfqI,EAAWC,IAG+B,SAF/BA,EAAEC,OAENL,aAAa,oBACtBM,aAAaL,EAAIC,OACjBD,EAAIC,WAAQpI,EACb,EAGHmI,EAAIC,MAAQ7M,YAAW,KACrBmM,EAAQe,oBAAoB,QAASJ,GACrCP,IACAK,EAAIC,WAAQpI,CAAS,GACpB,KAEH0H,EAAQG,iBAAiB,QAASQ,EAAS,CAAEK,MAAM,GAAO,GAC1D,GACF,WAmBYC,GACdC,EACAC,EACAC,GAEA,OAAO,IAAIzN,SAAQ,CAACC,EAASyN,KAC3B,IAAIC,GAAU,EACd,MAAMZ,EAAQ7M,YAAW,KACvByN,GAAU,OACOhJ,IAAb8I,EACFxN,EAAQwN,GAERC,EAAO,IAAI/L,MAAM,2BAA2B4L,QAC7C,GACAA,GAEHC,EACGI,MAAM9D,IACA6D,IACHR,aAAaJ,GACb9M,EAAQ6J,GACT,IAEF+D,OAAO9N,IACD4N,IACHR,aAAaJ,GACbW,EAAO3N,GACR,GACD,GAER,CAEO,MAAM+N,GAAqB,WAChC,MAAMC,EAA4C,QAAlC/J,EAAA,OAAAK,gBAAA,IAAAA,eAAA,EAAAA,UAAmB2J,qBAAe,IAAAhK,OAAA,EAAAA,EAAA+J,OAC5CE,EAAQF,aAAM,EAANA,EAAQG,MACpB,EAAGC,QAAOC,aAAwB,aAAVD,GAAwBE,WAAWD,KAE7D,OAAOH,EAAQA,EAAMG,QAAU,CAAC,EAMrBE,GAAiC,CAC5CC,GAEEhE,iBACAC,iBACAC,kBACAC,kBACAE,WACAC,cACAI,gBACAC,aACAC,uBACAC,eACAN,kBACAC,uBACAC,0BAGAuD,GACDhE,GACAC,GACAC,GACAC,GACAE,GACAC,GACAI,GACAC,GACAC,GACAC,GACAN,GACAC,GACAC,GAEUwD,GAAoB,CAC/BnN,EACAoN,EACAC,EACAC,KAEA,MAAMC,EAAUC,SAASC,cAAc,QACvCF,EAAQG,OAAS,OACjBH,EAAQI,OAAS3N,EACjBuN,EAAQK,UAAY,4EACmDR,kFACCC,qGAIxEG,SAAShN,KAAKqN,YAAYN,GAE1BD,EAAeC,EAAQ,EAGZO,GAAqB,CAChC9N,EACA+N,EACAC,EACAV,KAEA,MAAMC,EAAUC,SAASC,cAAc,QACvCF,EAAQG,OAAS,OACjBH,EAAQI,OAAS3N,EAGjB,MAAMiO,EAAoB,CAAC1F,EAAcE,KACvC,MAAMyF,EAAQV,SAASC,cAAc,SAIrC,OAHAS,EAAMC,KAAO,SACbD,EAAM3F,KAAOA,EACb2F,EAAMzF,MAAQA,EACPyF,CAAK,EAGdX,EAAQM,YAAYI,EAAkB,KAAM,eAC5CV,EAAQM,YAAYI,EAAkB,UAAWF,IACjDR,EAAQM,YAAYI,EAAkB,OAAQD,IAE9C,MAAMI,EAAYZ,SAASC,cAAc,SACzCW,EAAUD,KAAO,SACjBC,EAAUC,GAAK,oBACfD,EAAU3F,MAAQ,WAClB2F,EAAUE,MAAMC,QAAU,OAC1BhB,EAAQM,YAAYO,GAEpBZ,SAAShN,KAAKqN,YAAYN,GAE1BD,EAAeC,EAAQ,EAGZiB,GAAcjB,GAA6BA,aAAO,EAAPA,EAASkB,SAEpDC,GAAwB,CAACC,EAAaC,KACjD,MAAMC,EAAmBD,EAAK/B,MAAMiC,GAAQH,EAAIG,KAChD,OAAOD,EAAmBF,EAAIE,GAAoB,IAAI,EAG3CE,GAAkB,CAC7BC,EACAC,EAAO,OAEP,IAAI/C,EACJ,OAAO,YAA6B9N,GAC7B8N,GAAS8C,EAAKE,MAAM5Q,KAAMF,GAC/B0N,aAAaI,GACbA,EAAUrN,YAAW,KACnBqN,EAAU,IAAI,GACb+C,EACL,CAAM,EAGKE,GAA8B,KACzC3B,SACGvC,iBAAiB,8BACjBC,SAASrD,GAAQA,EAAIuH,UAAS,EAGtBC,GAAwBC,GACnCvR,EAAcwR,SAASD,GAgBnBE,GAA+C,CACnDC,UAAW,uCACXC,SAAU,8CACVC,gBAAiB,6CACjBC,MAAO,mCACPC,eAAgB,kBAChBC,kBAAmB,sBAmBfC,GAAiB,CACrBC,EACAzH,WAEA,MAAM3H,EAAUoP,aAAA,EAAAA,EAAkBC,uBAClC,IAAKrP,EAAS,OACd,MAAMsP,EAAQxP,OAAOE,QAAQA,GAASiM,MACpC,EAAEsD,KAnCa,CAACA,IAAwC,IAAAxN,EAC1D,OAAgD,QAAhDA,EAAAwN,EAASD,MAAM,yCAAiC,IAAAvN,OAAA,EAAAA,EAAG,EAAE,EAkCnCyN,CAAWD,KAAc5H,IAE3C,OAAmB,QAAZ5F,EAAAuN,aAAK,EAALA,EAAQ,UAAI,IAAAvN,OAAA,EAAAA,EAAAqF,UAAU,EA6BzBqI,GAGA,CAEJ,CAAEvB,IAAK,OAAQ/G,KAAOV,GAAMA,EAAEiJ,MAC9B,CAAExB,IAAK,OAAQ/G,KAAOV,GAAMA,EAAEkJ,MAC9B,CAAEzB,IAAK,SAAU/G,KAAOV,GAAMA,EAAEmJ,QAChC,CAAE1B,IAAK,MAAO/G,KAAOV,GAAMA,EAAEoJ,KAC7B,CAAE3B,IAAK,uBAAwB/G,KAAOV,GAAMA,EAAEqJ,sBAE9C,CACE5B,IAAK,0BACL/G,KAAOV,YAAM,OAAgD,QAAhDsJ,EAAkB,QAAlBhO,EAAA0E,EAAE2I,wBAAgB,IAAArN,OAAA,EAAAA,EAAEiO,kCAA4B,IAAAD,OAAA,EAAAA,EAAAE,IAAI,GAEnE,CAAE/B,IAAK,yBAA0B/G,KAAOV,UAAM,eAAA1E,EAAA0E,EAAE2I,uCAAkBc,OAAO,GACzE,CAAEhC,IAAK,0BAA2B/G,KAAOV,UAAM,eAAA1E,EAAA0E,EAAE2I,uCAAkBe,QAAQ,GAC3E,CACEjC,IAAK,cACL/G,KAAOV,YAAM,OAAwC,QAAxCsJ,EAAkB,QAAlBhO,EAAA0E,EAAE2I,wBAAgB,IAAArN,OAAA,EAAAA,EAAEqO,0BAAoB,IAAAL,OAAA,EAAAA,EAAAE,IAAI,GAE3D,CAAE/B,IAAK,YAAa/G,KAAOV,IAAK,IAAA1E,EAAAgO,EAAC,OAA+B,QAA/BA,EAAkB,QAAlBhO,EAAA0E,EAAE2I,wBAAgB,IAAArN,OAAA,EAAAA,EAAEsO,iBAAW,IAAAN,OAAA,EAAAA,EAAAE,IAAI,GACpE,CACE/B,IAAK,kBACL/G,KAAOV,YAAM,OAAqC,QAArCsJ,EAAkB,QAAlBhO,EAAA0E,EAAE2I,wBAAgB,IAAArN,OAAA,EAAAA,EAAEuO,uBAAiB,IAAAP,OAAA,EAAAA,EAAAE,IAAI,GAExD,CACE/B,IAAK,oBACL/G,KAAOV,YAAM,OAAuC,QAAvCsJ,EAAkB,QAAlBhO,EAAA0E,EAAE2I,wBAAgB,IAAArN,OAAA,EAAAA,EAAEwO,yBAAmB,IAAAR,OAAA,EAAAA,EAAAE,IAAI,GAE1D,CACE/B,IAAK,wBACL/G,KAAOV,YAAM,OAAkC,QAAlCsJ,EAAkB,QAAlBhO,EAAA0E,EAAE2I,wBAAgB,IAAArN,OAAA,EAAAA,EAAEyO,oBAAc,IAAAT,OAAA,EAAAA,EAAAU,OAAO,GAExD,CACEvC,IAAK,wBACL/G,KAAOV,YAAM,OAAkC,QAAlCsJ,EAAkB,QAAlBhO,EAAA0E,EAAE2I,wBAAgB,IAAArN,OAAA,EAAAA,EAAE2O,oBAAc,IAAAX,OAAA,EAAAA,EAAAU,OAAO,GAExD,CACEvC,IAAK,oBACL/G,KAAOV,YAAM,OAAuC,QAAvCsJ,EAAkB,QAAlBhO,EAAA0E,EAAE2I,wBAAgB,IAAArN,OAAA,EAAAA,EAAE4O,yBAAmB,IAAAZ,OAAA,EAAAA,EAAAU,OAAO,GAE7D,CACEvC,IAAK,iBACL/G,KAAOV,UAAM,MAhGe,CAC9BmK,IAEA,IAAKA,EAAa,OAClB,MAAMC,EAAS/Q,OAAOC,YACpBD,OAAOE,QAAQ4O,IACZkC,KAAI,EAAEC,EAAOC,KAAS,CAACD,EAAOH,EAAYI,MAC1CC,QAAO,EAAC,CAAGC,UAAaxO,IAANwO,KAEvB,OAAOpR,OAAOkO,KAAK6C,GAAQrH,OAASqH,OAASnO,CAAS,EAuFvCyO,SAAwBpP,EAAA0E,EAAE2I,uCAAkBwB,YAAY,GAGvE,CAAE1C,IAAK,gBAAiB/G,KAAOV,GAzET,CAAC2I,IACvB,MAAMhI,EAAa+H,GAAeC,EAAkB,iBACpD,GAAKhI,EACL,OAAOF,MAAMkK,QAAQhK,EAAW6I,MAC5B7I,EAAW6I,KAAKa,KAAK3I,GAA4BA,EAAKN,QACtD,EAAE,EAoE+BwJ,CAAgB5K,EAAE2I,mBACvD,CAAElB,IAAK,cAAe/G,KAAOV,GAlET,CAAC2I,IACrB,MAAMhI,EAAa+H,GAAeC,EAAkB,eACpD,GAAKhI,EACL,MAAO,CACLkK,MAAOlK,EAAWkK,MAClBC,QAASnK,EAAW,YACpBoK,MAAOpK,EAAW,sCACnB,EA2DkCqK,CAAchL,EAAE2I,oBAuBxCsC,GACX7K,IAEA,MAAM8K,GAtJN5D,EAuJElH,EAAM+K,YAtJRC,EAuJE,CAACC,EAAG5D,IAAQ6D,EAAoBpD,SAAST,IAAQA,EAAI8D,WAAW,KArJlElS,OAAOC,YACLD,OAAOE,QAAQ+N,GAAKkD,QAClB,EAAE/C,EAAKrG,MAAYgK,EAAUhK,EAAOqG,OAN3B,IACbH,EACA8D,EA0JA,MACED,aAAaK,UAAEA,EAASC,UAAEA,IACxBrL,GAEAoL,GAAaC,KACfP,EAAe7T,MAAQ,CAAEqU,KAAMF,EAAW1E,KAAM2E,IAG9CrL,EAAMkG,SACR4E,EAAe5E,OAASlG,EAAMkG,QAKhC,MAAMkD,EApCsB,CAC5B2B,IAEA,IAAKA,EAAa,OAElB,MAAM3B,EAAgC,CAAA,EAMtC,OALAR,GAAYnF,SAAQ,EAAG4D,MAAK/G,WAC1B,MAAMU,EAAQV,EAAKyK,QACLlP,IAAVmF,IAAqBoI,EAAK/B,GAAOrG,EAAK,IAGrC/H,OAAOkO,KAAKiC,GAAMzG,OAAUyG,OAA4BvN,CAAS,EAyB3D0P,CAAsBvL,EAAM+K,aAKzC,OAJI3B,IACF0B,EAAe1B,KAAOA,GAGjB0B,CAAc,EAGVU,GAAyBC,IACpC,MAAMhT,EAAGQ,OAAA8H,OAAA,CAAA,EAAQ0K,GAMjB,OAJIA,EAAOC,0BACTjT,EAAI0Q,2BAA6BsC,EAAOC,yBAGnCjT,CAAG,EAGI,SAAAkT,GAAoBC,EAAkBC,GAEpD,MAAO,GAAGC,KADGD,EAAY,GAAGD,KAAYC,IAAcD,GAExD,CAEO,MAAMG,GAAoB,CAC/BxT,EACAyT,EACAC,EACAC,KAEA,MAAMC,OACkBtQ,IAAtBnE,OAAO0U,WACH1U,OAAO0U,WACN1U,OAAO2U,OAAeC,KACvBC,OACiB1Q,IAArBnE,OAAO8U,UACH9U,OAAO8U,UACN9U,OAAO2U,OAAeI,IAWvBH,IARJ5U,OAAOgV,YACP3G,SAAS4G,gBAAgBC,aACzBlV,OAAO2U,OAAOQ,OAMMZ,GAAK,EAAIE,EACzBM,IALJ/U,OAAOoV,aACP/G,SAAS4G,gBAAgBI,cACzBrV,OAAO2U,OAAOW,QAGMd,GAAK,EAAIK,EAKzBU,EAz1BR,WACE,MAAMC,EAAK3R,UAAUC,WAAa,GAC5B2R,EAAW,eAAe7R,KAAK4R,GAE/BE,EACJ,SAAS9R,KAAK4R,KAAQ,2CAA2C5R,KAAK4R,GAExE,OAAOC,GAAYC,CACrB,CAi1BqBC,GAAmB,cAAgB,GAChDC,EAAQ5V,OAAO6V,KACnBN,EACAjB,EACA,SAASC,YAAYC,SAASO,UAAYH,kCAM5C,OAHAgB,EAAM3V,SAASQ,KAAOI,EACtB+U,EAAMjK,QAECiK,CAAK"}

package/dist/esm/mixins/passwordManagerMixin.js

@@ -0,0 +1,2 @@
+import{__classPrivateFieldSet as e,__classPrivateFieldGet as t}from"tslib";import{createSingletonMixin as o,compose as r}from"@descope/sdk-helpers";import{loggerMixin as n}from"@descope/sdk-mixins";import{DESCOPE_LAST_SUBMITTED_LOGIN_ID_SESSION_STORAGE_KEY as i,DESCOPE_ATTRIBUTE_EXCLUDE_FIELD as s}from"../constants/index.js";import{getFirstNonEmptyValue as a}from"../helpers/helpers.js";import"../helpers/state.js";import"@descope/escape-markdown";import"../helpers/webauthn.js";const d=["externalId","email","phone"],l=["newPassword","password"],u="data-username-anchor",c=e=>{var t;if(!e)return"";try{const o=null===(t=window.sessionStorage)||void 0===t?void 0:t.getItem(i);if(!o)return"";const r=JSON.parse(o);return r.executionId===e&&r.loginId||""}catch(e){return""}},m=(e,t,o,r)=>{var n;const i=(null==o?void 0:o.email)||(null===(n=null==o?void 0:o.loginIds)||void 0===n?void 0:n[0]);(e=>e.querySelector("descope-new-password")||e.querySelector("descope-password"))(t)?i?(e=>{const t=['input[autocomplete="username"]',...d.map((e=>`[name="${e}"]`))].join(", ");return e.some((e=>e.querySelector(t)))})([e,t])?r.debug("Username anchor: screen already has an identifier field"):(r.debug("Username anchor: injecting hidden username input"),e.appendChild((e=>{const t=document.createElement("input");return t.setAttribute("autocomplete","username"),t.setAttribute("name","username"),t.setAttribute("type","email"),t.setAttribute("readonly","true"),t.setAttribute("tabindex","-1"),t.setAttribute("aria-hidden","true"),t.setAttribute(s,"true"),t.setAttribute(u,"true"),t.setAttribute("value",e),t.value=e,Object.assign(t.style,{position:"absolute",opacity:"0",pointerEvents:"none",height:"0",border:"0"}),t})(i))):r.debug("Username anchor: no user identifier available"):r.debug("Username anchor: no password component on screen")},v=o((o=>{var s,v,p,h,g;const b=r(n)(o);return g=class extends b{constructor(){super(...arguments),s.add(this),v.set(this,void 0)}updateScreenUser(o){var r,n,i;e(this,v,{email:null==o?void 0:o.email,loginIds:(null===(r=null==o?void 0:o.loginIds)||void 0===r?void 0:r.length)?o.loginIds:[c(t(this,s,"a",h))||(null===(i=null===(n=t(this,s,"a",p).sdk)||void 0===n?void 0:n.getLastUserLoginId)||void 0===i?void 0:i.call(n))].filter(Boolean)},"f")}updateUsernameAnchor(){document.querySelectorAll(`[${u}="true"]`).forEach((e=>e.remove())),m(this,t(this,s,"a",p).contentRootElement,t(this,v,"f"),this.logger)}captureLastSubmittedLoginId(e={},o){const r=a(e,d);r&&((e,t)=>{var o;if(e&&t)try{null===(o=window.sessionStorage)||void 0===o||o.setItem(i,JSON.stringify({executionId:t,loginId:e}))}catch(e){}})(r,o||t(this,s,"a",h))}storeCredentials(e={}){var o,r,n,i,s;const u=a(e,d)||(null===(o=t(this,v,"f"))||void 0===o?void 0:o.email)||(null===(n=null===(r=t(this,v,"f"))||void 0===r?void 0:r.loginIds)||void 0===n?void 0:n[0]),c=a(e,l);if(u&&c)try{if(!globalThis.PasswordCredential)return;const e=new globalThis.PasswordCredential({id:u,password:c});null===(s=null===(i=null===navigator||void 0===navigator?void 0:navigator.credentials)||void 0===i?void 0:i.store)||void 0===s||s.call(i,e)}catch(e){this.logger.error("Could not store credentials",e.message)}}},v=new WeakMap,s=new WeakSet,p=function(){return this},h=function(){var e,o;return(null===(o=null===(e=t(this,s,"a",p).flowState)||void 0===e?void 0:e.current)||void 0===o?void 0:o.executionId)||""},g}));export{v as passwordManagerMixin};
+//# sourceMappingURL=passwordManagerMixin.js.map

package/dist/esm/mixins/passwordManagerMixin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passwordManagerMixin.js","sources":["../../../src/lib/mixins/passwordManagerMixin.ts"],"sourcesContent":["/* eslint-disable import/prefer-default-export */\nimport { compose, createSingletonMixin } from '@descope/sdk-helpers';\nimport { loggerMixin } from '@descope/sdk-mixins';\nimport {\n  DESCOPE_ATTRIBUTE_EXCLUDE_FIELD,\n  DESCOPE_LAST_SUBMITTED_LOGIN_ID_SESSION_STORAGE_KEY,\n} from '../constants';\nimport { getFirstNonEmptyValue } from '../helpers';\nimport type { ScreenStateUser } from '../types';\n\nconst LOGIN_ID_FIELDS = ['externalId', 'email', 'phone'];\nconst PASSWORD_FIELDS = ['newPassword', 'password'];\n\nconst USERNAME_ANCHOR_ATTRIBUTE = 'data-username-anchor';\n\n// What the mixin needs from its host. Defined as an interface (not imported)\n// to avoid a circular dependency on DescopeWc. Exported so declaration emit\n// can name it from BaseDescopeWc's composed base class.\nexport interface PasswordManagerHost {\n  contentRootElement?: HTMLElement;\n  flowState?: { current?: { executionId?: string } };\n  sdk?: { getLastUserLoginId?: () => string };\n}\n\n// the last identifier the user submitted on a previous screen in this flow\n// (e.g. the email entered before a magic link was sent), used when neither\n// the flow state nor a previous authentication provides one.\n// kept in sessionStorage (tab scoped, cleared when the tab closes) so it\n// survives page reloads during the flow, and scoped to the flow execution so\n// a stale identifier is never carried into another flow (or another user)\n// running in the same tab\nconst getLastSubmittedLoginId = (executionId: string): string => {\n  // a missing execution id must never match anything, otherwise two flows\n  // without one would share the stored identifier\n  if (!executionId) {\n    return '';\n  }\n  try {\n    const raw = window.sessionStorage?.getItem(\n      DESCOPE_LAST_SUBMITTED_LOGIN_ID_SESSION_STORAGE_KEY,\n    );\n    if (!raw) {\n      return '';\n    }\n    const stored = JSON.parse(raw);\n    return stored.executionId === executionId ? stored.loginId || '' : '';\n  } catch (e) {\n    return '';\n  }\n};\n\nconst setLastSubmittedLoginId = (loginId: string, executionId: string) => {\n  if (!loginId || !executionId) {\n    return;\n  }\n  try {\n    window.sessionStorage?.setItem(\n      DESCOPE_LAST_SUBMITTED_LOGIN_ID_SESSION_STORAGE_KEY,\n      JSON.stringify({ executionId, loginId }),\n    );\n  } catch (e) {\n    // sessionStorage unavailable, losing reload persistence is acceptable\n  }\n};\n\nconst clearUsernameAnchorIfExists = () => {\n  document\n    .querySelectorAll(`[${USERNAME_ANCHOR_ATTRIBUTE}=\"true\"]`)\n    .forEach((ele) => ele.remove());\n};\n\nconst findPasswordComponent = (contentRootEle: Element) =>\n  contentRootEle.querySelector('descope-new-password') ||\n  contentRootEle.querySelector('descope-password');\n\n// an identifier is already on screen when there is an autocomplete=\"username\"\n// input, or a component collecting one of the login id fields (e.g.\n// descope-email-field renders its input inside a closed shadow root, so only\n// its name attribute is visible from here)\nconst hasLoginIdField = (roots: Element[]) => {\n  const selector = [\n    'input[autocomplete=\"username\"]',\n    ...LOGIN_ID_FIELDS.map((field) => `[name=\"${field}\"]`),\n  ].join(', ');\n  return roots.some((root) => root.querySelector(selector));\n};\n\nconst createUsernameAnchor = (loginId: string) => {\n  const input = document.createElement('input');\n  input.setAttribute('autocomplete', 'username');\n  input.setAttribute('name', 'username');\n  input.setAttribute('type', 'email');\n  input.setAttribute('readonly', 'true');\n  input.setAttribute('tabindex', '-1');\n  input.setAttribute('aria-hidden', 'true');\n  // never collect the anchor's value into the submitted form data\n  input.setAttribute(DESCOPE_ATTRIBUTE_EXCLUDE_FIELD, 'true');\n  // cleaned up by clearUsernameAnchorIfExists between screens\n  input.setAttribute(USERNAME_ANCHOR_ATTRIBUTE, 'true');\n  // some password managers read the markup value rather than the property\n  input.setAttribute('value', loginId);\n  input.value = loginId;\n  // real input hidden via CSSOM: managers ignore type=\"hidden\", and strict\n  // CSP style-src blocks style attributes\n  Object.assign(input.style, {\n    position: 'absolute',\n    opacity: '0',\n    pointerEvents: 'none',\n    height: '0',\n    border: '0',\n  });\n  return input;\n};\n\n// Anchors a hidden autocomplete=\"username\" input on password screens that\n// have no identifier input, so password managers can associate the credential\n// with a user (descope/etc#16712). Appended to the host light DOM — password\n// manager save heuristics (verified on WebKit) do not scan shadow trees\nconst injectUsernameAnchorIfNeeded = (\n  hostEle: HTMLElement,\n  contentRootEle: Element,\n  user: ScreenStateUser | undefined,\n  logger: { debug: (...args: string[]) => void },\n) => {\n  const loginId = user?.email || user?.loginIds?.[0];\n\n  if (!findPasswordComponent(contentRootEle)) {\n    logger.debug('Username anchor: no password component on screen');\n    return;\n  }\n  if (!loginId) {\n    logger.debug('Username anchor: no user identifier available');\n    return;\n  }\n  if (hasLoginIdField([hostEle, contentRootEle])) {\n    logger.debug('Username anchor: screen already has an identifier field');\n    return;\n  }\n\n  logger.debug('Username anchor: injecting hidden username input');\n  hostEle.appendChild(createUsernameAnchor(loginId));\n};\n\n/**\n * Password manager integrations: keeps track of the current screen's user\n * identifier, anchors a hidden username input on password screens that have\n * no identifier input, and stores submitted credentials via the Credential\n * Management API.\n */\nexport const passwordManagerMixin = createSingletonMixin(\n  <T extends CustomElementConstructor>(superclass: T) => {\n    const BaseClass = compose(loggerMixin)(superclass);\n\n    return class PasswordManagerMixinClass extends BaseClass {\n      // the authenticated user of the current screen (if any), used as a\n      // fallback identifier for password manager integrations on screens that\n      // have no identifier input (e.g. step-up password change)\n      #screenUser?: ScreenStateUser;\n\n      get #host() {\n        return this as unknown as PasswordManagerHost;\n      }\n\n      get #executionId() {\n        return this.#host.flowState?.current?.executionId || '';\n      }\n\n      // called on every screen render. flow state does not always carry the\n      // user (e.g. after magic link auth), so fall back to the login id\n      // submitted earlier in this flow, then to the last authenticated user\n      updateScreenUser(stateUser?: ScreenStateUser) {\n        this.#screenUser = {\n          email: stateUser?.email,\n          loginIds: stateUser?.loginIds?.length\n            ? stateUser.loginIds\n            : [\n                getLastSubmittedLoginId(this.#executionId) ||\n                  this.#host.sdk?.getLastUserLoginId?.(),\n              ].filter(Boolean),\n        };\n      }\n\n      updateUsernameAnchor() {\n        // clear the previous screen's anchor, so each screen gets an anchor\n        // only if it needs one\n        clearUsernameAnchorIfExists();\n\n        injectUsernameAnchorIfNeeded(\n          this,\n          this.#host.contentRootElement,\n          this.#screenUser,\n          this.logger,\n        );\n      }\n\n      // called after a successful next(): on flows that render their first\n      // screen before the flow starts, the execution id only exists on the\n      // response, so prefer it over the current flow state\n      captureLastSubmittedLoginId(formData = {}, responseExecutionId?: string) {\n        const loginId = getFirstNonEmptyValue(formData, LOGIN_ID_FIELDS);\n        if (loginId) {\n          setLastSubmittedLoginId(\n            loginId,\n            responseExecutionId || this.#executionId,\n          );\n        }\n      }\n\n      // handle storing passwords in password managers\n      storeCredentials(formData = {}) {\n        const id =\n          getFirstNonEmptyValue(formData, LOGIN_ID_FIELDS) ||\n          this.#screenUser?.email ||\n          this.#screenUser?.loginIds?.[0];\n        const password = getFirstNonEmptyValue(formData, PASSWORD_FIELDS);\n\n        // PasswordCredential not supported in Firefox\n        if (id && password) {\n          try {\n            if (!globalThis.PasswordCredential) {\n              return;\n            }\n            const cred = new globalThis.PasswordCredential({ id, password });\n\n            navigator?.credentials?.store?.(cred);\n          } catch (e) {\n            this.logger.error('Could not store credentials', e.message);\n          }\n        }\n      }\n    };\n  },\n);\n"],"names":["LOGIN_ID_FIELDS","PASSWORD_FIELDS","USERNAME_ANCHOR_ATTRIBUTE","getLastSubmittedLoginId","executionId","raw","_a","window","sessionStorage","getItem","DESCOPE_LAST_SUBMITTED_LOGIN_ID_SESSION_STORAGE_KEY","stored","JSON","parse","loginId","e","injectUsernameAnchorIfNeeded","hostEle","contentRootEle","user","logger","email","loginIds","querySelector","findPasswordComponent","roots","selector","map","field","join","some","root","hasLoginIdField","debug","appendChild","input","document","createElement","setAttribute","DESCOPE_ATTRIBUTE_EXCLUDE_FIELD","value","Object","assign","style","position","opacity","pointerEvents","height","border","createUsernameAnchor","passwordManagerMixin","createSingletonMixin","superclass","BaseClass","compose","loggerMixin","constructor","_PasswordManagerMixinClass_screenUser","set","this","updateScreenUser","stateUser","__classPrivateFieldSet","_b","length","__classPrivateFieldGet","_PasswordManagerMixinClass_instances","_PasswordManagerMixinClass_executionId_get","_d","_c","_PasswordManagerMixinClass_host_get","sdk","getLastUserLoginId","call","filter","Boolean","updateUsernameAnchor","querySelectorAll","forEach","ele","remove","contentRootElement","captureLastSubmittedLoginId","formData","responseExecutionId","getFirstNonEmptyValue","setItem","stringify","setLastSubmittedLoginId","storeCredentials","id","password","globalThis","PasswordCredential","cred","_f","_e","navigator","credentials","store","error","message","flowState","current"],"mappings":"ieAUA,MAAMA,EAAkB,CAAC,aAAc,QAAS,SAC1CC,EAAkB,CAAC,cAAe,YAElCC,EAA4B,uBAkB5BC,EAA2BC,UAG/B,IAAKA,EACH,MAAO,GAET,IACE,MAAMC,EAA2B,QAArBC,EAAAC,OAAOC,sBAAc,IAAAF,OAAA,EAAAA,EAAEG,QACjCC,GAEF,IAAKL,EACH,MAAO,GAET,MAAMM,EAASC,KAAKC,MAAMR,GAC1B,OAAOM,EAAOP,cAAgBA,GAAcO,EAAOG,SAAgB,EACpE,CAAC,MAAOC,GACP,MAAO,EACR,GAsEGC,EAA+B,CACnCC,EACAC,EACAC,EACAC,WAEA,MAAMN,GAAUK,aAAI,EAAJA,EAAME,SAA0B,UAAjBF,aAAI,EAAJA,EAAMG,gBAAW,IAAAhB,OAAA,EAAAA,EAAA,IArDpB,CAACY,GAC7BA,EAAeK,cAAc,yBAC7BL,EAAeK,cAAc,oBAqDxBC,CAAsBN,GAItBJ,EAnDiB,CAACW,IACvB,MAAMC,EAAW,CACf,oCACG1B,EAAgB2B,KAAKC,GAAU,UAAUA,SAC5CC,KAAK,MACP,OAAOJ,EAAMK,MAAMC,GAASA,EAAKR,cAAcG,IAAU,EAkDrDM,CAAgB,CAACf,EAASC,IAC5BE,EAAOa,MAAM,4DAIfb,EAAOa,MAAM,oDACbhB,EAAQiB,YArDmB,CAACpB,IAC5B,MAAMqB,EAAQC,SAASC,cAAc,SAuBrC,OAtBAF,EAAMG,aAAa,eAAgB,YACnCH,EAAMG,aAAa,OAAQ,YAC3BH,EAAMG,aAAa,OAAQ,SAC3BH,EAAMG,aAAa,WAAY,QAC/BH,EAAMG,aAAa,WAAY,MAC/BH,EAAMG,aAAa,cAAe,QAElCH,EAAMG,aAAaC,EAAiC,QAEpDJ,EAAMG,aAAapC,EAA2B,QAE9CiC,EAAMG,aAAa,QAASxB,GAC5BqB,EAAMK,MAAQ1B,EAGd2B,OAAOC,OAAOP,EAAMQ,MAAO,CACzBC,SAAU,WACVC,QAAS,IACTC,cAAe,OACfC,OAAQ,IACRC,OAAQ,MAEHb,CAAK,EA6BQc,CAAqBnC,KATvCM,EAAOa,MAAM,iDAJbb,EAAOa,MAAM,mDAamC,EASvCiB,EAAuBC,GACGC,kBACnC,MAAMC,EAAYC,EAAQC,EAARD,CAAqBF,GAEvC,OAAO9C,EAAA,cAAwC+C,EAAxC,WAAAG,mCAILC,EAA8BC,IAAAC,UAAA,EAyE/B,CA5DC,gBAAAC,CAAiBC,aACfC,EAAAH,KAAmBF,EAAA,CACjBpC,MAAOwC,aAAA,EAAAA,EAAWxC,MAClBC,UAA6B,QAAnByC,EAAAF,aAAS,EAATA,EAAWvC,gBAAQ,IAAAyC,OAAA,EAAAA,EAAEC,QAC3BH,EAAUvC,SACV,CACEnB,EAAwB8D,EAAAN,KAAIO,EAAA,IAAAC,MACQ,QAAlCC,EAAc,QAAdC,EAAAJ,EAAAN,KAAIO,EAAA,IAAAI,GAAOC,WAAG,IAAAF,OAAA,EAAAA,EAAEG,0BAAkB,IAAAJ,OAAA,EAAAA,EAAAK,KAAAJ,KACpCK,OAAOC,UACd,IACF,CAED,oBAAAC,GApHJxC,SACGyC,iBAAiB,IAAI3E,aACrB4E,SAASC,GAAQA,EAAIC,WAuHlBhE,EACE2C,KACAM,EAAAN,cAAWsB,mBACXhB,EAAAN,KAAgBF,EAAA,KAChBE,KAAKvC,OAER,CAKD,2BAAA8D,CAA4BC,EAAW,CAAE,EAAEC,GACzC,MAAMtE,EAAUuE,EAAsBF,EAAUnF,GAC5Cc,GArJoB,EAACA,EAAiBV,WAChD,GAAKU,GAAYV,EAGjB,YACEE,EAAAC,OAAOC,+BAAgB8E,QACrB5E,EACAE,KAAK2E,UAAU,CAAEnF,cAAaU,YAEjC,CAAC,MAAOC,GAER,GA2IOyE,CACE1E,EACAsE,GAAuBnB,EAAAN,KAAiBO,EAAA,IAAAC,GAG7C,CAGD,gBAAAsB,CAAiBN,EAAW,kBAC1B,MAAMO,EACJL,EAAsBF,EAAUnF,KAChB,QAAhB+D,EAAAE,EAAAN,KAAgBF,EAAA,YAAA,IAAAM,OAAA,EAAAA,EAAE1C,SACW,QAA7B+C,EAAgB,QAAhBC,EAAAJ,EAAAN,KAAgBF,EAAA,YAAA,IAAAY,OAAA,EAAAA,EAAE/C,gBAAW,IAAA8C,OAAA,EAAAA,EAAA,IACzBuB,EAAWN,EAAsBF,EAAUlF,GAGjD,GAAIyF,GAAMC,EACR,IACE,IAAKC,WAAWC,mBACd,OAEF,MAAMC,EAAO,IAAIF,WAAWC,mBAAmB,CAAEH,KAAIC,aAErB,QAAhCI,EAAwB,QAAxBC,EAAA,OAAAC,gBAAA,IAAAA,eAAA,EAAAA,UAAWC,mBAAa,IAAAF,OAAA,EAAAA,EAAAG,aAAQ,IAAAJ,GAAAA,EAAAtB,KAAAuB,EAAAF,EACjC,CAAC,MAAO/E,GACP4C,KAAKvC,OAAOgF,MAAM,8BAA+BrF,EAAEsF,QACpD,CAEJ,4CArEC,OAAO1C,IACR,uBAGC,OAAoC,QAA7BU,EAAoB,QAApBN,EAAAE,EAAAN,KAAUO,EAAA,IAAAI,GAACgC,iBAAS,IAAAvC,OAAA,EAAAA,EAAEwC,eAAO,IAAAlC,OAAA,EAAAA,EAAEjE,cAAe,EACtD,EAiEDE,CAAA"}

package/dist/esm/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sources":["../../src/lib/types.ts"],"sourcesContent":["/* istanbul ignore file */\n\nimport type { JWTResponse } from '@descope/web-js-sdk';\nimport { createSdk } from '@descope/web-js-sdk';\n\nexport type SdkConfig = Parameters<typeof createSdk>[0];\nexport type Sdk = ReturnType<typeof createSdk>;\n\nexport type SdkFlowNext = Sdk['flow']['next'];\n\nexport type ComponentsDynamicAttrs = {\n  attributes: Record<string, any>;\n};\n\nexport type ComponentsConfig = Record<string, any> & {\n  componentsDynamicAttrs?: Record<string, ComponentsDynamicAttrs>;\n};\nexport type CssVars = Record<string, any>;\n\ntype KeepArgsByIndex<F, Indices extends readonly number[]> = F extends (\n  ...args: infer A\n) => infer R\n  ? (...args: PickArgsByIndex<A, Indices>) => R\n  : never;\n\ntype PickArgsByIndex<\n  All extends readonly any[],\n  Indices extends readonly number[],\n> = {\n  [K in keyof Indices]: Indices[K] extends keyof All ? All[Indices[K]] : never;\n};\n\ntype Project = {\n  name: string;\n};\n\nexport enum Direction {\n  backward = 'backward',\n  forward = 'forward',\n}\n\nexport type LastAuthState = NonNullable<\n  NextFnReturnPromiseValue['data']['lastAuth']\n> & {\n  loginId?: string;\n  name?: string;\n  lastUsedPerScreen?: Record<string, string>;\n};\n\nexport type RealtimeOperandKind = 'value' | 'form' | 'list';\n\n// Operators the SDK is allowed to evaluate locally. The server's\n// clientSupportedRealtimeOperators must stay in sync — anything outside this\n// list is pre-evaluated server-side and shipped as a value operand.\n//\n// is-email / is-phone are intentionally absent: the server validates them\n// with dedicated libraries (contact.IsValid*); the client has no equivalent,\n// so the server keeps these CCs server-only.\nexport type RealtimeOperator =\n  | 'equal'\n  | 'not-equal'\n  | 'contains'\n  | 'doesnt-contains'\n  | 'greater-than'\n  | 'greater-than-or-equal'\n  | 'less-than'\n  | 'less-than-or-equal'\n  | 'empty'\n  | 'not-empty'\n  | 'is-true'\n  | 'is-false'\n  | 'in'\n  | 'not-in'\n  | 'matches';\n\nexport interface RealtimeOperand {\n  kind: RealtimeOperandKind;\n  // Form is the context key the client looks up from the live form snapshot\n  // (e.g. \"form.phone\"). Set only when kind === 'form'.\n  form?: string;\n  // Items is the operand list when kind === 'list'. Each element is a nested\n  // operand — either a form placeholder or a resolved literal. Used when the\n  // server detects an `in` / `not-in` / `contains` predicate whose array\n  // contains `{{form.X}}` references; the client resolves them at eval time.\n  items?: RealtimeOperand[];\n  // Pre-resolved literal. Set only when kind === 'value', and may legitimately\n  // be false / 0 / \"\" — do not treat absence as \"no value\" without checking\n  // kind first.\n  value?: unknown;\n}\n\nexport interface RealtimeAtomicCondition {\n  operator: RealtimeOperator;\n  target?: RealtimeOperand;\n  predicate?: RealtimeOperand;\n}\n\nexport interface RealtimeRule {\n  logicalOr?: boolean;\n  atomicConditions: RealtimeAtomicCondition[];\n}\n\nexport interface RealtimeComponentsCondition {\n  id?: string;\n  componentIds: string[];\n  action: string;\n  rules: RealtimeRule[];\n}\n\nexport interface ScreenState {\n  errorText?: string;\n  errorType?: string;\n  componentsConfig?: ComponentsConfig;\n  cssVars?: CssVars;\n  form?: Record<string, string>;\n  inputs?: Record<string, string>; // Backward compatibility\n  lastAuth?: LastAuthState;\n  project?: Project;\n  totp?: { image?: string; provisionUrl?: string };\n  notp?: { image?: string; redirectUrl?: string };\n  selfProvisionDomains?: unknown;\n  user?: unknown;\n  sso?: unknown;\n  dynamicSelects?: unknown;\n  keysInUse?: unknown;\n  genericForm?: unknown;\n  linkId?: unknown;\n  sentTo?: unknown;\n  clientScripts?: ClientScript[];\n  // map of component IDs to their state — the FULL last-wins verdict over\n  // all CCs (server-only + client-eligible) the BE evaluated at screen-init.\n  // Used by `applyComponentsState` for the first DOM paint.\n  componentsState?: Record<string, string>;\n  // Subset of `componentsState` contributed by SERVER-ONLY CCs — those the\n  // client cannot re-evaluate locally (operators on the server-only\n  // allow-list like `is-email`, or rules referencing context the client\n  // doesn't have). Parallels `componentsState` in structure but excludes\n  // contributions from client-eligible CCs that also ship in\n  // `realtimeComponentsConditions`.\n  //\n  // The realtime layer uses this as the fallback action to restore when a\n  // realtime CC stops firing on a touched component — without it the SDK\n  // can't tell whether the action in `componentsState` came from a\n  // server-only CC (must persist) or from a realtime CC also re-shipped\n  // (must clear).\n  //\n  // Absent on old backends; new SDKs fall back to a legacy heuristic that\n  // infers the same information from `componentsState`, so the old-BE /\n  // new-SDK combination still works correctly.\n  serverOnlyComponentsState?: Record<string, string>;\n  // Client-evaluable visibility conditions, populated only by new backends.\n  // Absent on old backends; new SDKs ignore when absent.\n  realtimeComponentsConditions?: RealtimeComponentsCondition[];\n}\n\nexport type SSOQueryParams = {\n  oidcIdpStateId?: string;\n  samlIdpStateId?: string;\n  wsfedIdpStateId?: string;\n  samlIdpUsername?: string;\n  descopeIdpInitiated?: boolean;\n  ssoAppId?: string;\n  customAppId?: string;\n  thirdPartyAppId: string;\n  thirdPartyAppStateId?: string;\n  applicationScopes?: string;\n} & OIDCOptions;\n\nexport type OIDCOptions = {\n  oidcLoginHint?: string;\n  oidcPrompt?: string;\n  oidcErrorRedirectUri?: string;\n  oidcResource?: string;\n};\n\nexport type FlowState = {\n  flowId: string;\n  projectId: string;\n  baseUrl: string;\n  tenant: string;\n  stepId: string;\n  stepName: string;\n  executionId: string;\n  action: string;\n  redirectTo: string;\n  redirectIsPopup: boolean;\n  openInNewTabUrl?: string;\n  redirectUrl: string;\n  screenId: string;\n  screenState: ScreenState;\n  token: string;\n  code: string;\n  isPopup: boolean;\n  exchangeError: string;\n  webauthnTransactionId: string;\n  webauthnOptions: string;\n  redirectAuthCodeChallenge: string;\n  redirectAuthCallbackUrl: string;\n  redirectAuthBackupCallbackUri: string;\n  redirectAuthInitiator: string;\n  deferredRedirect: boolean;\n  deferredPolling: boolean;\n  locale: string;\n  samlIdpResponseUrl: string;\n  samlIdpResponseSamlResponse: string;\n  samlIdpResponseRelayState: string;\n  wsFedIdpResponseUrl: string;\n  wsFedIdpResponseWresult: string;\n  wsFedIdpResponseWctx: string;\n  nativeResponseType: string;\n  nativePayload: Record<string, any>;\n  reqTimestamp: number;\n} & SSOQueryParams;\n\nexport type StepState = {\n  screenState: ScreenState;\n  screenId: string;\n  stepName: string;\n  htmlFilename: string;\n  htmlLocaleFilename: string;\n  next: NextFn;\n  direction: Direction | undefined;\n  samlIdpUsername: string;\n  action?: string;\n  locale?: string;\n} & OIDCOptions;\n\nexport type CustomScreenState = Omit<\n  ScreenState,\n  'cssVars' | 'componentsConfig' | 'inputs'\n> & {\n  error?: {\n    text: ScreenState['errorText'];\n    type: ScreenState['errorType'];\n  };\n  action?: string;\n  inboundAppApproveScopes?: {\n    desc: string;\n    id: string;\n    required: boolean;\n  }[];\n};\n\nexport type DebugState = {\n  isDebug: boolean;\n};\n\nexport interface ScriptElement extends HTMLDivElement {\n  moduleRes?: ScriptModule;\n}\n\nexport type ScriptModule = {\n  /**\n   * Unique identifier of the module.\n   */\n  id: string;\n  /**\n   * Notifies the module that it should start any profiling or monitoring.\n   */\n  start?: () => void;\n  /**\n   * Notifies the module that it should stop any profiling or monitoring.\n   */\n  stop?: () => void;\n  /**\n   * Presents the user with any required interaction to get a refreshed token or state,\n   * e.g., a challenge or captcha.\n   *\n   * Modules should return a value of true if the presentation completed successfully,\n   * false if it was cancelled by the user, and throw an error in case of failure.\n   *\n   * This is called before form submission (via a next call) after a button click.\n   */\n  present?: () => Promise<boolean>;\n  /**\n   * Refreshes any tokens or state that might be needed before form submission.\n   *\n   * Modules should throw an error in case of failure.\n   */\n  refresh?: () => Promise<void>;\n};\n\nexport type ClientScript = {\n  id: string;\n  initArgs: Record<string, any>;\n  resultKey?: string;\n};\n\nexport type NextFn = KeepArgsByIndex<SdkFlowNext, [2, 5]> & {\n  isCustomScreen?: boolean;\n};\nexport type NextFnReturnPromiseValue = Awaited<ReturnType<NextFn>>;\n\nexport type DebuggerMessage = {\n  title: string;\n  description?: string;\n};\n\nexport type FlowStateUpdateFn = (state: FlowState) => void;\n\ntype Operator =\n  | 'equal'\n  | 'not-equal'\n  | 'contains'\n  | 'greater-than'\n  | 'greater-than-or-equal'\n  | 'less-than'\n  | 'less-than-or-equal'\n  | 'empty'\n  | 'not-empty'\n  | 'is-true'\n  | 'is-false'\n  | 'in'\n  | 'not-in'\n  | 'in-range'\n  | 'not-in-range'\n  | 'devised-by';\n\nexport interface ClientConditionResult {\n  screenId: string;\n  screenName: string;\n  clientScripts?: ClientScript[];\n  componentsConfig?: ComponentsConfig;\n  interactionId: string;\n}\n\nexport interface ClientCondition {\n  operator: Operator;\n  key: string;\n  predicate?: string | number;\n  met: ClientConditionResult;\n  unmet?: ClientConditionResult;\n}\n\nexport type AutoFocusOptions = true | false | 'skipFirstScreen';\n\nexport type ThemeOptions = 'light' | 'dark' | 'os';\n\nexport type Key =\n  | 'lastAuth.loginId'\n  | 'idpInitiated'\n  | 'externalToken'\n  | 'abTestingKey';\n\ntype CheckFunction = (ctx: Context, predicate?: string | number) => boolean;\n\nexport type ConditionsMap = {\n  [key in Key]: {\n    [operator in Operator]?: CheckFunction;\n  };\n};\n\nexport interface Context {\n  loginId?: string;\n  code?: string;\n  token?: string;\n  abTestingKey?: number;\n  lastAuth?: LastAuthState;\n}\n\nexport type DescopeUI = Record<string, () => Promise<void>> & {\n  componentsThemeManager: Record<string, any>;\n};\n\ntype Font = {\n  family: string[];\n  label: string;\n  url?: string;\n};\n\ntype ThemeTemplate = {\n  fonts: {\n    font1: Font;\n    font2: Font;\n  };\n};\n\ntype ThemeColor = {\n  main: string;\n  dark: string;\n  light: string;\n  highlight: string;\n  contrast: string;\n};\n\nexport type OverrideTheme = {\n  globals?: {\n    colors?: {\n      primary?: ThemeColor;\n      secondary?: ThemeColor;\n    };\n  };\n};\n\nexport type OverrideThemes = {\n  dark?: OverrideTheme;\n  light?: OverrideTheme;\n};\n\nexport type FlowConfig = {\n  startScreenId?: string;\n  startScreenName?: string;\n  version: number;\n  targetLocales?: string[];\n  conditions?: ClientCondition[];\n  condition?: ClientCondition;\n  fingerprintEnabled?: boolean;\n  fingerprintKey?: string;\n  sdkScripts?: [\n    {\n      id: string;\n      initArgs: Record<string, any>;\n      resultKey?: string;\n    },\n  ];\n  clientScripts?: ClientScript[];\n  componentsConfig?: ComponentsConfig;\n};\n\nexport interface ProjectConfiguration {\n  componentsVersion: string;\n  cssTemplate: {\n    dark: ThemeTemplate;\n    light: ThemeTemplate;\n  };\n  flows: {\n    [key: string]: FlowConfig; // dynamic key names for flows\n  };\n}\n\nexport type FlowStatus = 'loading' | 'error' | 'success' | 'ready' | 'initial';\n\nexport type CustomStorage = {\n  getItem: (key: string) => string | null;\n  setItem: (key: string, value: string) => void;\n  removeItem: (key: string) => void;\n};\n\nexport type FlowJWTResponse = JWTResponse & {\n  flowOutput?: Record<string, any>;\n};\n"],"names":["Direction"],"mappings":"IAoCYA,GAAZ,SAAYA,GACVA,EAAA,SAAA,WACAA,EAAA,QAAA,SACD,CAHD,CAAYA,IAAAA,EAGX,CAAA"}
+{"version":3,"file":"types.js","sources":["../../src/lib/types.ts"],"sourcesContent":["/* istanbul ignore file */\n\nimport type { JWTResponse } from '@descope/web-js-sdk';\nimport { createSdk } from '@descope/web-js-sdk';\n\nexport type SdkConfig = Parameters<typeof createSdk>[0];\nexport type Sdk = ReturnType<typeof createSdk>;\n\nexport type SdkFlowNext = Sdk['flow']['next'];\n\nexport type ComponentsDynamicAttrs = {\n  attributes: Record<string, any>;\n};\n\nexport type ComponentsConfig = Record<string, any> & {\n  componentsDynamicAttrs?: Record<string, ComponentsDynamicAttrs>;\n};\nexport type CssVars = Record<string, any>;\n\ntype KeepArgsByIndex<F, Indices extends readonly number[]> = F extends (\n  ...args: infer A\n) => infer R\n  ? (...args: PickArgsByIndex<A, Indices>) => R\n  : never;\n\ntype PickArgsByIndex<\n  All extends readonly any[],\n  Indices extends readonly number[],\n> = {\n  [K in keyof Indices]: Indices[K] extends keyof All ? All[Indices[K]] : never;\n};\n\ntype Project = {\n  name: string;\n};\n\nexport enum Direction {\n  backward = 'backward',\n  forward = 'forward',\n}\n\nexport type LastAuthState = NonNullable<\n  NextFnReturnPromiseValue['data']['lastAuth']\n> & {\n  loginId?: string;\n  name?: string;\n  lastUsedPerScreen?: Record<string, string>;\n};\n\nexport type RealtimeOperandKind = 'value' | 'form' | 'list';\n\n// Operators the SDK is allowed to evaluate locally. The server's\n// clientSupportedRealtimeOperators must stay in sync — anything outside this\n// list is pre-evaluated server-side and shipped as a value operand.\n//\n// is-email / is-phone are intentionally absent: the server validates them\n// with dedicated libraries (contact.IsValid*); the client has no equivalent,\n// so the server keeps these CCs server-only.\nexport type RealtimeOperator =\n  | 'equal'\n  | 'not-equal'\n  | 'contains'\n  | 'doesnt-contains'\n  | 'greater-than'\n  | 'greater-than-or-equal'\n  | 'less-than'\n  | 'less-than-or-equal'\n  | 'empty'\n  | 'not-empty'\n  | 'is-true'\n  | 'is-false'\n  | 'in'\n  | 'not-in'\n  | 'matches';\n\nexport interface RealtimeOperand {\n  kind: RealtimeOperandKind;\n  // Form is the context key the client looks up from the live form snapshot\n  // (e.g. \"form.phone\"). Set only when kind === 'form'.\n  form?: string;\n  // Items is the operand list when kind === 'list'. Each element is a nested\n  // operand — either a form placeholder or a resolved literal. Used when the\n  // server detects an `in` / `not-in` / `contains` predicate whose array\n  // contains `{{form.X}}` references; the client resolves them at eval time.\n  items?: RealtimeOperand[];\n  // Pre-resolved literal. Set only when kind === 'value', and may legitimately\n  // be false / 0 / \"\" — do not treat absence as \"no value\" without checking\n  // kind first.\n  value?: unknown;\n}\n\nexport interface RealtimeAtomicCondition {\n  operator: RealtimeOperator;\n  target?: RealtimeOperand;\n  predicate?: RealtimeOperand;\n}\n\nexport interface RealtimeRule {\n  logicalOr?: boolean;\n  atomicConditions: RealtimeAtomicCondition[];\n}\n\nexport interface RealtimeComponentsCondition {\n  id?: string;\n  componentIds: string[];\n  action: string;\n  rules: RealtimeRule[];\n}\n\n// the server sends the full user object; only the fields the SDK reads are\n// typed here\nexport interface ScreenStateUser {\n  email?: string;\n  loginIds?: string[];\n  [key: string]: unknown;\n}\n\nexport interface ScreenState {\n  errorText?: string;\n  errorType?: string;\n  componentsConfig?: ComponentsConfig;\n  cssVars?: CssVars;\n  form?: Record<string, string>;\n  inputs?: Record<string, string>; // Backward compatibility\n  lastAuth?: LastAuthState;\n  project?: Project;\n  totp?: { image?: string; provisionUrl?: string };\n  notp?: { image?: string; redirectUrl?: string };\n  selfProvisionDomains?: unknown;\n  user?: ScreenStateUser;\n  sso?: unknown;\n  dynamicSelects?: unknown;\n  keysInUse?: unknown;\n  genericForm?: unknown;\n  linkId?: unknown;\n  sentTo?: unknown;\n  clientScripts?: ClientScript[];\n  // map of component IDs to their state — the FULL last-wins verdict over\n  // all CCs (server-only + client-eligible) the BE evaluated at screen-init.\n  // Used by `applyComponentsState` for the first DOM paint.\n  componentsState?: Record<string, string>;\n  // Subset of `componentsState` contributed by SERVER-ONLY CCs — those the\n  // client cannot re-evaluate locally (operators on the server-only\n  // allow-list like `is-email`, or rules referencing context the client\n  // doesn't have). Parallels `componentsState` in structure but excludes\n  // contributions from client-eligible CCs that also ship in\n  // `realtimeComponentsConditions`.\n  //\n  // The realtime layer uses this as the fallback action to restore when a\n  // realtime CC stops firing on a touched component — without it the SDK\n  // can't tell whether the action in `componentsState` came from a\n  // server-only CC (must persist) or from a realtime CC also re-shipped\n  // (must clear).\n  //\n  // Absent on old backends; new SDKs fall back to a legacy heuristic that\n  // infers the same information from `componentsState`, so the old-BE /\n  // new-SDK combination still works correctly.\n  serverOnlyComponentsState?: Record<string, string>;\n  // Client-evaluable visibility conditions, populated only by new backends.\n  // Absent on old backends; new SDKs ignore when absent.\n  realtimeComponentsConditions?: RealtimeComponentsCondition[];\n}\n\nexport type SSOQueryParams = {\n  oidcIdpStateId?: string;\n  samlIdpStateId?: string;\n  wsfedIdpStateId?: string;\n  samlIdpUsername?: string;\n  descopeIdpInitiated?: boolean;\n  ssoAppId?: string;\n  customAppId?: string;\n  thirdPartyAppId: string;\n  thirdPartyAppStateId?: string;\n  applicationScopes?: string;\n} & OIDCOptions;\n\nexport type OIDCOptions = {\n  oidcLoginHint?: string;\n  oidcPrompt?: string;\n  oidcErrorRedirectUri?: string;\n  oidcResource?: string;\n};\n\nexport type FlowState = {\n  flowId: string;\n  projectId: string;\n  baseUrl: string;\n  tenant: string;\n  stepId: string;\n  stepName: string;\n  executionId: string;\n  action: string;\n  redirectTo: string;\n  redirectIsPopup: boolean;\n  openInNewTabUrl?: string;\n  redirectUrl: string;\n  screenId: string;\n  screenState: ScreenState;\n  token: string;\n  code: string;\n  isPopup: boolean;\n  exchangeError: string;\n  webauthnTransactionId: string;\n  webauthnOptions: string;\n  redirectAuthCodeChallenge: string;\n  redirectAuthCallbackUrl: string;\n  redirectAuthBackupCallbackUri: string;\n  redirectAuthInitiator: string;\n  deferredRedirect: boolean;\n  deferredPolling: boolean;\n  locale: string;\n  samlIdpResponseUrl: string;\n  samlIdpResponseSamlResponse: string;\n  samlIdpResponseRelayState: string;\n  wsFedIdpResponseUrl: string;\n  wsFedIdpResponseWresult: string;\n  wsFedIdpResponseWctx: string;\n  nativeResponseType: string;\n  nativePayload: Record<string, any>;\n  reqTimestamp: number;\n} & SSOQueryParams;\n\nexport type StepState = {\n  screenState: ScreenState;\n  screenId: string;\n  stepName: string;\n  htmlFilename: string;\n  htmlLocaleFilename: string;\n  next: NextFn;\n  direction: Direction | undefined;\n  samlIdpUsername: string;\n  action?: string;\n  locale?: string;\n} & OIDCOptions;\n\nexport type CustomScreenState = Omit<\n  ScreenState,\n  // Removed from the top level of the custom-screen context:\n  // - cssVars/componentsConfig/inputs/clientScripts: internal.\n  // - errorText/errorType: reshaped into `error`.\n  // - the rest: server-produced screen data, relocated under `data`.\n  | 'cssVars'\n  | 'componentsConfig'\n  | 'inputs'\n  | 'errorText'\n  | 'errorType'\n  | 'clientScripts'\n  | 'totp'\n  | 'notp'\n  | 'sentTo'\n  | 'sso'\n  | 'selfProvisionDomains'\n> & {\n  error?: {\n    text: ScreenState['errorText'];\n    type: ScreenState['errorType'];\n  };\n  action?: string;\n  /**\n   * All server-produced screen data, in one place. Previously this data was spread\n   * across the top level and a deeply-nested, selector-keyed `componentsConfig`.\n   * Only known, documented fields are exposed (renamed/normalized); anything else is\n   * dropped. SDK-owned/reserved — a value with this key coming from the backend is ignored.\n   */\n  data?: CustomScreenData;\n};\n\n/**\n * Cleaned view of the flow screen's `componentsConfig`. Every field is optional and\n * only present when the screen actually produces it.\n */\nexport type CustomScreenData = {\n  /** TOTP MFA setup: QR image + provisioning URL. */\n  totp?: { image?: string; provisionUrl?: string };\n  /** Notification-OTP setup: image + redirect URL. */\n  notp?: { image?: string; redirectUrl?: string };\n  /** Where the OTP/code was sent — masked email and/or phone. */\n  sentTo?: { maskedEmail?: string; maskedPhone?: string };\n  /** SSO (SAML) service-provider config for SSO-setup screens. */\n  sso?: { acsUrl?: string; descopeEntityId?: string; spMetadataUrl?: string };\n  /** Email domains allowed to self-provision into the tenant. */\n  selfProvisionDomains?: string;\n  /** OAuth scopes an inbound (third-party) app is asking the user to approve. */\n  inboundAppApproveScopes?: { desc: string; id: string; required: boolean }[];\n  /** Password rules to show/enforce on a password screen. */\n  passwordPolicy?: {\n    minLength?: string;\n    strength?: string;\n    disallowedChars?: string;\n    email?: string;\n    activePolicies?: string;\n    availablePolicies?: string;\n  };\n  /** Security questions to set up, plus how many are required. */\n  securityQuestionsSetup?: {\n    questions?: { id: string; text: string }[];\n    count?: number;\n  };\n  /** Security questions to verify the user against. */\n  securityQuestionsVerify?: { questions?: { id: string; text: string }[] };\n  /** Tenants the user can pick from (tenant-selection screen). */\n  userTenants?: { label: string; value: string }[];\n  /** SSO applications the user can pick from. */\n  ssoApplications?: { label: string; value: string }[];\n  /** SSO configurations the user can pick from. */\n  ssoConfigurations?: { label: string; value: string }[];\n  /** Roles the user can pick from. */\n  userRoles?: { label: string; value: string }[];\n  /** SAML attribute-mapping options (SSO-setup screens). */\n  samlAttributeMappings?: { label: string; value: string }[];\n  /** OIDC attribute-mapping options (SSO-setup screens). */\n  oidcAttributeMappings?: { label: string; value: string }[];\n  /** SAML group-mapping options (SSO-setup screens). */\n  samlGroupMappings?: { label: string; value: string }[];\n  /** Generated MFA recovery codes to display to the user. */\n  recoveryCodes?: string[];\n  /** Outbound OAuth app button info (label, icon, app id). */\n  outboundApp?: { label?: string; iconSrc?: string; appId?: string };\n\n  // Contract rule: every key on `data` is an SDK-owned, documented name. We never\n  // place arbitrary, flow-author-controlled keys directly on `data`, so adding new\n  // named fields stays backwards-compatible (no collisions, no reshape).\n  //\n  // Reserved for a future addition: dynamic-select options. Their keys are the\n  // flow's own select field names (e.g. \"country\"), so they can't be named here —\n  // when exposed, they'll go under their own sub-map to keep them collision-free:\n  //   selects?: Record<string, { label: string; value: string }[]>;\n  // Not populated yet (see README). Adding it later is additive, not breaking.\n};\n\nexport type DebugState = {\n  isDebug: boolean;\n};\n\nexport interface ScriptElement extends HTMLDivElement {\n  moduleRes?: ScriptModule;\n}\n\nexport type ScriptModule = {\n  /**\n   * Unique identifier of the module.\n   */\n  id: string;\n  /**\n   * Notifies the module that it should start any profiling or monitoring.\n   */\n  start?: () => void;\n  /**\n   * Notifies the module that it should stop any profiling or monitoring.\n   */\n  stop?: () => void;\n  /**\n   * Presents the user with any required interaction to get a refreshed token or state,\n   * e.g., a challenge or captcha.\n   *\n   * Modules should return a value of true if the presentation completed successfully,\n   * false if it was cancelled by the user, and throw an error in case of failure.\n   *\n   * This is called before form submission (via a next call) after a button click.\n   */\n  present?: () => Promise<boolean>;\n  /**\n   * Refreshes any tokens or state that might be needed before form submission.\n   *\n   * Modules should throw an error in case of failure.\n   */\n  refresh?: () => Promise<void>;\n};\n\nexport type ClientScript = {\n  id: string;\n  initArgs: Record<string, any>;\n  resultKey?: string;\n};\n\nexport type NextFn = KeepArgsByIndex<SdkFlowNext, [2, 5]> & {\n  isCustomScreen?: boolean;\n};\nexport type NextFnReturnPromiseValue = Awaited<ReturnType<NextFn>>;\n\nexport type DebuggerMessage = {\n  title: string;\n  description?: string;\n};\n\nexport type FlowStateUpdateFn = (state: FlowState) => void;\n\ntype Operator =\n  | 'equal'\n  | 'not-equal'\n  | 'contains'\n  | 'greater-than'\n  | 'greater-than-or-equal'\n  | 'less-than'\n  | 'less-than-or-equal'\n  | 'empty'\n  | 'not-empty'\n  | 'is-true'\n  | 'is-false'\n  | 'in'\n  | 'not-in'\n  | 'in-range'\n  | 'not-in-range'\n  | 'devised-by';\n\nexport interface ClientConditionResult {\n  screenId: string;\n  screenName: string;\n  clientScripts?: ClientScript[];\n  componentsConfig?: ComponentsConfig;\n  interactionId: string;\n}\n\nexport interface ClientCondition {\n  operator: Operator;\n  key: string;\n  predicate?: string | number;\n  met: ClientConditionResult;\n  unmet?: ClientConditionResult;\n}\n\nexport type AutoFocusOptions = true | false | 'skipFirstScreen';\n\nexport type ThemeOptions = 'light' | 'dark' | 'os';\n\nexport type Key =\n  | 'lastAuth.loginId'\n  | 'idpInitiated'\n  | 'externalToken'\n  | 'abTestingKey';\n\ntype CheckFunction = (ctx: Context, predicate?: string | number) => boolean;\n\nexport type ConditionsMap = {\n  [key in Key]: {\n    [operator in Operator]?: CheckFunction;\n  };\n};\n\nexport interface Context {\n  loginId?: string;\n  code?: string;\n  token?: string;\n  abTestingKey?: number;\n  lastAuth?: LastAuthState;\n}\n\nexport type DescopeUI = Record<string, () => Promise<void>> & {\n  componentsThemeManager: Record<string, any>;\n};\n\ntype Font = {\n  family: string[];\n  label: string;\n  url?: string;\n};\n\ntype ThemeTemplate = {\n  fonts: {\n    font1: Font;\n    font2: Font;\n  };\n};\n\ntype ThemeColor = {\n  main: string;\n  dark: string;\n  light: string;\n  highlight: string;\n  contrast: string;\n};\n\nexport type OverrideTheme = {\n  globals?: {\n    colors?: {\n      primary?: ThemeColor;\n      secondary?: ThemeColor;\n    };\n  };\n};\n\nexport type OverrideThemes = {\n  dark?: OverrideTheme;\n  light?: OverrideTheme;\n};\n\nexport type FlowConfig = {\n  startScreenId?: string;\n  startScreenName?: string;\n  version: number;\n  targetLocales?: string[];\n  conditions?: ClientCondition[];\n  condition?: ClientCondition;\n  fingerprintEnabled?: boolean;\n  fingerprintKey?: string;\n  sdkScripts?: [\n    {\n      id: string;\n      initArgs: Record<string, any>;\n      resultKey?: string;\n    },\n  ];\n  clientScripts?: ClientScript[];\n  componentsConfig?: ComponentsConfig;\n};\n\nexport interface ProjectConfiguration {\n  componentsVersion: string;\n  cssTemplate: {\n    dark: ThemeTemplate;\n    light: ThemeTemplate;\n  };\n  flows: {\n    [key: string]: FlowConfig; // dynamic key names for flows\n  };\n}\n\nexport type FlowStatus = 'loading' | 'error' | 'success' | 'ready' | 'initial';\n\nexport type CustomStorage = {\n  getItem: (key: string) => string | null;\n  setItem: (key: string, value: string) => void;\n  removeItem: (key: string) => void;\n};\n\nexport type FlowJWTResponse = JWTResponse & {\n  flowOutput?: Record<string, any>;\n};\n"],"names":["Direction"],"mappings":"IAoCYA,GAAZ,SAAYA,GACVA,EAAA,SAAA,WACAA,EAAA,QAAA,SACD,CAHD,CAAYA,IAAAA,EAGX,CAAA"}